@cleocode/core 2026.6.12 → 2026.6.14

package/dist/llm/llm-queue-admit.d.ts

@@ -0,0 +1,118 @@
+/**
+ * **LLM-queue admit gate** — the Node-side gate for the supervisor's LLM-queue
+ * priority scheduler + per-provider rate governor (T11630 · AC1-AC4).
+ *
+ * The contended priority + rate state lives in the Rust arbiter
+ * (`crates/cleo-supervisor/src/llm_queue.rs`), exposed over `lease-ipc` v1.1 as
+ * the `queue_admit` → `queue_admit_result` verb. THIS module is the thin Node
+ * gate every outbound LLM call passes through immediately before it hits the
+ * wire: it asks the supervisor "may I admit this call?" and, on a `deferred`
+ * answer, backs off `retry_after_ms` and re-asks — a structured deferral, never
+ * a silent drop (AC4).
+ *
+ * ## Modes ({@link resolveLlmQueueMode})
+ *
+ * `CLEO_LLM_QUEUE_MODE` ∈ `{ supervisor | off }`, **default `off`** — mirrors
+ * {@link ../store/writer-lease.ts}'s `resolveLeaseMode()` shape:
+ *
+ * - `off` — pure pass-through: {@link llmQueueAdmit} returns `{ admitted: true }`
+ *   without touching the supervisor. The daemon is OFF by default in production,
+ *   so this is the shipping config: EVERY LLM call works with no supervisor.
+ * - `supervisor` — prefer the supervisor arbiter over the IPC socket; a
+ *   `deferred` result is honoured with a back-off + re-request. When the socket
+ *   is absent / refused / errors, the gate logs the demotion ONCE and degrades
+ *   to direct execution (`{ admitted: true }`) — a dead/absent arbiter must
+ *   NEVER block an LLM call.
+ *
+ * ## CRITICAL degrade-to-direct (headline correctness — AC4 inverse)
+ *
+ * Because the daemon stays OFF by default, the load-bearing path is the degrade:
+ * mode `off`, no socket, `E_LEASE_UNAVAILABLE`, or a connect-refused all resolve
+ * to `{ admitted: true }` and the caller executes the LLM call DIRECTLY. The
+ * supervisor is a pure OPTIMISATION; its absence is never an error.
+ *
+ * @module llm/llm-queue-admit
+ * @task T11630
+ * @epic T11625
+ * @see ../store/writer-lease.ts — the `resolveLeaseMode()` + log-once demotion this mirrors
+ * @see ../../../runtime/src/daemon/lease-ipc-client.ts — the v1.1 codec this mirrors (boundary: core cannot import runtime)
+ */
+import { type QueuePriorityClass } from '@cleocode/contracts';
+/** The LLM-queue admit gate mode. Resolved once per process; default `off`. */
+export type LlmQueueMode = 'supervisor' | 'off';
+/**
+ * The structured result of an admit gate decision. `admitted: true` means
+ * execute the LLM call now; the gate NEVER returns a "dropped" — an over-budget
+ * request is internally retried (with back-off) until admitted or the supervisor
+ * is found unavailable (then degrades to admitted-direct). AC4.
+ */
+export interface LlmAdmitResult {
+    /** Whether the LLM call may proceed (always `true` once this resolves). */
+    readonly admitted: true;
+    /**
+     * How the admission was decided — `direct` when no supervisor arbitrated
+     * (off-mode / degrade), `supervisor` when the arbiter granted it. Diagnostic
+     * only; both mean "go".
+     */
+    readonly via: 'direct' | 'supervisor';
+}
+/** Options for {@link llmQueueAdmit}. */
+export interface LlmQueueAdmitOptions {
+    /**
+     * Override the supervisor socket path. Defaults to
+     * `<cleoHome>/cleo-supervisor.sock` (or `$CLEO_SUPERVISOR_SOCKET`).
+     */
+    socketPath?: string;
+    /**
+     * Max wall-clock (ms) the gate will spend re-requesting a deferred admit
+     * before degrading to direct. Bounds the worst-case latency a starved call
+     * adds; on timeout the call proceeds (the supervisor budget is advisory, never
+     * a hard block on a real call). Default {@link DEFAULT_ADMIT_DEADLINE_MS}.
+     */
+    deadlineMs?: number;
+}
+/** Max wall-clock a deferred admit will be re-requested before degrading. */
+export declare const DEFAULT_ADMIT_DEADLINE_MS = 30000;
+/**
+ * Resolve the LLM-queue mode from `CLEO_LLM_QUEUE_MODE`, once per process.
+ *
+ * Unknown / unset values resolve to `'off'` — the production-safe default while
+ * the supervisor daemon is disabled. Mirrors `resolveLeaseMode()`.
+ *
+ * @returns The resolved {@link LlmQueueMode}.
+ * @task T11630
+ */
+export declare function resolveLlmQueueMode(): LlmQueueMode;
+/**
+ * Reset cached process-global state (mode + demotion flag). Tests only.
+ *
+ * @internal
+ */
+export declare function _resetLlmQueueStateForTest(): void;
+/**
+ * Gate an outbound LLM call through the supervisor's priority scheduler +
+ * per-provider rate governor (T11630). Call this immediately BEFORE executing
+ * the LLM request.
+ *
+ * - mode `off` (default) → returns `{ admitted: true, via: 'direct' }` with no
+ *   IPC. The shipping config.
+ * - mode `supervisor`, arbiter reachable → sends `queue_admit`; on `admitted`
+ *   returns immediately; on `deferred` awaits `retry_after_ms` and re-requests
+ *   until admitted or the deadline elapses (then degrades to direct — the budget
+ *   is advisory). AC4: a deferral is a structured wait, never a dropped call.
+ * - mode `supervisor`, arbiter UNreachable (no socket / connect-refused /
+ *   `E_LEASE_UNAVAILABLE` / any transport error) → logs the demotion once and
+ *   returns `{ admitted: true, via: 'direct' }`. A dead/absent supervisor MUST
+ *   NEVER block an LLM call.
+ *
+ * @param provider      - The provider id the call targets (rate budget is per-provider).
+ * @param priorityClass - The caller's priority class (lead > worker > background).
+ * @param estTokens     - The caller's estimate of the request's token cost.
+ * @param childId       - The child the call belongs to (in-flight tracking seam).
+ * @param opts          - Socket path + deadline overrides.
+ * @returns Always resolves to an `{ admitted: true }` result — never throws, never drops.
+ *
+ * @task T11630
+ */
+export declare function llmQueueAdmit(provider: string, priorityClass: QueuePriorityClass, estTokens: number, childId: string, opts?: LlmQueueAdmitOptions): Promise<LlmAdmitResult>;
+//# sourceMappingURL=llm-queue-admit.d.ts.map

