github-issue-tower-defence-management 1.127.0 → 1.128.1

package/src/adapter/proxy/RateLimitCache.test.ts

@@ -4,13 +4,17 @@ import * as path from 'path';
 import {
   cacheDir,
   cachePathForToken,
+  FABLE_LIMIT_TYPE,
   hashToken,
   HEADERLESS_429_DEFAULT_COOLDOWN_SECONDS,
   HEADERLESS_429_MAX_COOLDOWN_SECONDS,
+  isFableModel,
   parseModelRateLimitsFromBody,
   parseModelRateLimitsFromHeaders,
+  parseSevenDayRejection,
   PERMISSION_DISABLED_COOLDOWN_SECONDS,
   readRateLimit,
+  writeFableRejection,
   writeModelRateLimit,
   writeRateLimit,
   writeSubscriptionDisabled,
@@ -699,6 +703,149 @@ describe('RateLimitCache', () => {
     });
   });
 
+  describe('isFableModel', () => {
+    it('should return true for the fable model id', () => {
+      expect(isFableModel('claude-fable-5')).toBe(true);
+    });
+
+    it('should be case insensitive', () => {
+      expect(isFableModel('Claude-FABLE-5')).toBe(true);
+    });
+
+    it('should return false for sonnet and opus models', () => {
+      expect(isFableModel('claude-sonnet-4-6')).toBe(false);
+      expect(isFableModel('claude-opus-4-8')).toBe(false);
+    });
+
+    it('should return false for a null model', () => {
+      expect(isFableModel(null)).toBe(false);
+    });
+  });
+
+  describe('writeFableRejection', () => {
+    it('should persist a rejected fable weekly limit readable by readRateLimit', () => {
+      const token = 'fable-rejection-token';
+      const nowEpochSeconds = Date.now() / 1000;
+      writeFableRejection(token, 120);
+      const snapshot = readRateLimit(token);
+      const fableLimit = snapshot?.modelWeeklyLimits[FABLE_LIMIT_TYPE];
+      expect(fableLimit?.rejected).toBe(true);
+      expect(fableLimit?.resetsAt).toBeGreaterThanOrEqual(
+        nowEpochSeconds + 120,
+      );
+      expect(fableLimit?.resetsAt).toBeLessThanOrEqual(
+        nowEpochSeconds + 120 + 5,
+      );
+    });
+
+    it('should cap the reset from an oversized retry-after at the max cooldown', () => {
+      const token = 'fable-rejection-cap-token';
+      const nowEpochSeconds = Date.now() / 1000;
+      writeFableRejection(token, HEADERLESS_429_MAX_COOLDOWN_SECONDS + 10_000);
+      const fableLimit =
+        readRateLimit(token)?.modelWeeklyLimits[FABLE_LIMIT_TYPE];
+      expect(fableLimit?.resetsAt).toBeLessThanOrEqual(
+        nowEpochSeconds + HEADERLESS_429_MAX_COOLDOWN_SECONDS + 5,
+      );
+    });
+
+    it('should use the default cooldown when retry-after is absent', () => {
+      const token = 'fable-rejection-default-token';
+      const nowEpochSeconds = Date.now() / 1000;
+      writeFableRejection(token, null);
+      const fableLimit =
+        readRateLimit(token)?.modelWeeklyLimits[FABLE_LIMIT_TYPE];
+      expect(fableLimit?.resetsAt).toBeGreaterThanOrEqual(
+        nowEpochSeconds + HEADERLESS_429_DEFAULT_COOLDOWN_SECONDS,
+      );
+      expect(fableLimit?.resetsAt).toBeLessThanOrEqual(
+        nowEpochSeconds + HEADERLESS_429_DEFAULT_COOLDOWN_SECONDS + 5,
+      );
+    });
+
+    it('should preserve other model weekly limits already recorded', () => {
+      const token = 'fable-rejection-merge-token';
+      writeModelRateLimit(token, {
+        seven_day_sonnet: { rejected: true, resetsAt: 1779642000 },
+      });
+      writeFableRejection(token, 90);
+      const limits = readRateLimit(token)?.modelWeeklyLimits;
+      expect(limits?.seven_day_sonnet).toEqual({
+        rejected: true,
+        resetsAt: 1779642000,
+      });
+      expect(limits?.[FABLE_LIMIT_TYPE]?.rejected).toBe(true);
+    });
+
+    it('should use the seven-day reset for resetsAt when provided instead of the retry-after cooldown', () => {
+      const token = 'fable-rejection-sevenday-reset-token';
+      const sevenDayReset = 1893456000;
+      writeFableRejection(token, 120, sevenDayReset);
+      const fableLimit =
+        readRateLimit(token)?.modelWeeklyLimits[FABLE_LIMIT_TYPE];
+      expect(fableLimit?.rejected).toBe(true);
+      expect(fableLimit?.resetsAt).toBe(sevenDayReset);
+    });
+
+    it('should fall back to the retry-after cooldown when the seven-day reset is null', () => {
+      const token = 'fable-rejection-null-reset-token';
+      const nowEpochSeconds = Date.now() / 1000;
+      writeFableRejection(token, 120, null);
+      const fableLimit =
+        readRateLimit(token)?.modelWeeklyLimits[FABLE_LIMIT_TYPE];
+      expect(fableLimit?.resetsAt).toBeGreaterThanOrEqual(
+        nowEpochSeconds + 120,
+      );
+      expect(fableLimit?.resetsAt).toBeLessThanOrEqual(
+        nowEpochSeconds + 120 + 5,
+      );
+    });
+  });
+
+  describe('parseSevenDayRejection', () => {
+    it('should report a rejection and the reset epoch when the 7-day status is rejected', () => {
+      expect(
+        parseSevenDayRejection({
+          'anthropic-ratelimit-unified-7d-status': 'rejected',
+          'anthropic-ratelimit-unified-7d-reset': '1893456000',
+        }),
+      ).toEqual({ sevenDayRejected: true, sevenDayReset: 1893456000 });
+    });
+
+    it('should report no rejection when only the 5-hour status is rejected', () => {
+      expect(
+        parseSevenDayRejection({
+          'anthropic-ratelimit-unified-5h-status': 'rejected',
+          'anthropic-ratelimit-unified-7d-status': 'allowed',
+        }),
+      ).toEqual({ sevenDayRejected: false, sevenDayReset: null });
+    });
+
+    it('should report no rejection when no rate-limit headers are present', () => {
+      expect(parseSevenDayRejection({})).toEqual({
+        sevenDayRejected: false,
+        sevenDayReset: null,
+      });
+    });
+
+    it('should return a null reset when the 7-day status is rejected but no reset header is present', () => {
+      expect(
+        parseSevenDayRejection({
+          'anthropic-ratelimit-unified-7d-status': 'rejected',
+        }),
+      ).toEqual({ sevenDayRejected: true, sevenDayReset: null });
+    });
+
+    it('should pick the first value when a header is an array', () => {
+      expect(
+        parseSevenDayRejection({
+          'anthropic-ratelimit-unified-7d-status': ['rejected', 'allowed'],
+          'anthropic-ratelimit-unified-7d-reset': ['1893456000'],
+        }),
+      ).toEqual({ sevenDayRejected: true, sevenDayReset: 1893456000 });
+    });
+  });
+
   describe('parseModelRateLimitsFromHeaders', () => {
     it('should extract a rejected seven_day_sonnet limit from the per-model unified headers', () => {
       expect(
@@ -915,6 +1062,7 @@ describe('RateLimitCache', () => {
                   },
             subscriptionDisabled: snapshot?.subscriptionDisabled ?? false,
             unifiedRejected: snapshot?.unifiedRejected ?? false,
+            fableRejected: false,
           },
         ],
         Date.now() / 1000,

