@mastra/platform-workspace 0.0.0-esbuild-bundle-worker-20260807173433

package/README.md

@@ -0,0 +1,115 @@
+# @mastra/platform-workspace
+
+Mastra Platform workspace provider. Gives agents environment-scoped sandbox execution and bucket-backed filesystem access through the Mastra Platform workspace proxy.
+
+## Installation
+
+```bash
+npm install @mastra/platform-workspace
+```
+
+## Configuration
+
+All options can be passed to the constructor or read from environment variables:
+
+| Option          | Env var                        | Required         |
+| --------------- | ------------------------------ | ---------------- |
+| `accessToken`   | `MASTRA_PLATFORM_ACCESS_TOKEN` | Yes              |
+| `projectId`     | `MASTRA_PROJECT_ID`            | Yes              |
+| `environmentId` | `MASTRA_ENVIRONMENT_ID`        | Yes (sandbox)    |
+| `bucketName`    | `MASTRA_PLATFORM_BUCKET_NAME`  | Yes (filesystem) |
+
+The proxy URL defaults to `https://workspaces.mastra.ai` and can be overridden with the `MASTRA_WORKSPACE_PROXY_URL` env var (useful for staging).
+
+Requests to the proxy are authenticated with `Authorization: Bearer <accessToken>`.
+
+## Usage
+
+```typescript
+import { Agent } from '@mastra/core/agent';
+import { Workspace } from '@mastra/core/workspace';
+import { PlatformFilesystem, PlatformSandbox } from '@mastra/platform-workspace';
+
+const workspace = new Workspace({
+  filesystem: new PlatformFilesystem({
+    // accessToken, projectId, bucketName all fall back to env
+  }),
+  sandbox: new PlatformSandbox({
+    // accessToken, projectId, environmentId all fall back to env
+    idleTimeoutMinutes: 30,
+    networkIsolation: 'ISOLATED',
+  }),
+});
+
+const agent = new Agent({
+  name: 'code-analyzer',
+  model: 'anthropic/claude-sonnet-4-5',
+  workspace,
+});
+```
+
+## Filesystem
+
+`PlatformFilesystem` implements the Mastra filesystem interface against a workspace bucket. Object keys are percent-encoded per segment, so filenames with `?`, `#`, `%`, `&`, `+`, or spaces are preserved end-to-end.
+
+```typescript
+const fs = new PlatformFilesystem({ bucketName: 'reports' });
+
+await fs.writeFile('/analyses/repo.md', markdown);
+const content = await fs.readFile('/analyses/repo.md');
+const entries = await fs.readdir('/analyses');
+await fs.moveFile('/analyses/repo.md', '/analyses/repo-final.md');
+```
+
+Pass `readOnly: true` to mount the bucket read-only. Mutating calls will throw `WorkspaceReadOnlyError`.
+
+## Sandbox
+
+`PlatformSandbox` executes commands inside a Railway-backed sandbox tied to a Platform environment. Sessions boot from a pre-built recipe checkpoint (Python 3, Node 22, TypeScript/tsx, common build tooling).
+
+```typescript
+const sandbox = new PlatformSandbox({ environmentId: 'env_abc' });
+
+const result = await sandbox.executeCommand('python', ['analyze.py'], {
+  timeout: 30_000,
+  env: { INPUT: 'repo' },
+});
+
+console.log(result.stdout);
+```
+
+Pass an existing `sandboxId` to reattach to a live sandbox instead of creating a new one.
+
+## Errors
+
+Failures from the proxy raise `PlatformApiError`. Structured `{ error: { message, type } }` payloads from the proxy are parsed into `.code` (machine kind) and `.proxyMessage` (human string); the raw response body stays available on `.body`:
+
+```typescript
+import { PlatformApiError } from '@mastra/platform-workspace';
+
+try {
+  await fs.readFile('/missing.txt');
+} catch (err) {
+  if (err instanceof PlatformApiError) {
+    if (err.code === 'not_found') {
+      // handle missing file
+    } else if (err.code === 'authentication_error') {
+      // refresh token
+    }
+    console.error(err.status, err.code, err.proxyMessage, err.body);
+  }
+}
+```
+
+`code` / `proxyMessage` are `undefined` when the proxy returns a non-JSON body (e.g. an HTML 502 from a load balancer).
+
+Filesystem-specific errors (`FileNotFoundError`, `FileExistsError`, `WorkspaceReadOnlyError`) are re-exported from `@mastra/core`.
+
+### Sandbox exec errors
+
+`PlatformSandbox.executeCommand` runs over the direct-exec data plane (a WebSocket straight to the Railway tcp-proxy) and can throw two typed errors on unrecoverable failure:
+
+- `SandboxDestroyedError` — the platform returned 410 for `/exec-lease`, meaning the sandbox has been destroyed. The cached sandbox id and lease are cleared, so a reused `PlatformSandbox` instance will re-provision on the next call. Fleet-level code that owns a binding store should catch this, clear the stale sandbox id, and reprovision + replay.
+- `SandboxExecTransportError` — both the initial WebSocket attempt and the built-in retry closed without an `exit` frame against a live sandbox. Carries `{ opened, closeCode, closeReason, wsEndpoint }` diagnostics plus `sandboxId`, `command`, and `attempts` so upstream logs / alerts can distinguish "the Railway data plane is broken" from "your command failed".
+
+`PlatformApiError` (with status 404 / 500 / 501 on `/exec-lease`) can also bubble up from `executeCommand` — those are configuration or platform errors, not "reprovision me" signals, and are propagated as-is.

