zevairouter 1.0.192 → 1.0.194

package/cli/app/.next-cli-build/server/chunks/1051.js

@@ -1 +1 @@
-"use strict";exports.id=1051,exports.ids=[1051,1998],exports.modules={7803:(a,b,c)=>{c.r(b),c.d(b,{debug:()=>f,error:()=>i,info:()=>g,maskKey:()=>m,request:()=>j,response:()=>k,stream:()=>l,warn:()=>h});function d(){return new Date().toLocaleTimeString("en-US",{hour12:!1})}function e(a){if(!a)return"";if("string"==typeof a)return a;try{return JSON.stringify(a)}catch{return String(a)}}function f(a,b,c){!0;{let f=c?` ${e(c)}`:"";console.log(`[${d()}] 🔍 [${a}] ${b}${f}`)}}function g(a,b,c){!0;{let f=c?` ${e(c)}`:"";console.log(`[${d()}] ℹ️  [${a}] ${b}${f}`)}}function h(a,b,c){c&&e(c)}function i(a,b,c){!0;{let f=c?` ${e(c)}`:"";console.log(`[${d()}] ❌ [${a}] ${b}${f}`)}}function j(a,b,c){let f=c?` ${e(c)}`:"";console.log(`\x1b[36m[${d()}] 📥 ${a} ${b}${f}\x1b[0m`)}function k(a,b,c){let f=c?` ${e(c)}`:"";console.log(`[${d()}] ${a<400?"\uD83D\uDCE4":"\uD83D\uDCA5"} ${a} (${b}ms)${f}`)}function l(a,b){let c=b?` ${e(b)}`:"";console.log(`[${d()}] 🌊 [STREAM] ${a}${c}`)}function m(a){return!a||a.length<8?"***":`${a.slice(0,4)}...${a.slice(-4)}`}},19225:(a,b,c)=>{a.exports=c(44870)},39326:(a,b,c)=>{c.d(b,{B:()=>h,p:()=>g});var d=c(71998);function e(a){return null==a?"":String(a).trim()}let f=new Map;function g(a,b,c){if(!a||0===a.length)return null;if(1===a.length)return a[0];if("round-robin"===b){let b=f.get(c)||{index:-1};return b.index=(b.index+1)%a.length,f.set(c,b),a[b.index]}return"random"===b?a[Math.floor(Math.random()*a.length)]:a[0]}async function h(a={}){try{let b=e(a?.proxyPoolId),c="__none__"===b?"":b,f=function(a={}){let b=a?.connectionProxyEnabled===!0,c=e(a?.connectionProxyUrl);return{connectionProxyEnabled:b,connectionProxyUrl:c,connectionNoProxy:e(a?.connectionNoProxy)}}(a);if(c){let a=await (0,d.hr)(c),b=e(a?.proxyUrl),f=e(a?.noProxy);if(a&&!0===a.isActive&&b){if("vercel"===a.type||"cloudflare"===a.type||"deno"===a.type)return{source:a.type,proxyPoolId:c,proxyPool:a,connectionProxyEnabled:!1,connectionProxyUrl:"",connectionNoProxy:f,strictProxy:!0===a.strictProxy,vercelRelayUrl:b};return{source:"pool",proxyPoolId:c,proxyPool:a,connectionProxyEnabled:!0,connectionProxyUrl:b,connectionNoProxy:f,strictProxy:!0===a.strictProxy}}}if(f.connectionProxyEnabled&&f.connectionProxyUrl)return{source:"legacy",proxyPoolId:c||null,proxyPool:null,...f};return{source:"none",proxyPoolId:c||null,proxyPool:null,...f}}catch(a){return console.error("[resolveConnectionProxyConfig] Failed to resolve proxy config:",a),{source:"error",proxyPoolId:null,proxyPool:null,connectionProxyEnabled:!1,connectionProxyUrl:"",connectionNoProxy:"",strictProxy:!1}}}},71998:(a,b,c)=>{c.d(b,{Fh:()=>d.Fh,Kg:()=>d.Kg,L9:()=>d.L9,Mc:()=>d.Mc,OM:()=>d.getModelAliases,Pc:()=>d.Pc,Q_:()=>d.Q_,Qu:()=>d.Qu,S8:()=>d.S8,Yd:()=>d.Yd,ZO:()=>d.ZO,c:()=>d.c,createProviderConnection:()=>d.iE,fK:()=>d.fK,fv:()=>d.deleteModelAlias,getProviderConnections:()=>d.getProviderConnections,ho:()=>d.ho,hr:()=>d.hr,i0:()=>d.i0,o5:()=>d.o5,op:()=>d.op,rj:()=>d.updateProviderConnection,uL:()=>d.uL,ui:()=>d.ui,uv:()=>d.uv});var d=c(89718)},80238:(a,b,c)=>{c.d(b,{Pt:()=>w,Tr:()=>x,c1:()=>t,kI:()=>y,vk:()=>v});var d=c(89718),e=c(39326),f=c(12557),g=c(3662),h=c(29679),i=c(75681),j=c(7803);let k=Promise.resolve(),l=new Set(["policy_suspended","credential_rejected","reauth_required"]),m=new Set(["authentication","entitlement_or_quota","permission_denied","rate_limited","upstream_transient"]),n=new Set(["not_attempted","succeeded","transient_failed","rejected"]);function o(a,b=200){return null==a||""===a?null:String(a).slice(0,b).replace(/[^a-zA-Z0-9._:/#-]/g,"")||null}function p(a){let b=Number(a);return Number.isInteger(b)&&b>=0&&b<=599?b:null}function q(a,b){return({policy_suspended:"Kiro reports that this account is suspended or disabled by upstream policy.",credential_rejected:"Kiro rejected the credential after a successful token refresh.",reauth_required:"Kiro rejected the refresh credential; sign in again before re-enabling.",entitlement_or_quota:"Kiro entitlement or quota is temporarily unavailable.",rate_limited:"Kiro rate limit is temporarily exhausted.",authentication:"Kiro authentication is temporarily unavailable.",permission_denied:"Kiro denied this request without confirming an account suspension.",upstream_transient:"Kiro upstream is temporarily unavailable."})[a]||`Kiro upstream request failed with status ${b||"unknown"}.`}function r(a){return"string"!=typeof a?"":a.trim().replace(/^(?:kiro|kr)\//i,"")}function s(a,b){let c=a?.providerSpecificData?.enabledModels;if(!Array.isArray(c)||0===c.length)return!0;let d=r(b);return c.some(a=>r(a)===d)}async function t(a,b=null,g=null,l={}){let m,n=b instanceof Set?b:b?new Set([b]):new Set,o=l?.preferredConnectionId||null,p=!!l?.strictPreferred,q=k;k=new Promise(a=>{m=a});try{let b;await q;let k=(0,i.rs)(a);if(i.IS[k]?.noAuth){let a=((await (0,d.mt)()).providerStrategies||{})[k]||{},b=a.rotateStrategy||"none",c=a.proxyPoolId||null;if("none"!==b){let a=(await (0,d.ui)({isActive:!0})).filter(a=>a.proxyUrl).map(a=>a.id);c=(0,e.p)(a,b,k)}let f=await (0,e.B)({proxyPoolId:c||""});return{id:"noauth",connectionName:"Public",isActive:!0,accessToken:"public",providerSpecificData:{connectionProxyEnabled:f.connectionProxyEnabled,connectionProxyUrl:f.connectionProxyUrl,connectionNoProxy:f.connectionNoProxy,connectionProxyPoolId:f.proxyPoolId||null,vercelRelayUrl:f.vercelRelayUrl||""}}}let l=await (0,d.getProviderConnections)({provider:k,isActive:!0});j.debug("AUTH",`${a} | total connections: ${l.length}, excludeIds: ${n.size>0?