patchwork-os 1.2.0-beta.3.canary.887 → 1.2.0-beta.3.canary.889

package/dist/claudeAuthHttp.d.ts

@@ -1,41 +1,33 @@
 /**
- * Claude Code subscription OAuth 2.0 + PKCE flow.
- *
- * Implements the three endpoints the dashboard settings "Connect Claude" UX
- * expects on the bridge:
+ * Claude sign-in relay.
  *
  *   POST /auth/claude/start    → { sessionId, url }
- *   POST /auth/claude/complete → { token }
- *   POST /auth/claude/cancel   → { ok: true }
+ *   POST /auth/claude/complete → { ok, loggedIn, authMethod }   body { sessionId, code }
+ *   POST /auth/claude/cancel   → { ok: true }                   body { sessionId? }
+ *   GET  /auth/claude/status   → { loggedIn, authMethod }
+ *   POST /auth/claude/logout   → { ok: true }
  *
- * Flow:
- *   1. start  — generate PKCE verifier/challenge, build the claude.ai auth URL,
- *               store the verifier in an in-memory session map, return the URL.
- *   2. User opens the URL, signs in, and copies the authorization code shown on
- *               https://platform.claude.com/oauth/code/callback.
- *   3. complete — exchange the code + verifier for an access token at
- *               https://api.anthropic.com/v1/oauth/token.  Return the token.
- *   4. Dashboard POSTs the token to /api/auth/anthropic-key → control-plane
- *               stores it encrypted and re-provisions the container with
- *               CLAUDE_CODE_OAUTH_TOKEN=<token> so the subprocess driver works.
- */
-import type { IncomingMessage, ServerResponse } from "node:http";
-/**
- * Turn whatever the user pasted into `{ code, state }`.
+ * Sign-in is performed by the UNMODIFIED Claude Code CLI (`claude auth login`),
+ * which talks to Anthropic and stores its own login where Claude Code always
+ * keeps it. This module only relays two things: the sign-in link the CLI
+ * prints (out to the person) and the code the person pastes (into the CLI's
+ * stdin). It never sees, stores, logs or returns a Claude credential.
  *
- * Anthropic's callback page renders the value as `<code>#<state>`, and users
- * variously paste that verbatim, paste just the code, or paste the entire
- * callback URL out of the address bar. All three must work.
+ * Why: Anthropic does not permit applications to run their own Claude.ai
+ * login, or to collect, store or intermediate Claude.ai credentials; sign-in
+ * must complete through Anthropic's own flow. The previous implementation
+ * ran its own OAuth exchange and returned the access token (and dropped the
+ * refresh token, so the login also expired within hours).
  *
- * `state` matters: /v1/oauth/token rejects a body without it as
- * `invalid_request_error / "Invalid request format"` — verified against the
- * live endpoint 2026-08-12. Sending only `code` failed for every user, which
- * is why the flow never worked regardless of what was pasted.
+ * The binary is `PATCHWORK_CLAUDE_BINARY` or `claude` on PATH, run with the
+ * bridge's HOME / CLAUDE_CONFIG_DIR so the login lands where every later
+ * `claude` invocation by this bridge will find it.
  */
-export declare function parsePastedAuthCode(raw: string): {
-    code: string;
-    state?: string;
-};
+import type { IncomingMessage, ServerResponse } from "node:http";
+/** Test seam: drop any in-flight session. */
+export declare function _resetClaudeLoginForTesting(): void;
 export declare function handleClaudeAuthStart(_req: IncomingMessage, res: ServerResponse): Promise<void>;
 export declare function handleClaudeAuthComplete(req: IncomingMessage, res: ServerResponse): Promise<void>;
 export declare function handleClaudeAuthCancel(req: IncomingMessage, res: ServerResponse): Promise<void>;
+export declare function handleClaudeAuthStatus(_req: IncomingMessage, res: ServerResponse): Promise<void>;
+export declare function handleClaudeAuthLogout(_req: IncomingMessage, res: ServerResponse): Promise<void>;

package/dist/claudeAuthHttp.js

@@ -1,108 +1,131 @@
 /**
- * Claude Code subscription OAuth 2.0 + PKCE flow.
- *
- * Implements the three endpoints the dashboard settings "Connect Claude" UX
- * expects on the bridge:
+ * Claude sign-in relay.
