@beeos-ai/device-agent 0.4.3 → 0.5.1

package/dist/resources/resolvers/url-resolver.js

@@ -0,0 +1,495 @@
+/**
+ * URL Resolver — fetch HTTP(S) URLs and push them onto the device.
+ *
+ * Phase 1 / Pillar 1 of the GUI-Shortcut Hybrid Plan.
+ *
+ * Pipeline:
+ *
+ *   1. validate scheme  — `http` / `https` only (allowedSchemes).
+ *   2. SSRF check       — DNS resolve the hostname; reject any private
+ *                          / loopback / link-local / multicast IP.
+ *   3. fetch (streaming) — chunk-by-chunk with running size cap and
+ *                          AbortSignal merge. Validates Content-Type
+ *                          against the platform-supported MIME table.
+ *   4. DNS-rebind check — after the body has been read, re-resolve the
+ *                          hostname and assert at least one returned
+ *                          IP overlaps with the IP we accepted in (2).
+ *   5. choose ext       — strictly via Content-Type → ext mapping.
+ *                          Path-derived extensions are NEVER trusted.
+ *   6. choose target    — `ctx.device.resolveWellKnownDir(mime)` picks
+ *                          the platform-appropriate directory.
+ *   7. push             — `ctx.mcp.fileWrite(remotePath, bytes)`.
+ *   8. media-scan       — Android only: `touch -d now <path> &&
+ *                          am broadcast -a MEDIA_SCANNER_SCAN_FILE`
+ *                          so Gallery / WeChat / Photos see it as
+ *                          fresh and orderable. Best-effort; failure
+ *                          does NOT fail the resolve.
+ *
+ * All four SSRF defenses operate on the same `ResolverContext` so the
+ * AgentHost can flip them off in tests / lab environments via the
+ * feature flag.
+ */
+import { Buffer } from "node:buffer";
+import { promises as dns } from "node:dns";
+import { createHash } from "node:crypto";
+import { URL } from "node:url";
+import { AGENT_HOST_ERROR_LABELS } from "./errors.js";
+import { mapMimeToExt, ALLOWED_MIME_PREFIXES, ALLOWED_MIMES } from "./mime-table.js";
+export class ResolverError extends Error {
+    code;
+    meta;
+    constructor(code, message, meta) {
+        super(message);
+        this.code = code;
+        this.meta = meta;
+        this.name = "ResolverError";
+    }
+    /** Promtheus-friendly outcome label (subset of error codes). */
+    get outcomeLabel() {
+        return AGENT_HOST_ERROR_LABELS[this.code];
+    }
+}
+const DEFAULT_FETCH_IMPL = (...args) => fetch(...args);
+const DEFAULT_DNS_LOOKUP = async (hostname) => {
+    // Use `lookup` with `all: true` instead of `resolve4`+`resolve6` so we
+    // honor /etc/hosts and the OS resolver — same surface area Node's
+    // built-in fetch sees on a subsequent connect, which is essential for
+    // the DNS-rebind defence.
+    return dns.lookup(hostname, { all: true });
+};
+export class UrlResolver {
+    name = "url";
+    fetchImpl;
+    dnsLookup;
+    forceDeviceType;
+    constructor(opts = {}) {
+        this.fetchImpl = opts.fetchImpl ?? DEFAULT_FETCH_IMPL;
+        this.dnsLookup = opts.dnsLookup ?? DEFAULT_DNS_LOOKUP;
+        this.forceDeviceType = opts.forceDeviceType;
+    }
+    match(ref) {
+        return ref.kind === "url";
+    }
+    async resolve(ref, ctx) {
+        if (ref.kind !== "url") {
+            throw new ResolverError("fetch_error", `UrlResolver: unsupported ref kind ${ref.kind}`);
+        }
+        if (ctx.abortSignal.aborted) {
+            throw new ResolverError("aborted", "resolve aborted before start");
+        }
+        emit(ctx, { phase: "start", ref });
+        let asset;
+        try {
+            asset = await this.doResolve(ref, ctx);
+            emit(ctx, { phase: "end", ref, asset });
+            return asset;
+        }
+        catch (e) {
+            const err = e instanceof Error ? e : new Error(String(e));
+            emit(ctx, { phase: "end", ref, error: err });
+            throw err;
+        }
+    }
+    /* ---------------------------------------------------------------- */
+    /* Internal pipeline                                                  */
+    /* ---------------------------------------------------------------- */
+    async doResolve(ref, ctx) {
+        /* 1. scheme check */
+        let parsed;
+        try {
+            parsed = new URL(ref.url);
+        }
+        catch {
+            throw new ResolverError("disallowed_scheme", `invalid URL: ${ref.url}`);
+        }
+        const scheme = parsed.protocol.replace(/:$/, "").toLowerCase();
+        if (!ctx.allowedSchemes.includes(scheme)) {
+            throw new ResolverError("disallowed_scheme", `scheme "${scheme}" not in allow-list`, { scheme });
+        }
+        /* 2. SSRF — pre-fetch IP allow-list */
+        if (ctx.denyPrivateIp) {
