@cortexkit/opencode-antigravity-auth 2.2.0 → 3.0.0

package/dist/src/plugin/shared/runtime.js

@@ -0,0 +1,345 @@
+/**
+ * One server location's runtime. A location is one workspace directory the
+ * host serves; on OpenCode 2 (the 2.x host line) one process can serve
+ * several, and each plugin setup there (an activation) gets its own
+ * runtime. This module builds the activation's services in order, tears them
+ * down in a fixed order and rolls everything back if construction fails.
+ *
+ * Every service here is created for this location alone: logger,
+ * configuration (its own clone of the defaults), debug file, the switch for
+ * dumping Gemini requests to disk, operator settings handle, signature-cache
+ * handle, quota manager, background quota poller and the queue that
+ * refreshes OAuth tokens before they expire. Nothing falls back to the
+ * module-level logger, configuration, health tracker or sidebar file that
+ * the OpenCode 1 plugin (one location per process) uses, and no credential
+ * cache is shared between locations. Disposing one location's runtime never
+ * stops another's.
+ *
+ * Process-shared state stays shared on purpose and is reached only through
+ * per-location handles: operator files have one controller per file
+ * (`acquireLocationOperatorSettings`), the signature disk cache has one
+ * writer per file (`acquireLocationSignatureCache`). With the OpenCode 1
+ * sidebar file as the quota snapshot store, background pollers in different
+ * processes coordinate through it: a poll is skipped while the file's
+ * `checkedAt` is recent, and a lock file beside it lets only one process
+ * poll at a time. An OpenCode 2 location keeps its snapshots in memory and
+ * writes no sidebar file.
+ *
+ * Teardown order:
+ *   1. producers (everything that can still queue snapshot writes) are
+ *      stopped and awaited, newest first: the refresh queue, the background
+ *      poller and the quota manager, plus anything the host binding adds
+ *      (request bridge, RPC handlers);
+ *   2. queued snapshot writes drain;
+ *   3. consumers close, newest first: signature handle, operator settings,
+ *      debug file.
+ * Stopping producers before the drain means no write can be queued after
+ * the drain has finished; consumers stay open until the last write lands.
+ *
+ * The functions that use credentials (quota fetch, tier lookup, token
+ * refresh) and the account view come from the location's account service.
+ * This module never reads account storage or builds a host client.
+ */
+import { VAULT_ACCOUNT_REMEDY } from '@cortexkit/antigravity-auth-core';
+import { drainSidebarWrites, toCapturedTier, } from "../../sidebar-state.js";
+import { BackgroundQuotaRefresh, createSidebarFileSnapshotStore, } from "../background-quota-refresh.js";
+import { acquireLocationSignatureCache, } from "../cache.js";
+import { createLocationConfig } from "../config/index.js";
+import { createLocationDebug } from "../debug.js";
+import { createGeminiDumpState } from "../gemini-dump.js";
+import { createLocationLogger } from "../logger.js";
+import { acquireLocationOperatorSettings, } from "../operator-settings.js";
+import { createLocationQuotaManager, } from "../quota.js";
+import { createLocationProactiveRefreshQueue, } from "../refresh-queue.js";
+export function createRuntimeScope() {
+    const producers = [];
+    const consumers = [];
+    const drains = [];
+    let disposal = null;
+    const lateDisposals = new Set();
+    const run = async (step, errors) => {
+        try {
+            await step();
+        }
+        catch (error) {
+            errors.push(error);
+        }
+    };
+    return {
+        add(resource, phase) {
+            if (disposal) {
+                const late = Promise.resolve()
+                    .then(() => resource.dispose())
+                    .catch(() => {
+                    // The scope already reported its result; a late resource's
+                    // failure has no caller left to receive it.
+                });
+                lateDisposals.add(late);
+                void late.finally(() => lateDisposals.delete(late));
+                return;
+            }
+            ;
+            (phase === 'producer' ? producers : consumers).push(resource);
+        },
+        addDrain(drain) {
+            if (disposal)
+                return;
+            drains.push(drain);
+        },
+        get disposed() {
+            return disposal !== null;
+        },
+        dispose() {
+            if (!disposal) {
+                disposal = (async () => {
+                    const errors = [];
+                    for (const resource of producers.splice(0).reverse()) {
+                        await run(() => resource.dispose(), errors);
+                    }
+                    for (const drain of drains.splice(0)) {
+                        await run(drain, errors);
+                    }
+                    for (const resource of consumers.splice(0).reverse()) {
+                        await run(() => resource.dispose(), errors);
+                    }
+                    await Promise.allSettled([...lateDisposals]);
+                    if (errors.length > 0) {
+                        throw new AggregateError(errors, 'Location runtime disposal failed');
+                    }
+                })();
+            }
+            return disposal;
+        },
+    };
+}
+/**
+ * The OpenCode 1 sidebar file: snapshots merge into the file the TUI reads,
+ * pollers in other processes see its `checkedAt`, and the poll lock sits
+ * beside it.
