@lumenflow/host 5.0.2

package/dist/enrollment/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Host enrollment barrel.
+ *
+ * WU-2731 (INIT-060 phase 3, ADR-013 §5): phone-device enrollment + token
+ * subject + per-device registration record. Future enrollments (workspace,
+ * browser, etc.) re-export from here.
+ */
+export { buildPhoneDeviceSubject, enrollPhoneDevice, listPhoneDevices, parsePhoneDeviceSubject, resolvePhoneDeviceName, } from './phone-device.js';
+export type { ParsedPhoneDeviceSubject, PhoneDeviceEnrollmentInput, PhoneDeviceEnrollmentOptions, PhoneDeviceEnrollmentResult, PhoneDeviceRegistrationRecord, } from './phone-device.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/enrollment/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/enrollment/index.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AAEH,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,wBAAwB,EACxB,0BAA0B,EAC1B,4BAA4B,EAC5B,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,mBAAmB,CAAC"}

package/dist/enrollment/index.js

@@ -0,0 +1,11 @@
+// Copyright (c) 2026 Hellmai Ltd
+// SPDX-License-Identifier: AGPL-3.0-only
+/**
+ * Host enrollment barrel.
+ *
+ * WU-2731 (INIT-060 phase 3, ADR-013 §5): phone-device enrollment + token
+ * subject + per-device registration record. Future enrollments (workspace,
+ * browser, etc.) re-export from here.
+ */
+export { buildPhoneDeviceSubject, enrollPhoneDevice, listPhoneDevices, parsePhoneDeviceSubject, resolvePhoneDeviceName, } from './phone-device.js';
+//# sourceMappingURL=index.js.map

package/dist/enrollment/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/enrollment/index.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,yCAAyC;AAEzC;;;;;;GAMG;AAEH,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC"}

package/dist/enrollment/phone-device.d.ts

@@ -0,0 +1,73 @@
+import { type ControlPlaneAuthProfileConfig, type ScopedControlPlaneIdentity } from '@lumenflow/control-plane-sdk';
+export interface PhoneDeviceEnrollmentInput {
+    workspace_id: string;
+    org_id: string;
+    agent_id: string;
+    device_id: string;
+    device_name: string;
+}
+export interface PhoneDeviceEnrollmentOptions {
+    /**
+     * Absolute path of the workspace root. Defaults to `process.cwd()`. The
+     * registry is written to `<workspaceRoot>/.lumenflow/state/phone-devices.json`.
+     */
+    workspaceRoot?: string;
+    /** Profile config used to mint the token. Defaults to the `phone` profile. */
+    profile?: ControlPlaneAuthProfileConfig;
+    /** Explicit profile name written into the token (default `phone`). */
+    profileName?: string;
+    now?: Date | string;
+}
+export interface PhoneDeviceRegistrationRecord {
+    device_id: string;
+    device_name: string;
+    workspace_id: string;
+    enrolled_at: string;
+}
+export interface PhoneDeviceEnrollmentResult {
+    identity: ScopedControlPlaneIdentity;
+    record: PhoneDeviceRegistrationRecord;
+}
+/**
+ * Build the canonical phone-scoped token subject: `{workspace_id}:phone:{device_id}`.
+ *
+ * Exported so callers that need to verify a parsed token subject outside
+ * enrollment (e.g. sidekick channel-ingress) can pattern-match without
+ * re-implementing the grammar.
+ */
+export declare function buildPhoneDeviceSubject(workspaceId: string, deviceId: string): string;
+export interface ParsedPhoneDeviceSubject {
+    workspace_id: string;
+    device_id: string;
+}
+/**
+ * Parse a subject string and return its components if it matches the
+ * phone-device shape. Returns `undefined` for workspace-only or malformed
+ * subjects.
+ */
+export declare function parsePhoneDeviceSubject(subject: string): ParsedPhoneDeviceSubject | undefined;
+/**
+ * Issue a phone-device identity (sibling of the workspace enrollment token)
+ * and persist the device registration record. On re-enrollment of a known
+ * `device_id` the record is updated with the new `device_name` but the
+ * `enrolled_at` timestamp is preserved so audit trails retain the original
+ * first-enrollment time.
+ */
+export declare function enrollPhoneDevice(input: PhoneDeviceEnrollmentInput, options?: PhoneDeviceEnrollmentOptions): PhoneDeviceEnrollmentResult;
+/**
+ * Resolve the human-readable device name for a given `device_id`. Returns
+ * `undefined` when no record exists — callers (e.g. audit log renderers)
+ * should fall back to the raw `device_id` in that case so attribution is
+ * preserved even when the registry is absent.
+ */
+export declare function resolvePhoneDeviceName(deviceId: string, options?: {
+    workspaceRoot?: string;
+}): string | undefined;
+/**
+ * Return every phone-device record in the registry. Exposed for cloud audit
+ * rendering (INIT-060 WU-10) and CLI introspection commands.
+ */
+export declare function listPhoneDevices(options?: {
+    workspaceRoot?: string;
+}): PhoneDeviceRegistrationRecord[];
+//# sourceMappingURL=phone-device.d.ts.map

