@adcp/sdk 5.25.1 → 6.1.0

package/dist/lib/server/decisioning/tenant-registry.js

@@ -0,0 +1,503 @@
+"use strict";
+/**
+ * TenantRegistry — multi-tenant deployment helper for the v6.0 decisioning
+ * runtime.
+ *
+ * Holds a map of `agentUrl → TenantConfig` and tracks per-tenant health.
+ * Composes with the existing `serve()` host-routing surface: the registry
+ * returns an `AdcpServer` factory that dispatches based on `ctx.host`.
+ *
+ * **Three health states**, never startup-fatal:
+ *
+ *   - `healthy` — JWKS validated, accepting traffic normally.
+ *   - `unverified` — validation hasn't completed (server starting, or
+ *     JWKS unreachable transiently). Tenant accepts traffic with a
+ *     warning header; framework periodically re-validates.
+ *   - `disabled` — validation failed deterministically (signing key not
+ *     in published JWKS, brand.json malformed). Tenant returns
+ *     `SERVICE_UNAVAILABLE` until an admin recheck succeeds.
+ *
+ * One bad tenant doesn't take down others — health is per-tenant, the
+ * other tenants keep serving.
+ *
+ * Status: Preview / 6.0.
+ *
+ * @public
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createDefaultJwksValidator = createDefaultJwksValidator;
+exports.createTenantRegistry = createTenantRegistry;
+const from_platform_1 = require("./runtime/from-platform");
+// ---------------------------------------------------------------------------
+// Default JWKS validator
+// ---------------------------------------------------------------------------
+/**
+ * Default JWKS validator. Fetches `{agentUrl}/.well-known/brand.json` and
+ * checks that `signingKey.publicJwk` appears in the JWKS keys array.
+ *
+ * Uses the global `fetch`. Network errors classify as `transient`;
+ * 4xx / parse-error / key-not-in-JWKS classify as `permanent`.
+ */
+function createDefaultJwksValidator(opts) {
+    const fetchImpl = opts?.fetchImpl ?? fetch;
+    // 10-second default timeout. A slow brand.json server (or a malicious
+    // one dribbling bytes) would otherwise pin the tenant in `pending`
+    // for the lifetime of the fetch — and `register({ awaitFirstValidation: true })`
+    // would block the booting host indefinitely. Adopters with strict SLAs
+    // pass a tighter value; adopters fronting brand.json behind a slow
+    // CDN can extend it. Round-6 Sec-M1.
+    const timeoutMs = opts?.timeoutMs ?? 10_000;
+    return {
+        async validate({ agentUrl, jwksUrl, signingKey }) {
+            // Explicit jwksUrl wins (sub-routed deployments where brand.json
+            // lives under a path prefix). Default falls back to the spec-
+            // canonical host-root location — `new URL('/.well-known/brand.json',
+            // agentUrl)` REPLACES the path because the second arg starts with
+            // '/'. That's correct for host-level brand identity (one brand per
+            // host), wrong for multi-tenant sub-routed deployments — adopters
+            // there set `TenantConfig.jwksUrl` to point at the per-tenant
+            // brand.json.
+            // Reject empty-string jwksUrl as defense-in-depth — `??` only
+            // catches null/undefined, so an empty string would otherwise
+            // reach `fetch('')` and produce an opaque error. Treat empty as
+            // "use default."
+            const url = jwksUrl && jwksUrl.length > 0 ? jwksUrl : new URL('/.well-known/brand.json', agentUrl).toString();
+            let response;
+            try {
+                response = await fetchImpl(url, { method: 'GET', signal: AbortSignal.timeout(timeoutMs) });
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    recovery: 'transient',
+                    reason: `JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`,
+                };
+            }
+            if (!response.ok) {
+                return {
+                    ok: false,
+                    recovery: response.status >= 500 ? 'transient' : 'permanent',
+                    reason: `JWKS fetch returned ${response.status} ${response.statusText}`,
+                };
+            }
+            let body;
+            try {
+                body = await response.json();
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    recovery: 'permanent',
+                    reason: `JWKS body not JSON: ${err instanceof Error ? err.message : String(err)}`,
+                };
+            }
+            const jwks = body.jwks;
+            if (!jwks || !Array.isArray(jwks.keys)) {
+                return {
+                    ok: false,
+                    recovery: 'permanent',
+                    reason: '`brand.json` has no `jwks.keys` array',
+                };
+            }
+            const matched = jwks.keys.find(k => isMatchingKey(k, signingKey.publicJwk, signingKey.keyId));
+            if (!matched) {
+                return {
+                    ok: false,
+                    recovery: 'permanent',
+                    reason: `signingKey.keyId='${signingKey.keyId}' not present in published JWKS`,
+                };
+            }
+            return { ok: true };
+        },
+    };
+}
+function isMatchingKey(jwk, expected, expectedKid) {
+    if (!jwk || typeof jwk !== 'object')
+        return false;
+    const k = jwk;
+    // Both `kid` AND public-key material must match. `kid` alone is NOT
+    // sufficient — RFC 7517 § 4.5 explicitly notes that `kid` is just a
+    // hint and clashes are possible. An attacker who can publish a JWKS
+    // with a colliding `kid` would otherwise bypass verification.
+    if (typeof k.kid === 'string' && k.kid !== expectedKid)
+        return false;
+    if (k.kty !== expected.kty)
+        return false;
+    // Structural equality on the public-half fields (n/e for RSA, x/y for
+    // EC, x for OKP). A full JWK thumbprint comparison (RFC 7638) would be
+    // more robust but this catches the typical "wrong key" case without
+    // pulling crypto deps in. Asymmetric pubkeys are public — comparing
+    // the components here doesn't need constant-time semantics.
