@noodleseed/one 0.126.0 → 0.127.0

package/node_modules/@noodleseed/assistant/dist/react.js

@@ -3,8 +3,8 @@ import {
   registerNoodleAssistant,
   unmountAssistantApp,
   updateAssistantAppTheme
-} from "./chunk-MZNENVFY.js";
-import "./chunk-RIKRQFKS.js";
+} from "./chunk-RFETV5KQ.js";
+import "./chunk-S373FCAI.js";
 import "./chunk-3YYTUJPJ.js";
 import "./chunk-5FUTL2UF.js";
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/one",
-  "version": "0.126.0",
+  "version": "0.127.0",
   "private": false,
   "description": "Noodle CLI by Noodle Seed — author, run, and deploy declarative MCP servers. Embedding the assistant in your own web app is @noodleseed/assistant.",
   "license": "Apache-2.0",
@@ -99,6 +99,7 @@
     "@noodle-borg/devtools-ui",
     "@noodle-borg/external-credential-provider",
     "@noodle-borg/knowledge",
+    "@noodle-borg/knowledge-crawl",
     "@noodle-borg/knowledge-operations",
     "@noodle-borg/module",
     "@noodle-borg/module-audit",
@@ -234,7 +235,7 @@
     "@jitl/quickjs-wasmfile-release-sync": "0.32.0",
     "@modelcontextprotocol/client": "2.0.0",
     "@modelcontextprotocol/server": "2.0.0",
-    "@noodle-borg/agent-kit": "0.73.0",
+    "@noodle-borg/agent-kit": "0.74.0",
     "@noodle-borg/app-audit": "0.0.0",
     "@noodle-borg/app-package": "0.0.0",
     "@noodle-borg/auth": "0.0.0",

package/node_modules/@noodle-borg/knowledge-operations/dist/google-identity.d.ts

@@ -1,15 +0,0 @@
-/**
- * Noodle-side Google identities for the managed knowledge tier (ADR 0202 as amended): the
- * Cloud Run runtime's ADC token impersonates the three least-privilege service accounts
- * (provisioning is operator-only and never wired here; publication and search are). REST only —
- * Apache packages never depend on `@google-cloud/*` — and tokens are cached until near expiry.
- */
-import type { GoogleAccessTokenProvider } from '@noodle-borg/knowledge';
-/** The Cloud Run / GCE runtime identity via the metadata server (ADC). */
-export declare function metadataServiceTokenProvider(fetchImpl?: typeof fetch): GoogleAccessTokenProvider;
-/**
- * Impersonate one least-privilege service account from a base identity that holds
- * `roles/iam.serviceAccountTokenCreator` on it.
- */
-export declare function impersonatedTokenProvider(base: GoogleAccessTokenProvider, serviceAccountEmail: string, fetchImpl?: typeof fetch): GoogleAccessTokenProvider;
-//# sourceMappingURL=google-identity.d.ts.map

package/node_modules/@noodle-borg/knowledge-operations/dist/google-identity.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"google-identity.d.ts","sourceRoot":"","sources":["../src/google-identity.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAYxE,0EAA0E;AAC1E,wBAAgB,4BAA4B,CAC1C,SAAS,GAAE,OAAO,KAAa,GAC9B,yBAAyB,CAgB3B;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,yBAAyB,EAC/B,mBAAmB,EAAE,MAAM,EAC3B,SAAS,GAAE,OAAO,KAAa,GAC9B,yBAAyB,CA0B3B"}

