oblien 2.2.36 → 2.2.38

package/README.md

@@ -1,34 +1,15 @@
 # Oblien SDK
 
-Cloud workspaces that boot in milliseconds and run anything.
+Cloud workspaces (sandboxes) that boot in milliseconds and run anything.
 
 Oblien gives you hardware-isolated microVMs — each with its own kernel, its own memory, and full root access. Use them to give an AI agent a live environment, deploy a service with a public URL, run untrusted code in a throwaway sandbox, or spin up a dev machine you can SSH into. The workspace is the only primitive. What it becomes is up to you.
 
-This is the official TypeScript SDK. It covers the full Oblien API surface.
+This is the official TypeScript SDK — it covers the full Oblien API surface across both planes:
 
-**Documentation:** [https://oblien.com/docs](https://oblien.com/docs)
+- **Control plane** (`api.oblien.com`) — create, configure, power, snapshot, destroy workspaces; manage networking, domains, pages, namespaces, billing.
+- **Data plane** (`workspace.oblien.com`) — a running workspace's filesystem, exec, terminal, watchers, and WebSocket events.
 
----
-
-## Platform
-
-Oblien is a workspace platform. Every workspace is a microVM that boots in under a second from any Docker image. Workspaces can be temporary (auto-delete after a TTL) or permanent (run indefinitely). They can be air-gapped or wired to other workspaces over a private internal network. They can expose ports to the internet with automatic TLS — or stay completely invisible.
-
-The architecture is split into two planes:
-
-- **Control plane** (`api.oblien.com`) — Create, configure, start, stop, snapshot, and destroy workspaces. Manage networking, domains, pages, namespaces, and billing.
-- **Data plane** (`workspace.oblien.com`) — Interact with a running workspace's filesystem, execute commands, open terminal sessions, watch files, and stream events over WebSocket.
-
-The SDK wraps both planes in a single client.
-
-### What people build with it
-
-- **AI agent environments** — A permanent workspace is the agent's home. It creates short-lived sandboxes on demand for tasks, user code, or deployments.
-- **Service hosting** — Run an API server, a queue worker, or a database. Map it to a custom domain.
-- **Static pages** — Deploy build output from a workspace to the edge CDN. No running VM required.
-- **Remote development** — SSH into a workspace, install your stack, expose a port for live preview.
-- **Per-user environments** — One workspace per customer with scoped networking, credit quotas, and full isolation.
-- **Enterprise routing** — Route subdomains to external upstreams through the edge proxy.
+**Hosted docs:** [oblien.com/docs](https://oblien.com/docs)
 
