@ltgiang/9router 0.5.82 → 0.5.84

package/app/.next-cli-build/server/chunks/3617.js

@@ -1 +1 @@
-exports.id=3617,exports.ids=[3617],exports.modules={8590:(a,b,c)=>{"use strict";c.d(b,{$B:()=>U,Bc:()=>s,I9:()=>J,Ib:()=>v,Og:()=>n,Ql:()=>M,iD:()=>S,jR:()=>P,jT:()=>R,oD:()=>l,qZ:()=>X});var d=c(16698),e=c(61408),f=c(86522),g=c(77598),h=c(95538),i=c(57843),j=c(54444),k=c(44418);let l=3e5,m={codex:3e5,openai:3e5,claude:3e5,"gitlab-duo":3e5,kiro:3e5,"kimi-coding":3e5,qwen:3e5,iflow:864e5,antigravity:9e5,agy:9e5};function n(a,b){let c=b?.refreshLeadMs;return"number"==typeof c&&Number.isFinite(c)&&c>0?c:m[a]??l}let o=new Map,p=new Map,q=new Map,r=new d.AsyncLocalStorage;function s(a,b){return a?r.run(a,b):b()}let t=new d.AsyncLocalStorage,u={skipped:0,persisted:0};function v(a,b){return a?t.run(a,b):b()}async function w(a){let b,c=t.getStore();if(!c||!c.expectedRefreshToken)return!1;try{b=await c.reread()}catch{return!1}return(0,i.Jv)(c.expectedRefreshToken,b)?(u.skipped++,a?.warn?.("TOKEN_REFRESH","CAS guard: skipping persist — a concurrent writer already rotated the refresh_token (#4038)"),!0):(u.persisted++,!1)}function x(a){let b=new URLSearchParams;for(let[c,d]of Object.entries(a))"string"==typeof d&&d.length>0&&b.set(c,d);return b}function y(a,b){let c=(0,g.pbkdf2Sync)(b,"omniroute-token-cache",1e3,32,"sha256").toString("hex");return`${a}:${c}`}let z=new Set(["invalid_grant","invalid_request","refresh_token_reused","invalid_token","expired_token","unauthorized_client","access_denied"]);function A(a,b=0){if(null==a||b>6)return null;if("string"==typeof a){let c=a.trim();if(!c)return null;if(z.has(c))return c;if("{"===c[0]||"["===c[0]||'"'===c[0])try{let a=A(JSON.parse(c),b+1);if(a)return a}catch{}let d=c.match(/"error(?:_code)?"\s*:\s*"([a-z_]+)"/i);return d&&z.has(d[1])?d[1]:null}return"object"==typeof a?A(a.error,b+1)??A(a.code,b+1)??A(a.error_code,b+1):null}async function B(a){let b=await a.text().catch(()=>""),c=b;try{c=JSON.parse(b)}catch{}let d=A(c)??A(b);return{rawText:b,code:d}}async function C(a,b,c,d,f=null){let g=e.xq[a],i=g?.refreshUrl||g?.tokenUrl;if(!g||!i)return d?.warn?.("TOKEN_REFRESH",`No refresh endpoint configured for provider: ${a}`),null;if(!b)return d?.warn?.("TOKEN_REFRESH",`No refresh token available for provider: ${a}`),null;try{let c=new URLSearchParams({grant_type:"refresh_token",refresh_token:b});g.clientId&&c.set("client_id",g.clientId),g.clientSecret&&c.set("client_secret",g.clientSecret);let e=await (0,h.jf)(f,()=>fetch(i,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:c}));if(!e.ok){let b=await e.text();d?.error?.("TOKEN_REFRESH",`Failed to refresh token for ${a}`,{status:e.status,error:b});let c=A(b);if("invalid_grant"===c||"invalid_request"===c)return{error:"unrecoverable_refresh_error",code:c};return null}let j=await e.json();return d?.info?.("TOKEN_REFRESH",`Successfully refreshed token for ${a}`,{hasNewAccessToken:!!j.access_token,hasNewRefreshToken:!!j.refresh_token,expiresIn:j.expires_in}),{accessToken:j.access_token,refreshToken:j.refresh_token||b,expiresIn:j.expires_in}}catch(b){return d?.error?.("TOKEN_REFRESH",`Error refreshing token for ${a}`,{error:b.message}),null}}async function D(a,b,c,d=null){if(!a)return c?.warn?.("TOKEN_REFRESH","No refresh token stored for Windsurf — token may be a long-lived API key"),null;if("import"===(b?.authMethod||"import"))return c?.debug?.("TOKEN_REFRESH","Windsurf import token is long-lived — no refresh needed"),null;let e=j.e.firebaseApiKey||"";if(!e)return c?.warn?.("TOKEN_REFRESH","Windsurf Firebase API key unavailable — skipping Firebase token refresh"),null;let f=`https://securetoken.googleapis.com/v1/token?key=${e}`;try{let b=await (0,h.jf)(d,()=>fetch(f,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:x({grant_type:"refresh_token",refresh_token:a})}));if(!b.ok){let a=await b.text();c?.error?.("TOKEN_REFRESH","Failed to refresh Windsurf Firebase token",{status:b.status,error:a.slice(0,200)});try{let b=JSON.parse(a),d="string"==typeof b?.error?.message?b.error.message:"string"==typeof b?.error?b.error:null;if("string"==typeof d&&(d.includes("USER_DISABLED")||d.includes("TOKEN_EXPIRED")||d.includes("INVALID_REFRESH_TOKEN")||d.includes("USER_NOT_FOUND")))return c?.error?.("TOKEN_REFRESH","Windsurf Firebase token is permanently invalid. Re-authentication required.",{fbCode:d}),{error:"unrecoverable_refresh_error",code:d}}catch{}return null}let e=await b.json(),g=parseInt(e.expires_in??"3600",10);return c?.info?.("TOKEN_REFRESH","Successfully refreshed Windsurf Firebase token",{expiresIn:g,hasNewIdToken:!!e.id_token}),{accessToken:e.id_token,refreshToken:e.refresh_token||a,expiresIn:g}}catch(a){return c?.error?.("TOKEN_REFRESH",`Network error refreshing Windsurf token: ${a instanceof Error?a.message:String(a)}`),null}}async function E(a,b,d=null){if(!a)return null;let{CODEBUDDY_CN_CONFIG:e}=await Promise.resolve().then(c.bind(c,54444));try{let c=await (0,h.jf)(d,()=>fetch(e.refreshUrl,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json","User-Agent":e.userAgent,"X-Requested-With":"XMLHttpRequest","X-Domain":"copilot.tencent.com","X-Refresh-Token":a,"X-Auth-Refresh-Source":"plugin","X-Product":"SaaS"},body:"{}"}));if(!c.ok){let a=await c.text();return b?.error?.("TOKEN_REFRESH","Failed to refresh CodeBuddy CN token",{status:c.status,error:a}),null}let f=await c.json();if(f?.code!==0||!f?.data?.accessToken)return b?.error?.("TOKEN_REFRESH","CodeBuddy CN token refresh returned no token",{code:f?.code,msg:f?.msg}),null;return b?.info?.("TOKEN_REFRESH","Successfully refreshed CodeBuddy CN token",{hasNewAccessToken:!!f.data.accessToken,hasNewRefreshToken:!!f.data.refreshToken,expiresIn:f.data.expiresIn}),{accessToken:f.data.accessToken,refreshToken:f.data.refreshToken||a,expiresIn:f.data.expiresIn}}catch(a){return b?.error?.("TOKEN_REFRESH",`Network error refreshing CodeBuddy CN token: ${a?.message}`),null}}async function F(a,b,c=null){let d=e.xq.cline?.refreshUrl;if(!d)return b?.warn?.("TOKEN_REFRESH","No refresh URL configured for Cline"),null;try{let e=await (0,h.jf)(c,()=>fetch(d,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({refreshToken:a,grantType:"refresh_token",clientType:"extension"})}));if(!e.ok){let a=await e.text();b?.error?.("TOKEN_REFRESH","Failed to refresh Cline token",{status:e.status,error:a});let c=A(a);if("invalid_grant"===c||"invalid_request"===c)return{error:"unrecoverable_refresh_error",code:c};if(401===e.status)return{error:"unrecoverable_refresh_error",code:c||"unauthorized"};return null}let f=await e.json(),g=f?.data||f,i=g?.expiresAt,j=i?Math.max(1,Math.floor((new Date(i).getTime()-Date.now())/1e3)):void 0;return b?.info?.("TOKEN_REFRESH","Successfully refreshed Cline token",{hasNewAccessToken:!!g?.accessToken,hasNewRefreshToken:!!g?.refreshToken,expiresIn:j}),{accessToken:g?.accessToken,refreshToken:g?.refreshToken||a,expiresIn:j}}catch(a){return b?.error?.("TOKEN_REFRESH",`Network error refreshing Cline token: ${a.message}`),null}}async function G(a,b,c,d=null){let f=e.xq["kimi-coding"]?.refreshUrl||e.xq["kimi-coding"]?.tokenUrl;if(!f)return c?.warn?.("TOKEN_REFRESH","No refresh URL configured for Kimi Coding"),null;let i=b?.deviceId||(0,g.pbkdf2Sync)(a,"kimi-device-id",1e3,16,"sha256").toString("hex"),j=process.env.KIMI_CLI_VERSION||"1.36.0",k="u">typeof process?process.platform:"unknown",l=[k,"u">typeof process?process.arch:"unknown"].filter(Boolean).join(" ");try{let g=new URLSearchParams({grant_type:"refresh_token",refresh_token:a,client_id:e.xq["kimi-coding"]?.clientId||""}),m=await (0,h.jf)(d,()=>fetch(f,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json","X-Msh-Platform":"kimi_cli","X-Msh-Version":j,"X-Msh-Device-Model":b?.deviceModel||l,"X-Msh-Device-Id":i,"X-Msh-Device-Name":b?.deviceName||k,"X-Msh-Os-Version":b?.osVersion||k},body:g}));if(!m.ok){let a=await m.text();try{let b=JSON.parse(a),d=b?.error;if("invalid_grant"===d||"invalid_request"===d)return c?.error?.("TOKEN_REFRESH","Kimi Coding refresh token invalid. Re-authentication required.",{errorCode:d}),{error:"unrecoverable_refresh_error",code:d}}catch{}return c?.error?.("TOKEN_REFRESH","Failed to refresh Kimi Coding token",{status:m.status,error:a.slice(0,200)}),null}let n=await m.json();return c?.info?.("TOKEN_REFRESH","Successfully refreshed Kimi Coding token",{hasNewAccessToken:!!n.access_token,hasNewRefreshToken:!!n.refresh_token,expiresIn:n.expires_in}),{accessToken:n.access_token,refreshToken:n.refresh_token||a,expiresIn:n.expires_in,tokenType:n.token_type,scope:n.scope}}catch(a){return c?.error?.("TOKEN_REFRESH",`Network error refreshing Kimi Coding token: ${a instanceof Error?a.message:String(a)}`),null}}async function H(a,b,c,d=null){if(!a)return c?.warn?.("TOKEN_REFRESH","No refresh token for GitLab Duo"),null;let f=(0,k.L_)(b),g=(0,k.Tg)(f).tokenUrl,i=b?.clientId||e.xq["gitlab-duo"]?.clientId||process.env.GITLAB_DUO_OAUTH_CLIENT_ID||process.env.GITLAB_OAUTH_CLIENT_ID||"";try{let b=await (0,h.jf)(d,()=>fetch(g,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:x({grant_type:"refresh_token",refresh_token:a,client_id:i})}));if(!b.ok){let a=await b.text();try{let b=JSON.parse(a).error;if("invalid_grant"===b||"invalid_request"===b)return c?.error?.("TOKEN_REFRESH","GitLab Duo refresh token invalid. Re-authentication required.",{errorCode:b}),{error:"unrecoverable_refresh_error",code:b}}catch{}return c?.error?.("TOKEN_REFRESH","Failed to refresh GitLab Duo token",{status:b.status,error:a.slice(0,200)}),null}let e=await b.json();return c?.info?.("TOKEN_REFRESH","Successfully refreshed GitLab Duo token",{hasNewAccessToken:!!e.access_token,hasNewRefreshToken:!!e.refresh_token,expiresIn:e.expires_in}),{accessToken:e.access_token,refreshToken:e.refresh_token||a,expiresIn:e.expires_in}}catch(a){return c?.error?.("TOKEN_REFRESH",`Network error refreshing GitLab Duo token: ${a instanceof Error?a.message:String(a)}`),null}}async function I(a,b,c=null){try{let d=x({grant_type:"refresh_token",refresh_token:a,client_id:e.xq.claude.clientId}),f=await (0,h.jf)(c,()=>fetch(e.NA.anthropic.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json","anthropic-beta":"oauth-2025-04-20"},body:d.toString()}));if(!f.ok){let{rawText:a,code:c}=await B(f);if(b?.error?.("TOKEN_REFRESH","Failed to refresh Claude OAuth token",{status:f.status,error:a.slice(0,300)}),"invalid_grant"===c||"invalid_request"===c)return{error:"unrecoverable_refresh_error",code:c};return null}let g=await f.json();return b?.info?.("TOKEN_REFRESH","Successfully refreshed Claude OAuth token",{hasNewAccessToken:!!g.access_token,hasNewRefreshToken:!!g.refresh_token,expiresIn:g.expires_in}),{accessToken:g.access_token,refreshToken:g.refresh_token||a,expiresIn:g.expires_in}}catch(a){return b?.error?.("TOKEN_REFRESH",`Network error refreshing Claude token: ${a.message}`),null}}async function J(a,b,c,d,f=null){let g=await (0,h.jf)(f,()=>fetch(e.NA.google.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:x({grant_type:"refresh_token",refresh_token:a,client_id:b,client_secret:c})}));if(!g.ok){let a=await g.text();d?.error?.("TOKEN_REFRESH","Failed to refresh Google token",{status:g.status,error:a.slice(0,200)});try{let b=JSON.parse(a);if("invalid_grant"===b.error)return d?.error?.("TOKEN_REFRESH","Google refresh token invalid. Re-authentication required.",{provider:"google"}),{error:"unrecoverable_refresh_error",code:"invalid_grant"}}catch{}return null}let i=await g.json();return d?.info?.("TOKEN_REFRESH","Successfully refreshed Google token",{hasNewAccessToken:!!i.access_token,hasNewRefreshToken:!!i.refresh_token,expiresIn:i.expires_in}),{accessToken:i.access_token,refreshToken:i.refresh_token||a,expiresIn:i.expires_in}}async function K(a,b,c=null){let d=e.NA.qwen.token;try{let f=await (0,h.jf)(c,()=>fetch(d,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:x({grant_type:"refresh_token",refresh_token:a,client_id:e.xq.qwen.clientId})}));if(200===f.status){let c=await f.json();return b?.info?.