@xiaoso/dsh-tool-plus 0.1.6 → 0.1.7-beta.0

package/lib/google-oauth-shared-BLVTvokk.mjs

@@ -1,147 +0,0 @@
-import { installBunShim as __installBunShim } from "./bun-shim.mjs";
-__installBunShim();
-import { c as OAuthError, h as LoginCancelledError } from "./error-C-f_Wnw4.mjs";
-import { t as OAuthCallbackFlow } from "./callback-server-CFJK-jvK.mjs";
-import { n as formatGoogleValidationRequiredMessage, t as extractGoogleValidationUrl } from "./google-validation-Cgbn3tWJ.mjs";
-//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/registry/oauth/google-oauth-shared.ts
-/**
-* Shared OAuth flow for Google-style providers (Gemini CLI, Antigravity).
-*
-* Both providers use the same authorization-code flow shape; only the client
-* credentials, scopes, endpoint constants, and project-discovery logic differ.
-*/
-/**
-* Per-request timeout for the post-callback provisioning phase (token exchange,
-* user-info, project discovery/onboarding, LRO polling). These Cloud Code
-* Assist calls normally settle in well under this window; a longer stall means
-* a hung endpoint that must surface a login error instead of hanging forever.
-* The callback server's own 300s deadline covers only the browser-callback wait
-* ({@link OAuthCallbackFlow}) and does not gate this phase.
-*/
-const OAUTH_REQUEST_TIMEOUT_MS = 3e4;
-/**
-* Throw {@link AIError.LoginCancelledError} when the controller signal has
-* already aborted. Gates each provisioning round-trip, which the callback-wait
-* cancellation checks in {@link OAuthCallbackFlow} do not reach.
-*/
-function throwIfLoginCancelled(signal) {
-	if (signal?.aborted) throw new LoginCancelledError(`OAuth login cancelled: ${String(signal.reason)}`);
-}
-/**
-* `fetch` for the provisioning phase: composes the controller signal with a
-* per-request timeout so a stalled endpoint aborts instead of hanging login,
-* and user cancellation aborts the in-flight request. Cancellation surfaces as
-* {@link AIError.LoginCancelledError}; a timeout surfaces as an
-* {@link AIError.OAuthError} with `kind: "timeout"`.
-*/
-async function oauthFetch(url, init, { provider, signal, timeoutMs = OAUTH_REQUEST_TIMEOUT_MS }) {
-	const timeoutSignal = AbortSignal.timeout(timeoutMs);
-	const requestSignal = signal ? AbortSignal.any([signal, timeoutSignal]) : timeoutSignal;
-	try {
-		return await fetch(url, {
-			...init,
-			signal: requestSignal
-		});
-	} catch (err) {
-		if (signal?.aborted) throw new LoginCancelledError(`OAuth login cancelled: ${String(signal.reason)}`);
-		if (timeoutSignal.aborted) throw new OAuthError(`Timed out after ${timeoutMs}ms waiting for ${url}`, {
-			kind: "timeout",
-			provider
-		});
-		throw err;
-	}
-}
-async function getUserEmail(accessToken, provider, signal) {
-	try {
-		const response = await oauthFetch("https://www.googleapis.com/oauth2/v1/userinfo?alt=json", { headers: { Authorization: `Bearer ${accessToken}` } }, {
-			provider,
-			signal
-		});
-		if (response.ok) return (await response.json()).email;
-	} catch {}
-}
-var GoogleOAuthFlow = class extends OAuthCallbackFlow {
-	config;
-	constructor(ctrl, config) {
-		super(ctrl, {
-			preferredPort: config.callbackPort,
-			callbackPath: config.callbackPath,
-			callbackHostname: "127.0.0.1"
-		});
-		this.config = config;
-	}
-	async generateAuthUrl(state, redirectUri) {
-		const authParams = new URLSearchParams({
-			client_id: this.config.clientId,
-			response_type: "code",
-			redirect_uri: redirectUri,
-			scope: this.config.scopes.join(" "),
-			state,
-			access_type: "offline",
-			prompt: "consent"
-		});
-		return {
-			url: `${this.config.authUrl}?${authParams.toString()}`,
-			instructions: "Complete the sign-in in your browser."
