@aquex/cmos-mcp 1.0.0

package/dist/tools/cmos/dashboard-client.d.ts

@@ -0,0 +1,513 @@
+/**
+ * Dashboard HTTP Client & Credential-Based Authentication
+ *
+ * Reusable HTTP client for calling the cmos-dashboard REST API.
+ * Authenticates via POST /api/auth/login with user credentials,
+ * caches the JWT, and re-authenticates when it expires.
+ *
+ * @module tools/cmos/dashboard-client
+ */
+import type { CmosToolResult } from './types';
+import { CredentialStore, type KeySource } from '../../intelligence/credential-store';
+export declare const CMOS_DASHBOARD_URL_ENV = "CMOS_DASHBOARD_URL";
+export declare const CMOS_DASHBOARD_USER_ENV = "CMOS_DASHBOARD_USER";
+export declare const CMOS_DASHBOARD_PASSWORD_ENV = "CMOS_DASHBOARD_PASSWORD";
+export declare const CMOS_DASHBOARD_API_KEY_ENV = "CMOS_DASHBOARD_API_KEY";
+/**
+ * Default dashboard URL used when CMOS_DASHBOARD_URL is unset or empty.
+ * Sprint 62 m02: bakes the canonical aquex.ai endpoint into the npm-shipped
+ * package so fresh installs reach the right host without env config. The 402
+ * graceful-degradation path (m05) is the actual fresh-user UX when the user
+ * has no account yet — they hit the default URL, dashboard returns 402, and
+ * cmos_message etc surface https://cmos.aquex.ai for sign-up.
+ */
+export declare const DEFAULT_DASHBOARD_URL = "https://cmos.aquex.ai";
+/** @deprecated Use CMOS_DASHBOARD_USER_ENV + CMOS_DASHBOARD_PASSWORD_ENV instead */
+export declare const CMOS_DASHBOARD_SECRET_ENV = "CMOS_DASHBOARD_SECRET";
+/**
+ * Resolve the dashboard base URL from explicit override → env var → baked default.
+ * Treats empty string as unset (per IDE-spawn empty-string env trap).
+ *
+ * Exported so downstream tools (cmos_status, future hosts) can read the same
+ * effective URL without re-implementing the precedence chain.
+ */
+export declare function resolveDashboardBaseUrl(override?: string): string;
+/** Test helper — reset the per-process WARN seen-set. */
+export declare function __resetLegacyAuthWarnSeen(): void;
+export interface DashboardClientConfig {
+    /** Dashboard base URL (e.g. https://cmos.aquex.ai) */
+    baseUrl: string;
+    /** API key for dashboard auth (cmk_ prefix). If set, email/password are not needed. */
+    apiKey?: string;
+    /** User email for dashboard login */
+    email?: string;
+    /** User password for dashboard login */
+    password?: string;
+    /** Request timeout in milliseconds (default: 10000) */
+    timeoutMs?: number;
+}
+export interface LoginResponse {
+    success: boolean;
+    data: {
+        token: string;
+        expiresAt: string;
+        user: {
+            id: string;
+            email: string;
+            username?: string;
+            projects: unknown[];
+        };
+    };
+}
+/**
+ * Cached user identity from the last successful login.
+ * Used for address discovery (username) and sender context (userId).
+ */
+export interface DashboardUserIdentity {
+    userId: string;
+    email: string;
+    username: string | null;
+}
+export interface DashboardMessage {
+    id: string;
+    type: string;
+    summary: string;
+    body?: string;
+    from?: string;
+    to?: string;
+    status: string;
+    createdAt: string;
+    updatedAt?: string;
+    evidence?: unknown[];
+    /** Explicit sender project ID (intel message types) */
+    from_project_id?: string;
+    /** Explicit recipient project ID (intel message types) */
+    to_project_id?: string;
+    /** Canonical cmos:// address of the sender, echoed back by the dashboard when supported. */
+    senderAddress?: string;
+    /**
+     * Routing/delivery status returned by the dashboard when recipient-relay ACKs are available
+     * (e.g. "queued", "delivered", "failed"). Absent on dashboards that have not yet implemented
+     * the ACK surface — callers should treat absence as "status=pending, unknown routing" and
+     * NOT infer delivery success. Tracked as a cross-repo dependency on the dashboard side.
