@claudexor/cli 3.24.0 → 4.0.0

package/dist/account-management.d.ts

@@ -0,0 +1,17 @@
+import type { AccountTarget, CredentialProfile } from "@claudexor/schema";
+/** Management resolves custody, never inference admission. Disabled portable
+ * profiles and ordinary default-named registry rows remain exact targets. */
+export declare function accountManagementTarget(target: AccountTarget, profiles?: readonly CredentialProfile[]): {
+    profile: {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator: string | null;
+        secret_ref: string | null;
+        enabled: boolean;
+        created_at: string | null;
+    };
+    locator: string;
+};
+//# sourceMappingURL=account-management.d.ts.map

package/dist/account-management.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-management.d.ts","sourceRoot":"","sources":["../src/account-management.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAI1E;6EAC6E;AAC7E,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,aAAa,EACrB,QAAQ,GAAE,SAAS,iBAAiB,EACd;;;;;;;;;;;;EAgCvB"}

package/dist/account-management.js

@@ -0,0 +1,35 @@
+import { loadConfig } from "@claudexor/config";
+import { credentialProfilePolicyState, credentialProfilePolicyProblem } from "@claudexor/core";
+import { canonicalCodexProfileHome } from "@claudexor/harness-codex";
+import { canonicalProfileConfigDir } from "@claudexor/harness-claude";
+import { noProjectRepoRoot } from "@claudexor/util";
+import { buildRegistry } from "./registry.js";
+/** Management resolves custody, never inference admission. Disabled portable
+ * profiles and ordinary default-named registry rows remain exact targets. */
+export function accountManagementTarget(target, profiles = loadConfig(noProjectRepoRoot()).global
+    .credential_profiles) {
+    const profile = profiles.find((p) => p.harness_id === target.harness && p.profile_id === target.profile_id);
+    if (!profile)
+        throw Object.assign(new Error("Account target is not registered"), {
+            status: 404,
+            code: "credential_profile_not_found",
+        });
+    const adapter = buildRegistry({ includeFakes: false }).get(target.harness);
+    const state = credentialProfilePolicyState({ adapter, registry: profiles });
+    if (state.ambiguous)
+        throw credentialProfilePolicyProblem(state, "credential_profile_ambiguous");
+    if (state.policy.identity_scope !== "profile" && !profile.enabled)
+        throw Object.assign(new Error("Disabled shared native identity cannot be independently addressed"), { status: 409, code: "account_identity_shared" });
+    if (profile.credential_kind !== "config_dir_login" ||
+        !profile.isolation_locator ||
+        !["codex", "claude"].includes(target.harness))
+        throw Object.assign(new Error("This account has no native resource management source"), {
+            status: 503,
+            code: "account_resources_unsupported",
+        });
+    const locator = target.harness === "codex"
+        ? canonicalCodexProfileHome(profile.isolation_locator)
+        : canonicalProfileConfigDir(profile.isolation_locator);
+    return { profile, locator };
+}
+//# sourceMappingURL=account-management.js.map

package/dist/account-management.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-management.js","sourceRoot":"","sources":["../src/account-management.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,4BAA4B,EAAE,8BAA8B,EAAE,MAAM,iBAAiB,CAAC;AAC/F,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C;6EAC6E;AAC7E,MAAM,UAAU,uBAAuB,CACrC,MAAqB,EACrB,QAAQ,GAAiC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC,MAAM;KAC5E,mBAAmB;IAEtB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAC7E,CAAC;IACF,IAAI,CAAC,OAAO;QACV,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,EAAE;YACjE,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,8BAA8B;SACrC,CAAC,CAAC;IACL,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,4BAA4B,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,SAAS;QAAE,MAAM,8BAA8B,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;IACjG,IAAI,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,OAAO;QAC/D,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,mEAAmE,CAAC,EAC9E,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAyB,EAAE,CACjD,CAAC;IACJ,IACE,OAAO,CAAC,eAAe,KAAK,kBAAkB;QAC9C,CAAC,OAAO,CAAC,iBAAiB;QAC1B,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;QAE7C,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uDAAuD,CAAC,EAAE;YACtF,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,+BAA+B;SACtC,CAAC,CAAC;IACL,MAAM,OAAO,GACX,MAAM,CAAC,OAAO,KAAK,OAAO;QACxB,CAAC,CAAC,yBAAyB,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACtD,CAAC,CAAC,yBAAyB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC"}