  *
  *   POST /auth/claude/start    → { sessionId, url }
- *   POST /auth/claude/complete → { token }
- *   POST /auth/claude/cancel   → { ok: true }
+ *   POST /auth/claude/complete → { ok, loggedIn, authMethod }   body { sessionId, code }
+ *   POST /auth/claude/cancel   → { ok: true }                   body { sessionId? }
+ *   GET  /auth/claude/status   → { loggedIn, authMethod }
+ *   POST /auth/claude/logout   → { ok: true }
+ *
+ * Sign-in is performed by the UNMODIFIED Claude Code CLI (`claude auth login`),
+ * which talks to Anthropic and stores its own login where Claude Code always
+ * keeps it. This module only relays two things: the sign-in link the CLI
+ * prints (out to the person) and the code the person pastes (into the CLI's
+ * stdin). It never sees, stores, logs or returns a Claude credential.
  *
- * Flow:
- *   1. start  — generate PKCE verifier/challenge, build the claude.ai auth URL,
- *               store the verifier in an in-memory session map, return the URL.
- *   2. User opens the URL, signs in, and copies the authorization code shown on
- *               https://platform.claude.com/oauth/code/callback.
- *   3. complete — exchange the code + verifier for an access token at
- *               https://api.anthropic.com/v1/oauth/token.  Return the token.
- *   4. Dashboard POSTs the token to /api/auth/anthropic-key → control-plane
- *               stores it encrypted and re-provisions the container with
- *               CLAUDE_CODE_OAUTH_TOKEN=<token> so the subprocess driver works.
+ * Why: Anthropic does not permit applications to run their own Claude.ai
+ * login, or to collect, store or intermediate Claude.ai credentials; sign-in
+ * must complete through Anthropic's own flow. The previous implementation
+ * ran its own OAuth exchange and returned the access token (and dropped the
+ * refresh token, so the login also expired within hours).
+ *
+ * The binary is `PATCHWORK_CLAUDE_BINARY` or `claude` on PATH, run with the
+ * bridge's HOME / CLAUDE_CONFIG_DIR so the login lands where every later
+ * `claude` invocation by this bridge will find it.
  */
-import { createHash, randomBytes } from "node:crypto";
-// ---------------------------------------------------------------------------
-// Constants (extracted from the claude binary via strings analysis)
-// ---------------------------------------------------------------------------
-// Claude Code's public OAuth client id. It must be a UUID: claude.ai's
-// /oauth/authorize rejects a non-UUID client_id ("Input should be a valid
-// UUID") and renders an "OAuth Request Failed" page, so the client-metadata
-// URL that used to live here made the flow unreachable before the user could
-// even approve. Public by design — an OAuth public client id is an
-// identifier, not a secret; PKCE is what protects the exchange.
-const CLAUDE_OAUTH_CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
-const CLAUDE_OAUTH_AUTH_URL = "https://claude.com/cai/oauth/authorize";
-const CLAUDE_OAUTH_TOKEN_URL = "https://api.anthropic.com/v1/oauth/token";
-const CLAUDE_OAUTH_REDIRECT_URI = "https://platform.claude.com/oauth/code/callback";
-const CLAUDE_OAUTH_SCOPES = "user:inference user:profile org:create_api_key";
-// Sessions expire after 10 minutes — long enough for a user to complete the
-// browser flow, short enough not to accumulate stale entries.
+import { spawn } from "node:child_process";
+import { randomBytes } from "node:crypto";
+import { ensureCmdShim } from "./winShim.js";
+const URL_TIMEOUT_MS = 20_000;
+const COMPLETE_TIMEOUT_MS = 30_000;
+const STATUS_TIMEOUT_MS = 15_000;
 const SESSION_TTL_MS = 10 * 60 * 1000;
-// http-routes-4: hard ceiling on the in-memory session map. An authenticated
-// caller flooding POST /auth/claude/start faster than the 10-minute TTL expires
-// entries would otherwise grow the map without bound (memory-exhaustion DoS).
-// 500 concurrent in-flight OAuth flows is far more than any real deployment.
-const MAX_SESSIONS = 500;
-// Hard ceiling on the Anthropic token-exchange request (audit 2026-06-08 auth-1).