package/dist/llm/llm-queue-admit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-queue-admit.d.ts","sourceRoot":"","sources":["../../src/llm/llm-queue-admit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAIH,OAAO,EAML,KAAK,kBAAkB,EACxB,MAAM,qBAAqB,CAAC;AAO7B,+EAA+E;AAC/E,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,KAAK,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,GAAG,EAAE,QAAQ,GAAG,YAAY,CAAC;CACvC;AAED,yCAAyC;AACzC,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,6EAA6E;AAC7E,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAwBhD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,IAAI,YAAY,CAKlD;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,IAAI,IAAI,CAGjD;AA2BD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,kBAAkB,EACjC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,oBAAyB,GAC9B,OAAO,CAAC,cAAc,CAAC,CAiDzB"}

package/dist/llm/llm-queue-admit.js

@@ -0,0 +1,275 @@
+/**
+ * **LLM-queue admit gate** — the Node-side gate for the supervisor's LLM-queue
+ * priority scheduler + per-provider rate governor (T11630 · AC1-AC4).
+ *
+ * The contended priority + rate state lives in the Rust arbiter
+ * (`crates/cleo-supervisor/src/llm_queue.rs`), exposed over `lease-ipc` v1.1 as
+ * the `queue_admit` → `queue_admit_result` verb. THIS module is the thin Node
+ * gate every outbound LLM call passes through immediately before it hits the
+ * wire: it asks the supervisor "may I admit this call?" and, on a `deferred`
+ * answer, backs off `retry_after_ms` and re-asks — a structured deferral, never
+ * a silent drop (AC4).
+ *
+ * ## Modes ({@link resolveLlmQueueMode})
+ *
+ * `CLEO_LLM_QUEUE_MODE` ∈ `{ supervisor | off }`, **default `off`** — mirrors
+ * {@link ../store/writer-lease.ts}'s `resolveLeaseMode()` shape:
+ *
+ * - `off` — pure pass-through: {@link llmQueueAdmit} returns `{ admitted: true }`
+ *   without touching the supervisor. The daemon is OFF by default in production,
+ *   so this is the shipping config: EVERY LLM call works with no supervisor.
+ * - `supervisor` — prefer the supervisor arbiter over the IPC socket; a
+ *   `deferred` result is honoured with a back-off + re-request. When the socket
+ *   is absent / refused / errors, the gate logs the demotion ONCE and degrades
+ *   to direct execution (`{ admitted: true }`) — a dead/absent arbiter must
+ *   NEVER block an LLM call.
+ *
+ * ## CRITICAL degrade-to-direct (headline correctness — AC4 inverse)
+ *
+ * Because the daemon stays OFF by default, the load-bearing path is the degrade:
+ * mode `off`, no socket, `E_LEASE_UNAVAILABLE`, or a connect-refused all resolve
+ * to `{ admitted: true }` and the caller executes the LLM call DIRECTLY. The
+ * supervisor is a pure OPTIMISATION; its absence is never an error.
+ *
+ * @module llm/llm-queue-admit
+ * @task T11630
+ * @epic T11625
+ * @see ../store/writer-lease.ts — the `resolveLeaseMode()` + log-once demotion this mirrors
+ * @see ../../../runtime/src/daemon/lease-ipc-client.ts — the v1.1 codec this mirrors (boundary: core cannot import runtime)
+ */
+import { connect } from 'node:net';
+import { join } from 'node:path';
+import { LEASE_IPC_PROTOCOL_VERSION, LeaseIpcRequestEnvelopeSchema, LeaseIpcResponseEnvelopeSchema, } from '@cleocode/contracts';
+import { getCleoHome } from '@cleocode/paths';
+import { getLogger } from '../logger.js';
+/** The supervisor IPC socket filename — MUST equal `SOCKET_NAME` in the Rust `crates/cleo-supervisor/src/paths.rs`. */
+const SUPERVISOR_SOCKET_NAME = 'cleo-supervisor.sock';
+/** Max wall-clock a deferred admit will be re-requested before degrading. */
+export const DEFAULT_ADMIT_DEADLINE_MS = 30_000;
+/** Connect timeout for the supervisor socket (ms). A slow/absent socket degrades fast. */
+const CONNECT_TIMEOUT_MS = 250;
+/** Per-request read timeout for a `queue_admit_result` (ms). */
+const REQUEST_TIMEOUT_MS = 2_000;
+/** Cap on a single deferral back-off so a misconfigured window cannot wedge a call. */
+const MAX_RETRY_BACKOFF_MS = 5_000;
+/**
+ * Lazily-memoized module logger (import-time-side-effect-free — matches the
+ * `writer-lease.ts` deferral pattern so a mocked import graph never hits a TDZ).
+ */
+let _log = null;
+function log() {
+    if (_log === null)
+        _log = getLogger('llm-queue-admit');
+    return _log;
+}
+let _cachedMode = null;
+let _supervisorDemotionLogged = false;
+/**
+ * Resolve the LLM-queue mode from `CLEO_LLM_QUEUE_MODE`, once per process.
+ *
+ * Unknown / unset values resolve to `'off'` — the production-safe default while
+ * the supervisor daemon is disabled. Mirrors `resolveLeaseMode()`.
+ *
+ * @returns The resolved {@link LlmQueueMode}.
+ * @task T11630
+ */
+export function resolveLlmQueueMode() {
+    if (_cachedMode !== null)
+        return _cachedMode;
+    const raw = process.env.CLEO_LLM_QUEUE_MODE;
+    _cachedMode = raw === 'supervisor' ? 'supervisor' : 'off';
+    return _cachedMode;
+}
+/**
+ * Reset cached process-global state (mode + demotion flag). Tests only.
+ *
+ * @internal
+ */
+export function _resetLlmQueueStateForTest() {
+    _cachedMode = null;
+    _supervisorDemotionLogged = false;
+}
+/** Log the supervisor→direct demotion AT MOST once per process. */
+function logDemotionOnce(reason) {
+    if (_supervisorDemotionLogged)
+        return;
+    _supervisorDemotionLogged = true;
+    log().info(`CLEO_LLM_QUEUE_MODE=supervisor but the LLM-queue arbiter is unavailable ` +
+        `(${reason}); degrading to direct LLM execution for the process lifetime.`);
+}
+/** The default supervisor socket path: `$CLEO_SUPERVISOR_SOCKET` or `<cleoHome>/cleo-supervisor.sock`. */
+function defaultSocketPath() {
+    const override = process.env.CLEO_SUPERVISOR_SOCKET;
+    if (override !== undefined && override.length > 0)
+        return override;
+    return join(getCleoHome(), SUPERVISOR_SOCKET_NAME);
+}
+/** The "execute directly" result — the load-bearing degrade path. */
+const ADMITTED_DIRECT = { admitted: true, via: 'direct' };
+/** Async sleep that yields the event loop. */
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, Math.max(0, Math.round(ms))));
+}
+/**
+ * Gate an outbound LLM call through the supervisor's priority scheduler +
+ * per-provider rate governor (T11630). Call this immediately BEFORE executing
+ * the LLM request.
+ *
+ * - mode `off` (default) → returns `{ admitted: true, via: 'direct' }` with no
+ *   IPC. The shipping config.
+ * - mode `supervisor`, arbiter reachable → sends `queue_admit`; on `admitted`
+ *   returns immediately; on `deferred` awaits `retry_after_ms` and re-requests
+ *   until admitted or the deadline elapses (then degrades to direct — the budget
