@workflow/core 5.0.0-beta.5 → 5.0.0-beta.51

package/dist/serialization/workflow-vm.js

@@ -0,0 +1,74 @@
+/**
+ * Host-side reference implementation of the QuickJS engine's workflow-mode
+ * wire codec.
+ *
+ * The QuickJS engine serializes through handles on the host
+ * (runtime/quickjs-serde.ts); this module is the value-space equivalent of
+ * that codec and is used by tests to build wire fixtures and assert
+ * byte-level parity. It has NO Node.js dependencies (no Buffer, no
+ * node:util), which is also what made it bundleable into the VM before the
+ * serde moved host-side.
+ *
+ * Produces and consumes the same wire format as the Node.js workflow.ts:
+ * format-prefixed devalue data ("devl" + devalue.stringify output).
+ */
+import { globalSingleton } from '@workflow/utils';
+import { devalueVmCodec } from './codec-devalue-vm.js';
+import { isFormatPrefix, SerializationFormat } from './types.js';
+const FORMAT_PREFIX_LENGTH = 4;
+// On `globalThis` (see `globalSingleton`) so one process builds one pair,
+// rather than one per bundler layer this module is compiled into.
+const codecs = globalSingleton('@workflow/core//vmTextCodecs', 1, () => ({
+    encoder: undefined,
+    decoder: undefined,
+}));
+function getEncoder() {
+    codecs.encoder ??= new globalThis.TextEncoder();
+    return codecs.encoder;
+}
+function getDecoder() {
+    codecs.decoder ??= new globalThis.TextDecoder();
+    return codecs.decoder;
+}
+/**
+ * Serialize a value to format-prefixed bytes.
+ *
+ * @param value - The value to serialize
+ * @returns Uint8Array with "devl" prefix + devalue payload
+ */
+export function serialize(value) {
+    const payload = devalueVmCodec.serialize(value, 'workflow');
+    const prefix = getEncoder().encode(SerializationFormat.DEVALUE_V1);
+    const result = new Uint8Array(prefix.length + payload.length);
+    result.set(prefix, 0);
+    result.set(payload, prefix.length);
+    return result;
+}
+/**
+ * Deserialize format-prefixed bytes back to a value.
+ *
+ * @param data - Uint8Array with format prefix, or legacy non-binary data
+ * @returns The deserialized value
+ */
+export function deserialize(data) {
+    // Legacy: non-binary data
+    if (!(data instanceof Uint8Array)) {
+        if (devalueVmCodec.deserializeLegacy) {
+            return devalueVmCodec.deserializeLegacy(data, 'workflow');
+        }
+        throw new Error('Cannot deserialize non-binary data without legacy support');
+    }
+    if (data.length < FORMAT_PREFIX_LENGTH) {
+        throw new Error('Data too short to contain format prefix');
+    }
+    const prefixStr = getDecoder().decode(data.subarray(0, FORMAT_PREFIX_LENGTH));
+    if (!isFormatPrefix(prefixStr)) {
+        throw new Error(`Invalid format prefix: "${prefixStr}"`);
+    }
+    if (prefixStr === SerializationFormat.DEVALUE_V1) {
+        const payload = data.subarray(FORMAT_PREFIX_LENGTH);
+        return devalueVmCodec.deserialize(payload, 'workflow');
+    }
+    throw new Error(`Unsupported serialization format: ${prefixStr}`);
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/serialization-format.d.ts

@@ -5,11 +5,36 @@
  * dispatch, and shared types/classes used by all environments (runtime, web
  * o11y, CLI o11y). It has NO Node.js dependencies.
  */
+/**
+ * Re-exported from the envelope layer so browser consumers (web dashboard,
+ * web-shared) can resolve key material without importing
+ * `@workflow/core/serialization`, whose module graph reaches Node built-ins
+ * (`node:util`, `node:async_hooks`) and cannot be bundled for the browser.
+ *
+ * Everything below is Web Crypto only: `serialization/encryption.ts`,
+ * `encryption.ts` and `sealed-box.ts` are all free of Node dependencies.
+ */
+export { type DecryptionKey, decrypt as decryptEnvelope, deriveRunPayloadKeys, encrypt as encryptEnvelope, isRunPayloadKeys, isSealTarget, type PayloadKey, type RunPayloadKeys, runPayloadKeys, type SealTarget, sealTo, } from './serialization/encryption.js';
 export declare const SerializationFormat: {
     /** devalue stringify/parse with TextEncoder/TextDecoder */
     readonly DEVALUE_V1: "devl";
     /** Encrypted payload (inner payload has its own format prefix after decryption) */
     readonly ENCRYPTED: "encr";
+    /**
+     * Sealed payload: asymmetrically encrypted to a run's X25519 public key
+     * (inner payload has its own format prefix after opening).