+    if (expected.kty === 'RSA') {
+        return k.n === expected.n && k.e === expected.e;
+    }
+    if (expected.kty === 'EC') {
+        return k.crv === expected.crv && k.x === expected.x && k.y === expected.y;
+    }
+    if (expected.kty === 'OKP') {
+        return k.crv === expected.crv && k.x === expected.x;
+    }
+    return false;
+}
+/**
+ * Resolve the canonical agent URL + the full URL list from a TenantConfig.
+ *
+ * - `agentUrls` (when set) wins. First element is canonical (used for
+ *   JWKS resolution and status reporting).
+ * - `agentUrl` (single-URL form) maps to a one-element list.
+ * - Setting both is a programmer error — refuse explicitly so the
+ *   ambiguity doesn't silently drop one of them.
+ *
+ * Returns `[canonical, allUrls]`. `allUrls` is the routing surface;
+ * `canonical` is what JWKS / status reports use.
+ */
+function resolveTenantUrls(config) {
+    const list = config.agentUrls;
+    const single = config.agentUrl;
+    if (list !== undefined && single !== undefined) {
+        throw new Error('TenantConfig: set exactly one of `agentUrl` (single URL) or `agentUrls` (multi-URL). Setting both is ambiguous.');
+    }
+    if (list !== undefined) {
+        if (list.length === 0) {
+            throw new Error('TenantConfig: `agentUrls` must contain at least one URL when provided.');
+        }
+        return [list[0], list];
+    }
+    if (single !== undefined) {
+        return [single, [single]];
+    }
+    throw new Error('TenantConfig: must provide either `agentUrl` or `agentUrls`.');
+}
+/**
+ * Parse host + path prefix from an agent URL. Normalizes the path:
+ * always starts with `/`; trailing `/` stripped unless the prefix is
+ * itself `/` (root, the subdomain-routing case).
+ */
+function parseHostAndPrefix(agentUrl) {
+    const url = new URL(agentUrl);
+    const host = url.host.toLowerCase();
+    let pathPrefix = url.pathname || '/';
+    if (pathPrefix.length > 1 && pathPrefix.endsWith('/')) {
+        pathPrefix = pathPrefix.slice(0, -1);
+    }
+    return { host, pathPrefix };
+}
+/**
+ * Does `requestPath` fall under tenant's `pathPrefix`?
+ *
+ *   - Tenant prefix `/` matches any path (subdomain-routing case).
+ *   - Tenant prefix `/sales` matches `/sales`, `/sales/mcp`, `/sales/a2a`, etc.
+ *     Does NOT match `/sales-broadcast` (no boundary).
+ *
+ * **Caller contract.** `requestPath` MUST be a normalized URL pathname:
+ * no query string, no fragment, no leading scheme/authority. Express's
+ * `req.path`, Node's `new URL(req.url, base).pathname`, or any
+ * properly-decoded equivalent. Raw `req.url` includes the query string
+ * (`/sales/mcp?token=abc`) which fails the boundary check at the `?`
+ * char. The framework strips query/fragment defensively (see
+ * `stripQueryAndFragment`) but downstream URL normalization (`..`
+ * resolution, percent-decoding) is the caller's responsibility.
+ */
+function pathPrefixMatches(pathPrefix, requestPath) {
+    if (pathPrefix === '/')
+        return true;
+    if (!requestPath.startsWith(pathPrefix))
+        return false;
+    // Boundary check: char immediately after the prefix must be `/` or
+    // end-of-string. Prevents `/sales` from matching `/sales-broadcast`.
+    const next = requestPath.charAt(pathPrefix.length);
+    return next === '' || next === '/';
+}
+/**
+ * Defensive normalization for callers who hand us `req.url` (raw HTTP
+ * path with query / fragment). Strips `?...` and `#...` so the boundary
+ * check in `pathPrefixMatches` works. Idempotent on already-normalized
+ * paths.
+ */
+function stripQueryAndFragment(pathname) {
+    const queryIdx = pathname.indexOf('?');
+    const fragmentIdx = pathname.indexOf('#');
+    let cut = pathname.length;
+    if (queryIdx !== -1 && queryIdx < cut)
+        cut = queryIdx;
+    if (fragmentIdx !== -1 && fragmentIdx < cut)
+        cut = fragmentIdx;
+    return cut === pathname.length ? pathname : pathname.slice(0, cut);
+}
+function createTenantRegistry(opts) {
+    const validator = opts.jwksValidator ?? createDefaultJwksValidator();
+    const autoValidate = opts.autoValidate ?? true;
+    // One-shot footgun guard: developers reaching for `autoValidate: false`
+    // typically expect "skip the validation cost," but the actual semantics
+    // are "every tenant lands in `pending` and `resolveByRequest` silently
+    // refuses traffic until the operator calls `recheck()` on each one."
+    // That divergence is hard to debug without a clue. Surface it once at
+    // construction so the test/dev path stays usable but the production
+    // misuse is visible.
+    if (opts.autoValidate === false) {
+        // eslint-disable-next-line no-console
+        console.warn("[adcp] TenantRegistry created with autoValidate: false — every register() lands tenants in 'pending' " +
+            'health and resolveByRequest will refuse all traffic until you call recheck(tenantId) on each one. ' +
+            'If you wanted to skip validation cost, REMOVE the flag — the default (true) validates in the ' +
+            'background and traffic is served as soon as the first validation succeeds. autoValidate: false ' +
+            'only suits tests that drive recheck() manually.');
+    }
+    const tenants = new Map();
+    function buildServer(config) {
+        const merged = {
+            ...opts.defaultServerOptions,
+            ...config.serverOptions,
+        };
+        return (0, from_platform_1.createAdcpServerFromPlatform)(config.platform, merged);
+    }
+    async function runValidation(tenantId) {
+        const entry = tenants.get(tenantId);
+        if (!entry) {
+            throw new Error(`runValidation: tenant '${tenantId}' not registered`);
+        }
+        const [canonicalUrl, allUrls] = resolveTenantUrls(entry.config);
+        // Multi-URL tenants validate every URL independently. Aliases share the
+        // signing key; if an alias publishes a brand.json that doesn't include
+        // the key (DNS hijack, operator misconfig, stale mirror), traffic to
+        // that alias would receive responses no buyer can verify. Aggregate
+        // failures: tenant is healthy iff ALL URLs validate; first permanent
+        // failure → disabled; transient-only → pending/unverified per existing
+        // policy. The explicit `jwksUrl` override applies to all URLs (the
+        // documented contract for sub-routed deployments).