+ */
+export function createSidebarFileQuotaSnapshots(stateFile) {
+    return {
+        ...createSidebarFileSnapshotStore(stateFile),
+        drain: () => drainSidebarWrites(),
+    };
+}
+export function createMemoryQuotaSnapshots(options = {}) {
+    let latest = null;
+    return {
+        latest: () => latest,
+        lastCheckedAt: () => latest?.checkedAt ?? 0,
+        write: async (state) => {
+            // Snapshots are built from the live account view, so the newest one
+            // replaces the previous one whole.
+            latest = state;
+        },
+        pollLockPath: options.pollLockPath ?? null,
+        drain: async () => { },
+    };
+}
+/**
+ * Build one location's runtime. If any step throws, everything acquired so
+ * far is released before the error is rethrown, so a failed activation
+ * leaves no timer, file handle or shared-controller reference behind.
+ */
+export async function createLocationRuntime(options, accountResources) {
+    const scope = createRuntimeScope();
+    // Keep account managers and repositories open until quota and token-refresh
+    // producers finish their pending writes.
+    if (accountResources)
+        scope.add(accountResources, 'producer');
+    try {
+        return await buildLocationRuntime(options, scope);
+    }
+    catch (error) {
+        await scope.dispose().catch(() => {
+            // The construction error is the one the caller needs; disposal
+            // failures during rollback cannot replace it.
+        });
+        throw error;
+    }
+}
+async function buildLocationRuntime(options, scope) {
+    if (typeof options?.directory !== 'string' || options.directory === '') {
+        throw new TypeError('createLocationRuntime requires the location directory');
+    }
+    if (typeof options.quotaSnapshots?.write !== 'function' ||
+        typeof options.quotaSnapshots.drain !== 'function') {
+        throw new TypeError('createLocationRuntime requires a quota snapshot store');
+    }
+    if (typeof options.refreshToken !== 'function') {
+        throw new TypeError('createLocationRuntime requires a refreshToken function');
+    }
+    // The logger's host-sink policy reads this location's debug_tui flag,
+    // which is known only after the configuration loads with that logger.
+    let config;
+    const logger = createLocationLogger({
+        sink: options.logSink,
+        sinkEnabled: () => config?.config.debug_tui === true,
+    });
+    const log = logger.createLogger('runtime');
+    config = createLocationConfig(options.directory, {
+        logger: logger.createLogger('config'),
+    });
+    const debug = createLocationDebug(config.config);
+    scope.add({ dispose: () => debug.close() }, 'consumer');
+    const operatorSettings = acquireLocationOperatorSettings({
+        projectConfigPath: config.projectConfigPath,
+        userConfigPath: config.userConfigPath,
+        ...(options.operatorSettingsRegistry
+            ? { registry: options.operatorSettingsRegistry }
+            : {}),
+    });
+    scope.add(operatorSettings, 'consumer');
+    const applyOperatorSettings = () => {
+        logger.setLevel(operatorSettings.get().log_level);
+    };
+    applyOperatorSettings();
+    const signatureOptions = {
+        keepThinking: config.keepThinking,
+        signatureCache: config.config.signature_cache,
+    };
+    const signatures = options.signatureState
+        ? options.signatureState.acquireLocation(signatureOptions)
+        : acquireLocationSignatureCache(signatureOptions);
+    scope.add(signatures, 'consumer');
+    const dump = createGeminiDumpState();
+    let accounts = null;
+    const identity = options.quotaAccountIdentity;
+    const sidebarAccounts = () => {
+        const view = accounts;
+        if (!view)
+            return null;
+        return view.getAccounts().map((entry) => ({
+            index: entry.index,
+            label: entry.label,
+            enabled: entry.enabled,
+            coolingDownUntil: entry.coolingDownUntil,
+            cachedQuota: entry.cachedQuota,
+            cachedQuotaAccountId: entry.cachedQuotaAccountId,
+            ...(identity
+                ? { currentQuotaAccountId: identity(entry.parts.refreshToken) }
+                : {}),
+            tier: toCapturedTier(entry),
+        }));
+    };
+    const quotaManager = createLocationQuotaManager({
+        logger: logger.createLogger('quota'),
+        fetchAccountQuota: options.mayRun
+            ? async (account, signal) => {
+                if (!(await options.mayRun?.()))
+                    throw new Error(VAULT_ACCOUNT_REMEDY);
+                return options.fetchAccountQuota(account, signal);
+            }
+            : options.fetchAccountQuota,
+        sidebar: {
+            write: async (state) => {
+                if (options.mayRun && !(await options.mayRun()))
+                    return;
+                await options.quotaSnapshots.write(state);
+            },
+            getAccounts: sidebarAccounts,
+            getActiveIndexByFamily: () => accounts?.getActiveIndexByFamily() ?? null,
+            ...(options.healthScore ? { healthScore: options.healthScore } : {}),
+            ...(options.now ? { now: options.now } : {}),
+        },
+    });
+    // Producer: refreshes enqueue snapshot writes, so the manager must stop
+    // before the drain asserts the queue is empty.
