@duckcodeailabs/dql-cli 1.6.30 → 1.6.31

package/dist/providers/oauth/codex-oauth.js

@@ -0,0 +1,410 @@
+import * as os from 'node:os';
+import * as crypto from 'node:crypto';
+import * as http from 'node:http';
+import { URL } from 'node:url';
+import { getCodexCredentials, setCodexCredentials, clearOAuthProvider, } from './oauth-store.js';
+import { CodexCliProvider } from '../subscription-cli.js';
+/**
+ * ChatGPT Plus/Pro subscription login via OpenAI OAuth 2.0 + PKCE, and a provider
+ * that drives the ChatGPT Codex backend with the resulting bearer token.
+ *
+ * Ported from the reference coding-extension flow. Tokens live in the `chmod 600`
+ * `.dql/oauth-credentials.json` file. Same ToS caveat as the Claude flow: this
+ * reuses the official Codex OAuth client id against a subscription; the provider
+ * falls back to the CLI-passthrough path when not connected.
+ */
+export const CODEX_OAUTH_CONFIG = {
+    authorizationEndpoint: 'https://auth.openai.com/oauth/authorize',
+    tokenEndpoint: 'https://auth.openai.com/oauth/token',
+    clientId: 'app_EMoamEEZ73f0CkXaXp7hrann',
+    redirectUri: 'http://localhost:1455/auth/callback',
+    scopes: 'openid profile email offline_access',
+    callbackPort: 1455,
+};
+const CODEX_API_BASE_URL = 'https://chatgpt.com/backend-api/codex';
+/** ChatGPT subscription models exposed after login (static list; default first). */
+export const CODEX_OAUTH_MODELS = ['gpt-5.2-codex', 'gpt-5.1-codex', 'gpt-5-codex', 'gpt-5-codex-mini'];
+export const CODEX_OAUTH_DEFAULT_MODEL = 'gpt-5.2-codex';
+export function generateCodeVerifier() {
+    return crypto.randomBytes(32).toString('base64url');
+}
+export function generateCodeChallenge(verifier) {
+    return crypto.createHash('sha256').update(verifier).digest().toString('base64url');
+}
+export function generateState() {
+    return crypto.randomBytes(16).toString('hex');
+}
+export function buildAuthorizationUrl(codeChallenge, state) {
+    const params = new URLSearchParams({
+        client_id: CODEX_OAUTH_CONFIG.clientId,
+        redirect_uri: CODEX_OAUTH_CONFIG.redirectUri,
+        scope: CODEX_OAUTH_CONFIG.scopes,
+        code_challenge: codeChallenge,
+        code_challenge_method: 'S256',
+        response_type: 'code',
+        state,
+        codex_cli_simplified_flow: 'true',
+        originator: 'roo-code',
+    });
+    return `${CODEX_OAUTH_CONFIG.authorizationEndpoint}?${params.toString()}`;
+}
+function parseJwtClaims(token) {
+    const parts = token.split('.');
+    if (parts.length !== 3)
+        return undefined;
+    try {
+        return JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf-8'));
+    }
+    catch {
+        return undefined;
+    }
+}
+function extractAccountIdFromClaims(claims) {
+    return (claims.chatgpt_account_id ||
+        claims['https://api.openai.com/auth']?.chatgpt_account_id ||
+        claims.organizations?.[0]?.id);
+}
+export function extractAccountId(tokens) {
+    if (tokens.id_token) {
+        const claims = parseJwtClaims(tokens.id_token);
+        const accountId = claims && extractAccountIdFromClaims(claims);
+        if (accountId)
+            return accountId;
+    }
+    const claims = parseJwtClaims(tokens.access_token);
+    return claims ? extractAccountIdFromClaims(claims) : undefined;
+}
+function parseTokenResponse(data) {
+    const d = data;
+    if (!d || typeof d.access_token !== 'string' || typeof d.expires_in !== 'number') {
+        throw new Error('Codex OAuth: malformed token response');
+    }
+    return { access_token: d.access_token, refresh_token: d.refresh_token, id_token: d.id_token, expires_in: d.expires_in, email: d.email };
+}
+export async function exchangeCodeForTokens(code, codeVerifier) {
+    const body = new URLSearchParams({
+        grant_type: 'authorization_code',
+        client_id: CODEX_OAUTH_CONFIG.clientId,
+        code,
+        redirect_uri: CODEX_OAUTH_CONFIG.redirectUri,
+        code_verifier: codeVerifier,
+    });
+    const response = await fetch(CODEX_OAUTH_CONFIG.tokenEndpoint, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: body.toString(),
+        signal: AbortSignal.timeout(30000),
+    });
+    if (!response.ok) {
