@congzhen/changewayguard 6.8.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (329) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +270 -0
  3. package/dashboard-dist/api/104.index.js +1420 -0
  4. package/dashboard-dist/api/104.index.js.map +1 -0
  5. package/dashboard-dist/api/113.index.js +496 -0
  6. package/dashboard-dist/api/113.index.js.map +1 -0
  7. package/dashboard-dist/api/18.index.js +67 -0
  8. package/dashboard-dist/api/18.index.js.map +1 -0
  9. package/dashboard-dist/api/217.index.js +44 -0
  10. package/dashboard-dist/api/217.index.js.map +1 -0
  11. package/dashboard-dist/api/222.index.js +90 -0
  12. package/dashboard-dist/api/222.index.js.map +1 -0
  13. package/dashboard-dist/api/25.index.js +3562 -0
  14. package/dashboard-dist/api/25.index.js.map +1 -0
  15. package/dashboard-dist/api/280.index.js +206 -0
  16. package/dashboard-dist/api/280.index.js.map +1 -0
  17. package/dashboard-dist/api/369.index.js +115 -0
  18. package/dashboard-dist/api/369.index.js.map +1 -0
  19. package/dashboard-dist/api/377.index.js +1176 -0
  20. package/dashboard-dist/api/377.index.js.map +1 -0
  21. package/dashboard-dist/api/411.index.js +4250 -0
  22. package/dashboard-dist/api/411.index.js.map +1 -0
  23. package/dashboard-dist/api/424.index.js +135 -0
  24. package/dashboard-dist/api/424.index.js.map +1 -0
  25. package/dashboard-dist/api/573.index.js +806 -0
  26. package/dashboard-dist/api/573.index.js.map +1 -0
  27. package/dashboard-dist/api/598.index.js +328 -0
  28. package/dashboard-dist/api/598.index.js.map +1 -0
  29. package/dashboard-dist/api/62.index.js +4151 -0
  30. package/dashboard-dist/api/62.index.js.map +1 -0
  31. package/dashboard-dist/api/67.index.js +23383 -0
  32. package/dashboard-dist/api/67.index.js.map +1 -0
  33. package/dashboard-dist/api/678.index.js +2734 -0
  34. package/dashboard-dist/api/678.index.js.map +1 -0
  35. package/dashboard-dist/api/698.index.js +1896 -0
  36. package/dashboard-dist/api/698.index.js.map +1 -0
  37. package/dashboard-dist/api/720.index.js +98 -0
  38. package/dashboard-dist/api/720.index.js.map +1 -0
  39. package/dashboard-dist/api/830.index.js +95 -0
  40. package/dashboard-dist/api/830.index.js.map +1 -0
  41. package/dashboard-dist/api/831.index.js +99 -0
  42. package/dashboard-dist/api/831.index.js.map +1 -0
  43. package/dashboard-dist/api/84.index.js +64 -0
  44. package/dashboard-dist/api/84.index.js.map +1 -0
  45. package/dashboard-dist/api/900.index.js +65 -0
  46. package/dashboard-dist/api/900.index.js.map +1 -0
  47. package/dashboard-dist/api/917.index.js +88 -0
  48. package/dashboard-dist/api/917.index.js.map +1 -0
  49. package/dashboard-dist/api/948.index.js +64 -0
  50. package/dashboard-dist/api/948.index.js.map +1 -0
  51. package/dashboard-dist/api/953.index.js +67 -0
  52. package/dashboard-dist/api/953.index.js.map +1 -0
  53. package/dashboard-dist/api/975.index.js +374 -0
  54. package/dashboard-dist/api/975.index.js.map +1 -0
  55. package/dashboard-dist/api/drizzle/sqlite/0000_short_captain_stacy.sql +70 -0
  56. package/dashboard-dist/api/drizzle/sqlite/0001_closed_magus.sql +10 -0
  57. package/dashboard-dist/api/drizzle/sqlite/0002_agent_capability_observation.sql +38 -0
  58. package/dashboard-dist/api/drizzle/sqlite/0003_auth_magic_link.sql +28 -0
  59. package/dashboard-dist/api/drizzle/sqlite/0004_static_scan_fields.sql +8 -0
  60. package/dashboard-dist/api/drizzle/sqlite/0005_gateway_activity.sql +24 -0
  61. package/dashboard-dist/api/drizzle/sqlite/0006_sour_marauders.sql +41 -0
  62. package/dashboard-dist/api/drizzle/sqlite/meta/0000_snapshot.json +460 -0
  63. package/dashboard-dist/api/drizzle/sqlite/meta/0001_snapshot.json +536 -0
  64. package/dashboard-dist/api/drizzle/sqlite/meta/0006_snapshot.json +1249 -0
  65. package/dashboard-dist/api/drizzle/sqlite/meta/_journal.json +55 -0
  66. package/dashboard-dist/api/index.js +27340 -0
  67. package/dashboard-dist/api/index.js.map +1 -0
  68. package/dashboard-dist/api/package.json +16 -0
  69. package/dashboard-dist/api/sourcemap-register.cjs +1 -0
  70. package/dashboard-dist/web/assets/index-CqWIeBTD.js +158 -0
  71. package/dashboard-dist/web/assets/index-Dw7--9q4.css +1 -0
  72. package/dashboard-dist/web/changeway-logo.png +0 -0
  73. package/dashboard-dist/web/favicon.svg +29 -0
  74. package/dashboard-dist/web/index.html +14 -0
  75. package/dashboard-dist/web/logo.svg +16 -0
  76. package/dist/agent/auth.d.ts +37 -0
  77. package/dist/agent/auth.d.ts.map +1 -0
  78. package/dist/agent/auth.js +151 -0
  79. package/dist/agent/auth.js.map +1 -0
  80. package/dist/agent/behavior-detector.d.ts +150 -0
  81. package/dist/agent/behavior-detector.d.ts.map +1 -0
  82. package/dist/agent/behavior-detector.js +573 -0
  83. package/dist/agent/behavior-detector.js.map +1 -0
  84. package/dist/agent/business-reporter.d.ts +114 -0
  85. package/dist/agent/business-reporter.d.ts.map +1 -0
  86. package/dist/agent/business-reporter.js +359 -0
  87. package/dist/agent/business-reporter.js.map +1 -0
  88. package/dist/agent/config-sync.d.ts +70 -0
  89. package/dist/agent/config-sync.d.ts.map +1 -0
  90. package/dist/agent/config-sync.js +133 -0
  91. package/dist/agent/config-sync.js.map +1 -0
  92. package/dist/agent/config.d.ts +97 -0
  93. package/dist/agent/config.d.ts.map +1 -0
  94. package/dist/agent/config.js +359 -0
  95. package/dist/agent/config.js.map +1 -0
  96. package/dist/agent/content-injection-scanner.d.ts +35 -0
  97. package/dist/agent/content-injection-scanner.d.ts.map +1 -0
  98. package/dist/agent/content-injection-scanner.js +270 -0
  99. package/dist/agent/content-injection-scanner.js.map +1 -0
  100. package/dist/agent/engine-log-writer.d.ts +6 -0
  101. package/dist/agent/engine-log-writer.d.ts.map +1 -0
  102. package/dist/agent/engine-log-writer.js +18 -0