package/dist/account-reset-command.d.ts

@@ -0,0 +1,3 @@
+import { type ParsedArgs } from "./args.js";
+export declare function accountResetCommand(args: ParsedArgs, json: boolean): Promise<number>;
+//# sourceMappingURL=account-reset-command.d.ts.map

package/dist/account-reset-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-reset-command.d.ts","sourceRoot":"","sources":["../src/account-reset-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAKrD,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CA4B1F"}

package/dist/account-reset-command.js

@@ -0,0 +1,32 @@
+import { flagStr } from "./args.js";
+import { print, printJson } from "./cli-io.js";
+import { renderCliFailure } from "./cli-error.js";
+import { accountResourceQuery, parseAccountTarget } from "./account-resource-query.js";
+export async function accountResetCommand(args, json) {
+    try {
+        const operation = flagStr(args, "operation");
+        if (operation &&
+            (args._[1] ||
+                flagStr(args, "offer") ||
+                flagStr(args, "grant") ||
+                flagStr(args, "idempotency-key")))
+            throw new Error("--operation cannot be combined with a reset request");
+        const value = operation
+            ? await accountResourceQuery("reset", { operation_id: operation })
+            : await accountResourceQuery("reset", {
+                target: parseAccountTarget(args._[1] ?? ""),
+                offer_id: flagStr(args, "offer") ?? "",
+                grant_id: flagStr(args, "grant"),
+                idempotency_key: flagStr(args, "idempotency-key") ?? "",
+            });
+        if (json)
+            printJson(value);
+        else
+            print(`${value.id}: ${value.outcome}; resource readback: ${value.readback.state}${value.detail ? ` (${value.detail})` : ""}`);
+        return ["unknown", "already_used", "unavailable"].includes(value.outcome) ? 1 : 0;
+    }
+    catch (error) {
+        return renderCliFailure(json, error, { messagePrefix: "claudexor account-reset:" });
+    }
+}
+//# sourceMappingURL=account-reset-command.js.map

package/dist/account-reset-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-reset-command.js","sourceRoot":"","sources":["../src/account-reset-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAmB,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEvF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAgB,EAAE,IAAa;IACvE,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC7C,IACE,SAAS;YACT,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACR,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;gBACtB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;gBACtB,OAAO,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YAEnC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,SAAS;YACrB,CAAC,CAAC,MAAM,oBAAoB,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;YAClE,CAAC,CAAC,MAAM,oBAAoB,CAAC,OAAO,EAAE;gBAClC,MAAM,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3C,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;gBACtC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;gBAChC,eAAe,EAAE,OAAO,CAAC,IAAI,EAAE,iBAAiB,CAAC,IAAI,EAAE;aACxD,CAAC,CAAC;QACP,IAAI,IAAI;YAAE,SAAS,CAAC,KAAK,CAAC,CAAC;;YAEzB,KAAK,CACH,GAAG,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,wBAAwB,KAAK,CAAC,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACvH,CAAC;QACJ,OAAO,CAAC,SAAS,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,aAAa,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC"}

