@usine/gateway 0.1.0 → 0.2.0

package/dist/chatgpt/logins.js

@@ -0,0 +1,303 @@
+import { Context, DateTime, Effect, Fiber, FileSystem, Layer, Option, Redacted, Ref, Schema, Semaphore, SynchronizedRef, } from "effect";
+import { HttpClient, HttpClientRequest } from "effect/http";
+import { ChatGptTokens, idTokenAccount, jwtExpiry, readAuthFile, writeAuthFile, } from "./auth-file.js";
+/** The OAuth token endpoint that Codex refreshes ChatGPT logins at. */
+export const CHATGPT_TOKEN_URL = "https://auth.openai.com/oauth/token";
+/** Codex's public OAuth client ID; a login's refresh token works only with it. */
+const CODEX_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
+/** An access token that expires within this window is refreshed first, as Codex does. */
+const REFRESH_WINDOW = "5 minutes";
+/** An access token without an `exp` claim is refreshed when its last refresh is older than this, as Codex does. */
+const REFRESH_INTERVAL = "8 days";
+/** After a failed refresh, requests fail for this long without calling the token endpoint. */
+const FAILURE_BACKOFF = "10 seconds";
+/** A 401 for an access token refreshed this recently doesn't start another refresh. */
+const REFUSAL_GRACE = "1 minute";
+/** The number of rotated refresh tokens remembered, so a reload never goes back to one. */
+const RETIRED_TOKENS = 8;
+/** The token endpoint's error codes for a refresh token that can't be used again (Codex `classify_refresh_token_failure`). */
+const REJECTED_CODES = new Set([
+    "refresh_token_expired",
+    "refresh_token_reused",
+    "refresh_token_invalidated",
+]);
+/**
+ * The error for a request whose ChatGPT login has no usable access token: the auth file can't
+ * be read (`unreadable`), a refresh failed and is tried again after a short backoff
+ * (`refresh-failed`), or the token endpoint rejected the refresh token, which only a new login
+ * fixes (`refresh-rejected`). The message names no token and no text from the token endpoint.
+ * The reverse proxy answers 401 for `refresh-rejected`, and otherwise 503, which Codex retries.
+ */
+export class ChatGptLoginUnavailable extends Schema.TaggedError()("ChatGptLoginUnavailable", {
+    authFile: Schema.String,
+    reason: Schema.Literals(["unreadable", "refresh-failed", "refresh-rejected"]),
+    message: Schema.String,
+}) {
+}
+/** A string field that Codex reads as absent when it's null or empty. */
+const OptionalText = Schema.optionalKey(Schema.NullOr(Schema.String));
+const RefreshResponse = Schema.fromJsonString(Schema.Struct({
+    access_token: OptionalText,
+    refresh_token: OptionalText,
+    id_token: OptionalText,
+}));
+const decodeRefreshResponse = Schema.decodeUnknownOption(RefreshResponse);
+const present = (value) => Option.fromNullishOr(value).pipe(Option.filter((text) => text !== ""));
+const decodeErrorText = Schema.decodeUnknownOption(Schema.fromJsonString(Schema.Struct({ error: Schema.String })));
+const decodeErrorObject = Schema.decodeUnknownOption(Schema.fromJsonString(Schema.Struct({ error: Schema.Struct({ code: Schema.String }) })));
+const decodeErrorCode = Schema.decodeUnknownOption(Schema.fromJsonString(Schema.Struct({ code: Schema.String })));
+/** An error code as OAuth servers send them; other text could echo a token, so it's dropped. */
+const ERROR_CODE = /^[a-z0-9_.-]{1,64}$/u;
+/**
+ * Returns the error code in a token endpoint's error body, in lowercase: `error`, `error.code`,
+ * or `code`, as Codex reads it. A value that doesn't look like a code is ignored.
+ */
+const tokenErrorCode = (body) => decodeErrorText(body).pipe(Option.map(({ error }) => error), Option.orElse(() => Option.map(decodeErrorObject(body), ({ error }) => error.code)), Option.orElse(() => Option.map(decodeErrorCode(body), ({ code }) => code)), Option.map((code) => code.toLowerCase()), Option.filter((code) => ERROR_CODE.test(code)));
+/** The client error statuses that a later request can get past: a request timeout and a rate limit. */
+const TRANSIENT_CLIENT_ERRORS = new Set([408, 429]);
+/**
+ * Whether a refresh failure means the refresh token can't be used again: a client error other
+ * than a timeout or rate limit, such as `invalid_grant`, or one of Codex's rejection codes.
+ * Server errors and network errors are transient.
+ */
+const isRejection = (status, code) => (status >= 400 && status < 500 && !TRANSIENT_CLIENT_ERRORS.has(status)) ||
+    Option.exists(code, (value) => REJECTED_CODES.has(value));
+const fresh = (tokens, retired) => ({
+    tokens,
+    refused: false,
+    rejected: Option.none(),
+    retired,
+    refreshedAt: Option.none(),
+    failedAt: Option.none(),
+});
+/** Whether `instant` is less than `duration` before `now`. */
+const within = (instant, duration, now) => Option.exists(instant, (at) => DateTime.isGreaterThan(DateTime.addDuration(at, duration), now));
+/** Whether `tokens` must be refreshed at `now` before the next request. */
+const refreshDue = (tokens, now) => Option.match(tokens.expiresAt, {
+    onSome: (expiresAt) => !DateTime.isGreaterThan(DateTime.subtractDuration(expiresAt, REFRESH_WINDOW), now),
+    onNone: () => Option.match(tokens.lastRefresh, {
+        onNone: () => false,
+        onSome: (last) => !DateTime.isGreaterThan(DateTime.addDuration(last, REFRESH_INTERVAL), now),
+    }),
+});
+const usable = (state, now) => !state.refused && Option.isNone(state.rejected) && !refreshDue(state.tokens, now);
+/** Whether `refreshToken` is this login's current refresh token or one it replaced. */
+const holds = (state, refreshToken) => Redacted.value(state.tokens.refreshToken) === refreshToken ||
+    state.retired.includes(refreshToken);
+const accessOf = ({ accessToken, accountId }) => ({
+    accessToken,
+    accountId,
+});
+const expiryField = (tokens) => Option.match(tokens.expiresAt, { onNone: () => "unknown", onSome: DateTime.formatIso });
+/**
+ * The ChatGPT logins the Gateway holds, keyed by auth file. Each login's tokens stay in memory;
+ * an access token is refreshed before it expires, one refresh at a time, and the rotated tokens
+ * are written back to the auth file. A request never gets an access token that a failed
+ * refresh should have replaced.
+ */
+export class ChatGptLogins extends Context.Service()("@usine/gateway/ChatGptLogins") {
+    static layer = Layer.effect(ChatGptLogins, Effect.gen(function* () {
+        const fs = yield* FileSystem.FileSystem;
+        const client = yield* HttpClient.HttpClient;
+        const scope = yield* Effect.scope;
+        const states = yield* Ref.make(new Map());
+        // Refreshes and reloads run one at a time, so a rotated refresh token is used once.
+        const lock = yield* Semaphore.make(1);
+        const inFlight = yield* SynchronizedRef.make(new Map());
+        const stateOf = (authFile) => Effect.map(Ref.get(states), (all) => Option.fromNullishOr(all.get(authFile)));
+        const store = (authFile, state) => Ref.update(states, (all) => new Map(all).set(authFile, state));
+        const unavailable = (login, reason) => {
+            switch (reason) {
+                case "unreadable":
+                    return new ChatGptLoginUnavailable({
+                        authFile: login.authFile,
+                        reason,
+                        message: `The gateway can't read its ChatGPT login at ${login.authFile}. Its log has the reason.`,
+                    });
+                case "refresh-failed":
+                    return new ChatGptLoginUnavailable({
+                        authFile: login.authFile,
+                        reason,
+                        message: `The gateway could not refresh its ChatGPT login and tries again after ${FAILURE_BACKOFF}. Its log has the reason.`,
+                    });
+                case "refresh-rejected":
+                    return new ChatGptLoginUnavailable({
+                        authFile: login.authFile,
+                        reason,
+                        message: `The token endpoint rejected the refresh token of the gateway's ChatGPT login. Copy a new auth.json from codex login to ${login.authFile} and reload the gateway.`,
+                    });
+            }
+        };
+        /** Returns the login's state, reading its auth file if it has none. */
+        const loaded = Effect.fn("ChatGptLogins.loaded")(function* (login) {
+            const current = yield* stateOf(login.authFile);
+            if (Option.isSome(current))
+                return current.value;
+            const tokens = yield* readAuthFile(login.authFile).pipe(Effect.provideService(FileSystem.FileSystem, fs), Effect.tapError((error) => Effect.logError("Could not read the ChatGPT login", {
+                authFile: login.authFile,
+                error: error.message,
+            })), Effect.mapError(() => unavailable(login, "unreadable")));
+            const state = fresh(tokens, []);
+            yield* store(login.authFile, state);
+            yield* Effect.logInfo("Loaded the ChatGPT login", {
+                authFile: login.authFile,
+                expiresAt: expiryField(tokens),
+            });
+            return state;
+        });
+        /** Records a refresh the token endpoint rejected, so later requests fail without calling it. */
+        const rejectRefresh = Effect.fn("ChatGptLogins.rejectRefresh")(function* (login, state, status, code) {
+            const why = Option.getOrElse(code, () => `HTTP ${String(status)}`);
+            yield* store(login.authFile, { ...state, rejected: Option.some(why) });
+            yield* Effect.logError("The token endpoint rejected the ChatGPT login's refresh token; copy a new auth.json from codex login and reload the gateway", { authFile: login.authFile, status, code: why });
+            return unavailable(login, "refresh-rejected");
+        });
