cordisx 0.1.0-beta.2 → 0.1.0-beta.21

package/dist/src/launcher/native-provider-credential-broker.js

@@ -0,0 +1,268 @@
+import { randomBytes } from 'node:crypto';
+import { chmod, mkdtemp, realpath, rm } from 'node:fs/promises';
+import { createServer } from 'node:net';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+const MAX_BINDINGS = 128;
+const MAX_SOCKETS = 32;
+const MAX_REQUEST_BYTES = 1024;
+const MAX_CREDENTIAL_BYTES = 32_768;
+function limit(value, fallback, maximum) {
+    const result = value ?? fallback;
+    if (!Number.isSafeInteger(result) || result <= 0 || result > maximum) {
+        throw new Error('invalid credential broker limit');
+    }
+    return result;
+}
+function validIdentity(value) {
+    return typeof value === 'string' && Buffer.byteLength(value) > 0
+        && Buffer.byteLength(value) <= 512 && !/[\u0000-\u001f\u007f]/u.test(value);
+}
+function identity(session) {
+    const { pluginId, serviceId, generation } = session.value.service;
+    if (![pluginId, serviceId, generation].every(validIdentity))
+        throw new Error('invalid service identity');
+    return Object.freeze({ pluginId, serviceId, generation });
+}
+function sameIdentity(left, right) {
+    return left.pluginId === right.pluginId && left.serviceId === right.serviceId && left.generation === right.generation;
+}
+function bearer(session) {
+    const auth = session.value.endpoint.auth;
+    if (auth.scheme !== 'bearer' || typeof auth.token !== 'string' || auth.token.length === 0
+        || Buffer.byteLength(auth.token) > MAX_CREDENTIAL_BYTES || /[\u0000-\u0020\u007f]/u.test(auth.token))
+        throw new Error('native provider bearer unavailable');
+    return auth.token;
+}
+export function nativeProviderCredentialHelperPath() {
+    return fileURLToPath(new URL('../../assets/launcher/native-provider-credential-helper.mjs', import.meta.url));
+}
+class Broker {
+    options;
+    bindings = new Map();
+    sockets = new Set();
+    pending = new Set();
+    parallel;
+    resolveTimeout;
+    commandTimeout;
+    refreshInterval;
+    helper;
+    node;
+    server;
+    directory;
+    socketPath;
+    starting;
+    closing;
+    activeRequests = 0;
+    closed = false;
+    constructor(options) {
+        this.options = options;
+        this.parallel = limit(options.maxParallelRequests, 8, MAX_SOCKETS);
+        this.resolveTimeout = limit(options.resolveTimeoutMs, 4000, 30_000);
+        this.commandTimeout = limit(options.commandTimeoutMs, 5000, 60_000);
+        this.refreshInterval = limit(options.refreshIntervalMs, 200, 60_000);
+        if (this.resolveTimeout >= this.commandTimeout)
+            throw new Error('invalid credential broker timeout ordering');
+        this.helper = options.helperPath ?? nativeProviderCredentialHelperPath();
+        this.node = options.nodePath ?? process.execPath;
+        if (![this.helper, this.node].every(value => path.isAbsolute(value) && !value.includes('\0'))) {
+            throw new Error('invalid credential helper command');
+        }
+    }
+    async resolve(providerId) {
+        let accepting = true;
+        let timer;
+        const resolution = Promise.resolve().then(() => this.options.resolve(providerId)).then(session => {
+            if (!accepting || this.closed) {
+                session.dispose();
+                throw new Error('credential resolution retired');
+            }
+            return session;
+        });
+        try {
+            return await Promise.race([
+                resolution,
+                new Promise((_, reject) => {
+                    timer = setTimeout(() => reject(new Error('credential resolution timed out')), this.resolveTimeout);
+                }),
+            ]);
+        }
+        catch {
+            throw new Error('native provider credential unavailable');
+        }
+        finally {
+            accepting = false;
+            clearTimeout(timer);
+        }
+    }
+    async start() {
+        if (this.closed)
+            throw new Error('native provider credential broker is closed');
+        this.starting ??= (async () => {
+            const directory = await mkdtemp(path.join(await realpath(tmpdir()), 'cx-cred-'));
+            const socketPath = path.join(directory, 'c.sock');
+            const server = createServer(socket => this.accept(socket));
+            try {
+                await chmod(directory, 0o700);
+                if (Buffer.byteLength(socketPath) > 103)
+                    throw new Error('credential socket path is too long');
+                await new Promise((resolve, reject) => {
+                    server.once('error', reject);
+                    server.listen(socketPath, resolve);
+                });
+                await chmod(socketPath, 0o600);
+                if (this.closed)
+                    throw new Error('native provider credential broker is closed');
+                this.directory = directory;
+                this.socketPath = socketPath;
+                this.server = server;
+            }
+            catch {
+                for (const socket of this.sockets)
+                    socket.destroy();
+                await new Promise(resolve => server.close(() => resolve()));
+                await rm(directory, { recursive: true, force: true });
+                throw new Error('native provider credential broker unavailable');
+            }
+        })();
+        await this.starting;
+    }
+    accept(socket) {
+        if (this.closed || this.sockets.size >= MAX_SOCKETS) {
