@trillboards/edge-sdk 0.2.3 → 0.2.6

package/dist/discovery.js

@@ -0,0 +1,499 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_CHANNELS = void 0;
+exports.buildChannelRtspUrl = buildChannelRtspUrl;
+exports.expandChannelRange = expandChannelRange;
+exports.genericChannelRangeNeedsPath = genericChannelRangeNeedsPath;
+exports.parseProbeMatches = parseProbeMatches;
+exports.buildProbeMessage = buildProbeMessage;
+exports.discoverOnvifHosts = discoverOnvifHosts;
+exports.maskRtspUrl = maskRtspUrl;
+exports.formatCamerasTable = formatCamerasTable;
+exports.runDiscover = runDiscover;
+exports.inferRecorderBrandHint = inferRecorderBrandHint;
+exports.sweepLanForRecorders = sweepLanForRecorders;
+/**
+ * discovery.ts — BYO-CCTV camera auto-discovery for the connector.
+ *
+ * Two zero-config ways for a non-technical venue owner to find their cameras
+ * without typing an RTSP URL per feed:
+ *
+ *   1. ONVIF WS-Discovery (LAN multicast) — most IP cameras + NVRs answer a
+ *      standard, UNAUTHENTICATED WS-Discovery Probe on 239.255.255.250:3702 with
+ *      their device-service address + scopes. We collect the responders' IPs +
+ *      friendly names so the operator learns what's on their network. (The
+ *      browser portal can't do this — it can't reach a LAN multicast/RTSP port —
+ *      which is exactly why it lives in the installed connector.)
+ *   2. NVR channel-range expansion — given an NVR's base IP + brand + channel
+ *      count, build the per-channel RTSP URLs from the SAME vendor presets the
+ *      portal uses (modern-trillboards-portal lib/add-camera.buildRtspUrl), so a
+ *      single 8-channel DVR becomes 8 feeds from one input.
+ *
+ * The output shape ({ name, rtspUrl, cameraKey }) matches what the portal's
+ * POST /v2/earner/cameras/register consumes — discovery NEVER provisions on its
+ * own (the connector holds per-feed device tokens, not the earner's auth); it
+ * just tells the operator what to register. No new provisioning path.
+ *
+ * Network I/O is confined to discoverOnvifHosts(); the value-bearing logic
+ * (parseProbeMatches, expandChannelRange, buildChannelRtspUrl) is pure + unit
+ * tested with fixtures — no camera required.
+ */
+const dgram = __importStar(require("dgram"));
+const crypto_1 = require("crypto");
+/** Hard ceiling — matches the backend provisioning cap (≤64 cameras/register). */
+exports.MAX_CHANNELS = 64;
+const WS_DISCOVERY_ADDR = '239.255.255.250';
+const WS_DISCOVERY_PORT = 3702;
+// ── Pure helpers (unit-tested) ───────────────────────────────────────────────
+function slugify(name) {
+    const slug = (name || '')
+        .toLowerCase()
+        .trim()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '');
+    return slug || 'camera';
+}
+/**
+ * Deterministic per-feed key `<slug>-<8hex(seed)>`. Stable across re-discovery
+ * (seeded by host:brand:channel) so a re-register reuses the same screen rather
+ * than minting a sibling — the register endpoint treats cameraKey as the
+ * idempotency key.
+ */
+function cameraKeyFor(name, seed) {
+    const h = (0, crypto_1.createHash)('sha1').update(seed).digest('hex').slice(0, 8);
+    return `${slugify(name)}-${h}`;
+}
+/**
+ * Build one channel's RTSP URL. Vendor paths are byte-identical to the portal's
+ * buildRtspUrl so the same NVR yields the same URLs on both surfaces.
+ */
+function buildChannelRtspUrl({ brand, host, port, username, password, channel, path, }) {
+    const h = (host || '').trim();
+    const p = String(port ?? '554').trim() || '554';
+    const u = (username || '').trim();
+    const pw = password ?? '';
+    const ch = String(channel ?? '1').trim() || '1';
+    const auth = u ? `${encodeURIComponent(u)}:${encodeURIComponent(pw)}@` : '';
+    const base = `rtsp://${auth}${h}:${p}`;
+    switch (brand) {
+        case 'hikvision':
+            return `${base}/Streaming/Channels/${ch}01`;
+        case 'dahua':
+            return `${base}/cam/realmonitor?channel=${ch}&subtype=0`;
+        case 'amcrest':
+            return `${base}/cam/realmonitor?channel=${ch}&subtype=0`;
+        case 'amcrest-recorder':
+            return `${base}/h264Preview_${ch.padStart(2, '0')}_main`;
+        case 'reolink':
+            return `${base}/h264Preview_${ch}_main`;
+        case 'honeywell':
+            // 35/60 Series mainstream, documented with a worked example in Honeywell
+            // 800-26904-F. The `/live/<Camera ID>/<Streaming ID>` form is the only
+            // Honeywell one with a channel slot; 30 Series cameras use the editable
+            // access name (default `live.sdp`), reachable via the "generic" brand.
