@benjamolina/opencode-antigravity-guard 1.0.0

package/dist/src/plugin/api-key.js

@@ -0,0 +1,544 @@
+import { extractVariantThinkingConfig } from "./request-helpers.js";
+import { applyGeminiTransforms, isGemini3Model, mapAntigravityModelToPublicApi, resolveModelForHeaderStyle } from "./transform/index.js";
+const rateLimitedUntilByKey = new Map();
+let cursor = 0;
+const GEMINI_MODELS_LIST_TIMEOUT_MS = 10000;
+const GEMINI_MODELS_LIST_MAX_PAGES = 20;
+export function resetAgySdkCredentialStateForTests() {
+    rateLimitedUntilByKey.clear();
+    cursor = 0;
+}
+async function requestBodyText(request) {
+    if (!request.body)
+        return undefined;
+    try {
+        return await request.clone().text();
+    }
+    catch {
+        return undefined;
+    }
+}
+function splitEnvList(value) {
+    if (!value)
+        return [];
+    return value
+        .split(",")
+        .map((part) => part.trim())
+        .filter(Boolean);
+}
+function dedupeCredentials(credentials) {
+    const seen = new Set();
+    const result = [];
+    for (const credential of credentials) {
+        if (seen.has(credential.apiKey))
+            continue;
+        seen.add(credential.apiKey);
+        result.push(credential);
+    }
+    return result;
+}
+export function getAgySdkCredentials(config, auth) {
+    if (!config.agy_sdk.enabled)
+        return [];
+    const credentials = [];
+    if (auth?.key?.trim()) {
+        credentials.push({ label: "opencode api key", apiKey: auth.key.trim() });
+    }
+    for (const project of config.agy_sdk.cloud_projects) {
+        if (project.enabled === false)
+            continue;
+        credentials.push({
+            label: project.label?.trim() || project.project_id?.trim() || "cloud project",
+            apiKey: project.api_key.trim(),
+            projectId: project.project_id?.trim() || undefined,
+        });
+    }
+    const envKeys = splitEnvList(process.env.OPENCODE_ANTIGRAVITY_API_KEYS);
+    const envCandidates = [
+        process.env.GEMINI_API_KEY,
+        process.env.GOOGLE_API_KEY,
+        ...envKeys,
+    ]
+        .map((apiKey) => apiKey?.trim())
+        .filter((apiKey) => Boolean(apiKey));
+    for (const apiKey of envCandidates) {
+        credentials.push({ label: "environment", apiKey });
+    }
+    return dedupeCredentials(credentials);
+}
+export function selectAgySdkCredential(credentials) {
+    if (credentials.length === 0)
+        return null;
+    const now = Date.now();
+    for (let attempts = 0; attempts < credentials.length; attempts += 1) {
+        const index = cursor % credentials.length;
+        cursor += 1;
+        const credential = credentials[index];
+        if (!credential)
+            continue;
+        const limitedUntil = rateLimitedUntilByKey.get(credential.apiKey) ?? 0;
+        if (limitedUntil <= now) {
+            return credential;
+        }
+    }
+    return null;
+}
+export function markAgySdkCredentialRateLimited(credential, retryAfterMs) {
+    rateLimitedUntilByKey.set(credential.apiKey, Date.now() + Math.max(1000, retryAfterMs));
+}
+function retryAfterMsFromResponse(response, fallbackMs) {
+    const retryAfter = response.headers.get("retry-after");
+    if (!retryAfter)
+        return fallbackMs;
+    const parsed = Number.parseInt(retryAfter, 10);
+    if (Number.isFinite(parsed) && parsed > 0) {
+        return parsed * 1000;
+    }
+    return fallbackMs;
+}
+export function isApiKeyAuth(auth) {
+    if (!auth || typeof auth !== "object")
+        return false;
+    const candidate = auth;
+    return (candidate.type === "api" || candidate.type === "api_key") && typeof candidate.key === "string";
+}
+/**
+ * Classifies a model as servable by the public Gemini API via the api-key path,
+ * either natively or via translation in `prepareAgySdkGeminiRequest`.
+ *
+ * Strips the optional `antigravity-` prefix and any tier suffix (-minimal/-low/
+ * -medium/-high), then checks:
+ *  - Claude models: never servable on the public API → returns false.
+ *  - Has an explicit translation (e.g. `gemini-3.1-pro` → `gemini-3.1-pro-preview`)
+ *    via `mapAntigravityModelToPublicApi` → routable.
+ *  - Stripped id is NOT in the Antigravity-only denylist → assumed public-API
+ *    native (covers `antigravity-gemini-3.5-flash` → `gemini-3.5-flash`, which
+ *    the public API serves bare).
+ *
+ * Shared by `isAgySdkSupportedRequest` (positive gate) and
+ * `isAntigravityOnlyGenerativeLanguageRequest` (negative gate / synthetic-404 trigger).
+ */
+function canRouteAsPublicGeminiApiModel(model) {
+    const m = model.toLowerCase();
+    if (m.includes("claude"))
+        return false;
+    const isAntigravityPrefixed = m.startsWith("antigravity-");
+    const stripped = m.replace(/^antigravity-/, "").replace(/-(minimal|low|medium|high)$/, "");
+    // Explicit translation (e.g. gemini-3.1-pro → gemini-3.1-pro-preview) → routable.
