indusagi 0.12.31 → 0.12.33

package/local-dist-new/ml/kit/auth/index.js

@@ -1,112 +0,0 @@
-/**
- * OAuth credential management for AI providers.
- *
- * This module handles login, token refresh, and credential storage
- * for OAuth-based providers:
- * - Anthropic (Claude Pro/Max)
- * - GitHub Copilot
- * - OpenAI Codex (ChatGPT OAuth)
- * - Kimi (Moonshot AI)
- */
-// Anthropic
-export { anthropicOAuthProvider, loginAnthropic, refreshAnthropicToken } from "./anthropic.js";
-// GitHub Copilot
-export { getGitHubCopilotBaseUrl, githubCopilotOAuthProvider, loginGitHubCopilot, normalizeDomain, refreshGitHubCopilotToken, } from "./github-copilot.js";
-// OpenAI Codex (ChatGPT OAuth)
-export { loginOpenAICodex, openaiCodexOAuthProvider, refreshOpenAICodexToken } from "./openai-codex.js";
-// Kimi (Moonshot AI) - API key only, no OAuth
-export { loginKimi, refreshKimiToken } from "./kimi.js";
-export * from "./types.js";
-// ============================================================================
-// Provider Registry
-// ============================================================================
-import { anthropicOAuthProvider } from "./anthropic.js";
-import { githubCopilotOAuthProvider } from "./github-copilot.js";
-import { openaiCodexOAuthProvider } from "./openai-codex.js";
-const oauthProviderRegistry = new Map([
-    [anthropicOAuthProvider.id, anthropicOAuthProvider],
-    [githubCopilotOAuthProvider.id, githubCopilotOAuthProvider],
-    [openaiCodexOAuthProvider.id, openaiCodexOAuthProvider],
-    // Kimi uses API key auth only — NOT registered as OAuth provider
-]);
-/**
- * Get an OAuth provider by ID
- */
-export function getOAuthProvider(id) {
-    return oauthProviderRegistry.get(id);
-}
-/**
- * Register a custom OAuth provider
- */
-export function registerOAuthProvider(provider) {
-    oauthProviderRegistry.set(provider.id, provider);
-}
-/**
- * Get all registered OAuth providers
- */
-export function getOAuthProviders() {
-    return Array.from(oauthProviderRegistry.values());
-}
-/**
- * @deprecated Use getOAuthProviders() which returns OAuthProviderInterface[]
- */
-export function getOAuthProviderInfoList() {
-    return getOAuthProviders().map((p) => ({
-        id: p.id,
-        name: p.name,
-        available: true,
-    }));
-}
-// ============================================================================
-// High-level API (uses provider registry)
-// ============================================================================
-/**
- * Refresh token for any OAuth provider.
- * @deprecated Use getOAuthProvider(id).refreshToken() instead
- */
-export async function refreshOAuthToken(providerId, credentials) {
-    const provider = getOAuthProvider(providerId);
-    if (!provider) {
-        throw new Error(`Unknown OAuth provider: ${providerId}`);
-    }
-    return provider.refreshToken(credentials);
-}
-/**
- * Get API key for a provider from OAuth credentials.
- * Automatically refreshes expired tokens.
- *
- * @returns API key string and updated credentials, or null if no credentials
- * @throws Error if refresh fails
- */
-export async function getOAuthApiKey(providerId, credentials) {
-    const provider = getOAuthProvider(providerId);
-    if (!provider) {
-        throw new Error(`Unknown OAuth provider: ${providerId}`);
-    }
-    let creds = credentials[providerId];
-    if (!creds) {
-        return null;
-    }
-    // Refresh if expired
-    if (Date.now() >= creds.expires) {
-        try {
-            creds = await provider.refreshToken(creds);
-        }
-        catch (_error) {
-            throw new Error(`Failed to refresh OAuth token for ${providerId}`);
-        }
-    }
-    const apiKey = provider.getApiKey(creds);
-    return { newCredentials: creds, apiKey };
-}
-export async function ensureFreshOAuthCredentials(providerId, credentials) {
-    const provider = getOAuthProvider(providerId);
-    if (!provider)
-        throw new Error(`Unknown OAuth provider: ${providerId}`);
-    if (Date.now() < credentials.expires) {
-        return { credentials, refreshed: false };
-    }
-    const refreshed = await provider.refreshToken(credentials);
-    return { credentials: refreshed, refreshed: true };
-}
-//# sourceMappingURL=index.js.map

