@panorama-ai/gateway 2.30.279 → 2.31.9

package/README.md

@@ -5,8 +5,8 @@ Gateway service for connecting host-side runtime capabilities to Panorama.
 In local mode, a team can pair multiple gateways from different machines; each
 gateway instance is identified by its own `gateway_id`.
 
-In managed mode, Panorama provisions the host and starts the gateway with scoped
-managed-runtime credentials.
+VM guest mode starts the same gateway inside a provisioned VM with scoped
+drive-sync credentials so the guest can mirror Panorama drive resources.
 
 ## Usage
 
@@ -36,16 +36,6 @@ Start this gateway and begin listening for jobs (foreground in dev, background f
 pnpm --filter @panorama-ai/gateway dev -- start
 ```
 
-Run as a Panorama-managed host runtime:
-
-```bash
-panorama-gateway start --mode managed
-```
-
-Managed mode is only intended for Panorama-provisioned hosts with the managed
-runtime environment contract described below. It is not a replacement for
-locally paired user gateways.
-
 Force this gateway into the background (built binary only):
 
 ```bash
@@ -120,45 +110,44 @@ You can always point to a specific env file with `--env-file`.
 
 The gateway runs CLI providers using the current user environment (HOME, PATH, etc.) so it matches what you see when running the CLIs directly.
 
-Managed mode is for Panorama-provisioned runtimes. It reads the managed Linux
-host environment contract:
+Foreground gateway mode is also used inside managed VM guests. VM guest
+bootstrap persists `vmGuest` identity in the gateway config and passes the
+backend credentials needed by the gateway:
 
-- `PANORAMA_AGENT_ID`
-- `PANORAMA_LINUX_HOST_ID`
-- `PANORAMA_LINUX_HOST_ATTEMPT_GENERATION`
 - `PANORAMA_SUPABASE_URL`
 - `PANORAMA_SUPABASE_ANON_KEY`
-- `PANORAMA_LINUX_HOST_CONTROL_URL`
-- `PANORAMA_LINUX_HOST_CONTROL_TOKEN`
-- `PANORAMA_TOOL_EXECUTION_URL`
-- `PANORAMA_TOOL_EXECUTION_TOKEN`
-- `PANORAMA_MANAGED_RUNTIME_ID` (optional)
-- `PANORAMA_MANAGED_RUNTIME_RETRY_BACKOFF_MS` (optional)
-- `PANORAMA_MANAGED_RUNTIME_CONTROL_TIMEOUT_MS` (optional, default `30000`)
-- `PANORAMA_MANAGED_RUNTIME_OUTPUT_CAPTURE_BYTES` (optional, default `5000000`)
-- `PANORAMA_MANAGED_RUNTIME_HEARTBEAT_INTERVAL_MS` (optional)
-- `PANORAMA_MANAGED_RUNTIME_MAX_CONSECUTIVE_HEARTBEAT_FAILURES` (optional)
-- `PANORAMA_DRIVE_SYNC_ENABLED` (optional, default `false`; managed Linux host providers set `1` only when `LINUX_DRIVE_SYNC_ENABLED` is enabled)
+- `PANORAMA_VM_BOOTSTRAP_TOKEN`
+- `PANORAMA_VM_BOOTSTRAP_FORCE` (optional)
+- `PANORAMA_VM_DEVICE_NAME` (optional)
+
+When the worker has `VM_DRIVE_SYNC_ENABLED` enabled, the VM guest receives
+`PANORAMA_DRIVE_SYNC_ENABLED=1` plus these low-level sync settings:
+
+- `PANORAMA_DRIVE_SYNC_ENABLED` (optional, default `false`)
 - `PANORAMA_DRIVE_SYNC_ROOT` (optional, default `/panorama/drives`)
 - `PANORAMA_DRIVE_SYNC_STATE_DIR` (optional, default `/var/lib/panorama/drive-sync`)
-- `PANORAMA_DRIVE_SYNC_CLIENT_KEY` (optional; default is derived from host, agent, and local sync state)
+- `PANORAMA_DRIVE_SYNC_CLIENT_KEY` (optional; default is derived from VM identity and local sync state; managed VM guest provisioning does not forward this override)
 - `PANORAMA_DRIVE_SYNC_CHANGE_LIMIT` (optional, default `50`)
 - `PANORAMA_DRIVE_SYNC_MAX_BATCHES_PER_TICK` (optional, default `25`)
 - `PANORAMA_DRIVE_SYNC_DEBOUNCE_MS` (optional, default `1000`)
 - `PANORAMA_DRIVE_SYNC_POLL_INTERVAL_MS` (optional, default `5000`)
 - `PANORAMA_DRIVE_SYNC_LOCAL_AUDIT_INTERVAL_MS` (optional, default `300000`)
 - `PANORAMA_DRIVE_SYNC_NETWORK_TIMEOUT_MS` (optional, default `60000`)
+The foreground gateway starts a non-fatal drive sync supervisor scoped to that
+VM. If sync startup fails, the gateway still accepts normal VM remote-shell jobs.
 
