@superdurable/dex-agents 0.4.0 → 0.6.0

package/dist/src/agent-local-directory-media-store.js

@@ -0,0 +1,417 @@
+// Copyright (c) 2026 Super Durable, Inc.
+//
+// Licensed under the Sustainable Use License 1.0.
+// You may not use this file except in compliance with the License.
+// See the LICENSE file in the repository root.
+//
+// SPDX-License-Identifier: LicenseRef-Sustainable-Use-1.0
+import { randomBytes } from "node:crypto";
+import { constants } from "node:fs";
+import { lstat, mkdir, open, realpath, rename, stat, unlink } from "node:fs/promises";
+import { posix } from "node:path";
+import { setTimeout as delay } from "node:timers/promises";
+import { MediaStoreError, buildImageReference, requireShortImageUris, requireStoreImageReference, verifyImageBytes, } from "./agent-media.js";
+const imageDirectoryName = "sha256";
+const directoryMode = 0o700;
+const fileMode = 0o600;
+// Errors of an O_NOFOLLOW | O_NONBLOCK open that name a symbolic link or a non-regular file.
+const notRegularFileErrorCodes = new Set(["ELOOP", "EISDIR", "ENXIO", "EOPNOTSUPP"]);
+// Opens to try, and milliseconds between them, while concurrent putImage calls replace the file.
+const openAttempts = 10;
+const openRetryDelayMs = 5;
+/**
+ * Keeps image bytes in a local directory, one file per distinct image.
+ *
+ * Use it when every client and Worker of a session runs on one machine, such as a command-line tool in local mode;
+ * use `S3MediaStore` from `@superdurable/dex-agents/s3` when they run on different machines.
+ *
+ * The file of an image is `<root>/sha256/<sha256>`, and a reference's `uri` is `file://<root>/sha256/<sha256>`, where
+ * `<root>` is the absolute root with every UTF-8 byte other than ASCII letters, digits, `-`, `.`, `_`, `~`, and `/`
+ * written as `%XX` in uppercase hex. The root is made absolute as text: `.` and `..` segments and repeated or trailing
+ * `/` characters are resolved without reading the file system, symbolic links are not resolved, and Unicode is not
+ * normalized. A client and a Worker that pass the same root therefore build the same references, in every core.
+ *
+ * `putImage` copies the bytes into a temporary file in the same directory, syncs it, and renames it into place, so a
+ * reader never sees a partial image. An existing file with the same bytes is success, so retried and concurrent uploads
+ * of the same bytes leave one file; an existing file with other bytes is replaced. Directories the store creates get
+ * mode `0700` and image files mode `0600`, narrowed further by the process umask. When `putImage` writes the image, it
+ * syncs the file before the rename. Before every `putImage` returns, including when an identical file already exists
+ * and nothing is written, it syncs the `sha256` directory, the root, and the root's parent. It also syncs the parent of
+ * each directory it creates. Directories above the root's parent must already be durable: a concurrent creator of a
+ * deeper missing ancestor is out of scope.
+ *
+ * The store refuses a `sha256` directory or an image file that is a symbolic link or not a regular file, and an image
+ * file with more than one hard link, with `MediaStoreError`, on both upload and read. The root itself may be a symbolic
+ * link. Node.js has no `openat`, so this store opens files by path and checks before and after each operation: it
+ * checks the `sha256` directory with `lstat` and opens the file with `O_NOFOLLOW`, then confirms that the real path of
+ * the `sha256` directory is still the root's and that the path still names the opened or written file. A read that
+ * fails the check returns nothing, and a write that fails it removes the file it wrote when it can still find it. A
+ * process of the same user that can write the `0700` root can still race a directory swap between these checks; the
+ * Python core opens every path relative to an open directory and has no such window. `getImage` reads only
+ * references under this store's root, refuses a file whose size differs from the reference before reading it, reads at
+ * most one byte more than `sizeBytes`, and checks the bytes with `verifyImageBytes`. It needs a POSIX file system; on
+ * Windows the constructor throws.
