@coralai/sps-cli 0.65.85 → 0.65.87

package/dist/core/templates/templateDigest.js

@@ -0,0 +1,57 @@
+/**
+ * @module        core/templates/templateDigest
+ * @description   模板包的**规范化内容指纹** —— 内容寻址 templateId 的唯一依据。
+ * @layer         core
+ * @boundedContext templates
+ *
+ * 🔴 **为什么不是 sha256(tar.gz 字节)**:gzip 头带时间戳、tar 条目顺序与 mtime/uid/gid 都会变
+ * ⇒ 同样的 63 个文件在两台机器上打包出来 digest 不同 ⇒ 内容寻址失效
+ * (`GET /api/templates/<id>` 永远 404、每次都重传)。所以指纹只认**解包后的文件树**,
+ * tar.gz 只当传输容器。
+ *
+ * 规范化规则(两侧必须逐字一致,服务端权威):
+ * ```
+ * 1. 只取普通文件(目录不进指纹 —— 空目录不影响语义;软链/硬链/设备在解包时就被拒了)
+ * 2. 相对路径用 '/' 分隔,按**字节序**排序(Buffer.compare,不是 localeCompare)
+ * 3. 每条: <相对路径> \0 <mode> \0 <sha256(文件内容) 十六进制> \n
+ * 4. mode 只有两档:可执行 '755',否则 '644'
+ *    🔴 **可执行与否取自模板包内 `template.json` 的 `exec` 声明,不取 tar 里的 mode 位**
+ *    (2026-08-14 拍板)。取 tar 的话,谁在哪台机器 checkout/打包都可能改掉执行位 ⇒
+ *    退回"同样的文件两次打包 digest 不同",只是把洞从 gzip 头挪到 mode 位。
+ *    配套校验:**tar 里有执行位但不在 `exec` 声明里 → 422**(忘了声明不是静默降级,是当场失败);
+ *    声明了但 tar 没执行位 → 直接置 755(声明即意图)。
+ * 5. 全部拼接后再 sha256,取十六进制**前 12 位**
+ * ```
+ * 排除:mtime / uid / gid / tar 条目顺序 / gzip 头,一概不进。
+ *
+ * ⚠️ studio 侧会各实现一份。**漂了就当场 422**(服务端解包后重算,与声明值比对)——
+ * 比"共用一份实现却没人验"更安全。
+ */
+import { createHash } from 'node:crypto';
+/** 单个文件的规范化行。 */
+function entryLine(e) {
+    const mode = e.executable ? '755' : '644';
+    const sha = createHash('sha256').update(e.content).digest('hex');
+    return `${e.path}\0${mode}\0${sha}\n`;
+}
+/** 规范化内容指纹(完整 64 位十六进制)。 */
+export function templateTreeDigest(files) {
+    const sorted = [...files].sort((a, b) => Buffer.compare(Buffer.from(a.path), Buffer.from(b.path)));
+    const h = createHash('sha256');
+    for (const e of sorted)
+        h.update(entryLine(e));
+    return h.digest('hex');
+}
+/** `<engine>@<sha256 前 12>` —— 内容寻址的 templateId。 */
+export function templateId(engine, files) {
+    return `${engine}@${templateTreeDigest(files).slice(0, 12)}`;
+}
+/** templateId 的形状:`<engine>@<12 位小写十六进制>`。engine 与 skill/项目名同字符集。 */
+const TEMPLATE_ID_RE = /^([A-Za-z0-9_-]{1,64})@([0-9a-f]{12})$/;
+export function parseTemplateId(id) {
+    const m = TEMPLATE_ID_RE.exec(id);
+    if (!m)
+        return null;
+    return { engine: m[1], digest12: m[2] };
+}
+//# sourceMappingURL=templateDigest.js.map

package/dist/core/templates/templateDigest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templateDigest.js","sourceRoot":"","sources":["../../../src/core/templates/templateDigest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAUzC,iBAAiB;AACjB,SAAS,SAAS,CAAC,CAAoB;IACrC,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1C,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,OAAO,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,KAAK,GAAG,IAAI,CAAC;AACxC,CAAC;AAED,4BAA4B;AAC5B,MAAM,UAAU,kBAAkB,CAAC,KAA0B;IAC3D,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnG,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,KAA0B;IACnE,OAAO,GAAG,MAAM,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,qEAAqE;AACrE,MAAM,cAAc,GAAG,wCAAwC,CAAC;AAEhE,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC;AAC5C,CAAC"}

package/dist/core/templates/templatePackage.d.ts

@@ -0,0 +1,155 @@
+import { type TemplateFileEntry } from './templateDigest.js';
+/** 解包上限。超限一律拒绝,并**说清超的是哪一条、当前值、上限值**(别给 "too large")。 */
+export declare const TEMPLATE_LIMITS: {
+    /** 压缩包字节(路由层还有一道 bodyLimit)。 */
+    readonly maxArchiveBytes: number;
+    /** 解包后总字节。 */
+    readonly maxTotalBytes: number;
+    /** 文件条目数。 */
+    readonly maxFiles: 2000;
+    /** 单个文件字节。 */
+    readonly maxFileBytes: number;
+    /** 解压比上限(解包后 / 压缩后)—— 防解压炸弹。 */
+    readonly maxCompressionRatio: 100;
+};
+/**
+ * 发布声明 —— **产物长什么样、快照哪个目录,由模板说了算,sps 不猜**。
+ *
+ * 存在的理由(设计文档 §3.3):产物未必是静态站点。生产里同时有
+ * phaser 游戏(根目录即产物,当站点服务)和 video 项目(产物是 `final.mp4`,没有 index.html)。
+ * 把形态写死进 sps 就等于把产品塞进引擎 —— **新增产物类型应该是新增一个模板,不是改 sps**。
+ *
+ * 🔴 **sps 只存不解释**:它不读 outDir 去做任何事,只把声明原样回给调用方
+ * (`GET /api/templates/:id`)。快照由平台指挥 sidecar 做,sidecar 只收一个相对路径。
+ */
+export interface TemplatePublish {
+    /** 快照哪个目录(相对项目根);`"."` = 整个项目根。 */
+    outDir: string;
+    /** 反代怎么服务它:`site` = 当站点(补默认文档);`file` = 单文件制品(下载/播放)。 */
+    serve: 'site' | 'file';
+    /** `serve: 'file'` 时的制品路径(相对 `outDir`),此时**必填**。 */
+    artifact?: string;