+     */
+    deliveryStatus?: string;
+    /**
+     * Sprint 31 dashboard ACK signal — how the dashboard attributed this send:
+     *   `api-key`      — project-scoped key auth (post-rotation steady state)
+     *   `request-body` — legacy user-scoped key + body-level senderProjectId
+     *   `none`         — could not identify a sender project
+     * Sprint 57 m04 reads this to surface authState in whoami + onboard.
+     */
+    deliveryAck?: {
+        identitySource: 'api-key' | 'request-body' | 'none';
+        recordedSender?: {
+            projectId?: string | null;
+            slug?: string | null;
+            cmosAddress?: string | null;
+        };
+    };
+}
+export interface SendMessageParams {
+    targetAddress: string;
+    type: string;
+    summary: string;
+    body?: string;
+    evidence?: unknown[];
+    /** Sender project ID for cross-project same-owner sends */
+    senderProjectId?: string;
+    /** Explicit sender project ID for project-to-project routing (intel types) */
+    fromProjectId?: string;
+    /** Explicit recipient project ID for project-to-project routing (intel types) */
+    toProjectId?: string;
+    /**
+     * Canonical cmos://<owner>/<slug> address of the sender. Sent to the dashboard in addition to
+     * senderProjectId so the relay can attribute messages even if its auto-resolve path falls back
+     * to a sibling project (Sprint 52 m02). Omitted when the local project_identity cmos_address
+     * is empty or still in the legacy cmos://unknown/* form.
+     */
+    senderAddress?: string;
+}
+export interface ListMessagesParams {
+    tab?: 'inbox' | 'sent';
+    status?: string;
+    limit?: number;
+}
+export interface ListMessagesResult {
+    messages: DashboardMessage[];
+    unreadCount: number;
+    totalCount: number;
+}
+export interface RespondToMessageParams {
+    messageId: string;
+    status: 'accepted' | 'declined' | 'replied';
+    notes?: string;
+}
+export interface ResolveAddressParams {
+    address: string;
+}
+export interface ResolveAddressResult {
+    resolved: boolean;
+    projectName?: string;
+    agentId?: string;
+}
+/** A project entry from the dashboard directory. */
+export interface DirectoryProject {
+    id: string;
+    name: string;
+    address: string;
+    owner: string;
+    description?: string;
+    slug?: string;
+    isOwner?: boolean;
+}
+export interface ListDirectoryResult {
+    projects: DirectoryProject[];
+    totalCount: number;
+}
+export interface GetMyProjectsResult {
+    projects: DirectoryProject[];
+    totalCount: number;
+}
+/** Row count for a single PG mirror table. */
+export interface SyncStatusTableCount {
+    table: string;
+    count: number;
+}
+/** Response from GET /api/sync/status — reconciliation data. */
+export interface SyncStatusResult {
+    tables: SyncStatusTableCount[];
+    totalMirrorRows: number;
+    totalSyncLogEntries: number;
+    unprocessedSyncLogEntries: number;
+    failedSyncLogEntries: number;
+    lastSyncAt: string | null;
+    oldestUnprocessedAt: string | null;
+    projectCount: number;
+}
+/** Result from POST /api/projects/register — project registration. */
+export interface RegisterProjectResult {
+    slug: string;
+    projectId: string;
+    reregistered: boolean;
+    backfill: {
+        counts: Record<string, number>;
+    };
+    /**
+     * Auto-issued project-scoped key — present on first-time registration only.
+     * Sprint 57 m02: dashboard returns the plaintext key exactly once here so
+     * the MCP client can capture it into the local credential store. Absent on
+     * idempotent re-registrations (see `keyRotated`).
+     */
+    key?: string;
+    /** Dashboard-side UUID of the auto-issued key — pairs with `key`. */
+    keyId?: string;
+    /** Human-readable label (dashboard-generated from the register User-Agent). */
+    label?: string;
+    /**
+     * Set to `false` by the dashboard on idempotent re-registration to signal
+     * "project already exists for this user-scoped credential — no new key minted."
+     * Undefined (absent) on first-time register.
