@elizaos/agent 2.0.3-beta.2 → 2.0.3-beta.4

package/services/remote-plugin-bridge.js

@@ -20,6 +20,82 @@
 // ./error subpath, not the barrel: the barrel eagerly loads ./bootstrap's heavy
 // runtime chain, which crashed agent boot in the cloud image.
 import { fromWireError, toWireError, } from "@elizaos/plugin-worker-runtime/error";
+import * as z from "zod";
+/**
+ * Schema for the announce/dynamic descriptor the worker emits via
+ * {@link buildAnnounceDescriptor} (packages/plugin-worker-runtime/src/descriptor.ts).
+ *
+ * The descriptor is untrusted JSON crossing the host↔worker RPC boundary, so
+ * it is parsed once at ingress instead of being blind-cast field by field.
+ *
+ * Object schemas are intentionally passthrough (extra keys pass through): the
+ * producer only writes a field when it is present, the metadata surfaces
+ * (`views`/`widgets`/`componentTypes`) are author-defined JSON, and the
+ * service entries carry dynamic `rpc:<method>` keys. The schema validates the
+ * *container shape* (array vs record vs object) and the fields the bridge
+ * actually reads; everything else is preserved verbatim. Functions are
+ * replaced on the wire by {@link RemoteFunctionRef} (`{ rpc: true, id }`).
+ */
+const RemoteFunctionRefSchema = z
+    .object({
+    rpc: z.literal(true),
+    id: z.string(),
+})
+    .passthrough();
+const ActionDescriptorSchema = z
+    .object({
+    name: z.string(),
+    handler: RemoteFunctionRefSchema,
+    similes: z.array(z.string()).optional(),
+    description: z.string().optional(),
+    examples: z.unknown().optional(),
+    validate: RemoteFunctionRefSchema.optional(),
+})
+    .passthrough();
+const ProviderDescriptorSchema = z
+    .object({
+    name: z.string(),
+    get: RemoteFunctionRefSchema,
+    description: z.string().optional(),
+    dynamic: z.boolean().optional(),
+    position: z.number().optional(),
+    private: z.boolean().optional(),
+})
+    .passthrough();
+const ServiceDescriptorSchema = z
+    .object({
+    serviceType: z.string(),
+    rpcMethods: z.array(z.string()),
+    capabilityDescription: z.string().optional(),
+})
+    .passthrough();
+const RouteDescriptorSchema = z
+    .object({
+    path: z.string(),
+    routeHandler: RemoteFunctionRefSchema.optional(),
+    type: z.unknown().optional(),
+    name: z.unknown().optional(),
+    public: z.unknown().optional(),
+    isMultipart: z.unknown().optional(),
+})
+    .passthrough();
+const RemotePluginDescriptorSchema = z
+    .object({
+    name: z.string().optional(),
+    description: z.unknown().optional(),
+    priority: z.unknown().optional(),
+    dependencies: z.array(z.string()).optional(),
+    actions: z.array(ActionDescriptorSchema).optional(),
+    providers: z.array(ProviderDescriptorSchema).optional(),
+    events: z.record(z.string(), z.array(RemoteFunctionRefSchema)).optional(),
+    models: z.record(z.string(), RemoteFunctionRefSchema).optional(),
+    services: z.array(ServiceDescriptorSchema).optional(),
+    routes: z.array(RouteDescriptorSchema).optional(),
+    views: z.array(z.unknown()).optional(),
+    widgets: z.array(z.unknown()).optional(),
+    componentTypes: z.array(z.unknown()).optional(),
+})
+    .passthrough();
 function isWorkerActionCallbackEnvelope(message) {
     const candidate = message;
     return candidate.type === "worker-action-callback";
@@ -119,7 +195,8 @@ export class RemotePluginBridge {
         }
         await this.applyDynamicContributions(registeredPlugin, dynamicPlugin);
     }
-    materialisePlugin(descriptor) {
+    materialisePlugin(rawDescriptor) {
+        const descriptor = RemotePluginDescriptorSchema.parse(rawDescriptor);
         const name = String(descriptor.name ?? "");
         if (!name)
             throw new Error("worker-announce-plugin descriptor missing name");
@@ -132,7 +209,7 @@ export class RemotePluginBridge {
             plugin.priority = Number(descriptor.priority);
         }
         if (descriptor.dependencies) {
-            plugin.dependencies = descriptor.dependencies ?? [];
+            plugin.dependencies = descriptor.dependencies;
         }
         this.attachFunctionContributions(plugin, descriptor);
         this.attachServiceContributions(plugin, descriptor);
@@ -242,27 +319,23 @@ export class RemotePluginBridge {
         }
     }
     attachFunctionContributions(plugin, descriptor) {
-        const actions = descriptor.actions;
-        if (actions?.length) {
-            plugin.actions = actions.map((action) => this.makeActionProxy(action));
+        if (descriptor.actions?.length) {
+            plugin.actions = descriptor.actions.map((action) => this.makeActionProxy(action));
