@trillboards/edge-sdk 0.2.81 → 0.2.84

package/dist/modelOta.js

@@ -0,0 +1,492 @@
+"use strict";
+/**
+ * modelOta — deliver EVERY model the server granted this connector, not just one.
+ *
+ * ── The gap this closes ────────────────────────────────────────────────────
+ *
+ * The connector's whole model-delivery surface was ONE hardcoded `modelType`:
+ * `cli.ts` called `startGemmaModelOta(config)` and nothing else. No writer of
+ * `models/<id>/model.onnx` existed anywhere — `modelpath.py` only READS that
+ * path. So `rfdetr_medium` could be registry-active with a live 10% canary,
+ * three installers reporting healthy and `devices_succeeded = 0`, while the
+ * detector service 503'd forever waiting for an artifact nothing was sending.
+ * That is the `yolov8_nano` shape (offered everywhere, loadable nowhere) with
+ * the delivery leg missing instead of the producer leg.
+ *
+ * The SERVER side was already generic — `getGlobalVlmModelDescriptor` resolves
+ * any `modelType` through `resolveGlobalOtaRegistryId`, which accepts a registry
+ * `model_id` directly and gates non-alias types through the device manifest,
+ * failing closed. Nothing there needed changing. The missing half was here.
+ *
+ * ── Shape ──────────────────────────────────────────────────────────────────
+ *
+ * `startModelOta(config, models)` composes two INDEPENDENT watchers:
+ *
+ *   1. the VLM watcher — `startGemmaModelOta`, called unchanged. It keeps its
+ *      own gating (`modelOtaEnabled`, the refusal to overwrite a custom
+ *      litert-lm model), its own litert-lm STORE path, its own XNNPACK cache
+ *      clear and its own `litert-lm serve` restart. This module adds nothing to
+ *      it and takes nothing away: `gemma-vlm` behaviour is byte-identical, and
+ *      a test asserts that against a fake manager rather than trusting it.
+ *
+ *   2. the SPECIALIST watcher — its own `ModelManager`, its own models dir and
+ *      therefore its own `models_manifest.json`.
+ *
+ * TWO managers and not one, for a reason that is not tidiness: the VLM watcher
+ * declines to run at all when the operator pointed `localSensing.model` at a
+ * custom litert-lm model, and a specialist must still be delivered in that
+ * state. A shared manager built inside `startGemmaModelOta` cannot express
+ * that. Separate managers also make the byte-identical claim structural — the
+ * VLM's manifest, poll loop and event stream are untouched by anything here.
+ *
+ * ── What may be delivered, and what is refused OUT LOUD ────────────────────
+ *
+ * A capability is offered only where a producer will write its answer down. The
+ * connector delivers a granted model only when it has a DESTINATION for its
+ * format — today `onnx`, whose destination is the path `modelpath.py` computes
+ * and the detector service reads. Every other format is SKIPPED WITH ITS REASON
+ * (once per model, not once per poll): `tflite`/`mlkit`/`mediapipe` are Android
+ * loaders with no runtime on this box, and `litert-lm` is the VLM watcher's own
+ * business. A format we cannot place is never guessed at — a near-miss path is
+ * a silent no-delivery that reports success, which is the failure this file
+ * exists to end.
+ *
+ * ── Non-fatal, always ──────────────────────────────────────────────────────
+ *
+ * Every failure here means the connector keeps serving what it already has. A
+ * specialist that cannot download must not stop the VLM, and must not stop
+ * capture. `ModelManager`'s atomic `.tmp` + rename + SHA-256 verify means a
+ * failed download leaves NO artifact rather than a truncated one, so the
+ * detector service keeps answering 503 *with the reason* instead of silently
+ * serving no detections. Down is never empty.
+ *
+ * Node built-ins only (survives bundling into the self-contained connector;
+ * trivially mockable in tests).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CONNECTOR_LOADABLE_MODEL_FORMATS = void 0;
+exports.resolveOnnxModelPath = resolveOnnxModelPath;
+exports.destinationForGrantedModel = destinationForGrantedModel;
+exports.buildGrantedModelSource = buildGrantedModelSource;
+exports.startModelOta = startModelOta;
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const edge_core_1 = require("@trillboards/edge-core");
+const gemmaModelOta_1 = require("./gemmaModelOta");
+/**
+ * Formats this connector has a DESTINATION for — i.e. a place to write the
+ * artifact where something on this box will read it.
+ *
+ * `onnx` only, and that is a statement about what exists rather than a
+ * limitation to apologise for: `deploy/detector` reads
+ * `${TRILLBOARDS_DATA_DIR:-~/.trillboards}/models/<id>/model.onnx` and nothing
+ * else on the connector loads a model file at all. Widening this list is an edit
+ * that must arrive WITH its reader, in the same commit — the same discipline
+ * `advertisedClasses` applies to the class vocabulary.
