@moxxy/plugin-stt-whisper-codex 0.27.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Moxxy (moxxy.ai)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/index.d.ts

@@ -0,0 +1,23 @@
+import { type Plugin } from '@moxxy/sdk';
+import { type CodexOAuthVault } from './transcriber.js';
+export { CodexOAuthTranscriber, DEFAULT_CODEX_TRANSCRIBE_BASE_URL, MOXXY_PCM16_24KHZ_MIME, OPENAI_CODEX_TRANSCRIBER_NAME, buildCodexTranscribeUrl, type CodexOAuthTranscriberOptions, type CodexOAuthVault, } from './transcriber.js';
+export { pcm16MonoToWav } from '@moxxy/plugin-stt-whisper';
+export interface BuildWhisperCodexPluginOptions {
+    readonly vault: CodexOAuthVault;
+    readonly baseUrl?: string;
+    readonly fetch?: typeof fetch;
+    readonly sessionIdProvider?: () => string;
+    /** Whole-request deadline in ms; defaults to 60s. `<= 0` disables it. */
+    readonly requestTimeoutMs?: number;
+}
+export declare function buildWhisperCodexPlugin(opts: BuildWhisperCodexPluginOptions): Plugin;
+/**
+ * Discovery-loadable default export: resolves the vault from the inter-plugin
+ * service registry in `onInit`. Requires `@moxxy/plugin-vault` to load first
+ * (declared in `package.json` `moxxy.requirements`). `baseUrl`/`fetch`/
+ * `sessionIdProvider`/`requestTimeoutMs` fall back to their `createClient`
+ * config/defaults when the host doesn't inject them.
+ */
+export declare const whisperCodexPlugin: Plugin;
+export default whisperCodexPlugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwD,KAAK,MAAM,EAAE,MAAM,YAAY,CAAC;AAC/F,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,qBAAqB,EACrB,iCAAiC,EACjC,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,EACvB,KAAK,4BAA4B,EACjC,KAAK,eAAe,GACrB,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,MAAM,CAAC;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,8BAA8B,GACnC,MAAM,CAGR;AAED;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAgB7B,CAAC;AAkDL,eAAe,kBAAkB,CAAC"}

package/dist/index.js

@@ -0,0 +1,72 @@
+import { definePlugin, defineTranscriber } from '@moxxy/sdk';
+import { CodexOAuthTranscriber, OPENAI_CODEX_TRANSCRIBER_NAME, } from './transcriber.js';
+export { CodexOAuthTranscriber, DEFAULT_CODEX_TRANSCRIBE_BASE_URL, MOXXY_PCM16_24KHZ_MIME, OPENAI_CODEX_TRANSCRIBER_NAME, buildCodexTranscribeUrl, } from './transcriber.js';
+// pcm16MonoToWav was moved into @moxxy/plugin-stt-whisper alongside the
+// rest of the shared audio helpers; re-export it here so older callers
+// that import it from this package keep compiling.
+export { pcm16MonoToWav } from '@moxxy/plugin-stt-whisper';
+export function buildWhisperCodexPlugin(opts) {
+    const { vault, ...rest } = opts;
+    return makeWhisperCodexPlugin(() => vault, rest);
+}
+/**
+ * Discovery-loadable default export: resolves the vault from the inter-plugin
+ * service registry in `onInit`. Requires `@moxxy/plugin-vault` to load first
+ * (declared in `package.json` `moxxy.requirements`). `baseUrl`/`fetch`/
+ * `sessionIdProvider`/`requestTimeoutMs` fall back to their `createClient`
+ * config/defaults when the host doesn't inject them.
+ */
+export const whisperCodexPlugin = (() => {
+    let resolved = null;
+    const getVault = () => {
+        if (!resolved) {
+            throw new Error('@moxxy/plugin-stt-whisper-codex: the "vault" service is unavailable — @moxxy/plugin-vault must load first');
+        }
+        return resolved;
+    };
+    const hooks = {
+        onInit: (ctx) => {
+            resolved = ctx.services.require('vault');
+        },
+    };
+    return makeWhisperCodexPlugin(getVault, {}, hooks);
+})();
+function makeWhisperCodexPlugin(getVault, opts, hooks) {
+    return definePlugin({
+        name: '@moxxy/plugin-stt-whisper-codex',
+        version: '0.0.0',
+        ...(hooks ? { hooks } : {}),
+        transcribers: [
+            defineTranscriber({
+                name: OPENAI_CODEX_TRANSCRIBER_NAME,
+                displayName: 'OpenAI Codex transcription (OAuth)',
+                createClient: (config) => {
+                    // Only `baseUrl`/`sessionIdProvider` are caller-overridable; the
+                    // host-wired `vault`/`fetch` stay authoritative so a stray config
+                    // key cannot shadow a required dependency. Read narrow, typed keys
+                    // off the untrusted `config` rather than spreading it wholesale.
