@opendatalabs/personal-server-ts-server 1.16.1 → 1.17.0

package/dist/jobs/worker.js

@@ -0,0 +1,491 @@
+import { createHash, randomUUID } from "node:crypto";
+import { createReadStream, createWriteStream } from "node:fs";
+import { mkdir, mkdtemp, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { Readable, Transform } from "node:stream";
+import { pipeline } from "node:stream/promises";
+import { assertScopeNotDeleted, redactEnvelopeForGrantee, redactJsonEnvelopeBytesForGrantee, } from "@opendatalabs/personal-server-ts-core/api";
+import { readDataContract } from "@opendatalabs/personal-server-ts-core/contracts";
+import { DataDeletedError, GrantRevokedError, InvalidSignatureError, ProtocolError, SignedArtifactInvalidError, SignedArtifactMissingError, UnregisteredBuilderError, } from "@opendatalabs/personal-server-ts-core/errors";
+import { verifyDataReadPolicy, verifySignedArtifacts, } from "@opendatalabs/personal-server-ts-core/policy";
+import { parseWeb3SignedHeader, verifyWeb3Signed, } from "@opendatalabs/vana-sdk/node";
+import { canonicalJobRequestBytes, sealJobResultStream, } from "@opendatalabs/vana-sdk/crypto/envelope/job";
+import { JOB_PROTOCOL_VERSION, } from "@opendatalabs/vana-sdk/protocol/jobs";
+import { isAddressEqual } from "viem";
+import { publicKeyToAddress } from "viem/accounts";
+import { openRedactedEnvelopeStream } from "./raw-envelope-stream.js";
+const RAW_READ = "raw_read";
+const EXECUTE_PATH = "/v1/jobs/execute";
+const POST = "POST";
+const JSON_CONTENT_TYPE = "application/json";
+const UNKNOWN_METADATA = "unknown";
+const MILLISECONDS_PER_SECOND = 1_000;
+// Mirrors the SDK's own Web3Signed clock skew allowance.
+const AUTH_CLOCK_SKEW_SECONDS = 60;
+const JOB_EXECUTION_FAILED_LOG = "Enclave job execution failed";
+const JOB_EXECUTION_PROGRESS_LOG = "Enclave job execution progress";
+const JOB_SCOPE_HYDRATION_FAILED_LOG = "Job scope hydration failed";
+const RESULT_SIGNING_PATH = "/agent/v1/job-results/sign";
+const RESULT_SIGNING_TIMEOUT_MS = 15_000;
+const RESULT_UPLOAD_TIMEOUT_MS = 120_000;
+const RESULT_OBJECT_PREFIX = "jobresults";
+const BYTES_PER_MIB = 1024 * 1024;
+export const DEFAULT_JOB_RESULT_MAX_BYTES = 64 * BYTES_PER_MIB;
+const PUT = "PUT";
+const JOB_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+export class JobFailure extends Error {
+    code;
+    retryable;
+    constructor(code, message, retryable) {
+        super(message);
+        this.code = code;
+        this.retryable = retryable;
+        this.name = "JobFailure";
+    }
+}
+export async function executeJob(envelope, deps) {
+    try {
+        return await executeJobUnsafe(envelope, deps);
+    }
+    catch (error) {
+        if (error instanceof JobFailure) {
+            throw error;
+        }
+        deps.logger.warn({ jobId: envelope.request.jobId, error: errorSummary(error) }, JOB_EXECUTION_FAILED_LOG);
+        throw new JobFailure("INTERNAL", "job execution failed", true);
+    }
+}
+async function executeJobUnsafe(envelope, deps) {
+    const { request } = envelope;
+    const executionStartedAt = performance.now();
+    if (request.v !== JOB_PROTOCOL_VERSION) {
+        throw new JobFailure("INTERNAL", "protocol version not supported", false);
+    }
+    if (request.operation !== RAW_READ) {
+        throw new JobFailure("INTERNAL", "operation not supported", false);
+    }
+    const jobId = normalizeJobId(request.jobId);
+    const now = deps.now?.() ?? new Date();
+    if (!validDeadline(request.deadline, now)) {
+        throw new JobFailure("DEADLINE_PASSED", "job deadline passed", false);
+    }
+    const auth = await verifyJobAuth(envelope, deps.authAudience, now);
+    if (!sameAddress(auth.signer, request.builder)) {
+        throw new JobFailure("BUILDER_MISMATCH", "builder identity mismatch", false);
+    }
+    if (!sameAddress(request.owner, deps.serverOwner)) {
+        throw new JobFailure("OWNER_MISMATCH", "job owner mismatch", false);
+    }
+    let grant;
+    try {
+        grant = await verifyDataReadPolicy({
+            signer: request.builder,
+            grantId: request.grantId,
+            requestedScope: request.scope,
+            serverOwner: deps.serverOwner,
+        }, { authSessionVerifier: deps.gateway, grantVerifier: deps.gateway });
+    }
+    catch (error) {
+        throw mapPolicyFailure(error);
+    }
+    const builder = await deps.gateway.getBuilder(request.builder);
+    if (!builder) {
+        throw new JobFailure("BUILDER_MISMATCH", "builder is not registered", false);
+    }
+    try {
+        await verifySignedArtifacts({
+            grant,
+            builder,
+            gatewayConfig: deps.gatewayConfig,
+            ownerAddress: deps.serverOwner,
+        });
+    }
+    catch (error) {
+        throw mapArtifactFailure(error);
+    }
+    let builderKeyAddress;
+    try {
+        builderKeyAddress = publicKeyToAddress(builder.publicKey);
+    }
+    catch {
+        throw new JobFailure("SIGNED_ARTIFACT_INVALID", "builder public key is invalid", false);
+    }
+    if (!sameAddress(builderKeyAddress, request.builder) ||
+        builder.publicKey.toLowerCase() !== request.builderPublicKey.toLowerCase()) {
+        throw new JobFailure("BUILDER_MISMATCH", "builder key mismatch", false);
+    }
+    const registration = await deps.gateway.getServer(deps.serverAddress);
+    if (!registration ||
+        registration.revokedAt !== null ||
+        !sameAddress(registration.ownerAddress, deps.serverOwner) ||
+        registration.publicKey.toLowerCase() !== deps.serverPublicKey.toLowerCase()) {
+        throw new JobFailure("SERVER_NOT_REGISTERED", "server registration is invalid", false);
+    }
+    let hydrationAttempted = false;
+    let entry = deps.storage.findEntry({ scope: request.scope });
+    if (!entry && deps.hydrateScope) {
+        hydrationAttempted = true;
+        try {
+            await deps.hydrateScope(request.scope);
+            entry = deps.storage.findEntry({ scope: request.scope });
+        }
+        catch (error) {
+            deps.logger.warn({ jobId, scope: request.scope, error: errorSummary(error) }, JOB_SCOPE_HYDRATION_FAILED_LOG);
+        }
+    }
+    const resultMaxBytes = deps.resultMaxBytes ??
