@omnicross/subscriptions 0.3.1 → 0.4.1

package/dist/chunk-B2LHAP4F.cjs

@@ -1,570 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
-
-var _chunk75ZPJI57cjs = require('./chunk-75ZPJI57.cjs');
-
-// src/oauth/flows/kimi.ts
-var kimi_exports = {};
-_chunk75ZPJI57cjs.__export.call(void 0, kimi_exports, {
-  KIMI_CLI_VERSION: () => KIMI_CLI_VERSION,
-  KIMI_OAUTH_CONFIG: () => KIMI_OAUTH_CONFIG,
-  awaitDeviceToken: () => awaitDeviceToken,
-  generateKimiDeviceId: () => generateKimiDeviceId,
-  kimiAccountIdFromAccessToken: () => kimiAccountIdFromAccessToken,
-  kimiFingerprintHeaders: () => kimiFingerprintHeaders,
-  pollDeviceToken: () => pollDeviceToken,
-  refreshAccessToken: () => refreshAccessToken,
-  requestDeviceAuthorization: () => requestDeviceAuthorization
-});
-var _crypto = require('crypto'); var _crypto2 = _interopRequireDefault(_crypto);
-var _os = require('os'); var os = _interopRequireWildcard(_os);
-var KIMI_OAUTH_CONFIG = {
-  clientId: "17e5f671-d194-4dfb-9706-5516cb48c098",
-  deviceAuthorizationEndpoint: "https://auth.kimi.com/api/oauth/device_authorization",
-  tokenEndpoint: "https://auth.kimi.com/api/oauth/token"
-};
-var KIMI_CLI_VERSION = _nullishCoalesce(process.env["KIMI_CLI_VERSION"], () => ( "1.0.0"));
-function sanitizeHeaderValue(value, fallback = "") {
-  const sanitized = value.replace(/[^\x20-\x7E]/g, "").trim();
-  return sanitized || fallback;
-}
-function deviceModel() {
-  const platform2 = os.platform();
-  const label = platform2 === "darwin" ? "macOS" : platform2 === "win32" ? "Windows" : platform2 === "linux" ? "Linux" : platform2;
-  return [label, os.release(), os.arch()].filter(Boolean).join(" ").trim();
-}
-function kimiFingerprintHeaders(deviceId) {
-  return {
-    "User-Agent": `KimiCLI/${KIMI_CLI_VERSION}`,
-    "X-Msh-Platform": "kimi_cli",
-    "X-Msh-Version": KIMI_CLI_VERSION,
-    "X-Msh-Device-Name": sanitizeHeaderValue(os.hostname(), "unknown"),
-    "X-Msh-Device-Model": sanitizeHeaderValue(deviceModel(), "unknown"),
-    "X-Msh-Os-Version": sanitizeHeaderValue(os.version(), "unknown"),
-    ...deviceId ? { "X-Msh-Device-Id": sanitizeHeaderValue(deviceId) } : {}
-  };
-}
-function generateKimiDeviceId() {
-  return _crypto2.default.randomUUID().replace(/-/g, "");
-}
-async function postFormRaw(fetchImpl, url, params, headers, timeoutMs = 3e4) {
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), timeoutMs);
-  let response;
-  try {
-    response = await fetchImpl(url, {
-      method: "POST",
-      headers: { "Content-Type": "application/x-www-form-urlencoded", Accept: "application/json", ...headers },
-      body: params.toString(),
-      signal: controller.signal
-    });
-  } catch (error) {
-    if (controller.signal.aborted) throw new Error("token endpoint timed out");
-    throw error;
-  } finally {
-    clearTimeout(timer);
-  }
-  const text = await response.text();
-  let body;
-  try {
-    const parsed = JSON.parse(text);
-    body = parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
-  } catch (e2) {
-    body = {};
-  }
-  return { status: response.status, body };
-}
-async function requestDeviceAuthorization(fetchImpl, fingerprint) {
-  const { status, body } = await postFormRaw(
-    fetchImpl,
-    KIMI_OAUTH_CONFIG.deviceAuthorizationEndpoint,
-    new URLSearchParams({ client_id: KIMI_OAUTH_CONFIG.clientId }),
-    _nullishCoalesce(fingerprint, () => ( {}))
-  );
-  const userCode = typeof body["user_code"] === "string" ? body["user_code"] : void 0;
-  const deviceCode = typeof body["device_code"] === "string" ? body["device_code"] : void 0;
-  const verificationUri = typeof body["verification_uri"] === "string" ? body["verification_uri"] : void 0;
-  if (status >= 400 || !userCode || !deviceCode || !verificationUri) {
