@cortexkit/opencode-antigravity-auth 2.2.1 → 3.0.0

package/dist/src/plugin/shared/request-services.d.ts

@@ -0,0 +1,375 @@
+/**
+ * Shared Antigravity request engine: account selection, retries, endpoint
+ * and quota fallback, warmups and response handling for one plugin location.
+ *
+ * OpenCode 1's `createFetchInterceptor` and the GA location services both
+ * call `createRequestExecutor`, so there is exactly one retry loop. Every
+ * collaborator with state (accounts, credentials, session metadata, operator
+ * settings, wire state, debug log, dump switch, logger, health and token
+ * trackers) arrives through `RequestServicesDeps`; this module never reads a
+ * module-level OpenCode 1 binding or a host SDK client. Host-only effects
+ * (toasts, the sidebar routing file, clearing host-stored OAuth credentials)
+ * are optional or explicit callbacks the host binding supplies.
+ *
+ * The wire rules themselves (payload transformation, header and envelope
+ * order, SSE handling) stay in `../request`. The engine receives them as
+ * `RequestWire`, which `createRequestWire` binds to one location's signature
+ * cache, debug log and logger; the raw sender is called unchanged.
+ */
+import { type AgyTransportOptions, type AccountManager as CoreAccountManager, type Fingerprint, type HealthScoreTracker, type ManagedAccount, type OAuthAuthDetails, type ProjectContextResult, type QuotaGroup, type QuotaGroupSummary, type QuotaManager, type TokenBucketTracker } from '@cortexkit/antigravity-auth-core';
+import { type HeaderStyle } from '../../constants';
+import type { AntigravityConfig } from '../config';
+import type { LocationDebug } from '../debug';
+import { type GeminiDumpState } from '../gemini-dump';
+import type { Logger } from '../logger';
+import type { OperatorSettingsController } from '../operator-settings';
+import type { buildThinkingWarmupBody, getImageModelLocalTitle, getLastCacheStats, PrepareRequestOptions, prepareAntigravityRequest, transformAntigravityResponse } from '../request';
+import { type AgySessionRegistry, type OpenCodeSessionIdentity } from '../session-context';
+import { type CapturedLocalGrant } from './local-grant';
+/** Raw Antigravity sender: the core CLI transport or a test double. */
+export type RequestTransport = (url: string, init?: RequestInit, options?: AgyTransportOptions) => Promise<Response>;
+/**
+ * Standard fetch, used for `gemini-cli` header-style sends and their warmups;
+ * `antigravity` header-style sends use the raw HTTP/1.1 AGY sender instead.
+ */
+export type RequestFetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+/**
+ * The fields of a pool row the engine reads: selection, logging, killswitch
+ * and backoff metadata only. A row carries no credential. OpenCode 1's rows
+ * are core `ManagedAccount`s; a vault location supplies metadata-only rows.
+ */
+export interface RequestAccountRow {
+    readonly index: number;
+    readonly email?: string;
+    readonly fingerprint?: Fingerprint;
+    /** Reset to 0 by the engine after a successful send. */
+    consecutiveFailures?: number;
+    readonly rateLimitResetTimes: {
+        readonly claude?: number;
+        readonly gemini?: number;
+    };
+    readonly cachedQuota?: Partial<Record<QuotaGroup, QuotaGroupSummary>>;
+    readonly cachedQuotaUpdatedAt?: number;
+}
+type CoreArgs<K extends keyof CoreAccountManager> = CoreAccountManager[K] extends (...args: infer P) => unknown ? P : never;
+type CoreArgsAfterAccount<K extends keyof CoreAccountManager> = CoreArgs<K> extends [unknown, ...infer Rest] ? Rest : never;
+type CoreResult<K extends keyof CoreAccountManager> = CoreAccountManager[K] extends (...args: never[]) => infer R ? R : never;
+/**
+ * Selection, rate-limit, toast and usage bookkeeping over one location's
+ * rows. It has no credential operation. The arguments and results are the
+ * core `AccountManager`'s, with its row type replaced by `A`, so a core
+ * manager is a `RequestAccountPool<ManagedAccount>` as is.
