@georgedong32/ccs 7.66.0

package/dist/cliproxy/ai-providers/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/cliproxy/ai-providers/types.ts"],"names":[],"mappings":";;;AAAa,QAAA,sBAAsB,GAAG;IACpC,gBAAgB;IAChB,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,sBAAsB;CACd,CAAC;AAwGE,QAAA,8BAA8B,GAGvC;IACF,gBAAgB,EAAE;QAChB,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,2CAA2C;QACxD,QAAQ,EAAE,QAAQ;QAClB,oBAAoB,EAAE,KAAK;QAC3B,SAAS,EAAE,sBAAsB;KAClC;IACD,eAAe,EAAE;QACf,EAAE,EAAE,eAAe;QACnB,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,8CAA8C;QAC3D,QAAQ,EAAE,QAAQ;QAClB,oBAAoB,EAAE,KAAK;QAC3B,SAAS,EAAE,qBAAqB;KACjC;IACD,gBAAgB,EAAE;QAChB,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,+DAA+D;QAC5E,QAAQ,EAAE,SAAS;QACnB,oBAAoB,EAAE,KAAK;QAC3B,SAAS,EAAE,sBAAsB;KAClC;IACD,gBAAgB,EAAE;QAChB,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,oDAAoD;QACjE,QAAQ,EAAE,SAAS;QACnB,oBAAoB,EAAE,KAAK;QAC3B,SAAS,EAAE,sBAAsB;KAClC;IACD,sBAAsB,EAAE;QACtB,EAAE,EAAE,sBAAsB;QAC1B,WAAW,EAAE,mBAAmB;QAChC,WAAW,EAAE,yEAAyE;QACtF,QAAQ,EAAE,WAAW;QACrB,oBAAoB,EAAE,IAAI;QAC1B,SAAS,EAAE,6BAA6B;KACzC;CACF,CAAC"}

package/dist/cliproxy/antigravity-responsibility.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Antigravity OAuth Responsibility Gate
+ *
+ * Enforces explicit user acknowledgement for Antigravity OAuth usage.
+ * This is used by:
+ * - CLI OAuth flow (`ccs agy --auth`)
+ * - CLI runtime flow (`ccs agy`)
+ * - Dashboard auth endpoints (server-side payload validation)
+ */
+export declare const ANTIGRAVITY_RISK_ISSUE_URL = "https://github.com/kaitranntt/ccs/issues/509";
+export declare const ANTIGRAVITY_ACK_VERSION = "2026-02-24-antigravity-oauth-v2";
+export declare const RISK_ACK_PHRASE = "I ACCEPT RISK";
+export declare const ANTIGRAVITY_ACK_PHRASE = "I ACCEPT RISK";
+export declare const ANTIGRAVITY_ACCEPT_RISK_FLAGS: string[];
+type AgyRiskContext = 'oauth' | 'run';
+export interface AntigravityRiskAcknowledgement {
+    version: string;
+    reviewedIssue509: boolean;
+    understandsBanRisk: boolean;
+    acceptsFullResponsibility: boolean;
+    typedPhrase: string;
+}
+interface ValidationResult {
+    valid: boolean;
+    error?: string;
+}
+interface EnsureCliRiskOptions {
+    context: AgyRiskContext;
+    acceptedByFlag?: boolean;
+}
+export declare function isAntigravityResponsibilityBypassEnabled(): boolean;
+export declare function hasAntigravityRiskAcceptanceFlag(args: string[]): boolean;
+export declare function validateAntigravityRiskAcknowledgement(payload: unknown): ValidationResult;
+export declare function ensureCliAntigravityResponsibility(options: EnsureCliRiskOptions): Promise<boolean>;
+export {};
+//# sourceMappingURL=antigravity-responsibility.d.ts.map

package/dist/cliproxy/antigravity-responsibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"antigravity-responsibility.d.ts","sourceRoot":"","sources":["../../src/cliproxy/antigravity-responsibility.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,eAAO,MAAM,0BAA0B,iDAAiD,CAAC;AACzF,eAAO,MAAM,uBAAuB,oCAAoC,CAAC;AACzE,eAAO,MAAM,eAAe,kBAAkB,CAAC;AAC/C,eAAO,MAAM,sBAAsB,kBAAkB,CAAC;AACtD,eAAO,MAAM,6BAA6B,UAAqD,CAAC;AAEhG,KAAK,cAAc,GAAG,OAAO,GAAG,KAAK,CAAC;AAEtC,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,yBAAyB,EAAE,OAAO,CAAC;IACnC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,gBAAgB;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,oBAAoB;IAC5B,OAAO,EAAE,cAAc,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAYD,wBAAgB,wCAAwC,IAAI,OAAO,CAWlE;AAsED,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAExE;AAED,wBAAgB,sCAAsC,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAmCzF;AAED,wBAAsB,kCAAkC,CACtD,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,OAAO,CAAC,CAkDlB"}

package/dist/cliproxy/antigravity-responsibility.js

@@ -0,0 +1,171 @@
+"use strict";
+/**
+ * Antigravity OAuth Responsibility Gate
+ *
+ * Enforces explicit user acknowledgement for Antigravity OAuth usage.