+ *
+ * Session deletion does not delete files. A runner reads a session's images again whenever a model call replays them,
+ * so keep every file at least as long as any session that references it can still run a turn or replay its history. A
+ * missing file makes those turns fail with `MediaStoreError`.
+ *
+ * @example
+ * ```ts
+ * import { LocalDirectoryMediaStore } from "@superdurable/dex-agents";
+ *
+ * const store = new LocalDirectoryMediaStore("/var/lib/my-agent/media");
+ * const reference = await store.putImage(screenshotPng);
+ * // reference.uri === "file:///var/lib/my-agent/media/sha256/9f2c..."
+ * ```
+ * @since 0.5.0
+ */
+export class LocalDirectoryMediaStore {
+    /** The absolute root directory, made absolute as text, without a trailing `/`. */
+    root;
+    /** The location that every reference of this store starts with: `"file://<root>"`, with the root percent-encoded. */
+    storeUri;
+    /**
+     * Creates a store; it touches no file until the first upload or read.
+     *
+     * @param root - Absolute path of the directory that holds the images, such as `"/var/lib/my-agent/media"`. The first
+     * upload creates it and any missing parent directory with mode `0700`.
+     * @throws {TypeError} When `root` is not absolute, is not well-formed Unicode, contains NUL, or is the file system
+     * root.
+     * @throws {RangeError} When `root` makes image URIs longer than `maxImageUriLength`.
+     * @throws {Error} On a system without POSIX file access, such as Windows.
+     */
+    constructor(root) {
+        if (process.platform === "win32" || constants.O_NOFOLLOW === undefined) {
+            throw new Error("LocalDirectoryMediaStore needs a POSIX file system");
+        }
+        this.root = absoluteRoot(root);
+        this.storeUri = `file://${percentEncodePath(this.root)}`;
+        requireShortImageUris(this.storeUri);
+    }
+    /**
+     * Returns the path of the file of the image with this SHA-256.
+     *
+     * @param sha256 - SHA-256 of the bytes as 64 lowercase hex digits.
+     * @returns `"<root>/sha256/<sha256>"`.
+     */
+    imagePath(sha256) {
+        return `${this.imageDirectory()}/${sha256}`;
+    }
+    /**
+     * Stores one image unless the directory already has it, and returns its reference.
+     *
+     * @param data - PNG, JPEG, GIF, or WebP bytes, at most `maxImageBytes`.
+     * @returns The reference.
+     * @throws {ImageValidationError} When the bytes are not a valid image for `buildImageReference`. Nothing is written.
+     * @throws {MediaStoreError} When the `sha256` directory or the image's file is a symbolic link or not a directory or
+     * regular file, the image's file has more than one hard link, or the `sha256` directory changed during the write.
+     * @throws A Node.js system error (`NodeJS.ErrnoException`) when the file system refuses a write, such as for missing
+     * permissions or a full disk. Retrying is safe.
+     */
+    async putImage(data) {
+        const reference = buildImageReference(data, this.storeUri);
+        const copy = Uint8Array.from(data);
+        await this.makeRoot();
+        try {
+            await this.requireImageDirectory();
+        }
+        catch (error) {
+            if (!isSystemError(error, "ENOENT")) {
+                throw error;
+            }
+            await makeDirectory(this.imageDirectory());
+            await this.requireImageDirectory();
+        }
+        if (!(await this.hasImageFile(reference, copy))) {
+            await this.replaceImageFile(reference, copy);
+        }
+        // Every put syncs its directory chain: a concurrent creator may not have yet.
+        await syncDirectory(this.imageDirectory());
+        await syncDirectory(this.root);
+        await syncDirectory(posix.dirname(this.root));
+        return reference;
+    }
+    /**
+     * Returns the bytes of one image in this store.