+ */
+exports.CONNECTOR_LOADABLE_MODEL_FORMATS = Object.freeze(['onnx']);
+/** Fixed file name inside the per-model directory — `modelpath.py`'s `MODEL_FILE_NAME`. */
+const ONNX_MODEL_FILE_NAME = 'model.onnx';
+// ─── Destination resolution ─────────────────────────────────────────────────
+/**
+ * Where an ONNX artifact must land, mirroring
+ * `deploy/detector/trillboards_detector/modelpath.py` EXACTLY:
+ *
+ *     ${TRILLBOARDS_DATA_DIR:-${HOME:-${USERPROFILE:-/tmp}}/.trillboards}
+ *       /models/<model-id>/model.onnx
+ *
+ * THE ENVIRONMENT, NOT `config.dataDir`. The reader is a separate PROCESS — a
+ * LaunchAgent, a systemd unit or a Windows Scheduled Task — that resolves this
+ * path from its own environment and has never heard of the connector's config
+ * file. Writing to `config.dataDir` would put the artifact somewhere the service
+ * does not look, which is a permanently-503 detector on a box whose model is
+ * sitting right there. `trillboards-detector.service` pins `HOME=/opt/trillboards`
+ * for precisely this reason and says so.
+ *
+ * `TRILLBOARDS_DETECTOR_MODEL` is NOT honoured here. It is `modelpath.py`'s bench
+ * escape hatch that points the SERVICE at an arbitrary file; an OTA that followed
+ * it would overwrite whatever a bench run was pointed at.
+ *
+ * One directory per model NAME, never per version — `ModelManager` rewrites the
+ * one file in place, so an update reclaims the old bytes by definition. A
+ * version-named directory would add a second leak on a path that already orphans
+ * ~752 MiB per Gemma update and has no GC.
+ */
+function resolveOnnxModelPath(opts) {
+    const env = opts.env ?? process.env;
+    const override = (env.TRILLBOARDS_DATA_DIR || '').trim();
+    const dataDir = override
+        || path.join((env.HOME || '').trim() || (env.USERPROFILE || '').trim() || '/tmp', '.trillboards');
+    return path.join(dataDir, 'models', opts.modelId, ONNX_MODEL_FILE_NAME);
+}
+/**
+ * Decide a granted model's fate. A `skip` ALWAYS carries a reason — the whole
+ * point of this surface is that an exclusion is a stated fact rather than a
+ * silent drop, so there is no branch that returns nothing.
+ */
+function destinationForGrantedModel(model, opts = {}) {
+    const modelId = typeof model?.modelId === 'string' ? model.modelId.trim() : '';
+    if (!modelId) {
+        return { kind: 'skip', modelId: String(model?.modelId ?? ''), reason: 'no model id' };
+    }
+    // A path traversal in a server-supplied id would let a compromised or buggy
+    // manifest write outside the model store. The ids are `sensing_model_registry`
+    // primary keys — snake_case identifiers — so anything else is refused rather
+    // than sanitised: silently rewriting an id would put the artifact at a path
+    // the reader does not compute, which is the no-delivery case again.
+    if (!/^[A-Za-z0-9._-]+$/.test(modelId) || modelId === '.' || modelId === '..') {
+        return { kind: 'skip', modelId, reason: `model id is not a bare registry identifier` };
+    }
+    const format = typeof model.modelFormat === 'string' ? model.modelFormat.trim().toLowerCase() : '';
+    if (!format) {
+        return { kind: 'skip', modelId, reason: 'the server declared no model_format for it' };
+    }
+    if (format === 'litert-lm') {
+        return {
+            kind: 'skip',
+            modelId,
+            reason: 'litert-lm artifacts are the VLM watcher\'s own business (store path + serve restart)',
+        };
+    }
+    if (!exports.CONNECTOR_LOADABLE_MODEL_FORMATS.includes(format)) {
+        return {
+            kind: 'skip',
+            modelId,
+            reason: `format '${format}' has no reader on this connector `
+                + `(loadable: ${exports.CONNECTOR_LOADABLE_MODEL_FORMATS.join(', ')})`,
+        };
+    }
+    return { kind: 'download', modelId, filePath: resolveOnnxModelPath({ modelId, env: opts.env }) };
+}
+/**
+ * Union the granted lists of every feed's screen.
+ *
+ * A connector is ONE box with ONE model store but N feeds on N screens, whose
+ * manifests can differ. The union is the right answer: a model granted to ANY of
+ * this box's screens has to be on this box's disk for that screen to be served.
+ * A screen that fails to answer simply does not contribute, and a total failure
+ * returns null so the caller keeps what it already had — the same
+ * failure-is-silence-not-a-reset rule `deployedCadenceSource` uses, and for the
+ * same reason: snapping back on a blip is worse than being briefly stale.
+ */
+function buildGrantedModelSource(options) {
+    const feeds = [
+        ...(options.feeds || []).filter((f) => f && f.client),
+        ...(options.profileClients || []).filter(Boolean).map((client) => ({ screenId: null, client })),
+    ];
+    if (feeds.length === 0)
+        return undefined;
+    return {
+        async resolve() {
+            const results = await Promise.all(feeds.map(async (f) => ({
+                screenId: f.screenId,
+                profile: await f.client.fetchProfile().catch(() => null),
+            })));
+            let anyAnswered = false;
+            const byId = new Map();
+            for (const { screenId, profile } of results) {
+                if (!profile)
+                    continue;
+                anyAnswered = true;
+                for (const m of Array.isArray(profile.models) ? profile.models : []) {
+                    if (!m || typeof m.modelId !== 'string' || !m.modelId)
+                        continue;
+                    const existing = byId.get(m.modelId);
+                    // First non-null format wins; a screen that reports null for a model
+                    // another screen typed must not erase the type. Same rule for the
+                    // granting screen: the FIRST screen that could name itself owns the
+                    // download identity, so a later screen answering with none cannot
+                    // demote a model back to the host fingerprint.
