@aexol/spectral 0.9.254 → 0.9.256

package/dist/extensions/dataset-uploader/index.js

@@ -0,0 +1,247 @@
+/**
+ * Dataset Uploader — native spectral extension (Dataset-uploader.md, Phase 2–3).
+ *
+ * Turns real harness sessions into SFT (sharegpt) training data and uploads
+ * it to the team dataset vault on the Aexol backend. Registers four tools:
+ *
+ *   - dataset_export   sessions DB → sharegpt JSONL (system + runtime tool
+ *                      registry attached from the live agent context)
+ *   - dataset_analyze  heuristic quality report (coverage, duplicates,
+ *                      dry-run scrub residue, quality flags)
+ *   - dataset_clean    scrub every string field (secret-store + .env values
+ *                      as extraValues) + quality filters → *.clean.jsonl
+ *   - dataset_upload   chunked upload to the backend vault (dry-run aware)
+ *
+ * USAGE POLICY (encoded in every tool description): these tools exist for
+ * model-training dataset building and must be used ONLY when the user
+ * explicitly asks to export/analyze/clean/upload session data for a
+ * training dataset. The agent must never run them proactively.
+ */
+import { Type } from "typebox";
+import { createAllToolDefinitions } from "../../sdk/coding-agent/core/tools/index.js";
+import { exportSessions, } from "./exporter.js";
+import { analyzeDataset, renderAnalysisMarkdown } from "./analyzer.js";
+import { cleanDataset } from "./cleaner.js";
+import { collectExtraValues } from "./extra-values.js";
+import { uploadDataset, renderUploadMarkdown, } from "./upload.js";
+const EXPORT_DESCRIPTION = "Export local harness sessions (from the local sessions DB) into a sharegpt SFT JSONL file, " +
+    "for building a MODEL-TRAINING dataset. " +
+    "Use ONLY when the user EXPLICITLY asks to export session data for a training dataset — " +
+    "never run this proactively. Params: sessionIds, limit, since, includeSubagents, outputPath.";
+const ANALYZE_DESCRIPTION = "Analyze a sharegpt dataset JSONL file for MODEL-TRAINING dataset building: sample count, " +
+    "length distribution (p50/p95), per-tool coverage (tools with < 20 samples flagged), local " +
+    "duplicates, dry-run scrub residue (secrets that would be redacted), and quality flags. " +
+    "Use ONLY when the user EXPLICITLY asks to analyze session data for a training dataset — " +
+    "never run this proactively. Read-only: the file is not modified.";
+const CLEAN_DESCRIPTION = "Clean a sharegpt dataset JSONL file for MODEL-TRAINING dataset building: scrubs every string " +
+    "field (API keys, JWTs, bearer tokens, home paths, plus secret-store and backend/.env.local " +
+    "values) and applies optional quality filters (minTurns, maxSampleChars, keepOnlyToolCalls), " +
+    "writing <name>.clean.jsonl next to the input. Use ONLY when the user EXPLICITLY asks to " +
+    "clean session data for a training dataset — never run this proactively. Secret values are " +
+    "never printed; only per-kind redaction counts are returned.";
+const UPLOAD_DESCRIPTION = "Upload a (cleaned) sharegpt dataset JSONL to the team dataset vault on the Aexol backend in " +
+    "chunks, for MODEL-TRAINING dataset building. Use ONLY when the user EXPLICITLY asks to upload " +
+    "session data for a training dataset — never run this proactively. Supports dryRun (validate " +
+    "only, no network) and reports accepted/duplicates/rejected totals plus vault stats.";
+function errorResult(msg) {
+    return {
+        content: [{ type: "text", text: `❌ ${msg}` }],
+        details: { isError: true, error: msg },
+    };
+}
+function textResult(text) {
+    return { content: [{ type: "text", text }], details: { isError: false } };
+}
+// ---------------------------------------------------------------------------
+// dataset_export
+// ---------------------------------------------------------------------------
+const exportSchema = Type.Object({
+    sessionIds: Type.Optional(Type.Array(Type.String(), { description: "Restrict the export to these session ids." })),
+    limit: Type.Optional(Type.Number({ description: "Max number of sessions (newest first)." })),
+    since: Type.Optional(Type.String({ description: "Only sessions updated since this ISO 8601 timestamp." })),
+    includeSubagents: Type.Optional(Type.Boolean({
+        description: "Keep subagent transcripts intact (observations uncapped). Default false (capped).",
