charness 0.0.0-stage → 3.0.0

package/dist/utils/openCodeAuthLogin.d.ts

@@ -0,0 +1,181 @@
+/**
+ * @description Pure helpers behind the OpenCode `/connect` OAuth (subscription)
+ * flow. The bot's `/connect` used to do API-key auth only (`PUT /auth/{id}` with
+ * `{type:'api',key}`); this layer adds provider OAuth by driving
+ * `opencode auth login -p <id> -m <label>` in a pty out-of-band — the same
+ * pattern as the json-stream Claude `/login` flow (`utils/claudeAuthLogin.ts`).
+ * These are the parse/decision helpers; the impure pty driving + per-thread
+ * state live in `agentLogin/agentLogin.ts`.
+ *
+ * Two OAuth shapes are handled, auto-detected from the pty output:
+ *  - DEVICE flow (openai "ChatGPT Pro/Plus (headless)", github-copilot, …): the
+ *    CLI prints a sign-in URL + a short code to ENTER at that URL, then polls
+ *    ("Waiting for authorization…") and exits 0 once the user authorises in a
+ *    browser. Nothing is pasted back — the bot relays URL+code and waits for exit.
+ *  - PASTE flow: the CLI prints a URL then waits for the user to paste an
+ *    authorization code back — the bot arms a pending-code state (next plain text
+ *    is written into the pty, then deleted as a secret).
+ *
+ * Success is authoritative from the on-disk `auth.json` (the provider's entry
+ * flips to `type:"oauth"`), with the process exit code as the fallback.
+ */
+/** One auth method offered by a provider in the `/provider/auth` catalog. */
+export interface OpenCodeAuthMethod {
+    /** `oauth` | `api` | (future) — verbatim from the catalog. */
+    type: string;
+    /** Human label, passed verbatim to `opencode auth login -m <label>`. */
+    label: string;
+    /** Whether the method carries extra `prompts` (multi-step, e.g. an instance URL). */
+    hasPrompts: boolean;
+}
+/**
+ * @description Strip ANSI/OSC escape sequences and carriage returns so the
+ * text-shape detectors below match against clean content. Deliberately minimal
+ * (detection-only) — the topic-facing relay reuses the fuller `cleanOutput`.
+ */
+export declare function stripAnsiForDetection(raw: string): string;
+/**
+ * @description Parse a provider's auth methods out of the `GET /provider/auth`
+ * catalog (`{ providerId: [{type,label,prompts?}, …] }`). Returns `[]` for an
+ * unknown provider or a malformed catalog. Order is preserved (the picker shows
+ * methods in catalog order).
+ */
+export declare function parseProviderAuthMethods(raw: unknown, providerId: string): OpenCodeAuthMethod[];
+/** Whether a provider owns a custom auth flow in the `/provider/auth` catalog. */
+export declare function checkProviderHasAuthCatalogEntry(raw: unknown, providerId: string): boolean;
+/**
+ * OpenCode lists ordinary API-key providers in `/provider`, not `/provider/auth`.
+ * Give those providers the same one-field key flow used by the native `/connect` UI.
+ */
+export declare function getGenericProviderAuthMethods(raw: unknown, providerId: string): OpenCodeAuthMethod[];
+/** An OAuth (subscription/account) method. */
+export declare function checkIsOAuthMethod(method: OpenCodeAuthMethod): boolean;
+/** A single-field API-key method (no extra prompts) — the legacy `/connect` path. */
+export declare function checkIsSimpleApiMethod(method: OpenCodeAuthMethod): boolean;
+/** argv for `opencode auth login`, skipping the interactive provider+method pickers. */
+export declare function buildOpenCodeAuthLoginArgs(providerId: string, methodLabel: string): string[];
+export declare function parseOpenCodeOAuthUrl(ptyOutput: string): string | null;
+export declare function parseOpenCodeDeviceCode(ptyOutput: string): string | null;
+/** The device flow has printed everything and is polling for authorisation. */
+export declare function checkIsAwaitingAuthorization(ptyOutput: string): boolean;
+export declare function checkIsOpenCodeOAuthPastePrompt(ptyOutput: string): boolean;
+/**
+ * @description Whether the accumulated pty output has reached the point where the
+ * sign-in info is fully rendered and ready to relay: a URL is present AND the
+ * flow has reached a stable stage (a device code, the "waiting" poll, or a paste
+ * prompt). Gating on this avoids relaying a URL that is still rendering.
