aicodeman 1.43.0 → 1.44.0

package/dist/config-backup.d.ts

@@ -0,0 +1,279 @@
+/**
+ * @fileoverview Config backups: timestamped snapshots of the files that hold what a user has
+ * customized, kept in a default-but-configurable folder with configurable retention.
+ *
+ * Why it exists: those files are plain JSON in the data dir, rewritten by the server, the Settings UI,
+ * the CLI and (once, by a mis-configured test run) by things that should never touch them, and there
+ * was no copy to go back to. A snapshot is taken at startup and whenever the tracked files' content
+ * changes, so the history is one entry per actual change rather than one per timer tick.
+ *
+ * Safety rules the code enforces rather than documents:
+ * - The tracked file list is a fixed allowlist, never "everything in the data dir".
+ * - Retention only ever deletes folders this module made (name pattern AND a parseable manifest), so
+ *   pointing the backup folder at a directory that holds other things cannot delete them.
+ * - The newest snapshot is never pruned, whatever the retention numbers say.
+ * - A snapshot is built in a temp folder and renamed into place, so a crash leaves no half snapshot.
+ * - Restore verifies each file against the manifest's SHA-256 and takes a `pre-restore` snapshot first.
+ * - Snapshot folders are 0700 and their files 0600: some tracked files carry credentials.
+ *
+ * Pure of the server: every function takes the directories it works in.
+ *
+ * @module config-backup
+ */
+/**
+ * The files (relative to the data dir) a snapshot holds: what a user configured, not what the server
+ * regenerates (session state, logs, the hook secret, docker seeds, caches).
+ *
+ * ⚠️ Not tracked: `state.json`. It also holds cron jobs and respawn presets, but it is rewritten with
+ * every session event, so tracking it would make a snapshot per event and bury the real changes.
+ *
+ * ⚠️ `.env`, `users.json`, `custom-model-hosts.json` and `push-keys.json` carry credentials or keys.
+ * They are already in the data dir with the same permissions; a snapshot folder is 0700 with 0600
+ * files, so the default location widens nothing. A custom location is the user's own choice.
+ */
+export declare const CONFIG_BACKUP_FILES: readonly ["settings.json", "clis.json", "custom-model-hosts.json", "webhook.json", "intents.json", "linked-cases.json", "remote-hosts.json", "remote-cases.json", "docker-hosts.json", "docker-cases.json", "webviews.json", "push-keys.json", "users.json", ".env"];
+export declare const CONFIG_BACKUP_DEFAULTS: {
+    readonly enabled: true;
+    readonly keepCount: 20;
+    readonly keepDays: 30;
+};
+/** 1 would delete the state before every change, so a bad write could never be undone. */
+export declare const CONFIG_BACKUP_MIN_KEEP_COUNT = 2;
+export declare const CONFIG_BACKUP_MAX_KEEP_COUNT = 500;
+export declare const CONFIG_BACKUP_MAX_KEEP_DAYS = 3650;
+export interface ConfigBackupSettings {
+    enabled: boolean;
+    /** Absolute folder, or null for the default (`<data dir>/backups/config`). */
+    dir: string | null;
+    /** Keep at most this many snapshots (newest first). 2–500. */
+    keepCount: number;
+    /** Also drop snapshots older than this many days; 0 = no age limit. */
+    keepDays: number;
+}
+export interface ConfigBackupFile {
+    name: string;
+    bytes: number;
+    sha256: string;
+}
+export interface ConfigBackupManifest {
+    id: string;
+    createdAt: number;
+    reason: string;
+    appVersion: string;
+    /** Digest of the set of files, so an unchanged state is not snapshotted twice. */
+    hash: string;
+    /** Id of the data dir that made it (see {@link configBackupOrigin}), so instances sharing one folder keep to their own snapshots. */
+    origin?: string;
+    /**
+     * The retention in force when it was made. If `settings.json` later fails to parse or is reset,
+     * the next pass prunes with these instead of the defaults, so one bad write cannot shorten a
+     * history the user asked to keep.
