@corenel/harness 0.10.0 → 0.12.0

package/dist/sidecar/server.d.ts

@@ -1,5 +1,6 @@
-import type { AgentTool, AgentEvent, PermissionDecision, SidecarRoots, DaemonRunActivity, DaemonRegistration, AgentPause, HostSummary, SidecarProcs, SidecarSessions, RoomOpenRequest, RoomSummary, RoomFinding, RoomFindingEdit } from '@corenel/protocol';
-import { type SidecarChannel, type SidecarMsg, type SidecarInfo, type SidecarRunner, type SidecarHostSync, type SidecarConfig, type SidecarAcp } from '@corenel/protocol';
+import type { AgentTool, AgentEvent, PermissionDecision, SidecarRoots, DaemonRunActivity, DaemonRegistration, AgentPause, HostSummary, SidecarProcs, SidecarSessions, RoomOpenRequest, RoomSummary, RoomFinding, RoomFindingEdit, ChecksState, WorkspaceLockRef, DaemonApprovalChoice, DaemonApprovalOffer, DaemonApprovalsState, CrewDeployCaller, CrewDeployReply } from '@corenel/protocol';
+import { type SidecarChannel, type SidecarMsg, type SidecarInfo, type SidecarRunner, type SidecarHostSync, type SidecarConfig, type SidecarAcp, type WebPushSubscription } from '@corenel/protocol';
+import { type ExplainingIdentityVerifier } from './identity';
 /** The payload of a `permission-ask` message, minus its `t` discriminant — derived
  * from the wire protocol so this stays in lockstep with it automatically. */
 export type PermissionAsk = Omit<Extract<SidecarMsg, {
@@ -25,17 +26,23 @@ export interface SidecarAttendanceRegistry {
          * double) that only ever forwarded permission asks stays valid. */
         runActivity?(activity: DaemonRunActivity): void;
         registrations?(list: DaemonRegistration[]): void;
+        /** Optional: offer this connection a standing approval (plan 3). The
+         * daemon calls it only on the connection that answered the ask. */
+        approvalSuggestion?(s: DaemonApprovalOffer): void;
     }, identity?: {
         clientId: string;
         accounts: readonly string[];
+        verifiedUserId?: string;
     }): () => void;
     /** Record this connection's answer to an outstanding ask. Ignored for an
      * unknown/already-resolved id. `by` is the attached-client object this
      * connection registered, so the registry can name who answered -- typed
      * `unknown` deliberately: this port must not learn `packages/sidecar`'s
      * types, and the registry looks the object up in its own map, so an
-     * unrecognised value simply yields no name. */
-    answer(id: number, decision: PermissionDecision, by?: unknown): void;
+     * unrecognised value simply yields no name. `note` is a deny's reason,
+     * already trimmed and capped by the server; absent for an allow or an
+     * older client. */
+    answer(id: number, decision: PermissionDecision, by?: unknown, note?: string): void;
 }
 /** The minimal shape SidecarServer needs from a live-run hub, so a second client
  * can watch a run it did not start. Declared HERE (harness-side), not imported
@@ -140,6 +147,102 @@ export interface SidecarPauses {
     /** Re-derive and republish what this daemon will fire. */
     refresh(): void;
 }
+/** The daemon's deploy list, behind the `crew-*` messages (and, for older
+ * apps, the `agent-pause-*` ones).
+ *
+ * Declared HERE (harness-side), with protocol types only, for the same
+ * dependency-direction reason as `SidecarPauses` above: `packages/sidecar`
+ * implements it (crewDeploy/daemon.ts `wirePort`) over `@corenel/crew/deploy`,
+ * which this package must never import. Every rule -- who may, what fires,
+ * what a ref may name -- lives in that core; this port only carries a call.
+ *
+ * `caller` is ALWAYS built by the server from THIS connection (its hello
+ * name, the dirName the daemon resolved for it, the user id it proved),
+ * never read from a message. `ref` is passed as `unknown` because it arrived
+ * through JSON.parse: the core validates it. */
+export interface SidecarCrewDeploy {
+    deployments(): Promise<CrewDeployReply>;
+    deploy(caller: CrewDeployCaller, ref: unknown, reason?: string): Promise<CrewDeployReply>;
+    undeploy(caller: CrewDeployCaller, ref: unknown, reason?: string): Promise<CrewDeployReply>;
+    pause(caller: CrewDeployCaller, ref: unknown, reason: string): Promise<CrewDeployReply>;
+    resume(caller: CrewDeployCaller, ref: unknown, reason?: string): Promise<CrewDeployReply>;
+    stop(caller: CrewDeployCaller, ref: unknown, runId: string, reason: string): Promise<CrewDeployReply>;
+    /** Older apps address a pause by the owner string a registration carried. */
+    pauseByOwnerKey(caller: CrewDeployCaller, owner: string, agent: string, paused: boolean): Promise<{
+        ok: true;
+        pauses: AgentPause[];
+    } | {
+        ok: false;
+        error: string;
+    }>;
+    legacyPauses(): AgentPause[];
+    /** A connection whose hello did not announce `CREW_DEPLOY_FEATURE`: an
+     * older app whose agents sync here but never fire until deployed. The
+     * daemon says so once per client id. */
+    noteOlderClient(clientId: string, name: string): void;
+    /** A connection proved `verifiedUserId` and was filed as `dirName`: the
+     * daemon binds that synced folder to the first verified user that connects
+     * as it (deploy and undeploy in team mode then require that user). Called
+     * before the welcome, so a crew-* message that follows sees the binding. */
+    noteVerifiedDir?(dirName: string, verifiedUserId: string): void;
+}
+/** The daemon's "This machine" standing approvals (plan 3), behind the
+ * `approvals-*` messages.
