@elizaos/agent 2.0.0-alpha.520 → 2.0.0-alpha.521

package/packages/app-core/src/services/account-usage.js

@@ -1,179 +0,0 @@
-/**
- * Account usage probes + local JSONL counters.
- *
- * Two responsibilities:
- *  1. Probe provider usage APIs (`pollAnthropicUsage`, `pollCodexUsage`)
- *     to populate the `LinkedAccountUsage` snapshot on each account.
- *  2. Maintain append-only JSONL counters per `(providerId, accountId, day)`
- *     so we can answer "calls made today / tokens used / errors" without
- *     re-reading every trajectory.
- *
- * The probes throw on HTTP error so the caller can decide whether to mark
- * the account as `rate-limited` / `needs-reauth` / `invalid`. The counters
- * are best-effort and synchronous — at our scale appendFileSync is fine.
- */
-import { appendFileSync, existsSync, mkdirSync, readFileSync } from "node:fs";
-import os from "node:os";
-import path from "node:path";
-const ANTHROPIC_USAGE_URL = "https://api.anthropic.com/api/oauth/usage";
-const CODEX_USAGE_URL = "https://chatgpt.com/backend-api/wham/usage";
-function utilizationToPct(value) {
-    if (typeof value !== "number" || !Number.isFinite(value))
-        return undefined;
-    // Provider returns either 0..1 (legacy) or 0..100 — both are normalized
-    // to percent. Anthropic ships 0..1, so we always multiply.
-    return Math.max(0, Math.min(100, value * 100));
-}
-function normalizeResetTimestamp(value) {
-    if (typeof value === "number" && Number.isFinite(value)) {
-        // Heuristic: epoch seconds vs ms. Seconds will be ~1.7e9 today; ms is ~1.7e12.
-        return value < 1e12 ? value * 1000 : value;
-    }
-    if (typeof value === "string" && value.length > 0) {
-        const parsed = Date.parse(value);
-        return Number.isFinite(parsed) ? parsed : undefined;
-    }
-    return undefined;
-}
-/**
- * Probe Anthropic's OAuth usage endpoint.
- *
- * Endpoint: `GET https://api.anthropic.com/api/oauth/usage`
- * Headers : `Authorization: Bearer <accessToken>`,
- *           `anthropic-beta: oauth-2025-04-20`,
- *           `Content-Type: application/json`
- *
- * Handles both legacy flat (`five_hour_utilization`) and new nested
- * (`five_hour: { utilization }`) response shapes. Throws on any HTTP
- * error with the status code included in the message.
- */
-export async function pollAnthropicUsage(accessToken, fetchImpl = fetch) {
-    const res = await fetchImpl(ANTHROPIC_USAGE_URL, {
-        method: "GET",
-        headers: {
-            Authorization: `Bearer ${accessToken}`,
-            "anthropic-beta": "oauth-2025-04-20",
-            "Content-Type": "application/json",
-        },
-    });
-    if (!res.ok) {
-        throw new Error(`Anthropic usage probe failed: HTTP ${res.status}`);
-    }
-    const payload = (await res.json());
-    const fiveHour = payload.five_hour;
-    const sevenDay = payload.seven_day;
-    const sessionPct = utilizationToPct(fiveHour?.utilization) ??
-        utilizationToPct(payload.five_hour_utilization);
-    const weeklyPct = utilizationToPct(sevenDay?.utilization) ??
-        utilizationToPct(payload.seven_day_utilization);
-    const resetsAt = normalizeResetTimestamp(fiveHour?.resets_at) ??
-        normalizeResetTimestamp(payload.five_hour_resets_at);
-    return {
-        refreshedAt: Date.now(),
-        ...(sessionPct !== undefined ? { sessionPct } : {}),
-        ...(weeklyPct !== undefined ? { weeklyPct } : {}),
-        ...(resetsAt !== undefined ? { resetsAt } : {}),
-    };
-}
-/**
- * Probe Codex / ChatGPT's usage endpoint.
- *
- * Endpoint: `GET https://chatgpt.com/backend-api/wham/usage`
- * Headers : `Authorization: Bearer <accessToken>`,
- *           `ChatGPT-Account-Id: <openAIAccountId>`,
- *           `User-Agent: codex-cli`
- *
- * `used_percent` is already on the 0..100 scale. `reset_at` is epoch
- * seconds. Codex has no weekly equivalent, so `weeklyPct` stays undefined.
