@cortexkit/opencode-antigravity-auth 2.0.0 → 2.1.0

package/dist/src/plugin/account-command-oauth.d.ts

@@ -0,0 +1,34 @@
+import type { AntigravityAuthorization, AntigravityTokenExchangeResult } from '../antigravity/oauth';
+import type { CommandAccountRow } from './command-data';
+type OAuthSuccess = Extract<AntigravityTokenExchangeResult, {
+    type: 'success';
+}>;
+export interface AccountCommandOAuthServiceOptions {
+    authorize: () => Promise<AntigravityAuthorization>;
+    exchange: (code: string, state: string) => Promise<AntigravityTokenExchangeResult>;
+    persist: (result: OAuthSuccess) => Promise<void>;
+    listAccounts: () => Promise<CommandAccountRow[]>;
+    /**
+     * Optional hook invoked AFTER persist completes successfully. The plugin
+     * uses it to refresh the live AccountManager so the new account is
+     * visible to routing immediately, without waiting for an auth reload.
+     * Failures are swallowed — the OAuth flow still reports success and the
+     * next periodic AccountManager reload picks up the new account.
+     */
+    onAfterPersist?: (result: OAuthSuccess) => Promise<void> | void;
+    now?: () => number;
+}
+export interface AccountCommandOAuthService {
+    start(sessionId: string): Promise<{
+        url: string;
+        accounts: CommandAccountRow[];
+    }>;
+    finish(sessionId: string, callbackInput: string, label?: string): Promise<{
+        text: string;
+        accounts: CommandAccountRow[];
+    }>;
+    dispose(): void;
+}
+export declare function createAccountCommandOAuthService(options: AccountCommandOAuthServiceOptions): AccountCommandOAuthService;
+export {};
+//# sourceMappingURL=account-command-oauth.d.ts.map

package/dist/src/plugin/account-command-oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-command-oauth.d.ts","sourceRoot":"","sources":["../../../src/plugin/account-command-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAGvD,KAAK,YAAY,GAAG,OAAO,CAAC,8BAA8B,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,CAAA;AAShF,MAAM,WAAW,iCAAiC;IAChD,SAAS,EAAE,MAAM,OAAO,CAAC,wBAAwB,CAAC,CAAA;IAClD,QAAQ,EAAE,CACR,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,KACV,OAAO,CAAC,8BAA8B,CAAC,CAAA;IAC5C,OAAO,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD,YAAY,EAAE,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAA;IAChD;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IAC/D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAChC,GAAG,EAAE,MAAM,CAAA;QACX,QAAQ,EAAE,iBAAiB,EAAE,CAAA;KAC9B,CAAC,CAAA;IACF,MAAM,CACJ,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QACT,IAAI,EAAE,MAAM,CAAA;QACZ,QAAQ,EAAE,iBAAiB,EAAE,CAAA;KAC9B,CAAC,CAAA;IACF,OAAO,IAAI,IAAI,CAAA;CAChB;AAKD,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,iCAAiC,GACzC,0BAA0B,CAgK5B"}

package/dist/src/plugin/account-command-oauth.js

@@ -0,0 +1,156 @@
+import { parseOAuthCallbackInput } from './oauth-methods';
+const OAUTH_PENDING_TTL_MS = 10 * 60 * 1_000;
+const OAUTH_PENDING_CAP = 50;
+export function createAccountCommandOAuthService(options) {
+    const pendingBySession = new Map();
+    const now = options.now ?? (() => Date.now());
+    const cleanupExpired = () => {
+        const current = now();
+        for (const [sessionId, entry] of pendingBySession) {
+            if (current - entry.createdAt > OAUTH_PENDING_TTL_MS) {
+                pendingBySession.delete(sessionId);
+            }
+        }
+    };
+    const takePending = (sessionId) => {
+        cleanupExpired();
+        const entry = pendingBySession.get(sessionId);
+        if (!entry || now() - entry.createdAt > OAUTH_PENDING_TTL_MS) {
+            pendingBySession.delete(sessionId);
+            return undefined;
+        }
+        // Consume the entry atomically with the take. A second concurrent
+        // `add-oauth-finish` call must observe "no pending entry" even
+        // before the first call's exchange completes — the previous
+        // peek-then-finally pattern allowed two finish() calls to both
+        // exchange and persist the same auth code.
+        pendingBySession.delete(sessionId);
+        return entry;
+    };
+    // Wrap listAccounts so a lock-contention or I/O failure in the error
+    // branches below does not replace the real OAuth failure text with a
+    // generic apply-error message. Mirrors the stage-4 guarded pattern.
+    const safeListAccounts = async () => {
+        try {
+            return await options.listAccounts();
+        }
+        catch {
+            return [];
+        }
+    };
+    return {
+        async start(sessionId) {
+            const authorization = await options.authorize();
+            const url = new URL(authorization.url);
+            const state = url.searchParams.get('state');
+            const redirectUri = url.searchParams.get('redirect_uri');
+            if (!state || !redirectUri) {
+                throw new Error('OAuth authorization URL is missing required state');
+            }
+            cleanupExpired();
+            if (pendingBySession.size >= OAUTH_PENDING_CAP) {
+                const oldest = [...pendingBySession.entries()].reduce((previous, current) => current[1].createdAt < previous[1].createdAt ? current : previous);
+                pendingBySession.delete(oldest[0]);
+            }
+            pendingBySession.set(sessionId, {
+                state,
+                verifier: authorization.verifier,
+                redirectUri,
+                createdAt: now(),
+            });
+            return { url: authorization.url, accounts: await safeListAccounts() };
+        },
+        async finish(sessionId, callbackInput, label) {
+            const pending = takePending(sessionId);
+            if (!pending) {
+                return {
+                    text: 'OAuth session expired. Please start again.',
+                    accounts: await safeListAccounts(),
+                };
+            }
+            // Stage 1: parse the callback URL/code. Failures here mean the
+            // user pasted a malformed callback — exchange has not started.
+            let callback;
+            try {
+                callback = parseOAuthCallbackInput(callbackInput, pending.state);
+            }
+            catch {
+                return {
+                    text: 'OAuth authentication failed: could not parse the callback. Please start a new OAuth flow.',
+                    accounts: await safeListAccounts(),
+                };
+            }
+            if ('error' in callback) {
+                return {
+                    text: `OAuth authentication failed: ${callback.error}. Please start a new OAuth flow.`,
+                    accounts: await safeListAccounts(),
+                };
+            }
+            // Stage 2: exchange the auth code with Google. Failures here mean
+            // the network or token endpoint rejected the code — nothing has
+            // been persisted yet.
