@stratusagent/agents 0.11.4 → 0.11.5

package/dist/identity.js

@@ -0,0 +1,259 @@
+// First names only — agents should feel like a teammate you call by name.
+// Uniqueness comes from the generated id suffix, never from the name.
+const AGENT_NAMES = [
+    'Ada', 'Amara', 'Arlo', 'Asha', 'August', 'Beatrix', 'Caleb', 'Camila',
+    'Dara', 'Devon', 'Eleni', 'Elio', 'Esme', 'Felix', 'Freya', 'Gideon',
+    'Hana', 'Hugo', 'Imani', 'Ines', 'Jasper', 'Juno', 'Kai', 'Kira',
+    'Leandro', 'Lucia', 'Mabel', 'Mateo', 'Nadia', 'Nico', 'Odessa', 'Otis',
+    'Priya', 'Quinn', 'Rafael', 'Romy', 'Sana', 'Silas', 'Tamsin', 'Theo',
+    'Uma', 'Vera', 'Wesley', 'Xiomara', 'Yusuf', 'Zadie',
+    'Alba', 'Bruno', 'Celia', 'Dashiell', 'Edie', 'Ferris', 'Greta', 'Hollis',
+    'Ida', 'Jules', 'Koa', 'Lior', 'Marisol', 'Nyla', 'Oren', 'Paloma',
+    'Reza', 'Sunny', 'Tobias', 'Vada', 'Wren', 'Yara', 'Zeke',
+];
+/**
+ * The one house style every Stratus agent avatar is drawn in. Surfaces
+ * (CLI, web, macOS) render this style; agents differ by their name-derived
+ * hue and palette, so the team looks cohesive while each member is
+ * recognizable.
+ */
+export const AVATAR_STYLE = 'stratus';
+/** Deterministic 32-bit hash so the same seed always yields the same identity. */
+const hashSeed = (seed) => {
+    let hash = 2166136261;
+    for (let index = 0; index < seed.length; index += 1) {
+        hash ^= seed.charCodeAt(index);
+        hash = Math.imul(hash, 16777619);
+    }
+    return hash >>> 0;
+};
+const hslToHex = (hue, saturation, lightness) => {
+    const s = saturation / 100;
+    const l = lightness / 100;
+    const k = (n) => (n + hue / 30) % 12;
+    const a = s * Math.min(l, 1 - l);
+    const channel = (n) => {
+        const value = l - a * Math.max(-1, Math.min(k(n) - 3, Math.min(9 - k(n), 1)));
+        return Math.round(value * 255).toString(16).padStart(2, '0');
+    };
+    return `#${channel(0)}${channel(8)}${channel(4)}`;
+};
+/**
+ * Generate a human-ish first name. Deterministic when a seed is supplied;
+ * random otherwise.
+ */
+export const generateAgentName = (seed) => {
+    const value = seed !== undefined
+        ? hashSeed(seed)
+        : Math.floor(Math.random() * 0xffffffff);
+    return AGENT_NAMES[value % AGENT_NAMES.length] ?? 'Quinn';
+};
+/**
+ * Derive an avatar theme from a name: a stable hue and a small palette in
+ * the shared Stratus house style. Consumers (CLI, web, macOS) draw the
+ * actual image from this so the agent looks the same on every surface.
+ */
+export const generateAvatarTheme = (name) => {
+    const value = hashSeed(name);
+    const hue = value % 360;
+    return {
+        seed: name,
+        hue,
+        palette: [
+            hslToHex(hue, 70, 55),
+            hslToHex((hue + 30) % 360, 65, 70),
+            hslToHex((hue + 180) % 360, 60, 45),
+        ],
+        style: AVATAR_STYLE,
+    };
+};
+export const slugify = (name) => name
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, '-')
+    .replace(/^-+|-+$/g, '') || 'agent';
+/**
+ * The shape an id is *minted* in: lowercase alphanumerics and internal
+ * hyphens, starting with an alphanumeric. Everything `slugify` produces
+ * matches it, so every id this module derives does.
+ *
+ * Not what validation enforces. A hand-written `id:` predates any shape
+ * rule and `Ava_1` was as valid as `ava` — see `isValidAgentId`.