+ *
+ * Declared HERE for the same dependency-direction reason as `SidecarPauses`:
+ * packages/sidecar implements it (src/approvals/daemonApprovals.ts).
+ *
+ * `accept`'s `by` is the object THIS connection attached to the attendance
+ * registry -- the daemon compares it with the client it made the offer to. It
+ * is never taken from the message, and there is no method that adds a rule
+ * directly. `accept` throws for a refusal; the reason is sent back. */
+export interface SidecarApprovals {
+    accept(by: unknown, suggestionId: string, choice: DaemonApprovalChoice): Promise<void>;
+    state(): Promise<DaemonApprovalsState>;
+    revoke(tool: string): Promise<DaemonApprovalsState>;
+}
+/** The daemon's orchestrator checks and workspace lock, behind `checks-get`,
+ * `checks-pin` and `workspace-release`. Declared HERE for the same
+ * dependency-direction reason as `SidecarPauses`: packages/sidecar implements
+ * it (orchestrator/index.ts makeChecksPort). Present only when the daemon runs
+ * with --allow-shell, because a pinned check is a command.
+ *
+ * `unavailable`, when present, is consulted on EVERY hello and EVERY message:
+ * a non-null answer is the reason the port is switched off right now (the
+ * daemon's state dir, where the pins live, has come inside an approved root),
+ * so 'checks' is not advertised and each checks-get / checks-pin is refused
+ * with that reason. `workspace-release` is still served: releasing a run's own
+ * lock is harmless, and a run that started earlier must be able to finish.
+ * It can change during the process's life (a root added at runtime), which is
+ * why it is a function and not a constructor flag. */
+export interface SidecarChecks {
+    get(root: string, stateDir: string): Promise<ChecksState>;
+    pin(root: string, stateDir: string, content: string): Promise<ChecksState>;
+    release(ref: WorkspaceLockRef): Promise<boolean>;
+    unavailable?(): string | null;
+}
+/** The daemon's web-push notifier, behind `push-subscribe`/`push-unsubscribe`
+ * (spec 2026-09-24-web-push-design). Declared HERE (harness-side), not
+ * imported from `@corenel/sidecar`, for the same dependency-direction reason
+ * as `SidecarPauses` above: `packages/sidecar` depends on `packages/harness`,
+ * never the reverse.
+ *
+ * `subscribe`/`unsubscribe` are handed the CONNECTION's identity -- its
+ * authenticated `clientId` and its claimed `accounts` -- never anything the
+ * message itself carries, so a subscription is always filed under whoever
+ * this socket actually is. */
+export interface SidecarPush {
+    /** base64url VAPID public key this daemon signs with. */
+    publicKey: string;
+    subscribe(identity: {
+        clientId: string;
+        accounts: readonly string[];
+        verifiedUserId?: string;
+    }, sub: WebPushSubscription): Promise<void>;
+    unsubscribe(identity: {
+        clientId: string;
+    }, endpoint: string): Promise<boolean>;
+}
 /** The daemon's synced-host directories, behind the `hosts-*` messages.