package/dist/account-reset-services.d.ts

@@ -0,0 +1,341 @@
+import { type AccountResetBinding, type CommandStorePort, type QuotaRegistry } from "@claudexor/daemon";
+import type { ControlAccountResetRequest, ControlAccountResetResponse } from "@claudexor/schema";
+export declare function accountResetServices(commands: {
+    current(): CommandStorePort;
+}, quota: {
+    current(): QuotaRegistry;
+}): {
+    createAccountReset: (input: {
+        request: ControlAccountResetRequest;
+        idempotencyKey: string;
+        clientId: string;
+    }) => Promise<{
+        id: string;
+        request: {
+            target: {
+                harness: string;
+                profile_id: string;
+            };
+            offer_id: string;
+            grant_id?: string | undefined;
+        };
+        state: "completed" | "running";
+        created_at: string;
+        completed_at: string | null;
+        outcome: "already_redeemed" | "already_used" | "cooldown" | "no_credit" | "not_eligible" | "nothing_to_reset" | "pending" | "reset" | "unavailable" | "unknown";
+        detail: string | null;
+        readback: {
+            state: "failed" | "fresh" | "pending";
+            attempted_at: string | null;
+            detail: string | null;
+        };
+        resources: {
+            snapshots: {
+                subject: {
+                    harness: string;
+                    credential_route: "local" | "managed_api_key" | "vendor_native";
+                    plan_label: string | null;
+                    subject_id: string | null;
+                };
+                constraints: {
+                    id: string;
+                    label: string;
+                    applies_to_models?: string[] | null | undefined;
+                    applies_to_model_prefixes?: string[] | undefined;
+                    applies_to_unspecified_model?: boolean | undefined;
+                    used_ratio: number | null;
+                    window_seconds: number | null;
+                    resets_at: string | null;
+                    cooldown_until: string | null;
+                }[];
+                source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_rate_limit_event" | "claude_statusline" | "codex_app_server" | "codex_app_server_event" | "codex_rollout" | "cursor_rate_limit";
+                observed_at: string;
+                freshness: "fresh" | "stale" | "unknown";
+                snapshot_id?: string | undefined;
+                availability?: {
+                    state: "available" | "cooldown" | "exhausted";
+                    blocking_constraints: string[];
+                    resets_at: string | null;
+                    model_scoped_exhaustions: {
+                        constraint_id: string;
+                        applies_to_models: string[];
+                        applies_to_model_prefixes?: string[] | undefined;
+                        resets_at: string | null;
+                    }[];
+                } | undefined;
+            }[];
+            absences: {
+                subject: {
+                    harness: string;
+                    credential_route: "local" | "managed_api_key" | "vendor_native";
+                    plan_label: string | null;
+                    subject_id: string | null;
+                };
+                reason: "auth_revoked" | "credential_profile_ambiguous" | "no_source" | "not_logged_in" | "platform_unsupported" | "poll_paced" | "probe_skipped_rate_limited" | "rate_limited" | "refresh_failed" | "transport_unavailable";
+                detail: string | null;
+                observed_at: string;
+                retry_after_ms?: number | undefined;
+            }[];
+            refreshed_at: string | null;
+            refresh_skipped?: {
+                vendor: string;
+                subject?: {
+                    harness: string;
+                    credential_route: "local" | "managed_api_key" | "vendor_native";
+                    plan_label: string | null;
+                    subject_id: string | null;
+                } | undefined;
+                not_before: string;
+            }[] | undefined;
+            resources: {
+                target: {
+                    harness: string;
+                    profile_id: string;
+                };
+                balances: {
+                    value: {
+                        id: string;
+                        label: string;
+                        amount: string | null;
+                        unit: string;
+                        currency: string | null;
+                        decimal_places: number | null;
+                        has_balance: boolean | null;
+                        unlimited: boolean | null;
+                    }[] | null;
+                    source: string | null;
+                    observed_at: string | null;
+                    freshness: "fresh" | "stale" | "unknown";
+                    last_attempt_at: string | null;
+                    last_error: string | null;
+                };
+                spending: {
+                    value: {
+                        id: string;
