@ggui-ai/cli 0.1.0-rc.1

package/dist/generation-probe.d.ts

@@ -0,0 +1,135 @@
+/**
+ * BYOK probe helper — boot-time scan + per-request resolver for
+ * `ggui serve`.
+ *
+ * Two layers, both expressed through a single
+ * {@link GenerationBinding}:
+ *
+ *   1. **Boot scan** — walk providers in a fixed priority
+ *      (`anthropic` → `openai` → `google` → `openrouter`). First
+ *      hit at the operator's `'global'` scope (env or
+ *      `~/.ggui/credentials.json`) names the "default provider"
+ *      surfaced on the banner. Misses are fine — see (3).
+ *   2. **Per-request resolver** — the returned `resolveLlm(ctx)`
+ *      re-runs the resolver for the chosen provider with
+ *      `userScope: ctx.appId`, so per-end-user keys stored at the
+ *      caller's identity scope flip in at request time without a
+ *      server restart. Multi-tenant `ggui serve` lives off this
+ *      seam: each authenticated user manages their OWN provider
+ *      key via `/settings`, the resolver picks it up on the next
+ *      `ggui_push`.
+ *   3. **No-key default** — when the boot scan finds nothing, we
+ *      STILL return a binding (provider=`anthropic`, model=
+ *      `claude-haiku-4-5`). Generation stays wired; the
+ *      no-credentials path now produces a Connect-Claude card
+ *      stack item via {@link GenerationDeps.onNoCredentials}
+ *      instead of the broken `codeReady:false` placeholder.
+ *      Caller-supplied `onNoCredentials` is threaded through
+ *      verbatim.
+ *
+ * **Overrides:** `probeGenerationBinding({ resolver, blueprints,
+ * onNoCredentials? })` takes the resolver + blueprint provider as
+ * inputs so tests can supply fakes without mutating `process.env` /
+ * touching the home directory.
+ *
+ * **Explicit non-scope:** provider override via env / config /
+ * flag. The fixed priority is fine for current usage; a follow-up
+ * can add `GGUI_GENERATION_PROVIDER` / `ggui.json#generation.model`
+ * without re-shaping this seam.
+ */
+import type { BlueprintProvider, GenerationDeps, HandlerContext, LlmProvider, SessionStackEntry } from '@ggui-ai/mcp-server';
+import type { ByokKeyResolution, ByokResolver } from './byok-resolver.js';
+/**
+ * Locked default model per provider for the OSS first-run path.
+ *
+ * These are the "sensible default for an operator who exported
+ * `ANTHROPIC_API_KEY` without thinking about which model" — NOT
+ * benchmark-tuned recommendations. A later slice wires
+ * `ggui.json#generation.model` so operators can pick explicitly;
+ * until then these keep the zero-config path honest.
+ *
+ * Notably absent: `bedrock`. AWS credentials flow through the SDK
+ * chain, which the OSS BYOK resolver doesn't cover — the hosted runtime
+ * binds Bedrock through its own `GenerationDeps` at the hosted
+ * surface.
+ */
+export declare const DEFAULT_MODEL_BY_PROVIDER: Readonly<Record<Exclude<LlmProvider, 'bedrock'>, string>>;
+/**
+ * Priority order for BYOK provider probing. The first provider
+ * whose credentials resolve wins. Anthropic first is deliberate —
+ * the OSS ecosystem defaults to Claude, and most operators export
+ * `ANTHROPIC_API_KEY` by default.
+ */
+export declare const PROVIDER_PROBE_ORDER: readonly Exclude<LlmProvider, 'bedrock'>[];
+export interface ProbeGenerationBindingOptions {
+    readonly resolver: ByokResolver;
+    readonly blueprints: BlueprintProvider;
+    /** Override the probe order. Tests use this to pin the winner. */
+    readonly providerOrder?: readonly Exclude<LlmProvider, 'bedrock'>[];
+    /**
+     * Optional no-credentials fallback hook threaded straight onto
+     * {@link GenerationDeps.onNoCredentials}. The CLI builds this
+     * from the operator's resolved settings URL so the
+     * Connect-Claude card points at THIS server's `/settings`.
+     * Tests + programmatic embedders that want the legacy error
+     * envelope leave it absent.