+ */
+export declare function checkIsOAuthInfoReady(ptyOutput: string): boolean;
+/**
+ * @description Resolve the OpenCode credentials file path, honouring
+ * `XDG_DATA_HOME` (falls back to `~/.local/share`). This is where a completed
+ * `opencode auth login` writes the provider's credential entry.
+ */
+export declare function getOpenCodeAuthFilePath(env: {
+    XDG_DATA_HOME?: string;
+    HOME?: string;
+}): string;
+/**
+ * @description Whether the provider is authed in the parsed `auth.json` map. When
+ * `wantType` is given (e.g. `'oauth'`), the entry's `type` must match — this is
+ * what distinguishes a fresh OAuth success from a stale `api` entry left by an
+ * earlier key-based `/connect`. Returns `null` when the map is unreadable so the
+ * caller can fall back to the process exit code.
+ */
+export declare function checkProviderAuthed(authJson: unknown, providerId: string, wantType?: string): boolean | null;
+/**
+ * @description Final success decision for the OAuth flow. `auth.json` is
+ * authoritative (it reflects the real on-disk credential the CLI just wrote); the
+ * process exit code is only the fallback when the file could not be read
+ * (`authed === null`).
+ */
+export declare function checkIsOpenCodeOAuthSucceeded(input: {
+    exitCode: number | null;
+    authed: boolean | null;
+}): boolean;
+/**
+ * @description Short button label for a method in the `/connect` picker: a lock
+ * for OAuth, a key for API. The catalog label is used verbatim but capped so a
+ * long label never blows the inline-button width.
+ */
+export declare function buildConnectMethodButtonLabel(method: OpenCodeAuthMethod): string;
+/** Details parsed out of the CLI's `Go to: <authorize-url>` sign-in URL. */
+export interface OAuthAuthorizeDetails {
+    /** The loopback callback port from `redirect_uri` (e.g. 1455), or `null`. */
+    redirectPort: number | null;
+    /** The loopback callback path from `redirect_uri` (e.g. `/auth/callback`), or `null`. */
+    redirectPath: string | null;
+    /** Whether `redirect_uri` targets loopback (localhost / 127.0.0.1 / [::1]). */
+    isLoopback: boolean;
+    /** The `state` param the CLI generated (needed to complete a bare-code reply). */
+    state: string | null;
+}
+/**
+ * @description Parse the authorize URL rendered by `opencode auth login` into its
+ * loopback redirect target + `state`. Returns all-null/false when there is no
+ * URL yet or it carries no loopback `redirect_uri`. Robust to junk: a malformed
+ * URL yields the empty result rather than throwing.
+ */
+export declare function parseOAuthAuthorizeDetails(ptyOutput: string): OAuthAuthorizeDetails;
+/**
+ * @description A loopback (browser) OAuth flow: the CLI redirects to a localhost
+ * callback and shows NO device code (so it can't be relayed as a device flow).
+ * This is the shape that can't self-complete over Telegram and needs the paste
+ * bridge.
+ */
+export declare function checkIsLoopbackOAuthFlow(ptyOutput: string): boolean;
+export declare function checkIsPlausibleOAuthCode(text: string): boolean;
+/**
+ * @description Is `text` a plausible provider API key? A key is sent verbatim as
+ * an HTTP `Authorization: Bearer <key>` header, and HTTP header values are
+ * ISO-8859-1 with no whitespace/controls — so a value carrying spaces, tabs,
+ * newlines, control chars or non-Latin-1 characters (e.g. Cyrillic) can NEVER be
+ * a real key. Rejecting them up front turns a stray chat message ("я
+ * перезагрузил") captured by a stale `/connect` state into a clear error at
+ * paste time, instead of a cryptic `Header … has invalid value` on the next
+ * request (live 2026-07-20). Deliberately permissive otherwise — it
+ * only rules out the impossible, never guesses a provider's key shape.
+ */
+export declare function checkIsPlausibleProviderApiKey(text: string): boolean;
+/** A parsed OAuth callback URL the user pasted back (or one embedded in text). */
+export interface OAuthCallbackParts {
+    code: string | null;
+    state: string | null;
+    port: number | null;
+    path: string | null;
+}
+/**
+ * @description Extract callback parts from a pasted string IF it contains an
+ * `http(s)` URL that looks like an OAuth callback — i.e. it carries a `code`
+ * query param, or its path ends in `/callback`. Returns `null` when the text has
+ * no such URL (so the caller can fall back to bare-code parsing). Never throws.
