@cotal-ai/manager 0.16.0 → 0.18.0

package/dist/attach-endpoint.js

@@ -4,7 +4,7 @@ import { createRequire } from "node:module";
 import { readFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { dirname, join } from "node:path";
-import { WebSocketServer } from "ws";
+import { EpEnvelopeError } from "@cotal-ai/core";
 const require = createRequire(import.meta.url);
 const here = dirname(fileURLToPath(import.meta.url));
 /** Vendored xterm.js assets (served from node_modules, resolved at startup). */
@@ -14,20 +14,20 @@ const ASSETS = {
     "/assets/addon-fit.js": { path: require.resolve("@xterm/addon-fit/lib/addon-fit.js"), type: "text/javascript" },
     "/assets/addon-attach.js": { path: require.resolve("@xterm/addon-attach/lib/addon-attach.js"), type: "text/javascript" },
 };
-/** Anything the console page needs to render itself, served from this dir. */
+/** Anything the console page needs to render itself, served from this dir. `session-bundle.js` is
+ *  the pre-built (esbuild) mesh §13.6 session client — present only in a built dist, so the page
+ *  falls back to a clear "bundle not loaded" notice when running from source (P2 item 6). */
 const PAGE = {
     "/": { path: join(here, "console/index.html"), type: "text/html" },
     "/app.js": { path: join(here, "console/app.js"), type: "text/javascript" },
+    "/session-bundle.js": { path: join(here, "console/session-bundle.js"), type: "text/javascript" },
 };
 /**
- * The address the attach endpoint binds and advertises: the host of the mesh broker this manager is
- * attached to. Keeping the two in step is the whole point — a client that reached the control plane
- * to request an attach URL demonstrably has a route to that address, whereas a hardcoded
- * `127.0.0.1` resolves to the client's own machine.
+ * The address the console endpoint binds and advertises, derived from a mesh broker URL.
  *
  * With no server URL there is no mesh address to follow, so this is loopback: the conservative
- * default and exactly the endpoint's previous behavior. An unparseable URL is a caller bug and
- * throws rather than quietly binding somewhere the operator did not ask for.
+ * default. An unparseable URL is a caller bug and throws rather than quietly binding somewhere the
+ * operator did not ask for.
  */
 export function attachHost(servers) {
     if (!servers)
@@ -44,106 +44,78 @@ export function attachHost(servers) {
     // BIND address, and `#advertised` puts the brackets back for the URL form.
     return hostname.startsWith("[") && hostname.endsWith("]") ? hostname.slice(1, -1) : hostname;
 }
-/** How long an issued attach capability stays redeemable. The client redeems it immediately (the
- *  control-plane reply goes straight into a connect), so this only has to cover that round trip;
- *  short means a URL that leaked into a log or shell history is already dead. */
-const ATTACH_TICKET_TTL_MS = 120_000;
 /**
- * The manager's local HTTP + WebSocket face. It hosts the **console** (a
- * lightweight xterm.js page) and bridges each agent's PTY to the browser — and to
- * `cotal attach` — over a direct socket, never the mesh, so owning the terminal
- * keeps the manager off the message hot path.
+ * The manager's local HTTP face. It serves the **console** (a lightweight xterm.js page + its
+ * assets) and is the browser's credential broker: `POST /session/<name>` mints a mesh §13.6 session
+ * for the console to drive the terminal over the broker's WebSocket listener. The terminal never
+ * rides a manager-hosted socket (P2 item 6 replaced the loopback `ws://.../attach/` transport with
+ * the mesh session, closing the bearer-less-local hole) — `cotal attach` reaches a manager on
+ * another machine over the mesh, not by dialing this face.
  *
- * **Where it binds, and why it is credentialed.** A mesh can span machines: the manager that owns an
- * agent's PTY may sit on another host than the operator running `cotal attach`. Hardcoding
- * `127.0.0.1` made every remote attach fail with ECONNREFUSED against the *client's own* loopback.
