@agent-relay/sandbox 0.1.1 → 0.1.3

package/dist/agent37/runtime.d.ts

@@ -0,0 +1,415 @@
+import { Buffer } from "node:buffer";
+import type { ExecOptions, ExecResult, LaunchOptions, RuntimeCapabilities, RuntimeHandle, WorkflowRuntime } from "../types.js";
+import type { RunScriptResult, SandboxRuntime } from "../port.js";
+import { Agent37Client } from "./client.js";
+import type { Agent37Fetch } from "./client.js";
+/** Instance lifecycle states the hosting API reports. */
+export type Agent37InstanceStatus = "provisioning" | "running" | "stopping" | "stopped" | "starting" | "restarting" | "updating" | "sleeping" | "waking" | "failed" | "deleting" | "deleted";
+/** Instance shape. Valid combinations are provider- and plan-specific. */
+export type Agent37Resources = {
+    cpu: number;
+    memory: number;
+    disk?: number;
+};
+/**
+ * A port exposed at a permanent unauthenticated URL, for user-space services.
+ *
+ * The instance plane (file API) is authenticated with `X-Agent37-Key` and does
+ * NOT require a public port. Register public ports only for services that need
+ * anonymous ingress from outside the instance.
+ */
+export type Agent37PublicPort = {
+    port: number;
+    prefix?: string;
+};
+/** Ceilings on an instance's managed-service usage, in micros. */
+export type Agent37Budget = {
+    monthly_cap_micros?: number;
+    credit_micros?: number;
+};
+/** The instance object, as returned by the hosting plane. */
+export type Agent37Instance = {
+    id: string;
+    status: Agent37InstanceStatus;
+    status_reason?: string | null;
+    template?: string | null;
+    url?: string | null;
+    user?: string | null;
+    name?: string | null;
+    metadata?: Record<string, string> | null;
+    resources?: Agent37Resources | null;
+    auto_sleep?: boolean;
+    idle_timeout_seconds?: number;
+    past_due?: boolean;
+    created?: number;
+};
+/** Snapshot of a container's own output plus a compact health readout. */
+export type Agent37ContainerLogs = {
+    logs: string;
+    truncated: boolean;
+    health: Record<string, unknown> | null;
+    fetched_at?: number;
+};
+export type Agent37RuntimeOptions = {
+    /** `sk_live_` workspace key. Never sourced from the environment here. */
+    apiKey: string;
+    /**
+     * Origin of the hosting API. Required: this package ships no endpoint
+     * defaults, so the caller names the control plane (or a proxy in front of
+     * it) explicitly.
+     */
+    baseUrl: string;
+    /**
+     * Home directory inside the instance image. Required: it is template-
+     * specific, so there is no default correct for every consumer.
+     */
+    defaultHomeDir: string;
+    /**
+     * Template to launch. Omitted, the field is left off the create body and the
+     * provider applies its own default — this package does not substitute one.
+     */
+    template?: string;
+    /** Instance shape. Omitted, the provider applies its own smallest shape. */
+    resources?: Agent37Resources;
+    /** `dedicated` or `shared`. Omitted, the provider applies its own default. */
+    type?: string;
+    /** Managed-service ceilings. Omitted, the provider applies its own default. */
+    budget?: Agent37Budget;
+    /** Opt instances into idle checkpointing. */
+    autoSleep?: boolean;
+    /** Idle seconds before sleeping. Only meaningful with `autoSleep`. */
+    idleTimeoutSeconds?: number;
+    /**
+     * Ports to expose at permanent unauthenticated URLs, for user-space services.
+     * The instance plane (file API) uses `X-Agent37-Key` auth and does not need
+     * a public port.
+     */
+    publicPorts?: readonly Agent37PublicPort[];
+    /** Opaque attribution tag stamped on every instance this runtime launches. */
+    user?: string;
+    /** Transport seam. Defaults to the global `fetch`. */
+    fetch?: Agent37Fetch;
+    /** Retry policy passthrough. */
+    maxAttempts?: number;
+    retryBaseDelayMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+    /** Pre-built client, for tests or for sharing one transport across runtimes. */
+    client?: Agent37Client;
+    /**
+     * Largest file `uploadBundle` will push through the base64-over-exec
+     * fallback, used only when an instance exposes no URL of its own.
