@mongodb-js/agent-engine-runner-shared 0.11.3

package/dist/runtime.js

@@ -0,0 +1,351 @@
+/**
+ * TenantRuntime — framework-agnostic platform runtime for tenant agent
+ * applications.
+ *
+ * Port of `agent_engine_runner_shared/runtime.py`. Same Python class shape: the runtime
+ * discovers its role from `RUNNER_MODE`, wires logging / tracing / tools,
+ * and delegates to a framework SDK's `App` (the `GraphBuilderLike`) for
+ * graph construction.
+ *
+ * Scope deltas vs. Python (see `AGENTS.md` for rationale):
+ *   - No memory-server mode (`RuntimeMode` has `AER`, `TOOL`, and `TOOL_FUNCTION`).
+ *   - `setupTracing` owns the MongoClient build (async). Python builds it
+ *     inline in `_setup_tracing` (sync pymongo).
+ *   - `shutdown()` and SIGTERM/SIGINT wiring are TS additions — Python's
+ *     uvicorn handles signals itself; here we explicitly close the tracing
+ *     MongoClient before exit.
+ */
+import { loadRuntimeAgentConfig } from "./agent_config.js";
+import { getCurrentSessionId, getCurrentUserId } from "./context.js";
+import { getLogger, setupLogging } from "./logger.js";
+import { AppBoundRuntime } from "./memory_appbound.js";
+import { MemoryWriter } from "./memory_writer.js";
+import { AERServer } from "./server/aer.js";
+import { ToolFunctionRunner } from "./server/function.js";
+import { ToolServer } from "./server/tool.js";
+import { scrubCredentials, setupTracing, shutdownTracing, } from "./tracing/index.js";
+import { getEnvBool, getEnvInt, getRuntimeMode, RuntimeMode, tenantEnvVars, } from "./utils.js";
+const logger = getLogger("agent_engine_runner_shared.runtime");
+/**
+ * Resolve the listen host from `APP_HOST`, defaulting to `"0.0.0.0"`.
+ *
+ * Matches Python's `_resolve_listen_host`: ECP stamps `APP_HOST` per
+ * executor type at deploy time (`"::"` for vm-mode, `"0.0.0.0"` for
+ * container-mode). Empty string normalises to the default — a shell that
+ * exports `APP_HOST=""` must not bind to `""`.
+ */
+export function resolveListenHost() {
+    return process.env["APP_HOST"] || "0.0.0.0";
+}
+/** Resolve the server drain budget without changing the existing Tool policy. */
+export function shutdownGracePeriodMs(mode) {
+    if (mode !== RuntimeMode.AER) {
+        return getEnvInt("SHUTDOWN_GRACE_PERIOD_MS", 25000);
+    }
+    const raw = process.env["SHUTDOWN_GRACE_PERIOD_MS"];
+    if (!raw)
+        return 25000;
+    const normalized = raw.trim();
+    if (!/^\+?\d+$/.test(normalized)) {
+        throw new Error("SHUTDOWN_GRACE_PERIOD_MS must be a positive integer in milliseconds");
+    }
+    const milliseconds = Number(normalized);
+    if (!Number.isSafeInteger(milliseconds) || milliseconds <= 0) {
+        throw new Error("SHUTDOWN_GRACE_PERIOD_MS must be a positive integer in milliseconds");
+    }
+    return milliseconds;
+}
+const SUPPORTED_RUN_KWARGS = new Set(["logLevel"]);
+// Reserved slot: kwargs listed here are accepted-but-ignored (warned in
+// `normalizeRunKwargs`) rather than rejected as unexpected. Empty for now —
+// no run kwarg is currently deprecated; future ones get added here.
+const DEPRECATED_RUN_KWARGS = new Set([]);
+/**
+ * Tenant Runtime SDK.
+ *
+ * Constructed once per process. `registerAndRun` wires the framework SDK's
+ * graph builder and starts the per-mode Fastify server.
+ */
+export class TenantRuntime {
+    appName;
+    appVersion;
+    mode;
+    orgId;
+    projectId;
+    memoryWriter;
+    graphBuilder = null;
+    tools = {};
+    toolDefinitions = {};
+    agentConfig;
+    mongodbUri;
+    databaseNameOverride;
+    tracesCollectionName;
+    // Guards `shutdown()` against concurrent signal-handler invocations.