("TOKEN_REFRESH","Successfully refreshed Qwen token",{hasNewAccessToken:!!c.access_token,hasNewRefreshToken:!!c.refresh_token,expiresIn:c.expires_in}),{accessToken:c.access_token,refreshToken:c.refresh_token||a,expiresIn:c.expires_in,providerSpecificData:c.resource_url?{resourceUrl:c.resource_url}:void 0}}{let a=await f.text().catch(()=>""),c=null;try{let b=JSON.parse(a);c=b?.error}catch{}if("invalid_request"===c||"invalid_grant"===c)return b?.error?.("TOKEN_REFRESH","Qwen refresh token is invalid or expired. Re-authentication required.",{status:f.status,errorCode:c}),{error:"unrecoverable_refresh_error",code:c};b?.warn?.("TOKEN_REFRESH","Error with Qwen endpoint",{status:f.status,error:a})}}catch(a){b?.warn?.("TOKEN_REFRESH","Network error trying Qwen endpoint",{error:a.message})}return b?.error?.("TOKEN_REFRESH","Failed to refresh Qwen token"),null}async function L(a,b,c=null){try{let d=await (0,h.jf)(c,()=>fetch(e.NA.openai.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:x({grant_type:"refresh_token",refresh_token:a,client_id:e.xq.codex.clientId})}));if(!d.ok){let a=await d.text(),c=null;try{let b=JSON.parse(a);c=b?.error?.code||("string"==typeof b?.error?b.error:null)}catch{}if("refresh_token_reused"===c||"invalid_grant"===c||"token_expired"===c||"invalid_token"===c)return b?.error?.("TOKEN_REFRESH","Codex refresh token already used or invalid. Re-authentication required.",{status:d.status,errorCode:c}),{error:"unrecoverable_refresh_error",code:c};if(401===d.status){let a=c||"unauthorized";return b?.error?.("TOKEN_REFRESH","Codex OAuth token endpoint returned 401. Re-authentication required.",{status:d.status,errorCode:a}),{error:"unrecoverable_refresh_error",code:a}}return b?.error?.("TOKEN_REFRESH","Failed to refresh Codex token",{status:d.status,error:a}),null}let f=await d.json();return b?.info?.("TOKEN_REFRESH","Successfully refreshed Codex token",{hasNewAccessToken:!!f.access_token,hasNewRefreshToken:!!f.refresh_token,expiresIn:f.expires_in}),{accessToken:f.access_token,refreshToken:f.refresh_token||a,expiresIn:f.expires_in}}catch(a){return b?.error?.("TOKEN_REFRESH",`Network error refreshing Codex token: ${a.message}`),null}}async function M(a,b,c,d=null){try{let f=b?.authMethod,g=b?.clientId,i=b?.clientSecret,j=b?.region;if(g&&i&&"imported"!==f){let b=`https://oidc.${j||"us-east-1"}.amazonaws.com/token`,e=await (0,h.jf)(d,()=>fetch(b,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({clientId:g,clientSecret:i,refreshToken:a,grantType:"refresh_token"})}));if(!e.ok){let f,g=await e.text();try{let a=JSON.parse(g);f=a.__type||a.error}catch{}if("InvalidGrantException"===f||"ExpiredTokenException"===f||"invalid_grant"===f)return c?.error?.("TOKEN_REFRESH","Kiro AWS refresh token expired/invalid. Re-authentication required.",{awsErrorType:f}),{error:"unrecoverable_refresh_error",code:f};c?.warn?.("TOKEN_REFRESH","Kiro OIDC refresh failed, attempting client re-registration...",{status:e.status,error:g.slice(0,200)});try{let e=`https://oidc.${j||"us-east-1"}.amazonaws.com/client/register`,f=await (0,h.jf)(d,()=>fetch(e,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({clientName:"kiro-oauth-client",clientType:"public",scopes:["codewhisperer:completions","codewhisperer:analysis","codewhisperer:conversations"],grantTypes:["urn:ietf:params:oauth:grant-type:device_code","refresh_token"],issuerUrl:"https://identitycenter.amazonaws.com/ssoins-722374e8c3c8e6c6"})}));if(f.ok){let e=await f.json(),g=await (0,h.jf)(d,()=>fetch(b,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:a,grantType:"refresh_token"})}));if(g.ok){let b=await g.json();return c?.info?.("TOKEN_REFRESH","Kiro refresh recovered via client re-registration",{hasNewAccessToken:!!b.accessToken,expiresIn:b.expiresIn}),{accessToken:b.accessToken,refreshToken:b.refreshToken||a,expiresIn:b.expiresIn,_newClientId:e.clientId,_newClientSecret:e.clientSecret,_newClientSecretExpiresAt:e.clientSecretExpiresAt}}}}catch(a){c?.warn?.("TOKEN_REFRESH","Kiro client re-registration fallback failed",{error:String(a)})}return c?.error?.("TOKEN_REFRESH","Failed to refresh Kiro AWS token",{status:e.status,error:g.slice(0,200)}),null}let f=await e.json();return c?.info?.("TOKEN_REFRESH","Successfully refreshed Kiro AWS token",{hasNewAccessToken:!!f.accessToken,expiresIn:f.expiresIn}),{accessToken:f.accessToken,refreshToken:f.refreshToken||a,expiresIn:f.expiresIn}}let k=e.xq.kiro.tokenUrl;if(!k)return c?.error?.("TOKEN_REFRESH","Missing Kiro token endpoint"),null;let l=await (0,h.jf)(d,()=>fetch(k,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({refreshToken:a})}));if(!l.ok){let a=await l.text();try{let b=JSON.parse(a),d=b.__type||b.error;if("InvalidGrantException"===d||"ExpiredTokenException"===d||"invalid_grant"===d)return c?.error?.("TOKEN_REFRESH","Kiro social refresh token expired/invalid. Re-authentication required.",{awsErrorType:d}),{error:"unrecoverable_refresh_error",code:d}}catch{}return c?.error?.("TOKEN_REFRESH","Failed to refresh Kiro social token",{status:l.status,error:a.slice(0,200)}),null}let m=await l.json();return c?.info?.("TOKEN_REFRESH","Successfully refreshed Kiro social token",{hasNewAccessToken:!!m.accessToken,expiresIn:m.expiresIn}),{accessToken:m.accessToken,refreshToken:m.refreshToken||a,expiresIn:m.expiresIn}}catch(a){return c?.error?.("TOKEN_REFRESH",`Network error refreshing Kiro token: ${a.message}`),null}}async function N(a,b,c=null){if(!e.NA.qoder.token||!e.xq.qoder.clientId||!e.xq.qoder.clientSecret)return b?.warn?.("TOKEN_REFRESH","Qoder OAuth refresh skipped: browser OAuth is not configured in this environment"),null;let d=btoa(`${e.xq.qoder.clientId}:${e.xq.qoder.clientSecret}`),f=await (0,h.jf)(c,()=>fetch(e.NA.qoder.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json",Authorization:`Basic ${d}`},body:x({grant_type:"refresh_token",refresh_token:a,client_id:e.xq.qoder.clientId,client_secret:e.xq.qoder.clientSecret})}));if(!f.ok){let a=await f.text();b?.error?.("TOKEN_REFRESH","Failed to refresh Qoder token",{status:f.status,error:a});let c=A(a);return"invalid_grant"===c||"invalid_request"===c?{error:"unrecoverable_refresh_error",code:c}:null}let g=await f.json();return b?.info?.("TOKEN_REFRESH","Successfully refreshed Qoder token",{hasNewAccessToken:!!g.access_token,hasNewRefreshToken:!!g.refresh_token,expiresIn:g.expires_in}),{accessToken:g.access_token,refreshToken:g.refresh_token||a,expiresIn:g.expires_in}}async function O(a,b,c=null){let d=await (0,h.jf)(c,()=>fetch(e.NA.github.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:x({grant_type:"refresh_token",refresh_token:a,client_id:e.xq.github.clientId,client_secret:e.xq.github.clientSecret})}));if(!d.ok){let a=await d.text();b?.error?.("TOKEN_REFRESH","Failed to refresh GitHub token",{status:d.status,error:a});let c=A(a);return"invalid_grant"===c||"invalid_request"===c?{error:"unrecoverable_refresh_error",code:c}:null}let f=await d.json();return b?.info?.("TOKEN_REFRESH","Successfully refreshed GitHub token",{hasNewAccessToken:!!f.access_token,hasNewRefreshToken:!!f.refresh_token,expiresIn:f.expires_in}),{accessToken:f.access_token,refreshToken:f.refresh_token||a,expiresIn:f.expires_in}}async function P(a,b,c=null){try{let d=await (0,h.jf)(c,()=>fetch("https://api.github.com/copilot_internal/v2/token",{headers:(0,f.H_)(`token ${a}`)}));if(!d.ok){let a=await d.text();return b?.error?.("TOKEN_REFRESH","Failed to refresh Copilot token",{status:d.status,error:a}),null}let e=await d.json();return b?.info?.("TOKEN_REFRESH","Successfully refreshed Copilot token",{hasToken:!!e.token,expiresAt:e.expires_at}),{token:e.token,expiresAt:e.expires_at}}catch(a){return b?.error?.("TOKEN_REFRESH","Error refreshing Copilot token",{error:a.message}),null}}async function Q(a,b,c,d=null){switch(a){case"gemini":case"antigravity":case"agy":return await J(b.refreshToken,e.xq[a].clientId,e.xq[a].clientSecret,c,d);case"claude":return await I(b.refreshToken,c,d);case"codex":return await L(b.refreshToken,c,d);case"qwen":return await K(b.refreshToken,c,d);case"qoder":return await N(b.refreshToken,c,d);case"github":return await O(b.refreshToken,c,d);case"kiro":case"amazon-q":return await M(b.refreshToken,b.providerSpecificData,c,d);case"cline":return await F(b.refreshToken,c,d);case"kimi-coding":return await G(b.refreshToken,b.providerSpecificData,c,d);case"gitlab-duo":return await H(b.refreshToken,b.providerSpecificData,c,d);case"windsurf":case"devin-cli":return await D(b.refreshToken,b.providerSpecificData,c,d);case"codebuddy-cn":return await E(b.refreshToken,c,d);default:return C(a,b.refreshToken,b,c,d)}}function R(a){return a&&"object"==typeof a&&("unrecoverable_refresh_error"===a.error||"refresh_token_reused"===a.error||"invalid_request"===a.error||"invalid_grant"===a.error)}async function S(a,b,d,e=null,f){if(!b||!b.refreshToken||"string"!=typeof b.refreshToken)return d?.warn?.("TOKEN_REFRESH",`No valid refresh token available for provider: ${a}`),null;let g=f??r.getStore(),h=b.connectionId;if(h&&"string"==typeof h){let f=p.get(h);if(f)return f.waiters++,d?.info?.("TOKEN_REFRESH","Concurrent refresh detected — sharing in-flight refresh",{provider:a,connectionId:h,waiters:f.waiters}),f.promise;let i={promise:null,waiters:0};return i.promise=(async()=>{let f=await T(a,b,d,e);if(f?.accessToken&&g){if(await w(d))return f;try{await g(f)}catch(e){let{sanitizeErrorMessage:b}=await c.e(3659).then(c.bind(c,43659));throw d?.error?.("TOKEN_REFRESH",`onPersist callback failed for ${a}/${h}: ${b(e instanceof Error?e:Error(String(e)))}`),e}}return f})().finally(()=>{p.delete(h)}),p.set(h,i),i.promise}let j=y(a,b.refreshToken);if(o.has(j))return d?.info?.("TOKEN_REFRESH",`Reusing in-flight refresh for ${a}`),o.get(j);let k=(0,i.Aj)(a,()=>Q(a,b,d,e)).then(async b=>{if(b?.accessToken&&g){if(await w(d))return b;try{await g(b)}catch(e){let{sanitizeErrorMessage:b}=await c.e(3659).then(c.bind(c,43659));throw d?.error?.("TOKEN_REFRESH",`Layer 2 onPersist callback failed for ${a}: ${b(e instanceof Error?e:Error(String(e)))}`),e}}else b?.accessToken&&!g&&d?.warn?.("TOKEN_REFRESH",`Layer 2 refresh succeeded for ${a} without onPersist — DB row will not be updated with rotated token. Callers should pass connectionId for Layer 1 atomicity.`);return b}).finally(()=>{o.delete(j)});return o.set(j,k),k}async function T(a,b,d,e){let f=function(a,b){!function(a=Date.now()){if(0!==q.size)for(let[b,c]of q.entries())c.expiresAt<=a&&q.delete(b)}();let c=y(a,b),d=q.get(c);if(d)return d.expiresAt<=Date.now()?void q.delete(c):d}(a,b.refreshToken);if(f)return d?.info?.("TOKEN_REFRESH",`Rotation map hit for ${a}. Returning cached rotated tokens (avoids family-revoke).`),f.result;if(b.connectionId)try{let{getProviderConnectionById:e}=await c.e(7094).then(c.bind(c,87094)),f=await e(b.connectionId);if(f&&f.refreshToken){let c=Date.now(),e=f.expiresAt?new Date(f.expiresAt).getTime():0;if(f.refreshToken!==b.refreshToken){if(d?.info?.("TOKEN_REFRESH",`Stale token detected in memory for ${a}. Using refreshed token from DB.`),e>c+6e4)return d?.info?.("TOKEN_REFRESH","DB token is still valid. Skipping OAuth refresh."),{accessToken:f.accessToken,refreshToken:f.refreshToken,expiresAt:f.expiresAt};b.refreshToken=f.refreshToken,b.accessToken=f.accessToken}}}catch(a){d?.warn?.("TOKEN_REFRESH",`Failed to check DB for stale token: ${a instanceof Error?a.message:String(a)}`)}let g=b.refreshToken,h=await (0,i.Aj)(a,()=>Q(a,b,d,e));return h&&"object"==typeof h&&!("error"in h)&&h.accessToken&&h.refreshToken&&function(a,b,c){if(!b||!c.refreshToken||b===c.refreshToken)return;let d=y(a,b);q.set(d,{result:c,expiresAt:Date.now()+6e4})}(a,g,h),h}let U=S,V={};async function W(a,b){return await new Promise((c,d)=>{let e=setTimeout(()=>c(null),b);"object"==typeof e&&"unref"in e&&e.unref?.