package/node_modules/@noodle-borg/knowledge-operations/dist/google-identity.js

@@ -1,50 +0,0 @@
-const METADATA_TOKEN_URL = 'http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/token';
-const IAM_CREDENTIALS_ROOT = 'https://iamcredentials.googleapis.com/v1';
-const EXPIRY_SKEW_MS = 5 * 60 * 1000;
-/** The Cloud Run / GCE runtime identity via the metadata server (ADC). */
-export function metadataServiceTokenProvider(fetchImpl = fetch) {
-    let cached;
-    return async () => {
-        if (cached !== undefined && Date.now() < cached.expiresAt - EXPIRY_SKEW_MS) {
-            return cached.token;
-        }
-        const response = await fetchImpl(METADATA_TOKEN_URL, {
-            headers: { 'Metadata-Flavor': 'Google' },
-        });
-        if (!response.ok) {
-            throw new Error(`metadata token request returned HTTP ${response.status}`);
-        }
-        const body = (await response.json());
-        cached = { token: body.access_token, expiresAt: Date.now() + body.expires_in * 1000 };
-        return cached.token;
-    };
-}
-/**
- * Impersonate one least-privilege service account from a base identity that holds
- * `roles/iam.serviceAccountTokenCreator` on it.
- */
-export function impersonatedTokenProvider(base, serviceAccountEmail, fetchImpl = fetch) {
-    let cached;
-    return async () => {
-        if (cached !== undefined && Date.now() < cached.expiresAt - EXPIRY_SKEW_MS) {
-            return cached.token;
-        }
-        const baseToken = await base();
-        const response = await fetchImpl(`${IAM_CREDENTIALS_ROOT}/projects/-/serviceAccounts/${encodeURIComponent(serviceAccountEmail)}:generateAccessToken`, {
-            method: 'POST',
-            headers: {
-                authorization: `Bearer ${baseToken}`,
-                'content-type': 'application/json',
-            },
-            body: JSON.stringify({ scope: ['https://www.googleapis.com/auth/cloud-platform'] }),
-        });
-        if (!response.ok) {
-            // Attributable without detail: the account and status only, never a response body.
-            throw new Error(`impersonation of ${serviceAccountEmail} returned HTTP ${response.status}`);
-        }
-        const body = (await response.json());
-        cached = { token: body.accessToken, expiresAt: Date.parse(body.expireTime) };
-        return cached.token;
-    };
-}
-//# sourceMappingURL=google-identity.js.map

package/node_modules/@noodle-borg/knowledge-operations/dist/google-identity.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"google-identity.js","sourceRoot":"","sources":["../src/google-identity.ts"],"names":[],"mappings":"AAQA,MAAM,kBAAkB,GACtB,4FAA4F,CAAC;AAC/F,MAAM,oBAAoB,GAAG,0CAA0C,CAAC;AACxE,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAOrC,0EAA0E;AAC1E,MAAM,UAAU,4BAA4B,CAC1C,YAA0B,KAAK;IAE/B,IAAI,MAA+B,CAAC;IACpC,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,cAAc,EAAE,CAAC;YAC3E,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,kBAAkB,EAAE;YACnD,OAAO,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE;SACzC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAiD,CAAC;QACrF,MAAM,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,EAAE,CAAC;QACtF,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAA+B,EAC/B,mBAA2B,EAC3B,YAA0B,KAAK;IAE/B,IAAI,MAA+B,CAAC;IACpC,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,cAAc,EAAE,CAAC;YAC3E,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,GAAG,oBAAoB,+BAA+B,kBAAkB,CAAC,mBAAmB,CAAC,sBAAsB,EACnH;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,SAAS,EAAE;gBACpC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,gDAAgD,CAAC,EAAE,CAAC;SACpF,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,mFAAmF;YACnF,MAAM,IAAI,KAAK,CAAC,oBAAoB,mBAAmB,kBAAkB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAgD,CAAC;QACpF,MAAM,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7E,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/knowledge-operations/dist/managed-google.d.ts

@@ -1,34 +0,0 @@
-/**
- * Managed-bundled Google wiring (ADR 0202 as amended): resolve the Noodle-owned project and the
- * two runtime-reachable identities (publication, search) from service environment, bind the
- * sites-half adapter per tenant scope, and answer the honest site-provisioning question. The
- * provisioning identity is deliberately unreachable from here — it exists only for the
- * operator-run `scripts/knowledge-gcp-provision.mjs`.
- */
-import { type GoogleAccessTokenProvider, type SiteSearch } from '@noodle-borg/knowledge';
-import type { KnowledgeTenantRef } from './routes.js';
-export interface ManagedGoogleKnowledge {
-    readonly project: string;
-    readonly location: string;
-    /** Reaches the deploy path only. */
-    readonly publicationTokens: GoogleAccessTokenProvider;
-    /** The only identity runtime execution may reach (ADR 0202 D9). */
-    readonly searchTokens: GoogleAccessTokenProvider;
-}
-/**
- * Environment contract (set on the hosted service):
- * `NOODLE_KNOWLEDGE_GCP_PROJECT` (required to enable the managed sites tier),
- * `NOODLE_KNOWLEDGE_GCP_LOCATION` (default `global`),
- * `NOODLE_KNOWLEDGE_PUBLICATION_SA` / `NOODLE_KNOWLEDGE_SEARCH_SA` (default the
- * `knowledge-publication@` / `knowledge-search@` accounts in the project).
- */
-export declare function managedGoogleFromEnv(env: NodeJS.ProcessEnv, fetchImpl?: typeof fetch): ManagedGoogleKnowledge | undefined;
-export declare function managedSiteSearchFor(google: ManagedGoogleKnowledge, tenant: KnowledgeTenantRef): SiteSearch;
-/**
- * Is the tenant's site datastore ready to serve — a WEBSITE-type store with at least one
- * registered target site? Read with the search identity (viewer). Mere existence is not enough:
- * a mistyped or half-provisioned store would pass the deploy gate and then answer nothing (or
- * error) at the first customer query.
- */
-export declare function managedSiteProvisioned(google: ManagedGoogleKnowledge, tenant: KnowledgeTenantRef, fetchImpl?: typeof fetch): Promise<boolean>;
-//# sourceMappingURL=managed-google.d.ts.map

