@memberjunction/ai-agents 6.1.0-edge.5 → 6.1.0-edge.6

package/dist/AgentRunner.d.ts

@@ -11,6 +11,7 @@
  */
 import { UserInfo, IMetadataProvider } from '@memberjunction/core';
 import { ExecuteAgentResult, ExecuteAgentParams, MediaOutput, FileOutputRef } from '@memberjunction/ai-core-plus';
+import { ArtifactTargetPlan } from './artifact-target-plan.js';
 /**
  * Identifies an artifact (and the version) that a run created.
  */
@@ -48,6 +49,17 @@ export declare function selectPrimaryArtifact(fileArtifacts: readonly CreatedArt
  * ```
  */
 export declare class AgentRunner {
+    /** Fallback artifact type for agent payloads when the agent declares no DefaultArtifactTypeID. */
+    private static readonly JSON_ARTIFACT_TYPE_ID;
+    /**
+     * Max length of `MJ: Artifacts.Name` (`nvarchar(255)`).
+     *
+     * A directive's `name` is model output and routinely arrives as a full sentence. `BaseEntity.Validate`
+     * enforces MaxLength, so an over-long title makes `Save()` return false — which used to abort the whole
+     * artifact write and leave the deliverable reachable only through `AIAgentRun.FinalPayload`. Clamped
+     * instead: a truncated title still names the artifact the user is looking at.
+     */
+    private static readonly ARTIFACT_NAME_MAX_LENGTH;
     private readonly _provider;
     constructor(provider?: IMetadataProvider);
     /**
@@ -207,7 +219,14 @@ export declare class AgentRunner {
      * Handles artifact creation, versioning, and linking to conversation details.
      *
      * This method implements intelligent artifact versioning:
-     * 1. If sourceArtifactId is provided (explicit continuity), creates new version of that artifact
+     * 0. If the agent supplied an artifactDirective, it decides: 'suppress' → nothing;
+     *    'create-new' → new artifact (sourceArtifactId ignored); 'version-source' → version
+     *    targetArtifactId, else sourceArtifactId. A directive-named target is model output and is
+     *    vetted first (UUID shape, existence, and the caller's right to write to it — see
+     *    {@link VetArtifactVersionTarget}); anything failing falls back down the ladder to the
+     *    caller's sourceArtifactId and then to the historical chain, so a directive can never widen
+     *    what the caller was already allowed to do.
+     * 1. Otherwise, if sourceArtifactId is provided (explicit continuity), creates new version of that artifact
      * 2. Otherwise, checks for previous artifacts on this conversation detail
      * 3. If previous artifact exists, creates new version of it
      * 4. If no previous artifact, creates entirely new artifact
@@ -245,6 +264,128 @@ export declare class AgentRunner {
         versionId: string;
         versionNumber: number;
     } | undefined>;
+    /**
+     * Renders an untrusted value for a log line without trusting it to render itself.
+     *
+     * Directives arrive as parsed JSON, so a field declared `string` can hold any JSON value.
+     * `String(value)` is not safe on such a value — `{ toString: 'x' }` shadows `toString` with a
+     * non-callable, and `String()` throws — and a value that throws while being logged aborts the
+     * whole artifact write, which is the failure this helper exists to prevent.
+     *
+     * @param value - Any value, however malformed.
+     * @returns A short single-line description, never throwing.
+     */
+    private static DescribeUntrustedValue;
+    /**
+     * Escapes an id for interpolation into a `RunView.ExtraFilter`, warning when the value cannot
+     * be an id at all.
+     *
+     * `RunViewParams.ExtraFilter` is a raw SQL fragment with no parameterized form, so every id
+     * this class puts into one is escaped HERE — at the query builder — rather than at whichever
+     * call site happened to be audited. `ValidateUserProvidedSQLClause` upstream blacklists
+     * statement keywords but permits `OR`, so an unescaped id remains a real predicate-injection
+     * surface; escaping at the builder covers every caller, present and future, including the
+     * caller-supplied `sourceArtifactId` that arrives straight from the GraphQL boundary.
