@moxt-ai/mobius 0.0.20 → 0.0.22

package/dist/bots/local-bot-grant-store.d.ts

@@ -0,0 +1,34 @@
+import { type BotExecutionBindingApprovalRequest, BotExecutionBindingApprovedEvent, type BotSessionPromptCommand } from "@moxt-ai/mobius-protocol";
+import type { LocalAgentCatalog, LocalAgentDefinition } from "../agent-catalog/local-agent.ts";
+import type { WorkspaceDirectoryService } from "../authorization/workspace-directory.ts";
+export declare class LocalBotAuthorizationError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string, options?: ErrorOptions);
+}
+export declare class LocalBotGrant {
+    readonly agent: LocalAgentDefinition;
+    readonly agentIdentityDigest: string;
+    readonly allowedDeliveryTargetIds: readonly string[];
+    readonly behaviorDigest: string;
+    readonly behaviorRevisionId: string;
+    readonly bindingId: string;
+    readonly bindingRevision: number;
+    readonly botId: string;
+    readonly expiresAt: number;
+    readonly localGrantId: string;
+    readonly revocationEpoch: number;
+    readonly workspaceIdentityDigest: string;
+    readonly workspacePath: string;
+    constructor(localGrantId: string, botId: string, behaviorRevisionId: string, behaviorDigest: string, bindingId: string, bindingRevision: number, agent: LocalAgentDefinition, agentIdentityDigest: string, workspacePath: string, workspaceIdentityDigest: string, allowedDeliveryTargetIds: readonly string[], expiresAt: number, revocationEpoch: number);
+}
+export declare class LocalBotGrantStore {
+    #private;
+    constructor(path: string);
+    readonly approve: (request: BotExecutionBindingApprovalRequest, catalog: LocalAgentCatalog, directories: WorkspaceDirectoryService, bindingAuthorityId: string, now: number, signal: AbortSignal) => Promise<BotExecutionBindingApprovedEvent>;
+    readonly resolveExecution: (command: BotSessionPromptCommand, catalog: LocalAgentCatalog, directories: WorkspaceDirectoryService, bindingAuthorityId: string, now: number, signal: AbortSignal) => Promise<LocalBotGrant>;
+    readonly recordUnavailable: (request: BotExecutionBindingApprovalRequest, code: string, message: string, now: number) => void;
+    readonly close: () => void;
+    private readonly resolveProposal;
+    private readonly revoke;
+}
+//# sourceMappingURL=local-bot-grant-store.d.ts.map

package/dist/bots/local-bot-grant-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-bot-grant-store.d.ts","sourceRoot":"","sources":["../../src/bots/local-bot-grant-store.ts"],"names":[],"mappings":"AAGA,OAAO,EACH,KAAK,kCAAkC,EACvC,gCAAgC,EAChC,KAAK,uBAAuB,EAC/B,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAC/F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAKzF,qBAAa,0BAA2B,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,YAAY,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,EAIpE;CACJ;AAED,qBAAa,aAAa;IACtB,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,wBAAwB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,YACI,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,kBAAkB,EAAE,MAAM,EAC1B,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE,oBAAoB,EAC3B,mBAAmB,EAAE,MAAM,EAC3B,aAAa,EAAE,MAAM,EACrB,uBAAuB,EAAE,MAAM,EAC/B,wBAAwB,EAAE,SAAS,MAAM,EAAE,EAC3C,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,EAe1B;CACJ;AA8ED,qBAAa,kBAAkB;;IAG3B,YAAY,IAAI,EAAE,MAAM,EAgCvB;IAED,QAAQ,CAAC,OAAO,YACH,kCAAkC,WAClC,iBAAiB,eACb,yBAAyB,sBAClB,MAAM,OACrB,MAAM,UACH,WAAW,KACpB,OAAO,CAAC,gCAAgC,CAAC,CA8E1C;IAEF,QAAQ,CAAC,gBAAgB,YACZ,uBAAuB,WACvB,iBAAiB,eACb,yBAAyB,sBAClB,MAAM,OACrB,MAAM,UACH,WAAW,KACpB,OAAO,CAAC,aAAa,CAAC,CAgFvB;IAEF,QAAQ,CAAC,iBAAiB,YACb,kCAAkC,QACrC,MAAM,WACH,MAAM,OACV,MAAM,KACZ,IAAI,CASL;IAEF,QAAQ,CAAC,KAAK,QAAO,IAAI,CAEvB;IAEF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAsC9B;IAEF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAQrB;CACL"}