+     */
+    execUploadMaxBytes?: number;
+};
+export type Agent37LookupOptions = {
+    states?: readonly string[] | null;
+    limit?: number;
+    pageSize?: number;
+    owned?: boolean;
+    excludeIds?: readonly string[];
+    timeoutMs?: number;
+};
+export type Agent37CountOptions = {
+    states?: readonly string[] | null;
+    limit?: number;
+    pageSize?: number;
+    maxCount?: number;
+    timeoutMs?: number;
+};
+export type Agent37LaunchOptions = {
+    name?: string;
+    env?: Record<string, string>;
+    labels?: Record<string, string>;
+    workdir?: string;
+};
+export type Agent37RunScriptOptions = {
+    command: string;
+    /**
+     * Command lifetime, per the port's contract: once it elapses the command is
+     * no longer running. Agent37 can only satisfy this via its own
+     * {@link AGENT37_COMMAND_CAP_MS} cap, so a shorter value is rejected with
+     * {@link Agent37CommandTimeoutUnsupportedError} rather than silently
+     * downgraded to an HTTP abort that would not stop anything.
+     */
+    timeoutMs?: number;
+    /**
+     * How long this client waits for the HTTP response, and nothing more. On
+     * expiry the request is abandoned and **the command keeps running inside the
+     * instance** — this is a budget for the caller, not a cancellation.
+     */
+    requestTimeoutMs?: number;
+    env?: Record<string, string>;
+    cwd?: string;
+};
+/** `ExecOptions` plus the request budget that has no bootstrap-plane equivalent. */
+export type Agent37ExecOptions = ExecOptions & {
+    requestTimeoutMs?: number;
+};
+export type Agent37BundleFile = {
+    source: string | Buffer;
+    destination: string;
+};
+export type Agent37UploadBundleOptions = {
+    files: Array<Agent37BundleFile>;
+};
+/**
+ * The provider's hard ceiling on a single command, in milliseconds. Every
+ * command is bounded by this whether the caller asks for it or not, which is
+ * what makes a `timeoutMs` of at least this value honestly satisfiable.
+ */
+export declare const AGENT37_COMMAND_CAP_MS = 280000;
+/** Raised when `env` would be rejected by the provider's own create validation. */
+export declare class Agent37EnvValidationError extends Error {
+    constructor(message: string);
+}
+/**
+ * Raised when start / stop / destroy is handed an instance this runtime knows
+ * nothing about.
+ *
+ * Ownership here is *caller-declared attachment*, not in-process provenance:
+ * `launch` owns what it creates, and `getById` / `findAllByLabels` attach as
+ * unowned unless the caller passes `owned: true`. An instance that was never
+ * resolved through any of those is refused outright rather than mutated on a
+ * guess.
+ *
+ * This is deliberately louder than the Daytona adapter, which silently returns
+ * for an unregistered handle. A destroy that quietly does nothing reads to the
+ * caller as a completed teardown that never happened, which is the more
+ * expensive of the two failure modes.
+ */
+export declare class Agent37ForeignHandleError extends Error {
+    constructor(id: string, operation: string);
+}
+/**
+ * Raised when a command completes but the provider's reply carries no
+ * `exit_code`, so its outcome is unknown.
+ *
+ * `runScript` reports this as `exitCode: null`, which the port models. `exec`
+ * cannot: `ExecResult.exitCode` is a number, and the only numbers available are
+ * lies — `0` would report a command that may have failed as a success.
+ */
+export declare class Agent37UnknownExitCodeError extends Error {
+    readonly output: string;
+    constructor(id: string, output: string);
+}
+/**
+ * Raised when a caller asks for a command lifetime Agent37 cannot enforce.
+ *
+ * `timeoutMs` on the port means the command is no longer running once it
+ * elapses. Agent37's `exec` accepts no timeout, and aborting the HTTP request
+ * only abandons the response — the command keeps running inside the instance.
+ * The single lifetime bound Agent37 genuinely enforces is its own
+ * {@link AGENT37_COMMAND_CAP_MS} cap, so anything shorter is refused instead of
+ * being faked with an `AbortSignal`.
+ *
+ * Callers that want to stop *waiting* (as opposed to stopping the command) want
+ * `requestTimeoutMs`, which is named for what it actually does.
+ */
+export declare class Agent37CommandTimeoutUnsupportedError extends Error {
+    constructor(timeoutMs: number);
+}
+/**
+ * Raised when a 2xx reply does not carry the shape the endpoint documents.
+ *
+ * The alternative is worse than an error, because a tolerant decode turns a
+ * broken response into a *confident negative*: `GET /v1/instances` answering
+ * with HTML from a proxy would read as "no instance matches these labels",
+ * which is the exact answer that makes a caller abandon a running warm lease
+ * and pay to launch a replacement. Similarly, a create reply with no `id`
+ * would register ownership under `undefined` and aim a later DELETE at a
+ * garbage path.
