@withbuddi/buddi 0.1.0-pre.19 → 0.1.0-pre.21

package/packages/gateway/dist/ollama-accounts.d.ts

@@ -0,0 +1,87 @@
+import type { Vault } from '@buddi/core';
+import { OllamaConnectProtocol } from '@buddi/runtime';
+import type { Pool } from 'pg';
+/** What the vault holds for one connected (or connecting) device. */
+export interface OllamaDeviceEnvelope {
+    version: 1;
+    /** PKCS8 PEM. Never leaves the gateway. */
+    privateKey: string;
+    /** The authorized_keys line ollama.com shows under "Show key". */
+    publicKey: string;
+    /** What ollama.com lists the device as. */
+    deviceName: string;
+    createdAt: string;
+    /** Set the first time ollama.com answered with an account for this key. */
+    connectedAt: string | null;
+    /** The ollama.com account the key is connected to, as the server said. */
+    username: string | null;
+}
+/** What may be shown about a device: never the private key. */
+export interface OllamaDeviceView {
+    deviceName: string;
+    username: string | null;
+    connectedAt: string | null;
+}
+export declare function readOllamaDevice(raw: string): OllamaDeviceEnvelope;
+export declare function deviceView(device: OllamaDeviceEnvelope): OllamaDeviceView;
+/** "connected as amen, device buddi on studio": the line status and the card show. */
+export declare function connectedLine(device: OllamaDeviceView): string;
+/** "buddi on <this computer>", without the `.local` macOS adds. */
+export declare function ollamaDeviceName(host?: string): string;
+/** How long a connect attempt waits for the owner to press Connect. */
+export declare const OLLAMA_CONNECT_TTL_MS: number;
+export type OllamaPoll = {
+    state: 'connected';
+    username: string;
+    deviceName: string;
+} | {
+    state: 'waiting';
+    expiresAt: string;
+} | {
+    state: 'failed';
+    message: string;
+};
+/** Caller serialises account operations; this holds only the in-flight attempts. */
+export declare class OllamaAccounts {
+    #private;
+    readonly vault: Vault;
+    readonly protocol: OllamaConnectProtocol;
+    readonly now: () => number;
+    readonly deviceName: typeof ollamaDeviceName;
+    constructor(vault: Vault, protocol?: OllamaConnectProtocol, now?: () => number, deviceName?: typeof ollamaDeviceName);
+    /** A new key pair into the vault, and the page the owner presses Connect on. */
+    start(id: string, revision: number, owner: string, ref: string): Promise<{
+        state: "pending";
+        attemptId: string;
+        verificationUrl: string;
+        deviceName: string;
+        expiresAt: string;
+    }>;
+    view(id: string, revision: number, owner?: string): {
+        state: "pending";
+        attemptId: string;
+        verificationUrl: string;
+        deviceName: string;
+        expiresAt: string;
+    } | null;
+    forget(id: string): void;
+    /** One signed request: has the owner pressed Connect yet? */
+    poll(id: string, revision: number, owner: string, attemptId: string, ref: string): Promise<OllamaPoll>;
+    /**
+     * Ask ollama.com to forget this device before the key is dropped, as
+     * `ollama signout` does. Best effort: false when it could not be asked or
+     * said no, and the caller removes the key either way.
+     */
+    unpair(ref: string): Promise<boolean>;
+    /** The private key a run signs with, once the device is connected. */
+    credential(ref: string): Promise<string>;
+}
+/**
+ * The connected devices, for `buddi status`: read straight from the rows and
+ * the raw vault (a device envelope is never an owner secret). A device that
+ * cannot be read is left out, not guessed at.
