@georgedong32/ccs 7.67.0 → 8.0.0

package/dist/cliproxy/antigravity-responsibility.js

@@ -1,171 +0,0 @@
-"use strict";
-/**
- * Antigravity OAuth Responsibility Gate
- *
- * Enforces explicit user acknowledgement for Antigravity OAuth usage.
- * This is used by:
- * - CLI OAuth flow (`ccs agy --auth`)
- * - CLI runtime flow (`ccs agy`)
- * - Dashboard auth endpoints (server-side payload validation)
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ensureCliAntigravityResponsibility = exports.validateAntigravityRiskAcknowledgement = exports.hasAntigravityRiskAcceptanceFlag = exports.isAntigravityResponsibilityBypassEnabled = exports.ANTIGRAVITY_ACCEPT_RISK_FLAGS = exports.ANTIGRAVITY_ACK_PHRASE = exports.RISK_ACK_PHRASE = exports.ANTIGRAVITY_ACK_VERSION = exports.ANTIGRAVITY_RISK_ISSUE_URL = void 0;
-const readline_1 = require("readline");
-const ui_1 = require("../utils/ui");
-const unified_config_loader_1 = require("../config/unified-config-loader");
-exports.ANTIGRAVITY_RISK_ISSUE_URL = 'https://github.com/kaitranntt/ccs/issues/509';
-exports.ANTIGRAVITY_ACK_VERSION = '2026-02-24-antigravity-oauth-v2';
-exports.RISK_ACK_PHRASE = 'I ACCEPT RISK';
-exports.ANTIGRAVITY_ACK_PHRASE = exports.RISK_ACK_PHRASE;
-exports.ANTIGRAVITY_ACCEPT_RISK_FLAGS = ['--accept-agr-risk', '--accept-antigravity-risk'];
-function normalizePhrase(value) {
-    return value.trim().replace(/\s+/g, ' ').toUpperCase();
-}
-function isTruthyEnv(value) {
-    if (!value)
-        return false;
-    const normalized = value.trim().toLowerCase();
-    return normalized === '1' || normalized === 'true' || normalized === 'yes';
-}
-function isAntigravityResponsibilityBypassEnabled() {
-    if (isTruthyEnv(process.env.CCS_ACCEPT_AGY_RISK)) {
-        return true;
-    }
-    try {
-        const safety = (0, unified_config_loader_1.getCliproxySafetyConfig)();
-        return safety.antigravity_ack_bypass === true;
-    }
-    catch {
-        return false;
-    }
-}
-exports.isAntigravityResponsibilityBypassEnabled = isAntigravityResponsibilityBypassEnabled;
-function askQuestion(rl, prompt) {
-    return new Promise((resolve) => {
-        let settled = false;
-        const onClose = () => {
-            if (!settled) {
-                settled = true;
-                resolve(null);
-            }
-        };
-        rl.once('close', onClose);
-        rl.question(prompt, (answer) => {
-            if (settled)
-                return;
-            settled = true;
-            rl.removeListener('close', onClose);
-            resolve(answer.trim());
-        });
-    });
-}
-async function askYesNoStep(rl, step, message) {
-    while (true) {
-        const answer = await askQuestion(rl, `[?] ${step}\n    ${message}\n    Type YES to continue (NO to cancel): `);
-        if (answer === null)
-            return false;
-        const normalized = answer.toUpperCase();
-        if (normalized === 'YES')
-            return true;
-        if (normalized === 'NO' || normalized === 'N' || normalized === '')
-            return false;
-        console.error((0, ui_1.warn)('Please type YES or NO.'));
-    }
-}
-async function askResponsibilityPhrase(rl) {
-    for (let attempt = 0; attempt < 3; attempt++) {
-        const answer = await askQuestion(rl, `[?] Step 4/4\n    Type exactly "${exports.ANTIGRAVITY_ACK_PHRASE}": `);
-        if (answer === null || answer === '')
-            return false;
-        if (normalizePhrase(answer) === exports.ANTIGRAVITY_ACK_PHRASE) {
-            return true;
-        }
-        console.error((0, ui_1.warn)('Phrase mismatch. Try again.'));
-    }
-    return false;
-}
-function printResponsibilityHeader(context) {
-    const contextLine = context === 'oauth'
-        ? 'You are starting Antigravity OAuth account authorization.'
