@aitne/daemon 0.1.0

package/dist/services/delegated-backend-invoker.d.ts

@@ -0,0 +1,414 @@
+import type Database from "better-sqlite3";
+import { type BackendId, type IntegrationKey } from "@aitne/shared";
+import type { AgentConfig } from "../config.js";
+import { type DelegatedTaskRawErrorClass, type DelegatedTaskToolStepRaw, type DelegatedToolCost, type DelegatedToolErrorClass, type IAgentCore } from "../core/agent-core.js";
+import { DELEGATED_PROXY_DEFAULTS } from "./delegated-proxy-config.js";
+/**
+ * Public success/failure shape returned to the route handler. The invoker
+ * is the chokepoint that decides what HTTP status the daemon should reply
+ * with — `errorClass` is enough to disambiguate (route handler maps to
+ * 502 / 503 / 504 etc. in Phase B).
+ */
+export type InvokeResult = {
+    ok: true;
+    toolResult: unknown;
+    cost: DelegatedToolCost;
+    backendId: BackendId;
+    modelId: string;
+} | {
+    ok: false;
+    errorClass: DelegatedToolErrorClass | "delegated_proxy_busy" | "precondition" | "unimplemented";
+    message: string;
+    /** Partial cost when subprocess managed to spend before failing. */
+    cost?: DelegatedToolCost;
+    backendId?: BackendId;
+    modelId?: string;
+};
+export interface InvokeParams {
+    integrationKey: IntegrationKey;
+    toolName: string;
+    toolArgs: unknown;
+    /** Originating event correlation id, for parent attribution. */
+    parentEventId?: string;
+    /** Originating ProcessKey, becomes `agent_actions.trigger`. */
+    parentProcessKey?: string;
+    /**
+     * Caller-side model id override. Bypasses the user-pin /
+     * `resolveCanonicalDelegatedModel` (lite-tier) cascade so cadence-driven
+     * callers (e.g. `delegated-sync-worker` pinned to medium tier for cadence
+     * reliability) can dictate the model without rewriting the integration's
+     * `delegatedModel` and affecting synchronous skill calls. Falls through to
+     * the canonical resolution if the override is not registered for the
+     * resolved backend.
+     */
+    modelOverride?: string;
+    abortSignal?: AbortSignal;
+}
+/**
+ * DELEGATED-TASK-MODE-DESIGN.md §4.1 — task-mode invocation params. The
+ * route handler is responsible for clamping numeric fields against
+ * `DELEGATED_TASK_HARD_CAPS` and filling defaults from
+ * `config.delegatedTaskDefault*`. By the time params reach the invoker,
+ * every numeric field is concrete and within hard-cap bounds.
+ */
+export interface TaskInvokeParams {
+    integrationKey: IntegrationKey;
+    task: string;
+    outputSchema: Record<string, unknown>;
+    maxToolCalls: number;
+    maxBudgetUsd: number;
+    timeoutMs: number;
+    allowDestructive: boolean;
+    /** Heavy-tier opt-in. Effective only when `delegatedTaskHeavyEnabled`
+     *  is true; otherwise falls back to light. */
+    heavy?: boolean;
+    /**
+     * DELEGATED-TASK-MODE-DESIGN.md §13 Phase 3.3 — opt-in result cache.
+     * When `true` AND `config.delegatedTaskCacheEnabled === true` AND the
+     * outcome qualifies (success, no confirmation, no write-class tool ran),
+     * the result is cached for `delegatedTaskCacheTtlSeconds`. Cache hits
+     * still write a `delegated_task.exec` audit row with `cost_usd=0` and
+     * `detail.cacheHit=true`. Defaults to `false` — the caller decides per
+     * call whether the operation is idempotent enough to cache.
+     *
+     * MUST NOT be set on a destructive-confirm re-invocation
+     * (`allowDestructive: true`) — confirmation does not extend across
+     * cache lifetimes; a stale "I sent this email" reply is wrong on the
+     * next call.
