@nimbus-sh/worker 0.1.4 → 0.1.6

package/README.md

@@ -215,6 +215,43 @@ await box.startProcess('node --watch /home/user/app/server.js');
 const port = await box.ports.expose(3000);
 ```
 
+## Session Agent
+
+The bundled session shell includes an Agent surface inside the editor
+workspace. The route lives inside the session Durable Object under
+`/api/agent/*`; the stable Cloudflare OAuth callback is
+`/api/nimbus/oauth/callback`.
+
+The agent can use the same session tools as the SDK: shell exec, files,
+runtime installs, long-running processes, logs, and preview ports. Model calls
+use the AI SDK with Cloudflare Workers AI's OpenAI-compatible endpoint and an
+optional AI Gateway name.
+
+For user-owned quota, create a Cloudflare OAuth client with response type
+`Code`, grant type `Authorization Code`, token authentication method `None`,
+and redirect URL `https://<your-nimbus-host>/api/nimbus/oauth/callback`.
+Nimbus uses PKCE and stores user OAuth tokens only in encrypted `HttpOnly`,
+`Secure`, `SameSite=Lax` browser cookies scoped to the session URL.
+
+Non-secret values can be generated with `@nimbus-sh/config` or written as
+`vars`:
+
+| Var | What |
+|---|---|
+| `NIMBUS_CF_OAUTH_CLIENT_ID` | Cloudflare OAuth client ID. |
+| `NIMBUS_CF_OAUTH_SCOPES` | Space-delimited Cloudflare OAuth scope IDs. |
+| `NIMBUS_CF_OAUTH_REDIRECT_URI` | Optional callback override; default is `<origin>/api/nimbus/oauth/callback`. |
+| `NIMBUS_CLOUDFLARE_ACCOUNT_ID` | Owner-token fallback account ID. |
+| `NIMBUS_AGENT_MODEL` | Workers AI model, default `@cf/moonshotai/kimi-k2.6`. |
+| `NIMBUS_AGENT_GATEWAY_ID` | AI Gateway name, default `default`. |
+
+Secrets stay in Workers secret storage:
+
+```bash
+npx wrangler secret put NIMBUS_AGENT_COOKIE_SECRET
+npx wrangler secret put NIMBUS_CLOUDFLARE_API_TOKEN
+```
+
 ### Hooks
 
 ```ts

package/dist/_shared/crypto.d.ts

@@ -0,0 +1,15 @@
+export interface SealedJsonOptions {
+    purpose?: string;
+    minSecretLength?: number;
+}
+export declare function randomBase64Url(byteLength: number): string;
+export declare function sha256Base64Url(input: string): Promise<string>;
+export declare function pkceChallenge(verifier: string): Promise<string>;
+export declare function sealJson(value: unknown, secret: string, options?: SealedJsonOptions): Promise<string>;
+export declare function unsealJson<T>(value: string, secret: string, options?: SealedJsonOptions): Promise<T | null>;
+export declare function encodeJsonBase64Url(value: unknown): string;
+export declare function decodeJsonBase64Url<T>(value: string): T;
+export declare function base64Url(bytes: Uint8Array): string;
+export declare function base64UrlDecode(value: string): Uint8Array;
+export declare function base64Utf8(value: string): string;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/_shared/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/_shared/crypto.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAI1D;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGpE;AAED,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAErE;AAED,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAejB;AAED,wBAAsB,UAAU,CAAC,CAAC,EAChC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CA6BnB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE1D;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,CAEvD;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAUnD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CASzD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQhD"}