+ */
+export declare function parseOAuthCallbackFromReply(text: string): OAuthCallbackParts | null;
+/**
+ * @name OpenCodeOAuthReply
+ * @description The classified user reply to a pending OAuth flow. URL-FIRST (a
+ * pasted callback URL wins), then a bare code, else `null` (not an OAuth reply —
+ * the caller must NOT consume it as one). This ordering is the requested
+ * behaviour: recognise a link first, otherwise recognise + validate a code.
+ */
+export type OpenCodeOAuthReply = ({
+    kind: 'callback';
+} & OAuthCallbackParts) | {
+    kind: 'code';
+    code: string;
+} | null;
+export declare function classifyOpenCodeOAuthReply(text: string): OpenCodeOAuthReply;
+/**
+ * @description Build the loopback completion URL to replay against the CLI's
+ * local callback server on the host: `http://127.0.0.1:<port><path>?code&state`.
+ * Returns `null` unless all of port, code and state are known (state may come
+ * from the stored authorize URL when the user pasted only a bare code). Path
+ * defaults to `/auth/callback`.
+ */
+export declare function buildLoopbackCompletionUrl(input: {
+    port: number | null;
+    path: string | null;
+    code: string | null;
+    state: string | null;
+}): string | null;
+//# sourceMappingURL=openCodeAuthLogin.d.ts.map

package/dist/utils/openCodeAuthLogin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openCodeAuthLogin.d.ts","sourceRoot":"","sources":["../../src/utils/openCodeAuthLogin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,6EAA6E;AAC7E,MAAM,WAAW,kBAAkB;IACjC,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CASzD;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAY/F;AAED,kFAAkF;AAClF,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAG1F;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAWpG;AAED,8CAA8C;AAC9C,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAEtE;AAED,qFAAqF;AACrF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAE1E;AAED,wFAAwF;AACxF,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAE5F;AAID,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGtE;AAQD,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGxE;AAED,+EAA+E;AAC/E,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAEvE;AAQD,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE1E;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAOhE;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,MAAM,CAGT;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,OAAO,EACjB,UAAU,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,GAAG,IAAI,CAQhB;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;CACxB,GAAG,OAAO,CAGV;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAIhF;AAYD,4EAA4E;AAC5E,MAAM,WAAW,qBAAqB;IACpC,6EAA6E;IAC7E,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,yFAAyF;IACzF,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,+EAA+E;IAC/E,UAAU,EAAE,OAAO,CAAC;IACpB,kFAAkF;IAClF,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAOD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,qBAAqB,CAgCnF;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAGnE;AAUD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CASpE;AAED,kFAAkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAmBnF;AAED;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAC1B,CAAC;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GAAG,kBAAkB,CAAC,GAC3C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B,IAAI,CAAC;AAET,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAM3E;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,GAAG,MAAM,GAAG,IAAI,CAMhB"}

package/dist/utils/openCodeAuthLogin.js

@@ -0,0 +1,393 @@
+"use strict";
+/**
+ * @description Pure helpers behind the OpenCode `/connect` OAuth (subscription)
+ * flow. The bot's `/connect` used to do API-key auth only (`PUT /auth/{id}` with
+ * `{type:'api',key}`); this layer adds provider OAuth by driving
+ * `opencode auth login -p <id> -m <label>` in a pty out-of-band — the same
+ * pattern as the json-stream Claude `/login` flow (`utils/claudeAuthLogin.ts`).
+ * These are the parse/decision helpers; the impure pty driving + per-thread
+ * state live in `agentLogin/agentLogin.ts`.
+ *
+ * Two OAuth shapes are handled, auto-detected from the pty output:
+ *  - DEVICE flow (openai "ChatGPT Pro/Plus (headless)", github-copilot, …): the
+ *    CLI prints a sign-in URL + a short code to ENTER at that URL, then polls
+ *    ("Waiting for authorization…") and exits 0 once the user authorises in a
+ *    browser. Nothing is pasted back — the bot relays URL+code and waits for exit.