         }
-        const providers = descriptor.providers;
-        if (providers?.length) {
-            plugin.providers = providers.map((provider) => this.makeProviderProxy(provider));
+        if (descriptor.providers?.length) {
+            plugin.providers = descriptor.providers.map((provider) => this.makeProviderProxy(provider));
         }
-        const events = descriptor.events;
-        if (events) {
+        if (descriptor.events) {
             const eventMap = {};
-            for (const [eventName, refs] of Object.entries(events)) {
+            for (const [eventName, refs] of Object.entries(descriptor.events)) {
                 const handlers = refs.map((ref) => this.makeEventHandlerProxy(ref));
                 eventMap[eventName] = handlers;
             }
             plugin.events = eventMap;
         }
-        const models = descriptor.models;
-        if (models) {
+        if (descriptor.models) {
             const modelMap = {};
-            for (const [modelType, ref] of Object.entries(models)) {
+            for (const [modelType, ref] of Object.entries(descriptor.models)) {
                 modelMap[modelType] =
                     this.makeModelHandlerProxy(ref);
             }
@@ -273,18 +346,16 @@ export class RemotePluginBridge {
         // Services: opt-in via `static rpcMethods`. The descriptor carries
         // one entry per service with the methods list and per-method rpc
         // ids; we synthesise a ServiceClass with dynamic methods.
-        const services = descriptor.services;
-        if (services?.length) {
-            plugin.services = services.map((svc) => this.makeServiceClassProxy(svc));
+        if (descriptor.services?.length) {
+            plugin.services = descriptor.services.map((svc) => this.makeServiceClassProxy(svc));
         }
     }
     attachRouteContributions(plugin, descriptor) {
         // Routes: the agent's existing plugin-route lifecycle will pick
         // these up. Each routeHandler is wrapped to forward
         // RouteHandlerContext via worker-rpc and return RouteHandlerResult.
-        const routes = descriptor.routes;
-        if (routes?.length) {
-            plugin.routes = routes
+        if (descriptor.routes?.length) {
+            plugin.routes = descriptor.routes
                 .map((r) => this.makeRouteProxy(r))
                 .filter((r) => r !== null);
         }
@@ -354,7 +425,7 @@ export class RemotePluginBridge {
         const description = String(descriptor.description ?? "");
         const dynamic = descriptor.dynamic === true;
         const priv = descriptor.private === true;
-        const position = typeof descriptor.position === "number" ? descriptor.position : undefined;
+        const position = descriptor.position;
         const get = async (_runtime, message, state) => {
             const result = await this.workerRpc("provider", descriptor.get.id, {
                 message: this.normalize(message),
@@ -394,9 +465,9 @@ export class RemotePluginBridge {
         const description = descriptor.capabilityDescription ?? "";
         const methodIdMap = new Map();
         for (const method of descriptor.rpcMethods) {
-            const ref = descriptor[`rpc:${method}`];
-            if (ref?.rpc)
-                methodIdMap.set(method, ref.id);
+            const ref = RemoteFunctionRefSchema.safeParse(descriptor[`rpc:${method}`]);
+            if (ref.success)
+                methodIdMap.set(method, ref.data.id);
         }
         // Build the proxy class on the fly. The Service base class isn't
         // imported here to avoid pulling all of @elizaos/core into this
@@ -547,7 +618,7 @@ export class RemotePluginBridge {
             case "getMemory": {
                 const memoryId = String(args.memoryId);
                 const memory = await this.runtime.getMemoryById(memoryId);
-                return (memory ?? null);
+                return JSON.parse(JSON.stringify(memory ?? null));
             }
             case "createMemory": {
                 const memory = args.memory;
@@ -579,7 +650,7 @@ export class RemotePluginBridge {
             case "composeState": {
                 const memory = args.message;
                 const result = await this.runtime.composeState(memory);
-                return (result ?? null);
+                return JSON.parse(JSON.stringify(result ?? null));
             }
             default:
                 throw new Error(`Unsupported host-rpc method: ${message.method}. P1 supports getService, useModel, getMemory, createMemory, updateMemory, emitEvent, getSetting, setSetting, composeState.`);

