@emilia-protocol/gate 0.15.2 → 0.17.0

package/dist/consequence-actuator.d.ts

@@ -0,0 +1,226 @@
+/**
+ * Complete-mediation boundary for provider effects.
+ *
+ * Gate presents a short-lived signed execution envelope. The actuator verifies
+ * every binding under immutable local pins, atomically reserves the envelope,
+ * and only then enters a provider callback that owns its credential. Provider
+ * credentials are deliberately absent from every public type in this module.
+ */
+import { type KeyObject } from 'node:crypto';
+export declare const CONSEQUENCE_ACTUATOR_ENVELOPE_VERSION = "EP-CONSEQUENCE-ACTUATOR-ENVELOPE-v1";
+export declare const CONSEQUENCE_ACTUATOR_SIGNATURE_ALGORITHM = "Ed25519";
+export declare const CONSEQUENCE_ACTUATOR_SIGNATURE_DOMAIN = "EP-CONSEQUENCE-ACTUATOR-ENVELOPE-v1";
+export declare const DEFAULT_CONSEQUENCE_ACTUATOR_MAX_TTL_MS = 60000;
+export declare const DEFAULT_CONSEQUENCE_ACTUATOR_CLOCK_SKEW_MS = 2000;
+export declare const CONSEQUENCE_ACTUATOR_STORE_TABLE = "public.consequence_actuator_envelopes";
+export declare const CONSEQUENCE_ACTUATOR_EXECUTOR_ROLE = "consequence_actuator_executor";
+export declare const CONSEQUENCE_ACTUATOR_STORE_OWNER_ROLE = "consequence_actuator_store_owner";
+export declare const CONSEQUENCE_ACTUATOR_SQL: {
+    reserve: string;
+    consume: string;
+};
+type KeyMaterial = KeyObject | string | Buffer;
+export interface ConsequenceExecutionEnvelopePayload {
+    '@version': typeof CONSEQUENCE_ACTUATOR_ENVELOPE_VERSION;
+    issuer_id: string;
+    tenant_id: string;
+    attempt_id: string;
+    action_digest: string;
+    caid: string;
+    provider_account_id: string;
+    target_digest: string;
+    operation: string;
+    idempotency_key: string;
+    nonce: string;
+    issued_at: string;
+    expires_at: string;
+}
+export interface ConsequenceExecutionEnvelopeSignature {
+    algorithm: typeof CONSEQUENCE_ACTUATOR_SIGNATURE_ALGORITHM;
+    key_id: string;
+    value: string;
+}
+export interface SignedConsequenceExecutionEnvelope {
+    payload: ConsequenceExecutionEnvelopePayload;
+    signature: ConsequenceExecutionEnvelopeSignature;
+}
+export interface ConsequenceActuatorPins {
+    tenantId: string;
+    caid: string;
+    providerAccountId: string;
+    targetDigest: string;
+    operation: string;
+    envelopeIssuerId: string;
+    envelopeKeyId: string;
+    envelopePublicKey: KeyMaterial;
+    maxEnvelopeTtlMs?: number;
+    clockSkewMs?: number;
+}
+export interface VisibleConsequenceActuatorPins {
+    readonly tenantId: string;
+    readonly caid: string;
+    readonly providerAccountId: string;
+    readonly targetDigest: string;
+    readonly operation: string;
+    readonly envelopeIssuerId: string;
+    readonly envelopeKeyId: string;
+    readonly envelopePublicKeyFingerprint: string;
+    readonly maxEnvelopeTtlMs: number;
+    readonly clockSkewMs: number;
+}
+export interface ConsequenceActuatorReservation {
+    readonly tenantId: string;
+    readonly attemptId: string;
+    readonly actionDigest: string;
+    readonly caid: string;
+    readonly providerAccountId: string;
+    readonly targetDigest: string;
+    readonly operation: string;
+    readonly idempotencyKey: string;
+    readonly nonce: string;
+    readonly issuedAt: string;
+    readonly expiresAt: string;
+    readonly envelopeDigest: string;
+}
+export type ConsequenceActuatorOutcome = 'COMMITTED' | 'INDETERMINATE';
+export interface ConsequenceActuatorConsumption extends ConsequenceActuatorReservation {
+    readonly outcome: ConsequenceActuatorOutcome;
+}
+export interface ConsequenceActuatorStore {
+    /** Explicit marker for the built-in non-production test store. */
+    readonly testOnly?: true;
+    readonly durable: boolean;
+    readonly atomic: boolean;
+    readonly ownershipFenced: boolean;
+    readonly permanentConsumption: boolean;
+    reserve(reservation: ConsequenceActuatorReservation): Promise<boolean>;
+    consume(consumption: ConsequenceActuatorConsumption): Promise<boolean>;
+}
+export interface ConsequenceActuatorPgQueryResult {
+    readonly rowCount: number | null;
+    readonly rows: readonly unknown[];
+}
+/**
+ * A dedicated pool wrapper must label the login principal configured in its
+ * connection string. PostgreSQL independently enforces that SESSION_USER is a
+ * tenant-mapped member of consequence_actuator_executor.