+     *
+     * @param reference - A reference under this store's root.
+     * @returns The exact bytes, checked with `verifyImageBytes`.
+     * @throws {ImageValidationError} When the reference's fields are invalid.
+     * @throws {MediaStoreError} When the reference is outside this store's root, the file is missing, is a symbolic link
+     * or not a regular file, has more than one hard link, moved during the read, or its bytes do not match.
+     * @throws A Node.js system error (`NodeJS.ErrnoException`) when the file system refuses the read for another reason.
+     */
+    async getImage(reference) {
+        requireStoreImageReference(reference, this.storeUri);
+        const missing = (cause) => new MediaStoreError(`image ${reference.uri} is not in the media store`, { cause });
+        const mismatch = () => new MediaStoreError(`image ${reference.uri} does not match its sha256 and size`);
+        let handle;
+        try {
+            await this.requireImageDirectory();
+            handle = await this.openImageFile(reference);
+        }
+        catch (error) {
+            throw isSystemError(error, "ENOENT") ? missing(error) : error;
+        }
+        let data;
+        try {
+            if ((await handle.stat()).size !== reference.sizeBytes) {
+                throw mismatch();
+            }
+            // One byte more than expected tells a file that grew apart without reading all of it.
+            data = await readAtMost(handle, reference.sizeBytes + 1);
+        }
+        finally {
+            await handle.close();
+        }
+        if (data.length !== reference.sizeBytes) {
+            throw mismatch();
+        }
+        return verifyImageBytes(reference, data);
+    }
+    imageDirectory() {
+        return `${this.root}/${imageDirectoryName}`;
+    }
+    /** Creates the root and its missing parents with mode `0700`, syncing the parent of each. */
+    async makeRoot() {
+        const missing = [];
+        let path = this.root;
+        while (!(await isDirectory(path))) {
+            missing.push(path);
+            path = posix.dirname(path);
+        }
+        for (const directory of missing.reverse()) {
+            await makeDirectory(directory);
+            await syncDirectory(posix.dirname(directory));
+        }
+    }
+    /** Throws `MediaStoreError` unless the `sha256` directory is a real directory, not a symbolic link. */
+    async requireImageDirectory() {
+        const stats = await lstat(this.imageDirectory());
+        if (!stats.isDirectory()) {
+            throw new MediaStoreError(`media store directory ${this.imageDirectory()} is a symbolic link or not a directory`);
+        }
+    }
+    /** Returns whether the image's file exists and holds exactly `data`. */
+    async hasImageFile(reference, data) {
+        let handle;
+        try {
+            handle = await this.openImageFile(reference);
+        }
+        catch (error) {
+            if (isSystemError(error, "ENOENT")) {
+                return false;
+            }
+            throw error;
+        }
+        try {
+            if ((await handle.stat()).size !== data.length) {
+                return false;
+            }
+            return Buffer.from(await readAtMost(handle, data.length + 1)).equals(data);
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    /** Opens the reference's image file, refusing symbolic links, special files, hard links, and moved files. */
+    async openImageFile(reference) {
+        for (let attempt = 0; attempt < openAttempts; attempt += 1) {
+            const handle = await this.openImageFileOnce(reference);
+            if (handle !== undefined) {
+                return handle;
+            }
+            await delay(openRetryDelayMs * (attempt + 1));
+        }
+        throw new MediaStoreError(`image ${reference.uri} was replaced while the media store opened it`);
+    }
+    /** Returns the open file, or `undefined` when a rename replaced it after the open. */
+    async openImageFileOnce(reference) {
+        const notRegularFile = (cause) => new MediaStoreError(`image ${reference.uri} is a symbolic link or not a regular file in the media store`, {
+            cause,
+        });
+        let handle;
+        try {
+            // O_NONBLOCK keeps a planted FIFO from blocking the open.