-		};
-	}
-	async exchangeToken(code, _state, redirectUri) {
-		const { provider } = this.config;
-		const signal = this.ctrl.signal;
-		throwIfLoginCancelled(signal);
-		this.ctrl.onProgress?.("Exchanging authorization code for tokens...");
-		const tokenResponse = await oauthFetch(this.config.tokenUrl, {
-			method: "POST",
-			headers: { "Content-Type": "application/x-www-form-urlencoded" },
-			body: new URLSearchParams({
-				client_id: this.config.clientId,
-				client_secret: this.config.clientSecret,
-				code,
-				grant_type: "authorization_code",
-				redirect_uri: redirectUri
-			})
-		}, {
-			provider,
-			signal
-		});
-		if (!tokenResponse.ok) {
-			const error = await tokenResponse.text();
-			throw new OAuthError(`Token exchange failed: ${error}`, {
-				kind: "token-exchange",
-				provider
-			});
-		}
-		const tokenData = await tokenResponse.json();
-		if (!tokenData.refresh_token) throw new OAuthError("No refresh token received. Please try again.", {
-			kind: "validation",
-			provider
-		});
-		throwIfLoginCancelled(signal);
-		this.ctrl.onProgress?.("Getting user info...");
-		const email = await getUserEmail(tokenData.access_token, provider, signal);
-		throwIfLoginCancelled(signal);
-		let projectId;
-		try {
-			projectId = await this.config.discoverProject(tokenData.access_token, this.ctrl.onProgress, signal);
-		} catch (err) {
-			const validationUrl = extractGoogleValidationUrl(err instanceof Error ? err.message : String(err));
-			if (!validationUrl) throw err;
-			throw new OAuthError(formatGoogleValidationRequiredMessage(validationUrl, "sign in again", email), {
-				kind: "validation",
-				provider
-			});
-		}
-		return {
-			refresh: tokenData.refresh_token,
-			access: tokenData.access_token,
-			expires: Date.now() + tokenData.expires_in * 1e3 - 3e5,
-			projectId,
-			email
-		};
-	}
-};
-async function runGoogleOAuthLogin(ctrl, config) {
-	return new GoogleOAuthFlow(ctrl, config).login();
-}
-//#endregion
-export { runGoogleOAuthLogin as n, throwIfLoginCancelled as r, oauthFetch as t };

package/lib/grammar-D-NqNUxQ.mjs

@@ -1,49 +0,0 @@
-import { installBunShim as __installBunShim } from "./bun-shim.mjs";
-__installBunShim();
-//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/providers/grammar.ts
-function compactGrammarDefinition(syntax, definition) {
-	if (syntax !== "lark") return definition;
-	return compactLarkGrammarDefinition(definition);
-}
-function compactLarkGrammarDefinition(definition) {
-	const lines = [];
-	for (const line of definition.split(/\r?\n/)) {
-		const uncommented = stripLarkLineComment(line).trimEnd();
-		if (uncommented.trim()) lines.push(uncommented);
-	}
-	return lines.join("\n");
-}
-function stripLarkLineComment(line) {
-	let inString;
-	let inRegex = false;
-	let escaped = false;
-	for (let i = 0; i < line.length; i++) {
-		const char = line[i];
-		const next = line[i + 1];
-		if (escaped) {
-			escaped = false;
-			continue;
-		}
-		if (char === "\\") {
-			escaped = true;
-			continue;
-		}
-		if (inString) {
-			if (char === inString) inString = void 0;
-			continue;
-		}
-		if (inRegex) {
-			if (char === "/") inRegex = false;
-			continue;
-		}
-		if (char === "/" && next === "/") return line.slice(0, i);
-		if (char === "\"" || char === "'") {
-			inString = char;
-			continue;
-		}
-		if (char === "/") inRegex = true;
-	}
-	return line;
-}
-//#endregion
-export { compactGrammarDefinition as t };

package/lib/identity-HNO1Oe9B.mjs

@@ -1,219 +0,0 @@
-import { installBunShim as __installBunShim } from "./bun-shim.mjs";