package/dist/bots/local-bot-grant-store.js

@@ -0,0 +1,263 @@
+import { createHash, randomUUID } from "node:crypto";
+import { stat } from "node:fs/promises";
+import { DatabaseSync } from "node:sqlite";
+import { BotExecutionBindingApprovedEvent, } from "@moxt-ai/mobius-protocol";
+import { revalidateExecutable } from "../process/executable.js";
+const LOCAL_BOT_GRANT_LIFETIME_MILLISECONDS = 90 * 24 * 60 * 60 * 1_000;
+export class LocalBotAuthorizationError extends Error {
+    code;
+    constructor(code, message, options = {}) {
+        super(message, options);
+        this.code = code;
+        this.name = "LocalBotAuthorizationError";
+    }
+}
+export class LocalBotGrant {
+    agent;
+    agentIdentityDigest;
+    allowedDeliveryTargetIds;
+    behaviorDigest;
+    behaviorRevisionId;
+    bindingId;
+    bindingRevision;
+    botId;
+    expiresAt;
+    localGrantId;
+    revocationEpoch;
+    workspaceIdentityDigest;
+    workspacePath;
+    constructor(localGrantId, botId, behaviorRevisionId, behaviorDigest, bindingId, bindingRevision, agent, agentIdentityDigest, workspacePath, workspaceIdentityDigest, allowedDeliveryTargetIds, expiresAt, revocationEpoch) {
+        this.localGrantId = localGrantId;
+        this.botId = botId;
+        this.behaviorRevisionId = behaviorRevisionId;
+        this.behaviorDigest = behaviorDigest;
+        this.bindingId = bindingId;
+        this.bindingRevision = bindingRevision;
+        this.agent = agent;
+        this.agentIdentityDigest = agentIdentityDigest;
+        this.workspacePath = workspacePath;
+        this.workspaceIdentityDigest = workspaceIdentityDigest;
+        this.allowedDeliveryTargetIds = Object.freeze([...allowedDeliveryTargetIds]);
+        this.expiresAt = expiresAt;
+        this.revocationEpoch = revocationEpoch;
+    }
+}
+function digest(value) {
+    return createHash("sha256").update(value, "utf8").digest("hex");
+}
+function agentDigest(agent) {
+    return digest(JSON.stringify({
+        adapter: agent.adapterIdentity,
+        agent: agent.agentIdentity,
+        agentVersion: agent.agentVersion,
+        arguments: agent.arguments,
+        id: agent.id,
+    }));
+}
+async function workspaceDigest(path) {
+    const metadata = await stat(path);
+    if (!metadata.isDirectory()) {
+        throw new LocalBotAuthorizationError("binding_incompatible", "The Bot workspace is not a directory");
+    }
+    return digest(JSON.stringify({
+        changedAtMilliseconds: metadata.ctimeMs,
+        device: metadata.dev,
+        inode: metadata.ino,
+        path,
+    }));
+}
+function exactTargets(left, right) {
+    if (left.length !== right.length) {
+        return false;
+    }
+    const expected = [...left].sort();
+    const actual = [...right].sort();
+    return expected.every((target, index) => target === actual[index]);
+}
+function rowString(row, key) {
+    const value = Reflect.get(row, key);
+    if (typeof value !== "string") {
+        throw new LocalBotAuthorizationError("local_grant_invalid", "The local Bot grant is invalid");
+    }
+    return value;
+}
+function rowInteger(row, key) {
+    const value = Reflect.get(row, key);
+    if (typeof value !== "number" || !Number.isSafeInteger(value)) {
+        throw new LocalBotAuthorizationError("local_grant_invalid", "The local Bot grant is invalid");
+    }
+    return value;
+}
+function parseTargets(encoded) {
