@orchestration-ai/sdk 0.2.0 → 0.4.0

package/README.md

@@ -1,6 +1,6 @@
 # @orchestration-ai/sdk
 
-TypeScript SDK for [Orchestration AI](https://orchestration-ai.com) — The Operating System for AI-Powered Businesses.
+TypeScript SDK for [Orchestration AI](https://orchestration-ai.com) - The Operating System for AI-Powered Businesses.
 
 Works in both **Node.js** and the **browser** using the same package.
 
@@ -10,307 +10,379 @@ Works in both **Node.js** and the **browser** using the same package.
 npm install @orchestration-ai/sdk
 ```
 
-## Quick Start
+## Building Applications
 
-The SDK exports a pre-configured `client` with the correct base URL. Just import and use:
+The SDK provides everything you need to build Orchestration AI applications that expose services and tools to agents.
 
-```typescript
-import { client } from '@orchestration-ai/sdk/client.gen';
-import { workspaceFind } from '@orchestration-ai/sdk/sdk.gen';
+### Quick Start - Define an Application
 
-const response = await workspaceFind();
-console.log(response.data);
+```typescript
+import { createApp, defineService } from '@orchestration-ai/sdk/app-builder';
+
+createApp()
+  .permissions([
+    { permission_name: "role_agent_reader", justification: "Read agent context." },
+    { permission_name: "role_agent_writer", justification: "Register endpoints." },
+  ])
+  .service(defineService({
+    unique_name: "my-service",
+    service_name: "My Service",
+    service_description: "Does useful things for agents.",
+    defaultSettings: [
+      { setting_name: "API_KEY", setting_description: "External API key", setting_type: "Secret", text_value: "" },
+    ],
+    description: [
+      {
+        path: "do_thing",
+        method: "POST",
+        description: "Performs an action.",
+        parameters: {
+          input: { type: "string", optional: false, description: "The input value." },
+        },
+      },
+    ],
+    tools: {
+      do_thing: async (body, context, engineClient, apiClient) => {
+        // body is the request payload
+        // context contains the agent identity
+        // engineClient is for engine calls (sendMessages, getContext)
+        // apiClient is for API calls (settingFindByAgent, endpointCreate, etc.)
+        return { result: `Processed: ${body.input}` };
+      },
+    },
+  }))
+  .listen(3001);
 ```
 
-## Authentication
+Visit `http://localhost:3001/explore` to see your services and test tools interactively.
 
-### Node.js (Server-Side)
+### Application Structure
+
+An application consists of:
+
+- **Permissions** - Roles the app requires (granted on installation)
+- **Services** - Each service exposes tools that agents can call
+
+### Service Definition
+
+Each service has:
 
-For server-to-server authentication, use the **client_credentials** OAuth flow. The SDK manages token acquisition and refresh automatically:
+| Field | Description |
+|-------|-------------|
+| `unique_name` | URL-safe identifier |
+| `service_name` | Human-readable name |
+| `service_description` | What the service does |
+| `defaultSettings` | Settings created when the service is installed |
+| `description` | Static array or dynamic function returning tool descriptions |
+| `touch` | Called when the service's context may have changed |
+| `tools` | Handler functions for each tool |
+
+### Handler Signatures
+
+All handlers receive the engine client and API client:
 
 ```typescript
-import { client } from '@orchestration-ai/sdk/client.gen';
-import { setupClientCredentials } from '@orchestration-ai/sdk/oauth-utils';
-import { workspaceFind } from '@orchestration-ai/sdk/sdk.gen';
+// Tool handler
+(body: any, context: Context, engineClient: Client, apiClient: Client) => unknown | Promise<unknown>
 
-// Setup once — tokens are fetched and refreshed automatically
-setupClientCredentials(client, {
-  client_id: 'your-client-id',
-  client_secret: 'your-client-secret',
-  scope: 'role_admin', // any supported role as scope
-});
+// Touch handler
+(context: Context, engineClient: Client, apiClient: Client) => void | Promise<void>
 
-// All requests are now authenticated
-const workspaces = await workspaceFind();
+// Description handler (dynamic)
+(context: Context, engineClient: Client, apiClient: Client) => ServiceDescription | Promise<ServiceDescription>
 ```
 
-The SDK will:
-- Automatically obtain an access token via `client_credentials` on the first request
-- Re-fetch the token when it expires (with a 30s buffer)
-- Retry once on 401 responses with a fresh token
-- Deduplicate concurrent token requests
+### Two Clients
 
