@letta-ai/letta-code 0.29.4 → 0.29.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/memory-confinement.js +363 -0
- package/dist/memory-confinement.js.map +18 -0
- package/dist/types/channels/plugin-types.d.ts +2 -2
- package/dist/types/channels/plugin-types.d.ts.map +1 -1
- package/dist/types/channels/types.d.ts +15 -1
- package/dist/types/channels/types.d.ts.map +1 -1
- package/dist/types/memory-confinement.d.ts +13 -0
- package/dist/types/memory-confinement.d.ts.map +1 -0
- package/dist/types/permissions/memory-confinement-launcher.d.ts +20 -0
- package/dist/types/permissions/memory-confinement-launcher.d.ts.map +1 -0
- package/dist/types/permissions/sandbox-policy.d.ts +138 -0
- package/dist/types/permissions/sandbox-policy.d.ts.map +1 -0
- package/dist/types/sandbox/availability.d.ts +60 -0
- package/dist/types/sandbox/availability.d.ts.map +1 -0
- package/dist/types/sandbox/bwrap.d.ts +36 -0
- package/dist/types/sandbox/bwrap.d.ts.map +1 -0
- package/dist/types/sandbox/policy.d.ts +79 -0
- package/dist/types/sandbox/policy.d.ts.map +1 -0
- package/dist/types/sandbox/seatbelt.d.ts +39 -0
- package/dist/types/sandbox/seatbelt.d.ts.map +1 -0
- package/dist/types/sandbox/wrap.d.ts +18 -0
- package/dist/types/sandbox/wrap.d.ts.map +1 -0
- package/dist/types/types/protocol_v2.d.ts +2 -0
- package/dist/types/types/protocol_v2.d.ts.map +1 -1
- package/dist/types/utils/local-backend-paths.d.ts +23 -0
- package/dist/types/utils/local-backend-paths.d.ts.map +1 -0
- package/letta.js +523 -387
- package/package.json +11 -1
- package/scripts/isolated-unit-tests.json +5 -0
- package/scripts/source-file-size-baseline.json +5 -5
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/channels/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EACV,oBAAoB,EACpB,4BAA4B,EAC5B,cAAc,EACf,MAAM,qBAAqB,CAAC;AAE7B;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,KAAK,CAAC,EAAE,OAAO,GAAG,cAAc,CAAC;KAClC,CAAC;IACF,OAAO,EAAE,4BAA4B,EAAE,CAAC;IACxC,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,aAAa,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,MAAM,+BAA+B,GAAG;IAC5C,sBAAsB,EAAE,OAAO,CAAC;CACjC,CAAC;AAEF,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,OAAO,GACf,+BAA+B,GAAG,IAAI,CAYxC;AAED,eAAO,MAAM,uBAAuB,2EAO1B,CAAC;AACX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3E;;;GAGG;AACH,eAAO,MAAM,qBAAqB,2EAA0B,CAAC;AAC7D,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC;AACxC,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,SAAS,CAAC;AACnD,MAAM,MAAM,4BAA4B,GAAG,OAAO,CAChD,cAAc,EACd,UAAU,GAAG,aAAa,GAAG,cAAc,CAC5C,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,4BAA4B,CAAC;AACtE,MAAM,MAAM,4BAA4B,GAAG,4BAA4B,CAAC;AAExE,eAAO,MAAM,6BAA6B,EAAE,0BAC5B,CAAC;AAEjB,mDAAmD;AACnD,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,cAAc,CAAC;AAEzD,MAAM,WAAW,wBAAwB;IACvC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;IAC3C,2FAA2F;IAC3F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2FAA2F;IAC3F,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,qFAAqF;IACrF,cAAc,CAAC,EACX,6BAA6B,GAC7B,sBAAsB,GACtB,iBAAiB,CAAC;IACtB,mFAAmF;IACnF,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,wBAAwB,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,yBAAyB,CAAC;IACpC,OAAO,CAAC,EAAE,yBAAyB,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,uGAAuG;IACvG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,OAAO,GAAG,WAAW,CAAC;AAErE,MAAM,MAAM,uBAAuB,GAC/B,UAAU,GACV,YAAY,GACZ,MAAM,GACN,UAAU,GACV,SAAS,GACT,QAAQ,GACR,OAAO,GACP,OAAO,CAAC;AAEZ,MAAM,MAAM,wBAAwB,GAChC,SAAS,GACT,SAAS,GACT,WAAW,GACX,OAAO,GACP,SAAS,CAAC;AAEd,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,KAAK,EAAE,wBAAwB,CAAC;IAChC,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAyB,SAAQ,yBAAyB;IACzE,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B;AAED,MAAM,MAAM,yBAAyB,GACjC,mBAAmB,GACnB,uBAAuB,CAAC;AAE5B,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,yBAAyB,CAAC;IAChC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,MAAM,4BAA4B,GACpC,SAAS,GACT,SAAS,GACT,aAAa,GACb,WAAW,CAAC;AAEhB,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,MAAM,yBAAyB,GACjC;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,iBAAiB,CAAC;CAC3B,GACD;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,OAAO,EAAE,kBAAkB,CAAC;IAC5B,UAAU,EAAE,cAAc,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAIN,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAE7D,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,oBAAoB,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,qDAAqD;IACrD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,6CAA6C;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,oDAAoD;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,0DAA0D;IAC1D,KAAK,CAAC,OAAO,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,0CAA0C;IAC1C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,gDAAgD;IAChD,SAAS,IAAI,OAAO,CAAC;IAErB,2CAA2C;IAC3C,WAAW,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEzE;;;;OAIG;IACH,kBAAkB,CAAC,CAAC,MAAM,EAAE;QAC1B,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAEtC;;;;OAIG;IACH,oBAAoB,CAAC,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7E;;;OAGG;IACH,eAAe,CACb,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QACR,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB;;;WAGG;QACH,WAAW,CAAC,EAAE,sBAAsB,CAAC;KACtC,GACA,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;OAIG;IACH,qBAAqB,CAAC,CACpB,GAAG,EAAE,qBAAqB,EAC1B,OAAO,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE,GACvC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAElC;;;;OAIG;IACH,wBAAwB,CAAC,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3E;;;;OAIG;IACH,uBAAuB,CAAC,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzE;;;;OAIG;IACH,yBAAyB,CAAC,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7E,mFAAmF;IACnF,iBAAiB,CAAC,EAAE,CAClB,KAAK,EAAE,2BAA2B,KAC/B,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAE3C;;;OAGG;IACH,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAID,MAAM,WAAW,qBAAqB;IACpC,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,uDAAuD;IACvD,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,kEAAkE;IAClE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,wEAAwE;IACxE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,mFAAmF;IACnF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,wFAAwF;IACxF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,WAAW,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACzC,qDAAqD;IACrD,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IACvC,kFAAkF;IAClF,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,0EAA0E;IAC1E,aAAa,CAAC,EAAE,oBAAoB,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IACjC,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yFAAyF;IACzF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,+DAA+D;IAC/D,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,sBAAsB;IACrC,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,6GAA6G;IAC7G,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iHAAiH;IACjH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,iDAAiD;IACjD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qFAAqF;IACrF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,+BAA+B;IAC9C,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,WAAW,EAAE,kBAAkB,CAAC;CACjC;AAID,MAAM,WAAW,YAAY;IAC3B,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,cAAc,EAAE,MAAM,CAAC;IACvB,oCAAoC;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,+EAA+E;IAC/E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mFAAmF;IACnF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,MAAM,CAAC;AACxD;;;;;GAKG;AACH,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,WAAW,CAAC;AAC5D,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AACxC,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,UAAU,CAAC;AACpD,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,cAAc,CAAC;AACxD,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAChE,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAE9D,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,UAAU,kBAAkB;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,wBAAwB,CAAC;IACvC;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,kEAAkE;IAClE,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,UAAU,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,6EAA6E;IAC7E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,+EAA+E;IAC/E,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,2FAA2F;IAC3F,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,6FAA6F;IAC7F,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE,kBAAkB,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,SAAS,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,qBAAqB,EAAE,4BAA4B,CAAC;IACpD,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAChE;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;OASG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,UAAU,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,iFAAiF;IACjF,YAAY,EAAE,OAAO,CAAC;IACtB,0DAA0D;IAC1D,SAAS,EAAE,iBAAiB,CAAC;IAC7B,kHAAkH;IAClH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,6EAA6E;IAC7E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,iFAAiF;IACjF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,QAAQ,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,qGAAqG;IACrG,YAAY,EAAE,OAAO,CAAC;IACtB,0DAA0D;IAC1D,SAAS,EAAE,eAAe,CAAC;IAC3B,8CAA8C;IAC9C,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,gGAAgG;IAChG,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,2FAA2F;IAC3F,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gGAAgG;IAChG,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,aAAa,GACrB,qBAAqB,GACrB,kBAAkB,GAClB,oBAAoB,GACpB,qBAAqB,GACrB,mBAAmB,CAAC;AAExB,MAAM,WAAW,sBAAuB,SAAQ,kBAAkB;IAChE,OAAO,EAAE,UAAU,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,qBAAqB,CAAC;IAC/B;;;OAGG;IACH,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,6EAA6E;IAC7E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC;;;OAGG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC7D,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,qBAAqB,EAAE,0BAA0B,CAAC;IAClD,2FAA2F;IAC3F,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,6FAA6F;IAC7F,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAsB,SAAQ,kBAAkB;IAC/D,OAAO,EAAE,SAAS,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,2FAA2F;IAC3F,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,iEAAiE;IACjE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,6DAA6D;IAC7D,qBAAqB,EAAE,4BAA4B,CAAC;IACpD;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAChE;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;OASG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAuB,SAAQ,kBAAkB;IAChE,OAAO,EAAE,UAAU,CAAC;IACpB,iEAAiE;IACjE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,2FAA2F;IAC3F,YAAY,EAAE,OAAO,CAAC;IACtB,0DAA0D;IAC1D,SAAS,EAAE,iBAAiB,CAAC;IAC7B,iDAAiD;IACjD,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,6EAA6E;IAC7E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,iFAAiF;IACjF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D,OAAO,EAAE,QAAQ,CAAC;IAClB,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,qGAAqG;IACrG,YAAY,EAAE,OAAO,CAAC;IACtB,0DAA0D;IAC1D,SAAS,EAAE,eAAe,CAAC;IAC3B,8CAA8C;IAC9C,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,gGAAgG;IAChG,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,2FAA2F;IAC3F,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gGAAgG;IAChG,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,cAAc,GACtB,sBAAsB,GACtB,mBAAmB,GACnB,qBAAqB,GACrB,sBAAsB,GACtB,oBAAoB,GACpB,oBAAoB,CAAC;AAEzB,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,GAChB,SAAS,IAAI,mBAAmB,CAElC;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,cAAc,GACtB,OAAO,IAAI,sBAAsB,CAInC;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,cAAc,GACtB,OAAO,IAAI,mBAAmB,CAMhC;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,cAAc,GACtB,OAAO,IAAI,qBAAqB,CAElC;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,cAAc,GACtB,OAAO,IAAI,sBAAsB,CAEnC;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,cAAc,GACtB,OAAO,IAAI,oBAAoB,CAEjC;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,cAAc,GACtB,OAAO,IAAI,oBAAoB,CAOjC;AAID,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,QAAQ,EAAE,YAAY,EAAE,CAAC;CAC1B;AAID,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,SAAS,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB"}
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/channels/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EACV,oBAAoB,EACpB,4BAA4B,EAC5B,cAAc,EACf,MAAM,qBAAqB,CAAC;AAE7B;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,KAAK,CAAC,EAAE,OAAO,GAAG,cAAc,CAAC;KAClC,CAAC;IACF,OAAO,EAAE,4BAA4B,EAAE,CAAC;IACxC,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,aAAa,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,MAAM,+BAA+B,GAAG;IAC5C,sBAAsB,EAAE,OAAO,CAAC;CACjC,CAAC;AAEF,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,OAAO,GACf,+BAA+B,GAAG,IAAI,CAYxC;AAED,eAAO,MAAM,uBAAuB,2EAO1B,CAAC;AACX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3E;;;GAGG;AACH,eAAO,MAAM,qBAAqB,2EAA0B,CAAC;AAC7D,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC;AACxC,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,SAAS,CAAC;AACnD,MAAM,MAAM,4BAA4B,GAAG,OAAO,CAChD,cAAc,EACd,UAAU,GAAG,aAAa,GAAG,cAAc,CAC5C,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,4BAA4B,CAAC;AACtE,MAAM,MAAM,4BAA4B,GAAG,4BAA4B,CAAC;AAExE,eAAO,MAAM,6BAA6B,EAAE,0BAC5B,CAAC;AAEjB,mDAAmD;AACnD,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,cAAc,CAAC;AAEzD,MAAM,WAAW,wBAAwB;IACvC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;IAC3C,2FAA2F;IAC3F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2FAA2F;IAC3F,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,qFAAqF;IACrF,cAAc,CAAC,EACX,6BAA6B,GAC7B,sBAAsB,GACtB,iBAAiB,CAAC;IACtB,mFAAmF;IACnF,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,wBAAwB,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,yBAAyB,CAAC;IACpC,OAAO,CAAC,EAAE,yBAAyB,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,uGAAuG;IACvG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,OAAO,GAAG,WAAW,CAAC;AAErE,MAAM,MAAM,uBAAuB,GAC/B,UAAU,GACV,YAAY,GACZ,MAAM,GACN,UAAU,GACV,SAAS,GACT,QAAQ,GACR,OAAO,GACP,OAAO,CAAC;AAEZ,MAAM,MAAM,wBAAwB,GAChC,SAAS,GACT,SAAS,GACT,WAAW,GACX,OAAO,GACP,SAAS,CAAC;AAEd,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,KAAK,EAAE,wBAAwB,CAAC;IAChC,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAyB,SAAQ,yBAAyB;IACzE,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B;AAED,MAAM,MAAM,yBAAyB,GACjC,mBAAmB,GACnB,uBAAuB,CAAC;AAE5B,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,yBAAyB,CAAC;IAChC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,MAAM,4BAA4B,GACpC,SAAS,GACT,SAAS,GACT,aAAa,GACb,WAAW,CAAC;AAEhB,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,MAAM,yBAAyB,GACjC;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,iBAAiB,CAAC;CAC3B,GACD;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,OAAO,EAAE,kBAAkB,CAAC;IAC5B,UAAU,EAAE,cAAc,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAIN,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAE7D,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,oBAAoB,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,qDAAqD;IACrD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,6CAA6C;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,oDAAoD;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,0DAA0D;IAC1D,KAAK,CAAC,OAAO,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,0CAA0C;IAC1C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,gDAAgD;IAChD,SAAS,IAAI,OAAO,CAAC;IAErB,2CAA2C;IAC3C,WAAW,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEzE;;;;OAIG;IACH,kBAAkB,CAAC,CAAC,MAAM,EAAE;QAC1B,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAEtC;;;;OAIG;IACH,oBAAoB,CAAC,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7E;;;OAGG;IACH,eAAe,CACb,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QACR,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB;;;WAGG;QACH,WAAW,CAAC,EAAE,sBAAsB,CAAC;KACtC,GACA,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;OAIG;IACH,qBAAqB,CAAC,CACpB,GAAG,EAAE,qBAAqB,EAC1B,OAAO,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE,GACvC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAElC;;;;OAIG;IACH,wBAAwB,CAAC,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3E;;;;OAIG;IACH,uBAAuB,CAAC,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzE;;;;OAIG;IACH,yBAAyB,CAAC,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7E,mFAAmF;IACnF,iBAAiB,CAAC,EAAE,CAClB,KAAK,EAAE,2BAA2B,KAC/B,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAE3C;;;OAGG;IACH,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAID,MAAM,WAAW,qBAAqB;IACpC,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,uDAAuD;IACvD,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,kEAAkE;IAClE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,wEAAwE;IACxE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,mFAAmF;IACnF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,wFAAwF;IACxF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,WAAW,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACzC,qDAAqD;IACrD,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IACvC,kFAAkF;IAClF,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,0EAA0E;IAC1E,aAAa,CAAC,EAAE,oBAAoB,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IACjC,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yFAAyF;IACzF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,+DAA+D;IAC/D,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,sBAAsB;IACrC,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,6GAA6G;IAC7G,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iHAAiH;IACjH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,iDAAiD;IACjD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qFAAqF;IACrF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,+BAA+B;IAC9C,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,WAAW,EAAE,kBAAkB,CAAC;CACjC;AAID,MAAM,WAAW,YAAY;IAC3B,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,cAAc,EAAE,MAAM,CAAC;IACvB,oCAAoC;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,+EAA+E;IAC/E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mFAAmF;IACnF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,MAAM,CAAC;AACxD;;;;;GAKG;AACH,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,WAAW,CAAC;AAC5D,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AACxC,MAAM,MAAM,oBAAoB,GAAG,KAAK,GAAG,UAAU,CAAC;AACtD,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AACtD,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AACxD,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,cAAc,CAAC;AACxD,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAChE,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAE9D,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,UAAU,kBAAkB;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,wBAAwB,CAAC;IACvC;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,kEAAkE;IAClE,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,UAAU,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,6EAA6E;IAC7E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,+EAA+E;IAC/E,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,2FAA2F;IAC3F,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,6FAA6F;IAC7F,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE,kBAAkB,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,SAAS,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,qBAAqB,EAAE,4BAA4B,CAAC;IACpD,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAChE;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;OASG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,SAAS,CAAC,EAAE,oBAAoB,CAAC;CAClC;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,UAAU,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,iFAAiF;IACjF,YAAY,EAAE,OAAO,CAAC;IACtB,0DAA0D;IAC1D,SAAS,EAAE,iBAAiB,CAAC;IAC7B,kHAAkH;IAClH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,6EAA6E;IAC7E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,iFAAiF;IACjF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,QAAQ,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,qGAAqG;IACrG,YAAY,EAAE,OAAO,CAAC;IACtB,0DAA0D;IAC1D,SAAS,EAAE,eAAe,CAAC;IAC3B,8CAA8C;IAC9C,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,gGAAgG;IAChG,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,2FAA2F;IAC3F,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gGAAgG;IAChG,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,aAAa,GACrB,qBAAqB,GACrB,kBAAkB,GAClB,oBAAoB,GACpB,qBAAqB,GACrB,mBAAmB,CAAC;AAExB,MAAM,WAAW,sBAAuB,SAAQ,kBAAkB;IAChE,OAAO,EAAE,UAAU,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,qBAAqB,CAAC;IAC/B;;;OAGG;IACH,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,6EAA6E;IAC7E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC;;;OAGG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC7D,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,qBAAqB,EAAE,0BAA0B,CAAC;IAClD,2FAA2F;IAC3F,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,6FAA6F;IAC7F,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAsB,SAAQ,kBAAkB;IAC/D,OAAO,EAAE,SAAS,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,2FAA2F;IAC3F,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,iEAAiE;IACjE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,6DAA6D;IAC7D,qBAAqB,EAAE,4BAA4B,CAAC;IACpD;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAChE;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;OASG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,SAAS,CAAC,EAAE,oBAAoB,CAAC;CAClC;AAED,MAAM,WAAW,sBAAuB,SAAQ,kBAAkB;IAChE,OAAO,EAAE,UAAU,CAAC;IACpB,iEAAiE;IACjE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,2FAA2F;IAC3F,YAAY,EAAE,OAAO,CAAC;IACtB,0DAA0D;IAC1D,SAAS,EAAE,iBAAiB,CAAC;IAC7B,iDAAiD;IACjD,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,6EAA6E;IAC7E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,iFAAiF;IACjF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D,OAAO,EAAE,QAAQ,CAAC;IAClB,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,qGAAqG;IACrG,YAAY,EAAE,OAAO,CAAC;IACtB,0DAA0D;IAC1D,SAAS,EAAE,eAAe,CAAC;IAC3B,8CAA8C;IAC9C,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,gGAAgG;IAChG,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,2FAA2F;IAC3F,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gGAAgG;IAChG,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,cAAc,GACtB,sBAAsB,GACtB,mBAAmB,GACnB,qBAAqB,GACrB,sBAAsB,GACtB,oBAAoB,GACpB,oBAAoB,CAAC;AAEzB,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,GAChB,SAAS,IAAI,mBAAmB,CAElC;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,cAAc,GACtB,OAAO,IAAI,sBAAsB,CAInC;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,cAAc,GACtB,OAAO,IAAI,mBAAmB,CAMhC;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,cAAc,GACtB,OAAO,IAAI,qBAAqB,CAElC;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,cAAc,GACtB,OAAO,IAAI,sBAAsB,CAEnC;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,cAAc,GACtB,OAAO,IAAI,oBAAoB,CAEjC;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,cAAc,GACtB,OAAO,IAAI,oBAAoB,CAOjC;AAID,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,QAAQ,EAAE,YAAY,EAAE,CAAC;CAC1B;AAID,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,SAAS,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB"}
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
import { type MemoryConfinementLauncherInput, type MemoryConfinementLauncherResult } from "./permissions/memory-confinement-launcher";
|
|
2
|
+
export type { MemoryConfinementLauncherInput, MemoryConfinementLauncherResult, } from "./permissions/memory-confinement-launcher";
|
|
3
|
+
/**
|
|
4
|
+
* Wrap a process in the same fail-closed filesystem policy used by Letta
|
|
5
|
+
* Code's unattended memory subagents.