+    let value;
+    try {
+        value = JSON.parse(encoded);
+    }
+    catch (cause) {
+        throw new LocalBotAuthorizationError("local_grant_invalid", "The local Bot grant is invalid", { cause });
+    }
+    if (!Array.isArray(value) || value.some((target) => typeof target !== "string")) {
+        throw new LocalBotAuthorizationError("local_grant_invalid", "The local Bot grant is invalid");
+    }
+    return value.filter((target) => typeof target === "string");
+}
+export class LocalBotGrantStore {
+    #database;
+    constructor(path) {
+        this.#database = new DatabaseSync(path);
+        this.#database.exec(`
+          CREATE TABLE IF NOT EXISTS local_bot_grants (
+            local_grant_id TEXT PRIMARY KEY,
+            bot_id TEXT NOT NULL,
+            behavior_revision_id TEXT NOT NULL,
+            behavior_digest TEXT NOT NULL,
+            binding_id TEXT NOT NULL UNIQUE,
+            binding_revision INTEGER NOT NULL,
+            agent_ref TEXT NOT NULL,
+            agent_identity_digest TEXT NOT NULL,
+            workspace_ref TEXT NOT NULL,
+            workspace_path TEXT NOT NULL,
+            workspace_identity_digest TEXT NOT NULL,
+            allowed_delivery_target_ids_json TEXT NOT NULL,
+            unattended_policy_json TEXT NOT NULL,
+            created_at INTEGER NOT NULL,
+            expires_at INTEGER NOT NULL,
+            revocation_epoch INTEGER NOT NULL DEFAULT 0,
+            revoked_at INTEGER
+          ) STRICT;
+          CREATE TABLE IF NOT EXISTS local_bot_binding_resolutions (
+            request_id TEXT PRIMARY KEY,
+            binding_id TEXT NOT NULL,
+            local_grant_id TEXT NOT NULL,
+            resolved_at INTEGER NOT NULL,
+            result TEXT NOT NULL CHECK (result IN ('approved', 'unavailable')),
+            error_code TEXT,
+            error_message TEXT
+          ) STRICT;
+        `);
+    }
+    approve = async (request, catalog, directories, bindingAuthorityId, now, signal) => {
+        signal.throwIfAborted();
+        const existing = this.#database
+            .prepare(`SELECT grants.* FROM local_bot_binding_resolutions AS resolutions
+                   INNER JOIN local_bot_grants AS grants
+                     ON grants.local_grant_id = resolutions.local_grant_id
+                  WHERE resolutions.request_id = ? AND resolutions.binding_id = ?
+                    AND resolutions.result = 'approved'`)
+            .get(request.requestId, request.bindingId);
+        if (existing !== undefined) {
+            return new BotExecutionBindingApprovedEvent(request.requestId, request.botId, request.behaviorRevisionId, request.bindingId, request.bindingRevision, rowString(existing, "local_grant_id"), rowString(existing, "agent_identity_digest"), rowString(existing, "workspace_identity_digest"));
+        }
+        const resolved = await this.resolveProposal(request, catalog, directories, bindingAuthorityId, signal);
+        const localGrantId = `lbg_${randomUUID()}`;
+        const expiresAt = now + LOCAL_BOT_GRANT_LIFETIME_MILLISECONDS;
+        this.#database.exec("BEGIN IMMEDIATE");
+        try {
+            this.#database
+                .prepare(`INSERT INTO local_bot_grants (
+                       local_grant_id, bot_id, behavior_revision_id, behavior_digest,
+                       binding_id, binding_revision, agent_ref,
+                       agent_identity_digest, workspace_ref, workspace_path,
+                       workspace_identity_digest, allowed_delivery_target_ids_json,
+                       unattended_policy_json, created_at, expires_at