  103. package/dist/agent/engine-log-writer.js.map +1 -0
  104. package/dist/agent/env.d.ts +19 -0
  105. package/dist/agent/env.d.ts.map +1 -0
  106. package/dist/agent/env.js +43 -0
  107. package/dist/agent/env.js.map +1 -0
  108. package/dist/agent/event-reporter.d.ts +87 -0
  109. package/dist/agent/event-reporter.d.ts.map +1 -0
  110. package/dist/agent/event-reporter.js +315 -0
  111. package/dist/agent/event-reporter.js.map +1 -0
  112. package/dist/agent/file-watcher.d.ts +50 -0
  113. package/dist/agent/file-watcher.d.ts.map +1 -0
  114. package/dist/agent/file-watcher.js +135 -0
  115. package/dist/agent/file-watcher.js.map +1 -0
  116. package/dist/agent/fs-utils.d.ts +22 -0
  117. package/dist/agent/fs-utils.d.ts.map +1 -0
  118. package/dist/agent/fs-utils.js +41 -0
  119. package/dist/agent/fs-utils.js.map +1 -0
  120. package/dist/agent/gateway-manager.d.ts +59 -0
  121. package/dist/agent/gateway-manager.d.ts.map +1 -0
  122. package/dist/agent/gateway-manager.js +583 -0
  123. package/dist/agent/gateway-manager.js.map +1 -0
  124. package/dist/agent/hook-types.d.ts +276 -0
  125. package/dist/agent/hook-types.d.ts.map +1 -0
  126. package/dist/agent/hook-types.js +51 -0
  127. package/dist/agent/hook-types.js.map +1 -0
  128. package/dist/agent/index.d.ts +8 -0
  129. package/dist/agent/index.d.ts.map +1 -0
  130. package/dist/agent/index.js +8 -0
  131. package/dist/agent/index.js.map +1 -0
  132. package/dist/agent/prompt-gate.d.ts +13 -0
  133. package/dist/agent/prompt-gate.d.ts.map +1 -0
  134. package/dist/agent/prompt-gate.js +28 -0
  135. package/dist/agent/prompt-gate.js.map +1 -0
  136. package/dist/agent/prompt-input.d.ts +9 -0
  137. package/dist/agent/prompt-input.d.ts.map +1 -0
  138. package/dist/agent/prompt-input.js +158 -0
  139. package/dist/agent/prompt-input.js.map +1 -0
  140. package/dist/agent/prompt-output.d.ts +4 -0
  141. package/dist/agent/prompt-output.d.ts.map +1 -0
  142. package/dist/agent/prompt-output.js +19 -0
  143. package/dist/agent/prompt-output.js.map +1 -0
  144. package/dist/agent/runner.d.ts +23 -0
  145. package/dist/agent/runner.d.ts.map +1 -0
  146. package/dist/agent/runner.js +154 -0
  147. package/dist/agent/runner.js.map +1 -0
  148. package/dist/agent/sanitizer.d.ts +10 -0
  149. package/dist/agent/sanitizer.d.ts.map +1 -0
  150. package/dist/agent/sanitizer.js +175 -0
  151. package/dist/agent/sanitizer.js.map +1 -0
  152. package/dist/agent/scan-activity.d.ts +18 -0
  153. package/dist/agent/scan-activity.d.ts.map +1 -0
  154. package/dist/agent/scan-activity.js +32 -0
  155. package/dist/agent/scan-activity.js.map +1 -0
  156. package/dist/agent/types.d.ts +177 -0
  157. package/dist/agent/types.d.ts.map +1 -0
  158. package/dist/agent/types.js +5 -0
  159. package/dist/agent/types.js.map +1 -0
  160. package/dist/agent/workspace-scanner.d.ts +35 -0
  161. package/dist/agent/workspace-scanner.d.ts.map +1 -0
  162. package/dist/agent/workspace-scanner.js +137 -0
  163. package/dist/agent/workspace-scanner.js.map +1 -0
  164. package/dist/dashboard-launcher.d.ts +52 -0
  165. package/dist/dashboard-launcher.d.ts.map +1 -0
  166. package/dist/dashboard-launcher.js +363 -0
  167. package/dist/dashboard-launcher.js.map +1 -0
  168. package/dist/gateway/activity.d.ts +52 -0
  169. package/dist/gateway/activity.d.ts.map +1 -0
  170. package/dist/gateway/activity.js +111 -0
  171. package/dist/gateway/activity.js.map +1 -0
  172. package/dist/gateway/config.d.ts +50 -0
  173. package/dist/gateway/config.d.ts.map +1 -0
  174. package/dist/gateway/config.js +200 -0
  175. package/dist/gateway/config.js.map +1 -0
  176. package/dist/gateway/gateway/activity.d.ts +52 -0
  177. package/dist/gateway/gateway/activity.d.ts.map +1 -0
  178. package/dist/gateway/gateway/activity.js +111 -0
  179. package/dist/gateway/gateway/activity.js.map +1 -0
  180. package/dist/gateway/gateway/config.d.ts +50 -0
  181. package/dist/gateway/gateway/config.d.ts.map +1 -0
  182. package/dist/gateway/gateway/config.js +200 -0
  183. package/dist/gateway/gateway/config.js.map +1 -0
  184. package/dist/gateway/gateway/handlers/anthropic.d.ts +12 -0
  185. package/dist/gateway/gateway/handlers/anthropic.d.ts.map +1 -0
  186. package/dist/gateway/gateway/handlers/anthropic.js +254 -0
  187. package/dist/gateway/gateway/handlers/anthropic.js.map +1 -0
  188. package/dist/gateway/gateway/handlers/gemini.d.ts +12 -0
  189. package/dist/gateway/gateway/handlers/gemini.d.ts.map +1 -0
  190. package/dist/gateway/gateway/handlers/gemini.js +101 -0
  191. package/dist/gateway/gateway/handlers/gemini.js.map +1 -0
  192. package/dist/gateway/gateway/handlers/models.d.ts +4 -0
  193. package/dist/gateway/gateway/handlers/models.d.ts.map +1 -0
  194. package/dist/gateway/gateway/handlers/models.js +36 -0
  195. package/dist/gateway/gateway/handlers/models.js.map +1 -0
  196. package/dist/gateway/gateway/handlers/openai.d.ts +16 -0
  197. package/dist/gateway/gateway/handlers/openai.d.ts.map +1 -0
  198. package/dist/gateway/gateway/handlers/openai.js +254 -0
  199. package/dist/gateway/gateway/handlers/openai.js.map +1 -0
  200. package/dist/gateway/gateway/index.d.ts +27 -0
  201. package/dist/gateway/gateway/index.d.ts.map +1 -0
  202. package/dist/gateway/gateway/index.js +293 -0
  203. package/dist/gateway/gateway/index.js.map +1 -0
  204. package/dist/gateway/gateway/mapping-store.d.ts +38 -0
  205. package/dist/gateway/gateway/mapping-store.d.ts.map +1 -0
  206. package/dist/gateway/gateway/mapping-store.js +74 -0
  207. package/dist/gateway/gateway/mapping-store.js.map +1 -0
  208. package/dist/gateway/gateway/restorer.d.ts +63 -0
  209. package/dist/gateway/gateway/restorer.d.ts.map +1 -0
  210. package/dist/gateway/gateway/restorer.js +284 -0
  211. package/dist/gateway/gateway/restorer.js.map +1 -0
  212. package/dist/gateway/gateway/sanitizer.d.ts +17 -0