+        /** Records a refresh that failed for another reason, so requests back off before the next one. */
+        const failRefresh = Effect.fn("ChatGptLogins.failRefresh")(function* (login, state, error) {
+            yield* store(login.authFile, { ...state, failedAt: Option.some(yield* DateTime.now) });
+            yield* Effect.logError("Could not refresh the ChatGPT login; a later request tries again", {
+                authFile: login.authFile,
+                error,
+                backoff: FAILURE_BACKOFF,
+            });
+            return unavailable(login, "refresh-failed");
+        });
+        /**
+         * Exchanges the refresh token for new tokens and writes them back to the auth file. Runs
+         * uninterruptibly: once the token endpoint has rotated the refresh token, only storing the
+         * new one keeps the login usable.
+         */
+        const refresh = Effect.fn("ChatGptLogins.refresh")(function* (login, state) {
+            yield* Effect.annotateCurrentSpan({ authFile: login.authFile });
+            const request = HttpClientRequest.post(login.tokenUrl).pipe(HttpClientRequest.acceptJson, HttpClientRequest.bodyJsonUnsafe({
+                client_id: CODEX_CLIENT_ID,
+                grant_type: "refresh_token",
+                refresh_token: Redacted.value(state.tokens.refreshToken),
+            }));
+            const answer = yield* client.execute(request).pipe(Effect.flatMap((response) => Effect.map(response.text, (body) => ({ status: response.status, body }))), Effect.provideService(HttpClient.TracerDisabledWhen, () => true), Effect.catchTag("HttpClientError", (error) => Effect.flip(failRefresh(login, state, error.reason._tag))));
+            if (answer.status < 200 || answer.status >= 300) {
+                const code = tokenErrorCode(answer.body);
+                return yield* Effect.flip(isRejection(answer.status, code)
+                    ? rejectRefresh(login, state, answer.status, code)
+                    : failRefresh(login, state, `the token endpoint answered ${String(answer.status)} (${Option.getOrElse(code, () => "no error code")})`));
+            }
+            const body = decodeRefreshResponse(answer.body);
+            const accessToken = Option.flatMap(body, ({ access_token }) => present(access_token));
+            if (Option.isNone(body) || Option.isNone(accessToken))
+                return yield* Effect.flip(failRefresh(login, state, "the token endpoint's answer has no access_token"));
+            const refreshToken = present(body.value.refresh_token);
+            const idToken = present(body.value.id_token);
+            const now = yield* DateTime.now;
+            const tokens = new ChatGptTokens({
+                accessToken: Redacted.make(accessToken.value),
+                refreshToken: Option.match(refreshToken, {
+                    onNone: () => state.tokens.refreshToken,
+                    onSome: Redacted.make,
+                }),
+                accountId: state.tokens.accountId.pipe(Option.orElse(() => Option.flatMap(idToken, idTokenAccount))),
+                expiresAt: jwtExpiry(accessToken.value),
+                lastRefresh: Option.some(now),
+            });
+            const retired = Option.isSome(refreshToken)
+                ? [Redacted.value(state.tokens.refreshToken), ...state.retired].slice(0, RETIRED_TOKENS)
+                : state.retired;
+            yield* store(login.authFile, {
+                ...fresh(tokens, retired),
+                refreshedAt: Option.some(now),
+            });
+            yield* Effect.logInfo("Refreshed the ChatGPT login", {
+                authFile: login.authFile,
+                expiresAt: expiryField(tokens),
+                rotated: Option.isSome(refreshToken),
+            });
+            yield* writeAuthFile(login.authFile, tokens, idToken, (inFile) => holds(state, inFile)).pipe(Effect.provideService(FileSystem.FileSystem, fs), Effect.flatMap((written) => written
+                ? Effect.logInfo("Wrote the refreshed ChatGPT login to its auth file", {
+                    authFile: login.authFile,
+                })
+                : Effect.logWarning("Left the auth file as it is: it holds another ChatGPT login, which the next reload reads", { authFile: login.authFile })), Effect.catchTag("ChatGptAuthFileError", (error) => Effect.logError("Could not write the refreshed ChatGPT login to its auth file; the gateway keeps it in memory, and after a restart the file's refresh token may no longer work", { authFile: login.authFile, error: error.message })));
+            return tokens;
+        }, Effect.uninterruptible);
+        /** Returns a usable access token, refreshing first if needed. Runs under the lock. */
+        const refreshed = Effect.fn("ChatGptLogins.refreshed")(function* (login) {
+            const state = yield* loaded(login);
+            if (Option.isSome(state.rejected))
+                return yield* unavailable(login, "refresh-rejected");
+            const now = yield* DateTime.now;
+            if (usable(state, now))
+                return accessOf(state.tokens);
+            if (within(state.failedAt, FAILURE_BACKOFF, now))
+                return yield* unavailable(login, "refresh-failed");
+            yield* Effect.logInfo("Refreshing the ChatGPT login", {
+                authFile: login.authFile,
+                reason: state.refused ? "refused-by-upstream" : "expiring",
+                expiresAt: expiryField(state.tokens),
+            });
+            return accessOf(yield* refresh(login, state));
+        });
+        /** Returns the login's refresh in progress, or starts one in the service's scope. */
+        const refreshing = (login) => SynchronizedRef.modifyEffect(inFlight, (all) => {
+            const running = all.get(login.authFile);
+            if (running !== undefined)
+                return Effect.succeed([running, all]);
+            return lock
+                .withPermits(1)(refreshed(login))
+                .pipe(Effect.ensuring(SynchronizedRef.update(inFlight, (now) => {
+                const next = new Map(now);
+                next.delete(login.authFile);
+                return next;
+            })), Effect.forkIn(scope), Effect.map((fiber) => [fiber, new Map(all).set(login.authFile, fiber)]));
+        });
+        const access = Effect.fn("ChatGptLogins.access")(function* (login) {
+            yield* Effect.annotateCurrentSpan({ authFile: login.authFile });
+            const current = yield* stateOf(login.authFile);
+            if (Option.isSome(current) && usable(current.value, yield* DateTime.now))
+                return accessOf(current.value.tokens);
+            return yield* Fiber.join(yield* refreshing(login));
+        });
+        const refused = Effect.fn("ChatGptLogins.refused")(function* (login, presented) {
+            yield* Effect.annotateCurrentSpan({ authFile: login.authFile });
+            const now = yield* DateTime.now;
+            // Marks the state in one update, so a refresh that ends meanwhile isn't overwritten.
+            const outcome = yield* Ref.modify(states, (all) => {
+                const current = all.get(login.authFile);
+                if (current === undefined ||
+                    Redacted.value(current.tokens.accessToken) !== Redacted.value(presented.accessToken))
+                    return ["replaced", all];
+                if (within(current.refreshedAt, REFUSAL_GRACE, now))
+                    return ["recent", all];
+                return ["marked", new Map(all).set(login.authFile, { ...current, refused: true })];
+            });
+            switch (outcome) {
+                case "replaced":
+                    return yield* Effect.logDebug("The ChatGPT backend refused an access token the gateway already replaced", { authFile: login.authFile });
+                case "recent":
+                    return yield* Effect.logWarning("The ChatGPT backend refused an access token refreshed less than a minute ago; the gateway doesn't refresh it again yet", { authFile: login.authFile });
+                case "marked":
+                    return yield* Effect.logWarning("The ChatGPT backend refused the gateway's access token; the next request refreshes it first", { authFile: login.authFile });
+            }
+        });
+        const reload = Effect.fn("ChatGptLogins.reload")(function* (login) {
+            yield* Effect.annotateCurrentSpan({ authFile: login.authFile });
+            const tokens = yield* readAuthFile(login.authFile).pipe(Effect.provideService(FileSystem.FileSystem, fs));
+            const all = yield* Ref.get(states);
+            const read = Redacted.value(tokens.refreshToken);
+            // Any login that holds the file's refresh token, also under another path, already used or rotated it.
+            const holder = Option.fromNullishOr(all.get(login.authFile)).pipe(Option.filter((state) => holds(state, read)), Option.orElse(() => Option.fromNullishOr([...all.values()].find((state) => holds(state, read)))));
+            if (Option.isSome(holder)) {
+                yield* store(login.authFile, holder.value);
+                return yield* Effect.logInfo("Kept the ChatGPT login: its auth file has the same login", {
+                    authFile: login.authFile,
+                    rejected: Option.isSome(holder.value.rejected),
+                });
+            }
+            yield* store(login.authFile, fresh(tokens, []));
+            yield* Effect.logInfo("Loaded the ChatGPT login", {
+                authFile: login.authFile,
+                expiresAt: expiryField(tokens),
+                replaced: all.has(login.authFile),
+            });
+        }, lock.withPermits(1));
+        return { access, refused, reload };
+    }));
+}
+//# sourceMappingURL=logins.js.map

