@elizaos/app-core 2.0.0-beta.3 → 2.0.3-beta.3

package/services/auth-store.js

@@ -8,8 +8,14 @@
  * Every method is fail-fast: errors propagate to the caller. The auth code
  * path must NEVER swallow a DB error and pretend a request was authenticated.
  */
-import { authAuditEventTable, authBootstrapJtiSeenTable, authIdentityTable, authOwnerBindingTable, authOwnerLoginTokenTable, authSessionTable, } from "@elizaos/plugin-sql";
 import { and, desc, eq, isNull, lte, ne } from "drizzle-orm";
+let authSqlTablesPromise;
+async function getAuthSqlTables() {
+    // Dynamic import of @elizaos/plugin-sql returns the full module; we only
+    // consume the auth table exports. The cast crosses the module→subset boundary.
+    authSqlTablesPromise ??= import("@elizaos/plugin-sql");
+    return authSqlTablesPromise;
+}
 function readRunRowCount(result) {
     if (!result || typeof result !== "object")
         return null;
@@ -21,26 +27,26 @@ function nullableString(value) {
 }
 function rowToIdentity(row) {
     return {
-        id: row.id,
+        id: String(row.id),
         kind: row.kind === "machine" ? "machine" : "owner",
-        displayName: row.displayName,
+        displayName: String(row.displayName),
         createdAt: Number(row.createdAt),
-        passwordHash: row.passwordHash ?? null,
-        cloudUserId: row.cloudUserId ?? null,
+        passwordHash: nullableString(row.passwordHash),
+        cloudUserId: nullableString(row.cloudUserId),
     };
 }
 function rowToSession(row) {
     return {
-        id: row.id,
-        identityId: row.identityId,
+        id: String(row.id),
+        identityId: String(row.identityId),
         kind: row.kind === "machine" ? "machine" : "browser",
         createdAt: Number(row.createdAt),
         lastSeenAt: Number(row.lastSeenAt),
         expiresAt: Number(row.expiresAt),
-        rememberDevice: row.rememberDevice,
-        csrfSecret: row.csrfSecret,
-        ip: row.ip ?? null,
-        userAgent: row.userAgent ?? null,
+        rememberDevice: Boolean(row.rememberDevice),
+        csrfSecret: String(row.csrfSecret),
+        ip: nullableString(row.ip),
+        userAgent: nullableString(row.userAgent),
         scopes: Array.isArray(row.scopes) ? row.scopes : [],
         revokedAt: row.revokedAt === null || row.revokedAt === undefined
             ? null
@@ -53,6 +59,7 @@ export class AuthStore {
         this.db = db;
     }
     async createIdentity(input) {
+        const { authIdentityTable } = await getAuthSqlTables();
         const inserted = await this.db
             .insert(authIdentityTable)
             .values({
@@ -71,6 +78,7 @@ export class AuthStore {
         return rowToIdentity(row);
     }
     async findIdentity(id) {
+        const { authIdentityTable } = await getAuthSqlTables();
         const rows = await this.db
             .select()
             .from(authIdentityTable)
@@ -80,6 +88,7 @@ export class AuthStore {
         return row ? rowToIdentity(row) : null;
     }
     async findIdentityByCloudUserId(cloudUserId) {
+        const { authIdentityTable } = await getAuthSqlTables();
         const rows = await this.db
             .select()
             .from(authIdentityTable)
@@ -89,6 +98,7 @@ export class AuthStore {
         return row ? rowToIdentity(row) : null;
     }
     async findIdentityByDisplayName(displayName) {
+        const { authIdentityTable } = await getAuthSqlTables();
         const rows = await this.db
             .select()
             .from(authIdentityTable)
@@ -98,12 +108,14 @@ export class AuthStore {
         return row ? rowToIdentity(row) : null;
     }
     async updateIdentityPassword(id, passwordHash) {
+        const { authIdentityTable } = await getAuthSqlTables();
         await this.db
             .update(authIdentityTable)
             .set({ passwordHash })
             .where(eq(authIdentityTable.id, id));
     }
     async listIdentitiesByKind(kind) {
+        const { authIdentityTable } = await getAuthSqlTables();
         const rows = await this.db
             .select()
             .from(authIdentityTable)
@@ -111,6 +123,7 @@ export class AuthStore {
         return rows.map(rowToIdentity);
     }
     async hasOwnerIdentity() {
+        const { authIdentityTable } = await getAuthSqlTables();
         const rows = await this.db
             .select({ id: authIdentityTable.id })
