@georgedong32/ccs 7.67.0 → 8.0.0

package/dist/cliproxy/auth/auth-token-manager.js

@@ -0,0 +1,184 @@
+"use strict";
+/**
+ * Auth Token Manager for CLIProxyAPI
+ *
+ * Manages API key and management secret resolution with inheritance:
+ * - Per-variant override → Global config → Default constants
+ *
+ * Provides secure token generation for user customization.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAuthSummary = exports.resetAuthToDefaults = exports.setVariantApiKey = exports.setGlobalManagementSecret = exports.setGlobalApiKey = exports.getEffectiveManagementSecret = exports.getEffectiveApiKey = exports.maskToken = exports.generateSecureToken = void 0;
+const crypto_1 = require("crypto");
+const generator_1 = require("../config/generator");
+const config_loader_facade_1 = require("../../config/config-loader-facade");
+/**
+ * Generate a cryptographically secure token.
+ * Uses CSPRNG (crypto.randomBytes) for proper entropy.
+ *
+ * @param length - Number of random bytes (default: 32 = 256-bit entropy)
+ * @returns Base64URL-encoded token (43 chars for 32 bytes)
+ */
+function generateSecureToken(length = 32) {
+    return (0, crypto_1.randomBytes)(length).toString('base64url');
+}
+exports.generateSecureToken = generateSecureToken;
+/**
+ * Mask a token for display.
+ * Shows first 4 and last 4 chars: "ccs_...4f2a"
+ * Used by CLI commands and API routes.
+ */
+function maskToken(token) {
+    if (token.length <= 8)
+        return '****';
+    return `${token.slice(0, 4)}...${token.slice(-4)}`;
+}
+exports.maskToken = maskToken;
+/**
+ * Get effective API key with inheritance chain.
+ * Priority: variant auth → global cliproxy.auth → default constant
+ *
+ * @param variantName - Optional variant name for per-variant override
+ * @returns Resolved API key
+ */
+function getEffectiveApiKey(variantName) {
+    const config = (0, config_loader_facade_1.loadOrCreateUnifiedConfig)();
+    // Priority 1: Per-variant override
+    if (variantName) {
+        const variant = config.cliproxy.variants[variantName];
+        if (variant?.auth?.api_key) {
+            return variant.auth.api_key;
+        }
+    }
+    // Priority 2: Global cliproxy.auth
+    if (config.cliproxy.auth?.api_key) {
+        return config.cliproxy.auth.api_key;
+    }
+    // Priority 3: Default constant (backwards compatible)
+    return generator_1.CCS_INTERNAL_API_KEY;
+}
+exports.getEffectiveApiKey = getEffectiveApiKey;
+/**
+ * Get effective management secret.
+ * Priority: global cliproxy.auth → default constant
+ *
+ * Note: Management secret is global-only (no per-variant override)
+ * as it controls the Control Panel access for the entire CLIProxy instance.
+ *
+ * @returns Resolved management secret
+ */
+function getEffectiveManagementSecret() {
+    const config = (0, config_loader_facade_1.loadOrCreateUnifiedConfig)();
+    // Priority 1: Global cliproxy.auth
+    if (config.cliproxy.auth?.management_secret) {
+        return config.cliproxy.auth.management_secret;
+    }
+    // Priority 2: Default constant (backwards compatible)
+    return generator_1.CCS_CONTROL_PANEL_SECRET;
+}
+exports.getEffectiveManagementSecret = getEffectiveManagementSecret;
+/**
+ * Set global API key.
+ * Updates cliproxy.auth.api_key in config.yaml.
+ *
+ * @param apiKey - New API key (or undefined to reset to default)
+ */
+function setGlobalApiKey(apiKey) {
+    (0, config_loader_facade_1.mutateConfig)((config) => {
+        if (!config.cliproxy.auth) {
+            config.cliproxy.auth = {};
+        }
+        if (apiKey === undefined) {
+            delete config.cliproxy.auth.api_key;
+        }
+        else {
+            config.cliproxy.auth.api_key = apiKey;
+        }
+    });
+}
+exports.setGlobalApiKey = setGlobalApiKey;
+/**
+ * Set global management secret.
+ * Updates cliproxy.auth.management_secret in config.yaml.
+ *
+ * @param secret - New management secret (or undefined to reset to default)
+ */
+function setGlobalManagementSecret(secret) {
+    (0, config_loader_facade_1.mutateConfig)((config) => {
+        if (!config.cliproxy.auth) {
+            config.cliproxy.auth = {};
+        }
+        if (secret === undefined) {
+            delete config.cliproxy.auth.management_secret;
+        }
+        else {
+            config.cliproxy.auth.management_secret = secret;
+        }
+    });
+}
+exports.setGlobalManagementSecret = setGlobalManagementSecret;
+/**
+ * Set per-variant API key override.
+ * Updates variants[variantName].auth.api_key in config.yaml.
+ *
+ * @param variantName - Variant name
+ * @param apiKey - New API key (or undefined to remove override)
+ */
+function setVariantApiKey(variantName, apiKey) {
+    (0, config_loader_facade_1.mutateConfig)((config) => {
+        const variant = config.cliproxy.variants[variantName];
+        if (!variant) {
+            throw new Error(`Variant '${variantName}' not found`);
+        }
+        if (!variant.auth) {
+            variant.auth = {};
+        }
+        if (apiKey === undefined) {
+            delete variant.auth.api_key;
+            if (Object.keys(variant.auth).length === 0) {
+                delete variant.auth;
+            }
+        }
+        else {
+            variant.auth.api_key = apiKey;
+        }
+    });
+}
+exports.setVariantApiKey = setVariantApiKey;
+/**
+ * Reset all auth settings to defaults.
+ * Removes cliproxy.auth and all variant auth overrides.
+ */
+function resetAuthToDefaults() {
+    (0, config_loader_facade_1.mutateConfig)((config) => {
+        delete config.cliproxy.auth;
+        for (const variantName of Object.keys(config.cliproxy.variants)) {
+            const variant = config.cliproxy.variants[variantName];
+            if (variant.auth) {
+                delete variant.auth;
+            }
+        }
+    });
+}
+exports.resetAuthToDefaults = resetAuthToDefaults;
+/**
+ * Get auth configuration summary for display.
+ * Returns current effective values and whether they're customized.
+ */
+function getAuthSummary() {
+    const config = (0, config_loader_facade_1.loadOrCreateUnifiedConfig)();
+    const customApiKey = config.cliproxy.auth?.api_key;
+    const customSecret = config.cliproxy.auth?.management_secret;
+    return {
+        apiKey: {
+            value: customApiKey || generator_1.CCS_INTERNAL_API_KEY,
+            isCustom: !!customApiKey,
+        },
+        managementSecret: {
+            value: customSecret || generator_1.CCS_CONTROL_PANEL_SECRET,
+            isCustom: !!customSecret,
+        },
+    };
+}
+exports.getAuthSummary = getAuthSummary;
+//# sourceMappingURL=auth-token-manager.js.map