 ## Runtime Structure
 
-The gateway package is published to NPM as a single CLI, but internally it has
-separate runtime boundaries for local and managed execution.
+The gateway package is published to NPM as a single CLI, with separate
+boundaries for local host orchestration and VM guest drive sync.
 
 Local runtime modules:
 
 - `src/gateway-local-runtime.ts` owns local startup orchestration: paired
   session loading, provider validation, job controller wiring, signal handling,
   and lifecycle coordination.
+- `src/local-runtime/drive-sync-supervisor.ts` owns optional VM guest drive sync
+  startup/shutdown for foreground gateways that have `vmGuest` identity.
 - `src/local-runtime/heartbeat-supervisor.ts` owns local capability refreshes
   and heartbeat reporting.
 - `src/local-runtime/restart-supervisor.ts` owns package/probe watching and
@@ -166,41 +155,42 @@ Local runtime modules:
 - `src/local-runtime/shutdown-supervisor.ts` owns drain, termination, offline
   heartbeat, and residual job cleanup behavior.
 
-Managed runtime modules:
-
-- `src/managed-runtime.ts` owns managed startup orchestration and dependency
-  wiring.
-- `src/managed-runtime/control-client.ts` owns managed host-control HTTP calls.
-- `src/managed-runtime/realtime.ts` owns Supabase session setup and wake-signal
-  subscription behavior.
-- `src/managed-runtime/execution-dispatcher.ts` owns managed shell execution
-  dispatch, result capture, and completion reporting.
-- `src/managed-runtime/heartbeat.ts`, `src/managed-runtime/host-state.ts`, and
-  `src/managed-runtime/wake-signal.ts` own managed heartbeat, host identity
-  derivation, and wake-signal parsing helpers.
+VM guest drive-sync modules:
+
+- `src/drive-sync/config.ts` resolves the VM guest drive-sync environment
+  contract.
+- `src/drive-sync/drive-sync.ts` owns the sync loop that reconciles local files
+  with Panorama drive entries.
+- `src/drive-sync/drive-sync-planner.ts`,
+  `src/drive-sync/drive-sync-remote-planner.ts`, and
+  `src/drive-sync/drive-sync-state-applier.ts` own sync planning and local
+  state application.
+- `src/drive-sync/drive-sync-filesystem.ts` and
+  `src/drive-sync/drive-sync-transfer.ts` own filesystem scans and direct file
+  transfer helpers.
+- `src/drive-sync/drive-sync-scheduler.ts` owns periodic sync execution.
 
 Shared runtime helpers:
 
 - `src/process-output-capture.ts` owns bounded stdout/stderr capture for shell
-  execution, provider streaming, and managed command execution.
+  execution and provider streaming.
 - `src/provider-runtime-utils.ts` owns provider environment construction and
   command/result parsing helpers used by CLI provider adapters.
 - `src/subagent-adapters/output-format.ts` owns shared subagent output format
   normalization.
 
