zidane 7.2.4 → 8.0.4

package/dist/cred-keys-GpBg71cP.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cred-keys-GpBg71cP.js","names":[],"sources":["../src/chat/cred-keys.ts"],"sourcesContent":["/**\n * Credential-file key arithmetic, split from `./credentials` so the rules can\n * be enforced where credentials themselves must not be pulled in.\n *\n * `./credentials` reaches the provider registry (and through it the pi-ai\n * factories) for `credKeyOf`; the extension loader — an edge entrypoint that\n * validates descriptor keys at registration time — must stay clear of that\n * graph. This module is string arithmetic with no imports.\n */\n\n/**\n * Separator between a provider's canonical key and a slot qualifier. Every\n * non-canonical slot (`#alt`, `#account:N`) starts with it, so the character is\n * reserved in descriptor credential keys outright.\n */\nexport const CRED_KEY_SLOT_SEPARATOR = '#'\n\n/**\n * Reserved suffix marking a provider's SECOND credential slot.\n *\n * Not usable as (or as the tail of) a descriptor's credential key: `foo#alt`\n * holds `foo`'s alternate credential, so a provider claiming that name would\n * share storage with it.\n */\nexport const ALTERNATE_CRED_KEY_SUFFIX = '#alt'\n\n/**\n * Reserved infix marking one of a provider's ADDITIONAL OAuth accounts:\n * `foo#account:1`, `foo#account:2`, …\n */\nexport const ACCOUNT_CRED_KEY_INFIX = '#account:'\n\n/**\n * File key holding a provider's second credential, when it has one of each kind.\n *\n * The canonical key always holds the credential the user prefers; this sibling\n * holds the other. That one invariant is what makes preference selection free:\n * every existing reader (`applyApiKeyEnv`, the harness provider factories)\n * already resolves the canonical key, so \"switch priority\" is just moving two\n * objects between two keys — no precedence flag to interpret, no resolution\n * order to keep in sync across layers.\n *\n * A sibling key rather than a nested field because the canonical entry gets\n * REPLACED wholesale on token refresh; anything nested inside it would be\n * dropped by the next rotation. And older zidane versions look credentials up\n * by `credKeyOf`, so a suffixed key is simply invisible to them — they read the\n * preferred credential and behave exactly as before, which is why this needs no\n * migration or schema version.\n */\nexport function alternateCredKey(fileKey: string): string {\n  return `${fileKey}${ALTERNATE_CRED_KEY_SUFFIX}`\n}\n\n/**\n * File key holding one of a provider's non-active OAuth accounts.\n *\n * Same sibling-key reasoning as {@link alternateCredKey}: the canonical key is\n * the active one, so a provider with three OAuth grants stores the active one\n * canonically and the other two under `#account:N`. `#alt` stays dedicated to\n * the other-kind (API key) alternate so files written by builds that predate\n * multi-account keep meaning the same thing.\n */\nexport function accountCredKey(fileKey: string, n: number): string {\n  return `${fileKey}${ACCOUNT_CRED_KEY_INFIX}${n}`\n}\n\n/** True when `key` is one of `fileKey`'s `#account:N` slots. */\nexport function isAccountCredKey(fileKey: string, key: string): boolean {\n  const prefix = `${fileKey}${ACCOUNT_CRED_KEY_INFIX}`\n  return key.startsWith(prefix) && /^\\d+$/.test(key.slice(prefix.length))\n}\n\n/**\n * Smallest `#account:N` key of `fileKey` not present in `existing`.