package/dist/cliproxy/auth/auth-token-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-token-manager.js","sourceRoot":"","sources":["../../../src/cliproxy/auth/auth-token-manager.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,mCAAqC;AAErC,mDAAqF;AACrF,4EAA4F;AAE5F;;;;;;GAMG;AACH,SAAgB,mBAAmB,CAAC,MAAM,GAAG,EAAE;IAC7C,OAAO,IAAA,oBAAW,EAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACnD,CAAC;AAFD,kDAEC;AAED;;;;GAIG;AACH,SAAgB,SAAS,CAAC,KAAa;IACrC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrD,CAAC;AAHD,8BAGC;AAED;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,WAAoB;IACrD,MAAM,MAAM,GAAG,IAAA,gDAAyB,GAAE,CAAC;IAE3C,mCAAmC;IACnC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;IACtC,CAAC;IAED,sDAAsD;IACtD,OAAO,gCAAoB,CAAC;AAC9B,CAAC;AAlBD,gDAkBC;AAED;;;;;;;;GAQG;AACH,SAAgB,4BAA4B;IAC1C,MAAM,MAAM,GAAG,IAAA,gDAAyB,GAAE,CAAC;IAE3C,mCAAmC;IACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC;IAChD,CAAC;IAED,sDAAsD;IACtD,OAAO,oCAAwB,CAAC;AAClC,CAAC;AAVD,oEAUC;AAED;;;;;GAKG;AACH,SAAgB,eAAe,CAAC,MAA0B;IACxD,IAAA,mCAAY,EAAC,CAAC,MAAM,EAAE,EAAE;QACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC;QAC5B,CAAC;QAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACxC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAZD,0CAYC;AAED;;;;;GAKG;AACH,SAAgB,yBAAyB,CAAC,MAA0B;IAClE,IAAA,mCAAY,EAAC,CAAC,MAAM,EAAE,EAAE;QACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC;QAC5B,CAAC;QAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAZD,8DAYC;AAED;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,WAAmB,EAAE,MAA0B;IAC9E,IAAA,mCAAY,EAAC,CAAC,MAAM,EAAE,EAAE;QACtB,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,YAAY,WAAW,aAAa,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,CAAC;QAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YAC5B,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3C,OAAO,OAAO,CAAC,IAAI,CAAC;YACtB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AArBD,4CAqBC;AAED;;;GAGG;AACH,SAAgB,mBAAmB;IACjC,IAAA,mCAAY,EAAC,CAAC,MAAM,EAAE,EAAE;QACtB,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAE5B,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACtD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,OAAO,CAAC,IAAI,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAXD,kDAWC;AAED;;;GAGG;AACH,SAAgB,cAAc;IAI5B,MAAM,MAAM,GAAG,IAAA,gDAAyB,GAAE,CAAC;IAE3C,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACnD,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAE7D,OAAO;QACL,MAAM,EAAE;YACN,KAAK,EAAE,YAAY,IAAI,gCAAoB;YAC3C,QAAQ,EAAE,CAAC,CAAC,YAAY;SACzB;QACD,gBAAgB,EAAE;YAChB,KAAK,EAAE,YAAY,IAAI,oCAAwB;YAC/C,QAAQ,EAAE,CAAC,CAAC,YAAY;SACzB;KACF,CAAC;AACJ,CAAC;AAnBD,wCAmBC"}