+            socket.destroy();
+            return;
+        }
+        this.sockets.add(socket);
+        let input = Buffer.alloc(0);
+        let handled = false;
+        const fail = () => {
+            if (!socket.destroyed)
+                socket.end('{"ok":false}\n');
+        };
+        socket.setTimeout(this.commandTimeout);
+        socket.once('close', () => this.sockets.delete(socket));
+        socket.on('error', () => socket.destroy());
+        socket.once('timeout', () => socket.destroy());
+        socket.on('data', chunk => {
+            if (handled)
+                return;
+            if (input.byteLength + chunk.byteLength > MAX_REQUEST_BYTES) {
+                handled = true;
+                fail();
+                return;
+            }
+            input = Buffer.concat([input, chunk]);
+            const newline = input.indexOf(10);
+            if (newline < 0)
+                return;
+            handled = true;
+            if (newline !== input.length - 1) {
+                fail();
+                return;
+            }
+            const task = this.deliver(input.subarray(0, newline).toString('utf8'), socket)
+                .catch(fail).finally(() => this.pending.delete(task));
+            this.pending.add(task);
+        });
+    }
+    async deliver(source, socket) {
+        if (this.closed || this.activeRequests >= this.parallel)
+            throw new Error('credential request unavailable');
+        const request = JSON.parse(source);
+        if (request === null || typeof request !== 'object' || Array.isArray(request))
+            throw new Error('invalid request');
+        const record = request;
+        const handle = record.operationHandle;
+        if (Object.keys(record).length !== 1 || typeof handle !== 'string' || !/^[A-Za-z0-9_-]{43}$/u.test(handle)) {
+            throw new Error('invalid request');
+        }
+        const binding = this.bindings.get(handle);
+        if (binding === undefined || binding.revoked)
+            throw new Error('credential binding unavailable');
+        this.activeRequests += 1;
+        let session;
+        try {
+            session = await this.resolve(binding.providerId);
+            if (!sameIdentity(binding.identity, identity(session)) || session.value.endpoint.auth.scheme !== 'bearer') {
+                binding.revoked = true;
+                this.bindings.delete(handle);
+            }
+            if (this.closed || binding.revoked || socket.destroyed)
+                throw new Error('credential binding retired');
+            socket.end(`${JSON.stringify({ ok: true, credential: bearer(session) })}\n`);
+        }
+        finally {
+            try {
+                session?.dispose();
+            }
+            finally {
+                this.activeRequests -= 1;
+            }
+        }
+    }
+    async prepare(providerId) {
+        if (this.closed)
+            throw new Error('native provider credential broker is closed');
+        if (!validIdentity(providerId))
+            throw new Error('invalid native provider identifier');
+        let session;
+        try {
+            session = await this.resolve(providerId);
+            const service = identity(session);
+            if (session.value.endpoint.auth.scheme === 'none') {
+                return Object.freeze({ scheme: 'none', serviceGeneration: service.generation, dispose: () => undefined });
+            }
+            bearer(session);
+            await this.start();
+            if (this.closed || this.bindings.size >= MAX_BINDINGS || !this.directory || !this.socketPath) {
+                throw new Error('credential broker unavailable');
+            }
+            const handle = randomBytes(32).toString('base64url');
+            const binding = { providerId, identity: service, revoked: false };
+            this.bindings.set(handle, binding);
+            return Object.freeze({
+                scheme: 'bearer',
+                serviceGeneration: service.generation,
+                auth: Object.freeze({
+                    command: this.node,
+                    args: Object.freeze([this.helper, this.socketPath, handle]),
+                    cwd: this.directory,
+                    timeout_ms: this.commandTimeout,
+                    refresh_interval_ms: this.refreshInterval,
+                }),
+                dispose: () => {
+                    binding.revoked = true;
+                    this.bindings.delete(handle);
+                },
+            });
+        }
+        catch {
+            throw new Error('native provider credential unavailable');
+        }
+        finally {
+            session?.dispose();
+        }
+    }
+    close() {
+        this.closing ??= (async () => {
+            this.closed = true;
+            for (const binding of this.bindings.values())
+                binding.revoked = true;
+            this.bindings.clear();
+            for (const socket of this.sockets)
+                socket.destroy();
+            await this.starting?.catch(() => undefined);
+            await Promise.allSettled([...this.pending]);
+            if (this.server)
+                await new Promise(resolve => this.server.close(() => resolve()));
+            if (this.directory)
+                await rm(this.directory, { recursive: true, force: true });
+        })();
+        return this.closing;
+    }
+}
+export function createNativeProviderCredentialBroker(options) {
+    return new Broker(options);
+}
+//# sourceMappingURL=native-provider-credential-broker.js.map

