@ixo/oracle-runtime 0.0.1

package/dist/modules/messages/dto/send-message.dto.js

@@ -0,0 +1,318 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { ApiProperty } from '@nestjs/swagger';
+import { Type } from 'class-transformer';
+import { ArrayMaxSize, IsArray, IsBoolean, IsNotEmpty, IsNumber, IsObject, IsOptional, IsString, Matches, MaxLength, ValidateIf, ValidateNested, } from 'class-validator';
+export class BrowserToolCallDto {
+    name;
+    schema;
+    description;
+}
+__decorate([
+    ApiProperty({
+        description: 'The tool name',
+        required: true,
+        type: String,
+    }),
+    IsNotEmpty(),
+    IsString(),
+    __metadata("design:type", String)
+], BrowserToolCallDto.prototype, "name", void 0);
+__decorate([
+    ApiProperty({
+        description: 'The tool schema to be passed to the LLM',
+        required: true,
+        type: Object,
+    }),
+    IsNotEmpty(),
+    IsObject(),
+    __metadata("design:type", Object)
+], BrowserToolCallDto.prototype, "schema", void 0);
+__decorate([
+    ApiProperty({
+        description: 'The tool description to be passed to the LLM',
+        required: true,
+        type: String,
+    }),
+    IsNotEmpty(),
+    IsString(),
+    __metadata("design:type", String)
+], BrowserToolCallDto.prototype, "description", void 0);
+export class AgActionDto {
+    name;
+    description;
+    schema;
+    hasRender;
+}
+__decorate([
+    ApiProperty({
+        description: 'The action name',
+        required: true,
+        type: String,
+    }),
+    IsNotEmpty(),
+    IsString(),
+    __metadata("design:type", String)
+], AgActionDto.prototype, "name", void 0);
+__decorate([
+    ApiProperty({
+        description: 'The action description to be passed to the LLM',
+        required: true,
+        type: String,
+    }),
+    IsNotEmpty(),
+    IsString(),
+    __metadata("design:type", String)
+], AgActionDto.prototype, "description", void 0);
+__decorate([
+    ApiProperty({
+        description: 'The action parameters schema to be passed to the LLM',
+        required: true,
+        type: Object,
+    }),
+    IsNotEmpty(),
+    IsObject(),
+    __metadata("design:type", Object)
+], AgActionDto.prototype, "schema", void 0);
+__decorate([
+    ApiProperty({
+        description: 'Whether this action has a render function',
+        required: false,
+        type: Boolean,
+    }),
+    IsOptional(),
+    IsBoolean(),
+    __metadata("design:type", Boolean)
+], AgActionDto.prototype, "hasRender", void 0);
+export class AttachmentDto {
+    mxcUri;
+    eventId;
+    filename;
+    mimetype;
+    size;
+}
+__decorate([
+    ApiProperty({
+        description: 'The content URI (mxc://homeserver/content_id or https://...). Required when eventId is not provided.',
+        required: false,
+        type: String,
+        example: 'mxc://matrix.org/abc123',
+    }),
+    ValidateIf((o) => !o.eventId),
+    IsNotEmpty({ message: 'Either mxcUri or eventId must be provided' }),
+    IsString(),
+    Matches(/^(mxc|https?):\/\/.+/, {
+        message: 'mxcUri must start with mxc://, http://, or https://',
+    }),
+    __metadata("design:type", String)
+], AttachmentDto.prototype, "mxcUri", void 0);
+__decorate([
+    ApiProperty({
+        description: 'Matrix event ID for encrypted file downloads. Required when mxcUri is not provided.',
+        required: false,
+        type: String,
+        example: '$abc123',
+    }),
+    ValidateIf((o) => !o.mxcUri),
+    IsNotEmpty({ message: 'Either mxcUri or eventId must be provided' }),
+    IsString(),
+    Matches(/^\$/, { message: 'eventId must start with $' }),
+    __metadata("design:type", String)
+], AttachmentDto.prototype, "eventId", void 0);
+__decorate([
+    ApiProperty({
+        description: 'The original filename',
+        required: true,
+        type: String,
+        example: 'report.pdf',
+    }),
+    IsNotEmpty(),
+    IsString(),
+    MaxLength(255),
+    __metadata("design:type", String)
+], AttachmentDto.prototype, "filename", void 0);
+__decorate([
+    ApiProperty({
+        description: 'The MIME type of the file',
+        required: true,
+        type: String,
+        example: 'application/pdf',
+    }),
+    IsNotEmpty(),
+    IsString(),
+    __metadata("design:type", String)
+], AttachmentDto.prototype, "mimetype", void 0);
+__decorate([
+    ApiProperty({
+        description: 'The file size in bytes',
+        required: false,
+        type: Number,
+    }),
+    IsOptional(),
+    IsNumber(),