package/dist/cliproxy/auth/auth-types.d.ts

@@ -4,32 +4,47 @@
  * Type definitions and OAuth configurations for CLIProxy authentication.
  */
 import { CLIProxyProvider } from '../types';
-import type { AccountInfo } from '../account-manager';
+import type { AccountInfo } from '../accounts/account-manager';
 /**
  * Kiro authentication methods supported by CLIProxyAPIPlus.
  * - aws: AWS Builder ID via Device Code flow
  * - aws-authcode: AWS Builder ID via Authorization Code flow (CLI flag only)
  * - google: Social OAuth via Google
  * - github: Social OAuth via GitHub (management API only)
+ * - idc: IAM Identity Center (IDC) via CLI flags with start URL + region
  */
-export declare const KIRO_AUTH_METHODS: readonly ["aws", "aws-authcode", "google", "github"];
+export declare const KIRO_AUTH_METHODS: readonly ["aws", "aws-authcode", "google", "github", "idc"];
 export type KiroAuthMethod = (typeof KIRO_AUTH_METHODS)[number];
 /** CLI binary supports these Kiro methods directly via flags. */
-export declare const KIRO_CLI_AUTH_METHODS: readonly ["aws", "aws-authcode", "google"];
+export declare const KIRO_CLI_AUTH_METHODS: readonly ["aws", "aws-authcode", "google", "idc"];
 export type KiroCLIAuthMethod = (typeof KIRO_CLI_AUTH_METHODS)[number];
+export declare const KIRO_IDC_FLOWS: readonly ["authcode", "device"];
+export type KiroIDCFlow = (typeof KIRO_IDC_FLOWS)[number];
+export declare const DEFAULT_KIRO_IDC_FLOW: KiroIDCFlow;
 /** Default Kiro method for CCS UX and AWS Organization support. */
 export declare const DEFAULT_KIRO_AUTH_METHOD: KiroAuthMethod;
 export declare function isKiroAuthMethod(value: string): value is KiroAuthMethod;
 export declare function isKiroCLIAuthMethod(value: string): value is KiroCLIAuthMethod;
+export declare function isKiroIDCFlow(value: string): value is KiroIDCFlow;
 export declare function normalizeKiroAuthMethod(value?: string): KiroAuthMethod;
-export declare function isKiroDeviceCodeMethod(method: KiroAuthMethod): boolean;
-export declare function getKiroCallbackPort(method: KiroAuthMethod): number | null;
+export declare function normalizeKiroIDCFlow(value?: string): KiroIDCFlow;
+export declare function isKiroDeviceCodeMethod(method: KiroAuthMethod, options?: {
+    idcFlow?: KiroIDCFlow;
+}): boolean;
+export declare function getKiroCallbackPort(method: KiroAuthMethod, options?: {
+    idcFlow?: KiroIDCFlow;
+}): number | null;
 export declare function getKiroCLIAuthFlag(method: KiroCLIAuthMethod): string;
+export declare function getKiroCLIAuthArgs(method: KiroCLIAuthMethod, options?: {
+    idcStartUrl?: string;
+    idcRegion?: string;
+    idcFlow?: KiroIDCFlow;
+}): string[];
 /**
  * Kiro method for CLIProxyAPI management endpoint:
  * GET /v0/management/kiro-auth-url?method=<value>
  */
-export declare function toKiroManagementMethod(method: KiroAuthMethod): 'aws' | 'google' | 'github';
+export declare function toKiroManagementMethod(method: KiroAuthMethod): 'aws' | 'google' | 'github' | null;
 /**
  * OAuth callback ports used by CLIProxyAPI (hardcoded in binary)
  * See: https://github.com/router-for-me/CLIProxyAPI/tree/main/internal/auth
@@ -44,6 +59,10 @@ export declare function toKiroManagementMethod(method: KiroAuthMethod): 'aws' |
  * - Qwen:   Device Code Flow (polling-based, NO callback port needed)
  * - GHCP:   Device Code Flow (polling-based, NO callback port needed)
  * - Kimi:   Device Code Flow (polling-based, NO callback port needed)
+ * - Cursor: Device-style browser polling (NO callback port needed)
+ * - GitLab: Authorization Code Flow with callback server on port 17171
+ * - CodeBuddy: Device-style browser polling (NO callback port needed)
+ * - Kilo: Device Code Flow (polling-based, NO callback port needed)
  */
 export declare const OAUTH_CALLBACK_PORTS: Partial<Record<CLIProxyProvider, number>>;
 /**
@@ -108,7 +127,9 @@ export declare const CLIPROXY_CALLBACK_PROVIDER_MAP: Record<CLIProxyProvider, st
  */
 export declare const CLIPROXY_AUTH_URL_PROVIDER_MAP: Record<CLIProxyProvider, string>;
 export declare function getManagementAuthUrlPath(provider: CLIProxyProvider): string;
-export declare function getPasteCallbackStartPath(provider: CLIProxyProvider): string;
+export declare function getPasteCallbackStartPath(provider: CLIProxyProvider, options?: {
+    kiroMethod?: KiroAuthMethod;
+}): string | null;
 export declare function getManagementOAuthCallbackPath(): string;
 /**
  * Get OAuth config for provider
@@ -127,12 +148,24 @@ export interface OAuthOptions {
     acceptAgyRisk?: boolean;
     /** Kiro auth method override (CLI + Dashboard parity). */
     kiroMethod?: KiroAuthMethod;
+    /** Kiro IDC start URL (required when kiroMethod=idc). */
+    kiroIDCStartUrl?: string;
+    /** Kiro IDC region override. */
+    kiroIDCRegion?: string;
+    /** Kiro IDC flow override (authcode or device). */
+    kiroIDCFlow?: KiroIDCFlow;
     /** If true, triggered from Web UI (enables project selection prompt) */
     fromUI?: boolean;
     /** If true, use --no-incognito flag (Kiro only - use normal browser instead of incognito) */
     noIncognito?: boolean;
     /** If true, skip OAuth and import token from Kiro IDE directly (Kiro only) */
     import?: boolean;
+    /** GitLab auth mode override. */
+    gitlabAuthMode?: 'oauth' | 'pat';
+    /** GitLab self-hosted base URL override. */
+    gitlabBaseUrl?: string;
+    /** GitLab personal access token for PAT login. */
+    gitlabPersonalAccessToken?: string;
     /** Enable paste-callback mode: show auth URL and prompt for callback paste */
     pasteCallback?: boolean;
     /** If true, use port-forwarding mode (skip interactive prompt in headless) */

package/dist/cliproxy/auth/auth-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-types.d.ts","sourceRoot":"","sources":["../../../src/cliproxy/auth/auth-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAWtD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,sDAAuD,CAAC;AACtF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,iEAAiE;AACjE,eAAO,MAAM,qBAAqB,4CAA6C,CAAC;AAChF,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE,mEAAmE;AACnE,eAAO,MAAM,wBAAwB,EAAE,cAAsB,CAAC;AAE9D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,cAAc,CAEvE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,iBAAiB,CAE7E;AAED,wBAAgB,uBAAuB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,cAAc,CAItE;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAEtE;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,GAAG,IAAI,CAEzE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CASpE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,cAAc,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAY1F;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAUxE,CAAC;AAEJ;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,oBAAoB;IACpB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,oCAAoC;IACpC,aAAa,EAAE,OAAO,CAAC;IACvB,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,yCAAyC;IACzC,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,oEAAoE;IACpE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,yBAAyB;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,0BAA0B;IAC1B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAkEvE,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAErE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAEnE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,8BAA8B,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAE3E,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAE3E,CAAC;AAEF,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,CAG3E;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,CAM5E;AAED,wBAAgB,8BAA8B,IAAI,MAAM,CAEvD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,gBAAgB,GAAG,mBAAmB,CAM9E;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0FAA0F;IAC1F,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,wEAAwE;IACxE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,6FAA6F;IAC7F,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB"}
+{"version":3,"file":"auth-types.d.ts","sourceRoot":"","sources":["../../../src/cliproxy/auth/auth-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAW/D;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,6DAA8D,CAAC;AAC7F,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,iEAAiE;AACjE,eAAO,MAAM,qBAAqB,mDAAoD,CAAC;AACvF,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE,eAAO,MAAM,cAAc,iCAAkC,CAAC;AAC9D,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1D,eAAO,MAAM,qBAAqB,EAAE,WAAwB,CAAC;AAE7D,mEAAmE;AACnE,eAAO,MAAM,wBAAwB,EAAE,cAAsB,CAAC;AAE9D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,cAAc,CAEvE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,iBAAiB,CAE7E;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,WAAW,CAEjE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,cAAc,CAItE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,WAAW,CAIhE;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,cAAc,EACtB,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,WAAW,CAAA;CAAE,GAClC,OAAO,CAQT;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,cAAc,EACtB,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,WAAW,CAAA;CAAE,GAClC,MAAM,GAAG,IAAI,CAEf;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAWpE;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,iBAAiB,EACzB,OAAO,CAAC,EAAE;IACR,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB,GACA,MAAM,EAAE,CAiBV;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,cAAc,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAcjG;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAUxE,CAAC;AAEJ;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,oBAAoB;IACpB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,oCAAoC;IACpC,aAAa,EAAE,OAAO,CAAC;IACvB,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,yCAAyC;IACzC,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,oEAAoE;IACpE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,yBAAyB;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,0BAA0B;IAC1B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CA8FvE,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAErE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAEnE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,8BAA8B,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAE3E,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAE3E,CAAC;AAEF,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,CAG3E;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,cAAc,CAAA;CAAE,GACxC,MAAM,GAAG,IAAI,CAaf;AAED,wBAAgB,8BAA8B,IAAI,MAAM,CAEvD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,gBAAgB,GAAG,mBAAmB,CAM9E;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0FAA0F;IAC1F,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,yDAAyD;IACzD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gCAAgC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mDAAmD;IACnD,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,wEAAwE;IACxE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,6FAA6F;IAC7F,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,iCAAiC;IACjC,cAAc,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC;IACjC,4CAA4C;IAC5C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kDAAkD;IAClD,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,8EAA8E;IAC9E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB"}