package/dist/chatgpt/logins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logins.js","sourceRoot":"","sources":["../../src/chatgpt/logins.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,QAAQ,EAER,MAAM,EACN,KAAK,EACL,UAAU,EACV,KAAK,EACL,MAAM,EACN,QAAQ,EACR,GAAG,EACH,MAAM,EACN,SAAS,EACT,eAAe,GAChB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAE5D,OAAO,EAEL,aAAa,EACb,cAAc,EACd,SAAS,EACT,YAAY,EACZ,aAAa,GACd,MAAM,gBAAgB,CAAC;AAExB,uEAAuE;AACvE,MAAM,CAAC,MAAM,iBAAiB,GAAG,qCAAqC,CAAC;AAEvE,kFAAkF;AAClF,MAAM,eAAe,GAAG,8BAA8B,CAAC;AAEvD,yFAAyF;AACzF,MAAM,cAAc,GAAG,WAAW,CAAC;AAEnC,mHAAmH;AACnH,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AAElC,8FAA8F;AAC9F,MAAM,eAAe,GAAG,YAAY,CAAC;AAErC,uFAAuF;AACvF,MAAM,aAAa,GAAG,UAAU,CAAC;AAEjC,2FAA2F;AAC3F,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,8HAA8H;AAC9H,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,uBAAuB;IACvB,sBAAsB;IACtB,2BAA2B;CAC5B,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,OAAO,uBAAwB,SAAQ,MAAM,CAAC,WAAW,EAA2B,CACxF,yBAAyB,EACzB;IACE,QAAQ,EAAE,MAAM,CAAC,MAAM;IACvB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAC7E,OAAO,EAAE,MAAM,CAAC,MAAM;CACvB,CACF;CAAG;AAEJ,yEAAyE;AACzE,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAEtE,MAAM,eAAe,GAAG,MAAM,CAAC,cAAc,CAC3C,MAAM,CAAC,MAAM,CAAC;IACZ,YAAY,EAAE,YAAY;IAC1B,aAAa,EAAE,YAAY;IAC3B,QAAQ,EAAE,YAAY;CACvB,CAAC,CACH,CAAC;AACF,MAAM,qBAAqB,GAAG,MAAM,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC;AAE1E,MAAM,OAAO,GAAG,CAAC,KAAgC,EAAyB,EAAE,CAC1E,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;AAEzE,MAAM,eAAe,GAAG,MAAM,CAAC,mBAAmB,CAChD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAC/D,CAAC;AACF,MAAM,iBAAiB,GAAG,MAAM,CAAC,mBAAmB,CAClD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CACxF,CAAC;AACF,MAAM,eAAe,GAAG,MAAM,CAAC,mBAAmB,CAChD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAC9D,CAAC;AAEF,gGAAgG;AAChG,MAAM,UAAU,GAAG,sBAAsB,CAAC;AAE1C;;;GAGG;AACH,MAAM,cAAc,GAAG,CAAC,IAAY,EAAyB,EAAE,CAC7D,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,CACxB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAChC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EACnF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAC1E,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EACxC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAC/C,CAAC;AAEJ,uGAAuG;AACvG,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEzE;;;;GAIG;AACH,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,IAA2B,EAAW,EAAE,CAC3E,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAgB5D,MAAM,KAAK,GAAG,CAAC,MAAqB,EAAE,OAA8B,EAAc,EAAE,CAAC,CAAC;IACpF,MAAM;IACN,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE;IACvB,OAAO;IACP,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE;IAC1B,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE;CACxB,CAAC,CAAC;AAEH,8DAA8D;AAC9D,MAAM,MAAM,GAAG,CACb,OAAoC,EACpC,QAAwB,EACxB,GAAiB,EACR,EAAE,CACX,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AAElG,2EAA2E;AAC3E,MAAM,UAAU,GAAG,CAAC,MAAqB,EAAE,GAAiB,EAAW,EAAE,CACvE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE;IAC7B,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CACpB,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,gBAAgB,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,GAAG,CAAC;IACpF,MAAM,EAAE,GAAG,EAAE,CACX,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;QAC/B,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK;QACnB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC;KAC7E,CAAC;CACL,CAAC,CAAC;AAEL,MAAM,MAAM,GAAG,CAAC,KAAiB,EAAE,GAAiB,EAAW,EAAE,CAC/D,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAEpF,uFAAuF;AACvF,MAAM,KAAK,GAAG,CAAC,KAAiB,EAAE,YAAoB,EAAW,EAAE,CACjE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,YAAY;IAC1D,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AAEvC,MAAM,QAAQ,GAAG,CAAC,EAAE,WAAW,EAAE,SAAS,EAAiB,EAAiB,EAAE,CAAC,CAAC;IAC9E,WAAW;IACX,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,MAAqB,EAAE,EAAE,CAC5C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;AAE1F;;;;;GAKG;AACH,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAqB/C,CAAC,8BAA8B,CAAC;IACjC,MAAM,CAAU,KAAK,GAAG,KAAK,CAAC,MAAM,CAClC,aAAa,EACb,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;QACxC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAClC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAkC,IAAI,GAAG,EAAE,CAAC,CAAC;QAC3E,oFAAoF;QACpF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,IAAI,CAE1C,IAAI,GAAG,EAAE,CAAC,CAAC;QAEb,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAE,EAAE,CACnC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,CAAC,QAAgB,EAAE,KAAiB,EAAE,EAAE,CACpD,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QAEjE,MAAM,WAAW,GAAG,CAAC,KAAmB,EAAE,MAAyC,EAAE,EAAE;YACrF,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,YAAY;oBACf,OAAO,IAAI,uBAAuB,CAAC;wBACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,MAAM;wBACN,OAAO,EAAE,+CAA+C,KAAK,CAAC,QAAQ,2BAA2B;qBAClG,CAAC,CAAC;gBACL,KAAK,gBAAgB;oBACnB,OAAO,IAAI,uBAAuB,CAAC;wBACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,MAAM;wBACN,OAAO,EAAE,yEAAyE,eAAe,2BAA2B;qBAC7H,CAAC,CAAC;gBACL,KAAK,kBAAkB;oBACrB,OAAO,IAAI,uBAAuB,CAAC;wBACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,MAAM;wBACN,OAAO,EAAE,0HAA0H,KAAK,CAAC,QAAQ,0BAA0B;qBAC5K,CAAC,CAAC;YACP,CAAC;QACH,CAAC,CAAC;QAEF,uEAAuE;QACvE,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAmB;YAC7E,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;gBAAE,OAAO,OAAO,CAAC,KAAK,CAAC;YACjD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CACrD,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,EAChD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,QAAQ,CAAC,kCAAkC,EAAE;gBAClD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,KAAK,CAAC,OAAO;aACrB,CAAC,CACH,EACD,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CACxD,CAAC;YACF,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACpC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,EAAE;gBAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC;aAC/B,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,gGAAgG;QAChG,MAAM,aAAa,GAAG,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EACtE,KAAmB,EACnB,KAAiB,EACjB,MAAc,EACd,IAA2B;YAE3B,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACnE,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvE,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CACpB,6HAA6H,EAC7H,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAChD,CAAC;YACF,OAAO,WAAW,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,kGAAkG;QAClG,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAClE,KAAmB,EACnB,KAAiB,EACjB,KAAa;YAEb,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvF,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,kEAAkE,EAAE;gBACzF,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK;gBACL,OAAO,EAAE,eAAe;aACzB,CAAC,CAAC;YACH,OAAO,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH;;;;WAIG;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EAC1D,KAAmB,EACnB,KAAiB;YAEjB,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CACzD,iBAAiB,CAAC,UAAU,EAC5B,iBAAiB,CAAC,cAAc,CAAC;gBAC/B,SAAS,EAAE,eAAe;gBAC1B,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;aACzD,CAAC,CACH,CAAC;YACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAChD,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CACzE,EACD,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,EAChE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC3C,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAC1D,CACF,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBAChD,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACzC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;oBAC9B,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;oBAClD,CAAC,CAAC,WAAW,CACT,KAAK,EACL,KAAK,EACL,+BAA+B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,GAAG,CAC1G,CACN,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;YACtF,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;gBACnD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,iDAAiD,CAAC,CAC7E,CAAC;YACJ,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAChC,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;gBAC/B,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBAC7C,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE;oBACvC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY;oBACvC,MAAM,EAAE,QAAQ,CAAC,IAAI;iBACtB,CAAC;gBACF,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CACpC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAC7D;gBACD,SAAS,EAAE,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC;gBACvC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;aAC9B,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;gBACzC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC;gBACxF,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;YAClB,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE;gBAC3B,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC;gBACzB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;aAC9B,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,6BAA6B,EAAE;gBACnD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC;gBAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;aACrC,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/D,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CACrB,CAAC,IAAI,CACJ,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,EAChD,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACzB,OAAO;gBACL,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,oDAAoD,EAAE;oBACnE,QAAQ,EAAE,KAAK,CAAC,QAAQ;iBACzB,CAAC;gBACJ,CAAC,CAAC,MAAM,CAAC,UAAU,CACf,0FAA0F,EAC1F,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAC7B,CACN,EACD,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,KAAK,EAAE,EAAE,CAChD,MAAM,CAAC,QAAQ,CACb,+JAA+J,EAC/J,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CACnD,CACF,CACF,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QAE3B,sFAAsF;QACtF,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAmB;YACnF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;YACxF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAChC,IAAI,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,EAAE,GAAG,CAAC;gBAC9C,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YACrD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,8BAA8B,EAAE;gBACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,UAAU;gBAC1D,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;aACrC,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,qFAAqF;QACrF,MAAM,UAAU,GAAG,CAAC,KAAmB,EAAE,EAAE,CACzC,eAAe,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE;YAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,GAAG,CAAU,CAAC,CAAC;YAC1E,OAAO,IAAI;iBACR,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;iBAChC,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE;gBACvC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC5B,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EACpB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAU,CAAC,CACjF,CAAC;QACN,CAAC,CAAC,CAAC;QAEL,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAmB;YAC7E,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACtE,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EAC1D,KAAmB,EACnB,SAAwB;YAExB,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAChC,qFAAqF;YACrF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAC/B,MAAM,EACN,CAAC,GAAG,EAAgF,EAAE;gBACpF,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACxC,IACE,OAAO,KAAK,SAAS;oBACrB,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC;oBAEpF,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;gBAC3B,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,EAAE,GAAG,CAAC;oBAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAC5E,OAAO,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACrF,CAAC,CACF,CAAC;YACF,QAAQ,OAAO,EAAE,CAAC;gBAChB,KAAK,UAAU;oBACb,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAC3B,0EAA0E,EAC1E,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAC7B,CAAC;gBACJ,KAAK,QAAQ;oBACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAC7B,wHAAwH,EACxH,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAC7B,CAAC;gBACJ,KAAK,QAAQ;oBACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAC7B,6FAA6F,EAC7F,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAC7B,CAAC;YACN,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAmB;YAC7E,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CACrD,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,CACjD,CAAC;YACF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACjD,sGAAsG;YACtG,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAC/D,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAC5C,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CACjB,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAC5E,CACF,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC3C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,0DAA0D,EAAE;oBACvF,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;iBAC/C,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YAChD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,EAAE;gBAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC;gBAC9B,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;aAClC,CAAC,CAAC;QACL,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAExB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACrC,CAAC,CAAC,CACH,CAAC;CACH"}