+     */
+    keyRotated?: boolean;
+}
+/** Result from POST /api/projects/:id/keys/reissue — lost-key recovery. */
+export interface ReissueProjectKeyResult {
+    key: string;
+    keyId: string;
+    label: string;
+    /** Dashboard-side keyIds that were revoked as part of this reissue. */
+    revokedKeyIds: string[];
+}
+/** Result from POST /api/projects/:id/keys/rotate — atomic mint-new + schedule-revoke-old. */
+export interface RotateProjectKeyResult {
+    newKey: string;
+    newKeyId: string;
+    oldKeyId: string;
+    /** ISO timestamp when the old key becomes invalid on the dashboard side. */
+    revokeAt: string;
+    /** Optional dashboard-assigned label for the new key. */
+    label?: string;
+}
+/**
+ * Result from POST /api/projects/:id/keys/revoke/:keyId (legacy project-scoped
+ * endpoint) AND from POST /api/keys/:keyId/revoke (Sprint 59 m02 / dashboard
+ * s34-m03 scope-aware unified endpoint). Both endpoints share the same
+ * response envelope for parser-reuse — only the URL differs. Scope is inferred
+ * server-side; the MCP caller determines local cleanup scope from its own
+ * credential store lookup prior to calling revoke (since scope is not echoed
+ * back).
+ */
+export interface RevokeKeyResult {
+    keyId: string;
+    revokedAt: string;
+}
+/** A single row from GET /api/keys. */
+export interface ListedKey {
+    id: string;
+    projectId: string | null;
+    projectSlug: string | null;
+    parentKeyId: string | null;
+    label: string | null;
+    issuedVia: 'device_code' | 'registration_auto' | 'manual_generate' | string;
+    lastUsedAt: string | null;
+    revokeAt: string | null;
+    createdAt: string;
+}
+/** Envelope returned by GET /api/keys. */
+export interface ListKeysResult {
+    keys: ListedKey[];
+}
+/** Result from POST /api/sync/sqlite-backfill — bulk file-based sync. */
+export interface SyncSqliteFileResult {
+    success: boolean;
+    counts: Record<string, number>;
+    errors: string[];
+    durationMs: number;
+}
+/** Result from POST /api/sync/purge — purge confirmation. */
+export interface PurgeMirrorResult {
+    purgedProject: string;
+    tablesCleared: string[];
+    rowsDeleted: number;
+}
+/** Per-project sync state from GET /api/sync/projects/:slug/state. */
+export interface SyncProjectStateResult {
+    project: {
+        id: string;
+        slug: string;
+        name: string;
+        schemaVersion: string | null;
+        createdAt: string;
+        updatedAt: string;
+    };
+    sprints: unknown[];
+    missions: unknown[];
+    sessions: unknown[];
+    decisions: unknown[];
+    learnings: unknown[];
+    dependencies: unknown[];
+}
+/**
+ * HTTP client for the cmos-dashboard REST API.
+ *
+ * Authenticates with user credentials via /api/auth/login,
+ * caches the JWT, and re-authenticates when expired.
+ * All methods return CmosToolResult for consistent error handling.
+ */
+export declare class DashboardClient {
+    private readonly baseUrl;
+    private readonly email;
+    private readonly password;
+    private readonly timeoutMs;
+    private readonly authMethod;
+    /** Cached auth token */
+    private cachedToken;
+    /** Token expiry time (ms since epoch) */
+    private tokenExpiresAt;
+    /** Cached user identity from last login */
+    private cachedIdentity;
+    /**
+     * Dashboard-side keyId of the user-scoped credential authenticating this client,
+     * when known. Set by `fromEnvForProject()` whenever it picks a user-scoped key
+     * out of the credential store. Used by `registerProject()` to stamp `parentKeyId`
+     * on the auto-issued project-scoped key captured into the local store.
+     */
+    private _authenticatingKeyId;
+    /** Buffer before expiry to trigger re-auth (30 seconds) */
+    private static readonly EXPIRY_BUFFER_MS;
+    constructor(config: DashboardClientConfig);
+    /**
+     * Create a DashboardClient from environment variables.
+     * Returns an error result if not configured.
+     */
+    static fromEnv(overrides?: Partial<DashboardClientConfig>): CmosToolResult<DashboardClient>;
+    /**
+     * Create a DashboardClient using the local CredentialStore minted by the
+     * Sprint 57 device code flow.
+     *
+     * Resolution order:
+     *   1. Explicit `apiKey` override (tests / callers bypassing the store).
+     *   2. Project-scoped key in CredentialStore for `projectRoot` (set by m02
+     *      auto-issue capture on `POST /api/projects/register`).
+     *   3. Newest user-scoped key in CredentialStore (minted by device code
+     *      flow; used before a project-scoped key has been issued for this root).
+     *   4. Legacy `CMOS_DASHBOARD_API_KEY` env var — carried forward so users
+     *      who configured the env var directly before device code landed keep
+     *      working.
+     *   5. Email/password env vars — terminal fallback.