-        : 'You are starting a live Antigravity CLI session (ccs agy).';
-    console.error('');
-    console.error('╔══════════════════════════════════════════════════════════════════════╗');
-    console.error('║ Antigravity Responsibility Confirmation (Mandatory)                  ║');
-    console.error('╚══════════════════════════════════════════════════════════════════════╝');
-    console.error(`    ${contextLine}`);
-    console.error('    Antigravity has active ban/suspension patterns for risky OAuth usage.');
-    console.error(`    Policy issue: ${exports.ANTIGRAVITY_RISK_ISSUE_URL}`);
-    console.error('');
-}
-function hasAntigravityRiskAcceptanceFlag(args) {
-    return args.some((arg) => exports.ANTIGRAVITY_ACCEPT_RISK_FLAGS.includes(arg));
-}
-exports.hasAntigravityRiskAcceptanceFlag = hasAntigravityRiskAcceptanceFlag;
-function validateAntigravityRiskAcknowledgement(payload) {
-    if (!payload || typeof payload !== 'object') {
-        return {
-            valid: false,
-            error: 'Antigravity OAuth requires a full responsibility acknowledgement payload.',
-        };
-    }
-    const data = payload;
-    if (data.version !== exports.ANTIGRAVITY_ACK_VERSION) {
-        return {
-            valid: false,
-            error: 'Antigravity acknowledgement version mismatch. Re-open add account and try again.',
-        };
-    }
-    if (!data.reviewedIssue509 || !data.understandsBanRisk || !data.acceptsFullResponsibility) {
-        return {
-            valid: false,
-            error: 'Complete all Antigravity responsibility checklist steps before authenticating.',
-        };
-    }
-    if (typeof data.typedPhrase !== 'string' ||
-        normalizePhrase(data.typedPhrase) !== exports.ANTIGRAVITY_ACK_PHRASE) {
-        return {
-            valid: false,
-            error: `Type exact acknowledgement phrase: "${exports.ANTIGRAVITY_ACK_PHRASE}".`,
-        };
-    }
-    return { valid: true };
-}
-exports.validateAntigravityRiskAcknowledgement = validateAntigravityRiskAcknowledgement;
-async function ensureCliAntigravityResponsibility(options) {
-    if (options.acceptedByFlag || isAntigravityResponsibilityBypassEnabled()) {
-        return true;
-    }
-    if (!process.stdin.isTTY || !process.stderr.isTTY) {
-        console.error((0, ui_1.fail)('Antigravity responsibility acknowledgement required.'));
-        console.error('    Re-run interactively and complete the 4-step confirmation.');
-        console.error('    Non-interactive override: --accept-agr-risk');
-        return false;
-    }
-    printResponsibilityHeader(options.context);
-    const rl = (0, readline_1.createInterface)({
-        input: process.stdin,
-        output: process.stderr,
-    });
-    try {
-        const step1 = await askYesNoStep(rl, 'Step 1/4', 'I reviewed issue #509 and understand AGY OAuth can trigger bans/suspensions.');
-        if (!step1)
-            return false;
-        const step2 = await askYesNoStep(rl, 'Step 2/4', 'I understand this OAuth operation is my own decision and I choose to continue.');
-        if (!step2)
-            return false;
-        const step3 = await askYesNoStep(rl, 'Step 3/4', 'I accept that CCS provides no responsibility coverage for account loss, bans, or suspension.');
-        if (!step3)
-            return false;
-        const step4 = await askResponsibilityPhrase(rl);
-        if (!step4)
-            return false;
-        console.error((0, ui_1.ok)('Antigravity responsibility acknowledgement accepted for this command.'));
-        console.error((0, ui_1.info)('Proceeding with Antigravity flow...'));
-        return true;
-    }
-    finally {
-        rl.close();
-    }
-}
-exports.ensureCliAntigravityResponsibility = ensureCliAntigravityResponsibility;
-//# sourceMappingURL=antigravity-responsibility.js.map