+ *
+ * So the adapter fails closed: an unusable reply is reported as unusable, and
+ * the caller retries or escalates instead of acting on a fiction. Only `id` and
+ * `status` are required to be non-empty strings — an *unrecognized* status is
+ * forward compatibility, not corruption, and {@link normalizeStatus} already
+ * treats anything but `running` as not ready.
+ */
+export declare class Agent37MalformedResponseError extends Error {
+    /** Method and path only, matching {@link Agent37ApiError.request}. */
+    readonly request: string;
+    constructor(request: string, detail: string);
+}
+/**
+ * Raised when a caller asks `launch` to bound how long instance creation may
+ * take.
+ *
+ * HOLD — not implementable against the documented contract. `POST
+ * /v1/instances` is synchronous: it returns 201 only once the instance reports
+ * `running`. Abandoning that request client-side does not un-allocate anything
+ * the provider has already started building, and the reply that would have
+ * carried the new instance's `id` is discarded with it. The result is an
+ * orphan the caller cannot name, let alone delete — a billed leak dressed up
+ * as a timeout.
+ *
+ * Cleaning up afterwards would need one of three things the API does not
+ * document: an idempotency key to correlate a retry with the original create,
+ * a create call that returns an id before the instance is ready, or a
+ * guarantee about whether a still-provisioning instance appears in `GET
+ * /v1/instances` (and carries the `metadata` it was created with) so a bounded
+ * sweep could identify exactly the one that was abandoned. Sweeping on labels
+ * alone is not a substitute: labels are reused precisely so warm leases can be
+ * found by them, so a sweep could delete a healthy instance belonging to
+ * someone else.
+ *
+ * Verifying any of that needs live calls against the provider, which this work
+ * is not authorized to make. Until it is verified, the option is refused rather
+ * than shipped as an `AbortSignal` that reads like a cancellation and is not
+ * one.
+ *
+ * The refusal is purely a runtime one, and deliberately so. `createTimeoutSeconds`
+ * lives on the shared `LaunchOptions` and on `SandboxRuntime.launch` because
+ * other providers honour it, so it typechecks against this adapter too and no
+ * compile error is available to lean on. Narrowing this one signature would not
+ * change that — TypeScript compares method parameters bivariantly, so a caller
+ * holding a `SandboxRuntime` reference could still pass the option — and it
+ * would trade a real guarantee for the appearance of one while breaking the
+ * substitutability the port exists to provide.
+ *
+ * Callers that need a bound should launch with labels unique to the attempt,
+ * apply their own deadline around `launch`, and reconcile with
+ * `findAllByLabels(..., { owned: true })` — a recovery they can reason about,
+ * because they chose the labels.
+ */
+export declare class Agent37CreateTimeoutUnsupportedError extends Error {
+    constructor();
+}
+export declare class Agent37Runtime implements SandboxRuntime, WorkflowRuntime {
+    readonly id = "agent37";
+    /**
+     * Bootstrap-plane capabilities (the live in-sandbox session), distinct from
+     * `SandboxRuntimeCapabilities`.
+     *
+     * `pty: false` and `streamingLogs: false` are facts, not caution: `exec` is a
+     * single buffered request/response with no TTY, and the one log endpoint
+     * (`GET /v1/instances/{id}/logs`) returns a snapshot with a `tail` count, not
+     * a stream. `snapshots: false` likewise — templates are built from a
+     * Dockerfile ahead of time; there is no documented call that captures a
+     * running instance as a reusable image.
+     */
+    readonly capabilities: RuntimeCapabilities;
+    /**
+     * `lifecycle: true` because `start` and `stop` are real hosting-plane calls
+     * that change `status`, not the no-ops some providers ship.
+     *
+     * `warmLease: true` because label lookup returns real matches. `GET
+     * /v1/instances` documents no server-side filter, so the filtering happens
+     * here — but it happens over a complete, unpaginated list, which makes an
+     * empty result mean "no match" and nothing else. That is the ambiguity the
+     * capability exists to rule out, and it is ruled out.
+     *
+     * `asyncExec` is not declared here; it is derived from method presence by
+     * `resolveSandboxRuntimeCapabilities`. Async exec is absent from this adapter
+     * because nohup+/tmp emulation cannot provide durable, idempotent guarantees.