\n *\n * Deterministic rather than random so a file hand-edited or written by two\n * processes in sequence stays readable; the write lock keeps it collision-free.\n */\nexport function nextAccountCredKey(fileKey: string, existing: Iterable<string>): string {\n  const taken = new Set(existing)\n  for (let n = 1; ; n++) {\n    const key = accountCredKey(fileKey, n)\n    if (!taken.has(key))\n      return key\n  }\n}\n\n/**\n * Name shown for an OAuth account that was never given one.\n *\n * Also what a first OAuth login is stored under, so a second account has\n * something to be told apart from. Pre-multi-account files hold unnamed\n * grants; {@link oauthAccountLabel} makes them read the same.\n */\nexport const DEFAULT_OAUTH_ACCOUNT_LABEL = 'Default'\n\n/** Trimmed user-given account name, or {@link DEFAULT_OAUTH_ACCOUNT_LABEL}. */\nexport function oauthAccountLabel(credential: { label?: unknown }): string {\n  const label = typeof credential.label === 'string' ? credential.label.trim() : ''\n  return label || DEFAULT_OAUTH_ACCOUNT_LABEL\n}\n\n/**\n * True when a key claims a reserved slot namespace.\n *\n * Built-in keys are plain identifiers (`anthropic`, `openai-codex`), but\n * `ProviderDescriptor.key` / `credentialFileKey` are open strings — so the\n * reservation is checked, not assumed.\n */\nexport function isReservedCredKey(fileKey: string): boolean {\n  return fileKey.includes(CRED_KEY_SLOT_SEPARATOR)\n}\n"],"mappings":";;;;;;;;;;;;;;;AAeA,MAAa,0BAA0B;;;;;;;;AASvC,MAAa,4BAA4B;;;;;AAMzC,MAAa,yBAAyB;;;;;;;;;;;;;;;;;;AAmBtC,SAAgB,iBAAiB,SAAyB;CACxD,OAAO,GAAG,UAAU;AACtB;;;;;;;;;;AAWA,SAAgB,eAAe,SAAiB,GAAmB;CACjE,OAAO,GAAG,UAAU,yBAAyB;AAC/C;;AAGA,SAAgB,iBAAiB,SAAiB,KAAsB;CACtE,MAAM,SAAS,GAAG,UAAU;CAC5B,OAAO,IAAI,WAAW,MAAM,KAAK,QAAQ,KAAK,IAAI,MAAM,OAAO,MAAM,CAAC;AACxE;;;;;;;AAQA,SAAgB,mBAAmB,SAAiB,UAAoC;CACtF,MAAM,QAAQ,IAAI,IAAI,QAAQ;CAC9B,KAAK,IAAI,IAAI,IAAK,KAAK;EACrB,MAAM,MAAM,eAAe,SAAS,CAAC;EACrC,IAAI,CAAC,MAAM,IAAI,GAAG,GAChB,OAAO;CACX;AACF;;;;;;;;AASA,MAAa,8BAA8B;;AAG3C,SAAgB,kBAAkB,YAAyC;CAEzE,QADc,OAAO,WAAW,UAAU,WAAW,WAAW,MAAM,KAAK,IAAI,OAAA;AAEjF;;;;;;;;AASA,SAAgB,kBAAkB,SAA0B;CAC1D,OAAO,QAAQ,SAAA,GAAgC;AACjD"}

package/dist/{auth-BG2rVKSt.js → credentials-JttEuRON.js}

@@ -1,129 +1,25 @@
-import { A as mergeCatalogEntry, D as listModelOverlay, O as listModels, k as lookupModel } from "./openai-compat-Dy56weK8.js";
-import { a as ALTERNATE_CRED_KEY_SUFFIX, d as isReservedCredKey, f as nextAccountCredKey, i as ACCOUNT_CRED_KEY_INFIX, l as alternateCredKey, p as oauthAccountLabel, u as isAccountCredKey } from "./panels-B6gRk4bf.js";
-import { t as writeFileAtomic } from "./atomic-write-B7zr1ddF.js";
-import { _ as FAST_MODE_OPTIONS, g as ANTHROPIC_EXTRA_MODELS, r as anthropic } from "./anthropic-C2aole0G.js";
-import { c as withCredentialsLock, h as registerOAuthProvider, m as refreshOpenAICodexToken, p as refreshAnthropicToken } from "./oauth-DxHO17JE.js";
+import { n as writeFileAtomic } from "./atomic-write-Ijgf2Mhc.js";
+import { A as lookupModel, O as listModelOverlay, j as mergeCatalogEntry, k as listModels } from "./openai-compat-CFrpH7uq.js";
+import { c as isReservedCredKey, l as nextAccountCredKey, n as ALTERNATE_CRED_KEY_SUFFIX, o as alternateCredKey, s as isAccountCredKey, t as ACCOUNT_CRED_KEY_INFIX } from "./cred-keys-GpBg71cP.js";
+import { a as FAST_MODE_OPTIONS, i as ANTHROPIC_EXTRA_MODELS, t as anthropic } from "./anthropic-CD00LhUP.js";
