clodds 1.1.0

package/dist/auth/oauth.js

@@ -0,0 +1,502 @@
+"use strict";
+/**
+ * OAuth Authentication Module
+ * Handles OAuth 2.0 flows for Anthropic, OpenAI, and other providers
+ *
+ * Supports:
+ * - Authorization Code + PKCE flow (browser)
+ * - Device Code flow (CLI)
+ * - Token refresh and storage
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthClient = void 0;
+exports.interactiveOAuth = interactiveOAuth;
+exports.createAnthropicOAuth = createAnthropicOAuth;
+exports.createOpenAIOAuth = createOpenAIOAuth;
+exports.createGoogleOAuth = createGoogleOAuth;
+const crypto = __importStar(require("crypto"));
+const http = __importStar(require("http"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const logger_1 = require("../utils/logger");
+const PROVIDER_CONFIGS = {
+    anthropic: {
+        authorizationEndpoint: 'https://console.anthropic.com/oauth/authorize',
+        tokenEndpoint: 'https://api.anthropic.com/oauth/token',
+        deviceCodeEndpoint: 'https://api.anthropic.com/oauth/device/code',
+        revokeEndpoint: 'https://api.anthropic.com/oauth/revoke',
+    },
+    openai: {
+        authorizationEndpoint: 'https://auth.openai.com/authorize',
+        tokenEndpoint: 'https://auth.openai.com/oauth/token',
+        deviceCodeEndpoint: 'https://auth.openai.com/device/code',
+        revokeEndpoint: 'https://auth.openai.com/oauth/revoke',
+        userInfoEndpoint: 'https://api.openai.com/v1/me',
+    },
+    google: {
+        authorizationEndpoint: 'https://accounts.google.com/o/oauth2/v2/auth',
+        tokenEndpoint: 'https://oauth2.googleapis.com/token',
+        deviceCodeEndpoint: 'https://oauth2.googleapis.com/device/code',
+        revokeEndpoint: 'https://oauth2.googleapis.com/revoke',
+        userInfoEndpoint: 'https://www.googleapis.com/oauth2/v3/userinfo',
+    },
+    github: {
+        authorizationEndpoint: 'https://github.com/login/oauth/authorize',
+        tokenEndpoint: 'https://github.com/login/oauth/access_token',
+        deviceCodeEndpoint: 'https://github.com/login/device/code',
+        userInfoEndpoint: 'https://api.github.com/user',
+    },
+    azure: {
+        authorizationEndpoint: 'https://login.microsoftonline.com/common/oauth2/v2.0/authorize',
+        tokenEndpoint: 'https://login.microsoftonline.com/common/oauth2/v2.0/token',
+        deviceCodeEndpoint: 'https://login.microsoftonline.com/common/oauth2/v2.0/devicecode',
+        revokeEndpoint: 'https://login.microsoftonline.com/common/oauth2/v2.0/logout',
+    },
+};
+class OAuthClient {
+    config;
+    providerConfig;
+    tokens = null;
+    tokenStorePath;
+    constructor(config) {
+        this.config = config;
+        this.providerConfig = PROVIDER_CONFIGS[config.provider];
+        if (!this.providerConfig) {
+            throw new Error(`Unknown OAuth provider: ${config.provider}`);
+        }
+        this.tokenStorePath = config.tokenStorePath ||
+            path.join(process.env.HOME || '', '.clodds', 'tokens', `${config.provider}.json`);
+        this.loadTokens();
+    }
+    loadTokens() {
+        try {
+            if (fs.existsSync(this.tokenStorePath)) {
+                const data = fs.readFileSync(this.tokenStorePath, 'utf-8');
+                this.tokens = JSON.parse(data);
+                logger_1.logger.debug({ provider: this.config.provider }, 'Loaded OAuth tokens from storage');
+            }
+        }
+        catch (error) {
+            logger_1.logger.warn({ error, provider: this.config.provider }, 'Failed to load OAuth tokens');
+        }
+    }
+    saveTokens() {
+        try {
+            const dir = path.dirname(this.tokenStorePath);
+            if (!fs.existsSync(dir)) {
+                fs.mkdirSync(dir, { recursive: true });
+            }
+            fs.writeFileSync(this.tokenStorePath, JSON.stringify(this.tokens, null, 2), {
+                mode: 0o600, // Owner read/write only
+            });
+            logger_1.logger.debug({ provider: this.config.provider }, 'Saved OAuth tokens to storage');
+        }
+        catch (error) {
+            logger_1.logger.error({ error, provider: this.config.provider }, 'Failed to save OAuth tokens');
+        }
+    }
+    generateCodeVerifier() {