+            const initial = await this.dnsLookup(parsed.hostname);
+            if (initial.length === 0) {
+                throw new ResolverError("fetch_error", `DNS resolved no addresses for ${parsed.hostname}`);
+            }
+            for (const a of initial) {
+                if (isPrivateOrLoopback(a.address, a.family)) {
+                    throw new ResolverError("private_ip_blocked", `private/loopback IP ${a.address} for ${parsed.hostname}`);
+                }
+            }
+        }
+        /* 3. fetch (streaming, with running cap and timeout) */
+        const fetchController = new AbortController();
+        const onAbort = () => fetchController.abort();
+        if (ctx.abortSignal.aborted) {
+            throw new ResolverError("aborted", "aborted before fetch");
+        }
+        ctx.abortSignal.addEventListener("abort", onAbort, { once: true });
+        const timer = setTimeout(() => fetchController.abort(), ctx.timeoutMs);
+        let response;
+        try {
+            response = await this.fetchImpl(parsed.toString(), {
+                signal: fetchController.signal,
+                redirect: "follow",
+            });
+        }
+        catch (e) {
+            ctx.abortSignal.removeEventListener("abort", onAbort);
+            clearTimeout(timer);
+            if (ctx.abortSignal.aborted) {
+                throw new ResolverError("aborted", "aborted during fetch", { cause: errString(e) });
+            }
+            throw new ResolverError("fetch_error", `fetch failed: ${errString(e)}`);
+        }
+        if (!response.ok) {
+            ctx.abortSignal.removeEventListener("abort", onAbort);
+            clearTimeout(timer);
+            throw new ResolverError("fetch_error", `fetch returned ${response.status} ${response.statusText}`, { status: response.status });
+        }
+        /* validate Content-Type early so we don't burn bandwidth on disallowed types */
+        const rawCt = response.headers.get("content-type") ?? "";
+        const mime = normaliseMime(rawCt);
+        if (!isAllowedMime(mime)) {
+            ctx.abortSignal.removeEventListener("abort", onAbort);
+            clearTimeout(timer);
+            throw new ResolverError("disallowed_mime", `Content-Type "${mime}" is not in the allow-list`, { mime });
+        }
+        /* declared Content-Length sanity check (still need streaming check) */
+        const declaredLen = parseInt(response.headers.get("content-length") ?? "", 10);
+        if (Number.isFinite(declaredLen) && declaredLen > ctx.maxBytes) {
+            ctx.abortSignal.removeEventListener("abort", onAbort);
+            clearTimeout(timer);
+            throw new ResolverError("oversized", `declared Content-Length ${declaredLen} exceeds maxBytes ${ctx.maxBytes}`, { declaredLen, maxBytes: ctx.maxBytes });
+        }
+        /* stream body, abort on cap overrun */
+        let bytes;
+        try {
+            bytes = await readBodyWithCap(response, ctx.maxBytes, Number.isFinite(declaredLen) ? declaredLen : undefined, (downloaded, total) => {
+                emit(ctx, {
+                    phase: "update",
+                    ref,
+                    downloadedBytes: downloaded,
+                    ...(total !== undefined ? { totalBytes: total } : {}),
+                });
+            });
+        }
+        catch (e) {
+            if (ctx.abortSignal.aborted) {
+                throw new ResolverError("aborted", "aborted during body read", { cause: errString(e) });
+            }
+            if (e instanceof ResolverError)
+                throw e;
+            throw new ResolverError("fetch_error", `body read failed: ${errString(e)}`);
+        }
+        finally {
+            ctx.abortSignal.removeEventListener("abort", onAbort);
+            clearTimeout(timer);
+        }
+        /* 4. DNS-rebind defence — re-resolve after the connection completed
+         * and require at least one IP overlap with the initial allow-list.
+         * Skipped when private-IP blocking is off (test/lab environments).
+         */
+        if (ctx.denyPrivateIp) {
+            const initial = await this.dnsLookup(parsed.hostname).catch(() => []);
+            const post = await this.dnsLookup(parsed.hostname).catch(() => []);
+            const initialIps = new Set(initial.map((a) => a.address));
+            const overlap = post.some((a) => initialIps.has(a.address));
+            if (!overlap && post.length > 0) {
+                throw new ResolverError("dns_rebind_blocked", `DNS for ${parsed.hostname} changed mid-fetch (rebind defence)`, { initial: [...initialIps], post: post.map((a) => a.address) });
+            }
+            // Also: if any post-fetch IP is private/loopback we treat that as
+            // a successful rebind and reject.
