@cats-inc/cats-platform 0.1.1 → 0.1.5

package/scripts/validate-release-version.mjs

@@ -0,0 +1,217 @@
+#!/usr/bin/env node
+//
+// Script: validate-release-version.mjs
+// Description: Guard that a desktop release tag matches the package version in
+//              both package.json and package-lock.json before any platform
+//              build work starts.
+//
+// Usage: node scripts/validate-release-version.mjs [--tag <vX.Y.Z>]
+//
+// Options:
+//   --tag <vX.Y.Z>   Release tag to validate. Defaults to GITHUB_REF_NAME.
+//   --json           Emit the machine-readable result instead of prose.
+//   --help           Show this help text.
+//
+// Exit codes:
+//   0  the tag is a stable release tag and every version source agrees
+//   1  the tag is malformed, missing, or disagrees with a version source
+
+import process from 'node:process';
+import { readFile } from 'node:fs/promises';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const SCRIPT_PATH = fileURLToPath(import.meta.url);
+const PROJECT_ROOT = resolve(dirname(SCRIPT_PATH), '..');
+
+// SPEC-111 section 7 restricts Phase 1 releases to stable vMAJOR.MINOR.PATCH
+// tags. Prerelease channel publishing is deferred until promotion and
+// downgrade rules exist, so a suffix is rejected rather than silently
+// accepted as stable.
+const STABLE_RELEASE_TAG = /^v(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/;
+
+function printHelp() {
+  process.stdout.write(`Usage: node scripts/validate-release-version.mjs [options]
+
+Options:
+  --tag <vX.Y.Z>   Release tag to validate. Defaults to GITHUB_REF_NAME.
+  --json           Emit the machine-readable result instead of prose.
+  --help           Show this help text.
+
+Validates that a stable desktop release tag matches the version recorded in
+package.json, the package-lock.json root version, and the package-lock.json
+root package entry.
+`);
+}
+
+export function parseArgs(argv, env = process.env) {
+  let tag = typeof env.GITHUB_REF_NAME === 'string' ? env.GITHUB_REF_NAME.trim() : '';
+  let json = false;
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const value = argv[index];
+    if (value === '--help' || value === '-h') {
+      return { help: true, tag, json };
+    }
+    if (value === '--tag') {
+      tag = (argv[index + 1] ?? '').trim();
+      index += 1;
+      continue;
+    }
+    if (value === '--json') {
+      json = true;
+      continue;
+    }
+    throw new Error(`Unknown option: ${value}`);
+  }
+
+  return { help: false, tag, json };
+}
+
+export function parseStableReleaseTag(tag) {
+  const candidate = typeof tag === 'string' ? tag.trim() : '';
+
+  if (candidate === '') {
+    return {
+      ok: false,
+      code: 'tag_missing',
+      message: 'No release tag was supplied. Pass --tag vX.Y.Z or set GITHUB_REF_NAME.',
+    };
+  }
+
+  if (!STABLE_RELEASE_TAG.test(candidate)) {
+    return {
+      ok: false,
+      code: 'tag_malformed',
+      message: `Release tag '${candidate}' is not a stable vMAJOR.MINOR.PATCH tag.`,
+    };
+  }
+
+  return { ok: true, tag: candidate, version: candidate.slice(1) };
+}
+
+/**
+ * Compares the tag version against every version source a release change is
+ * required to update. Returns one problem per disagreeing source so the
+ * operator sees the complete picture instead of only the first mismatch.
+ */
+export function collectVersionProblems({ version, packageJson, packageLockJson }) {
+  const problems = [];
+
+  const packageVersion = packageJson?.version;
+  if (typeof packageVersion !== 'string' || packageVersion.trim() === '') {
+    problems.push({
+      code: 'package_version_missing',
+      message: 'package.json does not declare a version.',
+    });
+  } else if (packageVersion !== version) {
+    problems.push({
+      code: 'package_version_mismatch',
+      message: `package.json version '${packageVersion}' does not equal tag version '${version}'.`,
+    });
+  }
+
+  const lockVersion = packageLockJson?.version;
+  if (typeof lockVersion !== 'string' || lockVersion.trim() === '') {
+    problems.push({
+      code: 'lock_version_missing',
+      message: 'package-lock.json does not declare a root version.',
+    });
+  } else if (lockVersion !== version) {
+    problems.push({
+      code: 'lock_version_mismatch',
+      message: `package-lock.json version '${lockVersion}' does not equal tag version '${version}'.`,
+    });
+  }
+
+  // npm records the root package a second time under packages[""]. A hand
+  // edited package.json leaves this entry stale, which would otherwise ship a
+  // release whose lockfile still advertises the previous version.
+  const lockRootVersion = packageLockJson?.packages?.['']?.version;
+  if (typeof lockRootVersion !== 'string' || lockRootVersion.trim() === '') {
+    problems.push({
+      code: 'lock_root_version_missing',
+      message: 'package-lock.json does not declare packages[""].version.',
+    });
+  } else if (lockRootVersion !== version) {
+    problems.push({
+      code: 'lock_root_version_mismatch',
+      message: `package-lock.json packages[""].version '${lockRootVersion}' does not equal `
+        + `tag version '${version}'.`,
+    });
+  }
+
+  return problems;
+}
+
+export function validateReleaseVersion({ tag, packageJson, packageLockJson }) {
+  const parsedTag = parseStableReleaseTag(tag);
+  if (!parsedTag.ok) {
+    return { ok: false, tag: null, version: null, problems: [parsedTag] };
+  }
+
+  const problems = collectVersionProblems({
+    version: parsedTag.version,
+    packageJson,
+    packageLockJson,
+  });
+
+  return {
+    ok: problems.length === 0,
+    tag: parsedTag.tag,
+    version: parsedTag.version,
+    problems,
+  };
+}
+
+async function readJsonFile(path) {
+  const contents = await readFile(path, 'utf8');
+  return JSON.parse(contents);
+}
+
+export async function readVersionSources(projectRoot = PROJECT_ROOT) {
+  const [packageJson, packageLockJson] = await Promise.all([
+    readJsonFile(resolve(projectRoot, 'package.json')),
+    readJsonFile(resolve(projectRoot, 'package-lock.json')),
+  ]);
+
+  return { packageJson, packageLockJson };
+}
+
+async function main() {
+  const parsed = parseArgs(process.argv.slice(2));
+  if (parsed.help) {
+    printHelp();
+    return;
+  }
+
+  const { packageJson, packageLockJson } = await readVersionSources();
+  const result = validateReleaseVersion({
+    tag: parsed.tag,
+    packageJson,
+    packageLockJson,
+  });
+
+  if (parsed.json) {
+    process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+  } else if (result.ok) {
+    process.stdout.write(
+      `[validate-release-version] ${result.tag} matches package version ${result.version}.\n`,
+    );
+  } else {
+    for (const problem of result.problems) {
+      process.stderr.write(`[validate-release-version] ${problem.code}: ${problem.message}\n`);
+    }
+  }
+
+  if (!result.ok) {
+    process.exitCode = 1;
+  }
+}
+
+if (resolve(process.argv[1] ?? '') === SCRIPT_PATH) {
+  void main().catch((error) => {
+    process.stderr.write(`${error instanceof Error ? error.stack ?? error.message : String(error)}\n`);
+    process.exitCode = 1;
+  });
+}