+    if (mapAntigravityModelToPublicApi(stripped))
+        return true;
+    // For `antigravity-` prefixed inputs without a known mapping, require the
+    // stripped id to look like a Gemini-family id. Unknown antigravity-* ids
+    // (typos, hypotheticals) fall through to `isAntigravityOnlyGenerativeLanguageRequest`
+    // which short-circuits with the synthetic OAuth re-auth guidance — better UX
+    // than raw-forwarding to the public Gemini API and surfacing Google's 404.
+    if (isAntigravityPrefixed) {
+        return /^gemini-/.test(stripped) && !ANTIGRAVITY_ONLY_BARE_GEMINI_IDS.has(stripped);
+    }
+    // Bare (non-prefixed) inputs not in the Antigravity-only denylist are
+    // assumed to be public-API natives (e.g. gemini-3.5-flash, gemini-2.5-pro).
+    return !ANTIGRAVITY_ONLY_BARE_GEMINI_IDS.has(stripped);
+}
+/**
+ * Returns true when the request can be routed to the public Gemini API
+ * (`generativelanguage.googleapis.com`) via the api-key path — either natively
+ * or via translation in `prepareAgySdkGeminiRequest`.
+ *
+ * Antigravity-only models with no public-API equivalent (Claude ids, unmapped
+ * antigravity- prefixed non-Gemini ids) are excluded: the caller should stay on
+ * the OAuth Antigravity path or short-circuit with a synthetic error.
+ */
+export function isAgySdkSupportedRequest(urlString) {
+    let url;
+    try {
+        url = new URL(urlString);
+    }
+    catch {
+        return false;
+    }
+    if (url.hostname !== "generativelanguage.googleapis.com")
+        return false;
+    const model = extractGeminiModelFromUrl(url.toString());
+    if (!model || !model.toLowerCase().includes("gemini"))
+        return false;
+    return canRouteAsPublicGeminiApiModel(model);
+}
+/**
+ * Returns true when the URL targets `generativelanguage.googleapis.com` with an
+ * Antigravity-only model that CANNOT be served by the public Gemini API even
+ * with translation — Claude ids and unmapped antigravity- prefixed non-Gemini ids.
+ *
+ * Translatable Antigravity-only Gemini ids (e.g. `antigravity-gemini-3.1-pro`,
+ * bare `gemini-3.1-pro`) and Antigravity-prefixed public-API natives (e.g.
+ * `antigravity-gemini-3.5-flash` → `gemini-3.5-flash`) return false here —
+ * `prepareAgySdkGeminiRequest` rewrites them to the public-API equivalent.
+ *
+ * Use this in API-key-only auth paths to short-circuit with a helpful synthetic
+ * error (via `createAntigravityOnlyModelErrorResponse`) instead of forwarding to
+ * the public Gemini API where it would 404.
+ */
+export function isAntigravityOnlyGenerativeLanguageRequest(urlString) {
+    let url;
+    try {
+        url = new URL(urlString);
+    }
+    catch {
+        return false;
+    }
+    if (url.hostname !== "generativelanguage.googleapis.com")
+        return false;
+    const model = extractGeminiModelFromUrl(url.toString());
+    if (!model)
+        return false;
+    return isLikelyAntigravityOnlyModel(model) && !canRouteAsPublicGeminiApiModel(model);
+}
+/**
+ * Extracts the requested model id from a `generativelanguage.googleapis.com`
+ * URL (e.g. `.../v1beta/models/gemini-3.1-pro:generateContent` -> `gemini-3.1-pro`).
+ * Returns `undefined` when the URL is malformed or doesn't match the model path.
+ */
+export function extractRequestedGeminiModel(urlString) {
+    return extractGeminiModelFromUrl(urlString);
+}
+/**
+ * Public Gemini API models commonly available on `generativelanguage.googleapis.com/v1beta`.
+ * Used to suggest alternatives when an Antigravity-only model is requested through
+ * the API-key path. Kept short and stable; the live registry has more, but these
+ * are the high-signal choices for the error hint.
+ *
+ * Source: GET https://generativelanguage.googleapis.com/v1beta/models (May 2026).
+ */
+const PUBLIC_GEMINI_API_MODEL_SUGGESTIONS = [
+    "gemini-2.5-pro",
+    "gemini-2.5-flash",
+    "gemini-3.1-pro-preview",
+    "gemini-3.1-flash-lite",
+    "gemini-3.5-flash",
+];
+/**
+ * Bare Gemini ids that the Antigravity Code Assist backend serves but the public
+ * Gemini API does NOT expose. Cross-checked against
+ * `GET https://generativelanguage.googleapis.com/v1beta/models` (May 2026).
+ *
+ * The public registry DOES include `-preview` / `-lite` / `-image` / `-tts` variants,
+ * and notably `gemini-3.5-flash` as a bare id, so this list stays explicit rather
+ * than pattern-based to avoid false positives.
+ */
+const ANTIGRAVITY_ONLY_BARE_GEMINI_IDS = new Set([
+    "gemini-3-pro",
+    "gemini-3-flash",
+    "gemini-3.1-pro",
+    "gemini-3.1-flash",
+]);
+/**
+ * Classifies models that the Antigravity Code Assist backend serves but the public
+ * Gemini API (v1beta on `generativelanguage.googleapis.com`) does not.
