@stratusagent/gateway 0.3.0 → 0.6.0

package/README.md

@@ -7,6 +7,7 @@ One gateway owns:
 - **Durable sessions** — `SqliteSessionStore` on `node:sqlite` (Node 22.13+, no native deps). The whole session round-trips as one JSON body, provider replay state included, so a conversation resumed after a daemon restart replays exactly. Session ids are caller-chosen and stable (channels derive them from conversations), which is what makes any inbound message resumable.
 - **A per-provider runner pool** — each agent's soul pins its own provider/model; config re-resolves on every dispatch and runners are pooled by resolved configuration, so two agents never share a billing path or credentials by accident.
 - **Dispatcher-backed delegation** — `agent.delegate` routes the target through the same per-provider dispatch as a direct message; a delegated specialist runs on *their* provider, never the delegator's.
+- **Approval recovery** — a turn parked on a human is a durable checkpoint, not a lost turn. The runner records the parked call and the calls queued behind it *before* asking, and clears it before the tool runs, so the record covers exactly the window in which nothing has happened. On start the gateway sweeps for `pending_approval` sessions and finishes them: the parked call is re-asked (or refused, if its window ran out while the process was down), and the queue behind it drains, so every `tool_use` still ends with a `tool_result`. Earlier calls are never replayed — their results were already durable, and a re-asked request keeps the remainder of its original window rather than starting a new one. Calls made through a provider that drives its own inner loop are deliberately excluded: recovery re-enters the *kernel* loop and cannot rebuild that provider's, so those fail cleanly instead (see [04](../../docs/roadmap/04-agent-sdk-bridge.md)).
 - **An activity watchdog** — progress-based, not wall-clock: any event from the session resets it, and an idle turn is aborted cleanly (the abort cancels the underlying provider request and kills tool subprocesses).
 - **Single-flight per session** — a second message to a busy session queues behind the in-flight turn; different sessions run concurrently.
 - **Live-refresh** — souls are re-read on each dispatch, so an edited persona or allowlist reaches existing conversations on their next turn. Sessions pin an agent *id* and never cross identities.

package/dist/index.d.ts

@@ -1,6 +1,7 @@
-import { EventBus, type AgentDefinition, type ApprovalPolicy, type JsonObject, type Session, type SessionStore } from '@stratusagent/core';
+import { EventBus, type AgentDefinition, type ApprovalAnswer, type ApprovalPolicy, type JsonObject, type Session, type SessionStatus, type SessionStore, type ToolRisk } from '@stratusagent/core';
 import { type ParsedSoul } from '@stratusagent/agents';
-import { type RuntimeSelection, type StateEnvironment } from '@stratusagent/state';
+import { type OptionalModuleHost } from '@stratusagent/plugins';
+import { type PluginsConfig, type RuntimeSelection, type StateEnvironment } from '@stratusagent/state';
 /**
  * Durable session storage on node:sqlite (unflagged on Node 22.13+). The
  * whole session — messages, status, and metadata, including provider replay
@@ -24,44 +25,188 @@ export declare class SqliteSessionStore implements SessionStore {
     create(input: Omit<Session, 'createdAt' | 'updatedAt'>): Promise<Session>;
     get(id: string): Promise<Session | undefined>;
     save(session: Session): Promise<void>;
-    /** Newest-first session listing for one agent (or all agents). */
-    list(agentId?: string): Array<Pick<Session, 'id' | 'status' | 'createdAt' | 'updatedAt'> & {
+    /**
+     * Session ids in a state, oldest first — the index a restarting daemon
+     * sweeps for turns parked on a human. The `status` column carries it, so
+     * no conversation body is deserialized to answer the question.
+     */
+    listIdsByStatus(status: SessionStatus): Promise<string[]>;
+    /**
+     * When each agent last did anything, and how many of its sessions are live
+     * right now.
+     *
+     * One aggregate over the indexed columns — no conversation body is
+     * deserialized, for the same reason `listIdsByStatus` returns ids: a
+     * roster view asks this on every load, and it must not cost a JSON parse
+     * per session to answer.
+     *
+     * Both halves are needed and neither is sufficient. `lastActiveAt` alone
+     * reads a turn parked on a human as idle, because the save that recorded
+     * the park is the last thing that touched the row — and a turn waiting
+     * twenty minutes on an approval is exactly when someone wants to see the
+     * agent lit. `activeSessions` alone loses an agent that finished a moment
+     * ago. The caller decides what window counts as "recent"; a daemon that
+     * baked one in would need upgrading to change it.
+     */
+    /**
+     * How many sessions are in each state.
