@decionis/agent-safe-pipeline 0.3.7 → 0.4.0

package/dist/execution/GovernedExecutionRunner.d.ts

@@ -0,0 +1,309 @@
+import type { AuditRecorder } from "../audit/AuditRecorder.js";
+import { type DecisionAuthority, type DecisionEvidence, type DecisionGate } from "../decision/DecisionAuthority.js";
+import type { CapturedIntent, IntentActor } from "../intent/ExecutionIntent.js";
+import { IntentCapture } from "../intent/IntentCapture.js";
+import type { JsonObject } from "../intent/JsonValue.js";
+import type { AuthorizationVerifier, ExecutionCommitOutcome, VerifiedAuthorization } from "./AuthorizationVerifier.js";
+import { type ExecutionJournal } from "./ExecutionJournal.js";
+import type { DispatchedAttempts, ExecutionBlockedResult, ExecutionHeldResult, ExecutionReconciliationResult, ExecutionRecoveryReference, ExecutionSettlement, HeldClaimResult, HeldExecution, PermitHeldResult, PermitPresentationResult, SafeExecutionResult } from "./ExecutionOutcome.js";
+import { type ExecutionPosture } from "./ExecutionPosture.js";
+import { type ExecutorEvidenceSink } from "./ExecutorEvidence.js";
+import { type ExecutorScope, type NativeExecutor } from "./NativeExecutor.js";
+export interface GovernedExecutionRunnerOptions {
+    /** Claims, finalization and reconciliation reports: the authority, through its verifier. */
+    readonly verifier: AuthorizationVerifier;
+    readonly audit?: AuditRecorder | undefined;
+    /** Who decides, for `submit`; a run handed a decision never asks it. */
+    readonly authority?: DecisionAuthority;
+    /** How `submit` captures intents; a fresh `IntentCapture` by default. */
+    readonly capture?: IntentCapture;
+    /** Durable claims and single-use idempotency keys. Absent, the runner journals nothing. */
+    readonly journal?: ExecutionJournal;
+    /** Where `agent-safe.executor-evidence/1` lines go. */
+    readonly evidence?: ExecutorEvidenceSink;
+    /** What a surface does when the authority cannot be reached; strict by default. */
+    readonly posture?: ExecutionPosture;
+    /**
+     * The enforcement boundary this process is. When it is set, an intent is
+     * executable here only if it was captured here.
+     */
+    readonly boundaryId?: string;
+    /** The digest of the workload this process runs as; an intent another artifact proposed is refused. */
+    readonly workloadDigest?: string;
+    /**
+     * This process's own record of the attempts it dispatched, which a
+     * recovery reference is held against. Defaults to the journal, when there
+     * is one.
+     */
+    readonly attempts?: DispatchedAttempts;
+    /** The configured dispatch timeout; the deadline is the smallest of this, the grant and the lease. */
+    readonly timeoutMs?: number;
+    /**
+     * Refuse a dispatch whose window has already closed, before the executor is
+     * called. On by default. The `SafeExecutor` facade turns it off because its
+     * handlers bound their own dispatch, exactly as they did before the runner.
+     */
+    readonly enforceDispatchWindow?: boolean;
+    /**
+     * Report a proven reconciliation to the authority through the verifier.
+     * On by default; the `SafeExecutor` facade turns it off so that a facade
+     * caller sees exactly the authority traffic it saw before.