package/src/adapter/proxy/RateLimitCache.ts

@@ -28,6 +28,8 @@ export interface RateLimitSnapshot {
 
 export const PROXY_PORT = 8787;
 
+export const FABLE_LIMIT_TYPE = 'seven_day_fable';
+
 const HASH_ALGORITHM = 'sha256';
 
 export const HEADERLESS_429_DEFAULT_COOLDOWN_SECONDS = 90;
@@ -36,6 +38,12 @@ export const HEADERLESS_429_MAX_COOLDOWN_SECONDS = 600;
 
 export const PERMISSION_DISABLED_COOLDOWN_SECONDS = 3600;
 
+const FIVE_HOUR_STATUS_HEADER = 'anthropic-ratelimit-unified-5h-status';
+
+const SEVEN_DAY_STATUS_HEADER = 'anthropic-ratelimit-unified-7d-status';
+
+const SEVEN_DAY_RESET_HEADER = 'anthropic-ratelimit-unified-7d-reset';
+
 export const cacheDir = (): string => {
   const base = process.env.XDG_CACHE_HOME ?? path.join(os.homedir(), '.cache');
   return path.join(base, 'tdpm', 'ratelimit');
@@ -182,6 +190,51 @@ export const writeModelRateLimit = (
   fs.writeFileSync(filePath, JSON.stringify(payload));
 };
 
