@botanary/agent 0.1.0-alpha.1

package/dist/registration.js

@@ -0,0 +1,62 @@
+import { recoverMessageAddress } from 'viem';
+import { BotanaryApiError } from './errors.js';
+import { hex, invalidResponse, publicIdentity, resourceId } from './validation.js';
+/** Registration proves possession of this agent key. It creates neither owner consent nor a grant. */
+export async function registerAgent(signer, client, name) {
+    if (typeof name !== 'string' || name.trim().length < 1 || name.trim().length > 80)
+        throw new Error('Agent name must contain 1 to 80 characters.');
+    let identity;
+    try {
+        identity = publicIdentity(await signer.ensure());
+    }
+    catch {
+        throw signerFailure();
+    }
+    const context = await client.app.context();
+    resourceId(context.appId);
+    resourceId(context.keyId);
+    if (!['test', 'live'].includes(context.environment))
+        invalidResponse();
+    const publicKey = identity.publicKey.toLowerCase();
+    const address = identity.address.toLowerCase();
+    const challenge = await client.agents.challenge({ publicKey, name: name.trim() });
+    if (!challenge || challenge.appId !== context.appId || challenge.environment !== context.environment ||
+        challenge.publicKey !== publicKey || challenge.address !== address || !/^dach_[A-Za-z0-9_-]{43}$/.test(challenge.id) ||
+        typeof challenge.expiresAt !== 'string' || !Number.isFinite(Date.parse(challenge.expiresAt)) ||
+        Date.parse(challenge.expiresAt) <= Date.now() || Date.parse(challenge.expiresAt) > Date.now() + 360_000)
+        invalidResponse();
+    const message = [
+        'Botanary agent registration', 'Purpose: register-agent-key', 'Audience: botanary:developer-platform:2026-09-07',
+        `Application: ${context.appId}`, `Environment: ${context.environment}`, `API key: ${context.keyId}`,
+        `Public key: ${publicKey}`, `Address: ${address}`, `Nonce: ${challenge.id}`, `Expires: ${challenge.expiresAt}`,
+        'This proof does not authorize an account connection or an on-chain grant.',
+    ].join('\n');
+    if (challenge.message !== message)
+        invalidResponse();
+    let signature;
+    try {
+        signature = await signer.sign(message);
+        hex(signature, 65);
+        if ((await recoverMessageAddress({ message, signature })).toLowerCase() !== address)
+            throw signerFailure();
+    }
+    catch {
+        throw signerFailure();
+    }
+    const registration = await client.agents.complete({ challengeId: challenge.id, signature });
+    if (!registration || registration.appId !== context.appId || registration.environment !== context.environment ||
+        registration.publicKey !== publicKey || registration.address !== address || registration.grantStatus !== 'unknown' ||
+        !['awaiting_connection', 'active', 'disabled', 'app_disabled', 'key_revoked', 'connection_revoked', 'unavailable'].includes(registration.apiAccess) ||
+        (registration.apiAccess === 'active' && registration.connectionId === null) ||
+        (registration.apiAccess === 'awaiting_connection' && registration.connectionId !== null))
+        invalidResponse();
+    if (registration.connectionId !== null)
+        resourceId(registration.connectionId);
+    return registration;
+}
+function signerFailure() {
+    const error = new BotanaryApiError('The agent signer could not complete registration.', 0);
+    error.code = 'signer_error';
+    return error;
+}
+//# sourceMappingURL=registration.js.map

package/dist/registration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration.js","sourceRoot":"","sources":["../src/registration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,MAAM,CAAC;AAG7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,GAAG,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAYnF,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAmB,EAAE,MAA+B,EAAE,IAAY;IACpG,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAClJ,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QAAC,QAAQ,GAAG,cAAc,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,aAAa,EAAE,CAAC;IAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3C,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC;QAAE,eAAe,EAAE,CAAC;IACvE,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClF,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;QAChG,SAAS,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACpH,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC5F,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;QAAE,eAAe,EAAE,CAAC;IAC/H,MAAM,OAAO,GAAG;QACd,6BAA6B,EAAE,6BAA6B,EAAE,kDAAkD;QAChH,gBAAgB,OAAO,CAAC,KAAK,EAAE,EAAE,gBAAgB,OAAO,CAAC,WAAW,EAAE,EAAE,YAAY,OAAO,CAAC,KAAK,EAAE;QACnG,eAAe,SAAS,EAAE,EAAE,YAAY,OAAO,EAAE,EAAE,UAAU,SAAS,CAAC,EAAE,EAAE,EAAE,YAAY,SAAS,CAAC,SAAS,EAAE;QAC9G,2EAA2E;KAC5E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,IAAI,SAAS,CAAC,OAAO,KAAK,OAAO;QAAE,eAAe,EAAE,CAAC;IACrD,IAAI,SAAS,CAAC;IACd,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACnB,IAAI,CAAC,MAAM,qBAAqB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO;YAAE,MAAM,aAAa,EAAE,CAAC;IAC7G,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,aAAa,EAAE,CAAC;IAAC,CAAC;IAClC,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5F,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,IAAI,YAAY,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;QACzG,YAAY,CAAC,SAAS,KAAK,SAAS,IAAI,YAAY,CAAC,OAAO,KAAK,OAAO,IAAI,YAAY,CAAC,WAAW,KAAK,SAAS;QAClH,CAAC,CAAC,qBAAqB,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,oBAAoB,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC;QACnJ,CAAC,YAAY,CAAC,SAAS,KAAK,QAAQ,IAAI,YAAY,CAAC,YAAY,KAAK,IAAI,CAAC;QAC3E,CAAC,YAAY,CAAC,SAAS,KAAK,qBAAqB,IAAI,YAAY,CAAC,YAAY,KAAK,IAAI,CAAC;QAAE,eAAe,EAAE,CAAC;IAChH,IAAI,YAAY,CAAC,YAAY,KAAK,IAAI;QAAE,UAAU,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;IAC9E,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC;IAC3F,KAAK,CAAC,IAAI,GAAG,cAAc,CAAC;IAC5B,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/runtime.d.ts

@@ -0,0 +1,203 @@
+import { type ExactAgentAction, type AgentActionBinding, type AgentSwapBinding, type PreparedAgentAction } from './exact-action.js';
+import { type Hex } from 'viem';
+import { type PairingCode } from './pairing-code.js';
+import { type AgentTransport } from './transport.js';
+import type { AgentIdentity, AgentSigner } from './signer.js';
+import type { AgentSelf, AgentRequestView, UnsignedCallView, UserOpBuildResult, UnsignedUserOp } from './views.js';
+/**
+ * Poll `get` until the op reports a terminal status or `budgetMs` is spent, then return whatever the
+ * backend last said - VERBATIM. A budget lapse returns the real `pending` answer; this helper never
+ * invents a status, and never blocks forever.
+ *
+ * Pure and injectable (clock + sleep) so its behaviour is testable without timers or a network.
+ */
+export declare function awaitTerminalWith(get: (opId: string) => Promise<Record<string, unknown>>, opId: string, budgetMs: number, now: () => number, sleep: (ms: number) => Promise<void>): Promise<Record<string, unknown>>;
+/** Default API origin. The shared runtime reads no environment variables; its host supplies overrides. */
+export declare const DEFAULT_API_BASE_URL = "https://api.app.botanary.xyz";
+/** Per-instance agent identity and sessions. The signer owns all private-key storage. */
+export declare class AgentRuntime {
+    #private;
+    constructor(signer: AgentSigner, options?: {
+        baseUrl?: string;
+        fetch?: typeof fetch;
+        transport?: AgentTransport;
+        provenance?: {
+            client?: string;
+            profile?: string;
+        };
+    });
+    get apiBaseUrl(): string;
+    protected get identityMaterialized(): boolean;
+    protected setProvenance(value: {
+        client?: string;
+        profile?: string;
+    }): void;
+    protected replaceSigner(signer: AgentSigner): void;
+    /** The agent's public identity, creating it on first call if none exists yet. Cached for the life of
+     *  this runtime (the address/fingerprint cannot change without a forget(), which calls reset()). */
+    identity(): Promise<AgentIdentity>;
+    pairingCode(): Promise<PairingCode>;
+    regeneratePairingCode(): Promise<PairingCode>;
+    pair(): Promise<PairingCode>;
+    /** Mint a FRESH session unconditionally (bypasses the cache - this is what re-minting after expiry or
+     *  a 401 calls). Also (re)populates the cache, so an ordinary tool call right after this one reuses it
+     *  via `ensureSession()` instead of minting again. */
+    mintSession(): Promise<string>;
+    /** The token every read/build/spend call below actually uses: the cached session if it is still safe
+     *  to reuse, otherwise a freshly minted one. This is what makes "every tool call does not re-mint" true
+     *  without any caller having to think about session lifetime. */
+    ensureSession(): Promise<string>;
+    /** `GET /agents/me` - this agent's own identity, its bound account, and its live grant if any (or an
+     *  honest `grant: null`). Re-mints the session once and retries on a 401 (a token that expired between
+     *  `ensureSession()`'s check and the request landing, or one the backend otherwise no longer honors). */