+            for (const a of post) {
+                if (isPrivateOrLoopback(a.address, a.family)) {
+                    throw new ResolverError("dns_rebind_blocked", `post-fetch DNS now resolves to private IP ${a.address}`, { address: a.address });
+                }
+            }
+        }
+        /* 5. choose ext via MIME → ext mapping (NEVER from URL path) */
+        const ext = mapMimeToExt(mime);
+        if (!ext) {
+            throw new ResolverError("disallowed_mime", `MIME "${mime}" has no whitelisted extension mapping`, { mime });
+        }
+        /* 6. resolve well-known dir */
+        let baseDir;
+        try {
+            baseDir = await ctx.device.resolveWellKnownDir(mime);
+        }
+        catch (e) {
+            throw new ResolverError("push_error", `device cannot resolve well-known dir for ${mime}: ${errString(e)}`, { mime });
+        }
+        const sha = createHash("sha256").update(bytes).digest("hex");
+        const sha8 = sha.slice(0, 8);
+        const filename = `beeos_${Math.floor(Date.now() / 1000)}_${sha8}.${ext}`;
+        const remotePath = joinRemote(baseDir, filename);
+        /* 7a. ensure the sandbox directory exists. The production adapter
+         * resolves to a sub-folder like `/sdcard/Pictures/beeos/` (so the
+         * lifecycle sweepers have a safe-to-wipe boundary); on a freshly
+         * provisioned device that subdir does NOT exist yet and `fileWrite`
+         * would fail with `ENOENT`. We do this best-effort via the same
+         * MCP `executeCommand` channel the media-scan branch uses; on the
+         * legacy in-proc bridge the call is a no-op and `fileWrite` either
+         * succeeds (the subdir was already there) or fails the next step
+         * with a structured error. */
+        if (typeof ctx.mcp.executeCommand === "function") {
+            try {
+                await ctx.mcp.executeCommand(`mkdir -p ${shellQuote(baseDir)}`);
+            }
+            catch (e) {
+                ctx.log.warn({ baseDir, err: errString(e) }, "url-resolver: mkdir -p sandbox dir failed (continuing)");
+            }
+        }
+        /* 7b. disk-pressure guard (Phase 1.5 / lifecycle L3). Optional —
+         * when no guard is wired the resolver behaves exactly as before. */
+        if (ctx.diskPressure) {
+            try {
+                await ctx.diskPressure.assertCapacity({
+                    mcp: ctx.mcp,
+                    sandboxDir: baseDir,
+                    incomingBytes: bytes.length,
+                    log: ctx.log,
+                });
+            }
+            catch (e) {
+                if (e instanceof ResolverError)
+                    throw e;
+                throw new ResolverError("push_error", `disk-pressure guard failed: ${errString(e)}`, { baseDir });
+            }
+        }
+        /* 7c. push via MCP file_write */
+        if (typeof ctx.mcp.fileWrite !== "function") {
+            throw new ResolverError("push_error", "MCP runtime does not implement fileWrite (legacy in-proc bridge?)");
+        }
+        try {
+            await ctx.mcp.fileWrite(remotePath, bytes);
+        }
+        catch (e) {
+            throw new ResolverError("push_error", `mcp.fileWrite failed: ${errString(e)}`, { remotePath });
+        }
+        /* 8. Android-only media-scan + touch-now */
+        let scanned = false;
+        const platform = await this.detectPlatform(ctx);
+        if (platform === "android" && typeof ctx.mcp.executeCommand === "function") {
+            try {
+                // touch -d now updates mtime so Gallery / Photos / WeChat sort
+                // it as the most recent file (otherwise the file's mtime is
+                // whatever ADB wrote — potentially seconds-old, but on some
+                // ROMs the mtime is preserved from the upload's source).
+                await ctx.mcp.executeCommand(`touch -d now ${shellQuote(remotePath)}`);
+                await ctx.mcp.executeCommand(`am broadcast -a android.intent.action.MEDIA_SCANNER_SCAN_FILE -d file://${remotePath}`);
+                scanned = true;
+            }
+            catch (e) {
+                // Best-effort. Don't fail the resolve — agent can still
+                // reference the file by absolute path.
