@usine/gateway 0.0.0-stage → 0.2.0

package/dist/chatgpt/auth-file.js

@@ -0,0 +1,132 @@
+import { DateTime, Effect, Exit, FileSystem, Option, Redacted, Result, Schema } from "effect";
+import { Base64Url } from "effect/encoding";
+/**
+ * The error when a ChatGPT login's `auth.json` can't be read or written, or isn't a Codex
+ * ChatGPT login. The message never contains a token.
+ */
+export class ChatGptAuthFileError extends Schema.TaggedError()("ChatGptAuthFileError", {
+    path: Schema.String,
+    operation: Schema.Literals(["read", "write"]),
+    message: Schema.String,
+}) {
+}
+const Token = Schema.Redacted(Schema.NonEmptyString);
+/** A ChatGPT login's tokens as the Gateway holds them in memory. */
+export class ChatGptTokens extends Schema.Class("@usine/gateway/ChatGptTokens")({
+    accessToken: Token,
+    refreshToken: Token,
+    /** The ChatGPT account or workspace ID, sent as `ChatGPT-Account-ID`. */
+    accountId: Schema.Option(Schema.NonEmptyString),
+    /** The access token's `exp` claim, if it has one. */
+    expiresAt: Schema.Option(Schema.DateTimeUtc),
+    /** When the tokens were last refreshed, from `last_refresh`. */
+    lastRefresh: Schema.Option(Schema.DateTimeUtc),
+}) {
+}
+const JsonObject = Schema.Record(Schema.String, Schema.Json);
+const decodeJsonObject = Schema.decodeUnknownOption(JsonObject);
+const decodeAuthFileObject = Schema.decodeUnknownOption(Schema.fromJsonString(JsonObject));
+/** The fields of Codex's `auth.json` that the Gateway reads; the others are kept as they are. */
+const AuthFileFields = Schema.Struct({
+    tokens: Schema.Struct({
+        access_token: Schema.NonEmptyString,
+        refresh_token: Schema.NonEmptyString,
+        id_token: Schema.optionalKey(Schema.NullOr(Schema.String)),
+        account_id: Schema.optionalKey(Schema.NullOr(Schema.String)),
+    }),
+    last_refresh: Schema.optionalKey(Schema.NullOr(Schema.DateTimeUtcFromString)),
+});
+const decodeAuthFileFields = Schema.decodeUnknownOption(AuthFileFields);
+const JwtClaims = Schema.fromJsonString(Schema.Struct({
+    exp: Schema.optionalKey(Schema.Number),
+    "https://api.openai.com/auth": Schema.optionalKey(Schema.Struct({ chatgpt_account_id: Schema.optionalKey(Schema.String) })),
+}));
+const decodeJwtClaims = Schema.decodeUnknownOption(JwtClaims);
+/** Returns a JWT's claims without checking its signature, which only the issuer can. */
+const jwtClaims = (jwt) => Option.fromNullishOr(jwt.split(".")[1]).pipe(Option.flatMap((payload) => Result.getSuccess(Base64Url.decodeString(payload))), Option.flatMap(decodeJwtClaims));
+/** Returns the expiry in a JWT's `exp` claim, in seconds since the epoch. */
+export const jwtExpiry = (jwt) => jwtClaims(jwt).pipe(Option.flatMap(({ exp }) => Option.fromNullishOr(exp)), Option.flatMap((seconds) => DateTime.make(seconds * 1000)));
+/** Returns the ChatGPT account ID in an ID token's claims. */
+export const idTokenAccount = (idToken) => jwtClaims(idToken).pipe(Option.flatMap((claims) => Option.fromNullishOr(claims["https://api.openai.com/auth"]?.chatgpt_account_id)), Option.filter((account) => account !== ""));
+const nonEmpty = (value) => Option.fromNullishOr(value).pipe(Option.filter((text) => text !== ""));
+/** Returns the tokens in the text of a Codex `auth.json`. */
+const tokensFromAuthFile = (path, text) => {
+    const fields = decodeAuthFileObject(text).pipe(Option.flatMap(decodeAuthFileFields));
+    if (Option.isNone(fields))
+        return Result.fail(new ChatGptAuthFileError({
+            path,
+            operation: "read",
+            message: `${path} isn't a Codex ChatGPT login: it needs tokens.access_token and tokens.refresh_token, as codex login writes them.`,
+        }));
+    const { tokens, last_refresh } = fields.value;
+    return Result.succeed(new ChatGptTokens({
+        accessToken: Redacted.make(tokens.access_token),
+        refreshToken: Redacted.make(tokens.refresh_token),
+        accountId: nonEmpty(tokens.account_id).pipe(Option.orElse(() => nonEmpty(tokens.id_token).pipe(Option.flatMap(idTokenAccount)))),
+        expiresAt: jwtExpiry(tokens.access_token),
+        lastRefresh: Option.fromNullishOr(last_refresh),
+    }));
+};
+/** Reads and parses the Codex `auth.json` at `path`. */
+export const readAuthFile = Effect.fn("ChatGptAuthFile.read")(function* (path) {
+    yield* Effect.annotateCurrentSpan({ authFile: path });
+    const fs = yield* FileSystem.FileSystem;
+    const text = yield* fs
+        .readFileString(path)
+        .pipe(Effect.mapError((error) => new ChatGptAuthFileError({ path, operation: "read", message: error.message })));
+    return yield* Effect.fromResult(tokensFromAuthFile(path, text));
+});
+/** Returns the path of a new temporary file next to `path`. */
+const besides = (path, suffix) => `${path}.${crypto.randomUUID()}.${suffix}`;
+/**
+ * Writes rotated tokens into the Codex `auth.json` at `path` and sets `last_refresh`, keeping
+ * its other fields. Writes a temporary file with mode 0600 next to it and renames it over the
+ * file, so a reader sees either file whole, and removes the temporary file if that fails or is
+ * interrupted. Returns `false`, writing nothing, if the file's refresh token isn't one `owns`
+ * accepts, such as a login the operator copied in that the next reload reads.