+ */
+export const AGENT_ID_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
+/**
+ * How long an id we *build* is allowed to get. A construction bound, not a
+ * validation rule — `isValidAgentId` deliberately does not check it.
+ *
+ * Every id derived from a long name predates this bound, and enforcing it
+ * retroactively drops working agents off the roster, while trimming them
+ * silently re-keys their sessions, memory, and credentials to an id nobody
+ * has ever used. So the bound applies where an id is minted fresh and
+ * nothing is keyed to it yet, and nowhere else. File systems still have
+ * limits, and an id long enough to hit them fails at the join with a name
+ * that says so.
+ */
+export const MAX_AGENT_ID_LENGTH = 64;
+/**
+ * What an id may never be, whatever else it is: anything that stops being
+ * a single, addressable path segment. A separator escapes the directory,
+ * a leading dot hides the file or walks up out of it (`..`), and a control
+ * character is not typeable back.
+ */
+const PATH_UNSAFE_ID = /[/\\]|[\u0000-\u001f\u007f]/;
+/**
+ * The safety half of every id rule here, shared because agent ids and
+ * session ids answer it identically and a second copy would drift from the
+ * first the next time one of them learned something.
+ *
+ * Safety only: what an id may never be. Shape — the slug pattern, a length
+ * bound — is per-kind and stays with the kind, because the reasons differ.
+ */
+const isAddressableId = (id) => id.length > 0
+    // Invisible leading or trailing space cannot be typed back reliably, so
+    // an id that is not its own trimmed self is a mistake, not a legacy.
+    && id === id.trim()
+    && !id.startsWith('.')
+    && !PATH_UNSAFE_ID.test(id)
+    // An id keys plain objects too — `credentials.channels.slack[id]` among
+    // them — where an inherited name is not a free slot. `toString` reads as
+    // already connected with nothing stored, and `__proto__` assigns through
+    // to the prototype, so the write lands nowhere and `JSON.stringify` drops
+    // it. `in {}` names exactly that set, and names it by the property it
+    // has rather than by a list to keep in step.
+    && !(id in {});
+/**
+ * Whether `id` is safe to key an agent's resources and paths by.
+ *
+ * Ids are not labels. They key sessions, memory, credentials, Slack channel
+ * tokens, and every per-agent path on disk — and an explicit frontmatter
+ * `id` is untrusted input: a soul file travels with a repository, and in
+ * the hosted profile it comes from a tenant. `id: ../../escape` reaches
+ * every one of those joins intact, so it is stopped once here rather than
+ * defended at each of them.
+ *
+ * **Unsafe is the rule, not un-sluglike.** Nothing before this checked an
+ * explicit id at all, so `Ava_1`, `team.alpha`, and `AVA` are all out there
+ * keying real sessions and real credentials. Holding them to the shape ids
+ * are minted in would not make anything safer — none of them can leave
+ * their directory — and `loadRosterSouls` degrades a soul that will not
+ * parse to a warning, so the only thing it would accomplish is dropping
+ * those agents off the roster on upgrade, quietly, while their data stays
+ * behind under the old id. Reserving the slug shape for ids nobody has
+ * chosen yet costs nothing; imposing it on ids people are already using
+ * costs them their agent.
+ *
+ * Rejected, never sanitized: rewriting `../../escape` into `escape` hands
+ * back an agent nobody asked for, keyed to resources nobody named.
+ */
+// `*` is the delegate wildcard (`delegates: ['*']`), so an agent with that
+// id could never be delegated to alone — reserved rather than ambiguous.
+// Agent ids only: a session id is a broader address, and the wildcard means
+// nothing there.
+export const isValidAgentId = (id) => isAddressableId(id) && id !== '*';
+/**
+ * Whether a `delegates` entry is one the soul can hold: any agent id, or
+ * the wildcard — the same rule as {@link isValidAgentId}, so every agent a
+ * roster can hold can be named as a target. Exported so the control API
+ * refuses a bad entry as the client's error rather than discovering it in
+ * the soul round-trip.
+ */
+export const isValidDelegateEntry = (entry) => entry === '*' || isValidAgentId(entry);
+/**
+ * How much of a new session id is the *client's* to spend, on top of the
+ * agent id it addresses.