package/dist/cliproxy/auth/auth-types.js

@@ -5,7 +5,7 @@
  * Type definitions and OAuth configurations for CLIProxy authentication.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getOAuthConfig = exports.getManagementOAuthCallbackPath = exports.getPasteCallbackStartPath = exports.getManagementAuthUrlPath = exports.CLIPROXY_AUTH_URL_PROVIDER_MAP = exports.CLIPROXY_CALLBACK_PROVIDER_MAP = exports.PROVIDER_TYPE_VALUES = exports.PROVIDER_AUTH_PREFIXES = exports.OAUTH_CONFIGS = exports.OAUTH_CALLBACK_PORTS = exports.toKiroManagementMethod = exports.getKiroCLIAuthFlag = exports.getKiroCallbackPort = exports.isKiroDeviceCodeMethod = exports.normalizeKiroAuthMethod = exports.isKiroCLIAuthMethod = exports.isKiroAuthMethod = exports.DEFAULT_KIRO_AUTH_METHOD = exports.KIRO_CLI_AUTH_METHODS = exports.KIRO_AUTH_METHODS = void 0;
+exports.getOAuthConfig = exports.getManagementOAuthCallbackPath = exports.getPasteCallbackStartPath = exports.getManagementAuthUrlPath = exports.CLIPROXY_AUTH_URL_PROVIDER_MAP = exports.CLIPROXY_CALLBACK_PROVIDER_MAP = exports.PROVIDER_TYPE_VALUES = exports.PROVIDER_AUTH_PREFIXES = exports.OAUTH_CONFIGS = exports.OAUTH_CALLBACK_PORTS = exports.toKiroManagementMethod = exports.getKiroCLIAuthArgs = exports.getKiroCLIAuthFlag = exports.getKiroCallbackPort = exports.isKiroDeviceCodeMethod = exports.normalizeKiroIDCFlow = exports.normalizeKiroAuthMethod = exports.isKiroIDCFlow = exports.isKiroCLIAuthMethod = exports.isKiroAuthMethod = exports.DEFAULT_KIRO_AUTH_METHOD = exports.DEFAULT_KIRO_IDC_FLOW = exports.KIRO_IDC_FLOWS = exports.KIRO_CLI_AUTH_METHODS = exports.KIRO_AUTH_METHODS = void 0;
 const provider_capabilities_1 = require("../provider-capabilities");
 /**
  * Kiro authentication methods supported by CLIProxyAPIPlus.
@@ -13,10 +13,13 @@ const provider_capabilities_1 = require("../provider-capabilities");
  * - aws-authcode: AWS Builder ID via Authorization Code flow (CLI flag only)
  * - google: Social OAuth via Google
  * - github: Social OAuth via GitHub (management API only)
+ * - idc: IAM Identity Center (IDC) via CLI flags with start URL + region
  */
-exports.KIRO_AUTH_METHODS = ['aws', 'aws-authcode', 'google', 'github'];
+exports.KIRO_AUTH_METHODS = ['aws', 'aws-authcode', 'google', 'github', 'idc'];
 /** CLI binary supports these Kiro methods directly via flags. */
-exports.KIRO_CLI_AUTH_METHODS = ['aws', 'aws-authcode', 'google'];
+exports.KIRO_CLI_AUTH_METHODS = ['aws', 'aws-authcode', 'google', 'idc'];
+exports.KIRO_IDC_FLOWS = ['authcode', 'device'];
+exports.DEFAULT_KIRO_IDC_FLOW = 'authcode';
 /** Default Kiro method for CCS UX and AWS Organization support. */
 exports.DEFAULT_KIRO_AUTH_METHOD = 'aws';
 function isKiroAuthMethod(value) {
@@ -27,6 +30,10 @@ function isKiroCLIAuthMethod(value) {
     return exports.KIRO_CLI_AUTH_METHODS.includes(value);
 }
 exports.isKiroCLIAuthMethod = isKiroCLIAuthMethod;
+function isKiroIDCFlow(value) {
+    return exports.KIRO_IDC_FLOWS.includes(value);
+}
+exports.isKiroIDCFlow = isKiroIDCFlow;
 function normalizeKiroAuthMethod(value) {
     if (!value)
         return exports.DEFAULT_KIRO_AUTH_METHOD;
@@ -34,12 +41,25 @@ function normalizeKiroAuthMethod(value) {
     return isKiroAuthMethod(normalized) ? normalized : exports.DEFAULT_KIRO_AUTH_METHOD;
 }
 exports.normalizeKiroAuthMethod = normalizeKiroAuthMethod;
-function isKiroDeviceCodeMethod(method) {
-    return method === 'aws';
+function normalizeKiroIDCFlow(value) {
+    if (!value)
+        return exports.DEFAULT_KIRO_IDC_FLOW;
+    const normalized = value.trim().toLowerCase();
+    return isKiroIDCFlow(normalized) ? normalized : exports.DEFAULT_KIRO_IDC_FLOW;
+}
+exports.normalizeKiroIDCFlow = normalizeKiroIDCFlow;
+function isKiroDeviceCodeMethod(method, options) {
+    if (method === 'aws') {
+        return true;
+    }
+    if (method === 'idc') {
+        return normalizeKiroIDCFlow(options?.idcFlow) === 'device';
+    }
+    return false;
 }
 exports.isKiroDeviceCodeMethod = isKiroDeviceCodeMethod;
-function getKiroCallbackPort(method) {
-    return isKiroDeviceCodeMethod(method) ? null : 9876;
+function getKiroCallbackPort(method, options) {