+ */
+export const writeAuthFile = Effect.fn("ChatGptAuthFile.write")(function* (path, tokens, idToken, owns) {
+    yield* Effect.annotateCurrentSpan({ authFile: path });
+    const fs = yield* FileSystem.FileSystem;
+    const failed = (message) => new ChatGptAuthFileError({ path, operation: "write", message });
+    const text = yield* fs
+        .readFileString(path)
+        .pipe(Effect.mapError((error) => failed(error.message)));
+    const current = yield* Effect.fromOption(decodeAuthFileObject(text)).pipe(Effect.mapError(() => failed(`${path} is no longer a JSON object, so it wasn't replaced.`)));
+    const inFile = decodeAuthFileFields(current).pipe(Option.map(({ tokens: held }) => held.refresh_token));
+    if (!Option.exists(inFile, owns))
+        return false;
+    const previousTokens = Option.getOrElse(decodeJsonObject(current.tokens), () => ({}));
+    const next = {
+        ...current,
+        tokens: {
+            ...previousTokens,
+            access_token: Redacted.value(tokens.accessToken),
+            refresh_token: Redacted.value(tokens.refreshToken),
+            ...Option.match(idToken, { onNone: () => ({}), onSome: (id_token) => ({ id_token }) }),
+        },
+        last_refresh: Option.match(tokens.lastRefresh, {
+            onNone: () => current.last_refresh ?? null,
+            onSome: DateTime.formatIso,
+        }),
+    };
+    const temporary = besides(path, "tmp");
+    yield* fs.writeFileString(temporary, `${JSON.stringify(next, null, 2)}\n`, { mode: 0o600 }).pipe(Effect.andThen(fs.rename(temporary, path)), Effect.onExit((exit) => Exit.isSuccess(exit) ? Effect.void : fs.remove(temporary).pipe(Effect.ignore)), Effect.mapError((error) => failed(error.message)));
+    return true;
+});
+/**
+ * Checks that the Gateway can write the rotated tokens next to the auth file at `path`, by
+ * creating and removing a file there, so a missing write permission shows before the first
+ * refresh.
+ */
+export const checkAuthFileWritable = Effect.fn("ChatGptAuthFile.checkWritable")(function* (path) {
+    yield* Effect.annotateCurrentSpan({ authFile: path });
+    const fs = yield* FileSystem.FileSystem;
+    const probe = besides(path, "check");
+    yield* fs.writeFileString(probe, "", { mode: 0o600 }).pipe(Effect.andThen(fs.remove(probe)), Effect.mapError((error) => new ChatGptAuthFileError({
+        path,
+        operation: "write",
+        message: `The gateway can't write next to ${path}, so it couldn't save a refreshed login: ${error.message}`,
+    })));
+});
+//# sourceMappingURL=auth-file.js.map

package/dist/chatgpt/auth-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-file.js","sourceRoot":"","sources":["../../src/chatgpt/auth-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9F,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C;;;GAGG;AACH,MAAM,OAAO,oBAAqB,SAAQ,MAAM,CAAC,WAAW,EAAwB,CAClF,sBAAsB,EACtB;IACE,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,OAAO,EAAE,MAAM,CAAC,MAAM;CACvB,CACF;CAAG;AAEJ,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAErD,oEAAoE;AACpE,MAAM,OAAO,aAAc,SAAQ,MAAM,CAAC,KAAK,CAAgB,8BAA8B,CAAC,CAAC;IAC7F,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,KAAK;IACnB,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;IAC/C,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;IAC5C,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;CAC/C,CAAC;CAAG;AAEL,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;AAC7D,MAAM,gBAAgB,GAAG,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;AAChE,MAAM,oBAAoB,GAAG,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;AAE3F,iGAAiG;AACjG,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC,cAAc;QACnC,aAAa,EAAE,MAAM,CAAC,cAAc;QACpC,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1D,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;KAC7D,CAAC;IACF,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;CAC9E,CAAC,CAAC;AACH,MAAM,oBAAoB,GAAG,MAAM,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;AAExE,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CACrC,MAAM,CAAC,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IACtC,6BAA6B,EAAE,MAAM,CAAC,WAAW,CAC/C,MAAM,CAAC,MAAM,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CACzE;CACF,CAAC,CACH,CAAC;AACF,MAAM,eAAe,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;AAE9D,wFAAwF;AACxF,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,EAAE,CAChC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAC/E,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAChC,CAAC;AAEJ,6EAA6E;AAC7E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAW,EAA+B,EAAE,CACpE,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,CACjB,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EACtD,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAC3D,CAAC;AAEJ,8DAA8D;AAC9D,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAe,EAAyB,EAAE,CACvE,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CACrB,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,6BAA6B,CAAC,EAAE,kBAAkB,CAAC,CAChF,EACD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,CAAC,CAC3C,CAAC;AAEJ,MAAM,QAAQ,GAAG,CAAC,KAAgC,EAAE,EAAE,CACpD,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;AAEzE,6DAA6D;AAC7D,MAAM,kBAAkB,GAAG,CACzB,IAAY,EACZ,IAAY,EACwC,EAAE;IACtD,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACrF,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QACvB,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,oBAAoB,CAAC;YACvB,IAAI;YACJ,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,GAAG,IAAI,kHAAkH;SACnI,CAAC,CACH,CAAC;IACJ,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;IAC9C,OAAO,MAAM,CAAC,OAAO,CACnB,IAAI,aAAa,CAAC;QAChB,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAC/C,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;QACjD,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CACzC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CACpF;QACD,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;QACzC,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC;KAChD,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AAEF,wDAAwD;AACxD,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAY;IACnF,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE;SACnB,cAAc,CAAC,IAAI,CAAC;SACpB,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CACzF,CACF,CAAC;IACJ,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC;AAEH,+DAA+D;AAC/D,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,UAAU,EAAE,IAAI,MAAM,EAAE,CAAC;AAE7F;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EACvE,IAAY,EACZ,MAAqB,EACrB,OAA8B,EAC9B,IAAuC;IAEvC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IACxC,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,EAAE,CACjC,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE;SACnB,cAAc,CAAC,IAAI,CAAC;SACpB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CACvE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,qDAAqD,CAAC,CAAC,CAC5F,CAAC;IACF,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC,IAAI,CAC/C,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CACrD,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG;QACX,GAAG,OAAO;QACV,MAAM,EAAE;YACN,GAAG,cAAc;YACjB,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;YAChD,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;YAClD,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;SACvF;QACD,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;YAC7C,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI;YAC1C,MAAM,EAAE,QAAQ,CAAC,SAAS;SAC3B,CAAC;KACH,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,KAAK,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAC9F,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,EAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACrB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAC9E,EACD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAClD,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EACvF,IAAY;IAEZ,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,KAAK,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CACxD,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAChC,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,oBAAoB,CAAC;QACvB,IAAI;QACJ,SAAS,EAAE,OAAO;QAClB,OAAO,EAAE,mCAAmC,IAAI,4CAA4C,KAAK,CAAC,OAAO,EAAE;KAC5G,CAAC,CACL,CACF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/chatgpt/logins.d.ts

@@ -0,0 +1,50 @@
+import { Context, Effect, FileSystem, Layer, Schema } from "effect";
+import { HttpClient } from "effect/http";
+import type { ChatGptAccess, ChatGptLogin } from "../llm/llm.ts";
+import { type ChatGptAuthFileError } from "./auth-file.ts";
+/** The OAuth token endpoint that Codex refreshes ChatGPT logins at. */
+export declare const CHATGPT_TOKEN_URL = "https://auth.openai.com/oauth/token";
+declare const ChatGptLoginUnavailable_base: Schema.Class<ChatGptLoginUnavailable, Schema.TaggedStruct<"ChatGptLoginUnavailable", {
+    readonly authFile: Schema.String;
+    readonly reason: Schema.Literals<readonly ["unreadable", "refresh-failed", "refresh-rejected"]>;
+    readonly message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/**
+ * The error for a request whose ChatGPT login has no usable access token: the auth file can't
+ * be read (`unreadable`), a refresh failed and is tried again after a short backoff
+ * (`refresh-failed`), or the token endpoint rejected the refresh token, which only a new login
+ * fixes (`refresh-rejected`). The message names no token and no text from the token endpoint.
+ * The reverse proxy answers 401 for `refresh-rejected`, and otherwise 503, which Codex retries.
+ */
+export declare class ChatGptLoginUnavailable extends ChatGptLoginUnavailable_base {
+}
+declare const ChatGptLogins_base: Context.ServiceClass<ChatGptLogins, "@usine/gateway/ChatGptLogins", {
+    /**
+     * Returns the login's access token and account. Reads the auth file on first use, and
+     * refreshes first if the token expires within five minutes or the upstream refused it.
+     * Requests that need a refresh share one; it runs in the service's scope, so a request
+     * that ends doesn't stop it between the token endpoint's rotation and the write-back.
+     */
+    readonly access: (login: ChatGptLogin) => Effect.Effect<ChatGptAccess, ChatGptLoginUnavailable>;
+    /**
+     * Records that the upstream refused `access` with 401, so the next request refreshes first,
+     * unless this process refreshed it less than a minute ago.
+     */
+    readonly refused: (login: ChatGptLogin, access: ChatGptAccess) => Effect.Effect<void>;
+    /**
+     * Reads the login's auth file again. Keeps the tokens in memory if the file has their
+     * refresh token or one they replaced, and otherwise uses the file's login.
+     */
+    readonly reload: (login: ChatGptLogin) => Effect.Effect<void, ChatGptAuthFileError>;
+}>;
+/**
+ * The ChatGPT logins the Gateway holds, keyed by auth file. Each login's tokens stay in memory;
+ * an access token is refreshed before it expires, one refresh at a time, and the rotated tokens
+ * are written back to the auth file. A request never gets an access token that a failed
+ * refresh should have replaced.
+ */
+export declare class ChatGptLogins extends ChatGptLogins_base {
+    static readonly layer: Layer.Layer<ChatGptLogins, never, FileSystem.FileSystem | HttpClient.HttpClient>;
+}
+export {};
+//# sourceMappingURL=logins.d.ts.map

package/dist/chatgpt/logins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logins.d.ts","sourceRoot":"","sources":["../../src/chatgpt/logins.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EAGP,MAAM,EAEN,UAAU,EACV,KAAK,EAIL,MAAM,EAGP,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,UAAU,EAAqB,MAAM,aAAa,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,EACL,KAAK,oBAAoB,EAM1B,MAAM,gBAAgB,CAAC;AAExB,uEAAuE;AACvE,eAAO,MAAM,iBAAiB,wCAAwC,CAAC;;;;;;AA2BvE;;;;;;GAMG;AACH,qBAAa,uBAAwB,SAAQ,4BAO5C;CAAG;;IA4HA;;;;;OAKG;qBACc,CAAC,KAAK,EAAE,YAAY,KAAK,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAC/F;;;OAGG;sBACe,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;IACrF;;;OAGG;qBACc,CAAC,KAAK,EAAE,YAAY,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,oBAAoB,CAAC;;AAzBvF;;;;;GAKG;AACH,qBAAa,aAAc,SAAQ,kBAqBA;IACjC,MAAM,CAAC,QAAQ,CAAC,KAAK,mFAiTnB;CACH"}

package/dist/chatgpt/logins.js

@@ -0,0 +1,303 @@
+import { Context, DateTime, Effect, Fiber, FileSystem, Layer, Option, Redacted, Ref, Schema, Semaphore, SynchronizedRef, } from "effect";
+import { HttpClient, HttpClientRequest } from "effect/http";
+import { ChatGptTokens, idTokenAccount, jwtExpiry, readAuthFile, writeAuthFile, } from "./auth-file.js";
+/** The OAuth token endpoint that Codex refreshes ChatGPT logins at. */
+export const CHATGPT_TOKEN_URL = "https://auth.openai.com/oauth/token";
+/** Codex's public OAuth client ID; a login's refresh token works only with it. */
+const CODEX_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
+/** An access token that expires within this window is refreshed first, as Codex does. */
+const REFRESH_WINDOW = "5 minutes";
+/** An access token without an `exp` claim is refreshed when its last refresh is older than this, as Codex does. */
+const REFRESH_INTERVAL = "8 days";
+/** After a failed refresh, requests fail for this long without calling the token endpoint. */
+const FAILURE_BACKOFF = "10 seconds";
+/** A 401 for an access token refreshed this recently doesn't start another refresh. */
+const REFUSAL_GRACE = "1 minute";
+/** The number of rotated refresh tokens remembered, so a reload never goes back to one. */
+const RETIRED_TOKENS = 8;
+/** The token endpoint's error codes for a refresh token that can't be used again (Codex `classify_refresh_token_failure`). */
+const REJECTED_CODES = new Set([
+    "refresh_token_expired",
+    "refresh_token_reused",
+    "refresh_token_invalidated",
+]);
+/**
+ * The error for a request whose ChatGPT login has no usable access token: the auth file can't
+ * be read (`unreadable`), a refresh failed and is tried again after a short backoff
+ * (`refresh-failed`), or the token endpoint rejected the refresh token, which only a new login
+ * fixes (`refresh-rejected`). The message names no token and no text from the token endpoint.