+     *
+     * A grouped count, not a listing that gets counted. The table grows for the
+     * life of an install and a health endpoint is polled, so materialising one
+     * object per historical session to produce five numbers gets steadily
+     * slower at exactly the thing meant to report that the daemon is fine.
+     */
+    countByStatus(): Record<string, number>;
+    lastActivityByAgent(): Record<string, {
+        lastActiveAt: string;
+        activeSessions: number;
+    }>;
+    /**
+     * Newest-first session listing for one agent (or all agents).
+     *
+     * `limit` is not decoration: this table grows for the life of an install,
+     * and a surface that renders "recent conversations" would otherwise pull
+     * every session anyone has ever had to show ten of them.
+     */
+    list(agentId?: string, limit?: number): Array<Pick<Session, 'id' | 'status' | 'createdAt' | 'updatedAt'> & {
         agentId: string;
     }>;
     close(): void;
 }
+/**
+ * A soul's provider/model pins, and the daemon-wide defaults they demote.
+ *
+ * The implementation lives in `@stratusagent/state`, beside the resolver
+ * whose precedence it manipulates — it never had a gateway dependency. It is
+ * re-exported here because this is where callers were told to import it from,
+ * and because "what will a served agent actually resolve to" is a gateway
+ * question even when the rule answering it is not gateway code.
+ */
+export { applySoulPins, type SoulPinContext } from '@stratusagent/state';
 /**
  * A channel adapter as the gateway sees it: started after the roster
  * loads, stopped before the store drains. Structurally identical to
  * @stratusagent/channels' ChannelAdapter — kept structural here so the
  * gateway does not depend on the channels package.
  */
-/** Where the daemon-wide provider default could have come from. */
-export interface SoulPinContext {
-    /** A provider fixed by the caller (the gateway's own selection). */
-    selectionProvider?: string;
-    /** The provider named by the active config file. */
-    configProvider?: string;
-    /** Whether a config file was found at all. */
-    configPresent: boolean;
+export interface GatewayChannelAdapter {
+    name: string;
+    start(gateway: Gateway): Promise<void>;
+    stop(): Promise<void>;
 }
 /**
- * Apply a soul's provider/model pins to a selection, demoting the
- * daemon-wide defaults the pins outrank.
+ * Where a session came from, as the gateway reports it. Structural for the
+ * same reason as the adapter above — @stratusagent/channels declares the
+ * matching shape for adapters to consume, and neither package imports the
+ * other to agree on it.
+ */
+export interface SessionRouting {
+    /** Whose app must do the talking. */
+    agentId: string;
+    /** The metadata the dispatching surface attached to the session. */
+    metadata: JsonObject;
+}
+/**
+ * What the gateway hands a policy that needs a human somewhere else: one
+ * function that publishes a request and settles on the answer. Handed to a
+ * factory rather than exposed on the built gateway because the policy has
+ * to exist before the first dispatch, and a gateway cannot be constructed
+ * with a policy that needs the gateway.
+ */
+export interface ApprovalTransport {
+    request: ApprovalRequester;
+}
+/**
+ * A parked call, published for anyone who can reach a person. Mirrors
+ * `@stratusagent/permissions`' `ApprovalRequest` structurally rather than
+ * importing it: the gateway consumes any `ApprovalPolicy`, and depending on
+ * one implementation of the seam to describe the seam would invert that.
+ */
+export interface GatewayApprovalRequest {
+    session: Session;
+    call: {
+        id: string;
+        toolName: string;
+        input: JsonObject;
+    };
+    risk: ToolRisk;
+    /**
+     * When this call first parked, if a restart is re-asking it. The wait is
+     * measured from here, so a request keeps the window it started with
+     * instead of winning a fresh one — otherwise a daemon that restarts a
+     * minute before the deadline grants another full timeout, and one that
+     * crash-loops keeps a request alive forever.
+     */
+    parkedAt?: string;
+    signal?: AbortSignal;
+}
+export type ApprovalRequester = (request: GatewayApprovalRequest) => Promise<ApprovalAnswer>;
+/**
+ * A parked call as an observer sees it — everything `tool.approval-requested`
+ * announced, still outstanding.
  *
- * Exported because this is not only dispatch logic: anything that wants to
- * know what a served agent will actually resolve to — a startup billing
- * check, a diagnostic — has to normalize the same way, and a second copy
- * of these rules drifts from this one.
+ * Listable because an event stream only tells you what happened while you
+ * were listening. A surface that connects while a turn is already parked
+ * would otherwise show no pending request at all until the next one, and
+ * rebuilding the set from the bus means keeping a second copy of state the
+ * gateway already holds.