+                ctx.log.warn({ remotePath, err: errString(e) }, "url-resolver: media-scan trigger failed (non-fatal)");
+            }
+        }
+        return {
+            ref,
+            remotePath,
+            mime,
+            sizeBytes: bytes.length,
+            sha256: sha,
+            scannedToMediaStore: scanned,
+            sourceUrl: ref.url,
+            resolvedAt: Date.now(),
+        };
+    }
+    async detectPlatform(ctx) {
+        if (this.forceDeviceType)
+            return this.forceDeviceType.toLowerCase();
+        try {
+            const info = await ctx.device.getInfo();
+            return (info.os ?? info.type ?? "").toString().toLowerCase();
+        }
+        catch {
+            return "";
+        }
+    }
+}
+/* ------------------------------------------------------------------ */
+/* Helpers                                                             */
+/* ------------------------------------------------------------------ */
+function emit(ctx, ev) {
+    if (!ctx.emitProgress)
+        return;
+    try {
+        ctx.emitProgress(ev);
+    }
+    catch {
+        /* swallow — telemetry must never break the pipeline */
+    }
+}
+function errString(e) {
+    if (e instanceof Error)
+        return e.message;
+    return String(e);
+}
+/**
+ * Read a `Response` body into a single Buffer, aborting once the
+ * accumulated size exceeds `maxBytes`. Reports progress through
+ * `onProgress` after each chunk so the AgentHost can render a download
+ * progress card.
+ */
+async function readBodyWithCap(res, maxBytes, declaredLen, onProgress) {
+    if (!res.body) {
+        const ab = await res.arrayBuffer();
+        if (ab.byteLength > maxBytes) {
+            throw new ResolverError("oversized", `body ${ab.byteLength} exceeds maxBytes ${maxBytes}`);
+        }
+        onProgress(ab.byteLength, declaredLen);
+        return Buffer.from(ab);
+    }
+    const reader = res.body.getReader();
+    const chunks = [];
+    let received = 0;
+    try {
+        while (true) {
+            const { value, done } = await reader.read();
+            if (done)
+                break;
+            if (value) {
+                const chunk = Buffer.from(value);
+                received += chunk.length;
+                if (received > maxBytes) {
+                    throw new ResolverError("oversized", `body exceeded maxBytes ${maxBytes} during streaming`);
+                }
+                chunks.push(chunk);
+                onProgress(received, declaredLen);
+            }
+        }
+    }
+    finally {
+        try {
+            reader.releaseLock();
+        }
+        catch {
+            /* noop */
+        }
+    }
+    return Buffer.concat(chunks);
+}
+function normaliseMime(raw) {
+    // strip ;charset=… and trim whitespace
+    const idx = raw.indexOf(";");
+    const body = idx >= 0 ? raw.slice(0, idx) : raw;
+    return body.trim().toLowerCase();
+}
+function isAllowedMime(mime) {
+    if (!mime)
+        return false;
+    if (ALLOWED_MIMES.has(mime))
+        return true;
+    for (const p of ALLOWED_MIME_PREFIXES) {
+        if (mime.startsWith(p))
+            return true;
+    }
+    return false;
+}
+/**
+ * RFC 1918 / RFC 4193 / loopback / link-local / multicast / etc check.
+ * We deliberately keep this exhaustive rather than rely on a third-party
+ * package — the SSRF surface is small and security-critical.
+ *
+ *   IPv4 loopback             — 127.0.0.0/8
+ *   IPv4 RFC1918 private       — 10/8, 172.16/12, 192.168/16
+ *   IPv4 link-local            — 169.254/16
+ *   IPv4 CGNAT                 — 100.64/10
+ *   IPv4 broadcast / multicast — 224/4, 255.255.255.255
+ *   IPv4 0.0.0.0/8             — "this network"
+ *   IPv6 loopback              — ::1
+ *   IPv6 link-local            — fe80::/10
+ *   IPv6 ULA                   — fc00::/7
+ *   IPv6 multicast             — ff00::/8
+ *   IPv6 unspecified           — ::
+ *   IPv4-mapped IPv6           — ::ffff:0:0/96 (mapped to v4 above)
+ */
+export function isPrivateOrLoopback(addr, family) {
+    if (!addr)
+        return true;
+    const a = addr.toLowerCase();
+    if (family === 4 || /^\d+\.\d+\.\d+\.\d+$/.test(a)) {
+        return isPrivateIpv4(a);
+    }
+    // IPv4-mapped IPv6 — ::ffff:1.2.3.4 / ::ffff:0102:0304
+    if (a.startsWith("::ffff:")) {
+        const tail = a.slice("::ffff:".length);
+        if (/^\d+\.\d+\.\d+\.\d+$/.test(tail)) {
+            return isPrivateIpv4(tail);
+        }
+        // hex-form ::ffff:0102:0304 → 1.2.3.4
+        const mapped = hex32ToIpv4(tail);
+        if (mapped)
+            return isPrivateIpv4(mapped);
+    }
+    // IPv6 loopback / unspecified
+    if (a === "::1" || a === "::")
+        return true;
+    // IPv6 link-local fe80::/10
+    if (a.startsWith("fe8") || a.startsWith("fe9") || a.startsWith("fea") || a.startsWith("feb")) {
+        return true;
+    }
+    // IPv6 ULA fc00::/7 (covers fc.. and fd..)