  213. package/dist/gateway/gateway/sanitizer.d.ts.map +1 -0
  214. package/dist/gateway/gateway/sanitizer.js +228 -0
  215. package/dist/gateway/gateway/sanitizer.js.map +1 -0
  216. package/dist/gateway/gateway/types.d.ts +53 -0
  217. package/dist/gateway/gateway/types.d.ts.map +1 -0
  218. package/dist/gateway/gateway/types.js +5 -0
  219. package/dist/gateway/gateway/types.js.map +1 -0
  220. package/dist/gateway/handlers/anthropic.d.ts +12 -0
  221. package/dist/gateway/handlers/anthropic.d.ts.map +1 -0
  222. package/dist/gateway/handlers/anthropic.js +254 -0
  223. package/dist/gateway/handlers/anthropic.js.map +1 -0
  224. package/dist/gateway/handlers/gemini.d.ts +12 -0
  225. package/dist/gateway/handlers/gemini.d.ts.map +1 -0
  226. package/dist/gateway/handlers/gemini.js +101 -0
  227. package/dist/gateway/handlers/gemini.js.map +1 -0
  228. package/dist/gateway/handlers/models.d.ts +4 -0
  229. package/dist/gateway/handlers/models.d.ts.map +1 -0
  230. package/dist/gateway/handlers/models.js +36 -0
  231. package/dist/gateway/handlers/models.js.map +1 -0
  232. package/dist/gateway/handlers/openai.d.ts +16 -0
  233. package/dist/gateway/handlers/openai.d.ts.map +1 -0
  234. package/dist/gateway/handlers/openai.js +254 -0
  235. package/dist/gateway/handlers/openai.js.map +1 -0
  236. package/dist/gateway/index.d.ts +27 -0
  237. package/dist/gateway/index.d.ts.map +1 -0
  238. package/dist/gateway/index.js +293 -0
  239. package/dist/gateway/index.js.map +1 -0
  240. package/dist/gateway/mapping-store.d.ts +38 -0
  241. package/dist/gateway/mapping-store.d.ts.map +1 -0
  242. package/dist/gateway/mapping-store.js +74 -0
  243. package/dist/gateway/mapping-store.js.map +1 -0
  244. package/dist/gateway/restorer.d.ts +63 -0
  245. package/dist/gateway/restorer.d.ts.map +1 -0
  246. package/dist/gateway/restorer.js +284 -0
  247. package/dist/gateway/restorer.js.map +1 -0
  248. package/dist/gateway/sanitizer.d.ts +17 -0
  249. package/dist/gateway/sanitizer.d.ts.map +1 -0
  250. package/dist/gateway/sanitizer.js +228 -0
  251. package/dist/gateway/sanitizer.js.map +1 -0
  252. package/dist/gateway/types.d.ts +53 -0
  253. package/dist/gateway/types.d.ts.map +1 -0
  254. package/dist/gateway/types.js +5 -0
  255. package/dist/gateway/types.js.map +1 -0
  256. package/dist/index.d.ts +19 -0
  257. package/dist/index.d.ts.map +1 -0
  258. package/dist/index.js +2084 -0
  259. package/dist/index.js.map +1 -0
  260. package/dist/memory/index.d.ts +5 -0
  261. package/dist/memory/index.d.ts.map +1 -0
  262. package/dist/memory/index.js +5 -0
  263. package/dist/memory/index.js.map +1 -0
  264. package/dist/memory/store.d.ts +82 -0
  265. package/dist/memory/store.d.ts.map +1 -0
  266. package/dist/memory/store.js +194 -0
  267. package/dist/memory/store.js.map +1 -0
  268. package/dist/platform-client/index.d.ts +63 -0
  269. package/dist/platform-client/index.d.ts.map +1 -0
  270. package/dist/platform-client/index.js +294 -0
  271. package/dist/platform-client/index.js.map +1 -0
  272. package/dist/platform-client/types.d.ts +109 -0
  273. package/dist/platform-client/types.d.ts.map +1 -0
  274. package/dist/platform-client/types.js +3 -0
  275. package/dist/platform-client/types.js.map +1 -0
  276. package/gateway/activity.d.ts +52 -0
  277. package/gateway/activity.d.ts.map +1 -0
  278. package/gateway/activity.js +111 -0
  279. package/gateway/activity.js.map +1 -0
  280. package/gateway/config.d.ts +50 -0
  281. package/gateway/config.d.ts.map +1 -0
  282. package/gateway/config.js +200 -0
  283. package/gateway/config.js.map +1 -0
  284. package/gateway/handlers/anthropic.d.ts +12 -0
  285. package/gateway/handlers/anthropic.d.ts.map +1 -0
  286. package/gateway/handlers/anthropic.js +254 -0
  287. package/gateway/handlers/anthropic.js.map +1 -0
  288. package/gateway/handlers/gemini.d.ts +12 -0
  289. package/gateway/handlers/gemini.d.ts.map +1 -0
  290. package/gateway/handlers/gemini.js +101 -0
  291. package/gateway/handlers/gemini.js.map +1 -0
  292. package/gateway/handlers/models.d.ts +4 -0
  293. package/gateway/handlers/models.d.ts.map +1 -0
  294. package/gateway/handlers/models.js +36 -0
  295. package/gateway/handlers/models.js.map +1 -0
  296. package/gateway/handlers/openai.d.ts +16 -0
  297. package/gateway/handlers/openai.d.ts.map +1 -0
  298. package/gateway/handlers/openai.js +254 -0
  299. package/gateway/handlers/openai.js.map +1 -0
  300. package/gateway/index.d.ts +27 -0
  301. package/gateway/index.d.ts.map +1 -0
  302. package/gateway/index.js +293 -0
  303. package/gateway/index.js.map +1 -0
  304. package/gateway/mapping-store.d.ts +38 -0
  305. package/gateway/mapping-store.d.ts.map +1 -0
  306. package/gateway/mapping-store.js +74 -0
  307. package/gateway/mapping-store.js.map +1 -0
  308. package/gateway/restorer.d.ts +63 -0
  309. package/gateway/restorer.d.ts.map +1 -0
  310. package/gateway/restorer.js +284 -0
  311. package/gateway/restorer.js.map +1 -0
  312. package/gateway/sanitizer.d.ts +17 -0
  313. package/gateway/sanitizer.d.ts.map +1 -0
  314. package/gateway/sanitizer.js +228 -0
  315. package/gateway/sanitizer.js.map +1 -0
  316. package/gateway/types.d.ts +53 -0
  317. package/gateway/types.d.ts.map +1 -0
  318. package/gateway/types.js +5 -0
  319. package/gateway/types.js.map +1 -0
  320. package/openclaw.plugin.json +86 -0
  321. package/package.json +74 -0
  322. package/samples/Untitled +1 -0
  323. package/samples/clean-email.txt +20 -0
  324. package/samples/test-document.md +53 -0
  325. package/samples/test-email-popup.txt +44 -0
  326. package/samples/test-email.txt +32 -0
  327. package/samples/test-webpage.html +51 -0
  328. package/scripts/enterprise-enroll.sh +89 -0
  329. package/scripts/enterprise-unenroll.sh +75 -0
@@ -0,0 +1,573 @@
1
+ /**
2
+ * Behavioral anomaly detector — runs at before_tool_call.