package/dist/src/launcher/native-provider-credential-broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-provider-credential-broker.js","sourceRoot":"","sources":["../../../src/launcher/native-provider-credential-broker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EAAE,YAAY,EAA4B,MAAM,UAAU,CAAA;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAGxC,MAAM,YAAY,GAAG,GAAG,CAAA;AACxB,MAAM,WAAW,GAAG,EAAE,CAAA;AACtB,MAAM,iBAAiB,GAAG,IAAI,CAAA;AAC9B,MAAM,oBAAoB,GAAG,MAAM,CAAA;AAiDnC,SAAS,KAAK,CAAC,KAAyB,EAAE,QAAgB,EAAE,OAAe;IACzE,MAAM,MAAM,GAAG,KAAK,IAAI,QAAQ,CAAA;IAChC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;WAC3D,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC/E,CAAC;AAED,SAAS,QAAQ,CAAC,OAA8C;IAC9D,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAA;IACjE,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IACxG,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAA;AAC3D,CAAC;AAED,SAAS,YAAY,CAAC,IAAqB,EAAE,KAAsB;IACjE,OAAO,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAA;AACvH,CAAC;AAED,SAAS,MAAM,CAAC,OAA8C;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAA;IACxC,IACE,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;WAClF,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,oBAAoB,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QACpG,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACvD,OAAO,IAAI,CAAC,KAAK,CAAA;AACnB,CAAC;AAED,MAAM,UAAU,kCAAkC;IAChD,OAAO,aAAa,CAAC,IAAI,GAAG,CAAC,6DAA6D,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AAC/G,CAAC;AAED,MAAM,MAAM;IAkBmB;IAjBZ,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAA;IACrC,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IAC3B,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAA;IAClC,QAAQ,CAAQ;IAChB,cAAc,CAAQ;IACtB,cAAc,CAAQ;IACtB,eAAe,CAAQ;IACvB,MAAM,CAAQ;IACd,IAAI,CAAQ;IACrB,MAAM,CAAoB;IAC1B,SAAS,CAAoB;IAC7B,UAAU,CAAoB;IAC9B,QAAQ,CAA2B;IACnC,OAAO,CAA2B;IAClC,cAAc,GAAG,CAAC,CAAA;IAClB,MAAM,GAAG,KAAK,CAAA;IAEtB,YAA6B,OAA8C;QAA9C,YAAO,GAAP,OAAO,CAAuC;QACzE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,EAAE,WAAW,CAAC,CAAA;QAClE,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QACnE,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QACnE,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;QACpE,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;QAC7G,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,UAAU,IAAI,kCAAkC,EAAE,CAAA;QACxE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAA;QAChD,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,UAAkB;QACtC,IAAI,SAAS,GAAG,IAAI,CAAA;QACpB,IAAI,KAAgD,CAAA;QACpD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;YAC/F,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC9B,OAAO,CAAC,OAAO,EAAE,CAAA;gBACjB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;YAClD,CAAC;YACD,OAAO,OAAO,CAAA;QAChB,CAAC,CAAC,CAAA;QACF,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;gBACxB,UAAU;gBACV,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBAC/B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;gBACrG,CAAC,CAAC;aACH,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;QAC3D,CAAC;gBAAS,CAAC;YACT,SAAS,GAAG,KAAK,CAAA;YACjB,YAAY,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;QAC/E,IAAI,CAAC,QAAQ,KAAK,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,CAAA;YAChF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;YACjD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;YAC1D,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;gBAC7B,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;gBAC9F,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;oBAC5B,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;gBACpC,CAAC,CAAC,CAAA;gBACF,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;gBAC9B,IAAI,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;gBAC/E,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;gBAC1B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;gBAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;oBAAE,MAAM,CAAC,OAAO,EAAE,CAAA;gBACnD,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;gBACjE,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gBACrD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;YAClE,CAAC;QACH,CAAC,CAAC,EAAE,CAAA;QACJ,MAAM,IAAI,CAAC,QAAQ,CAAA;IACrB,CAAC;IAEO,MAAM,CAAC,MAAc;QAC3B,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;YACpD,MAAM,CAAC,OAAO,EAAE,CAAA;YAChB,OAAM;QACR,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACxB,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC3B,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;QACrD,CAAC,CAAA;QACD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QACvD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;QAC1C,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;QAC9C,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;YACxB,IAAI,OAAO;gBAAE,OAAM;YACnB,IAAI,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,GAAG,iBAAiB,EAAE,CAAC;gBAC5D,OAAO,GAAG,IAAI,CAAA;gBACd,IAAI,EAAE,CAAA;gBACN,OAAM;YACR,CAAC;YACD,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAA;YACrC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YACjC,IAAI,OAAO,GAAG,CAAC;gBAAE,OAAM;YACvB,OAAO,GAAG,IAAI,CAAA;YACd,IAAI,OAAO,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjC,IAAI,EAAE,CAAA;gBACN,OAAM;YACR,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;iBAC3E,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;YACvD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACxB,CAAC,CAAC,CAAA;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,MAAc;QAClD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;QAC1G,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAA;QAC7C,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QACjH,MAAM,MAAM,GAAG,OAAkC,CAAA;QACjD,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAA;QACrC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3G,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QACpC,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;QAC/F,IAAI,CAAC,cAAc,IAAI,CAAC,CAAA;QACxB,IAAI,OAA0D,CAAA;QAC9D,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;YAChD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC1G,OAAO,CAAC,OAAO,GAAG,IAAI,CAAA;gBACtB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YAC9B,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;YACrG,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;QAC9E,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,OAAO,EAAE,OAAO,EAAE,CAAA;YACpB,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,cAAc,IAAI,CAAC,CAAA;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,UAAkB;QAC9B,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;QAC/E,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QACrF,IAAI,OAA0D,CAAA;QAC9D,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;YACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAA;YACjC,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAClD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,CAAA;YAC3G,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,CAAA;YACf,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;YAClB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,YAAY,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC7F,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;YAClD,CAAC;YACD,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;YACpD,MAAM,OAAO,GAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;YAC1E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YAClC,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,QAAQ;gBAChB,iBAAiB,EAAE,OAAO,CAAC,UAAU;gBACrC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;oBAClB,OAAO,EAAE,IAAI,CAAC,IAAI;oBAClB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;oBAC3D,GAAG,EAAE,IAAI,CAAC,SAAS;oBACnB,UAAU,EAAE,IAAI,CAAC,cAAc;oBAC/B,mBAAmB,EAAE,IAAI,CAAC,eAAe;iBAC1C,CAAC;gBACF,OAAO,EAAE,GAAG,EAAE;oBACZ,OAAO,CAAC,OAAO,GAAG,IAAI,CAAA;oBACtB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;gBAC9B,CAAC;aACF,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;QAC3D,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,OAAO,EAAE,CAAA;QACpB,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;YAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;YAClB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;gBAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAA;YACpE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;YACrB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;gBAAE,MAAM,CAAC,OAAO,EAAE,CAAA;YACnD,MAAM,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC3C,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;YAC3C,IAAI,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,MAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;YACxF,IAAI,IAAI,CAAC,SAAS;gBAAE,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAChF,CAAC,CAAC,EAAE,CAAA;QACJ,OAAO,IAAI,CAAC,OAAO,CAAA;IACrB,CAAC;CACF;AAED,MAAM,UAAU,oCAAoC,CAClD,OAA8C;IAE9C,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAAA;AAC5B,CAAC"}