+ */
+export interface DedicatedConsequenceActuatorExecutorPool {
+    readonly principal: string;
+    query(text: string, values: readonly unknown[]): Promise<ConsequenceActuatorPgQueryResult>;
+}
+export interface PostgresConsequenceActuatorStoreOptions {
+    readonly tenantId: string;
+    readonly executorPrincipal: string;
+    readonly executorPool: DedicatedConsequenceActuatorExecutorPool;
+}
+export interface ConsequenceActuatorExecutionInput {
+    envelope: unknown;
+    attemptId: string;
+    actionDigest: string;
+    idempotencyKey: string;
+}
+export type ConsequenceActuatorRefusalReason = 'malformed_envelope' | 'unsupported_version' | 'signer_key_mismatch' | 'issuer_mismatch' | 'tenant_mismatch' | 'caid_mismatch' | 'provider_account_mismatch' | 'target_mismatch' | 'operation_mismatch' | 'attempt_mismatch' | 'action_digest_mismatch' | 'idempotency_key_mismatch' | 'envelope_not_yet_valid' | 'envelope_expired' | 'envelope_ttl_exceeded' | 'signature_invalid' | 'store_reserve_failed' | 'envelope_replayed' | 'provider_outcome_indeterminate' | 'store_consume_unconfirmed';
+export type ConsequenceActuatorExecutionResult<TResult> = {
+    readonly ok: true;
+    readonly invoked: true;
+    readonly result: TResult;
+    readonly envelopeDigest: string;
+} | {
+    readonly ok: false;
+    readonly invoked: boolean;
+    readonly reason: ConsequenceActuatorRefusalReason;
+    readonly envelopeDigest?: string;
+};
+export type ConsequenceEnvelopeVerification = {
+    readonly ok: true;
+    readonly payload: Readonly<ConsequenceExecutionEnvelopePayload>;
+    readonly envelopeDigest: string;
+} | {
+    readonly ok: false;
+    readonly reason: Exclude<ConsequenceActuatorRefusalReason, 'store_reserve_failed' | 'envelope_replayed' | 'provider_outcome_indeterminate' | 'store_consume_unconfirmed'>;
+};
+interface VerifyExpectedBinding {
+    attemptId: string;
+    actionDigest: string;
+    idempotencyKey: string;
+}
+interface VerifyOptions {
+    pins: ConsequenceActuatorPins;
+    expected: VerifyExpectedBinding;
+    now?: number | (() => number);
+}
+interface ConsequenceActuatorOptions<TResult> {
+    pins: ConsequenceActuatorPins;
+    store: ConsequenceActuatorStore;
+    readonly testOnly?: true;
+    perform: (binding: Readonly<ConsequenceExecutionEnvelopePayload>) => TResult | Promise<TResult>;
+    now?: number | (() => number);
+}
+interface SignEnvelopeOptions {
+    privateKey: KeyMaterial;
+    keyId: string;
+}
+export interface MemoryConsequenceActuatorSnapshot extends ConsequenceActuatorReservation {
+    readonly state: 'RESERVED' | 'CONSUMED';
+    readonly outcome: ConsequenceActuatorOutcome | null;
+    readonly reservedAt: string;
+    readonly consumedAt: string | null;
+}
+/** Create a closed Ed25519 execution envelope for an already-authorized effect. */
+export declare function signConsequenceExecutionEnvelope(payload: ConsequenceExecutionEnvelopePayload, options: SignEnvelopeOptions): SignedConsequenceExecutionEnvelope;
+/** Verify an envelope without invoking a provider or mutating replay state. */
+export declare function verifyConsequenceExecutionEnvelope(envelope: unknown, options: VerifyOptions): ConsequenceEnvelopeVerification;
+/**
+ * Credential-owning actuator. `perform` captures the provider credential in
+ * the actuator process; callers cannot submit or replace that credential.