3
+ *
4
+ * Responsibilities:
5
+ * 1. Collect high-risk tool calls (file read, shell, web fetch) and send to Core
6
+ * 2. Record completed tool calls in the chain history
7
+ * 3. Core does all classification, signal computation, and risk decisions
8
+ * 4. Fail-open: if Core is unavailable, allow execution
9
+ */
10
+ import { randomBytes } from "node:crypto";
11
+ import { buildSignedAuthHeadersForUrl, withChangewayOpenPrefix } from "./auth.js";
12
+ import { sanitizeContent } from "./sanitizer.js";
13
+ import { appendEngineLogLine } from "./engine-log-writer.js";
14
+ // =============================================================================
15
+ // Tool Sets — used to decide whether to send a tool call to Core
16
+ // =============================================================================
17
+ export const FILE_READ_TOOLS = new Set([
18
+ "Read", "read_file", "read", "cat", "head", "tail", "view",
19
+ "get_file_contents", "open_file",
20
+ ]);
21
+ export const SHELL_TOOLS = new Set([
22
+ "Bash", "bash", "shell", "run_command", "execute", "terminal",
23
+ "cmd", "powershell",
24
+ ]);
25
+ export const WEB_FETCH_TOOLS = new Set([
26
+ "WebFetch", "web_fetch", "fetch", "http_request", "get_url",
27
+ "browser_navigate", "navigate",
28
+ ]);
29
+ // =============================================================================
30
+ // Param Sanitization
31
+ // =============================================================================
32
+ /** Module-level secret detection callback (set by BehaviorDetector) */
33
+ let secretDetectionCallback = null;
34
+ function sanitizeParams(params) {
35
+ const result = {};
36
+ const allRedactions = {};
37
+ for (const [key, value] of Object.entries(params)) {
38
+ const raw = typeof value === "string" ? value : JSON.stringify(value ?? "");
39
+ const sanitized = sanitizeContent(raw.slice(0, 500));
40
+ result[key] = sanitized.sanitized;
41
+ // Accumulate redaction types
42
+ if (sanitized.redactions) {
43
+ for (const [type, count] of Object.entries(sanitized.redactions)) {
44
+ allRedactions[type] = (allRedactions[type] ?? 0) + count;
45
+ }
46
+ }
47
+ }
48
+ // Report secret detections if any
49
+ if (Object.keys(allRedactions).length > 0 && secretDetectionCallback) {
50
+ secretDetectionCallback(allRedactions);
51
+ }
52
+ return result;
53
+ }
54
+ const MAX_SESSIONS = 200;
55
+ const MAX_CHAIN_ENTRIES = 50;
56
+ const ENGINE_LOG_PREFIX = "调用见微检测引擎";
57
+ const MAX_ENGINE_LOG_CHARS = 12_000;
58
+ export class BehaviorDetector {
59
+ sessions = new Map();
60
+ coreCredentials = null;
61
+ config;
62
+ log;
63
+ /** HTTP status codes we've already warned about — avoid log spam */
64
+ warnedStatuses = new Set();
65
+ /** Track if we've already notified about quota exceeded (avoid spam) */
66
+ quotaExceededNotified = false;
67
+ /** Callback for quota exceeded notification */
68
+ onQuotaExceeded = null;
69
+ /** Pending quota exceeded message to append to next tool result */
70
+ pendingQuotaMessage = null;
71
+ /** Callback for secret detection (business reporting) */
72
+ onSecretDetected = null;
73
+ formatEngineLogPayload(payload) {
74
+ try {
75
+ const text = typeof payload === "string" ? payload : JSON.stringify(payload);
76
+ if (text.length <= MAX_ENGINE_LOG_CHARS)
77
+ return text;
78
+ return `${text.slice(0, MAX_ENGINE_LOG_CHARS)}...<truncated>`;
79
+ }
80
+ catch {
81
+ return String(payload);
82
+ }
83
+ }
84
+ logEngineRequest(method, url, payload) {
85
+ const line = `${ENGINE_LOG_PREFIX} 请求 ${method} ${url} 参数=${this.formatEngineLogPayload(payload)}`;
86
+ this.log.info(line);
87
+ appendEngineLogLine(line);
88
+ }
89
+ logEngineResponse(method, url, status, payload) {
90
+ const line = `${ENGINE_LOG_PREFIX} 响应 ${method} ${url} status=${status} 参数=${this.formatEngineLogPayload(payload)}`;
91
+ this.log.info(line);
92
+ appendEngineLogLine(line);
93
+ }
94
+ logEngineError(method, url, err) {
95
+ const line = `${ENGINE_LOG_PREFIX} 异常 ${method} ${url} 错误=${String(err)}`;
96
+ this.log.warn(line);
97
+ appendEngineLogLine(line);
98
+ }
99
+ constructor(config, log) {
100
+ this.config = config;
101
+ this.log = log;
102
+ }
103
+ setCredentials(creds) {
104
+ this.coreCredentials = creds;
105
+ }
106
+ /** Set callback for when quota is exceeded */
107
+ setOnQuotaExceeded(callback) {
108
+ this.onQuotaExceeded = callback;
109
+ }
110
+ /** Set callback for when secrets are detected in params (business reporting) */
111
+ setOnSecretDetected(callback) {
112
+ this.onSecretDetected = callback;
113
+ secretDetectionCallback = callback;
114
+ }
115
+ /** Reset quota exceeded notification flag (e.g., on new day) */
116
+ resetQuotaExceededNotification() {
117
+ this.quotaExceededNotified = false;
118
+ this.pendingQuotaMessage = null;
119
+ }
120
+ /** Get and clear pending quota message (for appending to tool results) */
121
+ consumePendingQuotaMessage() {
122
+ const msg = this.pendingQuotaMessage;
123
+ this.pendingQuotaMessage = null;
124
+ return msg;
125
+ }
126
+ setUserIntent(sessionKey, message) {
127
+ const state = this.getOrCreate(sessionKey);
128
+ if (!state.userIntent) {
129
+ state.userIntent = message.slice(0, 500);
130
+ }
131
+ state.recentUserMessages = [
132
+ ...state.recentUserMessages.slice(-4),
133
+ message.slice(0, 200),
134
+ ];
135
+ }
136
+ clearSession(sessionKey) {
137
+ this.sessions.delete(sessionKey);
138
+ }
139
+ /**
140
+ * Read-and-clear latest prompt block decision for a session.
141
+ * Used by message_sending to terminate output immediately when user input
142
+ * was classified as block.
143
+ */
144
+ consumePromptBlockDecision(sessionKey) {
145
+ const state = this.sessions.get(sessionKey);
146
+ if (!state?.promptScanDecision)
147
+ return null;
148
+ if (state.promptScanDecision.action !== "block")
149
+ return null;
150
+ const decision = state.promptScanDecision;
151
+ state.promptScanDecision = null;
152
+ return decision;
153
+ }
154
+ /**
155
+ * Read current prompt block decision without consuming it.
156
+ * Useful when upstream hooks need to render a risk message while preserving
157
+ * the block decision for downstream enforcement.
158
+ */
159
+ getPendingPromptBlockDecision(sessionKey) {
160
+ const state = this.sessions.get(sessionKey);
161
+ if (!state?.promptScanDecision)
162
+ return null;
163
+ if (state.promptScanDecision.action !== "block")
164
+ return null;
165
+ return state.promptScanDecision;
166
+ }
167
+ /**
168
+ * Read current prompt alert decision without consuming it.
169
+ * Alert remains pending until user explicitly confirms.
170
+ */
171
+ getPendingPromptAlertDecision(sessionKey) {
172
+ return this.sessions.get(sessionKey)?.pendingPromptAlert ?? null;
173
+ }
174
+ /**
175
+ * Confirm and clear pending prompt alert for a session.
