@vybestack/llxprt-code-auth 0.10.0-nightly.260613.1adad3b34

package/dist/src/auth-precedence-resolver.js

@@ -0,0 +1,542 @@
+/**
+ * @license
+ * Copyright 2025 Vybestack LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { buildCacheKey, ensureRuntimeState, flushRuntimeAuthScope, getValidCachedEntry, invalidateEntry, invalidateMatchingEntries, recordCacheHit, recordCacheMiss, registerSettingsSubscriptions, resolveProfileId, runtimeScopedStates, storeRuntimeScopedToken, } from './precedence.js';
+function isAuthOnlyEnabled(value) {
+    if (typeof value === 'boolean')
+        return value;
+    if (typeof value === 'string') {
+        const normalized = value.trim().toLowerCase();
+        if (normalized === 'true')
+            return true;
+        if (normalized === 'false')
+            return false;
+    }
+    return false;
+}
+export class AuthPrecedenceResolver {
+    static NO_OP_LOGGER = {
+        debug: () => { },
+        error: () => { },
+        warn: () => { },
+        log: () => { },
+    };
+    config;
+    oauthManager;
+    settingsService;
+    providerKeyStorage;
+    logger;
+    getActiveRuntimeContextFn;
+    /**
+     * Constructs an AuthPrecedenceResolver.
+     *
+     * If callers expect resolveAuthentication() to resolve named auth keys itself,
+     * providerKeyStorage must be injected. CLI profile handling normally resolves
+     * named keys to concrete provider apiKey values before provider construction;
+     * direct consumers should pass providerKeyStorage or use core's
+     * createAuthPrecedenceResolver() factory.
+     */
+    constructor(config, options) {
+        this.config = config;
+        this.oauthManager = options?.oauthManager;
+        this.settingsService = options?.settingsService;
+        this.providerKeyStorage = options?.providerKeyStorage;
+        this.logger = options?.logger ?? AuthPrecedenceResolver.NO_OP_LOGGER;
+        this.getActiveRuntimeContextFn = options?.getActiveRuntimeContext;
+    }
+    /**
+     * @plan PLAN-20251018-STATELESSPROVIDER2.P06
+     * @requirement REQ-SP2-001
+     * @pseudocode base-provider-call-contract.md lines 1-2
+     */
+    setSettingsService(settingsService) {
+        this.settingsService = settingsService ?? undefined;
+    }
+    /**
+     * Get the active runtime context via injected function.
+     * Returns null if no function was injected or if it returns null/undefined.
+     */
+    getActiveRuntimeContext() {
+        if (typeof this.getActiveRuntimeContextFn !== 'function')
+            return null;
+        return this.getActiveRuntimeContextFn() ?? null;
+    }
+    /**
+     * @plan PLAN-20251018-STATELESSPROVIDER2.P06
+     * @requirement REQ-SP2-001
+     * @pseudocode base-provider-call-contract.md lines 1-2
+     */
+    resolveSettingsService(override) {
+        if (override != null)
+            return override;
+        if (this.settingsService != null)
+            return this.settingsService;
+        const context = this.getActiveRuntimeContext();
+        const settingsService = context.settingsService;
+        if (settingsService == null) {
+            throw new Error('Active provider runtime context not available');
+        }
+        this.settingsService = settingsService;
+        return settingsService;
+    }
+    /**
+     * @plan PLAN-20251018-STATELESSPROVIDER2.P06
+     * @requirement REQ-SP2-001
+     * @pseudocode base-provider-call-contract.md lines 1-3
+     * Resolves authentication using the full precedence chain
+     * Returns the first available authentication method or null if none found
+     */
+    async resolveAuthentication(options) {
+        const includeOAuth = options?.includeOAuth ?? false;
+        const settingsService = this.resolveSettingsService(options?.settingsService ?? undefined);
+        const providerKey = this.normalizeProviderId(this.config.providerId);
+        if (!isAuthOnlyEnabled(settingsService.get('authOnly'))) {
+            const nonOAuthAuth = await this.resolveNonOAuthAuthentication(settingsService, providerKey);
+            if (nonOAuthAuth !== null)
+                return nonOAuthAuth;
+        }
+        if (!this.canResolveOAuth(includeOAuth))
+            return null;
+        return this.resolveOAuthAuthentication(settingsService, providerKey);
+    }
+    async resolveNonOAuthAuthentication(settingsService, providerKey) {
+        const directAuth = await this.resolveDirectAuthentication(settingsService, providerKey);
+        if (directAuth !== null)
+            return directAuth;
+        const envAuth = this.resolveEnvironmentAuthentication();
+        return envAuth ?? null;
+    }
+    async resolveDirectAuthentication(settingsService, providerKey) {
+        const providerAuth = await this.resolveProviderAuthentication(settingsService, providerKey);
+        if (providerAuth !== null)
+            return providerAuth;
+        const configAuth = this.normalizeAuthValue(this.config.apiKey ?? null);
