@betterportal/tunnels 1.0.0

package/lib/plugins/service-tunnel-client-api/index.js

@@ -0,0 +1,591 @@
+import { BSBService, bsb, optional, createConfigSchema, createEventSchemas, createFireAndForgetEvent, createReturnableEvent } from "@bsb/base";
+import * as av from "anyvali";
+import { createServer } from "node:http";
+import { H3, toNodeHandler } from "h3";
+import { WebSocketServer } from "ws";
+import { TunnelCreateSchema, ClientFrameSchema, AuthStartRequestSchema, AuthStartResponseSchema, AuthStatusResponseSchema } from "./schemas.js";
+import { buildTunnelSubdomain, hashValue, randomPrefix } from "./ids.js";
+import { prisma } from "../../prisma.js";
+import { AUTH_SESSION_TTL_MS, DEVICE_TOKEN_TTL_MS, bearerToken, hashSecret, normalizeIpRange, randomToken, shortBrowserKey, verifySecret } from "../../auth.js";
+import { TunnelRegistry } from "./registry.js";
+import TunnelWebClient from "../../.bsb/clients/service-tunnel-web.js";
+export const Config = createConfigSchema({
+    name: "service-tunnel-client-api",
+    description: "Client websocket/API service",
+    tags: ["service", "websocket", "tunnel"]
+}, av.object({
+    port: av.number().default(8081).describe("Client API listener port"),
+    domain: av.string().default("tunnels.betterportal.dev").describe("Default public tunnel domain"),
+    publicUrl: av.string().default("https://tunnels.betterportal.dev").describe("Public base URL"),
+    authAppBaseUrl: av.string().default("https://betterportal.cloud").describe("BetterPortal app URL used for CLI auth"),
+    authVerifyPath: av.string().default("/cli-auth/verify").describe("BetterPortal CLI auth verify route")
+}).describe("service-tunnel-client-api config"));
+export const EventSchemas = createEventSchemas({
+    emitEvents: {},
+    onEvents: {
+        "ws.toOrigin": createFireAndForgetEvent(bsb.object({
+            publicServerId: bsb.string({ description: "Web service instance that owns the public websocket" }),
+            publicSocketId: bsb.string({ description: "Web service local websocket id" }),
+            hostname: bsb.string({ description: "Public tunnel hostname" }),
+            path: bsb.string({ description: "Websocket path and query" }),
+            frameType: bsb.string({ description: "msg, ack, or event" }),
+            event: optional(bsb.string({ description: "open or close" })),
+            body: optional(bsb.string({ description: "Base64 websocket payload" }))
+        }, "Public websocket frame to origin"), "Relay a public websocket frame to the connected tunnel client"),
+        "proxy.metrics": createFireAndForgetEvent(bsb.object({
+            hostname: bsb.string({ description: "Public tunnel hostname" }),
+            requestId: bsb.string({ description: "Request id" }),
+            totalMs: bsb.number({ description: "Public request total duration" }),
+            clientApiRoundtripMs: optional(bsb.number({ description: "Client API to CLI roundtrip duration" })),
+            cliOverheadMs: optional(bsb.number({ description: "CLI work outside origin read duration" })),
+            originMs: optional(bsb.number({ description: "CLI to origin/read duration" })),
+            internalServerMs: optional(bsb.number({ description: "Remaining server-side duration" }))
+        }, "Proxy request metrics"), "Send final proxy request timings to the connected tunnel client")
+    },
+    emitReturnableEvents: {},
+    onReturnableEvents: {
+        "proxy.request": createReturnableEvent(bsb.object({
+            hostname: bsb.string({ description: "Public request hostname" }),
+            method: bsb.string({ description: "HTTP method" }),
+            path: bsb.string({ description: "Path and query" }),
+            headers: bsb.record(bsb.string({ description: "Header name" }), bsb.string({ description: "Header value" }), "Headers"),
+            body: optional(bsb.string({ description: "Base64 encoded request body" })),
+            webStartedAt: bsb.number({ description: "Web service request start timestamp" })
+        }, "Proxy request"), bsb.object({
+            requestId: bsb.string({ description: "Request id" }),
+            ownerServerId: bsb.string({ description: "Client API server id" }),
+            status: bsb.number({ description: "HTTP status" }),
+            headers: bsb.record(bsb.string({ description: "Header name" }), bsb.string({ description: "Header value" }), "Headers"),
+            body: bsb.string({ description: "Base64 encoded response body" }),
+            webStartedAt: bsb.number({ description: "Web service request start timestamp" }),
+            clientApiRoundtripMs: bsb.number({ description: "Client API to CLI roundtrip duration" }),
+            cliOverheadMs: optional(bsb.number({ description: "CLI work outside origin read duration" })),
+            originMs: optional(bsb.number({ description: "Origin/read duration" }))
+        }, "Proxy response"), "Proxy an HTTP request through a connected tunnel client", 60)
+    },
+    emitBroadcast: {},
+    onBroadcast: {}
+});
+export class Plugin extends BSBService {
+    static Config = Config;
+    static EventSchemas = EventSchemas;
+    initBeforePlugins = [];
+    initAfterPlugins = [];
+    runBeforePlugins = [];
+    runAfterPlugins = [];
+    registry = new TunnelRegistry();
+    app;
+    server;
+    wss;
+    web;
+    constructor(cfg) {
+        super(cfg);
+        this.app = new H3();
+        this.server = createServer(toNodeHandler(this.app));
+        this.wss = new WebSocketServer({ noServer: true });
