@jonnyhoo/ccs 1.0.0

package/dist/cliproxy/auth/oauth-process.js

@@ -0,0 +1,386 @@
+"use strict";
+/**
+ * OAuth Process Execution for CLIProxyAPI
+ *
+ * Handles the spawning and monitoring of CLIProxy OAuth process.
+ * Separated from oauth-handler.ts for modularity.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.executeOAuthProcess = void 0;
+const child_process_1 = require("child_process");
+const ui_1 = require("../../utils/ui");
+const kiro_import_1 = require("./kiro-import");
+const project_selection_handler_1 = require("../project-selection-handler");
+const environment_detector_1 = require("./environment-detector");
+const token_manager_1 = require("./token-manager");
+const device_code_handler_1 = require("../device-code-handler");
+const management_1 = require("../../management");
+const auth_session_manager_1 = require("../auth-session-manager");
+/**
+ * Handle project selection prompt
+ */
+async function handleProjectSelection(output, state, options, authProcess, log) {
+    const defaultProjectId = (0, project_selection_handler_1.parseDefaultProject)(output) || '';
+    if (state.parsedProjects.length > 0 && !options.isCLI) {
+        log(`Requesting project selection from UI (session: ${state.sessionId})`);
+        const prompt = {
+            sessionId: state.sessionId,
+            provider: options.provider,
+            projects: state.parsedProjects,
+            defaultProjectId,
+            supportsAll: output.includes('ALL'),
+        };
+        try {
+            const selectedId = await (0, project_selection_handler_1.requestProjectSelection)(prompt);
+            const response = selectedId || '';
+            log(`User selected: ${response || '(default)'}`);
+            authProcess.stdin?.write(response + '\n');
+        }
+        catch {
+            log('Project selection failed, using default');
+            authProcess.stdin?.write('\n');
+        }
+    }
+    else {
+        log('CLI mode or no projects, auto-selecting default');
+        authProcess.stdin?.write('\n');
+    }
+}
+/**
+ * Handle stdout data from OAuth process
+ */
+async function handleStdout(output, state, options, authProcess, log) {
+    log(`stdout: ${output.trim()}`);
+    state.accumulatedOutput += output;
+    // H4: Use explicit flow type from OAUTH_FLOW_TYPES instead of null port check
+    const flowType = management_1.OAUTH_FLOW_TYPES[options.provider] || 'authorization_code';
+    const isDeviceCodeFlow = flowType === 'device_code';
+    // Parse project list when available
+    if ((0, project_selection_handler_1.isProjectList)(state.accumulatedOutput) && state.parsedProjects.length === 0) {
+        state.parsedProjects = (0, project_selection_handler_1.parseProjectList)(state.accumulatedOutput);
+        log(`Parsed ${state.parsedProjects.length} projects`);
+    }
+    // Handle project selection prompt (Authorization Code flows only - Device Code has no stdin pipe)
+    if (!isDeviceCodeFlow && !state.projectPromptHandled && (0, project_selection_handler_1.isProjectSelectionPrompt)(output)) {
+        state.projectPromptHandled = true;
+        await handleProjectSelection(output, state, options, authProcess, log);
+    }
+    // Handle Device Code Flow: parse and display user code
+    if (isDeviceCodeFlow && !state.deviceCodeDisplayed) {
+        // Parse device/user code from various formats:
+        // "Enter code: XXXX-YYYY" or "code XXXX-YYYY" or "user code: XXXX-YYYY"
+        const codeMatch = state.accumulatedOutput.match(/(?:enter\s+)?(?:user\s+)?code[:\s]+["']?([A-Z0-9]{4,8}[-\s]?[A-Z0-9]{4,8})["']?/i);
+        const urlMatch = state.accumulatedOutput.match(/(https?:\/\/[^\s]+device[^\s]*)/i);
+        if (codeMatch) {
+            state.userCode = codeMatch[1].toUpperCase();
+            state.deviceCodeDisplayed = true;
+            log(`Parsed device code: ${state.userCode}`);
+            const verificationUrl = urlMatch?.[1] || 'https://github.com/login/device';
+            // Emit device code event for WebSocket broadcast to UI
+            const deviceCodePrompt = {
+                sessionId: state.sessionId,
+                provider: options.provider,
+                userCode: state.userCode,
+                verificationUrl,
+                expiresAt: Date.now() + device_code_handler_1.DEVICE_CODE_TIMEOUT_MS,
+            };
+            device_code_handler_1.deviceCodeEvents.emit('deviceCode:received', deviceCodePrompt);
+            // Display device code prominently in CLI
+            console.log('');
+            console.log('  ╔══════════════════════════════════════════════════════╗');
+            console.log(`  ║  Enter this code: ${state.userCode.padEnd(35)}║`);
+            console.log('  ╚══════════════════════════════════════════════════════╝');
+            console.log('');
+            console.log((0, ui_1.info)(`Open: ${verificationUrl}`));
+            console.log('');
+            // Update step display for device code flow
+            process.stdout.write('\x1b[1A\x1b[2K');
+            (0, environment_detector_1.showStep)(2, 4, 'ok', 'Device code received');
+            (0, environment_detector_1.showStep)(3, 4, 'progress', 'Waiting for authorization...');
+        }
+    }
+    // Detect callback server / browser (for Authorization Code flows only)
+    if (!isDeviceCodeFlow &&
+        !state.browserOpened &&
+        (output.includes('listening') || output.includes('http'))) {
