@theia/ai-copilot 1.75.0 → 1.76.0-next.10

package/lib/node/copilot-cli-auth-provider.js

@@ -0,0 +1,430 @@
+"use strict";
+// *****************************************************************************
+// Copyright (C) 2026 EclipseSource GmbH and others.
+//
+// This program and the accompanying materials are made available under the
+// terms of the Eclipse Public License v. 2.0 which is available at
+// http://www.eclipse.org/legal/epl-2.0.
+//
+// This Source Code may also be made available under the following Secondary
+// Licenses when the conditions for such availability set forth in the Eclipse
+// Public License v. 2.0 are satisfied: GNU General Public License, version 2
+// with the GNU Classpath Exception which is available at
+// https://www.gnu.org/software/classpath/license.html.
+//
+// SPDX-License-Identifier: EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0
+// *****************************************************************************
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CopilotCliAuthProvider = void 0;
+const tslib_1 = require("tslib");
+const child_process_1 = require("child_process");
+const fs_1 = require("fs");
+const os = require("os");
+const path_1 = require("path");
+const inversify_1 = require("@theia/core/shared/inversify");
+const promise_util_1 = require("@theia/core/lib/common/promise-util");
+const core_1 = require("@theia/core");
+const copilot_cli_locator_1 = require("./copilot-cli-locator");
+const copilot_credential_store_1 = require("./copilot-credential-store");
+const copilot_runtime_env_1 = require("./copilot-runtime-env");
+const copilot_sdk_client_provider_1 = require("./copilot-sdk-client-provider");
+/**
+ * Time after which a login that never reports a code is given up on.
+ */
+const LOGIN_CODE_TIMEOUT_MS = 30_000;
+/**
+ * Shape of the GitHub tokens the CLI persists, used to recognize one in the files it wrote.
+ */
+const TOKEN_PATTERN = /\bgh[a-z]_[A-Za-z0-9_]{16,}\b/;
+/**
+ * Upper bound for the files inspected for the token, so that a stray large file is not read.
+ */
+const MAX_INSPECTED_FILE_BYTES = 1024 * 1024;
+/**
+ * Authentication against GitHub Copilot, performed by the official Copilot CLI on our behalf.
+ *
+ * Access to the Copilot features is granted per OAuth application and the built-in Theia OAuth app
+ * is not entitled for them, whereas the Copilot CLI is. This provider therefore does not run an
+ * OAuth flow of its own but drives `copilot login --device-code` and reports its progress, so that
+ * the familiar sign-in dialog can be used.
+ *
+ * The credentials end up owned by this application rather than by the CLI: the login is run against
+ * a private, temporary Copilot home with the system keychain disabled, so that the CLI writes its
+ * token there instead of into the user's keyring. The token is then moved into
+ * {@link CopilotCredentialStore} and the temporary home is removed. Signing out consequently only
+ * has to delete our own entry, and never touches credentials of the user's machine such as their
+ * keyring entries or their GitHub CLI sign-in.
+ */
+let CopilotCliAuthProvider = class CopilotCliAuthProvider {
+    /**
+     * Stops a sign-in that is still in progress when the connection this provider belongs to closes.
+     * Unbinding a container runs `@preDestroy` rather than `dispose`, matching the client provider.
+     * Without this, the `copilot login` child process and the temporary home holding its token would
+     * be left behind.
+     */
+    stop() {
+        this.cancelLogin().catch(error => this.logger.warn('Copilot: failed to cancel the sign-in on shutdown:', error));
+    }
+    /**
+     * Starts `copilot login --device-code` and resolves once it reported the code the user has to
+     * enter. The process keeps running and polls GitHub itself until {@link waitForLogin} is awaited.
+     */
+    async startLogin(enterpriseUrl) {
+        await this.cancelLogin();
+        this.loginAccountLabel = undefined;
+        const args = ['login', '--device-code'];
+        if (enterpriseUrl) {
+            args.push('--host', this.toHostUrl(enterpriseUrl));
+        }
+        // Resolved before anything is written, so that a missing CLI does not leave a directory behind.