+        throw new Error(`Codex OAuth token exchange failed: ${response.status} ${await response.text().catch(() => response.statusText)}`);
+    }
+    const token = parseTokenResponse(await response.json());
+    if (!token.refresh_token)
+        throw new Error('Codex OAuth: token exchange did not return a refresh_token');
+    return {
+        type: 'openai-codex',
+        access_token: token.access_token,
+        refresh_token: token.refresh_token,
+        expires: Date.now() + token.expires_in * 1000,
+        email: token.email,
+        accountId: extractAccountId({ id_token: token.id_token, access_token: token.access_token }),
+    };
+}
+export async function refreshAccessToken(credentials) {
+    const body = new URLSearchParams({
+        grant_type: 'refresh_token',
+        client_id: CODEX_OAUTH_CONFIG.clientId,
+        refresh_token: credentials.refresh_token,
+    });
+    const response = await fetch(CODEX_OAUTH_CONFIG.tokenEndpoint, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: body.toString(),
+        signal: AbortSignal.timeout(30000),
+    });
+    if (!response.ok) {
+        throw new Error(`Codex OAuth token refresh failed: ${response.status} ${await response.text().catch(() => response.statusText)}`);
+    }
+    const token = parseTokenResponse(await response.json());
+    return {
+        type: 'openai-codex',
+        access_token: token.access_token,
+        refresh_token: token.refresh_token ?? credentials.refresh_token,
+        expires: Date.now() + token.expires_in * 1000,
+        email: token.email ?? credentials.email,
+        accountId: extractAccountId({ id_token: token.id_token, access_token: token.access_token }) ?? credentials.accountId,
+    };
+}
+export function isTokenExpired(credentials) {
+    const bufferMs = 5 * 60 * 1000;
+    return Date.now() >= credentials.expires - bufferMs;
+}
+export class CodexOAuthManager {
+    projectRoot;
+    pendingAuth = null;
+    refreshPromise = null;
+    constructor(projectRoot) {
+        this.projectRoot = projectRoot;
+    }
+    cancelAuthorizationFlow() {
+        const prior = this.pendingAuth;
+        this.pendingAuth = null;
+        if (!prior)
+            return;
+        // Settle the in-flight callback promise so its port + closure are released.
+        if (prior.reject)
+            prior.reject(new Error('Authorization flow superseded'));
+        if (prior.server) {
+            try {
+                prior.server.close();
+            }
+            catch { /* noop */ }
+        }
+    }
+    /** True while a login is in flight (callback server listening). */
+    isPending() {
+        return this.pendingAuth !== null;
+    }
+    startAuthorizationFlow() {
+        this.cancelAuthorizationFlow();
+        const codeVerifier = generateCodeVerifier();
+        const codeChallenge = generateCodeChallenge(codeVerifier);
+        const state = generateState();
+        this.pendingAuth = { codeVerifier, state };
+        return buildAuthorizationUrl(codeChallenge, state);
+    }
+    async waitForCallback() {
+        if (!this.pendingAuth)
+            throw new Error('No pending authorization flow');
+        const pending = this.pendingAuth;
+        const { codeVerifier, state } = pending;
+        return new Promise((resolve, reject) => {
+            pending.reject = reject;
+            const server = http.createServer(async (req, res) => {
+                try {
+                    const url = new URL(req.url || '', `http://localhost:${CODEX_OAUTH_CONFIG.callbackPort}`);
+                    if (url.pathname !== '/auth/callback') {
+                        res.writeHead(404);
+                        res.end('Not Found');
+                        return;
+                    }
+                    const code = url.searchParams.get('code');
+                    const receivedState = url.searchParams.get('state');
+                    if (!code || !receivedState) {
+                        res.writeHead(400);
+                        res.end('Missing code or state');
+                        return;
+                    }
+                    if (receivedState !== state) {
+                        res.writeHead(400);
+                        res.end('Invalid state');
+                        return;
+                    }
