@parall/daemon 1.34.0 → 1.36.0

package/dist/clip-runtime/browser-profile-manager.d.ts

@@ -1,3 +1,4 @@
+import { type ViewerTurnConfig } from './browser-viewer-streamer.js';
 type BrowserProfileStatus = 'running' | 'stopped' | 'error';
 interface BrowserProfileManagerOptions {
     homeDir: string;
@@ -22,6 +23,7 @@ export declare class BrowserProfileManager {
     private readonly ensuredAccounts;
     private readonly ensuringAccounts;
     private readonly reportedStatuses;
+    private readonly viewer;
     constructor(opts: BrowserProfileManagerOptions);
     invoke({ profileId, account, command, input }: BrowserInvokeRequest): Promise<unknown>;
     ensureRuntime(profileId: string): Promise<void>;
@@ -29,6 +31,14 @@ export declare class BrowserProfileManager {
     stopProfile(profileId: string): Promise<void>;
     resetProfile(profileId: string): Promise<void>;
     stop(): Promise<void>;
+    /**
+     * Viewer control command entrypoint — delegates to BrowserViewerStreamer
+     * (browser-viewer-streamer.ts), which owns the per-profile bb-viewer
+     * subprocesses and viewer tab navigation.
+     */
+    handleViewerCommand(profileId: string, sessionId: string, command: string, input?: Record<string, unknown>, turn?: ViewerTurnConfig): Promise<Record<string, unknown>>;
+    /** Read cdpHost/cdpPort from the bb-browser daemon `GET /status`. */
+    private cdpEndpoint;
     private prepareOpenProfile;
     private openProfileTabOnce;
     private resetProfileOnce;

package/dist/clip-runtime/browser-profile-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-profile-manager.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/browser-profile-manager.ts"],"names":[],"mappings":"AAQA,KAAK,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAE5D,UAAU,4BAA4B;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpF,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7F;AASD,UAAU,oBAAoB;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;CAChB;AA0BD,qBAAa,qBAAqB;IAQpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAPjC,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,QAAQ,CAA4C;IAC5D,OAAO,CAAC,UAAU,CAA8B;IAChD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuC;IACxE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;gBAEjC,IAAI,EAAE,4BAA4B;IAIzD,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IA0CtF,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAe/C,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBhE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7C,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAkBb,kBAAkB;YAYlB,kBAAkB;YAUlB,gBAAgB;YAOhB,oBAAoB;YAKpB,yBAAyB;YAezB,aAAa;YAWb,mBAAmB;IAqBjC;;;;;;;;;;;;OAYG;YACW,uBAAuB;IAiCrC,oFAAoF;YACtE,oBAAoB;YAuBpB,aAAa;YAiCb,qBAAqB;YAKrB,wBAAwB;YAQxB,kBAAkB;YAQlB,yBAAyB;IAqBvC,OAAO,CAAC,YAAY;YAON,WAAW;YAaX,YAAY;YAmBZ,kBAAkB;YAUlB,aAAa;YAUb,iBAAiB;YAsBjB,WAAW;YAmDX,IAAI;CA2BnB"}
+{"version":3,"file":"browser-profile-manager.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/browser-profile-manager.ts"],"names":[],"mappings":"AAMA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAG5F,KAAK,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAE5D,UAAU,4BAA4B;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpF,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7F;AAeD,UAAU,oBAAoB;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;CAChB;AA0BD,qBAAa,qBAAqB;IAYpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAXjC,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,QAAQ,CAA4C;IAC5D,OAAO,CAAC,UAAU,CAA8B;IAChD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuC;IACxE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAI9D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