package/dist/address-registry.d.ts

@@ -0,0 +1,47 @@
+/**
+ * In-process `sandboxId → instanceUrl` registry populated by
+ * {@link PlatformSandbox.start} from the `instanceUrl` field workspace-proxy
+ * includes on create + get responses, and consumed by
+ * {@link PlatformSandbox.executeCommand} on the private-network fast path.
+ *
+ * The registry lives in the same Node process as the `PlatformSandbox`
+ * consumer — for shipyard, that is the Mastra runtime deployed from
+ * `mastracode/web`. There is no receiver route and no cross-service dance;
+ * the address is just a field copied from a response the runtime already
+ * receives.
+ *
+ * State intentionally does not persist:
+ *
+ *  - The IPv6 rotates on every sandbox recreate.
+ *  - The URL has no meaning after the sandbox is destroyed.
+ *  - The live sandbox binding, session context, and lease all die with the
+ *    runtime process; the address dying with them is correct.
+ *  - The proxy's `environment_sandboxes.instance_url` column is the durable
+ *    source of truth — a runtime restart re-populates the registry on the
+ *    next `start()` / reattach from the proxy's response.
+ */
+import type { SandboxAddressRegistry } from './sandbox.js';
+/**
+ * Concrete in-process {@link SandboxAddressRegistry}. Backed by a `Map`; no
+ * eviction policy, no TTL — entries live until an observed transport failure
+ * calls `delete`, until the sandbox is explicitly destroyed, or until the
+ * process exits.
+ */
+export declare class InProcessSandboxAddressRegistry implements SandboxAddressRegistry {
+    #private;
+    get(sandboxId: string): string | undefined;
+    /**
+     * Populate or overwrite the address for a sandbox. Called by
+     * {@link PlatformSandbox.start} on every fresh provision and every reattach;
+     * overwriting is intentional so a re-provision with a fresh IPv6 heals the
+     * map without a branch.
+     */
+    set(sandboxId: string, instanceUrl: string): void;
+    delete(sandboxId: string): void;
+    /**
+     * Test-only introspection. Not part of {@link SandboxAddressRegistry} —
+     * production callers must not read the registry as a whole.
+     */
+    get size(): number;
+}
+//# sourceMappingURL=address-registry.d.ts.map

package/dist/address-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"address-registry.d.ts","sourceRoot":"","sources":["../src/address-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAE3D;;;;;GAKG;AACH,qBAAa,+BAAgC,YAAW,sBAAsB;;IAG5E,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAI1C;;;;;OAKG;IACH,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IAIjD,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAI/B;;;OAGG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/dist/client.d.ts