+     */
+    cacheable?: boolean;
+    parentEventId?: string;
+    parentProcessKey?: string;
+    abortSignal?: AbortSignal;
+}
+export type TaskInvokeResult = {
+    ok: true;
+    result: unknown;
+    needsConfirmation: boolean;
+    confirmationPlan: string | null;
+    cost: DelegatedToolCost;
+    trace: DelegatedTaskToolStepRaw[];
+    backendId: BackendId;
+    modelId: string;
+    retried: boolean;
+} | {
+    ok: false;
+    errorClass: DelegatedTaskRawErrorClass | "delegated_proxy_busy" | "precondition" | "task_mode_disabled" | "task_quota_exhausted" | "post_write_format_failure" | "denied_tool";
+    message: string;
+    /** Raw assistant text when the failure was extraction / validation. */
+    raw?: string;
+    cost?: DelegatedToolCost;
+    trace?: DelegatedTaskToolStepRaw[];
+    backendId?: BackendId;
+    modelId?: string;
+    retried?: boolean;
+};
+/**
+ * DELEGATED-TASK-MODE-DESIGN.md §4.2 — Phase 2 generic task-mode params.
+ * No `integrationKey`: callers target a backend directly with explicit
+ * `allowedTools` patterns. The route handler is responsible for body
+ * validation (pattern shape, schema size, hard caps); by the time params
+ * reach the invoker every numeric is concrete and within bounds.
+ *
+ * Phase 1 restriction: `delegatedBackend ∈ {claude, gemini}`. Codex is
+ * deferred to Phase 1.5 — the route returns 501 before construction here.
+ *
+ * Per §4.2 last bullet, model tier is fixed `light` server-side; there is
+ * no `heavy` field. Allowing per-request escalation would hand a
+ * cost-scaling knob to a prompt-injected DM; the heavy ProcessKey opt-in
+ * lives at dashboard config.
+ */
+export interface RunInvokeParams {
+    /**
+     * Phase 1.5 expanded the union to include "codex" — Codex /run is now
+     * supported via daemon-side stream pre-emption (see codex-core.ts
+     * `runDelegatedTask`). Earlier phases restricted this to claude/gemini
+     * because Codex CLI lacked a per-spawn allowedTools surface.
+     */
+    delegatedBackend: BackendId;
+    /** Validated per `validateRunAllowedTools`; non-empty array of patterns. */
+    allowedTools: readonly string[];
+    task: string;
+    outputSchema: Record<string, unknown>;
+    maxToolCalls: number;
+    maxBudgetUsd: number;
+    timeoutMs: number;
+    allowDestructive: boolean;
+    /** §13 Phase 3.3 — see `TaskInvokeParams.cacheable`. */
+    cacheable?: boolean;
+    parentEventId?: string;
+    parentProcessKey?: string;
+    abortSignal?: AbortSignal;
+}
+export type RunInvokeResult = {
+    ok: true;
+    result: unknown;
+    needsConfirmation: boolean;
+    confirmationPlan: string | null;
+    cost: DelegatedToolCost;
+    trace: DelegatedTaskToolStepRaw[];
+    backendId: BackendId;
+    modelId: string;
+    retried: boolean;
+} | {
+    ok: false;
+    errorClass: DelegatedTaskRawErrorClass | "delegated_proxy_busy" | "task_mode_disabled" | "task_quota_exhausted" | "post_write_format_failure";
+    message: string;
+    raw?: string;
+    cost?: DelegatedToolCost;
+    trace?: DelegatedTaskToolStepRaw[];
+    backendId?: BackendId;
+    modelId?: string;
+    retried?: boolean;
+};
+export interface DelegatedBackendInvokerDeps {
+    db: Database.Database;
+    config: AgentConfig;
+    /**
+     * Resolve a core for the given backend id. The invoker depends on a
+     * minimal `IAgentCore` shape (only `runDelegatedTool` is called) so
+     * tests can hand it stubs without wiring the full SDK/CLI.
+     */
+    cores: Partial<Record<BackendId, IAgentCore>>;
+    /**
+     * Optional canonical-light-model resolver. Phase A leaves the actual
+     * resolution wiring to Phase C (it depends on plan-preset config that
+     * is not yet stable here). When omitted, the invoker derives a
+     * deterministic-but-lazy fallback from the listed models on the core,
+     * which is enough to spawn — Phase C will inject a smarter resolver.