-const TOKEN_EXCHANGE_TIMEOUT_MS = 15_000;
-const sessions = new Map();
-function pruneExpiredSessions() {
-    const now = Date.now();
-    for (const [id, s] of sessions) {
-        if (now - s.createdAt > SESSION_TTL_MS)
-            sessions.delete(id);
+/** Anthropic's sign-in pages; any other URL the CLI prints is not relayed. */
+const SIGN_IN_URL_RE = /https:\/\/(?:claude\.com|claude\.ai)\/[^\s"'<>]+/;
+/** One sign-in at a time per bridge: a new start replaces any pending one. */
+let current = null;
+function claudeBinary() {
+    // npm installs `claude` as a `.cmd` shim on Windows, which spawn() cannot
+    // resolve from a bare name; same helper as the Claude subprocess driver.
+    return ensureCmdShim(process.env.PATCHWORK_CLAUDE_BINARY || "claude");
+}
+/** Only what Claude Code needs to find its own config and reach the network. */
+function childEnv() {
+    const keep = [
+        "HOME",
+        "PATH",
+        "USER",
+        "LANG",
+        "TMPDIR",
+        "CLAUDE_CONFIG_DIR",
+        "HTTPS_PROXY",
+        "HTTP_PROXY",
+        "NO_PROXY",
+        "SSL_CERT_FILE",
+        "NODE_EXTRA_CA_CERTS",
+    ];
+    const env = {};
+    for (const k of keep)
+        if (process.env[k] !== undefined)
+            env[k] = process.env[k];
+    // Never let a stray credential in the bridge's env decide which account
+    // Claude Code signs in as.
+    return env;
+}
+function endSession(s) {
+    if (!s)
+        return;
+    try {
+        s.child.stdin?.end();
     }
+    catch {
+        /* already closed */
+    }
+    if (s.child.exitCode === null)
+        s.child.kill("SIGTERM");
 }
-// ---------------------------------------------------------------------------
-// PKCE helpers
-// ---------------------------------------------------------------------------
-function generateCodeVerifier() {
-    return randomBytes(32).toString("base64url");
+/** Test seam: drop any in-flight session. */
+export function _resetClaudeLoginForTesting() {
+    endSession(current);
+    current = null;
 }
-function deriveCodeChallenge(verifier) {
-    return createHash("sha256").update(verifier).digest("base64url");
+function run(args, timeoutMs) {
+    return new Promise((resolve) => {
+        let stdout = "";
+        let settled = false;
+        const child = spawn(claudeBinary(), args, {
+            env: childEnv(),
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        const timer = setTimeout(() => {
+            child.kill("SIGTERM");
+        }, timeoutMs);
+        child.stdout?.on("data", (d) => {
+            stdout += d.toString("utf8");
+        });
+        child.on("error", (err) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolve({ code: null, stdout, spawnError: err.code ?? "spawn_failed" });
+        });
+        child.on("close", (code) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolve({ code, stdout });
+        });
+    });
 }
-// ---------------------------------------------------------------------------
-// Pasted-value normalisation
-// ---------------------------------------------------------------------------
-/**
- * Turn whatever the user pasted into `{ code, state }`.
- *
- * Anthropic's callback page renders the value as `<code>#<state>`, and users
- * variously paste that verbatim, paste just the code, or paste the entire
- * callback URL out of the address bar. All three must work.
- *
- * `state` matters: /v1/oauth/token rejects a body without it as
- * `invalid_request_error / "Invalid request format"` — verified against the
- * live endpoint 2026-08-12. Sending only `code` failed for every user, which
- * is why the flow never worked regardless of what was pasted.
- */
-export function parsePastedAuthCode(raw) {
-    const trimmed = raw.trim();
-    // Full callback URL — pull code/state out of the query string.
-    if (/^https?:\/\//i.test(trimmed)) {
-        try {
-            const url = new URL(trimmed);
-            const code = url.searchParams.get("code")?.trim();
-            const state = url.searchParams.get("state")?.trim();
-            if (code)
-                return { code, state: state || undefined };
-        }
-        catch {
-            // Not a parseable URL — fall through to the `#` handling below.
-        }
+async function readStatus() {
+    const r = await run(["auth", "status"], STATUS_TIMEOUT_MS);
+    if (r.spawnError)
+        return { error: "claude_not_installed" };
+    try {
+        const parsed = JSON.parse(r.stdout);
+        // Return only these two fields: the rest (e.g. email, organisation) is
+        // not this endpoint's business.