+                     ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+                .run(localGrantId, request.botId, request.behaviorRevisionId, request.behaviorDigest, request.bindingId, request.bindingRevision, request.agentRef, resolved.agentIdentityDigest, request.workspaceRef, resolved.workspacePath, resolved.workspaceIdentityDigest, JSON.stringify(request.allowedDeliveryTargets.map((target) => target.deliveryTargetId)), JSON.stringify({ localSideEffects: "owner-approval-required" }), now, expiresAt);
+            this.#database
+                .prepare(`INSERT INTO local_bot_binding_resolutions (
+                       request_id, binding_id, local_grant_id, resolved_at, result
+                     ) VALUES (?, ?, ?, ?, 'approved')`)
+                .run(request.requestId, request.bindingId, localGrantId, now);
+            this.#database.exec("COMMIT");
+        }
+        catch (cause) {
+            this.#database.exec("ROLLBACK");
+            throw cause;
+        }
+        signal.throwIfAborted();
+        return new BotExecutionBindingApprovedEvent(request.requestId, request.botId, request.behaviorRevisionId, request.bindingId, request.bindingRevision, localGrantId, resolved.agentIdentityDigest, resolved.workspaceIdentityDigest);
+    };
+    resolveExecution = async (command, catalog, directories, bindingAuthorityId, now, signal) => {
+        signal.throwIfAborted();
+        const row = this.#database
+            .prepare(`SELECT * FROM local_bot_grants
+                  WHERE local_grant_id = ? AND bot_id = ?
+                    AND behavior_revision_id = ? AND behavior_digest = ?
+                    AND binding_id = ? AND binding_revision = ?
+                    AND agent_ref = ? AND workspace_ref = ?
+                    AND revoked_at IS NULL AND expires_at > ?`)
+            .get(command.localGrantId, command.botId, command.behaviorRevisionId, command.behaviorDigest, command.bindingId, command.bindingRevision, command.agentId, command.directoryId, now);
+        if (row === undefined) {
+            throw new LocalBotAuthorizationError("binding_not_approved", "The Bot execution binding is not locally approved");
+        }
+        const approvedTargets = parseTargets(rowString(row, "allowed_delivery_target_ids_json"));
+        const requestedTargets = command.allowedDeliveryTargets.map((target) => target.deliveryTargetId);
+        if (!exactTargets(approvedTargets, requestedTargets)) {
+            throw new LocalBotAuthorizationError("binding_not_approved", "The Bot execution target policy changed after local approval");
+        }
+        const agent = catalog.find(command.agentId);
+        const [adapterUnchanged, agentUnchanged] = await Promise.all([
+            revalidateExecutable(agent.adapterIdentity),
+            revalidateExecutable(agent.agentIdentity),
+        ]);
+        signal.throwIfAborted();
+        const workspacePath = await directories.resolve(bindingAuthorityId, command.directoryId, signal);
+        const currentAgentDigest = agentDigest(agent);
+        const currentWorkspaceDigest = await workspaceDigest(workspacePath);
+        signal.throwIfAborted();
+        if (!adapterUnchanged ||
+            !agentUnchanged ||
+            currentAgentDigest !== rowString(row, "agent_identity_digest") ||
+            currentWorkspaceDigest !== rowString(row, "workspace_identity_digest") ||
+            workspacePath !== rowString(row, "workspace_path")) {
+            this.revoke(rowString(row, "local_grant_id"), now);
+            throw new LocalBotAuthorizationError("binding_not_approved", "The Bot execution target changed and requires local approval");