+                        label: string;
+                        enabled: boolean | null;
+                        used: string | null;
+                        limit: string | null;
+                        unit: string;
+                        currency: string | null;
+                        decimal_places: number | null;
+                        resets_at: string | null;
+                        reason: string | null;
+                    }[] | null;
+                    source: string | null;
+                    observed_at: string | null;
+                    freshness: "fresh" | "stale" | "unknown";
+                    last_attempt_at: string | null;
+                    last_error: string | null;
+                };
+                resets: {
+                    value: {
+                        id: string;
+                        kind: "granted_reset" | "session_refill";
+                        label: string;
+                        description: string | null;
+                        available_count: number | null;
+                        eligible: boolean | null;
+                        usable_now: boolean | null;
+                        reason: string | null;
+                        resets_at: string | null;
+                        weekly_limit_applies: boolean;
+                        grants: {
+                            id: string;
+                            label: string;
+                            description: string | null;
+                            available_count: number | null;
+                            total_count: number | null;
+                            usable_now: boolean | null;
+                            starts_at: string | null;
+                            expires_at: string | null;
+                            clears: string[];
+                        }[] | null;
+                    }[] | null;
+                    source: string | null;
+                    observed_at: string | null;
+                    freshness: "fresh" | "stale" | "unknown";
+                    last_attempt_at: string | null;
+                    last_error: string | null;
+                };
+                diagnostics: {
+                    value: {
+                        code: string;
+                        detail: string | null;
+                    }[] | null;
+                    source: string | null;
+                    observed_at: string | null;
+                    freshness: "fresh" | "stale" | "unknown";
+                    last_attempt_at: string | null;
+                    last_error: string | null;
+                };
+            }[];
+        } | null;
+    }>;
+    accountReset: (id: string) => Promise<{
+        id: string;
+        request: {
+            target: {
+                harness: string;
+                profile_id: string;
+            };
+            offer_id: string;
+            grant_id?: string | undefined;
+        };
+        state: "completed" | "running";
+        created_at: string;
+        completed_at: string | null;
+        outcome: "already_redeemed" | "already_used" | "cooldown" | "no_credit" | "not_eligible" | "nothing_to_reset" | "pending" | "reset" | "unavailable" | "unknown";
+        detail: string | null;
+        readback: {
+            state: "failed" | "fresh" | "pending";
+            attempted_at: string | null;
+            detail: string | null;
+        };
+        resources: {
+            snapshots: {
+                subject: {
+                    harness: string;
+                    credential_route: "local" | "managed_api_key" | "vendor_native";
+                    plan_label: string | null;
+                    subject_id: string | null;
+                };
+                constraints: {
+                    id: string;
+                    label: string;
+                    applies_to_models?: string[] | null | undefined;
+                    applies_to_model_prefixes?: string[] | undefined;
+                    applies_to_unspecified_model?: boolean | undefined;
+                    used_ratio: number | null;
+                    window_seconds: number | null;
+                    resets_at: string | null;
+                    cooldown_until: string | null;
+                }[];
+                source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_rate_limit_event" | "claude_statusline" | "codex_app_server" | "codex_app_server_event" | "codex_rollout" | "cursor_rate_limit";
+                observed_at: string;
+                freshness: "fresh" | "stale" | "unknown";
+                snapshot_id?: string | undefined;
+                availability?: {
+                    state: "available" | "cooldown" | "exhausted";
+                    blocking_constraints: string[];
+                    resets_at: string | null;
+                    model_scoped_exhaustions: {
+                        constraint_id: string;
+                        applies_to_models: string[];
+                        applies_to_model_prefixes?: string[] | undefined;
+                        resets_at: string | null;
+                    }[];
+                } | undefined;
