zevairouter 1.0.183 → 1.0.185

package/cli/app/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Unreleased
 
+# v1.0.185 (2026-08-02)
+
+## Fixes
+- **Restoring a backup no longer deletes all usage history**: `importDb()` cleared every table in the schema, including the three that `exportDb()` deliberately omits to keep backups small (`usageHistory`, `requestDetails`, `quotaCache`). Since the payload carries no rows for them, restoring a config backup permanently wiped all usage and request history. Those tables are now left untouched during a restore.
+- **API key budgets are enforced regardless of `requireApiKey`**: the daily/monthly budget check sat inside the `requireApiKey` branch while rate limits and model policy applied to any recognized key, so turning `requireApiKey` off silently disabled spend caps. Budget enforcement is now keyed on the request carrying an API key, matching the other per-key limits.
+- **A dropped stream no longer locks a budgeted API key out permanently**: the single-in-flight slot that serializes budgeted requests was released only by SSE stream completion, so a client that neither drained nor cancelled its stream pinned the slot until the process restarted and every later request for that key returned 429. Slots now expire, and a late release cannot free a slot a newer request has since claimed.
+- **Web-shell tokens are no longer accepted as dashboard sessions**: `terminal_token` and `auth_token` are signed with the same secret, so a bare signature check let a 4-hour terminal token act as a 24-hour dashboard session. Both readers now require the `authenticated` claim that only dashboard login issues.
+- **Dashboard logins survive a browser restart**: the `auth_token` cookie had no `maxAge`, so a still-valid 24-hour session was discarded when the browser closed. The cookie lifetime now matches the token's.
+- **The MITM proxy is no longer orphaned on port 443**: the proxy runs as root via `sudo`, so liveness checks from the unprivileged dashboard get `EPERM`, which was treated as "not running". Status checks deleted the PID file of a live process, and stop reported success without the process exiting. `EPERM` now correctly means "alive".
+- **MITM runtime server picks up new releases**: the copy was skipped whenever the bundled and installed `server.js` had the same byte size, so a new release of identical length kept running the old bundle. Modification time is now compared as well.
+
+## Improvements
+- **Faster writes on the sql.js fallback driver**: every standalone write serialized the entire database twice — once for a rollback copy, once to persist. Recovery now reads back the last persisted file instead, since it already matches memory whenever no write is in flight, halving the per-write cost.
+
+# v1.0.184 (2026-08-01)
+
+## Fixes
+- **Reliable Grok CLI device authorization**: the xAI bulk-login state machine now confirms the device code again after Google sign-in, submits xAI authorization exactly once, stops cookie and generic consent handlers on the terminal `Device Authorized` page, and reports a cookie dismissal only after a successful click and confirmed disappearance. Device-token polling now uses xAI's canonical minimal scopes, distinguishes OAuth rejection from a genuine timeout, safely retries transient network/5xx responses, and surfaces redacted upstream diagnostics instead of masking `invalid_grant` and other terminal errors as timeouts.
+
 # v1.0.183 (2026-07-31)
 
 ## Fixes

package/cli/app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter",
-  "version": "1.0.183",
+  "version": "1.0.185",
   "description": "Self-hosted AI router: many providers, one OpenAI-compatible /v1 endpoint and dashboard",
   "bin": {
     "zevai": "cli/cli.js"

package/cli/app/src/lib/db/adapters/nodeSqliteAdapter.js

@@ -16,7 +16,14 @@ export async function createNodeSqliteAdapter(filePath) {
   };
 
   // Dynamic import — fails on Node < 22.5 → driver.js falls back to sql.js
-  const sqlite = await import("node:sqlite");
+  // The warning only fires during import, so restore process.emit immediately
+  // instead of leaving the whole process patched for its entire lifetime.
+  let sqlite;
+  try {
+    sqlite = await import("node:sqlite");
+  } finally {
+    process.emit = origEmit;
+  }
   const Database = sqlite.DatabaseSync;
   const db = new Database(filePath);
 

package/cli/app/src/lib/db/adapters/sqljsAdapter.js

@@ -89,16 +89,34 @@ export async function createSqlJsAdapter(filePath, options = {}) {
     try { previous.close(); } catch {}
   }
 
+  // Rewind memory to the last image that reached disk. Whenever no write is in
+  // progress the file matches in-memory state, so the file *is* the known-good
+  // snapshot. Reading it back only on failure avoids the db.export() that used
+  // to run before every single write — that cost two whole-database
+  // serialisations per INSERT, one for the rollback copy and one for persist().
+  function rewindToPersistedImage(cause) {
+    let image = null;
+    try {
+      if (fs.existsSync(filePath)) image = fs.readFileSync(filePath);
+    } catch (readError) {
+      // Memory holds writes the file does not and the last good image cannot be
+      // rebuilt. Surface both failures rather than continuing on a database that
+      // silently disagrees with disk.
+      cause.rewindError = readError;
+      throw cause;
+    }
+    restoreSnapshot(image);
+  }
+
   function runWithPersistence(operation) {
     if (transactionDepth > 0) return operation();
 