(),a().then(a=>{clearTimeout(e),c(a)},a=>{clearTimeout(e),d(a)})})}async function X(a,b=3,c=null,d="unknown"){let e;if((e=V[d])&&e.blockedUntil&&(e.blockedUntil>Date.now()||(delete V[d],0)))return c?.warn?.("TOKEN_REFRESH",`⚡ Circuit breaker active for ${d}, skipping refresh`),null;for(let e=0;e<b;e++){if(e>0){let a=1e3*e;c?.debug?.("TOKEN_REFRESH",`Retry ${e}/${b} after ${a}ms`),await new Promise(b=>setTimeout(b,a))}try{let b=await W(a,3e4);if(R(b))return c?.warn?.("TOKEN_REFRESH",`Unrecoverable refresh error for ${d}: ${b.error} — skipping retries`),b;if(b)return V[d]&&delete V[d],b}catch(a){c?.warn?.("TOKEN_REFRESH",`Attempt ${e+1}/${b} failed: ${a.message}`)}}return!function(a,b=null){V[a]||(V[a]={failures:0,blockedUntil:0}),V[a].failures++,V[a].failures>=5&&(V[a].blockedUntil=Date.now()+18e5,b?.error?.("TOKEN_REFRESH",`🔴 Circuit breaker tripped for ${a}: 5 consecutive failures. Blocked for 30min. Provider needs re-authentication.`))}(d,c),c?.error?.("TOKEN_REFRESH",`All ${b} retry attempts failed for ${d}`),null}},20927:(a,b,c)=>{"use strict";var d=c(75919),e=c.n(d),f=c(28064);e()&&!e().markAsUncloneable&&(e().markAsUncloneable=function(a){if(e().markAsUntransferable)try{e().markAsUntransferable(a)}catch{}}),void 0===Promise.withResolvers&&(Promise.withResolvers=function(){let a,b;return{promise:new Promise((c,d)=>{a=c,b=d}),resolve:a,reject:b}}),void 0===globalThis.WebSocket&&(globalThis.WebSocket=f.WebSocket)},39727:()=>{},47990:()=>{},54444:(a,b,c)=>{"use strict";c.d(b,{e:()=>d});let d=null},57843:(a,b,c)=>{"use strict";c.d(b,{Aj:()=>f,Jv:()=>g});let d={codex:"openai-auth0",openai:"openai-auth0",claude:"anthropic-oauth","gitlab-duo":"gitlab-duo",kiro:"kiro","kimi-coding":"kimi-coding",qwen:"qwen"},e=new Map;async function f(a,b){let c,f=d[a]??null;if(!f)return b();let g=e.get(f)??Promise.resolve(),h=new Promise(a=>{c=a}),i=g.then(()=>h);e.set(f,i),await g.catch(()=>{});try{return await b()}finally{if(e.get(f)!==i){let a=function(){let a=process.env.CODEX_REFRESH_SPACING_MS;if(void 0===a||""===a)return 2e3;let b=Number(a);return Number.isFinite(b)&&b>=0?b:2e3}();a>0&&await new Promise(b=>setTimeout(b,a))}c(),e.get(f)===i&&e.delete(f)}}function g(a,b){return"string"==typeof a&&a.length>0&&"string"==typeof b&&b.length>0&&b!==a}},58643:(a,b,c)=>{"use strict";let d;c.d(b,{A:()=>g});var e=c(99765);try{let a=c(3725);d="function"==typeof a.createSession?a.createSession:null}catch{d=null}class f{constructor(){this.session=null,this.failureCount=0,this.maxFailures=3,this.baseCooldownMs=3e4,this.cooldownMs=3e4,this.cooldownMultiplier=1,this.MAX_COOLDOWN_MS=6e5,this.circuitOpenUntil=0,this.circuitTripped=!1,this._libraryAvailable=!!d}get available(){return!!this._libraryAvailable&&(!this.circuitTripped||Date.now()>=this.circuitOpenUntil)}recordFailure(){this.failureCount++,this.failureCount>=this.maxFailures&&(this.circuitOpenUntil=Date.now()+this.cooldownMs,this.circuitTripped=!0,this.session&&(Promise.resolve(this.session.close()).catch(()=>{}),this.session=null),console.warn(`[TlsClient] Circuit opened after ${this.failureCount} consecutive failures, cooling down for ${this.cooldownMs}ms`),this.escalateCooldown())}recordSuccess(){this.failureCount=0,this.circuitTripped&&(this.cooldownMultiplier=1,this.cooldownMs=this.baseCooldownMs,console.log("[TlsClient] Circuit closed (success after cooldown)"),this.circuitTripped=!1)}escalateCooldown(){this.cooldownMultiplier=Math.min(2*this.cooldownMultiplier,20),this.cooldownMs=Math.min(this.baseCooldownMs*this.cooldownMultiplier,this.MAX_COOLDOWN_MS)}checkCircuit(){return!this.circuitTripped||Date.now()>=this.circuitOpenUntil&&(console.log("[TlsClient] Half-open: retrying after cooldown"),!0)}async getSession(){if(!this.checkCircuit()||!this.available)return null;if(this.session)return this.session;let a=d;if(!a)return null;let b=process.env.HTTPS_PROXY||process.env.https_proxy||process.env.HTTP_PROXY||process.env.http_proxy||process.env.ALL_PROXY||process.env.all_proxy||void 0,c={browser:"chrome_124",os:"macos"};return b&&(c.proxy=b,console.log(`[TlsClient] Using proxy: ${b}`)),this.session=await a(c),console.log("[TlsClient] Session created (Chrome 124 TLS fingerprint)"),this.session}async fetch(a,b={}){if(!this.checkCircuit())throw Error("wreq-js circuit open — skipping TLS request");try{let c=await this.getSession();if(!c)throw Error("wreq-js not available");let{timeoutMs:d}=(0,e.uw)(process.env,a=>{console.warn(`[TlsClient] ${a}`)}),f={method:(b.method||"GET").toUpperCase(),headers:function(a){if(!a)return;if(a instanceof Headers)return Object.fromEntries(a.entries());if(Array.isArray(a))return Object.fromEntries(a.map(([a,b])=>[a,String(b)]));let b={};for(let[c,d]of Object.entries(a))"string"==typeof d&&(b[c]=d);return b}(b.headers),body:b.body,redirect:"manual"===b.redirect?"manual":"follow",timeout:d};b.signal&&(f.signal=b.signal);let g=await c.fetch(a,f);return this.recordSuccess(),g}catch(a){throw a instanceof Error&&("AbortError"===a.name||a.message.includes("aborted"))||this.recordFailure(),a}}async exit(){this.session&&(await this.session.close(),this.session=null)}resetCircuit(){this.failureCount=0,this.circuitTripped=!1,this.circuitOpenUntil=0}getCircuitState(){return{available:this.available,circuitTripped:this.circuitTripped,failureCount:this.failureCount,circuitOpenUntil:this.circuitOpenUntil,coolDownRemainingMs:this.circuitOpenUntil>0?Math.max(0,this.circuitOpenUntil-Date.now()):0}}}let g=new f},68404:(a,b,c)=>{"use strict";c.d(b,{KS:()=>d,wX:()=>e});let d=()=>!1,e=()=>!1},69889:(a,b,c)=>{"use strict";c.d(b,{Bm:()=>e,UL:()=>g,wI:()=>f});var d=c(77030);function e(a){return"string"!=typeof a?"":a.startsWith("[")&&a.endsWith("]")?a.slice(1,-1):a}function f(a){let b=e(a),c=(0,d.isIP)(b);return 0===c?null:c}function g(a){return"ipv4"===a||"ipv6"===a?a:"auto"}},85376:(a,b,c)=>{"use strict";c.d(b,{R4:()=>y,I_:()=>A,DJ:()=>q,Sn:()=>r,g4:()=>o,zP:()=>x,HN:()=>z,OK:()=>w}),c(20927);var d=c(47774),e=c(20406),f=c(99765),g=c(69889),h=c(13092);let i=Symbol.for("omniroute.proxyDispatcher.cache"),j=Symbol.for("omniroute.proxyDispatcher.default"),k=Symbol.for("omniroute.proxyDispatcher.retry");class l{constructor(a){this.nextIndex=0,this.dispatchers=a}dispatch(a,b){let c=this.dispatchers[this.nextIndex%this.dispatchers.length];return this.nextIndex=(this.nextIndex+1)%this.dispatchers.length,c.dispatch(a,b)}close(a){let b=Promise.all(this.dispatchers.map(a=>a.close())).then(()=>void 0);return a?void b.then(a):b}destroy(a,b){let c="function"==typeof a?a:b,d="function"==typeof a?null:a??null,e=Promise.all(this.dispatchers.map(a=>a.destroy(d))).then(()=>void 0);return c?void e.then(c):e}}let m=new Set(["http:","https:","socks5:"]),n=new Set(["vercel","deno","cloudflare"]);function o(a){return"string"==typeof a&&n.has(a)}function p(){let a=(0,f.pf)(process.env,a=>{console.warn(`[ProxyDispatcher] ${a}`)});return{headersTimeout:a.fetchHeadersTimeoutMs,bodyTimeout:a.fetchBodyTimeoutMs,connectTimeout:a.fetchConnectTimeoutMs,keepAliveTimeout:a.fetchKeepAliveTimeoutMs,keepAliveMaxTimeout:a.fetchKeepAliveTimeoutMs}}function q(){let a=globalThis[j];if(!a){var b,c;let e;c=function(a=process.env){let b=a.OMNIROUTE_DIRECT_DISPATCHER_CONNECTIONS;if(null==b||""===b.trim())return 32;let c=Number(b);return!Number.isFinite(c)||c<1?(console.warn(`[ProxyDispatcher] Invalid OMNIROUTE_DIRECT_DISPATCHER_CONNECTIONS="${b}". Using default 32.`),32):Math.min(Math.floor(c),256)}(),e={...p(),connections:1,pipelining:0},b=a=new l(Array.from({length:c},()=>new d.Agent(e))),globalThis[j]=b}return a}function r(){let a=globalThis[k];if(!a){var b;b=a=new d.Agent({...p(),keepAliveTimeout:1,keepAliveMaxTimeout:1,pipelining:0}),globalThis[k]=b}return a}function s(a){try{let b=a.indexOf("://");if(-1===b)return null;let c=b+3,d=a.indexOf("/",c),e=-1===d?a.slice(c):a.slice(c,d),f=e.lastIndexOf(":"),g=e.lastIndexOf("@");if(-1!==f&&f>g){let a=e.slice(f+1);if(/^\d+$/.test(a)){let b=Number(a);if(Number.isInteger(b)&&b>=1&&b<=65535)return String(b)}}}catch{}return null}function t(a){return"https:"===a||"wss:"===a?"443":"socks5:"===a?"1080":"8080"}function u(a,b){if(!a)return t(b);let c=Number(a);if(!Number.isInteger(c)||c<1||c>65535)throw Error("[ProxyDispatcher] Invalid proxy port");return String(c)}function v(){return!["false","0","no","off"].includes((process.env.ENABLE_SOCKS5_PROXY??"").trim().toLowerCase())}function w(a){let b=s(a),c=new URL(a),d=b||c.port||t(c.protocol);return`${c.protocol}//${c.hostname}:${d}`}function x(a,b="proxy",{allowSocks5:c=v()}={}){var d;let e,f,h=a.match(/\?family=(ipv4|ipv6)$/),i=h?h[0]:"",j=i?a.slice(0,-i.length):a,k=s(j);try{e=new URL(j)}catch{throw Error(`[ProxyDispatcher] Invalid ${b} URL`)}if(!m.has(e.protocol))throw Error(`[ProxyDispatcher] Unsupported ${b} protocol: ${e.protocol.replace(":","")}`);if("socks5:"===e.protocol&&!c)throw Error("[ProxyDispatcher] SOCKS5 proxy is disabled (remove ENABLE_SOCKS5_PROXY=false to enable — it is ON by default)");if(!e.hostname)throw Error(`[ProxyDispatcher] Invalid ${b} host`);let l=k||u(e.port,e.protocol),n=(0,g.UL)((h?h[1]:e.searchParams.get("family"))??void 0),o=(f=(d=e).username?`${d.username}${d.password?`:${d.password}`:""}@`:"",`${d.protocol}//${f}${d.hostname}:${l}`);return"auto"===n?o:`${o}?family=${n}`}function y(a,b){let c=new URL(a);return{"x-relay-target":`${c.protocol}//${c.host}`,"x-relay-path":c.pathname+c.search,"x-relay-auth":b}}function z(a,{allowSocks5:b=v()}={}){if(!a)return null;if("string"==typeof a)return x(a,"context proxy",{allowSocks5:b});if("object"!=typeof a||Array.isArray(a))throw Error("[ProxyDispatcher] Invalid context proxy config");if(!a.host)return null;let c=String(a.type||"http").toLowerCase();if(n.has(c))return a.host?`https://${a.host}`:null;let d=`${c}:`;if(!m.has(d))throw Error(`[ProxyDispatcher] Unsupported context proxy protocol: ${c}`);if("socks5:"===d&&!b)throw Error("[ProxyDispatcher] SOCKS5 proxy is disabled (remove ENABLE_SOCKS5_PROXY=false to enable — it is ON by default)");let e=u(a.port,d),f=a.username?`${encodeURIComponent(a.username)}:${a.password?encodeURIComponent(a.password):""}@`:"",h=`${c}://${f}${a.host}:${e}`,i=(0,g.UL)(a.family),j=x(h,"context proxy",{allowSocks5:b});return"auto"===i?j:`${j}?family=${i}`}function A(a){let b,c=x(a,"proxy dispatcher"),f=((b=globalThis)[i]||(b[i]=new Map),b[i]),j=function(a=process.env){return{...p(),connections:function(a=process.env){let b=a.OMNIROUTE_PROXY_DISPATCHER_CONNECTIONS;if(null==b||""===b.trim())return 32;let c=Number(b);return!Number.isFinite(c)||c<1?(console.warn(`[ProxyDispatcher] Invalid OMNIROUTE_PROXY_DISPATCHER_CONNECTIONS="${b}". Using default 32.`),32):Math.min(Math.floor(c),256)}(a),keepAliveTimeout:1,keepAliveMaxTimeout:1,pipelining:0}}(),k=f.get(c);if(k)return k;let l=new URL(c),m=function(a){let b=(0,g.UL)(a.searchParams.get("family")??void 0),c=(0,g.wI)(a.hostname);if("auto"===b)return c;let d="ipv6"===b?6:4;if(null!==c&&c!==d)throw Error(`[ProxyDispatcher] Proxy family directive ${b} contradicts ${6===c?"IPv6":"IPv4"} literal host`);return d}(l);l.searchParams.delete("family");let n=c.replace(/\?family=(ipv4|ipv6)$/,""),o=s(n)||u(l.port,l.protocol);if("socks5:"===l.protocol){let a={type:5,host:(0,g.Bm)(l.hostname),port:Number(o)};l.username&&(a.userId=decodeURIComponent(l.username)),l.password&&(a.password=decodeURIComponent(l.password)),k=null===m?(0,e.vI)(a,j):function(a,b,c={}){let{connect:e,...f}=c;return new d.Agent({...f,connect:function(a,b,c={}){let e=(0,d.buildConnector)(c),f=6===b?{family:6,autoSelectFamily:!1}:4===b?{family:4,autoSelectFamily:!1}:{};return async(b,c)=>{let{protocol:d,hostname:g,port:i,httpSocket:j}=b;try{let k=(await h.SocksClient.createConnection({command:"connect",proxy:a,timeout:function(a=process.env){let b=a.SOCKS_HANDSHAKE_TIMEOUT_MS;if(null==b||""===b.trim())return 1e4;let c=Number(b);return!Number.isFinite(c)||c<1?1e4:Math.min(Math.floor(c),12e4)}(),destination:{host:g,port:i?Number.parseInt(i,10):"http:"===d?80:443},existing_socket:j,socket_options:f})).socket;if("https:"!