package/dist/cliproxy/antigravity-responsibility.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"antigravity-responsibility.js","sourceRoot":"","sources":["../../src/cliproxy/antigravity-responsibility.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAEH,uCAAsD;AACtD,oCAAmD;AACnD,2EAA0E;AAE7D,QAAA,0BAA0B,GAAG,8CAA8C,CAAC;AAC5E,QAAA,uBAAuB,GAAG,iCAAiC,CAAC;AAC5D,QAAA,eAAe,GAAG,eAAe,CAAC;AAClC,QAAA,sBAAsB,GAAG,uBAAe,CAAC;AACzC,QAAA,6BAA6B,GAAG,CAAC,mBAAmB,EAAE,2BAA2B,CAAC,CAAC;AAsBhG,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB;IAC5C,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,KAAK,CAAC;AAC7E,CAAC;AAED,SAAgB,wCAAwC;IACtD,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,+CAAuB,GAAE,CAAC;QACzC,OAAO,MAAM,CAAC,sBAAsB,KAAK,IAAI,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAXD,4FAWC;AAED,SAAS,WAAW,CAAC,EAAa,EAAE,MAAc;IAChD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC;QAEF,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1B,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;YAC7B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,EAAa,EAAE,IAAY,EAAE,OAAe;IACtE,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,EAAE,EACF,OAAO,IAAI,SAAS,OAAO,6CAA6C,CACzE,CAAC;QAEF,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAClC,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,UAAU,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACtC,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QACjF,OAAO,CAAC,KAAK,CAAC,IAAA,SAAI,EAAC,wBAAwB,CAAC,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,EAAa;IAClD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,EAAE,EACF,mCAAmC,8BAAsB,KAAK,CAC/D,CAAC;QACF,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QAEnD,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,8BAAsB,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,IAAA,SAAI,EAAC,6BAA6B,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,yBAAyB,CAAC,OAAuB;IACxD,MAAM,WAAW,GACf,OAAO,KAAK,OAAO;QACjB,CAAC,CAAC,2DAA2D;QAC7D,CAAC,CAAC,4DAA4D,CAAC;IAEnE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC1F,OAAO,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC1F,OAAO,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC1F,OAAO,CAAC,KAAK,CAAC,OAAO,WAAW,EAAE,CAAC,CAAC;IACpC,OAAO,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC3F,OAAO,CAAC,KAAK,CAAC,qBAAqB,kCAA0B,EAAE,CAAC,CAAC;IACjE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC;AAED,SAAgB,gCAAgC,CAAC,IAAc;IAC7D,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,qCAA6B,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AACzE,CAAC;AAFD,4EAEC;AAED,SAAgB,sCAAsC,CAAC,OAAgB;IACrE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,2EAA2E;SACnF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,OAAkD,CAAC;IAEhE,IAAI,IAAI,CAAC,OAAO,KAAK,+BAAuB,EAAE,CAAC;QAC7C,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,kFAAkF;SAC1F,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAC1F,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,gFAAgF;SACxF,CAAC;IACJ,CAAC;IAED,IACE,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QACpC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,8BAAsB,EAC5D,CAAC;QACD,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,uCAAuC,8BAAsB,IAAI;SACzE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAnCD,wFAmCC;AAEM,KAAK,UAAU,kCAAkC,CACtD,OAA6B;IAE7B,IAAI,OAAO,CAAC,cAAc,IAAI,wCAAwC,EAAE,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClD,OAAO,CAAC,KAAK,CAAC,IAAA,SAAI,EAAC,sDAAsD,CAAC,CAAC,CAAC;QAC5E,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QAChF,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,yBAAyB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE3C,MAAM,EAAE,GAAG,IAAA,0BAAe,EAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,EAAE,EACF,UAAU,EACV,8EAA8E,CAC/E,CAAC;QACF,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,EAAE,EACF,UAAU,EACV,gFAAgF,CACjF,CAAC;QACF,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,EAAE,EACF,UAAU,EACV,8FAA8F,CAC/F,CAAC;QACF,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,OAAO,CAAC,KAAK,CAAC,IAAA,OAAE,EAAC,uEAAuE,CAAC,CAAC,CAAC;QAC3F,OAAO,CAAC,KAAK,CAAC,IAAA,SAAI,EAAC,qCAAqC,CAAC,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AApDD,gFAoDC"}

package/dist/cliproxy/auth/gemini-token-refresh.d.ts

@@ -1,40 +0,0 @@
-/**
- * Gemini Token Refresh
- *
- * Handles proactive token validation and refresh for Gemini OAuth tokens.
- * Prevents UND_ERR_SOCKET errors by ensuring tokens are valid before use.