-    const snapshot = db.export();
     try {
       const result = operation();
       persist();
       return result;
     } catch (error) {
-      restoreSnapshot(snapshot);
+      rewindToPersistedImage(error);
       throw error;
     }
   }
@@ -153,7 +171,6 @@ export async function createSqlJsAdapter(filePath, options = {}) {
   function transaction(fn) {
     const sp = `sp_${Math.random().toString(36).slice(2)}`;
     const outermost = transactionDepth === 0;
-    const snapshot = outermost ? db.export() : null;
     db.exec(`SAVEPOINT ${sp}`);
     transactionDepth++;
     let released = false;
@@ -171,8 +188,13 @@ export async function createSqlJsAdapter(filePath, options = {}) {
         transactionDepth--;
         try { db.exec(`ROLLBACK TO ${sp}`); db.exec(`RELEASE ${sp}`); } catch {}
       }
-      if (snapshot) {
-        restoreSnapshot(snapshot);
+      // ROLLBACK TO undoes the savepoint's own statements, but only an outermost
+      // transaction can rewind memory to the persisted image: a nested one must
+      // leave its parent's uncommitted work intact. RELEASE means the savepoint
+      // closed in WASM memory while nothing reached disk, so the rewind is what
+      // keeps memory from holding rows the file does not.
+      if (outermost) {
+        rewindToPersistedImage(e);
       }
       throw e;
     }