+        if (configAuth !== undefined)
+            return configAuth;
+        return this.resolveGlobalAuthentication(settingsService, providerKey);
+    }
+    async resolveProviderAuthentication(settingsService, providerKey) {
+        const providerSettings = providerKey !== undefined &&
+            typeof settingsService.getProviderSettings === 'function'
+            ? settingsService.getProviderSettings(providerKey)
+            : undefined;
+        const providerAuthKey = this.normalizeAuthValue(providerSettings?.['auth-key']);
+        if (providerAuthKey !== undefined)
+            return providerAuthKey;
+        const providerAuthKeyfile = this.normalizeAuthValue(providerSettings?.['auth-keyfile']);
+        return this.resolveKeyFileAuth(providerAuthKeyfile);
+    }
+    async resolveGlobalAuthentication(settingsService, providerKey) {
+        if (!this.shouldUseGlobalAuth(settingsService, providerKey))
+            return null;
+        const authKey = this.normalizeAuthValue(settingsService.get('auth-key'));
+        if (authKey !== undefined)
+            return authKey;
+        const authKeyName = this.normalizeAuthValue(settingsService.get('auth-key-name'));
+        if (authKeyName !== undefined)
+            return this.resolveNamedKey(authKeyName);
+        const authKeyfile = this.normalizeAuthValue(settingsService.get('auth-keyfile'));
+        return this.resolveKeyFileAuth(authKeyfile);
+    }
+    async resolveKeyFileAuth(keyFile) {
+        if (keyFile === undefined)
+            return null;
+        const keyFromFile = await this.readKeyFile(keyFile);
+        return keyFromFile ?? null;
+    }
+    resolveEnvironmentAuthentication() {
+        if (this.config.envKeyNames == null ||
+            this.config.envKeyNames.length === 0) {
+            return undefined;
+        }
+        for (const envVarName of this.config.envKeyNames) {
+            const envValue = this.normalizeAuthValue(process.env[envVarName]);
+            if (envValue !== undefined)
+                return envValue;
+        }
+        return undefined;
+    }
+    canResolveOAuth(includeOAuth) {
+        if (!includeOAuth)
+            return false;
+        if (this.config.isOAuthEnabled !== true)
+            return false;
+        if (this.config.supportsOAuth !== true)
+            return false;
+        return this.oauthManager != null && this.config.oauthProvider != null;
+    }
+    async resolveOAuthAuthentication(settingsService, providerKey) {
+        const context = this.buildOAuthContext(settingsService, providerKey);
+        if ((await this.isOAuthDisabledByManager()) === true) {
+            this.invalidateDisabledOAuthEntry(context);
+            return null;
+        }
+        const cachedToken = this.getCachedOAuthToken(context);
+        if (cachedToken !== null)
+            return cachedToken;
+        return this.fetchAndCacheOAuthToken(context);
+    }
+    buildOAuthContext(settingsService, providerKey) {
+        const providerId = this.resolveProviderIdentifier(providerKey);
+        const profileId = resolveProfileId(settingsService);
+        const runtime = this.tryGetRuntimeState(settingsService, providerId);
+        return {
+            settingsService,
+            providerKey,
+            providerId,
+            profileId,
+            profileScopeId: profileId ?? 'no-profile',
+            runtimeContext: runtime.runtimeContext,
+            runtimeState: runtime.runtimeState,
+        };
+    }
+    tryGetRuntimeState(settingsService, providerId) {
+        try {
+            const runtimeContext = this.getActiveRuntimeContext();
+            if (!runtimeContext) {
+                return { runtimeContext: null, runtimeState: null };
+            }
+            const runtimeState = ensureRuntimeState(runtimeContext, this.logger);
+            registerSettingsSubscriptions(runtimeState, settingsService, providerId, this.logger);
+            return { runtimeContext, runtimeState };
+        }
+        catch {
+            return { runtimeContext: null, runtimeState: null };
+        }
+    }
+    async isOAuthDisabledByManager() {
+        const managerWithCheck = this.oauthManager;
+        if (typeof managerWithCheck?.isOAuthEnabled !== 'function')
+            return false;
+        try {
+            const enabledResult = managerWithCheck.isOAuthEnabled(this.config.oauthProvider);
+            return (await enabledResult) === false;
+        }
+        catch (error) {
+            this.debugOAuthEnablementError(error);
+            return false;
+        }
+    }
+    debugOAuthEnablementError(error) {
+        if (process.env.DEBUG) {
+            this.logger.debug(`Failed to determine OAuth enablement for ${this.config.oauthProvider}:`, error);
+        }
+    }
+    invalidateDisabledOAuthEntry(context) {
+        const runtimeState = context.runtimeState;
+        if (runtimeState == null)
+            return;