+        this.web = new TunnelWebClient(this);
+    }
+    async init(obs) {
+        obs.log.info("init {plugin}", { plugin: this.pluginName });
+        await this.events.onReturnableEvent("proxy.request", obs, async (_handlerObs, input) => {
+            _handlerObs.log.info("CLIENT API proxy.request {method} {hostname}{path}", {
+                method: input.method,
+                hostname: input.hostname,
+                path: input.path
+            });
+            const tunnel = this.registry.get(input.hostname);
+            const unavailable = {
+                requestId: crypto.randomUUID(),
+                ownerServerId: this.appId,
+                status: 503,
+                headers: {},
+                body: Buffer.from("Tunnel unavailable").toString("base64"),
+                webStartedAt: input.webStartedAt,
+                clientApiRoundtripMs: 0
+            };
+            if (!tunnel)
+                return unavailable;
+            if (tunnel.ws.readyState !== tunnel.ws.OPEN)
+                return unavailable;
+            return this.proxyRequest(tunnel, input.method, input.path, input.headers, input.body ?? "", input.webStartedAt);
+        });
+        await this.events.onEventSpecific("proxy.metrics", this.appId, obs, async (_handlerObs, input) => {
+            const tunnel = this.registry.get(input.hostname);
+            if (!tunnel || tunnel.ws.readyState !== tunnel.ws.OPEN)
+                return;
+            tunnel.ws.send(JSON.stringify({
+                type: "request.metrics",
+                requestId: input.requestId,
+                totalMs: input.totalMs,
+                clientApiRoundtripMs: input.clientApiRoundtripMs,
+                cliOverheadMs: input.cliOverheadMs,
+                originMs: input.originMs,
+                internalServerMs: input.internalServerMs
+            }));
+        });
+        await this.events.onEventSpecific("ws.toOrigin", this.appId, obs, async (_handlerObs, input) => {
+            const tunnel = this.registry.get(input.hostname);
+            if (!tunnel || tunnel.ws.readyState !== tunnel.ws.OPEN) {
+                await this.web.wsFromOriginSpecific(input.publicServerId, _handlerObs, {
+                    publicSocketId: input.publicSocketId,
+                    frameType: "event",
+                    event: "close"
+                });
+                return;
+            }
+            tunnel.ws.send(JSON.stringify({
+                type: "ws.toOrigin",
+                publicServerId: input.publicServerId,
+                publicSocketId: input.publicSocketId,
+                path: input.path,
+                frameType: input.frameType,
+                message: input.event,
+                body: input.body
+            }));
+        });
+        const domain = this.config.domain;
+        const publicUrl = this.config.publicUrl;
+        this.app.get("/health", () => new Response("ok\n", {
+            headers: { "content-type": "text/plain; charset=utf-8" }
+        }));
+        this.app.post("/api/client/auth/start", async (event) => {
+            const body = AuthStartRequestSchema.parse(await safeJson(event.req));
+            const browserKey = shortBrowserKey();
+            const pollSecret = randomToken();
+            const expiresAt = new Date(Date.now() + AUTH_SESSION_TTL_MS);
+            const authBase = body.authAppBaseUrl ?? this.config.authAppBaseUrl;
+            const browserUrl = buildAuthUrl(authBase, this.config.authVerifyPath, browserKey);
+            const clientIp = proxyClientIpFromHeaders(event.req.headers);
+            const session = await prisma.clientAuthSession.create({
+                data: {
+                    browserKeyHash: hashSecret(browserKey),
+                    pollSecretHash: hashSecret(pollSecret),
+                    clientIpHash: hashSecret(clientIp),
+                    userAgentHash: hashSecret(event.req.headers.get("user-agent") ?? ""),
+                    expiresAt
+                }
+            });
+            const url = new URL(browserUrl);
+            url.searchParams.set("session", session.id);
+            url.searchParams.set("key", browserKey);
+            return json(AuthStartResponseSchema.parse({
+                sessionId: session.id,
+                pollSecret,
+                browserUrl: url.toString(),
+                expiresAt: expiresAt.toISOString()
+            }));
+        });
+        this.app.get("/api/client/auth/status", async (event) => {
+            const url = new URL(event.req.url);
+            const sessionId = url.searchParams.get("sessionId") ?? "";
+            const pollSecret = bearerToken(event.req.headers) ?? "";
+            if (!sessionId || !pollSecret) {
+                return json(AuthStatusResponseSchema.parse({ status: "invalid", message: "Missing auth session credentials." }), 401);
+            }
+            const session = await prisma.clientAuthSession.findUnique({ where: { id: sessionId } });
+            if (!session || !verifySecret(pollSecret, session.pollSecretHash)) {
+                return json(AuthStatusResponseSchema.parse({ status: "invalid", message: "Invalid auth session." }), 401);
+            }
+            if (session.expiresAt <= new Date() && session.status === "pending") {
+                await prisma.clientAuthSession.update({ where: { id: session.id }, data: { status: "expired" } });
+                return json(AuthStatusResponseSchema.parse({ status: "expired", message: "Authentication session expired." }), 410);
+            }
