@agentunion/fastaun 0.5.31 → 0.5.32

package/dist/pubsub/credentials.js

@@ -0,0 +1,360 @@
+import { buildRequestBinding, createCredential, digest, validateCredentialCapability, verifyCredentialChain, verifyCredentialSignature, verifyRegistrationReceipt } from '../org-protocol.js';
+import { identifier } from './channel.js';
+import { PubSubError } from './errors.js';
+export class SDKCredentials {
+    sdk;
+    serviceAid;
+    options;
+    revoked = new Set();
+    verified = new Map();
+    generation = 0;
+    bodyBudget;
+    verifiedBytes = 0;
+    nextVerifiedExpiry = Infinity;
+    verifiedLimits = { items: 4096, bytes: 8 * 1024 * 1024 };
+    records;
+    loaded;
+    tail = Promise.resolve();
+    constructor(sdk, serviceAid = String(sdk.aid ?? ''), options = {}) {
+        this.sdk = sdk;
+        this.serviceAid = serviceAid;
+        this.options = options;
+        this.records = { version: 1, service_aid: serviceAid, issues: {}, revokes: {} };
+    }
+    async issue(subjectAid, scope, expiresAt, requestId) {
+        return this.serial(async () => {
+            await this.load();
+            try {
+                const input = { subject: subjectAid, scope, expires_at: expiresAt };
+                let record = this.records.issues[requestId];
+                if (record && digest(record.input) !== digest(input))
+                    throw new PubSubError('REQUEST_CONFLICT');
+                if (!record) {
+                    const signer = this.options.signer ? await this.options.signer(this.serviceAid) : await this.sdk._credentialRenewalSigner?.(this.serviceAid) ?? await this.sdk._credentialSigningIdentity?.(this.serviceAid) ?? (this.sdk.currentAid?.aid === this.serviceAid ? this.sdk.currentAid : null);
+                    if (!signer)
+                        throw new PubSubError('CREDENTIAL_UNAVAILABLE');
+                    const grant = await createCredential({ sub: subjectAid, aud: [this.serviceAid], delegate: false, exp: Math.floor(expiresAt / 1000), key_version: signer.certFingerprint, cap: scope.map(item => ({ ns: 'event', action: item.action, resource: item.event_name, constraints: [] })) }, signer);
+                    record = { input: structuredClone(input), grant, request: this.request('credential.register', String(grant.cid), requestId, { credential: grant, registrar_aid: this.serviceAid }) };
+                    this.records.issues[requestId] = record;
+                }
+                await this.save();
+                if (record.result)
+                    return structuredClone(record.result);
+                let result;
+                if (Date.now() / 1000 >= Number(record.request.request_binding.exp)) {
+                    const proof = await this.recoverRegistration(record);
+                    result = { grant: record.grant, cid: record.grant.cid, receipt: null, registration_confirmation: proof };
+                }
+                else {
+                    const response = await this.register(record);
+                    const receipt = response?.registrationReceipt ?? response?.receipt;
+                    if (!receipt || !receipt.signature)
+                        throw new PubSubError('CREDENTIAL_UNAVAILABLE');
+                    const certificate = await this.certificate(this.authority, String(receipt.signature.cert_fingerprint));
+                    await verifyRegistrationReceipt(receipt, record.grant, record.request, () => certificate, this.authority, Math.floor(Date.now() / 1000));
+                    result = { grant: record.grant, cid: record.grant.cid, receipt };
+                }
+                record.result = structuredClone(result);
+                await this.save();
+                return structuredClone(result);
+            }
+            catch (error) {
+                if (error instanceof PubSubError)
+                    throw error;
+                throw new PubSubError('CREDENTIAL_UNAVAILABLE', String(error));
+            }
+        });
+    }
+    async verify(grant, subjectAid, scope, request, deadline = request?.expires_at) {
+        const generation = this.generation;
+        await this.beforeDeadline(deadline, () => this.load());
+        if (!scope.length || this.isRevoked(grant))
+            throw new PubSubError('FORBIDDEN');
+        await this.assertNotRevoked(grant, deadline);
+        this.cleanupVerified();
+        const facade = this.sdk.credential;
+        if (typeof facade?.verify !== 'function')
+            throw new PubSubError('CREDENTIAL_UNAVAILABLE');
+        const identity = digest([subjectAid, grant]);
+        const previous = this.verified.get(identity)?.params;
+        if (!request && scope.some(item => !previous?.has(`${item.event_name}\0${item.action}`)))
+            throw new PubSubError('FORBIDDEN');
+        const documents = [grant, ...(Array.isArray(grant.proof_chain) ? grant.proof_chain : [])];
+        if (grant.sub !== subjectAid || documents.at(-1)?.iss !== this.serviceAid || documents.some(document => Number(document.exp) * 1000 <= Date.now()))
+            throw new PubSubError('FORBIDDEN');
+        const extra = this.options.verificationContext ? await this.beforeDeadline(deadline, () => this.options.verificationContext(subjectAid, request, grant)) : await this.context(grant, deadline);
+        if (typeof extra.resolveCertificate !== 'function' || typeof extra.resolveStatusProof !== 'function')
+            throw new PubSubError('CREDENTIAL_UNAVAILABLE');
+        let proofUntil = Infinity;
+        for (const document of documents) {
+            const proof = extra.resolveStatusProof(String(document.cid));
+            if (!proof || typeof proof.proofExpiresAt !== 'number' || proof.proofExpiresAt * 1000 <= Date.now())
+                throw new PubSubError('CREDENTIAL_UNAVAILABLE');
+            proofUntil = Math.min(proofUntil, proof.proofExpiresAt * 1000);
+        }
+        try {
+            for (const item of scope) {
+                const params = request ?? previous.get(`${item.event_name}\0${item.action}`);