+        const cacheKey = buildCacheKey(runtimeState.runtimeAuthScopeId, context.providerId, context.profileScopeId);
+        if (runtimeState.entries.has(cacheKey)) {
+            invalidateEntry(runtimeState, cacheKey, 'oauth-disabled');
+        }
+    }
+    getCachedOAuthToken(context) {
+        const runtimeState = context.runtimeState;
+        if (runtimeState == null)
+            return null;
+        const cachedEntry = getValidCachedEntry(runtimeState, context.providerId, context.profileScopeId);
+        if (cachedEntry !== null) {
+            recordCacheHit(runtimeState);
+            return cachedEntry.token;
+        }
+        recordCacheMiss(runtimeState);
+        return null;
+    }
+    async fetchAndCacheOAuthToken(context) {
+        try {
+            const requestMetadata = this.buildOAuthRequestMetadata(context);
+            const token = await this.oauthManager.getToken(this.config.oauthProvider, requestMetadata);
+            if (token == null || token === '')
+                return null;
+            const oauthToken = await this.tryGetOAuthTokenMetadata(requestMetadata);
+            this.storeOAuthTokenMetadata(context, token, oauthToken);
+            return token;
+        }
+        catch (error) {
+            this.debugOAuthTokenError(error);
+            return null;
+        }
+    }
+    buildOAuthRequestMetadata(context) {
+        const runtimeMetadata = this.extractRuntimeMetadata(context.runtimeContext);
+        return {
+            runtimeAuthScopeId: context.runtimeState?.runtimeAuthScopeId ?? 'no-runtime',
+            providerId: context.providerId,
+            profileId: context.profileId ?? undefined,
+            cliScope: runtimeMetadata,
+            runtimeMetadata,
+        };
+    }
+    extractRuntimeMetadata(runtimeContext) {
+        const metadata = runtimeContext?.metadata;
+        return metadata != null && typeof metadata === 'object'
+            ? metadata
+            : undefined;
+    }
+    storeOAuthTokenMetadata(context, token, oauthToken) {
+        const runtimeState = context.runtimeState;
+        if (runtimeState == null)
+            return;
+        storeRuntimeScopedToken(runtimeState, context.providerId, context.profileScopeId, token, oauthToken);
+    }
+    async tryGetOAuthTokenMetadata(requestMetadata) {
+        if (typeof this.oauthManager?.getOAuthToken !== 'function')
+            return null;
+        try {
+            return await this.oauthManager.getOAuthToken(this.config.oauthProvider, requestMetadata);
+        }
+        catch (tokenError) {
+            if (process.env.DEBUG) {
+                this.logger.debug(`Failed to fetch OAuth token metadata for ${this.config.oauthProvider}:`, tokenError);
+            }
+            return null;
+        }
+    }
+    debugOAuthTokenError(error) {
+        if (process.env.DEBUG) {
+            this.logger.warn(`Failed to get OAuth token for ${this.config.oauthProvider}:`, error);
+        }
+    }
+    /**
+     * @plan PLAN-20251018-STATELESSPROVIDER2.P06
+     * @requirement REQ-SP2-001
+     * @pseudocode base-provider-call-contract.md lines 1-3
+     * Check if any authentication method is available without triggering OAuth
+     */
+    async hasNonOAuthAuthentication(options) {
+        const auth = await this.resolveAuthentication({
+            ...options,
+            includeOAuth: false,
+        });
+        return auth !== null;
+    }
+    /**
+     * @plan PLAN-20251018-STATELESSPROVIDER2.P06
+     * @requirement REQ-SP2-001
+     * @pseudocode base-provider-call-contract.md lines 1-3
+     * Check if OAuth is the only available authentication method
+     */
+    async isOAuthOnlyAvailable(options) {
+        const hasNonOAuth = await this.hasNonOAuthAuthentication(options);
+        return (!hasNonOAuth &&
+            this.config.isOAuthEnabled === true &&
+            this.config.supportsOAuth === true);
+    }
+    /**
+     * @plan PLAN-20251018-STATELESSPROVIDER2.P06
+     * @requirement REQ-SP2-001
+     * @pseudocode base-provider-call-contract.md lines 1-3
+     * Get authentication method name for debugging/logging
+     */
+    async getAuthMethodName(options) {
+        const settingsService = this.resolveSettingsService(options?.settingsService ?? undefined);
+        const globalMethod = await this.getGlobalAuthMethodName(settingsService);
+        if (globalMethod !== null)
+            return globalMethod;
+        const configMethod = this.getConfigAuthMethodName();
+        if (configMethod !== null)
+            return configMethod;
+        return this.getOAuthMethodName();
+    }
+    async getGlobalAuthMethodName(settingsService) {
+        const authKey = settingsService.get('auth-key');
+        if (typeof authKey === 'string' && authKey.trim() !== '') {
+            return 'command-key';
+        }
+        if (this.normalizeAuthValue(settingsService.get('auth-key-name')) !==
+            undefined) {
+            return 'named-key';
+        }
