@swarmdo/cli 1.4.8

package/dist/src/appliance/rvfa-format.js

@@ -0,0 +1,393 @@
+/**
+ * RVFA (SwarmVector Format Appliance) — Binary format reader/writer
+ * for self-contained Swarmdo appliances.
+ *
+ * Binary layout:
+ *   [4B magic "RVFA"] [4B version u32LE] [4B header_len u32LE]
+ *   [header_len B JSON header] [section data ...] [32B SHA256 footer]
+ */
+import { createHash } from 'node:crypto';
+import { gzipSync, gunzipSync } from 'node:zlib';
+import { readFile } from 'node:fs/promises';
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+export const RVFA_MAGIC = Buffer.from('RVFA');
+export const RVFA_VERSION = 1;
+const MAGIC_SIZE = 4;
+const VERSION_SIZE = 4;
+const HEADER_LEN_SIZE = 4;
+const PREAMBLE_SIZE = MAGIC_SIZE + VERSION_SIZE + HEADER_LEN_SIZE; // 12
+const SHA256_SIZE = 32;
+const MAX_HEADER_JSON_SIZE = 1024 * 1024; // 1 MB
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function sha256(data) {
+    return createHash('sha256').update(data).digest('hex');
+}
+function sha256Bytes(data) {
+    return createHash('sha256').update(data).digest();
+}
+/** Format bytes into a human-readable string (e.g. '2.3 GB'). */
+export function formatSize(bytes) {
+    if (bytes < 0)
+        return '0 B';
+    const units = ['B', 'KB', 'MB', 'GB', 'TB'];
+    let idx = 0;
+    let value = bytes;
+    while (value >= 1024 && idx < units.length - 1) {
+        value /= 1024;
+        idx++;
+    }
+    return idx === 0 ? `${value} ${units[idx]}` : `${value.toFixed(1)} ${units[idx]}`;
+}
+/** Create a sensible default header for a given profile. */
+export function createDefaultHeader(profile) {
+    const modelDefaults = {
+        cloud: { provider: 'api-vault', vaultEncryption: 'aes-256-gcm' },
+        hybrid: {
+            provider: 'hybrid',
+            engine: 'swarmllm-0.1.0',
+            models: ['phi-3-mini-q4'],
+            vaultEncryption: 'aes-256-gcm',
+        },
+        offline: {
+            provider: 'swarmllm',
+            engine: 'swarmllm-0.1.0',
+            models: ['phi-3-mini-q4'],
+        },
+    };
+    const capDefaults = {
+        cloud: ['mcp', 'swarm', 'memory', 'hooks', 'neural', 'api-vault'],
+        hybrid: ['mcp', 'swarm', 'memory', 'hooks', 'neural', 'swarmllm', 'api-vault'],
+        offline: ['mcp', 'swarm', 'memory', 'hooks', 'neural', 'swarmllm'],
+    };
+    return {
+        magic: 'RVFA',
+        version: RVFA_VERSION,
+        name: '',
+        appVersion: '3.5.0',
+        arch: 'x86_64',
+        platform: 'linux',
+        profile,
+        created: new Date().toISOString(),
+        sections: [],
+        boot: {
+            entrypoint: '/opt/swarmdo/bin/swarmdo',
+            args: ['--appliance'],
+            env: {},
+            isolation: profile === 'cloud' ? 'container' : 'native',
+        },
+        models: modelDefaults[profile],
+        capabilities: capDefaults[profile],
+    };
+}
+/** Type-guard that validates an unknown value is a well-formed RvfaHeader. */
+export function validateHeader(header) {
+    if (typeof header !== 'object' || header === null)
+        return false;
+    const h = header;
+    const str = (v) => typeof v === 'string';
+    const obj = (v) => typeof v === 'object' && v !== null;
+    const oneOf = (v, vals) => vals.includes(v);
+    if (h.magic !== 'RVFA' || typeof h.version !== 'number' || h.version < 1)
+        return false;
+    if (!str(h.name) || !str(h.appVersion) || !str(h.arch) || !str(h.platform))
+        return false;
+    if (!oneOf(h.profile, ['cloud', 'hybrid', 'offline']))
+        return false;
+    if (!str(h.created) || !Array.isArray(h.sections) || !Array.isArray(h.capabilities))
+        return false;
+    if (!obj(h.boot))
+        return false;
+    const boot = h.boot;
+    if (!str(boot.entrypoint) || !Array.isArray(boot.args) || !obj(boot.env))
+        return false;
+    if (!oneOf(boot.isolation, ['container', 'microvm', 'native']))
+        return false;
+    if (!obj(h.models))
+        return false;
+    if (!oneOf(h.models.provider, ['swarmllm', 'api-vault', 'hybrid']))
+        return false;
+    for (const sec of h.sections) {
+        if (!obj(sec))
+            return false;
+        const s = sec;
+        if (!str(s.id) || !str(s.type) || !str(s.sha256))
+            return false;
+        if (typeof s.offset !== 'number' || typeof s.size !== 'number')
+            return false;
+        if (typeof s.originalSize !== 'number')
+            return false;
+        if (!oneOf(s.compression, ['none', 'gzip', 'zstd']))
+            return false;
+    }
+    return true;
+}
+export class RvfaWriter {
+    header;
+    staged = [];
+    constructor(partial) {
+        const profile = partial.profile ?? 'cloud';
+        const defaults = createDefaultHeader(profile);
+        this.header = { ...defaults, ...partial, sections: [] };
+    }
+    /**
+     * Add a section to the appliance image.