+                const context = { ...extra, resolveCertificate: extra.resolveCertificate, audience: this.serviceAid, subject: subjectAid, rootIssuer: this.serviceAid, ns: 'event', action: item.action, resource: item.event_name, params };
+                if (request)
+                    await this.beforeDeadline(deadline, () => facade.verify(grant, { ...context, method: `pubsub.${request.op}`, target: this.serviceAid, requestId: request.request_id, nonce: request.nonce, requestBinding: request.request_binding }));
+                else {
+                    await this.beforeDeadline(deadline, async () => this.sdk._assertCredentialNotRevoked?.(grant));
+                    await verifyCredentialChain(grant, context.resolveCertificate, cid => extra.resolveStatusProof(cid)?.status, Math.floor(Date.now() / 1000), this.serviceAid);
+                    await validateCredentialCapability(grant, { ns: 'event', action: item.action, resource: item.event_name, params, now: Math.floor(Date.now() / 1000) });
+                }
+            }
+        }
+        catch (error) {
+            if (error instanceof PubSubError && error.code === 'TIMEOUT')
+                throw error;
+            throw new PubSubError('FORBIDDEN', String(error));
+        }
+        this.checkDeadline(deadline);
+        if (generation !== this.generation)
+            throw new PubSubError('SERVICE_CLOSED');
+        if (request) {
+            const saved = new Map(previous);
+            for (const item of scope)
+                saved.set(`${item.event_name}\0${item.action}`, this.verificationParams(grant, item, request));
+            const size = new TextEncoder().encode(JSON.stringify([identity, [...saved]])).byteLength + 128, old = this.verified.get(identity);
+            if ((this.bodyBudget && !this.bodyBudget(size - (old?.size ?? 0))) || (!old && this.verified.size >= this.verifiedLimits.items) || this.verifiedBytes + size - (old?.size ?? 0) > this.verifiedLimits.bytes)
+                throw new PubSubError('OVERLOADED');
+            const expiresAt = Math.min(...documents.map(document => Number(document.exp) * 1000));
+            this.verified.set(identity, { params: saved, size, expiresAt });
+            this.verifiedBytes += size - (old?.size ?? 0);
+            this.nextVerifiedExpiry = Math.min(this.nextVerifiedExpiry, expiresAt);
+        }
+        await this.assertNotRevoked(grant, deadline);
+        if (this.isRevoked(grant))
+            throw new PubSubError('FORBIDDEN');
+        return { cid: grant.cid, expires_at: Math.min(...documents.map(document => Number(document.exp) * 1000)), proof_expires_at: proofUntil };
+    }
+    verificationParams(grant, item, request) {
+        const result = {};
+        for (const capability of (grant.cap ?? [])) {
+            if (capability.ns !== 'event' || ![item.action, '*'].includes(String(capability.action)) || ![item.event_name, '*'].includes(String(capability.resource)))
+                continue;
+            for (const constraint of (capability.constraints ?? [])) {
+                const field = String(constraint.field ?? '');
+                if (['ns', 'action', 'resource', 'sub', 'delegation_depth', 'operation', 'valid_time', 'now'].includes(field))
+                    continue;
+                const parts = (field.startsWith('params.') ? field.slice(7) : field).split('.');
+                let value = request, found = true;
+                for (const key of parts) {
+                    if (!value || typeof value !== 'object' || !Object.hasOwn(value, key)) {
+                        found = false;
+                        break;
+                    }
+                    value = value[key];
+                }
+                if (!found)
+                    continue;
+                let target = result;
+                for (const key of parts.slice(0, -1)) {
+                    if (!Object.hasOwn(target, key))
+                        Object.defineProperty(target, key, { value: {}, enumerable: true, writable: true, configurable: true });
+                    target = target[key];
+                }
+                Object.defineProperty(target, parts.at(-1), { value: structuredClone(value), enumerable: true, writable: true, configurable: true });
+            }
+        }
+        return result;
+    }
+    cleanupVerified() { const now = Date.now(); if (now < this.nextVerifiedExpiry)
+        return; this.nextVerifiedExpiry = Infinity; for (const [key, entry] of this.verified) {
+        if (entry.expiresAt <= now) {
+            this.verified.delete(key);
+            this.verifiedBytes -= entry.size;
+        }
+        else
+            this.nextVerifiedExpiry = Math.min(this.nextVerifiedExpiry, entry.expiresAt);
+    } }
+    async checkVerified(grant, subjectAid, scope) {
+        this.cleanupVerified();
+        const previous = this.verified.get(digest([subjectAid, grant]))?.params;
+        try {
+            for (const item of scope) {
+                const params = previous?.get(`${item.event_name}\0${item.action}`);
+                if (!params)
+                    throw new PubSubError('FORBIDDEN');
+                await validateCredentialCapability(grant, { ns: 'event', action: item.action, resource: item.event_name, params, now: Math.floor(Date.now() / 1000) });
+            }
+        }
+        catch {
+            throw new PubSubError('FORBIDDEN');
+        }
+    }
+    retainedBodyBytes() { return this.verifiedBytes; }
+    setBodyBudget(available) { this.bodyBudget = available; }
+    clearVerified() { this.generation++; this.verified.clear(); this.verifiedBytes = 0; this.nextVerifiedExpiry = Infinity; }
+    async assertNotRevoked(grant, deadline) { if (this.isRevoked(grant))
+        throw new PubSubError('REAUTH_REQUIRED'); if (typeof grant === 'string')
+        return; try {
+        await this.beforeDeadline(deadline, async () => { await this.sdk._assertCredentialNotRevoked?.(grant); });
+    }
+    catch (error) {
+        if (error instanceof PubSubError && error.code === 'TIMEOUT')
+            throw error;
+        throw new PubSubError('REAUTH_REQUIRED');
+    } }
