@cello-protocol/daemon 0.0.227 → 0.0.228

package/dist/agent-admin-handlers.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Two verbs an operator runs ON an agent rather than through it: rotate its signing shares, and read
+ * the relay's ordering receipts for it. Both resolve an agent by name and then reach the consortium
+ * on that agent's own signaling connection, which is why they share a module.
+ *
+ * ⚠️ THE WORK ORDER PUT FOUR VERBS AND `cello_status` IN THIS UNIT. They are three modules, and the
+ * split is a measurement rather than taste. Counting every member of each shipped interface,
+ * `handlers` and `logger` included: one module for all of it needs **22**. Split by what each
+ * surface touches — **12** here, **10** for `cello_status`, **3** for backup/restore, overlapping on
+ * `handlers` and `logger` alone. 22 is the shape the order calls "the root with an extra hop".
+ *
+ * ⚠️ AND THIS MODULE IS AT THE BOUND, NOT UNDER IT. Twelve is exactly the order's ~12 ceiling. A
+ * first draft of this note said eleven, which reads like room to spare; unit 7 calibrates against
+ * these numbers, so the real one is written here. Anything else that wants to live in this file
+ * needs a member it does not already have — which means it does not live in this file.
+ */
+import type { IpcHandler } from "./ipc-server.js";
+import type { SessionNodeManager } from "./session-node-manager.js";
+import type { Logger } from "./types.js";
+import type { KeyProvider } from "@cello-protocol/crypto";
+import type { SignalingManager } from "@cello-protocol/transport";
+import type { LoadedAgent } from "./agent-loader.js";
+import type { SealFailureStore } from "./seal-failure-store.js";
+import { runAgentRefresh } from "./session-ceremony.js";
+/** `runAgentRefresh`'s own parameter object — the source of truth for the types below, never a copy. */
+type RefreshArgs = Parameters<typeof runAgentRefresh>[0];
+/** The per-connection agent selection, as these verbs need to read it. */
+export interface AdminConnState {
+    currentAgent: string | null;
+    clearedAgent?: string;
+}
+export interface AgentAdminDeps {
+    handlers: Map<string, IpcHandler>;
+    logger: Logger;
+    sessionNodeManager: SessionNodeManager;
+    /** Every agent this daemon has loaded — both verbs resolve a name through it. */
+    loadedAgents: ReadonlyArray<LoadedAgent>;
+    /** Read this connection's agent selection. The READ, not the container. */
+    getConnState: (connectionId: string) => AdminConnState | undefined;
+    /** The daemon's single agent-selection rule. Injected, never re-implemented here. */
+    resolveCurrentAgent: (connState: AdminConnState | undefined, explicitAgent?: string) => string | null;
+    getPersistence: (agentName: string) => RefreshArgs["persistence"];
+    /** ⚠️ NOT a getter — for an agent with no manager this CONSTRUCTS one and dials. */
+    getAgentSignaling: (agentName: string, agentKeyProvider: KeyProvider, agentPubkeyHex: string) => {
+        signaling: SignalingManager;
+        getNode: RefreshArgs["getNode"];
+    };
+    waitForSignalingConnected: (mgr: SignalingManager, timeoutMs: number) => Promise<boolean>;
+    resolveConsortiumRoster: RefreshArgs["getConsortiumEndpoints"];
+    getFailoverEndpoint: RefreshArgs["getDirectoryEndpoint"];
+    /** Where a dead seal ceremony leaves its mark, so a receipt can say it FAILED and why. */
+    sealFailures: SealFailureStore;
+}
+export declare function registerAgentAdminHandlers(deps: AgentAdminDeps): void;
+export {};
+//# sourceMappingURL=agent-admin-handlers.d.ts.map

package/dist/agent-admin-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-admin-handlers.d.ts","sourceRoot":"","sources":["../src/agent-admin-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,wGAAwG;AACxG,KAAK,WAAW,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;AAEzD,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAAG,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAAE;AAEvF,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,iFAAiF;IACjF,YAAY,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;IACzC,2EAA2E;IAC3E,YAAY,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,cAAc,GAAG,SAAS,CAAC;IACnE,qFAAqF;IACrF,mBAAmB,EAAE,CAAC,SAAS,EAAE,cAAc,GAAG,SAAS,EAAE,aAAa,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACtG,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,WAAW,CAAC,aAAa,CAAC,CAAC;IAClE,oFAAoF;IACpF,iBAAiB,EAAE,CACjB,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,WAAW,EAC7B,cAAc,EAAE,MAAM,KACnB;QAAE,SAAS,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,CAAA;KAAE,CAAC;IACtE,yBAAyB,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1F,uBAAuB,EAAE,WAAW,CAAC,wBAAwB,CAAC,CAAC;IAC/D,mBAAmB,EAAE,WAAW,CAAC,sBAAsB,CAAC,CAAC;IACzD,0FAA0F;IAC1F,YAAY,EAAE,gBAAgB,CAAC;CAChC;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CA6ErE"}