+ *
+ * Every id in circulation is a colon-joined address that embeds the agent
+ * id — `web:<agentId>:<uuid>` from the dashboard, a channel key of
+ * `<channel>:<agentId>:<team>:<conversation>:<thread>`, with a bare UUID
+ * from the CLI the one exception. So a flat cap is the wrong shape: agent
+ * ids are deliberately unbounded (see {@link isValidAgentId}), and a flat
+ * 200 refused every dashboard conversation for an agent whose id ran past
+ * 159 characters — an agent that stays on the roster and simply stops being
+ * chattable, which is the quiet-breakage failure the unbounded rule exists
+ * to avoid.
+ *
+ * Budgeting the composition instead keeps the bound meaningful without
+ * capping the agent id through the back door. It cannot be gamed to widen
+ * itself: the allowance comes from an agent id already checked against the
+ * roster, not from the caller's own string.
+ */
+export const MAX_SESSION_ID_LENGTH = 200;
+/**
+ * Ids that are a client's bug rendered as text, not an address anyone chose.
+ *
+ * Each is what JavaScript prints when an id was never computed — an
+ * unresolved variable, a null field, arithmetic that went sideways, an
+ * object concatenated into a template. The dashboard shipped the first one:
+ * `/sessions/undefined/messages`, accepted, and a durable conversation
+ * literally named `undefined`.
+ *
+ * A blocklist rather than a pattern, because these are safe, well-formed
+ * strings — nothing about their *shape* is wrong, which is exactly why no
+ * shape rule catches them. Kept to the strings the language itself
+ * produces: guessing at what else looks like a mistake would start refusing
+ * ids people meant.
+ */
+const STRINGIFIED_NOTHING = new Set(['undefined', 'null', 'NaN', '[object Object]']);
+/**
+ * Whether `id` may open a *new* conversation.
+ *
+ * Session ids are client-minted and a `POST` to an unknown one creates it,
+ * so this is the only thing standing between an HTTP caller and a durable
+ * row. `undefined`, `null`, and a bare space have all reached the session
+ * table through that door — the dashboard shipped the first of them.
+ *
+ * **Checked where an id is minted, never where one is used.** An id already
+ * in the store addresses a real conversation, whatever shape it is, and
+ * re-validating on read would lock someone out of their own history to
+ * enforce a rule that postdates it. Same reasoning as
+ * {@link MAX_AGENT_ID_LENGTH}, which is why the length bound lives here and
+ * not in {@link isValidAgentId}.
+ *
+ * `agentId` is the agent the id addresses, when the caller knows it — every
+ * client convention embeds it, so its length is part of the budget rather
+ * than something the bound gets to cap. The allowance applies only to an id
+ * that actually contains it, since those are the characters being paid for;
+ * a bare UUID and an unrelated string are both held to
+ * {@link MAX_SESSION_ID_LENGTH} alone, as they are when `agentId` is
+ * omitted.
+ *
+ * Shape is deliberately not enforced. Every id above is a legitimate
+ * address, and no pattern admitting all of them excludes `undefined` — so
+ * the safety rule, a bound, and {@link STRINGIFIED_NOTHING} are what catch
+ * the real mistakes. Rejected, never sanitized: trimming an id hands the
+ * caller back a conversation at an address it never asked for.
+ */
+export const isValidSessionId = (id, agentId) => isAddressableId(id)
+    // The allowance is for an id that actually *spends* those characters on
+    // the agent id. Granting it merely because the request names a long-id
+    // agent would let that agent's existence buy an unrelated caller 300 more
+    // characters of junk — the durable-garbage case the bound is here to stop.
+    && id.length <= MAX_SESSION_ID_LENGTH
+        + (agentId !== undefined && id.includes(agentId) ? agentId.length : 0)
+    && !STRINGIFIED_NOTHING.has(id);
+/**
+ * A freshly minted id, bounded — `base` trimmed so that appending `suffix`
+ * still fits, with any hyphen left dangling by the trim removed.
+ *
+ * Only for ids nothing is keyed to yet: a generated agent's
+ * name-plus-suffix, and `agent new` retrying a filename collision. Both mint
+ * an id in the same breath as the agent, so trimming takes nothing away.