@@ -0,0 +1,44 @@
+export interface PlatformClientOptions {
+    accessToken?: string;
+    projectId?: string;
+    fetch?: typeof fetch;
+}
+export interface PlatformRequestOptions extends RequestInit {
+    query?: Record<string, string | number | boolean | undefined>;
+}
+export declare function requireOption(value: string | undefined, name: string): string;
+export declare function resolvePlatformOptions(options: PlatformClientOptions): {
+    accessToken: string;
+    projectId: string;
+    proxyUrl: string;
+    fetch: typeof fetch;
+};
+/**
+ * Structured error shape returned by the workspace proxy. All routes emit
+ * `{ error: { message, type } }` on failure — see servers/workspace-proxy in
+ * the Platform repo. Kept as a wire-level type so callers can switch on
+ * `error.code` without re-parsing `error.body`.
+ */
+export interface PlatformProxyError {
+    message: string;
+    /** Machine-readable error kind, e.g. `not_found`, `invalid_request`, `authentication_error`. */
+    type: string;
+}
+export declare class PlatformApiError extends Error {
+    readonly status: number;
+    readonly body: string;
+    /** Machine-readable proxy error kind (e.g. `not_found`), when the response body matches `{ error: { message, type } }`. */
+    readonly code: string | undefined;
+    /** Human-readable proxy error message, when the response body matches `{ error: { message, type } }`. */
+    readonly proxyMessage: string | undefined;
+    constructor(status: number, body: string);
+}
+export declare class PlatformClient {
+    readonly accessToken: string;
+    readonly projectId: string;
+    readonly proxyUrl: string;
+    readonly fetch: typeof fetch;
+    constructor(options: PlatformClientOptions);
+    request(path: string, options?: PlatformRequestOptions): Promise<Response>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,sBAAuB,SAAQ,WAAW;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;CAC/D;AAWD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAG7E;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,qBAAqB;;;;;EAOpE;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,gGAAgG;IAChG,IAAI,EAAE,MAAM,CAAC;CACd;AAkBD,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,2HAA2H;IAC3H,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,yGAAyG;IACzG,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;gBAE9B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;CAUzC;AAED,qBAAa,cAAc;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,OAAO,KAAK,CAAC;gBAEjB,OAAO,EAAE,qBAAqB;IAQpC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,QAAQ,CAAC;CAoBrF"}