-The `scope` parameter accepts any supported role (e.g. `role_admin`, `role_workspace_writer`, `role_agent_reader`). See [Roles & Permissions](#roles--permissions) for the full list.
+The app-builder provides two pre-configured clients to every handler:
 
-### Browser (Client-Side)
+| Client | Purpose | Auth |
+|--------|---------|------|
+| `engineClient` | Internal engine calls (`sendMessages`, `getContext`) | Bearer access key |
+| `apiClient` | Public API calls (`settingFindByAgent`, `endpointCreate`, `linkCreate`) | OAuth client_credentials |
+
+### Static vs Dynamic Descriptions
 
-Browser apps should never expose a `client_secret`. The SDK provides utilities to manage the OAuth redirect flow and token storage. Token acquisition and refresh should be handled by your backend.
+**Static** - TypeScript enforces that `tools` keys match the `path` values in `description`:
 
 ```typescript
-import { client } from '@orchestration-ai/sdk/client.gen';
-import {
-  setupBrowserAuth,
-  initiateLogin,
-  parseLoginRedirect,
-  saveLogin,
-  getCurrentLogin,
-  isLoginExpired,
-  logout,
-} from '@orchestration-ai/sdk/oauth-utils';
-
-// Attach stored tokens to all requests automatically
-// Optionally provide a refresh callback for automatic token renewal
-setupBrowserAuth(client, {
-  onRefreshToken: async () => {
-    // Call your backend to refresh the token
-    const response = await fetch('/api/auth/refresh');
-    if (!response.ok) return null;
-    return response.json(); // must return OAuthTokens shape
+import { defineService } from '@orchestration-ai/sdk/app-builder';
+
+export const myService = defineService({
+  unique_name: "calculator",
+  service_name: "Calculator",
+  service_description: "Math operations.",
+  description: [
+    { path: "add", method: "POST", description: "Adds two numbers.", parameters: { a: { type: "number", optional: false, description: "First number" }, b: { type: "number", optional: false, description: "Second number" } } },
+  ],
+  tools: {
+    add: (body) => ({ result: body.a + body.b }),
+    // TypeScript error if you add a tool not in description, or miss one
+  },
+});
+```
+
+**Dynamic** - When the description depends on context/settings:
+
+```typescript
+import { defineServiceWithDynamicDescription } from '@orchestration-ai/sdk/app-builder';
+
+export const myService = defineServiceWithDynamicDescription({
+  unique_name: "conditional",
+  service_name: "Conditional Service",
+  service_description: "Tools depend on settings.",
+  description: async (context, engineClient, apiClient) => {
+    const { data } = await settingFindByAgent({ client: apiClient, path: { ... } });
+    // Return different tools based on settings
+    return [...];
+  },
+  tools: {
+    tool_a: (body, context) => { ... },
+    tool_b: (body, context) => { ... },
   },
 });
 ```
 
-#### OAuth Login Flow
+### Touch Handler
 
-**Step 1: Initiate login (redirects the browser)**
+Called by the engine when a service's context may have changed. Use it to register endpoints or links:
 
 ```typescript
-import { client } from '@orchestration-ai/sdk/client.gen';
-import { initiateLogin } from '@orchestration-ai/sdk/oauth-utils';
-
-function handleLoginClick() {
-  initiateLogin(client.getConfig().baseURL, {
-    client_id: 'your-client-id',
-    redirect_uri: 'https://your-app.com/callback',
-    scope: 'role_admin', // any supported role as scope
-  }, 'optional-state-value');
+touch: async (context, engineClient, apiClient) => {
+  await endpointCreate({
+    client: apiClient,
+    path: {
+      workspaceId: context.identity.workspaceId,
+      orchestrationId: context.identity.orchestrationId,
+      agentId: context.identity.agentId,
+    },
+    body: {
+      description: "Webhook for receiving events.",
+      endpoint: `https://my-app.com/webhook/${context.identity.layerId}`,
+    },
+  });
 }
 ```
 
-This redirects the user to the Orchestration AI login page.
+### Settings
 
-**Step 2: Handle the redirect callback**
+Three types of settings:
+
+| Type | Use Case |
+|------|----------|
+| `Text` | General configuration values |
+| `Boolean` | Feature flags, toggles |
+| `Secret` | API keys, passwords (treated securely by the engine) |
 