+        readJobResultMaxBytes(process.env.JOB_RESULT_MAX_BYTES);
+    let selected = await selectJobScope(deps, request.scope, entry, resultMaxBytes);
+    if (request.pinnedVersion !== null &&
+        String(selected.localVersion) !== request.pinnedVersion &&
+        deps.hydrateScope &&
+        !hydrationAttempted) {
+        hydrationAttempted = true;
+        try {
+            await deps.hydrateScope(request.scope);
+            entry = deps.storage.findEntry({ scope: request.scope });
+            selected = await selectJobScope(deps, request.scope, entry, resultMaxBytes);
+        }
+        catch (error) {
+            deps.logger.warn({ jobId, scope: request.scope, error: errorSummary(error) }, JOB_SCOPE_HYDRATION_FAILED_LOG);
+        }
+    }
+    if (request.pinnedVersion !== null &&
+        String(selected.localVersion) !== request.pinnedVersion) {
+        throw new JobFailure("VERSION_MISMATCH", "scope version mismatch", true);
+    }
+    const result = {
+        v: JOB_PROTOCOL_VERSION,
+        jobId,
+        scope: request.scope,
+        version: selected.localVersion === 0 ? null : String(selected.localVersion),
+        contentType: JSON_CONTENT_TYPE,
+    };
+    const body = await openRawReadBodyStream(deps.storage, request.scope, selected.entry);
+    const sealed = await sealJobResultStream(result, request.builderPublicKey, deps.ecies);
+    const tempRoot = deps.resultTempDir ?? process.env.PERSONAL_SERVER_ROOT_PATH ?? tmpdir();
+    await mkdir(tempRoot, { recursive: true });
+    const tempDirectory = await mkdtemp(join(tempRoot, ".job-result-"));
+    const sealedPath = join(tempDirectory, "sealed.bin");
+    try {
+        let payloadBytes = 0;
+        const countedBody = body.pipeThrough(new TransformStream({
+            transform(chunk, controller) {
+                payloadBytes += chunk.byteLength;
+                controller.enqueue(chunk);
+            },
+        }));
+        const { digest, byteLength: resultSize } = await writeSealedResult(sealedPath, sealed.header, countedBody.pipeThrough(sealed.transform));
+        logExecutionStep(deps, jobId, "read", executionStartedAt, {
+            payloadBytes,
+        });
+        logExecutionStep(deps, jobId, "seal", executionStartedAt, {
+            sealedBytes: resultSize,
+        });
+        const resultHash = `0x${digest}`;
+        const encodedJobId = encodeURIComponent(jobId);
+        const owner = deps.serverOwner.toLowerCase();
+        const resultObjectKey = `${RESULT_OBJECT_PREFIX}/${deps.resultUpload.chainId}/${encodedJobId}`;
+        const uploadPath = `/v1/job-results/${deps.resultUpload.chainId}/${owner}/${encodedJobId}`;
+        const requestFetch = deps.resultUpload.fetch ?? fetch;
+        logExecutionStep(deps, jobId, "sign", executionStartedAt);
+        const authorization = await requestUploadSignature(requestFetch, {
+            agentEndpoint: deps.resultUpload.agentEndpoint,
+            accessToken: deps.resultUpload.accessToken,
+            jobId,
+            chainId: deps.resultUpload.chainId,
+            owner: deps.serverOwner,
+            byteLength: resultSize,
+            bodyHash: `sha256:${digest}`,
+        });
+        logExecutionStep(deps, jobId, "upload", executionStartedAt);
+        await uploadResult(requestFetch, {
+            storageEndpoint: deps.resultUpload.storageEndpoint,
+            path: uploadPath,
+            authorization,
+            filePath: sealedPath,
+            byteLength: resultSize,
+        });
+        await deps.accessLogWriter.write({
+            logId: randomUUID(),
+            grantId: request.grantId,
+            builder: request.builder,
+            action: "read",
+            scope: request.scope,
+            timestamp: now.toISOString(),
+            ipAddress: UNKNOWN_METADATA,
+            userAgent: UNKNOWN_METADATA,
+        });
+        deps.logger.info({
+            jobId: request.jobId,
+            scope: request.scope,
+            version: selected.localVersion,
+        }, "Enclave job read served");
+        logExecutionStep(deps, jobId, "done", executionStartedAt);
+        return { resultObjectKey, resultHash, resultSize };
+    }
+    finally {
+        await rm(tempDirectory, { recursive: true, force: true });
+    }
+}
+async function selectJobScope(deps, scope, entry, resultMaxBytes) {
+    try {
+        await assertScopeNotDeleted({ scopeDeletions: deps.scopeDeletions, serverOwner: deps.serverOwner }, scope, entry);
+    }
+    catch (error) {
+        if (error instanceof DataDeletedError) {
+            throw new JobFailure("SCOPE_NOT_FOUND", "scope not found", false);
+        }
+        throw error;
+    }
+    if (!entry) {
+        throw new JobFailure("SCOPE_NOT_FOUND", "scope not found", false);
+    }
+    if (entry.sizeBytes > resultMaxBytes) {
+        throw new JobFailure("RESULT_TOO_LARGE", `job result is ${entry.sizeBytes} bytes; limit is ${resultMaxBytes} bytes`, false);
+    }
+    const localVersion = await deps.storage.findLatestVersionByScope(scope);
+    return { entry, localVersion };
+}
+export function readJobResultMaxBytes(value) {
+    if (value === undefined)