- *
- * Token sources (priority order):
- * 1. CLIProxy auth dir (~/.ccs/cliproxy/auth/) - CCS-managed tokens
- * 2. Standard Gemini CLI (~/.gemini/oauth_creds.json) - backward compatibility
- */
-/**
- * Get path to Gemini OAuth credentials file
- */
-export declare function getGeminiOAuthPath(): string;
-/**
- * Check if Gemini token is expired or expiring soon
- */
-export declare function isGeminiTokenExpiringSoon(accountId?: string): boolean;
-/**
- * Refresh Gemini access token using refresh_token
- * @param accountId Optional account ID for account-scoped refresh
- * @returns Result with success status, optional error, and expiry time
- */
-export declare function refreshGeminiToken(accountId?: string): Promise<{
-    success: boolean;
-    error?: string;
-    expiresAt?: number;
-}>;
-/**
- * Ensure Gemini token is valid, refreshing if needed
- * @param verbose Log progress if true
- * @param accountId Optional account ID for account-scoped refresh
- * @returns true if token is valid (or was refreshed), false if refresh failed
- */
-export declare function ensureGeminiTokenValid(verbose?: boolean, accountId?: string): Promise<{
-    valid: boolean;
-    refreshed: boolean;
-    error?: string;
-}>;
-//# sourceMappingURL=gemini-token-refresh.d.ts.map

package/dist/cliproxy/auth/gemini-token-refresh.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gemini-token-refresh.d.ts","sourceRoot":"","sources":["../../../src/cliproxy/auth/gemini-token-refresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAsEH;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AA+ND;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAUrE;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACpE,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC,CAkED;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,UAAQ,EACf,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;IACT,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAwBD"}

package/dist/cliproxy/auth/gemini-token-refresh.js

@@ -1,371 +0,0 @@
-"use strict";
-/**
- * Gemini Token Refresh
- *
- * Handles proactive token validation and refresh for Gemini OAuth tokens.
- * Prevents UND_ERR_SOCKET errors by ensuring tokens are valid before use.
- *
- * Token sources (priority order):
- * 1. CLIProxy auth dir (~/.ccs/cliproxy/auth/) - CCS-managed tokens
- * 2. Standard Gemini CLI (~/.gemini/oauth_creds.json) - backward compatibility
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ensureGeminiTokenValid = exports.refreshGeminiToken = exports.isGeminiTokenExpiringSoon = exports.getGeminiOAuthPath = void 0;
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-const os = __importStar(require("os"));
-const config_generator_1 = require("../config-generator");
-const account_manager_1 = require("../account-manager");
-const token_manager_1 = require("./token-manager");
-/** Google OAuth token endpoint */
-const GOOGLE_TOKEN_URL = 'https://oauth2.googleapis.com/token';
-/** Refresh tokens 5 minutes before expiry */
-const REFRESH_LEAD_TIME_MS = 5 * 60 * 1000;
-const GEMINI_CLIENT_ID_ENV_KEYS = ['CCS_GEMINI_OAUTH_CLIENT_ID', 'OPENCLAW_GEMINI_OAUTH_CLIENT_ID'];
-const GEMINI_CLIENT_SECRET_ENV_KEYS = [
-    'CCS_GEMINI_OAUTH_CLIENT_SECRET',
-    'OPENCLAW_GEMINI_OAUTH_CLIENT_SECRET',
-];
-/**
- * Get path to Gemini OAuth credentials file
- */
-function getGeminiOAuthPath() {
-    return path.join(os.homedir(), '.gemini', 'oauth_creds.json');
-}
-exports.getGeminiOAuthPath = getGeminiOAuthPath;
-/**
- * Map CLIProxyAPI token format to internal GeminiOAuthCreds format
- */
-function mapCliproxyToGeminiCreds(cliproxy) {
-    return {
-        access_token: cliproxy.token.access_token,
-        refresh_token: cliproxy.token.refresh_token,
-        expiry_date: cliproxy.token.expiry,
-        token_type: 'Bearer',
-        client_id: cliproxy.token.client_id,
-        client_secret: cliproxy.token.client_secret,
-        token_uri: cliproxy.token.token_uri,
-    };
-}
-/**
- * Validate CLIProxyAPI token structure has required fields
- */
-function isValidCliproxyToken(data) {
-    if (typeof data !== 'object' || data === null)
-        return false;
-    const obj = data;
-    if (obj.type !== 'gemini')
-        return false;