+    })),
+    outputPath: Type.Optional(Type.String({ description: "Output JSONL path. Default: <configDir>/datasets/export-<ts>.jsonl" })),
+});
+function renderExportSummary(result, toolsIncluded) {
+    const lines = [];
+    lines.push(`# Dataset export`);
+    lines.push("");
+    lines.push(`- Sessions: **${result.sessions}**`);
+    lines.push(`- Samples: **${result.samples}**`);
+    lines.push(`- Bytes: ${result.bytes}`);
+    lines.push(`- Output: ${result.files.join(", ")}`);
+    lines.push(`- Tools field: ${toolsIncluded ? "attached (runtime registry)" : "omitted (registry unavailable)"}`);
+    if (result.systemAgent !== null) {
+        lines.push(`- System prompt: attached to ${result.systemSessionCount}/${result.sessions} session(s) ` +
+            `with active_agent "${result.systemAgent}" (most common agent among exported sessions)`);
+    }
+    if (Object.keys(result.toolCoverage).length > 0) {
+        lines.push("");
+        lines.push("Tool call coverage (per call event):");
+        lines.push("");
+        for (const [tool, count] of Object.entries(result.toolCoverage).sort((a, b) => b[1] - a[1])) {
+            lines.push(`- ${tool}: ${count}`);
+        }
+    }
+    return lines.join("\n");
+}
+/** Reconstruct the OpenAI-style tool registry from the runtime tool definitions. */
+function buildToolRegistry(cwd) {
+    // NOTE: extension/MCP tools are intentionally excluded from the exported
+    // tools registry (v1) — only the base tool definitions are included.
+    try {
+        const registry = createAllToolDefinitions(cwd);
+        return Object.values(registry).map((t) => ({
+            type: "function",
+            function: {
+                name: t.name,
+                description: t.description,
+                parameters: t.parameters,
+            },
+        }));
+    }
+    catch {
+        return undefined;
+    }
+}
+// ---------------------------------------------------------------------------
+// dataset_clean
+// ---------------------------------------------------------------------------
+const cleanSchema = Type.Object({
+    inputPath: Type.String({ description: "Path to the dataset JSONL file to clean." }),
+    minTurns: Type.Optional(Type.Number({ description: "Drop samples with fewer assistant (gpt) turns than this." })),
+    maxSampleChars: Type.Optional(Type.Number({ description: "Drop samples longer than this many total characters." })),
+    keepOnlyToolCalls: Type.Optional(Type.Boolean({ description: "When true, drop samples without any function_call entry." })),
+});
+function renderCleanSummary(result) {
+    const lines = [];
+    lines.push(`# Dataset clean — ${result.inputPath}`);
+    lines.push("");
+    lines.push(`- Samples: ${result.total} total → **${result.kept} kept**, ${result.removed} removed` +
+        (result.malformedLines > 0 ? ` (${result.malformedLines} malformed line(s) skipped)` : ""));
+    if (result.removed > 0) {
+        lines.push(`- Removed by filter: minTurns ${result.removedByFilter.minTurns}, ` +
+            `maxSampleChars ${result.removedByFilter.maxSampleChars}, ` +
+            `keepOnlyToolCalls ${result.removedByFilter.keepOnlyToolCalls}`);
+    }
+    lines.push(`- Output: ${result.outputPath}`);
+    lines.push("");
+    lines.push("## Redactions (values never shown — counts only)");
+    lines.push("");
+    if (result.redactions.length === 0) {
+        lines.push("✅ No redactions — no secret-like patterns found.");
+    }
+    else {
+        lines.push("| Kind | Count |");
+        lines.push("| --- | ---: |");
+        for (const r of result.redactions)
+            lines.push(`| ${r.kind} | ${r.count} |`);
+    }
+    return lines.join("\n");
+}
+// ---------------------------------------------------------------------------
+// Extension entry
+// ---------------------------------------------------------------------------
+export default async function datasetUploaderExtension(ext) {
+    // ---- dataset_export -----------------------------------------------------
+    ext.registerTool({
+        name: "dataset_export",
+        label: "Dataset Export",
+        description: EXPORT_DESCRIPTION,
+        parameters: exportSchema,
+        async execute(_toolCallId, params, _signal, _onUpdate, ctx) {
+            try {
+                // System prompt: attach the live session's system prompt (optional field).