+            let result;
+            try {
+                result = await options.exchange(callback.code, callback.state);
+            }
+            catch {
+                return {
+                    text: 'OAuth exchange failed due to a network error. Please start a new OAuth flow.',
+                    accounts: await safeListAccounts(),
+                };
+            }
+            if (result.type === 'failed') {
+                return {
+                    text: 'OAuth authentication failed. Please start a new OAuth flow and try again.',
+                    accounts: await safeListAccounts(),
+                };
+            }
+            // Stage 3: persist the new account to disk. A failure here means
+            // the account is NOT stored — surface the stage so the operator
+            // can retry without thinking the previous error already landed it.
+            const persisted = {
+                ...result,
+                label: label || result.label,
+            };
+            try {
+                await options.persist(persisted);
+            }
+            catch {
+                return {
+                    text: 'OAuth account could not be saved to disk. Please start a new OAuth flow.',
+                    accounts: await safeListAccounts(),
+                };
+            }
+            // Refresh the live AccountManager so routing sees the new account
+            // immediately instead of waiting for the next auth reload. Errors
+            // here are non-fatal — the on-disk write already landed.
+            try {
+                await options.onAfterPersist?.(persisted);
+            }
+            catch {
+                // Best-effort refresh; swallow failures.
+            }
+            // Stage 4: re-list the account pool. If the post-persist read
+            // fails for any reason (lock contention, I/O) we still report the
+            // successful add — the dialog will refresh on its next open.
+            let accounts;
+            try {
+                accounts = await options.listAccounts();
+            }
+            catch {
+                return {
+                    text: 'OAuth account added.',
+                    accounts: [],
+                };
+            }
+            return {
+                text: 'OAuth account added.',
+                accounts,
+            };
+        },
+        dispose() {
+            pendingBySession.clear();
+        },
+    };
+}
+//# sourceMappingURL=account-command-oauth.js.map

package/dist/src/plugin/account-command-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-command-oauth.js","sourceRoot":"","sources":["../../../src/plugin/account-command-oauth.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAA;AA8CzD,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;AAC5C,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAE5B,MAAM,UAAU,gCAAgC,CAC9C,OAA0C;IAE1C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA6B,CAAA;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAE7C,MAAM,cAAc,GAAG,GAAS,EAAE;QAChC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAA;QACrB,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,gBAAgB,EAAE,CAAC;YAClD,IAAI,OAAO,GAAG,KAAK,CAAC,SAAS,GAAG,oBAAoB,EAAE,CAAC;gBACrD,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YACpC,CAAC;QACH,CAAC;IACH,CAAC,CAAA;IAED,MAAM,WAAW,GAAG,CAAC,SAAiB,EAAiC,EAAE;QACvE,cAAc,EAAE,CAAA;QAChB,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC7C,IAAI,CAAC,KAAK,IAAI,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,GAAG,oBAAoB,EAAE,CAAC;YAC7D,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YAClC,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,kEAAkE;QAClE,+DAA+D;QAC/D,4DAA4D;QAC5D,+DAA+D;QAC/D,2CAA2C;QAC3C,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAClC,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;IAED,qEAAqE;IACrE,qEAAqE;IACrE,oEAAoE;IACpE,MAAM,gBAAgB,GAAG,KAAK,IAAkC,EAAE;QAChE,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,YAAY,EAAE,CAAA;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC,CAAA;IAED,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,SAAS;YACnB,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAA;YAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;YACtC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAC3C,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;YACxD,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;YACtE,CAAC;YAED,cAAc,EAAE,CAAA;YAChB,IAAI,gBAAgB,CAAC,IAAI,IAAI,iBAAiB,EAAE,CAAC;gBAC/C,MAAM,MAAM,GAAG,CAAC,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CACnD,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CACpB,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CACpE,CAAA;gBACD,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;YACpC,CAAC;YACD,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE;gBAC9B,KAAK;gBACL,QAAQ,EAAE,aAAa,CAAC,QAAQ;gBAChC,WAAW;gBACX,SAAS,EAAE,GAAG,EAAE;aACjB,CAAC,CAAA;YACF,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,gBAAgB,EAAE,EAAE,CAAA;QACvE,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,aAAa,EAAE,KAAK;YAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAA;YACtC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;oBACL,IAAI,EAAE,4CAA4C;oBAClD,QAAQ,EAAE,MAAM,gBAAgB,EAAE;iBACnC,CAAA;YACH,CAAC;YAED,+DAA+D;YAC/D,+DAA+D;YAC/D,IAAI,QAAoD,CAAA;YACxD,IAAI,CAAC;gBACH,QAAQ,GAAG,uBAAuB,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;YAClE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,IAAI,EAAE,2FAA2F;oBACjG,QAAQ,EAAE,MAAM,gBAAgB,EAAE;iBACnC,CAAA;YACH,CAAC;YACD,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;gBACxB,OAAO;oBACL,IAAI,EAAE,gCAAgC,QAAQ,CAAC,KAAK,kCAAkC;oBACtF,QAAQ,EAAE,MAAM,gBAAgB,EAAE;iBACnC,CAAA;YACH,CAAC;YAED,kEAAkE;YAClE,gEAAgE;YAChE,sBAAsB;YACtB,IAAI,MAAoD,CAAA;YACxD,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;YAChE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,IAAI,EAAE,8EAA8E;oBACpF,QAAQ,EAAE,MAAM,gBAAgB,EAAE;iBACnC,CAAA;YACH,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,OAAO;oBACL,IAAI,EAAE,2EAA2E;oBACjF,QAAQ,EAAE,MAAM,gBAAgB,EAAE;iBACnC,CAAA;YACH,CAAC;YAED,iEAAiE;YACjE,gEAAgE;YAChE,mEAAmE;YACnE,MAAM,SAAS,GAAiB;gBAC9B,GAAG,MAAM;gBACT,KAAK,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK;aAC7B,CAAA;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,IAAI,EAAE,0EAA0E;oBAChF,QAAQ,EAAE,MAAM,gBAAgB,EAAE;iBACnC,CAAA;YACH,CAAC;YAED,kEAAkE;YAClE,kEAAkE;YAClE,yDAAyD;YACzD,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,SAAS,CAAC,CAAA;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,yCAAyC;YAC3C,CAAC;YAED,8DAA8D;YAC9D,kEAAkE;YAClE,6DAA6D;YAC7D,IAAI,QAA6B,CAAA;YACjC,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAA;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,IAAI,EAAE,sBAAsB;oBAC5B,QAAQ,EAAE,EAAE;iBACb,CAAA;YACH,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ;aACT,CAAA;QACH,CAAC;QAED,OAAO;YACL,gBAAgB,CAAC,KAAK,EAAE,CAAA;QAC1B,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/src/plugin/auth-loader.d.ts

@@ -13,6 +13,21 @@ export type CreateAuthFetch = (input: {
     accountManager: AccountManager;
     getAuth: GetAuth;
 }) => AuthFetchRuntime;
+/**
+ * Loader returned by `createAuthLoader`. The function loads the
+ * account pool from disk and installs the runtime.