+ *
+ * Anything with the `antigravity-` prefix or any Claude model is OAuth-only by
+ * construction. For Gemini ids we use an explicit denylist (see
+ * `ANTIGRAVITY_ONLY_BARE_GEMINI_IDS`).
+ */
+export function isLikelyAntigravityOnlyModel(model) {
+    const m = model.toLowerCase();
+    if (m.startsWith("antigravity-"))
+        return true;
+    if (m.includes("claude"))
+        return true;
+    return ANTIGRAVITY_ONLY_BARE_GEMINI_IDS.has(m);
+}
+/**
+ * Builds the human-facing guidance message used by both
+ * `enhanceAgySdkErrorResponse` (post-hoc, after a public-API 404) and
+ * `createAntigravityOnlyModelErrorResponse` (pre-flight, before the round trip).
+ *
+ * When `originalMessage` is omitted, the trailing "(Underlying Gemini API error: ...)"
+ * line is dropped so synthetic errors don't pretend to have a real upstream cause.
+ */
+function buildAntigravityModelGuidanceMessage(requestedModel, originalMessage) {
+    const suggestions = PUBLIC_GEMINI_API_MODEL_SUGGESTIONS.join(", ");
+    const antigravityOnly = isLikelyAntigravityOnlyModel(requestedModel);
+    const lines = [
+        `Model '${requestedModel}' was sent to the public Gemini API (v1beta) and rejected as NOT_FOUND.`,
+    ];
+    if (antigravityOnly) {
+        lines.push("", "This model id is served by the Antigravity Code Assist backend, not the public Gemini API.", "The plugin's API-key path forwarded the request unchanged because either:", "  • opencode's 'google' provider is in API-key mode (no OAuth session), or", "  • all OAuth Antigravity accounts were rate-limited and `agy_sdk.api_key_fallback` kicked in.", "", "To reach this model, re-authenticate with OAuth:", "  opencode auth logout google", "  opencode auth login   # choose Google → OAuth with Google (Antigravity)");
+    }
+    else {
+        lines.push("", "The model id was forwarded to the public Gemini API verbatim. Double-check the spelling,", "or pick a model that's actually published on v1beta.");
+    }
+    lines.push("", `Public-API models known to work: ${suggestions}.`);
+    if (originalMessage) {
+        lines.push("", `(Underlying Gemini API error: ${originalMessage})`);
+    }
+    return lines.join("\n");
+}
+/**
+ * When the public Gemini API returns 404 NOT_FOUND for a model, rewrite the
+ * response body with actionable guidance. Without this, users see a bare
+ * "models/X is not found for API version v1beta" from Google and have no
+ * indication that the plugin routed their request through the API-key path
+ * because (a) opencode is in API-key mode for the google provider, or
+ * (b) all OAuth accounts were rate-limited and `api_key_fallback` kicked in.
+ *
+ * The rewritten body preserves the JSON error envelope so `@ai-sdk/google` still
+ * surfaces it as a normal `AI_APICallError` — only the human-facing message changes.
+ */
+export async function enhanceAgySdkErrorResponse(response, requestedModel) {
+    if (response.status !== 404 || !requestedModel)
+        return response;
+    // NB: Gemini's `streamGenerateContent?alt=sse` returns 404 errors with a JSON
+    // body but `Content-Type: text/event-stream`, so we can't gate on content-type.
+    // Parse the body as JSON unconditionally; bail if it doesn't look like the
+    // expected `{ error: { message } }` envelope.
+    let body;
+    try {
+        body = JSON.parse(await response.clone().text());
+    }
+    catch {
+        return response;
+    }
+    const originalMessage = body.error?.message ?? "";
+    const looksLikeModelNotFound = /not (?:found|supported)/i.test(originalMessage) &&
+        originalMessage.toLowerCase().includes("model");
+    if (!looksLikeModelNotFound)
+        return response;
+    const enhanced = {
+        error: {
+            code: body.error?.code ?? 404,
+            message: buildAntigravityModelGuidanceMessage(requestedModel, originalMessage),
+            status: body.error?.status ?? "NOT_FOUND",
+        },
+    };
+    const headers = new Headers(response.headers);
+    headers.delete("content-length");
+    // Body is now JSON regardless of the original (`text/event-stream` on SSE 404s);
+    // normalize content-type so downstream parsers don't try to read it as a stream.
+    headers.set("content-type", "application/json");
+    return new Response(JSON.stringify(enhanced), {
+        status: response.status,
+        statusText: response.statusText,
+        headers,
+    });
+}
+/**
+ * Synthesizes the same 404 guidance produced by `enhanceAgySdkErrorResponse`,
+ * but pre-flight — before any request is sent to the public Gemini API.
+ *
+ * Use this in API-key-only auth paths when the requested model is identified by
+ * `isLikelyAntigravityOnlyModel`: the round trip would deterministically 404,
+ * so we short-circuit with the same Gemini-shaped error envelope. The shape
+ * matches `enhanceAgySdkErrorResponse` so `@ai-sdk/google` raises a normal
+ * `AI_APICallError` carrying the actionable message.