+    scope.add(quotaManager, 'producer');
+    let backgroundQuotaRefresh = null;
+    if (config.config.background_quota_refresh) {
+        backgroundQuotaRefresh = new BackgroundQuotaRefresh({
+            intervalMs: config.config.background_quota_refresh_interval_minutes * 60_000,
+            snapshots: options.quotaSnapshots,
+            getAccountManager: () => accounts,
+            ...(options.mayRun
+                ? { mayRun: async () => Boolean(await options.mayRun?.()) }
+                : {}),
+            quotaManager,
+            ...(options.loadAccountTier
+                ? { loadAccountTier: options.loadAccountTier }
+                : {}),
+            ...(options.now ? { now: options.now } : {}),
+            ...(options.random ? { random: options.random } : {}),
+            ...(options.acquireLock ? { acquireLock: options.acquireLock } : {}),
+            healthScore: options.healthScore ?? null,
+            logger: logger.createLogger('background-quota'),
+        });
+        const poller = backgroundQuotaRefresh;
+        scope.add({ dispose: () => poller.dispose() }, 'producer');
+    }
+    // The refresh queue follows the account view. It is registered last among
+    // producers, so it stops first: no token refresh can start while the quota
+    // manager and poller are shutting down.
+    let refreshQueue = null;
+    let accountChange = Promise.resolve();
+    const stopRefreshQueue = async () => {
+        const queue = refreshQueue;
+        refreshQueue = null;
+        await queue?.dispose();
+    };
+    scope.add({
+        dispose: async () => {
+            // Let an in-progress account swap finish before stopping its queue.
+            await accountChange;
+            accounts = null;
+            await stopRefreshQueue();
+        },
+    }, 'producer');
+    scope.addDrain(() => options.quotaSnapshots.drain());
+    const replaceAccounts = (view) => {
+        const next = accountChange.then(async () => {
+            if (scope.disposed)
+                return;
+            await stopRefreshQueue();
+            if (scope.disposed)
+                return;
+            accounts = view;
+            if (!view || !config?.config.proactive_token_refresh)
+                return;
+            const queue = createLocationProactiveRefreshQueue({
+                logger: logger.createLogger('refresh-queue'),
+                refreshToken: options.refreshToken,
+            }, {
+                enabled: true,
+                ...(options.mayRun
+                    ? { mayRun: async () => Boolean(await options.mayRun?.()) }
+                    : {}),
+                bufferSeconds: config.config.proactive_refresh_buffer_seconds,
+                checkIntervalSeconds: config.config.proactive_refresh_check_interval_seconds,
+            });
+            queue.setAccountManager(view);
+            refreshQueue = queue;
+            queue.start();
+        });
+        accountChange = next.catch((error) => {
+            log.warn('account view replacement failed', {
+                error: error instanceof Error ? error.message : String(error),
+            });
+        });
+        return next;
+    };
+    // Timers start only after every acquisition succeeded, so a failed build
+    // never leaves a scheduled tick behind.