+}
+/**
+ * 烟测声明 —— **"这个产品算不算合格"由模板说了算,sps 只知道跑哪条命令、怎么读结论。**
+ *
+ * 由来(Eddy 2026-08-18 定):烟测脚本(骨架 + 产品判据)由 studio 提供、随模板走,
+ * **不进 sps-cli**(公共 npm 包不该带 playwright 依赖,更不该带任何产品判据)。
+ * 与 `publish` 同一个位置、同一条道理:**产物形态与合格判据都由模板定,sps 不猜。**
+ *
+ * 🔴 sps **不执行**这里的命令 —— 它只把声明原样回给调用方(`GET /api/templates/:id`),
+ * 由 agent 按 skill 的指引去跑。sps 一旦开始解释它,就变成了产品代码。
+ */
+export interface TemplateSmoke {
+    /** 入口脚本(相对项目根),如 `scripts/smoke.mjs`。 */
+    script: string;
+    /** 产品判据 id,原样作为 `--checks=<id>` 传给脚本;缺省表示脚本自带全部判据。 */
+    checks?: string;
+    /** 快速档参数(中途回归用);缺省 `--quick`。收尾必须跑全量,见 smoke skill。 */
+    quickFlag?: string;
+}
+export interface TemplateManifest {
+    engine: string;
+    vars: string[];
+    /** 只有这些文件做 `{{VAR}}` 替换;其余原样拷(二进制安全)。 */
+    render: string[];
+    /** 允许 scaffold 删掉重建的路径。`replace` 必须是它的子集。 */
+    replaceable: string[];
+    /** 需要置 755 的文件 —— **执行位的唯一真源**。 */
+    exec: string[];
+    /**
+     * 🔴 **可选**,而且必须保持可选。
+     * `loadTemplate()` 每次读盘都重新解析 `template.json` ——
+     * 一旦它变成必填,**已注册的模板会当场变成读不出来**(生产上的
+     * `phaser@959ebe6fedcb` 就没有这个字段)。校验器收紧会让存量数据静默失效,
+     * 这是"陈旧副本"那一族里最难发现的一种:没人改数据,是读它的代码变了。
+     */
+    publish?: TemplatePublish;
+    /** 🔴 同 `publish`:**可选**,且必须保持可选。理由见上面那条注释。 */
+    smoke?: TemplateSmoke;
+}
+export interface UnpackedTemplate {
+    manifest: TemplateManifest;
+    files: TemplateFileEntry[];
+    id: string;
+    digest: string;
+    totalBytes: number;
+}
+export type UnpackError = {
+    code: 'ARCHIVE_TOO_LARGE';
+    detail: string;
+} | {
+    code: 'LIMIT_EXCEEDED';
+    detail: string;
+} | {
+    code: 'UNSAFE_ENTRY';
+    detail: string;
+} | {
+    code: 'BAD_ARCHIVE';
+    detail: string;
+} | {
+    code: 'MANIFEST_INVALID';
+    detail: string;
+} | {
+    code: 'EXEC_UNDECLARED';
+    detail: string;
+};
+export type UnpackResult = {
+    ok: true;
+    value: UnpackedTemplate;
+} | {
+    ok: false;
+    error: UnpackError;
+};
+/**
+ * 路径安全:必须是相对路径、不含 `..` 段、不以 `/` 开头、无空段、无盘符。
+ * 🔴 用**段级**判断,不用字符串 startsWith —— `..foo` 合法而 `a/../../b` 不合法,
+ * 只看前缀两者会判反。
+ */
+export declare function isSafeRelPath(p: string): boolean;
+/**
+ * 目录引用的安全判断 = `isSafeRelPath` 再加一个合法值 `"."`(表示项目根)。
+ *
+ * 单独一个函数而不是给 `isSafeRelPath` 加参数:`"."` 对**文件**路径永远非法
+ * (`render: ["."]` 没有意义),放宽它会同时放宽调用它的另外三处声明校验。
+ */
+export declare function isSafeRelDir(p: string): boolean;
+/**
+ * tar 条目路径归一:去掉前导 `./`、压掉重复 `/`、反斜杠转正斜杠。
+ *
+ * 🔴 **不归一就会把好包也拒掉**:`tar czf x.tgz -C dir .` 产出的条目全是 `./foo` ——
+ * 那是最常见的打包姿势。实测踩到过:三个恶意包全被拒,但 symlink / 炸弹两个是栽在 `./` 上,
+ * **它们各自那道守卫根本没被执行到**(假绿)。归一之后才轮得到真正该拒它们的那一条。
+ */
+export declare function normalizeEntryPath(raw: string): string;
+/**
+ * 解包 + 校验 + 算指纹。**不落盘** —— 调用方拿到 UnpackedTemplate 后自行决定存不存。
+ */
+export declare function unpackTemplate(archive: Buffer): Promise<UnpackResult>;
+/** `~/.coral/templates` —— 每次调用现读 HOME(与 runtimePaths 同惯例,方便测试)。 */
+export declare function templatesRoot(): string;
+export declare function templateDir(id: string): string;
+export declare function isTemplateRegistered(id: string): boolean;
+/**
+ * 落盘。**先写临时目录再整体 rename** —— 半棵树被别人读到,比没有更糟
+ * (调用方会以为注册成功)。同 id 已存在 = 幂等,直接返回。
+ */
+export declare function storeTemplate(t: UnpackedTemplate): {
+    stored: boolean;
+    dir: string;
+};
+/** 读回已注册模板的文件树(scaffold 用)。未注册 → null。 */
+export declare function loadTemplate(id: string): {
+    manifest: TemplateManifest;
+    files: TemplateFileEntry[];
+} | null;
+/** 已注册模板的摘要(GET /api/templates/:id)。 */
+export declare function templateSummary(id: string): {
+    id: string;
+    engine: string;
+    files: number;
+    bytes: number;
+    publish?: TemplatePublish;
+    smoke?: TemplateSmoke;
+} | null;
+//# sourceMappingURL=templatePackage.d.ts.map

