codex-openai-proxy 0.1.0-rc.0

package/dist/app-server/auth.js

@@ -0,0 +1,102 @@
+import { spawn } from "node:child_process";
+import { once } from "node:events";
+import { listenForAbort, withDeadline } from "../core/abort.js";
+/** Ensures app-server has an authenticated OpenAI account. */
+export async function ensureAuthenticated(options) {
+    const account = (await options.rpc.request("account/read", { refreshToken: false }, options.signal));
+    if (typeof account.requiresOpenaiAuth !== "boolean")
+        throw new Error("account/read returned an invalid requiresOpenaiAuth value.");
+    if (!account.requiresOpenaiAuth || account.account != null)
+        return;
+    const useDeviceCode = !options.interactive;
+    await startAndWaitForLogin(options, useDeviceCode);
+}
+/** Starts a browser or device-code login and waits for its notification. */
+async function startAndWaitForLogin(options, useDeviceCode) {
+    let loginId;
+    let earlyCompletion;
+    let settle;
+    const completion = new Promise((resolve, reject) => {
+        settle = (error) => (error ? reject(error) : resolve());
+    });
+    void completion.catch(() => undefined);
+    const notification = (method, raw) => {
+        if (method !== "account/login/completed" ||
+            typeof raw !== "object" ||
+            raw === null)
+            return;
+        const result = raw;
+        if (loginId === undefined) {
+            earlyCompletion = result;
+            return;
+        }
+        if (result.loginId != null && result.loginId !== loginId)
+            return;
+        settle(result.success
+            ? undefined
+            : new Error(result.error ?? "ChatGPT login failed."));
+    };
+    options.rpc.on("notification", notification);
+    try {
+        await withDeadline(options.signal, {
+            milliseconds: options.timeoutMs,
+            timeoutReason: new Error("ChatGPT login timed out."),
+            abortReason: (signal) => signal.reason instanceof Error
+                ? signal.reason
+                : new Error("ChatGPT login cancelled."),
+        }, async (deadlineSignal) => {
+            const disposeDeadline = listenForAbort(deadlineSignal, (abortedSignal) => settle(abortedSignal.reason instanceof Error
+                ? abortedSignal.reason
+                : new Error("ChatGPT login cancelled.")));
+            try {
+                const login = (await options.rpc.request("account/login/start", { type: useDeviceCode ? "chatgptDeviceCode" : "chatgpt" }, options.signal));
+                loginId = login.loginId;
+                if (earlyCompletion !== undefined)
+                    notification("account/login/completed", earlyCompletion);
+                if (login.type === "chatgpt") {
+                    const launched = await (options.launch ?? launchBrowser)(login.authUrl);
+                    if (!launched) {
+                        options.terminal(`Open this URL to sign in to ChatGPT:\n${login.authUrl}\n`);
+                        options.log("warn", "browser_launch_failed", {
+                            login_url: "[REDACTED]",
+                        });
+                    }
+                    else
+                        options.log("info", "browser_launch_succeeded");
+                }
+                else {
+                    options.terminal(`Open ${login.verificationUrl} and enter code ${login.userCode}.\n`);
+                    options.log("info", "device_code_login_started", {
+                        verification_url: "[REDACTED]",
+                        user_code: "[REDACTED]",
+                    });
+                }
+                await completion;
+            }
+            finally {
+                disposeDeadline();
+            }
+        });
+    }
+    finally {
+        options.rpc.off("notification", notification);
+    }
+}
+/** Opens a login URL with the platform browser without invoking a shell. */
+export async function launchBrowser(url) {
+    const command = process.platform === "darwin"
+        ? "open"
+        : process.platform === "win32"
+            ? "cmd"
+            : "xdg-open";
+    const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