package/dist/src/launcher/native-source-structure.d.ts

@@ -0,0 +1,19 @@
+export interface SyntaxNode {
+    readonly type: string;
+    readonly start: number;
+    readonly end: number;
+    readonly [key: string]: any;
+}
+export declare function parseNativeSource(source: string): SyntaxNode;
+export declare function visitSyntax(node: SyntaxNode, visit: (node: SyntaxNode, parents: readonly SyntaxNode[]) => void): void;
+export declare function properties(node: SyntaxNode | undefined): Map<string, SyntaxNode>;
+export declare function member(node: SyntaxNode | undefined, name: string): boolean;
+export declare function literal(node: SyntaxNode | undefined): unknown;
+export declare function one<T>(values: readonly T[], capability: string): T;
+export interface SourceEdit {
+    readonly start: number;
+    readonly end: number;
+    readonly text: string;
+}
+export declare function applySourceEdits(source: string, edits: readonly SourceEdit[]): string;
+//# sourceMappingURL=native-source-structure.d.ts.map

package/dist/src/launcher/native-source-structure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-source-structure.d.ts","sourceRoot":"","sources":["../../../src/launcher/native-source-structure.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CAC5B;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAE5D;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,UAAU,EAAE,KAAK,IAAI,GAAG,IAAI,CAUrH;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAKhF;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1E;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,GAAG,OAAO,CAI7D;AAED,wBAAgB,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,CAAC,CAKlE;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AACD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,UAAU,EAAE,GAAG,MAAM,CASrF"}

package/dist/src/launcher/native-source-structure.js

@@ -0,0 +1,51 @@
+import { parse } from 'acorn';
+export function parseNativeSource(source) {
+    return parse(source, { ecmaVersion: 'latest', sourceType: 'module' });
+}
+export function visitSyntax(node, visit) {
+    const walk = (node, parents) => {
+        visit(node, parents);
+        for (const value of Object.values(node)) {
+            if (Array.isArray(value)) {
+                for (const child of value)
+                    if (child?.type)
+                        walk(child, [...parents, node]);
+            }
+            else if (value?.type)
+                walk(value, [...parents, node]);
+        }
+    };
+    walk(node, []);
+}
+export function properties(node) {
+    return new Map((node?.properties ?? []).filter((p) => p.type === 'Property' && !p.computed)
+        .map((p) => [p.key.name ?? p.key.value, p.value]));
+}
+export function member(node, name) {
+    return node?.type === 'MemberExpression' && !node.computed && node.property.name === name;
+}
+export function literal(node) {
+    if (node?.type === 'Literal')
+        return node.value;
+    if (node?.type === 'TemplateLiteral' && node.expressions.length === 0)
+        return node.quasis[0].value.cooked;
+    return undefined;
+}
+export function one(values, capability) {
+    if (values.length !== 1) {
+        throw new Error(`Native capability ${capability}: expected one structure, found ${values.length}`);
+    }
+    return values[0];
+}
+export function applySourceEdits(source, edits) {
+    let boundary = source.length;
+    for (const edit of [...edits].sort((a, b) => b.start - a.start || b.end - a.end)) {
+        if (edit.end > boundary)
+            throw new Error('Native capability edits overlap');
+        source = source.slice(0, edit.start) + edit.text + source.slice(edit.end);
+        boundary = edit.start;
+    }
+    parseNativeSource(source);
+    return source;
+}
+//# sourceMappingURL=native-source-structure.js.map