-On your callback page (e.g. `/callback`), parse the redirect result and exchange the code via your backend:
+Utility functions for reading settings:
 
 ```typescript
-import { parseLoginRedirect, saveLogin } from '@orchestration-ai/sdk/oauth-utils';
+import { getBooleanSetting, getTextSetting, getSecretSetting } from '@orchestration-ai/sdk/services';
 
-const result = parseLoginRedirect();
+const enabled = getBooleanSetting(settings, "FEATURE_ENABLED");
+const host = getTextSetting(settings, "SMTP_HOST");
+const apiKey = getSecretSetting(settings, "API_KEY");
+```
 
-if (result.granted) {
-  // Send the code to your backend to exchange for tokens securely
-  // IMPORTANT: pass the same redirect_uri used in initiateLogin
-  const tokens = await fetch('/api/auth/exchange', {
-    method: 'POST',
-    body: JSON.stringify({
-      code: result.code,
-      redirect_uri: 'https://your-app.com/callback',
-    }),
-  }).then(r => r.json());
+### Sending Messages to Agents
 
-  // Save the tokens — setupBrowserAuth will attach them to future requests
-  saveLogin(tokens);
-} else {
-  console.error('Login denied:', result.error, result.error_description);
-}
+Use the engine client to send messages:
+
+```typescript
+import { sendMessages } from '@orchestration-ai/sdk/services';
+
+const response = await sendMessages(
+  agentId,
+  layerIndex,
+  [{ message: "Hello from my service" }],
+  context.identity.layerId,
+  engineClient
+);
 ```
 
-#### Token Refresh
+### Getting Agent Context
+
+```typescript
+import { getContext } from '@orchestration-ai/sdk/services';
+
+const context = await getContext(layerId, engineClient);
+// context.identity.agentId, .layerId, .orchestrationId, .workspaceId, etc.
+```
 
-If you provided `onRefreshToken` to `setupBrowserAuth`, token refresh is handled automatically — both proactively when the token is about to expire and reactively on 401 responses.
+### Custom Endpoints
 
-If you prefer to handle refresh manually:
+Access the underlying Express app and HTTP server for custom routes or WebSockets:
 
 ```typescript
-import { isLoginExpired, saveLogin, logout } from '@orchestration-ai/sdk/oauth-utils';
-
-if (isLoginExpired()) {
-  const response = await fetch('/api/auth/refresh');
-  if (response.ok) {
-    saveLogin(await response.json());
-  } else {
-    logout();
-  }
-}
+const app = createApp().service(myService);
+
+// Custom route
+app.expressApp.post("/custom/:id", (req, res) => { ... });
+
+// WebSocket
+import { Server } from "socket.io";
+const io = new Server(app.httpServer, { path: "/ws" });
+io.on("connection", (socket) => { ... });
+
+app.listen(3001);
 ```
 
-#### Logout
+### Explore Page
 
-```typescript
-import { logout } from '@orchestration-ai/sdk/oauth-utils';
+The `/explore` endpoint renders an interactive page showing all services, tools, and permissions. You can test tools directly from the browser.
 
-logout(); // Clears stored tokens from localStorage
+Disable in production:
+
+```typescript
+createApp({ explore: false }).service(...).listen(3001);
 ```
 
-## API Usage Examples
+## Client Factories
+
+### createEngineClient
 
-### Workspaces
+For calling engine internal endpoints:
 
 ```typescript
-import { workspaceFind, workspaceCreate, workspaceFindById } from '@orchestration-ai/sdk/sdk.gen';
+import { createEngineClient } from '@orchestration-ai/sdk/services';
 
-// List workspaces
-const { data } = await workspaceFind({ query: { limit: 10, offset: 0 } });
+// Production (default URL)
+const client = createEngineClient(accessKey);
 
-// Create a workspace
-const { data: workspace } = await workspaceCreate({
-  body: { workspace_name: 'My Workspace' },
-});
+// Custom URL
+const client = createEngineClient("https://my-engine.com", accessKey);
 
-// Get a workspace by ID
-const { data: ws } = await workspaceFindById({ path: { id: 'workspace-id' } });
+// Nullable URL (falls back to production)
+const client = createEngineClient(process.env.ENGINE_URL ?? null, accessKey);
 ```
 
-### Orchestrations
+### createApplicationClient
+
+For calling another OAI application's services:
 