+    __metadata("design:type", Number)
+], AttachmentDto.prototype, "size", void 0);
+export class SendMessageDto {
+    stream;
+    returnAllMessages;
+    message;
+    tools;
+    agActions;
+    metadata;
+    timezone;
+    homeServer;
+    mcpInvocations;
+    attachments;
+}
+__decorate([
+    ApiProperty({
+        description: 'Whether to stream the response',
+        required: false,
+        default: false,
+        type: Boolean,
+    }),
+    IsOptional(),
+    IsBoolean(),
+    __metadata("design:type", Boolean)
+], SendMessageDto.prototype, "stream", void 0);
+__decorate([
+    ApiProperty({
+        description: 'When true (non-stream only), the response includes the full transcript of messages from the session in addition to the last assistant message. Intended for testing — defaults to false.',
+        required: false,
+        default: false,
+        type: Boolean,
+    }),
+    IsOptional(),
+    IsBoolean(),
+    __metadata("design:type", Boolean)
+], SendMessageDto.prototype, "returnAllMessages", void 0);
+__decorate([
+    ApiProperty({
+        description: 'The message content to be sent',
+        required: true,
+        example: 'Hello, how can I get help with my account?',
+        type: String,
+    }),
+    IsNotEmpty(),
+    IsString(),
+    __metadata("design:type", String)
+], SendMessageDto.prototype, "message", void 0);
+__decorate([
+    ApiProperty({
+        description: 'The tool list to be passed to the LLM',
+        required: false,
+        type: [BrowserToolCallDto],
+    }),
+    IsOptional(),
+    IsArray(),
+    ValidateNested({ each: true }),
+    Type(() => BrowserToolCallDto),
+    __metadata("design:type", Array)
+], SendMessageDto.prototype, "tools", void 0);
+__decorate([
+    ApiProperty({
+        description: 'The AG-UI action list to be passed to the LLM',
+        required: false,
+        type: [AgActionDto],
+    }),
+    IsOptional(),
+    IsArray(),
+    ValidateNested({ each: true }),
+    Type(() => AgActionDto),
+    __metadata("design:type", Array)
+], SendMessageDto.prototype, "agActions", void 0);
+__decorate([
+    ApiProperty({
+        description: 'The metadata to be passed to the LLM',
+        required: false,
+        type: Object,
+    }),
+    IsOptional(),
+    IsObject(),
+    __metadata("design:type", Object)
+], SendMessageDto.prototype, "metadata", void 0);
+__decorate([
+    ApiProperty({
+        description: 'User timezone (e.g., "America/New_York" or "UTC-5")',
+        required: false,
+        type: String,
+        example: 'America/New_York',
+    }),
+    IsOptional(),
+    IsString(),
+    __metadata("design:type", String)
+], SendMessageDto.prototype, "timezone", void 0);
+__decorate([
+    ApiProperty({
+        description: 'The user home server',
+        required: false,
+        type: String,
+    }),
+    IsOptional(),
+    IsString(),
+    __metadata("design:type", String)
+], SendMessageDto.prototype, "homeServer", void 0);
+__decorate([
+    ApiProperty({
+        description: 'UCAN invocations for protected MCP tools. Map of tool names to base64-encoded CAR invocations.',
+        required: false,
+        type: Object,
+        example: {
+            postgres__query: 'OqJlcm9vdHOB2CpYJQABcRIg... (base64-encoded CAR invocation)',
+        },
+    }),
+    IsOptional(),
+    IsObject(),
+    __metadata("design:type", Object)
+], SendMessageDto.prototype, "mcpInvocations", void 0);
+__decorate([
+    ApiProperty({
+        description: 'File attachments uploaded to Matrix (max 10)',
+        required: false,
+        type: [AttachmentDto],
+    }),
+    IsOptional(),
+    IsArray(),
+    ArrayMaxSize(10),
+    ValidateNested({ each: true }),
+    Type(() => AttachmentDto),
+    __metadata("design:type", Array)
+], SendMessageDto.prototype, "attachments", void 0);
+export class SendMessagePayload {
+    stream;
+    returnAllMessages;
+    message;
+    sessionId;
+    did;
+    tools;
+    agActions;
+    timezone;
+    homeServer;
+    metadata;
+    /**
+     * UCAN invocations for protected MCP tools.
+     * Map of tool names (e.g., "postgres__query") to base64-encoded CAR invocations.
+     */
+    mcpInvocations;
+    attachments;
+}
+export class AbortRequestDto {
+    sessionId;
+}
+__decorate([
+    ApiProperty({
+        description: 'The session ID to abort',
+        required: true,
+        type: String,
+    }),
+    IsNotEmpty(),
+    IsString(),
+    __metadata("design:type", String)
+], AbortRequestDto.prototype, "sessionId", void 0);