+                const system = typeof ctx.getSystemPrompt === "function" ? ctx.getSystemPrompt() : undefined;
+                // Tools: reconstruct the runtime tool registry for this cwd.
+                const tools = buildToolRegistry(ctx.cwd);
+                const result = await exportSessions({
+                    sessionIds: params.sessionIds,
+                    limit: params.limit,
+                    since: params.since,
+                    includeSubagents: params.includeSubagents,
+                    outputPath: params.outputPath,
+                    system: system || null,
+                    tools,
+                });
+                return textResult(renderExportSummary(result, tools !== undefined));
+            }
+            catch (err) {
+                return errorResult(err instanceof Error ? err.message : String(err));
+            }
+        },
+    });
+    // ---- dataset_analyze ------------------------------------------------------
+    ext.registerTool({
+        name: "dataset_analyze",
+        label: "Dataset Analyze",
+        description: ANALYZE_DESCRIPTION,
+        parameters: Type.Object({
+            inputPath: Type.String({ description: "Path to the dataset JSONL file to analyze." }),
+        }),
+        async execute(_toolCallId, params, _signal, _onUpdate, ctx) {
+            try {
+                // Same opaque values as dataset_clean (never printed — counts only).
+                const extraValues = collectExtraValues(ctx.cwd);
+                const report = analyzeDataset(params.inputPath, { extraValues });
+                return textResult(renderAnalysisMarkdown(report));
+            }
+            catch (err) {
+                return errorResult(err instanceof Error ? err.message : String(err));
+            }
+        },
+    });
+    // ---- dataset_clean --------------------------------------------------------
+    ext.registerTool({
+        name: "dataset_clean",
+        label: "Dataset Clean",
+        description: CLEAN_DESCRIPTION,
+        parameters: cleanSchema,
+        async execute(_toolCallId, params, _signal, _onUpdate, ctx) {
+            try {
+                // Collect opaque secret values BEFORE scrubbing (never printed).
+                const extraValues = collectExtraValues(ctx.cwd);
+                const result = cleanDataset(params.inputPath, {
+                    minTurns: params.minTurns,
+                    maxSampleChars: params.maxSampleChars,
+                    keepOnlyToolCalls: params.keepOnlyToolCalls,
+                    extraValues,
+                });
+                return textResult(renderCleanSummary(result));
+            }
+            catch (err) {
+                return errorResult(err instanceof Error ? err.message : String(err));
+            }
+        },
+    });
+    // ---- dataset_upload -------------------------------------------------------
+    ext.registerTool({
+        name: "dataset_upload",
+        label: "Dataset Upload",
+        description: UPLOAD_DESCRIPTION,
+        parameters: Type.Object({
+            inputPath: Type.String({ description: "Path to the (cleaned) dataset JSONL file." }),
+            teamId: Type.Optional(Type.String({ description: "Team id. Default: Studio binding teamId, then backend resolves from the token." })),
+            batchSize: Type.Optional(Type.Number({ description: "Samples per backend call. Default 50." })),
+            dryRun: Type.Optional(Type.Boolean({ description: "When true, only parse + validate — no data is sent." })),
+        }),
+        async execute(_toolCallId, params, _signal, _onUpdate, ctx) {
+            try {
+                const result = await uploadDataset({
+                    inputPath: params.inputPath,
+                    teamId: params.teamId,
+                    batchSize: params.batchSize,
+                    dryRun: params.dryRun,
+                    cwd: ctx.cwd,
+                });
+                return textResult(renderUploadMarkdown(result));
+            }
+            catch (err) {
+                return errorResult(err instanceof Error ? err.message : String(err));
+            }
+        },
+    });
+    process.stderr.write("[dataset-uploader] Registered 4 dataset tools (export, analyze, clean, upload).\n");
+}

package/dist/extensions/dataset-uploader/scrubber.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Pure text scrubber for dataset export (see Dataset-uploader.md §2.2).