package/scripts/windows/Test-WindowsInstallerSmoke.ps1

@@ -6,7 +6,8 @@
     Checks that the installed Electron host, bundled Cats sidecar, bundled
     cats-runtime sidecar, and packaged installer manifest are all present. By
     default it then launches the installed app, waits for the desktop-host
-    state file to be refreshed, and validates the persisted readiness snapshot.
+    state file to be refreshed, and validates the persisted readiness snapshot
+    plus first-run authentication-secret provisioning.
 
 .PARAMETER InstallRoot
     The installed Cats directory. Defaults to the NSIS per-user install path.
@@ -14,6 +15,10 @@
 .PARAMETER HostStatePath
     The persisted desktop-host state file written by the installed app.
 
+.PARAMETER PlatformDir
+    The platform state/config root. Defaults to CATS_PLATFORM_DIR when set,
+    otherwise to the platform sibling inferred from HostStatePath.
+
 .PARAMETER TimeoutSeconds
     Maximum time to wait for the installed app to refresh the host-state file.
 
@@ -36,6 +41,7 @@
 param(
   [string]$InstallRoot = '',
   [string]$HostStatePath = '',
+  [string]$PlatformDir = '',
   [ValidateRange(5, 300)]
   [int]$TimeoutSeconds = 60,
   [switch]$SkipLaunch,
@@ -58,9 +64,47 @@ function Resolve-DefaultInstallRoot {
 }
 
 function Resolve-DefaultHostStatePath {
+  if (-not [string]::IsNullOrWhiteSpace($env:CATS_DESKTOP_DIR)) {
+    return Join-Path $env:CATS_DESKTOP_DIR 'state.json'
+  }
   return Join-Path $env:USERPROFILE '.cats\desktop\state.json'
 }
 
+function Resolve-DefaultPlatformDir([string]$StatePath) {
+  if (-not [string]::IsNullOrWhiteSpace($env:CATS_PLATFORM_DIR)) {
+    return $env:CATS_PLATFORM_DIR
+  }
+  $desktopDir = Split-Path -Parent $StatePath
+  $catsRoot = Split-Path -Parent $desktopDir
+  return Join-Path $catsRoot 'platform'
+}
+
+function Test-AuthSessionSecretProvisioned {
+  param(
+    [string]$ResolvedPlatformDir,
+    [string]$ResolvedDesktopDir
+  )
+
+  $generatedSecretPath = Join-Path $ResolvedPlatformDir 'config\auth-session-secret.local'
+  if (Test-Path -LiteralPath $generatedSecretPath -PathType Leaf) {
+    $generatedSecret = (Get-Content -LiteralPath $generatedSecretPath -Raw).Trim()
+    if ($generatedSecret.Length -ge 32 -and $generatedSecret -notmatch '\s') {
+      return $true
+    }
+  }
+
+  if (-not [string]::IsNullOrWhiteSpace($env:CATS_AUTH_SESSION_SECRET)) {
+    return $true
+  }
+
+  $desktopEnvPath = Join-Path $ResolvedDesktopDir '.env'
+  if (-not (Test-Path -LiteralPath $desktopEnvPath -PathType Leaf)) {
+    return $false
+  }
+  return [bool](Select-String -LiteralPath $desktopEnvPath `
+    -Pattern '^\s*CATS_AUTH_SESSION_SECRET\s*=\s*\S+' -Quiet)
+}
+
 function Assert-FileExists([string]$Path, [string]$Label) {
   if (-not (Test-Path -LiteralPath $Path -PathType Leaf)) {
     throw "Missing $Label at $Path"
@@ -121,6 +165,12 @@ function Assert-True([bool]$Condition, [string]$Message) {
 
 $resolvedInstallRoot = if ($InstallRoot) { $InstallRoot } else { Resolve-DefaultInstallRoot }
 $resolvedHostStatePath = if ($HostStatePath) { $HostStatePath } else { Resolve-DefaultHostStatePath }
+$resolvedPlatformDir = if ($PlatformDir) {
+  $PlatformDir
+} else {
+  Resolve-DefaultPlatformDir -StatePath $resolvedHostStatePath
+}
+$resolvedDesktopDir = Split-Path -Parent $resolvedHostStatePath
 $exePath = Join-Path $resolvedInstallRoot 'Cats.exe'
 $resourcesRoot = Join-Path $resolvedInstallRoot 'resources'
 $packagingPlanPath = Join-Path $resourcesRoot 'desktop-package-plan.json'
@@ -227,6 +277,10 @@ try {
   $appService = $persisted.snapshot.services | Where-Object { $_.name -eq 'cats-platform' } | Select-Object -First 1
   Assert-True ($null -ne $runtimeService -and $runtimeService.ready -eq $true) 'cats-runtime sidecar reached ready status'
   Assert-True ($null -ne $appService -and $appService.ready -eq $true) 'cats app sidecar reached ready status'
+  Assert-True (Test-AuthSessionSecretProvisioned `
+    -ResolvedPlatformDir $resolvedPlatformDir `
+    -ResolvedDesktopDir $resolvedDesktopDir) `
+    'desktop auth session secret is provisioned for first-admin setup'
   Assert-True (($persisted.snapshot.progress.steps | Measure-Object).Count -ge 3) 'host snapshot includes bootstrap progress steps'
   Assert-True ($persisted.snapshot.background.trayEnabled -is [bool]) 'host snapshot includes background lifecycle state'
   Assert-True ($persisted.snapshot.packaging.strategy -eq 'electron-sidecar-bundle') 'host snapshot includes packaging metadata'

