@aitne/daemon 0.1.3 → 0.1.4

package/dist/core/backends/claude-code-core.d.ts

@@ -1,42 +1,12 @@
-import { type AgentResult, type BackendModel, type IntegrationKey, type IntegrationState } from "@aitne/shared";
+import { type AgentResult, type BackendModel } from "@aitne/shared";
 import type { AgentConfig } from "../../config.js";
 import type { AgentExecuteParams, AgentResumeParams, AuthCheckResult, DelegatedTaskInvokeParams, DelegatedTaskResultRaw, DelegatedToolInvokeParams, DelegatedToolResult, IAgentCore, McpSessionContext, ReadSensitiveTokenManager, StreamCallbacks } from "../agent-core.js";
 import { BackendQuotaError, BackendDecisiveFailure } from "../agent-core.js";
 import type { AgentWriteTracker } from "../../safety/agent-write-tracker.js";
-export declare const CLAUDE_PROBE_TOOLS_PROMPT: string;
-/**
- * Registry-driven allowlist entries for integrations currently delegated to
- * Claude. Under `permissionMode: "dontAsk"`, any tool not in the SDK's
- * `allowedTools` is silently denied — so a delegated Gmail / Calendar
- * integration whose skill instructs the agent to call
- * `mcp__claude_ai_Gmail__search_threads` will fail with "permission denied"
- * unless that exact tool name is pre-authorized here.
- *
- * Pure over `(integrations)` — callers pass the record read from
- * `db/integrations-store.ts#readIntegrations`. The SDK's MCP tool matcher is
- * literal (`mcp__<server>__<tool>` — see `services/mcp/risk.ts`), so we
- * enumerate every capability tool the registry declares rather than using a
- * wildcard. This guarantees the allowlist only widens by what the registry
- * explicitly advertises; adding a new connector tool demands a registry
- * update first.
- *
- * Only integrations whose `delegatedBackend === "claude"` contribute — a
- * Codex-delegated Gmail integration must not widen Claude's surface.
- */
-export declare function computeDelegatedClaudeTools(integrations: Partial<Record<IntegrationKey, IntegrationState>>): readonly string[];
-export declare class AgentTimeoutError extends Error {
-    readonly timeoutMs: number;
-    constructor(timeoutMs: number);
-}
-export interface ClaudeCodeQuotaResetHint {
-    hour: number;
-    minute: number;
-    timeZone?: string;
-    rawLabel: string;
-}
-export declare function isClaudeCodeQuotaError(error: unknown): boolean;
-export declare function isClaudeCodeMaxBudgetError(error: unknown): boolean;
-export declare function extractClaudeCodeQuotaResetHint(error: unknown): ClaudeCodeQuotaResetHint | null;
+import { CLAUDE_PROBE_TOOLS_PROMPT, computeDelegatedClaudeTools, computeNativeClaudeTools } from "./claude-probe.js";
+import { AgentTimeoutError, extractClaudeCodeQuotaResetHint, isClaudeCodeQuotaError } from "./claude-errors.js";
+import { checkAuth as checkAuthFn } from "./claude-auth.js";
+export { AgentTimeoutError, CLAUDE_PROBE_TOOLS_PROMPT, computeDelegatedClaudeTools, computeNativeClaudeTools, extractClaudeCodeQuotaResetHint, isClaudeCodeQuotaError, };
 /**
  * ClaudeCodeCore intentionally does NOT run a pre-flight `checkAuth()`
  * gate inside `execute()` / `runTurn()`. Codex and Gemini each call
@@ -155,23 +125,18 @@ export declare class ClaudeCodeCore implements IAgentCore {
     private getErrorMessage;
     private sleep;
     summarize(conversationText: string): Promise<string>;
-    checkAuth(): Promise<{
-        ok: true;
-        method: "cli_login" | "api_key" | "oauth" | "vertex" | "bedrock" | "foundry";
-    } | {
-        ok: false;
-        reason: string;
-    }>;
     /**
-     * Detailed auth probe used by AuthHealthMonitor and the dashboard setup
-     * wizard. Two modes:
-     *  - **API key** (`ANTHROPIC_API_KEY`): format check + server-side probe
-     *    via `probeApiKeyServerSide("anthropic", ...)` (roadmap §9.1).
