marifold 0.60.0

package/dist/auth/ChatGptAuth.d.ts

@@ -0,0 +1,17 @@
+export interface ChatGptAuthTokens {
+    accessToken: string;
+    refreshToken: string;
+    /** ChatGPT account id from the id_token, sent as the `chatgpt-account-id`
+     * header on Codex-backend requests. */
+    accountId?: string;
+    idToken?: string;
+    expiresAt?: number;
+}
+interface PkceCodes {
+    codeVerifier: string;
+    codeChallenge: string;
+}
+export declare function authorizeChatGptWithBrowser(write?: (text: string) => void): Promise<ChatGptAuthTokens>;
+export declare function buildChatGptAuthorizeUrl(redirectUri: string, pkce: PkceCodes, state: string): string;
+export {};
+//# sourceMappingURL=ChatGptAuth.d.ts.map

package/dist/auth/ChatGptAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ChatGptAuth.d.ts","sourceRoot":"","sources":["../../src/auth/ChatGptAuth.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB;2CACuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,SAAS;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAQD,wBAAsB,2BAA2B,CAC/C,KAAK,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAyC,GACjE,OAAO,CAAC,iBAAiB,CAAC,CAiB5B;AAED,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAcpG"}

package/dist/auth/ChatGptAuth.js

@@ -0,0 +1,215 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authorizeChatGptWithBrowser = authorizeChatGptWithBrowser;
+exports.buildChatGptAuthorizeUrl = buildChatGptAuthorizeUrl;
+const crypto_1 = require("crypto");
+const http_1 = require("http");
+const child_process_1 = require("child_process");
+const core_1 = require("@marifold/core");
+const CHATGPT_AUTH_ISSUER = 'https://auth.openai.com';
+const CHATGPT_OAUTH_CLIENT_ID = 'app_EMoamEEZ73f0CkXaXp7hrann';
+const CHATGPT_OAUTH_SCOPE = 'openid profile email offline_access api.connectors.read api.connectors.invoke';
+const CHATGPT_OAUTH_PORTS = [1455, 1457];
+const CHATGPT_CALLBACK_PATH = '/auth/callback';
+async function authorizeChatGptWithBrowser(write = text => process.stdout.write(text)) {
+    const pkce = generatePkce();
+    const state = base64Url((0, crypto_1.randomBytes)(32));
+    const callback = await startCallbackServer(state);
+    const authUrl = buildChatGptAuthorizeUrl(callback.redirectUri, pkce, state);
+    try {
+        openBrowser(authUrl);
+        write('Open this URL in your browser to sign in with ChatGPT:\n');
+        write(`${authUrl}\n`);
+        write('Waiting for the browser redirect...\n');
+        const code = await callback.waitForCode();
+        write('Received the authorization code — exchanging tokens with OpenAI...\n');
+        return await exchangeChatGptCodeForTokens(code, callback.redirectUri, pkce);
+    }
+    finally {
+        await callback.close();
+    }
+}
+function buildChatGptAuthorizeUrl(redirectUri, pkce, state) {
+    const params = new URLSearchParams({
+        response_type: 'code',
+        client_id: CHATGPT_OAUTH_CLIENT_ID,
+        redirect_uri: redirectUri,
+        scope: CHATGPT_OAUTH_SCOPE,
+        code_challenge: pkce.codeChallenge,
+        code_challenge_method: 'S256',
+        id_token_add_organizations: 'true',
+        codex_cli_simplified_flow: 'true',
+        state,
+        originator: 'marifold_cli',
+    });
+    return `${CHATGPT_AUTH_ISSUER}/oauth/authorize?${params.toString()}`;
+}
+async function exchangeChatGptCodeForTokens(code, redirectUri, pkce) {
+    const data = await postForm(`${CHATGPT_AUTH_ISSUER}/oauth/token`, {
+        grant_type: 'authorization_code',
+        code,
+        redirect_uri: redirectUri,
+        client_id: CHATGPT_OAUTH_CLIENT_ID,
+        code_verifier: pkce.codeVerifier,
+    }, 'ChatGPT token exchange failed');
+    const accessToken = stringField(data.access_token);
+    const refreshToken = stringField(data.refresh_token);
+    if (!accessToken || !refreshToken) {
+        throw new Error('ChatGPT token exchange response did not include access and refresh tokens.');
+    }
+    const idToken = stringField(data.id_token);
+    const expiresIn = numberField(data.expires_in);
+    return {
+        accessToken,
+        refreshToken,
+        // Subscription (ChatGPT plan) accounts have no platform organization, so we
+        // use the access token directly against the Codex backend rather than
+        // exchanging the id_token for a platform API key. The account id from the
+        // id_token is required as the `chatgpt-account-id` request header.
+        accountId: idToken ? (0, core_1.accountIdFromIdToken)(idToken) : undefined,
+        idToken,
+        expiresAt: expiresIn !== undefined ? Math.floor(Date.now() / 1000) + expiresIn : undefined,
+    };
+}
+async function postForm(url, data, label) {
+    // Node's fetch ignores HTTPS_PROXY by default; honor it for this external call
+    // (OpenAI's token endpoint) so the exchange works behind a proxy like the browser.
+    const init = {
+        method: 'POST',
+        headers: {
+            Accept: 'application/json',
+            'Content-Type': 'application/x-www-form-urlencoded',
+        },
+        body: new URLSearchParams(data),
+        // Generous ceiling: the OAuth token endpoint can be slow through a proxy.
+        signal: AbortSignal.timeout(60000),
+    };
+    const dispatcher = (0, core_1.proxyDispatcher)();
+    if (dispatcher)