+     */
+    readonly reportReconciliations?: boolean;
+    readonly clock?: () => number;
+}
+/** A run handed an existing decision. */
+export interface RunRequest<TAction> {
+    readonly captured: CapturedIntent;
+    readonly decision: DecisionGate;
+    readonly action: TAction;
+    readonly scope?: ExecutorScope | null;
+}
+/** A run from the action alone: prepare, capture, decide, then run or hold. */
+export interface SubmitRequest<TAction> {
+    readonly action: TAction;
+    readonly scope: ExecutorScope;
+    /** Who is acting; never the agent's own claim about itself. */
+    readonly actor: IntentActor;
+    readonly evidence?: DecisionEvidence;
+    readonly correlationId?: string;
+}
+export interface ReconcileRequest<TAction> {
+    readonly captured: CapturedIntent;
+    readonly recovery: ExecutionRecoveryReference;
+    readonly action: TAction;
+    readonly scope?: ExecutorScope | null;
+}
+export type GovernedRunResult<TResult = unknown> = SafeExecutionResult<TResult> | ExecutionHeldResult | PermitHeldResult;
+export interface SubmitResult<TResult = unknown> {
+    readonly captured: CapturedIntent;
+    readonly decision: DecisionGate;
+    readonly result: GovernedRunResult<TResult>;
+}
+/** A settlement input: the outcome a caller observed, or the native receipt for the executor to read. */
+export type SettlementInput<TReceipt> = {
+    readonly outcome: ExecutionCommitOutcome;
+    readonly signedReceipt?: string | null;
+} | {
+    readonly receipt: TReceipt;
+    readonly signedReceipt?: string | null;
+};
+/**
+ * The one implementation of everything around a native write. Every executor,
+ * on every platform, runs through it, and none of them does any of this
+ * itself:
+ *
+ * - **admission**: an authoritative ALLOW (or PROCEED) only, never after a
+ *   fail-closed gate, only with a dossier, only for the intent that was
+ *   decided, at the boundary and by the workload that captured it, and only
+ *   through a capability the connection has;
+ * - **authority calls**, through the `DecisionAuthority` and
+ *   `AuthorizationVerifier` seams: the decision, one single-use claim, the
+ *   receipt (finalization), and the reconciliation;
+ * - **execution control**: the dispatch deadline, the journal's durable claim
+ *   and single-use idempotency key, and reconciliation after an outcome
+ *   nobody knows;
+ * - **failure posture** when the authority cannot be reached;
+ * - **evidence**: the audit trail and the `agent-safe.executor-evidence/1`
+ *   line, and the six outcomes every run ends in.
+ *
+ * Dispatch-style executors write inside the dispatch the runner opens. A
+ * permit-style executor's grant is held at admission; the native boundary
+ * presents the permit, which claims the grant once, and a later receipt
+ * settles it.
+ */
+export declare class GovernedExecutionRunner {
+    private readonly hasher;
+    private readonly verifier;
+    private readonly audit;
+    private readonly authority;
+    private readonly capture;
+    private readonly journal;
+    private readonly evidence;
+    private readonly posture;
+    private readonly boundaryId;
+    private readonly workloadDigest;
+    private readonly attempts;
+    private readonly timeoutMs;
+    private readonly enforceDispatchWindow;
+    private readonly reportReconciliations;
+    private readonly clock;
+    /** The holds this runner issued and nobody has claimed, keyed by the frozen handle. */
+    private readonly holds;
+    /** The holds claimed and not yet settled, with the authorization each one consumed. */
+    private readonly claims;
+    /** The holds already settled, so a second receipt is told so rather than "never presented". */
+    private readonly settled;
+    constructor(options: GovernedExecutionRunnerOptions);
+    /**
+     * The whole path from an action: the executor prepares it, the runner
+     * captures the intent and asks the authority, then runs it (dispatch) or
+     * holds it for the boundary (permit). An authority that throws is a
+     * fail-closed decision, never an authorization.
+     */
+    submit<TAction, TResult = unknown>(executor: NativeExecutor<TAction, unknown, TResult>, request: SubmitRequest<TAction>): Promise<SubmitResult<TResult>>;
+    /**
+     * Runs a decided intent. A dispatch-style executor writes once, inside the
+     * dispatch; a permit-style executor's grant is held instead, as `hold`
+     * would, because the boundary performs its write.
+     */
+    run<TAction, TResult = unknown>(executor: NativeExecutor<TAction, unknown, TResult>, request: RunRequest<TAction>): Promise<GovernedRunResult<TResult>>;
+    /** Runs a decided intent through a dispatch-style write, whatever the executor's style says. */
+    dispatch<TAction, TResult = unknown>(executor: NativeExecutor<TAction, unknown, TResult>, request: RunRequest<TAction>): Promise<SafeExecutionResult<TResult>>;
+    /**
+     * Admits a decision exactly as a run would and holds its grant instead of
+     * consuming it. The intent, the decision and the hold are recorded; the
+     * grant stays unclaimed until the boundary presents it, and an unclaimed
+     * hold simply expires with its grant. A permit-style executor's hold
+     * carries the permit the boundary presents.
+     */
+    hold<TAction, TResult = unknown>(executor: NativeExecutor<TAction, unknown, TResult>, request: RunRequest<TAction>): Promise<ExecutionHeldResult | PermitHeldResult | ExecutionBlockedResult>;
+    /**
+     * Admits a hold this runner did not make: one another replica made, or
+     * this process made before a restart, read back from a store the replicas
+     * share. Every check a hold makes is made again on the way in, and the
+     * record says the hold was adopted. Adoption adds no authority: the grant
+     * is still the authority's to hand out once, so a hold claimed elsewhere is
+     * refused at the claim by the authority, never admitted twice here.