-__installBunShim();
-import { i as getBundledProviders, r as getBundledModels, w as modelFamilyToken } from "./models-DRA2c_8U.mjs";
-//#region node_modules/.pnpm/@oh-my-pi+pi-catalog@17.3.5/node_modules/@oh-my-pi/pi-catalog/src/identity/id.ts
-const LEADING_BRACKETED_AFFIX_PATTERN = /^(?:\s*(?:\[|【)[^\]】]+(?:\]|】)\s*)+/u;
-const TRAILING_BRACKETED_AFFIX_PATTERN = /(?:\s*(?:\[|【)[^\]】]+(?:\]|】)\s*)+$/u;
-const MODEL_ID_SEGMENT_PATTERN = /[a-z0-9.:-]+/g;
-const MODEL_FAMILY_PREFIX_PATTERN = /^(claude|gemini|gpt|grok|glm|qwen|deepseek|kimi|mimo|doubao|ernie|gpt-oss|gemma|minimax|step|command|jamba|llama|o[1345])/i;
-function normalizeModelIdWhitespace(value) {
-	return value.trim().replace(/\s+/g, " ");
-}
-/** Ordering for model-like segments: longest first, ties broken lexicographically. */
-function compareSegmentPreference(left, right) {
-	return left.length !== right.length ? right.length - left.length : left.localeCompare(right);
-}
-function getModelLikeIdSegments(modelId) {
-	const matches = normalizeModelIdWhitespace(modelId).toLowerCase().match(MODEL_ID_SEGMENT_PATTERN);
-	if (!matches) return [];
-	const segments = /* @__PURE__ */ new Set();
-	for (const segment of matches) if (MODEL_FAMILY_PREFIX_PATTERN.test(segment) && /\d/.test(segment)) segments.add(segment);
-	return [...segments].sort(compareSegmentPreference);
-}
-function getLongestModelLikeIdSegment(modelId) {
-	const matches = normalizeModelIdWhitespace(modelId).toLowerCase().match(MODEL_ID_SEGMENT_PATTERN);
-	if (!matches) return void 0;
-	let best;
-	for (const segment of matches) if (MODEL_FAMILY_PREFIX_PATTERN.test(segment) && /\d/.test(segment) && (best === void 0 || compareSegmentPreference(segment, best) < 0)) best = segment;
-	return best;
-}
-function hasBracketAffixMarker(value) {
-	for (let index = 0; index < value.length; index++) {
-		const code = value.charCodeAt(index);
-		if (code === 91 || code === 93 || code === 12304 || code === 12305) return true;
-	}
-	return false;
-}
-/**
-* Strip reseller / wrapper tags that are injected as bracketed affixes around an
-* upstream model id, e.g.
-*   "[Kiro] claude-opus-4-8"                -> "claude-opus-4-8"
-*   "[gcli转] gemini-3.1-pro-preview [假流]" -> "gemini-3.1-pro-preview"
-*
-* Candidates are returned most-stripped first: both ends, then leading-only, then trailing-only.
-*/
-function getBracketStrippedModelIdCandidates(modelId) {
-	if (!hasBracketAffixMarker(modelId)) return [];
-	const normalized = normalizeModelIdWhitespace(modelId);
-	if (!normalized) return [];
-	const strippedLeading = normalized.replace(LEADING_BRACKETED_AFFIX_PATTERN, "");
-	const withoutLeading = normalizeModelIdWhitespace(strippedLeading);
-	const withoutTrailing = normalizeModelIdWhitespace(normalized.replace(TRAILING_BRACKETED_AFFIX_PATTERN, ""));
-	const withoutBoth = normalizeModelIdWhitespace(strippedLeading.replace(TRAILING_BRACKETED_AFFIX_PATTERN, ""));
-	const candidates = /* @__PURE__ */ new Set();
-	for (const candidate of [
-		withoutBoth,
-		withoutLeading,
-		withoutTrailing
-	]) if (candidate && candidate !== normalized) candidates.add(candidate);
-	return [...candidates];
-}
-//#endregion
-//#region node_modules/.pnpm/@oh-my-pi+pi-catalog@17.3.5/node_modules/@oh-my-pi/pi-catalog/src/identity/markers.ts
-/**
-* Trailing-marker vocabulary shared by canonical-id resolution and
-* proxy-reference lookup. A "marker" is a routing/quantization/effort suffix
-* a reseller or aggregator appends to an upstream model id
-* (`-thinking`, `:nitro`, `-fp8`, …) that does not change model identity.