+export const isFableModel = (modelName: string | null): boolean =>
+  (modelName ?? '').toLowerCase().includes('fable');
+
+export interface SevenDayRejectionSignal {
+  sevenDayRejected: boolean;
+  sevenDayReset: number | null;
+}
+
+const pickHeaderValue = (
+  headers: Record<string, string | string[] | undefined>,
+  key: string,
+): string | undefined => {
+  const value = headers[key];
+  return Array.isArray(value) ? value[0] : value;
+};
+
+export const parseSevenDayRejection = (
+  headers: Record<string, string | string[] | undefined>,
+): SevenDayRejectionSignal => {
+  const status = pickHeaderValue(headers, SEVEN_DAY_STATUS_HEADER);
+  const resetRaw = pickHeaderValue(headers, SEVEN_DAY_RESET_HEADER);
+  const sevenDayReset =
+    resetRaw !== undefined && Number.isFinite(Number(resetRaw))
+      ? Number(resetRaw)
+      : null;
+  return {
+    sevenDayRejected: status === 'rejected',
+    sevenDayReset,
+  };
+};
+
+export const writeFableRejection = (
+  token: string,
+  retryAfterSeconds: number | null,
+  sevenDayReset: number | null = null,
+): void => {
+  const resetsAt =
+    sevenDayReset !== null && sevenDayReset > 0
+      ? sevenDayReset
+      : cooldownEndFromRetryAfter(retryAfterSeconds, Date.now() / 1000);
+  writeModelRateLimit(token, {
+    [FABLE_LIMIT_TYPE]: { rejected: true, resetsAt },
+  });
+};
+
 export const writeSubscriptionDisabled = (
   token: string,
   baseDir: string = cacheDir(),
@@ -283,8 +336,8 @@ export const readRateLimit = (
       return Number.isFinite(parsedValue) ? parsedValue : 0;
     };
     const status = headers['anthropic-ratelimit-unified-status'];
-    const fiveHourStatus = headers['anthropic-ratelimit-unified-5h-status'];
-    const sevenDayStatus = headers['anthropic-ratelimit-unified-7d-status'];
+    const fiveHourStatus = headers[FIVE_HOUR_STATUS_HEADER];
+    const sevenDayStatus = headers[SEVEN_DAY_STATUS_HEADER];
     const overageDisabledReason =
       headers['anthropic-ratelimit-unified-overage-disabled-reason'];
     const unifiedRejected = status === 'rejected';
@@ -309,7 +362,7 @@ export const readRateLimit = (
       fiveHourUtilization: num('anthropic-ratelimit-unified-5h-utilization'),
       fiveHourReset: num('anthropic-ratelimit-unified-5h-reset'),
       sevenDayUtilization: num('anthropic-ratelimit-unified-7d-utilization'),
-      sevenDayReset: num('anthropic-ratelimit-unified-7d-reset'),
+      sevenDayReset: num(SEVEN_DAY_RESET_HEADER),
       blocked:
         status === 'blocked' ||
         fiveHourStatus === 'blocked' ||

package/src/adapter/proxy/proxyEntry.test.ts

@@ -103,6 +103,7 @@ describe('startProxy', () => {
   let proxyPort = 0;
   let writeRateLimitSpy: jest.SpyInstance;
   let writeModelRateLimitSpy: jest.SpyInstance;
+  let writeFableRejectionSpy: jest.SpyInstance;
 
   const listen = (server: http.Server): Promise<number> =>
     new Promise((resolve) => {
@@ -191,6 +192,9 @@ describe('startProxy', () => {
     writeModelRateLimitSpy = jest
       .spyOn(RateLimitCache, 'writeModelRateLimit')
       .mockImplementation(() => undefined);
+    writeFableRejectionSpy = jest
+      .spyOn(RateLimitCache, 'writeFableRejection')
+      .mockImplementation(() => undefined);
 
     proxyPort = await new Promise<number>((resolve) => {
       const probe = http.createServer();
@@ -207,6 +211,7 @@ describe('startProxy', () => {
     httpsRequestImpl = null;
     writeRateLimitSpy.mockRestore();
     writeModelRateLimitSpy.mockRestore();
+    writeFableRejectionSpy.mockRestore();
     await closeServer(proxyServer);
     await closeServer(upstreamServer);
   });
@@ -308,6 +313,127 @@ describe('startProxy', () => {
     );
   });
 