==d)return c(null,k.setNoDelay());return e({...b,httpSocket:k},c)}catch(a){return c(a,null)}}}(a,b,e)})}(a,m,j)}else k=new d.ProxyAgent({uri:n,...j,...null!==m?{proxyTls:{family:m,autoSelectFamily:!1}}:{}});return f.set(c,k),k}},95538:(a,b,c)=>{"use strict";let d;c.d(b,{proxyAwareFetch:()=>F,l:()=>A,jf:()=>C}),c(20927);var e=c(16698),f=c(47774),g=c(85376),h=c(58643),i=c(77030),j=c.n(i),k=c(68404),l=c(89718);let m=new Map;function n(a){let b=a.username?`${encodeURIComponent(a.username)}:${encodeURIComponent(a.password||"")}@`:"";return`${a.type}://${b}${a.host}:${a.port}`}async function o(a){let b=new Set;try{let a=await (0,l.P)("global");a?.proxy&&b.add(n(a.proxy))}catch{}try{for(let a of(await (0,l.zU)({includeSecrets:!0})))a.host&&a.port&&b.add(n(a))}catch{}try{for(let a of(await (0,l.Bb)({limit:5})))a.host&&a.port&&b.add(n(a))}catch{}if(a)try{let c=function(a){let b,c=process.env.NO_PROXY||process.env.no_proxy;if(c){let b;try{b=new URL(a).hostname.toLowerCase()}catch{return null}if(c.split(",").map(a=>a.trim().toLowerCase()).filter(Boolean).some(a=>"*"===a||(a.includes("*")?RegExp("^"+a.split("*").map(a=>a.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")).join(".*")+"$").test(b):b===a||b.endsWith(`.${a}`))))return null}try{b=new URL(a).protocol}catch{return null}let d="https:"===b?process.env.HTTPS_PROXY||process.env.https_proxy||process.env.ALL_PROXY||process.env.all_proxy:process.env.HTTP_PROXY||process.env.http_proxy||process.env.ALL_PROXY||process.env.all_proxy;if(!d)return null;try{return(0,g.zP)(d,"environment proxy")}catch{return null}}(a);c&&b.add(c)}catch{}return Array.from(b)}async function p(a,b,c=3e3){let d=Date.now();try{let e=new AbortController,h=setTimeout(()=>e.abort(),c),i=(0,g.I_)(a);await (0,f.fetch)(b,{method:"HEAD",signal:e.signal,dispatcher:i,headers:{"User-Agent":"OmniRoute/1.0"}}),clearTimeout(h);let j=Date.now()-d;return{ok:!0,latencyMs:j}}catch{return{ok:!1,latencyMs:null}}}async function q(a,b){if(!a)return null;let c=function(a,b){try{let a=new URL(b),c=`${a.pathname||"/"}${a.search}`;return`${a.protocol}//${a.host}${c}`}catch{return a.toLowerCase()}}(a,b),d=m.get(c);if(d){if(d.expiresAt>Date.now())return d.proxyUrl||null;m.delete(c)}let e=await ((void 0)??o)(b);if(0===e.length)return null;let f=(await Promise.allSettled(e.map(async a=>{let{ok:c}=await ((void 0)??p)(a,b);return{proxyUrl:a,ok:c}}))).find(a=>"fulfilled"===a.status&&a.value.ok);if(f&&"fulfilled"===f.status){let a=f.value.proxyUrl;return m.set(c,{proxyUrl:a,expiresAt:Date.now()+3e5}),a}return m.set(c,{proxyUrl:"",expiresAt:Date.now()+3e5}),null}let r=new e.AsyncLocalStorage,s=new e.AsyncLocalStorage;function t(a){let b=[],c=new Set,d=a;for(let a=0;d&&a<5&&!c.has(d);a++){c.add(d);let a=d,e=["string"==typeof a.name&&"Error"!==a.name?a.name:null,"string"==typeof a.message?a.message.slice(0,160):null,null!=a.code?`code=${String(a.code)}`:null,null!=a.syscall?`syscall=${String(a.syscall)}`:null,null!=a.errno?`errno=${String(a.errno)}`:null,null!=a.address?`address=${String(a.address)}${null!=a.port?`:${String(a.port)}`:""}`:null].filter(Boolean).join(" ");if(e&&b.push(e),Array.isArray(a.errors))for(let c of a.errors.slice(0,4)){let a=c??{},d=[null!=a.code?`code=${String(a.code)}`:null,null!=a.syscall?`syscall=${String(a.syscall)}`:null,null!=a.address?`address=${String(a.address)}${null!=a.port?`:${String(a.port)}`:""}`:null].filter(Boolean).join(" ");d?b.push(`↳ ${d}`):"string"==typeof a.message&&b.push(`↳ ${a.message.slice(0,80)}`)}d=a.cause}return b.join(" | ")||String(a)}let u="u">typeof caches&&"object"==typeof caches,v=Symbol.for("omniroute.proxyFetch.state"),w=((d=globalThis)[v]||(d[v]={originalFetch:globalThis.fetch,proxyContext:new e.AsyncLocalStorage,isPatched:!1}),d[v]),x=w.originalFetch,y=w.proxyContext;function z(a,b){let c,d=b??process.env.NO_PROXY??process.env.no_proxy;if(!d)return!1;try{c=new URL(a)}catch{return!1}let e=c.hostname.toLowerCase(),f=c.port||("https:"===c.protocol?"443":"80");return d.split(",").map(a=>a.trim().toLowerCase()).filter(Boolean).some(a=>{if("*"===a)return!0;let[b,c]=a.split(":");if(c&&c!==f||!b)return!1;if(b.includes("*")){let a=b.split("*"),c=0,d=e.startsWith(a[0]);if(d){c=a[0].length;for(let b=1;b<a.length&&d;b++){let f=a[b];if(b===a.length-1)d=""===f||e.endsWith(f)&&e.length-f.length>=c;else{let a=f?e.indexOf(f,c):c;-1===a?d=!1:c=a+f.length}}}if(d)return!0}return b.startsWith(".")?e.endsWith(b)||e===b.slice(1):e===b||e.endsWith(`.${b}`)})}function A(a){let b,c;try{b=new URL(a)}catch{b=null}if(b&&("localhost"===(c=b.hostname.toLowerCase().replace(/^\[/,"").replace(/\]$/,"").replace(/^::ffff:/i,""))||"0.0.0.0"===c||"127.0.0.1"===c||"::1"===c||c.endsWith(".local")||c.endsWith(".lan")||c.endsWith(".internal")||c.startsWith("192.168.")||c.startsWith("10.")||c.startsWith("127.")||c.startsWith("169.254.")||/^172\.(1[6-9]|2\d|3[0-1])\./.test(c)||/^100\.(6[4-9]|[7-9]\d|1[01]\d|12[0-7])\./.test(c)||/^f[cd][0-9a-f]*:/i.test(c)||c.startsWith("fe80:")))return{source:"direct",proxyUrl:null};let d=y.getStore();if(d)return d.__noProxy&&z(a,d.__noProxy)?{source:"direct",proxyUrl:null}:{source:"context",proxyUrl:d.__relayUrl||d.__proxyUrl||(0,g.HN)(d)};let e=function(a){let b;if(z(a))return null;try{b=new URL(a).protocol}catch{return null}let c="https:"===b?process.env.HTTPS_PROXY||process.env.https_proxy||process.env.ALL_PROXY||process.env.all_proxy:process.env.HTTP_PROXY||process.env.http_proxy||process.env.ALL_PROXY||process.env.all_proxy;return c?(0,g.zP)(c,"environment proxy"):null}(a);return e?{source:"env",proxyUrl:e}:{source:"direct",proxyUrl:null}}function B(a){return"string"==typeof a?a:a&&"string"==typeof a.url?a.url:String(a)}async function C(a,b,d){if("function"!=typeof b)throw TypeError("runWithProxyContext requires a callback function");let e=y.getStore(),f=a||e||null;if(f?.vercelRelayUrl){let a;try{a=new URL(f.vercelRelayUrl)}catch{throw Error("[ProxyFetch] Invalid relay URL")}f={type:"vercel",host:a.host,__relayUrl:a.toString().replace(/\/$/,""),__allowMissingRelayAuth:!0,__noProxy:f.connectionNoProxy||""}}else f?.connectionProxyUrl&&(f=!0===f.connectionProxyEnabled?{__proxyUrl:f.connectionProxyUrl,__noProxy:f.connectionNoProxy||""}:null);let h=f?f.__proxyUrl||(0,g.HN)(f):null,i=d?.directFallbackOnUnreachable===!0&&(0,k.KS)(),l=(0,g.g4)(f?.type);if(h&&!l&&!await function(a,b=2500){var c;let d;if(!a)return Promise.resolve(!1);try{d=new URL(String(a))}catch{return Promise.resolve(!1)}let e=d.hostname.replace(/^\[|\]$/g,""),f=(c=d).port?Number(c.port):"https:"===c.protocol?443:"socks5:"===c.protocol?1080:8080;if(!e||!Number.isInteger(f)||f<1||f>65535)return Promise.resolve(!1);let g=d.searchParams.get("family"),h="ipv4"===g?4:"ipv6"===g?6:void 0,i=Number.isFinite(Number(b))&&Number(b)>0?Number(b):2500;return new Promise(a=>{let b=!1,c=j().createConnection({host:e,port:f,family:h}),d=d=>{b||(b=!0,clearTimeout(g),c.destroy(),a(d))},g=setTimeout(()=>d(!1),i);c.once("connect",()=>d(!0)),c.once("error",()=>d(!1)),c.once("close",()=>d(!1))})}(h)){let a=(0,g.OK)(h);if(i)return console.warn(`[ProxyFetch] Proxy unreachable (${a}); using a direct connection for this request.`),y.run(null,b);let c=Error(`[Proxy Fast-Fail] Proxy unreachable: ${a}`);throw c.code="PROXY_UNREACHABLE",c.statusCode=503,c}if(h&&!l)try{let a=new URL(h),b=a.searchParams.get("family");if("ipv6"===b||"ipv4"===b){let{assertHostnameSupportsFamily:d}=await c.e(3041).then(c.bind(c,53041));await d(a.hostname,"ipv6"===b?6:4)}}catch(a){if(i)return console.warn(`[ProxyFetch] Proxy family pre-check failed (${(0,g.OK)(h)}); using a direct connection for this request.`),y.run(null,b);throw a.code=a.code||"PROXY_FAMILY_UNAVAILABLE",a.statusCode=a.statusCode||503,a}return y.run(f,async()=>{if(h&&f!==e&&console.log(`[ProxyFetch] Applied request proxy context: ${(0,g.OK)(h)}`),f){let a=s.getStore();a&&(a.proxy=f)}return b()})}async function D(a,b={},c={}){let d;if(b?.dispatcher)return(c.undiciFetch??f.fetch)(a,b);let e=B(a);try{d=A(e)}catch(b){let a=b instanceof Error?b.message:String(b);throw console.error(`[ProxyFetch] Proxy configuration error: ${a}`),b}let{source:i,proxyUrl:j}=d;if(!j){var l,m;if("true"===process.env.ENABLE_TLS_FINGERPRINT&&h.A.available)try{let a=r.getStore();return a&&(a.used=!0),await h.A.fetch(e,{...b,headers:b.headers,signal:b.signal??void 0})}catch(c){let a=c instanceof Error?c.message:String(c);console.warn(`[ProxyFetch] TLS fingerprint failed, falling back to native fetch: ${a}`);let b=r.getStore();b&&(b.used=!1)}let d=(l=a,!!(null!=(m=b.body)&&"object"==typeof m&&("function"==typeof m.getReader||"function"==typeof m.stream)||"u">typeof Request&&l instanceof Request&&(l.bodyUsed||null!==l.body))||!1),j=d?1:2,n=c.undiciFetch??f.fetch,o=c.nativeFetch??x,p=null;for(let c=0;c<j;c++)try{return await n(a,{...b,dispatcher:0===c?(0,g.DJ)():(0,g.Sn)()})}catch(l){let f=l instanceof Error?l.message:String(l);if(f.includes("onRequestStart"))throw console.error(`[ProxyFetch] Fatal version mismatch: Dispatcher (v8) vs Fetch (v6/native). Hardware upgrade or SOCKS5 config isolation required. Error: ${f}`),l;let h=l?.code;if(f.includes("fetch failed")||"ECONNREFUSED"===h||f.includes("ECONNREFUSED")||"string"==typeof h&&h.startsWith("UND_ERR")||f.includes("UND_ERR")){if(0===c&&j>1){p=l,await new Promise(a=>setTimeout(a,25+50*Math.random()));continue}if(d){let a=`dispatcher=[${t(l)}] native=[skipped: non-replayable request body]`;throw console.warn(`[ProxyFetch] skipping native fetch fallback for non-replayable body: ${a}`),l instanceof Error&&(l.proxyFetchDetail=a),l}if("direct"===i&&(0,k.wX)("PROXY_AUTO_SELECT_ENABLED")){let c="";try{c=new URL(e).hostname}catch{}if(c){let d=await q(c,e);if(d)try{let c=(0,g.I_)(d);return await n(a,{...b,dispatcher:c})}catch{}}}console.warn(`[ProxyFetch] Undici dispatcher failed, falling back to native fetch (after retry): ${t(l)}`);try{return await o(a,b)}catch(b){let a=`dispatcher=[${t(l)}] native=[${t(b)}]`;throw console.warn(`[ProxyFetch] native fetch fallback ALSO failed: ${a}`),b instanceof Error&&(b.proxyFetchDetail=a),b}}throw l}throw p}let n=y.getStore();if(n&&"object"==typeof n&&(0,g.g4)(n.type)){if(!n.relayAuth&&!n.__allowMissingRelayAuth){let a="vercel"===n.type?"Vercel relay":`${n.type||"Edge"} relay`;throw Error(`${a} configuration error: missing relayAuth`)}let c=B(a),d=(0,g.R4)(c,n.relayAuth||""),e=new Headers(b?.headers);for(let[a,b]of Object.entries(d))e.set(a,b);let f=(0,g.OK)(n.host?`https://${n.host}`:"");return"true"===process.env.OMNIROUTE_PROXY_FETCH_DEBUG&&console.debug(`[ProxyFetch] Routing via ${n.type||"edge"} relay: ${f}`),await x(n.__relayUrl||`https://${n.host}`,{...b,headers:e,duplex:"half"})}try{let d=(0,g.I_)(j),e=c.undiciFetch??f.fetch;return await e(a,{...b,dispatcher:d})}catch(b){let a=b instanceof Error?b.message:String(b);throw console.error(`[ProxyFetch] Proxy request failed (${i}, fail-closed): ${a}`),b}}async function E(a,b={},c={}){return D(a,b,c)}async function F(a,b={},c=null){return c&&(!0===c.connectionProxyEnabled||c.vercelRelayUrl)?C(c,()=>E(a,b)):E(a,b)}u||w.isPatched||(globalThis.fetch=D,w.isPatched=!0)}};