[...n].join(","):"none"}, model: ${g||"any"}`);let m=null;if("kiro"===k&&g)try{m=await (0,h.ED)(g)}catch(a){j.warn("AUTH",`Kiro model support cache unavailable: ${a?.message||a}`)}let r=m?.state==="supported"||m?.state==="unsupported",t={modelUnavailable:!0,provider:k,model:g};if(0===l.length){if(r)return j.warn("AUTH",`${a} | no eligible supporter for ${g}`),t;return j.warn("AUTH",`No credentials for ${a}`),null}let u=l.filter(a=>!a.quarantinedAt),v=new Set,w=new Set,x=!1;if("kiro"===k&&g){let a=u=u.filter(a=>s(a,g)),b=new Set(m?.unsupportedConnectionIds||[]),c=new Set(m?.freshCatalogConnectionIds||[]),d=l.filter(a=>{let c=a?.providerSpecificData?.enabledModels;return Array.isArray(c)&&c.length>0&&s(a,g)&&!b.has(a.id)}).map(a=>a.id),e=new Set([...m?.supportingConnectionIds||[],...d].filter(a=>!b.has(a)));w=new Set([...b,...[...c].filter(a=>!e.has(a))]),u=u.filter(a=>!w.has(a.id)),x=a.length>0&&a.every(a=>w.has(a.id)),e.size>0?(v=e,r=!0):m?.state==="unsupported"&&(u=[])}let y=new Map;if("codebuddy-cn"===k)for(let a of(await (0,d.tV)(k))){let b=(0,f.yH)(a);b&&y.set(a.connectionId,b)}let z=new Map;if("codebuddy-cn"===k)for(let a of l){if(11140!==Number(a.providerErrorCode))continue;let b=(0,f.kJ)(a);b&&z.set(a.id,b)}let A=new Set,B=new Set;if("codex"===k&&g){let a=await (0,d.tV)(k),b=new Map(a.map(a=>[a.connectionId,a]));for(let a of l)(0,f.xB)(a,g,k)&&B.add(a.id),(0,f.N2)(a,g,b.get(a.id),k,{ignoreProbe:!0})&&!B.has(a.id)&&A.add(a.id)}let C=a=>z.has(a.id)||(0,f.Bl)(a,g,k)&&!A.has(a.id),D=a=>B.has(a.id)?new Date(Date.now()+1e3).toISOString():[(0,f.V0)(a,g,k),z.get(a.id)].filter(Boolean).sort().at(-1)||null,E=u.filter(a=>!(n.has(a.id)||C(a)||y.has(a.id))),F=E,G=!1;if("kiro"===k&&g&&!p){let a=E.filter(a=>v.has(a.id));if(a.length>0)F=a;else{let a=E.filter(a=>!v.has(a.id)),b=[...n].filter(a=>!v.has(a)).length;F=a,b>=3?(F=[],G=!0):n.size>0&&0===a.length&&(G=!0)}}if(p&&o){let b=l.find(a=>a.id===o);if(!b)return j.warn("AUTH",`${a} | pinned account not found: ${o}`),null;if(b.quarantinedAt)return j.warn("AUTH",`${a} | pinned account is quarantined: ${b.id?.slice(0,8)}`),null;if(w.has(b.id))return j.warn("AUTH",`${a} | pinned account does not support ${g}: ${b.id?.slice(0,8)}`),t;if(!u.some(a=>a.id===b.id))return j.warn("AUTH",`${a} | pinned account is not eligible for ${g||"this request"}: ${b.id?.slice(0,8)}`),r?t:null;if(n.has(b.id))return j.warn("AUTH",`${a} | pinned account excluded after failure: ${b.id?.slice(0,8)}`),null;if(C(b)||y.has(b.id)){let a=[D(b),y.has(b.id)?new Date(y.get(b.id)).toISOString():null].filter(Boolean).sort().at(-1);return{allRateLimited:!0,retryAfter:a,retryAfterHuman:(0,f.Qo)(a),lastError:b.lastError||"Pinned account unavailable",lastErrorCode:b.errorCode||null}}F=[b]}if(j.debug("AUTH",`${a} | available: ${F.length}/${u.length}`),l.forEach(a=>{let b=n.has(a.id),c=C(a),d=A.has(a.id),e=y.get(a.id),h=!!a.quarantinedAt,i=w.has(a.id);if(b||c||e||d||h||i){let k=(0,f.kJ)(a),l=B.has(a.id);j.debug("AUTH",`  \u2192 ${a.id?.slice(0,8)} | ${b?"excluded":""} ${c?`modelLocked(${g}) until ${k}`:""} ${d?`staleLockRecovered(${g})`:""} ${l?`recoveryProbeInFlight(${g})`:""} ${e?`quotaExhausted until ${new Date(e).toISOString()}`:""} ${h?"quarantined":""} ${i?`unsupported(${g})`:""}`)}}),0===F.length){if(G)return j.warn("AUTH",`${a} | bounded fallback exhausted for ${g}`),null;let b=u.filter(a=>C(a)),c=u.map(a=>[C(a)?D(a):null,y.has(a.id)?new Date(y.get(a.id)).toISOString():null].filter(Boolean).sort().at(-1)).filter(Boolean).sort()[0]||null;if(c){let d=b[0];return j.warn("AUTH",`${a} | all ${u.length} candidate accounts locked for ${g||"all"} (${(0,f.Qo)(c)}) | lastError=${d?.lastError?.slice(0,50)}`),{allRateLimited:!0,retryAfter:c,retryAfterHuman:(0,f.Qo)(c),lastError:d?.lastError||null,lastErrorCode:d?.errorCode||null}}return j.warn("AUTH",`${a} | all ${l.length} accounts unavailable`),r||x?t:null}let H=await (0,d.mt)(),I=(H.providerStrategies||{})[k]||{},J=I.fallbackStrategy||H.fallbackStrategy||"fill-first";if(o&&(b=F.find(a=>a.id===o))&&j.info("AUTH",`${a} | pinned to ${b.id?.slice(0,8)} (${b.name||b.email||"unnamed"})`),b);else if(p&&o)return j.warn("AUTH",`${a} | pinned account unavailable: ${o}`),null;else if("round-robin"===J){let a=I.stickyRoundRobinLimit||H.stickyRoundRobinLimit||3,c=[...F].sort((a,b)=>a.lastUsedAt||b.lastUsedAt?a.lastUsedAt?b.lastUsedAt?new Date(b.lastUsedAt)-new Date(a.lastUsedAt):-1:1:(a.priority||999)-(b.priority||999))[0],e=c?.consecutiveUseCount||0;c&&c.lastUsedAt&&e<a?(b=c,await (0,d.updateProviderConnection)(b.id,{lastUsedAt:new Date().toISOString(),consecutiveUseCount:(b.consecutiveUseCount||0)+1})):(b=[...F].sort((a,b)=>a.lastUsedAt||b.lastUsedAt?a.lastUsedAt?b.lastUsedAt?new Date(a.lastUsedAt)-new Date(b.lastUsedAt):1:-1:(a.priority||999)-(b.priority||999))[0],await (0,d.updateProviderConnection)(b.id,{lastUsedAt:new Date().toISOString(),consecutiveUseCount:1}))}else if("most-quota"===J){let a=await Promise.all(F.map(async a=>{let b=-1;try{let c=await (0,d.getQuotaSnapshot)(a.id);b=(0,f.td)(c?.usage,k,g)}catch{}return{conn:a,remaining:b}}));a.sort((a,b)=>a.remaining!==b.remaining?b.remaining-a.remaining:(a.conn.priority||999)-(b.conn.priority||999)),b=(a.filter(a=>0!==a.remaining)[0]||a[0]).conn,await (0,d.updateProviderConnection)(b.id,{lastUsedAt:new Date().toISOString(),consecutiveUseCount:1})}else if("lowest-latency"===J){let{getLatencyStats:e}=await Promise.resolve().then(c.bind(c,93999)),f=await e(),g=F.map(a=>{let b=f.get(`${a.provider}|${a.id}`)||f.get(`${k}|${a.id}`);return{conn:a,avgMs:b?b.avgMs:null,samples:b?b.samples:0}});g.sort((a,b)=>null===a.avgMs&&null===b.avgMs?(a.conn.priority||999)-(b.conn.priority||999):null===a.avgMs?1:null===b.avgMs?