agent-relay 1.0.21 → 1.1.0

package/dist/cloud/api/onboarding.js

@@ -0,0 +1,407 @@
+/**
+ * Onboarding API Routes
+ *
+ * Handles CLI proxy authentication for Claude Code and other providers.
+ * Spawns CLI tools to get auth URLs, captures tokens.
+ */
+import { Router } from 'express';
+import { spawn } from 'child_process';
+import crypto from 'crypto';
+import { requireAuth } from './auth.js';
+import { db } from '../db/index.js';
+import { vault } from '../vault/index.js';
+export const onboardingRouter = Router();
+// All routes require authentication
+onboardingRouter.use(requireAuth);
+const activeSessions = new Map();
+// Clean up old sessions periodically
+setInterval(() => {
+    const now = Date.now();
+    for (const [id, session] of activeSessions) {
+        // Remove sessions older than 10 minutes
+        if (now - session.createdAt.getTime() > 10 * 60 * 1000) {
+            if (session.process) {
+                session.process.kill();
+            }
+            activeSessions.delete(id);
+        }
+    }
+}, 60000);
+/**
+ * CLI commands and URL patterns for each provider
+ */
+const CLI_AUTH_CONFIG = {
+    anthropic: {
+        // Claude Code CLI login
+        command: 'claude',
+        args: ['login', '--no-open'],
+        // Claude outputs: "Please open: https://..."
+        urlPattern: /(?:open|visit|go to)[:\s]+(\S+anthropic\S+)/i,
+        // Token might be in output or in credentials file
+        credentialPath: '~/.claude/credentials.json',
+    },
+    openai: {
+        // Codex CLI auth
+        command: 'codex',
+        args: ['auth', '--no-browser'],
+        urlPattern: /(?:open|visit|go to)[:\s]+(\S+openai\S+)/i,
+        credentialPath: '~/.codex/credentials.json',
+    },
+};
+/**
+ * POST /api/onboarding/cli/:provider/start
+ * Start CLI-based auth - spawns the CLI and captures auth URL
+ */
+onboardingRouter.post('/cli/:provider/start', async (req, res) => {
+    const { provider } = req.params;
+    const userId = req.session.userId;
+    const config = CLI_AUTH_CONFIG[provider];
+    if (!config) {
+        return res.status(400).json({
+            error: 'Provider not supported for CLI auth',
+            supportedProviders: Object.keys(CLI_AUTH_CONFIG),
+        });
+    }
+    // Create session
+    const sessionId = crypto.randomUUID();
+    const session = {
+        userId,
+        provider,
+        status: 'starting',
+        createdAt: new Date(),
+    };
+    activeSessions.set(sessionId, session);
+    try {
+        // Spawn CLI process
+        const proc = spawn(config.command, config.args, {
+            env: { ...process.env, NO_COLOR: '1' },
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        session.process = proc;
+        let _output = '';
+        // Capture stdout/stderr for auth URL
+        const handleOutput = (data) => {
+            const text = data.toString();
+            _output += text;
+            // Look for auth URL
+            const match = text.match(config.urlPattern);
+            if (match && match[1]) {
+                session.authUrl = match[1];
+                session.status = 'waiting_auth';
+            }
+            // Look for success indicators
+            if (text.toLowerCase().includes('success') ||
+                text.toLowerCase().includes('authenticated') ||
+                text.toLowerCase().includes('logged in')) {
+                session.status = 'success';
+            }
+        };
+        proc.stdout.on('data', handleOutput);
+        proc.stderr.on('data', handleOutput);
+        proc.on('error', (err) => {
+            session.status = 'error';
+            session.error = `Failed to start CLI: ${err.message}`;
+        });
+        proc.on('exit', async (code) => {
+            if (code === 0 && session.status !== 'error') {
+                session.status = 'success';
+                // Try to read credentials from file
+                await extractCredentials(session, config);
+            }
+            else if (session.status === 'starting') {
+                session.status = 'error';
+                session.error = `CLI exited with code ${code}`;
+            }
+        });
+        // Wait a moment for URL to appear
+        await new Promise(resolve => setTimeout(resolve, 2000));
+        // Return session info
+        if (session.authUrl) {
+            res.json({
+                sessionId,
+                status: 'waiting_auth',
+                authUrl: session.authUrl,
+                message: 'Open the auth URL to complete login',
+            });
+        }
+        else if (session.status === 'error') {
+            activeSessions.delete(sessionId);
+            res.status(500).json({ error: session.error || 'CLI auth failed to start' });
+        }
+        else {
+            // Still starting, return session ID to poll
+            res.json({