package/cli/app/src/mitm/server.js

@@ -52,7 +52,7 @@ ${i}
 `).replace(/'/g,"'\\''");await Vr(`printf '%s' '${o}' | tee ${Ze} > /dev/null`,t),await Zo(t)}Sa(`\u{1F310} DNS ${e}: \u2705 removed ${r.join(", ")}`)}catch(n){let s=n.message?.includes("incorrect password")?"Wrong sudo password":`Failed to remove DNS entry: ${n.message}`;throw new Error(s)}}async function Bd(e){for(let t of Object.keys(Kt))try{await eu(t,e)}catch(a){Sd(`DNS ${t}: failed to remove \u2014 ${a.message}`)}}function bd(){try{if(!_e.existsSync(Ze))return;let e=Object.values(Kt).flat(),t=_e.readFileSync(Ze,"utf8"),a=bt?`\r
 `:`
 `,n=t.split(/\r?\n/).filter(s=>!e.some(i=>s.includes(i))).join(a).replace(/[\r\n\s]+$/g,"")+a;if(n===t)return;if(_e.writeFileSync(Ze,n,"utf8"),bt)try{Or("ipconfig /flushdns",{windowsHide:!0,stdio:"ignore"})}catch{}else if(Xo)try{Or("dscacheutil -flushcache && killall -HUP mDNSResponder",{stdio:"ignore"})}catch{}else try{Or("resolvectl flush-caches 2>/dev/null || true",{stdio:"ignore"})}catch{}}catch{}}tu.exports={TOOL_HOSTS:Kt,addDNSEntry:Ad,removeDNSEntry:eu,removeAllDNSEntries:Bd,removeAllDNSEntriesSync:bd,execWithPassword:Vr,isSudoAvailable:Ta,canRunSudoWithoutPassword:Jo,isSudoPasswordRequired:Td,checkDNSEntry:wn,checkAllDNSStatus:Id}});var fu=require("https"),_d=require("http2"),cu=require("tls"),au=require("fs"),nu=require("path"),Nd=require("dns"),{promisify:wd}=require("util"),{execSync:Rn}=require("child_process"),{log:Un,err:ot,dumpRequest:Rd,createResponseDumper:Ld,clearDumpDir:kd}=Gt(),{IS_DEV:Dd,LSOF_BIN:Ud,TARGET_HOSTS:Pd,URL_PATTERNS:Od,MODEL_SYNONYMS:Vd,MODEL_PATTERNS:Fd,MODEL_NO_MAP:Kd,getToolForHost:du}=Er(),{DATA_DIR:hp,MITM_DIR:iu}=rr(),{getCertForDomain:Md}=vo(),{getMitmAlias:qd}=xo(),{applyAntigravityIdeVersionOverride:Hd}=Io(),Cr=443,su=process.platform==="win32",hu=Dd;kd();var ou={name:"x-request-source",value:"local"},Gd={"cloudcode-pa.googleapis.com":"daily-cloudcode-pa.googleapis.com"},uu={antigravity:No(),copilot:Ro(),kiro:Oo(),cursor:Fo()},Ln=new Map,pu;function zd(e,t){try{if(Ln.has(e))return t(null,Ln.get(e));let a=Md(e);if(!a)return t(new Error(`Failed to generate cert for ${e}`));let r=require("tls").createSecureContext({key:a.key,cert:`${a.cert}
-${pu}`});Ln.set(e,r),t(null,r)}catch(a){ot(`SNI error for ${e}: ${a.message}`),t(a)}}var gu;try{let e=au.readFileSync(nu.join(iu,"rootCA.key")),t=au.readFileSync(nu.join(iu,"rootCA.crt"));pu=t.toString("utf8"),gu={key:e,cert:t,SNICallback:zd}}catch(e){ot(`Root CA not found: ${e.message}`),process.exit(1)}var kn={},Qd=300*1e3;async function Pn(e){let t=kn[e];if(t&&Date.now()-t.ts<Qd)return t.ip;let a=new Nd.Resolver;a.setServers(["8.8.8.8"]);let n=await wd(a.resolve4.bind(a))(e);return kn[e]={ip:n[0],ts:Date.now()},kn[e].ip}function Yd(e){return new Promise((t,a)=>{let r=[];e.on("data",n=>r.push(n)),e.on("end",()=>t(Buffer.concat(r))),e.on("error",a)})}function $d(e,t){let a=e.match(/\/models\/([^/:]+)/);if(a)return a[1];if(jd(t))return null;try{let r=JSON.parse(t.toString());return r.conversationState?r.conversationState.currentMessage?.userInputMessage?.modelId||null:r.model||null}catch{return null}}function jd(e){if(!e||e.length===0)return!1;let t=e.slice(0,Math.min(100,e.length)),a=0;for(let r=0;r<t.length;r++){let n=t[r];n<32&&n!==9&&n!==10&&n!==13&&a++,n>126&&a++}return a/t.length>.3}function Wd(e,t){if(!t)return null;try{let a=qd(e);if(!a)return null;let r=String(t).replace(/^models\//,""),n=Vd?.[e]?.[r]||r;if(a[n])return a[n];let s=Object.keys(a).find(o=>o&&a[o]&&(n.startsWith(o)||o.startsWith(n)));if(s)return a[s];let i=Fd?.[e]||[];for(let{match:o,alias:u}of i)if(o.test(n)&&a[u])return a[u];return null}catch{return null}}async function er(e,t,a,r){let n=(e.headers.host||Pd[0]).split(":")[0],i=(e.url.includes(":generateContent")||e.url.includes(":streamGenerateContent"))&&Gd[n]||n,o=hu?Ld(e,"passthrough"):null,l=du(e.headers.host)==="antigravity"?Hd(a,e.headers):{bodyBuffer:a,headers:e.headers},f=l.bodyBuffer,c={...l.headers,host:i};f!