+import { c as withCredentialsLock, h as registerOAuthProvider, m as refreshOpenAICodexToken, p as refreshAnthropicToken } from "./oauth-Px_pBB9W.js";
 import { arcee } from "./providers/arcee.js";
 import { baseten } from "./providers/baseten.js";
 import { cerebras } from "./providers/cerebras.js";
 import { t as generatePkce } from "./pkce-t8BcPyEi.js";
-import { n as createCursorOAuthProvider } from "./cursor-iojRXHF9.js";
-import { n as zai, r as mistral } from "./providers-BVhnFyiY.js";
+import { n as createCursorOAuthProvider } from "./cursor-CdjaQTBW.js";
+import { n as zai, r as mistral } from "./providers-XUR7F4Hi.js";
 import { local } from "./providers/local.js";
 import { openai } from "./providers/openai.js";
 import { openrouter } from "./providers/openrouter.js";
-import { n as createXaiOAuthProvider } from "./xai-CazjStOK.js";
+import { c as startCallbackServer, n as createXaiOAuthProvider, o as honorsRemoteCallback, s as listensForCallback } from "./xai-CvJTeLrI.js";
 import { xai } from "./providers/xai.js";
-import { dirname, resolve } from "node:path";
 import { Buffer } from "node:buffer";
 import { existsSync, readFileSync, realpathSync } from "node:fs";
+import { dirname, resolve } from "node:path";
 import { homedir } from "node:os";
 import { randomBytes } from "node:crypto";
-import { createServer } from "node:http";
 import { getBuiltinModel, getBuiltinModels } from "@earendil-works/pi-ai/providers/all";
-//#region src/chat/oauth-page/server.ts
-const CALLBACK_HOST = process.env.PI_OAUTH_CALLBACK_HOST || "127.0.0.1";
-function buildRequestHandler(opts, pending) {
-	return (req, res) => {
-		try {
-			const url = new URL(req.url || "", "http://localhost");
-			if (url.pathname !== opts.path) {
-				respondError(res, 404, opts, "Callback route not found.");
-				return;
-			}
-			const error = url.searchParams.get("error");
-			if (error) {
-				respondError(res, 400, opts, `${opts.providerName} authentication did not complete.`, `Error: ${error}`);
-				return;
-			}
-			const code = url.searchParams.get("code");
-			const state = url.searchParams.get("state");
-			if (!code || !state) {
-				respondError(res, 400, opts, "Missing code or state parameter.");
-				return;
-			}
-			if (state !== opts.expectedState) {
-				respondError(res, 400, opts, "State mismatch.");
-				return;
-			}
-			res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-			res.end(opts.renderPage({
-				kind: "success",
-				provider: opts.providerName,
-				message: opts.successMessage
-			}));
-			pending.settle({
-				code,
-				state
-			});
-		} catch {
-			respondError(res, 500, opts, "Internal error while processing the callback.");
-		}
-	};
-}
-function respondError(res, status, opts, message, details) {
-	res.writeHead(status, { "Content-Type": "text/html; charset=utf-8" });
-	res.end(opts.renderPage({
-		kind: "error",
-		provider: opts.providerName,
-		message,
-		details
-	}));
-}
-function buildStubHandle(redirectUri, server) {
-	return {
-		redirectUri,
-		waitForCode: async () => null,
-		cancelWait: () => {},
-		close: () => {
-			try {
-				server?.close();
-			} catch {}
-		}
-	};
-}
-/**
-* Start the loopback HTTP callback server. The returned handle is the
-* caller's contract — they `await waitForCode()`, race it against manual
-* paste, then `close()` in a `finally`.