package/services/remote-signing-service.d.ts

@@ -3,10 +3,10 @@
  * sandboxed agents submit unsigned tx → policy check → sign → return.
  */
 import { type IAgentRuntime, Service } from "@elizaos/core";
-import type { SandboxAuditLog } from "../security/audit-log.ts";
-import { type PolicyDecision, type SigningPolicy, type SigningRequest } from "./signing-policy.ts";
-import type { TeeEvidenceProvider } from "./tee-evidence.ts";
-import type { TeeEvidencePolicy } from "./tee-policy.ts";
+import type { SandboxAuditLog } from "../security/audit-log.js";
+import { type PolicyDecision, type SigningPolicy, type SigningRequest } from "./signing-policy.js";
+import type { TeeEvidenceProvider } from "./tee-evidence.js";
+import type { TeeEvidencePolicy } from "./tee-policy.js";
 export interface SignerBackend {
     getAddress(): Promise<string>;
     signMessage(message: string): Promise<string>;

package/services/research-task-executor.d.ts

@@ -1,5 +1,5 @@
 import { type IAgentRuntime } from "@elizaos/core";
-import type { TaskExecutor, TaskResult, TaskSpec } from "./task-executor.ts";
+import type { TaskExecutor, TaskResult, TaskSpec } from "./task-executor.js";
 /**
  * Decomposes research questions into sub-questions, answers each via the
  * runtime's LLM, and synthesizes a final report.

package/services/sandbox-manager.d.ts

@@ -1,5 +1,5 @@
 /** Sandbox container lifecycle: create, exec, health check, teardown. */
-import { type SandboxEngineType } from "./sandbox-engine.ts";
+import { type SandboxEngineType } from "./sandbox-engine.js";
 export type SandboxMode = "off" | "light" | "standard" | "max";
 export type SandboxState = "uninitialized" | "initializing" | "ready" | "degraded" | "stopping" | "stopped" | "recovering";
 export interface SandboxManagerConfig {

package/services/self-updater.d.ts

@@ -2,7 +2,7 @@
  * Detects the installation method and runs the appropriate upgrade command.
  * Falls back to npm if detection is ambiguous.
  */
-import type { ReleaseChannel } from "../config/types.eliza.ts";
+import type { ReleaseChannel } from "../config/types.eliza.js";
 export type InstallMethod = "npm-global" | "bun-global" | "homebrew" | "snap" | "apt" | "flatpak" | "local-dev" | "unknown";
 export type UpdateAuthority = "package-manager" | "os-package-manager" | "developer" | "operator";
 export type UpdateNextAction = "run-package-manager-command" | "run-git-pull" | "review-installation" | "none";

package/services/self-updater.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"self-updater.d.ts","sourceRoot":"","sources":["../../src/services/self-updater.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAK/D,MAAM,MAAM,aAAa,GACrB,YAAY,GACZ,YAAY,GACZ,UAAU,GACV,MAAM,GACN,KAAK,GACL,SAAS,GACT,WAAW,GACX,SAAS,CAAC;AAEd,MAAM,MAAM,eAAe,GACvB,iBAAiB,GACjB,oBAAoB,GACpB,WAAW,GACX,UAAU,CAAC;AAEf,MAAM,MAAM,gBAAgB,GACxB,6BAA6B,GAC7B,cAAc,GACd,qBAAqB,GACrB,MAAM,CAAC;AAEX,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,eAAe,CAAC;IAC3B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,aAAa,EAAE,OAAO,CAAC;IACvB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB;AA8BD,wBAAgB,mBAAmB,IAAI,aAAa,CAyBnD;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,cAAc,GACtB,iBAAiB,GAAG,IAAI,CAyD1B;AAkDD,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GACpC,gBAAgB,CAyBlB;AA6CD,wBAAsB,aAAa,CACjC,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,cAAc,EACvB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,YAAY,CAAC,CAsCvB"}
+{"version":3,"file":"self-updater.d.ts","sourceRoot":"","sources":["../../src/services/self-updater.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAK/D,MAAM,MAAM,aAAa,GACrB,YAAY,GACZ,YAAY,GACZ,UAAU,GACV,MAAM,GACN,KAAK,GACL,SAAS,GACT,WAAW,GACX,SAAS,CAAC;AAEd,MAAM,MAAM,eAAe,GACvB,iBAAiB,GACjB,oBAAoB,GACpB,WAAW,GACX,UAAU,CAAC;AAEf,MAAM,MAAM,gBAAgB,GACxB,6BAA6B,GAC7B,cAAc,GACd,qBAAqB,GACrB,MAAM,CAAC;AAEX,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,eAAe,CAAC;IAC3B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,aAAa,EAAE,OAAO,CAAC;IACvB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB;AAmCD,wBAAgB,mBAAmB,IAAI,aAAa,CA0BnD;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,cAAc,GACtB,iBAAiB,GAAG,IAAI,CAyD1B;AAkDD,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GACpC,gBAAgB,CAyBlB;AAkDD,wBAAsB,aAAa,CACjC,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,cAAc,EACvB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,YAAY,CAAC,CAsCvB"}