+    try {
+        const child = spawn(command, args, { shell: false, stdio: "ignore" });
+        const [code] = await once(child, "exit");
+        return code === 0;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/app-server/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/app-server/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAGnC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA+BhE,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAA8B;IAE9B,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CACxC,cAAc,EACd,EAAE,YAAY,EAAE,KAAK,EAAE,EACvB,OAAO,CAAC,MAAM,CACf,CAAoB,CAAC;IACtB,IAAI,OAAO,OAAO,CAAC,kBAAkB,KAAK,SAAS;QACjD,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;IACJ,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI;QAAE,OAAO;IACnE,MAAM,aAAa,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;IAC3C,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;AACrD,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,oBAAoB,CACjC,OAA8B,EAC9B,aAAsB;IAEtB,IAAI,OAA2B,CAAC;IAChC,IAAI,eAA2C,CAAC;IAChD,IAAI,MAAgC,CAAC;IACrC,MAAM,UAAU,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACvD,MAAM,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IACH,KAAK,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,CAAC,MAAc,EAAE,GAAY,EAAQ,EAAE;QAC1D,IACE,MAAM,KAAK,yBAAyB;YACpC,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,KAAK,IAAI;YAEZ,OAAO;QACT,MAAM,MAAM,GAAG,GAAqB,CAAC;QACrC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,eAAe,GAAG,MAAM,CAAC;YACzB,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;YAAE,OAAO;QACjE,MAAM,CACJ,MAAM,CAAC,OAAO;YACZ,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,uBAAuB,CAAC,CACvD,CAAC;IACJ,CAAC,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAE7C,IAAI,CAAC;QACH,MAAM,YAAY,CAChB,OAAO,CAAC,MAAM,EACd;YACE,YAAY,EAAE,OAAO,CAAC,SAAS;YAC/B,aAAa,EAAE,IAAI,KAAK,CAAC,0BAA0B,CAAC;YACpD,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CACtB,MAAM,CAAC,MAAM,YAAY,KAAK;gBAC5B,CAAC,CAAC,MAAM,CAAC,MAAM;gBACf,CAAC,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC;SAC5C,EACD,KAAK,EAAE,cAAc,EAAE,EAAE;YACvB,MAAM,eAAe,GAAG,cAAc,CACpC,cAAc,EACd,CAAC,aAAa,EAAE,EAAE,CAChB,MAAM,CACJ,aAAa,CAAC,MAAM,YAAY,KAAK;gBACnC,CAAC,CAAC,aAAa,CAAC,MAAM;gBACtB,CAAC,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAC1C,CACJ,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CACtC,qBAAqB,EACrB,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,EAAE,EACzD,OAAO,CAAC,MAAM,CACf,CAAkB,CAAC;gBACpB,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;gBACxB,IAAI,eAAe,KAAK,SAAS;oBAC/B,YAAY,CAAC,yBAAyB,EAAE,eAAe,CAAC,CAAC;gBAE3D,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,CACtD,KAAK,CAAC,OAAO,CACd,CAAC;oBACF,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,OAAO,CAAC,QAAQ,CACd,yCAAyC,KAAK,CAAC,OAAO,IAAI,CAC3D,CAAC;wBACF,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,uBAAuB,EAAE;4BAC3C,SAAS,EAAE,YAAY;yBACxB,CAAC,CAAC;oBACL,CAAC;;wBAAM,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;gBACzD,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,QAAQ,CACd,QAAQ,KAAK,CAAC,eAAe,mBAAmB,KAAK,CAAC,QAAQ,KAAK,CACpE,CAAC;oBACF,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,2BAA2B,EAAE;wBAC/C,gBAAgB,EAAE,YAAY;wBAC9B,SAAS,EAAE,YAAY;qBACxB,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,UAAU,CAAC;YACnB,CAAC;oBAAS,CAAC;gBACT,eAAe,EAAE,CAAC;YACpB,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,MAAM,OAAO,GACX,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,UAAU,CAAC;IACnB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO,IAAI,KAAK,CAAC,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/app-server/json-rpc.d.ts

@@ -0,0 +1,29 @@
+import { EventEmitter } from "node:events";
+import type { Writable, Readable } from "node:stream";
+/** JSON-RPC error object accepted by respondError. */
+export interface RpcErrorData {
+    code: number;
+    message: string;
+    data?: unknown;
+}
+/** Represents an error response received over JSON-RPC. */
+export declare class RpcError extends Error {
+    readonly rpcCode: number;
+    constructor(rpcCode: number, message: string);
+}
+/** Request initiated by app-server toward the proxy. */