+        return DEFAULT_JOB_RESULT_MAX_BYTES;
+    const parsed = Number(value);
+    if (!Number.isSafeInteger(parsed) || parsed <= 0) {
+        throw new Error("JOB_RESULT_MAX_BYTES must be a positive safe integer");
+    }
+    return parsed;
+}
+async function openRawReadBodyStream(storage, scope, entry) {
+    if (storage.readEnvelopeStream) {
+        return openRedactedEnvelopeStream(() => storage.readEnvelopeStream(scope, entry.collectedAt));
+    }
+    if (storage.readEnvelopeBytes) {
+        const bytes = redactJsonEnvelopeBytesForGrantee(await storage.readEnvelopeBytes(scope, entry.collectedAt));
+        return oneChunkStream(bytes);
+    }
+    const read = await readDataContract({ storage, scopeParam: scope });
+    if (!read.ok) {
+        throw new JobFailure("SCOPE_NOT_FOUND", "scope not found", false);
+    }
+    return oneChunkStream(new TextEncoder().encode(JSON.stringify(redactEnvelopeForGrantee(read.envelope))));
+}
+function oneChunkStream(bytes) {
+    return new ReadableStream({
+        start(controller) {
+            controller.enqueue(bytes);
+            controller.close();
+        },
+    });
+}
+async function writeSealedResult(path, header, ciphertext) {
+    const hash = createHash("sha256");
+    let byteLength = 0;
+    const meter = new Transform({
+        transform(chunk, _encoding, callback) {
+            hash.update(chunk);
+            byteLength += chunk.byteLength;
+            callback(null, chunk);
+        },
+    });
+    const source = Readable.from((async function* () {
+        yield header;
+        for await (const chunk of Readable.fromWeb(ciphertext)) {
+            yield chunk;
+        }
+    })());
+    await pipeline(source, meter, createWriteStream(path));
+    return { digest: hash.digest("hex"), byteLength };
+}
+function logExecutionStep(deps, jobId, event, startedAt, details = {}) {
+    const memory = process.memoryUsage();
+    deps.logger.info({
+        jobId,
+        stage: "execute",
+        event,
+        elapsedMs: Math.max(0, Math.round(performance.now() - startedAt)),
+        rssMiB: Math.round(memory.rss / BYTES_PER_MIB),
+        heapUsedMiB: Math.round(memory.heapUsed / BYTES_PER_MIB),
+        arrayBuffersMiB: Math.round(memory.arrayBuffers / BYTES_PER_MIB),
+        ...details,
+    }, JOB_EXECUTION_PROGRESS_LOG);
+}
+async function requestUploadSignature(requestFetch, request) {
+    let response;
+    const timeoutSignal = AbortSignal.timeout(RESULT_SIGNING_TIMEOUT_MS);
+    try {
+        response = await requestFetch(`${request.agentEndpoint.replace(/\/$/, "")}${RESULT_SIGNING_PATH}`, {
+            method: POST,
+            headers: {
+                Authorization: `Bearer ${request.accessToken}`,
+                "Content-Type": JSON_CONTENT_TYPE,
+            },
+            body: JSON.stringify({
+                jobId: request.jobId,
+                chainId: request.chainId,
+                owner: request.owner,
+                byteLength: request.byteLength,
+                bodyHash: request.bodyHash,
+            }),
+            signal: timeoutSignal,
+        });
+    }
+    catch {
+        if (timeoutSignal.aborted) {
+            throw new JobFailure("RESULT_UPLOAD_FAILED", `result signing request timed out after ${RESULT_SIGNING_TIMEOUT_MS}ms`, true);
+        }
+        throw new JobFailure("RESULT_UPLOAD_FAILED", "result signing service is unavailable", true);
+    }
+    if (!response.ok) {
+        if (response.status >= 500) {
+            throw new JobFailure("RESULT_UPLOAD_FAILED", "result signing service is unavailable", true);
+        }
+        throw new JobFailure("RESULT_SIGNING_REFUSED", "result upload signing was refused", false);
+    }
+    let body;
+    try {
+        body = await response.json();
+    }
+    catch {
+        if (timeoutSignal.aborted) {
+            throw new JobFailure("RESULT_UPLOAD_FAILED", `result signing request timed out after ${RESULT_SIGNING_TIMEOUT_MS}ms`, true);
+        }
+        body = undefined;
+    }
+    if (!body ||
+        typeof body !== "object" ||
+        !("authorization" in body) ||
+        typeof body.authorization !== "string" ||
+        !body.authorization.startsWith("Web3Signed ")) {
+        throw new JobFailure("RESULT_SIGNING_REFUSED", "result upload signing response is invalid", false);
+    }
+    return body.authorization;
+}
+async function uploadResult(requestFetch, request) {
+    let response;
+    const timeoutSignal = AbortSignal.timeout(RESULT_UPLOAD_TIMEOUT_MS);
+    const body = createReadStream(request.filePath);
+    try {
+        const storageOrigin = new URL(request.storageEndpoint).origin;
+        response = await requestFetch(`${storageOrigin}${request.path}`, {
+            method: PUT,
+            headers: {
+                Authorization: request.authorization,
+                "Content-Type": "application/octet-stream",
+                "Content-Length": String(request.byteLength),
+            },
+            body,
+            duplex: "half",
+            signal: timeoutSignal,
+        });
+    }
+    catch {
+        if (timeoutSignal.aborted) {