package/services/self-updater.js

@@ -9,13 +9,18 @@ import { fileURLToPath } from "node:url";
 import { CHANNEL_DIST_TAGS } from "./update-checker.js";
 const NPM_PACKAGE_NAME = "elizaos";
 function whichSync(binary) {
+    // `which` does not exist on Windows — use `where`, which lists matches one
+    // per line (take the first). Without this, every lookup throws ENOENT and is
+    // swallowed, so detectInstallMethod() always falls back to "unknown".
+    const cmd = process.platform === "win32" ? "where" : "which";
     try {
-        return execSync(`which ${binary}`, {
+        const out = execSync(`${cmd} ${binary}`, {
             stdio: ["ignore", "pipe", "ignore"],
             timeout: 5_000,
         })
             .toString()
             .trim();
+        return out.split(/\r?\n/)[0]?.trim() || null;
     }
     catch {
         return null;
@@ -43,17 +48,21 @@ export function detectInstallMethod() {
     catch {
         resolved = elizaBin;
     }
-    if (resolved.includes("/Cellar/") || resolved.includes("/homebrew/"))
+    // Normalize separators so the substring/prefix checks below match on Windows,
+    // where realpathSync returns backslash drive paths (e.g. C:\Users\…\.bun\…).
+    // Without this, bun-global is mis-detected as "unknown" on Windows.
+    const p = resolved.replace(/\\/g, "/");
+    if (p.includes("/Cellar/") || p.includes("/homebrew/"))
         return "homebrew";
-    if (resolved.includes("/snap/"))
+    if (p.includes("/snap/"))
         return "snap";
-    if (resolved.includes("/flatpak/") || resolved.includes("ai.eliza.Eliza"))
+    if (p.includes("/flatpak/") || p.includes("ai.eliza.Eliza"))
         return "flatpak";
-    if (resolved.startsWith("/usr/") && !resolved.includes("node_modules"))
+    if (p.startsWith("/usr/") && !p.includes("node_modules"))
         return "apt";
-    if (resolved.includes("/.bun/"))
+    if (p.includes("/.bun/"))
         return "bun-global";
-    if (resolved.includes("node_modules"))
+    if (p.includes("node_modules"))
         return "npm-global";
     return "unknown";
 }
@@ -180,8 +189,13 @@ function runCommand(command, args) {
     return new Promise((resolve) => {
         const child = spawn(command, args, {
             stdio: ["inherit", "inherit", "pipe"],
-            // shell:true removed — all update commands are safe to run directly.
-            // The apt case uses sh -c explicitly, so no shell wrapper is needed.
+            // The global launcher is a `.cmd` shim on Windows (npm.cmd / bun.cmd),
+            // which Node cannot spawn without a shell (ENOENT) — every npm-global
+            // auto-update would fail. Route through the shell on win32 so the shim
+            // resolves. Update args are static/internal (e.g. `install -g <spec>`),
+            // so there is no injection surface; the Linux apt case uses an explicit
+            // `sh -c` and is unaffected.
+            shell: process.platform === "win32",
         });
         let stderr = "";
         child.stderr.on("data", (chunk) => {

package/services/shell-execution-router.d.ts

@@ -15,7 +15,7 @@
  * `local-safe` actually hold.
  */
 import { type RuntimeExecutionMode } from "@elizaos/shared";
-import type { SandboxManager } from "./sandbox-manager.ts";
+import type { SandboxManager } from "./sandbox-manager.js";
 export type ShellExecutionMode = RuntimeExecutionMode;
 export type ShellSandboxBackend = "host" | "docker" | "apple-container" | "wsl2" | "appcontainer" | "vfs" | "none";
 export interface ShellRequest {

