@vybestack/llxprt-code-core 0.1.18-nightly.250808.f9b79d74 → 0.1.18-nightly.250812.12fa8ad2

package/README.md

@@ -1,6 +1,8 @@
 # LLxprt Code
 
 [![LLxprt Code CI](https://github.com/acoliver/llxprt-code/actions/workflows/ci.yml/badge.svg)](https://github.com/acoliver/llxprt-code/actions/workflows/ci.yml)
+ 
+[![Mentioned in Awesome Gemini CLI](https://awesome.re/mentioned-badge.svg)](https://github.com/Piebald-AI/awesome-gemini-cli)
 
 ![LLxprt Code Screenshot](./docs/assets/llxprt-screenshot.png)
 
@@ -87,7 +89,26 @@ Direct access to o3, o1, GPT-4.1, and other OpenAI models:
 
 ### Using Anthropic
 
-Access Claude Sonnet 4, Claude Opus 4, and other Anthropic models:
+Access Claude Sonnet 4, Claude Opus 4.1, and other Anthropic models:
+
+#### Option 1: Log in with Anthropic to use your Claude Pro or Max account
+
+Use OAuth authentication to access Claude with your existing Claude Pro or Max subscription:
+
+1. Select the Anthropic provider:
+   ```
+   /provider anthropic
+   ```
+2. Authenticate with your Claude account:
+   ```
+   /auth
+   ```
+3. Your browser will open to the Claude authentication page
+4. Log in and authorize LLxprt Code
+5. Copy the authorization code shown and paste it back in the terminal
+6. You're now using your Claude Pro/Max account!
+
+#### Option 2: Use an API Key
 
 1. Get your API key from [Anthropic](https://console.anthropic.com/account/keys)
 2. Configure:
@@ -97,6 +118,32 @@ Access Claude Sonnet 4, Claude Opus 4, and other Anthropic models:
    /model claude-sonnet-4-20250115
    ```
 
+### Using Qwen
+
+Access Qwen3-Coder-Pro and other Qwen models for free:
+
+#### Option 1: Log in with Qwen (FREE)
+
+Use OAuth authentication to access Qwen with your free account:
+
+```
+/auth qwen
+```
+
+Your browser will open to the Qwen authentication page. Log in and authorize LLxprt Code, then copy the authorization code shown and paste it back in the terminal. You're now using Qwen3-Coder-Pro for free!
+
+#### Option 2: Use an API Key
+
+For advanced users who need API access:
+
+1. Get your API key from [Qwen](https://platform.qwen.ai/)
+2. Configure:
+   ```
+   /provider qwen
+   /key your-qwen-api-key
+   /model qwen3-coder-pro
+   ```
+
 ### Using Local Models
 
 Run models locally for complete privacy and control. LLxprt Code works with any OpenAI-compatible server.
@@ -277,7 +324,7 @@ Learn more in the [Prompt Configuration Guide](./docs/prompt-configuration.md).
 - `/baseurl` - Set custom API endpoint
 - `/key` - Set API key for current session
 - `/keyfile` - Load API key from file
-- `/auth` - Authenticate with Google (for Gemini provider)
+- `/auth` - Authenticate with Google (for Gemini), Anthropic (for Claude), or Qwen
 
 ### Troubleshooting
 

package/dist/index.d.ts

@@ -5,3 +5,9 @@
  */
 export * from './src/index.js';
 export { DEFAULT_GEMINI_MODEL, DEFAULT_GEMINI_FLASH_MODEL, DEFAULT_GEMINI_EMBEDDING_MODEL, } from './src/config/models.js';
+export { QwenDeviceFlow, DeviceFlowConfig, } from './src/auth/qwen-device-flow.js';
+export { MultiProviderTokenStore } from './src/auth/token-store.js';
+export { openBrowserSecurely, shouldLaunchBrowser, } from './src/utils/secure-browser-launcher.js';
+export { SettingsService } from './src/settings/SettingsService.js';
+export type { ISettingsService, GlobalSettings, SettingsChangeEvent, ProviderSettings, UISettings, AdvancedSettings, EventListener, EventUnsubscribe, } from './src/settings/types.js';
+export type { TelemetrySettings as SettingsTelemetrySettings } from './src/settings/types.js';