+ */
+export function createAntigravityOnlyModelErrorResponse(requestedModel) {
+    const body = {
+        error: {
+            code: 404,
+            message: buildAntigravityModelGuidanceMessage(requestedModel),
+            status: "NOT_FOUND",
+        },
+    };
+    return new Response(JSON.stringify(body), {
+        status: 404,
+        statusText: "Not Found",
+        headers: { "content-type": "application/json" },
+    });
+}
+function extractGeminiModelFromUrl(urlString) {
+    try {
+        const url = new URL(urlString);
+        return url.pathname.match(/\/models\/([^:]+):(\w+)/)?.[1];
+    }
+    catch {
+        return undefined;
+    }
+}
+function isRecord(value) {
+    return !!value && typeof value === "object" && !Array.isArray(value);
+}
+function toThinkingTier(value) {
+    if (value === "low" || value === "medium" || value === "high")
+        return value;
+    return undefined;
+}
+function thinkingLevelFromBudget(budget) {
+    if (budget <= 8192)
+        return "low";
+    if (budget <= 16384)
+        return "medium";
+    return "high";
+}
+function mergeExtraBody(payload) {
+    const extraBody = isRecord(payload.extra_body)
+        ? payload.extra_body
+        : isRecord(payload.extraBody)
+            ? payload.extraBody
+            : undefined;
+    if (!extraBody)
+        return undefined;
+    if (isRecord(extraBody.generationConfig)) {
+        const generationConfig = isRecord(payload.generationConfig) ? payload.generationConfig : {};
+        for (const [key, value] of Object.entries(extraBody.generationConfig)) {
+            if (!(key in generationConfig)) {
+                generationConfig[key] = value;
+            }
+        }
+        payload.generationConfig = generationConfig;
+    }
+    for (const [key, value] of Object.entries(extraBody)) {
+        if (!(key in payload)) {
+            payload[key] = value;
+        }
+    }
+    return extraBody;
+}
+function applyAgySdkGeminiBodyTransforms(payload, model, thinkingLevel) {
+    const generationConfig = isRecord(payload.generationConfig)
+        ? payload.generationConfig
+        : {};
+    const extraBody = mergeExtraBody(payload);
+    const variantConfig = extractVariantThinkingConfig(isRecord(payload.providerOptions) ? payload.providerOptions : undefined, generationConfig);
+    const extraThinkingConfig = isRecord(extraBody?.thinkingConfig) ? extraBody.thinkingConfig : undefined;
+    const existingThinkingConfig = isRecord(generationConfig.thinkingConfig)
+        ? generationConfig.thinkingConfig
+        : extraThinkingConfig
+            ? { ...extraThinkingConfig }
+            : {};
+    if (isGemini3Model(model)) {
+        const resolvedLevel = variantConfig?.thinkingLevel
+            ?? (typeof existingThinkingConfig.thinkingLevel === "string" ? existingThinkingConfig.thinkingLevel : undefined)
+            ?? (variantConfig?.thinkingBudget !== undefined ? thinkingLevelFromBudget(variantConfig.thinkingBudget) : undefined)
+            ?? thinkingLevel
+            ?? "low";
+        existingThinkingConfig.thinkingLevel = resolvedLevel;
+        if (variantConfig?.includeThoughts !== undefined) {
+            existingThinkingConfig.includeThoughts = variantConfig.includeThoughts;
+        }
+        else if (typeof existingThinkingConfig.includeThoughts !== "boolean") {
+            existingThinkingConfig.includeThoughts = true;
+        }
+    }
+    else if (variantConfig?.thinkingBudget !== undefined || typeof existingThinkingConfig.thinkingBudget === "number") {
+        existingThinkingConfig.thinkingBudget = variantConfig?.thinkingBudget ?? existingThinkingConfig.thinkingBudget;
+        if (variantConfig?.includeThoughts !== undefined) {
+            existingThinkingConfig.includeThoughts = variantConfig.includeThoughts;
+        }
+        else if (typeof existingThinkingConfig.includeThoughts !== "boolean") {
+            existingThinkingConfig.includeThoughts = true;
+        }
+    }
+    if (Object.keys(existingThinkingConfig).length > 0) {
+        generationConfig.thinkingConfig = existingThinkingConfig;
+        payload.generationConfig = generationConfig;
+    }
+    if (Array.isArray(payload.tools) || variantConfig?.googleSearch) {
+        applyGeminiTransforms(payload, {
+            model,
+            tierThinkingLevel: toThinkingTier(typeof generationConfig.thinkingConfig === "object"
+                && generationConfig.thinkingConfig
+                && "thinkingLevel" in generationConfig.thinkingConfig
+                ? String(generationConfig.thinkingConfig.thinkingLevel)
+                : undefined),
+            googleSearch: variantConfig?.googleSearch,
+        });
+    }
+    delete payload.model;
+    delete payload.providerOptions;
+    delete payload.extra_body;
+    delete payload.extraBody;
+    delete payload.thinkingConfig;
+    delete payload.thinking;
+}
+export async function prepareAgySdkGeminiRequest(input, init, credential) {
+    const requestInput = typeof input === "string" ? undefined : input;
+    const urlString = requestInput?.url ?? input.toString();
+    const url = new URL(urlString);
+    const match = url.pathname.match(/\/models\/([^:]+):(\w+)/);
+    const rawModel = match?.[1] ?? undefined;
+    const action = match?.[2] ?? undefined;
+    const resolved = rawModel ? resolveModelForHeaderStyle(rawModel, "agy-sdk") : undefined;