+ */
+export type LoadAndInstallRuntime = (getAuth: GetAuth, provider: Provider) => Promise<LoaderResult | Record<string, unknown>>;
+/**
+ * Reload the live AccountManager + fetch runtime without going through
+ * the full startup loader. Used by the OAuth add flow so the new account
+ * is visible to routing immediately after `persistAccountPool`.
+ */
+export type ReloadAccountRuntime = (getAuth: GetAuth) => Promise<void>;
+export interface AuthLoaderHandle {
+    load: LoadAndInstallRuntime;
+    reload: ReloadAccountRuntime;
+}
 interface AuthLoaderDependencies {
     loadAccounts: typeof loadAccounts;
     clearAccounts: typeof clearAccounts;
@@ -30,6 +45,6 @@ interface CreateAuthLoaderOptions {
     onGetAuth?(getAuth: GetAuth): void;
     dependencies?: Partial<AuthLoaderDependencies>;
 }
-export declare function createAuthLoader({ client, providerId, config, lifecycle, createFetch, onGetAuth, dependencies, }: CreateAuthLoaderOptions): (getAuth: GetAuth, provider: Provider) => Promise<LoaderResult | Record<string, unknown>>;
+export declare function createAuthLoader({ client, providerId, config, lifecycle, createFetch, onGetAuth, dependencies, }: CreateAuthLoaderOptions): LoadAndInstallRuntime & AuthLoaderHandle;
 export {};
 //# sourceMappingURL=auth-loader.d.ts.map

package/dist/src/plugin/auth-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-loader.d.ts","sourceRoot":"","sources":["../../../src/plugin/auth-loader.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAM3C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AACjD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,OAAO,EACL,2BAA2B,EAE5B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAEL,aAAa,EACb,YAAY,EACb,MAAM,WAAW,CAAA;AAClB,OAAO,KAAK,EACV,OAAO,EACP,YAAY,EACZ,YAAY,EACZ,QAAQ,EAET,MAAM,SAAS,CAAA;AAIhB,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,CAAA;IAC5B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;CAChC;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE;IACpC,cAAc,EAAE,cAAc,CAAA;IAC9B,OAAO,EAAE,OAAO,CAAA;CACjB,KAAK,gBAAgB,CAAA;AAEtB,UAAU,sBAAsB;IAC9B,YAAY,EAAE,OAAO,YAAY,CAAA;IACjC,aAAa,EAAE,OAAO,aAAa,CAAA;IACnC,kBAAkB,CAChB,IAAI,EAAE,UAAU,CAAC,OAAO,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GACtD,OAAO,CAAC,cAAc,CAAC,CAAA;IAC1B,kBAAkB,EAAE,OAAO,2BAA2B,CAAA;IACtD,cAAc,EAAE,OAAO,cAAc,CAAA;IACrC,cAAc,EAAE,OAAO,cAAc,CAAA;CACtC;AAED,UAAU,uBAAuB;IAC/B,MAAM,EAAE,YAAY,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,iBAAiB,CAAA;IACzB,SAAS,EAAE,eAAe,CAAA;IAC1B,WAAW,EAAE,eAAe,CAAA;IAC5B,SAAS,CAAC,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IAClC,YAAY,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAA;CAC/C;AAED,wBAAgB,gBAAgB,CAAC,EAC/B,MAAM,EACN,UAAU,EACV,MAAM,EACN,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,GACb,EAAE,uBAAuB,IA0BtB,SAAS,OAAO,EAChB,UAAU,QAAQ,KACjB,OAAO,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAgInD"}
+{"version":3,"file":"auth-loader.d.ts","sourceRoot":"","sources":["../../../src/plugin/auth-loader.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAM3C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AACjD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,OAAO,EACL,2BAA2B,EAE5B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAEL,aAAa,EACb,YAAY,EACb,MAAM,WAAW,CAAA;AAClB,OAAO,KAAK,EACV,OAAO,EACP,YAAY,EACZ,YAAY,EACZ,QAAQ,EAET,MAAM,SAAS,CAAA;AAgBhB,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,CAAA;IAC5B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;CAChC;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE;IACpC,cAAc,EAAE,cAAc,CAAA;IAC9B,OAAO,EAAE,OAAO,CAAA;CACjB,KAAK,gBAAgB,CAAA;AAEtB;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAClC,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,QAAQ,KACf,OAAO,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;AAEpD;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;AAEtE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,qBAAqB,CAAA;IAC3B,MAAM,EAAE,oBAAoB,CAAA;CAC7B;AAED,UAAU,sBAAsB;IAC9B,YAAY,EAAE,OAAO,YAAY,CAAA;IACjC,aAAa,EAAE,OAAO,aAAa,CAAA;IACnC,kBAAkB,CAChB,IAAI,EAAE,UAAU,CAAC,OAAO,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GACtD,OAAO,CAAC,cAAc,CAAC,CAAA;IAC1B,kBAAkB,EAAE,OAAO,2BAA2B,CAAA;IACtD,cAAc,EAAE,OAAO,cAAc,CAAA;IACrC,cAAc,EAAE,OAAO,cAAc,CAAA;CACtC;AAED,UAAU,uBAAuB;IAC/B,MAAM,EAAE,YAAY,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,iBAAiB,CAAA;IACzB,SAAS,EAAE,eAAe,CAAA;IAC1B,WAAW,EAAE,eAAe,CAAA;IAC5B,SAAS,CAAC,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IAClC,YAAY,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAA;CAC/C;AAED,wBAAgB,gBAAgB,CAAC,EAC/B,MAAM,EACN,UAAU,EACV,MAAM,EACN,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,GACb,EAAE,uBAAuB,GAAG,qBAAqB,GAAG,gBAAgB,CA2OpE"}

package/dist/src/plugin/auth-loader.js

@@ -1,4 +1,6 @@
-import { buildSidebarMachineStateFromAccounts, setSidebarMachineState, } from '../sidebar-state';
+import { createHash } from 'node:crypto';
+import { getHealthTracker } from '@cortexkit/antigravity-auth-core';
+import { buildSidebarMachineStateFromAccounts, isAccountCurrent, setSidebarMachineState, toCapturedTier, } from '../sidebar-state';
 import { AccountManager } from './accounts';
 import { isOAuthAuth } from './auth';
 import { buildAuthFromStoredAccount, detectAuthStorageDrift, } from './auth-drift';
@@ -7,6 +9,17 @@ import { createLogger } from './logger';
 import { createProactiveRefreshQueue, } from './refresh-queue';
 import { AccountStorageUnreadableError, clearAccounts, loadAccounts, } from './storage';
 const log = createLogger('auth-loader');
+/**
+ * Opaque identity derived from a refresh token. Mirrors the local
+ * helper in `account-manager.ts` and `command-data.ts` — the auth-loader
+ * stays independent because it ships in the plugin's import graph and
+ * can't reach into the core barrel for `quotaAccountIdentity`. The
+ * sidebar projection uses this hash to detect a stale quota snapshot
+ * captured for a different account after an index shift.