+        process.stdout.write('\x1b[1A\x1b[2K');
+        (0, environment_detector_1.showStep)(2, 4, 'ok', `Callback server listening on port ${options.callbackPort}`);
+        (0, environment_detector_1.showStep)(3, 4, 'progress', 'Opening browser...');
+        state.browserOpened = true;
+    }
+    // Display OAuth URL for all modes (enables VS Code terminal URL detection popup)
+    if (!isDeviceCodeFlow && !state.urlDisplayed) {
+        const urlMatch = output.match(/https?:\/\/[^\s]+/);
+        if (urlMatch) {
+            console.log('');
+            console.log((0, ui_1.info)(`${options.oauthConfig.displayName} OAuth URL:`));
+            console.log(`    ${urlMatch[0]}`);
+            console.log('');
+            state.urlDisplayed = true;
+        }
+    }
+}
+/** Display OAuth URL from stderr if in headless mode */
+function displayUrlFromStderr(output, state, oauthConfig) {
+    const urlMatch = output.match(/https?:\/\/[^\s]+/);
+    if (urlMatch) {
+        console.log('');
+        console.log((0, ui_1.info)(`${oauthConfig.displayName} OAuth URL:`));
+        console.log(`    ${urlMatch[0]}`);
+        console.log('');
+        state.urlDisplayed = true;
+    }
+}
+/** Handle token not found after successful process exit */
+async function handleTokenNotFound(provider, callbackPort, tokenDir, nickname, verbose) {
+    // Kiro-specific: Try auto-import from Kiro IDE
+    if (provider === 'kiro') {
+        console.log('');
+        console.log((0, ui_1.warn)('Callback redirected to Kiro IDE. Attempting to import token...'));
+        const result = await (0, kiro_import_1.tryKiroImport)(tokenDir, verbose);
+        if (result.success) {
+            const providerInfo = result.provider ? ` (Provider: ${result.provider})` : '';
+            console.log((0, ui_1.ok)(`Imported Kiro token from IDE${providerInfo}`));
+            return (0, token_manager_1.registerAccountFromToken)(provider, tokenDir, nickname);
+        }
+        console.log((0, ui_1.fail)(`Auto-import failed: ${result.error}`));
+        console.log('');
+        console.log('To manually import from Kiro IDE:');
+        console.log('  1. Ensure you are logged into Kiro IDE');
+        console.log('  2. Run: ccs kiro --import');
+        return null;
+    }
+    // Default behavior for other providers
+    console.log('');
+    console.log((0, ui_1.fail)('Token not found after authentication'));
+    console.log('');
+    console.log('The browser showed success but callback was not received.');
+    console.log('');
+    console.log('Common causes:');
+    console.log('  1. OAuth session timed out (sessions expire after ~10 minutes)');
+    console.log('  2. Callback server could not receive the redirect');
+    console.log('  3. Browser did not redirect to localhost properly');
+    if (process.platform === 'win32') {
+        console.log('');
+        console.log('On Windows, this usually means:');
+        console.log('  1. Windows Firewall blocked the callback');
+        console.log('  2. Antivirus software blocked the connection');
+        console.log('');
+        console.log('Try running as Administrator:');
+        console.log(`  netsh advfirewall firewall add rule name="CCS OAuth" dir=in action=allow protocol=TCP localport=${callbackPort}`);
+    }
+    console.log('');
+    console.log('If you copied the OAuth URL to a different browser:');
+    console.log('  - Complete authentication within the timeout window');
+    console.log('  - Ensure you are on the same machine (localhost callback)');
+    console.log('  - Copy the entire URL including all parameters');
+    console.log('');
+    console.log(`Try: ccs ${provider} --auth --verbose`);
+    return null;
+}
+/** Handle process exit with error */
+function handleProcessError(code, state, headless) {
+    console.log('');
+    console.log((0, ui_1.fail)(`CLIProxy auth exited with code ${code}`));
+    if (state.stderrData && !state.urlDisplayed) {
+        console.log(`    ${state.stderrData.trim().split('\n')[0]}`);
+    }
+    if (headless && !state.urlDisplayed) {
+        console.log('');
+        console.log((0, ui_1.info)('No OAuth URL was displayed. Try with --verbose for details.'));
+    }
+}
+/**
+ * Execute OAuth process and wait for completion
+ */
+function executeOAuthProcess(options) {
+    const { provider, binaryPath, args, tokenDir, oauthConfig, callbackPort, headless, verbose, nickname, } = options;
+    const log = (msg) => {
+        if (verbose)
+            console.error(`[auth] ${msg}`);
+    };
+    return new Promise((resolve) => {
+        // H4: Use explicit flow type from OAUTH_FLOW_TYPES instead of null port check
+        const flowType = management_1.OAUTH_FLOW_TYPES[provider] || 'authorization_code';
+        const isDeviceCodeFlow = flowType === 'device_code';
+        // H6: TTY detection - only inherit stdin if TTY available (prevents issues in CI/piped scripts)
+        // Device Code flows may need interactive stdin for email/prompts
+        // Authorization Code flows need piped stdin for project selection
+        const stdinMode = isDeviceCodeFlow && process.stdin.isTTY ? 'inherit' : 'pipe';
+        const authProcess = (0, child_process_1.spawn)(binaryPath, args, {
+            stdio: [stdinMode, 'pipe', 'pipe'],
+            env: { ...process.env, CLI_PROXY_AUTH_DIR: tokenDir },
+        });
+        // H7: Mutable ref for stdin keepalive interval (set later, needed in cleanup)
+        let stdinKeepalive = null;