+        const perUrlResults = [];
+        for (const url of allUrls) {
+            let res;
+            try {
+                res = await validator.validate({
+                    agentUrl: url,
+                    ...(entry.config.jwksUrl !== undefined && { jwksUrl: entry.config.jwksUrl }),
+                    signingKey: entry.config.signingKey,
+                });
+            }
+            catch (err) {
+                res = {
+                    ok: false,
+                    recovery: 'transient',
+                    reason: `validator threw on '${url}': ${err instanceof Error ? err.message : String(err)}`,
+                };
+            }
+            perUrlResults.push({ url, res });
+            // First permanent failure short-circuits — no point hitting the rest;
+            // the tenant is going to disabled regardless.
+            if (!res.ok && res.recovery === 'permanent')
+                break;
+        }
+        // Aggregate: pick the worst outcome across the urls we validated.
+        let result;
+        const firstPermanent = perUrlResults.find(r => !r.res.ok && r.res.recovery === 'permanent');
+        const firstTransient = perUrlResults.find(r => !r.res.ok && r.res.recovery === 'transient');
+        if (firstPermanent) {
+            result = {
+                ok: false,
+                recovery: 'permanent',
+                reason: `${firstPermanent.url}: ${firstPermanent.res.reason}`,
+            };
+        }
+        else if (firstTransient) {
+            result = {
+                ok: false,
+                recovery: 'transient',
+                reason: `${firstTransient.url}: ${firstTransient.res.reason}`,
+            };
+        }
+        else {
+            result = { ok: true };
+        }
+        const now = new Date().toISOString();
+        const wasFirstValidation = entry.status.health === 'pending';
+        const baseStatus = { tenantId, agentUrl: canonicalUrl, agentUrls: allUrls, lastCheckedAt: now };
+        let status;
+        if (result.ok) {
+            status = { ...baseStatus, health: 'healthy' };
+        }
+        else if (result.recovery === 'transient') {
+            // Transient failure on FIRST validation → stay `pending` (refuse
+            // traffic). Transient failure AFTER first success → `unverified`
+            // (graceful degradation — the tenant's known good).
+            status = {
+                ...baseStatus,
+                health: wasFirstValidation ? 'pending' : 'unverified',
+                reason: result.reason,
+            };
+        }
+        else {
+            // Permanent failure → `disabled` regardless of prior state. The
+            // signing-key material doesn't match what's published; refusing
+            // traffic is the safe default.
+            status = { ...baseStatus, health: 'disabled', reason: result.reason };
+        }
+        entry.status = status;
+        return status;
+    }
+    return {
+        register(tenantId, config, opts) {
+            if (tenants.has(tenantId)) {
+                throw new Error(`tenant '${tenantId}' already registered; unregister first`);
+            }
+            const [canonicalUrl, allUrls] = resolveTenantUrls(config);
+            const routes = allUrls.map(url => parseHostAndPrefix(url));
+            // Reject overlapping (host, pathPrefix) routes against already-registered
+            // tenants. Without this, two tenants can claim the same alias host
+            // silently — `resolveByRequest` picks the first-inserted (deterministic
+            // per-process via Map insertion order, but cross-process flaky on
+            // restart-order changes). Surface the collision now rather than
+            // discover it in production. Round-1 expert review (security-medium).
+            for (const route of routes) {
+                for (const [otherId, otherEntry] of tenants) {
+                    for (const otherRoute of otherEntry.routes) {
+                        if (otherRoute.host === route.host && otherRoute.pathPrefix === route.pathPrefix) {
+                            throw new Error(`tenant '${tenantId}' route ${route.host}${route.pathPrefix} collides with tenant '${otherId}'; ` +
+                                `register them under distinct hosts or path prefixes`);
+                        }
+                    }
+                }
+            }
+            const server = buildServer(config);
+            const initialStatus = {
+                tenantId,
+                agentUrl: canonicalUrl,
+                agentUrls: allUrls,
+                // `pending` (NOT `unverified`) — first validation hasn't run.
+                // resolveByHost refuses traffic until validation succeeds at
+                // least once. Closes the register-then-serve race window.
+                health: 'pending',
+                reason: 'awaiting initial JWKS validation',
+                lastCheckedAt: new Date().toISOString(),
+            };
+            const entry = {
+                config: config,
+                server,
+                status: initialStatus,
+                routes,
+            };
+            tenants.set(tenantId, entry);
+            // Operability: log when an explicit jwksUrl points somewhere
+            // OTHER than the spec-canonical agentUrl-relative location. An
+            // admin who pasted a typo into config gets a visible audit trail
+            // before the tenant goes live; a sub-routed deployment that
+            // intentionally overrode sees the configured URL confirmed.
+            // One-shot per register() — not per validate() — so periodic
+            // rechecks don't spam logs.