package/dist/agent-admin-handlers.js

@@ -0,0 +1,73 @@
+import { runAgentRefresh } from "./session-ceremony.js";
+export function registerAgentAdminHandlers(deps) {
+    const { handlers, logger, sessionNodeManager, loadedAgents, getConnState, resolveCurrentAgent, getPersistence, getAgentSignaling, waitForSignalingConnected, resolveConsortiumRoster, getFailoverEndpoint, sealFailures, } = deps;
+    // ─── M8B DOD-REFRESH-1: cello_refresh_shares — proactive share refresh / epoch rollover ───
+    handlers.set("cello_refresh_shares", async (params, connectionId) => {
+        const connState = getConnState(connectionId);
+        const agentName = resolveCurrentAgent(connState, params?.agent); // M8C-AUTOSTART-1 F18: sole-online fallback
+        if (!agentName) {
+            // Not an MCP tool — the CLI is the only real caller, and its gesture is the POSITIONAL
+            // `cello refresh <name>`, not a JSON param. The old text said "pass { name }", which stopped
+            // working at the rename and never worked on this surface anyway. cello_use_agent stays: it is
+            // the other real remedy, and renderForSurface rewrites it to `cello use-agent` for a CLI caller.
+            return { ok: false, reason: "no_current_agent", guidance: "Name the agent: cello refresh <name>. Or select one for this connection with cello_use_agent." };
+        }
+        const loaded = loadedAgents.find((a) => a.name === agentName);
+        if (!loaded) {
+            return { ok: false, reason: "agent_not_found", guidance: `No agent named '${agentName}'. Create + register it first.` };
+        }
+        // The refresh ceremony reaches the consortium over the agent's signaling node — ensure it is up.
+        const entry = getAgentSignaling(agentName, loaded.keyProvider, loaded.pubkey);
+        const connected = await waitForSignalingConnected(entry.signaling, 15_000);
+        if (!connected) {
+            return { ok: false, reason: "directory_unreachable", guidance: "The agent's directory signaling is not connected; start the agent and retry." };
+        }
+        const result = await runAgentRefresh({
+            agentName,
+            persistence: getPersistence(agentName),
+            agentPubkeyHex: loaded.pubkey,
+            // DOD-M15-SEALWIRE-1 bullet 2 (review F1): gate the co-signature on the root check.
+            verifyCertifiedRoot: (pub, sid, root, leaves, evidence) => sessionNodeManager.verifyCertifiedRoot(pub, sid, root, leaves, evidence),
+            keyProvider: loaded.keyProvider,
+            getNode: entry.getNode,
+            getDirectoryEndpoint: getFailoverEndpoint,
+            getConsortiumEndpoints: resolveConsortiumRoster,
+            signaling: entry.signaling,
+            logger,
+            // DOD-M15-SEALPARTIES-1: where a dead seal ceremony leaves its mark, so `cello_sealed_receipt`
+            // can say it FAILED and why instead of falling through to "no receipt yet".
+            recordSealFailure: (name, sid, reason, kind) => sealFailures.record(name, sid, reason, new Date().toISOString(), kind),
+        });
+        if (!result.ok) {
+            return { ok: false, reason: result.reason, guidance: "Share refresh did not complete — see the daemon log (refresh.ceremony.*) for the cause." };
+        }
+        return { ok: true, epoch: result.toEpochN, primary_pubkey: result.primaryPubkey, verifying_shares_digest: result.verifyingSharesDigest };
+    });
+    // ─── M8B DOD-RELAYSIG-1: cello_get_relay_receipts — the agent's stored relay ordering receipts ───
+    handlers.set("cello_get_relay_receipts", async (params, connectionId) => {
+        const connState = getConnState(connectionId);
+        const agentName = resolveCurrentAgent(connState, params?.agent); // M8C-AUTOSTART-1 F18: sole-online fallback
+        if (!agentName) {
+            // Not an MCP tool either — same reasoning as cello_refresh_shares above.