+    me(): Promise<AgentSelf>;
+    /** `GET /balance` - the account address and its token/holdings breakdown, exactly as the backend
+     *  reports it. */
+    getBalance(): Promise<Record<string, unknown>>;
+    /** `GET /agents/requests` - every approval request this agent has filed, with the owner's verdict
+     *  (`status`, `declineReason`) and deadline. The read half of `request_approval`: without it an agent
+     *  files a request it can never learn the outcome of. */
+    listRequests(): Promise<unknown>;
+    /** `GET /chains` - every chain this build serves, each with the `chainTier` that decides what it can
+     *  do (`watch` read-only, `basic` no AgentGuard, `botanary` full authority). */
+    listChains(): Promise<unknown>;
+    /** `GET /gas/methods` - only the gas methods actually AVAILABLE on the given chain (the backend
+     *  filters unavailable/sponsored ones out itself). Every parameter is optional and passed through
+     *  untouched; `key` is the Stellar/Solana key-keyed lane, `chainId` the EVM numeric one. */
+    getGasMethods(params: {
+        chainId?: number;
+        accountId?: string;
+        key?: string;
+    }): Promise<unknown>;
+    /** `GET /account` - SINGULAR: the one account this agent's session resolves to, optionally for a
+     *  specific chain. Carries `address` and `deploymentStatus`. */
+    getAccount(params: {
+        chainId?: number;
+    }): Promise<unknown>;
+    /** Build and verify a bound action. Submission is explicit and attempted at most once per handle. */
+    prepareExactAction(input: ExactAgentAction, binding: AgentActionBinding | AgentSwapBinding): Promise<PreparedAgentAction>;
+    /**
+     * `POST /delegations/{delegationId}/actions` - an UNSIGNED delegated-action op, built in the
+     * delegation's OWN Smart Sessions nonce lane with fixed native gas (the session validator cannot
+     * gas-estimate a stub signature). This is the ONLY build lane a session-key signature can validate:
+     * `POST /money/send/build` (this package's earlier, WRONG choice) builds in the Kernel account's ROOT
+     * nonce lane for the OWNER's key - an op built there, then signed with this agent's session key and
+     * wrapped in `spendUnderGrant`'s USE envelope, would route validation to the root ECDSA validator,
+     * which cannot parse a `(bytes1, bytes32, bytes)` envelope as a 65-byte ECDSA signature. `delegationId`
+     * is this agent's OWN grant id (`GET /agents/me`'s `grant.id` - never invented, never another agent's:
+     * the backend refuses that with a named 403, see the workspace's delegation.controller.ts). `amount` is
+     * DISPLAY units (e.g. `12.5` for 12.5 USDC), matching `DelegatedActionInput.amount` - never wei.
+     * `token`, when given, disambiguates which of the delegation's budgeted tokens to move - a contract
+     * address or CAIP-19 asset ref (Task A11), required whenever the grant budgets more than one
+     * stablecoin. Omitted, the backend defaults to it ONLY when exactly one token is budgeted; a
+     * multi-budget grant given neither refuses rather than silently picking the first (`propose_payment`
+     * always resolves and passes one - see `agent-actions.ts`).
+     */
+    buildDelegatedAction(params: {
+        delegationId: string;
+        recipient: string;
+        amount: number;
+        token?: string;
+    }): Promise<UserOpBuildResult>;
+    /**
+     * `POST /delegations/{delegationId}/actions` with `action: 'swap'` - the SAME endpoint, the same session
+     * nonce lane and the same fixed gas as `buildDelegatedAction` above; only the body's shape differs. The
+     * backend discriminates on `action` explicitly and NEVER infers it from the presence of `tokenIn`, so a
+     * transfer body with a typo stays a 422 on the wrong field rather than silently becoming a swap.
+     *
+     * Symbols, not addresses: unlike `buildDelegatedAction`'s `token` (Task A11), this shape was NOT widened
+     * to accept an address or asset ref - the backend re-resolves both legs from ITS OWN per-chain manifest,
+     * which is the same resolution `buildGrant` used when it compiled the venue's `EQ` rule, so the two
+     * cannot disagree. `propose_swap` (`agent-actions.ts`) still takes an address/asset ref from ITS OWN
+     * caller (`assetIn`/`assetOut`) and resolves each to a verified symbol before calling this - so the
+     * package-external argument names moved even though this wire shape did not. `amountIn` is DISPLAY
+     * units (e.g. `25` for 25 USDC), matching `amount` on the transfer shape.