+            return `${base}/live/${ch}/1`;
+        case 'generic':
+        default: {
+            const raw = (path ?? '').trim();
+            const suffix = raw ? (raw.startsWith('/') ? raw : `/${raw}`) : '/';
+            return `${base}${suffix}`;
+        }
+    }
+}
+/**
+ * Expand an NVR's base connection into one DiscoveredCamera per channel. Caps at
+ * MAX_CHANNELS; returns [] for count<=0. Branded presets bake the channel into
+ * the path; "generic" uses the `{ch}` template.
+ */
+function expandChannelRange(opts) {
+    const start = Number.isFinite(opts.startChannel) ? Number(opts.startChannel) : 1;
+    const count = Math.max(0, Math.min(exports.MAX_CHANNELS, Math.floor(Number(opts.count) || 0)));
+    const prefix = (opts.namePrefix || 'Channel').trim() || 'Channel';
+    const out = [];
+    for (let i = 0; i < count; i++) {
+        const channel = start + i;
+        const name = `${prefix} ${channel}`;
+        const pathForCh = opts.brand === 'generic' && opts.path ? opts.path.replace(/\{ch\}/g, String(channel)) : undefined;
+        const rtspUrl = buildChannelRtspUrl({
+            brand: opts.brand,
+            host: opts.host,
+            port: opts.port,
+            username: opts.username,
+            password: opts.password,
+            channel,
+            path: pathForCh,
+        });
+        out.push({
+            name,
+            rtspUrl,
+            cameraKey: cameraKeyFor(name, `${opts.host}:${opts.brand}:${channel}`),
+            source: 'channel-range',
+            host: opts.host,
+            channel,
+        });
+    }
+    return out;
+}
+/**
+ * Generic NVRs need a per-channel path template (`{ch}`) so each channel yields a
+ * DISTINCT URL — without it, multi-channel generic expansion produces N identical
+ * `rtsp://host:port/` feeds (duplicate/invalid). Returns true when generic
+ * channel-range expansion must be blocked. (Branded presets bake the channel into
+ * their path, so they never need this.)
+ */
+function genericChannelRangeNeedsPath(brand, count, path) {
+    return brand === 'generic' && count > 1 && !((path ?? '').includes('{ch}'));
+}
+function decodeXml(s) {
+    return s
+        .replace(/&lt;/g, '<')
+        .replace(/&gt;/g, '>')
+        .replace(/&quot;/g, '"')
+        .replace(/&apos;/g, "'")
+        .replace(/&amp;/g, '&');
+}
+/** All text contents of <ns:LocalName>…</LocalName> (any/no namespace prefix). */
+function matchAllTagText(xml, localName) {
+    const re = new RegExp(`<(?:[A-Za-z0-9_]+:)?${localName}\\b[^>]*>([\\s\\S]*?)<\\/(?:[A-Za-z0-9_]+:)?${localName}>`, 'gi');
+    const out = [];
+    let m;
+    while ((m = re.exec(xml)) !== null)
+        out.push(decodeXml(m[1].trim()));
+    return out;
+}
+function hostFromUrl(url) {
+    const m = url.match(/^https?:\/\/([^/:]+)/i);
+    return m ? m[1] : null;
+}
+function nameFromScopes(scopes) {
+    // ONVIF scopes look like onvif://www.onvif.org/name/My%20Camera (URL-encoded).
+    const nameScope = scopes.find((s) => /\/name\//i.test(s));
+    if (!nameScope)
+        return undefined;
+    const tail = nameScope.split('/name/')[1];
+    if (!tail)
+        return undefined;
+    try {
+        return decodeURIComponent(tail).replace(/[_+]/g, ' ').trim() || undefined;
+    }
+    catch {
+        return tail.replace(/[_+]/g, ' ').trim() || undefined;
+    }
+}
+function uniq(arr) {
+    return [...new Set(arr)];
+}
+/**
+ * Parse ONVIF WS-Discovery ProbeMatch datagrams into hosts. Namespace-agnostic
+ * (vendors use d:/wsdd:/default prefixes) — matches local element names. Pure:
+ * feed it captured datagrams, no network. Responders are deduped by IP.
