@dsh-edge/dsh-edge-agent 0.0.0-stage → 0.1.1

package/lib/dsh-adapter/edge-config.d.ts

@@ -0,0 +1,484 @@
+/**
+ * edge-config — the single read point for dsh-edge-agent runtime settings.
+ *
+ * §7.102 (2026-10-21): replaces the two previous chains:
+ *
+ *   old:  .env (bare names)  →  .env.sh (export DSH_EDGE_* derived)  →  cordis.patch.yml
+ *         (process.env.DSH_EDGE_LOCAL_LLM_BASEURL, etc.)
+ *
+ *   new:  config/edge.json  →  this loader  →  plugin Config
+ *
+ * Why the old chain could not serve every profile:
+ *
+ *   - dsh-tui / dsh-web / dsh-edge (CLI): install.sh sourced
+ *     ~/.dsh/profiles/<p>/.env.sh, so the derived DSH_EDGE_* vars were
+ *     present in the process env.
+ *   - desktop (DeepSeek Harness.exe, Electron): started by the GUI, never
+ *     goes through install.sh, so process.env had none of them. Every
+ *     `!!js process.env.DSH_EDGE_LOCAL_LLM_BASEURL || undefined` in the
+ *     patch resolved to undefined and the plugin fell back to its Schema
+ *     default (127.0.0.1:8080 — a port owned by an unrelated daemon).
+ *
+ * The new chain has no process-level dependency: the plugin reads the JSON
+ * file itself, so a file that ships inside the bundle works identically in
+ * every profile.
+ *
+ * Lookup order (first hit wins) — §7.182 (2026-11-11, operator ruling):
+ *   1. <bundle root>/config/edge.json      — the INSTALLED bundle's own config
+ *      directory. "插件装在哪，配置就在哪" — the user opens the plugin folder
+ *      and finds the file they are supposed to edit. (§7.182: in a SOURCE
+ *      CHECKOUT this candidate is SKIPPED — see isSourceCheckout() below —
+ *      because the repository's config/ directory is no longer a supported
+ *      drop point.)
+ *   2. ~/.dsh-edge-agent/edge.json         — the operator's home copy. Survives
+ *      a reinstall, a profile deletion, and every install channel (npm / git
+ *      / tarball), so it is the落点 for anything long-lived.
+ *   (no third candidate — the shipped template is NOT read at runtime; the
+ *    template's values live in DEFAULT_EDGE_CONFIG below, so "no config file"
+ *    means exactly what the template used to mean.)
+ *
+ * §7.182 (operator ruling): **the repository's config/ directory is no longer
+ * a supported drop point for the live config.** Why:
+ *   - it holds the operator's plaintext API keys, and a git checkout is the
+ *     one place where they can leak into history (§7.178 deleted every such
+ *     local config);
+ *   - the npm / git / tarball channels never had that file anyway (the
+ *     packaging gates exclude `config/edge.json` on purpose), so it was never
+ *     a cross-channel location;
+ *   - a source checkout and an installed bundle resolve to the SAME path
+ *     (`edgeBundleRoot()` walks up from this module), so the ruling is
+ *     enforced by isSourceCheckout() — in a checkout, candidate #1 is
+ *     skipped and the runtime reads the same home copy the desktop does.
+ * ⇒ One config, two legal落点: the installed bundle's own config dir (where
+ *   the user looks) and `~/.dsh-edge-agent/edge.json` (where it survives).
+ *
+ * The loader is deliberately read-only and synchronous: config is read once
+ * at plugin apply() time. Hot reload is the caller's job (privacy-policy
+ * already implements its own watcher for its own file).