+     */
+    readonly declaredCapabilities: {
+        readonly warmLease: true;
+        readonly lifecycle: true;
+    };
+    private readonly client;
+    private readonly defaultHomeDir;
+    private readonly template?;
+    private readonly resources?;
+    private readonly instanceType?;
+    private readonly budget?;
+    private readonly autoSleep?;
+    private readonly idleTimeoutSeconds?;
+    private readonly publicPorts?;
+    private readonly user?;
+    private readonly execUploadMaxBytes;
+    private readonly instanceUrls;
+    private readonly ownership;
+    constructor(options: Agent37RuntimeOptions);
+    findByLabels(labels: Record<string, string>, options?: Agent37LookupOptions): Promise<RuntimeHandle | null>;
+    findAllByLabels(labels: Record<string, string>, options?: Agent37LookupOptions): Promise<RuntimeHandle[]>;
+    countByLabels(labels: Record<string, string>, options?: Agent37CountOptions): Promise<number>;
+    getById(id: string, options?: {
+        states?: readonly string[] | null;
+        owned?: boolean;
+        homeDir?: string;
+        workdir?: string;
+    }): Promise<RuntimeHandle | null>;
+    launch(options?: Agent37LaunchOptions & LaunchOptions): Promise<RuntimeHandle>;
+    start(handle: RuntimeHandle): Promise<RuntimeHandle>;
+    stop(handle: RuntimeHandle): Promise<void>;
+    destroy(handle: RuntimeHandle): Promise<void>;
+    exec(handle: RuntimeHandle, command: string, options?: Agent37ExecOptions): Promise<ExecResult>;
+    runScript(handle: RuntimeHandle, options: Agent37RunScriptOptions): Promise<RunScriptResult>;
+    uploadBundle(handle: RuntimeHandle, options: Agent37UploadBundleOptions): Promise<void>;
+    uploadFile(handle: RuntimeHandle, source: string | Buffer, destination: string): Promise<void>;
+    downloadFile(handle: RuntimeHandle, source: string, destination?: string): Promise<Buffer | void>;
+    /**
+     * Read-side counterpart to `uploadFile`'s exec fallback: templates registered
+     * with no ports have no URL of their own, so the file plane is unreachable
+     * and the only way out is through the hosting plane's exec. The payload is
+     * carried inside a bounded shell script that first sizes the file, refuses
+     * anything larger than `execUploadMaxBytes` (the same cap as the upload
+     * path), then emits base64 on stdout. Truncated exec output is rejected
+     * rather than decoded — a truncated base64 stream would decode into the
+     * wrong bytes without error.
+     */
+    private downloadFileViaExec;
+    getHomeDir(handle: RuntimeHandle): Promise<string>;
+    /**
+     * Container boot and runtime logs. Unlike `exec`, this works in any state,
+     * which is what makes it the tool for an instance that will not stay up.
+     */
+    getContainerLogs(handle: RuntimeHandle, options?: {
+        tail?: number;
+    }): Promise<Agent37ContainerLogs>;
+    /**
+     * Record what the caller declared about an instance.
+     *
+     * Monotonic on purpose: once ownership is claimed it survives later read-only
+     * resolutions of the same id. A plain `findAllByLabels` sweep listing an
+     * instance must not quietly revoke the delete rights a caller already
+     * declared through `getById(id, { owned: true })`.
+     */
+    private declareOwnership;
+    /**
+     * Resolve what may be done to `id`: `true` to mutate it, `false` for an
+     * attachment this runtime must leave alone. Throws when the id was never
+     * registered, because that is a caller mistake rather than a policy decision.
+     */
+    private requireOwnership;
+    /** Drop every trace of an instance this runtime is done with. */
+    private forget;
+    private execRaw;
+    private listInstances;
+    private fetchInstance;
+    private resolveInstanceUrl;
+    private registerInstance;
+}
+/**
+ * Map a provider status onto the normalized vocabulary the delivery path
+ * reasons about.
+ *
+ * Only `running` is `STARTED`. Every transitional status — `provisioning`,
+ * `starting`, `waking`, `restarting`, `updating` — reads as `STOPPED`, so the
+ * default `["STARTED"]` filter can never hand a caller an instance that is not
+ * yet able to accept an exec.
+ */
+export declare function normalizeStatus(status: Agent37InstanceStatus | undefined): string;
+/**
+ * Reject a command lifetime Agent37 cannot deliver.
+ *
+ * Anything at or above the provider's cap is genuinely satisfied — the command
+ * cannot outlive the cap, so it certainly cannot outlive a longer deadline.