+    async context(grant, deadline) {
+        const manager = this.sdk._getCredentialRenewal?.();
+        if (typeof manager?.statusFresh !== 'function')
+            throw new PubSubError('CREDENTIAL_UNAVAILABLE');
+        const certificates = new Map();
+        const proofs = new Map();
+        for (const document of [grant, ...(Array.isArray(grant.proof_chain) ? grant.proof_chain : [])]) {
+            const proof = {};
+            await this.statusFresh(document, undefined, proof, deadline);
+            proofs.set(String(document.cid), proof);
+            const signature = document.signature;
+            const fingerprint = String(signature.cert_fingerprint);
+            certificates.set(fingerprint, await this.certificate(String(document.iss), fingerprint, deadline));
+        }
+        return { resolveCertificate: fingerprint => certificates.get(fingerprint) ?? null, resolveStatusProof: cid => proofs.get(cid) ?? null };
+    }
+    async revoke(cid, requestId) {
+        return this.serial(async () => {
+            await this.load();
+            try {
+                let record = this.records.revokes[requestId];
+                if (record && record.cid !== cid)
+                    throw new PubSubError('REQUEST_CONFLICT');
+                this.revoked.add(cid);
+                if (!record) {
+                    record = { cid, request: this.request('credential.revoke', cid, requestId, { credential_cid: cid, registrar_aid: this.serviceAid, reason_code: 'grant_withdrawn', cascade: true }) };
+                    this.records.revokes[requestId] = record;
+                }
+                await this.save();
+                if (record.result)
+                    return structuredClone(record.result);
+                const revoke = this.sdk.credential?.revoke;
+                if (typeof revoke !== 'function')
+                    throw new PubSubError('CREDENTIAL_UNAVAILABLE');
+                const result = await revoke.call(this.sdk.credential, structuredClone(record.request));
+                if (!result || result.credentialCid !== cid || result.status !== 'revoked')
+                    throw new PubSubError('CREDENTIAL_UNAVAILABLE');
+                record.result = structuredClone(result);
+                await this.save();
+                this.sdk._getCredentialRenewal?.().invalidateQueries?.();
+                return structuredClone(result);
+            }
+            catch (error) {
+                if (error instanceof PubSubError)
+                    throw error;
+                throw new PubSubError('CREDENTIAL_UNAVAILABLE', String(error));
+            }
+        });
+    }
+    get authority() { return 'credential.' + this.serviceAid.split('.').slice(1).join('.'); }
+    serial(operation) { const result = this.tail.then(operation); this.tail = result.catch(() => { }); return result; }
+    load() {
+        return this.loaded ??= (async () => {
+            const store = this.sdk._tokenStore;
+            let saved;
+            if (this.options.state?.load)
+                saved = await this.options.state.load();
+            else if (typeof store?._getMetadataStrict === 'function' || typeof store?.getMetadata === 'function') {
+                const value = await (store._getMetadataStrict?.(this.serviceAid, 'pubsub_credentials_v1') ?? store.getMetadata?.(this.serviceAid, 'pubsub_credentials_v1'));
+                saved = typeof value === 'string' && value !== '' ? JSON.parse(value) : value;
+            }
+            else
+                saved = (store?._loadMetadataStrict?.(this.serviceAid) ?? store?.loadMetadata?.(this.serviceAid))?.pubsub_credentials_v1;
+            if (saved) {
+                if (saved.version !== 1 || saved.service_aid !== this.serviceAid || !saved.issues || !saved.revokes)
+                    throw new PubSubError('CREDENTIAL_UNAVAILABLE');
+                this.records = structuredClone(saved);
+            }
+            for (const record of Object.values(this.records.revokes))
+                this.revoked.add(record.cid);
+        })().catch(error => { throw error instanceof PubSubError ? error : new PubSubError('CREDENTIAL_UNAVAILABLE', String(error)); });
+    }
+    async save() {
+        const value = structuredClone(this.records);
+        const store = this.sdk._tokenStore;
+        if (this.options.state?.save)
+            await this.options.state.save(value);
+        else if (typeof store?.setMetadata === 'function')
+            await store.setMetadata(this.serviceAid, 'pubsub_credentials_v1', JSON.stringify(value));
+        else
+            await store?.saveMetadata?.(this.serviceAid, { pubsub_credentials_v1: value });
+    }
+    async certificate(aid, fingerprint, deadline) {
+        const resolve = this.sdk._fetchServiceEventCertificate ?? this.sdk._resolveServiceEventCertificate;
+        if (typeof resolve !== 'function')
+            throw new PubSubError('CREDENTIAL_UNAVAILABLE');
+        return this.beforeDeadline(deadline, () => resolve.call(this.sdk, aid, fingerprint));
+    }
+    async register(record) {
+        const pipeline = this.sdk._rpcPipeline;
+        if (typeof pipeline?._callWithSent === 'function')
+            return pipeline._callWithSent('credential.register', structuredClone(record.request), async () => {
+                const now = Math.floor(Date.now() / 1000), binding = record.request.request_binding;
+                if (now < Number(binding.iat) || now >= Number(binding.exp))
+                    throw new PubSubError('CREDENTIAL_UNAVAILABLE');
+                if (record.submitted_at === undefined) {
+                    record.submitted_at = now;
+                    record.submission_hash = digest(record.request);
+                    await this.save();
+                }
+            });
+        if (typeof this.sdk.credential?.register !== 'function')
+            throw new PubSubError('CREDENTIAL_UNAVAILABLE');
+        return this.sdk.credential.register(structuredClone(record.request));
+    }
+    async recoverRegistration(record) {
+        const binding = record.request.request_binding;