+ *
+ * Account selection stays Antigravity's own policy. It is not delegated to
+ * the `@cortexkit/common-auth` `./routing` entry, whose published semantics
+ * differ in four ways that would change which account serves a request:
+ *
+ * 1. Cold start: `admit()` refuses an OAuth row with no quota reading, a
+ *    missing window or an unknown reset (`dist/routing/admission.d.ts`,
+ *    refusals `needs-first-reading`, `unknown-window`, `unknown-reset`).
+ *    Antigravity selection and its killswitch pass such a row.
+ * 2. Rate limits: admission keeps one mark per row (`rateLimitMarks` in
+ *    `ExclusionInputs`, same file). Antigravity keeps marks per quota key
+ *    (family, model and header style) and switches between the two Gemini
+ *    quota pools.
+ * 3. Strategies: the library routes only `ordered` or `sticky-balanced`
+ *    (`RoutingMode`, `dist/routing/ordered.d.ts`), and both routes run
+ *    admission (`OrderedRouteInput` and `StickyRouteInput` extend
+ *    `AdmissionInput`). Antigravity uses sticky, round-robin and hybrid
+ *    (health and token-bucket) selection with PID offset and per-session and
+ *    parent-session pinning.
+ * 4. Soft quota: Antigravity excludes accounts over
+ *    `soft_quota_threshold_percent`, never the only usable account, and
+ *    waits for the soonest reset. The library has no admission equivalent;
+ *    `reservePercent` only weights sticky selection
+ *    (`dist/routing/sticky.d.ts`).
+ *
+ * The killswitch verdict is a per-row boolean on both sides, but every
+ * library route that accepts it also runs the admission gates above.
+ */
+export interface RequestAccountPool<A extends RequestAccountRow> {
+    areAllAccountsOverSoftQuota(...args: CoreArgs<'areAllAccountsOverSoftQuota'>): boolean;
+    getAccountCount(): number;
+    getAccounts(): A[];
+    getAccountsSnapshot(): A[];
+    getEnabledAccounts(): A[];
+    getAvailableHeaderStyle(account: A, ...rest: CoreArgsAfterAccount<'getAvailableHeaderStyle'>): CoreResult<'getAvailableHeaderStyle'>;
+    getCurrentOrNextForFamily(...args: CoreArgs<'getCurrentOrNextForFamily'>): A | null;
+    getDailyRequestCounts(...args: CoreArgs<'getDailyRequestCounts'>): CoreResult<'getDailyRequestCounts'>;
+    getMinWaitTimeForFamily(...args: CoreArgs<'getMinWaitTimeForFamily'>): number;
+    getMinWaitTimeForSoftQuota(...args: CoreArgs<'getMinWaitTimeForSoftQuota'>): number | null;
+    getSessionSummary(): CoreResult<'getSessionSummary'>;
+    getTotalDailyRequests(...args: CoreArgs<'getTotalDailyRequests'>): number;
+    hasOtherAccountWithAntigravityAvailable(...args: CoreArgs<'hasOtherAccountWithAntigravityAvailable'>): boolean;
+    isRateLimitedForHeaderStyle(account: A, ...rest: CoreArgsAfterAccount<'isRateLimitedForHeaderStyle'>): boolean;
+    markAccountCoolingDown(account: A, ...rest: CoreArgsAfterAccount<'markAccountCoolingDown'>): void;
+    markAccountIneligible(...args: CoreArgs<'markAccountIneligible'>): boolean;
+    markAccountUsed(...args: CoreArgs<'markAccountUsed'>): void;
+    markAccountVerificationRequired(...args: CoreArgs<'markAccountVerificationRequired'>): boolean;
+    markRateLimited(account: A, ...rest: CoreArgsAfterAccount<'markRateLimited'>): void;
+    markRateLimitedWithReason(account: A, ...rest: CoreArgsAfterAccount<'markRateLimitedWithReason'>): number;
+    markToastShown(...args: CoreArgs<'markToastShown'>): void;
+    proactivelyRotateForFamily(...args: CoreArgs<'proactivelyRotateForFamily'>): A | null;
+    recordRequest(...args: CoreArgs<'recordRequest'>): void;
+    recordSessionUsage(...args: CoreArgs<'recordSessionUsage'>): void;
+    regenerateAccountFingerprint(...args: CoreArgs<'regenerateAccountFingerprint'>): CoreResult<'regenerateAccountFingerprint'>;
+    requestSaveToDisk(): void;
+    shouldProactivelyRotate(...args: CoreArgs<'shouldProactivelyRotate'>): boolean;
+    shouldShowAccountToast(...args: CoreArgs<'shouldShowAccountToast'>): boolean;
+    wasUsedInSession(...args: CoreArgs<'wasUsedInSession'>): boolean;
+}
+/**
+ * Credentials kept on the location's own pool rows (OpenCode 1, or a GA
+ * location on its local account repository): the selected row's stored
+ * token is refreshed when expired, its project is resolved, and the result
+ * is written back to the pool. One token and project serve every send of
+ * that selection.
