agent-inbox 0.2.4 → 0.2.5

package/dist/mail/fs-attachment-store.js

@@ -1,165 +0,0 @@
-/**
- * Filesystem-backed AttachmentStore — opt-in for large/high-volume deployments.
- *
- * Keeps attachment bytes out of the SQLite DB (no WAL bloat, no synchronous
- * blob I/O blocking the event loop). Content-addressed by sha256, so identical
- * bytes dedup. Files live at `<dir>/<aa>/<sha256>` (sharded by the first byte
- * to avoid one enormous directory).
- *
- * Durability: writes go to a unique temp file, are fsync'd, then atomically
- * renamed into place. Because the caller stores the attachment (this `put`)
- * BEFORE committing the message row that references it, a crash can only ever
- * leave an orphan file (reclaimable by GC) — never a row pointing at missing
- * bytes. See docs/MAIL-INTEROP-PLAN.md §4c.
- */
-import { createHash } from "node:crypto";
-import * as fs from "node:fs/promises";
-import * as path from "node:path";
-const REF_RE = /^sha256:([0-9a-f]{64})$/;
-export class FsAttachmentStore {
-    dir;
-    constructor(dir) {
-        this.dir = dir;
-    }
-    async put(bytes, _meta) {
-        const hex = createHash("sha256").update(bytes).digest("hex");
-        const ref = `sha256:${hex}`;
-        const full = this.pathForHex(hex);
-        // Content-addressed: if the bytes are already stored, we're done.
-        if (await exists(full))
-            return ref;
-        await fs.mkdir(path.dirname(full), { recursive: true });
-        // Atomic durable write: unique temp file → fsync → rename into place.
-        const tmp = `${full}.tmp-${process.pid}-${Date.now()}-${Math.random()
-            .toString(36)
-            .slice(2)}`;
-        let handle;
-        try {
-            handle = await fs.open(tmp, "wx");
-            await handle.writeFile(bytes);
-            await handle.sync();
-        }
-        finally {
-            await handle?.close();
-        }
-        try {
-            await fs.rename(tmp, full);
-        }
-        catch (err) {
-            // A concurrent put of identical bytes may have won the race — that's fine
-            // (same content). Clean up our temp file and return the ref.
-            await fs.rm(tmp, { force: true });
-            if (!(await exists(full)))
-                throw err;
-        }
-        // Durability: fsync the containing directory so the rename survives a crash
-        // (atomic rename alone is not crash-durable without a parent-dir fsync).
-        await fsyncDir(path.dirname(full));
-        return ref;
-    }
-    async get(ref) {
-        const full = this.pathForRef(ref);
-        try {
-            return await fs.readFile(full);
-        }
-        catch (err) {
-            if (err.code === "ENOENT") {
-                throw new Error(`Attachment not found: ${ref}`);
-            }
-            throw err;
-        }
-    }
-    async delete(ref) {
-        await fs.rm(this.pathForRef(ref), { force: true });
-    }
-    /**
-     * Garbage-collect orphan files: delete any stored attachment whose ref is not
-     * in `liveRefs` AND that is older than `minAgeMs` (default 1h).
-     *
-     * The age guard prevents a TOCTOU race: an attachment is `put` (file lands on
-     * disk) before the message row that references it is committed, so a just-
-     * written file may legitimately not appear in a `liveRefs` snapshot yet.
-     * Skipping recently-written files avoids deleting such in-flight attachments.
-     */
-    async gc(liveRefs, minAgeMs = 3_600_000) {
-        let removed = 0;
-        const cutoff = Date.now() - minAgeMs;
-        let shards;
-        try {
-            shards = await fs.readdir(this.dir, { withFileTypes: true });
-        }
-        catch (err) {
-            if (err.code === "ENOENT")
-                return 0;
-            throw err;
-        }
-        for (const shard of shards) {
-            if (!shard.isDirectory())
-                continue; // ignore stray files at the root
-            const shardDir = path.join(this.dir, shard.name);
-            let files;
-            try {
-                files = await fs.readdir(shardDir);
-            }
-            catch {
-                continue;
-            }
-            for (const name of files) {
-                if (name.includes(".tmp-"))
-                    continue; // leave in-flight temp files
-                if (liveRefs.has(`sha256:${name}`))
-                    continue;
-                const filePath = path.join(shardDir, name);
-                try {
-                    const st = await fs.stat(filePath);
-                    if (st.mtimeMs > cutoff)
-                        continue; // too new — may be mid-ingestion
-                }
-                catch {
-                    continue;
-                }
-                await fs.rm(filePath, { force: true });
-                removed++;
-            }
-        }
-        return removed;
-    }
-    pathForHex(hex) {
-        // Shard by the first byte of the hash to bound directory fan-out.
-        return path.join(this.dir, hex.slice(0, 2), hex);
-    }
-    pathForRef(ref) {
-        const m = REF_RE.exec(ref);
-        if (!m) {
-            // Strict validation prevents path traversal via a crafted ref (refs are
-            // always sha256-of-content, never caller-chosen).
-            throw new Error(`Invalid attachment ref: ${ref}`);
-        }
-        return this.pathForHex(m[1]);
-    }
-}
-async function exists(p) {
-    try {
-        await fs.access(p);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/** fsync a directory so a rename into it is durable. Best-effort across platforms. */
-async function fsyncDir(dir) {
-    let handle;
-    try {
-        handle = await fs.open(dir, "r");
-        await handle.sync();
-    }
-    catch {
-        // Some platforms (e.g. Windows) don't permit fsync on a directory handle.
-        // Atomic rename still holds; this only weakens the durability guarantee.
-    }
-    finally {
-        await handle?.close().catch(() => { });
-    }
-}
-//# sourceMappingURL=fs-attachment-store.js.map

