zelari-code 0.1.1 → 0.1.3

package/dist/cli/grokOAuth.js

@@ -1,35 +1,32 @@
 /**
- * grokOAuth — complete OAuth flow for xAI Grok / SuperGrok provider.
+ * grokOAuth — Device Authorization Grant (RFC 8628) flow for xAI Grok / SuperGrok.
  *
- * Implements PKCE OAuth2 (RFC 7636) flow with OpenID Connect discovery,
- * matching the pattern used by the reference `supergrok-oauth` client
- * (https://github.com/toptoppy/supergrok-oauth).
+ * xAI does NOT support the browser-redirect Authorization Code Grant for its
+ * public OAuth client (`response_type=code` returns "Only response_type=code
+ * is supported" against the device endpoint, and the redirect flow is not
+ * registered). Instead xAI exposes the Device Authorization Grant — the same
+ * "sign in on another device" pattern used by Netflix on TVs and GitHub CLI.
  *
- * 1. Fetch OpenID Connect discovery document from `{issuer}/.well-known/openid-configuration`
- * 2. Generate PKCE verifier + S256 challenge
- * 3. Build authorization URL with state, scope, code_challenge
- * 4. Start local OAuth callback server (port 56121, path /callback)
- * 5. Open the user's browser to the authorization URL
- * 6. Wait for the redirect callback to deliver the authorization code
- * 7. Verify state to prevent CSRF
- * 8. Exchange code for access token (with code_verifier) at the token endpoint
- * 9. Return { accessToken, expiresAt, refreshToken }
+ * Flow:
+ *   1. POST /oauth2/device/code  →  { device_code, user_code, verification_uri, ... }
+ *   2. Show the user: "Visit <verification_uri> and enter code <user_code>"
+ *   3. Poll POST /oauth2/token with grant_type=device_code until:
+ *        - access_token returned (success)
+ *        - "expired"/"denied" error
+ *        - timeout
+ *   4. Return { accessToken, expiresAt, refreshToken }
  *
- * The browser launcher is INJECTED so tests can verify URL construction
- * without spawning a real browser. The fetch implementation is also injected
- * so tests can mock the token exchange.
+ * Endpoints (xAI auth server):
+ *   - Device code:  https://auth.x.ai/oauth2/device/code
+ *   - Token:        https://auth.x.ai/oauth2/token
  *
  * Default config (override via env GROK_OAUTH_CLIENT_ID):
- *   - Issuer: https://auth.x.ai
  *   - Client ID: b1a00492-073a-47ea-816f-4c329264a828 (xAI public OAuth client)
  *   - Scope: openid profile email offline_access grok-cli:access api:access
- *   - Redirect: http://127.0.0.1:56121/callback
  *
+ * @see https://datatracker.ietf.org/doc/html/rfc8628
  * @see docs/plans/2026-06-29-anathema-coder-v2.md (Task 16.2)
  */
-import { startOAuthCallbackServer } from './oauthCallbackServer.js';
-import nodeCrypto from 'node:crypto';
-const { getRandomValues, createHash } = nodeCrypto;
 export class GrokOAuthError extends Error {
     code;
     constructor(message, code) {
@@ -40,12 +37,10 @@ export class GrokOAuthError extends Error {
 }
 /**
  * Default xAI OAuth client ID — public client registered for SuperGrok OAuth
- * (same as used by the reference supergrok-oauth Python client).
+ * (same as used by the reference supergrok-oauth Python client + Grok-CLI).
  */
 export const DEFAULT_GROK_OAUTH_CLIENT_ID = 'b1a00492-073a-47ea-816f-4c329264a828';
-/** Default OAuth issuer for xAI authentication server. */
-export const DEFAULT_GROK_OAUTH_ISSUER = 'https://auth.x.ai';
-/** Default OAuth scopes for full SuperGrok access (matches supergrok-oauth config). */
+/** Default OAuth scopes for full SuperGrok access. */
 export const DEFAULT_GROK_OAUTH_SCOPES = [
     'openid',
     'profile',
@@ -54,123 +49,85 @@ export const DEFAULT_GROK_OAUTH_SCOPES = [
     'grok-cli:access',
     'api:access',
 ];
-/** Default redirect port (matches supergrok-oauth config). */
-export const DEFAULT_GROK_OAUTH_REDIRECT_PORT = 56121;
-/** Default redirect path (matches supergrok-oauth config). */
-export const DEFAULT_GROK_OAUTH_REDIRECT_PATH = '/callback';
-/** Fetch the OpenID Connect discovery document. */
-export async function fetchGrokDiscovery(options = {}) {
-    const fetchImpl = options.fetchImpl ?? fetch;
-    const discoveryUrl = options.discoveryUrl ?? `${options.issuer ?? DEFAULT_GROK_OAUTH_ISSUER}/.well-known/openid-configuration`;
-    let response;
-    try {
-        response = await fetchImpl(discoveryUrl, { method: 'GET', headers: { Accept: 'application/json' } });
-    }
-    catch (err) {
-        throw new GrokOAuthError(`OAuth discovery network error: ${err instanceof Error ? err.message : String(err)}`, 'discovery_network_error');
-    }
-    if (!response.ok) {
-        const text = await response.text().catch(() => '');
-        throw new GrokOAuthError(`OAuth discovery HTTP ${response.status}: ${text.slice(0, 200)}`, `discovery_http_${response.status}`);
-    }
-    let body;
-    try {
-        body = await response.json();
-    }
-    catch (err) {
-        throw new GrokOAuthError(`OAuth discovery returned invalid JSON: ${err instanceof Error ? err.message : String(err)}`);
-    }
-    if (!body || typeof body !== 'object') {
-        throw new GrokOAuthError('OAuth discovery returned non-object body');
-    }
-    const obj = body;
-    if (typeof obj.authorization_endpoint !== 'string' || typeof obj.token_endpoint !== 'string') {
-        throw new GrokOAuthError('OAuth discovery missing authorization_endpoint or token_endpoint');
-    }
-    return {
-        authorizationEndpoint: obj.authorization_endpoint,
-        tokenEndpoint: obj.token_endpoint,
-    };
-}
+/** Default device-code endpoint. */
+export const DEFAULT_DEVICE_CODE_ENDPOINT = 'https://auth.x.ai/oauth2/device/code';