+            if (session.status === "pending") {
+                return json(AuthStatusResponseSchema.parse({ status: "pending" }));
+            }
+            if (session.status !== "approved" || !session.tenantId || !session.bpUserSubject) {
+                return json(AuthStatusResponseSchema.parse({ status: session.status, message: "Authentication session is not approved." }), 409);
+            }
+            const clientIp = proxyClientIpFromHeaders(event.req.headers);
+            const ipRange = normalizeIpRange(clientIp);
+            if (!ipRange) {
+                return json(AuthStatusResponseSchema.parse({ status: "invalid", message: "Unable to bind token to public IP range." }), 400);
+            }
+            const deviceToken = `bt_${randomToken(32)}`;
+            const tokenExpiresAt = new Date(Date.now() + DEVICE_TOKEN_TTL_MS);
+            await prisma.$transaction([
+                prisma.clientDeviceToken.create({
+                    data: {
+                        tenantId: session.tenantId,
+                        bpUserSubject: session.bpUserSubject,
+                        tokenHash: hashSecret(deviceToken),
+                        name: "BetterTunnels CLI",
+                        ipRangeHash: hashSecret(ipRange.cidr),
+                        ipFamily: ipRange.family,
+                        userAgentHash: hashSecret(event.req.headers.get("user-agent") ?? ""),
+                        expiresAt: tokenExpiresAt
+                    }
+                }),
+                prisma.clientAuthSession.update({
+                    where: { id: session.id },
+                    data: { status: "consumed", consumedAt: new Date() }
+                })
+            ]);
+            return json(AuthStatusResponseSchema.parse({
+                status: "approved",
+                token: deviceToken,
+                expiresAt: tokenExpiresAt.toISOString(),
+                tenantId: session.tenantId,
+                bpUserSubject: session.bpUserSubject
+            }));
+        });
+        this.server.on("upgrade", (request, socket, head) => {
+            const url = new URL(request.url ?? "/", `http://${request.headers.host ?? "localhost"}`);
+            if (url.pathname !== "/api/client/ws") {
+                socket.destroy();
+                return;
+            }
+            this.wss.handleUpgrade(request, socket, head, (ws) => {
+                obs.log.info("CLIENT WS upgrade {path}", { path: url.pathname });
+                void this.handleTunnelSocket(ws, url, request.headers["user-agent"] ?? "", proxyClientIp(request.headers), domain, publicUrl, obs);
+            });
+        });
+    }
+    async run(obs) {
+        const port = this.config.port;
+        await new Promise((resolve) => {
+            this.server.listen(port, "0.0.0.0", () => resolve());
+        });
+        obs.log.info(`client-api listening on port ${port}`);
+    }
+    async dispose() {
+        this.wss.close();
+        await new Promise((resolve, reject) => {
+            this.server.close((error) => error ? reject(error) : resolve());
+        });
+    }
+    async handleTunnelSocket(ws, url, userAgent, clientIp, domain, publicUrl, obs) {
+        const input = TunnelCreateSchema.parse({
+            sessionId: url.searchParams.get("sessionId") ?? "",
+            targetHost: url.searchParams.get("targetHost") ?? "127.0.0.1",
+            targetPort: Number(url.searchParams.get("targetPort") ?? "0"),
+            authenticated: url.searchParams.get("authenticated") === "true",
+            prefix: url.searchParams.get("prefix") ?? undefined,
+            token: url.searchParams.get("token") ?? undefined
+        });
+        const authContext = input.authenticated
+            ? await validateDeviceToken(input.token, clientIp, Array.isArray(userAgent) ? userAgent.join(" ") : userAgent)
+            : undefined;
+        if (input.authenticated && !authContext) {
+            ws.close(1008, "reauth required");
+            obs.log.warn("CLIENT SESSION rejected authenticated tunnel from {clientIp}", { clientIp });
+            return;
+        }
+        const authenticated = !!authContext;
+        const prefix = authenticated && input.prefix ? input.prefix : randomPrefix();
+        const subdomain = buildTunnelSubdomain(prefix, input.targetPort, clientIp);
+        const expiresAt = new Date(Date.now() + (authenticated ? 24 * 60 * 60 * 1000 : 6 * 60 * 60 * 1000));
+        const sessionObs = this.createTrace("bt.client.session", {
+            "bt.client.session_id": input.sessionId,
+            "bt.tunnel.subdomain": subdomain,
+            "bt.tunnel.authenticated": authenticated,
+            "client.address": clientIp
+        });
+        sessionObs.log.info("CLIENT SESSION connect {subdomain} from {clientIp}", {
+            subdomain,
+            clientIp
+        });
+        const session = await prisma.clientSession.upsert({
+            where: { id: input.sessionId },
+            create: {
+                id: input.sessionId,
+                accountId: authContext?.accountId,
+                userAgent: Array.isArray(userAgent) ? userAgent.join(" ") : userAgent,
+                ipHash: hashValue(clientIp),
+                expiresAt
+            },
+            update: { expiresAt }
+        });
+        const tunnelRow = await prisma.tunnel.upsert({
+            where: { subdomain },
+            create: {
+                sessionId: session.id,
+                subdomain,
+                ownerServerId: this.appId,
+                targetHost: input.targetHost,
