@paperclipai/server 2026.824.0 → 2026.825.0-beta.1

package/dist/services/codex-device-login-service.d.ts

@@ -1,9 +1,13 @@
 import type { Db } from "@paperclipai/db";
 import type { AdapterAuthSessionInternalStatus, AdapterAuthSessionOwnerResponse, AdapterAuthSessionResponse, AdapterAuthSessionStatus, AgentAdapterType, Environment, EnvironmentLease } from "@paperclipai/shared";
 import { type SandboxLoginDriver } from "@paperclipai/adapter-codex-local/server";
+import { type LoginPtySessionOpener } from "@paperclipai/adapter-utils/login-pty-transport";
 import type { EnvironmentRuntimeService } from "./environment-runtime.js";
+import type { LoginPtyWorkerManagerLike } from "./setup-token-transport-binding.js";
 /** The host timeout for the sandbox login command. It is exactly five minutes. */
 export declare const CODEX_DEVICE_LOGIN_TIMEOUT_MS = 300000;
+export declare const CODEX_DEVICE_LOGIN_PROVIDER_UNSUPPORTED = "The sandbox provider does not support the Codex device login.";
+export declare const CODEX_DEVICE_LOGIN_PROVIDER_UNSUPPORTED_CODE = "codex_device_login_provider_unsupported";
 /**
  * The lease-metadata key that tags a login sandbox lease with its session
  * identifier. The runtime stamps it at acquisition. The reaper reads it to find
@@ -64,11 +68,12 @@ export interface LoginSessionRuntime {
     acquireLoginLease(input: AcquireLoginLeaseInput): Promise<LoginSessionLease>;
 }
 /** The per-session context the promotion seam needs. The service knows the
- *  session, the company, and the adapter, so the promotion resolves the company
- *  scope and the sole-active-owner check for this exact session. */
+ *  session, the company, the owner, and the adapter, so the promotion resolves
+ *  the company slot and the sole-active-owner check for this exact session. */
 export interface CredentialPromotionContext {
     sessionId: string;
     companyId: string;
+    startedByUserId: string;
     adapterType: AgentAdapterType;
 }
 /**
@@ -141,6 +146,10 @@ export declare class AdapterAuthSessionConflictError extends Error {
 }
 export interface AdapterAuthSessionRow {
     id: string;
+    /** The public, CSPRNG session identifier. The API returns and looks up this
+     *  value. It never equals the internal primary-key `id`, so a caller cannot
+     *  address a row by the internal id. */
+    publicSessionId: string;
     companyId: string;
     environmentId: string;
     adapterType: AgentAdapterType;
@@ -157,6 +166,9 @@ export interface AdapterAuthSessionRow {
 }
 export interface InsertAdapterAuthSessionInput {
     id: string;
+    /** The public, CSPRNG session identifier. The service builds it and returns it
+     *  to the client; the store persists it in `public_session_id`. */
+    publicSessionId: string;
     companyId: string;
     environmentId: string;
     adapterType: AgentAdapterType;
@@ -198,29 +210,38 @@ export interface AdapterAuthSessionStore {
     /** A conditional status write. It returns true only when it changed one row. */
     compareAndSetStatus(input: CompareAndSetAdapterAuthSessionStatusInput): Promise<boolean>;
     get(sessionId: string): Promise<AdapterAuthSessionRow | null>;
+    /**
+     * Read a session by its public session id, scoped to the company and the Codex
+     * device-login adapter. The predicate carries the company id, so a query never
+     * keys on the public session id alone, and a foreign-company caller reads
+     * nothing. It never accepts the internal primary-key `id`.