+ */
+export interface EdgeSecrets {
+    edgeApiKey?: string;
+    deepseekApiKey?: string;
+    dashscopeApiKey?: string;
+    tavilyApiKey?: string;
+    bochaApiKey?: string;
+    /** §7.154: MiniMax 直连凭据（llm.cloud 的旧指向）。 */
+    minimaxApiKey?: string;
+    /** §7.112: 百炼 MaaS（jev 判定模型）。 */
+    bailianApiKey?: string;
+    /** §7.154: 阿里云 token-plan（当前 local/cloud 两池的凭据）。 */
+    aliyuntokenplanApiKey?: string;
+    /**
+     * §7.154: 运行员的槽位是**开放的** —— `resolveSecret` 按名字查表，
+     * 声明式接口不该把新槽位挡在门外（运行时的 env 槽位名就是从槽位名派生的，
+     * 见 scripts/edge-config-from-env.ts 的 fieldToEnvSlot）。
+     */
+    [slot: string]: string | undefined;
+}
+export interface EdgeLlmPool {
+    baseUrl?: string;
+    model?: string;
+    /** Name of a key inside EdgeSecrets. The literal value is never stored
+     *  twice — the pool points at the secret, the loader resolves it. */
+    keyRef?: string;
+    stripTools?: boolean;
+    enableThinking?: boolean;
+    /**
+     * §7.106 (2026-10-23): send `reasoning_effort:"none"` when thinking is off.
+     * ollama's /v1 layer HONORS this dialect (its probe fix); strict gateways
+     * reject unknown params outright (minimax 400 "invalid params" — measured).
+     * Opt-in per pool: true for ollama, omit/false for OpenAI-official-style
+     * providers. Defaults to false — never surprise a gateway that 400s extras.
+     */
+    reasoningEffortNone?: boolean;
+    /**
+     * §7.171 (2026-11-10): DELEGATE 模式（`llm.local` 与 `llm.cloud` 对称）。
+     *
+     * `baseUrl` 留空 = **转发宿主 profile 已配置的模型提供商**（桌面 GUI 选的那个），
+     * 本仓不碰任何 secret；要 edge 自有直连池时填 `baseUrl` + `model` + `keyRef`。
+     *
+     * - `llm.cloud` 留空 ⇒ DELEGATE（§7.100 既有行为）
+     * - `llm.local` 留空 ⇒ DELEGATE（§7.171 新增；此前是「整条路由不注册」）
+     *
+     * ⚠️ delegate 只改变「**谁提供模型**」，**不改变这一域的隐私口径**：
+     * `cloud-llm` 是云池（脱敏 + 只带云段历史）；`local-llm` 是本地池
+     * （不脱敏 + 带全部历史 —— §7.131 裁决的两条不对称规则）。
+     */
+    delegate?: boolean;
+    /** Delegate 模式：显式指定目标 provider route id（优先于宿主选择 / 探针）。 */
+    delegateProvider?: string;
+    /** Delegate 模式：wire model 覆盖（压过宿主选择 / 探针模型）。 */
+    delegateModel?: string;
+}
+/**
+ * `llm.cloud` 的形状 —— 与 `llm.local` 同构（§7.171 两池对称）。
+ *
+ * 用 type alias 而不是 `interface X extends Y {}`：后者在
+ * `@typescript-eslint/no-empty-object-type` 下是违规写法。
+ */
+export type EdgeCloudPool = EdgeLlmPool;
+export interface EdgeStage {
+    provider?: string;
+    model?: string;
+    /** intent-router: category used when no LLM verdict and no keyword matched. */
+    defaultCategory?: string;
+    /** §7.115 (2026-10-25): decision-model-only mode — false = the LLM
+     *  classifier never runs; jev skips go straight to rules + default. */
+    llmFallback?: boolean;
+    enabled?: boolean;
+    timeoutMs?: number;
+    maxInput?: number;
+    confidenceThreshold?: number;
+    recentLimit?: number;
+    cloudKeywords?: string[];
+    localEntities?: string[];
+    fallbackKeywords?: string[];
+    /** §7.124 (2026-10-27): 家庭设备操作正则层的扩展词表（追加到内置词表）。 */
+    deviceCommands?: {
+        devices?: string[];
+        actions?: string[];
+    };
+}
+export interface EdgeJevConfig {
+    /** §7.182 (2026-11-11, owner ruling): the jev decision-model tier is
+     *  **OFF by default**. It is an optional accelerator that needs a local
+     *  decision-model service on 127.0.0.1:8001 (or a Bailian MaaS key);
+     *  with no config file it must not be probed at all. Turn it on
+     *  explicitly with `jev.enabled: true`. */
+    enabled?: boolean;
+    url?: string;
+    /** §7.112 (2026-10-25): backend kind. 'local' = the ONNX /predict
+     *  contract (default); 'bailian-decision' = Alibaba's decision-model
+     *  /systemone structured-decision interface (POST {model, state,
+     *  questions}). */
+    provider?: 'local' | 'bailian-decision';
+    /** §7.112: decision-model id (bailian-decision only, e.g.