+     */
+    readonly onNoCredentials?: (ctx: HandlerContext, story: {
+        readonly intent: string;
+        readonly stackItemId: string;
+        readonly nowIso: string;
+    }) => SessionStackEntry | null | Promise<SessionStackEntry | null>;
+}
+/**
+ * Outcome of the boot probe. Always returned (no `null` shape) —
+ * the per-request `resolveLlm` walks the provider order with
+ * `userScope: ctx.appId` so end-user keys can flip in even when
+ * the operator's boot scan came up empty.
+ *
+ * `bootResolved: false` is the operator-facing "no platform key"
+ * signal: banner copy + the no-credentials fallback path are
+ * conditioned on it.
+ */
+export interface GenerationBinding {
+    readonly generation: GenerationDeps;
+    readonly provider: LlmProvider;
+    readonly model: string;
+    /**
+     * `true` when the boot scan resolved a key at the operator's
+     * `'global'` scope (env or credentials-file). `false` means
+     * generation will fall back to either the per-end-user key
+     * (multi-tenant) or the {@link GenerationDeps.onNoCredentials}
+     * card on first call.
+     */
+    readonly bootResolved: boolean;
+    /** Boot-scan key source — only meaningful when `bootResolved`. */
+    readonly keySource?: ByokKeyResolution['source'];
+    /** Env-var name that produced the boot-scan hit, when applicable. */
+    readonly keyEnvName?: string;
+}
+/**
+ * Build a `GenerationBinding` whose `resolveLlm` does live BYOK
+ * lookup at request time (env + global → user-scope), threading
+ * `ctx.appId` into the resolver as `userScope`.
+ *
+ * Always returns a binding — even when no provider resolved at
+ * boot. The caller supplies `onNoCredentials` to render a
+ * Connect-Claude card on misses; absent that hook, misses surface
+ * the legacy "no-credentials" error envelope.
+ */
+export declare function probeGenerationBinding(opts: ProbeGenerationBindingOptions): Promise<GenerationBinding>;
+/**
+ * Render a single operator-facing banner line describing the
+ * generation binding. Always returns a string — when boot didn't
+ * resolve a key, the line still names the default provider/model
+ * the per-request resolver will try first, so the operator
+ * understands which provider's key the user-facing
+ * `/settings` page is steering toward.
+ *
+ * Format:
+ *   `generation: anthropic / claude-haiku-4-5 (env: ANTHROPIC_API_KEY)`
+ *   `generation: openai / gpt-4o (credentials-file)`
+ *   `generation: anthropic / claude-haiku-4-5 (no boot key — per-user fallback)`
+ */
+export declare function describeGenerationBinding(binding: GenerationBinding): string;
+//# sourceMappingURL=generation-probe.d.ts.map

package/dist/generation-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generation-probe.d.ts","sourceRoot":"","sources":["../src/generation-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,KAAK,EACV,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,WAAW,EAGX,iBAAiB,EAClB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EACV,iBAAiB,EACjB,YAAY,EACb,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAC9C,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAUhD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,EAC1B,CAAC;AAElD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,kEAAkE;IAClE,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;IACpE;;;;;;;OAOG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,CACzB,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE;QACL,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,KACE,iBAAiB,GAAG,IAAI,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;CACnE;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACjD,qEAAqE;IACrE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,6BAA6B,GAClC,OAAO,CAAC,iBAAiB,CAAC,CA0E5B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,iBAAiB,GACzB,MAAM,CAWR"}

package/dist/generation-probe.js

@@ -0,0 +1,132 @@
+import { createUiGenerator } from '@ggui-ai/ui-gen';
+/**
+ * Locked default model per provider for the OSS first-run path.
+ *
+ * These are the "sensible default for an operator who exported
+ * `ANTHROPIC_API_KEY` without thinking about which model" — NOT
+ * benchmark-tuned recommendations. A later slice wires
+ * `ggui.json#generation.model` so operators can pick explicitly;
+ * until then these keep the zero-config path honest.
+ *
+ * Notably absent: `bedrock`. AWS credentials flow through the SDK
+ * chain, which the OSS BYOK resolver doesn't cover — the hosted runtime
+ * binds Bedrock through its own `GenerationDeps` at the hosted
+ * surface.
+ */
+export const DEFAULT_MODEL_BY_PROVIDER = {
+    // Slash-prefixed `<provider>/<model>` form — `getProviderForModel`
+    // expects it; bare names trip the "Unrecognized model format" warning
+    // and silently default to anthropic. Pre-matrix the openai/google
+    // defaults were also bare; this fixes them as part of the model bump.
