@cello-protocol/daemon 0.0.52 → 0.0.54

package/dist/inbound-seal-request.d.ts

@@ -0,0 +1,17 @@
+import type { KeyProvider } from "@cello-protocol/crypto";
+import type { SessionNodeManager } from "./session-node-manager.js";
+import type { AgentInfo, Logger } from "./types.js";
+export interface InboundSealRequestDeps {
+    logger: Logger;
+    sessionNodeManager: SessionNodeManager;
+    agents: AgentInfo[];
+    getKeyProvider: (agentName: string) => KeyProvider | undefined;
+    sendOver: (agentName: string, frame: Record<string, unknown>) => Promise<{
+        ok: boolean;
+        reason?: string;
+    }>;
+}
+export declare function createInboundSealRequestHandler(deps: InboundSealRequestDeps): {
+    handleInboundSealInterruptedRequest: (frame: Record<string, unknown>) => Promise<void>;
+};
+//# sourceMappingURL=inbound-seal-request.d.ts.map

package/dist/inbound-seal-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-seal-request.d.ts","sourceRoot":"","sources":["../src/inbound-seal-request.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAGpD,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,WAAW,GAAG,SAAS,CAAC;IAC/D,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5G;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,sBAAsB;iDAYhB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,OAAO,CAAC,IAAI,CAAC;EA+HlG"}