+                    const credentials = await exchangeCodeForTokens(code, codeVerifier);
+                    setCodexCredentials(this.projectRoot, credentials);
+                    res.writeHead(200, { 'Content-Type': 'text/html' });
+                    res.end('<html><body style="font-family:system-ui;padding:40px">Signed in to ChatGPT. You can close this tab and return to DQL.</body></html>');
+                    server.close();
+                    this.pendingAuth = null;
+                    resolve(credentials);
+                }
+                catch (error) {
+                    try {
+                        res.writeHead(500);
+                        res.end('Authentication failed');
+                    }
+                    catch { /* noop */ }
+                    try {
+                        server.close();
+                    }
+                    catch { /* noop */ }
+                    this.pendingAuth = null;
+                    reject(error);
+                }
+            });
+            pending.server = server;
+            const timeout = setTimeout(() => {
+                try {
+                    server.close();
+                }
+                catch { /* noop */ }
+                if (this.pendingAuth === pending)
+                    this.pendingAuth = null;
+                reject(new Error('Codex OAuth callback timed out'));
+            }, 5 * 60 * 1000);
+            server.on('close', () => clearTimeout(timeout));
+            server.on('error', (err) => {
+                clearTimeout(timeout);
+                if (this.pendingAuth === pending)
+                    this.pendingAuth = null;
+                reject(err);
+            });
+            server.listen(CODEX_OAUTH_CONFIG.callbackPort);
+        });
+    }
+    async getAccessToken() {
+        let creds = getCodexCredentials(this.projectRoot);
+        if (!creds)
+            return null;
+        if (isTokenExpired(creds)) {
+            try {
+                if (!this.refreshPromise)
+                    this.refreshPromise = refreshAccessToken(creds);
+                creds = await this.refreshPromise;
+                this.refreshPromise = null;
+                setCodexCredentials(this.projectRoot, creds);
+            }
+            catch {
+                this.refreshPromise = null;
+                return null;
+            }
+        }
+        return creds.access_token;
+    }
+    getAccountId() {
+        return getCodexCredentials(this.projectRoot)?.accountId ?? null;
+    }
+    getEmail() {
+        return getCodexCredentials(this.projectRoot)?.email ?? null;
+    }
+    async isAuthenticated() {
+        return (await this.getAccessToken()) !== null;
+    }
+    signOut() {
+        this.cancelAuthorizationFlow();
+        clearOAuthProvider(this.projectRoot, 'codex');
+    }
+}
+export function codexOAuthConnected(projectRoot) {
+    return getCodexCredentials(projectRoot) !== null;
+}
+/** Format DQL messages into the ChatGPT Codex Responses `input` shape. */
+function formatInput(messages) {
+    const formatted = [];
+    for (const m of messages) {
+        if (m.role === 'user') {
+            formatted.push({ role: 'user', content: [{ type: 'input_text', text: m.content }] });
+        }
+        else if (m.role === 'assistant') {
+            if (m.content.trim())
+                formatted.push({ role: 'assistant', content: [{ type: 'output_text', text: m.content }] });
+        }
+    }
+    return formatted;
+}
+function parseSse(raw) {
+    let eventType;
+    let data = '';
+    for (const line of raw.split('\n').map((l) => l.trimEnd()).filter(Boolean)) {
+        if (line.startsWith('event:'))
+            eventType = line.slice(6).trim();
+        else if (line.startsWith('data:'))
+            data += line.slice(5).trim();
+    }
+    if (!data)
+        return null;
+    try {
+        const parsed = JSON.parse(data);
+        return eventType ? { ...parsed, type: eventType } : parsed;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * AgentProvider that drives ChatGPT Codex via the subscription OAuth token.
+ * Streams the Responses SSE and accumulates visible text (reasoning deltas are
+ * dropped from the returned string). Requires a prior `Sign in with ChatGPT`.