  *
  * Declared HERE (harness-side) for the same dependency-direction reason as
@@ -328,11 +431,28 @@ export interface SidecarServerOptions {
      * pause message with a refusal that says so, rather than accepting a pause it
      * would never honour. */
     pauses?: SidecarPauses;
+    /** The daemon's deploy list, behind `crew-*`. Absent means this daemon keeps
+     * none: it advertises no 'crew-deploy' feature and refuses every `crew-*`
+     * message with a reason that says so. When present it also answers the
+     * older apps' `agent-pause-*` messages (a pause is a deploy entry), in
+     * place of `pauses`. */
+    crewDeploy?: SidecarCrewDeploy;
+    /** The daemon's standing approvals, behind `approvals-*`. Absent means this
+     * daemon keeps none: no 'approvals' feature, and every approvals message is
+     * refused with a reason that says so. */
+    approvals?: SidecarApprovals;
+    /** Orchestrator checks + workspace lock, behind `checks-*` and
+     * `workspace-release`. Absent: no 'checks' feature, and every such message
+     * is refused with a reason. */
+    checks?: SidecarChecks;
     /** The daemon's synced-host directories, behind `hosts-*`. Absent means this
      * daemon exposes no host administration: it advertises no 'hosts-admin'
      * feature and answers every hosts message with a refusal that says so,
      * rather than silently reporting an empty estate. */
     hosts?: SidecarHosts;
+    /** Web push (spec 2026-09-24-web-push-design). Present when the daemon can
+     * send pushes; advertises 'web-push' and the VAPID key on the welcome. */
+    push?: SidecarPush;
     /** The daemon's MCP surface, behind `mcp-list`/`mcp-call`. Absent means this
      *  daemon serves no MCP tools over the wire: `mcp-list` answers an empty
      *  list (not an error -- "no MCP servers" is a normal state, same as an
@@ -400,12 +520,40 @@ export interface SidecarServerOptions {
         clientId: string;
         name: string;
     }) => Promise<string | null>;
+    /** Verifies the browser's identity-challenge/identity-assert exchange (spec
+     *  2026-09-25-verified-identity-design, amendment 2026-09-25b). Consulted
+     *  only after the pairing token passes, and only for a `hello` that carries
+     *  `wantsIdentity`. Absent = no verification; every connection pairs as
+     *  today and the welcome carries no `identity`. */
+    identity?: ExplainingIdentityVerifier;
+    /** Resolve a host NAME to its addresses, for the `http-req` proxy's re-check
+     *  (the node daemon wires `dns.lookup(..., { all: true })`). Absent, the proxy
+     *  still accepts only loopback IP literals and the name `localhost`. */
+    resolveHost?: (host: string) => Promise<string[]>;
+    /** How long an unauthenticated connection may stay open before it is closed
+     *  (default HELLO_DEADLINE_MS). A socket that never pairs holds daemon
+     *  resources for nothing. */
+    helloDeadlineMs?: number;
 }
+/** Default pre-pairing deadline: a real client sends `hello` immediately. */
+export declare const HELLO_DEADLINE_MS = 10000;
+/** Denied hellos one connection may send before it is closed: a client with a
+ *  stale token needs one, not an unbounded guessing loop. */
+export declare const MAX_FAILED_HELLOS = 3;
+/** How long pairing waits on the identity verifier before going out
+ * UNVERIFIED. The same bound as `DIR_NAME_TIMEOUT_MS`, and run concurrently
+ * with it, so a verifier that hangs never makes the handshake slower than a
+ * wedged dirName lookup already could. A timeout never refuses the connection:
+ * it only withholds the widened trust a verified id would earn. */
+export declare const IDENTITY_TIMEOUT_MS = 3000;
 export declare class SidecarServer {
     private readonly ch;
     private readonly opts;
     private readonly tools;
     private authed;
+    /** Denied hellos on this connection (see MAX_FAILED_HELLOS). */
+    private failedHellos;
+    private clearHelloDeadline;
     private hostSeq;
     private readonly hostPending;
     /** The connected host's dot-dir name, from `hello.stateDir` (informational —
@@ -423,6 +571,38 @@ export declare class SidecarServer {
     /** The friendly label from the same `hello`, kept beside `clientId` so the
      * dirName resolver is handed the identity the manifest keys on. */
     private clientName?;
+    /** The connection's claimed accounts from the same `hello`, kept beside
+     * `clientId` so web push can be filed under both. Bounded/typeof-filtered
+     * the same way `clientId` is -- see the `accounts` local in `onHello`. */
+    private accounts;
+    /** The VERIFIED user id (the identity token's `sub`), set at most once, in
+     * `onHello`, after the pairing token passed and the verifier answered. It is
+     * never re-assigned: no message re-authenticates, so a hijacked socket cannot
+     * swap whose connection this is. Undefined = unverified, which is every
+     * connection on a daemon with no `identity` verifier. The token itself is
+     * never kept. */
+    private verifiedUserId;
+    /** The verdict echoed on the welcome, when a verifier is wired. Dead by the
+     * time a welcome is ever sent -- `onHello`'s identity block always
+     * overwrites it with a real reason ('not requested', 'no daemon id', or the
+     * challenge/assert outcome) before `sendWelcome` reads it -- but given a
+     * value anyway rather than left to a type assertion, matching every other
+     * field on this class. */
+    private identityResult;