+     */
+    getByPublicId(publicSessionId: string, companyId: string): Promise<AdapterAuthSessionRow | null>;
     /** Run `fn` while the process holds the promotion critical-section lock for the
-     *  company and adapter. The reaper reclaims a stale `promoting` row inside this
-     *  lock, so a reclaim never interleaves with a live credential write. */
-    withCompanyAdapterPromotionLock<T>(companyId: string, adapterType: AgentAdapterType, fn: () => Promise<T>): Promise<T>;
+     *  company, owner, and adapter slot. The reaper reclaims a stale `promoting`
+     *  row inside this lock, so a reclaim never interleaves with a live credential
+     *  write for the same slot. */
+    withCompanyAdapterPromotionLock<T>(companyId: string, startedByUserId: string, adapterType: AgentAdapterType, fn: () => Promise<T>): Promise<T>;
 }
 /** Build the advisory-lock key for the promotion critical section. The key is
- *  company-scoped and adapter-scoped, so two different company slots never
- *  contend. The credential-promotion path and the reaper reclaim both derive the
- *  key from this function, so they take the exact same lock. */
-export declare function adapterLoginPromotionLockKey(companyId: string, adapterType: AgentAdapterType): string;
+ *  scoped to the company, the owner, and the adapter, so two different slots
+ *  never contend. The credential-promotion path and the reaper reclaim both
+ *  derive the key from this function, so they take the exact same lock. */
+export declare function adapterLoginPromotionLockKey(companyId: string, startedByUserId: string, adapterType: AgentAdapterType): string;
 /**
- * Run `fn` inside the promotion critical section for one company and adapter.
+ * Run `fn` inside the promotion critical section for one company, owner, and
+ * adapter slot.
  *
  * The function opens a database transaction and takes a transaction-scoped
  * PostgreSQL advisory lock. The lock serializes the credential-promotion path
- * against the reaper reclaim, so a reaper never releases the company slot while a
+ * against the reaper reclaim, so a reaper never releases the slot while a
  * credential write runs, and a stale promotion never writes after the reaper
  * reclaims the slot. The transaction holds the lock through `fn`, so the caller
  * runs the ownership check and the credential write in one mutually-exclusive
  * section. A process crash drops the connection and releases the lock, so a
  * stalled owner never blocks recovery.
  */
-export declare function withAdapterLoginPromotionLock<T>(db: Db, companyId: string, adapterType: AgentAdapterType, fn: () => Promise<T>): Promise<T>;
+export declare function withAdapterLoginPromotionLock<T>(db: Db, companyId: string, startedByUserId: string, adapterType: AgentAdapterType, fn: () => Promise<T>): Promise<T>;
 /** The three active statuses. A row in one of these states holds the company
  *  credential slot, so it is non-terminal and can time out. */
 export declare const ADAPTER_AUTH_ACTIVE_STATUSES: readonly AdapterAuthSessionInternalStatus[];
@@ -251,9 +272,10 @@ export interface AdapterAuthReaperStore {
     compareAndSetStatus(input: CompareAndSetAdapterAuthSessionStatusInput): Promise<boolean>;
     get(sessionId: string): Promise<AdapterAuthSessionRow | null>;
     /** Run `fn` while the process holds the promotion critical-section lock for the
-     *  company and adapter. The reaper reclaims a stale `promoting` row inside this
-     *  lock, so a reclaim never interleaves with a live credential write. */
-    withCompanyAdapterPromotionLock<T>(companyId: string, adapterType: AgentAdapterType, fn: () => Promise<T>): Promise<T>;
+     *  company, owner, and adapter slot. The reaper reclaims a stale `promoting`
+     *  row inside this lock, so a reclaim never interleaves with a live credential
+     *  write for the same slot. */
+    withCompanyAdapterPromotionLock<T>(companyId: string, startedByUserId: string, adapterType: AgentAdapterType, fn: () => Promise<T>): Promise<T>;
 }
 /** Build the Postgres-backed store. The partial unique index on the active
  *  statuses serializes the company credential slot; the insert maps its conflict
@@ -303,8 +325,8 @@ export interface CodexDeviceLoginServiceDeps {
 }
 export declare function createCodexDeviceLoginService(deps: CodexDeviceLoginServiceDeps): {
     start: (input: StartCodexDeviceLoginInput) => Promise<StartCodexDeviceLoginResult>;
-    readOwnerSession: (sessionId: string, requestingUserId: string) => Promise<AdapterAuthSessionOwnerResponse | null>;
-    cancelOwnerSession: (sessionId: string, requestingUserId: string) => Promise<AdapterAuthSessionOwnerResponse | null>;
+    readOwnerSession: (publicSessionId: string, companyId: string, requestingUserId: string) => Promise<AdapterAuthSessionOwnerResponse | null>;
+    cancelOwnerSession: (publicSessionId: string, companyId: string, requestingUserId: string) => Promise<AdapterAuthSessionOwnerResponse | null>;
 };
 export type CodexDeviceLoginService = ReturnType<typeof createCodexDeviceLoginService>;
 /** The fixed, session-specific Codex home template. The session identifier is
@@ -314,42 +336,111 @@ export declare function sessionCodexHomePath(sessionId: string): string;
 export declare function sessionCredentialPath(sessionId: string): string;
 /**
  * Build the sandbox login driver. This is the one helper the production runtime
- * and the tests share. It binds streamed execution and a credential read to the
- * environment runtime.