+  it('should mark the fable weekly limit when a fable 429 carries a rejected 7-day status, using the 7-day reset', async () => {
+    const sevenDayReset = 1893456000;
+    upstreamHandler = (_request, response) => {
+      response.writeHead(429, {
+        'content-type': 'application/json',
+        'retry-after': '120',
+        'anthropic-ratelimit-unified-7d-status': 'rejected',
+        'anthropic-ratelimit-unified-7d-reset': String(sevenDayReset),
+      });
+      response.end('{"type":"error","error":{"type":"rate_limit_error"}}');
+    };
+
+    const response = await requestThroughProxy(
+      'POST',
+      '/v1/messages',
+      JSON.stringify({ model: 'claude-fable-5', messages: [] }),
+    );
+
+    expect(response.statusCode).toBe(429);
+    expect(writeFableRejectionSpy).toHaveBeenCalledTimes(1);
+    expect(writeFableRejectionSpy).toHaveBeenCalledWith(
+      TOKEN,
+      120,
+      sevenDayReset,
+    );
+  });
+
+  it('should fall back to retry-after for the reset when a rejected 7-day status carries no 7-day reset header', async () => {
+    upstreamHandler = (_request, response) => {
+      response.writeHead(429, {
+        'content-type': 'application/json',
+        'retry-after': '120',
+        'anthropic-ratelimit-unified-7d-status': 'rejected',
+      });
+      response.end('{"type":"error","error":{"type":"rate_limit_error"}}');
+    };
+
+    const response = await requestThroughProxy(
+      'POST',
+      '/v1/messages',
+      JSON.stringify({ model: 'claude-fable-5', messages: [] }),
+    );
+
+    expect(response.statusCode).toBe(429);
+    expect(writeFableRejectionSpy).toHaveBeenCalledTimes(1);
+    expect(writeFableRejectionSpy).toHaveBeenCalledWith(TOKEN, 120, null);
+  });
+
+  it('should not mark the fable weekly limit when a fable 429 is a 5-hour rejection without a 7-day rejection', async () => {
+    upstreamHandler = (_request, response) => {
+      response.writeHead(429, {
+        'content-type': 'application/json',
+        'retry-after': '120',
+        'anthropic-ratelimit-unified-5h-status': 'rejected',
+        'anthropic-ratelimit-unified-7d-status': 'allowed',
+      });
+      response.end('{"type":"error","error":{"type":"rate_limit_error"}}');
+    };
+
+    const response = await requestThroughProxy(
+      'POST',
+      '/v1/messages',
+      JSON.stringify({ model: 'claude-fable-5', messages: [] }),
+    );
+
+    expect(response.statusCode).toBe(429);
+    expect(writeFableRejectionSpy).not.toHaveBeenCalled();
+  });
+
+  it('should not mark the fable weekly limit when a fable 429 carries no rate-limit rejection headers', async () => {
+    upstreamHandler = (_request, response) => {
+      response.writeHead(429, { 'content-type': 'application/json' });
+      response.end('{"type":"error","error":{"type":"rate_limit_error"}}');
+    };
+
+    const response = await requestThroughProxy(
+      'POST',
+      '/v1/messages',
+      JSON.stringify({ model: 'claude-fable-5', messages: [] }),
+    );
+
+    expect(response.statusCode).toBe(429);
+    expect(writeFableRejectionSpy).not.toHaveBeenCalled();
+  });
+
+  it('should not mark the fable weekly limit when a non-fable request is rejected with a 7-day-rejected 429', async () => {
+    upstreamHandler = (_request, response) => {
+      response.writeHead(429, {
+        'content-type': 'application/json',
+        'anthropic-ratelimit-unified-7d-status': 'rejected',
+        'anthropic-ratelimit-unified-7d-reset': '1893456000',
+      });
+      response.end('{"type":"error","error":{"type":"rate_limit_error"}}');
+    };
+
+    const response = await requestThroughProxy(
+      'POST',
+      '/v1/messages',
+      JSON.stringify({ model: 'claude-sonnet-4-6', messages: [] }),
+    );
+
+    expect(response.statusCode).toBe(429);
+    expect(writeFableRejectionSpy).not.toHaveBeenCalled();
+  });
+
+  it('should not mark the fable weekly limit when a fable request succeeds', async () => {
+    upstreamHandler = (_request, response) => {
+      response.writeHead(200, { 'content-type': 'application/json' });
+      response.end('{"model":"claude-fable-5"}');
+    };
+
+    const response = await requestThroughProxy(
+      'POST',
+      '/v1/messages',
+      JSON.stringify({ model: 'claude-fable-5', messages: [] }),
+    );
+
+    expect(response.statusCode).toBe(200);
+    expect(writeFableRejectionSpy).not.toHaveBeenCalled();
+  });
+
   it('should forward non-SSE responses without crashing', async () => {
     upstreamHandler = (_request, response) => {
       response.writeHead(200, { 'content-type': 'application/json' });

package/src/adapter/proxy/proxyEntry.ts

@@ -3,7 +3,10 @@ import * as https from 'https';
 import {
   PROXY_PORT,
   hashToken,
+  isFableModel,
   parseModelRateLimitsFromBody,
+  parseSevenDayRejection,
+  writeFableRejection,
   writeModelRateLimit,
   writeRateLimit,
   writeSubscriptionDisabled,
@@ -46,12 +49,49 @@ const isPermissionError = (body: string): boolean => {
   return error.type === 'permission_error';
 };
 
+const matchModelInBody = (requestBody: string): string | null => {
+  const match = requestBody.match(/"model"\s*:\s*"([^"]+)"/);
+  return match !== null ? match[1] : null;
+};
+
+const extractRequestModel = (requestBody: string): string | null => {
+  try {
+    const parsed: unknown = JSON.parse(requestBody);
+    if (isRecord(parsed) && typeof parsed.model === 'string') {
+      return parsed.model;
+    }
+    return null;
+  } catch {
+    return matchModelInBody(requestBody);
+  }
+};
+
+const parseRetryAfterSeconds = (
+  headers: http.IncomingHttpHeaders,
+): number | null => {
+  const raw = headers['retry-after'];
+  const value =
+    typeof raw === 'string' ? raw : Array.isArray(raw) ? raw[0] : null;
+  if (typeof value !== 'string') return null;
+  const parsed = Number(value);
+  return Number.isFinite(parsed) ? parsed : null;
+};
+
 const startProxy = (
   port: number,
   claudeMessageResponseRepository: ClaudeMessageResponseRepository | null = null,
 ): http.Server => {
   const server = http.createServer((clientRequest, clientResponse) => {
     const token = extractToken(clientRequest.headers['authorization']);
+    const requestChunks: Uint8Array[] = [];
+    let requestBytes = 0;
+    if (token !== null) {
+      clientRequest.on('data', (chunk: Buffer) => {
+        if (requestBytes >= MAX_INSPECTED_BODY_BYTES) return;
+        requestChunks.push(new Uint8Array(chunk));
+        requestBytes += chunk.length;
+      });
+    }
     const upstreamHeaders: Record<string, string | string[] | undefined> = {
       ...clientRequest.headers,
       host: UPSTREAM_HOST,
@@ -105,6 +145,26 @@ const startProxy = (
                 );
               }
             }
+            if (upstreamResponse.statusCode === 429) {
+              try {
+                const requestModel = extractRequestModel(
+                  Buffer.concat(requestChunks).toString('utf8'),
+                );
+                if (isFableModel(requestModel)) {
+                  const { sevenDayRejected, sevenDayReset } =
+                    parseSevenDayRejection(upstreamResponse.headers);
+                  if (sevenDayRejected) {
+                    writeFableRejection(
+                      token,
+                      parseRetryAfterSeconds(upstreamResponse.headers),
+                      sevenDayReset,
+                    );
+                  }
+                }
+              } catch (error) {
+                console.error('Failed to write fable rejection cache:', error);
+              }
+            }
             if (claudeMessageResponseRepository !== null) {
               try {
                 const response = parseClaudeMessageResponse(