+            if (config.jwksUrl && config.jwksUrl.length > 0) {
+                let canonical;
+                try {
+                    canonical = new URL('/.well-known/brand.json', canonicalUrl).toString();
+                }
+                catch {
+                    canonical = '<invalid agentUrl>';
+                }
+                if (config.jwksUrl !== canonical) {
+                    // eslint-disable-next-line no-console
+                    console.info(`[adcp] tenant '${tenantId}' jwksUrl override: '${config.jwksUrl}' (spec-canonical from agentUrl: '${canonical}')`);
+                }
+            }
+            if (!autoValidate)
+                return;
+            const validation = runValidation(tenantId);
+            entry.pending = validation;
+            // Always clear pending on settle so subsequent recheck() doesn't
+            // dedupe against a settled promise.
+            validation.finally(() => {
+                if (entry.pending === validation)
+                    entry.pending = undefined;
+            });
+            if (opts?.awaitFirstValidation) {
+                return validation;
+            }
+            // Background fire — log throws so they don't surface as
+            // UnhandledPromiseRejection. (runValidation now catches inside;
+            // belt-and-suspenders.)
+            validation.catch((err) => {
+                // eslint-disable-next-line no-console
+                console.warn(`[adcp] tenant '${tenantId}' validation threw:`, err);
+            });
+        },
+        unregister(tenantId) {
+            tenants.delete(tenantId);
+        },
+        resolveByHost(host) {
+            // Convenience for subdomain-routed deployments — request path is
+            // implicitly `/`, which only matches root-prefix tenants.
+            return this.resolveByRequest(host, '/');
+        },
+        resolveByRequest(host, pathname) {
+            const lowered = host.toLowerCase();
+            // Strip query/fragment defensively — adopters wiring `req.url`
+            // (Node raw HTTP) instead of `req.path` (Express normalized)
+            // would otherwise fail the boundary check on `/sales/mcp?x=1`.
+            const cleanPath = stripQueryAndFragment(pathname);
+            let best = null;
+            for (const [tenantId, entry] of tenants) {
+                // Refuse traffic for pending (first validation hasn't succeeded)
+                // and disabled (permanent validation failure). `unverified` —
+                // previously healthy, latest recheck failed transiently — still
+                // resolves; operators choose graceful degradation here.
+                if (entry.status.health === 'pending' || entry.status.health === 'disabled')
+                    continue;
+                // Multi-URL tenants register one route per `agentUrls[]` entry.
+                // Longest-prefix match across ALL routes on ALL tenants wins —
+                // a tenant with `/sales-broadcast` on alias-host beats a tenant
+                // with `/sales` on canonical-host for `/sales-broadcast/mcp`.
+                for (const route of entry.routes) {
+                    if (route.host !== lowered)
+                        continue;
+                    if (!pathPrefixMatches(route.pathPrefix, cleanPath))
+                        continue;
+                    const prefixLength = route.pathPrefix === '/' ? 0 : route.pathPrefix.length;
+                    if (best === null || prefixLength > best.prefixLength) {
+                        best = { tenantId, entry, prefixLength };
+                    }
+                }
+            }
+            if (best === null)
+                return null;
+            return { tenantId: best.tenantId, config: best.entry.config, server: best.entry.server };
+        },
+        get(tenantId) {
+            const entry = tenants.get(tenantId);
+            if (!entry)
+                return null;
+            // Same health gate as resolveByRequest — pending tenants haven't
+            // been validated yet, disabled tenants permanently failed.
+            // unverified (post-healthy transient failure) resolves normally.
+            if (entry.status.health === 'pending' || entry.status.health === 'disabled')
+                return null;
+            return { tenantId, config: entry.config, server: entry.server };
+        },
+        getStatus(tenantId) {
+            const entry = tenants.get(tenantId);
+            return entry?.status ?? null;
+        },
+        list() {
+            return Array.from(tenants.values()).map(e => e.status);
+        },
+        async recheck(tenantId) {
+            const entry = tenants.get(tenantId);
+            if (!entry) {
+                throw new Error(`recheck: tenant '${tenantId}' not registered`);
+            }
+            // Dedupe concurrent rechecks against the same tenant.
+            if (entry.pending) {
+                try {
+                    await entry.pending;
+                }
+                catch {
+                    // ignore — fall through to fresh recheck
+                }
+            }
+            entry.pending = runValidation(tenantId);
+            try {
+                return await entry.pending;
+            }
+            finally {
+                entry.pending = undefined;
+            }
+        },
+    };
+}
+//# sourceMappingURL=tenant-registry.js.map