+                targetPort: input.targetPort,
+                authenticated,
+                accountId: authContext?.accountId,
+                status: "active",
+                expiresAt
+            },
+            update: {
+                sessionId: session.id,
+                ownerServerId: this.appId,
+                targetHost: input.targetHost,
+                targetPort: input.targetPort,
+                authenticated,
+                accountId: authContext?.accountId,
+                status: "active",
+                expiresAt
+            }
+        });
+        const tunnel = {
+            id: tunnelRow.id,
+            subdomain,
+            targetHost: input.targetHost,
+            targetPort: input.targetPort,
+            authenticated,
+            expiresAt,
+            ws,
+            pending: new Map(),
+            sessionObs
+        };
+        this.registry.set(tunnel);
+        sessionObs.log.info("CLIENT TUNNEL active {subdomain} -> {host}:{port}", {
+            subdomain,
+            host: input.targetHost,
+            port: input.targetPort
+        });
+        ws.send(JSON.stringify({
+            type: "tunnel.ready",
+            publicUrl: publicUrl.replace(/\/$/, "").replace(`://${domain}`, `://${subdomain}.${domain}`),
+            subdomain,
+            expiresAt: expiresAt.toISOString()
+        }));
+        ws.on("message", (raw) => this.handleClientFrame(tunnel, raw.toString()));
+        ws.on("close", (code, reason) => {
+            sessionObs.log.warn("CLIENT TUNNEL disconnected {subdomain}", { subdomain });
+            for (const [requestId, pending] of tunnel.pending.entries()) {
+                this.failPending(tunnel, requestId, pending, new Error("Tunnel client disconnected."));
+            }
+            this.registry.delete(subdomain);
+            void prisma.tunnel.update({ where: { id: tunnel.id }, data: { status: "disconnected" } }).catch(() => undefined);
+            sessionObs.end({ "bt.client.disconnect": true });
+            sessionObs.log.warn("CLIENT TUNNEL socket closed {subdomain} code={code} reason={reason}", {
+                subdomain,
+                code,
+                reason: reason.toString()
+            });
+        });
+        ws.on("error", (error) => {
+            sessionObs.log.error("CLIENT TUNNEL socket error {subdomain}: {message}", {
+                subdomain,
+                message: error.message
+            });
+        });
+    }
+    async proxyRequest(tunnel, method, path, headers, body, webStartedAt) {
+        const requestId = crypto.randomUUID();
+        const clientApiSentAt = Date.now();
+        const timeoutMs = tunnel.authenticated ? 5 * 60 * 1000 : 60 * 1000;
+        const idleTimeoutMs = tunnel.authenticated ? 60 * 1000 : 30 * 1000;
+        const requestObs = tunnel.sessionObs.startSpan("bt.client.proxy", {
+            "bt.tunnel.id": tunnel.id,
+            "bt.tunnel.subdomain": tunnel.subdomain,
+            "http.request.method": method,
+            "url.path": path
+        });
+        requestObs.log.info("CLIENT PROXY start {method} {path} via {subdomain}", {
+            method,
+            path,
+            subdomain: tunnel.subdomain
+        });
+        const responsePromise = new Promise((resolve, reject) => {
+            const pending = {
+                resolve: (response) => {
+                    void response.arrayBuffer().then((arrayBuffer) => {
+                        const responseHeaders = {};
+                        response.headers.forEach((value, key) => {
+                            responseHeaders[key] = value;
+                        });
+                        const output = {
+                            requestId,
+                            ownerServerId: this.appId,
+                            status: response.status,
+                            headers: responseHeaders,
+                            body: Buffer.from(arrayBuffer).toString("base64"),
+                            webStartedAt: pending.webStartedAt,
+                            clientApiRoundtripMs: pending.clientApiRoundtripMs ?? Date.now() - pending.clientApiSentAt,
+                            cliOverheadMs: pending.cliOverheadMs,
+                            originMs: pending.originMs
+                        };
+                        requestObs.log.info("CLIENT PROXY complete {method} {path} -> {status}", {
+                            method,
+                            path,
+                            status: response.status
+                        });
+                        requestObs.end({ "http.response.status_code": response.status });
+                        resolve(output);
+                    }).catch(reject);
+                },
+                reject: (error) => {
+                    requestObs.error(error);
+                    requestObs.end({ "status": "failed" });
+                    reject(error);
+                },
+                chunks: [],
+                webStartedAt,
+                clientApiSentAt,
+                totalTimer: setTimeout(() => this.failPending(tunnel, requestId, pending, new Error("Local app timed out.")), timeoutMs),
+                firstByteTimer: setTimeout(() => this.failPending(tunnel, requestId, pending, new Error("Local app did not acknowledge request within 5s.")), 5 * 1000),
+                idleTimeoutMs
+            };
+            tunnel.pending.set(requestId, pending);
+        });
+        tunnel.ws.send(JSON.stringify({