+        if (!Number.isInteger(record.submitted_at) || record.submitted_at < Number(binding.iat) || record.submitted_at >= Number(binding.exp) || record.submission_hash !== digest(record.request))
+            throw new PubSubError('CREDENTIAL_UNAVAILABLE');
+        const signature = record.grant.signature;
+        const certificate = await this.certificate(String(record.grant.iss), String(signature.cert_fingerprint));
+        await verifyCredentialSignature(record.grant, () => certificate, Math.floor(Date.now() / 1000), this.serviceAid);
+        const proof = {};
+        await this.statusFresh(record.grant, record.submitted_at, proof);
+        if (proof.credentialStatus !== 'active' || Number(proof.proofExpiresAt) * 1000 <= Date.now() || Number(record.grant.exp) * 1000 <= Date.now())
+            throw new PubSubError('CREDENTIAL_UNAVAILABLE');
+        return proof;
+    }
+    async statusFresh(grant, submittedAt, proof, deadline) {
+        this.checkDeadline(deadline);
+        const manager = this.sdk._getCredentialRenewal?.();
+        if (typeof manager?.statusFresh !== 'function')
+            throw new PubSubError('CREDENTIAL_UNAVAILABLE');
+        const scoped = Object.create(manager);
+        if (manager.ports?.call)
+            scoped.ports = { ...manager.ports,
+                call: async (method, params, onSent) => { this.checkDeadline(deadline); const result = await manager.ports.call(method, { ...params, _rpc_background_kind: 'event', _rpc_background: 'event', ...(deadline !== undefined ? { _rpc_deadline: deadline } : {}) }, onSent); this.checkDeadline(deadline); return result; },
+                certificate: (aid, fingerprint) => this.beforeDeadline(deadline, () => manager.ports.certificate(aid, fingerprint)) };
+        await manager.statusFresh.call(scoped, grant, this.serviceAid, false, submittedAt, proof);
+        this.checkDeadline(deadline);
+    }
+    checkDeadline(deadline) { if (deadline !== undefined && deadline <= Date.now())
+        throw new PubSubError('TIMEOUT'); }
+    async beforeDeadline(deadline, operation) {
+        this.checkDeadline(deadline);
+        if (deadline === undefined)
+            return operation();
+        let timer;
+        try {
+            const result = await Promise.race([operation(), new Promise((_, reject) => { timer = setTimeout(() => reject(new PubSubError('TIMEOUT')), Math.max(0, deadline - Date.now())); })]);
+            this.checkDeadline(deadline);
+            return result;
+        }
+        finally {
+            if (timer)
+                clearTimeout(timer);
+        }
+    }
+    isRevoked(grant) { if (typeof grant === 'string')
+        return this.revoked.has(grant); return [grant, ...(Array.isArray(grant.proof_chain) ? grant.proof_chain : [])].some(document => this.revoked.has(String(document.cid ?? ''))); }
+    async getIssuedScope(cid) { await this.load(); const record = Object.values(this.records.issues).find(item => item.grant.cid === cid); return record ? structuredClone(record.input.scope) : null; }
+    request(method, cid, requestId, fields) {
+        const params = { ...fields, request_id: requestId, nonce: identifier() };
+        const now = Math.floor(Date.now() / 1000);
+        params.request_binding = buildRequestBinding(method, 'credential.' + this.serviceAid.split('.').slice(1).join('.'), params, cid, String(params.nonce), requestId, now, now + 300);
+        return params;
+    }
+    async refreshRevocations() { await this.load(); this.sdk._getCredentialRenewal?.().invalidateQueries?.(); }
+}
+//# sourceMappingURL=credentials.js.map

package/dist/pubsub/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/pubsub/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,EAAE,4BAA4B,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,yBAAyB,EAA6D,MAAM,oBAAoB,CAAC;AACzP,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAY1C,MAAM,OAAO,cAAc;IAMJ;IAAmB;IAAqD;IAL5E,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5B,QAAQ,GAAG,IAAI,GAAG,EAA6E,CAAC;IACzG,UAAU,GAAG,CAAC,CAAC;IAAS,UAAU,CAA8B;IAAS,aAAa,GAAG,CAAC,CAAC;IAAS,kBAAkB,GAAG,QAAQ,CAAC;IAAS,cAAc,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;IACpM,OAAO,CAAuH;IAC9H,MAAM,CAAiB;IAAS,IAAI,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IACnF,YAAqB,GAAQ,EAAW,aAAqB,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,EAAW,UAAiC,EAAE;QAA3G,QAAG,GAAH,GAAG,CAAK;QAAW,eAAU,GAAV,UAAU,CAAgC;QAAW,YAAO,GAAP,OAAO,CAA4B;QAC9H,IAAI,CAAC,OAAO,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAClF,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,UAAkB,EAAE,KAAuB,EAAE,SAAiB,EAAE,SAAiB;QAC3F,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;gBAAC,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACjH,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,WAAW,CAAC,kBAAkB,CAAC,CAAC;gBAChG,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBAC5R,IAAI,CAAC,MAAM;wBAAE,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;oBAC7D,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,eAAe,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;oBAC/R,MAAM,GAAG,EAAE,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;oBACrL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC;gBAC1C,CAAC;gBACD,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAC,IAAI,MAAM,CAAC,MAAM;oBAAE,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC5E,IAAI,MAAe,CAAC;gBACpB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,MAAM,CAAE,MAAM,CAAC,OAAO,CAAC,eAA2B,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;oBACrD,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC;gBAC3G,CAAC;qBAAM,CAAC;oBACN,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAAC,MAAM,OAAO,GAAG,QAAQ,EAAE,mBAAmB,IAAI,QAAQ,EAAE,OAAO,CAAC;oBACjH,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS;wBAAE,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;oBACpF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC;oBACvG,MAAM,yBAAyB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;oBACzI,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC;gBACnE,CAAC;gBACD,MAAM,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;gBAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAC,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;YAC7F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,KAAK,YAAY,WAAW;oBAAE,MAAM,KAAK,CAAC;gBAAC,MAAM,IAAI,WAAW,CAAC,wBAAwB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAAC,CAAC;QACpI,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,KAAc,EAAE,UAAkB,EAAE,KAAuB,EAAE,OAAuB,EAAE,QAAQ,GAAG,OAAO,EAAE,UAAU;QAC/H,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAAC,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC;QAC/E,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QACnC,IAAI,OAAO,MAAM,EAAE,MAAM,KAAK,UAAU;YAAE,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QACrD,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC;QAC7H,MAAM,SAAS,GAAc,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAwB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClH,IAAI,KAAK,CAAC,GAAG,KAAK,UAAU,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC,UAAU,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC;QACvL,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAoB,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChM,IAAI,OAAO,KAAK,CAAC,kBAAkB,KAAK,UAAU,IAAI,OAAO,KAAK,CAAC,kBAAkB,KAAK,UAAU;YAAE,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;QACtJ,IAAI,UAAU,GAAG,QAAQ,CAAC;QAC1B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,KAAK,CAAC,cAAc,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE;gBAAE,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;YACrJ,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,OAAO,IAAI,QAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,EAAE,CAAE,CAAC;gBAC/E,MAAM,OAAO,GAAkC,EAAE,GAAG,KAAK,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;gBAC5P,IAAI,OAAO;oBAAE,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,UAAU,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;qBAC/O,CAAC;oBACJ,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,2BAA2B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC/F,MAAM,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,kBAAmB,CAAC,GAAG,CAAC,EAAE,MAA4B,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;oBACpL,MAAM,4BAA4B,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;gBACzJ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,KAAK,YAAY,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,MAAM,KAAK,CAAC;YAAC,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAAC,CAAC;QACjJ,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC7B,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,WAAW,CAAC,gBAAgB,CAAC,CAAC;QAC5E,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;YAChC,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YACzH,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAClI,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK;gBAAE,MAAM,IAAI,WAAW,CAAC,YAAY,CAAC,CAAC;YACjP,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAAC,IAAI,CAAC,aAAa,IAAI,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;QACzL,CAAC;QACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC;QAC9D,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC;IAC3I,CAAC;IACO,kBAAkB,CAAC,KAAc,EAAE,IAAoB,EAAE,OAAsB;QACrF,MAAM,MAAM,GAAY,EAAE,CAAC;QAC3B,KAAK,MAAM,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAc,EAAE,CAAC;YACxD,IAAI,UAAU,CAAC,EAAE,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAAE,SAAS;YACpK,KAAK,MAAM,UAAU,IAAI,CAAC,UAAU,CAAC,WAAW,IAAI,EAAE,CAAc,EAAE,CAAC;gBACrE,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACtK,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAAC,IAAI,KAAK,GAAY,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC;gBAC5H,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;oBAAC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;wBAAC,KAAK,GAAG,KAAK,CAAC;wBAAC,MAAM;oBAAC,CAAC;oBAAC,KAAK,GAAI,KAAiB,CAAC,GAAG,CAAC,CAAC;gBAAC,CAAC;gBAC9J,IAAI,CAAC,KAAK;oBAAE,SAAS;gBACrB,IAAI,MAAM,GAAG,MAAM,CAAC;gBAAC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;wBAAE,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;oBAAC,MAAM,GAAG,MAAM,CAAC,GAAG,CAAY,CAAC;gBAAC,CAAC;gBACzO,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YACxI,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACO,eAAe,KAAK,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,kBAAkB;QAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,GAAG,QAAQ,CAAC,CAAC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAAC,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAC,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,IAAI,CAAC;QAAC,CAAC;;YAAM,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC,CAAC,CAAC;IAClW,KAAK,CAAC,aAAa,CAAC,KAAc,EAAE,UAAkB,EAAE,KAAuB;QAC7E,IAAI,CAAC,eAAe,EAAE,CAAC;QAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;QAChG,IAAI,CAAC;YAAC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBAAC,MAAM,MAAM,GAAG,QAAQ,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBAAC,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC;gBAAC,MAAM,4BAA4B,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;QAAC,CAAC;QAClT,MAAM,CAAC;YAAC,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC;QAAC,CAAC;IAC/C,CAAC;IACD,iBAAiB,KAAa,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAC1D,aAAa,CAAC,SAAqC,IAAU,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC;IAC3F,aAAa,KAAW,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,GAAG,QAAQ,CAAC,CAAC,CAAC;IAC/H,KAAK,CAAC,gBAAgB,CAAC,KAAuB,EAAE,QAAiB,IAAmB,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC;QAAC,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,2BAA2B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,KAAK,YAAY,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC;QAAC,MAAM,IAAI,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAAC,CAAC,CAAC,CAAC;IACnb,KAAK,CAAC,OAAO,CAAC,KAAc,EAAE,QAAiB;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,EAAE,CAAC;QACnD,IAAI,OAAO,OAAO,EAAE,WAAW,KAAK,UAAU;YAAE,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;QAChG,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;QAC1C,KAAK,