+ */
+export class CodexOAuthProvider {
+    name = 'openai';
+    manager;
+    projectRoot;
+    defaultModel;
+    cliModel;
+    sessionId;
+    cliFallback;
+    constructor(opts) {
+        this.manager = new CodexOAuthManager(opts.projectRoot);
+        this.projectRoot = opts.projectRoot;
+        this.defaultModel = opts.model || CODEX_OAUTH_DEFAULT_MODEL;
+        this.cliModel = opts.model;
+        this.sessionId = crypto.randomUUID();
+    }
+    async available() {
+        return this.manager.isAuthenticated();
+    }
+    async generate(messages, options = {}) {
+        const accessToken = await this.manager.getAccessToken();
+        if (!accessToken) {
+            // Credential present but unusable → CLI fallback; none at all → prompt sign-in.
+            if (codexOAuthConnected(this.projectRoot)) {
+                if (!this.cliFallback)
+                    this.cliFallback = new CodexCliProvider({ model: this.cliModel });
+                if (await this.cliFallback.available()) {
+                    return this.cliFallback.generate(messages, options);
+                }
+            }
+            throw new Error('Your ChatGPT subscription session expired. Open Settings → ChatGPT subscription and click "Sign in with ChatGPT" again.');
+        }
+        const accountId = this.manager.getAccountId();
+        const systemText = messages.filter((m) => m.role === 'system').map((m) => m.content).join('\n\n');
+        const body = {
+            model: options.model || this.defaultModel,
+            input: formatInput(messages.filter((m) => m.role !== 'system')),
+            stream: true,
+            store: false,
+            instructions: systemText || undefined,
+        };
+        if (options.reasoningEffort) {
+            body.reasoning = { effort: options.reasoningEffort, summary: 'auto' };
+            body.include = ['reasoning.encrypted_content'];
+        }
+        const res = await fetch(`${CODEX_API_BASE_URL}/responses`, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${accessToken}`,
+                'Content-Type': 'application/json',
+                originator: 'roo-code',
+                session_id: this.sessionId,
+                'User-Agent': `dql/${os.platform()} node/${process.version.slice(1)}`,
+                ...(accountId ? { 'ChatGPT-Account-Id': accountId } : {}),
+            },
+            body: JSON.stringify(body),
+            signal: options.signal,
+        });
+        if (!res.ok || !res.body) {
+            throw new Error(`chatgpt (subscription): ${res.status} ${await res.text().catch(() => res.statusText)}`);
+        }
+        const reader = res.body.getReader();
+        const decoder = new TextDecoder();
+        let buffer = '';
+        let out = '';
+        const consume = (raw) => {
+            const evt = parseSse(raw);
+            if (!evt)
+                return;
+            const type = evt.type;
+            if ((type === 'response.output_text.delta' || type === 'response.text.delta') && typeof evt.delta === 'string') {
+                out += evt.delta;
+            }
+        };
+        for (;;) {
+            const { value, done } = await reader.read();
+            if (value)
+                buffer += decoder.decode(value, { stream: !done });
+            let idx;
+            while ((idx = buffer.indexOf('\n\n')) !== -1) {
+                consume(buffer.slice(0, idx));
+                buffer = buffer.slice(idx + 2);
+            }
+            if (done)
+                break;
+        }
+        // Flush a final event not terminated by a blank line.