+ * Shared rather than re-derived so the two do not each own half of the bound
+ * and drift. An id derived from a name someone chose does *not* come through
+ * here — that name may already have an agent behind it.
+ */
+export const agentIdWithSuffix = (base, suffix) => {
+    const tail = suffix ? `-${suffix}` : '';
+    const room = Math.max(1, MAX_AGENT_ID_LENGTH - tail.length);
+    return `${base.slice(0, room).replace(/-+$/, '') || 'agent'}${tail}`;
+};
+// Ids for generated names carry a short unique suffix: the name pool is
+// small, and two agents that draw the same name must still be two people —
+// memory and access scopes are keyed by id. Deterministic when seeded.
+export const generatedIdSuffix = (seed) => {
+    const value = seed !== undefined
+        ? hashSeed(`${seed}:id`)
+        : Math.floor(Math.random() * 0xffffffff);
+    return value.toString(36).padStart(4, '0').slice(0, 4);
+};
+//# sourceMappingURL=identity.js.map

package/dist/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAEA,0EAA0E;AAC1E,sEAAsE;AACtE,MAAM,WAAW,GAAG;IAClB,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ;IACtE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ;IACpE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IAChE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IACvE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM;IACrE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO;IACpD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ;IACzE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ;IAClE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CACjD,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,SAAS,CAAC;AAEtC,kFAAkF;AAClF,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAU,EAAE;IACxC,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,UAAkB,EAAE,SAAiB,EAAU,EAAE;IAC9E,MAAM,CAAC,GAAG,UAAU,GAAG,GAAG,CAAC;IAC3B,MAAM,CAAC,GAAG,SAAS,GAAG,GAAG,CAAC;IAC1B,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/D,CAAC,CAAC;IACF,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AACpD,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAa,EAAU,EAAE;IACzD,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS;QAC9B,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAChB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC;IAC3C,OAAO,WAAW,CAAC,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC;AAC5D,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAe,EAAE;IAC/D,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,KAAK,GAAG,GAAG,CAAC;IACxB,OAAO;QACL,IAAI,EAAE,IAAI;QACV,GAAG;QACH,OAAO,EAAE;YACP,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC;YACrB,QAAQ,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC;YAClC,QAAQ,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC;SACpC;QACD,KAAK,EAAE,YAAY;KACpB,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE,CAC9C,IAAI;KACD,WAAW,EAAE;KACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;KAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AAEvD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAEtC;;;;;GAKG;AACH,MAAM,cAAc,GAAG,6BAA6B,CAAC;AAErD;;;;;;;GAOG;AACH,MAAM,eAAe,GAAG,CAAC,EAAU,EAAW,EAAE,CAC9C,EAAE,CAAC,MAAM,GAAG,CAAC;IACb,wEAAwE;IACxE,qEAAqE;OAClE,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE;OAChB,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;OACnB,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;IAC3B,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,sEAAsE;IACtE,6CAA6C;OAC1C,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;AAEjB;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,2EAA2E;AAC3E,yEAAyE;AACzE,4EAA4E;AAC5E,iBAAiB;AACjB,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,EAAU,EAAW,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC;AAEzF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAa,EAAW,EAAE,CAC7D,KAAK,KAAK,GAAG,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC;AAEzC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC;;;;;;;;;;;;;;GAcG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAErF;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,EAAU,EAAE,OAAgB,EAAW,EAAE,CACxE,eAAe,CAAC,EAAE,CAAC;IACnB,wEAAwE;IACxE,uEAAuE;IACvE,0EAA0E;IAC1E,2EAA2E;OACxE,EAAE,CAAC,MAAM,IAAI,qBAAqB;UACjC,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;OACrE,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAElC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,MAAe,EAAU,EAAE;IACzE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5D,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,OAAO,GAAG,IAAI,EAAE,CAAC;AACvE,CAAC,CAAC;AAEF,wEAAwE;AACxE,2EAA2E;AAC3E,uEAAuE;AACvE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAa,EAAU,EAAE;IACzD,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS;QAC9B,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,KAAK,CAAC;QACxB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACzD,CAAC,CAAC"}