+            type: "request.start",
+            requestId,
+            method,
+            path,
+            headers,
+            body,
+            webStartedAt,
+            clientApiSentAt
+        }));
+        return responsePromise;
+    }
+    handleClientFrame(tunnel, raw) {
+        let frame;
+        try {
+            frame = ClientFrameSchema.parse(JSON.parse(raw));
+        }
+        catch (error) {
+            tunnel.sessionObs.error(error instanceof Error ? error : new Error(String(error)));
+            tunnel.ws.close(1002, "invalid frame");
+            return;
+        }
+        if (frame.type === "ws.fromOrigin" && frame.publicServerId && frame.publicSocketId && frame.frameType) {
+            void this.web.wsFromOriginSpecific(frame.publicServerId, tunnel.sessionObs, {
+                publicSocketId: frame.publicSocketId,
+                frameType: frame.frameType,
+                event: frame.message,
+                body: frame.body
+            });
+            return;
+        }
+        if (!frame.requestId)
+            return;
+        const pending = tunnel.pending.get(frame.requestId);
+        if (!pending)
+            return;
+        if (frame.type === "response.start") {
+            clearTimeout(pending.firstByteTimer);
+            this.resetIdleTimer(tunnel, frame.requestId, pending);
+            pending.status = frame.status ?? 200;
+            pending.headers = frame.headers ?? {};
+            return;
+        }
+        if (frame.type === "response.body" && frame.body) {
+            this.resetIdleTimer(tunnel, frame.requestId, pending);
+            pending.chunks.push(frame.body);
+            return;
+        }
+        if (frame.type === "response.end") {
+            pending.clientApiRoundtripMs = Date.now() - pending.clientApiSentAt;
+            pending.cliOverheadMs = frame.cliOverheadMs;
+            pending.originMs = frame.originMs;
+            this.clearPendingTimers(pending);
+            tunnel.pending.delete(frame.requestId);
+            const buffer = Buffer.concat(pending.chunks.map((chunk) => Buffer.from(chunk, "base64")));
+            pending.resolve(new Response(buffer, {
+                status: pending.status ?? 200,
+                headers: stripResponseHeaders(pending.headers ?? {})
+            }));
+            return;
+        }
+        if (frame.type === "error") {
+            this.failPending(tunnel, frame.requestId, pending, new Error(frame.message ?? "Tunnel client error."));
+        }
+    }
+    resetIdleTimer(tunnel, requestId, pending) {
+        if (pending.idleTimer)
+            clearTimeout(pending.idleTimer);
+        pending.idleTimer = setTimeout(() => {
+            this.failPending(tunnel, requestId, pending, new Error("Local app response stalled."));
+        }, pending.idleTimeoutMs);
+    }
+    failPending(tunnel, requestId, pending, error) {
+        if (!tunnel.pending.has(requestId))
+            return;
+        this.clearPendingTimers(pending);
+        tunnel.pending.delete(requestId);
+        pending.reject(error);
+    }
+    clearPendingTimers(pending) {
+        clearTimeout(pending.totalTimer);
+        clearTimeout(pending.firstByteTimer);
+        if (pending.idleTimer)
+            clearTimeout(pending.idleTimer);
+    }
+}
+async function safeJson(request) {
+    try {
+        return await request.json();
+    }
+    catch {
+        return {};
+    }
+}
+function json(value, status = 200) {
+    return new Response(JSON.stringify(value), {
+        status,
+        headers: { "content-type": "application/json; charset=utf-8" }
+    });
+}
+function buildAuthUrl(base, path, browserKey) {
+    const url = new URL(path.startsWith("/") ? path : `/${path}`, base);
+    url.searchParams.set("key", browserKey);
+    return url.toString();
+}
+async function validateDeviceToken(token, clientIp, userAgent) {
+    if (!token)
+        return undefined;
+    const ipRange = normalizeIpRange(clientIp);
+    if (!ipRange)
+        return undefined;
+    const row = await prisma.clientDeviceToken.findUnique({
+        where: { tokenHash: hashSecret(token) }
+    });
+    if (!row || row.revokedAt || row.expiresAt <= new Date())
+        return undefined;
+    if (row.ipFamily !== ipRange.family || row.ipRangeHash !== hashSecret(ipRange.cidr))
+        return undefined;
+    if (row.userAgentHash && row.userAgentHash !== hashSecret(userAgent))
+        return undefined;
+    await prisma.clientDeviceToken.update({
+        where: { id: row.id },
+        data: { lastUsedAt: new Date() }
+    });
+    return { accountId: row.accountId ?? undefined };
+}
+function proxyClientIp(headers) {
+    const forwardedFor = firstPublicForwardedIp(firstHeader(headers["x-forwarded-for"]));
+    if (forwardedFor)
+        return forwardedFor;
+    return firstHeader(headers["x-real-ip"])?.trim() || "unknown";
+}
+function proxyClientIpFromHeaders(headers) {
+    const forwardedFor = firstPublicForwardedIp(headers.get("x-forwarded-for") ?? undefined);
+    if (forwardedFor)
+        return forwardedFor;
+    return headers.get("x-real-ip")?.trim() || "unknown";
+}
+function firstHeader(value) {
+    return Array.isArray(value) ? value[0] : value;
+}
+function firstPublicForwardedIp(value) {
+    return value?.split(",").map((ip) => ip.trim()).find((ip) => ip && !isPrivateIp(ip));
+}
+function isPrivateIp(ip) {
+    return ip === "unknown"
+        || ip.startsWith("10.")
+        || ip.startsWith("192.168.")
+        || /^172\.(1[6-9]|2\d|3[0-1])\./.test(ip)
+        || ip.startsWith("127.")