+                    if (!existing) {
+                        byId.set(m.modelId, {
+                            modelId: m.modelId,
+                            modelFormat: typeof m.modelFormat === 'string' ? m.modelFormat : null,
+                            grantedByScreenId: screenId || null,
+                        });
+                    }
+                    else {
+                        if (existing.modelFormat === null && typeof m.modelFormat === 'string') {
+                            existing.modelFormat = m.modelFormat;
+                        }
+                        if (!existing.grantedByScreenId && screenId)
+                            existing.grantedByScreenId = screenId;
+                    }
+                }
+            }
+            if (!anyAnswered)
+                return null;
+            return [...byId.values()].sort((a, b) => a.modelId.localeCompare(b.modelId));
+        },
+    };
+}
+/** How often to re-ask what this device was granted, when a source is supplied. */
+const DEFAULT_GRANTED_POLL_MS = 15 * 60 * 1000;
+/**
+ * Start the connector's model OTA: the VLM watcher plus one download per granted
+ * specialist whose format this box can place.
+ *
+ * NON-FATAL throughout — a thrown error is swallowed and logged, and the VLM
+ * watcher is started FIRST so a specialist failure can never take it down.
+ */
+function startModelOta(config, models = [], deps = {}) {
+    const log = deps.log ?? ((m) => console.log(m));
+    // 1. The VLM, FIRST and unchanged. If everything below throws, this survives.
+    let vlm = null;
+    try {
+        vlm = (deps.startVlmOta ?? gemmaModelOta_1.startGemmaModelOta)(config);
+    }
+    catch (err) {
+        log(`[model-ota] VLM watcher failed to start (non-fatal): ${err?.message || err}`);
+    }
+    // 2. The specialist watcher. Built lazily on the first granted model that has a
+    //    destination, so a fleet with no specialists creates no manager, no models
+    //    dir and no poll loop — byte-identical to before this module existed.
+    const env = deps.env ?? process.env;
+    const otaEnabled = config.localSensing?.modelOtaEnabled !== false;
+    /**
+     * ONE MANAGER PER GRANTING IDENTITY.
+     *
+     * `ModelManager` sends one `deviceFingerprint`/`screen_id` for every model it
+     * holds, and the server re-decides eligibility — including the rollout hash
+     * bucket — from that identity. So a model granted to screen A has to be asked
+     * for AS screen A; putting it on a manager that identifies as screen B asks a
+     * question nobody answered yes to. In practice a connector's feeds are granted
+     * the same set and this is one manager; it is more only when two screens on the
+     * box genuinely differ, which is exactly when it matters.
+     *
+     * Keyed on the identity, and every model is registered on EXACTLY ONE of them
+     * (first grant wins) — two managers writing the same `model.onnx` would race on
+     * the same `.tmp`.
+     */
+    const managers = new Map();
+    const startedManagers = new Set();
+    const watched = new Set();
+    const skipLogged = new Set();
+    let pollHandle = null;
+    let stopped = false;
+    const hostFingerprint = connectorFingerprint(config);
+    /** Filesystem-safe segment for a manager's own manifest directory. */
+    const identityDirSegment = (identity) => identity.replace(/[^A-Za-z0-9._-]/g, '_').slice(0, 64) || 'host';
+    const ensureManager = (identity, screenId) => {
+        const existing = managers.get(identity);
+        if (existing)
+            return existing;
+        const apiBaseUrl = config.apiBaseUrl || 'https://api.trillboards.com';
+        // The manifest STATE dir, not the artifact dir — it records which version of
+        // each specialist is on disk. Nested under the VLM watcher's `model-ota` root
+        // so there is one OTA state home, but its OWN directory PER IDENTITY: two
+        // managers sharing one `models_manifest.json` would clobber each other's
+        // versions, and `saveManifest()` rewrites the whole file from its own map.
+        const stateRoot = config.dataDir || path.join(os.homedir(), '.trillboards');
+        const modelsDir = path.join(stateRoot, 'model-ota', 'specialists', identityDirSegment(identity));
+        const created = (deps.createModelManager ?? defaultCreateSpecialistManager)({
+            modelsDir,
+            apiBaseUrl,
+            deviceFingerprint: identity,
+            deviceScreenId: screenId,
+            ...(config.localSensing?.modelOtaCheckIntervalMs
+                ? { checkIntervalMs: config.localSensing.modelOtaCheckIntervalMs }
+                : {}),
+            autoUpdate: true,
+        });
+        created.on('modelUpdated', (evt) => {
+            // No serve restart and no cache clear: the detector service picks an
+            // arriving artifact up within one poll of it landing, with no restart. That
+            // is its contract, and re-implementing a restart here would be a second
+            // authority over a lifecycle it already owns.