+/** Default token endpoint (shared by device poll + refresh). */
+export const DEFAULT_TOKEN_ENDPOINT = 'https://auth.x.ai/oauth2/token';
+/** Device-code grant type URN (RFC 8628). */
+export const DEVICE_GRANT_TYPE = 'urn:ietf:params:oauth:grant-type:device_code';
+/** Default overall authorization timeout (5 minutes). */
+export const DEFAULT_OAUTH_TIMEOUT_MS = 300_000;
+const defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
 /**
- * Generate PKCE verifier (RFC 7636) and S256 challenge.
- * Returns base64url-encoded strings (no padding).
+ * Request a device authorization code (RFC 8628 §3.1).
+ *
+ * POSTs client_id + scope to the device-code endpoint and returns the
+ * device_code, user_code, verification_uri, and polling interval.
  */
-export function generatePkce() {
-    // 64 random bytes → base64url → strip padding → take first 128 chars
-    const random = getRandomValues(new Uint8Array(64));
-    const verifier = Buffer.from(random).toString('base64url').slice(0, 128);
-    // SHA-256(verifier) → base64url (no padding)
-    const hash = createHash('sha256').update(verifier).digest();
-    const challenge = hash.toString('base64url').replace(/=+$/, '');
-    return { verifier, challenge };
-}
-/** Build the xAI authorization URL with PKCE. */
-export function buildGrokAuthorizeUrl(options) {
-    const scopes = options.scopes ?? DEFAULT_GROK_OAUTH_SCOPES;
-    const params = new URLSearchParams({
-        client_id: options.clientId,
-        redirect_uri: options.redirectUri,
-        response_type: 'code',
-        scope: scopes.join(' '),
-        state: options.state ?? crypto.randomUUID(),
-        code_challenge: options.codeChallenge,
-        code_challenge_method: 'S256',
-    });
-    return `${options.authorizeEndpoint}?${params.toString()}`;
-}
-/** Exchange the authorization code for an access token. */
-export async function exchangeGrokCode(options) {
+export async function requestDeviceCode(options) {
     const fetchImpl = options.fetchImpl ?? fetch;
+    const endpoint = options.deviceCodeEndpoint ?? DEFAULT_DEVICE_CODE_ENDPOINT;
+    const scopes = options.scopes ?? DEFAULT_GROK_OAUTH_SCOPES;
     let response;
     try {
-        response = await fetchImpl(options.tokenEndpoint, {
+        response = await fetchImpl(endpoint, {
             method: 'POST',
             headers: {
                 'Content-Type': 'application/x-www-form-urlencoded',
                 Accept: 'application/json',
             },
             body: new URLSearchParams({
-                grant_type: 'authorization_code',
                 client_id: options.clientId,
-                code: options.code,
-                redirect_uri: options.redirectUri,
-                code_verifier: options.codeVerifier,
+                scope: scopes.join(' '),
             }).toString(),
         });
     }
     catch (err) {
-        throw new GrokOAuthError(`Token exchange network error: ${err instanceof Error ? err.message : String(err)}`);
+        throw new GrokOAuthError(`Device code request network error: ${err instanceof Error ? err.message : String(err)}`, 'device_code_network_error');
     }
     if (!response.ok) {
         const errText = await response.text().catch(() => '');
-        throw new GrokOAuthError(`Token exchange HTTP ${response.status}: ${errText.slice(0, 200)}`, `http_${response.status}`);
+        throw new GrokOAuthError(`Device code request HTTP ${response.status}: ${errText.slice(0, 200)}`, `device_code_http_${response.status}`);
     }
     let body;
     try {
         body = await response.json();
     }
     catch (err) {
-        throw new GrokOAuthError(`Token exchange returned invalid JSON: ${err instanceof Error ? err.message : String(err)}`);
+        throw new GrokOAuthError(`Device code response invalid JSON: ${err instanceof Error ? err.message : String(err)}`);
     }
     if (!body || typeof body !== 'object') {
-        throw new GrokOAuthError('Token exchange returned non-object body');
+        throw new GrokOAuthError('Device code response is not an object');
     }
     const obj = body;
-    const accessToken = obj.access_token;
-    if (typeof accessToken !== 'string' || accessToken.length === 0) {
-        throw new GrokOAuthError('Token exchange response missing access_token', 'no_access_token');
+    const deviceCode = obj.device_code;
+    const userCode = obj.user_code;
+    const verificationUri = obj.verification_uri;
+    if (typeof deviceCode !== 'string' || deviceCode.length === 0) {
+        throw new GrokOAuthError('Device code response missing device_code', 'no_device_code');
     }
-    return parseTokenResponseBody(obj, accessToken, 'Token exchange');
+    if (typeof userCode !== 'string' || userCode.length === 0) {
+        throw new GrokOAuthError('Device code response missing user_code', 'no_user_code');
+    }
+    if (typeof verificationUri !== 'string' || verificationUri.length === 0) {
+        throw new GrokOAuthError('Device code response missing verification_uri', 'no_verification_uri');
+    }
+    return {
+        deviceCode,
+        userCode,
+        verificationUri,
+        ...(typeof obj.verification_uri_complete === 'string' && obj.verification_uri_complete.length > 0
+            ? { verificationUriComplete: obj.verification_uri_complete }
+            : {}),
+        expiresIn: typeof obj.expires_in === 'number' && Number.isFinite(obj.expires_in) ? obj.expires_in : 1800,
+        interval: typeof obj.interval === 'number' && Number.isFinite(obj.interval) ? obj.interval : 5,
+    };
 }
 /**
  * Parse the standard OAuth token response body into a GrokOAuthResult.