+        // H5: Signal handling - properly kill child process on SIGINT/SIGTERM
+        // H8: Also clear stdinKeepalive interval to prevent memory leak
+        const cleanup = () => {
+            if (stdinKeepalive)
+                clearInterval(stdinKeepalive);
+            if (authProcess && !authProcess.killed) {
+                authProcess.kill('SIGTERM');
+            }
+        };
+        process.on('SIGINT', cleanup);
+        process.on('SIGTERM', cleanup);
+        const state = {
+            stderrData: '',
+            urlDisplayed: false,
+            browserOpened: false,
+            projectPromptHandled: false,
+            accumulatedOutput: '',
+            parsedProjects: [],
+            sessionId: (0, project_selection_handler_1.generateSessionId)(),
+            deviceCodeDisplayed: false,
+            userCode: null,
+        };
+        // Register session for cancellation support
+        (0, auth_session_manager_1.registerAuthSession)(state.sessionId, provider);
+        (0, auth_session_manager_1.attachProcessToSession)(state.sessionId, authProcess);
+        // Listen for external cancel signal
+        const handleCancel = (cancelledSessionId) => {
+            if (cancelledSessionId === state.sessionId && authProcess && !authProcess.killed) {
+                log('Session cancelled externally');
+                authProcess.kill('SIGTERM');
+            }
+        };
+        auth_session_manager_1.authSessionEvents.on('session:cancelled', handleCancel);
+        const startTime = Date.now();
+        // H7: Stdin keepalive for Authorization Code flows
+        // CLIProxyAPIPlus has a 15-second timer that prompts for manual URL paste.
+        // If the user completes browser auth after this timer fires but before the
+        // non-blocking check, the prompt blocks forever on stdin.
+        // Workaround: Send newline every 16s to skip the manual prompt and continue polling.
+        if (!isDeviceCodeFlow && stdinMode === 'pipe') {
+            stdinKeepalive = setInterval(() => {
+                if (authProcess.stdin && !authProcess.stdin.destroyed) {
+                    authProcess.stdin.write('\n');
+                    log('Sent stdin keepalive (skip manual URL prompt)');
+                }
+            }, 16000);
+        }
+        authProcess.stdout?.on('data', async (data) => {
+            await handleStdout(data.toString(), state, options, authProcess, log);
+        });
+        authProcess.stderr?.on('data', (data) => {
+            const output = data.toString();
+            state.stderrData += output;
+            log(`stderr: ${output.trim()}`);
+            if (headless && !state.urlDisplayed) {
+                displayUrlFromStderr(output, state, oauthConfig);
+            }
+        });
+        // Show waiting message after delay
+        setTimeout(() => {
+            if (isDeviceCodeFlow) {
+                // Device Code Flow: show polling message
+                if (!state.deviceCodeDisplayed) {
+                    // Code not yet displayed, show generic waiting message
+                    (0, environment_detector_1.showStep)(3, 4, 'progress', 'Waiting for device code...');
+                }
+                (0, environment_detector_1.showStep)(4, 4, 'progress', 'Polling for authorization...');
+                console.log('');
+                console.log((0, ui_1.info)('Complete the login in your browser. This page will update automatically.'));
+            }
+            else {
+                // Authorization Code Flow: show callback server message
+                if (!state.browserOpened) {
+                    process.stdout.write('\x1b[1A\x1b[2K');
+                    (0, environment_detector_1.showStep)(2, 4, 'ok', `Callback server ready (port ${callbackPort})`);
+                    (0, environment_detector_1.showStep)(3, 4, 'ok', 'Browser opened');
+                    state.browserOpened = true;
+                }
+                (0, environment_detector_1.showStep)(4, 4, 'progress', 'Waiting for OAuth callback...');
+                console.log('');
+                console.log((0, ui_1.info)('Complete the login in your browser. This page will update automatically.'));
+            }
+            if (!verbose)
+                console.log((0, ui_1.info)('If stuck, try: ccs ' + provider + ' --auth --verbose'));
+        }, 2000);
+        // Timeout handling
+        const timeoutMs = headless ? 300000 : 120000;
+        const timeout = setTimeout(() => {
+            // H7: Clear stdin keepalive interval
+            if (stdinKeepalive)
+                clearInterval(stdinKeepalive);
+            // H5: Remove signal handlers before killing process
+            process.removeListener('SIGINT', cleanup);
+            process.removeListener('SIGTERM', cleanup);
+            auth_session_manager_1.authSessionEvents.removeListener('session:cancelled', handleCancel);
+            (0, auth_session_manager_1.unregisterAuthSession)(state.sessionId);
+            (0, project_selection_handler_1.cancelProjectSelection)(state.sessionId);
+            authProcess.kill();
+            console.log('');
+            console.log((0, ui_1.fail)(`OAuth timed out after ${headless ? 5 : 2} minutes`));
+            for (const line of (0, environment_detector_1.getTimeoutTroubleshooting)(provider, callbackPort ?? null)) {
+                console.log(line);
+            }
+            resolve(null);
+        }, timeoutMs);
