agent-nuvira 3.1.1 → 3.2.0

package/dist/learning/credential-fingerprint.js

@@ -0,0 +1,126 @@
+/**
+ * Credential Fingerprint — notice when the user's keys change, and re-probe.
+ *
+ * WHY THIS EXISTS. The routing pool can only contain models a probe has
+ * VERIFIED, and a probe only ever ran on a cold start or a maintenance command.
+ * So a purchase made mid-session — the exact case where a user expects the new
+ * models to appear — changed nothing: the credential was fine, the catalog was
+ * stale, and the next run would have picked the models up only if it happened to
+ * cold-start. There is no per-model entitlement API to ask ("may I buy
+ * `meta-llama/...`?" is not a question OpenRouter answers); the only honest
+ * signal is *"we sent one token with this key and it answered"*. But it is
+ * genuinely cheap to notice that the KEY SET changed and force that probe
+ * instead of waiting for an accident.
+ *
+ * WHAT IS STORED: a SHA-256 digest of the credential SHAPE — which providers are
+ * configured, a digest of each key, each base URL, each env-var presence. Never
+ * a key, not even truncated, and the digest is one-way, so the file is safe to
+ * read, copy or commit by accident. Its only job is equality.
+ */
+import { createHash } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { envBuff, resolveNuviraHome } from '../config/paths.js';
+import { CATALOG_PROVIDER_IDS, catalogEnvVar, getCatalogProvider } from '../inference/provider-catalog.js';
+/** Sidecar file (under the memory dir) holding the last-seen credential shape. */
+export const CREDENTIAL_FINGERPRINT_FILENAME = 'credential-fingerprint.json';
+const DEFAULT_MEMORY_DIR = join(resolveNuviraHome(), 'memory');
+function memoryDir() {
+    return envBuff('MEMORY_DIR') || DEFAULT_MEMORY_DIR;
+}
+/** Path of the fingerprint sidecar (exported so tests can redirect it). */
+export function credentialFingerprintPath() {
+    return join(memoryDir(), CREDENTIAL_FINGERPRINT_FILENAME);
+}
+/** One-way digest of a secret — never the secret itself. */
+function digest(value) {
+    return createHash('sha256').update(value).digest('hex').slice(0, 16);
+}
+/**
+ * The credential SHAPE, as a list of comparable lines.
+ *
+ * Exported (and separate from the hashing) so a test — or a support call — can
+ * see exactly which inputs are considered without needing to reverse a digest.
+ * The lines carry digests, never keys.
+ */
+export function credentialShapeInputs(configManager) {
+    const lines = [];
+    for (const provider of [...CATALOG_PROVIDER_IDS].sort()) {
+        const parts = [provider];
+        // 1. Config-resolved key (vault refs resolved by getProviderConfig, so a
+        //    key that moved from plaintext into the vault is NOT a change).
+        let configKey;
+        let baseUrl;
+        try {
+            const { config } = configManager.getProviderConfig(provider);
+            configKey = typeof config?.apiKey === 'string' ? config.apiKey : undefined;
+            baseUrl = typeof config?.baseUrl === 'string' ? config.baseUrl : undefined;
+        }
+        catch {
+            // A provider the manager cannot describe contributes only its env state.
+        }
+        if (configKey)
+            parts.push(`cfg:${digest(configKey)}`);
+        if (baseUrl)
+            parts.push(`url:${baseUrl}`);
+        // 2. The standard env var — presence AND digest, so replacing a key in the
+        //    environment is a change while an unrelated env tweak is not.
+        const envVar = catalogEnvVar(provider);
+        if (envVar) {
+            const fromEnv = process.env[envVar];
+            if (fromEnv)
+                parts.push(`env:${digest(fromEnv)}`);
+        }
+        // 3. Reachability class: keyless runners appear/disappear from the probe
+        //    set when their catalog entry changes, not when a key changes.
+        const entry = getCatalogProvider(provider);
+        if (entry?.keyless)
+            parts.push('keyless');
+        lines.push(parts.join('|'));
+    }
+    return lines;
+}
+/** SHA-256 digest of the credential shape. Safe to log. */
+export function credentialFingerprint(configManager) {
+    return digest(credentialShapeInputs(configManager).join('\n'));
+}
+/**
+ * Compare the current credential shape against the last one recorded and RECORD
+ * the new one.
+ *
+ * Recording on every call is what makes this fire once per change rather than
+ * once per cycle: the caller sees `changed: true` a single time and can force a
+ * probe, and every later call in the same process is a no-op. `firstRun` is
+ * reported separately because "no previous record" is not evidence of a change —
+ * a fresh machine must not be treated as though a purchase just landed.