+    backgroundQuotaRefresh?.start();
+    const runtimeConfig = config;
+    return {
+        directory: options.directory,
+        logger,
+        config: runtimeConfig,
+        debug,
+        dump,
+        operatorSettings,
+        signatures,
+        quotaManager,
+        backgroundQuotaRefresh,
+        refreshQueue: () => refreshQueue,
+        accounts: () => accounts,
+        replaceAccounts,
+        applyOperatorSettings,
+        scope,
+        dispose: () => scope.dispose(),
+    };
+}
+//# sourceMappingURL=runtime.js.map

package/dist/src/plugin/shared/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../../src/plugin/shared/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAMH,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAA;AAGvE,OAAO,EACL,kBAAkB,EAElB,cAAc,GACf,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,sBAAsB,EACtB,8BAA8B,GAG/B,MAAM,gCAAgC,CAAA;AACvC,OAAO,EACL,6BAA6B,GAG9B,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,oBAAoB,EAAuB,MAAM,oBAAoB,CAAA;AAC9E,OAAO,EAAE,mBAAmB,EAAsB,MAAM,aAAa,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAwB,MAAM,mBAAmB,CAAA;AAC/E,OAAO,EAAE,oBAAoB,EAAuB,MAAM,cAAc,CAAA;AAExE,OAAO,EACL,+BAA+B,GAGhC,MAAM,yBAAyB,CAAA;AAChC,OAAO,EACL,0BAA0B,GAG3B,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,mCAAmC,GAIpC,MAAM,qBAAqB,CAAA;AA6B5B,MAAM,UAAU,kBAAkB;IAChC,MAAM,SAAS,GAAsB,EAAE,CAAA;IACvC,MAAM,SAAS,GAAsB,EAAE,CAAA;IACvC,MAAM,MAAM,GAA+B,EAAE,CAAA;IAC7C,IAAI,QAAQ,GAAyB,IAAI,CAAA;IACzC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAiB,CAAA;IAE9C,MAAM,GAAG,GAAG,KAAK,EACf,IAAgC,EAChC,MAAiB,EACF,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,IAAI,EAAE,CAAA;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;IACH,CAAC,CAAA;IAED,OAAO;QACL,GAAG,CAAC,QAAQ,EAAE,KAAK;YACjB,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE;qBAC3B,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;qBAC9B,KAAK,CAAC,GAAG,EAAE;oBACV,2DAA2D;oBAC3D,4CAA4C;gBAC9C,CAAC,CAAC,CAAA;gBACJ,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBACvB,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;gBACnD,OAAM;YACR,CAAC;YACD,CAAC;YAAA,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAChE,CAAC;QACD,QAAQ,CAAC,KAAK;YACZ,IAAI,QAAQ;gBAAE,OAAM;YACpB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;QACD,IAAI,QAAQ;YACV,OAAO,QAAQ,KAAK,IAAI,CAAA;QAC1B,CAAC;QACD,OAAO;YACL,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;oBACrB,MAAM,MAAM,GAAc,EAAE,CAAA;oBAC5B,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;wBACrD,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAA;oBAC7C,CAAC;oBACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;wBACrC,MAAM,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;oBAC1B,CAAC;oBACD,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;wBACrD,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAA;oBAC7C,CAAC;oBACD,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAA;oBAC5C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACtB,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAA;oBACtE,CAAC;gBACH,CAAC,CAAC,EAAE,CAAA;YACN,CAAC;YACD,OAAO,QAAQ,CAAA;QACjB,CAAC;KACF,CAAA;AACH,CAAC;AAiBD;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,SAAiB;IAEjB,OAAO;QACL,GAAG,8BAA8B,CAAC,SAAS,CAAC;QAC5C,KAAK,EAAE,GAAG,EAAE,CAAC,kBAAkB,EAAE;KAClC,CAAA;AACH,CAAC;AAaD,MAAM,UAAU,0BAA0B,CACxC,UAAqD,EAAE;IAEvD,IAAI,MAAM,GAA+B,IAAI,CAAA;IAC7C,OAAO;QACL,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM;QACpB,aAAa,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,SAAS,IAAI,CAAC;QAC3C,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACrB,oEAAoE;YACpE,mCAAmC;YACnC,MAAM,GAAG,KAAK,CAAA;QAChB,CAAC;QACD,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;QAC1C,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;KACtB,CAAA;AACH,CAAC;AA0GD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAA+B,EAC/B,gBAAkC;IAElC,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAA;IAClC,4EAA4E;IAC5E,yCAAyC;IACzC,IAAI,gBAAgB;QAAE,