+    shutdownStarted = false;
+    // In-flight tracing setup. `initTracing` kicks the async Mongo wiring off in
+    // the constructor; `runAsync` awaits this before binding the server so the
+    // global tracer provider is attached before the first request can land
+    // (matching the deterministic effect of Python's synchronous `_setup_tracing`).
+    tracingReady = Promise.resolve();
+    constructor(opts = {}) {
+        const { appName = "Agent", appVersion = "1.0.0", mongodbUri, databaseName, tracesCollectionName = "traces", orgId, projectId, } = opts;
+        this.appName = appName;
+        this.appVersion = appVersion;
+        this.mode = getRuntimeMode();
+        // org/project come exclusively from the platform-injected env vars. The
+        // `orgId`/`projectId` options are deprecated and intentionally ignored —
+        // honoring an author-supplied override is what caused the silent
+        // tenant-mismatch bug. Use `||` not `??` so an empty-string env
+        // var falls through to null; otherwise `ORG_ID=""` would slip past the
+        // `=== null` scoping guards downstream.
+        this.orgId = process.env["ORG_ID"] || null;
+        this.projectId = process.env["PROJECT_ID"] || null;
+        // Logging first so subsequent setup phases land in the configured sink.
+        setupLogging({ appName, mode: this.mode });
+        // Deprecation warnings emitted after setupLogging so the log line routes
+        // through the configured sink (mirrors the Python ordering).
+        if (orgId != null) {
+            logger.warn("TenantRuntime({ orgId }) is deprecated and ignored. " +
+                "Set the ORG_ID environment variable instead; " +
+                "this option will be removed in a future release.");
+        }
+        if (projectId != null) {
+            logger.warn("TenantRuntime({ projectId }) is deprecated and ignored. " +
+                "Set the PROJECT_ID environment variable instead; " +
+                "this option will be removed in a future release.");
+        }
+        this.agentConfig = loadRuntimeAgentConfig(undefined, tenantEnvVars());
+        const configuredMemory = this.agentConfig.configuredFeature("memory");
+        const memoryEnabled = configuredMemory ?? getEnvBool("ENABLE_MEMORY", false);
+        this.memoryWriter = memoryEnabled
+            ? new MemoryWriter(new AppBoundRuntime())
+            : null;
+        this.mongodbUri = mongodbUri ?? process.env["MONGODB_URI"] ?? null;
+        this.databaseNameOverride = databaseName || undefined;
+        this.tracesCollectionName = tracesCollectionName;
+        // Tracing is always on so every runtime mode emits consistent spans.
+        this.initTracing();
+        logger.info(`TenantRuntime initialized: mode=${this.mode}, app=${appName}`);
+    }
+    // =========================================================================
+    // Accessors
+    // =========================================================================
+    /** Parsed `agent.yaml` configuration. */
+    getAgentConfig() {
+        return this.agentConfig;
+    }
+    /** Resolved MongoDB URI: constructor option > `MONGODB_URI` env var > null. */
+    getMongodbUri() {
+        return this.mongodbUri;
+    }
+    // =========================================================================
+    // Tracing setup
+    // =========================================================================
+    initTracing() {
+        // Python builds the Mongo collection synchronously here, but Node's
+        // `mongodb` driver `connect()` is async — so the collection wiring lives
+        // inside `setupTracing`. Kick it off from the constructor and retain the
+        // promise: `runAsync` awaits `tracingReady` before binding the server, so
+        // the global tracer provider is attached before the first request lands
+        // (deterministic, unlike a bare fire-and-forget). A failed setup is logged
+        // and swallowed so a degraded trace store never blocks serving traffic.
+        this.tracingReady = setupTracing({
+            serviceName: this.appName,
+            mongodbUri: this.mongodbUri,
+            mongodbDatabaseName: this.databaseNameOverride,
+            mongodbCollectionName: this.tracesCollectionName,
+        }).catch((e) => {
+            // Scrub defensively: a setup failure whose message echoes the raw store
+            // URI must never write its credentials to the log sink. Rejections may
+            // carry non-Error values (string throws) — keep their text so it gets
+            // scrubbed rather than dropped.