+        const cli = await this.cliLocator.resolve();
+        const home = await this.createLoginHome();
+        const noopBrowser = await this.createNoopBrowser(home);
+        this.loginHome = home;
+        this.loginEnterpriseUrl = enterpriseUrl;
+        // The device code flow is requested explicitly so that the CLI reports a code for the dialog
+        // instead of opening a browser on the backend host, which is not where the user is sitting.
+        const child = (0, child_process_1.spawn)(cli, args, {
+            stdio: ['ignore', 'pipe', 'pipe'],
+            env: this.createLoginEnv(home, noopBrowser)
+        });
+        this.loginProcess = child;
+        const result = new promise_util_1.Deferred();
+        this.loginResult = result;
+        // The outcome may settle before anyone awaits it, e.g. when the authorization is denied while
+        // the dialog still shows the code. Observe it here so that such a rejection is never unhandled;
+        // `waitForLogin` still sees the outcome through its own await of the same promise.
+        result.promise.catch(() => { });
+        const code = new promise_util_1.Deferred();
+        let output = '';
+        const onOutput = (chunk) => {
+            output += String(chunk);
+            const parsed = this.parseDeviceCode(output);
+            if (parsed) {
+                code.resolve(parsed);
+            }
+            this.loginAccountLabel = this.parseAccountLabel(output) ?? this.loginAccountLabel;
+        };
+        child.stdout?.on('data', onOutput);
+        child.stderr?.on('data', onOutput);
+        // A login that was given up on has no one waiting for its outcome anymore, and rejecting it
+        // would surface as an unhandled rejection. Only the login that is still the current one is
+        // reported to, because that is the one `waitForLogin` can be awaiting.
+        const rejectResult = (error) => {
+            if (this.loginResult === result) {
+                result.reject(error);
+            }
+        };
+        child.on('error', error => {
+            code.reject(error);
+            rejectResult(error);
+        });
+        child.on('close', exitCode => {
+            if (this.loginProcess === child) {
+                this.loginProcess = undefined;
+            }
+            if (exitCode === 0) {
+                code.reject(new Error('The Copilot CLI finished before reporting a device code.'));
+                result.resolve(true);
+            }
+            else {
+                const message = this.extractFailure(output) ?? `The Copilot CLI login exited with code ${exitCode}.`;
+                code.reject(new Error(message));
+                rejectResult(new Error(message));
+            }
+        });
+        const timeout = setTimeout(() => code.reject(new Error('Timed out waiting for the Copilot CLI to report a device code.')), LOGIN_CODE_TIMEOUT_MS);
+        try {
+            return await code.promise;
+        }
+        catch (error) {
+            await this.cancelLogin();
+            throw error;
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+    }
+    /**
+     * Waits for the login started by {@link startLogin} to complete.
+     * Resolves `false` when the authorization was denied or expired.
+     */
+    async waitForLogin() {
+        const result = this.loginResult;
+        const home = this.loginHome;
+        if (!result || !home) {
+            throw new Error(core_1.nls.localize('theia/ai/copilot/noLoginInProgress', 'No Copilot CLI login is in progress. Please start the sign-in again.'));
+        }
+        try {
+            if (!await result.promise) {
+                return false;
+            }
+            await this.storeCredentials(home);
+            return true;
+        }
+        finally {
+            this.loginResult = undefined;
+            this.loginHome = undefined;
+            // The token was moved into our own store, so the plain copy must not linger.
+            await this.removeLoginHome(home);
+            // The runtime caches the credentials it started with, so pick up the new ones.
+            await this.sdkClientProvider.reset();
+        }
+    }
+    /**
+     * Moves the token the CLI just persisted into our own credential store.