+        return this.getKeyFileMethodName(settingsService.get('auth-keyfile'));
+    }
+    async getKeyFileMethodName(value) {
+        if (typeof value !== 'string' || value === '')
+            return null;
+        try {
+            const keyFromFile = await this.readKeyFile(value);
+            return keyFromFile !== null ? 'command-keyfile' : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    getConfigAuthMethodName() {
+        if (typeof this.config.apiKey === 'string' &&
+            this.config.apiKey.trim() !== '') {
+            return 'constructor-apikey';
+        }
+        const envAuthName = this.getEnvironmentAuthMethodName();
+        return envAuthName ?? null;
+    }
+    getEnvironmentAuthMethodName() {
+        if (this.config.envKeyNames == null ||
+            this.config.envKeyNames.length === 0) {
+            return undefined;
+        }
+        for (const envVarName of this.config.envKeyNames) {
+            const envValue = process.env[envVarName];
+            if (typeof envValue === 'string' && envValue.trim() !== '') {
+                return `env-${envVarName.toLowerCase()}`;
+            }
+        }
+        return undefined;
+    }
+    async getOAuthMethodName() {
+        if (!this.canResolveOAuth(true))
+            return null;
+        try {
+            const isAuthenticated = await this.oauthManager.isAuthenticated(this.config.oauthProvider);
+            return isAuthenticated ? `oauth-${this.config.oauthProvider}` : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    normalizeAuthValue(value) {
+        if (typeof value !== 'string')
+            return undefined;
+        const trimmed = value.trim();
+        return trimmed === '' || trimmed.toLowerCase() === 'none'
+            ? undefined
+            : trimmed;
+    }
+    normalizeProviderId(value) {
+        if (typeof value !== 'string')
+            return undefined;
+        const trimmed = value.trim();
+        return trimmed === '' ? undefined : trimmed;
+    }
+    resolveProviderIdentifier(preferredProviderId) {
+        const providerId = this.normalizeProviderId(preferredProviderId);
+        if (providerId !== undefined)
+            return providerId;
+        const oauthProvider = this.normalizeProviderId(this.config.oauthProvider);
+        if (oauthProvider !== undefined)
+            return oauthProvider;
+        return this.config.envKeyNames?.[0] ?? 'unknown-provider';
+    }
+    shouldUseGlobalAuth(settingsService, providerId) {
+        if (providerId === undefined)
+            return true;
+        const activeProvider = settingsService.get('activeProvider');
+        if (typeof activeProvider !== 'string')
+            return true;
+        const trimmed = activeProvider.trim();
+        return trimmed === '' || trimmed === providerId;
+    }
+    async resolveNamedKey(name) {
+        const trimmedName = this.normalizeAuthValue(name);
+        if (trimmedName === undefined) {
+            throw new Error('Named key reference is empty');
+        }
+        const storage = this.providerKeyStorage;
+        if (!storage) {
+            throw new Error('Provider key storage is required to resolve named auth keys. ' +
+                'Pass providerKeyStorage to AuthPrecedenceResolver or use createAuthPrecedenceResolver() from core.');
+        }
+        const key = this.normalizeAuthValue(await storage.getKey(trimmedName));
+        if (key === undefined) {
+            throw new Error(`Named key '${trimmedName}' not found. Save it with /key save ${trimmedName} <api-key> before retrying.`);
+        }
+        return key;
+    }
+    /**
+     * Reads API key from a file path, handling tilde expansion, absolute and relative paths
+     */
+    async readKeyFile(filePath) {
+        try {
+            const expandedPath = filePath.startsWith('~')
+                ? path.join(os.homedir(), filePath.slice(1))
+                : filePath;
+            const resolvedPath = path.isAbsolute(expandedPath)
+                ? expandedPath
+                : path.resolve(process.cwd(), expandedPath);
+            const content = await fs.readFile(resolvedPath, 'utf-8');
+            const key = content.trim();
+            if (key === '') {
+                if (process.env.DEBUG) {
+                    this.logger.warn(`Key file ${filePath} is empty`);
+                }
+                return null;
+            }
+            return key;
+        }
+        catch (error) {
+            if (process.env.DEBUG) {
+                this.logger.warn(`Failed to read key file ${filePath}:`, error);
+            }
+            return null;
+        }
+    }
+    /**
+     * Updates the configuration
+     */
+    updateConfig(newConfig) {
+        this.config = { ...this.config, ...newConfig };
+    }
+    /**
+     * Updates the OAuth manager
+     */
+    updateOAuthManager(oauthManager) {
+        this.oauthManager = oauthManager;
+    }
+    /**
+     * Invalidates the cached OAuth tokens for this resolver.