+            logger.warn(`Tracing setup failed: ${scrubCredentials(e?.message ?? e)}`);
+        });
+    }
+    // =========================================================================
+    // Agent / graph builder
+    // =========================================================================
+    getAgent(opts) {
+        if (this.graphBuilder === null) {
+            throw new Error("No App registered. Call registerAndRun() with a BaseApp instance first.");
+        }
+        if (typeof this.graphBuilder.getAgent !== "function") {
+            throw new Error("Graph builder must be a BaseApp instance with getAgent(). " +
+                "Plain callables are no longer supported.");
+        }
+        return this.graphBuilder.getAgent(opts);
+    }
+    warmUpAgent() {
+        this.graphBuilder?.warmUp?.();
+    }
+    // =========================================================================
+    // Context helpers
+    // =========================================================================
+    /**
+     * Get the current user_id from execution context.
+     *
+     * @returns User ID from the current execution context, or null if not available
+     */
+    getCurrentUserId() {
+        return getCurrentUserId();
+    }
+    getCurrentSessionId() {
+        return getCurrentSessionId();
+    }
+    // =========================================================================
+    // Tool registration
+    // =========================================================================
+    /**
+     * Register a raw tool function and its metadata.
+     *
+     * This stores the function for Tool Pod execution and the metadata
+     * for routing decisions. It does NOT create any framework-specific
+     * tool objects — that is the responsibility of the framework SDK.
+     *
+     * @param name Tool name
+     * @param func Raw tool function
+     * @param metadata Tool metadata (is_local, network, timeout, etc.)
+     */
+    registerTool(name, func, metadata) {
+        this.tools[name] = func;
+        this.toolDefinitions[name] = metadata;
+        logger.debug(`Registered tool: ${name}`);
+    }
+    /**
+     * Get metadata for a registered tool.
+     *
+     * @param name Tool name
+     * @returns Tool metadata object (is_local, network, timeout, etc.)
+     *   or empty object if tool not found.
+     */
+    getToolMetadata(name) {
+        return this.toolDefinitions[name] ?? {};
+    }
+    // =========================================================================
+    // Shutdown
+    // =========================================================================
+    /**
+     * Close the tracing MongoClient. Idempotent — safe to call from multiple
+     * signal handlers. TS-only addition: Python's uvicorn handles SIGTERM
+     * itself, so the Python `TenantRuntime` has no equivalent method.
+     */
+    async shutdown() {
+        if (this.shutdownStarted)
+            return;
+        this.shutdownStarted = true;
+        logger.info("TenantRuntime shutdown initiated");
+        try {
+            await shutdownTracing();
+        }
+        catch (e) {
+            logger.warn(`Tracing shutdown failed: ${e.message}`);
+        }
+        logger.info("TenantRuntime shutdown complete");
+    }
+    // =========================================================================
+    // Run
+    // =========================================================================
+    /**
+     * Register the graph builder and start the mode-specific server.
+     *
+     * Resolves once Fastify is listening — the open socket keeps the Node
+     * event loop alive, matching the practical effect of Python's
+     * `asyncio.run(uvicorn.serve())` blocking until shutdown.
+     */
+    async registerAndRun(graphBuilder, options = {}) {
+        if (graphBuilder) {
+            this.graphBuilder = graphBuilder;
+            logger.info("Graph builder registered");
+        }
+        const normalized = this.normalizeRunKwargs(options);
+        await this.runAsync(normalized);
+    }
+    normalizeRunKwargs(opts) {
+        const raw = opts;
+        const provided = Object.keys(raw).filter((k) => raw[k] !== undefined);
+        const unexpected = provided
+            .filter((k) => !SUPPORTED_RUN_KWARGS.has(k) && !DEPRECATED_RUN_KWARGS.has(k))
+            .sort();
+        if (unexpected.length > 0) {
+            if (unexpected.length === 1) {
+                throw new TypeError(`registerAndRun() got an unexpected keyword argument '${unexpected[0] ?? ""}'`);
+            }
+            const formatted = unexpected.map((k) => `'${k}'`).join(", ");
+            throw new TypeError(`registerAndRun() got unexpected keyword arguments: ${formatted}`);
+        }
+        // No deprecated run kwargs are currently accepted. When one is added to
+        // DEPRECATED_RUN_KWARGS, warn-and-ignore it here.