+            return { ok: false, reason: "no_current_agent", guidance: "Name the agent: cello relay-receipts <name>. Or select one for this connection with cello_use_agent." };
+        }
+        const loaded = loadedAgents.find((a) => a.name === agentName);
+        if (!loaded) {
+            return { ok: false, reason: "agent_not_found", guidance: `No agent named '${agentName}'.` };
+        }
+        const sessionIdHex = typeof params?.session_id === "string" ? params.session_id : undefined;
+        const receipts = sessionNodeManager.getRelayReceipts(loaded.pubkey, sessionIdHex).map((r) => ({
+            hash_hex: r.hashHex,
+            session_id: r.sessionIdHex,
+            relay_id: r.relayId,
+            sequence_number: r.sequenceNumber,
+            timestamp: r.timestamp,
+            signature_hex: r.signatureHex,
+            // 069-ORDERPROOF: part of the signed statement, so a caller re-verifying the attestation from
+            // the outside cannot rebuild the bytes without it. Absent on rows written before this order.
+            running_root_hex: r.runningRootHex,
+        }));
+        return { ok: true, receipts };
+    });
+}
+//# sourceMappingURL=agent-admin-handlers.js.map

package/dist/agent-admin-handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-admin-handlers.js","sourceRoot":"","sources":["../src/agent-admin-handlers.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAgCxD,MAAM,UAAU,0BAA0B,CAAC,IAAoB;IAC7D,MAAM,EACJ,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,YAAY,EAAE,mBAAmB,EACrF,cAAc,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,uBAAuB,EACrF,mBAAmB,EAAE,YAAY,GAClC,GAAG,IAAI,CAAC;IAET,6FAA6F;IAC7F,QAAQ,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;QAClE,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,KAA2B,CAAC,CAAC,CAAC,4CAA4C;QACnI,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,uFAAuF;YACvF,6FAA6F;YAC7F,8FAA8F;YAC9F,iGAAiG;YACjG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,+FAA+F,EAAE,CAAC;QAC9J,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,mBAAmB,SAAS,gCAAgC,EAAE,CAAC;QAC1H,CAAC;QACD,iGAAiG;QACjG,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9E,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,QAAQ,EAAE,8EAA8E,EAAE,CAAC;QAClJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,SAAS;YACT,WAAW,EAAE,cAAc,CAAC,SAAS,CAAC;YACtC,cAAc,EAAE,MAAM,CAAC,MAAM;YAC7B,oFAAoF;YACpF,mBAAmB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnI,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,oBAAoB,EAAE,mBAAmB;YACzC,sBAAsB,EAAE,uBAAuB;YAC/C,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM;YACN,+FAA+F;YAC/F,4EAA4E;YAC5E,iBAAiB,EAAE,CAAC,IAAY,EAAE,GAAW,EAAE,MAAc,EAAE,IAA8B,EAAE,EAAE,CAC/F,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC;SACzE,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,yFAAyF,EAAE,CAAC;QACnJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,aAAa,EAAE,uBAAuB,EAAE,MAAM,CAAC,qBAAqB,EAAE,CAAC;IAC3I,CAAC,CAAC,CAAC;IAEH,oGAAoG;IACpG,QAAQ,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;QACtE,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,KAA2B,CAAC,CAAC,CAAC,4CAA4C;QACnI,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,yEAAyE;YACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,sGAAsG,EAAE,CAAC;QACrK,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,mBAAmB,SAAS,IAAI,EAAE,CAAC;QAC9F,CAAC;QACD,MAAM,YAAY,GAAG,OAAO,MAAM,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAM,CAAC,UAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;QACxG,MAAM,QAAQ,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5F,QAAQ,EAAE,CAAC,CAAC,OAAO;YACnB,UAAU,EAAE,CAAC,CAAC,YAAY;YAC1B,QAAQ,EAAE,CAAC,CAAC,OAAO;YACnB,eAAe,EAAE,CAAC,CAAC,cAAc;YACjC,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,aAAa,EAAE,CAAC,CAAC,YAAY;YAC7B,8FAA8F;YAC9F,6FAA6F;YAC7F,gBAAgB,EAAE,CAAC,CAAC,cAAc;SACnC,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/agent-handlers.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Agent lifecycle: create, remove, start, stop, select, list.
+ *
+ * The one rule that governs all of them: an agent's identity is its KEY, not its name. A name is a
+ * mutable display label that can be reused after retirement, so nothing here may treat a name as
+ * proof of who someone is — cello_remove_agent submits a signed revocation precisely because
+ * deleting a row locally would leave the directory believing the key is still live.