-*/
-const TRAILING_MARKERS = [
-	"thinking",
-	"customtools",
-	"high",
-	"low",
-	"medium",
-	"minimal",
-	"xhigh",
-	"free",
-	"cloud",
-	"exacto",
-	"nitro",
-	"original",
-	"optimized",
-	"nvfp4",
-	"fp8",
-	"fp4",
-	"bf16",
-	"int8",
-	"int4"
-];
-/**
-* Markers treated as identity-preserving ONLY when recovering bundled metadata
-* for a proxied model id, never during canonical-id coalescing: Perplexity's
-* `sonar-pro-search` is a distinct model from `sonar-pro`, so canonical
-* resolution must not strip `search`, while a proxy id like
-* `claude-opus-4-6-search` should still inherit the upstream pricing/limits.
-*/
-const REFERENCE_ONLY_TRAILING_MARKERS = ["search"];
-function buildTrailingMarkerPattern(markers) {
-	return new RegExp(`[-:](?:${markers.join("|")})$`, "i");
-}
-buildTrailingMarkerPattern(TRAILING_MARKERS);
-/** Marker pattern used by proxy-reference lookup (`search` included). */
-const REFERENCE_TRAILING_MARKER_PATTERN = buildTrailingMarkerPattern([...TRAILING_MARKERS, ...REFERENCE_ONLY_TRAILING_MARKERS]);
-//#endregion
-//#region node_modules/.pnpm/@oh-my-pi+pi-catalog@17.3.5/node_modules/@oh-my-pi/pi-catalog/src/identity/reference.ts
-function isZeroCostXaiOAuthReference(candidate) {
-	return candidate.provider === "xai-oauth" && candidate.cost.input === 0 && candidate.cost.output === 0 && candidate.cost.cacheRead === 0 && candidate.cost.cacheWrite === 0;
-}
-function shouldReplaceReference(existing, candidate) {
-	if (!existing) return true;
-	if (candidate.contextWindow !== existing.contextWindow) return (candidate.contextWindow ?? 0) > (existing.contextWindow ?? 0);
-	if (candidate.maxTokens !== existing.maxTokens) return (candidate.maxTokens ?? 0) > (existing.maxTokens ?? 0);
-	const existingHasCachePricing = existing.cost.cacheRead > 0 || existing.cost.cacheWrite > 0;
-	const candidateHasCachePricing = candidate.cost.cacheRead > 0 || candidate.cost.cacheWrite > 0;
-	if (candidateHasCachePricing !== existingHasCachePricing) return candidateHasCachePricing;
-	return existing.provider !== "openai" && candidate.provider === "openai";
-}
-function normalizeReferenceKey(value) {
-	return value.trim().toLowerCase();
-}
-/**
-* Build a reference index from a model catalog (typically the bundled models).
-* Pure: callers are responsible for memoizing the result.
-*/
-function buildModelReferenceIndex(models) {
-	const exact = /* @__PURE__ */ new Map();
-	for (const candidate of models) {
-		if (isZeroCostXaiOAuthReference(candidate)) continue;
-		const key = normalizeReferenceKey(candidate.id);
-		if (shouldReplaceReference(exact.get(key), candidate)) exact.set(key, candidate);
-	}
-	return {
-		exact,
-		suffixAlias: buildSuffixAliasMap(exact)
-	};
-}
-function buildSuffixAliasMap(exactReferences) {
-	const aliases = /* @__PURE__ */ new Map();
-	for (const reference of exactReferences.values()) {
-		const slashIndex = reference.id.lastIndexOf("/");
-		if (slashIndex === -1) continue;
-		const alias = getLongestModelLikeIdSegment(reference.id.slice(slashIndex + 1));
-		if (!alias) continue;
-		if (shouldReplaceReference(aliases.get(alias), reference)) aliases.set(alias, reference);
-	}
-	return aliases;
-}
-function stripReferenceTrailingMarker(candidate) {
-	const match = REFERENCE_TRAILING_MARKER_PATTERN.exec(candidate);
-	return match ? candidate.slice(0, match.index) : void 0;
-}
-function getReferenceCandidateIds(modelId) {
-	const candidates = /* @__PURE__ */ new Set();
-	const queue = [modelId];
-	for (let index = 0; index < queue.length; index += 1) {
-		const candidate = queue[index]?.trim();
-		if (!candidate || candidates.has(candidate)) continue;
-		candidates.add(candidate);
-		for (const stripped of getBracketStrippedModelIdCandidates(candidate)) queue.push(stripped);