+                sessionId,
+                status: 'starting',
+                message: 'Auth session starting, poll for status',
+            });
+        }
+    }
+    catch (error) {
+        activeSessions.delete(sessionId);
+        console.error(`Error starting CLI auth for ${provider}:`, error);
+        res.status(500).json({ error: 'Failed to start CLI authentication' });
+    }
+});
+/**
+ * GET /api/onboarding/cli/:provider/status/:sessionId
+ * Check status of CLI auth session
+ */
+onboardingRouter.get('/cli/:provider/status/:sessionId', (req, res) => {
+    const { sessionId } = req.params;
+    const userId = req.session.userId;
+    const session = activeSessions.get(sessionId);
+    if (!session) {
+        return res.status(404).json({ error: 'Session not found or expired' });
+    }
+    if (session.userId !== userId) {
+        return res.status(403).json({ error: 'Unauthorized' });
+    }
+    res.json({
+        status: session.status,
+        authUrl: session.authUrl,
+        error: session.error,
+    });
+});
+/**
+ * POST /api/onboarding/cli/:provider/complete/:sessionId
+ * Mark CLI auth as complete and store credentials
+ */
+onboardingRouter.post('/cli/:provider/complete/:sessionId', async (req, res) => {
+    const { provider, sessionId } = req.params;
+    const userId = req.session.userId;
+    const { token } = req.body; // Optional: user can paste token directly
+    const session = activeSessions.get(sessionId);
+    if (!session) {
+        return res.status(404).json({ error: 'Session not found or expired' });
+    }
+    if (session.userId !== userId) {
+        return res.status(403).json({ error: 'Unauthorized' });
+    }
+    try {
+        // If token provided directly, use it
+        let accessToken = token || session.token;
+        // If no token yet, try to read from credentials file
+        if (!accessToken) {
+            const config = CLI_AUTH_CONFIG[provider];
+            if (config) {
+                await extractCredentials(session, config);
+                accessToken = session.token;
+            }
+        }
+        if (!accessToken) {
+            return res.status(400).json({
+                error: 'No token found. Please complete authentication or paste your token.',
+            });
+        }
+        // Store in vault
+        await vault.storeCredential({
+            userId,
+            provider,
+            accessToken,
+            scopes: getProviderScopes(provider),
+        });
+        // Clean up session
+        if (session.process) {
+            session.process.kill();
+        }
+        activeSessions.delete(sessionId);
+        res.json({
+            success: true,
+            message: `${provider} connected successfully`,
+        });
+    }
+    catch (error) {
+        console.error(`Error completing CLI auth for ${provider}:`, error);
+        res.status(500).json({ error: 'Failed to complete authentication' });
+    }
+});
+/**
+ * POST /api/onboarding/cli/:provider/cancel/:sessionId
+ * Cancel a CLI auth session
+ */
+onboardingRouter.post('/cli/:provider/cancel/:sessionId', (req, res) => {
+    const { sessionId } = req.params;
+    const userId = req.session.userId;
+    const session = activeSessions.get(sessionId);
+    if (session?.userId === userId) {
+        if (session.process) {
+            session.process.kill();
+        }
+        activeSessions.delete(sessionId);
+    }
+    res.json({ success: true });
+});
+/**
+ * POST /api/onboarding/token/:provider
+ * Directly store a token (for manual paste flow)
+ */
+onboardingRouter.post('/token/:provider', async (req, res) => {
+    const { provider } = req.params;
+    const userId = req.session.userId;
+    const { token, email } = req.body;
+    if (!token) {
+        return res.status(400).json({ error: 'Token is required' });
+    }
+    try {
+        // Validate token by making a test API call
+        const isValid = await validateProviderToken(provider, token);
+        if (!isValid) {
+            return res.status(400).json({ error: 'Invalid token' });
+        }
+        // Store in vault
+        await vault.storeCredential({
+            userId,
+            provider,
+            accessToken: token,
+            scopes: getProviderScopes(provider),
+            providerAccountEmail: email,
+        });
+        res.json({
+            success: true,
+            message: `${provider} connected successfully`,
+        });
+    }
+    catch (error) {
+        console.error(`Error storing token for ${provider}:`, error);
+        res.status(500).json({ error: 'Failed to store token' });
+    }
+});
+/**
+ * GET /api/onboarding/status
+ * Get overall onboarding status
+ */
+onboardingRouter.get('/status', async (req, res) => {
+    const userId = req.session.userId;
+    try {
+        const [user, credentials, repositories] = await Promise.all([