+     *  'decision-model-preview'). */
+    model?: string;
+    /** §7.112: secrets keyRef carrying the Bailian MaaS key. */
+    apiKeyRef?: string;
+    /** §7.112: how the key lands in the Authorization header. 'raw' =
+     *  `Authorization: <key>` (the org's systemone examples use this);
+     *  'bearer' = `Authorization: Bearer <key>` (DashScope compatible-mode
+     *  convention). Default 'raw'. */
+    authScheme?: 'raw' | 'bearer';
+    /** §7.115: directional confidence gate — a LOCAL-leaning decision-model
+     *  verdict adopts at this floor (default 0.5) instead of paying the LLM
+     *  round-trip; non-LOCAL keeps jev.confidenceThreshold (0.85). */
+    localAdoptFloor?: number;
+    /** §7.114 (2026-10-25): classify path appended to `url`. '/systemone'
+     *  (default) = the MaaS deployments; a local MLX serve of the same
+     *  contract exposes '/v1/classify' — point url at its /v1 and set
+     *  path '/classify'. */
+    path?: string;
+    timeoutMs?: number;
+    confidenceThreshold?: number;
+    riskThreshold?: number;
+    breakerTtlMs?: number;
+    bootProbeEnabled?: boolean;
+    bootProbeTimeoutMs?: number;
+    breakerProbeMs?: number;
+    probeTimeoutMs?: number;
+}
+export interface EdgeFunctionCallExternalConfig {
+    enabled?: boolean;
+    url?: string;
+    timeoutMs?: number;
+    confidenceThreshold?: number;
+    breakerTtlMs?: number;
+    bootProbeEnabled?: boolean;
+    bootProbeTimeoutMs?: number;
+    breakerProbeMs?: number;
+    probeTimeoutMs?: number;
+}
+export interface EdgePrivacyConfig {
+    inputGuardEnabled?: boolean;
+    rejectPolicyEnabled?: boolean;
+    sanitizeDowngradeEnabled?: boolean;
+    realmHotReload?: boolean;
+    realmWatchMs?: number;
+    /** privacy-policy.json path; derived from ~/.dsh-edge-agent when unset. */
+    policyPath?: string;
+    policyHotReload?: boolean;
+    policyWatchMs?: number;
+    /** skill-realms.json path; derived from ~/.dsh-edge-agent when unset. */
+    realmConfigPath?: string;
+    /** Sanitizer session-mapping lifetime (ms). */
+    sanTtlMs?: number;
+    /** Max concurrent sanitizer session mappings before LRU eviction. */
+    sanMaxSessions?: number;
+    /** Sanitizer sweep interval (ms). */
+    sanSweepMs?: number;
+}
+export interface EdgeResourcesConfig {
+    maxSessions?: number;
+    maxBodyBytes?: number;
+    sessionIdleMs?: number;
+    sanMaxSessions?: number;
+    sanSweepMs?: number;
+    sanTtlMs?: number;
+}
+export interface EdgeAuditConfig {
+    minLevel?: string;
+    flushMs?: number;
+    logLevel?: string;
+    logMaxAgeDays?: number;
+    logMaxRotated?: number;
+    /** audit-log plugin storage dir (defaults to ~/.dsh-edge-agent/audit). */
+    root?: string;
+    /** file-logger plugin storage dir (defaults to ~/.dsh-edge-agent/log). */
+    logRoot?: string;
+    /**
+     * §7.118 详细 LLM request/response 追踪的开关组。
+     * 落在 audit 段下（而不是新开顶层段）：它描述的是"日志写什么"，
+     * 与 logLevel / logRoot 同属日志面，不该被当成独立子系统。
+     */
+    llmTrace?: {
+        enabled?: boolean;
+        includeRequest?: boolean;