+exports.id=3617,exports.ids=[3617],exports.modules={8590:(a,b,c)=>{"use strict";c.d(b,{$B:()=>U,Bc:()=>s,I9:()=>J,Ib:()=>v,Og:()=>n,Ql:()=>M,iD:()=>S,jR:()=>P,jT:()=>R,oD:()=>l,qZ:()=>X});var d=c(16698),e=c(61408),f=c(86522),g=c(77598),h=c(95538),i=c(57843),j=c(54444),k=c(44418);let l=3e5,m={codex:3e5,openai:3e5,claude:3e5,"gitlab-duo":3e5,kiro:3e5,"kimi-coding":3e5,qwen:3e5,iflow:864e5,antigravity:9e5,agy:9e5};function n(a,b){let c=b?.refreshLeadMs;return"number"==typeof c&&Number.isFinite(c)&&c>0?c:m[a]??l}let o=new Map,p=new Map,q=new Map,r=new d.AsyncLocalStorage;function s(a,b){return a?r.run(a,b):b()}let t=new d.AsyncLocalStorage,u={skipped:0,persisted:0};function v(a,b){return a?t.run(a,b):b()}async function w(a){let b,c=t.getStore();if(!c||!c.expectedRefreshToken)return!1;try{b=await c.reread()}catch{return!1}return(0,i.Jv)(c.expectedRefreshToken,b)?(u.skipped++,a?.warn?.("TOKEN_REFRESH","CAS guard: skipping persist — a concurrent writer already rotated the refresh_token (#4038)"),!0):(u.persisted++,!1)}function x(a){let b=new URLSearchParams;for(let[c,d]of Object.entries(a))"string"==typeof d&&d.length>0&&b.set(c,d);return b}function y(a,b){let c=(0,g.pbkdf2Sync)(b,"omniroute-token-cache",1e3,32,"sha256").toString("hex");return`${a}:${c}`}let z=new Set(["invalid_grant","invalid_request","refresh_token_reused","invalid_token","expired_token","unauthorized_client","access_denied"]);function A(a,b=0){if(null==a||b>6)return null;if("string"==typeof a){let c=a.trim();if(!c)return null;if(z.has(c))return c;if("{"===c[0]||"["===c[0]||'"'===c[0])try{let a=A(JSON.parse(c),b+1);if(a)return a}catch{}let d=c.match(/"error(?:_code)?"\s*:\s*"([a-z_]+)"/i);return d&&z.has(d[1])?d[1]:null}return"object"==typeof a?A(a.error,b+1)??A(a.code,b+1)??A(a.error_code,b+1):null}async function B(a){let b=await a.text().catch(()=>""),c=b;try{c=JSON.parse(b)}catch{}let d=A(c)??A(b);return{rawText:b,code:d}}async function C(a,b,c,d,f=null){let g=e.xq[a],i=g?.refreshUrl||g?.tokenUrl;if(!g||!i)return d?.warn?.("TOKEN_REFRESH",`No refresh endpoint configured for provider: ${a}`),null;if(!b)return d?.warn?.("TOKEN_REFRESH",`No refresh token available for provider: ${a}`),null;try{let c=new URLSearchParams({grant_type:"refresh_token",refresh_token:b});g.clientId&&c.set("client_id",g.clientId),g.clientSecret&&c.set("client_secret",g.clientSecret);let e=await (0,h.jf)(f,()=>fetch(i,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:c}));if(!e.ok){let b=await e.text();d?.error?.("TOKEN_REFRESH",`Failed to refresh token for ${a}`,{status:e.status,error:b});let c=A(b);if("invalid_grant"===c||"invalid_request"===c)return{error:"unrecoverable_refresh_error",code:c};return null}let j=await e.json();return d?.info?.("TOKEN_REFRESH",`Successfully refreshed token for ${a}`,{hasNewAccessToken:!!j.access_token,hasNewRefreshToken:!!j.refresh_token,expiresIn:j.expires_in}),{accessToken:j.access_token,refreshToken:j.refresh_token||b,expiresIn:j.expires_in}}catch(b){return d?.error?.("TOKEN_REFRESH",`Error refreshing token for ${a}`,{error:b.message}),null}}async function D(a,b,c,d=null){if(!a)return c?.warn?.("TOKEN_REFRESH","No refresh token stored for Windsurf — token may be a long-lived API key"),null;if("import"===(b?.authMethod||"import"))return c?.debug?.("TOKEN_REFRESH","Windsurf import token is long-lived — no refresh needed"),null;let e=j.e.firebaseApiKey||"";if(!e)return c?.warn?.("TOKEN_REFRESH","Windsurf Firebase API key unavailable — skipping Firebase token refresh"),null;let f=`https://securetoken.googleapis.com/v1/token?key=${e}`;try{let b=await (0,h.jf)(d,()=>fetch(f,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:x({grant_type:"refresh_token",refresh_token:a})}));if(!b.ok){let a=await b.text();c?.error?.("TOKEN_REFRESH","Failed to refresh Windsurf Firebase token",{status:b.status,error:a.slice(0,200)});try{let b=JSON.parse(a),d="string"==typeof b?.error?.message?b.error.message:"string"==typeof b?.error?b.error:null;if("string"==typeof d&&(d.includes("USER_DISABLED")||d.includes("TOKEN_EXPIRED")||d.includes("INVALID_REFRESH_TOKEN")||d.includes("USER_NOT_FOUND")))return c?.error?.("TOKEN_REFRESH","Windsurf Firebase token is permanently invalid. Re-authentication required.",{fbCode:d}),{error:"unrecoverable_refresh_error",code:d}}catch{}return null}let e=await b.json(),g=parseInt(e.expires_in??"3600",10);return c?.info?.("TOKEN_REFRESH","Successfully refreshed Windsurf Firebase token",{expiresIn:g,hasNewIdToken:!!e.id_token}),{accessToken:e.id_token,refreshToken:e.refresh_token||a,expiresIn:g}}catch(a){return c?.error?.("TOKEN_REFRESH",`Network error refreshing Windsurf token: ${a instanceof Error?a.message:String(a)}`),null}}async function E(a,b,d=null){if(!a)return null;let{CODEBUDDY_CN_CONFIG:e}=await Promise.resolve().then(c.bind(c,54444));try{let c=await (0,h.jf)(d,()=>fetch(e.refreshUrl,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json","User-Agent":e.userAgent,"X-Requested-With":"XMLHttpRequest","X-Domain":"copilot.tencent.com","X-Refresh-Token":a,"X-Auth-Refresh-Source":"plugin","X-Product":"SaaS"},body:"{}"}));if(!c.ok){let a=await c.text();return b?.error?.("TOKEN_REFRESH","Failed to refresh CodeBuddy CN token",{status:c.status,error:a}),null}let f=await c.json();if(f?.code!==0||!f?.data?.accessToken)return b?.error?.("TOKEN_REFRESH","CodeBuddy CN token refresh returned no token",{code:f?.code,msg:f?.msg}),null;return b?.info?.("TOKEN_REFRESH","Successfully refreshed CodeBuddy CN token",{hasNewAccessToken:!!f.data.accessToken,hasNewRefreshToken:!!f.data.refreshToken,expiresIn:f.data.expiresIn}),{accessToken:f.data.accessToken,refreshToken:f.data.refreshToken||a,expiresIn:f.data.expiresIn}}catch(a){return b?.error?.("TOKEN_REFRESH",`Network error refreshing CodeBuddy CN token: ${a?.message}`),null}}async function F(a,b,c=null){let d=e.xq.cline?.refreshUrl;if(!d)return b?.warn?.("TOKEN_REFRESH","No refresh URL configured for Cline"),null;try{let e=await (0,h.jf)(c,()=>fetch(d,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({refreshToken:a,grantType:"refresh_token",clientType:"extension"})}));if(!e.ok){let a=await e.text();b?.error?.("TOKEN_REFRESH","Failed to refresh Cline token",{status:e.status,error:a});let c=A(a);if("invalid_grant"===c||"invalid_request"===c)return{error:"unrecoverable_refresh_error",code:c};if(401===e.status)return{error:"unrecoverable_refresh_error",code:c||"unauthorized"};return null}let f=await e.json(),g=f?.data||f,i=g?.expiresAt,j=i?Math.max(1,Math.floor((new Date(i).getTime()-Date.now())/1e3)):void 0;return b?.info?.("TOKEN_REFRESH","Successfully refreshed Cline token",{hasNewAccessToken:!!g?.accessToken,hasNewRefreshToken:!!g?.refreshToken,expiresIn:j}),{accessToken:g?.accessToken,refreshToken:g?.refreshToken||a,expiresIn:j}}catch(a){return b?.error?.("TOKEN_REFRESH",`Network error refreshing Cline token: ${a.message}`),null}}async function G(a,b,c,d=null){let f=e.xq["kimi-coding"]?.refreshUrl||e.xq["kimi-coding"]?.tokenUrl;if(!f)return c?.warn?.("TOKEN_REFRESH","No refresh URL configured for Kimi Coding"),null;let i=b?.deviceId||(0,g.pbkdf2Sync)(a,"kimi-device-id",1e3,16,"sha256").toString("hex"),j=process.env.KIMI_CLI_VERSION||"1.36.0",k="u">typeof process?process.platform:"unknown",l=[k,"u">typeof process?process.arch:"unknown"].filter(Boolean).join(" ");try{let g=new URLSearchParams({grant_type:"refresh_token",refresh_token:a,client_id:e.xq["kimi-coding"]?.clientId||""}),m=await (0,h.jf)(d,()=>fetch(f,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json","X-Msh-Platform":"kimi_cli","X-Msh-Version":j,"X-Msh-Device-Model":b?.deviceModel||l,"X-Msh-Device-Id":i,"X-Msh-Device-Name":b?.deviceName||k,"X-Msh-Os-Version":b?.osVersion||k},body:g}));if(!m.ok){let a=await m.text();try{let b=JSON.parse(a),d=b?.error;if("invalid_grant"===d||"invalid_request"===d)return c?.error?.("TOKEN_REFRESH","Kimi Coding refresh token invalid. Re-authentication required.",{errorCode:d}),{error:"unrecoverable_refresh_error",code:d}}catch{}return c?.error?.("TOKEN_REFRESH","Failed to refresh Kimi Coding token",{status:m.status,error:a.slice(0,200)}),null}let n=await m.json();return c?.info?.("TOKEN_REFRESH","Successfully refreshed Kimi Coding token",{hasNewAccessToken:!!n.access_token,hasNewRefreshToken:!!n.refresh_token,expiresIn:n.expires_in}),{accessToken:n.access_token,refreshToken:n.refresh_token||a,expiresIn:n.expires_in,tokenType:n.token_type,scope:n.scope}}catch(a){return c?.error?.("TOKEN_REFRESH",`Network error refreshing Kimi Coding token: ${a instanceof Error?a.message:String(a)}`),null}}async function H(a,b,c,d=null){if(!a)return c?.warn?.("TOKEN_REFRESH","No refresh token for GitLab Duo"),null;let f=(0,k.L_)(b),g=(0,k.Tg)(f).tokenUrl,i=b?.clientId||e.xq["gitlab-duo"]?.clientId||process.env.GITLAB_DUO_OAUTH_CLIENT_ID||process.env.GITLAB_OAUTH_CLIENT_ID||"";try{let b=await (0,h.jf)(d,()=>fetch(g,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:x({grant_type:"refresh_token",refresh_token:a,client_id:i})}));if(!b.ok){let a=await b.text();try{let b=JSON.parse(a).error;if("invalid_grant"===b||"invalid_request"===b)return c?.error?.("TOKEN_REFRESH","GitLab Duo refresh token invalid. Re-authentication required.",{errorCode:b}),{error:"unrecoverable_refresh_error",code:b}}catch{}return c?.error?.("TOKEN_REFRESH","Failed to refresh GitLab Duo token",{status:b.status,error:a.slice(0,200)}),null}let e=await b.json();return c?.info?.("TOKEN_REFRESH","Successfully refreshed GitLab Duo token",{hasNewAccessToken:!!e.access_token,hasNewRefreshToken:!!e.refresh_token,expiresIn:e.expires_in}),{accessToken:e.access_token,refreshToken:e.refresh_token||a,expiresIn:e.expires_in}}catch(a){return c?.error?.("TOKEN_REFRESH",`Network error refreshing GitLab Duo token: ${a instanceof Error?a.message:String(a)}`),null}}async function I(a,b,c=null){try{let d=x({grant_type:"refresh_token",refresh_token:a,client_id:e.xq.claude.clientId}),f=await (0,h.jf)(c,()=>fetch(e.NA.anthropic.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json","anthropic-beta":"oauth-2025-04-20"},body:d.toString()}));if(!f.ok){let{rawText:a,code:c}=await B(f);if(b?.error?.("TOKEN_REFRESH","Failed to refresh Claude OAuth token",{status:f.status,error:a.slice(0,300)}),"invalid_grant"===c||"invalid_request"===c)return{error:"unrecoverable_refresh_error",code:c};return null}let g=await f.json();return b?.info?.("TOKEN_REFRESH","Successfully refreshed Claude OAuth token",{hasNewAccessToken:!!g.access_token,hasNewRefreshToken:!!g.refresh_token,expiresIn:g.expires_in}),{accessToken:g.access_token,refreshToken:g.refresh_token||a,expiresIn:g.expires_in}}catch(a){return b?.error?.("TOKEN_REFRESH",`Network error refreshing Claude token: ${a.message}`),null}}async function J(a,b,c,d,f=null){let g=await (0,h.jf)(f,()=>fetch(e.NA.google.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:x({grant_type:"refresh_token",refresh_token:a,client_id:b,client_secret:c})}));if(!g.ok){let a=await g.text();d?.error?.("TOKEN_REFRESH","Failed to refresh Google token",{status:g.status,error:a.slice(0,200)});try{let b=JSON.parse(a);if("invalid_grant"===b.error)return d?.error?.("TOKEN_REFRESH","Google refresh token invalid. Re-authentication required.",{provider:"google"}),{error:"unrecoverable_refresh_error",code:"invalid_grant"}}catch{}return null}let i=await g.json();return d?.info?.("TOKEN_REFRESH","Successfully refreshed Google token",{hasNewAccessToken:!!i.access_token,hasNewRefreshToken:!!i.refresh_token,expiresIn:i.expires_in}),{accessToken:i.access_token,refreshToken:i.refresh_token||a,expiresIn:i.expires_in}}async function K(a,b,c=null){let d=e.NA.qwen.token;try{let f=await (0,h.jf)(c,()=>fetch(d,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:x({grant_type:"refresh_token",refresh_token:a,client_id:e.xq.qwen.clientId})}));if(200===f.status){let c=await f.json();return b?.info?.("TOKEN_REFRESH","Successfully refreshed Qwen token",{hasNewAccessToken:!!c.access_token,hasNewRefreshToken:!!c.refresh_token,expiresIn:c.expires_in}),{accessToken:c.access_token,refreshToken:c.refresh_token||a,expiresIn:c.expires_in,providerSpecificData:c.resource_url?{resourceUrl:c.resource_url}:void 0}}{let a=await f.text().catch(()=>""),c=null;try{let b=JSON.parse(a);c=b?.error}catch{}if("invalid_request"===c||"invalid_grant"===c)return b?.error?.("TOKEN_REFRESH","Qwen refresh token is invalid or expired. Re-authentication required.",{status:f.status,errorCode:c}),{error:"unrecoverable_refresh_error",code:c};b?.warn?.