+                    const cfg = (config ?? {});
+                    const configBaseUrl = typeof cfg.baseUrl === 'string' ? cfg.baseUrl : undefined;
+                    const configSessionIdProvider = typeof cfg.sessionIdProvider === 'function'
+                        ? cfg.sessionIdProvider
+                        : undefined;
+                    const baseUrl = configBaseUrl ?? opts.baseUrl;
+                    const sessionIdProvider = configSessionIdProvider ?? opts.sessionIdProvider;
+                    const merged = {
+                        vault: getVault(),
+                        ...(baseUrl ? { baseUrl } : {}),
+                        ...(opts.fetch ? { fetch: opts.fetch } : {}),
+                        ...(sessionIdProvider ? { sessionIdProvider } : {}),
+                        ...(opts.requestTimeoutMs !== undefined
+                            ? { requestTimeoutMs: opts.requestTimeoutMs }
+                            : {}),
+                    };
+                    return new CodexOAuthTranscriber(merged);
+                },
+            }),
+        ],
+    });
+}
+// Discovery entry: `createPluginLoader` requires a default Plugin export.
+export default whisperCodexPlugin;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAoC,MAAM,YAAY,CAAC;AAC/F,OAAO,EACL,qBAAqB,EACrB,6BAA6B,GAG9B,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,qBAAqB,EACrB,iCAAiC,EACjC,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,GAGxB,MAAM,kBAAkB,CAAC;AAC1B,wEAAwE;AACxE,uEAAuE;AACvE,mDAAmD;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAW3D,MAAM,UAAU,uBAAuB,CACrC,IAAoC;IAEpC,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAChC,OAAO,sBAAsB,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAW,CAAC,GAAG,EAAE;IAC9C,IAAI,QAAQ,GAA2B,IAAI,CAAC;IAC5C,MAAM,QAAQ,GAAG,GAAoB,EAAE;QACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,2GAA2G,CAC5G,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,KAAK,GAAmB;QAC5B,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;YACd,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAkB,OAAO,CAAC,CAAC;QAC5D,CAAC;KACF,CAAC;IACF,OAAO,sBAAsB,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;AACrD,CAAC,CAAC,EAAE,CAAC;AAEL,SAAS,sBAAsB,CAC7B,QAA+B,EAC/B,IAAmD,EACnD,KAAsB;IAEtB,OAAO,YAAY,CAAC;QAClB,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,OAAO;QAChB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,YAAY,EAAE;YACZ,iBAAiB,CAAC;gBAChB,IAAI,EAAE,6BAA6B;gBACnC,WAAW,EAAE,oCAAoC;gBACjD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE;oBACvB,iEAAiE;oBACjE,kEAAkE;oBAClE,mEAAmE;oBACnE,iEAAiE;oBACjE,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAGxB,CAAC;oBACF,MAAM,aAAa,GACjB,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC5D,MAAM,uBAAuB,GAC3B,OAAO,GAAG,CAAC,iBAAiB,KAAK,UAAU;wBACzC,CAAC,CAAE,GAAG,CAAC,iBAAkC;wBACzC,CAAC,CAAC,SAAS,CAAC;oBAChB,MAAM,OAAO,GAAG,aAAa,IAAI,IAAI,CAAC,OAAO,CAAC;oBAC9C,MAAM,iBAAiB,GACrB,uBAAuB,IAAI,IAAI,CAAC,iBAAiB,CAAC;oBACpD,MAAM,MAAM,GAAiC;wBAC3C,KAAK,EAAE,QAAQ,EAAE;wBACjB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC/B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5C,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACnD,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS;4BACrC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE;4BAC7C,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC;oBACF,OAAO,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;gBAC3C,CAAC;aACF,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC;AAED,0EAA0E;AAC1E,eAAe,kBAAkB,CAAC"}

package/dist/transcriber.d.ts

@@ -0,0 +1,39 @@
+import { MOXXY_PCM16_24KHZ_MIME } from '@moxxy/plugin-stt-whisper';
+import { type Transcriber, type TranscribeOptions, type TranscriptionResult } from '@moxxy/sdk';
+export declare const OPENAI_CODEX_TRANSCRIBER_NAME = "openai-codex-transcribe";
+export declare const DEFAULT_CODEX_TRANSCRIBE_BASE_URL = "https://chatgpt.com";
+export { MOXXY_PCM16_24KHZ_MIME };
+export interface CodexOAuthVault {
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string, tags?: ReadonlyArray<string>): Promise<void>;
+    delete?(key: string): Promise<boolean>;
+}
+export interface CodexOAuthTranscriberOptions {
+    readonly vault: CodexOAuthVault;
+    readonly baseUrl?: string;
+    readonly fetch?: typeof fetch;
+    readonly sessionIdProvider?: () => string;
+    /** Whole-request deadline in ms; defaults to 60s. `<= 0` disables it. */
+    readonly requestTimeoutMs?: number;
+}
+export declare class CodexOAuthTranscriber implements Transcriber {
+    readonly name = "openai-codex-transcribe";
+    private readonly vault;
+    private readonly endpoint;
+    private readonly fetchImpl;
+    private readonly sessionIdProvider;
+    private readonly requestTimeoutMs;
+    constructor(opts: CodexOAuthTranscriberOptions);
+    transcribe(audio: Uint8Array | ArrayBuffer, opts?: TranscribeOptions): Promise<TranscriptionResult>;
+    private parseResponse;
+    /**
+     * Arm an internal abort timer for the request deadline. Returns `undefined`
+     * when the timeout is disabled (`<= 0`). The caller MUST `clear()` it once the
+     * response (or rejection) is in hand so a bare timer can't keep the process
+     * alive.