+        authProcess.on('exit', async (code) => {
+            clearTimeout(timeout);
+            // H7: Clear stdin keepalive interval
+            if (stdinKeepalive)
+                clearInterval(stdinKeepalive);
+            // H5: Remove signal handlers to prevent memory leaks
+            process.removeListener('SIGINT', cleanup);
+            process.removeListener('SIGTERM', cleanup);
+            auth_session_manager_1.authSessionEvents.removeListener('session:cancelled', handleCancel);
+            (0, auth_session_manager_1.unregisterAuthSession)(state.sessionId);
+            (0, project_selection_handler_1.cancelProjectSelection)(state.sessionId);
+            const elapsed = ((Date.now() - startTime) / 1000).toFixed(1);
+            if (code === 0) {
+                if ((0, token_manager_1.isAuthenticated)(provider)) {
+                    console.log('');
+                    console.log((0, ui_1.ok)(`Authentication successful (${elapsed}s)`));
+                    // Emit device code completion event for UI
+                    if (isDeviceCodeFlow && state.deviceCodeDisplayed) {
+                        device_code_handler_1.deviceCodeEvents.emit('deviceCode:completed', state.sessionId);
+                    }
+                    resolve((0, token_manager_1.registerAccountFromToken)(provider, tokenDir, nickname));
+                }
+                else {
+                    // Emit device code failure event for UI
+                    if (isDeviceCodeFlow && state.deviceCodeDisplayed) {
+                        device_code_handler_1.deviceCodeEvents.emit('deviceCode:failed', {
+                            sessionId: state.sessionId,
+                            error: 'Token not found after authentication',
+                        });
+                    }
+                    // Try auto-import for Kiro, show error for others
+                    const account = await handleTokenNotFound(provider, callbackPort, tokenDir, nickname, verbose);
+                    resolve(account);
+                }
+            }
+            else {
+                // Emit device code failure event for UI
+                if (isDeviceCodeFlow && state.deviceCodeDisplayed) {
+                    device_code_handler_1.deviceCodeEvents.emit('deviceCode:failed', {
+                        sessionId: state.sessionId,
+                        error: `Auth process exited with code ${code}`,
+                    });
+                }
+                handleProcessError(code, state, headless);
+                resolve(null);
+            }
+        });
+        authProcess.on('error', (error) => {
+            clearTimeout(timeout);
+            // H7: Clear stdin keepalive interval
+            if (stdinKeepalive)
+                clearInterval(stdinKeepalive);
+            // H5: Remove signal handlers to prevent memory leaks
+            process.removeListener('SIGINT', cleanup);
+            process.removeListener('SIGTERM', cleanup);
+            auth_session_manager_1.authSessionEvents.removeListener('session:cancelled', handleCancel);
+            (0, auth_session_manager_1.unregisterAuthSession)(state.sessionId);
+            (0, project_selection_handler_1.cancelProjectSelection)(state.sessionId);
+            console.log('');
+            console.log((0, ui_1.fail)(`Failed to start auth process: ${error.message}`));
+            resolve(null);
+        });
+    });
+}
+exports.executeOAuthProcess = executeOAuthProcess;
+//# sourceMappingURL=oauth-process.js.map

package/dist/cliproxy/auth/oauth-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-process.js","sourceRoot":"","sources":["../../../src/cliproxy/auth/oauth-process.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,iDAAoD;AACpD,uCAAsD;AACtD,+CAA8C;AAG9C,4EAUsC;AAEtC,iEAA6E;AAC7E,mDAA4E;AAC5E,gEAIgC;AAChC,iDAAoD;AACpD,kEAKiC;AA+BjC;;GAEG;AACH,KAAK,UAAU,sBAAsB,CACnC,MAAc,EACd,KAAmB,EACnB,OAA4B,EAC5B,WAAyB,EACzB,GAA0B;IAE1B,MAAM,gBAAgB,GAAG,IAAA,+CAAmB,EAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAE3D,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACtD,GAAG,CAAC,kDAAkD,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;QAE1E,MAAM,MAAM,GAA2B;YACrC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,KAAK,CAAC,cAAc;YAC9B,gBAAgB;YAChB,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;SACpC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAA,mDAAuB,EAAC,MAAM,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,UAAU,IAAI,EAAE,CAAC;YAClC,GAAG,CAAC,kBAAkB,QAAQ,IAAI,WAAW,EAAE,CAAC,CAAC;YACjD,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,yCAAyC,CAAC,CAAC;YAC/C,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,iDAAiD,CAAC,CAAC;QACvD,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,YAAY,CACzB,MAAc,EACd,KAAmB,EACnB,OAA4B,EAC5B,WAAyB,EACzB,GAA0B;IAE1B,GAAG,CAAC,WAAW,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChC,KAAK,CAAC,iBAAiB,IAAI,MAAM,CAAC;IAElC,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,6BAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,oBAAoB,CAAC;IAC5E,MAAM,gBAAgB,GAAG,QAAQ,KAAK,aAAa,CAAC;IAEpD,oCAAoC;IACpC,IAAI,IAAA,yCAAa,EAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChF,KAAK,CAAC,cAAc,GAAG,IAAA,4CAAgB,EAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACjE,GAAG,CAAC,UAAU,KAAK,CAAC,cAAc,CAAC,MAAM,WAAW,CAAC,CAAC;IACxD,CAAC;IAED,kGAAkG;IAClG,IAAI,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,oBAAoB,IAAI,IAAA,oDAAwB,EAAC,MAAM,CAAC,EAAE,CAAC;QACzF,KAAK,CAAC,oBAAoB,GAAG,IAAI,CAAC;QAClC,MAAM,sBAAsB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,uDAAuD;IACvD,IAAI,gBAAgB,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;QACnD,+CAA+C;QAC/C,wEAAwE;QACxE,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAC7C,kFAAkF,CACnF,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAEnF,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5C,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC;YACjC,GAAG,CAAC,uBAAuB,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAE7C,MAAM,eAAe,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,iCAAiC,CAAC;YAE3E,uDAAuD;YACvD,MAAM,gBAAgB,GAAqB;gBACzC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,eAAe;gBACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,4CAAsB;aAC/C,CAAC;YACF,sCAAgB,CAAC,IAAI,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;YAE/D,yCAAyC;YACzC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;YAC1E,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;YACnE,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;YAC1E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,SAAS,eAAe,EAAE,CAAC,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEhB,2CAA2C;YAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACvC,IAAA,+BAAQ,EAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,sBAAsB,CAAC,CAAC;YAC7C,IAAA,+BAAQ,EAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,8BAA8B,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,IACE,CAAC,gBAAgB;QACjB,CAAC,KAAK,CAAC,aAAa;QACpB,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EACzD,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACvC,IAAA,+BAAQ,EAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,qCAAqC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;QAClF,IAAA,+BAAQ,EAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAC;QACjD,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,iFAAiF;IACjF,IAAI,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACnD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,GAAG,OAAO,CAAC,WAAW,CAAC,WAAW,aAAa,CAAC,CAAC,CAAC;YACnE,OAAO,CAAC,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;QAC5B,CAAC;IACH,CAAC;AACH,CAAC;AAED,wDAAwD;AACxD,SAAS,oBAAoB,CAC3B,MAAc,EACd,KAAmB,EACnB,WAAgC;IAEhC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACnD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,GAAG,WAAW,CAAC,WAAW,aAAa,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,2DAA2D;AAC3D,KAAK,UAAU,mBAAmB,CAChC,QAA0B,EAC1B,YAA2B,EAC3B,QAAgB,EAChB,QAA4B,EAC5B,OAAgB;IAEhB,+CAA+C;IAC/C,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,gEAAgE,CAAC,CAAC,CAAC;QAEpF,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAa,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEtD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,OAAO,CAAC,GAAG,CAAC,IAAA,OAAE,EAAC,+BAA+B,YAAY,EAAE,CAAC,CAAC,CAAC;YAC/D,OAAO,IAAA,wCAAwB,EAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,uBAAuB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uCAAuC;IACvC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,sCAAsC,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC9B,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;IAEnE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CACT,qGAAqG,YAAY,EAAE,CACpH,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,YAAY,QAAQ,mBAAmB,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qCAAqC;AACrC,SAAS,kBAAkB,CAAC,IAAmB,EAAE,KAAmB,EAAE,QAAiB;IACrF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,kCAAkC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,QAAQ,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,6DAA6D,CAAC,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,OAA4B;IAC9D,MAAM,EACJ,QAAQ,EACR,UAAU,EACV,IAAI,EACJ,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,QAAQ,GACT,GAAG,OAAO,CAAC;IAEZ,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE;QAC1B,IAAI,OAAO;YAAE,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC;IAEF,OAAO,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,EAAE;QACjD,8EAA8E;QAC9E,MAAM,QAAQ,GAAG,6BAAgB,CAAC,QAAQ,CAAC,IAAI,oBAAoB,CAAC;QACpE,MAAM,gBAAgB,GAAG,QAAQ,KAAK,aAAa,CAAC;QAEpD,gGAAgG;QAChG,iEAAiE;QACjE,kEAAkE;QAClE,MAAM,SAAS,GAAG,gBAAgB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;QAE/E,MAAM,WAAW,GAAG,IAAA,qBAAK,EAAC,UAAU,EAAE,IAAI,EAAE;YAC1C,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;YAClC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,QAAQ,EAAE;SACtD,CAAC,CAAC;QAEH,8EAA8E;QAC9E,IAAI,cAAc,GAA0C,IAAI,CAAC;QAEjE,sEAAsE;QACtE,gEAAgE;QAChE,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,cAAc;gBAAE,aAAa,CAAC,cAAc,CAAC,CAAC;YAClD,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;gBACvC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAE/B,MAAM,KAAK,GAAiB;YAC1B,UAAU,EAAE,EAAE;YACd,YAAY,EAAE,KAAK;YACnB,aAAa,EAAE,KAAK;YACpB,oBAAoB,EAAE,KAAK;YAC3B,iBAAiB,EAAE,EAAE;YACrB,cAAc,EAAE,EAAE;YAClB,SAAS,EAAE,IAAA,6CAAiB,GAAE;YAC9B,mBAAmB,EAAE,KAAK;YAC1B,QAAQ,EAAE,IAAI;SACf,CAAC;QAEF,4CAA4C;QAC5C,IAAA,0CAAmB,EAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAA,6CAAsB,EAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAErD,oCAAoC;QACpC,MAAM,YAAY,GAAG,CAAC,kBAA0B,EAAE,EAAE;YAClD,IAAI,kBAAkB,KAAK,KAAK,CAAC,SAAS,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;gBACjF,GAAG,CAAC,8BAA8B,CAAC,CAAC;gBACpC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC;QACF,wCAAiB,CAAC,EAAE,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