 ```typescript
-import {
-  orchestrationFindByWorkspace,
-  orchestrationCreate,
-} from '@orchestration-ai/sdk/sdk.gen';
-
-// List orchestrations in a workspace
-const { data } = await orchestrationFindByWorkspace({
-  path: { workspaceId: 'workspace-id' },
-});
+import { createApplicationClient, listServices, callServiceTool } from '@orchestration-ai/sdk/services';
 
-// Create an orchestration
-const { data: orch } = await orchestrationCreate({
-  path: { workspaceId: 'workspace-id' },
-  body: {
-    orchestration_name: 'My Orchestration',
-    orchestration_description: 'Handles customer support',
-  },
-});
+const client = createApplicationClient(application, layerId);
+const services = await listServices(client);
+const result = await callServiceTool("service-name", "tool-path", client, { body: { key: "value" } });
 ```
 
-### Agents
+### createApiClient
+
+For making authenticated API calls with OAuth:
 
 ```typescript
-import { agentFindByOrchestration, agentCreate } from '@orchestration-ai/sdk/sdk.gen';
+import { createApiClient } from '@orchestration-ai/sdk/services';
+import { setupClientCredentials } from '@orchestration-ai/sdk/oauth-utils';
 
-// List agents
-const { data } = await agentFindByOrchestration({
-  path: { workspaceId: 'ws-id', orchestrationId: 'orch-id' },
+const apiClient = createApiClient();
+setupClientCredentials(apiClient, {
+  client_id: accessKey,
+  client_secret: `${accessKey}:${workspaceOwnerId}`,
 });
 
-// Create an agent
-const { data: agent } = await agentCreate({
-  path: { workspaceId: 'ws-id', orchestrationId: 'orch-id' },
-  body: {
-    agent_name: 'Support Agent',
-    agent_description: 'Handles tier 1 support tickets',
-  },
+// Now use with sdk.gen functions
+await settingFindByAgent({ client: apiClient, path: { ... } });
+```
+
+## Authentication
+
+### Node.js (Server-Side)
+
+For server-to-server authentication, use the **client_credentials** OAuth flow:
+
+```typescript
+import { client } from '@orchestration-ai/sdk/client.gen';
+import { setupClientCredentials } from '@orchestration-ai/sdk/oauth-utils';
+
+setupClientCredentials(client, {
+  client_id: 'your-client-id',
+  client_secret: 'your-client-secret',
+  scope: 'role_admin',
 });
 ```
 
-### Error Handling
+The SDK automatically obtains and refreshes tokens.
+
+### Browser (Client-Side)
 
 ```typescript
-import { workspaceFind } from '@orchestration-ai/sdk/sdk.gen';
+import { client } from '@orchestration-ai/sdk/client.gen';
+import { setupBrowserAuth, initiateLogin, parseLoginRedirect, saveLogin, logout } from '@orchestration-ai/sdk/oauth-utils';
+
+setupBrowserAuth(client, {
+  onRefreshToken: async () => {
+    const response = await fetch('/api/auth/refresh');
+    return response.ok ? response.json() : null;
+  },
+});
 
-const response = await workspaceFind();
+// Initiate login
+initiateLogin(client.getConfig().baseURL, {
+  client_id: 'your-client-id',
+  redirect_uri: 'https://your-app.com/callback',
+});
 
-if (response.error) {
-  console.error('Request failed:', response.error);
-} else {
-  console.log('Workspaces:', response.data);
+// Handle callback
+const result = parseLoginRedirect();
+if (result.granted) {
+  const tokens = await fetch('/api/auth/exchange', {
+    method: 'POST',
+    body: JSON.stringify({ code: result.code, redirect_uri: '...' }),
+  }).then(r => r.json());
+  saveLogin(tokens);
 }
 ```
 
-### Using throwOnError
+## API Usage Examples
 
 ```typescript
-import { workspaceFind } from '@orchestration-ai/sdk/sdk.gen';
+import { workspaceFind, orchestrationCreate, agentCreate } from '@orchestration-ai/sdk/sdk.gen';
 
