@shin1ohno/sage 0.11.0 → 0.12.1

package/dist/oauth/google-oauth-callback-handler.js

@@ -0,0 +1,291 @@
+/**
+ * Google OAuth Callback Handler
+ * Requirements: FR-1 (OAuth Callback Endpoint), FR-4 (Token Exchange)
+ *
+ * Handles HTTP callbacks from Google OAuth for remote server mode.
+ * Processes authorization codes, exchanges for tokens, and renders
+ * success/error pages to the browser.
+ */
+import { URL } from 'url';
+import { oauthLogger } from '../utils/logger.js';
+/**
+ * Google OAuth Callback Handler
+ *
+ * Processes OAuth callbacks from Google and exchanges
+ * authorization codes for tokens.
+ */
+export class GoogleOAuthCallbackHandler {
+    pendingAuthStore;
+    googleOAuthHandler;
+    constructor(options) {
+        this.pendingAuthStore = options.pendingAuthStore;
+        this.googleOAuthHandler = options.googleOAuthHandler;
+    }
+    /**
+     * Handle OAuth callback request
+     *
+     * @param req - HTTP request
+     * @param res - HTTP response
+     */
+    async handleCallback(req, res) {
+        try {
+            const params = this.parseCallbackParams(req.url || '');
+            oauthLogger.info({ state: params.state, hasCode: !!params.code, error: params.error }, 'Processing OAuth callback');
+            // Check for OAuth error
+            if (params.error) {
+                const errorMessage = params.error === 'access_denied'
+                    ? '認証が拒否されました。'
+                    : `OAuth エラー: ${params.error}`;
+                this.renderErrorPage(res, errorMessage, params.errorDescription);
+                return;
+            }
+            // Validate required parameters
+            if (!params.state) {
+                this.renderErrorPage(res, '認証セッションが見つかりません。', 'state パラメータがありません。');
+                return;
+            }
+            if (!params.code) {
+                this.renderErrorPage(res, '認証コードが見つかりません。', 'code パラメータがありません。');
+                return;
+            }
+            // Find pending session
+            const session = this.pendingAuthStore.findByState(params.state);
+            if (!session) {
+                this.renderErrorPage(res, '認証セッションが見つかりません。', 'セッションが期限切れか、無効な state です。再度認証を開始してください。');
+                return;
+            }
+            // Exchange code for tokens
+            await this.exchangeCodeForTokens(params.code, session);
+            // Remove session after successful exchange
+            this.pendingAuthStore.remove(params.state);
+            // Render success page
+            this.renderSuccessPage(res);
+            oauthLogger.info({ state: params.state }, 'OAuth callback completed successfully');
+        }
+        catch (error) {
+            oauthLogger.error({ err: error }, 'OAuth callback failed');
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            this.renderErrorPage(res, '認証に失敗しました。', errorMessage);
+        }
+    }
+    /**
+     * Parse callback parameters from URL
+     */
+    parseCallbackParams(urlString) {
+        try {
+            // Handle relative URLs by adding a base
+            const url = new URL(urlString, 'http://localhost');
+            const searchParams = url.searchParams;
+            return {
+                code: searchParams.get('code') || undefined,
+                state: searchParams.get('state') || undefined,
+                error: searchParams.get('error') || undefined,
+                errorDescription: searchParams.get('error_description') || undefined,
+            };
+        }
+        catch (error) {
+            oauthLogger.error({ err: error, url: urlString }, 'Failed to parse callback URL');
+            return {};
+        }
+    }
+    /**
+     * Exchange authorization code for tokens
+     */
+    async exchangeCodeForTokens(code, session) {
+        // Use googleapis directly for token exchange since we have the code_verifier
+        // stored in the session (GoogleOAuthHandler requires calling getAuthorizationUrl()
+        // first to set its internal codeVerifier, which doesn't work for remote mode)
+        const { google } = await import('googleapis');
+        const oauth2Client = new google.auth.OAuth2(process.env.GOOGLE_CLIENT_ID, process.env.GOOGLE_CLIENT_SECRET, session.redirectUri);
+        const { tokens } = await oauth2Client.getToken({
+            code,
+            codeVerifier: session.codeVerifier,
+        });
+        if (!tokens.access_token || !tokens.refresh_token) {
+            throw new Error('トークンの取得に失敗しました。access_token または refresh_token がありません。');
+        }
+        // Store tokens using the GoogleOAuthHandler
+        await this.googleOAuthHandler.storeTokens({
