@elizaos/agent 2.0.0-alpha.358 → 2.0.0-alpha.376

package/packages/app-core/src/api/client.d.ts

@@ -0,0 +1,39 @@
+/**
+ * API client for the backend.
+ *
+ * Thin fetch wrapper + WebSocket for real-time chat/events.
+ * Replaces the gateway WebSocket protocol entirely.
+ *
+ * The ElizaClient class is defined in client-base.ts and re-exported here.
+ * Domain methods are defined via declaration merging + prototype augmentation
+ * in the companion files: client-agent, client-chat, client-wallet,
+ * client-cloud, client-skills, client-computeruse, client-imessage.
+ */
+import type { AllPermissionsState, AudioGenConfig, AudioGenProvider, BrowserWorkspaceSnapshot, BrowserWorkspaceTab, CustomActionDef, CustomActionHandler, DatabaseProviderType, DropStatus, ImageConfig, ImageProvider, MediaConfig, MediaMode, MintResult, PermissionState, PermissionStatus, ReleaseChannel, SystemPermissionDefinition, SystemPermissionId, VerificationResult, VideoConfig, VideoProvider, VisionConfig, VisionProvider } from "@elizaos/agent";
+import type { StewardApprovalActionResponse, StewardApprovalInfo, StewardBalanceResponse, StewardHistoryResponse, StewardPendingApproval, StewardPendingResponse, StewardPolicyResult, StewardSignRequest, StewardSignResponse, StewardStatusResponse, StewardTokenBalancesResponse, StewardTxRecord, StewardTxStatus, StewardWalletAddressesResponse, StewardWebhookEvent, StewardWebhookEventsResponse, StewardWebhookEventType } from "@elizaos/app-steward";
+import type { BscTradeExecuteRequest, BscTradeExecuteResponse, BscTradePreflightResponse, BscTradeQuoteRequest, BscTradeQuoteResponse, BscTradeTxStatusResponse, BscTransferExecuteRequest, BscTransferExecuteResponse, EvmChainBalance, EvmNft, EvmTokenBalance, SolanaNft, SolanaTokenBalance, WalletAddresses, WalletBalancesResponse, WalletConfigStatus, WalletConfigUpdateRequest, WalletNftsResponse, WalletRpcChain, WalletRpcCredentialKey, WalletRpcSelections, WalletTradingProfileResponse, WalletTradingProfileSourceFilter, WalletTradingProfileWindow } from "@elizaos/shared";
+import { DEFAULT_WALLET_RPC_SELECTIONS, normalizeWalletRpcProviderId, normalizeWalletRpcSelections, WALLET_RPC_PROVIDER_OPTIONS } from "@elizaos/shared";
+import type { CloudProviderOption, OnboardingConnectorConfig as ConnectorConfig, InventoryProviderOption, MessageExample, MessageExampleContent, ModelOption, OnboardingConnection, OnboardingOptions, OpenRouterModelOption, ProviderOption, RpcProviderOption, StylePreset, SubscriptionProviderStatus, SubscriptionStatusResponse } from "@elizaos/shared";
+export { ElizaClient } from "./client-base";
+export type { ComputerUseApprovalMode, ComputerUseApprovalResolution, ComputerUseApprovalSnapshot, ComputerUsePendingApproval, } from "./client-computeruse";
+export type { GetIMessageMessagesOptions, IMessageApiChat, IMessageApiMessage, IMessageApiStatus, SendIMessageRequest, SendIMessageResponse, } from "./client-imessage";
+export type { ActiveModelState, CatalogModel, DownloadJob, HardwareProbe, InstalledModel, ModelHubSnapshot, } from "./client-local-inference";
+export * from "./client-types";
+export type { AllPermissionsState, AudioGenConfig, AudioGenProvider, BrowserWorkspaceSnapshot, BrowserWorkspaceTab, BscTradeExecuteRequest, BscTradeExecuteResponse, BscTradePreflightResponse, BscTradeQuoteRequest, BscTradeQuoteResponse, BscTradeTxStatusResponse, BscTransferExecuteRequest, BscTransferExecuteResponse, CloudProviderOption, ConnectorConfig, CustomActionDef, CustomActionHandler, DatabaseProviderType, DropStatus, EvmChainBalance, EvmNft, EvmTokenBalance, ImageConfig, ImageProvider, InventoryProviderOption, MediaConfig, MediaMode, MessageExample, MessageExampleContent, MintResult, ModelOption, OnboardingConnection, OnboardingOptions, OpenRouterModelOption, PermissionState, PermissionStatus, ProviderOption, ReleaseChannel, RpcProviderOption, SolanaNft, SolanaTokenBalance, StewardApprovalActionResponse, StewardApprovalInfo, StewardBalanceResponse, StewardHistoryResponse, StewardPendingApproval, StewardPendingResponse, StewardPolicyResult, StewardSignRequest, StewardSignResponse, StewardStatusResponse, StewardTokenBalancesResponse, StewardTxRecord, StewardTxStatus, StewardWalletAddressesResponse, StewardWebhookEvent, StewardWebhookEventsResponse, StewardWebhookEventType, StylePreset, SubscriptionProviderStatus, SubscriptionStatusResponse, SystemPermissionDefinition as PermissionDefinition, SystemPermissionId, VerificationResult, VideoConfig, VideoProvider, VisionConfig, VisionProvider, WalletAddresses, WalletBalancesResponse, WalletConfigStatus, WalletConfigUpdateRequest, WalletNftsResponse, WalletRpcChain, WalletRpcCredentialKey, WalletRpcSelections, WalletTradingProfileResponse, WalletTradingProfileSourceFilter, WalletTradingProfileWindow, };
+export { DEFAULT_WALLET_RPC_SELECTIONS, normalizeWalletRpcProviderId, normalizeWalletRpcSelections, WALLET_RPC_PROVIDER_OPTIONS, };
+import "./client-agent";
+import "./client-automations";
+import "./client-browser-workspace";
+import "./client-chat";
+import "./client-cloud";
+import "./client-computeruse";
+import "./client-lifeops";
+import "./client-imessage";
+import "./client-local-inference";
+import "./client-n8n";
+import "./client-skills";
+import "./client-wallet";
+import "@elizaos/app-vincent/client";
+import { ElizaClient as _ElizaClient } from "./client-base";
+export declare const client: _ElizaClient;
+//# sourceMappingURL=client.d.ts.map