+        init.dispatcher = dispatcher;
+    const response = await fetch(url, init).catch(error => {
+        throw new Error(`${label}: ${stringifyError(error)}`);
+    });
+    if (!response.ok)
+        throw new Error(`${label}: HTTP ${response.status}: ${await response.text()}`);
+    return await response.json();
+}
+async function startCallbackServer(expectedState) {
+    let lastError;
+    for (const port of CHATGPT_OAUTH_PORTS) {
+        try {
+            return await listenOnPort(port, expectedState);
+        }
+        catch (error) {
+            lastError = error instanceof Error ? error : new Error(String(error));
+        }
+    }
+    throw new Error(`Could not start local OAuth callback server on ports 1455 or 1457${lastError ? `: ${lastError.message}` : ''}`);
+}
+function listenOnPort(port, expectedState) {
+    return new Promise((resolve, reject) => {
+        let resolveCode;
+        let rejectCode;
+        const codePromise = new Promise((codeResolve, codeReject) => {
+            resolveCode = codeResolve;
+            rejectCode = codeReject;
+        });
+        const server = (0, http_1.createServer)((request, response) => {
+            const requestUrl = new URL(request.url ?? '/', `http://localhost:${port}`);
+            if (requestUrl.pathname !== CHATGPT_CALLBACK_PATH) {
+                response.writeHead(404);
+                response.end('Not Found');
+                return;
+            }
+            const state = requestUrl.searchParams.get('state') ?? '';
+            if (state !== expectedState) {
+                respond(response, 'Sign-in failed: state mismatch.', 400);
+                rejectCode?.(new Error('OAuth callback state mismatch.'));
+                return;
+            }
+            const error = requestUrl.searchParams.get('error');
+            if (error) {
+                const description = requestUrl.searchParams.get('error_description') ?? error;
+                respond(response, `Sign-in failed: ${description}`, 400);
+                rejectCode?.(new Error(description));
+                return;
+            }
+            const code = requestUrl.searchParams.get('code');
+            if (!code) {
+                respond(response, 'Sign-in failed: missing authorization code.', 400);
+                rejectCode?.(new Error('OAuth callback did not include an authorization code.'));
+                return;
+            }
+            respond(response, 'Sign-in complete. You can close this window and return to Marifold.');
+            resolveCode?.(code);
+        });
+        server.once('error', error => reject(error));
+        server.listen(port, '127.0.0.1', () => {
+            resolve({
+                redirectUri: `http://localhost:${port}${CHATGPT_CALLBACK_PATH}`,
+                waitForCode: () => withTimeout(codePromise, 300000, 'ChatGPT sign-in timed out before the callback was received.'),
+                close: () => closeServer(server),
+            });
+        });
+    });
+}
+function respond(response, message, status = 200) {
+    const escaped = message.replace(/[&<>"']/g, char => ({
+        '&': '&amp;',
+        '<': '&lt;',
+        '>': '&gt;',
+        '"': '&quot;',
+        "'": '&#39;',
+    }[char] ?? char));
+    const body = `<!doctype html><html><head><title>marifold auth</title></head><body><p>${escaped}</p></body></html>`;
+    response.writeHead(status, {
+        'Content-Type': 'text/html; charset=utf-8',
+        'Content-Length': String(Buffer.byteLength(body)),
+    });
+    response.end(body);
+}
+function closeServer(server) {
+    return new Promise(resolve => {
+        server.close(() => resolve());
+        // The browser keeps the success-page connection alive, which blocks
+        // server.close() from ever completing; force lingering sockets closed so
+        // the sign-in returns promptly instead of hanging after the token exchange.
+        server.closeAllConnections();
+    });
+}
+function withTimeout(promise, ms, message) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => reject(new Error(message)), ms);
+        promise.then(value => {
+            clearTimeout(timer);
+            resolve(value);
+        }, error => {
+            clearTimeout(timer);
+            reject(error);
+        });
+    });
+}
+function generatePkce() {
+    const codeVerifier = base64Url((0, crypto_1.randomBytes)(32));
+    const codeChallenge = base64Url((0, crypto_1.createHash)('sha256').update(codeVerifier).digest());
+    return { codeVerifier, codeChallenge };
+}
+function base64Url(bytes) {
+    return bytes.toString('base64url');
+}
+function openBrowser(url) {
+    const command = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'cmd' : 'xdg-open';
+    const args = process.platform === 'win32' ? ['/c', 'start', '', url] : [url];
+    const child = (0, child_process_1.spawn)(command, args, { stdio: 'ignore', detached: true });
+    child.unref();
+}
+function stringField(value) {
+    return typeof value === 'string' ? value : undefined;
+}
+function numberField(value) {
+    return typeof value === 'number' && Number.isFinite(value) ? value : undefined;
+}
+function stringifyError(error) {
+    return error instanceof Error ? `${error.name}: ${error.message}` : String(error);
+}
+//# sourceMappingURL=ChatGptAuth.js.map