package/dist/core/templates/templatePackage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templatePackage.d.ts","sourceRoot":"","sources":["../../../src/core/templates/templatePackage.ts"],"names":[],"mappings":"AAaA,OAAO,EAAkC,KAAK,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7F,yDAAyD;AACzD,eAAO,MAAM,eAAe;IAC1B,gCAAgC;;IAEhC,cAAc;;IAEd,aAAa;;IAEb,cAAc;;IAEd,gCAAgC;;CAExB,CAAC;AAEX;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC5B,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,yCAAyC;IACzC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,6CAA6C;IAC7C,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,mCAAmC;IACnC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,+CAA+C;IAC/C,KAAK,CAAC,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhD,MAAM,MAAM,YAAY,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,CAAC;AAIrG;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAKhD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAE/C;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAItD;AA6LD;;GAEG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAyD3E;AAID,oEAAoE;AACpE,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAExD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,gBAAgB,GAAG;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAqBnF;AAED,0CAA0C;AAC1C,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,iBAAiB,EAAE,CAAA;CAAE,GAAG,IAAI,CAmB1G;AAED,wCAAwC;AACxC,wBAAgB,eAAe,CAC7B,EAAE,EAAE,MAAM,GACT;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IAAC,KAAK,CAAC,EAAE,aAAa,CAAA;CAAE,GAAG,IAAI,CAavH"}

package/dist/core/templates/templatePackage.js

@@ -0,0 +1,393 @@
+/**
+ * @module        core/templates/templatePackage
+ * @description   模板包的解包 / 校验 / 落盘。**收别人的 tar = 收不可信输入**,安全全在这一处。
+ * @layer         core
+ * @boundedContext templates
+ *
+ * 解包在**内存里**完成、校验全过之后才落盘 —— 边解边写会让"校验失败"留下半棵树。
+ * 内存用量由下面的上限兜住。
+ */
+import { createHash } from 'node:crypto';
+import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { list as tarList } from 'tar';
+import { templateId, templateTreeDigest } from './templateDigest.js';
+/** 解包上限。超限一律拒绝,并**说清超的是哪一条、当前值、上限值**(别给 "too large")。 */
+export const TEMPLATE_LIMITS = {
+    /** 压缩包字节(路由层还有一道 bodyLimit)。 */
+    maxArchiveBytes: 8 * 1024 * 1024,
+    /** 解包后总字节。 */
+    maxTotalBytes: 32 * 1024 * 1024,
+    /** 文件条目数。 */
+    maxFiles: 2000,
+    /** 单个文件字节。 */
+    maxFileBytes: 8 * 1024 * 1024,
+    /** 解压比上限(解包后 / 压缩后)—— 防解压炸弹。 */
+    maxCompressionRatio: 100,
+};
+const err = (code, detail) => ({ ok: false, error: { code, detail } });
+/**
+ * 路径安全:必须是相对路径、不含 `..` 段、不以 `/` 开头、无空段、无盘符。
+ * 🔴 用**段级**判断,不用字符串 startsWith —— `..foo` 合法而 `a/../../b` 不合法,
+ * 只看前缀两者会判反。
+ */
+export function isSafeRelPath(p) {
+    if (!p || p.startsWith('/') || p.includes('\0') || /^[A-Za-z]:/.test(p))
+        return false;
+    if (p.endsWith('/'))
+        return false;
+    const segs = p.split('/');
+    return segs.every((s) => s.length > 0 && s !== '.' && s !== '..');
+}
+/**
+ * 目录引用的安全判断 = `isSafeRelPath` 再加一个合法值 `"."`(表示项目根)。
+ *
+ * 单独一个函数而不是给 `isSafeRelPath` 加参数:`"."` 对**文件**路径永远非法
+ * (`render: ["."]` 没有意义),放宽它会同时放宽调用它的另外三处声明校验。
+ */
+export function isSafeRelDir(p) {
+    return p === '.' || isSafeRelPath(p);
+}
+/**
+ * tar 条目路径归一:去掉前导 `./`、压掉重复 `/`、反斜杠转正斜杠。
+ *
+ * 🔴 **不归一就会把好包也拒掉**:`tar czf x.tgz -C dir .` 产出的条目全是 `./foo` ——
+ * 那是最常见的打包姿势。实测踩到过:三个恶意包全被拒,但 symlink / 炸弹两个是栽在 `./` 上,
+ * **它们各自那道守卫根本没被执行到**(假绿)。归一之后才轮得到真正该拒它们的那一条。
+ */
+export function normalizeEntryPath(raw) {
+    let p = raw.replace(/\\/g, '/').replace(/\/{2,}/g, '/');
+    while (p.startsWith('./'))
+        p = p.slice(2);
+    return p;
+}
+function parseManifest(raw) {
+    let obj;
+    try {
+        obj = JSON.parse(raw.toString('utf-8'));
+    }
+    catch (e) {
+        return { ok: false, detail: `template.json 不是合法 JSON:${e instanceof Error ? e.message : String(e)}` };
+    }
+    if (typeof obj !== 'object' || obj === null || Array.isArray(obj)) {
+        return { ok: false, detail: 'template.json 必须是对象' };
+    }
+    const o = obj;
+    const engine = o.engine;
+    if (typeof engine !== 'string' || !/^[A-Za-z0-9_-]{1,64}$/.test(engine)) {
+        return { ok: false, detail: 'engine 必须匹配 [A-Za-z0-9_-]{1,64}' };
+    }
+    const arr = (key) => {
+        const v = o[key];
+        if (v === undefined)
+            return [];
+        if (!Array.isArray(v) || v.some((x) => typeof x !== 'string'))
+            return null;
+        return v;
+    };
+    const vars = arr('vars');
+    const render = arr('render');
+    const replaceable = arr('replaceable');
+    const exec = arr('exec');
+    if (!vars || !render || !replaceable || !exec) {
+        return { ok: false, detail: 'vars / render / replaceable / exec 必须是 string[]' };
+    }