 ---
 
@@ -38,7 +19,7 @@ The SDK wraps both planes in a single client.
 npm install oblien
 ```
 
-Requires Node.js 18 or later. Zero runtime dependencies.
+Node.js 18+, ESM. Zero runtime dependencies.
 
 ---
 
@@ -53,247 +34,59 @@ const client = new Oblien({
 });
 
 // Create a workspace
-const workspace = await client.workspaces.create({
-  image: 'node-20',
-  mode: 'permanent',
-  cpus: 2,
-  memory_mb: 4096,
-});
+const workspace = await client.workspaces.create({ image: 'node-20', cpus: 2, memory_mb: 4096 });
 
 // Connect to the runtime — filesystem, exec, terminal
 const rt = await client.workspaces.runtime(workspace.id);
-
-// Run a command
 const result = await rt.exec.run(['node', '--version']);
 console.log(result.stdout);
-
-// Read a file
-const file = await rt.files.read({ filePath: '/etc/os-release' });
-console.log(file.content);
-```
-
----
-
-## SDK structure
-
-```
-client
-├── workspaces          Control-plane workspace CRUD + power + sub-resources
-│   ├── lifecycle       Permanent/temporary mode, TTL, ping
-│   ├── network         Firewall, private links, outbound IP
-│   ├── ssh             SSH enable/disable, password/key
-│   ├── publicAccess    Expose ports with public URLs
-│   ├── domains         Custom domains with automatic SSL
-│   ├── resources       CPU, memory, disk allocation
-│   ├── snapshots       Snapshots and versioned archives
-│   ├── workloads       Managed background processes
-│   ├── metrics         Live stats, VM info/config
-│   ├── usage           Credit usage and activity tracking
-│   ├── metadata        Key-value metadata store
-│   ├── apiAccess       Runtime API tokens (gateway JWT / raw)
-│   ├── logs            Boot and command logs
-│   └── images          Available base images
-│
-├── pages               Static pages — deploy to the edge CDN from any workspace
-├── namespaces          Group workspaces, enforce resource limits and quotas
-├── edgeProxy           Enterprise reverse proxy — route subdomains to upstreams
-├── domain              Pre-flight checks — slug availability + DNS verification
-│
-└── workspace(id)       Scoped handle — all methods pre-filled with a workspace ID
-```
-
----
-
-## Workspaces
-
-```typescript
-const ws = client.workspaces;
-
-// CRUD
-const workspace = await ws.create({ image: 'node-20' });
-const { workspaces } = await ws.list();
-const data = await ws.get(workspace.id);
-await ws.update(workspace.id, { name: 'my-api' });
-await ws.delete(workspace.id);
-
-// Power
-await ws.start(id);
-await ws.stop(id);
-await ws.restart(id);
-await ws.pause(id);
-await ws.resume(id);
-```
-
-Sub-resources are accessed through namespaces on the workspaces object — `ws.lifecycle`, `ws.network`, `ws.domains`, etc. See the [API reference](https://oblien.com/docs/api) for full details on each.
-
-### Scoped handle
-
-Bind to a single workspace so you don't have to pass the ID every time:
-
-```typescript
-const handle = client.workspace('ws_abc');
-
-await handle.start();
-const rt = await handle.runtime();
-await rt.exec.run(['npm', 'test']);
-await handle.stop();
-```
-
----
-
-## Runtime (data plane)
-
-The runtime connects to a running workspace and gives you direct access to its filesystem, command execution, terminal sessions, code search, and file watchers.
-
-```typescript
-const rt = await client.workspaces.runtime('ws_abc');
-```
-
-This enables the Runtime API server (if needed), fetches a gateway JWT, and returns a `Runtime` instance. The token is cached — subsequent calls for the same workspace return instantly.
-
-| Namespace | What it does |
-|-----------|-------------|
-| `rt.files` | List, read, write, stat, mkdir, delete, stream directory trees |
-| `rt.transfer` | Download and upload `tar.gz` archives, with optional client-side progress callbacks |
-| `rt.exec` | Run commands, stream output, list/kill tasks, send stdin |
-| `rt.terminal` | Create PTY sessions, get scrollback, close sessions |
-| `rt.search` | Content search (ripgrep) and filename search |
-| `rt.watcher` | Watch directories for real-time file change events |
-| `rt.ws()` | WebSocket — persistent connection for terminal I/O and watcher events |
-
-See the [Runtime API docs](https://oblien.com/docs/runtime-api) for full endpoint reference.
-
----
-
-## Pages
-
-Deploy static files from a workspace to the edge CDN. The workspace can stop or be deleted after export — the page stays live with automatic TLS.
-
-```typescript
-// Deploy a page
-const { page } = await client.pages.create({
-  workspace_id: 'ws_abc',
-  path: '/app/dist',
-  name: 'my-app',
-});
-
-// Re-deploy with fresh files
-await client.pages.deploy(page.slug, {
-  workspace_id: 'ws_abc',
-  path: '/app/dist',
-});
-
-// Custom domain
-await client.pages.connectDomain(page.slug, { domain: 'app.example.com' });
-
-// Toggle
-await client.pages.disable(page.slug);
-await client.pages.enable(page.slug);
-```
-
-See the [Pages docs](https://oblien.com/docs/concepts/pages) for concepts and the [Pages API](https://oblien.com/docs/api/pages) for the full reference.
-
----
-
-## Domains
-
-Pre-flight checks before connecting custom domains or claiming slugs. These are standalone — not scoped to a specific workspace or page.
-
-```typescript
-// Check if a slug is available
-const { available, url } = await client.domain.checkSlug({ slug: 'my-app' });
-
-// Verify DNS for a custom domain
-const { verified, cname, ownership, errors, required_records } = await client.domain.verify({
-  domain: 'app.example.com',
-  resource_id: 'ws_abc',
-});
-
-if (!verified) {
-  console.log(errors);
-  console.log(required_records);
-}
 ```
 