-try {
-  const response = await workspaceFind({ throwOnError: true });
-  console.log('Workspaces:', response.data);
-} catch (error) {
-  console.error('Request failed:', error);
-}
+// List workspaces
+const { data } = await workspaceFind();
+
+// Create an orchestration
+const { data: orch } = await orchestrationCreate({
+  path: { workspaceId: 'ws-id' },
+  body: { orchestration_name: 'My Orchestration', orchestration_description: '...' },
+});
+
+// Create an agent
+const { data: agent } = await agentCreate({
+  path: { workspaceId: 'ws-id', orchestrationId: 'orch-id' },
+  body: { agent_name: 'Support Agent', agent_description: '...' },
+});
 ```
 
 ## Roles & Permissions
 
-Access control uses a hierarchical role system. Higher-level roles inherit all permissions from their children.
+Applications declare permissions using Casbin role names:
 
-### Top-Level Roles
+| Role | Description |
+|------|-------------|
+| `role_admin` | Full access to everything |
+| `role_workspace_admin` | Full workspace + orchestration + agent access |
+| `role_agent_reader` | Read agent data |
+| `role_agent_writer` | Read + create + update agents |
+| `role_agent_admin` | Full agent CRUD |
+| `role_service_reader` | Read services |
 
-| Role | Inherits |
-|------|----------|
-| `role_admin` | `role_workspace_admin`, `role_application_admin`, `role_access_admin`, `role_llm_keys_admin`, `role_llm_reader`, `role_llm_lister`, `role_service_reader`, `role_service_lister`, `role_day_pass_transaction_lister` |
+See the full hierarchy in the [Roles & Permissions](#roles-hierarchy) section below.
 
-### Admin Roles
+### Roles Hierarchy
 
 | Role | Inherits |
 |------|----------|
+| `role_admin` | All admin roles + `role_llm_reader`, `role_llm_lister`, `role_service_reader`, `role_service_lister`, `role_day_pass_transaction_lister` |
 | `role_workspace_admin` | `role_workspace_writer`, `role_workspace_lister`, `role_workspace_deleter`, `role_orchestration_admin` |
 | `role_orchestration_admin` | `role_orchestration_writer`, `role_orchestration_lister`, `role_orchestration_deleter`, `role_agent_admin` |
 | `role_agent_admin` | `role_agent_writer`, `role_agent_lister`, `role_agent_deleter` |
 | `role_application_admin` | `role_application_writer`, `role_application_lister`, `role_application_deleter` |
 | `role_access_admin` | `role_access_writer`, `role_access_lister`, `role_access_deleter` |
-| `role_llm_keys_admin` | `role_llm_keys_writer`, `role_llm_keys_lister` |
-
-### Writer Roles
-
-| Role | Inherits |
-|------|----------|
-| `role_workspace_writer` | `role_workspace_inserter`, `role_workspace_reader`, `role_workspace_updater` |
-| `role_orchestration_writer` | `role_orchestration_inserter`, `role_orchestration_reader`, `role_orchestration_updater` |
-| `role_agent_writer` | `role_agent_inserter`, `role_agent_reader`, `role_agent_updater` |
-| `role_application_writer` | `role_application_inserter`, `role_application_reader`, `role_application_updater` |
-| `role_access_writer` | `role_access_inserter`, `role_access_reader` |
-| `role_llm_keys_writer` | `role_llm_keys_inserter`, `role_llm_keys_reader`, `role_llm_keys_updater` |
-
-### Granular Permissions
-
-Each resource has fine-grained permissions:
-
-- `*_reader` — Read a single resource by ID
-- `*_lister` — List/query resources
-- `*_inserter` — Create new resources
-- `*_updater` — Update existing resources
-- `*_deleter` — Delete resources
 
-### Example: Granting Access
-
-```typescript
-import { accessCreate } from '@orchestration-ai/sdk/sdk.gen';
-
-// Grant a user full admin access to a workspace
-await accessCreate({
-  body: {
-    resource_id: 'workspace-id',
-    principal_id: 'user-uid',
-    principal_name: 'Jane Doe',
-    principal_email: 'jane@example.com',
-    role: 'role_admin',
-  },
-});
-
-// Grant read-only access to orchestrations
-await accessCreate({
-  body: {
-    resource_id: 'workspace-id',
-    principal_id: 'user-uid',
-    principal_name: 'Viewer',
-    principal_email: 'viewer@example.com',
-    role: 'role_orchestration_reader',
-  },
-});
-```
+Writer roles inherit inserter + reader + updater. Each resource has `_reader`, `_lister`, `_inserter`, `_updater`, `_deleter` granular permissions.
 
 ## License
 

package/dist/cjs/app-builder.d.ts