176
+ */
177
+ confirmPendingPromptAlert(sessionKey) {
178
+ const state = this.sessions.get(sessionKey);
179
+ if (!state?.pendingPromptAlert)
180
+ return null;
181
+ const decision = state.pendingPromptAlert;
182
+ state.confirmedPromptReplay = state.pendingPromptAlertText;
183
+ state.pendingPromptAlert = null;
184
+ state.pendingPromptAlertText = null;
185
+ if (state.promptScanDecision?.action === "alert") {
186
+ state.promptScanDecision = null;
187
+ }
188
+ return decision;
189
+ }
190
+ consumeConfirmedPromptReplay(sessionKey) {
191
+ const state = this.sessions.get(sessionKey);
192
+ if (!state?.confirmedPromptReplay)
193
+ return null;
194
+ const prompt = state.confirmedPromptReplay;
195
+ state.confirmedPromptReplay = null;
196
+ return prompt;
197
+ }
198
+ /**
199
+ * Called at before_tool_call. Returns a block decision or undefined (allow).
200
+ *
201
+ * All tool calls are sent to Core to build a complete tool chain.
202
+ * If Core is unavailable, fail-open (allow).
203
+ */
204
+ async onBeforeToolCall(ctx, event) {
205
+ // No credentials → can't call Core → allow
206
+ if (!this.coreCredentials)
207
+ return undefined;
208
+ const state = this.getOrCreate(ctx.sessionKey);
209
+ // If latest user prompt was classified as block, short-circuit before tool execution.
210
+ const promptDecision = state.promptScanDecision;
211
+ if (promptDecision?.action === "block" && this.config.blockOnRisk) {
212
+ return {
213
+ block: true,
214
+ blockReason: `changewayGuard blocked user prompt [${promptDecision.riskLevel}]: ${promptDecision.explanation} ` +
215
+ `(confidence: ${Math.round(promptDecision.confidence * 100)}%)`,
216
+ };
217
+ }
218
+ if (state.pendingPromptAlert) {
219
+ return {
220
+ block: true,
221
+ blockReason: `changewayGuard requires confirmation for alert prompt [${state.pendingPromptAlert.riskLevel}]: ` +
222
+ `${state.pendingPromptAlert.explanation}`,
223
+ };
224
+ }
225
+ // Build pendingTool
226
+ const pendingTool = {
227
+ toolName: event.toolName,
228
+ params: sanitizeParams(event.params),
229
+ };
230
+ // Collect content injection findings (if any)
231
+ const contentFindings = state.contentInjectionFindings.length > 0
232
+ ? [...state.contentInjectionFindings]
233
+ : undefined;
234
+ // Call Core assess API
235
+ const req = {
236
+ agentId: this.coreCredentials.agentId,
237
+ sessionKey: ctx.sessionKey,
238
+ runId: state.runId,
239
+ userIntent: state.userIntent,
240
+ toolChain: state.completedChain,
241
+ pendingTool,
242
+ contentFindings,
243
+ context: {
244
+ messageHistoryLength: state.recentUserMessages.length,
245
+ recentUserMessages: state.recentUserMessages.slice(-3),
246
+ },
247
+ meta: {
248
+ pluginVersion: this.config.pluginVersion,
249
+ clientTimestamp: new Date().toISOString(),
250
+ },
251
+ };
252
+ const verdict = await this.callAssessApi(req);
253
+ // Fail-open: Core unavailable → allow
254
+ if (!verdict)
255
+ return undefined;
256
+ if (verdict.action === "block" && this.config.blockOnRisk) {
257
+ return {
258
+ block: true,
259
+ blockReason: `changewayGuard blocked [${verdict.riskLevel}]: ${verdict.explanation} ` +
260
+ `(confidence: ${Math.round(verdict.confidence * 100)}%)`,
261
+ findings: verdict.findings,
262
+ };
263
+ }
264
+ if (verdict.action === "block" || verdict.action === "alert") {
265
+ this.log.warn(`Behavioral anomaly [${verdict.riskLevel}/${Math.round(verdict.confidence * 100)}%]: ${verdict.explanation}`);
266
+ }
267
+ return undefined;
268
+ }
269
+ /**
270
+ * Called at after_tool_call. Records the completed tool in the chain.
271
+ */
272
+ onAfterToolCall(ctx, event) {
273
+ const state = this.sessions.get(ctx.sessionKey);
274
+ if (!state)
275
+ return;
276
+ const resultStr = typeof event.result === "string" ? event.result : JSON.stringify(event.result ?? "");
277
+ const resultSizeBytes = Buffer.byteLength(resultStr, "utf-8");
278
+ let resultCategory = "empty";
279
+ if (event.error)
280
+ resultCategory = "error";
281
+ else if (resultSizeBytes > 100_000)
282
+ resultCategory = "text_large";
283
+ else if (resultSizeBytes > 0)
284
+ resultCategory = "text_small";
285
+ const entry = {
286
+ seq: state.nextSeq++,
287
+ toolName: event.toolName,
288
+ sanitizedParams: sanitizeParams(event.params),
289
+ outcome: event.error ? "error" : "success",
290
+ durationMs: event.durationMs ?? 0,
291
+ resultCategory,
292
+ resultSizeBytes,
293
+ };
294
+ state.completedChain.push(entry);
295
+ if (state.completedChain.length > MAX_CHAIN_ENTRIES) {
296
+ state.completedChain.shift();
297
+ }
298
+ }
299
+ /**
300
+ * Scan tool result content for injection patterns via Core API.
301
+ * Returns scan result or null if scan failed/unavailable.
302
+ */
303
+ async scanContent(sessionKey, toolName, content) {
304
+ if (!this.coreCredentials)
305
+ return null;
306
+ // Limit content size (max 100KB to avoid timeout)
307
+ const maxSize = 100 * 1024;
308
+ const truncatedContent = content.length > maxSize ? content.slice(0, maxSize) : content;
309
+ const controller = new AbortController();
310
+ const timer = setTimeout(() => controller.abort(), this.config.assessTimeoutMs);
311
+ const url = withChangewayOpenPrefix(`${this.config.coreUrl}/api/v1/content/scan`);
312
+ const requestBody = {
313
+ content: truncatedContent,
314
+ toolName,
315
+ sessionKey,
316
+ };
317
+ try {
318
+ this.logEngineRequest("POST", url, requestBody);
319
+ const response = await fetch(url, {
320
+ method: "POST",
321
+ headers: {
322
+ "Content-Type": "application/json",
323
+ ...buildSignedAuthHeadersForUrl({
324
+ method: "POST",
325
+ url,
326
+ body: requestBody,
327
+ }),
328
+ },
329
+ body: JSON.stringify(requestBody),
330
+ signal: controller.signal,
331
+ });
332
+ if (!response.ok) {
333
+ const text = await response.text().catch(() => "");
334
+ this.logEngineResponse("POST", url, response.status, text || "<empty>");
335
+ return null;
336
+ }
337
+ const json = (await response.json());
338
+ this.logEngineResponse("POST", url, response.status, json);
339
+ if (!json.success || !json.data)
340
+ return null;
341
+ this.log.info(`Core content-scan: detected=${json.data.detected}, ` +
342
+ `${json.data.action ? `action=${json.data.action}, ` : ""}` +
343
+ `categories=[${json.data.categories.join(",")}], ` +
344
+ `findings=${json.data.findings.length}`);
345
+ return json.data;
346
+ }
347
+ catch (err) {
348
+ if (err.name !== "AbortError") {
349
+ this.logEngineError("POST", url, err);
350
+ }
351
+ return null;
352
+ }
353
+ finally {
354
+ clearTimeout(timer);
355
+ }
356
+ }
357
+ /**
358
+ * Scan raw user prompt content at message_received(user).
