@agent-deck/backend 1.6.4 → 1.7.1

package/dist/routes/trusted-session.js

@@ -0,0 +1,383 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerTrustedSessionRoutes = registerTrustedSessionRoutes;
+exports.registerDashboardAuthRoutes = registerDashboardAuthRoutes;
+const node_crypto_1 = require("node:crypto");
+const shared_1 = require("@agent-deck/shared");
+const http_auth_1 = require("../lib/http-auth");
+const auth_1 = require("../trusted-session/auth");
+const dashboard_auth_1 = require("../lib/dashboard-auth");
+const store_1 = require("../trusted-session/store");
+const admin_secret_1 = require("../trusted-session/admin-secret");
+/** Caller must own the runtime session (session header matches body id). */
+function requireRuntimeSessionOwnership(request, runtimeSessionId) {
+    const header = request.headers[shared_1.AGENT_DECK_SESSION_HEADER];
+    const sessionHeader = typeof header === 'string' ? header.trim() : '';
+    if (!sessionHeader || sessionHeader !== runtimeSessionId.trim()) {
+        throw new auth_1.TrustedAuthError('GRANT_REQUIRED', 'Runtime session ownership required');
+    }
+}
+function assertWorkspaceScope(store, workspaceKeyId, workspaceRoot) {
+    const key = store.getWorkspaceKeyById(workspaceKeyId);
+    if (!key) {
+        throw new auth_1.TrustedAuthError('GRANT_REQUIRED', 'No valid workspace grant');
+    }
+    const digest = (0, shared_1.digestCanonicalWorkspacePath)((0, shared_1.canonicalizeWorkspacePath)(workspaceRoot));
+    if (key.path_digest !== digest) {
+        throw new auth_1.TrustedAuthError('WORKSPACE_SCOPE_MISMATCH', 'Request targets a different workspace; elevation cannot override it');
+    }
+}
+function resolveRuntimeSessionFromHeader(request, store) {
+    const sessionHeader = request.headers[shared_1.AGENT_DECK_SESSION_HEADER];
+    const sessionId = typeof sessionHeader === 'string' ? sessionHeader.trim() : '';
+    if (!sessionId) {
+        throw new auth_1.TrustedAuthError('GRANT_REQUIRED', 'No valid workspace grant');
+    }
+    const row = store.getRuntimeSessionRow(sessionId);
+    if (!row || row.revoked_at) {
+        throw new auth_1.TrustedAuthError('SESSION_REVOKED', 'Grant rotation or explicit revocation ended the session');
+    }
+    if (Date.parse(row.expires_at) <= Date.now()) {
+        throw new auth_1.TrustedAuthError('SESSION_INVALID', 'Runtime session absent or expired');
+    }
+    const session = store.touchRuntimeSession(sessionId);
+    if (!session) {
+        throw new auth_1.TrustedAuthError('SESSION_INVALID', 'Runtime session absent or expired');
+    }
+    return session;
+}
+async function registerTrustedSessionRoutes(fastify) {
+    const store = fastify.trustedSessionStore;
+    fastify.post('/workspace-grants/issue', async (request, reply) => {
+        try {
+            await (0, auth_1.requireTrustedWriterBearer)(request);
+            const { workspaceRoot, deckId } = request.body;
+            if (!workspaceRoot?.trim() || !deckId?.trim()) {
+                return reply.status(400).send({ success: false, error: 'workspaceRoot and deckId required' });
+            }
+            const deck = await fastify.db.getDeck(deckId);
+            if (!deck) {
+                return reply.status(404).send({ success: false, error: 'Deck not found' });
+            }
+            const canonical = (0, shared_1.canonicalizeWorkspacePath)(workspaceRoot);
+            const digest = (0, shared_1.digestCanonicalWorkspacePath)(canonical);
+            const workspaceKey = store.getOrCreateWorkspaceKey(digest);
+            const secret = (0, store_1.generateGrantSecret)();
+            const pending = store.createPendingGrant(workspaceKey.id, deckId, secret);
+            return reply.send({
+                success: true,
+                data: {
+                    workspaceKey: workspaceKey.id,
+                    grantId: pending.id,
+                    deckId,
+                    deckName: deck.name,
+                    secret,
+                    status: 'pending',
+                },
+            });
+        }
+        catch (error) {
+            if (error instanceof auth_1.TrustedAuthError) {
+                return (0, auth_1.sendTrustedAuthError)(reply, error);
+            }
+            throw error;
+        }
+    });
+    fastify.post('/workspace-grants/:grantId/revoke-pending', async (request, reply) => {
+        try {
+            await (0, auth_1.requireTrustedWriterBearer)(request);
+            store.revokePendingGrant(request.params.grantId);
+            return reply.send({ success: true });
+        }
+        catch (error) {
+            if (error instanceof auth_1.TrustedAuthError) {
+                return (0, auth_1.sendTrustedAuthError)(reply, error);
+            }
+            throw error;
+        }
+    });
+    fastify.post('/workspace-grants/:grantId/activate', async (request, reply) => {
+        try {
+            await (0, auth_1.requireTrustedWriterBearer)(request);
+            const { grantId } = request.params;
+            const activated = store.activateGrant(grantId);
+            if (!activated) {
+                return reply.status(409).send({
+                    success: false,
+                    error: 'Grant not pending or not found',
+                });
+            }
+            const deck = await fastify.db.getDeck(activated.deck_id);
+            return reply.send({
+                success: true,
+                data: {
+                    grantId: activated.id,
+                    deckId: activated.deck_id,
+                    deckName: deck?.name,
+                    status: activated.status,
+                },
+            });
+        }
+        catch (error) {
+            if (error instanceof auth_1.TrustedAuthError) {
+                return (0, auth_1.sendTrustedAuthError)(reply, error);
+            }
+            throw error;
+        }
+    });
+    fastify.get('/runtime-session', async (request, reply) => {
+        try {