+ *
+ * Replaces secret-looking patterns with `[REDACTED:<kind>]` markers:
+ *   - api_key     — Anthropic / OpenRouter / OpenAI / GitHub / Slack / AWS keys
+ *   - jwt         — bare JWTs (eyJ... payload ... signature)
+ *   - bearer      — "Bearer <token>" and Authorization header values
+ *   - home_path   — /Users/<name>/ → /home/
+ *   - secret_value — opaque values passed in by the caller (secret-store
+ *                    values, .env values). The scrubber NEVER reads any
+ *                    store itself; callers decide what to pass.
+ *
+ * Pure function — no I/O, no global state. Safe to run per-sample.
+ */
+export interface ScrubRedaction {
+    kind: string;
+    count: number;
+}
+export interface ScrubResult {
+    text: string;
+    redactions: ScrubRedaction[];
+}
+/**
+ * Scrub `text` for secrets.
+ *
+ * @param text        Raw text (sample JSON, observation, args, ...)
+ * @param extraValues Optional opaque secret values to redact literally
+ *                    (e.g. secret-store values, .env values). The scrubber
+ *                    never reads any store itself.
+ * @returns Redacted text plus per-kind redaction counts (only kinds with
+ *          count > 0, in stable order).
+ */
+export declare function scrub(text: string, extraValues?: string[]): ScrubResult;
+//# sourceMappingURL=scrubber.d.ts.map

package/dist/extensions/dataset-uploader/scrubber.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrubber.d.ts","sourceRoot":"","sources":["../../../src/extensions/dataset-uploader/scrubber.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,cAAc,EAAE,CAAC;CAC9B;AAiCD;;;;;;;;;GASG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,WAAW,CA6CvE"}

package/dist/extensions/dataset-uploader/scrubber.js

@@ -0,0 +1,91 @@
+/**
+ * Pure text scrubber for dataset export (see Dataset-uploader.md §2.2).
+ *
+ * Replaces secret-looking patterns with `[REDACTED:<kind>]` markers:
+ *   - api_key     — Anthropic / OpenRouter / OpenAI / GitHub / Slack / AWS keys
+ *   - jwt         — bare JWTs (eyJ... payload ... signature)
+ *   - bearer      — "Bearer <token>" and Authorization header values
+ *   - home_path   — /Users/<name>/ → /home/
+ *   - secret_value — opaque values passed in by the caller (secret-store
+ *                    values, .env values). The scrubber NEVER reads any
+ *                    store itself; callers decide what to pass.
+ *
+ * Pure function — no I/O, no global state. Safe to run per-sample.
+ */
+/**
+ * API key / token prefixes per the dataset plan §2.2:
+ * sk-ant-*, sk-or-*, sk-proj-*, ghp_*, gho_*, github_pat_*, xox[bp]-*, AKIA*.
+ */
+const API_KEY_PATTERN = /\b(?:sk-(?:ant|or|proj)-[A-Za-z0-9._-]{8,}|ghp_[A-Za-z0-9_]{8,}|gho_[A-Za-z0-9_]{8,}|github_pat_[A-Za-z0-9_]{8,}|xox[bp]-[A-Za-z0-9-]{8,}|AKIA[A-Z0-9]{12,})\b/g;
+/**
+ * Authorization header values, with or without a "Bearer " prefix. Run
+ * BEFORE the bare Bearer pattern so "Authorization: Bearer <token>" is
+ * redacted as ONE unit (not double-counted). The header name is preserved
+ * (capture group 1); only the value is replaced.
+ */
+const AUTH_HEADER_PATTERN = /\b(authorization\s*[:=]\s*)(?:bearer\s+)?[A-Za-z0-9._~+/=-]+/gi;
+/** Standalone "Bearer <token>" (no Authorization prefix). */
+const BEARER_PATTERN = /\bbearer\s+[A-Za-z0-9._~+/=-]+/gi;
+/** Bare JWT: three base64url segments, the first starting with "eyJ". */
+const JWT_PATTERN = /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g;
+/**
+ * Home directory segment: /Users/<name> followed by "/" or end-of-text.