+ */
+export declare function readOllamaDevices(pool: Pick<Pool, 'query'>, vault: Vault | undefined): Promise<Array<{
+    label: string;
+} & OllamaDeviceView>>;
+//# sourceMappingURL=ollama-accounts.d.ts.map

package/packages/gateway/dist/ollama-accounts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ollama-accounts.d.ts","sourceRoot":"","sources":["../src/ollama-accounts.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAA8D,MAAM,gBAAgB,CAAC;AACnH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAE/B,qEAAqE;AACrE,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,CAAC,CAAC;IACX,2CAA2C;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,+DAA+D;AAC/D,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAYlE;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,oBAAoB,GAAG,gBAAgB,CAEzE;AAED,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAI9D;AAED,mEAAmE;AACnE,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,MAAmB,GAAG,MAAM,CAGlE;AAED,uEAAuE;AACvE,eAAO,MAAM,qBAAqB,QAAc,CAAC;AAIjD,MAAM,MAAM,UAAU,GAClB;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,KAAK,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,oFAAoF;AACpF,qBAAa,cAAc;;IAGvB,QAAQ,CAAC,KAAK,EAAE,KAAK;IACrB,QAAQ,CAAC,QAAQ;IACjB,QAAQ,CAAC,GAAG;IACZ,QAAQ,CAAC,UAAU;gBAHV,KAAK,EAAE,KAAK,EACZ,QAAQ,wBAA8B,EACtC,GAAG,eAAW,EACd,UAAU,0BAAmB;IAKxC,gFAAgF;IAC1E,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;;;;;;;IAepE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;;;;;;;IAQjD,MAAM,CAAC,EAAE,EAAE,MAAM;IAEjB,6DAA6D;IACvD,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IA4B5G;;;;OAIG;IACG,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAO3C,sEAAsE;IAChE,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAK/C;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,gBAAgB,CAAC,CAAC,CAajJ"}

package/packages/gateway/dist/ollama-accounts.js

@@ -0,0 +1,179 @@
+/**
+ * Ollama Cloud, connected with a device key (buddi-planning
+ * specs/ollama-connect.md): buddi makes an ed25519 key pair, the owner presses
+ * Connect on ollama.com, and from then on each request to ollama.com is signed
+ * with the key. Nobody ever sees a key.
+ *
+ * The key pair lives in the vault, under the account's own name, as one JSON
+ * envelope. Postgres holds only that the account signs in this way.
+ */
+import { randomUUID } from 'node:crypto';
+import { hostname } from 'node:os';
+import { OllamaConnectProtocol, generateOllamaDeviceKey, ollamaConnectUrl, ollamaPublicKey } from '@buddi/runtime';
+export function readOllamaDevice(raw) {
+    try {
+        if (raw.length > 16384)
+            throw new Error();
+        const data = JSON.parse(raw);
+        if (data.version !== 1 || typeof data.privateKey !== 'string' || typeof data.publicKey !== 'string' ||
+            typeof data.deviceName !== 'string' || typeof data.createdAt !== 'string' ||
+            !(data.connectedAt === null || typeof data.connectedAt === 'string') ||
+            !(data.username === null || typeof data.username === 'string'))
+            throw new Error();
+        // The public key is derived again rather than trusted, so the two can never disagree.