+ */
+export function detectCredentialChange(configManager, options = {}) {
+    const path = options.path ?? credentialFingerprintPath();
+    const fingerprint = credentialFingerprint(configManager);
+    let previous;
+    try {
+        if (existsSync(path)) {
+            const raw = JSON.parse(readFileSync(path, 'utf-8'));
+            if (typeof raw?.fingerprint === 'string')
+                previous = raw.fingerprint;
+        }
+    }
+    catch {
+        // A corrupt sidecar is treated as absent — the worst case is one extra
+        // catalog probe, which is cheap and idempotent.
+    }
+    try {
+        mkdirSync(dirname(path), { recursive: true });
+        writeFileSync(path, JSON.stringify({ fingerprint, at: Date.now() }), 'utf-8');
+    }
+    catch {
+        // Best-effort: failing to record must never break a run.
+    }
+    return {
+        changed: previous !== undefined && previous !== fingerprint,
+        firstRun: previous === undefined,
+        fingerprint,
+        previous,
+    };
+}
+//# sourceMappingURL=credential-fingerprint.js.map

package/dist/learning/credential-fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-fingerprint.js","sourceRoot":"","sources":["../../src/learning/credential-fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAG3G,kFAAkF;AAClF,MAAM,CAAC,MAAM,+BAA+B,GAAG,6BAA6B,CAAC;AAE7E,MAAM,kBAAkB,GAAG,IAAI,CAAC,iBAAiB,EAAE,EAAE,QAAQ,CAAC,CAAC;AAE/D,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,YAAY,CAAC,IAAI,kBAAkB,CAAC;AACrD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,yBAAyB;IACvC,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,+BAA+B,CAAC,CAAC;AAC5D,CAAC;AAED,4DAA4D;AAC5D,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,aAA4B;IAChE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACxD,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;QAEnC,yEAAyE;QACzE,oEAAoE;QACpE,IAAI,SAA6B,CAAC;QAClC,IAAI,OAA2B,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,iBAAiB,CAAC,QAAiB,CAAC,CAAC;YACtE,SAAS,GAAG,OAAO,MAAM,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3E,OAAO,GAAG,OAAO,MAAM,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;QACD,IAAI,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC;QAE1C,2EAA2E;QAC3E,kEAAkE;QAClE,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,yEAAyE;QACzE,mEAAmE;QACnE,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,KAAK,EAAE,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE1C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,qBAAqB,CAAC,aAA4B;IAChE,OAAO,MAAM,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACjE,CAAC;AAaD;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACpC,aAA4B,EAC5B,UAA6B,EAAE;IAE/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,yBAAyB,EAAE,CAAC;IACzD,MAAM,WAAW,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;IAEzD,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAA6B,CAAC;YAChF,IAAI,OAAO,GAAG,EAAE,WAAW,KAAK,QAAQ;gBAAE,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC;QACvE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,gDAAgD;IAClD,CAAC;IAED,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;IAC3D,CAAC;IAED,OAAO;QACL,OAAO,EAAE,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,WAAW;QAC3D,QAAQ,EAAE,QAAQ,KAAK,SAAS;QAChC,WAAW;QACX,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/learning/deferred-task.d.ts

@@ -0,0 +1,159 @@
+/**
+ * Deferred retry queue — the MECHANISM behind "Reply *yes* and I will keep
+ * trying until it is done."
+ *
+ * THE BUG THIS CLOSES. `renderModelBreadthReport` ends every failed turn with
+ * that offer, and it went out live to WhatsApp
+ * ("A model frees up in about 44s … Reply *yes* …"). Nothing parsed the "yes",
+ * stored the task, or re-ran it when a model came back — so a sender who
+ * followed the instruction got silence, which is worse than never being asked.
+ * A promise the agent cannot keep is a defect, not a courtesy.
+ *
+ * WHY A STORE INSTEAD OF A TIMER IN THE FAILURE PATH: the model that frees up
+ * is often minutes away (a quota window), and a messaging transport's turn is
+ * long over by then — there is no in-process stack to sit on. The task is
+ * therefore persisted (surviving a gateway restart, which is the normal case
+ * for a quota wait), and a periodic drain claims whatever is due.
+ *
+ * Deliberately a LEAF module (node builtins + path resolution only): the
+ * gateway, the CLI and the dashboard all need it, and a shared queue that
+ * dragged the routing graph in would be unusable from the dashboard.