package/local-dist-new/ml/kit/auth/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../app/ml/kit/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,YAAY;AACZ,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC/F,iBAAiB;AACjB,OAAO,EACN,uBAAuB,EACvB,0BAA0B,EAC1B,kBAAkB,EAClB,eAAe,EACf,yBAAyB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,+BAA+B;AAC/B,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACxG,8CAA8C;AAC9C,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAExD,cAAc,YAAY,CAAC;AAE3B,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAS7D,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAiC;IACrE,CAAC,sBAAsB,CAAC,EAAE,EAAE,sBAAsB,CAAC;IACnD,CAAC,0BAA0B,CAAC,EAAE,EAAE,0BAA0B,CAAC;IAC3D,CAAC,wBAAwB,CAAC,EAAE,EAAE,wBAAwB,CAAC;IACvD,iEAAiE;CACjE,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAmB;IACnD,OAAO,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgC;IACrE,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAChC,OAAO,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB;IACvC,OAAO,iBAAiB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,SAAS,EAAE,IAAI;KACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,0CAA0C;AAC1C,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,UAA2B,EAC3B,WAA6B;IAE7B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,UAA2B,EAC3B,WAA6C;IAE7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACb,CAAC;IAED,qBAAqB;IACrB,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC;YACJ,KAAK,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,EAAE,CAAC,CAAC;QACpE,CAAC;IACF,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,UAA2B,EAC3B,WAA6B;IAE7B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;IACxE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;QACtC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IAC3D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACpD,CAAC"}

package/local-dist-new/ml/kit/auth/kimi.d.ts

@@ -1,24 +0,0 @@
-/**
- * Kimi (Moonshot AI) — API key authentication only.
- *
- * Kimi does NOT support OAuth. Use KIMI_API_KEY or MOONSHOT_API_KEY
- * environment variables, or pass the key directly via --api-key.
- *
- * Get your API key at:
- *   Standard Kimi:  https://www.moonshot.cn/
- *   Kimi Code:      https://www.kimi.com/code/en
- */
-import type { OAuthCredentials } from "./types.js";
-/**
- * Not a real OAuth login — Kimi uses API keys only.
- * Exported for completeness; callers should use getEnvApiKey("kimi") instead.
- * @throws Always — Kimi does not support OAuth.
- */
-export declare function loginKimi(): Promise<OAuthCredentials>;
-/**
- * Not applicable — Kimi uses API keys only, tokens do not expire.
- * @throws Always
- */
-export declare function refreshKimiToken(_refreshToken: string): Promise<OAuthCredentials>;
-export declare function isKimiApiKeyStyleCredential(credentials: OAuthCredentials): boolean;
-//# sourceMappingURL=kimi.d.ts.map

package/local-dist-new/ml/kit/auth/kimi.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"kimi.d.ts","sourceRoot":"","sources":["../../../../app/ml/kit/auth/kimi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD;;;;GAIG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAK3D;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAEvF;AAED,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAElF"}

package/local-dist-new/ml/kit/auth/kimi.js

@@ -1,30 +0,0 @@
-/**
- * Kimi (Moonshot AI) — API key authentication only.
- *
- * Kimi does NOT support OAuth. Use KIMI_API_KEY or MOONSHOT_API_KEY
- * environment variables, or pass the key directly via --api-key.
- *
- * Get your API key at:
- *   Standard Kimi:  https://www.moonshot.cn/
- *   Kimi Code:      https://www.kimi.com/code/en
- */
-/**
- * Not a real OAuth login — Kimi uses API keys only.
- * Exported for completeness; callers should use getEnvApiKey("kimi") instead.
- * @throws Always — Kimi does not support OAuth.
- */
-export async function loginKimi() {
-    throw new Error("Kimi does not support OAuth. Set KIMI_API_KEY or MOONSHOT_API_KEY in your environment, " +
-        "or use `indusagi login --provider kimi` to enter your API key.");
-}
-/**
- * Not applicable — Kimi uses API keys only, tokens do not expire.
- * @throws Always
- */
-export async function refreshKimiToken(_refreshToken) {
-    throw new Error("Kimi does not support OAuth token refresh.");
-}
-export function isKimiApiKeyStyleCredential(credentials) {
-    return !!credentials.access && credentials.access.length >= 12;
-}
-//# sourceMappingURL=kimi.js.map