+            throw new JobFailure("RESULT_UPLOAD_FAILED", `result upload timed out after ${RESULT_UPLOAD_TIMEOUT_MS}ms`, true);
+        }
+        throw new JobFailure("RESULT_UPLOAD_FAILED", "result upload failed", true);
+    }
+    finally {
+        body.destroy();
+    }
+    if (response.status === 413) {
+        throw new JobFailure("RESULT_TOO_LARGE", "sealed result exceeds the 100 MB storage limit", false);
+    }
+    if (!response.ok) {
+        throw new JobFailure("RESULT_UPLOAD_FAILED", "result upload failed", response.status >= 500);
+    }
+}
+/**
+ * Verify the builder's inner Web3Signed proof over the decrypted job request.
+ *
+ * The proof carries the SDK's 300 s request TTL, which is sized for a live HTTP
+ * call. A job is signed at submit and verified here at claim, and the Gateway
+ * queues a job whenever the fleet is full: a 6-owner burst on a 4-slot fleet
+ * held two jobs for 391 s while a worker booted, past 300 s + 60 s skew, so an
+ * authorization the Gateway had accepted expired in the queue.
+ *
+ *     submit ──── queued (scale-up) ──── claim ──── execute
+ *       │ iat                             │ 391 s later
+ *       └── freshness proven HERE, once ──┘   binding proven here
+ *
+ * So freshness is anchored to the builder-signed `iat`, not to the claim clock —
+ * queue time never counts. Everything the proof binds (signer, audience, method,
+ * path, body hash over the canonical request) is still verified against this
+ * claim, and a proof dated in the future is still refused. The execution bound
+ * stays `request.deadline`: builder-signed, capped by the Gateway at submit, and
+ * checked against the real clock by {@link validDeadline}.
+ */
+async function verifyJobAuth(envelope, authAudience, now) {
+    const nowSeconds = Math.floor(now.getTime() / MILLISECONDS_PER_SECOND);
+    try {
+        const { payload } = parseWeb3SignedHeader(envelope.auth);
+        if (payload.iat > nowSeconds + AUTH_CLOCK_SKEW_SECONDS) {
+            throw new Error("job authorization is issued in the future");
+        }
+        // aud = Gateway origin; contract section 1 step 1 amendment.
+        return await verifyWeb3Signed({
+            headerValue: envelope.auth,
+            expectedOrigin: authAudience,
+            expectedMethod: POST,
+            expectedPath: EXECUTE_PATH,
+            bodyBytes: canonicalJobRequestBytes(envelope.request),
+            now: payload.iat,
+        });
+    }
+    catch {
+        throw new JobFailure("AUTH_INVALID", "job authorization is invalid", false);
+    }
+}
+function normalizeJobId(jobId) {
+    if (!JOB_ID_PATTERN.test(jobId)) {
+        throw new JobFailure("INTERNAL", "job id is invalid", false);
+    }
+    return jobId.toLowerCase();
+}
+function mapPolicyFailure(error) {
+    if (error instanceof GrantRevokedError) {
+        return new JobFailure("GRANT_REVOKED", "grant is revoked", false);
+    }
+    if (error instanceof InvalidSignatureError ||
+        error instanceof UnregisteredBuilderError) {
+        return new JobFailure("BUILDER_MISMATCH", "builder is not authorized", false);
+    }
+    if (error instanceof ProtocolError) {
+        return new JobFailure("GRANT_INVALID", "grant is invalid", false);
+    }
+    return new JobFailure("INTERNAL", "policy verification failed", true);
+}
+function mapArtifactFailure(error) {
+    if (error instanceof SignedArtifactMissingError) {
+        return new JobFailure("SIGNED_ARTIFACT_MISSING", "signed artifact is missing", false);
+    }
+    if (error instanceof GrantRevokedError) {
+        return new JobFailure("GRANT_REVOKED", "grant is revoked", false);
+    }
+    if (error instanceof SignedArtifactInvalidError) {
+        return new JobFailure("SIGNED_ARTIFACT_INVALID", "signed artifact is invalid", false);
+    }
+    if (error instanceof ProtocolError) {
+        return new JobFailure("SIGNED_ARTIFACT_INVALID", "signed artifact is invalid", false);
+    }
+    return new JobFailure("INTERNAL", "artifact verification failed", true);
+}
+function errorSummary(error) {
+    return error instanceof Error
+        ? `${error.name}: ${error.message}`
+        : String(error);
+}
+function validDeadline(deadline, now) {
+    const timestamp = Date.parse(deadline);
+    return Number.isFinite(timestamp) && timestamp > now.getTime();
+}
+function sameAddress(left, right) {
+    try {
+        return isAddressEqual(left, right);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=worker.js.map