@@ -0,0 +1,39 @@
+import express from "express";
+import { type Server as HttpServer } from "node:http";
+import type { Client } from "./client";
+import type { Context, Permission, ServiceDescription, Setting } from "./shared-types";
+export type ToolHandler = (body: any, context: Context, engineClient: Client, apiClient: Client) => unknown | Promise<unknown>;
+export type TouchHandler = (context: Context, engineClient: Client, apiClient: Client) => void | Promise<void>;
+export type DescriptionHandler = (context: Context, engineClient: Client, apiClient: Client) => ServiceDescription | Promise<ServiceDescription>;
+type ExtractPaths<T extends ServiceDescription> = T[number]["path"];
+export type ServiceDefinition<TDesc extends ServiceDescription | DescriptionHandler = ServiceDescription | DescriptionHandler> = {
+    unique_name: string;
+    service_name: string;
+    service_description: string;
+    defaultSettings?: Setting[];
+    description: TDesc;
+    touch?: TouchHandler;
+    tools?: TDesc extends ServiceDescription ? Record<ExtractPaths<TDesc>, ToolHandler> : Record<string, ToolHandler>;
+};
+export declare function defineService<const TDesc extends ServiceDescription>(definition: ServiceDefinition<TDesc>): ServiceDefinition<TDesc>;
+export declare function defineServiceWithDynamicDescription(definition: ServiceDefinition<DescriptionHandler>): ServiceDefinition<DescriptionHandler>;
+export type AppConfig = {
+    port?: number | string;
+    permissions?: Permission[];
+    engineUrl?: string;
+    accessKey?: string;
+    /** Set to false to disable the /explore page. Defaults to true. */
+    explore?: boolean;
+};
+export type OaiApp = {
+    service: (definition: ServiceDefinition<any>) => OaiApp;
+    permissions: (permissions: Permission[]) => OaiApp;
+    listen: (port?: number | string) => HttpServer;
+    expressApp: express.Application;
+    httpServer: HttpServer;
+};
+export type { Client } from "./client";
+export type { Context, Permission, ServiceDescription, Setting } from "./shared-types";
+export { getBooleanSetting, getTextSetting, getSecretSetting } from "./shared-types";
+export declare function createApp(config?: AppConfig): OaiApp;
+//# sourceMappingURL=app-builder.d.ts.map

package/dist/cjs/app-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-builder.d.ts","sourceRoot":"","sources":["../../typescript/app-builder.ts"],"names":[],"mappings":"AAAA,OAAO,OAAgD,MAAM,SAAS,CAAC;AACvE,OAAO,EAAgB,KAAK,MAAM,IAAI,UAAU,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,KAAK,EACV,OAAO,EACP,UAAU,EACV,kBAAkB,EAClB,OAAO,EACR,MAAM,gBAAgB,CAAC;AAMxB,MAAM,MAAM,WAAW,GAAG,CACxB,IAAI,EAAE,GAAG,EACT,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,KACd,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEhC,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE/G,MAAM,MAAM,kBAAkB,GAAG,CAC/B,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,KACd,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAEtD,KAAK,YAAY,CAAC,CAAC,SAAS,kBAAkB,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,MAAM,MAAM,iBAAiB,CAAC,KAAK,SAAS,kBAAkB,GAAG,kBAAkB,GAAG,kBAAkB,GAAG,kBAAkB,IAAI;IAC/H,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC;IAC5B,WAAW,EAAE,KAAK,CAAC;IACnB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,KAAK,CAAC,EAAE,KAAK,SAAS,kBAAkB,GACpC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,GACxC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CACjC,CAAC;AAEF,wBAAgB,aAAa,CAAC,KAAK,CAAC,KAAK,SAAS,kBAAkB,EAClE,UAAU,EAAE,iBAAiB,CAAC,KAAK,CAAC,GACnC,iBAAiB,CAAC,KAAK,CAAC,CAE1B;AAED,wBAAgB,mCAAmC,CACjD,UAAU,EAAE,iBAAiB,CAAC,kBAAkB,CAAC,GAChD,iBAAiB,CAAC,kBAAkB,CAAC,CAEvC;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,MAAM,GAAG;IACnB,OAAO,EAAE,CAAC,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC;IACxD,WAAW,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,MAAM,CAAC;IACnD,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,KAAK,UAAU,CAAC;IAC/C,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC;IAChC,UAAU,EAAE,UAAU,CAAC;CACxB,CAAC;AAGF,YAAY,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACvC,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AA0arF,wBAAgB,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,MAAM,CAqJpD"}