package/services/shell-execution-router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shell-execution-router.d.ts","sourceRoot":"","sources":["../../src/services/shell-execution-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAOH,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAI3D,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEtD,MAAM,MAAM,mBAAmB,GAC3B,MAAM,GACN,QAAQ,GACR,iBAAiB,GACjB,MAAM,GACN,cAAc,GACd,KAAK,GACL,MAAM,CAAC;AAEX,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,wEAAwE;IACxE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,mBAAmB,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,4EAA4E;IAC5E,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,0EAA0E;IAC1E,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3D,gFAAgF;IAChF,cAAc,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACvC;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;CAC9D;AAOD,wBAAgB,yBAAyB,CACvC,GAAG,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,IAAI,GACxD,kBAAkB,CAGpB;AA0CD,+DAA+D;AAC/D,wBAAgB,gCAAgC,IAAI,IAAI,CAGvD;AA+OD;;;;;;;;;;GAUG;AACH,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,YAAY,EACjB,GAAG,CAAC,EAAE,kBAAkB,GAAG,IAAI,GAC9B,OAAO,CAAC,WAAW,CAAC,CAuDtB"}
+{"version":3,"file":"shell-execution-router.d.ts","sourceRoot":"","sources":["../../src/services/shell-execution-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAQH,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAI3D,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEtD,MAAM,MAAM,mBAAmB,GAC3B,MAAM,GACN,QAAQ,GACR,iBAAiB,GACjB,MAAM,GACN,cAAc,GACd,KAAK,GACL,MAAM,CAAC;AAEX,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,wEAAwE;IACxE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,mBAAmB,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,4EAA4E;IAC5E,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,0EAA0E;IAC1E,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3D,gFAAgF;IAChF,cAAc,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACvC;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;CAC9D;AAOD,wBAAgB,yBAAyB,CACvC,GAAG,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,IAAI,GACxD,kBAAkB,CAGpB;AA0CD,+DAA+D;AAC/D,wBAAgB,gCAAgC,IAAI,IAAI,CAGvD;AA+PD;;;;;;;;;;GAUG;AACH,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,YAAY,EACjB,GAAG,CAAC,EAAE,kBAAkB,GAAG,IAAI,GAC9B,OAAO,CAAC,WAAW,CAAC,CAuDtB"}

package/services/shell-execution-router.js

@@ -18,6 +18,7 @@ import { spawn } from "node:child_process";
 import fsp from "node:fs/promises";
 import path from "node:path";
 import process from "node:process";
+import { sanitizeSpawnEnv } from "@elizaos/core";
 import { resolveRuntimeExecutionMode, } from "@elizaos/shared";
 import { CapabilityBroker } from "./capability-broker.js";
 import { isVfsUri, runVfsBuiltinShell } from "./vfs-builtin-shell.js";
@@ -68,6 +69,20 @@ export function __resetShellRouterBrokerForTests() {
     cachedRouterBroker = null;
     routerModeHolder.current = "local-yolo";
 }
+/**
+ * Strip dangerous keys (LD_PRELOAD, NODE_OPTIONS, DYLD_*, proxy + package-manager
+ * config prefixes, ...) from a caller-supplied child environment before it
+ * reaches a spawned process. Delegates to the core spawn-env policy and narrows
+ * the result back to a string map (the policy only removes keys, never values).
+ */
+function sanitizeChildEnv(env) {
+    const out = {};
+    for (const [key, value] of Object.entries(sanitizeSpawnEnv(env))) {
+        if (value !== undefined)
+            out[key] = value;
+    }
+    return out;
+}
 async function runOnHost(req) {
     const start = Date.now();
     return await new Promise((resolve) => {
@@ -75,7 +90,9 @@ async function runOnHost(req) {
         const useDetachedProcessGroup = process.platform !== "win32";
         const child = spawn(req.command, req.args.slice(), {
             cwd: req.cwd,
-            env: req.env ? { ...process.env, ...req.env } : process.env,
+            env: req.env
+                ? { ...process.env, ...sanitizeChildEnv(req.env) }
+                : process.env,
             detached: useDetachedProcessGroup,
             stdio: ["ignore", "pipe", "pipe"],
         });
@@ -145,7 +162,7 @@ async function runInSandbox(req, manager) {
         cmd: req.command,
         args: req.args,
         workdir: req.cwd,
-        env: req.env,
+        env: req.env ? sanitizeChildEnv(req.env) : undefined,
         timeoutMs: req.timeoutMs,
     });
     if (result.stdout)

package/services/tee-boot-gate-state.d.ts

@@ -12,7 +12,7 @@
  * `teeBootGateBlocksSecrets()` returns false and gated paths behave exactly as
  * they did before TEE gating existed.
  */
-import type { TeeBootGate } from "./tee-boot-gate.ts";
+import type { TeeBootGate } from "./tee-boot-gate.js";
 /** Publish the one-time boot-gate decision for cross-module consumption. */
 export declare function setTeeBootGateState(gate: TeeBootGate): void;
 /** The published boot-gate decision, or undefined when none has been set. */