+     */
+    private armTimeout;
+    private loadTokens;
+}
+export declare function buildCodexTranscribeUrl(baseUrl?: string): string;
+//# sourceMappingURL=transcriber.d.ts.map

package/dist/transcriber.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcriber.d.ts","sourceRoot":"","sources":["../src/transcriber.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,sBAAsB,EAEvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACzB,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,6BAA6B,4BAA4B,CAAC;AACvE,eAAO,MAAM,iCAAiC,wBAAwB,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAiClC,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,MAAM,CAAC;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,qBAAa,qBAAsB,YAAW,WAAW;IACvD,QAAQ,CAAC,IAAI,6BAAiC;IAC9C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAe;IACjD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;gBAE9B,IAAI,EAAE,4BAA4B;IASxC,UAAU,CACd,KAAK,EAAE,UAAU,GAAG,WAAW,EAC/B,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,mBAAmB,CAAC;IA6E/B,OAAO,CAAC,aAAa;IA+FrB;;;;;OAKG;IACH,OAAO,CAAC,UAAU;YAgBJ,UAAU;CAmBzB;AAQD,wBAAgB,uBAAuB,CAAC,OAAO,SAAoC,GAAG,MAAM,CAiD3F"}

package/dist/transcriber.js

@@ -0,0 +1,400 @@
+import { randomUUID } from 'node:crypto';
+import { CODEX_PROVIDER_ID, ensureFreshCodexTokens, } from '@moxxy/plugin-provider-openai-codex';
+import { MOXXY_PCM16_24KHZ_MIME, normalizeWhisperUpload, } from '@moxxy/plugin-stt-whisper';
+import { classifyHttpStatus, classifyNetworkError, MoxxyError, } from '@moxxy/sdk';
+export const OPENAI_CODEX_TRANSCRIBER_NAME = 'openai-codex-transcribe';
+export const DEFAULT_CODEX_TRANSCRIBE_BASE_URL = 'https://chatgpt.com';
+export { MOXXY_PCM16_24KHZ_MIME };
+const CODEX_TRANSCRIBE_ORIGINATOR = 'Codex Desktop';
+const CODEX_TRANSCRIBE_USER_AGENT = 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36';
+// Deadline for the whole transcribe round-trip. Several callers pass no
+// AbortSignal at all, so without this a half-open proxy / slow-loris peer that
+// accepts the TCP connection but never responds would leave the promise (and
+// the in-flight audio buffer) pending forever.
+const DEFAULT_CODEX_TRANSCRIBE_TIMEOUT_MS = 60_000;
+// The success body is a tiny `{ text }` JSON; error bodies (HTML pages) are the
+// only large ones. Cap the buffered read so a hostile/broken backend can't
+// balloon memory by streaming a multi-GB body before we even inspect it.
+const MAX_CODEX_TRANSCRIBE_BODY_BYTES = 4 * 1024 * 1024;
+// Upper bound on any raw upstream body we embed in a thrown error's cause, so
+// an unmapped status can't smuggle an arbitrarily long (or PII-bearing) body
+// into stack traces / debug logs.
+const MAX_CODEX_ERROR_CAUSE_CHARS = 500;
+/** Merge an optional caller signal with an optional internal one. */
+function combineSignals(a, b) {
+    if (a && b)
+        return AbortSignal.any([a, b]);
+    return a ?? b;
+}
+export class CodexOAuthTranscriber {
+    name = OPENAI_CODEX_TRANSCRIBER_NAME;
+    vault;
+    endpoint;
+    fetchImpl;
+    sessionIdProvider;
+    requestTimeoutMs;
+    constructor(opts) {
+        this.vault = opts.vault;
+        this.endpoint = buildCodexTranscribeUrl(opts.baseUrl);
+        this.fetchImpl = opts.fetch ?? fetch;
+        this.sessionIdProvider = opts.sessionIdProvider ?? randomUUID;
+        this.requestTimeoutMs =
+            opts.requestTimeoutMs ?? DEFAULT_CODEX_TRANSCRIBE_TIMEOUT_MS;
+    }
+    async transcribe(audio, opts = {}) {
+        // Empty audio can never yield a transcript: fast-fail before loading tokens
+        // (which may trigger an OAuth refresh) or hitting the network.