package/build/desktop/update.d.ts

@@ -1,24 +0,0 @@
-import type { DesktopUpdateChannel, DesktopUpdateState } from './contracts.js';
-export interface DesktopUpdateConfig {
-    channel: DesktopUpdateChannel;
-    manifestUrl: string | null;
-    allowedHosts: string[];
-    checkOnStartup: boolean;
-    autoDownload: boolean;
-}
-export interface DesktopUpdateManifest {
-    channel?: string;
-    version?: string;
-    summary?: string;
-    downloadUrl?: string;
-    sha256?: string;
-}
-interface CheckForDesktopUpdatesDependencies {
-    fetchImpl?: typeof fetch;
-    now?: () => Date;
-}
-export declare function createDefaultDesktopUpdateState(config: DesktopUpdateConfig): DesktopUpdateState;
-export declare function resolveDesktopUpdateConfig(env?: NodeJS.ProcessEnv): DesktopUpdateConfig;
-export declare function checkForDesktopUpdates(config: DesktopUpdateConfig, dependencies?: CheckForDesktopUpdatesDependencies): Promise<DesktopUpdateState>;
-export {};
-//# sourceMappingURL=update.d.ts.map

package/build/desktop/update.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../desktop/host/update.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAK/E,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,oBAAoB,CAAC;IAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAUD,UAAU,kCAAkC;IAC1C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAsGD,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,mBAAmB,GAC1B,kBAAkB,CAepB;AAED,wBAAgB,0BAA0B,CACxC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,mBAAmB,CASrB;AAED,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,mBAAmB,EAC3B,YAAY,GAAE,kCAAuC,GACpD,OAAO,CAAC,kBAAkB,CAAC,CA8D7B"}