+     */
+    resolveProxyModel?: (integrationKey: IntegrationKey, backendId: BackendId) => string;
+    /**
+     * Override defaults for tests (timeout, queue cap, etc.). Production
+     * uses the constants in `delegated-proxy-config.ts`.
+     *
+     * The mapped type widens each `as const` literal in
+     * `DELEGATED_PROXY_DEFAULTS` (e.g. `callTimeoutMs: 120_000` → typed
+     * `120000`) back to its base primitive (`number` / `string`). Without
+     * this, tests passing `{ callTimeoutMs: 1_000 }` to override a timeout
+     * fail with "Type '1000' is not assignable to type '120000'". Production
+     * callers supply the constant unchanged so they're unaffected.
+     */
+    defaults?: Partial<{
+        -readonly [K in keyof typeof DELEGATED_PROXY_DEFAULTS]: typeof DELEGATED_PROXY_DEFAULTS[K] extends infer V ? V extends number ? number : V extends string ? string : V : never;
+    }>;
+    /** Now-source for deterministic tests. Defaults to `Date.now`. */
+    now?: () => number;
+}
+export declare class DelegatedBackendInvoker {
+    private readonly deps;
+    private readonly defaults;
+    private readonly now;
+    /** Inflight permit count (acquired from `maxConcurrent`). */
+    private inflight;
+    /** FIFO waiters parked when `inflight === maxConcurrent`. */
+    private readonly waiters;
+    /**
+     * DELEGATED-TASK-MODE-DESIGN.md §13 Phase 3.3 — result cache.
+     * Constructed lazily on first task() / run() so a daemon that never
+     * fires task mode does not hold the LRU map. `null` until the first
+     * call observes `delegatedTaskCacheEnabled === true`.
+     */
+    private resultCache;
+    /**
+     * §13 Phase 3.2 — session-dir pool. Lazy-constructed for the same
+     * reason as `resultCache`. Pool is per-invoker so concurrent task
+     * runs see a coherent set of idle entries.
+     */
+    private sessionPool;
+    constructor(deps: DelegatedBackendInvokerDeps);
+    /**
+     * §13 Phase 3.3 — return the cache, instantiating it if missing or
+     * recreating it when the live config has flipped TTL or capacity.
+     * Returns null when caching is disabled, in which case callers MUST
+     * skip every cache code path (no insertions either, otherwise an
+     * emergency disable would still serve from a stale local map).
+     */
+    private getResultCache;
+    /**
+     * §13 Phase 3.2 — return the pool, instantiating if missing. Returns
+     * null when the kill switch is off; the caller falls through to the
+     * legacy `makeTempdir` + `cleanupTempdir` path.
+     */
+    private getSessionPool;
+    /**
+     * §13 Phase 3.2 — release-or-create wrapper. Returns either a pool
+     * lease (when pooling is on) or a one-shot synthetic lease (when
+     * pooling is off — preserves the legacy makeTempdir + cleanupTempdir
+     * flow). Either way the caller follows the lease's release/discard
+     * lifecycle.
+     *
+     * The legacy synthetic lease wraps `makeTempdir()` + the existing
+     * janitor cleanup so the rest of the task() / run() body doesn't have
+     * to branch on pooling state.
+     */
+    private acquireSessionDir;
+    /**
+     * Effective concurrency cap — read live so a runtime PATCH /api/config
+     * (Phase C5) takes effect on the next call without a daemon restart.
+     */
+    private get maxConcurrent();
+    /** Visibility for tests + future /health.metrics.delegatedProxy facet. */
+    get queueDepth(): number;
+    get inflightCount(): number;
+    invoke(params: InvokeParams): Promise<InvokeResult>;
+    /**
+     * Resolve the live integration state to a backend + core + model. Called
+     * twice per invocation: once before acquiring a permit (fast-fail without
+     * spending a slot) and again after the permit (defends against the user
+     * flipping mode/backend during a 60s queue wait — the post-permit re-check
+     * is the only place we'd notice).