+ *  - PASTE flow: the CLI prints a URL then waits for the user to paste an
+ *    authorization code back — the bot arms a pending-code state (next plain text
+ *    is written into the pty, then deleted as a secret).
+ *
+ * Success is authoritative from the on-disk `auth.json` (the provider's entry
+ * flips to `type:"oauth"`), with the process exit code as the fallback.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stripAnsiForDetection = stripAnsiForDetection;
+exports.parseProviderAuthMethods = parseProviderAuthMethods;
+exports.checkProviderHasAuthCatalogEntry = checkProviderHasAuthCatalogEntry;
+exports.getGenericProviderAuthMethods = getGenericProviderAuthMethods;
+exports.checkIsOAuthMethod = checkIsOAuthMethod;
+exports.checkIsSimpleApiMethod = checkIsSimpleApiMethod;
+exports.buildOpenCodeAuthLoginArgs = buildOpenCodeAuthLoginArgs;
+exports.parseOpenCodeOAuthUrl = parseOpenCodeOAuthUrl;
+exports.parseOpenCodeDeviceCode = parseOpenCodeDeviceCode;
+exports.checkIsAwaitingAuthorization = checkIsAwaitingAuthorization;
+exports.checkIsOpenCodeOAuthPastePrompt = checkIsOpenCodeOAuthPastePrompt;
+exports.checkIsOAuthInfoReady = checkIsOAuthInfoReady;
+exports.getOpenCodeAuthFilePath = getOpenCodeAuthFilePath;
+exports.checkProviderAuthed = checkProviderAuthed;
+exports.checkIsOpenCodeOAuthSucceeded = checkIsOpenCodeOAuthSucceeded;
+exports.buildConnectMethodButtonLabel = buildConnectMethodButtonLabel;
+exports.parseOAuthAuthorizeDetails = parseOAuthAuthorizeDetails;
+exports.checkIsLoopbackOAuthFlow = checkIsLoopbackOAuthFlow;
+exports.checkIsPlausibleOAuthCode = checkIsPlausibleOAuthCode;
+exports.checkIsPlausibleProviderApiKey = checkIsPlausibleProviderApiKey;
+exports.parseOAuthCallbackFromReply = parseOAuthCallbackFromReply;
+exports.classifyOpenCodeOAuthReply = classifyOpenCodeOAuthReply;
+exports.buildLoopbackCompletionUrl = buildLoopbackCompletionUrl;
+const path = __importStar(require("path"));
+/**
+ * @description Strip ANSI/OSC escape sequences and carriage returns so the
+ * text-shape detectors below match against clean content. Deliberately minimal
+ * (detection-only) — the topic-facing relay reuses the fuller `cleanOutput`.
+ */
+function stripAnsiForDetection(raw) {
+    return raw
+        // CSI sequences: ESC [ … final-byte
+        .replace(/\u001b\[[0-9;?]*[ -/]*[@-~]/g, '')
+        // OSC sequences: ESC ] … (BEL | ESC \)
+        .replace(/\u001b\][^\u0007\u001b]*(?:\u0007|\u001b\\)/g, '')
+        // stray single-char escapes
+        .replace(/\u001b[@-Z\\-_]/g, '')
+        .replace(/\r/g, '');
+}
+/**
+ * @description Parse a provider's auth methods out of the `GET /provider/auth`
+ * catalog (`{ providerId: [{type,label,prompts?}, …] }`). Returns `[]` for an
+ * unknown provider or a malformed catalog. Order is preserved (the picker shows
+ * methods in catalog order).
+ */
+function parseProviderAuthMethods(raw, providerId) {
+    if (!raw || typeof raw !== 'object')
+        return [];
+    const methods = raw[providerId];
+    if (!Array.isArray(methods))
+        return [];
+    const out = [];
+    for (const m of methods) {
+        if (!m || typeof m !== 'object')
+            continue;
+        const { type, label, prompts } = m;
+        if (typeof type !== 'string' || typeof label !== 'string')
+            continue;
+        out.push({ type, label, hasPrompts: Array.isArray(prompts) && prompts.length > 0 });
+    }
+    return out;
+}
+/** Whether a provider owns a custom auth flow in the `/provider/auth` catalog. */
+function checkProviderHasAuthCatalogEntry(raw, providerId) {
+    if (!raw || typeof raw !== 'object')
+        return false;
+    return Array.isArray(raw[providerId]);
+}
+/**
+ * OpenCode lists ordinary API-key providers in `/provider`, not `/provider/auth`.