+ */
+export interface LocalRequestCredentials<A extends RequestAccountRow> {
+    readonly domain: 'local';
+    /** The stored OAuth record of a row. */
+    toAuthDetails(account: A): OAuthAuthDetails;
+    /** Write a refreshed or project-resolved record back to its row. */
+    updateFromAuth(account: A, auth: OAuthAuthDetails): void;
+    /** Drop a row whose refresh token was revoked; true when it was removed. */
+    removeAccount(account: A): boolean;
+    saveToDisk(): Promise<void>;
+    saveToDiskReplace(): Promise<void>;
+    /**
+     * Refresh the selected row's expired access token. The row itself is
+     * passed; an implementation refreshes exactly that row (a repository
+     * adapter captures the row's ref before its first await) and never looks a
+     * row up by refresh token. It returns the refreshed record as stored for
+     * that row, so later grant checks see the successor credential; undefined
+     * means the refresh failed.
+     */
+    refresh(account: A): Promise<OAuthAuthDetails | undefined>;
+    /** Resolve the project the request is sent under. */
+    ensureProject(auth: OAuthAuthDetails): Promise<ProjectContextResult>;
+    /** True when a refresh error means the refresh token was revoked. */
+    isInvalidGrant(error: unknown): boolean;
+    /** Clear host-stored OAuth credentials once the last account is removed. */
+    clearStoredAuth(): Promise<void>;
+    /**
+     * Capture the bearer and original row reference before any save, project
+     * lookup or other await. For store accounts the ref includes row ID, the
+     * credential replacement epoch, and authenticated identity; a refresh does
+     * not advance that epoch. Later account changes cannot replace this ref.
+     *
+     * check() runs immediately before main sends, thinking warmups and cache
+     * probes. It rejects unavailable metadata or a removed, disabled, replaced
+     * or token-superseded credential. A store resolver can separately adopt the
+     * current token at the original ref. This request executor may then capture
+     * a new grant and rebuild once per request, without modifying the captured
+     * check or penalizing the account for an ordinary token change.
+     */
+    captureGrant(grant: {
+        readonly account: A;
+        readonly accessToken: string;
+    }): CapturedLocalGrant;
+    /**
+     * Started without awaiting after a successful send, with the selected row
+     * and `quota_refresh_interval_minutes`. `createLocalQuotaRefresh` builds
+     * it for a core account manager. Absent: no refresh from the request path.
+     */
+    refreshQuotaAfterSuccess?(account: A, intervalMinutes: number): Promise<void>;
+}
+/**
+ * Credentials held by a vault: the engine never sees a stored token. Every
+ * physical send (each endpoint attempt, retry and fallback) asks for a fresh
+ * admission and uses that admission's token and project for that one send
+ * only; nothing is refreshed, cached or written to a pool row.