+        return {
+            loggedIn: parsed.loggedIn === true,
+            authMethod: typeof parsed.authMethod === "string" ? parsed.authMethod : "unknown",
+        };
     }
-    // `<code>#<state>` — the shape the callback page displays.
-    const hash = trimmed.indexOf("#");
-    if (hash !== -1) {
-        const code = trimmed.slice(0, hash).trim();
-        const state = trimmed.slice(hash + 1).trim();
-        return { code, state: state || undefined };
+    catch {
+        return { error: "status_unreadable" };
     }
-    return { code: trimmed };
 }
-// ---------------------------------------------------------------------------
-// Body reader (reuse the same pattern as the bridge's other POST handlers)
-// ---------------------------------------------------------------------------
 async function readBody(req) {
     return new Promise((resolve, reject) => {
         const chunks = [];
@@ -127,48 +150,83 @@ function jsonReply(res, status, body) {
     });
     res.end(payload);
 }
-// ---------------------------------------------------------------------------
-// POST /auth/claude/start
-// ---------------------------------------------------------------------------
+async function parseJson(req) {
+    try {
+        const raw = await readBody(req);
+        if (!raw.trim())
+            return {};
+        const v = JSON.parse(raw);
+        return v && typeof v === "object" && !Array.isArray(v)
+            ? v
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+// --- POST /auth/claude/start ----------------------------------------------
 export async function handleClaudeAuthStart(_req, res) {
-    pruneExpiredSessions();
-    // http-routes-4: reject new sessions once the (post-prune) map is at
-    // capacity so a flood of /start requests can't exhaust memory.
-    if (sessions.size >= MAX_SESSIONS) {
-        jsonReply(res, 503, {
-            error: "too_many_sessions",
-            detail: "Too many in-flight authorization sessions. Try again shortly.",
+    endSession(current);
+    current = null;
+    let child;
+    try {
+        child = spawn(claudeBinary(), ["auth", "login", "--claudeai"], {
+            env: childEnv(),
+            stdio: ["pipe", "pipe", "pipe"],
         });
+    }
+    catch {
+        jsonReply(res, 503, { error: "claude_not_installed" });
         return;
     }
-    const codeVerifier = generateCodeVerifier();
-    const codeChallenge = deriveCodeChallenge(codeVerifier);
-    const sessionId = randomBytes(16).toString("hex");
-    sessions.set(sessionId, { sessionId, codeVerifier, createdAt: Date.now() });
-    const params = new URLSearchParams({
-        client_id: CLAUDE_OAUTH_CLIENT_ID,
-        response_type: "code",
-        redirect_uri: CLAUDE_OAUTH_REDIRECT_URI,
-        scope: CLAUDE_OAUTH_SCOPES,
-        code_challenge: codeChallenge,
-        code_challenge_method: "S256",
-        state: sessionId,
+    const session = {
+        sessionId: randomBytes(16).toString("hex"),
+        child,
+        createdAt: Date.now(),
+        output: "",
+        exited: new Promise((resolve) => {
+            child.on("close", (code) => resolve(code));
+            child.on("error", () => resolve(null));
+        }),
+    };
+    const outcome = await new Promise((resolve) => {
+        const timer = setTimeout(() => {
+            resolve({ error: "sign_in_link_timeout", status: 504 });
+        }, URL_TIMEOUT_MS);
+        const onData = (d) => {
+            session.output += d.toString("utf8");
+            const m = SIGN_IN_URL_RE.exec(session.output);
+            if (m) {
+                clearTimeout(timer);
+                resolve({ url: m[0] });
+            }
+        };
+        child.stdout?.on("data", onData);
+        child.stderr?.on("data", onData);
+        child.on("error", (err) => {
+            clearTimeout(timer);
+            resolve({
+                error: err.code === "ENOENT" ? "claude_not_installed" : "spawn_failed",
+                status: 503,
+            });
+        });
+        child.on("close", () => {
+            clearTimeout(timer);
+            resolve({ error: "sign_in_exited_early", status: 502 });
+        });
     });
-    const url = `${CLAUDE_OAUTH_AUTH_URL}?${params.toString()}`;
-    jsonReply(res, 200, { sessionId, url });
+    if ("error" in outcome) {
+        endSession(session);
+        jsonReply(res, outcome.status, { error: outcome.error });
+        return;
+    }
+    current = session;
+    jsonReply(res, 200, { sessionId: session.sessionId, url: outcome.url });
 }
-// ---------------------------------------------------------------------------
-// POST /auth/claude/complete  { sessionId, code }
-// ---------------------------------------------------------------------------
+// --- POST /auth/claude/complete -------------------------------------------
 export async function handleClaudeAuthComplete(req, res) {
-    // http-routes-4: keep the session map tidy on the completion path too —
-    // start() was the only pruning site, so abandoned flows lingered.