+ * Give those providers the same one-field key flow used by the native `/connect` UI.
+ */
+function getGenericProviderAuthMethods(raw, providerId) {
+    if (!raw || typeof raw !== 'object')
+        return [];
+    const providers = raw.all;
+    if (!Array.isArray(providers))
+        return [];
+    const isAvailable = providers.some((provider) => {
+        if (!provider || typeof provider !== 'object')
+            return false;
+        return provider.id === providerId;
+    });
+    return isAvailable
+        ? [{ type: 'api', label: 'Manually enter API Key', hasPrompts: false }]
+        : [];
+}
+/** An OAuth (subscription/account) method. */
+function checkIsOAuthMethod(method) {
+    return method.type === 'oauth';
+}
+/** A single-field API-key method (no extra prompts) — the legacy `/connect` path. */
+function checkIsSimpleApiMethod(method) {
+    return method.type === 'api' && !method.hasPrompts;
+}
+/** argv for `opencode auth login`, skipping the interactive provider+method pickers. */
+function buildOpenCodeAuthLoginArgs(providerId, methodLabel) {
+    return ['auth', 'login', '-p', providerId, '-m', methodLabel];
+}
+/** First `http(s)` URL in the (ANSI-stripped) pty output — the sign-in link. */
+const oauthUrlRe = /https?:\/\/[^\s\u0000-\u001f]+/;
+function parseOpenCodeOAuthUrl(ptyOutput) {
+    const match = stripAnsiForDetection(ptyOutput).match(oauthUrlRe);
+    return match ? match[0] : null;
+}
+/**
+ * @description The short device code the user types AT the sign-in URL
+ * ("Enter code: 95J2-4U74J"). Returns the code, or `null` for a non-device
+ * (paste-style) flow that shows no such line.
+ */
+const deviceCodeRe = /Enter code:\s*([A-Za-z0-9][A-Za-z0-9-]{3,})/;
+function parseOpenCodeDeviceCode(ptyOutput) {
+    const match = stripAnsiForDetection(ptyOutput).match(deviceCodeRe);
+    return match ? match[1] : null;
+}
+/** The device flow has printed everything and is polling for authorisation. */
+function checkIsAwaitingAuthorization(ptyOutput) {
+    return /Waiting for authorization/i.test(stripAnsiForDetection(ptyOutput));
+}
+/**
+ * @description A paste-style flow is asking for the authorization code back
+ * (the bot then treats the next plain text as that code). Kept a closed set of
+ * phrasings so an unrelated line never false-arms the code-paste state.
+ */
+const pastePromptRe = /paste (?:the )?code|enter the (?:authorization|auth) code|authorization code:/i;
+function checkIsOpenCodeOAuthPastePrompt(ptyOutput) {
+    return pastePromptRe.test(stripAnsiForDetection(ptyOutput));
+}
+/**
+ * @description Whether the accumulated pty output has reached the point where the
+ * sign-in info is fully rendered and ready to relay: a URL is present AND the
+ * flow has reached a stable stage (a device code, the "waiting" poll, or a paste
+ * prompt). Gating on this avoids relaying a URL that is still rendering.
+ */
+function checkIsOAuthInfoReady(ptyOutput) {
+    if (!parseOpenCodeOAuthUrl(ptyOutput))
+        return false;
+    return (parseOpenCodeDeviceCode(ptyOutput) !== null ||
+        checkIsAwaitingAuthorization(ptyOutput) ||
+        checkIsOpenCodeOAuthPastePrompt(ptyOutput));
+}
+/**
+ * @description Resolve the OpenCode credentials file path, honouring
+ * `XDG_DATA_HOME` (falls back to `~/.local/share`). This is where a completed
+ * `opencode auth login` writes the provider's credential entry.
+ */
+function getOpenCodeAuthFilePath(env) {
+    const dataHome = env.XDG_DATA_HOME?.trim() || path.join(env.HOME || '', '.local', 'share');
+    return path.join(dataHome, 'opencode', 'auth.json');
+}
+/**
+ * @description Whether the provider is authed in the parsed `auth.json` map. When
+ * `wantType` is given (e.g. `'oauth'`), the entry's `type` must match — this is
+ * what distinguishes a fresh OAuth success from a stale `api` entry left by an
+ * earlier key-based `/connect`. Returns `null` when the map is unreadable so the
+ * caller can fall back to the process exit code.