- * Shared between `exchangeGrokCode` and `refreshGrokToken`.
- *
- * @param label Human-readable label for the operation (used in error messages).
- * @param accessToken Pre-validated access token from the body.
+ * Shared between the device-code poll and `refreshGrokToken`.
  */
-function parseTokenResponseBody(obj, accessToken, label) {
+function parseTokenResponseBody(obj, accessToken) {
     const result = { accessToken };
     if (typeof obj.expires_in === 'number' && Number.isFinite(obj.expires_in)) {
         result.expiresAt = Date.now() + obj.expires_in * 1000;
@@ -178,28 +135,163 @@ function parseTokenResponseBody(obj, accessToken, label) {
     if (typeof obj.refresh_token === 'string' && obj.refresh_token.length > 0) {
         result.refreshToken = obj.refresh_token;
     }
-    // xAI SuperGrok OAuth also returns refresh_token_expires_in (refresh token TTL).
-    // Capture it so callers can warn before the refresh token expires.
     if (typeof obj.refresh_token_expires_in === 'number' && Number.isFinite(obj.refresh_token_expires_in)) {
         result.refreshExpiresAt = Date.now() + obj.refresh_token_expires_in * 1000;
     }
-    // Some providers also return `scope` — we ignore it for now.
-    void obj;
-    void label;
     return result;
 }
 /**
- * Exchange a refresh token for a new access token (Task D.2.1, v3-D).
+ * Poll the token endpoint with the device_code until the user authorizes,
+ * denies, the code expires, or the overall timeout is reached (RFC 8628 §3.4).
  *
- * Per RFC 6749 §6, the request body is:
- *   grant_type=refresh_token&refresh_token=<token>&client_id=<id>
+ * Error codes per RFC 8628 §3.5:
+ *   authorization_pending → keep polling (normal)
+ *   slow_down             → back off (increase interval by 5s)
+ *   expired               → device_code expired → fatal
+ *   denied                → user denied → fatal
+ *   access_denied         → (some providers) → fatal
+ */
+export async function pollForDeviceToken(options) {
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const sleep = options.sleepImpl ?? defaultSleep;
+    const endpoint = options.tokenEndpoint ?? DEFAULT_TOKEN_ENDPOINT;
+    const deadline = Date.now() + options.timeoutMs;
+    let interval = Math.max(options.interval, 1);
+    // eslint-disable-next-line no-constant-condition
+    while (true) {
+        if (Date.now() >= deadline) {
+            throw new GrokOAuthError('Device authorization timed out waiting for user approval', 'timeout');
+        }
+        let response;
+        try {
+            response = await fetchImpl(endpoint, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                    Accept: 'application/json',
+                },
+                body: new URLSearchParams({
+                    grant_type: DEVICE_GRANT_TYPE,
+                    client_id: options.clientId,
+                    device_code: options.deviceCode,
+                }).toString(),
+            });
+        }
+        catch (err) {
+            throw new GrokOAuthError(`Token poll network error: ${err instanceof Error ? err.message : String(err)}`, 'poll_network_error');
+        }
+        // Success: 200 with access_token.
+        if (response.ok) {
+            let body;
+            try {
+                body = await response.json();
+            }
+            catch (err) {
+                throw new GrokOAuthError(`Token response invalid JSON: ${err instanceof Error ? err.message : String(err)}`);
+            }
+            if (!body || typeof body !== 'object') {
+                throw new GrokOAuthError('Token response is not an object');
+            }
+            const obj = body;
+            const accessToken = obj.access_token;
+            if (typeof accessToken !== 'string' || accessToken.length === 0) {
+                throw new GrokOAuthError('Token response missing access_token', 'no_access_token');
+            }
+            return parseTokenResponseBody(obj, accessToken);
+        }
+        // Error: parse the OAuth error code to decide whether to keep polling.