+        return crypto.randomBytes(32).toString('base64url');
+    }
+    generateCodeChallenge(verifier) {
+        return crypto.createHash('sha256').update(verifier).digest('base64url');
+    }
+    generateState() {
+        return crypto.randomBytes(16).toString('hex');
+    }
+    /**
+     * Start Authorization Code + PKCE flow
+     * Returns URL for user to authorize
+     */
+    async startAuthorizationFlow(port = 8765) {
+        const codeVerifier = this.generateCodeVerifier();
+        const codeChallenge = this.generateCodeChallenge(codeVerifier);
+        const state = this.generateState();
+        const redirectUri = this.config.redirectUri || `http://localhost:${port}/callback`;
+        const params = new URLSearchParams({
+            client_id: this.config.clientId,
+            response_type: 'code',
+            redirect_uri: redirectUri,
+            scope: this.config.scopes.join(' '),
+            state,
+            code_challenge: codeChallenge,
+            code_challenge_method: 'S256',
+        });
+        const authUrl = `${this.providerConfig.authorizationEndpoint}?${params}`;
+        return { authUrl, codeVerifier, state };
+    }
+    /**
+     * Complete Authorization Code flow by exchanging code for tokens
+     */
+    async exchangeCode(code, codeVerifier, redirectUri) {
+        const body = new URLSearchParams({
+            grant_type: 'authorization_code',
+            client_id: this.config.clientId,
+            code,
+            redirect_uri: redirectUri,
+            code_verifier: codeVerifier,
+        });
+        if (this.config.clientSecret) {
+            body.set('client_secret', this.config.clientSecret);
+        }
+        const response = await fetch(this.providerConfig.tokenEndpoint, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+                Accept: 'application/json',
+            },
+            body: body.toString(),
+        });
+        if (!response.ok) {
+            const error = await response.text();
+            throw new Error(`Token exchange failed: ${response.status} ${error}`);
+        }
+        const data = await response.json();
+        this.tokens = {
+            accessToken: data.access_token,
+            refreshToken: data.refresh_token,
+            expiresAt: data.expires_in ? Date.now() + data.expires_in * 1000 : undefined,
+            tokenType: data.token_type,
+            scope: data.scope,
+        };
+        this.saveTokens();
+        logger_1.logger.info({ provider: this.config.provider }, 'OAuth tokens obtained successfully');
+        return this.tokens;
+    }
+    /**
+     * Start Device Code flow (for CLI authentication)
+     */
+    async startDeviceCodeFlow() {
+        if (!this.providerConfig.deviceCodeEndpoint) {
+            throw new Error(`Device code flow not supported for ${this.config.provider}`);
+        }
+        const body = new URLSearchParams({
+            client_id: this.config.clientId,
+            scope: this.config.scopes.join(' '),
+        });
+        const response = await fetch(this.providerConfig.deviceCodeEndpoint, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+                Accept: 'application/json',
+            },
+            body: body.toString(),
+        });
+        if (!response.ok) {
+            const error = await response.text();
+            throw new Error(`Device code request failed: ${response.status} ${error}`);
+        }
+        const data = await response.json();
+        return {
+            deviceCode: data.device_code,
+            userCode: data.user_code,
+            verificationUri: data.verification_uri,
+            verificationUriComplete: data.verification_uri_complete,
+            expiresIn: data.expires_in,
+            interval: data.interval,
+        };
+    }
+    /**
+     * Poll for device code completion
+     */
+    async pollDeviceCode(deviceCode, interval) {
+        const body = new URLSearchParams({
+            grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
+            client_id: this.config.clientId,
+            device_code: deviceCode,
+        });
+        if (this.config.clientSecret) {
