@theia/ai-copilot 1.75.0 → 1.76.0-next.10

package/lib/common/copilot-preferences.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"copilot-preferences.d.ts","sourceRoot":"","sources":["../../src/common/copilot-preferences.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAO,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,eAAO,MAAM,oBAAoB,gCAAgC,CAAC;AAClE,eAAO,MAAM,4BAA4B,uCAAuC,CAAC;AACjF,eAAO,MAAM,2BAA2B,sCAAsC,CAAC;AAE/E,eAAO,MAAM,wBAAwB,EAAE,gBA+BtC,CAAC"}
+{"version":3,"file":"copilot-preferences.d.ts","sourceRoot":"","sources":["../../src/common/copilot-preferences.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAO,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,eAAO,MAAM,oBAAoB,gCAAgC,CAAC;AAClE,eAAO,MAAM,4BAA4B,uCAAuC,CAAC;AACjF,eAAO,MAAM,2BAA2B,sCAAsC,CAAC;AAC/E,eAAO,MAAM,4BAA4B,uCAAuC,CAAC;AAEjF,eAAO,MAAM,wBAAwB,EAAE,gBAiDtC,CAAC"}

package/lib/common/copilot-preferences.js

@@ -15,21 +15,26 @@
 // SPDX-License-Identifier: EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0
 // *****************************************************************************
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CopilotPreferencesSchema = exports.COPILOT_ENTERPRISE_URL_PREF = exports.COPILOT_MODEL_OVERRIDES_PREF = exports.COPILOT_ENABLED_PREF = void 0;
+exports.CopilotPreferencesSchema = exports.COPILOT_EXECUTABLE_PATH_PREF = exports.COPILOT_ENTERPRISE_URL_PREF = exports.COPILOT_MODEL_OVERRIDES_PREF = exports.COPILOT_ENABLED_PREF = void 0;
 const ai_core_preferences_1 = require("@theia/ai-core/lib/common/ai-core-preferences");
 const core_1 = require("@theia/core");
 exports.COPILOT_ENABLED_PREF = 'ai-features.copilot.enabled';
 exports.COPILOT_MODEL_OVERRIDES_PREF = 'ai-features.copilot.modelOverrides';
 exports.COPILOT_ENTERPRISE_URL_PREF = 'ai-features.copilot.enterpriseUrl';
+exports.COPILOT_EXECUTABLE_PATH_PREF = 'ai-features.copilot.executablePath';
 exports.CopilotPreferencesSchema = {
     properties: {
         [exports.COPILOT_ENABLED_PREF]: {
             type: 'boolean',
             typeDetails: { [ai_core_preferences_1.MODEL_PROVIDER_TYPE_DETAIL]: { label: 'GitHub Copilot' } },
             markdownDescription: core_1.nls.localize('theia/ai/copilot/enabled/mdDescription', 'Enable the GitHub Copilot provider. When enabled, a status bar entry '
-                + 'appears for authentication and available models are discovered from your Copilot subscription.'),
+                + 'appears for authentication and available models are discovered from your Copilot subscription.\n\n'
+                + 'Requests are routed through the official GitHub Copilot CLI, which runs as a background process on the '
+                + 'machine hosting the backend. It is given the credentials of your Copilot sign-in and nothing else, so a '
+                + 'token in the environment or an existing sign-in of the GitHub CLI is not used.'),
             title: ai_core_preferences_1.AI_CORE_PREFERENCES_TITLE,
-            default: true
+            default: true,
+            tags: ['experimental']
         },
         [exports.COPILOT_MODEL_OVERRIDES_PREF]: {
             type: 'array',
@@ -40,13 +45,26 @@ exports.CopilotPreferencesSchema = {
             default: [],
             items: {
                 type: 'string'
-            }
+            },
+            tags: ['experimental']
         },
         [exports.COPILOT_ENTERPRISE_URL_PREF]: {
             type: 'string',
-            markdownDescription: core_1.nls.localize('theia/ai/copilot/enterpriseUrl/mdDescription', 'GitHub Enterprise domain for Copilot API (e.g., `github.mycompany.com`). Leave empty for GitHub.com.'),
+            markdownDescription: core_1.nls.localize('theia/ai/copilot/enterpriseUrl/mdDescription', 'GitHub Enterprise domain to authenticate and send requests against (e.g., `github.mycompany.com`). '
+                + 'Leave empty for GitHub.com.'),
             title: ai_core_preferences_1.AI_CORE_PREFERENCES_TITLE,
-            default: ''
+            default: '',
+            tags: ['experimental']
+        },
+        [exports.COPILOT_EXECUTABLE_PATH_PREF]: {
+            type: 'string',
+            markdownDescription: core_1.nls.localize('theia/ai/copilot/executablePath/mdDescription', 'Location of the GitHub Copilot CLI executable on the machine hosting the backend. '
+                + 'When empty (default), the CLI is searched for in the installation of the application, on the `PATH` '
+                + 'and in the global `npm` directory. Set this when the CLI is installed somewhere else.\n\n'
+                + 'The CLI is not shipped with the application, install it with `npm install -g @github/copilot`.'),
+            title: ai_core_preferences_1.AI_CORE_PREFERENCES_TITLE,
+            default: '',
+            tags: ['experimental']
         }
     }
 };