+        if (ollamaPublicKey(data.privateKey) !== data.publicKey)
+            throw new Error();
+        return data;
+    }
+    catch {
+        throw new Error('Invalid Ollama device key. Connect this account again.');
+    }
+}
+export function deviceView(device) {
+    return { deviceName: device.deviceName, username: device.username, connectedAt: device.connectedAt };
+}
+/** "connected as amen, device buddi on studio": the line status and the card show. */
+export function connectedLine(device) {
+    return device.connectedAt
+        ? `connected as ${device.username || 'an ollama.com account'}, device ${device.deviceName}`
+        : `not connected yet, device ${device.deviceName}`;
+}
+/** "buddi on <this computer>", without the `.local` macOS adds. */
+export function ollamaDeviceName(host = hostname()) {
+    const short = host.replace(/\.local$/i, '').replace(/[\x00-\x1f\x7f]/g, '').trim().slice(0, 60);
+    return short ? `buddi on ${short}` : 'buddi';
+}
+/** How long a connect attempt waits for the owner to press Connect. */
+export const OLLAMA_CONNECT_TTL_MS = 15 * 60_000;
+/** Caller serialises account operations; this holds only the in-flight attempts. */
+export class OllamaAccounts {
+    vault;
+    protocol;
+    now;
+    deviceName;
+    #pending = new Map();
+    constructor(vault, protocol = new OllamaConnectProtocol(), now = Date.now, deviceName = ollamaDeviceName) {
+        this.vault = vault;
+        this.protocol = protocol;
+        this.now = now;
+        this.deviceName = deviceName;
+    }
+    #prune() { for (const [id, p] of this.#pending)
+        if (p.expiresAt <= this.now())
+            this.#pending.delete(id); }
+    /** A new key pair into the vault, and the page the owner presses Connect on. */
+    async start(id, revision, owner, ref) {
+        this.#prune();
+        if (this.#pending.size >= 128 && !this.#pending.has(id))
+            throw new Error('Too many connections waiting. Cancel one or wait 15 minutes.');
+        const key = generateOllamaDeviceKey();
+        const name = this.deviceName();
+        const envelope = {
+            version: 1, privateKey: key.privateKey, publicKey: key.publicKey, deviceName: name,
+            createdAt: new Date(this.now()).toISOString(), connectedAt: null, username: null,
+        };
+        try {
+            await this.vault.set(ref, JSON.stringify(envelope));
+        }
+        catch {
+            throw new Error('Could not save the Ollama device key securely. Unlock the vault and try again.');
+        }
+        this.#pending.set(id, { attemptId: randomUUID(), owner, revision, expiresAt: this.now() + OLLAMA_CONNECT_TTL_MS, url: ollamaConnectUrl(key.publicKey, name), deviceName: name });
+        return this.view(id, revision, owner);
+    }
+    view(id, revision, owner) {
+        this.#prune();
+        const p = this.#pending.get(id);
+        return p && p.owner === owner && p.revision === revision ? {
+            state: 'pending', attemptId: p.attemptId, verificationUrl: p.url, deviceName: p.deviceName,
+            expiresAt: new Date(p.expiresAt).toISOString(),
+        } : null;
+    }
+    forget(id) { this.#pending.delete(id); }
+    /** One signed request: has the owner pressed Connect yet? */
+    async poll(id, revision, owner, attemptId, ref) {
+        const p = this.#pending.get(id);
+        if (!p || p.owner !== owner || p.revision !== revision || p.attemptId !== attemptId) {
+            return { state: 'failed', message: 'This connection changed or belongs to another session. Connect again.' };
+        }
+        if (p.expiresAt <= this.now()) {
+            this.#pending.delete(id);
+            return { state: 'failed', message: 'The 15 minutes to press Connect ran out. Connect again.' };
+        }
+        const device = await this.#device(ref);
+        const answer = await this.protocol.whoami(device.privateKey);
+        if (answer.state === 'waiting')
+            return { state: 'waiting', expiresAt: new Date(p.expiresAt).toISOString() };
+        this.#pending.delete(id);
+        if (answer.state === 'failed')
+            return answer;
+        const connected = { ...device, connectedAt: new Date(this.now()).toISOString(), username: answer.username };
+        try {
+            await this.vault.set(ref, JSON.stringify(connected));
+        }
+        catch {
+            return { state: 'failed', message: 'Connected, but the vault refused the update. Unlock it and connect again.' };
+        }
+        return { state: 'connected', username: answer.username, deviceName: device.deviceName };
+    }
+    async #device(ref) {
+        let raw;
+        try {
+            raw = await this.vault.get(ref);
+        }
+        catch {
+            throw new Error('The credential vault is unavailable or locked. Unlock it on the host and retry.');
+        }
+        if (!raw)
+            throw new Error('Connect this Ollama account first.');
+        return readOllamaDevice(raw);
+    }
+    /**
+     * Ask ollama.com to forget this device before the key is dropped, as
+     * `ollama signout` does. Best effort: false when it could not be asked or
+     * said no, and the caller removes the key either way.