+ */
+function parseProbeMatches(xmls) {
+    const byHost = new Map();
+    for (const xml of xmls) {
+        if (!xml)
+            continue;
+        const xaddrs = matchAllTagText(xml, 'XAddrs')
+            .join(' ')
+            .split(/\s+/)
+            .filter((s) => /^https?:\/\//i.test(s));
+        if (xaddrs.length === 0)
+            continue;
+        const scopes = matchAllTagText(xml, 'Scopes')
+            .join(' ')
+            .split(/\s+/)
+            .filter(Boolean);
+        const host = hostFromUrl(xaddrs[0]);
+        if (!host)
+            continue;
+        const merged = byHost.get(host) || { host, xaddrs: [], scopes: [] };
+        merged.xaddrs = uniq([...merged.xaddrs, ...xaddrs]);
+        merged.scopes = uniq([...merged.scopes, ...scopes]);
+        merged.name = nameFromScopes(merged.scopes) || merged.name;
+        byHost.set(host, merged);
+    }
+    return [...byHost.values()];
+}
+/** RFC4122 v4 from crypto randomness (Math.random-free). */
+function randomMessageId() {
+    const b = (0, crypto_1.randomBytes)(16);
+    b[6] = (b[6] & 0x0f) | 0x40;
+    b[8] = (b[8] & 0x3f) | 0x80;
+    const h = b.toString('hex');
+    return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20)}`;
+}
+/** Standard ONVIF WS-Discovery Probe envelope (NetworkVideoTransmitter). */
+function buildProbeMessage(messageId) {
+    return [
+        '<?xml version="1.0" encoding="UTF-8"?>',
+        '<e:Envelope xmlns:e="http://www.w3.org/2003/05/soap-envelope"',
+        ' xmlns:w="http://schemas.xmlsoap.org/ws/2004/08/addressing"',
+        ' xmlns:d="http://schemas.xmlsoap.org/ws/2005/04/discovery"',
+        ' xmlns:dn="http://www.onvif.org/ver10/network/wsdl">',
+        '<e:Header>',
+        `<w:MessageID>uuid:${messageId}</w:MessageID>`,
+        '<w:To e:mustUnderstand="true">urn:schemas-xmlsoap-org:ws:2005:04:discovery</w:To>',
+        '<w:Action e:mustUnderstand="true">http://schemas.xmlsoap.org/ws/2005/04/discovery/Probe</w:Action>',
+        '</e:Header>',
+        '<e:Body><d:Probe><d:Types>dn:NetworkVideoTransmitter</d:Types></d:Probe></e:Body>',
+        '</e:Envelope>',
+    ].join('');
+}
+/**
+ * Send a WS-Discovery Probe and collect ONVIF responders for `timeoutMs`. Never
+ * rejects — a socket error or no responders resolves to whatever was collected
+ * (often []), so the CLI can always print a friendly fallback. Clamped 1–30s.
+ */
+function discoverOnvifHosts(opts = {}) {
+    const timeoutMs = Math.max(1000, Math.min(30000, opts.timeoutMs ?? 4000));
+    return new Promise((resolve) => {
+        const responses = [];
+        const socket = dgram.createSocket({ type: 'udp4', reuseAddr: true });
+        let done = false;
+        const finish = () => {
+            if (done)
+                return;
+            done = true;
+            clearTimeout(timer);
+            try {
+                socket.close();
+            }
+            catch {
+                /* already closed */
+            }
+            resolve(parseProbeMatches(responses));
+        };
+        socket.on('error', () => finish());
+        socket.on('message', (msg) => {
+            responses.push(msg.toString('utf8'));
+        });
+        socket.bind(() => {
+            try {
+                socket.setBroadcast(true);
+            }
+            catch {
+                /* not fatal */
+            }
+            const probe = Buffer.from(buildProbeMessage(randomMessageId()), 'utf8');
+            socket.send(probe, 0, probe.length, WS_DISCOVERY_PORT, WS_DISCOVERY_ADDR, (err) => {
+                if (err)
+                    finish();
+            });
+        });
+        const timer = setTimeout(finish, timeoutMs);
+    });
+}
+/** Mask the password segment of an rtsp://user:pass@host URL for display. */
+function maskRtspUrl(url) {
+    return url.replace(/(rtsp:\/\/[^:/@]+:)([^@]*)(@)/, (_m, pre, pw, at) => pw ? `${pre}${'•'.repeat(Math.min(pw.length, 8))}${at}` : `${pre}${at}`);
+}
+/** Numbered, password-masked one-line-per-feed list for the CLI. */
+function formatCamerasTable(cameras) {
+    if (cameras.length === 0)
+        return 'No cameras found.';
+    return cameras
+        .map((c, i) => `  ${String(i + 1).padStart(2)}. ${c.name}  →  ${maskRtspUrl(c.rtspUrl)}`)
+        .join('\n');
+}
+function getArg(args, flag) {
+    const i = args.indexOf(flag);
+    return i >= 0 && args[i + 1] ? args[i + 1] : undefined;
+}
+function emit(cameras, asJson) {
+    if (asJson) {
+        console.log(JSON.stringify({ cameras }, null, 2));
+        return;
+    }
+    console.log(`Built ${cameras.length} feed${cameras.length === 1 ? '' : 's'}:\n`);
+    console.log(formatCamerasTable(cameras));
+    console.log('\nAdd these in the Trillboards portal → Add cameras → "I have an NVR".');
+    console.log('(The connector never stores camera credentials — they travel in the short-lived claim code.)');
+}
+/**
+ * CLI entrypoint for `trillboards-edge discover` (lazy-loaded from cli.ts).
