@bouncesecurity/aghast 0.4.4-alpha.1 → 0.5.0

package/config/prompts/general-vuln-discovery.md

@@ -18,13 +18,14 @@ For each code unit, ask yourself:
 - What can an attacker control? (request body, URL params, headers, query strings)
 - Where does that input end up? (database queries, HTTP requests, file operations, authorization decisions)
 - What guarantees does the code assume but not enforce? (atomicity, ownership, trust boundaries, data types)
-- Are multi-step operations safe if executed concurrently by multiple users?
+- Are multi-step operations safe if executed concurrently by multiple users? (check-then-act on shared state — stock, balances, quotas, uniqueness — without `FOR UPDATE`, transactions, or atomic conditional updates is a TOCTOU race)
+- Are security-sensitive values (password reset tokens, session IDs, API keys, CSRF tokens, invitation codes, one-time codes) generated with cryptographically secure randomness? `Math.random()`, `Date.now()`, timestamps, or PIDs are predictable and unsafe for anything that gates authentication or authorization.
 
 BEFORE REPORTING — VALIDATE EACH FINDING:
 
 Before including any issue in your response, you MUST be able to answer YES to all of these:
-1. Can I construct a specific HTTP request (or sequence of requests) that triggers this vulnerability?
-2. After the exploit, what specific harm has occurred? Name ONE of: unauthorized data accessed, unauthorized action performed, authentication/authorization bypassed, server made to contact an attacker-controlled or internal endpoint, arbitrary code/query executed. If the harm is only "bad data in a database" (wrong types, negative numbers) with no further security consequence in this codebase, it is NOT a finding.
+1. Can I construct a specific HTTP request (or sequence of requests) that triggers this vulnerability? For race conditions, two or more concurrent requests count as a valid "sequence" — you do not need a single-request exploit.
+2. After the exploit, what specific harm has occurred? Name ONE of: unauthorized data accessed, unauthorized action performed, authentication/authorization bypassed (including via predictable security tokens that gate auth, e.g. reset tokens generated from `Math.random()`), server made to contact an attacker-controlled or internal endpoint, arbitrary code/query executed, or financial/inventory state corrupted in a way an attacker can exploit for value (e.g. overselling limited stock, double-spending balance, bypassing quota). Pure data-quality bugs (wrong types, missing length checks) with no security or value consequence are NOT findings.
 3. Does the exploit work against THIS codebase as written — including all middleware, route registrations, and existing validation? Do not ignore protections that exist outside the function body (e.g., middleware applied at route registration time).
 
 If you cannot answer YES to all three, do not report the issue.
@@ -37,6 +38,9 @@ Only report vulnerabilities that meet ALL of these criteria:
 - The vulnerability exists in the code AS WRITTEN — do not speculate about missing features, future code, or how the code might be used differently
 - The impact is demonstrated end-to-end in THIS codebase — not dependent on hypothetical downstream consumers of stored data
 
+EXCEPTION — predictable security tokens:
+The "end-to-end demonstration" and "no hypothetical downstream consumer" rules above DO NOT apply when code generates a value with a predictable source (`Math.random()`, `Date.now()`, timestamps, counters, non-CSPRNG hashes) AND the value's name or surrounding context indicates it functions as a credential or capability (reset/recovery tokens, session IDs, API keys, OTPs, magic links, CSRF tokens, invitation codes, etc.). Naming and intent are sufficient evidence — you do not need to find the consumer in this codebase. Report at the generation site; treat the harm as "authentication/authorization bypassed via predictable token". This exception applies only to values whose purpose is to authenticate a user, authorise an action, or establish a recoverable session — NOT to identifiers used purely for logging, tracing, or UI rendering, even if their names contain "token", "id", or "key".
+
 Do NOT report:
 - Missing input validation that has no security impact (e.g., missing length checks, type checks, or negative number checks unless they lead to a specific exploit like bypassing authorization)
 - Information disclosure via error messages (e.g., leaking product names or stock counts in error responses) unless it exposes credentials or secrets

package/dist/build-config.d.ts

@@ -0,0 +1,15 @@
+/**
+ * CLI utility for building / editing a runtime-config.json file.
+ *
+ * Interactive by default; flag-only mode skips prompts. If a config file
+ * already exists, its values are loaded and used as defaults — only the
+ * fields you change (or pass as flags) are updated.
+ *
+ * Usage:
+ *   aghast build-config --config-dir <path>          # interactive, file at <path>/runtime-config.json
+ *   aghast build-config --runtime-config <file>      # interactive, write to explicit file
+ *   aghast build-config --config-dir <path> --provider claude-code --model sonnet  # non-interactive
+ *   aghast build-config --config-dir <path> --non-interactive  # accept all current/defaults
+ */
+export declare function runBuildConfig(args: string[]): Promise<void>;
+//# sourceMappingURL=build-config.d.ts.map

package/dist/build-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-config.d.ts","sourceRoot":"","sources":["../src/build-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA4XH,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkOlE"}

package/dist/build-config.js

@@ -0,0 +1,568 @@
+/**
+ * CLI utility for building / editing a runtime-config.json file.