+        }
+        if (command.behaviorInstructions.length > 0 && !agent.capabilities.embeddedContextPrompt) {
+            throw new LocalBotAuthorizationError("binding_incompatible", "The local Agent cannot apply the approved Bot behavior");
+        }
+        return new LocalBotGrant(rowString(row, "local_grant_id"), command.botId, command.behaviorRevisionId, command.behaviorDigest, command.bindingId, command.bindingRevision, agent, currentAgentDigest, workspacePath, currentWorkspaceDigest, approvedTargets, rowInteger(row, "expires_at"), rowInteger(row, "revocation_epoch"));
+    };
+    recordUnavailable = (request, code, message, now) => {
+        this.#database
+            .prepare(`INSERT OR IGNORE INTO local_bot_binding_resolutions (
+                   request_id, binding_id, local_grant_id, resolved_at,
+                   result, error_code, error_message
+                 ) VALUES (?, ?, '', ?, 'unavailable', ?, ?)`)
+            .run(request.requestId, request.bindingId, now, code, message);
+    };
+    close = () => {
+        this.#database.close();
+    };
+    resolveProposal = async (request, catalog, directories, bindingAuthorityId, signal) => {
+        const agent = catalog.find(request.agentRef);
+        if (request.requiredCapabilities.includes("embedded-context") && !agent.capabilities.embeddedContextPrompt) {
+            throw new LocalBotAuthorizationError("binding_incompatible", "The local Agent cannot apply embedded Bot context");
+        }
+        if (request.requiredCapabilities.some((capability) => capability !== "embedded-context")) {
+            throw new LocalBotAuthorizationError("binding_incompatible", "The Bot requires an unsupported local Agent capability");
+        }
+        const [adapterUnchanged, agentUnchanged] = await Promise.all([
+            revalidateExecutable(agent.adapterIdentity),
+            revalidateExecutable(agent.agentIdentity),
+        ]);
+        signal.throwIfAborted();
+        if (!adapterUnchanged || !agentUnchanged) {
+            throw new LocalBotAuthorizationError("binding_incompatible", "The local Agent executable changed before approval");
+        }
+        const workspacePath = await directories.resolve(bindingAuthorityId, request.workspaceRef, signal);
+        return {
+            agent,
+            agentIdentityDigest: agentDigest(agent),
+            workspaceIdentityDigest: await workspaceDigest(workspacePath),
+            workspacePath,
+        };
+    };
+    revoke = (localGrantId, now) => {
+        this.#database
+            .prepare(`UPDATE local_bot_grants
+                    SET revoked_at = COALESCE(revoked_at, ?), revocation_epoch = revocation_epoch + 1
+                  WHERE local_grant_id = ? AND revoked_at IS NULL`)
+            .run(now, localGrantId);
+    };
+}
+//# sourceMappingURL=local-bot-grant-store.js.map

package/dist/bots/local-bot-grant-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-bot-grant-store.js","sourceRoot":"","sources":["../../src/bots/local-bot-grant-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAEH,gCAAgC,GAEnC,MAAM,0BAA0B,CAAC;AAIlC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,MAAM,qCAAqC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAExE,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACxC,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,OAAe,EAAE,OAAO,GAAiB,EAAE;QACjE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC7C,CAAC;CACJ;AAED,MAAM,OAAO,aAAa;IACb,KAAK,CAAuB;IAC5B,mBAAmB,CAAS;IAC5B,wBAAwB,CAAoB;IAC5C,cAAc,CAAS;IACvB,kBAAkB,CAAS;IAC3B,SAAS,CAAS