+    // 🔴 模板作者也是不可信输入:声明里的路径同样要过安全校验。
+    for (const [key, list] of [['render', render], ['replaceable', replaceable], ['exec', exec]]) {
+        for (const p of list) {
+            if (!isSafeRelPath(p))
+                return { ok: false, detail: `${key} 含非法路径:${JSON.stringify(p)}` };
+        }
+    }
+    for (const v of vars) {
+        if (!/^[A-Z][A-Z0-9_]*$/.test(v))
+            return { ok: false, detail: `变量名必须是 [A-Z][A-Z0-9_]*:${JSON.stringify(v)}` };
+    }
+    const pub = parsePublish(o.publish);
+    if (!pub.ok)
+        return pub;
+    const smk = parseSmoke(o.smoke);
+    if (!smk.ok)
+        return smk;
+    return {
+        ok: true,
+        value: {
+            engine, vars, render, replaceable, exec,
+            ...(pub.value ? { publish: pub.value } : {}),
+            ...(smk.value ? { smoke: smk.value } : {}),
+        },
+    };
+}
+/**
+ * 解析可选的 `publish` 声明。缺省 → `undefined`(**不是**一个默认值)。
+ *
+ * 🔴 不给缺省值:缺省成 `{outDir:'.', serve:'site'}` 会让"模板没声明"和"模板声明了根+站点"
+ * 变得无法区分,而这两者对调用方的意义相反 —— 前者是"这个模板还没定发布形态,别自作主张",
+ * 后者是"作者确认了根就是产物"。同族的坑刚在 GC 那边踩过:
+ * `pins` 用 `Set | undefined` 会被 `?? new Set()` 把"问不到"抹成"没人发布"。
+ */
+/**
+ * 解析可选的 `smoke` 声明。与 `parsePublish` 同规:缺省 → `undefined`(**不是默认值**)。
+ * "没声明烟测"和"声明了一个默认烟测"含义相反 —— 前者是"这个模板还没定",
+ * 后者是"作者确认了跑这条"。给默认值会让两者无法区分。
+ */
+function parseSmoke(v) {
+    if (v === undefined || v === null)
+        return { ok: true, value: undefined };
+    if (typeof v !== 'object' || Array.isArray(v))
+        return { ok: false, detail: 'smoke 必须是对象' };
+    const o = v;
+    const script = o.script;
+    if (typeof script !== 'string' || !isSafeRelPath(script)) {
+        return { ok: false, detail: `smoke.script 必须是安全的相对路径:${JSON.stringify(script)}` };
+    }
+    // 🔴 **不校验 script 在模板里存在** —— 与 publish.outDir 同理:脚本可能由 scaffold 后的
+    // `npm i` 生成、或由另一个模板层提供。加这条"顺手的"检查会把整类模板拒在门外。
+    const checks = o.checks;
+    if (checks !== undefined && (typeof checks !== 'string' || !/^[A-Za-z0-9_-]{1,64}$/.test(checks))) {
+        return { ok: false, detail: `smoke.checks 需匹配 [A-Za-z0-9_-]{1,64}:${JSON.stringify(checks)}` };
+    }
+    const quickFlag = o.quickFlag;
+    if (quickFlag !== undefined && (typeof quickFlag !== 'string' || !/^--[A-Za-z0-9-]{1,32}$/.test(quickFlag))) {
+        return { ok: false, detail: `smoke.quickFlag 需形如 --xxx:${JSON.stringify(quickFlag)}` };
+    }
+    return {
+        ok: true,
+        value: { script, ...(checks !== undefined ? { checks } : {}), ...(quickFlag !== undefined ? { quickFlag } : {}) },
+    };
+}
+function parsePublish(v) {
+    if (v === undefined || v === null)
+        return { ok: true, value: undefined };
+    if (typeof v !== 'object' || Array.isArray(v))
+        return { ok: false, detail: 'publish 必须是对象' };
+    const p = v;
+    const outDir = p.outDir;
+    if (typeof outDir !== 'string' || !isSafeRelDir(outDir)) {
+        return { ok: false, detail: `publish.outDir 必须是安全的相对目录(可为 "."):${JSON.stringify(outDir)}` };
+    }
+    // 🔴 **不校验 outDir 在模板里存在** —— 需要构建的模板里 `dist` 本来就不存在,
+    // 它是构建时才产出的。加这条"顺手的"检查会把整类模板拒在门外。
+    const serve = p.serve;
+    if (serve !== 'site' && serve !== 'file') {
+        return { ok: false, detail: `publish.serve 只能是 "site" 或 "file":${JSON.stringify(serve)}` };
+    }
+    const artifact = p.artifact;
+    if (serve === 'file') {
+        // serve=file 却没说是哪个文件 ⇒ 反代无从服务。缺它是**声明不完整**,不是可以推断的默认。
+        if (typeof artifact !== 'string' || !isSafeRelPath(artifact)) {
+            return { ok: false, detail: `publish.serve="file" 时 artifact 必填且须是安全相对路径:${JSON.stringify(artifact)}` };
+        }
+    }
+    else if (artifact !== undefined) {
+        // 多写的字段要响亮地拒,否则作者会以为它生效了(和 vars 里未声明变量同一条理由)。
+        return { ok: false, detail: 'publish.artifact 只在 serve="file" 时有意义' };
+    }
+    return { ok: true, value: { outDir, serve, ...(artifact !== undefined ? { artifact } : {}) } };
+}
+/** 收集 tar 条目到内存(边收边判上限);拒绝一切非普通文件的条目。 */
+async function readEntries(archive) {
+    const files = new Map();
+    let total = 0;
+    let fatal = null;
+    await new Promise((done) => {
+        const parser = tarList({
+            onentry(entry) {
+                if (fatal) {
+                    entry.resume();
+                    return;
+                }