package/packages/app-core/src/api/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../../../app-core/src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,UAAU,EACV,WAAW,EACX,aAAa,EACb,WAAW,EACX,SAAS,EACT,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,0BAA0B,EAC1B,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,aAAa,EACb,YAAY,EACZ,cAAc,EACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EACV,6BAA6B,EAC7B,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,4BAA4B,EAC5B,eAAe,EACf,eAAe,EACf,8BAA8B,EAC9B,mBAAmB,EACnB,4BAA4B,EAC5B,uBAAuB,EACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,EAC1B,eAAe,EACf,MAAM,EACN,eAAe,EACf,SAAS,EACT,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,cAAc,EACd,sBAAsB,EACtB,mBAAmB,EACnB,4BAA4B,EAC5B,gCAAgC,EAChC,0BAA0B,EAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,EAC5B,4BAA4B,EAC5B,2BAA2B,EAC5B,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,IAAI,eAAe,EAC5C,uBAAuB,EACvB,cAAc,EACd,qBAAqB,EACrB,WAAW,EACX,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,0BAA0B,EAC1B,0BAA0B,EAC3B,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,YAAY,EACV,uBAAuB,EACvB,6BAA6B,EAC7B,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,0BAA0B,EAC1B,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,aAAa,EACb,cAAc,EACd,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,YAAY,EACV,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,EAC1B,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,UAAU,EACV,eAAe,EACf,MAAM,EACN,eAAe,EACf,WAAW,EACX,aAAa,EACb,uBAAuB,EACvB,WAAW,EACX,SAAS,EACT,cAAc,EACd,qBAAqB,EACrB,UAAU,EACV,WAAW,EACX,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,SAAS,EACT,kBAAkB,EAClB,6BAA6B,EAC7B,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,4BAA4B,EAC5B,eAAe,EACf,eAAe,EACf,8BAA8B,EAC9B,mBAAmB,EACnB,4BAA4B,EAC5B,uBAAuB,EACvB,WAAW,EACX,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,IAAI,oBAAoB,EAClD,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,aAAa,EACb,YAAY,EACZ,cAAc,EACd,eAAe,EACf,sBAAsB,EACtB,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,cAAc,EACd,sBAAsB,EACtB,mBAAmB,EACnB,4BAA4B,EAC5B,gCAAgC,EAChC,0BAA0B,GAC3B,CAAC;AACF,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,EAC5B,4BAA4B,EAC5B,2BAA2B,GAC5B,CAAC;AAMF,OAAO,gBAAgB,CAAC;AACxB,OAAO,sBAAsB,CAAC;AAC9B,OAAO,4BAA4B,CAAC;AACpC,OAAO,eAAe,CAAC;AACvB,OAAO,gBAAgB,CAAC;AACxB,OAAO,sBAAsB,CAAC;AAC9B,OAAO,kBAAkB,CAAC;AAC1B,OAAO,mBAAmB,CAAC;AAC3B,OAAO,0BAA0B,CAAC;AAClC,OAAO,cAAc,CAAC;AACtB,OAAO,iBAAiB,CAAC;AACzB,OAAO,iBAAiB,CAAC;AACzB,OAAO,6BAA6B,CAAC;AAMrC,OAAO,EAAE,WAAW,IAAI,YAAY,EAAE,MAAM,eAAe,CAAC;AAC5D,eAAO,MAAM,MAAM,cAAqB,CAAC"}