package/src/domain/usecases/InTmuxByHumanSessionTokenCountUseCase.test.ts

@@ -13,6 +13,7 @@ const candidate = (name: string): OauthTokenCandidate => ({
   snapshot: null,
   subscriptionDisabled: false,
   unifiedRejected: false,
+  fableRejected: false,
 });
 
 const session = (

package/src/domain/usecases/LiveSessionOauthTokenSelectUseCase.test.ts

@@ -24,12 +24,14 @@ const candidate = (
   snapshotValue: OauthTokenWindowSnapshot | null,
   subscriptionDisabled = false,
   unifiedRejected = false,
+  fableRejected = false,
 ): OauthTokenCandidate => ({
   name,
   token: `fake-token-${name}`,
   snapshot: snapshotValue,
   subscriptionDisabled,
   unifiedRejected,
+  fableRejected,
 });
 
 const session = (name: string, sessionKey: string): ClaudeLiveSession => ({

package/src/domain/usecases/OauthTokenSelectUseCase.test.ts

@@ -23,12 +23,14 @@ const candidate = (
   snapshotValue: OauthTokenWindowSnapshot | null,
   subscriptionDisabled = false,
   unifiedRejected = false,
+  fableRejected = false,
 ): OauthTokenCandidate => ({
   name,
   token: `fake-token-${name}`,
   snapshot: snapshotValue,
   subscriptionDisabled,
   unifiedRejected,
+  fableRejected,
 });
 
 describe('OauthTokenSelectUseCase', () => {
@@ -221,4 +223,27 @@ describe('OauthTokenSelectUseCase', () => {
     expect(rejected?.eligible).toBe(false);
     expect(rejected?.exclusionReason).toContain('rejected');
   });
+
+  it('excludes a fable-rejected token even when rate-limit windows are fully free', () => {
+    const result = useCase.run(
+      [
+        candidate('fable-out', snapshot({}), false, false, true),
+        candidate('active', snapshot({}), false, false, false),
+      ],
+      NOW,
+    );
+
+    expect(result.selected?.name).toBe('active');
+    const fableOut = result.metrics.find((m) => m.name === 'fable-out');
+    expect(fableOut?.eligible).toBe(false);
+    expect(fableOut?.exclusionReason).toContain('fable weekly limit exhausted');
+  });
+
+  it('treats a token without a fable marker as eligible for fable selection', () => {
+    const result = useCase.run([candidate('alive', snapshot({}))], NOW);
+
+    expect(result.selected?.name).toBe('alive');
+    const alive = result.metrics.find((m) => m.name === 'alive');
+    expect(alive?.eligible).toBe(true);
+  });
 });

package/src/domain/usecases/OauthTokenSelectUseCase.ts

@@ -11,6 +11,7 @@ export type OauthTokenCandidate = {
   snapshot: OauthTokenWindowSnapshot | null;
   subscriptionDisabled: boolean;
   unifiedRejected: boolean;
+  fableRejected: boolean;
 };
 
 export type OauthTokenCandidateMetrics = {
@@ -79,6 +80,7 @@ export class OauthTokenSelectUseCase {
     const exclusionReason = this.exclusionReason(
       candidate.subscriptionDisabled,
       candidate.unifiedRejected,
+      candidate.fableRejected,
       fiveHourFreeRatio,
       sevenDayFreeRatio,
     );
@@ -96,6 +98,7 @@ export class OauthTokenSelectUseCase {
   private exclusionReason = (
     subscriptionDisabled: boolean,
     unifiedRejected: boolean,
+    fableRejected: boolean,
     fiveHourFreeRatio: number,
     sevenDayFreeRatio: number,
   ): string | null => {
@@ -105,6 +108,9 @@ export class OauthTokenSelectUseCase {
     if (unifiedRejected) {
       return 'token request was rejected (anthropic-ratelimit-unified-status: rejected)';
     }
+    if (fableRejected) {
+      return 'fable weekly limit exhausted (a fable request was rejected with HTTP 429)';
+    }
     if (fiveHourFreeRatio < FIVE_HOUR_MIN_FREE_RATIO) {
       return `5h window only ${this.toPercent(fiveHourFreeRatio)}% free (requires >= ${this.toPercent(FIVE_HOUR_MIN_FREE_RATIO)}%)`;
     }

