@vibesdotdev/platform 0.0.0-stage → 1.0.0-rc.2

package/dist/fleets/daemon/host-agent/build-job-credentials.js

@@ -0,0 +1,101 @@
+import { resolveFileSystemAdapter, writeFilePrivate, chmodChecked } from '@vibesdotdev/filesystem';
+import { getRuntimePath } from '@vibesdotdev/paths';
+import { composeChildEnv, getRuntimeHostCommands, settle, CapabilityError } from '@vibesdotdev/kernel';
+import { runCapture } from '@vibesdotdev/kernel/execution';
+import { BuildJobCredentialsSchema } from "../../build-job-credentials-contract.js";
+export const shellQuote = (value) => `'${value.replaceAll("'", "'\\''")}'`;
+/** Reject malformed wire material without including secret-bearing Zod issues in logs. */
+export function parseBuildJobCredentials(value, action) {
+    const parsed = BuildJobCredentialsSchema.safeParse(value);
+    if (!parsed.success)
+        throw new Error('Build credential broker returned invalid credentials');
+    const credentials = parsed.data;
+    if (credentials.registry.owner.type !== action.ownerType || credentials.registry.owner.id !== action.ownerId ||
+        Date.parse(credentials.registry.expiresAt) <= Date.now()) {
+        throw new Error('Build Registry lease does not match the live action owner');
+    }
+    if (credentials.publish?.some((lease) => Date.parse(lease.expiresAt) <= Date.now())) {
+        throw new Error('Build publish authority has expired');
+    }
+    if (credentials.deploy?.some((lease) => Date.parse(lease.expiresAt) <= Date.now())) {
+        throw new Error('Build deploy credential has expired');
+    }
+    return credentials;
+}
+/**
+ * The key exists only during the single fetch that consumes its one-shot lease.
+ * Its public half is checked on the handed runtime (`ssh-keygen -y`, the host
+ * set alone), so no host agent or key reaches the check.
+ */
+export async function materializeBuildSshCredential(runtime, credentials, source, workspace) {
+    const [lease] = credentials.ssh.leases;
+    if (credentials.ssh.leases.length !== 1 || !lease || lease.role !== 'package-source' ||
+        lease.cloneUrl !== source.repository || lease.repositoryId !== source.authentication?.repositoryId ||
+        Date.parse(lease.expiresAt) <= Date.now() || !/^[a-f0-9]{40}$/.test(source.ref ?? '')) {
+        throw new Error('Build SSH lease does not match the immutable source');
+    }
+    const host = credentials.ssh.knownHost;
+    for (const key of [lease, host]) {
+        const encoded = key.publicKeyOpenSsh.split(' ')[1];
+        const digest = new Uint8Array(await crypto.subtle.digest('SHA-256', Uint8Array.from(atob(encoded), (value) => value.charCodeAt(0))));
+        const fingerprint = 'SHA256:' + btoa(String.fromCharCode(...digest)).replace(/=+$/, '');
+        if (fingerprint !== key.fingerprint)
+            throw new Error('Build SSH key fingerprint mismatch');
+    }
+    const filesystem = await resolveFileSystemAdapter(runtime);
+    const paths = await getRuntimePath(runtime);
+    const directory = paths.join(workspace, 'ssh');
+    await filesystem.mkdir(directory, { mode: 0o700 });
+    await chmodChecked(filesystem, directory, 0o700);
+    const cleanup = () => filesystem.remove(directory, { recursive: true });
+    try {
+        const identity = paths.join(directory, 'identity');
+        const knownHosts = paths.join(directory, 'known_hosts');
+        await writeFilePrivate(filesystem, identity, lease.privateKeyOpenSsh);
+        await writeFilePrivate(filesystem, knownHosts, `${host.hostname} ${host.publicKeyOpenSsh}\n`);
+        const checked = await runCapture(runtime, 'ssh-keygen', ['-y', '-f', identity], {
+            env: composeChildEnv(runtime, {}),
+            envMode: 'replace'
+        });
+        const publicKey = checked.stdout;
+        // `ssh-keygen -y` echoes the private key's embedded comment (the broker
+        // stamps `forge-ci/<leaseId>`); the lease carries keytype+blob only, so
+        // compare those. A short/empty derivation can never equal the lease.
+        const derived = publicKey.trim().split(/\s+/).slice(0, 2).join(' ');
+        if (checked.exitCode !== 0 || derived !== lease.publicKeyOpenSsh) {
+            throw new Error('Build SSH private identity does not match its public key');
+        }
+        return { cleanup, env: {
+                GIT_SSH_COMMAND: `ssh -F /dev/null -i ${shellQuote(identity)} -o IdentityAgent=none -o IdentitiesOnly=yes ` +
+                    `-o BatchMode=yes -o StrictHostKeyChecking=yes -o UserKnownHostsFile=${shellQuote(knownHosts)} ` +
+                    '-o HostKeyAlgorithms=ssh-ed25519',
+                GIT_TERMINAL_PROMPT: '0'
+            } };
+    }
+    catch (cause) {
+        const removed = await settle(cleanup);
+        if (!removed.ok) {
+            throw new CapabilityError('Build SSH materialization failed and its private directory could not be removed.', 'UNAVAILABLE', {
+                reason: 'build-ssh-cleanup-failed', cause,
+                details: { directory }, recoveryHint: 'Remove the private SSH directory before retrying.'
+            });
+        }
+        throw cause;
+    }
+}
+/** Re-enter the handed runtime's host (its Bun runtime, including a compiled Vibes executable). */
+export async function materializeBuildRuntime(runtime, workspace) {
+    const commands = await getRuntimeHostCommands(runtime);
+    const { argv, env } = commands.scriptRuntimeArgv();
+    const filesystem = await resolveFileSystemAdapter(runtime);
+    const paths = await getRuntimePath(runtime);
+    const directory = paths.join(workspace, 'bin');
+    await filesystem.mkdir(directory, { mode: 0o700 });
+    await chmodChecked(filesystem, directory, 0o700);
+    const invocation = [...Object.entries(env).map(([key, value]) => shellQuote(`${key}=${value}`)), ...argv.map(shellQuote)].join(' ');
+    await filesystem.writeFile(paths.join(directory, 'bun'), `#!/bin/sh\nexec env ${invocation} "$@"\n`, { mode: 0o700 });
+    const self = commands.selfSpawnArgv('fleet build-job').map(shellQuote).join(' ');
+    await filesystem.writeFile(paths.join(directory, 'vibes'), `#!/bin/sh\nexec ${self} "$@"\n`, { mode: 0o700 });
+    return directory;
+}
+//# sourceMappingURL=build-job-credentials.js.map