+     *
+     * @param id - The id to interpolate.
+     * @param label - What the id is, for the warning.
+     * @returns The escaped id, ready to sit inside single quotes.
+     */
+    private static FilterId;
+    /**
+     * Coerces one of a directive's free-text fields into something safe to persist.
+     *
+     * The field is model output: it may be absent, may not be a string at all, may be whitespace,
+     * and may be far longer than its column. Anything unusable becomes `undefined` so the caller
+     * falls back to its own default, and anything over-long is clamped rather than allowed to fail
+     * `BaseEntity.Validate` — a rejected `Save()` would discard the entire artifact, so a truncated
+     * title is strictly better than no artifact.
+     *
+     * @param value - The directive field (`name` or `description`).
+     * @param maxLength - Column limit to clamp to; omit for `nvarchar(MAX)` columns.
+     * @returns The trimmed (and clamped) text, or `undefined` when there is nothing usable.
+     */
+    private static SafeDirectiveText;
+    /**
+     * Vets one rung of the version-target ladder, returning the plan with a normalized id when the
+     * target is usable and `null` when the caller should fall back.
+     *
+     * Three things are checked, in cost order:
+     *
+     * 1. **Shape.** The id must be a UUID-shaped string. This matters because it is interpolated
+     *    into the `ExtraFilter` fragments built by {@link GetMaxVersionForArtifact} and
+     *    {@link CheckForDuplicateVersion}; those escape what they are handed, but an id that is not
+     *    a UUID cannot name an artifact, so rejecting it here turns a doomed query into a clean
+     *    fallback. The id is then TRIMMED for downstream use — `IsValidUUID` tolerates surrounding
+     *    whitespace, so a value with a trailing newline passes validation and would otherwise reach
+     *    `ArtifactID='<uuid>\n'` and fail as a SQL conversion error.
+     * 2. **Existence** — directive-named targets only.
+     * 3. **Authorization** — directive-named targets only. `vwArtifacts` carries no per-user
+     *    predicate and no row-level-security filter, so a row loading successfully proves only that
+     *    it EXISTS. Without this check an agent could name any artifact id in the instance and have
+     *    the run's payload appended to it as a new version. The caller must own the artifact or hold
+     *    an explicit `CanEdit` grant on it.
+     *
+     * Existence and authorization resolve in ONE `RunViews` round trip, and via `RunView` rather
+     * than `BaseEntity.Load` deliberately: `Load` THROWS on a permission denial, a SQL conversion
+     * error or any transient DB fault, and a throw here would propagate to the method-wide catch and
+     * lose the whole artifact — the opposite of the graceful fallback this is meant to provide.
+     *
+     * A caller-supplied `sourceArtifactId` is shape-checked but NOT loaded or authorized: it is a
+     * server-side argument rather than model output, and adding a round trip plus a new denial mode
+     * to that path would change behavior for every existing agent. (The pre-existing exposure on
+     * that path — any authenticated caller may name any artifact id — is unchanged by this PR and
+     * wants its own fix.) One exception, and it is deliberate rather than incidental: if the agent
+     * named the SAME id first and it failed authorization, `rejectedIds` refuses it on the caller
+     * rung too. The caller path still performs no authorization of its own; it just cannot be used
+     * to launder an id this run has already refused.
+     *
+     * **Why this does not call `PermissionEngine` / `ArtifactPermissionProvider`.** That provider
+     * (`MJCoreEntities/src/custom/PermissionProviders/ArtifactPermissionProvider.ts`) answers
+     * "may this user Update this artifact" from the permission ROWS, and is the right home for that
+     * question in general — see `guides/UNIFIED_PERMISSIONS_GUIDE.md` §1. It is not used here for
+     * two reasons specific to this path. First, it answers only half the question: it reads grant
+     * rows and does not treat the artifact's OWNER as an editor, so the `UserID` check below would
+     * remain regardless and the owner half would still live in two places. Second, and decisive:
+     * `PermissionEngine.CheckPermission` returns `Allowed: false` with "Unknown permission domain"
+     * when its domain is not loaded, and this path's response to a denial is a SILENT fallback to
+     * creating a new artifact. A deployment that has not synced `metadata/permission-domains` — or
+     * any caller that reaches the runner before `PermissionEngine.Config()` — would therefore stop
+     * versioning for every legitimate editor, with nothing in the logs to say why. A direct query
+     * has no such dependency on engine state. As of this writing nothing server-side calls
+     * `PermissionEngine` or runs its `Config()`: its callers are Explorer's Permissions dashboard,
+     * the Sharing Center, and the integration test suite. (`Lists/server`,
+     * `Communication/notifications` and the MJCoreEntities entity extensions call
+     * `ResourcePermissionEngine`, a different class over `MJ: Resource Permissions`.)