- */
-export async function pollCodexUsage(accessToken, accountId, fetchImpl = fetch) {
-    const res = await fetchImpl(CODEX_USAGE_URL, {
-        method: "GET",
-        headers: {
-            Authorization: `Bearer ${accessToken}`,
-            "ChatGPT-Account-Id": accountId,
-            "User-Agent": "codex-cli",
-        },
-    });
-    if (!res.ok) {
-        throw new Error(`Codex usage probe failed: HTTP ${res.status}`);
-    }
-    const payload = (await res.json());
-    const primary = payload.rate_limit?.primary_window;
-    let sessionPct;
-    if (typeof primary?.used_percent === "number" &&
-        Number.isFinite(primary.used_percent)) {
-        sessionPct = Math.max(0, Math.min(100, primary.used_percent));
-    }
-    const resetsAt = normalizeResetTimestamp(primary?.reset_at);
-    return {
-        refreshedAt: Date.now(),
-        ...(sessionPct !== undefined ? { sessionPct } : {}),
-        ...(resetsAt !== undefined ? { resetsAt } : {}),
-    };
-}
-// Local JSONL counters.
-function elizaHome() {
-    return process.env.ELIZA_HOME || path.join(os.homedir(), ".eliza");
-}
-function dayStamp(ts = Date.now()) {
-    const d = new Date(ts);
-    const yyyy = d.getUTCFullYear();
-    const mm = String(d.getUTCMonth() + 1).padStart(2, "0");
-    const dd = String(d.getUTCDate()).padStart(2, "0");
-    return `${yyyy}-${mm}-${dd}`;
-}
-function counterFile(providerId, accountId, ts = Date.now()) {
-    return path.join(elizaHome(), "usage", providerId, accountId, `${dayStamp(ts)}.jsonl`);
-}
-/**
- * Append a usage entry for the given `(providerId, accountId)` pair.
- * One line per call, written synchronously with mode 0o600. The day
- * directory is created on demand.
- */
-export function recordCall(providerId, accountId, entry) {
-    const ts = Date.now();
-    const line = { ts, ...entry };
-    const file = counterFile(providerId, accountId, ts);
-    const dir = path.dirname(file);
-    if (!existsSync(dir)) {
-        mkdirSync(dir, { recursive: true, mode: 0o700 });
-    }
-    appendFileSync(file, `${JSON.stringify(line)}\n`, {
-        flag: "a",
-        mode: 0o600,
-    });
-}
-/**
- * Read today's JSONL and aggregate `(calls, tokens, errors)`. Lines that
- * fail to parse are skipped silently (best-effort).
- */
-export function readTodayCounters(providerId, accountId) {
-    const file = counterFile(providerId, accountId);
-    if (!existsSync(file)) {
-        return { calls: 0, tokens: 0, errors: 0 };
-    }
-    const raw = readFileSync(file, "utf-8");
-    let calls = 0;
-    let tokens = 0;
-    let errors = 0;
-    for (const line of raw.split("\n")) {
-        if (!line.trim())
-            continue;
-        let parsed;
-        try {
-            parsed = JSON.parse(line);
-        }
-        catch {
-            continue;
-        }
-        calls += 1;
-        if (typeof parsed.tokens === "number" && Number.isFinite(parsed.tokens)) {
-            tokens += parsed.tokens;
-        }
-        if (parsed.ok === false) {
-            errors += 1;
-        }
-    }
-    return { calls, tokens, errors };
-}

package/packages/app-core/src/services/auth-store.d.ts

@@ -1,185 +0,0 @@
-/**
- * pglite-backed repositories for the auth subsystem.
- *
- * The store operates on a Drizzle database handle obtained from the agent
- * runtime's database adapter (`@elizaos/plugin-sql`). Tables are owned by the
- * plugin-sql schema attached to the root plugin export.
- *
- * Every method is fail-fast: errors propagate to the caller. The auth code
- * path must NEVER swallow a DB error and pretend a request was authenticated.