;gBAElB,IAAI,EAAE,4BAA4B;IAWzD,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IA0CtF,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAe/C,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBhE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU7C,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAoB3B;;;;OAIG;IACG,mBAAmB,CACvB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAInC,qEAAqE;YACvD,WAAW;YAWX,kBAAkB;YAYlB,kBAAkB;YAUlB,gBAAgB;YAOhB,oBAAoB;YAKpB,yBAAyB;YAezB,aAAa;YAWb,mBAAmB;IAqBjC;;;;;;;;;;;;OAYG;YACW,uBAAuB;IAiCrC,oFAAoF;YACtE,oBAAoB;YAuBpB,aAAa;YAiCb,qBAAqB;YAKrB,wBAAwB;YAQxB,kBAAkB;YAQlB,yBAAyB;IAqBvC,OAAO,CAAC,YAAY;YAON,WAAW;YAaX,YAAY;YAmBZ,kBAAkB;YAUlB,aAAa;YAUb,iBAAiB;YAsBjB,WAAW;YAmDX,IAAI;CA2BnB"}

package/dist/clip-runtime/browser-profile-manager.js

@@ -2,9 +2,10 @@ import { spawn } from 'node:child_process';
 import { randomBytes } from 'node:crypto';
 import { existsSync, mkdirSync, readFileSync } from 'node:fs';
 import { createRequire } from 'node:module';
-import * as net from 'node:net';
 import * as path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { BrowserViewerStreamer } from './browser-viewer-streamer.js';
+import { findFreePort, formatErrorForLog, sleep } from './subprocess.js';
 const BB_BROWSER_DAEMON_START_TIMEOUT_MS = 15_000;
 class BrowserCommandError extends Error {
     method;
@@ -24,9 +25,20 @@ export class BrowserProfileManager {
     ensuredAccounts = new Set();
     ensuringAccounts = new Map();
     reportedStatuses = new Map();
+    // Live viewer orchestration (bb-viewer streamer subprocesses + viewer nav)
+    // lives in BrowserViewerStreamer; the manager hands it the account-scoped
+    // bb-browser command path via the host interface.
+    viewer;
     constructor(opts) {
         this.opts = opts;
         mkdirSync(this.opts.homeDir, { recursive: true });
+        this.viewer = new BrowserViewerStreamer({
+            log: this.opts.log,
+            sendBrowserCommand: (request) => this.sendCommand(request),
+            ensureAccount: (account) => this.ensureAccount(account),
+            withDaemonRecovery: (operation, label) => this.withDaemonRecovery(operation, label),
+            cdpEndpoint: () => this.cdpEndpoint(),
+        });
     }
     async invoke({ profileId, account, command, input }) {
         if (!profileId)
@@ -105,6 +117,8 @@ export class BrowserProfileManager {
         if (!profileId)
             throw new Error('browser profile id is required');
         this.reportedStatuses.delete(profileId); // see openProfile — lifecycle outcomes always report
+        // A stopped profile can have no live viewer — tear down its streamer.
+        this.viewer.killProfileStreamer(profileId);
         // bb-browser-pro does not expose a single-account "dispose context" command.
         // Server-side stopped status is the authority that gates future invokes.
         this.reportStatus(profileId, 'stopped');
@@ -113,6 +127,8 @@ export class BrowserProfileManager {
         if (!profileId)
             throw new Error('browser profile id is required');
         this.reportedStatuses.delete(profileId); // see openProfile — lifecycle outcomes always report
+        // Reset destroys the account context the viewer is connected to — kill it.
+        this.viewer.killProfileStreamer(profileId);
         try {
             await this.withDaemonRecovery(() => this.resetProfileOnce(profileId), `reset profile ${profileId}`);
             this.reportStatus(profileId, 'stopped');
@@ -124,6 +140,8 @@ export class BrowserProfileManager {
         }
     }
     async stop() {
+        // Tear down all per-profile bb-viewer streamers before the bb-browser daemon.