package/dist/jobs/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/jobs/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,iCAAiC,GAClC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iDAAiD,CAAC;AACnF,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,aAAa,EACb,0BAA0B,EAC1B,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,8CAA8C,CAAC;AAOtD,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,8CAA8C,CAAC;AAEtD,OAAO,EACL,qBAAqB,EACrB,gBAAgB,GAEjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EACL,oBAAoB,GAGrB,MAAM,sCAAsC,CAAC;AAG9C,OAAO,EAAE,cAAc,EAA0B,MAAM,MAAM,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAEtE,MAAM,QAAQ,GAAG,UAAU,CAAC;AAC5B,MAAM,YAAY,GAAG,kBAAkB,CAAC;AACxC,MAAM,IAAI,GAAG,MAAM,CAAC;AACpB,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAC7C,MAAM,gBAAgB,GAAG,SAAS,CAAC;AACnC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AACtC,yDAAyD;AACzD,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,wBAAwB,GAAG,8BAA8B,CAAC;AAChE,MAAM,0BAA0B,GAAG,gCAAgC,CAAC;AACpE,MAAM,8BAA8B,GAAG,4BAA4B,CAAC;AACpE,MAAM,mBAAmB,GAAG,4BAA4B,CAAC;AACzD,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AACzC,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAC1C,MAAM,aAAa,GAAG,IAAI,GAAG,IAAI,CAAC;AAClC,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,GAAG,aAAa,CAAC;AAC/D,MAAM,GAAG,GAAG,KAAK,CAAC;AAClB,MAAM,cAAc,GAClB,4EAA4E,CAAC;AA4B/E,MAAM,OAAO,UAAW,SAAQ,KAAK;IAEjB;IAEA;IAHlB,YACkB,IAAoB,EACpC,OAAe,EACC,SAAkB;QAElC,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAgB;QAEpB,cAAS,GAAT,SAAS,CAAS;QAGlC,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAA4B,EAC5B,IAAmB;IAEnB,IAAI,CAAC;QACH,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;YAChC,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,EAC7D,wBAAwB,CACzB,CAAC;QACF,MAAM,IAAI,UAAU,CAAC,UAAU,EAAE,sBAAsB,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,QAA4B,EAC5B,IAAmB;IAEnB,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;IAC7B,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAC7C,IAAI,OAAO,CAAC,CAAC,KAAK,oBAAoB,EAAE,CAAC;QACvC,MAAM,IAAI,UAAU,CAAC,UAAU,EAAE,gCAAgC,EAAE,KAAK,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,UAAU,CAAC,UAAU,EAAE,yBAAyB,EAAE,KAAK,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IACnE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,UAAU,CAClB,kBAAkB,EAClB,2BAA2B,EAC3B,KAAK,CACN,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,KAAK,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,oBAAoB,CAChC;YACE,MAAM,EAAE,OAAO,CAAC,OAAO;YACvB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,cAAc,EAAE,OAAO,CAAC,KAAK;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,EACD,EAAE,mBAAmB,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE,CACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,UAAU,CAClB,kBAAkB,EAClB,2BAA2B,EAC3B,KAAK,CACN,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,qBAAqB,CAAC;YAC1B,KAAK;YACL,OAAO;YACP,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,YAAY,EAAE,IAAI,CAAC,WAAW;SAC/B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,iBAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,iBAAiB,GAAG,kBAAkB,CAAC,OAAO,CAAC,SAAgB,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAClB,yBAAyB,EACzB,+BAA+B,EAC/B,KAAK,CACN,CAAC;IACJ,CAAC;IACD,IACE,CAAC,WAAW,CAAC,iBAAiB,EAAE,OAAO,CAAC,OAAO,CAAC;QAChD,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE,EAC1E,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACtE,IACE,CAAC,YAAY;QACb,YAAY,CAAC,SAAS,KAAK,IAAI;QAC/B,CAAC,WAAW,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC;QACzD,YAAY,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,EAC3E,CAAC;QACD,MAAM,IAAI,UAAU,CAClB,uBAAuB,EACvB,gCAAgC,EAChC,KAAK,CACN,CAAC;IACJ,CAAC;IAED,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QAChC,kBAAkB,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACvC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,EAC3D,8BAA8B,CAC/B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAClB,IAAI,CAAC,cAAc;QACnB,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC1D,IAAI,QAAQ,GAAG,MAAM,cAAc,CACjC,IAAI,EACJ,OAAO,CAAC,KAAK,EACb,KAAK,EACL,cAAc,CACf,CAAC;IACF,IACE,OAAO,CAAC,aAAa,KAAK,IAAI;QAC9B,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,aAAa;QACvD,IAAI,CAAC,YAAY;QACjB,CAAC,kBAAkB,EACnB,CAAC;QACD,kBAAkB,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACvC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YACzD,QAAQ,GAAG,MAAM,cAAc,CAC7B,IAAI,EACJ,OAAO,CAAC,KAAK,EACb,KAAK,EACL,cAAc,CACf,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,EAC3D,8BAA8B,CAC/B,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IACE,OAAO,CAAC,aAAa,KAAK,IAAI;QAC9B,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,aAAa,EACvD,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,wBAAwB,EAAE,IAAI,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,MAAM,GAA4B;QACtC,CAAC,EAAE,oBAAoB;QACvB,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,QAAQ,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC3E,WAAW,EAAE,iBAAiB;KAC/B,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,qBAAqB,CACtC,IAAI,CAAC,OAAO,EACZ,OAAO,CAAC,KAAK,EACb,QAAQ,CAAC,KAAK,CACf,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACtC,MAAM,EACN,OAAO,CAAC,gBAAgB,EACxB,IAAI,CAAC,KAAK,CACX,CAAC;IACF,MAAM,QAAQ,GACZ,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,MAAM,EAAE,CAAC;IAC1E,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAClC,IAAI,eAAe,CAAyB;YAC1C,SAAS,CAAC,KAAK,EAAE,UAAU;gBACzB,YAAY,IAAI,KAAK,CAAC,UAAU,CAAC;gBACjC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;SACF,CAAC,CACH,CAAC;QACF,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,MAAM,iBAAiB,CAChE,UAAU,EACV,MAAM,CAAC,MAAM,EACb,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAC1C,CAAC;QACF,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACxD,YAAY;SACb,CAAC,CAAC;QACH,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACxD,WAAW,EAAE,UAAU;SACxB