+     *
+     * @param id      Section identifier (e.g. 'kernel', 'runtime', 'swarmdo').
+     * @param data    Raw (uncompressed) section payload.
+     * @param options Optional compression and MIME type overrides.
+     */
+    addSection(id, data, options) {
+        const compression = options?.compression ?? 'gzip';
+        const mimeType = options?.type ?? 'application/octet-stream';
+        let compressed;
+        let actualCompression = compression;
+        if (compression === 'gzip') {
+            compressed = gzipSync(data);
+        }
+        else if (compression === 'zstd') {
+            // zstd not available in core Node.js — fall back to gzip
+            compressed = gzipSync(data);
+            actualCompression = 'gzip';
+        }
+        else {
+            compressed = data;
+        }
+        const hash = sha256(compressed);
+        this.staged.push({
+            id,
+            type: mimeType,
+            data: compressed,
+            originalSize: data.length,
+            sha256: hash,
+            compression: actualCompression,
+        });
+    }
+    /**
+     * Assemble the final RVFA binary image.
+     *
+     * Layout:
+     *   [4B magic] [4B version] [4B header_len]
+     *   [header JSON bytes]
+     *   [section 0 bytes] [section 1 bytes] ...
+     *   [32B SHA256 of all section bytes combined]
+     */
+    build() {
+        // Build section descriptors with placeholder offsets
+        const sectionDescriptors = this.staged.map((s) => ({
+            id: s.id,
+            type: s.type,
+            offset: 0,
+            size: s.data.length,
+            originalSize: s.originalSize,
+            sha256: s.sha256,
+            compression: s.compression,
+        }));
+        // Iteratively compute offsets: the header contains the offsets as JSON,
+        // so changing offsets can change the header length. We converge quickly.
+        this.header.sections = sectionDescriptors;
+        let headerJson = Buffer.from(JSON.stringify(this.header), 'utf-8');
+        let prevLen = -1;
+        for (let attempt = 0; attempt < 5 && headerJson.length !== prevLen; attempt++) {
+            prevLen = headerJson.length;
+            const dataAreaStart = PREAMBLE_SIZE + headerJson.length;
+            let cursor = dataAreaStart;
+            for (let i = 0; i < this.staged.length; i++) {
+                sectionDescriptors[i].offset = cursor;
+                cursor += this.staged[i].data.length;
+            }
+            this.header.sections = sectionDescriptors;
+            headerJson = Buffer.from(JSON.stringify(this.header), 'utf-8');
+        }
+        // Build preamble buffers
+        const magicBuf = Buffer.from('RVFA');
+        const versionBuf = Buffer.alloc(VERSION_SIZE);
+        versionBuf.writeUInt32LE(RVFA_VERSION, 0);
+        const headerLenBuf = Buffer.alloc(HEADER_LEN_SIZE);
+        headerLenBuf.writeUInt32LE(headerJson.length, 0);
+        // Concatenate section data
+        const sectionBuffers = this.staged.map((s) => s.data);
+        const allSectionData = Buffer.concat(sectionBuffers);
+        // Footer: SHA256 of all section data combined
+        const footer = sha256Bytes(allSectionData);
+        return Buffer.concat([
+            magicBuf,
+            versionBuf,
+            headerLenBuf,
+            headerJson,
+            allSectionData,
+            footer,
+        ]);
+    }
+}
+// ---------------------------------------------------------------------------
+// RvfaReader
+// ---------------------------------------------------------------------------
+export class RvfaReader {
+    buf;
+    header;
+    constructor(buf, header) {
+        this.buf = buf;
+        this.header = header;
+    }
+    /** Parse an RVFA image from an in-memory Buffer. */
+    static fromBuffer(buf) {
+        if (buf.length < PREAMBLE_SIZE) {
+            throw new Error('Buffer too small to contain RVFA preamble');
+        }
+        // Magic
+        const magic = buf.subarray(0, MAGIC_SIZE).toString('ascii');