package/services/tee-boot-gate.d.ts

@@ -1,7 +1,7 @@
-import type { TeeEvidenceProvider } from "./tee-evidence.ts";
-import { type TeeEvidencePolicy, type TeeEvidencePolicyDecision } from "./tee-policy.ts";
-import { type TeeProductionProfileOptions } from "./tee-production-profile.ts";
-import { type ResolveTeeRuntimePolicyOptions } from "./tee-runtime-config.ts";
+import type { TeeEvidenceProvider } from "./tee-evidence.js";
+import { type TeeEvidencePolicy, type TeeEvidencePolicyDecision } from "./tee-policy.js";
+import { type TeeProductionProfileOptions } from "./tee-production-profile.js";
+import { type ResolveTeeRuntimePolicyOptions } from "./tee-runtime-config.js";
 /**
  * Boot-time TEE gate (plan §4.1). Consumes the resolved runtime policy, applies
  * the production profile when configured, collects evidence via the provider,

package/services/tee-confidential-inference.d.ts

@@ -1,6 +1,6 @@
-import type { TeeMeasurementName } from "./tee-evidence.ts";
-import type { TeeKeyReleaseClient, TeeKeyReleaseResult } from "./tee-key-release.ts";
-import type { TeeEvidencePolicy } from "./tee-policy.ts";
+import type { TeeMeasurementName } from "./tee-evidence.js";
+import type { TeeKeyReleaseClient, TeeKeyReleaseResult } from "./tee-key-release.js";
+import type { TeeEvidencePolicy } from "./tee-policy.js";
 /**
  * Confidential-inference unseal path (plan §2.2 steps 4–7).
  *

package/services/tee-key-release.d.ts

@@ -1,5 +1,5 @@
-import type { TeeEvidence, TeeEvidenceProvider } from "./tee-evidence.ts";
-import { type TeeEvidencePolicy, type TeeEvidencePolicyDecision } from "./tee-policy.ts";
+import type { TeeEvidence, TeeEvidenceProvider } from "./tee-evidence.js";
+import { type TeeEvidencePolicy, type TeeEvidencePolicyDecision } from "./tee-policy.js";
 export type TeeKeyReleaseRequest = {
     keyId: string;
     context?: string;

package/services/tee-model-key-boot.d.ts

@@ -1,7 +1,7 @@
-import { type InferenceTopology, type ModelKeyUnsealResult, type SealedWeightsBlob, type SealedWeightsManifest, type ShardSink, type StreamingUnsealResult } from "./tee-confidential-inference.ts";
-import type { TeeMeasurementName } from "./tee-evidence.ts";
-import type { TeeKeyReleaseClient } from "./tee-key-release.ts";
-import type { TeeEvidencePolicy } from "./tee-policy.ts";
+import { type InferenceTopology, type ModelKeyUnsealResult, type SealedWeightsBlob, type SealedWeightsManifest, type ShardSink, type StreamingUnsealResult } from "./tee-confidential-inference.js";
+import type { TeeMeasurementName } from "./tee-evidence.js";
+import type { TeeKeyReleaseClient } from "./tee-key-release.js";
+import type { TeeEvidencePolicy } from "./tee-policy.js";
 /**
  * Boot-time integration seam between the TEE confidential-inference unseal path
  * (`tee-confidential-inference.ts`) and the local model runtime (plan §2.2).

package/services/tee-policy.d.ts

@@ -1,4 +1,4 @@
-import { type TeeClaims, type TeeEvidence, type TeeKind, type TeeMeasurementName } from "./tee-evidence.ts";
+import { type TeeClaims, type TeeEvidence, type TeeKind, type TeeMeasurementName } from "./tee-evidence.js";
 export type TeeEvidencePolicy = {
     required?: boolean;
     allowedKinds?: TeeKind[];

package/services/tee-production-profile.d.ts

@@ -1,4 +1,4 @@
-import type { TeeEvidencePolicy } from "./tee-policy.ts";
+import type { TeeEvidencePolicy } from "./tee-policy.js";
 /**
  * Non-negotiable production floor for confidential-AI TEE trust.
  *

package/services/tee-release-policy.d.ts

@@ -1,4 +1,4 @@
-import type { TeeEvidencePolicy } from "./tee-policy.ts";
+import type { TeeEvidencePolicy } from "./tee-policy.js";
 export type TeeReleaseManifestLike = {
     tee?: {
         enabled?: boolean;

package/services/tee-revocation.d.ts

@@ -1,5 +1,5 @@
-import type { TeeMeasurementName } from "./tee-evidence.ts";
-import type { TeeEvidencePolicy } from "./tee-policy.ts";
+import type { TeeMeasurementName } from "./tee-evidence.js";
+import type { TeeEvidencePolicy } from "./tee-policy.js";
 export type TeeRevocationEntry = {
     value: string | number;
     reason?: string;

package/services/tee-runtime-config.d.ts

@@ -1,4 +1,4 @@
-import type { TeeEvidencePolicy } from "./tee-policy.ts";
+import type { TeeEvidencePolicy } from "./tee-policy.js";
 export type TeeRuntimeConfigEnv = Record<string, string | undefined>;
 export type ResolveTeeRuntimePolicyOptions = {
     env?: TeeRuntimeConfigEnv;