+ */
+/** Which engine the ask needs when it is finally run. */
+export type DeferredAskKind = 'chat' | 'pipeline';
+/** Lifecycle of one deferred task. */
+export type DeferredTaskStatus = 'pending' | 'running';
+/** One failed ask waiting for a model to come back. */
+export interface DeferredTask {
+    id: string;
+    /** Messaging platform (`whatsapp`, `telegram`, …) — the reply goes back here. */
+    platform: string;
+    /** The contact/channel to reply to. */
+    channelId: string;
+    /** Human sender label, replayed into the retry's origin context. */
+    from?: string;
+    senderId?: string;
+    isGroup?: boolean;
+    /** The ORIGINAL ask, verbatim — a retry must run exactly what was asked. */
+    text: string;
+    kind: DeferredAskKind;
+    createdAt: number;
+    /** Epoch ms of the last retry attempt (0 = none yet). */
+    lastAttemptAt: number;
+    /** How many retry attempts have run (never counts the original turn). */
+    attempts: number;
+    status: DeferredTaskStatus;
+    /** Earliest epoch ms the next attempt may run (from the report's free-up ETA). */
+    notBefore: number;
+    /** Stop retrying after this (a queue that never ends is not a service). */
+    deadline: number;
+    /**
+     * The sender explicitly said "yes".
+     *
+     * A task is queued optimistically the moment a turn fails (the ask was a real
+     * request, so completing it is what the user wants), but its persistence is
+     * proportional to CONSENT: an unconfirmed task retries a few times over half
+     * an hour, while a confirmed one keeps going for the full horizon. Nobody is
+     * enrolled in a six-hour retry loop they never agreed to.
+     */
+    confirmed?: boolean;
+    lastError?: string;
+}
+/** Everything the queue needs to remember an ask. */
+export interface DeferTaskInput {
+    platform: string;
+    channelId: string;
+    text: string;
+    kind: DeferredAskKind;
+    from?: string;
+    senderId?: string;
+    isGroup?: boolean;
+    /** How long the failure report said until a model frees (absent = unknown). */
+    nextFreeInMs?: number;
+    /** The failure line the sender saw, for context in later reports. */
+    lastError?: string;
+}
+/** Confirmed horizon — "yes, keep trying until it is done". */
+export declare const DEFERRED_TASK_TTL_MS: number;
+/** Optimistic horizon — queued because the ask was real, but never confirmed. */
+export declare const UNCONFIRMED_TASK_TTL_MS: number;
+/** How many attempts this task is allowed. */
+export declare function attemptCap(task: DeferredTask): number;
+/** Read the queue. Best-effort: a corrupt file is an empty queue, never a throw. */
+export declare function loadDeferredTasks(): DeferredTask[];
+/** Clamp a free-up hint into a sane retry wait. */
+export declare function retryWaitMs(nextFreeInMs?: number): number;
+/**
+ * Record a failed ask for retry, or refresh the pending task for that
+ * conversation.
+ *
+ * The UPDATE path deliberately preserves `attempts` and `createdAt`: the retry
+ * that just failed re-enters this function (it goes through the same failure
+ * branch), and resetting the counters there would make the attempt cap and TTL
+ * meaningless — the task would retry forever.
+ *
+ * @returns the stored task and whether it was created (vs refreshed).
+ */
+export declare function deferTask(input: DeferTaskInput): {
+    task: DeferredTask;
+    created: boolean;
+};
+/** The live task for a conversation (newest first), if any. */
+export declare function getPendingTask(platform: string, channelId: string): DeferredTask | undefined;
+/** Every task currently waiting (for status surfaces, newest first). */
+export declare function listPendingTasks(): DeferredTask[];
+/**
+ * One drain OWNS a subset of the queue.
+ *
+ * The store is shared by every process that can serve a channel (the gateway
+ * for WhatsApp/Telegram, the dashboard server for its own chat), so each drain
+ * declares what it owns. Without this the gateway would claim a `dashboard`
+ * task and try to deliver it to a messaging platform — and then remove it.
+ */
+export type TaskOwnership = (task: DeferredTask) => boolean;
+/** Tasks whose next attempt is due and whose TTL has not elapsed. */
+export declare function dueTasks(now?: number, owns?: TaskOwnership): DeferredTask[];
+/** Tasks that ran out of attempts or TTL — the sender must be told, not ghosted. */
+export declare function expiredTasks(now?: number, owns?: TaskOwnership): DeferredTask[];
+/**
+ * The sender said yes: extend this task to the full horizon and keep going.