+     */
+    async storeCredentials(home) {
+        const token = await this.findStoredToken(home);
+        if (!token) {
+            throw new Error(core_1.nls.localize('theia/ai/copilot/tokenNotPersisted', 'The Copilot CLI reported a successful sign-in but did not persist a token where it was expected. '
+                + 'This can happen when the Copilot CLI changes how it stores credentials.'));
+        }
+        await this.credentialStore.set({
+            token,
+            accountLabel: this.loginAccountLabel,
+            enterpriseUrl: this.loginEnterpriseUrl
+        });
+    }
+    /**
+     * Terminates a login that is still in progress, if any.
+     *
+     * Resolves once the token the CLI may already have written has been removed again, so that a
+     * caller which cancels a sign-in can rely on nothing being left behind in plain text.
+     */
+    async cancelLogin() {
+        // Settle a login that may be awaited in `waitForLogin`, so that closing the dialog while it is
+        // still polling does not leave that request pending for the rest of the session.
+        this.loginResult?.resolve(false);
+        this.loginResult = undefined;
+        // Killing an already exited process is a no-op, so the state does not have to be tracked.
+        this.loginProcess?.kill();
+        this.loginProcess = undefined;
+        const home = this.loginHome;
+        this.loginHome = undefined;
+        if (home) {
+            await this.removeLoginHome(home);
+        }
+    }
+    /**
+     * Reports whether this application holds Copilot credentials.
+     *
+     * Deliberately based on our own store rather than on what the Copilot CLI reports: the CLI also
+     * accepts a token from the environment or the sign-in of the GitHub CLI, and neither of those is
+     * a sign-in of this application, so neither may make it appear signed in.
+     */
+    async getAuthState() {
+        const credentials = await this.credentialStore.get();
+        if (!credentials) {
+            return { isAuthenticated: false };
+        }
+        return {
+            isAuthenticated: true,
+            accountLabel: credentials.accountLabel,
+            enterpriseUrl: credentials.enterpriseUrl
+        };
+    }
+    /**
+     * Discards the credentials of this application. Nothing outside of it is touched.
+     */
+    async signOut() {
+        await this.cancelLogin();
+        await this.credentialStore.delete();
+        await this.sdkClientProvider.reset();
+    }
+    /**
+     * Creates the private Copilot home the login is run against.
+     */
+    async createLoginHome() {
+        const home = await fs_1.promises.mkdtemp((0, path_1.join)(os.tmpdir(), 'theia-copilot-login-'));
+        // With the keychain disabled, the CLI only persists the token when it is allowed to write it
+        // plainly. It lands in this private directory and is removed again right after it was taken over.
+        await fs_1.promises.writeFile((0, path_1.join)(home, 'settings.json'), JSON.stringify({ storeTokenPlaintext: true }, undefined, 2), 'utf8');
+        return home;
+    }
+    /**
+     * Writes the opener the CLI is pointed at instead of a real browser, and returns its path.
+     *
+     * The CLI opens a browser whenever it believes one is available, even for the device code flow, and
+     * prefers the command in `BROWSER` over the opener of the platform. Pointing it at a script that
+     * does nothing is therefore the reliable way to keep the flow in the dialog, where the user can read
+     * and copy the code. Opening a browser would also be wrong whenever the backend does not run on the
+     * user's own machine.
+     */
+    async createNoopBrowser(home) {
+        if (process.platform === 'win32') {
+            const batch = (0, path_1.join)(home, 'no-browser.cmd');
+            await fs_1.promises.writeFile(batch, '@exit /b 0\r\n', 'utf8');
+            return batch;
+        }
+        const shell = (0, path_1.join)(home, 'no-browser.sh');
+        await fs_1.promises.writeFile(shell, '#!/bin/sh\nexit 0\n', { encoding: 'utf8', mode: 0o755 });
+        return shell;
+    }
+    /**
+     * Removes the private Copilot home, including the token the CLI wrote into it.
+     */
+    async removeLoginHome(home) {
+        try {
+            await fs_1.promises.rm(home, { recursive: true, force: true });
+        }
+        catch (error) {
+            this.logger.warn(`Copilot: failed to remove the temporary sign-in directory ${home}:`, error);
+        }
+    }
+    /**
+     * Builds the environment for the login process.