+            log(`[model-ota] ${evt?.name} updated to v${evt?.newVersion} at ${evt?.path}`);
+            // A COMPLETED download frees the one concurrency slot, so ask again rather
+            // than waiting for the next tick. `ModelManager` defaults
+            // `maxConcurrentDownloads` to 1 and BREAKS out of its update loop the moment
+            // the slot is busy, so with N models granted at once only the first is
+            // fetched and the rest wait a full check interval EACH — an hour per model
+            // by default. Kicked only on a genuine completion, so this terminates: a
+            // failing model is retried by the periodic tick, never by a tight loop.
+            const m = managers.get(identity);
+            if (m?.checkForUpdates) {
+                Promise.resolve()
+                    .then(() => m.checkForUpdates())
+                    .catch((err) => log(`[model-ota] follow-up check failed (non-fatal): ${err?.message || err}`));
+            }
+        });
+        created.on('downloadProgress', (evt) => {
+            if (typeof evt?.percent === 'number' && evt.percent % 25 === 0) {
+                log(`[model-ota] downloading ${evt?.name}… ${evt.percent}%`);
+            }
+        });
+        created.on('downloadError', (evt) => {
+            // Includes the disk preflight's refusal, which names the bytes needed, the
+            // bytes free and the volume. Non-fatal by construction: nothing was written,
+            // so the detector keeps answering 503 with its own reason.
+            log(`[model-ota] ${evt?.name} update issue (non-fatal): ${evt?.error}`);
+        });
+        managers.set(identity, created);
+        return created;
+    };
+    const setGrantedModels = (next) => {
+        if (stopped)
+            return;
+        try {
+            if (!otaEnabled)
+                return;
+            const touched = new Set();
+            for (const model of Array.isArray(next) ? next : []) {
+                const dest = destinationForGrantedModel(model, { env });
+                if (dest.kind === 'skip') {
+                    if (!skipLogged.has(dest.modelId)) {
+                        skipLogged.add(dest.modelId);
+                        log(`[model-ota] not delivering '${dest.modelId}': ${dest.reason}`);
+                    }
+                    continue;
+                }
+                if (watched.has(dest.modelId))
+                    continue;
+                const screenId = typeof model.grantedByScreenId === 'string' && model.grantedByScreenId
+                    ? model.grantedByScreenId
+                    : null;
+                const identity = screenId || hostFingerprint;
+                const m = ensureManager(identity, screenId);
+                if (!m)
+                    continue;
+                // The registry id IS the OTA modelType — see GrantedModel.modelId.
+                m.registerModel(dest.modelId, dest.filePath);
+                watched.add(dest.modelId);
+                touched.add(identity);
+                log(`[model-ota] watching ${dest.modelId} → ${dest.filePath}`
+                    + ` (asking as ${screenId ? `screen ${screenId}` : `host ${hostFingerprint}`})`);
+            }
+            for (const identity of touched) {
+                const m = managers.get(identity);
+                if (!m)
+                    continue;
+                if (!startedManagers.has(identity)) {
+                    startedManagers.add(identity);
+                    // initialize() loads the manifest + hashes what is already on disk;
+                    // start() arms the periodic check; the immediate check is what stops a
+                    // fresh install waiting a full interval for an artifact it has none of.
+                    Promise.resolve()
+                        .then(() => m.initialize())
+                        .then(() => { m.start(); })
+                        .then(() => (m.checkForUpdates ? m.checkForUpdates() : undefined))
+                        .catch((err) => log(`[model-ota] init failed (non-fatal): ${err?.message || err}`));
+                }
+                else if (m.checkForUpdates) {
+                    // Already running and a NEW model just appeared — do not make it wait
+                    // for the next tick.
+                    Promise.resolve()
+                        .then(() => m.checkForUpdates())
+                        .catch((err) => log(`[model-ota] check failed (non-fatal): ${err?.message || err}`));
+                }
+            }
+        }
+        catch (err) {
+            log(`[model-ota] granted-model apply failed (non-fatal): ${err?.message || err}`);
+        }
+    };
+    if (!otaEnabled) {
+        log('[model-ota] localSensing.modelOtaEnabled=false — specialist model delivery disabled');
+    }
+    else {
+        setGrantedModels(models);
+    }
+    // 3. Keep asking. A model can be granted (or a canary advanced) long after the
+    //    connector started, and nothing else on this box would ever notice.
+    if (otaEnabled && deps.grantedModelSource) {
+        const source = deps.grantedModelSource;
+        const pollMs = config.localSensing?.modelOtaCheckIntervalMs || DEFAULT_GRANTED_POLL_MS;
+        const refresh = () => {
+            Promise.resolve()
+                .then(() => source.resolve())
+                .then((resolved) => { if (resolved)
+                setGrantedModels(resolved); })
+                .catch((err) => log(`[model-ota] granted-model refresh failed (non-fatal): ${err?.message || err}`));
+        };
+        refresh();
+        const setTimer = deps.setInterval ?? ((cb, ms) => setInterval(cb, ms));
+        pollHandle = setTimer(refresh, pollMs);
+        // Never hold the process open for a model check.