-    const message = typeof body["error_description"] === "string" ? body["error_description"] : typeof body["msg"] === "string" ? body["msg"] : `device authorization failed (HTTP ${status})`;
-    throw new Error(message);
-  }
-  return {
-    userCode,
-    deviceCode,
-    verificationUri,
-    ...typeof body["verification_uri_complete"] === "string" ? { verificationUriComplete: body["verification_uri_complete"] } : {},
-    ...typeof body["interval"] === "number" ? { interval: body["interval"] } : {},
-    ...typeof body["expires_in"] === "number" ? { expiresIn: body["expires_in"] } : {}
-  };
-}
-async function pollDeviceToken(deviceCode, fetchImpl, fingerprint) {
-  const { status, body } = await postFormRaw(
-    fetchImpl,
-    KIMI_OAUTH_CONFIG.tokenEndpoint,
-    new URLSearchParams({
-      grant_type: "urn:ietf:params:oauth:grant-type:device_code",
-      client_id: KIMI_OAUTH_CONFIG.clientId,
-      device_code: deviceCode
-    }),
-    _nullishCoalesce(fingerprint, () => ( {}))
-  );
-  const accessToken = typeof body["access_token"] === "string" ? body["access_token"] : void 0;
-  const refreshToken = typeof body["refresh_token"] === "string" ? body["refresh_token"] : void 0;
-  if (accessToken && refreshToken) {
-    const expiresIn = typeof body["expires_in"] === "number" && body["expires_in"] > 0 ? body["expires_in"] : 3600;
-    return { state: "done", accessToken, refreshToken, expiresIn };
-  }
-  const error = typeof body["error"] === "string" ? body["error"] : void 0;
-  if (error === "authorization_pending") return { state: "pending" };
-  if (error === "slow_down") return { state: "pending", intervalSeconds: 5 };
-  if (status < 400 && !error) return { state: "pending" };
-  const message = typeof body["error_description"] === "string" && body["error_description"] ? body["error_description"] : _nullishCoalesce(error, () => ( `device token poll failed (HTTP ${status})`));
-  return { state: "failed", message };
-}
-async function awaitDeviceToken(authorization, fetchImpl, options = {}) {
-  const sleep = _nullishCoalesce(options.sleep, () => ( ((ms) => new Promise((resolve) => setTimeout(resolve, ms)))));
-  const deadline = Date.now() + (_nullishCoalesce(options.deadlineMs, () => ( 15 * 6e4)));
-  const baseIntervalMs = _nullishCoalesce(options.intervalMs, () => ( (_nullishCoalesce(authorization.interval, () => ( 5))) * 1e3));
-  let intervalMs = Math.max(1e3, baseIntervalMs);
-  for (; ; ) {
-    const result = await pollDeviceToken(authorization.deviceCode, fetchImpl, options.fingerprint);
-    if (result.state === "done") return result;
-    if (result.state === "failed") throw new Error(result.message);
-    if (result.state === "pending" && result.intervalSeconds) intervalMs += result.intervalSeconds * 1e3;
-    _optionalChain([options, 'access', _ => _.onPending, 'optionalCall', _2 => _2()]);
-    if (Date.now() + intervalMs > deadline) throw new Error("device authorization timed out");
-    await sleep(intervalMs);
-  }
-}
-async function refreshAccessToken(refreshToken, fetchImpl, fingerprint) {
-  const { status, body } = await postFormRaw(
-    fetchImpl,
-    KIMI_OAUTH_CONFIG.tokenEndpoint,
-    new URLSearchParams({
-      grant_type: "refresh_token",
-      client_id: KIMI_OAUTH_CONFIG.clientId,
-      refresh_token: refreshToken
-    }),
-    _nullishCoalesce(fingerprint, () => ( {}))
-  );
-  const accessToken = typeof body["access_token"] === "string" ? body["access_token"] : void 0;
-  if (status >= 400 || !accessToken) {
-    const message = typeof body["error_description"] === "string" && body["error_description"] ? body["error_description"] : typeof body["error"] === "string" ? body["error"] : `refresh failed (HTTP ${status})`;
-    throw new Error(message);
-  }
-  return {
-    accessToken,
-    // Kimi rotates the refresh token; keep the old one when the response omits it.