+ */
+export interface VaultRequestCredentials<A extends RequestAccountRow> {
+    readonly domain: 'vault';
+    admit(request: {
+        /** The metadata row selected for this send. */
+        readonly account: A;
+        readonly signal: AbortSignal | undefined;
+    }): Promise<RequestSendAdmission>;
+}
+/** One vault admission, valid for exactly one physical send. */
+export interface RequestSendAdmission {
+    /** The vault credential this admission serves. */
+    readonly credentialId: string;
+    /** The account the vault asserted for this admission. */
+    readonly accountIdentity: string;
+    /** The record version served; a 401 is reported against it. */
+    readonly recordVersion: number;
+    readonly accessToken: string;
+    /** The Antigravity project served with this same admission. */
+    readonly projectId: string;
+    /**
+     * Reports a 401 served to this send against the exact record version
+     * this admission carried. Called without awaiting the result; a rejection
+     * is logged and ignored.
+     */
+    report401(status: number): Promise<unknown>;
+}
+/** Which store holds the selected row's credentials. */
+export type RequestCredentials<A extends RequestAccountRow> = LocalRequestCredentials<A> | VaultRequestCredentials<A>;
+/** Wire preparation and response handling, unchanged from `../request`. */
+export interface RequestWire {
+    prepare: typeof prepareAntigravityRequest;
+    transformResponse: typeof transformAntigravityResponse;
+    buildThinkingWarmupBody: typeof buildThinkingWarmupBody;
+    getImageModelLocalTitle: typeof getImageModelLocalTitle;
+    getLastCacheStats: typeof getLastCacheStats;
+}
+/** A prepared upstream request, as `RequestWire.prepare` returns it. */
+export type PreparedAgyRequest = ReturnType<RequestWire['prepare']>;
+/** What a Google 403 body says about the account that received it. */
+export interface AccountAccessErrorDetails {
+    validationRequired: boolean;
+    accountIneligible: boolean;
+    message?: string;
+    verifyUrl?: string;
+}
+/** The account and header style a session's request was finally sent with. */
+export interface RequestRoutingEntry {
+    accountId: string;
+    modelFamily: 'claude' | 'gemini';
+    headerStyle: 'antigravity' | 'gemini-cli';
+    strategy?: 'sticky' | 'round-robin' | 'hybrid';
+    updatedAt: number;
+}
+export type RequestNoticeVariant = 'info' | 'warning' | 'success' | 'error';
+/** One upstream send's wire inputs, taken from a single credential grant. */
+export interface AgyWireRequestInput {
+    /** The host's Generative Language URL (or Request). */
+    readonly input: RequestInfo;
+    readonly init?: RequestInit;
+    readonly accessToken: string;
+    readonly projectId: string;
+    /** Antigravity endpoint for this attempt. */
+    readonly endpoint?: string;
+    readonly headerStyle?: HeaderStyle;
+    /** Close the tool loop and retry after a corrupted-thinking rejection. */
+    readonly forceThinkingRecovery?: boolean;
+    readonly options?: PrepareRequestOptions;
+}
+/**
+ * Prepares one upstream Antigravity request: payload transforms, AGY
+ * metadata and envelope, header order and the endpoint URL. It is the single
+ * entry point the engine uses for every send, and the rules are exactly
+ * `RequestWire.prepare`'s.
+ */
+export declare function prepareAgyWireRequest(wire: Pick<RequestWire, 'prepare'>, request: AgyWireRequestInput): PreparedAgyRequest;
+/** This location's debug-log methods the engine calls. */
+export type RequestDebug = Pick<LocationDebug, 'isDebugEnabled' | 'logAccountContext' | 'logAntigravityDebugResponse' | 'logModelFamily' | 'logRateLimitEvent' | 'logRateLimitSnapshot' | 'logResponseBody' | 'startAntigravityDebugRequest'>;
+/**
+ * One location's collaborators for the shared request engine. `A` is the
+ * location's pool row type; `credentials.domain` selects how a selected row
+ * becomes a token and project.