package/local-dist-new/ml/kit/auth/kimi.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"kimi.js","sourceRoot":"","sources":["../../../../app/ml/kit/auth/kimi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS;IAC9B,MAAM,IAAI,KAAK,CACd,yFAAyF;QACxF,gEAAgE,CACjE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,aAAqB;IAC3D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,WAA6B;IACxE,OAAO,CAAC,CAAC,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;AAChE,CAAC"}

package/local-dist-new/ml/kit/auth/openai-codex.d.ts

@@ -1,37 +0,0 @@
-/**
- * OpenAI Codex (ChatGPT OAuth) flow
- *
- * NOTE: This module uses Node.js crypto and http for the OAuth callback.
- * It is only intended for CLI use, not browser environments.
- */
-import type { OAuthCredentials, OAuthPrompt, OAuthProviderInterface } from "./types.js";
-/**
- * Login with OpenAI Codex OAuth
- *
- * @param options.onAuth - Called with URL and instructions when auth starts
- * @param options.onPrompt - Called to prompt user for manual code paste (fallback if no onManualCodeInput)
- * @param options.onProgress - Optional progress messages
- * @param options.onManualCodeInput - Optional promise that resolves with user-pasted code.
- *                                    Races with browser callback - whichever completes first wins.
- *                                    Useful for showing paste input immediately alongside browser flow.
- * @param options.originator - OAuth originator parameter (defaults to "indusagi")
- */
-export declare function authenticateOpenAICodex(options: {
-    onAuth: (info: {
-        url: string;
-        instructions?: string;
-    }) => void;
-    onPrompt: (prompt: OAuthPrompt) => Promise<string>;
-    onProgress?: (message: string) => void;
-    onManualCodeInput?: () => Promise<string>;
-    originator?: string;
-}): Promise<OAuthCredentials>;
-/**
- * Refresh OpenAI Codex OAuth token
- */
-export declare function renewOpenAICodexToken(refreshToken: string): Promise<OAuthCredentials>;
-export { authenticateOpenAICodex as loginOpenAICodex };
-export { renewOpenAICodexToken as refreshOpenAICodexToken };
-export declare function isOpenAICodexOAuthCredentialsValid(credentials: OAuthCredentials): boolean;
-export declare const openaiCodexOAuthProvider: OAuthProviderInterface;
-//# sourceMappingURL=openai-codex.d.ts.map

package/local-dist-new/ml/kit/auth/openai-codex.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"openai-codex.d.ts","sourceRoot":"","sources":["../../../../app/ml/kit/auth/openai-codex.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAeH,OAAO,KAAK,EAAE,gBAAgB,EAAuB,WAAW,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AA+S7G;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,EAAE;IACtD,MAAM,EAAE,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC/D,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,iBAAiB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA4C5B;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAiB3F;AAGD,OAAO,EAAE,uBAAuB,IAAI,gBAAgB,EAAE,CAAC;AACvD,OAAO,EAAE,qBAAqB,IAAI,uBAAuB,EAAE,CAAC;AAE5D,wBAAgB,kCAAkC,CAAC,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAEzF;AAED,eAAO,MAAM,wBAAwB,EAAE,sBAqBtC,CAAC"}