+     */
+    private resolvePreconditions;
+    private acquirePermit;
+    private releasePermit;
+    /**
+     * Path layout matches existing event sessions for filesystem locality —
+     * the DELEGATED-PROXY design says "same root as existing event-driven
+     * sessions" (§4.4); the actual root in this codebase is `agent-sessions/`.
+     */
+    private sessionsRoot;
+    private makeTempdir;
+    private cleanupTempdir;
+    /**
+     * Materialize the minimal proxy session: just the proxy profile rendered
+     * into the backend-specific instruction file (CLAUDE.md / AGENTS.md /
+     * GEMINI.md). No skills, no MCP config, no character block — the proxy
+     * profile itself is the entire instruction. Per-backend tool-listing
+     * for the connector is the core's responsibility (it knows its native
+     * MCP namespace).
+     */
+    private materializeProxySession;
+    private recordAction;
+    private resolveModel;
+    /**
+     * Per-call maxTurns. Reads `state.delegatedMaxTurns` when set, otherwise
+     * the registry default (DELEGATED_PROXY_DEFAULTS.maxTurns = 2).
+     *
+     * v0.1 surfaces no dashboard UI for `delegatedMaxTurns` (DELEGATED-PROXY-
+     * API-DESIGN.md §4.2 / §13 Q3) but the daemon writes the integrations
+     * blob to `~/.personal-agent/integrations.md` for hand-edit, so a user
+     * who needs more turns for a connector that does a tool-list lookup
+     * before the call (e.g. `list_labels` then `apply_labels`) can edit the
+     * file and have it respected without waiting for UI to land.
+     *
+     * Schema bound is 1..10; defensively clamp here in case a hand-edit
+     * slipped through (the schema runs in withDefaults, but a future zod
+     * relaxation shouldn't silently let an unbounded value through to the
+     * subprocess core).
+     */
+    private resolveMaxTurns;
+    /**
+     * DELEGATED-TASK-MODE-DESIGN.md §4.1 — task-mode chokepoint. Mirrors
+     * `invoke()`'s lifecycle (preconditions → permit → spawn → audit) but:
+     *   - resolves model + allowed tools via the runtime helpers
+     *   - writes a `delegated_task.exec` header row BEFORE spawning so step
+     *     rows can FK back to its `id`
+     *   - applies the §6.2 single-retry rule (only when no destructive /
+     *     write-class tool ran)
+     *   - returns a structured envelope (result OR confirmation OR error)
+     */
+    task(params: TaskInvokeParams): Promise<TaskInvokeResult>;
+    /**
+     * §13 Phase 3.3 — synthesize a `TaskInvokeResult` from a cache hit and
+     * write the corresponding `delegated_task.exec` audit row with cost 0
+     * and `detail.cacheHit=true`. Cache hits do not consume the per-day
+     * quota (the quota counts subprocess invocations) and do not acquire a
+     * concurrency permit (looked up before `acquirePermit`).
+     */
+    private buildCacheHitTaskResult;
+    /**
+     * DELEGATED-TASK-MODE-DESIGN.md §4.2 — Phase 2 generic task mode.
+     * Mirror of `task()` but with no `integrationKey`: the caller pins
+     * `delegatedBackend` and `allowedTools` patterns directly. Designed
+     * for unregistered MCPs the user installed via `gemini mcp add` /
+     * `claude mcp add` (etc.) that lack an `INTEGRATION_DESCRIPTORS` entry.
+     *
+     * Differences from `task()`:
+     *   - No registry / `INTEGRATION_DESCRIPTORS` lookup. The caller's
+     *     `allowedTools` is the only scoping signal.
+     *   - `destructiveTools = []` — the registry has no destructive list
+     *     to consult. Per §7.1 the caller takes responsibility for that
+     *     classification; the absolute-block layer is still applied at
+     *     the core.
+     *   - Write-class set is derived from `allowedTools` via
+     *     {@link resolveRunWriteClassToolPatterns} (verb-segment heuristic
+     *     biased toward false-positive write-class). Phase 2 keeps the
+     *     §6.2 retry rule honest without a connector descriptor.