-		for (const segment of getModelLikeIdSegments(candidate)) queue.push(segment);
-		for (const suffix of [":cloud", "-cloud"]) if (candidate.toLowerCase().endsWith(suffix)) queue.push(candidate.slice(0, -suffix.length));
-		const slashIndex = candidate.lastIndexOf("/");
-		if (slashIndex !== -1) queue.push(candidate.slice(slashIndex + 1));
-		const colonToDash = candidate.replace(/:/g, "-");
-		if (colonToDash !== candidate) queue.push(colonToDash);
-		const lowercased = candidate.toLowerCase();
-		if (lowercased !== candidate) queue.push(lowercased);
-		const strippedMarker = stripReferenceTrailingMarker(candidate);
-		if (strippedMarker) queue.push(strippedMarker);
-	}
-	return [...candidates];
-}
-/** Resolve a (possibly proxied/affixed) model id to its bundled upstream reference. */
-function resolveModelReference(modelId, index) {
-	if (modelId.startsWith("@")) return void 0;
-	for (const candidate of getReferenceCandidateIds(modelId)) {
-		const key = normalizeReferenceKey(candidate);
-		const reference = index.exact.get(key) ?? index.suffixAlias.get(key);
-		if (reference) return reference;
-	}
-}
-//#endregion
-//#region node_modules/.pnpm/@oh-my-pi+pi-catalog@17.3.5/node_modules/@oh-my-pi/pi-catalog/src/identity/bundled.ts
-/**
-* Memoized proxy-reference index over the bundled model catalog.
-*
-* Lazy: walking every bundled model (~12K) triggers thinking enrichment, so the
-* walk is deferred off module load and performed once. Consumers that need
-* non-bundled reference data use the pure builder directly
-* ({@link buildModelReferenceIndex}).
-*/
-let bundledModels;
-function getBundledModelList() {
-	bundledModels ??= getBundledProviders().flatMap((provider) => getBundledModels(provider));
-	return bundledModels;
-}
-let referenceIndex;
-/** Proxy-reference index over the bundled catalog. */
-function getBundledModelReferenceIndex() {
-	referenceIndex ??= buildModelReferenceIndex(getBundledModelList());
-	return referenceIndex;
-}
-function preferredDialect(modelId) {
-	switch (modelFamilyToken(modelId)) {
-		case "anthropic": return "anthropic";
-		case "glm": return "glm";
-		case "gemini": return "gemini";
-		case "gemma": return "gemma";
-		case "kimi": return "kimi";
-		case "qwen": return "qwen3";
-		case "deepseek": return "deepseek";
-		case "minimax": return "minimax";
-		case "openai":
-		case "gpt-oss": return "harmony";
-		default: return "xml";
-	}
-}
-//#endregion
-export { resolveModelReference as i, getBundledModelReferenceIndex as n, isZeroCostXaiOAuthReference as r, preferredDialect as t };

package/lib/kimi-DgcUpPtK.mjs

@@ -1,236 +0,0 @@
-import { installBunShim as __installBunShim } from "./bun-shim.mjs";
-__installBunShim();
-import { r as __exportAll } from "./fs-promises-shim-Bx0fpxuk.mjs";
-import { H as getAgentDir, P as $env } from "./src-BcD0_rQR.mjs";
-import { c as OAuthError, h as LoginCancelledError } from "./error-C-f_Wnw4.mjs";
-import "./utils-Cp2Mxf_U.mjs";
-import { n as isRecord } from "./type-guards-B9VVjRDK.mjs";
-import * as fs from "node:fs";
-import * as path from "node:path";
-import * as os from "node:os";
-import { scheduler } from "node:timers/promises";
-import * as crypto from "node:crypto";
-//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/package.json
-var version = "17.3.5";
-//#endregion
-//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/registry/oauth/kimi.ts
-/**
-* Kimi Code OAuth flow (device authorization grant)
-*/
-var kimi_exports = /* @__PURE__ */ __exportAll({
-	getKimiCommonHeaders: () => getKimiCommonHeaders,
-	loginKimi: () => loginKimi,
-	refreshKimiToken: () => refreshKimiToken
-});
-const CLIENT_ID = "17e5f671-d194-4dfb-9706-5516cb48c098";
-const DEFAULT_OAUTH_HOST = "https://auth.kimi.com";
-const DEVICE_ID_FILENAME = "kimi-device-id";