+    /** Resolves the promise `onHello` is awaiting on `identity-assert`. Cleared
+     * (set to `undefined`) the moment it is used, which is what makes a SECOND
+     * `identity-assert` on the same connection a no-op: with no resolver left,
+     * the handler in `onMessage` has nothing to call and the message is simply
+     * ignored. Also resolved (to a timeout-shaped answer) from the close
+     * handler, so a connection that drops while a verdict is pending does not
+     * leave `onHello` waiting on a promise nothing will ever settle until the
+     * unrelated 3s timer fires. */
+    private identityAssertResolve?;
+    /** Set when the channel closes. `onHello` awaits (identity, dirName) before
+     * attaching to attendance and sending the welcome; a connection that dropped
+     * during that wait must not be attached afterwards, or the registry would
+     * hold a dead client that nothing ever detaches. */
+    private closed;
     /** This connection's attended-client object, retained so an answer it sends
      * can be attributed to it. Typed `unknown` because its only consumer is the
      * registry's own identity lookup, which takes `unknown` for the
@@ -451,7 +631,33 @@ export declare class SidecarServer {
     private procUnsub;
     constructor(opts: SidecarServerOptions);
     private onMessage;
+    /** Close a connection that keeps failing to pair. */
+    private countFailedHello;
     private onHello;
+    /** Waits for this connection's `identity-assert`, with NO timeout of its
+     * own -- the overall bound is `awaitAndVerifyIdentity`'s, covering this wait
+     * AND the verify call together, so the whole leg is bounded at
+     * IDENTITY_TIMEOUT_MS from the challenge, not up to double that. Also
+     * settled (to a timeout-shaped answer) from the close handler, so a
+     * dropped connection cannot leave this pending forever. */
+    private awaitIdentityAssertion;
+    /** Turns an `identity-assert` answer into a verdict: 'no assertion' or
+     * 'timed out' unverified for the non-assertion answers, 'assertion too
+     * long' WITHOUT calling the verifier for an oversized one, and otherwise
+     * the verifier's own verdict (never thrown -- a throw or rejection becomes
+     * an unverified 'error'). The expectation is built here, once the
+     * pairing-token hash has settled; a hash that could not be computed is an
+     * unverified 'error' without calling the verifier. */
+    private verdictFromAssertion;
+    /** The identity verdict for this connection's challenge/assert exchange,
+     * bounded by IDENTITY_TIMEOUT_MS FROM THE CHALLENGE -- covering both the
+     * wait for `identity-assert` and the verify call, in one race, so a slow
+     * verifier cannot add a second timeout's worth of wait on top of a slow
+     * browser. Every failure mode (no assertion, an oversized one, a throw, a
+     * rejection, a malformed answer, a timeout) is an UNVERIFIED verdict with a
+     * reason -- never a refusal. The assertion is passed to the verifier and
+     * nowhere else. */
+    private awaitAndVerifyIdentity;
     /** Resolve the connection's synced directory name, or null for every failure
      * mode there is (throw, rejection, non-string, timeout). */
     private resolveDirName;
@@ -511,6 +717,9 @@ export declare class SidecarServer {
      * message id, so a client correlating by id sees its own stream.
      */
     private onSubscribe;
+    /** Stop a run, whoever started it. Same trust as `run`: a connection that may
+     * start runs on this daemon may stop them. */
+    private onCancelRun;
     /**
      * What this caller's agent has actually done.
      *
@@ -559,10 +768,47 @@ export declare class SidecarServer {
     private onHostsForget;
     private onAgentPauseList;
     private onAgentPauseSet;
+    /** The caller for a deploy action: THIS connection, never a message field.
+     * `dirName` is the directory the daemon resolved for this connection and
+     * `verifiedUserId` the id it proved at pairing; both are absent until (and
+     * unless) the daemon established them, which only ever narrows what the
+     * core permits. */
+    private deployCaller;
+    private onCrewDeploy;
+    private onApprovalsAccept;
+    private onApprovalsList;
+    private onApprovalsRevoke;
+    /** Why the checks port cannot answer right now, or null when it can. */
+    private checksRefusal;
+    private onChecksGet;
+    private onChecksPin;
+    private onWorkspaceRelease;
+    private onRunPlanGet;
+    /** The identity a push subscription/unsubscription is filed under -- ALWAYS
+     * this connection's own authenticated `clientId`/`accounts`, never anything
+     * the message itself carries. Auth-gated first, same as every other
+     * handler; a connection with no `clientId` (an older client, or one that
+     * never claimed an identity) is refused rather than filed under nothing. */
+    private pushIdentity;
+    private onPushSubscribe;
+    private onPushUnsubscribe;
     private onRoomOpen;
     private onRoomList;
     private onRoomRead;
     private onRoomResume;
+    /** WHO THIS CONNECTION IS, INSIDE A ROOM.
+     *
+     * The user its pairing JWT proved (`verifiedUserId`: API-signed, aud = this
+     * daemon, single-use nonce, allowlisted azp) whenever there is one -- the
+     * same user id the browser seats a person under, sanitized by the same rule
+     * (an OpenAI `name` field accepts only [A-Za-z0-9_-]; src/rooms/participantId.ts).
