@spinabot/brigade 1.7.0 → 1.9.0

package/dist/agents/channels/access-control/index.js

@@ -1,5 +1,6 @@
 /** Channel access control — public surface. */
 export { evaluateAccess } from "./policy.js";
+export { resolveChannelGroupToolsPolicy, resolveToolsBySender, } from "./group-tool-policy.js";
 export { formatAllowFrom, } from "./format-allow-from.js";
 export { PAIRING_MAX_PENDING, PAIRING_TTL_MS, addAllowFrom, approvePairingCode, clearChannelOwner, eraseAccessState, isAllowed, readAllowFrom, readChannelOwner, readGroupAllowFrom, readPendingPairings, removeAllowFrom, revokePairingCode, setChannelOwner, upsertPairingRequest, } from "./store.js";
 //# sourceMappingURL=index.js.map

package/dist/agents/channels/access-control/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/agents/channels/access-control/index.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAE/C,OAAO,EAAE,cAAc,EAA2B,MAAM,aAAa,CAAC;AACtE,OAAO,EACN,eAAe,GAGf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACN,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,oBAAoB,GACpB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/agents/channels/access-control/index.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAE/C,OAAO,EAAE,cAAc,EAA2B,MAAM,aAAa,CAAC;AACtE,OAAO,EACN,8BAA8B,EAC9B,oBAAoB,GAKpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACN,eAAe,GAGf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACN,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,oBAAoB,GACpB,MAAM,YAAY,CAAC"}

package/dist/agents/channels/bluebubbles/account-config.d.ts

@@ -0,0 +1,253 @@
+/**
+ * BlueBubbles config-shape helpers (multi-ACCOUNT aware; mirrors Slack's
+ * `account-config.ts`).
+ *
+ * BlueBubbles is a richer iMessage transport than the native `imessage` channel:
+ * instead of driving a local `imsg` CLI subprocess, it talks to a BlueBubbles
+ * macOS server over HTTP REST (outbound) and receives inbound updates via a
+ * webhook POST the server fires at a Brigade gateway HTTP route. So unlike
+ * `imessage` (which has no secret), BlueBubbles HAS a real secret — the server
+ * `password` — which is sealed into the encrypted credential store and embedded
+ * in the registered webhook URL query string (BlueBubbles webhooks can't carry
+ * custom headers).
+ *
+ * The knobs this module resolves per account:
+ *
+ *   - `serverUrl`    base URL of the BlueBubbles server (`http://192.168.1.5:1234`).
+ *   - `password`     the SECRET — REST auth (`?password=…`) + webhook auth. Sealed.
+ *   - `webhookPath`  the gateway inbound route path (default `/bluebubbles/webhook`).
+ *   - `actions`      per-rich-action toggles (`reactions`/`edit`/`unsend`/`effects`/`groupAdmin`).
+ *   - `region`       default phone-number region for E.164 normalisation (US).
+ *   - `mediaMaxMb`   cap on an outbound attachment's size (MB).
+ *   - `probeTimeoutMs` HTTP round-trip timeout for the doctor/probe + REST calls.
+ *
+ * Two config shapes are recognised so the surface lines up with the other
+ * channels:
+ *
+ *   Legacy (single-account):
+ *     channels.bluebubbles = { enabled: true, serverUrl: "http://…", password: "${BB_PASSWORD}" }
+ *
+ *   Multi-account:
+ *     channels.bluebubbles = {
+ *       enabled: true,
+ *       accounts: [
+ *         { id: "home", serverUrl: "http://192.168.1.5:1234", password: "${BB_HOME}" },
+ *         { id: "work", serverUrl: "http://10.0.0.9:1234",    password: "${BB_WORK}" },
+ *       ],
+ *     }
+ *
+ * A legacy config with no `accounts[]` reads as `[{ id: "default" }]`.
