agent-tower 0.7.4 → 0.7.5-beta.5

package/dist/services/preview-cookies.js

@@ -0,0 +1,133 @@
+import { createHash } from 'node:crypto';
+import { isAccessAuthCookieName } from './access-auth.service.js';
+import { TUNNEL_SESSION_COOKIE_NAME } from '../utils/tunnel-cookie.js';
+/**
+ * Cookie that remembers which workspace preview an embedded document belongs to.
+ * It lets the server route navigations that escaped the `/view/:workspaceId/`
+ * prefix (for example `location.reload()` from a virtualized SPA) back into
+ * the workspace proxy.
+ */
+export const PREVIEW_CONTEXT_COOKIE_NAME = 'agent-tower-preview-context';
+export function previewCookieScopeName(workspaceId) {
+    const suffix = createHash('sha256').update(workspaceId).digest('hex').slice(0, 16);
+    return `agent-tower-preview-${suffix}`;
+}
+export function isInternalCookieName(name) {
+    return name === TUNNEL_SESSION_COOKIE_NAME
+        || name === PREVIEW_CONTEXT_COOKIE_NAME
+        || isAccessAuthCookieName(name);
+}
+function scopedTargetCookieName(scopeName, targetCookieName) {
+    return `${scopeName}-target-${Buffer.from(targetCookieName).toString('base64url')}`;
+}
+function unscopedTargetCookieName(scopeName, cookieName) {
+    const prefix = `${scopeName}-target-`;
+    if (!cookieName.startsWith(prefix))
+        return null;
+    try {
+        const targetCookieName = Buffer.from(cookieName.slice(prefix.length), 'base64url').toString('utf8');
+        return isInternalCookieName(targetCookieName) ? targetCookieName : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Build the Cookie header forwarded to the preview target: Agent Tower's own
+ * cookies never leave the server, the gateway/scope cookie is dropped, and
+ * target cookies that had to be renamed to avoid clashing with Agent Tower's
+ * cookies are restored to their original names.
+ */
+export function filterTargetCookieHeader(cookieHeader, scopeName) {
+    if (!cookieHeader)
+        return undefined;
+    const cookies = [];
+    for (const rawPart of cookieHeader.split(';')) {
+        const part = rawPart.trim();
+        if (!part)
+            continue;
+        const separator = part.indexOf('=');
+        const name = separator === -1 ? part : part.slice(0, separator);
+        if (!name || name === scopeName)
+            continue;
+        const targetName = unscopedTargetCookieName(scopeName, name);
+        if (targetName) {
+            cookies.push(`${targetName}${separator === -1 ? '' : part.slice(separator)}`);
+            continue;
+        }
+        if (isInternalCookieName(name))
+            continue;
+        cookies.push(part);
+    }
+    return cookies.length > 0 ? cookies.join('; ') : undefined;
+}
+/**
+ * Rewrite a Set-Cookie header coming from the preview target so the browser
+ * stores it against the preview entry (gateway origin or Agent Tower origin).
+ */
+export function rewriteTargetCookie(value, target, scopeName, secureEntry, options = {}) {
+    let next = value.replace(/;\s*domain=[^;]*/gi, '');
+    const separator = next.indexOf('=');
+    if (separator > 0) {
+        const cookieName = next.slice(0, separator).trim();
+        if (isInternalCookieName(cookieName)) {
+            next = `${scopedTargetCookieName(scopeName, cookieName)}${next.slice(separator)}`;
+        }
+    }
+    if (options.forceRootPath) {
+        next = /;\s*path=/i.test(next)
+            ? next.replace(/;\s*path=([^;]*)/i, '; Path=/')
+            : `${next}; Path=/`;
+    }
+    else if (target.basePath && /;\s*path=/i.test(next)) {
+        next = next.replace(/;\s*path=([^;]*)/i, (_match, rawPath) => {
+            const path = rawPath.trim();
+            if (path === target.basePath)
+                return '; Path=/';
+            if (path.startsWith(`${target.basePath}/`)) {
+                return `; Path=${path.slice(target.basePath.length) || '/'}`;
+            }
+            return `; Path=${path || '/'}`;
+        });
+    }
+    if (secureEntry) {
+        if (options.forceRootPath) {
+            // Same-site proxy: keep the target's SameSite choice, only make sure a
+            // `SameSite=None` cookie is still accepted by requiring Secure.
+            if (/;\s*samesite=none(?=;|$)/i.test(next) && !/;\s*secure(?=;|$)/i.test(next)) {
+                next = `${next}; Secure`;
+            }
+            return next;
+        }
+        next = next
+            .replace(/;\s*secure(?=;|$)/gi, '')
+            .replace(/;\s*samesite=[^;]*/gi, '')
+            .replace(/;\s*partitioned(?=;|$)/gi, '');
+        return `${next}; Secure; SameSite=None; Partitioned`;
+    }
+    next = next
+        .replace(/;\s*secure(?=;|$)/gi, '')
+        .replace(/;\s*partitioned(?=;|$)/gi, '');
+    if (/;\s*samesite=none(?=;|$)/i.test(next)) {
+        next = next.replace(/;\s*samesite=none(?=;|$)/i, '; SameSite=Lax');
+    }
+    return next;
+}
+export function parseCookieHeader(header) {
+    const cookies = new Map();
+    if (!header)
+        return cookies;
+    for (const part of header.split(';')) {
+        const [rawName, ...rawValue] = part.trim().split('=');
+        if (!rawName)
+            continue;
+        try {
+            cookies.set(rawName, decodeURIComponent(rawValue.join('=')));
+        }
+        catch {
+            cookies.set(rawName, rawValue.join('='));
+        }
+    }
+    return cookies;
+}
+//# sourceMappingURL=preview-cookies.js.map