|
|
6
|
+
*
|
|
7
|
+
* The process can read the host broadly, write harness state and its own
|
|
8
|
+
* memory, and cannot read or write other agents' memory. Throws when no
|
|
9
|
+
* supported kernel sandbox is available rather than silently running with a
|
|
10
|
+
* weaker policy.
|
|
11
|
+
*/
|
|
12
|
+
export declare function createMemoryConfinementLauncher(input: MemoryConfinementLauncherInput): MemoryConfinementLauncherResult;
|
|
13
|
+
//# sourceMappingURL=memory-confinement.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"memory-confinement.d.ts","sourceRoot":"","sources":["../../src/memory-confinement.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,8BAA8B,EACnC,KAAK,+BAA+B,EACrC,MAAM,2CAA2C,CAAC;AAGnD,YAAY,EACV,8BAA8B,EAC9B,+BAA+B,GAChC,MAAM,2CAA2C,CAAC;AAEnD;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,8BAA8B,GACpC,+BAA+B,CAKjC"}
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
import type { SandboxAvailability } from "../sandbox/availability";
|
|
2
|
+
import { type SandboxBackend } from "../sandbox/policy";
|
|
3
|
+
export interface MemoryConfinementLauncherInput {
|
|
4
|
+
/** Command and arguments for the process that should be confined. */
|
|
5
|
+
launcher: string[];
|
|
6
|
+
/**
|
|
7
|
+
* Environment for the confined process. `MEMORY_DIR` (or
|
|
8
|
+
* `LETTA_MEMORY_DIR`) identifies the memory root that stays writable.
|
|
9
|
+
*/
|
|
10
|
+
env: NodeJS.ProcessEnv;
|
|
11
|
+
}
|
|
12
|
+
export interface MemoryConfinementLauncherResult {
|
|
13
|
+
/** Sandbox wrapper followed by the original launcher. */
|
|
14
|
+
launcher: string[];
|
|
15
|
+
/** Original environment plus the nested-sandbox sentinel. */
|
|
16
|
+
env: NodeJS.ProcessEnv;
|
|
17
|
+
backend: SandboxBackend;
|
|
18
|
+
}
|
|
19
|
+
export declare function createMemoryConfinementLauncherWithAvailability(input: MemoryConfinementLauncherInput, availability: SandboxAvailability): MemoryConfinementLauncherResult;
|
|
20
|
+
//# sourceMappingURL=memory-confinement-launcher.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"memory-confinement-launcher.d.ts","sourceRoot":"","sources":["../../../src/permissions/memory-confinement-launcher.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAmB,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGxE,MAAM,WAAW,8BAA8B;IAC7C,qEAAqE;IACrE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB;;;OAGG;IACH,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB;AAED,MAAM,WAAW,+BAA+B;IAC9C,yDAAyD;IACzD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,6DAA6D;IAC7D,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,OAAO,EAAE,cAAc,CAAC;CACzB;AA+BD,wBAAgB,+CAA+C,CAC7D,KAAK,EAAE,8BAA8B,EACrC,YAAY,EAAE,mBAAmB,GAChC,+BAA+B,CAwCjC"}
|
|
@@ -0,0 +1,138 @@
|
|
|
1
|
+
import { type FsSandboxPolicy } from "../sandbox/policy";
|
|
2
|
+
/**
|
|
3
|
+
* Builders that translate agent/memory context into a concrete
|
|
4
|
+
* {@link FsSandboxPolicy}. This is the bridge between the domain (agent ids,
|
|
5
|
+
* memory roots) and the pure `@/sandbox` generators — it lives in
|
|
6
|
+
* `permissions/` alongside the static guards it is meant to replace.
|
|
7
|
+
*
|
|
8
|
+
* Every root is canonicalized with realpath before it reaches a backend: both
|
|
9
|
+
* Seatbelt and bwrap match rules against the kernel-resolved path, so a policy
|
|
10
|
+
* built from a lexical path that passes through a symlink would silently match
|
|
11
|
+
* nothing — i.e. a sandbox that allows everything. See `canonicalizeRoot`.
|
|
12
|
+
*/
|
|
13
|
+
/** The per-agent tree to wall off, e.g. `/Users/me/.letta/agents`. */
|
|
14
|
+
export declare function getDefaultAgentsTreeRoot(homeDir?: string): string;
|
|
15
|
+
export interface CrossBackendAgentsTreeRootsOptions {
|
|
16
|
+
homeDir?: string;
|
|
17
|
+
env?: NodeJS.ProcessEnv;
|
|
18
|
+
/** Explicit local backend storage dir, when already resolved by a caller. */
|
|
19
|
+
localBackendStorageDir?: string | null;
|
|
20
|
+
}
|
|
21
|
+
/**
|
|
22
|
+
* Every cross-agent memory tree the kernel sandbox must wall off. API/cloud
|
|
23
|
+
* agents live under `~/.letta/agents`; local-backend agents live under
|
|
24
|
+
* `<storage>/memfs`. A process running in either backend must deny both trees,
|
|
25
|
+
* then carve back only the current/parent agent roots it is allowed to touch.
|
|
26
|
+
*/
|
|
27
|
+
export declare function getCrossBackendAgentsTreeRoots(options?: CrossBackendAgentsTreeRootsOptions): string[];
|
|
28
|
+
/**
|
|
29
|
+
* The harness state directory, e.g. `/Users/me/.letta`. Used as the broad
|
|
30
|
+
* writable base for memory subagents: they may write harness metadata anywhere
|
|
31
|
+
* under it (settings, logs, conversations, transcripts, memory) but not the
|
|
32
|
+
* repo/home/temp — while the cross-agent tree nested inside it stays denied.
|
|
33
|
+
*/
|
|
34
|
+
export declare function getLettaHomeRoot(homeDir?: string): string;
|
|
35
|
+
/**
|
|
36
|
+
* Resolve a path to the real (symlink-free) path the kernel will see. The leaf
|
|
37
|
+
* may not exist yet (a file about to be created), so we realpath the nearest
|
|
38
|
+
* existing ancestor and re-append the missing tail.