+        if (buffer.trim())
+            consume(buffer);
+        return out;
+    }
+}
+//# sourceMappingURL=codex-oauth.js.map

package/dist/providers/oauth/codex-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-oauth.js","sourceRoot":"","sources":["../../../src/providers/oauth/codex-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,GAEnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,qBAAqB,EAAE,yCAAyC;IAChE,aAAa,EAAE,qCAAqC;IACpD,QAAQ,EAAE,8BAA8B;IACxC,WAAW,EAAE,qCAAqC;IAClD,MAAM,EAAE,qCAAqC;IAC7C,YAAY,EAAE,IAAI;CACV,CAAC;AAEX,MAAM,kBAAkB,GAAG,uCAAuC,CAAC;AAEnE,oFAAoF;AACpF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,eAAe,EAAE,eAAe,EAAE,aAAa,EAAE,kBAAkB,CAAU,CAAC;AACjH,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,CAAC;AAEzD,MAAM,UAAU,oBAAoB;IAClC,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,aAAqB,EAAE,KAAa;IACxE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,kBAAkB,CAAC,QAAQ;QACtC,YAAY,EAAE,kBAAkB,CAAC,WAAW;QAC5C,KAAK,EAAE,kBAAkB,CAAC,MAAM;QAChC,cAAc,EAAE,aAAa;QAC7B,qBAAqB,EAAE,MAAM;QAC7B,aAAa,EAAE,MAAM;QACrB,KAAK;QACL,yBAAyB,EAAE,MAAM;QACjC,UAAU,EAAE,UAAU;KACvB,CAAC,CAAC;IACH,OAAO,GAAG,kBAAkB,CAAC,qBAAqB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC5E,CAAC;AASD,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAkB,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,MAAqB;IACvD,OAAO,CACL,MAAM,CAAC,kBAAkB;QACzB,MAAM,CAAC,6BAA6B,CAAC,EAAE,kBAAkB;QACzD,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAmD;IAClF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,IAAI,0BAA0B,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;IAClC,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAUD,SAAS,kBAAkB,CAAC,IAAa;IACvC,MAAM,CAAC,GAAG,IAA0C,CAAC;IACrD,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AAC1I,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY,EAAE,YAAoB;IAC5E,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,oBAAoB;QAChC,SAAS,EAAE,kBAAkB,CAAC,QAAQ;QACtC,IAAI;QACJ,YAAY,EAAE,kBAAkB,CAAC,WAAW;QAC5C,aAAa,EAAE,YAAY;KAC5B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,aAAa,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;QACrB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;KACnC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,sCAAsC,QAAQ,CAAC,MAAM,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACrI,CAAC;IACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACxG,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,GAAG,IAAI;QAC7C,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,gBAAgB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;KAC5F,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,WAAkC;IACzE,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,eAAe;QAC3B,SAAS,EAAE,kBAAkB,CAAC,QAAQ;QACtC,aAAa,EAAE,WAAW,CAAC,aAAa;KACzC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,aAAa,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;QACrB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;KACnC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,CAAC,MAAM,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACpI,CAAC;IACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,WAAW,CAAC,aAAa;QAC/D,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,GAAG,IAAI;QAC7C,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,WAAW,CAAC,KAAK;QACvC,SAAS,EAAE,gBAAgB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,IAAI,WAAW,CAAC,SAAS;KACrH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,WAAkC;IAC/D,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAC/B,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,WAAW,CAAC,OAAO,GAAG,QAAQ,CAAC;AACtD,CAAC;AAED,MAAM,OAAO,iBAAiB;IAIC;IAHrB,WAAW,GAAwG,IAAI,CAAC;IACxH,cAAc,GAA0C,IAAI,CAAC;IAErE,YAA6B,WAAmB;QAAnB,gBAAW,GAAX,WAAW,CAAQ;IAAG,CAAC;IAEpD,uBAAuB;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,4EAA4E;QAC5E,IAAI,KAAK,CAAC,MAAM;YAAE,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAC3E,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC;gBAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,SAAS;QACP,OAAO,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC;IACnC,CAAC;IAED,sBAAsB;QACpB,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;QAC5C,MAAM,aAAa,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QAC3C,OAAO,qBAAqB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;QACjC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAExC,OAAO,IAAI,OAAO,CAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5D,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;YACxB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBAClD,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,oBAAoB,kBAAkB,CAAC,YAAY,EAAE,CAAC,CAAC;oBAC1F,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;wBACtC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;wBACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;wBACrB,OAAO;oBACT,CAAC;oBACD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBAC1C,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACpD,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;wBAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;wBACnB,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;wBACjC,OAAO;oBACT,CAAC;oBACD,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;wBAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;wBACnB,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;wBACzB,OAAO;oBACT,CAAC;oBACD,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;oBACpE,mBAAmB,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;oBACnD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC,sIAAsI,CAAC,CAAC;oBAChJ,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;oBACxB,OAAO,CAAC,WAAW,CAAC,CAAC;gBACvB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC;wBAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;wBAAC,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;oBAClF,IAAI,CAAC;wBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;oBAC5C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;oBACxB,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;YACxB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC;oBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;gBAC5C,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO;oBAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;gBAC1D,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;YACtD,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAClB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YAChD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACzB,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO;oBAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;gBAC1D,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,IAAI,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,cAAc;oBAAE,IAAI,CAAC,cAAc,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAC1E,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC;gBAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC3B,mBAAmB,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC3B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,YAAY,CAAC;IAC5B,CAAC;IAED,YAAY;QACV,OAAO,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,SAAS,IAAI,IAAI,CAAC;IAClE,CAAC;IAED,QAAQ;QACN,OAAO,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,KAAK,IAAI,CAAC;IAChD,CAAC;IAED,OAAO;QACL,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC/B,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;CACF;AAED,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,OAAO,mBAAmB,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;AACnD,CAAC;AAED,0EAA0E;AAC1E,SAAS,WAAW,CAAC,QAAwB;IAC3C,MAAM,SAAS,GAAmC,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE;gBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACnH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,SAA6B,CAAC;IAClC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3E,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aAC3D,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;QAC3D,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IACpB,IAAI,GAAG,QAAiB,CAAC;IACjB,OAAO,CAAoB;IAC3B,WAAW,CAAS;IACpB,YAAY,CAAS;IACrB,QAAQ,CAAU;IAClB,SAAS,CAAS;IAC3B,WAAW,CAAoB;IAEvC,YAAY,IAA6C;QACvD,IAAI,CAAC,OAAO,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,IAAI,yBAAyB,CAAC;QAC5D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,SAAS;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAwB,EAAE,UAA8B,EAAE;QACvE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QACxD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,gFAAgF;YAChF,IAAI,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,IAAI,CAAC,WAAW;oBAAE,IAAI,CAAC,WAAW,GAAG,IAAI,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACzF,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC;oBACvC,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,yHAAyH,CAAC,CAAC;QAC7I,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAElG,MAAM,IAAI,GAA4B;YACpC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY;YACzC,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;YAC/D,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,KAAK;YACZ,YAAY,EAAE,UAAU,IAAI,SAAS;SACtC,CAAC;QACF,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5B,IAAI,CAAC,SAAS,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YACtE,IAAI,CAAC,OAAO,GAAG,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,kBAAkB,YAAY,EAAE;YACzD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;gBACtC,cAAc,EAAE,kBAAkB;gBAClC,UAAU,EAAE,UAAU;gBACtB,UAAU,EAAE,IAAI,CAAC,SAAS;gBAC1B,YAAY,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBACrE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1D;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC3G,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE;YAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,GAAG;gBAAE,OAAO;YACjB,MAAM,IAAI,GAAG,GAAG,CAAC,IAA0B,CAAC;YAC5C,IAAI,CAAC,IAAI,KAAK,4BAA4B,IAAI,IAAI,KAAK,qBAAqB,CAAC,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC/G,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC;YACnB,CAAC;QACH,CAAC,CAAC;QACF,SAAS,CAAC;YACR,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,KAAK;gBAAE,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9D,IAAI,GAAW,CAAC;YAChB,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC9B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YACjC,CAAC;YACD,IAAI,IAAI;gBAAE,MAAM;QAClB,CAAC;QACD,sDAAsD;QACtD,IAAI,MAAM,CAAC,IAAI,EAAE;YAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACnC,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/providers/oauth/oauth-store.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Secure on-disk store for subscription OAuth credentials (Claude Pro/Max,
+ * ChatGPT Plus/Pro). Replaces the VSCode SecretStorage the reference flow used
+ * with a `chmod 600` JSON file under `.dql/`, mirroring how `provider-settings.json`
+ * already guards API keys. Tokens never leave the machine.