+ * Returns the confirmed task (or undefined when it had already expired).
+ */
+export declare function confirmTask(id: string, now?: number): DeferredTask | undefined;
+/** Apply a partial patch to one task by id. Returns the patched task. */
+export declare function updateDeferredTask(id: string, patch: Partial<DeferredTask>): DeferredTask | undefined;
+/** Drop a task (on success, on a cancel reply, or when it expires). */
+export declare function removeDeferredTask(id: string): void;
+/** Drop every task for a conversation (`stop`, `no`, `cancel`). */
+export declare function cancelTasksFor(platform: string, channelId: string): number;
+/**
+ * Normalize a reply for phrase matching: lowercase, emoji/punctuation stripped,
+ * whitespace collapsed. `"Yes, please! 🙏"` → `"yes please"`.
+ */
+export declare function normalizeRetryAnswer(text: string | null | undefined): string;
+/**
+ * Is this message the sender ACCEPTING the retry offer?
+ *
+ * Two gates, both required:
+ *  1. the whole message must be short (≤ 6 words) — anything longer is a new
+ *     request that merely happens to start with "yes", and swallowing it would
+ *     lose the user's actual ask;
+ *  2. it must be an exact accept phrase, or a short message carrying an accept
+ *     token and NO decline token ("yes, keep trying" accepts; "no, do the
+ *     other thing" does not).
+ *
+ * A message that fails either gate falls through to normal handling — the
+ * pending task simply stays queued, so the sender can accept later.
+ */
+export declare function isRetryAcceptance(text: string | null | undefined): boolean;
+/** Is this message the sender cancelling the retry offer? */
+export declare function isRetryDecline(text: string | null | undefined): boolean;
+/** Confirmation sent the moment an offer is accepted. */
+export declare function acceptedLine(task: DeferredTask, now?: number): string;
+/** The line sent when a retry gives up (TTL or attempt cap reached). */
+export declare function abandonedLine(task: DeferredTask, now?: number): string;
+/** The line sent when a retry attempt starts, so an unexpected reply is explained. */
+export declare function retryingLine(task: DeferredTask): string;
+/** Count of live tasks (status surfaces / dashboard). */
+export declare function pendingTaskCount(): number;
+//# sourceMappingURL=deferred-task.d.ts.map

package/dist/learning/deferred-task.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deferred-task.d.ts","sourceRoot":"","sources":["../../src/learning/deferred-task.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH,yDAAyD;AACzD,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,UAAU,CAAC;AAElD,sCAAsC;AACtC,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,SAAS,CAAC;AAEvD,uDAAuD;AACvD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,eAAe,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,aAAa,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,kFAAkF;IAClF,SAAS,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qDAAqD;AACrD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,eAAe,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID,+DAA+D;AAC/D,eAAO,MAAM,oBAAoB,QAAgB,CAAC;AAClD,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,QAAc,CAAC;AAMnD,8CAA8C;AAC9C,wBAAgB,UAAU,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAErD;AAoCD,oFAAoF;AACpF,wBAAgB,iBAAiB,IAAI,YAAY,EAAE,CAUlD;AAmED,mDAAmD;AACnD,wBAAgB,WAAW,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAKzD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAwCzF;AAED,+DAA+D;AAC/D,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAG5F;AAED,wEAAwE;AACxE,wBAAgB,gBAAgB,IAAI,YAAY,EAAE,CAEjD;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC;AAE5D,qEAAqE;AACrE,wBAAgB,QAAQ,CAAC,GAAG,GAAE,MAAmB,EAAE,IAAI,GAAE,aAA0B,GAAG,YAAY,EAAE,CASnG;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAmB,EAAE,IAAI,GAAE,aAA0B,GAAG,YAAY,EAAE,CAIvG;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,YAAY,GAAG,SAAS,CAS1F;AAED,yEAAyE;AACzE,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,GAAG,SAAS,CAOrG;AAED,uEAAuE;AACvE,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAEnD;AAED,mEAAmE;AACnE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAM1E;AAsGD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAM5E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAa1E;AAED,6DAA6D;AAC7D,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAevE;AAID,yDAAyD;AACzD,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,GAAE,MAAmB,GAAG,MAAM,CAOjF;AAED,wEAAwE;AACxE,wBAAgB,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,GAAE,MAAmB,GAAG,MAAM,CAgBlF;AAED,sFAAsF;AACtF,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAGvD;AAED,yDAAyD;AACzD,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC"}