359
+ * Stores latest decision in session state for optional enforcement during before_tool_call.
360
+ */
361
+ async scanPrompt(sessionKey, prompt) {
362
+ if (!this.coreCredentials)
363
+ return null;
364
+ const state = this.getOrCreate(sessionKey);
365
+ // New user message starts a new prompt decision window.
366
+ state.promptScanDecision = null;
367
+ state.pendingPromptAlert = null;
368
+ state.pendingPromptAlertText = null;
369
+ state.confirmedPromptReplay = null;
370
+ const controller = new AbortController();
371
+ const timer = setTimeout(() => controller.abort(), this.config.assessTimeoutMs);
372
+ // Keep payload bounded while preserving the raw user message for server-side detection.
373
+ const maxSize = 100 * 1024;
374
+ const truncatedPrompt = prompt.length > maxSize ? prompt.slice(0, maxSize) : prompt;
375
+ const req = {
376
+ agentId: this.coreCredentials.agentId,
377
+ sessionKey,
378
+ runId: state.runId,
379
+ prompt: truncatedPrompt,
380
+ role: "user",
381
+ source: "message_received",
382
+ context: {
383
+ messageHistoryLength: state.recentUserMessages.length,
384
+ recentUserMessages: state.recentUserMessages.slice(-3),
385
+ userIntent: state.userIntent,
386
+ },
387
+ meta: {
388
+ pluginVersion: this.config.pluginVersion,
389
+ clientTimestamp: new Date().toISOString(),
390
+ },
391
+ };
392
+ const url = withChangewayOpenPrefix(`${this.config.coreUrl}/api/v1/prompt/scan`);
393
+ try {
394
+ this.logEngineRequest("POST", url, req);
395
+ const response = await fetch(url, {
396
+ method: "POST",
397
+ headers: {
398
+ "Content-Type": "application/json",
399
+ ...buildSignedAuthHeadersForUrl({
400
+ method: "POST",
401
+ url,
402
+ body: req,
403
+ }),
404
+ },
405
+ body: JSON.stringify(req),
406
+ signal: controller.signal,
407
+ });
408
+ if (!response.ok) {
409
+ const text = await response.text().catch(() => "");
410
+ this.logEngineResponse("POST", url, response.status, text || "<empty>");
411
+ return null;
412
+ }
413
+ const json = (await response.json());
414
+ this.logEngineResponse("POST", url, response.status, json);
415
+ if (!json.success || !json.data)
416
+ return null;
417
+ if (json.data.quotaExceeded) {
418
+ const info = {
419
+ quotaExceeded: true,
420
+ quotaUsed: json.data.quotaUsed ?? 0,
421
+ quotaTotal: json.data.quotaTotal ?? 0,
422
+ isAutonomous: json.data.isAutonomous ?? true,
423
+ resetAt: json.data.resetAt ?? null,
424
+ upgradeUrl: json.data.upgradeUrl ?? "",
425
+ message: json.data.message ?? "Quota exceeded",
426
+ recommendation: json.data.recommendation ?? "",
427
+ };
428
+ if (!this.pendingQuotaMessage) {
429
+ this.pendingQuotaMessage = info;
430
+ }
431
+ return null;
432
+ }
433
+ const decision = json.data;
434
+ state.promptScanDecision = decision;
435
+ if (decision.action === "alert") {
436
+ state.pendingPromptAlert = decision;
437
+ state.pendingPromptAlertText = truncatedPrompt;
438
+ }
439
+ this.log.info(`Core prompt-scan: action=${decision.action}, ` +
440
+ `risk=${decision.riskLevel}, confidence=${Math.round(decision.confidence * 100)}%`);
441
+ return decision;
442
+ }
443
+ catch (err) {
444
+ if (err.name !== "AbortError") {
445
+ this.logEngineError("POST", url, err);
446
+ }
447
+ return null;
448
+ }
449
+ finally {
450
+ clearTimeout(timer);
451
+ }
452
+ }
453
+ // ── Private helpers ──────────────────────────────────────────────
454
+ getOrCreate(sessionKey) {
455
+ if (!this.sessions.has(sessionKey)) {
456
+ if (this.sessions.size >= MAX_SESSIONS) {
457
+ let oldest = null;
458
+ let oldestTime = Infinity;
459
+ for (const [key, state] of this.sessions) {
460
+ if (state.startedAt < oldestTime) {
461
+ oldestTime = state.startedAt;
462
+ oldest = key;
463
+ }
464
+ }
465
+ if (oldest)
466
+ this.sessions.delete(oldest);
467
+ }
468
+ this.sessions.set(sessionKey, {
469
+ sessionKey,
470
+ runId: `run-${randomBytes(8).toString("hex")}`,
471
+ userIntent: "",
472
+ recentUserMessages: [],
473
+ promptScanDecision: null,
474
+ pendingPromptAlert: null,
475
+ pendingPromptAlertText: null,
476
+ confirmedPromptReplay: null,
477
+ completedChain: [],
478
+ nextSeq: 0,
479
+ contentInjectionFindings: [],
480
+ startedAt: Date.now(),
481
+ });
482
+ }
483
+ return this.sessions.get(sessionKey);
484
+ }
485
+ async callAssessApi(req) {
486
+ if (!this.coreCredentials)
487
+ return null;
488
+ const controller = new AbortController();
489
+ const timer = setTimeout(() => controller.abort(), this.config.assessTimeoutMs);
490
+ const url = withChangewayOpenPrefix(`${this.config.coreUrl}/api/v1/behavior/assess`);
491
+ try {
492
+ this.logEngineRequest("POST", url, req);
493
+ const response = await fetch(url, {
494
+ method: "POST",
495
+ headers: {
496
+ "Content-Type": "application/json",
497
+ ...buildSignedAuthHeadersForUrl({
498
+ method: "POST",
499
+ url,
500
+ body: req,
501
+ }),
502
+ },
503
+ body: JSON.stringify(req),
504
+ signal: controller.signal,
505
+ });
506
+ if (!response.ok) {
507
+ const text = await response.text().catch(() => "");
508
+ this.logEngineResponse("POST", url, response.status, text || "<empty>");
509
+ if (!this.warnedStatuses.has(response.status)) {
510
+ this.warnedStatuses.add(response.status);
511
+ if (response.status === 401) {
512
+ this.log.warn("Platform: API key invalid or agent not found");
513
+ }
514
+ else if (response.status === 403) {
515
+ this.log.warn(`Platform: access denied — visit ${this.config.coreUrl} for details`);
516
+ }
517
+ else {
518
+ this.log.debug?.(`Platform: assess returned ${response.status}`);
519
+ }
520
+ }
521
+ return null;
522
+ }
523
+ const json = (await response.json());
524
+ this.logEngineResponse("POST", url, response.status, json);
525
+ if (!json.success)
526
+ return null;
527
+ if (!json.data)
528
+ return null;
529
+ // Handle quota exceeded response
530
+ if (json.data.quotaExceeded) {
531
+ const info = {
532
+ quotaExceeded: true,
533
+ quotaUsed: json.data.quotaUsed ?? 0,
534
+ quotaTotal: json.data.quotaTotal ?? 0,
535
+ isAutonomous: json.data.isAutonomous ?? true,
536
+ resetAt: json.data.resetAt ?? null,
537
+ upgradeUrl: json.data.upgradeUrl ?? "",
538
+ message: json.data.message ?? "Quota exceeded",
539
+ recommendation: json.data.recommendation ?? "",
540
+ };
541
+ const isFirstNotify = !this.quotaExceededNotified;
542
+ this.log.warn(`Core: quota exceeded (${info.quotaUsed}/${info.quotaTotal}, ` +
543
+ `autonomous=${info.isAutonomous}, firstNotify=${isFirstNotify})`);
544
+ // Always set pending message if there isn't one already
545
+ // This ensures the message gets through even if previous attempts failed
546
+ if (!this.pendingQuotaMessage) {
547
+ this.pendingQuotaMessage = info;
548
+ this.log.info("Core: stored pending quota message for next tool result");
549
+ }
550
+ // First time notification: trigger callback
551
+ if (isFirstNotify) {
552
+ this.quotaExceededNotified = true;
553
+ if (this.onQuotaExceeded) {
554
+ this.onQuotaExceeded(info);
555
+ }
556
+ }
557
+ // Return null to fail-open (allow execution, no detection)
558
+ return null;
559
+ }
560
+ return json.data;
561
+ }
562
+ catch (err) {
563
+ if (err.name !== "AbortError") {
564
+ this.logEngineError("POST", url, err);
565
+ }
566
+ return null;
567
+ }
568
+ finally {
569
+ clearTimeout(timer);
570
+ }
571
+ }
572
+ }
573