package/dist/gateway.d.ts

@@ -1,6 +1,7 @@
 import { Layer } from "effect";
 import { Attachments } from "./attachment/store.ts";
 import { CallerTokens } from "./caller/caller.ts";
+import { ChatGptLogins } from "./chatgpt/logins.ts";
 import { SettingsInForce } from "./settings.ts";
 export { adminRoutes } from "./admin/server.ts";
 export { AnonymousCredential, Attachment, AttachmentAlreadyExpired, AttachmentConflict, AttachmentCredential, AttachmentId, type AttachmentLookup, ExpiredAttachment, InstallationCredential, LiveAttachment, MissingAttachment, } from "./attachment/attachment.ts";
@@ -8,7 +9,9 @@ export { Attachments } from "./attachment/store.ts";
 export { CallerClaims, CallerToken, CallerTokenRejected, CallerTokens, GATEWAY_TOKEN_HEADER, tokenFromAuthorization, } from "./caller/caller.ts";
 export { type EgressDecision, EgressAllowlist, EgressAllowlistError, EgressPermitted, EgressRefusalReason, EgressRefused, EgressRule, HostName, parseEgressAllowlist, Port, } from "./egress/egress.ts";
 export { GITHUB_ORIGINS, type GitHubOrigins } from "./github/github.ts";
-export { AnthropicApiKey, AnthropicCredential, AnthropicProvider, AnthropicSubscriptionToken, type LlmProviders, OpenAiProvider, } from "./llm/llm.ts";
+export { ChatGptAuthFileError, ChatGptTokens } from "./chatgpt/auth-file.ts";
+export { CHATGPT_TOKEN_URL, ChatGptLoginUnavailable, ChatGptLogins } from "./chatgpt/logins.ts";
+export { AnthropicApiKey, AnthropicCredential, AnthropicProvider, AnthropicSubscriptionToken, type ChatGptAccess, ChatGptLogin, HostFilePath, type LlmProvider, type LlmProviders, OpenAiApiKey, OpenAiCredential, OpenAiProvider, } from "./llm/llm.ts";
 export { endToEndHeaders } from "./proxy/forward.ts";
 export { GatewayProxy, REFUSAL_HEADER, RefusalReason } from "./proxy/proxy.ts";
 export { GatewayDomain } from "@usine/core/worker";
@@ -16,8 +19,9 @@ export { AdminToken, CallerKey, GatewaySettings, gatewayHosts, type ReloadableSe
 export { UpstreamBase } from "./upstream.ts";
 /**
  * The Gateway's shared state for one process: the attachment store, the caller token signer,
- * and the current settings. Provide this layer once to the reverse proxy, forward proxy, admin
- * API, and reload.
+ * the current settings, and the ChatGPT logins. Provide this layer once to the reverse proxy,
+ * forward proxy, admin API, and reload. The logins need a `FileSystem` for their auth files and
+ * an `HttpClient` for refreshes.
  */
-export declare const gatewayServices: Layer.Layer<Attachments | CallerTokens | SettingsInForce, never, import("./settings.ts").GatewaySettings>;
+export declare const gatewayServices: Layer.Layer<Attachments | CallerTokens | ChatGptLogins | SettingsInForce, never, import("effect/FileSystem").FileSystem | import("./settings.ts").GatewaySettings | import("effect/http/HttpClient").HttpClient>;
 //# sourceMappingURL=gateway.d.ts.map

package/dist/gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,EACZ,KAAK,gBAAgB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,cAAc,EACd,iBAAiB,GAClB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EACL,YAAY,EACZ,WAAW,EACX,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,cAAc,EACnB,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,UAAU,EACV,QAAQ,EACR,oBAAoB,EACpB,IAAI,GACL,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,0BAA0B,EAC1B,KAAK,YAAY,EACjB,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,UAAU,EACV,SAAS,EACT,eAAe,EACf,YAAY,EACZ,KAAK,kBAAkB,EACvB,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C;;;;GAIG;AACH,eAAO,MAAM,eAAe,2GAI3B,CAAC"}
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,EACZ,KAAK,gBAAgB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,cAAc,EACd,iBAAiB,GAClB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EACL,YAAY,EACZ,WAAW,EACX,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,cAAc,EACnB,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,UAAU,EACV,QAAQ,EACR,oBAAoB,EACpB,IAAI,GACL,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,0BAA0B,EAC1B,KAAK,aAAa,EAClB,YAAY,EACZ,YAAY,EACZ,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,YAAY,EACZ,gBAAgB,EAChB,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,UAAU,EACV,SAAS,EACT,eAAe,EACf,YAAY,EACZ,KAAK,kBAAkB,EACvB,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,eAAe,kNAK3B,CAAC"}