+ * Anything below it would need real cancellation, which `exec` does not offer.
+ */
+export declare function assertHonourableCommandTimeout(timeoutMs: number | undefined): void;
+export declare function assertValidEnv(env: Record<string, string>): void;
+/**
+ * Build the shell program for one run.
+ *
+ * `exec` accepts a command and nothing else — no cwd, no env, no timeout — so
+ * both are expressed in the program itself. Values are single-quoted, and a
+ * failed `cd` aborts rather than silently running the command in the wrong
+ * directory.
+ */
+export declare function composeScript(command: string, options?: {
+    cwd?: string;
+    env?: Record<string, string>;
+}): string;
+export declare function shellQuote(value: string): string;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/agent37/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/agent37/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,OAAO,KAAK,EACV,WAAW,EACX,UAAU,EACV,aAAa,EACb,mBAAmB,EACnB,aAAa,EACb,eAAe,EAChB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EACf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAmB,aAAa,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,KAAK,EAAwB,YAAY,EAAE,MAAM,aAAa,CAAC;AA6CtE,yDAAyD;AACzD,MAAM,MAAM,qBAAqB,GAC7B,cAAc,GACd,SAAS,GACT,UAAU,GACV,SAAS,GACT,UAAU,GACV,YAAY,GACZ,UAAU,GACV,UAAU,GACV,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,SAAS,CAAC;AAEd,0EAA0E;AAC1E,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,kEAAkE;AAClE,MAAM,MAAM,aAAa,GAAG;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,6DAA6D;AAC7D,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,qBAAqB,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IACzC,SAAS,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACpC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,0EAA0E;AAC1E,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,sEAAsE;IACtE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,WAAW,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC3C,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,gCAAgC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,gFAAgF;IAChF,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;CAOlB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,oFAAoF;AACpF,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG;IAAE,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,KAAK,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;CACjC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,SAAU,CAAC;AAE9C,mFAAmF;AACnF,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAQ1C;AAED;;;;;;;GAOG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAQvC;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,qCAAsC,SAAQ,KAAK;gBAClD,SAAS,EAAE,MAAM;CAU9B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,sEAAsE;IACtE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBAEb,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAK5C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,qBAAa,oCAAqC,SAAQ,KAAK;;CAa9D;AAaD,qBAAa,cAAe,YAAW,cAAc,EAAE,eAAe;IACpE,QAAQ,CAAC,EAAE,aAAa;IAExB;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAMxC;IAEF;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,oBAAoB;;;MAAiD;IAE9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAgB;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAU;IACrC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAA+B;IAC5D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAG5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAO1D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8B;gBAE5C,OAAO,EAAE,qBAAqB;IAqCpC,YAAY,CAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAM1B,eAAe,CACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,aAAa,EAAE,CAAC;IA+BrB,aAAa,CACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,MAAM,CAAC;IAiBZ,OAAO,CACX,EAAE,EAAE,MAAM,EACV,OAAO,GAAE;QACP,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;QAClC,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;KACb,GACL,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IA2B1B,MAAM,CAAC,OAAO,GAAE,oBAAoB,GAAG,aAAkB,GAAG,OAAO,CAAC,aAAa,CAAC;IAkElF,KAAK,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAqBpD,IAAI,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAO1C,OAAO,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IA4B7C,IAAI,CACR,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,UAAU,CAAC;IAoBhB,SAAS,CACb,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,eAAe,CAAC;IA0BrB,YAAY,CAChB,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,IAAI,CAAC;IAMV,UAAU,CACd,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM,GAAG,MAAM,EACvB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAqCV,YAAY,CAChB,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM,EACd,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAezB;;;;;;;;;OASG;YACW,mBAAmB;IAoC3B,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;IAMxD;;;OAGG;IACG,gBAAgB,CACpB,MAAM,EAAE,aAAa,EACrB,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,GAC9B,OAAO,CAAC,oBAAoB,CAAC;IAYhC;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IAUxB;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAQxB,iEAAiE;IACjE,OAAO,CAAC,MAAM;YAKA,OAAO;YAyBP,aAAa;YAiBb,aAAa;YAeb,kBAAkB;IAahC,OAAO,CAAC,gBAAgB;CAYzB;AAiBD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,qBAAqB,GAAG,SAAS,GAAG,MAAM,CAEjF;AA4ED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAIlF;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAyBhE;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAO,GAC3D,MAAM,CAUR;AA+BD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhD"}