+ *
+ * Interactive by default; flag-only mode skips prompts. If a config file
+ * already exists, its values are loaded and used as defaults — only the
+ * fields you change (or pass as flags) are updated.
+ *
+ * Usage:
+ *   aghast build-config --config-dir <path>          # interactive, file at <path>/runtime-config.json
+ *   aghast build-config --runtime-config <file>      # interactive, write to explicit file
+ *   aghast build-config --config-dir <path> --provider claude-code --model sonnet  # non-interactive
+ *   aghast build-config --config-dir <path> --non-interactive  # accept all current/defaults
+ */
+import { writeFile, mkdir, access } from 'node:fs/promises';
+import { resolve, dirname } from 'node:path';
+import { createInterface } from 'node:readline/promises';
+import { stdin, stdout } from 'node:process';
+import { createRequire } from 'node:module';
+import { ERROR_CODES, formatError, formatFatalError } from './error-codes.js';
+import { loadRuntimeConfig } from './runtime-config.js';
+import { createProviderByName, getProviderNames, DEFAULT_PROVIDER_NAME } from './provider-registry.js';
+import { getAvailableFormats } from './formatters/index.js';
+import { getAvailableLogTypes, isValidLogLevel, getLogLevel, setLogLevel } from './logging.js';
+import { DEFAULT_MODEL } from './types.js';
+import { DEFAULT_OUTPUT_FORMAT, DEFAULT_LOG_LEVEL, DEFAULT_LOG_TYPE, DEFAULT_GENERIC_PROMPT, DEFAULT_FAIL_ON_CHECK_FAILURE, } from './defaults.js';
+/** Defaults shown in interactive prompts so users know what they'd get by leaving a field unset.
+ *  Sourced from the same constants the scanner uses at runtime — no duplication. */
+const SCAN_DEFAULTS = {
+    provider: DEFAULT_PROVIDER_NAME,
+    model: DEFAULT_MODEL,
+    outputFormat: DEFAULT_OUTPUT_FORMAT,
+    outputDirectory: '<repo-path>', // No constant — derived at runtime from the scanned repo path
+    logLevel: DEFAULT_LOG_LEVEL,
+    logType: DEFAULT_LOG_TYPE,
+    genericPrompt: DEFAULT_GENERIC_PROMPT,
+    failOnCheckFailure: DEFAULT_FAIL_ON_CHECK_FAILURE,
+};
+const VALID_LOG_LEVELS = ['error', 'warn', 'info', 'debug', 'trace'];
+const VALID_BOOLS = ['true', 'false'];
+const FLAG_MAP = {
+    '--config-dir': 'configDir',
+    '--runtime-config': 'runtimeConfig',
+    '--provider': 'provider',
+    '--model': 'model',
+    '--output-format': 'outputFormat',
+    '--output-directory': 'outputDirectory',
+    '--log-level': 'logLevel',
+    '--log-file': 'logFile',
+    '--log-type': 'logType',
+    '--generic-prompt': 'genericPrompt',
+    '--fail-on-check-failure': 'failOnCheckFailure',
+};
+const KNOWN_FLAGS = new Set([...Object.keys(FLAG_MAP), '--non-interactive', '--clear', '--help', '-h']);
+function parseFlags(args) {
+    const flags = {};
+    const clear = [];
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === '--non-interactive') {
+            flags.nonInteractive = true;
+            continue;
+        }
+        if (arg === '--clear') {
+            const value = args[i + 1];
+            if (value === undefined || value.startsWith('--')) {
+                console.error(formatError(ERROR_CODES.E1001, '--clear requires a field name'));
+                process.exit(1);
+            }
+            clear.push(value);
+            i++;
+            continue;
+        }
+        const key = FLAG_MAP[arg];
+        if (key) {
+            const value = args[i + 1];
+            if (value === undefined || value.startsWith('--')) {
+                console.error(formatError(ERROR_CODES.E1001, `${arg} requires a value`));
+                process.exit(1);
+            }
+            flags[key] = value;
+            i++;
+            continue;
+        }
+        if (arg.startsWith('--') || arg.startsWith('-')) {
+            // Unknown option — fail fast instead of silently ignoring (catches typos like `--outpt-format`).
+            const known = [...KNOWN_FLAGS].sort().join(', ');
+            console.error(formatError(ERROR_CODES.E1001, `Unknown option "${arg}". Known: ${known}`));
+            process.exit(1);
+        }
+        // Bare positional args are not used by build-config.
+        console.error(formatError(ERROR_CODES.E1001, `Unexpected positional argument "${arg}"`));
+        process.exit(1);
+    }
+    if (clear.length > 0) {
+        flags.clear = clear;
+    }
+    return flags;
+}
+const HELP = `Usage: aghast build-config [options]
+
+Build or edit a runtime-config.json file. Interactive by default; pass --non-interactive
+or any value flags to skip prompts. If the target file already exists, its values are
+loaded as defaults — only fields you change are updated.
+
+Target file:
+  --config-dir <path>           Write to <path>/runtime-config.json (created if missing)
+  --runtime-config <path>       Write to an explicit file path
+                                (one of these is required; --runtime-config wins if both
+                                are given)
+
+Field flags (any value provided here skips its prompt; closed lists are validated):
+  --provider <name>             Agent provider name (e.g. claude-code)
+  --model <id>                  Model ID. Must be one returned by the provider's
+                                listModels() (skip flag and use interactive mode to
+                                browse the live list).