+ *
+ *   discover                                            ONVIF LAN scan (list IPs)
+ *   discover --nvr <ip> --brand hikvision --channels 8  expand an NVR's channels
+ *            [--user u --pass p --port 554 --start 1 --path /live/{ch}] [--json]
+ */
+async function runDiscover(args) {
+    const asJson = args.includes('--json');
+    const nvr = getArg(args, '--nvr');
+    const channels = parseInt(getArg(args, '--channels') || '0', 10);
+    // ── Channel-range expansion: operator already knows the NVR IP. ─────────────
+    if (nvr && channels > 0) {
+        const brand = getArg(args, '--brand') || 'hikvision';
+        const path = getArg(args, '--path');
+        if (genericChannelRangeNeedsPath(brand, channels, path)) {
+            console.error('Generic NVRs need a per-channel path template so each channel gets a distinct URL.');
+            console.error('Pass --path with a {ch} placeholder, e.g.:');
+            console.error(`  trillboards-edge discover --nvr ${nvr} --brand generic --channels ${channels} --path "/live/{ch}"`);
+            process.exitCode = 1;
+            return;
+        }
+        const cameras = expandChannelRange({
+            brand,
+            host: nvr,
+            count: channels,
+            startChannel: parseInt(getArg(args, '--start') || '1', 10),
+            port: getArg(args, '--port'),
+            username: getArg(args, '--user'),
+            password: getArg(args, '--pass'),
+            path,
+        });
+        emit(cameras, asJson);
+        return;
+    }
+    // ── ONVIF LAN probe: find what's on the network. ───────────────────────────
+    if (!asJson)
+        console.log('Scanning the local network for ONVIF cameras (a few seconds)…\n');
+    const hosts = await discoverOnvifHosts({
+        timeoutMs: parseInt(getArg(args, '--timeout') || '4000', 10),
+    });
+    if (asJson) {
+        console.log(JSON.stringify({ onvifHosts: hosts }, null, 2));
+        return;
+    }
+    if (hosts.length === 0) {
+        console.log('No ONVIF cameras answered on this network.');
+        console.log('If you have an NVR/DVR, expand its channels directly:');
+        console.log('  trillboards-edge discover --nvr <NVR-IP> --brand hikvision --channels 8 --user admin --pass ****');
+        return;
+    }
+    console.log(`Found ${hosts.length} camera${hosts.length === 1 ? '' : 's'} on your network:\n`);
+    hosts.forEach((h, i) => {
+        console.log(`  ${String(i + 1).padStart(2)}. ${h.name || h.host}  (${h.host})`);
+    });
+    console.log('\nTo turn one into feeds, expand its channels:');
+    console.log('  trillboards-edge discover --nvr <IP-above> --brand <hikvision|dahua|amcrest-recorder|reolink|generic> --channels <N> --user admin --pass ****');
+    console.log('\nThen add them in the Trillboards portal → Add cameras.');
+}
+function inferRecorderBrandHint(openPorts) {
+    return openPorts.includes(34567) ? 'xmeye' : undefined;
+}
+function defaultLocalAddresses() {
+    // Lazy os import keeps the dgram-only top of this module unchanged.