package/packages/app-core/src/api/client.js

@@ -0,0 +1,38 @@
+/**
+ * API client for the backend.
+ *
+ * Thin fetch wrapper + WebSocket for real-time chat/events.
+ * Replaces the gateway WebSocket protocol entirely.
+ *
+ * The ElizaClient class is defined in client-base.ts and re-exported here.
+ * Domain methods are defined via declaration merging + prototype augmentation
+ * in the companion files: client-agent, client-chat, client-wallet,
+ * client-cloud, client-skills, client-computeruse, client-imessage.
+ */
+import { DEFAULT_WALLET_RPC_SELECTIONS, normalizeWalletRpcProviderId, normalizeWalletRpcSelections, WALLET_RPC_PROVIDER_OPTIONS, } from "@elizaos/shared";
+// Re-export the class from client-base (no circular dependency issues)
+export { ElizaClient } from "./client-base";
+export * from "./client-types";
+export { DEFAULT_WALLET_RPC_SELECTIONS, normalizeWalletRpcProviderId, normalizeWalletRpcSelections, WALLET_RPC_PROVIDER_OPTIONS, };
+// ---------------------------------------------------------------------------
+// Domain method augmentations (declaration merging + prototype assignment)
+// These import ElizaClient from client-base directly, avoiding circular deps.
+// ---------------------------------------------------------------------------
+import "./client-agent";
+import "./client-automations";
+import "./client-browser-workspace";
+import "./client-chat";
+import "./client-cloud";
+import "./client-computeruse";
+import "./client-lifeops";
+import "./client-imessage";
+import "./client-local-inference";
+import "./client-n8n";
+import "./client-skills";
+import "./client-wallet";
+import "@elizaos/app-vincent/client";
+// ---------------------------------------------------------------------------
+// Singleton
+// ---------------------------------------------------------------------------
+import { ElizaClient as _ElizaClient } from "./client-base";
+export const client = new _ElizaClient();

package/packages/app-core/src/api/compat-route-shared.d.ts

@@ -1,6 +1,6 @@
 import type http from "node:http";
-import { type ElizaConfig } from "@elizaos/agent/config/config";
 import type { AgentRuntime } from "@elizaos/core";
+import { type ElizaConfig } from "@elizaos/shared";
 export interface CompatRuntimeState {
     current: AgentRuntime | null;
     pendingAgentName: string | null;
@@ -10,7 +10,20 @@ export declare function clearCompatRuntimeRestart(state: CompatRuntimeState): vo
 export declare function scheduleCompatRuntimeRestart(state: CompatRuntimeState, reason: string): void;
 export declare const DATABASE_UNAVAILABLE_MESSAGE = "Database not available. The agent may not be running or the database adapter is not initialized.";
 export declare function isLoopbackRemoteAddress(remoteAddress: string | null | undefined): boolean;
+/**
+ * Same-machine dashboard access. This is intentionally stricter than just
+ * checking `remoteAddress`: the browser must also be targeting a loopback Host
+ * and must not present cross-site browser metadata.
+ */
+export declare function isTrustedLocalRequest(req: Pick<http.IncomingMessage, "headers" | "socket">): boolean;
 export declare function readCompatJsonBody(req: http.IncomingMessage, res: http.ServerResponse): Promise<Record<string, unknown> | null>;
 export declare function hasCompatPersistedOnboardingState(config: ElizaConfig): boolean;
 export declare function getConfiguredCompatAgentName(): string | null;
+/**
+ * Best-effort grab of the Drizzle DB handle off the live runtime adapter.
+ * Returns null when the runtime is not yet up or the adapter has not
+ * exposed a `db` field. Callers MUST treat null as "service unavailable"
+ * — it is never authentication.
+ */
+export declare function getCompatDrizzleDb(state: CompatRuntimeState): unknown | null;
 //# sourceMappingURL=compat-route-shared.d.ts.map