package/dist/inbound-seal-request.js

@@ -0,0 +1,155 @@
+/**
+ * The inbound seal-interrupted REQUEST: the counterparty went away, and the other side is asking us
+ * to co-sign the seal of a session neither of us can finish normally.
+ *
+ * We answer with our OWN signed leaf, or with a rejection naming the exact mismatch (nonce,
+ * leaf count, signature). We never sign a leaf whose content we cannot corroborate — a
+ * seal-interrupted ack is a cryptographic statement about what was said, not a courtesy.
+ */
+import { randomUUID } from "node:crypto";
+import { buildSignedSealInterruptedLeaf } from "./seal-leaf.js";
+export function createInboundSealRequestHandler(deps) {
+    const { logger, sessionNodeManager, agents, getKeyProvider, sendOver } = deps;
+    // ─── M7-SESSION-001 (H-1): seal-interrupted bilateral RESPONDER ────────────
+    //
+    // A PERSISTENT inbound handler (registered once, below) that reacts to inbound
+    // `seal_interrupted_request` frames from a counterparty. It validates local
+    // state, K_local-signs this node's SEAL-INTERRUPTED leaf (co-signing the same
+    // Merkle root the initiator sent), echoes the nonce, includes initiatorPubkey
+    // for directory routing, persists the responder side of the commitment, moves
+    // the session to 'seal_interrupted_pending', and returns a seal_interrupted_ack.
+    // On any inconsistent local state it returns a seal_interrupted_rejection.
+    async function handleInboundSealInterruptedRequest(frame) {
+        const correlationId = randomUUID();
+        const sessionId = typeof frame["sessionId"] === "string" ? frame["sessionId"] : null;
+        const initiatorPubkey = typeof frame["initiatorPubkey"] === "string" ? frame["initiatorPubkey"] : null;
+        const counterpartyPubkey = typeof frame["counterpartyPubkey"] === "string" ? frame["counterpartyPubkey"] : null;
+        const leafCountReq = typeof frame["leafCountAtInterruption"] === "number" ? frame["leafCountAtInterruption"] : null;
+        const merkleRootReq = typeof frame["merkleRootAtInterruption"] === "string" ? frame["merkleRootAtInterruption"] : "";
+        const nonce = typeof frame["nonce"] === "string" ? frame["nonce"] : null;
+        // Cannot even route a rejection without sessionId + initiatorPubkey.
+        if (!sessionId || !initiatorPubkey || !counterpartyPubkey || nonce === null || leafCountReq === null) {
+            logger.warn("session.interrupted.request.malformed", {
+                correlationId,
+                hasSessionId: sessionId !== null,
+                hasInitiatorPubkey: initiatorPubkey !== null,
+            });
+            return;
+        }
+        const reject = async (reason) => {
+            // CONN-001: send the rejection over the LOCAL responder agent's own stream (the agent whose
+            // pubkey is counterpartyPubkey — the stream this request arrived on). If unresolved, sendOver
+            // reports a send failure rather than throwing.
+            const sent = await sendOver(agents.find((a) => a.pubkey === counterpartyPubkey)?.name ?? "", {
+                type: "seal_interrupted_rejection",
+                sessionId,
+                initiatorPubkey,
+                reason,
+            });
+            // fallback-finder LOW: don't log the rejection as delivered when the send failed (e.g. no local
+            // agent for counterpartyPubkey, or a transient send error) — the counterparty would otherwise
+            // appear rejected but only ever see a timeout.
+            if (sent.ok) {
+                logger.warn("session.interrupted.request.rejected", { sessionId, reason, correlationId });
+            }
+            else {
+                logger.warn("session.interrupted.request.rejection.send.failed", { sessionId, reason, sendReason: sent.reason, correlationId });
+            }
+        };
+        // DOD-LOOP-1: resolve the addressed local agent FIRST — the composite (agent, session_id) key
+        // needs it. The request must be addressed to one of our agents (counterpartyPubkey is OUR
+        // pubkey from the initiator's perspective).
+        const localAgent = agents.find((a) => a.pubkey === counterpartyPubkey);
+        if (!localAgent) {
+            await reject("unknown_counterparty");
+            return;
+        }
+        const localRecord = sessionNodeManager.getSessionRecord(localAgent.name, sessionId);
+        if (!localRecord) {
+            await reject("session_not_found");
+            return;
+        }
+        // DAEMON-004: an 'active' session is eligible too (the active-session seal
+        // reuses this exchange). We still never re-process a terminal 'sealed' row or
+        // an already-pending one.
+        if (localRecord.status !== "interrupted" && localRecord.status !== "active") {
+            await reject("session_not_interrupted");
+            return;
+        }
+        // From our perspective the initiator is our counterparty.
+        if (localRecord.counterparty_pubkey !== initiatorPubkey) {
+            await reject("initiator_mismatch");
+            return;
+        }
+        // DAEMON-004 (SI-001): we sign over OUR OWN daemon-owned tree, never the
+        // initiator-supplied root.
+        //
+        // round-2 finding #6: for an ACTIVE session the daemon ALWAYS binds its own tree
+        // root — even the canonical EMPTY-tree root when no content has flowed — never the
+        // initiator-supplied `merkleRootReq`. Echoing the caller's root would let an
+        // initiator dictate the root a responder signs (the SI-001 trust hole). Only a
+        // LEGACY 'interrupted' session that predates DAEMON-004 (no tree ever persisted)
+        // falls back to message_count + the supplied root (SESSION-001 behavior).
+        const ownTree = sessionNodeManager.getSessionTree(localAgent.name, sessionId);
+        const isActive = localRecord.status === "active";
+        const useOwnTree = isActive || ownTree.size() > 0;
+        const ownLeafCount = useOwnTree ? ownTree.size() : (localRecord.message_count ?? 0);
+        const ownRoot = useOwnTree ? sessionNodeManager.getSessionTreeRootHex(localAgent.name, sessionId) : merkleRootReq;
+        // SI-002/AC-008: leaf-count agreement against our own state.
+        if (ownLeafCount !== leafCountReq) {
+            await reject("leaf_count_mismatch");
+            return;
+        }
+        const kp = getKeyProvider(localAgent.name);
+        if (!kp) {
+            await reject("signing_key_unavailable");
+            return;
+        }
+        // Co-sign our SEAL-INTERRUPTED leaf. When we hold our own tree the root is
+        // ours (SI-001); otherwise we echo the initiator-supplied root unchanged.
+        const ownLeaf = await buildSignedSealInterruptedLeaf(kp, {
+            sessionId,
+            leafCount: ownLeafCount,
+            merkleRootAtInterruption: ownRoot,
+            signerPubkeyHex: counterpartyPubkey,
+        });
+        // Persist the responder side of the bilateral commitment. The responder never
+        // receives the initiator's leaf in this request→ack protocol, so it records
+        // only its own signed leaf plus the agreed root; the full both-leaves artifact
+        // lives on the initiator side. Advances status interrupted → seal_interrupted_pending.
+        sessionNodeManager.persistSealInterruptedCommitment({
+            agentName: localAgent.name,
+            sessionId,
+            role: "responder",
+            ownLeaf,
+            counterpartyLeaf: null,
+            merkleRoot: ownRoot,
+            nonce,
+        });
+        const ack = {
+            type: "seal_interrupted_ack",
+            sessionId,
+            initiatorPubkey,
+            nonce,
+            sealInterruptedLeaf: ownLeaf,
+        };
+        const sendResult = await sendOver(localAgent.name, ack);
+        if (!sendResult.ok) {
+            logger.error("session.interrupted.ack.send.failed", {
+                sessionId,
+                agentName: localAgent.name,
+                reason: sendResult.reason,
+                correlationId,
+            });
+            return;
+        }
+        logger.info("session.interrupted.responder.acked", {
+            sessionId,
+            agentName: localAgent.name,
+            leafCount: ownLeafCount,
+            correlationId,
+        });
+    }
+    return { handleInboundSealInterruptedRequest };
+}
+//# sourceMappingURL=inbound-seal-request.js.map