+    // eslint-disable-next-line @typescript-eslint/no-var-requires
+    const os = require('os');
+    const out = [];
+    for (const addrs of Object.values(os.networkInterfaces())) {
+        for (const a of addrs || []) {
+            if (a.family === 'IPv4' && !a.internal && a.address)
+                out.push(a.address);
+        }
+    }
+    return out;
+}
+function defaultTryConnect(host, port, timeoutMs) {
+    // eslint-disable-next-line @typescript-eslint/no-var-requires
+    const net = require('net');
+    return new Promise((resolve) => {
+        const sock = net.connect({ host, port });
+        let done = false;
+        const settle = (open) => {
+            if (done)
+                return;
+            done = true;
+            sock.destroy();
+            resolve(open);
+        };
+        sock.setTimeout(timeoutMs, () => settle(false));
+        sock.on('connect', () => settle(true));
+        sock.on('error', () => settle(false));
+    });
+}
+/**
+ * Sweep the local /24 subnet(s) for recorder-shaped devices by TCP-connecting
+ * to RTSP/DVR ports. This is the fallback for the huge installed base of cheap
+ * analog DVRs (XMeye/Night Owl/older Swann/Lorex) that answer NO ONVIF
+ * WS-Discovery probe — without it, "Scan" finds nothing at exactly the venues
+ * this product targets. Shaped like OnvifHost so the setup discovery envelope
+ * and the portal's recorder cards treat both sources identically.
+ * Never rejects — resolves to [] on any environmental failure.
+ */
+async function sweepLanForRecorders(opts = {}) {
+    const ports = opts.ports ?? [554, 8554, 8899, 34567];
+    const connectTimeoutMs = opts.connectTimeoutMs ?? 350;
+    const concurrency = Math.max(4, Math.min(opts.concurrency ?? 64, 128));
+    const tryConnect = opts.tryConnect ?? defaultTryConnect;
+    const locals = (opts.localAddresses ?? defaultLocalAddresses)();
+    const subnets = opts.subnets ??
+        [...new Set(locals.map((ip) => ip.split('.').slice(0, 3).join('.')).filter((s) => s.split('.').length === 3))];
+    if (subnets.length === 0)
+        return [];
+    // Sweep the primary RTSP port first across all hosts; then check secondary
+    // ports only on responders' neighbors? No — keep it simple + bounded: all
+    // (host, port) pairs, capped by concurrency, ~250ms each; a /24 × 4 ports is
+    // ≈1k sockets ≈ 6s at 64-way. Local IPs themselves are skipped.
+    const localSet = new Set(locals);
+    const targets = [];
+    for (const subnet of subnets.slice(0, 2)) {
+        for (let i = 1; i <= 254; i++) {
+            const host = `${subnet}.${i}`;
+            if (localSet.has(host))
+                continue;
+            for (const port of ports)
+                targets.push({ host, port });
+        }
+    }
+    const open = new Map();
+    let next = 0;
+    await Promise.all(Array.from({ length: Math.min(concurrency, targets.length) }, async () => {
+        while (next < targets.length) {
+            const t = targets[next++];
+            try {
+                if (await tryConnect(t.host, t.port, connectTimeoutMs)) {
+                    open.set(t.host, [...(open.get(t.host) || []), t.port]);
+                }
+            }
+            catch {
+                /* closed */
+            }
+        }
+    }));
+    return [...open.entries()].map(([host, rawOpenPorts]) => {
+        const openPorts = rawOpenPorts.sort((a, b) => a - b);
+        const brandHint = inferRecorderBrandHint(openPorts);
+        return {
+            host,
+            name: brandHint === 'xmeye' ? `NETSurveillance / XMEye recorder at ${host}` : `Recorder at ${host}`,
+            openPorts,
+            ...(brandHint ? { brandHint } : {}),
+            xaddrs: [],
+        };
+    });
+}
+//# sourceMappingURL=discovery.js.map

package/dist/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0GA,kDAyCC;AAoBD,gDA6BC;AASD,oEAMC;AAkDD,8CAsBC;AAYD,8CAeC;AAWD,gDAkCC;AAGD,kCAIC;AAGD,gDAKC;AAyBD,kCA6DC;AAcD,wDAEC;AAyDD,oDAsDC;AAvkBD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,6CAA+B;AAC/B,mCAAiD;AAoCjD,kFAAkF;AACrE,QAAA,YAAY,GAAG,EAAE,CAAC;AAE/B,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAC5C,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,gFAAgF;AAEhF,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;SACtB,WAAW,EAAE;SACb,IAAI,EAAE;SACN,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,IAAI,IAAI,QAAQ,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,IAAY,EAAE,IAAY;IAC9C,MAAM,CAAC,GAAG,IAAA,mBAAU,EAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACjC,CAAC;AAaD;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,EAClC,KAAK,EACL,IAAI,EACJ,IAAI,EACJ,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,IAAI,GACa;IACjB,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC;IAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,EAAE,GAAG,QAAQ,IAAI,EAAE,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC;IAChD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,MAAM,IAAI,GAAG,UAAU,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;IAEvC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,WAAW;YACd,OAAO,GAAG,IAAI,uBAAuB,EAAE,IAAI,CAAC;QAC9C,KAAK,OAAO;YACV,OAAO,GAAG,IAAI,4BAA4B,EAAE,YAAY,CAAC;QAC3D,KAAK,SAAS;YACZ,OAAO,GAAG,IAAI,4BAA4B,EAAE,YAAY,CAAC;QAC3D,KAAK,kBAAkB;YACrB,OAAO,GAAG,IAAI,gBAAgB,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC;QAC3D,KAAK,SAAS;YACZ,OAAO,GAAG,IAAI,gBAAgB,EAAE,OAAO,CAAC;QAC1C,KAAK,WAAW;YACd,yEAAyE;YACzE,uEAAuE;YACvE,wEAAwE;YACxE,uEAAuE;YACvE,OAAO,GAAG,IAAI,SAAS,EAAE,IAAI,CAAC;QAChC,KAAK,SAAS,CAAC;QACf,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YACnE,OAAO,GAAG,IAAI,GAAG,MAAM,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;AACH,CAAC;AAeD;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,IAAyB;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAsB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,oBAAY,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IAClE,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,GAAG,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC;QACpC,MAAM,SAAS,GACb,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpG,MAAM,OAAO,GAAG,mBAAmB,CAAC;YAClC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO;YACP,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC;YACP,IAAI;YACJ,OAAO;YACP,SAAS,EAAE,YAAY,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,OAAO,EAAE,CAAC;YACtE,MAAM,EAAE,eAAe;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,4BAA4B,CAC1C,KAAoB,EACpB,KAAa,EACb,IAAa;IAEb,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC;SACL,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,kFAAkF;AAClF,SAAS,eAAe,CAAC,GAAW,EAAE,SAAiB;IACrD,MAAM,EAAE,GAAG,IAAI,MAAM,CACnB,uBAAuB,SAAS,+CAA+C,SAAS,GAAG,EAC3F,IAAI,CACL,CAAC;IACF,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC7C,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzB,CAAC;AAED,SAAS,cAAc,CAAC,MAAgB;IACtC,+EAA+E;IAC/E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAI,GAAQ;IACvB,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,IAAc;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC;aAC1C,IAAI,CAAC,GAAG,CAAC;aACT,KAAK,CAAC,KAAK,CAAC;aACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAClC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC;aAC1C,IAAI,CAAC,GAAG,CAAC;aACT,KAAK,CAAC,KAAK,CAAC;aACZ,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,MAAM,GAAc,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC/E,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC;QAC3D,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,4DAA4D;AAC5D,SAAS,eAAe;IACtB,MAAM,CAAC,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AACnG,CAAC;AAED,4EAA4E;AAC5E,SAAgB,iBAAiB,CAAC,SAAiB;IACjD,OAAO;QACL,wCAAwC;QACxC,+DAA+D;QAC/D,6DAA6D;QAC7D,4DAA4D;QAC5D,sDAAsD;QACtD,YAAY;QACZ,qBAAqB,SAAS,gBAAgB;QAC9C,mFAAmF;QACnF,oGAAoG;QACpG,aAAa;QACb,mFAAmF;QACnF,eAAe;KAChB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACb,CAAC;AAMD;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,OAA8B,EAAE;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAM,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC;IAC3E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;YACD,OAAO,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;QACxC,CAAC,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;YAC3B,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe;YACjB,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YACxE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,CAAC,GAAG,EAAE,EAAE;gBAChF,IAAI,GAAG;oBAAE,MAAM,EAAE,CAAC;YACpB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,SAAgB,WAAW,CAAC,GAAW;IACrC,OAAO,GAAG,CAAC,OAAO,CAAC,+BAA+B,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CACtE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,EAAE,EAAE,CACxE,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,SAAgB,kBAAkB,CAAC,OAA2B;IAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,mBAAmB,CAAC;IACrD,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,QAAQ,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SACxF,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,IAAc,EAAE,IAAY;IAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,SAAS,IAAI,CAAC,OAA2B,EAAE,MAAe;IACxD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,MAAM,QAAQ,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,8FAA8F,CAAC,CAAC;AAC9G,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,WAAW,CAAC,IAAc;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAEjE,+EAA+E;IAC/E,IAAI,GAAG,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAI,MAAM,CAAC,IAAI,EAAE,SAAS,CAAmB,IAAI,WAAW,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACpC,IAAI,4BAA4B,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;YACxD,OAAO,CAAC,KAAK,CACX,oFAAoF,CACrF,CAAC;YACF,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC5D,OAAO,