+        if (audio.byteLength === 0)
+            return { text: '' };
+        const tokens = await this.loadTokens();
+        const sessionId = this.sessionIdProvider();
+        // NB: `opts.language` / `opts.prompt` are intentionally NOT forwarded.
+        // This hits the undocumented, reverse-engineered ChatGPT `backend-api/
+        // transcribe` endpoint (mimicking Codex Desktop), which only accepts the
+        // audio file part — sending extra multipart fields risks a rejection or
+        // silent behavior change. The OpenAI Whisper sibling (which does support
+        // language/prompt) is the path for callers that need those hints.
+        const upload = normalizeWhisperUpload(audio, opts.mimeType, 'moxxy');
+        const form = new FormData();
+        form.append('file', new File([upload.bytes], upload.filename, { type: upload.mimeType }));
+        // Always race the request against an internal deadline (combined with any
+        // caller signal) so a connection the peer accepts but never answers still
+        // rejects instead of hanging forever. We own the timeout controller so we
+        // can tell our deadline apart from a caller abort and surface NETWORK_TIMEOUT
+        // explicitly (classifyNetworkError keys off `AbortError`, not the
+        // `TimeoutError` an AbortSignal.timeout would raise).
+        //
+        // The single deadline spans BOTH the fetch AND the subsequent body read: a
+        // slow-loris peer can send response *headers* promptly (resolving the fetch
+        // promise) and then dribble the *body* one byte at a time, so capping only
+        // the body SIZE isn't enough — the body read must also abort on the same
+        // deadline. We therefore keep the timer armed through the body read and only
+        // clear it in the outer `finally`.
+        const timeout = this.armTimeout();
+        const signal = combineSignals(opts.signal, timeout?.signal);
+        const timedOutError = (err) => new MoxxyError({
+            code: 'NETWORK_TIMEOUT',
+            message: `Codex transcription timed out after ${this.requestTimeoutMs}ms.`,
+            context: { provider: CODEX_PROVIDER_ID, url: this.endpoint },
+            cause: err,
+        });
+        try {
+            let response;
+            try {
+                response = await this.fetchImpl(this.endpoint, {
+                    method: 'POST',
+                    headers: buildCodexTranscribeHeaders(tokens, sessionId),
+                    body: form,
+                    ...(signal ? { signal } : {}),
+                });
+            }
+            catch (err) {
+                if (timeout?.timedOut() && !opts.signal?.aborted)
+                    throw timedOutError(err);
+                const network = classifyNetworkError(err, { url: this.endpoint, provider: CODEX_PROVIDER_ID });
+                if (network)
+                    throw network;
+                throw err;
+            }
+            const raw = await readCappedBody(response, MAX_CODEX_TRANSCRIBE_BODY_BYTES, signal);
+            // A body read that stalled past the deadline aborts via `signal`; surface
+            // it as a timeout (our deadline) or a NETWORK_ABORTED (caller cancelled)
+            // the same way a hung fetch is, instead of silently parsing a truncated body.
+            if (timeout?.timedOut() && !opts.signal?.aborted)
+                throw timedOutError(undefined);
+            if (opts.signal?.aborted) {
+                const aborted = classifyNetworkError(Object.assign(new Error('Request aborted while reading the response body.'), {
+                    name: 'AbortError',
+                }), { url: this.endpoint, provider: CODEX_PROVIDER_ID });
+                if (aborted)
+                    throw aborted;
+            }
+            return this.parseResponse(response, raw);
+        }
+        finally {
+            timeout?.clear();
+        }
+    }
+    parseResponse(response, raw) {
+        if (!response.ok) {
+            const summary = summarizeCodexErrorBody(raw);
+            const classified = classifyHttpStatus(response.status, {
+                provider: CODEX_PROVIDER_ID,
+                url: this.endpoint,
+                body: summary,
+            });
+            if (classified)
+                throw classified;
+            // Mirror the classified path: never embed the raw, untruncated body
+            // verbatim into the error cause/context — collapse HTML pages and bound
+            // the length so an unmapped status can't leak an arbitrary body.