package/dist/index.js

@@ -5,4 +5,9 @@
  */
 export * from './src/index.js';
 export { DEFAULT_GEMINI_MODEL, DEFAULT_GEMINI_FLASH_MODEL, DEFAULT_GEMINI_EMBEDDING_MODEL, } from './src/config/models.js';
+export { QwenDeviceFlow, } from './src/auth/qwen-device-flow.js';
+export { MultiProviderTokenStore } from './src/auth/token-store.js';
+export { openBrowserSecurely, shouldLaunchBrowser, } from './src/utils/secure-browser-launcher.js';
+// Re-export settings system for explicit access
+export { SettingsService } from './src/settings/SettingsService.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,cAAc,GAEf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,wCAAwC,CAAC;AAEhD,gDAAgD;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC"}

package/dist/src/auth/anthropic-device-flow.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Anthropic OAuth 2.0 Device Flow Implementation
+ *
+ * Implements OAuth 2.0 device authorization grant flow for Anthropic Claude API.
+ * Based on the OAuth 2.0 Device Authorization Grant specification (RFC 8628).
+ */
+import { DeviceCodeResponse, OAuthToken } from './types.js';
+/**
+ * Configuration for Anthropic device flow authentication
+ */
+interface AnthropicFlowConfig {
+    clientId: string;
+    authorizationEndpoint: string;
+    tokenEndpoint: string;
+    scopes: string[];
+}
+/**
+ * Anthropic-specific OAuth 2.0 device flow implementation.
+ * Handles authentication for Claude API access.
+ */
+export declare class AnthropicDeviceFlow {
+    private config;
+    private codeVerifier?;
+    private codeChallenge?;
+    private state?;
+    constructor(config?: Partial<AnthropicFlowConfig>);
+    /**
+     * Generates PKCE code verifier and challenge using S256 method
+     */
+    private generatePKCE;
+    /**
+     * Initiates the OAuth flow by constructing the authorization URL.
+     * Since Anthropic doesn't have a device flow, we simulate it with authorization code flow.
+     */
+    initiateDeviceFlow(): Promise<DeviceCodeResponse>;
+    /**
+     * Exchange authorization code for access token (PKCE flow)
+     */
+    exchangeCodeForToken(authCodeWithState: string): Promise<OAuthToken>;
+    /**
+     * Polls for the access token after user authorization.
+     */
+    pollForToken(deviceCode: string): Promise<OAuthToken>;
+    /**
+     * Refreshes an expired access token using a refresh token.
+     */
+    refreshToken(refreshToken: string): Promise<OAuthToken>;
+    /**
+     * Maps Anthropic's token response to our standard OAuthToken format.
+     */
+    private mapTokenResponse;
+}
+export {};