+ */
+export declare class ConsequenceActuator<TResult = unknown> {
+    #private;
+    readonly pins: VisibleConsequenceActuatorPins;
+    constructor(options: ConsequenceActuatorOptions<TResult>);
+    execute(input: ConsequenceActuatorExecutionInput): Promise<ConsequenceActuatorExecutionResult<TResult>>;
+}
+/**
+ * Race-safe, process-local reference store for tests. Map mutations occur
+ * before each async method yields, so concurrent calls have one reservation
+ * winner. Production must use the RPC-only durable store from the migration.
+ */
+export declare class MemoryConsequenceActuatorStore implements ConsequenceActuatorStore {
+    #private;
+    readonly testOnly: true;
+    readonly durable = false;
+    readonly atomic = true;
+    readonly ownershipFenced = false;
+    readonly permanentConsumption = false;
+    constructor(options?: {
+        now?: number | (() => number);
+    });
+    reserve(reservation: ConsequenceActuatorReservation): Promise<boolean>;
+    consume(consumption: ConsequenceActuatorConsumption): Promise<boolean>;
+    snapshot(tenantId: string, nonce: string): MemoryConsequenceActuatorSnapshot | null;
+    get size(): number;
+}
+export declare function createMemoryConsequenceActuatorStore(options?: {
+    now?: number | (() => number);
+}): MemoryConsequenceActuatorStore;
+/**
+ * Production adapter for the RPC-only PostgreSQL store. The supplied pool must
+ * be dedicated to one tenant-mapped executor login; the adapter never emits
+ * direct table SQL.
+ */
+export declare class PostgresConsequenceActuatorStore implements ConsequenceActuatorStore {
+    #private;
+    readonly durable = true;
+    readonly atomic = true;
+    readonly ownershipFenced = true;
+    readonly permanentConsumption = true;
+    readonly tenantId: string;
+    readonly executorPrincipal: string;
+    constructor(options: PostgresConsequenceActuatorStoreOptions);
+    reserve(reservation: ConsequenceActuatorReservation): Promise<boolean>;
+    consume(consumption: ConsequenceActuatorConsumption): Promise<boolean>;
+}
+export declare function createPostgresConsequenceActuatorStore(options: PostgresConsequenceActuatorStoreOptions): PostgresConsequenceActuatorStore;
+export {};
+//# sourceMappingURL=consequence-actuator.d.ts.map

package/dist/consequence-actuator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consequence-actuator.d.ts","sourceRoot":"","sources":["../src/consequence-actuator.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AAEH,OAAO,EAML,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAGrB,eAAO,MAAM,qCAAqC,wCACX,CAAC;AACxC,eAAO,MAAM,wCAAwC,YAAY,CAAC;AAClE,eAAO,MAAM,qCAAqC,wCACX,CAAC;AACxC,eAAO,MAAM,uCAAuC,QAAS,CAAC;AAC9D,eAAO,MAAM,0CAA0C,OAAQ,CAAC;AAChE,eAAO,MAAM,gCAAgC,0CACJ,CAAC;AAC1C,eAAO,MAAM,kCAAkC,kCACd,CAAC;AAClC,eAAO,MAAM,qCAAqC,qCACd,CAAC;AACrC,eAAO,MAAM,wBAAwB;;;CAYnC,CAAC;AA2BH,KAAK,WAAW,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;AAE/C,MAAM,WAAW,mCAAmC;IAClD,UAAU,EAAE,OAAO,qCAAqC,CAAC;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qCAAqC;IACpD,SAAS,EAAE,OAAO,wCAAwC,CAAC;IAC3D,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kCAAkC;IACjD,OAAO,EAAE,mCAAmC,CAAC;IAC7C,SAAS,EAAE,qCAAqC,CAAC;CAClD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,WAAW,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;IAC9C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,MAAM,0BAA0B,GAAG,WAAW,GAAG,eAAe,CAAC;AAEvE,MAAM,WAAW,8BACf,SAAQ,8BAA8B;IACtC,