+     *
+     * `keySource` surfaces which arm fired so the eventual whoami + onboard
+     * surface (m04) can show identitySource to the agent.
+     */
+    static fromEnvForProject(projectRoot: string | undefined, overrides?: Partial<DashboardClientConfig> & {
+        credentialStore?: CredentialStore;
+    }): Promise<CmosToolResult<{
+        client: DashboardClient;
+        keySource: KeySource;
+        matchedProjectRoot: string | null;
+    }>>;
+    /**
+     * Authenticate with the dashboard and cache the token.
+     */
+    private authenticate;
+    /**
+     * Get a valid auth token, re-authenticating if needed.
+     */
+    private getAuthToken;
+    /**
+     * Make an authenticated HTTP request to the dashboard.
+     */
+    private request;
+    /**
+     * Get the cached user identity from the last login.
+     * Returns null if not yet authenticated.
+     */
+    get userIdentity(): DashboardUserIdentity | null;
+    /**
+     * `keyId` of the user-scoped credential that authenticated this client, if known.
+     * Sprint 57 m02 — populated by `fromEnvForProject()` when a user-scoped key is
+     * picked from the credential store. Callers capturing the auto-issued register
+     * response stamp this into `parentKeyId` on the resulting project-scoped record.
+     */
+    get authenticatingKeyId(): string | undefined;
+    /** Internal setter used by the factories when they know the keyId. */
+    setAuthenticatingKeyId(keyId: string | undefined): void;
+    /**
+     * Send a message to a target address.
+     */
+    sendMessage(params: SendMessageParams): Promise<CmosToolResult<DashboardMessage>>;
+    /**
+     * List messages (inbox or sent).
+     */
+    listMessages(params?: ListMessagesParams): Promise<CmosToolResult<ListMessagesResult>>;
+    /**
+     * Respond to a message (accept, decline, or reply).
+     */
+    respondToMessage(params: RespondToMessageParams): Promise<CmosToolResult<DashboardMessage>>;
+    /**
+     * Resolve a cmos:// address to verify it exists.
+     */
+    resolveAddress(params: ResolveAddressParams): Promise<CmosToolResult<ResolveAddressResult>>;
+    /**
+     * List all addressable projects in the dashboard directory.
+     */
+    listDirectory(): Promise<CmosToolResult<ListDirectoryResult>>;
+    /**
+     * Get projects owned by the authenticated user.
+     */
+    getMyProjects(): Promise<CmosToolResult<GetMyProjectsResult>>;
+    /**
+     * Push a sync event to the dashboard.
+     * Used by checkpoint backfill.
+     */
+    pushSyncEvent(envelope: Record<string, unknown>): Promise<CmosToolResult<void>>;
+    /**
+     * Get sync reconciliation status from the dashboard.
+     * Returns per-table row counts in the PG mirror.
+     */
+    getSyncStatus(projectSlug?: string): Promise<CmosToolResult<SyncStatusResult>>;
+    /**
+     * Get full project sync state from the dashboard.
+     * Returns all synced entities for a specific project.
+     */
+    getSyncProjectState(slug: string): Promise<CmosToolResult<SyncProjectStateResult>>;
+    /**
+     * Purge all mirrored data for a project from the PG mirror.
+     * Used before re-backfill to ensure clean state.
+     */
+    purgeMirror(projectSlug: string, expectedSlug?: string): Promise<CmosToolResult<PurgeMirrorResult>>;
+    /**
+     * Register a project with the dashboard by uploading the SQLite database.
+     * Used for auto-registration on first checkpoint.
+     *
+     * Endpoint: POST /api/projects/register (multipart/form-data)
+     * - 201: New registration
+     * - 200: Re-registration (purges and re-backfills)
+     */
+    /**
+     * POST the local SQLite file as multipart/form-data to /api/sync/sqlite-backfill.
+     * This is the bulk reconciliation path — idempotent, returns per-entity counts.
+     * Uses an extended timeout (60s minimum) to accommodate large file uploads.
+     */
+    syncSqliteFile(filePath: string, projectSlug: string, expectedSlug?: string): Promise<CmosToolResult<SyncSqliteFileResult>>;
+    registerProject(params: {
+        projectName: string;
+        sqlitePath: string;
+        localDbPath?: string;
+        expectedSlug?: string;
+    }): Promise<CmosToolResult<RegisterProjectResult>>;
+    /**
+     * Reissue a project-scoped key after partial-failure recovery.