|
|
39
|
+
*/
|
|
40
|
+
export declare function canonicalizeRoot(input: string): string;
|
|
41
|
+
/**
|
|
42
|
+
* Map memory roots to the agent directories to carve out of the walled-off
|
|
43
|
+
* agents tree. A memory root under the tree
|
|
44
|
+
* (`~/.letta/agents/<id>/memory[-worktrees]`) yields the whole agent dir
|
|
45
|
+
* (`~/.letta/agents/<id>`); carving the *agent dir* rather than just `/memory`
|
|
46
|
+
* keeps the cwd's immediate parent traversable, so a read-deny on the tree does
|
|
47
|
+
* not empty the child env under Seatbelt. Roots outside the tree (a custom
|
|
48
|
+
* `MEMORY_DIR`) are returned as-is.
|
|
49
|
+
*/
|
|
50
|
+
export declare function deriveSelfAgentRootsForTrees(memoryRoots: string[], agentsTreeRoots?: string[]): string[];
|
|
51
|
+
export interface MemorySubagentSandboxInput {
|
|
52
|
+
/**
|
|
53
|
+
* Memory roots the child may write to — typically the resolved
|
|
54
|
+
* `MEMORY_DIR` plus its `memory-worktrees` sibling.
|
|
55
|
+
*/
|
|
56
|
+
memoryRoots: string[];
|
|
57
|
+
/** Additional roots to carve back read-only after denying agents trees. */
|
|
58
|
+
readonlyRoots?: string[];
|
|
59
|
+
/**
|
|
60
|
+
* Harness state roots configured OUTSIDE `~/.letta` to also make writable —
|
|
61
|
+
* `~/.letta` itself is always the base. The caller passes a custom
|
|
62
|
+
* `LETTA_LOCAL_BACKEND_DIR` / `LETTA_TRANSCRIPT_ROOT` here so the in-process
|
|
63
|
+
* child can still persist conversation/agent-state/transcripts when those are
|
|
64
|
+
* relocated off the default tree. Usually empty (the defaults live under
|
|
65
|
+
* `~/.letta`).
|
|
66
|
+
*/
|
|
67
|
+
harnessWritableRoots?: string[];
|
|
68
|
+
/**
|
|
69
|
+
* The agents trees to wall off + carve self out of. Defaults to both
|
|
70
|
+
* `~/.letta/agents` (API/cloud) and `lc-local-backend/memfs` (local). Each
|
|
71
|
+
* agent's memory lives at `<tree>/<id>/memory` on both, so
|
|
72
|
+
* {@link deriveSelfAgentRootsForTrees} carves the same way regardless of
|
|
73
|
+
* backend.
|
|
74
|
+
*
|
|
75
|
+
* Resolved by the caller's layer (`tools/` / `agent/`, which may import
|
|
76
|
+
* `backend/`): `permissions/` sits below `backend/`, so this builder takes the
|
|
77
|
+
* already-resolved path rather than branching on a backend it cannot import.
|
|
78
|
+
*/
|
|
79
|
+
agentsTreeRoots?: string[];
|
|
80
|
+
}
|
|
81
|
+
/**
|
|
82
|
+
* Policy for the memory-subagent launch profile: it may read the filesystem broadly to do
|
|
83
|
+
* its work, write only under the harness state dir (`~/.letta`), and not read or
|
|
84
|
+
* write *other* agents' memory.
|
|
85
|
+
*
|
|
86
|
+
* The whole subagent process runs under this policy, so it is the sole
|
|
87
|
+
* enforcement for these agents — the static guard is skipped for them. It covers
|
|
88
|
+
* both axes:
|
|
89
|
+
* - writes: `restrictWrites` denies writes everywhere except the base
|
|
90
|
+
* `~/.letta` carve (and self memory). This scopes the agent's
|
|
91
|
+
* non-deterministic work — it can persist memory + harness metadata
|
|
92
|
+
* (settings, logs, conversations, transcripts) but cannot write the repo,
|
|
93
|
+
* home, or temp. Carving the WHOLE `~/.letta` rather than enumerating each
|
|
94
|
+
* harness file is deliberate: the harness writes many paths under it and the
|
|
95
|
+
* set is unbounded, so a per-file carve would silently break as new writers
|
|
96
|
+
* appear. The cross-agent tree nested inside `~/.letta` stays denied.
|
|
97
|
+
* - cross-agent reads: the agents tree is read+write denied, with the agent's
|
|
98
|
+
* own (and inherited parent's) directory carved back out READ-only.
|
|
99
|
+
*
|
|
100
|
+
* Carving the whole agent *directory* readable — not just `/memory` — is what
|
|
101
|
+
* lets us deny the tree without re-triggering the empty-env bug: the subagent's
|
|
102
|
+
* cwd is its memory dir inside the agents tree, and under Seatbelt a child
|
|
103
|
+
* launches with an EMPTY environment if a cwd *ancestor* is read-denied. With
|
|
104
|
+
* the agent dir (the cwd's immediate parent) readable, process init can traverse
|
|
105
|
+
* to the cwd and the env survives.
|
|
106
|
+
*
|
|
107
|
+
* Both backend trees are denied by default so cloud/API agents cannot read local
|
|
108
|
+
* agent memories and local agents cannot read cloud/API memories. Self memory is
|
|
109
|
+
* re-carved writable in `writableRoots` because it is nested inside a denied
|
|
110
|
+
* tree (the base `~/.letta` carve is overridden there by the deny).
|
|
111
|
+
*/
|
|
112
|
+
export declare function buildMemorySubagentSandboxPolicy(input: MemorySubagentSandboxInput): FsSandboxPolicy;
|
|
113
|
+
export interface CrossAgentSandboxInput {
|
|
114
|
+
/**
|
|
115
|
+
* Directories the agent may freely read+write inside the walled-off agents
|
|
116
|
+
* tree — typically its own agent directory (`~/.letta/agents/<self-id>`).
|
|
117
|
+
*/
|
|
118
|
+
selfRoots: string[];
|
|
119
|
+
/** The agents trees to wall off (read+write). Defaults to both backends. */
|
|
120
|
+
agentsTreeRoots?: string[];
|
|
121
|
+
}
|
|
122
|
+
/**
|
|
123
|
+
* Policy for a normal agent that may use the whole filesystem but must not read
|
|
124
|
+
* or write *other* agents' memory. This is the kernel-enforced replacement for
|
|
125
|
+
* the static cross-agent guard.
|
|
126
|
+
*
|
|
127
|
+
* Walls off both backend agents trees (read + write) and carves the agent's own
|
|
128
|
+
* directory back out. Writes elsewhere — the repo, the home dir, temp — stay
|
|
129
|
+
* allowed (`restrictWrites: false`): the only thing this policy removes is
|
|
130
|
+
* access to other agents' memory, exactly like the guard it replaces.
|
|
131
|
+
*
|
|
132
|
+
* Unlike the memory-subagent policy, this one DOES deny reads of the agents tree.