package/dist/enrollment/phone-device.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"phone-device.d.ts","sourceRoot":"","sources":["../../src/enrollment/phone-device.ts"],"names":[],"mappings":"AA8BA,OAAO,EAEL,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAChC,MAAM,8BAA8B,CAAC;AAWtC,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,4BAA4B;IAC3C;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,6BAA6B,CAAC;IACxC,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,0BAA0B,CAAC;IACrC,MAAM,EAAE,6BAA6B,CAAC;CACvC;AAcD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAIrF;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAU7F;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,0BAA0B,EACjC,OAAO,GAAE,4BAAiC,GACzC,2BAA2B,CA2C7B;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GACvC,MAAM,GAAG,SAAS,CAMpB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GACvC,6BAA6B,EAAE,CAIjC"}

package/dist/enrollment/phone-device.js

@@ -0,0 +1,198 @@
+// Copyright (c) 2026 Hellmai Ltd
+// SPDX-License-Identifier: AGPL-3.0-only
+/**
+ * WU-2731 (INIT-060 phase 3, ADR-013 §5): Phone-device enrollment.
+ *
+ * Responsibilities:
+ *
+ * 1. Issue a phone-scoped enrollment token whose `subject` claim is
+ *    `{workspace_id}:phone:{device_id}`. Cloud treats this subject as the
+ *    authoritative `from` for inbound phone POSTs (audit per-device
+ *    attribution).
+ *
+ * 2. Persist a device registration record mapping `device_id` to a
+ *    human-readable `device_name` on workspace-local disk. The record is
+ *    written atomically (temp file + rename) so concurrent enrollments do
+ *    not corrupt the registry.
+ *
+ * 3. Resolve `device_id` to `device_name` for audit-log rendering.
+ *
+ * The module deliberately has no knowledge of the HTTP surface: the tool-api
+ * and sidekick channel-ingress consumers import the resolver and the `from`
+ * helper from `@lumenflow/surfaces/http/auth`; this module only issues tokens
+ * and maintains the registry.
+ */
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { existsSync } from 'node:fs';
+import path from 'node:path';
+import { issueControlPlaneIdentity, } from '@lumenflow/control-plane-sdk';
+const DEFAULT_REGISTRY_RELATIVE_PATH = '.lumenflow/state/phone-devices.json';
+const SUBJECT_SEPARATOR = ':';
+const SUBJECT_KIND_PHONE = 'phone';
+const REGISTRY_FILE_MODE = 0o600;
+const REGISTRY_DIR_MODE = 0o700;
+const REGISTRY_VERSION = 1;
+const UTF8 = 'utf8';
+const TEMP_SUFFIX = '.tmp';
+const DEFAULT_PHONE_PROFILE = {
+    ttl_seconds: 60 * 60 * 24 * 30,
+    scopes: ['tool:orchestrate:initiative', 'tool:delegation:list', 'tool:sidekick:channel:send'],
+};
+const DEFAULT_PHONE_PROFILE_NAME = 'phone';
+/**
+ * Build the canonical phone-scoped token subject: `{workspace_id}:phone:{device_id}`.
+ *
+ * Exported so callers that need to verify a parsed token subject outside
+ * enrollment (e.g. sidekick channel-ingress) can pattern-match without
+ * re-implementing the grammar.
+ */
+export function buildPhoneDeviceSubject(workspaceId, deviceId) {
+    assertNonEmpty(workspaceId, 'workspace_id');
+    assertNonEmpty(deviceId, 'device_id');
+    return `${workspaceId}${SUBJECT_SEPARATOR}${SUBJECT_KIND_PHONE}${SUBJECT_SEPARATOR}${deviceId}`;
+}
+/**
+ * Parse a subject string and return its components if it matches the
+ * phone-device shape. Returns `undefined` for workspace-only or malformed
+ * subjects.
+ */
+export function parsePhoneDeviceSubject(subject) {
+    const parts = subject.split(SUBJECT_SEPARATOR);
+    if (parts.length !== 3 || parts[1] !== SUBJECT_KIND_PHONE) {
+        return undefined;
+    }
+    const [workspace_id, , device_id] = parts;
+    if (!workspace_id || !device_id) {
+        return undefined;
+    }
+    return { workspace_id, device_id };
+}
+/**
+ * Issue a phone-device identity (sibling of the workspace enrollment token)
+ * and persist the device registration record. On re-enrollment of a known
+ * `device_id` the record is updated with the new `device_name` but the
+ * `enrolled_at` timestamp is preserved so audit trails retain the original
+ * first-enrollment time.
+ */
+export function enrollPhoneDevice(input, options = {}) {
+    assertNonEmpty(input.workspace_id, 'workspace_id');
+    assertNonEmpty(input.org_id, 'org_id');
+    assertNonEmpty(input.agent_id, 'agent_id');
+    assertNonEmpty(input.device_id, 'device_id');
+    assertNonEmpty(input.device_name, 'device_name');
+    const workspaceRoot = options.workspaceRoot ?? process.cwd();