+  --output-format <fmt>         Output format: json | sarif
+  --output-directory <path>     Default output directory for results
+  --log-level <level>           Console log level: error | warn | info | debug | trace
+  --log-file <path>             Log file path (omit to disable)
+  --log-type <type>             Log file handler type (default: file)
+  --generic-prompt <file>       Generic prompt template filename
+  --fail-on-check-failure <b>   true | false
+
+Mode flags:
+  --non-interactive             Don't prompt — use existing values / defaults / flags only
+  --clear <field>               Remove a field from the config. May be repeated.
+                                Fields: provider, model, outputFormat, outputDirectory,
+                                logLevel, logFile, logType, genericPrompt,
+                                failOnCheckFailure
+  -h, --help                    Show this help message
+
+Examples:
+  aghast build-config --config-dir ./my-checks
+  aghast build-config --config-dir ./my-checks --provider claude-code --model sonnet --non-interactive
+  aghast build-config --runtime-config ./prod.json --output-format sarif --fail-on-check-failure true
+  aghast build-config --config-dir ./my-checks --clear logFile --clear genericPrompt`;
+const CLEARABLE_FIELDS = new Set([
+    'provider',
+    'model',
+    'outputFormat',
+    'outputDirectory',
+    'logLevel',
+    'logFile',
+    'logType',
+    'genericPrompt',
+    'failOnCheckFailure',
+]);
+async function fileExists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function configToFlatDefaults(config) {
+    return {
+        provider: config.agentProvider?.name,
+        model: config.agentProvider?.model,
+        outputFormat: config.reporting?.outputFormat,
+        outputDirectory: config.reporting?.outputDirectory,
+        logLevel: config.logging?.level,
+        logFile: config.logging?.logFile,
+        logType: config.logging?.logType,
+        genericPrompt: config.genericPrompt,
+        failOnCheckFailure: config.failOnCheckFailure,
+    };
+}
+function buildConfig(values) {
+    const config = {};
+    if (values.provider !== undefined || values.model !== undefined) {
+        config.agentProvider = {};
+        if (values.provider !== undefined)
+            config.agentProvider.name = values.provider;
+        if (values.model !== undefined)
+            config.agentProvider.model = values.model;
+    }
+    if (values.outputFormat !== undefined || values.outputDirectory !== undefined) {
+        config.reporting = {};
+        if (values.outputFormat !== undefined)
+            config.reporting.outputFormat = values.outputFormat;
+        if (values.outputDirectory !== undefined)
+            config.reporting.outputDirectory = values.outputDirectory;
+    }
+    if (values.logLevel !== undefined || values.logFile !== undefined || values.logType !== undefined) {
+        config.logging = {};
+        if (values.logLevel !== undefined)
+            config.logging.level = values.logLevel;
+        if (values.logFile !== undefined)
+            config.logging.logFile = values.logFile;
+        if (values.logType !== undefined)
+            config.logging.logType = values.logType;
+    }
+    if (values.genericPrompt !== undefined)
+        config.genericPrompt = values.genericPrompt;
+    if (values.failOnCheckFailure !== undefined)
+        config.failOnCheckFailure = values.failOnCheckFailure;
+    return config;
+}
+async function getProviderModels(providerName) {
+    const provider = createProviderByName(providerName);
+    // Silence provider progress logs ("Starting OpenCode server...", etc.) during the
+    // throwaway init/teardown used to fetch the model list. The user is in an interactive
+    // picker and doesn't need to see transient server lifecycle noise. Errors still surface
+    // via thrown exceptions, which the caller catches and reports.
+    const savedLevel = getLogLevel();
+    setLogLevel('silent');
+    try {
+        // Honor the AgentProvider contract — initialize() before any other method call.
+        // We intentionally pass an empty config so the provider falls back to env vars (e.g.
+        // ANTHROPIC_API_KEY). For providers like Claude Code that require either a key or
+        // AGHAST_LOCAL_CLAUDE=true, initialization may throw — let it propagate so callers
+        // can catch and degrade (e.g. fall back to free-text model entry).
+        await provider.initialize({});
+        if (!provider.listModels) {
+            return [];
+        }
+        return await provider.listModels();
+    }
+    finally {
+        // Providers that start subprocesses/servers (e.g. OpenCode) must be cleaned up,
+        // or the process leaks resources until Node exits. cleanup() is documented to be
+        // safe on partially-initialized providers. No-op for providers without cleanup.
+        await provider.cleanup?.();
+        setLogLevel(savedLevel);
+    }
+}
+/** Memoising fetcher — call once per (providerName, run) and re-use the result.