+export interface ServerRequest {
+    id: string | number;
+    method: string;
+    params: unknown;
+}
+/** Exchanges newline-delimited JSON-RPC messages with app-server. */
+export declare class JsonRpcTransport extends EventEmitter {
+    #private;
+    constructor(input: Readable, output: Writable, maxPending?: number);
+    request(method: string, params: unknown, signal?: AbortSignal): Promise<unknown>;
+    notify(method: string, params?: unknown): void;
+    respond(id: string | number, result: unknown): void;
+    respondError(id: string | number, error: RpcErrorData): void;
+    close(reason?: Error): void;
+}

package/dist/app-server/json-rpc.js

@@ -0,0 +1,141 @@
+import { EventEmitter } from "node:events";
+import { createInterface } from "node:readline";
+import { record } from "../core/canonical.js";
+import { listenForAbort } from "../core/abort.js";
+/** Represents an error response received over JSON-RPC. */
+export class RpcError extends Error {
+    rpcCode;
+    constructor(rpcCode, message) {
+        super(message);
+        this.rpcCode = rpcCode;
+        this.name = "RpcError";
+    }
+}
+/** Exchanges newline-delimited JSON-RPC messages with app-server. */
+export class JsonRpcTransport extends EventEmitter {
+    #pending = new Map();
+    #output;
+    #maxPending;
+    #nextId = 1;
+    #closed = false;
+    constructor(input, output, maxPending = 256) {
+        super();
+        this.#output = output;
+        this.#maxPending = maxPending;
+        const lines = createInterface({ input, crlfDelay: Infinity });
+        lines.on("line", (line) => this.#receive(line));
+        lines.on("close", () => this.close(new Error("app-server transport closed")));
+        input.on("error", (error) => this.close(error));
+        output.on("error", (error) => this.close(error));
+    }
+    request(method, params, signal) {
+        if (this.#closed)
+            return Promise.reject(new Error("app-server transport is closed"));
+        if (signal?.aborted)
+            return Promise.reject(signal.reason ?? new Error("request cancelled"));
+        if (this.#pending.size >= this.#maxPending)
+            return Promise.reject(new RpcError(-32001, "app-server request queue is full"));
+        const id = this.#nextId++;
+        return new Promise((resolve, reject) => {
+            let disposeAbort = () => undefined;
+            const abort = (abortedSignal) => {
+                if (!this.#pending.delete(id))
+                    return;
+                reject(abortedSignal.reason ?? new Error("request cancelled"));
+            };
+            const pending = {
+                resolve: (value) => {
+                    disposeAbort();
+                    resolve(value);
+                },
+                reject: (reason) => {
+                    disposeAbort();
+                    reject(reason);
+                },
+            };
+            this.#pending.set(id, pending);
+            disposeAbort = listenForAbort(signal, abort);
+            if (!this.#pending.has(id))
+                return;
+            try {
+                this.#write({ id, method, params });
+            }
+            catch (error) {
+                if (this.#pending.delete(id))
+                    pending.reject(error);
+            }
+        });
+    }
+    notify(method, params) {
+        this.#write(params === undefined ? { method } : { method, params });
+    }
+    respond(id, result) {
+        this.#write({ id, result });
+    }
+    respondError(id, error) {
+        this.#write({ id, error });
+    }
+    close(reason = new Error("app-server transport closed")) {
+        if (this.#closed)
+            return;
+        this.#closed = true;
+        for (const pending of this.#pending.values())
+            pending.reject(reason);
+        this.#pending.clear();
+        this.emit("close", reason);
+    }
+    #write(message) {
+        if (this.#closed)
+            throw new Error("app-server transport is closed");
+        this.#output.write(`${JSON.stringify(message)}\n`);
+    }
+    #receive(line) {
+        // Buffered frames may arrive after close; logical closure is authoritative.