package/local-dist-new/ml/kit/auth/openai-codex.js

@@ -1,368 +0,0 @@
-/**
- * OpenAI Codex (ChatGPT OAuth) flow
- *
- * NOTE: This module uses Node.js crypto and http for the OAuth callback.
- * It is only intended for CLI use, not browser environments.
- */
-// NEVER convert to top-level imports - breaks browser/Vite builds (web-ui)
-let _randomBytes = null;
-let _http = null;
-if (typeof process !== "undefined" && (process.versions?.node || process.versions?.bun)) {
-    import("node:crypto").then((m) => {
-        _randomBytes = m.randomBytes;
-    });
-    import("node:http").then((m) => {
-        _http = m;
-    });
-}
-import { generatePKCE } from "./pkce.js";
-// Change 1 — constants moved into config object
-const CodexOAuthConfig = {
-    clientId: "app_EMoamEEZ73f0CkXaXp7hrann",
-    authorizeUrl: "https://auth.openai.com/oauth/authorize",
-    tokenUrl: "https://auth.openai.com/oauth/token",
-    redirectUri: "http://localhost:1455/auth/callback",
-    scope: "openid profile email offline_access",
-    jwtClaimPath: "https://api.openai.com/auth",
-};
-const SUCCESS_HTML = `<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1" />
-  <title>Authentication successful</title>
-</head>
-<body>
-  <p>Authentication successful. Return to your terminal to continue.</p>
-</body>
-</html>`;
-function extractChatGptId(payload) {
-    const claims = payload[CodexOAuthConfig.jwtClaimPath];
-    if (claims && typeof claims === "object" && "chatgpt_account_id" in claims) {
-        return String(claims.chatgpt_account_id ?? "");
-    }
-    return undefined;
-}
-function generateStateToken() {
-    if (!_randomBytes) {
-        throw new Error("OpenAI Codex OAuth is only available in Node.js environments");
-    }
-    return _randomBytes(16).toString("hex");
-}
-function extractAuthParams(raw) {
-    const trimmed = raw.trim();
-    if (!trimmed)
-        return {};
-    if (trimmed.startsWith("http")) {
-        try {
-            const parsed = new URL(trimmed);
-            return {
-                code: parsed.searchParams.get("code") ?? undefined,
-                state: parsed.searchParams.get("state") ?? undefined,
-            };
-        }
-        catch {
-            // fall through
-        }
-    }
-    if (trimmed.includes("=")) {
-        const qs = trimmed.startsWith("?") ? trimmed.slice(1) : trimmed;
-        const params = new URLSearchParams(qs);
-        const code = params.get("code");
-        if (code)
-            return { code, state: params.get("state") ?? undefined };
-    }
-    return { code: trimmed };
-}
-function parseJwtPayload(token) {
-    try {
-        const parts = token.split(".");
-        if (parts.length !== 3)
-            return null;
-        const payload = parts[1] ?? "";
-        const decoded = atob(payload);
-        return JSON.parse(decoded);
-    }
-    catch {
-        return null;
-    }
-}
-async function postTokenRequest(body) {
-    const res = await fetch(CodexOAuthConfig.tokenUrl, {
-        method: "POST",
-        headers: { "Content-Type": "application/x-www-form-urlencoded" },
-        body,
-    }).catch(() => null);
-    if (!res?.ok)
-        return { type: "failed" };
-    const data = (await res.json().catch(() => null));
-    if (!data?.access_token || !data.refresh_token || typeof data.expires_in !== "number") {
-        return { type: "failed" };
-    }
-    return {
-        type: "success",
-        access: data.access_token,
-        refresh: data.refresh_token,
-        expires: Date.now() + data.expires_in * 1000,
-    };
-}
-async function fetchTokens(code, verifier, redirectUri = CodexOAuthConfig.redirectUri) {
-    return postTokenRequest(new URLSearchParams({
-        grant_type: "authorization_code",
-        client_id: CodexOAuthConfig.clientId,
-        code,
-        code_verifier: verifier,
-        redirect_uri: redirectUri,
-    }));
-}
-async function renewAccessToken(refreshToken) {
-    return postTokenRequest(new URLSearchParams({
-        grant_type: "refresh_token",
-        refresh_token: refreshToken,
-        client_id: CodexOAuthConfig.clientId,
-    }));
-}
-// Change 3 — buildAuthUrl -> createAuthorizationUrl
-async function createAuthorizationUrl(originator = "indusagi") {
-    const { verifier, challenge } = await generatePKCE();
-    const state = generateStateToken();
-    const authParams = [
-        ["response_type", "code"],