+     *
+     * The CLI is pointed at a private home and its use of the system keychain is disabled, so that
+     * it persists the token where we can take it over instead of in the keyring of the user. Tokens
+     * from the environment are removed so that a sign-in always establishes fresh credentials rather
+     * than silently succeeding with something the user configured elsewhere.
+     */
+    createLoginEnv(home, noopBrowser) {
+        return {
+            ...copilot_runtime_env_1.CopilotRuntimeEnv.withoutTokens(process.env),
+            COPILOT_HOME: home,
+            COPILOT_DISABLE_KEYTAR: '1',
+            // Keep the flow in the dialog, see createNoopBrowser. The display variables are dropped as
+            // well so that nothing can open a window even if the opener were ignored.
+            BROWSER: noopBrowser,
+            DISPLAY: undefined,
+            WAYLAND_DISPLAY: undefined
+        };
+    }
+    /**
+     * Searches the configuration the CLI wrote in its private home for the persisted token.
+     *
+     * The file and the field the CLI uses are not part of its public interface, so every JSON file it
+     * wrote is searched for a value shaped like a GitHub token rather than relying on a fixed layout.
+     */
+    async findStoredToken(home) {
+        for (const file of await this.listCandidateFiles(home)) {
+            try {
+                // Checked before reading, so that a stray large file is never held in memory.
+                if ((await fs_1.promises.stat(file)).size > MAX_INSPECTED_FILE_BYTES) {
+                    continue;
+                }
+                const token = this.findTokenInText(await fs_1.promises.readFile(file, 'utf8'));
+                if (token) {
+                    return token;
+                }
+            }
+            catch (error) {
+                this.logger.warn(`Copilot: failed to inspect ${file} for the persisted token:`, error);
+            }
+        }
+        return undefined;
+    }
+    /**
+     * The files of the private home that are inspected for the token.
+     *
+     * The logs are skipped, and the configuration the CLI writes is not plain JSON but carries
+     * comments, so the files are searched as text rather than parsed.
+     */
+    async listCandidateFiles(home) {
+        try {
+            const entries = await fs_1.promises.readdir(home, { withFileTypes: true });
+            return entries
+                .filter(entry => entry.isFile() && entry.name !== 'settings.json' && !entry.name.startsWith('no-browser.'))
+                .map(entry => (0, path_1.join)(home, entry.name));
+        }
+        catch (error) {
+            this.logger.warn(`Copilot: failed to list ${home}:`, error);
+            return [];
+        }
+    }
+    /**
+     * Searches text for a value shaped like a GitHub token.
+     *
+     * Only the files the CLI wrote into the private home of this sign-in are searched, so anything
+     * shaped like a token in them is the token that was just obtained.
+     */
+    findTokenInText(text) {
+        return text.match(TOKEN_PATTERN)?.[0];
+    }
+    /**
+     * Extracts the login the CLI reported for the account that signed in, if it reported one.
+     */
+    parseAccountLabel(output) {
+        return output.match(/Signed in successfully as\s+([^\s.]+)/)?.[1];
+    }
+    /**
+     * Extracts the verification URL and the user code from the output of the CLI.
+     * Returns `undefined` while the output does not contain both yet.
+     */
+    parseDeviceCode(output) {
+        const url = output.match(/https?:\/\/\S*\/login\/device\b/)?.[0];
+        const userCode = output.match(/\b([A-Z0-9]{4}-[A-Z0-9]{4})\b/)?.[1];
+        if (!url || !userCode) {
+            return undefined;
+        }
+        return {
+            verification_uri: url,
+            user_code: userCode
+        };
+    }
+    /**
+     * Describes why a login failed, based on what the CLI reported.
+     *
+     * A line that names the problem is preferred, and the tail of the output is used otherwise, since
+     * the wording of the CLI is not stable enough to rely on and a bare exit code is not diagnosable.