+ * and the tests share. It runs the login command over the shared login
+ * pseudo-terminal (PTY) transport and reads the credential with one
+ * descriptor-bound read.
  *
- * - `execStreaming` sets an empty session-specific Codex home before the fixed
- *   login command runs, exports `CODEX_HOME`, and streams standard output to the
- *   runner. It passes the command through `sh -c`, so the runtime runs the whole
- *   compound command in one shell. It sets `forceSession`, so the command opens
- *   the persistent session and streams each standard-output chunk while the
- *   login command waits for the user. A one-shot exec returns the output only at
- *   the end, so the login prompt would never reach the user in time.
- * - `readFile` reads the credential from the fixed session-specific path with a
- *   one-shot `cat` command. No caller controls the path.
- * - `dispose` is a no-op. The service owns the sandbox delete through a separate
- *   seam, so the runner's swallowed dispose must not delete the sandbox.
+ * - `start` runs the fixed login command on a real pseudo-terminal through the
+ *   shared {@link createLoginPtyTransport} and streams each terminal output chunk
+ *   to the runner while the login command waits for the user. The login command
+ *   needs a pseudo-terminal: pipe stdio emits no login prompt. The pseudo-terminal
+ *   opener sets the session-specific `CODEX_HOME` to the same verified session
+ *   home this driver reads.
+ * - `readFile` runs one descriptor-bound read. It opens the verified session home
+ *   and the fixed credential file with no symlink follow, checks the opened
+ *   descriptor, and reads only from that same descriptor. It ignores the path the
+ *   runner passes, so no caller controls the read target. It reads the fixed
+ *   `auth.json` under the server-controlled session home.
+ * - `dispose` releases the pseudo-terminal transport, so the host frees the login
+ *   pseudo-terminal slot. The service owns the sandbox delete through a separate
+ *   seam, so this dispose never deletes the sandbox.
  *
- * The runtime passes `command` and `args` to the provider as a program and its
- * argument vector. The provider quotes each element as one shell token. So a
- * compound command must run through a shell (`sh -c "<script>"`); a bare
- * compound string in `command` becomes one token and never runs.
+ * The session home is server-controlled and shared: the pseudo-terminal opener
+ * sets `CODEX_HOME` to it, and the descriptor-bound read opens it. So the login
+ * command writes `auth.json` into the exact directory the read opens.
  */
 export declare function buildSandboxLoginDriver(deps: {
+    openPtySession: LoginPtySessionOpener;
     environmentRuntime: Pick<EnvironmentRuntimeService, "execute">;
     environment: Environment;
     lease: EnvironmentLease;
     sessionHome: string;
     timeoutMs: number;
 }): SandboxLoginDriver;
+/**
+ * The verified binding one login session hands to the live pseudo-terminal
+ * opener. The opener sets the sandbox `CODEX_HOME` to `sessionHome`, so the login
+ * command writes `auth.json` into the exact directory the descriptor-bound read
+ * opens.
+ */
+export interface LoginPtySessionBinding {
+    companyId: string;
+    environmentId: string;
+    adapterType: AgentAdapterType;
+    /** The provider lease that binds the sandbox worker. */
+    providerLeaseId: string;
+    /** The server-controlled session home. The opener sets `CODEX_HOME` to it. */
+    sessionHome: string;
+    /** The resolved environment for the acquired lease. */
+    environment: Environment;
+    /** The acquired environment lease. */
+    lease: EnvironmentLease;
+}
+/**
+ * Opens the live pseudo-terminal for one login session and returns the shared
+ * transport opener. The Daytona provider runs as a plugin worker, so the real
+ * opener binds inside the worker through the plugin worker manager route. A test
+ * injects a fake opener to drive the full session path.