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAA;IAC7D,IAAI,CAAC;QACH,OAAO,MAAM,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YAC/B,+DAA+D;YAC/D,8CAA8C;QAChD,CAAC,CAAC,CAAA;QACF,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,OAA+B,EAC/B,KAAmB;IAEnB,IAAI,OAAO,OAAO,EAAE,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QACvE,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAA;IAC9E,CAAC;IACD,IACE,OAAO,OAAO,CAAC,cAAc,EAAE,KAAK,KAAK,UAAU;QACnD,OAAO,OAAO,CAAC,cAAc,CAAC,KAAK,KAAK,UAAU,EAClD,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAA;IAC9E,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAC/C,MAAM,IAAI,SAAS,CACjB,wDAAwD,CACzD,CAAA;IACH,CAAC;IAED,sEAAsE;IACtE,sEAAsE;IACtE,IAAI,MAAkC,CAAA;IACtC,MAAM,MAAM,GAAG,oBAAoB,CAAC;QAClC,IAAI,EAAE,OAAO,CAAC,OAAO;QACrB,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI;KACrD,CAAC,CAAA;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;IAC1C,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,SAAS,EAAE;QAC/C,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC;KACtC,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAChD,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,UAAU,CAAC,CAAA;IAEvD,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;QACvD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,GAAG,CAAC,OAAO,CAAC,wBAAwB;YAClC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,wBAAwB,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAA;IACF,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAA;IACvC,MAAM,qBAAqB,GAAG,GAAS,EAAE;QACvC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACnD,CAAC,CAAA;IACD,qBAAqB,EAAE,CAAA;IAEvB,MAAM,gBAAgB,GAAG;QACvB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe;KAC9C,CAAA;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc;QACvC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,gBAAgB,CAAC;QAC1D,CAAC,CAAC,6BAA6B,CAAC,gBAAgB,CAAC,CAAA;IACnD,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;IAEjC,MAAM,IAAI,GAAG,qBAAqB,EAAE,CAAA;IAEpC,IAAI,QAAQ,GAA+B,IAAI,CAAA;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,oBAAoB,CAAA;IAC7C,MAAM,eAAe,GAAG,GAAiC,EAAE;QACzD,MAAM,IAAI,GAAG,QAAQ,CAAA;QACrB,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAA;QACtB,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACxC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;YAChD,GAAG,CAAC,QAAQ;gBACV,CAAC,CAAC,EAAE,qBAAqB,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE;gBAC/D,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC,CAAA;IACL,CAAC,CAAA;IAED,MAAM,YAAY,GAAG,0BAA0B,CAAC;QAC9C,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC;QACpC,iBAAiB,EAAE,OAAO,CAAC,MAAM;YAC/B,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;gBACxB,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;gBACtE,OAAO,OAAO,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACnD,CAAC;YACH,CAAC,CAAC,OAAO,CAAC,iBAAiB;QAC7B,OAAO,EAAE;YACP,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACrB,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;oBAAE,OAAM;gBACvD,MAAM,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAC3C,CAAC;YACD,WAAW,EAAE,eAAe;YAC5B,sBAAsB,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,sBAAsB,EAAE,IAAI,IAAI;YACxE,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7C;KACF,CAAC,CAAA;IACF,wEAAwE;IACxE,+CAA+C;IAC/C,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;IAEnC,IAAI,sBAAsB,GAAkC,IAAI,CAAA;IAChE,IAAI,MAAM,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC;QAC3C,sBAAsB,GAAG,IAAI,sBAAsB,CAAC;YAClD,UAAU,EACR,MAAM,CAAC,MAAM,CAAC,yCAAyC,GAAG,MAAM;YAClE,SAAS,EAAE,OAAO,CAAC,cAAc;YACjC,iBAAiB,EAAE,GAAG,EAAE,CAAC,QAAQ;YACjC,GAAG,CAAC,OAAO,CAAC,MAAM;gBAChB,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE;gBAC3D,CAAC,CAAC,EAAE,CAAC;YACP,YAAY;YACZ,GAAG,CAAC,OAAO,CAAC,eAAe;gBACzB,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;YACxC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,kBAAkB,CAAC;SAChD,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,sBAAsB,CAAA;QACrC,