package/lib/common/copilot-preferences.js.map

@@ -1 +1 @@
-{"version":3,"file":"copilot-preferences.js","sourceRoot":"","sources":["../../src/common/copilot-preferences.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,yCAAyC;AACzC,EAAE;AACF,2EAA2E;AAC3E,mEAAmE;AACnE,wCAAwC;AACxC,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,yDAAyD;AACzD,uDAAuD;AACvD,EAAE;AACF,gFAAgF;AAChF,gFAAgF;;;AAEhF,uFAA+I;AAC/I,sCAAoD;AAEvC,QAAA,oBAAoB,GAAG,6BAA6B,CAAC;AACrD,QAAA,4BAA4B,GAAG,oCAAoC,CAAC;AACpE,QAAA,2BAA2B,GAAG,mCAAmC,CAAC;AAElE,QAAA,wBAAwB,GAAqB;IACtD,UAAU,EAAE;QACR,CAAC,4BAAoB,CAAC,EAAE;YACpB,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,EAAE,CAAC,gDAA0B,CAAC,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAoC,EAAE;YAC5G,mBAAmB,EAAE,UAAG,CAAC,QAAQ,CAAC,wCAAwC,EACtE,uEAAuE;kBACrE,gGAAgG,CAAC;YACvG,KAAK,EAAE,+CAAyB;YAChC,OAAO,EAAE,IAAI;SAChB;QACD,CAAC,oCAA4B,CAAC,EAAE;YAC5B,IAAI,EAAE,OAAO;YACb,mBAAmB,EAAE,UAAG,CAAC,QAAQ,CAAC,+CAA+C,EAC7E,+DAA+D;kBAC7D,wFAAwF;kBACxF,oDAAoD,CAAC;YAC3D,KAAK,EAAE,+CAAyB;YAChC,OAAO,EAAE,EAAE;YACX,KAAK,EAAE;gBACH,IAAI,EAAE,QAAQ;aACjB;SACJ;QACD,CAAC,mCAA2B,CAAC,EAAE;YAC3B,IAAI,EAAE,QAAQ;YACd,mBAAmB,EAAE,UAAG,CAAC,QAAQ,CAAC,8CAA8C,EAC5E,sGAAsG,CAAC;YAC3G,KAAK,EAAE,+CAAyB;YAChC,OAAO,EAAE,EAAE;SACd;KACJ;CACJ,CAAC"}
+{"version":3,"file":"copilot-preferences.js","sourceRoot":"","sources":["../../src/common/copilot-preferences.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,yCAAyC;AACzC,EAAE;AACF,2EAA2E;AAC3E,mEAAmE;AACnE,wCAAwC;AACxC,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,yDAAyD;AACzD,uDAAuD;AACvD,EAAE;AACF,gFAAgF;AAChF,gFAAgF;;;AAEhF,uFAA+I;AAC/I,sCAAoD;AAEvC,QAAA,oBAAoB,GAAG,6BAA6B,CAAC;AACrD,QAAA,4BAA4B,GAAG,oCAAoC,CAAC;AACpE,QAAA,2BAA2B,GAAG,mCAAmC,CAAC;AAClE,QAAA,4BAA4B,GAAG,oCAAoC,CAAC;AAEpE,QAAA,wBAAwB,GAAqB;IACtD,UAAU,EAAE;QACR,CAAC,4BAAoB,CAAC,EAAE;YACpB,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,EAAE,CAAC,gDAA0B,CAAC,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAoC,EAAE;YAC5G,mBAAmB,EAAE,UAAG,CAAC,QAAQ,CAAC,wCAAwC,EACtE,uEAAuE;kBACrE,oGAAoG;kBACpG,yGAAyG;kBACzG,0GAA0G;kBAC1G,gFAAgF,CAAC;YACvF,KAAK,EAAE,+CAAyB;YAChC,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,CAAC,cAAc,CAAC;SACzB;QACD,CAAC,oCAA4B,CAAC,EAAE;YAC5B,IAAI,EAAE,OAAO;YACb,mBAAmB,EAAE,UAAG,CAAC,QAAQ,CAAC,+CAA+C,EAC7E,+DAA+D;kBAC7D,wFAAwF;kBACxF,oDAAoD,CAAC;YAC3D,KAAK,EAAE,+CAAyB;YAChC,OAAO,EAAE,EAAE;YACX,KAAK,EAAE;gBACH,IAAI,EAAE,QAAQ;aACjB;YACD,IAAI,EAAE,CAAC,cAAc,CAAC;SACzB;QACD,CAAC,mCAA2B,CAAC,EAAE;YAC3B,IAAI,EAAE,QAAQ;YACd,mBAAmB,EAAE,UAAG,CAAC,QAAQ,CAAC,8CAA8C,EAC5E,qGAAqG;kBACnG,6BAA6B,CAAC;YACpC,KAAK,EAAE,+CAAyB;YAChC,OAAO,EAAE,EAAE;YACX,IAAI,EAAE,CAAC,cAAc,CAAC;SACzB;QACD,CAAC,oCAA4B,CAAC,EAAE;YAC5B,IAAI,EAAE,QAAQ;YACd,mBAAmB,EAAE,UAAG,CAAC,QAAQ,CAAC,+CAA+C,EAC7E,oFAAoF;kBAClF,sGAAsG;kBACtG,2FAA2F;kBAC3F,gGAAgG,CAAC;YACvG,KAAK,EAAE,+CAAyB;YAChC,OAAO,EAAE,EAAE;YACX,IAAI,EAAE,CAAC,cAAc,CAAC;SACzB;KACJ;CACJ,CAAC"}