+            body.set('client_secret', this.config.clientSecret);
+        }
+        const startTime = Date.now();
+        const timeout = 5 * 60 * 1000; // 5 minute timeout
+        while (Date.now() - startTime < timeout) {
+            await new Promise(resolve => setTimeout(resolve, interval * 1000));
+            const response = await fetch(this.providerConfig.tokenEndpoint, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                    Accept: 'application/json',
+                },
+                body: body.toString(),
+            });
+            const data = await response.json();
+            if (data.error === 'authorization_pending') {
+                continue;
+            }
+            if (data.error === 'slow_down') {
+                interval += 5;
+                continue;
+            }
+            if (data.error) {
+                throw new Error(`Device code polling failed: ${data.error}`);
+            }
+            if (data.access_token) {
+                this.tokens = {
+                    accessToken: data.access_token,
+                    refreshToken: data.refresh_token,
+                    expiresAt: data.expires_in ? Date.now() + data.expires_in * 1000 : undefined,
+                    tokenType: data.token_type || 'Bearer',
+                    scope: data.scope,
+                };
+                this.saveTokens();
+                logger_1.logger.info({ provider: this.config.provider }, 'OAuth tokens obtained via device code');
+                return this.tokens;
+            }
+        }
+        throw new Error('Device code polling timed out');
+    }
+    /**
+     * Refresh access token using refresh token
+     */
+    async refreshAccessToken() {
+        if (!this.tokens?.refreshToken) {
+            throw new Error('No refresh token available');
+        }
+        const body = new URLSearchParams({
+            grant_type: 'refresh_token',
+            client_id: this.config.clientId,
+            refresh_token: this.tokens.refreshToken,
+        });
+        if (this.config.clientSecret) {
+            body.set('client_secret', this.config.clientSecret);
+        }
+        const response = await fetch(this.providerConfig.tokenEndpoint, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+                Accept: 'application/json',
+            },
+            body: body.toString(),
+        });
+        if (!response.ok) {
+            const error = await response.text();
+            throw new Error(`Token refresh failed: ${response.status} ${error}`);
+        }
+        const data = await response.json();
+        this.tokens = {
+            accessToken: data.access_token,
+            refreshToken: data.refresh_token || this.tokens.refreshToken,
+            expiresAt: data.expires_in ? Date.now() + data.expires_in * 1000 : undefined,
+            tokenType: data.token_type,
+            scope: data.scope,
+        };
+        this.saveTokens();
+        logger_1.logger.debug({ provider: this.config.provider }, 'OAuth tokens refreshed');
+        return this.tokens;
+    }
+    /**
+     * Get current access token, refreshing if expired
+     */
+    async getAccessToken() {
+        if (!this.tokens) {
+            throw new Error('Not authenticated');
+        }
+        // Check if token is expired or about to expire (within 5 minutes)
+        if (this.tokens.expiresAt && this.tokens.expiresAt - Date.now() < 5 * 60 * 1000) {
+            if (this.tokens.refreshToken) {
+                await this.refreshAccessToken();
+            }
+            else {
+                throw new Error('Token expired and no refresh token available');
+            }
+        }
+        return this.tokens.accessToken;
+    }
+    /**
+     * Revoke tokens
+     */
+    async revokeTokens() {
+        if (!this.tokens || !this.providerConfig.revokeEndpoint) {
+            return;
+        }
+        try {
+            await fetch(this.providerConfig.revokeEndpoint, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                },
+                body: new URLSearchParams({
+                    token: this.tokens.accessToken,
+                    client_id: this.config.clientId,
+                }).toString(),