+ */
+export interface ClaudeOAuthCredentials {
+    type: 'claude';
+    access_token: string;
+    refresh_token: string;
+    /** ISO-8601 expiry timestamp. */
+    expired: string;
+    email?: string;
+}
+export interface CodexOAuthCredentials {
+    type: 'openai-codex';
+    access_token: string;
+    refresh_token: string;
+    /** Expiry as a Unix epoch in milliseconds. */
+    expires: number;
+    email?: string;
+    accountId?: string;
+}
+export type OAuthProviderKey = 'claude' | 'codex';
+export declare function oauthCredentialsPath(projectRoot: string): string;
+export declare function getClaudeCredentials(projectRoot: string): ClaudeOAuthCredentials | null;
+export declare function setClaudeCredentials(projectRoot: string, creds: ClaudeOAuthCredentials): void;
+export declare function getCodexCredentials(projectRoot: string): CodexOAuthCredentials | null;
+export declare function setCodexCredentials(projectRoot: string, creds: CodexOAuthCredentials): void;
+export declare function clearOAuthProvider(projectRoot: string, key: OAuthProviderKey): void;
+//# sourceMappingURL=oauth-store.d.ts.map

package/dist/providers/oauth/oauth-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-store.d.ts","sourceRoot":"","sources":["../../../src/providers/oauth/oauth-store.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AAEH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,QAAQ,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,cAAc,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAQD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,OAAO,CAAC;AAElD,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEhE;AAmCD,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI,CAGvF;AAED,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAI7F;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,qBAAqB,GAAG,IAAI,CAGrF;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,IAAI,CAI3F;AAED,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAInF"}

package/dist/providers/oauth/oauth-store.js

@@ -0,0 +1,61 @@
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+export function oauthCredentialsPath(projectRoot) {
+    return join(projectRoot, '.dql', 'oauth-credentials.json');
+}
+function readStore(projectRoot) {
+    const path = oauthCredentialsPath(projectRoot);
+    if (!existsSync(path))
+        return { version: 1 };
+    try {
+        const parsed = JSON.parse(readFileSync(path, 'utf-8'));
+        return { version: 1, claude: parsed.claude, codex: parsed.codex };
+    }
+    catch {
+        return { version: 1 };
+    }
+}
+function writeStore(projectRoot, store) {
+    const path = oauthCredentialsPath(projectRoot);
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, JSON.stringify(store, null, 2) + '\n', 'utf-8');
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch {
+        // Best effort on filesystems without chmod.
+    }
+}
+/** Basic shape validation — a corrupt/partial entry is treated as "not connected". */
+function isClaudeCreds(v) {
+    const c = v;
+    return Boolean(c && c.type === 'claude' && typeof c.access_token === 'string' && typeof c.refresh_token === 'string' && typeof c.expired === 'string');
+}
+function isCodexCreds(v) {
+    const c = v;
+    return Boolean(c && c.type === 'openai-codex' && typeof c.access_token === 'string' && typeof c.refresh_token === 'string' && typeof c.expires === 'number');
+}
+export function getClaudeCredentials(projectRoot) {
+    const creds = readStore(projectRoot).claude;
+    return isClaudeCreds(creds) ? creds : null;
+}
+export function setClaudeCredentials(projectRoot, creds) {
+    const store = readStore(projectRoot);
+    store.claude = creds;
+    writeStore(projectRoot, store);
+}
+export function getCodexCredentials(projectRoot) {
+    const creds = readStore(projectRoot).codex;
+    return isCodexCreds(creds) ? creds : null;
+}
+export function setCodexCredentials(projectRoot, creds) {
+    const store = readStore(projectRoot);
+    store.codex = creds;
+    writeStore(projectRoot, store);
+}
+export function clearOAuthProvider(projectRoot, key) {
+    const store = readStore(projectRoot);
+    delete store[key];
+    writeStore(projectRoot, store);
+}
+//# sourceMappingURL=oauth-store.js.map

package/dist/providers/oauth/oauth-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-store.js","sourceRoot":"","sources":["../../../src/providers/oauth/oauth-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAoC1C,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,OAAO,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB;IACpC,MAAM,IAAI,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAA4B,CAAC;QAClF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,WAAmB,EAAE,KAAqB;IAC5D,MAAM,IAAI,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC/C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,SAAS,aAAa,CAAC,CAAU;IAC/B,MAAM,CAAC,GAAG,CAAuC,CAAC;IAClD,OAAO,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC;AACzJ,CAAC;AAED,SAAS,YAAY,CAAC,CAAU;IAC9B,MAAM,CAAC,GAAG,CAAsC,CAAC;IACjD,OAAO,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC;AAC/J,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAmB,EAAE,KAA6B;IACrF,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACrC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;IACrB,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC;IAC3C,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,WAAmB,EAAE,KAA4B;IACnF,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACrC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IACpB,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,GAAqB;IAC3E,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;IAClB,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC"}

package/dist/settings/provider-settings.d.ts

@@ -1,4 +1,11 @@
+import { type ReasoningEffort } from '@duckcodeailabs/dql-agent';
 export type ProviderSettingsId = 'anthropic' | 'openai' | 'gemini' | 'ollama' | 'custom-openai' | 'claude-code' | 'codex';
+/**
+ * Reasoning-effort ceiling for a provider. `'auto'` (the default when unset)
+ * lets the agent pick effort per task/route up to `high`; an explicit level caps
+ * it there. See `@duckcodeailabs/dql-agent`'s reasoning-effort helpers.