package/dist/services/preview-cookies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-cookies.js","sourceRoot":"","sources":["../../src/services/preview-cookies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,6BAA6B,CAAC;AAEzE,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnF,OAAO,uBAAuB,MAAM,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,IAAI,KAAK,0BAA0B;WACrC,IAAI,KAAK,2BAA2B;WACpC,sBAAsB,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,sBAAsB,CAAC,SAAiB,EAAE,gBAAwB;IACzE,OAAO,GAAG,SAAS,WAAW,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,wBAAwB,CAAC,SAAiB,EAAE,UAAkB;IACrE,MAAM,MAAM,GAAG,GAAG,SAAS,UAAU,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhD,IAAI,CAAC;QACH,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpG,OAAO,oBAAoB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,YAAgC,EAChC,SAAiB;IAEjB,IAAI,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IAEpC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QAE1C,MAAM,UAAU,GAAG,wBAAwB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC7D,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC9E,SAAS;QACX,CAAC;QACD,IAAI,oBAAoB,CAAC,IAAI,CAAC;YAAE,SAAS;QACzC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAOD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAa,EACb,MAA+B,EAC/B,SAAiB,EACjB,WAAoB,EACpB,UAAsC,EAAE;IAExC,IAAI,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;YACrC,IAAI,GAAG,GAAG,sBAAsB,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACpF,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,UAAU,CAAC;YAC/C,CAAC,CAAC,GAAG,IAAI,UAAU,CAAC;IACxB,CAAC;SAAM,IAAI,MAAM,CAAC,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,MAAM,EAAE,OAAe,EAAE,EAAE;YACnE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,IAAI,KAAK,MAAM,CAAC,QAAQ;gBAAE,OAAO,UAAU,CAAC;YAChD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;gBAC3C,OAAO,UAAU,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YAC/D,CAAC;YACD,OAAO,UAAU,IAAI,IAAI,GAAG,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1B,uEAAuE;YACvE,gEAAgE;YAChE,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/E,IAAI,GAAG,GAAG,IAAI,UAAU,CAAC;YAC3B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,IAAI;aACR,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;aAClC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC;aACnC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;QAC3C,OAAO,GAAG,IAAI,sCAAsC,CAAC;IACvD,CAAC;IAED,IAAI,GAAG,IAAI;SACR,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;SAClC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,gBAAgB,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAe;IAC/C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAE5B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/services/preview-proxy.d.ts