+    if (a.startsWith("fc") || a.startsWith("fd"))
+        return true;
+    // IPv6 multicast ff00::/8
+    if (a.startsWith("ff"))
+        return true;
+    return false;
+}
+function isPrivateIpv4(a) {
+    const parts = a.split(".").map((s) => parseInt(s, 10));
+    if (parts.length !== 4 || parts.some((n) => !Number.isFinite(n)))
+        return true;
+    const [b1, b2] = parts;
+    // 0.0.0.0/8 — "this host on this network"
+    if (b1 === 0)
+        return true;
+    if (b1 === 127)
+        return true; // 127/8 loopback
+    if (b1 === 10)
+        return true; // 10/8 private
+    if (b1 === 172 && b2 >= 16 && b2 <= 31)
+        return true; // 172.16/12 private
+    if (b1 === 192 && b2 === 168)
+        return true; // 192.168/16 private
+    if (b1 === 169 && b2 === 254)
+        return true; // 169.254/16 link-local
+    if (b1 === 100 && b2 >= 64 && b2 <= 127)
+        return true; // 100.64/10 CGNAT
+    if (b1 >= 224 && b1 <= 239)
+        return true; // 224/4 multicast
+    if (b1 >= 240)
+        return true; // 240/4 reserved + 255.255.255.255 broadcast
+    return false;
+}
+function hex32ToIpv4(s) {
+    // expects e.g. "0102:0304" or "0102:0304" or "102:304"
+    const parts = s.split(":");
+    if (parts.length !== 2)
+        return null;
+    const high = parseInt(parts[0], 16);
+    const low = parseInt(parts[1], 16);
+    if (!Number.isFinite(high) || !Number.isFinite(low))
+        return null;
+    const b1 = (high >> 8) & 0xff;
+    const b2 = high & 0xff;
+    const b3 = (low >> 8) & 0xff;
+    const b4 = low & 0xff;
+    return `${b1}.${b2}.${b3}.${b4}`;
+}
+function joinRemote(dir, filename) {
+    const left = dir.endsWith("/") ? dir.slice(0, -1) : dir;
+    return `${left}/${filename}`;
+}
+/**
+ * Quote a path for safe inclusion in a single-quoted shell argument.
+ * Path is generated server-side (no user input), but defensive
+ * quoting keeps us safe in case future filename schemes ever include
+ * exotic characters.
+ */
+function shellQuote(s) {
+    return `'${s.replace(/'/g, "'\\''")}'`;
+}
+//# sourceMappingURL=url-resolver.js.map

package/dist/resources/resolvers/url-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-resolver.js","sourceRoot":"","sources":["../../../src/resources/resolvers/url-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,QAAQ,IAAI,GAAG,EAAsB,MAAM,UAAU,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,OAAO,EAAE,uBAAuB,EAA0B,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AASrF,MAAM,OAAO,aAAc,SAAQ,KAAK;IAEpB;IAEA;IAHlB,YACkB,IAAuB,EACvC,OAAe,EACC,IAA8B;QAE9C,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAmB;QAEvB,SAAI,GAAJ,IAAI,CAA0B;QAG9C,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;IACD,gEAAgE;IAChE,IAAI,YAAY;QACd,OAAO,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;CACF;AAiBD,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAA8B,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;AACjF,MAAM,kBAAkB,GAAG,KAAK,EAAE,QAAgB,EAA4B,EAAE;IAC9E,uEAAuE;IACvE,kEAAkE;IAClE,sEAAsE;IACtE,0BAA0B;IAC1B,OAAO,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF,MAAM,OAAO,WAAW;IACb,IAAI,GAAG,KAAK,CAAC;IACL,SAAS,CAAe;IACxB,SAAS,CAAiD;IAC1D,eAAe,CAAU;IAE1C,YAAY,OAA2B,EAAE;QACvC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACtD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACtD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,GAAgB;QACpB,OAAO,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAgB,EAAE,GAAoB;QAClD,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACvB,MAAM,IAAI,aAAa,CACrB,aAAa,EACb,qCAAqC,GAAG,CAAC,IAAI,EAAE,CAChD,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,aAAa,CAAC,SAAS,EAAE,8BAA8B,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACnC,IAAI,KAAgC,CAAC;QACrC,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7C,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,wEAAwE;IACxE,sEAAsE;IAE9D,KAAK,CAAC,SAAS,CACrB,GAAkC,EAClC,GAAoB;QAEpB,qBAAqB;QACrB,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,gBAAgB,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/D,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,aAAa,CACrB,mBAAmB,EACnB,WAAW,MAAM,qBAAqB,EACtC,EAAE,MAAM,EAAE,CACX,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,aAAa,CAAC,aAAa,EAAE,iCAAiC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,mBAAmB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC7C,MAAM,IAAI,aAAa,CACrB,oBAAoB,EACpB,uBAAuB,CAAC,CAAC,OAAO,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAC1D,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,wDAAwD;QACxD,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,aAAa,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;QAC7D,CAAC;QACD,GAAG,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAEvE,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE;gBACjD,MAAM,EAAE,eAAe,CAAC,MAAM;gBAC9B,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBAC5B,MAAM,IAAI,aAAa,CAAC,SAAS,EAAE,sBAAsB,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,MAAM,IAAI,aAAa,CAAC,aAAa,EAAE,iBAAiB,