+    anthropic: 'anthropic/claude-haiku-4-5',
+    openai: 'openai/gpt-5.5-2026-04-23',
+    google: 'google/gemini-3.5-flash',
+    openrouter: 'anthropic/claude-haiku-4.5',
+};
+/**
+ * Priority order for BYOK provider probing. The first provider
+ * whose credentials resolve wins. Anthropic first is deliberate —
+ * the OSS ecosystem defaults to Claude, and most operators export
+ * `ANTHROPIC_API_KEY` by default.
+ */
+export const PROVIDER_PROBE_ORDER = ['anthropic', 'openai', 'google', 'openrouter'];
+/**
+ * Build a `GenerationBinding` whose `resolveLlm` does live BYOK
+ * lookup at request time (env + global → user-scope), threading
+ * `ctx.appId` into the resolver as `userScope`.
+ *
+ * Always returns a binding — even when no provider resolved at
+ * boot. The caller supplies `onNoCredentials` to render a
+ * Connect-Claude card on misses; absent that hook, misses surface
+ * the legacy "no-credentials" error envelope.
+ */
+export async function probeGenerationBinding(opts) {
+    const order = opts.providerOrder ?? PROVIDER_PROBE_ORDER;
+    // Boot scan — surfaces the banner-line provider/source. If
+    // multiple providers have boot-time keys, the first in priority
+    // order wins (matches pre-H2 behavior).
+    let bootHit = null;
+    for (const provider of order) {
+        const resolution = await opts.resolver.resolve(provider);
+        if (resolution) {
+            bootHit = { ...resolution, provider };
+            break;
+        }
+    }
+    // Default provider locks to anthropic on boot-miss — matches the
+    // OSS "Claude first" posture. The Connect-Claude card flow steers
+    // misses toward an Anthropic key (env/file/OAuth); nothing in the
+    // contract prevents users from pasting an OpenAI/Google key
+    // instead, but the boot-time provider for THIS server stays
+    // anthropic until the operator restarts with a different boot
+    // hit.
+    const defaultProvider = bootHit?.provider ?? 'anthropic';
+    const defaultModel = DEFAULT_MODEL_BY_PROVIDER[defaultProvider];
+    // Full-harness wire-up: `createUiGenerator` runs the same
+    // multi-turn coding agent + self-check loop the bench validates;
+    // `dispatchGeneration` returns compiled JS on `componentCode`.
+    const uiGenerator = createUiGenerator();
+    const resolveLlm = async (ctx) => {
+        // Per-call BYOK with `userScope: ctx.appId` — env + global
+        // (operator) checked first, then the caller's identity scope
+        // (end-user). Multi-tenant + Anthropic-OAuth flows store
+        // user-supplied bundles under `userId` here.
+        const resolution = await opts.resolver.resolve(defaultProvider, {
+            userScope: ctx.appId,
+        });
+        if (!resolution)
+            return null;
+        return {
+            selection: { provider: defaultProvider, model: defaultModel },
+            providerKey: { provider: defaultProvider, key: resolution.key },
+        };
+    };
+    const generation = {
+        uiGenerator,
+        resolveLlm,
+        blueprints: opts.blueprints,
+        ...(opts.onNoCredentials ? { onNoCredentials: opts.onNoCredentials } : {}),
+    };
+    const result = bootHit
+        ? {
+            generation,
+            provider: defaultProvider,
+            model: defaultModel,
+            bootResolved: true,
+            keySource: bootHit.source,
+            ...(bootHit.envName !== undefined
+                ? { keyEnvName: bootHit.envName }
+                : {}),
+        }
+        : {
+            generation,
+            provider: defaultProvider,
+            model: defaultModel,
+            bootResolved: false,
+        };
+    return result;
+}
+/**
+ * Render a single operator-facing banner line describing the
+ * generation binding. Always returns a string — when boot didn't
+ * resolve a key, the line still names the default provider/model
+ * the per-request resolver will try first, so the operator
+ * understands which provider's key the user-facing
+ * `/settings` page is steering toward.