package/dist/mail/fs-attachment-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fs-attachment-store.js","sourceRoot":"","sources":["../../src/mail/fs-attachment-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,MAAM,MAAM,GAAG,yBAAyB,CAAC;AAEzC,MAAM,OAAO,iBAAiB;IACR;IAApB,YAAoB,GAAW;QAAX,QAAG,GAAH,GAAG,CAAQ;IAAG,CAAC;IAEnC,KAAK,CAAC,GAAG,CACP,KAAa,EACb,KAAiD;QAEjD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,UAAU,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAElC,kEAAkE;QAClE,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC;QAEnC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAExD,sEAAsE;QACtE,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE;aAClE,QAAQ,CAAC,EAAE,CAAC;aACZ,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACd,IAAI,MAAiC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;QACxB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,0EAA0E;YAC1E,6DAA6D;YAC7D,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBAAE,MAAM,GAAG,CAAC;QACvC,CAAC;QACD,4EAA4E;QAC5E,yEAAyE;QACzE,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;YAClD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,EAAE,CAAC,QAAqB,EAAE,WAAmB,SAAS;QAC1D,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;QACrC,IAAI,MAAuD,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,CAAC,CAAC;YAC/D,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBAAE,SAAS,CAAC,iCAAiC;YACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,KAAe,CAAC;YACpB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,SAAS,CAAC,6BAA6B;gBACnE,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;oBAAE,SAAS;gBAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAC3C,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACnC,IAAI,EAAE,CAAC,OAAO,GAAG,MAAM;wBAAE,SAAS,CAAC,iCAAiC;gBACtE,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,MAAM,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvC,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,UAAU,CAAC,GAAW;QAC5B,kEAAkE;QAClE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;IAEO,UAAU,CAAC,GAAW;QAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,wEAAwE;YACxE,kDAAkD;YAClD,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;CACF;AAED,KAAK,UAAU,MAAM,CAAC,CAAS;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,KAAK,UAAU,QAAQ,CAAC,GAAW;IACjC,IAAI,MAAiC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,yEAAyE;IAC3E,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACxC,CAAC;AACH,CAAC"}