+        let errBody = {};
+        try {
+            const parsed = await response.json();
+            if (parsed && typeof parsed === 'object')
+                errBody = parsed;
+        }
+        catch {
+            // Non-JSON error body — treat as transient and keep polling unless 4xx is definitive.
+        }
+        const errorCode = typeof errBody.error === 'string' ? errBody.error : `http_${response.status}`;
+        switch (errorCode) {
+            case 'authorization_pending':
+                await sleep(interval * 1000);
+                continue;
+            case 'slow_down':
+                // RFC 8628 §3.5: increase the interval by 5 seconds.
+                interval += 5;
+                await sleep(interval * 1000);
+                continue;
+            case 'expired_token':
+            case 'expired':
+                throw new GrokOAuthError('Device code expired before user authorized', 'expired');
+            case 'access_denied':
+            case 'denied':
+                throw new GrokOAuthError('User denied the authorization request', 'denied');
+            case 'invalid_grant':
+                throw new GrokOAuthError('Device code rejected (invalid_grant)', 'invalid_grant');
+            default:
+                // Unknown error — surface it rather than polling forever.
+                throw new GrokOAuthError(`Token poll error: ${errorCode}${typeof errBody.error_description === 'string' ? ` — ${errBody.error_description}` : ''}`, errorCode);
+        }
+    }
+}
+/**
+ * Run the complete Device Authorization Grant flow.
  *
- * Some providers also require `client_secret` — xAI does not (public OAuth).
+ * Steps:
+ *  1. Request a device code (user_code + verification_uri)
+ *  2. Call onUserCode() so the caller can display the code/URL to the user
+ *  3. Open the verification URI in the browser
+ *  4. Poll the token endpoint until authorized / denied / timed out
  *
- * The provider MAY rotate the refresh_token: callers should treat the
- * returned `refreshToken` (if any) as the new authoritative value and
- * persist it. If the provider does NOT return a new refresh_token, the
- * caller should keep using the previous one.
+ * @throws GrokOAuthError on any failure (network, denied, expired, timeout).
+ */
+export async function runGrokOAuthFlow(options = {}) {
+    const clientId = options.clientId || process.env.GROK_OAUTH_CLIENT_ID || DEFAULT_GROK_OAUTH_CLIENT_ID;
+    if (!clientId || clientId.trim().length === 0) {
+        throw new GrokOAuthError('Missing clientId', 'no_client_id');
+    }
+    // Step 1: request device code.
+    const deviceAuth = await requestDeviceCode({
+        clientId,
+        scopes: options.scopes,
+        deviceCodeEndpoint: options.deviceCodeEndpoint,
+        fetchImpl: options.fetchImpl,
+    });
+    // Step 2: surface the user_code + verification_uri to the caller.
+    if (options.onUserCode) {
+        await options.onUserCode(deviceAuth);
+    }
+    // Step 3: open the browser to the verification URI (best-effort, non-blocking).
+    // Prefer verification_uri_complete when provided (pre-fills the user_code).
+    try {
+        await openBrowser(deviceAuth.verificationUriComplete ?? deviceAuth.verificationUri);
+    }
+    catch {
+        // Browser launch is best-effort — the user can still visit the URL manually
+        // (the code was already surfaced via onUserCode).
+    }
+    // Step 4: poll for the token. Timeout is the lesser of the overall timeout
+    // and the device_code lifetime (xAI will reject an expired code anyway).
+    const timeoutMs = options.timeoutMs ?? DEFAULT_OAUTH_TIMEOUT_MS;
+    const effectiveTimeout = Math.min(timeoutMs, deviceAuth.expiresIn * 1000);
+    return pollForDeviceToken({
+        clientId,
+        deviceCode: deviceAuth.deviceCode,
+        interval: deviceAuth.interval,
+        timeoutMs: effectiveTimeout,
+        tokenEndpoint: options.tokenEndpoint,
+        fetchImpl: options.fetchImpl,
+        sleepImpl: options.sleepImpl,
+    });
+}
+/**
+ * Exchange a refresh token for a new access token (RFC 6749 §6).
+ *
+ * Reuses the same xAI token endpoint as the device flow. The provider MAY
+ * rotate the refresh_token: callers should treat the returned `refreshToken`
+ * (if any) as the new authoritative value and persist it. If the provider
+ * does NOT return a new refresh_token, the caller keeps the previous one.
+ *
+ * Consumed by refreshRegistry.ts (grokRefreshAdapter) for auto-refresh.