-     *    Throws on network/timeout so `checkAll()` records `probe_network_error`.
-     *  - **CLI login**: reads `~/.claude/credentials.json` for `refreshToken`.
-     *    Never writes to the Keychain or credentials file — refresh is left
-     *    to the CLI (Phase 0 confirmed rotating refresh_tokens; daemon-driven
-     *    refresh would race and corrupt state).
+     * Cheap presence check used by the reactive execute path. Detailed probe
+     * lives in `checkAuthDetailed`. Implementation moved to `./claude-auth.ts`
+     * (file-split-plan §8, Tier 2); this stays as a thin forwarder so the
+     * `IAgentCore` interface contract is unchanged and existing call sites in
+     * `BackendRouter` / `AuthHealthMonitor` continue to work.
+     */
+    checkAuth(): ReturnType<typeof checkAuthFn>;
+    /**
+     * Detailed auth probe used by `AuthHealthMonitor` and the dashboard setup
+     * wizard. Implementation moved to `./claude-auth.ts`; see the comment on
+     * `checkAuth` above.
      */
     checkAuthDetailed(): Promise<AuthCheckResult>;
     /**
@@ -215,84 +180,47 @@ export declare class ClaudeCodeCore implements IAgentCore {
      * whatever the registry already advertised.
      */
     private getAllowedTools;
-    /**
-     * Thin wrapper around the pure `computeDelegatedClaudeTools` helper that
-     * pulls the integrations record from the wired mcp context. Returns `[]`
-     * when the context is not yet wired (tests, startup ordering) — which
-     * matches the pre-fix behavior for sessions that ran before the daemon
-     * finished composing. A one-shot warning is emitted in `setMcpContext`
-     * confirming wiring.
-     */
     private getDelegatedClaudeTools;
-    /**
-     * DELEGATED-MODE-V2-DESIGN.md §4.3.3 — same-backend deny enforcement at
-     * the SDK boundary. For every integration whose `delegatedBackend === "claude"`,
-     * expand `state.deniedTools` against the connector's known tools and emit
-     * the namespaced names (`mcp__claude_ai_<X>__<tool>`). The SDK refuses any
-     * tool listed in `disallowedTools` regardless of `allowedTools` — hard
-     * enforcement.
-     *
-     * Returns `[]` when context isn't wired (tests / pre-startup) and on read
-     * failures, matching the conservative pattern used by
-     * `getDelegatedClaudeTools`.
-     */
+    private getNativeClaudeTools;
     private getSessionDeniedTools;
     /**
-     * Security hooks:
-     *   1. Bash(curl *) — restrict to localhost Daemon API, block connection-override flags. (strict only)
-     *   2. Bash(jq *)  — block file-access flags and the `env` filter (process env exfiltration). (strict only)
-     *   3. Write/Edit  — block writes into the session helper dir and context dir, mark vault writes.
-     *
-     * In allow mode the curl and jq hooks are dropped, but the Write/Edit hook
-     * stays: the context-dir chokepoint exists for memory integrity (today-write
-     * lock, md_file_snapshots, CONTEXT_WRITE_PERMISSIONS), not permissions.
+     * Security hooks — thin shim that forwards to `buildSecurityHooks` in
+     * `./claude-tool-collection.ts`. The implementation lives there as a
+     * pure factory consuming a `SecurityHooksDeps` record. See that module
+     * for hook semantics; see `file-split-plan.md` §8 + §15 for why the
+     * shim stays here.
      */
     private getSecurityHooks;
     /**
-     * Delegated proxy invocation — Claude SDK path.
-     *
-     * Spawns a one-shot SDK `query()` constrained to a single `allowedTools`
-     * entry (the requested connector tool), parses the structured stream
-     * for the matching `tool_use` → `tool_result` pair, and returns the raw
-     * tool result. The model's surrounding text is discarded — the route
-     * handler only sees the connector's structured payload.
+     * Delegated-execution deps bundle. Built fresh per call so the captured
+     * `readTokenManager` / `readToken` reflect the latest state of the core's
+     * mutable fields (both can be re-wired post-construction via
+     * `setReadToken` / `setReadTokenManager`).