+    return isKiroDeviceCodeMethod(method, options) ? null : 9876;
 }
 exports.getKiroCallbackPort = getKiroCallbackPort;
 function getKiroCLIAuthFlag(method) {
@@ -50,9 +70,28 @@ function getKiroCLIAuthFlag(method) {
             return '--kiro-aws-authcode';
         case 'google':
             return '--kiro-google-login';
+        case 'idc':
+            return '--kiro-idc-login';
     }
 }
 exports.getKiroCLIAuthFlag = getKiroCLIAuthFlag;
+function getKiroCLIAuthArgs(method, options) {
+    if (method !== 'idc') {
+        return [getKiroCLIAuthFlag(method)];
+    }
+    const startUrl = options?.idcStartUrl?.trim();
+    if (!startUrl) {
+        throw new Error('Kiro IDC login requires --kiro-idc-start-url');
+    }
+    const args = [getKiroCLIAuthFlag('idc'), '--kiro-idc-start-url', startUrl];
+    const region = options?.idcRegion?.trim();
+    if (region) {
+        args.push('--kiro-idc-region', region);
+    }
+    args.push('--kiro-idc-flow', normalizeKiroIDCFlow(options?.idcFlow));
+    return args;
+}
+exports.getKiroCLIAuthArgs = getKiroCLIAuthArgs;
 /**
  * Kiro method for CLIProxyAPI management endpoint:
  * GET /v0/management/kiro-auth-url?method=<value>
@@ -63,6 +102,8 @@ function toKiroManagementMethod(method) {
             return 'google';
         case 'github':
             return 'github';
+        case 'idc':
+            return null;
         case 'aws-authcode':
             return 'aws';
         case 'aws':
@@ -85,6 +126,10 @@ exports.toKiroManagementMethod = toKiroManagementMethod;
  * - Qwen:   Device Code Flow (polling-based, NO callback port needed)
  * - GHCP:   Device Code Flow (polling-based, NO callback port needed)
  * - Kimi:   Device Code Flow (polling-based, NO callback port needed)
+ * - Cursor: Device-style browser polling (NO callback port needed)
+ * - GitLab: Authorization Code Flow with callback server on port 17171
+ * - CodeBuddy: Device-style browser polling (NO callback port needed)
+ * - Kilo: Device Code Flow (polling-based, NO callback port needed)
  */
 exports.OAUTH_CALLBACK_PORTS = provider_capabilities_1.CLIPROXY_PROVIDER_IDS.reduce((acc, provider) => {
     const callbackPort = (0, provider_capabilities_1.getOAuthCallbackPort)(provider);
@@ -163,6 +208,34 @@ exports.OAUTH_CONFIGS = {
         scopes: ['api'],
         authFlag: '--kimi-login',
     },
+    cursor: {
+        provider: 'cursor',
+        displayName: 'Cursor',
+        authUrl: 'https://cursor.com/loginDeepControl',
+        scopes: [],
+        authFlag: '--cursor-login',
+    },
+    gitlab: {
+        provider: 'gitlab',
+        displayName: 'GitLab Duo',
+        authUrl: 'https://gitlab.com/oauth/authorize',
+        scopes: ['api', 'read_user'],
+        authFlag: '--gitlab-login',
+    },
+    codebuddy: {
+        provider: 'codebuddy',
+        displayName: 'CodeBuddy (Tencent)',
+        authUrl: 'https://copilot.tencent.com/v2/plugin/auth/state',
+        scopes: [],
+        authFlag: '--codebuddy-login',
+    },
+    kilo: {
+        provider: 'kilo',
+        displayName: 'Kilo AI',
+        authUrl: 'https://api.kilo.ai/api/device-auth/codes',
+        scopes: [],
+        authFlag: '--kilo-login',
+    },
 };
 /**
  * Provider-specific auth file prefixes (fallback detection)
@@ -191,10 +264,17 @@ function getManagementAuthUrlPath(provider) {
     return `/v0/management/${authUrlProvider}-auth-url?is_webui=true`;
 }
 exports.getManagementAuthUrlPath = getManagementAuthUrlPath;
-function getPasteCallbackStartPath(provider) {
-    // Kiro CLI auth methods still use the legacy start route.
+function getPasteCallbackStartPath(provider, options) {
     if (provider === 'kiro') {
-        return `/oauth/${provider}/start`;
+        const kiroMethod = options?.kiroMethod ?? normalizeKiroAuthMethod();
+        if (kiroMethod === 'aws-authcode' || kiroMethod === 'idc') {
+            return null;
+        }
+        const managementMethod = toKiroManagementMethod(kiroMethod);
+        if (!managementMethod) {
+            return null;
+        }
+        return `${getManagementAuthUrlPath(provider)}&method=${encodeURIComponent(managementMethod)}`;
     }
     return getManagementAuthUrlPath(provider);
 }