+        const result = {};
+        if (opts.logLevel !== undefined)
+            result.logLevel = opts.logLevel;
+        return result;
+    }
+    async runAsync(_opts) {
+        // `logLevel` is accepted for Python parity (uvicorn's log_level) but is
+        // not yet wired to Fastify, which has no equivalent knob. When the wiring
+        // is added, resolve it as:
+        //   _opts.logLevel ?? process.env["LOG_LEVEL"] ?? "info"
+        // Block startup on tracing init so the global tracer provider is attached
+        // before the listener accepts requests — otherwise early spans fall through
+        // to the OTel no-op tracer and are silently dropped. Setup failures are
+        // already logged-and-swallowed in `initTracing`, so this never rejects.
+        await this.tracingReady;
+        // Function mode is not a server: one invocation, report result, return.
+        // Must branch before the server dispatch so no HTTP listener is bound.
+        // graphBuilder.ready() runs inside ToolFunctionRunner after the request
+        // is read, so startup failures still carry platform_trace_id.
+        if (this.mode === RuntimeMode.TOOL_FUNCTION) {
+            try {
+                await new ToolFunctionRunner(this).run();
+            }
+            finally {
+                // BatchSpanProcessor's periodic flush timer is unref'd (so it can't
+                // pin a long-running server's event loop) — but that same unref
+                // means nothing keeps a one-shot function-mode process alive long
+                // enough for that timer to ever fire. Without an explicit shutdown
+                // here, this invocation's spans (Mongo and OTLP)
+                // are silently lost the moment the process exits. Runs even when
+                // run() throws, so a failed invocation's spans aren't lost either.
+                await this.shutdown();
+            }
+            return;
+        }
+        // Block startup on the graph builder's own async setup (e.g. MCP tool
+        // discovery) so no request can land before tools are registered.
+        await this.graphBuilder?.ready?.();
+        const ServerClass = this.mode === RuntimeMode.AER ? AERServer : ToolServer;
+        const server = new ServerClass(this);
+        const port = getEnvInt("APP_PORT", server.defaultPort);
+        const host = resolveListenHost();
+        logger.info(`listener bind resolved: host='${host}' port=${port}`);
+        // K8s sends SIGTERM on pod termination. Drain the Fastify server first so
+        // in-flight /execute and /invoke_llm requests can finish — emitting their
+        // terminal stream chunks and /executor/callback reports — before we tear
+        // down tracing and exit. Python gets this for free from uvicorn's graceful
+        // shutdown; Node needs it wired explicitly. `once` so a repeated signal
+        // doesn't re-enter (shutdown() is itself re-entry safe). If draining
+        // exceeds the grace budget we exit anyway so termination can't hang.
+        const gracePeriodMs = shutdownGracePeriodMs(this.mode);
+        const onSignal = (signal) => {
+            logger.info(`Received ${signal}, draining server (grace=${gracePeriodMs}ms)...`);
+            const drainAndExit = async () => {
+                try {
+                    const graceTimer = new Promise((resolve) => {
+                        const t = setTimeout(resolve, gracePeriodMs);
+                        if (typeof t.unref === "function")
+                            t.unref();
+                    });
+                    await Promise.race([server.close(), graceTimer]);
+                }
+                catch (e) {
+                    logger.warn(`Server drain error: ${e.message}`);
+                }
+                await this.shutdown();
+            };
+            void drainAndExit().finally(() => process.exit(0));
+        };
+        process.once("SIGTERM", onSignal);
+        process.once("SIGINT", onSignal);
+        await server.run(host, port);
+    }
+}

package/dist/secure_llm_proxy.d.ts

@@ -0,0 +1,115 @@
+/**
+ * SecureLLMProxy — framework-neutral proxy for secure LLM calls through OE.