+ * This is used by:
+ * - CLI OAuth flow (`ccs agy --auth`)
+ * - CLI runtime flow (`ccs agy`)
+ * - Dashboard auth endpoints (server-side payload validation)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ensureCliAntigravityResponsibility = exports.validateAntigravityRiskAcknowledgement = exports.hasAntigravityRiskAcceptanceFlag = exports.isAntigravityResponsibilityBypassEnabled = exports.ANTIGRAVITY_ACCEPT_RISK_FLAGS = exports.ANTIGRAVITY_ACK_PHRASE = exports.RISK_ACK_PHRASE = exports.ANTIGRAVITY_ACK_VERSION = exports.ANTIGRAVITY_RISK_ISSUE_URL = void 0;
+const readline_1 = require("readline");
+const ui_1 = require("../utils/ui");
+const unified_config_loader_1 = require("../config/unified-config-loader");
+exports.ANTIGRAVITY_RISK_ISSUE_URL = 'https://github.com/kaitranntt/ccs/issues/509';
+exports.ANTIGRAVITY_ACK_VERSION = '2026-02-24-antigravity-oauth-v2';
+exports.RISK_ACK_PHRASE = 'I ACCEPT RISK';
+exports.ANTIGRAVITY_ACK_PHRASE = exports.RISK_ACK_PHRASE;
+exports.ANTIGRAVITY_ACCEPT_RISK_FLAGS = ['--accept-agr-risk', '--accept-antigravity-risk'];
+function normalizePhrase(value) {
+    return value.trim().replace(/\s+/g, ' ').toUpperCase();
+}
+function isTruthyEnv(value) {
+    if (!value)
+        return false;
+    const normalized = value.trim().toLowerCase();
+    return normalized === '1' || normalized === 'true' || normalized === 'yes';
+}
+function isAntigravityResponsibilityBypassEnabled() {
+    if (isTruthyEnv(process.env.CCS_ACCEPT_AGY_RISK)) {
+        return true;
+    }
+    try {
+        const safety = (0, unified_config_loader_1.getCliproxySafetyConfig)();
+        return safety.antigravity_ack_bypass === true;
+    }
+    catch {
+        return false;
+    }
+}
+exports.isAntigravityResponsibilityBypassEnabled = isAntigravityResponsibilityBypassEnabled;
+function askQuestion(rl, prompt) {
+    return new Promise((resolve) => {
+        let settled = false;
+        const onClose = () => {
+            if (!settled) {
+                settled = true;
+                resolve(null);
+            }
+        };
+        rl.once('close', onClose);
+        rl.question(prompt, (answer) => {
+            if (settled)
+                return;
+            settled = true;
+            rl.removeListener('close', onClose);
+            resolve(answer.trim());
+        });
+    });
+}
+async function askYesNoStep(rl, step, message) {
+    while (true) {
+        const answer = await askQuestion(rl, `[?] ${step}\n    ${message}\n    Type YES to continue (NO to cancel): `);
+        if (answer === null)
+            return false;
+        const normalized = answer.toUpperCase();
+        if (normalized === 'YES')
+            return true;
+        if (normalized === 'NO' || normalized === 'N' || normalized === '')
+            return false;
+        console.error((0, ui_1.warn)('Please type YES or NO.'));
+    }
+}
+async function askResponsibilityPhrase(rl) {
+    for (let attempt = 0; attempt < 3; attempt++) {
+        const answer = await askQuestion(rl, `[?] Step 4/4\n    Type exactly "${exports.ANTIGRAVITY_ACK_PHRASE}": `);
+        if (answer === null || answer === '')
+            return false;
+        if (normalizePhrase(answer) === exports.ANTIGRAVITY_ACK_PHRASE) {
+            return true;
+        }
+        console.error((0, ui_1.warn)('Phrase mismatch. Try again.'));
+    }
+    return false;
+}
+function printResponsibilityHeader(context) {
+    const contextLine = context === 'oauth'
+        ? 'You are starting Antigravity OAuth account authorization.'
+        : 'You are starting a live Antigravity CLI session (ccs agy).';
+    console.error('');
+    console.error('╔══════════════════════════════════════════════════════════════════════╗');
+    console.error('║ Antigravity Responsibility Confirmation (Mandatory)                  ║');
+    console.error('╚══════════════════════════════════════════════════════════════════════╝');
+    console.error(`    ${contextLine}`);
+    console.error('    Antigravity has active ban/suspension patterns for risky OAuth usage.');
+    console.error(`    Policy issue: ${exports.ANTIGRAVITY_RISK_ISSUE_URL}`);
+    console.error('');
+}
+function hasAntigravityRiskAcceptanceFlag(args) {
+    return args.some((arg) => exports.ANTIGRAVITY_ACCEPT_RISK_FLAGS.includes(arg));
+}
+exports.hasAntigravityRiskAcceptanceFlag = hasAntigravityRiskAcceptanceFlag;
+function validateAntigravityRiskAcknowledgement(payload) {
+    if (!payload || typeof payload !== 'object') {
+        return {
+            valid: false,
+            error: 'Antigravity OAuth requires a full responsibility acknowledgement payload.',
+        };
+    }
+    const data = payload;
+    if (data.version !== exports.ANTIGRAVITY_ACK_VERSION) {
+        return {
+            valid: false,
+            error: 'Antigravity acknowledgement version mismatch. Re-open add account and try again.',
+        };
+    }
+    if (!data.reviewedIssue509 || !data.understandsBanRisk || !data.acceptsFullResponsibility) {
+        return {
+            valid: false,
+            error: 'Complete all Antigravity responsibility checklist steps before authenticating.',
+        };
+    }
+    if (typeof data.typedPhrase !== 'string' ||
+        normalizePhrase(data.typedPhrase) !== exports.ANTIGRAVITY_ACK_PHRASE) {
+        return {
+            valid: false,
+            error: `Type exact acknowledgement phrase: "${exports.ANTIGRAVITY_ACK_PHRASE}".`,
+        };
+    }
+    return { valid: true };
+}
+exports.validateAntigravityRiskAcknowledgement = validateAntigravityRiskAcknowledgement;
+async function ensureCliAntigravityResponsibility(options) {
+    if (options.acceptedByFlag || isAntigravityResponsibilityBypassEnabled()) {
+        return true;
+    }
+    if (!process.stdin.isTTY || !process.stderr.isTTY) {
+        console.error((0, ui_1.fail)('Antigravity responsibility acknowledgement required.'));