package/dist/cliproxy/auth/auth-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-types.js","sourceRoot":"","sources":["../../../src/cliproxy/auth/auth-types.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAIH,oEAQkC;AAElC;;;;;;GAMG;AACU,QAAA,iBAAiB,GAAG,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAGtF,iEAAiE;AACpD,QAAA,qBAAqB,GAAG,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,CAAU,CAAC;AAGhF,mEAAmE;AACtD,QAAA,wBAAwB,GAAmB,KAAK,CAAC;AAE9D,SAAgB,gBAAgB,CAAC,KAAa;IAC5C,OAAO,yBAAiB,CAAC,QAAQ,CAAC,KAAuB,CAAC,CAAC;AAC7D,CAAC;AAFD,4CAEC;AAED,SAAgB,mBAAmB,CAAC,KAAa;IAC/C,OAAO,6BAAqB,CAAC,QAAQ,CAAC,KAA0B,CAAC,CAAC;AACpE,CAAC;AAFD,kDAEC;AAED,SAAgB,uBAAuB,CAAC,KAAc;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,gCAAwB,CAAC;IAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,gCAAwB,CAAC;AAC9E,CAAC;AAJD,0DAIC;AAED,SAAgB,sBAAsB,CAAC,MAAsB;IAC3D,OAAO,MAAM,KAAK,KAAK,CAAC;AAC1B,CAAC;AAFD,wDAEC;AAED,SAAgB,mBAAmB,CAAC,MAAsB;IACxD,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAFD,kDAEC;AAED,SAAgB,kBAAkB,CAAC,MAAyB;IAC1D,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,KAAK;YACR,OAAO,kBAAkB,CAAC;QAC5B,KAAK,cAAc;YACjB,OAAO,qBAAqB,CAAC;QAC/B,KAAK,QAAQ;YACX,OAAO,qBAAqB,CAAC;IACjC,CAAC;AACH,CAAC;AATD,gDASC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,MAAsB;IAC3D,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,cAAc;YACjB,OAAO,KAAK,CAAC;QACf,KAAK,KAAK,CAAC;QACX;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAZD,wDAYC;AAED;;;;;;;;;;;;;;GAcG;AACU,QAAA,oBAAoB,GAC/B,6CAAqB,CAAC,MAAM,CAC1B,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;IAChB,MAAM,YAAY,GAAG,IAAA,4CAAoB,EAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,GAAG,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,EACD,EAA+C,CAChD,CAAC;AAsCJ;;;GAGG;AACU,QAAA,aAAa,GAAkD;IAC1E,MAAM,EAAE;QACN,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,eAAe;QAC5B,OAAO,EAAE,8CAA8C;QACvD,MAAM,EAAE,CAAC,qDAAqD,CAAC;QAC/D,QAAQ,EAAE,SAAS;KACpB;IACD,KAAK,EAAE;QACL,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,mCAAmC;QAC5C,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC7B,QAAQ,EAAE,eAAe;KAC1B;IACD,GAAG,EAAE;QACH,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,aAAa;QAC1B,OAAO,EAAE,wCAAwC;QACjD,MAAM,EAAE,CAAC,KAAK,CAAC;QACf,QAAQ,EAAE,qBAAqB;KAChC;IACD,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,WAAW;QACxB,OAAO,EAAE,gDAAgD;QACzD,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC;QAC1D,QAAQ,EAAE,cAAc;KACzB;IACD,KAAK,EAAE;QACL,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,wBAAwB;QACjC,MAAM,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;QACrC,QAAQ,EAAE,eAAe;KAC1B;IACD,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,sCAAsC;QAC/C,MAAM,EAAE,CAAC,2BAA2B,EAAE,6BAA6B,CAAC;QACpE,uEAAuE;QACvE,0EAA0E;QAC1E,QAAQ,EAAE,kBAAkB;KAC7B;IACD,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,wBAAwB;QACrC,OAAO,EAAE,sCAAsC;QAC/C,MAAM,EAAE,CAAC,SAAS,CAAC;QACnB,QAAQ,EAAE,wBAAwB;KACnC;IACD,MAAM,EAAE;QACN,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,oBAAoB;QACjC,OAAO,EAAE,+CAA+C;QACxD,MAAM,EAAE,CAAC,gBAAgB,EAAE,cAAc,CAAC;QAC1C,QAAQ,EAAE,gBAAgB;KAC3B;IACD,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,iBAAiB;QAC9B,OAAO,EAAE,sDAAsD;QAC/D,MAAM,EAAE,CAAC,KAAK,CAAC;QACf,QAAQ,EAAE,cAAc;KACzB;CACF,CAAC;AAEF;;;;GAIG;AACU,QAAA,sBAAsB,GAAuC,IAAA,wCAAgB,EACxF,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,GAAG,IAAA,mDAA2B,EAAC,QAAQ,CAAC,CAAC,CACzD,CAAC;AAEF;;;GAGG;AACU,QAAA,oBAAoB,GAAuC,IAAA,wCAAgB,EACtF,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,GAAG,IAAA,kDAA0B,EAAC,QAAQ,CAAC,CAAC,CACxD,CAAC;AAEF;;;GAGG;AACU,QAAA,8BAA8B,GAAqC,IAAA,wCAAgB,EAC9F,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAA,uDAA+B,EAAC,QAAQ,CAAC,CACxD,CAAC;AAEF;;;;GAIG;AACU,QAAA,8BAA8B,GAAqC,IAAA,wCAAgB,EAC9F,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAA,sDAA8B,EAAC,QAAQ,CAAC,CACvD,CAAC;AAEF,SAAgB,wBAAwB,CAAC,QAA0B;IACjE,MAAM,eAAe,GAAG,sCAA8B,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC;IAC7E,OAAO,kBAAkB,eAAe,yBAAyB,CAAC;AACpE,CAAC;AAHD,4DAGC;AAED,SAAgB,yBAAyB,CAAC,QAA0B;IAClE,0DAA0D;IAC1D,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,UAAU,QAAQ,QAAQ,CAAC;IACpC,CAAC;IACD,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAND,8DAMC;AAED,SAAgB,8BAA8B;IAC5C,OAAO,+BAA+B,CAAC;AACzC,CAAC;AAFD,wEAEC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,QAA0B;IACvD,MAAM,MAAM,GAAG,qBAAa,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAND,wCAMC"}
+{"version":3,"file":"auth-types.js","sourceRoot":"","sources":["../../../src/cliproxy/auth/auth-types.