-The key split is not "VM versus non-VM"; it is which control surface drives the
-host. Local mode is driven by a paired gateway session and user-delegated host
-capabilities. Managed mode is driven by Panorama-scoped runtime credentials and
-managed host control.
+Local mode is driven by a paired gateway session and user-delegated host
+capabilities. VM guest drive sync is scoped by VM identity and only mirrors
+Panorama drive resources for that VM.
 
 ## Execution Bridge and Trust Model
 
-The gateway has two runtime modes:
+The gateway has two primary host surfaces:
 
-- Local mode connects Panorama's control plane to a machine/account the team
+- Local gateways connect Panorama's control plane to a machine/account the team
   controls.
-- Managed mode connects Panorama's control plane to a Panorama-provisioned host
-  using scoped runtime credentials.
+- VM guest drive sync runs inside a provisioned VM and mirrors Panorama drive
+  resources through scoped VM credentials.
 
 Local mode:
 
@@ -218,13 +208,11 @@ Local mode:
 - Gateway state is stored locally under `~/.panorama/gateway` by default and includes pairing/session tokens needed for reconnects.
 - On POSIX platforms, gateway state directories/files are enforced as owner-only (`0700` for dirs, `0600` for files).
 
-Managed mode:
+VM guest drive sync:
 
-- Gateway processes run as Panorama-managed runtime participants.
-- Managed hosts use scoped control and tool execution tokens.
-- Shell child processes receive the tool execution token, not the host control
-  token.
-- Managed mode does not use paired-user gateway session material.
+- Guest gateway processes run with scoped VM identity.
+- Drive sync uses only the VM drive-sync token and linked VM metadata.
+- VM guest drive sync does not use paired-user gateway session material.
 
 Recommended deployment model:
 
@@ -273,8 +261,6 @@ Existing capability names map to these product surfaces:
   `remote_shell` resource.
 - `machine_control` means direct host-control authority is available for
   elevated gateway subagents and remote shell command execution.
-- `linux_agent_executions` is separate from gateway jobs; it is the
-  embodied/Linux-agent command-execution queue used by Linux-runtime agents.
 
 Remote shell execution contract:
 
@@ -312,11 +298,11 @@ Use targeted smoke tests when changing one runtime surface:
 
 ```bash
 pnpm --filter @panorama-ai/gateway exec tsx --test test/gateway-start-command.test.ts test/gateway-local-runtime.test.ts test/local-runtime-heartbeat-supervisor.test.ts test/local-runtime-restart-supervisor.test.ts test/local-runtime-shutdown-supervisor.test.ts
-pnpm --filter @panorama-ai/gateway exec tsx --test test/managed-runtime.test.ts test/managed-runtime-helpers.test.ts
+pnpm --filter @panorama-ai/gateway exec tsx --test test/drive-sync.test.ts test/drive-sync-scheduler.test.ts
 ```
 
 `panorama-gateway start` requires paired local gateway state. `panorama-gateway
-start --mode managed` requires Panorama-managed runtime credentials. Prefer the
-packaged CLI check plus targeted runtime tests for local development smoke
-validation unless you are intentionally testing against a live paired gateway or
-managed host.
+start` with VM guest drive sync requires scoped VM drive-sync credentials.
+Prefer the packaged CLI check plus targeted runtime tests for local development
+smoke validation unless you are intentionally testing against a live paired
+gateway or VM guest.