package/packages/app-core/src/api/compat-route-shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compat-route-shared.d.ts","sourceRoot":"","sources":["../../../../../../app-core/src/api/compat-route-shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,KAAK,WAAW,EAEjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAUlD,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,qBAAqB,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAEzE;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,kBAAkB,EACzB,MAAM,EAAE,MAAM,GACb,IAAI,CAaN;AAED,eAAO,MAAM,4BAA4B,qGAC2D,CAAC;AAErG,wBAAgB,uBAAuB,CACrC,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACvC,OAAO,CAUT;AAED,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAqCzC;AAED,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,WAAW,GAClB,OAAO,CAoCT;AAED,wBAAgB,4BAA4B,IAAI,MAAM,GAAG,IAAI,CAc5D"}
+{"version":3,"file":"compat-route-shared.d.ts","sourceRoot":"","sources":["../../../../../../app-core/src/api/compat-route-shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EACL,KAAK,WAAW,EAKjB,MAAM,iBAAiB,CAAC;AAKzB,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,qBAAqB,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAEzE;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,kBAAkB,EACzB,MAAM,EAAE,MAAM,GACb,IAAI,CAaN;AAED,eAAO,MAAM,4BAA4B,qGAC2D,CAAC;AAErG,wBAAgB,uBAAuB,CACrC,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACvC,OAAO,CAUT;AAiCD;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,GAAG,QAAQ,CAAC,GACpD,OAAO,CAmBT;AAED,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAqCzC;AAED,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,WAAW,GAClB,OAAO,CAoCT;AAED,wBAAgB,4BAA4B,IAAI,MAAM,GAAG,IAAI,CAc5D;AAMD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,GAAG,IAAI,CAM5E"}

package/packages/app-core/src/api/compat-route-shared.js

@@ -1,5 +1,5 @@
-import { loadElizaConfig, } from "@elizaos/agent/config/config";
-import { normalizeOnboardingProviderId, resolveDeploymentTargetInConfig, resolveServiceRoutingInConfig, } from "@elizaos/shared/contracts/onboarding";
+import { loadElizaConfig } from "@elizaos/agent/config/config";
+import { isLoopbackBindHost, normalizeOnboardingProviderId, resolveDeploymentTargetInConfig, resolveServiceRoutingInConfig, } from "@elizaos/shared";
 import { sendJsonError as sendJsonErrorResponse } from "./response";
 const MAX_BODY_BYTES = 1_048_576;
 export function clearCompatRuntimeRestart(state) {
@@ -25,6 +25,60 @@ export function isLoopbackRemoteAddress(remoteAddress) {
         normalized === "::ffff:127.0.0.1" ||
         normalized === "::ffff:0:127.0.0.1");
 }
+function firstHeaderValue(value) {
+    if (typeof value === "string")
+        return value;
+    if (Array.isArray(value) && typeof value[0] === "string")
+        return value[0];
+    return null;
+}
+function isCloudProvisionedByEnv() {
+    return process.env.ELIZA_CLOUD_PROVISIONED === "1";
+}
+function isTrustedLocalOrigin(raw) {
+    const trimmed = raw.trim();
+    if (!trimmed || trimmed === "null")
+        return true;
+    try {
+        const parsed = new URL(trimmed);
+        if (parsed.protocol === "file:" ||
+            parsed.protocol === "app:" ||
+            parsed.protocol === "tauri:" ||
+            parsed.protocol === "capacitor:" ||
+            parsed.protocol === "capacitor-electron:" ||
+            parsed.protocol === "electrobun:") {
+            return true;
+        }
+        return isLoopbackBindHost(parsed.hostname);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Same-machine dashboard access. This is intentionally stricter than just
+ * checking `remoteAddress`: the browser must also be targeting a loopback Host
+ * and must not present cross-site browser metadata.
+ */
+export function isTrustedLocalRequest(req) {
+    if (isCloudProvisionedByEnv())
+        return false;
+    if (!isLoopbackRemoteAddress(req.socket?.remoteAddress))
+        return false;
+    const host = firstHeaderValue(req.headers.host);
+    if (host && !isLoopbackBindHost(host))
+        return false;
+    const secFetchSite = firstHeaderValue(req.headers["sec-fetch-site"])?.toLowerCase();
+    if (secFetchSite === "cross-site")
+        return false;
+    const origin = firstHeaderValue(req.headers.origin);
+    if (origin && !isTrustedLocalOrigin(origin))
+        return false;
+    const referer = firstHeaderValue(req.headers.referer);
+    if (!origin && referer && !isTrustedLocalOrigin(referer))
+        return false;
+    return true;
+}
 export async function readCompatJsonBody(req, res) {
     const chunks = [];
     let totalBytes = 0;
@@ -97,3 +151,18 @@ export function getConfiguredCompatAgentName() {
         : "";
     return assistantName || null;
 }
+/**
+ * Best-effort grab of the Drizzle DB handle off the live runtime adapter.
+ * Returns null when the runtime is not yet up or the adapter has not
+ * exposed a `db` field. Callers MUST treat null as "service unavailable"
+ * — it is never authentication.
+ */
+export function getCompatDrizzleDb(state) {
+    const runtime = state.current;
+    if (!runtime)
+        return null;
+    const adapter = runtime.adapter;
+    if (!adapter?.db)
+        return null;
+    return adapter.db;
+}