             .from(authIdentityTable)
@@ -119,6 +132,7 @@ export class AuthStore {
         return rows.length > 0;
     }
     async createSession(input) {
+        const { authSessionTable } = await getAuthSqlTables();
         const inserted = await this.db
             .insert(authSessionTable)
             .values({
@@ -147,6 +161,7 @@ export class AuthStore {
      * and never as "transient error".
      */
     async findSession(id, now = Date.now()) {
+        const { authSessionTable } = await getAuthSqlTables();
         const rows = await this.db
             .select()
             .from(authSessionTable)
@@ -163,6 +178,7 @@ export class AuthStore {
         return session;
     }
     async revokeSession(id, now = Date.now()) {
+        const { authSessionTable } = await getAuthSqlTables();
         const result = await this.db
             .update(authSessionTable)
             .set({ revokedAt: now })
@@ -176,6 +192,7 @@ export class AuthStore {
      * policy-free.
      */
     async touchSession(id, lastSeenAt, expiresAt) {
+        const { authSessionTable } = await getAuthSqlTables();
         await this.db
             .update(authSessionTable)
             .set({ lastSeenAt, expiresAt })
@@ -187,6 +204,7 @@ export class AuthStore {
      * single statement — no read/write race window.
      */
     async revokeAllSessionsForIdentity(identityId, now = Date.now(), exceptSessionId) {
+        const { authSessionTable } = await getAuthSqlTables();
         const condition = exceptSessionId
             ? and(eq(authSessionTable.identityId, identityId), isNull(authSessionTable.revokedAt), ne(authSessionTable.id, exceptSessionId))
             : and(eq(authSessionTable.identityId, identityId), isNull(authSessionTable.revokedAt));
@@ -201,6 +219,7 @@ export class AuthStore {
      * first. Used by `/api/auth/sessions` to populate the security UI.
      */
     async listSessionsForIdentity(identityId, now = Date.now()) {
+        const { authSessionTable } = await getAuthSqlTables();
         const rows = await this.db
             .select()
             .from(authSessionTable)
@@ -227,6 +246,7 @@ export class AuthStore {
      * round trip and there is no TOCTOU window.
      */
     async recordJtiSeen(jti, now = Date.now()) {
+        const { authBootstrapJtiSeenTable } = await getAuthSqlTables();
         const inserted = await this.db
             .insert(authBootstrapJtiSeenTable)
             .values({ jti, seenAt: now })
@@ -235,11 +255,13 @@ export class AuthStore {
         return inserted.length > 0;
     }
     async pruneJtiSeenBefore(thresholdTs) {
+        const { authBootstrapJtiSeenTable } = await getAuthSqlTables();
         await this.db
             .delete(authBootstrapJtiSeenTable)
             .where(lte(authBootstrapJtiSeenTable.seenAt, thresholdTs));
     }
     async appendAuditEvent(input) {
+        const { authAuditEventTable } = await getAuthSqlTables();
         const inserted = await this.db
             .insert(authAuditEventTable)
             .values({
@@ -258,17 +280,18 @@ export class AuthStore {
             throw new Error("auth-store: appendAuditEvent returned no row");
         }
         return {
-            id: row.id,
+            id: String(row.id),
             ts: Number(row.ts),
-            actorIdentityId: row.actorIdentityId ?? null,
-            ip: row.ip ?? null,
-            userAgent: row.userAgent ?? null,
-            action: row.action,
+            actorIdentityId: nullableString(row.actorIdentityId),
+            ip: nullableString(row.ip),
+            userAgent: nullableString(row.userAgent),
+            action: String(row.action),
             outcome: row.outcome === "failure" ? "failure" : "success",
             metadata: (row.metadata ?? {}),
         };
     }
     async createOwnerBinding(input) {
+        const { authOwnerBindingTable } = await getAuthSqlTables();
         await this.db.insert(authOwnerBindingTable).values({
             id: input.id,
             identityId: input.identityId,
@@ -284,6 +307,7 @@ export class AuthStore {
         });
     }
     async findOwnerBinding(id) {
+        const { authOwnerBindingTable } = await getAuthSqlTables();
         const rows = await this.db
             .select()
             .from(authOwnerBindingTable)
@@ -293,6 +317,7 @@ export class AuthStore {