-    refreshToken: typeof body["refresh_token"] === "string" && body["refresh_token"] ? body["refresh_token"] : refreshToken,
-    expiresIn: typeof body["expires_in"] === "number" && body["expires_in"] > 0 ? body["expires_in"] : 3600
-  };
-}
-function kimiAccountIdFromAccessToken(accessToken) {
-  const parts = accessToken.split(".");
-  if (parts.length !== 3) return void 0;
-  try {
-    const json = Buffer.from(parts[1], "base64url").toString("utf8");
-    const claims = JSON.parse(json);
-    if (!claims || typeof claims !== "object" || Array.isArray(claims)) return void 0;
-    const record = claims;
-    for (const key of ["user_id", "sub"]) {
-      const value = record[key];
-      if (typeof value === "string" && value.trim()) return value.trim();
-    }
-    return void 0;
-  } catch (e3) {
-    return void 0;
-  }
-}
-
-// src/oauth/flows/claude.ts
-var claude_exports = {};
-_chunk75ZPJI57cjs.__export.call(void 0, claude_exports, {
-  exchangeCodeForTokens: () => exchangeCodeForTokens,
-  exchangeSetupTokenCode: () => exchangeSetupTokenCode,
-  generateAuthParams: () => generateAuthParams,
-  generateSetupTokenParams: () => generateSetupTokenParams,
-  refreshAccessToken: () => refreshAccessToken2
-});
-
-
-// src/oauth/fetchPort.ts
-function errorMessage(error, errorDescription) {
-  if (errorDescription) return errorDescription;
-  if (typeof error === "string") return error;
-  if (error && typeof error === "object") {
-    const e = error;
-    if (typeof e.message === "string" && e.message) return e.message;
-    if (typeof e.error_description === "string" && e.error_description) {
-      return e.error_description;
-    }
-    return JSON.stringify(error);
-  }
-  return String(error);
-}
-function withStatus(message, response) {
-  return response.ok ? message : `${message} (HTTP ${response.status})`;
-}
-var DEFAULT_TOKEN_TIMEOUT_MS = 3e4;
-async function fetchWithTimeout(fetchImpl, url, init, timeoutMs) {
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), timeoutMs);
-  try {
-    return await fetchImpl(url, { ...init, signal: controller.signal });
-  } catch (e) {
-    if (controller.signal.aborted) {
-      throw new Error(`token endpoint timed out after ${Math.round(timeoutMs / 1e3)}s`);
-    }
-    throw e;
-  } finally {
-    clearTimeout(timer);
-  }
-}
-async function postForm(fetchImpl, url, params, parseErrorMessage, timeoutMs = DEFAULT_TOKEN_TIMEOUT_MS) {
-  const response = await fetchWithTimeout(
-    fetchImpl,
-    url,
-    {
-      method: "POST",
-      headers: { "Content-Type": "application/x-www-form-urlencoded" },
-      body: params.toString()
-    },
-    timeoutMs
-  );
-  const responseData = await response.text();
-  let data;
-  try {
-    data = JSON.parse(responseData);
-  } catch (e4) {
-    throw new Error(withStatus(parseErrorMessage, response));
-  }
-  if (data.error) {
-    throw new Error(withStatus(errorMessage(data.error, data.error_description), response));
-  }
-  return data;
-}
-async function postJson(fetchImpl, url, body, parseErrorMessage, extraHeaders = {}, timeoutMs = DEFAULT_TOKEN_TIMEOUT_MS) {
-  const response = await fetchWithTimeout(
-    fetchImpl,
-    url,
-    {
-      method: "POST",
-      headers: { "Content-Type": "application/json", ...extraHeaders },
-      body: JSON.stringify(body)
-    },
-    timeoutMs
-  );
-  const responseData = await response.text();
-  let data;
-  try {
-    data = JSON.parse(responseData);
-  } catch (e5) {
-    throw new Error(withStatus(parseErrorMessage, response));
-  }
-  if (data.error) {
-    throw new Error(withStatus(errorMessage(data.error, data.error_description), response));
-  }
-  if (!response.ok) {
-    throw new Error(withStatus("token endpoint rejected the request", response));
-  }
-  return data;
-}
-
-// src/oauth/flows/claude.ts
-var CLAUDE_TOKEN_HEADERS = {
-  "User-Agent": "claude-cli/1.0.56 (external, cli)",
-  Accept: "application/json, text/plain, */*",
-  "Accept-Language": "en-US,en;q=0.9",
-  Referer: "https://claude.ai/",
-  Origin: "https://claude.ai"
-};
-var CLAUDE_OAUTH_CONFIG = {
-  clientId: "9d1c250a-e61b-44d9-88ed-5944d1962f5e",
-  authorizationEndpoint: "https://claude.ai/oauth/authorize",
-  // The token endpoint moved to platform.claude.com alongside the OAuth
-  // callback (the old console.anthropic.com/v1/oauth/token now returns
-  // Anthropic's standard 404 `{"error":{"type":"not_found_error","message":
-  // "Not found"}}` — observed 2026-06). The redirect_uri MUST match what the
-  // client is registered for AND match between authorize + token exchange.