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAIH,oEAQkC;AAElC;;;;;;;GAOG;AACU,QAAA,iBAAiB,GAAG,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAU,CAAC;AAG7F,iEAAiE;AACpD,QAAA,qBAAqB,GAAG,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,CAAU,CAAC;AAG1E,QAAA,cAAc,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAU,CAAC;AAEjD,QAAA,qBAAqB,GAAgB,UAAU,CAAC;AAE7D,mEAAmE;AACtD,QAAA,wBAAwB,GAAmB,KAAK,CAAC;AAE9D,SAAgB,gBAAgB,CAAC,KAAa;IAC5C,OAAO,yBAAiB,CAAC,QAAQ,CAAC,KAAuB,CAAC,CAAC;AAC7D,CAAC;AAFD,4CAEC;AAED,SAAgB,mBAAmB,CAAC,KAAa;IAC/C,OAAO,6BAAqB,CAAC,QAAQ,CAAC,KAA0B,CAAC,CAAC;AACpE,CAAC;AAFD,kDAEC;AAED,SAAgB,aAAa,CAAC,KAAa;IACzC,OAAO,sBAAc,CAAC,QAAQ,CAAC,KAAoB,CAAC,CAAC;AACvD,CAAC;AAFD,sCAEC;AAED,SAAgB,uBAAuB,CAAC,KAAc;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,gCAAwB,CAAC;IAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,gCAAwB,CAAC;AAC9E,CAAC;AAJD,0DAIC;AAED,SAAgB,oBAAoB,CAAC,KAAc;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,6BAAqB,CAAC;IACzC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,6BAAqB,CAAC;AACxE,CAAC;AAJD,oDAIC;AAED,SAAgB,sBAAsB,CACpC,MAAsB,EACtB,OAAmC;IAEnC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,OAAO,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,QAAQ,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAXD,wDAWC;AAED,SAAgB,mBAAmB,CACjC,MAAsB,EACtB,OAAmC;IAEnC,OAAO,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC;AALD,kDAKC;AAED,SAAgB,kBAAkB,CAAC,MAAyB;IAC1D,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,KAAK;YACR,OAAO,kBAAkB,CAAC;QAC5B,KAAK,cAAc;YACjB,OAAO,qBAAqB,CAAC;QAC/B,KAAK,QAAQ;YACX,OAAO,qBAAqB,CAAC;QAC/B,KAAK,KAAK;YACR,OAAO,kBAAkB,CAAC;IAC9B,CAAC;AACH,CAAC;AAXD,gDAWC;AAED,SAAgB,kBAAkB,CAChC,MAAyB,EACzB,OAIC;IAED,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,sBAAsB,EAAE,QAAQ,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1C,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AAxBD,gDAwBC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,MAAsB;IAC3D,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,KAAK;YACR,OAAO,IAAI,CAAC;QACd,KAAK,cAAc;YACjB,OAAO,KAAK,CAAC;QACf,KAAK,KAAK,CAAC;QACX;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAdD,wDAcC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACU,QAAA,oBAAoB,GAC/B,6CAAqB,CAAC,MAAM,CAC1B,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;IAChB,MAAM,YAAY,GAAG,IAAA,4CAAoB,EAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,GAAG,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,EACD,EAA+C,CAChD,CAAC;AAsCJ;;;GAGG;AACU,QAAA,aAAa,GAAkD;IAC1E,MAAM,EAAE;QACN,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,eAAe;QAC5B,OAAO,EAAE,8CAA8C;QACvD,MAAM,EAAE,CAAC,qDAAqD,CAAC;QAC/D,QAAQ,EAAE,SAAS;KACpB;IACD,KAAK,EAAE;QACL,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,mCAAmC;QAC5C,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC7B,QAAQ,EAAE,eAAe;KAC1B;IACD,GAAG,EAAE;QACH,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,aAAa;QAC1B,OAAO,EAAE,wCAAwC;QACjD,MAAM,EAAE,CAAC,KAAK,CAAC;QACf,QAAQ,EAAE,qBAAqB;KAChC;IACD,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,WAAW;QACxB,OAAO,EAAE,gDAAgD;QACzD,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC;QAC1D,QAAQ,EAAE,cAAc;KACzB;IACD,KAAK,EAAE;QACL,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,wBAAwB;QACjC,MAAM,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;QACrC,QAAQ,EAAE,eAAe;KAC1B;IACD,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,sCAAsC;QAC/C,MAAM,EAAE,CAAC,2BAA2B,EAAE,6BAA6B,CAAC;QACpE,uEAAuE;QACvE,0EAA0E;QAC1E,QAAQ,EAAE,kBAAkB;KAC7B;IACD,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,wBAAwB;QACrC,OAAO,EAAE,sCAAsC;QAC/C,MAAM,EAAE,CAAC,SAAS,CAAC;QACnB,QAAQ,EAAE,wBAAwB;KACnC;IACD,MAAM,EAAE;QACN,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,oBAAoB;QACjC,OAAO,EAAE,+CAA+C;QACxD,MAAM,EAAE,CAAC,gBAAgB,EAAE,cAAc,CAAC;QAC1C,QAAQ,EAAE,gBAAgB;KAC3B;IACD,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,iBAAiB;QAC9B,OAAO,EAAE,sDAAsD;QAC/D,MAAM,EAAE,CAAC,KAAK,CAAC;QACf,QAAQ,EAAE,cAAc;KACzB;IACD,MAAM,EAAE;QACN,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,qCAAqC;QAC9C,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,gBAAgB;KAC3B;IACD,MAAM,EAAE;QACN,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,oCAAoC;QAC7C,MAAM,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC;QAC5B,QAAQ,EAAE,gBAAgB;KAC3B;IACD,SAAS,EAAE;QACT,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,qBAAqB;QAClC,OAAO,EAAE,kDAAkD;QAC3D,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,mBAAmB;KAC9B;IACD,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,SAAS;QACtB,OAAO,EAAE,2CAA2C;QACpD,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,cAAc;KACzB;CACF,CAAC;AAEF;;;;GAIG;AACU,QAAA,sBAAsB,GAAuC,IAAA,wCAAgB,EACxF,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,GAAG,IAAA,mDAA2B,EAAC,QAAQ,CAAC,CAAC,CACzD,CAAC;AAEF;;;GAGG;AACU,QAAA,oBAAoB,GAAuC,IAAA,wCAAgB,EACtF,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,GAAG,IAAA,kDAA0B,EAAC,QAAQ,CAAC,CAAC,CACxD,CAAC;AAEF;;;GAGG;AACU,QAAA,8BAA8B,GAAqC,IAAA,wCAAgB,EAC9F,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAA,uDAA+B,EAAC,QAAQ,CAAC,CACxD,CAAC;AAEF;;;;GAIG;AACU,QAAA,8BAA8B,GAAqC,IAAA,wCAAgB,EAC9F,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAA,sDAA8B,EAAC,QAAQ,CAAC,CACvD,CAAC;AAEF,SAAgB,wBAAwB,CAAC,QAA0B;IACjE,MAAM,eAAe,GAAG,sCAA8B,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC;IAC7E,OAAO,kBAAkB,eAAe,yBAAyB,CAAC;AACpE,CAAC;AAHD,4DAGC;AAED,SAAgB,yBAAyB,CACvC,QAA0B,EAC1B,OAAyC;IAEzC,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,uBAAuB,EAAE,CAAC;QACpE,IAAI,UAAU,KAAK,cAAc,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,GAAG,wBAAwB,CAAC,QAAQ,CAAC,WAAW,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,CAAC;IAChG,CAAC;IACD,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAhBD,8DAgBC;AAED,SAAgB,8BAA8B;IAC5C,OAAO,+BAA+B,CAAC;AACzC,CAAC;AAFD,wEAEC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,QAA0B;IACvD,MAAM,MAAM,GAAG,qBAAa,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAND,wCAMC"}