+        includeResponse?: boolean;
+        maxChars?: number;
+        maxMessages?: number;
+        redactPii?: boolean;
+        redactSecrets?: boolean;
+    };
+}
+export interface EdgeTeeConfig {
+    type?: string;
+    /** tcm keystore directory (defaults to ~/.dsh-edge-agent). */
+    storageRoot?: string;
+    /** Full keystore file path; derived from storageRoot when unset. */
+    keyStorePath?: string;
+}
+export interface EdgeThreatConfig {
+    cloudRate?: number;
+    blockLevel?: string;
+}
+export interface EdgeWebSearchConfig {
+    /** §7.182 (2026-11-11, owner ruling): the Tavily tier is **OFF by
+     *  default** ⇒ out of the box only the DeepSeek tier
+     *  (secrets.deepseekApiKey) is on the chain. Opt in with
+     *  `webSearch.tavilyEnabled: true`. */
+    tavilyEnabled?: boolean;
+    /** §7.182: the 博查 AI tier is **OFF by default** (same rule). */
+    bochaEnabled?: boolean;
+}
+export interface EdgeAgentConfig {
+    persona?: string;
+    localToolsWritable?: boolean;
+    localToolsAllowlist?: string;
+    permissionMode?: string;
+}
+/** local-storage plugin (plaintext JSONL KV root). */
+export interface EdgeStorageConfig {
+    root?: string;
+}
+/** etscli read-only tool wrapper (§7.98). */
+export interface EdgeEtscliConfig {
+    bin?: string;
+    timeoutMs?: number;
+}
+export interface EdgeConfig {
+    secrets?: EdgeSecrets;
+    http?: {
+        host?: string;
+        port?: number;
+    };
+    llm?: {
+        local?: EdgeLlmPool;
+        cloud?: EdgeCloudPool;
+    };
+    stages?: {
+        guard?: EdgeStage;
+        intent?: EdgeStage;
+    };
+    jev?: EdgeJevConfig;
+    functionCallExternal?: EdgeFunctionCallExternalConfig;
+    privacy?: EdgePrivacyConfig;
+    resources?: EdgeResourcesConfig;
+    audit?: EdgeAuditConfig;
+    tee?: EdgeTeeConfig;
+    threat?: EdgeThreatConfig;
+    webSearch?: EdgeWebSearchConfig;
+    agent?: EdgeAgentConfig;
+    storage?: EdgeStorageConfig;
+    etscli?: EdgeEtscliConfig;
+}
+export declare const DEFAULT_EDGE_CONFIG: EdgeConfig;
+/**
+ * Root of the installed bundle (the directory holding `lib/` and
+ * `config/`), or the repo root when running from source.
+ *
+ * src/dsh-adapter/ → repo root (dev) or bundle root (installed).
+ */
+export declare function edgeBundleRoot(): string;
+/**
+ * Is the bundle root a SOURCE CHECKOUT (this repository) rather than an
+ * installed bundle?
+ *
+ * §7.182 (2026-11-11): the repository's `config/` directory is no longer a
+ * supported drop point for the live config — it is where plaintext API keys
+ * would live inside a git checkout. An installed bundle (npm / git / tarball
+ * / local directory) carries `lib/` and `config/` but never `src/`, so the
+ * two are told apart reliably:
+ *
+ *   · source checkout  → `src/dsh-adapter/` exists  → candidate #1 SKIPPED
+ *   · installed bundle → no `src/` tree             → candidate #1 ACTIVE
+ *
+ * ⇒ In a checkout the runtime reads the SAME home copy the desktop does
+ *   (`~/.dsh-edge-agent/edge.json`), so dev and production cannot diverge.