+     */
+    keepCount?: number;
+    keepDays?: number;
+    files: ConfigBackupFile[];
+}
+export interface ConfigBackupSummary {
+    id: string;
+    createdAt: number;
+    reason: string;
+    appVersion: string;
+    files: Array<{
+        name: string;
+        bytes: number;
+    }>;
+    bytes: number;
+}
+/** `~`-expand and require an absolute path; anything else means "use the default". */
+export declare function normalizeBackupDir(raw: unknown, home?: string): string | null;
+/** Read the four `configBackup*` settings out of a settings.json object, clamped and defaulted. */
+export declare function readConfigBackupSettings(raw: Record<string, unknown> | null | undefined): ConfigBackupSettings;
+export declare function defaultConfigBackupDir(dataDir: string): string;
+/**
+ * The folder snapshots go to: the configured one, or the default. A custom folder that IS the data dir
+ * falls back to the default, because snapshot folders and the live files must not share a directory.
+ */
+export declare function resolveConfigBackupDir(settings: ConfigBackupSettings, dataDir: string): string;
+/**
+ * Who owns a snapshot: a random id made once and kept in the data dir. A hostname would not do (a
+ * Docker container gets a new one on every recreate, which orphaned every earlier snapshot), nor
+ * would the path alone (two machines can share a `$HOME` path). It is a file of its own, not the
+ * hook secret, and is not tracked or restored. If it cannot be written the id is not persisted, so
+ * snapshots made meanwhile are not listed later; the data dir being unwritable breaks far more.
+ */
+export declare function configBackupOrigin(dataDir: string): string;
+/** The id already made for this data dir, or null. Read-only: listing must not write a file. */
+export declare function readConfigBackupOrigin(dataDir: string): string | null;
+/**
+ * Snapshots this module made in `dir`, newest first. Foreign folders and files are ignored, and so
+ * are other instances' snapshots when `origin` is given (see {@link configBackupOrigin}).
+ */
+export declare function listConfigBackups(dir: string, origin?: string): ConfigBackupSummary[];
+export type ConfigBackupResult = {
+    status: 'created';
+    id: string;
+    files: number;
+    bytes: number;
+} | {
+    status: 'unchanged';
+    id: string;
+} | {
+    status: 'empty';
+};
+export interface CreateConfigBackupOptions {
+    dataDir: string;
+    backupDir: string;
+    reason: string;
+    appVersion?: string;
+    /** Snapshot even if nothing changed (a manual request, a pre-restore safety copy). */
+    force?: boolean;
+    /** Recorded in the manifest, see {@link ConfigBackupManifest.keepCount}. */
+    keepCount?: number;
+    keepDays?: number;
+    now?: number;
+}
+/** Snapshot the tracked files that exist, unless the latest snapshot already holds exactly this state. */
+export declare function createConfigBackup(opts: CreateConfigBackupOptions): ConfigBackupResult;
+/** Remove `.tmp-cfg-*` build folders a crashed snapshot left behind (older than an hour, so a live one on a shared folder is safe). */
+export declare function sweepConfigBackupTemps(dir: string, now?: number): void;
+/**
+ * The retention recorded in this instance's newest snapshot, or null when it recorded none. `listed`
+ * is this instance's manifests in `dir`, newest first, when the caller already read them.
+ */
+export declare function latestBackupRetention(dir: string, origin: string, listed?: readonly ConfigBackupManifest[]): {
+    keepCount: number;
+    keepDays: number;
+} | null;
+/**
+ * The settings in effect, with each retention key that `raw` (the parsed settings.json) lacks, as
+ * after a reset, taken from what the newest backup recorded in `dir` instead of the defaults. It
+ * looks at the retention keys only (not the folder), so re-entering a custom folder after a reset
+ * finds that folder's own manifests. One place for the timer pass and for what the GET route
+ * reports, so they cannot disagree.