+        if (pollHandle && typeof pollHandle.unref === 'function')
+            pollHandle.unref();
+    }
+    return {
+        stop() {
+            stopped = true;
+            try {
+                vlm?.stop();
+            }
+            catch { /* best-effort */ }
+            for (const m of managers.values()) {
+                try {
+                    m.stop();
+                }
+                catch { /* best-effort */ }
+            }
+            try {
+                if (pollHandle)
+                    (deps.clearInterval ?? clearInterval)(pollHandle);
+            }
+            catch { /* best-effort */ }
+            pollHandle = null;
+        },
+        setGrantedModels,
+        watchedModelIds() {
+            return [...watched].sort();
+        },
+    };
+}
+/** Stable, non-PII connector fingerprint for the OTA version-check query param. */
+function connectorFingerprint(config) {
+    if (config.screenId)
+        return String(config.screenId);
+    const raw = `${os.hostname()}|${process.platform}|${os.arch()}`;
+    let h = 0;
+    for (let i = 0; i < raw.length; i += 1)
+        h = (Math.imul(31, h) + raw.charCodeAt(i)) | 0;
+    return `conn_${(h >>> 0).toString(16)}`;
+}
+function defaultCreateSpecialistManager(opts) {
+    return new edge_core_1.ModelManager({
+        modelsDir: opts.modelsDir,
+        apiBaseUrl: opts.apiBaseUrl,
+        deviceFingerprint: opts.deviceFingerprint,
+        // The identity the SERVER re-decides eligibility under. Without it the
+        // download asks as a different device than the grant answered for.
+        ...(opts.deviceScreenId ? { deviceScreenId: opts.deviceScreenId } : {}),
+        ...(opts.checkIntervalMs ? { checkIntervalMs: opts.checkIntervalMs } : {}),
+        autoUpdate: opts.autoUpdate ?? true,
+    });
+}
+//# sourceMappingURL=modelOta.js.map

package/dist/modelOta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelOta.js","sourceRoot":"","sources":["../src/modelOta.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoGH,oDAYC;AAYD,gEAoCC;AAyCD,0DAuDC;AAkED,sCAyMC;AAzgBD,uCAAyB;AACzB,2CAA6B;AAC7B,sDAAsD;AAEtD,mDAIyB;AAgDzB;;;;;;;;;;GAUG;AACU,QAAA,gCAAgC,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAE3F,2FAA2F;AAC3F,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAE1C,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAgB,oBAAoB,CAAC,IAGpC;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,OAAO,GAAG,QAAQ;WACnB,IAAI,CAAC,IAAI,CACV,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,EACnE,cAAc,CACf,CAAC;IACJ,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;AAC1E,CAAC;AAOD;;;;GAIG;AACH,SAAgB,0BAA0B,CACxC,KAAmB,EACnB,OAAoC,EAAE;IAEtC,MAAM,OAAO,GAAG,OAAO,KAAK,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/E,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACxF,CAAC;IACD,4EAA4E;IAC5E,+EAA+E;IAC/E,6EAA6E;IAC7E,4EAA4E;IAC5E,oEAAoE;IACpE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC9E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;IACzF,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnG,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,OAAO;YACP,MAAM,EAAE,sFAAsF;SAC/F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,wCAAgC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,OAAO;YACP,MAAM,EAAE,WAAW,MAAM,oCAAoC;kBACzD,cAAc,wCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SACjE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,oBAAoB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;AACnG,CAAC;AA8BD;;;;;;;;;;GAUG;AACH,SAAgB,uBAAuB,CAAC,OAUvC;IACC,MAAM,KAAK,GAAuB;QAChC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QACrD,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;KAChG,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO;QACL,KAAK,CAAC,OAAO;YACX,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;aACzD,CAAC,CAAC,CACJ,CAAC;YACF,IAAI,WAAW,GAAG,KAAK,CAAC;YACxB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwB,CAAC;YAC7C,KAAK,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;gBAC5C,IAAI,CAAC,OAAO;oBAAE,SAAS;gBACvB,WAAW,GAAG,IAAI,CAAC;gBACnB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;oBACpE,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO;wBAAE,SAAS;oBAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;oBACrC,qEAAqE;oBACrE,kEAAkE;oBAClE,oEAAoE;oBACpE,kEAAkE;oBAClE,+CAA+C;oBAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE;4BAClB,OAAO,EAAE,CAAC,CAAC,OAAO;4BAClB,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;4BACrE,iBAAiB,EAAE,QAAQ,IAAI,IAAI;yBACpC,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;4BACvE,QAAQ,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;wBACvC,CAAC;wBACD,IAAI,CAAC,QAAQ,CAAC,iBAAiB,IAAI,QAAQ;4BAAE,QAAQ,CAAC,iBAAiB,GAAG,QAAQ,CAAC;oBACrF,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,CAAC,WAAW;gBAAE,OAAO,IAAI,CAAC;YAC9B,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/E,CAAC;KACF,CAAC;AACJ,CAAC;AAwDD,mFAAmF;AACnF,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE/C;;;;;;GAMG;AACH,SAAgB,aAAa,CAC3B,MAAuB,EACvB,SAAyB,EAAE,EAC3B,OAAqB,EAAE;IAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAExD,8EAA8E;IAC9E,IAAI,GAAG,GAA+B,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,kCAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,wDAAyD,GAAa,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,gFAAgF;IAChF,+EAA+E;IAC/E,0EAA0E;IAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,EAAE,eAAe,KAAK,KAAK,CAAC;IAClE;;;;;;;;;;;;;;OAcG;IACH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAsC,CAAC;IAC/D,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,IAAI,UAAU,GAAQ,IAAI,CAAC;IAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,eAAe,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACrD,sEAAsE;IACtE,MAAM,kBAAkB,GAAG,CAAC,QAAgB,EAAU,EAAE,CACtD,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;IAEnE,MAAM,aAAa,GAAG,CAAC,QAAgB,EAAE,QAAuB,EAAqC,EAAE;QACrG,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,6BAA6B,CAAC;QACtE,6EAA6E;QAC7E,8EAA8E;QAC9E,0EAA0E;QAC1E,yEAAyE;QACzE,2EAA2E;QAC3E,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjG,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,8BAA8B,CAAC,CAAC;YAC1E,SAAS;YACT,UAAU;YACV,iBAAiB,EAAE,QAAQ;YAC3B,cAAc,EAAE,QAAQ;YACxB,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,uBAAuB;gBAC9C,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,uBAAuB,EAAE;gBAClE,CAAC,CAAC,EAAE,CAAC;YACP,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,GAA0D,EAAE,EAAE;YACxF,qEAAqE;YACrE,4EAA4E;YAC5E,wEAAwE;YACxE,8CAA8C;YAC9C,GAAG,CAAC,eAAe,GAAG,EAAE,IAAI,gBAAgB,GAAG,EAAE,UAAU,OAAO,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,2EAA2E;YAC3E,0DAA0D;YAC1D,6EAA6E;YAC7E,uEAAuE;YACvE,2EAA2E;YAC3E,yEAAyE;YACzE,wEAAwE;YACxE,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,CAAC,EAAE,eAAe,EAAE,CAAC;gBACvB,OAAO,CAAC,OAAO,EAAE;qBACd,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,eAAgB,EAAE,CAAC;qBAChC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,mDAAoD,GAAa,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;YAC9G,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC,GAAwC,EAAE,EAAE;YAC1E,IAAI,OAAO,GAAG,EAAE,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC/D,GAAG,CAAC,2BAA2B,GAAG,EAAE,IAAI,KAAK,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,GAAsC,EAAE,EAAE;YACrE,2EAA2E;YAC3E,6EAA6E;YAC7E,2DAA2D;YAC3D,GAAG,CAAC,eAAe,GAAG,EAAE,IAAI,8BAA8B,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAC,IAAoB,EAAQ,EAAE;QACtD,IAAI,OAAO;YAAE,OAAO;QACpB,IAAI,CAAC;YACH,IAAI,CAAC,UAAU;gBAAE,OAAO;YACxB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;YAClC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACpD,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;gBACxD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBACzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;wBAClC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBAC7B,GAAG,CAAC,+BAA+B,IAAI,CAAC,OAAO,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;oBACtE,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;oBAAE,SAAS;gBACxC,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ,IAAI,KAAK,CAAC,iBAAiB;oBACrF,CAAC,CAAC,KAAK,CAAC,iBAAiB;oBACzB,CAAC,CAAC,IAAI,CAAC;gBACT,MAAM,QAAQ,GAAG,QAAQ,IAAI,eAAe,CAAC;gBAC7C,MAAM,CAAC,GAAG,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAC5C,IAAI,CAAC,CAAC;oBAAE,SAAS;gBACjB,mEAAmE;gBACnE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACtB,GAAG,CACD,wBAAwB,IAAI,CAAC,OAAO,MAAM,IAAI,CAAC,QAAQ,EAAE;sBACvD,eAAe,QAAQ,CAAC,CAAC,CAAC,UAAU,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,eAAe,EAAE,GAAG,CAChF,CAAC;YACJ,CAAC;YAED,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;gBAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACjC,IAAI,CAAC,CAAC;oBAAE,SAAS;gBACjB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACnC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBAC9B,oEAAoE;oBACpE,uEAAuE;oBACvE,wEAAwE;oBACxE,OAAO,CAAC,OAAO,EAAE;yBACd,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;yBAC1B,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;yBAC1B,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;yBACjE,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,wCAAyC,GAAa,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;gBACnG,CAAC;qBAAM,IAAI,CAAC,CAAC,eAAe,EAAE,CAAC;oBAC7B,sEAAsE;oBACtE,qBAAqB;oBACrB,OAAO,CAAC,OAAO,EAAE;yBACd,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,eAAgB,EAAE,CAAC;yBAChC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,yCAA0C,GAAa,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;gBACpG,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,uDAAwD,GAAa,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,GAAG,CAAC,qFAAqF,CAAC,CAAC;IAC7F,CAAC;SAAM,CAAC;QACN,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAED,+EAA+E;IAC/E,wEAAwE;IACxE,IAAI,UAAU,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,uBAAuB,IAAI,uBAAuB,CAAC;QACvF,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,OAAO,CAAC,OAAO,EAAE;iBACd,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;iBAC5B,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,GAAG,IAAI,QAAQ;gBAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;iBACjE,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