package/lib/common/index.d.ts

@@ -1,5 +1,4 @@
 export * from './copilot-language-models-manager';
 export * from './copilot-auth-service';
-export * from './copilot-oauth-config';
 export * from './copilot-preferences';
 //# sourceMappingURL=index.d.ts.map

package/lib/common/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/common/index.ts"],"names":[],"mappings":"AAgBA,cAAc,mCAAmC,CAAC;AAClD,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/common/index.ts"],"names":[],"mappings":"AAgBA,cAAc,mCAAmC,CAAC;AAClD,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC"}

package/lib/common/index.js

@@ -18,6 +18,5 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
 tslib_1.__exportStar(require("./copilot-language-models-manager"), exports);
 tslib_1.__exportStar(require("./copilot-auth-service"), exports);
-tslib_1.__exportStar(require("./copilot-oauth-config"), exports);
 tslib_1.__exportStar(require("./copilot-preferences"), exports);
 //# sourceMappingURL=index.js.map

package/lib/common/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/common/index.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,yCAAyC;AACzC,EAAE;AACF,2EAA2E;AAC3E,mEAAmE;AACnE,wCAAwC;AACxC,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,yDAAyD;AACzD,uDAAuD;AACvD,EAAE;AACF,gFAAgF;AAChF,gFAAgF;;;AAEhF,4EAAkD;AAClD,iEAAuC;AACvC,iEAAuC;AACvC,gEAAsC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/common/index.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,yCAAyC;AACzC,EAAE;AACF,2EAA2E;AAC3E,mEAAmE;AACnE,wCAAwC;AACxC,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,yDAAyD;AACzD,uDAAuD;AACvD,EAAE;AACF,gFAAgF;AAChF,gFAAgF;;;AAEhF,4EAAkD;AAClD,iEAAuC;AACvC,gEAAsC"}

package/lib/node/copilot-auth-service-impl.d.ts

@@ -1,31 +1,40 @@
 import { Emitter, Event, ILogger } from '@theia/core';
-import { KeyStoreService } from '@theia/core/lib/common/key-store';
 import { CopilotAuthService, CopilotAuthServiceClient, CopilotAuthState, DeviceCodeResponse } from '../common/copilot-auth-service';
-import { CopilotOAuthConfig } from '../common/copilot-oauth-config';
+import { CopilotCliAuthProvider } from './copilot-cli-auth-provider';
+import { CopilotCliLocator } from './copilot-cli-locator';
+import { CopilotCredentialStore } from './copilot-credential-store';
 /**
- * Backend implementation of the GitHub Copilot OAuth Device Flow authentication service.
- * Handles device code generation, token polling, and credential storage.
+ * Backend implementation of the GitHub Copilot authentication service.
+ *
+ * All Copilot requests are served by the official Copilot CLI, which owns its credentials, so this
+ * service only drives the sign-in of the CLI and reports its state, see {@link CopilotCliAuthProvider}.
  */
 export declare class CopilotAuthServiceImpl implements CopilotAuthService {
-    protected readonly keyStoreService: KeyStoreService;
+    protected readonly cliAuthProvider: CopilotCliAuthProvider;
+    protected readonly credentialStore: CopilotCredentialStore;
+    protected readonly cliLocator: CopilotCliLocator;
     protected readonly logger: ILogger;
-    protected readonly oauthConfig: CopilotOAuthConfig;
     protected client: CopilotAuthServiceClient | undefined;
     protected cachedState: CopilotAuthState | undefined;
+    protected migrationRequired: boolean;
+    protected legacyCleanup: Promise<void>;
+    protected init(): void;
     protected readonly onAuthStateChangedEmitter: Emitter<CopilotAuthState>;
     readonly onAuthStateChanged: Event<CopilotAuthState>;
     setClient(client: CopilotAuthServiceClient | undefined): void;
-    protected getOAuthEndpoints(enterpriseUrl?: string): {
-        deviceCodeUrl: string;
-        accessTokenUrl: string;
-    };
-    initiateDeviceFlow(enterpriseUrl?: string): Promise<DeviceCodeResponse>;
-    pollForToken(deviceCode: string, interval: number, enterpriseUrl?: string): Promise<boolean>;
-    protected fetchAccountLabel(accessToken: string, enterpriseUrl?: string): Promise<string | undefined>;
-    getAuthState(): Promise<CopilotAuthState>;
-    getAccessToken(): Promise<string | undefined>;
+    setExecutablePath(path: string | undefined): Promise<void>;
+    startSignIn(enterpriseUrl?: string): Promise<DeviceCodeResponse>;
+    waitForSignIn(): Promise<boolean>;
+    cancelSignIn(): Promise<void>;
     signOut(): Promise<void>;
+    getAuthState(): Promise<CopilotAuthState>;
+    /**
+     * The state as it currently is, with the request for a new sign-in attached when the credentials
+     * of the previous integration had to be discarded and none have been established since.
+     *
+     * Does not await the cleanup, so that it can be used from it.
+     */
+    protected computeAuthState(): Promise<CopilotAuthState>;
     protected updateAuthState(state: CopilotAuthState): void;
-    protected delay(ms: number): Promise<void>;
 }
 //# sourceMappingURL=copilot-auth-service-impl.d.ts.map