+ */
+function refreshTokenIdentity(refreshToken) {
+    return createHash('sha256').update(refreshToken).digest('hex').slice(0, 16);
+}
 export function createAuthLoader({ client, providerId, config, lifecycle, createFetch, onGetAuth, dependencies, }) {
     const deps = {
         loadAccounts: dependencies?.loadAccounts ?? loadAccounts,
@@ -18,6 +31,13 @@ export function createAuthLoader({ client, providerId, config, lifecycle, create
         getLogFilePath: dependencies?.getLogFilePath ?? getLogFilePath,
     };
     let fetchRuntime = null;
+    // Reload chain — `installRuntime` swaps the fetch runtime and
+    // (previously) discarded the previous runtime's dispose with `void`,
+    // so two overlapping reloads could interleave teardown. Serialize
+    // reloads through a single shared promise so each new install waits
+    // for the previous one to fully settle (including its dispose)
+    // before tearing down the runtime it depends on.
+    let reloadChain = Promise.resolve();
     lifecycle.register({
         async dispose() {
             const runtime = fetchRuntime;
@@ -25,7 +45,60 @@ export function createAuthLoader({ client, providerId, config, lifecycle, create
             await runtime?.dispose();
         },
     }, 'producer');
-    return async (getAuth, provider) => {
+    // Reload hook: invoked after out-of-band storage mutations (e.g.
+    // OAuth add) so the live AccountManager + fetch interceptor see the
+    // newly-persisted account without waiting for a plugin restart. The
+    // handle returned below wires this through to the OAuth finish flow.
+    let reloadRuntime = async () => { };
+    const installRuntime = async (accountManager, getAuth) => {
+        if (accountManager.getAccountCount() > 0) {
+            accountManager.requestSaveToDisk();
+        }
+        let refreshQueue = null;
+        if (config.proactive_token_refresh &&
+            accountManager.getAccountCount() > 0) {
+            refreshQueue = deps.createRefreshQueue(client, providerId, {
+                enabled: config.proactive_token_refresh,
+                bufferSeconds: config.proactive_refresh_buffer_seconds,
+                checkIntervalSeconds: config.proactive_refresh_check_interval_seconds,
+            });
+            refreshQueue.setAccountManager(accountManager);
+        }
+        await lifecycle.replaceAccountRuntime(accountManager, refreshQueue);
+        refreshQueue?.start();
+        // Swap the fetch runtime FIRST so the host's captured fetch
+        // reference (a call-time delegating wrapper below) immediately
+        // routes through the new interceptor, then await the previous
+        // runtime's dispose. The swap-then-dispose order guarantees there
+        // is no fetch gap between the old and new runtimes.
+        const previousRuntime = fetchRuntime;
+        fetchRuntime = createFetch({ accountManager, getAuth });
+        await previousRuntime?.dispose();
+        // Push the freshly materialized account pool into the sidebar so the
+        // TUI's next poll renders the labels / health / cooldown it needs
+        // without waiting for the first fetch to complete.
+        await setSidebarMachineState(buildSidebarMachineStateFromAccounts(accountManager.getAccounts().map((entry) => {
+            const activeByFamily = accountManager.getActiveIndexByFamily();
+            return {
+                index: entry.index,
+                label: entry.label,
+                enabled: entry.enabled,
+                current: isAccountCurrent(entry.index, activeByFamily),
+                coolingDownUntil: entry.coolingDownUntil,
+                healthScore: getHealthTracker().getScore(entry.index),
+                cachedQuota: entry.cachedQuota,
+                // Stamp the sidebar snapshot so the projection can detect a
+                // stale cache that landed on the wrong account (the manager's
+                // `cachedQuotaAccountId` is keyed to whatever account actually
+                // produced the snapshot — the live refresh-token hash is the
+                // expected identity at this slot).
+                cachedQuotaAccountId: entry.cachedQuotaAccountId,
+                currentQuotaAccountId: refreshTokenIdentity(entry.parts.refreshToken),
+                tier: toCapturedTier(entry),
+            };
+        })));
+    };
+    async function runLoader(getAuth, provider) {
         onGetAuth?.(getAuth);
         let auth = await getAuth();
         if (!isOAuthAuth(auth)) {
@@ -89,35 +162,7 @@ export function createAuthLoader({ client, providerId, config, lifecycle, create
             return {};
         }
         const accountManager = await deps.loadAccountManager(auth);
-        if (accountManager.getAccountCount() > 0) {
-            accountManager.requestSaveToDisk();
-        }
-        let refreshQueue = null;
-        if (config.proactive_token_refresh &&
-            accountManager.getAccountCount() > 0) {
-            refreshQueue = deps.createRefreshQueue(client, providerId, {
-                enabled: config.proactive_token_refresh,
-                bufferSeconds: config.proactive_refresh_buffer_seconds,
-                checkIntervalSeconds: config.proactive_refresh_check_interval_seconds,
-            });
-            refreshQueue.setAccountManager(accountManager);
-        }
-        await lifecycle.replaceAccountRuntime(accountManager, refreshQueue);
-        refreshQueue?.start();
-        const previousRuntime = fetchRuntime;
-        fetchRuntime = createFetch({ accountManager, getAuth });
-        await previousRuntime?.dispose();
-        // Push the freshly materialized account pool into the sidebar so the
-        // TUI's next poll renders the labels / health / cooldown it needs
-        // without waiting for the first fetch to complete.