  */
-export declare const applySoulPins: (pins: ParsedSoul, selection: RuntimeSelection, env: StateEnvironment, context: SoulPinContext) => {
-    selection: RuntimeSelection;
-    env: StateEnvironment;
-};
-export interface GatewayChannelAdapter {
+export interface PendingApproval {
+    requestId: string;
+    sessionId: string;
+    agentId: string;
+    call: {
+        id: string;
+        toolName: string;
+        input: JsonObject;
+    };
+    risk: ToolRisk;
+    /** When this call parked, ISO-8601. */
+    parkedAt: string;
+    /**
+     * When it denies itself, ISO-8601. Absent when it never will — the same
+     * distinction the announcing event draws.
+     */
+    expiresAt?: string;
+    /** The session's metadata: where the turn is happening. */
+    metadata?: JsonObject;
+}
+export interface ResolveApprovalInput {
+    requestId: string;
+    answer: ApprovalAnswer;
+    /**
+     * The person who decided, in whatever ids their channel uses. Recorded on
+     * the resolved event; who is *allowed* to decide is the channel's
+     * question, since the approver set is written in its ids.
+     */
+    actor?: string;
+    /**
+     * Why, when it was not a person. A channel that cannot deliver a request
+     * — nobody configured to ask, nowhere to ask — still has to settle it,
+     * and recording that as `decided` would file a denial nobody made
+     * alongside the ones somebody did. `timeout` and `cancelled` are not
+     * offered here: those are the gateway's own endings to declare.
+     */
+    reason?: 'decided' | 'undeliverable';
+}
+/** One registered tool, as an operator's surfaces need to see it. */
+export interface GatewayTool {
     name: string;
-    start(gateway: Gateway): Promise<void>;
-    stop(): Promise<void>;
+    description?: string;
+    risk: ToolRisk;
+    /** The plugin package that contributed it; absent for kernel tools. */
+    package?: string;
+    /** Whether that package is trusted to declare a tool `safe`. */
+    trusted?: boolean;
+}
+/** A plugin this daemon was asked to load, and what came of it. */
+export interface GatewayPluginStatus {
+    package: string;
+    name?: string;
+    trusted?: boolean;
+    tools?: GatewayTool[];
+    /** Present when the plugin did not load, and the only field that is. */
+    error?: string;
 }
 export interface GatewayOptions {
     env?: StateEnvironment;
@@ -69,7 +214,18 @@ export interface GatewayOptions {
     selection?: RuntimeSelection;
     /** Channel adapters to run (Slack, …). Started on start(), stopped on stop(). */
     channels?: GatewayChannelAdapter[];
-    approvals?: ApprovalPolicy;
+    /**
+     * The policy, or a factory that builds one from the gateway's approval
+     * transport. Pass a factory whenever the policy parks turns on a human
+     * reached through a channel — `remote` mode — since that policy needs the
+     * transport the gateway is still constructing.
+     */
+    approvals?: ApprovalPolicy | ((transport: ApprovalTransport) => ApprovalPolicy);
+    /**
+     * How long a parked call waits before it denies itself. 0 waits forever,
+     * which is only ever right in a test. Default 15 minutes.
+     */
+    approvalTimeoutMs?: number;
     maxTurns?: number;
     /**
      * The activity watchdog: abort a turn when no event for its session has
@@ -79,6 +235,26 @@ export interface GatewayOptions {
     idleTimeoutMs?: number;
     /** Session database path. Default ~/.stratus/sessions.db. */
     sessionDbPath?: string;
+    /**
+     * Plugins to load, keyed by package name — the `plugins` block, which the
+     * caller has already read from a **trusted** config. The gateway does not
+     * go looking for one: a plugin runs in-process with the daemon, and which
+     * file may say so is a decision that belongs where the config precedence
+     * is already understood.
+     */
+    plugins?: PluginsConfig;
+    /**
+     * How plugin packages are resolved and imported.
+     *
+     * Worth passing, and `stratus serve` does. `import.meta.resolve` answers
+     * relative to the module that calls it, so the default here asks "is this
+     * plugin visible from the gateway package" when the question is "is it
+     * visible from the thing the operator installed". Those differ under any
+     * layout that is not flat — a pnpm install being the obvious one — and the
+     * failure is a plugin reported as not installed while sitting right next
+     * to the CLI.