      *
-     * Error classes (DelegatedToolErrorClass):
-     *   - `wrong_tool`     — model called a tool we did not request (anti-prompt-injection).
-     *   - `no_tool_call`   — model never invoked the tool within `maxTurns`.
-     *   - `tool_error`     — connector returned `is_error: true`.
-     *   - `parse_error`    — stream produced no terminal `result` event.
-     *   - `auth_error`     — SDK reported `authentication_failed`.
-     *   - `timeout`        — invoker's wall-clock signal aborted the stream.
-     *   - `subprocess_crashed` — exception thrown out of the iterator.
-     *
-     * Cost is captured from the terminal `SDKResultMessage` regardless of
-     * subtype so the invoker can attribute partial spend on the failure
-     * paths (no_tool_call, wrong_tool, tool_error).
+     * Snapshot semantics — once handed to `runDelegated{Tool,Task}Fn`, the
+     * deps record is treated as immutable for the duration of the call. This
+     * is a deliberate, narrow strengthening of the pre-split behavior: the
+     * original re-read `this.readTokenManager` at revoke time, so a
+     * (hypothetical) mid-call replacement would revoke on the *new* manager
+     * — leaving a scope leak on the manager that issued the token.
+     * Production never replaces the manager after boot (`index.ts` wires it
+     * exactly once via `setReadTokenManager?`), so the two behaviors converge
+     * in practice; the new shape is simply more robust by construction.
+     */
+    private delegatedDeps;
+    /**
+     * Delegated proxy invocation — DELEGATED-PROXY-API-DESIGN.md §4.5.
+     * Implementation moved to `./claude-delegated.ts` (file-split-plan §8,
+     * Tier 2); this stays as a thin forwarder so the `IAgentCore` interface
+     * contract and existing call sites in `BackendRouter` /
+     * `DelegatedBackendInvoker` continue to dispatch through
+     * `core.runDelegatedTool`.
      */
     runDelegatedTool(params: DelegatedToolInvokeParams): Promise<DelegatedToolResult>;
     /**
-     * DELEGATED-TASK-MODE-DESIGN.md §9.1 — Claude SDK task mode. The
-     * subprocess plans + executes 1..N MCP calls within `allowedTools` and
-     * emits a final assistant message that the runtime helper validates
-     * against the caller's `outputSchema`.
-     *
-     * Stream parsing differences from `runDelegatedTool`:
-     *   - We accept multiple `tool_use` blocks (counted against `maxToolCalls`).
-     *   - We track per-tool durations to feed `onToolStep`.
-     *   - We capture the *final* assistant text (after the last tool turn)
-     *     as the validation target, not a single tool's `tool_result`.
-     *
-     * Safety:
-     *   - `allowedTools` already excludes the destructive set when
-     *     `allowDestructive: false`; the SDK will not surface those tools.
-     *   - `disallowedTools` is the absolute-block layer + the destructive
-     *     set as defense-in-depth (so a future relaxation of allowedTools
-     *     can't accidentally widen the surface).
-     *
-     * The §6.2 "no retry after write" rule is enforced at the invoker
-     * layer; this method just signals via `writeClassToolFired` whether
-     * any destructive tool ran during the task.
+     * Delegated task-mode invocation — DELEGATED-TASK-MODE-DESIGN.md §9.1.
+     * Implementation moved to `./claude-delegated.ts`; see the comment on
+     * `runDelegatedTool` above.
