@parall/daemon 1.45.0 → 1.46.0

package/dist/clip-runtime/browser-cdp.js

@@ -0,0 +1,218 @@
+import WebSocket from 'ws';
+/**
+ * Minimal browser-level CDP client — Parall's direct line to the Chromium that
+ * bb-browser manages, for the few operations bb-browser's HTTP surface cannot
+ * express (bb-browser is off-limits for changes; Chrome accepts multiple CDP
+ * clients on the browser endpoint, and Parall already consumes CDP directly for
+ * the live viewer's page websockets + /json/activate).
+ *
+ * Used for cookie-preserving proxy reconciliation: `Storage.getCookies` /
+ * `Storage.setCookies` against a specific browserContextId — the full jar
+ * including HttpOnly cookies, which no page-level API can read — and
+ * `Target.getTargetInfo` to map an owned tab to its BrowserContext.
+ */
+const CONNECT_TIMEOUT_MS = 5_000;
+const COMMAND_TIMEOUT_MS = 10_000;
+/**
+ * Force-close a socket that never finished connecting WITHOUT risking an
+ * unhandled 'error'. Once the connect Promise has removed its own error listener,
+ * a bare `terminate()` on a half-open handshake can still emit 'error'
+ * (ECONNRESET / abort) with no listener attached — which Node re-raises as an
+ * uncaughtException that crashes the daemon. Attach a permanent no-op error sink
+ * first, then terminate; swallow a synchronous throw from an already-dead socket.
+ */
+function safeTerminate(socket) {
+    socket.on('error', () => { });
+    try {
+        socket.terminate();
+    }
+    catch {
+        // terminate() on an already-closed socket can throw synchronously — ignore.
+    }
+}
+export class BrowserCdpClient {
+    socket;
+    nextId = 1;
+    pending = new Map();
+    closed = false;
+    constructor(socket) {
+        this.socket = socket;
+        socket.on('message', (data) => this.onMessage(data));
+        const fail = (reason) => this.failAll(new Error(reason));
+        socket.on('close', () => fail('CDP browser connection closed'));
+        socket.on('error', (err) => fail(`CDP browser connection error: ${String(err)}`));
+    }
+    /**
+     * Connect to the browser-level CDP endpoint behind host:port (`/json/version`).
+     * `timeoutMs` bounds BOTH the /json/version fetch and the websocket handshake —
+     * injectable so tests can force a fast timeout against a hung server, and so a
+     * caller with a wall-clock budget can hand down its remaining budget.
+     */
+    static async connect(host, port, timeoutMs = CONNECT_TIMEOUT_MS) {
+        const resp = await fetch(`http://${host}:${port}/json/version`, {
+            signal: AbortSignal.timeout(timeoutMs),
+        });
+        if (!resp.ok) {
+            throw new Error(`CDP /json/version returned ${resp.status}`);
+        }
+        const info = (await resp.json());
+        if (!info.webSocketDebuggerUrl) {
+            throw new Error('CDP /json/version did not report a webSocketDebuggerUrl');
+        }
+        const socket = new WebSocket(info.webSocketDebuggerUrl);
+        await new Promise((resolve, reject) => {
+            // Explicit single-settle guard: whichever of open / error / timeout fires
+            // first wins and the others are no-ops. cleanup() also removes the listeners,
+            // but the flag makes the invariant obvious and covers a synchronous re-entry.
+            let settled = false;
+            const cleanup = () => {
+                clearTimeout(timer);
+                socket.removeListener('open', onOpen);
+                socket.removeListener('error', onError);
+            };
+            const settle = (fn) => {
+                if (settled)
+                    return;
+                settled = true;
+                cleanup();
+                fn();
+            };
+            const onOpen = () => settle(resolve);
+            const onError = (err) => settle(() => {
+                safeTerminate(socket); // free the fd without a later unhandled 'error'
+                reject(err instanceof Error ? err : new Error(String(err)));
+            });
+            const timer = setTimeout(() => settle(() => {
+                safeTerminate(socket); // stop the pending connect + free the fd
+                reject(new Error('CDP browser websocket connect timed out'));
+            }), timeoutMs);
+            socket.once('open', onOpen);
+            socket.once('error', onError);
+        });
+        return new BrowserCdpClient(socket);
+    }
+    /** Send a browser-level CDP command and await its result. */
+    command(method, params = {}) {
+        if (this.closed)
+            return Promise.reject(new Error('CDP client is closed'));
+        const id = this.nextId++;
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.pending.delete(id);
+                reject(new Error(`CDP ${method} timed out`));
+            }, COMMAND_TIMEOUT_MS);
+            this.pending.set(id, {
+                resolve: resolve,
+                reject,
+                timer,
+            });
+            this.socket.send(JSON.stringify({ id, method, params }), (err) => {
+                if (err) {
+                    const entry = this.pending.get(id);
+                    if (entry) {
+                        clearTimeout(entry.timer);
+                        this.pending.delete(id);
+                        reject(err);
+                    }
+                }
+            });
+        });
+    }
+    close() {
+        this.closed = true;
+        this.failAll(new Error('CDP client closed'));
+        try {
+            this.socket.close();
+        }
+        catch {
+            /* already closed */
+        }
+    }
+    onMessage(data) {
+        let parsed;
+        try {
+            parsed = JSON.parse(String(data));
+        }
+        catch {
+            return; // not a JSON frame we understand — ignore (events etc.)