+ *
+ * Format:
+ *   `generation: anthropic / claude-haiku-4-5 (env: ANTHROPIC_API_KEY)`
+ *   `generation: openai / gpt-4o (credentials-file)`
+ *   `generation: anthropic / claude-haiku-4-5 (no boot key — per-user fallback)`
+ */
+export function describeGenerationBinding(binding) {
+    if (!binding.bootResolved) {
+        return `generation: ${binding.provider} / ${binding.model} (no boot key — per-user fallback)`;
+    }
+    const src = binding.keySource === 'env'
+        ? binding.keyEnvName
+            ? `env: ${binding.keyEnvName}`
+            : 'env'
+        : 'credentials-file';
+    return `generation: ${binding.provider} / ${binding.model} (${src})`;
+}

package/dist/internal/artifact-install.d.ts

@@ -0,0 +1,150 @@
+/** Artifact-kind discriminator — the verb the operator typed
+ * (`gadget` vs `blueprint`). Enforced against the registry-served
+ * manifest's `kind` discriminator. */
+export type ArtifactKind = 'gadget' | 'blueprint';
+/**
+ * Resolved flags accepted by {@link runArtifactInstall}. Built by
+ * {@link parseArtifactInstallFlags} from argv or constructed directly
+ * from object literals in tests.
+ */
+export interface InstallFlags {
+    /** CLI verb the operator typed — enforced against the manifest kind. */
+    readonly kind: ArtifactKind;
+    /** `@scope/name` form, e.g. `@my-org/weather-card`. */
+    readonly artifactId: string;
+    /** SemVer string the user typed after `@`. Required. */
+    readonly version: string;
+    /** Override the registry URL — highest precedence. */
+    readonly registry?: string;
+    /** Skip interactive `publicEnv` prompts; missing required keys → warning + exit 0. */
+    readonly noPrompt: boolean;
+    /** Fail-hard on skipped signature verification (vs. warn + continue). */
+    readonly strict: boolean;
+    /**
+     * Optional OIDC-identity assertion for sigstore-signed gadgets.
+     * When set, install demands the bundle's Fulcio leaf-cert subject
+     * matches the supplied pattern. Pass as a literal subject string
+     * (e.g. `alice@example.com`); the signature-verify implementation
+     * decides literal-vs-regex semantics. No effect on Ed25519-signed
+     * gadgets — those root in the registry-pinned `authorPublicKey`.
+     */
+    readonly verifyIdentity?: string;
+}
+/**
+ * `{ error: '__help__' }` carries the help-requested case so the CLI
+ * driver can write {@link GADGET_INSTALL_HELP} to stdout without
+ * misclassifying it as a usage error. All other `error` strings are
+ * stderr-bound diagnostics.
+ */
+export type ParsedInstallFlags = InstallFlags | {
+    error: string;
+};
+/**
+ * Build verb-specific help text. Takes the `kind` so the rendered
+ * lines say `ggui gadget install` / `ggui blueprint install` rather
+ * than a generic placeholder.
+ */
+export declare function buildInstallHelp(kind: ArtifactKind): string;
+/**
+ * Parse `args` (the argv tail after `ggui {gadget,blueprint} install`)
+ * into {@link InstallFlags}. The `kind` parameter is the verb the
+ * operator typed — it's stamped onto the returned flags so the
+ * downstream {@link runArtifactInstall} can enforce manifest-kind
+ * alignment without re-parsing argv.
+ *
+ * Returns an `{ error }` object on usage failure so the CLI driver
+ * branches without try/catch. `'__help__'` is the sentinel for
+ * `--help`; every other `error` is stderr-bound copy.
+ */
+export declare function parseArtifactInstallFlags(kind: ArtifactKind, args: readonly string[]): ParsedInstallFlags;
+/**
+ * Dependency seams for {@link runArtifactInstall}. All IO threads through
+ * here so tests stub `fetch`, `cwd`, env access, and stdout/stderr
+ * writers without touching globals.
+ */
+export interface RunArtifactInstallDeps {
+    /** Resolved working directory. */
+    readonly cwd?: string;
+    /** Environment view — defaults to `process.env`. */
+    readonly env?: Readonly<Partial<Record<string, string | undefined>>>;
+    /** HTTP fetch implementation. Defaults to `globalThis.fetch`. */
+    readonly fetch?: typeof fetch;
+    /** stdout sink. Defaults to `process.stdout.write`. */
+    readonly stdout?: (line: string) => void;
+    /** stderr sink. Defaults to `process.stderr.write`. */
+    readonly stderr?: (line: string) => void;
+    /**
+     * Public-env prompter. Returns the value the operator typed for the
+     * given key, or `null` if they declined. Defaults to a stdin TTY
+     * reader in production. Tests stub the function.