+ *
+ * Packages intercepted invoke_llm requests for the Orchestration Engine and
+ * unwraps the streamed OE relay back into agent-engine-sdk models. OE owns approval,
+ * routing, live SSE relay, and final audit/result recording.
+ */
+import type { LLMStreamChunk, LLMInvocationOptions } from "@mongodb-js/agent-engine-sdk";
+import { LLMResponse, type Message } from "@mongodb-js/agent-engine-sdk";
+import { type OperationalStepSource } from "./secure_wrapper.js";
+import { type DurableMemoryState } from "./workflow/index.js";
+export declare class SecureLLMProxy {
+    readonly oeUrl: string;
+    readonly executionId: string;
+    readonly modelName: string;
+    readonly llmId: string;
+    readonly boundTools: unknown[] | null;
+    readonly boundToolChoice: unknown;
+    /** Prefer the wrapper's allocator so tool + LLM share one sequence. */
+    readonly operationalSteps: OperationalStepSource;
+    readonly durableMemory: DurableMemoryState | null;
+    lastDurationMs: number;
+    lastFromCache: boolean;
+    lastLatestStepNumber: number | null;
+    lastPodName: string | null;
+    constructor(args: {
+        oeUrl: string;
+        executionId: string;
+        modelName?: string;
+        llmId?: string;
+        boundTools?: unknown[] | null;
+        boundToolChoice?: unknown;
+        operationalSteps?: OperationalStepSource;
+        durableMemory?: DurableMemoryState | null;
+    });
+    /** Current operational-step watermark for compatibility readers. */
+    get stepCounter(): number;
+    private allocateStep;
+    /**
+     * Invoke LLM by collecting the stream-oriented execution path.
+     * Equivalent to Python's `invoke()` which calls `list(self.stream(...))`.
+     */
+    invoke(messages: Message[], step?: number | null, stop?: string[] | null, options?: LLMInvocationOptions | null): Promise<LLMResponse>;
+    /**
+     * Stream invoke_llm chunks through OE approval and OE-owned SSE relay.
+     *
+     * Step auto-increments when not supplied. If OE returns a cached/sync
+     * result, a synthetic LLMStreamChunk is yielded instead of opening an
+     * SSE connection.
+     */
+    stream(messages: Message[], step?: number | null, stop?: string[] | null, options?: LLMInvocationOptions | null): AsyncGenerator<LLMStreamChunk>;
+    private streamDurably;
+    private streamActivityEffect;
+    private streamNative;
+    private replayActivityResult;
+    private completeActivityStream;
+    private preallocateToolCallsFromResult;
+    private static chunksFromResponse;
+    private static completeChunkFromResponse;
+    private static responsePayloadFromChunks;
+    /**
+     * Handle a guardrail require_review response by suspending via the framework
+     * suspend handler (LangGraph `interrupt`). On first call the handler suspends
+     * the node and never returns; on resume it returns the OE-dispatched decision
+     * — an object with a top-level `guardrail_review` key. Approve yields the
+     * pending LLM content; deny (or an unrecognised decision) denies the call.
+     * Mirrors Python's `_handle_require_review`.
+     */
+    private handleRequireReview;
+    /**
+     * Collect streamed sdk-core chunks into a final sdk-core LLMResponse.
+     * Static — can be called without a proxy instance (e.g. after parallel streaming).
+     */
+    static responseFromStreamChunks(chunks: LLMStreamChunk[]): LLMResponse;
+    /**
+     * Serialize bound tools to LLMToolSchema for transmission to OE.
+     *
+     * TS divergence from Python's `_serialize_bound_tools`: LangChain JS has no
+     * `tool_call_schema` attribute on tools (it's a Python-only API). Tools
+     * carrying Zod input schemas are normalized to OpenAI-canonical dicts
+     * upstream by `_normalizeBoundTool` in agent-engine-sdk-langgraph-ts via
+     * `convertToOpenAITool`, so every entry that reaches us here is already
+     * either a plain dict or an `LLMToolSchema` instance — both go through
+     * `LLMToolSchemaValidator`.