+ *   is advisory). AC4: a deferral is a structured wait, never a dropped call.
+ * - mode `supervisor`, arbiter UNreachable (no socket / connect-refused /
+ *   `E_LEASE_UNAVAILABLE` / any transport error) → logs the demotion once and
+ *   returns `{ admitted: true, via: 'direct' }`. A dead/absent supervisor MUST
+ *   NEVER block an LLM call.
+ *
+ * @param provider      - The provider id the call targets (rate budget is per-provider).
+ * @param priorityClass - The caller's priority class (lead > worker > background).
+ * @param estTokens     - The caller's estimate of the request's token cost.
+ * @param childId       - The child the call belongs to (in-flight tracking seam).
+ * @param opts          - Socket path + deadline overrides.
+ * @returns Always resolves to an `{ admitted: true }` result — never throws, never drops.
+ *
+ * @task T11630
+ */
+export async function llmQueueAdmit(provider, priorityClass, estTokens, childId, opts = {}) {
+    if (resolveLlmQueueMode() === 'off') {
+        return ADMITTED_DIRECT;
+    }
+    const socketPath = opts.socketPath ?? defaultSocketPath();
+    const deadline = Date.now() + (opts.deadlineMs ?? DEFAULT_ADMIT_DEADLINE_MS);
+    for (;;) {
+        let result;
+        try {
+            result = await sendQueueAdmit(socketPath, {
+                kind: 'queue_admit',
+                provider,
+                priority_class: priorityClass,
+                est_tokens: Math.max(0, Math.trunc(estTokens)),
+                child_id: childId,
+            });
+        }
+        catch (err) {
+            // Any transport failure (ENOENT, ECONNREFUSED, timeout, malformed frame)
+            // → the arbiter is unavailable; degrade to direct (AC4 inverse).
+            logDemotionOnce(err instanceof Error ? err.message : String(err));
+            return ADMITTED_DIRECT;
+        }
+        if ('unavailable' in result) {
+            // The supervisor answered E_LEASE_UNAVAILABLE (arbiter not wired) →
+            // degrade to direct.
+            logDemotionOnce(result.reason);
+            return ADMITTED_DIRECT;
+        }
+        if (result.disposition === 'admitted') {
+            return { admitted: true, via: 'supervisor' };
+        }
+        // Deferred — structured back-off then re-request (AC4: never a silent drop).
+        if (Date.now() >= deadline) {
+            // The budget is advisory; a real call must not be blocked indefinitely.
+            // Past the deadline, proceed (degrade to direct) rather than starve.
+            log().debug({ provider, priorityClass, queuePosition: result.queue_position }, 'llm-queue admit deadline exceeded while deferred; proceeding directly');
+            return ADMITTED_DIRECT;
+        }
+        const backoff = Math.min(MAX_RETRY_BACKOFF_MS, Math.max(1, result.retry_after_ms));
+        await sleep(backoff);
+    }
+}
+/**
+ * Send ONE `queue_admit` over a fresh supervisor socket connection and resolve
+ * the typed `queue_admit_result` (or a sentinel when the arbiter answered
+ * `E_LEASE_UNAVAILABLE`). Connection-per-request keeps the gate stateless and
+ * transport failures isolated; the socket is closed before resolution.
+ *
+ * Encodes the request envelope + decodes the response line through the SAME
+ * `@cleocode/contracts` v1.1 Zod schemas the runtime `lease-ipc-client` uses —
+ * core cannot import `@cleocode/runtime` (cycle), so it mirrors the codec here.
+ *
+ * @throws On any transport error (connect refused, ENOENT, timeout, malformed frame).
+ */
+function sendQueueAdmit(socketPath, request) {
+    return new Promise((resolve, reject) => {
+        const id = `qa-${process.pid}-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`;
+        const envelope = LeaseIpcRequestEnvelopeSchema.parse({
+            protocol_version: LEASE_IPC_PROTOCOL_VERSION,
+            id,
+            direction: 'request',
+            request,
+        });
+        const line = `${JSON.stringify(envelope)}\n`;
+        let settled = false;
+        let buffer = '';
+        const socket = connect(socketPath);
+        const cleanup = () => {
+            socket.removeAllListeners();
+            socket.destroy();
+        };
+        const fail = (err) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            reject(err);
+        };
+        const succeed = (value) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            resolve(value);
+        };
+        socket.setTimeout(REQUEST_TIMEOUT_MS);
+        // A connect that does not complete within the bound is a degrade signal.
+        const connectTimer = setTimeout(() => fail(new Error('supervisor connect timeout')), CONNECT_TIMEOUT_MS);
+        socket.on('connect', () => {
+            clearTimeout(connectTimer);
+            socket.write(line);
+        });
+        socket.on('timeout', () => fail(new Error('supervisor request timeout')));
+        socket.on('error', (err) => {
+            clearTimeout(connectTimer);
+            fail(err);
+        });
+        socket.on('close', () => {
+            if (!settled)
+                fail(new Error('supervisor closed the connection before responding'));
+        });
+        socket.on('data', (chunk) => {
+            buffer += chunk.toString('utf8');
+            const nl = buffer.indexOf('\n');
+            if (nl < 0)
+                return; // wait for a full NDJSON line
+            const raw = buffer.slice(0, nl);
+            let json;
+            try {
+                json = JSON.parse(raw);
+            }
+            catch (cause) {
+                fail(new Error(`malformed lease-ipc frame: ${cause instanceof Error ? cause.message : cause}`));
+                return;
+            }
+            const parsed = LeaseIpcResponseEnvelopeSchema.safeParse(json);
+            if (!parsed.success) {
+                fail(new Error(`off-contract lease-ipc response: ${parsed.error.message}`));
+                return;
+            }
+            const { response } = parsed.data;
+            if (response.kind === 'queue_admit_result') {
+                succeed(response);
+                return;
+            }
+            if (response.kind === 'error') {
+                // E_LEASE_UNAVAILABLE (arbiter not wired) or any arbiter error →
+                // treat as "supervisor cannot arbitrate"; the caller degrades to direct.
+                succeed({ unavailable: true, reason: `${response.code}: ${response.message}` });
+                return;
+            }
+            // Any other kind on a queue_admit correlation is a protocol violation.
+            fail(new Error(`unexpected lease-ipc response kind for queue_admit: ${response.kind}`));
+        });
+    });
+}
+//# sourceMappingURL=llm-queue-admit.js.map

