@amaster.ai/mirrorx-device-client 0.0.0-stage → 0.1.0

package/dist/device-id.js

@@ -0,0 +1,84 @@
+/** A connection profile is an OS-user namespace, never a hardware fingerprint. */
+import { createHash, randomUUID } from "node:crypto";
+import { chmod, link, lstat, mkdir, open, readFile, rename, unlink, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+export function canonicalServerOrigin(value) {
+    const url = new URL(value);
+    if (url.username || url.password || !["http:", "https:"].includes(url.protocol)
+        || url.protocol === "http:" && !["localhost", "127.0.0.1", "[::1]"].includes(url.hostname)) {
+        throw new Error("MirrorX URL must use HTTPS except for local development");
+    }
+    return url.origin;
+}
+export function mirrorxIdentityHome() {
+    return process.env.MIRRORX_DEVICE_IDENTITY_HOME?.trim()
+        ? path.resolve(process.env.MIRRORX_DEVICE_IDENTITY_HOME.trim()) : path.join(os.homedir(), ".mirrorx-device", "identity");
+}
+export function identityNamespace(server, principalId) {
+    if (!principalId.trim())
+        throw new Error("Authenticated MirrorX principal required");
+    return createHash("sha256").update(JSON.stringify([canonicalServerOrigin(server), principalId])).digest("hex");
+}
+export async function readOrCreateDeviceProfile(server, principalId, retainedProfileId) {
+    const root = mirrorxIdentityHome();
+    await mkdir(root, { recursive: true, mode: 0o700 });
+    const file = path.join(root, `${identityNamespace(server, principalId)}.json`);
+    const temporary = `${file}.${randomUUID()}.tmp`;
+    const rootInfo = await lstat(root);
+    if (rootInfo.isSymbolicLink() || !rootInfo.isDirectory() || process.getuid && rootInfo.uid !== process.getuid())
+        throw new Error("Private identity directory ownership is invalid");
+    await chmod(root, 0o700);
+    const retained = retainedProfileId && /^[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/i.test(retainedProfileId) ? retainedProfileId : undefined;
+    const candidate = retained ?? randomUUID();
+    await writeFile(temporary, JSON.stringify({ schema: 2, deviceProfileId: candidate }), { mode: 0o600, flag: "wx" });
+    try {
+        // Publish complete bytes atomically; concurrent App/daemon readers never see
+        // an empty exclusive-created file and never overwrite the winner's UUID.
+        await link(temporary, file).catch(error => { if (error.code !== "EEXIST")
+            throw error; });
+    }
+    finally {
+        await unlink(temporary);
+    }
+    const info = await lstat(file);
+    if (info.isSymbolicLink() || !info.isFile() || process.getuid && info.uid !== process.getuid())
+        throw new Error("Private identity file ownership is invalid");
+    await chmod(file, 0o600);
+    const bytes = await readFile(file, "utf8");
+    let profile;
+    try {
+        profile = JSON.parse(bytes);
+    }
+    catch {
+        profile = null;
+    }
+    if (retained && (!profile || typeof profile !== "object" || !("deviceProfileId" in profile) || profile.deviceProfileId !== retained)) {
+        // The caller obtained this exact profile from a valid narrow server
+        // session, never from a local hint. Serialize and compare before repair.