package/dist/src/auth/anthropic-device-flow.js

@@ -0,0 +1,208 @@
+/**
+ * Anthropic OAuth 2.0 Device Flow Implementation
+ *
+ * Implements OAuth 2.0 device authorization grant flow for Anthropic Claude API.
+ * Based on the OAuth 2.0 Device Authorization Grant specification (RFC 8628).
+ */
+import { createHash, randomBytes } from 'crypto';
+/**
+ * Anthropic-specific OAuth 2.0 device flow implementation.
+ * Handles authentication for Claude API access.
+ */
+export class AnthropicDeviceFlow {
+    config;
+    codeVerifier;
+    codeChallenge;
+    state;
+    constructor(config) {
+        const defaultConfig = {
+            clientId: '9d1c250a-e61b-44d9-88ed-5944d1962f5e', // Anthropic's public OAuth client ID
+            authorizationEndpoint: 'https://claude.ai/oauth/authorize', // Use claude.ai like OpenCode's "max" mode
+            tokenEndpoint: 'https://console.anthropic.com/v1/oauth/token',
+            scopes: ['org:create_api_key', 'user:profile', 'user:inference'],
+        };
+        this.config = { ...defaultConfig, ...config };
+    }
+    /**
+     * Generates PKCE code verifier and challenge using S256 method
+     */
+    generatePKCE() {
+        // Generate a random code verifier (43-128 characters)
+        const _verifier = randomBytes(32).toString('base64url');
+        this.codeVerifier = _verifier;
+        // Generate code challenge using S256 (SHA256 hash)
+        const challenge = createHash('sha256')
+            .update(_verifier)
+            .digest('base64url');
+        this.codeChallenge = challenge;
+        return { verifier: _verifier, challenge };
+    }
+    /**
+     * Initiates the OAuth flow by constructing the authorization URL.
+     * Since Anthropic doesn't have a device flow, we simulate it with authorization code flow.
+     */
+    async initiateDeviceFlow() {
+        // Generate PKCE parameters
+        const { verifier, challenge } = this.generatePKCE();
+        // Use verifier as state like OpenCode does
+        this.state = verifier; // Store for later use in token exchange
+        // Build authorization URL with PKCE parameters
+        const params = new URLSearchParams({
+            code: 'true',
+            client_id: this.config.clientId,
+            response_type: 'code',
+            redirect_uri: 'https://console.anthropic.com/oauth/code/callback',
+            scope: this.config.scopes.join(' '),
+            code_challenge: challenge,
+            code_challenge_method: 'S256',
+            state: verifier, // Use verifier as state like OpenCode
+        });
+        const authUrl = `${this.config.authorizationEndpoint}?${params.toString()}`;
+        // Return a simulated device code response with the authorization URL
+        // The user will need to manually visit this URL and authorize
+        return {
+            device_code: verifier, // Use verifier as a tracking ID
+            user_code: 'ANTHROPIC', // Display code for user
+            verification_uri: 'https://console.anthropic.com/oauth/authorize',
+            verification_uri_complete: authUrl,
+            expires_in: 1800, // 30 minutes
+            interval: 5, // 5 seconds polling interval
+        };
+    }
+    /**
+     * Exchange authorization code for access token (PKCE flow)
+     */
+    async exchangeCodeForToken(authCodeWithState) {
+        if (!this.codeVerifier) {
+            throw new Error('No PKCE code verifier found - OAuth flow not initialized');
+        }
+        // OpenCode splits the code and state - format: code#state
+        const splits = authCodeWithState.split('#');
+        const authCode = splits[0];
+        const stateFromResponse = splits[1] || this.state; // Use state from response if available
+        // Debug logging
+        console.log('Exchanging authorization code:', {
+            codeLength: authCode.length,
+            codePreview: authCode.substring(0, 10) + '...',
+            hasVerifier: !!this.codeVerifier,
+            verifierLength: this.codeVerifier.length,
+            hasState: !!stateFromResponse,
+        });
+        // OpenCode sends JSON, not form-encoded!
+        const requestBody = {
+            grant_type: 'authorization_code',
+            code: authCode,
+            state: stateFromResponse, // Include state in the request
+            client_id: this.config.clientId,