-    if (typeof obj.token !== 'object' || obj.token === null)
-        return false;
-    const token = obj.token;
-    return typeof token.access_token === 'string';
-}
-function getFirstEnvValue(keys) {
-    for (const key of keys) {
-        const value = process.env[key]?.trim();
-        if (value) {
-            return value;
-        }
-    }
-    return undefined;
-}
-function resolveGeminiRefreshCredentials(creds) {
-    const clientId = creds.client_id?.trim() || getFirstEnvValue(GEMINI_CLIENT_ID_ENV_KEYS);
-    const clientSecret = creds.client_secret?.trim() || getFirstEnvValue(GEMINI_CLIENT_SECRET_ENV_KEYS);
-    if (!clientId || !clientSecret) {
-        return {
-            error: 'Gemini token refresh unavailable: missing OAuth client credentials in the token file. ' +
-                'Re-authenticate with CLIProxy or set CCS_GEMINI_OAUTH_CLIENT_ID and CCS_GEMINI_OAUTH_CLIENT_SECRET.',
-        };
-    }
-    return {
-        credentials: {
-            clientId,
-            clientSecret,
-            tokenUrl: creds.token_uri?.trim() || GOOGLE_TOKEN_URL,
-        },
-    };
-}
-/**
- * Read Gemini token from CLIProxy auth directory
- * Returns credentials with source path, or null if no valid token found
- */
-function readCliproxyGeminiCreds(accountId) {
-    const authDir = (0, config_generator_1.getProviderAuthDir)('gemini');
-    if (!fs.existsSync(authDir))
-        return null;
-    let tokenPath = null;
-    const normalizedAccountId = accountId?.trim();
-    const accounts = (0, account_manager_1.getProviderAccounts)('gemini');
-    // Account-specific refresh path (used by background worker)
-    if (normalizedAccountId) {
-        const targetAccount = accounts.find((account) => account.id === normalizedAccountId);
-        if (!targetAccount) {
-            return null;
-        }
-        tokenPath = path.join(authDir, targetAccount.tokenFile);
-    }
-    if (!normalizedAccountId) {
-        // Try to find default account's token file
-        const defaultAccount = (0, account_manager_1.getDefaultAccount)('gemini');
-        if (defaultAccount) {
-            tokenPath = path.join(authDir, defaultAccount.tokenFile);
-            if (!fs.existsSync(tokenPath))
-                tokenPath = null;
-        }
-        // Fallback: find any gemini account token file
-        if (!tokenPath && accounts.length > 0) {
-            tokenPath = path.join(authDir, accounts[0].tokenFile);
-            if (!fs.existsSync(tokenPath))
-                tokenPath = null;
-        }
-        // Last fallback: scan directory for gemini token files
-        if (!tokenPath) {
-            try {
-                const files = fs.readdirSync(authDir).filter((f) => f.endsWith('.json'));
-                for (const file of files) {
-                    const filePath = path.join(authDir, file);
-                    if (file.startsWith('gemini-') || (0, token_manager_1.isTokenFileForProvider)(filePath, 'gemini')) {
-                        tokenPath = filePath;
-                        break;
-                    }
-                }
-            }
-            catch {
-                // Directory read failed - continue to return null
-                return null;
-            }
-        }
-    }
-    if (!tokenPath)
-        return null;
-    try {
-        const content = fs.readFileSync(tokenPath, 'utf8');
-        const data = JSON.parse(content);
-        // Validate CLIProxyAPI format with proper type checking
-        if (isValidCliproxyToken(data)) {
-            return {
-                creds: mapCliproxyToGeminiCreds(data),
-                sourcePath: tokenPath,
-            };
-        }
-        return null;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Read Gemini OAuth credentials
- * Priority: CLIProxy auth dir first, then ~/.gemini/oauth_creds.json
- * Returns credentials with source path for correct write-back
- */
-function readGeminiCreds(accountId) {
-    // 1. Try CLIProxy auth directory first (CCS-managed tokens)
-    const cliproxyResult = readCliproxyGeminiCreds(accountId);
-    if (cliproxyResult) {
-        return cliproxyResult;
-    }
-    // Account-scoped refresh is only supported for CLIProxy account files.
-    // Do not fall back to ~/.gemini for a specific accountId.