+ */
+export type OpenLoginPtySession = (binding: LoginPtySessionBinding) => Promise<LoginPtySessionOpener>;
+/** The dependencies the worker-bound Codex live pseudo-terminal opener needs. */
+export interface CodexWorkerBoundLoginPtyOpenerDeps {
+    /** The plugin worker manager that owns the host route gate. */
+    workerManager: LoginPtyWorkerManagerLike;
+    /** A non-leaking status sink. It receives only fixed status lines. */
+    log?: (line: string) => void;
+}
+/**
+ * Builds the production Codex `openLivePtySession`. It drives the sandbox worker
+ * through the manager route gate. The manager mints the host route identifier and
+ * owns the route lifecycle.
+ *
+ * The opener passes the binding's server-controlled `sessionHome` to the worker
+ * route. That home is the exact directory the descriptor-bound credential read
+ * opens, so the sandbox `CODEX_HOME` and the read target match. The opener never
+ * derives a fresh home: a fresh home would set `CODEX_HOME` to a directory the
+ * read never opens, and every Codex login would fail closed.
+ *
+ * The opener resolves the closed login command key from the trusted adapter type,
+ * never from the caller. It validates the session home shape before the worker
+ * RPC. It fails closed when the lease carries no sandbox worker binding.
+ */
+export declare function createCodexWorkerBoundLoginPtyOpener(deps: CodexWorkerBoundLoginPtyOpenerDeps): OpenLoginPtySession;
 export interface ProductionLoginSessionRuntimeDeps {
     db: Db;
     environmentRuntime: EnvironmentRuntimeService;
+    /**
+     * Re-checks the provider login pseudo-terminal capability from current runtime
+     * state, immediately before the provider lease. The route gate already ran, so
+     * a managed reconciliation can rebind the environment to an unsupported
+     * provider between the route gate and this acquire. The check reads the current
+     * provider capability, not the stale route decision. It throws the fixed
+     * unsupported-provider error, so the runtime creates no lease and opens no
+     * pseudo-terminal for an unsupported provider.
+     */
+    assertProviderSupportsLoginPty: (environmentId: string) => Promise<void>;
+    /**
+     * Opens the live pseudo-terminal for the acquired lease. When a caller omits
+     * it, the runtime binds a fail-closed opener: the login run then fails and the
+     * service deletes the sandbox. The live opener binds the sandbox worker route.
+     */
+    openLivePtySession?: OpenLoginPtySession;
 }
 /**
  * Build the production login-session runtime. It acquires a fresh lease with
  * reuse disabled (no heartbeat run, no execution workspace) and the active
- * custom-image template applied, binds the sandbox login driver, and owns the
- * delete and release seams.
+ * custom-image template applied, binds the sandbox login driver over the shared
+ * pseudo-terminal transport, and owns the delete and release seams.
  */
 export declare function createProductionLoginSessionRuntime(deps: ProductionLoginSessionRuntimeDeps): LoginSessionRuntime;
 //# sourceMappingURL=codex-device-login-service.d.ts.map

package/dist/services/codex-device-login-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex-device-login-service.d.ts","sourceRoot":"","sources":["../../src/services/codex-device-login-service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAE1C,OAAO,KAAK,EAEV,gCAAgC,EAChC,+BAA+B,EAC/B,0BAA0B,EAC1B,wBAAwB,EACxB,gBAAgB,EAChB,WAAW,EACX,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAKL,KAAK,kBAAkB,EACxB,MAAM,yCAAyC,CAAC;AACjD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAc1E,kFAAkF;AAClF,eAAO,MAAM,6BAA6B,SAAU,CAAC;AAErD;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,0BAA0B,CAAC;AAEnE,0DAA0D;AAC1D,eAAO,MAAM,+BAA+B,EAAE,gBAAgC,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,WAAW,CAAC;AAE3D,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,oBAAoB,CAAC;CAC/B;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,uEAAuE;IACvE,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,aAAa,