package/node_modules/@noodle-borg/knowledge-operations/dist/managed-google.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"managed-google.d.ts","sourceRoot":"","sources":["../src/managed-google.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAEL,KAAK,yBAAyB,EAI9B,KAAK,UAAU,EAChB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,oCAAoC;IACpC,QAAQ,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;IACtD,mEAAmE;IACnE,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAC;CAClD;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,SAAS,GAAE,OAAO,KAAa,GAC9B,sBAAsB,GAAG,SAAS,CAgBpC;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,sBAAsB,EAC9B,MAAM,EAAE,kBAAkB,GACzB,UAAU,CAOZ;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,sBAAsB,EAC9B,MAAM,EAAE,kBAAkB,EAC1B,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,OAAO,CAAC,CAiClB"}

package/node_modules/@noodle-borg/knowledge-operations/dist/managed-google.js

@@ -1,79 +0,0 @@
-/**
- * Managed-bundled Google wiring (ADR 0202 as amended): resolve the Noodle-owned project and the
- * two runtime-reachable identities (publication, search) from service environment, bind the
- * sites-half adapter per tenant scope, and answer the honest site-provisioning question. The
- * provisioning identity is deliberately unreachable from here — it exists only for the
- * operator-run `scripts/knowledge-gcp-provision.mjs`.
- */
-import { GOOGLE_SITE_COMPONENT, GoogleAgentSearchSites, googleDataStoreId, googleSiteEngineId, } from '@noodle-borg/knowledge';
-import { impersonatedTokenProvider, metadataServiceTokenProvider } from './google-identity.js';
-/**
- * Environment contract (set on the hosted service):
- * `NOODLE_KNOWLEDGE_GCP_PROJECT` (required to enable the managed sites tier),
- * `NOODLE_KNOWLEDGE_GCP_LOCATION` (default `global`),
- * `NOODLE_KNOWLEDGE_PUBLICATION_SA` / `NOODLE_KNOWLEDGE_SEARCH_SA` (default the
- * `knowledge-publication@` / `knowledge-search@` accounts in the project).
- */
-export function managedGoogleFromEnv(env, fetchImpl = fetch) {
-    const project = env.NOODLE_KNOWLEDGE_GCP_PROJECT;
-    if (project === undefined || project === '')
-        return undefined;
-    const location = env.NOODLE_KNOWLEDGE_GCP_LOCATION ?? 'global';
-    const base = metadataServiceTokenProvider(fetchImpl);
-    const publication = env.NOODLE_KNOWLEDGE_PUBLICATION_SA ??
-        `knowledge-publication@${project}.iam.gserviceaccount.com`;
-    const search = env.NOODLE_KNOWLEDGE_SEARCH_SA ?? `knowledge-search@${project}.iam.gserviceaccount.com`;
-    return {
-        project,
-        location,
-        publicationTokens: impersonatedTokenProvider(base, publication, fetchImpl),
-        searchTokens: impersonatedTokenProvider(base, search, fetchImpl),
-    };
-}
-export function managedSiteSearchFor(google, tenant) {
-    return new GoogleAgentSearchSites({
-        project: google.project,
-        location: google.location,
-        tokenProvider: google.searchTokens,
-        scope: { org: tenant.org, app: tenant.app, env: tenant.env },
-    });
-}
-/**
- * Is the tenant's site datastore ready to serve — a WEBSITE-type store with at least one
- * registered target site? Read with the search identity (viewer). Mere existence is not enough:
- * a mistyped or half-provisioned store would pass the deploy gate and then answer nothing (or
- * error) at the first customer query.
- */
-export async function managedSiteProvisioned(google, tenant, fetchImpl = fetch) {
-    const id = googleDataStoreId({ org: tenant.org, app: tenant.app, env: tenant.env }, GOOGLE_SITE_COMPONENT);
-    const store = `https://discoveryengine.googleapis.com/v1/projects/${google.project}/locations/${google.location}/collections/default_collection/dataStores/${id}`;
-    const token = await google.searchTokens();
-    const headers = { authorization: `Bearer ${token}` };
-    const response = await fetchImpl(store, { headers });
-    if (response.status === 404)
-        return false;
-    if (!response.ok) {
-        throw new Error(`site datastore check for ${id} returned HTTP ${response.status}`);
-    }
-    const body = (await response.json().catch(() => ({})));
-    if (body.contentConfig !== 'PUBLIC_WEBSITE')
-        return false;
-    const targets = await fetchImpl(`${store}/siteSearchEngine/targetSites`, { headers });
-    if (!targets.ok) {
-        throw new Error(`target-site check for ${id} returned HTTP ${targets.status}`);
-    }
-    const targetBody = (await targets.json().catch(() => ({})));
-    if (!Array.isArray(targetBody.targetSites) || targetBody.targetSites.length === 0)
-        return false;
-    // Website search serves through an Enterprise ENGINE, not the datastore serving config (live
-    // 400 verified 2026-08-18) — a datastore without its engine still cannot answer.
-    const engineId = googleSiteEngineId({ org: tenant.org, app: tenant.app, env: tenant.env });
-    const engine = await fetchImpl(`https://discoveryengine.googleapis.com/v1/projects/${google.project}/locations/${google.location}/collections/default_collection/engines/${engineId}`, { headers });
-    if (engine.status === 404)
-        return false;
-    if (!engine.ok) {
-        throw new Error(`site engine check for ${engineId} returned HTTP ${engine.status}`);
-    }
-    return true;
-}
-//# sourceMappingURL=managed-google.js.map