package/dist/auth/ChatGptAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ChatGptAuth.js","sourceRoot":"","sources":["../../src/auth/ChatGptAuth.ts"],"names":[],"mappings":";;;;AAAA,mCAAiD;AACjD,+BAA4C;AAC5C,iDAAsC;AACtC,yCAAuE;AAiBvE,MAAM,mBAAmB,GAAG,yBAAyB,CAAC;AACtD,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;AAC/D,MAAM,mBAAmB,GAAG,+EAA+E,CAAC;AAC5G,MAAM,mBAAmB,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACzC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAExC,KAAK,sCACV,KAAK,GAA2B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IAElE,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,wBAAwB,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAE5E,IAAI,CAAC;QACH,WAAW,CAAC,OAAO,CAAC,CAAC;QACrB,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAClE,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;QACtB,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC1C,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC9E,OAAO,MAAM,4BAA4B,CAAC,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC9E,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED,kCAAyC,WAAmB,EAAE,IAAe,EAAE,KAAa;IAC1F,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,aAAa,EAAE,MAAM;QACrB,SAAS,EAAE,uBAAuB;QAClC,YAAY,EAAE,WAAW;QACzB,KAAK,EAAE,mBAAmB;QAC1B,cAAc,EAAE,IAAI,CAAC,aAAa;QAClC,qBAAqB,EAAE,MAAM;QAC7B,0BAA0B,EAAE,MAAM;QAClC,yBAAyB,EAAE,MAAM;QACjC,KAAK;QACL,UAAU,EAAE,cAAc;KAC3B,CAAC,CAAC;IACH,OAAO,GAAG,mBAAmB,oBAAoB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,IAAY,EACZ,WAAmB,EACnB,IAAe;IAEf,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,mBAAmB,cAAc,EAAE;QAChE,UAAU,EAAE,oBAAoB;QAChC,IAAI;QACJ,YAAY,EAAE,WAAW;QACzB,SAAS,EAAE,uBAAuB;QAClC,aAAa,EAAE,IAAI,CAAC,YAAY;KACjC,EAAE,+BAA+B,CAAC,CAAC;IAEpC,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrD,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAE/C,OAAO;QACL,WAAW;QACX,YAAY;QACZ,4EAA4E;QAC5E,sEAAsE;QACtE,0EAA0E;QAC1E,mEAAmE;QACnE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,IAAA,2BAAoB,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAC9D,OAAO;QACP,SAAS,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS;KAC3F,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,IAA4B,EAAE,KAAa;IAC9E,+EAA+E;IAC/E,mFAAmF;IACnF,MAAM,IAAI,GAA4B;QACpC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC;QAC/B,0EAA0E;QAC1E,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;KACnC,CAAC;IACF,MAAM,UAAU,GAAG,IAAA,sBAAe,GAAE,CAAC;IACrC,IAAI,UAAU;QAAE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAmB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QACnE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,UAAU,QAAQ,CAAC,MAAM,KAAK,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACjG,OAAO,MAAM,QAAQ,CAAC,IAAI,EAA6B,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,aAAqB;IAKtD,IAAI,SAA4B,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,OAAO,MAAM,YAAY,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,oEAAoE,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnI,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,aAAqB;IAKvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,WAAiD,CAAC;QACtD,IAAI,UAAgD,CAAC;QACrD,MAAM,WAAW,GAAG,IAAI,OAAO,CAAS,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE;YAClE,WAAW,GAAG,WAAW,CAAC;YAC1B,UAAU,GAAG,UAAU,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YAChD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAC3E,IAAI,UAAU,CAAC,QAAQ,KAAK,qBAAqB,EAAE,CAAC;gBAClD,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACxB,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAC1B,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACzD,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;gBAC5B,OAAO,CAAC,QAAQ,EAAE,iCAAiC,EAAE,GAAG,CAAC,CAAC;gBAC1D,UAAU,EAAE,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACnD,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,WAAW,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK,CAAC;gBAC9E,OAAO,CAAC,QAAQ,EAAE,mBAAmB,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;gBACzD,UAAU,EAAE,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,QAAQ,EAAE,6CAA6C,EAAE,GAAG,CAAC,CAAC;gBACtE,UAAU,EAAE,CAAC,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC,CAAC;gBACjF,OAAO;YACT,CAAC;YAED,OAAO,CAAC,QAAQ,EAAE,qEAAqE,CAAC,CAAC;YACzF,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACpC,OAAO,CAAC;gBACN,WAAW,EAAE,oBAAoB,IAAI,GAAG,qBAAqB,EAAE;gBAC/D,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,6DAA6D,CAAC;gBAClH,KAAK,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;aACjC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,QAAgH,EAAE,OAAe,EAAE,MAAM,GAAG,GAAG;IAC9J,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACnD,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE,OAAO;KACb,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAClB,MAAM,IAAI,GAAG,0EAA0E,OAAO,oBAAoB,CAAC;IACnH,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QACzB,cAAc,EAAE,0BAA0B;QAC1C,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;KAClD,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QAC3B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9B,oEAAoE;QACpE,yEAAyE;QACzE,4EAA4E;QAC5E,MAAM,CAAC,mBAAmB,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAI,OAAmB,EAAE,EAAU,EAAE,OAAe;IACtE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,EAAE;YACN,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,EACD,KAAK,CAAC,EAAE;YACN,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,YAAY,GAAG,SAAS,CAAC,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,SAAS,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACpF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;IAC3G,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC"}