+ */
+export interface RequestServicesDeps<A extends RequestAccountRow> {
+    /** Check the persistent account source before each operation that uses credentials. */
+    readonly assertAdmission?: () => Promise<void>;
+    readonly config: AntigravityConfig;
+    readonly accounts: RequestAccountPool<A>;
+    readonly credentials: RequestCredentials<A>;
+    /** This location's AGY conversation/trajectory session metadata. */
+    readonly sessions: AgySessionRegistry;
+    /**
+     * Live operator settings: routing overrides and the killswitch, which
+     * excludes accounts whose remaining quota is below a threshold.
+     */
+    readonly operatorSettings?: Pick<OperatorSettingsController, 'get'>;
+    /**
+     * Raw HTTP/1.1 AGY sender for `antigravity` header-style sends. The engine
+     * transforms the request first, then passes the prepared URL, init and
+     * the caller's AbortSignal to it.
+     */
+    readonly transport: RequestTransport;
+    /** Standard fetch for `gemini-cli` header-style sends and their warmups. */
+    readonly fetchImpl: RequestFetch;
+    readonly wire: RequestWire;
+    readonly debug: RequestDebug;
+    readonly dump: Pick<GeminiDumpState, 'dumpRequest'>;
+    readonly logger: Logger;
+    readonly trackers: {
+        readonly health: Pick<HealthScoreTracker, 'recordFailure' | 'recordRateLimit' | 'recordSuccess'>;
+        readonly token: Pick<TokenBucketTracker, 'consume' | 'refund'>;
+    };
+    /**
+     * Recognises Google's ACCOUNT_INELIGIBLE and VALIDATION_REQUIRED 403
+     * bodies. It does not classify quota errors.
+     */
+    classifyAccessError(bodyText: string): AccountAccessErrorDetails;
+    /** Host notice (OpenCode 1 toast). Rejections and throws are ignored. */
+    notify?(message: string, variant: RequestNoticeVariant): unknown;
+    /**
+     * Records the route a session's request was dispatched on. Called without
+     * awaiting; the dispatch path never waits on it and a throw is ignored.
+     */
+    onRouting?(sessionId: string, entry: RequestRoutingEntry): void;
+}
+/** Per-request inputs the host supplies alongside the HTTP request. */
+export interface RequestExecuteOptions {
+    /**
+     * The host session this request belongs to. When omitted, the OpenCode
+     * session headers on the request are read.
+     */
+    readonly session?: OpenCodeSessionIdentity;
+    /**
+     * The host's request kind. `title` routes the request as a session title
+     * (see `routeTitleModel`); every kind other than `primary` keeps its own
+     * AGY session metadata. Omitted by OpenCode 1, which has no kind.
+     */
+    readonly kind?: RequestKind;
+    /**
+     * Raw sender for this request's `antigravity` header-style sends, in place
+     * of `RequestServicesDeps.transport`. It receives the transformed request's
+     * URL and init, and the caller's AbortSignal object itself.
+     */
+    readonly transport?: RequestTransport;
+}
+/** The request kinds an OpenCode 2 host reports for a model request. */
+export type RequestKind = 'primary' | 'compaction' | 'title' | 'generate';
+/**
+ * The model a title request is sent to when the host selected one this
+ * plugin does not serve as text: an unregistered model or an image model.
+ */
+export declare const TITLE_FALLBACK_MODEL = "gemini-3.5-flash-low";
+/**
+ * Routes a title request: a registered text model is kept; any other model
+ * (unregistered, or an image model) is replaced in the URL by
+ * `TITLE_FALLBACK_MODEL`. Everything else in the URL is unchanged.
+ */
+export declare function routeTitleModel(url: string): string;
+/** The shared engine bound to one location. */
+export interface AntigravityRequestExecutor {
+    /**
+     * Sends a Generative Language request through account selection, retries
+     * and response transformation. Abort uses `init.signal` (or the Request's
+     * signal) at every wait and send.
+     */
+    execute(input: RequestInfo | URL, init?: RequestInit, options?: RequestExecuteOptions): Promise<Response>;
+    /**
+     * Stops admitting requests without cancelling the ones already admitted:
+     * later `execute` calls reject, while admitted requests keep their retries
+     * and response bodies. Resolves once every admitted request and body has
+     * finished, then releases retry and warmup bookkeeping. A later `dispose`
+     * still aborts whatever is left.