+            });
+        }
+        catch (error) {
+            logger_1.logger.warn({ error, provider: this.config.provider }, 'Failed to revoke token');
+        }
+        this.tokens = null;
+        try {
+            fs.unlinkSync(this.tokenStorePath);
+        }
+        catch {
+            // Ignore
+        }
+        logger_1.logger.info({ provider: this.config.provider }, 'OAuth tokens revoked');
+    }
+    /**
+     * Check if currently authenticated
+     */
+    isAuthenticated() {
+        return this.tokens !== null;
+    }
+    /**
+     * Get user info (if supported by provider)
+     */
+    async getUserInfo() {
+        if (!this.providerConfig.userInfoEndpoint || !this.tokens) {
+            return null;
+        }
+        const response = await fetch(this.providerConfig.userInfoEndpoint, {
+            headers: {
+                Authorization: `Bearer ${this.tokens.accessToken}`,
+            },
+        });
+        if (!response.ok) {
+            return null;
+        }
+        return response.json();
+    }
+}
+exports.OAuthClient = OAuthClient;
+/**
+ * Interactive OAuth flow for CLI
+ */
+async function interactiveOAuth(config) {
+    const client = new OAuthClient(config);
+    // Try device code flow first (better for CLI)
+    if (PROVIDER_CONFIGS[config.provider].deviceCodeEndpoint) {
+        logger_1.logger.info('Starting device code flow...');
+        const deviceCode = await client.startDeviceCodeFlow();
+        console.log('\n=== OAuth Authentication ===');
+        console.log(`Open this URL in your browser:\n  ${deviceCode.verificationUri}`);
+        console.log(`\nEnter this code: ${deviceCode.userCode}`);
+        console.log('\nWaiting for authorization...');
+        return client.pollDeviceCode(deviceCode.deviceCode, deviceCode.interval);
+    }
+    // Fall back to authorization code flow with local server
+    const port = 8765;
+    const { authUrl, codeVerifier, state } = await client.startAuthorizationFlow(port);
+    return new Promise((resolve, reject) => {
+        const server = http.createServer(async (req, res) => {
+            if (!req.url?.startsWith('/callback')) {
+                res.writeHead(404);
+                res.end('Not found');
+                return;
+            }
+            const url = new URL(req.url, `http://localhost:${port}`);
+            const code = url.searchParams.get('code');
+            const returnedState = url.searchParams.get('state');
+            const error = url.searchParams.get('error');
+            if (error) {
+                res.writeHead(400, { 'Content-Type': 'text/html' });
+                res.end(`<h1>Authentication Failed</h1><p>${error}</p>`);
+                server.close();
+                reject(new Error(error));
+                return;
+            }
+            if (returnedState !== state) {
+                res.writeHead(400, { 'Content-Type': 'text/html' });
+                res.end('<h1>Authentication Failed</h1><p>State mismatch</p>');
+                server.close();
+                reject(new Error('State mismatch'));
+                return;
+            }
+            if (!code) {
+                res.writeHead(400, { 'Content-Type': 'text/html' });
+                res.end('<h1>Authentication Failed</h1><p>No code received</p>');
+                server.close();
+                reject(new Error('No code received'));
+                return;
+            }
+            try {
+                const tokens = await client.exchangeCode(code, codeVerifier, `http://localhost:${port}/callback`);
+                res.writeHead(200, { 'Content-Type': 'text/html' });
+                res.end('<h1>Authentication Successful!</h1><p>You can close this window.</p>');
+                server.close();
+                resolve(tokens);
+            }
+            catch (err) {
+                res.writeHead(500, { 'Content-Type': 'text/html' });
+                res.end(`<h1>Authentication Failed</h1><p>${err}</p>`);
+                server.close();
+                reject(err);
+            }
+        });
+        server.listen(port, () => {
+            console.log('\n=== OAuth Authentication ===');