;IAClB,eAAe,CAAS;IACxB,KAAK,CAAS;IACd,SAAS,CAAS;IAClB,YAAY,CAAS;IACrB,eAAe,CAAS;IACxB,uBAAuB,CAAS;IAChC,aAAa,CAAS;IAE/B,YACI,YAAoB,EACpB,KAAa,EACb,kBAA0B,EAC1B,cAAsB,EACtB,SAAiB,EACjB,eAAuB,EACvB,KAA2B,EAC3B,mBAA2B,EAC3B,aAAqB,EACrB,uBAA+B,EAC/B,wBAA2C,EAC3C,SAAiB,EACjB,eAAuB;QAEvB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC/C,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,uBAAuB,GAAG,uBAAuB,CAAC;QACvD,IAAI,CAAC,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,wBAAwB,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IAC3C,CAAC;CACJ;AASD,SAAS,MAAM,CAAC,KAAa;IACzB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,WAAW,CAAC,KAA2B;IAC5C,OAAO,MAAM,CACT,IAAI,CAAC,SAAS,CAAC;QACX,OAAO,EAAE,KAAK,CAAC,eAAe;QAC9B,KAAK,EAAE,KAAK,CAAC,aAAa;QAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,EAAE,EAAE,KAAK,CAAC,EAAE;KACf,CAAC,CACL,CAAC;AACN,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY;IACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,0BAA0B,CAAC,sBAAsB,EAAE,sCAAsC,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,MAAM,CACT,IAAI,CAAC,SAAS,CAAC;QACX,qBAAqB,EAAE,QAAQ,CAAC,OAAO;QACvC,MAAM,EAAE,QAAQ,CAAC,GAAG;QACpB,KAAK,EAAE,QAAQ,CAAC,GAAG;QACnB,IAAI;KACP,CAAC,CACL,CAAC;AACN,CAAC;AAED,SAAS,YAAY,CAAC,IAAuB,EAAE,KAAwB;IACnE,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,GAAW;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,0BAA0B,CAAC,qBAAqB,EAAE,gCAAgC,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,GAAW;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,0BAA0B,CAAC,qBAAqB,EAAE,gCAAgC,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACjC,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,IAAI,0BAA0B,CAAC,qBAAqB,EAAE,gCAAgC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,0BAA0B,CAAC,qBAAqB,EAAE,gCAAgC,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,OAAO,kBAAkB;IAClB,SAAS,CAAe;IAEjC,YAAY,IAAY;QACpB,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SA6BnB,CAAC,CAAC;IACP,CAAC;IAEQ,OAAO,GAAG,KAAK,EACpB,OAA2C,EAC3C,OAA0B,EAC1B,WAAsC,EACtC,kBAA0B,EAC1B,GAAW,EACX,MAAmB,EACsB,EAAE;QAC3C,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS;aAC1B,OAAO,CACJ;;;;wDAIwC,CAC3C;aACA,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,IAAI,gCAAgC,CACvC,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,kBAAkB,EAC1B,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,eAAe,EACvB,SAAS,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EACrC,SAAS,CAAC,QAAQ,EAAE,uBAAuB,CAAC,EAC5C,SAAS,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CACnD,CAAC;QACN,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;QACvG,MAAM,YAAY,GAAG,OAAO,UAAU,EAAE,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,GAAG,GAAG,qCAAqC,CAAC;QAC9D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACvC,IAAI,CAAC;YACD,IAAI,CAAC,SAAS;iBACT,OAAO,CACJ;;;;;;4EAMwD,CAC3D;iBACA,GAAG,CACA,YAAY,EACZ,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,kBAAkB,EAC1B,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,eAAe,EACvB,OAAO,CAAC,QAAQ,EAChB,QAAQ,CAAC,mBAAmB,EAC5B,OAAO,CAAC,YAAY,EACpB,QAAQ,CAAC,aAAa,EACtB,QAAQ,CAAC,uBAAuB,EAChC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,EACvF,IAAI,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,CAAC,EAC/D,GAAG,EACH,SAAS,CACZ,CAAC;YACN,IAAI,CAAC,SAAS;iBACT,OAAO,CACJ;;uDAEmC,CACtC;iBACA,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;YAClE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChC,MAAM,KAAK,CAAC;QAChB,CAAC;QACD,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,OAAO,IAAI,gCAAgC,CACvC,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,kBAAkB,EAC1B,