+     * Keying on `clientId` instead -- the browser's random wire id -- refused
+     * people their own rooms: the room seated `user_...`, the check compared
+     * `1463897a-...`.
+     *
+     * No verified user (no verifier configured, an older client, a JWT that did
+     * not verify): `clientId`, exactly as before. Never a claimed id. */
+    private roomIdentity;
     private actingId;
     private onRoomAnswer;
     private onRoomInterject;

package/dist/sidecar/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../sidecar/server.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,SAAS,EAEmC,UAAU,EAAE,kBAAkB,EAAE,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EACxJ,YAAY,EAAE,eAAe,EAAe,eAAe,EAAE,WAAW,EACxE,WAAW,EAAE,eAAe,EAC7B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAEL,KAAK,cAAc,EAAE,KAAK,UAAU,EAAoC,KAAK,WAAW,EACxF,KAAK,aAAa,EAAE,KAAK,eAAe,EACxC,KAAK,aAAa,EAAE,KAAK,UAAU,EACpC,MAAM,mBAAmB,CAAC;AAE3B;6EAC6E;AAC7E,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;IAAE,CAAC,EAAE,gBAAgB,CAAA;CAAE,CAAC,EAAE,GAAG,CAAC,CAAC;AAEpF;;;;;;qFAMqF;AACrF,MAAM,WAAW,yBAAyB;IACxC;;;qEAGiE;IACjE,MAAM,CAAC,MAAM,EAAE;QACb,IAAI,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAAC;QAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,GAAG,SAAS,GAAG,YAAY,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvH;;2EAEmE;QACnE,WAAW,CAAC,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;QAChD,aAAa,CAAC,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;KAClD,EAAE,QAAQ,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,MAAM,IAAI,CAAC;IAC7E;;;;;mDAK+C;IAC/C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CACtE;AAED;;;;;kFAKkF;AAClF,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;IAChD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE;QAC5B,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QACzD,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;KAC9B,GAAG;QAAE,MAAM,EAAE;YAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,UAAU,EAAE,MAAM,CAAA;aAAE,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,MAAM,EAAE,MAAM,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACnJ;AAED;;;;;;;;;;;;qBAYqB;AACrB,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACzG,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACtG;mDAC+C;IAC/C,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtG;;gDAE4C;IAC5C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7C;6EACyE;IACzE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACrF;mFAC+E;IAC/E,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACnF;8EAC0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD;;;oCAGgC;IAChC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAClG,SAAS,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACxD;AAED;;;;;;;;;;;;qBAYqB;AACrB,MAAM,WAAW,aAAa;IAC5B,IAAI,IAAI,UAAU,EAAE,CAAC;IACrB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1E,0DAA0D;IAC1D,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;gFAkBgF;AAChF,MAAM,WAAW,YAAY;IAC3B;0DACsD;IACtD,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/B;;wCAEoC;IACpC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/E,2EAA2E;IAC3E,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,IAAI,CAAC;CACrC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AAiBH,MAAM,WAAW,eAAe;IAC9B,WAAW,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC,CAAC;IACjG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAC/E;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CACxF,CAAC;IACF,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,UAAU;IACzB;;2DAEuD;IACvD,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAC3E;;;gFAG4E;IAC5E,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3E;;0EAEsE;IACtE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACvF;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,cAAc,CAAC;IACxB,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB;gFAC4E;IAC5E,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB;4FACwF;IACxF,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B;iFAC6E;IAC7E,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;+CAG2C;IAC3C,UAAU,CAAC,EAAE,yBAAyB,CAAC;IACvC;;kEAE8D;IAC9D,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB;;0CAEsC;IACtC,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB;;kDAE8C;IAC9C,