-        await setSidebarMachineState(buildSidebarMachineStateFromAccounts(accountManager.getAccounts().map((entry) => ({
-            index: entry.index,
-            label: entry.label,
-            enabled: entry.enabled,
-            current: false,
-            coolingDownUntil: entry.coolingDownUntil,
-            cachedQuota: entry.cachedQuota,
-        }))));
+        await installRuntime(accountManager, getAuth);
         if (deps.isDebugEnabled()) {
             const logPath = deps.getLogFilePath();
             if (logPath) {
@@ -137,8 +182,44 @@ export function createAuthLoader({ client, providerId, config, lifecycle, create
         }
         return {
             apiKey: '',
-            fetch: fetchRuntime.fetch,
+            // Return a stable delegating wrapper that reads `fetchRuntime`
+            // at CALL time. A direct `fetchRuntime!.fetch` reference would
+            // capture the current runtime; the host keeps that reference
+            // across `reload()` calls, so a captured fetch would still route
+            // through the OLD interceptor after an OAuth add. The wrapper
+            // matches the host's `LoaderResult.fetch` signature exactly
+            // (no `this` binding) so behavior is preserved.
+            fetch: (input, init) => fetchRuntime.fetch(input, init),
         };
+    }
+    reloadRuntime = async (getAuth) => {
+        const auth = await getAuth();
+        if (!isOAuthAuth(auth))
+            return;
+        const nextManager = await deps.loadAccountManager(auth);
+        await installRuntime(nextManager, getAuth);
     };
+    // Return a callable object: `plugin.auth.loader` is invoked with
+    // `(getAuth, provider)` (host contract), and `authLoader.reload(...)`
+    // rebuilds the runtime after out-of-band storage mutations (OAuth add).
+    // The callable closes over `runLoader` directly so the `this`-context
+    // binding stays unbound.
+    async function authLoaderCallable(getAuth, provider) {
+        return runLoader(getAuth, provider);
+    }
+    async function reload(getAuth) {
+        const next = reloadChain.then(() => reloadRuntime(getAuth));
+        reloadChain = next.catch(() => { });
+        return next;
+    }
+    // `load` mirrors the authLoaderCallable so the public handle
+    // (`AuthLoaderHandle.load`) exposes the same entry point the host
+    // invokes. Without this assignment, contract consumers read
+    // `.load` as undefined and the documented type would lie.
+    const authLoader = Object.assign(authLoaderCallable, {
+        reload,
+        load: authLoaderCallable,
+    });
+    return authLoader;
 }
 //# sourceMappingURL=auth-loader.js.map

package/dist/src/plugin/auth-loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-loader.js","sourceRoot":"","sources":["../../../src/plugin/auth-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oCAAoC,EACpC,sBAAsB,GACvB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AACpC,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,cAAc,CAAA;AAErB,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAExD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AACvC,OAAO,EACL,2BAA2B,GAE5B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,6BAA6B,EAC7B,aAAa,EACb,YAAY,GACb,MAAM,WAAW,CAAA;AASlB,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,CAAC,CAAA;AAiCvC,MAAM,UAAU,gBAAgB,CAAC,EAC/B,MAAM,EACN,UAAU,EACV,MAAM,EACN,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,GACY;IACxB,MAAM,IAAI,GAA2B;QACnC,YAAY,EAAE,YAAY,EAAE,YAAY,IAAI,YAAY;QACxD,aAAa,EAAE,YAAY,EAAE,aAAa,IAAI,aAAa;QAC3D,kBAAkB,EAChB,YAAY,EAAE,kBAAkB;YAChC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/C,kBAAkB,EAChB,YAAY,EAAE,kBAAkB,IAAI,2BAA2B;QACjE,cAAc,EAAE,YAAY,EAAE,cAAc,IAAI,cAAc;QAC9D,cAAc,EAAE,YAAY,EAAE,cAAc,IAAI,cAAc;KAC/D,CAAA;IACD,IAAI,YAAY,GAA4B,IAAI,CAAA;IAEhD,SAAS,CAAC,QAAQ,CAChB;QACE,KAAK,CAAC,OAAO;YACX,MAAM,OAAO,GAAG,YAAY,CAAA;YAC5B,YAAY,GAAG,IAAI,CAAA;YACnB,MAAM,OAAO,EAAE,OAAO,EAAE,CAAA;QAC1B,CAAC;KACF,EACD,UAAU,CACX,CAAA;IAED,OAAO,KAAK,EACV,OAAgB,EAChB,QAAkB,EAC+B,EAAE;QACnD,SAAS,EAAE,CAAC,OAAO,CAAC,CAAA;QACpB,IAAI,IAAI,GAAG,MAAM,OAAO,EAAE,CAAA;QAE1B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,cAAwD,CAAA;YAC5D,IAAI,CAAC;gBACH,cAAc,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;YAC5C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,4DAA4D;gBAC5D,uDAAuD;gBACvD,2DAA2D;gBAC3D,yDAAyD;gBACzD,6DAA6D;gBAC7D,IAAI,KAAK,YAAY,6BAA6B,EAAE,CAAC;oBACnD,GAAG,CAAC,KAAK,CAAC,kDAAkD,EAAE;wBAC5D,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;wBACxB,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;wBAC5B,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;qBACrC,CAAC,CAAA;oBACF,IAAI,CAAC;wBACH,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;4BACzB,IAAI,EAAE;gCACJ,OAAO,EAAE,sBAAsB,KAAK,CAAC,OAAO,CAAC,IAAI,mBAAmB,KAAK,CAAC,OAAO,CAAC,MAAM,sEAAsE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,4BAA4B,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gCACvP,OAAO,EAAE,OAAO;gCAChB,QAAQ,EAAE,MAAM;6BACjB;yBACF,CAAC,CAAA;oBACJ,CAAC;oBAAC,MAAM,CAAC,CAAA,CAAC;gBACZ,CAAC;gBACD,MAAM,KAAK,CAAA;YACb,CAAC;YACD,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;YAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnD,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;gBAChD,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;wBACpB,IAAI,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;wBACxB,IAAI,EAAE;4BACJ,IAAI,EAAE,OAAO;4BACb,OAAO,EAAE,IAAI,CAAC,OAAO;4BACrB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;4BACzB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC;yBAC3B;qBACF,CAAC,CAAA;oBACF,GAAG,CAAC,IAAI,CAAC,sDAAsD,EAAE;wBAC/D,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;qBAC3B,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,IAAI,CACN,+DAA+D,EAC/D,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CACzB,CAAA;