+            const sessionHeader = request.headers[shared_1.AGENT_DECK_SESSION_HEADER];
+            const sessionId = typeof sessionHeader === 'string' ? sessionHeader.trim() : '';
+            if (!sessionId) {
+                throw new auth_1.TrustedAuthError('GRANT_REQUIRED', 'No valid workspace grant');
+            }
+            const row = store.getRuntimeSessionRow(sessionId);
+            if (!row || row.revoked_at) {
+                throw new auth_1.TrustedAuthError('SESSION_REVOKED', 'Grant rotation or explicit revocation ended the session');
+            }
+            if (Date.parse(row.expires_at) <= Date.now()) {
+                throw new auth_1.TrustedAuthError('SESSION_INVALID', 'Runtime session absent or expired');
+            }
+            const session = store.touchRuntimeSession(sessionId);
+            if (!session) {
+                throw new auth_1.TrustedAuthError('SESSION_INVALID', 'Runtime session absent or expired');
+            }
+            const deck = await fastify.db.getDeck(session.deckId);
+            return reply.send({
+                success: true,
+                data: {
+                    sessionId: session.sessionId,
+                    deckId: session.deckId,
+                    deckName: deck?.name,
+                    mode: session.mode,
+                    expiresAt: session.expiresAt,
+                    adminExpiresAt: session.adminExpiresAt,
+                },
+            });
+        }
+        catch (error) {
+            if (error instanceof auth_1.TrustedAuthError) {
+                return (0, auth_1.sendTrustedAuthError)(reply, error);
+            }
+            throw error;
+        }
+    });
+    fastify.post('/bind-workspace', async (request, reply) => {
+        try {
+            const { workspaceRoot, deckId } = request.body;
+            if (!workspaceRoot?.trim() || !deckId?.trim()) {
+                return reply.status(400).send({ success: false, error: 'workspaceRoot and deckId required' });
+            }
+            const session = resolveRuntimeSessionFromHeader(request, store);
+            assertWorkspaceScope(store, session.workspaceKey, workspaceRoot);
+            const deck = await fastify.db.getDeck(deckId);
+            if (!deck) {
+                return reply.status(404).send({ success: false, error: 'Deck not found' });
+            }
+            if (session.deckId === deckId) {
+                return reply.send({
+                    success: true,
+                    data: {
+                        deckId: session.deckId,
+                        deckName: deck.name,
+                        mode: session.mode,
+                        grantRotated: false,
+                        peersRevoked: 0,
+                    },
+                });
+            }
+            if (session.mode !== 'agent-admin') {
+                throw new auth_1.TrustedAuthError('ADMIN_REQUIRED', 'Deck-admin elevation is required');
+            }
+            const workspaceCount = store.countWorkspacesForDeck(session.deckId);
+            const rotated = store.rotateGrantForElevatedSession(session.sessionId, deckId);
+            if (!rotated) {
+                throw new auth_1.TrustedAuthError('SESSION_INVALID', 'Runtime session absent or expired');
+            }
+            const newDeck = await fastify.db.getDeck(rotated.session.deckId);
+            return reply.send({
+                success: true,
+                data: {
+                    deckId: rotated.session.deckId,
+                    deckName: newDeck?.name ?? deck.name,
+                    mode: rotated.session.mode,
+                    grantRotated: true,
+                    peersRevoked: rotated.peersRevoked,
+                    previousDeckWorkspaceCount: workspaceCount,
+                    grantRefreshNote: 'Run `agent-deck use <deck>` in this workspace to refresh the local grant file before the next MCP reconnect.',
+                },
+            });
+        }
+        catch (error) {
+            if (error instanceof auth_1.TrustedAuthError) {
+                return (0, auth_1.sendTrustedAuthError)(reply, error);
+            }
+            throw error;
+        }
+    });
+    fastify.get('/admin/challenges', async (_request, reply) => {
+        const pending = store.listPendingAdminChallenges();
+        const data = await Promise.all(pending.map(async (row) => {
+            const deck = await fastify.db.getDeck(row.deckId);
+            const approvalPath = `/admin/approve?challenge=${encodeURIComponent(row.challengeId)}&session=${encodeURIComponent(row.runtimeSessionId)}`;
+            return {
+                challengeId: row.challengeId,
+                runtimeSessionId: row.runtimeSessionId,
+                deckId: row.deckId,
+                deckName: deck?.name,
+                expiresAt: row.expiresAt,
+                approvalPath,
+            };
+        }));
+        return reply.send({ success: true, data });
+    });
+    fastify.post('/admin/request-elevation', async (request, reply) => {
+        try {
+            const { runtimeSessionId } = request.body;
+            if (!runtimeSessionId?.trim()) {
+                return reply.status(400).send({ success: false, error: 'runtimeSessionId required' });
+            }
+            requireRuntimeSessionOwnership(request, runtimeSessionId);
+            const row = store.getRuntimeSessionRow(runtimeSessionId);
+            if (!row || row.revoked_at) {
+                throw new auth_1.TrustedAuthError('SESSION_INVALID', 'Runtime session absent or expired');
+            }
+            const challenge = store.createAdminChallenge(runtimeSessionId);
+            const approvalUrl = `/admin/approve?challenge=${encodeURIComponent(challenge.id)}&session=${encodeURIComponent(runtimeSessionId)}`;
+            return reply.send({
+                success: true,
+                data: {
+                    challengeId: challenge.id,
+                    expiresAt: challenge.expires_at,