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;4EAGwE;IACxE,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;;;;gCAM4B;IAC5B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;2EAIuE;IACvE,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;wEAEoE;IACpE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;;;;;;;4BAUwB;IACxB,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAClE;;;;uEAImE;IACnE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;;4DAKwD;IACxD,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;6BAGyB;IACzB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;yDAGqD;IACrD,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;yEAGqE;IACrE,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,KAAK,MAAM,CAAC;IACzF;;;;;;;;;;;;;;;OAeG;IACH,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC;IAChC;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC1F;AAoDD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAiB;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuB;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IACtD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D;;0DAEsD;IACtD,OAAO,CAAC,YAAY,CAAc;IAClC;;;;;;gFAM4E;IAC5E,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B;uEACmE;IACnE,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B;;;4EAGwE;IACxE,OAAO,CAAC,QAAQ,CAAC,CAAU;IAC3B;;2EAEuE;IACvE,OAAO,CAAC,cAAc,CAAC,CAAa;IACpC;;;8EAG0E;IAC1E,OAAO,CAAC,OAAO,CAAC,CAAS;IACzB,uEAAuE;IACvE,OAAO,CAAC,WAAW,CAAC,CAAa;IACjC;wDACoD;IACpD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IAEtD;;;;iEAI6D;IAC7D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,SAAS,CAA2B;gBAEhC,IAAI,EAAE,oBAAoB;IAsDtC,OAAO,CAAC,SAAS;IA4OjB,OAAO,CAAC,OAAO;IAoJf;gEAC4D;YAC9C,cAAc;IAc5B;;;eAGW;IACX,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,WAAW;IAiFnB;;sEAEkE;YACpD,SAAS;IA0BvB;;;;gEAI4D;IAC5D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqC;IAElE,OAAO,CAAC,eAAe;YAMT,SAAS;IAkGvB,OAAO,CAAC,YAAY;IASpB;;wBAEoB;IACpB,OAAO,CAAC,YAAY;IAMpB;;mDAE+C;IAC/C,OAAO,CAAC,gBAAgB;YAoBV,WAAW;IA6BzB;4EACwE;IACxE,OAAO,CAAC,YAAY;IAoBpB,mEAAmE;IACnE,OAAO,CAAC,YAAY;YASN,QAAQ;IAqCtB;;;;;;;;;uCASmC;YACrB,UAAU;YAwBV,YAAY;YAcZ,WAAW;IAczB;;;;;;;OAOG;IACH,OAAO,CAAC,WAAW;IA+CnB;;;;;;;;;OASG;YACW,YAAY;IAa1B;+EAC2E;YAC7D,eAAe;IAW7B;;;;iBAIa;YACC,YAAY;YAcZ,KAAK;IAmEnB;;;;;4EAKwE;IACxE,OAAO,CAAC,uBAAuB;YAQjB,aAAa;YAYb,UAAU;YAeV,aAAa;IAgB3B;wEACoE;YACtD,WAAW;IAYzB,OAAO,CAAC,SAAS;IAIjB;;;;;;;;;OASG;YACW,aAAa;IA4B3B,OAAO,CAAC,gBAAgB;YAeV,eAAe;YA2Bf,UAAU;YAyEV,UAAU;YAsCV,UAAU;YA+CV,YAAY;IAmC1B,OAAO,CAAC,QAAQ;YAQF,YAAY;YAoBZ,eAAe;YAoBf,WAAW;IAkBzB;;;;;;;;;;;;;;;;;OAiBG;YAYW,UAAU;YAmCV,SAAS;YAuBT,cAAc;YAed,iBAAiB;IAoB/B;;2DAEuD;YACzC,QAAQ;YAyBR,aAAa;YAkBb,gBAAgB;IAkB9B;;;;oEAIgE;IAChE,OAAO,CAAC,WAAW;IAanB,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAOrB;IAEF,OAAO,CAAC,QAAQ,CAAC,EAAE,CAKjB;IAEF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAErB;IAEF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAOvB;IAEF;mFAC+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,KAAK,CAcpB;IAEF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAC2D;IAEnF,OAAO,CAAC,QAAQ,CAAC,GAAG,CACuE;CAC5F"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../sidecar/server.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,SAAS,EAEmC,UAAU,EAAE,kBAAkB,EAAE,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EACxJ,YAAY,EAAE,eAAe,EAAe,eAAe,EAAE,WAAW,EACxE,WAAW,EAAE,eAAe,EAAE,WAAW,EAAE,gBAAgB,EAC3D,oBAAoB,EAAE,mBAAmB,EAAE,oBAAoB,EAC/D,gBAAgB,EAAE,eAAe,EAClC,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAEL,KAAK,cAAc,EAAE,KAAK,UAAU,EAAoC,KAAK,WAAW,EACxF,KAAK,aAAa,EAAE,KAAK,eAAe,EACxC,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,KAAK,mBAAmB,EAE9D,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAoB,KAAK,0BAA0B,EAAkD,MAAM,YAAY,CAAC;AAE/H;6EAC6E;AAC7E,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;IAAE,CAAC,EAAE,gBAAgB,CAAA;CAAE,CAAC,EAAE,GAAG,CAAC,CAAC;AAEpF;;;;;;qFAMqF;AACrF,MAAM,WAAW,yBAAyB;IACxC;;;qEAGiE;IACjE,MAAM,CAAC,MAAM,EAAE;QACb,IAAI,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAAC;QAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,GAAG,SAAS,GAAG,YAAY,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvH;;2EAEmE;QACnE,WAAW,CAAC,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;QAChD,aAAa,CAAC,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