+            const summarized = summary?.slice(0, MAX_CODEX_ERROR_CAUSE_CHARS);
+            throw new MoxxyError({
+                code: 'PROVIDER_BAD_REQUEST',
+                message: `Codex transcription returned HTTP ${response.status}.`,
+                context: {
+                    provider: CODEX_PROVIDER_ID,
+                    url: this.endpoint,
+                    status: response.status,
+                    ...(summarized ? { body: summarized } : {}),
+                },
+                ...(summarized ? { cause: new Error(summarized) } : {}),
+            });
+        }
+        let payload;
+        try {
+            payload = JSON.parse(raw);
+        }
+        catch (err) {
+            throw new MoxxyError({
+                code: 'PROVIDER_UNKNOWN_RESPONSE',
+                message: 'Codex transcription returned invalid JSON.',
+                context: { provider: CODEX_PROVIDER_ID, url: this.endpoint },
+                cause: err,
+            });
+        }
+        // A 200 with a string `text` field is a SUCCESS even when that string is
+        // empty/whitespace — that just means the clip held no intelligible speech
+        // (silence, a clipped tap, a muted mic). Return `{ text: '' }` so callers
+        // take their graceful "no speech" path (the TUI shows a notice, the desktop
+        // a hint, Telegram/HTTP their own empty-text replies) instead of treating a
+        // normal outcome as a provider failure — every caller already guards on an
+        // empty transcript, and this is the one backend that used to throw past
+        // them. Only a response MISSING the `text` field (or whose `text` isn't a
+        // string) is a real contract violation worth throwing on.
+        if (!payload ||
+            typeof payload !== 'object' ||
+            typeof payload.text !== 'string') {
+            throw new MoxxyError({
+                code: 'PROVIDER_UNKNOWN_RESPONSE',
+                message: 'Codex transcription response was missing a text field.',
+                context: { provider: CODEX_PROVIDER_ID, url: this.endpoint },
+            });
+        }
+        // Surface the richer fields when the backend reports them (it returns only
+        // `{ text }` today, so these are normally absent and the result is
+        // unchanged). Guarding each field keeps a schema drift from corrupting the
+        // result while letting diarization/segment-aware consumers benefit if the
+        // endpoint ever starts emitting them.
+        const obj = payload;
+        const result = { text: obj.text.trim() };
+        if (typeof obj.language === 'string')
+            result.language = obj.language;
+        if (typeof obj.duration === 'number')
+            result.durationSec = obj.duration;
+        if (Array.isArray(obj.segments)) {
+            const segments = obj.segments
+                .filter((s) => !!s &&
+                typeof s === 'object' &&
+                typeof s.start === 'number' &&
+                typeof s.end === 'number' &&
+                typeof s.text === 'string')
+                .map((s) => ({ start: s.start, end: s.end, text: s.text }));
+            if (segments.length > 0)
+                result.segments = segments;
+        }
+        return result;
+    }
+    /**
+     * Arm an internal abort timer for the request deadline. Returns `undefined`
+     * when the timeout is disabled (`<= 0`). The caller MUST `clear()` it once the
+     * response (or rejection) is in hand so a bare timer can't keep the process
+     * alive.
+     */
+    armTimeout() {
+        if (!(this.requestTimeoutMs > 0))
+            return undefined;
+        const controller = new AbortController();
+        let fired = false;
+        const timer = setTimeout(() => {
+            fired = true;
+            controller.abort();
+        }, this.requestTimeoutMs);
+        timer.unref?.();
+        return {
+            signal: controller.signal,
+            timedOut: () => fired,
+            clear: () => clearTimeout(timer),
+        };
+    }
+    async loadTokens() {
+        try {
+            return await ensureFreshCodexTokens(this.vault);
+        }
+        catch (err) {
+            if (MoxxyError.isMoxxyError(err) &&
+                (err.code === 'AUTH_NO_CREDENTIALS' || err.code === 'AUTH_EXPIRED')) {
+                throw new MoxxyError({
+                    code: err.code,
+                    message: `No OpenAI Codex OAuth credentials available. Run \`moxxy login openai-codex\` to sign in.`,
+                    hint: err.hint ?? 'Run `moxxy login openai-codex` to sign in.',
+                    context: { provider: CODEX_PROVIDER_ID },
+                    cause: err,
+                });
+            }
+            throw err;
+        }
+    }
+}
+function isLoopbackHostname(hostname) {
+    // URL() wraps IPv6 literals in brackets.
+    const host = hostname.replace(/^\[|\]$/g, '').toLowerCase();
+    return host === 'localhost' || host === '127.0.0.1' || host === '::1';
+}
+export function buildCodexTranscribeUrl(baseUrl = DEFAULT_CODEX_TRANSCRIBE_BASE_URL) {
+    let url;
+    try {
+        url = new URL(baseUrl);
+    }
+    catch (cause) {
+        throw new MoxxyError({
+            code: 'CONFIG_INVALID',
+            message: `Invalid Codex transcribe base URL: ${baseUrl}`,
+            context: { baseUrl: String(baseUrl) },
+            cause,
+        });
+    }
+    // The transcriber attaches a live `Authorization: Bearer <access-token>`
+    // header to this endpoint, so a config-controlled baseUrl must not be able to
+    // redirect that credential to an arbitrary origin. Pin to chatgpt.com over
+    // https, and allow loopback (the test/local seam) over http or https. Reject
+    // everything else as a misconfiguration rather than exfiltrating the token.