package/dist/auth/GitHubCopilotAuth.d.ts

@@ -0,0 +1,10 @@
+import { exchangeGitHubTokenForCopilotToken } from '@marifold/core';
+export { exchangeGitHubTokenForCopilotToken };
+export declare function looksLikeCopilotIdeToken(token: string): boolean;
+export declare function authorizeGitHubCopilotWithDevice(write?: (text: string) => void): Promise<{
+    apiKey: string;
+    baseUrl: string;
+    oauthToken: string;
+    apiKeyExpiresAt?: number;
+}>;
+//# sourceMappingURL=GitHubCopilotAuth.d.ts.map

package/dist/auth/GitHubCopilotAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitHubCopilotAuth.d.ts","sourceRoot":"","sources":["../../src/auth/GitHubCopilotAuth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kCAAkC,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,kCAAkC,EAAE,CAAC;AAK9C,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,wBAAsB,gCAAgC,CACpD,KAAK,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAyC,GACjE,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAe5F"}

package/dist/auth/GitHubCopilotAuth.js

@@ -0,0 +1,118 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.exchangeGitHubTokenForCopilotToken = void 0;
+exports.looksLikeCopilotIdeToken = looksLikeCopilotIdeToken;
+exports.authorizeGitHubCopilotWithDevice = authorizeGitHubCopilotWithDevice;
+const core_1 = require("@marifold/core");
+Object.defineProperty(exports, "exchangeGitHubTokenForCopilotToken", { enumerable: true, get: function () { return core_1.exchangeGitHubTokenForCopilotToken; } });
+const GITHUB_COPILOT_CLIENT_ID = 'Iv1.b507a08c87ecfe98';
+const GITHUB_COPILOT_SCOPE = 'read:user';
+function looksLikeCopilotIdeToken(token) {
+    return token.startsWith('tid=');
+}
+async function authorizeGitHubCopilotWithDevice(write = text => process.stdout.write(text)) {
+    const device = await startGitHubCopilotDeviceFlow();
+    write('GitHub Copilot OAuth\n');
+    write(`Open: ${device.verificationUri}\n`);
+    write(`Enter code: ${device.userCode}\n`);
+    write('Waiting for authorization...\n');
+    const githubToken = await pollGitHubCopilotDeviceFlow(device.deviceCode, device.interval, device.expiresIn);
+    const copilot = await (0, core_1.exchangeGitHubTokenForCopilotToken)(githubToken);
+    return {
+        apiKey: copilot.token,
+        baseUrl: copilot.baseUrl,
+        oauthToken: githubToken,
+        apiKeyExpiresAt: copilot.expiresAt,
+    };
+}
+async function startGitHubCopilotDeviceFlow() {
+    const response = await fetch('https://github.com/login/device/code', {
+        method: 'POST',
+        headers: {
+            Accept: 'application/json',
+            'Content-Type': 'application/x-www-form-urlencoded',
+            'User-Agent': 'marifold',
+        },
+        body: new URLSearchParams({
+            client_id: GITHUB_COPILOT_CLIENT_ID,
+            scope: GITHUB_COPILOT_SCOPE,
+        }),
+        signal: AbortSignal.timeout(10000),
+    }).catch(error => {
+        throw new Error(`Could not start GitHub device flow: ${stringifyError(error)}`);
+    });
+    if (!response.ok)