+        this.viewer.shutdown();
         const daemon = this.daemon;
         this.daemon = null;
         this.starting = null;
@@ -142,6 +160,25 @@ export class BrowserProfileManager {
             daemon.child.kill('SIGTERM');
         }
     }
+    /**
+     * Viewer control command entrypoint — delegates to BrowserViewerStreamer
+     * (browser-viewer-streamer.ts), which owns the per-profile bb-viewer
+     * subprocesses and viewer tab navigation.
+     */
+    async handleViewerCommand(profileId, sessionId, command, input, turn) {
+        return this.viewer.handleViewerCommand(profileId, sessionId, command, input, turn);
+    }
+    /** Read cdpHost/cdpPort from the bb-browser daemon `GET /status`. */
+    async cdpEndpoint() {
+        const daemon = await this.ensureDaemon();
+        const status = await this.post('/status', daemon, undefined, 5_000);
+        const host = status.cdpHost?.trim();
+        const port = status.cdpPort;
+        if (!host || typeof port !== 'number' || !Number.isFinite(port)) {
+            throw new Error('bb-browser /status did not report a CDP endpoint');
+        }
+        return { host, port };
+    }
     async prepareOpenProfile(profileId, url) {
         const accountCreated = await this.ensureAccount(profileId, url !== 'about:blank' ? url : undefined);
         await this.sendCommand({ method: 'tab_list', account: profileId });
@@ -558,10 +595,6 @@ function comparableUrl(url) {
         return null;
     }
 }
-function formatErrorForLog(err) {
-    const message = err instanceof Error ? err.message : String(err);
-    return message.replace(/\s+/g, ' ').slice(0, 300);
-}
 function resolveBbBrowserDaemonPath() {
     // Bundle channels (CDN self-update, desktop, npm bin — all run the flat
     // esbuild artifact with NO node_modules) ship bb-browser as a sibling flat
@@ -582,27 +615,6 @@ function resolveBbBrowserDaemonPath() {
     }
     return full;
 }
-async function findFreePort() {
-    return new Promise((resolve, reject) => {
-        const server = net.createServer();
-        server.unref();
-        server.on('error', reject);
-        server.listen(0, '127.0.0.1', () => {
-            const address = server.address();
-            server.close(() => {
-                if (address && typeof address === 'object') {
-                    resolve(address.port);
-                }
-                else {
-                    reject(new Error('failed to allocate free port'));
-                }
-            });
-        });
-    });
-}
 function randomToken() {
     return randomBytes(16).toString('hex');
 }
-function sleep(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
-}

package/dist/clip-runtime/browser-state-store.d.ts

@@ -0,0 +1,157 @@
+/**
+ * browser-state-store.ts — S3 externalization of a hosted browser profile's
+ * bb-browser state (design hosted-browser-multitenant §3.2, PR4).
+ *
+ * A hosted browser pod is ephemeral: its Chromium user-data dir (BB_BROWSER_HOME /
+ * `homeDir`, where cookies / localStorage / IndexedDB persist) lives on a pod
+ * `emptyDir` that vanishes on restart. To make the profile durable across pod
+ * restarts we snapshot that dir to S3, so a pod HYDRATES on start and CHECKPOINTS
+ * periodically + on drain. Layout (SSOT shared with the Go controller's
+ * state_store.go): `s3://{bucket}/browser-state/{org_id}/{profile_id}/state.tgz`.
+ *
+ * Correctness under pod churn (the hard part):
+ *   - Integrity: each object carries a sha256 + the generation in metadata. Hydrate
+ *     verifies the checksum; a mismatch is treated as "no state" (start fresh),
+ *     never a crash.
+ *   - Fencing (anti-clobber): a stale/fenced pod (older activation generation) must
+ *     NOT overwrite a newer pod's state. checkpoint() reads the current object's
+ *     generation; if it is newer than ours we abort. The write is additionally a
+ *     conditional PUT (IfMatch on the read ETag / IfNoneMatch on create) so a CAS
+ *     race fails closed (412 → abort).