package/lib/node/copilot-auth-service-impl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"copilot-auth-service-impl.d.ts","sourceRoot":"","sources":["../../src/node/copilot-auth-service-impl.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EACH,kBAAkB,EAClB,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,EACrB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAiBpE;;;GAGG;AACH,qBACa,sBAAuB,YAAW,kBAAkB;IAG7D,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAGpD,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAGnC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IAEnD,SAAS,CAAC,MAAM,EAAE,wBAAwB,GAAG,SAAS,CAAC;IACvD,SAAS,CAAC,WAAW,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAEpD,SAAS,CAAC,QAAQ,CAAC,yBAAyB,4BAAmC;IAC/E,QAAQ,CAAC,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAwC;IAE5F,SAAS,CAAC,MAAM,EAAE,wBAAwB,GAAG,SAAS,GAAG,IAAI;IAI7D,SAAS,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE;IAgBhG,kBAAkB,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAyBvE,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;cAsFlF,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAwBrG,YAAY,IAAI,OAAO,CAAC,gBAAgB,CAAC;IA+BzC,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAa7C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAW9B,SAAS,CAAC,eAAe,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;IAMxD,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG7C"}
+{"version":3,"file":"copilot-auth-service-impl.d.ts","sourceRoot":"","sources":["../../src/node/copilot-auth-service-impl.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACH,kBAAkB,EAClB,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,EACrB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEpE;;;;;GAKG;AACH,qBACa,sBAAuB,YAAW,kBAAkB;IAG7D,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAC;IAG3D,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAC;IAG3D,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IAGjD,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAEnC,SAAS,CAAC,MAAM,EAAE,wBAAwB,GAAG,SAAS,CAAC;IACvD,SAAS,CAAC,WAAW,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACpD,SAAS,CAAC,iBAAiB,UAAS;IACpC,SAAS,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAGvC,SAAS,CAAC,IAAI,IAAI,IAAI;IAYtB,SAAS,CAAC,QAAQ,CAAC,yBAAyB,4BAAmC;IAC/E,QAAQ,CAAC,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAwC;IAE5F,SAAS,CAAC,MAAM,EAAE,wBAAwB,GAAG,SAAS,GAAG,IAAI;IAIvD,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1D,WAAW,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIhE,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC;IASjC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAMxB,YAAY,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAW/C;;;;;OAKG;cACa,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAK7D,SAAS,CAAC,eAAe,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;CAK3D"}