-const DEFAULT_POLL_INTERVAL_MS = 5e3;
-const DEFAULT_DEVICE_FLOW_TTL_MS = 9e5;
-const OAUTH_EXPIRY_SKEW_MS = 3e5;
-function resolveOAuthHost() {
-	return $env.KIMI_CODE_OAUTH_HOST || $env.KIMI_OAUTH_HOST || DEFAULT_OAUTH_HOST;
-}
-function formatDeviceModel(system, release, arch) {
-	return [
-		system,
-		release,
-		arch
-	].filter(Boolean).join(" ").trim();
-}
-function getDeviceModel() {
-	const platform = os.platform();
-	const release = os.release();
-	const arch = os.arch();
-	if (platform === "darwin") return formatDeviceModel("macOS", release, arch);
-	if (platform === "win32") return formatDeviceModel("Windows", release, arch);
-	return formatDeviceModel(platform === "linux" ? "Linux" : platform, release, arch);
-}
-let getDeviceId = () => {
-	const deviceIdPath = path.join(getAgentDir(), DEVICE_ID_FILENAME);
-	try {
-		const existing = fs.readFileSync(deviceIdPath, "utf-8").trim();
-		if (existing) {
-			getDeviceId = () => existing;
-			return existing;
-		}
-	} catch {}
-	const deviceId = crypto.randomUUID().replace(/-/g, "");
-	try {
-		fs.mkdirSync(path.dirname(deviceIdPath), { recursive: true });
-		fs.writeFileSync(deviceIdPath, `${deviceId}\n`, { mode: 384 });
-	} catch {}
-	getDeviceId = () => deviceId;
-	return deviceId;
-};
-function sanitizeHeaderValue(value, fallback = "") {
-	return value.replace(/[^\x20-\x7E]/g, "").trim() || fallback;
-}
-let getKimiCommonHeaders = () => {
-	const headers = Object.freeze({
-		"User-Agent": `KimiCLI/${version}`,
-		"X-Msh-Platform": "kimi_cli",
-		"X-Msh-Version": version,
-		"X-Msh-Device-Name": sanitizeHeaderValue(os.hostname(), "unknown"),
-		"X-Msh-Device-Model": sanitizeHeaderValue(getDeviceModel(), "unknown"),
-		"X-Msh-Os-Version": sanitizeHeaderValue(os.version(), "unknown"),
-		"X-Msh-Device-Id": sanitizeHeaderValue(getDeviceId(), "unknown")
-	});
-	getKimiCommonHeaders = () => headers;
-	return headers;
-};
-async function requestDeviceAuthorization() {
-	const response = await fetch(`${resolveOAuthHost()}/api/oauth/device_authorization`, {
-		method: "POST",
-		headers: {
-			"Content-Type": "application/x-www-form-urlencoded",
-			...getKimiCommonHeaders()
-		},
-		body: new URLSearchParams({ client_id: CLIENT_ID })
-	});
-	if (!response.ok) {
-		const text = await response.text();
-		throw new OAuthError(`Kimi device authorization failed: ${response.status} ${text}`, {
-			kind: "device-auth",
-			provider: "kimi",
-			status: response.status
-		});
-	}
-	const payload = await response.json();
-	const userCode = payload.user_code;
-	const deviceCode = payload.device_code;
-	const verificationUri = payload.verification_uri;
-	const verificationUriComplete = payload.verification_uri_complete;
-	if (!userCode || !deviceCode || !verificationUri) throw new OAuthError("Kimi device authorization response missing required fields", {
-		kind: "validation",
-		provider: "kimi"
-	});
-	const expiresInMs = typeof payload.expires_in === "number" ? payload.expires_in * 1e3 : DEFAULT_DEVICE_FLOW_TTL_MS;
-	const intervalMs = typeof payload.interval === "number" && payload.interval > 0 ? payload.interval * 1e3 : DEFAULT_POLL_INTERVAL_MS;
-	return {
-		userCode,
-		deviceCode,
-		verificationUri,
-		verificationUriComplete: verificationUriComplete || verificationUri,
-		expiresInMs,
-		intervalMs
-	};
-}
-function parseTokenPayload(payload, refreshTokenFallback) {
-	if (!payload.access_token || typeof payload.expires_in !== "number") throw new OAuthError("Kimi token response missing required fields", {
-		kind: "validation",
-		provider: "kimi"
-	});
-	const refresh = payload.refresh_token ?? refreshTokenFallback;
-	if (!refresh) throw new OAuthError("Kimi token response missing refresh token", {
-		kind: "validation",
-		provider: "kimi"
-	});
-	let accountId;