-1:a.avgMs!==b.avgMs?a.avgMs-b.avgMs:(a.conn.priority||999)-(b.conn.priority||999)),b=g[0].conn,j.info("AUTH",`${a} | lowest-latency → ${b.id?.slice(0,8)} (${g[0].avgMs??"?"}ms avg, ${g[0].samples} samples)`),await (0,d.updateProviderConnection)(b.id,{lastUsedAt:new Date().toISOString(),consecutiveUseCount:1})}else b=F[0];if(A.has(b.id)){let a=(0,f.WP)(g,k);await (0,d.updateProviderConnection)(b.id,a),b={...b,...a}}let K=await (0,e.B)(b.providerSpecificData||{});return{authType:b.authType,apiKey:b.apiKey,accessToken:b.accessToken,refreshToken:b.refreshToken,idToken:b.idToken,expiresAt:b.expiresAt,expiresIn:b.expiresIn,lastRefreshAt:b.lastRefreshAt,projectId:b.projectId||b.providerSpecificData?.projectId||null,connectionName:b.displayName||b.name||b.email||b.id,copilotToken:b.providerSpecificData?.copilotToken,providerSpecificData:{...b.providerSpecificData||{},connectionProxyEnabled:K.connectionProxyEnabled,connectionProxyUrl:K.connectionProxyUrl,connectionNoProxy:K.connectionNoProxy,strictProxy:!0===K.strictProxy,connectionProxyPoolId:K.proxyPoolId||null,vercelRelayUrl:K.vercelRelayUrl||""},connectionId:b.id,testStatus:b.testStatus,lastError:b.lastError,_connection:b}}finally{m&&m()}}async function u(a,b,e,h=null,k=null,l=null){let m,n,o;if(!a||"noauth"===a)return{shouldFallback:!1,cooldownMs:0};let p=(0,i.rs)(h),q=(0,f.UM)(k,p);if((0,f.d5)(b,e))return await (0,d.updateProviderConnection)(a,{[q]:null}),j.warn("AUTH",`shared egress/WAF error; fallback without locking account [${b}]`),{shouldFallback:!0,cooldownMs:0};if((0,f.P0)(b,e))return await (0,d.updateProviderConnection)(a,{[q]:null}),j.warn("AUTH",`non-account error; no fallback [${b}] ${"string"==typeof e?e.slice(0,100):"Provider error"}`),{shouldFallback:!1,cooldownMs:0};let r=(await (0,d.getProviderConnections)({provider:p})).find(b=>b.id===a),s=r?.backoffLevel||0,t=(0,f.UO)(e),v="codebuddy-cn"===p&&14018===t,w="codebuddy-cn"===p&&11140===t;if(v){let b=await (0,d.getQuotaSnapshot)(a);l=(0,f.lI)(b?.usage)||l}if(l&&l>Date.now()?(m=!0,n=Math.min(l-Date.now(),g.fh),o=0):{shouldFallback:m,cooldownMs:n,newBackoffLevel:o}=(0,f.hk)(b,e,s),!m)return await (0,d.updateProviderConnection)(a,{[q]:null}),{shouldFallback:!1,cooldownMs:0};let x="string"==typeof e?e.slice(0,100):"Provider error",y=w?null:(0,f.LV)(p,k),z=(0,f.S5)(y,n,p),A=new Date().toISOString();await (0,d.updateProviderConnection)(a,{...z,[q]:null,testStatus:"unavailable",lastError:x,errorCode:b,providerErrorCode:t,modelLockReason:{model:y||"__all",providerErrorCode:t,reason:x,lockedAt:A,resetsAt:new Date(Date.now()+n).toISOString()},lastErrorAt:A,backoffLevel:o??s});let B=Object.keys(z)[0],C=r?.displayName||r?.name||r?.email||a.slice(0,8);if(j.warn("AUTH",`${C} locked ${B} for ${Math.round(n/1e3)}s [${b}]`),h&&c.e(6802).then(c.bind(c,86802)).then(a=>{a.alertProviderDown(h,`${C}: ${x}`),(429===b||x.toLowerCase().includes("quota"))&&a.alertQuotaExhausted(h,C)}).catch(()=>{}),h&&b&&x&&console.error(`\u274c ${h} [${b}]: ${x}`),new Set([401,403]).has(b)&&!v){let c=("string"==typeof e?e:"").toLowerCase(),f=["quota","payment","billing","entitlement","subscription","insufficient_quota"].some(a=>c.includes(a));if(w||!f&&["token expired","token invalid","invalid token","revoked","unauthorized","invalid api key","invalid_api_key","banned","suspended","restricted","account disabled"].some(a=>c.includes(a))){let e=(r?.consecutiveAuthFailures||0)+1;e>=3?(await (0,d.updateProviderConnection)(a,{isActive:!1,autoDisabledAt:new Date().toISOString(),autoDisabledReason:c.includes("banned")||c.includes("suspended")||c.includes("restricted")||c.includes("account disabled")?"banned":"token_expired",consecutiveAuthFailures:e}),j.warn("AUTH",`\u26d4 Auto-disabled ${C} after ${e} consecutive auth failures [${b}]: ${x}`)):(await (0,d.updateProviderConnection)(a,{consecutiveAuthFailures:e}),j.warn("AUTH",`${C} auth failure ${e}/3 [${b}]: ${x}`))}}return{shouldFallback:!0,cooldownMs:n}}async function v(a,b,c,e=null,k=null,r=null,s=null){let t,w,x,y,z,A,B,C=(0,i.rs)(e);if("kiro"!==C)return u(a,b,c,e,k,r);if(!a||"noauth"===a)return{shouldFallback:!1,cooldownMs:0};let D=(0,f.UM)(k,C),E=(y=s&&"object"==typeof s&&!Array.isArray(s)?s:{},A=new Date(z=Number(r??y.resetsAtMs)),B=Number.isFinite(z)&&z>0&&Number.isFinite(A.getTime())?A.toISOString():null,{failureClass:o(y.failureClass,80)?.toLowerCase()||null,providerErrorCode:o(y.providerErrorCode),upstreamRequestId:o(y.upstreamRequestId),failureResetAt:B,authLifecycle:function(a){if(!a||"object"!=typeof a||Array.isArray(a))return null;let b=n.has(a.refreshOutcome)?a.refreshOutcome:"not_attempted";return{initialStatus:p(a.initialStatus),refreshAttempted:!0===a.refreshAttempted,refreshOutcome:b,retryStatus:p(a.retryStatus)}}(y.authLifecycle)}),{failureClass:F}=E;if("shared_egress_waf"===F||(0,f.d5)(b,c))return await (0,d.updateProviderConnection)(a,{[D]:null}),j.warn("AUTH",`Kiro shared egress/WAF error; fallback without account punishment [${b}]`),{shouldFallback:!0,cooldownMs:0};if(function(a,b){if("invalid_model"===a)return!0;let c=String(b||"").toUpperCase();return/INVALID[_-]?MODEL|MODEL[_-]?(?:NOT[_-]?(?:FOUND|SUPPORTED)|UNSUPPORTED)/.test(c)}(F,E.providerErrorCode)){await (0,d.updateProviderConnection)(a,{[D]:null});let b=!1;try{await (0,h.FL)(a,k);let c=(await (0,d.getProviderConnections)({provider:C,isActive:!0})).filter(a=>!a.quarantinedAt).map(a=>a.id);b=!!k&&await (0,h.CY)(k,a,c)}catch(a){j.warn("AUTH",`Kiro model support cache update failed: ${a?.message||a}`)}return j.warn("AUTH",`Kiro model is unsupported by ${a.slice(0,8)}; ${b?"trying a known supporter":"not rotating to an unknown account"}`),{shouldFallback:b,cooldownMs:0}}if(function(a,b){if("invalid_request"===a||"request_error"===a)return!0;let c=String(b||"").toUpperCase();return/INVALID[_-]?