+        if (magic !== 'RVFA') {
+            throw new Error(`Invalid RVFA magic: expected "RVFA", got "${magic}"`);
+        }
+        // Version
+        const version = buf.readUInt32LE(MAGIC_SIZE);
+        if (version !== RVFA_VERSION) {
+            throw new Error(`Unsupported RVFA version: ${version} (expected ${RVFA_VERSION})`);
+        }
+        // Header length
+        const headerLen = buf.readUInt32LE(MAGIC_SIZE + VERSION_SIZE);
+        if (headerLen > MAX_HEADER_JSON_SIZE) {
+            throw new Error(`Header JSON exceeds maximum size (${headerLen} > ${MAX_HEADER_JSON_SIZE})`);
+        }
+        if (PREAMBLE_SIZE + headerLen > buf.length) {
+            throw new Error('Buffer too small to contain declared header');
+        }
+        // Parse header JSON
+        const headerSlice = buf.subarray(PREAMBLE_SIZE, PREAMBLE_SIZE + headerLen);
+        let parsed;
+        try {
+            parsed = JSON.parse(headerSlice.toString('utf-8'));
+        }
+        catch {
+            throw new Error('Failed to parse RVFA header JSON');
+        }
+        if (!validateHeader(parsed)) {
+            throw new Error('RVFA header failed validation');
+        }
+        const header = parsed;
+        // Bounds-check every section offset
+        const totalSize = buf.length;
+        for (const sec of header.sections) {
+            if (sec.offset < 0 || sec.size < 0) {
+                throw new Error(`Section "${sec.id}" has negative offset or size`);
+            }
+            if (sec.offset + sec.size > totalSize - SHA256_SIZE) {
+                throw new Error(`Section "${sec.id}" extends beyond buffer ` +
+                    `(offset=${sec.offset}, size=${sec.size}, bufLen=${totalSize})`);
+            }
+        }
+        // Check for overlapping sections
+        const sorted = [...header.sections].sort((a, b) => a.offset - b.offset);
+        for (let i = 1; i < sorted.length; i++) {
+            const prev = sorted[i - 1];
+            const curr = sorted[i];
+            if (prev.offset + prev.size > curr.offset) {
+                throw new Error(`Sections "${prev.id}" and "${curr.id}" overlap ` +
+                    `(${prev.offset}+${prev.size} > ${curr.offset})`);
+            }
+        }
+        return new RvfaReader(buf, header);
+    }
+    /** Read an RVFA image from a file path. */
+    static async fromFile(path) {
+        if (path.includes('\0')) {
+            throw new Error('Path contains null bytes');
+        }
+        const data = await readFile(path);
+        return RvfaReader.fromBuffer(data);
+    }
+    /** Return the parsed header. */
+    getHeader() {
+        return this.header;
+    }
+    /** List all sections declared in the header. */
+    getSections() {
+        return this.header.sections;
+    }
+    /**
+     * Extract and decompress a section by its id.
+     *
+     * @param id  The section identifier (e.g. 'kernel', 'runtime').
+     * @returns   The decompressed section payload.
+     */
+    extractSection(id) {
+        const sec = this.header.sections.find((s) => s.id === id);
+        if (!sec) {
+            throw new Error(`Section "${id}" not found`);
+        }
+        if (sec.offset + sec.size > this.buf.length - SHA256_SIZE) {
+            throw new Error(`Section "${id}" exceeds buffer bounds`);
+        }
+        const raw = this.buf.subarray(sec.offset, sec.offset + sec.size);
+        if (sec.compression === 'gzip') {
+            return gunzipSync(raw);
+        }
+        if (sec.compression === 'zstd') {
+            // zstd not natively supported — attempt gzip fallback (mirrors writer)
+            try {
+                return gunzipSync(raw);
+            }
+            catch {
+                throw new Error('zstd decompression is not supported in this environment');
+            }
+        }
+        // compression === 'none'
+        return Buffer.from(raw);
+    }
+    /**
+     * Verify the integrity of the RVFA image.