+        console.error('    Re-run interactively and complete the 4-step confirmation.');
+        console.error('    Non-interactive override: --accept-agr-risk');
+        return false;
+    }
+    printResponsibilityHeader(options.context);
+    const rl = (0, readline_1.createInterface)({
+        input: process.stdin,
+        output: process.stderr,
+    });
+    try {
+        const step1 = await askYesNoStep(rl, 'Step 1/4', 'I reviewed issue #509 and understand AGY OAuth can trigger bans/suspensions.');
+        if (!step1)
+            return false;
+        const step2 = await askYesNoStep(rl, 'Step 2/4', 'I understand this OAuth operation is my own decision and I choose to continue.');
+        if (!step2)
+            return false;
+        const step3 = await askYesNoStep(rl, 'Step 3/4', 'I accept that CCS provides no responsibility coverage for account loss, bans, or suspension.');
+        if (!step3)
+            return false;
+        const step4 = await askResponsibilityPhrase(rl);
+        if (!step4)
+            return false;
+        console.error((0, ui_1.ok)('Antigravity responsibility acknowledgement accepted for this command.'));
+        console.error((0, ui_1.info)('Proceeding with Antigravity flow...'));
+        return true;
+    }
+    finally {
+        rl.close();
+    }
+}
+exports.ensureCliAntigravityResponsibility = ensureCliAntigravityResponsibility;
+//# sourceMappingURL=antigravity-responsibility.js.map

package/dist/cliproxy/antigravity-responsibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"antigravity-responsibility.js","sourceRoot":"","sources":["../../src/cliproxy/antigravity-responsibility.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAEH,uCAAsD;AACtD,oCAAmD;AACnD,2EAA0E;AAE7D,QAAA,0BAA0B,GAAG,8CAA8C,CAAC;AAC5E,QAAA,uBAAuB,GAAG,iCAAiC,CAAC;AAC5D,QAAA,eAAe,GAAG,eAAe,CAAC;AAClC,QAAA,sBAAsB,GAAG,uBAAe,CAAC;AACzC,QAAA,6BAA6B,GAAG,CAAC,mBAAmB,EAAE,2BAA2B,CAAC,CAAC;AAsBhG,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB;IAC5C,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,KAAK,CAAC;AAC7E,CAAC;AAED,SAAgB,wCAAwC;IACtD,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,+CAAuB,GAAE,CAAC;QACzC,OAAO,MAAM,CAAC,sBAAsB,KAAK,IAAI,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAXD,4FAWC;AAED,SAAS,WAAW,CAAC,EAAa,EAAE,MAAc;IAChD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC;QAEF,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1B,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;YAC7B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,EAAa,EAAE,IAAY,EAAE,OAAe;IACtE,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,EAAE,EACF,OAAO,IAAI,SAAS,OAAO,6CAA6C,CACzE,CAAC;QAEF,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAClC,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,UAAU,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACtC,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QACjF,OAAO,CAAC,KAAK,CAAC,IAAA,SAAI,EAAC,wBAAwB,CAAC,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,EAAa;IAClD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,EAAE,EACF,mCAAmC,8BAAsB,KAAK,CAC/D,CAAC;QACF,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QAEnD,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,8BAAsB,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,IAAA,SAAI,EAAC,6BAA6B,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,yBAAyB,CAAC,OAAuB;IACxD,MAAM,WAAW,GACf,OAAO,KAAK,OAAO;QACjB,CAAC,CAAC,2DAA2D;QAC7D,CAAC,CAAC,4DAA4D,CAAC;IAEnE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC1F,OAAO,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC1F,OAAO,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC1F,OAAO,CAAC,KAAK,CAAC,OAAO,WAAW,EAAE,CAAC,CAAC;IACpC,OAAO,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC3F,OAAO,CAAC,KAAK,CAAC,qBAAqB,kCAA0B,EAAE,CAAC,CAAC;IACjE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC;AAED,SAAgB,gCAAgC,CAAC,IAAc;IAC7D,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,qCAA6B,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AACzE,CAAC;AAFD,4EAEC;AAED,SAAgB,sCAAsC,CAAC,OAAgB;IACrE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,2EAA2E;SACnF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,OAAkD,CAAC;IAEhE,IAAI,IAAI,CAAC,OAAO,KAAK,+BAAuB,EAAE,CAAC;QAC7C,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,kFAAkF;SAC1F,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAC1F,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,gFAAgF;SACxF,CAAC;IACJ,CAAC;IAED,IACE,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QACpC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,8BAAsB,EAC5D,CAAC;QACD,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,uCAAuC,8BAAsB,IAAI;SACzE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAnCD,wFAmCC;AAEM,KAAK,UAAU,kCAAkC,CACtD,OAA6B;IAE7B,IAAI,OAAO,CAAC,cAAc,IAAI,wCAAwC,EAAE,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClD,OAAO,CAAC,KAAK,CAAC,IAAA,SAAI,EAAC,sDAAsD,CAAC,CAAC,CAAC;QAC5E,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QAChF,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,yBAAyB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE3C,MAAM,EAAE,GAAG,IAAA,0BAAe,EAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,EAAE,EACF,UAAU,EACV,8EAA8E,CAC/E,CAAC;QACF,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,EAAE,EACF,UAAU,EACV,gFAAgF,CACjF,CAAC;QACF,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,EAAE,EACF,UAAU,EACV,8FAA8F,CAC/F,CAAC;QACF,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,OAAO,CAAC,KAAK,CAAC,IAAA,OAAE,EAAC,uEAAuE,CAAC,CAAC,CAAC;QAC3F,OAAO,CAAC,KAAK,CAAC,IAAA,SAAI,EAAC,qCAAqC,CAAC,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AApDD,gFAoDC"}

package/dist/cliproxy/auth/auth-types.d.ts

@@ -0,0 +1,141 @@
+/**
+ * Auth Types and Configurations
+ *
+ * Type definitions and OAuth configurations for CLIProxy authentication.