+     *
+     * Written by cross-run writers that hold only the recipient run's public
+     * key. Opening it requires the run's private scalar rather than the
+     * symmetric per-run key, so o11y display treats it as ciphertext via
+     * {@link isEncryptedData} but {@link hydrateDataWithKey} does not attempt
+     * an AES-GCM decrypt on it.
+     */
+    readonly SEALED: "encp";
+    /** Gzip-compressed payload (inner payload has its own format prefix after decompression) */
+    readonly GZIP: "gzip";
+    /** Zstandard-compressed payload (inner payload has its own format prefix after decompression) */
+    readonly ZSTD: "zstd";
 };
 export type SerializationFormatType = (typeof SerializationFormat)[keyof typeof SerializationFormat];
 /**
@@ -38,10 +63,36 @@ export declare const ENCRYPTED_PLACEHOLDER = "\uD83D\uDD12 Encrypted";
  */
 export declare function isExpiredStub(data: unknown): boolean;
 /**
- * Check if a binary value has the 'encr' format prefix indicating encryption.
- * Browser-safe — does not depend on the full serialization module.
+ * Check if a binary value is ciphertext: either a symmetrically encrypted
+ * payload ('encr') or a sealed cross-run payload ('encp').
+ *
+ * This is the predicate display layers want: both schemes are opaque bytes
+ * that must not be fed to the devalue parser, and both render as the same
+ * "Encrypted" affordance in the CLI and web UI. Use {@link isSealedData} when
+ * the *scheme* matters, notably when choosing a decryption path, since a
+ * sealed payload needs the run's private scalar rather than its symmetric key.
+ *
+ * Browser-safe: does not depend on the full serialization module.
  */
 export declare function isEncryptedData(data: unknown): boolean;
+/**
+ * Check if a binary value has the 'encp' format prefix, indicating a sealed
+ * (asymmetrically encrypted) cross-run payload.
+ *
+ * Browser-safe: does not depend on the full serialization module.
+ */
+export declare function isSealedData(data: unknown): boolean;
+/**
+ * Check if a binary value has a compression format prefix ('gzip' or 'zstd').
+ * Browser-safe: does not depend on the full serialization module.
+ */
+export declare function isCompressedData(data: unknown): boolean;
+/**
+ * Register a browser zstd decoder (e.g. a WASM-backed one). The web o11y UI
+ * calls this at init so `hydrateDataWithKey` can inflate zstd payloads after
+ * client-side decryption. Node readers use `node:zlib` and ignore this.
+ */
+export declare function registerZstdDecoder(decoder: (payload: Uint8Array) => Promise<Uint8Array>): void;
 /**
  * A map of type name → reviver function, used by devalue's `parse`/`unflatten`.
  * Each environment (runtime, web, CLI) provides its own set.
@@ -58,7 +109,7 @@ export type Revivers = Record<string, (value: any) => any>;
  *
  * Encrypted data is intentionally left as a `Uint8Array` so that consumers
  * (CLI, web UI) can detect it with `isEncryptedData()` and decide how to
- * handle it — the CLI replaces it with a styled placeholder, the web UI
+ * handle it: the CLI replaces it with a styled placeholder, the web UI
  * renders an "Encrypted" card with a Decrypt button that triggers
  * client-side decryption on demand.
  */
@@ -70,11 +121,15 @@ export declare function hydrateData(value: unknown, revivers: Revivers): unknown
  * decryption. Used by o11y tooling (web UI, CLI) when the user requests
  * decryption.
  *
- * @param value - The value to hydrate (may be encrypted)
+ * @param value - The value to hydrate (may be encrypted or sealed)
  * @param revivers - Devalue revivers for deserialization
- * @param key - AES-256 encryption key (if provided, encrypted data will be decrypted)
+ * @param key - The run's key material. Pass `RunPayloadKeys` (from
+ *   `deriveRunPayloadKeys`) to open both symmetric (`encr`) and sealed
+ *   (`encp`) payloads; a bare `CryptoKey` opens only the symmetric ones.
+ *   Typed as a read capability so a write-only seal target (which could open
+ *   neither scheme) is rejected at compile time rather than failing here.
  */
-export declare function hydrateDataWithKey(value: unknown, revivers: Revivers, key: import('./encryption.js').CryptoKey | undefined): Promise<unknown>;
+export declare function hydrateDataWithKey(value: unknown, revivers: Revivers, key: import('./serialization/encryption.js').DecryptionKey | undefined): Promise<unknown>;
 /** Marker for stream reference objects rendered as links in the UI */
 export declare const STREAM_REF_TYPE = "__workflow_stream_ref__";
 /** A stream reference for UI display */
@@ -100,7 +155,7 @@ export declare const CLASS_INSTANCE_REF_TYPE = "__workflow_class_instance_ref__"
 /**
  * A class instance reference for o11y display.