         return row ? rowToOwnerBinding(row) : null;
     }
     async findOwnerBindingByPendingCodeHash(pendingCodeHash, instanceId) {
+        const { authOwnerBindingTable } = await getAuthSqlTables();
         const rows = await this.db
             .select()
             .from(authOwnerBindingTable)
@@ -302,6 +327,7 @@ export class AuthStore {
         return row ? rowToOwnerBinding(row) : null;
     }
     async findOwnerBindingByConnectorPair(input) {
+        const { authOwnerBindingTable } = await getAuthSqlTables();
         const rows = await this.db
             .select()
             .from(authOwnerBindingTable)
@@ -311,6 +337,7 @@ export class AuthStore {
         return row ? rowToOwnerBinding(row) : null;
     }
     async listOwnerBindingsForIdentity(identityId) {
+        const { authOwnerBindingTable } = await getAuthSqlTables();
         const rows = await this.db
             .select()
             .from(authOwnerBindingTable)
@@ -319,12 +346,14 @@ export class AuthStore {
         return rows.map(rowToOwnerBinding);
     }
     async updateOwnerBindingPending(id, pendingCodeHash, pendingExpiresAt) {
+        const { authOwnerBindingTable } = await getAuthSqlTables();
         await this.db
             .update(authOwnerBindingTable)
             .set({ pendingCodeHash, pendingExpiresAt })
             .where(eq(authOwnerBindingTable.id, id));
     }
     async markOwnerBindingVerified(id, verifiedAt, displayHandle) {
+        const { authOwnerBindingTable } = await getAuthSqlTables();
         await this.db
             .update(authOwnerBindingTable)
             .set({
@@ -336,6 +365,7 @@ export class AuthStore {
             .where(eq(authOwnerBindingTable.id, id));
     }
     async deleteOwnerBinding(id) {
+        const { authOwnerBindingTable } = await getAuthSqlTables();
         const result = await this.db
             .delete(authOwnerBindingTable)
             .where(eq(authOwnerBindingTable.id, id));
@@ -343,6 +373,7 @@ export class AuthStore {
         return rowCount === null ? true : rowCount > 0;
     }
     async createOwnerLoginToken(input) {
+        const { authOwnerLoginTokenTable } = await getAuthSqlTables();
         await this.db.insert(authOwnerLoginTokenTable).values({
             tokenHash: input.tokenHash,
             identityId: input.identityId,
@@ -352,6 +383,7 @@ export class AuthStore {
         });
     }
     async findOwnerLoginToken(tokenHash) {
+        const { authOwnerLoginTokenTable } = await getAuthSqlTables();
         const rows = await this.db
             .select()
             .from(authOwnerLoginTokenTable)
@@ -367,6 +399,7 @@ export class AuthStore {
      * never as "transient error".
      */
     async consumeOwnerLoginToken(tokenHash, now) {
+        const { authOwnerLoginTokenTable } = await getAuthSqlTables();
         const result = await this.db
             .update(authOwnerLoginTokenTable)
             .set({ consumedAt: now })
@@ -377,14 +410,14 @@ export class AuthStore {
 }
 function rowToOwnerBinding(row) {
     return {
-        id: row.id,
-        identityId: row.identityId,
-        connector: row.connector,
-        externalId: row.externalId,
-        displayHandle: row.displayHandle,
-        instanceId: row.instanceId,
+        id: String(row.id),
+        identityId: String(row.identityId),
+        connector: String(row.connector),
+        externalId: String(row.externalId),
+        displayHandle: String(row.displayHandle),
+        instanceId: String(row.instanceId),
         verifiedAt: Number(row.verifiedAt),
-        pendingCodeHash: row.pendingCodeHash ?? null,
+        pendingCodeHash: nullableString(row.pendingCodeHash),
         pendingExpiresAt: row.pendingExpiresAt === null || row.pendingExpiresAt === undefined
             ? null
             : Number(row.pendingExpiresAt),
@@ -392,9 +425,9 @@ function rowToOwnerBinding(row) {
 }
 function rowToOwnerLoginToken(row) {
     return {
-        tokenHash: row.tokenHash,
-        identityId: row.identityId,
-        bindingId: row.bindingId,
+        tokenHash: String(row.tokenHash),
+        identityId: String(row.identityId),
+        bindingId: String(row.bindingId),
         issuedAt: Number(row.issuedAt),
         expiresAt: Number(row.expiresAt),
         consumedAt: row.consumedAt === null || row.consumedAt === undefined