package/lib/node/copilot-auth-service-impl.js

@@ -19,223 +19,107 @@ exports.CopilotAuthServiceImpl = void 0;
 const tslib_1 = require("tslib");
 const inversify_1 = require("@theia/core/shared/inversify");
 const core_1 = require("@theia/core");
-const key_store_1 = require("@theia/core/lib/common/key-store");
-const copilot_oauth_config_1 = require("../common/copilot-oauth-config");
-const COPILOT_SCOPE = 'read:user';
-const COPILOT_GRANT_TYPE = 'urn:ietf:params:oauth:grant-type:device_code';
+const copilot_cli_auth_provider_1 = require("./copilot-cli-auth-provider");
+const copilot_cli_locator_1 = require("./copilot-cli-locator");
+const copilot_credential_store_1 = require("./copilot-credential-store");
 /**
- * Maximum number of polling attempts for token retrieval.
- * With a default 5-second interval, this allows approximately 5 minutes of polling.
- */
-const MAX_POLLING_ATTEMPTS = 60;
-/**
- * Backend implementation of the GitHub Copilot OAuth Device Flow authentication service.
- * Handles device code generation, token polling, and credential storage.
+ * Backend implementation of the GitHub Copilot authentication service.
+ *
+ * All Copilot requests are served by the official Copilot CLI, which owns its credentials, so this
+ * service only drives the sign-in of the CLI and reports its state, see {@link CopilotCliAuthProvider}.
  */
 let CopilotAuthServiceImpl = class CopilotAuthServiceImpl {
     constructor() {
+        this.migrationRequired = false;
         this.onAuthStateChangedEmitter = new core_1.Emitter();
         this.onAuthStateChanged = this.onAuthStateChangedEmitter.event;
     }
+    init() {
+        // The previous integration signed in with an OAuth application of its own and stored a token
+        // that is of no use here. Remove it instead of leaving it on the machine of the user.
+        this.legacyCleanup = this.credentialStore.deleteLegacy().then(async (removed) => {
+            this.migrationRequired = removed;
+            if (removed) {
+                this.logger.info('Copilot: discarded the sign-in of the previous integration, a new sign-in is required.');
+                this.updateAuthState(await this.computeAuthState());
+            }
+        }, error => this.logger.warn('Copilot: failed to clean up the previous sign-in:', error));
+    }
     setClient(client) {
         this.client = client;
     }
-    getOAuthEndpoints(enterpriseUrl) {
-        if (enterpriseUrl) {
-            const domain = enterpriseUrl
-                .replace(/^https?:\/\//, '')
-                .replace(/\/$/, '');
-            return {
-                deviceCodeUrl: `https://${domain}/login/device/code`,
-                accessTokenUrl: `https://${domain}/login/oauth/access_token`
-            };
-        }
-        return {
-            deviceCodeUrl: 'https://github.com/login/device/code',
-            accessTokenUrl: 'https://github.com/login/oauth/access_token'
-        };
+    async setExecutablePath(path) {
+        this.cliLocator.setConfiguredPath(path);
     }
-    async initiateDeviceFlow(enterpriseUrl) {
-        const endpoints = this.getOAuthEndpoints(enterpriseUrl);
-        const response = await fetch(endpoints.deviceCodeUrl, {
-            method: 'POST',
-            headers: {
-                'Accept': 'application/json',
-                'Content-Type': 'application/json',
-                'User-Agent': this.oauthConfig.userAgent
-            },
-            body: JSON.stringify({
-                client_id: this.oauthConfig.clientId,
-                scope: COPILOT_SCOPE
-            })
-        });
-        if (!response.ok) {
-            const errorText = await response.text();
-            throw new Error(`Failed to initiate device authorization: ${response.status} - ${errorText}`);
-        }
-        const data = await response.json();
-        return data;
+    async startSignIn(enterpriseUrl) {
+        return this.cliAuthProvider.startLogin(enterpriseUrl);
     }
-    async pollForToken(deviceCode, interval, enterpriseUrl) {
-        const endpoints = this.getOAuthEndpoints(enterpriseUrl);
-        let attempts = 0;
-        while (attempts < MAX_POLLING_ATTEMPTS) {
-            await this.delay(interval * 1000);
-            attempts++;
-            const response = await fetch(endpoints.accessTokenUrl, {
-                method: 'POST',
-                headers: {
-                    'Accept': 'application/json',
-                    'Content-Type': 'application/json',
-                    'User-Agent': this.oauthConfig.userAgent
-                },
-                body: JSON.stringify({
-                    client_id: this.oauthConfig.clientId,
-                    device_code: deviceCode,
-                    grant_type: COPILOT_GRANT_TYPE
-                })
-            });
-            if (!response.ok) {
-                this.logger.error(`Token request failed: ${response.status}`);
-                continue;
-            }
-            const data = await response.json();
-            if (data.access_token) {
-                // Get user info for account label
-                const accountLabel = await this.fetchAccountLabel(data.access_token, enterpriseUrl);
-                // Store credentials
-                const credentials = {
-                    accessToken: data.access_token,
-                    accountLabel,
-                    enterpriseUrl
-                };
-                await this.keyStoreService.setPassword(this.oauthConfig.keystoreService, this.oauthConfig.keystoreAccount, JSON.stringify(credentials));
-                // Update cached state and notify
-                const newState = {
-                    isAuthenticated: true,
-                    accountLabel,
-                    enterpriseUrl
-                };
-                this.updateAuthState(newState);
-                return true;
-            }
-            if (data.error === 'authorization_pending') {
-                // User hasn't authorized yet, continue polling
-                continue;
-            }
-            if (data.error === 'slow_down') {
-                // Increase polling interval
-                interval += 5;
-                continue;
-            }
-            if (data.error === 'expired_token' || data.error === 'access_denied') {
-                this.logger.error(`Authorization failed: ${data.error} - ${data.error_description}`);
-                return false;
-            }
-            if (data.error) {
-                this.logger.error(`Unexpected error: ${data.error} - ${data.error_description}`);
-                return false;
-            }
+    async waitForSignIn() {