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,GAAG,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,IAAI,aAAa,CACrB,aAAa,EACb,kBAAkB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,EAC1D,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAC5B,CAAC;QACJ,CAAC;QAED,gFAAgF;QAChF,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,IAAI,aAAa,CACrB,iBAAiB,EACjB,iBAAiB,IAAI,4BAA4B,EACjD,EAAE,IAAI,EAAE,CACT,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/E,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC/D,GAAG,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,IAAI,aAAa,CACrB,WAAW,EACX,2BAA2B,WAAW,qBAAqB,GAAG,CAAC,QAAQ,EAAE,EACzE,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CACxC,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,eAAe,CAC3B,QAAQ,EACR,GAAG,CAAC,QAAQ,EACZ,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EACtD,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE;gBACpB,IAAI,CAAC,GAAG,EAAE;oBACR,KAAK,EAAE,QAAQ;oBACf,GAAG;oBACH,eAAe,EAAE,UAAU;oBAC3B,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtD,CAAC,CAAC;YACL,CAAC,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBAC5B,MAAM,IAAI,aAAa,CAAC,SAAS,EAAE,0BAA0B,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1F,CAAC;YACD,IAAI,CAAC,YAAY,aAAa;gBAAE,MAAM,CAAC,CAAC;YACxC,MAAM,IAAI,aAAa,CAAC,aAAa,EAAE,qBAAqB,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;gBAAS,CAAC;YACT,GAAG,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED;;;WAGG;QACH,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACtE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5D,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,aAAa,CACrB,oBAAoB,EACpB,WAAW,MAAM,CAAC,QAAQ,qCAAqC,EAC/D,EAAE,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAC/D,CAAC;YACJ,CAAC;YACD,kEAAkE;YAClE,kCAAkC;YAClC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,IAAI,mBAAmB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC7C,MAAM,IAAI,aAAa,CACrB,oBAAoB,EACpB,6CAA6C,CAAC,CAAC,OAAO,EAAE,EACxD,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CACvB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,aAAa,CACrB,iBAAiB,EACjB,SAAS,IAAI,wCAAwC,EACrD,EAAE,IAAI,EAAE,CACT,CAAC;QACJ,CAAC;QAED,+BAA+B;QAC/B,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,aAAa,CACrB,YAAY,EACZ,4CAA4C,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EACnE,EAAE,IAAI,EAAE,CACT,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;QACzE,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEjD;;;;;;;;sCAQ8B;QAC9B,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,YAAY,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,GAAG,CAAC,IAAI,CACV,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,EAC9B,wDAAwD,CACzD,CAAC;YACJ,CAAC;QACH,CAAC;QAED;4EACoE;QACpE,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,YAAY,CAAC,cAAc,CAAC;oBACpC,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,UAAU,EAAE,OAAO;oBACnB,aAAa,EAAE,KAAK,CAAC,MAAM;oBAC3B,GAAG,EAAE,GAAG,CAAC,GAAG;iBACb,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,aAAa;oBAAE,MAAM,CAAC,CAAC;gBACxC,MAAM,IAAI,aAAa,CACrB,YAAY,EACZ,+BAA+B,SAAS,CAAC,CAAC,CAAC,EAAE,EAC7C,EAAE,OAAO,EAAE,CACZ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YAC5C,MAAM,IAAI,aAAa,CACrB,YAAY,EACZ,mEAAmE,CACpE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,aAAa,CACrB,YAAY,EACZ,yBAAyB,SAAS,CAAC,CAAC,CAAC,EAAE,EACvC,EAAE,UAAU,EAAE,CACf,CAAC;QACJ,CAAC;QAED,4CAA4C;QAC5C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;YAC3E,IAAI,CAAC;gBACH,+DAA+D;gBAC/D,4DAA4D;gBAC5D,4DAA4D;gBAC5D,yDAAyD;gBACzD,MAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,gBAAgB,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBACvE,MAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAC1B,2EAA2E,UAAU,EAAE,CACxF,CAAC;gBACF,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,wDAAwD;gBACxD,uCAAuC;gBACvC,GAAG,CAAC,GAAG,CAAC,IAAI,CACV,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,EACjC,qDAAqD,CACtD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;YACL,GAAG;YACH,UAAU;YACV,IAAI;YACJ,SAAS,EAAE,KAAK,CAAC,MAAM;YACvB,MAAM,EAAE,GAAG;YACX,mBAAmB,EAAE,OAAO;YAC5B,SAAS,EAAE,GAAG,CAAC,GAAG;YAClB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;SACvB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,GAAoB;QAC/C,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE,SAAS,IAAI,CAAC,GAAoB,EAAE,EAAwB;IAC1D,IAAI,CAAC,GAAG,CAAC,YAAY;QAAE,OAAO;IAC9B,IAAI,CAAC;QACH,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,CAAU;IAC3B,IAAI,CAAC,YAAY,KAAK;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IACzC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAC5B,GAAa,EACb,QAAgB,EAChB,WAA+B,EAC/B,UAA6E;IAE7E,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,EAAE,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,aAAa,CACrB,WAAW,EACX,QAAQ,EAAE,CAAC,UAAU,qBAAqB,QAAQ,EAAE,CACrD,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACvC,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACpC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;gBACzB,IAAI,QAAQ,GAAG,QAAQ,EAAE,CAAC;oBACxB,MAAM,IAAI