==a&&(c["content-length"]=String(f.length));try{if(await Xd(i)==="h2")return await Jd(e,t,f,c,i,r,o)}catch(g){ot(`[mitm] ALPN negotiate failed: ${g.message}, fallback to HTTP/1.1`)}return Zd(e,t,f,c,i,r,o)}var Dn=new Map;async function Xd(e){if(Dn.has(e))return Dn.get(e);let t=await Pn(e);return new Promise((a,r)=>{let n=cu.connect({host:t,port:443,servername:e,ALPNProtocols:["h2","http/1.1"],rejectUnauthorized:!1},()=>{let s=n.alpnProtocol||"http/1.1";Dn.set(e,s),Un(`\u{1F517} [mitm] ALPN ${e} \u2192 ${s}`),n.end(),a(s)});n.once("error",r),n.setTimeout(5e3,()=>{n.destroy(new Error("ALPN timeout"))})})}async function Jd(e,t,a,r,n,s,i){let o=await Pn(n),u={};for(let[l,f]of Object.entries(r)){let c=l.toLowerCase();c==="host"||c==="connection"||c==="keep-alive"||c==="transfer-encoding"||c==="upgrade"||c==="proxy-connection"||(u[c]=f)}return u[":method"]=e.method,u[":path"]=e.url,u[":scheme"]="https",u[":authority"]=n,new Promise(l=>{let f=_d.connect(`https://${n}`,{createConnection:()=>cu.connect({host:o,port:443,servername:n,ALPNProtocols:["h2"],rejectUnauthorized:!1})});f.once("error",g=>{ot(`[mitm] http2 client error: ${g.message}`),i&&(i.writeChunk(`
+${pu}`});Ln.set(e,r),t(null,r)}catch(a){ot(`SNI error for ${e}: ${a.message}`),t(a)}}var gu;try{let e=au.readFileSync(nu.join(iu,"rootCA.key")),t=au.readFileSync(nu.join(iu,"rootCA.crt"));pu=t.toString("utf8"),gu={key:e,cert:t,SNICallback:zd}}catch(e){ot(`Root CA not found: ${e.message}`),process.exit(1)}var kn={},Qd=300*1e3;async function Pn(e){let t=kn[e];if(t&&Date.now()-t.ts<Qd)return t.ip;let a=new Nd.Resolver;a.setServers(["8.8.8.8"]);let n=await wd(a.resolve4.bind(a))(e);return kn[e]={ip:n[0],ts:Date.now()},kn[e].ip}function Yd(e){return new Promise((t,a)=>{let r=[];e.on("data",n=>r.push(n)),e.on("end",()=>t(Buffer.concat(r))),e.on("error",a)})}function $d(e,t){let a=e.match(/\/models\/([^/:]+)/);if(a)return a[1];if(jd(t))return null;try{let r=JSON.parse(t.toString());return r.conversationState?r.conversationState.currentMessage?.userInputMessage?.modelId||null:r.model||null}catch{return null}}function jd(e){if(!e||e.length===0)return!1;let t=e.slice(0,Math.min(100,e.length)),a=0;for(let r=0;r<t.length;r++){let n=t[r];(n>=0&&n<=8||n>=11&&n<=12||n>=14&&n<=31||n===127)&&a++}return a/t.length>.3}function Wd(e,t){if(!t)return null;try{let a=qd(e);if(!a)return null;let r=String(t).replace(/^models\//,""),n=Vd?.[e]?.[r]||r;if(a[n])return a[n];let s=Object.keys(a).find(o=>o&&a[o]&&(n.startsWith(o)||o.startsWith(n)));if(s)return a[s];let i=Fd?.[e]||[];for(let{match:o,alias:u}of i)if(o.test(n)&&a[u])return a[u];return null}catch{return null}}async function er(e,t,a,r){let n=(e.headers.host||Pd[0]).split(":")[0],i=(e.url.includes(":generateContent")||e.url.includes(":streamGenerateContent"))&&Gd[n]||n,o=hu?Ld(e,"passthrough"):null,l=du(e.headers.host)==="antigravity"?Hd(a,e.headers):{bodyBuffer:a,headers:e.headers},f=l.bodyBuffer,c={...l.headers,host:i};f!==a&&(c["content-length"]=String(f.length));try{if(await Xd(i)==="h2")return await Jd(e,t,f,c,i,r,o)}catch(g){ot(`[mitm] ALPN negotiate failed: ${g.message}, fallback to HTTP/1.1`)}return Zd(e,t,f,c,i,r,o)}var Dn=new Map;async function Xd(e){if(Dn.has(e))return Dn.get(e);let t=await Pn(e);return new Promise((a,r)=>{let n=cu.connect({host:t,port:443,servername:e,ALPNProtocols:["h2","http/1.1"],rejectUnauthorized:!1},()=>{let s=n.alpnProtocol||"http/1.1";Dn.set(e,s),Un(`\u{1F517} [mitm] ALPN ${e} \u2192 ${s}`),n.end(),a(s)});n.once("error",r),n.setTimeout(5e3,()=>{n.destroy(new Error("ALPN timeout"))})})}async function Jd(e,t,a,r,n,s,i){let o=await Pn(n),u={};for(let[l,f]of Object.entries(r)){let c=l.toLowerCase();c==="host"||c==="connection"||c==="keep-alive"||c==="transfer-encoding"||c==="upgrade"||c==="proxy-connection"||(u[c]=f)}return u[":method"]=e.method,u[":path"]=e.url,u[":scheme"]="https",u[":authority"]=n,new Promise(l=>{let f=_d.connect(`https://${n}`,{createConnection:()=>cu.connect({host:o,port:443,servername:n,ALPNProtocols:["h2"],rejectUnauthorized:!1})});f.once("error",g=>{ot(`[mitm] http2 client error: ${g.message}`),i&&(i.writeChunk(`
 [ERROR h2] ${g.message}
 `),i.end()),t.headersSent||t.writeHead(502),t.writableEnded||t.end("Bad Gateway");try{f.close()}catch{}l()});let c=f.request(u,{endStream:a.length===0});a.length>0&&c.end(a),c.once("response",g=>{let v=g[":status"],y={};for(let[S,I]of Object.entries(g))S.startsWith(":")||S==="connection"||S==="keep-alive"||S==="transfer-encoding"||(y[S]=I);t.writeHead(v,y),i&&i.writeHeader(v,y);let x=[];c.on("data",S=>{i&&i.writeChunk(S),s&&x.push(S),t.write(S)}),c.on("end",()=>{if(i&&i.end(),t.writableEnded||t.end(),s)try{s(Buffer.concat(x),y)}catch{}try{f.close()}catch{}l()})}),c.once("error",g=>{ot(`[mitm] http2 stream error: ${g.message}`),i&&(i.writeChunk(`
 [ERROR h2-stream] ${g.message}

package/cli/cli.js

@@ -948,11 +948,17 @@ function sleepSync(ms) {
   try { Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms); } catch { /* ignore */ }
 }
 
-// Wait until process dies or timeout reached
+// Wait until process dies or timeout reached.
+// ESRCH means gone; EPERM/EACCES means alive but owned by another user (the MITM
+// server runs as root), so it must NOT count as exited or callers skip the
+// SIGKILL escalation and report a stop that never happened.
 function waitForExit(pid, timeoutMs) {
   const deadline = Date.now() + timeoutMs;
   while (Date.now() < deadline) {
-    try { process.kill(pid, 0); } catch { return true; }
+    try { process.kill(pid, 0); }
+    catch (err) {
+      if (err.code !== "EPERM" && err.code !== "EACCES") return true;
+    }
     sleepSync(100);
   }
   return false;

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter-cli",
-  "version": "1.0.183",
+  "version": "1.0.185",
   "private": true,
   "description": "ZevaiRouter CLI - Start and manage ZevaiRouter server",
   "bin": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter",
-  "version": "1.0.183",
+  "version": "1.0.185",
   "description": "Self-hosted AI router: many providers, one OpenAI-compatible /v1 endpoint and dashboard",
   "bin": {
     "zevai": "cli/cli.js"