package/dist/llm/llm-queue-admit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-queue-admit.js","sourceRoot":"","sources":["../../src/llm/llm-queue-admit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EAAE,OAAO,EAAe,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,0BAA0B,EAE1B,6BAA6B,EAC7B,8BAA8B,GAG/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,uHAAuH;AACvH,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAsCtD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEhD,0FAA0F;AAC1F,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,gEAAgE;AAChE,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,uFAAuF;AACvF,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAEnC;;;GAGG;AACH,IAAI,IAAI,GAAwC,IAAI,CAAC;AACrD,SAAS,GAAG;IACV,IAAI,IAAI,KAAK,IAAI;QAAE,IAAI,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,IAAI,WAAW,GAAwB,IAAI,CAAC;AAC5C,IAAI,yBAAyB,GAAG,KAAK,CAAC;AAEtC;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC5C,WAAW,GAAG,GAAG,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1D,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B;IACxC,WAAW,GAAG,IAAI,CAAC;IACnB,yBAAyB,GAAG,KAAK,CAAC;AACpC,CAAC;AAED,mEAAmE;AACnE,SAAS,eAAe,CAAC,MAAc;IACrC,IAAI,yBAAyB;QAAE,OAAO;IACtC,yBAAyB,GAAG,IAAI,CAAC;IACjC,GAAG,EAAE,CAAC,IAAI,CACR,0EAA0E;QACxE,IAAI,MAAM,gEAAgE,CAC7E,CAAC;AACJ,CAAC;AAED,0GAA0G;AAC1G,SAAS,iBAAiB;IACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACpD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnE,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,sBAAsB,CAAC,CAAC;AACrD,CAAC;AAED,qEAAqE;AACrE,MAAM,eAAe,GAAmB,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;AAE1E,8CAA8C;AAC9C,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,aAAiC,EACjC,SAAiB,EACjB,OAAe,EACf,OAA6B,EAAE;IAE/B,IAAI,mBAAmB,EAAE,KAAK,KAAK,EAAE,CAAC;QACpC,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,iBAAiB,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,yBAAyB,CAAC,CAAC;IAE7E,SAAS,CAAC;QACR,IAAI,MAAwE,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE;gBACxC,IAAI,EAAE,aAAa;gBACnB,QAAQ;gBACR,cAAc,EAAE,aAAa;gBAC7B,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC9C,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yEAAyE;YACzE,iEAAiE;YACjE,eAAe,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAClE,OAAO,eAAe,CAAC;QACzB,CAAC;QAED,IAAI,aAAa,IAAI,MAAM,EAAE,CAAC;YAC5B,oEAAoE;YACpE,qBAAqB;YACrB,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/B,OAAO,eAAe,CAAC;QACzB,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACtC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;QAC/C,CAAC;QAED,6EAA6E;QAC7E,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,wEAAwE;YACxE,qEAAqE;YACrE,GAAG,EAAE,CAAC,KAAK,CACT,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,cAAc,EAAE,EACjE,uEAAuE,CACxE,CAAC;YACF,OAAO,eAAe,CAAC;QACzB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;QACnF,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,cAAc,CACrB,UAAkB,EAClB,OAAwB;IAExB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACpG,MAAM,QAAQ,GAAG,6BAA6B,CAAC,KAAK,CAAC;YACnD,gBAAgB,EAAE,0BAA0B;YAC5C,EAAE;YACF,SAAS,EAAE,SAAkB;YAC7B,OAAO;SACR,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;QAE7C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,MAAM,GAAW,OAAO,CAAC,UAAU,CAAC,CAAC;QAE3C,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,GAAU,EAAQ,EAAE;YAChC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CACd,KAAuE,EACjE,EAAE;YACR,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC;QAEF,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACtC,yEAAyE;QACzE,MAAM,YAAY,GAAG,UAAU,CAC7B,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,EACnD,kBAAkB,CACnB,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACxB,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC;QAC1E,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,EAAE,GAAG,CAAC;gBAAE,OAAO,CAAC,8BAA8B;YAClD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChC,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CACF,IAAI,KAAK,CAAC,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAC1F,CAAC;gBACF,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,8BAA8B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,IAAI,CAAC,IAAI,KAAK,CAAC,oCAAoC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC5E,OAAO;YACT,CAAC;YACD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;YACjC,IAAI,QAAQ,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAC3C,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAClB,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC9B,iEAAiE;gBACjE,yEAAyE;gBACzE,OAAO,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAChF,OAAO;YACT,CAAC;YACD,uEAAuE;YACvE,IAAI,CAAC,IAAI,KAAK,CAAC,uDAAuD,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1F,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/llm/oauth/device-code.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"device-code.d.ts","sourceRoot":"","sources":["../../../src/llm/oauth/device-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAMH;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,8DAA8D;IAC9D,QAAQ,EAAE,WAAW,GAAG,MAAM,CAAC;IAC/B;;;;;OAKG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD;;;GAGG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBAEb,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAQ9C;AAED;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;CAQrE;AAMD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,GAAG,gBAAgB,CAQpF;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,2BAA2B,IAAI,gBAAgB,CAc9D;AAoCD;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAyDjG;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,uBAAuB,EAClC,OAAO,CAAC,EAAE;IACR,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IACzD,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GACA,OAAO,CAAC,uBAAuB,CAAC,CA0FlC"}
+{"version":3,"file":"device-code.d.ts","sourceRoot":"","sources":["../../../src/llm/oauth/device-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAQH;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,8DAA8D;IAC9D,QAAQ,EAAE,WAAW,GAAG,MAAM,CAAC;IAC/B;;;;;OAKG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD;;;GAGG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBAEb,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAQ9C;AAED;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;CAQrE;AAMD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,GAAG,gBAAgB,CAQpF;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,2BAA2B,IAAI,gBAAgB,CAc9D;AAoCD;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAmDjG;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,uBAAuB,EAClC,OAAO,CAAC,EAAE;IACR,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IACzD,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GACA,OAAO,CAAC,uBAAuB,CAAC,CA0FlC"}