package/dist/_shared/crypto.js

@@ -0,0 +1,122 @@
+const textEncoder = new TextEncoder();
+const textDecoder = new TextDecoder();
+const SEALED_JSON_V2 = 'v2.';
+const SEALED_JSON_V1 = 'v1.';
+const HKDF_SALT = textEncoder.encode('nimbus-sh sealed-json v2');
+const BASE64URL_RE = /^[A-Za-z0-9_-]*$/;
+export function randomBase64Url(byteLength) {
+    const bytes = new Uint8Array(byteLength);
+    crypto.getRandomValues(bytes);
+    return base64Url(bytes);
+}
+export async function sha256Base64Url(input) {
+    const digest = await crypto.subtle.digest('SHA-256', textEncoder.encode(input));
+    return base64Url(new Uint8Array(digest));
+}
+export async function pkceChallenge(verifier) {
+    return sha256Base64Url(verifier);
+}
+export async function sealJson(value, secret, options = {}) {
+    const purpose = normalizePurpose(options.purpose);
+    const key = await hkdfAesGcmKey(secret, purpose, options.minSecretLength);
+    const iv = new Uint8Array(12);
+    crypto.getRandomValues(iv);
+    const plaintext = textEncoder.encode(JSON.stringify(value));
+    const ciphertext = new Uint8Array(await crypto.subtle.encrypt({ name: 'AES-GCM', iv, additionalData: aad(purpose) }, key, plaintext));
+    const packed = new Uint8Array(iv.length + ciphertext.length);
+    packed.set(iv, 0);
+    packed.set(ciphertext, iv.length);
+    return SEALED_JSON_V2 + base64Url(packed);
+}
+export async function unsealJson(value, secret, options = {}) {
+    if (value.startsWith(SEALED_JSON_V2)) {
+        const purpose = normalizePurpose(options.purpose);
+        const packed = base64UrlDecode(value.slice(SEALED_JSON_V2.length));
+        if (packed.length <= 12)
+            return null;
+        const iv = packed.slice(0, 12);
+        const ciphertext = packed.slice(12);
+        const key = await hkdfAesGcmKey(secret, purpose, options.minSecretLength);
+        const plaintext = await crypto.subtle.decrypt({ name: 'AES-GCM', iv, additionalData: aad(purpose) }, key, ciphertext);
+        return JSON.parse(textDecoder.decode(plaintext));
+    }
+    // Backward compatibility for the original agent OAuth cookie format.
+    // New cookies are always v2 and purpose-bound through AES-GCM AAD.
+    if (value.startsWith(SEALED_JSON_V1)) {
+        const packed = base64UrlDecode(value.slice(SEALED_JSON_V1.length));
+        if (packed.length <= 12)
+            return null;
+        const iv = packed.slice(0, 12);
+        const ciphertext = packed.slice(12);
+        const key = await legacyShaAesGcmKey(secret, options.minSecretLength);
+        const plaintext = await crypto.subtle.decrypt({ name: 'AES-GCM', iv }, key, ciphertext);
+        return JSON.parse(textDecoder.decode(plaintext));
+    }
+    return null;
+}
+export function encodeJsonBase64Url(value) {
+    return base64Url(textEncoder.encode(JSON.stringify(value)));
+}
+export function decodeJsonBase64Url(value) {
+    return JSON.parse(textDecoder.decode(base64UrlDecode(value)));
+}
+export function base64Url(bytes) {
+    let binary = '';
+    const chunk = 0x8000;
+    for (let i = 0; i < bytes.length; i += chunk) {
+        binary += String.fromCharCode(...bytes.subarray(i, i + chunk));
+    }
+    return btoa(binary)
+        .replace(/\+/g, '-')
+        .replace(/\//g, '_')
+        .replace(/=+$/g, '');
+}
+export function base64UrlDecode(value) {
+    if (!BASE64URL_RE.test(value) || value.length % 4 === 1) {
+        throw new Error('Invalid base64url input');
+    }
+    const padded = value.replace(/-/g, '+').replace(/_/g, '/').padEnd(Math.ceil(value.length / 4) * 4, '=');
+    const binary = atob(padded);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++)
+        bytes[i] = binary.charCodeAt(i);
+    return bytes;
+}
+export function base64Utf8(value) {
+    const bytes = textEncoder.encode(value);
+    let binary = '';
+    const chunk = 0x8000;
+    for (let i = 0; i < bytes.length; i += chunk) {
+        binary += String.fromCharCode(...bytes.subarray(i, i + chunk));
+    }
+    return btoa(binary);
+}
+async function hkdfAesGcmKey(secret, purpose, minSecretLength = 32) {
+    assertSecret(secret, minSecretLength);
+    const material = await crypto.subtle.importKey('raw', textEncoder.encode(secret), 'HKDF', false, ['deriveKey']);
+    return crypto.subtle.deriveKey({
+        name: 'HKDF',
+        hash: 'SHA-256',
+        salt: HKDF_SALT,
+        info: textEncoder.encode(purpose),
+    }, material, { name: 'AES-GCM', length: 256 }, false, ['encrypt', 'decrypt']);
+}
+async function legacyShaAesGcmKey(secret, minSecretLength = 32) {
+    assertSecret(secret, minSecretLength);
+    const digest = await crypto.subtle.digest('SHA-256', textEncoder.encode(secret));
+    return crypto.subtle.importKey('raw', digest, 'AES-GCM', false, ['decrypt']);
+}
+function assertSecret(secret, minSecretLength) {
+    if (!secret || secret.length < minSecretLength) {
+        throw new Error(`Sealed JSON secret must be ${minSecretLength}+ characters`);
+    }
+}
+function normalizePurpose(purpose) {
+    const value = (purpose || 'default').trim();
+    if (!value)
+        return 'default';
+    return value.slice(0, 128);
+}
+function aad(purpose) {
+    return textEncoder.encode(`nimbus-sh:${purpose}:sealed-json:v2`);
+}