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,EAAE,CAAA;YAC5B,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,OAAO,EAAE,CAAA;QACX,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAA;QAC1D,IAAI,cAAc,CAAC,eAAe,EAAE,GAAG,CAAC,EAAE,CAAC;YACzC,cAAc,CAAC,iBAAiB,EAAE,CAAA;QACpC,CAAC;QAED,IAAI,YAAY,GAAiC,IAAI,CAAA;QACrD,IACE,MAAM,CAAC,uBAAuB;YAC9B,cAAc,CAAC,eAAe,EAAE,GAAG,CAAC,EACpC,CAAC;YACD,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE;gBACzD,OAAO,EAAE,MAAM,CAAC,uBAAuB;gBACvC,aAAa,EAAE,MAAM,CAAC,gCAAgC;gBACtD,oBAAoB,EAAE,MAAM,CAAC,wCAAwC;aACtE,CAAC,CAAA;YACF,YAAY,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAA;QAChD,CAAC;QAED,MAAM,SAAS,CAAC,qBAAqB,CAAC,cAAc,EAAE,YAAY,CAAC,CAAA;QACnE,YAAY,EAAE,KAAK,EAAE,CAAA;QAErB,MAAM,eAAe,GAAG,YAAY,CAAA;QACpC,YAAY,GAAG,WAAW,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAA;QACvD,MAAM,eAAe,EAAE,OAAO,EAAE,CAAA;QAEhC,qEAAqE;QACrE,kEAAkE;QAClE,mDAAmD;QACnD,MAAM,sBAAsB,CAC1B,oCAAoC,CAClC,cAAc,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC3C,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK;YACd,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAC,CACJ,CACF,CAAA;QAED,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;YACrC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;wBACzB,IAAI,EAAE,EAAE,OAAO,EAAE,cAAc,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;qBAC5D,CAAC,CAAA;gBACJ,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnD,IAAI,KAAK;oBAAG,KAAuB,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAA;YACpE,CAAC;QACH,CAAC;QAED,OAAO;YACL,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,YAAY,CAAC,KAAK;SAC1B,CAAA;IACH,CAAC,CAAA;AACH,CAAC"}
+{"version":3,"file":"auth-loader.js","sourceRoot":"","sources":["../../../src/plugin/auth-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EACL,oCAAoC,EACpC,gBAAgB,EAChB,sBAAsB,EACtB,cAAc,GACf,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AACpC,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,cAAc,CAAA;AAErB,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAExD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AACvC,OAAO,EACL,2BAA2B,GAE5B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,6BAA6B,EAC7B,aAAa,EACb,YAAY,GACb,MAAM,WAAW,CAAA;AASlB,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,CAAC,CAAA;AAEvC;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAAC,YAAoB;IAChD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAC7E,CAAC;AAsDD,MAAM,UAAU,gBAAgB,CAAC,EAC/B,MAAM,EACN,UAAU,EACV,MAAM,EACN,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,GACY;IACxB,MAAM,IAAI,GAA2B;QACnC,YAAY,EAAE,YAAY,EAAE,YAAY,IAAI,YAAY;QACxD,aAAa,EAAE,YAAY,EAAE,aAAa,IAAI,aAAa;QAC3D,kBAAkB,EAChB,YAAY,EAAE,kBAAkB;YAChC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/C,kBAAkB,EAChB,YAAY,EAAE,kBAAkB,IAAI,2BAA2B;QACjE,cAAc,EAAE,YAAY,EAAE,cAAc,IAAI,cAAc;QAC9D,cAAc,EAAE,YAAY,EAAE,cAAc,IAAI,cAAc;KAC/D,CAAA;IACD,IAAI,YAAY,GAA4B,IAAI,CAAA;IAChD,8DAA8D;IAC9D,qEAAqE;IACrE,kEAAkE;IAClE,oEAAoE;IACpE,+DAA+D;IAC/D,iDAAiD;IACjD,IAAI,WAAW,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IAElD,SAAS,CAAC,QAAQ,CAChB;QACE,KAAK,CAAC,OAAO;YACX,MAAM,OAAO,GAAG,YAAY,CAAA;YAC5B,YAAY,GAAG,IAAI,CAAA;YACnB,MAAM,OAAO,EAAE,OAAO,EAAE,CAAA;QAC1B,CAAC;KACF,EACD,UAAU,CACX,CAAA;IAED,iEAAiE;IACjE,oEAAoE;IACpE,oEAAoE;IACpE,qEAAqE;IACrE,IAAI,aAAa,GAAyB,KAAK,IAAI,EAAE,GAAE,CAAC,CAAA;IAExD,MAAM,cAAc,GAAG,KAAK,EAC1B,cAA8B,EAC9B,OAAgB,EACD,EAAE;QACjB,IAAI,cAAc,CAAC,eAAe,EAAE,GAAG,CAAC,EAAE,CAAC;YACzC,cAAc,CAAC,iBAAiB,EAAE,CAAA;QACpC,CAAC;QAED,IAAI,YAAY,GAAiC,IAAI,CAAA;QACrD,IACE,MAAM,CAAC,uBAAuB;YAC9B,cAAc,CAAC,eAAe,EAAE,GAAG,CAAC,EACpC,CAAC;YACD,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE;gBACzD,OAAO,EAAE,MAAM,CAAC,uBAAuB;gBACvC,aAAa,EAAE,MAAM,CAAC,gCAAgC;gBACtD,oBAAoB,EAAE,MAAM,CAAC,wCAAwC;aACtE,CAAC,CAAA;YACF,YAAY,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAA;QAChD,CAAC;QAED,MAAM,SAAS,CAAC,qBAAqB,CAAC,cAAc,EAAE,YAAY,CAAC,CAAA;QACnE,YAAY,EAAE,KAAK,EAAE,CAAA;QAErB,4DAA4D;QAC5D,+DAA+D;QAC/D,8DAA8D;QAC9D,kEAAkE;QAClE,oDAAoD;QACpD,MAAM,eAAe,GAAG,YAAY,CAAA;QACpC,YAAY,GAAG,WAAW,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAA;QACvD,MAAM,eAAe,EAAE,OAAO,EAAE,CAAA;QAEhC,qEAAqE;QACrE,kEAAkE;QAClE,mDAAmD;QACnD,MAAM,sBAAsB,CAC1B,oCAAoC,CAClC,cAAc,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACzC,MAAM,cAAc,GAAG,cAAc,CAAC,sBAAsB,EAAE,CAAA;YAC9D,OAAO;gBACL,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC;gBACtD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;gBACxC,WAAW,EAAE,gBAAgB,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;gBACrD,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,4DAA4D;gBAC5D,8DAA8D;gBAC9D,+DAA+D;gBAC/D,6DAA6D;gBAC7D,mCAAmC;gBACnC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;gBAChD,qBAAqB,EAAE,oBAAoB,CACzC,KAAK,CAAC,KAAK,CAAC,YAAY,CACzB;gBACD,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC;aAC5B,CAAA;QACH,CAAC,CAAC,CACH,CACF,CAAA;IACH,CAAC,CAAA;IAED,KAAK,UAAU,SAAS,CACtB,OAAgB,EAChB,QAAkB;QAElB,SAAS,EAAE,CAAC,OAAO,CAAC,CAAA;QACpB,IAAI,IAAI,GAAG,MAAM,OAAO,EAAE,CAAA;QAE1B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,cAAwD,CAAA;YAC5D,IAAI,CAAC;gBACH,cAAc,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;YAC5C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,4DAA4D;gBAC5D,uDAAuD;gBACvD,2DAA2D;gBAC3D,yDAAyD;gBACzD,6DAA6D;gBAC7D,IAAI,KAAK,YAAY,6BAA6B,EAAE,CAAC;oBACnD,GAAG,CAAC,KAAK,CAAC,kDAAkD,EAAE;wBAC5D,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;wBACxB,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;wBAC5B,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;qBACrC,CAAC,CAAA;oBACF,IAAI,CAAC;wBACH,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;4BACzB,IAAI,EAAE;gCACJ,OAAO,EAAE,sBAAsB,KAAK,CAAC,OAAO,CAAC,IAAI,mBAAmB,KAAK,CAAC,OAAO,CAAC,MAAM,sEAAsE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,4BAA4B,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gCACvP,OAAO,EAAE,OAAO;gCAChB