;QAExD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,mDAAmD;QACnD,2EAA2E;QAC3E,2EAA2E;QAC3E,0DAA0D;QAC1D,qFAAqF;QACrF,IAAI,CAAC,gBAAgB,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YAC9C,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;gBAChC,IAAI,WAAW,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;oBACtD,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC9B,GAAG,CAAC,+CAA+C,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC,EAAE,KAAK,CAAC,CAAC;QACZ,CAAC;QAED,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;YACpD,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/B,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC;YAC3B,GAAG,CAAC,WAAW,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAChC,IAAI,QAAQ,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;gBACpC,oBAAoB,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YACnD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,mCAAmC;QACnC,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,gBAAgB,EAAE,CAAC;gBACrB,yCAAyC;gBACzC,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;oBAC/B,uDAAuD;oBACvD,IAAA,+BAAQ,EAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,4BAA4B,CAAC,CAAC;gBAC3D,CAAC;gBACD,IAAA,+BAAQ,EAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,8BAA8B,CAAC,CAAC;gBAC3D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChB,OAAO,CAAC,GAAG,CACT,IAAA,SAAI,EAAC,0EAA0E,CAAC,CACjF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,wDAAwD;gBACxD,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;oBACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;oBACvC,IAAA,+BAAQ,EAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,+BAA+B,YAAY,GAAG,CAAC,CAAC;oBACrE,IAAA,+BAAQ,EAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;oBACvC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC7B,CAAC;gBACD,IAAA,+BAAQ,EAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,+BAA+B,CAAC,CAAC;gBAC5D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChB,OAAO,CAAC,GAAG,CACT,IAAA,SAAI,EAAC,0EAA0E,CAAC,CACjF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,OAAO;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,qBAAqB,GAAG,QAAQ,GAAG,mBAAmB,CAAC,CAAC,CAAC;QAC1F,CAAC,EAAE,IAAI,CAAC,CAAC;QAET,mBAAmB;QACnB,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,qCAAqC;YACrC,IAAI,cAAc;gBAAE,aAAa,CAAC,cAAc,CAAC,CAAC;YAClD,oDAAoD;YACpD,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC1C,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC3C,wCAAiB,CAAC,cAAc,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;YACpE,IAAA,4CAAqB,EAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACvC,IAAA,kDAAsB,EAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACxC,WAAW,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,yBAAyB,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YACvE,KAAK,MAAM,IAAI,IAAI,IAAA,gDAAyB,EAAC,QAAQ,EAAE,YAAY,IAAI,IAAI,CAAC,EAAE,CAAC;gBAC7E,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACpC,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,qCAAqC;YACrC,IAAI,cAAc;gBAAE,aAAa,CAAC,cAAc,CAAC,CAAC;YAClD,qDAAqD;YACrD,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC1C,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC3C,wCAAiB,CAAC,cAAc,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;YACpE,IAAA,4CAAqB,EAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACvC,IAAA,kDAAsB,EAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAE7D,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,IAAI,IAAA,+BAAe,EAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAChB,OAAO,CAAC,GAAG,CAAC,IAAA,OAAE,EAAC,8BAA8B,OAAO,IAAI,CAAC,CAAC,CAAC;oBAE3D,2CAA2C;oBAC3C,IAAI,gBAAgB,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;wBAClD,sCAAgB,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;oBACjE,CAAC;oBAED,OAAO,CAAC,IAAA,wCAAwB,EAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAClE,CAAC;qBAAM,CAAC;oBACN,wCAAwC;oBACxC,IAAI,gBAAgB,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;wBAClD,sCAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE;4BACzC,SAAS,EAAE,KAAK,CAAC,SAAS;4BAC1B,KAAK,EAAE,sCAAsC;yBAC9C,CAAC,CAAC;oBACL,CAAC;oBAED,kDAAkD;oBAClD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CACvC,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,OAAO,CACR,CAAC;oBACF,OAAO,CAAC,OAAO,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,wCAAwC;gBACxC,IAAI,gBAAgB,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;oBAClD,sCAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE;wBACzC,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,KAAK,EAAE,iCAAiC,IAAI,EAAE;qBAC/C,CAAC,CAAC;gBACL,CAAC;gBAED,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAC1C,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAChC,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,qCAAqC;YACrC,IAAI,cAAc;gBAAE,aAAa,CAAC,cAAc,CAAC,CAAC;YAClD,qDAAqD;YACrD,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC1C,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC3C,wCAAiB,CAAC,cAAc,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;YACpE,IAAA,4CAAqB,EAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACvC,IAAA,kDAAsB,EAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,iCAAiC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AA7ND,kDA6NC"}

package/dist/cliproxy/auth/provider-refreshers/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Provider Token Refreshers
+ *
+ * Exports refresh functions for each OAuth provider.