package/dist/fleets/daemon/host-agent/build-job-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-job-credentials.js","sourceRoot":"","sources":["../../../../src/fleets/daemon/host-agent/build-job-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,EAAE,eAAe,EAAqB,MAAM,qBAAqB,CAAC;AAC1H,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAG3D,OAAO,EAAE,yBAAyB,EAA4B,MAAM,yCAAyC,CAAC;AAE9G,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAEnF,0FAA0F;AAC1F,MAAM,UAAU,wBAAwB,CAAC,KAAc,EAAE,MAAqB;IAC7E,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC7F,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC;IAChC,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,SAAS,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,OAAO;QAC3G,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,WAAW,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,OAAqB,EACrB,WAAgC,EAChC,MAAyF,EACzF,SAAiB;IAEjB,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;IACvC,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;QACnF,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,UAAU,IAAI,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC,cAAc,EAAE,YAAY;QAClG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrI,MAAM,WAAW,GAAG,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxF,IAAI,WAAW,KAAK,GAAG,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,MAAM,YAAY,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACxD,MAAM,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACtE,MAAM,gBAAgB,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAC9F,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE;YAC/E,GAAG,EAAE,eAAe,CAAC,OAAO,EAAE,EAAE,CAAC;YACjC,OAAO,EAAE,SAAS;SAClB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;QACjC,wEAAwE;QACxE,wEAAwE;QACxE,qEAAqE;QACrE,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpE,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE;gBACtB,eAAe,EAAE,uBAAuB,UAAU,CAAC,QAAQ,CAAC,+CAA+C;oBAC1G,uEAAuE,UAAU,CAAC,UAAU,CAAC,GAAG;oBAChG,kCAAkC;gBACnC,mBAAmB,EAAE,GAAG;aACxB,EAAE,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,eAAe,CAAC,kFAAkF,EAAE,aAAa,EAAE;gBAC5H,MAAM,EAAE,0BAA0B,EAAE,KAAK;gBACzC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,mDAAmD;aACzF,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,OAAqB,EACrB,SAAiB;IAEjB,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,iBAAiB,EAAE,CAAC;IACnD,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,MAAM,YAAY,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpI,MAAM,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,uBAAuB,UAAU,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtH,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjF,MAAM,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,mBAAmB,IAAI,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9G,OAAO,SAAS,CAAC;AAClB,CAAC"}