+            redirect_uri: 'https://console.anthropic.com/oauth/code/callback',
+            code_verifier: this.codeVerifier,
+        };
+        console.log('Token request body:', JSON.stringify(requestBody));
+        const response = await fetch(this.config.tokenEndpoint, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json', // JSON, not form-encoded!
+            },
+            body: JSON.stringify(requestBody), // Send as JSON
+        });
+        if (!response.ok) {
+            const error = await response.text();
+            throw new Error(`Failed to exchange authorization code: ${error}`);
+        }
+        const data = await response.json();
+        console.log('Token response:', {
+            hasAccessToken: !!data.access_token,
+            hasRefreshToken: !!data.refresh_token,
+            tokenPreview: data.access_token
+                ? data.access_token.substring(0, 20) + '...'
+                : 'none',
+            expiresIn: data.expires_in,
+            scope: data.scope, // Log the actual scopes returned
+        });
+        return this.mapTokenResponse(data);
+    }
+    /**
+     * Polls for the access token after user authorization.
+     */
+    async pollForToken(deviceCode) {
+        const startTime = Date.now();
+        const expiresIn = 1800 * 1000; // 30 minutes in milliseconds
+        const interval = 5000; // 5 seconds default polling interval
+        while (Date.now() - startTime < expiresIn) {
+            try {
+                const response = await fetch(this.config.tokenEndpoint, {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/x-www-form-urlencoded',
+                    },
+                    body: new URLSearchParams({
+                        grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
+                        device_code: deviceCode,
+                        client_id: this.config.clientId,
+                    }),
+                });
+                if (response.ok) {
+                    const data = await response.json();
+                    return this.mapTokenResponse(data);
+                }
+                const error = await response.json();
+                // Check for pending authorization
+                if (error.error === 'authorization_pending') {
+                    await new Promise((resolve) => setTimeout(resolve, interval));
+                    continue;
+                }
+                // Check for slow down request
+                if (error.error === 'slow_down') {
+                    await new Promise((resolve) => setTimeout(resolve, interval * 2));
+                    continue;
+                }
+                // Handle other errors
+                throw new Error(`Token polling failed: ${error.error_description || error.error}`);
+            }
+            catch (error) {
+                if (error instanceof Error &&
+                    error.message.includes('Token polling failed')) {
+                    throw error;
+                }
+                // Network errors - continue polling
+                await new Promise((resolve) => setTimeout(resolve, interval));
+            }
+        }
+        throw new Error('Authorization timeout - user did not complete authentication');
+    }
+    /**
+     * Refreshes an expired access token using a refresh token.
+     */
+    async refreshToken(refreshToken) {
+        const response = await fetch(this.config.tokenEndpoint, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: new URLSearchParams({
+                grant_type: 'refresh_token',
+                refresh_token: refreshToken,
+                client_id: this.config.clientId,
+            }),
+        });
+        if (!response.ok) {
+            const error = await response.text();
+            throw new Error(`Failed to refresh Anthropic token: ${error}`);
+        }
+        const data = await response.json();
+        return this.mapTokenResponse(data);
+    }
+    /**
+     * Maps Anthropic's token response to our standard OAuthToken format.
+     */
+    mapTokenResponse(data) {
+        return {
+            access_token: data.access_token,
+            expiry: Math.floor(Date.now() / 1000) + (data.expires_in || 3600),
+            refresh_token: data.refresh_token,
+            scope: data.scope,
+            token_type: 'Bearer',
+        };
+    }
+}
+//# sourceMappingURL=anthropic-device-flow.js.map