+    if (resolved && action) {
+        url.pathname = url.pathname.replace(`/models/${rawModel}:${action}`, `/models/${resolved.actualModel}:${action}`);
+    }
+    url.searchParams.delete("key");
+    const headers = new Headers(init?.headers ?? requestInput?.headers ?? {});
+    headers.delete("Authorization");
+    headers.delete("x-api-key");
+    headers.set("x-goog-api-key", credential.apiKey);
+    headers.delete("x-goog-user-project");
+    const requestTextBody = init?.body === undefined && requestInput ? await requestBodyText(requestInput) : undefined;
+    const originalBody = init?.body ?? requestTextBody ?? requestInput?.body ?? undefined;
+    let body = originalBody;
+    if (typeof body === "string" && body.trim()) {
+        try {
+            const payload = JSON.parse(body);
+            applyAgySdkGeminiBodyTransforms(payload, resolved?.actualModel ?? rawModel ?? "", resolved?.thinkingLevel);
+            body = JSON.stringify(payload);
+        }
+        catch {
+            body = originalBody;
+        }
+    }
+    return {
+        request: url.toString(),
+        init: {
+            method: requestInput?.method,
+            ...init,
+            headers,
+            body,
+        },
+        model: resolved?.actualModel ?? rawModel,
+    };
+}
+async function fetchGeminiModelsPage(url, credential) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), GEMINI_MODELS_LIST_TIMEOUT_MS);
+    try {
+        return await fetch(url, {
+            signal: controller.signal,
+            headers: {
+                "x-goog-api-key": credential.apiKey,
+            },
+        });
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+export async function fetchWithAgySdkCredential(input, init, credential, fallbackRetryAfterMs) {
+    const prepared = await prepareAgySdkGeminiRequest(input, init, credential);
+    const response = await fetch(prepared.request, prepared.init);
+    if (response.status === 429 || response.status === 503 || response.status === 529) {
+        markAgySdkCredentialRateLimited(credential, retryAfterMsFromResponse(response, fallbackRetryAfterMs));
+    }
+    return enhanceAgySdkErrorResponse(response, prepared.model);
+}
+export async function fetchGeminiApiModels(credential) {
+    const models = [];
+    let pageToken;
+    const seenPageTokens = new Set();
+    for (let page = 0; page < GEMINI_MODELS_LIST_MAX_PAGES; page += 1) {
+        const url = new URL("https://generativelanguage.googleapis.com/v1beta/models");
+        url.searchParams.set("pageSize", "1000");
+        if (pageToken) {
+            if (seenPageTokens.has(pageToken)) {
+                throw new Error(`Gemini models.list returned repeated page token for ${credential.label}`);
+            }
+            seenPageTokens.add(pageToken);
+            url.searchParams.set("pageToken", pageToken);
+        }
+        const response = await fetchGeminiModelsPage(url.toString(), credential);
+        if (!response.ok) {
+            const body = await response.text().catch(() => "");
+            const snippet = body.trim().slice(0, 200);
+            throw new Error(`Gemini models.list failed for ${credential.label}: ${response.status}${snippet ? ` ${snippet}` : ""}`);
+        }
+        const payload = (await response.json());
+        models.push(...(payload.models ?? []));
+        pageToken = payload.nextPageToken;
+        if (!pageToken)
+            return models;
+    }
+    throw new Error(`Gemini models.list exceeded ${GEMINI_MODELS_LIST_MAX_PAGES} pages for ${credential.label}`);
+}
+//# sourceMappingURL=api-key.js.map

package/dist/src/plugin/api-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key.js","sourceRoot":"","sources":["../../../src/plugin/api-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,8BAA8B,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAuBhI,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAkB,CAAC;AACxD,IAAI,MAAM,GAAG,CAAC,CAAC;AAEf,MAAM,6BAA6B,GAAG,KAAK,CAAC;AAC5C,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAExC,MAAM,UAAU,kCAAkC;IAChD,qBAAqB,CAAC,KAAK,EAAE,CAAC;IAC9B,MAAM,GAAG,CAAC,CAAC;AACb,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAgB;IAC7C,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,iBAAiB,CAAC,WAA+B;IACxD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAS;QAC1C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAyB,EACzB,IAA+B;IAE/B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,WAAW,GAAuB,EAAE,CAAC;IAC3C,IAAI,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;QACtB,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QACpD,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK;YAAE,SAAS;QACxC,WAAW,CAAC,IAAI,CAAC;YACf,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,eAAe;YAC7E,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE;YAC9B,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,SAAS;SACnD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG;QACpB,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1B,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1B,GAAG,OAAO;KACX;SACE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;SAC/B,MAAM,CAAC,CAAC,MAAM,EAAoB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,iBAAiB,CAAC,WAAW,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,WAA+B;IACpE