package/services/cloud-jwks-store.d.ts

@@ -6,8 +6,8 @@
  * cache to disk under the eliza state dir so a container restart does not
  * require an online round-trip just to read its own boot token.
  *
- * State dir resolution honours `ELIZA_STATE_DIR` then `ELIZA_STATE_DIR`,
- * falling back to `~/.eliza`. The default cache TTL is 6h per the plan.
+ * State dir resolution honours `ELIZA_STATE_DIR` > XDG state home.
+ * The default cache TTL is 6h per the plan.
  */
 import type { RuntimeEnvRecord } from "@elizaos/shared";
 export declare const DEFAULT_JWKS_TTL_MS: number;
@@ -30,7 +30,7 @@ export interface JwksDocument {
 /**
  * Resolve the eliza state directory.
  *
- * Order: `ELIZA_STATE_DIR` → `ELIZA_STATE_DIR` → `~/.eliza`.
+ * Order: `ELIZA_STATE_DIR` -> XDG state home.
  */
 export declare function resolveElizaStateDir(env?: RuntimeEnvRecord): string;
 /**

package/services/cloud-jwks-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloud-jwks-store.d.ts","sourceRoot":"","sources":["../../../../../src/services/cloud-jwks-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAExD,eAAO,MAAM,mBAAmB,QAAqB,CAAC;AAGtD,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CAC7C;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,EAAE,CAAC;CACjB;AAQD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,gBAA8B,GAClC,MAAM,CAIR;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,gBAA8B,GAClC,MAAM,CAER;AAyCD;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,gBAAgB,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CACX,GACL,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAiB9B;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,YAAY,EAClB,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,gBAAgB,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GACrD,OAAO,CAAC,IAAI,CAAC,CAWf"}
+{"version":3,"file":"cloud-jwks-store.d.ts","sourceRoot":"","sources":["../../../../../src/services/cloud-jwks-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAExD,eAAO,MAAM,mBAAmB,QAAqB,CAAC;AAGtD,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CAC7C;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,EAAE,CAAC;CACjB;AAQD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,gBAA8B,GAClC,MAAM,CAER;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,gBAA8B,GAClC,MAAM,CAER;AAyCD;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,gBAAgB,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CACX,GACL,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAiB9B;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,YAAY,EAClB,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,gBAAgB,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GACrD,OAAO,CAAC,IAAI,CAAC,CAWf"}

package/services/cloud-jwks-store.js

@@ -6,24 +6,21 @@
  * cache to disk under the eliza state dir so a container restart does not
  * require an online round-trip just to read its own boot token.
  *
- * State dir resolution honours `ELIZA_STATE_DIR` then `ELIZA_STATE_DIR`,
- * falling back to `~/.eliza`. The default cache TTL is 6h per the plan.
+ * State dir resolution honours `ELIZA_STATE_DIR` > XDG state home.
+ * The default cache TTL is 6h per the plan.
  */
 import fs from "node:fs/promises";
-import os from "node:os";
 import path from "node:path";
+import { resolveStateDir } from "@elizaos/core";
 export const DEFAULT_JWKS_TTL_MS = 6 * 60 * 60 * 1000;
 const JWKS_CACHE_FILENAME = "cloud-jwks.json";
 /**
  * Resolve the eliza state directory.
  *
- * Order: `ELIZA_STATE_DIR` → `ELIZA_STATE_DIR` → `~/.eliza`.
+ * Order: `ELIZA_STATE_DIR` -> XDG state home.
  */
 export function resolveElizaStateDir(env = process.env) {
-    const explicit = env.ELIZA_STATE_DIR?.trim();
-    if (explicit)
-        return path.resolve(explicit);
-    return path.join(os.homedir(), ".eliza");
+    return resolveStateDir(env);
 }
 /**
  * Resolve the on-disk path for the JWKS cache.