|
|
133
|
+
* That is only safe when the process cwd is outside the tree (the parent
|
|
134
|
+
* agent's cwd is the repo); a cwd inside a read-denied subtree launches with an
|
|
135
|
+
* empty environment under Seatbelt. Callers must enforce that precondition.
|
|
136
|
+
*/
|
|
137
|
+
export declare function buildCrossAgentSandboxPolicy(input: CrossAgentSandboxInput): FsSandboxPolicy;
|
|
138
|
+
//# sourceMappingURL=sandbox-policy.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sandbox-policy.d.ts","sourceRoot":"","sources":["../../../src/permissions/sandbox-policy.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,eAAe,EAErB,MAAM,kBAAkB,CAAC;AAM1B;;;;;;;;;;GAUG;AAEH,sEAAsE;AACtE,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,MAAkB,GAAG,MAAM,CAE5E;AAED,MAAM,WAAW,kCAAkC;IACjD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,6EAA6E;IAC7E,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,GAAE,kCAAuC,GAC/C,MAAM,EAAE,CAUV;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,MAAkB,GAAG,MAAM,CAEpE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAqBtD;AAqCD;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,MAAM,EAAE,EACrB,eAAe,GAAE,MAAM,EAAqC,GAC3D,MAAM,EAAE,CA8BV;AAmBD,MAAM,WAAW,0BAA0B;IACzC;;;OAGG;IACH,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,0BAA0B,GAChC,eAAe,CA4BjB;AAED,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,sBAAsB,GAC5B,eAAe,CAQjB"}
|
|
@@ -0,0 +1,60 @@
|
|
|
1
|
+
import type { SandboxBackend } from "./policy.js";
|
|
2
|
+
export interface SandboxAvailability {
|
|
3
|
+
/** The usable backend, or null when none is available on this host. */
|
|
4
|
+
backend: SandboxBackend | null;
|
|
5
|
+
/** Resolved bwrap binary path, when `backend === "bwrap"`. */
|
|
6
|
+
bwrapPath?: string;
|
|
7
|
+
/** Human-readable explanation, primarily for the null case. */
|
|
8
|
+
reason: string;
|
|
9
|
+
}
|
|
10
|
+
export interface DetectOptions {
|
|
11
|
+
/** Override the platform (for tests). Defaults to `process.platform`. */
|
|
12
|
+
platform?: NodeJS.Platform;
|
|
13
|
+
/** Bypass the module-level cache (for tests / re-probing). */
|
|
14
|
+
force?: boolean;
|
|
15
|
+
}
|
|
16
|
+
/**
|
|
17
|
+
* Detect which filesystem-sandbox backend works on this host, probing for real
|
|
18
|
+
* (Seatbelt: binary presence; bwrap: an actual user-namespace mount probe).
|
|
19
|
+
* Result is cached for the process since it cannot change mid-run.
|
|
20
|
+
*/
|
|
21
|
+
export declare function detectSandboxBackend(options?: DetectOptions): SandboxAvailability;
|
|
22
|
+
/** Clear the cached probe result (tests only). */
|
|
23
|
+
export declare function resetSandboxAvailabilityCache(): void;
|
|
24
|
+
/**
|
|
25
|
+
* Whether the memory-subagent filesystem sandbox is enabled. It is **on by
|
|
26
|
+
* default**: memory subagents (reflection, memory, init, history-analyzer) run
|
|
27
|
+
* as whole confined processes with a scoped write surface, and there is no
|
|
28
|
+
* interactive approve/deny flow that could stand in for it. Set
|
|
29
|
+
* `LETTA_FS_SANDBOX=0` (or `false`) to opt out entirely. When no backend is
|
|
30
|
+
* available on the host, {@link detectSandboxBackend} returns `{backend:null}`
|
|
31
|
+
* and every sandbox entry point no-ops regardless of this flag.
|
|
32
|
+
*
|
|
33
|
+
* Lives in this leaf so both subagent spawning (agent layer) and parent Bash
|
|
34
|
+
* wrapping (tools layer) gate on the same env var without importing each other.
|
|
35
|
+
*/
|
|
36
|
+
export declare function isFsSandboxEnabled(env?: NodeJS.ProcessEnv): boolean;
|
|
37
|
+
/**
|
|
38
|
+
* Whether the cross-agent shell sandbox (per-shell-command confinement of the
|
|
39
|
+
* agent process's spawned shells) is enabled. It is **off by default**: an
|
|
40
|
+
* interactive agent's own shells walling off other agents' memory broke
|
|
41
|
+
* legitimate workflows (agents inspecting `~/.letta/agents`) with kernel
|
|
42
|
+
* `Operation not permitted` errors that no permission mode could approve
|
|
43
|
+
* through. Set `LETTA_FS_SANDBOX=1` (or `true`) to opt in — recommended for
|
|
44
|
+
* multi-tenant deployments (app server, experiment runners) where one host
|
|
45
|
+
* runs many agents that must not read each other's memory.
|
|
46
|
+
*
|
|
47
|
+
* `LETTA_FS_SANDBOX` semantics across both checks:
|
|
48
|
+
* - unset → memory subagents sandboxed; agent shells unconfined
|
|
49
|
+
* - `1`/`true` → both sandboxed
|
|
50
|
+
* - `0`/`false` → nothing sandboxed
|
|
51
|
+
*/
|
|
52
|
+
export declare function isShellSandboxEnabled(env?: NodeJS.ProcessEnv): boolean;
|
|
53
|
+
/**
|
|
54
|
+
* Emit a loud, once-per-process warning when sandboxing was requested but this
|
|
55
|
+
* host cannot provide a kernel backend. We intentionally continue rather than
|
|
56
|
+
* fail closed: users can still work, but should know filesystem isolation is
|
|
57
|
+
* degraded on this host.
|
|
58
|
+
*/
|
|
59
|
+
export declare function warnSandboxBackendUnavailable(availability: SandboxAvailability, context: string): void;
|
|
60
|
+
//# sourceMappingURL=availability.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"availability.d.ts","sourceRoot":"","sources":["../../../src/sandbox/availability.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGlD,MAAM,WAAW,mBAAmB;IAClC,uEAAuE;IACvE,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;IAC/B,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,8DAA8D;IAC9D,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAKD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,GAAE,aAAkB,GAC1B,mBAAmB,CAarB;AAED,kDAAkD;AAClD,wBAAgB,6BAA6B,IAAI,IAAI,CAEpD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAIT;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAIT;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,YAAY,EAAE,mBAAmB,EACjC,OAAO,EAAE,MAAM,GACd,IAAI,CAUN"}
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
import type { FsSandboxPolicy } from "./policy.js";
|
|
2
|
+
/**
|
|
3
|
+
* Linux bubblewrap backend.