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,IAAI,QAAQ,GAAG,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,QAAQ,IAAI,CAAC,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;QAC1C,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,MAAM,YAAY,GAAG,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,YAAY,IAAI,GAAG,EAAE,CAAC;YACxB,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,UAA4B,EAAE,YAAoB;IAChG,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAkB,EAAE,UAAkB;IACtE,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU;QAAE,OAAO,UAAU,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,MAAM,GAAG,IAAI,CAAC;IACvB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,SAAS,GAAG,IAAyB,CAAC;IAC5C,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC,GAAG,KAAK,QAAQ,CAAC;AACzG,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,8BAA8B,CAAC,KAAa;IACnD,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,qBAAqB,GAAG,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;IAE3F,kFAAkF;IAClF,IAAI,8BAA8B,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1D,0EAA0E;IAC1E,yEAAyE;IACzE,sFAAsF;IACtF,6EAA6E;IAC7E,2EAA2E;IAC3E,IAAI,qBAAqB,EAAE,CAAC;QAC1B,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,gCAAgC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtF,CAAC;IAED,sEAAsE;IACtE,4EAA4E;IAC5E,OAAO,CAAC,gCAAgC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAAiB;IACxD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,mCAAmC;QAAE,OAAO,KAAK,CAAC;IACvE,MAAM,KAAK,GAAG,yBAAyB,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,OAAO,8BAA8B,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,0CAA0C,CAAC,SAAiB;IAC1E,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,mCAAmC;QAAE,OAAO,KAAK,CAAC;IACvE,MAAM,KAAK,GAAG,yBAAyB,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC;AACvF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,SAAiB;IAC3D,OAAO,yBAAyB,CAAC,SAAS,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,mCAAmC,GAAG;IAC1C,gBAAgB;IAChB,kBAAkB;IAClB,wBAAwB;IACxB,uBAAuB;IACvB,kBAAkB;CACV,CAAC;AAEX;;;;;;;;GAQG;AACH,MAAM,gCAAgC,GAAwB,IAAI,GAAG,CAAC;IACpE,cAAc;IACd,gBAAgB;IAChB,gBAAgB;IAChB,kBAAkB;CACnB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAAC,KAAa;IACxD,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,gCAAgC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAMD;;;;;;;GAOG;AACH,SAAS,oCAAoC,CAC3C,cAAsB,EACtB,eAAwB;IAExB,MAAM,WAAW,GAAG,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,eAAe,GAAG,4BAA4B,CAAC,cAAc,CAAC,CAAC;IAErE,MAAM,KAAK,GAAa;QACtB,UAAU,cAAc,yEAAyE;KAClG,CAAC;IACF,IAAI,eAAe,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,EAAE,EACF,4FAA4F,EAC5F,2EAA2E,EAC3E,4EAA4E,EAC5E,gGAAgG,EAChG,EAAE,EACF,kDAAkD,EAClD,+BAA+B,EAC/B,2EAA2E,CAC5E,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR,EAAE,EACF,0FAA0F,EAC1F,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,oCAAoC,WAAW,GAAG,CAAC,CAAC;IACnE,IAAI,eAAe,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,iCAAiC,eAAe,GAAG,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,QAAkB,EAClB,cAAkC;IAElC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc;QAAE,OAAO,QAAQ,CAAC;IAEhE,8EAA8E;IAC9E,gFAAgF;IAChF,2EAA2E;IAC3E,8CAA8C;IAC9C,IAAI,IAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAoB,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;IAClD,MAAM,sBAAsB,GAC1B,0BAA0B,CAAC,IAAI,CAAC,eAAe,CAAC;QAChD,eAAe,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,sBAAsB;QAAE,OAAO,QAAQ,CAAC;IAE7C,MAAM,QAAQ,GAAoB;QAChC,KAAK,EAAE;YACL,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,GAAG;YAC7B,OAAO,EAAE,oCAAoC,CAAC,cAAc,EAAE,eAAe,CAAC;YAC9E,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,WAAW;SAC1C;KACF,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACjC,iFAAiF;IACjF,iFAAiF;IACjF,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAChD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;QAC5C,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uCAAuC,CAAC,cAAsB;IAC5E,MAAM,IAAI,GAAoB;QAC5B,KAAK,EAAE;YACL,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,oCAAoC,CAAC,cAAc,CAAC;YAC7D,MAAM,EAAE,WAAW;SACpB;KACF,CAAC;IACF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM,EAAE,GAAG;QACX,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,yBAAyB,CAAC,SAAiB;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/B,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,cAAc,CAAC,KAAyB;IAC/C,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC5E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAc;IAC7C,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,MAAM,IAAI,KAAK;QAAE,OAAO,QAAQ,CAAC;IACrC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,OAAuB;IAC7C,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;QAC5C,CAAC,CAAC,OAAO,CAAC,UAAU;QACpB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;YAC3B,CAAC,CAAC,OAAO,CAAC,SAAS;YACnB,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAEjC,IAAI,QAAQ,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,CAAC,GAAG,IAAI,gBAAgB,CAAC,EAAE,CAAC;gBAC/B,gBAAgB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC9C,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,+BAA+B,CAAC,OAAuB,EAAE,KAAa,EAAE,aAAsB;IACrG,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACzD,CAAC,CAAC,OAAO,CAAC,gBAAgB;QAC1B,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,4BAA4B,CAChD,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