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,KAAK,MAAM,EAAS,CAAC;QACxC,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,eAAe,GAAG,GAAG,oBAAoB,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,IAAI,YAAY,EAAE,CAAC;QAC/F,MAAM,UAAU,GAAG,mBAAmB,IAAI,CAAC,YAAY,CAAC,OAAO,IAAI,KAAK,IAAI,YAAY,EAAE,CAAC;QAC3F,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,KAAK,CAAC;QACtD,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,MAAM,sBAAsB,CAAC,YAAY,EAAE;YAC/D,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC,aAAa;YAC9C,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW;YAC1C,KAAK;YACL,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO;YAClC,KAAK,EAAE,IAAI,CAAC,WAAW;YACvB,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,UAAU,MAAM,EAAE;SAC7B,CAAC,CAAC;QACH,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC5D,MAAM,YAAY,CAAC,YAAY,EAAE;YAC/B,eAAe,EAAE,IAAI,CAAC,YAAY,CAAC,eAAe;YAClD,IAAI,EAAE,UAAU;YAChB,aAAa;YACb,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;YAC/B,KAAK,EAAE,UAAU,EAAE;YACnB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;YAC5B,SAAS,EAAE,gBAAgB;YAC3B,SAAS,EAAE,gBAAgB;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;YACE,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,QAAQ,CAAC,YAAY;SAC/B,EACD,yBAAyB,CAC1B,CAAC;QACF,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAE1D,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IACrD,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAOD,KAAK,UAAU,cAAc,CAC3B,IAAmB,EACnB,KAAa,EACb,KAA6B,EAC7B,cAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,qBAAqB,CACzB,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EACtE,KAAK,EACL,KAAK,CACN,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,GAAG,cAAc,EAAE,CAAC;QACrC,MAAM,IAAI,UAAU,CAClB,kBAAkB,EAClB,iBAAiB,KAAK,CAAC,SAAS,oBAAoB,cAAc,QAAQ,EAC1E,KAAK,CACN,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAExE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAyB;IAC7D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,4BAA4B,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,OAAwB,EACxB,KAAa,EACb,KAA8B;IAE9B,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC/B,OAAO,0BAA0B,CAAC,GAAG,EAAE,CACrC,OAAO,CAAC,kBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CACtD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,iCAAiC,CAC7C,MAAM,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAC1D,CAAC;QACF,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,cAAc,CACnB,IAAI,WAAW,EAAE,CAAC,MAAM,CACtB,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CACxD,CACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAiB;IACvC,OAAO,IAAI,cAAc,CAAC;QACxB,KAAK,CAAC,UAAU;YACd,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1B,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,IAAY,EACZ,MAAkB,EAClB,UAAsC;IAEtC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC;QAC1B,SAAS,CAAC,KAAa,EAAE,SAAS,EAAE,QAAQ;YAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnB,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC;YAC/B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAC1B,CAAC,KAAK,SAAS,CAAC;QACd,MAAM,MAAM,CAAC;QACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAmB,CAAC,EAAE,CAAC;YAChE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,EAAE,CACL,CAAC;IACF,MAAM,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAmB,EACnB,KAAa,EACb,KAAmD,EACnD,SAAiB,EACjB,UAAmC,EAAE;IAErC,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;QACE,KAAK;QACL,KAAK,EAAE,SAAS;QAChB,KAAK;QACL,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;QACjE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,aAAa,CAAC;QAC9C,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,GAAG,aAAa,CAAC;QACxD,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,GAAG,aAAa,CAAC;QAChE,GAAG,OAAO;KACX,EACD,0BAA0B,CAC3B,CAAC;AACJ,CAAC;AAYD,KAAK,UAAU,sBAAsB,CACnC,YAA0B,EAC1B,OAA+B;IAE/B,IAAI,QAAkB,CAAC;IACvB,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,YAAY,CAC3B,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,mBAAmB,EAAE,EACnE;YACE,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,OAAO,CAAC,WAAW,EAAE;gBAC9C,cAAc,EAAE,iBAAiB;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC;YACF,MAAM,EAAE,aAAa;SACtB,CACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,UAAU,CAClB,sBAAsB,EACtB,0CAA0C,yBAAyB,IAAI,EACvE,IAAI,CACL,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,UAAU,CAClB,sBAAsB,EACtB,uCAAuC,EACvC,IAAI,CACL,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC3B,MAAM,IAAI,UAAU,CAClB,sBAAsB,EACtB,uCAAuC,EACvC,IAAI,CACL,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,UAAU,CAClB,wBAAwB,EACxB,mCAAmC,EACnC,KAAK,CACN,CAAC;IACJ,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,UAAU,CAClB,sBAAsB,EACtB,0CAA0C,yBAAyB,IAAI,EACvE,IAAI,CACL,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;IACD,IACE,CAAC,IAAI;QACL,OAAO,IAAI,KAAK,QAAQ;QACxB,CAAC,CAAC,eAAe,IAAI,IAAI,CAAC;QAC1B,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;QACtC,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,aAAa,CAAC,EAC7C,CAAC;QACD,MAAM,IAAI,UAAU,CAClB,wBAAwB,EACxB,2CAA2C,EAC3C,KAAK,CACN,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC,aAAa,CAAC;AAC5B,CAAC;AAUD,KAAK