CAAC,KAAK,CACX,qCAAqC,GAAG,+BAA+B,QAAQ,sBAAsB,CACtG,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,kBAAkB,CAAC;YACjC,KAAK;YACL,IAAI,EAAE,GAAG;YACT,KAAK,EAAE,QAAQ;YACf,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC;YAC1D,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC5B,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC;YAChC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC;YAChC,IAAI;SACL,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtB,OAAO;IACT,CAAC;IAED,8EAA8E;IAC9E,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC;QACrC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC;KAC7D,CAAC,CAAC;IAEH,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CACT,oGAAoG,CACrG,CAAC;QACF,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,MAAM,UAAU,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,qBAAqB,CAAC,CAAC;IAC/F,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACrB,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CACT,iJAAiJ,CAClJ,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;AAC1E,CAAC;AAcD,SAAgB,sBAAsB,CAAC,SAAmB;IACxD,OAAO,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAiBD,SAAS,qBAAqB;IAC5B,oEAAoE;IACpE,8DAA8D;IAC9D,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAwB,CAAC;IAChD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC;QAC1D,KAAK,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,IAAY,EAAE,SAAiB;IACtE,8DAA8D;IAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAyB,CAAC;IACnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,MAAM,MAAM,GAAG,CAAC,IAAa,EAAE,EAAE;YAC/B,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,oBAAoB,CAAC,OAAqB,EAAE;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,GAAG,CAAC;IACtD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,iBAAiB,CAAC;IACxD,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,qBAAqB,CAAC,EAAE,CAAC;IAEhE,MAAM,OAAO,GACX,IAAI,CAAC,OAAO;QACZ,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,2EAA2E;IAC3E,0EAA0E;IAC1E,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,OAAO,GAA0C,EAAE,CAAC;IAC1D,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC;YAC9B,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YACjC,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;IACzC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;QACvE,OAAO,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1B,IAAI,CAAC;gBACH,IAAI,MAAM,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,CAAC;oBACvD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE;QACtD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACpD,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE;YACnG,SAAS;YACT,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/gemmaModelOta.d.ts

@@ -0,0 +1,118 @@
+/**
+ * gemmaModelOta — keep the BYO-CCTV connector's on-device LiteRT-LM VLM (Gemma)
+ * up to date over the air, REUSING the generic @trillboards/edge-core
+ * `ModelManager` (atomic .tmp+rename download, SHA-256 verify, redirect-follow
+ * for S3 presigned URLs, NO size cap — purpose-built for the ~2.4 GB `.litertlm`
+ * file). This is NOT `@trillboards/edge-federated`'s `FederatedModelClient`,
+ * whose hard 500 MB cap is for tiny aggregated slice weights.
+ *
+ * How it reuses ModelManager + the existing /v1/federated/models channel:
+ *   - The model is registered under modelType `gemma-vlm`, whose `filePath` is
+ *     the litert-lm STORE path (`~/.litert-lm/models/<id>/model.litertlm`). The
+ *     litert-lm registry IS the filesystem (no manifest), so ModelManager's
+ *     atomic download straight INTO the store path is itself the drop-in update.
+ *   - ModelManager.checkForUpdates polls `GET /v1/federated/models?
+ *     deviceFingerprint=X&modelType=gemma-vlm`; the server returns the version +
+ *     an S3 presigned `downloadUrl` from the existing sensing_model_registry SoR.
+ *   - A model pre-bundled into the installer is recorded as already-installed via
+ *     a version marker written next to the store file by setup-litertlm, so the
+ *     first check does NOT re-download the bundled model.
+ *   - On `modelUpdated` we clear stale XNNPACK caches (the new weights must not
+ *     reuse the old compiled graph) and RESTART `litert-lm serve` (its engine is
+ *     lazy-loaded + cached in memory per model id, so a file swap alone is not
+ *     picked up until restart).
+ *
+ * Entirely NON-FATAL: any failure here only means the connector keeps serving its
+ * current model — it must never break sensing. Node built-ins only (survives
+ * bundling into the self-contained connector; trivially mockable in tests).
+ */
+import type { EdgeAgentConfig } from './config';
+/** The connector-facing OTA modelType for the on-device Gemma VLM. */
+export declare const GEMMA_VLM_MODEL_TYPE = "gemma-vlm";
+/**
+ * The slice of edge-core's ModelManager this module drives. Narrowed so tests can
+ * inject a fake without a real network/file ModelManager.