-        ["client_id", CodexOAuthConfig.clientId],
-        ["redirect_uri", CodexOAuthConfig.redirectUri],
-        ["scope", CodexOAuthConfig.scope],
-        ["code_challenge", challenge],
-        ["code_challenge_method", "S256"],
-        ["state", state],
-        ["id_token_add_organizations", "true"],
-        ["codex_cli_simplified_flow", "true"],
-        ["originator", originator],
-    ];
-    const authUrl = new URL(CodexOAuthConfig.authorizeUrl);
-    for (const [k, v] of authParams)
-        authUrl.searchParams.set(k, v);
-    return { verifier, state, url: authUrl.toString() };
-}
-// Change 2 — LocalOAuthServer class (replaces startLocalOAuthServer function)
-class LocalOAuthServer {
-    server = null;
-    lastCode = null;
-    cancelled = false;
-    async start(expectedState) {
-        if (!_http) {
-            throw new Error("OpenAI Codex OAuth is only available in Node.js environments");
-        }
-        this.server = _http.createServer((req, res) => {
-            try {
-                const url = new URL(req.url || "", "http://localhost");
-                if (url.pathname !== "/auth/callback") {
-                    res.statusCode = 404;
-                    res.end("Not found");
-                    return;
-                }
-                if (url.searchParams.get("state") !== expectedState) {
-                    res.statusCode = 400;
-                    res.end("State mismatch");
-                    return;
-                }
-                const code = url.searchParams.get("code");
-                if (!code) {
-                    res.statusCode = 400;
-                    res.end("Missing authorization code");
-                    return;
-                }
-                res.statusCode = 200;
-                res.setHeader("Content-Type", "text/html; charset=utf-8");
-                res.end(SUCCESS_HTML);
-                this.lastCode = code;
-            }
-            catch {
-                res.statusCode = 500;
-                res.end("Internal error");
-            }
-        });
-        return new Promise((resolve) => {
-            this.server
-                .listen(1455, "127.0.0.1", () => {
-                resolve({
-                    waitForCode: this.waitForCode.bind(this),
-                    stop: this.stop.bind(this),
-                    cancelWait: this.cancelWait.bind(this),
-                });
-            })
-                .on("error", (err) => {
-                console.error("[openai-codex] Failed to bind http://127.0.0.1:1455 (", err.code, ") Falling back to manual paste.");
-                resolve({
-                    waitForCode: async () => null,
-                    stop: this.stop.bind(this),
-                    cancelWait: this.cancelWait.bind(this),
-                });
-            });
-        });
-    }
-    async waitForCode() {
-        const sleep = () => new Promise((r) => setTimeout(r, 100));
-        for (let i = 0; i < 600; i += 1) {
-            if (this.lastCode)
-                return { code: this.lastCode };
-            if (this.cancelled)
-                return null;
-            await sleep();
-        }
-        return null;
-    }
-    cancelWait() {
-        this.cancelled = true;
-    }
-    stop() {
-        if (this.server) {
-            try {
-                this.server.close();
-            }
-            catch {
-                // ignore
-            }
-            this.server = null;
-        }
-    }
-}
-function extractAccountId(accessToken) {
-    const payload = parseJwtPayload(accessToken);
-    if (!payload)
-        return null;
-    const accountId = extractChatGptId(payload);
-    return typeof accountId === "string" && accountId.length > 0 ? accountId : null;
-}
-async function resolveAuthCode(server, expectedState, onManualCodeInput) {
-    if (onManualCodeInput) {
-        let manualCode;
-        let manualError;
-        const manualPromise = onManualCodeInput()
-            .then((v) => {
-            manualCode = v;
-            server.cancelWait();
-        })
-            .catch((e) => {
-            manualError = e instanceof Error ? e : new Error(String(e));
-            server.cancelWait();
-        });
-        const result = await server.waitForCode();
-        if (manualError)
-            throw manualError;
-        if (result?.code)
-            return result.code;
-        if (manualCode) {