package/dist/facets/manager.d.ts

@@ -179,6 +179,11 @@ export interface FacetManagerHooks {
     /** Fired right after processTable.spawn — lets the session print a notification. */
     onSpawn?: (pid: number, command: string, longRunning: boolean) => void;
 }
+export interface LongRunningWorkerSpawnOptions {
+    port?: number;
+    modules?: Record<string, any>;
+    compatibilityFlags?: string[];
+}
 export declare class FacetManager {
     private ctx;
     private env;
@@ -218,6 +223,7 @@ export declare class FacetManager {
         cwd?: string;
         filename?: string;
         dirname?: string;
+        stdin?: string;
         /**
          * G4 (runtime-pkg wave): caller-supplied display label for the
          * processTable entry. When set, takes precedence over the
@@ -237,6 +243,9 @@ export declare class FacetManager {
         skipSpawn?: boolean;
         /** G4: when skipSpawn is true, the PID the caller allocated. */
         callerPid?: number;
+        /** Return stdout/stderr in the result while keeping supervisor RPC
+         *  available for VFS and child_process operations. */
+        captureOutput?: boolean;
     }): Promise<FacetExecResult>;
     /**
      * W5 Lever 5: push a DiagFailure into the OOM ring for every facet
@@ -300,6 +309,21 @@ export declare class FacetManager {
         pid: number;
         facetStub: any;
     };
+    /**
+     * Spawn a long-running dynamic Worker and register its routeable port.
+     *
+     * This is the shared primitive for any runtime that exposes
+     * handleHttpRequest(Request): Node facets, Vite adapters, Python virtual
+     * sockets, and future WASI socket servers should use
+     * this path instead of each owning process-table and PortRegistry plumbing.
+     */
+    spawnWorker(workerCode: string, command: string, cwd: string, opts?: LongRunningWorkerSpawnOptions): {
+        pid: number;
+        facetStub: any;
+    };
+    registerPort(pid: number, port: number, facetStub: any): void;
+    attachReservedPorts(pid: number, facetStub: any): number[];
+    finishProcess(pid: number, exitCode: number, reason?: string): void;
     /** Kill a running process by PID. */
     kill(pid: number): boolean;
     get stats(): {