+ * Normalized to /home (the marker would break the surrounding path).
+ */
+const HOME_PATH_PATTERN = /\/Users\/[A-Za-z0-9._-]+(?=\/|$)/g;
+/** Stable ordering of kinds in the returned redactions array. */
+const REDACTION_KINDS = ["api_key", "jwt", "bearer", "home_path", "secret_value"];
+/**
+ * Scrub `text` for secrets.
+ *
+ * @param text        Raw text (sample JSON, observation, args, ...)
+ * @param extraValues Optional opaque secret values to redact literally
+ *                    (e.g. secret-store values, .env values). The scrubber
+ *                    never reads any store itself.
+ * @returns Redacted text plus per-kind redaction counts (only kinds with
+ *          count > 0, in stable order).
+ */
+export function scrub(text, extraValues) {
+    let out = text;
+    const counts = {};
+    // 1) Opaque caller-provided values first (longest first so overlapping
+    //    values are consumed whole, not partially).
+    const values = (extraValues ?? [])
+        .filter((v) => typeof v === "string" && v.length > 0)
+        .sort((a, b) => b.length - a.length);
+    for (const value of values) {
+        const parts = out.split(value);
+        if (parts.length > 1) {
+            counts.secret_value = (counts.secret_value ?? 0) + (parts.length - 1);
+            out = parts.join("[REDACTED:secret_value]");
+        }
+    }
+    // 2) Pattern-based redactions.
+    out = out.replace(API_KEY_PATTERN, () => {
+        counts.api_key = (counts.api_key ?? 0) + 1;
+        return "[REDACTED:api_key]";
+    });
+    out = out.replace(AUTH_HEADER_PATTERN, (match, prefix) => {
+        counts.bearer = (counts.bearer ?? 0) + 1;
+        return `${prefix}[REDACTED:bearer]`;
+    });
+    out = out.replace(BEARER_PATTERN, () => {
+        counts.bearer = (counts.bearer ?? 0) + 1;
+        return "[REDACTED:bearer]";
+    });
+    out = out.replace(JWT_PATTERN, () => {
+        counts.jwt = (counts.jwt ?? 0) + 1;
+        return "[REDACTED:jwt]";
+    });
+    out = out.replace(HOME_PATH_PATTERN, () => {
+        counts.home_path = (counts.home_path ?? 0) + 1;
+        return "/home";
+    });
+    const redactions = [];
+    for (const kind of REDACTION_KINDS) {
+        const count = counts[kind];
+        if (count > 0)
+            redactions.push({ kind, count });
+    }
+    return { text: out, redactions };
+}

package/dist/extensions/dataset-uploader/upload.d.ts

@@ -0,0 +1,105 @@
+/**
+ * Chunked dataset upload to the team dataset vault (Dataset-uploader.md §3.2 —
+ * the `dataset_upload` tool's core).
+ *
+ * Loads a (cleaned) sharegpt JSONL, validates each line, groups it into
+ * batches of `batchSize` and calls the backend MCP tool
+ * `upload_dataset_samples` (JSON-RPC tools/call, Bearer auth) per batch,
+ * then sums the per-batch `DatasetUploadResult` ({accepted, duplicates,
+ * rejected}).
+ *
+ * Auth/URL resolution mirrors `aexol-mcp.ts`: `~/.spectral/config.json`
+ * (`readConfig()`), token = `teamApiKey || userJwt`, URL via `getApiUrl()`,
+ * and a single `ensureAuthenticated()` OAuth retry on 401/403.
+ *
+ * projectId: the Studio binding (`.aexol/aexol.jsonc`) supplies a single
+ * batch-level projectId for ALL batches — the exporter does not persist
+ * per-sample project provenance in the JSONL, so per-project grouping is not
+ * possible without exporter rework (documented in the result notes).
+ *
+ * Testability: the backend call lives behind `callBackendTool`, overridable
+ * per-call (`options.callBackendTool`) or via `setCallBackendToolForTesting`
+ * (module-level), so tests can stub the network entirely.