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,CAAA;IAC5D,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,wCAAwC;IACxC,IAAI,YAAY,GAAiC,IAAI,CAAA;IACrD,IAAI,aAAa,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IACpD,MAAM,gBAAgB,GAAG,KAAK,IAAmB,EAAE;QACjD,MAAM,KAAK,GAAG,YAAY,CAAA;QAC1B,YAAY,GAAG,IAAI,CAAA;QACnB,MAAM,KAAK,EAAE,OAAO,EAAE,CAAA;IACxB,CAAC,CAAA;IACD,KAAK,CAAC,GAAG,CACP;QACE,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,oEAAoE;YACpE,MAAM,aAAa,CAAA;YACnB,QAAQ,GAAG,IAAI,CAAA;YACf,MAAM,gBAAgB,EAAE,CAAA;QAC1B,CAAC;KACF,EACD,UAAU,CACX,CAAA;IAED,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,CAAA;IAEpD,MAAM,eAAe,GAAG,CAAC,IAAgC,EAAiB,EAAE;QAC1E,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACzC,IAAI,KAAK,CAAC,QAAQ;gBAAE,OAAM;YAC1B,MAAM,gBAAgB,EAAE,CAAA;YACxB,IAAI,KAAK,CAAC,QAAQ;gBAAE,OAAM;YAC1B,QAAQ,GAAG,IAAI,CAAA;YACf,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,uBAAuB;gBAAE,OAAM;YAC5D,MAAM,KAAK,GAAG,mCAAmC,CAC/C;gBACE,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC;gBAC5C,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC,EACD;gBACE,OAAO,EAAE,IAAI;gBACb,GAAG,CAAC,OAAO,CAAC,MAAM;oBAChB,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE;oBAC3D,CAAC,CAAC,EAAE,CAAC;gBACP,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,gCAAgC;gBAC7D,oBAAoB,EAClB,MAAM,CAAC,MAAM,CAAC,wCAAwC;aACzD,CACF,CAAA;YACD,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;YAC7B,YAAY,GAAG,KAAK,CAAA;YACpB,KAAK,CAAC,KAAK,EAAE,CAAA;QACf,CAAC,CAAC,CAAA;QACF,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACnC,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE;gBAC1C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IAED,yEAAyE;IACzE,wCAAwC;IACxC,sBAAsB,EAAE,KAAK,EAAE,CAAA;IAE/B,MAAM,aAAa,GAAG,MAAM,CAAA;IAC5B,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM;QACN,MAAM,EAAE,aAAa;QACrB,KAAK;QACL,IAAI;QACJ,gBAAgB;QAChB,UAAU;QACV,YAAY;QACZ,sBAAsB;QACtB,YAAY,EAAE,GAAG,EAAE,CAAC,YAAY;QAChC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ;QACxB,eAAe;QACf,qBAAqB;QACrB,KAAK;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE;KAC/B,CAAA;AACH,CAAC"}

package/dist/src/plugin/shared/source-sidebar.d.ts

@@ -0,0 +1,15 @@
+import { type EnrollmentAuthority } from '@cortexkit/antigravity-auth-core';
+import type { SidebarMachineState } from '../../sidebar-state';
+export interface SourceSidebarOptions {
+    readonly readAuthority: () => Promise<EnrollmentAuthority>;
+    readonly local: () => Promise<SidebarMachineState>;
+    readonly vault: () => Promise<SidebarMachineState>;
+    readonly write: (state: SidebarMachineState, accountIds: readonly string[]) => Promise<void>;
+    readonly now?: () => number;
+}
+/** Choose local or vault sidebar rows before reading accounts; finish queued snapshot writes on shutdown. */
+export declare function createSourceSidebarPublisher(options: SourceSidebarOptions): {
+    publish(): Promise<void>;
+    dispose(): Promise<void>;
+};
+//# sourceMappingURL=source-sidebar.d.ts.map

package/dist/src/plugin/shared/source-sidebar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-sidebar.d.ts","sourceRoot":"","sources":["../../../../src/plugin/shared/source-sidebar.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,kCAAkC,CAAA;AACzC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAE9D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC1D,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAClD,QAAQ,CAAC,KAAK,EAAE,CACd,KAAK,EAAE,mBAAmB,EAC1B,UAAU,EAAE,SAAS,MAAM,EAAE,KAC1B,OAAO,CAAC,IAAI,CAAC,CAAA;IAClB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAC5B;AAED,6GAA6G;AAC7G,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,oBAAoB;eAS3D,OAAO,CAAC,IAAI,CAAC;eAqBP,OAAO,CAAC,IAAI,CAAC;EAKjC"}

package/dist/src/plugin/shared/source-sidebar.js

@@ -0,0 +1,41 @@
+import { VAULT_ACCOUNT_REMEDY, } from '@cortexkit/antigravity-auth-core';
+/** Choose local or vault sidebar rows before reading accounts; finish queued snapshot writes on shutdown. */
+export function createSourceSidebarPublisher(options) {