+            accessToken: tokens.access_token,
+            refreshToken: tokens.refresh_token,
+            expiresAt: tokens.expiry_date || Date.now() + 3600 * 1000,
+            scope: tokens.scope ? tokens.scope.split(' ') : ['https://www.googleapis.com/auth/calendar'],
+        });
+        oauthLogger.info('Tokens exchanged and stored successfully');
+    }
+    /**
+     * Render success HTML page
+     */
+    renderSuccessPage(res) {
+        const html = `<!DOCTYPE html>
+<html lang="ja">
+<head>
+  <title>sage - Google Calendar 認証完了</title>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <style>
+    * { box-sizing: border-box; margin: 0; padding: 0; }
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif;
+      text-align: center;
+      padding: 50px 20px;
+      background: linear-gradient(135deg, #f5f7fa 0%, #c3cfe2 100%);
+      min-height: 100vh;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+    }
+    .container {
+      max-width: 400px;
+      background: white;
+      padding: 40px;
+      border-radius: 16px;
+      box-shadow: 0 10px 40px rgba(0, 0, 0, 0.1);
+    }
+    .success-icon {
+      width: 80px;
+      height: 80px;
+      background: #22c55e;
+      border-radius: 50%;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      margin: 0 auto 24px;
+    }
+    .success-icon svg {
+      width: 40px;
+      height: 40px;
+      stroke: white;
+      stroke-width: 3;
+      fill: none;
+    }
+    h1 {
+      color: #111827;
+      font-size: 24px;
+      margin-bottom: 12px;
+    }
+    p {
+      color: #6b7280;
+      font-size: 16px;
+      line-height: 1.5;
+    }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <div class="success-icon">
+      <svg viewBox="0 0 24 24"><polyline points="20 6 9 17 4 12"></polyline></svg>
+    </div>
+    <h1>認証が完了しました</h1>
+    <p>このウィンドウを閉じて、Claude に戻ってください。</p>
+  </div>
+</body>
+</html>`;
+        res.writeHead(200, {
+            'Content-Type': 'text/html; charset=utf-8',
+            'Cache-Control': 'no-store',
+        });
+        res.end(html);
+    }
+    /**
+     * Render error HTML page
+     */
+    renderErrorPage(res, error, detail) {
+        const detailHtml = detail
+            ? `<div class="error-detail">${this.escapeHtml(detail)}</div>`
+            : '';
+        const html = `<!DOCTYPE html>
+<html lang="ja">
+<head>
+  <title>sage - Google Calendar 認証エラー</title>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <style>
+    * { box-sizing: border-box; margin: 0; padding: 0; }
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif;
+      text-align: center;
+      padding: 50px 20px;
+      background: linear-gradient(135deg, #fef2f2 0%, #fee2e2 100%);
+      min-height: 100vh;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+    }
+    .container {
+      max-width: 400px;
+      background: white;
+      padding: 40px;
+      border-radius: 16px;
+      box-shadow: 0 10px 40px rgba(0, 0, 0, 0.1);
+    }
+    .error-icon {
+      width: 80px;
+      height: 80px;
+      background: #ef4444;
+      border-radius: 50%;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      margin: 0 auto 24px;
+    }
+    .error-icon svg {
+      width: 40px;
+      height: 40px;
+      stroke: white;
+      stroke-width: 3;
+      fill: none;
+    }
+    h1 {
+      color: #111827;
+      font-size: 24px;
+      margin-bottom: 12px;
+    }
+    p {
+      color: #6b7280;
+      font-size: 16px;
+      line-height: 1.5;
+      margin-bottom: 16px;
+    }
+    .error-detail {
+      background: #fef2f2;
+      color: #991b1b;
+      padding: 12px 16px;
+      border-radius: 8px;
+      font-size: 14px;
+      text-align: left;
+      word-break: break-word;
+    }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <div class="error-icon">
+      <svg viewBox="0 0 24 24"><line x1="18" y1="6" x2="6" y2="18"></line><line x1="6" y1="6" x2="18" y2="18"></line></svg>
+    </div>
+    <h1>認証に失敗しました</h1>
+    <p>${this.escapeHtml(error)}</p>
+    ${detailHtml}
+    <p style="margin-top: 16px;">Claude に戻って再試行してください。</p>
+  </div>
+</body>
+</html>`;
+        res.writeHead(200, {
+            'Content-Type': 'text/html; charset=utf-8',
+            'Cache-Control': 'no-store',
+        });
+        res.end(html);
+    }
+    /**
+     * Escape HTML special characters
+     */
+    escapeHtml(text) {
+        return text
+            .replace(/&/g, '&amp;')
+            .replace(/</g, '&lt;')
+            .replace(/>/g, '&gt;')
+            .replace(/"/g, '&quot;')
+            .replace(/'/g, '&#039;');
+    }
+}
+//# sourceMappingURL=google-oauth-callback-handler.js.map