+ * Currently only Gemini is implemented; others return placeholder errors.
+ */
+import { CLIProxyProvider } from '../../types';
+/** Token refresh result */
+export interface ProviderRefreshResult {
+    success: boolean;
+    error?: string;
+    expiresAt?: number;
+}
+/**
+ * Refresh token for a specific provider and account
+ * @param provider Provider to refresh
+ * @param _accountId Account ID (currently unused, multi-account not yet implemented)
+ * @returns Refresh result with success status and optional error
+ */
+export declare function refreshToken(provider: CLIProxyProvider, _accountId: string): Promise<ProviderRefreshResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/cliproxy/auth/provider-refreshers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cliproxy/auth/provider-refreshers/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG/C,2BAA2B;AAC3B,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,gBAAgB,EAC1B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,qBAAqB,CAAC,CAuBhC"}

package/dist/cliproxy/auth/provider-refreshers/index.js

@@ -0,0 +1,57 @@
+"use strict";
+/**
+ * Provider Token Refreshers
+ *
+ * Exports refresh functions for each OAuth provider.
+ * Currently only Gemini is implemented; others return placeholder errors.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.refreshToken = void 0;
+const gemini_token_refresh_1 = require("../gemini-token-refresh");
+/**
+ * Refresh token for a specific provider and account
+ * @param provider Provider to refresh
+ * @param _accountId Account ID (currently unused, multi-account not yet implemented)
+ * @returns Refresh result with success status and optional error
+ */
+async function refreshToken(provider, _accountId) {
+    switch (provider) {
+        case 'gemini':
+            return await refreshGeminiTokenWrapper();
+        case 'codex':
+        case 'agy':
+        case 'qwen':
+        case 'iflow':
+        case 'kiro':
+        case 'ghcp':
+        case 'claude':
+            return {
+                success: false,
+                error: `Token refresh not yet implemented for ${provider}`,
+            };
+        default:
+            return {
+                success: false,
+                error: `Unknown provider: ${provider}`,
+            };
+    }
+}
+exports.refreshToken = refreshToken;
+/**
+ * Wrapper for Gemini token refresh
+ * Converts gemini-token-refresh.ts format to provider-refreshers format
+ */
+async function refreshGeminiTokenWrapper() {
+    const result = await (0, gemini_token_refresh_1.refreshGeminiToken)();
+    if (!result.success) {
+        return {
+            success: false,
+            error: result.error,
+        };
+    }
+    return {
+        success: true,
+        expiresAt: result.expiresAt,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/cliproxy/auth/provider-refreshers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/cliproxy/auth/provider-refreshers/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,kEAA6D;AAS7D;;;;;GAKG;AACI,KAAK,UAAU,YAAY,CAChC,QAA0B,EAC1B,UAAkB;IAElB,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,MAAM,yBAAyB,EAAE,CAAC;QAE3C,KAAK,OAAO,CAAC;QACb,KAAK,KAAK,CAAC;QACX,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO,CAAC;QACb,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ;YACX,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,yCAAyC,QAAQ,EAAE;aAC3D,CAAC;QAEJ;YACE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,qBAAqB,QAAQ,EAAE;aACvC,CAAC;IACN,CAAC;AACH,CAAC;AA1BD,oCA0BC;AAED;;;GAGG;AACH,KAAK,UAAU,yBAAyB;IACtC,MAAM,MAAM,GAAG,MAAM,IAAA,yCAAkB,GAAE,CAAC;IAE1C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC"}

package/dist/cliproxy/auth/token-expiry-checker.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Token Expiry Checker
+ *
+ * Inspects token files to determine expiry times and refresh requirements.
+ * Supports expiry_date field with fallback to file modification time.