+     */
+    adoptHold<TAction, TResult = unknown>(executor: NativeExecutor<TAction, unknown, TResult>, request: RunRequest<TAction>): Promise<ExecutionHeldResult | PermitHeldResult | ExecutionBlockedResult>;
+    /**
+     * Registers a claim this runner did not make, so that `settle` can finalize
+     * it here: the hold's intent and decision, and the authorization the claim
+     * returned, as the store that shared them kept them. Nothing is consumed
+     * and nothing is checked against the authority.
+     */
+    adoptClaim<TAction>(executor: NativeExecutor<TAction, unknown, unknown>, request: RunRequest<TAction>, authorization: VerifiedAuthorization, material?: JsonObject | null): HeldExecution;
+    /**
+     * What another process needs to finalize a claim this runner's verifier
+     * made, for a store the replicas share to keep sealed; null when the
+     * verifier keeps its claims to itself or did not make this one.
+     */
+    claimMaterial(authorization: VerifiedAuthorization): JsonObject | null;
+    /**
+     * The boundary presents a held permit: the grant is claimed, once. The
+     * handle is forgotten before the verifier is asked, so a second
+     * presentation of the same hold, concurrent or later, is refused here
+     * without reaching the authority; a handle this runner did not issue is
+     * refused the same way. A permit-style executor then issues the claimed
+     * permit the boundary writes with.
+     */
+    present(held: HeldExecution): Promise<PermitPresentationResult | HeldClaimResult>;
+    /**
+     * Settles a presented execution, once, from what the boundary reported:
+     * the outcome it observed, or its native receipt for the executor to read.
+     * `COMMITTED` when the effect happened, `FAILED` when it definitively did
+     * not, `INDETERMINATE` when nobody can say. A second receipt is refused and
+     * changes nothing that was recorded.
+     */
+    settle<TReceipt = unknown, TResult = unknown>(held: HeldExecution, input: SettlementInput<TReceipt>): Promise<ExecutionSettlement<TResult>>;
+    /**
+     * Resolves an attempt whose outcome was lost. The recovery reference is
+     * the caller's claim until this runner's own record confirms it; the
+     * executor is asked read-only, and nothing is ever dispatched again. A
+     * proven answer is reported to the authority as evidence.
+     */
+    reconcile<TAction, TResult = unknown>(executor: NativeExecutor<TAction, unknown, TResult>, request: ReconcileRequest<TAction>): Promise<ExecutionReconciliationResult<TResult>>;
+    private holdWith;
+    /**
+     * Every check made before a grant may be consumed, with the evidence that
+     * the intent was captured and decided. A refusal is recorded and returned.
+     * The executor prepares the action last, so a malformed action is refused
+     * the way it always was, after the decision's own checks.
+     */
+    private admit;
+    /**
+     * A decision that is not an authoritative ALLOW. When it failed closed the
+     * posture says what the surface may do; the runner refuses either way, and
+     * never writes without a grant.
+     */
+    private notAllowed;
+    /**
+     * Opens the attempt in the journal, after admission and before anything is
+     * consumed: a key already dispatched under, or a journal that cannot take
+     * the record, is refused while the grant is still intact.
+     */
+    private openAttempt;
+    /**
+     * Consumes the grant through the verifier, checks what came back against
+     * the decision and the intent, makes the claim durable, and records the
+     * consumption and the start of execution. Nothing here dispatches.
+     */
+    private consume;
+    /**
+     * The write, inside the dispatch boundary the runner opens, and its
+     * observation. Whatever the executor says, the boundary decides which side
+     * of it an error fell: before it nothing was sent, after it a refusal is a
+     * refusal only if the platform said so, and anything else is unknown. The
+     * runner never moves "nobody knows" to "definitely not".
+     */
+    private write;
+    /** The permit a presented, claimed hold writes with; null when the executor issued none. */
+    private issuePermit;
+    /** What the executor reads a permit-style receipt as; a receipt it cannot read is unknown. */
+    private observeReceipt;
+    /** The terminal result of a dispatched write, finalized and recorded. */
+    private concluded;
+    /**
+     * Reports the attempt outcome to the verifier's authority, with the
+     * provider's effect receipt and the executor's observation when the attempt
+     * brought them back. A missing, failing, or malformed finalization can
+     * never alter the execution result.