+    const loopback = isLoopbackHostname(url.hostname);
+    const httpsChatgpt = url.protocol === 'https:' && url.hostname === 'chatgpt.com';
+    if (!httpsChatgpt && !loopback) {
+        throw new MoxxyError({
+            code: 'CONFIG_INVALID',
+            message: `Refusing to send Codex OAuth credentials to ${url.origin}. ` +
+                'The Codex transcribe base URL must be https://chatgpt.com (or a loopback host for local testing).',
+            context: { baseUrl: String(baseUrl), origin: url.origin },
+        });
+    }
+    if (loopback && url.protocol !== 'http:' && url.protocol !== 'https:') {
+        throw new MoxxyError({
+            code: 'CONFIG_INVALID',
+            message: `Unsupported scheme for Codex transcribe base URL: ${url.protocol}`,
+            context: { baseUrl: String(baseUrl), protocol: url.protocol },
+        });
+    }
+    let pathname = url.pathname.replace(/\/+$/, '');
+    if (!pathname || pathname === '/')
+        pathname = '';
+    if (url.hostname === 'chatgpt.com' && !pathname.endsWith('/backend-api')) {
+        pathname = `${pathname}/backend-api`;
+    }
+    if (!pathname.endsWith('/transcribe')) {
+        pathname = `${pathname}/transcribe`;
+    }
+    url.pathname = pathname;
+    url.search = '';
+    url.hash = '';
+    return url.toString();
+}
+function buildCodexTranscribeHeaders(tokens, sessionId) {
+    const headers = new Headers({
+        accept: 'application/json',
+        authorization: `Bearer ${tokens.access}`,
+        originator: CODEX_TRANSCRIBE_ORIGINATOR,
+        origin: 'https://chatgpt.com',
+        referer: 'https://chatgpt.com/',
+        'user-agent': CODEX_TRANSCRIBE_USER_AGENT,
+        session_id: sessionId,
+    });
+    if (tokens.accountId)
+        headers.set('ChatGPT-Account-Id', tokens.accountId);
+    return headers;
+}
+/**
+ * Read a response body to text, but stop once `maxBytes` have been buffered and
+ * cancel the rest of the stream. A success body is a tiny `{ text }` JSON; only
+ * a hostile/broken backend would stream more, so a tight cap is safe and keeps a
+ * multi-GB body from ballooning memory before we parse/inspect it.
+ *
+ * `signal` carries the same request deadline (and caller abort) the fetch used:
+ * a slow-loris peer that returns headers promptly then dribbles the body would
+ * otherwise hang this read forever (the size cap doesn't help when bytes arrive
+ * slowly, not all at once), so the read also aborts on the deadline. A missing
+ * body, an abort, or a decode/read failure yields whatever was read so far (or
+ * `''`); the caller checks the timeout flag to decide whether to surface it as
+ * NETWORK_TIMEOUT.
+ */
+async function readCappedBody(response, maxBytes, signal) {
+    const body = response.body;
+    if (!body) {
+        // No stream (e.g. some fetch polyfills / mocks); fall back to text() — those
+        // bodies are already in memory so there's nothing to cap. Race it against the
+        // deadline so even a polyfill that buffers slowly can't hang us.
+        try {
+            return await abortable(response.text(), signal);
+        }
+        catch {
+            return '';
+        }
+    }
+    const reader = body.getReader();
+    const decoder = new TextDecoder('utf-8');
+    let received = 0;
+    let out = '';
+    const onAbort = () => {
+        // Unblock a pending reader.read() on the deadline / caller abort.
+        reader.cancel().catch(() => { });
+    };
+    if (signal) {
+        if (signal.aborted)
+            onAbort();
+        else
+            signal.addEventListener('abort', onAbort, { once: true });
+    }
+    try {
+        while (received < maxBytes) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            if (value) {
+                received += value.byteLength;
+                out += decoder.decode(value, { stream: true });
+            }
+        }
+        return out;
+    }
+    catch {
+        return out;
+    }
+    finally {
+        signal?.removeEventListener('abort', onAbort);
+        reader.cancel().catch(() => { });
+    }
+}
+/**
+ * Reject `promise` as soon as `signal` aborts, so a body that can't be streamed
+ * (e.g. a mock's `text()` that never settles) still honours the deadline. The
+ * underlying work is left to settle/garbage-collect on its own — we only stop
+ * awaiting it.