(?:REQUEST|ARGUMENT)|VALIDATION|BAD[_-]?REQUEST|MALFORMED/.test(c)}(F,E.providerErrorCode)||(0,f.P0)(b,c))return await (0,d.updateProviderConnection)(a,{[D]:null}),j.warn("AUTH",`Kiro request error; no account lock or credential rotation [${b}]`),{shouldFallback:!1,cooldownMs:0};let G=(await (0,d.getProviderConnections)({provider:C})).find(b=>b.id===a),H=G?.backoffLevel||0,I=E.providerErrorCode||o((0,f.UO)(c)),J=G?.displayName||G?.name||G?.email||a.slice(0,8);if(l.has(F)){let c=new Date().toISOString(),e=q(F,b);return await (0,d.updateProviderConnection)(a,{[D]:null,isActive:!1,testStatus:"unavailable",lastError:e,errorCode:b,failureClass:F,providerErrorCode:I,upstreamRequestId:E.upstreamRequestId,failureResetAt:E.failureResetAt,authLifecycle:E.authLifecycle,quarantinedAt:c,quarantineReason:e,lastErrorAt:c,autoDisabledAt:c,autoDisabledReason:F,consecutiveAuthFailures:Math.max(1,(G?.consecutiveAuthFailures||0)+1),backoffLevel:0}),j.warn("AUTH",`${J} quarantined immediately [${F}]`),{shouldFallback:!0,cooldownMs:0}}let K=Number(r);if(Number.isFinite(K)&&K>Date.now()?(t=!0,w=Math.min(K-Date.now(),g.fh),x=0):{shouldFallback:t,cooldownMs:w,newBackoffLevel:x}=(0,f.hk)(b,c,H),!t)return await (0,d.updateProviderConnection)(a,{[D]:null}),{shouldFallback:!1,cooldownMs:0};let L=m.has(F)||403===b||408===b||429===b||b>=500,M=F||(429===b?"rate_limited":403===b?"permission_denied":b>=500?"upstream_transient":null),N=q(M,b),O=L?null:(0,f.LV)(C,k),P=(0,f.S5)(O,w,C),Q=new Date().toISOString(),R=new Date(Date.now()+w).toISOString();await (0,d.updateProviderConnection)(a,{...P,[D]:null,testStatus:"unavailable",lastError:N,errorCode:b,failureClass:M,providerErrorCode:I,upstreamRequestId:E.upstreamRequestId,failureResetAt:E.failureResetAt,authLifecycle:E.authLifecycle,modelLockReason:{model:O||"__all",providerErrorCode:I,reason:N,lockedAt:Q,resetsAt:R},lastErrorAt:Q,backoffLevel:x??H,consecutiveAuthFailures:0});let S=Object.keys(P)[0];if(j.warn("AUTH",`${J} locked ${S} for ${Math.round(w/1e3)}s [${b}]`),!F&&(401===b||403===b)){let e=("string"==typeof c?c:"").toLowerCase();if(!["quota","payment","billing","entitlement","subscription","insufficient_quota"].some(a=>e.includes(a))&&["token expired","token invalid","invalid token","revoked","unauthorized","invalid api key","invalid_api_key","banned","suspended","restricted","account disabled"].some(a=>e.includes(a))){let c=(G?.consecutiveAuthFailures||0)+1,f=["banned","suspended","restricted","account disabled"].some(a=>e.includes(a));if(c>=3){let e=new Date().toISOString(),g=f?q("policy_suspended",b):"Kiro rejected this credential three consecutive times.";await (0,d.updateProviderConnection)(a,{isActive:!1,quarantinedAt:e,quarantineReason:g,failureClass:f?"policy_suspended":"authentication",autoDisabledAt:e,autoDisabledReason:f?"policy_suspended":"token_expired",consecutiveAuthFailures:c}),j.warn("AUTH",`${J} quarantined after ${c} unstructured auth failures`)}else await (0,d.updateProviderConnection)(a,{consecutiveAuthFailures:c})}}return{shouldFallback:!0,cooldownMs:w}}async function w(a,b,c=null){if(!a||"noauth"===a)return;let e=b._connection||b,g=(0,i.rs)(e.provider),h=(0,f.LV)(g,c),k=Date.now(),l=(0,f.UM)(c,g),m=!1,n=(a,b=!1)=>{if(!a||b&&(a.quarantinedAt||e.quarantinedAt))return null;let d=(a,b)=>{if(!a.startsWith(b))return!1;let d=a.slice(b.length);return"__all"===d||!c||(0,f.LV)(g,d)===h};if(b&&Object.keys(a).some(b=>(d(b,"modelLock_")||d(b,"modelRecoveryProbe_"))&&a[b]!==e[b]&&Date.parse(a[b])>k))return m=!0,null;let i=Object.keys(a).filter(a=>a.startsWith("modelLock_"));if("unavailable"!==a.testStatus&&!a.lastError&&0===i.length)return null;let j=i.filter(d=>{if(b&&a[d]!==e[d])return!1;let i=d.slice(10);if(c&&(0,f.LV)(g,i)===h||c&&"modelLock___all"===d)return!0;let j=a[d];return j&&new Date(j).getTime()<=k});if(0===j.length&&"unavailable"!==a.testStatus&&!a.lastError)return null;let n=i.filter(b=>!j.includes(b)&&Date.parse(a[b])>k),o={...Object.fromEntries(j.map(a=>[a,null]))};return b&&a[l]!==e[l]||(o[l]=null),0===n.length&&Object.assign(o,{testStatus:"active",lastError:null,errorCode:null,providerErrorCode:null,..."kiro"===g?{failureClass:null,upstreamRequestId:null,failureResetAt:null,authLifecycle:null}:{},modelLockReason:null,lastErrorAt:null,backoffLevel:0,consecutiveAuthFailures:0}),o};if("kiro"===g){await (0,d.Op)(a,a=>n(a,!0)),m&&j.debug("AUTH",`Kiro success did not clear newer failure state for ${a.slice(0,8)}`);return}let o=n(e);o&&await (0,d.updateProviderConnection)(a,o)}function x(a){let b=a.headers.get("Authorization");if(b?.startsWith("Bearer "))return b.slice(7);let c=a.headers.get("x-api-key");return c||null}async function y(a){return!!a&&await (0,d.ek)(a)}},92280:(a,b,c)=>{Object.defineProperty(b,"I",{enumerable:!0,get:function(){return g}});let d=c(28208),e=c(47617),f=c(62018);async function g(a,b,c,g){if((0,d.isNodeNextResponse)(b)){var h;b.statusCode=c.status,b.statusMessage=c.statusText;let d=["set-cookie","www-authenticate","proxy-authenticate","vary"];null==(h=c.headers)||h.forEach((a,c)=>{if("x-middleware-set-cookie"!==c.toLowerCase())if("set-cookie"===c.toLowerCase())for(let d of(0,f.splitCookiesString)(a))b.appendHeader(c,d);else{let e=void 0!==b.getHeader(c);(d.includes(c.toLowerCase())||!e)&&b.appendHeader(c,a)}});let{originalResponse:i}=b;c.body&&"HEAD"!==a.method?await (0,e.pipeToNodeResponse)(c.body,i,g):i.end()}}}};