+ */
+import type { BrigadeConfig } from "../../../config/io.js";
+import type { BlueBubblesCatchupConfig } from "./catchup.js";
+/** Canonical channel id + default account id. */
+declare const CHANNEL_ID = "bluebubbles";
+declare const DEFAULT_ACCOUNT_ID = "default";
+/** Default inbound webhook route path (base; named accounts get a slug suffix). */
+declare const DEFAULT_WEBHOOK_PATH = "/bluebubbles/webhook";
+/** Default HTTP probe / request timeout (ms). */
+export declare const DEFAULT_BLUEBUBBLES_PROBE_TIMEOUT_MS = 10000;
+/** Default rolling group-history context size (recent messages attached to an untagged group msg). */
+export declare const DEFAULT_BLUEBUBBLES_HISTORY_LIMIT = 10;
+/** Hard ceiling on the rolling-history fetch size. */
+export declare const BLUEBUBBLES_MAX_HISTORY_LIMIT = 100;
+/** Per-knob env var consulted as a last-resort fallback for the password. */
+declare const PASSWORD_ENV_VAR = "BLUEBUBBLES_PASSWORD";
+/** Per-knob env var consulted as a last-resort fallback for the server URL. */
+declare const SERVER_URL_ENV_VAR = "BLUEBUBBLES_SERVER_URL";
+/**
+ * Rich-action toggles. The five COARSE flags are the umbrella switches (each
+ * defaults ON; the operator disables per account). The optional FINE-GRAINED
+ * flags let the operator gate a single op independently — e.g. allow group
+ * renames but forbid removing participants. A fine flag left undefined inherits
+ * its umbrella (group-admin ops ← `groupAdmin`; `sendWithEffect` ← `effects`;
+ * `reply`/`sendAttachment` ← always on) — finer per-op gating layered on top of
+ * the coarse switches, which stay the simple default surface.
+ */
+export interface BlueBubblesActionFlags {
+    reactions: boolean;
+    edit: boolean;
+    unsend: boolean;
+    effects: boolean;
+    groupAdmin: boolean;
+    /** Native inline reply (a threaded reply to a specific message). Default: on. */
+    reply?: boolean;
+    /** Send with a bubble/screen effect. Default: inherits `effects`. */
+    sendWithEffect?: boolean;
+    /** Rename a group chat. Default: inherits `groupAdmin`. */
+    renameGroup?: boolean;
+    /** Set a group chat icon. Default: inherits `groupAdmin`. */
+    setGroupIcon?: boolean;
+    /** Add a participant to a group. Default: inherits `groupAdmin`. */
+    addParticipant?: boolean;
+    /** Remove a participant from a group. Default: inherits `groupAdmin`. */
+    removeParticipant?: boolean;
+    /** Leave a group. Default: inherits `groupAdmin`. */
+    leaveGroup?: boolean;
+    /** Send a media attachment. Default: on. */
+    sendAttachment?: boolean;
+}
+/** Default rich-action toggles — everything on (Private API gates the rest at runtime). */
+export declare const DEFAULT_BLUEBUBBLES_ACTIONS: BlueBubblesActionFlags;
+/** The fine-grained per-op action flag names. */
+export type BlueBubblesFineActionName = "reply" | "sendWithEffect" | "renameGroup" | "setGroupIcon" | "addParticipant" | "removeParticipant" | "leaveGroup" | "sendAttachment";
+/**
+ * Resolve whether a FINE-GRAINED op is allowed, honouring an explicit per-op
+ * flag when set and otherwise inheriting the umbrella:
+ *   - group-admin ops (rename/icon/add/remove/leave) ← `groupAdmin`;
+ *   - `sendWithEffect` ← `effects`;
+ *   - `reply` / `sendAttachment` ← always on (no coarse umbrella gates them).
+ */
+export declare function isBlueBubblesOpAllowed(actions: BlueBubblesActionFlags, op: BlueBubblesFineActionName): boolean;
+/** Network policy overrides — relax the SSRF guard for a trusted LAN server. */
+export interface BlueBubblesNetworkConfig {
+    /**
+     * Allow private/LAN/loopback BlueBubbles hosts (default TRUE — a BlueBubbles
+     * server is almost always on the operator's LAN). Cloud-metadata stays blocked
+     * regardless. Set false to force the strict public-only SSRF policy.