+        }
+        if (typeof parsed.id !== 'number')
+            return; // CDP event, not a command reply
+        const entry = this.pending.get(parsed.id);
+        if (!entry)
+            return;
+        this.pending.delete(parsed.id);
+        clearTimeout(entry.timer);
+        if (parsed.error) {
+            entry.reject(new Error(parsed.error.message || 'CDP command failed'));
+        }
+        else {
+            entry.resolve(parsed.result ?? {});
+        }
+    }
+    failAll(err) {
+        for (const [id, entry] of this.pending) {
+            this.pending.delete(id);
+            clearTimeout(entry.timer);
+            entry.reject(err);
+        }
+    }
+}
+/** The browserContextId owning a page target (empty for the default context). */
+export async function targetBrowserContextId(cdp, targetId) {
+    const { targetInfo } = await cdp.command('Target.getTargetInfo', { targetId });
+    return targetInfo?.browserContextId ?? '';
+}
+/**
+ * The full cookie jar of a BrowserContext (HttpOnly included) as CDP
+ * `Network.Cookie` objects — the capture side of cookie-preserving proxy
+ * reconciliation.
+ */
+export async function getContextCookies(cdp, browserContextId) {
+    const { cookies } = await cdp.command('Storage.getCookies', { browserContextId });
+    return cookies ?? [];
+}
+/** Restore a captured jar into a (fresh) BrowserContext. */
+export async function setContextCookies(cdp, browserContextId, cookies) {
+    if (cookies.length === 0)
+        return;
+    await cdp.command('Storage.setCookies', {
+        cookies: cookies.map(toCookieParam),
+        browserContextId,
+    });
+}
+/**
+ * Map a CDP `Network.Cookie` (as returned by Storage.getCookies) to a
+ * `Network.CookieParam` accepted by Storage.setCookies. Allowlisted fields only:
+ * read-side extras (`size`, `session`, `sameParty`, …) are not valid params. A
+ * session cookie (session=true / expires=-1) is restored WITHOUT `expires`,
+ * which is exactly what makes it a session cookie again. This is
+ * higher-fidelity than bb-browser's own account-JSON persistence (which drops
+ * `sameSite=None` and partition keys).
