@miosa/cli 1.3.3 → 2.0.0

package/bin/miosa.js

@@ -0,0 +1,75 @@
+#!/usr/bin/env node
+"use strict";
+
+// Thin launcher: finds the native miosa binary for this platform and runs it.
+const { spawnSync } = require("node:child_process");
+const { resolveBinary } = require("../lib/resolve");
+const { platformFor } = require("../lib/platforms");
+
+const UPDATE_COMMANDS = new Set(["update", "upgrade", "self-update"]);
+const UPGRADE_HINT = "npm install -g @miosa/cli@latest";
+
+// Binaries older than 2.0.1 do not know they are npm-managed and have no
+// --version flag. These two adjustments keep them safe; they are inert for
+// newer binaries, which handle both natively.
+function adjustArgs(argv) {
+  if (argv.length === 1 && argv[0] === "--version") return ["version"];
+  return argv;
+}
+
+function refusesUpdate(argv) {
+  return UPDATE_COMMANDS.has(argv[0]) && !argv.some((a) => a === "--check" || a === "-h" || a === "--help");
+}
+
+// npm 11+ can skip install scripts and users can pass --ignore-scripts, so the
+// postinstall download may never have run. Do the same checksum-verified
+// download once, on first use.
+async function locateBinary() {
+  try {
+    return resolveBinary();
+  } catch (err) {
+    const { version } = require("../package.json");
+    if (!platformFor(process.platform, process.arch)) throw err;
+    process.stderr.write("miosa: native binary not installed; downloading it from GitHub Releases (checksum verified)...\n");
+    const { install } = require("../scripts/postinstall");
+    try {
+      await install({ version, platform: process.platform, arch: process.arch });
+    } catch (dlErr) {
+      throw new Error(`${err.message}\nDownload failed: ${dlErr.message}`);
+    }
+    return resolveBinary();
+  }
+}
+
+async function main(argv) {
+  if (refusesUpdate(argv)) {
+    process.stderr.write(`miosa: this copy was installed with npm; run: ${UPGRADE_HINT}\n`);
+    return 1;
+  }
+
+  let target;
+  try {
+    target = await locateBinary();
+  } catch (err) {
+    process.stderr.write(`miosa: ${err.message}\n`);
+    return 1;
+  }
+
+  const result = spawnSync(target.path, adjustArgs(argv), {
+    stdio: "inherit",
+    env: { ...process.env, MIOSA_INSTALL_METHOD: "npm" },
+  });
+  if (result.error) {
+    process.stderr.write(`miosa: cannot run ${target.path}: ${result.error.message}\n`);
+    return 1;
+  }
+  if (result.signal) {
+    process.kill(process.pid, result.signal);
+    return 1;
+  }
+  return result.status === null ? 1 : result.status;
+}
+
+main(process.argv.slice(2)).then((code) => {
+  process.exitCode = code;
+});

package/lib/archive.js

@@ -0,0 +1,26 @@
+"use strict";
+
+const fs = require("node:fs");
+const os = require("node:os");
+const path = require("node:path");
+const { execFileSync } = require("node:child_process");
+
+// Returns the binary named `binName` from a .tar.gz / .zip archive buffer.
+// Uses the system `tar` (bsdtar reads zip), present on macOS, Linux and Windows 10+.
+function extractBinary(archive, ext, binName) {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "miosa-cli-"));
+  try {
+    const file = path.join(dir, `archive.${ext}`);
+    fs.writeFileSync(file, archive);
+    const out = path.join(dir, "out");
+    fs.mkdirSync(out);
+    execFileSync("tar", ["-xf", file, "-C", out], { stdio: "pipe" });
+    const bin = path.join(out, binName);
+    if (!fs.existsSync(bin)) throw new Error(`archive has no ${binName}`);
+    return fs.readFileSync(bin);
+  } finally {
+    fs.rmSync(dir, { recursive: true, force: true });
+  }
+}
+
+module.exports = { extractBinary };