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,eAAe,EACvB,YAAY,EACZ,QAAQ,CAAC,mBAAmB,EAC5B,QAAQ,CAAC,uBAAuB,CACnC,CAAC;IACN,CAAC,CAAC;IAEO,gBAAgB,GAAG,KAAK,EAC7B,OAAgC,EAChC,OAA0B,EAC1B,WAAsC,EACtC,kBAA0B,EAC1B,GAAW,EACX,MAAmB,EACG,EAAE;QACxB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS;aACrB,OAAO,CACJ;;;;;8DAK8C,CACjD;aACA,GAAG,CACA,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,kBAAkB,EAC1B,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,eAAe,EACvB,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,WAAW,EACnB,GAAG,CACN,CAAC;QACN,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,0BAA0B,CAChC,sBAAsB,EACtB,mDAAmD,CACtD,CAAC;QACN,CAAC;QACD,MAAM,eAAe,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC,CAAC;QACzF,MAAM,gBAAgB,GAAG,OAAO,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACjG,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,gBAAgB,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,0BAA0B,CAChC,sBAAsB,EACtB,8DAA8D,CACjE,CAAC;QACN,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,CAAC,gBAAgB,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzD,oBAAoB,CAAC,KAAK,CAAC,eAAe,CAAC;YAC3C,oBAAoB,CAAC,KAAK,CAAC,aAAa,CAAC;SAC5C,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACjG,MAAM,kBAAkB,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,sBAAsB,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;QACpE,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IACI,CAAC,gBAAgB;YACjB,CAAC,cAAc;YACf,kBAAkB,KAAK,SAAS,CAAC,GAAG,EAAE,uBAAuB,CAAC;YAC9D,sBAAsB,KAAK,SAAS,CAAC,GAAG,EAAE,2BAA2B,CAAC;YACtE,aAAa,KAAK,SAAS,CAAC,GAAG,EAAE,gBAAgB,CAAC,EACpD,CAAC;YACC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC,CAAC;YACnD,MAAM,IAAI,0BAA0B,CAChC,sBAAsB,EACtB,8DAA8D,CACjE,CAAC;QACN,CAAC;QACD,IAAI,OAAO,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC;YACvF,MAAM,IAAI,0BAA0B,CAChC,sBAAsB,EACtB,wDAAwD,CAC3D,CAAC;QACN,CAAC;QACD,OAAO,IAAI,aAAa,CACpB,SAAS,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAChC,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,kBAAkB,EAC1B,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,eAAe,EACvB,KAAK,EACL,kBAAkB,EAClB,aAAa,EACb,sBAAsB,EACtB,eAAe,EACf,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC,EAC7B,UAAU,CAAC,GAAG,EAAE,kBAAkB,CAAC,CACtC,CAAC;IACN,CAAC,CAAC;IAEO,iBAAiB,GAAG,CACzB,OAA2C,EAC3C,IAAY,EACZ,OAAe,EACf,GAAW,EACP,EAAE;QACN,IAAI,CAAC,SAAS;aACT,OAAO,CACJ;;;6DAG6C,CAChD;aACA,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC,CAAC;IAEO,KAAK,GAAG,GAAS,EAAE;QACxB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC,CAAC;IAEe,eAAe,GAAG,KAAK,EACpC,OAA2C,EAC3C,OAA0B,EAC1B,WAAsC,EACtC,kBAA0B,EAC1B,MAAmB,EACK,EAAE;QAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC;YACzG,MAAM,IAAI,0BAA0B,CAChC,sBAAsB,EACtB,mDAAmD,CACtD,CAAC;QACN,CAAC;QACD,IAAI,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,kBAAkB,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,0BAA0B,CAChC,sBAAsB,EACtB,wDAAwD,CAC3D,CAAC;QACN,CAAC;QACD,MAAM,CAAC,gBAAgB,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzD,oBAAoB,CAAC,KAAK,CAAC,eAAe,CAAC;YAC3C,oBAAoB,CAAC,KAAK,CAAC,aAAa,CAAC;SAC5C,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,CAAC,gBAAgB,IAAI,CAAC,cAAc,EAAE,CAAC;YACvC,MAAM,IAAI,0BAA0B,CAChC,sBAAsB,EACtB,oDAAoD,CACvD,CAAC;QACN,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAClG,OAAO;YACH,KAAK;YACL,mBAAmB,EAAE,WAAW,CAAC,KAAK,CAAC;YACvC,uBAAuB,EAAE,MAAM,eAAe,CAAC,aAAa,CAAC;YAC7D,aAAa;SAChB,CAAC;IACN,CAAC,CAAC;IAEe,MAAM,GAAG,CAAC,YAAoB,EAAE,GAAW,EAAQ,EAAE;QAClE,IAAI,CAAC,SAAS;aACT,OAAO,CACJ;;kEAEkD,CACrD;aACA,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAChC,CAAC,CAAC;CACL"}