package/dist/src/auth/anthropic-device-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic-device-flow.js","sourceRoot":"","sources":["../../../src/auth/anthropic-device-flow.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAYjD;;;GAGG;AACH,MAAM,OAAO,mBAAmB;IACtB,MAAM,CAAsB;IAC5B,YAAY,CAAU;IACtB,aAAa,CAAU;IACvB,KAAK,CAAU;IAEvB,YAAY,MAAqC;QAC/C,MAAM,aAAa,GAAwB;YACzC,QAAQ,EAAE,sCAAsC,EAAE,qCAAqC;YACvF,qBAAqB,EAAE,mCAAmC,EAAE,2CAA2C;YACvG,aAAa,EAAE,8CAA8C;YAC7D,MAAM,EAAE,CAAC,oBAAoB,EAAE,cAAc,EAAE,gBAAgB,CAAC;SACjE,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,aAAa,EAAE,GAAG,MAAM,EAAE,CAAC;IAChD,CAAC;IAED;;OAEG;IACK,YAAY;QAClB,sDAAsD;QACtD,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAE9B,mDAAmD;QACnD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC;aACnC,MAAM,CAAC,SAAS,CAAC;aACjB,MAAM,CAAC,WAAW,CAAC,CAAC;QACvB,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QAE/B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,kBAAkB;QACtB,2BAA2B;QAC3B,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpD,2CAA2C;QAC3C,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC,wCAAwC;QAE/D,+CAA+C;QAC/C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,MAAM;YACrB,YAAY,EAAE,mDAAmD;YACjE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACnC,cAAc,EAAE,SAAS;YACzB,qBAAqB,EAAE,MAAM;YAC7B,KAAK,EAAE,QAAQ,EAAE,sCAAsC;SACxD,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAE5E,qEAAqE;QACrE,8DAA8D;QAC9D,OAAO;YACL,WAAW,EAAE,QAAQ,EAAE,gCAAgC;YACvD,SAAS,EAAE,WAAW,EAAE,wBAAwB;YAChD,gBAAgB,EAAE,+CAA+C;YACjE,yBAAyB,EAAE,OAAO;YAClC,UAAU,EAAE,IAAI,EAAE,aAAa;YAC/B,QAAQ,EAAE,CAAC,EAAE,6BAA6B;SAC3C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CAAC,iBAAyB;QAClD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QAED,0DAA0D;QAC1D,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,uCAAuC;QAE1F,gBAAgB;QAChB,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE;YAC5C,UAAU,EAAE,QAAQ,CAAC,MAAM;YAC3B,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;YAC9C,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY;YAChC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM;YACxC,QAAQ,EAAE,CAAC,CAAC,iBAAiB;SAC9B,CAAC,CAAC;QAEH,yCAAyC;QACzC,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,oBAAoB;YAChC,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,iBAAiB,EAAE,+BAA+B;YACzD,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,mDAAmD;YACjE,aAAa,EAAE,IAAI,CAAC,YAAY;SACjC,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QAEhE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB,EAAE,0BAA0B;aAC/D;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,eAAe;SACnD,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE;YAC7B,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY;YACnC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa;YACrC,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC7B,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;gBAC5C,CAAC,CAAC,MAAM;YACV,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,iCAAiC;SACrD,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,6BAA6B;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,qCAAqC;QAE5D,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;oBACtD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,mCAAmC;qBACpD;oBACD,IAAI,EAAE,IAAI,eAAe,CAAC;wBACxB,UAAU,EAAE,8CAA8C;wBAC1D,WAAW,EAAE,UAAU;wBACvB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;qBAChC,CAAC;iBACH,CAAC,CAAC;gBAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACnC,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBACrC,CAAC;gBAED,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAEpC,kCAAkC;gBAClC,IAAI,KAAK,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;oBAC5C,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;oBAC9D,SAAS;gBACX,CAAC;gBAED,8BAA8B;gBAC9B,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;oBAChC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC;oBAClE,SAAS;gBACX,CAAC;gBAED,sBAAsB;gBACtB,MAAM,IAAI,KAAK,CACb,yBAAyB,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,KAAK,EAAE,CAClE,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACE,KAAK,YAAY,KAAK;oBACtB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAC9C,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,oCAAoC;gBACpC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAED,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,YAAoB;QACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,YAAY;gBAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;aAChC,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,IAA6B;QACpD,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,YAAsB;YACzC,MAAM,EACJ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAE,IAAI,CAAC,UAAqB,IAAI,IAAI,CAAC;YACvE,aAAa,EAAE,IAAI,CAAC,aAAmC;YACvD,KAAK,EAAE,IAAI,CAAC,KAA2B;YACvC,UAAU,EAAE,QAAQ;SACrB,CAAC;IACJ,CAAC;CACF"}