-Standard plans require both edge DNS and TXT ownership. Enterprise custom-domain grants can verify with edge DNS only.
-
 ---
 
-## Namespaces
+## Features
 
-Group workspaces into isolated namespaces with resource limits, spending quotas, and lifecycle controls.
+The client wraps every part of the platform. Each feature has a deep-dive page in [`docs/`](./docs).
 
-```typescript
-const ns = await client.namespaces.create({
-  name: 'production',
-  resource_limits: { max_workspaces: 50, max_cpus: 100 },
-});
+| Feature | Accessor | What it does | Guide |
+|---------|----------|--------------|-------|
+| **Workspaces** | `client.workspaces`, `client.workspace(id)` | microVM CRUD, power, and 14 sub-resources (network, ssh, snapshots, …) | [docs/workspaces](./docs/workspaces.md) |
+| **Runtime** | `client.workspaces.runtime(id)` | Data plane: files, exec, terminal, search, watchers, WebSocket | [docs/runtime](./docs/runtime.md) |
+| **Pages** | `client.pages` | Deploy static files to the edge CDN with automatic TLS | [docs/pages](./docs/pages.md) |
+| **Namespaces** | `client.namespaces` | Group workspaces; resource limits, quotas, per-namespace usage | [docs/namespaces](./docs/namespaces.md) |
+| **Domains** | `client.domain` | Slug/DNS pre-flight, route listing, SSL certs + auto-renew | [docs/domains](./docs/domains.md) |
+| **Edge Proxy** | `client.edgeProxy` | Reverse-proxy subdomains to *verified* external upstreams | [docs/edge-proxy](./docs/edge-proxy.md) |
+| **Edge Tunnel** | `client.edgeTunnel` | Expose a local port to the internet (ngrok-style) | [docs/edge-tunnel](./docs/edge-tunnel.md) |
+| **Notifications** | `client.notifications` | Mobile push via per-workspace virtual send tokens | [docs/notifications](./docs/notifications.md) |
+| **Webhooks** | `client.webhooks` | Subscribe to events; HMAC-signed, namespace-scopable | [docs/webhooks](./docs/webhooks.md) |
+| **Analytics** | `client.analytics` | Edge traffic — requests, bandwidth, geo, live stream | [docs/analytics](./docs/analytics.md) |
+| **Scoped Tokens** | `client.tokens` | Short-lived, per-tenant scoped JWTs | [docs/tokens](./docs/tokens.md) |
+| **CDN** | `client.cdn` | Upload files, mint upload tokens, manage stored files (namespace-aware) | [docs/cdn](./docs/cdn.md) |
+| **Errors** | `import { OblienError, … }` | Typed error classes for every HTTP status | [docs/errors](./docs/errors.md) |
 
-await client.namespaces.setQuota(ns.id, {
-  period: 'monthly',
-  max_credits: 500,
-  overdraft_action: 'stop',
-});
+### Map at a glance
 
-const { namespaces } = await client.namespaces.list();
 ```
-
-See the [Namespaces API](https://oblien.com/docs/api/namespaces) for the full reference.
-
----
-
-## Edge Proxy
-
-Enterprise-only reverse proxy — route subdomains to external upstreams through the edge.
-
-```typescript
-const { proxy } = await client.edgeProxy.create({
-  name: 'staging-api',
-  slug: 'staging-api',
-  domain: 'edge.example.com',
-  target: 'https://internal-staging.example.com:8080',
-});
-
-await client.edgeProxy.disable(proxy.id);
-await client.edgeProxy.enable(proxy.id);
+client
+├── workspaces        microVM CRUD + power + sub-resources    → docs/workspaces.md
+│   └── runtime(id)   files · exec · terminal · search · ws   → docs/runtime.md
+├── workspace(id)     scoped handle (ID pre-filled)
+├── pages             static deploys to the edge CDN          → docs/pages.md
+├── namespaces        grouping · limits · quotas · usage      → docs/namespaces.md
+├── domain            slug/DNS checks · routes · SSL          → docs/domains.md
+├── edgeProxy         subdomain → verified upstream           → docs/edge-proxy.md
+├── edgeTunnel        local port → public URL                 → docs/edge-tunnel.md
+├── notifications     mobile push (virtual tokens)            → docs/notifications.md
+├── webhooks          event subscriptions                     → docs/webhooks.md
+├── analytics         edge traffic metrics                     → docs/analytics.md
+└── tokens            short-lived scoped tokens                → docs/tokens.md
 ```
 