package/dist/gateway.js

@@ -1,6 +1,7 @@
 import { Layer } from "effect";
 import { Attachments } from "./attachment/store.js";
 import { CallerTokens } from "./caller/caller.js";
+import { ChatGptLogins } from "./chatgpt/logins.js";
 import { SettingsInForce } from "./settings.js";
 export { adminRoutes } from "./admin/server.js";
 export { AnonymousCredential, Attachment, AttachmentAlreadyExpired, AttachmentConflict, AttachmentCredential, AttachmentId, ExpiredAttachment, InstallationCredential, LiveAttachment, MissingAttachment, } from "./attachment/attachment.js";
@@ -8,7 +9,9 @@ export { Attachments } from "./attachment/store.js";
 export { CallerClaims, CallerToken, CallerTokenRejected, CallerTokens, GATEWAY_TOKEN_HEADER, tokenFromAuthorization, } from "./caller/caller.js";
 export { EgressAllowlist, EgressAllowlistError, EgressPermitted, EgressRefusalReason, EgressRefused, EgressRule, HostName, parseEgressAllowlist, Port, } from "./egress/egress.js";
 export { GITHUB_ORIGINS } from "./github/github.js";
-export { AnthropicApiKey, AnthropicCredential, AnthropicProvider, AnthropicSubscriptionToken, OpenAiProvider, } from "./llm/llm.js";
+export { ChatGptAuthFileError, ChatGptTokens } from "./chatgpt/auth-file.js";
+export { CHATGPT_TOKEN_URL, ChatGptLoginUnavailable, ChatGptLogins } from "./chatgpt/logins.js";
+export { AnthropicApiKey, AnthropicCredential, AnthropicProvider, AnthropicSubscriptionToken, ChatGptLogin, HostFilePath, OpenAiApiKey, OpenAiCredential, OpenAiProvider, } from "./llm/llm.js";
 export { endToEndHeaders } from "./proxy/forward.js";
 export { GatewayProxy, REFUSAL_HEADER, RefusalReason } from "./proxy/proxy.js";
 export { GatewayDomain } from "@usine/core/worker";
@@ -16,8 +19,9 @@ export { AdminToken, CallerKey, GatewaySettings, gatewayHosts, SettingsInForce,
 export { UpstreamBase } from "./upstream.js";
 /**
  * The Gateway's shared state for one process: the attachment store, the caller token signer,
- * and the current settings. Provide this layer once to the reverse proxy, forward proxy, admin
- * API, and reload.
+ * the current settings, and the ChatGPT logins. Provide this layer once to the reverse proxy,
+ * forward proxy, admin API, and reload. The logins need a `FileSystem` for their auth files and
+ * an `HttpClient` for refreshes.
  */
-export const gatewayServices = Layer.mergeAll(Attachments.layer, CallerTokens.layer, SettingsInForce.layer);
+export const gatewayServices = Layer.mergeAll(Attachments.layer, CallerTokens.layer, SettingsInForce.layer, ChatGptLogins.layer);
 //# sourceMappingURL=gateway.js.map

package/dist/gateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,EAEZ,iBAAiB,EACjB,sBAAsB,EACtB,cAAc,EACd,iBAAiB,GAClB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EACL,YAAY,EACZ,WAAW,EACX,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,UAAU,EACV,QAAQ,EACR,oBAAoB,EACpB,IAAI,GACL,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAsB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,0BAA0B,EAE1B,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,UAAU,EACV,SAAS,EACT,eAAe,EACf,YAAY,EAEZ,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC,QAAQ,CAC3C,WAAW,CAAC,KAAK,EACjB,YAAY,CAAC,KAAK,EAClB,eAAe,CAAC,KAAK,CACtB,CAAC"}
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,EAEZ,iBAAiB,EACjB,sBAAsB,EACtB,cAAc,EACd,iBAAiB,GAClB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EACL,YAAY,EACZ,WAAW,EACX,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,UAAU,EACV,QAAQ,EACR,oBAAoB,EACpB,IAAI,GACL,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAsB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,0BAA0B,EAE1B,YAAY,EACZ,YAAY,EAGZ,YAAY,EACZ,gBAAgB,EAChB,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,UAAU,EACV,SAAS,EACT,eAAe,EACf,YAAY,EAEZ,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC,QAAQ,CAC3C,WAAW,CAAC,KAAK,EACjB,YAAY,CAAC,KAAK,EAClB,eAAe,CAAC,KAAK,EACrB,aAAa,CAAC,KAAK,CACpB,CAAC"}

package/dist/github/github.d.ts

@@ -1,6 +1,6 @@
 import { RepositoryName } from "@usine/core/repository";
 import { Option } from "effect";
-import { Headers } from "effect/unstable/http";
+import { Headers } from "effect/http";
 import type { AttachmentCredential } from "../attachment/attachment.ts";
 import { UpstreamBase } from "../upstream.ts";
 /** The upstream origins for GitHub requests: `web` for git smart HTTP, `api` for REST and GraphQL, `uploads` for release asset uploads. */
@@ -21,23 +21,34 @@ export type GitHubHost = "gateway" | "web" | "api" | "uploads";
 /** GitHub's host names and what each serves. */
 export declare const GITHUB_HOSTS: ReadonlyMap<string, GitHubHost>;
 /**
- * A forwarded GitHub request: git smart HTTP for a repository, or an API call. `repository` is
- * the repository in the path; GraphQL and calls such as `/user` have none.
+ * A forwarded GitHub request: git smart HTTP or a release download for a repository, or an API
+ * call. `repository` is the repository in the path; GraphQL and calls such as `/user` have none.
  */
 export interface GitHubRoute {
-    readonly protocol: "git" | "api";
+    readonly protocol: "git" | "release" | "api";
     readonly upstream: string;
     readonly repository: Option.Option<RepositoryName>;
 }
+/** Returns `value` as a URL if it is an absolute URL. */
+export declare const absoluteUrl: (value: string) => Option.Option<URL>;
+/** Returns `pathname` after `prefix`, if it is `prefix` or a path under it. */
+export declare const afterPrefix: (pathname: string, prefix: string) => Option.Option<string>;
 /**
  * Returns the upstream URL and repository for a GitHub request. Returns `None` for paths
- * outside git smart HTTP, Git LFS, and the API, such as web pages.
+ * outside git smart HTTP, Git LFS, release downloads, and the API, such as web pages.
  */
 export declare const githubRoute: (origins: GitHubOrigins, host: GitHubHost, pathname: string, search: string) => Option.Option<GitHubRoute>;
+/**
+ * Returns `location` on `git.<domain>` if it points at github.com or api.github.com, with its
+ * path and query, so a Worker follows GitHub's redirects, such as those for a renamed
+ * repository, through the gateway. API paths move under `/api/v3`. Returns `None` for other
+ * hosts, such as the release asset hosts.
+ */
+export declare const gatewayLocation: (origins: GitHubOrigins, gitHost: string, location: URL) => Option.Option<URL>;
 /**
  * Adds the attachment's credential to a GitHub request whose caller credential was removed: as
- * the `x-access-token` password for git, or as a bearer token for the API. An anonymous
- * attachment adds nothing.
+ * the `x-access-token` password for github.com, which serves git and release downloads, or as a
+ * bearer token for the API. An anonymous attachment adds nothing.
  */
-export declare const withGitHubCredential: (route: GitHubRoute, credential: AttachmentCredential, headers: Headers.Headers) => Headers.Headers;
+export declare const withGitHubCredential: (protocol: GitHubRoute["protocol"], credential: AttachmentCredential, headers: Headers.Headers) => Headers.Headers;
 //# sourceMappingURL=github.d.ts.map