@@ -0,0 +1,71 @@
+import http from 'node:http';
+import type { IncomingHttpHeaders, IncomingMessage, ServerResponse } from 'node:http';
+import type { Duplex } from 'node:stream';
+import type { NormalizedPreviewTarget } from './preview.service.js';
+/**
+ * Same-origin workspace preview proxy mounted at `/view/:workspaceId/`.
+ *
+ * The browser only ever talks to Agent Tower's own origin, so the preview is
+ * reachable from exactly the places Agent Tower itself is reachable from:
+ * localhost, the LAN, a Cloudflare tunnel, a reverse proxy, or Docker.
+ */
+export declare const PREVIEW_SANDBOX_CSP: string;
+export interface PreviewProxyScope {
+    workspaceId: string;
+    target: NormalizedPreviewTarget;
+    previewToken: string | null;
+}
+export interface PreviewRequestContext {
+    /** The request was issued by the preview service worker. */
+    serviceWorker: boolean;
+    /** A navigation: top-level tab or embedded frame document. */
+    document: boolean;
+    /** The navigation is rendered inside a frame (iframe/embed/object). */
+    embedded: boolean;
+    /** The browser requested the plain (no service worker) proxy mode. */
+    plainMode: boolean;
+    /** Set after the bootstrap page registered the worker and re-navigated. */
+    bootstrapped: boolean;
+}
+export declare function firstHeaderValue(value: string | string[] | undefined): string | undefined;
+export declare function requestProtocol(headers: IncomingHttpHeaders): 'http' | 'https';
+export declare function classifyPreviewRequest(method: string, headers: IncomingHttpHeaders, search: string): PreviewRequestContext;
+/** Should the request be answered with the service worker bootstrap page instead of the target document? */
+export declare function shouldServeBootstrap(context: PreviewRequestContext, method: string): boolean;
+export declare function stripInternalQueryParams(search: string): string;
+export declare function joinTargetPath(target: NormalizedPreviewTarget, suffix: string, search: string): string;
+export declare function proxyRequestHeaders(headers: IncomingHttpHeaders, scope: PreviewProxyScope, targetPath: string): http.OutgoingHttpHeaders;
+export declare function rewriteLocationHeader(value: string, scope: PreviewProxyScope): string;
+export declare function serializePreviewContextCookie(workspaceId: string, secure: boolean): string;
+export interface ProxyResponseHeaderOptions {
+    /** Response is an HTML navigation that will receive the bridge script. */
+    document: boolean;
+    /** The document is rendered inside a frame; adds the defensive sandbox CSP. */
+    embedded: boolean;
+    /** The body is buffered and modified, so the original length no longer applies. */
+    rewritesBody?: boolean;
+}
+export declare function proxyResponseHeaders(headers: IncomingHttpHeaders, scope: PreviewProxyScope, requestHeaders: IncomingHttpHeaders, options: ProxyResponseHeaderOptions): http.OutgoingHttpHeaders;
+/**
+ * Plain mode only (no service worker): rewrite static root-relative references
+ * in HTML/CSS so the first paint works without a redirect round trip for every
+ * asset. Service-worker documents are left untouched.
+ */
+export declare function rewritePlainModeBody(body: string, prefix: string, kind: 'html' | 'css'): string;
+export declare function buildBridgeTag(scope: PreviewProxyScope, serviceWorker: boolean): string;
+export declare function previewServiceWorkerSegment(suffix: string): boolean;
+export declare function writeServiceWorkerScript(response: ServerResponse): void;
+export declare function writeBootstrapPage(response: ServerResponse, scope: PreviewProxyScope): void;
+export interface ProxyHttpRequestInput {
+    request: IncomingMessage;
+    response: ServerResponse;
+    scope: PreviewProxyScope;
+    suffix: string;
+    search: string;
+    context: PreviewRequestContext;
+    body: Buffer | null;
+}
+export declare function proxyPreviewHttpRequest(input: ProxyHttpRequestInput): Promise<void>;
+export declare function writeUpgradeError(socket: Duplex, statusCode: number, message: string): void;
+export declare function proxyPreviewWebSocket(request: IncomingMessage, socket: Duplex, head: Buffer, scope: PreviewProxyScope, suffix: string, search: string): void;
+//# sourceMappingURL=preview-proxy.d.ts.map

package/dist/services/preview-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-proxy.d.ts","sourceRoot":"","sources":["../../src/services/preview-proxy.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACtF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAuBpE;;;;;;GAMG;AAEH,eAAO,MAAM,mBAAmB,QAWrB,CAAC;AA2BZ,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,uBAAuB,CAAC;IAChC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,qBAAqB;IACpC,4DAA4D;IAC5D,aAAa,EAAE,OAAO,CAAC;IACvB,8DAA8D;IAC9D,QAAQ,EAAE,OAAO,CAAC;IAClB,uEAAuE;IACvE,QAAQ,EAAE,OAAO,CAAC;IAClB,sEAAsE;IACtE,SAAS,EAAE,OAAO,CAAC;IACnB,2EAA2E;IAC3E,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAEzF;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,GAAG,OAAO,CAa9E;AAMD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,GAAG,qBAAqB,CAgC1H;AAED,4GAA4G;AAC5G,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAG5F;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAM/D;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,uBAAuB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAKtG;AAkCD,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,mBAAmB,EAC5B,KAAK,EAAE,iBAAiB,EACxB,UAAU,EAAE,MAAM,GACjB,IAAI,CAAC,mBAAmB,CAyB1B;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAwBrF;AAED,wBAAgB,6BAA6B,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAU1F;AAED,MAAM,WAAW,0BAA0B;IACzC,0EAA0E;IAC1E,QAAQ,EAAE,OAAO,CAAC;IAClB,+EAA+E;IAC/E,QAAQ,EAAE,OAAO,CAAC;IAClB,mFAAmF;IACnF,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,mBAAmB,EAC5B,KAAK,EAAE,iBAAiB,EACxB,cAAc,EAAE,mBAAmB,EACnC,OAAO,EAAE,0BAA0B,GAClC,IAAI,CAAC,mBAAmB,CAkD1B;AAYD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,CAY/F;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,OAAO,GAAG,MAAM,CASvF;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAOvE;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAQ3F;AAkBD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,eAAe,CAAC;IACzB,QAAQ,EAAE,cAAc,CAAC;IACzB,KAAK,EAAE,iBAAiB,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,qBAAqB,CAAC;IAC/B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0EzF;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAI3F;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,iBAAiB,EACxB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACb,IAAI,CA4DN"}