+            console.log(`Open this URL in your browser:\n  ${authUrl}`);
+            console.log('\nWaiting for authorization...');
+        });
+        // Timeout after 5 minutes
+        setTimeout(() => {
+            server.close();
+            reject(new Error('Authentication timed out'));
+        }, 5 * 60 * 1000);
+    });
+}
+/**
+ * Create provider-specific OAuth client
+ */
+function createAnthropicOAuth(clientId, clientSecret) {
+    return new OAuthClient({
+        provider: 'anthropic',
+        clientId,
+        clientSecret,
+        scopes: ['api:read', 'api:write'],
+    });
+}
+function createOpenAIOAuth(clientId, clientSecret) {
+    return new OAuthClient({
+        provider: 'openai',
+        clientId,
+        clientSecret,
+        scopes: ['openid', 'profile', 'email', 'model.read', 'model.request'],
+    });
+}
+function createGoogleOAuth(clientId, clientSecret) {
+    return new OAuthClient({
+        provider: 'google',
+        clientId,
+        clientSecret,
+        scopes: [
+            'openid',
+            'https://www.googleapis.com/auth/userinfo.email',
+            'https://www.googleapis.com/auth/generative-language',
+        ],
+    });
+}
+//# sourceMappingURL=oauth.js.map

package/dist/auth/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/auth/oauth.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwdH,4CAoFC;AAKD,oDAOC;AAED,8CAOC;AAED,8CAWC;AA5kBD,+CAAiC;AACjC,2CAA6B;AAC7B,uCAAyB;AACzB,2CAA6B;AAC7B,4CAAyC;AA2BzC,MAAM,gBAAgB,GAAwC;IAC5D,SAAS,EAAE;QACT,qBAAqB,EAAE,+CAA+C;QACtE,aAAa,EAAE,uCAAuC;QACtD,kBAAkB,EAAE,6CAA6C;QACjE,cAAc,EAAE,wCAAwC;KACzD;IACD,MAAM,EAAE;QACN,qBAAqB,EAAE,mCAAmC;QAC1D,aAAa,EAAE,qCAAqC;QACpD,kBAAkB,EAAE,qCAAqC;QACzD,cAAc,EAAE,sCAAsC;QACtD,gBAAgB,EAAE,8BAA8B;KACjD;IACD,MAAM,EAAE;QACN,qBAAqB,EAAE,8CAA8C;QACrE,aAAa,EAAE,qCAAqC;QACpD,kBAAkB,EAAE,2CAA2C;QAC/D,cAAc,EAAE,sCAAsC;QACtD,gBAAgB,EAAE,+CAA+C;KAClE;IACD,MAAM,EAAE;QACN,qBAAqB,EAAE,0CAA0C;QACjE,aAAa,EAAE,6CAA6C;QAC5D,kBAAkB,EAAE,sCAAsC;QAC1D,gBAAgB,EAAE,6BAA6B;KAChD;IACD,KAAK,EAAE;QACL,qBAAqB,EAAE,gEAAgE;QACvF,aAAa,EAAE,4DAA4D;QAC3E,kBAAkB,EAAE,iEAAiE;QACrF,cAAc,EAAE,6DAA6D;KAC9E;CACF,CAAC;AAEF,MAAa,WAAW;IACd,MAAM,CAAc;IACpB,cAAc,CAAsB;IACpC,MAAM,GAAuB,IAAI,CAAC;IAClC,cAAc,CAAS;IAE/B,YAAY,MAAmB;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc;YACzC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,QAAQ,OAAO,CAAC,CAAC;QAEpF,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;gBAC3D,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC/B,eAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,kCAAkC,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,6BAA6B,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;gBAC1E,IAAI,EAAE,KAAK,EAAE,wBAAwB;aACtC,CAAC,CAAC;YACH,eAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,+BAA+B,CAAC,CAAC;QACpF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,6BAA6B,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAEO,oBAAoB;QAC1B,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IAEO,qBAAqB,CAAC,QAAgB;QAC5C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1E,CAAC;IAEO,aAAa;QACnB,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,sBAAsB,CAAC,OAAe,IAAI;QAK9C,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACjD,MAAM,aAAa,GAAG,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,oBAAoB,IAAI,WAAW,CAAC;QAEnF,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,MAAM;YACrB,YAAY,EAAE,WAAW;YACzB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACnC,KAAK;YACL,cAAc,EAAE,aAAa;YAC7B,qBAAqB,EAAE,MAAM;SAC9B,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,qBAAqB,IAAI,MAAM,EAAE,CAAC;QAEzE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,IAAY,EACZ,YAAoB,EACpB,WAAmB;QAEnB,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,IAAI;YACJ,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE;YAC9D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAM/B,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG;YACZ,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;YAC5E,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;QAEF,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,eAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,oCAAoC,CAAC,CAAC;QAEtF,