+     */
+    extractFailure(output) {
+        const lines = output.split('\n').map(entry => entry.trim())
+            // The CLI reports a failure to copy the code to the clipboard even on a healthy login,
+            // which must not be mistaken for the reason a login failed.
+            .filter(entry => entry.length > 0 && !/clipboard/i.test(entry));
+        const reported = [...lines].reverse().find(entry => /error|denied|failed|unauthorized|policy/i.test(entry));
+        if (reported) {
+            return reported;
+        }
+        const tail = lines.slice(-3).join(' ');
+        return tail.length > 0 ? `The Copilot CLI login failed: ${tail}` : undefined;
+    }
+    /**
+     * Turns the configured GitHub Enterprise deployment into the URL the CLI is pointed at.
+     *
+     * A bare domain is the expected form and gets a scheme. Plain HTTP is upgraded rather than passed
+     * on: the sign-in carries credentials, and a host that only matched "http" at the start of its
+     * name, such as `httpbin.example.com`, must not be mistaken for a URL that already has a scheme.
+     */
+    toHostUrl(enterpriseUrl) {
+        const url = enterpriseUrl.trim();
+        if (/^https:\/\//i.test(url)) {
+            return url;
+        }
+        if (/^http:\/\//i.test(url)) {
+            return url.replace(/^http:\/\//i, 'https://');
+        }
+        return `https://${url}`;
+    }
+};
+exports.CopilotCliAuthProvider = CopilotCliAuthProvider;
+tslib_1.__decorate([
+    (0, inversify_1.inject)(copilot_sdk_client_provider_1.CopilotSdkClientProvider),
+    tslib_1.__metadata("design:type", copilot_sdk_client_provider_1.CopilotSdkClientProvider)
+], CopilotCliAuthProvider.prototype, "sdkClientProvider", void 0);
+tslib_1.__decorate([
+    (0, inversify_1.inject)(copilot_cli_locator_1.CopilotCliLocator),
+    tslib_1.__metadata("design:type", copilot_cli_locator_1.CopilotCliLocator)
+], CopilotCliAuthProvider.prototype, "cliLocator", void 0);
+tslib_1.__decorate([
+    (0, inversify_1.inject)(copilot_credential_store_1.CopilotCredentialStore),
+    tslib_1.__metadata("design:type", copilot_credential_store_1.CopilotCredentialStore)
+], CopilotCliAuthProvider.prototype, "credentialStore", void 0);
+tslib_1.__decorate([
+    (0, inversify_1.inject)(core_1.ILogger),
+    (0, inversify_1.named)('ai-copilot:CopilotCliAuthProvider'),
+    tslib_1.__metadata("design:type", Object)
+], CopilotCliAuthProvider.prototype, "logger", void 0);
+tslib_1.__decorate([
+    (0, inversify_1.preDestroy)(),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", []),
+    tslib_1.__metadata("design:returntype", void 0)
+], CopilotCliAuthProvider.prototype, "stop", null);
+exports.CopilotCliAuthProvider = CopilotCliAuthProvider = tslib_1.__decorate([
+    (0, inversify_1.injectable)()
+], CopilotCliAuthProvider);
+//# sourceMappingURL=copilot-cli-auth-provider.js.map

package/lib/node/copilot-cli-auth-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"copilot-cli-auth-provider.js","sourceRoot":"","sources":["../../src/node/copilot-cli-auth-provider.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,oDAAoD;AACpD,EAAE;AACF,2EAA2E;AAC3E,mEAAmE;AACnE,wCAAwC;AACxC,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,yDAAyD;AACzD,uDAAuD;AACvD,EAAE;AACF,gFAAgF;AAChF,gFAAgF;;;;AAEhF,iDAAoD;AACpD,2BAAoC;AACpC,yBAAyB;AACzB,+BAA4B;AAC5B,4DAAqF;AACrF,sEAA+D;AAC/D,sCAA2C;AAE3C,+DAA0D;AAC1D,yEAAoE;AACpE,+DAA0D;AAC1D,+EAAyE;AAEzE;;GAEG;AACH,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC;;GAEG;AACH,MAAM,aAAa,GAAG,+BAA+B,CAAC;AAEtD;;GAEG;AACH,MAAM,wBAAwB,GAAG,IAAI,GAAG,IAAI,CAAC;AAE7C;;;;;;;;;;;;;;GAcG;AAEI,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAoB/B;;;;;OAKG;IAEO,IAAI;QACV,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE,KAAK,CAAC,CAAC,CAAC;IACrH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,aAAsB;QACnC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;QAEnC,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACxC,IAAI,aAAa,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,gGAAgG;QAChG,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,kBAAkB,GAAG,aAAa,CAAC;QAExC,6FAA6F;QAC7F,4FAA4F;QAC5F,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,GAAG,EAAE,IAAI,EAAE;YAC3B,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAE1B,MAAM,MAAM,GAAG,IAAI,uBAAQ,EAAW,CAAC;QACvC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC;QAC1B,8FAA8F;QAC9F,gGAAgG;QAChG,mFAAmF;QACnF,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAkC,CAAC,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAI,uBAAQ,EAAsB,CAAC;QAChD,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,MAAM,QAAQ,GAAG,CAAC,KAAsB,EAAE,EAAE;YACxC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,MAAM,EAAE,CAAC;gBACT,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC;YACD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC;QACtF,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEnC,4FAA4F;QAC5F,2FAA2F;QAC3F,uEAAuE;QACvE,MAAM,YAAY,GAAG,CAAC,KAAY,EAAE,EAAE;YAClC,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;gBAC9B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC;QACL,CAAC,CAAC;QAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;YACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE;YACzB,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;gBAC9B,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;YAClC,CAAC;YACD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC,CAAC;gBACnF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACJ,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,0CAA0C,QAAQ,GAAG,CAAC;gBACrG,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAChC,YAAY,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YACrC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAClJ,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACzB,MAAM,KAAK,CAAC;QAChB,CAAC;gBAAS,CAAC;YACP,YAAY,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,UAAG,CAAC,QAAQ,CAAC,oCAAoC,EAAE,sEAAsE,CAAC,CAAC,CAAC;QAChJ,CAAC;QACD,IAAI,CAAC;YACD,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;gBACxB,OAAO,KAAK,CAAC;YACjB,CAAC;YACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAClC,OAAO,IAAI,CAAC;QAChB,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;YAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,6EAA6E;YAC7E,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YACjC,+EAA+E;YAC/E,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;QACzC,CAAC;IACL,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,gBAAgB,CAAC,IAAY;QACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,UAAG,CAAC,QAAQ,CAAC,oCAAoC,EAC7D,mGAAmG;kBACjG,yEAAyE,CAAC,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;YAC3B,KAAK;YACL,YAAY,EAAE,IAAI,CAAC,iBAAiB;YACpC,aAAa,EAAE,IAAI,CAAC,kBAAkB;SACzC,CAAC,CAAC;IACP,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW;QACb,+FAA+F;QAC/F,iFAAiF;QACjF,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,0FAA0F;QAC1F,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY;QACd,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC;QACrD,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QACtC,CAAC;QACD,OAAO;YACH,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,WAAW,CAAC,YAAY;YACtC,aAAa,EAAE,WAAW,CAAC,aAAa;SAC3C,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACT,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,eAAe;QAC3B,MAAM,IAAI,GAAG,MAAM,aAAE,CAAC,OAAO,CAAC,IAAA,WAAI,EAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACzE,6FAA6F;QAC7F,kGAAkG;QAClG,MAAM,aAAE,CAAC,SAAS,CAAC,IAAA,WAAI,EAAC,IAAI,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACrH,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;;;;;OAQG;IACO,KAAK,CAAC,iBAAiB,CAAC,IAAY;QAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAA,WAAI,EAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YAC3C,MAAM,aAAE,CAAC,SAAS,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;YACpD,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,KAAK,GAAG,IAAA,WAAI,EAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAC1C,MAAM,aAAE,CAAC,SAAS,CAAC,KAAK,EAAE,qBAAqB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpF,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,eAAe,CAAC,IAAY;QACxC,IAAI,CAAC;YACD,MAAM,aAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6DAA6D,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC;QAClG,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACO,cAAc,CAAC,IAAY,EAAE,WAAmB;QACtD,OAAO;YACH,GAAG,uCAAiB,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC;YAC/C,YAAY,EAAE,IAAI;YAClB,sBAAsB,EAAE,GAAG;YAC3B,2FAA2F;YAC3F,0EAA0E;YAC1E,OAAO,EAAE,WAAW;YACpB,OAAO,EAAE,SAAS;YAClB,eAAe,EAAE,SAAS;SAC7B,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACO,KAAK,CAAC,eAAe,CAAC,IAAY;QACxC,KAAK,MAAM,IAAI,IAAI,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC;gBACD,8EAA8E;gBAC9E,IAAI,CAAC,MAAM,aAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,wBAAwB,EAAE,CAAC;oBACxD,SAAS;gBACb,CAAC;gBACD,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,aAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;gBACpE,IAAI,KAAK,EAAE,CAAC;oBACR,OAAO,KAAK,CAAC;gBACjB,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,IAAI,2BAA2B,EAAE,KAAK,CAAC,CAAC;YAC3F,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACO,KAAK,CAAC,kBAAkB,CAAC,IAAY;QAC3C,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,aAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,OAAO,OAAO;iBACT,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;iBAC1G,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAA,WAAI,EAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5D,OAAO,EAAE,CAAC;QACd,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACO,eAAe,CAAC,IAAY;QAClC,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACO,iBAAiB,CAAC,MAAc;QACtC,OAAO,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAED;;;OAGG;IACO,eAAe,CAAC,MAAc;QACpC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO;YACH,gBAAgB,EAAE,GAAG;YACrB,SAAS,EAAE,QAAQ;SACtB,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACO,cAAc,CAAC,MAAc;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACvD,uFAAuF;YACvF,4DAA4D;aAC3D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,0CAA0C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5G,IAAI,QAAQ,EAAE,CAAC;YACX,OAAO,QAAQ,CAAC;QACpB,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,CAAC;IAED;;;;;;OAMG;IACO,SAAS,CAAC,aAAqB;QACrC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,GAAG,CAAC;QACf,CAAC;QACD,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,WAAW,GAAG,EAAE,CAAC;IAC5B,CAAC;CACJ,CAAA;AA/XY,wDAAsB;AAGZ;IADlB,IAAA,kBAAM,EAAC,sDAAwB,CAAC;sCACK,sDAAwB;iEAAC;AAG5C;IADlB,IAAA,kBAAM,EAAC,uCAAiB,CAAC;sCACK,uCAAiB;0DAAC;AAG9B;IADlB,IAAA,kBAAM,EAAC,iDAAsB,CAAC;sCACK,iDAAsB;+DAAC;AAGxC;IADlB,IAAA,kBAAM,EAAC,cAAO,CAAC;IAAE,IAAA,iBAAK,EAAC,mCAAmC,CAAC;;sDACzB;AAezB;IADT,IAAA,sBAAU,GAAE;;;;kDAGZ;iCA7BQ,sBAAsB;IADlC,IAAA,sBAAU,GAAE;GACA,sBAAsB,CA+XlC"}

package/lib/node/copilot-cli-auth-provider.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=copilot-cli-auth-provider.spec.d.ts.map

package/lib/node/copilot-cli-auth-provider.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"copilot-cli-auth-provider.spec.d.ts","sourceRoot":"","sources":["../../src/node/copilot-cli-auth-provider.spec.ts"],"names":[],"mappings":""}