package/build/desktop/update.js

@@ -1,173 +0,0 @@
-import { DESKTOP_HOST_VERSION } from './hostVersion.js';
-import { parseDesktopBoolean } from './env.js';
-import { parseDesktopAllowedHosts, validateDesktopUrl } from './security.js';
-function normalizeChannel(value) {
-    if (value === 'alpha' || value === 'beta' || value === 'stable') {
-        return value;
-    }
-    return 'stable';
-}
-function isObjectRecord(value) {
-    return typeof value === 'object' && value !== null;
-}
-function readOptionalManifestString(value, fieldName) {
-    if (value === undefined || value === null) {
-        return null;
-    }
-    if (typeof value !== 'string') {
-        throw new Error(`Update manifest field "${fieldName}" must be a string.`);
-    }
-    return value.trim() || null;
-}
-function readOptionalManifestSha256(value) {
-    const digest = readOptionalManifestString(value, 'sha256');
-    if (digest === null) {
-        return null;
-    }
-    if (!/^[a-f0-9]{64}$/iu.test(digest)) {
-        throw new Error('Update manifest field "sha256" must be a 64 character hex digest.');
-    }
-    return digest.toLowerCase();
-}
-function parseVersion(value) {
-    const cleaned = value.trim().replace(/^v/u, '').split('-')[0];
-    if (!cleaned) {
-        return null;
-    }
-    const parts = cleaned.split('.');
-    const numbers = parts.map((part) => Number.parseInt(part, 10));
-    if (numbers.some((part) => !Number.isInteger(part) || part < 0)) {
-        return null;
-    }
-    return numbers;
-}
-function compareVersions(left, right) {
-    const leftParts = parseVersion(left);
-    const rightParts = parseVersion(right);
-    if (!leftParts || !rightParts) {
-        return left.localeCompare(right);
-    }
-    const maxLength = Math.max(leftParts.length, rightParts.length);
-    for (let index = 0; index < maxLength; index += 1) {
-        const leftValue = leftParts[index] ?? 0;
-        const rightValue = rightParts[index] ?? 0;
-        if (leftValue === rightValue) {
-            continue;
-        }
-        return leftValue < rightValue ? -1 : 1;
-    }
-    return 0;
-}
-function normalizeDesktopUpdateManifest(payload, expectedChannel) {
-    if (!isObjectRecord(payload)) {
-        throw new Error('Update manifest must be a JSON object.');
-    }
-    const channel = readOptionalManifestString(payload.channel, 'channel');
-    if (channel !== null && channel !== 'alpha' && channel !== 'beta' && channel !== 'stable') {
-        throw new Error(`Update manifest channel is unsupported: ${channel}`);
-    }
-    if (channel !== null && channel !== expectedChannel) {
-        throw new Error(`Update manifest channel "${channel}" does not match configured channel "${expectedChannel}".`);
-    }
-    const version = readOptionalManifestString(payload.version, 'version');
-    if (!version) {
-        throw new Error('Update manifest is missing required field "version".');
-    }
-    if (!parseVersion(version)) {
-        throw new Error(`Update manifest version is invalid: ${version}`);
-    }
-    return {
-        channel,
-        version,
-        summary: readOptionalManifestString(payload.summary, 'summary'),
-        downloadUrl: readOptionalManifestString(payload.downloadUrl, 'downloadUrl'),
-        sha256: readOptionalManifestSha256(payload.sha256),
-    };
-}
-export function createDefaultDesktopUpdateState(config) {
-    return {
-        channel: config.channel,
-        status: config.manifestUrl ? 'idle' : 'disabled',
-        currentVersion: DESKTOP_HOST_VERSION,
-        latestVersion: null,
-        summary: config.manifestUrl