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9C;;;OAGG;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;sDACsD;AACtD,MAAM,WAAW,mBAAmB;IAClC,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC9E;AAED;;oEAEoE;AACpE,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,gBAAgB,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,0BAA0B,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvF;AAED,wEAAwE;AACxE,MAAM,MAAM,yBAAyB,GACjC,iBAAiB,GACjB,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,WAAW,GACX,iBAAiB,GACjB,iBAAiB,GACjB,eAAe,GACf,QAAQ,GACR,WAAW,GACX,WAAW,CAAC;AAEhB;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,KAAK,EAAE,yBAAyB,CAAC;CAClC;AAED,MAAM,MAAM,4BAA4B,GAAG,CAAC,KAAK,EAAE,yBAAyB,KAAK,IAAI,CAAC;AAEtF,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,gFAAgF;IAChF,eAAe,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,MAAM,EAAE,wBAAwB,CAAC;IACjC;;;OAGG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB,8EAA8E;IAC9E,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,2BAA2B;IAC1C,wEAAwE;IACxE,OAAO,EAAE,0BAA0B,CAAC;IACpC;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAC7C;AAED,gFAAgF;AAChF,qBAAa,+BAAgC,SAAQ,KAAK;IACxD,QAAQ,CAAC,UAAU,OAAO;gBAExB,OAAO,SAA6E;CAKvF;AAMD,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,gCAAgC,CAAC;IACzC,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB;;sBAEkB;IAClB,kBAAkB,EAAE,IAAI,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,6BAA6B;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,EAAE,EAAE,IAAI,CAAC;CACV;AAED,MAAM,WAAW,gCAAgC;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,gCAAgC,CAAC;IACzC,EAAE,EAAE,IAAI,CAAC;IACT,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,0CACf,SAAQ,gCAAgC;IACxC,uEAAuE;IACvE,gBAAgB,EAAE,SAAS,gCAAgC,EAAE,CAAC;CAC/D;AAED;6EAC6E;AAC7E,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,mBAAmB,CAAC,KAAK,EAAE;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,EAAE,EAAE,IAAI,CAAC;KACV,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,SAAS,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,gFAAgF;IAChF,mBAAmB,CAAC,KAAK,EAAE,0CAA0C,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzF,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IAC9D;;6EAEyE;IACzE,+BAA+B,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,gBAAgB,EAC7B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAAC;CACf;AAED;;;gEAGgE;AAChE,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,gBAAgB,GAC5B,MAAM,CAER;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,6BAA6B,CAAC,CAAC,EACnD,EAAE,EAAE,EAAE,EACN,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,gBAAgB,EAC7B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAMZ;AAED;+DAC+D;AAC/D,eAAO,MAAM,4BAA4B,EAAE,SAAS,gCAAgC,EAInF,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,QAAS,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,wEAAwE;IACxE,yBAAyB,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACvE,0EAA0E;IAC1E,0BAA0B,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAC/D,gEAAgE;IAChE,mBAAmB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,SAAS,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,gFAAgF;IAChF,mBAAmB,CAAC,KAAK,EAAE,0CAA0C,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzF,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IAC9D;;6EAEyE;IACzE,+BAA+B,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,gBAAgB,EAC7B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAAC;CACf;AAmDD;;kDAEkD;AAClD,wBAAgB,+BAA+B,CAC7C,EAAE,EAAE,EAAE,GACL,uBAAuB,GAAG,sBAAsB,CAwGlD;AAmBD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG;IAC3D,QAAQ,EAAE,wBAAwB,CAAC;IACnC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAYA;AAQD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAEtE;AAED,gDAAgD;AAChD,MAAM,WAAW,wBAAwB;IACvC,kEAAkE;IAClE,QAAQ,EAAE,OAAO,CAAC;IAClB,mDAAmD;IACnD,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,aAAa,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,GAChD,OAAO,CAAC,wBAAwB,CAAC,CAOnC;AAED,uDAAuD;AACvD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,gCAAgC,CAAC;IACzC