-    if (accountId?.trim()) {
-        return null;
-    }
-    // 2. Fall back to standard Gemini CLI location
-    const oauthPath = getGeminiOAuthPath();
-    if (!fs.existsSync(oauthPath)) {
-        return null;
-    }
-    try {
-        const content = fs.readFileSync(oauthPath, 'utf8');
-        return {
-            creds: JSON.parse(content),
-            sourcePath: oauthPath,
-        };
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Write updated credentials to CLIProxy token file
- * Preserves existing fields (email, project_id), only updates token subfields
- */
-function writeCliproxyGeminiCreds(tokenPath, creds) {
-    try {
-        const existing = JSON.parse(fs.readFileSync(tokenPath, 'utf8'));
-        const updated = {
-            ...existing,
-            token: {
-                ...existing.token,
-                access_token: creds.access_token,
-                refresh_token: creds.refresh_token,
-                expiry: creds.expiry_date,
-            },
-        };
-        fs.writeFileSync(tokenPath, JSON.stringify(updated, null, 2), { mode: 0o600 });
-        return undefined;
-    }
-    catch (err) {
-        return err instanceof Error ? err.message : 'Failed to write credentials';
-    }
-}
-/**
- * Write Gemini OAuth credentials
- * Writes back to the specified source location (CLIProxy or ~/.gemini)
- * @param creds - The credentials to write
- * @param sourcePath - The path where credentials were originally read from
- * @returns error message if write failed, undefined on success
- */
-function writeGeminiCreds(creds, sourcePath) {
-    const geminiOAuthPath = getGeminiOAuthPath();
-    // If source is not the standard Gemini path, write to CLIProxy format
-    if (sourcePath !== geminiOAuthPath) {
-        return writeCliproxyGeminiCreds(sourcePath, creds);
-    }
-    // Otherwise write to standard Gemini CLI location
-    const dir = path.dirname(geminiOAuthPath);
-    try {
-        if (!fs.existsSync(dir)) {
-            fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
-        }
-        fs.writeFileSync(geminiOAuthPath, JSON.stringify(creds, null, 2), { mode: 0o600 });
-        return undefined;
-    }
-    catch (err) {
-        return err instanceof Error ? err.message : 'Failed to write credentials';
-    }
-}
-/**
- * Check if Gemini token is expired or expiring soon
- */
-function isGeminiTokenExpiringSoon(accountId) {
-    const result = readGeminiCreds(accountId);
-    if (!result || !result.creds.access_token) {
-        return true; // No token = needs auth
-    }
-    if (!result.creds.expiry_date) {
-        return false; // No expiry info = assume valid
-    }
-    const expiresIn = result.creds.expiry_date - Date.now();
-    return expiresIn < REFRESH_LEAD_TIME_MS;
-}
-exports.isGeminiTokenExpiringSoon = isGeminiTokenExpiringSoon;
-/**
- * Refresh Gemini access token using refresh_token
- * @param accountId Optional account ID for account-scoped refresh
- * @returns Result with success status, optional error, and expiry time
- */
-async function refreshGeminiToken(accountId) {
-    const result = readGeminiCreds(accountId);
-    if (!result || !result.creds.refresh_token) {
-        return { success: false, error: 'No refresh token available' };
-    }
-    const { creds, sourcePath } = result;
-    const resolvedCredentials = resolveGeminiRefreshCredentials(creds);
-    if (!resolvedCredentials.credentials) {
-        return { success: false, error: resolvedCredentials.error };
-    }
-    const { clientId, clientSecret, tokenUrl } = resolvedCredentials.credentials;
-    const controller = new AbortController();
-    const timeoutId = setTimeout(() => controller.abort(), 10000);
-    try {
-        const response = await fetch(tokenUrl, {
-            method: 'POST',
-            signal: controller.signal,
-            headers: {
-                'Content-Type': 'application/x-www-form-urlencoded',
-            },
-            body: new URLSearchParams({
-                grant_type: 'refresh_token',
-                refresh_token: creds.refresh_token, // Already validated above
-                client_id: clientId,
-                client_secret: clientSecret,
-            }).toString(),
-        });
-        clearTimeout(timeoutId);
-        const data = (await response.json());
-        if (!response.ok || data.error) {
-            return {
-                success: false,
-                error: data.error_description || data.error || `OAuth error: ${response.status}`,
-            };
-        }
-        if (!data.access_token) {
-            return { success: false, error: 'No access_token in response' };
-        }
-        // Update credentials file with new token
-        const expiresAt = Date.now() + (data.expires_in ?? 3600) * 1000;
-        const updatedCreds = {
-            ...creds,
-            access_token: data.access_token,
-            expiry_date: expiresAt,
-        };
-        const writeError = writeGeminiCreds(updatedCreds, sourcePath);
-        if (writeError) {
-            return { success: false, error: `Token refreshed but failed to save: ${writeError}` };
-        }
-        return { success: true, expiresAt };