+ */
+import { CLIProxyProvider } from '../types';
+import type { AccountInfo } from '../account-manager';
+/**
+ * Kiro authentication methods supported by CLIProxyAPIPlus.
+ * - aws: AWS Builder ID via Device Code flow
+ * - aws-authcode: AWS Builder ID via Authorization Code flow (CLI flag only)
+ * - google: Social OAuth via Google
+ * - github: Social OAuth via GitHub (management API only)
+ */
+export declare const KIRO_AUTH_METHODS: readonly ["aws", "aws-authcode", "google", "github"];
+export type KiroAuthMethod = (typeof KIRO_AUTH_METHODS)[number];
+/** CLI binary supports these Kiro methods directly via flags. */
+export declare const KIRO_CLI_AUTH_METHODS: readonly ["aws", "aws-authcode", "google"];
+export type KiroCLIAuthMethod = (typeof KIRO_CLI_AUTH_METHODS)[number];
+/** Default Kiro method for CCS UX and AWS Organization support. */
+export declare const DEFAULT_KIRO_AUTH_METHOD: KiroAuthMethod;
+export declare function isKiroAuthMethod(value: string): value is KiroAuthMethod;
+export declare function isKiroCLIAuthMethod(value: string): value is KiroCLIAuthMethod;
+export declare function normalizeKiroAuthMethod(value?: string): KiroAuthMethod;
+export declare function isKiroDeviceCodeMethod(method: KiroAuthMethod): boolean;
+export declare function getKiroCallbackPort(method: KiroAuthMethod): number | null;
+export declare function getKiroCLIAuthFlag(method: KiroCLIAuthMethod): string;
+/**
+ * Kiro method for CLIProxyAPI management endpoint:
+ * GET /v0/management/kiro-auth-url?method=<value>
+ */
+export declare function toKiroManagementMethod(method: KiroAuthMethod): 'aws' | 'google' | 'github';
+/**
+ * OAuth callback ports used by CLIProxyAPI (hardcoded in binary)
+ * See: https://github.com/router-for-me/CLIProxyAPI/tree/main/internal/auth
+ *
+ * OAuth flow types per provider:
+ * - Gemini: Authorization Code Flow with local callback server on port 8085
+ * - Codex:  Authorization Code Flow with local callback server on port 1455
+ * - Agy:    Authorization Code Flow with local callback server on port 51121
+ * - iFlow:  Authorization Code Flow with local callback server on port 11451
+ * - Claude: Authorization Code Flow with local callback server on port 54545 (Anthropic OAuth)
+ * - Kiro:   Device Code Flow (polling-based, NO callback port needed)
+ * - Qwen:   Device Code Flow (polling-based, NO callback port needed)
+ * - GHCP:   Device Code Flow (polling-based, NO callback port needed)
+ * - Kimi:   Device Code Flow (polling-based, NO callback port needed)
+ */
+export declare const OAUTH_CALLBACK_PORTS: Partial<Record<CLIProxyProvider, number>>;
+/**
+ * Auth status for a provider
+ */
+export interface AuthStatus {
+    /** Provider name */
+    provider: CLIProxyProvider;
+    /** Whether authentication exists */
+    authenticated: boolean;
+    /** Path to token directory */
+    tokenDir: string;
+    /** Token file paths found */
+    tokenFiles: string[];
+    /** When last authenticated (if known) */
+    lastAuth?: Date;
+    /** Accounts registered for this provider (multi-account support) */
+    accounts: AccountInfo[];
+    /** Default account ID */
+    defaultAccount?: string;
+}
+/**
+ * OAuth config for each provider
+ */
+export interface ProviderOAuthConfig {
+    /** Provider identifier */
+    provider: CLIProxyProvider;
+    /** Display name */
+    displayName: string;
+    /** OAuth authorization URL (for manual flow) */
+    authUrl: string;
+    /** Scopes required */
+    scopes: string[];
+    /** CLI flag for auth */
+    authFlag: string;
+}
+/**
+ * OAuth configurations per provider
+ * Note: CLIProxyAPI handles actual OAuth - these are for display/manual flow
+ */
+export declare const OAUTH_CONFIGS: Record<CLIProxyProvider, ProviderOAuthConfig>;
+/**
+ * Provider-specific auth file prefixes (fallback detection)
+ * CLIProxyAPI names auth files with provider prefix (e.g., "antigravity-user@email.json")
+ * Note: Gemini tokens may NOT have prefix - CLIProxyAPI uses {email}-{projectID}.json format
+ */
+export declare const PROVIDER_AUTH_PREFIXES: Record<CLIProxyProvider, string[]>;
+/**
+ * Provider type values inside token JSON files
+ * CLIProxyAPI sets "type" field in token JSON (e.g., {"type": "gemini"})
+ */
+export declare const PROVIDER_TYPE_VALUES: Record<CLIProxyProvider, string[]>;
+/**
+ * Maps CCS provider names to CLIProxyAPI callback provider names
+ * Used when submitting OAuth callbacks to CLIProxyAPI management endpoint
+ */
+export declare const CLIPROXY_CALLBACK_PROVIDER_MAP: Record<CLIProxyProvider, string>;
+/**
+ * Maps CCS provider names to CLIProxyAPI auth-url endpoint prefixes.