package/dist/cliproxy/auth/auth-utils.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Shared Authentication Utilities
+ *
+ * Common functions for OAuth token handling across quota fetchers.
+ */
+/**
+ * Sanitize email to match CLIProxyAPI auth file naming convention.
+ * Replaces @ and . with underscores for filesystem compatibility.
+ */
+export declare function sanitizeEmail(email: string): string;
+/**
+ * Check if token is expired based on the expired timestamp.
+ * Returns false if timestamp is missing or invalid (fail-open for quota display).
+ */
+export declare function getTokenExpiryTimestamp(expiredValue?: string | number | null): number | null;
+export declare function isTokenExpired(expiredValue?: string | number | null): boolean;
+//# sourceMappingURL=auth-utils.d.ts.map

package/dist/cliproxy/auth/auth-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-utils.d.ts","sourceRoot":"","sources":["../../../src/cliproxy/auth/auth-utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAmC5F;AAED,wBAAgB,cAAc,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,CAG7E"}

package/dist/cliproxy/auth/auth-utils.js

@@ -0,0 +1,58 @@
+"use strict";
+/**
+ * Shared Authentication Utilities
+ *
+ * Common functions for OAuth token handling across quota fetchers.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isTokenExpired = exports.getTokenExpiryTimestamp = exports.sanitizeEmail = void 0;
+/**
+ * Sanitize email to match CLIProxyAPI auth file naming convention.
+ * Replaces @ and . with underscores for filesystem compatibility.
+ */
+function sanitizeEmail(email) {
+    return email.replace(/@/g, '_').replace(/\./g, '_');
+}
+exports.sanitizeEmail = sanitizeEmail;
+/**
+ * Check if token is expired based on the expired timestamp.
+ * Returns false if timestamp is missing or invalid (fail-open for quota display).
+ */
+function getTokenExpiryTimestamp(expiredValue) {
+    if (expiredValue === undefined || expiredValue === null || expiredValue === '') {
+        return null;
+    }
+    const normalizeNumericTimestamp = (value) => {
+        if (!Number.isFinite(value) || value <= 0) {
+            return null;
+        }
+        // Support Unix seconds from older token stores while preserving millisecond timestamps.
+        return value < 1000000000000 ? value * 1000 : value;
+    };
+    try {
+        if (typeof expiredValue === 'number') {
+            return normalizeNumericTimestamp(expiredValue);
+        }
+        const trimmed = expiredValue.trim();
+        if (!trimmed) {
+            return null;
+        }
+        if (/^\d+$/.test(trimmed)) {
+            const numericTimestamp = Number(trimmed);
+            return normalizeNumericTimestamp(numericTimestamp);
+        }
+        const expiredDate = new Date(trimmed);
+        const expiredAt = expiredDate.getTime();
+        return Number.isNaN(expiredAt) ? null : expiredAt;
+    }
+    catch {
+        return null;
+    }
+}
+exports.getTokenExpiryTimestamp = getTokenExpiryTimestamp;
+function isTokenExpired(expiredValue) {
+    const expiredAt = getTokenExpiryTimestamp(expiredValue);
+    return expiredAt !== null ? expiredAt < Date.now() : false;
+}
+exports.isTokenExpired = isTokenExpired;
+//# sourceMappingURL=auth-utils.js.map

package/dist/cliproxy/auth/auth-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-utils.js","sourceRoot":"","sources":["../../../src/cliproxy/auth/auth-utils.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH;;;GAGG;AACH,SAAgB,aAAa,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACtD,CAAC;AAFD,sCAEC;AAED;;;GAGG;AACH,SAAgB,uBAAuB,CAAC,YAAqC;IAC3E,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,yBAAyB,GAAG,CAAC,KAAa,EAAiB,EAAE;QACjE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,wFAAwF;QACxF,OAAO,KAAK,GAAG,aAAiB,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1D,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrC,OAAO,yBAAyB,CAAC,YAAY,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YACzC,OAAO,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAnCD,0DAmCC;AAED,SAAgB,cAAc,CAAC,YAAqC;IAClE,MAAM,SAAS,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;IACxD,OAAO,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7D,CAAC;AAHD,wCAGC"}

package/dist/cliproxy/auth/device-code-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-code-handler.d.ts","sourceRoot":"","sources":["../../../src/cliproxy/auth/device-code-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,eAAO,MAAM,gBAAgB,uBAAqB,CAAC;AAGnD,eAAO,MAAM,sBAAsB,SAAS,CAAC"}

package/dist/cliproxy/auth/device-code-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-code-handler.js","sourceRoot":"","sources":["../../../src/cliproxy/auth/device-code-handler.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAEH,mCAAsC;AAatC,8CAA8C;AACjC,QAAA,gBAAgB,GAAG,IAAI,qBAAY,EAAE,CAAC;AAEnD,kEAAkE;AACrD,QAAA,sBAAsB,GAAG,MAAM,CAAC"}

package/dist/cliproxy/auth/gitlab-pat-response.d.ts

@@ -0,0 +1,9 @@
+export declare function parseGitLabPatAuthResponse(responseOk: boolean, responseStatus: number, responseBody: string, submittedToken?: string): {
+    ok: true;
+    payload: Record<string, unknown>;
+} | {
+    ok: false;
+    payload: Record<string, unknown>;
+    errorMessage: string;
+};
+//# sourceMappingURL=gitlab-pat-response.d.ts.map

package/dist/cliproxy/auth/gitlab-pat-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitlab-pat-response.d.ts","sourceRoot":"","sources":["../../../src/cliproxy/auth/gitlab-pat-response.ts"],"names":[],"mappings":"AAyCA,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,OAAO,EACnB,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,EACpB,cAAc,CAAC,EAAE,MAAM,GAErB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAC9C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAyCxE"}