+        const repair = await open(`${file}.repair`, "wx", 0o600);
+        const replacement = `${file}.${randomUUID()}.repair-tmp`;
+        try {
+            if (await readFile(file, "utf8") !== bytes)
+                throw new Error("Identity changed during authenticated repair");
+            if (profile && typeof profile === "object" && "deviceProfileId" in profile && typeof profile.deviceProfileId === "string")
+                throw new Error("Conflicting retained connection identities; explicit restore required");
+            await writeFile(replacement, JSON.stringify({ schema: 2, deviceProfileId: retained }), { mode: 0o600, flag: "wx" });
+            await rename(replacement, file);
+            profile = { deviceProfileId: retained };
+        }
+        finally {
+            await repair.close();
+            await unlink(`${file}.repair`);
+            await unlink(replacement).catch(() => undefined);
+        }
+    }
+    if (!profile || typeof profile !== "object" || !("deviceProfileId" in profile)
+        || typeof profile.deviceProfileId !== "string" || !/^[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/i.test(profile.deviceProfileId)) {
+        throw new Error("Connection identity index is damaged; recover it from the original binding");
+    }
+    return profile.deviceProfileId;
+}
+/** @deprecated Retained export for older embedders. Never reads OS identifiers. */
+export async function readDesktopDeviceId() { return undefined; }
+//# sourceMappingURL=device-id.js.map

package/dist/device-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-id.js","sourceRoot":"","sources":["../src/device-id.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxG,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;WAC1E,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AACD,MAAM,UAAU,mBAAmB;IACjC,OAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,IAAI,EAAE;QACrD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC;AAC7H,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,WAAmB;IACnE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACrF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,MAAc,EAAE,WAAmB,EAAE,iBAA0B;IAC7G,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACnC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACpL,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,MAAM,QAAQ,GAAG,iBAAiB,IAAI,gDAAgD,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/I,MAAM,SAAS,GAAG,QAAQ,IAAI,UAAU,EAAE,CAAC;IAC3C,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACnH,IAAI,CAAC;QACH,6EAA6E;QAC7E,yEAAyE;QACzE,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvH,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC9J,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,GAAG,IAAI,CAAC;IAAC,CAAC;IAC9D,IAAI,QAAQ,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,iBAAiB,IAAI,OAAO,CAAC,IAAI,OAAO,CAAC,eAAe,KAAK,QAAQ,CAAC,EAAE,CAAC;QACrI,oEAAoE;QACpE,yEAAyE;QACzE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,aAAa,CAAC;QACzD,IAAI,CAAC;YACH,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC5G,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,iBAAiB,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,eAAe,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;YACpN,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACpH,MAAM,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAAC,OAAO,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;QAC3E,CAAC;gBAAS,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC;YAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;IACvH,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,iBAAiB,IAAI,OAAO,CAAC;WACzE,OAAO,OAAO,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACpI,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,OAAO,CAAC,eAAe,CAAC;AACjC,CAAC;AACD,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,mBAAmB,KAAyB,OAAO,SAAS,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,209 @@
+import { type PiDeviceRuntime } from "./pi-runtime.js";
+export type { PiDeviceRuntime } from "./pi-runtime.js";
+export type ExecutorKind = "pi" | "codex" | "codebuddy";
+export type DeviceRegistrationFailure = {
+    companyId: string;
+    status: number;
+    error: string;
+    code?: "active_session" | "PI_IDENTITY_CHOICE_REQUIRED" | "DEVICE_REVOKED" | "DEVICE_RECOVERY_REQUIRED" | "DEVICE_BUSY" | "DEVICE_RECONCILIATION_REQUIRED";
+    sessionId?: string;
+    retryable?: boolean;
+};
+export type DeviceConfig = {
+    baseUrl: string;
+    userSubject?: string;
+    managedBy?: "desktop" | "standalone";
+    signedOut?: boolean;
+    principalId?: string;
+    deviceProfileId?: string;
+    computerId?: string;
+    generation?: number;
+    companyId: string;
+    deviceId: string;
+    executorKind: ExecutorKind;
+    workspaceRoot: string;
+    workspaceMode?: "managed" | "custom";
+    agentId: string;
+    bindingId: string;
+    sessionId: string;
+    deviceToken: string;
+};
+export declare class DeviceRequestError extends Error {
+    readonly status: number;
+    readonly code?: string | undefined;
+    constructor(status: number, method: string, route: string, code?: string | undefined);
+}
+export declare function mirrorxDeviceHome(): string;
+export declare function hasMirrorxDevicePairing(kind: ExecutorKind): Promise<boolean>;
+/** Redeem a one-use code created by the signed-in MirrorX user. */
+export declare function pairMirrorxDevice(input: {
+    baseUrl: string;
+    code: string;
+    executorKind: ExecutorKind;
+    workspaceRoot?: string;
+}): Promise<Omit<DeviceConfig, "deviceToken">>;
+/** Reuse the Pi login's IAM bearer; no second browser approval or board key. */
+export declare function enrollMirrorxDevice(input: {
+    baseUrl: string;
+    iamAccessToken: string;
+    userSubject: string;
+    executorKind: ExecutorKind;
+    companyIds?: string[];
+    signal?: AbortSignal;
+    onRegistrationFailure?: (failure: DeviceRegistrationFailure) => void;
+}): Promise<Array<Omit<DeviceConfig, "deviceToken">>>;
+/** Non-sensitive inspection; restoration never scans unselected tools. */
+export declare function listMirrorxDevicePairings(input: {
+    expectedSubject?: string;
+    expectedBaseUrl?: string;
+    executorKind?: ExecutorKind;
+}): Promise<{
+    baseUrl: string;
+    userSubject?: string;
+    managedBy?: "desktop" | "standalone";
+    signedOut?: boolean;
+    principalId?: string;
+    deviceProfileId?: string;
+    computerId?: string;
+    generation?: number;
+    companyId: string;
+    deviceId: string;
+    executorKind: ExecutorKind;
+    workspaceRoot: string;
+    workspaceMode?: "managed" | "custom";
+    agentId: string;
+    bindingId: string;
+    sessionId: string;
+}[]>;
+/** Restore credentials only for a retained, explicitly authorized desktop tool.