+ * Used for GET /v0/management/${prefix}-auth-url endpoints.
+ * These differ from callback names for some providers (e.g., gemini-cli vs gemini).
+ */
+export declare const CLIPROXY_AUTH_URL_PROVIDER_MAP: Record<CLIProxyProvider, string>;
+export declare function getManagementAuthUrlPath(provider: CLIProxyProvider): string;
+export declare function getPasteCallbackStartPath(provider: CLIProxyProvider): string;
+export declare function getManagementOAuthCallbackPath(): string;
+/**
+ * Get OAuth config for provider
+ */
+export declare function getOAuthConfig(provider: CLIProxyProvider): ProviderOAuthConfig;
+/**
+ * OAuth options for triggerOAuth
+ */
+export interface OAuthOptions {
+    verbose?: boolean;
+    headless?: boolean;
+    account?: string;
+    add?: boolean;
+    nickname?: string;
+    /** If true, caller explicitly accepts Antigravity OAuth risk for this command/session. */
+    acceptAgyRisk?: boolean;
+    /** Kiro auth method override (CLI + Dashboard parity). */
+    kiroMethod?: KiroAuthMethod;
+    /** If true, triggered from Web UI (enables project selection prompt) */
+    fromUI?: boolean;
+    /** If true, use --no-incognito flag (Kiro only - use normal browser instead of incognito) */
+    noIncognito?: boolean;
+    /** If true, skip OAuth and import token from Kiro IDE directly (Kiro only) */
+    import?: boolean;
+    /** Enable paste-callback mode: show auth URL and prompt for callback paste */
+    pasteCallback?: boolean;
+    /** If true, use port-forwarding mode (skip interactive prompt in headless) */
+    portForward?: boolean;
+}
+//# sourceMappingURL=auth-types.d.ts.map

package/dist/cliproxy/auth/auth-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-types.d.ts","sourceRoot":"","sources":["../../../src/cliproxy/auth/auth-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAWtD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,sDAAuD,CAAC;AACtF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,iEAAiE;AACjE,eAAO,MAAM,qBAAqB,4CAA6C,CAAC;AAChF,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE,mEAAmE;AACnE,eAAO,MAAM,wBAAwB,EAAE,cAAsB,CAAC;AAE9D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,cAAc,CAEvE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,iBAAiB,CAE7E;AAED,wBAAgB,uBAAuB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,cAAc,CAItE;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAEtE;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,GAAG,IAAI,CAEzE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CASpE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,cAAc,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAY1F;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAUxE,CAAC;AAEJ;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,oBAAoB;IACpB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,oCAAoC;IACpC,aAAa,EAAE,OAAO,CAAC;IACvB,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,yCAAyC;IACzC,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,oEAAoE;IACpE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,yBAAyB;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,0BAA0B;IAC1B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAkEvE,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAErE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAEnE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,8BAA8B,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAE3E,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAE3E,CAAC;AAEF,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,CAG3E;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,CAM5E;AAED,wBAAgB,8BAA8B,IAAI,MAAM,CAEvD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,gBAAgB,GAAG,mBAAmB,CAM9E;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0FAA0F;IAC1F,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,wEAAwE;IACxE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,6FAA6F;IAC7F,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB"}

package/dist/cliproxy/auth/auth-types.js

@@ -0,0 +1,217 @@
+"use strict";
+/**
+ * Auth Types and Configurations
+ *
+ * Type definitions and OAuth configurations for CLIProxy authentication.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getOAuthConfig = exports.getManagementOAuthCallbackPath = exports.getPasteCallbackStartPath = exports.getManagementAuthUrlPath = exports.CLIPROXY_AUTH_URL_PROVIDER_MAP = exports.CLIPROXY_CALLBACK_PROVIDER_MAP = exports.PROVIDER_TYPE_VALUES = exports.PROVIDER_AUTH_PREFIXES = exports.OAUTH_CONFIGS = exports.OAUTH_CALLBACK_PORTS = exports.toKiroManagementMethod = exports.getKiroCLIAuthFlag = exports.getKiroCallbackPort = exports.isKiroDeviceCodeMethod = exports.normalizeKiroAuthMethod = exports.isKiroCLIAuthMethod = exports.isKiroAuthMethod = exports.DEFAULT_KIRO_AUTH_METHOD = exports.KIRO_CLI_AUTH_METHODS = exports.KIRO_AUTH_METHODS = void 0;
+const provider_capabilities_1 = require("../provider-capabilities");
+/**
+ * Kiro authentication methods supported by CLIProxyAPIPlus.