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB;QAQvB,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SACpC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAO/B,CAAC;QAEF,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,eAAe,EAAE,IAAI,CAAC,gBAAgB;YACtC,uBAAuB,EAAE,IAAI,CAAC,yBAAyB;YACvD,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,QAAgB;QACvD,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,8CAA8C;YAC1D,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,WAAW,EAAE,UAAU;SACxB,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,mBAAmB;QAElD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,OAAO,EAAE,CAAC;YACxC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC;YAEnE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;oBACnD,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;aACtB,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAO/B,CAAC;YAEF,IAAI,IAAI,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;gBAC3C,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC/B,QAAQ,IAAI,CAAC,CAAC;gBACd,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/D,CAAC;YAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM,GAAG;oBACZ,WAAW,EAAE,IAAI,CAAC,YAAY;oBAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;oBAChC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;oBAC5E,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;oBACtC,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAC;gBAEF,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClB,eAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,uCAAuC,CAAC,CAAC;gBACzF,OAAO,IAAI,CAAC,MAAM,CAAC;YACrB,CAAC;QACH,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB;QACtB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,eAAe;YAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;SACxC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE;YAC9D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAM/B,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG;YACZ,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,YAAY,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY;YAC5D,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;YAC5E,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;QAEF,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAE3E,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QAED,kEAAkE;QAClE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YAChF,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC;YACxD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE;gBAC9C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;gBACD,IAAI,EAAE,IAAI,eAAe,CAAC;oBACxB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;oBAC9B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;iBAChC,CAAC,CAAC,QAAQ,EAAE;aACd,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,wBAAwB,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,eAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,sBAAsB,CAAC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE;YACjE,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;aACnD;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAsC,CAAC;IAC7D,CAAC;CACF;AA/YD,kCA+YC;AAED;;GAEG;AACI,KAAK,UAAU,gBAAgB,CAAC,MAAmB;IACxD,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IAEvC,8CAA8C;IAC9C,IAAI,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,kBAAkB,EAAE,CAAC;QACzD,eAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAE5C,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAEtD,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,qCAAqC,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,sBAAsB,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAE9C,OAAO,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC3E,CAAC;IAED,yDAAyD;IACzD,MAAM,IAAI,GAAG,IAAI,CAAC;IAClB,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAEnF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAClD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAE5C,IAAI,KAAK,EAAE,CAAC;gBACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,oCAAoC,KAAK,MAAM,CAAC,CAAC;gBACzD,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzB,OAAO;YACT,CAAC;YAED,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;gBAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