+        if (this.#closed)
+            return;
+        if (line.trim() === "")
+            return;
+        let value;
+        try {
+            value = JSON.parse(line);
+        }
+        catch {
+            this.emit("malformed", line);
+            this.close(new Error("app-server emitted malformed JSON"));
+            return;
+        }
+        const message = record(value);
+        if (!message) {
+            this.emit("malformed", line);
+            return;
+        }
+        if ((typeof message.id === "number" || typeof message.id === "string") &&
+            ("result" in message || "error" in message)) {
+            const pending = typeof message.id === "number"
+                ? this.#pending.get(message.id)
+                : undefined;
+            if (!pending)
+                return;
+            this.#pending.delete(message.id);
+            const error = record(message.error);
+            if (error && typeof error.code === "number")
+                pending.reject(new RpcError(error.code, String(error.message ?? "JSON-RPC error")));
+            else
+                pending.resolve(message.result);
+            return;
+        }
+        if (typeof message.method !== "string") {
+            this.emit("malformed", line);
+            return;
+        }
+        if (typeof message.id === "number" || typeof message.id === "string")
+            this.emit("request", {
+                id: message.id,
+                method: message.method,
+                params: message.params,
+            });
+        else
+            this.emit("notification", message.method, message.params);
+    }
+}
+//# sourceMappingURL=json-rpc.js.map

package/dist/app-server/json-rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-rpc.js","sourceRoot":"","sources":["../../src/app-server/json-rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AASlD,2DAA2D;AAC3D,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEf;IADlB,YACkB,OAAe,EAC/B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,YAAO,GAAP,OAAO,CAAQ;QAI/B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAeD,qEAAqE;AACrE,MAAM,OAAO,gBAAiB,SAAQ,YAAY;IACvC,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,OAAO,CAAW;IAClB,WAAW,CAAS;IAC7B,OAAO,GAAG,CAAC,CAAC;IACZ,OAAO,GAAG,KAAK,CAAC;IAEhB,YAAY,KAAe,EAAE,MAAgB,EAAE,UAAU,GAAG,GAAG;QAC7D,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAC9B,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9D,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CACrB,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CACrD,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,CACL,MAAc,EACd,MAAe,EACf,MAAoB;QAEpB,IAAI,IAAI,CAAC,OAAO;YACd,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;QACrE,IAAI,MAAM,EAAE,OAAO;YACjB,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW;YACxC,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,QAAQ,CAAC,CAAC,KAAK,EAAE,kCAAkC,CAAC,CACzD,CAAC;QACJ,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,YAAY,GAAG,GAAS,EAAE,CAAC,SAAS,CAAC;YACzC,MAAM,KAAK,GAAG,CAAC,aAA0B,EAAQ,EAAE;gBACjD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAAE,OAAO;gBACtC,MAAM,CAAC,aAAa,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;YACjE,CAAC,CAAC;YACF,MAAM,OAAO,GAAY;gBACvB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBACjB,YAAY,EAAE,CAAC;oBACf,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC;gBACD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;oBACjB,YAAY,EAAE,CAAC;oBACf,MAAM,CAAC,MAAM,CAAC,CAAC;gBACjB,CAAC;aACF,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC/B,YAAY,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,OAAO;YACnC,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,MAAgB;QACrC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,CAAC,EAAmB,EAAE,MAAe;QAC1C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,YAAY,CAAC,EAAmB,EAAE,KAAmB;QACnD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,SAAgB,IAAI,KAAK,CAAC,6BAA6B,CAAC;QAC5D,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,OAAe;QACpB,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,QAAQ,CAAC,IAAY;QACnB,4EAA4E;QAC5E,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO;QAC/B,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,IACE,CAAC,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,CAAC;YAClE,CAAC,QAAQ,IAAI,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC,EAC3C,CAAC;YACD,MAAM,OAAO,GACX,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ;gBAC5B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,CAAC,CAAC,SAAS,CAAC;YAChB,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAY,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBACzC,OAAO,CAAC,MAAM,CACZ,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,CACpE,CAAC;;gBACC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ;YAClE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;gBACnB,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;aACC,CAAC,CAAC;;YACxB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC;CACF"}

package/dist/bin.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/bin.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import { run } from "./cli/cli.js";
+import { writeStartupError } from "./core/logger.js";
+try {
+    process.exitCode = await run(process.argv.slice(2));
+}
+catch (error) {
+    writeStartupError(error);
+    process.exitCode = 1;
+}
+//# sourceMappingURL=bin.js.map

package/dist/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,IAAI,CAAC;IACH,OAAO,CAAC,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC"}

package/dist/cli/cli.d.ts

@@ -0,0 +1,6 @@
+/** Delays before bounded app-server restart attempts after an unexpected exit. */
+export declare const APP_SERVER_RECOVERY_DELAYS_MS: readonly [1000, 3000, 5000, 10000];
+/** Documents the CLI's supported command and options. */