+ */
+export function toCookieParam(cookie) {
+    const out = {
+        name: cookie.name,
+        value: cookie.value,
+        domain: cookie.domain,
+        path: cookie.path,
+    };
+    if (typeof cookie.secure === 'boolean')
+        out.secure = cookie.secure;
+    if (typeof cookie.httpOnly === 'boolean')
+        out.httpOnly = cookie.httpOnly;
+    if (typeof cookie.sameSite === 'string')
+        out.sameSite = cookie.sameSite;
+    if (typeof cookie.expires === 'number' && cookie.expires > 0 && cookie.session !== true) {
+        out.expires = cookie.expires;
+    }
+    if (typeof cookie.priority === 'string')
+        out.priority = cookie.priority;
+    if (typeof cookie.sourceScheme === 'string')
+        out.sourceScheme = cookie.sourceScheme;
+    if (typeof cookie.sourcePort === 'number')
+        out.sourcePort = cookie.sourcePort;
+    if (cookie.partitionKey !== undefined)
+        out.partitionKey = cookie.partitionKey;
+    return out;
+}

package/dist/clip-runtime/browser-profile-manager.d.ts

@@ -17,13 +17,19 @@ export interface BrowserProfileManagerOptions {
         error(msg: string): void;
     };
     reportStatus?: (profileId: string, status: BrowserProfileStatus, errorMsg?: string) => void;
-    /** Resolve the profile's outbound proxy, called once per bb-browser account
-     *  creation (the single choke point — invoke / open / ensureRuntime all funnel
-     *  through ensureAccount). A proxy change therefore takes effect on the next
-     *  account_create (after a reset). Returning null = direct egress. A thrown
-     *  error fails the account creation closed (better than egressing from the real
-     *  IP for a proxy-configured profile). */
+    /** Resolve the profile's DESIRED outbound proxy — Parall's stored config is the
+     *  sole source of truth. Consulted at account creation AND at every open/first
+     *  ensure, where the applied config is reconciled against it (cookie-preserving
+     *  context rebuild — see browser-proxy-reconcile.ts); bb-browser's own persisted
+     *  account proxy never wins over this. Returning null = direct egress. A thrown
+     *  error fails the operation closed (better than egressing from the real IP for
+     *  a proxy-configured profile). */
     resolveProxy?: (profileId: string) => Promise<BrowserProxyConfig | null> | BrowserProxyConfig | null;
+    /** Proxy readiness probe endpoint (~zero-byte Parall-owned URL). When a profile
+     *  has a proxy, open/first-ensure navigates the owned tab here and requires a
+     *  transport-error-free round trip before reporting `running`
+     *  (PRLL_BROWSER_PROXY_PROBE_URL override; see browser-readiness.ts). */
+    proxyProbeUrl?: string;
 }
 export interface BrowserInvokeRequest {
     profileId: string;
@@ -48,8 +54,11 @@ export declare class BrowserProfileManager {
     private restarting;
     private stopping;
     private readonly ensuredAccounts;
+    private readonly preparedAccounts;
     private readonly ensuringAccounts;
+    private readonly preparingAccounts;
     private readonly reportedStatuses;
+    private readonly targets;
     private readonly viewer;
     constructor(opts: BrowserProfileManagerOptions);
     invoke({ profileId, account, command, input }: BrowserInvokeRequest): Promise<unknown>;
@@ -57,6 +66,10 @@ export declare class BrowserProfileManager {
         forceStatusReport?: boolean;
     }): Promise<void>;
     openProfile(profileId: string, startUrl?: string): Promise<void>;
+    /** Resolve + normalize/validate the desired proxy (fail closed on legacy-invalid
+     *  configs — see browser-proxy-state.ts). null = direct egress. */
+    private resolveDesiredProxy;
+    private assertReady;
     stopProfile(profileId: string): Promise<void>;
     resetProfile(profileId: string): Promise<void>;
     stop(): Promise<void>;
@@ -68,34 +81,94 @@ export declare class BrowserProfileManager {
     handleViewerCommand(profileId: string, sessionId: string, command: string, input?: Record<string, unknown>, turn?: ViewerTurnConfig): Promise<Record<string, unknown>>;
     /** Read cdpHost/cdpPort from the bb-browser daemon `GET /status`. */
     private cdpEndpoint;
-    private prepareOpenProfile;
+    private lastCdpEndpoint;
+    /** Process-group id of the last spawned bb-browser tree (the detached child's
+     *  pid). Survives the child's exit — quiescence probes it AFTER stop() to
+     *  confirm the orphaned Chrome is gone too. null = never spawned. */
+    private lastPgid;
+    /** The browser tree's process-group id for the quiescence barrier. */
+    lastKnownProcessGroup(): number | null;
+    /** Peek the last known Chrome CDP endpoint WITHOUT starting anything. */
+    lastKnownCdpEndpoint(): {
+        host: string;
+        port: number;
+    } | null;
+    /**
+     * Land the profile on its start URL, idempotently, always inside its own
+     * context. A fresh account already opened `url` via `account_create`
+     * (accountCreated) — just bind it. Otherwise: reuse an owned tab already on
+     * the URL if any (repeated Open is a no-op), else NAVIGATE the profile's
+     * primary owned tab (`open {tabId}`) — never stack a new tab per Open.