+ *
+ * Note: this caches the Promise itself, including rejections. That's intentional —
+ * if the SDK call fails (e.g. no API key, no local Claude session), we want subsequent
+ * lookups within the same run to hit the cached failure rather than retrying and
+ * spamming the user with the same warning twice (once interactively, once during
+ * validation). Both call sites already handle the rejection by warning + degrading. */
+function makeModelFetcher() {
+    const cache = new Map();
+    return (name) => {
+        if (!cache.has(name)) {
+            cache.set(name, getProviderModels(name));
+        }
+        return cache.get(name);
+    };
+}
+function formatModelChoice(m) {
+    const parts = [m.id];
+    if (m.label && m.label !== m.id)
+        parts.push(`— ${m.label}`);
+    if (m.description)
+        parts.push(`· ${m.description}`);
+    return parts.join(' ');
+}
+function createPromptHelpers() {
+    const rl = createInterface({ input: stdin, output: stdout });
+    function emptyHint(builtInDefault) {
+        if (builtInDefault !== undefined && builtInDefault !== '') {
+            return ` (Enter to leave unset — default: ${builtInDefault})`;
+        }
+        return ' (Enter to leave unset)';
+    }
+    function setHint() {
+        return ' (Enter to keep, "-" to clear)';
+    }
+    async function ask(label, current, builtInDefault) {
+        if (current === undefined || current === '') {
+            const answer = (await rl.question(`${label}${emptyHint(builtInDefault)}: `)).trim();
+            if (answer === '' || answer === '-')
+                return undefined;
+            return answer;
+        }
+        const annotations = [`current: ${current}`];
+        if (builtInDefault !== undefined && builtInDefault !== '' && builtInDefault !== current) {
+            annotations.push(`default if cleared: ${builtInDefault}`);
+        }
+        const answer = (await rl.question(`${label} [${annotations.join(', ')}]${setHint()}: `)).trim();
+        if (answer === '')
+            return current;
+        if (answer === '-')
+            return undefined;
+        return answer;
+    }
+    async function askChoice(label, choices, current, builtInDefault) {
+        if (choices.length === 0) {
+            return ask(label, current, builtInDefault);
+        }
+        const hasCurrent = current !== undefined && choices.includes(current);
+        const numbered = choices
+            .map((c, i) => {
+            const annotations = [];
+            if (hasCurrent && c === current)
+                annotations.push('current');
+            if (builtInDefault !== undefined && c === builtInDefault)
+                annotations.push('default');
+            return `  ${i + 1}) ${c}${annotations.length > 0 ? ` (${annotations.join(', ')})` : ''}`;
+        })
+            .join('\n');
+        // For numbered choices, the "(default)" annotation in the list above is enough —
+        // don't duplicate it in the hint (Enter doesn't pick the default anyway).
+        const hint = hasCurrent ? setHint() : ' (Enter to leave unset)';
+        for (let attempt = 0; attempt < 3; attempt++) {
+            const answer = (await rl.question(`${label}:\n${numbered}\nChoice${hint}: `)).trim();
+            if (answer === '')
+                return hasCurrent ? current : undefined;
+            if (answer === '-')
+                return undefined;
+            const byNumber = parseInt(answer, 10);
+            if (!isNaN(byNumber) && byNumber >= 1 && byNumber <= choices.length) {
+                return choices[byNumber - 1];
+            }
+            if (choices.includes(answer))
+                return answer;
+            console.error(`Invalid choice "${answer}". Enter a number 1-${choices.length} or the value.`);
+        }
+        throw new Error(`No valid choice for "${label}" after 3 attempts`);
+    }
+    async function askBool(label, current, builtInDefault) {
+        const choice = await askChoice(label, VALID_BOOLS, current === undefined ? undefined : String(current), builtInDefault === undefined ? undefined : String(builtInDefault));
+        if (choice === undefined)
+            return undefined;
+        return choice === 'true';
+    }
+    return { ask, askChoice, askBool, close: () => rl.close() };
+}
+function validateAgainst(label, value, allowed) {
+    if (value === undefined)
+        return;
+    if (!allowed.includes(value)) {
+        throw new Error(`Invalid ${label} "${value}". Must be one of: ${allowed.join(', ')}`);
+    }
+}
+export async function runBuildConfig(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        console.log(HELP);
+        process.exit(0);
+    }
+    const flags = parseFlags(args);
+    // Validate --clear field names early
+    if (flags.clear) {
+        for (const field of flags.clear) {
+            if (!CLEARABLE_FIELDS.has(field)) {
+                console.error(formatError(ERROR_CODES.E1001, `Unknown --clear field "${field}". Valid fields: ${[...CLEARABLE_FIELDS].join(', ')}`));
+                process.exit(1);
+            }
+        }
+    }
+    // Resolve target file path
+    let targetPath;
+    if (flags.runtimeConfig) {
+        targetPath = resolve(flags.runtimeConfig);
+    }
+    else if (flags.configDir) {
+        targetPath = resolve(flags.configDir, 'runtime-config.json');
+    }
+    else if (process.env.AGHAST_CONFIG_DIR) {
+        targetPath = resolve(process.env.AGHAST_CONFIG_DIR, 'runtime-config.json');
+    }
+    else {
+        console.error(formatError(ERROR_CODES.E2001, 'One of --config-dir or --runtime-config is required (or set AGHAST_CONFIG_DIR).'));
+        process.exit(1);
+    }
+    // Load existing config (or empty)
+    const exists = await fileExists(targetPath);
+    let existing = {};
+    if (exists) {
+        try {
+            existing = await loadRuntimeConfig(undefined, targetPath);
+            console.log(`Loaded existing config from ${targetPath}`);
+        }
+        catch (err) {
+            console.error(formatError(ERROR_CODES.E2005, err instanceof Error ? err.message : String(err)));
+            process.exit(1);
+        }
+    }
+    else {
+        console.log(`No existing config at ${targetPath} — creating new one.`);
+    }
+    const defaults = configToFlatDefaults(existing);
+    // Validate provider flag if given (so we can fetch model list)
+    if (flags.provider !== undefined) {
+        const known = getProviderNames();
+        if (!known.includes(flags.provider)) {
+            console.error(formatError(ERROR_CODES.E3002, `Unknown provider "${flags.provider}". Known: ${known.join(', ')}`));
+            process.exit(1);
+        }
+    }
+    const interactive = !flags.nonInteractive
+        && (process.stdin.isTTY ?? false);
+    // Reject conflicting --clear <field> + --<field> <value>: ambiguous intent.