+ *
+ * Graceful degradation: with no bucket configured (feature not provisioned) the
+ * store is DISABLED — hydrate/checkpoint are no-ops and the pod runs stateless.
+ * Read/credential failures never crash the pod; they degrade to "fresh start" on
+ * hydrate and "checkpoint failed" (logged) on write. Durability is best-effort +
+ * on-close (design §3.2 "simplified durability"): a failed checkpoint is bounded
+ * loss (the delta since the last successful checkpoint), logged at the pod — there
+ * is no controller-side final-checkpoint verify or auto-repair.
+ *
+ * This module is imported ONLY by the browser-pod entrypoint, so @aws-sdk/client-s3
+ * lands only in the parall-browser-pod bundle, never the BYOC daemon bundle.
+ */
+export interface BrowserStateLogger {
+    info(msg: string): void;
+    warn(msg: string): void;
+    error(msg: string): void;
+}
+/** buildStateKey is the SSOT key layout, mirrored by the Go controller. */
+export declare function buildStateKey(orgId: string, profileId: string): string;
+/** Thrown by a StateBackend.put when a conditional write precondition fails (S3
+ *  412). The store treats it as "lost the CAS race" and aborts the checkpoint. */
+export declare class PreconditionFailedError extends Error {
+    constructor(message?: string);
+}
+export interface HeadResult {
+    etag: string;
+    metadata: Record<string, string>;
+}
+/**
+ * StateBackend is the narrow object-store surface the store needs, so the CAS +
+ * checksum logic is unit-testable against an in-memory fake without the real SDK.
+ * S3Backend is the live implementation.
+ */
+export interface StateBackend {
+    /** Returns object metadata + ETag, or null when the object does not exist. */
+    head(key: string): Promise<HeadResult | null>;
+    get(key: string): Promise<Buffer>;
+    /** Conditional write: throws PreconditionFailedError on a 412. */
+    put(key: string, body: Buffer, opts: {
+        metadata: Record<string, string>;
+        ifMatch?: string;
+        ifNoneMatch?: string;
+    }): Promise<void>;
+}
+export interface BrowserStateStoreConfig {
+    bucket: string;
+    region: string;
+    orgId: string;
+    profileId: string;
+    /** Lease activation generation — the monotonic fencing token (design §3.2). */
+    generation: number;
+    /** bb-browser user-data dir (BB_BROWSER_HOME) to snapshot/restore. */
+    homeDir: string;
+    /** Optional S3 endpoint (MinIO/dev); empty → AWS S3. */
+    endpoint?: string;
+    log: BrowserStateLogger;
+}
+export interface CheckpointResult {
+    ok: boolean;
+    /** skipped because the store is disabled. */
+    disabled?: boolean;
+    /** aborted: a newer generation already holds the object (we are fenced). */
+    fenced?: boolean;
+    /** aborted: conditional-write CAS race (another writer won). */
+    raced?: boolean;
+    /** skipped: a periodic checkpoint whose content is unchanged since the last upload. */
+    unchanged?: boolean;
+    error?: unknown;
+}
+export interface HydrateResult {
+    hydrated: boolean;
+    disabled?: boolean;
+    checksumMismatch?: boolean;
+    error?: unknown;
+}
+/**
+ * BrowserStateStore orchestrates hydrate/checkpoint over a StateBackend. All
+ * checkpoints (periodic + final) are serialized through a single promise chain so
+ * a drain's final checkpoint can never race an in-flight periodic one.
+ */
+export declare class BrowserStateStore {
+    private readonly cfg;
+    private readonly backend;
+    private readonly key;
+    private chain;
+    private lastUploadedSha;
+    constructor(cfg: BrowserStateStoreConfig, backend?: StateBackend);
+    enabled(): boolean;
+    /**
+     * Download + verify + extract the profile's snapshot into homeDir. MUST run
+     * before bb-browser can launch (the pod calls it at startup, before the provider
+     * stream opens). Never throws: any failure (no object, checksum mismatch,
+     * network/cred error) degrades to a fresh start, since a read failure should not
+     * keep the browser from coming up.