+     *
+     * Checks:
+     *  1. Magic bytes
+     *  2. Version number
+     *  3. SHA256 of each section's compressed data
+     *  4. SHA256 footer (all section data combined)
+     */
+    verify() {
+        const errors = [];
+        // 1. Magic
+        const magic = this.buf.subarray(0, MAGIC_SIZE).toString('ascii');
+        if (magic !== 'RVFA') {
+            errors.push(`Invalid magic: "${magic}"`);
+        }
+        // 2. Version
+        const version = this.buf.readUInt32LE(MAGIC_SIZE);
+        if (version !== RVFA_VERSION) {
+            errors.push(`Unsupported version: ${version}`);
+        }
+        // 3. Per-section SHA256
+        const sectionDataParts = [];
+        for (const sec of this.header.sections) {
+            if (sec.offset + sec.size > this.buf.length - SHA256_SIZE) {
+                errors.push(`Section "${sec.id}" extends beyond buffer`);
+                continue;
+            }
+            const raw = this.buf.subarray(sec.offset, sec.offset + sec.size);
+            sectionDataParts.push(raw);
+            const actual = sha256(raw);
+            if (actual !== sec.sha256) {
+                errors.push(`Section "${sec.id}" SHA256 mismatch: ` +
+                    `expected ${sec.sha256}, got ${actual}`);
+            }
+        }
+        // 4. Footer SHA256
+        if (this.buf.length >= SHA256_SIZE) {
+            const allSections = Buffer.concat(sectionDataParts);
+            const expectedFooter = sha256Bytes(allSections);
+            const actualFooter = this.buf.subarray(this.buf.length - SHA256_SIZE);
+            if (!expectedFooter.equals(actualFooter)) {
+                errors.push(`Footer SHA256 mismatch: expected ${expectedFooter.toString('hex')}, ` +
+                    `got ${actualFooter.toString('hex')}`);
+            }
+        }
+        else {
+            errors.push('Buffer too small to contain SHA256 footer');
+        }
+        return { valid: errors.length === 0, errors };
+    }
+}
+//# sourceMappingURL=rvfa-format.js.map

package/dist/src/appliance/rvfa-format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rvfa-format.js","sourceRoot":"","sources":["../../../src/appliance/rvfa-format.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC9C,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAE9B,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,aAAa,GAAG,UAAU,GAAG,YAAY,GAAG,eAAe,CAAC,CAAC,KAAK;AACxE,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AA6CjD,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AACpD,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,OAAO,KAAK,IAAI,IAAI,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,KAAK,IAAI,IAAI,CAAC;QACd,GAAG,EAAE,CAAC;IACR,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,mBAAmB,CACjC,OAAuC;IAEvC,MAAM,aAAa,GAAoC;QACrD,KAAK,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE;QAChE,MAAM,EAAE;YACN,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,gBAAgB;YACxB,MAAM,EAAE,CAAC,eAAe,CAAC;YACzB,eAAe,EAAE,aAAa;SAC/B;QACD,OAAO,EAAE;YACP,QAAQ,EAAE,UAAU;YACpB,MAAM,EAAE,gBAAgB;YACxB,MAAM,EAAE,CAAC,eAAe,CAAC;SAC1B;KACF,CAAC;IAEF,MAAM,WAAW,GAA6B;QAC5C,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC;QACjE,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC;QAC9E,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC;KACnE,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,YAAY;QACrB,IAAI,EAAE,EAAE;QACR,UAAU,EAAE,OAAO;QACnB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,OAAO;QACjB,OAAO;QACP,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACjC,QAAQ,EAAE,EAAE;QACZ,IAAI,EAAE;YACJ,UAAU,EAAE,0BAA0B;YACtC,IAAI,EAAE,CAAC,aAAa,CAAC;YACrB,GAAG,EAAE,EAAE;YACP,SAAS,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;SACxD;QACD,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC;QAC9B,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,MAAe;IAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAChE,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;IAClD,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC;IAChE,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,IAAc,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAW,CAAC,CAAC;IAEzE,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvF,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACzF,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IAElG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,IAA+B,CAAC;IAC/C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAE7E,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,CAAC,KAAK,CAAE,CAAC,CAAC,MAAkC,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAE9G,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,QAAqB,EAAE,CAAC;QAC1C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5B,MAAM,CAAC,GAAG,GAA8B,CAAC;QACzC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/D,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC7E,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAWD,MAAM,OAAO,UAAU;IACb,MAAM,CAAa;IACnB,MAAM,GAAoB,EAAE,CAAC;IAErC,YAAY,OAA4B;QACtC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;QAC3C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC1D,CAAC;IAED;;;;;;OAMG;IACH,UAAU,CACR,EAAU,EACV,IAAY,EACZ,OAAmE;QAEnE,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,MAAM,CAAC;QACnD,MAAM,QAAQ,GAAG,OAAO,EAAE,IAAI,IAAI,0BAA0B,CAAC;QAE7D,IAAI,UAAkB,CAAC;QACvB,IAAI,iBAAiB,GAA6B,WAAW,CAAC;QAE9D,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;YAC3B,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;aAAM,