,yDAA0D,GAAa,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;QACpH,CAAC,CAAC;QACF,OAAO,EAAE,CAAC;QACV,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACvE,UAAU,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvC,iDAAiD;QACjD,IAAI,UAAU,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,UAAU;YAAE,UAAU,CAAC,KAAK,EAAE,CAAC;IAC/E,CAAC;IAED,OAAO;QACL,IAAI;YACF,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC;gBAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAChD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;gBAClC,IAAI,CAAC;oBAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,UAAU;oBAAE,CAAC,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,CAAC,UAAU,CAAC,CAAC;YACpE,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC7B,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,gBAAgB;QAChB,eAAe;YACb,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,oBAAoB,CAAC,MAAuB;IACnD,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IAChE,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;QAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACvF,OAAO,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,8BAA8B,CAAC,IAOvC;IACC,OAAO,IAAI,wBAAY,CAAC;QACtB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,uEAAuE;QACvE,mEAAmE;QACnE,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;KACpC,CAA0C,CAAC;AAC9C,CAAC"}

package/dist/sensingRunMode.d.ts

@@ -1,6 +1,7 @@
 import { CloudSensingManager, type ResolvedFeed } from './CloudSensingManager';
 import type { SharedFrameSource } from './MosaicSource';
 import type { EdgeAgentConfig } from './config';
+import { SensingProfileClient } from './SensingProfileClient';
 /**
  * Optional cross-rail mosaic-pull sharing: the combined `sense` entrypoint passes
  * a `sharedSources` registry so the VLM rail attaches to the SAME SharedFrameSource
@@ -13,6 +14,26 @@ export interface SensingManagerOpts {
     /** Reuse a caller-owned recovery coordinator across shared sensing rails. */
     streamUrlResolver?: (feed: ResolvedFeed, currentUrl: string, error: Error) => Promise<string | null>;
 }
+/**
+ * One `SensingProfileClient` per feed that carries a device token, PAIRED WITH
+ * THE SCREEN that token binds to — the ONE construction, so the cadence source
+ * and the model OTA ask the same screens the same way. A feed without a token
+ * cannot ask (the token IS the screen binding), and contributes nothing rather
+ * than erroring.
+ *
+ * The screen id rides alongside because the model OTA needs it and the response
+ * does not carry it back: the server decides which models a device may receive
+ * under `screenId`, and the DOWNLOAD has to quote that same identity or it is
+ * re-judged as a different device in a different rollout bucket. See
+ * `modelOta.GrantedModel.grantedByScreenId`. `config.screenId` is not a
+ * substitute — `pairedConfigToFile` stores screen ids only inside `cameras[]`.
+ */
+export declare function profileFeedsForConfig(config: EdgeAgentConfig): Array<{
+    screenId: string | null;
+    client: SensingProfileClient;
+}>;
+/** The clients only — for consumers that do not need the screen identity. */
+export declare function profileClientsForFeeds(config: EdgeAgentConfig): SensingProfileClient[];
 /**
  * The lifecycle surface the auto-sense supervisor drives. `CloudSensingManager`
  * already satisfies it: `start()` opens cameras + runs the capture loops;

package/dist/sensingRunMode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sensingRunMode.d.ts","sourceRoot":"","sources":["../src/sensingRunMode.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EAGnB,KAAK,YAAY,EAElB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAQhD;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC/C,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,iBAAiB,CAAC,EAAE,CAClB,IAAI,EAAE,YAAY,EAClB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,KAAK,KACT,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC7B;AAoDD;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB;;;;;;;;;;;;;;;OAeG;IACH,gBAAgB,CAAC,IAAI;QACnB,eAAe,EAAE,MAAM,CAAC;QACxB;;;;;;WAMG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,CAAC,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QACvC;;;;;;WAMG;QACH,WAAW,CAAC,EAAE;YACZ,QAAQ,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,OAAO,GAAG,IAAI,CAAC;YAC1C,iBAAiB,CAAC,EAAE,OAAO,CAAC;YAC5B,UAAU,CAAC,EAAE,OAAO,CAAC;SACtB,GAAG,IAAI,CAAC;QACT,YAAY,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;KACtE,CAAC;CACH;AAED,iFAAiF;AACjF,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3B,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,qEAAqE;AACrE,eAAO,MAAM,SAAS,EAAE,SAIvB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,QAEgD,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,QAAgB,CAAC;AAE5D;;;;;;;;;GASG;AACH,eAAO,MAAM,qCAAqC,QAAiB,CAAC;AAmWpE;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,UAAU,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,CAAC,GAC1D,MAAM,CAyCR;AAED;;;;;;;;;;GAUG;AACH;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAC5C,EAAE,EAAE,SAAS,EACb,GAAG,GAAE,MAAM,MAAiB,GAC3B;IAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAAA;CAAE,CA+BjD;AA8ID;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,eAAe,EACvB,EAAE,GAAE,SAAqB,EACzB,IAAI,CAAC,EAAE,kBAAkB,GACxB,mBAAmB,GAAG,IAAI,CAqJ5B"}