+"use strict";exports.id=1051,exports.ids=[1051,1998],exports.modules={7803:(a,b,c)=>{c.r(b),c.d(b,{debug:()=>f,error:()=>i,info:()=>g,maskKey:()=>m,request:()=>j,response:()=>k,stream:()=>l,warn:()=>h});function d(){return new Date().toLocaleTimeString("en-US",{hour12:!1})}function e(a){if(!a)return"";if("string"==typeof a)return a;try{return JSON.stringify(a)}catch{return String(a)}}function f(a,b,c){!0;{let f=c?` ${e(c)}`:"";console.log(`[${d()}] 🔍 [${a}] ${b}${f}`)}}function g(a,b,c){!0;{let f=c?` ${e(c)}`:"";console.log(`[${d()}] ℹ️  [${a}] ${b}${f}`)}}function h(a,b,c){c&&e(c)}function i(a,b,c){!0;{let f=c?` ${e(c)}`:"";console.log(`[${d()}] ❌ [${a}] ${b}${f}`)}}function j(a,b,c){let f=c?` ${e(c)}`:"";console.log(`\x1b[36m[${d()}] 📥 ${a} ${b}${f}\x1b[0m`)}function k(a,b,c){let f=c?` ${e(c)}`:"";console.log(`[${d()}] ${a<400?"\uD83D\uDCE4":"\uD83D\uDCA5"} ${a} (${b}ms)${f}`)}function l(a,b){let c=b?` ${e(b)}`:"";console.log(`[${d()}] 🌊 [STREAM] ${a}${c}`)}function m(a){return!a||a.length<8?"***":`${a.slice(0,4)}...${a.slice(-4)}`}},19225:(a,b,c)=>{a.exports=c(44870)},39326:(a,b,c)=>{c.d(b,{B:()=>h,p:()=>g});var d=c(71998);function e(a){return null==a?"":String(a).trim()}let f=new Map;function g(a,b,c){if(!a||0===a.length)return null;if(1===a.length)return a[0];if("round-robin"===b){let b=f.get(c)||{index:-1};return b.index=(b.index+1)%a.length,f.set(c,b),a[b.index]}return"random"===b?a[Math.floor(Math.random()*a.length)]:a[0]}async function h(a={}){try{let b=e(a?.proxyPoolId),c="__none__"===b?"":b,f=function(a={}){let b=a?.connectionProxyEnabled===!0,c=e(a?.connectionProxyUrl);return{connectionProxyEnabled:b,connectionProxyUrl:c,connectionNoProxy:e(a?.connectionNoProxy)}}(a);if(c){let a=await (0,d.hr)(c),b=e(a?.proxyUrl),f=e(a?.noProxy);if(a&&!0===a.isActive&&b){if("vercel"===a.type||"cloudflare"===a.type||"deno"===a.type)return{source:a.type,proxyPoolId:c,proxyPool:a,connectionProxyEnabled:!1,connectionProxyUrl:"",connectionNoProxy:f,strictProxy:!0===a.strictProxy,vercelRelayUrl:b};return{source:"pool",proxyPoolId:c,proxyPool:a,connectionProxyEnabled:!0,connectionProxyUrl:b,connectionNoProxy:f,strictProxy:!0===a.strictProxy}}}if(f.connectionProxyEnabled&&f.connectionProxyUrl)return{source:"legacy",proxyPoolId:c||null,proxyPool:null,...f};return{source:"none",proxyPoolId:c||null,proxyPool:null,...f}}catch(a){return console.error("[resolveConnectionProxyConfig] Failed to resolve proxy config:",a),{source:"error",proxyPoolId:null,proxyPool:null,connectionProxyEnabled:!1,connectionProxyUrl:"",connectionNoProxy:"",strictProxy:!1}}}},71998:(a,b,c)=>{c.d(b,{Fh:()=>d.Fh,Kg:()=>d.Kg,L9:()=>d.L9,Mc:()=>d.Mc,OM:()=>d.getModelAliases,Pc:()=>d.Pc,Q_:()=>d.Q_,Qu:()=>d.Qu,S8:()=>d.S8,Yd:()=>d.Yd,ZO:()=>d.ZO,c:()=>d.c,createProviderConnection:()=>d.iE,fK:()=>d.fK,fv:()=>d.deleteModelAlias,getProviderConnections:()=>d.getProviderConnections,ho:()=>d.ho,hr:()=>d.hr,i0:()=>d.i0,o5:()=>d.o5,op:()=>d.op,rj:()=>d.updateProviderConnection,uL:()=>d.uL,ui:()=>d.ui,uv:()=>d.uv});var d=c(89718)},80238:(a,b,c)=>{c.d(b,{Pt:()=>w,Tr:()=>x,c1:()=>t,kI:()=>y,vk:()=>v});var d=c(89718),e=c(39326),f=c(12557),g=c(3662),h=c(29679),i=c(75681),j=c(7803);let k=Promise.resolve(),l=new Set(["policy_suspended","credential_rejected","reauth_required"]),m=new Set(["authentication","entitlement_or_quota","permission_denied","rate_limited","upstream_transient"]),n=new Set(["not_attempted","succeeded","transient_failed","rejected"]);function o(a,b=200){return null==a||""===a?null:String(a).slice(0,b).replace(/[^a-zA-Z0-9._:/#-]/g,"")||null}function p(a){let b=Number(a);return Number.isInteger(b)&&b>=0&&b<=599?b:null}function q(a,b){return({policy_suspended:"Kiro reports that this account is suspended or disabled by upstream policy.",credential_rejected:"Kiro rejected the credential after a successful token refresh.",reauth_required:"Kiro rejected the refresh credential; sign in again before re-enabling.",entitlement_or_quota:"Kiro entitlement or quota is temporarily unavailable.",rate_limited:"Kiro rate limit is temporarily exhausted.",authentication:"Kiro authentication is temporarily unavailable.",permission_denied:"Kiro denied this request without confirming an account suspension.",upstream_transient:"Kiro upstream is temporarily unavailable."})[a]||`Kiro upstream request failed with status ${b||"unknown"}.`}function r(a){return"string"!=typeof a?"":a.trim().replace(/^(?:kiro|kr)\//i,"")}function s(a,b){let c=a?.providerSpecificData?.enabledModels;if(!Array.isArray(c)||0===c.length)return!0;let d=r(b);return c.some(a=>r(a)===d)}async function t(a,b=null,g=null,l={}){let m,n=b instanceof Set?b:b?new Set([b]):new Set,o=l?.preferredConnectionId||null,p=!!l?.strictPreferred,q=k;k=new Promise(a=>{m=a});try{let b;await q;let k=(0,i.rs)(a);if(i.IS[k]?.noAuth){let a=((await (0,d.mt)()).providerStrategies||{})[k]||{},b=a.rotateStrategy||"none",c=a.proxyPoolId||null;if("none"!==b){let a=(await (0,d.ui)({isActive:!0})).filter(a=>a.proxyUrl).map(a=>a.id);c=(0,e.p)(a,b,k)}let f=await (0,e.B)({proxyPoolId:c||""});return{id:"noauth",connectionName:"Public",isActive:!0,accessToken:"public",providerSpecificData:{connectionProxyEnabled:f.connectionProxyEnabled,connectionProxyUrl:f.connectionProxyUrl,connectionNoProxy:f.connectionNoProxy,connectionProxyPoolId:f.proxyPoolId||null,vercelRelayUrl:f.vercelRelayUrl||""}}}let m=await (0,d.getProviderConnections)({provider:k,isActive:!0}),r=Array.isArray(l?.allowedConnectionIds)?l.allowedConnectionIds:null;if(!r&&l?.apiKey&&(r=await (0,d.ME)(l.apiKey)),Array.isArray(r)&&r.length>0){let b=new Set(r);m=m.filter(a=>b.has(a.id)),j.debug("AUTH",`${a} | API key scoped to ${m.length} allowed connection(s)`)}j.debug("AUTH",`${a} | total connections: ${m.length}, excludeIds: ${n.size>0?