,QAAQ,EAAE,MAAM;6BACjB;yBACF,CAAC,CAAA;oBACJ,CAAC;oBAAC,MAAM,CAAC,CAAA,CAAC;gBACZ,CAAC;gBACD,MAAM,KAAK,CAAA;YACb,CAAC;YACD,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;YAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnD,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;gBAChD,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;wBACpB,IAAI,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;wBACxB,IAAI,EAAE;4BACJ,IAAI,EAAE,OAAO;4BACb,OAAO,EAAE,IAAI,CAAC,OAAO;4BACrB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;4BACzB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC;yBAC3B;qBACF,CAAC,CAAA;oBACF,GAAG,CAAC,IAAI,CAAC,sDAAsD,EAAE;wBAC/D,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;qBAC3B,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,IAAI,CACN,+DAA+D,EAC/D,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CACzB,CAAA;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,EAAE,CAAA;YAC5B,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,OAAO,EAAE,CAAA;QACX,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAA;QAC1D,MAAM,cAAc,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;QAE7C,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;YACrC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;wBACzB,IAAI,EAAE,EAAE,OAAO,EAAE,cAAc,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;qBAC5D,CAAC,CAAA;gBACJ,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnD,IAAI,KAAK;oBAAG,KAAuB,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAA;YACpE,CAAC;QACH,CAAC;QAED,OAAO;YACL,MAAM,EAAE,EAAE;YACV,+DAA+D;YAC/D,+DAA+D;YAC/D,6DAA6D;YAC7D,iEAAiE;YACjE,8DAA8D;YAC9D,4DAA4D;YAC5D,gDAAgD;YAChD,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,YAAa,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC;SACzD,CAAA;IACH,CAAC;IAED,aAAa,GAAG,KAAK,EAAE,OAAgB,EAAiB,EAAE;QACxD,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAA;QAC5B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAAE,OAAM;QAC9B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAA;QACvD,MAAM,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IAC5C,CAAC,CAAA;IAED,iEAAiE;IACjE,sEAAsE;IACtE,wEAAwE;IACxE,sEAAsE;IACtE,yBAAyB;IACzB,KAAK,UAAU,kBAAkB,CAC/B,OAAgB,EAChB,QAAkB;QAElB,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IACrC,CAAC;IACD,KAAK,UAAU,MAAM,CAAC,OAAgB;QACpC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAA;QAC3D,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAClC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,6DAA6D;IAC7D,kEAAkE;IAClE,4DAA4D;IAC5D,0DAA0D;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE;QACnD,MAAM;QACN,IAAI,EAAE,kBAAkB;KACzB,CAAC,CAAA;IACF,OAAO,UAAsD,CAAA;AAC/D,CAAC"}

package/dist/src/plugin/background-quota-refresh.d.ts

@@ -0,0 +1,146 @@
+/**
+ * Background quota poller.
+ *
+ * Runs a jittered, `unref()`'d timer that periodically refreshes quota for
+ * all accounts and pushes ONE sidebar snapshot per tick. Three-layer
+ * cross-process dedup:
+ *
+ *   1. Freshness gate — the only hard correctness bound for quota snapshots.
+ *      Reads `checkedAt` from the on-disk sidebar state; skips quota work when
+ *      it is fresher than
+ *      `max(intervalMs − 60_000, floor(intervalMs / 2))`. The /2 floor
+ *      ensures the gate still fires at the 1-minute minimum interval.
+ *
+ *   2. Advisory fenced lock — an optimization that lets a single process do
+ *      the network work when several wake up simultaneously. Held → skip.
+ *
+ *   3. Lock throws → FAIL CLOSED (skip this tick, add jitter to next). A
+ *      fallback mutex is NOT used here. The correct reasoning is: the
+ *      freshness gate (layer 1) already bounds how many refreshes can land;
+ *      a secondary "claim marker" file is just a worse re-implementation of
+ *      the fenced lock we just failed to acquire — it replicates the same
+ *      ownership problem without the protocol guarantees, and any transient
+ *      I/O error that made the lock throw will likely affect a claim file
+ *      too. The previous poller attempt fell into this trap across three
+ *      review rounds; this comment exists so a future reviewer stops
+ *      re-litigating it.
+ */
+import type { AccountMetadataV3, QuotaGroup, QuotaGroupSummary } from '@cortexkit/antigravity-auth-core';
+import { acquireFencedFileLock } from '@cortexkit/antigravity-auth-core/file-lock';
+import type { QuotaManager } from './quota';
+/**
+ * The subset of AccountManager that the poller needs. Using a narrow
+ * interface keeps the module decoupled from the large concrete class and
+ * lets tests pass minimal stubs without satisfying 90+ methods.
+ */
+export interface PollerAccountView {
+    getAccounts(): Array<{
+        index: number;
+        label?: string;
+        enabled?: boolean;
+        parts: {
+            refreshToken: string;
+        };
+        cachedQuota?: Partial<Record<QuotaGroup, QuotaGroupSummary>>;
+        cachedQuotaAccountId?: string;
+        coolingDownUntil?: number;
+        /** Captured plan tier ID (raw upstream string). */
+        capturedTierId?: string;
+        /** Captured paid-tier ID (raw upstream string). */
+        capturedPaidTierId?: string;
+        /** Epoch ms when capturedTierId was last recorded. */
+        capturedTierAt?: number;
+        /** Schema version of the most recent tier capture. */
+        capturedTierSchemaVersion?: number;
+    }>;
+    /** Must return the full AccountMetadataV3 shape so the quota manager
+     *  can use token-refresh and project-context fields inside each fetch. */
+    getAccountsForQuotaCheck(): AccountMetadataV3[];
+    updateQuotaCache(accountIndex: number, quotaGroups: Partial<Record<QuotaGroup, QuotaGroupSummary>>, expectedRefreshToken?: string): void;
+    /**
+     * Apply a subset of quota-result fields (e.g. captured tier) onto the
+     * in-memory account record without touching the quota cache itself.