+            handle = await open(this.imagePath(reference.sha256), constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+        }
+        catch (error) {
+            if (isSystemError(error, ...notRegularFileErrorCodes)) {
+                throw notRegularFile(error);
+            }
+            throw error;
+        }
+        const stats = await handle.stat();
+        if (!stats.isFile()) {
+            await handle.close();
+            throw notRegularFile();
+        }
+        if (stats.nlink === 0) {
+            await handle.close();
+            return undefined;
+        }
+        if (stats.nlink !== 1) {
+            await handle.close();
+            // Another name for the inode may lie outside the root.
+            throw new MediaStoreError(`image ${reference.uri} has more than one hard link in the media store`);
+        }
+        if (!(await this.isImageDirectoryInStore())) {
+            await handle.close();
+            throw this.directoryChanged(reference);
+        }
+        if (!(await isSameFile(this.imagePath(reference.sha256), stats))) {
+            // A concurrent rename replaced the file after the open; the caller opens it again.
+            await handle.close();
+            return undefined;
+        }
+        return handle;
+    }
+    /** Returns whether the `sha256` directory is a real directory whose real path is the root's. */
+    async isImageDirectoryInStore() {
+        try {
+            if (!(await lstat(this.imageDirectory())).isDirectory()) {
+                return false;
+            }
+            const expectedDirectory = posix.join(await realpath(this.root), imageDirectoryName);
+            return (await realpath(this.imageDirectory())) === expectedDirectory;
+        }
+        catch (error) {
+            if (isSystemError(error, "ENOENT", "ENOTDIR", "ELOOP")) {
+                return false;
+            }
+            throw error;
+        }
+    }
+    directoryChanged(reference) {
+        return new MediaStoreError(`media store directory ${this.imageDirectory()} changed while image ${reference.uri} was read or written`);
+    }
+    async replaceImageFile(reference, data) {
+        const directory = this.imageDirectory();
+        const imagePath = this.imagePath(reference.sha256);
+        const temporaryPath = `${directory}/.${reference.sha256}.${randomBytes(8).toString("hex")}.tmp`;
+        const handle = await open(temporaryPath, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, fileMode);
+        let written;
+        try {
+            try {
+                await handle.writeFile(data);
+                await handle.sync();
+                written = await handle.stat();
+            }
+            finally {
+                await handle.close();
+            }
+            // rename replaces the entry itself, never a link's target, and is atomic.
+            await rename(temporaryPath, imagePath);
+        }
+        catch (error) {
+            // The original error matters more than a temporary file left behind.
+            await unlink(temporaryPath).catch(() => undefined);
+            throw error;
+        }
+        if (!(await this.isImageDirectoryInStore())) {
+            await removeIfSameFile(imagePath, written);
+            throw this.directoryChanged(reference);
+        }
+        // A concurrent putImage may have renamed its own copy over ours; accept it only when it holds these bytes.
+        if (!(await isSameFile(imagePath, written)) && !(await this.hasImageFile(reference, data))) {
+            throw this.directoryChanged(reference);
+        }
+    }
+}
+async function isSameFile(path, file) {
+    try {
+        const placed = await lstat(path);
+        return placed.dev === file.dev && placed.ino === file.ino;
+    }
+    catch (error) {
+        if (isSystemError(error, "ENOENT", "ENOTDIR", "ELOOP")) {
+            return false;
+        }
+        throw error;
+    }
+}
+async function isDirectory(path) {
+    try {
+        return (await stat(path)).isDirectory();
+    }
+    catch {
+        // Any failure means "create it"; mkdir then reports the real error.
+        return false;
+    }
+}
+async function makeDirectory(path) {
+    try {
+        await mkdir(path, { mode: directoryMode });
+    }
+    catch (error) {
+        if (!isSystemError(error, "EEXIST")) {
+            throw error;
+        }
+    }
+}
+async function syncDirectory(path) {
+    const handle = await open(path, constants.O_RDONLY);
+    try {
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+/** Removes the file at `path` when it is still `file`, wherever the path now leads. */
+async function removeIfSameFile(path, file) {
+    try {
+        const placed = await lstat(path);
+        if (placed.dev === file.dev && placed.ino === file.ino) {
+            await unlink(path);
+        }
+    }
+    catch {
+        // Best effort: the caller already throws, and the file may be gone.