package/dist/lib/server/decisioning/tenant-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-registry.js","sourceRoot":"","sources":["../../../../src/lib/server/decisioning/tenant-registry.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;;AA6QH,gEAsEC;AAsID,oDAyRC;AA9uBD,2DAAuE;AA8PvE,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E;;;;;;GAMG;AACH,SAAgB,0BAA0B,CAAC,IAAuD;IAChG,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,KAAK,CAAC;IAC3C,sEAAsE;IACtE,mEAAmE;IACnE,iFAAiF;IACjF,uEAAuE;IACvE,mEAAmE;IACnE,qCAAqC;IACrC,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,MAAM,CAAC;IAC5C,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE;YAC9C,iEAAiE;YACjE,8DAA8D;YAC9D,qEAAqE;YACrE,kEAAkE;YAClE,mEAAmE;YACnE,kEAAkE;YAClE,8DAA8D;YAC9D,cAAc;YACd,8DAA8D;YAC9D,6DAA6D;YAC7D,gEAAgE;YAChE,iBAAiB;YACjB,MAAM,GAAG,GAAG,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC9G,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC7F,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,QAAQ,EAAE,WAAW;oBACrB,MAAM,EAAE,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBACjF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,QAAQ,EAAE,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW;oBAC5D,MAAM,EAAE,uBAAuB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE;iBACxE,CAAC;YACJ,CAAC;YACD,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,QAAQ,EAAE,WAAW;oBACrB,MAAM,EAAE,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBAClF,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAI,IAAwC,CAAC,IAAI,CAAC;YAC5D,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,QAAQ,EAAE,WAAW;oBACrB,MAAM,EAAE,uCAAuC;iBAChD,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9F,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,QAAQ,EAAE,WAAW;oBACrB,MAAM,EAAE,qBAAqB,UAAU,CAAC,KAAK,iCAAiC;iBAC/E,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,GAAY,EAAE,QAAoB,EAAE,WAAmB;IAC5E,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,8DAA8D;IAC9D,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACzC,sEAAsE;IACtE,uEAAuE;IACvE,oEAAoE;IACpE,oEAAoE;IACpE,4DAA4D;IAC5D,IAAI,QAAQ,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,QAAQ,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAqBD;;;;;;;;;;;GAWG;AACH,SAAS,iBAAiB,CAAC,MAAoB;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC/B,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,iHAAiH,CAClH,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;AAClF,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,UAAU,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC;IACrC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,iBAAiB,CAAC,UAAkB,EAAE,WAAmB;IAChE,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,mEAAmE;IACnE,qEAAqE;IACrE,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC1B,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,QAAQ,GAAG,GAAG;QAAE,GAAG,GAAG,QAAQ,CAAC;IACtD,IAAI,WAAW,KAAK,CAAC,CAAC,IAAI,WAAW,GAAG,GAAG;QAAE,GAAG,GAAG,WAAW,CAAC;IAC/D,OAAO,GAAG,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,SAAgB,oBAAoB,CAAC,IAA2B;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,IAAI,0BAA0B,EAAE,CAAC;IACrE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;IAC/C,wEAAwE;IACxE,wEAAwE;IACxE,uEAAuE;IACvE,qEAAqE;IACrE,sEAAsE;IACtE,oEAAoE;IACpE,qBAAqB;IACrB,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;QAChC,sCAAsC;QACtC,OAAO,CAAC,IAAI,CACV,uGAAuG;YACrG,oGAAoG;YACpG,+FAA+F;YAC/F,iGAAiG;YACjG,iDAAiD,CACpD,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE/C,SAAS,WAAW,CAAC,MAAoB;QACvC,MAAM,MAAM,GAAwC;YAClD,GAAG,IAAI,CAAC,oBAAoB;YAC5B,GAAG,MAAM,CAAC,aAAa;SACxB,CAAC;QACF,OAAO,IAAA,4CAA4B,EAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,UAAU,aAAa,CAAC,QAAgB;QAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,kBAAkB,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChE,wEAAwE;QACxE,uEAAuE;QACvE,qEAAqE;QACrE,oEAAoE;QACpE,qEAAqE;QACrE,uEAAuE;QACvE,mEAAmE;QACnE,mDAAmD;QACnD,MAAM,aAAa,GAAsD,EAAE,CAAC;QAC5E,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,GAAyB,CAAC;YAC9B,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC;oBAC7B,QAAQ,EAAE,GAAG;oBACb,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC5E,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;iBACpC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,GAAG;oBACJ,EAAE,EAAE,KAAK;oBACT,QAAQ,EAAE,WAAW;oBACrB,MAAM,EAAE,uBAAuB,GAAG,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBAC3F,CAAC;YACJ,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACjC,sEAAsE;YACtE,8CAA8C;YAC9C,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW;gBAAE,MAAM;QACrD,CAAC;QACD,kEAAkE;QAClE,IAAI,MAA4B,CAAC;QACjC,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;QAC5F,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;QAC5F,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,GAAG;gBACP,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,WAAW;gBACrB,MAAM,EAAE,GAAG,cAAc,CAAC,GAAG,KAAK,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE;aAC9D,CAAC;QACJ,CAAC;aAAM,IAAI,cAAc,EAAE,CAAC;YAC1B,MAAM,GAAG;gBACP,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,WAAW;gBACrB,MAAM,EAAE,GAAG,cAAc,CAAC,GAAG,KAAK,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE;aAC9D,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC;QAC7D,MAAM,UAAU,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;QAChG,IAAI,MAAoB,CAAC;QACzB,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,GAAG,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAChD,CAAC;aAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC3C,iEAAiE;YACjE,iEAAiE;YACjE,oDAAoD;YACpD,MAAM,GAAG;gBACP,GAAG,UAAU;gBACb,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;gBACrD,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,gEAAgE;YAChE,gEAAgE;YAChE,+BAA+B;YAC/B,MAAM,GAAG,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACxE,CAAC;QACD,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO;QACL,QAAQ,CACN,QAAgB,EAChB,MAAuB,EACvB,IAAyC;YAEzC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,WAAW,QAAQ,wCAAwC,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG,iBAAiB,CAAC,MAAiC,CAAC,CAAC;YACrF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3D,0EAA0E;YAC1E,mEAAmE;YACnE,wEAAwE;YACxE,kEAAkE;YAClE,gEAAgE;YAChE,sEAAsE;YACtE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,KAAK,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,OAAO,EAAE,CAAC;oBAC5C,KAAK,MAAM,UAAU,