+            db.users.findById(userId),
+            db.credentials.findByUserId(userId),
+            db.repositories.findByUserId(userId),
+        ]);
+        const connectedProviders = credentials.map(c => c.provider);
+        const hasAIProvider = connectedProviders.some(p => ['anthropic', 'openai', 'google'].includes(p));
+        res.json({
+            steps: {
+                github: { complete: connectedProviders.includes('github') },
+                aiProvider: {
+                    complete: hasAIProvider,
+                    connected: connectedProviders.filter(p => p !== 'github'),
+                },
+                repository: {
+                    complete: repositories.length > 0,
+                    count: repositories.length,
+                },
+            },
+            onboardingComplete: user?.onboardingCompletedAt != null,
+            canCreateWorkspace: hasAIProvider && repositories.length > 0,
+        });
+    }
+    catch (error) {
+        console.error('Error getting onboarding status:', error);
+        res.status(500).json({ error: 'Failed to get status' });
+    }
+});
+/**
+ * POST /api/onboarding/complete
+ * Mark onboarding as complete
+ */
+onboardingRouter.post('/complete', async (req, res) => {
+    const userId = req.session.userId;
+    try {
+        await db.users.completeOnboarding(userId);
+        res.json({ success: true });
+    }
+    catch (error) {
+        console.error('Error completing onboarding:', error);
+        res.status(500).json({ error: 'Failed to complete onboarding' });
+    }
+});
+/**
+ * Helper: Extract credentials from CLI credential file
+ */
+async function extractCredentials(session, config) {
+    if (!config.credentialPath)
+        return;
+    try {
+        const fs = await import('fs/promises');
+        const os = await import('os');
+        const credPath = config.credentialPath.replace('~', os.homedir());
+        const content = await fs.readFile(credPath, 'utf8');
+        const creds = JSON.parse(content);
+        // Extract token based on provider structure
+        if (session.provider === 'anthropic') {
+            // Claude stores: { "oauth_token": "...", ... } or { "api_key": "..." }
+            session.token = creds.oauth_token || creds.access_token || creds.api_key;
+        }
+        else if (session.provider === 'openai') {
+            // Codex might store: { "token": "..." } or { "api_key": "..." }
+            session.token = creds.token || creds.access_token || creds.api_key;
+        }
+    }
+    catch (error) {
+        // Credentials file doesn't exist or isn't readable yet
+        console.log(`Could not read credentials file: ${error}`);
+    }
+}
+/**
+ * Helper: Get default scopes for a provider
+ */
+function getProviderScopes(provider) {
+    const scopes = {
+        anthropic: ['claude-code:execute', 'user:read'],
+        openai: ['codex:execute', 'chat:write'],
+        google: ['generative-language'],
+        github: ['read:user', 'user:email', 'repo'],
+    };
+    return scopes[provider] || [];
+}
+/**
+ * Helper: Validate a provider token by making a test API call
+ */
+async function validateProviderToken(provider, token) {
+    try {
+        const endpoints = {
+            anthropic: {
+                url: 'https://api.anthropic.com/v1/messages',
+                headers: {
+                    'x-api-key': token,
+                    'anthropic-version': '2023-06-01',
+                },
+            },
+            openai: {
+                url: 'https://api.openai.com/v1/models',
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                },
+            },
+            google: {
+                url: 'https://generativelanguage.googleapis.com/v1/models',
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                },
+            },
+        };
+        const config = endpoints[provider];
+        if (!config)
+            return true; // Unknown provider, assume valid
+        const response = await fetch(config.url, {
+            method: provider === 'anthropic' ? 'POST' : 'GET',
+            headers: config.headers,
+            ...(provider === 'anthropic' && {
+                body: JSON.stringify({
+                    model: 'claude-3-haiku-20240307',
+                    max_tokens: 1,
+                    messages: [{ role: 'user', content: 'test' }],
+                }),
+            }),
+        });
+        // 401/403 means invalid token, anything else (including rate limits) means valid
+        return response.status !== 401 && response.status !== 403;
+    }
+    catch (error) {
+        console.error(`Error validating ${provider} token:`, error);
+        return false;
+    }
+}
+//# sourceMappingURL=onboarding.js.map