+        throw new Error(`GitHub device flow failed: HTTP ${response.status}: ${await response.text()}`);
+    const data = await response.json();
+    const deviceCode = requiredString(data.device_code, 'device_code');
+    const userCode = requiredString(data.user_code, 'user_code');
+    const verificationUri = requiredString(data.verification_uri, 'verification_uri');
+    return {
+        deviceCode,
+        userCode,
+        verificationUri,
+        expiresIn: numberField(data.expires_in) ?? 900,
+        interval: numberField(data.interval) ?? 5,
+    };
+}
+async function pollGitHubCopilotDeviceFlow(deviceCode, interval, expiresIn) {
+    const deadline = Date.now() + expiresIn * 1000;
+    let pollInterval = Math.max(interval, 1);
+    while (Date.now() < deadline) {
+        await delay(pollInterval * 1000);
+        const response = await fetch('https://github.com/login/oauth/access_token', {
+            method: 'POST',
+            headers: {
+                Accept: 'application/json',
+                'Content-Type': 'application/x-www-form-urlencoded',
+                'User-Agent': 'marifold',
+            },
+            body: new URLSearchParams({
+                client_id: GITHUB_COPILOT_CLIENT_ID,
+                device_code: deviceCode,
+                grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
+            }),
+            signal: AbortSignal.timeout(10000),
+        }).catch(error => {
+            throw new Error(`Could not poll GitHub device flow: ${stringifyError(error)}`);
+        });
+        if (!response.ok)
+            throw new Error(`GitHub device polling failed: HTTP ${response.status}: ${await response.text()}`);
+        const data = await response.json();
+        const token = stringField(data.access_token);
+        if (token)
+            return token;
+        const error = stringField(data.error);
+        if (error === 'authorization_pending')
+            continue;
+        if (error === 'slow_down') {
+            pollInterval += 5;
+            continue;
+        }
+        if (error === 'expired_token')
+            throw new Error('The device code expired. Start again.');
+        if (error === 'access_denied')
+            throw new Error('Authorization was denied.');
+        throw new Error(stringField(data.error_description) ?? error ?? 'Authorization failed.');
+    }
+    throw new Error('The device code expired. Start again.');
+}
+function requiredString(value, label) {
+    const parsed = stringField(value);
+    if (!parsed)
+        throw new Error(`GitHub device flow response missing '${label}'.`);
+    return parsed;
+}
+function stringField(value) {
+    return typeof value === 'string' ? value : undefined;
+}
+function numberField(value) {
+    return typeof value === 'number' && Number.isFinite(value) ? value : undefined;
+}
+function delay(ms) {
+    return new Promise(resolve => setTimeout(resolve, ms));
+}
+function stringifyError(error) {
+    return error instanceof Error ? `${error.name}: ${error.message}` : String(error);
+}
+//# sourceMappingURL=GitHubCopilotAuth.js.map