+            }[];
+            absences: {
+                subject: {
+                    harness: string;
+                    credential_route: "local" | "managed_api_key" | "vendor_native";
+                    plan_label: string | null;
+                    subject_id: string | null;
+                };
+                reason: "auth_revoked" | "credential_profile_ambiguous" | "no_source" | "not_logged_in" | "platform_unsupported" | "poll_paced" | "probe_skipped_rate_limited" | "rate_limited" | "refresh_failed" | "transport_unavailable";
+                detail: string | null;
+                observed_at: string;
+                retry_after_ms?: number | undefined;
+            }[];
+            refreshed_at: string | null;
+            refresh_skipped?: {
+                vendor: string;
+                subject?: {
+                    harness: string;
+                    credential_route: "local" | "managed_api_key" | "vendor_native";
+                    plan_label: string | null;
+                    subject_id: string | null;
+                } | undefined;
+                not_before: string;
+            }[] | undefined;
+            resources: {
+                target: {
+                    harness: string;
+                    profile_id: string;
+                };
+                balances: {
+                    value: {
+                        id: string;
+                        label: string;
+                        amount: string | null;
+                        unit: string;
+                        currency: string | null;
+                        decimal_places: number | null;
+                        has_balance: boolean | null;
+                        unlimited: boolean | null;
+                    }[] | null;
+                    source: string | null;
+                    observed_at: string | null;
+                    freshness: "fresh" | "stale" | "unknown";
+                    last_attempt_at: string | null;
+                    last_error: string | null;
+                };
+                spending: {
+                    value: {
+                        id: string;
+                        label: string;
+                        enabled: boolean | null;
+                        used: string | null;
+                        limit: string | null;
+                        unit: string;
+                        currency: string | null;
+                        decimal_places: number | null;
+                        resets_at: string | null;
+                        reason: string | null;
+                    }[] | null;
+                    source: string | null;
+                    observed_at: string | null;
+                    freshness: "fresh" | "stale" | "unknown";
+                    last_attempt_at: string | null;
+                    last_error: string | null;
+                };
+                resets: {
+                    value: {
+                        id: string;
+                        kind: "granted_reset" | "session_refill";
+                        label: string;
+                        description: string | null;
+                        available_count: number | null;
+                        eligible: boolean | null;
+                        usable_now: boolean | null;
+                        reason: string | null;
+                        resets_at: string | null;
+                        weekly_limit_applies: boolean;
+                        grants: {
+                            id: string;
+                            label: string;
+                            description: string | null;
+                            available_count: number | null;
+                            total_count: number | null;
+                            usable_now: boolean | null;
+                            starts_at: string | null;
+                            expires_at: string | null;
+                            clears: string[];
+                        }[] | null;
+                    }[] | null;
+                    source: string | null;
+                    observed_at: string | null;
+                    freshness: "fresh" | "stale" | "unknown";
+                    last_attempt_at: string | null;
+                    last_error: string | null;
+                };
+                diagnostics: {
+                    value: {
+                        code: string;
+                        detail: string | null;
+                    }[] | null;
+                    source: string | null;
+                    observed_at: string | null;
+                    freshness: "fresh" | "stale" | "unknown";
+                    last_attempt_at: string | null;
+                    last_error: string | null;
+                };
+            }[];
+        } | null;
+    }>;
+};
+export declare function consumeNativeReset(binding: AccountResetBinding): Promise<Pick<ControlAccountResetResponse, "outcome" | "detail">>;
+export declare function nativeResetOutcome(harness: string, value: unknown): Pick<ControlAccountResetResponse, "outcome" | "detail">;
+//# sourceMappingURL=account-reset-services.d.ts.map