  *
- * Browser-safe base class — no `util.inspect.custom`. Environment-specific
+ * Browser-safe base class: no `util.inspect.custom`. Environment-specific
  * rendering (CLI inspect, web component) is handled by each consumer.
  */
 export declare class ClassInstanceRef {
@@ -151,13 +206,14 @@ export declare const observabilityRevivers: Revivers;
  * Dispatches by resource type (step, hook, event, workflow) and calls
  * `hydrateData` with the provided revivers for each data field.
  *
- * Each environment (web, CLI) provides its own revivers — this function
+ * Each environment (web, CLI) provides its own revivers; this function
  * only handles the dispatch logic and field mapping.
  */
 export declare function hydrateResourceIO<T extends {
     stepId?: string;
     hookId?: string;
     eventId?: string;
+    eventType?: string;
     input?: any;
     output?: any;
     metadata?: any;

package/dist/serialization-format.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serialization-format.d.ts","sourceRoot":"","sources":["../src/serialization-format.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,eAAO,MAAM,mBAAmB;IAC9B,2DAA2D;;IAE3D,mFAAmF;;CAE3E,CAAC;AAEX,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AAQjE;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,uBAAuB,EAC/B,OAAO,EAAE,UAAU,GAAG,OAAO,GAC5B,UAAU,GAAG,OAAO,CAgBtB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG;IAC9D,MAAM,EAAE,uBAAuB,CAAC;IAChC,OAAO,EAAE,UAAU,CAAC;CACrB,CA0BA;AAMD;;;GAGG;AACH,eAAO,MAAM,qBAAqB,2BAAwB,CAAC;AAsB3D;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAQpD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAMtD;AAMD;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC;AAM3D;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAuBvE;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,OAAO,iBAAiB,EAAE,SAAS,GAAG,SAAS,GACnD,OAAO,CAAC,OAAO,CAAC,CAWlB;AAQD,sEAAsE;AACtE,eAAO,MAAM,eAAe,4BAA4B,CAAC;AAEzD,wCAAwC;AACxC,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,mEAAmE;AACnE,eAAO,MAAM,YAAY,yBAAyB,CAAC;AAEnD,qCAAqC;AACrC,MAAM,WAAW,MAAM;IACrB,MAAM,EAAE,OAAO,YAAY,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,0CAA0C;AAC1C,eAAO,MAAM,QAAQ,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MASlD,CAAC;AAEF,6DAA6D;AAC7D,eAAO,MAAM,qBAAqB,GAAI,OAAO;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,KAAG,MAEhE,CAAC;AAEF,kDAAkD;AAClD,eAAO,MAAM,uBAAuB,oCAAoC,CAAC;AAEzE;;;;;GAKG;AACH,qBAAa,gBAAgB;aAIT,SAAS,EAAE,MAAM;aACjB,OAAO,EAAE,MAAM;aACf,IAAI,EAAE,OAAO;IAL/B,QAAQ,CAAC,MAAM,qCAA2B;gBAGxB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,OAAO;IAG/B,MAAM,IAAI;QACR,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,OAAO,CAAC;KACf;CAQF;AAED,oDAAoD;AACpD,eAAO,MAAM,kBAAkB,GAC7B,OAAO,OAAO,KACb,KAAK,IAAI,gBAUX,CAAC;AAEF,6CAA6C;AAC7C,eAAO,MAAM,UAAU,GAAI,OAAO,OAAO,KAAG,OAE3C,CAAC;AAEF,6CAA6C;AAC7C,eAAO,MAAM,WAAW,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,SASrD,CAAC;AAMF;;GAEG;AACH,eAAO,MAAM,iBAAiB,GAAI,OAAO,GAAG,KAAG,SAa9C,CAAC;AAEF,6DAA6D;AAC7D,eAAO,MAAM,8BAA8B,GAAI,OAAO,OAAO,KAAG,MAO/D,CAAC;AAEF,4CAA4C;AAC5C,eAAO,MAAM,gBAAgB,GAAI,SAAS,MAAM,KAAG,MAIlD,CAAC;AAEF;2EAC2E;AAC3E,eAAO,MAAM,uBAAuB,GAAI,OAAO;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;CACf,KAAG,gBAAgB,GAAG,MAYtB,CAAC;AAEF,+DAA+D;AAC/D,eAAO,MAAM,uBAAuB,GAAI,OAAO;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,KAAG,MAEpE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,QAuCnC,CAAC;AA0LF;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,CAAC,SAAS;IACR,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,GAAG,CAAC;IACZ,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,QAAQ,CAAC,EAAE,GAAG,CAAC;IACf,SAAS,CAAC,EAAE,GAAG,CAAC;IAChB,gBAAgB,CAAC,EAAE,GAAG,CAAC;CACxB,EACD,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,GAAG,CAAC,CA8BpC;AAMD,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,CAmBvD;AAED,uEAAuE;AACvE,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,SAAK,GAAG,MAAM,CAG7D"}