package/dist/src/launcher/native-source-structure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-source-structure.js","sourceRoot":"","sources":["../../../src/launcher/native-source-structure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAA;AAS7B,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,KAAK,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAe,CAAA;AACrF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAgB,EAAE,KAAiE;IAC7G,MAAM,IAAI,GAAG,CAAC,IAAgB,EAAE,OAA8B,EAAQ,EAAE;QACtE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,MAAM,KAAK,IAAI,KAAK;oBAAE,IAAI,KAAK,EAAE,IAAI;wBAAE,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;YAC7E,CAAC;iBAAM,IAAI,KAAK,EAAE,IAAI;gBAAE,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;QACzD,CAAC;IACH,CAAC,CAAA;IACD,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAA4B;IACrD,OAAO,IAAI,GAAG,CACZ,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAa,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;SACrF,GAAG,CAAC,CAAC,CAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAChE,CAAA;AACH,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAA4B,EAAE,IAAY;IAC/D,OAAO,IAAI,EAAE,IAAI,KAAK,kBAAkB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAA;AAC3F,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAA4B;IAClD,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,KAAK,CAAA;IAC/C,IAAI,IAAI,EAAE,IAAI,KAAK,iBAAiB,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAA;IACzG,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,UAAU,GAAG,CAAI,MAAoB,EAAE,UAAkB;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,qBAAqB,UAAU,mCAAmC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IACpG,CAAC;IACD,OAAO,MAAM,CAAC,CAAC,CAAE,CAAA;AACnB,CAAC;AAOD,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,KAA4B;IAC3E,IAAI,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAA;IAC5B,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACjF,IAAI,IAAI,CAAC,GAAG,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;QAC3E,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACzE,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAA;IACvB,CAAC;IACD,iBAAiB,CAAC,MAAM,CAAC,CAAA;IACzB,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/src/launcher/native-submission-cdp-channel.d.ts

@@ -0,0 +1,18 @@
+import type { NativeModelProviderCatalogEntry } from './native-model-provider-catalog.js';
+import type { CdpSession, CdpTarget } from './cdp-session.js';
+import type { NativeSubmissionController, NativeSubmissionRuntimeAuthority, NativeSubmissionSelectionAuthority } from './native-submission-controller.js';
+export interface NativeSubmissionCdpAuthority {
+    readonly selection: NativeSubmissionSelectionAuthority;
+    readonly runtime: NativeSubmissionRuntimeAuthority;
+    bindController(controller: NativeSubmissionController): void;
+    install(session: CdpSession, target: CdpTarget): Promise<{
+        dispose(): Promise<void>;
+    }>;
+}
+/** Each binding belongs to one native renderer generation, never a shared global request queue. */
+export declare function createNativeSubmissionCdpAuthority(options: {
+    catalog(): Promise<readonly NativeModelProviderCatalogEntry[]>;
+    isThreadIdle(threadId: string): Promise<boolean>;
+    readonly defaultProviderId?: string;
+}): NativeSubmissionCdpAuthority;
+//# sourceMappingURL=native-submission-cdp-channel.d.ts.map

package/dist/src/launcher/native-submission-cdp-channel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-submission-cdp-channel.d.ts","sourceRoot":"","sources":["../../../src/launcher/native-submission-cdp-channel.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,oCAAoC,CAAA;AACzF,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC7D,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EAEhC,kCAAkC,EACnC,MAAM,mCAAmC,CAAA;AA4E1C,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,SAAS,EAAE,kCAAkC,CAAA;IACtD,QAAQ,CAAC,OAAO,EAAE,gCAAgC,CAAA;IAClD,cAAc,CAAC,UAAU,EAAE,0BAA0B,GAAG,IAAI,CAAA;IAC5D,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;QAAE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC,CAAA;CACvF;AAED,mGAAmG;AACnG,wBAAgB,kCAAkC,CAAC,OAAO,EAAE;IAC1D,OAAO,IAAI,OAAO,CAAC,SAAS,+BAA+B,EAAE,CAAC,CAAA;IAC9D,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAChD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CACpC,GAAG,4BAA4B,CAwU/B"}