package/lib/checksums.js

@@ -0,0 +1,29 @@
+"use strict";
+
+const crypto = require("node:crypto");
+
+function sha256Hex(buf) {
+  return crypto.createHash("sha256").update(buf).digest("hex");
+}
+
+// Parses a goreleaser checksums.txt body ("<sha256>  <file>") into a Map.
+function parseChecksums(text) {
+  const sums = new Map();
+  for (const line of String(text).split("\n")) {
+    const m = /^([0-9a-fA-F]{64})\s+\*?(\S+)\s*$/.exec(line.trim());
+    if (m) sums.set(m[2], m[1].toLowerCase());
+  }
+  return sums;
+}
+
+// Throws unless buf's SHA-256 equals the checksums.txt entry for name.
+function verifyChecksum(buf, name, checksumsText) {
+  const want = parseChecksums(checksumsText).get(name);
+  if (!want) throw new Error(`checksums.txt has no entry for ${name}`);
+  const got = sha256Hex(buf);
+  if (got !== want) {
+    throw new Error(`checksum mismatch for ${name}: expected ${want}, got ${got}`);
+  }
+}
+
+module.exports = { sha256Hex, parseChecksums, verifyChecksum };

package/lib/platforms.js

@@ -0,0 +1,31 @@
+"use strict";
+
+// Single source of truth for which platforms ship a native binary.
+// `goos`/`goarch` are the names used in the miosa-cli-go release archives.
+const RELEASE_REPO = "Miosa-osa/miosa-cli-go";
+
+const PLATFORMS = {
+  "darwin-arm64": { pkg: "@miosa/cli-darwin-arm64", os: "darwin", cpu: "arm64", goos: "darwin", goarch: "arm64", ext: "tar.gz", bin: "miosa" },
+  "darwin-x64": { pkg: "@miosa/cli-darwin-x64", os: "darwin", cpu: "x64", goos: "darwin", goarch: "amd64", ext: "tar.gz", bin: "miosa" },
+  "linux-arm64": { pkg: "@miosa/cli-linux-arm64", os: "linux", cpu: "arm64", goos: "linux", goarch: "arm64", ext: "tar.gz", bin: "miosa" },
+  "linux-x64": { pkg: "@miosa/cli-linux-x64", os: "linux", cpu: "x64", goos: "linux", goarch: "amd64", ext: "tar.gz", bin: "miosa" },
+  "win32-x64": { pkg: "@miosa/cli-win32-x64", os: "win32", cpu: "x64", goos: "windows", goarch: "amd64", ext: "zip", bin: "miosa.exe" },
+};
+
+function platformKey(platform, arch) {
+  return `${platform}-${arch}`;
+}
+
+function platformFor(platform, arch) {
+  return PLATFORMS[platformKey(platform, arch)] || null;
+}
+
+function archiveName(version, entry) {
+  return `miosa_${version}_${entry.goos}_${entry.goarch}.${entry.ext}`;
+}
+
+function releaseBaseUrl(version, repo = RELEASE_REPO) {
+  return `https://github.com/${repo}/releases/download/v${version}`;
+}
+
+module.exports = { RELEASE_REPO, PLATFORMS, platformKey, platformFor, archiveName, releaseBaseUrl };

package/lib/resolve.js

@@ -0,0 +1,47 @@
+"use strict";
+
+const fs = require("node:fs");
+const path = require("node:path");
+const { platformFor, platformKey } = require("./platforms");
+
+const FALLBACK_DIR = path.join(__dirname, "..", "vendor");
+
+// Finds the native binary for this machine. Order:
+//   1. the platform package installed through optionalDependencies
+//   2. the copy the postinstall fallback downloaded into ./vendor
+// `deps` exists so tests can inject module resolution and the file system.
+function resolveBinary({ platform, arch, deps = {} } = {}) {
+  const resolve = deps.resolve || ((id) => require.resolve(id));
+  const exists = deps.exists || fs.existsSync;
+  platform = platform || process.platform;
+  arch = arch || process.arch;
+
+  const entry = platformFor(platform, arch);
+  if (!entry) {
+    throw new Error(
+      `@miosa/cli has no prebuilt binary for ${platformKey(platform, arch)}. ` +
+        "Install the CLI another way: https://docs.miosa.ai/cli",
+    );
+  }
+
+  try {
+    const manifest = resolve(`${entry.pkg}/package.json`);
+    const bin = path.join(path.dirname(manifest), "bin", entry.bin);
+    if (exists(bin)) return { path: bin, source: entry.pkg, entry };
+  } catch (err) {
+    if (err && err.code !== "MODULE_NOT_FOUND") throw err;
+  }
+
+  const vendored = path.join(deps.fallbackDir || FALLBACK_DIR, entry.bin);
+  if (exists(vendored)) return { path: vendored, source: "vendor", entry };
+
+  throw new Error(
+    `The miosa binary for ${platformKey(platform, arch)} is missing (expected package ${entry.pkg}).\n` +
+      "This usually means optional dependencies were skipped (--no-optional / --omit=optional) " +
+      "or scripts were disabled (--ignore-scripts).\n" +
+      "Reinstall with: npm install -g @miosa/cli\n" +
+      "Or install the native CLI directly: https://docs.miosa.ai/cli",
+  );
+}
+
+module.exports = { resolveBinary, FALLBACK_DIR };