package/dist/cli-args.d.ts

@@ -3,9 +3,7 @@ export interface ParsedArgs {
     positional: string[];
     options: Record<string, string | boolean>;
 }
-export type GatewayRuntimeMode = 'local' | 'managed';
 export declare function parseArgs(argv: string[]): ParsedArgs;
 export declare function getStringOption(options: ParsedArgs['options'], key: string): string | undefined;
-export declare function resolveGatewayRuntimeMode(options: ParsedArgs['options'], env?: NodeJS.ProcessEnv): GatewayRuntimeMode;
 export declare function parseBooleanInput(value: unknown): boolean | null;
 //# sourceMappingURL=cli-args.d.ts.map

package/dist/cli-args.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-args.d.ts","sourceRoot":"","sources":["../src/cli-args.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAA;CAC1C;AAED,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,SAAS,CAAA;AAEpD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAyCpD;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAI/F;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,EAC9B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,kBAAkB,CAOpB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,CAsBhE"}
+{"version":3,"file":"cli-args.d.ts","sourceRoot":"","sources":["../src/cli-args.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAA;CAC1C;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAyCpD;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAI/F;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,CAsBhE"}

package/dist/cli-args.js

@@ -41,14 +41,6 @@ export function getStringOption(options, key) {
         return value;
     return undefined;
 }
-export function resolveGatewayRuntimeMode(options, env = process.env) {
-    const rawMode = getStringOption(options, 'mode') || env.PANORAMA_GATEWAY_MODE || 'local';
-    const mode = rawMode.trim().toLowerCase();
-    if (mode === 'local' || mode === 'managed') {
-        return mode;
-    }
-    throw new Error(`Unsupported gateway mode: ${rawMode}`);
-}
 export function parseBooleanInput(value) {
     if (typeof value === 'boolean')
         return value;

package/dist/cli-args.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-args.js","sourceRoot":"","sources":["../src/cli-args.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,cAAc,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC9D,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,MAAM,OAAO,GAAqC,EAAE,CAAA;IAEpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,GAAG;YAAE,SAAQ;QAElB,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,UAAU,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YAC/C,MAAK;QACP,CAAC;QAED,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACnD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,CAAA;gBAC3B,SAAQ;YACV,CAAC;YAED,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YAClC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;gBACpB,CAAC,IAAI,CAAC,CAAA;YACR,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;YACtB,CAAC;YACD,SAAQ;QACV,CAAC;QAED,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;YAC5B,SAAQ;QACV,CAAC;QAED,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACtB,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,IAAI,CAAA;IAC1C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;AACzC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAA8B,EAAE,GAAW;IACzE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAA8B,EAC9B,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,qBAAqB,IAAI,OAAO,CAAA;IACxF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACzC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAA;AACzD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAC7C,IACE,UAAU,KAAK,MAAM;YACrB,UAAU,KAAK,GAAG;YAClB,UAAU,KAAK,KAAK;YACpB,UAAU,KAAK,IAAI,EACnB,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IACE,UAAU,KAAK,OAAO;YACtB,UAAU,KAAK,GAAG;YAClB,UAAU,KAAK,IAAI;YACnB,UAAU,KAAK,KAAK,EACpB,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}
+{"version":3,"file":"cli-args.js","sourceRoot":"","sources":["../src/cli-args.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,cAAc,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC9D,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,MAAM,OAAO,GAAqC,EAAE,CAAA;IAEpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,GAAG;YAAE,SAAQ;QAElB,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,UAAU,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YAC/C,MAAK;QACP,CAAC;QAED,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACnD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,CAAA;gBAC3B,SAAQ;YACV,CAAC;YAED,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YAClC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;gBACpB,CAAC,IAAI,CAAC,CAAA;YACR,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;YACtB,CAAC;YACD,SAAQ;QACV,CAAC;QAED,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;YAC5B,SAAQ;QACV,CAAC;QAED,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACtB,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,IAAI,CAAA;IAC1C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;AACzC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAA8B,EAAE,GAAW;IACzE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAC7C,IACE,UAAU,KAAK,MAAM;YACrB,UAAU,KAAK,GAAG;YAClB,UAAU,KAAK,KAAK;YACpB,UAAU,KAAK,IAAI,EACnB,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IACE,UAAU,KAAK,OAAO;YACtB,UAAU,KAAK,GAAG;YAClB,UAAU,KAAK,IAAI;YACnB,UAAU,KAAK,KAAK,EACpB,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}