package/dist/cloud/api/onboarding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.js","sourceRoot":"","sources":["../../../src/cloud/api/onboarding.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,KAAK,EAAgB,MAAM,eAAe,CAAC;AACpD,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE1C,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,EAAE,CAAC;AAEzC,oCAAoC;AACpC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAkBlC,MAAM,cAAc,GAAG,IAAI,GAAG,EAA0B,CAAC;AAEzD,qCAAqC;AACrC,WAAW,CAAC,GAAG,EAAE;IACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,cAAc,EAAE,CAAC;QAC3C,wCAAwC;QACxC,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YACvD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACzB,CAAC;YACD,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;AACH,CAAC,EAAE,KAAK,CAAC,CAAC;AAEV;;GAEG;AACH,MAAM,eAAe,GAMhB;IACH,SAAS,EAAE;QACT,wBAAwB;QACxB,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC;QAC5B,6CAA6C;QAC7C,UAAU,EAAE,8CAA8C;QAC1D,kDAAkD;QAClD,cAAc,EAAE,4BAA4B;KAC7C;IACD,MAAM,EAAE;QACN,iBAAiB;QACjB,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC;QAC9B,UAAU,EAAE,2CAA2C;QACvD,cAAc,EAAE,2BAA2B;KAC5C;CACF,CAAC;AAEF;;;GAGG;AACH,gBAAgB,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAClF,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAChC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAO,CAAC;IAEnC,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,KAAK,EAAE,qCAAqC;YAC5C,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB;IACjB,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACtC,MAAM,OAAO,GAAmB;QAC9B,MAAM;QACN,QAAQ;QACR,MAAM,EAAE,UAAU;QAClB,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC;IACF,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEvC,IAAI,CAAC;QACH,oBAAoB;QACpB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE;YAC9C,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE;YACtC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QAEH,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QACvB,IAAI,OAAO,GAAG,EAAE,CAAC;QAEjB,qCAAqC;QACrC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7B,OAAO,IAAI,IAAI,CAAC;YAEhB,oBAAoB;YACpB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC5C,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3B,OAAO,CAAC,MAAM,GAAG,cAAc,CAAC;YAClC,CAAC;YAED,8BAA8B;YAC9B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACtC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAC5C,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;YAC7B,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAErC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;YACzB,OAAO,CAAC,KAAK,GAAG,wBAAwB,GAAG,CAAC,OAAO,EAAE,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC7B,IAAI,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC7C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;gBAC3B,oCAAoC;gBACpC,MAAM,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5C,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACzC,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;gBACzB,OAAO,CAAC,KAAK,GAAG,wBAAwB,IAAI,EAAE,CAAC;YACjD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,kCAAkC;QAClC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAExD,sBAAsB;QACtB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,IAAI,CAAC;gBACP,SAAS;gBACT,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,OAAO,EAAE,qCAAqC;aAC/C,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YACtC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,0BAA0B,EAAE,CAAC,CAAC;QAC/E,CAAC;aAAM,CAAC;YACN,4CAA4C;YAC5C,GAAG,CAAC,IAAI,CAAC;gBACP,SAAS;gBACT,MAAM,EAAE,UAAU;gBAClB,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,+BAA+B,QAAQ,GAAG,EAAE,KAAK,CAAC,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,gBAAgB,CAAC,GAAG,CAAC,kCAAkC,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IACvF,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IACjC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAO,CAAC;IAEnC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,GAAG,CAAC,IAAI,CAAC;QACP,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,gBAAgB,CAAC,IAAI,CAAC,oCAAoC,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAChG,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAO,CAAC;IACnC,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,0CAA0C;IAEtE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,CAAC;QACH,qCAAqC;QACrC,IAAI,WAAW,GAAG,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;QAEzC,qDAAqD;QACrD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC1C,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,qEAAqE;aAC7E,CAAC,CAAC;QACL,CAAC;QAED,iBAAiB;QACjB,MAAM,KAAK,CAAC,eAAe,CAAC;YAC1B,MAAM;YACN,QAAQ;YACR,WAAW;YACX,MAAM,EAAE,iBAAiB,CAAC,QAAQ,CAAC;SACpC,CAAC,CAAC;QAEH,mBAAmB;QACnB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC;QACD,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEjC,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,GAAG,QAAQ,yBAAyB;SAC9C