+    let tail = Promise.resolve();
+    let disposed = false;
+    const unavailable = () => ({
+        checkedAt: (options.now ?? Date.now)(),
+        accounts: [],
+        lastError: VAULT_ACCOUNT_REMEDY,
+    });
+    return {
+        publish() {
+            if (disposed)
+                return Promise.resolve();
+            const next = tail.then(async () => {
+                const authority = await options.readAuthority();
+                let projection;
+                if (authority === 'local')
+                    projection = await options.local();
+                else if (authority === 'vault') {
+                    try {
+                        projection = await options.vault();
+                    }
+                    catch {
+                        projection = unavailable();
+                    }
+                }
+                else
+                    projection = unavailable();
+                await options.write(projection, projection.accounts.map((account) => account.id));
+            });
+            tail = next.catch(() => { });
+            return next;
+        },
+        async dispose() {
+            disposed = true;
+            await tail;
+        },
+    };
+}
+//# sourceMappingURL=source-sidebar.js.map

package/dist/src/plugin/shared/source-sidebar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-sidebar.js","sourceRoot":"","sources":["../../../../src/plugin/shared/source-sidebar.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,oBAAoB,GACrB,MAAM,kCAAkC,CAAA;AAczC,6GAA6G;AAC7G,MAAM,UAAU,4BAA4B,CAAC,OAA6B;IACxE,IAAI,IAAI,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IAC3C,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,MAAM,WAAW,GAAG,GAAwB,EAAE,CAAC,CAAC;QAC9C,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;QACtC,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,oBAAoB;KAChC,CAAC,CAAA;IACF,OAAO;QACL,OAAO;YACL,IAAI,QAAQ;gBAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;YACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAChC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,CAAA;gBAC/C,IAAI,UAA+B,CAAA;gBACnC,IAAI,SAAS,KAAK,OAAO;oBAAE,UAAU,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;qBACxD,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;oBAC/B,IAAI,CAAC;wBACH,UAAU,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;oBACpC,CAAC;oBAAC,MAAM,CAAC;wBACP,UAAU,GAAG,WAAW,EAAE,CAAA;oBAC5B,CAAC;gBACH,CAAC;;oBAAM,UAAU,GAAG,WAAW,EAAE,CAAA;gBACjC,MAAM,OAAO,CAAC,KAAK,CACjB,UAAU,EACV,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CACjD,CAAA;YACH,CAAC,CAAC,CAAA;YACF,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAC3B,OAAO,IAAI,CAAA;QACb,CAAC;QACD,KAAK,CAAC,OAAO;YACX,QAAQ,GAAG,IAAI,CAAA;YACf,MAAM,IAAI,CAAA;QACZ,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/src/plugin/shared/vault-menu.d.ts

@@ -0,0 +1,5 @@
+import { type AntigravityMenuSections, type AntigravityQuotaCheckReport } from '@cortexkit/antigravity-auth-core';
+import type { VaultAccountPool, VaultAccountRow } from './vault-request-credentials';
+/** Show accounts and quotas from the same vault account pool that selects request routes. */
+export declare function createVaultAccountMenuSections(pool: Pick<VaultAccountPool, 'selector'>, selectorOf: (row: VaultAccountRow) => string, checkQuota?: (signal: AbortSignal) => Promise<AntigravityQuotaCheckReport>): Pick<AntigravityMenuSections, 'accounts' | 'quota'>;
+//# sourceMappingURL=vault-menu.d.ts.map

package/dist/src/plugin/shared/vault-menu.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-menu.d.ts","sourceRoot":"","sources":["../../../../src/plugin/shared/vault-menu.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAIjC,MAAM,kCAAkC,CAAA;AACzC,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EAChB,MAAM,6BAA6B,CAAA;AAEpC,6FAA6F;AAC7F,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,EACxC,UAAU,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,MAAM,EAC5C,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,2BAA2B,CAAC,GACzE,IAAI,CAAC,uBAAuB,EAAE,UAAU,GAAG,OAAO,CAAC,CAwDrD"}