+ */
+function checkProviderAuthed(authJson, providerId, wantType) {
+    if (authJson === null || authJson === undefined)
+        return null;
+    if (typeof authJson !== 'object')
+        return false;
+    const entry = authJson[providerId];
+    if (!entry || typeof entry !== 'object')
+        return false;
+    const type = entry.type;
+    if (typeof type !== 'string')
+        return false;
+    return wantType ? type === wantType : true;
+}
+/**
+ * @description Final success decision for the OAuth flow. `auth.json` is
+ * authoritative (it reflects the real on-disk credential the CLI just wrote); the
+ * process exit code is only the fallback when the file could not be read
+ * (`authed === null`).
+ */
+function checkIsOpenCodeOAuthSucceeded(input) {
+    if (input.authed !== null)
+        return input.authed;
+    return input.exitCode === 0;
+}
+/**
+ * @description Short button label for a method in the `/connect` picker: a lock
+ * for OAuth, a key for API. The catalog label is used verbatim but capped so a
+ * long label never blows the inline-button width.
+ */
+function buildConnectMethodButtonLabel(method) {
+    const emoji = checkIsOAuthMethod(method) ? '🔓' : '🔑';
+    const label = method.label.length > 40 ? `${method.label.slice(0, 39)}…` : method.label;
+    return `${emoji} ${label}`;
+}
+function checkIsLoopbackHost(host) {
+    const h = host.toLowerCase();
+    return h === 'localhost' || h === '127.0.0.1' || h === '::1' || h === '[::1]';
+}
+/**
+ * @description Parse the authorize URL rendered by `opencode auth login` into its
+ * loopback redirect target + `state`. Returns all-null/false when there is no
+ * URL yet or it carries no loopback `redirect_uri`. Robust to junk: a malformed
+ * URL yields the empty result rather than throwing.
+ */
+function parseOAuthAuthorizeDetails(ptyOutput) {
+    const empty = {
+        redirectPort: null,
+        redirectPath: null,
+        isLoopback: false,
+        state: null,
+    };
+    const authorizeUrl = parseOpenCodeOAuthUrl(ptyOutput);
+    if (!authorizeUrl)
+        return empty;
+    let parsed;
+    try {
+        parsed = new URL(authorizeUrl);
+    }
+    catch {
+        return empty;
+    }
+    const state = parsed.searchParams.get('state');
+    const redirectUri = parsed.searchParams.get('redirect_uri');
+    if (!redirectUri)
+        return { ...empty, state };
+    let redirect;
+    try {
+        redirect = new URL(redirectUri);
+    }
+    catch {
+        return { ...empty, state };
+    }
+    const isLoopback = checkIsLoopbackHost(redirect.hostname);
+    const port = redirect.port ? Number(redirect.port) : null;
+    return {
+        redirectPort: Number.isFinite(port) ? port : null,
+        redirectPath: redirect.pathname || null,
+        isLoopback,
+        state,
+    };
+}
+/**
+ * @description A loopback (browser) OAuth flow: the CLI redirects to a localhost
+ * callback and shows NO device code (so it can't be relayed as a device flow).
+ * This is the shape that can't self-complete over Telegram and needs the paste
+ * bridge.
+ */
+function checkIsLoopbackOAuthFlow(ptyOutput) {
+    if (parseOpenCodeDeviceCode(ptyOutput) !== null)
+        return false;
+    return parseOAuthAuthorizeDetails(ptyOutput).isLoopback;
+}
+/**
+ * @description Is `text` a plausible OAuth authorization code? Deliberately
+ * strict so a stale "awaiting reply" state can never swallow an unrelated chat
+ * message (the "я перезагрузил" bug): a real code is a single token — no
+ * whitespace, ASCII only, url-safe charset (optionally `#state`), bounded
+ * length. A normal sentence (spaces / non-Latin) is rejected.