+                    approvalUrl,
+                },
+            });
+        }
+        catch (error) {
+            if (error instanceof auth_1.TrustedAuthError) {
+                return (0, auth_1.sendTrustedAuthError)(reply, error);
+            }
+            throw error;
+        }
+    });
+    fastify.post('/admin/approve', async (request, reply) => {
+        try {
+            const bearer = (0, http_auth_1.parseBearerToken)(request);
+            const expected = await (0, admin_secret_1.readAdminSecretFromEnvOrFile)();
+            if (!bearer || !expected || !(0, admin_secret_1.verifyAdminSecret)(bearer, expected)) {
+                const token = (0, dashboard_auth_1.parseDashboardCookie)(request);
+                if (!token || !(0, dashboard_auth_1.validateDashboardSessionToken)(token)) {
+                    throw new auth_1.TrustedAuthError('DASHBOARD_REQUIRED', 'Dashboard authentication required');
+                }
+            }
+            const { challengeId, runtimeSessionId } = request.body;
+            const consumed = store.consumeAdminChallenge(challengeId, runtimeSessionId);
+            if (!consumed) {
+                throw new auth_1.TrustedAuthError('ADMIN_CHALLENGE_EXPIRED', 'Approval challenge expired or was already consumed');
+            }
+            const elevated = store.elevateSessionToAdmin(runtimeSessionId);
+            if (!elevated) {
+                throw new auth_1.TrustedAuthError('SESSION_INVALID', 'Runtime session absent or expired');
+            }
+            return reply.send({ success: true, data: { session: elevated } });
+        }
+        catch (error) {
+            if (error instanceof auth_1.TrustedAuthError) {
+                return (0, auth_1.sendTrustedAuthError)(reply, error);
+            }
+            throw error;
+        }
+    });
+    fastify.post('/admin/exit', async (request, reply) => {
+        try {
+            const { runtimeSessionId } = request.body;
+            if (!runtimeSessionId?.trim()) {
+                return reply.status(400).send({ success: false, error: 'runtimeSessionId required' });
+            }
+            requireRuntimeSessionOwnership(request, runtimeSessionId);
+            const downgraded = store.downgradeSessionToNormal(runtimeSessionId);
+            if (!downgraded) {
+                return reply.status(404).send({ success: false, error: 'Session not found' });
+            }
+            return reply.send({ success: true, data: { session: downgraded } });
+        }
+        catch (error) {
+            if (error instanceof auth_1.TrustedAuthError) {
+                return (0, auth_1.sendTrustedAuthError)(reply, error);
+            }
+            throw error;
+        }
+    });
+    fastify.post('/mcp/connect', async (request, reply) => {
+        try {
+            const { grantSecret, mcpSessionId } = request.body;
+            if (!grantSecret?.trim()) {
+                throw new auth_1.TrustedAuthError('GRANT_REQUIRED', 'No valid workspace grant');
+            }
+            const grant = store.findActiveGrantBySecret(grantSecret);
+            if (!grant) {
+                throw new auth_1.TrustedAuthError('GRANT_REQUIRED', 'No valid workspace grant');
+            }
+            let session;
+            if (mcpSessionId?.trim()) {
+                session = store.findActiveRuntimeSessionForMcp(mcpSessionId.trim(), grant.id);
+            }
+            if (!session) {
+                session = store.createRuntimeSession({
+                    workspaceKeyId: grant.workspace_key_id,
+                    workspaceGrantId: grant.id,
+                    deckId: grant.deck_id,
+                    mcpSessionId: mcpSessionId?.trim(),
+                });
+            }
+            const deck = await fastify.db.getDeck(session.deckId);
+            return reply.send({
+                success: true,
+                data: {
+                    sessionId: session.sessionId,
+                    workspaceKey: session.workspaceKey,
+                    deckId: session.deckId,
+                    deckName: deck?.name,
+                    mode: session.mode,
+                    expiresAt: session.expiresAt,
+                },
+            });
+        }
+        catch (error) {
+            if (error instanceof auth_1.TrustedAuthError) {
+                return (0, auth_1.sendTrustedAuthError)(reply, error);
+            }
+            throw error;
+        }
+    });
+}
+async function registerDashboardAuthRoutes(fastify) {
+    const store = fastify.trustedSessionStore;
+    fastify.post('/bootstrap/nonce', async (request, reply) => {
+        try {
+            await (0, auth_1.requireTrustedWriterBearer)(request);
+            const nonce = (0, node_crypto_1.randomBytes)(24).toString('base64url');
+            const expiresAt = new Date(Date.now() + shared_1.DASHBOARD_NONCE_TTL_MS).toISOString();
+            store.createDashboardNonce(nonce, expiresAt);
+            return reply.send({ success: true, data: { nonce, expiresInMs: shared_1.DASHBOARD_NONCE_TTL_MS } });
+        }
+        catch (error) {
+            if (error instanceof auth_1.TrustedAuthError) {
+                return (0, auth_1.sendTrustedAuthError)(reply, error);
+            }
+            throw error;
+        }
+    });
+    fastify.post('/bootstrap/session', async (request, reply) => {
+        const { nonce } = request.body;
+        if (!store.consumeDashboardNonce(nonce)) {
+            return reply.status(410).send({ success: false, error: 'Bootstrap nonce expired or invalid' });
+        }
+        const token = (0, auth_1.createDashboardSessionToken)();
+        // Secure omitted intentionally — dashboard is localhost-http in v1.
+        reply.header('Set-Cookie', `${shared_1.AGENT_DECK_DASHBOARD_COOKIE}=${encodeURIComponent(token)}; HttpOnly; SameSite=Strict; Path=/`);
+        return reply.send({ success: true, data: { authenticated: true } });
+    });
+}
+//# sourceMappingURL=trusted-session.js.map