package/package.json

@@ -1,60 +1,44 @@
 {
   "name": "@miosa/cli",
-  "version": "1.3.3",
-  "description": "MIOSA platform CLI — projects, sandboxes, deploys, databases, more",
-  "type": "module",
+  "version": "2.0.0",
+  "description": "The official MIOSA command-line tool (native binary, installed per platform)",
   "bin": {
-    "miosa": "dist/bin/miosa.js"
+    "miosa": "bin/miosa.js"
   },
   "scripts": {
-    "build": "rm -rf dist && tsc",
-    "build:linux": "bun build src/bin/miosa.ts --compile --target=bun-linux-x64 --outfile dist/miosa-linux-x64",
-    "dev": "tsx src/bin/miosa.ts",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "typecheck": "tsc --noEmit",
-    "prepublishOnly": "npm run build"
+    "postinstall": "node scripts/postinstall.js"
   },
-  "engines": {
-    "node": ">=20"
+  "optionalDependencies": {
+    "@miosa/cli-darwin-arm64": "2.0.0",
+    "@miosa/cli-darwin-x64": "2.0.0",
+    "@miosa/cli-linux-arm64": "2.0.0",
+    "@miosa/cli-linux-x64": "2.0.0"
   },
   "files": [
-    "dist",
-    "README.md",
-    "CHANGELOG.md"
+    "bin",
+    "lib",
+    "scripts",
+    "README.md"
   ],
+  "engines": {
+    "node": ">=18"
+  },
   "keywords": [
     "miosa",
     "cli",
-    "platform",
-    "paas",
-    "deploy",
     "sandbox",
-    "serverless",
-    "opencomputers",
-    "devtools"
+    "computers",
+    "deploy"
   ],
   "author": "MIOSA",
   "license": "MIT",
-  "dependencies": {
-    "chalk": "^5.3.0",
-    "commander": "^12.1.0",
-    "ink": "^7.0.3",
-    "inquirer": "^9.3.7",
-    "ora": "^8.1.1",
-    "react": "^19.2.6",
-    "undici": "^6.19.7",
-    "ws": "^8.18.0",
-    "yaml": "^2.9.0"
+  "homepage": "https://docs.miosa.ai/cli",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Miosa-osa/miosa.git",
+    "directory": "sdks/cli/npm/cli"
   },
-  "devDependencies": {
-    "@types/inquirer": "^9.0.8",
-    "@types/node": "^20.17.9",
-    "@types/react": "^19.2.15",
-    "@types/ws": "^8.5.13",
-    "tsx": "^4.23.1",
-    "typescript": "^5.7.2",
-    "vite": "~6.4.3",
-    "vitest": "^3.2.7"
+  "publishConfig": {
+    "access": "public"
   }
 }