+     */
+    private finalize;
+    /** The journal and the authority hear of a proven reconciliation; neither can change its result. */
+    private reconciled;
+    private static finalizationCode;
+    private static settledEvent;
+    private static outcomeOf;
+    private static observationOf;
+    /**
+     * Observational artifacts carry an explicit non-authoritative marker. They
+     * must never be interpreted as a `DecisionGate`, even after an unsafe cast
+     * or a JSON round trip.
+     */
+    private static isAuthoritativeDecision;
+    /**
+     * Whether this boundary is the one the intent was captured through. The
+     * boundary is read back out of the hashed context, so an intent whose
+     * boundary was edited after capture fails conformance before it reaches
+     * here, and one that never named a boundary cannot acquire one now.
+     */
+    private boundaryMatches;
+    /**
+     * Whether the workload that proposed the intent is the one running it. Like
+     * the boundary, the digest is read back out of the hashed context.
+     */
+    private workloadMatches;
+    private intentConforms;
+    /** The executor's description of the action, held to the decided intent field by field. */
+    private preparedMatches;
+    /**
+     * The connection must be able to take the write: connected, scope granted,
+     * switched on, for this action type on this platform. The refusal names
+     * what is missing in the Commerce executor's own words.
+     */
+    private static capabilityGap;
+    private block;
+    private failedBeforeDispatch;
+    private record;
+    /** Closes the attempt in the journal; the outcome is already final, so a failure is left to the reconciler. */
+    private close;
+    private appendQuietly;
+    private emitAdmission;
+    private emit;
+    /**
+     * What a step's result says, in the fields an evidence line and a closing
+     * journal record carry: one case per outcome, so no outcome is described by
+     * another's fields.
+     */
+    private static summaryOf;
+    private emitLine;
+    private static recoveryReference;
+    private static sameBinding;
+    private static authorizationFrom;
+    /** The journal, read as the attempts a recovery reference is held against. */
+    private static journalAttempts;
+    private static journalCode;
+}
+//# sourceMappingURL=GovernedExecutionRunner.d.ts.map

package/dist/execution/GovernedExecutionRunner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GovernedExecutionRunner.d.ts","sourceRoot":"","sources":["../../src/execution/GovernedExecutionRunner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAkC,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/F,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,kCAAkC,CAAC;AAG1C,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAEhF,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,wBAAwB,CAAC;AAEpE,OAAO,KAAK,EAEV,qBAAqB,EACrB,sBAAsB,EAEtB,qBAAqB,EACtB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAgB,KAAK,gBAAgB,EAAsB,MAAM,uBAAuB,CAAC;AAChG,OAAO,KAAK,EACV,kBAAkB,EAClB,sBAAsB,EAEtB,mBAAmB,EAGnB,6BAA6B,EAC7B,0BAA0B,EAC1B,mBAAmB,EAEnB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAGL,KAAK,gBAAgB,EAEtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAKL,KAAK,oBAAoB,EAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,cAAc,EAEpB,MAAM,qBAAqB,CAAC;AAK7B,MAAM,WAAW,8BAA8B;IAC7C,4FAA4F;IAC5F,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IAC3C,wEAAwE;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IACvC,yEAAyE;IACzE,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IACjC,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;IACpC,uDAAuD;IACvD,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IACzC,mFAAmF;IACnF,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,uGAAuG;IACvG,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IACvC,sGAAsG;IACtG,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CAC/B;AAED,yCAAyC;AACzC,MAAM,WAAW,UAAU,CAAC,OAAO;IACjC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;CACvC;AAED,+EAA+E;AAC/E,MAAM,WAAW,aAAa,CAAC,OAAO;IACpC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB,CAAC,OAAO;IACvC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;CACvC;AAED,MAAM,MAAM,iBAAiB,CAAC,OAAO,GAAG,OAAO,IAC7C,mBAAmB,CAAC,OAAO,CAAC,GAAG,mBAAmB,GAAG,