package/dist/direct-exec.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Direct exec client — opens Railway's tcp-proxy exec WebSocket directly using
+ * a short-lived JWT minted by the workspace proxy's exec-lease endpoint. This
+ * removes the platform data plane from the exec stdout/stderr path entirely
+ * (see `docs/factory/direct-sandbox-connection.md` in the Platform repo),
+ * cutting payload-scaled Cloud Run egress and RTT for commands like
+ * `pnpm install` that stream tens of MB of output.
+ *
+ * The frame protocol below mirrors `connectExecWs()` in `railway@3.5.5`
+ * (`workspaces/railway/node_modules/railway/dist/index.js`). The `railway`
+ * SDK's version is pinned on both sides (platform + here); a version bump
+ * signals the protocol may have drifted and this module must be revisited.
+ */
+/**
+ * Minimal WebSocket surface this module depends on. Matches both the browser
+ * `WebSocket` global and Node 22+'s built-in `WebSocket`. Extracted so tests
+ * can inject a fake without pulling in `ws` or jsdom.
+ */
+export interface DirectExecWebSocket {
+    binaryType: 'blob' | 'arraybuffer';
+    onopen: ((event: unknown) => void) | null;
+    onmessage: ((event: {
+        data: unknown;
+    }) => void) | null;
+    onclose: ((event: {
+        code: number;
+        reason: string;
+    }) => void) | null;
+    onerror: ((event: unknown) => void) | null;
+    send(data: string): void;
+    close(code?: number, reason?: string): void;
+}
+/**
+ * Factory that opens a WebSocket to `endpoint` with the given subprotocols.
+ * Defaults to the global `WebSocket` when omitted, which works on Node 22+
+ * (the package's minimum) and in the browser. Tests inject a fake here.
+ */
+export type DirectExecWebSocketFactory = (endpoint: string, subprotocols: string[]) => DirectExecWebSocket;
+/** Lease payload returned by `POST /v1/projects/:projectId/sandbox/:sandboxId/exec-lease`. */
+export interface ExecLease {
+    jwt: string;
+    wsEndpoint: string;
+    subprotocol: string;
+    /** ISO-8601 UTC. Null when the provider issues a JWT without an `exp` claim. */
+    expiresAt: string | null;
+}
+/** Inputs to a direct exec invocation. Mirrors the shape of the `/exec` route body. */
+export interface DirectExecOptions {
+    command: string;
+    cwd?: string;
+    env?: Record<string, string>;
+    /**
+     * Wall-clock cap for the exec. When elapsed, we close the socket and
+     * return `{timedOut: true, exitCode: 124}` matching the semantics of the
+     * proxy's `/exec` route.
+     */
+    timeoutMs?: number;
+    onStdout?: (chunk: string) => void;
+    onStderr?: (chunk: string) => void;
+    /** Injected for tests. Defaults to `globalThis.WebSocket`. */
+    webSocketFactory?: DirectExecWebSocketFactory;
+}
+/**
+ * Result of a direct exec. Shape matches the workspace-proxy `/exec` response
+ * so the caller (`PlatformSandbox.executeCommand`) can hand it back with no
+ * translation.
+ *
+ * `exitCode` is `null` when the socket closed without an `exit` frame AND the
+ * exec did not time out (rare — usually a mid-stream network drop). Callers
+ * currently coerce `null` to `1` upstream; kept nullable here to preserve the
+ * distinction for future observability.
+ */
+export interface DirectExecResult {
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+    truncated: boolean;
+    timedOut: boolean;
+    /**
+     * WebSocket close metadata. Populated on any close (normal or transport
+     * failure). `opened` distinguishes handshake failures (never opened) from
+     * mid-stream drops. Callers use this for diagnostic logging; not part of
+     * the CommandResult contract.
+     */
+    closeCode?: number;
+    closeReason?: string;
+    opened?: boolean;
+}
+/**
+ * Open the provider exec WebSocket using `lease`, run `command`, and resolve
+ * with the accumulated stdout/stderr + exit code. See the module docstring
+ * for the wire protocol reference.
+ *
+ * The client sends `stdin_close` immediately after `init_exec`, matching the
+ * SDK's own one-shot exec behavior — we never stream stdin from the caller.
+ */
+export declare function execViaLease(lease: ExecLease, options: DirectExecOptions): Promise<DirectExecResult>;
+//# sourceMappingURL=direct-exec.d.ts.map

package/dist/direct-exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"direct-exec.d.ts","sourceRoot":"","sources":["../src/direct-exec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAeH;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,GAAG,aAAa,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IACvD,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IACpE,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3C,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,mBAAmB,CAAC;AAE3G,8FAA8F;AAC9F,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,uFAAuF;AACvF,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;CAC/C;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAcD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAyJpG"}