-            ? 'Update checks are idle until the host performs a manifest probe.'
-            : 'Update checks are disabled until a manifest URL is configured.',
-        lastCheckedAt: null,
-        manifestUrl: config.manifestUrl,
-        downloadUrl: null,
-        sha256: null,
-        error: null,
-    };
-}
-export function resolveDesktopUpdateConfig(env = process.env) {
-    const manifestUrl = env.CATS_DESKTOP_UPDATE_MANIFEST_URL?.trim() || null;
-    return {
-        channel: normalizeChannel(env.CATS_DESKTOP_UPDATE_CHANNEL),
-        manifestUrl: manifestUrl ? validateDesktopUrl(manifestUrl, { httpsOnly: true }) : null,
-        allowedHosts: parseDesktopAllowedHosts(env.CATS_DESKTOP_UPDATE_ALLOWED_HOSTS),
-        checkOnStartup: parseDesktopBoolean(env.CATS_DESKTOP_UPDATE_CHECK_ON_STARTUP, false),
-        autoDownload: parseDesktopBoolean(env.CATS_DESKTOP_UPDATE_AUTO_DOWNLOAD, false),
-    };
-}
-export async function checkForDesktopUpdates(config, dependencies = {}) {
-    const now = dependencies.now?.() ?? new Date();
-    if (!config.manifestUrl) {
-        return createDefaultDesktopUpdateState(config);
-    }
-    const fetchImpl = dependencies.fetchImpl ?? fetch;
-    try {
-        const validatedManifestUrl = validateDesktopUrl(config.manifestUrl, { httpsOnly: true });
-        const manifestUrl = new URL(validatedManifestUrl);
-        const response = await fetchImpl(validatedManifestUrl);
-        if (!response.ok) {
-            throw new Error(`HTTP ${response.status}`);
-        }
-        const manifest = normalizeDesktopUpdateManifest(await response.json(), config.channel);
-        const latestVersion = manifest.version;
-        const hasUpdate = compareVersions(DESKTOP_HOST_VERSION, latestVersion) < 0;
-        const status = hasUpdate ? 'update_available' : 'up_to_date';
-        if (hasUpdate && !manifest.downloadUrl) {
-            throw new Error('Update manifest is missing required field "downloadUrl" for a newer version.');
-        }
-        if (manifest.downloadUrl && !manifest.sha256) {
-            throw new Error('Update manifest is missing required field "sha256" for a download artifact.');
-        }
-        const downloadUrl = manifest.downloadUrl
-            ? validateDesktopUrl(manifest.downloadUrl, {
-                httpsOnly: true,
-                allowedHosts: [manifestUrl.hostname, ...config.allowedHosts],
-            })
-            : null;
-        return {
-            channel: config.channel,
-            status,
-            currentVersion: DESKTOP_HOST_VERSION,
-            latestVersion,
-            summary: manifest.summary?.trim()
-                || (hasUpdate
-                    ? `Update ${latestVersion} is available on the ${config.channel} channel.`
-                    : `Cats desktop host is up to date on the ${config.channel} channel.`),
-            lastCheckedAt: now.toISOString(),
-            manifestUrl: validatedManifestUrl,
-            downloadUrl,
-            sha256: downloadUrl ? manifest.sha256 : null,
-            error: null,
-        };
-    }
-    catch (error) {
-        return {
-            channel: config.channel,
-            status: 'failed',
-            currentVersion: DESKTOP_HOST_VERSION,
-            latestVersion: null,
-            summary: 'The desktop host could not refresh its update manifest.',
-            lastCheckedAt: now.toISOString(),
-            manifestUrl: config.manifestUrl,
-            downloadUrl: null,
-            sha256: null,
-            error: error instanceof Error ? error.message : String(error),
-        };
-    }
-}
-//# sourceMappingURL=update.js.map