  */
 export async function refreshGrokToken(options) {
     if (!options.clientId || options.clientId.trim().length === 0) {
@@ -208,7 +300,7 @@ export async function refreshGrokToken(options) {
     if (!options.refreshToken || options.refreshToken.trim().length === 0) {
         throw new GrokOAuthError('Missing refreshToken', 'no_refresh_token');
     }
-    const endpoint = options.tokenEndpoint ?? 'https://oauth.x.ai/token';
+    const endpoint = options.tokenEndpoint ?? DEFAULT_TOKEN_ENDPOINT;
     const fetchImpl = options.fetchImpl ?? fetch;
     let response;
     try {
@@ -230,7 +322,6 @@ export async function refreshGrokToken(options) {
     }
     if (!response.ok) {
         const errText = await response.text().catch(() => '');
-        // 400/401 with "invalid_grant" → refresh token expired or revoked.
         const code = response.status === 400 || response.status === 401 ? 'invalid_grant' : `http_${response.status}`;
         throw new GrokOAuthError(`Token refresh HTTP ${response.status}: ${errText.slice(0, 200)}`, code);
     }
@@ -249,95 +340,7 @@ export async function refreshGrokToken(options) {
     if (typeof accessToken !== 'string' || accessToken.length === 0) {
         throw new GrokOAuthError('Token refresh response missing access_token', 'no_access_token');
     }
-    return parseTokenResponseBody(obj, accessToken, 'Token refresh');
-}
-/**
- * Run the complete OAuth flow.
- *
- * Steps:
- *  1. Fetch OpenID Connect discovery document
- *  2. Generate PKCE verifier + S256 challenge
- *  3. Build authorization URL
- *  4. Start local callback server
- *  5. Open browser
- *  6. Wait for callback
- *  7. Verify state to prevent CSRF
- *  8. Exchange code for token (with code_verifier)
- *
- * @throws GrokOAuthError on any failure (network, missing params, provider error).
- */
-export async function runGrokOAuthFlow(options) {
-    const clientId = options.clientId || process.env.GROK_OAUTH_CLIENT_ID || DEFAULT_GROK_OAUTH_CLIENT_ID;
-    if (!clientId || clientId.trim().length === 0) {
-        throw new GrokOAuthError('Missing clientId', 'no_client_id');
-    }
-    const callbackPort = options.callbackPort ?? DEFAULT_GROK_OAUTH_REDIRECT_PORT;
-    const callbackPath = options.callbackPath ?? DEFAULT_GROK_OAUTH_REDIRECT_PATH;
-    const redirectUri = `http://127.0.0.1:${callbackPort}${callbackPath}`;
-    // Step 1: fetch OpenID Connect discovery document.
-    const discovery = await fetchGrokDiscovery({
-        issuer: options.issuer,
-        discoveryUrl: options.discoveryUrl,
-        fetchImpl: options.fetchImpl,
-    });
-    // Step 2: generate PKCE verifier + S256 challenge.
-    const { verifier: codeVerifier, challenge: codeChallenge } = generatePkce();
-    const state = crypto.randomUUID();
-    // Step 3: build authorize URL with PKCE.
-    const authorizeUrl = buildGrokAuthorizeUrl({
-        clientId,
-        redirectUri,
-        scopes: options.scopes,
-        state,
-        codeChallenge,
-        authorizeEndpoint: discovery.authorizationEndpoint,
-    });
-    // Step 4: start callback server.
-    let handle;
-    try {
-        handle = await startOAuthCallbackServer({
-            port: callbackPort,
-            timeoutMs: options.callbackTimeoutMs ?? 120_000,
-            expectedPath: callbackPath,
-        });
-    }
-    catch (err) {
-        throw new GrokOAuthError(`Failed to start OAuth callback server on port ${callbackPort}: ${err instanceof Error ? err.message : String(err)}`, 'callback_bind_failed');
-    }
-    try {
-        // Step 5: open browser (or call injected opener for tests).
-        if (options.onBrowserOpen) {
-            await options.onBrowserOpen(authorizeUrl);
-        }
-        else {
-            // Production path: open in default browser.
-            await openBrowser(authorizeUrl);
-        }
-        // Step 6: wait for callback.
-        const callbackResult = await handle.waitForCode();
-        // Step 7: verify state (CSRF protection).
-        if (callbackResult.state !== state) {
-            throw new GrokOAuthError(`OAuth state mismatch — possible CSRF. expected=${state} got=${callbackResult.state ?? '(none)'}`, 'state_mismatch');
-        }
-        if (callbackResult.error) {
-            throw new GrokOAuthError(`OAuth provider returned error: ${callbackResult.error}${callbackResult.errorDescription ? ` — ${callbackResult.errorDescription}` : ''}`, callbackResult.error);
-        }
-        if (!callbackResult.code) {
-            throw new GrokOAuthError('OAuth callback did not include authorization code', 'no_code');
-        }
-        // Step 8: exchange code for token (with code_verifier).
-        return await exchangeGrokCode({
-            clientId,
-            code: callbackResult.code,
-            codeVerifier,
-            redirectUri,
-            tokenEndpoint: discovery.tokenEndpoint,
-            fetchImpl: options.fetchImpl,
-        });
-    }
-    finally {
-        handle.close();
-    }
+    return parseTokenResponseBody(obj, accessToken);
 }
 /**
  * Open the given URL in the user's default browser. Cross-platform via
@@ -346,8 +349,6 @@ export async function runGrokOAuthFlow(options) {
  */
 export async function openBrowser(url) {
     const { spawn } = await import('node:child_process');
-    // Detect platform via process.env.PLATFORM? Use process.platform.