+ */
+const oauthCodeRe = /^[A-Za-z0-9._~+/=#-]{8,1024}$/;
+function checkIsPlausibleOAuthCode(text) {
+    return oauthCodeRe.test(text.trim());
+}
+/**
+ * @description Is `text` a plausible provider API key? A key is sent verbatim as
+ * an HTTP `Authorization: Bearer <key>` header, and HTTP header values are
+ * ISO-8859-1 with no whitespace/controls — so a value carrying spaces, tabs,
+ * newlines, control chars or non-Latin-1 characters (e.g. Cyrillic) can NEVER be
+ * a real key. Rejecting them up front turns a stray chat message ("я
+ * перезагрузил") captured by a stale `/connect` state into a clear error at
+ * paste time, instead of a cryptic `Header … has invalid value` on the next
+ * request (live 2026-07-20). Deliberately permissive otherwise — it
+ * only rules out the impossible, never guesses a provider's key shape.
+ */
+function checkIsPlausibleProviderApiKey(text) {
+    const key = text.trim();
+    if (key.length < 8 || key.length > 4096)
+        return false;
+    // No whitespace/controls anywhere, and every char within Latin-1 (0x21–0xFF).
+    for (const ch of key) {
+        const code = ch.codePointAt(0);
+        if (code <= 0x20 || code === 0x7f || code > 0xff)
+            return false;
+    }
+    return true;
+}
+/**
+ * @description Extract callback parts from a pasted string IF it contains an
+ * `http(s)` URL that looks like an OAuth callback — i.e. it carries a `code`
+ * query param, or its path ends in `/callback`. Returns `null` when the text has
+ * no such URL (so the caller can fall back to bare-code parsing). Never throws.
+ */
+function parseOAuthCallbackFromReply(text) {
+    const urlMatch = stripAnsiForDetection(text).match(oauthUrlRe);
+    if (!urlMatch)
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(urlMatch[0]);
+    }
+    catch {
+        return null;
+    }
+    const code = parsed.searchParams.get('code');
+    const isCallbackPath = /\/callback\/?$/i.test(parsed.pathname);
+    if (!code && !isCallbackPath)
+        return null;
+    const port = parsed.port ? Number(parsed.port) : null;
+    return {
+        code,
+        state: parsed.searchParams.get('state'),
+        port: Number.isFinite(port) ? port : null,
+        path: parsed.pathname || null,
+    };
+}
+function classifyOpenCodeOAuthReply(text) {
+    const callback = parseOAuthCallbackFromReply(text);
+    if (callback)
+        return { kind: 'callback', ...callback };
+    const trimmed = text.trim();
+    if (checkIsPlausibleOAuthCode(trimmed))
+        return { kind: 'code', code: trimmed };
+    return null;
+}
+/**
+ * @description Build the loopback completion URL to replay against the CLI's
+ * local callback server on the host: `http://127.0.0.1:<port><path>?code&state`.
+ * Returns `null` unless all of port, code and state are known (state may come
+ * from the stored authorize URL when the user pasted only a bare code). Path
+ * defaults to `/auth/callback`.
+ */
+function buildLoopbackCompletionUrl(input) {
+    const { port, code, state } = input;
+    if (port === null || !code || !state)
+        return null;
+    const path = input.path && input.path.startsWith('/') ? input.path : '/auth/callback';
+    const params = new URLSearchParams({ code, state });
+    return `http://127.0.0.1:${port}${path}?${params.toString()}`;
+}
+//# sourceMappingURL=openCodeAuthLogin.js.map

package/dist/utils/openCodeAuthLogin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openCodeAuthLogin.js","sourceRoot":"","sources":["../../src/utils/openCodeAuthLogin.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmBH,sDASC;AAQD,4DAYC;AAGD,4EAGC;AAMD,sEAWC;AAGD,gDAEC;AAGD,wDAEC;AAGD,gEAEC;AAID,sDAGC;AAQD,0DAGC;AAGD,oEAEC;AAQD,0EAEC;AAQD,sDAOC;AAOD,0DAMC;AASD,kDAYC;AAQD,sEAMC;AAOD,sEAIC;AAmCD,gEAgCC;AAQD,4DAGC;AAUD,8DAEC;AAaD,wEASC;AAgBD,kEAmBC;AAcD,gEAMC;AASD,gEAWC;AA1XD,2CAA6B;AAY7B;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,GAAW;IAC/C,OAAO,GAAG;QACR,oCAAoC;SACnC,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC;QAC5C,uCAAuC;SACtC,OAAO,CAAC,8CAA8C,EAAE,EAAE,CAAC;QAC5D,4BAA4B;SAC3B,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;SAC/B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB,CAAC,GAAY,EAAE,UAAkB;IACvE,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAI,GAA+B,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QAC1C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAA2D,CAAC;QAC7F,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QACpE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kFAAkF;AAClF,SAAgB,gCAAgC,CAAC,