      */
     runDelegatedTask(params: DelegatedTaskInvokeParams): Promise<DelegatedTaskResultRaw>;
 }

package/dist/core/backends/claude-code-core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-code-core.d.ts","sourceRoot":"","sources":["../../../src/core/backends/claude-code-core.ts"],"names":[],"mappings":"AAWA,OAAO,EAML,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACtB,MAAM,eAAe,CAAC;AAQvB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,yBAAyB,EACzB,sBAAsB,EAEtB,yBAAyB,EACzB,mBAAmB,EACnB,UAAU,EAEV,iBAAiB,EACjB,yBAAyB,EACzB,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EAGvB,MAAM,kBAAkB,CAAC;AAU1B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAoN7E,eAAO,MAAM,yBAAyB,QAA2B,CAAC;AAiBlE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,GAC9D,SAAS,MAAM,EAAE,CAenB;AAED,qBAAa,iBAAkB,SAAQ,KAAK;aACd,SAAS,EAAE,MAAM;gBAAjB,SAAS,EAAE,MAAM;CAI9C;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAUD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAyB9D;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAkBlE;AAED,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,OAAO,GACb,wBAAwB,GAAG,IAAI,CAyBjC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,cAAe,YAAW,UAAU;IAsB7C,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IA7BhC,QAAQ,CAAC,SAAS,EAAG,QAAQ,CAAU;IACvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAiB;IACvD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAK;IAKxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,wEAAwE;IACxE,OAAO,CAAC,SAAS,CAAqB;IACtC,wEAAwE;IACxE,OAAO,CAAC,gBAAgB,CAAwC;IAChE,2EAA2E;IAC3E,OAAO,CAAC,UAAU,CAAgC;IAElD,gFAAgF;IAChF,OAAO,KAAK,OAAO,GAElB;gBAGkB,MAAM,EAAE,WAAW;IACpC;;;;;;OAMG;IACc,YAAY,CAAC,EAAE,iBAAiB,YAAA;IAMnD,+EAA+E;IAC/E,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAIjC,mBAAmB,CAAC,OAAO,EAAE,yBAAyB,GAAG,IAAI;IAI7D,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI;IAQ/C;;;;OAIG;YACW,cAAc;IA6B5B;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,mCAAoC;IAE3E;;;;OAIG;IACH,+BAA+B,IAAI,SAAS,MAAM,EAAE;IAQpD;;;;OAIG;IACH,OAAO,CAAC,0BAA0B;IAoBlC;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,iBAAiB;IAgCzB;;;;;;;;OAQG;IACH,OAAO,CAAC,oBAAoB;IAUtB,OAAO,CACX,MAAM,EAAE,kBAAkB,EAC1B,eAAe,CAAC,EAAE,eAAe,GAChC,OAAO,CAAC,WAAW,CAAC;YAOT,WAAW;IAmKnB,aAAa,CACjB,MAAM,EAAE,iBAAiB,EACzB,eAAe,CAAC,EAAE,eAAe,GAChC,OAAO,CAAC,WAAW,CAAC;YAOT,iBAAiB;YAkGjB,YAAY;IAkC1B,OAAO,CAAC,yBAAyB;IAiCjC,2BAA2B;IAC3B,sBAAsB,CACpB,KAAK,EAAE,OAAO,GACb,iBAAiB,GAAG,sBAAsB;IAyB7C,OAAO,CAAC,mBAAmB;IAuB3B,OAAO,CAAC,uBAAuB;IAW/B,OAAO,CAAC,WAAW;IAwBnB,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,eAAe;YAUT,KAAK;IAOb,SAAS,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA0CpD,SAAS,IAAI,OAAO,CACtB;QACE,EAAE,EAAE,IAAI,CAAC;QACT,MAAM,EACF,WAAW,GACX,SAAS,GACT,OAAO,GACP,QAAQ,GACR,SAAS,GACT,SAAS,CAAC;KACf,GACD;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAChC;IAiCD;;;;;;;;;;OAUG;IACG,iBAAiB,IAAI,OAAO,CAAC,eAAe,CAAC;IAuFnD;;;;;;;OAOG;IACG,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAuErC,UAAU,IAAI,aAAa,CAAC,YAAY,CAAC;YA+B3B,aAAa;IA2P3B;;;;;;;OAOG;YACW,WAAW;IA8CzB;;;OAGG;IACH,MAAM,CAAC,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAkBvD;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,eAAe;IAuBvB;;;;;;;OAOG;IACH,OAAO,CAAC,uBAAuB;IAc/B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,qBAAqB;IAmB7B;;;;;;;;;OASG;IACH,OAAO,CAAC,gBAAgB;IA6SxB;;;;;;;;;;;;;;;;;;;;;OAqBG;IACG,gBAAgB,CACpB,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,mBAAmB,CAAC;IAqV/B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACG,gBAAgB,CACpB,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,sBAAsB,CAAC;CA+YnC"}