+        || ip.startsWith("::1")
+        || ip.startsWith("fc")
+        || ip.startsWith("fd")
+        || ip.startsWith("fe80:");
+}
+function stripResponseHeaders(headers) {
+    const out = new Headers();
+    for (const [name, value] of Object.entries(headers)) {
+        const key = name.toLowerCase();
+        if (key === "set-cookie" || key === "connection" || key === "transfer-encoding")
+            continue;
+        out.set(name, value);
+    }
+    return out;
+}
+//# sourceMappingURL=index.js.map

package/lib/plugins/service-tunnel-client-api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/plugins/service-tunnel-client-api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EAGV,GAAG,EACH,QAAQ,EACR,kBAAkB,EAClB,kBAAkB,EAClB,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACvC,OAAO,EAAE,eAAe,EAAkB,MAAM,IAAI,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAChJ,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,YAAY,EACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAA0C,MAAM,eAAe,CAAC;AACvF,OAAO,eAAe,MAAM,0CAA0C,CAAC;AAEvE,MAAM,CAAC,MAAM,MAAM,GAAG,kBAAkB,CACtC;IACE,IAAI,EAAE,2BAA2B;IACjC,WAAW,EAAE,8BAA8B;IAC3C,IAAI,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC;CACzC,EACD,EAAE,CAAC,MAAM,CAAC;IACR,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IACpE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAChG,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAC9F,cAAc,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACpH,cAAc,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC;CACvG,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAChD,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,kBAAkB,CAAC;IAC7C,UAAU,EAAE,EAAE;IACd,QAAQ,EAAE;QACR,aAAa,EAAE,wBAAwB,CACrC,GAAG,CAAC,MAAM,CAAC;YACT,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC;YAClG,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC;YAC7E,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;YAC/D,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;YAC7D,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;YAC5D,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC;YAC7D,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC,CAAC;SACxE,EAAE,kCAAkC,CAAC,EACtC,+DAA+D,CAChE;QACD,eAAe,EAAE,wBAAwB,CACvC,GAAG,CAAC,MAAM,CAAC;YACT,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;YAC/D,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;YACpD,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC;YACrE,oBAAoB,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC,CAAC;YACnG,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC,CAAC;YAC7F,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAC9E,gBAAgB,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC,CAAC;SAC1F,EAAE,uBAAuB,CAAC,EAC3B,iEAAiE,CAClE;KACF;IACD,oBAAoB,EAAE,EAAE;IACxB,kBAAkB,EAAE;QAClB,eAAe,EAAE,qBAAqB,CACpC,GAAG,CAAC,MAAM,CAAC;YACT,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAAC;YAChE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;YAClD,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;YACnD,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,EAAE,SAAS,CAAC;YACvH,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAC1E,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;SACjF,EAAE,eAAe,CAAC,EACnB,GAAG,CAAC,MAAM,CAAC;YACT,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;YACpD,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,CAAC;YAClE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;YAClD,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,EAAE,SAAS,CAAC;YACvH,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC;YACjE,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;YAChF,oBAAoB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC;YACzF,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC,CAAC;YAC7F,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,CAAC,CAAC;SACxE,EAAE,gBAAgB,CAAC,EACpB,yDAAyD,EACzD,EAAE,CACH;KACF;IACD,aAAa,EAAE,EAAE;IACjB,WAAW,EAAE,EAAE;CAChB,CAAC,CAAC;AAEH,MAAM,OAAO,MAAO,SAAQ,UAA4D;IACtF,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;IAC1B,iBAAiB,GAAa,EAAE,CAAC;IACjC,gBAAgB,GAAa,EAAE,CAAC;IAChC,gBAAgB,GAAa,EAAE,CAAC;IAChC,eAAe,GAAa,EAAE,CAAC;IACvB,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAC;IAChC,GAAG,CAAK;IACR,MAAM,CAAS;IACf,GAAG,CAAkB;IACrB,GAAG,CAAkB;IAEtC,YAAY,GAA4E;QACtF,KAAK,CAAC,GAAG,CAAC,CAAC;QACX,IAAI,CAAC,GAAG,GAAG,IAAI,EAAE,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAe;QACxB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3D,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,eAAe,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;YACrF,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,oDAAoD,EAAE;gBACzE,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,WAAW,GAAG;gBAClB,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE;gBAC9B,aAAa,EAAE,IAAI,CAAC,KAAK;gBACzB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC1D,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,oBAAoB,EAAE,CAAC;aACxB,CAAC;YACF,IAAI,CAAC,MAAM;gBAAE,OAAO,WAAW,CAAC;YAChC,IAAI,MAAM,CAAC,EAAE,CAAC,UAAU,KAAK,MAAM,CAAC,EAAE,CAAC,IAAI;gBAAE,OAAO,WAAW,CAAC;YAChE,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAClH,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,eAAe,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;YAC/F,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC,UAAU,KAAK,MAAM,CAAC,EAAE,CAAC,IAAI;gBAAE,OAAO;YAC/D,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC5B,IAAI,EAAE,iBAAiB;gBACvB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;gBAChD,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;aACzC,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;YAC7F,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC,UAAU,KAAK,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;gBACvD,MAAM,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,cAAc,EAAE,WAAW,EAAE;oBACrE,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,SAAS,EAAE,OAAO;oBAClB,KAAK,EAAE,OAAO;iBACf,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC5B,IAAI,EAAE,aAAa;gBACnB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,KAAK;gBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAExC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE;YACjD,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE;SACzD,CAAC,CAAC,CAAC;QAEJ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACtD,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACrE,MAAM,UAAU,GAAG,eAAe,EAAE,CAAC;YACrC,MAAM,UAAU,GAAG,WAAW,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,mBAAmB,CAAC,CAAC;YAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YACnE,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;YAClF,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAE7D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBACpD,IAAI,EAAE;oBACJ,cAAc,EAAE,UAAU,CAAC,UAAU,CAAC;oBACtC,cAAc,EAAE,UAAU,CAAC,UAAU,CAAC;oBACtC,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC;oBAClC,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;oBACpE,SAAS;iBACV;aACF,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;YAChC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAExC,OAAO,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC;gBACxC,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,UAAU;gBACV,UAAU,EAAE,GAAG,CAAC,QAAQ,EAAE;gBAC1B,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;aACnC,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACtD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAC1D,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACxD,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC9B,OAAO,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YACxH,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;YACxF,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;gBAClE,OAAO,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5G,CAAC;YACD,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACpE,MAAM,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;gBAClG,OAAO,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YACtH,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YACrE,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;gBACjF,OAAO,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YACnI,CAAC;YAED,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/H,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;YAC5C,MAAM,cAAc,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,mBAAmB,CAAC,CAAC;YAClE,MAAM,MAAM,CAAC,YAAY,CAAC;gBACxB,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC;oBAC9B,IAAI,EAAE;wBACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;wBACpC,SAAS,EAAE,UAAU,CAAC,WAAW,CAAC;wBAClC,IAAI,EAAE,mBAAmB;wBACzB,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC;wBACrC,QAAQ,EAAE,OAAO,CAAC,MAAM;wBACxB,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;wBACpE,SAAS,EAAE,cAAc;qBAC1B;iBACF,CAAC;gBACF,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC;oBAC9B,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE;oBACzB,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE;iBACrD,CAAC;aACH,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC;gBACzC,MAAM,EAAE,UAAU;gBAClB,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,cAAc,CAAC,WAAW,EAAE;gBACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;YACzF,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;gBACtC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;gBACnD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACjE,KAAK,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YACrI,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAe;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,EAAa,EAAE,GAAQ,EAAE,SAA4B,EAAE,QAAgB,EAAE,MAAc,EAAE,SAAiB,EAAE,GAAe;QAC1J,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC;YACrC,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE;YAClD,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,WAAW;YAC7D,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC;YAC7D,aAAa,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,MAAM;YAC/D,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS;YACnD,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;SAClD,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa;YACrC,CAAC,CAAC,MAAM,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9G,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,WAAW,EAAE,CAAC;YACxC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YAClC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,8DAA8D,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3F,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC;QACpC,MAAM,MAAM,GAAG,aAAa,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;QAC7E,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC3E,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACpG,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,mBAAmB,EAAE;YACvD,sBAAsB,EAAE,KAAK,CAAC,SAAS;YACvC,qBAAqB,EAAE,SAAS;YAChC,yBAAyB,EAAE,aAAa;YACxC,gBAAgB,EAAE,QAAQ;SAC3B,CAAC,CAAC;QACH,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,oDAAoD,EAAE;YACxE,SAAS;YACT,QAAQ;SACT,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;YAChD,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE;YAC9B,MAAM,EAAE;gBACN,EAAE,EAAE,KAAK,CAAC,SAAS;gBACnB,SAAS,EAAE,WAAW,EAAE,SAAS;gBACjC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrE,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC;gBAC3B,SAAS;aACV;YACD,MAAM,EAAE,EAAE,SAAS,EAAE;SACtB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YAC3C,KAAK,EAAE,EAAE,SAAS,EAAE;YACpB,MAAM,EAAE;gBACN,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,SAAS;gBACT,aAAa,EAAE,IAAI,CAAC,KAAK;gBACzB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,aAAa;gBACb,SAAS,EAAE,WAAW,EAAE,SAAS;gBACjC,MAAM,EAAE,QAAQ;gBAChB,SAAS;aACV;YACD,MAAM,EAAE;gBACN,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,aAAa,EAAE,IAAI,CAAC,KAAK;gBACzB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,aAAa;gBACb,SAAS,EAAE,WAAW,EAAE,SAAS;gBACjC,MAAM,EAAE,QAAQ;gBAChB,SAAS;aACV;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAiB;YAC3B,EAAE,EAAE,SAAS,CAAC,EAAE;YAChB,SAAS;YACT,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,aAAa;YACb,SAAS;YACT,EAAE;YACF,OAAO,EAAE,IAAI,GAAG,EAAE;YAClB,UAAU;SACX,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,mDAAmD,EAAE;YACvE,SAAS;YACT,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,IAAI,EAAE,KAAK,CAAC,UAAU;SACvB,CAAC,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YACrB,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,MAAM,EAAE,EAAE,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YAC5F,SAAS;YACT,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;SACnC,CAAC,CAAC,CAAC;QAEJ,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC1E,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAC9B,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,wCAAwC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7E,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC5D,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;YACzF,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChC,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACjH,UAAU,CAAC,GAAG,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,qEAAqE,EAAE;gBACzF,SAAS;gBACT,IAAI;gBACJ,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC1B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,mDAAmD,EAAE;gBACxE,SAAS;gBACT,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,MAAoB,EAAE,MAAc,EAAE,IAAY,EAAE,OAA+