GAAY,EAAE,UAAkB;IAC/E,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,KAAK,CAAC,OAAO,CAAE,GAA+B,CAAC,UAAU,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,SAAgB,6BAA6B,CAAC,GAAY,EAAE,UAAkB;IAC5E,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAI,GAAyB,CAAC,GAAG,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IACzC,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC9C,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5D,OAAQ,QAA6B,CAAC,EAAE,KAAK,UAAU,CAAC;IAC1D,CAAC,CAAC,CAAC;IACH,OAAO,WAAW;QAChB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACvE,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,8CAA8C;AAC9C,SAAgB,kBAAkB,CAAC,MAA0B;IAC3D,OAAO,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC;AACjC,CAAC;AAED,qFAAqF;AACrF,SAAgB,sBAAsB,CAAC,MAA0B;IAC/D,OAAO,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;AACrD,CAAC;AAED,wFAAwF;AACxF,SAAgB,0BAA0B,CAAC,UAAkB,EAAE,WAAmB;IAChF,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;AAChE,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,GAAG,gCAAgC,CAAC;AACpD,SAAgB,qBAAqB,CAAC,SAAiB;IACrD,MAAM,KAAK,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACjE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,YAAY,GAAG,6CAA6C,CAAC;AACnE,SAAgB,uBAAuB,CAAC,SAAiB;IACvD,MAAM,KAAK,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACnE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,+EAA+E;AAC/E,SAAgB,4BAA4B,CAAC,SAAiB;IAC5D,OAAO,4BAA4B,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,MAAM,aAAa,GAAG,gFAAgF,CAAC;AACvG,SAAgB,+BAA+B,CAAC,SAAiB;IAC/D,OAAO,aAAa,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CAAC,SAAiB;IACrD,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,OAAO,CACL,uBAAuB,CAAC,SAAS,CAAC,KAAK,IAAI;QAC3C,4BAA4B,CAAC,SAAS,CAAC;QACvC,+BAA+B,CAAC,SAAS,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,uBAAuB,CAAC,GAGvC;IACC,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3F,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,mBAAmB,CACjC,QAAiB,EACjB,UAAkB,EAClB,QAAiB;IAEjB,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,KAAK,GAAI,QAAoC,CAAC,UAAU,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;IAChD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3C,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,SAAgB,6BAA6B,CAAC,KAG7C;IACC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC;IAC/C,OAAO,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,SAAgB,6BAA6B,CAAC,MAA0B;IACtE,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;IACxF,OAAO,GAAG,KAAK,IAAI,KAAK,EAAE,CAAC;AAC7B,CAAC;AAwBD,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7B,OAAO,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,OAAO,CAAC;AAChF,CAAC;AAED;;;;;GAKG;AACH,SAAgB,0BAA0B,CAAC,SAAiB;IAC1D,MAAM,KAAK,GAA0B;QACnC,YAAY,EAAE,IAAI;QAClB,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,KAAK;QACjB,KAAK,EAAE,IAAI;KACZ,CAAC;IACF,MAAM,YAAY,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5D,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC;IAC7C,IAAI,QAAa,CAAC;IAClB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QACjD,YAAY,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI;QACvC,UAAU;QACV,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB,CAAC,SAAiB;IACxD,IAAI,uBAAuB,CAAC,SAAS,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,OAAO,0BAA0B,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,GAAG,+BAA+B,CAAC;AACpD,SAAgB,yBAAyB,CAAC,IAAY;IACpD,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,8BAA8B,CAAC,IAAY;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,8EAA8E;IAC9E,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;QAChC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,GAAG,IAAI;YAAE,OAAO,KAAK,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAUD;;;;;GAKG;AACH,SAAgB,2BAA2B,CAAC,IAAY;IACtD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,cAAc,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;QACvC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QACzC,IAAI,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;KAC9B,CAAC;AACJ,CAAC;AAcD,SAAgB,0BAA0B,CAAC,IAAY;IACrD,MAAM,QAAQ,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,yBAAyB,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC/E,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,0BAA0B,CAAC,KAK1C;IACC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACpC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;IACtF,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,OAAO,oBAAoB,IAAI,GAAG,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AAChE,CAAC"}