+{"version":3,"file":"serialization-format.d.ts","sourceRoot":"","sources":["../src/serialization-format.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH;;;;;;;;GAQG;AACH,OAAO,EACL,KAAK,aAAa,EAClB,OAAO,IAAI,eAAe,EAC1B,oBAAoB,EACpB,OAAO,IAAI,eAAe,EAC1B,gBAAgB,EAChB,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,cAAc,EACd,KAAK,UAAU,EACf,MAAM,GACP,MAAM,+BAA+B,CAAC;AAMvC,eAAO,MAAM,mBAAmB;IAC9B,2DAA2D;;IAE3D,mFAAmF;;IAEnF;;;;;;;;;OASG;;IAEH,4FAA4F;;IAE5F,iGAAiG;;CAEzF,CAAC;AAEX,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AAQjE;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,uBAAuB,EAC/B,OAAO,EAAE,UAAU,GAAG,OAAO,GAC5B,UAAU,GAAG,OAAO,CAgBtB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG;IAC9D,MAAM,EAAE,uBAAuB,CAAC;IAChC,OAAO,EAAE,UAAU,CAAC;CACrB,CA0BA;AAMD;;;GAGG;AACH,eAAO,MAAM,qBAAqB,2BAAwB,CAAC;AAsB3D;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAQpD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAStD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAMnD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAQvD;AA+DD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,GACpD,IAAI,CAEN;AAiDD;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC;AAM3D;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAuCvE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,OAAO,+BAA+B,EAAE,aAAa,GAAG,SAAS,GACrE,OAAO,CAAC,OAAO,CAAC,CA2BlB;AAQD,sEAAsE;AACtE,eAAO,MAAM,eAAe,4BAA4B,CAAC;AAEzD,wCAAwC;AACxC,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,mEAAmE;AACnE,eAAO,MAAM,YAAY,yBAAyB,CAAC;AAEnD,qCAAqC;AACrC,MAAM,WAAW,MAAM;IACrB,MAAM,EAAE,OAAO,YAAY,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,0CAA0C;AAC1C,eAAO,MAAM,QAAQ,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MASlD,CAAC;AAEF,6DAA6D;AAC7D,eAAO,MAAM,qBAAqB,GAAI,OAAO;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,KAAG,MAEhE,CAAC;AAEF,kDAAkD;AAClD,eAAO,MAAM,uBAAuB,oCAAoC,CAAC;AAEzE;;;;;GAKG;AACH,qBAAa,gBAAgB;aAIT,SAAS,EAAE,MAAM;aACjB,OAAO,EAAE,MAAM;aACf,IAAI,EAAE,OAAO;IAL/B,QAAQ,CAAC,MAAM,qCAA2B;gBAGxB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,OAAO;IAG/B,MAAM,IAAI;QACR,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,OAAO,CAAC;KACf;CAQF;AAED,oDAAoD;AACpD,eAAO,MAAM,kBAAkB,GAC7B,OAAO,OAAO,KACb,KAAK,IAAI,gBAUX,CAAC;AAEF,6CAA6C;AAC7C,eAAO,MAAM,UAAU,GAAI,OAAO,OAAO,KAAG,OAE3C,CAAC;AAEF,6CAA6C;AAC7C,eAAO,MAAM,WAAW,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,SASrD,CAAC;AAMF;;GAEG;AACH,eAAO,MAAM,iBAAiB,GAAI,OAAO,GAAG,KAAG,SAa9C,CAAC;AAEF,6DAA6D;AAC7D,eAAO,MAAM,8BAA8B,GAAI,OAAO,OAAO,KAAG,MAO/D,CAAC;AAEF,4CAA4C;AAC5C,eAAO,MAAM,gBAAgB,GAAI,SAAS,MAAM,KAAG,MAIlD,CAAC;AAEF;2EAC2E;AAC3E,eAAO,MAAM,uBAAuB,GAAI,OAAO;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;CACf,KAAG,gBAAgB,GAAG,MAYtB,CAAC;AAEF,+DAA+D;AAC/D,eAAO,MAAM,uBAAuB,GAAI,OAAO;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,KAAG,MAEpE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,QAuCnC,CAAC;AAyIF;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,CAAC,SAAS;IACR,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,GAAG,CAAC;IACZ,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,QAAQ,CAAC,EAAE,GAAG,CAAC;IACf,SAAS,CAAC,EAAE,GAAG,CAAC;IAChB,gBAAgB,CAAC,EAAE,GAAG,CAAC;CACxB,EACD,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,GAAG,CAAC,CA8BpC;AAMD,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,CA4BvD;AAED,uEAAuE;AACvE,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,SAAK,GAAG,MAAM,CAG7D"}