package/dist/llm/oauth/device-code.js

@@ -17,6 +17,7 @@
  * @task T9321
  * @epic T9261 T-LLM-CRED-CENTRALIZATION
  */
+import { extractOAuthErrorDetail } from './pkce.js';
 // ---------------------------------------------------------------------------
 // Internal error types
 // ---------------------------------------------------------------------------
@@ -153,14 +154,7 @@ export async function startDeviceCodeFlow(cfg) {
         body: encodeForm(body),
     });
     if (!resp.ok) {
-        let detail = '';
-        try {
-            const errBody = (await resp.json());
-            detail = ` — ${String(errBody['error_description'] ?? errBody['error'] ?? '')}`;
-        }
-        catch {
-            /* ignore — non-JSON body */
-        }
+        const detail = await extractOAuthErrorDetail(resp);
         throw new Error(`Device code request failed for provider '${cfg.provider}': HTTP ${resp.status}${detail}`);
     }
     const data = (await resp.json());

package/dist/llm/oauth/device-code.js.map

@@ -1 +1 @@
-{"version":3,"file":"device-code.js","sourceRoot":"","sources":["../../../src/llm/oauth/device-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAyFH,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,QAAQ,CAAS;IACjB,OAAO,CAAS;IAEzB,YAAY,QAAgB,EAAE,OAAe;QAC3C,KAAK,CACH,6CAA6C,OAAO,0CAA0C,QAAQ,GAAG,CAC1G,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,QAAQ,CAAS;IACjB,SAAS,CAAS;IAE3B,YAAY,QAAgB,EAAE,SAAiB,EAAE,WAAmB;QAClE,KAAK,CACH,+CAA+C,QAAQ,MAAM,SAAS,MAAM,WAAW,EAAE,CAC1F,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAA8B;IAChE,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,OAAO,2BAA2B,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,IAAI,KAAK,CACb,8CAA8C,QAAQ,KAAK;QACzD,wEAAwE,CAC3E,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,2BAA2B;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,uBAAuB,CAAC;IAC5E,OAAO;QACL,QAAQ,EAAE,WAAW;QACrB,aAAa,EAAE,GAAG,IAAI,iCAAiC;QACvD,QAAQ,EAAE,GAAG,IAAI,kBAAkB;QACnC,kEAAkE;QAClE,sEAAsE;QACtE,yBAAyB;QACzB,QAAQ,EAAE,sCAAsC;QAChD,wEAAwE;QACxE,uEAAuE;QACvE,uDAAuD;KACxD,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,0EAA0E;AAC1E,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,+EAA+E;AAC/E,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAErC;;;;GAIG;AACH,SAAS,YAAY,CAAC,GAAqB;IACzC,OAAO;QACL,cAAc,EAAE,mCAAmC;QACnD,MAAM,EAAE,kBAAkB;QAC1B,GAAG,GAAG,CAAC,cAAc;KACtB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,MAA8B;IAChD,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAqB;IAC7D,MAAM,IAAI,GAA2B,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;IACjE,IAAI,GAAG,CAAC,KAAK;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;IAEzC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE;QAC1C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC;QAC1B,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC;KACvB,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;YAC/D,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4CAA4C,GAAG,CAAC,QAAQ,WAAW,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,CAC1F,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;IAE5D,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAElC,IACE,OAAO,UAAU,KAAK,QAAQ;QAC9B,OAAO,QAAQ,KAAK,QAAQ;QAC5B,OAAO,eAAe,KAAK,QAAQ;QACnC,OAAO,SAAS,KAAK,QAAQ;QAC7B,OAAO,QAAQ,KAAK,QAAQ,EAC5B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,8BAA8B,GAAG,CAAC,QAAQ,6BAA6B;YACrE,QAAQ,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAC9C,CAAC;IACJ,CAAC;IAED,MAAM,uBAAuB,GAC3B,OAAO,IAAI,CAAC,2BAA2B,CAAC,KAAK,QAAQ;QACnD,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC;QACnC,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO;QACL,UAAU;QACV,QAAQ;QACR,eAAe;QACf,uBAAuB;QACvB,SAAS;QACT,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAqB,EACrB,SAAkC,EAClC,OAGC;IAED,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC;IACtD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;IAE5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC;IAC/C,IAAI,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACjF,IAAI,wBAAwB,GAAG,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,6CAA6C,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,IAAc,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;gBAC/B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC;gBAC1B,IAAI,EAAE,UAAU,CAAC;oBACf,UAAU,EAAE,8CAA8C;oBAC1D,SAAS,EAAE,GAAG,CAAC,QAAQ;oBACvB,WAAW,EAAE,UAAU;iBACxB,CAAC;gBACF,MAAM;aACP,CAAC,CAAC;YACH,mEAAmE;YACnE,wBAAwB,GAAG,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wBAAwB,EAAE,CAAC;YAC3B,IAAI,wBAAwB,GAAG,mBAAmB,EAAE,CAAC;gBACnD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,0DAA0D;YAC1D,MAAM,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;YAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;YACzC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CACb,uBAAuB,GAAG,CAAC,QAAQ,yCAAyC,CAC7E,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,WAAW;gBACX,YAAY,EAAE,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC3F,SAAS,EAAE,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;gBAClF,SAAS,EAAE,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ;aAClF,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,IAAI,YAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,YAAY,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;YAChD,MAAM,IAAI,KAAK,CACb,uBAAuB,GAAG,CAAC,QAAQ,mBAAmB,IAAI,CAAC,MAAM,qBAAqB,CACvF,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,gBAAgB,GAAG,MAAM,CAC7B,YAAY,CAAC,mBAAmB,CAAC,IAAI,6BAA6B,CACnE,CAAC;QAEF,IAAI,SAAS,KAAK,uBAAuB,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;YAC5D,SAAS,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAChC,MAAM,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QAED,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;YAC9B,0DAA0D;YAC1D,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,GAAG,CAAC,EAAE,yBAAyB,CAAC,CAAC;YAC3E,MAAM,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QAED,yCAAyC;QACzC,MAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5D,MAAM,IAAI,sBAAsB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;GAIG;AACH,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}