+     */
+    allowPrivate?: boolean;
+}
+/** Resolved per-account info — what the adapter runtime reads. */
+export interface ResolvedBlueBubblesAccount {
+    accountId: string;
+    enabled: boolean;
+    /** Base server URL (scheme-normalised, trailing slash stripped). */
+    serverUrl: string;
+    /** The server password (REST + webhook auth). May be "" when unset. */
+    password: string;
+    /** The gateway inbound route path for this account. */
+    webhookPath: string;
+    /** Default phone-number region (E.164 normalisation). */
+    region: string;
+    /** Outbound media size cap (bytes). */
+    mediaMaxBytes: number;
+    /** HTTP probe / request timeout (ms). */
+    probeTimeoutMs: number;
+    /** Per-rich-action toggles. */
+    actions: BlueBubblesActionFlags;
+    /** On-(re)connect catch-up backfill config (undefined → defaults; `enabled:false` disables). */
+    catchup?: BlueBubblesCatchupConfig;
+    /**
+     * Inbound coalescing window (ms). When > 0, a text + its link-preview balloon
+     * (or a text + a split-out attachment) arriving as two `new-message` webhooks
+     * are merged into ONE agent turn. 0 (default) disables coalescing.
+     */
+    inboundDebounceMs: number;
+    /**
+     * Rolling group-history context: how many recent messages to fetch + attach
+     * as context on an untagged GROUP message (so the agent sees what it's
+     * replying into). 0 disables. Default 10.
+     */
+    historyLimit: number;
+    /** Same as `historyLimit` but for DMs. 0 disables. Default 0 (DMs already carry their own thread). */
+    dmHistoryLimit: number;
+    /**
+     * Allow-list of local directory roots an OUTBOUND attachment may be read from.
+     * Layered ON TOP OF the central media-path denylist. Empty (default) = no
+     * extra root restriction (the central guard still applies).
+     */
+    mediaLocalRoots: string[];
+    /** Allow private/LAN/loopback targets through the SSRF guard (default TRUE). */
+    allowPrivateNetwork: boolean;
+    /**
+     * The bot's OWN iMessage handle (phone/email) — used as `selfId` for group
+     * mention-gating. Empty when the operator hasn't set it (mention-gating in
+     * groups then can't fire and the channel falls back to its other group
+     * addressed-signals). Normalised to digits for a phone, lower-case for email.
+     */
+    selfHandle: string;
+    verbose: boolean;
+}
+/** Is the BlueBubbles channel switched on at all (any shape)? */
+export declare function bluebubblesChannelEnabled(cfg: BrigadeConfig): boolean;
+/** List configured account ids. Legacy single-account configs surface `["default"]`. */
+export declare function listBlueBubblesAccountIds(cfg: BrigadeConfig): string[];
+/**
+ * Normalise a BlueBubbles server URL: trim, default the scheme to `http://`
+ * when absent (BlueBubbles is commonly a LAN HTTP host), and strip trailing
+ * slashes. Returns "" for an empty input (don't throw at config-read time).
+ */
+export declare function normalizeBlueBubblesServerUrl(raw: string): string;
+/**
+ * Resolve the BlueBubbles server URL for an account. Precedence: per-account
+ * config `${VAR}`/literal → top-level config → `BLUEBUBBLES_SERVER_URL` env → "".
+ */
+export declare function resolveBlueBubblesServerUrl(cfg: BrigadeConfig, accountId?: string | null, env?: NodeJS.ProcessEnv): string;
+/**
+ * Resolve the server password (the SECRET) for an account. Precedence:
+ * per-account config `${VAR}`/literal → top-level config `${VAR}`/literal →
+ * durable sealed token (`channel:bluebubbles`) → `BLUEBUBBLES_PASSWORD` env → "".
+ *
+ * The sealed token is per-channel (NOT per-account today, like Slack's bot
+ * token), so multi-account installs that need distinct passwords should use
+ * `${VAR}` refs / env per account.
+ */
+export declare function resolveBlueBubblesPassword(cfg: BrigadeConfig, accountId?: string | null, env?: NodeJS.ProcessEnv): string;
+/**
+ * Resolve the inbound webhook route path for an account. The default account
+ * keeps the base path; a named account (only present when >1 account is
+ * configured) gets a distinct, collision-free path so two servers never share
+ * one route. An explicit per-account `webhookPath` overrides the derived slug.
+ */
+export declare function resolveBlueBubblesWebhookPath(cfg: BrigadeConfig, accountId?: string | null, env?: NodeJS.ProcessEnv): string;
+/** Resolve the HTTP probe / request timeout (ms) for an account. */
+export declare function resolveBlueBubblesProbeTimeoutMs(cfg: BrigadeConfig, accountId?: string | null): number;
+/** Resolve the per-rich-action toggles for an account. */
+export declare function resolveBlueBubblesActions(cfg: BrigadeConfig, accountId?: string | null): BlueBubblesActionFlags;
+/**
+ * Normalise a handle for self/mention matching: an email lower-cases; a phone
+ * keeps only its digits (so `+1 (555) 123-4567` and `15551234567` compare equal).