+    const profile = options.profile ?? DEFAULT_PHONE_PROFILE;
+    const profileName = options.profileName ?? DEFAULT_PHONE_PROFILE_NAME;
+    const subject = buildPhoneDeviceSubject(input.workspace_id, input.device_id);
+    const identity = issueControlPlaneIdentity({
+        workspace_id: input.workspace_id,
+        org_id: input.org_id,
+        agent_id: input.agent_id,
+    }, {
+        profile: profileName,
+        profiles: { [profileName]: profile },
+        now: options.now,
+        subject,
+    });
+    const registryPath = resolveRegistryPath(workspaceRoot);
+    const previous = readRegistryDocument(registryPath);
+    const existing = previous.devices.find((entry) => entry.device_id === input.device_id);
+    const enrolledAt = existing?.enrolled_at ?? resolveEnrolledAt(options.now);
+    const record = {
+        device_id: input.device_id,
+        device_name: input.device_name,
+        workspace_id: input.workspace_id,
+        enrolled_at: enrolledAt,
+    };
+    const nextDevices = previous.devices
+        .filter((entry) => entry.device_id !== input.device_id)
+        .concat(record);
+    writeRegistryDocument(registryPath, { version: REGISTRY_VERSION, devices: nextDevices });
+    return { identity, record };
+}
+/**
+ * Resolve the human-readable device name for a given `device_id`. Returns
+ * `undefined` when no record exists — callers (e.g. audit log renderers)
+ * should fall back to the raw `device_id` in that case so attribution is
+ * preserved even when the registry is absent.
+ */
+export function resolvePhoneDeviceName(deviceId, options = {}) {
+    const workspaceRoot = options.workspaceRoot ?? process.cwd();
+    const registryPath = resolveRegistryPath(workspaceRoot);
+    const document = readRegistryDocument(registryPath);
+    const record = document.devices.find((entry) => entry.device_id === deviceId);
+    return record?.device_name;
+}
+/**
+ * Return every phone-device record in the registry. Exposed for cloud audit
+ * rendering (INIT-060 WU-10) and CLI introspection commands.
+ */
+export function listPhoneDevices(options = {}) {
+    const workspaceRoot = options.workspaceRoot ?? process.cwd();
+    const registryPath = resolveRegistryPath(workspaceRoot);
+    return readRegistryDocument(registryPath).devices;
+}
+function resolveRegistryPath(workspaceRoot) {
+    return path.join(workspaceRoot, DEFAULT_REGISTRY_RELATIVE_PATH);
+}
+function resolveEnrolledAt(now) {
+    if (now instanceof Date) {
+        return now.toISOString();
+    }
+    if (typeof now === 'string') {
+        return new Date(now).toISOString();
+    }
+    return new Date().toISOString();
+}
+function readRegistryDocument(registryPath) {
+    if (!existsSync(registryPath)) {
+        return { version: REGISTRY_VERSION, devices: [] };
+    }
+    try {
+        const raw = readFileSync(registryPath, UTF8);
+        const parsed = JSON.parse(raw);
+        if (!isRegistryDocument(parsed)) {
+            return { version: REGISTRY_VERSION, devices: [] };
+        }
+        return parsed;
+    }
+    catch {
+        return { version: REGISTRY_VERSION, devices: [] };
+    }
+}
+function writeRegistryDocument(registryPath, document) {
+    const dir = path.dirname(registryPath);
+    mkdirSync(dir, { recursive: true, mode: REGISTRY_DIR_MODE });
+    const tempPath = `${registryPath}${TEMP_SUFFIX}`;
+    writeFileSync(tempPath, JSON.stringify(document, null, 2), {
+        encoding: UTF8,
+        mode: REGISTRY_FILE_MODE,
+    });
+    renameSync(tempPath, registryPath);
+}
+function isRegistryDocument(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+        return false;
+    }
+    const candidate = value;
+    if (typeof candidate.version !== 'number' || !Array.isArray(candidate.devices)) {
+        return false;
+    }
+    return candidate.devices.every(isRegistrationRecord);
+}
+function isRegistrationRecord(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+        return false;
+    }
+    const candidate = value;
+    return (typeof candidate.device_id === 'string' &&
+        typeof candidate.device_name === 'string' &&
+        typeof candidate.workspace_id === 'string' &&
+        typeof candidate.enrolled_at === 'string');
+}
+function assertNonEmpty(value, field) {
+    if (typeof value !== 'string' || value.length === 0) {
+        throw new Error(`Phone-device enrollment rejected: "${field}" must be a non-empty string.`);
+    }
+}
+//# sourceMappingURL=phone-device.js.map