package/dist/routes/trusted-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-session.js","sourceRoot":"","sources":["../../src/routes/trusted-session.ts"],"names":[],"mappings":";;AA0EA,oEA6WC;AAED,kEAmCC;AA5dD,6CAA0C;AAI1C,+CAM4B;AAE5B,gDAAoD;AACpD,kDAKiC;AACjC,0DAA4F;AAE5F,oDAA+D;AAC/D,kEAAkG;AAElG,4EAA4E;AAC5E,SAAS,8BAA8B,CAAC,OAAuB,EAAE,gBAAwB;IACvF,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,kCAAyB,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,IAAI,CAAC,aAAa,IAAI,aAAa,KAAK,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,uBAAgB,CAAC,gBAAgB,EAAE,oCAAoC,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAA0B,EAC1B,cAAsB,EACtB,aAAqB;IAErB,MAAM,GAAG,GAAG,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;IACtD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,uBAAgB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,qCAA4B,EAAC,IAAA,kCAAyB,EAAC,aAAa,CAAC,CAAC,CAAC;IACtF,IAAI,GAAG,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,uBAAgB,CACxB,0BAA0B,EAC1B,qEAAqE,CACtE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACtC,OAAuB,EACvB,KAA0B;IAE1B,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,kCAAyB,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,uBAAgB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,uBAAgB,CAAC,iBAAiB,EAAE,yDAAyD,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,uBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,uBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAEM,KAAK,UAAU,4BAA4B,CAAC,OAAwB;IACzE,MAAM,KAAK,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAE1C,OAAO,CAAC,IAAI,CACV,yBAAyB,EACzB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,IAAA,iCAA0B,EAAC,OAAO,CAAC,CAAC;YAE1C,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAC/C,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC9C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YAChG,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC7E,CAAC;YAED,MAAM,SAAS,GAAG,IAAA,kCAAyB,EAAC,aAAa,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAA,qCAA4B,EAAC,SAAS,CAAC,CAAC;YACvD,MAAM,YAAY,GAAG,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAA,2BAAmB,GAAE,CAAC;YACrC,MAAM,OAAO,GAAG,KAAK,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAE1E,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE;oBACJ,YAAY,EAAE,YAAY,CAAC,EAAE;oBAC7B,OAAO,EAAE,OAAO,CAAC,EAAE;oBACnB,MAAM;oBACN,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,MAAM;oBACN,MAAM,EAAE,SAAkB;iBAC3B;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,IAAI,CACV,2CAA2C,EAC3C,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,IAAA,iCAA0B,EAAC,OAAO,CAAC,CAAC;YAC1C,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,IAAI,CACV,qCAAqC,EACrC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,IAAA,iCAA0B,EAAC,OAAO,CAAC,CAAC;YAE1C,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;YACnC,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC5B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,gCAAgC;iBACxC,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAEzD,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE;oBACJ,OAAO,EAAE,SAAS,CAAC,EAAE;oBACrB,MAAM,EAAE,SAAS,CAAC,OAAO;oBACzB,QAAQ,EAAE,IAAI,EAAE,IAAI;oBACpB,MAAM,EAAE,SAAS,CAAC,MAAM;iBACzB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvD,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,kCAAyB,CAAC,CAAC;YACjE,MAAM,SAAS,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,uBAAgB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;YAC3E,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;YAClD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;gBAC3B,MAAM,IAAI,uBAAgB,CAAC,iBAAiB,EAAE,yDAAyD,CAAC,CAAC;YAC3G,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC7C,MAAM,IAAI,uBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;YACrF,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,uBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;YACrF,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAEtD,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE;oBACJ,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,QAAQ,EAAE,IAAI,EAAE,IAAI;oBACpB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;iBACvC;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,IAAI,CACV,iBAAiB,EACjB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAC/C,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC9C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YAChG,CAAC;YAED,MAAM,OAAO,GAAG,+BAA+B,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAChE,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;YAEjE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC7E,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC,IAAI,CAAC;oBAChB,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE;wBACJ,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,QAAQ,EAAE,IAAI,CAAC,IAAI;wBACnB,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,YAAY,EAAE,KAAK;wBACnB,YAAY,EAAE,CAAC;qBAChB;iBACF,CAAC,CAAC;YACL,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACnC,MAAM,IAAI,uBAAgB,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;YACnF,CAAC;YAED,MAAM,cAAc,GAAG,KAAK,CAAC,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,KAAK,CAAC,6BAA6B,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC/E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,uBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;YACrF,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAEjE,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE;oBACJ,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;oBAC9B,QAAQ,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI;oBACpC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;oBAC1B,YAAY,EAAE,IAAI;oBAClB,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,0BAA0B,EAAE,cAAc;oBAC1C,gBAAgB,EACd,8GAA8G;iBACjH;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QACzD,MAAM,OAAO,GAAG,KAAK,CAAC,0BAA0B,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACxB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,YAAY,GAAG,4BAA4B,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,YAAY,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC3I,OAAO;gBACL,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;gBACtC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,QAAQ,EAAE,IAAI,EAAE,IAAI;gBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,YAAY;aACb,CAAC;QACJ,CAAC,CAAC,CACH,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,IAAI,CACV,0BAA0B,EAC1B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAC1C,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACxF,CAAC;YAED,8BAA8B,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YAE1D,MAAM,GAAG,GAAG,KAAK,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;YACzD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;gBAC3B,MAAM,IAAI,uBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;YACrF,CAAC;YAED,MAAM,SAAS,GAAG,KAAK,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;YAC/D,MAAM,WAAW,GAAG,4BAA4B,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAEnI,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE;oBACJ,WAAW,EAAE,SAAS,CAAC,EAAE;oBACzB,SAAS,EAAE,SAAS,CAAC,UAAU;oBAC/B,WAAW;iBACZ;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,IAAI,CACV,gBAAgB,EAChB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,4BAAgB,EAAC,OAAO,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAM,IAAA,2CAA4B,GAAE,CAAC;YACtD,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAA,gCAAiB,EAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACjE,MAAM,KAAK,GAAG,IAAA,qCAAoB,EAAC,OAAO,CAAC,CAAC;gBAC5C,IAAI,CAAC,KAAK,IAAI,CAAC,IAAA,8CAA6B,EAAC,KAAK,CAAC,EAAE,CAAC;oBACpD,MAAM,IAAI,uBAAgB,CAAC,oBAAoB,EAAE,mCAAmC,CAAC,CAAC;gBACxF,CAAC;YACH,CAAC;YAED,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,qBAAqB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;YAC5E,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,uBAAgB,CAAC,yBAAyB,EAAE,oDAAoD,CAAC,CAAC;YAC9G,CAAC;YAED,MAAM,QAAQ,GAAG,KAAK,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;YAC/D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,uBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;YACrF,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,IAAI,CACV,aAAa,EACb,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAC1C,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACxF,CAAC;YAED,8BAA8B,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YAE1D,MAAM,UAAU,GAAG,KAAK,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;YACpE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAChF,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,IAAI,CACV,cAAc,EACd,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YACnD,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;gBACzB,MAAM,IAAI,uBAAgB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;YAC3E,CAAC;YAED,MAAM,KAAK,GAAG,KAAK,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC;YACzD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,uBAAgB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;YAC3E,CAAC;YAED,IAAI,OAAO,CAAC;YACZ,IAAI,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;gBACzB,OAAO,GAAG,KAAK,CAAC,8BAA8B,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,KAAK,CAAC,oBAAoB,CAAC;oBACnC,cAAc,EAAE,KAAK,CAAC,gBAAgB;oBACtC,gBAAgB,EAAE,KAAK,CAAC,EAAE;oBAC1B,MAAM,EAAE,KAAK,CAAC,OAAO;oBACrB,YAAY,EAAE,YAAY,EAAE,IAAI,EAAE;iBACnC,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAEtD,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE;oBACJ,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,QAAQ,EAAE,IAAI,EAAE,IAAI;oBACpB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,SAAS,EAAE,OAAO,CAAC,SAAS;iBAC7B;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,2BAA2B,CAAC,OAAwB;IACxE,MAAM,KAAK,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAE1C,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACxD,IAAI,CAAC;YACH,MAAM,IAAA,iCAA0B,EAAC,OAAO,CAAC,CAAC;YAE1C,MAAM,KAAK,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,+BAAsB,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9E,KAAK,CAAC,oBAAoB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAE7C,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,+BAAsB,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,IAAI,CAA8B,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvF,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;QACjG,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,kCAA2B,GAAE,CAAC;QAC5C,oEAAoE;QACpE,KAAK,CAAC,MAAM,CACV,YAAY,EACZ,GAAG,oCAA2B,IAAI,kBAAkB,CAAC,KAAK,CAAC,qCAAqC,CACjG,CAAC;QAEF,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/scope/bindings-sidecar.d.ts