+                const type = String(entry.type);
+                // 🔴 只收普通文件。软链/硬链/设备/FIFO 一概拒 —— 软链条目是解包逃逸的经典入口
+                //    (链指向 /etc,后续写入就落到链外)。目录条目不需要:落盘时按文件路径 mkdir -p。
+                if (type === 'Directory') {
+                    entry.resume();
+                    return;
+                } // 目录不进指纹,落盘时按需 mkdir -p
+                if (type !== 'File' && type !== 'OldFile' && type !== 'ContiguousFile') {
+                    fatal = { code: 'UNSAFE_ENTRY', detail: `拒绝非普通文件条目:${entry.path}(type=${type})` };
+                    entry.resume();
+                    return;
+                }
+                const p = normalizeEntryPath(String(entry.path));
+                if (!isSafeRelPath(p)) {
+                    fatal = { code: 'UNSAFE_ENTRY', detail: `拒绝不安全路径:${JSON.stringify(p)}(不许 ..、绝对路径、空段)` };
+                    entry.resume();
+                    return;
+                }
+                if (files.size + 1 > TEMPLATE_LIMITS.maxFiles) {
+                    fatal = { code: 'LIMIT_EXCEEDED', detail: `文件数超限:> ${TEMPLATE_LIMITS.maxFiles}(上限 ${TEMPLATE_LIMITS.maxFiles})` };
+                    entry.resume();
+                    return;
+                }
+                const chunks = [];
+                let size = 0;
+                entry.on('data', (c) => {
+                    if (fatal)
+                        return;
+                    size += c.length;
+                    total += c.length;
+                    if (size > TEMPLATE_LIMITS.maxFileBytes) {
+                        fatal = { code: 'LIMIT_EXCEEDED', detail: `单文件超限:${p} 已达 ${size} 字节(上限 ${TEMPLATE_LIMITS.maxFileBytes})` };
+                        return;
+                    }
+                    if (total > TEMPLATE_LIMITS.maxTotalBytes) {
+                        fatal = { code: 'LIMIT_EXCEEDED', detail: `解包后总字节超限:已达 ${total}(上限 ${TEMPLATE_LIMITS.maxTotalBytes})` };
+                        return;
+                    }
+                    chunks.push(c);
+                });
+                entry.on('end', () => {
+                    if (fatal)
+                        return;
+                    files.set(p, { content: Buffer.concat(chunks), tarExec: (Number(entry.mode ?? 0) & 0o111) !== 0 });
+                });
+            },
+        });
+        parser.on('error', (e) => {
+            if (!fatal)
+                fatal = { code: 'BAD_ARCHIVE', detail: `解包失败:${e.message}` };
+            done();
+        });
+        parser.on('end', () => done());
+        parser.end(archive);
+    });
+    if (fatal)
+        return { ok: false, error: fatal };
+    return { ok: true, files, total };
+}
+/**
+ * 解包 + 校验 + 算指纹。**不落盘** —— 调用方拿到 UnpackedTemplate 后自行决定存不存。
+ */
+export async function unpackTemplate(archive) {
+    if (archive.length > TEMPLATE_LIMITS.maxArchiveBytes) {
+        return err('ARCHIVE_TOO_LARGE', `压缩包 ${archive.length} 字节,超过上限 ${TEMPLATE_LIMITS.maxArchiveBytes}`);
+    }
+    const read = await readEntries(archive);
+    if (!read.ok)
+        return { ok: false, error: read.error };
+    const { files, total } = read;
+    // 解压比:防炸弹。放在收完之后判(收的过程已被总字节上限兜住,不会 OOM)。
+    const ratio = archive.length > 0 ? total / archive.length : 0;
+    if (ratio > TEMPLATE_LIMITS.maxCompressionRatio) {
+        return err('LIMIT_EXCEEDED', `解压比 ${ratio.toFixed(1)}:1 超限(压缩后 ${archive.length} → 解包后 ${total},上限 ${TEMPLATE_LIMITS.maxCompressionRatio}:1)`);
+    }
+    const manifestRaw = files.get('template.json');
+    if (!manifestRaw)
+        return err('MANIFEST_INVALID', '包根缺 template.json');
+    const parsed = parseManifest(manifestRaw.content);
+    if (!parsed.ok)
+        return err('MANIFEST_INVALID', parsed.detail);
+    const manifest = parsed.value;
+    const missing = [...manifest.render, ...manifest.exec].filter((p) => !files.has(p));
+    if (missing.length) {
+        return err('MANIFEST_INVALID', `render / exec 指向包里不存在的文件:${missing.join(', ')}`);
+    }
+    // 🔴 执行位的真源是 exec 声明。tar 里有执行位却没声明 → **当场 422**,
+    //    否则"忘了声明"会变成静默降级(文件拷过去没执行位 ⇒ hook 打不上 ACK 标签 ⇒ 每次构建必死,
+    //    而症状看起来像超时不像权限)。
+    const execSet = new Set(manifest.exec);
+    const undeclared = [...files.entries()].filter(([p, f]) => f.tarExec && !execSet.has(p)).map(([p]) => p);