package/scripts/postinstall.js

@@ -0,0 +1,68 @@
+"use strict";
+
+// Fallback for installs where the platform package did not arrive
+// (--omit=optional, a mirror without the @miosa/cli-* packages, ...).
+// Downloads the release archive from GitHub, verifies its SHA-256 against the
+// release's checksums.txt, and stores the binary in ./vendor.
+// A no-op whenever the platform package is present.
+const fs = require("node:fs");
+const path = require("node:path");
+const { resolveBinary, FALLBACK_DIR } = require("../lib/resolve");
+const { platformFor, platformKey, archiveName, releaseBaseUrl } = require("../lib/platforms");
+const { verifyChecksum } = require("../lib/checksums");
+const { extractBinary } = require("../lib/archive");
+
+const MAX_BYTES = 200 << 20;
+
+async function fetchBuffer(url, fetchImpl) {
+  const res = await fetchImpl(url, { redirect: "follow", headers: { "user-agent": "miosa-cli-npm-postinstall" } });
+  if (!res.ok) throw new Error(`GET ${url}: ${res.status} ${res.statusText}`);
+  const buf = Buffer.from(await res.arrayBuffer());
+  if (buf.length > MAX_BYTES) throw new Error(`GET ${url}: response too large`);
+  return buf;
+}
+
+async function install({ version, platform, arch, fetchImpl = fetch, baseUrl, vendorDir = FALLBACK_DIR }) {
+  const entry = platformFor(platform, arch);
+  const base = baseUrl || process.env.MIOSA_CLI_DOWNLOAD_BASE || releaseBaseUrl(version);
+  const name = archiveName(version, entry);
+  const sums = (await fetchBuffer(`${base}/checksums.txt`, fetchImpl)).toString("utf8");
+  const archive = await fetchBuffer(`${base}/${name}`, fetchImpl);
+  verifyChecksum(archive, name, sums);
+  const bin = extractBinary(archive, entry.ext, entry.bin);
+  fs.mkdirSync(vendorDir, { recursive: true });
+  const dest = path.join(vendorDir, entry.bin);
+  fs.writeFileSync(dest, bin, { mode: 0o755 });
+  return dest;
+}
+
+async function main() {
+  const platform = process.platform;
+  const arch = process.arch;
+  if (!platformFor(platform, arch)) {
+    console.warn(`@miosa/cli: no prebuilt binary for ${platformKey(platform, arch)}; see https://docs.miosa.ai/cli`);
+    return 0;
+  }
+  try {
+    resolveBinary({ platform, arch });
+    return 0; // platform package (or an earlier download) is already in place
+  } catch {
+    // fall through to the download
+  }
+  const { version } = require("../package.json");
+  console.log(`@miosa/cli: platform package missing, downloading miosa ${version} from GitHub Releases`);
+  try {
+    const dest = await install({ version, platform, arch });
+    console.log(`@miosa/cli: installed ${dest} (checksum verified)`);
+    return 0;
+  } catch (err) {
+    console.error(`@miosa/cli: could not install the native binary: ${err.message}`);
+    return 1;
+  }
+}
+
+module.exports = { install };
+
+if (require.main === module) {
+  main().then((code) => process.exit(code));
+}