@@ -0,0 +1,9 @@
+import { BindingEntry } from '@agent-deck/shared';
+/** Write workspace-keyed binding for terminal status line; prune orphaned MCP session UUID keys. */
+export declare function upsertWorkspaceDisplayBinding(workspaceRoot: string, entry: BindingEntry): Promise<void>;
+export declare function readBindingForDisplay(options: {
+    sessionId?: string;
+    workspaceRoot: string;
+}): Promise<BindingEntry | null>;
+export declare function readBindingForWorkspace(workspaceRoot: string): Promise<BindingEntry | null>;
+//# sourceMappingURL=bindings-sidecar.d.ts.map

package/dist/scope/bindings-sidecar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bindings-sidecar.d.ts","sourceRoot":"","sources":["../../src/scope/bindings-sidecar.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,YAAY,EASb,MAAM,oBAAoB,CAAC;AAoC5B,oGAAoG;AACpG,wBAAsB,6BAA6B,CACjD,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAG/B;AAED,wBAAsB,uBAAuB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAGjG"}

package/dist/scope/bindings-sidecar.js

@@ -0,0 +1,57 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.upsertWorkspaceDisplayBinding = upsertWorkspaceDisplayBinding;
+exports.readBindingForDisplay = readBindingForDisplay;
+exports.readBindingForWorkspace = readBindingForWorkspace;
+const promises_1 = __importDefault(require("node:fs/promises"));
+const node_path_1 = __importDefault(require("node:path"));
+const shared_1 = require("@agent-deck/shared");
+async function readBindingsFile() {
+    const merged = {};
+    for (const filePath of (0, shared_1.listBindingsFileCandidates)()) {
+        try {
+            const raw = await promises_1.default.readFile(filePath, 'utf8');
+            const parsed = shared_1.BindingsFileSchema.safeParse(JSON.parse(raw));
+            if (parsed.success) {
+                Object.assign(merged, parsed.data);
+            }
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT') {
+                throw error;
+            }
+        }
+    }
+    return merged;
+}
+async function writeBindingsFile(bindings) {
+    const filePath = (0, shared_1.resolveBindingsFilePath)();
+    await promises_1.default.mkdir(node_path_1.default.dirname(filePath), { recursive: true });
+    await promises_1.default.writeFile(filePath, `${JSON.stringify(bindings, null, 2)}\n`, 'utf8');
+}
+function pruneLegacySessionKeys(bindings) {
+    for (const key of Object.keys(bindings)) {
+        if ((0, shared_1.isBindingSidecarSessionKey)(key)) {
+            delete bindings[key];
+        }
+    }
+}
+/** Write workspace-keyed binding for terminal status line; prune orphaned MCP session UUID keys. */
+async function upsertWorkspaceDisplayBinding(workspaceRoot, entry) {
+    const bindings = await readBindingsFile();
+    bindings[(0, shared_1.normalizeWorkspaceRoot)(workspaceRoot)] = entry;
+    pruneLegacySessionKeys(bindings);
+    await writeBindingsFile(bindings);
+}
+async function readBindingForDisplay(options) {
+    const bindings = await readBindingsFile();
+    return (0, shared_1.resolveBindingEntry)(bindings, options);
+}
+async function readBindingForWorkspace(workspaceRoot) {
+    const bindings = await readBindingsFile();
+    return (0, shared_1.lookupWorkspaceBinding)(bindings, workspaceRoot);
+}
+//# sourceMappingURL=bindings-sidecar.js.map