gBAAgB,CAAC;AAExE,MAAM,WAAW,YAAY,CAAC,OAAO,GAAG,OAAO;IAC7C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;CAC7C;AAED,yGAAyG;AACzG,MAAM,MAAM,eAAe,CAAC,QAAQ,IAChC;IAAE,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACpF;IAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAsD3E;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IACtD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4B;IAClD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgC;IAC1D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgB;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAClD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmB;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgB;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgB;IAC/C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IACrD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAU;IAChD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAU;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,uFAAuF;IACvF,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA2C;IACjE,uFAAuF;IACvF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4C;IACnE,+FAA+F;IAC/F,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgC;gBAErC,OAAO,EAAE,8BAA8B;IAiB1D;;;;;OAKG;IACU,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,EAC5C,QAAQ,EAAE,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EACnD,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,GAC9B,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IA8BjC;;;;OAIG;IACU,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,EACzC,QAAQ,EAAE,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EACnD,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,GAC3B,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAKtC,gGAAgG;IACnF,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,EAC9C,QAAQ,EAAE,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EACnD,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,GAC3B,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IA0DxC;;;;;;OAMG;IACU,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,EAC1C,QAAQ,EAAE,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EACnD,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,GAC3B,OAAO,CAAC,mBAAmB,GAAG,gBAAgB,GAAG,sBAAsB,CAAC;IAI3E;;;;;;;OAOG;IACU,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,EAC/C,QAAQ,EAAE,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EACnD,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,GAC3B,OAAO,CAAC,mBAAmB,GAAG,gBAAgB,GAAG,sBAAsB,CAAC;IAI3E;;;;;OAKG;IACI,UAAU,CAAC,OAAO,EACvB,QAAQ,EAAE,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EACnD,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,EAC5B,aAAa,EAAE,qBAAqB,EACpC,QAAQ,GAAE,UAAU,GAAG,IAAW,GACjC,aAAa;IA8BhB;;;;OAIG;IACI,aAAa,CAAC,aAAa,EAAE,qBAAqB,GAAG,UAAU,GAAG,IAAI;IAK7E;;;;;;;OAOG;IACU,OAAO,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,wBAAwB,GAAG,eAAe,CAAC;IAsE9F;;;;;;OAMG;IACU,MAAM,CAAC,QAAQ,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,EACvD,IAAI,EAAE,aAAa,EACnB,KAAK,EAAE,eAAe,CAAC,QAAQ,CAAC,GAC/B,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAiFxC;;;;;OAKG;IACU,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,EAC/C,QAAQ,EAAE,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EACnD,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,GACjC,OAAO,CAAC,6BAA6B,CAAC,OAAO,CAAC,CAAC;YAoHpC,QAAQ;IA2DtB;;;;;OAKG;YACW,KAAK;IA8DnB;;;;OAIG;YACW,UAAU;IAqBxB;;;;OAIG;YACW,WAAW;IAuCzB;;;;OAIG;YACW,OAAO;IAgGrB;;;;;;OAMG;YACW,KAAK;IAwEnB,4FAA4F;YAC9E,WAAW;IA2CzB,8FAA8F;YAChF,cAAc;IAiB5B,yEAAyE;YAC3D,SAAS;IAqGvB;;;;;OAKG;YACW,QAAQ;IAyBtB,oGAAoG;YACtF,UAAU;IAiDxB,OAAO,CAAC,MAAM,CAAC,gBAAgB;IAI/B,OAAO,CAAC,MAAM,CAAC,YAAY;IAM3B,OAAO,CAAC,MAAM,CAAC,SAAS;IAQxB,OAAO,CAAC,MAAM,CAAC,aAAa;IAO5B;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAQtC;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IAKvB;;;OAGG;IACH,OAAO,CAAC,eAAe;IAKvB,OAAO,CAAC,cAAc;IAetB,2FAA2F;IAC3F,OAAO,CAAC,eAAe;IAsBvB;;;;OAIG;mBACkB,aAAa;YAsBpB,KAAK;YA0BL,oBAAoB;YAmCpB,MAAM;IAOpB,+GAA+G;YACjG,KAAK;YAaL,aAAa;YAWb,aAAa;YAmBb,IAAI;IAmBlB;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,SAAS;YAkFV,QAAQ;IAuDtB,OAAO,CAAC,MAAM,CAAC,iBAAiB;IAoBhC,OAAO,CAAC,MAAM,CAAC,WAAW;IAa1B,OAAO,CAAC,MAAM,CAAC,iBAAiB;IAUhC,8EAA8E;IAC9E,OAAO,CAAC,MAAM,CAAC,eAAe;IAQ9B,OAAO,CAAC,MAAM,CAAC,WAAW;CAG3B"}