- */
-import type { DrizzleDatabase } from "@elizaos/plugin-sql";
-export interface AuthIdentityRow {
-    id: string;
-    kind: "owner" | "machine";
-    displayName: string;
-    createdAt: number;
-    passwordHash: string | null;
-    cloudUserId: string | null;
-}
-export interface AuthSessionRow {
-    id: string;
-    identityId: string;
-    kind: "browser" | "machine";
-    createdAt: number;
-    lastSeenAt: number;
-    expiresAt: number;
-    rememberDevice: boolean;
-    csrfSecret: string;
-    ip: string | null;
-    userAgent: string | null;
-    scopes: string[];
-    revokedAt: number | null;
-}
-export interface AuthOwnerBindingRow {
-    id: string;
-    identityId: string;
-    connector: string;
-    externalId: string;
-    displayHandle: string;
-    instanceId: string;
-    verifiedAt: number;
-    pendingCodeHash: string | null;
-    pendingExpiresAt: number | null;
-}
-export interface AuthOwnerLoginTokenRow {
-    tokenHash: string;
-    identityId: string;
-    bindingId: string;
-    issuedAt: number;
-    expiresAt: number;
-    consumedAt: number | null;
-}
-export interface AuthAuditEventRow {
-    id: string;
-    ts: number;
-    actorIdentityId: string | null;
-    ip: string | null;
-    userAgent: string | null;
-    action: string;
-    outcome: "success" | "failure";
-    metadata: Record<string, string | number | boolean>;
-}
-export interface CreateIdentityInput {
-    id: string;
-    kind: "owner" | "machine";
-    displayName: string;
-    createdAt: number;
-    passwordHash?: string | null;
-    cloudUserId?: string | null;
-}
-export interface CreateSessionInput {
-    id: string;
-    identityId: string;
-    kind: "browser" | "machine";
-    createdAt: number;
-    lastSeenAt: number;
-    expiresAt: number;
-    rememberDevice: boolean;
-    csrfSecret: string;
-    ip: string | null;
-    userAgent: string | null;
-    scopes: string[];
-}
-export interface AppendAuditEventInput {
-    id: string;
-    ts: number;
-    actorIdentityId: string | null;
-    ip: string | null;
-    userAgent: string | null;
-    action: string;
-    outcome: "success" | "failure";
-    metadata: Record<string, string | number | boolean>;
-}
-export declare class AuthStore {
-    private readonly db;
-    constructor(db: DrizzleDatabase);
-    createIdentity(input: CreateIdentityInput): Promise<AuthIdentityRow>;
-    findIdentity(id: string): Promise<AuthIdentityRow | null>;
-    findIdentityByCloudUserId(cloudUserId: string): Promise<AuthIdentityRow | null>;
-    findIdentityByDisplayName(displayName: string): Promise<AuthIdentityRow | null>;
-    updateIdentityPassword(id: string, passwordHash: string): Promise<void>;
-    listIdentitiesByKind(kind: "owner" | "machine"): Promise<AuthIdentityRow[]>;
-    hasOwnerIdentity(): Promise<boolean>;
-    createSession(input: CreateSessionInput): Promise<AuthSessionRow>;
-    /**
-     * Look up a session by id. Returns `null` for unknown id, expired session,
-     * or revoked session — the caller MUST treat `null` as "not authenticated"
-     * and never as "transient error".
-     */
-    findSession(id: string, now?: number): Promise<AuthSessionRow | null>;
-    revokeSession(id: string, now?: number): Promise<boolean>;
-    /**
-     * Slide the browser session forward: bump `lastSeenAt` and extend
-     * `expiresAt`. Caller computes the new `expiresAt` so the store stays
-     * policy-free.
-     */
-    touchSession(id: string, lastSeenAt: number, expiresAt: number): Promise<void>;
-    /**
-     * Revoke every active session for an identity, except optionally the one
-     * currently in use. Returns the number of rows updated. Implemented in a
-     * single statement — no read/write race window.
-     */
-    revokeAllSessionsForIdentity(identityId: string, now?: number, exceptSessionId?: string): Promise<number>;
-    /**
-     * Mark every active legacy machine session (scopes containing the literal
-     * "legacy" entry) as revoked. Used when a real auth method lands and the
-     * legacy bearer must be retired immediately.
-     */
-    revokeLegacyBearerSessions(now?: number): Promise<number>;
-    /**
-     * List every active (unrevoked, unexpired) session for an identity, newest
-     * first. Used by `/api/auth/sessions` to populate the security UI.
-     */
-    listSessionsForIdentity(identityId: string, now?: number): Promise<AuthSessionRow[]>;
-    /**
-     * Atomic test-and-set on the bootstrap-token replay set.
-     *
-     * Returns `true` when this `jti` was unseen and is now recorded.
-     * Returns `false` when the `jti` was already present — indicating a replay.
-     *
-     * Implemented via INSERT … ON CONFLICT DO NOTHING so the check is one
-     * round trip and there is no TOCTOU window.