+ *
+ * cello_use_agent is the selector, and its failure mode is the interesting one: after a stop, the
+ * connection's selection is CLEARED, and a cleared selection must NEVER silently fall back to
+ * "the only agent online" — that is how a write lands on the wrong agent (fixed in f00b534, and
+ * the reason resolveCurrentAgent distinguishes "never chose" from "choice taken away").
+ */
+import type { StartAgentResult } from "./start-agent.js";
+import type { IpcHandler } from "./ipc-server.js";
+import type { SessionNodeManager } from "./session-node-manager.js";
+import type { AgentInfo, Logger } from "./types.js";
+import type { ConnState } from "./contact-handlers.js";
+import type { NotificationDispatcher } from "./notification-dispatcher.js";
+import type { LoadedAgent } from "./agent-loader.js";
+import type { KeyProvider } from "@cello-protocol/crypto";
+import type { SignalingManager, CelloNode } from "@cello-protocol/transport";
+export interface AgentHandlerDeps {
+    handlers: Map<string, IpcHandler>;
+    logger: Logger;
+    sessionNodeManager: SessionNodeManager;
+    agents: AgentInfo[];
+    onlineAgents: Set<string>;
+    /** M12-P16: agents an operator deliberately took offline — the inbound refusal keys on THIS. */
+    explicitlyOfflineAgents: Set<string>;
+    /** LAZY: the dispatcher is constructed late in startDaemon. These handlers only touch it at
+     *  request time, so a getter avoids a temporal-dead-zone crash at registration. */
+    getNotificationDispatcher: () => NotificationDispatcher;
+    getConnState: (connectionId: string) => ConnState | undefined;
+    perConnectionState: Map<string, {
+        currentAgent: string | null;
+        clearedAgent?: string;
+        clientType: string;
+    }>;
+    getAgentsForConnection: (connectionId: string) => AgentInfo[];
+    /**
+     * ⚠️ THE THREE-WAY UNION, NOT `{ ok: true }`. The readiness half is the point: an agent can be
+     * online and DEAF — marked started while its standing receiver never came up — and the two states
+     * render identically at every surface without it. Declared narrow, dropping it is invisible to the
+     * type checker.
+     */
+    startAgentInternal: (name: string) => StartAgentResult;
+    dropAgentSignaling: (agentName: string) => Promise<void>;
+    /**
+     * 048-SWEEPTICK: end this agent's collection tick. Wired to REMOVAL, deliberately not to offline.
+     *
+     * An offline agent's tick is already inert — it checks `isAgentOnline` before every sweep and does
+     * no round trips — and cancelling it there would be wrong rather than tidy: `cello_set_agent_offline`
+     * leaves the signaling manager connected, so a later `cello_start_agent` finds the cached manager
+     * and fires no `onConnected` (start-agent.ts:92 → getAgentSignaling's early return). Nothing would
+     * ever re-arm it, and the agent would silently drop back to collect-on-reconnect.
+     *
+     * A REMOVED agent is never coming back, so its timer is the one that should genuinely stop.
+     */
+    stopSweepTick: (agentName: string) => void;
+    awayAckSent: Set<string>;
+    keyProviders: Map<string, KeyProvider>;
+    loadedAgents: LoadedAgent[];
+    getAgentSignaling: (agentName: string, keyProvider: KeyProvider, pubkeyHex: string) => {
+        signaling: SignalingManager;
+        getNode: () => CelloNode | null;
+    };
+    waitForSignalingConnected: (mgr: SignalingManager, timeoutMs: number) => Promise<boolean>;
+    perAgentSignaling: Map<string, unknown>;
+}
+export declare function registerAgentHandlers(deps: AgentHandlerDeps): void;
+//# sourceMappingURL=agent-handlers.d.ts.map

package/dist/agent-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-handlers.d.ts","sourceRoot":"","sources":["../src/agent-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAG3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAQ7E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,gGAAgG;IAChG,uBAAuB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC;uFACmF;IACnF,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;IACxD,YAAY,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,SAAS,GAAG,SAAS,CAAC;IAC9D,kBAAkB,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5G,sBAAsB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;IAC9D;;;;;OAKG;IACH,kBAAkB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,gBAAgB,CAAC;IACvD,kBAAkB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD;;;;;;;;;;OAUG;IACH,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACvC,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,iBAAiB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,KAAK;QAAE,SAAS,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,MAAM,SAAS,GAAG,IAAI,CAAA;KAAE,CAAC;IACxJ,yBAAyB,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1F,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAgmBlE"}