MAAM,QAAQ,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAwB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC5G,MAAM,KAAK,GAAY,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC7D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAoB,CAAC;YAChD,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YACvD,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,EAAE,kBAAkB,EAAE,WAAW,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,kBAAkB,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IAC1I,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,SAAiB;QACzC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC7C,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG;oBAAE,MAAM,IAAI,WAAW,CAAC,kBAAkB,CAAC,CAAC;gBAC5E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACtB,IAAI,CAAC,MAAM,EAAE,CAAC;oBAAC,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;oBAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC;gBAAC,CAAC;gBAChP,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAC,IAAI,MAAM,CAAC,MAAM;oBAAE,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC;gBAC3C,IAAI,OAAO,MAAM,KAAK,UAAU;oBAAE,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;gBAClF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;gBACvF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,aAAa,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;oBAAE,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;gBAC5H,MAAM,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;gBAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAAC;gBAAC,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;YACvJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,KAAK,YAAY,WAAW;oBAAE,MAAM,KAAK,CAAC;gBAAC,MAAM,IAAI,WAAW,CAAC,wBAAwB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAAC,CAAC;QACpI,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAY,SAAS,KAAK,OAAO,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,CAAI,SAA2B,IAAgB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC;IACnJ,IAAI;QACV,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,KAAK,IAAI,EAAE;YACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;YAAC,IAAI,KAAU,CAAC;YACnD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI;gBAAE,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;iBACjE,IAAI,OAAO,KAAK,EAAE,kBAAkB,KAAK,UAAU,IAAI,OAAO,KAAK,EAAE,WAAW,KAAK,UAAU,EAAE,CAAC;gBAAC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,CAAC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC,CAAC;gBAAC,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAAC,CAAC;;gBAChV,KAAK,GAAG,CAAC,KAAK,EAAE,mBAAmB,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,EAAE,YAAY,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,qBAAqB,CAAC;YAC9H,IAAI,KAAK,EAAE,CAAC;gBAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO;oBAAE,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;gBAAC,IAAI,CAAC,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAC3M,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzF,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,wBAAwB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClI,CAAC;IACO,KAAK,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;QAChF,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aAC9D,IAAI,OAAO,KAAK,EAAE,WAAW,KAAK,UAAU;YAAE,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;;YACvI,MAAM,KAAK,EAAE,YAAY,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,CAAC;IACO,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,WAAmB,EAAE,QAAiB;QAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,6BAA6B,IAAI,IAAI,CAAC,GAAG,CAAC,+BAA+B,CAAC;QACnG,IAAI,OAAO,OAAO,KAAK,UAAU;YAAE,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;IACvF,CAAC;IACO,KAAK,CAAC,QAAQ,CAAC,MAAmB;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;QACvC,IAAI,OAAO,QAAQ,EAAE,aAAa,KAAK,UAAU;YAAE,OAAO,QAAQ,CAAC,aAAa,CAAC,qBAAqB,EAAE,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,EAAE;gBAClJ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,eAA0B,CAAC;gBAC/F,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;gBAC7G,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBAAC,MAAM,CAAC,YAAY,GAAG,GAAG,CAAC;oBAAC,MAAM,CAAC,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAC,CAAC;YAC3I,CAAC,CAAC,CAAC;QACH,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,KAAK,UAAU;YAAE,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;QACzG,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACvE,CAAC;IACO,KAAK,CAAC,mBAAmB,CAAC,MAAmB;QACnD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,eAA0B,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,YAAa,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,YAAa,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,eAAe,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;QAC9O,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,SAAoB,CAAC;QAAC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC9J,MAAM,yBAAyB,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACjH,MAAM,KAAK,GAAY,EAAE,CAAC;QAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC5F,IAAI,KAAK,CAAC,gBAAgB,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;QAC/L,OAAO,KAAK,CAAC;IACf,CAAC;IACO,KAAK,CAAC,WAAW,CAAC,KAAc,EAAE,WAA+B,EAAE,KAAc,EAAE,QAAiB;QAC1G,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,EAAE,CAAC;QACnD,IAAI,OAAO,OAAO,EAAE,WAAW,KAAK,UAAU;YAAE,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI;YAAE,MAAM,CAAC,KAAK,GAAG,EAAE,GAAG,OAAO,CAAC,KAAK;gBACxD,IAAI,EAAE,KAAK,EAAE,MAAc,EAAE,MAAe,EAAE,MAA4B,EAAE,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC;gBAC9V,WAAW,EAAE,CAAC,GAAW,EAAE,WAAmB,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QACxI,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QAC1F,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IACO,aAAa,CAAC,QAAiB,IAAU,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE;QAAE,MAAM,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAClI,KAAK,CAAC,cAAc,CAAI,QAA4B,EAAE,SAA2B;QACvF,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAAC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,SAAS,EAAE,CAAC;QAC7E,IAAI,KAAgD,CAAC;QACrD,IAAI,CAAC;YAAC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;gBACxO,CAAC;YAAC,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAC7C,CAAC;IACD,SAAS,CAAC,KAAuB,IAAa,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAwB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1Q,KAAK,CAAC,cAAc,CAAC,GAAW,IAAsC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,KAAyB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1P,OAAO,CAAC,MAAc,EAAE,GAAW,EAAE,SAAiB,EAAE,MAAe;QAC7E,MAAM,MAAM,GAAY,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC;QAClF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,eAAe,GAAG,mBAAmB,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;QAClL,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,kBAAkB,KAAoB,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,CAAC;CAC3H"}