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;wBAC3C,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,UAAU,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;4BACjF,MAAM,IAAI,KAAK,CACb,WAAW,QAAQ,WAAW,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,UAAU,0BAA0B,OAAO,KAAK;gCAC/F,qDAAqD,CACxD,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAiC,CAAC,CAAC;YAC9D,MAAM,aAAa,GAAiB;gBAClC,QAAQ;gBACR,QAAQ,EAAE,YAAY;gBACtB,SAAS,EAAE,OAAO;gBAClB,8DAA8D;gBAC9D,6DAA6D;gBAC7D,0DAA0D;gBAC1D,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,kCAAkC;gBAC1C,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACxC,CAAC;YACF,MAAM,KAAK,GAAgB;gBACzB,MAAM,EAAE,MAAiC;gBACzC,MAAM;gBACN,MAAM,EAAE,aAAa;gBACrB,MAAM;aACP,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC7B,6DAA6D;YAC7D,+DAA+D;YAC/D,iEAAiE;YACjE,4DAA4D;YAC5D,4DAA4D;YAC5D,6DAA6D;YAC7D,4BAA4B;YAC5B,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChD,IAAI,SAAiB,CAAC;gBACtB,IAAI,CAAC;oBACH,SAAS,GAAG,IAAI,GAAG,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC1E,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS,GAAG,oBAAoB,CAAC;gBACnC,CAAC;gBACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBACjC,sCAAsC;oBACtC,OAAO,CAAC,IAAI,CACV,kBAAkB,QAAQ,wBAAwB,MAAM,CAAC,OAAO,qCAAqC,SAAS,IAAI,CACnH,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,CAAC,YAAY;gBAAE,OAAO;YAC1B,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC3C,KAAK,CAAC,OAAO,GAAG,UAAU,CAAC;YAC3B,iEAAiE;YACjE,oCAAoC;YACpC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE;gBACtB,IAAI,KAAK,CAAC,OAAO,KAAK,UAAU;oBAAE,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC;YAC9D,CAAC,CAAC,CAAC;YACH,IAAI,IAAI,EAAE,oBAAoB,EAAE,CAAC;gBAC/B,OAAO,UAAU,CAAC;YACpB,CAAC;YACD,wDAAwD;YACxD,gEAAgE;YAChE,wBAAwB;YACxB,UAAU,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBAChC,sCAAsC;gBACtC,OAAO,CAAC,IAAI,CAAC,kBAAkB,QAAQ,qBAAqB,EAAE,GAAG,CAAC,CAAC;YACrE,CAAC,CAAC,CAAC;QACL,CAAC;QAED,UAAU,CAAC,QAAgB;YACzB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,aAAa,CAAC,IAAY;YACxB,iEAAiE;YACjE,0DAA0D;YAC1D,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;QAED,gBAAgB,CACd,IAAY,EACZ,QAAgB;YAEhB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACnC,+DAA+D;YAC/D,6DAA6D;YAC7D,+DAA+D;YAC/D,MAAM,SAAS,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YAClD,IAAI,IAAI,GAA0E,IAAI,CAAC;YACvF,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxC,iEAAiE;gBACjE,8DAA8D;gBAC9D,gEAAgE;gBAChE,wDAAwD;gBACxD,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU;oBAAE,SAAS;gBACtF,gEAAgE;gBAChE,+DAA+D;gBAC/D,gEAAgE;gBAChE,8DAA8D;gBAC9D,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACjC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;wBAAE,SAAS;oBACrC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC;wBAAE,SAAS;oBAC9D,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;oBAC5E,IAAI,IAAI,KAAK,IAAI,IAAI,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;wBACtD,IAAI,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;oBAC3C,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC/B,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAC3F,CAAC;QAED,GAAG,CAAC,QAAgB;YAClB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,iEAAiE;YACjE,2DAA2D;YAC3D,iEAAiE;YACjE,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC;YACzF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAClE,CAAC;QAED,SAAS,CAAC,QAAgB;YACxB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpC,OAAO,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC;QAC/B,CAAC;QAED,IAAI;YACF,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,QAAgB;YAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,kBAAkB,CAAC,CAAC;YAClE,CAAC;YACD,sDAAsD;YACtD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,OAAO,CAAC;gBACtB,CAAC;gBAAC,MAAM,CAAC;oBACP,yCAAyC;gBAC3C,CAAC;YACH,CAAC;YACD,KAAK,CAAC,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,CAAC;gBACH,OAAO,MAAM,KAAK,CAAC,OAAO,CAAC;YAC7B,CAAC;oBAAS,CAAC;gBACT,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC;YAC5B,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/server/express-adapter.d.ts

@@ -29,7 +29,7 @@
  *
  * ```ts
  * import express from 'express';
- * import { createAdcpServer, createExpressAdapter } from '@adcp/sdk/server';
+ * import { createAdcpServer, createExpressAdapter } from '@adcp/sdk/server/legacy/v5';
  *
  * const agent = createAdcpServer({ ...handlers });
  * const adapter = createExpressAdapter({

package/dist/lib/server/express-adapter.js

@@ -30,7 +30,7 @@
  *
  * ```ts
  * import express from 'express';
- * import { createAdcpServer, createExpressAdapter } from '@adcp/sdk/server';
+ * import { createAdcpServer, createExpressAdapter } from '@adcp/sdk/server/legacy/v5';
  *
  * const agent = createAdcpServer({ ...handlers });
  * const adapter = createExpressAdapter({

package/dist/lib/server/governance.d.ts

@@ -22,7 +22,7 @@
  *
  * @example
  * ```typescript
- * import { createAdcpServer, checkGovernance, governanceDeniedError } from '@adcp/sdk/server';
+ * import { createAdcpServer, checkGovernance, governanceDeniedError } from '@adcp/sdk/server/legacy/v5';
  *
  * const server = createAdcpServer({
  *   name: 'My Publisher', version: '1.0.0',

package/dist/lib/server/governance.js

@@ -23,7 +23,7 @@
  *
  * @example
  * ```typescript
- * import { createAdcpServer, checkGovernance, governanceDeniedError } from '@adcp/sdk/server';
+ * import { createAdcpServer, checkGovernance, governanceDeniedError } from '@adcp/sdk/server/legacy/v5';
  *
  * const server = createAdcpServer({
  *   name: 'My Publisher', version: '1.0.0',

package/dist/lib/server/idempotency/store.d.ts

@@ -20,7 +20,7 @@
  *
  * @example
  * ```typescript
- * import { createAdcpServer, createIdempotencyStore, memoryBackend } from '@adcp/sdk/server';
+ * import { createAdcpServer, createIdempotencyStore, memoryBackend } from '@adcp/sdk/server/legacy/v5';
  *
  * const idempotency = createIdempotencyStore({