+ * A live Pi session proves the same account/company/profile to the server. */
+export declare function restoreMirrorxToolSession(input: {
+    expectedSubject: string;
+    expectedBaseUrl: string;
+    bindingId: string;
+    executorKind: ExecutorKind;
+    signal?: AbortSignal;
+}): Promise<void>;
+export declare function getMirrorxEnrollmentIntent(input: {
+    baseUrl: string;
+    iamAccessToken: string;
+    userSubject: string;
+    enrollmentIntentId: string;
+}): Promise<{
+    enrollmentIntentId: string;
+    principalId: string;
+    subject: string;
+    companyId: string;
+    executorKind: ExecutorKind;
+    recoveryBindingId?: string | null;
+    explicitPiChoice?: boolean;
+    enrollment: {
+        name: string;
+        role: string;
+        workspaceRoot: string;
+        workspaceMode?: "managed" | "custom";
+        targetBindingId?: string;
+    };
+    bindingId: string | null;
+    expiresAt: string;
+}>;
+export declare function connectMirrorxEnrollmentIntent(input: {
+    baseUrl: string;
+    iamAccessToken: string;
+    userSubject: string;
+    enrollmentIntentId: string;
+    workspaceRoot?: string;
+    confirmed?: true;
+    signal?: AbortSignal;
+}): Promise<{
+    baseUrl: string;
+    userSubject?: string;
+    managedBy?: "desktop" | "standalone";
+    signedOut?: boolean;
+    principalId?: string;
+    deviceProfileId?: string;
+    computerId?: string;
+    generation?: number;
+    companyId: string;
+    deviceId: string;
+    executorKind: ExecutorKind;
+    workspaceRoot: string;
+    workspaceMode?: "managed" | "custom";
+    agentId: string;
+    bindingId: string;
+    sessionId: string;
+}>;
+export declare function runMirrorxDevices(input: {
+    executorKind: ExecutorKind;
+    expectedSubject?: string;
+    expectedBaseUrl?: string;
+    signal?: AbortSignal;
+    drainSignal?: AbortSignal;
+    companyIds?: string[];
+    bindingIds?: string[];
+    /** The automatic desktop bridge must never also run managed employee bindings. */
+    computerCarrierOnly?: boolean;
+    piRuntime?: PiDeviceRuntime;
+    onManagedIntent?(enrollmentIntentId: string): Promise<void>;
+    onState?(state: string): void;
+    onConnectionState?(companyId: string, state: "connected" | "retrying" | "failed"): void;
+}): Promise<void>;
+/** Revoke the narrow device sessions when the user signs out of Pi. */
+export declare function disconnectMirrorxDevices(kind: ExecutorKind, userSubject: string): Promise<void>;
+/** Local operator recovery only: this neither acknowledges nor relaunches the command. */
+export declare function reclaimMirrorxDeviceConfiguration(input: {
+    executorKind: ExecutorKind;
+    companyId: string;
+    bindingId?: string;
+    commandId: string;
+    confirmedStopped: boolean;
+}): Promise<void>;
+/** Operator reset discards native context only; the original command still needs reconciliation. */
+export declare function resetMirrorxCodebuddySession(input: {
+    companyId: string;
+    sessionKey: string;
+    sessionId: string;
+    confirmedStopped: boolean;
+}): Promise<void>;
+export declare function runMirrorxDevice(input: {
+    executorKind: ExecutorKind;
+    companyId?: string;
+    bindingId?: string;
+    drainSignal?: AbortSignal;
+    expectedSubject?: string;
+    expectedBaseUrl?: string;
+    piRuntime?: PiDeviceRuntime;
+    onManagedIntent?(enrollmentIntentId: string): Promise<void>;
+    signal?: AbortSignal;
+    onState?(state: string): void;
+    onConnectionState?(state: "connected" | "retrying" | "failed"): void;
+}): Promise<void>;
+/** Resolve only exact references owned by this login and canonical service. */
+export declare function findMirrorxDeviceSession(input: {
+    expectedSubject: string;
+    expectedBaseUrl: string;
+    sessionId: string;
+}): Promise<import("./session-index.js").DeviceSessionReference | undefined>;
+/** Computer-only enrollment can claim only a web-authorized managed employee. */
+export declare function connectMirrorxComputerIntent(input: {
+    baseUrl: string;
+    computerId: string;
+    principalId: string;
+    companyId: string;