+ * The reverse proxy answers 401 for `refresh-rejected`, and otherwise 503, which Codex retries.
+ */
+export class ChatGptLoginUnavailable extends Schema.TaggedError()("ChatGptLoginUnavailable", {
+    authFile: Schema.String,
+    reason: Schema.Literals(["unreadable", "refresh-failed", "refresh-rejected"]),
+    message: Schema.String,
+}) {
+}
+/** A string field that Codex reads as absent when it's null or empty. */
+const OptionalText = Schema.optionalKey(Schema.NullOr(Schema.String));
+const RefreshResponse = Schema.fromJsonString(Schema.Struct({
+    access_token: OptionalText,
+    refresh_token: OptionalText,
+    id_token: OptionalText,
+}));
+const decodeRefreshResponse = Schema.decodeUnknownOption(RefreshResponse);
+const present = (value) => Option.fromNullishOr(value).pipe(Option.filter((text) => text !== ""));
+const decodeErrorText = Schema.decodeUnknownOption(Schema.fromJsonString(Schema.Struct({ error: Schema.String })));
+const decodeErrorObject = Schema.decodeUnknownOption(Schema.fromJsonString(Schema.Struct({ error: Schema.Struct({ code: Schema.String }) })));
+const decodeErrorCode = Schema.decodeUnknownOption(Schema.fromJsonString(Schema.Struct({ code: Schema.String })));
+/** An error code as OAuth servers send them; other text could echo a token, so it's dropped. */
+const ERROR_CODE = /^[a-z0-9_.-]{1,64}$/u;
+/**
+ * Returns the error code in a token endpoint's error body, in lowercase: `error`, `error.code`,
+ * or `code`, as Codex reads it. A value that doesn't look like a code is ignored.
+ */
+const tokenErrorCode = (body) => decodeErrorText(body).pipe(Option.map(({ error }) => error), Option.orElse(() => Option.map(decodeErrorObject(body), ({ error }) => error.code)), Option.orElse(() => Option.map(decodeErrorCode(body), ({ code }) => code)), Option.map((code) => code.toLowerCase()), Option.filter((code) => ERROR_CODE.test(code)));
+/** The client error statuses that a later request can get past: a request timeout and a rate limit. */
+const TRANSIENT_CLIENT_ERRORS = new Set([408, 429]);
+/**
+ * Whether a refresh failure means the refresh token can't be used again: a client error other
+ * than a timeout or rate limit, such as `invalid_grant`, or one of Codex's rejection codes.
+ * Server errors and network errors are transient.
+ */
+const isRejection = (status, code) => (status >= 400 && status < 500 && !TRANSIENT_CLIENT_ERRORS.has(status)) ||
+    Option.exists(code, (value) => REJECTED_CODES.has(value));
+const fresh = (tokens, retired) => ({
+    tokens,
+    refused: false,
+    rejected: Option.none(),
+    retired,
+    refreshedAt: Option.none(),
+    failedAt: Option.none(),
+});
+/** Whether `instant` is less than `duration` before `now`. */
+const within = (instant, duration, now) => Option.exists(instant, (at) => DateTime.isGreaterThan(DateTime.addDuration(at, duration), now));
+/** Whether `tokens` must be refreshed at `now` before the next request. */
+const refreshDue = (tokens, now) => Option.match(tokens.expiresAt, {
+    onSome: (expiresAt) => !DateTime.isGreaterThan(DateTime.subtractDuration(expiresAt, REFRESH_WINDOW), now),
+    onNone: () => Option.match(tokens.lastRefresh, {
+        onNone: () => false,
+        onSome: (last) => !DateTime.isGreaterThan(DateTime.addDuration(last, REFRESH_INTERVAL), now),
+    }),
+});
+const usable = (state, now) => !state.refused && Option.isNone(state.rejected) && !refreshDue(state.tokens, now);
+/** Whether `refreshToken` is this login's current refresh token or one it replaced. */
+const holds = (state, refreshToken) => Redacted.value(state.tokens.refreshToken) === refreshToken ||
+    state.retired.includes(refreshToken);
+const accessOf = ({ accessToken, accountId }) => ({
+    accessToken,
+    accountId,
+});
+const expiryField = (tokens) => Option.match(tokens.expiresAt, { onNone: () => "unknown", onSome: DateTime.formatIso });
+/**
+ * The ChatGPT logins the Gateway holds, keyed by auth file. Each login's tokens stay in memory;
+ * an access token is refreshed before it expires, one refresh at a time, and the rotated tokens
+ * are written back to the auth file. A request never gets an access token that a failed
+ * refresh should have replaced.