+     */
     private openProfileTabOnce;
     private resetProfileOnce;
-    private prepareInvokeAccount;
     private recoverInvokeAvailability;
     private accountExists;
+    /** One account_info round trip: existence + whether bb-browser holds a proxy for
+     *  the account (server/username only — bb-browser never returns the password). */
+    private getAccountInfo;
+    /**
+     * Build the wire request for a forwarded browser command, binding it to a
+     * page the profile's account OWNS. bb-browser's own routing is account-blind
+     * (tab-less → global current tab → `targets[0]`, which is the default-context
+     * `about:blank` Chrome launches with — no cookies, NO PROXY), so:
+     *
+     *  - a caller-supplied `tabId`/`tab` must resolve to one of the profile's own
+     *    tabs (numeric global indices are rejected outright);
+     *  - every other tab-addressed command gets the profile's primary owned tab
+     *    stamped in (recreated inside the profile's BrowserContext if its pages
+     *    were closed — never silently retargeted at another page);
+     *  - only genuinely tab-less commands (TABLESS_COMMANDS) go unpinned.
+     */
     private buildCommandRequest;
     /**
-     * Account-scoped version of bb-browser's `resolveTabByDomain` (which is
-     * account-blind — the reason for this daemon-side preselection workaround).
-     * Two properties the bare `tab_new` + eval approach lacked, both caught on
-     * the staging closed-loop E2E (2026-06-04):
+     * The domain bb-browser's adapter metadata declares for `siteName` (via
+     * site_info), or '' when the adapter genuinely has no domain / does not exist.
+     * This is the ONLY trustworthy domain source for site_run routing — a
+     * caller-supplied request.domain is ignored by upstream site_run, so it can never
+     * gate account-safe routing.
+     *
+     * Error handling is deliberately split: ONLY a genuine application-level answer
+     * from bb-browser ("no such site") yields '' → the caller fails closed. A
+     * RECOVERABLE daemon/CDP failure (or any transport error) RETHROWS, so
+     * buildCommandRequest's existing `isRecoverableBrowserDaemonError` →
+     * `recoverInvokeAvailability` restart+retry path handles it. Masking those as a
+     * domain-less adapter would turn a transient hiccup into a permanent
+     * BROWSER_TARGET_UNAVAILABLE. Note a BrowserCommandError can itself carry a
+     * recoverable message ("Chrome not connected"), so the recoverable check wins.
+     */
+    private siteAdapterDomain;
+    /**
+     * First-use preparation — the SINGLE invariant shared by invoke, viewer, open,
+     * and ensureRuntime (fix #4). Runs ONCE per account per session:
+     *   1. resolve Parall's desired proxy (fail closed on invalid config);
+     *   2. ensure the account exists AND its applied proxy matches desired
+     *      (cookie-preserving reconcile if it drifted — e.g. a hydrated hosted
+     *      account created under an old proxy);
+     *   3. verify readiness (owned target answers; when proxied, a real request
+     *      traverses the proxy without a transport error).
+     * Subsequent calls take the steady fast path — no config fetch, no probe —
+     * unless `force` is set (explicit lifecycle open / pending-row recovery). A
+     * daemon restart, reset, or proxy reconcile clears the prepared marker so the
+     * next use re-prepares. Deduped so concurrent first-uses share one run.
+     */
+    private prepareForUse;
+    /**
+     * Ensure the profile's bb-browser account exists and honors the DESIRED proxy.
      *
-     * 1. Reuse: an existing account tab already on the domain is reused instead
-     *    of opening a new tab per eval (upstream reuses matching tabs too).
-     * 2. Load wait: after creating a tab, wait for the navigation to commit
-     *    before eval — upstream waits (~10s poll + settle); without it the clip
-     *    script races `about:blank` and relative fetches fail
-     *    ("Failed to parse URL from /hot.json").
+     * `desiredProxy` semantics:
+     *   - undefined (invoke fast path): don't fetch/reconcile — create-only proxy
+     *     resolution via opts.resolveProxy when the account is missing. A proxy
+     *     change applies at the next open / first ensure.
+     *   - null / config (open + first ensure): Parall's config is the SSOT. A
+     *     missing account is created with it; an existing account whose APPLIED
+     *     fingerprint (Parall-owned sidecar) differs is rebuilt with cookies
+     *     preserved (reconcileAccountProxy) — bb-browser's persisted account proxy
+     *     never wins.