-            const parsed = extractAuthParams(manualCode);
-            if (parsed.state && parsed.state !== expectedState)
-                throw new Error("State mismatch");
-            return parsed.code;
-        }
-        await manualPromise;
-        if (manualError)
-            throw manualError;
-        if (manualCode) {
-            const parsed = extractAuthParams(manualCode);
-            if (parsed.state && parsed.state !== expectedState)
-                throw new Error("State mismatch");
-            return parsed.code;
-        }
-        return undefined;
-    }
-    const result = await server.waitForCode();
-    return result?.code;
-}
-/**
- * Login with OpenAI Codex OAuth
- *
- * @param options.onAuth - Called with URL and instructions when auth starts
- * @param options.onPrompt - Called to prompt user for manual code paste (fallback if no onManualCodeInput)
- * @param options.onProgress - Optional progress messages
- * @param options.onManualCodeInput - Optional promise that resolves with user-pasted code.
- *                                    Races with browser callback - whichever completes first wins.
- *                                    Useful for showing paste input immediately alongside browser flow.
- * @param options.originator - OAuth originator parameter (defaults to "indusagi")
- */
-export async function authenticateOpenAICodex(options) {
-    const { verifier, state, url } = await createAuthorizationUrl(options.originator);
-    const localServer = new LocalOAuthServer();
-    const server = await localServer.start(state);
-    options.onAuth({ url, instructions: "A browser window should open. Complete login to finish." });
-    try {
-        let code = await resolveAuthCode(server, state, options.onManualCodeInput);
-        if (!code) {
-            const input = await options.onPrompt({
-                message: "Paste the authorization code (or full redirect URL):",
-            });
-            const parsed = extractAuthParams(input);
-            if (parsed.state && parsed.state !== state) {
-                throw new Error("State mismatch");
-            }
-            code = parsed.code;
-        }
-        if (!code) {
-            throw new Error("Missing authorization code");
-        }
-        const tokenResult = await fetchTokens(code, verifier);
-        if (tokenResult.type !== "success") {
-            throw new Error("Token exchange failed");
-        }
-        const accountId = extractAccountId(tokenResult.access);
-        if (!accountId) {
-            throw new Error("Failed to extract accountId from token");
-        }
-        return {
-            access: tokenResult.access,
-            refresh: tokenResult.refresh,
-            expires: tokenResult.expires,
-            accountId,
-        };
-    }
-    finally {
-        server.stop();
-    }
-}
-/**
- * Refresh OpenAI Codex OAuth token
- */
-export async function renewOpenAICodexToken(refreshToken) {
-    const result = await renewAccessToken(refreshToken);
-    if (result.type !== "success") {
-        throw new Error("Failed to refresh OpenAI Codex token");
-    }
-    const accountId = extractAccountId(result.access);
-    if (!accountId) {
-        throw new Error("Failed to extract accountId from token");
-    }
-    return {
-        access: result.access,
-        refresh: result.refresh,
-        expires: result.expires,
-        accountId,
-    };
-}
-// Change 5 — re-export old names for backward compatibility
-export { authenticateOpenAICodex as loginOpenAICodex };
-export { renewOpenAICodexToken as refreshOpenAICodexToken };
-export function isOpenAICodexOAuthCredentialsValid(credentials) {
-    return !!credentials.access && !!credentials.refresh && credentials.expires > Date.now();
-}
-export const openaiCodexOAuthProvider = {
-    id: "openai-codex",
-    name: "ChatGPT Go/Plus/Pro (Codex Subscription)",
-    usesCallbackServer: true,
-    async login(callbacks) {
-        return authenticateOpenAICodex({
-            onAuth: callbacks.onAuth,
-            onPrompt: callbacks.onPrompt,
-            onProgress: callbacks.onProgress,
-            onManualCodeInput: callbacks.onManualCodeInput,
-        });
-    },
-    async refreshToken(credentials) {
-        return renewOpenAICodexToken(credentials.refresh);
-    },
-    getApiKey(credentials) {
-        return credentials.access;
-    },
-};
-//# sourceMappingURL=openai-codex.js.map