+    if (undeclared.length) {
+        return err('EXEC_UNDECLARED', `这些文件在 tar 里带执行位但不在 template.json 的 exec 声明里:${undeclared.join(', ')}` +
+            '(执行位以声明为准;把它们加进 exec,或去掉执行位后重新打包)');
+    }
+    const entries = [...files.entries()].map(([path, f]) => ({
+        path,
+        content: f.content,
+        executable: execSet.has(path),
+    }));
+    return {
+        ok: true,
+        value: {
+            manifest,
+            files: entries,
+            digest: templateTreeDigest(entries),
+            id: templateId(manifest.engine, entries),
+            totalBytes: total,
+        },
+    };
+}
+// ─── 落盘 ────────────────────────────────────────────────────────────
+/** `~/.coral/templates` —— 每次调用现读 HOME(与 runtimePaths 同惯例,方便测试)。 */
+export function templatesRoot() {
+    return resolve(process.env.HOME ?? '/home/coral', '.coral', 'templates');
+}
+export function templateDir(id) {
+    return join(templatesRoot(), id);
+}
+export function isTemplateRegistered(id) {
+    return existsSync(join(templateDir(id), 'template.json'));
+}
+/**
+ * 落盘。**先写临时目录再整体 rename** —— 半棵树被别人读到,比没有更糟
+ * (调用方会以为注册成功)。同 id 已存在 = 幂等,直接返回。
+ */
+export function storeTemplate(t) {
+    const dir = templateDir(t.id);
+    if (isTemplateRegistered(t.id))
+        return { stored: false, dir };
+    const tmp = `${dir}.tmp-${process.pid}-${createHash('sha256').update(t.id).digest('hex').slice(0, 8)}`;
+    rmSync(tmp, { recursive: true, force: true });
+    mkdirSync(tmp, { recursive: true });
+    for (const f of t.files) {
+        const abs = join(tmp, f.path);
+        mkdirSync(dirname(abs), { recursive: true });
+        writeFileSync(abs, f.content, { mode: f.executable ? 0o755 : 0o644 });
+    }
+    mkdirSync(templatesRoot(), { recursive: true });
+    try {
+        renameSync(tmp, dir);
+    }
+    catch {
+        // 并发下别人先 rename 到位了 → 幂等成功,清掉自己的临时树。
+        rmSync(tmp, { recursive: true, force: true });
+        return { stored: false, dir };
+    }
+    return { stored: true, dir };
+}
+/** 读回已注册模板的文件树(scaffold 用)。未注册 → null。 */
+export function loadTemplate(id) {
+    const dir = templateDir(id);
+    const manifestPath = join(dir, 'template.json');
+    if (!existsSync(manifestPath))
+        return null;
+    const parsed = parseManifest(readFileSync(manifestPath));
+    if (!parsed.ok)
+        return null;
+    const execSet = new Set(parsed.value.exec);
+    const files = [];
+    const walk = (abs, rel) => {
+        for (const e of readdirSync(abs, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
+            const childAbs = join(abs, e.name);
+            const childRel = rel ? `${rel}/${e.name}` : e.name;
+            if (e.isDirectory()) {
+                walk(childAbs, childRel);
+                continue;
+            }
+            if (!e.isFile())
+                continue; // 落盘的树里不该有软链;有也不读
+            files.push({ path: childRel, content: readFileSync(childAbs), executable: execSet.has(childRel) });
+        }
+    };
+    walk(dir, '');
+    return { manifest: parsed.value, files };
+}
+/** 已注册模板的摘要(GET /api/templates/:id)。 */
+export function templateSummary(id) {
+    const t = loadTemplate(id);
+    if (!t)
+        return null;
+    const dir = templateDir(id);
+    let bytes = 0;
+    for (const f of t.files)
+        bytes += statSync(join(dir, f.path)).size;
+    // publish 原样回传 —— 平台据此告诉 sidecar 快照哪个相对路径。
+    // **缺省时这个键不出现**(不是 null),让调用方能区分"没声明"与"声明了空"。
+    return {
+        id, engine: t.manifest.engine, files: t.files.length, bytes,
+        ...(t.manifest.publish ? { publish: t.manifest.publish } : {}),
+        ...(t.manifest.smoke ? { smoke: t.manifest.smoke } : {}),
+    };
+}
+//# sourceMappingURL=templatePackage.js.map