+     *   - Model tier is fixed `light` server-side (§4.2 last bullet);
+     *     no `heavy` field on the request body.
+     *   - Action type is `'delegated_task.run'` so dashboard filters can
+     *     separate generic Phase 2 traffic from registered-integration
+     *     Phase 1 traffic.
+     *
+     * Risk tier (route-side): Approve. The route handler is the chokepoint
+     * that enforces Bearer auth — see §13 Phase 2 deliverables.
+     */
+    run(params: RunInvokeParams): Promise<RunInvokeResult>;
+    /**
+     * §13 Phase 3.3 — cache-hit synthesizer for `/run`. Same shape as
+     * `buildCacheHitTaskResult` but writes a `delegated_task.run` audit row.
+     */
+    private buildCacheHitRunResult;
+    /**
+     * Resolve the model for a task-mode call.
+     *
+     * §8.1 resolution order — first match wins:
+     *   1. `process_backend_config(delegated_task | delegated_task_heavy)`
+     *      with `main_backend == backendId` — honors dashboard-configured
+     *      per-process model pins (e.g. user pins Haiku 4.5 for
+     *      `delegated_task` on Claude). The ProcessKey constants
+     *      `delegated_task` / `delegated_task_heavy` exist in
+     *      `packages/shared/src/process-key.ts:51-52` precisely so the
+     *      dashboard's process-config surface can target them.
+     *   2. Heavy: first registered heavy-tier model for the backend.
+     *      Light: canonical proxy model (`backend_global_defaults` →
+     *      registry default).
+     *   3. First registered model on the live core (`auto` if none — keeps
+     *      the call alive when a backend's registry is mid-rotation).
+     *
+     * Heavy is opt-in via `config.delegatedTaskHeavyEnabled`; when the
+     * config flag is `false` the heavy ProcessKey falls through to light.
+     */
+    private resolveTaskModel;
+    private readTaskCount;
+    private incrementTaskCount;
+    /**
+     * §13 Phase 3.3 — single-shot INSERT for cache-hit audit rows. Cache
+     * hits don't go through the in-progress → complete two-step lifecycle
+     * (the outcome is known synchronously), so this writes one row with
+     * `result='success'`, `cost_usd=0`, `cost_source='cache'` for clean
+     * dashboard cost-source filtering.
+     */
+    private recordCacheHitAuditRow;
+    private recordTaskHeaderInProgress;
+    private completeTaskHeader;
+    private recordTaskToolStep;
+}
+/**
+ * DELEGATED-TASK-MODE-DESIGN.md §11.1 crash safety — boot-time janitor
+ * that flips orphaned `delegated_task.exec` rows older than `maxAgeMs`
+ * (default 5 min) from `result='in_progress'` to `result='failed'` with
+ * `error='subprocess_orphaned'`. Without this, a daemon crash mid-task
+ * leaves the row in flight forever and poisons the dashboard's "in-flight
+ * task" counter.
+ *
+ * Returns the number of rows updated.
+ */
+export declare function runDelegatedTaskOrphanJanitor(db: Database.Database, options?: {
+    now?: () => number;
+    maxAgeMs?: number;
+}): number;
+/**
+ * Boot-time janitor — scans the sessions root for orphan `proxy-*` dirs
+ * older than the configured threshold and removes them. Covers the SIGKILL
+ * mid-call case the per-call `finally` cannot. Safe to call before any
+ * invocations have happened.
+ *
+ * Returns the number of directories removed (for logging at startup).