+     *
+     * The cost of that choice is drift: this is a third answer to "can this user edit this
+     * artifact", alongside the provider and `ng-conversations`' `artifact-permission.service.ts`.
+     * **If artifact sharing grows a new grant shape — role grantees, `SupportsDeny`, cascade from
+     * collections — this method must be updated with the provider.** Revisit the delegation once
+     * `PermissionEngine` is routinely configured server-side. The cleaner precondition is upstream:
+     * `CollectionPermissionProvider` already treats a collection's owner as a synthetic full-access
+     * grantee, and the same treatment in `ArtifactPermissionProvider` would make it a complete
+     * answer, at which point this method should delegate to `CheckPermission(..., 'Update')`
+     * outright rather than compose an owner check around it.
+     *
+     * @param plan - The `version` plan to vet.
+     * @param contextUser - User the run executes as.
+     * @param md - Provider for the lookups.
+     * @param agentName - Agent name, for log lines.
+     * @param rejectedIds - Ids already rejected on a higher rung; mutated with any new rejection so
+     *   the same id cannot be re-admitted further down the ladder.
+     * @returns The vetted plan with a trimmed id, or `null` to fall back.
+     */
+    protected VetArtifactVersionTarget(plan: Extract<ArtifactTargetPlan, {
+        kind: 'version';
+    }>, contextUser: UserInfo, md: IMetadataProvider, agentName: string | undefined, rejectedIds: Set<string>): Promise<Extract<ArtifactTargetPlan, {
+        kind: 'version';
+    }> | null>;
+    /**
+     * Creates the artifact header row. Name and description come from the agent's directive when
+     * it supplied them (e.g. Skip's artifactRequest); otherwise the historical placeholder.
+     */
+    private createArtifactHeader;
     /**
      * Generates a conversation name and description using the "Name Conversation" AI prompt.
      * Same approach as UI - uses AI to create a meaningful title and description from the first user message.
@@ -319,10 +460,26 @@ export declare class AgentRunner {
      * @param mediaOutputs - Media outputs to persist as artifacts
      * @param contextUser - User context for DB operations
      * @param provider - Optional metadata provider for multi-provider support
+     * @param resolvedStorageAccountId - Pre-resolved storage account from the agent's resolution
+     *   chain. Optional, and optional on purpose: this is a public method, and callers that
+     *   predate storage-backed media keep working — omitting it just falls back to the first
+     *   active account inside {@link uploadBase64ToStorage}.
      *
      * @since 5.38.0
      */
-    CreateMediaArtifacts(conversationDetailId: string, mediaOutputs: MediaOutput[], contextUser: UserInfo, provider?: IMetadataProvider): Promise<void>;
+    CreateMediaArtifacts(conversationDetailId: string, mediaOutputs: MediaOutput[], contextUser: UserInfo, provider?: IMetadataProvider, resolvedStorageAccountId?: string): Promise<void>;
+    /**
+     * Uploads bytes to MJStorage when a storage account is configured, returning the new
+     * `MJ: Files` ID — or `undefined` to tell the caller to store the bytes inline.
+     *
+     * The single home of the storage-or-inline contract for every artifact this runner creates,
+     * file outputs and media alike. Deliberately never throws: delivery must not fail because
+     * storage is unavailable, so an upload error degrades to inline with a log line.