+ */
+export declare function withRecordedRetention(settings: ConfigBackupSettings, raw: Record<string, unknown>, dir: string, origin: string | null, listed?: readonly ConfigBackupManifest[]): ConfigBackupSettings;
+export interface PruneOptions {
+    keepCount: number;
+    keepDays: number;
+    /** Only this instance's snapshots are pruned; omitted = every snapshot in the folder. */
+    origin?: string;
+    now?: number;
+}
+/**
+ * Apply retention: keep the newest `keepCount`, and (when `keepDays` > 0) drop anything older than
+ * that. The newest snapshot always survives. Returns the ids removed.
+ */
+export declare function pruneConfigBackups(dir: string, opts: PruneOptions): string[];
+export interface ConfigBackupPassOptions {
+    dataDir: string;
+    backupDir: string;
+    reason: string;
+    appVersion?: string;
+    /** Snapshot even if nothing changed (Back up now). */
+    force?: boolean;
+    /** As read from settings.json ({@link readConfigBackupSettings}), before the recorded-retention fallback. */
+    settings: ConfigBackupSettings;
+    /** The parsed settings.json (`{}` when it did not parse): the fallback tells an absent key from a set one. */
+    raw: Record<string, unknown>;
+    /** False when settings.json did not parse: the pass still snapshots, but deletes nothing on its say-so. */
+    prune: boolean;
+    now?: number;
+}
+/**
+ * One pass of the timer or of Back up now: sweep stale temp folders, snapshot when the state changed,
+ * apply retention. The folder is read and each manifest parsed ONCE, and that listing feeds the
+ * recorded-retention fallback, the change check and the prune. It used to be listed for each of the
+ * three, which on a network folder is every manifest read three times every five minutes.
+ */
+export declare function runConfigBackupPass(opts: ConfigBackupPassOptions): {
+    result: ConfigBackupResult;
+    removed: string[];
+};
+export declare class ConfigBackupNotFoundError extends Error {
+}
+export declare class ConfigBackupCorruptError extends Error {
+}
+/**
+ * A restore that wrote some files and could not write others (a full disk, a directory where a file
+ * should be). Every file passed verification first, so the ones written are the backup's: the caller
+ * still has to reload what they feed and tell the user which files are which.
+ */
+export declare class ConfigBackupPartialRestoreError extends Error {
+    readonly restored: string[];
+    readonly failed: Array<{
+        name: string;
+        error: string;
+    }>;
+    readonly untouched: string[];
+    readonly safetySnapshot: string | null;
+    constructor(restored: string[], failed: Array<{
+        name: string;
+        error: string;
+    }>, untouched: string[], safetySnapshot: string | null);
+}
+export interface RestoreResult {
+    restored: string[];
+    /** Tracked files present now that the snapshot did not hold; a restore leaves them as they are. */
+    untouched: string[];
+    /**
+     * The snapshot holding the live files as they were before the restore: the `pre-restore` copy, or the
+     * newest backup when it already held exactly that state. Null only when no tracked file existed.
+     */
+    safetySnapshot: string | null;
+}
+/**
+ * Put a snapshot's files back into the data dir. Every file is checked against the manifest's digest
+ * BEFORE anything is written, a `pre-restore` snapshot of the live files is taken first (unless the
+ * newest backup already holds that state, which is then reported instead), and each file is replaced
+ * atomically (temp + rename) with mode 0600. A file that cannot be written does not stop the others;
+ * it throws {@link ConfigBackupPartialRestoreError} at the end, naming both lists.