+     */
+    retire(): Promise<void>;
+    /**
+     * Aborts every admitted request and response body, waits for them to
+     * finish, then releases retry and warmup bookkeeping.
+     */
+    dispose(): Promise<void>;
+}
+/**
+ * Background quota refresh after a successful send, for rows held in a core
+ * account manager. It reads the row's refresh token, so it applies to local
+ * credentials only. A reading for a row removed or replaced meanwhile is
+ * dropped.
+ */
+export declare function createLocalQuotaRefresh(accountManager: Pick<CoreAccountManager, 'getAccounts' | 'getAccountsForQuotaCheck' | 'updateQuotaCache' | 'requestSaveToDisk'>, quotaManager: Pick<QuotaManager, 'refreshAccount' | 'hashedLogLabel'>, log: Logger): (account: ManagedAccount, intervalMinutes: number) => Promise<void>;
+/**
+ * Builds one location's request engine. Each executor owns its retry and
+ * warmup bookkeeping, so disposing it releases every counter.
+ */
+export declare function createRequestExecutor<A extends RequestAccountRow>(deps: RequestServicesDeps<A>): AntigravityRequestExecutor;
+export {};
+//# sourceMappingURL=request-services.d.ts.map

package/dist/src/plugin/shared/request-services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-services.d.ts","sourceRoot":"","sources":["../../../../src/plugin/shared/request-services.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EACL,KAAK,mBAAmB,EAExB,KAAK,cAAc,IAAI,kBAAkB,EAGzC,KAAK,WAAW,EAGhB,KAAK,kBAAkB,EAEvB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EAGzB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,YAAY,EAKjB,KAAK,kBAAkB,EAExB,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAEL,KAAK,WAAW,EACjB,MAAM,iBAAiB,CAAA;AACxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAkB7C,OAAO,EAAE,KAAK,eAAe,EAA0B,MAAM,gBAAgB,CAAA;AAE7E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAA;AACtE,OAAO,KAAK,EACV,uBAAuB,EACvB,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,EACzB,4BAA4B,EAC7B,MAAM,YAAY,CAAA;AAMnB,OAAO,EACL,KAAK,kBAAkB,EAEvB,KAAK,uBAAuB,EAC7B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,KAAK,kBAAkB,EAGxB,MAAM,eAAe,CAAA;AAWtB,uEAAuE;AACvE,MAAM,MAAM,gBAAgB,GAAG,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE,mBAAmB,KAC1B,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEtB;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,CACzB,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,WAAW,KACf,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEtB;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAA;IAClC,wDAAwD;IACxD,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,mBAAmB,EAAE;QAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KACzB,CAAA;IACD,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAA;IACrE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;CACvC;AAED,KAAK,QAAQ,CAAC,CAAC,SAAS,MAAM,kBAAkB,IAC9C,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,KAAK,OAAO,GAAG,CAAC,GAAG,KAAK,CAAA;AACzE,KAAK,oBAAoB,CAAC,CAAC,SAAS,MAAM,kBAAkB,IAC1D,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,CAAA;AAC7D,KAAK,UAAU,CAAC,CAAC,SAAS,MAAM,kBAAkB,IAChD,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;AAEzE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,WAAW,kBAAkB,CAAC,CAAC,SAAS,iBAAiB;IAC7D,2BAA2B,CACzB,GAAG,IAAI,EAAE,QAAQ,CAAC,6BAA6B,CAAC,GAC/C,OAAO,CAAA;IACV,eAAe,IAAI,MAAM,CAAA;IACzB,WAAW,IAAI,CAAC,EAAE,CAAA;IAClB,mBAAmB,IAAI,CAAC,EAAE,CAAA;IAC1B,kBAAkB,IAAI,CAAC,EAAE,CAAA;IACzB,uBAAuB,CACrB,OAAO,EAAE,CAAC,EACV,GAAG,IAAI,EAAE,oBAAoB,CAAC,yBAAyB,CAAC,GACvD,UAAU,CAAC,yBAAyB,CAAC,CAAA;IACxC,yBAAyB,CACvB,GAAG,IAAI,EAAE,QAAQ,CAAC,2BAA2B,CAAC,GAC7C,CAAC,GAAG,IAAI,CAAA;IACX,qBAAqB,CACnB,GAAG,IAAI,EAAE,QAAQ,CAAC,uBAAuB,CAAC,GACzC,UAAU,CAAC,uBAAuB,CAAC,CAAA;IACtC,uBAAuB,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,yBAAyB,CAAC,GAAG,MAAM,CAAA;IAC7E,0BAA0B,CACxB,GAAG,IAAI,EAAE,QAAQ,CAAC,4BAA4B,CAAC,GAC9C,MAAM,GAAG,IAAI,CAAA;IAChB,iBAAiB,IAAI,UAAU,CAAC,mBAAmB,CAAC,CAAA;IACpD,qBAAqB,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,uBAAuB,CAAC,GAAG,MAAM,CAAA;IACzE,uCAAuC,CACrC,GAAG,IAAI,EAAE,QAAQ,CAAC,yCAAyC,CAAC,GAC3D,OAAO,CAAA;IACV,2BAA2B,CACzB,OAAO,EAAE,CAAC,EACV,GAAG,IAAI,EAAE,oBAAoB,CAAC,6BAA6B,CAAC,GAC3D,OAAO,CAAA;IACV,sBAAsB,CACpB,OAAO,EAAE,CAAC,EACV,GAAG,IAAI,EAAE,oBAAoB,CAAC,wBAAwB,CAAC,GACtD,IAAI,CAAA;IACP,qBAAqB,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,uBAAuB,CAAC,GAAG,OAAO,CAAA;IAC1E,eAAe,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAA;IAC3D,+BAA+B,CAC7B,GAAG,IAAI,EAAE,QAAQ,CAAC,iCAAiC,CAAC,GACnD,OAAO,CAAA;IACV,eAAe,CACb,OAAO,EAAE,CAAC,EACV,GAAG,IAAI,EAAE,oBAAoB,CAAC,iBAAiB,CAAC,GAC/C,IAAI,CAAA;IACP,yBAAyB,CACvB,OAAO,EAAE,CAAC,EACV,GAAG,IAAI,EAAE,oBAAoB,CAAC,2BAA2B,CAAC,GACzD,MAAM,CAAA;IACT,cAAc,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAA;IACzD,0BAA0B,CACxB,GAAG,IAAI,EAAE,QAAQ,CAAC,4BAA4B,CAAC,GAC9C,CAAC,GAAG,IAAI,CAAA;IACX,aAAa,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC,GAAG,IAAI,CAAA;IACvD,kBAAkB,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAA;IACjE,4BAA4B,CAC1B,GAAG,IAAI,EAAE,QAAQ,CAAC,8BAA8B,CAAC,GAChD,UAAU,CAAC,8BAA8B,CAAC,CAAA;IAC7C,iBAAiB,IAAI,IAAI,CAAA;IACzB,uBAAuB,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,yBAAyB,CAAC,GAAG,OAAO,CAAA;IAC9E,sBAAsB,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,wBAAwB,CAAC,GAAG,OAAO,CAAA;IAC5E,gBAAgB,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAA;CACjE;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,iBAAiB;IAClE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,wCAAwC;IACxC,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,gBAAgB,CAAA;IAC3C,oEAAoE;IACpE,cAAc,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAAA;IACxD,4EAA4E;IAC5E,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAA;IAClC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC;;;;;;;OAOG;IACH,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAA;IAC1D,qDAAqD;IACrD,aAAa,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACpE,qEAAqE;IACrE,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAA;IACvC,4EAA4E;IAC5E,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAChC;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,KAAK,EAAE;QAClB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;QACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;KAC7B,GAAG,kBAAkB,CAAA;IACtB;;;;OAIG;IACH,wBAAwB,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9E;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,iBAAiB;IAClE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,KAAK,CAAC,OAAO,EAAE;QACb,+CAA+C;QAC/C,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;QACnB,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CAAA;KACzC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;CAClC;AAED,gEAAgE;AAChE,MAAM,WAAW,oBAAoB;IACnC,kDAAkD;IAClD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,yDAAyD;IACzD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,+DAA+D;IAC/D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAC5C;AAED,wDAAwD;AACxD,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,iBAAiB,IACtD,uBAAuB,CAAC,CAAC,CAAC,GAC1B,uBAAuB,CAAC,CAAC,CAAC,CAAA;AAE9B,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,yBAAyB,CAAA;IACzC,iBAAiB,EAAE,OAAO,4BAA4B,CAAA;IACtD,uBAAuB,EAAE,OAAO,uBAAuB,CAAA;IACvD,uBAAuB,EAAE,OAAO,uBAAuB,CAAA;IACvD,iBAAiB,EAAE,OAAO,iBAAiB,CAAA;CAC5C;AAED,wEAAwE;AACxE,MAAM,MAAM,kBAAkB,GAAG,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAA;AAEnE,sEAAsE;AACtE,MAAM,WAAW,yBAAyB;IACxC,kBAAkB,EAAE,OAAO,CAAA;IAC3B,iBAAiB,EAAE,OAAO,CAAA;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,8EAA8E;AAC9E,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAChC,WAAW,EAAE,aAAa,GAAG,YAAY,CAAA;IACzC,QAAQ,CAAC,EAAE,QAAQ,GAAG,aAAa,GAAG,QAAQ,CAAA;IAC9C,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAA;AAE3E,6EAA6E;AAC7E,MAAM,WAAW,mBAAmB;IAClC,uDAAuD;IACvD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,6CAA6C;IAC7C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAA;IAClC,0EAA0E;IAC1E,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAA;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAA;CACzC;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAClC,OAAO,EAAE,mBAAmB,GAC3B,kBAAkB,CAWpB;AAED,0DAA0D;AAC1D,MAAM,MAAM,YAAY,GAAG,IAAI,CAC7B,aAAa,EACX,gBAAgB,GAChB,mBAAmB,GACnB,6BAA6B,GAC7B,gBAAgB,GAChB,mBAAmB,GACnB,sBAAsB,GACtB,iBAAiB,GACjB,8BAA8B,CACjC,CAAA;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB,CAAC,CAAC,SAAS,iBAAiB;IAC9D,uFAAuF;IACvF,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAA;IACxC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAA;IAC3C,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAA;IACrC;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAA;IACnE;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAA;IAChC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,CAAA;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,MAAM,EAAE,IAAI,CACnB,kBAAkB,EAClB,eAAe,GAAG,iBAAiB,GAAG,eAAe,CACtD,CAAA;QACD,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,SAAS,GAAG,QAAQ,CAAC,CAAA;KAC/D,CAAA;IACD;;;OAGG;IACH,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,yBAAyB,CAAA;IAChE,yEAAyE;IACzE,MAAM,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAA;IAChE;;;OAGG;IACH,SAAS,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAAA;CAChE;AAED,uEAAuE;AACvE,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAA;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAA;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAA;CACtC;AAED,wEAAwE;AACxE,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,YAAY,GAAG,OAAO,GAAG,UAAU,CAAA;AAEzE;;;GAGG;AACH,eAAO,MAAM,oBAAoB,yBAAyB,CAAA;AAE1D;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQnD;AAmBD,+CAA+C;AAC/C,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,OAAO,CACL,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,QAAQ,CAAC,CAAA;IACpB;;;;;;OAMG;IACH,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB;;;OAGG;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB;AAkHD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,cAAc,EAAE,IAAI,CAClB,kBAAkB,EAChB,aAAa,GACb,0BAA0B,GAC1B,kBAAkB,GAClB,mBAAmB,CACtB,EACD,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,GAAG,gBAAgB,CAAC,EACrE,GAAG,EAAE,MAAM,GACV,CAAC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAsDrE;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,SAAS,iBAAiB,EAC/D,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,GAC3B,0BAA0B,CA0oE5B"}