package/cli/app/.next-cli-build/server/chunks/3104.js

@@ -1,43 +0,0 @@
-"use strict";exports.id=3104,exports.ids=[3104,3159],exports.modules={13808:(a,b,c)=>{c.d(b,{$N:()=>f,OK:()=>g,Zl:()=>h,lz:()=>i});var d=c(55511),e=c.n(d);function f(a=32){return e().randomBytes(a).toString("base64url")}function g(a){return e().createHash("sha256").update(a).digest("base64url")}function h(){return e().randomBytes(32).toString("base64url")}function i(a=32){let b=f(a),c=g(b);return{codeVerifier:b,codeChallenge:c,state:h()}}},22898:(a,b,c)=>{c.d(b,{Hd:()=>k,IF:()=>p,Pd:()=>g,Y0:()=>o,ZP:()=>u,_V:()=>t,cn:()=>l,dR:()=>m,jl:()=>w,nu:()=>x,uw:()=>v});var d=c(81630),e=c.n(d),f=c(1932);function g(a,b=null){return new Promise((c,d)=>{let g=e().createServer((b,c)=>{let d=new f.URL(b.url,"http://localhost");if("/callback"===d.pathname||"/auth/callback"===d.pathname){let b=Object.fromEntries(d.searchParams);c.writeHead(200,{"Content-Type":"text/html; charset=utf-8"}),c.end(`<!DOCTYPE html>
-<html>
-<head>
-  <meta charset="utf-8">
-  <title>Authentication Successful</title>
-  <style>
-    body { font-family: system-ui; display: flex; justify-content: center; align-items: center; height: 100vh; margin: 0; background: #f5f5f5; }
-    .container { text-align: center; padding: 2rem; background: white; border-radius: 8px; box-shadow: 0 2px 10px rgba(0,0,0,0.1); }
-    .success { color: #22c55e; font-size: 3rem; }
-    h1 { margin: 1rem 0; }
-    p { color: #666; }
-    #countdown { font-weight: bold; }
-  </style>
-</head>
-<body>
-  <div class="container">
-    <div class="success">&#10003;</div>
-    <h1>Authentication Successful</h1>
-    <p id="message">Closing in <span id="countdown">3</span> seconds...</p>
-  </div>
-  <script>
-    let count = 3;
-    const countdown = document.getElementById("countdown");
-    const message = document.getElementById("message");
-    const timer = setInterval(() => {
-      count--;
-      countdown.textContent = count;
-      if (count <= 0) {
-        clearInterval(timer);
-        window.close();
-        setTimeout(() => {
-          message.textContent = "Please close this tab manually.";
-        }, 500);
-      }
-    }, 1000);
-  </script>
-</body>
-</html>`),a(b)}else c.writeHead(404),c.end("Not found")});g.listen(b||0,"127.0.0.1",()=>{let{port:a}=g.address();c({server:g,port:a,close:()=>g.close()})}),g.on("error",a=>{"EADDRINUSE"===a.code&&b?d(Error(`Port ${b} is already in use. Please close other applications using this port.`)):d(a)})})}let h=null,i=null,j=new Map;function k({state:a,codeVerifier:b,redirectUri:c}){return!!a&&!!b&&!!c&&(j.set(a,{codeVerifier:b,redirectUri:c,status:"pending",createdAt:Date.now()}),!0)}function l(a){return j.get(a)||null}function m(a){j.delete(a)}function n(a,b){let c=a?"Authentication Successful":"Authentication Failed";return`<!DOCTYPE html>
-<html><head><meta charset="utf-8"><title>${c}</title>
-<style>body{font-family:system-ui;display:flex;justify-content:center;align-items:center;height:100vh;margin:0;background:#f5f5f5}.c{text-align:center;padding:2rem;background:#fff;border-radius:8px;box-shadow:0 2px 10px rgba(0,0,0,.1)}.i{color:${a?"#22c55e":"#ef4444"};font-size:3rem}h1{margin:1rem 0}p{color:#666}</style>
-</head><body><div class="c"><div class="i">${a?"&#10003;":"&#10007;"}</div><h1>${c}</h1><p>${b}</p><p>Closing in <span id="cd">3</span>s...</p>
-<script>let n=3;const c=document.getElementById("cd");const t=setInterval(()=>{n--;c.textContent=n;if(n<=0){clearInterval(t);window.close();}},1000);</script>
-</div></body></html>`}function o(a){return new Promise(b=>{if(h)return void b({success:!0});let d=e().createServer(async(b,d)=>{let e=new f.URL(b.url,"http://localhost");if("/callback"!==e.pathname&&"/auth/callback"!==e.pathname){d.writeHead(404),d.end("Not found");return}let g=e.searchParams.get("code"),h=e.searchParams.get("state"),i=e.searchParams.get("error"),k=h?j.get(h):null;if(k){try{if(i)throw Error(e.searchParams.get("error_description")||i);if(!g)throw Error("No authorization code received");let{exchangeTokens:a}=await Promise.all([c.e(5433),c.e(4404),c.e(2557),c.e(3155),c.e(3110),c.e(318),c.e(8895),c.e(4177)]).then(c.bind(c,74177)),{createProviderConnection:b}=await c.e(1998).then(c.bind(c,71998)),f=await a("codex",g,k.redirectUri,k.codeVerifier,h),j=await b({provider:"codex",authType:"oauth",...f,expiresAt:f.expiresIn?new Date(Date.now()+1e3*f.expiresIn).toISOString():null,testStatus:"active"});k.status="done",k.connectionId=j.id,k.email=j.email,d.writeHead(200,{"Content-Type":"text/html; charset=utf-8"}),d.end(n(!0,"You can close this window."))}catch(a){k.status="error",k.error=a.message,d.writeHead(200,{"Content-Type":"text/html; charset=utf-8"}),d.end(n(!1,a.message))}finally{p()}return}let l=`http://localhost:${a}/callback${e.search}`;d.writeHead(302,{Location:l}),d.end(),p()});d.listen(1455,"127.0.0.1",()=>{h=d,i=setTimeout(()=>p(),3e5),b({success:!0})}),d.on("error",a=>{"EADDRINUSE"===a.code?b({success:!1,reason:"port_busy"}):b({success:!1,reason:a.message})})})}function p(){i&&(clearTimeout(i),i=null),h&&(h.close(),h=null)}let q=null,r=null,s=new Map;function t({state:a,codeVerifier:b,redirectUri:c}){return!!a&&!!b&&!!c&&(s.set(a,{codeVerifier:b,redirectUri:c,status:"pending",createdAt:Date.now()}),!0)}function u(a){return s.get(a)||null}function v(a){s.delete(a)}function w(a){return new Promise(b=>{if(q)return void b({success:!0});let d=e().createServer(async(b,d)=>{let e=new f.URL(b.url,"http://localhost");if("/callback"!