|
|
4
|
+
*
|
|
5
|
+
* We shell out to `bwrap`, building a mount namespace that mirrors the same
|
|
6
|
+
* policy model as Seatbelt:
|
|
7
|
+
*
|
|
8
|
+
* - The root filesystem is bound `--ro-bind` (write-scoped profile,
|
|
9
|
+
* default-deny writes) or `--bind` (cross-agent profile, default-allow writes). This single
|
|
10
|
+
* choice implements `restrictWrites` for free: under a read-only root, the
|
|
11
|
+
* only writable paths are the explicit `--bind` carveouts.
|
|
12
|
+
* - Each denied root is masked with `--tmpfs`, so other agents' directories
|
|
13
|
+
* are not merely unwritable but *absent* — unreadable and unenumerable,
|
|
14
|
+
* strictly stronger than the static guard.
|
|
15
|
+
* - readonly / writable carveouts are re-bound on top. bwrap creates the
|
|
16
|
+
* mountpoints inside the tmpfs as needed, so a self-memory dir nested in a
|
|
17
|
+
* masked agents tree reappears.
|
|
18
|
+
*
|
|
19
|
+
* No `--unshare-net`: network stays open (out of scope for memory isolation).
|
|
20
|
+
* `--die-with-parent` ensures the sandbox tears down with the agent process,
|
|
21
|
+
* backing up the process-group kill in `shell-runner.ts`.
|
|
22
|
+
*
|
|
23
|
+
* Mount order matters — later operations layer over earlier ones: root → dev →
|
|
24
|
+
* proc → base writable → mask denied → restore readonly → restore writable.
|
|
25
|
+
* The base-writable binds come BEFORE the masks so a denied root nested inside a
|
|
26
|
+
* broad base carve (the cross-agent tree under `~/.letta`) is still masked.
|
|
27
|
+
*/
|
|
28
|
+
/** Default discovery name; availability probing may substitute a bundled path. */
|
|
29
|
+
export declare const BWRAP_BIN = "bwrap";
|
|
30
|
+
/**
|
|
31
|
+
* Build the bwrap flag list (everything between the binary and the `--`
|
|
32
|
+
* separator). The caller prepends the bwrap path and appends
|
|
33
|
+
* `"--"` + the inner launcher.
|
|
34
|
+
*/
|
|
35
|
+
export declare function buildBwrapArgs(policy: FsSandboxPolicy): string[];
|
|
36
|
+
//# sourceMappingURL=bwrap.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"bwrap.d.ts","sourceRoot":"","sources":["../../../src/sandbox/bwrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,kFAAkF;AAClF,eAAO,MAAM,SAAS,UAAU,CAAC;AAEjC;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,EAAE,CAqDhE"}
|
|
@@ -0,0 +1,79 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* A filesystem sandbox policy, expressed entirely in concrete absolute paths.
|
|
3
|
+
*
|
|
4
|
+
* This module is a pure leaf: it knows nothing about agents, launch profiles, or
|
|
5
|
+
* how paths are derived. Callers resolve agent ids / memory roots into paths
|
|
6
|
+
* (via `@/permissions/memory-paths`) and hand the finished policy here. That
|
|
7
|
+
* keeps the OS-specific generators (`seatbelt.ts`, `bwrap.ts`) trivially
|
|
8
|
+
* testable and out of the domain layer graph.
|
|
9
|
+
*
|
|
10
|
+
* Enforcement semantics (both backends implement the same model):
|
|
11
|
+
*
|
|
12
|
+
* - `baseWritableRoots` write re-allowed under these, emitted BEFORE
|
|
13
|
+
* `deniedRoots` so a denied root nested inside still wins.
|
|
14
|
+
* Used to grant a broad harness dir (e.g. all of
|
|
15
|
+
* `~/.letta`) while keeping the cross-agent tree denied —
|
|
16
|
+
* so a memory subagent may write harness state anywhere
|
|
17
|
+
* under `~/.letta` but not the repo/home/temp.
|
|
18
|
+
* - `deniedRoots` read + write denied (e.g. `~/.letta/agents`).
|
|
19
|
+
* - `readonlyRoots` read re-allowed, write stays denied. Overrides denied.
|
|
20
|
+
* - `writableRoots` read + write re-allowed. Overrides denied, the global
|
|
21
|
+
* write-deny, AND `baseWritableRoots` — for a self carve
|
|
22
|
+
* nested inside a denied root (self memory).
|
|
23
|
+
* - `restrictWrites` when true, writes are denied *everywhere* except
|
|
24
|
+
* `baseWritableRoots`/`writableRoots` (write-scoped profile). When
|
|
25
|
+
* false, writes are allowed by default except under
|
|
26
|
+
* `deniedRoots` (cross-agent profile — the normal agent that
|
|
27
|
+
* simply may not touch other agents' memory).
|
|
28
|
+
*
|
|
29
|
+
* Reads are never globally restricted: an agent can read the whole filesystem
|
|
30
|
+
* to do its work, minus the other-agent directories in `deniedRoots`.
|
|
31
|
+
*
|
|
32
|
+
* Specificity is expressed through ordering, not nesting depth. The emitted
|
|
33
|
+
* order is: global write-deny → `baseWritableRoots` → `deniedRoots` →
|
|
34
|
+
* `writableRoots` → `readonlyRoots`. So a broad base carve is overridden by a
|
|
35
|
+
* nested deny, which is in turn overridden by a still-more-specific self carve.
|
|
36
|
+
*/
|
|
37
|
+
export interface FsSandboxPolicy {
|
|
38
|
+
baseWritableRoots: string[];
|
|
39
|
+
deniedRoots: string[];
|
|
40
|
+
readonlyRoots: string[];
|
|
41
|
+
writableRoots: string[];
|
|
42
|
+
restrictWrites: boolean;
|
|
43
|
+
}
|
|
44
|
+
/** Backend tag, also the value of the `LETTA_SANDBOX` env sentinel. */
|
|
45
|
+
export type SandboxBackend = "seatbelt" | "bwrap";
|
|
46
|
+
/**
|
|
47
|
+
* Env var set inside a sandboxed process. Mirrors Codex's `CODEX_SANDBOX`.
|
|
48
|
+
* Tools and nested logic can read it to detect that they are already confined
|
|
49
|
+
* (and, for the re-exec pattern, to avoid wrapping themselves twice).
|
|
50
|
+
*/
|
|
51
|
+
export declare const SANDBOX_ENV_VAR = "LETTA_SANDBOX";
|
|
52
|
+
export interface BuildPolicyOptions {
|
|
53
|
+
/**
|
|
54
|
+
* Broad write carves emitted BEFORE `deniedRoots` (a nested deny still wins).
|
|
55
|
+
* e.g. all of `~/.letta` so a memory subagent can write harness state but not
|
|
56
|
+
* the repo/home/temp.