+     */
+    async unpair(ref) {
+        let device;
+        try {
+            device = await this.#device(ref);
+        }
+        catch {
+            return false;
+        }
+        if (!device.connectedAt)
+            return false;
+        return this.protocol.forget(device.privateKey);
+    }
+    /** The private key a run signs with, once the device is connected. */
+    async credential(ref) {
+        const device = await this.#device(ref);
+        if (!device.connectedAt)
+            throw new Error('Connect this Ollama account first.');
+        return device.privateKey;
+    }
+}
+/**
+ * The connected devices, for `buddi status`: read straight from the rows and
+ * the raw vault (a device envelope is never an owner secret). A device that
+ * cannot be read is left out, not guessed at.
+ */
+export async function readOllamaDevices(pool, vault) {
+    if (!vault)
+        return [];
+    const { rows } = await pool.query(`select label, secret_ref as "secretRef" from core.provider_accounts
+    where auth = 'device-key' and deleting = false order by created_at, id`);
+    const found = [];
+    for (const row of rows) {
+        if (!row.secretRef)
+            continue;
+        try {
+            const raw = await vault.get(row.secretRef);
+            if (raw)
+                found.push({ label: row.label, ...deviceView(readOllamaDevice(raw)) });
+        }
+        catch { /* unreadable: left out */ }
+    }
+    return found;
+}
+//# sourceMappingURL=ollama-accounts.js.map

package/packages/gateway/dist/ollama-accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ollama-accounts.js","sourceRoot":"","sources":["../src/ollama-accounts.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AA0BnH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,GAAG,KAAK;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACrD,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;YACjG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;YACzE,CAAC,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC;YACpE,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACpF,sFAAsF;QACtF,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAA4B;IACrD,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;AACvG,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,aAAa,CAAC,MAAwB;IACpD,OAAO,MAAM,CAAC,WAAW;QACvB,CAAC,CAAC,gBAAgB,MAAM,CAAC,QAAQ,IAAI,uBAAuB,YAAY,MAAM,CAAC,UAAU,EAAE;QAC3F,CAAC,CAAC,6BAA6B,MAAM,CAAC,UAAU,EAAE,CAAC;AACvD,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,gBAAgB,CAAC,OAAe,QAAQ,EAAE;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChG,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/C,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,MAAM,CAAC;AASjD,oFAAoF;AACpF,MAAM,OAAO,cAAc;IAGd;IACA;IACA;IACA;IALX,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,YACW,KAAY,EACZ,WAAW,IAAI,qBAAqB,EAAE,EACtC,MAAM,IAAI,CAAC,GAAG,EACd,aAAa,gBAAgB;QAH7B,UAAK,GAAL,KAAK,CAAO;QACZ,aAAQ,GAAR,QAAQ,CAA8B;QACtC,QAAG,GAAH,GAAG,CAAW;QACd,eAAU,GAAV,UAAU,CAAmB;IACrC,CAAC;IAEJ,MAAM,KAAK,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAE1G,gFAAgF;IAChF,KAAK,CAAC,KAAK,CAAC,EAAU,EAAE,QAAgB,EAAE,KAAa,EAAE,GAAW;QAClE,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACzI,MAAM,GAAG,GAAG,uBAAuB,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAyB;YACrC,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI;YAClF,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI;SACjF,CAAC;QACF,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAC,CAAC;QAC5D,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;QAAC,CAAC;QAC5G,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,qBAAqB,EAAE,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACjL,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAE,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,EAAU,EAAE,QAAgB,EAAE,KAAc;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;QAAC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC;YACzD,KAAK,EAAE,SAAkB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;YACnG,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;SAC/C,CAAC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAED,MAAM,CAAC,EAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEhD,6DAA6D;IAC7D,KAAK,CAAC,IAAI,CAAC,EAAU,EAAE,QAAgB,EAAE,KAAa,EAAE,SAAiB,EAAE,GAAW;QACpF,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACpF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,uEAAuE,EAAE,CAAC;QAC/G,CAAC;QACD,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC;QACjG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5G,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;QAC7C,MAAM,SAAS,GAAyB,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClI,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QAAC,CAAC;QAC7D,MAAM,CAAC;YAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,2EAA2E,EAAE,CAAC;QAAC,CAAC;QAC3H,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;IAC1F,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAW;QACvB,IAAI,GAAkB,CAAC;QACvB,IAAI,CAAC;YAAC,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QACxC,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;QAAC,CAAC;QAC7G,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAChE,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,MAA4B,CAAC;QACjC,IAAI,CAAC;YAAC,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACtC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,UAAU,CAAC,GAAW;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC/E,OAAO,MAAM,CAAC,UAAU,CAAC;IAC3B,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAyB,EAAE,KAAwB;IACzF,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;2EACuC,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAgD,EAAE,CAAC;IAC9D,KAAK,MAAM,GAAG,IAAI,IAA0D,EAAE,CAAC;QAC7E,IAAI,CAAC,GAAG,CAAC,SAAS;YAAE,SAAS;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC3C,IAAI,GAAG;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/packages/gateway/dist/provider-accounts.d.ts

@@ -1,9 +1,10 @@
 import { type AgentCatalog, type LoadAgentCatalogOptions, type ProviderAccountsAccess, type ProviderRef, type ResolvedProvider, type Vault } from '@buddi/core';
-import { listProviderModels, type AccountModels, type RuntimeProvider } from '@buddi/runtime';
+import { listProviderModels, type AccountModels, type OllamaConnectProtocol, type RuntimeProvider } from '@buddi/runtime';
 import type { Pool } from 'pg';
 import { type ProviderDiagnostic } from './provider-diagnostics.js';
 import { CodexAccounts } from './codex-accounts.js';
 import { AnthropicAccounts } from './anthropic-accounts.js';
+import { OllamaAccounts, type OllamaDeviceView } from './ollama-accounts.js';
 type Binding = {
     agentId: string;
     accountId: string;
@@ -59,10 +60,17 @@ export declare class ProviderAccounts {
         vault?: Vault;
         test?: (resolved: ResolvedProvider) => Promise<void>;
         listModels?: typeof listProviderModels;
+        /** The one signed `/api/me` call and the device name, replaceable in tests. */
+        ollama?: {
+            protocol?: OllamaConnectProtocol;
+            deviceName?: () => string;
+            now?: () => number;
+        };
     };
     readonly vault: Vault | undefined;
     readonly codex: CodexAccounts | undefined;
     readonly anthropic: AnthropicAccounts | undefined;
+    readonly ollama: OllamaAccounts | undefined;
     /** The vault the OAuth adapters see, with account names translated onto owner secrets. */
     readonly accountVault: Vault | undefined;
     constructor(deps: {
@@ -73,6 +81,12 @@ export declare class ProviderAccounts {
         vault?: Vault;
         test?: (resolved: ResolvedProvider) => Promise<void>;
         listModels?: typeof listProviderModels;
+        /** The one signed `/api/me` call and the device name, replaceable in tests. */
+        ollama?: {
+            protocol?: OllamaConnectProtocol;
+            deviceName?: () => string;
+            now?: () => number;
+        };
     });
     get anthropicOAuthEnabled(): boolean;
     initialize(): Promise<void>;
@@ -89,9 +103,14 @@ export declare class ProviderAccounts {
         };
         codexEnabled: boolean;
         anthropicOAuthEnabled: boolean;
+        gemini: {
+            baseUrl: string;
+            keyUrl: string;
+        };
         accounts: {
             assignedAgents: string[];
             test: TestResult | null;
+            device?: OllamaDeviceView | null | undefined;
             login?: import("./codex-accounts.js").CodexLoginView | {
                 state: "pending";
                 attemptId: string;
@@ -102,6 +121,7 @@ export declare class ProviderAccounts {
             reconnectRequired?: boolean | undefined;
             configured: boolean;
             detectedContextWindowTokens: number;
+            detectedContextWindowSource: "provider" | "table";
             removalPending: boolean;
             refreshable: boolean;
             subscriptionRenewsAt: null;
@@ -159,6 +179,36 @@ export declare class ProviderAccounts {
     } | {
         completed: boolean;
     } | null>;
+    /**
+     * Ollama Cloud with a device key: `connect` makes a key pair in the vault and
+     * answers with the page to press Connect on; `poll` asks ollama.com once
+     * whether that happened; `disconnect` removes the key from the vault. The
+     * device stays listed on ollama.com until the owner removes it there.