+    // `field` here is already validated against CLEARABLE_FIELDS (which never contains
+    // 'clear' or 'nonInteractive'), so `flags[field]` only resolves to value-bearing flags.
+    if (flags.clear) {
+        const conflicts = [];
+        for (const field of flags.clear) {
+            if (flags[field] !== undefined) {
+                conflicts.push(field);
+            }
+        }
+        if (conflicts.length > 0) {
+            const list = conflicts.map((f) => `--clear ${f} and --${f.replace(/([A-Z])/g, '-$1').toLowerCase()}`).join(', ');
+            console.error(formatError(ERROR_CODES.E1001, `Conflicting flags: ${list}. Use one or the other for each field.`));
+            process.exit(1);
+        }
+    }
+    const result = { ...defaults };
+    // Apply --clear first
+    if (flags.clear) {
+        for (const field of flags.clear) {
+            result[field] = undefined;
+        }
+    }
+    // Apply explicit flag values
+    if (flags.provider !== undefined)
+        result.provider = flags.provider;
+    if (flags.outputFormat !== undefined)
+        result.outputFormat = flags.outputFormat;
+    if (flags.outputDirectory !== undefined)
+        result.outputDirectory = flags.outputDirectory;
+    if (flags.logLevel !== undefined)
+        result.logLevel = flags.logLevel;
+    if (flags.logFile !== undefined)
+        result.logFile = flags.logFile;
+    if (flags.logType !== undefined)
+        result.logType = flags.logType;
+    if (flags.genericPrompt !== undefined)
+        result.genericPrompt = flags.genericPrompt;
+    if (flags.failOnCheckFailure !== undefined) {
+        if (!VALID_BOOLS.includes(flags.failOnCheckFailure)) {
+            console.error(formatError(ERROR_CODES.E1001, `Invalid --fail-on-check-failure "${flags.failOnCheckFailure}". Must be true or false.`));
+            process.exit(1);
+        }
+        result.failOnCheckFailure = flags.failOnCheckFailure === 'true';
+    }
+    // Model is applied last, after we have a resolved provider, so we can validate against listModels
+    const pendingModelFlag = flags.model;
+    // Cache provider→models lookups so we never call the SDK twice in one run.
+    const fetchModels = makeModelFetcher();
+    // Interactive prompts (only for fields not set by flags)
+    if (interactive) {
+        const helpers = createPromptHelpers();
+        try {
+            const providers = getProviderNames();
+            if (flags.provider === undefined) {
+                result.provider = await helpers.askChoice('Agent provider', providers, result.provider, SCAN_DEFAULTS.provider);
+            }
+            // Resolve provider for model listing — fall back to default only for the SDK call,
+            // not as a faked "current" value in the prompt above.
+            const providerForModels = result.provider ?? DEFAULT_PROVIDER_NAME;
+            let availableModels = [];
+            if (providers.includes(providerForModels)) {
+                try {
+                    availableModels = await fetchModels(providerForModels);
+                }
+                catch (err) {
+                    console.error(`Warning: could not fetch model list from "${providerForModels}": ${err instanceof Error ? err.message : String(err)}`);
+                    console.error('Falling back to free-text model entry.');
+                }
+            }
+            if (pendingModelFlag === undefined) {
+                if (availableModels.length === 0) {
+                    result.model = await helpers.ask('AI model', result.model, SCAN_DEFAULTS.model);
+                }
+                else {
+                    const labels = availableModels.map(formatModelChoice);
+                    // Match by id (not string-prefix on labels) — labels may include description text
+                    // that could collide with another model's id.