-  // Scopes mirror the live Claude Code authorize URL.
-  tokenEndpoint: "https://platform.claude.com/v1/oauth/token",
-  redirectUri: "https://platform.claude.com/oauth/code/callback",
-  scopes: [
-    "org:create_api_key",
-    "user:profile",
-    "user:inference",
-    "user:sessions:claude_code",
-    "user:mcp_servers",
-    "user:file_upload"
-  ]
-};
-var SETUP_TOKEN_CONFIG = {
-  scopes: ["user:inference"]
-  // Only inference permission, no API key creation
-};
-function generatePkce() {
-  const codeVerifier = _crypto2.default.randomBytes(32).toString("base64url");
-  const codeChallenge = _crypto2.default.createHash("sha256").update(codeVerifier).digest("base64url");
-  const state = _crypto2.default.randomBytes(16).toString("hex");
-  return { codeVerifier, codeChallenge, state };
-}
-function generateAuthParams() {
-  const { codeVerifier, codeChallenge, state } = generatePkce();
-  const params = new URLSearchParams({
-    code: "true",
-    client_id: CLAUDE_OAUTH_CONFIG.clientId,
-    response_type: "code",
-    redirect_uri: CLAUDE_OAUTH_CONFIG.redirectUri,
-    scope: CLAUDE_OAUTH_CONFIG.scopes.join(" "),
-    code_challenge: codeChallenge,
-    code_challenge_method: "S256",
-    state
-  });
-  const authUrl = `${CLAUDE_OAUTH_CONFIG.authorizationEndpoint}?${params.toString()}`;
-  return { authUrl, codeVerifier, state };
-}
-function generateSetupTokenParams() {
-  const { codeVerifier, codeChallenge, state } = generatePkce();
-  const params = new URLSearchParams({
-    code: "true",
-    client_id: CLAUDE_OAUTH_CONFIG.clientId,
-    response_type: "code",
-    redirect_uri: CLAUDE_OAUTH_CONFIG.redirectUri,
-    scope: SETUP_TOKEN_CONFIG.scopes.join(" "),
-    code_challenge: codeChallenge,
-    code_challenge_method: "S256",
-    state
-  });
-  const authUrl = `${CLAUDE_OAUTH_CONFIG.authorizationEndpoint}?${params.toString()}`;
-  return { authUrl, codeVerifier, state };
-}
-async function exchangeCodeForTokens(request, fetchImpl) {
-  const { authorizationCode, codeVerifier, state } = request;
-  const code = _nullishCoalesce(_optionalChain([authorizationCode, 'access', _3 => _3.split, 'call', _4 => _4("#"), 'access', _5 => _5[0], 'optionalAccess', _6 => _6.split, 'call', _7 => _7("&"), 'access', _8 => _8[0]]), () => ( authorizationCode));
-  const data = await postJson(
-    fetchImpl,
-    CLAUDE_OAUTH_CONFIG.tokenEndpoint,
-    {
-      grant_type: "authorization_code",
-      client_id: CLAUDE_OAUTH_CONFIG.clientId,
-      code,
-      code_verifier: codeVerifier,
-      redirect_uri: CLAUDE_OAUTH_CONFIG.redirectUri,
-      state
-    },
-    "Failed to parse token response",
-    CLAUDE_TOKEN_HEADERS
-  );
-  return {
-    accessToken: data.access_token,
-    // The authorization_code grant always returns a refresh_token; the original
-    // helper read it from an untyped `data` and declared the field `string`.