+{"version":3,"file":"device-code.js","sourceRoot":"","sources":["../../../src/llm/oauth/device-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAyFpD,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,QAAQ,CAAS;IACjB,OAAO,CAAS;IAEzB,YAAY,QAAgB,EAAE,OAAe;QAC3C,KAAK,CACH,6CAA6C,OAAO,0CAA0C,QAAQ,GAAG,CAC1G,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,QAAQ,CAAS;IACjB,SAAS,CAAS;IAE3B,YAAY,QAAgB,EAAE,SAAiB,EAAE,WAAmB;QAClE,KAAK,CACH,+CAA+C,QAAQ,MAAM,SAAS,MAAM,WAAW,EAAE,CAC1F,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAA8B;IAChE,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,OAAO,2BAA2B,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,IAAI,KAAK,CACb,8CAA8C,QAAQ,KAAK;QACzD,wEAAwE,CAC3E,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,2BAA2B;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,uBAAuB,CAAC;IAC5E,OAAO;QACL,QAAQ,EAAE,WAAW;QACrB,aAAa,EAAE,GAAG,IAAI,iCAAiC;QACvD,QAAQ,EAAE,GAAG,IAAI,kBAAkB;QACnC,kEAAkE;QAClE,sEAAsE;QACtE,yBAAyB;QACzB,QAAQ,EAAE,sCAAsC;QAChD,wEAAwE;QACxE,uEAAuE;QACvE,uDAAuD;KACxD,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,0EAA0E;AAC1E,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,+EAA+E;AAC/E,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAErC;;;;GAIG;AACH,SAAS,YAAY,CAAC,GAAqB;IACzC,OAAO;QACL,cAAc,EAAE,mCAAmC;QACnD,MAAM,EAAE,kBAAkB;QAC1B,GAAG,GAAG,CAAC,cAAc;KACtB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,MAA8B;IAChD,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAqB;IAC7D,MAAM,IAAI,GAA2B,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;IACjE,IAAI,GAAG,CAAC,KAAK;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;IAEzC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE;QAC1C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC;QAC1B,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC;KACvB,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,4CAA4C,GAAG,CAAC,QAAQ,WAAW,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,CAC1F,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;IAE5D,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAElC,IACE,OAAO,UAAU,KAAK,QAAQ;QAC9B,OAAO,QAAQ,KAAK,QAAQ;QAC5B,OAAO,eAAe,KAAK,QAAQ;QACnC,OAAO,SAAS,KAAK,QAAQ;QAC7B,OAAO,QAAQ,KAAK,QAAQ,EAC5B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,8BAA8B,GAAG,CAAC,QAAQ,6BAA6B;YACrE,QAAQ,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAC9C,CAAC;IACJ,CAAC;IAED,MAAM,uBAAuB,GAC3B,OAAO,IAAI,CAAC,2BAA2B,CAAC,KAAK,QAAQ;QACnD,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC;QACnC,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO;QACL,UAAU;QACV,QAAQ;QACR,eAAe;QACf,uBAAuB;QACvB,SAAS;QACT,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAqB,EACrB,SAAkC,EAClC,OAGC;IAED,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC;IACtD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;IAE5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC;IAC/C,IAAI,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACjF,IAAI,wBAAwB,GAAG,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,6CAA6C,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,IAAc,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;gBAC/B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC;gBAC1B,IAAI,EAAE,UAAU,CAAC;oBACf,UAAU,EAAE,8CAA8C;oBAC1D,SAAS,EAAE,GAAG,CAAC,QAAQ;oBACvB,WAAW,EAAE,UAAU;iBACxB,CAAC;gBACF,MAAM;aACP,CAAC,CAAC;YACH,mEAAmE;YACnE,wBAAwB,GAAG,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wBAAwB,EAAE,CAAC;YAC3B,IAAI,wBAAwB,GAAG,mBAAmB,EAAE,CAAC;gBACnD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,0DAA0D;YAC1D,MAAM,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;YAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;YACzC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CACb,uBAAuB,GAAG,CAAC,QAAQ,yCAAyC,CAC7E,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,WAAW;gBACX,YAAY,EAAE,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC3F,SAAS,EAAE,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;gBAClF,SAAS,EAAE,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ;aAClF,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,IAAI,YAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,YAAY,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;YAChD,MAAM,IAAI,KAAK,CACb,uBAAuB,GAAG,CAAC,QAAQ,mBAAmB,IAAI,CAAC,MAAM,qBAAqB,CACvF,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,gBAAgB,GAAG,MAAM,CAC7B,YAAY,CAAC,mBAAmB,CAAC,IAAI,6BAA6B,CACnE,CAAC;QAEF,IAAI,SAAS,KAAK,uBAAuB,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;YAC5D,SAAS,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAChC,MAAM,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QAED,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;YAC9B,0DAA0D;YAC1D,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,GAAG,CAAC,EAAE,yBAAyB,CAAC,CAAC;YAC3E,MAAM,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QAED,yCAAyC;QACzC,MAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5D,MAAM,IAAI,sBAAsB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;GAIG;AACH,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/llm/oauth/google-pkce.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google-pkce.d.ts","sourceRoot":"","sources":["../../../src/llm/oauth/google-pkce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAMH;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B,wCAAwC,CAAC;AAEjF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAE5D;;;GAGG;AACH,eAAO,MAAM,wBAAwB,8BAA8B,CAAC;AASpE;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,6EAA0F,CAAC;AAEhI;;;;;;;;GAQG;AACH,eAAO,MAAM,4BAA4B,wCAA2C,CAAC;AAerF;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,wBAAwB,CAC5C,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,oBAAoB,CAAC,CAqD/B"}
+{"version":3,"file":"google-pkce.d.ts","sourceRoot":"","sources":["../../../src/llm/oauth/google-pkce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAQH;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B,wCAAwC,CAAC;AAEjF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAE5D;;;GAGG;AACH,eAAO,MAAM,wBAAwB,8BAA8B,CAAC;AASpE;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,6EAA0F,CAAC;AAEhI;;;;;;;;GAQG;AACH,eAAO,MAAM,4BAA4B,wCAA2C,CAAC;AAerF;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,wBAAwB,CAC5C,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,oBAAoB,CAAC,CAqD/B"}