==e.pathname&&"/auth/callback"!==e.pathname){d.writeHead(404),d.end("Not found");return}let g=e.searchParams.get("code"),h=e.searchParams.get("state"),i=e.searchParams.get("error"),j=h?s.get(h):null;if(j){try{if(i)throw Error(e.searchParams.get("error_description")||i);if(!g)throw Error("No authorization code received");let{exchangeTokens:a}=await Promise.all([c.e(5433),c.e(4404),c.e(2557),c.e(3155),c.e(3110),c.e(318),c.e(8895),c.e(4177)]).then(c.bind(c,74177)),{createProviderConnection:b}=await c.e(1998).then(c.bind(c,71998)),f=await a("xai",g,j.redirectUri,j.codeVerifier,h),k=await b({provider:"xai",authType:"oauth",...f,expiresAt:f.expiresIn?new Date(Date.now()+1e3*f.expiresIn).toISOString():null,testStatus:"active"});j.status="done",j.connectionId=k.id,j.email=k.email,d.writeHead(200,{"Content-Type":"text/html; charset=utf-8"}),d.end(n(!0,"You can close this window."))}catch(a){j.status="error",j.error=a.message,d.writeHead(200,{"Content-Type":"text/html; charset=utf-8"}),d.end(n(!1,a.message))}finally{x()}return}let k=`http://localhost:${a}/callback${e.search}`;d.writeHead(302,{Location:k}),d.end(),x()});d.listen(56121,"127.0.0.1",()=>{q=d,r=setTimeout(()=>x(),3e5),b({success:!0})}),d.on("error",a=>{"EADDRINUSE"===a.code?b({success:!1,reason:"port_busy"}):b({success:!1,reason:a.message})})})}function x(){r&&(clearTimeout(r),r=null),q&&(q.close(),q=null)}},73159:(a,b,c)=>{c.d(b,{Ue:()=>i,oT:()=>j});let d="https://auth.x.ai",e="/oauth2/authorize",f="/oauth2/token",g="/.well-known/openid-configuration",h="/callback",i=96,j={clientId:"b1a00492-073a-47ea-816f-4c329264a828",issuer:d,authEndpointPath:e,tokenEndpointPath:f,discoveryPath:g,authorizeUrl:`${d}${e}`,tokenUrl:`${d}${f}`,discoveryUrl:`${d}${g}`,scope:"openid profile email offline_access grok-cli:access api:access",apiBaseUrl:"https://api.x.ai/v1",redirectUri:`http://127.0.0.1:56121${h}`,loopbackPort:56121,callbackPath:h,pkceVerifierBytes:96,refreshLeadSeconds:300,userAgent:"grok-cli/zevairouter",codeChallengeMethod:"S256"}},92990:(a,b,c)=>{c.d(b,{DI:()=>g,Hp:()=>i,LT:()=>h,MZ:()=>r,Nl:()=>x,Nu:()=>n,OV:()=>f,Td:()=>u,Tx:()=>o,WN:()=>p,Ww:()=>z,YT:()=>l,ZL:()=>k,cD:()=>m,f7:()=>w,hF:()=>j,lB:()=>s,ne:()=>y,qp:()=>v,t:()=>q,w1:()=>t});var d=c(21820);function e(){let a=(0,d.platform)(),b=(0,d.arch)();return"darwin"===a?"arm64"===b?2:1:"linux"===a?"arm64"===b?4:3:5*("win32"===a)}let f={clientId:"9d1c250a-e61b-44d9-88ed-5944d1962f5e",authorizeUrl:"https://claude.ai/oauth/authorize",tokenUrl:"https://api.anthropic.com/v1/oauth/token",scopes:["org:create_api_key","user:profile","user:inference"],codeChallengeMethod:"S256"},g={clientId:"app_EMoamEEZ73f0CkXaXp7hrann",authorizeUrl:"https://auth.openai.com/oauth/authorize",tokenUrl:"https://auth.openai.com/oauth/token",scope:"openid profile email offline_access",codeChallengeMethod:"S256",extraParams:{id_token_add_organizations:"true",codex_cli_simplified_flow:"true",originator:"codex_cli_rs"}},h={clientId:"681255809395-oo8ft2oprdrnp9e3aqf6av3hmdib135j.apps.googleusercontent.com",clientSecret:"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",authorizeUrl:"https://accounts.google.com/o/oauth2/v2/auth",tokenUrl:"https://oauth2.googleapis.com/token",userInfoUrl:"https://www.googleapis.com/oauth2/v1/userinfo",scopes:["https://www.googleapis.com/auth/cloud-platform","https://www.googleapis.com/auth/userinfo.email","https://www.googleapis.com/auth/userinfo.profile"]},i={clientId:"f0304373b74a44d2b584a3fb70ca9e56",deviceCodeUrl:"https://chat.qwen.ai/api/v1/oauth2/device/code",tokenUrl:"https://chat.qwen.ai/api/v1/oauth2/token",scope:"openid profile email model.completion",codeChallengeMethod:"S256"},j={openApiBaseUrl:"https://openapi.qoder.sh",centerBaseUrl:"https://center.qoder.sh",chatBaseUrl:"https://api3.qoder.sh",deviceTokenUrl:"https://openapi.qoder.sh/api/v1/deviceToken/poll",refreshUrl:"https://center.qoder.sh/algo/api/v3/user/refresh_token",userInfoUrl:"https://openapi.qoder.sh/api/v1/userinfo",quotaUsageUrl:"https://openapi.qoder.sh/api/v2/quota/usage",loginUrl:"https://qoder.com/device/selectAccounts"},k={clientId:"10009311001",clientSecret:"4Z3YjXycVsQvyGF1etiNlIBB4RsqSDtW",authorizeUrl:"https://iflow.cn/oauth",tokenUrl:"https://iflow.cn/oauth/token",userInfoUrl:"https://iflow.cn/api/oauth/getUserInfo",extraParams:{loginMethod:"phone",type:"phone"}},l={clientId:"1071006060591-tmhssin2h21lcre235vtolojh4g403ep.apps.googleusercontent.com",clientSecret:"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",authorizeUrl:"https://accounts.google.com/o/oauth2/v2/auth",tokenUrl:"https://oauth2.googleapis.com/token",userInfoUrl:"https://www.googleapis.com/oauth2/v1/userinfo",scopes:["https://www.googleapis.com/auth/cloud-platform","https://www.googleapis.com/auth/userinfo.email","https://www.googleapis.com/auth/userinfo.profile","https://www.googleapis.com/auth/cclog","https://www.googleapis.com/auth/experimentsandconfigs"],apiEndpoint:"https://cloudcode-pa.googleapis.com",apiVersion:"v1internal",loadCodeAssistEndpoint:"https://cloudcode-pa.googleapis.com/v1internal:loadCodeAssist",onboardUserEndpoint:"https://cloudcode-pa.googleapis.com/v1internal:onboardUser",loadCodeAssistUserAgent:"google-api-nodejs-client/9.15.1",loadCodeAssistApiClient:"google-cloud-sdk vscode_cloudshelleditor/0.1",loadCodeAssistClientMetadata:JSON.stringify({ideType:9,platform:e(),pluginType:2})};function