-    // 'darwin' → open, 'win32' → start (cmd /c start ""), else → xdg-open
     const cmd = (() => {
         switch (process.platform) {
             case 'darwin': return { bin: 'open', args: [url] };
@@ -360,11 +361,9 @@ export async function openBrowser(url) {
             const child = spawn(cmd.bin, cmd.args, { stdio: 'ignore', detached: true });
             child.on('error', (err) => reject(err));
             child.on('spawn', () => {
-                // Detach so the browser process can outlive the Node CLI.
                 child.unref();
                 resolve();
             });
-            // Fallback in case 'spawn' doesn't fire on all platforms.
             setTimeout(() => resolve(), 100);
         }
         catch (err) {

package/dist/cli/grokOAuth.js.map

@@ -1 +1 @@
-{"version":3,"file":"grokOAuth.js","sourceRoot":"","sources":["../../src/cli/grokOAuth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,wBAAwB,EAAkC,MAAM,0BAA0B,CAAC;AACpG,OAAO,UAAU,MAAM,aAAa,CAAC;AAErC,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;AAkCnD,MAAM,OAAO,cAAe,SAAQ,KAAK;IACM;IAA7C,YAAY,OAAe,EAAkB,IAAa;QACxD,KAAK,CAAC,OAAO,CAAC,CAAC;QAD4B,SAAI,GAAJ,IAAI,CAAS;QAExD,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,sCAAsC,CAAC;AAEnF,0DAA0D;AAC1D,MAAM,CAAC,MAAM,yBAAyB,GAAG,mBAAmB,CAAC;AAE7D,uFAAuF;AACvF,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ;IACR,SAAS;IACT,OAAO;IACP,gBAAgB;IAChB,iBAAiB;IACjB,YAAY;CACJ,CAAC;AAEX,8DAA8D;AAC9D,MAAM,CAAC,MAAM,gCAAgC,GAAG,KAAK,CAAC;AAEtD,8DAA8D;AAC9D,MAAM,CAAC,MAAM,gCAAgC,GAAG,WAAW,CAAC;AAE5D,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,UAIrC,EAAE;IACJ,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,GAAG,OAAO,CAAC,MAAM,IAAI,yBAAyB,mCAAmC,CAAC;IAC/H,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACvG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CAAC,kCAAkC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAC5I,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,cAAc,CACtB,wBAAwB,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAChE,kBAAkB,QAAQ,CAAC,MAAM,EAAE,CACpC,CAAC;IACJ,CAAC;IACD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CAAC,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzH,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,cAAc,CAAC,0CAA0C,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,IAAI,OAAO,GAAG,CAAC,sBAAsB,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC7F,MAAM,IAAI,cAAc,CAAC,kEAAkE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO;QACL,qBAAqB,EAAE,GAAG,CAAC,sBAAsB;QACjD,aAAa,EAAE,GAAG,CAAC,cAAc;KAClC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,qEAAqE;IACrE,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAEzE,6CAA6C;IAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAEhE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,qBAAqB,CAAC,OAOrC;IACC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,yBAAyB,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,YAAY,EAAE,OAAO,CAAC,WAAW;QACjC,aAAa,EAAE,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QACvB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,EAAE;QAC3C,cAAc,EAAE,OAAO,CAAC,aAAa;QACrC,qBAAqB,EAAE,MAAM;KAC9B,CAAC,CAAC;IACH,OAAO,GAAG,OAAO,CAAC,iBAAiB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC7D,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAOtC;IACC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,oBAAoB;gBAChC,SAAS,EAAE,OAAO,CAAC,QAAQ;gBAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,YAAY,EAAE,OAAO,CAAC,WAAW;gBACjC,aAAa,EAAE,OAAO,CAAC,YAAY;aACpC,CAAC,CAAC,QAAQ,EAAE;SACd,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CAAC,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChH,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,IAAI,cAAc,CACtB,uBAAuB,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAClE,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAC1B,CAAC;IACJ,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CAAC,yCAAyC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxH,CAAC;IAED,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,cAAc,CAAC,yCAAyC,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAE5C,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC;IACrC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,cAAc,CAAC,8CAA8C,EAAE,iBAAiB,CAAC,CAAC;IAC9F,CAAC;IAED,OAAO,sBAAsB,CAAC,GAAG,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAC7B,GAA4B,EAC5B,WAAmB,EACnB,KAAa;IAEb,MAAM,MAAM,GAAoB,EAAE,WAAW,EAAE,CAAC;IAChD,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,YAAY,GAAG,GAAG,CAAC,aAAa,CAAC;IAC1C,CAAC;IACD,iFAAiF;IACjF,mEAAmE;IACnE,IAAI,OAAO,GAAG,CAAC,wBAAwB,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;QACtG,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,wBAAwB,GAAG,IAAI,CAAC;IAC7E,CAAC;IACD,6DAA6D;IAC7D,KAAK,GAAG,CAAC;IACT,KAAK,KAAK,CAAC;IACX,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAKtC;IACC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,cAAc,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,IAAI,0BAA0B,CAAC;IACrE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAE7C,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,eAAe;gBAC3B,SAAS,EAAE,OAAO,CAAC,QAAQ;gBAC3B,aAAa,EAAE,OAAO,CAAC,YAAY;aACpC,CAAC,CAAC,QAAQ,EAAE;SACd,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CAAC,gCAAgC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/G,