+        const success = await this.cliAuthProvider.waitForLogin();
+        if (success) {
+            this.cachedState = undefined;
+            this.updateAuthState(await this.cliAuthProvider.getAuthState());
         }
-        return false;
+        return success;
     }
-    async fetchAccountLabel(accessToken, enterpriseUrl) {
-        try {
-            const apiBaseUrl = enterpriseUrl
-                ? `https://${enterpriseUrl.replace(/^https?:\/\//, '').replace(/\/$/, '')}/api/v3`
-                : 'https://api.github.com';
-            const response = await fetch(`${apiBaseUrl}/user`, {
-                headers: {
-                    'Authorization': `Bearer ${accessToken}`,
-                    'User-Agent': this.oauthConfig.userAgent,
-                    'Accept': 'application/vnd.github.v3+json'
-                }
-            });
-            if (response.ok) {
-                const userData = await response.json();
-                return userData.login;
-            }
-        }
-        catch (error) {
-            this.logger.warn('Failed to fetch GitHub user info:', error);
-        }
-        return undefined;
+    async cancelSignIn() {
+        await this.cliAuthProvider.cancelLogin();
+    }
+    async signOut() {
+        await this.cliAuthProvider.signOut();
+        this.cachedState = undefined;
+        this.updateAuthState(await this.getAuthState());
     }
     async getAuthState() {
-        if (this.cachedState) {
-            return this.cachedState;
-        }
-        try {
-            const stored = await this.keyStoreService.getPassword(this.oauthConfig.keystoreService, this.oauthConfig.keystoreAccount);
-            if (stored) {
-                const credentials = JSON.parse(stored);
-                // Tokens from the current OAuth App start with 'gho_'; other prefixes (e.g. 'ghu_') indicate a token from the previous GitHub App (Iv-prefixed client ID).
-                if (!credentials.accessToken.startsWith('gho_')) {
-                    this.logger.info('Copilot: clearing outdated GitHub App token. Please sign in again.');
-                    await this.keyStoreService.deletePassword(this.oauthConfig.keystoreService, this.oauthConfig.keystoreAccount);
-                    this.cachedState = { isAuthenticated: false, migrationRequired: true };
-                    return this.cachedState;
-                }
-                this.cachedState = {
-                    isAuthenticated: true,
-                    accountLabel: credentials.accountLabel,
-                    enterpriseUrl: credentials.enterpriseUrl
-                };
-                return this.cachedState;
-            }
-        }
-        catch (error) {
-            this.logger.warn('Failed to retrieve Copilot credentials:', error);
+        // Awaited so that a state requested early cannot be cached without the migration flag, which
+        // is the only thing that tells the user why they were signed out. The frontend evaluates it
+        // once at startup, so losing it there means losing it altogether.
+        await this.legacyCleanup;
+        if (!this.cachedState) {
+            this.cachedState = await this.computeAuthState();
         }
-        this.cachedState = { isAuthenticated: false };
         return this.cachedState;
     }
-    async getAccessToken() {
-        try {
-            const stored = await this.keyStoreService.getPassword(this.oauthConfig.keystoreService, this.oauthConfig.keystoreAccount);
-            if (stored) {
-                const credentials = JSON.parse(stored);
-                return credentials.accessToken;
-            }
-        }
-        catch (error) {
-            this.logger.warn('Failed to retrieve Copilot access token:', error);
-        }
-        return undefined;
-    }
-    async signOut() {
-        try {
-            await this.keyStoreService.deletePassword(this.oauthConfig.keystoreService, this.oauthConfig.keystoreAccount);
-        }
-        catch (error) {
-            this.logger.warn('Failed to delete Copilot credentials:', error);
-        }
-        const newState = { isAuthenticated: false };
-        this.updateAuthState(newState);
+    /**
+     * The state as it currently is, with the request for a new sign-in attached when the credentials
+     * of the previous integration had to be discarded and none have been established since.
+     *
+     * Does not await the cleanup, so that it can be used from it.
+     */
+    async computeAuthState() {
+        const state = await this.cliAuthProvider.getAuthState();
+        return state.isAuthenticated || !this.migrationRequired ? state : { ...state, migrationRequired: true };
     }
     updateAuthState(state) {
         this.cachedState = state;
         this.onAuthStateChangedEmitter.fire(state);
         this.client?.onAuthStateChanged(state);
     }
-    delay(ms) {
-        return new Promise(resolve => setTimeout(resolve, ms));
-    }
 };
 exports.CopilotAuthServiceImpl = CopilotAuthServiceImpl;
 tslib_1.__decorate([
-    (0, inversify_1.inject)(key_store_1.KeyStoreService),
-    tslib_1.__metadata("design:type", Object)
-], CopilotAuthServiceImpl.prototype, "keyStoreService", void 0);
+    (0, inversify_1.inject)(copilot_cli_auth_provider_1.CopilotCliAuthProvider),
+    tslib_1.__metadata("design:type", copilot_cli_auth_provider_1.CopilotCliAuthProvider)
+], CopilotAuthServiceImpl.prototype, "cliAuthProvider", void 0);
+tslib_1.__decorate([
+    (0, inversify_1.inject)(copilot_credential_store_1.CopilotCredentialStore),
+    tslib_1.__metadata("design:type", copilot_credential_store_1.CopilotCredentialStore)
+], CopilotAuthServiceImpl.prototype, "credentialStore", void 0);
+tslib_1.__decorate([
+    (0, inversify_1.inject)(copilot_cli_locator_1.CopilotCliLocator),
+    tslib_1.__metadata("design:type", copilot_cli_locator_1.CopilotCliLocator)
+], CopilotAuthServiceImpl.prototype, "cliLocator", void 0);
 tslib_1.__decorate([
     (0, inversify_1.inject)(core_1.ILogger),
     (0, inversify_1.named)('ai-copilot:CopilotAuthServiceImpl'),
     tslib_1.__metadata("design:type", Object)
 ], CopilotAuthServiceImpl.prototype, "logger", void 0);
 tslib_1.__decorate([
-    (0, inversify_1.inject)(copilot_oauth_config_1.CopilotOAuthConfig),
-    tslib_1.__metadata("design:type", Object)
-], CopilotAuthServiceImpl.prototype, "oauthConfig", void 0);
+    (0, inversify_1.postConstruct)(),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", []),
+    tslib_1.__metadata("design:returntype", void 0)
+], CopilotAuthServiceImpl.prototype, "init", null);
 exports.CopilotAuthServiceImpl = CopilotAuthServiceImpl = tslib_1.__decorate([
     (0, inversify_1.injectable)()
 ], CopilotAuthServiceImpl);