+     */
+    pluginHost?: OptionalModuleHost;
     log?: (line: string) => void;
     warn?: (line: string) => void;
 }
@@ -94,6 +270,16 @@ export interface DispatchInput {
     userMessage: string;
     metadata?: JsonObject;
     signal?: AbortSignal;
+    /**
+     * Caller-chosen id for this turn, so events emitted while it runs can be
+     * attributed to it. A session processes several turns in sequence and
+     * `StratusEvent` carries no turn identifier, so a surface that queued a
+     * message has no other way to tell its own deltas from the next caller's.
+     *
+     * Optional because most callers do not need one: a channel renders
+     * whatever arrives for the conversation it is watching.
+     */
+    turnId?: string;
 }
 export interface Gateway {
     start(): Promise<void>;
@@ -106,7 +292,94 @@ export interface Gateway {
     readonly store: SqliteSessionStore;
     /** The current roster, default agent included. */
     agents(): AgentDefinition[];
+    /**
+     * Re-read the agents directory and the configured default soul, returning
+     * the roster that results. Souls are already re-read on every dispatch, so
+     * this is for files that appeared or disappeared since start — an agent
+     * created by another surface, or one whose soul was deleted.
+     */
+    reloadRoster(): Promise<AgentDefinition[]>;
+    /**
+     * The turn currently running on a session, if the caller that started it
+     * named one. Single-flight per session is what makes this exact: at most
+     * one turn is ever running on a session, so an event emitted for it
+     * belongs to this turn and no other.
+     */
+    activeTurnId(sessionId: string): string | undefined;
+    /** Every call parked on a human right now, oldest first. */
+    pendingApprovals(): PendingApproval[];
+    /**
+     * Every registered tool, with the risk it will actually be judged at and
+     * the package it came from.
+     *
+     * Provenance is the reason this is not `tools.describe()`: "which of
+     * these can this daemon run, and whose code is it" is the question the
+     * catalog endpoint and 07's tool screens are asking, and a descriptor
+     * list answers only half of it. Kernel tools have no package, which is
+     * itself the answer for them.
+     */
+    tools(): GatewayTool[];
+    /**
+     * The plugins this daemon loaded, and the ones it could not — a plugin an
+     * operator enabled that failed to load is exactly what they need to see,
+     * and an empty list would say the opposite.
+     */
+    plugins(): GatewayPluginStatus[];
+    /**
+     * The soul behind each agent in the current roster, built-in included
+     * (which has none).
+     *
+     * The roster the daemon is *serving*, which the agents directory stops
+     * describing the moment a soul is added, deleted, or broken since the last
+     * reload — and the gateway keeps dispatching from the soul it cached. A
+     * caller that has to answer "what would a turn as this agent run on" needs
+     * the pins that answer it, so this hands back the parsed soul rather than a
+     * path a second reader would have to re-read (and now read differently).
+     *
+     * Async because it re-reads each soul file, exactly as `refreshAgent` does
+     * before every dispatch: a pin edited on disk is live on the next turn, so
+     * a caller answering from the load-time snapshot would name the provider
+     * the daemon has already stopped billing. An unreadable file falls back to
+     * the cached soul, which is what that next dispatch falls back to as well.
+     *
+     * An agent is **absent** from this list when its file now declares a
+     * different id: `refreshAgent` refuses every dispatch for the old one until
+     * the roster reloads, so nothing is served under it and no runtime should
+     * be claimed for it. The roster it reports is therefore what can currently
+     * run, which is a narrower thing than `agents()`.
+     */
+    servedSouls(): Promise<Array<{
+        id: string;
+        soul?: ParsedSoul;
+    }>>;
+    /**
+     * Where a durable session came from — its agent, and the metadata the
+     * dispatching surface attached to it.
+     *
+     * A projection rather than an accessor: the session's messages are not
+     * a channel's business, and handing back the whole record to save a few
+     * lines would make them one.
+     */
+    sessionRouting(sessionId: string): Promise<SessionRouting | undefined>;
+    /**
+     * Settles a parked call. Returns false when the request is not pending —
+     * already decided, expired, or belonging to a turn that was cancelled —
+     * which is the normal outcome of a button clicked a minute too late, not
+     * an error. Callers surface it to whoever clicked; they must never treat
+     * it as "try again".
+     */
+    resolveApproval(input: ResolveApprovalInput): boolean;
 }
+/**
+ * Recorded on a turn the previous process was still running when it died.
+ *
+ * Exported because "distinguishable" is the whole point: a surface, a
+ * test, or an operator reading `lastError` has to be able to tell a turn
+ * nobody finished apart from one a provider or a tool actually failed, and
+ * matching on prose that lives in one place beats each caller inventing
+ * its own guess at the wording.