package/dist/enrollment/phone-device.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phone-device.js","sourceRoot":"","sources":["../../src/enrollment/phone-device.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,yBAAyB,GAG1B,MAAM,8BAA8B,CAAC;AAEtC,MAAM,8BAA8B,GAAG,qCAAqC,CAAC;AAC7E,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAChC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,IAAI,GAAG,MAAM,CAAC;AACpB,MAAM,WAAW,GAAG,MAAM,CAAC;AAwC3B,MAAM,qBAAqB,GAAkC;IAC3D,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;IAC9B,MAAM,EAAE,CAAC,6BAA6B,EAAE,sBAAsB,EAAE,4BAA4B,CAAC;CAC9F,CAAC;AAEF,MAAM,0BAA0B,GAAG,OAAO,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAAmB,EAAE,QAAgB;IAC3E,cAAc,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC5C,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACtC,OAAO,GAAG,WAAW,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,iBAAiB,GAAG,QAAQ,EAAE,CAAC;AAClG,CAAC;AAOD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,kBAAkB,EAAE,CAAC;QAC1D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,CAAC,YAAY,EAAE,AAAD,EAAG,SAAS,CAAC,GAAG,KAAK,CAAC;IAC1C,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAiC,EACjC,UAAwC,EAAE;IAE1C,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACnD,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvC,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC3C,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC7C,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAEjD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,qBAAqB,CAAC;IACzD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,0BAA0B,CAAC;IACtE,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAE7E,MAAM,QAAQ,GAAG,yBAAyB,CACxC;QACE,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,EACD;QACE,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE;QACpC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO;KACR,CACF,CAAC;IAEF,MAAM,YAAY,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;IACvF,MAAM,UAAU,GAAG,QAAQ,EAAE,WAAW,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAkC;QAC5C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,WAAW,EAAE,UAAU;KACxB,CAAC;IAEF,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO;SACjC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC;SACtD,MAAM,CAAC,MAAM,CAAC,CAAC;IAClB,qBAAqB,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IAEzF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,UAAsC,EAAE;IAExC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC7D,MAAM,YAAY,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;IAC9E,OAAO,MAAM,EAAE,WAAW,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAsC,EAAE;IAExC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC7D,MAAM,YAAY,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACxD,OAAO,oBAAoB,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC;AACpD,CAAC;AAED,SAAS,mBAAmB,CAAC,aAAqB;IAChD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,8BAA8B,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,iBAAiB,CAAC,GAA8B;IACvD,IAAI,GAAG,YAAY,IAAI,EAAE,CAAC;QACxB,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,oBAAoB,CAAC,YAAoB;IAChD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACpD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,YAAoB,EAAE,QAAqC;IACxF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,GAAG,YAAY,GAAG,WAAW,EAAE,CAAC;IACjD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QACzD,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,kBAAkB;KACzB,CAAC,CAAC;IACH,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,OAAO,CACL,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ;QACvC,OAAO,SAAS,CAAC,WAAW,KAAK,QAAQ;QACzC,OAAO,SAAS,CAAC,YAAY,KAAK,QAAQ;QAC1C,OAAO,SAAS,CAAC,WAAW,KAAK,QAAQ,CAC1C,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,KAAa;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,+BAA+B,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC"}