package/dist/modules/messages/file-processing-credit-sink.port.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Aggregated usage reported by FileProcessingService after parsing one or
+ * more attachments. The credits plugin folds this into the same per-user
+ * Redis budget the LLM-call middleware decrements from.
+ */
+export interface FileProcessingUsage {
+    cost: number;
+    promptTokens: number;
+    completionTokens: number;
+}
+/**
+ * Optional sink for billing pre-flight file-processing LLM calls. The
+ * credits plugin provides this via its `getNestModules()`; when credits is
+ * not loaded, file processing runs without a billing side effect.
+ */
+export interface FileProcessingCreditSink {
+    deductForFileProcessing(userDid: string, usage: FileProcessingUsage): Promise<void>;
+}
+export declare const FILE_PROCESSING_CREDIT_SINK: unique symbol;
+//# sourceMappingURL=file-processing-credit-sink.port.d.ts.map

package/dist/modules/messages/file-processing-credit-sink.port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-processing-credit-sink.port.d.ts","sourceRoot":"","sources":["../../../src/modules/messages/file-processing-credit-sink.port.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,uBAAuB,CACrB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,eAAO,MAAM,2BAA2B,eAEvC,CAAC"}

package/dist/modules/messages/file-processing-credit-sink.port.js

@@ -0,0 +1 @@
+export const FILE_PROCESSING_CREDIT_SINK = Symbol('FILE_PROCESSING_CREDIT_SINK');