package/packages/app-core/src/api/csrf-client.d.ts

@@ -0,0 +1,29 @@
+/**
+ * CSRF double-submit client helpers.
+ *
+ * The server emits a readable (non-HttpOnly) `milady_csrf` cookie alongside
+ * the HttpOnly `milady_session` cookie on every session creation. For every
+ * state-changing request the SPA must mirror that cookie value into the
+ * `x-milady-csrf` header so the server can compare them.
+ *
+ * Rules:
+ *   - GET / HEAD / OPTIONS never attach the header.
+ *   - All other methods (POST / PUT / DELETE / PATCH) always attach it.
+ *   - `credentials: "include"` is always set so session cookies travel.
+ */
+/**
+ * Reads the current CSRF token from `document.cookie`.
+ * Returns null when the cookie is absent (no active session).
+ */
+export declare function readCsrfTokenFromCookie(): string | null;
+/**
+ * Wraps `fetch` with:
+ *   - `credentials: "include"` so session cookies are sent.
+ *   - `x-milady-csrf` header on state-changing requests.
+ *
+ * Call this instead of bare `fetch` for all dashboard API requests that use
+ * cookie-based auth. Bearer-only machine-token requests can still use bare
+ * `fetch`.
+ */
+export declare function fetchWithCsrf(url: string, init?: RequestInit): Promise<Response>;
+//# sourceMappingURL=csrf-client.d.ts.map

package/packages/app-core/src/api/csrf-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf-client.d.ts","sourceRoot":"","sources":["../../../../../../app-core/src/api/csrf-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAUvD;AAID;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,WAAgB,GACrB,OAAO,CAAC,QAAQ,CAAC,CAenB"}

package/packages/app-core/src/api/csrf-client.js

@@ -0,0 +1,54 @@
+/**
+ * CSRF double-submit client helpers.
+ *
+ * The server emits a readable (non-HttpOnly) `milady_csrf` cookie alongside
+ * the HttpOnly `milady_session` cookie on every session creation. For every
+ * state-changing request the SPA must mirror that cookie value into the
+ * `x-milady-csrf` header so the server can compare them.
+ *
+ * Rules:
+ *   - GET / HEAD / OPTIONS never attach the header.
+ *   - All other methods (POST / PUT / DELETE / PATCH) always attach it.
+ *   - `credentials: "include"` is always set so session cookies travel.
+ */
+import { CSRF_COOKIE_NAME, CSRF_HEADER_NAME } from "./auth/sessions";
+/**
+ * Reads the current CSRF token from `document.cookie`.
+ * Returns null when the cookie is absent (no active session).
+ */
+export function readCsrfTokenFromCookie() {
+    if (typeof document === "undefined")
+        return null;
+    const prefix = `${CSRF_COOKIE_NAME}=`;
+    for (const part of document.cookie.split(";")) {
+        const trimmed = part.trim();
+        if (trimmed.startsWith(prefix)) {
+            return decodeURIComponent(trimmed.slice(prefix.length));
+        }
+    }
+    return null;
+}
+const STATE_CHANGING_METHODS = new Set(["POST", "PUT", "DELETE", "PATCH"]);
+/**
+ * Wraps `fetch` with:
+ *   - `credentials: "include"` so session cookies are sent.
+ *   - `x-milady-csrf` header on state-changing requests.
+ *
+ * Call this instead of bare `fetch` for all dashboard API requests that use
+ * cookie-based auth. Bearer-only machine-token requests can still use bare
+ * `fetch`.
+ */
+export async function fetchWithCsrf(url, init = {}) {
+    const method = (init.method ?? "GET").toUpperCase();
+    const needsCsrf = STATE_CHANGING_METHODS.has(method);
+    const csrfToken = needsCsrf ? readCsrfTokenFromCookie() : null;
+    const headers = new Headers(init.headers);
+    if (csrfToken) {
+        headers.set(CSRF_HEADER_NAME, csrfToken);
+    }
+    return fetch(url, {
+        ...init,
+        credentials: "include",
+        headers,
+    });
+}

package/packages/app-core/src/api/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./client";
+//# sourceMappingURL=index.d.ts.map

package/packages/app-core/src/api/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../app-core/src/api/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC"}

package/packages/app-core/src/api/index.js

@@ -0,0 +1 @@
+export * from "./client";