+                    const currentIdx = result.model
+                        ? availableModels.findIndex((m) => m.id === result.model)
+                        : -1;
+                    const defaultIdx = availableModels.findIndex((m) => m.id === SCAN_DEFAULTS.model);
+                    const currentLabel = currentIdx >= 0 ? labels[currentIdx] : undefined;
+                    const defaultLabel = defaultIdx >= 0 ? labels[defaultIdx] : undefined;
+                    const chosen = await helpers.askChoice('AI model (from provider SDK)', labels, currentLabel, defaultLabel);
+                    if (chosen === undefined) {
+                        result.model = undefined;
+                    }
+                    else {
+                        const idx = labels.indexOf(chosen);
+                        result.model = idx >= 0 ? availableModels[idx].id : chosen;
+                    }
+                }
+            }
+            if (flags.outputFormat === undefined) {
+                result.outputFormat = await helpers.askChoice('Output format', getAvailableFormats(), result.outputFormat, SCAN_DEFAULTS.outputFormat);
+            }
+            if (flags.outputDirectory === undefined) {
+                result.outputDirectory = await helpers.ask('Output directory', result.outputDirectory, SCAN_DEFAULTS.outputDirectory);
+            }
+            if (flags.logLevel === undefined) {
+                result.logLevel = await helpers.askChoice('Log level', VALID_LOG_LEVELS, result.logLevel, SCAN_DEFAULTS.logLevel);
+            }
+            if (flags.logFile === undefined) {
+                result.logFile = await helpers.ask('Log file path', result.logFile);
+            }
+            if (flags.logType === undefined) {
+                const logTypes = getAvailableLogTypes();
+                result.logType = await helpers.askChoice('Log type', logTypes, result.logType, SCAN_DEFAULTS.logType);
+            }
+            if (flags.genericPrompt === undefined) {
+                result.genericPrompt = await helpers.ask('Generic prompt template filename', result.genericPrompt, SCAN_DEFAULTS.genericPrompt);
+            }
+            if (flags.failOnCheckFailure === undefined) {
+                result.failOnCheckFailure = await helpers.askBool('Fail on check failure', result.failOnCheckFailure, SCAN_DEFAULTS.failOnCheckFailure);
+            }
+        }
+        catch (err) {
+            // Includes "No valid choice for X after N attempts" — surface as a usage error.
+            // process.exit terminates synchronously without running pending finally blocks,
+            // so the readline handle is left for the OS to reclaim on this path. That's fine —
+            // the process is dying anyway. The finally below only runs on the happy path.
+            console.error(formatError(ERROR_CODES.E1003, err instanceof Error ? err.message : String(err)));
+            process.exit(1);
+        }
+        finally {
+            helpers.close();
+        }
+    }
+    // Apply pending model flag now (after interactive may have changed provider)
+    if (pendingModelFlag !== undefined) {
+        result.model = pendingModelFlag;
+    }
+    // Validate selections against closed lists
+    try {
+        if (result.provider !== undefined) {
+            validateAgainst('provider', result.provider, getProviderNames());
+        }
+        if (result.model !== undefined) {
+            const providerForValidation = result.provider ?? DEFAULT_PROVIDER_NAME;
+            if (getProviderNames().includes(providerForValidation)) {
+                try {
+                    const allowed = await fetchModels(providerForValidation);
+                    if (allowed.length > 0) {
+                        const allowedIds = allowed.map((m) => m.id);
+                        validateAgainst(`model for provider "${providerForValidation}"`, result.model, allowedIds);
+                    }
+                }
+                catch (err) {
+                    console.error(`Warning: skipped model validation — could not fetch model list: ${err instanceof Error ? err.message : String(err)}`);
+                }
+            }
+        }
+        validateAgainst('output format', result.outputFormat, getAvailableFormats());
+        if (result.logLevel !== undefined && !isValidLogLevel(result.logLevel)) {
+            throw new Error(`Invalid log level "${result.logLevel}". Must be one of: ${VALID_LOG_LEVELS.join(', ')}`);
+        }
+        validateAgainst('log type', result.logType, getAvailableLogTypes());
+    }
+    catch (err) {
+        console.error(formatError(ERROR_CODES.E2005, err instanceof Error ? err.message : String(err)));
+        process.exit(1);
+    }
+    const finalConfig = buildConfig(result);
+    // Bootstrap parent directory if needed
+    await mkdir(dirname(targetPath), { recursive: true });
+    await writeFile(targetPath, JSON.stringify(finalConfig, null, 2) + '\n', 'utf-8');
+    console.log(`\nWrote runtime config to ${targetPath}`);
+}
+// Auto-run when executed directly, but not when imported by cli.ts.