+    }
+}
+function absoluteRoot(root) {
+    if (!root.startsWith("/")) {
+        throw new TypeError("LocalDirectoryMediaStore root must be an absolute path");
+    }
+    // In a u-mode pattern, only a lone surrogate matches this range.
+    if (/[\uD800-\uDFFF]/u.test(root)) {
+        throw new TypeError("LocalDirectoryMediaStore root must be well-formed Unicode");
+    }
+    if (root.includes("\0")) {
+        throw new TypeError("LocalDirectoryMediaStore root must not contain NUL");
+    }
+    const absolute = posix.resolve(root);
+    if (absolute === "/") {
+        throw new TypeError("LocalDirectoryMediaStore root must not be the file system root");
+    }
+    return absolute;
+}
+/** Writes every UTF-8 byte other than ASCII letters, digits, `-._~` and `/` as `%XX`, as Python's `quote` does. */
+function percentEncodePath(path) {
+    let encoded = "";
+    for (const byte of Buffer.from(path, "utf8")) {
+        const character = String.fromCharCode(byte);
+        encoded += /^[A-Za-z0-9\-._~\/]$/.test(character)
+            ? character
+            : `%${byte.toString(16).toUpperCase().padStart(2, "0")}`;
+    }
+    return encoded;
+}
+async function readAtMost(handle, limit) {
+    const buffer = Buffer.alloc(limit);
+    let total = 0;
+    while (total < limit) {
+        const { bytesRead } = await handle.read(buffer, total, limit - total, null);
+        if (bytesRead === 0) {
+            break;
+        }
+        total += bytesRead;
+    }
+    return new Uint8Array(buffer.buffer, buffer.byteOffset, total);
+}
+function isSystemError(error, ...codes) {
+    return error instanceof Error && codes.includes(error.code ?? "");
+}
+//# sourceMappingURL=agent-local-directory-media-store.js.map

package/dist/src/agent-local-directory-media-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-local-directory-media-store.js","sourceRoot":"","sources":["../../src/agent-local-directory-media-store.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,kDAAkD;AAClD,mEAAmE;AACnE,+CAA+C;AAC/C,EAAE;AACF,0DAA0D;AAE1D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAc,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAmB,MAAM,kBAAkB,CAAC;AACvG,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,0BAA0B,EAC1B,gBAAgB,GAEjB,MAAM,kBAAkB,CAAC;AAG1B,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AACpC,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,6FAA6F;AAC7F,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;AAC1G,iGAAiG;AACjG,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,MAAM,OAAO,wBAAwB;IACnC,kFAAkF;IAClE,IAAI,CAAS;IAC7B,qHAAqH;IACrG,QAAQ,CAAS;IAEjC;;;;;;;;;OASG;IACH,YAAmB,IAAY;QAC7B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,UAAU,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACI,SAAS,CAAC,MAAc;QAC7B,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,MAAM,EAAE,CAAC;IAC9C,CAAC;IAED;;;;;;;;;;OAUG;IACI,KAAK,CAAC,QAAQ,CAAC,IAAgB;QACpC,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACpC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YAC3C,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,8EAA8E;QAC9E,MAAM,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAC3C,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;OASG;IACI,KAAK,CAAC,QAAQ,CAAC,SAA8B;QAClD,0BAA0B,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,CAAC,KAAc,EAAmB,EAAE,CAClD,IAAI,eAAe,CAAC,SAAS,SAAS,CAAC,GAAG,4BAA4B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,GAAoB,EAAE,CACrC,IAAI,eAAe,CAAC,SAAS,SAAS,CAAC,GAAG,qCAAqC,CAAC,CAAC;QACnF,IAAI,MAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACnC,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAChE,CAAC;QACD,IAAI,IAAgB,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,SAAS,EAAE,CAAC;gBACvD,MAAM,QAAQ,EAAE,CAAC;YACnB,CAAC;YACD,sFAAsF;YACtF,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,QAAQ,EAAE,CAAC;QACnB,CAAC;QACD,OAAO,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAEO,cAAc;QACpB,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,kBAAkB,EAAE,CAAC;IAC9C,CAAC;IAED,6FAA6F;IACrF,KAAK,CAAC,QAAQ;QACpB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACrB,OAAO,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1C,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;YAC/B,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,uGAAuG;IAC/F,KAAK,CAAC,qBAAqB;QACjC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,eAAe,CACvB,yBAAyB,IAAI,CAAC,cAAc,EAAE,wCAAwC,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wEAAwE;IAChE,KAAK,CAAC,YAAY,CAAC,SAA8B,EAAE,IAAgB;QACzE,IAAI,MAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACnC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC/C,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7E,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,6GAA6G;IACrG,KAAK,CAAC,aAAa,CAAC,SAA8B;QACxD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,YAAY,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,KAAK,CAAC,gBAAgB,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,SAAS,SAAS,CAAC,GAAG,+CAA+C,CAAC,CAAC;IACnG,CAAC;IAED,sFAAsF;IAC9E,KAAK,CAAC,iBAAiB,CAAC,SAA8B;QAC5D,MAAM,cAAc,GAAG,CAAC,KAAe,EAAmB,EAAE,CAC1D,IAAI,eAAe,CAAC,SAAS,SAAS,CAAC,GAAG,8DAA8D,EAAE;YACxG,KAAK;SACN,CAAC,CAAC;QACL,IAAI,MAAkB,CAAC;QACvB,IAAI,CAAC;YACH,0DAA0D;YAC1D,MAAM,GAAG,MAAM,IAAI,CACjB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,EAChC,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CACjE,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,aAAa,CAAC,KAAK,EAAE,GAAG,wBAAwB,CAAC,EAAE,CAAC;gBACtD,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,cAAc,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,uDAAuD;YACvD,MAAM,IAAI,eAAe,CAAC,SAAS,SAAS,CAAC,GAAG,iDAAiD,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC,EAAE,CAAC;YAC5C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACjE,mFAAmF;YACnF,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gGAAgG;IACxF,KAAK,CAAC,uBAAuB;QACnC,IAAI,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;YACpF,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,KAAK,iBAAiB,CAAC;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;gBACvD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,SAA8B;QACrD,OAAO,IAAI,eAAe,CACxB,yBAAyB,IAAI,CAAC,cAAc,EAAE,wBAAwB,SAAS,CAAC,GAAG,sBAAsB,CAC1G,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,SAA8B,EAAE,IAAgB;QAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,aAAa,GAAG,GAAG,SAAS,KAAK,SAAS,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAChG,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,aAAa,EACb,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAChF,QAAQ,CACT,CAAC;QACF,IAAI,OAAc,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC7B,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAChC,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YACD,0EAA0E;YAC1E,MAAM,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC,EAAE,CAAC;YAC5C,MAAM,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC3C,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;QACD,2GAA2G;QAC3G,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAC3F,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;CACF;AAED,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAW;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;YACvD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAW;IACvD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YACvD,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;IAChF,CAAC;IACD,iEAAiE;IACjE,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,mHAAmH;AACnH,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5C,OAAO,IAAI,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAAkB,EAAE,KAAa;IACzD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,KAAK,EAAE,CAAC;QACrB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC;QAC5E,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;YACpB,MAAM;QACR,CAAC;QACD,KAAK,IAAI,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,GAAG,KAAe;IACvD,OAAO,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AAC/F,CAAC"}