package/dist/pubsub/errors.d.ts

@@ -0,0 +1,5 @@
+export declare class PubSubError extends Error {
+    readonly code: string;
+    readonly details?: unknown;
+    constructor(code: string, message?: string, details?: unknown);
+}

package/dist/pubsub/errors.js

@@ -0,0 +1,6 @@
+export class PubSubError extends Error {
+    code;
+    details;
+    constructor(code, message, details) { super(message ? `${code}: ${message}` : code); this.name = 'PubSubError'; this.code = code; this.details = details; }
+}
+//# sourceMappingURL=errors.js.map

package/dist/pubsub/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/pubsub/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,WAAY,SAAQ,KAAK;IAAY,IAAI,CAAS;IAAU,OAAO,CAAW;IAAC,YAAY,IAAY,EAAE,OAAgB,EAAE,OAAiB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;CAAE"}

package/dist/pubsub/index.d.ts

@@ -0,0 +1,48 @@
+import { EventService as EventBusCore } from './service.js';
+import { type EventServiceBindingOptions } from './binding.js';
+import { PubSubClient, type PublishOptions } from './client.js';
+import { type SDKCredentialsOptions } from './credentials.js';
+import { type PubSubSDK } from './channel.js';
+import type { CredentialProvider, EventAllowlist, EventCatalog, EventServiceLimits, EventServiceOptions, JsonMap } from './types.js';
+export { PubSubError } from './errors.js';
+export type * from './types.js';
+export type { PublishOptions } from './client.js';
+export type EventRole = 'pub' | 'sub' | 'bus';
+export interface EventServiceStartOptions {
+    catalog?: EventCatalog;
+    allowlist?: EventAllowlist;
+    credentials?: CredentialProvider;
+    credentialOptions?: SDKCredentialsOptions;
+    state?: EventServiceOptions['state'];
+    clock?: () => number;
+    limits?: EventServiceLimits;
+    bindingOptions?: EventServiceBindingOptions;
+}
+export declare class EventService {
+    readonly sdk: PubSubSDK;
+    private readonly buses;
+    constructor(sdk: PubSubSDK);
+    private bindBus;
+    private bound;
+    private client;
+    private serialize;
+    start(bus_aid: string, options?: EventServiceStartOptions): Promise<this>;
+    drain(bus_aid: string): Promise<void>;
+    close(bus_aid: string): Promise<void>;
+    private _closeAll;
+    updateConfig(bus_aid: string, config: Parameters<EventBusCore['updateConfig']>[0]): Promise<void>;
+    authorize(bus_aid: string, role: 'pub' | 'sub', authMode: 'allowlist' | 'credential', events: string[], credential?: JsonMap): Promise<JsonMap>;
+    renew(bus_aid: string): Promise<JsonMap>;
+    publish(bus_aid: string, eventName: string, data: JsonMap, options?: PublishOptions): Promise<string>;
+    waitPublished(bus_aid: string, eventId: string): Promise<JsonMap>;
+    onPublish(bus_aid: string, handler: Parameters<PubSubClient['onPublish']>[0]): () => boolean;
+    subscribe(bus_aid: string, events: string[]): Promise<JsonMap>;
+    unsubscribe(bus_aid: string, events: string[]): Promise<JsonMap>;
+    nextEvent(bus_aid: string, timeout?: number): Promise<JsonMap>;
+    onEvent(bus_aid: string, handler: Parameters<PubSubClient['onEvent']>[0]): () => boolean;
+    catalog(bus_aid: string, params?: JsonMap): Promise<JsonMap>;
+    stats(bus_aid: string, params?: JsonMap): Promise<JsonMap>;
+    issueGrant(bus_aid: string, params: JsonMap): Promise<JsonMap>;
+    revokeGrant(bus_aid: string, params: JsonMap): Promise<JsonMap>;
+    private manage;
+}

package/dist/pubsub/index.js

@@ -0,0 +1,152 @@
+import { EventService as EventBusCore } from './service.js';
+import { EventServiceBinding } from './binding.js';
+import { PubSubClient } from './client.js';
+import { SDKCredentials } from './credentials.js';
+import { PubSubError } from './errors.js';
+import { identifier } from './channel.js';
+export { PubSubError } from './errors.js';
+const bindings = new WeakMap();
+function jsonValue(value, parents = new Set()) {
+    if (value === null || typeof value === 'string' || typeof value === 'boolean')
+        return true;
+    if (typeof value === 'number')
+        return Number.isFinite(value);
+    if (typeof value !== 'object' || parents.has(value))
+        return false;
+    if (!Array.isArray(value) && Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null)
+        return false;
+    if (Object.getOwnPropertySymbols(value).length)
+        return false;
+    parents.add(value);
+    const valid = Array.isArray(value) ? Array.from(value).every(item => jsonValue(item, parents)) : Object.values(value).every(item => jsonValue(item, parents));
+    parents.delete(value);
+    return valid;
+}
+export class EventService {
+    sdk;
+    buses;
+    constructor(sdk) {
+        this.sdk = sdk;
+        let buses = bindings.get(sdk);
+        if (!buses) {
+            buses = new Map();
+            bindings.set(sdk, buses);
+        }
+        this.buses = buses;
+    }
+    bindBus(bus_aid, role, options = {}) {
+        if (this.sdk._closing)
+            throw new PubSubError('CLOSED');
+        if (!['pub', 'sub', 'bus'].includes(role))
+            throw new PubSubError('INVALID_ROLE');
+        const previous = this.buses.get(bus_aid);
+        if (previous) {
+            if (previous.role !== role)
+                throw new PubSubError('BUS_ROLE_CONFLICT');