package/dist/core/templates/templatePackage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templatePackage.js","sourceRoot":"","sources":["../../../src/core/templates/templatePackage.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,IAAI,IAAI,OAAO,EAAE,MAAM,KAAK,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAA0B,MAAM,qBAAqB,CAAC;AAE7F,yDAAyD;AACzD,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,gCAAgC;IAChC,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAChC,cAAc;IACd,aAAa,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC/B,aAAa;IACb,QAAQ,EAAE,IAAI;IACd,cAAc;IACd,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAC7B,gCAAgC;IAChC,mBAAmB,EAAE,GAAG;CAChB,CAAC;AA+EX,MAAM,GAAG,GAAG,CAAC,IAAyB,EAAE,MAAc,EAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAiB,EAAE,CAAC,CAAC;AAEjI;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;AACpE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,CAAS;IACpC,OAAO,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,IAAI,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACxD,OAAO,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACxG,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACtD,CAAC;IACD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACxB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,GAAW,EAAmB,EAAE;QAC3C,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3E,OAAO,CAAa,CAAC;IACvB,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iDAAiD,EAAE,CAAC;IAClF,CAAC;IACD,iCAAiC;IACjC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAU,EAAE,CAAC;QACtG,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,GAAG,UAAU,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3F,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAChH,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACxB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACxB,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI;YACvC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3C;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH;;;;GAIG;AACH,SAAS,UAAU,CAAC,CAAU;IAC5B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACzE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAC3F,MAAM,CAAC,GAAG,CAA4B,CAAC;IAEvC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACxB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;IACpF,CAAC;IACD,oEAAoE;IACpE,8CAA8C;IAE9C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACxB,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAClG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;IACjG,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;IAC9B,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAC5G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;IACzF,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KAClH,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAAU;IAC9B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACzE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAC7F,MAAM,CAAC,GAAG,CAA4B,CAAC;IAEvC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACxB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;IAC9F,CAAC;IACD,sDAAsD;IACtD,kCAAkC;IAElC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IACtB,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IAC7F,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC5B,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,uDAAuD;QACvD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+CAA+C,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAC1G,CAAC;IACH,CAAC;SAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,8CAA8C;QAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IACxE,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;AACjG,CAAC;AAED,yCAAyC;AACzC,KAAK,UAAU,WAAW,CACxB,OAAe;IAEf,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiD,CAAC;IACvE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAuB,IAAI,CAAC;IAErC,MAAM,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,OAAO,CAAC;YACrB,OAAO,CAAC,KAAU;gBAChB,IAAI,KAAK,EAAE,CAAC;oBAAC,KAAK,CAAC,MAAM,EAAE,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,gDAAgD;gBAChD,qDAAqD;gBACrD,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;oBAAC,KAAK,CAAC,MAAM,EAAE,CAAC;oBAAC,OAAO;gBAAC,CAAC,CAAG,wBAAwB;gBAChF,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;oBACvE,KAAK,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,KAAK,CAAC,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;oBAClF,KAAK,CAAC,MAAM,EAAE,CAAC;oBACf,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjD,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtB,KAAK,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;oBACxF,KAAK,CAAC,MAAM,EAAE,CAAC;oBACf,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,eAAe,CAAC,QAAQ,EAAE,CAAC;oBAC9C,KAAK,