+ */
+export declare function isSourceCheckout(bundleRoot?: string): boolean;
+/**
+ * Candidate paths, in priority order — **exactly two** (§7.182).
+ *
+ *   1. the INSTALLED bundle's own `config/edge.json` — where the user looks
+ *      ("插件装在哪，配置就在哪"); skipped in a source checkout (see
+ *      isSourceCheckout());
+ *   2. `~/.dsh-edge-agent/edge.json` — the durable落点: survives a reinstall,
+ *      a profile deletion, and every install channel.
+ *
+ * There is NO third candidate. The shipped template (`config/edge.example.json`)
+ * used to be candidate #3; §7.182 dropped it, and its values were folded into
+ * DEFAULT_EDGE_CONFIG instead ⇒ "no config file" still means exactly what the
+ * template used to mean. The template file itself keeps shipping — it is what
+ * an operator copies from, not a runtime input.
+ */
+export declare function edgeConfigCandidates(bundleRoot?: string, homeDir?: string): string[];
+/** Path of the file that was actually loaded, or undefined when defaults
+ *  are in use. Exposed for diagnostics / audit.
+ *
+ *  §7.182: 命中的是两档候选里的哪一个（顺位 1 插件目录 / 顺位 2 home）；
+ *  模板 edge.example.json 永远不会是命中项。 */
+export declare function edgeConfigPath(): string | undefined;
+/**
+ * Default data location under the user home (`~/.dsh-edge-agent/...`).
+ * Plugins use this when the corresponding edge.json path field is unset —
+ * the old patch rows derived the same expression via `!!js HOME`, which is
+ * what §7.102's "one config file" rule moves into code.
+ */
+export declare function edgeHome(...segments: string[]): string;
+/**
+ * Apply the env override layer on top of a freshly loaded config.
+ *
+ * §7.154: exported so scripts/edge-config-from-env.ts can apply the SAME
+ * mapping the runtime uses without writing the template to the target file
+ * first. That script used to copy the template over the operator's live
+ * config (destroying every secret that only existed in the real file) even
+ * under --dry-run — it needed this layer, and the file round-trip was the
+ * only way it could reach it.
+ *
+ * Mutates and returns `cfg`.
+ */
+export declare function applyEnvOverrides(cfg: EdgeConfig): EdgeConfig;
+/**
+ * Load the effective configuration. Cached after the first call — callers
+ * that need a re-read can call resetEdgeConfigCache().
+ */
+export declare function loadEdgeConfig(force?: boolean, candidates?: string[]): EdgeConfig;
+/** Drop the cache so the next loadEdgeConfig() re-reads from disk. */
+export declare function resetEdgeConfigCache(): void;
+/**
+ * Merge one section of the edge config into a plugin's cordis Config.
+ *
+ * The cordis patch row no longer carries any local configuration (§7.102) —
+ * it only declares the plugin. The plugin therefore fills its own Config
+ * from this file at apply() time.
+ *
+ * @param section   which section of edge.json to read
+ * @param mapping   config field name -> edge.json field name
+ * @param target    the plugin's Config object, mutated in place
+ * @param ctx       optional logger; when given, changes are logged
+ */
+export declare function mergeEdgeConfig<T extends Record<string, unknown>>(section: keyof EdgeConfig, mapping: Record<string, string>, target: T, logger?: {
+    info?: (msg: string) => void;
+}): T;
+/** Resolve a key reference (e.g. 'dashscopeApiKey') to its literal value. */
+export declare function resolveSecret(cfg: EdgeConfig, ref: string | undefined): string | undefined;
+/**
+ * §7.154: secret references that name a slot that is not there.
+ *
+ * `resolveSecret` returns undefined for a missing slot — correct as a
+ * lookup, dangerous as a CONFIG outcome. Rename or delete a secrets slot
+ * and the pool silently ends up with no credential; the failure surfaces
+ * only at the first call (loudly, as MISSING_CREDENTIAL), which can be a
+ * long way from the edit that caused it.