;QACjD;2EACmE;QACnE,kBAAkB,CAAC,CAAC,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;KACnD,EAAE,QAAQ,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,IAAI,CAAC;IACtG;;;;;;;uBAOmB;IACnB,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrF;AAED;;;;;kFAKkF;AAClF,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;IAChD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE;QAC5B,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QACzD,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;KAC9B,GAAG;QAAE,MAAM,EAAE;YAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,UAAU,EAAE,MAAM,CAAA;aAAE,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,MAAM,EAAE,MAAM,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACnJ;AAED;;;;;;;;;;;;qBAYqB;AACrB,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACzG,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACtG;mDAC+C;IAC/C,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtG;;gDAE4C;IAC5C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7C;6EACyE;IACzE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACrF;mFAC+E;IAC/E,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACnF;8EAC0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD;;;oCAGgC;IAChC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAClG,SAAS,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACxD;AAED;;;;;;;;;;;;qBAYqB;AACrB,MAAM,WAAW,aAAa;IAC5B,IAAI,IAAI,UAAU,EAAE,CAAC;IACrB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1E,0DAA0D;IAC1D,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;;;;;;;;;gDAYgD;AAChD,MAAM,WAAW,iBAAiB;IAChC,WAAW,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;IACxC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1F,QAAQ,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5F,KAAK,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACxF,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1F,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACtG,6EAA6E;IAC7E,eAAe,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,UAAU,EAAE,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrK,YAAY,IAAI,UAAU,EAAE,CAAC;IAC7B;;4CAEwC;IACxC,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACtD;;;gFAG4E;IAC5E,eAAe,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CACjE;AAED;;;;;;;;;uEASuE;AACvE,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvF,KAAK,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACvC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACrD;AAED;;;;;;;;;;;;;sDAasD;AACtD,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,WAAW,CAAC,IAAI,MAAM,GAAG,IAAI,CAAC;CAC/B;AAID;;;;;;;;;8BAS8B;AAC9B,MAAM,WAAW,WAAW;IAC1B,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzI,WAAW,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjF;AAED;;;;;;;;;;;;;;;;;;gFAkBgF;AAChF,MAAM,WAAW,YAAY;IAC3B;0DACsD;IACtD,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/B;;wCAEoC;IACpC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/E,2EAA2E;IAC3E,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,IAAI,CAAC;CACrC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AAiBH,MAAM,WAAW,eAAe;IAC9B,WAAW,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC,CAAC;IACjG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAC/E;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CACxF,CAAC;IACF,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,UAAU;IACzB;;2DAEuD;IACvD,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAC3E;;;gFAG4E;IAC5E,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3E;;0EAEsE;IACtE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACvF;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,cAAc,CAAC;IACxB,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB;gFAC4E;IAC5E,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB;4FACwF;IACxF,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B;iFAC6E;IAC7E,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;+CAG2C;IAC3C,UAAU,CAAC,EAAE,yBAAyB,CAAC;IACvC;;kEAE8D;IAC9D,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB;;0CAEsC;IACtC,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB;;kDAE8C;IAC9C,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;4EAGwE;IACxE,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;;;;gCAM4B;IAC5B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