+{"version":3,"file":"claude-code-core.d.ts","sourceRoot":"","sources":["../../../src/core/backends/claude-code-core.ts"],"names":[],"mappings":"AASA,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAKvB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,yBAAyB,EACzB,sBAAsB,EACtB,yBAAyB,EACzB,mBAAmB,EACnB,UAAU,EAEV,iBAAiB,EACjB,yBAAyB,EACzB,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACvB,MAAM,kBAAkB,CAAC;AAO1B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAgB7E,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,EAGzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,iBAAiB,EACjB,+BAA+B,EAE/B,sBAAsB,EAEvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,SAAS,IAAI,WAAW,EAOzB,MAAM,kBAAkB,CAAC;AAgB1B,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,EACxB,+BAA+B,EAC/B,sBAAsB,GACvB,CAAC;AAIF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,cAAe,YAAW,UAAU;IAsB7C,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IA7BhC,QAAQ,CAAC,SAAS,EAAG,QAAQ,CAAU;IACvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAiB;IACvD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAK;IAKxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,wEAAwE;IACxE,OAAO,CAAC,SAAS,CAAqB;IACtC,wEAAwE;IACxE,OAAO,CAAC,gBAAgB,CAAwC;IAChE,2EAA2E;IAC3E,OAAO,CAAC,UAAU,CAAgC;IAElD,gFAAgF;IAChF,OAAO,KAAK,OAAO,GAElB;gBAGkB,MAAM,EAAE,WAAW;IACpC;;;;;;OAMG;IACc,YAAY,CAAC,EAAE,iBAAiB,YAAA;IAMnD,+EAA+E;IAC/E,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAIjC,mBAAmB,CAAC,OAAO,EAAE,yBAAyB,GAAG,IAAI;IAI7D,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI;IAQ/C;;;;OAIG;YACW,cAAc;IA6B5B;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,mCAAoC;IAE3E;;;;OAIG;IACH,+BAA+B,IAAI,SAAS,MAAM,EAAE;IAQpD;;;;OAIG;IACH,OAAO,CAAC,0BAA0B;IAoBlC;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,iBAAiB;IAgCzB;;;;;;;;OAQG;IACH,OAAO,CAAC,oBAAoB;IAUtB,OAAO,CACX,MAAM,EAAE,kBAAkB,EAC1B,eAAe,CAAC,EAAE,eAAe,GAChC,OAAO,CAAC,WAAW,CAAC;YAOT,WAAW;IA+KnB,aAAa,CACjB,MAAM,EAAE,iBAAiB,EACzB,eAAe,CAAC,EAAE,eAAe,GAChC,OAAO,CAAC,WAAW,CAAC;YAOT,iBAAiB;YAwGjB,YAAY;IAkC1B,OAAO,CAAC,yBAAyB;IAiCjC,2BAA2B;IAC3B,sBAAsB,CACpB,KAAK,EAAE,OAAO,GACb,iBAAiB,GAAG,sBAAsB;IAyB7C,OAAO,CAAC,mBAAmB;IAuB3B,OAAO,CAAC,uBAAuB;IAiB/B,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,eAAe;YAIT,KAAK;IAOb,SAAS,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA0C1D;;;;;;OAMG;IACG,SAAS,IAAI,UAAU,CAAC,OAAO,WAAW,CAAC;IAIjD;;;;OAIG;IACG,iBAAiB,IAAI,OAAO,CAAC,eAAe,CAAC;IAInD;;;;;;;OAOG;IACG,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAuErC,UAAU,IAAI,aAAa,CAAC,YAAY,CAAC;YA+B3B,aAAa;IA2P3B;;;;;;;OAOG;YACW,WAAW;IA8CzB;;;OAGG;IACH,MAAM,CAAC,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAkBvD;;;;;;;;;;;;;;OAcG;IAMH,OAAO,CAAC,eAAe;IAavB,OAAO,CAAC,uBAAuB;IAI/B,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,qBAAqB;IAI7B;;;;;;OAMG;IACH,OAAO,CAAC,gBAAgB;IAgBxB;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,aAAa;IAQrB;;;;;;;OAOG;IACG,gBAAgB,CACpB,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,mBAAmB,CAAC;IAI/B;;;;OAIG;IACG,gBAAgB,CACpB,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,sBAAsB,CAAC;CAGnC"}