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;YAClC,yDAAyD;YACzD,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,iBAAiB,GAAG,MAAM,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QAEhC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACf,EAAE;YACF,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,UAAU;YAChB,YAAY,EAAE,IAAI,CAAC,MAAM;YACzB,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,iBAAiB;SAC/B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK;QACH,qDAAqD;QACrD,MAAM,kBAAkB,GAAkB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChE,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC;YACT,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC,CAAC;QAEJ,wEAAwE;QACxE,yEAAyE;QACzE,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,kBAAkB,CAAC;QAC1C,IAAI,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QACnE,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;QAEjB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;YAC9E,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC;YAC5B,MAAM,aAAa,GAAG,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC;YACxD,IAAI,MAAM,GAAG,aAAa,CAAC;YAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5C,kBAAkB,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC;gBACtC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;YACvC,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,kBAAkB,CAAC;YAC1C,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QACjE,CAAC;QAED,yBAAyB;QACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC9C,UAAU,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACnD,YAAY,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAEjD,2BAA2B;QAC3B,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAErD,8CAA8C;QAC9C,MAAM,MAAM,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;QAE3C,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,QAAQ;YACR,UAAU;YACV,YAAY;YACZ,UAAU;YACV,cAAc;YACd,MAAM;SACP,CAAC,CAAC;IACL,CAAC;CACF;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAC9E,MAAM,OAAO,UAAU;IACb,GAAG,CAAS;IACZ,MAAM,CAAa;IAE3B,YAAoB,GAAW,EAAE,MAAkB;QACjD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,oDAAoD;IACpD,MAAM,CAAC,UAAU,CAAC,GAAW;QAC3B,IAAI,GAAG,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QAED,QAAQ;QACR,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,6CAA6C,KAAK,GAAG,CAAC,CAAC;QACzE,CAAC;QAED,UAAU;QACV,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,6BAA6B,OAAO,cAAc,YAAY,GAAG,CAClE,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,UAAU,GAAG,YAAY,CAAC,CAAC;QAC9D,IAAI,SAAS,GAAG,oBAAoB,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,qCAAqC,SAAS,MAAM,oBAAoB,GAAG,CAC5E,CAAC;QACJ,CAAC;QACD,IAAI,aAAa,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QAED,oBAAoB;QACpB,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,SAAS,CAAC,CAAC;QAC3E,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,MAAM,GAAG,MAAoB,CAAC;QAEpC,oCAAoC;QACpC,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,YAAY,GAAG,CAAC,EAAE,+BAA+B,CAAC,CAAC;YACrE,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,GAAG,SAAS,GAAG,WAAW,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CACb,YAAY,GAAG,CAAC,EAAE,0BAA0B;oBAC1C,WAAW,GAAG,CAAC,MAAM,UAAU,GAAG,CAAC,IAAI,YAAY,SAAS,GAAG,CAClE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QACxE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,CAAC,EAAE,UAAU,IAAI,CAAC,EAAE,YAAY;oBAC/C,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,MAAM,GAAG,CACnD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,IAAI,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,2CAA2C;IAC3C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAY;QAChC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,gCAAgC;IAChC,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,gDAAgD;IAChD,WAAW;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,EAAU;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QAEjE,IAAI,GAAG,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;YAC/B,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,IAAI,GAAG,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;YAC/B,uEAAuE;YACvE,IAAI,CAAC;gBACH,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM;QACJ,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,WAAW;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACjE,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,mBAAmB,KAAK,GAAG,CAAC,CAAC;QAC3C,CAAC;QAED,aAAa;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,wBAAwB;QACxB,MAAM,gBAAgB,GAAa,EAAE,CAAC;QACtC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;gBAC1D,MAAM,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,EAAE,yBAAyB,CAAC,CAAC;gBACzD,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;YACjE,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAE3B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CACT,YAAY,GAAG,CAAC,EAAE,qBAAqB;oBACrC,YAAY,GAAG,CAAC,MAAM,SAAS,MAAM,EAAE,CAC1C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC;YACnC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACpD,MAAM,cAAc,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;YAChD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC;YAEtE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBACzC,MAAM,CAAC,IAAI,CACT,oCAAoC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI;oBACpE,OAAO,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CACxC,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAChD,CAAC;CACF"}

package/dist/src/appliance/rvfa-runner.d.ts

@@ -0,0 +1,69 @@
+/**
+ * RVFA Runner -- Boot and run self-contained Swarmdo appliances.