+            return this;
+        }
+        if (role === 'bus') {
+            if (bus_aid !== this.sdk.aid)
+                throw new PubSubError('SERVICE_IDENTITY_MISMATCH');
+            const service = new EventBusCore(bus_aid, options.catalog ?? {}, options.allowlist ?? {}, {
+                send: async () => ({}), credentials: options.credentials ?? new SDKCredentials(this.sdk, bus_aid, options.credentialOptions),
+                clock: options.clock, state: options.state, limits: options.limits,
+            });
+            this.buses.set(bus_aid, { role, service, binding: new EventServiceBinding(service, this.sdk, options.bindingOptions), running: false, lifecycle: Promise.resolve() });
+        }
+        else {
+            this.buses.set(bus_aid, { role, client: new PubSubClient(this.sdk, bus_aid, { clock: options.clock, limits: options.limits }), lifecycle: Promise.resolve() });
+        }
+        return this;
+    }
+    bound(bus_aid, roles = ['pub', 'sub', 'bus']) {
+        const bound = this.buses.get(bus_aid);
+        if (!bound)
+            throw new PubSubError('BUS_NOT_BOUND');
+        if (!roles.includes(bound.role))
+            throw new PubSubError('ROLE_MISMATCH');
+        return bound;
+    }
+    client(bus_aid, role) { return this.bound(bus_aid, role ? [role] : ['pub', 'sub']).client; }
+    serialize(bound, action) { const result = bound.lifecycle.then(action); bound.lifecycle = result.catch(() => { }); return result; }
+    async start(bus_aid, options = {}) {
+        if (this.sdk._closing)
+            throw new PubSubError('CLOSED');
+        const created = !this.buses.has(bus_aid);
+        if (created)
+            this.bindBus(bus_aid, 'bus', options);
+        const bound = this.bound(bus_aid);
+        await this.serialize(bound, async () => {
+            if (this.sdk._closing)
+                throw new PubSubError('CLOSED');
+            if (bound.role !== 'bus') {
+                await bound.client.start();
+                bound.closed = false;
+                return;
+            }
+            try {
+                await bound.binding.start();
+                bound.running = true;
+            }
+            catch (error) {
+                if (created && this.buses.get(bus_aid) === bound) {
+                    await bound.binding.close().catch(() => { });
+                    this.buses.delete(bus_aid);
+                }
+                throw error;
+            }
+        });
+        return this;
+    }
+    async drain(bus_aid) { const bound = this.bound(bus_aid); await bound.lifecycle; if (bound.role === 'bus')
+        await bound.binding.drain();
+    else
+        await bound.client.drain(); }
+    async close(bus_aid) { const bound = this.bound(bus_aid); await this.serialize(bound, async () => { if (bound.role === 'bus') {
+        bound.running = false;
+        await bound.binding.close();
+    }
+    else {
+        bound.closed = true;
+        await bound.client.close();
+    } }); }
+    async _closeAll() { await Promise.allSettled([...this.buses.keys()].map(bus_aid => this.close(bus_aid))); }
+    async updateConfig(bus_aid, config) { await this.bound(bus_aid, ['bus']).service.updateConfig(config); }
+    async authorize(bus_aid, role, authMode, events, credential) {
+        if (role !== 'pub' && role !== 'sub')
+            throw new PubSubError('INVALID_ROLE');
+        this.bindBus(bus_aid, role);
+        await this.start(bus_aid);
+        const bound = this.bound(bus_aid, ['pub', 'sub']);
+        return bound.client.authorize(authMode, events, [role === 'pub' ? 'publish' : 'subscribe'], credential);
+    }
+    async renew(bus_aid) { return this.client(bus_aid).renew(); }
+    async publish(bus_aid, eventName, data, options = {}) { const client = this.client(bus_aid, 'pub'); if (data === null || Array.isArray(data) || typeof data !== 'object' || !jsonValue(data))
+        throw new PubSubError('INVALID_CONTENT'); return client.publish(eventName, data, options); }
+    async waitPublished(bus_aid, eventId) { return this.client(bus_aid, 'pub').waitPublished(eventId); }
+    onPublish(bus_aid, handler) { return this.client(bus_aid, 'pub').onPublish(handler); }
+    async subscribe(bus_aid, events) { return this.client(bus_aid, 'sub').subscribe(events); }
+    async unsubscribe(bus_aid, events) { return this.client(bus_aid, 'sub').unsubscribe(events); }
+    async nextEvent(bus_aid, timeout) { return { ...await this.client(bus_aid, 'sub').nextEvent(timeout), bus_aid }; }
+    onEvent(bus_aid, handler) { return this.client(bus_aid, 'sub').onEvent(event => handler({ ...event, bus_aid })); }
+    async catalog(bus_aid, params = {}) { if (this.sdk._closing)
+        throw new PubSubError('CLOSED'); const bound = this.bound(bus_aid); return bound.role !== 'bus' ? bound.client.catalog(params) : this.manage(bus_aid, 'catalog', params); }
+    async stats(bus_aid, params = {}) { return this.manage(bus_aid, 'stats', params); }
+    async issueGrant(bus_aid, params) { return this.manage(bus_aid, 'issue_grant', params); }
+    async revokeGrant(bus_aid, params) { return this.manage(bus_aid, 'revoke_grant', params); }
+    async manage(bus_aid, op, params) {
+        if (this.sdk._closing)
+            throw new PubSubError('CLOSED');
+        const bound = this.bound(bus_aid, ['bus']);
+        await bound.lifecycle;
+        if (!bound.running)
+            throw new PubSubError('CLOSED');
+        const now = bound.service.clock();
+        const request = { ...structuredClone(params), type: 'app.pubsub.v1', op, service_aid: bus_aid, request_id: typeof params.request_id === 'string' ? params.request_id : identifier(), nonce: typeof params.nonce === 'string' ? params.nonce : identifier(), issued_at: now, expires_at: Number(params.expires_at ?? now + 60_000) };
+        const result = await bound.service._handleLocal(request);
+        if (op === 'catalog' && Array.isArray(result.items) && result.events === undefined)
+            result.events = structuredClone(result.items);
+        return result;
+    }
+}
+//# sourceMappingURL=index.js.map