+ *
+ * Observed 2026-10-29: the operator replaced `secrets.minimaxApiKey` with
+ * `secrets.aliyuntokenplanApiKey` and repointed `llm.local.keyRef` — but
+ * `llm.cloud.keyRef` kept naming the removed slot. The cloud pool was in
+ * DIRECT mode with no credential, and nothing said so at boot.
+ *
+ * Reports FIELD and SLOT NAMES only — never a value.
+ */
+export interface DanglingSecretRef {
+    /** Config path of the reference, e.g. 'llm.cloud.keyRef'. */
+    field: string;
+    /** The slot that was named but is absent (or empty), e.g. 'minimaxApiKey'. */
+    ref: string;
+}
+/**
+ * Every secret reference in the config that points at a slot which is not
+ * there (or is empty).
+ *
+ * @param cfg   the config to inspect; defaults to the effective one
+ */
+export declare function danglingSecretRefs(cfg?: EdgeConfig): DanglingSecretRef[];
+/**
+ * One-line human summary of dangling references, for an operator-facing log.
+ */
+export declare function formatDanglingSecretRefs(refs: DanglingSecretRef[]): string;
+/**
+ * The local-LLM pool with its secret resolved into an api key.
+ *
+ * §7.171: `baseUrl` 留空 = DELEGATE 模式（转发宿主提供商），与 `llm.cloud` 对称。
+ * `delegate: false` 是 kill switch —— 回到 opt-in 语义（不注册任何路由）。
+ */
+export declare function localPool(cfg?: EdgeConfig): {
+    baseUrl?: string;
+    model?: string;
+    apiKey?: string;
+    stripTools: boolean;
+    enableThinking: boolean;
+    reasoningEffortNone: boolean;
+    /** §7.171: baseUrl 留空时是否走 DELEGATE（默认 true）。 */
+    delegate: boolean;
+    delegateProvider?: string;
+    delegateModel?: string;
+};
+/** The cloud-LLM pool. Empty baseUrl means DELEGATE mode. */
+export declare function cloudPool(cfg?: EdgeConfig): {
+    baseUrl?: string;
+    model?: string;
+    apiKey?: string;
+    delegate: boolean;
+    delegateProvider?: string;
+    delegateModel?: string;
+};
+/** §7.112 (2026-10-25): the jev intent-recognizer pool. `apiKey` resolves
+ *  `apiKeyRef` → `secrets.*` — the Bailian MaaS systemone endpoint requires
+ *  an Authorization header, which the local ONNX jev never needed. */
+export declare function jevPool(cfg?: EdgeConfig): {
+    enabled?: boolean;
+    url?: string;
+    provider?: 'local' | 'bailian-decision';
+    model?: string;
+    apiKey?: string;
+    authScheme?: 'raw' | 'bearer';
+    path?: string;
+};
+/**
+ * The model an internal LLM stage should use.
+ *
+ * §7.100 privacy invariant: internal stages (guard detection, intent
+ * classification) must only ever target the LOCAL pool. The stage config
+ * may name a provider, but a cloud provider is refused here — sending the
+ * raw user text to a cloud model would break the edge-side privacy promise.
+ * The caller falls back to its keyword / regex rules when this returns
+ * undefined and no local endpoint is reachable.