package/dist/src/auth/precedence.d.ts

@@ -0,0 +1,55 @@
+/**
+ * @license
+ * Copyright 2025 Vybestack LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export interface AuthPrecedenceConfig {
+    commandKey?: string;
+    commandKeyfile?: string;
+    cliKey?: string;
+    cliKeyfile?: string;
+    envKeyNames?: string[];
+    isOAuthEnabled?: boolean;
+    supportsOAuth?: boolean;
+    oauthProvider?: string;
+}
+import { OAuthToken } from './types.js';
+export interface OAuthManager {
+    getToken(provider: string): Promise<string | null>;
+    isAuthenticated(provider: string): Promise<boolean>;
+    getOAuthToken?(provider: string): Promise<OAuthToken | null>;
+}
+export declare class AuthPrecedenceResolver {
+    private config;
+    private oauthManager?;
+    constructor(config: AuthPrecedenceConfig, oauthManager?: OAuthManager);
+    /**
+     * Resolves authentication using the full precedence chain
+     * Returns the first available authentication method or null if none found
+     */
+    resolveAuthentication(): Promise<string | null>;
+    /**
+     * Check if any authentication method is available without triggering OAuth
+     */
+    hasNonOAuthAuthentication(): Promise<boolean>;
+    /**
+     * Check if OAuth is the only available authentication method
+     */
+    isOAuthOnlyAvailable(): Promise<boolean>;
+    /**
+     * Get authentication method name for debugging/logging
+     */
+    getAuthMethodName(): Promise<string | null>;
+    /**
+     * Reads API key from a file path, handling both absolute and relative paths
+     */
+    private readKeyFile;
+    /**
+     * Updates the configuration
+     */
+    updateConfig(newConfig: Partial<AuthPrecedenceConfig>): void;
+    /**
+     * Updates the OAuth manager
+     */
+    updateOAuthManager(oauthManager: OAuthManager): void;
+}