package/local-dist-new/ml/kit/auth/openai-codex.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"openai-codex.js","sourceRoot":"","sources":["../../../../app/ml/kit/auth/openai-codex.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,2EAA2E;AAC3E,IAAI,YAAY,GAAoD,IAAI,CAAC;AACzE,IAAI,KAAK,GAAsC,IAAI,CAAC;AACpD,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;IACzF,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QAChC,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9B,KAAK,GAAG,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAGzC,gDAAgD;AAChD,MAAM,gBAAgB,GAAG;IACxB,QAAQ,EAAE,8BAA8B;IACxC,YAAY,EAAE,yCAAyC;IACvD,QAAQ,EAAE,qCAAqC;IAC/C,WAAW,EAAE,qCAAqC;IAClD,KAAK,EAAE,qCAAqC;IAC5C,YAAY,EAAE,6BAA6B;CAClC,CAAC;AAEX,MAAM,YAAY,GAAG;;;;;;;;;;QAUb,CAAC;AAYT,SAAS,gBAAgB,CAAC,OAAuB;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IACtD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,oBAAoB,IAAI,MAAM,EAAE,CAAC;QAC5E,OAAO,MAAM,CAAE,MAA2C,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,kBAAkB;IAC1B,IAAI,CAAC,YAAY,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,YAAY,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACrC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YAChC,OAAO;gBACN,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS;gBAClD,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;aACpD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACR,eAAe;QAChB,CAAC;IACF,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAChE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACrC,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAqB;IACpD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,QAAQ,EAAE;QAClD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI;KACJ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACrB,IAAI,CAAC,GAAG,EAAE,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAMzC,CAAC;IACR,IAAI,CAAC,IAAI,EAAE,YAAY,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACvF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO;QACN,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,IAAI,CAAC,YAAY;QACzB,OAAO,EAAE,IAAI,CAAC,aAAa;QAC3B,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI;KAC5C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CACzB,IAAY,EACZ,QAAgB,EAChB,cAAsB,gBAAgB,CAAC,WAAW;IAElD,OAAO,gBAAgB,CACtB,IAAI,eAAe,CAAC;QACnB,UAAU,EAAE,oBAAoB;QAChC,SAAS,EAAE,gBAAgB,CAAC,QAAQ;QACpC,IAAI;QACJ,aAAa,EAAE,QAAQ;QACvB,YAAY,EAAE,WAAW;KACzB,CAAC,CACF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,YAAoB;IACnD,OAAO,gBAAgB,CACtB,IAAI,eAAe,CAAC;QACnB,UAAU,EAAE,eAAe;QAC3B,aAAa,EAAE,YAAY;QAC3B,SAAS,EAAE,gBAAgB,CAAC,QAAQ;KACpC,CAAC,CACF,CAAC;AACH,CAAC;AAED,oDAAoD;AACpD,KAAK,UAAU,sBAAsB,CACpC,aAAqB,UAAU;IAE/B,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IAEnC,MAAM,UAAU,GAA4B;QAC3C,CAAC,eAAe,EAAE,MAAM,CAAC;QACzB,CAAC,WAAW,EAAE,gBAAgB,CAAC,QAAQ,CAAC;QACxC,CAAC,cAAc,EAAE,gBAAgB,CAAC,WAAW,CAAC;QAC9C,CAAC,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC;QACjC,CAAC,gBAAgB,EAAE,SAAS,CAAC;QAC7B,CAAC,uBAAuB,EAAE,MAAM,CAAC;QACjC,CAAC,OAAO,EAAE,KAAK,CAAC;QAChB,CAAC,4BAA4B,EAAE,MAAM,CAAC;QACtC,CAAC,2BAA2B,EAAE,MAAM,CAAC;QACrC,CAAC,YAAY,EAAE,UAAU,CAAC;KAC1B,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IACvD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU;QAAE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEhE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;AACrD,CAAC;AAUD,8EAA8E;AAC9E,MAAM,gBAAgB;IACb,MAAM,GAAsC,IAAI,CAAC;IACjD,QAAQ,GAAkB,IAAI,CAAC;IAC/B,SAAS,GAAG,KAAK,CAAC;IAE1B,KAAK,CAAC,KAAK,CAAC,aAAqB;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC7C,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,kBAAkB,CAAC,CAAC;gBACvD,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;oBACvC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;oBACrB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBACrB,OAAO;gBACR,CAAC;gBACD,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,aAAa,EAAE,CAAC;oBACrD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;oBACrB,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;oBAC1B,OAAO;gBACR,CAAC;gBACD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;oBACX,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;oBACrB,GAAG,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;oBACtC,OAAO;gBACR,CAAC;gBACD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;gBAC1D,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACR,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC3B,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC9B,IAAI,CAAC,MAAO;iBACV,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;gBAC/B,OAAO,CAAC;oBACP,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