("TOKEN_REFRESH","Error with Qwen endpoint",{status:f.status,error:a})}}catch(a){b?.warn?.("TOKEN_REFRESH","Network error trying Qwen endpoint",{error:a.message})}return b?.error?.("TOKEN_REFRESH","Failed to refresh Qwen token"),null}async function L(a,b,c=null){try{let d=await (0,h.jf)(c,()=>fetch(e.NA.openai.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:x({grant_type:"refresh_token",refresh_token:a,client_id:e.xq.codex.clientId})}));if(!d.ok){let a=await d.text(),c=null;try{let b=JSON.parse(a);c=b?.error?.code||("string"==typeof b?.error?b.error:null)}catch{}if("refresh_token_reused"===c||"invalid_grant"===c||"token_expired"===c||"invalid_token"===c)return b?.error?.("TOKEN_REFRESH","Codex refresh token already used or invalid. Re-authentication required.",{status:d.status,errorCode:c}),{error:"unrecoverable_refresh_error",code:c};if(401===d.status){let a=c||"unauthorized";return b?.error?.("TOKEN_REFRESH","Codex OAuth token endpoint returned 401. Re-authentication required.",{status:d.status,errorCode:a}),{error:"unrecoverable_refresh_error",code:a}}return b?.error?.("TOKEN_REFRESH","Failed to refresh Codex token",{status:d.status,error:a}),null}let f=await d.json();return b?.info?.("TOKEN_REFRESH","Successfully refreshed Codex token",{hasNewAccessToken:!!f.access_token,hasNewRefreshToken:!!f.refresh_token,expiresIn:f.expires_in}),{accessToken:f.access_token,refreshToken:f.refresh_token||a,expiresIn:f.expires_in}}catch(a){return b?.error?.("TOKEN_REFRESH",`Network error refreshing Codex token: ${a.message}`),null}}async function M(a,b,c,d=null){try{let f=b?.authMethod,g=b?.clientId,i=b?.clientSecret,j=b?.region;if(g&&i&&"imported"!==f){let b=`https://oidc.${j||"us-east-1"}.amazonaws.com/token`,e=await (0,h.jf)(d,()=>fetch(b,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({clientId:g,clientSecret:i,refreshToken:a,grantType:"refresh_token"})}));if(!e.ok){let f,g=await e.text();try{let a=JSON.parse(g);f=a.__type||a.error}catch{}if("InvalidGrantException"===f||"ExpiredTokenException"===f||"invalid_grant"===f)return c?.error?.("TOKEN_REFRESH","Kiro AWS refresh token expired/invalid. Re-authentication required.",{awsErrorType:f}),{error:"unrecoverable_refresh_error",code:f};c?.warn?.("TOKEN_REFRESH","Kiro OIDC refresh failed, attempting client re-registration...",{status:e.status,error:g.slice(0,200)});try{let e=`https://oidc.${j||"us-east-1"}.amazonaws.com/client/register`,f=await (0,h.jf)(d,()=>fetch(e,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({clientName:"kiro-oauth-client",clientType:"public",scopes:["codewhisperer:completions","codewhisperer:analysis","codewhisperer:conversations"],grantTypes:["urn:ietf:params:oauth:grant-type:device_code","refresh_token"],issuerUrl:"https://identitycenter.amazonaws.com/ssoins-722374e8c3c8e6c6"})}));if(f.ok){let e=await f.json(),g=await (0,h.jf)(d,()=>fetch(b,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:a,grantType:"refresh_token"})}));if(g.ok){let b=await g.json();return c?.info?.("TOKEN_REFRESH","Kiro refresh recovered via client re-registration",{hasNewAccessToken:!!b.accessToken,expiresIn:b.expiresIn}),{accessToken:b.accessToken,refreshToken:b.refreshToken||a,expiresIn:b.expiresIn,_newClientId:e.clientId,_newClientSecret:e.clientSecret,_newClientSecretExpiresAt:e.clientSecretExpiresAt}}}}catch(a){c?.warn?.("TOKEN_REFRESH","Kiro client re-registration fallback failed",{error:String(a)})}return c?.error?.("TOKEN_REFRESH","Failed to refresh Kiro AWS token",{status:e.status,error:g.slice(0,200)}),null}let f=await e.json();return c?.info?.("TOKEN_REFRESH","Successfully refreshed Kiro AWS token",{hasNewAccessToken:!!f.accessToken,expiresIn:f.expiresIn}),{accessToken:f.accessToken,refreshToken:f.refreshToken||a,expiresIn:f.expiresIn}}let k=e.xq.kiro.tokenUrl;if(!k)return c?.error?.("TOKEN_REFRESH","Missing Kiro token endpoint"),null;let l=await (0,h.jf)(d,()=>fetch(k,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({refreshToken:a})}));if(!l.ok){let a=await l.text();try{let b=JSON.parse(a),d=b.__type||b.error;if("InvalidGrantException"===d||"ExpiredTokenException"===d||"invalid_grant"===d)return c?.error?.("TOKEN_REFRESH","Kiro social refresh token expired/invalid. Re-authentication required.",{awsErrorType:d}),{error:"unrecoverable_refresh_error",code:d}}catch{}return c?.error?.("TOKEN_REFRESH","Failed to refresh Kiro social token",{status:l.status,error:a.slice(0,200)}),null}let m=await l.json();return c?.info?.("TOKEN_REFRESH","Successfully refreshed Kiro social token",{hasNewAccessToken:!!m.accessToken,expiresIn:m.expiresIn}),{accessToken:m.accessToken,refreshToken:m.refreshToken||a,expiresIn:m.expiresIn}}catch(a){return c?.error?.("TOKEN_REFRESH",`Network error refreshing Kiro token: ${a.message}`),null}}async function N(a,b,c=null){if(!e.NA.qoder.token||!e.xq.qoder.clientId||!e.xq.qoder.clientSecret)return b?.warn?.("TOKEN_REFRESH","Qoder OAuth refresh skipped: browser OAuth is not configured in this environment"),null;let d=btoa(`${e.xq.qoder.clientId}:${e.xq.qoder.clientSecret}`),f=await (0,h.jf)(c,()=>fetch(e.NA.qoder.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json",Authorization:`Basic ${d}`},body:x({grant_type:"refresh_token",refresh_token:a,client_id:e.xq.qoder.clientId,client_secret:e.xq.qoder.clientSecret})}));if(!f.ok){let a=await f.text();b?.error?.("TOKEN_REFRESH","Failed to refresh Qoder token",{status:f.status,error:a});let c=A(a);return"invalid_grant"===c||"invalid_request"===c?{error:"unrecoverable_refresh_error",code:c}:null}let g=await f.json();return b?.info?.("TOKEN_REFRESH","Successfully refreshed Qoder token",{hasNewAccessToken:!!g.access_token,hasNewRefreshToken:!!g.refresh_token,expiresIn:g.expires_in}),{accessToken:g.access_token,refreshToken:g.refresh_token||a,expiresIn:g.expires_in}}async function O(a,b,c=null){let d=await (0,h.jf)(c,()=>fetch(e.NA.github.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:x({grant_type:"refresh_token",refresh_token:a,client_id:e.xq.github.clientId,client_secret:e.xq.github.clientSecret})}));if(!d.ok){let a=await d.text();b?.error?.("TOKEN_REFRESH","Failed to refresh GitHub token",{status:d.status,error:a});let c=A(a);return"invalid_grant"===c||"invalid_request"===c?{error:"unrecoverable_refresh_error",code:c}:null}let f=await d.json();return b?.info?.("TOKEN_REFRESH","Successfully refreshed GitHub token",{hasNewAccessToken:!!f.access_token,hasNewRefreshToken:!!f.refresh_token,expiresIn:f.expires_in}),{accessToken:f.access_token,refreshToken:f.refresh_token||a,expiresIn:f.expires_in}}async function P(a,b,c=null){try{let d=await (0,h.jf)(c,()=>fetch("https://api.github.com/copilot_internal/v2/token",{headers:(0,f.H_)(`token ${a}`)}));if(!d.ok){let a=await d.text();return b?.error?.("TOKEN_REFRESH","Failed to refresh Copilot token",{status:d.status,error:a}),null}let e=await d.json();return b?.info?.("TOKEN_REFRESH","Successfully refreshed Copilot token",{hasToken:!!e.token,expiresAt:e.expires_at}),{token:e.token,expiresAt:e.expires_at}}catch(a){return b?.error?.("TOKEN_REFRESH","Error refreshing Copilot token",{error:a.message}),null}}async function Q(a,b,c,d=null){switch(a){case"gemini":case"antigravity":case"agy":return await J(b.refreshToken,e.xq[a].clientId,e.xq[a].clientSecret,c,d);case"claude":return await I(b.refreshToken,c,d);case"codex":return await L(b.refreshToken,c,d);case"qwen":return await K(b.refreshToken,c,d);case"qoder":return await N(b.refreshToken,c,d);case"github":return await O(b.refreshToken,c,d);case"kiro":case"amazon-q":return await M(b.refreshToken,b.providerSpecificData,c,d);case"cline":return await F(b.refreshToken,c,d);case"kimi-coding":return await G(b.refreshToken,b.providerSpecificData,c,d);case"gitlab-duo":return await H(b.refreshToken,b.providerSpecificData,c,d);case"windsurf":case"devin-cli":return await D(b.refreshToken,b.providerSpecificData,c,d);case"codebuddy-cn":return await E(b.refreshToken,c,d);default:return C(a,b.refreshToken,b,c,d)}}function R(a){return a&&"object"==typeof a&&("unrecoverable_refresh_error"===a.error||"refresh_token_reused"===a.error||"invalid_request"===a.error||"invalid_grant"===a.error)}async function S(a,b,d,e=null,f){if(!b||!b.refreshToken||"string"!=typeof b.refreshToken)return d?.warn?.("TOKEN_REFRESH",`No valid refresh token available for provider: ${a}`),null;let g=f??r.getStore(),h=b.connectionId;if(h&&"string"==typeof h){let f=p.get(h);if(f)return f.waiters++,d?.info?.("TOKEN_REFRESH","Concurrent refresh detected — sharing in-flight refresh",{provider:a,connectionId:h,waiters:f.waiters}),f.promise;let i={promise:null,waiters:0};return i.promise=(async()=>{let f=await T(a,b,d,e);if(f?.accessToken&&g){if(await w(d))return f;try{await g(f)}catch(e){let{sanitizeErrorMessage:b}=await c.e(3659).then(c.bind(c,43659));throw d?.error?.("TOKEN_REFRESH",`onPersist callback failed for ${a}/${h}: ${b(e instanceof Error?e:Error(String(e)))}`),e}}return f})().finally(()=>{p.delete(h)}),p.set(h,i),i.promise}let j=y(a,b.refreshToken);if(o.has(j))return d?.info?.("TOKEN_REFRESH",`Reusing in-flight refresh for ${a}`),o.get(j);let k=(0,i.Aj)(a,()=>Q(a,b,d,e)).then(async b=>{if(b?.accessToken&&g){if(await w(d))return b;try{await g(b)}catch(e){let{sanitizeErrorMessage:b}=await c.e(3659).then(c.bind(c,43659));throw d?.error?.("TOKEN_REFRESH",`Layer 2 onPersist callback failed for ${a}: ${b(e instanceof Error?e:Error(String(e)))}`),e}}else b?.accessToken&&!g&&d?.warn?.("TOKEN_REFRESH",`Layer 2 refresh succeeded for ${a} without onPersist — DB row will not be updated with rotated token. Callers should pass connectionId for Layer 1 atomicity.`);return b}).finally(()=>{o.delete(j)});return o.set(j,k),k}async function T(a,b,d,e){let f=function(a,b){!function(a=Date.now()){if(0!==q.size)for(let[b,c]of q.entries())c.expiresAt<=a&&q.delete(b)}();let c=y(a,b),d=q.get(c);if(d)return d.expiresAt<=Date.now()?void q.delete(c):d}(a,b.refreshToken);if(f)return d?.info?.("TOKEN_REFRESH",`Rotation map hit for ${a}. Returning cached rotated tokens (avoids family-revoke).`),f.result;if(b.connectionId)try{let{getProviderConnectionById:e}=await c.e(7094).then(c.bind(c,87094)),f=await e(b.connectionId);if(f&&f.refreshToken){let c=Date.now(),e=f.expiresAt?new Date(f.expiresAt).getTime():0;if(f.refreshToken!==b.refreshToken){if(d?.info?.("TOKEN_REFRESH",`Stale token detected in memory for ${a}. Using refreshed token from DB.`),e>c+6e4)return d?.info?.("TOKEN_REFRESH","DB token is still valid. Skipping OAuth refresh."),{accessToken:f.accessToken,refreshToken:f.refreshToken,expiresAt:f.expiresAt};b.refreshToken=f.refreshToken,b.accessToken=f.accessToken}}}catch(a){d?.warn?.("TOKEN_REFRESH",`Failed to check DB for stale token: ${a instanceof Error?a.message:String(a)}`)}let g=b.refreshToken,h=await (0,i.Aj)(a,()=>Q(a,b,d,e));return h&&"object"==typeof h&&!("error"in h)&&h.accessToken&&h.refreshToken&&function(a,b,c){if(!b||!c.refreshToken||b===c.refreshToken)return;let d=y(a,b);q.set(d,{result:c,expiresAt:Date.now()+6e4})}(a,g,h),h}let U=S,V={};async function W(a,b){return await new Promise((c,d)=>{let e=setTimeout(()=>c(null),b);"object"==typeof e&&"unref"in e&&e.unref?.(),a().then(a=>{clearTimeout(e),c(a)},a=>{clearTimeout(e),d(a)})})}async function X(a,b=3,c=null,d="unknown"){let e;if((e=V[d])&&e.blockedUntil&&(e.blockedUntil>Date.now()||(delete V[d],0)))return c?.warn?.("TOKEN_REFRESH",`⚡ Circuit breaker active for ${d}, skipping refresh`),null;for(let e=0;e<b;e++){if(e>0){let a=1e3*e;c?.debug?.("TOKEN_REFRESH",`Retry ${e}/${b} after ${a}ms`),await new Promise(b=>setTimeout(b,a))}try{let b=await W(a,3e4);if(R(b))return c?.warn?.("TOKEN_REFRESH",`Unrecoverable refresh error for ${d}: ${b.error} — skipping retries`),b;if(b)return V[d]&&delete V[d],b}catch(a){c?.warn?.("TOKEN_REFRESH",`Attempt ${e+1}/${b} failed: ${a.message}`)}}return!function(a,b=null){V[a]||(V[a]={failures:0,blockedUntil:0}),V[a].failures++,V[a].failures>=5&&(V[a].blockedUntil=Date.now()+18e5,b?.error?.