  *   backend: memoryBackend(),

package/dist/lib/server/idempotency/store.js

@@ -21,7 +21,7 @@
  *
  * @example
  * ```typescript
- * import { createAdcpServer, createIdempotencyStore, memoryBackend } from '@adcp/sdk/server';
+ * import { createAdcpServer, createIdempotencyStore, memoryBackend } from '@adcp/sdk/server/legacy/v5';
  *
  * const idempotency = createIdempotencyStore({
  *   backend: memoryBackend(),

package/dist/lib/server/index.d.ts

@@ -1,5 +1,9 @@
 export { adcpError } from './errors';
 export type { AdcpErrorOptions, AdcpErrorPayload, AdcpErrorResponse } from './errors';
+export { normalizeError, normalizeErrors } from './normalize-errors';
+export type { NormalizedError } from './normalize-errors';
+export { pickSafeDetails } from './pick-safe-details';
+export type { PickSafeDetailsOptions } from './pick-safe-details';
 export { wrapEnvelope } from './wrap-envelope';
 export type { WrapEnvelopeOptions } from './wrap-envelope';
 export { ERROR_ENVELOPE_FIELD_ALLOWLIST, DEFAULT_ERROR_ENVELOPE_FIELDS, ADCP_ERROR_FIELD_ALLOWLIST, CONFLICT_ADCP_ERROR_ALLOWLIST, } from './envelope-allowlist';
@@ -28,9 +32,9 @@ export type { AdcpStateStore, InMemoryStateStoreOptions, ListOptions, ListResult
 export { PostgresStateStore, getAdcpStateMigration, ADCP_STATE_MIGRATION } from './postgres-state-store';
 export type { PostgresStateStoreOptions } from './postgres-state-store';
 export { structuredSerialize, structuredDeserialize } from './structured-serialize';
-export { createAdcpServer, requireSessionKey, ADCP_PRE_TRANSPORT, ADCP_SIGNED_REQUESTS_STATE, } from './create-adcp-server';
+export { requireSessionKey, ADCP_PRE_TRANSPORT, ADCP_SIGNED_REQUESTS_STATE } from './create-adcp-server';
 export type { AdcpServer, AdcpServerComplianceApi, AdcpServerTransport, AdcpTestRequest, AdcpTestToolsCallRequest, AdcpTestResponse, } from './adcp-server';
-export type { AdcpServerConfig, AdcpToolMap, AdcpServerToolName, AdcpCapabilitiesConfig, AdcpCapabilitiesOverrides, AdcpCustomToolConfig, AdcpLogger, SignedRequestsConfig, AdcpPreTransport, AdcpSignedRequestsState, HandlerContext, SessionKeyContext, MediaBuyHandlers, SignalsHandlers, CreativeHandlers, GovernanceHandlers, AccountHandlers, EventTrackingHandlers, SponsoredIntelligenceHandlers, ResolveAccountContext, } from './create-adcp-server';
+export type { AdcpServerConfig, WebhooksConfig, AdcpToolMap, AdcpServerToolName, AdcpCapabilitiesConfig, AdcpCapabilitiesOverrides, AdcpCustomToolConfig, AdcpLogger, SignedRequestsConfig, AdcpPreTransport, AdcpSignedRequestsState, HandlerContext, SessionKeyContext, MediaBuyHandlers, SignalsHandlers, CreativeHandlers, GovernanceHandlers, AccountHandlers, EventTrackingHandlers, SponsoredIntelligenceHandlers, ResolveAccountContext, } from './create-adcp-server';
 export { DEFAULT_REPORTING_CAPABILITIES } from './product-defaults';
 export { isSandboxRequest, mergeSeededProductsIntoResponse, filterValidSeededProducts, bridgeFromTestControllerStore, bridgeFromSessionStore, } from './test-controller-bridge';
 export type { TestControllerBridge, TestControllerBridgeContext, BridgeFromSessionStoreOptions, } from './test-controller-bridge';
@@ -47,4 +51,7 @@ export { checkGovernance, governanceDeniedError } from './governance';
 export type { CheckGovernanceOptions, GovernanceCallResult, GovernanceApproved, GovernanceDenied, GovernanceConditions, } from './governance';
 export { resolvePropertyList, resolveCollectionList, matchesPropertyList, matchesCollectionList, } from './targeting-helpers';
 export type { ResolvedPropertyList, ResolvedCollectionList, ResolvedCollection, ResolveListOptions, } from './targeting-helpers';
+export * from './decisioning';
+export { createCtxMetadataStore, memoryCtxMetadataStore, pgCtxMetadataStore, getCtxMetadataMigration, cleanupExpiredCtxMetadata, CTX_METADATA_MIGRATION, CtxMetadataValidationError, ADCP_INTERNAL_TAG, DEFAULT_MAX_VALUE_BYTES, MAX_TTL_SECONDS, stripCtxMetadata, hasCtxMetadata, ctxMetadataResultKey, scopeCtxMetadataKey, } from './ctx-metadata';
+export type { CtxMetadataStore, CtxMetadataStoreConfig, CtxMetadataBackend, CtxMetadataEntry, CtxMetadataRef, ResourceKind as CtxMetadataResourceKind, MemoryCtxMetadataStoreOptions, PgCtxMetadataBackendOptions, WireShape, } from './ctx-metadata';
 //# sourceMappingURL=index.d.ts.map

package/dist/lib/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAEtF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,YAAY,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE3D,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,2BAA2B,EAC3B,sBAAsB,EACtB,oBAAoB,EACpB,2BAA2B,EAC3B,qBAAqB,EACrB,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,yBAAyB,EACzB,2BAA2B,EAC3B,4BAA4B,EAC5B,wBAAwB,EACxB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACrB,4BAA4B,EAC5B,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,YAAY,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE5E,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,EACvB,iBAAiB,EACjB,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,6BAA6B,EAC7B,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,EACb,IAAI,GACL,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,WAAW,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEnF,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,4BAA4B,EAC5B,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACzE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAErF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE/E,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,KAAK,EACL,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,SAAS,EACT,mBAAmB,EACnB,4BAA4B,EAC5B,yBAAyB,EACzB,mBAAmB,EACnB,6BAA6B,EAC7B,4BAA4B,EAC5B,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,mCAAmC,GACpC,MAAM,QAAQ,CAAC;AAChB,YAAY,EACV,aAAa,EACb,aAAa,EACb,UAAU,EACV,mBAAmB,EACnB,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,GACpB,MAAM,QAAQ,CAAC;AAEhB,