+     * This should be called during logout to ensure fresh tokens are fetched
+     * on the next authentication attempt.
+     *
+     * @plan PLAN-20251023-STATELESS-HARDENING
+     * @requirement Issue #975 - OAuth logout cache invalidation
+     */
+    invalidateCache() {
+        const knownRuntimeIds = ['legacy-singleton', 'provider-manager-singleton'];
+        try {
+            const ctx = this.getActiveRuntimeContext();
+            const runtimeId = ctx?.runtimeId;
+            if (typeof runtimeId === 'string' &&
+                runtimeId !== '' &&
+                !knownRuntimeIds.includes(runtimeId)) {
+                knownRuntimeIds.push(runtimeId);
+            }
+        }
+        catch {
+            // Context not available, proceed with known IDs
+        }
+        for (const runtimeId of knownRuntimeIds) {
+            try {
+                flushRuntimeAuthScope(runtimeId);
+            }
+            catch (error) {
+                this.logger.debug(`Failed to flush runtime auth scope ${runtimeId}: ${error}`);
+            }
+        }
+    }
+    /**
+     * Invalidates cached OAuth tokens for a specific provider.
+     * This enables surgical cache invalidation for a single provider rather than
+     * the all-or-nothing invalidateCache() behavior.
+     *
+     * @param providerId - The provider ID to invalidate cache entries for
+     * @param profileId - Optional profile ID to invalidate only that specific profile
+     * @fix issue1861 - Token revocation handling
+     */
+    invalidateProviderCache(providerId, profileId) {
+        for (const [, state] of runtimeScopedStates) {
+            invalidateMatchingEntries(state, (entry) => {
+                if (entry.providerId !== providerId)
+                    return false;
+                if (profileId !== undefined && entry.profileId !== profileId) {
+                    return false;
+                }
+                return true;
+            }, 'token-revoked');
+        }
+    }
+}
+//# sourceMappingURL=auth-precedence-resolver.js.map

package/dist/src/auth-precedence-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-precedence-resolver.js","sourceRoot":"","sources":["../../src/auth-precedence-resolver.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAe9B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,EACf,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,6BAA6B,EAC7B,gBAAgB,EAChB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AAqBzB,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,UAAU,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,UAAU,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,sBAAsB;IACzB,MAAM,CAAU,YAAY,GAAiB;QACnD,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;QACf,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;QACf,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;QACd,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC;KACd,CAAC;IAEM,MAAM,CAAuB;IAC7B,YAAY,CAAgB;IAC5B,eAAe,CAAoB;IACnC,kBAAkB,CAAuB;IACzC,MAAM,CAAe;IACrB,yBAAyB,CAA2B;IAE5D;;;;;;;;OAQG;IACH,YACE,MAA4B,EAC5B,OAMC;QAED,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;QAC1C,IAAI,CAAC,eAAe,GAAG,OAAO,EAAE,eAAe,CAAC;QAChD,IAAI,CAAC,kBAAkB,GAAG,OAAO,EAAE,kBAAkB,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,sBAAsB,CAAC,YAAY,CAAC;QACrE,IAAI,CAAC,yBAAyB,GAAG,OAAO,EAAE,uBAAuB,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAChB,eAAoD;QAEpD,IAAI,CAAC,eAAe,GAAG,eAAe,IAAI,SAAS,CAAC;IACtD,CAAC;IAED;;;OAGG;IACK,uBAAuB;QAC7B,IAAI,OAAO,IAAI,CAAC,yBAAyB,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QACtE,OAAO,IAAI,CAAC,yBAAyB,EAAE,IAAI,IAAI,CAAC;IAClD,CAAC;IAED;;;;OAIG;IACK,sBAAsB,CAC5B,QAAkC;QAElC,IAAI,QAAQ,IAAI,IAAI;YAAE,OAAO,QAAQ,CAAC;QACtC,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC/C,MAAM,eAAe,GACnB,OACD,CAAC,eAAe,CAAC;QAClB,IAAI,eAAe,IAAI,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,OAAO,eAAe,CAAC;IACzB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,qBAAqB,CACzB,OAA4B;QAE5B,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,KAAK,CAAC;QACpD,MAAM,eAAe,GAAG,IAAI,CAAC,sBAAsB,CACjD,OAAO,EAAE,eAAe,IAAI,SAAS,CACtC,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACrE,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACxD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAC3D,eAAe,EACf,WAAW,CACZ,CAAC;YACF,IAAI,YAAY,KAAK,IAAI;gBAAE,OAAO,YAAY,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC;QACrD,OAAO,IAAI,CAAC,0BAA0B,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACvE,CAAC;IAEO,KAAK,CAAC,6BAA6B,CACzC,eAAiC,EACjC,WAA+B;QAE/B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,2BAA2B,CACvD,eAAe,EACf,WAAW,CACZ,CAAC;QACF,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO,UAAU,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,gCAAgC,EAAE,CAAC;QACxD,OAAO,OAAO,IAAI,IAAI,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,2BAA2B,CACvC,eAAiC,EACjC,WAA+B;QAE/B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAC3D,eAAe,EACf,WAAW,CACZ,CAAC;QACF,IAAI,YAAY,KAAK,IAAI;YAAE,OAAO,YAAY,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;QACvE,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,UAAU,CAAC;QAChD,OAAO,IAAI,CAAC,2BAA2B,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACxE,CAAC;IAEO,KAAK,CAAC,6BAA6B,CACzC,eAAiC,EACjC,WAA+B;QAE/B,MAAM,gBAAgB,GACpB,WAAW,KAAK,SAAS;YACzB,OAAO,eAAe,CAAC,mBAAmB,KAAK,UAAU;YACvD,CAAC,CAAC,eAAe,CAAC,mBAAmB,CAAC,WAAW,CAAC;YAClD,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,CAC7C,gBAAgB,EAAE,CAAC,UAAU,CAAC,CAC/B,CAAC;QACF,IAAI,eAAe,KAAK,SAAS;YAAE,OAAO,eAAe,CAAC;QAC1D,MAAM,mBAAmB,GAAG,IAAI,CAAC,kBAAkB,CACjD,gBAAgB,EAAE,CAAC,cAAc,CAAC,CACnC,CAAC;QACF,OAAO,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,2BAA2B,CACvC,eAAiC,EACjC,WAA+B;QAE/B,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,eAAe,EAAE,WAAW,CAAC;YAAE,OAAO,IAAI,CAAC;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QACzE,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CACzC,eAAe,CAAC,GAAG,CAAC,eAAe,CAAC,CACrC,CAAC;QACF,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACxE,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CACzC,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,CACpC,CAAC;QACF,OAAO,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,OAA2B;QAE3B,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACpD,OAAO,WAAW,IAAI,IAAI,CAAC;IAC7B,CAAC;IAEO,gCAAgC;QACtC,IACE,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI;YAC/B,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EACpC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;YAClE,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,QAAQ,CAAC;QAC9C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,eAAe,CAAC,YAAqB;QAC3C,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACtD,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACrD,OAAO,IAAI,CAAC,YAAY,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC;IACxE,CAAC;IAEO,KAAK,CAAC,0BAA0B,CACtC,eAAiC,EACjC,WAA+B;QAE/B,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;YACrD,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,WAAW,KAAK,IAAI;YAAE,OAAO,WAAW,CAAC;QAC7C,OAAO,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAEO,iBAAiB,CACvB,eAAiC,EACjC,WAA+B;QAE/B,MAAM,UAAU,GAAG,IAAI,CAAC,yBAAyB,CAAC,WAAW,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,gBAAgB,CAAC,eAAe,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QACrE,OAAO;YACL,eAAe;YACf,WAAW;YACX,UAAU;YACV,SAAS;YACT,cAAc,EAAE,SAAS,IAAI,YAAY;YACzC,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC;IACJ,CAAC;IAEO,kBAAkB,CACxB,eAAiC,EACjC,UAAkB;QAKlB,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACtD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;YACtD,CAAC;YACD,MAAM,YAAY,GAAG,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACrE,6BAA6B,CAC3B,YAAY,EACZ,eAAe,EACf,UAAU,EACV,IAAI,CAAC,MAAM,CACZ,CAAC;YACF,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,wBAAwB;QACpC,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAEjB,CAAC;QACd,IAAI,OAAO,gBAAgB,EAAE,cAAc,KAAK,UAAU;YAAE,OAAO,KAAK,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,gBAAgB,CAAC,cAAc,CACnD,IAAI,CAAC,MAAM,CAAC,aAAc,CAC3B,CAAC;YACF,OAAO,CAAC,MAAM,aAAa,CAAC,KAAK,KAAK,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,yBAAyB,CAAC,KAAc;QAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,4CAA4C,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,EACxE,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,4BAA4B,CAAC,OAA+B;QAClE,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,IAAI,YAAY,IAAI,IAAI;YAAE,OAAO;QACjC,MAAM,QAAQ,GAAG,aAAa,CAC5B,YAAY,CAAC,kBAAkB,EAC/B,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,cAAc,CACvB,CAAC;QACF,IAAI,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,eAAe,CAAC,YAAY,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,OAA+B;QACzD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,IAAI,YAAY,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,WAAW,GAAG,mBAAmB,CACrC,YAAY,EACZ,