+if (!process.env._AGHAST_CLI) {
+    await import('dotenv/config');
+    runBuildConfig(process.argv.slice(2)).catch((err) => {
+        const require = createRequire(import.meta.url);
+        const pkg = require('../package.json');
+        console.error('');
+        console.error(formatFatalError(err instanceof Error ? err.message : String(err), pkg.version));
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=build-config.js.map

package/dist/build-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-config.js","sourceRoot":"","sources":["../src/build-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACvG,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,6BAA6B,GAC9B,MAAM,eAAe,CAAC;AAEvB;oFACoF;AACpF,MAAM,aAAa,GAAG;IACpB,QAAQ,EAAE,qBAAqB;IAC/B,KAAK,EAAE,aAAa;IACpB,YAAY,EAAE,qBAAqB;IACnC,eAAe,EAAE,aAAa,EAAE,8DAA8D;IAC9F,QAAQ,EAAE,iBAAiB;IAC3B,OAAO,EAAE,gBAAgB;IACzB,aAAa,EAAE,sBAAsB;IACrC,kBAAkB,EAAE,6BAA6B;CACzC,CAAC;AAEX,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;AAC9E,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,OAAO,CAAU,CAAC;AAkB/C,MAAM,QAAQ,GAAwE;IACpF,cAAc,EAAE,WAAW;IAC3B,kBAAkB,EAAE,eAAe;IACnC,YAAY,EAAE,UAAU;IACxB,SAAS,EAAE,OAAO;IAClB,iBAAiB,EAAE,cAAc;IACjC,oBAAoB,EAAE,iBAAiB;IACvC,aAAa,EAAE,UAAU;IACzB,YAAY,EAAE,SAAS;IACvB,YAAY,EAAE,SAAS;IACvB,kBAAkB,EAAE,eAAe;IACnC,yBAAyB,EAAE,oBAAoB;CAChD,CAAC;AAEF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;AAEhH,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,mBAAmB,EAAE,CAAC;YAChC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC,CAAC;gBAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC;gBACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACnB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,iGAAiG;YACjG,MAAM,KAAK,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,mBAAmB,GAAG,aAAa,KAAK,EAAE,CAAC,CAAC,CAAC;YAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,qDAAqD;QACrD,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,mCAAmC,GAAG,GAAG,CAAC,CAAC,CAAC;QACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qFAqCwE,CAAC;AAEtF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,UAAU;IACV,OAAO;IACP,cAAc;IACd,iBAAiB;IACjB,UAAU;IACV,SAAS;IACT,SAAS;IACT,eAAe;IACf,oBAAoB;CACrB,CAAC,CAAC;AAEH,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAqB;IAWjD,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,aAAa,EAAE,IAAI;QACpC,KAAK,EAAE,MAAM,CAAC,aAAa,EAAE,KAAK;QAClC,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY;QAC5C,eAAe,EAAE,MAAM,CAAC,SAAS,EAAE,eAAe;QAClD,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK;QAC/B,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO;QAChC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO;QAChC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;KAC9C,CAAC;AACJ,CAAC;AAcD,SAAS,WAAW,CAAC,MAAmB;IACtC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChE,MAAM,CAAC,aAAa,GAAG,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,aAAa,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC/E,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,aAAa,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC5E,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC9E,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC;QACtB,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;YAAE,MAAM,CAAC,SAAS,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QAC3F,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS;YAAE,MAAM,CAAC,SAAS,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;IACtG,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClG,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC;QACpB,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC1E,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC1E,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC5E,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;QAAE,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;IACpF,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS;QAAE,MAAM,CAAC,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC;IACnG,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,YAAoB;IACnD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACpD,kFAAkF;IAClF,sFAAsF;IACtF,wFAAwF;IACxF,+DAA+D;IAC/D,MAAM,UAAU,GAAG,WAAW,EAAE,CAAC;IACjC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACtB,IAAI,CAAC;QACH,gFAAgF;QAChF,qFAAqF;QACrF,kFAAkF;QAClF,mFAAmF;QACnF,mEAAmE;QACnE,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;IACrC,CAAC;YAAS,CAAC;QACT,gFAAgF;QAChF,iFAAiF;QACjF,gFAAgF;QAChF,MAAM,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3B,WAAW,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;;;uFAMuF;AACvF,SAAS,gBAAgB;IACvB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiD,CAAC;IACvE,OAAO,CAAC,IAAY,EAAE,EAAE;QACtB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;IAC1B,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAoB;IAC7C,MAAM,KAAK,GAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,CAAC,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AASD,SAAS,mBAAmB;IAC1B,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAE7D,SAAS,SAAS,CAAC,cAAuB;QACxC,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,EAAE,EAAE,CAAC;YAC1D,OAAO,qCAAqC,cAAc,GAAG,CAAC;QAChE,CAAC;QACD,OAAO,yBAAyB,CAAC;IACnC,CAAC;IAED,SAAS,OAAO;QACd,OAAO,gCAAgC,CAAC;IAC1C,CAAC;IAED,KAAK,UAAU,GAAG,CAAC,KAAa,EAAE,OAA2B,EAAE,cAAuB;QACpF,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,KAAK,GAAG,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACpF,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,SAAS,CAAC;YACtD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,WAAW,GAAa,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC;QACtD,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,EAAE,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;YACxF,WAAW,CAAC,IAAI,CAAC,uBAAuB,cAAc,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,KAAK,KAAK,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChG,IAAI,MAAM,KAAK,EAAE;YAAE,OAAO,OAAO,CAAC;QAClC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACrC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,UAAU,SAAS,CACtB,KAAa,EACb,OAA0B,EAC1B,OAA2B,EAC3B,cAAuB;QAEvB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,OAAO;aACrB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACZ,MAAM,WAAW,GAAa,EAAE,CAAC;YACjC,IAAI,UAAU,IAAI,CAAC,KAAK,OAAO;gBAAE,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7D,IAAI,cAAc,KAAK,SAAS,IAAI,CAAC,KAAK,cAAc;gBAAE,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtF,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3F,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,iFAAiF;QACjF,0EAA0E;QAC1E,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,yBAAyB,CAAC;QAChE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,KAAK,MAAM,QAAQ,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACrF,IAAI,MAAM,KAAK,EAAE;gBAAE,OAAO,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3D,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,SAAS,CAAC;YACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,IAAI,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpE,OAAO,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC;YAC5C,OAAO,CAAC,KAAK,CAAC,mBAAmB,MAAM,uBAAuB,OAAO,CAAC,MAAM,gBAAgB,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,oBAAoB,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,KAAa,EAAE,OAA4B,EAAE,cAAwB;QAC1F,