package/packages/app-core/src/api/response.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"response.d.ts","sourceRoot":"","sources":["../../../../../../app-core/src/api/response.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,2DAA2D;AAC3D,wBAAgB,QAAQ,CACtB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO,GACZ,IAAI,CAKN;AAED,iDAAiD;AACjD,wBAAgB,aAAa,CAC3B,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,IAAI,CAEN"}
+{"version":3,"file":"response.d.ts","sourceRoot":"","sources":["../../../../../../app-core/src/api/response.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAoBlC,2DAA2D;AAC3D,wBAAgB,QAAQ,CACtB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO,GACZ,IAAI,CAKN;AAED,iDAAiD;AACjD,wBAAgB,aAAa,CAC3B,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,IAAI,CAEN"}

package/packages/app-core/src/api/response.js

@@ -4,13 +4,31 @@
  * Consolidates the `sendJson` / `sendJsonError` / `sendJsonResponse` pattern
  * that was independently defined in server.ts, cloud-routes.ts, and others.
  */
+function scrubStackFields(value) {
+    if (value instanceof Error) {
+        return { error: value.message || "Internal error" };
+    }
+    if (Array.isArray(value)) {
+        return value.map(scrubStackFields);
+    }
+    if (value && typeof value === "object") {
+        const out = {};
+        for (const [k, v] of Object.entries(value)) {
+            if (k === "stack" || k === "stackTrace")
+                continue;
+            out[k] = scrubStackFields(v);
+        }
+        return out;
+    }
+    return value;
+}
 /** Send a JSON response. No-op if headers already sent. */
 export function sendJson(res, status, body) {
     if (res.headersSent)
         return;
     res.statusCode = status;
     res.setHeader("content-type", "application/json; charset=utf-8");
-    res.end(JSON.stringify(body));
+    res.end(JSON.stringify(scrubStackFields(body)));
 }
 /** Send a JSON `{ error: message }` response. */
 export function sendJsonError(res, status, message) {

package/packages/app-core/src/api/server-cloud-tts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server-cloud-tts.d.ts","sourceRoot":"","sources":["../../../../../../app-core/src/api/server-cloud-tts.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAWlC,kEAAkE;AAClE,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,GACzC;IACD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAoBA;AA4CD,mFAAmF;AACnF,eAAO,MAAM,8BAA8B,OAAO,CAAC;AAqBnD;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,OAAO,EACpB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CASR;AAqCD,wBAAgB,wBAAwB,IAAI,IAAI,CAG/C;AA+DD;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEnE;AA4BD;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAiBjE;AAED,2EAA2E;AAC3E,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,OAAO,EAClB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAOR;AAMD,wBAAgB,mCAAmC,CACjD,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,IAAI,CAwBf;AAED,wBAAgB,yBAAyB,CACvC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAWT;AAED,wBAAgB,sBAAsB,CACpC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAmBR;AAED,wBAAgB,4BAA4B,CAC1C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,EAAE,CAmCV;AAED,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,GACvB,OAAO,CAAC,OAAO,CAAC,CA2JlB;AAED,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,GACzC,IAAI,CAsBN"}
+{"version":3,"file":"server-cloud-tts.d.ts","sourceRoot":"","sources":["../../../../../../app-core/src/api/server-cloud-tts.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAalC,kEAAkE;AAClE,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,GACzC;IACD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAoBA;AA4CD,mFAAmF;AACnF,eAAO,MAAM,8BAA8B,OAAO,CAAC;AAqBnD;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,OAAO,EACpB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CASR;AAqCD,wBAAgB,wBAAwB,IAAI,IAAI,CAG/C;AA+DD;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEnE;AA4BD;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAiBjE;AAED,2EAA2E;AAC3E,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,OAAO,EAClB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAOR;AAMD,wBAAgB,mCAAmC,CACjD,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,IAAI,CAwBf;AAED,wBAAgB,yBAAyB,CACvC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAWT;AAED,wBAAgB,sBAAsB,CACpC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAmBR;AAED,wBAAgB,4BAA4B,CAC1C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,EAAE,CAmCV;AAED,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,GACvB,OAAO,CAAC,OAAO,CAAC,CA2JlB;AAED,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,GACzC,IAAI,CAsBN"}

package/packages/app-core/src/api/server-cloud-tts.js

@@ -1,6 +1,5 @@
 import { loadElizaConfig } from "@elizaos/agent/config/config";
-import { isElizaCloudServiceSelectedInConfig } from "@elizaos/shared/contracts";
-import { sanitizeSpeechText } from "@elizaos/shared/spoken-text";
+import { isElizaCloudServiceSelectedInConfig, sanitizeSpeechText, } from "@elizaos/shared";
 import { ttsDebug, ttsDebugTextPreview } from "../utils/tts-debug";
 import { getCloudSecret } from "./cloud-secrets";
 // ---------------------------------------------------------------------------