+ */
+export declare const ABANDONED_TURN_ERROR = "stratusd stopped while this turn was still running; it was not resumed. Send the message again.";
 /**
  * The always-on Stratus process. One gateway holds the roster, the durable
  * session store, the shared event bus, and a pool of runners keyed by

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAGL,QAAQ,EAGR,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,OAAO,EACZ,KAAK,YAAY,EAElB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAGL,KAAK,UAAU,EAChB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAqBL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACtB,MAAM,qBAAqB,CAAC;AAK7B;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,qBAAa,kBAAmB,YAAW,YAAY;IACrD,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAe;gBAEtB,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,yBAA8B;IAuD/D,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IASzE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;IAO7C,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAO3C,kEAAkE;IAClE,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAmB/G,KAAK,IAAI,IAAI;CAGd;AAED;;;;;GAKG;AACH,mEAAmE;AACnE,MAAM,WAAW,cAAc;IAC7B,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oDAAoD;IACpD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8CAA8C;IAC9C,aAAa,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa,GACxB,MAAM,UAAU,EAChB,WAAW,gBAAgB,EAC3B,KAAK,gBAAgB,EACrB,SAAS,cAAc,KACtB;IAAE,SAAS,EAAE,gBAAgB,CAAC;IAAC,GAAG,EAAE,gBAAgB,CAAA;CAiDtD,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,EAAE,gBAAgB,CAAC;IACvB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,iFAAiF;IACjF,QAAQ,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACnC,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,OAAO;IACtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,qFAAqF;IACrF,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,mEAAmE;IACnE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;IACvB,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,kDAAkD;IAClD,MAAM,IAAI,eAAe,EAAE,CAAC;CAC7B;AAUD;;;;;GAKG;AACH,eAAO,MAAM,aAAa,GAAI,UAAS,cAAmB,KAAG,OAolB5D,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAGL,QAAQ,EAIR,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,cAAc,EAEnB,KAAK,UAAU,EACf,KAAK,OAAO,EACZ,KAAK,aAAa,EAClB,KAAK,YAAY,EAEjB,KAAK,QAAQ,EACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAGL,KAAK,UAAU,EAChB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAGL,KAAK,kBAAkB,EAExB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAuBL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACtB,MAAM,qBAAqB,CAAC;AAiB7B;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,qBAAa,kBAAmB,YAAW,YAAY;IACrD,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAe;gBAEtB,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,yBAA8B;IAuD/D,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IASzE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;IAO7C,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAO3C;;;;OAIG;IACG,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAO/D;;;;;;;;;;;;;;;;OAgBG;IACH;;;;;;;OAOG;IACH,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAWvC,mBAAmB,IAAI,MAAM,CAAC,MAAM,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IAoBvF;;;;;;OAMG;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAsB/H,KAAK,IAAI,IAAI;CAGd;AAED;;;;;;;;GAQG;AACH,OAAO,EAAE,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAEzE;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,QAAQ,EAAE,UAAU,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,iBAAiB,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC;IAC1D,IAAI,EAAE,QAAQ,CAAC;IACf;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;AAE7F;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC;IAC1D,IAAI,EAAE,QAAQ,CAAC;IACf,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,CAAC;IACvB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,SAAS,GAAG,eAAe,CAAC;CACtC;AAED,qEAAqE;AACrE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,QAAQ,CAAC;IACf,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,mEAAmE;AACnE,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IACtB,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,EAAE,gBAAgB,CAAC;IACvB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,iFAAiF;IACjF,QAAQ,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACnC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,SAAS,EAAE,iBAAiB,KAAK,cAAc,CAAC,CAAC;IAChF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,OAAO;IACtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,qFAAqF;IACrF,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,mEAAmE;IACnE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;IACvB,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,kDAAkD;IAClD,MAAM,IAAI,eAAe,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,YAAY,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAC3C;;;;;OAKG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACpD,4DAA4D;IAC5D,gBAAgB,IAAI,eAAe,EAAE,CAAC;IACtC;;;;;;;;;OASG;IACH,KAAK,IAAI,WAAW,EAAE,CAAC;IACvB;;;;OAIG;IACH,OAAO,IAAI,mBAAmB,EAAE,CAAC;IACjC;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,WAAW,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC,CAAC;IACjE;;;;;;;OAOG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IACvE;;;;;;OAMG;IACH,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC;CACvD;AAUD;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,oGACkE,CAAC;AAEpG;;;;;GAKG;AACH,eAAO,MAAM,aAAa,GAAI,UAAS,cAAmB,KAAG,OA64C5D,CAAC"}