+ //# sourceMappingURL=behavior-detector.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"behavior-detector.js","sourceRoot":"","sources":["../../agent/behavior-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAa1C,OAAO,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,gFAAgF;AAChF,iEAAiE;AACjE,gFAAgF;AAEhF,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IACrC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC1D,mBAAmB,EAAE,WAAW;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IACjC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU;IAC7D,KAAK,EAAE,YAAY;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IACrC,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS;IAC3D,kBAAkB,EAAE,UAAU;CAC/B,CAAC,CAAC;AAqBH,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF,uEAAuE;AACvE,IAAI,uBAAuB,GAA0D,IAAI,CAAC;AAE1F,SAAS,cAAc,CAAC,MAA+B;IACrD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,aAAa,GAA2B,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC;QAClC,6BAA6B;QAC7B,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;gBACjE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAI,KAAgB,CAAC;YACvE,CAAC;QACH,CAAC;IACH,CAAC;IACD,kCAAkC;IAClC,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,uBAAuB,EAAE,CAAC;QACrE,uBAAuB,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAkDD,MAAM,YAAY,GAAG,GAAG,CAAC;AACzB,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,iBAAiB,GAAG,UAAU,CAAC;AACrC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAEpC,MAAM,OAAO,gBAAgB;IACnB,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC3C,eAAe,GAA2B,IAAI,CAAC;IAC/C,MAAM,CAAkB;IACxB,GAAG,CAAS;IACpB,oEAAoE;IAC5D,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,wEAAwE;IAChE,qBAAqB,GAAG,KAAK,CAAC;IACtC,+CAA+C;IACvC,eAAe,GAAmC,IAAI,CAAC;IAC/D,mEAAmE;IAC3D,mBAAmB,GAA6B,IAAI,CAAC;IAC7D,yDAAyD;IACjD,gBAAgB,GAA0D,IAAI,CAAC;IAE/E,sBAAsB,CAAC,OAAgB;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC7E,IAAI,IAAI,CAAC,MAAM,IAAI,oBAAoB;gBAAE,OAAO,IAAI,CAAC;YACrD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,gBAAgB,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,MAAc,EAAE,GAAW,EAAE,OAAgB;QACpE,MAAM,IAAI,GAAG,GAAG,iBAAiB,OAAO,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;QACnG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAEO,iBAAiB,CAAC,MAAc,EAAE,GAAW,EAAE,MAAc,EAAE,OAAgB;QACrF,MAAM,IAAI,GAAG,GAAG,iBAAiB,OAAO,MAAM,IAAI,GAAG,WAAW,MAAM,OAAO,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpH,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAEO,cAAc,CAAC,MAAc,EAAE,GAAW,EAAE,GAAY;QAC9D,MAAM,IAAI,GAAG,GAAG,iBAAiB,OAAO,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1E,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,YAAY,MAAuB,EAAE,GAAW;QAC9C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,cAAc,CAAC,KAA6B;QAC1C,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;IAC/B,CAAC;IAED,8CAA8C;IAC9C,kBAAkB,CAAC,QAAwC;QACzD,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;IAClC,CAAC;IAED,gFAAgF;IAChF,mBAAmB,CAAC,QAA+D;QACjF,IAAI,CAAC,gBAAgB,GAAG,QAAQ,CAAC;QACjC,uBAAuB,GAAG,QAAQ,CAAC;IACrC,CAAC;IAED,gEAAgE;IAChE,8BAA8B;QAC5B,IAAI,CAAC,qBAAqB,GAAG,KAAK,CAAC;QACnC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAClC,CAAC;IAED,0EAA0E;IAC1E,0BAA0B;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACrC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;QAChC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,aAAa,CAAC,UAAkB,EAAE,OAAe;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YACtB,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3C,CAAC;QACD,KAAK,CAAC,kBAAkB,GAAG;YACzB,GAAG,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACtB,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,UAAkB;QAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACH,0BAA0B,CAAC,UAAkB;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAC5C,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,kBAAkB,CAAC;QAC1C,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAChC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;OAIG;IACH,6BAA6B,CAAC,UAAkB;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAC5C,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QAC7D,OAAO,KAAK,CAAC,kBAAkB,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,6BAA6B,CAAC,UAAkB;QAC9C,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,kBAAkB,IAAI,IAAI,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,yBAAyB,CAAC,UAAkB;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,kBAAkB,CAAC;QAC1C,KAAK,CAAC,qBAAqB,GAAG,KAAK,CAAC,sBAAsB,CAAC;QAC3D,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAChC,KAAK,CAAC,sBAAsB,GAAG,IAAI,CAAC;QACpC,IAAI,KAAK,CAAC,kBAAkB,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;YACjD,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAClC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,4BAA4B,CAAC,UAAkB;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,qBAAqB;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,qBAAqB,CAAC;QAC3C,KAAK,CAAC,qBAAqB,GAAG,IAAI,CAAC;QACnC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CACpB,GAA6C,EAC7C,KAA4D;QAE5D,2CAA2C;QAC3C,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO,SAAS,CAAC;QAE5C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAE/C,sFAAsF;QACtF,MAAM,cAAc,GAAG,KAAK,CAAC,kBAAkB,CAAC;QAChD,IAAI,cAAc,EAAE,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAClE,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,WAAW,EACT,uCAAuC,cAAc,CAAC,SAAS,MAAM,cAAc,CAAC,WAAW,GAAG;oBAClG,gBAAgB,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,GAAG,GAAG,CAAC,IAAI;aAClE,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAC7B,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,WAAW,EACT,0DAA0D,KAAK,CAAC,kBAAkB,CAAC,SAAS,KAAK;oBACjG,GAAG,KAAK,CAAC,kBAAkB,CAAC,WAAW,EAAE;aAC5C,CAAC;QACJ,CAAC;QAED,oBAAoB;QACpB,MAAM,WAAW,GAAoB;YACnC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;SACrC,CAAC;QAEF,8CAA8C;QAC9C,MAAM,eAAe,GAAG,KAAK,CAAC,wBAAwB,CAAC,MAAM,GAAG,CAAC;YAC/D,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,wBAAwB,CAAC;YACrC,CAAC,CAAC,SAAS,CAAC;QAEd,uBAAuB;QACvB,MAAM,GAAG,GAA0B;YACjC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO;YACrC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,cAAc;YAC/B,WAAW;YACX,eAAe;YACf,OAAO,EAAE;gBACP,oBAAoB,EAAE,KAAK,CAAC,kBAAkB,CAAC,MAAM;gBACrD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;aACvD;YACD,IAAI,EAAE;gBACJ,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;gBACxC,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC1C;SACF,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAE9C,sCAAsC;QACtC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAE/B,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1D,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,WAAW,EACT,2BAA2B,OAAO,CAAC,SAAS,MAAM,OAAO,CAAC,WAAW,GAAG;oBACxE,gBAAgB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,IAAI;gBAC1D,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC7D,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,uBAAuB,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,OAAO,OAAO,CAAC,WAAW,EAAE,CAC7G,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,eAAe,CACb,GAA2B,EAC3B,KAMC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,SAAS,GACb,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACvF,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAE9D,IAAI,cAAc,GAAqC,OAAO,CAAC;QAC/D,IAAI,KAAK,CAAC,KAAK;YAAE,cAAc,GAAG,OAAO,CAAC;aACrC,IAAI,eAAe,GAAG,OAAO;YAAE,cAAc,GAAG,YAAY,CAAC;aAC7D,IAAI,eAAe,GAAG,CAAC;YAAE,cAAc,GAAG,YAAY,CAAC;QAE5D,MAAM,KAAK,GAAmB;YAC5B,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,eAAe,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;YAC7C,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YAC1C,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC;YACjC,cAAc;YACd,eAAe;SAChB,CAAC;QAEF,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACpD,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CACf,UAAkB,EAClB,QAAgB,EAChB,OAAe;QAEf,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QAEvC