+ * - aws: AWS Builder ID via Device Code flow
+ * - aws-authcode: AWS Builder ID via Authorization Code flow (CLI flag only)
+ * - google: Social OAuth via Google
+ * - github: Social OAuth via GitHub (management API only)
+ */
+exports.KIRO_AUTH_METHODS = ['aws', 'aws-authcode', 'google', 'github'];
+/** CLI binary supports these Kiro methods directly via flags. */
+exports.KIRO_CLI_AUTH_METHODS = ['aws', 'aws-authcode', 'google'];
+/** Default Kiro method for CCS UX and AWS Organization support. */
+exports.DEFAULT_KIRO_AUTH_METHOD = 'aws';
+function isKiroAuthMethod(value) {
+    return exports.KIRO_AUTH_METHODS.includes(value);
+}
+exports.isKiroAuthMethod = isKiroAuthMethod;
+function isKiroCLIAuthMethod(value) {
+    return exports.KIRO_CLI_AUTH_METHODS.includes(value);
+}
+exports.isKiroCLIAuthMethod = isKiroCLIAuthMethod;
+function normalizeKiroAuthMethod(value) {
+    if (!value)
+        return exports.DEFAULT_KIRO_AUTH_METHOD;
+    const normalized = value.trim().toLowerCase();
+    return isKiroAuthMethod(normalized) ? normalized : exports.DEFAULT_KIRO_AUTH_METHOD;
+}
+exports.normalizeKiroAuthMethod = normalizeKiroAuthMethod;
+function isKiroDeviceCodeMethod(method) {
+    return method === 'aws';
+}
+exports.isKiroDeviceCodeMethod = isKiroDeviceCodeMethod;
+function getKiroCallbackPort(method) {
+    return isKiroDeviceCodeMethod(method) ? null : 9876;
+}
+exports.getKiroCallbackPort = getKiroCallbackPort;
+function getKiroCLIAuthFlag(method) {
+    switch (method) {
+        case 'aws':
+            return '--kiro-aws-login';
+        case 'aws-authcode':
+            return '--kiro-aws-authcode';
+        case 'google':
+            return '--kiro-google-login';
+    }
+}
+exports.getKiroCLIAuthFlag = getKiroCLIAuthFlag;
+/**
+ * Kiro method for CLIProxyAPI management endpoint:
+ * GET /v0/management/kiro-auth-url?method=<value>
+ */
+function toKiroManagementMethod(method) {
+    switch (method) {
+        case 'google':
+            return 'google';
+        case 'github':
+            return 'github';
+        case 'aws-authcode':
+            return 'aws';
+        case 'aws':
+        default:
+            return 'aws';
+    }
+}
+exports.toKiroManagementMethod = toKiroManagementMethod;
+/**
+ * OAuth callback ports used by CLIProxyAPI (hardcoded in binary)
+ * See: https://github.com/router-for-me/CLIProxyAPI/tree/main/internal/auth
+ *
+ * OAuth flow types per provider:
+ * - Gemini: Authorization Code Flow with local callback server on port 8085
+ * - Codex:  Authorization Code Flow with local callback server on port 1455
+ * - Agy:    Authorization Code Flow with local callback server on port 51121
+ * - iFlow:  Authorization Code Flow with local callback server on port 11451
+ * - Claude: Authorization Code Flow with local callback server on port 54545 (Anthropic OAuth)
+ * - Kiro:   Device Code Flow (polling-based, NO callback port needed)
+ * - Qwen:   Device Code Flow (polling-based, NO callback port needed)
+ * - GHCP:   Device Code Flow (polling-based, NO callback port needed)
+ * - Kimi:   Device Code Flow (polling-based, NO callback port needed)
+ */
+exports.OAUTH_CALLBACK_PORTS = provider_capabilities_1.CLIPROXY_PROVIDER_IDS.reduce((acc, provider) => {
+    const callbackPort = (0, provider_capabilities_1.getOAuthCallbackPort)(provider);
+    if (callbackPort !== null) {
+        acc[provider] = callbackPort;
+    }
+    return acc;
+}, {});
+/**
+ * OAuth configurations per provider
+ * Note: CLIProxyAPI handles actual OAuth - these are for display/manual flow
+ */
+exports.OAUTH_CONFIGS = {
+    gemini: {
+        provider: 'gemini',
+        displayName: 'Google Gemini',
+        authUrl: 'https://accounts.google.com/o/oauth2/v2/auth',
+        scopes: ['https://www.googleapis.com/auth/generative-language'],
+        authFlag: '--login',
+    },
+    codex: {
+        provider: 'codex',
+        displayName: 'Codex',
+        authUrl: 'https://auth.openai.com/authorize',
+        scopes: ['openid', 'profile'],
+        authFlag: '--codex-login',
+    },
+    agy: {
+        provider: 'agy',
+        displayName: 'Antigravity',
+        authUrl: 'https://antigravity.ai/oauth/authorize',
+        scopes: ['api'],
+        authFlag: '--antigravity-login',
+    },
+    qwen: {
+        provider: 'qwen',
+        displayName: 'Qwen Code',
+        authUrl: 'https://chat.qwen.ai/api/v1/oauth2/device/code',
+        scopes: ['openid', 'profile', 'email', 'model.completion'],
+        authFlag: '--qwen-login',
+    },
+    iflow: {
+        provider: 'iflow',
+        displayName: 'iFlow',
+        authUrl: 'https://iflow.cn/oauth',
+        scopes: ['phone', 'profile', 'email'],
+        authFlag: '--iflow-login',
+    },
+    kiro: {
+        provider: 'kiro',
+        displayName: 'Kiro (AWS)',
+        authUrl: 'https://oidc.us-east-1.amazonaws.com',
+        scopes: ['codewhisperer:completions', 'codewhisperer:conversations'],
+        // Default to AWS Builder ID device code flow for better compatibility.
+        // Other Kiro methods are selected at runtime via OAuthOptions.kiroMethod.