package/dist/llm/oauth/google-pkce.js

@@ -38,6 +38,7 @@
  * @task T9418
  * @epic E-CONFIG-AUTH-UNIFY (E2a)
  */
+import { extractOAuthErrorDetail } from './pkce.js';
 // ---------------------------------------------------------------------------
 // Constants
 // ---------------------------------------------------------------------------
@@ -140,7 +141,7 @@ export async function refreshGoogleAccessToken(refreshToken) {
         body: body.toString(),
     });
     if (!resp.ok) {
-        const detail = await extractErrorDetail(resp);
+        const detail = await extractOAuthErrorDetail(resp);
         throw new Error(`Google OAuth refresh failed: HTTP ${resp.status}${detail}`);
     }
     const parsed = (await resp.json());
@@ -164,21 +165,4 @@ export async function refreshGoogleAccessToken(refreshToken) {
 // ---------------------------------------------------------------------------
 // Internal helpers
 // ---------------------------------------------------------------------------
-/**
- * Best-effort extraction of a human-readable error detail from a non-OK
- * token-endpoint response. Mirrors the helper in `oauth/pkce.ts` so the
- * error-message shape stays consistent across the LLM layer.
- *
- * @internal
- */
-async function extractErrorDetail(resp) {
-    try {
-        const body = (await resp.json());
-        const desc = body['error_description'] ?? body['error'];
-        return desc ? ` — ${String(desc)}` : '';
-    }
-    catch {
-        return '';
-    }
-}
 //# sourceMappingURL=google-pkce.js.map

package/dist/llm/oauth/google-pkce.js.map

@@ -1 +1 @@
-{"version":3,"file":"google-pkce.js","sourceRoot":"","sources":["../../../src/llm/oauth/google-pkce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,qCAAqC,CAAC;AAEjF;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,2BAA2B,CAAC;AAEpE,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,MAAM,6BAA6B,GAAG,cAAc,CAAC;AACrD,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AAClE,MAAM,4BAA4B,GAAG,8BAA8B,CAAC;AAEpE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,6BAA6B,IAAI,sBAAsB,6BAA6B,CAAC;AAEhI;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,UAAU,4BAA4B,EAAE,CAAC;AAErF;;;;;;GAMG;AACH,MAAM,0BAA0B,GAAG,IAAI,CAAC;AA8BxC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,YAAoB;IAEpB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,wBAAwB,CAAC;IAC9F,MAAM,YAAY,GAChB,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,4BAA4B,CAAC;IAEvF,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,eAAe;QAC3B,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,YAAY;KAC5B,CAAC,CAAC;IACH,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,2BAA2B,EAAE;QAC/D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC9D,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,gBAAgB,GACpB,OAAO,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC;QACnF,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,0BAA0B,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,GAAG,IAAI,CAAC;IAEvD,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IACxC,MAAM,eAAe,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAErF,OAAO;QACL,WAAW;QACX,SAAS;QACT,YAAY,EAAE,eAAe;KAC9B,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;;GAMG;AACH,KAAK,UAAU,kBAAkB,CAAC,IAAc;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"google-pkce.js","sourceRoot":"","sources":["../../../src/llm/oauth/google-pkce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAEpD,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,qCAAqC,CAAC;AAEjF;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,2BAA2B,CAAC;AAEpE,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,MAAM,6BAA6B,GAAG,cAAc,CAAC;AACrD,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AAClE,MAAM,4BAA4B,GAAG,8BAA8B,CAAC;AAEpE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,6BAA6B,IAAI,sBAAsB,6BAA6B,CAAC;AAEhI;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,UAAU,4BAA4B,EAAE,CAAC;AAErF;;;;;;GAMG;AACH,MAAM,0BAA0B,GAAG,IAAI,CAAC;AA8BxC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,YAAoB;IAEpB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,wBAAwB,CAAC;IAC9F,MAAM,YAAY,GAChB,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,4BAA4B,CAAC;IAEvF,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,eAAe;QAC3B,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,YAAY;KAC5B,CAAC,CAAC;IACH,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,2BAA2B,EAAE;QAC/D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC9D,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,gBAAgB,GACpB,OAAO,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC;QACnF,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,0BAA0B,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,GAAG,IAAI,CAAC;IAEvD,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IACxC,MAAM,eAAe,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAErF,OAAO;QACL,WAAW;QACX,SAAS;QACT,YAAY,EAAE,eAAe;KAC9B,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E"}