package/dist/oauth/google-oauth-callback-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-oauth-callback-handler.js","sourceRoot":"","sources":["../../src/oauth/google-oauth-callback-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC;AAG1B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAoBjD;;;;;GAKG;AACH,MAAM,OAAO,0BAA0B;IACpB,gBAAgB,CAAyB;IACzC,kBAAkB,CAAqB;IAExD,YAAY,OAA0C;QACpD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QACjD,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IACvD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,GAAoB,EAAE,GAAmB;QAC5D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;YAEvD,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,2BAA2B,CAAC,CAAC;YAEpH,wBAAwB;YACxB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,KAAK,eAAe;oBACnD,CAAC,CAAC,aAAa;oBACf,CAAC,CAAC,cAAc,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YAED,+BAA+B;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YAED,uBAAuB;YACvB,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEhE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,eAAe,CAClB,GAAG,EACH,kBAAkB,EAClB,yCAAyC,CAC1C,CAAC;gBACF,OAAO;YACT,CAAC;YAED,2BAA2B;YAC3B,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAEvD,2CAA2C;YAC3C,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE3C,sBAAsB;YACtB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAE5B,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,uCAAuC,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,uBAAuB,CAAC,CAAC;YAE3D,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC9E,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,SAAiB;QAC3C,IAAI,CAAC;YACH,wCAAwC;YACxC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;YACnD,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;YAEtC,OAAO;gBACL,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS;gBAC3C,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;gBAC7C,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;gBAC7C,gBAAgB,EAAE,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,SAAS;aACrE,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,8BAA8B,CAAC,CAAC;YAClF,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,qBAAqB,CACjC,IAAY,EACZ,OAA0B;QAE1B,6EAA6E;QAC7E,mFAAmF;QACnF,8EAA8E;QAC9E,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAE9C,MAAM,YAAY,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CACzC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAC5B,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAChC,OAAO,CAAC,WAAW,CACpB,CAAC;QAEF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC;YAC7C,IAAI;YACJ,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QAED,4CAA4C;QAC5C,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC;YACxC,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,YAAY,EAAE,MAAM,CAAC,aAAa;YAClC,SAAS,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;YACzD,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,0CAA0C,CAAC;SAC7F,CAAC,CAAC;QAEH,WAAW,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,GAAmB;QAC3C,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA+DT,CAAC;QAEL,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,0BAA0B;YAC1C,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,GAAmB,EAAE,KAAa,EAAE,MAAe;QACzE,MAAM,UAAU,GAAG,MAAM;YACvB,CAAC,CAAC,6BAA6B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ;YAC9D,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAsER,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;MACzB,UAAU;;;;QAIR,CAAC;QAEL,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,0BAA0B;YAC1C,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,IAAY;QAC7B,OAAO,IAAI;aACR,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;aACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;aACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7B,CAAC;CACF"}

package/dist/oauth/index.d.ts

@@ -13,4 +13,6 @@ export { OAuthHandler, createOAuthHandler, OAuthHandlerConfig } from './oauth-ha
 export { FileMutex, FileMutexMetrics } from './file-mutex.js';
 export { OAuthCallbackServer, OAuthCallbackServerOptions, CallbackResult, } from './oauth-callback-server.js';
 export { GoogleOAuthHandler, GoogleOAuthConfig, GoogleOAuthTokens } from './google-oauth-handler.js';
+export { PendingGoogleAuthStore, PendingGoogleAuth, CreatePendingAuthResult, } from './pending-google-auth-store.js';
+export { GoogleOAuthCallbackHandler, GoogleOAuthCallbackHandlerOptions, } from './google-oauth-callback-handler.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/oauth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/oauth/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,cAAc,YAAY,CAAC;AAG3B,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAGxI,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGvF,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAGvF,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAGtF,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGnE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAGtF,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAG1F,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAG9D,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,cAAc,GACf,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/oauth/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,cAAc,YAAY,CAAC;AAG3B,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAGxI,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGvF,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAGvF,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAGtF,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGnE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAGtF,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAG1F,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAG9D,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,cAAc,GACf,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAGrG,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,gCAAgC,CAAC;AAGxC,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,oCAAoC,CAAC"}