package/dist/github/github.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../src/github/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAY,MAAM,EAAoB,MAAM,QAAQ,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,2IAA2I;AAC3I,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAChC;AAED,8BAA8B;AAC9B,eAAO,MAAM,cAAc,EAAE,aAI5B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;AAE/D,gDAAgD;AAChD,eAAO,MAAM,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAIvD,CAAC;AAEH;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,KAAK,GAAG,KAAK,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;CACpD;AAuCD;;;GAGG;AACH,eAAO,MAAM,WAAW,YACb,aAAa,QAChB,UAAU,YACN,MAAM,UACR,MAAM,KACb,MAAM,CAAC,MAAM,CAAC,WAAW,CAiB3B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,UACxB,WAAW,cACN,oBAAoB,WACvB,OAAO,CAAC,OAAO,KACvB,OAAO,CAAC,OAeV,CAAC"}
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../src/github/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,MAAM,EAA4B,MAAM,QAAQ,CAAC;AAE1D,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,2IAA2I;AAC3I,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAChC;AAED,8BAA8B;AAC9B,eAAO,MAAM,cAAc,EAAE,aAI5B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;AAE/D,gDAAgD;AAChD,eAAO,MAAM,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAIvD,CAAC;AAEH;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,KAAK,GAAG,SAAS,GAAG,KAAK,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;CACpD;AAmDD,yDAAyD;AACzD,eAAO,MAAM,WAAW,UAAW,MAAM,KAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CACR,CAAC;AAEtD,+EAA+E;AAC/E,eAAO,MAAM,WAAW,aAAc,MAAM,UAAU,MAAM,KAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAGhE,CAAC;AAEpB;;;GAGG;AACH,eAAO,MAAM,WAAW,YACb,aAAa,QAChB,UAAU,YACN,MAAM,UACR,MAAM,KACb,MAAM,CAAC,MAAM,CAAC,WAAW,CAiB3B,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,eAAe,YACjB,aAAa,WACb,MAAM,YACL,GAAG,KACZ,MAAM,CAAC,MAAM,CAAC,GAAG,CAOnB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,aACrB,WAAW,CAAC,UAAU,CAAC,cACrB,oBAAoB,WACvB,OAAO,CAAC,OAAO,KACvB,OAAO,CAAC,OAeV,CAAC"}

package/dist/github/github.js

@@ -1,6 +1,7 @@
 import { RepositoryName } from "@usine/core/repository";
-import { Encoding, Option, Redacted, Schema } from "effect";
-import { Headers } from "effect/unstable/http";
+import { Option, Redacted, Result, Schema } from "effect";
+import { Base64 } from "effect/encoding";
+import { Headers } from "effect/http";
 import { UpstreamBase } from "../upstream.js";
 /** The github.com origins. */
 export const GITHUB_ORIGINS = {
@@ -15,17 +16,26 @@ export const GITHUB_HOSTS = new Map([
     ["uploads.github.com", "uploads"],
 ]);
 const GIT_PATH = /^\/([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+?)(?:\.git)?\/(?:info\/refs|git-upload-pack|git-receive-pack|info\/lfs(?:\/[^?#]*)?)$/u;
+/** `/OWNER/REPO/releases/download/TAG/FILE`, whose tag can contain `/`, and `/OWNER/REPO/releases/latest/download/FILE`. */
+const RELEASE_DOWNLOAD_PATH = /^\/([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)\/releases\/(?:download\/.+|latest\/download)\/[^/]+$/u;
+const WEB_PATHS = [
+    ["git", GIT_PATH],
+    ["release", RELEASE_DOWNLOAD_PATH],
+];
 const REPOSITORY_PATH = /^\/repos\/([^/]+)\/([^/]+)(?:\/|$)/u;
 const decodeRepository = Schema.decodeUnknownOption(RepositoryName);
-const gitRoute = (origins, pathname, search) => {
-    const match = GIT_PATH.exec(pathname);
-    if (match === null)
-        return Option.none();
-    return Option.map(decodeRepository(`${match[1]}/${match[2]}`), (repository) => ({
-        protocol: "git",
-        upstream: `${origins.web}${pathname}${search}`,
-        repository: Option.some(repository),
-    }));
+/** Returns the github.com route for a repository's git smart HTTP or release download path. */
+const webRoute = (origins, pathname, search) => {
+    for (const [protocol, pattern] of WEB_PATHS) {
+        const match = pattern.exec(pathname);
+        if (match !== null)
+            return Option.map(decodeRepository(`${match[1]}/${match[2]}`), (repository) => ({
+                protocol,
+                upstream: `${origins.web}${pathname}${search}`,
+                repository: Option.some(repository),
+            }));
+    }
+    return Option.none();
 };
 /** Returns the route for an API path, or `None` for a `/repos/OWNER/REPO` path whose segments aren't a valid repository name. */
 const apiRoute = (base, rest, search) => {
@@ -40,17 +50,20 @@ const apiRoute = (base, rest, search) => {
         repository: named,
     }));
 };
-const afterPrefix = (pathname, prefix) => pathname === prefix || pathname.startsWith(`${prefix}/`)
+/** Returns `value` as a URL if it is an absolute URL. */
+export const absoluteUrl = (value) => Result.getSuccess(Result.try(() => new URL(value)));
+/** Returns `pathname` after `prefix`, if it is `prefix` or a path under it. */
+export const afterPrefix = (pathname, prefix) => pathname === prefix || pathname.startsWith(`${prefix}/`)
     ? Option.some(pathname.slice(prefix.length))
     : Option.none();
 /**
  * Returns the upstream URL and repository for a GitHub request. Returns `None` for paths
- * outside git smart HTTP, Git LFS, and the API, such as web pages.
+ * outside git smart HTTP, Git LFS, release downloads, and the API, such as web pages.
  */
 export const githubRoute = (origins, host, pathname, search) => {
     switch (host) {
         case "web":
-            return gitRoute(origins, pathname, search);
+            return webRoute(origins, pathname, search);
         case "api":
             return apiRoute(origins.api, pathname, search);
         case "uploads":
@@ -64,24 +77,35 @@ export const githubRoute = (origins, host, pathname, search) => {
             const upload = afterPrefix(pathname, "/api/uploads");
             if (Option.isSome(upload))
                 return apiRoute(origins.uploads, upload.value, search);
-            return gitRoute(origins, pathname, search);
+            return webRoute(origins, pathname, search);
         }
     }
 };
+/**
+ * Returns `location` on `git.<domain>` if it points at github.com or api.github.com, with its
+ * path and query, so a Worker follows GitHub's redirects, such as those for a renamed
+ * repository, through the gateway. API paths move under `/api/v3`. Returns `None` for other
+ * hosts, such as the release asset hosts.
+ */
+export const gatewayLocation = (origins, gitHost, location) => {
+    const target = `${location.origin}${location.pathname}`;
+    const onGateway = (prefix) => (rest) => new URL(`http://${gitHost}${prefix}${rest}${location.search}${location.hash}`);
+    return Option.map(afterPrefix(target, origins.web), onGateway("")).pipe(Option.orElse(() => Option.map(afterPrefix(target, origins.api), onGateway("/api/v3"))));
+};
 /**
  * Adds the attachment's credential to a GitHub request whose caller credential was removed: as
- * the `x-access-token` password for git, or as a bearer token for the API. An anonymous
- * attachment adds nothing.
+ * the `x-access-token` password for github.com, which serves git and release downloads, or as a
+ * bearer token for the API. An anonymous attachment adds nothing.
  */
-export const withGitHubCredential = (route, credential, headers) => {
+export const withGitHubCredential = (protocol, credential, headers) => {
     switch (credential._tag) {
         case "AnonymousCredential":
             return headers;
         case "InstallationCredential": {
             const token = Redacted.value(credential.token);
-            return Headers.set(headers, "authorization", route.protocol === "git"
-                ? `Basic ${Encoding.encodeBase64(`x-access-token:${token}`)}`
-                : `Bearer ${token}`);
+            return Headers.set(headers, "authorization", protocol === "api"
+                ? `Bearer ${token}`
+                : `Basic ${Base64.encode(`x-access-token:${token}`)}`);
         }
     }
 };