+     *
+     * @param logPrefix - Names the calling path in the log so an operator can tell which kind of
+     *   artifact fell back, without the two paths carrying separate copies of this logic.
+     */
+    private uploadToStorageIfConfigured;
     /**
      * Creates MJ: Artifact records for file outputs collected during agent execution.
      * Reads directly from `ExecuteAgentResult.fileOutputs` — no DB query needed.
@@ -354,7 +511,11 @@ export declare class AgentRunner {
      * vs. inline content).
      */
     private createArtifactWithVersion;
-    /** Creates a file-backed artifact (version references a FileID in MJStorage). */
+    /**
+     * Creates a file-backed artifact (version references a FileID in MJStorage). `label` names the
+     * thing being stored in diagnostics ("file", "media Image") so a failure reads as specifically as
+     * the inline path's would.
+     */
     private createFileArtifact;
     /** Creates an inline artifact (version stores base64 data URL directly, no MJStorage). */
     private createInlineFileArtifact;

package/dist/AgentRunner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AgentRunner.d.ts","sourceRoot":"","sources":["../src/AgentRunner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAA0F,QAAQ,EAAE,iBAAiB,EAAsC,MAAM,sBAAsB,CAAC;AAG/L,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,EAAiB,MAAM,8BAA8B,CAAC;AAwBjI;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACjC,aAAa,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,EACzD,eAAe,EAAE,mBAAmB,GAAG,SAAS,GACjD,mBAAmB,GAAG,SAAS,CAEjC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,WAAW;IACpB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoB;gBAElC,QAAQ,CAAC,EAAE,iBAAiB;IAKxC;;;;;;;;;;;;;;OAcG;IACU,QAAQ,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAoDtG;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACU,sBAAsB,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EAChD,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAC7B,OAAO,EAAE;QACL,6FAA6F;QAC7F,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,gGAAgG;QAChG,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,yGAAyG;QACzG,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,2EAA2E;QAC3E,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,+EAA+E;QAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,4EAA4E;QAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,iGAAiG;QACjG,SAAS,CAAC,EAAE,MAAM,CAAC;KACtB,GACF,OAAO,CAAC;QACP,iCAAiC;QACjC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;QACnC,gDAAgD;QAChD,cAAc,EAAE,MAAM,CAAC;QACvB,sDAAsD;QACtD,mBAAmB,EAAE,MAAM,CAAC;QAC5B,4FAA4F;QAC5F,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B;;;;;;;;WAQG;QACH,YAAY,CAAC,EAAE,mBAAmB,CAAC;KACtC,CAAC;IA4aF;;;;;;;;;;;;;;OAcG;IACU,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAsB/H;;;;;;;;;;;;;;OAcG;cACa,wBAAwB,CACpC,UAAU,EAAE,MAAM,EAClB,gBAAgB,EAAE,MAAM,EACxB,mBAAmB,EAAE,MAAM,EAC3B,WAAW,EAAE,QAAQ,EACrB,QAAQ,CAAC,EAAE,iBAAiB,GAC7B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAmBzB;;;;;;;;;;;;;;OAcG;cACa,gCAAgC,CAC5C,SAAS,EAAE,MAAM,EACjB,oBAAoB,EAAE,MAAM,EAC5B,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,QAAQ,EACrB,QAAQ,EAAE,iBAAiB,GAC5B,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAkB5E;;;;;;;;;;;;;;;;OAgBG;IACU,8BAA8B,CACvC,oBAAoB,EAAE,MAAM,EAC5B,WAAW,EAAE,QAAQ,EACrB,QAAQ,CAAC,EAAE,iBAAiB,GAC7B,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAoChE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqCG;IACU,qBAAqB,CAAC,CAAC,EAChC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAClC,oBAAoB,EAAE,MAAM,GAAG,SAAS,EACxC,gBAAgB,EAAE,MAAM,GAAG,SAAS,EACpC,WAAW,EAAE,QAAQ,EACrB,QAAQ,CAAC,EAAE,iBAAiB,GAC7B,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IA4JxF;;;;;;;;;OASG;YACW,wBAAwB;IAsDtC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACU,iBAAiB,CAC1B,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,WAAW,EAAE,GAAG,SAAS,EACvC,WAAW,EAAE,QAAQ,EACrB,QAAQ,CAAC,EAAE,iBAAiB,GAC7B,OAAO,CAAC,MAAM,EAAE,CAAC;IA+FpB;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,OAAO,CAAC,wBAAwB;IAoBhC;;;;;;;;;;;;;;;;;;;OAmBG;IACU,oBAAoB,CAC7B,oBAAoB,EAAE,MAAM,EAC5B,YAAY,EAAE,WAAW,EAAE,EAC3B,WAAW,EAAE,QAAQ,EACrB,QAAQ,CAAC,EAAE,iBAAiB,GAC7B,OAAO,CAAC,IAAI,CAAC;IAqDhB;;;;;;;;;;;;OAYG;IACU,oBAAoB,CAC7B,WAAW,EAAE,aAAa,EAAE,EAC5B,oBAAoB,EAAE,MAAM,EAC5B,WAAW,EAAE,QAAQ,EACrB,wBAAwB,CAAC,EAAE,MAAM,EACjC,QAAQ,CAAC,EAAE,iBAAiB,EAC5B,uBAAuB,CAAC,EAAE,OAAO,GAClC,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAoBjC;0FACsF;YACxE,iBAAiB;IA6C/B;;;;;;OAMG;YACW,qBAAqB;IAmBnC;;;;OAIG;YACW,yBAAyB;IAgHvC,iFAAiF;YACnE,kBAAkB;IAoBhC,0FAA0F;YAC5E,wBAAwB;IAoBtC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAkB5B;;;;;;;;;;;;;;;;;;OAkBG;YACW,gCAAgC;IA0C9C;;;;;;;;;;;;;;;;;OAiBG;YACW,4BAA4B;IAY1C;;;OAGG;YACW,qBAAqB;IAYnC;;;;OAIG;YACW,2BAA2B;IA2HzC;;;;;;;;;;;;;;;;OAgBG;YACW,uBAAuB;IAgDrC;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAS7B;;;;;;;;OAQG;YACW,2BAA2B;CAyC5C"}
+{"version":3,"file":"AgentRunner.d.ts","sourceRoot":"","sources":["../src/AgentRunner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAA0F,QAAQ,EAAE,iBAAiB,EAAsC,MAAM,sBAAsB,CAAC;AAG/L,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,EAAoC,MAAM,8BAA8B,CAAC;AACpJ,OAAO,EAA+C,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAwBzG;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACjC,aAAa,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,EACzD,eAAe,EAAE,mBAAmB,GAAG,SAAS,GACjD,mBAAmB,GAAG,SAAS,CAEjC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,WAAW;IACpB,kGAAkG;IAClG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAA0C;IAEvF;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAO;IAEvD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoB;gBAElC,QAAQ,CAAC,EAAE,iBAAiB;IAKxC;;;;;;;;;;;;;;OAcG;IACU,QAAQ,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAoDtG;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACU,sBAAsB,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EAChD,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAC7B,OAAO,EAAE;QACL,6FAA6F;QAC7F,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,gGAAgG;QAChG,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,yGAAyG;QACzG,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,2EAA2E;QAC3E,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,+EAA+E;QAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,4EAA4E;QAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,iGAAiG;QACjG,SAAS,CAAC,EAAE,MAAM,CAAC;KACtB,GACF,OAAO,CAAC;QACP,iCAAiC;QACjC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;QACnC,gDAAgD;QAChD,cAAc,EAAE,MAAM,CAAC;QACvB,sDAAsD;QACtD,mBAAmB,EAAE,MAAM,CAAC;QAC5B,4FAA4F;QAC5F,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B;;;;;;;;WAQG;QACH,YAAY,CAAC,EAAE,mBAAmB,CAAC;KACtC,CAAC;IA4bF;;;;;;;;;;;;;;OAcG;IACU,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAsB/H;;;;;;;;;;;;;;OAcG;cACa,wBAAwB,CACpC,UAAU,EAAE,MAAM,EAClB,gBAAgB,EAAE,MAAM,EACxB,mBAAmB,EAAE,MAAM,EAC3B,WAAW,EAAE,QAAQ,EACrB,QAAQ,CAAC,EAAE,iBAAiB,GAC7B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAiCzB;;;;;;;;;;;;;;OAcG;cACa,gCAAgC,CAC5C,SAAS,EAAE,MAAM,EACjB,oBAAoB,EAAE,MAAM,EAC5B,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,QAAQ,EACrB,QAAQ,EAAE,iBAAiB,GAC5B,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAkB5E;;;;;;;;;;;;;;;;OAgBG;IACU,8BAA8B,CACvC,oBAAoB,EAAE,MAAM,EAC5B,WAAW,EAAE,QAAQ,EACrB,QAAQ,CAAC,EAAE,iBAAiB,GAC7B,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAoChE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4CG;IACU,qBAAqB,CAAC,CAAC,EAChC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAClC,oBAAoB,EAAE,MAAM,GAAG,SAAS,EACxC,gBAAgB,EAAE,MAAM,GAAG,SAAS,EACpC,WAAW,EAAE,QAAQ,EACrB,QAAQ,CAAC,EAAE,iBAAiB,GAC7B,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAgLxF;;;;;;;;;;OAUG;IACH,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAWrC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ;IAOvB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM,CAAC,iBAAiB;IAWhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqEG;cACa,wBAAwB,CACpC,IAAI,EAAE,OAAO,CAAC,kBAAkB,EAAE;QAAE,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC,EACtD,WAAW,EAAE,QAAQ,EACrB,EAAE,EAAE,iBAAiB,EACrB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GACzB,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE;QAAE,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;IA4DnE;;;OAGG;YACW,oBAAoB;IAyClC;;;;;;;;;OASG;YACW,wBAAwB;IAsDtC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACU,iBAAiB,CAC1B,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,WAAW,EAAE,GAAG,SAAS,EACvC,WAAW,EAAE,QAAQ,EACrB,QAAQ,CAAC,EAAE,iBAAiB,GAC7B,OAAO,CAAC,MAAM,EAAE,CAAC;IA+FpB;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,OAAO,CAAC,wBAAwB;IAoBhC;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACU,oBAAoB,CAC7B,oBAAoB,EAAE,MAAM,EAC5B,YAAY,EAAE,WAAW,EAAE,EAC3B,WAAW,EAAE,QAAQ,EACrB,QAAQ,CAAC,EAAE,iBAAiB,EAC5B,wBAAwB,CAAC,EAAE,MAAM,GAClC,OAAO,CAAC,IAAI,CAAC;IAqEhB;;;;;;;;;;OAUG;YACW,2BAA2B;IAwBzC;;;;;;;;;;;;OAYG;IACU,oBAAoB,CAC7B,WAAW,EAAE,aAAa,EAAE,EAC5B,oBAAoB,EAAE,MAAM,EAC5B,WAAW,EAAE,QAAQ,EACrB,wBAAwB,CAAC,EAAE,MAAM,EACjC,QAAQ,CAAC,EAAE,iBAAiB,EAC5B,uBAAuB,CAAC,EAAE,OAAO,GAClC,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAoBjC;0FACsF;YACxE,iBAAiB;IAyB/B;;;;;;OAMG;YACW,qBAAqB;IAmBnC;;;;OAIG;YACW,yBAAyB;IAkHvC;;;;OAIG;YACW,kBAAkB;IAsBhC,0FAA0F;YAC5E,wBAAwB;IAqBtC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAkB5B;;;;;;;;;;;;;;;;;;OAkBG;YACW,gCAAgC;IA0C9C;;;;;;;;;;;;;;;;;OAiBG;YACW,4BAA4B;IAY1C;;;OAGG;YACW,qBAAqB;IAYnC;;;;OAIG;YACW,2BAA2B;IA2HzC;;;;;;;;;;;;;;;;OAgBG;YACW,uBAAuB;IAgDrC;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAS7B;;;;;;;;OAQG;YACW,2BAA2B;CAyC5C"}