+export declare const usage = "Usage: codex-openai-proxy serve [options]\n\nOptions:\n  --version                     Print the proxy version\n  --help                        Print this help\n  --host <host>                 Loopback host (default: 127.0.0.1)\n  --port <port>                 TCP port, or 0 for an ephemeral port (default: 8787)\n  --root <directory>            Allowed working-directory root (default: launch directory)\n  --codex-path <path>           Override the package-owned Codex executable\n  --tool-timeout <duration>     Dynamic tool deadline (default: 5m)\n  --implicit-tool-continuation <true|false>\n                                Resolve tool results by tool_call_id (default: true)\n  --request-timeout <duration>  HTTP request deadline (default: 30s)\n  --shutdown-timeout <duration> Graceful shutdown deadline (default: 10s)\n  --body-limit <bytes>          Maximum request body (default: 1048576)\n  --max-requests <count>        Maximum concurrent requests (default: 100)\n  --log-level <level>           debug, info, warn, or error (default: info)\n  --state-dir <directory>       State directory (default: per-root under ~/.codex-openai-proxy)";
+/** Runs the CLI lifecycle and returns its eventual process exit code. */
+export declare function run(argv: readonly string[]): Promise<number>;

package/dist/cli/cli.js

@@ -0,0 +1,319 @@
+import { DEFAULT_STATE_DIR_DESCRIPTION, parseServeOptions, resolveServeOptions, } from "../core/config.js";
+import { createLogger, } from "../core/logger.js";
+import { createProxyServer } from "../http/server.js";
+import { CLIENT_VERSION, PINNED_CODEX_VERSION, startAppServer, } from "../app-server/app-server.js";
+import { ensureAuthenticated } from "../app-server/auth.js";
+import { abortableDelay } from "../core/abort.js";
+/** Delays before bounded app-server restart attempts after an unexpected exit. */
+export const APP_SERVER_RECOVERY_DELAYS_MS = [
+    1_000, 3_000, 5_000, 10_000,
+];
+/** Documents the CLI's supported command and options. */
+export const usage = `Usage: codex-openai-proxy serve [options]
+
+Options:
+  --version                     Print the proxy version
+  --help                        Print this help
+  --host <host>                 Loopback host (default: 127.0.0.1)
+  --port <port>                 TCP port, or 0 for an ephemeral port (default: 8787)
+  --root <directory>            Allowed working-directory root (default: launch directory)
+  --codex-path <path>           Override the package-owned Codex executable
+  --tool-timeout <duration>     Dynamic tool deadline (default: 5m)
+  --implicit-tool-continuation <true|false>
+                                Resolve tool results by tool_call_id (default: true)
+  --request-timeout <duration>  HTTP request deadline (default: 30s)
+  --shutdown-timeout <duration> Graceful shutdown deadline (default: 10s)
+  --body-limit <bytes>          Maximum request body (default: 1048576)
+  --max-requests <count>        Maximum concurrent requests (default: 100)
+  --log-level <level>           debug, info, warn, or error (default: info)
+  --state-dir <directory>       State directory (default: ${DEFAULT_STATE_DIR_DESCRIPTION})`;
+/** Runs the CLI lifecycle and returns its eventual process exit code. */
+export async function run(argv) {
+    if (argv.length === 0 || argv.includes("--help") || argv.includes("-h")) {
+        process.stdout.write(`${usage}\n`);
+        return 0;
+    }
+    if (argv.includes("--version")) {
+        process.stdout.write(`${CLIENT_VERSION}\n`);
+        return 0;
+    }
+    if (argv[0] !== "serve")
+        throw new Error(`Unknown command: ${argv[0]}\n\n${usage}`);
+    const parsed = parseServeOptions(argv.slice(1));
+    let log = createLogger(parsed.logLevel, undefined, redactionContext(parsed));
+    try {
+        const options = await resolveServeOptions(parsed);
+        log = createLogger(options.logLevel, undefined, redactionContext(options));
+        return await runServer(options, log);
+    }
+    catch (error) {
+        log.failure("startup_failed", {}, error);
+        return 1;
+    }
+}
+/** Derives one redaction context from parsed or finalized configuration. */
+function redactionContext(options) {
+    return {
+        root: options.root,
+        sensitivePaths: [options.stateDir, options.codexPath].filter((path) => path !== undefined),
+    };
+}
+/** Installs one-shot process signal handlers and returns an idempotent disposer. */
+function installSignalHandlers(stop) {
+    const onSigint = () => stop("SIGINT");
+    const onSigterm = () => stop("SIGTERM");
+    process.once("SIGINT", onSigint);
+    process.once("SIGTERM", onSigterm);
+    let disposed = false;
+    return () => {
+        if (disposed)
+            return;
+        disposed = true;
+        process.off("SIGINT", onSigint);
+        process.off("SIGTERM", onSigterm);
+    };
+}
+/** Owns app-server startup, authentication, transport installation, and recovery. */
+class AppServerSupervisor {
+    #options;
+    #log;
+    #proxy;
+    #lifecycle;
+    #active;
+    #starting;
+    #initializing;
+    #cleanupFailures = new Set();
+    #recovering = false;
+    constructor({ options, log, proxy, lifecycle }) {
+        this.#options = options;
+        this.#log = log;
+        this.#proxy = proxy;
+        this.#lifecycle = lifecycle;
+    }
+    /** Starts the initial child and installs its transport before returning. */
+    async start() {
+        await this.#startAndInstall();
+    }
+    /** Waits for initialization to settle, then stops every current child. */
+    async stop() {
+        // startAppServer owns cancellation before it can expose an AppServer. Await
+        // that task so shutdown cannot complete while a recovery child is still
+        // being verified, initialized, or authenticated.