package/dist/facets/manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/facets/manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,YAAY,EAAqB,MAAM,6BAA6B,CAAC;AAG9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAKhE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAO/D,6CAA6C;AAC7C,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC1E;AAglCD;;;;;;;;GAQG;AAKH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,EAC3C,WAAW,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAkJnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,EAC3C,WAAW,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CA2FnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,wBAAgB,oCAAoC,CAClD,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,EAC3C,WAAW,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAsHnB;AAkkBD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACrE,oFAAoF;IACpF,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,KAAK,IAAI,CAAC;CACxE;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,GAAG,CAAqB;IAChC,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,GAAG,CAA0B;IACrC,qEAAqE;IACrE,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,KAAK,CAAoB;IACjC;;;;;;OAMG;IACH,OAAO,CAAC,OAAO,CAA+B;gBAG5C,GAAG,EAAE,kBAAkB,EACvB,GAAG,EAAE,GAAG,EACR,YAAY,EAAE,YAAY,EAC1B,YAAY,EAAE,YAAY,EAC1B,KAAK,GAAE,iBAAsB;IAS/B,MAAM,CAAC,GAAG,EAAE,SAAS;IACrB;;;;OAIG;IACH,iBAAiB,CAAC,OAAO,EAAE,cAAc;IAEzC;;;;;;OAMG;IACG,IAAI,CACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;QACJ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;;;;;;;;;;;;;WAaG;QACH,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,qEAAqE;QACrE,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,gEAAgE;QAChE,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GACA,OAAO,CAAC,eAAe,CAAC;IAsJ3B;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;YA+Bd,cAAc;YAqEd,cAAc;IAsC5B,sEAAsE;IACtE,OAAO,CAAC,eAAe;IAwBvB,yBAAyB;YACX,gBAAgB;IAoC9B;;;;OAIG;IACH;;;OAGG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAmB,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,GAAG,CAAA;KAAE;IAKvF;;;OAGG;IACG,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;QACJ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;KACV,GACL,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,GAAG,CAAA;KAAE,CAAC;IA8D3C;;;;;;;;;OASG;IACH,KAAK,CACH,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,GAC3B;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,GAAG,CAAA;KAAE;IAiClC,qCAAqC;IACrC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAa1B,IAAI,KAAK;;;;;;MAAsC;CAChD"}
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/facets/manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,YAAY,EAAqB,MAAM,6BAA6B,CAAC;AAG9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAKhE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAO/D,6CAA6C;AAC7C,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC1E;AA+rCD;;;;;;;;GAQG;AAKH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,EAC3C,WAAW,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAkJnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,EAC3C,WAAW,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CA2FnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,wBAAgB,oCAAoC,CAClD,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,EAC3C,WAAW,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAsHnB;AAunBD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACrE,oFAAoF;IACpF,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,KAAK,IAAI,CAAC;CACxE;AAED,MAAM,WAAW,6BAA6B;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,GAAG,CAAqB;IAChC,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,GAAG,CAA0B;IACrC,qEAAqE;IACrE,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,KAAK,CAAoB;IACjC;;;;;;OAMG;IACH,OAAO,CAAC,OAAO,CAA+B;gBAG5C,GAAG,EAAE,kBAAkB,EACvB,GAAG,EAAE,GAAG,EACR,YAAY,EAAE,YAAY,EAC1B,YAAY,EAAE,YAAY,EAC1B,KAAK,GAAE,iBAAsB;IAS/B,MAAM,CAAC,GAAG,EAAE,SAAS;IACrB;;;;OAIG;IACH,iBAAiB,CAAC,OAAO,EAAE,cAAc;IAEzC;;;;;;OAMG;IACG,IAAI,CACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;QACJ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf;;;;;;;;;;;;;WAaG;QACH,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,qEAAqE;QACrE,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,gEAAgE;QAChE,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB;8DACsD;QACtD,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,GACA,OAAO,CAAC,eAAe,CAAC;IAsJ3B;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;YA+Bd,cAAc;YAuEd,cAAc;IAwC5B,sEAAsE;IACtE,OAAO,CAAC,eAAe;IAwBvB,yBAAyB;YACX,gBAAgB;IAoC9B;;;;OAIG;IACH;;;OAGG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAmB,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,GAAG,CAAA;KAAE;IAKvF;;;OAGG;IACG,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;QACJ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;KACV,GACL,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,GAAG,CAAA;KAAE,CAAC;IA8D3C;;;;;;;;;OASG;IACH,KAAK,CACH,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,GAC3B;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,GAAG,CAAA;KAAE;IAOlC;;;;;;;OAOG;IACH,WAAW,CACT,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,6BAAkC,GACvC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,GAAG,CAAA;KAAE;IAkClC,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI;IAM7D,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,MAAM,EAAE;IAI1D,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAW,GAAG,IAAI;IASrE,qCAAqC;IACrC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAa1B,IAAI,KAAK;;;;;;MAAsC;CAChD"}