package/CHANGELOG.md

@@ -1,105 +0,0 @@
-# Changelog
-
-All notable changes to @miosa/cli will be documented in this file.
-
-## [1.3.3] - 2026-09-02
-
-### Added
-- `sandbox create` now sends an auto-generated UUID `Idempotency-Key` (unless `--idempotency-key` is given). The same key is reused across all retries so a retried create dedups to the same sandbox instead of billing a duplicate VM. Applies to `sandbox create` (typed flags and `--data`) and the `mcp serve` `sandbox_create` tool.
-- Bounded exponential-backoff retry (429/500/502/503/504, matching the SDK policy) on the `sandbox create` POST — now safe because the create carries a stable idempotency key. `MiosaClient.apiPostWithRetry()` provides the shared retry transport.
-
-### Changed
-- `sandbox create --wait` and `sandbox wait` now confirm **command-readiness** (all platform readiness components attached, via `GET /sandboxes/:id/readiness`, mirroring the server's `command_path_ready?`) after the sandbox reaches `running`, so a successful wait guarantees `exec` will not return `409 SANDBOX_NOT_COMMAND_READY`. A missing readiness endpoint on older servers is tolerated.
-
-## [1.3.2] - 2026-09-01
-
-### Fixed
-- The shared SSE parser (`parseSse`, used by `exec`, `watch`, `logs`, `up`,
-  `runs`, `builds`, `shell`, `databases`, and `deploy`) read a `data`/`output`
-  field for `stdout`/`stderr` frames, but the sandbox `exec/stream` endpoint
-  sends `data: {"line": "..."}`. Every stdout/stderr line from a sandbox
-  exec/stream call silently became an empty string — indistinguishable from
-  the stream producing zero events. It now reads `line` first, falling back
-  to `data`/`output` for any other producer.
-- Every SSE request in `MiosaClient` (`apiStream`, `streamJob`, `computerExec`,
-  `dispatchAgent`, `streamDeploymentLogs`, `streamBuildLogs`, `watchEvents`,
-  `watchComputerEvents`) now sends `Accept: text/event-stream, application/json, */*`
-  instead of a bare `text/event-stream`, matching the fix already applied to
-  the databases stream route and defensively preventing the same 406 class of
-  bug everywhere else.
-
-## [1.3.1] - 2026-09-01
-
-### Fixed
-- `miosa doctor` no longer reports the "Action authority / catalog mismatch"
-  warning when the control plane simply advertises capabilities newer than the
-  CLI. A server that is only *ahead* of the CLI is benign, forward-compatible
-  drift: the CLI never invokes a capability it has no name for, and the control
-  plane denies unknown capabilities regardless. Only `missing` and `stale`
-  capabilities (genuine CLI<->server contract hazards) now affect the check;
-  server-ahead capabilities are reported informationally.
-
-### Changed
-- Synced the pinned action-capability catalog with the control plane, adding the
-  client-facing `computer.list.apps`, `computer.list.surfaces`,
-  `computer.scroll.to`, `computer.set.value`, and `computer.triple.click`
-  capabilities. Platform-internal `admin.*` capabilities remain excluded from
-  the CLI contract.
-
-## [1.0.67] - 2026-06-14
-
-### Fixed
-- Updated `miosa capabilities` guidance so `sandbox prompt` describes the
-  durable `/agent-runs` path instead of the old raw exec path.
-
-## [1.0.66] - 2026-06-14
-
-### Changed
-- `miosa sandbox prompt` now dispatches through the durable `/api/v1/agent-runs`
-  backend instead of bypassing it with raw sandbox exec.
-- Added backend-aligned prompt providers: `claude`, `claude-code`, `codex`,
-  `hermes`, `osa`, `pi`, and `custom` with `--runtime-command`.
-
-## [1.0.54] - 2026-06-10
-
-### Changed
-- Publish workflow now uses npm Trusted Publishing provenance instead of an empty `NPM_TOKEN` secret.
-
-## [1.0.53] - 2026-06-10
-
-### Added
-- `miosa docker-deploy ensure --wait` waits for the workspace appliance host to become active and healthy.
-- `miosa docker-deploy doctor <deployment-id>` verifies Docker Deploy metadata, host readiness, appliance route, and public URL health.
-- `miosa app plan --goal docker-deploy --json` now includes the doctor command as the post-publish proof step.
-
-## [1.0.1] - 2026-05-22
-
-### Added
-- `miosa logs` — unified log streaming for computers, deployments, sandboxes
-- `miosa env` — environment variable management (list/set/unset/pull)
-- `miosa scale` — instance scaling and resizing
-- `miosa rollback` — deployment rollback
-- `miosa releases` — release management (list/get/promote)
-- `miosa builds` — build history and logs
-- `miosa regions` — list available regions
-- `miosa teams` — team/org management (list/invite/remove/role)
-- `miosa billing` — usage, invoices, plan info
-- `miosa templates` — sandbox template management
-- Storage object operations (upload/download/list/delete/presign)
-- Database backup/restore/logs
-
-## [0.2.0] - 2026-05-18
-
-### Added
-- 90+ commands across desktop, files, sandboxes, deploy, databases, functions, cron, infra
-- Premium commands: up, shell, watch, agent, dev, run, snapshot, tunnel, mcp serve
-- MCP server (`miosa mcp serve`) for Claude Code/Cursor/Windsurf integration
-- `miosa status` dashboard with parallel API calls
-- `miosa doctor` diagnostics
-- `miosa whoami` with cached auth
-- `miosa config` management
-
-## [0.1.0] - 2026-04-19
-
-### Added
-- Initial release with basic computer and host management