-*/
-async function startCallbackServer(opts) {
-	const onListenError = opts.onListenError ?? "reject";
-	const redirectUri = `http://localhost:${opts.port}${opts.path}`;
-	return new Promise((resolve, reject) => {
-		let settled = false;
-		const pending = { settle: () => {} };
-		const waitPromise = new Promise((resolveWait) => {
-			pending.settle = (value) => {
-				if (settled) return;
-				settled = true;
-				resolveWait(value);
-			};
-		});
-		const server = createServer(buildRequestHandler(opts, pending));
-		server.on("error", (err) => {
-			if (onListenError === "resolveWithStub") {
-				pending.settle(null);
-				resolve(buildStubHandle(redirectUri, server));
-				return;
-			}
-			reject(err);
-		});
-		server.listen(opts.port, CALLBACK_HOST, () => {
-			resolve({
-				redirectUri,
-				waitForCode: () => waitPromise,
-				cancelWait: () => pending.settle(null),
-				close: () => {
-					try {
-						server.close();
-					} catch {}
-				}
-			});
-		});
-	});
-}
-//#endregion
 //#region src/chat/oauth-page/anthropic.ts
 const CLIENT_ID$1 = atob("OWQxYzI1MGEtZTYxYi00NGQ5LTg4ZWQtNTk0NGQxOTYyZjVl");
 const AUTHORIZE_URL$1 = "https://claude.ai/oauth/authorize";
@@ -194,7 +90,7 @@ async function exchangeAuthorizationCode$1(code, state, verifier, redirectUri) {
 	return {
 		refresh: tokenData.refresh_token,
 		access: tokenData.access_token,
-		expires: Date.now() + tokenData.expires_in * 1e3 - 300 * 1e3
+		expires: Date.now() + tokenData.expires_in * 1e3 - 3e5
 	};
 }
 async function loginAnthropicWithCustomPage(options) {
@@ -206,7 +102,8 @@ async function loginAnthropicWithCustomPage(options) {
 		providerName: PROVIDER_NAME$1,
 		renderPage: options.renderPage,
 		successMessage: "Anthropic authentication completed. You can close this window.",
-		onListenError: "reject"
+		onListenError: "reject",
+		...options.listen === false ? { listen: false } : {}
 	});
 	let code;
 	let state;
@@ -286,7 +183,7 @@ async function loginAnthropicWithCustomPage(options) {
 * onto `ProviderDescriptor.oauthProvider` to override.
 */
 function createAnthropicOAuthProviderWithCustomPage(renderPage) {
-	return {
+	return honorsRemoteCallback({
 		id: "anthropic",
 		name: "Anthropic (Claude Pro/Max)",
 		usesCallbackServer: true,
@@ -296,7 +193,8 @@ function createAnthropicOAuthProviderWithCustomPage(renderPage) {
 				onAuth: callbacks.onAuth,
 				onPrompt: callbacks.onPrompt,
 				onProgress: callbacks.onProgress,
-				onManualCodeInput: callbacks.onManualCodeInput
+				onManualCodeInput: callbacks.onManualCodeInput,
+				listen: listensForCallback(callbacks)
 			});
 		},
 		async refreshToken(credentials) {
@@ -305,7 +203,7 @@ function createAnthropicOAuthProviderWithCustomPage(renderPage) {
 		getApiKey(credentials) {
 			return credentials.access;
 		}
-	};
+	});
 }
 //#endregion
 //#region src/chat/oauth-page/openai-codex.ts
@@ -403,7 +301,8 @@ async function loginOpenAICodexWithCustomPage(options) {
 		providerName: PROVIDER_NAME,
 		renderPage: options.renderPage,
 		successMessage: "OpenAI authentication completed. You can close this window.",
-		onListenError: "resolveWithStub"
+		onListenError: "resolveWithStub",
+		...options.listen === false ? { listen: false } : {}
 	});
 	const authUrl = new URL(AUTHORIZE_URL);
 	authUrl.searchParams.set("response_type", "code");
@@ -478,7 +377,7 @@ async function loginOpenAICodexWithCustomPage(options) {
 * `openaiCodexOAuthProvider` except for the callback page HTML.