package/dist/src/auth/precedence.js

@@ -0,0 +1,211 @@
+/**
+ * @license
+ * Copyright 2025 Vybestack LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Authentication precedence utility for providers
+ *
+ * Implements the authentication precedence chain:
+ * 1. /key command key
+ * 2. /keyfile command keyfile
+ * 3. --key CLI argument
+ * 4. --keyfile CLI argument
+ * 5. Environment variables
+ * 6. OAuth (if enabled)
+ */
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+export class AuthPrecedenceResolver {
+    config;
+    oauthManager;
+    constructor(config, oauthManager) {
+        this.config = config;
+        this.oauthManager = oauthManager;
+    }
+    /**
+     * Resolves authentication using the full precedence chain
+     * Returns the first available authentication method or null if none found
+     */
+    async resolveAuthentication() {
+        // 1. Check /key command key (highest priority)
+        if (this.config.commandKey && this.config.commandKey.trim() !== '') {
+            return this.config.commandKey;
+        }
+        // 2. Check /keyfile command keyfile
+        if (this.config.commandKeyfile) {
+            try {
+                const keyFromFile = await this.readKeyFile(this.config.commandKeyfile);
+                if (keyFromFile) {
+                    return keyFromFile;
+                }
+            }
+            catch (error) {
+                if (process.env.DEBUG) {
+                    console.warn(`Failed to read command keyfile ${this.config.commandKeyfile}:`, error);
+                }
+            }
+        }
+        // 3. Check --key CLI argument
+        if (this.config.cliKey && this.config.cliKey.trim() !== '') {
+            return this.config.cliKey;
+        }
+        // 4. Check --keyfile CLI argument
+        if (this.config.cliKeyfile) {
+            try {
+                const keyFromFile = await this.readKeyFile(this.config.cliKeyfile);
+                if (keyFromFile) {
+                    return keyFromFile;
+                }
+            }
+            catch (error) {
+                if (process.env.DEBUG) {
+                    console.warn(`Failed to read CLI keyfile ${this.config.cliKeyfile}:`, error);
+                }
+            }
+        }
+        // 5. Check environment variables
+        if (this.config.envKeyNames && this.config.envKeyNames.length > 0) {
+            for (const envVarName of this.config.envKeyNames) {
+                const envValue = process.env[envVarName];
+                if (envValue && envValue.trim() !== '') {
+                    return envValue;
+                }
+            }
+        }
+        // 6. OAuth (if enabled and supported)
+        if (this.config.isOAuthEnabled &&
+            this.config.supportsOAuth &&
+            this.oauthManager &&
+            this.config.oauthProvider) {
+            try {
+                const token = await this.oauthManager.getToken(this.config.oauthProvider);
+                if (token) {
+                    return token;
+                }
+            }
+            catch (error) {
+                if (process.env.DEBUG) {
+                    console.warn(`Failed to get OAuth token for ${this.config.oauthProvider}:`, error);
+                }
+            }
+        }
+        // No authentication method available
+        return null;
+    }
+    /**
+     * Check if any authentication method is available without triggering OAuth
+     */
+    async hasNonOAuthAuthentication() {
+        // Check all precedence levels except OAuth
+        const tempConfig = { ...this.config, isOAuthEnabled: false };
+        const tempResolver = new AuthPrecedenceResolver(tempConfig, undefined);
+        const auth = await tempResolver.resolveAuthentication();
+        return auth !== null;
+    }
+    /**
+     * Check if OAuth is the only available authentication method
+     */
+    async isOAuthOnlyAvailable() {
+        const hasNonOAuth = await this.hasNonOAuthAuthentication();
+        return (!hasNonOAuth &&
+            this.config.isOAuthEnabled === true &&
+            this.config.supportsOAuth === true);
+    }
+    /**
+     * Get authentication method name for debugging/logging
+     */
+    async getAuthMethodName() {
+        // Check precedence levels and return method name
+        if (this.config.commandKey && this.config.commandKey.trim() !== '') {
+            return 'command-key';
+        }
+        if (this.config.commandKeyfile) {
+            try {
+                const keyFromFile = await this.readKeyFile(this.config.commandKeyfile);
+                if (keyFromFile) {
+                    return 'command-keyfile';
+                }
+            }
+            catch {
+                // Ignore errors for method detection
+            }
+        }
+        if (this.config.cliKey && this.config.cliKey.trim() !== '') {
+            return 'cli-key';
+        }
+        if (this.config.cliKeyfile) {
+            try {
+                const keyFromFile = await this.readKeyFile(this.config.cliKeyfile);
+                if (keyFromFile) {
+                    return 'cli-keyfile';
+                }
+            }
+            catch {
+                // Ignore errors for method detection
+            }
+        }
+        if (this.config.envKeyNames && this.config.envKeyNames.length > 0) {
+            for (const envVarName of this.config.envKeyNames) {
+                const envValue = process.env[envVarName];
+                if (envValue && envValue.trim() !== '') {
+                    return `env-${envVarName.toLowerCase()}`;
+                }
+            }
+        }
+        if (this.config.isOAuthEnabled &&
+            this.config.supportsOAuth &&
+            this.oauthManager &&
+            this.config.oauthProvider) {
+            try {
+                const isAuthenticated = await this.oauthManager.isAuthenticated(this.config.oauthProvider);
+                if (isAuthenticated) {
+                    return `oauth-${this.config.oauthProvider}`;
+                }
+            }
+            catch {
+                // Ignore errors for method detection
+            }
+        }
+        return null;
+    }
+    /**
+     * Reads API key from a file path, handling both absolute and relative paths
+     */
+    async readKeyFile(filePath) {
+        try {
+            // Handle relative paths from current working directory
+            const resolvedPath = path.isAbsolute(filePath)
+                ? filePath
+                : path.resolve(process.cwd(), filePath);
+            const content = await fs.readFile(resolvedPath, 'utf-8');
+            const key = content.trim();
+            if (key === '') {
+                if (process.env.DEBUG) {
+                    console.warn(`Key file ${filePath} is empty`);
+                }
+                return null;
+            }
+            return key;
+        }
+        catch (error) {
+            if (process.env.DEBUG) {
+                console.warn(`Failed to read key file ${filePath}:`, error);
+            }
+            return null;
+        }
+    }
+    /**
+     * Updates the configuration
+     */
+    updateConfig(newConfig) {
+        this.config = { ...this.config, ...newConfig };
+    }
+    /**
+     * Updates the OAuth manager
+     */
+    updateOAuthManager(oauthManager) {
+        this.oauthManager = oauthManager;
+    }
+}
+//# sourceMappingURL=precedence.js.map