+    deviceProfileId: string;
+    computerToken: string;
+    enrollmentIntentId: string;
+    signal?: AbortSignal;
+}): Promise<{
+    bindingId: string;
+    executorKind: ExecutorKind;
+}>;
+export declare function restoreMirrorxComputerEmployee(input: {
+    baseUrl: string;
+    computerId: string;
+    computerToken: string;
+    bindingId: string;
+    executorKind: ExecutorKind;
+    signal?: AbortSignal;
+}): Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAYA,OAAO,EAA6C,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AASlG,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,OAAO,GAAG,WAAW,CAAC;AACxD,MAAM,MAAM,yBAAyB,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IACzF,IAAI,CAAC,EAAE,gBAAgB,GAAG,6BAA6B,GAAG,gBAAgB,GAAG,0BAA0B,GAAG,aAAa,GAAG,gCAAgC,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AACxM,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;IACrC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,YAAY,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAsLF,qBAAa,kBAAmB,SAAQ,KAAK;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAiC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;gBAArE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAW,IAAI,CAAC,EAAE,MAAM,YAAA;CAG3F;AA6CD,wBAAgB,iBAAiB,WAGhC;AA8BD,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,YAAY,oBAE/D;AA0FD,mEAAmE;AACnE,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,YAAY,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAwC7C;AAED,gFAAgF;AAChF,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,YAAY,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,qBAAqB,CAAC,EAAE,CAAC,OAAO,EAAE,yBAAyB,KAAK,IAAI,CAAC;CACtE,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,CAgHpD;AAED,0EAA0E;AAC1E,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IAAE,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,YAAY,CAAA;CAAE;aAjiB/H,MAAM;kBACD,MAAM;gBACR,SAAS,GAAG,YAAY;gBACxB,OAAO;kBACL,MAAM;sBACF,MAAM;iBACX,MAAM;iBACN,MAAM;eACR,MAAM;cACP,MAAM;kBACF,YAAY;mBACX,MAAM;oBACL,SAAS,GAAG,QAAQ;aAC3B,MAAM;eACJ,MAAM;eACN,MAAM;KAuhBlB;AACD;8EAC8E;AAC9E,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,YAAY,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,iBA2B/K;AAuBD,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAA;CAAE;wBAE/F,MAAM;iBAAe,MAAM;aAAW,MAAM;eAAa,MAAM;kBAClG,YAAY;wBAAsB,MAAM,GAAG,IAAI;uBAAqB,OAAO;gBAAc;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE;eAAa,MAAM,GAAG,IAAI;eAAa,MAAM;GAI5Q;AACD,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IACzH,kBAAkB,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE;aApmBnF,MAAM;kBACD,MAAM;gBACR,SAAS,GAAG,YAAY;gBACxB,OAAO;kBACL,MAAM;sBACF,MAAM;iBACX,MAAM;iBACN,MAAM;eACR,MAAM;cACP,MAAM;kBACF,YAAY;mBACX,MAAM;oBACL,SAAS,GAAG,QAAQ;aAC3B,MAAM;eACJ,MAAM;eACN,MAAM;GAuoBlB;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,YAAY,EAAE,YAAY,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IAChI,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,kFAAkF;IAClF,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,eAAe,CAAC,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,OAAO,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,iBAAiB,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,IAAI,CAAC;CACzF,iBAUA;AAED,uEAAuE;AACvE,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBrG;AAED,0FAA0F;AAC1F,wBAAsB,iCAAiC,CAAC,KAAK,EAAE;IAC7D,YAAY,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAC;CACjH,iBAkBA;AAED,oGAAoG;AACpG,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAC;CACrF,iBAMA;AAED,wBAAsB,gBAAgB,CAAC,KAAK,EAAE;IAC5C,YAAY,EAAE,YAAY,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,eAAe,CAAC,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,iBAAiB,CAAC,CAAC,KAAK,EAAE,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,IAAI,CAAC;CACtE,iBA2mBA;AAED,+EAA+E;AAC/E,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,4EAS5H;AAED,iFAAiF;AACjF,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE;;;GA+B1O;AACD,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,YAAY,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,iBAQ9L"}