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,YAAY,EACV,0BAA0B,EAC1B,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,8BAA8B,EAC9B,2BAA2B,EAC3B,4BAA4B,EAC5B,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,qCAAqC,EACrC,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,kBAAkB,EAClB,0BAA0B,EAC1B,iBAAiB,EACjB,oBAAoB,EACpB,WAAW,EACX,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,UAAU,EACV,mBAAmB,EACnB,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,cAAc,EACd,yBAAyB,EACzB,WAAW,EACX,UAAU,EACV,qBAAqB,EACrB,gBAAgB,EAChB,cAAc,EACd,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACzG,YAAY,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAExE,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEpF,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,UAAU,EACV,uBAAuB,EACvB,mBAAmB,EACnB,eAAe,EACf,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,gBAAgB,EAChB,WAAW,EACX,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,EACzB,oBAAoB,EACpB,UAAU,EACV,oBAAoB,EACpB,gBAAgB,EAChB,uBAAuB,EACvB,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,qBAAqB,EACrB,6BAA6B,EAC7B,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,EACL,gBAAgB,EAChB,+BAA+B,EAC/B,yBAAyB,EACzB,6BAA6B,EAC7B,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,oBAAoB,EACpB,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,aAAa,EACb,SAAS,EACT,uBAAuB,EACvB,qBAAqB,EACrB,yBAAyB,EACzB,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,gBAAgB,EAChB,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACrE,YAAY,EACV,UAAU,EACV,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAChF,YAAY,EACV,cAAc,EACd,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,0BAA0B,EAC1B,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AACnH,YAAY,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEjF,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACtE,YAAY,EACV,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAEtF,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrE,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE1D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,YAAY,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAElE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,YAAY,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE3D,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,2BAA2B,EAC3B,sBAAsB,EACtB,oBAAoB,EACpB,2BAA2B,EAC3B,qBAAqB,EACrB,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,yBAAyB,EACzB,2BAA2B,EAC3B,4BAA4B,EAC5B,wBAAwB,EACxB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACrB,4BAA4B,EAC5B,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,YAAY,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE5E,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,EACvB,iBAAiB,EACjB,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,6BAA6B,EAC7B,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,EACb,IAAI,GACL,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,WAAW,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEnF,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,4BAA4B,EAC5B,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACzE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAErF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE/E,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,KAAK,EACL,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,SAAS,EACT,mBAAmB,EACnB,4BAA4B,EAC5B,yBAAyB,EACzB,mBAAmB,EACnB,6BAA6B,EAC7B,4BAA4B,EAC5B,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,mCAAmC,GACpC,MAAM,QAAQ,CAAC;AAChB,YAAY,EACV,aAAa,EACb,aAAa,EACb,UAAU,EACV,mBAAmB,EACnB,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,GACpB,MAAM,QAAQ,CAAC;AAEhB,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,YAAY,EACV,0BAA0B,EAC1B,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,8BAA8B,EAC9B,2BAA2B,EAC3B,4BAA4B,EAC5B,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,qCAAqC,EACrC,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,kBAAkB,EAClB,0BAA0B,EAC1B,iBAAiB,EACjB,oBAAoB,EACpB,WAAW,EACX,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,UAAU,EACV,mBAAmB,EACnB,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,cAAc,EACd,yBAAyB,EACzB,WAAW,EACX,UAAU,EACV,qBAAqB,EACrB,gBAAgB,EAChB,cAAc,EACd,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACzG,YAAY,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAExE,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAUpF,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AACzG,YAAY,EACV,UAAU,EACV,uBAAuB,EACvB,mBAAmB,EACnB,eAAe,EACf,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,EACzB,oBAAoB,EACpB,UAAU,EACV,oBAAoB,EACpB,gBAAgB,EAChB,uBAAuB,EACvB,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,qBAAqB,EACrB,6BAA6B,EAC7B,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,EACL,gBAAgB,EAChB,+BAA+B,EAC/B,yBAAyB,EACzB,6BAA6B,EAC7B,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,oBAAoB,EACpB,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,aAAa,EACb,SAAS,EACT,uBAAuB,EACvB,qBAAqB,EACrB,yBAAyB,EACzB,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,gBAAgB,EAChB,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACrE,YAAY,EACV,UAAU,EACV,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAChF,YAAY,EACV,cAAc,EACd,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,0BAA0B,EAC1B,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AACnH,YAAY,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEjF,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACtE,YAAY,EACV,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAyB7B,cAAc,eAAe,CAAC;AAY9B,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,EACvB,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,iBAAiB,EACjB,uBAAuB,EACvB,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,gBAAgB,EAChB,sBAAsB,EACtB,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,YAAY,IAAI,uBAAuB,EACvC,6BAA6B,EAC7B,2BAA2B,EAC3B,SAAS,GACV,MAAM,gBAAgB,CAAC"}