+ */
+export interface ModelManagerLike {
+    registerModel(name: string, filePath: string, seed?: {
+        version?: string;
+        sha256?: string;
+    }): void;
+    initialize(): Promise<void>;
+    start(): void;
+    stop(): void;
+    on(event: string, listener: (...args: any[]) => void): void;
+}
+export interface GemmaModelOtaDeps {
+    /** Build the ModelManager (default: the real @trillboards/edge-core one). */
+    createModelManager?: (opts: {
+        modelsDir: string;
+        apiBaseUrl: string;
+        deviceFingerprint: string;
+        checkIntervalMs?: number;
+        autoUpdate?: boolean;
+    }) => ModelManagerLike;
+    /** Restart `litert-lm serve` after a model update (default: platform-aware). */
+    restartServe?: () => Promise<void>;
+    /** Log sink (default: console.log). */
+    log?: (msg: string) => void;
+    /** Override the resolved litert-lm store model path (tests). */
+    storeModelPath?: string;
+    /** Platform override (default process.platform). */
+    platform?: NodeJS.Platform;
+    /** Home dir override (default os.homedir()). */
+    homedir?: string;
+    /** Env override (default process.env). */
+    env?: NodeJS.ProcessEnv;
+    /** execFile override for the serve restart (default child_process.execFile). */
+    execFileFn?: (cmd: string, args: string[]) => Promise<void>;
+    /** uid for the macOS `launchctl kickstart gui/<uid>` domain (default process.getuid()). */
+    uid?: number;
+}
+/** Handle returned by startGemmaModelOta so the run-mode can stop it on shutdown. */
+export interface GemmaModelOtaHandle {
+    stop(): void;
+}
+/**
+ * Resolve the litert-lm STORE path for a model id:
+ *   ${LITERT_LM_DIR:-~/.litert-lm}/models/<id>/model.litertlm
+ * This is exactly where `litert-lm serve` reads the model from (the registry is
+ * the filesystem), so writing here IS the model swap.
+ */
+export declare function resolveLiteRtLmStoreModelPath(opts: {
+    modelId: string;
+    env?: NodeJS.ProcessEnv;
+    homedir?: string;
+}): string;
+/**
+ * Read the bundled/installed version marker written by setup-litertlm next to the
+ * store model. Returns null when absent/unreadable (the model may not be
+ * installed yet — in which case the OTA will simply download it, a bonus
+ * self-heal). NEVER throws.
+ */
+export declare function readBundledModelVersion(storeModelPath: string): string | null;
+/**
+ * Delete stale XNNPACK cache siblings of the store model. litert-lm compiles the
+ * model graph into `model.litertlm.*xnnpack_cache*` files on first serve; after a
+ * weights swap those caches are stale and MUST be cleared so the new model is
+ * recompiled cleanly (a same-size replace would otherwise silently reuse the old
+ * compiled graph). NEVER throws.
+ */
+export declare function clearStaleXnnpackCaches(storeModelPath: string, log?: (m: string) => void): void;
+/**
+ * Default platform-aware `litert-lm serve` restart. The serve process caches the
+ * model engine in memory, so after a file swap it must be restarted to load the
+ * new weights.
+ *   macOS:   launchctl kickstart -k gui/<uid>/com.trillboards.litertlm
+ *   Windows: schtasks /End then /Run on TrillboardsLiteRtLm
+ *   Linux:   no managed serve unit in this repo — log + rely on the next natural
+ *            restart (KeepAlive supervisors, if any, reload the swapped file).
+ */
+export declare function restartLiteRtLmServe(deps?: GemmaModelOtaDeps): Promise<void>;
+/**
+ * Start the gemma-vlm OTA loop. Returns a handle (or null when disabled / not
+ * applicable). NON-FATAL: a thrown error is swallowed (logged) so OTA wiring can
+ * never break the sensing run mode.
+ */
+export declare function startGemmaModelOta(config: EdgeAgentConfig, deps?: GemmaModelOtaDeps): GemmaModelOtaHandle | null;
+//# sourceMappingURL=gemmaModelOta.d.ts.map

package/dist/gemmaModelOta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemmaModelOta.d.ts","sourceRoot":"","sources":["../src/gemmaModelOta.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAEhD,sEAAsE;AACtE,eAAO,MAAM,oBAAoB,cAAc,CAAC;AAYhD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAClG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,KAAK,IAAI,IAAI,CAAC;IACd,IAAI,IAAI,IAAI,CAAC;IACb,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;CAC7D;AAED,MAAM,WAAW,iBAAiB;IAChC,6EAA6E;IAC7E,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,UAAU,CAAC,EAAE,OAAO,CAAC;KACtB,KAAK,gBAAgB,CAAC;IACvB,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,uCAAuC;IACvC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,gEAAgE;IAChE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,gFAAgF;IAChF,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,2FAA2F;IAC3F,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,qFAAqF;AACrF,MAAM,WAAW,mBAAmB;IAClC,IAAI,IAAI,IAAI,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,MAAM,CAOT;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAc7E;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAe,GAAG,IAAI,CAoBzG;AAED;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBtF;AAkBD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,eAAe,EACvB,IAAI,GAAE,iBAAsB,GAC3B,mBAAmB,GAAG,IAAI,CAoF5B"}