 */
 function createOpenAICodexOAuthProviderWithCustomPage(renderPage) {
-	return {
+	return honorsRemoteCallback({
 		id: "openai-codex",
 		name: "ChatGPT Plus/Pro (Codex Subscription)",
 		usesCallbackServer: true,
@@ -488,7 +387,8 @@ function createOpenAICodexOAuthProviderWithCustomPage(renderPage) {
 				onAuth: callbacks.onAuth,
 				onPrompt: callbacks.onPrompt,
 				onProgress: callbacks.onProgress,
-				onManualCodeInput: callbacks.onManualCodeInput
+				onManualCodeInput: callbacks.onManualCodeInput,
+				listen: listensForCallback(callbacks)
 			});
 		},
 		async refreshToken(credentials) {
@@ -497,7 +397,7 @@ function createOpenAICodexOAuthProviderWithCustomPage(renderPage) {
 		getApiKey(credentials) {
 			return credentials.access;
 		}
-	};
+	});
 }
 //#endregion
 //#region src/chat/oauth-page/render.ts
@@ -1094,7 +994,7 @@ const localDescriptor = {
 			label: "Context window (tokens)",
 			envVar: "LOCAL_LLM_CONTEXT_WINDOW",
 			placeholder: "e.g. 32768  ·  or per-model: llama3.1:8b=32768, qwen2.5-coder=128k, 64k",
-			hint: "Context length(s) for your local model(s) — local runtimes don't advertise this, so set it here to enable the context indicator and auto-compaction. Use a single value (32768, 128k) for all models, or a comma-separated map of `model=window` with an optional bare value as the fallback. Press"
+			hint: "Context length for your local models. Local runtimes don't report it, so set it here to enable the context indicator and auto-compaction. Use a single value (32768, 128k) for all models, or a comma-separated map of `model=window` with an optional bare value as the fallback. Press"
 		}
 	],
 	contextWindowEnvVar: "LOCAL_LLM_CONTEXT_WINDOW"
@@ -1532,6 +1432,35 @@ function mutateCredentials(dataDir, fn) {
 	});
 }
 /**
+* Read one entry by its file key, whatever owns it. For stores that keep a
+* secret beside the provider slots under their own namespace (the host
+* registry: `hosts:<id>`).
+*/
+function readCredentialEntry(dataDir, key) {
+	return readCredentials(dataDir)[key];
+}
+/**
+* Write (or, `undefined`, delete) one entry by its file key, under the same
+* lock, mode and atomic write as every credential write. Refuses provider
+* slot keys (`#`): those go through the provider writers above.
+*/
+function writeCredentialEntry(dataDir, key, cred) {
+	if (isReservedCredKey(key)) throw new Error(`"${key}" is a provider credential slot.`);
+	mutateCredentials(dataDir, (all) => {
+		if (cred === void 0) {
+			if (!(key in all)) return {
+				result: void 0,
+				write: false
+			};
+			delete all[key];
+		} else all[key] = cred;
+		return {
+			result: void 0,
+			write: true
+		};
+	});
+}
+/**
 * Move an OAuth grant out of `#alt` into an account slot.
 *
 * Before multi-account, `#alt` held whichever kind was not active — so a file
@@ -1767,7 +1696,7 @@ function applyApiKeyEnv(dataDir, registry, opts = {}) {
 			continue;
 		}
 		if (cred?.kind === "oauth" && cred.access) {
-			if (ambient !== void 0 && process.env.ZIDANE_DEBUG) log(`[zidane/chat] applyApiKeyEnv: clearing ambient \`${envKey}\` because credentials.json has stored OAuth for ${descriptor.key} — refresh path needs the file.\n`);
+			if (ambient !== void 0 && process.env.ZIDANE_DEBUG) log(`[zidane/chat] applyApiKeyEnv: clearing ambient \`${envKey}\` because credentials.json has stored OAuth for ${descriptor.key} and needs the file to refresh it.\n`);
 			delete process.env[envKey];
 			continue;
 		}
@@ -1838,86 +1767,6 @@ function isOAuthLegacy(value) {
 	return typeof value === "object" && value !== null && "access" in value && typeof value.access === "string";
 }
 //#endregion
-//#region src/chat/auth.ts
-/**
-* Detect available auth for every registered provider.
-*
-* A method appears in `methods` for every layer that has a credential:
-*
-*   - `kind: 'apikey'` from `credentials.json` (injected into env at TUI launch)
-*   - explicit env var (descriptor's `envKey`)
-*   - `kind: 'oauth'` from `credentials.json` (or legacy `cwd/.credentials.json`),
-*     one per stored account
-*
-* The preferred credential lives in the canonical file key and is flagged
-* {@link AuthMethod.active}; the others sit in sibling slots and are reported
-* too, keyed by {@link AuthMethod.key}, so the UI can offer to promote or
-* remove them. Order within `methods` is presentational — active first — not a
-* resolution order, because the active flag answers that directly.
-*
-* Pure read — never refreshes or rewrites the credentials file.