-    pruneExpiredSessions();
-    let body;
-    try {
-        body = JSON.parse(await readBody(req));
-    }
-    catch {
+    const body = await parseJson(req);
+    if (!body) {
         jsonReply(res, 400, { error: "invalid_json" });
         return;
     }
@@ -182,97 +240,76 @@ export async function handleClaudeAuthComplete(req, res) {
         });
         return;
     }
-    const session = sessions.get(sessionId);
-    if (!session) {
+    const s = current;
+    if (!s ||
+        s.sessionId !== sessionId ||
+        Date.now() - s.createdAt > SESSION_TTL_MS ||
+        s.child.exitCode !== null) {
         jsonReply(res, 404, {
             error: "session_not_found",
-            detail: "Session expired or not found. Click 'Start over' to begin again.",
+            detail: "Sign-in expired or was replaced. Start again.",
         });
         return;
     }
-    if (Date.now() - session.createdAt > SESSION_TTL_MS) {
-        sessions.delete(sessionId);
-        jsonReply(res, 410, {
-            error: "session_expired",
-            detail: "Authorization session expired. Click 'Start over' to begin again.",
-        });
+    current = null;
+    // The code goes to Claude Code's stdin and nowhere else: not logged, not
+    // stored, not echoed back.
+    const outputBefore = s.output.length;
+    s.child.stdin?.write(`${code.trim()}\n`);
+    const exit = await Promise.race([
+        s.exited,
+        new Promise((r) => setTimeout(() => r("timeout"), COMPLETE_TIMEOUT_MS)),
+    ]);
+    endSession(s);
+    if (exit === "timeout") {
+        jsonReply(res, 504, { error: "sign_in_timeout" });
         return;
     }
-    // Exchange authorization code + PKCE verifier for an access token.
-    // Audit 2026-06-08 HIGH (auth-1): bound the fetch with an AbortController so a
-    // slow/hung Anthropic endpoint can't keep the HTTP connection + session open
-    // indefinitely. Map an abort to a 504 (distinct from a 502 network error).
-    // The pasted value may be `<code>#<state>`, a bare code, or the whole
-    // callback URL. Fall back to the session id for `state` — that is what we
-    // put in the authorize URL, so it round-trips correctly when the user pasted
-    // only the code half.
-    const { code: authCode, state: pastedState } = parsePastedAuthCode(code);
-    if (!authCode) {
-        jsonReply(res, 400, {
-            error: "missing_fields",
-            detail: "sessionId and code required",
-        });
+    const status = await readStatus();
+    if ("error" in status) {
+        jsonReply(res, 502, { error: status.error });
         return;
     }
-    const authState = pastedState ?? session.sessionId;
-    let tokenRes;
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), TOKEN_EXCHANGE_TIMEOUT_MS);
-    try {
-        tokenRes = await fetch(CLAUDE_OAUTH_TOKEN_URL, {
-            method: "POST",
-            headers: { "Content-Type": "application/x-www-form-urlencoded" },
-            body: new URLSearchParams({
-                grant_type: "authorization_code",
-                client_id: CLAUDE_OAUTH_CLIENT_ID,
-                code: authCode,
-                state: authState,
-                redirect_uri: CLAUDE_OAUTH_REDIRECT_URI,
-                code_verifier: session.codeVerifier,
-            }).toString(),
-            signal: controller.signal,
-        });
-    }
-    catch (err) {
-        const aborted = err instanceof Error &&
-            (err.name === "AbortError" || controller.signal.aborted);
-        jsonReply(res, aborted ? 504 : 502, {
-            error: aborted ? "token_exchange_timeout" : "token_exchange_failed",
-            detail: aborted
-                ? "Timed out contacting Anthropic. Please try again."