+     */
+    applyUpdatedAccount(accountIndex: number, patch: {
+        capturedTierId?: string;
+        capturedPaidTierId?: string;
+        capturedTierAt?: number;
+        capturedTierSchemaVersion?: number;
+    }, expectedRefreshToken?: string): void;
+    requestSaveToDisk(): void;
+    /**
+     * Returns the active account index per model family so the sidebar
+     * snapshot can stamp the `current` flag on the right account.
+     */
+    getActiveIndexByFamily(): {
+        claude: number;
+        gemini: number;
+    };
+}
+export interface BackgroundQuotaRefreshOptions {
+    intervalMs: number;
+    sidebarStateFile: string;
+    /**
+     * Supplier for the live account pool. Called inside each locked phase, so it
+     * observes any concurrent add/remove that completed while waiting for the
+     * lock.
+     */
+    getAccountManager: () => PollerAccountView | null;
+    quotaManager: QuotaManager;
+    /**
+     * Optional tier-refresh callback. When provided, the poller calls this
+     * once per tick for the account whose capturedTierAt is missing or older
+     * than TIER_STALENESS_TTL_MS. The callback handles its own token-refresh
+     * and must resolve to a tier object (or null on failure / nothing to
+     * report) -- failure must never reject, since tier is best-effort.
+     *
+     * Wired in index.ts through the same agyTransport seam the quota manager
+     * uses, so e2e tests can inject a mock alongside the mock quota fetch.
+     */
+    loadAccountTier?: (account: AccountMetadataV3) => Promise<{
+        id: string;
+        paidId?: string;
+        capturedAt: number;
+    } | null>;
+    /**
+     * Clock / randomness seam. Defaults to the system clock.
+     */
+    now?: () => number;
+    random?: () => number;
+    /** Lock acquisition seam used by deterministic concurrency tests. */
+    acquireLock?: typeof acquireFencedFileLock;
+}
+/**
+ * Per-loader-instance background quota poller.
+ *
+ * Must be created after the plugin has initialised (so `getAccountManager()`
+ * is populated) and disposed via the producer lifecycle phase.
+ */
+export declare class BackgroundQuotaRefresh {
+    private readonly intervalMs;
+    private readonly sidebarStateFile;
+    private readonly getAccountManager;
+    private readonly quotaManager;
+    private readonly loadAccountTier?;
+    private readonly now;
+    private readonly random;
+    private readonly acquireLock;
+    private timer;
+    /** Resolves when the currently-running tick completes (or immediately if none). */
+    private inFlight;
+    private disposed;
+    constructor(options: BackgroundQuotaRefreshOptions);
+    /** Start the background timer. Idempotent: a second call is a no-op. */
+    start(): void;
+    /** Stop the timer and await any in-flight tick. */
+    dispose(): Promise<void>;
+    private jitteredStartDelay;
+    private jitteredInterval;
+    private scheduleNext;
+    private runTick;
+    private refresh;
+    private refreshQuota;
+    private refreshTierSlot;
+    private pushSnapshot;
+}
+//# sourceMappingURL=background-quota-refresh.d.ts.map

package/dist/src/plugin/background-quota-refresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"background-quota-refresh.d.ts","sourceRoot":"","sources":["../../../src/plugin/background-quota-refresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,KAAK,EACV,iBAAiB,EACjB,UAAU,EACV,iBAAiB,EAClB,MAAM,kCAAkC,CAAA;AACzC,OAAO,EACL,qBAAqB,EAEtB,MAAM,4CAA4C,CAAA;AAGnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAG3C;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,WAAW,IAAI,KAAK,CAAC;QACnB,KAAK,EAAE,MAAM,CAAA;QACb,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,KAAK,EAAE;YAAE,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;QAC/B,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAA;QAC5D,oBAAoB,CAAC,EAAE,MAAM,CAAA;QAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAA;QACzB,mDAAmD;QACnD,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,mDAAmD;QACnD,kBAAkB,CAAC,EAAE,MAAM,CAAA;QAC3B,sDAAsD;QACtD,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,sDAAsD;QACtD,yBAAyB,CAAC,EAAE,MAAM,CAAA;KACnC,CAAC,CAAA;IACF;8EAC0E;IAC1E,wBAAwB,IAAI,iBAAiB,EAAE,CAAA;IAC/C,gBAAgB,CACd,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,EAC3D,oBAAoB,CAAC,EAAE,MAAM,GAC5B,IAAI,CAAA;IACP;;;OAGG;IACH,mBAAmB,CACjB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE;QACL,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,kBAAkB,CAAC,EAAE,MAAM,CAAA;QAC3B,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,yBAAyB,CAAC,EAAE,MAAM,CAAA;KACnC,EACD,oBAAoB,CAAC,EAAE,MAAM,GAC5B,IAAI,CAAA;IACP,iBAAiB,IAAI,IAAI,CAAA;IACzB;;;OAGG;IACH,sBAAsB,IAAI;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAC7D;AA8BD,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAA;IAClB,gBAAgB,EAAE,MAAM,CAAA;IACxB;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,iBAAiB,GAAG,IAAI,CAAA;IACjD,YAAY,EAAE,YAAY,CAAA;IAC1B;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,CAChB,OAAO,EAAE,iBAAiB,KACvB,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IACxE;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,MAAM,CAAA;IACrB,qEAAqE;IACrE,WAAW,CAAC,EAAE,OAAO,qBAAqB,CAAA;CAC3C;AAED;;;;;GAKG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;IACzC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAgC;IAClE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAC3C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAEuC;IACxE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAE1D,OAAO,CAAC,KAAK,CAA6C;IAC1D,mFAAmF;IACnF,OAAO,CAAC,QAAQ,CAA6B;IAC7C,OAAO,CAAC,QAAQ,CAAQ;gBAEZ,OAAO,EAAE,6BAA6B;IAWlD,wEAAwE;IACxE,KAAK,IAAI,IAAI;IAKb,mDAAmD;IAC7C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAY9B,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,YAAY;YA2BN,OAAO;YAqDP,OAAO;YAMP,YAAY;YAyEZ,eAAe;YA6Df,YAAY;CAoC3B"}