+ * Returns "" for an empty input.
+ */
+export declare function normalizeBlueBubblesSelfHandle(raw: string | undefined): string;
+/**
+ * Resolve the bot's own handle for an account (per-account `selfHandle` wins over
+ * the top-level slot), normalised. Empty when unset.
+ */
+export declare function resolveBlueBubblesSelfHandle(cfg: BrigadeConfig, accountId?: string | null, env?: NodeJS.ProcessEnv): string;
+/**
+ * Resolve whether the SSRF guard should allow private/LAN/loopback hosts for an
+ * account. Per-account `network.allowPrivate` wins over the top-level slot;
+ * DEFAULTS TO TRUE (a BlueBubbles server is normally on the operator's LAN).
+ * Cloud-metadata stays blocked regardless of this flag.
+ */
+export declare function resolveBlueBubblesAllowPrivateNetwork(cfg: BrigadeConfig, accountId?: string | null): boolean;
+/**
+ * Resolve the on-(re)connect catch-up backfill config for an account
+ * (per-account overrides the top-level slot). Returns `undefined` when neither
+ * level configured it — the connection then uses catch-up's built-in defaults.
+ */
+export declare function resolveBlueBubblesCatchup(cfg: BrigadeConfig, accountId?: string | null): BlueBubblesCatchupConfig | undefined;
+/**
+ * Resolve the inbound coalescing window (ms) for an account (per-account wins
+ * over the top-level slot). 0 (default) disables coalescing.
+ */
+export declare function resolveBlueBubblesInboundDebounceMs(cfg: BrigadeConfig, accountId?: string | null): number;
+/**
+ * Resolve the rolling group-history context size for an account (per-account
+ * wins over the top-level slot). Defaults to {@link DEFAULT_BLUEBUBBLES_HISTORY_LIMIT};
+ * 0 disables.
+ */
+export declare function resolveBlueBubblesHistoryLimit(cfg: BrigadeConfig, accountId?: string | null): number;
+/**
+ * Resolve the rolling DM-history context size for an account. Defaults to 0
+ * (a DM already carries its own thread context); 0 disables.
+ */
+export declare function resolveBlueBubblesDmHistoryLimit(cfg: BrigadeConfig, accountId?: string | null): number;
+/**
+ * Resolve the OUTBOUND-attachment local-root allow-list for an account
+ * (per-account entries merged with the top-level slot, de-duped). Empty when
+ * neither level configured it — the central media-path denylist still applies.
+ */
+export declare function resolveBlueBubblesMediaLocalRoots(cfg: BrigadeConfig, accountId?: string | null): string[];
+/** Resolve a per-account view of the config (defaults filled in). */
+export declare function resolveBlueBubblesAccount(cfg: BrigadeConfig, accountId?: string | null, env?: NodeJS.ProcessEnv): ResolvedBlueBubblesAccount;
+/**
+ * Resolve the idle-thread-session TTL in ms, or `null` when unset / disabled.
+ * Accepts a number (ms) or a duration string (`"6h"`, `"30m"`, …). The cron
+ * session-reaper uses this to age out idle BlueBubbles group sessions.