+ */
+export class ChatGptLogins extends Context.Service()("@usine/gateway/ChatGptLogins") {
+    static layer = Layer.effect(ChatGptLogins, Effect.gen(function* () {
+        const fs = yield* FileSystem.FileSystem;
+        const client = yield* HttpClient.HttpClient;
+        const scope = yield* Effect.scope;
+        const states = yield* Ref.make(new Map());
+        // Refreshes and reloads run one at a time, so a rotated refresh token is used once.
+        const lock = yield* Semaphore.make(1);
+        const inFlight = yield* SynchronizedRef.make(new Map());
+        const stateOf = (authFile) => Effect.map(Ref.get(states), (all) => Option.fromNullishOr(all.get(authFile)));
+        const store = (authFile, state) => Ref.update(states, (all) => new Map(all).set(authFile, state));
+        const unavailable = (login, reason) => {
+            switch (reason) {
+                case "unreadable":
+                    return new ChatGptLoginUnavailable({
+                        authFile: login.authFile,
+                        reason,
+                        message: `The gateway can't read its ChatGPT login at ${login.authFile}. Its log has the reason.`,
+                    });
+                case "refresh-failed":
+                    return new ChatGptLoginUnavailable({
+                        authFile: login.authFile,
+                        reason,
+                        message: `The gateway could not refresh its ChatGPT login and tries again after ${FAILURE_BACKOFF}. Its log has the reason.`,
+                    });
+                case "refresh-rejected":
+                    return new ChatGptLoginUnavailable({
+                        authFile: login.authFile,
+                        reason,
+                        message: `The token endpoint rejected the refresh token of the gateway's ChatGPT login. Copy a new auth.json from codex login to ${login.authFile} and reload the gateway.`,
+                    });
+            }
+        };
+        /** Returns the login's state, reading its auth file if it has none. */
+        const loaded = Effect.fn("ChatGptLogins.loaded")(function* (login) {
+            const current = yield* stateOf(login.authFile);
+            if (Option.isSome(current))
+                return current.value;
+            const tokens = yield* readAuthFile(login.authFile).pipe(Effect.provideService(FileSystem.FileSystem, fs), Effect.tapError((error) => Effect.logError("Could not read the ChatGPT login", {
+                authFile: login.authFile,
+                error: error.message,
+            })), Effect.mapError(() => unavailable(login, "unreadable")));
+            const state = fresh(tokens, []);
+            yield* store(login.authFile, state);
+            yield* Effect.logInfo("Loaded the ChatGPT login", {
+                authFile: login.authFile,
+                expiresAt: expiryField(tokens),
+            });
+            return state;
+        });
+        /** Records a refresh the token endpoint rejected, so later requests fail without calling it. */
+        const rejectRefresh = Effect.fn("ChatGptLogins.rejectRefresh")(function* (login, state, status, code) {
+            const why = Option.getOrElse(code, () => `HTTP ${String(status)}`);
+            yield* store(login.authFile, { ...state, rejected: Option.some(why) });
+            yield* Effect.logError("The token endpoint rejected the ChatGPT login's refresh token; copy a new auth.json from codex login and reload the gateway", { authFile: login.authFile, status, code: why });
+            return unavailable(login, "refresh-rejected");
+        });
+        /** Records a refresh that failed for another reason, so requests back off before the next one. */
+        const failRefresh = Effect.fn("ChatGptLogins.failRefresh")(function* (login, state, error) {
+            yield* store(login.authFile, { ...state, failedAt: Option.some(yield* DateTime.now) });
+            yield* Effect.logError("Could not refresh the ChatGPT login; a later request tries again", {
+                authFile: login.authFile,
+                error,
+                backoff: FAILURE_BACKOFF,
+            });
+            return unavailable(login, "refresh-failed");
+        });
+        /**
+         * Exchanges the refresh token for new tokens and writes them back to the auth file. Runs
+         * uninterruptibly: once the token endpoint has rotated the refresh token, only storing the
+         * new one keeps the login usable.
+         */
+        const refresh = Effect.fn("ChatGptLogins.refresh")(function* (login, state) {
+            yield* Effect.annotateCurrentSpan({ authFile: login.authFile });
+            const request = HttpClientRequest.post(login.tokenUrl).pipe(HttpClientRequest.acceptJson, HttpClientRequest.bodyJsonUnsafe({
+                client_id: CODEX_CLIENT_ID,
+                grant_type: "refresh_token",
+                refresh_token: Redacted.value(state.tokens.refreshToken),
+            }));
+            const answer = yield* client.execute(request).pipe(Effect.flatMap((response) => Effect.map(response.text, (body) => ({ status: response.status, body }))), Effect.provideService(HttpClient.TracerDisabledWhen, () => true), Effect.catchTag("HttpClientError", (error) => Effect.flip(failRefresh(login, state, error.reason._tag))));
+            if (answer.status < 200 || answer.status >= 300) {
+                const code = tokenErrorCode(answer.body);
+                return yield* Effect.flip(isRejection(answer.status, code)
+                    ? rejectRefresh(login, state, answer.status, code)
+                    : failRefresh(login, state, `the token endpoint answered ${String(answer.status)} (${Option.getOrElse(code, () => "no error code")})`));
+            }
+            const body = decodeRefreshResponse(answer.body);
+            const accessToken = Option.flatMap(body, ({ access_token }) => present(access_token));
+            if (Option.isNone(body) || Option.isNone(accessToken))
+                return yield* Effect.flip(failRefresh(login, state, "the token endpoint's answer has no access_token"));
+            const refreshToken = present(body.value.refresh_token);
+            const idToken = present(body.value.id_token);