package/dist/action-authority.d.ts

@@ -1,106 +0,0 @@
-import type { MiosaClient } from "./client.js";
-export { ACTION_CAPABILITY_IDENTITIES } from "./generated/action-capabilities.js";
-export interface ActionCapability {
-    name: string;
-    version: string;
-    fingerprint: string;
-    risk: "read" | "write" | "destructive";
-    scope: "tenant" | "workspace" | "computer" | "deployment";
-    approval: "never" | "policy" | "always";
-}
-export interface ActionAuthorityDecision {
-    decision: "allow" | "deny" | "pending_approval";
-    capability?: ActionCapability;
-    approval_request_id?: string;
-    receipt_id?: string;
-    reason?: string;
-}
-export interface ActionAuthorityRequest {
-    capability: Pick<ActionCapability, "name" | "fingerprint">;
-    request_fingerprint: string;
-    params_fingerprint: string;
-    surface: string;
-    workspace_id?: string;
-}
-export interface ActionApproval {
-    id: string;
-    capability_name: string;
-    capability_fingerprint: string;
-    request_fingerprint: string;
-    principal_type: string;
-    principal_id: string;
-    status: string;
-    workspace_id?: string | null;
-    expires_at?: string | null;
-    resolved_at?: string | null;
-    consumed_at?: string | null;
-    inserted_at: string;
-}
-export interface ActionGrant {
-    id: string;
-    capability_name: string;
-    capability_fingerprint: string;
-    principal_type: string;
-    principal_id: string;
-    status: string;
-    workspace_id?: string | null;
-    constraints: Record<string, unknown>;
-    expires_at?: string | null;
-    revoked_at?: string | null;
-    inserted_at: string;
-}
-export interface ActionReceipt {
-    id: string;
-    capability_name: string;
-    capability_fingerprint: string;
-    principal_type: string;
-    principal_id: string;
-    surface: string;
-    decision: string;
-    params_fingerprint: string;
-    grant_id?: string | null;
-    approval_request_id?: string | null;
-    occurred_at: string;
-}
-export interface ActionCatalogConformance {
-    /**
-     * True when the CLI can safely operate against this control plane: no
-     * `missing` and no `stale` capabilities. `unexpected` (server-ahead) does not
-     * clear `ok` because it is benign forward-compatible drift.
-     */
-    ok: boolean;
-    /** Capabilities the CLI pins that the live catalog does not advertise. */
-    missing: string[];
-    /** Shared capabilities whose live version/fingerprint differs from the pin. */
-    stale: string[];
-    /** Live capabilities the CLI does not pin (server ahead of CLI; informational). */
-    unexpected: string[];
-}
-export declare function actionCatalogConformance(liveCatalog: ActionCapability[]): ActionCatalogConformance;
-export declare class ActionAuthorityClient {
-    private readonly client;
-    constructor(client: MiosaClient);
-    catalog(): Promise<ActionCapability[]>;
-    authorize(name: string, params: unknown, options?: {
-        surface?: string;
-        workspaceId?: string;
-        invocationId?: string;
-    }): Promise<ActionAuthorityDecision>;
-    approvals(status?: string): Promise<ActionApproval[]>;
-    resolveApproval(id: string, decision: "approve" | "deny"): Promise<ActionApproval>;
-    grants(status?: string): Promise<ActionGrant[]>;
-    createGrant(input: {
-        capability: Pick<ActionCapability, "name" | "fingerprint">;
-        principal_type: string;
-        principal_id: string;
-        workspace_id?: string;
-        expires_at?: string;
-        constraints?: Record<string, unknown>;
-    }): Promise<ActionGrant>;
-    revokeGrant(id: string): Promise<ActionGrant>;
-    receipts(limit?: number): Promise<ActionReceipt[]>;
-    requireCapability(name: string): Promise<ActionCapability>;
-}
-export declare function fingerprint(value: unknown): string;
-export declare function canonicalJson(value: unknown): string;
-//# sourceMappingURL=action-authority.d.ts.map

package/dist/action-authority.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"action-authority.d.ts","sourceRoot":"","sources":["../src/action-authority.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/C,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAElF,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,aAAa,CAAC;IACvC,KAAK,EAAE,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,YAAY,CAAC;IAC1D,QAAQ,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;CACzC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,CAAC;IAChD,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,IAAI,CAAC,gBAAgB,EAAE,MAAM,GAAG,aAAa,CAAC,CAAC;IAC3D,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;CACrB;AAMD,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,EAAE,EAAE,OAAO,CAAC;IACZ,0EAA0E;IAC1E,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,+EAA+E;IAC/E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,mFAAmF;IACnF,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,gBAAgB,EAAE,GAC9B,wBAAwB,CAoC1B;AAED,qBAAa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,WAAW;IAE1C,OAAO,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAOtC,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,OAAO,EACf,OAAO,GAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC;KAClB,GACL,OAAO,CAAC,uBAAuB,CAAC;IA2B7B,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAQrD,eAAe,CACnB,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,SAAS,GAAG,MAAM,GAC3B,OAAO,CAAC,cAAc,CAAC;IAOpB,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAQ/C,WAAW,CAAC,KAAK,EAAE;QACvB,UAAU,EAAE,IAAI,CAAC,gBAAgB,EAAE,MAAM,GAAG,aAAa,CAAC,CAAC;QAC3D,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACvC,GAAG,OAAO,CAAC,WAAW,CAAC;IAQlB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAO7C,QAAQ,CAAC,KAAK,SAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAO/C,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;CASjE;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAElD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAkBpD"}