-    refreshToken: data.refresh_token,
-    expiresIn: data.expires_in,
-    scopes: _optionalChain([data, 'access', _9 => _9.scope, 'optionalAccess', _10 => _10.split, 'call', _11 => _11(" ")]) || CLAUDE_OAUTH_CONFIG.scopes
-  };
-}
-async function exchangeSetupTokenCode(request, fetchImpl) {
-  const { authorizationCode, codeVerifier, state } = request;
-  const code = _nullishCoalesce(_optionalChain([authorizationCode, 'access', _12 => _12.split, 'call', _13 => _13("#"), 'access', _14 => _14[0], 'optionalAccess', _15 => _15.split, 'call', _16 => _16("&"), 'access', _17 => _17[0]]), () => ( authorizationCode));
-  const data = await postJson(
-    fetchImpl,
-    CLAUDE_OAUTH_CONFIG.tokenEndpoint,
-    {
-      grant_type: "authorization_code",
-      client_id: CLAUDE_OAUTH_CONFIG.clientId,
-      code,
-      code_verifier: codeVerifier,
-      redirect_uri: CLAUDE_OAUTH_CONFIG.redirectUri,
-      state
-    },
-    "Failed to parse setup token response",
-    CLAUDE_TOKEN_HEADERS
-  );
-  return {
-    accessToken: data.access_token,
-    expiresIn: data.expires_in,
-    scopes: _optionalChain([data, 'access', _18 => _18.scope, 'optionalAccess', _19 => _19.split, 'call', _20 => _20(" ")]) || SETUP_TOKEN_CONFIG.scopes
-  };
-}
-async function refreshAccessToken2(refreshToken, fetchImpl) {
-  const data = await postJson(
-    fetchImpl,
-    CLAUDE_OAUTH_CONFIG.tokenEndpoint,
-    {
-      grant_type: "refresh_token",
-      client_id: CLAUDE_OAUTH_CONFIG.clientId,
-      refresh_token: refreshToken
-    },
-    "Failed to parse refresh response",
-    CLAUDE_TOKEN_HEADERS
-  );
-  return {
-    accessToken: data.access_token,
-    refreshToken: data.refresh_token || refreshToken,
-    expiresIn: data.expires_in
-  };
-}
-
-// src/oauth/flows/codex.ts
-var codex_exports = {};
-_chunk75ZPJI57cjs.__export.call(void 0, codex_exports, {
-  exchangeCodeForTokens: () => exchangeCodeForTokens2,
-  generateAuthParams: () => generateAuthParams2,
-  refreshAccessToken: () => refreshAccessToken3
-});
-
-var CODEX_OAUTH_CONFIG = {
-  clientId: "app_EMoamEEZ73f0CkXaXp7hrann",
-  authorizationEndpoint: "https://auth.openai.com/oauth/authorize",
-  tokenEndpoint: "https://auth.openai.com/oauth/token",
-  redirectUri: "http://localhost:1455/auth/callback",
-  scopes: ["openid", "profile", "email", "offline_access"]
-};
-function generateAuthParams2() {
-  const codeVerifier = _crypto2.default.randomBytes(64).toString("hex");
-  const codeChallenge = _crypto2.default.createHash("sha256").update(codeVerifier).digest("base64url");
-  const state = _crypto2.default.randomBytes(16).toString("hex");
-  const params = new URLSearchParams({
-    response_type: "code",
-    client_id: CODEX_OAUTH_CONFIG.clientId,
-    redirect_uri: CODEX_OAUTH_CONFIG.redirectUri,
-    scope: CODEX_OAUTH_CONFIG.scopes.join(" "),
-    code_challenge: codeChallenge,
-    code_challenge_method: "S256",
-    state
-  });
-  const authUrl = `${CODEX_OAUTH_CONFIG.authorizationEndpoint}?${params.toString()}`;
-  return { authUrl, codeVerifier, state };
-}
-async function exchangeCodeForTokens2(request, fetchImpl) {
-  const { authorizationCode, codeVerifier } = request;
-  const params = new URLSearchParams({
-    grant_type: "authorization_code",
-    client_id: CODEX_OAUTH_CONFIG.clientId,
-    code: authorizationCode,
-    code_verifier: codeVerifier,
-    redirect_uri: CODEX_OAUTH_CONFIG.redirectUri
-  });
-  const data = await postForm(
-    fetchImpl,
-    CODEX_OAUTH_CONFIG.tokenEndpoint,
-    params,
-    "Failed to parse token response"
-  );
-  return {
-    accessToken: data.access_token,
-    // authorization_code grant returns both; the original helper read them from
-    // an untyped `data` and declared the fields `string`.