,EACvE,gBAAgB,CACjB,CAAC;IAEF,MAAM,mBAAmB,GAAG,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;IACvG,MAAM,sBAAsB,GAAG,QAAQ,CAAC,gBAAgB,CAAC,cAAc,CAAC;QACtE,CAAC,CAAC,gBAAgB,CAAC,cAAc;QACjC,CAAC,CAAC,mBAAmB;YACnB,CAAC,CAAC,EAAE,GAAG,mBAAmB,EAAE;YAC5B,CAAC,CAAC,EAAE,CAAC;IAET,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,aAAa,GAAG,aAAa,EAAE,aAAa;eAC7C,CAAC,OAAO,sBAAsB,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;eAC7G,CAAC,aAAa,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;eACjH,aAAa;eACb,KAAK,CAAC;QACX,sBAAsB,CAAC,aAAa,GAAG,aAAa,CAAC;QACrD,IAAI,aAAa,EAAE,eAAe,KAAK,SAAS,EAAE,CAAC;YACjD,sBAAsB,CAAC,eAAe,GAAG,aAAa,CAAC,eAAe,CAAC;QACzE,CAAC;aAAM,IAAI,OAAO,sBAAsB,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACvE,sBAAsB,CAAC,eAAe,GAAG,IAAI,CAAC;QAChD,CAAC;IACH,CAAC;SAAM,IAAI,aAAa,EAAE,cAAc,KAAK,SAAS,IAAI,OAAO,sBAAsB,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QACpH,sBAAsB,CAAC,cAAc,GAAG,aAAa,EAAE,cAAc,IAAI,sBAAsB,CAAC,cAAc,CAAC;QAC/G,IAAI,aAAa,EAAE,eAAe,KAAK,SAAS,EAAE,CAAC;YACjD,sBAAsB,CAAC,eAAe,GAAG,aAAa,CAAC,eAAe,CAAC;QACzE,CAAC;aAAM,IAAI,OAAO,sBAAsB,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACvE,sBAAsB,CAAC,eAAe,GAAG,IAAI,CAAC;QAChD,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,gBAAgB,CAAC,cAAc,GAAG,sBAAsB,CAAC;QACzD,OAAO,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC9C,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,aAAa,EAAE,YAAY,EAAE,CAAC;QAChE,qBAAqB,CAAC,OAAO,EAAE;YAC7B,KAAK;YACL,iBAAiB,EAAE,cAAc,CAAC,OAAO,gBAAgB,CAAC,cAAc,KAAK,QAAQ;mBAChF,gBAAgB,CAAC,cAAc;mBAC/B,eAAe,IAAI,gBAAgB,CAAC,cAAc;gBACrD,CAAC,CAAC,MAAM,CAAE,gBAAgB,CAAC,cAA0C,CAAC,aAAa,CAAC;gBACpF,CAAC,CAAC,SAAS,CAAC;YACd,YAAY,EAAE,aAAa,EAAE,YAAY;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC,KAAK,CAAC;IACrB,OAAO,OAAO,CAAC,eAAe,CAAC;IAC/B,OAAO,OAAO,CAAC,UAAU,CAAC;IAC1B,OAAO,OAAO,CAAC,SAAS,CAAC;IACzB,OAAO,OAAO,CAAC,cAAc,CAAC;IAC9B,OAAO,OAAO,CAAC,QAAQ,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAkB,EAClB,IAA6B,EAC7B,UAA4B;IAE5B,MAAM,YAAY,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACnE,MAAM,SAAS,GAAG,YAAY,EAAE,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;IACzC,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;IACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,0BAA0B,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAExF,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;QACvB,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,QAAQ,IAAI,MAAM,EAAE,EAAE,WAAW,QAAQ,CAAC,WAAW,IAAI,MAAM,EAAE,CAAC,CAAC;IACpH,CAAC;IACD,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE/B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,YAAY,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IAC1E,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAChC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACjD,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAEtC,MAAM,eAAe,GAAG,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnH,MAAM,YAAY,GAAG,IAAI,EAAE,IAAI,IAAI,eAAe,IAAI,YAAY,EAAE,IAAI,IAAI,SAAS,CAAC;IACtF,IAAI,IAAI,GAAG,YAAY,CAAC;IACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;YACnD,+BAA+B,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,IAAI,QAAQ,IAAI,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC3G,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,YAAY,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE;QACvB,IAAI,EAAE;YACJ,MAAM,EAAE,YAAY,EAAE,MAAM;YAC5B,GAAG,IAAI;YACP,OAAO;YACP,IAAI;SACL;QACD,KAAK,EAAE,QAAQ,EAAE,WAAW,IAAI,QAAQ;KACzC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,GAAW,EAAE,UAA4B;IAC5E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,6BAA6B,CAAC,CAAC;IACpF,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE;YACtB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE;gBACP,gBAAgB,EAAE,UAAU,CAAC,MAAM;aACpC;SACF,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAkB,EAClB,IAA6B,EAC7B,UAA4B,EAC5B,oBAA4B;IAE5B,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAClF,+BAA+B,CAAC,UAAU,EAAE,wBAAwB,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,0BAA0B,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAA4B;IACrE,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,IAAI,SAA6B,CAAC;IAClC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,4BAA4B,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,yDAAyD,CAAC,CAAC;QAC/E,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,uDAAuD,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC9B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,UAAU,CAAC,CAAC;QACzE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,iCAAiC,UAAU,CAAC,KAAK,KAAK,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1H,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;QACnE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;QACvC,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC;QAClC,IAAI,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC;IAChC,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,+BAA+B,4BAA4B,cAAc,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;AAC/G,CAAC"}

package/dist/src/plugin/auth.d.ts

@@ -0,0 +1,21 @@
+import type { AuthDetails, OAuthAuthDetails, RefreshParts } from "./types";
+export declare function isOAuthAuth(auth: AuthDetails): auth is OAuthAuthDetails;
+/**
+ * Splits a packed refresh string into its constituent refresh token and project IDs.