+ */
+export declare function restoreConfigBackup(opts: {
+    dataDir: string;
+    backupDir: string;
+    id: string;
+    appVersion?: string;
+    now?: number;
+    /** Override the probe of whether the backup folder keeps file modes (tests; a mode-less filesystem). */
+    keepsModes?: boolean;
+}): RestoreResult;
+/** The live files in the data dir, as a side of a diff. */
+export declare const CONFIG_DIFF_CURRENT = "current";
+export interface ConfigDiffChange {
+    /** Dotted path inside the file (`a.b[0].c`), or the variable name for `.env`. */
+    path: string;
+    kind: 'added' | 'removed' | 'changed';
+    /** JSON text of the value; absent when it did not exist on that side or `redacted` is set. */
+    before?: string;
+    after?: string;
+    /** The value is a credential, so only the fact that it differs is reported. */
+    redacted?: boolean;
+}
+export interface ConfigDiffFile {
+    name: string;
+    /** `added` = only in `to`, `removed` = only in `from`. */
+    status: 'added' | 'removed' | 'changed' | 'unchanged';
+    changes: ConfigDiffChange[];
+    /** More changes than `MAX_DIFF_CHANGES`; the rest are not listed. */
+    truncated: boolean;
+    /** `keys` = per-key changes; `bytes` = the file is not JSON/env, so only "differs" is known. */
+    detail: 'keys' | 'bytes';
+}
+export interface ConfigDiff {
+    from: string;
+    to: string;
+    files: ConfigDiffFile[];
+    /** Files whose status is not `unchanged`. */
+    changed: number;
+}
+/**
+ * What differs between two states of the tracked files; a state is a snapshot id or `current`
+ * (the live files). Never returns the value of a credential: see REDACT_ALL_FILES and SECRET_KEY_RE.
+ */
+export declare function diffConfigBackups(opts: {
+    dataDir: string;
+    backupDir: string;
+    from: string;
+    to: string;
+}): ConfigDiff;
+//# sourceMappingURL=config-backup.d.ts.map

package/dist/config-backup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-backup.d.ts","sourceRoot":"","sources":["../src/config-backup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAkBH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mBAAmB,sQAetB,CAAC;AAEX,eAAO,MAAM,sBAAsB;;;;CAA0D,CAAC;AAC9F,0FAA0F;AAC1F,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAC9C,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,eAAO,MAAM,2BAA2B,OAAO,CAAC;AAMhD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,8EAA8E;IAC9E,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,IAAI,EAAE,MAAM,CAAC;IACb,qIAAqI;IACrI,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,gBAAgB,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9C,KAAK,EAAE,MAAM,CAAC;CACf;AAQD,sFAAsF;AACtF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,GAAE,MAAkB,GAAG,MAAM,GAAG,IAAI,CAQxF;AAED,mGAAmG;AACnG,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GAAG,oBAAoB,CAc9G;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAO9F;AAKD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAgB1D;AAED,gGAAgG;AAChG,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOrE;AA4FD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAYrF;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC;AAExB,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sFAAsF;IACtF,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,0GAA0G;AAC1G,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,yBAAyB,GAAG,kBAAkB,CAEtF;AAwED,uIAAuI;AACvI,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,CAElF;AAUD;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,SAAS,oBAAoB,EAAE,GACvC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAQhD;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,oBAAoB,EAC9B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,MAAM,CAAC,EAAE,SAAS,oBAAoB,EAAE,GACvC,oBAAoB,CAWtB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,yFAAyF;IACzF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,MAAM,EAAE,CAE5E;AA2BD,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,6GAA6G;IAC7G,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,8GAA8G;IAC9G,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,2GAA2G;IAC3G,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG;IAClE,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAwBA;AAED,qBAAa,yBAA0B,SAAQ,KAAK;CAAG;AACvD,qBAAa,wBAAyB,SAAQ,KAAK;CAAG;AAEtD;;;;GAIG;AACH,qBAAa,+BAAgC,SAAQ,KAAK;IAEtD,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE;IAC3B,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI;gBAH7B,QAAQ,EAAE,MAAM,EAAE,EAClB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,EAC9C,SAAS,EAAE,MAAM,EAAE,EACnB,cAAc,EAAE,MAAM,GAAG,IAAI;CAQzC;AAuED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,mGAAmG;IACnG,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;;;OAGG;IACH,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wGAAwG;IACxG,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,aAAa,CA0EhB;AAED,2DAA2D;AAC3D,eAAO,MAAM,mBAAmB,YAAY,CAAC;AAE7C,MAAM,WAAW,gBAAgB;IAC/B,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;IACtC,8FAA8F;IAC9F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;IACtD,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,qEAAqE;IACrE,SAAS,EAAE,OAAO,CAAC;IACnB,gGAAgG;IAChG,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;CACjB;AA+HD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,UAAU,CA+BpH"}