+     */
+    hydrate(): Promise<HydrateResult>;
+    /**
+     * Snapshot homeDir to S3. `final` marks the drain (on-close) checkpoint — the
+     * last best-effort flush before the pod exits. Serialized via the chain so
+     * periodic and final checkpoints never overlap. Never throws — returns a result
+     * the caller logs; a failure is bounded loss, not enforced (simplified durability:
+     * no controller-side verify or auto-repair).
+     */
+    checkpoint(opts: {
+        final: boolean;
+    }): Promise<CheckpointResult>;
+    private doCheckpoint;
+}
+/** sha256 hex of a buffer — the snapshot integrity checksum. */
+export declare function sha256(buf: Buffer): string;
+/**
+ * archiveDir tars a directory (excluding lock/cache cruft) then gzips it in-memory.
+ * Uses the system `tar` (present in the browser-docker image and on dev machines —
+ * no extra npm dep) for the tar, and node:zlib for gzip. Gzip is done by zlib (not
+ * `tar -z`) deliberately: zlib's gzip header has a zeroed mtime, so identical
+ * directory content produces byte-identical archives — which lets a periodic
+ * checkpoint skip a redundant upload when nothing changed. Buffering in memory is
+ * fine for browser state (cookies/localStorage/IndexedDB are small); streaming
+ * multipart upload is a fast-follow if profiles grow large.
+ */
+export declare function archiveDir(dir: string): Promise<Buffer>;
+/** extractArchive ungzips then untars a buffer into destDir (created if missing). */
+export declare function extractArchive(buf: Buffer, destDir: string): Promise<void>;
+/**
+ * A 403 from HeadObject. A profile-scoped pod deliberately lacks s3:ListBucket (the
+ * per-profile tenant-isolation boundary), and S3 answers a MISSING object with 403
+ * (not 404) when the caller can't list the bucket — it won't reveal existence. The
+ * pod still holds s3:GetObject on its own prefix, so an existing object HEADs as 200;
+ * a 403 there therefore means "no object", not a real denial. Treating it as
+ * not-found lets a brand-new profile hydrate fresh AND still checkpoint. This can
+ * never overwrite good state: an existing object never 403s (it 200s), and a
+ * genuinely bad/expired credential 403s the subsequent PutObject too, so the
+ * checkpoint fails — bounded loss, logged at the pod (simplified durability: no
+ * controller-side verify or auto-repair).
+ */
+export declare function isAccessDenied(err: unknown): boolean;
+//# sourceMappingURL=browser-state-store.d.ts.map

package/dist/clip-runtime/browser-state-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-state-store.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/browser-state-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAaH,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAgCD,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED;kFACkF;AAClF,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,SAAwB;CAI5C;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,8EAA8E;IAC9E,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC9C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,kEAAkE;IAClE,GAAG,CACD,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GACjF,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,UAAU,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,kBAAkB,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gEAAgE;IAChE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,uFAAuF;IACvF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,qBAAa,iBAAiB;IAO1B,OAAO,CAAC,QAAQ,CAAC,GAAG;IANtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsB;IAC9C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,KAAK,CAAuC;IACpD,OAAO,CAAC,eAAe,CAAuB;gBAG3B,GAAG,EAAE,uBAAuB,EAC7C,OAAO,CAAC,EAAE,YAAY;IAQxB,OAAO,IAAI,OAAO;IAIlB;;;;;;OAMG;IACG,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC;IA4CvC;;;;;;OAMG;IACH,UAAU,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAUjD,YAAY;CA2D3B;AAoED,gEAAgE;AAChE,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1C;AAED;;;;;;;;;GASG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAM7D;AAED,qFAAqF;AACrF,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhF;AAqDD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAGpD"}