package/dist/account-reset-services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-reset-services.d.ts","sourceRoot":"","sources":["../src/account-reset-services.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAEV,0BAA0B,EAC1B,2BAA2B,EAC5B,MAAM,mBAAmB,CAAC;AAuD3B,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE;IAAE,OAAO,IAAI,gBAAgB,CAAA;CAAE,EACzC,KAAK,EAAE;IAAE,OAAO,IAAI,aAAa,CAAA;CAAE;IAgEjC,kBAAkB,UAAU;QAC1B,OAAO,EAAE,0BAA0B,CAAC;QACpC,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC;KAClB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IACD,YAAY,OAAa,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAElC;AAED,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,2BAA2B,EAAE,SAAS,GAAG,QAAQ,CAAC,CAAC,CAoDlE;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,OAAO,GACb,IAAI,CAAC,2BAA2B,EAAE,SAAS,GAAG,QAAQ,CAAC,CA6BzD"}

package/dist/account-reset-services.js

@@ -0,0 +1,183 @@
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { randomUUID } from "node:crypto";
+import { AccountResets, } from "@claudexor/daemon";
+import { sha256 } from "@claudexor/util";
+import { readClaudeOauthCredential, readClaudeOauthOrganization, } from "./claude-oauth-credential.js";
+import { accountManagementTarget } from "./account-management.js";
+import { requestCodexAccount } from "./codex-quota-source.js";
+import { claudeResourceRequest } from "./claude-resource-transport.js";
+import { accountResourcesResponse } from "./quota-services.js";
+async function nativeIdentity(target) {
+    const { locator } = accountManagementTarget(target);
+    if (target.harness === "claude") {
+        const organization = await readClaudeOauthOrganization(locator);
+        if (!organization)
+            throw Object.assign(new Error("Native organization binding is unavailable"), {
+                status: 409,
+                code: "account_binding_unavailable",
+            });
+        return {
+            locator,
+            fingerprint: sha256(JSON.stringify(organization)),
+            organization: organization.organizationUuid,
+        };
+    }
+    let data;
+    try {
+        data = JSON.parse(await readFile(join(locator, "auth.json"), "utf8"));
+    }
+    catch {
+        throw Object.assign(new Error("Native account binding is unavailable"), {
+            status: 409,
+            code: "account_binding_unavailable",
+        });
+    }
+    const account = data.tokens?.account_id;
+    if (typeof account !== "string" || !account)
+        throw Object.assign(new Error("Native account identity is unavailable"), {
+            status: 409,
+            code: "account_binding_unavailable",
+        });
+    // Subject claim is stable across token refresh, unlike the token bytes.
+    let principal = null;
+    try {
+        const token = data.tokens?.id_token;
+        if (typeof token === "string") {
+            const claims = JSON.parse(Buffer.from(token.split(".")[1] ?? "", "base64url").toString());
+            principal = typeof claims.sub === "string" ? claims.sub : null;
+        }
+    }
+    catch {
+        /* account id is still provider-owned binding */
+    }
+    return { locator, fingerprint: sha256(JSON.stringify([account, principal])), organization: null };
+}
+export function accountResetServices(commands, quota) {
+    const operations = new AccountResets({
+        commands: () => commands.current(),
+        resolve: async (request) => {
+            const identity = await nativeIdentity(request.target);
+            const programs = {
+                codex_granted: { harness: "codex", program: "rate_limit_reset_credit" },
+                claude_granted: { harness: "claude", program: "cedar_ember" },
+                claude_session_refill: { harness: "claude", program: "juniper_tide" },
+            };
+            const program = programs[request.offer_id];
+            if (!program || program.harness !== request.target.harness)
+                throw Object.assign(new Error("Unknown reset offer for this account"), {
+                    status: 400,
+                    code: "account_reset_offer_invalid",
+                });
+            const offer = quota
+                .current()
+                .readResources()
+                .find((row) => row.target.harness === request.target.harness &&
+                row.target.profile_id === request.target.profile_id)
+                ?.resets.value?.find((offer) => offer.id === request.offer_id);
+            const grant = request.grant_id ?? offer?.grants?.find((grant) => grant.usable_now === true)?.id ?? null;
+            if (program.program === "cedar_ember" && !grant)