package/dist/src/auth/precedence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"precedence.js","sourceRoot":"","sources":["../../../src/auth/precedence.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AA4BlC,MAAM,OAAO,sBAAsB;IACzB,MAAM,CAAuB;IAC7B,YAAY,CAAgB;IAEpC,YAAY,MAA4B,EAAE,YAA2B;QACnE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,qBAAqB;QACzB,+CAA+C;QAC/C,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACnE,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAChC,CAAC;QAED,oCAAoC;QACpC,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBACvE,IAAI,WAAW,EAAE,CAAC;oBAChB,OAAO,WAAW,CAAC;gBACrB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;oBACtB,OAAO,CAAC,IAAI,CACV,kCAAkC,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,EAC/D,KAAK,CACN,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC3D,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC5B,CAAC;QAED,kCAAkC;QAClC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACnE,IAAI,WAAW,EAAE,CAAC;oBAChB,OAAO,WAAW,CAAC;gBACrB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;oBACtB,OAAO,CAAC,IAAI,CACV,8BAA8B,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,EACvD,KAAK,CACN,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACzC,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;oBACvC,OAAO,QAAQ,CAAC;gBAClB,CAAC;YACH,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,IACE,IAAI,CAAC,MAAM,CAAC,cAAc;YAC1B,IAAI,CAAC,MAAM,CAAC,aAAa;YACzB,IAAI,CAAC,YAAY;YACjB,IAAI,CAAC,MAAM,CAAC,aAAa,EACzB,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAC1B,CAAC;gBACF,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;oBACtB,OAAO,CAAC,IAAI,CACV,iCAAiC,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,EAC7D,KAAK,CACN,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,qCAAqC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB;QAC7B,2CAA2C;QAC3C,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;QAC7D,MAAM,YAAY,GAAG,IAAI,sBAAsB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,qBAAqB,EAAE,CAAC;QACxD,OAAO,IAAI,KAAK,IAAI,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB;QACxB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAC3D,OAAO,CACL,CAAC,WAAW;YACZ,IAAI,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI;YACnC,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI,CACnC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB;QACrB,iDAAiD;QACjD,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACnE,OAAO,aAAa,CAAC;QACvB,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBACvE,IAAI,WAAW,EAAE,CAAC;oBAChB,OAAO,iBAAiB,CAAC;gBAC3B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,qCAAqC;YACvC,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC3D,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACnE,IAAI,WAAW,EAAE,CAAC;oBAChB,OAAO,aAAa,CAAC;gBACvB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,qCAAqC;YACvC,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACzC,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;oBACvC,OAAO,OAAO,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;QAED,IACE,IAAI,CAAC,MAAM,CAAC,cAAc;YAC1B,IAAI,CAAC,MAAM,CAAC,aAAa;YACzB,IAAI,CAAC,YAAY;YACjB,IAAI,CAAC,MAAM,CAAC,aAAa,EACzB,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAC1B,CAAC;gBACF,IAAI,eAAe,EAAE,CAAC;oBACpB,OAAO,SAAS,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC9C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,qCAAqC;YACvC,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CAAC,QAAgB;QACxC,IAAI,CAAC;YACH,uDAAuD;YACvD,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAC5C,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;YAE1C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAE3B,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;gBACf,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;oBACtB,OAAO,CAAC,IAAI,CAAC,YAAY,QAAQ,WAAW,CAAC,CAAC;gBAChD,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;gBACtB,OAAO,CAAC,IAAI,CAAC,2BAA2B,QAAQ,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAAwC;QACnD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,YAA0B;QAC3C,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;CACF"}