package/lib/node/copilot-auth-service-impl.js.map

@@ -1 +1 @@
-{"version":3,"file":"copilot-auth-service-impl.js","sourceRoot":"","sources":["../../src/node/copilot-auth-service-impl.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,yCAAyC;AACzC,EAAE;AACF,2EAA2E;AAC3E,mEAAmE;AACnE,wCAAwC;AACxC,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,yDAAyD;AACzD,uDAAuD;AACvD,EAAE;AACF,gFAAgF;AAChF,gFAAgF;;;;AAEhF,4DAAyE;AACzE,sCAAsD;AACtD,gEAAmE;AAOnE,yEAAoE;AAEpE,MAAM,aAAa,GAAG,WAAW,CAAC;AAClC,MAAM,kBAAkB,GAAG,8CAA8C,CAAC;AAE1E;;;GAGG;AACH,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAQhC;;;GAGG;AAEI,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAA5B;QAcgB,8BAAyB,GAAG,IAAI,cAAO,EAAoB,CAAC;QACtE,uBAAkB,GAA4B,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC;IA6NhG,CAAC;IA3NG,SAAS,CAAC,MAA4C;QAClD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAES,iBAAiB,CAAC,aAAsB;QAC9C,IAAI,aAAa,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,aAAa;iBACvB,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;iBAC3B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACxB,OAAO;gBACH,aAAa,EAAE,WAAW,MAAM,oBAAoB;gBACpD,cAAc,EAAE,WAAW,MAAM,2BAA2B;aAC/D,CAAC;QACN,CAAC;QACD,OAAO;YACH,aAAa,EAAE,sCAAsC;YACrD,cAAc,EAAE,6CAA6C;SAChE,CAAC;IACN,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,aAAsB;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QAExD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,aAAa,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS;aAC3C;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACjB,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ;gBACpC,KAAK,EAAE,aAAa;aACvB,CAAC;SACL,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,4CAA4C,QAAQ,CAAC,MAAM,MAAM,SAAS,EAAE,CAAC,CAAC;QAClG,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAwB,CAAC;QACzD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAkB,EAAE,QAAgB,EAAE,aAAsB;QAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACxD,IAAI,QAAQ,GAAG,CAAC,CAAC;QAEjB,OAAO,QAAQ,GAAG,oBAAoB,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;YAClC,QAAQ,EAAE,CAAC;YAEX,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE;gBACnD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,QAAQ,EAAE,kBAAkB;oBAC5B,cAAc,EAAE,kBAAkB;oBAClC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS;iBAC3C;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACjB,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ;oBACpC,WAAW,EAAE,UAAU;oBACvB,UAAU,EAAE,kBAAkB;iBACjC,CAAC;aACL,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC9D,SAAS;YACb,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAI/B,CAAC;YAEF,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpB,kCAAkC;gBAClC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;gBAEpF,oBAAoB;gBACpB,MAAM,WAAW,GAAsB;oBACnC,WAAW,EAAE,IAAI,CAAC,YAAY;oBAC9B,YAAY;oBACZ,aAAa;iBAChB,CAAC;gBAEF,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,CAClC,IAAI,CAAC,WAAW,CAAC,eAAe,EAChC,IAAI,CAAC,WAAW,CAAC,eAAe,EAChC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAC9B,CAAC;gBAEF,iCAAiC;gBACjC,MAAM,QAAQ,GAAqB;oBAC/B,eAAe,EAAE,IAAI;oBACrB,YAAY;oBACZ,aAAa;iBAChB,CAAC;gBACF,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;gBAE/B,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;gBACzC,+CAA+C;gBAC/C,SAAS;YACb,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC7B,4BAA4B;gBAC5B,QAAQ,IAAI,CAAC,CAAC;gBACd,SAAS;YACb,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,KAAK,eAAe,IAAI,IAAI,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;gBACnE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;gBACrF,OAAO,KAAK,CAAC;YACjB,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;gBACjF,OAAO,KAAK,CAAC;YACjB,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAES,KAAK,CAAC,iBAAiB,CAAC,WAAmB,EAAE,aAAsB;QACzE,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,aAAa;gBAC5B,CAAC,CAAC,WAAW,aAAa,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS;gBAClF,CAAC,CAAC,wBAAwB,CAAC;YAE/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,OAAO,EAAE;gBAC/C,OAAO,EAAE;oBACL,eAAe,EAAE,UAAU,WAAW,EAAE;oBACxC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS;oBACxC,QAAQ,EAAE,gCAAgC;iBAC7C;aACJ,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACd,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAwB,CAAC;gBAC7D,OAAO,QAAQ,CAAC,KAAK,CAAC;YAC1B,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,YAAY;QACd,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,WAAW,CAAC;QAC5B,CAAC;QAED,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;YAC1H,IAAI,MAAM,EAAE,CAAC;gBACT,MAAM,WAAW,GAAsB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC1D,2JAA2J;gBAC3J,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;oBACvF,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;oBAC9G,IAAI,CAAC,WAAW,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;oBACvE,OAAO,IAAI,CAAC,WAAW,CAAC;gBAC5B,CAAC;gBACD,IAAI,CAAC,WAAW,GAAG;oBACf,eAAe,EAAE,IAAI;oBACrB,YAAY,EAAE,WAAW,CAAC,YAAY;oBACtC,aAAa,EAAE,WAAW,CAAC,aAAa;iBAC3C,CAAC;gBACF,OAAO,IAAI,CAAC,WAAW,CAAC;YAC5B,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,cAAc;QAChB,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;YAC1H,IAAI,MAAM,EAAE,CAAC;gBACT,MAAM,WAAW,GAAsB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC1D,OAAO,WAAW,CAAC,WAAW,CAAC;YACnC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,OAAO;QACT,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QAClH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,QAAQ,GAAqB,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QAC9D,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAES,eAAe,CAAC,KAAuB;QAC7C,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAES,KAAK,CAAC,EAAU;QACtB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;CACJ,CAAA;AA5OY,wDAAsB;AAGZ;IADlB,IAAA,kBAAM,EAAC,2BAAe,CAAC;;+DAC4B;AAGjC;IADlB,IAAA,kBAAM,EAAC,cAAO,CAAC;IAAE,IAAA,iBAAK,EAAC,mCAAmC,CAAC;;sDACzB;AAGhB;IADlB,IAAA,kBAAM,EAAC,yCAAkB,CAAC;;2DACwB;iCAT1C,sBAAsB;IADlC,IAAA,sBAAU,GAAE;GACA,sBAAsB,CA4OlC"}
+{"version":3,"file":"copilot-auth-service-impl.js","sourceRoot":"","sources":["../../src/node/copilot-auth-service-impl.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,yCAAyC;AACzC,EAAE;AACF,2EAA2E;AAC3E,mEAAmE;AACnE,wCAAwC;AACxC,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,yDAAyD;AACzD,uDAAuD;AACvD,EAAE;AACF,gFAAgF;AAChF,gFAAgF;;;;AAEhF,4DAAwF;AACxF,sCAAsD;AAOtD,2EAAqE;AACrE,+DAA0D;AAC1D,yEAAoE;AAEpE;;;;;GAKG;AAEI,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAA5B;QAgBO,sBAAiB,GAAG,KAAK,CAAC;QAgBjB,8BAAyB,GAAG,IAAI,cAAO,EAAoB,CAAC;QACtE,uBAAkB,GAA4B,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC;IA4DhG,CAAC;IAzEa,IAAI;QACV,6FAA6F;QAC7F,sFAAsF;QACtF,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE;YAC1E,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC;YACjC,IAAI,OAAO,EAAE,CAAC;gBACV,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;gBAC3G,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;YACxD,CAAC;QACL,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9F,CAAC;IAKD,SAAS,CAAC,MAA4C;QAClD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,IAAwB;QAC5C,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAsB;QACpC,OAAO,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,aAAa;QACf,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC;QAC1D,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;YAC7B,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,YAAY;QACd,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,OAAO;QACT,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,YAAY;QACd,6FAA6F;QAC7F,4FAA4F;QAC5F,kEAAkE;QAClE,MAAM,IAAI,CAAC,aAAa,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrD,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED;;;;;OAKG;IACO,KAAK,CAAC,gBAAgB;QAC5B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;IAC5G,CAAC;IAES,eAAe,CAAC,KAAuB;QAC7C,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;CACJ,CAAA;AA7FY,wDAAsB;AAGZ;IADlB,IAAA,kBAAM,EAAC,kDAAsB,CAAC;sCACK,kDAAsB;+DAAC;AAGxC;IADlB,IAAA,kBAAM,EAAC,iDAAsB,CAAC;sCACK,iDAAsB;+DAAC;AAGxC;IADlB,IAAA,kBAAM,EAAC,uCAAiB,CAAC;sCACK,uCAAiB;0DAAC;AAG9B;IADlB,IAAA,kBAAM,EAAC,cAAO,CAAC;IAAE,IAAA,iBAAK,EAAC,mCAAmC,CAAC;;sDACzB;AAQzB;IADT,IAAA,yBAAa,GAAE;;;;kDAWf;iCA9BQ,sBAAsB;IADlC,IAAA,sBAAU,GAAE;GACA,sBAAsB,CA6FlC"}