+     *
+     * POSTs `/api/projects/:id/keys/reissue` with user-scoped `cmk_...` Bearer
+     * auth (same auth mode as `/rotate`, `/revoke`, `/register`, `/keys`).
+     * Dashboard revokes all prior project-scoped keys bound to the caller's
+     * `parent_key_id` for this project and mints a fresh one, returning the
+     * plaintext exactly once in the response body. No grace window — reissue
+     * implies the current key is lost or compromised.
+     *
+     * Originally landed in Sprint 57 m02. Sprint 58 m03 live verification
+     * (2026-04-22) exposed that the dashboard endpoint was rejecting user-scoped
+     * Bearer with HTTP 400 "Reissue requires a logged-in dashboard session".
+     * Sprint 59 m01 + dashboard s34-m02 (2026-04-23) fixed the drift — removed
+     * the api-key rejection at dashboard projects.ts:740 and added an ownership
+     * check matching the existing revoke route. The MCP-side contract
+     * (cmk_ Bearer + `{key, keyId, label, revokedKeyIds}` response) did not
+     * change — only the dashboard-side acceptance did.
+     */
+    reissueProjectKey(projectId: string): Promise<CmosToolResult<ReissueProjectKeyResult>>;
+    /**
+     * Rotate a project-scoped key with an optional grace window.
+     *
+     * Sprint 57 m03 — `POST /api/projects/:id/keys/rotate` mints a new project
+     * key and schedules the old one for revocation in `graceSeconds` (default
+     * 300 dashboard-side). Response fields: `newKey`, `newKeyId`, `oldKeyId`,
+     * `revokeAt`. Local callers store the new key and hold the old one in
+     * `pendingRevoke` so in-flight requests survive the grace window.
+     */
+    rotateProjectKey(projectId: string, options?: {
+        graceSeconds?: number;
+    }): Promise<CmosToolResult<RotateProjectKeyResult>>;
+    /**
+     * Scope-aware unified revoke.
+     *
+     * Sprint 59 m02 / dashboard s34-m03 — `POST /api/keys/:keyId/revoke`. Works
+     * for both user-scoped (`projectId IS NULL`) and project-scoped rows; the
+     * dashboard infers scope from the key row and enforces ownership:
+     *   - user-scoped: requester's `userId` must equal the key row's `user_id`
+     *   - project-scoped: requester must own the project (same check as
+     *     `/api/projects/:id/keys/revoke/:keyId`)
+     *
+     * Response envelope `{keyId, revokedAt}` matches the legacy project-scoped
+     * endpoint byte-for-byte — deliberate parser-reuse per dashboard team
+     * message 335c3a34 (2026-04-23). The inferred scope is NOT echoed back;
+     * callers determine it from their own credential store before invoking.
+     *
+     * No grace window — the key is invalid as soon as this returns. Use `rotate`
+     * when a grace window is wanted instead.
+     */
+    revokeKey(keyId: string): Promise<CmosToolResult<RevokeKeyResult>>;
+    /**
+     * Hard-revoke a project-scoped key immediately via the legacy project-scoped endpoint.
+     *
+     * Sprint 57 m03 — `POST /api/projects/:id/keys/revoke/:keyId`. No grace
+     * window; the key is invalid from the dashboard's perspective as soon as
+     * this returns. Kept unchanged per dashboard team commitment — the
+     * profile.ejs key-management UI calls this endpoint directly and existing
+     * callers keep working. New callers should prefer `revokeKey(keyId)` (the
+     * Sprint 59 m02 unified surface), which also handles user-scoped rows.
+     */
+    revokeProjectKey(projectId: string, keyId: string): Promise<CmosToolResult<RevokeKeyResult>>;
+    /**
+     * List every key the authenticated credential can see.
+     *
+     * Sprint 57 m03 — `GET /api/keys`. Response is the full credential tree
+     * (user-scoped rows where `projectId === null` plus their spawned
+     * project-scoped children via `parentKeyId`). Callers apply the "mine-only"
+     * filter locally by matching `parentKeyId` against their own credential
+     * store's `userScopedKeys`.