+            const now = yield* DateTime.now;
+            const tokens = new ChatGptTokens({
+                accessToken: Redacted.make(accessToken.value),
+                refreshToken: Option.match(refreshToken, {
+                    onNone: () => state.tokens.refreshToken,
+                    onSome: Redacted.make,
+                }),
+                accountId: state.tokens.accountId.pipe(Option.orElse(() => Option.flatMap(idToken, idTokenAccount))),
+                expiresAt: jwtExpiry(accessToken.value),
+                lastRefresh: Option.some(now),
+            });
+            const retired = Option.isSome(refreshToken)
+                ? [Redacted.value(state.tokens.refreshToken), ...state.retired].slice(0, RETIRED_TOKENS)
+                : state.retired;
+            yield* store(login.authFile, {
+                ...fresh(tokens, retired),
+                refreshedAt: Option.some(now),
+            });
+            yield* Effect.logInfo("Refreshed the ChatGPT login", {
+                authFile: login.authFile,
+                expiresAt: expiryField(tokens),
+                rotated: Option.isSome(refreshToken),
+            });
+            yield* writeAuthFile(login.authFile, tokens, idToken, (inFile) => holds(state, inFile)).pipe(Effect.provideService(FileSystem.FileSystem, fs), Effect.flatMap((written) => written
+                ? Effect.logInfo("Wrote the refreshed ChatGPT login to its auth file", {
+                    authFile: login.authFile,
+                })
+                : Effect.logWarning("Left the auth file as it is: it holds another ChatGPT login, which the next reload reads", { authFile: login.authFile })), Effect.catchTag("ChatGptAuthFileError", (error) => Effect.logError("Could not write the refreshed ChatGPT login to its auth file; the gateway keeps it in memory, and after a restart the file's refresh token may no longer work", { authFile: login.authFile, error: error.message })));
+            return tokens;
+        }, Effect.uninterruptible);
+        /** Returns a usable access token, refreshing first if needed. Runs under the lock. */
+        const refreshed = Effect.fn("ChatGptLogins.refreshed")(function* (login) {
+            const state = yield* loaded(login);
+            if (Option.isSome(state.rejected))
+                return yield* unavailable(login, "refresh-rejected");
+            const now = yield* DateTime.now;
+            if (usable(state, now))
+                return accessOf(state.tokens);
+            if (within(state.failedAt, FAILURE_BACKOFF, now))
+                return yield* unavailable(login, "refresh-failed");
+            yield* Effect.logInfo("Refreshing the ChatGPT login", {
+                authFile: login.authFile,
+                reason: state.refused ? "refused-by-upstream" : "expiring",
+                expiresAt: expiryField(state.tokens),
+            });
+            return accessOf(yield* refresh(login, state));
+        });
+        /** Returns the login's refresh in progress, or starts one in the service's scope. */
+        const refreshing = (login) => SynchronizedRef.modifyEffect(inFlight, (all) => {
+            const running = all.get(login.authFile);
+            if (running !== undefined)
+                return Effect.succeed([running, all]);
+            return lock
+                .withPermits(1)(refreshed(login))
+                .pipe(Effect.ensuring(SynchronizedRef.update(inFlight, (now) => {
+                const next = new Map(now);
+                next.delete(login.authFile);
+                return next;
+            })), Effect.forkIn(scope), Effect.map((fiber) => [fiber, new Map(all).set(login.authFile, fiber)]));
+        });
+        const access = Effect.fn("ChatGptLogins.access")(function* (login) {
+            yield* Effect.annotateCurrentSpan({ authFile: login.authFile });
+            const current = yield* stateOf(login.authFile);
+            if (Option.isSome(current) && usable(current.value, yield* DateTime.now))
+                return accessOf(current.value.tokens);
+            return yield* Fiber.join(yield* refreshing(login));
+        });
+        const refused = Effect.fn("ChatGptLogins.refused")(function* (login, presented) {
+            yield* Effect.annotateCurrentSpan({ authFile: login.authFile });
+            const now = yield* DateTime.now;
+            // Marks the state in one update, so a refresh that ends meanwhile isn't overwritten.
+            const outcome = yield* Ref.modify(states, (all) => {
+                const current = all.get(login.authFile);
+                if (current === undefined ||
+                    Redacted.value(current.tokens.accessToken) !== Redacted.value(presented.accessToken))
+                    return ["replaced", all];
+                if (within(current.refreshedAt, REFUSAL_GRACE, now))
+                    return ["recent", all];
+                return ["marked", new Map(all).set(login.authFile, { ...current, refused: true })];
+            });
+            switch (outcome) {
+                case "replaced":
+                    return yield* Effect.logDebug("The ChatGPT backend refused an access token the gateway already replaced", { authFile: login.authFile });
+                case "recent":
+                    return yield* Effect.logWarning("The ChatGPT backend refused an access token refreshed less than a minute ago; the gateway doesn't refresh it again yet", { authFile: login.authFile });
+                case "marked":
+                    return yield* Effect.logWarning("The ChatGPT backend refused the gateway's access token; the next request refreshes it first", { authFile: login.authFile });
+            }
+        });
+        const reload = Effect.fn("ChatGptLogins.reload")(function* (login) {
+            yield* Effect.annotateCurrentSpan({ authFile: login.authFile });
+            const tokens = yield* readAuthFile(login.authFile).pipe(Effect.provideService(FileSystem.FileSystem, fs));
+            const all = yield* Ref.get(states);
+            const read = Redacted.value(tokens.refreshToken);
+            // Any login that holds the file's refresh token, also under another path, already used or rotated it.