package/dist/llm/oauth/pkce.d.ts

@@ -99,6 +99,27 @@ export interface BuildAuthorizationUrlParams {
  * @task T9302
  */
 export declare function buildAuthorizationUrl(params: BuildAuthorizationUrlParams): string;
+/**
+ * Parse a user-pasted authorization response into `{ code, state }`.
+ *
+ * Accepts every form a provider's callback page can hand the user
+ * (mirrors pi-ai's `parseAuthorizationInput`):
+ * - a full redirect URL — `https://…/callback?code=…&state=…`
+ * - the `code#state` pair Anthropic's hosted callback page displays
+ * - a bare query string — `code=…&state=…`
+ * - a bare authorization code
+ *
+ * Callers MUST validate a returned `state` against the authorize-time state
+ * (CSRF check, RFC 6749 §10.12) before exchanging the code.
+ *
+ * @param input - Raw pasted text from the user.
+ * @returns Extracted `code` and `state` (either may be `undefined`).
+ * @task T11958
+ */
+export declare function parseAuthorizationInput(input: string): {
+    code?: string;
+    state?: string;
+};
 /**
  * Parameters for the PKCE authorization code exchange.
  *
@@ -119,6 +140,22 @@ export interface ExchangePkceCodeParams {
     tokenEndpoint: string;
     /** Extra headers (e.g. provider-specific beta flags). */
     extraHeaders?: Readonly<Record<string, string>>;
+    /**
+     * The `state` value from the original authorization request.
+     *
+     * Only sent when `bodyFormat` is `'json'` — Anthropic's token endpoint
+     * validates the (code, state) pair bound at authorize time and rejects the
+     * exchange without it. RFC-compliant form-encoded endpoints do not define
+     * `state` on the token request, so it is omitted there.
+     */
+    state?: string;
+    /**
+     * Token request body encoding. `'form'` (RFC 6749 default) or `'json'`
+     * (Anthropic). See `ProviderOAuthConfig.tokenBodyFormat`.
+     *
+     * @default 'form'
+     */
+    bodyFormat?: 'form' | 'json';
 }
 /**
  * Exchange an authorization code + PKCE verifier for access and refresh tokens.
@@ -148,6 +185,13 @@ export interface RefreshPkceTokenParams {
     tokenEndpoint: string;
     /** Extra headers (e.g. provider-specific beta flags). */
     extraHeaders?: Readonly<Record<string, string>>;
+    /**
+     * Token request body encoding. `'form'` (RFC 6749 default) or `'json'`
+     * (Anthropic). See `ProviderOAuthConfig.tokenBodyFormat`.
+     *
+     * @default 'form'
+     */
+    bodyFormat?: 'form' | 'json';
 }
 /**
  * Refresh an access token using the `refresh_token` grant (RFC 6749 §6).
@@ -162,4 +206,30 @@ export interface RefreshPkceTokenParams {
  * @task T9302
  */
 export declare function refreshPkceToken(params: RefreshPkceTokenParams): Promise<OAuthTokens>;
+/**
+ * Extract a human-readable error detail string from a non-OK OAuth HTTP
+ * response.
+ *
+ * The single shared extractor for every OAuth surface in the LLM layer
+ * (`pkce.ts`, `google-pkce.ts`, `device-code.ts`) — local copies drifted and
+ * re-introduced the `[object Object]` masking of DHQ-075 (T11958).
+ *
+ * Strategy:
+ * 1. Clone the response so the body stream is not consumed by the primary
+ *    error path (callers may need the body for further inspection).
+ * 2. Parse as JSON; use `error_description` or `error` fields (RFC 6749 §5.2).
+ *    When the field is an object (Anthropic nests
+ *    `{"error": {"type", "message"}}`), extract `message`/`type` — never
+ *    `String(object)`.
+ * 3. Fall back to the raw text body when JSON parsing fails (e.g. HTML pages
+ *    returned by a WAF or a misconfigured reverse proxy). Truncate at 512 chars
+ *    so a multi-kilobyte HTML page does not flood the error message.
+ * 4. Return `''` only when all fallbacks are exhausted.
+ *
+ * This ensures the caller never sees `[object Object]` in the thrown message
+ * and always surfaces the actual HTTP response body for debugging.
+ *
+ * @task T11958
+ */
+export declare function extractOAuthErrorDetail(resp: Response): Promise<string>;
 //# sourceMappingURL=pkce.d.ts.map

package/dist/llm/oauth/pkce.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../../../src/llm/oauth/pkce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAGpE,YAAY,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAMpE;;;;;;;;;GASG;AACH,MAAM,WAAW,QAAQ;IACvB;;;;;OAKG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB;AAMD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,QAAQ,CAAC,CAS1D;AAMD;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,oCAAoC;IACpC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,WAAW,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,aAAa,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAChD;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,2BAA2B,GAAG,MAAM,CAkBjF;AAMD;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,YAAY,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,yDAAyD;IACzD,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACjD;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC,CA2B3F;AAMD;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,YAAY,EAAE,MAAM,CAAC;IACrB,0BAA0B;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,yDAAyD;IACzD,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACjD;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC,CAyB3F"}
+{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../../../src/llm/oauth/pkce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAGpE,YAAY,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAMpE;;;;;;;;;GASG;AACH,MAAM,WAAW,QAAQ;IACvB;;;;;OAKG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB;AAMD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,QAAQ,CAAC,CAS1D;AAMD;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,oCAAoC;IACpC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,WAAW,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,aAAa,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAChD;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,2BAA2B,GAAG,MAAM,CAkBjF;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAwBxF;AAMD;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,YAAY,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,yDAAyD;IACzD,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC,CAwB3F;AAMD;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,YAAY,EAAE,MAAM,CAAC;IACrB,0BAA0B;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,yDAAyD;IACzD,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC,CAiB3F;AAyED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CA6B7E"}