+        let initialized;
+        try {
+            initialized = await this.#initializing;
+        }
+        catch {
+            // The initialization observer below classifies failures at rejection
+            // time, while normal startup and recovery errors remain with callers.
+        }
+        const children = [
+            ...new Set([this.#active, this.#starting, initialized]),
+        ].filter((child) => child !== undefined);
+        // AppServer.stop() memoizes its own shutdown, so repeated calls are safe.
+        const results = await Promise.allSettled(children.map(async (child) => await child.stop()));
+        for (const result of results)
+            if (result.status === "rejected")
+                this.#cleanupFailures.add(result.reason);
+        const failures = [...this.#cleanupFailures];
+        if (failures.length === 1)
+            throw failures[0];
+        if (failures.length > 1)
+            throw new AggregateError(failures, "app-server cleanup failed");
+    }
+    /** Stops one partial child while retaining cleanup failure for shutdown. */
+    async #stopPartial(next) {
+        try {
+            await next.stop();
+        }
+        catch (error) {
+            this.#cleanupFailures.add(error);
+        }
+    }
+    /** Starts and authenticates one child without exposing a partial transport. */
+    async #initialize() {
+        const next = await startAppServer({
+            codexPath: this.#options.codexPath,
+            root: this.#options.root,
+            startupTimeoutMs: this.#options.toolTimeoutMs,
+            shutdownTimeoutMs: this.#options.shutdownTimeoutMs,
+            log: this.#log,
+            diagnosticLogging: this.#options.logLevel === "debug",
+            signal: this.#lifecycle.signal,
+        });
+        this.#starting = next;
+        let exited = false;
+        next.child.once("exit", () => {
+            exited = true;
+            if (!this.#lifecycle.signal.aborted && this.#active === next) {
+                this.#active = undefined;
+                this.#proxy.setReady(false);
+                this.#proxy.setTransport(undefined);
+                void this.#recover();
+            }
+        });
+        try {
+            await ensureAuthenticated({
+                rpc: next.rpc,
+                log: this.#log,
+                timeoutMs: this.#options.toolTimeoutMs,
+                interactive: Boolean(process.stderr.isTTY),
+                terminal: (message) => process.stderr.write(message),
+                signal: this.#lifecycle.signal,
+            });
+        }
+        catch (error) {
+            await this.#stopPartial(next);
+            if (this.#starting === next)
+                this.#starting = undefined;
+            throw error;
+        }
+        if (this.#lifecycle.signal.aborted || exited) {
+            await this.#stopPartial(next);
+            if (this.#starting === next)
+                this.#starting = undefined;
+            throw (this.#lifecycle.signal.reason ??
+                new Error("app-server exited during startup"));
+        }
+        this.#starting = undefined;
+        return next;
+    }
+    /** Atomically promotes one initialized child into the live proxy transport. */
+    async #startAndInstall() {
+        const initializing = this.#initialize();
+        this.#initializing = initializing;
+        void initializing.catch((error) => {
+            // An ordinary failure that preceded shutdown remains an operational
+            // startup/recovery error. Once aborted, only the exact lifecycle reason
+            // is expected; a different rejection can be abort cleanup failing.