package/dist/mail/mail-gateway.d.ts

@@ -1,114 +0,0 @@
-/**
- * MailGateway — the only mail-aware component the rest of the system touches.
- *
- * Ingress: transport.onReceive → policy (size / allow-list / DMARC) → dedup →
- * bounce-detect → map → commit via router.routeMessage (single ingestion path).
- * The transport ACKs only after this resolves (commit-before-ACK); a throw
- * NACKs so the sender retries.
- *
- * Egress: router calls send() for mail-class recipients. The message is rendered
- * and attempted; transient failures are queued durably and retried; permanent
- * failures (and inbound DSNs) converge on one config-gated bounce handler.
- *
- * See docs/MAIL-INTEROP-PLAN.md §7, §8.
- */
-import { EventEmitter } from "node:events";
-import type { Storage } from "../storage/interface.js";
-import type { MessageRouter, MailEgress } from "../router/message-router.js";
-import { DeliveryQueue } from "../federation/delivery-queue.js";
-import type { QueueStore } from "../federation/queue-store.js";
-import type { Message, MailIdentityConfig, DeliveryQueueConfig } from "../types.js";
-import type { MailTransport, InboundMail } from "./types.js";
-export interface MailGatewayConfig {
-    identity: MailIdentityConfig;
-    /** Domains we send to without erroring; combined with identity.localDomains. */
-    routableDomains?: string[];
-    /** Override the transport's maxMessageBytes for inbound rejection. */
-    maxMessageBytes?: number;
-    /** Inbound sender allow-list (domains). Empty/undefined = allow all. */
-    allowedSenderDomains?: string[];
-    /** Drop inbound mail whose DMARC verdict is "fail". */
-    rejectDmarcFail?: boolean;
-    /** Max attachments on an inbound message before it is rejected. */
-    maxAttachments?: number;
-    /**
-     * Inbound rate limiting (abuse control). Over-limit inbound is NACKed
-     * (transient) so legitimate senders back off and retry. Disabled if unset.
-     */
-    rateLimit?: {
-        /** Sliding window, ms (default 60000). */
-        windowMs?: number;
-        /** Max inbound per sender domain per window. */
-        perSenderDomain?: number;
-        /** Max inbound across all senders per window. */
-        global?: number;
-    };
-    /** Bounce behavior; both paths default on. */
-    bounce?: {
-        emitEvent?: boolean;
-        synthesizeInboxMessage?: boolean;
-    };
-    /** Domain used to mint outbound Message-IDs (defaults to primary local domain). */
-    messageIdDomain?: string;
-    /** Default inbox scope for inbound mail without plus-addressing. */
-    defaultScope?: string;
-    /** Delivery queue config for outbound retries. */
-    queue?: Partial<DeliveryQueueConfig>;
-}
-/** Thrown to NACK over-limit inbound so the sender backs off and retries. */
-export declare class RateLimitedError extends Error {
-    readonly scope: string;
-    constructor(scope: string);
-}
-export declare class MailGateway implements MailEgress {
-    private transport;
-    private storage;
-    private router;
-    private events;
-    private config;
-    private addressBook;
-    private mailDomains;
-    private senderLimiter;
-    private globalLimiter;
-    readonly queue: DeliveryQueue;
-    private retryTimer?;
-    private retrying;
-    constructor(opts: {
-        transport: MailTransport;
-        storage: Storage;
-        router: MessageRouter;
-        events: EventEmitter;
-        config: MailGatewayConfig;
-        /** Durable queue store for outbound retries (sqlite). Memory if omitted. */
-        queueStore?: QueueStore;
-    });
-    /** Start the underlying transport and the retry/TTL timers. */
-    start(intervalMs?: number): Promise<void>;
-    stop(): Promise<void>;
-    /** True if this recipient's domain is one we route mail for. */
-    ownsRecipient(agentId: string): boolean;
-    /** Render and deliver the mail-class recipients of a message. */
-    send(message: Message): Promise<void>;
-    /**
-     * Handle one inbound message. Resolves on ACK; throws on NACK (transient
-     * failure the sender should retry). Policy rejections ACK-and-drop so the
-     * sender does not retry forever.
-     */
-    handleInbound(mail: InboundMail): Promise<void>;
-    /** Attempt delivery; classify the result and queue/bounce accordingly. */
-    private attemptDelivery;
-    /** Re-attempt all retryable queued mail. Call from a timer or deterministically. */
-    processRetries(): Promise<void>;
-    private markDelivered;
-    private handleInboundBounce;
-    private bounce;
-    /** Inject a bounce notification into the original sender's inbox. */
-    private synthesizeBounce;
-    private reject;
-    /** Throw RateLimitedError (→ NACK) when an inbound limiter is exceeded. */
-    private enforceRateLimits;
-    private senderAllowed;
-    /** Dedup key: RFC Message-ID when present, else a synthetic content hash. */
-    private externalIdFor;
-}
-//# sourceMappingURL=mail-gateway.d.ts.map

package/dist/mail/mail-gateway.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mail-gateway.d.ts","sourceRoot":"","sources":["../../src/mail/mail-gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAG7E,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAQ/D,OAAO,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE7D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,gFAAgF;IAChF,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,sEAAsE;IACtE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,uDAAuD;IACvD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,SAAS,CAAC,EAAE;QACV,0CAA0C;QAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,gDAAgD;QAChD,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,iDAAiD;QACjD,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,8CAA8C;IAC9C,MAAM,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,sBAAsB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACnE,mFAAmF;IACnF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACtC;AAKD,6EAA6E;AAC7E,qBAAa,gBAAiB,SAAQ,KAAK;aACb,KAAK,EAAE,MAAM;gBAAb,KAAK,EAAE,MAAM;CAI1C;AAED,qBAAa,WAAY,YAAW,UAAU;IAC5C,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,WAAW,CAAW;IAC9B,OAAO,CAAC,aAAa,CAA4B;IACjD,OAAO,CAAC,aAAa,CAA4B;IACjD,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,OAAO,CAAC,UAAU,CAAC,CAAiC;IACpD,OAAO,CAAC,QAAQ,CAAS;gBAEb,IAAI,EAAE;QAChB,SAAS,EAAE,aAAa,CAAC;QACzB,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,aAAa,CAAC;QACtB,MAAM,EAAE,YAAY,CAAC;QACrB,MAAM,EAAE,iBAAiB,CAAC;QAC1B,4EAA4E;QAC5E,UAAU,CAAC,EAAE,UAAU,CAAC;KACzB;IAqCD,+DAA+D;IACzD,KAAK,CAAC,UAAU,GAAE,MAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAQjD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAS3B,gEAAgE;IAChE,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAMvC,iEAAiE;IAC3D,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAU3C;;;;OAIG;IACG,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAiFrD,0EAA0E;YAC5D,eAAe;IAgF7B,oFAAoF;IAC9E,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAiBrC,OAAO,CAAC,aAAa;YAYP,mBAAmB;YAWnB,MAAM;IAgDpB,qEAAqE;YACvD,gBAAgB;IA4B9B,OAAO,CAAC,MAAM;IAQd,2EAA2E;IAC3E,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,aAAa;IAQrB,6EAA6E;IAC7E,OAAO,CAAC,aAAa;CAYtB"}