package/services/tee-sealed-volume.d.ts

@@ -1,6 +1,6 @@
-import type { TeeMeasurementName } from "./tee-evidence.ts";
-import type { TeeKeyReleaseClient, TeeKeyReleaseResult } from "./tee-key-release.ts";
-import type { TeeEvidencePolicy } from "./tee-policy.ts";
+import type { TeeMeasurementName } from "./tee-evidence.js";
+import type { TeeKeyReleaseClient, TeeKeyReleaseResult } from "./tee-key-release.js";
+import type { TeeEvidencePolicy } from "./tee-policy.js";
 /**
  * Attestation-bound sealed state-volume key manager (plan §2.3 / Phase C item
  * C3). Replaces dstack's host-readable LUKS2 key (GHSA-jxq2-hpw3-m5wf, plan

package/services/tee-signer-backend.d.ts

@@ -1,6 +1,6 @@
-import type { SignerBackend, UnsignedTransaction } from "./remote-signing-service.ts";
-import type { TeeEvidenceProvider } from "./tee-evidence.ts";
-import { type TeeEvidencePolicy, type TeeEvidencePolicyDecision } from "./tee-policy.ts";
+import type { SignerBackend, UnsignedTransaction } from "./remote-signing-service.js";
+import type { TeeEvidenceProvider } from "./tee-evidence.js";
+import { type TeeEvidencePolicy, type TeeEvidencePolicyDecision } from "./tee-policy.js";
 export type TeeSignerBackendConfig = {
     signer: SignerBackend;
     evidenceProvider: TeeEvidenceProvider;

package/services/update-checker.d.ts

@@ -2,7 +2,7 @@
  * Queries the npm registry for new elizaos versions on the user's
  * configured release channel (stable/beta/nightly).
  */
-import type { ReleaseChannel, UpdateConfig } from "../config/types.eliza.ts";
+import type { ReleaseChannel, UpdateConfig } from "../config/types.eliza.js";
 /** npm dist-tag corresponding to each release channel. */
 export declare const CHANNEL_DIST_TAGS: Readonly<Record<ReleaseChannel, string>>;
 export interface UpdateCheckResult {

package/services/vault-signer-backend.d.ts

@@ -12,7 +12,7 @@
  * added separately when that dependency is acceptable.
  */
 import type { Vault } from "@elizaos/vault";
-import type { SignerBackend, UnsignedTransaction } from "./remote-signing-service.ts";
+import type { SignerBackend, UnsignedTransaction } from "./remote-signing-service.js";
 export interface VaultSignerBackendConfig {
     readonly vault: Vault;
     readonly agentId: string;

package/services/vfs-git.d.ts

@@ -1,5 +1,5 @@
 import type { PostWorkbenchVfsGitRequest } from "@elizaos/shared";
-import type { VirtualFilesystemService } from "./virtual-filesystem.ts";
+import type { VirtualFilesystemService } from "./virtual-filesystem.js";
 export interface VfsGitStatusEntry {
     filepath: string;
     head: GitFileState;

package/test-support/index.d.ts

@@ -1,4 +1,4 @@
-export * from "./process-helpers.ts";
-export * from "./route-test-helpers.ts";
-export * from "./test-helpers.ts";
+export * from "./process-helpers.js";
+export * from "./route-test-helpers.js";
+export * from "./test-helpers.js";
 //# sourceMappingURL=index.d.ts.map

package/triggers/runtime.d.ts

@@ -1,5 +1,5 @@
 import type { IAgentRuntime, Task } from "@elizaos/core";
-import type { TriggerConfig, TriggerHealthSnapshot, TriggerRunRecord, TriggerSummary } from "./types.ts";
+import type { TriggerConfig, TriggerHealthSnapshot, TriggerRunRecord, TriggerSummary } from "./types.js";
 export declare const TRIGGER_TASK_NAME: "TRIGGER_DISPATCH";
 export declare const TRIGGER_TASK_TAGS: readonly ["queue", "repeat", "trigger"];
 export interface TriggerExecutionOptions {