-See the [Edge Proxy docs](https://oblien.com/docs/concepts/edge-proxy) for details.
-
----
-
-## Error handling
+### Also included
 
-Every API error is an instance of `OblienError` with typed subclasses. The SDK preserves the machine-readable `code`, human-readable `message`, optional `details`, and optional `requestId` from the API response.
-
-```typescript
-import {
-  OblienError,
-  NotFoundError,
-  RateLimitError,
-  PaymentRequiredError,
-} from 'oblien';
-
-try {
-  await client.workspaces.get('ws_nonexistent');
-} catch (err) {
-  if (err instanceof NotFoundError) { /* 404 */ }
-  if (err instanceof RateLimitError) { /* 429 — back off */ }
-  if (err instanceof PaymentRequiredError) { /* 402 — quota exceeded */ }
-  if (err instanceof OblienError) {
-    console.error(err.code, err.message, err.details, err.requestId);
-  }
-}
-```
-
-| Error class | HTTP | When |
-|-------------|------|------|
-| `AuthenticationError` | 401 | Invalid or missing credentials |
-| `PaymentRequiredError` | 402 | Credit quota exceeded |
-| `NotFoundError` | 404 | Resource does not exist |
-| `ConflictError` | 409 | Resource in wrong state |
-| `ValidationError` | 422 | Invalid parameters |
-| `RateLimitError` | 429 | Too many requests |
+- **CLI** — `npx oblien …` (auth, workspaces, exec, scp, terminal, tunnels, …). See [CLI docs](https://oblien.com/docs/cli).
+- **Static server** — `oblien serve ./public` serves a folder and puts it on a public URL through the edge tunnel; also exported as `startStaticServer()`. Zero dependencies. See [docs/serve](./docs/serve.md).
+- **MCP server** — `oblien-mcp` exposes the SDK as Model Context Protocol tools for agents. See [MCP docs](https://oblien.com/docs/mcp).
 
 ---
 
@@ -301,50 +94,36 @@ try {
 
 ```typescript
 const client = new Oblien({
-  clientId: 'your_client_id',       // required
-  clientSecret: 'your_client_secret', // required
-  baseUrl: 'https://api.oblien.com',  // optional, default
+  clientId: 'your_client_id',          // required
+  clientSecret: 'your_client_secret',  // required
+  baseUrl: 'https://api.oblien.com',   // optional (default)
 });
+
+// Or a short-lived scoped token (see docs/tokens.md):
+const scoped = new Oblien({ token });
 ```
 
-Get your API keys from the [dashboard](https://oblien.com/dashboard/settings).
+Get API keys from the [dashboard](https://oblien.com/dashboard/settings).
 
 ---
 
 ## TypeScript
 
-Written in TypeScript with full type declarations shipped. All request parameters, response shapes, and event types are exported:
+Written in TypeScript with full declarations shipped. Every request param, response shape, and event type is exported:
 
 ```typescript
 import type {
   WorkspaceCreateParams, WorkspaceData,
-  PageCreateParams, PageData,
-  CheckSlugParams, VerifyDomainParams,
-  EdgeProxyCreateParams,
-  ExecStreamEvent, WSTerminalEvent,
+  NamespaceUsageUnits, EdgeProxyCreateParams,
+  WebhookEvent, ExecStreamEvent,
 } from 'oblien';
 ```
 
 ---
 
-## Requirements
-
-- Node.js 18+
-- TypeScript 5.0+ (if using TypeScript)
-- ESM (`"type": "module"` in your package.json, or use dynamic `import()`)
-
----
-
 ## Links
 
-- [Documentation](https://oblien.com/docs)
-- [Quickstart](https://oblien.com/docs/workspace/quickstart)
-- [SDK setup guide](https://oblien.com/docs/workspace/sdk-setup)
-- [API reference](https://oblien.com/docs/api)
-- [Runtime API](https://oblien.com/docs/runtime-api)
-- [Dashboard](https://oblien.com/dashboard)
-
----
+- [Documentation](https://oblien.com/docs) · [Quickstart](https://oblien.com/docs/workspace/quickstart) · [API reference](https://oblien.com/docs/api) · [Runtime API](https://oblien.com/docs/runtime-api) · [Dashboard](https://oblien.com/dashboard)
 
 ## License
 

package/dist/cdn.d.ts

@@ -0,0 +1,105 @@
+import type { HttpClient } from './http.js';
+import type { CdnTokenParams, CdnTokenResponse, CdnUploadInput, CdnUploadParams, CdnUploadResponse, CdnUploadManyResponse, CdnProcessUrlsParams, CdnProcessUrlsResponse, CdnLimitsResponse, CdnVariantOptionsResponse, CdnListParams, CdnListResponse, CdnStatsParams, CdnStatsResponse, CdnFileResponse, CdnUsageParams, CdnUsageResponse, CdnUsageSeriesParams, CdnUsageSeriesResponse } from './types/cdn.js';
+import type { ApiResponse } from './types/common.js';
+/**
+ * CDN — issue upload tokens, upload files, and manage stored files.
+ *
+ * The CDN spans two planes. Token issuance and file management go through the
+ * API host (`client._http`); uploads go directly to the CDN edge host with a
+ * short-lived token. Every operation is namespace-aware: pass `namespace` to
+ * scope a token/upload/listing, or omit it (admin/dashboard callers see all of
+ * their files). Namespace-scoped API keys are automatically pinned to their
+ * own namespace by the server.
+ *
+ * ```ts
+ * import Oblien from 'oblien';
+ * import { readFileSync } from 'node:fs';
+ * const client = new Oblien({ clientId, clientSecret });
+ *
+ * // One-shot: mints a token and uploads, scoped to a namespace
+ * const { url } = await client.cdn.upload(
+ *   { data: readFileSync('./logo.png'), filename: 'logo.png', contentType: 'image/png' },
+ *   { namespace: 'tenant-a' },
+ * );
+ *
+ * // List / stats for that namespace
+ * const { data } = await client.cdn.list({ namespace: 'tenant-a' });
+ * await client.cdn.stats({ namespace: 'tenant-a' });
+ * ```
+ */
+export declare class Cdn {
+    /** @internal */
+    readonly _http: HttpClient;
+    /** @internal — CDN edge base, incl. the `/api` mount (e.g. https://cdn.oblien.com/api). */
+    private readonly _cdnBaseUrl;
+    private readonly _base;
+    constructor(client: {
+        _http: HttpClient;
+        _cdnBaseUrl: string;
+    });
+    /**
+     * Mint a short-lived (1 min) USER-scope CDN token (upload + process).
+     * Requires an admin- or namespace-scoped API key.
+     */
+    token(params?: CdnTokenParams): Promise<CdnTokenResponse>;
+    /**
+     * Mint a short-lived ADMIN-scope CDN token (full edge access incl. delete).
+     * Requires an admin API key.
+     */
+    adminToken(params?: CdnTokenParams): Promise<CdnTokenResponse>;
+    /**
+     * Upload a single file to the CDN edge. Mints a user token automatically
+     * (bound to `params.namespace`, carrying `params.metadata` — variant/TTL
+     * options), or reuses `params.token` if given.
+     */
+    upload(file: CdnUploadInput, params?: CdnUploadParams): Promise<CdnUploadResponse>;
+    /**
+     * Upload multiple files in one request (field `files`). Mints a single token
+     * for the batch, bound to `params.namespace` and carrying `params.metadata`.
+     */
+    uploadMany(files: CdnUploadInput[], params?: CdnUploadParams): Promise<CdnUploadManyResponse>;
+    /**
+     * Ingest files from remote URLs (edge downloads + processes them). Variant
+     * options travel in the token metadata (the edge reads them from the permit),
+     * so `metadata` is baked into the auto-minted token; the request body only
+     * carries `urls` + batch controls.
+     */
+    processUrls(params: CdnProcessUrlsParams): Promise<CdnProcessUrlsResponse>;
+    /** Get the edge upload size/count limits. Mints a user token if none given. */
+    getLimits(params?: {
+        token?: string;
+        namespace?: string;
+    }): Promise<CdnLimitsResponse>;
+    /** Get the available image variant configurations. Mints a user token if none given. */
+    getVariantOptions(params?: {
+        token?: string;
+        namespace?: string;
+    }): Promise<CdnVariantOptionsResponse>;
+    /** List logged files for the caller, optionally filtered by namespace. */
+    list(params?: CdnListParams): Promise<CdnListResponse>;
+    /** Storage statistics for the caller, optionally scoped to a namespace. */
+    stats(params?: CdnStatsParams): Promise<CdnStatsResponse>;
+    /**
+     * Per-namespace usage for a month: ingest (uploaded in the month, incl.
+     * variants) + current active footprint, and the configured caps.
+     */
+    usage(params?: CdnUsageParams): Promise<CdnUsageResponse>;
+    /**
+     * Windowed ingest series (bytes/files uploaded per day or month), zero-filled
+     * over the window — for usage charts.
+     */
+    usageSeries(params?: CdnUsageSeriesParams): Promise<CdnUsageSeriesResponse>;
+    /** Get a single logged file by its id. */
+    get(fileId: number | string): Promise<CdnFileResponse>;
+    /** Soft-delete a logged file. */
+    delete(fileId: number | string): Promise<ApiResponse>;
+    /** Restore a soft-deleted file. */
+    restore(fileId: number | string): Promise<ApiResponse>;
+    /**
+     * Call the CDN edge host with a Bearer token. Uploads pass a `FormData`
+     * body; JSON endpoints pass a plain object. Mirrors HttpClient's
+     * body-first error handling and reuses the shared error builder.
+     */
+    private _edgeRequest;
+}
+//# sourceMappingURL=cdn.d.ts.map