[...n].join(","):"none"}, model: ${g||"any"}`);let t=null;if("kiro"===k&&g)try{t=await (0,h.ED)(g)}catch(a){j.warn("AUTH",`Kiro model support cache unavailable: ${a?.message||a}`)}let u=t?.state==="supported"||t?.state==="unsupported",v={modelUnavailable:!0,provider:k,model:g};if(0===m.length){if(u)return j.warn("AUTH",`${a} | no eligible supporter for ${g}`),v;return j.warn("AUTH",`No credentials for ${a}`),null}let w=m.filter(a=>!a.quarantinedAt),x=new Set,y=new Set,z=!1;if("kiro"===k&&g){let a=w=w.filter(a=>s(a,g)),b=new Set(t?.unsupportedConnectionIds||[]),c=new Set(t?.freshCatalogConnectionIds||[]),d=m.filter(a=>{let c=a?.providerSpecificData?.enabledModels;return Array.isArray(c)&&c.length>0&&s(a,g)&&!b.has(a.id)}).map(a=>a.id),e=new Set([...t?.supportingConnectionIds||[],...d].filter(a=>!b.has(a)));y=new Set([...b,...[...c].filter(a=>!e.has(a))]),w=w.filter(a=>!y.has(a.id)),z=a.length>0&&a.every(a=>y.has(a.id)),e.size>0?(x=e,u=!0):t?.state==="unsupported"&&(w=[])}let A=new Map;if("codebuddy-cn"===k)for(let a of(await (0,d.tV)(k))){let b=(0,f.yH)(a);b&&A.set(a.connectionId,b)}let B=new Map;if("codebuddy-cn"===k)for(let a of m){if(11140!==Number(a.providerErrorCode))continue;let b=(0,f.kJ)(a);b&&B.set(a.id,b)}let C=new Set,D=new Set;if("codex"===k&&g){let a=await (0,d.tV)(k),b=new Map(a.map(a=>[a.connectionId,a]));for(let a of m)(0,f.xB)(a,g,k)&&D.add(a.id),(0,f.N2)(a,g,b.get(a.id),k,{ignoreProbe:!0})&&!D.has(a.id)&&C.add(a.id)}let E=a=>B.has(a.id)||(0,f.Bl)(a,g,k)&&!C.has(a.id),F=a=>D.has(a.id)?new Date(Date.now()+1e3).toISOString():[(0,f.V0)(a,g,k),B.get(a.id)].filter(Boolean).sort().at(-1)||null,G=w.filter(a=>!(n.has(a.id)||E(a)||A.has(a.id))),H=G,I=!1;if("kiro"===k&&g&&!p){let a=G.filter(a=>x.has(a.id));if(a.length>0)H=a;else{let a=G.filter(a=>!x.has(a.id)),b=[...n].filter(a=>!x.has(a)).length;H=a,b>=3?(H=[],I=!0):n.size>0&&0===a.length&&(I=!0)}}if(p&&o){let b=m.find(a=>a.id===o);if(!b)return j.warn("AUTH",`${a} | pinned account not found: ${o}`),null;if(b.quarantinedAt)return j.warn("AUTH",`${a} | pinned account is quarantined: ${b.id?.slice(0,8)}`),null;if(y.has(b.id))return j.warn("AUTH",`${a} | pinned account does not support ${g}: ${b.id?.slice(0,8)}`),v;if(!w.some(a=>a.id===b.id))return j.warn("AUTH",`${a} | pinned account is not eligible for ${g||"this request"}: ${b.id?.slice(0,8)}`),u?v:null;if(n.has(b.id))return j.warn("AUTH",`${a} | pinned account excluded after failure: ${b.id?.slice(0,8)}`),null;if(E(b)||A.has(b.id)){let a=[F(b),A.has(b.id)?new Date(A.get(b.id)).toISOString():null].filter(Boolean).sort().at(-1);return{allRateLimited:!0,retryAfter:a,retryAfterHuman:(0,f.Qo)(a),lastError:b.lastError||"Pinned account unavailable",lastErrorCode:b.errorCode||null}}H=[b]}if(j.debug("AUTH",`${a} | available: ${H.length}/${w.length}`),m.forEach(a=>{let b=n.has(a.id),c=E(a),d=C.has(a.id),e=A.get(a.id),h=!!a.quarantinedAt,i=y.has(a.id);if(b||c||e||d||h||i){let k=(0,f.kJ)(a),l=D.has(a.id);j.debug("AUTH",`  \u2192 ${a.id?.slice(0,8)} | ${b?"excluded":""} ${c?`modelLocked(${g}) until ${k}`:""} ${d?`staleLockRecovered(${g})`:""} ${l?`recoveryProbeInFlight(${g})`:""} ${e?`quotaExhausted until ${new Date(e).toISOString()}`:""} ${h?"quarantined":""} ${i?`unsupported(${g})`:""}`)}}),0===H.length){if(I)return j.warn("AUTH",`${a} | bounded fallback exhausted for ${g}`),null;let b=w.filter(a=>E(a)),c=w.map(a=>[E(a)?F(a):null,A.has(a.id)?new Date(A.get(a.id)).toISOString():null].filter(Boolean).sort().at(-1)).filter(Boolean).sort()[0]||null;if(c){let d=b[0];return j.warn("AUTH",`${a} | all ${w.length} candidate accounts locked for ${g||"all"} (${(0,f.Qo)(c)}) | lastError=${d?.lastError?.slice(0,50)}`),{allRateLimited:!0,retryAfter:c,retryAfterHuman:(0,f.Qo)(c),lastError:d?.lastError||null,lastErrorCode:d?.errorCode||null}}return j.warn("AUTH",`${a} | all ${m.length} accounts unavailable`),u||z?v:null}let J=await (0,d.mt)(),K=(J.providerStrategies||{})[k]||{},L=K.fallbackStrategy||J.fallbackStrategy||"fill-first";if(o&&(b=H.find(a=>a.id===o))&&j.info("AUTH",`${a} | pinned to ${b.id?.slice(0,8)} (${b.name||b.email||"unnamed"})`),b);else if(p&&o)return j.warn("AUTH",`${a} | pinned account unavailable: ${o}`),null;else if("round-robin"===L){let a=K.stickyRoundRobinLimit||J.stickyRoundRobinLimit||3,c=[...H].sort((a,b)=>a.lastUsedAt||b.lastUsedAt?a.lastUsedAt?b.lastUsedAt?new Date(b.lastUsedAt)-new Date(a.lastUsedAt):-1:1:(a.priority||999)-(b.priority||999))[0],e=c?.consecutiveUseCount||0;c&&c.lastUsedAt&&e<a?(b=c,await (0,d.updateProviderConnection)(b.id,{lastUsedAt:new Date().toISOString(),consecutiveUseCount:(b.consecutiveUseCount||0)+1})):(b=[...H].sort((a,b)=>a.lastUsedAt||b.lastUsedAt?a.lastUsedAt?b.lastUsedAt?new Date(a.lastUsedAt)-new Date(b.lastUsedAt):1:-1:(a.priority||999)-(b.priority||999))[0],await (0,d.updateProviderConnection)(b.id,{lastUsedAt:new Date().toISOString(),consecutiveUseCount:1}))}else if("most-quota"===L){let a=await Promise.all(H.map(async a=>{let b=-1;try{let c=await (0,d.getQuotaSnapshot)(a.id);b=(0,f.td)(c?.usage,k,g)}catch{}return{conn:a,remaining:b}}));a.sort((a,b)=>a.remaining!==b.remaining?b.remaining-a.remaining:(a.conn.priority||999)-(b.conn.priority||999)),b=(a.filter(a=>0!==a.remaining)[0]||a[0]).conn,await (0,d.updateProviderConnection)(b.id,{lastUsedAt:new Date().toISOString(),consecutiveUseCount:1})}else if("lowest-latency"===L){let{getLatencyStats:e}=await Promise.resolve().then(c.bind(c,93999)),f=await e(),g=H.map(a=>{let b=f.get(`${a.provider}|${a.id}`)||f.get(`${k}|${a.id}`);return{conn:a,avgMs:b?b.avgMs:null,samples:b?b.samples:0}});g.sort((a,b)=>null===a.avgMs&&null===b.avgMs?