+ *
+ * Supports three run modes (cli, mcp, verify) and two isolation
+ * strategies (native Node.js, container via Docker).
+ *
+ * @module @swarmdo/cli/appliance/rvfa-runner
+ */
+import type { RvfaHeader } from './rvfa-format.js';
+export interface RunOptions {
+    mode: 'cli' | 'mcp' | 'verify';
+    isolation: 'container' | 'native';
+    verbose?: boolean;
+    /** Passphrase for decrypting the API-key vault in the models section. */
+    passphrase?: string;
+}
+export interface RunResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+    /** Wall-clock duration in milliseconds. */
+    duration: number;
+}
+export declare class RvfaRunner {
+    private reader;
+    private header;
+    private constructor();
+    /** Read and parse an RVFA file from disk. Throws on invalid input. */
+    static fromFile(rvfaPath: string): Promise<RvfaRunner>;
+    /** Create a runner from an already-loaded buffer. */
+    static fromBuffer(buf: Buffer): RvfaRunner;
+    /**
+     * Boot the appliance: verify integrity, then dispatch to the
+     * requested isolation strategy and run mode.
+     */
+    boot(options: RunOptions): Promise<RunResult>;
+    /**
+     * Run natively via Node.js: extract SWARMDO section to a temp dir,
+     * configure env vars, optionally decrypt API-key vault, and spawn.
+     */
+    runNative(options: RunOptions): Promise<RunResult>;
+    /**
+     * Run in a Docker container: generate a Dockerfile from the
+     * extracted sections, build the image, and run it.
+     */
+    runContainer(options: RunOptions): Promise<RunResult>;
+    /**
+     * Run the verification suite. Extracts the VERIFY section and
+     * executes it; falls back to a basic integrity report.
+     */
+    runVerify(options: RunOptions): Promise<RunResult>;
+    /** Return appliance metadata without booting. */
+    getInfo(): {
+        header: RvfaHeader;
+        sections: {
+            id: string;
+            size: number;
+            originalSize: number;
+        }[];
+        totalSize: number;
+    };
+    /**
+     * Decrypt an API-key vault (AES-256-GCM).
+     * Layout: [16-byte IV][ciphertext][16-byte auth-tag]
+     * Key derived via PBKDF2 with salt = "rvfa-vault-{name}".
+     */
+    private decryptVault;
+}
+//# sourceMappingURL=rvfa-runner.d.ts.map

package/dist/src/appliance/rvfa-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rvfa-runner.d.ts","sourceRoot":"","sources":["../../../src/appliance/rvfa-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,kBAAkB,CAAC;AAIhE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,KAAK,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC/B,SAAS,EAAE,WAAW,GAAG,QAAQ,CAAC;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB;AA+CD,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,MAAM,CAAa;IAE3B,OAAO;IAKP,sEAAsE;WACzD,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAK5D,qDAAqD;IACrD,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;IAI1C;;;OAGG;IACG,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAWnD;;;OAGG;IACG,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAsCxD;;;OAGG;IACG,YAAY,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IA2C3D;;;OAGG;IACG,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAkCxD,iDAAiD;IACjD,OAAO,IAAI;QACT,MAAM,EAAE,UAAU,CAAC;QACnB,QAAQ,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAC/D,SAAS,EAAE,MAAM,CAAC;KACnB;IAYD;;;;OAIG;YACW,YAAY;CAkB3B"}