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,KAAK,EACL,WAAW,EACX,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EACnD,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAClE,CAAC;QACF,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,MAAM,KAAK,MAAM,CAAC;IAC3B,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,KAAyB,EAAE,OAA0B;IAC3F,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,KAAK,sBAAsB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAc;IACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAE/B,qCAAqC;IACrC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,0BAA0B,KAAK,oBAAoB,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBACrI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,IAAI,UAAkB,CAAC;IACvB,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC5C,CAAC;SAAM,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QAC3B,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAC/D,CAAC;SAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QACzC,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,iFAAiF,CAAC,CAAC,CAAC;QACjI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,kCAAkC;IAClC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,QAAQ,GAAkB,EAAE,CAAC;IACjC,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,+BAA+B,UAAU,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,yBAAyB,UAAU,sBAAsB,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAEhD,+DAA+D;IAC/D,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,qBAAqB,KAAK,CAAC,QAAQ,aAAa,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAClH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,cAAc;WACpC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC;IAEpC,4EAA4E;IAC5E,mFAAmF;IACnF,wFAAwF;IACxF,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,KAAK,CAAC,KAA0B,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpD,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjH,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,sBAAsB,IAAI,wCAAwC,CAAC,CAAC,CAAC;YAClH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAgB,EAAE,GAAG,QAAQ,EAAE,CAAC;IAE5C,sBAAsB;IACtB,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAkC,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;QACzD,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACnE,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IAC/E,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS;QAAE,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;IACxF,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACnE,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAChE,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAChE,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;QAAE,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;IAClF,IAAI,KAAK,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC3C,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAsC,CAAC,EAAE,CAAC;YACxE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,oCAAoC,KAAK,CAAC,kBAAkB,2BAA2B,CAAC,CAAC,CAAC;YACvI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,KAAK,MAAM,CAAC;IAClE,CAAC;IACD,kGAAkG;IAClG,MAAM,gBAAgB,GAAG,KAAK,CAAC,KAAK,CAAC;IAErC,2EAA2E;IAC3E,MAAM,WAAW,GAAG,gBAAgB,EAAE,CAAC;IAEvC,yDAAyD;IACzD,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;YACrC,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,CAAC,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;YAClH,CAAC;YAED,mFAAmF;YACnF,sDAAsD;YACtD,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,IAAI,qBAAqB,CAAC;YACnE,IAAI,eAAe,GAAiC,EAAE,CAAC;YACvD,IAAI,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC;oBACH,eAAe,GAAG,MAAM,WAAW,CAAC,iBAAiB,CAAC,CAAC;gBACzD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,6CAA6C,iBAAiB,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACtI,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;YAED,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACjC,MAAM,CAAC,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC;gBAClF,CAAC;qBAAM,CAAC;oBACN,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;oBACtD,kFAAkF;oBAClF,8CAA8C;oBAC9C,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK;wBAC7B,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC;wBACzD,CAAC,CAAC,CAAC,CAAC,CAAC;oBACP,MAAM,UAAU,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,aAAa,CAAC,KAAK,CAAC,CAAC;oBAClF,MAAM,YAAY,GAAG,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBACtE,MAAM,YAAY,GAAG,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBACtE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,8BAA8B,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;oBAC3G,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;wBACzB,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;oBAC3B,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;wBACnC,MAAM,CAAC,KAAK,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;oBAC7D,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACrC,MAAM,CAAC,YAAY,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,eAAe,EAAE,mBAAmB,EAAE,EAAE,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;YACzI,CAAC;YACD,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBACxC,MAAM,CAAC,eAAe,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,eAAe,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;YACxH,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,CAAC,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;YACpH,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,CAAC,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;gBACxC,MAAM,CAAC,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;YACxG,CAAC;YACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,CAAC,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;YAClI,CAAC;YACD,IAAI,KAAK,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;gBAC3C,MAAM,CAAC,kBAAkB,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,kBAAkB,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;YAC1I,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gFAAgF;YAChF,gFAAgF;YAChF,mFAAmF;YACnF,8EAA8E;YAC9E,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,KAAK,GAAG,gBAAgB,CAAC;IAClC,CAAC;IAED,2CAA2C;IAC3C,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,qBAAqB,GAAG,MAAM,CAAC,QAAQ,IAAI,qBAAqB,CAAC;YACvE,IAAI,gBAAgB,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBACvD,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,qBAAqB,CAAC,CAAC;oBACzD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACvB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBAC5C,eAAe,CAAC,uBAAuB,qBAAqB,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;oBAC7F,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,mEAAmE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACvI,CAAC;YACH,CAAC;QACH,CAAC;QACD,eAAe,CAAC,eAAe,EAAE,MAAM,CAAC,YAAY,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC7E,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,QAAQ,sBAAsB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAExC,uCAAuC;IACvC,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,CAAC,6BAA6B,UAAU,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,oEAAoE;AACpE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;IAC7B,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9B,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAClD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAwB,CAAC;QAC9D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}