package/node_modules/@noodle-borg/knowledge-operations/dist/managed-google.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"managed-google.js","sourceRoot":"","sources":["../src/managed-google.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,qBAAqB,EAErB,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,GAEnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AAY/F;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAsB,EACtB,YAA0B,KAAK;IAE/B,MAAM,OAAO,GAAG,GAAG,CAAC,4BAA4B,CAAC;IACjD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,QAAQ,GAAG,GAAG,CAAC,6BAA6B,IAAI,QAAQ,CAAC;IAC/D,MAAM,IAAI,GAAG,4BAA4B,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,WAAW,GACf,GAAG,CAAC,+BAA+B;QACnC,yBAAyB,OAAO,0BAA0B,CAAC;IAC7D,MAAM,MAAM,GACV,GAAG,CAAC,0BAA0B,IAAI,oBAAoB,OAAO,0BAA0B,CAAC;IAC1F,OAAO;QACL,OAAO;QACP,QAAQ;QACR,iBAAiB,EAAE,yBAAyB,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC;QAC1E,YAAY,EAAE,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAA8B,EAC9B,MAA0B;IAE1B,OAAO,IAAI,sBAAsB,CAAC;QAChC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;KAC7D,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAA8B,EAC9B,MAA0B,EAC1B,YAA0B,KAAK;IAE/B,MAAM,EAAE,GAAG,iBAAiB,CAC1B,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,EACrD,qBAAqB,CACtB,CAAC;IACF,MAAM,KAAK,GAAG,sDAAsD,MAAM,CAAC,OAAO,cAAc,MAAM,CAAC,QAAQ,8CAA8C,EAAE,EAAE,CAAC;IAClK,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,4BAA4B,EAAE,kBAAkB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA+B,CAAC;IACrF,IAAI,IAAI,CAAC,aAAa,KAAK,gBAAgB;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,KAAK,+BAA+B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,kBAAkB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAgC,CAAC;IAC3F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChG,6FAA6F;IAC7F,iFAAiF;IACjF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,sDAAsD,MAAM,CAAC,OAAO,cAAc,MAAM,CAAC,QAAQ,2CAA2C,QAAQ,EAAE,EACtJ,EAAE,OAAO,EAAE,CACZ,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,kBAAkB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}