package/services/coding-account-bridge.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Coding-agent account-selector bridge.
+ *
+ * The orchestrator plugin (`@elizaos/plugin-agent-orchestrator`) spawns Claude
+ * Code / Codex / OpenCode sub-agents but depends only on `@elizaos/core` — it
+ * cannot import the `AccountPool` or the credential store. So, exactly like the
+ * Anthropic and subscription-selector bridges in `account-pool.ts`, we publish a
+ * narrow contract on a `globalThis` symbol that the plugin reads at spawn time.
+ *
+ * Responsibilities:
+ *  - Map a coding-agent type ("claude" / "codex" / …) to its candidate provider
+ *    ids and pick one account from the pool (default `least-used`).
+ *  - Resolve that account's credential and return the env vars the spawned
+ *    coding-agent subprocess needs to authenticate AS THAT ACCOUNT:
+ *      claude  → `CLAUDE_CODE_OAUTH_TOKEN`
+ *      codex   → a per-account `CODEX_HOME` dir holding an `auth.json`
+ *      *-api   → the provider's direct API-key env var
+ *  - Record usage + health back into the pool keyed by the serving account.
+ *
+ * Subscription tokens only ever leave this layer to flow into the first-party
+ * coding subprocess (which IS Claude Code / Codex) — never into the runtime's
+ * own `process.env`. That respects the providers' TOS the same way
+ * `applySubscriptionCredentialsLocal` does.
+ */
+import type { LinkedAccountProviderId, LinkedAccountUsage } from "@elizaos/shared";
+import type { AccountPool, Strategy } from "./account-pool.js";
+export interface CodingAgentAccountDescriptor {
+    providerId: LinkedAccountProviderId;
+    accountId: string;
+    label: string;
+    source: "oauth" | "api-key";
+    strategy: Strategy;
+    usage?: LinkedAccountUsage;
+}
+export interface CodingAgentSelection extends CodingAgentAccountDescriptor {
+    /** Env vars to inject into the spawned coding-agent subprocess. */
+    envPatch: Record<string, string>;
+}
+export interface CodingProviderAvailability {
+    providerId: LinkedAccountProviderId;
+    total: number;
+    enabled: number;
+    healthy: number;
+}
+export interface CodingAgentSelectorBridge {
+    /** Which providers can serve each coding-agent type, with account counts. */
+    describe(): Record<string, CodingProviderAvailability[]>;
+    /** Pick an account for a new (or continuing) coding sub-agent. */
+    select(agentType: string, opts?: {
+        sessionKey?: string;
+        strategy?: Strategy;
+        exclude?: string[];
+    }): Promise<CodingAgentSelection | null>;
+    markRateLimited(providerId: LinkedAccountProviderId, accountId: string, untilMs: number, detail?: string): Promise<void>;
+    markNeedsReauth(providerId: LinkedAccountProviderId, accountId: string, detail?: string): Promise<void>;
+    recordUsage(providerId: LinkedAccountProviderId, accountId: string, result: {
+        tokens?: number;
+        ok: boolean;
+        model?: string;
+        latencyMs?: number;
+    }): Promise<void>;
+}
+export declare function isAuthFailure(err: unknown): boolean;
+/**
+ * Install the coding-agent selector bridge on `globalThis`. Idempotent — called
+ * from `getDefaultAccountPool()` so it is present before the first spawn.
+ */
+export declare function installCodingAgentSelectorBridge(pool: AccountPool): void;
+/** Read the installed bridge (null when no pool has been constructed yet). */
+export declare function getCodingAgentSelectorBridge(): CodingAgentSelectorBridge | null;
+//# sourceMappingURL=coding-account-bridge.d.ts.map

package/services/coding-account-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coding-account-bridge.d.ts","sourceRoot":"","sources":["../../../../../src/services/coding-account-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAcH,OAAO,KAAK,EACV,uBAAuB,EACvB,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAkD/D,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,uBAAuB,CAAC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,CAAC,EAAE,kBAAkB,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAqB,SAAQ,4BAA4B;IACxE,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,uBAAuB,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,yBAAyB;IACxC,6EAA6E;IAC7E,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACzD,kEAAkE;IAClE,MAAM,CACJ,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GACtE,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IACxC,eAAe,CACb,UAAU,EAAE,uBAAuB,EACnC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,eAAe,CACb,UAAU,EAAE,uBAAuB,EACnC,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,WAAW,CACT,UAAU,EAAE,uBAAuB,EACnC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE;QACN,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,EAAE,EAAE,OAAO,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GACA,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAeD,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAInD;AAqMD;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAIxE;AAED,8EAA8E;AAC9E,wBAAgB,4BAA4B,IAAI,yBAAyB,GAAG,IAAI,CAM/E"}