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,QAAQ,GAAG,EAAE,KAAK,CAAC,CAAC;QACnE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,gBAAgB,CAAC,IAAI,CAAC,kCAAkC,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IACxF,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IACjC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAO,CAAC;IAEnC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,OAAO,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC;QACD,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC9E,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAChC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAO,CAAC;IACnC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAElC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,CAAC;QACH,2CAA2C;QAC3C,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,iBAAiB;QACjB,MAAM,KAAK,CAAC,eAAe,CAAC;YAC1B,MAAM;YACN,QAAQ;YACR,WAAW,EAAE,KAAK;YAClB,MAAM,EAAE,iBAAiB,CAAC,QAAQ,CAAC;YACnC,oBAAoB,EAAE,KAAK;SAC5B,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,GAAG,QAAQ,yBAAyB;SAC9C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,2BAA2B,QAAQ,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACpE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAO,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1D,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YACzB,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC;YACnC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC;SACrC,CAAC,CAAC;QAEH,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,aAAa,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAChD,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC9C,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC;YACP,KAAK,EAAE;gBACL,MAAM,EAAE,EAAE,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBAC3D,UAAU,EAAE;oBACV,QAAQ,EAAE,aAAa;oBACvB,SAAS,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC;iBAC1D;gBACD,UAAU,EAAE;oBACV,QAAQ,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC;oBACjC,KAAK,EAAE,YAAY,CAAC,MAAM;iBAC3B;aACF;YACD,kBAAkB,EAAE,IAAI,EAAE,qBAAqB,IAAI,IAAI;YACvD,kBAAkB,EAAE,aAAa,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;SAC7D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;QACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACvE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAO,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;QACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAC/B,OAAuB,EACvB,MAAsC;IAEtC,IAAI,CAAC,MAAM,CAAC,cAAc;QAAE,OAAO;IAEnC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QACvC,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAElC,4CAA4C;QAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACrC,uEAAuE;YACvE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC;QAC3E,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACzC,gEAAgE;YAChE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC;QACrE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,uDAAuD;QACvD,OAAO,CAAC,GAAG,CAAC,oCAAoC,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,QAAgB;IACzC,MAAM,MAAM,GAA6B;QACvC,SAAS,EAAE,CAAC,qBAAqB,EAAE,WAAW,CAAC;QAC/C,MAAM,EAAE,CAAC,eAAe,EAAE,YAAY,CAAC;QACvC,MAAM,EAAE,CAAC,qBAAqB,CAAC;QAC/B,MAAM,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC;KAC5C,CAAC;IACF,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,qBAAqB,CAAC,QAAgB,EAAE,KAAa;IAClE,IAAI,CAAC;QACH,MAAM,SAAS,GAAqE;YAClF,SAAS,EAAE;gBACT,GAAG,EAAE,uCAAuC;gBAC5C,OAAO,EAAE;oBACP,WAAW,EAAE,KAAK;oBAClB,mBAAmB,EAAE,YAAY;iBAClC;aACF;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,kCAAkC;gBACvC,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,KAAK,EAAE;iBACjC;aACF;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,qDAAqD;gBAC1D,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,KAAK,EAAE;iBACjC;aACF;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,CAAC,iCAAiC;QAE3D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE;YACvC,MAAM,EAAE,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;YACjD,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI;gBAC9B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,yBAAyB;oBAChC,UAAU,EAAE,CAAC;oBACb,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;iBAC9C,CAAC;aACH,CAAC;SACH,CAAC,CAAC;QAEH,iFAAiF;QACjF,OAAO,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,oBAAoB,QAAQ,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/cloud/api/providers.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Providers API Routes
+ *
+ * Handles device flow authentication for AI providers (Claude, Codex, etc.)
+ */
+export declare const providersRouter: import("express-serve-static-core").Router;
+//# sourceMappingURL=providers.d.ts.map

package/dist/cloud/api/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../../src/cloud/api/providers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,eAAO,MAAM,eAAe,4CAAW,CAAC"}