(a.conn.priority||999)-(b.conn.priority||999):null===a.avgMs?1:null===b.avgMs?-1:a.avgMs!==b.avgMs?a.avgMs-b.avgMs:(a.conn.priority||999)-(b.conn.priority||999)),b=g[0].conn,j.info("AUTH",`${a} | lowest-latency → ${b.id?.slice(0,8)} (${g[0].avgMs??"?"}ms avg, ${g[0].samples} samples)`),await (0,d.updateProviderConnection)(b.id,{lastUsedAt:new Date().toISOString(),consecutiveUseCount:1})}else b=H[0];if(C.has(b.id)){let a=(0,f.WP)(g,k);await (0,d.updateProviderConnection)(b.id,a),b={...b,...a}}let M=await (0,e.B)(b.providerSpecificData||{});return{authType:b.authType,apiKey:b.apiKey,accessToken:b.accessToken,refreshToken:b.refreshToken,idToken:b.idToken,expiresAt:b.expiresAt,expiresIn:b.expiresIn,lastRefreshAt:b.lastRefreshAt,projectId:b.projectId||b.providerSpecificData?.projectId||null,connectionName:b.displayName||b.name||b.email||b.id,copilotToken:b.providerSpecificData?.copilotToken,providerSpecificData:{...b.providerSpecificData||{},connectionProxyEnabled:M.connectionProxyEnabled,connectionProxyUrl:M.connectionProxyUrl,connectionNoProxy:M.connectionNoProxy,strictProxy:!0===M.strictProxy,connectionProxyPoolId:M.proxyPoolId||null,vercelRelayUrl:M.vercelRelayUrl||""},connectionId:b.id,testStatus:b.testStatus,lastError:b.lastError,_connection:b}}finally{m&&m()}}async function u(a,b,e,h=null,k=null,l=null){let m,n,o;if(!a||"noauth"===a)return{shouldFallback:!1,cooldownMs:0};let p=(0,i.rs)(h),q=(0,f.UM)(k,p);if((0,f.d5)(b,e))return await (0,d.updateProviderConnection)(a,{[q]:null}),j.warn("AUTH",`shared egress/WAF error; fallback without locking account [${b}]`),{shouldFallback:!0,cooldownMs:0};if((0,f.P0)(b,e))return await (0,d.updateProviderConnection)(a,{[q]:null}),j.warn("AUTH",`non-account error; no fallback [${b}] ${"string"==typeof e?e.slice(0,100):"Provider error"}`),{shouldFallback:!1,cooldownMs:0};let r=(await (0,d.getProviderConnections)({provider:p})).find(b=>b.id===a),s=r?.backoffLevel||0,t=(0,f.UO)(e),v="codebuddy-cn"===p&&14018===t,w="codebuddy-cn"===p&&11140===t;if(v){let b=await (0,d.getQuotaSnapshot)(a);l=(0,f.lI)(b?.usage)||l}if(l&&l>Date.now()?(m=!0,n=Math.min(l-Date.now(),g.fh),o=0):{shouldFallback:m,cooldownMs:n,newBackoffLevel:o}=(0,f.hk)(b,e,s),!m)return await (0,d.updateProviderConnection)(a,{[q]:null}),{shouldFallback:!1,cooldownMs:0};let x="string"==typeof e?e.slice(0,100):"Provider error",y=w?null:(0,f.LV)(p,k),z=(0,f.S5)(y,n,p),A=new Date().toISOString();await (0,d.updateProviderConnection)(a,{...z,[q]:null,testStatus:"unavailable",lastError:x,errorCode:b,providerErrorCode:t,modelLockReason:{model:y||"__all",providerErrorCode:t,reason:x,lockedAt:A,resetsAt:new Date(Date.now()+n).toISOString()},lastErrorAt:A,backoffLevel:o??s});let B=Object.keys(z)[0],C=r?.displayName||r?.name||r?.email||a.slice(0,8);if(j.warn("AUTH",`${C} locked ${B} for ${Math.round(n/1e3)}s [${b}]`),h&&c.e(6802).then(c.bind(c,86802)).then(a=>{a.alertProviderDown(h,`${C}: ${x}`),(429===b||x.toLowerCase().includes("quota"))&&a.alertQuotaExhausted(h,C)}).catch(()=>{}),h&&b&&x&&console.error(`\u274c ${h} [${b}]: ${x}`),new Set([401,403]).has(b)&&!v){let c=("string"==typeof e?e:"").toLowerCase(),f=["quota","payment","billing","entitlement","subscription","insufficient_quota"].some(a=>c.includes(a));if(w||!f&&["token expired","token invalid","invalid token","revoked","unauthorized","invalid api key","invalid_api_key","banned","suspended","restricted","account disabled"].some(a=>c.includes(a))){let e=(r?.consecutiveAuthFailures||0)+1;e>=3?(await (0,d.updateProviderConnection)(a,{isActive:!1,autoDisabledAt:new Date().toISOString(),autoDisabledReason:c.includes("banned")||c.includes("suspended")||c.includes("restricted")||c.includes("account disabled")?"banned":"token_expired",consecutiveAuthFailures:e}),j.warn("AUTH",`\u26d4 Auto-disabled ${C} after ${e} consecutive auth failures [${b}]: ${x}`)):(await (0,d.updateProviderConnection)(a,{consecutiveAuthFailures:e}),j.warn("AUTH",`${C} auth failure ${e}/3 [${b}]: ${x}`))}}return{shouldFallback:!0,cooldownMs:n}}async function v(a,b,c,e=null,k=null,r=null,s=null){let t,w,x,y,z,A,B,C=(0,i.rs)(e);if("kiro"!==C)return u(a,b,c,e,k,r);if(!a||"noauth"===a)return{shouldFallback:!1,cooldownMs:0};let D=(0,f.UM)(k,C),E=(y=s&&"object"==typeof s&&!Array.isArray(s)?s:{},A=new Date(z=Number(r??y.resetsAtMs)),B=Number.isFinite(z)&&z>0&&Number.isFinite(A.getTime())?A.toISOString():null,{failureClass:o(y.failureClass,80)?.toLowerCase()||null,providerErrorCode:o(y.providerErrorCode),upstreamRequestId:o(y.upstreamRequestId),failureResetAt:B,authLifecycle:function(a){if(!a||"object"!=typeof a||Array.isArray(a))return null;let b=n.has(a.refreshOutcome)?a.refreshOutcome:"not_attempted";return{initialStatus:p(a.initialStatus),refreshAttempted:!0===a.refreshAttempted,refreshOutcome:b,retryStatus:p(a.retryStatus)}}(y.authLifecycle)}),{failureClass:F}=E;if("shared_egress_waf"===F||(0,f.d5)(b,c))return await (0,d.updateProviderConnection)(a,{[D]:null}),j.warn("AUTH",`Kiro shared egress/WAF error; fallback without account punishment [${b}]`),{shouldFallback:!0,cooldownMs:0};if(function(a,b){if("invalid_model"===a)return!0;let c=String(b||"").toUpperCase();return/INVALID[_-]?MODEL|MODEL[_-]?(?:NOT[_-]?(?:FOUND|SUPPORTED)|UNSUPPORTED)/.test(c)}(F,E.providerErrorCode)){await (0,d.updateProviderConnection)(a,{[D]:null});let b=!1;try{await (0,h.FL)(a,k);let c=(await (0,d.getProviderConnections)({provider:C,isActive:!0})).filter(a=>!a.quarantinedAt).map(a=>a.id);b=!!k&&await (0,h.CY)(k,a,c)}catch(a){j.warn("AUTH",`Kiro model support cache update failed: ${a?.message||a}`)}return j.warn("AUTH",`Kiro model is unsupported by ${a.slice(0,8)}; ${b?"trying a known supporter":"not rotating to an unknown account"}`),{shouldFallback:b,cooldownMs:0}}if(function(a,b){if("invalid_request"===a||"request_error"===a)return!0;let c=String(b||"").toUpperCase();return/INVALID[_-]?