+                throw Object.assign(new Error("A native grant id is required; refresh this account or provide its grant id"), { status: 400, code: "account_reset_grant_required" });
+            if (program.program === "juniper_tide" && request.grant_id)
+                throw Object.assign(new Error("Session refill does not accept a grant id"), {
+                    status: 400,
+                    code: "account_reset_grant_invalid",
+                });
+            return {
+                harness: program.harness,
+                locator: identity.locator,
+                fingerprint: identity.fingerprint,
+                program: program.program,
+                grant_id: grant,
+                native_request_id: randomUUID(),
+            };
+        },
+        verify: async (binding, target) => {
+            const identity = await nativeIdentity(target);
+            if (identity.locator !== binding.locator || identity.fingerprint !== binding.fingerprint)
+                throw Object.assign(new Error("The reset operation's native account binding changed"), {
+                    status: 409,
+                    code: "account_binding_changed",
+                });
+        },
+        consume: consumeNativeReset,
+        read: () => accountResourcesResponse(quota.current()),
+        invalidate: (target) => quota.current().invalidateAccountResources(target),
+        refresh: async (target, mayHaveChanged) => {
+            const result = await quota.current().refreshResources(target, true, mayHaveChanged);
+            return accountResourcesResponse(quota.current(), result, result.resources);
+        },
+    });
+    return {
+        createAccountReset: (input) => operations.create(input),
+        accountReset: async (id) => operations.get(id),
+    };
+}
+export async function consumeNativeReset(binding) {
+    let value;
+    if (binding.harness === "codex")
+        value = await requestCodexAccount(binding.locator, undefined, undefined, undefined, undefined, "account/rateLimitResetCredit/consume", {
+            idempotencyKey: binding.native_request_id,
+            ...(binding.grant_id ? { creditId: binding.grant_id } : {}),
+        });
+    else {
+        const credential = await readClaudeOauthCredential(binding.locator);
+        const organization = await readClaudeOauthOrganization(binding.locator);
+        if (!credential || !organization)
+            return { outcome: "unavailable", detail: "native_credential_unavailable" };
+        try {
+            value = await claudeResourceRequest(`/api/organizations/${encodeURIComponent(organization.organizationUuid)}/reset_rate_limits`, credential.accessToken, {
+                body: binding.program === "cedar_ember"
+                    ? {
+                        program: binding.program,
+                        grant_id: binding.grant_id,
+                        request_id: binding.native_request_id,
+                    }
+                    : { program: binding.program },
+            });
+        }
+        catch (error) {
+            const status = error?.status;
+            if (typeof status === "number" &&
+                Number.isInteger(status) &&
+                status >= 100 &&
+                status <= 599) {
+                return {
+                    outcome: "unknown",
+                    detail: `Provider returned HTTP ${status}; reset outcome is unconfirmed`,
+                };
+            }
+            throw error;
+        }
+    }
+    return nativeResetOutcome(binding.harness, value);
+}
+export function nativeResetOutcome(harness, value) {
+    const row = value && typeof value === "object" ? value : {};
+    const mapping = harness === "codex"
+        ? {
+            reset: "reset",
+            alreadyRedeemed: "already_redeemed",
+            nothingToReset: "nothing_to_reset",
+            noCredit: "no_credit",
+        }
+        : {
+            reset: "reset",
+            already_used: "already_used",
+            not_limited: "nothing_to_reset",
+            ineligible: "not_eligible",
+            cooldown: "cooldown",
+            unavailable: "unavailable",
+        };
+    const native = row[harness === "codex" ? "outcome" : "result"];
+    const outcome = typeof native === "string" ? (mapping[native] ?? "unknown") : "unknown";
+    return {
+        outcome,
+        detail: outcome === "unknown"
+            ? "provider_outcome_unconfirmed"
+            : outcome === "already_used"
+                ? "grant_used_ownership_unconfirmed"
+                : null,
+    };
+}
+//# sourceMappingURL=account-reset-services.js.map