,aAAa,CACrB,WAAW,EACX,0BAA0B,QAAQ,mBAAmB,CACtD,CAAC;gBACJ,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,uCAAuC;IACvC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAChD,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,qBAAqB,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,MAAc;IAC9D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAE7B,IAAI,MAAM,KAAK,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IAED,uDAAuD;IACvD,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,sCAAsC;QACtC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,MAAM;YAAE,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3C,4BAA4B;IAC5B,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,2CAA2C;IAC3C,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,0BAA0B;IAC1B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC;IACvB,0CAA0C;IAC1C,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,EAAE,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,iBAAiB;IAC9C,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,eAAe;IAC3C,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,oBAAoB;IACzE,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,qBAAqB;IAChE,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;IACnE,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,kBAAkB;IACxE,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,kBAAkB;IAC3D,IAAI,EAAE,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,6CAA6C;IACzE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,uDAAuD;IACvD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC;IACtB,OAAO,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,QAAgB;IAC/C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACxD,OAAO,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACzC,CAAC"}

package/dist/resources/shortcut-facade.d.ts

@@ -0,0 +1,51 @@
+/**
+ * `BootstrapShortcutResourceFacade` — a `ShortcutResourceFacade` impl
+ * that delegates into the same `ResourceResolverRegistry` + cache the
+ * `AgentHostImpl` uses, so the `download_to_device` shortcut and the
+ * AgentHost auto-trigger share **one** download per URL. This closes
+ * the wiring gap that previously caused
+ * `download_to_device` → `permission_denied` in the Pi extension path.
+ *
+ * Design notes:
+ *
+ * - Owns no state of its own — it's a thin adapter. Cache writes still
+ *   go through the shared `ResourceResolutionCache` so a subsequent
+ *   AgentHost auto-trigger sees the result.
+ * - Re-uses the registry's `resolveAll(taskText, ctx)` entry point
+ *   because `UrlParser` already knows how to extract a URL from a
+ *   string. We pass the URL itself as the synthetic task — no parser
+ *   change required.
+ * - Throws `ResolverError` (not a generic `Error`) so the
+ *   `download_to_device` shortcut can map the code to the
+ *   `ShortcutErrorCode` vocabulary deterministically.
+ */
+import type { Logger } from "../logger/index.js";
+import type { IDevice } from "../ports/device.js";
+import type { IMcpRuntime } from "../mcp-client/runtime.js";
+import type { AgentHostResourceConfig } from "../app/agent-host.js";
+import type { ShortcutResourceFacade } from "../shortcuts/types.js";
+import type { ResourceResolverRegistry } from "./registry.js";
+import { ResourceResolutionCache } from "./cache.js";
+import type { DiskPressureGuard } from "./types.js";
+export interface BootstrapShortcutResourceFacadeOptions {
+    registry: ResourceResolverRegistry;
+    cache: ResourceResolutionCache;
+    device: IDevice;
+    mcpProvider: () => IMcpRuntime;
+    config: AgentHostResourceConfig;
+    diskPressure?: DiskPressureGuard;
+    log: Logger;
+    /** Optional shared abort signal — caller's host abort. Defaults to a fresh per-call controller. */
+    hostSignal?: AbortSignal;
+}
+export declare class BootstrapShortcutResourceFacade implements ShortcutResourceFacade {
+    private readonly opts;
+    constructor(opts: BootstrapShortcutResourceFacadeOptions);
+    resolveUrl(url: string): Promise<{
+        remotePath: string;
+        mime: string;
+        sizeBytes: number;
+        sha256: string;
+        sourceUrl: string;
+    }>;
+}

package/dist/resources/shortcut-facade.js

@@ -0,0 +1,72 @@
+import { ResourceResolutionCache } from "./cache.js";
+import { ResolverError } from "./resolvers/url-resolver.js";
+export class BootstrapShortcutResourceFacade {
+    opts;
+    constructor(opts) {
+        this.opts = opts;
+    }
+    async resolveUrl(url) {
+        if (!this.opts.config.enabled) {
+            throw new ResolverError("fetch_error", "resource resolution disabled (RESOURCE_RESOLUTION_ENABLED=false)");
+        }
+        const cacheKey = ResourceResolutionCache.keyForUrl(url);
+        const cached = this.opts.cache.get(cacheKey);
+        if (cached) {
+            // Validate the device-side file is still alive (operators
+            // occasionally clear well-known dirs between tasks). On a
+            // missing file we invalidate and fall through to a fresh
+            // resolve — same protocol the AgentHost uses.