package/dist/scope/bindings-sidecar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bindings-sidecar.js","sourceRoot":"","sources":["../../src/scope/bindings-sidecar.ts"],"names":[],"mappings":";;;;;AAiDA,sEAQC;AAED,sDAMC;AAED,0DAGC;AAtED,gEAAkC;AAClC,0DAA6B;AAC7B,+CAU4B;AAE5B,KAAK,UAAU,gBAAgB;IAC7B,MAAM,MAAM,GAAiB,EAAE,CAAC;IAEhC,KAAK,MAAM,QAAQ,IAAI,IAAA,mCAA0B,GAAE,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,2BAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAsB;IACrD,MAAM,QAAQ,GAAG,IAAA,gCAAuB,GAAE,CAAC;IAC3C,MAAM,kBAAE,CAAC,KAAK,CAAC,mBAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,kBAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAsB;IACpD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,IAAI,IAAA,mCAA0B,EAAC,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;AACH,CAAC;AAED,oGAAoG;AAC7F,KAAK,UAAU,6BAA6B,CACjD,aAAqB,EACrB,KAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,EAAE,CAAC;IAC1C,QAAQ,CAAC,IAAA,+BAAsB,EAAC,aAAa,CAAC,CAAC,GAAG,KAAK,CAAC;IACxD,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AACpC,CAAC;AAEM,KAAK,UAAU,qBAAqB,CAAC,OAG3C;IACC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,EAAE,CAAC;IAC1C,OAAO,IAAA,4BAAmB,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAAC,aAAqB;IACjE,MAAM,QAAQ,GAAG,MAAM,gBAAgB,EAAE,CAAC;IAC1C,OAAO,IAAA,+BAAsB,EAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AACzD,CAAC"}

package/dist/scope/repo-deck.d.ts

@@ -0,0 +1,10 @@
+import { RepoDeckManifest } from '@agent-deck/shared';
+export declare class RepoDeckManifestError extends Error {
+    constructor(message: string);
+}
+/** Lightweight parser — avoids a YAML dependency for the single-field MVP manifest. */
+export declare function parseRepoDeckManifest(content: string): RepoDeckManifest;
+export declare function repoDeckManifestFilePath(workspaceRoot: string): string;
+export declare function loadRepoDeckManifest(workspaceRoot: string): Promise<RepoDeckManifest | null>;
+export declare function formatRepoDeckManifest(deckId: string, name?: string): string;
+//# sourceMappingURL=repo-deck.d.ts.map

package/dist/scope/repo-deck.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-deck.d.ts","sourceRoot":"","sources":["../../src/scope/repo-deck.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAmD,MAAM,oBAAoB,CAAC;AAEvG,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI5B;AAED,uFAAuF;AACvF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAavE;AAED,wBAAgB,wBAAwB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,wBAAsB,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAiBlG;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAS5E"}

package/dist/scope/repo-deck.js

@@ -0,0 +1,63 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RepoDeckManifestError = void 0;
+exports.parseRepoDeckManifest = parseRepoDeckManifest;
+exports.repoDeckManifestFilePath = repoDeckManifestFilePath;
+exports.loadRepoDeckManifest = loadRepoDeckManifest;
+exports.formatRepoDeckManifest = formatRepoDeckManifest;
+const promises_1 = __importDefault(require("node:fs/promises"));
+const node_path_1 = __importDefault(require("node:path"));
+const shared_1 = require("@agent-deck/shared");
+class RepoDeckManifestError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'RepoDeckManifestError';
+    }
+}
+exports.RepoDeckManifestError = RepoDeckManifestError;
+/** Lightweight parser — avoids a YAML dependency for the single-field MVP manifest. */
+function parseRepoDeckManifest(content) {
+    const deckIdMatch = content.match(/^deck_id:\s*["']?([0-9a-f-]{36})["']?\s*$/im);
+    if (!deckIdMatch) {
+        throw new RepoDeckManifestError('deck_id is required in .agent-deck/deck.yaml');
+    }
+    const nameMatch = content.match(/^name:\s*["']?(.+?)["']?\s*$/im);
+    const raw = {
+        deck_id: deckIdMatch[1],
+        ...(nameMatch ? { name: nameMatch[1].trim() } : {}),
+    };
+    return shared_1.RepoDeckManifestSchema.parse(raw);
+}
+function repoDeckManifestFilePath(workspaceRoot) {
+    return node_path_1.default.join(node_path_1.default.resolve(workspaceRoot), shared_1.REPO_DECK_MANIFEST_PATH);
+}
+async function loadRepoDeckManifest(workspaceRoot) {
+    const filePath = repoDeckManifestFilePath(workspaceRoot);
+    try {
+        const content = await promises_1.default.readFile(filePath, 'utf8');
+        return parseRepoDeckManifest(content);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            return null;
+        }
+        if (error instanceof RepoDeckManifestError) {
+            throw error;
+        }
+        throw new RepoDeckManifestError(error instanceof Error ? error.message : 'Failed to read .agent-deck/deck.yaml');
+    }
+}
+function formatRepoDeckManifest(deckId, name) {
+    const lines = [
+        '# Link this repo to an Agent Deck (copy to .agent-deck/deck.yaml in your project)',
+        `deck_id: ${deckId}`,
+    ];
+    if (name) {
+        lines.push(`name: ${name}`);
+    }
+    return lines.join('\n') + '\n';
+}
+//# sourceMappingURL=repo-deck.js.map