package/dist/auth/GitHubCopilotAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitHubCopilotAuth.js","sourceRoot":"","sources":["../../src/auth/GitHubCopilotAuth.ts"],"names":[],"mappings":";;;;;AAAA,yCAAoE;mHAA3D,yCAAkC;AAI3C,MAAM,wBAAwB,GAAG,sBAAsB,CAAC;AACxD,MAAM,oBAAoB,GAAG,WAAW,CAAC;AAEzC,kCAAyC,KAAa;IACpD,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAEM,KAAK,2CACV,KAAK,GAA2B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IAElE,MAAM,MAAM,GAAG,MAAM,4BAA4B,EAAE,CAAC;IACpD,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAChC,KAAK,CAAC,SAAS,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC;IAC3C,KAAK,CAAC,eAAe,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;IAC1C,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAExC,MAAM,WAAW,GAAG,MAAM,2BAA2B,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5G,MAAM,OAAO,GAAG,MAAM,IAAA,yCAAkC,EAAC,WAAW,CAAC,CAAC;IACtE,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,KAAK;QACrB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,WAAW;QACvB,eAAe,EAAE,OAAO,CAAC,SAAS;KACnC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,4BAA4B;IAOzC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,sCAAsC,EAAE;QACnE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,mCAAmC;YACnD,YAAY,EAAE,UAAU;SACzB;QACD,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,SAAS,EAAE,wBAAwB;YACnC,KAAK,EAAE,oBAAoB;SAC5B,CAAC;QACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;KACnC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QACf,MAAM,IAAI,KAAK,CAAC,uCAAuC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,CAAC,MAAM,KAAK,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA6B,CAAC;IAC9D,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,cAAc,CAAC,IAAI,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAElF,OAAO;QACL,UAAU;QACV,QAAQ;QACR,eAAe;QACf,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG;QAC9C,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,UAAkB,EAAE,QAAgB,EAAE,SAAiB;IAChG,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC;IAC/C,IAAI,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAEzC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,6CAA6C,EAAE;YAC1E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,mCAAmC;gBACnD,YAAY,EAAE,UAAU;aACzB;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,SAAS,EAAE,wBAAwB;gBACnC,WAAW,EAAE,UAAU;gBACvB,UAAU,EAAE,8CAA8C;aAC3D,CAAC;YACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,sCAAsC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,QAAQ,CAAC,MAAM,KAAK,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA6B,CAAC;QAC9D,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QAExB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,uBAAuB;YAAE,SAAS;QAChD,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC1B,YAAY,IAAI,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACxF,IAAI,KAAK,KAAK,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,IAAI,uBAAuB,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,KAAK,IAAI,CAAC,CAAC;IAChF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC"}

package/dist/auth/XaiAuth.d.ts

@@ -0,0 +1,27 @@
+export interface XaiAuthTokens {
+    /** OAuth access token — used directly as the api.x.ai Bearer credential. */
+    accessToken: string;
+    refreshToken: string;
+    expiresAt?: number;
+}
+export interface XaiAuthOptions {
+    /** Explicit provider proxy. Falls back to HTTP(S)_PROXY when omitted. */
+    proxy?: string;
+}
+interface PkceCodes {
+    codeVerifier: string;
+    codeChallenge: string;
+}
+/** Reads a line the user pastes back (the code xAI displays, or the full
+ * redirect URL). Returns undefined/empty to fall back to the loopback redirect. */
+export type ReadPastedCode = (prompt: string) => Promise<string | undefined>;
+export declare function authorizeXaiWithBrowser(write?: (text: string) => void, readPastedCode?: ReadPastedCode, options?: XaiAuthOptions): Promise<XaiAuthTokens>;
+/**
+ * Extract the authorization code from whatever the user pastes: the full
+ * `http://127.0.0.1:56121/callback?code=…&state=…` redirect, a bare
+ * `code=…&state=…` querystring, or just the code shown on xAI's page.
+ */
+export declare function extractPastedCode(input: string, expectedState: string): string;
+export declare function buildXaiAuthorizeUrl(redirectUri: string, pkce: PkceCodes, state: string, nonce: string): string;
+export {};
+//# sourceMappingURL=XaiAuth.d.ts.map

package/dist/auth/XaiAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"XaiAuth.d.ts","sourceRoot":"","sources":["../../src/auth/XaiAuth.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,aAAa;IAC5B,4EAA4E;IAC5E,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,SAAS;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAcD;mFACmF;AACnF,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAE7E,wBAAsB,uBAAuB,CAC3C,KAAK,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAyC,EAClE,cAAc,CAAC,EAAE,cAAc,EAC/B,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,aAAa,CAAC,CAqCxB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAoB9E;AAED,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAc/G"}