+ */
+function abortable(promise, signal) {
+    if (!signal)
+        return promise;
+    if (signal.aborted)
+        return Promise.reject(new Error('aborted'));
+    return new Promise((resolve, reject) => {
+        const onAbort = () => reject(new Error('aborted'));
+        signal.addEventListener('abort', onAbort, { once: true });
+        promise.then((v) => {
+            signal.removeEventListener('abort', onAbort);
+            resolve(v);
+        }, (e) => {
+            signal.removeEventListener('abort', onAbort);
+            reject(e instanceof Error ? e : new Error(String(e)));
+        });
+    });
+}
+function summarizeCodexErrorBody(raw) {
+    const body = raw.trim();
+    if (!body)
+        return undefined;
+    if (/^(?:<!doctype html|<html[\s>])/i.test(body)) {
+        return 'HTML error page from ChatGPT backend';
+    }
+    return body;
+}
+//# sourceMappingURL=transcriber.js.map

package/dist/transcriber.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcriber.js","sourceRoot":"","sources":["../src/transcriber.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,iBAAiB,EACjB,sBAAsB,GAEvB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,UAAU,GAIX,MAAM,YAAY,CAAC;AAEpB,MAAM,CAAC,MAAM,6BAA6B,GAAG,yBAAyB,CAAC;AACvE,MAAM,CAAC,MAAM,iCAAiC,GAAG,qBAAqB,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAClC,MAAM,2BAA2B,GAAG,eAAe,CAAC;AACpD,MAAM,2BAA2B,GAC/B,uHAAuH,CAAC;AAC1H,wEAAwE;AACxE,+EAA+E;AAC/E,6EAA6E;AAC7E,+CAA+C;AAC/C,MAAM,mCAAmC,GAAG,MAAM,CAAC;AACnD,gFAAgF;AAChF,2EAA2E;AAC3E,yEAAyE;AACzE,MAAM,+BAA+B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACxD,8EAA8E;AAC9E,6EAA6E;AAC7E,kCAAkC;AAClC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAQxC,qEAAqE;AACrE,SAAS,cAAc,CACrB,CAA0B,EAC1B,CAA0B;IAE1B,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAiBD,MAAM,OAAO,qBAAqB;IACvB,IAAI,GAAG,6BAA6B,CAAC;IAC7B,KAAK,CAAkB;IACvB,QAAQ,CAAS;IACjB,SAAS,CAAe;IACxB,iBAAiB,CAAe;IAChC,gBAAgB,CAAS;IAE1C,YAAY,IAAkC;QAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;QACrC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,UAAU,CAAC;QAC9D,IAAI,CAAC,gBAAgB;YACnB,IAAI,CAAC,gBAAgB,IAAI,mCAAmC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,UAAU,CACd,KAA+B,EAC/B,OAA0B,EAAE;QAE5B,4EAA4E;QAC5E,+DAA+D;QAC/D,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAEhD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3C,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,kEAAkE;QAClE,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAE1F,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,8EAA8E;QAC9E,kEAAkE;QAClE,sDAAsD;QACtD,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,yEAAyE;QACzE,6EAA6E;QAC7E,mCAAmC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE5D,MAAM,aAAa,GAAG,CAAC,GAAY,EAAc,EAAE,CACjD,IAAI,UAAU,CAAC;YACb,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,uCAAuC,IAAI,CAAC,gBAAgB,KAAK;YAC1E,OAAO,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE;YAC5D,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;QAEL,IAAI,CAAC;YACH,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE;oBAC7C,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,2BAA2B,CAAC,MAAM,EAAE,SAAS,CAAC;oBACvD,IAAI,EAAE,IAAI;oBACV,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO;oBAAE,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;gBAC3E,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBAC/F,IAAI,OAAO;oBAAE,MAAM,OAAO,CAAC;gBAC3B,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,+BAA+B,EAAE,MAAM,CAAC,CAAC;YACpF,0EAA0E;YAC1E,yEAAyE;YACzE,8EAA8E;YAC9E,IAAI,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;YACjF,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,oBAAoB,CAClC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kDAAkD,CAAC,EAAE;oBAC3E,IAAI,EAAE,YAAY;iBACnB,CAAC,EACF,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CACpD,CAAC;gBACF,IAAI,OAAO;oBAAE,MAAM,OAAO,CAAC;YAC7B,CAAC;YACD,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC3C,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,KAAK,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,QAAkB,EAAE,GAAW;QACnD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,UAAU,GAAG,kBAAkB,CAAC,QAAQ,CAAC,MAAM,EAAE;gBACrD,QAAQ,EAAE,iBAAiB;gBAC3B,GAAG,EAAE,IAAI,CAAC,QAAQ;gBAClB,IAAI,EAAE,OAAO;aACd,CAAC,CAAC;YACH,IAAI,UAAU;gBAAE,MAAM,UAAU,CAAC;YAEjC,oEAAoE;YACpE,wEAAwE;YACxE,iEAAiE;YACjE,MAAM,UAAU,GAAG,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC;YAClE,MAAM,IAAI,UAAU,CAAC;gBACnB,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,qCAAqC,QAAQ,CAAC,MAAM,GAAG;gBAChE,OAAO,EAAE;oBACP,QAAQ,EAAE,iBAAiB;oBAC3B,GAAG,EAAE,IAAI,CAAC,QAAQ;oBAClB,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5C;gBACD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,UAAU