package/dist/filesystem.d.ts

@@ -0,0 +1,62 @@
+import { Buffer } from 'node:buffer';
+import type { RequestContext } from '@mastra/core/request-context';
+import type { CopyOptions, FileContent, FileEntry, FileStat, FilesystemIcon, FilesystemInfo, InstructionsOption, ListOptions, MastraFilesystemOptions, ProviderStatus, ReadOptions, RemoveOptions, WriteOptions } from '@mastra/core/workspace';
+import { MastraFilesystem } from '@mastra/core/workspace';
+import type { PlatformClientOptions } from './client.js';
+export interface PlatformFilesystemOptions extends PlatformClientOptions, MastraFilesystemOptions {
+    id?: string;
+    bucketName?: string;
+    readOnly?: boolean;
+    displayName?: string;
+    icon?: FilesystemIcon;
+    description?: string;
+    instructions?: InstructionsOption;
+}
+export declare class PlatformFilesystem extends MastraFilesystem {
+    readonly id: string;
+    readonly name = "PlatformFilesystem";
+    readonly provider = "platform";
+    readonly readOnly?: boolean;
+    readonly displayName?: string;
+    readonly icon: FilesystemIcon;
+    readonly description?: string;
+    status: ProviderStatus;
+    private readonly _client;
+    private readonly _bucketName;
+    private readonly _instructionsOverride?;
+    constructor(options?: PlatformFilesystemOptions);
+    private generateId;
+    readFile(path: string, options?: ReadOptions): Promise<string | Buffer>;
+    writeFile(path: string, content: FileContent, options?: WriteOptions): Promise<void>;
+    /**
+     * Append bytes to a file.
+     *
+     * **Not atomic.** Object storage behind the workspace proxy has no native
+     * append or compare-and-swap primitive, so this implementation is a
+     * read-modify-write: it reads the current contents, concatenates the new
+     * bytes, and PUTs the whole object back. Concurrent `appendFile` calls to
+     * the same path can overwrite each other's writes ("last write wins").
+     * Use `writeFile` with distinct keys for concurrent writers.
+     */
+    appendFile(path: string, content: FileContent): Promise<void>;
+    deleteFile(path: string, options?: RemoveOptions): Promise<void>;
+    copyFile(src: string, dest: string, options?: CopyOptions): Promise<void>;
+    moveFile(src: string, dest: string, options?: CopyOptions): Promise<void>;
+    mkdir(path: string, _options?: {
+        recursive?: boolean;
+    }): Promise<void>;
+    rmdir(path: string, options?: RemoveOptions): Promise<void>;
+    readdir(path: string, options?: ListOptions): Promise<FileEntry[]>;
+    exists(path: string): Promise<boolean>;
+    stat(path: string): Promise<FileStat>;
+    realpath(path: string): Promise<string>;
+    getInstructions(opts?: {
+        requestContext?: RequestContext;
+    }): string;
+    getInfo(): FilesystemInfo<{
+        bucketName: string;
+        displayName?: string;
+        description?: string;
+    }>;
+}
+//# sourceMappingURL=filesystem.d.ts.map

package/dist/filesystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.d.ts","sourceRoot":"","sources":["../src/filesystem.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EACX,SAAS,EACT,QAAQ,EACR,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,WAAW,EACX,uBAAuB,EACvB,cAAc,EACd,WAAW,EACX,aAAa,EACb,YAAY,EACb,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAsC,gBAAgB,EAA0B,MAAM,wBAAwB,CAAC;AACtH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAQzD,MAAM,WAAW,yBAA0B,SAAQ,qBAAqB,EAAE,uBAAuB;IAC/F,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAiDD,qBAAa,kBAAmB,SAAQ,gBAAgB;IACtD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,wBAAwB;IACrC,QAAQ,CAAC,QAAQ,cAAc;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,MAAM,EAAE,cAAc,CAAa;IAEnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAqB;gBAEhD,OAAO,GAAE,yBAA8B;IAanD,OAAO,CAAC,UAAU;IAIZ,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;IAevE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAoB1F;;;;;;;;;OASG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7D,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAehE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBzE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAezE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAStE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3D,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IA8BlE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUtC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IA6B3C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIvC,eAAe,CAAC,IAAI,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,cAAc,CAAA;KAAE,GAAG,MAAM;IASnE,OAAO,IAAI,cAAc,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAe9F"}