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,OAAO,EAClB,QAAQ,EAAE,wBAAwB,EAClC,MAAM,EAAE,MAAM,GAAG,IAAI,GACpB,oBAAoB,CAItB;AAMD,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,uBAAuB,CAAC;IAC/B,OAAO,EAAE,mBAAmB,CAAC;IAC7B;uFACmF;IACnF,SAAS,EAAE,mBAAmB,CAAC;IAC/B,cAAc,CAAC,EAAE,4BAA4B,CAAC;IAC9C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,2BAA2B;mBAWpE,0BAA0B,KAChC,OAAO,CAAC,2BAA2B,CAAC;kCA0U1B,MAAM,oBACC,MAAM,KACvB,OAAO,CAAC,+BAA+B,GAAG,IAAI,CAAC;oCAqCrC,MAAM,oBACC,MAAM,KACvB,OAAO,CAAC,+BAA+B,GAAG,IAAI,CAAC;EAiBnD;AAED,MAAM,MAAM,uBAAuB,GAAG,UAAU,CAAC,OAAO,6BAA6B,CAAC,CAAC;AA2BvF;yDACyD;AACzD,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,0EAA0E;AAC1E,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,kBAAkB,EAAE,IAAI,CAAC,yBAAyB,EAAE,SAAS,CAAC,CAAC;IAC/D,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,gBAAgB,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,kBAAkB,CAoCrB;AAED,MAAM,WAAW,iCAAiC;IAChD,EAAE,EAAE,EAAE,CAAC;IACP,kBAAkB,EAAE,yBAAyB,CAAC;CAC/C;AAED;;;;;GAKG;AACH,wBAAgB,mCAAmC,CACjD,IAAI,EAAE,iCAAiC,GACtC,mBAAmB,CAuErB"}
+{"version":3,"file":"codex-device-login-service.d.ts","sourceRoot":"","sources":["../../src/services/codex-device-login-service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAE1C,OAAO,KAAK,EAEV,gCAAgC,EAChC,+BAA+B,EAC/B,0BAA0B,EAC1B,wBAAwB,EACxB,gBAAgB,EAChB,WAAW,EACX,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAKL,KAAK,kBAAkB,EACxB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAS1E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAapF,kFAAkF;AAClF,eAAO,MAAM,6BAA6B,SAAU,CAAC;AAQrD,eAAO,MAAM,uCAAuC,kEACa,CAAC;AAClE,eAAO,MAAM,4CAA4C,4CACd,CAAC;AAE5C;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,0BAA0B,CAAC;AAEnE,0DAA0D;AAC1D,eAAO,MAAM,+BAA+B,EAAE,gBAAgC,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,WAAW,CAAC;AAE3D,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,oBAAoB,CAAC;CAC/B;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,uEAAuE;IACvE,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,aAAa,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9C;;;OAGG;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;sDACsD;AACtD,MAAM,WAAW,mBAAmB;IAClC,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC9E;AAED;;+EAE+E;AAC/E,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,gBAAgB,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,0BAA0B,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvF;AAED,wEAAwE;AACxE,MAAM,MAAM,yBAAyB,GACjC,iBAAiB,GACjB,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,WAAW,GACX,iBAAiB,GACjB,iBAAiB,GACjB,eAAe,GACf,QAAQ,GACR,WAAW,GACX,WAAW,CAAC;AAEhB;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,KAAK,EAAE,yBAAyB,CAAC;CAClC;AAED,MAAM,MAAM,4BAA4B,GAAG,CAAC,KAAK,EAAE,yBAAyB,KAAK,IAAI,CAAC;AAEtF,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,gFAAgF;IAChF,eAAe,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,MAAM,EAAE,wBAAwB,CAAC;IACjC;;;OAGG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB,8EAA8E;IAC9E,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,2BAA2B;IAC1C,wEAAwE;IACxE,OAAO,EAAE,0BAA0B,CAAC;IACpC;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAC7C;AAED,gFAAgF;AAChF,qBAAa,+BAAgC,SAAQ,KAAK;IACxD,QAAQ,CAAC,UAAU,OAAO;gBAExB,OAAO,SAA6E;CAKvF;AAMD,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX;;4CAEwC;IACxC,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,gCAAgC,CAAC;IACzC,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB;;sBAEkB;IAClB,kBAAkB,EAAE,IAAI,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,6BAA6B;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX;uEACmE;IACnE,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,EAAE,EAAE,IAAI,CAAC;CACV;AAED,MAAM,WAAW,gCAAgC;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,gCAAgC,CAAC;IACzC,EAAE,EAAE,IAAI,CAAC;IACT,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,0CACf,SAAQ,gCAAgC;IACxC,uEAAuE;IACvE,gBAAgB,EAAE,SAAS,gCAAgC,EAAE,CAAC;CAC/D;AAED;6EAC6E;AAC7E,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,mBAAmB,CAAC,KAAK,EAAE;