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACtD,mEAAmE;QACnE,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC9G,MAAM,IAAI,cAAc,CACtB,sBAAsB,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EACjE,IAAI,CACL,CAAC;IACJ,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CAAC,wCAAwC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvH,CAAC;IAED,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,cAAc,CAAC,wCAAwC,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAE5C,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC;IACrC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,cAAc,CAAC,6CAA6C,EAAE,iBAAiB,CAAC,CAAC;IAC7F,CAAC;IAED,OAAO,sBAAsB,CAAC,GAAG,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAyB;IAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,4BAA4B,CAAC;IACtG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,gCAAgC,CAAC;IAC9E,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,gCAAgC,CAAC;IAC9E,MAAM,WAAW,GAAG,oBAAoB,YAAY,GAAG,YAAY,EAAE,CAAC;IAEtE,mDAAmD;IACnD,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC;QACzC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IAEH,mDAAmD;IACnD,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,YAAY,EAAE,CAAC;IAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAElC,yCAAyC;IACzC,MAAM,YAAY,GAAG,qBAAqB,CAAC;QACzC,QAAQ;QACR,WAAW;QACX,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK;QACL,aAAa;QACb,iBAAiB,EAAE,SAAS,CAAC,qBAAqB;KACnD,CAAC,CAAC;IAEH,iCAAiC;IACjC,IAAI,MAAiC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,wBAAwB,CAAC;YACtC,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,OAAO,CAAC,iBAAiB,IAAI,OAAO;YAC/C,YAAY,EAAE,YAAY;SAC3B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CACtB,iDAAiD,YAAY,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACpH,sBAAsB,CACvB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,4DAA4D;QAC5D,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1B,MAAM,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,4CAA4C;YAC5C,MAAM,WAAW,CAAC,YAAY,CAAC,CAAC;QAClC,CAAC;QAED,6BAA6B;QAC7B,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;QAElD,0CAA0C;QAC1C,IAAI,cAAc,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YACnC,MAAM,IAAI,cAAc,CACtB,kDAAkD,KAAK,QAAQ,cAAc,CAAC,KAAK,IAAI,QAAQ,EAAE,EACjG,gBAAgB,CACjB,CAAC;QACJ,CAAC;QAED,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,cAAc,CACtB,kCAAkC,cAAc,CAAC,KAAK,GAAG,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EACzI,cAAc,CAAC,KAAK,CACrB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,cAAc,CAAC,mDAAmD,EAAE,SAAS,CAAC,CAAC;QAC3F,CAAC;QAED,wDAAwD;QACxD,OAAO,MAAM,gBAAgB,CAAC;YAC5B,QAAQ;YACR,IAAI,EAAE,cAAc,CAAC,IAAI;YACzB,YAAY;YACZ,WAAW;YACX,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW;IAC3C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACrD,kEAAkE;IAClE,sEAAsE;IACtE,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE;QAChB,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,QAAQ,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,KAAK,OAAO,CAAC,CAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YACvE,OAAO,CAAC,CAAO,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACrB,0DAA0D;gBAC1D,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,0DAA0D;YAC1D,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"grokOAuth.js","sourceRoot":"","sources":["../../src/cli/grokOAuth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAoDH,MAAM,OAAO,cAAe,SAAQ,KAAK;IACM;IAA7C,YAAY,OAAe,EAAkB,IAAa;QACxD,KAAK,CAAC,OAAO,CAAC,CAAC;QAD4B,SAAI,GAAJ,IAAI,CAAS;QAExD,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,sCAAsC,CAAC;AAEnF,sDAAsD;AACtD,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ;IACR,SAAS;IACT,OAAO;IACP,gBAAgB;IAChB,iBAAiB;IACjB,YAAY;CACJ,CAAC;AAEX,oCAAoC;AACpC,MAAM,CAAC,MAAM,4BAA4B,GAAG,sCAAsC,CAAC;AAEnF,gEAAgE;AAChE,MAAM,CAAC,MAAM,sBAAsB,GAAG,gCAAgC,CAAC;AAEvE,6CAA6C;AAC7C,MAAM,CAAC,MAAM,iBAAiB,GAAG,8CAA8C,CAAC;AAEhF,yDAAyD;AACzD,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAEhD,MAAM,YAAY,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAE1F;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAKvC;IACC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,IAAI,4BAA4B,CAAC;IAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,yBAAyB,CAAC;IAE3D,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,SAAS,EAAE,OAAO,CAAC,QAAQ;gBAC3B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;aACxB,CAAC,CAAC,QAAQ,EAAE;SACd,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CACtB,sCAAsC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACxF,2BAA2B,CAC5B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,IAAI,cAAc,CACtB,4BAA4B,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EACvE,oBAAoB,QAAQ,CAAC,MAAM,EAAE,CACtC,CAAC;IACJ,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CACtB,sCAAsC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,cAAc,CAAC,uCAAuC,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAE5C,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,CAAC;IACnC,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC;IAC/B,MAAM,eAAe,GAAG,GAAG,CAAC,gBAAgB,CAAC;IAE7C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,cAAc,CAAC,0CAA0C,EAAE,gBAAgB,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,cAAc,CAAC,wCAAwC,EAAE,cAAc,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,cAAc,CAAC,+CAA+C,EAAE,qBAAqB,CAAC,CAAC;IACnG,CAAC;IAED,OAAO;QACL,UAAU;QACV,QAAQ;