;2EAIuE;IACvE,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;wEAEoE;IACpE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;;;;;;;4BAUwB;IACxB,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAClE;;;;uEAImE;IACnE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;;4DAKwD;IACxD,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;6BAGyB;IACzB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;;4BAIwB;IACxB,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B;;6CAEyC;IACzC,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B;;mCAE+B;IAC/B,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;yDAGqD;IACrD,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;8EAC0E;IAC1E,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB;;;yEAGqE;IACrE,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,KAAK,MAAM,CAAC;IACzF;;;;;;;;;;;;;;;OAeG;IACH,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC;IAChC;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzF;;;;uDAImD;IACnD,QAAQ,CAAC,EAAE,0BAA0B,CAAC;IACtC;;4EAEwE;IACxE,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD;;iCAE6B;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,6EAA6E;AAC7E,eAAO,MAAM,iBAAiB,QAAS,CAAC;AACxC;6DAC6D;AAC7D,eAAO,MAAM,iBAAiB,IAAI,CAAC;AAQnC;;;;mEAImE;AACnE,eAAO,MAAM,mBAAmB,OAAQ,CAAC;AAmHzC,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAiB;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuB;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IACtD,OAAO,CAAC,MAAM,CAAS;IACvB,gEAAgE;IAChE,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,kBAAkB,CAAwB;IAClD,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D;;0DAEsD;IACtD,OAAO,CAAC,YAAY,CAA6B;IACjD;;;;;;gFAM4E;IAC5E,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B;uEACmE;IACnE,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B;;8EAE0E;IAC1E,OAAO,CAAC,QAAQ,CAAyB;IACzC;;;;;qBAKiB;IACjB,OAAO,CAAC,cAAc,CAAiC;IACvD;;;;;8BAK0B;IAC1B,OAAO,CAAC,cAAc,CAAiE;IACvF;;;;;;;mCAO+B;IAC/B,OAAO,CAAC,qBAAqB,CAAC,CAAyC;IACvE;;;wDAGoD;IACpD,OAAO,CAAC,MAAM,CAAS;IACvB;;;4EAGwE;IACxE,OAAO,CAAC,QAAQ,CAAC,CAAU;IAC3B;;2EAEuE;IACvE,OAAO,CAAC,cAAc,CAAC,CAAa;IACpC;;;8EAG0E;IAC1E,OAAO,CAAC,OAAO,CAAC,CAAS;IACzB,uEAAuE;IACvE,OAAO,CAAC,WAAW,CAAC,CAAa;IACjC;wDACoD;IACpD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IAEtD;;;;iEAI6D;IAC7D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,SAAS,CAA2B;gBAEhC,IAAI,EAAE,oBAAoB;IAsEtC,OAAO,CAAC,SAAS;IAoTjB,qDAAqD;IACrD,OAAO,CAAC,gBAAgB;YAQV,OAAO;IAsOrB;;;;;+DAK2D;IAC3D,OAAO,CAAC,sBAAsB;IAM9B;;;;;;0DAMsD;YACxC,oBAAoB;IAuBlC;;;;;;;uBAOmB;YACL,sBAAsB;IA0BpC;gEAC4D;YAC9C,cAAc;IAiB5B;;;eAGW;IACX,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,WAAW;IAgHnB;;sEAEkE;YACpD,SAAS;IAuCvB;;;;gEAI4D;IAC5D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqC;IAElE,OAAO,CAAC,eAAe;YAMT,SAAS;IAsGvB,OAAO,CAAC,YAAY;IASpB;;wBAEoB;IACpB,OAAO,CAAC,YAAY;IAMpB;;mDAE+C;IAC/C,OAAO,CAAC,gBAAgB;YAoBV,WAAW;IA6BzB;4EACwE;IACxE,OAAO,CAAC,YAAY;IAoBpB,mEAAmE;IACnE,OAAO,CAAC,YAAY;YASN,QAAQ;IAyCtB;;;;;;;;;uCASmC;YACrB,UAAU;YA4BV,YAAY;YAcZ,WAAW;IAczB;;;;;;;OAOG;IACH,OAAO,CAAC,WAAW;IA+CnB;kDAC8C;IAC9C,OAAO,CAAC,WAAW;IAYnB;;;;;;;;;OASG;YACW,YAAY;IAa1B;+EAC2E;YAC7D,eAAe;IAW7B;;;;iBAIa;YACC,YAAY;YAcZ,KAAK;IA6EnB;;;;;4EAKwE;IACxE,OAAO,CAAC,uBAAuB;YAQjB,aAAa;YAYb,UAAU;YAeV,aAAa;IAgB3B;wEACoE;YACtD,WAAW;IAYzB,OAAO,CAAC,SAAS;IAIjB;;;;;;;;;OASG;YACW,aAAa;IA4B3B,OAAO,CAAC,gBAAgB;YAyBV,eAAe;IA0C7B;;;;uBAImB;IACnB,OAAO,CAAC,YAAY;YASN,YAAY;YAwBZ,iBAAiB;YAyBjB,eAAe;YAUf,iBAAiB;IAc/B,wEAAwE;IACxE,OAAO,CAAC,aAAa;YAUP,WAAW;YAeX,WAAW;YAcX,kBAAkB;YAiBlB,YAAY;IAY1B;;;;gFAI4E;IAC5E,OAAO,CAAC,YAAY;YAUN,eAAe;YAaf,iBAAiB;YAajB,UAAU;YAyEV,UAAU;YAsCV,UAAU;YAgDV,YAAY;IAe1B;;;;;;;;;;;yEAWqE;IACrE,OAAO,CAAC,YAAY;IAyBpB,OAAO,CAAC,QAAQ;YASF,YAAY;YAoBZ,eAAe;YAoBf,WAAW;IAkBzB;;;;;;;;;;;;;;;;;OAiBG;YAYW,UAAU;YAmCV,SAAS;YAuBT,cAAc;YAed,iBAAiB;IAoB/B;;2DAEuD;YACzC,QAAQ;YAyBR,aAAa;YAkBb,gBAAgB;IAkB9B;;;;oEAIgE;IAChE,OAAO,CAAC,WAAW;IAanB,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAOrB;IAEF,OAAO,CAAC,QAAQ,CAAC,EAAE,CAKjB;IAEF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAErB;IAEF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAOvB;IAEF;mFAC+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,KAAK,CAcpB;IAEF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAC2D;IAEnF,OAAO,CAAC,QAAQ,CAAC,GAAG,CACuE;CAC5F"}