+ */
+import { CLIProxyProvider } from '../types';
+/** Preemptive refresh time: refresh tokens 45 minutes before expiry */
+export declare const PREEMPTIVE_REFRESH_MINUTES = 45;
+/** Fallback expiry: assume 50 minutes if no expiry_date field */
+export declare const FALLBACK_EXPIRY_MINUTES = 50;
+/** Token expiry information for a single account */
+export interface TokenExpiryInfo {
+    /** Provider name */
+    provider: CLIProxyProvider;
+    /** Account ID */
+    accountId: string;
+    /** Path to token file */
+    tokenFile: string;
+    /** Expiry timestamp (Unix ms) */
+    expiresAt: number;
+    /** Whether token needs refresh (within preemptive window) */
+    needsRefresh: boolean;
+    /** Token file last modified time */
+    lastModified: Date;
+}
+/**
+ * Get token expiry info for a specific account
+ * @returns null if token file doesn't exist or is invalid
+ */
+export declare function getTokenExpiryInfo(provider: CLIProxyProvider, accountId: string): TokenExpiryInfo | null;
+/**
+ * Get token expiry info for all accounts across all providers
+ * @returns Array of token expiry info, excluding invalid tokens
+ */
+export declare function getAllTokenExpiryInfo(): TokenExpiryInfo[];
+//# sourceMappingURL=token-expiry-checker.d.ts.map

package/dist/cliproxy/auth/token-expiry-checker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-expiry-checker.d.ts","sourceRoot":"","sources":["../../../src/cliproxy/auth/token-expiry-checker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAI5C,uEAAuE;AACvE,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAE7C,iEAAiE;AACjE,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAK1C,oDAAoD;AACpD,MAAM,WAAW,eAAe;IAC9B,oBAAoB;IACpB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,YAAY,EAAE,OAAO,CAAC;IACtB,oCAAoC;IACpC,YAAY,EAAE,IAAI,CAAC;CACpB;AAYD;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,gBAAgB,EAC1B,SAAS,EAAE,MAAM,GAChB,eAAe,GAAG,IAAI,CAsDxB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,eAAe,EAAE,CAgBzD"}

package/dist/cliproxy/auth/token-expiry-checker.js

@@ -0,0 +1,115 @@
+"use strict";
+/**
+ * Token Expiry Checker
+ *
+ * Inspects token files to determine expiry times and refresh requirements.
+ * Supports expiry_date field with fallback to file modification time.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAllTokenExpiryInfo = exports.getTokenExpiryInfo = exports.FALLBACK_EXPIRY_MINUTES = exports.PREEMPTIVE_REFRESH_MINUTES = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const profile_detector_1 = require("../../auth/profile-detector");
+const account_manager_1 = require("../account-manager");
+/** Preemptive refresh time: refresh tokens 45 minutes before expiry */
+exports.PREEMPTIVE_REFRESH_MINUTES = 45;
+/** Fallback expiry: assume 50 minutes if no expiry_date field */
+exports.FALLBACK_EXPIRY_MINUTES = 50;
+/** Maximum token file size in bytes (1MB) - prevent DoS from huge files */
+const MAX_TOKEN_FILE_SIZE = 1024 * 1024;
+/**
+ * Get token expiry info for a specific account
+ * @returns null if token file doesn't exist or is invalid
+ */
+function getTokenExpiryInfo(provider, accountId) {
+    const tokenPath = (0, account_manager_1.getAccountTokenPath)(provider, accountId);
+    if (!tokenPath || !fs.existsSync(tokenPath)) {
+        return null;
+    }
+    try {
+        const stats = fs.statSync(tokenPath);
+        // Prevent DoS from huge token files
+        if (stats.size > MAX_TOKEN_FILE_SIZE) {
+            return null;
+        }
+        const content = fs.readFileSync(tokenPath, 'utf-8');
+        const data = JSON.parse(content);
+        // Validate refresh_token exists (required for refresh)
+        if (!data.refresh_token || typeof data.refresh_token !== 'string') {
+            return null;
+        }
+        // Calculate expiry time with validation
+        let expiresAt;
+        if (data.expiry_date &&
+            typeof data.expiry_date === 'number' &&
+            Number.isFinite(data.expiry_date) &&
+            data.expiry_date > 0) {
+            // Use expiry_date field if valid
+            expiresAt = data.expiry_date;
+        }
+        else {
+            // Fallback: use file mtime + 50 minutes
+            expiresAt = stats.mtime.getTime() + exports.FALLBACK_EXPIRY_MINUTES * 60 * 1000;
+        }
+        // Check if needs refresh (within preemptive window)
+        const now = Date.now();
+        const timeUntilExpiry = expiresAt - now;
+        const preemptiveMs = exports.PREEMPTIVE_REFRESH_MINUTES * 60 * 1000;
+        const needsRefresh = timeUntilExpiry < preemptiveMs;
+        return {
+            provider,
+            accountId,
+            tokenFile: path.basename(tokenPath),
+            expiresAt,
+            needsRefresh,
+            lastModified: stats.mtime,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+exports.getTokenExpiryInfo = getTokenExpiryInfo;
+/**
+ * Get token expiry info for all accounts across all providers
+ * @returns Array of token expiry info, excluding invalid tokens
+ */
+function getAllTokenExpiryInfo() {
+    const providers = [...profile_detector_1.CLIPROXY_PROFILES];
+    const results = [];
+    for (const provider of providers) {
+        const accounts = (0, account_manager_1.getProviderAccounts)(provider);
+        for (const account of accounts) {
+            const info = getTokenExpiryInfo(provider, account.id);
+            if (info) {
+                results.push(info);
+            }
+        }
+    }
+    return results;
+}
+exports.getAllTokenExpiryInfo = getAllTokenExpiryInfo;
+//# sourceMappingURL=token-expiry-checker.js.map