+            if (this.#lifecycle.signal.aborted &&
+                error !== this.#lifecycle.signal.reason)
+                this.#cleanupFailures.add(error);
+        });
+        try {
+            const next = await initializing;
+            if (this.#lifecycle.signal.aborted) {
+                await this.#stopPartial(next);
+                throw this.#lifecycle.signal.reason;
+            }
+            this.#active = next;
+            this.#proxy.setTransport(next.rpc, next.requirements);
+            this.#proxy.setReady(true);
+        }
+        finally {
+            if (this.#initializing === initializing)
+                this.#initializing = undefined;
+        }
+    }
+    /** Runs the single bounded recovery loop while leaving HTTP listening. */
+    async #recover() {
+        if (this.#recovering || this.#lifecycle.signal.aborted)
+            return;
+        this.#recovering = true;
+        this.#proxy.setReady(false);
+        try {
+            for (const [index, delayMs] of APP_SERVER_RECOVERY_DELAYS_MS.entries()) {
+                if (this.#lifecycle.signal.aborted)
+                    return;
+                const attempt = index + 1;
+                try {
+                    await abortableDelay(delayMs, this.#lifecycle.signal);
+                }
+                catch {
+                    if (this.#lifecycle.signal.aborted)
+                        return;
+                    throw new Error("App-server recovery delay failed.");
+                }
+                try {
+                    await this.#startAndInstall();
+                    this.#log("info", "app_server_restarted", { attempt });
+                    return;
+                }
+                catch (error) {
+                    if (this.#lifecycle.signal.aborted)
+                        return;
+                    this.#log.failure("app_server_restart_failed", { attempt }, error);
+                }
+            }
+            this.#log("error", "app_server_restart_exhausted");
+        }
+        finally {
+            this.#recovering = false;
+        }
+    }
+}
+/** Runs the proxy lifecycle after configuration has been fully resolved. */
+async function runServer(options, log) {
+    const proxy = createProxyServer(options, log);
+    const address = await proxy.listen();
+    log("info", "server_listening", {
+        proxy_version: CLIENT_VERSION,
+        codex_version: PINNED_CODEX_VERSION,
+        host: address.address,
+        port: address.port,
+        default_sandbox: "read-only",
+        default_web_search: "disabled",
+        ready: false,
+    });
+    log("debug", "server_root", { root: options.root });
+    const lifecycle = new AbortController();
+    const supervisor = new AppServerSupervisor({
+        options,
+        log,
+        proxy,
+        lifecycle,
+    });
+    let settleShutdown;
+    const shutdown = new Promise((resolve) => {
+        settleShutdown = resolve;
+    });
+    let stopping;
+    const stop = (signal) => {
+        if (stopping)
+            return;
+        lifecycle.abort(new Error(`proxy received ${signal}`));
+        log("info", "shutdown_started", { signal });
+        proxy.setReady(false);
+        // Disposing the coordinator first rejects suspended dynamic tool calls
+        // before the child transport is terminated.
+        proxy.setTransport(undefined);
+        stopping = (async () => {
+            try {
+                await supervisor.stop();
+                await proxy.close();
+                log("info", "shutdown_complete");
+                settleShutdown(0);
+            }
+            catch (error) {
+                await proxy.close().catch(() => undefined);
+                log.failure("shutdown_failed", {}, error);
+                settleShutdown(1);
+            }
+        })();
+    };
+    // Install lifecycle handlers before authentication so login is cancellable.
+    const disposeSignals = installSignalHandlers(stop);
+    try {
+        // Authentication must finish before readiness admits proxy traffic.
+        await supervisor.start();
+        if (lifecycle.signal.aborted)
+            return await shutdown;
+        // Announce readiness only after shutdown handlers can observe an immediate signal.
+        log("info", "app_server_ready", {
+            proxy_version: CLIENT_VERSION,
+            codex_version: PINNED_CODEX_VERSION,
+        });
+        return await shutdown;
+    }
+    catch (error) {
+        if (lifecycle.signal.aborted)
+            return await shutdown;
+        await supervisor.stop().catch(() => undefined);
+        await proxy.close().catch(() => undefined);
+        throw error;
+    }
+    finally {
+        disposeSignals();
+    }
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/cli/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,iBAAiB,EACjB,mBAAmB,GAGpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,YAAY,GAGb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAoB,MAAM,mBAAmB,CAAC;AACxE,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,cAAc,GAEf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,kFAAkF;AAClF,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM;CACnB,CAAC;AAEX,yDAAyD;AACzD,MAAM,CAAC,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;4DAiBuC,6BAA6B,GAAG,CAAC;AAE7F,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAuB;IAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;QACnC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,cAAc,IAAI,CAAC,CAAC;QAC5C,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO;QACrB,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAClD,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,OAAO,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,gBAAgB,CACvB,OAAoE;IAEpE,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,cAAc,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAC1D,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAC7C;KACF,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAS,qBAAqB,CAC5B,IAAsC;IAEtC,MAAM,QAAQ,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAEnC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,GAAS,EAAE;QAChB,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC,CAAC;AACJ,CAAC;AAUD,qFAAqF;AACrF,MAAM,mBAAmB;IACd,QAAQ,CAAe;IACvB,IAAI,CAAS;IACb,MAAM,CAAc;IACpB,UAAU,CAAkB;IACrC,OAAO,CAAwB;IAC/B,SAAS,CAAwB;IACjC,aAAa,CAAiC;IACrC,gBAAgB,GAAG,IAAI,GAAG,EAAW,CAAC;IAC/C,WAAW,GAAG,KAAK,CAAC;IAEpB,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAA8B;QACxE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAChC,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,IAAI;QACR,4EAA4E;QAC5E,wEAAwE;QACxE,iDAAiD;QACjD,IAAI,WAAkC,CAAC;QACvC,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,sEAAsE;QACxE,CAAC;QACD,MAAM,QAAQ,GAAG;YACf,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;SACxD,CAAC,MAAM,CAAC,CAAC,KAAK,EAAsB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;QAC7D,0EAA0E;QAC1E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAClD,CAAC;QACF,KAAK,MAAM,MAAM,IAAI,OAAO;YAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;gBAC9B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAE7C,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YACrB,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IACpE,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,YAAY,CAAC,IAAe;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,WAAW;QACf,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC;YAChC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YACxB,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa;YAC7C,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB;YAClD,GAAG,EAAE,IAAI,CAAC,IAAI;YACd,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,OAAO;YACrD,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;YAC3B,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC7D,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;gBACpC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,mBAAmB,CAAC;gBACxB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,GAAG,EAAE,IAAI,CAAC,IAAI;gBACd,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa;gBACtC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC1C,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;gBACpD,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;aAC/B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;gBAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YACxD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7C,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;gBAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YACxD,MAAM,CACJ,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM;gBAC7B,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAC9C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,gBAAgB;QACpB,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;QAClC,KAAK,YAAY,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACzC,oEAAoE;YACpE,wEAAwE;YACxE,mEAAmE;YACnE,IACE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;gBAC9B,KAAK,KAAK,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM;gBAEvC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC;YAChC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnC,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,aAAa,KAAK,YAAY;gBAAE,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAC/D,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,6BAA6B,CAAC,OAAO,EAAE,EAAE,CAAC;gBACvE,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO;gBAC3C,MAAM,OAAO,GAAG,KAAK,GAAG,CAAC,CAAC;gBAC1B,IAAI,CAAC;oBACH,MAAM,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBACxD,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;wBAAE,OAAO;oBAC3C,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACvD,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;oBACvD,OAAO;gBACT,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;wBAAE,OAAO;oBAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;QACrD,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC;CACF;AAED,4EAA4E;AAC5E,KAAK,UAAU,SAAS,CAAC,OAAqB,EAAE,GAAW;IACzD,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IACrC,GAAG,CAAC,MAAM,EAAE,kBAAkB,EAAE;QAC9B,aAAa,EAAE,cAAc;QAC7B,aAAa,EAAE,oBAAoB;QACnC,IAAI,EAAE,OAAO,CAAC,OAAO;QACrB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,eAAe,EAAE,WAAW;QAC5B,kBAAkB,EAAE,UAAU;QAC9B,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;IACH,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAEpD,MAAM,SAAS,GAAG,IAAI,eAAe,EAAE,CAAC;IACxC,MAAM,UAAU,GAAG,IAAI,mBAAmB,CAAC;QACzC,OAAO;QACP,GAAG;QACH,KAAK;QACL,SAAS;KACV,CAAC,CAAC;IACH,IAAI,cAAuC,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QAC/C,cAAc,GAAG,OAAO,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,IAAI,QAAmC,CAAC;IACxC,MAAM,IAAI,GAAG,CAAC,MAAsB,EAAQ,EAAE;QAC5C,IAAI,QAAQ;YAAE,OAAO;QACrB,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC,CAAC;QACvD,GAAG,CAAC,MAAM,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5C,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtB,uEAAuE;QACvE,4CAA4C;QAC5C,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC9B,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;YACrB,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;gBACxB,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;gBACjC,cAAc,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC3C,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;gBAC1C,cAAc,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC;IACF,4EAA4E;IAC5E,MAAM,cAAc,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,oEAAoE;QACpE,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,QAAQ,CAAC;QACpD,mFAAmF;QACnF,GAAG,CAAC,MAAM,EAAE,kBAAkB,EAAE;YAC9B,aAAa,EAAE,cAAc;YAC7B,aAAa,EAAE,oBAAoB;SACpC,CAAC,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,QAAQ,CAAC;QACpD,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,cAAc,EAAE,CAAC;IACnB,CAAC;AACH,CAAC"}