package/types/adapter/entry-points/console/webServer.d.ts

@@ -6,11 +6,15 @@ import { ImageFetcher } from './consoleImageProxy';
 export declare const DEFAULT_WEB_PORT = 9981;
 export declare const DEFAULT_DASHBOARD_PROJECT_NAMES: string[];
 export declare const CONSOLE_TOKEN_HEADER = "x-pv-token";
+export declare const CONSOLE_TOKEN_COOKIE = "pv_token";
 export declare const hasDotSegment: (requestPath: string) => boolean;
 export declare const requiresToken: (requestPath: string) => boolean;
 export declare const isConsoleAppRoute: (requestPath: string) => boolean;
 export declare const isTokenValid: (expectedToken: string, providedToken: string | null) => boolean;
-export declare const extractProvidedToken: (queryToken: string | string[] | null, headerToken: string | string[] | undefined) => string | null;
+export declare const extractCookieToken: (cookieHeader: string | undefined) => string | null;
+export declare const extractProvidedToken: (queryToken: string | string[] | null, headerToken: string | string[] | undefined, cookieToken: string | null) => string | null;
+export declare const buildTokenCookie: (token: string) => string;
+export declare const buildKeylessLocation: (requestUrl: URL) => string;
 export type WebServerOptions = {
     accessToken: string;
     uiDistDir: string;

package/types/adapter/entry-points/console/webServer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webServer.d.ts","sourceRoot":"","sources":["../../../../src/adapter/entry-points/console/webServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B,OAAO,EAAE,eAAe,EAAE,MAAM,6DAA6D,CAAC;AAM9F,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EAQvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,sBAAsB,EACtB,sBAAsB,EAMvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAqB,MAAM,qBAAqB,CAAC;AAOtE,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC,eAAO,MAAM,+BAA+B,UAA0B,CAAC;AAEvE,eAAO,MAAM,oBAAoB,eAAe,CAAC;AAmCjD,eAAO,MAAM,aAAa,GAAI,aAAa,MAAM,KAAG,OAGiB,CAAC;AAEtE,eAAO,MAAM,aAAa,GAAI,aAAa,MAAM,KAAG,OAGrB,CAAC;AAIhC,eAAO,MAAM,iBAAiB,GAAI,aAAa,MAAM,KAAG,OAmBvD,CAAC;AAEF,eAAO,MAAM,YAAY,GACvB,eAAe,MAAM,EACrB,eAAe,MAAM,GAAG,IAAI,KAC3B,OAAoE,CAAC;AAExE,eAAO,MAAM,oBAAoB,GAC/B,YAAY,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,EACpC,aAAa,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,KACzC,MAAM,GAAG,IAQX,CAAC;AAuCF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC,cAAc,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC/C,kBAAkB,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACnD,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACnD,sBAAsB,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;CACxD,CAAC;AAMF,eAAO,MAAM,sBAAsB,cAAc,CAAC;AAElD,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAInD,eAAO,MAAM,wBAAwB,GACnC,cAAc,MAAM,EACpB,aAAa,MAAM,KAClB,MAAM,GAAG,IAWX,CAAC;AAEF,eAAO,MAAM,yBAAyB,GACpC,eAAe,MAAM,EACrB,aAAa,MAAM,KAClB,MAAM,GAAG,IAeX,CAAC;AA0VF,eAAO,MAAM,uBAAuB,GAClC,SAAS,gBAAgB,EACzB,aAAa,MAAM,KAClB,MAAM,GAAG,IAeX,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAC3B,SAAS,gBAAgB,EACzB,SAAS,IAAI,CAAC,eAAe,EAC7B,UAAU,IAAI,CAAC,cAAc,KAC5B,OAAO,CAAC,IAAI,CAwEd,CAAC;AAcF,eAAO,MAAM,eAAe,GAAI,SAAS,gBAAgB,KAAG,IAAI,CAAC,MAM7D,CAAC;AAEL,MAAM,MAAM,qBAAqB,GAAG,gBAAgB,GAAG;IACrD,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,eAAO,MAAM,cAAc,GACzB,SAAS,qBAAqB,KAC7B,OAAO,CAAC,IAAI,CAAC,MAAM,CAQlB,CAAC"}
+{"version":3,"file":"webServer.d.ts","sourceRoot":"","sources":["../../../../src/adapter/entry-points/console/webServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B,OAAO,EAAE,eAAe,EAAE,MAAM,6DAA6D,CAAC;AAM9F,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EAQvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,sBAAsB,EACtB,sBAAsB,EAMvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAqB,MAAM,qBAAqB,CAAC;AAOtE,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC,eAAO,MAAM,+BAA+B,UAA0B,CAAC;AAEvE,eAAO,MAAM,oBAAoB,eAAe,CAAC;AAEjD,eAAO,MAAM,oBAAoB,aAAa,CAAC;AAmC/C,eAAO,MAAM,aAAa,GAAI,aAAa,MAAM,KAAG,OAGiB,CAAC;AAEtE,eAAO,MAAM,aAAa,GAAI,aAAa,MAAM,KAAG,OAGrB,CAAC;AAIhC,eAAO,MAAM,iBAAiB,GAAI,aAAa,MAAM,KAAG,OAmBvD,CAAC;AAEF,eAAO,MAAM,YAAY,GACvB,eAAe,MAAM,EACrB,eAAe,MAAM,GAAG,IAAI,KAC3B,OAAoE,CAAC;AAExE,eAAO,MAAM,kBAAkB,GAC7B,cAAc,MAAM,GAAG,SAAS,KAC/B,MAAM,GAAG,IAoBX,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,YAAY,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,EACpC,aAAa,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,EAC1C,aAAa,MAAM,GAAG,IAAI,KACzB,MAAM,GAAG,IAWX,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,OAAO,MAAM,KAAG,MAC0C,CAAC;AAE5F,eAAO,MAAM,oBAAoB,GAAI,YAAY,GAAG,KAAG,MAOtD,CAAC;AAuCF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC,cAAc,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC/C,kBAAkB,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACnD,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACnD,sBAAsB,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;CACxD,CAAC;AAMF,eAAO,MAAM,sBAAsB,cAAc,CAAC;AAElD,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAInD,eAAO,MAAM,wBAAwB,GACnC,cAAc,MAAM,EACpB,aAAa,MAAM,KAClB,MAAM,GAAG,IAWX,CAAC;AAEF,eAAO,MAAM,yBAAyB,GACpC,eAAe,MAAM,EACrB,aAAa,MAAM,KAClB,MAAM,GAAG,IAeX,CAAC;AA0WF,eAAO,MAAM,uBAAuB,GAClC,SAAS,gBAAgB,EACzB,aAAa,MAAM,KAClB,MAAM,GAAG,IAeX,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAC3B,SAAS,gBAAgB,EACzB,SAAS,IAAI,CAAC,eAAe,EAC7B,UAAU,IAAI,CAAC,cAAc,KAC5B,OAAO,CAAC,IAAI,CA8Ed,CAAC;AAcF,eAAO,MAAM,eAAe,GAAI,SAAS,gBAAgB,KAAG,IAAI,CAAC,MAM7D,CAAC;AAEL,MAAM,MAAM,qBAAqB,GAAG,gBAAgB,GAAG;IACrD,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,eAAO,MAAM,cAAc,GACzB,SAAS,qBAAqB,KAC7B,OAAO,CAAC,IAAI,CAAC,MAAM,CAQlB,CAAC"}