,UAAU,YAAY,CACzB,YAA0B,EAC1B,OAA4B;IAE5B,IAAI,QAAkB,CAAC;IACvB,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC;QAC9D,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,aAAa,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE;YAC/D,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,cAAc,EAAE,0BAA0B;gBAC1C,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;aAC7C;YACD,IAAI;YACJ,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,aAAa;SACyB,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,UAAU,CAClB,sBAAsB,EACtB,iCAAiC,wBAAwB,IAAI,EAC7D,IAAI,CACL,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,sBAAsB,EAAE,IAAI,CAAC,CAAC;IAC7E,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,UAAU,CAClB,kBAAkB,EAClB,gDAAgD,EAChD,KAAK,CACN,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,UAAU,CAClB,sBAAsB,EACtB,sBAAsB,EACtB,QAAQ,CAAC,MAAM,IAAI,GAAG,CACvB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,KAAK,UAAU,aAAa,CAC1B,QAA4B,EAC5B,YAAoB,EACpB,GAAS;IAET,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,uBAAuB,CAAC,CAAC;IAEvE,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,GAAG,GAAG,UAAU,GAAG,uBAAuB,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QAED,6DAA6D;QAC7D,OAAO,MAAM,gBAAgB,CAAC;YAC5B,WAAW,EAAE,QAAQ,CAAC,IAAI;YAC1B,cAAc,EAAE,YAAY;YAC5B,cAAc,EAAE,IAAI;YACpB,YAAY,EAAE,YAAY;YAC1B,SAAS,EAAE,wBAAwB,CAAC,QAAQ,CAAC,OAAO,CAAC;YACrD,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,8BAA8B,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,UAAU,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACvC,OAAO,IAAI,UAAU,CAAC,eAAe,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;IACD,IACE,KAAK,YAAY,qBAAqB;QACtC,KAAK,YAAY,wBAAwB,EACzC,CAAC;QACD,OAAO,IAAI,UAAU,CACnB,kBAAkB,EAClB,2BAA2B,EAC3B,KAAK,CACN,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;QACnC,OAAO,IAAI,UAAU,CAAC,eAAe,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,IAAI,UAAU,CAAC,UAAU,EAAE,4BAA4B,EAAE,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;QAChD,OAAO,IAAI,UAAU,CACnB,yBAAyB,EACzB,4BAA4B,EAC5B,KAAK,CACN,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACvC,OAAO,IAAI,UAAU,CAAC,eAAe,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;QAChD,OAAO,IAAI,UAAU,CACnB,yBAAyB,EACzB,4BAA4B,EAC5B,KAAK,CACN,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;QACnC,OAAO,IAAI,UAAU,CACnB,yBAAyB,EACzB,4BAA4B,EAC5B,KAAK,CACN,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,UAAU,CAAC,UAAU,EAAE,8BAA8B,EAAE,IAAI,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK;QAC3B,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE;QACnC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,GAAS;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAEvC,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,IAAe,EAAE,KAAgB,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/listen.d.ts

@@ -0,0 +1,11 @@
+import { createAdaptorServer } from "@hono/node-server";
+import type { AddressInfo } from "node:net";
+export type NodeFetchHandler = Parameters<typeof createAdaptorServer>[0]["fetch"];
+export type NodeServer = ReturnType<typeof createAdaptorServer>;
+export declare function listenHttpServer(params: {
+    fetch: NodeFetchHandler;
+    port: number;
+    hostname?: string;
+    onListening?: (info: AddressInfo) => void;
+}): Promise<NodeServer>;
+//# sourceMappingURL=listen.d.ts.map

package/dist/listen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listen.d.ts","sourceRoot":"","sources":["../src/listen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,MAAM,MAAM,gBAAgB,GAAG,UAAU,CACvC,OAAO,mBAAmB,CAC3B,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACd,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,wBAAsB,gBAAgB,CAAC,MAAM,EAAE;IAC7C,KAAK,EAAE,gBAAgB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;CAC3C,GAAG,OAAO,CAAC,UAAU,CAAC,CAwBtB"}

package/dist/listen.js

@@ -0,0 +1,23 @@
+import { createAdaptorServer } from "@hono/node-server";
+export async function listenHttpServer(params) {
+    const server = createAdaptorServer({ fetch: params.fetch });
+    await new Promise((resolve, reject) => {
+        const onError = (error) => {
+            server.off("error", onError);
+            reject(error);
+        };
+        server.once("error", onError);
+        server.listen(params.port, params.hostname, () => {
+            server.off("error", onError);
+            const address = server.address();
+            if (!address || typeof address === "string") {
+                reject(new Error("Could not resolve bound server address"));
+                return;
+            }
+            params.onListening?.(address);
+            resolve();
+        });
+    });
+    return server;
+}
+//# sourceMappingURL=listen.js.map

package/dist/listen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listen.js","sourceRoot":"","sources":["../src/listen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAQxD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAKtC;IACC,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAE5D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;YAC/B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC5C,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YAED,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/mcp/durable-state.d.ts