+ */
+export declare function stageModel(stage: 'guard' | 'intent', cfg?: EdgeConfig): {
+    provider: string;
+    model?: string;
+} | undefined;
+//# sourceMappingURL=edge-config.d.ts.map

package/lib/dsh-adapter/edge-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"edge-config.d.ts","sourceRoot":"","sources":["../../src/dsh-adapter/edge-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AASH,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,4CAA4C;IAC5C,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,iCAAiC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,oDAAoD;IACpD,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;;OAIG;IACH,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;yEACqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,gDAAgD;IAChD,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,WAAW,CAAA;AAEvC,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;2EACuE;IACvE,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC3B,oDAAoD;IACpD,cAAc,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;CAC5D;AAED,MAAM,WAAW,aAAa;IAC5B;;;;+CAI2C;IAC3C,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;;uBAGmB;IACnB,QAAQ,CAAC,EAAE,OAAO,GAAG,kBAAkB,CAAA;IACvC;qCACiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;sCAGkC;IAClC,UAAU,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAA;IAC7B;;sEAEkE;IAClE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;4BAGwB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,8BAA8B;IAC7C,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAClC,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,qEAAqE;IACrE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,cAAc,CAAC,EAAE,OAAO,CAAA;QACxB,eAAe,CAAC,EAAE,OAAO,CAAA;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,SAAS,CAAC,EAAE,OAAO,CAAA;QACnB,aAAa,CAAC,EAAE,OAAO,CAAA;KACxB,CAAA;CACF;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC;;;2CAGuC;IACvC,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,gEAAgE;IAChE,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,sDAAsD;AACtD,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,6CAA6C;AAC7C,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,EAAE,WAAW,CAAA;IACrB,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACvC,GAAG,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,WAAW,CAAC;QAAC,KAAK,CAAC,EAAE,aAAa,CAAA;KAAE,CAAA;IACpD,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,SAAS,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,CAAA;KAAE,CAAA;IAClD,GAAG,CAAC,EAAE,aAAa,CAAA;IACnB,oBAAoB,CAAC,EAAE,8BAA8B,CAAA;IACrD,OAAO,CAAC,EAAE,iBAAiB,CAAA;IAC3B,SAAS,CAAC,EAAE,mBAAmB,CAAA;IAC/B,KAAK,CAAC,EAAE,eAAe,CAAA;IACvB,GAAG,CAAC,EAAE,aAAa,CAAA;IACnB,MAAM,CAAC,EAAE,gBAAgB,CAAA;IACzB,SAAS,CAAC,EAAE,mBAAmB,CAAA;IAC/B,KAAK,CAAC,EAAE,eAAe,CAAA;IACvB,OAAO,CAAC,EAAE,iBAAiB,CAAA;IAC3B,MAAM,CAAC,EAAE,gBAAgB,CAAA;CAC1B;AAID,eAAO,MAAM,mBAAmB,EAAE,UAgIjC,CAAA;AAaD;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAGvC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,GAAE,MAAyB,GAAG,OAAO,CAE/E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,GAAE,MAAyB,EACrC,OAAO,GAAE,MAAkB,GAC1B,MAAM,EAAE,CAqBV;AAED;;;;qCAIqC;AACrC,wBAAgB,cAAc,IAAI,MAAM,GAAG,SAAS,CAEnD;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAEtD;AA+VD;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU,CAY7D;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,UAAQ,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,UAAU,CA4E/E;AAED,sEAAsE;AACtE,wBAAgB,oBAAoB,IAAI,IAAI,CAK3C;AAaD;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/D,OAAO,EAAE,MAAM,UAAU,EACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,MAAM,EAAE,CAAC,EACT,MAAM,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,GACxC,CAAC,CAmBH;AAED,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAI1F;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,iBAAiB;IAChC,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAA;IACb,8EAA8E;IAC9E,GAAG,EAAE,MAAM,CAAA;CACZ;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,UAA6B,GAAG,iBAAiB,EAAE,CAc1F;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAE1E;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,GAAG,GAAE,UAA6B,GAAG;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,OAAO,CAAA;IACnB,cAAc,EAAE,OAAO,CAAA;IACvB,mBAAmB,EAAE,OAAO,CAAA;IAC5B,gDAAgD;IAChD,QAAQ,EAAE,OAAO,CAAA;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB,CAaA;AAED,6DAA6D;AAC7D,wBAAgB,SAAS,CAAC,GAAG,GAAE,UAA6B,GAAG;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,OAAO,CAAA;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB,CAUA;AAGD;;sEAEsE;AACtE,wBAAgB,OAAO,CAAC,GAAG,GAAE,UAA6B,GAAG;IAC3D,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,OAAO,GAAG,kBAAkB,CAAA;IACvC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAA;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,CAWA;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CACxB,KAAK,EAAE,OAAO,GAAG,QAAQ,EACzB,GAAG,GAAE,UAA6B,GACjC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAOlD"}