package/types/adapter/entry-points/handlers/InTmuxByHumanSessionTokenCountHandler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"InTmuxByHumanSessionTokenCountHandler.d.ts","sourceRoot":"","sources":["../../../../src/adapter/entry-points/handlers/InTmuxByHumanSessionTokenCountHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AACvD,OAAO,EAAE,kCAAkC,EAAE,MAAM,gFAAgF,CAAC;AACpI,OAAO,EAAE,qCAAqC,EAAE,MAAM,gEAAgE,CAAC;AAMvH,MAAM,MAAM,0CAA0C,GAAG;IACvD,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,KAAK,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,2CAA2C,GAAG;IACxD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,qBAAa,qCAAqC;IAE9C,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,4BAA4B;gBAD5B,OAAO,GAAE,qCAAmF,EAC5F,4BAA4B,GAAE,kCAAiF;IAGlI,MAAM,GACJ,OAAO,0CAA0C,KAChD,2CAA2C,CAmD5C;CACH"}
+{"version":3,"file":"InTmuxByHumanSessionTokenCountHandler.d.ts","sourceRoot":"","sources":["../../../../src/adapter/entry-points/handlers/InTmuxByHumanSessionTokenCountHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AACvD,OAAO,EAAE,kCAAkC,EAAE,MAAM,gFAAgF,CAAC;AACpI,OAAO,EAAE,qCAAqC,EAAE,MAAM,gEAAgE,CAAC;AAMvH,MAAM,MAAM,0CAA0C,GAAG;IACvD,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,KAAK,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,2CAA2C,GAAG;IACxD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,qBAAa,qCAAqC;IAE9C,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,4BAA4B;gBAD5B,OAAO,GAAE,qCAAmF,EAC5F,4BAA4B,GAAE,kCAAiF;IAGlI,MAAM,GACJ,OAAO,0CAA0C,KAChD,2CAA2C,CAoD5C;CACH"}

package/types/adapter/entry-points/handlers/LiveSessionOauthTokenSelectHandler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LiveSessionOauthTokenSelectHandler.d.ts","sourceRoot":"","sources":["../../../../src/adapter/entry-points/handlers/LiveSessionOauthTokenSelectHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,yEAAyE,CAAC;AACtH,OAAO,EAEL,kCAAkC,EACnC,MAAM,6DAA6D,CAAC;AAcrE,MAAM,MAAM,uCAAuC,GAAG;IACpD,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,wCAAwC,GAAG;IACrD,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,qBAAa,kCAAkC;IAE3C,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,qBAAqB;gBADrB,OAAO,GAAE,kCAA6E,EACtF,qBAAqB,GAAE,2BAAmE;IAG7G,MAAM,GACJ,OAAO,uCAAuC,KAC7C,wCAAwC,CAyDzC;IAEF,OAAO,CAAC,iBAAiB,CAyBvB;CACH"}
+{"version":3,"file":"LiveSessionOauthTokenSelectHandler.d.ts","sourceRoot":"","sources":["../../../../src/adapter/entry-points/handlers/LiveSessionOauthTokenSelectHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,yEAAyE,CAAC;AACtH,OAAO,EAEL,kCAAkC,EACnC,MAAM,6DAA6D,CAAC;AAcrE,MAAM,MAAM,uCAAuC,GAAG;IACpD,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,wCAAwC,GAAG;IACrD,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,qBAAa,kCAAkC;IAE3C,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,qBAAqB;gBADrB,OAAO,GAAE,kCAA6E,EACtF,qBAAqB,GAAE,2BAAmE;IAG7G,MAAM,GACJ,OAAO,uCAAuC,KAC7C,wCAAwC,CA+DzC;IAEF,OAAO,CAAC,iBAAiB,CAyBvB;CACH"}