package/dist/fleets/daemon/host-agent/build-job-executor.d.ts

@@ -0,0 +1,50 @@
+import { type JsonObject } from '@vibesdotdev/kernel/schemas/json';
+import type { HostActionRun } from '@vibesdotdev/platform/hosts/schemas/types';
+import { type CapabilityErrorOptions, type VibesRuntime } from '@vibesdotdev/kernel';
+export interface HostActionExecutionResult {
+    result: JsonObject;
+    logs: string;
+}
+export declare const UNCONFIRMED_PROCESS_TERMINATION_REASON = "build-command-termination-unconfirmed";
+export interface UnconfirmedProcessTerminationHandle {
+    pid: number | null;
+    exit: Promise<{
+        code: number | null;
+    }>;
+    cleanup?: Promise<{
+        code: number | null;
+    }>;
+}
+export declare function getUnconfirmedProcessTermination(error: CapabilityErrorOptions['cause']): UnconfirmedProcessTerminationHandle | null;
+export declare function hasUnconfirmedProcessTermination(error: CapabilityErrorOptions['cause']): boolean;
+/**
+ * Context the daemon threads in so the executor can publish artifacts through the
+ * platform R2-binding proxy. Only supplied when the daemon knows the platform
+ * origin (see `agent.ts` / `fleet.daemon.command.impl.ts`). `fetchImpl` /
+ * `openFile` are injectable so the upload path is unit-testable without a real
+ * network or disk read.
+ */
+export interface BuildJobPublishContext {
+    /** Platform origin the host authenticates against (e.g. https://platform.vibes.dev). */
+    platformOrigin: string;
+    /** Durable host bearer token — the SAME token the lifecycle client authenticates with. */
+    hostToken: string;
+    /** Fetch implementation. Defaults to the global `fetch`. */
+    fetchImpl?: typeof fetch;
+    /** Opens a file as a streamable handle. Defaults to a Node readable stream. */
+    openFile?: (path: string) => {
+        stream(): ReadableStream<Uint8Array>;
+    };
+}
+/**
+ * The host variables a build command reads by name: the build host's toolchain
+ * locations. Every build command runs with the kernel's composition
+ * (`composeChildEnv`): the host set, these names, and what the job declares
+ * (its leased credentials), with `envMode: 'replace'`. No build step sees the
+ * rest of the host's environment, and no host credential reaches one.
+ */
+export declare const BUILD_STEP_INHERIT_ENV: readonly ["JAVA_HOME", "ANDROID_HOME", "ANDROID_SDK_ROOT", "GOPATH", "GOROOT", "CARGO_HOME", "RUSTUP_HOME", "BUN_INSTALL", "PNPM_HOME", "NVM_DIR", "DOCKER_HOST"];
+export declare function executeBuildJobAction(runtime: VibesRuntime, action: HostActionRun, publish?: BuildJobPublishContext, options?: {
+    signal?: AbortSignal;
+}): Promise<HostActionExecutionResult>;
+//# sourceMappingURL=build-job-executor.d.ts.map

package/dist/fleets/daemon/host-agent/build-job-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-job-executor.d.ts","sourceRoot":"","sources":["../../../../src/fleets/daemon/host-agent/build-job-executor.ts"],"names":[],"mappings":"AAGA,OAAO,EAAqC,KAAK,UAAU,EAAkB,MAAM,kCAAkC,CAAC;AAEtH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAO/E,OAAO,EAE+C,KAAK,sBAAsB,EAAE,KAAK,YAAY,EACnG,MAAM,qBAAqB,CAAC;AAM7B,MAAM,WAAW,yBAAyB;IACzC,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACb;AAED,eAAO,MAAM,sCAAsC,0CAA0C,CAAC;AAE9F,MAAM,WAAW,mCAAmC;IACnD,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACvC,OAAO,CAAC,EAAE,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CAC3C;AAID,wBAAgB,gCAAgC,CAC/C,KAAK,EAAE,sBAAsB,CAAC,OAAO,CAAC,GACpC,mCAAmC,GAAG,IAAI,CAe5C;AAED,wBAAgB,gCAAgC,CAC/C,KAAK,EAAE,sBAAsB,CAAC,OAAO,CAAC,GACpC,OAAO,CAgBT;AASD;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACtC,wFAAwF;IACxF,cAAc,EAAE,MAAM,CAAC;IACvB,0FAA0F;IAC1F,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;QAAE,MAAM,IAAI,cAAc,CAAC,UAAU,CAAC,CAAA;KAAE,CAAC;CACtE;AA4JD;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,mKAYzB,CAAC;AA4ZX,wBAAsB,qBAAqB,CAC1C,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,aAAa,EACrB,OAAO,CAAC,EAAE,sBAAsB,EAChC,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,GAChC,OAAO,CAAC,yBAAyB,CAAC,CAsRpC"}