+ */
+export declare function bluebubblesThreadIdleTtlMs(cfg: BrigadeConfig): number | null;
+export { CHANNEL_ID as BLUEBUBBLES_CHANNEL_ID, DEFAULT_ACCOUNT_ID as BLUEBUBBLES_DEFAULT_ACCOUNT_ID, PASSWORD_ENV_VAR as BLUEBUBBLES_PASSWORD_ENV_VAR, SERVER_URL_ENV_VAR as BLUEBUBBLES_SERVER_URL_ENV_VAR, DEFAULT_WEBHOOK_PATH as BLUEBUBBLES_DEFAULT_WEBHOOK_PATH, };
+//# sourceMappingURL=account-config.d.ts.map

package/dist/agents/channels/bluebubbles/account-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-config.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/bluebubbles/account-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAE7D,iDAAiD;AACjD,QAAA,MAAM,UAAU,gBAAgB,CAAC;AACjC,QAAA,MAAM,kBAAkB,YAAY,CAAC;AAErC,mFAAmF;AACnF,QAAA,MAAM,oBAAoB,yBAAyB,CAAC;AAKpD,iDAAiD;AACjD,eAAO,MAAM,oCAAoC,QAAS,CAAC;AAC3D,sGAAsG;AACtG,eAAO,MAAM,iCAAiC,KAAK,CAAC;AACpD,sDAAsD;AACtD,eAAO,MAAM,6BAA6B,MAAM,CAAC;AAEjD,6EAA6E;AAC7E,QAAA,MAAM,gBAAgB,yBAAyB,CAAC;AAChD,+EAA+E;AAC/E,QAAA,MAAM,kBAAkB,2BAA2B,CAAC;AAKpD;;;;;;;;GAQG;AACH,MAAM,WAAW,sBAAsB;IAEtC,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IAEpB,iFAAiF;IACjF,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,qEAAqE;IACrE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,6DAA6D;IAC7D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,oEAAoE;IACpE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,qDAAqD;IACrD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,4CAA4C;IAC5C,cAAc,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,2FAA2F;AAC3F,eAAO,MAAM,2BAA2B,EAAE,sBAMzC,CAAC;AAEF,iDAAiD;AACjD,MAAM,MAAM,yBAAyB,GAClC,OAAO,GACP,gBAAgB,GAChB,aAAa,GACb,cAAc,GACd,gBAAgB,GAChB,mBAAmB,GACnB,YAAY,GACZ,gBAAgB,CAAC;AAEpB;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,sBAAsB,EAAE,EAAE,EAAE,yBAAyB,GAAG,OAAO,CAkB9G;AAuBD,gFAAgF;AAChF,MAAM,WAAW,wBAAwB;IACxC;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACvB;AA2BD,kEAAkE;AAClE,MAAM,WAAW,0BAA0B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,aAAa,EAAE,MAAM,CAAC;IACtB,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,+BAA+B;IAC/B,OAAO,EAAE,sBAAsB,CAAC;IAChC,gGAAgG;IAChG,OAAO,CAAC,EAAE,wBAAwB,CAAC;IACnC;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,sGAAsG;IACtG,cAAc,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,gFAAgF;IAChF,mBAAmB,EAAE,OAAO,CAAC;IAC7B;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;CACjB;AA4DD,iEAAiE;AACjE,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAErE;AAED,wFAAwF;AACxF,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,EAAE,CAgBtE;AAeD;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAKjE;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAC1C,GAAG,EAAE,aAAa,EAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,GAAG,GAAE,MAAM,CAAC,UAAwB,GAClC,MAAM,CAWR;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACzC,GAAG,EAAE,aAAa,EAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,GAAG,GAAE,MAAM,CAAC,UAAwB,GAClC,MAAM,CAaR;AAWD;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC5C,GAAG,EAAE,aAAa,EAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,GAAG,GAAE,MAAM,CAAC,UAAwB,GAClC,MAAM,CAUR;AAED,oEAAoE;AACpE,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAMtG;AAED,0DAA0D;AAC1D,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,sBAAsB,CAK/G;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAM9E;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAC3C,GAAG,EAAE,aAAa,EAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,GAAG,GAAE,MAAM,CAAC,UAAwB,GAClC,MAAM,CAMR;AAED;;;;;GAKG;AACH,wBAAgB,qCAAqC,CAAC,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAO5G;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACxC,GAAG,EAAE,aAAa,EAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACvB,wBAAwB,GAAG,SAAS,CAWtC;AAED;;;GAGG;AACH,wBAAgB,mCAAmC,CAAC,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAMzG;AAUD;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAMpG;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAMtG;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAAC,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,EAAE,CAgBzG;AAED,qEAAqE;AACrE,wBAAgB,yBAAyB,CACxC,GAAG,EAAE,aAAa,EAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,GAAG,GAAE,MAAM,CAAC,UAAwB,GAClC,0BAA0B,CAkC5B;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAc5E;AAED,OAAO,EACN,UAAU,IAAI,sBAAsB,EACpC,kBAAkB,IAAI,8BAA8B,EACpD,gBAAgB,IAAI,4BAA4B,EAChD,kBAAkB,IAAI,8BAA8B,EACpD,oBAAoB,IAAI,gCAAgC,GACxD,CAAC"}