package/dist/inbound-seal-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-seal-request.js","sourceRoot":"","sources":["../src/inbound-seal-request.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,8BAA8B,EAAE,MAAM,gBAAgB,CAAC;AAUhE,MAAM,UAAU,+BAA+B,CAAC,IAA4B;IAC1E,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAE9E,8EAA8E;IAC9E,EAAE;IACF,+EAA+E;IAC/E,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;IAC9E,iFAAiF;IACjF,2EAA2E;IAC3E,KAAK,UAAU,mCAAmC,CAAC,KAA8B;QAC/E,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrF,MAAM,eAAe,GAAG,OAAO,KAAK,CAAC,iBAAiB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvG,MAAM,kBAAkB,GAAG,OAAO,KAAK,CAAC,oBAAoB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChH,MAAM,YAAY,GAAG,OAAO,KAAK,CAAC,yBAAyB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpH,MAAM,aAAa,GAAG,OAAO,KAAK,CAAC,0BAA0B,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrH,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEzE,qEAAqE;QACrE,IAAI,CAAC,SAAS,IAAI,CAAC,eAAe,IAAI,CAAC,kBAAkB,IAAI,KAAK,KAAK,IAAI,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YACrG,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;gBACnD,aAAa;gBACb,YAAY,EAAE,SAAS,KAAK,IAAI;gBAChC,kBAAkB,EAAE,eAAe,KAAK,IAAI;aAC7C,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;YACrD,4FAA4F;YAC5F,8FAA8F;YAC9F,+CAA+C;YAC/C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,kBAAkB,CAAC,EAAE,IAAI,IAAI,EAAE,EAAE;gBAC3F,IAAI,EAAE,4BAA4B;gBAClC,SAAS;gBACT,eAAe;gBACf,MAAM;aACP,CAAC,CAAC;YACH,gGAAgG;YAChG,8FAA8F;YAC9F,+CAA+C;YAC/C,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YAC5F,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YAClI,CAAC;QACH,CAAC,CAAC;QAEF,8FAA8F;QAC9F,0FAA0F;QAC1F,4CAA4C;QAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAElE,MAAM,WAAW,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACpF,IAAI,CAAC,WAAW,EAAE,CAAC;YAAC,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAChE,2EAA2E;QAC3E,8EAA8E;QAC9E,0BAA0B;QAC1B,IAAI,WAAW,CAAC,MAAM,KAAK,aAAa,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5E,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QACD,0DAA0D;QAC1D,IAAI,WAAW,CAAC,mBAAmB,KAAK,eAAe,EAAE,CAAC;YAAC,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAExG,yEAAyE;QACzE,2BAA2B;QAC3B,EAAE;QACF,iFAAiF;QACjF,mFAAmF;QACnF,6EAA6E;QAC7E,+EAA+E;QAC/E,iFAAiF;QACjF,0EAA0E;QAC1E,MAAM,OAAO,GAAG,kBAAkB,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC;QACjD,MAAM,UAAU,GAAG,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAClD,MAAM,YAAY,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;QAElH,6DAA6D;QAC7D,IAAI,YAAY,KAAK,YAAY,EAAE,CAAC;YAAC,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAEnF,MAAM,EAAE,GAAG,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,EAAE,CAAC;YAAC,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAE7D,2EAA2E;QAC3E,0EAA0E;QAC1E,MAAM,OAAO,GAAG,MAAM,8BAA8B,CAAC,EAAE,EAAE;YACvD,SAAS;YACT,SAAS,EAAE,YAAY;YACvB,wBAAwB,EAAE,OAAO;YACjC,eAAe,EAAE,kBAAkB;SACpC,CAAC,CAAC;QAEH,8EAA8E;QAC9E,4EAA4E;QAC5E,+EAA+E;QAC/E,uFAAuF;QACvF,kBAAkB,CAAC,gCAAgC,CAAC;YAClD,SAAS,EAAE,UAAU,CAAC,IAAI;YAC1B,SAAS;YACT,IAAI,EAAE,WAAW;YACjB,OAAO;YACP,gBAAgB,EAAE,IAAI;YACtB,UAAU,EAAE,OAAO;YACnB,KAAK;SACN,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG;YACV,IAAI,EAAE,sBAAsB;YAC5B,SAAS;YACT,eAAe;YACf,KAAK;YACL,mBAAmB,EAAE,OAAO;SAC7B,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;gBAClD,SAAS;gBACT,SAAS,EAAE,UAAU,CAAC,IAAI;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,aAAa;aACd,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;YACjD,SAAS;YACT,SAAS,EAAE,UAAU,CAAC,IAAI;YAC1B,SAAS,EAAE,YAAY;YACvB,aAAa;SACd,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,mCAAmC,EAAE,CAAC;AACjD,CAAC"}