package/dist/src/plugin/shared/vault-menu.js

@@ -0,0 +1,49 @@
+import { formatAntigravityQuota, quotaCheckOutcome, VAULT_ACCOUNT_REMEDY, } from '@cortexkit/antigravity-auth-core';
+/** Show accounts and quotas from the same vault account pool that selects request routes. */
+export function createVaultAccountMenuSections(pool, selectorOf, checkQuota) {
+    return {
+        accounts: {
+            title: 'Accounts',
+            build: () => {
+                const rows = pool.selector.rows;
+                return {
+                    lines: [
+                        rows.length === 0
+                            ? VAULT_ACCOUNT_REMEDY
+                            : `${rows.length} ${rows.length === 1 ? 'account' : 'accounts'} served from the vault`,
+                    ],
+                    items: rows.map((row, position) => ({
+                        id: selectorOf(row),
+                        label: `Account ${position + 1}`,
+                        detail: 'served from the vault',
+                    })),
+                };
+            },
+        },
+        quota: {
+            title: 'Quota',
+            build: () => {
+                const rows = pool.selector.rows;
+                return {
+                    lines: rows.length === 0
+                        ? []
+                        : rows.map((row, position) => `Account ${position + 1}: ${formatAntigravityQuota({
+                            schemaVersion: 1,
+                            cachedQuota: row.cachedQuota,
+                            cachedQuotaUpdatedAt: row.cachedQuotaUpdatedAt,
+                        }, { now: Date.now() })}`),
+                    actions: checkQuota && rows.length > 0
+                        ? [
+                            {
+                                id: 'refresh',
+                                label: 'Check quota now',
+                                run: async () => quotaCheckOutcome(await checkQuota(new AbortController().signal)),
+                            },
+                        ]
+                        : [],
+                };
+            },
+        },
+    };
+}
+//# sourceMappingURL=vault-menu.js.map

package/dist/src/plugin/shared/vault-menu.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-menu.js","sourceRoot":"","sources":["../../../../src/plugin/shared/vault-menu.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,kCAAkC,CAAA;AAMzC,6FAA6F;AAC7F,MAAM,UAAU,8BAA8B,CAC5C,IAAwC,EACxC,UAA4C,EAC5C,UAA0E;IAE1E,OAAO;QACL,QAAQ,EAAE;YACR,KAAK,EAAE,UAAU;YACjB,KAAK,EAAE,GAAG,EAAE;gBACV,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAA;gBAC/B,OAAO;oBACL,KAAK,EAAE;wBACL,IAAI,CAAC,MAAM,KAAK,CAAC;4BACf,CAAC,CAAC,oBAAoB;4BACtB,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,wBAAwB;qBACzF;oBACD,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;wBAClC,EAAE,EAAE,UAAU,CAAC,GAAG,CAAC;wBACnB,KAAK,EAAE,WAAW,QAAQ,GAAG,CAAC,EAAE;wBAChC,MAAM,EAAE,uBAAuB;qBAChC,CAAC,CAAC;iBACJ,CAAA;YACH,CAAC;SACF;QACD,KAAK,EAAE;YACL,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,GAAG,EAAE;gBACV,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAA;gBAC/B,OAAO;oBACL,KAAK,EACH,IAAI,CAAC,MAAM,KAAK,CAAC;wBACf,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,IAAI,CAAC,GAAG,CACN,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CAChB,WAAW,QAAQ,GAAG,CAAC,KAAK,sBAAsB,CAChD;4BACE,aAAa,EAAE,CAAC;4BAChB,WAAW,EAAE,GAAG,CAAC,WAAW;4BAC5B,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;yBAC/C,EACD,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CACpB,EAAE,CACN;oBACP,OAAO,EACL,UAAU,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;wBAC3B,CAAC,CAAC;4BACE;gCACE,EAAE,EAAE,SAAS;gCACb,KAAK,EAAE,iBAAiB;gCACxB,GAAG,EAAE,KAAK,IAAI,EAAE,CACd,iBAAiB,CACf,MAAM,UAAU,CAAC,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAC/C;6BACJ;yBACF;wBACH,CAAC,CAAC,EAAE;iBACT,CAAA;YACH,CAAC;SACF;KACF,CAAA;AACH,CAAC"}