package/dist/oauth/index.js

@@ -24,4 +24,8 @@ export { FileMutex } from './file-mutex.js';
 export { OAuthCallbackServer, } from './oauth-callback-server.js';
 // Google OAuth Handler
 export { GoogleOAuthHandler } from './google-oauth-handler.js';
+// Pending Google Auth Store (for remote OAuth mode)
+export { PendingGoogleAuthStore, } from './pending-google-auth-store.js';
+// Google OAuth Callback Handler (for remote OAuth mode)
+export { GoogleOAuthCallbackHandler, } from './google-oauth-callback-handler.js';
 //# sourceMappingURL=index.js.map

package/dist/oauth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/oauth/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,QAAQ;AACR,cAAc,YAAY,CAAC;AAE3B,OAAO;AACP,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAExI,gBAAgB;AAChB,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAgB,MAAM,oBAAoB,CAAC;AAEvF,2BAA2B;AAC3B,OAAO,EAAE,4BAA4B,EAA0B,MAAM,iBAAiB,CAAC;AAEvF,sBAAsB;AACtB,OAAO,EAAE,uBAAuB,EAAqB,MAAM,0BAA0B,CAAC;AAEtF,eAAe;AACf,OAAO,EAAE,iBAAiB,EAAe,MAAM,mBAAmB,CAAC;AAEnE,eAAe;AACf,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAqB,MAAM,mBAAmB,CAAC;AAEtF,gBAAgB;AAChB,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAsB,MAAM,oBAAoB,CAAC;AAE1F,+CAA+C;AAC/C,OAAO,EAAE,SAAS,EAAoB,MAAM,iBAAiB,CAAC;AAE9D,gDAAgD;AAChD,OAAO,EACL,mBAAmB,GAGpB,MAAM,4BAA4B,CAAC;AAEpC,uBAAuB;AACvB,OAAO,EAAE,kBAAkB,EAAwC,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/oauth/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,QAAQ;AACR,cAAc,YAAY,CAAC;AAE3B,OAAO;AACP,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAExI,gBAAgB;AAChB,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAgB,MAAM,oBAAoB,CAAC;AAEvF,2BAA2B;AAC3B,OAAO,EAAE,4BAA4B,EAA0B,MAAM,iBAAiB,CAAC;AAEvF,sBAAsB;AACtB,OAAO,EAAE,uBAAuB,EAAqB,MAAM,0BAA0B,CAAC;AAEtF,eAAe;AACf,OAAO,EAAE,iBAAiB,EAAe,MAAM,mBAAmB,CAAC;AAEnE,eAAe;AACf,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAqB,MAAM,mBAAmB,CAAC;AAEtF,gBAAgB;AAChB,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAsB,MAAM,oBAAoB,CAAC;AAE1F,+CAA+C;AAC/C,OAAO,EAAE,SAAS,EAAoB,MAAM,iBAAiB,CAAC;AAE9D,gDAAgD;AAChD,OAAO,EACL,mBAAmB,GAGpB,MAAM,4BAA4B,CAAC;AAEpC,uBAAuB;AACvB,OAAO,EAAE,kBAAkB,EAAwC,MAAM,2BAA2B,CAAC;AAErG,oDAAoD;AACpD,OAAO,EACL,sBAAsB,GAGvB,MAAM,gCAAgC,CAAC;AAExC,wDAAwD;AACxD,OAAO,EACL,0BAA0B,GAE3B,MAAM,oCAAoC,CAAC"}