("TOKEN_REFRESH",`🔴 Circuit breaker tripped for ${a}: 5 consecutive failures. Blocked for 30min. Provider needs re-authentication.`))}(d,c),c?.error?.("TOKEN_REFRESH",`All ${b} retry attempts failed for ${d}`),null}},20927:(a,b,c)=>{"use strict";var d=c(75919),e=c.n(d),f=c(28064);e()&&!e().markAsUncloneable&&(e().markAsUncloneable=function(a){if(e().markAsUntransferable)try{e().markAsUntransferable(a)}catch{}}),void 0===Promise.withResolvers&&(Promise.withResolvers=function(){let a,b;return{promise:new Promise((c,d)=>{a=c,b=d}),resolve:a,reject:b}}),void 0===globalThis.WebSocket&&(globalThis.WebSocket=f.WebSocket)},39727:()=>{},47990:()=>{},54444:(a,b,c)=>{"use strict";c.d(b,{e:()=>d});let d=null},57843:(a,b,c)=>{"use strict";c.d(b,{Aj:()=>f,Jv:()=>g});let d={codex:"openai-auth0",openai:"openai-auth0",claude:"anthropic-oauth","gitlab-duo":"gitlab-duo",kiro:"kiro","kimi-coding":"kimi-coding",qwen:"qwen"},e=new Map;async function f(a,b){let c,f=d[a]??null;if(!f)return b();let g=e.get(f)??Promise.resolve(),h=new Promise(a=>{c=a}),i=g.then(()=>h);e.set(f,i),await g.catch(()=>{});try{return await b()}finally{if(e.get(f)!==i){let a=function(){let a=process.env.CODEX_REFRESH_SPACING_MS;if(void 0===a||""===a)return 2e3;let b=Number(a);return Number.isFinite(b)&&b>=0?b:2e3}();a>0&&await new Promise(b=>setTimeout(b,a))}c(),e.get(f)===i&&e.delete(f)}}function g(a,b){return"string"==typeof a&&a.length>0&&"string"==typeof b&&b.length>0&&b!==a}},58643:(a,b,c)=>{"use strict";let d;c.d(b,{A:()=>g});var e=c(99765);try{let a=c(3725);d="function"==typeof a.createSession?a.createSession:null}catch{d=null}class f{constructor(){this.session=null,this.failureCount=0,this.maxFailures=3,this.baseCooldownMs=3e4,this.cooldownMs=3e4,this.cooldownMultiplier=1,this.MAX_COOLDOWN_MS=6e5,this.circuitOpenUntil=0,this.circuitTripped=!1,this._libraryAvailable=!!d}get available(){return!!this._libraryAvailable&&(!this.circuitTripped||Date.now()>=this.circuitOpenUntil)}recordFailure(){this.failureCount++,this.failureCount>=this.maxFailures&&(this.circuitOpenUntil=Date.now()+this.cooldownMs,this.circuitTripped=!0,this.session&&(Promise.resolve(this.session.close()).catch(()=>{}),this.session=null),console.warn(`[TlsClient] Circuit opened after ${this.failureCount} consecutive failures, cooling down for ${this.cooldownMs}ms`),this.escalateCooldown())}recordSuccess(){this.failureCount=0,this.circuitTripped&&(this.cooldownMultiplier=1,this.cooldownMs=this.baseCooldownMs,console.log("[TlsClient] Circuit closed (success after cooldown)"),this.circuitTripped=!1)}escalateCooldown(){this.cooldownMultiplier=Math.min(2*this.cooldownMultiplier,20),this.cooldownMs=Math.min(this.baseCooldownMs*this.cooldownMultiplier,this.MAX_COOLDOWN_MS)}checkCircuit(){return!this.circuitTripped||Date.now()>=this.circuitOpenUntil&&(console.log("[TlsClient] Half-open: retrying after cooldown"),!0)}async getSession(){if(!this.checkCircuit()||!this.available)return null;if(this.session)return this.session;let a=d;if(!a)return null;let b=process.env.HTTPS_PROXY||process.env.https_proxy||process.env.HTTP_PROXY||process.env.http_proxy||process.env.ALL_PROXY||process.env.all_proxy||void 0,c={browser:"chrome_124",os:"macos"};return b&&(c.proxy=b,console.log(`[TlsClient] Using proxy: ${b}`)),this.session=await a(c),console.log("[TlsClient] Session created (Chrome 124 TLS fingerprint)"),this.session}async fetch(a,b={}){if(!this.checkCircuit())throw Error("wreq-js circuit open — skipping TLS request");try{let c=await this.getSession();if(!c)throw Error("wreq-js not available");let{timeoutMs:d}=(0,e.uw)(process.env,a=>{console.warn(`[TlsClient] ${a}`)}),f={method:(b.method||"GET").toUpperCase(),headers:function(a){if(!a)return;if(a instanceof Headers)return Object.fromEntries(a.entries());if(Array.isArray(a))return Object.fromEntries(a.map(([a,b])=>[a,String(b)]));let b={};for(let[c,d]of Object.entries(a))"string"==typeof d&&(b[c]=d);return b}(b.headers),body:b.body,redirect:"manual"===b.redirect?"manual":"follow",timeout:d};b.signal&&(f.signal=b.signal);let g=await c.fetch(a,f);return this.recordSuccess(),g}catch(a){throw a instanceof Error&&("AbortError"===a.name||a.message.includes("aborted"))||this.recordFailure(),a}}async exit(){this.session&&(await this.session.close(),this.session=null)}resetCircuit(){this.failureCount=0,this.circuitTripped=!1,this.circuitOpenUntil=0}getCircuitState(){return{available:this.available,circuitTripped:this.circuitTripped,failureCount:this.failureCount,circuitOpenUntil:this.circuitOpenUntil,coolDownRemainingMs:this.circuitOpenUntil>0?Math.max(0,this.circuitOpenUntil-Date.now()):0}}}let g=new f},68404:(a,b,c)=>{"use strict";c.d(b,{KS:()=>d,wX:()=>e});let d=()=>!1,e=()=>!1},69889:(a,b,c)=>{"use strict";c.d(b,{Bm:()=>e,UL:()=>g,wI:()=>f});var d=c(77030);function e(a){return"string"!=typeof a?"":a.startsWith("[")&&a.endsWith("]")?a.slice(1,-1):a}function f(a){let b=e(a),c=(0,d.isIP)(b);return 0===c?null:c}function g(a){return"ipv4"===a||"ipv6"===a?a:"auto"}},85376:(a,b,c)=>{"use strict";c.d(b,{R4:()=>G,I_:()=>I,DJ:()=>t,cP:()=>y,AJ:()=>z,Sn:()=>u,$y:()=>w,g4:()=>q,zP:()=>F,HN:()=>H,OK:()=>E}),c(20927);var d=c(47774),e=c(20406),f=c(99765),g=c(69889),h=c(13092);let i=Symbol.for("omniroute.proxyDispatcher.cache"),j=Symbol.for("omniroute.proxyDispatcher.default"),k=Symbol.for("omniroute.proxyDispatcher.retry"),l=Symbol.for("omniroute.proxyDispatcher.longLived"),m=Symbol.for("omniroute.proxyDispatcher.longLivedRetry");class n{constructor(a){this.nextIndex=0,this.dispatchers=a}dispatch(a,b){let c=this.dispatchers[this.nextIndex%this.dispatchers.length];return this.nextIndex=(this.nextIndex+1)%this.dispatchers.length,c.dispatch(a,b)}close(a){let b=Promise.all(this.dispatchers.map(a=>a.close())).then(()=>void 0);return a?void b.then(a):b}destroy(a,b){let c="function"==typeof a?a:b,d="function"==typeof a?null:a??null,e=Promise.all(this.dispatchers.map(a=>a.destroy(d))).then(()=>void 0);return c?void e.then(c):e}}let o=new Set(["http:","https:","socks5:"]),p=new Set(["vercel","deno","cloudflare"]);function q(a){return"string"==typeof a&&p.has(a)}function r(){let a=(0,f.pf)(process.env,a=>{console.warn(`[ProxyDispatcher] ${a}`)});return{headersTimeout:a.fetchHeadersTimeoutMs,bodyTimeout:a.fetchBodyTimeoutMs,connectTimeout:a.fetchConnectTimeoutMs,keepAliveTimeout:a.fetchKeepAliveTimeoutMs,keepAliveMaxTimeout:a.fetchKeepAliveTimeoutMs}}function s(a=process.env){let b=a.OMNIROUTE_DIRECT_DISPATCHER_CONNECTIONS;if(null==b||""===b.trim())return 32;let c=Number(b);return!Number.isFinite(c)||c<1?(console.warn(`[ProxyDispatcher] Invalid OMNIROUTE_DIRECT_DISPATCHER_CONNECTIONS="${b}". Using default 32.`),32):Math.min(Math.floor(c),256)}function t(){let a=globalThis[j];if(!a){var b,c;let e;c=s(),e={...r(),connections:1,pipelining:0},b=a=new n(Array.from({length:c},()=>new d.Agent(e))),globalThis[j]=b}return a}function u(){let a=globalThis[k];if(!a){var b;b=a=new d.Agent({...r(),keepAliveTimeout:1,keepAliveMaxTimeout:1,pipelining:0}),globalThis[k]=b}return a}let v=new Set(["opencode.ai"]);function w(a){if("string"!=typeof a||""===a)return!1;let b=a.trim().toLowerCase().replace(/\.$/,"");if(v.has(b))return!0;for(let a of v)if(b.endsWith(`.${a}`))return!0;return(function(a=process.env){let b=a?.OMNIROUTE_LONG_LIVED_HOSTS;return null==b||""===String(b).trim()?[]:String(b).split(",").map(a=>a.trim().toLowerCase()).filter(Boolean)})().includes(b)}function x(a=process.env){return{...r(),bodyTimeout:function(a=process.env){let b=a?.OMNIROUTE_OPENCODE_BODY_TIMEOUT_MS;if(null==b||""===String(b).trim())return 3e5;let c=Number(String(b).trim());return!Number.isFinite(c)||c<=0?(console.warn(`[ProxyDispatcher] Invalid OMNIROUTE_OPENCODE_BODY_TIMEOUT_MS="${b}". Using default 300000.`),3e5):c>3e5?(console.warn(`[ProxyDispatcher] OMNIROUTE_OPENCODE_BODY_TIMEOUT_MS="${b}" exceeds max 300000; clamped.`),3e5):Math.floor(c)}(a)}}function y(){let a=globalThis[l];if(!a){var b;let c={...x(),connections:1,pipelining:0};b=a=new n(Array.from({length:s()},()=>new d.Agent(c))),globalThis[l]=b}return a}function z(){let a=globalThis[m];if(!a){var b;b=a=new d.Agent({...x(),keepAliveTimeout:1,keepAliveMaxTimeout:1,pipelining:0}),globalThis[m]=b}return a}function A(a){try{let b=a.indexOf("://");if(-1===b)return null;let c=b+3,d=a.indexOf("/",c),e=-1===d?a.slice(c):a.slice(c,d),f=e.lastIndexOf(":"),g=e.lastIndexOf("@");if(-1!==f&&f>g){let a=e.slice(f+1);if(/^\d+$/.test(a)){let b=Number(a);if(Number.isInteger(b)&&b>=1&&b<=65535)return String(b)}}}catch{}return null}function B(a){return"https:"===a||"wss:"===a?"443":"socks5:"===a?"1080":"8080"}function C(a,b){if(!a)return B(b);let c=Number(a);if(!Number.isInteger(c)||c<1||c>65535)throw Error("[ProxyDispatcher] Invalid proxy port");return String(c)}function D(){return!["false","0","no","off"].includes((process.env.ENABLE_SOCKS5_PROXY??"").trim().toLowerCase())}function E(a){let b=A(a),c=new URL(a),d=b||c.port||B(c.protocol);return`${c.protocol}//${c.hostname}:${d}`}function F(a,b="proxy",{allowSocks5:c=D()}={}){var d;let e,f,h=a.match(/\?family=(ipv4|ipv6)$/),i=h?h[0]:"",j=i?a.slice(0,-i.length):a,k=A(j);try{e=new URL(j)}catch{throw Error(`[ProxyDispatcher] Invalid ${b} URL`)}if(!o.has(e.protocol))throw Error(`[ProxyDispatcher] Unsupported ${b} protocol: ${e.protocol.replace(":","")}`);if("socks5:"===e.protocol&&!c)throw Error("[ProxyDispatcher] SOCKS5 proxy is disabled (remove ENABLE_SOCKS5_PROXY=false to enable — it is ON by default)");if(!e.hostname)throw Error(`[ProxyDispatcher] Invalid ${b} host`);let l=k||C(e.port,e.protocol),m=(0,g.UL)((h?h[1]:e.searchParams.get("family"))??void 0),n=(f=(d=e).username?`${d.username}${d.password?`:${d.password}`:""}@`:"",`${d.protocol}//${f}${d.hostname}:${l}`);return"auto"===m?n:`${n}?family=${m}`}function G(a,b){let c=new URL(a);return{"x-relay-target":`${c.protocol}//${c.host}`,"x-relay-path":c.pathname+c.search,"x-relay-auth":b}}function H(a,{allowSocks5:b=D()}={}){if(!a)return null;if("string"==typeof a)return F(a,"context proxy",{allowSocks5:b});if("object"!=typeof a||Array.isArray(a))throw Error("[ProxyDispatcher] Invalid context proxy config");if(!a.host)return null;let c=String(a.type||"http").toLowerCase();if(p.has(c))return a.host?`https://${a.host}`:null;let d=`${c}:`;if(!o.has(d))throw Error(`[ProxyDispatcher] Unsupported context proxy protocol: ${c}`);if("socks5:"===d&&!b)throw Error("[ProxyDispatcher] SOCKS5 proxy is disabled (remove ENABLE_SOCKS5_PROXY=false to enable — it is ON by default)");let e=C(a.port,d),f=a.username?`${encodeURIComponent(a.username)}:${a.password?encodeURIComponent(a.password):""}@`:"",h=`${c}://${f}${a.host}:${e}`,i=(0,g.UL)(a.family),j=F(h,"context proxy",{allowSocks5:b});return"auto"===i?j:`${j}?family=${i}`}function I(a){let b,c=F(a,"proxy dispatcher"),f=((b=globalThis)[i]||(b[i]=new Map),b[i]),j=function(a=process.env){return{...r(),connections:function(a=process.env){let b=a.OMNIROUTE_PROXY_DISPATCHER_CONNECTIONS;if(null==b||""===b.trim())return 32;let c=Number(b);return!Number.isFinite(c)||c<1?(console.warn(`[ProxyDispatcher] Invalid OMNIROUTE_PROXY_DISPATCHER_CONNECTIONS="${b}". Using default 32.`),32):Math.min(Math.floor(c),256)}(a),keepAliveTimeout:1,keepAliveMaxTimeout:1,pipelining:0}}(),k=f.get(c);if(k)return k;let l=new URL(c),m=function(a){let b=(0,g.UL)(a.searchParams.get("family")??void 0),c=(0,g.wI)(a.hostname);if("auto"===b)return c;let d="ipv6"===b?6:4;if(null!==c&&c!==d)throw Error(`[ProxyDispatcher] Proxy family directive ${b} contradicts ${6===c?"IPv6":"IPv4"} literal host`);return d}(l);l.searchParams.delete("family");let n=c.replace(/\?family=(ipv4|ipv6)$/,""),o=A(n)||C(l.port,l.protocol);if("socks5:"===l.protocol){let a={type:5,host:(0,g.Bm)(l.hostname),port:Number(o)};l.username&&(a.userId=decodeURIComponent(l.username)),l.password&&(a.password=decodeURIComponent(l.password)),k=null===m?