package/dist/github/github.js.map

@@ -1 +1 @@
-{"version":3,"file":"github.js","sourceRoot":"","sources":["../../src/github/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAE/C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAS9C,8BAA8B;AAC9B,MAAM,CAAC,MAAM,cAAc,GAAkB;IAC3C,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,oBAAoB,CAAC;IAC5C,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,wBAAwB,CAAC;IAChD,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,4BAA4B,CAAC;CACzD,CAAC;AAUF,gDAAgD;AAChD,MAAM,CAAC,MAAM,YAAY,GAAoC,IAAI,GAAG,CAAC;IACnE,CAAC,YAAY,EAAE,KAAK,CAAC;IACrB,CAAC,gBAAgB,EAAE,KAAK,CAAC;IACzB,CAAC,oBAAoB,EAAE,SAAS,CAAC;CAClC,CAAC,CAAC;AAYH,MAAM,QAAQ,GACZ,8HAA8H,CAAC;AAEjI,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAE9D,MAAM,gBAAgB,GAAG,MAAM,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;AAEpE,MAAM,QAAQ,GAAG,CAAC,OAAsB,EAAE,QAAgB,EAAE,MAAc,EAAE,EAAE;IAC5E,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACzC,OAAO,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,EAAe,EAAE,CAAC,CAAC;QAC3F,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,GAAG,QAAQ,GAAG,MAAM,EAAE;QAC9C,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;KACpC,CAAC,CAAC,CAAC;AACN,CAAC,CAAC;AAEF,iIAAiI;AACjI,MAAM,QAAQ,GAAG,CAAC,IAAkB,EAAE,IAAY,EAAE,MAAc,EAA8B,EAAE;IAChG,MAAM,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACtC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,UAAU,GACd,KAAK,KAAK,IAAI;QACZ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,MAAM,EAAE;QACnC,UAAU,EAAE,KAAK;KAClB,CAAC,CAAC,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,MAAc,EAAyB,EAAE,CAC9E,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;IACtD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAEpB;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,OAAsB,EACtB,IAAgB,EAChB,QAAgB,EAChB,MAAc,EACc,EAAE;IAC9B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,KAAK;YACR,OAAO,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7C,KAAK,KAAK;YACR,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrD,KAAK,SAAS,EAAE,CAAC;YACf,IAAI,QAAQ,KAAK,cAAc;gBAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YAClF,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC9C,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAClF,OAAO,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,KAAkB,EAClB,UAAgC,EAChC,OAAwB,EACP,EAAE;IACnB,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,qBAAqB;YACxB,OAAO,OAAO,CAAC;QACjB,KAAK,wBAAwB,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC/C,OAAO,OAAO,CAAC,GAAG,CAChB,OAAO,EACP,eAAe,EACf,KAAK,CAAC,QAAQ,KAAK,KAAK;gBACtB,CAAC,CAAC,SAAS,QAAQ,CAAC,YAAY,CAAC,kBAAkB,KAAK,EAAE,CAAC,EAAE;gBAC7D,CAAC,CAAC,UAAU,KAAK,EAAE,CACtB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC"}
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../src/github/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAS9C,8BAA8B;AAC9B,MAAM,CAAC,MAAM,cAAc,GAAkB;IAC3C,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,oBAAoB,CAAC;IAC5C,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,wBAAwB,CAAC;IAChD,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,4BAA4B,CAAC;CACzD,CAAC;AAUF,gDAAgD;AAChD,MAAM,CAAC,MAAM,YAAY,GAAoC,IAAI,GAAG,CAAC;IACnE,CAAC,YAAY,EAAE,KAAK,CAAC;IACrB,CAAC,gBAAgB,EAAE,KAAK,CAAC;IACzB,CAAC,oBAAoB,EAAE,SAAS,CAAC;CAClC,CAAC,CAAC;AAYH,MAAM,QAAQ,GACZ,8HAA8H,CAAC;AAEjI,4HAA4H;AAC5H,MAAM,qBAAqB,GACzB,+FAA+F,CAAC;AAElG,MAAM,SAAS,GAAG;IAChB,CAAC,KAAK,EAAE,QAAQ,CAAC;IACjB,CAAC,SAAS,EAAE,qBAAqB,CAAC;CAC1B,CAAC;AAEX,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAE9D,MAAM,gBAAgB,GAAG,MAAM,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;AAEpE,+FAA+F;AAC/F,MAAM,QAAQ,GAAG,CACf,OAAsB,EACtB,QAAgB,EAChB,MAAc,EACc,EAAE;IAC9B,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,IAAI;YAChB,OAAO,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBAC9E,QAAQ;gBACR,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,GAAG,QAAQ,GAAG,MAAM,EAAE;gBAC9C,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;aACpC,CAAC,CAAC,CAAC;IACR,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC,CAAC;AAEF,iIAAiI;AACjI,MAAM,QAAQ,GAAG,CAAC,IAAkB,EAAE,IAAY,EAAE,MAAc,EAA8B,EAAE;IAChG,MAAM,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACtC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,UAAU,GACd,KAAK,KAAK,IAAI;QACZ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,MAAM,EAAE;QACnC,UAAU,EAAE,KAAK;KAClB,CAAC,CAAC,CAAC;AACN,CAAC,CAAC;AAEF,yDAAyD;AACzD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAsB,EAAE,CAC/D,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEtD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,MAAc,EAAyB,EAAE,CACrF,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;IACtD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAEpB;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,OAAsB,EACtB,IAAgB,EAChB,QAAgB,EAChB,MAAc,EACc,EAAE;IAC9B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,KAAK;YACR,OAAO,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7C,KAAK,KAAK;YACR,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrD,KAAK,SAAS,EAAE,CAAC;YACf,IAAI,QAAQ,KAAK,cAAc;gBAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YAClF,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC9C,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAClF,OAAO,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAAsB,EACtB,OAAe,EACf,QAAa,EACO,EAAE;IACtB,MAAM,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;IACxD,MAAM,SAAS,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CACrD,IAAI,GAAG,CAAC,UAAU,OAAO,GAAG,MAAM,GAAG,IAAI,GAAG,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACjF,OAAO,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CACrE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CACxF,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,QAAiC,EACjC,UAAgC,EAChC,OAAwB,EACP,EAAE;IACnB,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,qBAAqB;YACxB,OAAO,OAAO,CAAC;QACjB,KAAK,wBAAwB,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC/C,OAAO,OAAO,CAAC,GAAG,CAChB,OAAO,EACP,eAAe,EACf,QAAQ,KAAK,KAAK;gBAChB,CAAC,CAAC,UAAU,KAAK,EAAE;gBACnB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,CAAC,kBAAkB,KAAK,EAAE,CAAC,EAAE,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC"}