m(){return{ideType:9,platform:e(),pluginType:2}}let n={clientId:"Iv1.b507a08c87ecfe98",deviceCodeUrl:"https://github.com/login/device/code",tokenUrl:"https://github.com/login/oauth/access_token",userInfoUrl:"https://api.github.com/user",scopes:"read:user",apiVersion:"2022-11-28",copilotTokenUrl:"https://api.github.com/copilot_internal/v2/token",userAgent:"GitHubCopilotChat/0.26.7",editorVersion:"vscode/1.85.0",editorPluginVersion:"copilot-chat/0.26.7"},o={ssoOidcEndpoint:"https://oidc.us-east-1.amazonaws.com",registerClientUrl:"https://oidc.us-east-1.amazonaws.com/client/register",deviceAuthUrl:"https://oidc.us-east-1.amazonaws.com/device_authorization",tokenUrl:"https://oidc.us-east-1.amazonaws.com/token",startUrl:"https://view.awsapps.com/start",clientName:"kiro-oauth-client",clientType:"public",scopes:["codewhisperer:completions","codewhisperer:analysis","codewhisperer:conversations"],grantTypes:["urn:ietf:params:oauth:grant-type:device_code","refresh_token"],issuerUrl:"https://identitycenter.amazonaws.com/ssoins-722374e8c3c8e6c6",socialAuthEndpoint:"https://prod.us-east-1.auth.desktop.kiro.dev",socialLoginUrl:"https://prod.us-east-1.auth.desktop.kiro.dev/login",socialTokenUrl:"https://prod.us-east-1.auth.desktop.kiro.dev/oauth/token",socialRefreshUrl:"https://prod.us-east-1.auth.desktop.kiro.dev/refreshToken",authMethods:["builder-id","idc","google","github","import"]},p={apiEndpoint:"https://api2.cursor.sh",chatEndpoint:"/aiserver.v1.ChatService/StreamUnifiedChatWithTools",modelsEndpoint:"/aiserver.v1.AiService/GetDefaultModelNudgeData",api3Endpoint:"https://api3.cursor.sh",agentEndpoint:"https://agent.api5.cursor.sh",agentNonPrivacyEndpoint:"https://agentn.api5.cursor.sh",clientVersion:"3.1.0",clientType:"ide",tokenStoragePaths:{linux:"~/.config/Cursor/User/globalStorage/state.vscdb",macos:"/Users/<user>/Library/Application Support/Cursor/User/globalStorage/state.vscdb",windows:"%APPDATA%\\Cursor\\User\\globalStorage\\state.vscdb"},dbKeys:{accessToken:"cursorAuth/accessToken",machineId:"storage.serviceMachineId"}},q={clientId:process.env.KIMI_CODING_OAUTH_CLIENT_ID||"17e5f671-d194-4dfb-9706-5516cb48c098",deviceCodeUrl:"https://auth.kimi.com/api/oauth/device_authorization",tokenUrl:"https://auth.kimi.com/api/oauth/token"},r={apiBaseUrl:"https://api.kilo.ai",initiateUrl:"https://api.kilo.ai/api/device-auth/codes",pollUrlBase:"https://api.kilo.ai/api/device-auth/codes"},s={appBaseUrl:"https://app.cline.bot",apiBaseUrl:"https://api.cline.bot",authorizeUrl:"https://api.cline.bot/api/v1/auth/authorize",tokenExchangeUrl:"https://api.cline.bot/api/v1/auth/token",refreshUrl:"https://api.cline.bot/api/v1/auth/refresh"},t={appBaseUrl:"https://app.cline.bot",apiBaseUrl:"https://api.cline.bot",authorizeUrl:"https://api.cline.bot/api/v1/auth/authorize",tokenUrl:"https://api.cline.bot/api/v1/auth/token",tokenExchangeUrl:"https://api.cline.bot/api/v1/auth/token",refreshUrl:"https://api.cline.bot/api/v1/auth/refresh"},u={webAppUrl:"https://app.kimchi.dev",validationUrl:"https://api.cast.ai/v1/llm/openai/supported-providers",userInfoUrl:"https://app.kimchi.dev/api/v1/me",modelsUrl:"https://llm.kimchi.dev/v1/models/metadata?include_in_cli=true"},v={clientId:"b1a00492-073a-47ea-816f-4c329264a828",deviceCodeUrl:"https://auth.x.ai/oauth2/device/code",tokenUrl:"https://auth.x.ai/oauth2/token",refreshUrl:"https://auth.x.ai/oauth2/token",scope:"openid profile email offline_access grok-cli:access api:access conversations:read conversations:write",referrer:"grok-build",refreshLeadMs:3e5},w={defaultBaseUrl:"https://gitlab.com",authorizeUrlPath:"/oauth/authorize",tokenUrlPath:"/oauth/token",userInfoUrlPath:"/api/v4/user",scope:"api read_user",codeChallengeMethod:"S256"},x={baseUrl:"https://www.codebuddy.ai",stateUrl:"https://www.codebuddy.ai/v2/plugin/auth/state",tokenUrl:"https://www.codebuddy.ai/v2/plugin/auth/token",accountUrl:"https://www.codebuddy.ai/v2/plugin/login/account",accountsUrl:"https://www.codebuddy.ai/v2/plugin/accounts",refreshUrl:"https://www.codebuddy.ai/v2/plugin/auth/token/refresh",userAgent:"CLI/2.63.2 CodeBuddy/2.63.2",domain:"www.codebuddy.ai",platform:"CLI",pollInterval:5e3},y={baseUrl:"https://www.codebuddy.cn",stateUrl:"https://www.codebuddy.cn/v2/plugin/auth/state",tokenUrl:"https://www.codebuddy.cn/v2/plugin/auth/token",accountUrl:"https://www.codebuddy.cn/v2/plugin/login/account",accountsUrl:"https://www.codebuddy.cn/v2/plugin/accounts",refreshUrl:"https://www.codebuddy.cn/v2/plugin/auth/token/refresh",userAgent:"CLI/2.63.2 CodeBuddy/2.63.2",domain:"www.codebuddy.cn",platform:"CLI",pollInterval:5e3},z=3e5}};

package/cli/app/.next-cli-build/server/chunks/3159.js

@@ -1 +0,0 @@
-"use strict";exports.id=3159,exports.ids=[3159],exports.modules={73159:(a,b,c)=>{c.d(b,{Ue:()=>i,oT:()=>j});let d="https://auth.x.ai",e="/oauth2/authorize",f="/oauth2/token",g="/.well-known/openid-configuration",h="/callback",i=96,j={clientId:"b1a00492-073a-47ea-816f-4c329264a828",issuer:d,authEndpointPath:e,tokenEndpointPath:f,discoveryPath:g,authorizeUrl:`${d}${e}`,tokenUrl:`${d}${f}`,discoveryUrl:`${d}${g}`,scope:"openid profile email offline_access grok-cli:access api:access",apiBaseUrl:"https://api.x.ai/v1",redirectUri:`http://127.0.0.1:56121${h}`,loopbackPort:56121,callbackPath:h,pkceVerifierBytes:96,refreshLeadSeconds:300,userAgent:"grok-cli/zevairouter",codeChallengeMethod:"S256"}}};