+ */
+export declare function runProxyTempdirJanitor(dataDir: string, options?: {
+    now?: () => number;
+    maxAgeMs?: number;
+}): number;
+//# sourceMappingURL=delegated-backend-invoker.d.ts.map

package/dist/services/delegated-backend-invoker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegated-backend-invoker.d.ts","sourceRoot":"","sources":["../../src/services/delegated-backend-invoker.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,cAAc,EACpB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAIL,KAAK,0BAA0B,EAE/B,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAE5B,KAAK,UAAU,EAChB,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAoCvE;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GACpB;IACA,EAAE,EAAE,IAAI,CAAC;IACT,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB,GACC;IACA,EAAE,EAAE,KAAK,CAAC;IACV,UAAU,EACN,uBAAuB,GACvB,sBAAsB,GACtB,cAAc,GACd,eAAe,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEJ,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,cAAc,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,cAAc,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,OAAO,CAAC;IAC1B;kDAC8C;IAC9C,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,MAAM,MAAM,gBAAgB,GACxB;IACA,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,OAAO,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,wBAAwB,EAAE,CAAC;IAClC,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB,GACC;IACA,EAAE,EAAE,KAAK,CAAC;IACV,UAAU,EACN,0BAA0B,GAC1B,sBAAsB,GACtB,cAAc,GACd,oBAAoB,GACpB,sBAAsB,GACtB,2BAA2B,GAC3B,aAAa,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,KAAK,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACnC,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEJ;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,gBAAgB,EAAE,SAAS,CAAC;IAC5B,4EAA4E;IAC5E,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,wDAAwD;IACxD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,MAAM,MAAM,eAAe,GACvB;IACA,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,OAAO,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,wBAAwB,EAAE,CAAC;IAClC,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB,GACC;IACA,EAAE,EAAE,KAAK,CAAC;IACV,UAAU,EACN,0BAA0B,GAC1B,sBAAsB,GACtB,oBAAoB,GACpB,sBAAsB,GACtB,2BAA2B,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,KAAK,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACnC,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEJ,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,MAAM,EAAE,WAAW,CAAC;IACpB;;;;OAIG;IACH,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IAC9C;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,CAClB,cAAc,EAAE,cAAc,EAC9B,SAAS,EAAE,SAAS,KACjB,MAAM,CAAC;IACZ;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;QACjB,CAAC,UAAU,CAAC,IAAI,MAAM,OAAO,wBAAwB,GACnD,OAAO,wBAAwB,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,GAC9C,CAAC,SAAS,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,MAAM,GAAG,MAAM,GAAG,CAAC,GACzD,KAAK;KACZ,CAAC,CAAC;IACH,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,qBAAa,uBAAuB;IA4BtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IA3BjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAKvB;IACF,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC,6DAA6D;IAC7D,OAAO,CAAC,QAAQ,CAAK;IACrB,6DAA6D;IAC7D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAE7C;;;;;OAKG;IACH,OAAO,CAAC,WAAW,CAAyC;IAC5D;;;;OAIG;IACH,OAAO,CAAC,WAAW,CAAyC;gBAE/B,IAAI,EAAE,2BAA2B;IAK9D;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;IA8BtB;;;;OAIG;IACH,OAAO,CAAC,cAAc;IAmCtB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,iBAAiB;IA6BzB;;;OAGG;IACH,OAAO,KAAK,aAAa,GAKxB;IAED,0EAA0E;IAC1E,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,IAAI,aAAa,IAAI,MAAM,CAE1B;IAEK,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAgQzD;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;YAuCd,aAAa;IAqC3B,OAAO,CAAC,aAAa;IAerB;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,cAAc;IAQtB;;;;;;;OAOG;IACH,OAAO,CAAC,uBAAuB;IAyB/B,OAAO,CAAC,YAAY;IAsEpB,OAAO,CAAC,YAAY;IA6CpB;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,eAAe;IAcvB;;;;;;;;;OASG;IACG,IAAI,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAwqB/D;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;IAiD/B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,GAAG,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IAwlB5D;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAgD9B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,gBAAgB;IAgCxB,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,kBAAkB;IAkB1B;;;;;;OAMG;IACH,OAAO,CAAC,sBAAsB;IA8C9B,OAAO,CAAC,0BAA0B;IAgDlC,OAAO,CAAC,kBAAkB;IAmD1B,OAAO,CAAC,kBAAkB;CAkD3B;AA8GD;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAC3C,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GACtD,MAAM,CA4BR;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GACtD,MAAM,CAoCR"}