package/dist/scope/repo-deck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-deck.js","sourceRoot":"","sources":["../../src/scope/repo-deck.ts"],"names":[],"mappings":";;;;;;AAYA,sDAaC;AAED,4DAEC;AAED,oDAiBC;AAED,wDASC;AA3DD,gEAAkC;AAClC,0DAA6B;AAC7B,+CAAuG;AAEvG,MAAa,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AALD,sDAKC;AAED,uFAAuF;AACvF,SAAgB,qBAAqB,CAAC,OAAe;IACnD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,qBAAqB,CAAC,8CAA8C,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG;QACV,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;QACvB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC;IAEF,OAAO,+BAAsB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,SAAgB,wBAAwB,CAAC,aAAqB;IAC5D,OAAO,mBAAI,CAAC,IAAI,CAAC,mBAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,gCAAuB,CAAC,CAAC;AACzE,CAAC;AAEM,KAAK,UAAU,oBAAoB,CAAC,aAAqB;IAC9D,MAAM,QAAQ,GAAG,wBAAwB,CAAC,aAAa,CAAC,CAAC;IAEzD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;YAC3C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,qBAAqB,CAC7B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sCAAsC,CAChF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,sBAAsB,CAAC,MAAc,EAAE,IAAa;IAClE,MAAM,KAAK,GAAG;QACZ,mFAAmF;QACnF,YAAY,MAAM,EAAE;KACrB,CAAC;IACF,IAAI,IAAI,EAAE,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC"}

package/dist/server/index.d.ts

@@ -8,10 +8,12 @@ import { CollectionWarningService } from '../services/collection-warning-service
 import { PlaybookManager } from '../playbooks/playbook-manager';
 import { PatchManager } from '../playbooks/patch-manager';
 import { LiveDisplayRegistry } from '../scope/live-display-registry';
+import { TrustedSessionStore } from '../trusted-session/store';
 export declare function createServer(): Promise<import("fastify").FastifyInstance<import("http").Server<typeof import("http").IncomingMessage, typeof import("http").ServerResponse>, import("http").IncomingMessage, import("http").ServerResponse<import("http").IncomingMessage>, import("fastify").FastifyBaseLogger, import("fastify").FastifyTypeProviderDefault>>;
 declare module 'fastify' {
     interface FastifyInstance {
         db: DatabaseManager;
+        trustedSessionStore: TrustedSessionStore;
         serviceManager: ServiceManager;
         mcpClient: MCPClientManager;
         oauthManager: OAuthManager;

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAUzD,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,EAAqB,iBAAiB,EAAE,sBAAsB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAE7H,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAGlF,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAK1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAIrE,wBAAsB,YAAY,qUAmJjC;AAGD,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,EAAE,EAAE,eAAe,CAAC;QACpB,cAAc,EAAE,cAAc,CAAC;QAC/B,SAAS,EAAE,gBAAgB,CAAC;QAC5B,YAAY,EAAE,YAAY,CAAC;QAC3B,sBAAsB,EAAE,sBAAsB,CAAC;QAC/C,eAAe,EAAE,eAAe,CAAC;QACjC,kBAAkB,EAAE,kBAAkB,CAAC;QACvC,iBAAiB,EAAE,iBAAiB,CAAC;QACrC,eAAe,EAAE,eAAe,CAAC;QACjC,YAAY,EAAE,YAAY,CAAC;QAC3B,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,mBAAmB,EAAE,mBAAmB,CAAC;QACzC,sBAAsB,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,CAAC;QAC9D,mBAAmB,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;QAClD,cAAc,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAC;KACrD;CACF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAUzD,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,EAAqB,iBAAiB,EAAE,sBAAsB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAE7H,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAIlF,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAK1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAGrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAI/D,wBAAsB,YAAY,qUAsKjC;AAGD,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,EAAE,EAAE,eAAe,CAAC;QACpB,mBAAmB,EAAE,mBAAmB,CAAC;QACzC,cAAc,EAAE,cAAc,CAAC;QAC/B,SAAS,EAAE,gBAAgB,CAAC;QAC5B,YAAY,EAAE,YAAY,CAAC;QAC3B,sBAAsB,EAAE,sBAAsB,CAAC;QAC/C,eAAe,EAAE,eAAe,CAAC;QACjC,kBAAkB,EAAE,kBAAkB,CAAC;QACvC,iBAAiB,EAAE,iBAAiB,CAAC;QACrC,eAAe,EAAE,eAAe,CAAC;QACjC,YAAY,EAAE,YAAY,CAAC;QAC3B,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,mBAAmB,EAAE,mBAAmB,CAAC;QACzC,sBAAsB,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,CAAC;QAC9D,mBAAmB,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;QAClD,cAAc,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAC;KACrD;CACF"}