-    refreshToken: data.refresh_token,
-    idToken: data.id_token,
-    expiresIn: data.expires_in
-  };
-}
-async function refreshAccessToken3(refreshToken, fetchImpl) {
-  const params = new URLSearchParams({
-    grant_type: "refresh_token",
-    client_id: CODEX_OAUTH_CONFIG.clientId,
-    refresh_token: refreshToken,
-    scope: "openid profile email"
-  });
-  const data = await postForm(
-    fetchImpl,
-    CODEX_OAUTH_CONFIG.tokenEndpoint,
-    params,
-    "Failed to parse refresh response"
-  );
-  return {
-    accessToken: data.access_token,
-    idToken: data.id_token,
-    refreshToken: data.refresh_token || refreshToken,
-    expiresIn: data.expires_in || 3600
-  };
-}
-
-// src/oauth/flows/gemini.ts
-var gemini_exports = {};
-_chunk75ZPJI57cjs.__export.call(void 0, gemini_exports, {
-  exchangeCodeForTokens: () => exchangeCodeForTokens3,
-  generateAuthParams: () => generateAuthParams3,
-  refreshAccessToken: () => refreshAccessToken4
-});
-
-var GEMINI_OAUTH_CONFIG = {
-  clientId: "681255809395-oo8ft2oprdrnp9e3aqf6av3hmdib135j.apps.googleusercontent.com",
-  // The Gemini CLI's *public* installed-app OAuth client secret (mirrors the
-  // upstream CLI). Per Google's OAuth docs, native-app client secrets are not
-  // treated as confidential — not a leaked key.
-  clientSecret: "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",
-  // allowlist-secret
-  authorizationEndpoint: "https://accounts.google.com/o/oauth2/v2/auth",
-  tokenEndpoint: "https://oauth2.googleapis.com/token",
-  redirectUri: "urn:ietf:wg:oauth:2.0:oob",
-  scopes: ["https://www.googleapis.com/auth/cloud-platform"]
-};
-function generateAuthParams3() {
-  const codeVerifier = _crypto2.default.randomBytes(32).toString("base64url");
-  const codeChallenge = _crypto2.default.createHash("sha256").update(codeVerifier).digest("base64url");
-  const state = _crypto2.default.randomBytes(16).toString("hex");
-  const params = new URLSearchParams({
-    client_id: GEMINI_OAUTH_CONFIG.clientId,
-    redirect_uri: GEMINI_OAUTH_CONFIG.redirectUri,
-    scope: GEMINI_OAUTH_CONFIG.scopes.join(" "),
-    response_type: "code",
-    code_challenge: codeChallenge,
-    code_challenge_method: "S256",
-    state,
-    access_type: "offline",
-    prompt: "consent"
-  });
-  const authUrl = `${GEMINI_OAUTH_CONFIG.authorizationEndpoint}?${params.toString()}`;
-  return { authUrl, codeVerifier, state };
-}
-async function exchangeCodeForTokens3(authorizationCode, codeVerifier, fetchImpl) {
-  const params = new URLSearchParams({
-    grant_type: "authorization_code",
-    client_id: GEMINI_OAUTH_CONFIG.clientId,
-    client_secret: GEMINI_OAUTH_CONFIG.clientSecret,
-    code: authorizationCode,
-    code_verifier: codeVerifier,
-    redirect_uri: GEMINI_OAUTH_CONFIG.redirectUri
-  });
-  const data = await postForm(
-    fetchImpl,
-    GEMINI_OAUTH_CONFIG.tokenEndpoint,
-    params,
-    "Failed to parse token response"
-  );
-  return {
-    accessToken: data.access_token,
-    // authorization_code grant returns a refresh_token; the original helper read
-    // it from an untyped `data` and declared the field `string`.
-    refreshToken: data.refresh_token,
-    expiresIn: data.expires_in
-  };
-}
-async function refreshAccessToken4(refreshToken, fetchImpl) {
-  const params = new URLSearchParams({
-    grant_type: "refresh_token",
-    client_id: GEMINI_OAUTH_CONFIG.clientId,
-    client_secret: GEMINI_OAUTH_CONFIG.clientSecret,
-    refresh_token: refreshToken
-  });
-  const data = await postForm(
-    fetchImpl,
-    GEMINI_OAUTH_CONFIG.tokenEndpoint,
-    params,
-    "Failed to parse refresh response"
-  );
-  return {
-    accessToken: data.access_token,
-    expiresIn: data.expires_in
-  };
-}
-
-
-
-
-
-
-
-exports.kimiFingerprintHeaders = kimiFingerprintHeaders; exports.kimi_exports = kimi_exports; exports.claude_exports = claude_exports; exports.codex_exports = codex_exports; exports.gemini_exports = gemini_exports;