-     */
-    recordJtiSeen(jti: string, now?: number): Promise<boolean>;
-    pruneJtiSeenBefore(thresholdTs: number): Promise<void>;
-    appendAuditEvent(input: AppendAuditEventInput): Promise<AuthAuditEventRow>;
-    createOwnerBinding(input: {
-        id: string;
-        identityId: string;
-        connector: string;
-        externalId: string;
-        displayHandle: string;
-        instanceId: string;
-        verifiedAt: number;
-        pendingCodeHash?: string | null;
-        pendingExpiresAt?: number | null;
-    }): Promise<void>;
-    findOwnerBinding(id: string): Promise<AuthOwnerBindingRow | null>;
-    findOwnerBindingByPendingCodeHash(pendingCodeHash: string, instanceId: string): Promise<AuthOwnerBindingRow | null>;
-    findOwnerBindingByConnectorPair(input: {
-        connector: string;
-        externalId: string;
-        instanceId: string;
-    }): Promise<AuthOwnerBindingRow | null>;
-    listOwnerBindingsForIdentity(identityId: string): Promise<AuthOwnerBindingRow[]>;
-    updateOwnerBindingPending(id: string, pendingCodeHash: string | null, pendingExpiresAt: number | null): Promise<void>;
-    markOwnerBindingVerified(id: string, verifiedAt: number, displayHandle: string): Promise<void>;
-    deleteOwnerBinding(id: string): Promise<boolean>;
-    createOwnerLoginToken(input: {
-        tokenHash: string;
-        identityId: string;
-        bindingId: string;
-        issuedAt: number;
-        expiresAt: number;
-    }): Promise<void>;
-    findOwnerLoginToken(tokenHash: string): Promise<AuthOwnerLoginTokenRow | null>;
-    /**
-     * Atomically mark the token as consumed. Returns true when the consume
-     * succeeded (token existed, was unconsumed, was unexpired). Returns
-     * false otherwise — the caller MUST treat false as "auth failure" and
-     * never as "transient error".
-     */
-    consumeOwnerLoginToken(tokenHash: string, now: number): Promise<boolean>;
-}
-//# sourceMappingURL=auth-store.d.ts.map

package/packages/app-core/src/services/auth-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-store.d.ts","sourceRoot":"","sources":["../../../../../../app-core/src/services/auth-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAW3D,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,OAAO,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,SAAS,GAAG,SAAS,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,OAAO,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,SAAS,GAAG,SAAS,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACrD;AA6CD,qBAAa,SAAS;IACR,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,eAAe;IAE1C,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC;IAmBpE,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAUzD,yBAAyB,CAC7B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAU5B,yBAAyB,CAC7B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAU5B,sBAAsB,CAC1B,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAOV,oBAAoB,CACxB,IAAI,EAAE,OAAO,GAAG,SAAS,GACxB,OAAO,CAAC,eAAe,EAAE,CAAC;IAQvB,gBAAgB,IAAI,OAAO,CAAC,OAAO,CAAC;IASpC,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,cAAc,CAAC;IAwBvE;;;;OAIG;IACG,WAAW,CACf,EAAE,EAAE,MAAM,EACV,GAAG,GAAE,MAAmB,GACvB,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAc3B,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAU3E;;;;OAIG;IACG,YAAY,CAChB,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC;IAShB;;;;OAIG;IACG,4BAA4B,CAChC,UAAU,EAAE,MAAM,EAClB,GAAG,GAAE,MAAmB,EACxB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,CAAC;IAkBlB;;;;OAIG;IACG,0BAA0B,CAAC,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IAuB3E;;;OAGG;IACG,uBAAuB,CAC3B,UAAU,EAAE,MAAM,EAClB,GAAG,GAAE,MAAmB,GACvB,OAAO,CAAC,cAAc,EAAE,CAAC;IAgB5B;;;;;;;;OAQG;IACG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAStE,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtD,gBAAgB,CACpB,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,iBAAiB,CAAC;IAiCvB,kBAAkB,CAAC,KAAK,EAAE;QAC9B,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAClC,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBX,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAUjE,iCAAiC,CACrC,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAehC,+BAA+B,CAAC,KAAK,EAAE;QAC3C,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAgBjC,4BAA4B,CAChC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAS3B,yBAAyB,CAC7B,EAAE,EAAE,MAAM,EACV,eAAe,EAAE,MAAM,GAAG,IAAI,EAC9B,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAC9B,OAAO,CAAC,IAAI,CAAC;IAOV,wBAAwB,CAC5B,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC;IAYV,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAOhD,qBAAqB,CAAC,KAAK,EAAE;QACjC,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUX,mBAAmB,CACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAUzC;;;;;OAKG;IACG,sBAAsB,CAC1B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,OAAO,CAAC;CAYpB"}