package/dist/oauth/pending-google-auth-store.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Pending Google Auth Store
+ * Requirements: FR-3 (Pending Auth Session Management)
+ *
+ * Manages pending Google OAuth authentication sessions for remote mode.
+ * Sessions are stored encrypted and expire after a configurable timeout.
+ */
+/**
+ * Pending Google Auth Session
+ */
+export interface PendingGoogleAuth {
+    state: string;
+    codeVerifier: string;
+    redirectUri: string;
+    createdAt: number;
+    expiresAt: number;
+}
+/**
+ * Result of creating a new pending auth session
+ */
+export interface CreatePendingAuthResult {
+    state: string;
+    codeVerifier: string;
+    codeChallenge: string;
+}
+/**
+ * Pending Google Auth Store
+ *
+ * Manages pending OAuth sessions with encrypted persistence.
+ */
+export declare class PendingGoogleAuthStore {
+    private sessions;
+    private readonly storagePath;
+    private readonly encryptionService;
+    private readonly sessionTimeoutMs;
+    private cleanupTimer;
+    private initialized;
+    constructor(encryptionKey?: string);
+    /**
+     * Initialize the store and start cleanup timer
+     */
+    initialize(): Promise<void>;
+    /**
+     * Create a new pending auth session
+     *
+     * @param redirectUri - The OAuth callback URL
+     * @returns Session state, code_verifier, and code_challenge
+     */
+    create(redirectUri: string): CreatePendingAuthResult;
+    /**
+     * Find a session by state
+     *
+     * @param state - The session state (UUID)
+     * @returns The session or null if not found/expired
+     */
+    findByState(state: string): PendingGoogleAuth | null;
+    /**
+     * Remove a session by state
+     *
+     * @param state - The session state to remove
+     */
+    remove(state: string): void;
+    /**
+     * Clean up expired sessions
+     */
+    cleanupExpired(): void;
+    /**
+     * Get session timeout in seconds
+     */
+    getSessionTimeoutSeconds(): number;
+    /**
+     * Persist sessions to encrypted file
+     */
+    persist(): Promise<void>;
+    /**
+     * Load sessions from encrypted file
+     */
+    load(): Promise<void>;
+    /**
+     * Shutdown the store and stop cleanup timer
+     */
+    shutdown(): Promise<void>;
+    /**
+     * Get the number of active sessions
+     */
+    getSessionCount(): number;
+}
+//# sourceMappingURL=pending-google-auth-store.d.ts.map

package/dist/oauth/pending-google-auth-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-google-auth-store.d.ts","sourceRoot":"","sources":["../../src/oauth/pending-google-auth-store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAUD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAYD;;;;GAIG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAA6C;IAC7D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;IACtD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,YAAY,CAA+B;IACnD,OAAO,CAAC,WAAW,CAAkB;gBAEzB,aAAa,CAAC,EAAE,MAAM;IAalC;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAoBjC;;;;;OAKG;IACH,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,uBAAuB;IA8BpD;;;;;OAKG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAiBpD;;;;OAIG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAa3B;;OAEG;IACH,cAAc,IAAI,IAAI;IAqBtB;;OAEG;IACH,wBAAwB,IAAI,MAAM;IAIlC;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB9B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA+B3B;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAY/B;;OAEG;IACH,eAAe,IAAI,MAAM;CAG1B"}