package/packages/app-core/src/app-shell/task-coordinator-slots.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Slots for task-coordinator (coding-agent) UI surfaces rendered by app-core.
+ *
+ * app-core deliberately does not import from @elizaos/app-task-coordinator —
+ * that would create a package → app dependency (coding-agent components live
+ * under apps/) and a circular edge (task-coordinator already imports app-core
+ * for its hooks/types). Instead, apps that want coding-agent surfaces call
+ * `registerTaskCoordinatorSlots` with their component implementations at
+ * boot time, and app-core renders them via the `*Slot` components below.
+ *
+ * Registration happens via a side-effect import in the root app entry (see
+ * `@elizaos/app-task-coordinator/register-slots`).
+ */
+import type { ComponentType, JSX } from "react";
+import type { CodingAgentSession } from "../api/client-types-cloud.js";
+export type TaskCoordinatorCodingAgentSettingsSectionProps = Record<string, never>;
+export interface TaskCoordinatorCodingAgentTasksPanelProps {
+    fullPage?: boolean;
+}
+export type TaskCoordinatorCodingAgentControlChipProps = Record<string, never>;
+export interface TaskCoordinatorPtyConsoleBaseProps {
+    activeSessionId: string;
+    sessions: CodingAgentSession[];
+    onClose: () => void;
+    variant: "drawer" | "side-panel" | "full";
+}
+export interface TaskCoordinatorSlots {
+    CodingAgentSettingsSection: ComponentType<TaskCoordinatorCodingAgentSettingsSectionProps>;
+    CodingAgentTasksPanel: ComponentType<TaskCoordinatorCodingAgentTasksPanelProps>;
+    CodingAgentControlChip: ComponentType<TaskCoordinatorCodingAgentControlChipProps>;
+    PtyConsoleBase: ComponentType<TaskCoordinatorPtyConsoleBaseProps>;
+}
+export declare function registerTaskCoordinatorSlots(components: Partial<TaskCoordinatorSlots>): void;
+export declare function CodingAgentSettingsSection(props: TaskCoordinatorCodingAgentSettingsSectionProps): JSX.Element | null;
+export declare function CodingAgentTasksPanel(props: TaskCoordinatorCodingAgentTasksPanelProps): JSX.Element | null;
+export declare function CodingAgentControlChip(props: TaskCoordinatorCodingAgentControlChipProps): JSX.Element | null;
+export declare function PtyConsoleBase(props: TaskCoordinatorPtyConsoleBaseProps): JSX.Element | null;
+//# sourceMappingURL=task-coordinator-slots.d.ts.map

package/packages/app-core/src/app-shell/task-coordinator-slots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-coordinator-slots.d.ts","sourceRoot":"","sources":["../../../../../../app-core/src/app-shell/task-coordinator-slots.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AAChD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,MAAM,MAAM,8CAA8C,GAAG,MAAM,CACjE,MAAM,EACN,KAAK,CACN,CAAC;AAEF,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,0CAA0C,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAE/E,MAAM,WAAW,kCAAkC;IACjD,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,OAAO,EAAE,QAAQ,GAAG,YAAY,GAAG,MAAM,CAAC;CAC3C;AAED,MAAM,WAAW,oBAAoB;IACnC,0BAA0B,EAAE,aAAa,CAAC,8CAA8C,CAAC,CAAC;IAC1F,qBAAqB,EAAE,aAAa,CAAC,yCAAyC,CAAC,CAAC;IAChF,sBAAsB,EAAE,aAAa,CAAC,0CAA0C,CAAC,CAAC;IAClF,cAAc,EAAE,aAAa,CAAC,kCAAkC,CAAC,CAAC;CACnE;AAID,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,OAAO,CAAC,oBAAoB,CAAC,GACxC,IAAI,CAEN;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,8CAA8C,GACpD,GAAG,CAAC,OAAO,GAAG,IAAI,CAGpB;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,yCAAyC,GAC/C,GAAG,CAAC,OAAO,GAAG,IAAI,CAGpB;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,0CAA0C,GAChD,GAAG,CAAC,OAAO,GAAG,IAAI,CAGpB;AAED,wBAAgB,cAAc,CAC5B,KAAK,EAAE,kCAAkC,GACxC,GAAG,CAAC,OAAO,GAAG,IAAI,CAGpB"}