-    }
-    catch (err) {
-        clearTimeout(timeoutId);
-        if (err instanceof Error && err.name === 'AbortError') {
-            return { success: false, error: 'Token refresh timeout' };
-        }
-        return { success: false, error: err instanceof Error ? err.message : 'Unknown error' };
-    }
-}
-exports.refreshGeminiToken = refreshGeminiToken;
-/**
- * Ensure Gemini token is valid, refreshing if needed
- * @param verbose Log progress if true
- * @param accountId Optional account ID for account-scoped refresh
- * @returns true if token is valid (or was refreshed), false if refresh failed
- */
-async function ensureGeminiTokenValid(verbose = false, accountId) {
-    const result = readGeminiCreds(accountId);
-    if (!result || !result.creds.access_token) {
-        return { valid: false, refreshed: false, error: 'No Gemini credentials found' };
-    }
-    if (!isGeminiTokenExpiringSoon(accountId)) {
-        return { valid: true, refreshed: false };
-    }
-    // Token is expired or expiring soon - try to refresh
-    if (verbose) {
-        console.log('[i] Gemini token expired or expiring soon, refreshing...');
-    }
-    const refreshResult = await refreshGeminiToken(accountId);
-    if (refreshResult.success) {
-        if (verbose) {
-            console.log('[OK] Gemini token refreshed successfully');
-        }
-        return { valid: true, refreshed: true };
-    }
-    return { valid: false, refreshed: false, error: refreshResult.error };
-}
-exports.ensureGeminiTokenValid = ensureGeminiTokenValid;
-//# sourceMappingURL=gemini-token-refresh.js.map

package/dist/cliproxy/auth/gemini-token-refresh.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gemini-token-refresh.js","sourceRoot":"","sources":["../../../src/cliproxy/auth/gemini-token-refresh.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,0DAAyD;AACzD,wDAA4E;AAC5E,mDAAyD;AAEzD,kCAAkC;AAClC,MAAM,gBAAgB,GAAG,qCAAqC,CAAC;AAE/D,6CAA6C;AAC7C,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3C,MAAM,yBAAyB,GAAG,CAAC,4BAA4B,EAAE,iCAAiC,CAAC,CAAC;AACpG,MAAM,6BAA6B,GAAG;IACpC,gCAAgC;IAChC,qCAAqC;CACtC,CAAC;AAmDF;;GAEG;AACH,SAAgB,kBAAkB;IAChC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;AAChE,CAAC;AAFD,gDAEC;AAED;;GAEG;AACH,SAAS,wBAAwB,CAAC,QAA6B;IAC7D,OAAO;QACL,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY;QACzC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;QAC3C,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;QAClC,UAAU,EAAE,QAAQ;QACpB,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;QACnC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;QAC3C,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;KACpC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,IAAa;IACzC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAgC,CAAC;IACnD,OAAO,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC;AAChD,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAuB;IAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,+BAA+B,CAAC,KAAuB;IAI9D,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;IACxF,MAAM,YAAY,GAChB,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,gBAAgB,CAAC,6BAA6B,CAAC,CAAC;IAEjF,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/B,OAAO;YACL,KAAK,EACH,wFAAwF;gBACxF,qGAAqG;SACxG,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE;YACX,QAAQ;YACR,YAAY;YACZ,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,gBAAgB;SACtD;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAAC,SAAkB;IACjD,MAAM,OAAO,GAAG,IAAA,qCAAkB,EAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,MAAM,mBAAmB,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAA,qCAAmB,EAAC,QAAQ,CAAC,CAAC;IAE/C,4DAA4D;IAC5D,IAAI,mBAAmB,EAAE,CAAC;QACxB,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,mBAAmB,CAAC,CAAC;QACrF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,2CAA2C;QAC3C,MAAM,cAAc,GAAG,IAAA,mCAAiB,EAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,cAAc,EAAE,CAAC;YACnB,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,SAAS,GAAG,IAAI,CAAC;QAClD,CAAC;QAED,+CAA+C;QAC/C,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,SAAS,GAAG,IAAI,CAAC;QAClD,CAAC;QAED,uDAAuD;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBACzE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBAC1C,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAA,sCAAsB,EAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;wBAC7E,SAAS,GAAG,QAAQ,CAAC;wBACrB,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kDAAkD;gBAClD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAE1C,wDAAwD;QACxD,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACL,KAAK,EAAE,wBAAwB,CAAC,IAAI,CAAC;gBACrC,UAAU,EAAE,SAAS;aACtB,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,SAAkB;IACzC,4DAA4D;IAC5D,MAAM,cAAc,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAC1D,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,uEAAuE;IACvE,0DAA0D;IAC1D,IAAI,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+CAA+C;IAC/C,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAqB;YAC9C,UAAU,EAAE,SAAS;SACtB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAAC,SAAiB,EAAE,KAAuB;IAC1E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG;YACd,GAAG,QAAQ;YACX,KAAK,EAAE;gBACL,GAAG,QAAQ,CAAC,KAAK;gBACjB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,MAAM,EAAE,KAAK,CAAC,WAAW;aAC1B;SACF,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC;IAC5E,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,KAAuB,EAAE,UAAkB;IACnE,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAC;IAE7C,sEAAsE;IACtE,IAAI,UAAU,KAAK,eAAe,EAAE,CAAC;QACnC,OAAO,wBAAwB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IAED,kDAAkD;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnF,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC;IAC5E,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,yBAAyB,CAAC,SAAkB;IAC1D,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,CAAC,wBAAwB;IACvC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,CAAC,gCAAgC;IAChD,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACxD,OAAO,SAAS,GAAG,oBAAoB,CAAC;AAC1C,CAAC;AAVD,8DAUC;AAED;;;;GAIG;AACI,KAAK,UAAU,kBAAkB,CAAC,SAAkB;IAKzD,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;IACjE,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IACrC,MAAM,mBAAmB,GAAG,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACnE,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAC9D,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,WAAW,CAAC;IAC7E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;IAE9D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YACrC,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,KAAK,CAAC,aAAuB,EAAE,0BAA0B;gBACxE,SAAS,EAAE,QAAQ;gBACnB,aAAa,EAAE,YAAY;aAC5B,CAAC,CAAC,QAAQ,EAAE;SACd,CAAC,CAAC;QAEH,YAAY,CAAC,SAAS,CAAC,CAAC;QAExB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;QAE7D,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,IAAI,gBAAgB,QAAQ,CAAC,MAAM,EAAE;aACjF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;QAClE,CAAC;QAED,yCAAyC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC;QAChE,MAAM,YAAY,GAAqB;YACrC,GAAG,KAAK;YACR,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,WAAW,EAAE,SAAS;SACvB,CAAC;QACF,MAAM,UAAU,GAAG,gBAAgB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC9D,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,UAAU,EAAE,EAAE,CAAC;QACxF,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACtD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QAC5D,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;IACzF,CAAC;AACH,CAAC;AAtED,gDAsEC;AAED;;;;;GAKG;AACI,KAAK,UAAU,sBAAsB,CAC1C,OAAO,GAAG,KAAK,EACf,SAAkB;IAMlB,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAClF,CAAC;IAED,IAAI,CAAC,yBAAyB,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IAED,qDAAqD;IACrD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC1D,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,CAAC;AACxE,CAAC;AA/BD,wDA+BC"}

package/dist/cliproxy/auth-handler.d.ts

@@ -1,31 +0,0 @@
-/**
- * Auth Handler for CLIProxyAPI
- *
- * Manages OAuth authentication for CLIProxy providers (Gemini, Codex, Antigravity).
- * CLIProxyAPI handles OAuth internally - we just need to:
- * 1. Check if auth exists (token files in CCS auth directory)
- * 2. Trigger OAuth flow by spawning binary with auth flag
- * 3. Auto-detect headless environments (SSH, no DISPLAY)
- * 4. Use --no-browser flag for headless, display OAuth URL for manual auth
- *
- * Token storage: ~/.ccs/cliproxy/auth/<provider>/
- * Each provider has its own directory to avoid conflicts.
- *
- * This file is a facade that re-exports from the auth/ submodule.
- * The actual implementation is split across:
- * - auth/auth-types.ts     - Types and OAuth configurations
- * - auth/token-manager.ts  - Token storage/retrieval/validation
- * - auth/oauth-handler.ts  - OAuth flow handling
- * - auth/environment-detector.ts - Headless detection and port management
- */
-export type { AuthStatus, ProviderOAuthConfig, OAuthOptions } from './auth';
-export { OAUTH_CALLBACK_PORTS, OAUTH_CONFIGS, PROVIDER_AUTH_PREFIXES, PROVIDER_TYPE_VALUES, getOAuthConfig, } from './auth';
-export { getProviderTokenDir, isTokenFileForProvider, isAuthenticated, getAuthStatus, getAllAuthStatus, clearAuth, displayAuthStatus, } from './auth';
-export { isHeadlessEnvironment, killProcessOnPort, getTimeoutTroubleshooting, showStep, } from './auth';
-export { triggerOAuth, ensureAuth } from './auth';
-/**
- * Initialize accounts registry from existing tokens
- * Should be called on startup to populate accounts from existing token files
- */
-export declare function initializeAccounts(): void;
-//# sourceMappingURL=auth-handler.d.ts.map

package/dist/cliproxy/auth-handler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-handler.d.ts","sourceRoot":"","sources":["../../src/cliproxy/auth-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,YAAY,EAAE,UAAU,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAG5E,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,GACf,MAAM,QAAQ,CAAC;AAGhB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,SAAS,EACT,iBAAiB,GAClB,MAAM,QAAQ,CAAC;AAGhB,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,yBAAyB,EACzB,QAAQ,GACT,MAAM,QAAQ,CAAC;AAGhB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAKlD;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC"}