package/dist/cdn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdn.d.ts","sourceRoot":"","sources":["../src/cdn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,iBAAiB,EACjB,yBAAyB,EACzB,aAAa,EACb,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AASrD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,GAAG;IACd,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,2FAA2F;IAC3F,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IAErC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAU;gBAEpB,MAAM,EAAE;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE;IAO9D;;;OAGG;IACG,KAAK,CAAC,MAAM,GAAE,cAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAQnE;;;OAGG;IACG,UAAU,CAAC,MAAM,GAAE,cAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAUxE;;;;OAIG;IACG,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,GAAE,eAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAO5F;;;OAGG;IACG,UAAU,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE,MAAM,GAAE,eAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IASvG;;;;;OAKG;IACG,WAAW,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAMhF,+EAA+E;IACzE,SAAS,CAAC,MAAM,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAKhG,wFAAwF;IAClF,iBAAiB,CAAC,MAAM,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAOhH,0EAA0E;IACpE,IAAI,CAAC,MAAM,GAAE,aAAkB,GAAG,OAAO,CAAC,eAAe,CAAC;IAQhE,2EAA2E;IACrE,KAAK,CAAC,MAAM,GAAE,cAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAQnE;;;OAGG;IACG,KAAK,CAAC,MAAM,GAAE,cAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAQnE;;;OAGG;IACG,WAAW,CAAC,MAAM,GAAE,oBAAyB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAQrF,0CAA0C;IACpC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAO5D,iCAAiC;IAC3B,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAO3D,mCAAmC;IAC7B,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAS5D;;;;OAIG;YACW,YAAY;CA4B3B"}