package/dist/modules/messages/file-processing.service.d.ts

@@ -0,0 +1,195 @@
+import { ConfigService } from '@nestjs/config';
+import { UcanService } from '../ucan/ucan.service.js';
+import { type AttachmentDto } from './dto/send-message.dto.js';
+import { type FileProcessingCreditSink } from './file-processing-credit-sink.port.js';
+export type FileCategory = 'document' | 'image' | 'audio' | 'video' | 'unsupported';
+export interface ProcessedAttachment {
+    filename: string;
+    mimetype: string;
+    size?: number;
+    mxcUri?: string;
+    eventId?: string;
+    category: Exclude<FileCategory, 'unsupported'>;
+    sandboxPath?: string;
+}
+export interface SandboxUploadConfig {
+    /** Base URL of the sandbox MCP server. The `/artifacts/upload` endpoint
+     *  shares the same host — only the `/mcp` suffix is stripped. */
+    sandboxMcpUrl: string;
+    /**
+     * Auth headers minted by the caller. Must match the same scheme the
+     * sandbox plugin uses for MCP tool calls — `Authorization: Bearer <ucan>`
+     * plus `X-Auth-Type: ucan`, optionally followed by `x-os-*` / `x-us-*`
+     * secret headers. See `plugins/sandbox/sandbox-mcp.ts`
+     * (`createDefaultAuthBuilder`). Forwarded to the upload endpoint verbatim.
+     */
+    authHeaders: Record<string, string>;
+}
+/**
+ * Provider configuration for the vision/file-processing model.
+ * The runtime supplies these at construction time.
+ */
+export interface FileProcessingProviderConfig {
+    apiKey: string;
+    baseURL: string;
+    headers: Record<string, string>;
+    model: string;
+}
+export declare function setFileProcessingProvider(getter: () => FileProcessingProviderConfig): void;
+export declare class FileProcessingService {
+    private readonly config;
+    private readonly ucanService;
+    private readonly creditSink?;
+    private readonly logger;
+    private readonly providerApiKey;
+    private readonly providerBaseURL;
+    private readonly providerHeaders;
+    private readonly processingModel;
+    constructor(config: ConfigService, ucanService: UcanService, creditSink?: FileProcessingCreditSink | undefined);
+    /**
+     * Build the sandbox upload config for the current user. Returns `undefined`
+     * when sandbox archival isn't possible — `SANDBOX_MCP_URL` unset, the user
+     * has no cached UCAN delegation, or the oracle has no signing key. The
+     * caller treats `undefined` as "skip upload"; processing still happens.
+     *
+     * Auth header shape matches `plugins/sandbox/sandbox-mcp.ts`
+     * (`createDefaultAuthBuilder`) exactly — same `Authorization: Bearer <ucan>`
+     * + `X-Auth-Type: ucan` the sandbox MCP client sends for tool calls.
+     */
+    private buildSandboxConfig;
+    /**
+     * Sanitize a filename/path for the sandbox upload endpoint.
+     * Only alphanumeric, dots, dashes, underscores, and slashes are allowed,
+     * and `..` path segments are removed so the sandbox can't be escaped.
+     */
+    private sanitizeSandboxPath;
+    uploadToSandbox(buffer: Buffer, filename: string, destPath: string, sandboxConfig: SandboxUploadConfig, mimetype?: string): Promise<{
+        path: string;
+        url?: string;
+        previewUrl?: string;
+    }>;
+    processAttachments(attachments: AttachmentDto[], roomId: string, userDid?: string): Promise<{
+        texts: string[];
+        metadata: ProcessedAttachment[];
+        totalUsage: {
+            cost: number;
+            promptTokens: number;
+            completionTokens: number;
+        };
+    }>;
+    private processAttachment;
+    private downloadFromMatrix;
+    private downloadFromMatrixEvent;
+    /**
+     * Validate that a URL does not point to an internal/private network address.
+     * Prevents SSRF attacks via crafted or redirected URLs.
+     */
+    private validateUrlTarget;
+    private downloadFromUrl;
+    /**
+     * HEAD a URL to determine Content-Type and Content-Length without
+     * downloading the body. Follows redirects with SSRF validation.
+     */
+    private headUrl;
+    /**
+     * Detect the actual MIME type from the file's magic bytes.
+     * Returns null if no known signature matches.
+     */
+    private detectMimeFromMagicBytes;
+    /**
+     * Verify that the file's magic bytes are consistent with the claimed
+     * mimetype category. For binary formats (images, audio, video, PDF)
+     * this is strict. For text-based formats (text/plain, text/html, etc.)
+     * we skip magic byte checks since they don't have reliable signatures.
+     */
+    private verifyMagicBytes;
+    private categorizeFile;
+    private isDocumentType;
+    private processDocument;
+    private processImage;
+    private processAudio;
+    private processVideo;
+    /**
+     * Send a public URL directly to OpenRouter for image/video processing
+     * without downloading the file first. Faster and avoids OOM for large files.
+     */
+    private aiProcessFromUrl;
+    private aiProcess;
+    private getAudioFormat;
+    /**
+     * Strip control characters and bracket sequences from filename
+     * to prevent prompt injection when interpolated into LLM context.
+     */
+    private sanitizeFilename;
+    /**
+     * Plain-text mimetypes that can be read directly as UTF-8 without AI
+     * processing or local parsers.
+     */
+    private isPlainTextType;
+    private buildAnalysisMarkdown;
+    private formatContent;
+    private truncateText;
+    /**
+     * Download and process a file in one pass, returning both the raw buffer
+     * and extracted text. Used by the process_file tool when copy_to_sandbox
+     * is enabled so the file isn't downloaded twice.
+     */
+    downloadAndProcessFile(source: {
+        url: string;
+    } | {
+        eventId: string;
+        roomId?: string;
+    }, hints?: {
+        filename?: string;
+        mimetype?: string;
+    }): Promise<{
+        buffer: Buffer;
+        text: string;
+        resolvedFilename: string;
+        resolvedMimetype: string;
+    }>;
+    /**
+     * Process a file from a Matrix event ID — downloads via
+     * downloadFromMatrixEvent (handles encrypted + unencrypted) and routes
+     * through the standard processCategory pipeline.
+     */
+    processFileFromEventId(roomId: string, eventId: string, hints?: {
+        filename?: string;
+        mimetype?: string;
+    }): Promise<string>;
+    /**
+     * Process a file from a URL and extract its content as text.
+     * For HTTPS image/video URLs, passes the URL directly to the AI model (no download).
+     * For audio/documents/mxc, downloads first then processes locally or via AI.
+     * If the type can't be determined, tries AI passthrough before falling back to download.
+     */
+    processFileFromUrl(url: string, hints?: {
+        filename?: string;
+        mimetype?: string;
+    }): Promise<string>;
+    /**
+     * Try passing a URL directly to AI for image/video processing.
+     * Falls back to download + process if the AI rejects it.
+     */
+    private tryUrlPassthrough;
+    /**
+     * Download a URL (or mxc:// resource) into memory and process from the buffer.
+     * Handles size validation, mime detection from bytes, and category routing.
+     */
+    private downloadAndProcess;
+    /**
+     * Route a validated buffer to the correct processor by category.
+     */
+    private processCategory;
+    /**
+     * Best-effort filename extraction from a URL path.
+     * Falls back to 'download' if nothing useful can be derived.
+     */
+    private extractFilenameFromUrl;
+    /**
+     * Map common file extensions to MIME types.
+     * Returns null if the extension is unknown.
+     */
+    private guessMimeFromFilename;
+}
+//# sourceMappingURL=file-processing.service.d.ts.map