-*/
-function detectAuth(dataDir, registry, env = process.env) {
-	const creds = readCredentials(dataDir);
-	return Object.values(registry).map((descriptor) => {
-		const methods = [];
-		const stored = storedCredentialsOf(creds, credKeyOf(descriptor));
-		const fileEntry = stored.find((s) => s.active)?.credential;
-		const describeStored = (key, entry, active) => {
-			if (entry.kind === "apikey" && entry.value) return {
-				source: "apikey",
-				detail: "credentials.json",
-				active,
-				key
-			};
-			if (entry.kind === "oauth" && entry.access) {
-				const label = oauthAccountLabel(entry);
-				return {
-					source: "oauth",
-					detail: `${label} · ${typeof entry.expires === "number" ? `expires ${new Date(entry.expires).toLocaleString()}` : "credentials.json"}`,
-					active,
-					key,
-					label
-				};
-			}
-		};
-		for (const slot of stored) {
-			const method = describeStored(slot.key, slot.credential, slot.active);
-			if (method) methods.push(method);
-		}
-		if (fileEntry?.kind === "apikey" && !fileEntry.value && descriptor.customFields && descriptor.customFields.length > 0) {
-			const stored = fileEntry.customFields ?? {};
-			if (descriptor.customFields.filter((f) => f.required).every((f) => typeof stored[f.key] === "string" && stored[f.key].length > 0)) methods.push({
-				source: "apikey",
-				detail: "credentials.json (configured)",
-				active: true
-			});
-		}
-		if (descriptor.customFields && descriptor.customFields.length > 0) {
-			const required = descriptor.customFields.filter((f) => f.required);
-			if (required.length > 0 && required.every((f) => typeof env[f.envVar] === "string" && env[f.envVar].length > 0)) methods.push({
-				source: "env",
-				detail: required.map((f) => f.envVar).join(", "),
-				active: false
-			});
-		}
-		if (descriptor.envKey && env[descriptor.envKey]) methods.push({
-			source: "env",
-			detail: descriptor.envKey,
-			active: false
-		});
-		const unique = [];
-		for (const method of methods) if (!unique.some((seen) => method.source === "oauth" ? seen.key !== void 0 && seen.key === method.key : seen.source === method.source)) unique.push(method);
-		return {
-			key: descriptor.key,
-			label: descriptor.label,
-			available: unique.length > 0,
-			methods: unique,
-			...descriptor.envKey ? { envKey: descriptor.envKey } : {}
-		};
-	});
-}
-//#endregion
-export { renderDefaultCallbackPage as A, modelOptionsFor as C, openrouterDescriptor as D, openaiDescriptor as E, piIdOf as O, localDescriptor as S, modelsForDescriptor as T, cerebrasDescriptor as _, readProviderCredential as a, getContextWindow as b, removeProviderCredential as c, setPreferredCredential as d, setProviderCredential as f, anthropicDescriptor as g, BUILTIN_PROVIDERS as h, readCredentials as i, restoreModelOptions as k, removeStoredCredential as l, writeCredentials as m, applyApiKeyEnv as n, readProviderCredentialPair as o, storedCredentialsOf as p, credentialsPath as r, readProviderCredentials as s, detectAuth as t, setCredentialLabel as u, credKeyOf as v, modelSupportsReasoning as w, getModelInfo as x, enabledModelOptions as y };
+export { restoreModelOptions as A, localDescriptor as C, openaiDescriptor as D, modelsForDescriptor as E, openrouterDescriptor as O, getModelInfo as S, modelSupportsReasoning as T, anthropicDescriptor as _, readProviderCredential as a, enabledModelOptions as b, removeProviderCredential as c, setPreferredCredential as d, setProviderCredential as f, BUILTIN_PROVIDERS as g, writeCredentials as h, readCredentials as i, renderDefaultCallbackPage as j, piIdOf as k, removeStoredCredential as l, writeCredentialEntry as m, credentialsPath as n, readProviderCredentialPair as o, storedCredentialsOf as p, readCredentialEntry as r, readProviderCredentials as s, applyApiKeyEnv as t, setCredentialLabel as u, cerebrasDescriptor as v, modelOptionsFor as w, getContextWindow as x, credKeyOf as y };
 
-//# sourceMappingURL=auth-BG2rVKSt.js.map
+//# sourceMappingURL=credentials-JttEuRON.js.map