      */
-    private resolveAccountDomainTab;
-    /** Find an account-owned tab whose URL host matches (optionally a specific tab). */
-    private findAccountTabOnHost;
     private ensureAccount;
+    private reconcileHost;
     private ensureAccountOwnedTab;
-    private profileAlreadyHasOpenTab;
-    private hasAccountOwnedTab;
-    private findAccountTabMatchingUrl;
     private reportStatus;
     private sendCommand;
     private ensureDaemon;

package/dist/clip-runtime/browser-profile-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-profile-manager.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/browser-profile-manager.ts"],"names":[],"mappings":"AAOA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAG5F,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAEnE;;;kFAGkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpF,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5F;;;;;8CAK0C;IAC1C,YAAY,CAAC,EAAE,CACb,SAAS,EAAE,MAAM,KACd,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,kBAAkB,GAAG,IAAI,CAAC;CACrE;AAeD,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzD;AA6BD,qBAAa,qBAAqB;IAiBpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAhBjC,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,QAAQ,CAA4C;IAC5D,OAAO,CAAC,UAAU,CAA8B;IAKhD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuC;IACxE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAI9D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;gBAElB,IAAI,EAAE,4BAA4B;IAWzD,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IA0CtF,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAO,GACzC,OAAO,CAAC,IAAI,CAAC;IAyBV,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBhE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU7C,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAyD3B;;;;OAIG;IACG,mBAAmB,CACvB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAInC,qEAAqE;YACvD,WAAW;YAWX,kBAAkB;YAYlB,kBAAkB;YAUlB,gBAAgB;YAOhB,oBAAoB;YAKpB,yBAAyB;YAezB,aAAa;YAWb,mBAAmB;IAqBjC;;;;;;;;;;;;OAYG;YACW,uBAAuB;IAiCrC,oFAAoF;YACtE,oBAAoB;YAuBpB,aAAa;YAsCb,qBAAqB;YAKrB,wBAAwB;YAQxB,kBAAkB;YAQlB,yBAAyB;IAqBvC,OAAO,CAAC,YAAY;YAON,WAAW;YAaX,YAAY;YAmCZ,kBAAkB;YAUlB,aAAa;YAUb,iBAAiB;YAyBjB,WAAW;YAuBX,kBAAkB;YA8ElB,IAAI;CA2BnB"}
+{"version":3,"file":"browser-profile-manager.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/browser-profile-manager.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAG5F,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAEnE;;;kFAGkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpF,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5F;;;;;;uCAMmC;IACnC,YAAY,CAAC,EAAE,CACb,SAAS,EAAE,MAAM,KACd,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,kBAAkB,GAAG,IAAI,CAAC;IACpE;;;6EAGyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAeD,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzD;AA6BD,qBAAa,qBAAqB;IA6BpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IA5BjC,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,QAAQ,CAA4C;IAC5D,OAAO,CAAC,UAAU,CAA8B;IAKhD,OAAO,CAAC,QAAQ,CAAS;IAOzB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IACtD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuC;IACxE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAmD;IACrF,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAI9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAIhD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;gBAElB,IAAI,EAAE,4BAA4B;IAezD,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IA8CtF,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAO,GACzC,OAAO,CAAC,IAAI,CAAC;IA4BV,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BtE;uEACmE;YACrD,mBAAmB;IAKjC,OAAO,CAAC,WAAW;IAYb,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU7C,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA2D3B;;;;OAIG;IACG,mBAAmB,CACvB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAInC,qEAAqE;YACvD,WAAW;IAgBzB,OAAO,CAAC,eAAe,CAA+C;IAEtE;;yEAEqE;IACrE,OAAO,CAAC,QAAQ,CAAuB;IAEvC,sEAAsE;IACtE,qBAAqB,IAAI,MAAM,GAAG,IAAI;IAItC,yEAAyE;IACzE,oBAAoB,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAI7D;;;;;;OAMG;YACW,kBAAkB;YAmBlB,gBAAgB;YAchB,yBAAyB;YAezB,aAAa;IAI3B;sFACkF;YACpE,cAAc;IAe5B;;;;;;;;;;;;OAYG;YACW,mBAAmB;IAkFjC;;;;;;;;;;;;;;;OAeG;YACW,iBAAiB;IAY/B;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,aAAa;IAwCrB;;;;;;;;;;;;OAYG;YACW,aAAa;IAmD3B,OAAO,CAAC,aAAa;YAUP,qBAAqB;IAInC,OAAO,CAAC,YAAY;YAON,WAAW;YAaX,YAAY;YAmCZ,kBAAkB;YAUlB,aAAa;YAUb,iBAAiB;YA2BjB,WAAW;YAuBX,kBAAkB;YAsFlB,IAAI;CA2BnB"}