-                : `Network error contacting Anthropic: ${err instanceof Error ? err.message : String(err)}`,
-        });
-        return;
-    }
-    finally {
-        clearTimeout(timeout);
-    }
-    const tokenData = (await tokenRes.json().catch(() => ({})));
-    if (!tokenRes.ok || !tokenData.access_token) {
+    // The CLI prints "Invalid code" yet still exits 0, and an earlier login
+    // would make `status` look signed in, so neither the exit code nor status
+    // alone proves THIS code worked: also read what it printed after the code.
+    const reply = s.output.slice(outputBefore);
+    const rejected = /invalid|error|fail/i.test(reply);
+    if (exit !== 0 || rejected || !status.loggedIn) {
         jsonReply(res, 400, {
-            error: "token_exchange_rejected",
-            detail: tokenData.error_description ??
-                tokenData.error ??
-                `Anthropic returned ${tokenRes.status}. Make sure you pasted the correct authorization code.`,
+            error: "invalid_code",
+            detail: "Claude Code did not accept that code. Copy the whole code and try again.",
         });
         return;
     }
-    sessions.delete(sessionId);
-    jsonReply(res, 200, { token: tokenData.access_token });
+    jsonReply(res, 200, { ok: true, ...status });
 }
-// ---------------------------------------------------------------------------
-// POST /auth/claude/cancel  { sessionId? }
-// ---------------------------------------------------------------------------
+// --- POST /auth/claude/cancel ---------------------------------------------
 export async function handleClaudeAuthCancel(req, res) {
-    try {
-        const body = JSON.parse(await readBody(req));
-        if (typeof body.sessionId === "string")
-            sessions.delete(body.sessionId);
-    }
-    catch {
-        // Body parse failure is fine — we just won't delete a specific session.
+    const body = (await parseJson(req)) ?? {};
+    if (current &&
+        (body.sessionId === undefined || body.sessionId === current.sessionId)) {
+        endSession(current);
+        current = null;
     }
-    pruneExpiredSessions();
     jsonReply(res, 200, { ok: true });
 }
+// --- GET /auth/claude/status ----------------------------------------------
+export async function handleClaudeAuthStatus(_req, res) {
+    const status = await readStatus();
+    if ("error" in status) {
+        jsonReply(res, status.error === "claude_not_installed" ? 503 : 502, status);
+        return;
+    }
+    jsonReply(res, 200, status);
+}
+// --- POST /auth/claude/logout ---------------------------------------------
+export async function handleClaudeAuthLogout(_req, res) {
+    const r = await run(["auth", "logout"], STATUS_TIMEOUT_MS);
+    if (r.spawnError) {
+        jsonReply(res, 503, { error: "claude_not_installed" });
+        return;
+    }
+    jsonReply(res, r.code === 0 ? 200 : 502, { ok: r.code === 0 });
+}
 //# sourceMappingURL=claudeAuthHttp.js.map

package/dist/claudeAuthHttp.js.map

@@ -1 +1 @@
-{"version":3,"file":"claudeAuthHttp.js","sourceRoot":"","sources":["../src/claudeAuthHttp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAGtD,8EAA8E;AAC9E,oEAAoE;AACpE,8EAA8E;AAE9E,uEAAuE;AACvE,0EAA0E;AAC1E,4EAA4E;AAC5E,6EAA6E;AAC7E,mEAAmE;AACnE,gEAAgE;AAChE,MAAM,sBAAsB,GAAG,sCAAsC,CAAC;AACtE,MAAM,qBAAqB,GAAG,wCAAwC,CAAC;AACvE,MAAM,sBAAsB,GAAG,0CAA0C,CAAC;AAC1E,MAAM,yBAAyB,GAC7B,iDAAiD,CAAC;AACpD,MAAM,mBAAmB,GAAG,gDAAgD,CAAC;AAE7E,4EAA4E;AAC5E,8DAA8D;AAC9D,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,6EAA6E;AAC7E,gFAAgF;AAChF,8EAA8E;AAC9E,6EAA6E;AAC7E,MAAM,YAAY,GAAG,GAAG,CAAC;AAEzB,kFAAkF;AAClF,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAYzC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;AAEhD,SAAS,oBAAoB;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,cAAc;YAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,SAAS,oBAAoB;IAC3B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAI7C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAE3B,+DAA+D;IAC/D,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;YACpD,IAAI,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,SAAS,EAAE,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,SAAS,EAAE,CAAC;IAC7C,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAE9E,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IACnE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,kBAAkB;QAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;KAC7C,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAqB,EACrB,GAAmB;IAEnB,oBAAoB,EAAE,CAAC;IAEvB,qEAAqE;IACrE,+DAA+D;IAC/D,IAAI,QAAQ,