package/dist/oauth/pending-google-auth-store.js

@@ -0,0 +1,218 @@
+/**
+ * Pending Google Auth Store
+ * Requirements: FR-3 (Pending Auth Session Management)
+ *
+ * Manages pending Google OAuth authentication sessions for remote mode.
+ * Sessions are stored encrypted and expire after a configurable timeout.
+ */
+import { randomUUID } from 'crypto';
+import { join } from 'path';
+import { homedir } from 'os';
+import { generateCodeVerifier, generateCodeChallenge } from './pkce.js';
+import { EncryptionService } from './encryption-service.js';
+import { oauthLogger } from '../utils/logger.js';
+/**
+ * Default session timeout (10 minutes)
+ */
+const DEFAULT_SESSION_TIMEOUT_MS = 10 * 60 * 1000;
+/**
+ * Cleanup interval (5 minutes)
+ */
+const CLEANUP_INTERVAL_MS = 5 * 60 * 1000;
+/**
+ * Pending Google Auth Store
+ *
+ * Manages pending OAuth sessions with encrypted persistence.
+ */
+export class PendingGoogleAuthStore {
+    sessions = new Map();
+    storagePath;
+    encryptionService;
+    sessionTimeoutMs;
+    cleanupTimer = null;
+    initialized = false;
+    constructor(encryptionKey) {
+        this.storagePath = join(homedir(), '.sage', 'google_pending_auth.enc');
+        this.encryptionService = new EncryptionService({
+            encryptionKey: encryptionKey || process.env.SAGE_ENCRYPTION_KEY,
+        });
+        // Parse session timeout from environment or use default
+        const timeoutEnv = process.env.GOOGLE_AUTH_SESSION_TIMEOUT;
+        this.sessionTimeoutMs = timeoutEnv
+            ? parseInt(timeoutEnv, 10) * 1000
+            : DEFAULT_SESSION_TIMEOUT_MS;
+    }
+    /**
+     * Initialize the store and start cleanup timer
+     */
+    async initialize() {
+        if (this.initialized) {
+            return;
+        }
+        await this.encryptionService.initialize();
+        await this.load();
+        // Start periodic cleanup
+        this.cleanupTimer = setInterval(() => {
+            this.cleanupExpired();
+        }, CLEANUP_INTERVAL_MS);
+        // Don't prevent process exit
+        this.cleanupTimer.unref();
+        this.initialized = true;
+        oauthLogger.info('PendingGoogleAuthStore initialized');
+    }
+    /**
+     * Create a new pending auth session
+     *
+     * @param redirectUri - The OAuth callback URL
+     * @returns Session state, code_verifier, and code_challenge
+     */
+    create(redirectUri) {
+        const state = randomUUID();
+        const codeVerifier = generateCodeVerifier();
+        const codeChallenge = generateCodeChallenge(codeVerifier);
+        const now = Date.now();
+        const session = {
+            state,
+            codeVerifier,
+            redirectUri,
+            createdAt: now,
+            expiresAt: now + this.sessionTimeoutMs,
+        };
+        this.sessions.set(state, session);
+        // Persist asynchronously (don't block)
+        this.persist().catch(err => {
+            oauthLogger.error({ err }, 'Failed to persist pending auth session');
+        });
+        oauthLogger.info({ state }, 'Created pending auth session');
+        return {
+            state,
+            codeVerifier,
+            codeChallenge,
+        };
+    }
+    /**
+     * Find a session by state
+     *
+     * @param state - The session state (UUID)
+     * @returns The session or null if not found/expired
+     */
+    findByState(state) {
+        const session = this.sessions.get(state);
+        if (!session) {
+            return null;
+        }
+        // Check expiration
+        if (Date.now() > session.expiresAt) {
+            this.sessions.delete(state);
+            oauthLogger.info({ state }, 'Session expired');
+            return null;
+        }
+        return session;
+    }
+    /**
+     * Remove a session by state
+     *
+     * @param state - The session state to remove
+     */
+    remove(state) {
+        const existed = this.sessions.delete(state);
+        if (existed) {
+            oauthLogger.info({ state }, 'Removed pending auth session');
+            // Persist asynchronously
+            this.persist().catch(err => {
+                oauthLogger.error({ err }, 'Failed to persist after session removal');
+            });
+        }
+    }
+    /**
+     * Clean up expired sessions
+     */
+    cleanupExpired() {
+        const now = Date.now();
+        let removedCount = 0;
+        for (const [state, session] of this.sessions.entries()) {
+            if (now > session.expiresAt) {
+                this.sessions.delete(state);
+                removedCount++;
+            }
+        }
+        if (removedCount > 0) {
+            oauthLogger.info({ removedCount }, 'Cleaned up expired sessions');
+            // Persist asynchronously
+            this.persist().catch(err => {
+                oauthLogger.error({ err }, 'Failed to persist after cleanup');
+            });
+        }
+    }
+    /**
+     * Get session timeout in seconds
+     */
+    getSessionTimeoutSeconds() {
+        return Math.floor(this.sessionTimeoutMs / 1000);
+    }
+    /**
+     * Persist sessions to encrypted file
+     */
+    async persist() {
+        try {
+            const storage = {
+                version: 1,
+                sessions: Array.from(this.sessions.values()),
+            };
+            await this.encryptionService.encryptToFile(JSON.stringify(storage), this.storagePath);
+            oauthLogger.debug({ sessionCount: this.sessions.size }, 'Persisted pending auth sessions');
+        }
+        catch (error) {
+            oauthLogger.error({ err: error }, 'Failed to persist pending auth sessions');
+            throw error;
+        }
+    }
+    /**
+     * Load sessions from encrypted file
+     */
+    async load() {
+        try {
+            const data = await this.encryptionService.decryptFromFile(this.storagePath);
+            if (data === null) {
+                oauthLogger.debug('No existing pending auth sessions found');
+                return;
+            }
+            const storage = JSON.parse(data);
+            if (storage.version !== 1) {
+                oauthLogger.warn({ version: storage.version }, 'Unknown storage version, ignoring');
+                return;
+            }
+            // Load sessions and filter out expired ones
+            const now = Date.now();
+            for (const session of storage.sessions) {
+                if (now < session.expiresAt) {
+                    this.sessions.set(session.state, session);
+                }
+            }
+            oauthLogger.info({ sessionCount: this.sessions.size }, 'Loaded pending auth sessions');
+        }
+        catch (error) {
+            oauthLogger.error({ err: error }, 'Failed to load pending auth sessions');
+            // Don't throw - start with empty sessions
+        }
+    }
+    /**
+     * Shutdown the store and stop cleanup timer
+     */
+    async shutdown() {
+        if (this.cleanupTimer) {
+            clearInterval(this.cleanupTimer);
+            this.cleanupTimer = null;
+        }
+        // Final persist
+        await this.persist();
+        oauthLogger.info('PendingGoogleAuthStore shutdown');
+    }
+    /**
+     * Get the number of active sessions
+     */
+    getSessionCount() {
+        return this.sessions.size;
+    }
+}
+//# sourceMappingURL=pending-google-auth-store.js.map