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,EAAE,EAAE,IAAI,CAAC;KACV,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,SAAS,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,gFAAgF;IAChF,mBAAmB,CAAC,KAAK,EAAE,0CAA0C,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzF,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IAC9D;;;;;OAKG;IACH,aAAa,CAAC,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACjG;;;mCAG+B;IAC/B,+BAA+B,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,gBAAgB,EAC7B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAAC;CACf;AAED;;;2EAG2E;AAC3E,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,gBAAgB,GAC5B,MAAM,CAER;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,6BAA6B,CAAC,CAAC,EACnD,EAAE,EAAE,EAAE,EACN,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,gBAAgB,EAC7B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAMZ;AAED;+DAC+D;AAC/D,eAAO,MAAM,4BAA4B,EAAE,SAAS,gCAAgC,EAInF,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,QAAS,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,wEAAwE;IACxE,yBAAyB,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACvE,0EAA0E;IAC1E,0BAA0B,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAC/D,gEAAgE;IAChE,mBAAmB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,SAAS,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,gFAAgF;IAChF,mBAAmB,CAAC,KAAK,EAAE,0CAA0C,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzF,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IAC9D;;;mCAG+B;IAC/B,+BAA+B,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,gBAAgB,EAC7B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAAC;CACf;AAuDD;;kDAEkD;AAClD,wBAAgB,+BAA+B,CAC7C,EAAE,EAAE,EAAE,GACL,uBAAuB,GAAG,sBAAsB,CA6IlD;AAmBD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG;IAC3D,QAAQ,EAAE,wBAAwB,CAAC;IACnC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAYA;AAQD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAEtE;AAED,gDAAgD;AAChD,MAAM,WAAW,wBAAwB;IACvC,kEAAkE;IAClE,QAAQ,EAAE,OAAO,CAAC;IAClB,mDAAmD;IACnD,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,aAAa,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,GAChD,OAAO,CAAC,wBAAwB,CAAC,CAOnC;AAED,uDAAuD;AACvD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,gCAAgC,CAAC;IACzC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,OAAO,EAClB,QAAQ,EAAE,wBAAwB,EAClC,MAAM,EAAE,MAAM,GAAG,IAAI,GACpB,oBAAoB,CAItB;AAMD,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,uBAAuB,CAAC;IAC/B,OAAO,EAAE,mBAAmB,CAAC;IAC7B;uFACmF;IACnF,SAAS,EAAE,mBAAmB,CAAC;IAC/B,cAAc,CAAC,EAAE,4BAA4B,CAAC;IAC9C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,2BAA2B;mBAWpE,0BAA0B,KAChC,OAAO,CAAC,2BAA2B,CAAC;wCAiVpB,MAAM,aACZ,MAAM,oBACC,MAAM,KACvB,OAAO,CAAC,+BAA+B,GAAG,IAAI,CAAC;0CAwC/B,MAAM,aACZ,MAAM,oBACC,MAAM,KACvB,OAAO,CAAC,+BAA+B,GAAG,IAAI,CAAC;EAoBnD;AAED,MAAM,MAAM,uBAAuB,GAAG,UAAU,CAAC,OAAO,6BAA6B,CAAC,CAAC;AA2BvF;yDACyD;AACzD,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,0EAA0E;AAC1E,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,cAAc,EAAE,qBAAqB,CAAC;IACtC,kBAAkB,EAAE,IAAI,CAAC,yBAAyB,EAAE,SAAS,CAAC,CAAC;IAC/D,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,gBAAgB,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,kBAAkB,CAyBrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,wDAAwD;IACxD,eAAe,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,WAAW,EAAE,WAAW,CAAC;IACzB,sCAAsC;IACtC,KAAK,EAAE,gBAAgB,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAChC,OAAO,EAAE,sBAAsB,KAC5B,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAOpC,iFAAiF;AACjF,MAAM,WAAW,kCAAkC;IACjD,+DAA+D;IAC/D,aAAa,EAAE,yBAAyB,CAAC;IACzC,sEAAsE;IACtE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAMD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oCAAoC,CAClD,IAAI,EAAE,kCAAkC,GACvC,mBAAmB,CAsCrB;AAED,MAAM,WAAW,iCAAiC;IAChD,EAAE,EAAE,EAAE,CAAC;IACP,kBAAkB,EAAE,yBAAyB,CAAC;IAC9C;;;;;;;;OAQG;IACH,8BAA8B,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,mBAAmB,CAAC;CAC1C;AAMD;;;;;GAKG;AACH,wBAAgB,mCAAmC,CACjD,IAAI,EAAE,iCAAiC,GACtC,mBAAmB,CA0FrB"}