package/packages/app-core/src/app-shell/task-coordinator-slots.js

@@ -0,0 +1,21 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+let registered = {};
+export function registerTaskCoordinatorSlots(components) {
+    registered = { ...registered, ...components };
+}
+export function CodingAgentSettingsSection(props) {
+    const Component = registered.CodingAgentSettingsSection;
+    return Component ? _jsx(Component, { ...props }) : null;
+}
+export function CodingAgentTasksPanel(props) {
+    const Component = registered.CodingAgentTasksPanel;
+    return Component ? _jsx(Component, { ...props }) : null;
+}
+export function CodingAgentControlChip(props) {
+    const Component = registered.CodingAgentControlChip;
+    return Component ? _jsx(Component, { ...props }) : null;
+}
+export function PtyConsoleBase(props) {
+    const Component = registered.PtyConsoleBase;
+    return Component ? _jsx(Component, { ...props }) : null;
+}

package/packages/app-core/src/autonomy/index.d.ts

@@ -0,0 +1,48 @@
+import type { StreamEventEnvelope } from "../api/client";
+export type AutonomyRunHealthStatus = "ok" | "gap_detected" | "recovered" | "partial";
+export interface AutonomyRunHealth {
+    runId: string;
+    status: AutonomyRunHealthStatus;
+    lastSeq: number | null;
+    missingSeqs: number[];
+    gapCount: number;
+    lastGapAt?: number;
+    recoveredAt?: number;
+    partialAt?: number;
+}
+export type AutonomyRunHealthMap = Record<string, AutonomyRunHealth>;
+export interface AutonomyEventStore {
+    eventsById: Record<string, StreamEventEnvelope>;
+    eventOrder: string[];
+    runIndex: Record<string, Record<number, string>>;
+    watermark: string | null;
+}
+export interface MergeAutonomyEventsOptions {
+    existingEvents?: StreamEventEnvelope[];
+    store?: AutonomyEventStore;
+    incomingEvents: StreamEventEnvelope[];
+    runHealthByRunId: AutonomyRunHealthMap;
+    maxEvents?: number;
+    replay?: boolean;
+}
+export interface MergeAutonomyEventsResult {
+    store: AutonomyEventStore;
+    events: StreamEventEnvelope[];
+    latestEventId: string | null;
+    runHealthByRunId: AutonomyRunHealthMap;
+    insertedCount: number;
+    duplicateCount: number;
+    runsWithNewGaps: string[];
+    runsRecovered: string[];
+    hasUnresolvedGaps: boolean;
+}
+export interface AutonomyGapReplayRequest {
+    runId: string;
+    fromSeq: number;
+    missingSeqs: number[];
+}
+export declare function buildAutonomyGapReplayRequests(runHealthByRunId: AutonomyRunHealthMap, store: AutonomyEventStore): AutonomyGapReplayRequest[];
+export declare function hasPendingAutonomyGaps(runHealthByRunId: AutonomyRunHealthMap): boolean;
+export declare function markPendingAutonomyGapsPartial(runHealthByRunId: AutonomyRunHealthMap, ts?: number): AutonomyRunHealthMap;
+export declare function mergeAutonomyEvents({ existingEvents, store, incomingEvents, runHealthByRunId, maxEvents, replay, }: MergeAutonomyEventsOptions): MergeAutonomyEventsResult;
+//# sourceMappingURL=index.d.ts.map

package/packages/app-core/src/autonomy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../app-core/src/autonomy/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEzD,MAAM,MAAM,uBAAuB,GAC/B,IAAI,GACJ,cAAc,GACd,WAAW,GACX,SAAS,CAAC;AAEd,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,uBAAuB,CAAC;IAChC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAErE,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAChD,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA0B;IACzC,cAAc,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACvC,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,cAAc,EAAE,mBAAmB,EAAE,CAAC;IACtC,gBAAgB,EAAE,oBAAoB,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,oBAAoB,CAAC;IACvC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAuPD,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,wBAAgB,8BAA8B,CAC5C,gBAAgB,EAAE,oBAAoB,EACtC,KAAK,EAAE,kBAAkB,GACxB,wBAAwB,EAAE,CAkB5B;AAED,wBAAgB,sBAAsB,CACpC,gBAAgB,EAAE,oBAAoB,GACrC,OAAO,CAIT;AAED,wBAAgB,8BAA8B,CAC5C,gBAAgB,EAAE,oBAAoB,EACtC,EAAE,SAAa,GACd,oBAAoB,CAQtB;AAED,wBAAgB,mBAAmB,CAAC,EAClC,cAAc,EACd,KAAK,EACL,cAAc,EACd,gBAAgB,EAChB,SAA8B,EAC9B,MAAc,GACf,EAAE,0BAA0B,GAAG,yBAAyB,CA+HxD"}