B,EAAE,IAAY,EAAE,YAAoB;QAChJ,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACtC,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;QACnE,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;QACnE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,iBAAiB,EAAE;YAChE,cAAc,EAAE,MAAM,CAAC,EAAE;YACzB,qBAAqB,EAAE,MAAM,CAAC,SAAS;YACvC,qBAAqB,EAAE,MAAM;YAC7B,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,oDAAoD,EAAE;YACxE,MAAM;YACN,IAAI;YACJ,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,IAAI,OAAO,CAA6M,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClQ,MAAM,OAAO,GAAmB;gBAC9B,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;oBACpB,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;wBAC/C,MAAM,eAAe,GAA2B,EAAE,CAAC;wBACnD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;4BACtC,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;wBAC/B,CAAC,CAAC,CAAC;wBACH,MAAM,MAAM,GAAG;4BACb,SAAS;4BACT,aAAa,EAAE,IAAI,CAAC,KAAK;4BACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;4BACvB,OAAO,EAAE,eAAe;4BACxB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;4BACjD,YAAY,EAAE,OAAO,CAAC,YAAY;4BAClC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,eAAe;4BAC1F,aAAa,EAAE,OAAO,CAAC,aAAa;4BACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;yBAC3B,CAAC;wBACF,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,mDAAmD,EAAE;4BACvE,MAAM;4BACN,IAAI;4BACJ,MAAM,EAAE,QAAQ,CAAC,MAAM;yBACxB,CAAC,CAAC;wBACH,UAAU,CAAC,GAAG,CAAC,EAAE,2BAA2B,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;wBACjE,OAAO,CAAC,MAAM,CAAC,CAAC;oBAClB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACnB,CAAC;gBACD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;oBAChB,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACxB,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;oBACvC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;gBACD,MAAM,EAAE,EAAE;gBACV,YAAY;gBACZ,eAAe;gBACf,UAAU,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,SAAS,CAAC;gBACxH,cAAc,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;gBACvJ,aAAa;aACd,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YAC5B,IAAI,EAAE,eAAe;YACrB,SAAS;YACT,MAAM;YACN,IAAI;YACJ,OAAO;YACP,IAAI;YACJ,YAAY;YACZ,eAAe;SAChB,CAAC,CAAC,CAAC;QAEJ,OAAO,eAAe,CAAC;IACzB,CAAC;IAEO,iBAAiB,CAAC,MAAoB,EAAE,GAAW;QACzD,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnF,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACtG,KAAK,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE;gBAC1E,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,SAAS;YAAE,OAAO;QAE7B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACpC,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YACrC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACtD,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC;YACrC,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;YACtC,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACjD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACtD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAClC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC;YACpE,OAAO,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;YAC5C,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YAClC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC1F,OAAO,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE;gBACnC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,GAAG;gBAC7B,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;aACrD,CAAC,CAAC,CAAC;YACJ,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,sBAAsB,CAAC,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,MAAoB,EAAE,SAAiB,EAAE,OAAuB;QACrF,IAAI,OAAO,CAAC,SAAS;YAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvD,OAAO,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;QACzF,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5B,CAAC;IAEO,WAAW,CAAC,MAAoB,EAAE,SAAiB,EAAE,OAAuB,EAAE,KAAY;QAChG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO;QAC3C,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAEO,kBAAkB,CAAC,OAAuB;QAChD,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACjC,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,SAAS;YAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;;AAGH,KAAK,UAAU,QAAQ,CAAC,OAAgB;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,MAAM,GAAG,GAAG;IACxC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;QACzC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE;KAC/D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,IAAY,EAAE,UAAkB;IAClE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IACpE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,KAAyB,EAAE,QAAgB,EAAE,SAAiB;IAC/F,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAE/B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC;QACpD,KAAK,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE;KACxC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IAC3E,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,WAAW,KAAK,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACtG,IAAI,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,aAAa,KAAK,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAEvF,MAAM,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC;QACpC,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE;QACrB,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE;KACjC,CAAC,CAAC;IACH,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,aAAa,CAAC,OAAgD;IACrE,MAAM,YAAY,GAAG,sBAAsB,CAAC,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACrF,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IAEtC,OAAO,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AAChE,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAgB;IAChD,MAAM,YAAY,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,SAAS,CAAC,CAAC;IACzF,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,KAAoC;IACvD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACjD,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAyB;IACvD,OAAO,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,WAAW,CAAC,EAAU;IAC7B,OAAO,EAAE,KAAK,SAAS;WAClB,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;WACpB,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;WACzB,6BAA6B,CAAC,IAAI,CAAC,EAAE,CAAC;WACtC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;WACrB,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;WACpB,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;WACnB,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;WACnB,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,oBAAoB,CAAC,OAA+B;IAC3D,MAAM,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,IAAI,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,mBAAmB;YAAE,SAAS;QAC1F,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}