+{"version":3,"file":"sensingRunMode.d.ts","sourceRoot":"","sources":["../src/sensingRunMode.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EAGnB,KAAK,YAAY,EAElB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAO9D;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC/C,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,iBAAiB,CAAC,EAAE,CAClB,IAAI,EAAE,YAAY,EAClB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,KAAK,KACT,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC7B;AA2CD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,eAAe,GACtB,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,CAAC,CAUlE;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,eAAe,GAAG,oBAAoB,EAAE,CAEtF;AAKD;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB;;;;;;;;;;;;;;;OAeG;IACH,gBAAgB,CAAC,IAAI;QACnB,eAAe,EAAE,MAAM,CAAC;QACxB;;;;;;WAMG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,CAAC,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QACvC;;;;;;WAMG;QACH,WAAW,CAAC,EAAE;YACZ,QAAQ,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,OAAO,GAAG,IAAI,CAAC;YAC1C,iBAAiB,CAAC,EAAE,OAAO,CAAC;YAC5B,UAAU,CAAC,EAAE,OAAO,CAAC;SACtB,GAAG,IAAI,CAAC;QACT,YAAY,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;KACtE,CAAC;CACH;AAED,iFAAiF;AACjF,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3B,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,qEAAqE;AACrE,eAAO,MAAM,SAAS,EAAE,SAIvB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,QAEgD,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,QAAgB,CAAC;AAE5D;;;;;;;;;GASG;AACH,eAAO,MAAM,qCAAqC,QAAiB,CAAC;AAmWpE;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,UAAU,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,CAAC,GAC1D,MAAM,CAyCR;AAED;;;;;;;;;;GAUG;AACH;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAC5C,EAAE,EAAE,SAAS,EACb,GAAG,GAAE,MAAM,MAAiB,GAC3B;IAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAAA;CAAE,CA+BjD;AA8ID;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,eAAe,EACvB,EAAE,GAAE,SAAqB,EACzB,IAAI,CAAC,EAAE,kBAAkB,GACxB,mBAAmB,GAAG,IAAI,CAqJ5B"}

package/dist/sensingRunMode.js

@@ -34,6 +34,8 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TRANSPORT_FAILURE_RESTATE_INTERVAL_MS = exports.SENSING_HEALTH_LOG_INTERVAL_MS = exports.NO_FEEDS_MESSAGE = exports.consoleIo = void 0;
+exports.profileFeedsForConfig = profileFeedsForConfig;
+exports.profileClientsForFeeds = profileClientsForFeeds;
 exports.formatSensingHealth = formatSensingHealth;
 exports.createTransportFailureReporter = createTransportFailureReporter;
 exports.buildLocalSensingManager = buildLocalSensingManager;
@@ -73,19 +75,42 @@ function cadenceSourceFor(config, feeds, mode,
  * A feed that has not settled returns null and simply does not vote.
  */
 observedAnalyzeMs) {
-    const profileClients = feeds
-        .filter((f) => !!f.deviceToken)
-        .map((f) => new SensingProfileClient_1.SensingProfileClient({
-        apiBaseUrl: config.apiBaseUrl,
-        deviceToken: f.deviceToken,
-    }));
     return (0, deployedCadenceSource_1.buildDeployedCadenceSource)({
-        profileClients,
+        profileClients: profileClientsForFeeds(config),
         mode,
         feedCount: feeds.length,
         observedAnalyzeMs,
     });
 }
+/**
+ * One `SensingProfileClient` per feed that carries a device token, PAIRED WITH
+ * THE SCREEN that token binds to — the ONE construction, so the cadence source
+ * and the model OTA ask the same screens the same way. A feed without a token
+ * cannot ask (the token IS the screen binding), and contributes nothing rather
+ * than erroring.
+ *
+ * The screen id rides alongside because the model OTA needs it and the response
+ * does not carry it back: the server decides which models a device may receive
+ * under `screenId`, and the DOWNLOAD has to quote that same identity or it is
+ * re-judged as a different device in a different rollout bucket. See
+ * `modelOta.GrantedModel.grantedByScreenId`. `config.screenId` is not a
+ * substitute — `pairedConfigToFile` stores screen ids only inside `cameras[]`.
+ */
+function profileFeedsForConfig(config) {
+    return (0, CloudSensingManager_1.resolveFeeds)(config)
+        .filter((f) => !!f.deviceToken)
+        .map((f) => ({
+        screenId: f.screenId ? String(f.screenId) : null,
+        client: new SensingProfileClient_1.SensingProfileClient({
+            apiBaseUrl: config.apiBaseUrl,
+            deviceToken: f.deviceToken,
+        }),
+    }));
+}
+/** The clients only — for consumers that do not need the screen identity. */
+function profileClientsForFeeds(config) {
+    return profileFeedsForConfig(config).map((f) => f.client);
+}
 const DEFAULT_LITERT_LM_BASE_URL = 'http://localhost:9379';
 const DEFAULT_LITERT_LM_MODEL = 'gemma-4-E2B-it.litertlm';
 /** Default sink: the real console (what the CLI entrypoints use). */