+     */
+    private serializeBoundTools;
+    private safeParseToolSchema;
+    /**
+     * Validate `boundToolChoice` (typed `unknown` at the proxy boundary) as a
+     * `JsonValue` for the wire. Rejects non-JSON values rather than letting them
+     * break `JSON.stringify` or be silently dropped. `null`/`undefined` → omit
+     * the field; `false` is preserved to disable forced tool use.
+     */
+    private resolveToolChoice;
+    private buildInvokeRequest;
+    private requestOeExecution;
+    private static convertResultToResponse;
+    private static convertToolCallsToStreamChunks;
+    private static normalizeToolCallArgs;
+    private static parseToolCallArgs;
+    private static convertStreamChunksToToolCalls;
+    private static streamChunkFromEvent;
+    /**
+     * Stream real-time LLM chunks from OE's audited SSE relay.
+     *
+     * Timeout: a single idle AbortController whose timer resets on every raw
+     * recv (via parseSseStream's onChunk callback). This matches httpx's
+     * `read=LLM_READ_TIMEOUT` behavior — the timeout only fires when the
+     * connection goes *silent* for LLM_READ_TIMEOUT seconds, not after that
+     * many seconds of wall-clock time. Active streams are never cut short.
+     * The timer also covers the connect phase (server not responding at all).
+     */
+    private streamFromOe;
+}
+//# sourceMappingURL=secure_llm_proxy.d.ts.map

package/dist/secure_llm_proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure_llm_proxy.d.ts","sourceRoot":"","sources":["../src/secure_llm_proxy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,cAAc,EAGd,oBAAoB,EACrB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,WAAW,EAIX,KAAK,OAAO,EAGb,MAAM,8BAA8B,CAAC;AAoBtC,OAAO,EAML,KAAK,qBAAqB,EAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,kBAAkB,EAQxB,MAAM,qBAAqB,CAAC;AA4F7B,qBAAa,cAAc;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAGtC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,uEAAuE;IACvE,QAAQ,CAAC,gBAAgB,EAAE,qBAAqB,CAAC;IACjD,QAAQ,CAAC,aAAa,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAElD,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;gBAEf,IAAI,EAAE;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAC9B,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;QACzC,aAAa,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;KAC3C;IAgBD,oEAAoE;IACpE,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,OAAO,CAAC,YAAY;IAYpB;;;OAGG;IACG,MAAM,CACV,QAAQ,EAAE,OAAO,EAAE,EACnB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,EACpB,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,EACtB,OAAO,CAAC,EAAE,oBAAoB,GAAG,IAAI,GACpC,OAAO,CAAC,WAAW,CAAC;IAQvB;;;;;;OAMG;IACI,MAAM,CACX,QAAQ,EAAE,OAAO,EAAE,EACnB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,EACpB,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,EACtB,OAAO,CAAC,EAAE,oBAAoB,GAAG,IAAI,GACpC,cAAc,CAAC,cAAc,CAAC;YAgBlB,aAAa;YA4Cb,oBAAoB;YAepB,YAAY;IAqE3B,OAAO,CAAE,oBAAoB;IAqB7B,OAAO,CAAC,sBAAsB;IAQ9B,OAAO,CAAC,8BAA8B;IAwBtC,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAkBjC,OAAO,CAAC,MAAM,CAAC,yBAAyB;IAiBxC,OAAO,CAAC,MAAM,CAAC,yBAAyB;IAiCxC;;;;;;;OAOG;IACH,OAAO,CAAE,mBAAmB;IAkF5B;;;OAGG;IACH,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,WAAW;IAiEtE;;;;;;;;;;OAUG;IACH,OAAO,CAAC,mBAAmB;IAmB3B,OAAO,CAAC,mBAAmB;IAU3B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,kBAAkB;YA0BZ,kBAAkB;IAkDhC,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAgCtC,OAAO,CAAC,MAAM,CAAC,8BAA8B;IAc7C,OAAO,CAAC,MAAM,CAAC,qBAAqB;IAUpC,OAAO,CAAC,MAAM,CAAC,iBAAiB;IAQhC,OAAO,CAAC,MAAM,CAAC,8BAA8B;IA0E7C,OAAO,CAAC,MAAM,CAAC,oBAAoB;IAwCnC;;;;;;;;;OASG;YACY,YAAY;CA2K5B"}