+     *
+     * Skipped entirely when {@link InstallFlags.noPrompt} is true —
+     * missing required keys surface as warnings instead.
+     */
+    readonly promptForEnv?: (key: string) => Promise<string | null>;
+}
+/**
+ * Run the install flow end-to-end. Returns a numeric exit code so the
+ * router writes it directly to `process.exit`.
+ *
+ * Exit codes:
+ *   - 0 — success (gadget installed, ggui.json updated) OR blueprint
+ *         fetched + verified (no write target yet, see step 10).
+ *   - 1 — operational failure (registry 404 / 410, manifest invalid,
+ *         signature mismatch, SRI mismatch, etc.).
+ *   - 2 — usage error (bad flags, no ggui.json found).
+ */
+export declare function runArtifactInstall(flags: InstallFlags, deps?: RunArtifactInstallDeps): Promise<number>;
+/**
+ * Destination subdirectory under the project root for marketplace-
+ * installed blueprints. Chosen so the existing `blueprints.include`
+ * glob loader picks them up without any code change — `discoverLocalUis`
+ * walks every glob, parses every matched `ggui.ui.json`, and emits
+ * `DiscoveredUi` entries. The "registry-installed" subtree is just
+ * one more glob root.
+ */
+export declare const INSTALLED_BLUEPRINTS_SUBDIR = ".ggui/installed-blueprints";
+/**
+ * Glob pattern auto-appended to `ggui.json#blueprints.include` so the
+ * OSS server discovers materialized blueprints alongside hand-authored
+ * ones. Idempotent — install only adds the entry once.
+ */
+export declare const INSTALLED_BLUEPRINTS_GLOB: ".ggui/installed-blueprints/**/ggui.ui.json";
+/**
+ * Predicate: "is this discovered-UI manifest path inside
+ * `.ggui/installed-blueprints/`?".
+ *
+ * Cross-platform — matches both Unix (`/.ggui/installed-blueprints/`)
+ * and Windows (`\.ggui\installed-blueprints\`) separators. A
+ * Unix-only `includes('/.ggui/installed-blueprints/')` check would
+ * silently match zero entries on Windows, where `tinyglobby` returns
+ * `\`-separated absolute paths.
+ *
+ * Defined once here, next to the constant it is derived from. Both
+ * `cli.ts` (filter discovered UIs) and `mcp-backend.ts` (project to
+ * bridge entries) consume it, so the two filter sites cannot drift.
+ */
+export declare function isInstalledBlueprintPath(manifestPath: string): boolean;
+/**
+ * Compute the directory leaf for a given blueprint manifest. Safe for
+ * filesystem paths — `<scope-without-@>__<name>__<version>`, no slashes
+ * or colons (the version's `.` is fine on every supported FS). The
+ * `__` separator avoids confusion with scope names that contain `-`.
+ */
+export declare function blueprintInstallSubdir(args: {
+    scope: string;
+    name: string;
+    version: string;
+}): string;
+/**
+ * UI manifest `id` for a marketplace-installed blueprint. Must satisfy
+ * `UiManifestV1#id` (`^[A-Za-z0-9][A-Za-z0-9._:-]*$`). We use
+ * `<scope-bare>:<name>:<version>` — colons + dots + hyphens + alphanum
+ * are all admitted.
+ */
+export declare function blueprintUiManifestId(args: {
+    scope: string;
+    name: string;
+    version: string;
+}): string;
+//# sourceMappingURL=artifact-install.d.ts.map

package/dist/internal/artifact-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-install.d.ts","sourceRoot":"","sources":["../../src/internal/artifact-install.ts"],"names":[],"mappings":"AAqFA;;sCAEsC;AACtC,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;AAoBlD;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,uDAAuD;IACvD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wDAAwD;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,sFAAsF;IACtF,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB;;;;;;;OAOG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,YAAY,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAElE;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAgD3D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,kBAAkB,CAsGpB;AA6DD;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,kCAAkC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACrE,iEAAiE;IACjE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,uDAAuD;IACvD,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,uDAAuD;IACvD,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACjE;AAmMD;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,YAAY,EACnB,IAAI,GAAE,sBAA2B,GAChC,OAAO,CAAC,MAAM,CAAC,CA8XjB;AAmID;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,+BAA+B,CAAC;AAExE;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,8CACqB,CAAC;AAE5D;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAOtE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAGT;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAGT"}