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC;QAClC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,KAAK,EAAE,mBAAmB;YAC1B,MAAM,EAAE,+DAA+D;SACxE,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,aAAa,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElD,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAE5E,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,sBAAsB;QACjC,aAAa,EAAE,MAAM;QACrB,YAAY,EAAE,yBAAyB;QACvC,KAAK,EAAE,mBAAmB;QAC1B,cAAc,EAAE,aAAa;QAC7B,qBAAqB,EAAE,MAAM;QAC7B,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,GAAG,qBAAqB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC5D,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,8EAA8E;AAC9E,kDAAkD;AAClD,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAAoB,EACpB,GAAmB;IAEnB,wEAAwE;IACxE,kEAAkE;IAClE,oBAAoB,EAAE,CAAC;IAEvB,IAAI,IAA6C,CAAC;IAClD,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAgB,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACjC,IACE,OAAO,SAAS,KAAK,QAAQ;QAC7B,OAAO,IAAI,KAAK,QAAQ;QACxB,CAAC,IAAI,CAAC,IAAI,EAAE,EACZ,CAAC;QACD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,6BAA6B;SACtC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,KAAK,EAAE,mBAAmB;YAC1B,MAAM,EACJ,kEAAkE;SACrE,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,cAAc,EAAE,CAAC;QACpD,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3B,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,KAAK,EAAE,iBAAiB;YACxB,MAAM,EACJ,mEAAmE;SACtE,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,mEAAmE;IACnE,+EAA+E;IAC/E,6EAA6E;IAC7E,2EAA2E;IAC3E,sEAAsE;IACtE,0EAA0E;IAC1E,6EAA6E;IAC7E,sBAAsB;IACtB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACzE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,6BAA6B;SACtC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,IAAI,OAAO,CAAC,SAAS,CAAC;IAEnD,IAAI,QAAkB,CAAC;IACvB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CACxB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,yBAAyB,CAC1B,CAAC;IACF,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,sBAAsB,EAAE;YAC7C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,oBAAoB;gBAChC,SAAS,EAAE,sBAAsB;gBACjC,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,SAAS;gBAChB,YAAY,EAAE,yBAAyB;gBACvC,aAAa,EAAE,OAAO,CAAC,YAAY;aACpC,CAAC,CAAC,QAAQ,EAAE;YACb,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK;YACpB,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3D,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;YAClC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,uBAAuB;YACnE,MAAM,EAAE,OAAO;gBACb,CAAC,CAAC,mDAAmD;gBACrD,CAAC,CAAC,uCAAuC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SAC9F,CAAC,CAAC;QACH,OAAO;IACT,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAKzD,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;QAC5C,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,KAAK,EAAE,yBAAyB;YAChC,MAAM,EACJ,SAAS,CAAC,iBAAiB;gBAC3B,SAAS,CAAC,KAAK;gBACf,sBAAsB,QAAQ,CAAC,MAAM,wDAAwD;SAChG,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3B,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,8EAA8E;AAC9E,2CAA2C;AAC3C,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAoB,EACpB,GAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAA4B,CAAC;QACxE,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;YAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;IACD,oBAAoB,EAAE,CAAC;IACvB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AACpC,CAAC"}
+{"version":3,"file":"claudeAuthHttp.js","sourceRoot":"","sources":["../src/claudeAuthHttp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAqB,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACtC,8EAA8E;AAC9E,MAAM,cAAc,GAAG,kDAAkD,CAAC;AAU1E,8EAA8E;AAC9E,IAAI,OAAO,GAAwB,IAAI,CAAC;AAExC,SAAS,YAAY;IACnB,0EAA0E;IAC1E,yEAAyE;IACzE,OAAO,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,QAAQ,CAAC,CAAC;AACxE,CAAC;AAED,gFAAgF;AAChF,SAAS,QAAQ;IACf,MAAM,IAAI,GAAG;QACX,MAAM;QACN,MAAM;QACN,MAAM;QACN,MAAM;QACN,QAAQ;QACR,mBAAmB;QACnB,aAAa;QACb,YAAY;QACZ,UAAU;QACV,eAAe;QACf,qBAAqB;KACtB,CAAC;IACF,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,IAAI;QAClB,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5D,wEAAwE;IACxE,2BAA2B;IAC3B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,CAAsB;IACxC,IAAI,CAAC,CAAC;QAAE,OAAO;IACf,IAAI,CAAC;QACH,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;IACtB,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACzD,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,2BAA2B;IACzC,UAAU,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO,GAAG,IAAI,CAAC;AACjB,CAAC;AAED,SAAS,GAAG,CACV,IAAc,EACd,SAAiB;IAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE;YACxC,GAAG,EAAE,QAAQ,EAAE;YACf,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACrC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAC/C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAOD,KAAK,UAAU,UAAU;IACvB,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,UAAU;QAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAA4B,CAAC;QAC/D,uEAAuE;QACvE,gCAAgC;QAChC,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,IAAI;YAClC,UAAU,EACR,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;SACxE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IACxC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IACnE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,kBAAkB;QAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;KAC7C,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QACrC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YACpD,CAAC,CAAE,CAA6B;YAChC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,6EAA6E;AAE7E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAqB,EACrB,GAAmB;IAEnB,UAAU,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO,GAAG,IAAI,CAAC;IAEf,IAAI,KAAmB,CAAC;IACxB,IAAI,CAAC;QACH,KAAK,GAAG,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE;YAC7D,GAAG,EAAE,QAAQ,EAAE;YACf,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAiB;QAC5B,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC1C,KAAK;QACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC9B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC;KACH,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,IAAI,OAAO,CAE/B,CAAC,OAAO,EAAE,EAAE;QACZ,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,OAAO,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC,EAAE,cAAc,CAAC,CAAC;QACnB,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE;YAC3B,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,EAAE,CAAC;gBACN,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzB,CAAC;QACH,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAC/C,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC;gBACN,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,cAAc;gBACtE,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;QACvB,UAAU,CAAC,OAAO,CAAC,CAAC;QACpB,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IACD,OAAO,GAAG,OAAO,CAAC;IAClB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,6EAA6E;AAE7E,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAAoB,EACpB,GAAmB;IAEnB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACjC,IACE,OAAO,SAAS,KAAK,QAAQ;QAC7B,OAAO,IAAI,KAAK,QAAQ;QACxB,CAAC,IAAI,CAAC,IAAI,EAAE,EACZ,CAAC;QACD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,6BAA6B;SACtC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,CAAC,GAAG,OAAO,CAAC;IAClB,IACE,CAAC,CAAC;QACF,CAAC,CAAC,SAAS,KAAK,SAAS;QACzB,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS,GAAG,cAAc;QACzC,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,EACzB,CAAC;QACD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,KAAK,EAAE,mBAAmB;YAC1B,MAAM,EAAE,+CAA+C;SACxD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,OAAO,GAAG,IAAI,CAAC;IAEf,yEAAyE;IACzE,2BAA2B;IAC3B,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;IACrC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;QAC9B,CAAC,CAAC,MAAM;QACR,IAAI,OAAO,CAAY,CAAC,CAAC,EAAE,EAAE,CAC3B,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC,CACpD;KACF,CAAC,CAAC;IACH,UAAU,CAAC,CAAC,CAAC,CAAC;IACd,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QACtB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IACD,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,IAAI,KAAK,CAAC,IAAI,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC/C,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,KAAK,EAAE,cAAc;YACrB,MAAM,EACJ,0EAA0E;SAC7E,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,6EAA6E;AAE7E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAoB,EACpB,GAAmB;IAEnB,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,IACE,OAAO;QACP,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,EACtE,CAAC;QACD,UAAU,CAAC,OAAO,CAAC,CAAC;QACpB,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,6EAA6E;AAE7E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAqB,EACrB,GAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QACtB,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,KAAK,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5E,OAAO;IACT,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,6EAA6E;AAE7E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAqB,EACrB,GAAmB;IAEnB,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QACjB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;AACjE,CAAC"}