+     */
+    ollamaAction(id: string, action: 'connect' | 'poll' | 'disconnect', body: {
+        revision?: unknown;
+        attemptId?: unknown;
+    }, owner: string): Promise<{
+        state: "connected";
+        username: string;
+        deviceName: string;
+    } | {
+        state: "waiting";
+        expiresAt: string;
+    } | {
+        state: "failed";
+        message: string;
+    } | {
+        state: "pending";
+        attemptId: string;
+        verificationUrl: string;
+        deviceName: string;
+        expiresAt: string;
+    } | {
+        removed: boolean;
+        unpaired: boolean;
+        note: string;
+    }>;
     codexAction(id: string, action: 'login' | 'cancel-login' | 'logout', revision: unknown): Promise<import("./codex-accounts.js").CodexLoginView | {
         cancelled: boolean;
         removed?: undefined;

package/packages/gateway/dist/provider-accounts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-accounts.d.ts","sourceRoot":"","sources":["../src/provider-accounts.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,uBAAuB,EAAwB,KAAK,sBAAsB,EAAE,KAAK,WAAW,EAAE,KAAK,gBAAgB,EAAE,KAAK,KAAK,EACrI,MAAM,aAAa,CAAC;AACrB,OAAO,EAA6D,kBAAkB,EAAuB,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC9K,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAE/B,OAAO,EAAsB,KAAK,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACxF,OAAO,EAAE,aAAa,EAA2B,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAK5D,KAAK,OAAO,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AACrE,KAAK,UAAU,GAAG,kBAAkB,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAwB7D,QAAA,MAAM,MAAM;;;;;;;;;;;;;;;;;;EAIF,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,aAAa,EAAE,CAErF;AAED,qBAAa,oBAAqB,SAAQ,KAAK;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CACrD;AAED,qFAAqF;AACrF,qBAAa,gBAAgB;;IAgBf,QAAQ,CAAC,IAAI,EAAE;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;QAC9D,OAAO,EAAE,MAAM,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,CAAC;QAC/D,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,UAAU,CAAC,EAAE,OAAO,kBAAkB,CAAC;KACxC;IApBD,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAWlD,0FAA0F;IAC1F,QAAQ,CAAC,YAAY,EAAE,KAAK,GAAG,SAAS,CAAC;gBACpB,IAAI,EAAE;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;QAC9D,OAAO,EAAE,MAAM,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,CAAC;QAC/D,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,UAAU,CAAC,EAAE,OAAO,kBAAkB,CAAC;KACxC;IAwBD,IAAI,qBAAqB,YAA4E;IAE/F,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAiD3B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAsB3B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAExB,SAAS,EAAE,WAAW,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,CAAC,CAclE;IAEF,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA+BpB,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,UAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;IAkCjE;;;;;;;OAOG;IACG,WAAW,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;IAgBxD,IAAI,CAAC,IAAI,EAAE,OAAO;;;;IAsElB,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO;;;;IAkBrC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;;;IAwBnC,kFAAkF;IAClF,QAAQ,CAAC,GAAG,EAAE,WAAW,GAAG,eAAe;IAsBrC,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAuB3C;;;;OAIG;IACH,YAAY,IAAI,sBAAsB;IAsGtC,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,gBAAgB,GAAG,cAAc,GAAG,QAAQ,EAAE,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,KAAK,EAAE,MAAM;;;;;;;;IAmE5K,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,cAAc,GAAG,QAAQ,EAAE,QAAQ,EAAE,OAAO;;;;;;;CAyBvF"}