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;CAC9C;AAED,MAAM,WAAW,wBAAwB;IACvC,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,OAAO,CAAC,WAAW,EAAE,8BAA8B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvE,OAAO,CAAC,WAAW,EAAE,8BAA8B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,SAAS,OAAO,EAAE,CAAC;CACnC;AAED;;;;GAIG;AACH,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,KAAK,CACH,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,SAAS,OAAO,EAAE,GACzB,OAAO,CAAC,gCAAgC,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,wCAAwC,CAAC;CACjE;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,gCAAgC,GACxC,oBAAoB,GACpB,qBAAqB,GACrB,qBAAqB,GACrB,iBAAiB,GACjB,iBAAiB,GACjB,eAAe,GACf,2BAA2B,GAC3B,iBAAiB,GACjB,oBAAoB,GACpB,kBAAkB,GAClB,wBAAwB,GACxB,0BAA0B,GAC1B,wBAAwB,GACxB,kBAAkB,GAClB,uBAAuB,GACvB,mBAAmB,GACnB,sBAAsB,GACtB,mBAAmB,GACnB,gCAAgC,GAChC,2BAA2B,CAAC;AAEhC,MAAM,MAAM,kCAAkC,CAAC,OAAO,IAClD;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,gCAAgC,CAAC;IAClD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC,CAAC;AAEN,MAAM,MAAM,+BAA+B,GACvC;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IAChE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,OAAO,CACtB,gCAAgC,EAC9B,sBAAsB,GACtB,mBAAmB,GACnB,gCAAgC,GAChC,2BAA2B,CAC9B,CAAC;CACH,CAAC;AAON,UAAU,qBAAqB;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,aAAa;IACrB,IAAI,EAAE,uBAAuB,CAAC;IAC9B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;CAC/B;AAED,UAAU,0BAA0B,CAAC,OAAO;IAC1C,IAAI,EAAE,uBAAuB,CAAC;IAC9B,KAAK,EAAE,wBAAwB,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;IACzB,OAAO,EAAE,CACP,OAAO,EAAE,QAAQ,CAAC,mCAAmC,CAAC,KACnD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;CAC/B;AAED,UAAU,mBAAmB;IAC3B,UAAU,EAAE,WAAW,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iCACf,SAAQ,8BAA8B;IACtC,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,0BAA0B,GAAG,IAAI,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAgXD,mFAAmF;AACnF,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,mCAAmC,EAC5C,OAAO,EAAE,mBAAmB,GAC3B,kCAAkC,CAqBpC;AAED,+EAA+E;AAC/E,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,OAAO,EACjB,OAAO,EAAE,aAAa,GACrB,+BAA+B,CAWjC;AAED;;;GAGG;AACH,qBAAa,mBAAmB,CAAC,OAAO,GAAG,OAAO;;IAChD,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAC;gBAUlC,OAAO,EAAE,0BAA0B,CAAC,OAAO,CAAC;IAgClD,OAAO,CACX,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,kCAAkC,CAAC,OAAO,CAAC,CAAC;CA0FxD;AAyCD;;;;GAIG;AACH,qBAAa,8BACb,YAAW,wBAAwB;;IACjC,QAAQ,CAAC,QAAQ,EAAG,IAAI,CAAU;IAClC,QAAQ,CAAC,OAAO,SAAS;IACzB,QAAQ,CAAC,MAAM,QAAQ;IACvB,QAAQ,CAAC,eAAe,SAAS;IACjC,QAAQ,CAAC,oBAAoB,SAAS;gBAM1B,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAA;KAAO;IAIrD,OAAO,CACX,WAAW,EAAE,8BAA8B,GAC1C,OAAO,CAAC,OAAO,CAAC;IAmBb,OAAO,CACX,WAAW,EAAE,8BAA8B,GAC1C,OAAO,CAAC,OAAO,CAAC;IAoBnB,QAAQ,CACN,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,iCAAiC,GAAG,IAAI;IAM3C,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF;AAED,wBAAgB,oCAAoC,CAClD,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAA;CAAO,GAC9C,8BAA8B,CAEhC;AA6DD;;;;GAIG;AACH,qBAAa,gCACb,YAAW,wBAAwB;;IACjC,QAAQ,CAAC,OAAO,QAAQ;IACxB,QAAQ,CAAC,MAAM,QAAQ;IACvB,QAAQ,CAAC,eAAe,QAAQ;IAChC,QAAQ,CAAC,oBAAoB,QAAQ;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;gBAIvB,OAAO,EAAE,uCAAuC;IAoBtD,OAAO,CACX,WAAW,EAAE,8BAA8B,GAC1C,OAAO,CAAC,OAAO,CAAC;IA6Bb,OAAO,CACX,WAAW,EAAE,8BAA8B,GAC1C,OAAO,CAAC,OAAO,CAAC;CA4BpB;AAED,wBAAgB,sCAAsC,CACpD,OAAO,EAAE,uCAAuC,GAC/C,gCAAgC,CAElC"}