+        authFlag: '--kiro-aws-login',
+    },
+    ghcp: {
+        provider: 'ghcp',
+        displayName: 'GitHub Copilot (OAuth)',
+        authUrl: 'https://github.com/login/device/code',
+        scopes: ['copilot'],
+        authFlag: '--github-copilot-login',
+    },
+    claude: {
+        provider: 'claude',
+        displayName: 'Claude (Anthropic)',
+        authUrl: 'https://console.anthropic.com/oauth/authorize',
+        scopes: ['user:inference', 'user:profile'],
+        authFlag: '--claude-login',
+    },
+    kimi: {
+        provider: 'kimi',
+        displayName: 'Kimi (Moonshot)',
+        authUrl: 'https://auth.kimi.com/api/oauth/device_authorization',
+        scopes: ['api'],
+        authFlag: '--kimi-login',
+    },
+};
+/**
+ * Provider-specific auth file prefixes (fallback detection)
+ * CLIProxyAPI names auth files with provider prefix (e.g., "antigravity-user@email.json")
+ * Note: Gemini tokens may NOT have prefix - CLIProxyAPI uses {email}-{projectID}.json format
+ */
+exports.PROVIDER_AUTH_PREFIXES = (0, provider_capabilities_1.buildProviderMap)((provider) => [...(0, provider_capabilities_1.getProviderAuthFilePrefixes)(provider)]);
+/**
+ * Provider type values inside token JSON files
+ * CLIProxyAPI sets "type" field in token JSON (e.g., {"type": "gemini"})
+ */
+exports.PROVIDER_TYPE_VALUES = (0, provider_capabilities_1.buildProviderMap)((provider) => [...(0, provider_capabilities_1.getProviderTokenTypeValues)(provider)]);
+/**
+ * Maps CCS provider names to CLIProxyAPI callback provider names
+ * Used when submitting OAuth callbacks to CLIProxyAPI management endpoint
+ */
+exports.CLIPROXY_CALLBACK_PROVIDER_MAP = (0, provider_capabilities_1.buildProviderMap)((provider) => (0, provider_capabilities_1.getCLIProxyCallbackProviderName)(provider));
+/**
+ * Maps CCS provider names to CLIProxyAPI auth-url endpoint prefixes.
+ * Used for GET /v0/management/${prefix}-auth-url endpoints.
+ * These differ from callback names for some providers (e.g., gemini-cli vs gemini).
+ */
+exports.CLIPROXY_AUTH_URL_PROVIDER_MAP = (0, provider_capabilities_1.buildProviderMap)((provider) => (0, provider_capabilities_1.getCLIProxyAuthUrlProviderName)(provider));
+function getManagementAuthUrlPath(provider) {
+    const authUrlProvider = exports.CLIPROXY_AUTH_URL_PROVIDER_MAP[provider] || provider;
+    return `/v0/management/${authUrlProvider}-auth-url?is_webui=true`;
+}
+exports.getManagementAuthUrlPath = getManagementAuthUrlPath;
+function getPasteCallbackStartPath(provider) {
+    // Kiro CLI auth methods still use the legacy start route.
+    if (provider === 'kiro') {
+        return `/oauth/${provider}/start`;
+    }
+    return getManagementAuthUrlPath(provider);
+}
+exports.getPasteCallbackStartPath = getPasteCallbackStartPath;
+function getManagementOAuthCallbackPath() {
+    return '/v0/management/oauth-callback';
+}
+exports.getManagementOAuthCallbackPath = getManagementOAuthCallbackPath;
+/**
+ * Get OAuth config for provider
+ */
+function getOAuthConfig(provider) {
+    const config = exports.OAUTH_CONFIGS[provider];
+    if (!config) {
+        throw new Error(`Unknown provider: ${provider}`);
+    }
+    return config;
+}
+exports.getOAuthConfig = getOAuthConfig;
+//# sourceMappingURL=auth-types.js.map

package/dist/cliproxy/auth/auth-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-types.js","sourceRoot":"","sources":["../../../src/cliproxy/auth/auth-types.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAIH,oEAQkC;AAElC;;;;;;GAMG;AACU,QAAA,iBAAiB,GAAG,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAGtF,iEAAiE;AACpD,QAAA,qBAAqB,GAAG,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,CAAU,CAAC;AAGhF,mEAAmE;AACtD,QAAA,wBAAwB,GAAmB,KAAK,CAAC;AAE9D,SAAgB,gBAAgB,CAAC,KAAa;IAC5C,OAAO,yBAAiB,CAAC,QAAQ,CAAC,KAAuB,CAAC,CAAC;AAC7D,CAAC;AAFD,4CAEC;AAED,SAAgB,mBAAmB,CAAC,KAAa;IAC/C,OAAO,6BAAqB,CAAC,QAAQ,CAAC,KAA0B,CAAC,CAAC;AACpE,CAAC;AAFD,kDAEC;AAED,SAAgB,uBAAuB,CAAC,KAAc;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,gCAAwB,CAAC;IAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,gCAAwB,CAAC;AAC9E,CAAC;AAJD,0DAIC;AAED,SAAgB,sBAAsB,CAAC,MAAsB;IAC3D,OAAO,MAAM,KAAK,KAAK,CAAC;AAC1B,CAAC;AAFD,wDAEC;AAED,SAAgB,mBAAmB,CAAC,MAAsB;IACxD,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAFD,kDAEC;AAED,SAAgB,kBAAkB,CAAC,MAAyB;IAC1D,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,KAAK;YACR,OAAO,kBAAkB,CAAC;QAC5B,KAAK,cAAc;YACjB,OAAO,qBAAqB,CAAC;QAC/B,KAAK,QAAQ;YACX,OAAO,qBAAqB,CAAC;IACjC,CAAC;AACH,CAAC;AATD,gDASC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,MAAsB;IAC3D,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,cAAc;YACjB,OAAO,KAAK,CAAC;QACf,KAAK,KAAK,CAAC;QACX;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAZD,wDAYC;AAED;;;;;;;;;;;;;;GAcG;AACU,QAAA,oBAAoB,GAC/