+ */
+export type ReasoningEffortSetting = ReasoningEffort | 'auto';
 /**
  * How a provider authenticates:
  * - `api_key`: paste an API key (or set the env var).
@@ -13,9 +20,13 @@ export interface ProviderSettingsInput {
     apiKey?: string;
     baseUrl?: string;
     model?: string;
+    /** Reasoning-effort ceiling. `'auto'` clears it; omitted leaves it unchanged. */
+    reasoningEffort?: ReasoningEffortSetting;
 }
 export interface StoredProviderSettings extends ProviderSettingsInput {
     updatedAt: string;
+    /** Persisted ceiling — `'auto'` is normalized to `undefined` on write. */
+    reasoningEffort?: ReasoningEffort;
 }
 export interface RedactedProviderSettings {
     id: ProviderSettingsId;
@@ -32,12 +43,18 @@ export interface RedactedProviderSettings {
     authMode: ProviderAuthMode;
     /** For subscription_cli providers: the CLI binary the user must install + log into. */
     command?: string;
+    /** Reasoning-effort ceiling (`'auto'` when unset). Only meaningful for reasoning-capable providers. */
+    reasoningEffort: ReasoningEffortSetting;
+    /** Whether this provider has a reasoning surface at all (drives whether the UI shows the control). */
+    supportsReasoningEffort: boolean;
 }
 export interface EffectiveProviderConfig {
     apiKey?: string;
     baseUrl?: string;
     model?: string;
     enabled: boolean;
+    /** Resolved ceiling (local → env), `undefined` means auto (no cap). */
+    reasoningEffort?: ReasoningEffort;
 }
 export declare function providerSettingsPath(projectRoot: string): string;
 export declare function listProviderSettings(projectRoot: string): RedactedProviderSettings[];

package/dist/settings/provider-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-settings.d.ts","sourceRoot":"","sources":["../../src/settings/provider-settings.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,eAAe,GAAG,aAAa,GAAG,OAAO,CAAC;AAE1H;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,OAAO,GAAG,kBAAkB,CAAC;AAExE,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,kBAAkB,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAuB,SAAQ,qBAAqB;IACnE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,kBAAkB,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;IACjC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gEAAgE;IAChE,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;CAClB;AAiBD,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,wBAAwB,EAAE,CA2CpF;AAED,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,kBAAkB,GAAG,uBAAuB,CAS/G;AAED,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAErF;AAED,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,wBAAwB,EAAE,CAoBlH"}
+{"version":3,"file":"provider-settings.d.ts","sourceRoot":"","sources":["../../src/settings/provider-settings.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,eAAe,GAAG,aAAa,GAAG,OAAO,CAAC;AAE1H;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,eAAe,GAAG,MAAM,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,OAAO,GAAG,kBAAkB,CAAC;AAExE,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,kBAAkB,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,eAAe,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AAED,MAAM,WAAW,sBAAuB,SAAQ,qBAAqB;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,kBAAkB,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;IACjC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gEAAgE;IAChE,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uGAAuG;IACvG,eAAe,EAAE,sBAAsB,CAAC;IACxC,sGAAsG;IACtG,uBAAuB,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,uEAAuE;IACvE,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AA8CD,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,wBAAwB,EAAE,CAgDpF;AAYD,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,kBAAkB,GAAG,uBAAuB,CAU/G;AAED,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAErF;AAED,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,wBAAwB,EAAE,CA0BlH"}