-	const tokenParts = payload.access_token.split(".");
-	const jwtPayloadPart = tokenParts.length === 3 ? tokenParts[1] : void 0;
-	if (jwtPayloadPart) try {
-		const jwtPayload = JSON.parse(new TextDecoder("utf-8").decode(Uint8Array.fromBase64(jwtPayloadPart, { alphabet: "base64url" })));
-		if (isRecord(jwtPayload)) {
-			const userId = typeof jwtPayload.user_id === "string" ? jwtPayload.user_id.trim() : "";
-			const subject = typeof jwtPayload.sub === "string" ? jwtPayload.sub.trim() : "";
-			accountId = userId || subject || void 0;
-		}
-	} catch {}
-	return {
-		access: payload.access_token,
-		refresh,
-		expires: Date.now() + payload.expires_in * 1e3 - OAUTH_EXPIRY_SKEW_MS,
-		accountId
-	};
-}
-async function pollForToken(deviceCode, intervalMs, expiresInMs, signal) {
-	const deadline = Date.now() + expiresInMs;
-	let waitMs = Math.max(1e3, intervalMs);
-	while (Date.now() < deadline) {
-		if (signal?.aborted) throw new LoginCancelledError();
-		const response = await fetch(`${resolveOAuthHost()}/api/oauth/token`, {
-			method: "POST",
-			headers: {
-				"Content-Type": "application/x-www-form-urlencoded",
-				...getKimiCommonHeaders()
-			},
-			body: new URLSearchParams({
-				client_id: CLIENT_ID,
-				device_code: deviceCode,
-				grant_type: "urn:ietf:params:oauth:grant-type:device_code"
-			})
-		});
-		const payload = await response.json();
-		if (response.ok && payload.access_token) return parseTokenPayload(payload);
-		const error = payload.error;
-		if (error === "authorization_pending") {
-			await scheduler.wait(waitMs, { signal });
-			continue;
-		}
-		if (error === "slow_down") {
-			waitMs += 5e3;
-			const retryAfter = typeof payload.interval === "number" ? payload.interval * 1e3 : void 0;
-			if (retryAfter && retryAfter > waitMs) waitMs = retryAfter;
-			await scheduler.wait(waitMs, { signal });
-			continue;
-		}
-		if (error === "expired_token") throw new OAuthError("Kimi device authorization expired", {
-			kind: "validation",
-			provider: "kimi"
-		});
-		if (error === "access_denied") throw new OAuthError("Kimi device authorization denied", {
-			kind: "validation",
-			provider: "kimi"
-		});
-		const description = payload.error_description ? `: ${payload.error_description}` : "";
-		throw new OAuthError(`Kimi device flow failed: ${error ?? response.status}${description}`, {
-			kind: "polling",
-			provider: "kimi"
-		});
-	}
-	throw new OAuthError("Kimi device flow timed out", {
-		kind: "timeout",
-		provider: "kimi"
-	});
-}
-/**
-* Login with Kimi Code OAuth (device code flow).
-*/
-async function loginKimi(options) {
-	const device = await requestDeviceAuthorization();
-	options.onAuth?.({
-		url: device.verificationUriComplete,
-		instructions: `Enter code: ${device.userCode}`
-	});
-	return pollForToken(device.deviceCode, device.intervalMs, device.expiresInMs, options.signal);
-}
-/**
-* Refresh Kimi OAuth token.
-*/
-async function refreshKimiToken(refreshToken) {
-	const response = await fetch(`${resolveOAuthHost()}/api/oauth/token`, {
-		method: "POST",
-		headers: {
-			"Content-Type": "application/x-www-form-urlencoded",
-			...getKimiCommonHeaders()
-		},
-		body: new URLSearchParams({
-			grant_type: "refresh_token",
-			refresh_token: refreshToken,
-			client_id: CLIENT_ID
-		})
-	});
-	if (!response.ok) {
-		const payload = await response.json().catch(() => void 0);
-		const description = payload?.error_description ? `: ${payload.error_description}` : "";
-		throw new OAuthError(`Kimi token refresh failed: ${response.status}${description}`, {
-			kind: "token-refresh",
-			provider: "kimi",
-			status: response.status
-		});
-	}
-	return parseTokenPayload(await response.json(), refreshToken);
-}
-//#endregion
-export { kimi_exports as n, getKimiCommonHeaders as t };