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,eAAe,CAAC,QAAQ,OAAO,eAAe,CAAC,QAAQ,GAAG,EAAE,CAAC;oBAClH,KAAK,CAAC,MAAM,EAAE,CAAC;oBACf,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;gBACb,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;oBAC7B,IAAI,KAAK;wBAAE,OAAO;oBAClB,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC;oBACjB,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;oBAClB,IAAI,IAAI,GAAG,eAAe,CAAC,YAAY,EAAE,CAAC;wBACxC,KAAK,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,IAAI,UAAU,eAAe,CAAC,YAAY,GAAG,EAAE,CAAC;wBAC3G,OAAO;oBACT,CAAC;oBACD,IAAI,KAAK,GAAG,eAAe,CAAC,aAAa,EAAE,CAAC;wBAC1C,KAAK,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,eAAe,KAAK,OAAO,eAAe,CAAC,aAAa,GAAG,EAAE,CAAC;wBACxG,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACjB,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACnB,IAAI,KAAK;wBAAE,OAAO;oBAClB,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACrG,CAAC,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAQ,EAAE,EAAE;YAC9B,IAAI,CAAC,KAAK;gBAAE,KAAK,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACzE,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,IAAI,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC9C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe;IAClD,IAAI,OAAO,CAAC,MAAM,GAAG,eAAe,CAAC,eAAe,EAAE,CAAC;QACrD,OAAO,GAAG,CAAC,mBAAmB,EAAE,OAAO,OAAO,CAAC,MAAM,YAAY,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACtD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAE9B,yCAAyC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,KAAK,GAAG,eAAe,CAAC,mBAAmB,EAAE,CAAC;QAChD,OAAO,GAAG,CACR,gBAAgB,EAChB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,MAAM,UAAU,KAAK,OAAO,eAAe,CAAC,mBAAmB,KAAK,CACjH,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC/C,IAAI,CAAC,WAAW;QAAE,OAAO,GAAG,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;IAE9B,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,GAAG,CAAC,kBAAkB,EAAE,4BAA4B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,iDAAiD;IACjD,2DAA2D;IAC3D,qBAAqB;IACrB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACzG,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,OAAO,GAAG,CACR,iBAAiB,EACjB,+CAA+C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACpE,mCAAmC,CACtC,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAwB,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,IAAI;QACJ,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;KAC9B,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,QAAQ;YACR,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC;YACnC,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;YACxC,UAAU,EAAE,KAAK;SAClB;KACF,CAAC;AACJ,CAAC;AAED,sEAAsE;AAEtE,oEAAoE;AACpE,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,aAAa,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,OAAO,IAAI,CAAC,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,EAAU;IAC7C,OAAO,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,CAAmB;IAC/C,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9B,IAAI,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IAE9D,MAAM,GAAG,GAAG,GAAG,GAAG,QAAQ,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACvG,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9B,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,SAAS,CAAC,aAAa,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;QACrC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAC/B,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,GAAW,EAAQ,EAAE;QAC9C,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACvG,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACnD,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC5D,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE;gBAAE,SAAS,CAAG,kBAAkB;YAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACrG,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACd,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;AAC3C,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,eAAe,CAC7B,EAAU;IAEV,MAAM,CAAC,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK;QAAE,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,2CAA2C;IAC3C,8CAA8C;IAC9C,OAAO;QACL,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK;QAC3D,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC;AACJ,CAAC"}