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,cAAc,CACvB,CAAC;QACF,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,cAAc,CAAC,YAAY,CAAC,CAAC;YAC7B,OAAO,WAAW,CAAC,KAAK,CAAC;QAC3B,CAAC;QACD,eAAe,CAAC,YAAY,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACnC,OAA+B;QAE/B,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAa,CAAC,QAAQ,CAC7C,IAAI,CAAC,MAAM,CAAC,aAAc,EAC1B,eAAe,CAChB,CAAC;YACF,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC/C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,eAAe,CAAC,CAAC;YACxE,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,yBAAyB,CAC/B,OAA+B;QAE/B,MAAM,eAAe,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC5E,OAAO;YACL,kBAAkB,EAChB,OAAO,CAAC,YAAY,EAAE,kBAAkB,IAAI,YAAY;YAC1D,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS;YACzC,QAAQ,EAAE,eAAe;YACzB,eAAe;SAChB,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAC5B,cAA8C;QAE9C,MAAM,QAAQ,GAAG,cAAc,EAAE,QAAQ,CAAC;QAC1C,OAAO,QAAQ,IAAI,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ;YACrD,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAEO,uBAAuB,CAC7B,OAA+B,EAC/B,KAAa,EACb,UAA6B;QAE7B,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,IAAI,YAAY,IAAI,IAAI;YAAE,OAAO;QACjC,uBAAuB,CACrB,YAAY,EACZ,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,cAAc,EACtB,KAAK,EACL,UAAU,CACX,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,wBAAwB,CACpC,eAA0C;QAE1C,IAAI,OAAO,IAAI,CAAC,YAAY,EAAE,aAAa,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QACxE,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAC1C,IAAI,CAAC,MAAM,CAAC,aAAc,EAC1B,eAAe,CAChB,CAAC;QACJ,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,4CAA4C,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,EACxE,UAAU,CACX,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,oBAAoB,CAAC,KAAc;QACzC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,iCAAiC,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,EAC7D,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,yBAAyB,CAC7B,OAA4B;QAE5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC;YAC5C,GAAG,OAAO;YACV,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,OAAO,IAAI,KAAK,IAAI,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,oBAAoB,CAAC,OAA4B;QACrD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;QAClE,OAAO,CACL,CAAC,WAAW;YACZ,IAAI,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI;YACnC,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI,CACnC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAA4B;QAE5B,MAAM,eAAe,GAAG,IAAI,CAAC,sBAAsB,CACjD,OAAO,EAAE,eAAe,IAAI,SAAS,CACtC,CAAC;QACF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,eAAe,CAAC,CAAC;QACzE,IAAI,YAAY,KAAK,IAAI;YAAE,OAAO,YAAY,CAAC;QAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACpD,IAAI,YAAY,KAAK,IAAI;YAAE,OAAO,YAAY,CAAC;QAC/C,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACnC,eAAiC;QAEjC,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACzD,OAAO,aAAa,CAAC;QACvB,CAAC;QACD,IACE,IAAI,CAAC,kBAAkB,CAAC,eAAe,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YAC7D,SAAS,EACT,CAAC;YACD,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IACxE,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,KAAc;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAClD,OAAO,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,uBAAuB;QAC7B,IACE,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ;YACtC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAChC,CAAC;YACD,OAAO,oBAAoB,CAAC;QAC9B,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,4BAA4B,EAAE,CAAC;QACxD,OAAO,WAAW,IAAI,IAAI,CAAC;IAC7B,CAAC;IAEO,4BAA4B;QAClC,IACE,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI;YAC/B,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EACpC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACzC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC3D,OAAO,OAAO,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,kBAAkB;QAC9B,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,YAAa,CAAC,eAAe,CAC9D,IAAI,CAAC,MAAM,CAAC,aAAc,CAC3B,CAAC;YACF,OAAO,eAAe,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,KAAc;QACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,OAAO,KAAK,EAAE,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM;YACvD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,OAAO,CAAC;IACd,CAAC;IAEO,mBAAmB,CAAC,KAAqB;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9C,CAAC;IAEO,yBAAyB,CAAC,mBAA4B;QAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,CAAC;QACjE,