package/types/adapter/entry-points/handlers/OauthTokenSelectHandler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OauthTokenSelectHandler.d.ts","sourceRoot":"","sources":["../../../../src/adapter/entry-points/handlers/OauthTokenSelectHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,uBAAuB,EACxB,MAAM,kDAAkD,CAAC;AAI1D,MAAM,MAAM,4BAA4B,GAAG;IACzC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAKF,eAAO,MAAM,wBAAwB,GACnC,cAAc,MAAM,GAAG,IAAI,KAC1B,MAAM,GAAG,IASX,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAChC,mBAAmB,MAAM,GAAG,IAAI,KAC/B,MASF,CAAC;AAEF,qBAAa,uBAAuB;IAEhC,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,GAAE,uBAAuD;IAGnF,MAAM,GACJ,OAAO,4BAA4B,KAClC,6BAA6B,CAmD9B;IAEF,OAAO,CAAC,iBAAiB,CAuBvB;CACH"}
+{"version":3,"file":"OauthTokenSelectHandler.d.ts","sourceRoot":"","sources":["../../../../src/adapter/entry-points/handlers/OauthTokenSelectHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,uBAAuB,EACxB,MAAM,kDAAkD,CAAC;AAQ1D,MAAM,MAAM,4BAA4B,GAAG;IACzC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAKF,eAAO,MAAM,wBAAwB,GACnC,cAAc,MAAM,GAAG,IAAI,KAC1B,MAAM,GAAG,IASX,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAChC,mBAAmB,MAAM,GAAG,IAAI,KAC/B,MASF,CAAC;AAEF,qBAAa,uBAAuB;IAEhC,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,GAAE,uBAAuD;IAGnF,MAAM,GACJ,OAAO,4BAA4B,KAClC,6BAA6B,CAyD9B;IAEF,OAAO,CAAC,iBAAiB,CAuBvB;CACH"}

package/types/adapter/entry-points/handlers/tokenStatusWriter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tokenStatusWriter.d.ts","sourceRoot":"","sources":["../../../../src/adapter/entry-points/handlers/tokenStatusWriter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AAE5D,OAAO,EAEL,sBAAsB,EACtB,WAAW,EAEZ,MAAM,+DAA+D,CAAC;AAGvE,OAAO,EAAE,kCAAkC,EAAE,MAAM,gFAAgF,CAAC;AACpI,OAAO,EAAE,4BAA4B,EAAE,MAAM,0EAA0E,CAAC;AACxH,OAAO,EAAE,iBAAiB,EAAiB,MAAM,4BAA4B,CAAC;AAU9E,MAAM,MAAM,uBAAuB,GAAG;IACpC,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC5C,iBAAiB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC7C,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACnC,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,iBAAiB,GAAG,IAAI,CAAC;IAC3D,4BAA4B,CAAC,EAAE,kCAAkC,CAAC;IAClE,eAAe,CAAC,EAAE,4BAA4B,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AA0EF,eAAO,MAAM,wBAAwB,GACnC,UAAU,iBAAiB,GAAG,IAAI,KACjC,sBAAsB,GAAG,IA0B3B,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,QAAQ,uBAAuB,KAAG,IA8GlE,CAAC"}
+{"version":3,"file":"tokenStatusWriter.d.ts","sourceRoot":"","sources":["../../../../src/adapter/entry-points/handlers/tokenStatusWriter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AAE5D,OAAO,EAEL,sBAAsB,EACtB,WAAW,EAEZ,MAAM,+DAA+D,CAAC;AAGvE,OAAO,EAAE,kCAAkC,EAAE,MAAM,gFAAgF,CAAC;AACpI,OAAO,EAAE,4BAA4B,EAAE,MAAM,0EAA0E,CAAC;AACxH,OAAO,EAAE,iBAAiB,EAAiB,MAAM,4BAA4B,CAAC;AAU9E,MAAM,MAAM,uBAAuB,GAAG;IACpC,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC5C,iBAAiB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC7C,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACnC,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,iBAAiB,GAAG,IAAI,CAAC;IAC3D,4BAA4B,CAAC,EAAE,kCAAkC,CAAC;IAClE,eAAe,CAAC,EAAE,4BAA4B,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AA0EF,eAAO,MAAM,wBAAwB,GACnC,UAAU,iBAAiB,GAAG,IAAI,KACjC,sBAAsB,GAAG,IA0B3B,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,QAAQ,uBAAuB,KAAG,IA+GlE,CAAC"}