;oBACxC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC1B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;iBACtC,CAAC,CAAC;YACJ,CAAC,CAAC;iBACD,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;gBAC3C,OAAO,CAAC,KAAK,CACZ,uDAAuD,EACvD,GAAG,CAAC,IAAI,EACR,iCAAiC,CACjC,CAAC;gBACF,OAAO,CAAC;oBACP,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;oBAC7B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC1B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;iBACtC,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW;QACxB,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClD,IAAI,IAAI,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC;YAChC,MAAM,KAAK,EAAE,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAEO,UAAU;QACjB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,IAAI;QACH,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC;gBACJ,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACR,SAAS;YACV,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACpB,CAAC;IACF,CAAC;CACD;AAED,SAAS,gBAAgB,CAAC,WAAmB;IAC5C,MAAM,OAAO,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACjF,CAAC;AAED,KAAK,UAAU,eAAe,CAC7B,MAA6B,EAC7B,aAAqB,EACrB,iBAAyC;IAEzC,IAAI,iBAAiB,EAAE,CAAC;QACvB,IAAI,UAA8B,CAAC;QACnC,IAAI,WAA8B,CAAC;QACnC,MAAM,aAAa,GAAG,iBAAiB,EAAE;aACvC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YACX,UAAU,GAAG,CAAC,CAAC;YACf,MAAM,CAAC,UAAU,EAAE,CAAC;QACrB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YACZ,WAAW,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,MAAM,CAAC,UAAU,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,WAAW;YAAE,MAAM,WAAW,CAAC;QACnC,IAAI,MAAM,EAAE,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QACrC,IAAI,UAAU,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;YAC7C,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACtF,OAAO,MAAM,CAAC,IAAI,CAAC;QACpB,CAAC;QACD,MAAM,aAAa,CAAC;QACpB,IAAI,WAAW;YAAE,MAAM,WAAW,CAAC;QACnC,IAAI,UAAU,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;YAC7C,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACtF,OAAO,MAAM,CAAC,IAAI,CAAC;QACpB,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;IAC1C,OAAO,MAAM,EAAE,IAAI,CAAC;AACrB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAM7C;IACA,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAE9C,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,yDAAyD,EAAE,CAAC,CAAC;IAEjG,IAAI,CAAC;QACJ,IAAI,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAE3E,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC;gBACpC,OAAO,EAAE,sDAAsD;aAC/D,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACnC,CAAC;YACD,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACpB,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO;YACN,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,SAAS;SACT,CAAC;IACH,CAAC;YAAS,CAAC;QACV,MAAM,CAAC,IAAI,EAAE,CAAC;IACf,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,YAAoB;IAC/D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO;QACN,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS;KACT,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,OAAO,EAAE,uBAAuB,IAAI,gBAAgB,EAAE,CAAC;AACvD,OAAO,EAAE,qBAAqB,IAAI,uBAAuB,EAAE,CAAC;AAE5D,MAAM,UAAU,kCAAkC,CAAC,WAA6B;IAC/E,OAAO,CAAC,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC,WAAW,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAC1F,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAA2B;IAC/D,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,0CAA0C;IAChD,kBAAkB,EAAE,IAAI;IAExB,KAAK,CAAC,KAAK,CAAC,SAA8B;QACzC,OAAO,uBAAuB,CAAC;YAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;SAC9C,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,WAA6B;QAC/C,OAAO,qBAAqB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,SAAS,CAAC,WAA6B;QACtC,OAAO,WAAW,CAAC,MAAM,CAAC;IAC3B,CAAC;CACD,CAAC"}

package/local-dist-new/ml/kit/auth/pkce.d.ts

@@ -1,15 +0,0 @@
-/**
- * PKCE utilities using Web Crypto API.
- * Works in both Node.js 20+ and browsers.
- */
-export interface PKCEPair {
-    verifier: string;
-    challenge: string;
-}
-/**
- * Generate PKCE code verifier and challenge.
- * Uses Web Crypto API for cross-platform compatibility.
- */
-export declare function generatePKCE(): Promise<PKCEPair>;
-export declare function generateOAuthState(byteLength?: number): string;
-//# sourceMappingURL=pkce.d.ts.map

package/local-dist-new/ml/kit/auth/pkce.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../../../../app/ml/kit/auth/pkce.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAaH,MAAM,WAAW,QAAQ;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CAClB;AAcD;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC,CAItD;AAGD,wBAAgB,kBAAkB,CAAC,UAAU,SAAK,GAAG,MAAM,CAI1D"}