package/dist/account-reset-services.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-reset-services.js","sourceRoot":"","sources":["../src/account-reset-services.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,aAAa,GAId,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EACL,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,KAAK,UAAU,cAAc,CAAC,MAAqB;IACjD,MAAM,EAAE,OAAO,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,YAAY;YACf,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4CAA4C,CAAC,EAAE;gBAC3E,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,6BAA6B;aACpC,CAAC,CAAC;QACL,OAAO;YACL,OAAO;YACP,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YACjD,YAAY,EAAE,YAAY,CAAC,gBAAgB;SAC5C,CAAC;IACJ,CAAC;IACD,IAAI,IAA+D,CAAC;IACpE,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,EAAE;YACtE,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,6BAA6B;SACpC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC;IACxC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO;QACzC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,EAAE;YACvE,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,6BAA6B;SACpC,CAAC,CAAC;IACL,wEAAwE;IACxE,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;QACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1F,SAAS,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACjE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;AACpG,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAyC,EACzC,KAAmC;IAEnC,MAAM,UAAU,GAAG,IAAI,aAAa,CAAC;QACnC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE;QAClC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACzB,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACtD,MAAM,QAAQ,GAAyD;gBACrE,aAAa,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,yBAAyB,EAAE;gBACvE,cAAc,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE;gBAC7D,qBAAqB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE;aACtE,CAAC;YACF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,OAAO;gBACxD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,EAAE;oBACrE,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,6BAA6B;iBACpC,CAAC,CAAC;YACL,MAAM,KAAK,GAAG,KAAK;iBAChB,OAAO,EAAE;iBACT,aAAa,EAAE;iBACf,IAAI,CACH,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,OAAO;gBAC7C,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,UAAU,CACtD;gBACD,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjE,MAAM,KAAK,GACT,OAAO,CAAC,QAAQ,IAAI,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC;YAC5F,IAAI,OAAO,CAAC,OAAO,KAAK,aAAa,IAAI,CAAC,KAAK;gBAC7C,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,6EAA6E,CAAC,EACxF,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,8BAA8B,EAAE,CACtD,CAAC;YACJ,IAAI,OAAO,CAAC,OAAO,KAAK,cAAc,IAAI,OAAO,CAAC,QAAQ;gBACxD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2CAA2C,CAAC,EAAE;oBAC1E,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,6BAA6B;iBACpC,CAAC,CAAC;YACL,OAAO;gBACL,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,QAAQ,EAAE,KAAK;gBACf,iBAAiB,EAAE,UAAU,EAAE;aAChC,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;YAChC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;gBACtF,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sDAAsD,CAAC,EAAE;oBACrF,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,yBAAyB;iBAChC,CAAC,CAAC;QACP,CAAC;QACD,OAAO,EAAE,kBAAkB;QAC3B,IAAI,EAAE,GAAG,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACrD,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,0BAA0B,CAAC,MAAM,CAAC;QAC1E,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE;YACxC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;YACpF,OAAO,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7E,CAAC;KACF,CAAC,CAAC;IACH,OAAO;QACL,kBAAkB,EAAE,CAAC,KAIpB,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;QAC9B,YAAY,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA4B;IAE5B,IAAI,KAAc,CAAC;IACnB,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO;QAC7B,KAAK,GAAG,MAAM,mBAAmB,CAC/B,OAAO,CAAC,OAAO,EACf,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,sCAAsC,EACtC;YACE,cAAc,EAAE,OAAO,CAAC,iBAAiB;YACzC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CACF,CAAC;SACC,CAAC;QACJ,MAAM,UAAU,GAAG,MAAM,yBAAyB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpE,MAAM,YAAY,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY;YAC9B,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;QAC7E,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,qBAAqB,CACjC,sBAAsB,kBAAkB,CAAC,YAAY,CAAC,gBAAgB,CAAC,oBAAoB,EAC3F,UAAU,CAAC,WAAW,EACtB;gBACE,IAAI,EACF,OAAO,CAAC,OAAO,KAAK,aAAa;oBAC/B,CAAC,CAAC;wBACE,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,UAAU,EAAE,OAAO,CAAC,iBAAiB;qBACtC;oBACH,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;aACnC,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAI,KAA8B,EAAE,MAAM,CAAC;YACvD,IACE,OAAO,MAAM,KAAK,QAAQ;gBAC1B,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;gBACxB,MAAM,IAAI,GAAG;gBACb,MAAM,IAAI,GAAG,EACb,CAAC;gBACD,OAAO;oBACL,OAAO,EAAE,SAAS;oBAClB,MAAM,EAAE,0BAA0B,MAAM,gCAAgC;iBACzE,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,KAAc;IAEd,MAAM,GAAG,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,MAAM,OAAO,GACX,OAAO,KAAK,OAAO;QACjB,CAAC,CAAC;YACE,KAAK,EAAE,OAAO;YACd,eAAe,EAAE,kBAAkB;YACnC,cAAc,EAAE,kBAAkB;YAClC,QAAQ,EAAE,WAAW;SACtB;QACH,CAAC,CAAC;YACE,KAAK,EAAE,OAAO;YACd,YAAY,EAAE,cAAc;YAC5B,WAAW,EAAE,kBAAkB;YAC/B,UAAU,EAAE,cAAc;YAC1B,QAAQ,EAAE,UAAU;YACpB,WAAW,EAAE,aAAa;SAC3B,CAAC;IACR,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,OAAO;QACL,OAAO;QACP,MAAM,EACJ,OAAO,KAAK,SAAS;YACnB,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,OAAO,KAAK,cAAc;gBAC1B,CAAC,CAAC,kCAAkC;gBACpC,CAAC,CAAC,IAAI;KACb,CAAC;AACJ,CAAC"}