package/build/desktop/update.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"update.js","sourceRoot":"","sources":["../../desktop/host/update.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AA+B7E,SAAS,gBAAgB,CAAC,KAAyB;IACjD,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc,EAAE,SAAiB;IACnE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,0BAA0B,SAAS,qBAAqB,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;AAC9B,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IAChD,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC3D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/D,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAEvC,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAChE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,OAAO,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,8BAA8B,CACrC,OAAgB,EAChB,eAAqC;IAErC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,OAAO,GAAG,0BAA0B,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACvE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,4BAA4B,OAAO,wCAAwC,eAAe,IAAI,CAC/F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,0BAA0B,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACvE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,uCAAuC,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,OAAO;QACL,OAAO;QACP,OAAO;QACP,OAAO,EAAE,0BAA0B,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC;QAC/D,WAAW,EAAE,0BAA0B,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC;QAC3E,MAAM,EAAE,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,MAA2B;IAE3B,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU;QAChD,cAAc,EAAE,oBAAoB;QACpC,aAAa,EAAE,IAAI;QACnB,OAAO,EAAE,MAAM,CAAC,WAAW;YACzB,CAAC,CAAC,kEAAkE;YACpE,CAAC,CAAC,gEAAgE;QACpE,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,IAAI;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,WAAW,GAAG,GAAG,CAAC,gCAAgC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IACzE,OAAO;QACL,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,2BAA2B,CAAC;QAC1D,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;QACtF,YAAY,EAAE,wBAAwB,CAAC,GAAG,CAAC,iCAAiC,CAAC;QAC7E,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC,oCAAoC,EAAE,KAAK,CAAC;QACpF,YAAY,EAAE,mBAAmB,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,CAAC;KAChF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAA2B,EAC3B,eAAmD,EAAE;IAErD,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;IAE/C,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,IAAI,KAAK,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,QAAQ,GAAG,8BAA8B,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACvF,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC;QACvC,MAAM,SAAS,GAAG,eAAe,CAAC,oBAAoB,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC;QAC7D,IAAI,SAAS,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;QACjG,CAAC;QAED,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW;YACtC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,WAAW,EAAE;gBACzC,SAAS,EAAE,IAAI;gBACf,YAAY,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC;aAC7D,CAAC;YACF,CAAC,CAAC,IAAI,CAAC;QAET,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM;YACN,cAAc,EAAE,oBAAoB;YACpC,aAAa;YACb,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE;mBAC5B,CAAC,SAAS;oBACX,CAAC,CAAC,UAAU,aAAa,wBAAwB,MAAM,CAAC,OAAO,WAAW;oBAC1E,CAAC,CAAC,0CAA0C,MAAM,CAAC,OAAO,WAAW,CAAC;YAC1E,aAAa,EAAE,GAAG,CAAC,WAAW,EAAE;YAChC,WAAW,EAAE,oBAAoB;YACjC,WAAW;YACX,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YAC5C,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,QAAQ;YAChB,cAAc,EAAE,oBAAoB;YACpC,aAAa,EAAE,IAAI;YACnB,OAAO,EAAE,yDAAyD;YAClE,aAAa,EAAE,GAAG,CAAC,WAAW,EAAE;YAChC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC;IACJ,CAAC;AACH,CAAC"}