QACR,eAAe;QACf,GAAG,CAAC,OAAO,GAAG,CAAC,yBAAyB,KAAK,QAAQ,IAAI,GAAG,CAAC,yBAAyB,CAAC,MAAM,GAAG,CAAC;YAC/F,CAAC,CAAC,EAAE,uBAAuB,EAAE,GAAG,CAAC,yBAAyB,EAAE;YAC5D,CAAC,CAAC,EAAE,CAAC;QACP,SAAS,EAAE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;QACxG,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;KAC/F,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAAC,GAA4B,EAAE,WAAmB;IAC/E,MAAM,MAAM,GAAoB,EAAE,WAAW,EAAE,CAAC;IAChD,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,YAAY,GAAG,GAAG,CAAC,aAAa,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,wBAAwB,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;QACtG,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,wBAAwB,GAAG,IAAI,CAAC;IAC7E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAQxC;IACC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAC;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAChD,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAE7C,iDAAiD;IACjD,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,cAAc,CAAC,0DAA0D,EAAE,SAAS,CAAC,CAAC;QAClG,CAAC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE;gBACnC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;oBACnD,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,IAAI,EAAE,IAAI,eAAe,CAAC;oBACxB,UAAU,EAAE,iBAAiB;oBAC7B,SAAS,EAAE,OAAO,CAAC,QAAQ;oBAC3B,WAAW,EAAE,OAAO,CAAC,UAAU;iBAChC,CAAC,CAAC,QAAQ,EAAE;aACd,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,cAAc,CACtB,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAC/E,oBAAoB,CACrB,CAAC;QACJ,CAAC;QAED,kCAAkC;QAClC,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,cAAc,CACtB,gCAAgC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACnF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,MAAM,IAAI,cAAc,CAAC,iCAAiC,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,GAAG,GAAG,IAA+B,CAAC;YAC5C,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC;YACrC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChE,MAAM,IAAI,cAAc,CAAC,qCAAqC,EAAE,iBAAiB,CAAC,CAAC;YACrF,CAAC;YACD,OAAO,sBAAsB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAClD,CAAC;QAED,uEAAuE;QACvE,IAAI,OAAO,GAA4B,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,OAAO,GAAG,MAAiC,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,sFAAsF;QACxF,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QAEhG,QAAQ,SAAS,EAAE,CAAC;YAClB,KAAK,uBAAuB;gBAC1B,MAAM,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;gBAC7B,SAAS;YACX,KAAK,WAAW;gBACd,qDAAqD;gBACrD,QAAQ,IAAI,CAAC,CAAC;gBACd,MAAM,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;gBAC7B,SAAS;YACX,KAAK,eAAe,CAAC;YACrB,KAAK,SAAS;gBACZ,MAAM,IAAI,cAAc,CAAC,4CAA4C,EAAE,SAAS,CAAC,CAAC;YACpF,KAAK,eAAe,CAAC;YACrB,KAAK,QAAQ;gBACX,MAAM,IAAI,cAAc,CAAC,uCAAuC,EAAE,QAAQ,CAAC,CAAC;YAC9E,KAAK,eAAe;gBAClB,MAAM,IAAI,cAAc,CAAC,sCAAsC,EAAE,eAAe,CAAC,CAAC;YACpF;gBACE,0DAA0D;gBAC1D,MAAM,IAAI,cAAc,CACtB,qBAAqB,SAAS,GAAG,OAAO,OAAO,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EACzH,SAAS,CACV,CAAC;QACN,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAA4B,EAAE;IACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,4BAA4B,CAAC;IACtG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;IAC/D,CAAC;IAED,+BAA+B;IAC/B,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC;QACzC,QAAQ;QACR,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IAEH,kEAAkE;IAClE,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAED,gFAAgF;IAChF,4EAA4E;IAC5E,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,UAAU,CAAC,uBAAuB,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,kDAAkD;IACpD,CAAC;IAED,2EAA2E;IAC3E,yEAAyE;IACzE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,wBAAwB,CAAC;IAChE,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAE1E,OAAO,kBAAkB,CAAC;QACxB,QAAQ;QACR,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,SAAS,EAAE,gBAAgB;QAC3B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAKtC;IACC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,cAAc,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAC;IACjE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAE7C,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,eAAe;gBAC3B,SAAS,EAAE,OAAO,CAAC,QAAQ;gBAC3B,aAAa,EAAE,OAAO,CAAC,YAAY;aACpC,CAAC,CAAC,QAAQ,EAAE;SACd,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CAAC,gCAAgC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/G,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC9G,MAAM,IAAI,cAAc,CACtB,sBAAsB,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EACjE,IAAI,CACL,CAAC;IACJ,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CAAC,wCAAwC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvH,CAAC;IAED,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,cAAc,CAAC,wCAAwC,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAE5C,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC;IACrC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,cAAc,CAAC,6CAA6C,EAAE,iBAAiB,CAAC,CAAC;IAC7F,CAAC;IAED,OAAO,sBAAsB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW;IAC3C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE;QAChB,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,QAAQ,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,KAAK,OAAO,CAAC,CAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YACvE,OAAO,CAAC,CAAO,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACrB,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}