+{"version":3,"file":"provider-accounts.d.ts","sourceRoot":"","sources":["../src/provider-accounts.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,uBAAuB,EAAwB,KAAK,sBAAsB,EAAE,KAAK,WAAW,EAAE,KAAK,gBAAgB,EAAE,KAAK,KAAK,EACrI,MAAM,aAAa,CAAC;AACrB,OAAO,EAA6D,kBAAkB,EAAwC,KAAK,aAAa,EAAE,KAAK,qBAAqB,EAAE,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3N,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAE/B,OAAO,EAAsB,KAAK,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACxF,OAAO,EAAE,aAAa,EAA2B,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAgC,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAc3G,KAAK,OAAO,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AACrE,KAAK,UAAU,GAAG,kBAAkB,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAwB7D,QAAA,MAAM,MAAM;;;;;;;;;;;;;;;;;;EAIF,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,aAAa,EAAE,CAErF;AAED,qBAAa,oBAAqB,SAAQ,KAAK;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CACrD;AAED,qFAAqF;AACrF,qBAAa,gBAAgB;;IAkBf,QAAQ,CAAC,IAAI,EAAE;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;QAC9D,OAAO,EAAE,MAAM,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,CAAC;QAC/D,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,UAAU,CAAC,EAAE,OAAO,kBAAkB,CAAC;QACvC,+EAA+E;QAC/E,MAAM,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,qBAAqB,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC;YAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;SAAE,CAAC;KAC9F;IAxBD,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,CAAC;IAY5C,0FAA0F;IAC1F,QAAQ,CAAC,YAAY,EAAE,KAAK,GAAG,SAAS,CAAC;gBACpB,IAAI,EAAE;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;QAC9D,OAAO,EAAE,MAAM,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,CAAC;QAC/D,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,UAAU,CAAC,EAAE,OAAO,kBAAkB,CAAC;QACvC,+EAA+E;QAC/E,MAAM,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,qBAAqB,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC;YAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;SAAE,CAAC;KAC9F;IAyBD,IAAI,qBAAqB,YAA4E;IAE/F,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAiD3B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAiC3B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAExB,SAAS,EAAE,WAAW,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,CAAC,CAelE;IAEF,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;yCAe8C,UAAU,GAAG,OAAO;;;;;;;;;;;;;;;;IAuBtF,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,UAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;IA0DjE;;;;;;;OAOG;IACG,WAAW,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;IAgBxD,IAAI,CAAC,IAAI,EAAE,OAAO;;;;IA4ElB,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO;;;;IAkBrC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;;;IAyBnC,kFAAkF;IAClF,QAAQ,CAAC,GAAG,EAAE,WAAW,GAAG,eAAe;IAwBrC,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAuB3C;;;;OAIG;IACH,YAAY,IAAI,sBAAsB;IA+GtC,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,gBAAgB,GAAG,cAAc,GAAG,QAAQ,EAAE,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,KAAK,EAAE,MAAM;;;;;;;;IA2B5K;;;;;OAKG;IACH,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,YAAY,EAAE,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,KAAK,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;IAgFpI,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,cAAc,GAAG,QAAQ,EAAE,QAAQ,EAAE,OAAO;;;;;;;CA+BvF"}