,kDAAkD;QAClD,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC;QAC3B,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAExF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAChF,MAAM,GAAG,GAAG,uBAAuB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;QAClF,MAAM,WAAW,GAAG;YAClB,OAAO,EAAE,gBAAgB;YACzB,QAAQ;YACR,UAAU;SACX,CAAC;QAEF,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,GAAG,4BAA4B,CAAC;wBAC9B,MAAM,EAAE,MAAM;wBACd,GAAG;wBACH,IAAI,EAAE,WAAW;qBAClB,CAAC;iBACH;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;gBACjC,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBACnD,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,IAAI,SAAS,CAAC,CAAC;gBACxE,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAC;YACF,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAE3D,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YAE7C,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,+BAA+B,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI;gBACrD,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC3D,eAAe,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK;gBAClD,YAAY,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CACxC,CAAC;YAEF,OAAO,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAa,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACzC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,UAAkB,EAAE,MAAc;QACjD,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QAEvC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAE3C,wDAAwD;QACxD,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAChC,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAChC,KAAK,CAAC,sBAAsB,GAAG,IAAI,CAAC;QACpC,KAAK,CAAC,qBAAqB,GAAG,IAAI,CAAC;QAEnC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAEhF,wFAAwF;QACxF,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC;QAC3B,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAEpF,MAAM,GAAG,GAAsB;YAC7B,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO;YACrC,UAAU;YACV,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,eAAe;YACvB,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,kBAAkB;YAC1B,OAAO,EAAE;gBACP,oBAAoB,EAAE,KAAK,CAAC,kBAAkB,CAAC,MAAM;gBACrD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtD,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B;YACD,IAAI,EAAE;gBACJ,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;gBACxC,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC1C;SACF,CAAC;QACF,MAAM,GAAG,GAAG,uBAAuB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;QAEjF,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,GAAG,4BAA4B,CAAC;wBAC9B,MAAM,EAAE,MAAM;wBACd,GAAG;wBACH,IAAI,EAAE,GAAG;qBACV,CAAC;iBACH;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;gBACzB,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBACnD,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,IAAI,SAAS,CAAC,CAAC;gBACxE,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAC;YACF,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAE3D,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YAE7C,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAsB;oBAC9B,aAAa,EAAE,IAAI;oBACnB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC;oBACnC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC;oBACrC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI;oBAC5C,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI;oBAClC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE;oBACtC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,gBAAgB;oBAC9C,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE;iBAC/C,CAAC;gBAEF,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAC9B,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;gBAClC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;YAC3B,KAAK,CAAC,kBAAkB,GAAG,QAAQ,CAAC;YACpC,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAChC,KAAK,CAAC,kBAAkB,GAAG,QAAQ,CAAC;gBACpC,KAAK,CAAC,sBAAsB,GAAG,eAAe,CAAC;YACjD,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,4BAA4B,QAAQ,CAAC,MAAM,IAAI;gBAC/C,QAAQ,QAAQ,CAAC,SAAS,gBAAgB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,CACnF,CAAC;YAEF,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAa,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACzC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,oEAAoE;IAE5D,WAAW,CAAC,UAAkB;QACpC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC;gBACvC,IAAI,MAAM,GAAkB,IAAI,CAAC;gBACjC,IAAI,UAAU,GAAG,QAAQ,CAAC;gBAC1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACzC,IAAI,KAAK,CAAC,SAAS,GAAG,UAAU,EAAE,CAAC;wBACjC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;wBAC7B,MAAM,GAAG,GAAG,CAAC;oBACf,CAAC;gBACH,CAAC;gBACD,IAAI,MAAM;oBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE;gBAC5B,UAAU;gBACV,KAAK,EAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;gBAC9C,UAAU,EAAE,EAAE;gBACd,kBAAkB,EAAE,EAAE;gBACtB,kBAAkB,EAAE,IAAI;gBACxB,kBAAkB,EAAE,IAAI;gBACxB,sBAAsB,EAAE,IAAI;gBAC5B,qBAAqB,EAAE,IAAI;gBAC3B,cAAc,EAAE,EAAE;gBAClB,OAAO,EAAE,CAAC;gBACV,wBAAwB,EAAE,EAAE;gBAC5B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,GAA0B;QACpD,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAChF,MAAM,GAAG,GAAG,uBAAuB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,yBAAyB,CAAC,CAAC;QACrF,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,GAAG,4BAA4B,CAAC;wBAC9B,MAAM,EAAE,MAAM;wBACd,GAAG;wBACH,IAAI,EAAE,GAAG;qBACV,CAAC;iBACH;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;gBACzB,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBACnD,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,IAAI,SAAS,CAAC,CAAC;gBACxE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC9C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBAC5B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;oBAChE,CAAC;yBAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACnC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAmC,IAAI,CAAC,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC;oBACtF,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,6BAA6B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBACnE,CAAC;gBACH,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAC;YACF,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAE3D,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YAE5B,iCAAiC;YACjC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAsB;oBAC9B,aAAa,EAAE,IAAI;oBACnB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC;oBACnC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC;oBACrC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI;oBAC5C,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI;oBAClC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE;oBACtC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,gBAAgB;oBAC9C,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE;iBAC/C,CAAC;gBAEF,MAAM,aAAa,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC;gBAClD,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,yBAAyB,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,IAAI;oBAC9D,cAAc,IAAI,CAAC,YAAY,iBAAiB,aAAa,GAAG,CACjE,CAAC;gBAEF,wDAAwD;gBACxD,yEAAyE;gBACzE,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAC9B,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;oBAChC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;gBAC3E,CAAC;gBAED,4CAA4C;gBAC5C,IAAI,aAAa,EAAE,CAAC;oBAClB,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;oBAClC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;wBACzB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;oBAC7B,CAAC;gBACH,CAAC;gBAED,2DAA2D;gBAC3D,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAa,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACzC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF"}