;gBAC/D,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YAED,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;gBACjE,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,oBAAoB,IAAI,WAAW,CAAC,CAAC;gBAClG,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;gBAChF,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,oCAAoC,GAAG,MAAM,CAAC,CAAC;gBACvD,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YACvB,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,qCAAqC,OAAO,EAAE,CAAC,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,0BAA0B;QAC1B,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAChD,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB,CAAC,QAAgB,EAAE,YAAqB;IAC1E,OAAO,IAAI,WAAW,CAAC;QACrB,QAAQ,EAAE,WAAW;QACrB,QAAQ;QACR,YAAY;QACZ,MAAM,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,iBAAiB,CAAC,QAAgB,EAAE,YAAqB;IACvE,OAAO,IAAI,WAAW,CAAC;QACrB,QAAQ,EAAE,QAAQ;QAClB,QAAQ;QACR,YAAY;QACZ,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC;KACtE,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,iBAAiB,CAAC,QAAgB,EAAE,YAAqB;IACvE,OAAO,IAAI,WAAW,CAAC;QACrB,QAAQ,EAAE,QAAQ;QAClB,QAAQ;QACR,YAAY;QACZ,MAAM,EAAE;YACN,QAAQ;YACR,gDAAgD;YAChD,qDAAqD;SACtD;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/auth/qwen.d.ts

@@ -0,0 +1,110 @@
+/**
+ * Qwen Portal Authentication
+ * Handles authentication for Qwen/Alibaba Cloud AI services
+ *
+ * Supports:
+ * - API key authentication
+ * - Alibaba Cloud RAM authentication
+ * - DashScope OAuth
+ */
+export interface QwenConfig {
+    /** API key for DashScope */
+    apiKey?: string;
+    /** Alibaba Cloud Access Key ID */
+    accessKeyId?: string;
+    /** Alibaba Cloud Access Key Secret */
+    accessKeySecret?: string;
+    /** Region for API calls */
+    region?: string;
+    /** Token storage path */
+    tokenStorePath?: string;
+}
+export interface QwenCredentials {
+    apiKey?: string;
+    accessKeyId?: string;
+    accessKeySecret?: string;
+    securityToken?: string;
+    expiresAt?: number;
+}
+export declare class QwenAuthClient {
+    private config;
+    private credentials;
+    private credStorePath;
+    constructor(config?: QwenConfig);
+    private loadCredentials;
+    private saveCredentials;
+    /**
+     * Set API key
+     */
+    setApiKey(apiKey: string): void;
+    /**
+     * Set Alibaba Cloud credentials
+     */
+    setAliyunCredentials(accessKeyId: string, accessKeySecret: string): void;
+    /**
+     * Get API key for DashScope
+     */
+    getApiKey(): string | null;
+    /**
+     * Check if authenticated
+     */
+    isAuthenticated(): boolean;
+    /**
+     * Get headers for DashScope API
+     */
+    getHeaders(): Record<string, string>;
+    /**
+     * Sign request for Alibaba Cloud API (OpenAPI signature v1)
+     */
+    signAliyunRequest(method: string, url: string, params: Record<string, string>): Record<string, string>;
+    /**
+     * Get STS token for temporary credentials
+     */
+    getSTSToken(roleArn: string, sessionName: string): Promise<{
+        accessKeyId: string;
+        accessKeySecret: string;
+        securityToken: string;
+        expiration: string;
+    }>;
+    /**
+     * Clear credentials
+     */
+    clearCredentials(): void;
+}
+/**
+ * Qwen/DashScope API client
+ */
+export declare class QwenClient {
+    private auth;
+    constructor(config?: QwenConfig);
+    /**
+     * Generate text with Qwen model
+     */
+    generate(model: string, prompt: string | Array<{
+        role: string;
+        content: string;
+    }>, options?: {
+        maxTokens?: number;
+        temperature?: number;
+        topP?: number;
+        topK?: number;
+        repetitionPenalty?: number;
+        stop?: string[];
+        stream?: boolean;
+    }): Promise<string>;
+    /**
+     * Generate embeddings
+     */
+    embed(model: string, texts: string[]): Promise<number[][]>;
+    /**
+     * Analyze image with Qwen-VL
+     */
+    analyzeImage(imageUrl: string, prompt: string, options?: {
+        model?: string;
+        maxTokens?: number;
+    }): Promise<string>;
+}
+/**
+ * Interactive Qwen setup for CLI
+ */
+export declare function interactiveQwenSetup(): Promise<void>;