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,UAAU,CAAC;QAChD,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC1E,IAAI,aAAa,KAAK,SAAS;YAAE,OAAO,aAAa,CAAC;QACtD,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC;IAC5D,CAAC;IAEO,mBAAmB,CACzB,eAAiC,EACjC,UAAmB;QAEnB,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC7D,IAAI,OAAO,cAAc,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpD,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;QACtC,OAAO,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,UAAU,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,IAAY;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,+DAA+D;gBAC7D,oGAAoG,CACvG,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QACvE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,cAAc,WAAW,uCAAuC,WAAW,6BAA6B,CACzG,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CAAC,QAAgB;QACxC,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;gBAC3C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC5C,CAAC,CAAC,QAAQ,CAAC;YACb,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;gBAChD,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;gBACf,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;oBACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,QAAQ,WAAW,CAAC,CAAC;gBACpD,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,QAAQ,GAAG,EAAE,KAAK,CAAC,CAAC;YAClE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAAwC;QACnD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,YAA0B;QAC3C,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;IAED;;;;;;;OAOG;IACH,eAAe;QACb,MAAM,eAAe,GAAG,CAAC,kBAAkB,EAAE,4BAA4B,CAAC,CAAC;QAC3E,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,GAAG,EAAE,SAAS,CAAC;YACjC,IACE,OAAO,SAAS,KAAK,QAAQ;gBAC7B,SAAS,KAAK,EAAE;gBAChB,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,EACpC,CAAC;gBACD,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,qBAAqB,CAAC,SAAS,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,sCAAsC,SAAS,KAAK,KAAK,EAAE,CAC5D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,uBAAuB,CAAC,UAAkB,EAAE,SAAkB;QAC5D,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,mBAAmB,EAAE,CAAC;YAC5C,yBAAyB,CACvB,KAAK,EACL,CAAC,KAAK,EAAE,EAAE;gBACR,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU;oBAAE,OAAO,KAAK,CAAC;gBAClD,IAAI,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC7D,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,EACD,eAAe,CAChB,CAAC;QACJ,CAAC;IACH,CAAC"}

package/dist/src/flows/anthropic-device-flow.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Anthropic OAuth 2.0 Device Flow Implementation
+ *
+ * Implements OAuth 2.0 device authorization grant flow for Anthropic Claude API.
+ * Based on the OAuth 2.0 Device Authorization Grant specification (RFC 8628).
+ */
+import { type DeviceCodeResponse, type OAuthToken } from '../types.js';
+/**
+ * Configuration for Anthropic device flow authentication
+ */
+interface AnthropicFlowConfig {
+    clientId: string;
+    authorizationEndpoint: string;
+    tokenEndpoint: string;
+    scopes: string[];
+}
+/**
+ * Anthropic-specific OAuth 2.0 device flow implementation.
+ * Handles authentication for Claude API access.
+ */
+export declare class AnthropicDeviceFlow {
+    private config;
+    private codeVerifier?;
+    private _codeChallenge?;
+    private state?;
+    private redirectUri;
+    revokeToken?: (token: string) => Promise<void>;
+    constructor(config?: Partial<AnthropicFlowConfig>);
+    /**
+     * Generates PKCE code verifier and challenge using S256 method
+     */
+    private generatePKCE;
+    /**
+     * Initiates the OAuth flow by constructing the authorization URL.
+     * Since Anthropic doesn't have a device flow, we simulate it with authorization code flow.
+     */
+    initiateDeviceFlow(redirectUri?: string): Promise<DeviceCodeResponse>;
+    /**
+     * Exchange authorization code for access token (PKCE flow)
+     */
+    exchangeCodeForToken(authCodeWithState: string): Promise<OAuthToken>;
+    getState(): string;
+    buildAuthorizationUrl(redirectUri: string): string;
+    /**
+     * Polls for the access token after user authorization.
+     */
+    pollForToken(deviceCode: string): Promise<OAuthToken>;
+    /**
+     * Refreshes an expired access token using a refresh token.
+     */
+    refreshToken(refreshToken: string): Promise<OAuthToken>;
+    /**
+     * Maps Anthropic's token response to our standard OAuthToken format.
+     */
+    private mapTokenResponse;
+}
+export {};