(?:REQUEST|ARGUMENT)|VALIDATION|BAD[_-]?REQUEST|MALFORMED/.test(c)}(F,E.providerErrorCode)||(0,f.P0)(b,c))return await (0,d.updateProviderConnection)(a,{[D]:null}),j.warn("AUTH",`Kiro request error; no account lock or credential rotation [${b}]`),{shouldFallback:!1,cooldownMs:0};let G=(await (0,d.getProviderConnections)({provider:C})).find(b=>b.id===a),H=G?.backoffLevel||0,I=E.providerErrorCode||o((0,f.UO)(c)),J=G?.displayName||G?.name||G?.email||a.slice(0,8);if(l.has(F)){let c=new Date().toISOString(),e=q(F,b);return await (0,d.updateProviderConnection)(a,{[D]:null,isActive:!1,testStatus:"unavailable",lastError:e,errorCode:b,failureClass:F,providerErrorCode:I,upstreamRequestId:E.upstreamRequestId,failureResetAt:E.failureResetAt,authLifecycle:E.authLifecycle,quarantinedAt:c,quarantineReason:e,lastErrorAt:c,autoDisabledAt:c,autoDisabledReason:F,consecutiveAuthFailures:Math.max(1,(G?.consecutiveAuthFailures||0)+1),backoffLevel:0}),j.warn("AUTH",`${J} quarantined immediately [${F}]`),{shouldFallback:!0,cooldownMs:0}}let K=Number(r);if(Number.isFinite(K)&&K>Date.now()?(t=!0,w=Math.min(K-Date.now(),g.fh),x=0):{shouldFallback:t,cooldownMs:w,newBackoffLevel:x}=(0,f.hk)(b,c,H),!t)return await (0,d.updateProviderConnection)(a,{[D]:null}),{shouldFallback:!1,cooldownMs:0};let L=m.has(F)||403===b||408===b||429===b||b>=500,M=F||(429===b?"rate_limited":403===b?"permission_denied":b>=500?"upstream_transient":null),N=q(M,b),O=L?null:(0,f.LV)(C,k),P=(0,f.S5)(O,w,C),Q=new Date().toISOString(),R=new Date(Date.now()+w).toISOString();await (0,d.updateProviderConnection)(a,{...P,[D]:null,testStatus:"unavailable",lastError:N,errorCode:b,failureClass:M,providerErrorCode:I,upstreamRequestId:E.upstreamRequestId,failureResetAt:E.failureResetAt,authLifecycle:E.authLifecycle,modelLockReason:{model:O||"__all",providerErrorCode:I,reason:N,lockedAt:Q,resetsAt:R},lastErrorAt:Q,backoffLevel:x??H,consecutiveAuthFailures:0});let S=Object.keys(P)[0];if(j.warn("AUTH",`${J} locked ${S} for ${Math.round(w/1e3)}s [${b}]`),!F&&(401===b||403===b)){let e=("string"==typeof c?c:"").toLowerCase();if(!["quota","payment","billing","entitlement","subscription","insufficient_quota"].some(a=>e.includes(a))&&["token expired","token invalid","invalid token","revoked","unauthorized","invalid api key","invalid_api_key","banned","suspended","restricted","account disabled"].some(a=>e.includes(a))){let c=(G?.consecutiveAuthFailures||0)+1,f=["banned","suspended","restricted","account disabled"].some(a=>e.includes(a));if(c>=3){let e=new Date().toISOString(),g=f?q("policy_suspended",b):"Kiro rejected this credential three consecutive times.";await (0,d.updateProviderConnection)(a,{isActive:!1,quarantinedAt:e,quarantineReason:g,failureClass:f?"policy_suspended":"authentication",autoDisabledAt:e,autoDisabledReason:f?"policy_suspended":"token_expired",consecutiveAuthFailures:c}),j.warn("AUTH",`${J} quarantined after ${c} unstructured auth failures`)}else await (0,d.updateProviderConnection)(a,{consecutiveAuthFailures:c})}}return{shouldFallback:!0,cooldownMs:w}}async function w(a,b,c=null){if(!a||"noauth"===a)return;let e=b._connection||b,g=(0,i.rs)(e.provider),h=(0,f.LV)(g,c),k=Date.now(),l=(0,f.UM)(c,g),m=!1,n=(a,b=!1)=>{if(!a||b&&(a.quarantinedAt||e.quarantinedAt))return null;let d=(a,b)=>{if(!a.startsWith(b))return!1;let d=a.slice(b.length);return"__all"===d||!c||(0,f.LV)(g,d)===h};if(b&&Object.keys(a).some(b=>(d(b,"modelLock_")||d(b,"modelRecoveryProbe_"))&&a[b]!==e[b]&&Date.parse(a[b])>k))return m=!0,null;let i=Object.keys(a).filter(a=>a.startsWith("modelLock_"));if("unavailable"!==a.testStatus&&!a.lastError&&0===i.length)return null;let j=i.filter(d=>{if(b&&a[d]!==e[d])return!1;let i=d.slice(10);if(c&&(0,f.LV)(g,i)===h||c&&"modelLock___all"===d)return!0;let j=a[d];return j&&new Date(j).getTime()<=k});if(0===j.length&&"unavailable"!==a.testStatus&&!a.lastError)return null;let n=i.filter(b=>!j.includes(b)&&Date.parse(a[b])>k),o={...Object.fromEntries(j.map(a=>[a,null]))};return b&&a[l]!==e[l]||(o[l]=null),0===n.length&&Object.assign(o,{testStatus:"active",lastError:null,errorCode:null,providerErrorCode:null,..."kiro"===g?{failureClass:null,upstreamRequestId:null,failureResetAt:null,authLifecycle:null}:{},modelLockReason:null,lastErrorAt:null,backoffLevel:0,consecutiveAuthFailures:0}),o};if("kiro"===g){await (0,d.Op)(a,a=>n(a,!0)),m&&j.debug("AUTH",`Kiro success did not clear newer failure state for ${a.slice(0,8)}`);return}let o=n(e);o&&await (0,d.updateProviderConnection)(a,o)}function x(a){let b=a.headers.get("Authorization");if(b?.startsWith("Bearer "))return b.slice(7);let c=a.headers.get("x-api-key");return c||null}async function y(a){return!!a&&await (0,d.ek)(a)}},92280:(a,b,c)=>{Object.defineProperty(b,"I",{enumerable:!0,get:function(){return g}});let d=c(28208),e=c(47617),f=c(62018);async function g(a,b,c,g){if((0,d.isNodeNextResponse)(b)){var h;b.statusCode=c.status,b.statusMessage=c.statusText;let d=["set-cookie","www-authenticate","proxy-authenticate","vary"];null==(h=c.headers)||h.forEach((a,c)=>{if("x-middleware-set-cookie"!==c.toLowerCase())if("set-cookie"===c.toLowerCase())for(let d of(0,f.splitCookiesString)(a))b.appendHeader(c,d);else{let e=void 0!==b.getHeader(c);(d.includes(c.toLowerCase())||!e)&&b.appendHeader(c,a)}});let{originalResponse:i}=b;c.body&&"HEAD"!==a.method?await (0,e.pipeToNodeResponse)(c.body,i,g):i.end()}}}};