(0,e.vI)(a,j):function(a,b,c={}){let{connect:e,...f}=c;return new d.Agent({...f,connect:function(a,b,c={}){let e=(0,d.buildConnector)(c),f=6===b?{family:6,autoSelectFamily:!1}:4===b?{family:4,autoSelectFamily:!1}:{};return async(b,c)=>{let{protocol:d,hostname:g,port:i,httpSocket:j}=b;try{let k=(await h.SocksClient.createConnection({command:"connect",proxy:a,timeout:function(a=process.env){let b=a.SOCKS_HANDSHAKE_TIMEOUT_MS;if(null==b||""===b.trim())return 1e4;let c=Number(b);return!Number.isFinite(c)||c<1?1e4:Math.min(Math.floor(c),12e4)}(),destination:{host:g,port:i?Number.parseInt(i,10):"http:"===d?80:443},existing_socket:j,socket_options:f})).socket;if("https:"!==d)return c(null,k.setNoDelay());return e({...b,httpSocket:k},c)}catch(a){return c(a,null)}}}(a,b,e)})}(a,m,j)}else k=new d.ProxyAgent({uri:n,...j,...null!==m?{proxyTls:{family:m,autoSelectFamily:!1}}:{}});return f.set(c,k),k}},95538:(a,b,c)=>{"use strict";let d;c.d(b,{proxyAwareFetch:()=>F,l:()=>A,jf:()=>C}),c(20927);var e=c(16698),f=c(47774),g=c(85376),h=c(58643),i=c(77030),j=c.n(i),k=c(68404),l=c(89718);let m=new Map;function n(a){let b=a.username?`${encodeURIComponent(a.username)}:${encodeURIComponent(a.password||"")}@`:"";return`${a.type}://${b}${a.host}:${a.port}`}async function o(a){let b=new Set;try{let a=await (0,l.P)("global");a?.proxy&&b.add(n(a.proxy))}catch{}try{for(let a of(await (0,l.zU)({includeSecrets:!0})))a.host&&a.port&&b.add(n(a))}catch{}try{for(let a of(await (0,l.Bb)({limit:5})))a.host&&a.port&&b.add(n(a))}catch{}if(a)try{let c=function(a){let b,c=process.env.NO_PROXY||process.env.no_proxy;if(c){let b;try{b=new URL(a).hostname.toLowerCase()}catch{return null}if(c.split(",").map(a=>a.trim().toLowerCase()).filter(Boolean).some(a=>"*"===a||(a.includes("*")?RegExp("^"+a.split("*").map(a=>a.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")).join(".*")+"$").test(b):b===a||b.endsWith(`.${a}`))))return null}try{b=new URL(a).protocol}catch{return null}let d="https:"===b?process.env.HTTPS_PROXY||process.env.https_proxy||process.env.ALL_PROXY||process.env.all_proxy:process.env.HTTP_PROXY||process.env.http_proxy||process.env.ALL_PROXY||process.env.all_proxy;if(!d)return null;try{return(0,g.zP)(d,"environment proxy")}catch{return null}}(a);c&&b.add(c)}catch{}return Array.from(b)}async function p(a,b,c=3e3){let d=Date.now();try{let e=new AbortController,h=setTimeout(()=>e.abort(),c),i=(0,g.I_)(a);await (0,f.fetch)(b,{method:"HEAD",signal:e.signal,dispatcher:i,headers:{"User-Agent":"OmniRoute/1.0"}}),clearTimeout(h);let j=Date.now()-d;return{ok:!0,latencyMs:j}}catch{return{ok:!1,latencyMs:null}}}async function q(a,b){if(!a)return null;let c=function(a,b){try{let a=new URL(b),c=`${a.pathname||"/"}${a.search}`;return`${a.protocol}//${a.host}${c}`}catch{return a.toLowerCase()}}(a,b),d=m.get(c);if(d){if(d.expiresAt>Date.now())return d.proxyUrl||null;m.delete(c)}let e=await ((void 0)??o)(b);if(0===e.length)return null;let f=(await Promise.allSettled(e.map(async a=>{let{ok:c}=await ((void 0)??p)(a,b);return{proxyUrl:a,ok:c}}))).find(a=>"fulfilled"===a.status&&a.value.ok);if(f&&"fulfilled"===f.status){let a=f.value.proxyUrl;return m.set(c,{proxyUrl:a,expiresAt:Date.now()+3e5}),a}return m.set(c,{proxyUrl:"",expiresAt:Date.now()+3e5}),null}let r=new e.AsyncLocalStorage,s=new e.AsyncLocalStorage;function t(a){let b=[],c=new Set,d=a;for(let a=0;d&&a<5&&!c.has(d);a++){c.add(d);let a=d,e=["string"==typeof a.name&&"Error"!==a.name?a.name:null,"string"==typeof a.message?a.message.slice(0,160):null,null!=a.code?`code=${String(a.code)}`:null,null!=a.syscall?`syscall=${String(a.syscall)}`:null,null!=a.errno?`errno=${String(a.errno)}`:null,null!=a.address?`address=${String(a.address)}${null!=a.port?`:${String(a.port)}`:""}`:null].filter(Boolean).join(" ");if(e&&b.push(e),Array.isArray(a.errors))for(let c of a.errors.slice(0,4)){let a=c??{},d=[null!=a.code?`code=${String(a.code)}`:null,null!=a.syscall?`syscall=${String(a.syscall)}`:null,null!=a.address?`address=${String(a.address)}${null!=a.port?`:${String(a.port)}`:""}`:null].filter(Boolean).join(" ");d?b.push(`↳ ${d}`):"string"==typeof a.message&&b.push(`↳ ${a.message.slice(0,80)}`)}d=a.cause}return b.join(" | ")||String(a)}let u="u">typeof caches&&"object"==typeof caches,v=Symbol.for("omniroute.proxyFetch.state"),w=((d=globalThis)[v]||(d[v]={originalFetch:globalThis.fetch,proxyContext:new e.AsyncLocalStorage,isPatched:!1}),d[v]),x=w.originalFetch,y=w.proxyContext;function z(a,b){let c,d=b??process.env.NO_PROXY??process.env.no_proxy;if(!d)return!1;try{c=new URL(a)}catch{return!1}let e=c.hostname.toLowerCase(),f=c.port||("https:"===c.protocol?"443":"80");return d.split(",").map(a=>a.trim().toLowerCase()).filter(Boolean).some(a=>{if("*"===a)return!0;let[b,c]=a.split(":");if(c&&c!==f||!b)return!1;if(b.includes("*")){let a=b.split("*"),c=0,d=e.startsWith(a[0]);if(d){c=a[0].length;for(let b=1;b<a.length&&d;b++){let f=a[b];if(b===a.length-1)d=""===f||e.endsWith(f)&&e.length-f.length>=c;else{let a=f?e.indexOf(f,c):c;-1===a?d=!1:c=a+f.length}}}if(d)return!0}return b.startsWith(".")?e.endsWith(b)||e===b.slice(1):e===b||e.endsWith(`.${b}`)})}function A(a){let b,c;try{b=new URL(a)}catch{b=null}if(b&&("localhost"===(c=b.hostname.toLowerCase().replace(/^\[/,"").replace(/\]$/,"").replace(/^::ffff:/i,""))||"0.0.0.0"===c||"127.0.0.1"===c||"::1"===c||c.endsWith(".local")||c.endsWith(".lan")||c.endsWith(".internal")||c.startsWith("192.168.")||c.startsWith("10.")||c.startsWith("127.")||c.startsWith("169.254.")||/^172\.(1[6-9]|2\d|3[0-1])\./.test(c)||/^100\.(6[4-9]|[7-9]\d|1[01]\d|12[0-7])\./.test(c)||/^f[cd][0-9a-f]*:/i.test(c)||c.startsWith("fe80:")))return{source:"direct",proxyUrl:null};let d=y.getStore();if(d)return d.__noProxy&&z(a,d.__noProxy)?{source:"direct",proxyUrl:null}:{source:"context",proxyUrl:d.__relayUrl||d.__proxyUrl||(0,g.HN)(d)};let e=function(a){let b;if(z(a))return null;try{b=new URL(a).protocol}catch{return null}let c="https:"===b?process.env.HTTPS_PROXY||process.env.https_proxy||process.env.ALL_PROXY||process.env.all_proxy:process.env.HTTP_PROXY||process.env.http_proxy||process.env.ALL_PROXY||process.env.all_proxy;return c?(0,g.zP)(c,"environment proxy"):null}(a);return e?{source:"env",proxyUrl:e}:{source:"direct",proxyUrl:null}}function B(a){return"string"==typeof a?a:a&&"string"==typeof a.url?a.url:String(a)}async function C(a,b,d){if("function"!=typeof b)throw TypeError("runWithProxyContext requires a callback function");let e=y.getStore(),f=a||e||null;if(f?.vercelRelayUrl){let a;try{a=new URL(f.vercelRelayUrl)}catch{throw Error("[ProxyFetch] Invalid relay URL")}f={type:"vercel",host:a.host,__relayUrl:a.toString().replace(/\/$/,""),__allowMissingRelayAuth:!0,__noProxy:f.connectionNoProxy||""}}else f?.connectionProxyUrl&&(f=!0===f.connectionProxyEnabled?{__proxyUrl:f.connectionProxyUrl,__noProxy:f.connectionNoProxy||""}:null);let h=f?f.__proxyUrl||(0,g.HN)(f):null,i=d?.directFallbackOnUnreachable===!0&&(0,k.KS)(),l=(0,g.g4)(f?.type);if(h&&!l&&!await function(a,b=2500){var c;let d;if(!a)return Promise.resolve(!1);try{d=new URL(String(a))}catch{return Promise.resolve(!1)}let e=d.hostname.replace(/^\[|\]$/g,""),f=(c=d).port?Number(c.port):"https:"===c.protocol?443:"socks5:"===c.protocol?1080:8080;if(!e||!Number.isInteger(f)||f<1||f>65535)return Promise.resolve(!1);let g=d.searchParams.get("family"),h="ipv4"===g?4:"ipv6"===g?6:void 0,i=Number.isFinite(Number(b))&&Number(b)>0?Number(b):2500;return new Promise(a=>{let b=!1,c=j().createConnection({host:e,port:f,family:h}),d=d=>{b||(b=!0,clearTimeout(g),c.destroy(),a(d))},g=setTimeout(()=>d(!1),i);c.once("connect",()=>d(!0)),c.once("error",()=>d(!1)),c.once("close",()=>d(!1))})}(h)){let a=(0,g.OK)(h);if(i)return console.warn(`[ProxyFetch] Proxy unreachable (${a}); using a direct connection for this request.`),y.run(null,b);let c=Error(`[Proxy Fast-Fail] Proxy unreachable: ${a}`);throw c.code="PROXY_UNREACHABLE",c.statusCode=503,c}if(h&&!l)try{let a=new URL(h),b=a.searchParams.get("family");if("ipv6"===b||"ipv4"===b){let{assertHostnameSupportsFamily:d}=await c.e(3041).then(c.bind(c,53041));await d(a.hostname,"ipv6"===b?6:4)}}catch(a){if(i)return console.warn(`[ProxyFetch] Proxy family pre-check failed (${(0,g.OK)(h)}); using a direct connection for this request.`),y.run(null,b);throw a.code=a.code||"PROXY_FAMILY_UNAVAILABLE",a.statusCode=a.statusCode||503,a}return y.run(f,async()=>{if(h&&f!==e&&console.log(`[ProxyFetch] Applied request proxy context: ${(0,g.OK)(h)}`),f){let a=s.getStore();a&&(a.proxy=f)}return b()})}async function D(a,b={},c={}){let d;if(b?.dispatcher)return(c.undiciFetch??f.fetch)(a,b);let e=B(a);try{d=A(e)}catch(b){let a=b instanceof Error?b.message:String(b);throw console.error(`[ProxyFetch] Proxy configuration error: ${a}`),b}let{source:i,proxyUrl:j}=d;if(!j){var l,m;if("true"===process.env.ENABLE_TLS_FINGERPRINT&&h.A.available)try{let a=r.getStore();return a&&(a.used=!0),await h.A.fetch(e,{...b,headers:b.headers,signal:b.signal??void 0})}catch(c){let a=c instanceof Error?c.message:String(c);console.warn(`[ProxyFetch] TLS fingerprint failed, falling back to native fetch: ${a}`);let b=r.getStore();b&&(b.used=!1)}let d=(l=a,!!(null!=(m=b.body)&&"object"==typeof m&&("function"==typeof m.getReader||"function"==typeof m.stream)||"u">typeof Request&&l instanceof Request&&(l.bodyUsed||null!==l.body))||!1),j=d?1:2,n=c.undiciFetch??f.fetch,o=c.nativeFetch??x,p=!1;try{p=(0,g.$y)(new URL(e).hostname)}catch{p=!1}let s=null;for(let c=0;c<j;c++)try{return await n(a,{...b,dispatcher:0===c?p?(0,g.cP)():(0,g.DJ)():p?(0,g.AJ)():(0,g.Sn)()})}catch(l){let f=l instanceof Error?l.message:String(l);if(f.includes("onRequestStart"))throw console.error(`[ProxyFetch] Fatal version mismatch: Dispatcher (v8) vs Fetch (v6/native). Hardware upgrade or SOCKS5 config isolation required. Error: ${f}`),l;let h=l?.code;if(f.includes("fetch failed")||"ECONNREFUSED"===h||f.includes("ECONNREFUSED")||"string"==typeof h&&h.startsWith("UND_ERR")||f.includes("UND_ERR")){if(0===c&&j>1){s=l,await new Promise(a=>setTimeout(a,25+50*Math.random()));continue}if(d){let a=`dispatcher=[${t(l)}] native=[skipped: non-replayable request body]`;throw console.warn(`[ProxyFetch] skipping native fetch fallback for non-replayable body: ${a}`),l instanceof Error&&(l.proxyFetchDetail=a),l}if("direct"===i&&(0,k.wX)("PROXY_AUTO_SELECT_ENABLED")){let c="";try{c=new URL(e).hostname}catch{}if(c){let d=await q(c,e);if(d)try{let c=(0,g.I_)(d);return await n(a,{...b,dispatcher:c})}catch{}}}console.warn(`[ProxyFetch] Undici dispatcher failed, falling back to native fetch (after retry): ${t(l)}`);try{return await o(a,b)}catch(b){let a=`dispatcher=[${t(l)}] native=[${t(b)}]`;throw console.warn(`[ProxyFetch] native fetch fallback ALSO failed: ${a}`),b instanceof Error&&(b.proxyFetchDetail=a),b}}throw l}throw s}let n=y.getStore();if(n&&"object"==typeof n&&(0,g.g4)(n.type)){if(!n.relayAuth&&!n.__allowMissingRelayAuth){let a="vercel"===n.type?"Vercel relay":`${n.type||"Edge"} relay`;throw Error(`${a} configuration error: missing relayAuth`)}let c=B(a),d=(0,g.R4)(c,n.relayAuth||""),e=new Headers(b?.headers);for(let[a,b]of Object.entries(d))e.set(a,b);let f=(0,g.OK)(n.host?`https://${n.host}`:"");return"true"===process.env.OMNIROUTE_PROXY_FETCH_DEBUG&&console.debug(`[ProxyFetch] Routing via ${n.type||"edge"} relay: ${f}`),await x(n.__relayUrl||`https://${n.host}`,{...b,headers:e,duplex:"half"})}try{let d=(0,g.I_)(j),e=c.undiciFetch??f.fetch;return await e(a,{...b,dispatcher:d})}catch(b){let a=b instanceof Error?b.message:String(b);throw console.error(`[ProxyFetch] Proxy request failed (${i}, fail-closed): ${a}`),b}}async function E(a,b={},c={}){return D(a,b,c)}async function F(a,b={},c=null){return c&&(!0===c.connectionProxyEnabled||c.vercelRelayUrl)?C(c,()=>E(a,b)):E(a,b)}u||w.isPatched||(globalThis.fetch=D,w.isPatched=!0)}};