package/dist/modules/messages/file-processing.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-processing.service.d.ts","sourceRoot":"","sources":["../../../src/modules/messages/file-processing.service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,uCAAuC,CAAC;AA6F/C,MAAM,MAAM,YAAY,GACpB,UAAU,GACV,OAAO,GACP,OAAO,GACP,OAAO,GACP,aAAa,CAAC;AAElB,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC;qEACiE;IACjE,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;CACf;AAqBD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,4BAA4B,GACzC,IAAI,CAEN;AAED,qBACa,qBAAqB;IAQ9B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAG5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IAX9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IACjE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAyB;IACzD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;gBAGtB,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,WAAW,EAGxB,UAAU,CAAC,EAAE,wBAAwB,YAAA;IASxD;;;;;;;;;OASG;YACW,kBAAkB;IA2BhC;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAUrB,eAAe,CACnB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,mBAAmB,EAClC,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA8CzD,kBAAkB,CACtB,WAAW,EAAE,aAAa,EAAE,EAC5B,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC;QACT,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;QAChC,UAAU,EAAE;YACV,IAAI,EAAE,MAAM,CAAC;YACb,YAAY,EAAE,MAAM,CAAC;YACrB,gBAAgB,EAAE,MAAM,CAAC;SAC1B,CAAC;KACH,CAAC;YAuIY,iBAAiB;YAgMjB,kBAAkB;YAoBlB,uBAAuB;IAmCrC;;;OAGG;IACH,OAAO,CAAC,iBAAiB;YAoBX,eAAe;IA6F7B;;;OAGG;YACW,OAAO;IA0DrB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAoBhC;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IA0BxB,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,cAAc;YAcR,eAAe;YA+Df,YAAY;YAoBZ,YAAY;YAoBZ,YAAY;IAoB1B;;;OAGG;YACW,gBAAgB;YA8FhB,SAAS;IAoGvB,OAAO,CAAC,cAAc;IAatB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAUxB;;;OAGG;IACH,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,qBAAqB;IA4B7B,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,YAAY;IAKpB;;;;OAIG;IACG,sBAAsB,CAC1B,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAC9D,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/C,OAAO,CAAC;QACT,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,gBAAgB,EAAE,MAAM,CAAC;QACzB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IAuFF;;;;OAIG;IACG,sBAAsB,CAC1B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/C,OAAO,CAAC,MAAM,CAAC;IA+ClB;;;;;OAKG;IACG,kBAAkB,CACtB,GAAG,EAAE,MAAM,EACX,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/C,OAAO,CAAC,MAAM,CAAC;IAiHlB;;;OAGG;YACW,iBAAiB;IA+B/B;;;OAGG;YACW,kBAAkB;IAyEhC;;OAEG;YACW,eAAe;IA2B7B;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAa9B;;;OAGG;IACH,OAAO,CAAC,qBAAqB;CAwD9B"}