|
|
57
|
+
*/
|
|
58
|
+
baseWritableRoots?: string[];
|
|
59
|
+
/** Roots to wall off (read+write), e.g. `~/.letta/agents`. */
|
|
60
|
+
deniedRoots?: string[];
|
|
61
|
+
/** Paths to re-expose read-only (e.g. a subagent's parent memory dir). */
|
|
62
|
+
readonlyRoots?: string[];
|
|
63
|
+
/** Paths to re-expose read-write (self agent/memory dir, $TMPDIR, /tmp). */
|
|
64
|
+
writableRoots?: string[];
|
|
65
|
+
/** Memory mode: deny writes everywhere except the writable roots. */
|
|
66
|
+
restrictWrites?: boolean;
|
|
67
|
+
}
|
|
68
|
+
/**
|
|
69
|
+
* Assemble an {@link FsSandboxPolicy} from plain paths, normalizing and
|
|
70
|
+
* de-duplicating each set. Pure — no filesystem or agent-context access.
|
|
71
|
+
*/
|
|
72
|
+
export declare function buildFsSandboxPolicy(options: BuildPolicyOptions): FsSandboxPolicy;
|
|
73
|
+
/**
|
|
74
|
+
* Normalize a path for use in a sandbox rule: absolute, forward slashes, no
|
|
75
|
+
* trailing slash. Relative inputs are resolved against `/` so a malformed
|
|
76
|
+
* policy can never silently scope a rule to the current working directory.
|
|
77
|
+
*/
|
|
78
|
+
export declare function normalizeSandboxPath(path: string): string;
|
|
79
|
+
//# sourceMappingURL=policy.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/sandbox/policy.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,WAAW,eAAe;IAC9B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,uEAAuE;AACvE,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,OAAO,CAAC;AAElD;;;;GAIG;AACH,eAAO,MAAM,eAAe,kBAAkB,CAAC;AAE/C,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,4EAA4E;IAC5E,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,qEAAqE;IACrE,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,kBAAkB,GAC1B,eAAe,CAQjB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQzD"}
|
|
@@ -0,0 +1,39 @@
|
|
|
1
|
+
import type { FsSandboxPolicy } from "./policy.js";
|
|
2
|
+
/**
|
|
3
|
+
* macOS Seatbelt backend.
|
|
4
|
+
*
|
|
5
|
+
* We shell out to `/usr/bin/sandbox-exec` with an inline SBPL profile (`-p`).
|
|
6
|
+
* Concrete paths are passed as `-D` parameters and referenced in the profile as
|
|
7
|
+
* `(param "NAME")`, so the profile text never needs SBPL string escaping and
|
|
8
|
+
* paths with spaces / quotes are safe (we spawn argv directly, no shell).
|
|
9
|
+
*
|
|
10
|
+
* The profile is `(allow default)` plus targeted denies — deliberately narrower
|
|
11
|
+
* than Codex's Chrome-derived `(deny default)` base. Our threat model is
|
|
12
|
+
* filesystem scoping for memory isolation, not general untrusted-code
|
|
13
|
+
* confinement, so allow-default keeps network, signals, ttys, and arbitrary dev
|
|
14
|
+
* tools working untouched while the FS rules do the isolation. SBPL is
|
|
15
|
+
* last-match-wins, which is why the deny/allow ordering below matters.
|
|
16
|
+
*/
|
|
17
|
+
/** Hardcoded path — never resolved via PATH, to defend against a planted
|
|
18
|
+
* `sandbox-exec` earlier on PATH (same rationale as Codex). */
|
|
19
|
+
export declare const SANDBOX_EXEC_PATH = "/usr/bin/sandbox-exec";
|
|
20
|
+
interface SeatbeltDefine {
|
|
21
|
+
name: string;
|
|
22
|
+
value: string;
|
|
23
|
+
}
|
|
24
|
+
/**
|
|
25
|
+
* Build the SBPL profile text plus the `-D NAME=value` defines it references.
|
|
26
|
+
* Exposed for snapshot testing; `buildSeatbeltArgs` is what callers use.
|
|
27
|
+
*/
|
|
28
|
+
export declare function buildSeatbeltProfile(policy: FsSandboxPolicy): {
|
|
29
|
+
profile: string;
|
|
30
|
+
defines: SeatbeltDefine[];
|
|
31
|
+
};
|
|
32
|
+
/**
|
|
33
|
+
* Build the argv tail for `sandbox-exec`: `["-p", <profile>, "-DNAME=value",
|
|
34
|
+
* ...]`. The caller prepends {@link SANDBOX_EXEC_PATH} and appends
|
|
35
|
+
* `"--"` + the inner launcher.
|
|
36
|
+
*/
|
|
37
|
+
export declare function buildSeatbeltArgs(policy: FsSandboxPolicy): string[];
|
|
38
|
+
export {};
|
|
39
|
+
//# sourceMappingURL=seatbelt.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"seatbelt.d.ts","sourceRoot":"","sources":["../../../src/sandbox/seatbelt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD;;;;;;;;;;;;;;GAcG;AAEH;+DAC+D;AAC/D,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AAEzD,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,eAAe,GAAG;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B,CAmDA;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,EAAE,CAOnE"}
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
import type { FsSandboxPolicy, SandboxBackend } from "./policy.js";
|
|
2
|
+
export interface WrapOptions {
|
|
3
|
+
/** Which backend to render for. `null` disables wrapping (returns null). */
|
|
4
|
+
backend: SandboxBackend | null;
|
|
5
|
+
/** Resolved bwrap binary path (system or bundled). Defaults to `bwrap`. */
|
|
6
|
+
bwrapPath?: string;
|
|
7
|
+
}
|
|
8
|
+
/**
|
|
9
|
+
* Wrap an inner launcher (e.g. `["/bin/zsh", "-c", cmd]`) so it runs under the
|
|
10
|
+
* given sandbox backend with the given policy. Returns the wrapped argv, or
|
|
11
|
+
* `null` when no backend is available — in which case the caller spawns the
|
|
12
|
+
* launcher unchanged (falling back to the static guard tier).
|
|
13
|
+
*
|
|
14
|
+
* Backend selection is the caller's job (see `availability.ts`); this function
|
|
15
|
+
* only renders argv, which keeps it a pure, snapshot-testable transform.
|
|
16
|
+
*/
|
|
17
|
+
export declare function wrapLauncher(launcher: string[], policy: FsSandboxPolicy, options: WrapOptions): string[] | null;
|
|
18
|
+
//# sourceMappingURL=wrap.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"wrap.d.ts","sourceRoot":"","sources":["../../../src/sandbox/wrap.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGnE,MAAM,WAAW,WAAW;IAC1B,4EAA4E;IAC5E,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;IAC/B,2EAA2E;IAC3E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAAE,EAClB,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,WAAW,GACnB,MAAM,EAAE,GAAG,IAAI,CAoBjB"}
|
|
@@ -1992,6 +1992,8 @@ export interface ConversationMessagesListResponseMessage {
|
|
|
1992
1992
|
request_id: string;
|
|
1993
1993
|
success: boolean;
|
|
1994
1994
|
messages: LettaMessage[];
|
|
1995
|
+
next_before: string | null;
|
|
1996
|
+
has_more: boolean;
|
|
1995
1997
|
error?: string;
|
|
1996
1998
|
}
|
|
1997
1999
|
export interface ConversationCompactResponseMessage {
|