+     *
+     * The op this produces is ONE call into `GrantExecutor.executeUnderGrantWithAllowance` - approve, route,
+     * zero, assert no residual - which the grant's session authorises only when the grant named a
+     * `swapVenue`. A grant without one has no such action at all and the backend declines
+     * `grant_swap_not_authorised` rather than handing back an op Smart Sessions would refuse in validation.
+     */
+    buildDelegatedSwap(params: {
+        delegationId: string;
+        tokenIn: string;
+        tokenOut: string;
+        amountIn: number;
+        maxSlippageBps?: number;
+    }): Promise<UserOpBuildResult>;
+    /** `POST /agents/requests` - the "ask" half of the design (Flow 7d step 5): raise a request naming the
+     *  calls that were declined and why, returning which bound was crossed and the deadline exactly as the
+     *  backend computed them. */
+    raiseRequest(calls: UnsignedCallView[], reason: string): Promise<AgentRequestView>;
+    /**
+     * Sign a built op as the grant's session key and relay it. The USE envelope is EXACTLY the three lines
+     * `botanary-fe/src/lib/wallet/signing.ts:49` already uses - `SmartSessionMode.USE` is `0x00`, and the
+     * packing is `(bytes1, bytes32, bytes)`. Reproduced rather than re-derived: a second encoding of the same
+     * envelope is a second thing to get byte-exact, and only one of them would be tested.
+     *
+     * `intentType` is the SAME value the build response itself reported (`UserOpBuildResult.intentType`,
+     * `'delegated_action'` for `buildDelegatedAction`'s builds) - never assumed or hardcoded here, so the
+     * relay always describes what was actually built, which is what `OrchestratorService.submit` uses to
+     * label the audit trail entry.
+     *
+     * Returns the backend's OWN relay response (status/txHash/error, whatever `POST /userops` actually
+     * said) rather than nothing - a caller (`propose_payment`) reporting success has to report what the
+     * backend reported, never a string this package made up.
+     */
+    spendUnderGrant(userOp: UnsignedUserOp, userOpHash: Hex, permissionId: Hex, token: string, intentType: string): Promise<Record<string, unknown>>;
+    /** `GET /userops/{opId}` - the receipt for an op THIS agent relayed. Reachable only because that route
+     *  now carries `@AgentAllowed()`; before that it 403'd an `ags_` token before the handler ran. */
+    getUserOp(opId: string): Promise<Record<string, unknown>>;
+    /** Read the original agent submission without building or signing another operation. */
+    getUserOpByHash(chainId: number, hash: Hex): Promise<Record<string, unknown>>;
+    /** Follow an op to a terminal status, bounded. See `awaitTerminalWith`. */
+    awaitTerminal(opId: string, budgetMs: number): Promise<Record<string, unknown>>;
+    /** `GET /apis/providers` - the ranked, searchable catalog of API providers on a chain, with each
+     *  provider's endpoint count, verified count, minimum and maximum price in atomic units (nullable).
+     *  Does NOT call an endpoint or spend anything. Returns
+     *  `{ providers, total, hidden, reasons, reasonsTruncated }`.
+     *
+     *  The route is `/apis/providers`, not the `/apis/list` this file used to call: the backend's
+     *  api-catalog controller serves `providers` and `providers/:providerId` and has no `list` route at
+     *  all, so the old path 404s. botanary-mcp@0.6.1 was published with this corrected route but the
+     *  change was never committed, which is how the repository came to describe a dead endpoint while
+     *  the published package worked. */
+    listApis(chainId: number): Promise<unknown>;
+    /** `GET /apis/providers/{providerId}` - one provider with a page of its endpoints, each with its
+     *  live price as measured or declared (nullable), and whether it is payable on this chain. Returns
+     *  the `ApiProviderDetail` shape, with an `endpoints` array. */
+    getApiProvider(providerId: string, chainId?: number): Promise<unknown>;
+    /**
+     * Call a paid third-party API endpoint and pay for it from the owner's wallet, within the budget the
+     * owner committed on chain. Build -> sign -> relay, exactly like every other spending lane here.
+     *
+     * This used to `POST /v1/apis/calls`, a route that has never existed - the contract has
+     * `/apis/calls/requirements` and `/apis/calls/relay`, and there is no composite. There could not be
+     * one: a single endpoint would have to sign, and the backend holds no key. So the two halves are both
+     * real calls, with the signature produced HERE, from this agent's own key.