package/dist/oauth/pending-google-auth-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-google-auth-store.js","sourceRoot":"","sources":["../../src/oauth/pending-google-auth-store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AA8BjD;;GAEG;AACH,MAAM,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAElD;;GAEG;AACH,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1C;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IACzB,QAAQ,GAAmC,IAAI,GAAG,EAAE,CAAC;IAC5C,WAAW,CAAS;IACpB,iBAAiB,CAAoB;IACrC,gBAAgB,CAAS;IAClC,YAAY,GAA0B,IAAI,CAAC;IAC3C,WAAW,GAAY,KAAK,CAAC;IAErC,YAAY,aAAsB;QAChC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,yBAAyB,CAAC,CAAC;QACvE,IAAI,CAAC,iBAAiB,GAAG,IAAI,iBAAiB,CAAC;YAC7C,aAAa,EAAE,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB;SAChE,CAAC,CAAC;QAEH,wDAAwD;QACxD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;QAC3D,IAAI,CAAC,gBAAgB,GAAG,UAAU;YAChC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,IAAI;YACjC,CAAC,CAAC,0BAA0B,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAElB,yBAAyB;QACzB,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YACnC,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAExB,6BAA6B;QAC7B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAE1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,WAAW,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACzD,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,WAAmB;QACxB,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;QAC5C,MAAM,aAAa,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;QAE1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAsB;YACjC,KAAK;YACL,YAAY;YACZ,WAAW;YACX,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,gBAAgB;SACvC,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAElC,uCAAuC;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YACzB,WAAW,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,wCAAwC,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;QAEH,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,8BAA8B,CAAC,CAAC;QAE5D,OAAO;YACL,KAAK;YACL,YAAY;YACZ,aAAa;SACd,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,KAAa;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,mBAAmB;QACnB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,iBAAiB,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAa;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE5C,IAAI,OAAO,EAAE,CAAC;YACZ,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,8BAA8B,CAAC,CAAC;YAE5D,yBAAyB;YACzB,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;gBACzB,WAAW,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,yCAAyC,CAAC,CAAC;YACxE,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC5B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5B,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QAED,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,WAAW,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,EAAE,6BAA6B,CAAC,CAAC;YAElE,yBAAyB;YACzB,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;gBACzB,WAAW,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,iCAAiC,CAAC,CAAC;YAChE,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,wBAAwB;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,CAAC;YACH,MAAM,OAAO,GAA6B;gBACxC,OAAO,EAAE,CAAC;gBACV,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;aAC7C,CAAC;YAEF,MAAM,IAAI,CAAC,iBAAiB,CAAC,aAAa,CACxC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EACvB,IAAI,CAAC,WAAW,CACjB,CAAC;YAEF,WAAW,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,iCAAiC,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,yCAAyC,CAAC,CAAC;YAC7E,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAE5E,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,WAAW,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAA6B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAE3D,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;gBAC1B,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,mCAAmC,CAAC,CAAC;gBACpF,OAAO;YACT,CAAC;YAED,4CAA4C;YAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACvC,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;oBAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;YAED,WAAW,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,8BAA8B,CAAC,CAAC;QACzF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,sCAAsC,CAAC,CAAC;YAC1E,0CAA0C;QAC5C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;QAED,gBAAgB;QAChB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAErB,WAAW,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;CACF"}