package/triggers/scheduling.d.ts

@@ -1,21 +1,8 @@
 import type { UUID } from "@elizaos/core";
-import { type NormalizedTriggerDraft, type TriggerConfig, type TriggerKind, type TriggerTaskMetadata, type TriggerType, type TriggerWakeMode } from "./types.ts";
-export declare const MIN_TRIGGER_INTERVAL_MS = 60000;
-export declare const MAX_TRIGGER_INTERVAL_MS: number;
-export declare const DISABLED_TRIGGER_INTERVAL_MS: number;
+import { computeNextCronRunAtMs, DISABLED_TRIGGER_INTERVAL_MS, MAX_TRIGGER_INTERVAL_MS, MIN_TRIGGER_INTERVAL_MS, normalizeTriggerIntervalMs, parseCronExpression, parseScheduledAtIso, resolveTriggerTiming, type TriggerTiming } from "@elizaos/core";
+import { type NormalizedTriggerDraft, type TriggerConfig, type TriggerKind, type TriggerTaskMetadata, type TriggerType, type TriggerWakeMode } from "./types.js";
+export { computeNextCronRunAtMs, DISABLED_TRIGGER_INTERVAL_MS, MAX_TRIGGER_INTERVAL_MS, MIN_TRIGGER_INTERVAL_MS, normalizeTriggerIntervalMs, parseCronExpression, parseScheduledAtIso, resolveTriggerTiming, type TriggerTiming, };
 export declare const MAX_TRIGGER_RUN_HISTORY = 100;
-interface CronSchedule {
-    minute: Set<number>;
-    hour: Set<number>;
-    dayOfMonth: Set<number>;
-    month: Set<number>;
-    dayOfWeek: Set<number>;
-}
-export interface TriggerTiming {
-    updatedAt: number;
-    updateIntervalMs: number;
-    nextRunAtMs: number;
-}
 interface DraftInput {
     displayName?: string;
     instructions?: string;
@@ -34,11 +21,6 @@ interface DraftInput {
     workflowName?: string;
 }
 export declare function normalizeText(value: string): string;
-export declare function parseCronExpression(expression: string): CronSchedule | null;
-export declare function computeNextCronRunAtMs(expression: string, fromMs: number, timezone?: string): number | null;
-export declare function parseScheduledAtIso(scheduledAtIso: string): number | null;
-export declare function normalizeTriggerIntervalMs(intervalMs: number): number;
-export declare function resolveTriggerTiming(trigger: TriggerConfig, nowMs: number): TriggerTiming | null;
 export declare function buildTriggerMetadata(params: {
     existingMetadata?: TriggerTaskMetadata;
     trigger: TriggerConfig;
@@ -74,5 +56,4 @@ export declare function normalizeTriggerDraft(params: {
     draft?: NormalizedTriggerDraft;
     error?: string;
 };
-export {};
 //# sourceMappingURL=scheduling.d.ts.map

package/triggers/scheduling.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scheduling.d.ts","sourceRoot":"","sources":["../../src/triggers/scheduling.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EACL,KAAK,sBAAsB,EAE3B,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAC9C,eAAO,MAAM,uBAAuB,QAA2B,CAAC;AAChE,eAAO,MAAM,4BAA4B,QAA4B,CAAC;AACtE,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAW3C,UAAU,YAAY;IACpB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACpB,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAClB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACnB,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACxB;AAgBD,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,UAAU;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAeD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD;AA8CD,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAmC3E;AA6DD,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,GAAG,IAAI,CAgBf;AAED,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAIzE;AAED,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAIrE;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,MAAM,GACZ,aAAa,GAAG,IAAI,CA0CtB;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;IACvC,OAAO,EAAE,aAAa,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,mBAAmB,GAAG,IAAI,CAc7B;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,WAAW,EAAE,WAAW,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,eAAe,CAAC;IAC1B,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,MAAM,CAkBT;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,KAAK,EAAE,sBAAsB,CAAC;IAC9B,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,CAAC,EAAE,aAAa,CAAC;CAC1B,GAAG,aAAa,CA+ChB;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE;QACR,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,WAAW,CAAC;QACzB,QAAQ,EAAE,eAAe,CAAC;QAC1B,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH,GAAG;IAAE,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAyIrD"}
+{"version":3,"file":"scheduling.d.ts","sourceRoot":"","sources":["../../src/triggers/scheduling.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,EAC1B,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,KAAK,sBAAsB,EAE3B,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,EAC1B,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,aAAa,GACnB,CAAC;AAEF,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAE3C,UAAU,UAAU;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;IACvC,OAAO,EAAE,aAAa,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,mBAAmB,GAAG,IAAI,CAc7B;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,WAAW,EAAE,WAAW,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,eAAe,CAAC;IAC1B,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,MAAM,CAkBT;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,KAAK,EAAE,sBAAsB,CAAC;IAC9B,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,CAAC,EAAE,aAAa,CAAC;CAC1B,GAAG,aAAa,CA+ChB;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE;QACR,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,WAAW,CAAC;QACzB,QAAQ,EAAE,eAAe,CAAC;QAC1B,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH,GAAG;IAAE,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAyIrD"}