+     */
+    listKeys(): Promise<CmosToolResult<ListKeysResult>>;
+}
+//# sourceMappingURL=dashboard-client.d.ts.map

package/dist/tools/cmos/dashboard-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-client.d.ts","sourceRoot":"","sources":["../../../src/tools/cmos/dashboard-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,OAAO,EACL,eAAe,EACf,KAAK,SAAS,EAEf,MAAM,qCAAqC,CAAC;AAI7C,eAAO,MAAM,sBAAsB,uBAAuB,CAAC;AAC3D,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAC7D,eAAO,MAAM,2BAA2B,4BAA4B,CAAC;AACrE,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AAEnE;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAE7D,oFAAoF;AACpF,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AAEjE;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAKjE;AAuBD,yDAAyD;AACzD,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD;AAID,MAAM,WAAW,qBAAqB;IACpC,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,uFAAuF;IACvF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE;YACJ,EAAE,EAAE,MAAM,CAAC;YACX,KAAK,EAAE,MAAM,CAAC;YACd,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,QAAQ,EAAE,OAAO,EAAE,CAAC;SACrB,CAAC;KACH,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;IACrB,uDAAuD;IACvD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,4FAA4F;IAC5F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE;QACZ,cAAc,EAAE,SAAS,GAAG,cAAc,GAAG,MAAM,CAAC;QACpD,cAAc,CAAC,EAAE;YACf,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;SAC7B,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;IACrB,2DAA2D;IAC3D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAmBD,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,oDAAoD;AACpD,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB;AAkDD,8CAA8C;AAC9C,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,gEAAgE;AAChE,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,yBAAyB,EAAE,MAAM,CAAC;IAClC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,sEAAsE;AACtE,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IAC7C;;;;;OAKG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,2EAA2E;AAC3E,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,8FAA8F;AAC9F,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,uCAAuC;AACvC,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,aAAa,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,MAAM,CAAC;IAC5E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,0CAA0C;AAC1C,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,SAAS,EAAE,CAAC;CACnB;AAED,yEAAyE;AACzE,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,6DAA6D;AAC7D,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,sEAAsE;AACtE,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,YAAY,EAAE,OAAO,EAAE,CAAC;CACzB;AAID;;;;;;GAMG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAE9C,wBAAwB;IACxB,OAAO,CAAC,WAAW,CAAuB;IAC1C,yCAAyC;IACzC,OAAO,CAAC,cAAc,CAAa;IACnC,2CAA2C;IAC3C,OAAO,CAAC,cAAc,CAAsC;IAC5D;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB,CAAqB;IACjD,2DAA2D;IAC3D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAU;gBAEtC,MAAM,EAAE,qBAAqB;IAiBzC;;;OAGG;IACH,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,cAAc,CAAC,eAAe,CAAC;IAiC3F;;;;;;;;;;;;;;;;;OAiBG;WACU,iBAAiB,CAC5B,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,SAAS,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG;QAAE,eAAe,CAAC,EAAE,eAAe,CAAA;KAAE,GACjF,OAAO,CACR,cAAc,CAAC;QACb,MAAM,EAAE,eAAe,CAAC;QACxB,SAAS,EAAE,SAAS,CAAC;QACrB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;KACnC,CAAC,CACH;IA4ED;;OAEG;YACW,YAAY;IA4D1B;;OAEG;YACW,YAAY;IAY1B;;OAEG;YACW,OAAO;IAyFrB;;;OAGG;IACH,IAAI,YAAY,IAAI,qBAAqB,GAAG,IAAI,CAE/C;IAED;;;;;OAKG;IACH,IAAI,mBAAmB,IAAI,MAAM,GAAG,SAAS,CAE5C;IAED,sEAAsE;IACtE,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAIvD;;OAEG;IACG,WAAW,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;IAiDvF;;OAEG;IACG,YAAY,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAY5F;;OAEG;IACG,gBAAgB,CACpB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;IAO5C;;OAEG;IACG,cAAc,CAClB,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;IAOhD;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC;IAQnE;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC;IAQnE;;;OAGG;IACG,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAIrF;;;OAGG;IACG,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;IAKpF;;;OAGG;IACG,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC;IAOxF;;;OAGG;IACG,WAAW,CACf,WAAW,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;IA0B7C;;;;;;;OAOG;IACH;;;;OAIG;IACG,cAAc,CAClB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;IA4F1C,eAAe,CAAC,MAAM,EAAE;QAC5B,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC;IAgGlD;;;;;;;;;;;;;;;;;;OAkBG;IACG,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAAC;IAW5F;;;;;;;;OAQG;IACG,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAO,GACtC,OAAO,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC;IAelD;;;;;;;;;;;;;;;;;OAiBG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;IAWxE;;;;;;;;;OASG;IACG,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;IAa3C;;;;;;;;OAQG;IACG,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;CAG1D"}