@@ -0,0 +1,75 @@
+import { type McpConnectionStore, type McpOAuthAuthorizationStore } from "@opendatalabs/personal-server-ts-core/mcp";
+import type { Address } from "viem";
+import type { ClaimResponse } from "@opendatalabs/vana-sdk/protocol/jobs";
+export type McpWakeupIdentity = ClaimResponse["identity"];
+/** Whether a missing or unreadable sealed state file is a genuine first boot
+ * (`Optional`, today's default) or a lost durable volume (`Required`, set
+ * from the signed `MCP_STATE_REQUIRED=1`). */
+export declare enum McpStateRequirement {
+    Optional = "optional",
+    Required = "required"
+}
+/** Stable code for a required sealed MCP state file that was missing or
+ * could not be decrypted at boot. Distinguishes a lost durable volume from
+ * an ordinary first boot; callers must never fall back to fresh state. */
+export declare const MCP_STATE_REQUIRED_MISSING_CODE = "MCP_STATE_REQUIRED_MISSING";
+export declare class McpStateRequiredError extends Error {
+    constructor(cause: unknown);
+}
+export interface McpOwnerBinding {
+    owner: Address;
+    chainId: number;
+}
+export interface McpRollbackIdentity {
+    identity: McpWakeupIdentity;
+    generation: number;
+}
+export interface McpRollbackReceipt {
+    migrationId: string;
+    digest: string;
+    owners: number;
+    connections: number;
+}
+export interface McpDurableState {
+    /** These methods are exposed only through an attested encrypted migration peer. */
+    fenceAndExport(migrationId: string, target: string): Promise<Uint8Array>;
+    importSnapshot(snapshot: Uint8Array, migrationId: string): Promise<{
+        connections: number;
+        digest: string;
+    }>;
+    migrationStatus(): Promise<{
+        fenced: boolean;
+        importedId?: string;
+        rollbackActivated?: boolean;
+    }>;
+    activateRollback(receipt: McpRollbackReceipt): Promise<void>;
+    prepareRollback(migrationId: string, resolve: (binding: McpOwnerBinding) => Promise<McpRollbackIdentity>): Promise<McpRollbackReceipt>;
+    getRollbackPreparation(): Promise<{
+        receipt: McpRollbackReceipt;
+        owners: {
+            binding: McpOwnerBinding;
+            identity: McpWakeupIdentity;
+            generation: number;
+        }[];
+    }>;
+    approvedOwnerBindings(): Promise<McpOwnerBinding[]>;
+    connections: McpConnectionStore;
+    authorizations: McpOAuthAuthorizationStore;
+    bindOwner(connectionId: string, binding: McpOwnerBinding): Promise<void>;
+    getOwner(connectionId: string): Promise<McpOwnerBinding | null>;
+    rememberIdentity(identity: McpWakeupIdentity): Promise<void>;
+    getIdentity(userPsId: string): Promise<McpWakeupIdentity | null>;
+    /** Serializes multi-step OAuth mutations in the single ingress process. */
+    exclusive<T>(operation: () => Promise<T>): Promise<T>;
+}
+/**
+ * Single-CVM, single-writer store. Only ciphertext is written to its durable
+ * volume; the caller obtains its 32-byte key from the TEE key agent. This is
+ * deliberately not a multi-process or fleet database.
+ */
+export declare function openMcpDurableState(options: {
+    path: string;
+    key: Uint8Array;
+    requirement?: McpStateRequirement;
+}): Promise<McpDurableState>;
+//# sourceMappingURL=durable-state.d.ts.map

package/dist/mcp/durable-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"durable-state.d.ts","sourceRoot":"","sources":["../../src/mcp/durable-state.ts"],"names":[],"mappings":"AAQA,OAAO,EAIL,KAAK,kBAAkB,EAEvB,KAAK,0BAA0B,EAChC,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAG1E,MAAM,MAAM,iBAAiB,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;AAI1D;;8CAE8C;AAC9C,oBAAY,mBAAmB;IAC7B,QAAQ,aAAa;IACrB,QAAQ,aAAa;CACtB;AAED;;0EAE0E;AAC1E,eAAO,MAAM,+BAA+B,+BAA+B,CAAC;AAE5E,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,KAAK,EAAE,OAAO;CAO3B;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB;AACD,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AA4BD,MAAM,WAAW,eAAe;IAC9B,mFAAmF;IACnF,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACzE,cAAc,CACZ,QAAQ,EAAE,UAAU,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,eAAe,IAAI,OAAO,CAAC;QACzB,MAAM,EAAE,OAAO,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,iBAAiB,CAAC,EAAE,OAAO,CAAC;KAC7B,CAAC,CAAC;IACH,gBAAgB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,eAAe,CACb,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,mBAAmB,CAAC,GAClE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC/B,sBAAsB,IAAI,OAAO,CAAC;QAChC,OAAO,EAAE,kBAAkB,CAAC;QAC5B,MAAM,EAAE;YACN,OAAO,EAAE,eAAe,CAAC;YACzB,QAAQ,EAAE,iBAAiB,CAAC;YAC5B,UAAU,EAAE,MAAM,CAAC;SACpB,EAAE,CAAC;KACL,CAAC,CAAC;IACH,qBAAqB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IACpD,WAAW,EAAE,kBAAkB,CAAC;IAChC,cAAc,EAAE,0BAA0B,CAAC;IAC3C,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAChE,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IACjE,2EAA2E;IAC3E,SAAS,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACvD;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,UAAU,CAAC;IAChB,WAAW,CAAC,EAAE,mBAAmB,CAAC;CACnC,GAAG,OAAO,CAAC,eAAe,CAAC,CA4X3B"}