+            const holder = Option.fromNullishOr(all.get(login.authFile)).pipe(Option.filter((state) => holds(state, read)), Option.orElse(() => Option.fromNullishOr([...all.values()].find((state) => holds(state, read)))));
+            if (Option.isSome(holder)) {
+                yield* store(login.authFile, holder.value);
+                return yield* Effect.logInfo("Kept the ChatGPT login: its auth file has the same login", {
+                    authFile: login.authFile,
+                    rejected: Option.isSome(holder.value.rejected),
+                });
+            }
+            yield* store(login.authFile, fresh(tokens, []));
+            yield* Effect.logInfo("Loaded the ChatGPT login", {
+                authFile: login.authFile,
+                expiresAt: expiryField(tokens),
+                replaced: all.has(login.authFile),
+            });
+        }, lock.withPermits(1));
+        return { access, refused, reload };
+    }));
+}
+//# sourceMappingURL=logins.js.map

package/dist/chatgpt/logins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logins.js","sourceRoot":"","sources":["../../src/chatgpt/logins.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,QAAQ,EAER,MAAM,EACN,KAAK,EACL,UAAU,EACV,KAAK,EACL,MAAM,EACN,QAAQ,EACR,GAAG,EACH,MAAM,EACN,SAAS,EACT,eAAe,GAChB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAE5D,OAAO,EAEL,aAAa,EACb,cAAc,EACd,SAAS,EACT,YAAY,EACZ,aAAa,GACd,MAAM,gBAAgB,CAAC;AAExB,uEAAuE;AACvE,MAAM,CAAC,MAAM,iBAAiB,GAAG,qCAAqC,CAAC;AAEvE,kFAAkF;AAClF,MAAM,eAAe,GAAG,8BAA8B,CAAC;AAEvD,yFAAyF;AACzF,MAAM,cAAc,GAAG,WAAW,CAAC;AAEnC,mHAAmH;AACnH,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AAElC,8FAA8F;AAC9F,MAAM,eAAe,GAAG,YAAY,CAAC;AAErC,uFAAuF;AACvF,MAAM,aAAa,GAAG,UAAU,CAAC;AAEjC,2FAA2F;AAC3F,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,8HAA8H;AAC9H,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,uBAAuB;IACvB,sBAAsB;IACtB,2BAA2B;CAC5B,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,OAAO,uBAAwB,SAAQ,MAAM,CAAC,WAAW,EAA2B,CACxF,yBAAyB,EACzB;IACE,QAAQ,EAAE,MAAM,CAAC,MAAM;IACvB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAC7E,OAAO,EAAE,MAAM,CAAC,MAAM;CACvB,CACF;CAAG;AAEJ,yEAAyE;AACzE,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAEtE,MAAM,eAAe,GAAG,MAAM,CAAC,cAAc,CAC3C,MAAM,CAAC,MAAM,CAAC;IACZ,YAAY,EAAE,YAAY;IAC1B,aAAa,EAAE,YAAY;IAC3B,QAAQ,EAAE,YAAY;CACvB,CAAC,CACH,CAAC;AACF,MAAM,qBAAqB,GAAG,MAAM,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC;AAE1E,MAAM,OAAO,GAAG,CAAC,KAAgC,EAAyB,EAAE,CAC1E,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;AAEzE,MAAM,eAAe,GAAG,MAAM,CAAC,mBAAmB,CAChD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAC/D,CAAC;AACF,MAAM,iBAAiB,GAAG,MAAM,CAAC,mBAAmB,CAClD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CACxF,CAAC;AACF,MAAM,eAAe,GAAG,MAAM,CAAC,mBAAmB,CAChD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAC9D,CAAC;AAEF,gGAAgG;AAChG,MAAM,UAAU,GAAG,sBAAsB,CAAC;AAE1C;;;GAGG;AACH,MAAM,cAAc,GAAG,CAAC,IAAY,EAAyB,EAAE,CAC7D,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,CACxB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAChC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EACnF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAC1E,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EACxC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAC/C,CAAC;AAEJ,uGAAuG;AACvG,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEzE;;;;GAIG;AACH,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,IAA2B,EAAW,EAAE,CAC3E,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAgB5D,MAAM,KAAK,GAAG,CAAC,MAAqB,EAAE,OAA8B,EAAc,EAAE,CAAC,CAAC;IACpF,MAAM;IACN,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE;IACvB,OAAO;IACP,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE;IAC1B,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE;CACxB,CAAC,CAAC;AAEH,8DAA8D;AAC9D,MAAM,MAAM,GAAG,CACb,OAAoC,EACpC,QAAwB,EACxB,GAAiB,EACR,EAAE,CACX,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AAElG,2EAA2E;AAC3E,MAAM,UAAU,GAAG,CAAC,MAAqB,EAAE,GAAiB,EAAW,EAAE,CACvE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE;IAC7B,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CACpB,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,gBAAgB,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,GAAG,CAAC;IACpF,MAAM,EAAE,GAAG,EAAE,CACX,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;QAC/B,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK;QACnB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC;KAC7E,CAAC;CACL,CAAC,CAAC;AAEL,MAAM,MAAM,GAAG,CAAC,KAAiB,EAAE,GAAiB,EAAW,EAAE,CAC/D,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAEpF,uFAAuF;AACvF,MAAM,KAAK,GAAG,CAAC,KAAiB,EAAE,YAAoB,EAAW,EAAE,CACjE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,YAAY;IAC1D,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AAEvC,MAAM,QAAQ,GAAG,CAAC,EAAE,WAAW,EAAE,SAAS,EAAiB,EAAiB,EAAE,CAAC,CAAC;IAC9E,WAAW;IACX,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,MAAqB,EAAE,EAAE,CAC5C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;AAE1F;;;;;GAKG;AACH,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAqB/C,CAAC,8BAA8B,CAAC;IACjC,MAAM,CAAU,KAAK,GAAG,KAAK,CAAC,MAAM,CAClC,aAAa,EACb,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;QACxC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAClC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAkC,IAAI,GAAG,EAAE,CAAC,CAAC;QAC3E,oFAAoF;QACpF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,IAAI,CAE1C,IAAI,GAAG,EAAE,CAAC,CAAC;QAEb,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAE,EAAE,CACnC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,CAAC,QAAgB,EAAE,KAAiB,EAAE,EAAE,CACpD,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QAEjE,MAAM,WAAW,GAAG,CAAC,KAAmB,EAAE,MAAyC,EAAE,EAAE;YACrF,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,YAAY;oBACf,OAAO,IAAI,uBAAuB,CAAC;wBACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,MAAM;wBACN,OAAO,EAAE,+CAA+C,KAAK,CAAC,QAAQ,2BAA2B;qBAClG,CAAC,CAAC;gBACL,KAAK,gBAAgB;oBACnB,OAAO,IAAI,uBAAuB,CAAC;wBACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,MAAM;wBACN,OAAO,EAAE,yEAAyE,eAAe,2BAA2B;qBAC7H,CAAC,CAAC;gBACL,KAAK,kBAAkB;oBACrB,OAAO,IAAI,uBAAuB,CAAC;wBACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,MAAM;wBACN,OAAO,EAAE,0HAA0H,KAAK,CAAC,QAAQ,0BAA0B;qBAC5K,CAAC,CAAC;YACP,CAAC;QACH,CAAC,CAAC;QAEF,uEAAuE;QACvE,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAmB;YAC7E,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;gBAAE,OAAO,OAAO,CAAC,KAAK,CAAC;YACjD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CACrD,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,EAChD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,QAAQ,CAAC,kCAAkC,EAAE;gBAClD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,KAAK,CAAC,OAAO;aACrB,CAAC,CACH,EACD,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CACxD,CAAC;YACF,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACpC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,EAAE;gBAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC;aAC/B,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,gGAAgG;QAChG,MAAM,aAAa,GAAG,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EACtE,KAAmB,EACnB,KAAiB,EACjB,MAAc,EACd,IAA2B;YAE3B,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACnE,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvE,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CACpB,6HAA6H,EAC7H,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAChD,CAAC;YACF,OAAO,WAAW,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,kGAAkG;QAClG,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAClE,KAAmB,EACnB,KAAiB,EACjB,KAAa;YAEb,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvF,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,kEAAkE,EAAE;gBACzF,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK;gBACL,OAAO,EAAE,eAAe;aACzB,CAAC,CAAC;YACH,OAAO,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH;;;;WAIG;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EAC1D,KAAmB,EACnB,KAAiB;YAEjB,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CACzD,iBAAiB,CAAC,UAAU,EAC5B,iBAAiB,CAAC,cAAc,CAAC;gBAC/B,SAAS,EAAE,eAAe;gBAC1B,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;aACzD,CAAC,CACH,CAAC;YACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAChD,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CACzE,EACD,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,EAChE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC3C,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAC1D,CACF,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBAChD,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACzC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;oBAC9B,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;oBAClD,CAAC,CAAC,WAAW,CACT,KAAK,EACL,KAAK,EACL,+BAA+B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,GAAG,CAC1G,CACN,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;YACtF,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;gBACnD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,iDAAiD,CAAC,CAC7E,CAAC;YACJ,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAChC,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;gBAC/B,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBAC7C,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE;oBACvC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY;oBACvC,MAAM,EAAE,QAAQ,CAAC,IAAI;iBACtB,CAAC;gBACF,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CACpC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAC7D;gBACD,SAAS,EAAE,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC;gBACvC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;aAC9B,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;gBACzC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC;gBACxF,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;YAClB,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE;gBAC3B,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC;gBACzB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;aAC9B,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,6BAA6B,EAAE;gBACnD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC;gBAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;aACrC,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/D,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CACrB,CAAC,IAAI,CACJ,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,EAChD,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACzB,OAAO;gBACL,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,oDAAoD,EAAE;oBACnE,QAAQ,EAAE,KAAK,CAAC,QAAQ;iBACzB,CAAC;gBACJ,CAAC,CAAC,MAAM,CAAC,UAAU,CACf,0FAA0F,EAC1F,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAC7B,CACN,EACD,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,KAAK,EAAE,EAAE,CAChD,MAAM,CAAC,QAAQ,CACb,+JAA+J,EAC/J,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CACnD,CACF,CACF,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QAE3B,sFAAsF;QACtF,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAmB;YACnF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;YACxF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAChC,IAAI,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,EAAE,GAAG,CAAC;gBAC9C,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YACrD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,8BAA8B,EAAE;gBACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,UAAU;gBAC1D,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;aACrC,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,qFAAqF;QACrF,MAAM,UAAU,GAAG,CAAC,KAAmB,EAAE,EAAE,CACzC,eAAe,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE;YAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,GAAG,CAAU,CAAC,CAAC;YAC1E,OAAO,IAAI;iBACR,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;iBAChC,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE;gBACvC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC5B,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EACpB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAU,CAAC,CACjF,CAAC;QACN,CAAC,CAAC,CAAC;QAEL,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAmB;YAC7E,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACtE,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EAC1D,KAAmB,EACnB,SAAwB;YAExB,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAChC,qFAAqF;YACrF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAC/B,MAAM,EACN,CAAC,GAAG,EAAgF,EAAE;gBACpF,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACxC,IACE,OAAO,KAAK,SAAS;oBACrB,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC;oBAEpF,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;gBAC3B,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,EAAE,GAAG,CAAC;oBAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAC5E,OAAO,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACrF,CAAC,CACF,CAAC;YACF,QAAQ,OAAO,EAAE,CAAC;gBAChB,KAAK,UAAU;oBACb,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAC3B,0EAA0E,EAC1E,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAC7B,CAAC;gBACJ,KAAK,QAAQ;oBACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAC7B,wHAAwH,EACxH,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAC7B,CAAC;gBACJ,KAAK,QAAQ;oBACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAC7B,6FAA6F,EAC7F,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAC7B,CAAC;YACN,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAmB;YAC7E,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CACrD,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,CACjD,CAAC;YACF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACjD,sGAAsG;YACtG,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAC/D,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAC5C,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CACjB,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAC5E,CACF,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC3C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,0DAA0D,EAAE;oBACvF,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;iBAC/C,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YAChD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,EAAE;gBAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC;gBAC9B,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;aAClC,CAAC,CAAC;QACL,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAExB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACrC,CAAC,CAAC,CACH,CAAC;CACH"}