+ */
+export declare function parseRefreshParts(refresh: string): RefreshParts;
+/**
+ * Serializes refresh token parts into the stored string format.
+ */
+export declare function formatRefreshParts(parts: RefreshParts): string;
+/**
+ * Determines whether an access token is expired or missing, with buffer for clock skew.
+ */
+export declare function accessTokenExpired(auth: OAuthAuthDetails): boolean;
+/**
+ * Calculates absolute expiry timestamp based on a duration.
+ * @param requestTimeMs The local time when the request was initiated
+ * @param expiresInSeconds The duration returned by the server
+ */
+export declare function calculateTokenExpiry(requestTimeMs: number, expiresInSeconds: unknown): number;
+//# sourceMappingURL=auth.d.ts.map

package/dist/src/plugin/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/plugin/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAI3E,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,IAAI,gBAAgB,CAEvE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,CAO/D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAI9D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAKlE;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,GAAG,MAAM,CAO7F"}

package/dist/src/plugin/auth.js

@@ -0,0 +1,46 @@
+const ACCESS_TOKEN_EXPIRY_BUFFER_MS = 60 * 1000;
+export function isOAuthAuth(auth) {
+    return auth.type === "oauth";
+}
+/**
+ * Splits a packed refresh string into its constituent refresh token and project IDs.
+ */
+export function parseRefreshParts(refresh) {
+    const [refreshToken = "", projectId = "", managedProjectId = ""] = (refresh ?? "").split("|");
+    return {
+        refreshToken,
+        projectId: projectId || undefined,
+        managedProjectId: managedProjectId || undefined,
+    };
+}
+/**
+ * Serializes refresh token parts into the stored string format.
+ */
+export function formatRefreshParts(parts) {
+    const projectSegment = parts.projectId ?? "";
+    const base = `${parts.refreshToken}|${projectSegment}`;
+    return parts.managedProjectId ? `${base}|${parts.managedProjectId}` : base;
+}
+/**
+ * Determines whether an access token is expired or missing, with buffer for clock skew.
+ */
+export function accessTokenExpired(auth) {
+    if (!auth.access || typeof auth.expires !== "number") {
+        return true;
+    }
+    return auth.expires <= Date.now() + ACCESS_TOKEN_EXPIRY_BUFFER_MS;
+}
+/**
+ * Calculates absolute expiry timestamp based on a duration.
+ * @param requestTimeMs The local time when the request was initiated
+ * @param expiresInSeconds The duration returned by the server
+ */
+export function calculateTokenExpiry(requestTimeMs, expiresInSeconds) {
+    const seconds = typeof expiresInSeconds === "number" ? expiresInSeconds : 3600;
+    // Safety check for bad data - if it's not a positive number, treat as immediately expired
+    if (isNaN(seconds) || seconds <= 0) {
+        return requestTimeMs;
+    }
+    return requestTimeMs + seconds * 1000;
+}
+//# sourceMappingURL=auth.js.map

package/dist/src/plugin/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/plugin/auth.ts"],"names":[],"mappings":"AAEA,MAAM,6BAA6B,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhD,MAAM,UAAU,WAAW,CAAC,IAAiB;IAC3C,OAAO,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,CAAC,YAAY,GAAG,EAAE,EAAE,SAAS,GAAG,EAAE,EAAE,gBAAgB,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9F,OAAO;QACL,YAAY;QACZ,SAAS,EAAE,SAAS,IAAI,SAAS;QACjC,gBAAgB,EAAE,gBAAgB,IAAI,SAAS;KAChD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAmB;IACpD,MAAM,cAAc,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,YAAY,IAAI,cAAc,EAAE,CAAC;IACvD,OAAO,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAsB;IACvD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,6BAA6B,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,aAAqB,EAAE,gBAAyB;IACnF,MAAM,OAAO,GAAG,OAAO,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,0FAA0F;IAC1F,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,aAAa,GAAG,OAAO,GAAG,IAAI,CAAC;AACxC,CAAC"}

package/dist/src/plugin/cache/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Cache module for opencode-antigravity-auth plugin.
+ */
+export { SignatureCache, createSignatureCache, } from "./signature-cache";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/plugin/cache/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/plugin/cache/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,cAAc,EACd,oBAAoB,GACrB,MAAM,mBAAmB,CAAC"}

package/dist/src/plugin/cache/index.js

@@ -0,0 +1,5 @@
+/**
+ * Cache module for opencode-antigravity-auth plugin.
+ */
+export { SignatureCache, createSignatureCache, } from "./signature-cache.js";
+//# sourceMappingURL=index.js.map