B,6CAAqB,CAAC,MAAM,CAC1B,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;IAChB,MAAM,YAAY,GAAG,IAAA,4CAAoB,EAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,GAAG,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,EACD,EAA+C,CAChD,CAAC;AAsCJ;;;GAGG;AACU,QAAA,aAAa,GAAkD;IAC1E,MAAM,EAAE;QACN,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,eAAe;QAC5B,OAAO,EAAE,8CAA8C;QACvD,MAAM,EAAE,CAAC,qDAAqD,CAAC;QAC/D,QAAQ,EAAE,SAAS;KACpB;IACD,KAAK,EAAE;QACL,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,mCAAmC;QAC5C,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC7B,QAAQ,EAAE,eAAe;KAC1B;IACD,GAAG,EAAE;QACH,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,aAAa;QAC1B,OAAO,EAAE,wCAAwC;QACjD,MAAM,EAAE,CAAC,KAAK,CAAC;QACf,QAAQ,EAAE,qBAAqB;KAChC;IACD,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,WAAW;QACxB,OAAO,EAAE,gDAAgD;QACzD,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC;QAC1D,QAAQ,EAAE,cAAc;KACzB;IACD,KAAK,EAAE;QACL,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,wBAAwB;QACjC,MAAM,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;QACrC,QAAQ,EAAE,eAAe;KAC1B;IACD,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,sCAAsC;QAC/C,MAAM,EAAE,CAAC,2BAA2B,EAAE,6BAA6B,CAAC;QACpE,uEAAuE;QACvE,0EAA0E;QAC1E,QAAQ,EAAE,kBAAkB;KAC7B;IACD,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,wBAAwB;QACrC,OAAO,EAAE,sCAAsC;QAC/C,MAAM,EAAE,CAAC,SAAS,CAAC;QACnB,QAAQ,EAAE,wBAAwB;KACnC;IACD,MAAM,EAAE;QACN,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,oBAAoB;QACjC,OAAO,EAAE,+CAA+C;QACxD,MAAM,EAAE,CAAC,gBAAgB,EAAE,cAAc,CAAC;QAC1C,QAAQ,EAAE,gBAAgB;KAC3B;IACD,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,iBAAiB;QAC9B,OAAO,EAAE,sDAAsD;QAC/D,MAAM,EAAE,CAAC,KAAK,CAAC;QACf,QAAQ,EAAE,cAAc;KACzB;CACF,CAAC;AAEF;;;;GAIG;AACU,QAAA,sBAAsB,GAAuC,IAAA,wCAAgB,EACxF,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,GAAG,IAAA,mDAA2B,EAAC,QAAQ,CAAC,CAAC,CACzD,CAAC;AAEF;;;GAGG;AACU,QAAA,oBAAoB,GAAuC,IAAA,wCAAgB,EACtF,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,GAAG,IAAA,kDAA0B,EAAC,QAAQ,CAAC,CAAC,CACxD,CAAC;AAEF;;;GAGG;AACU,QAAA,8BAA8B,GAAqC,IAAA,wCAAgB,EAC9F,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAA,uDAA+B,EAAC,QAAQ,CAAC,CACxD,CAAC;AAEF;;;;GAIG;AACU,QAAA,8BAA8B,GAAqC,IAAA,wCAAgB,EAC9F,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAA,sDAA8B,EAAC,QAAQ,CAAC,CACvD,CAAC;AAEF,SAAgB,wBAAwB,CAAC,QAA0B;IACjE,MAAM,eAAe,GAAG,sCAA8B,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC;IAC7E,OAAO,kBAAkB,eAAe,yBAAyB,CAAC;AACpE,CAAC;AAHD,4DAGC;AAED,SAAgB,yBAAyB,CAAC,QAA0B;IAClE,0DAA0D;IAC1D,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,UAAU,QAAQ,QAAQ,CAAC;IACpC,CAAC;IACD,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAND,8DAMC;AAED,SAAgB,8BAA8B;IAC5C,OAAO,+BAA+B,CAAC;AACzC,CAAC;AAFD,wEAEC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,QAA0B;IACvD,MAAM,MAAM,GAAG,qBAAa,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAND,wCAMC"}

package/dist/cliproxy/auth/environment-detector.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Environment Detector for CLIProxyAPI
+ *
+ * Detects headless environments and manages OAuth callback ports.
+ */
+import { CLIProxyProvider } from '../types';
+/**
+ * Detect if running in a headless environment (no browser available)
+ *
+ * IMPROVED: Avoids false positives on Windows desktop environments
+ * where isTTY may be undefined due to terminal wrapper behavior.
+ *
+ * Case study: Vietnamese Windows users reported "command hangs" because
+ * their terminal (PowerShell via npm) didn't set isTTY correctly.
+ */
+export declare function isHeadlessEnvironment(): boolean;
+/**
+ * Kill any process using a specific port
+ * Used to free OAuth callback port before authentication
+ */
+export declare function killProcessOnPort(port: number, verbose: boolean): boolean;
+/**
+ * Get platform-specific troubleshooting for OAuth timeout
+ */
+export declare function getTimeoutTroubleshooting(provider: CLIProxyProvider, port: number | null): string[];
+/**
+ * Display a single step status line
+ */
+export declare function showStep(step: number, total: number, status: 'ok' | 'fail' | 'progress', message: string): void;
+//# sourceMappingURL=environment-detector.d.ts.map

package/dist/cliproxy/auth/environment-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-detector.d.ts","sourceRoot":"","sources":["../../../src/cliproxy/auth/environment-detector.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE5C;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAqC/C;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAmCzE;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,GAClB,MAAM,EAAE,CAoBV;AAED;;GAEG;AACH,wBAAgB,QAAQ,CACtB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,IAAI,GAAG,MAAM,GAAG,UAAU,EAClC,OAAO,EAAE,MAAM,GACd,IAAI,CAGN"}