+            const alive = await ResourceResolutionCache.validateAlive(cached, this.opts.mcpProvider()).catch(() => false);
+            if (alive)
+                return toFacadeOutput(cached);
+            this.opts.cache.invalidate(cacheKey);
+        }
+        const ctl = new AbortController();
+        const cleanup = [];
+        if (this.opts.hostSignal) {
+            if (this.opts.hostSignal.aborted)
+                ctl.abort();
+            else {
+                const onAbort = () => ctl.abort();
+                this.opts.hostSignal.addEventListener("abort", onAbort, { once: true });
+                cleanup.push(() => this.opts.hostSignal?.removeEventListener("abort", onAbort));
+            }
+        }
+        const timer = setTimeout(() => ctl.abort(), this.opts.config.timeoutMs);
+        cleanup.push(() => clearTimeout(timer));
+        try {
+            const out = await this.opts.registry.resolveAll(url, {
+                device: this.opts.device,
+                mcp: this.opts.mcpProvider(),
+                abortSignal: ctl.signal,
+                maxBytes: this.opts.config.maxBytes,
+                timeoutMs: this.opts.config.timeoutMs,
+                allowedSchemes: [...this.opts.config.allowedSchemes],
+                denyPrivateIp: this.opts.config.denyPrivateIp,
+                log: this.opts.log,
+                ...(this.opts.diskPressure ? { diskPressure: this.opts.diskPressure } : {}),
+            });
+            if (out.assets[0]) {
+                this.opts.cache.set(cacheKey, out.assets[0]);
+                return toFacadeOutput(out.assets[0]);
+            }
+            if (out.errors[0])
+                throw out.errors[0].error;
+            throw new ResolverError("fetch_error", `no resolver matched url: ${url}`);
+        }
+        finally {
+            for (const fn of cleanup)
+                fn();
+        }
+    }
+}
+function toFacadeOutput(asset) {
+    return {
+        remotePath: asset.remotePath,
+        mime: asset.mime,
+        sizeBytes: asset.sizeBytes,
+        sha256: asset.sha256,
+        sourceUrl: asset.sourceUrl,
+    };
+}
+//# sourceMappingURL=shortcut-facade.js.map

package/dist/resources/shortcut-facade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shortcut-facade.js","sourceRoot":"","sources":["../../src/resources/shortcut-facade.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAErD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAc5D,MAAM,OAAO,+BAA+B;IACb;IAA7B,YAA6B,IAA4C;QAA5C,SAAI,GAAJ,IAAI,CAAwC;IAAG,CAAC;IAE7E,KAAK,CAAC,UAAU,CAAC,GAAW;QAO1B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,aAAa,CACrB,aAAa,EACb,kEAAkE,CACnE,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,uBAAuB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM,EAAE,CAAC;YACX,0DAA0D;YAC1D,0DAA0D;YAC1D,yDAAyD;YACzD,8CAA8C;YAC9C,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,aAAa,CACvD,MAAM,EACN,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CACxB,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;YACrB,IAAI,KAAK;gBAAE,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO;gBAAE,GAAG,CAAC,KAAK,EAAE,CAAC;iBACzC,CAAC;gBACJ,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;gBAClC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAExC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE;gBACnD,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;gBACxB,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;gBAC5B,WAAW,EAAE,GAAG,CAAC,MAAM;gBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ;gBACnC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS;gBACrC,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;gBACpD,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa;gBAC7C,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;gBAClB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5E,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7C,OAAO,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAE,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAC7C,MAAM,IAAI,aAAa,CAAC,aAAa,EAAE,4BAA4B,GAAG,EAAE,CAAC,CAAC;QAC5E,CAAC;gBAAS,CAAC;YACT,KAAK,MAAM,EAAE,IAAI,OAAO;gBAAE,EAAE,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;CACF;AAED,SAAS,cAAc,CAAC,KAAoB;IAO1C,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC"}