package/dist/inbound-sessions.d.ts

@@ -0,0 +1,54 @@
+import { SignalingManager } from "@cello-protocol/transport";
+import type { KeyProvider } from "@cello-protocol/crypto";
+import type { IpcHandler } from "./ipc-server.js";
+import type { SessionNodeManager } from "./session-node-manager.js";
+import type { AgentInfo, Logger } from "./types.js";
+import type { ConnState } from "./contact-handlers.js";
+/** How long an un-accepted inbound session request stays claimable. */
+export declare const INBOUND_SESSION_TTL_MS: number;
+/** A session request that expired before anyone claimed it. Surfaced by the push-loss reconciler. */
+export interface ExpiredSessionRequest {
+    sessionIdHex: string;
+    counterpartyPubkeyHex: string;
+    expiredAt: number;
+}
+export interface InboundSessionEvent {
+    sessionIdHex: string;
+    counterpartyPubkeyHex: string;
+    genesisPrevRootHex: string;
+    offeredMoniker?: string | null;
+    enqueuedAt?: number;
+}
+export interface InboundSessionWaiter {
+    connectionId: string;
+    deliver: (e: InboundSessionEvent | null) => void;
+}
+export interface InboundSessionDeps {
+    logger: Logger;
+    sessionNodeManager: SessionNodeManager;
+    agents: AgentInfo[];
+    getConnState: (connectionId: string) => ConnState | undefined;
+    resolveCurrentAgent: (connState: ConnState | undefined, explicitAgent?: string) => string | null;
+    NO_CURRENT_AGENT_RESPONSE: unknown;
+    getKeyProvider: (agentName: string) => KeyProvider | undefined;
+    sharedSignaling: SignalingManager | undefined;
+    handleInboundSealInterruptedRequest: (frame: Record<string, unknown>) => Promise<void>;
+    reapDeadHalfOpenSessions: (agentName?: string) => void;
+    /** AWAY-1: the auto-reply when nobody is attending this agent. */
+    sendAwayResponse: (agentName: string, sessionId: string, kind: "request" | "message") => Promise<void>;
+    dispatchSessionStateChangedWithTelegram: (agentName: string, sessionId: string, state: string, counterpartyPubkey: string | null) => void;
+    sendTelegramDoorbell: (agentName: string, sessionId: string, kind: "session_request" | "message_waiting" | "state_change", detail: string) => Promise<void>;
+}
+export declare function createInboundSessions(deps: InboundSessionDeps): {
+    registerHandlers: (handlers: Map<string, IpcHandler>) => void;
+    wirePerAgentSessionInbound: (mgr: SignalingManager) => void;
+    handleTrustSignalPickup: (frame: Record<string, unknown>, keyProvider: import("@cello-protocol/crypto").KeyProvider, mgr: SignalingManager, agentName: string) => Promise<void>;
+    enqueueInboundSession: (agentName: string, event: InboundSessionEvent) => void;
+    reapExpiredInboundSessions: (agentName: string) => void;
+    inboundSessionQueues: Map<string, InboundSessionEvent[]>;
+    inboundSessionWaiters: Map<string, InboundSessionWaiter[]>;
+    expiredSessionRequests: Map<string, ExpiredSessionRequest[]>;
+    offeredMonikers: Map<string, string>;
+    offerKey: (agentName: string, sessionIdHex: string) => string;
+};
+//# sourceMappingURL=inbound-sessions.d.ts.map

package/dist/inbound-sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-sessions.d.ts","sourceRoot":"","sources":["../src/inbound-sessions.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAQvD,uEAAuE;AACvE,eAAO,MAAM,sBAAsB,QAAsB,CAAC;AAE1D,qGAAqG;AACrG,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAI3B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAG/B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,CAAC,CAAC,EAAE,mBAAmB,GAAG,IAAI,KAAK,IAAI,CAAC;CAClD;AAGD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,YAAY,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,SAAS,GAAG,SAAS,CAAC;IAC9D,mBAAmB,EAAE,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,EAAE,aAAa,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACjG,yBAAyB,EAAE,OAAO,CAAC;IACnC,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,WAAW,GAAG,SAAS,CAAC;IAC/D,eAAe,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC9C,mCAAmC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvF,wBAAwB,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACvD,kEAAkE;IAClE,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvG,uCAAuC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC1I,oBAAoB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,cAAc,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7J;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,kBAAkB;iCAokBxB,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,KAAG,IAAI;sCA7BzB,gBAAgB,KAAG,IAAI;qCAxEvD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,eACjB,OAAO,wBAAwB,EAAE,WAAW,OACpD,gBAAgB,aACV,MAAM,KAChB,OAAO,CAAC,IAAI,CAAC;uCA7a0B,MAAM,SAAS,mBAAmB,KAAG,IAAI;4CAwBpC,MAAM,KAAG,IAAI;;;;;0BAnD/B,MAAM,gBAAgB,MAAM,KAAG,MAAM;EA6mBnE"}