+     *
+     * `payload` is a 32-byte EIP-712 digest over an EIP-3009 `TransferWithAuthorization`. Signing it
+     * authorises exactly one transfer, of a value and to a recipient the digest already fixes; USDC
+     * verifies the result via ERC-1271 against the owner's account, which routes to
+     * `X402PaymentValidator` and is refused unless this agent key is inside a live budget.
+     */
+    callApi(params: {
+        chainId: number;
+        providerId: string;
+        endpointId: string;
+        url: string;
+        /** Raw POST body, forwarded byte for byte. The price is quoted for THIS body and the paid request
+         *  replays exactly it, so a caller cannot get a cheap quote and then send something expensive. */
+        body?: string;
+    }): Promise<Record<string, unknown>>;
+    /** Read durable submission status first. A submitted payment is never signed or forwarded again. */
+    resumeApi(requirementId: string, budgetMs?: number): Promise<Record<string, unknown>>;
+    /** `GET /apis/budget` - remaining authorizations, per-call maximum, expiry and epoch for this agent
+     *  on a chain. Does NOT tell you which endpoints this agent may reach. */
+    getApiBudget(chainId: number): Promise<unknown>;
+    /** Drops cached identity/pairing/session state. Call after `store.forget()` so the next call re-derives
+     *  from storage (and, in the ordinary case, creates a brand new identity) instead of continuing to serve
+     *  an in-memory identity - or a session minted for it - whose key is now gone. */
+    reset(): void;
+}
+//# sourceMappingURL=runtime.d.ts.map

package/dist/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4E,KAAK,gBAAgB,EAAE,KAAK,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC9M,OAAO,EAAuD,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AACrF,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAIrE,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,cAAc,EAAgF,MAAM,YAAY,CAAC;AAEjM;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACvD,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,MAAM,EACjB,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GACnC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CASlC;AAsBD,0GAA0G;AAC1G,eAAO,MAAM,oBAAoB,iCAAiC,CAAC;AAEnE,yFAAyF;AACzF,qBAAa,YAAY;;gBAYX,MAAM,EAAE,WAAW,EAAE,OAAO,GAAE;QACxC,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;QACrB,SAAS,CAAC,EAAE,cAAc,CAAC;QAC3B,UAAU,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC/C;IAON,IAAI,UAAU,IAAI,MAAM,CAA6B;IACrD,SAAS,KAAK,oBAAoB,IAAI,OAAO,CAAsE;IACnH,SAAS,CAAC,aAAa,CAAC,KAAK,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAC3E,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAMlD;wGACoG;IAC9F,QAAQ,IAAI,OAAO,CAAC,aAAa,CAAC;IAoClC,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAKnC,qBAAqB,IAAI,OAAO,CAAC,WAAW,CAAC;IAK7C,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC;IAqBlC;;0DAEsD;IAChD,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;IAuBpC;;qEAEiE;IAC3D,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IAKtC;;6GAEyG;IACnG,EAAE,IAAI,OAAO,CAAC,SAAS,CAAC;IAI9B;sBACkB;IACZ,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAIpD;;6DAEyD;IACnD,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC;IAItC;oFACgF;IAC1E,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAIpC;;gGAE4F;IACtF,aAAa,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAWrG;oEACgE;IAC1D,UAAU,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAShE,qGAAqG;IAC/F,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,GAAG,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAoB/H;;;;;;;;;;;;;;;;OAgBG;IACG,oBAAoB,CAAC,MAAM,EAAE;QACjC,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAY9B;;;;;;;;;;;;;;;;;;OAkBG;IACG,kBAAkB,CAAC,MAAM,EAAE;QAC/B,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAc9B;;iCAE6B;IACvB,YAAY,CAAC,KAAK,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAOxF;;;;;;;;;;;;;;OAcG;IACG,eAAe,CACnB,MAAM,EAAE,cAAc,EACtB,UAAU,EAAE,GAAG,EACf,YAAY,EAAE,GAAG,EACjB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAenC;sGACkG;IAC5F,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAK/D,wFAAwF;IAClF,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAMnF,2EAA2E;IACrE,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAUrF;;;;;;;;;wCASoC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAMjD;;oEAEgE;IAC1D,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAO5E;;;;;;;;;;;;;OAaG;IACG,OAAO,CAAC,MAAM,EAAE;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ;0GACkG;QAClG,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IASpC,oGAAoG;IAC9F,SAAS,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,SAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAuI5G;8EAC0E;IACpE,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAMrD;;sFAEkF;IAClF,KAAK,IAAI,IAAI;CAiCd"}