+ */
+export declare const DEFAULT_BATCH_SIZE = 50;
+/** Backend MCP tool that ingests one batch of samples. */
+export declare const BACKEND_UPLOAD_TOOL = "upload_dataset_samples";
+/** Backend MCP tool returning vault stats (best-effort, post-upload). */
+export declare const BACKEND_VAULT_STATS_TOOL = "dataset_vault_stats";
+export declare const DATASET_FORMAT = "sharegpt";
+/**
+ * Backend tool call abstraction. Returns the parsed JSON payload of the
+ * tool's first content item (the raw content items when only text was
+ * returned).
+ */
+export type CallBackendTool = (tool: string, args: Record<string, unknown>) => Promise<unknown>;
+export interface UploadDatasetOptions {
+    /** Path to the (cleaned) sharegpt JSONL file. */
+    inputPath: string;
+    /** Team id; defaults to the Studio binding's teamId, then omitted (backend resolves from the token). */
+    teamId?: string | null;
+    /** Samples per backend call. Default 50. */
+    batchSize?: number;
+    /** When true, only parse + validate; no network call is made. */
+    dryRun?: boolean;
+    /** Working directory for Studio binding lookup. Default: process.cwd(). */
+    cwd?: string;
+    /** Test injection: overrides the module-level and default backend call. */
+    callBackendTool?: CallBackendTool;
+}
+export interface UploadBatchResult {
+    projectId: string | null;
+    /** Number of samples in this batch. */
+    sent: number;
+    accepted: number;
+    duplicates: number;
+    rejected: number;
+}
+export interface UploadDatasetResult {
+    inputPath: string;
+    dryRun: boolean;
+    totalLines: number;
+    validSamples: number;
+    invalidLines: number;
+    batchSize: number;
+    teamId: string | null;
+    projectId: string | null;
+    batches: UploadBatchResult[];
+    totals: {
+        accepted: number;
+        duplicates: number;
+        rejected: number;
+    };
+    /** Valid sample count that WOULD be uploaded (equals validSamples in dry-run). */
+    wouldUpload: number;
+    /** Vault stats returned by the backend (absent on failure or dry-run). */
+    vaultStats?: unknown;
+    /**
+     * Pre-upload residue warning: pattern-only dry-run scrub (NO extraValues)
+     * over the file contents. Present when any redactions would be made —
+     * counts only, never values.
+     */
+    residueWarning?: {
+        totalRedactions: number;
+        kinds: string[];
+    };
+    /** Human-readable notes (e.g. binding state, per-project grouping). */
+    notes: string[];
+}
+/**
+ * Test hook: override the backend call for the whole module. Pass null to
+ * restore the real implementation. Prefer `options.callBackendTool` for
+ * per-call injection; this exists so tests that drive code through other
+ * entry points (e.g. the extension index) can stub the network too.
+ */
+export declare function setCallBackendToolForTesting(fn: CallBackendTool | null): void;
+/**
+ * Upload a dataset JSONL to the team vault in chunks.
+ *
+ * dryRun: parse + validate only — no backend call, `wouldUpload` carries the
+ * count, totals stay zero.
+ */
+export declare function uploadDataset(options: UploadDatasetOptions): Promise<UploadDatasetResult>;
+/** Render an upload result as a markdown summary for the agent. */
+export declare function renderUploadMarkdown(result: UploadDatasetResult): string;
+//# sourceMappingURL=upload.d.ts.map

package/dist/extensions/dataset-uploader/upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.d.ts","sourceRoot":"","sources":["../../../src/extensions/dataset-uploader/upload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAYH,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,0DAA0D;AAC1D,eAAO,MAAM,mBAAmB,2BAA2B,CAAC;AAE5D,yEAAyE;AACzE,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAE9D,eAAO,MAAM,cAAc,aAAa,CAAC;AAEzC;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC1B,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,MAAM,WAAW,oBAAoB;IACnC,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,wGAAwG;IACxG,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iEAAiE;IACjE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACnE,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,cAAc,CAAC,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC9D,uEAAuE;IACvE,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAQD;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,eAAe,GAAG,IAAI,GAAG,IAAI,CAE7E;AAmFD;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CAkH9B;AAMD,mEAAmE;AACnE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CA2CxE"}