,CAAC;gBACnB,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,4CAA4C;gBACrD,OAAO,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE;gBAC5D,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;QACL,CAAC;QAED,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,2EAA2E;QAC3E,wEAAwE;QACxE,0EAA0E;QAC1E,0DAA0D;QAC1D,IACE,CAAC,OAAO;YACR,OAAO,OAAO,KAAK,QAAQ;YAC3B,OAAQ,OAA8B,CAAC,IAAI,KAAK,QAAQ,EACxD,CAAC;YACD,MAAM,IAAI,UAAU,CAAC;gBACnB,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,wDAAwD;gBACjE,OAAO,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE;aAC7D,CAAC,CAAC;QACL,CAAC;QAED,2EAA2E;QAC3E,mEAAmE;QACnE,2EAA2E;QAC3E,0EAA0E;QAC1E,sCAAsC;QACtC,MAAM,GAAG,GAAG,OAKX,CAAC;QACF,MAAM,MAAM,GAKR,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9B,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QACrE,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC;QACxE,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ;iBAC1B,MAAM,CACL,CAAC,CAAC,EAAqD,EAAE,CACvD,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,KAAK,QAAQ;gBACrB,OAAQ,CAAyB,CAAC,KAAK,KAAK,QAAQ;gBACpD,OAAQ,CAAuB,CAAC,GAAG,KAAK,QAAQ;gBAChD,OAAQ,CAAwB,CAAC,IAAI,KAAK,QAAQ,CACrD;iBACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC9D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACtD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACK,UAAU;QAChB,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACnD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,GAAG,IAAI,CAAC;YACb,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC1B,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK;YACrB,KAAK,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC;SACjC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC;YACH,OAAO,MAAM,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IACE,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC;gBAC5B,CAAC,GAAG,CAAC,IAAI,KAAK,qBAAqB,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,EACnE,CAAC;gBACD,MAAM,IAAI,UAAU,CAAC;oBACnB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,OAAO,EAAE,2FAA2F;oBACpG,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,4CAA4C;oBAC9D,OAAO,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE;oBACxC,KAAK,EAAE,GAAG;iBACX,CAAC,CAAC;YACL,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,yCAAyC;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5D,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAO,GAAG,iCAAiC;IACjF,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,sCAAsC,OAAO,EAAE;YACxD,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;YACrC,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,8EAA8E;IAC9E,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC;IACjF,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EACL,+CAA+C,GAAG,CAAC,MAAM,IAAI;gBAC7D,mGAAmG;YACrG,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtE,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,qDAAqD,GAAG,CAAC,QAAQ,EAAE;YAC5E,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,GAAG;QAAE,QAAQ,GAAG,EAAE,CAAC;IACjD,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACzE,QAAQ,GAAG,GAAG,QAAQ,cAAc,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACtC,QAAQ,GAAG,GAAG,QAAQ,aAAa,CAAC;IACtC,CAAC;IACD,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACxB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;IAChB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;IACd,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,2BAA2B,CAAC,MAAmB,EAAE,SAAiB;IACzE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QAC1B,MAAM,EAAE,kBAAkB;QAC1B,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;QACxC,UAAU,EAAE,2BAA2B;QACvC,MAAM,EAAE,qBAAqB;QAC7B,OAAO,EAAE,sBAAsB;QAC/B,YAAY,EAAE,2BAA2B;QACzC,UAAU,EAAE,SAAS;KACtB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,cAAc,CAC3B,QAAkB,EAClB,QAAgB,EAChB,MAAoB;IAEpB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,6EAA6E;QAC7E,8EAA8E;QAC9E,iEAAiE;QACjE,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,kEAAkE;QAClE,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;;YACzB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC;QACH,OAAO,QAAQ,GAAG,QAAQ,EAAE,CAAC;YAC3B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,KAAK,EAAE,CAAC;gBACV,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC;gBAC7B,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAI,OAAmB,EAAE,MAAoB;IAC7D,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAChE,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CACV,CAAC,CAAC,EAAE,EAAE;YACJ,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,EACD,CAAC,CAAC,EAAE,EAAE;YACJ,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAW;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,OAAO,sCAAsC,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}