- * The bind address is therefore an explicit option (default loopback, so nothing is exposed by
- * accident); `cotal up` passes the address it bound the broker to. A broker DIAL address is
- * deliberately NOT used as the bind: a manager may supervise a broker on another host and could not
- * bind that address at all. Where the manager can only name loopback (a wildcard bind), the CLIENT
- * substitutes the broker address its own control connection reached.
+ * **Where it binds, and why it is credentialed.** The bind address is an explicit option (default
+ * loopback, so nothing is exposed by accident); `cotal up` passes the address it bound the broker
+ * to when the operator asked for an exposed console. A broker DIAL address is deliberately NOT used
+ * as the bind: a manager may supervise a broker on another host and could not bind that address at
+ * all. Where the manager can only name loopback (a wildcard bind), it advertises loopback.
  *
- * Reachability is why the surface is credentialed, in two tiers. This face carries terminal READ AND
- * WRITE for every managed agent, plus the roster and the live feed, so once it can leave the box
- * "unauthenticated but loopback-only" stops being a safe position.
+ * Reachability is why the surface is credentialed. It carries the managed roster, the live mesh
+ * feed, and — through `POST /session/<name>` — the mint of a real §13.6 session grant plus its
+ * per-session caller credential. Once the face can leave the box, "unauthenticated but
+ * loopback-only" stops being a safe position, so every DATA route requires the manager's console
+ * token. The console SHELL (its HTML, its script, the vendored xterm assets) is static and carries
+ * nothing about this mesh, so it stays open — that is what lets the page load and then present the
+ * token, held in memory from its own URL, on the requests that do matter.
  *
- *  - **Attach tickets** are what a mesh caller gets: minted per authorized `attach` request, bound to
- *    the ONE agent the manager just authorized, single-use, short-lived. This is what makes the
- *    per-agent/owner check real — a manager-wide token would let a caller authorized for its own
- *    agent swap the path and take over anyone's terminal.
- *  - **The console token** is the operator's own: it reaches every agent, because the console
- *    legitimately drives all of them, and it is printed solely to this manager process's output
- *    (so it is as sensitive as `.cotal/manager.log`, and never handed to a mesh caller).
- *
- * Credentials travel in `?t=` or a bearer header, never a cookie: cookies are host-scoped, not
+ * The credential travels in `?t=` or a bearer header, never a cookie: cookies are host-scoped, not
  * port-scoped, so one set here would be sent to every other HTTP service on this host and would
  * collide between two managers on one box. The console URL carries its token in the FRAGMENT, which
  * a browser never sends to a server.
  *
- * Routes: `GET /` console page, `GET /agents` the managed roster (JSON),
- * `GET /feed` the live mesh feed (SSE: presence roster + comms), static assets
- * under `/assets`, and `WS /attach/<name>` the PTY stream.
- *
- * Attach protocol: server → client sends raw terminal bytes (binary). client →
- * server: binary frames are keystrokes; a text frame `r:<cols>,<rows>` resizes.
+ * Routes: `GET /` console page + `/app.js` + `/session-bundle.js` + `/assets/*`; `GET /agents` the
+ * managed roster (JSON); `GET /feed` the live mesh feed (SSE: presence roster + comms);
+ * `POST /session/<name>` the mesh session establishment.
  */
 export class AttachEndpoint {
-    lookup;
     list;
     snapshot;
+    establishSession;
     token;
     #http;
-    #wss;
     #port;
     #host;
     #sse = new Set();
     #ping;
-    /** Redeemable attach capabilities: token → the ONE INCARNATION it may attach, and when it lapses.
-     *  `handle` is the identity that actually matters — see {@link AttachEndpoint.url}. */
-    #tickets = new Map();
-    constructor(lookup, list, 
+    constructor(list, 
     /** Events replayed to each console as it connects to `/feed` (e.g. the current roster). */
     snapshot, port = 0, 
-    /** Bind address, and the host advertised in {@link url} / {@link consoleUrl}. Defaults to
-     *  loopback; the manager passes the mesh broker's host so attach is reachable from wherever the
-     *  mesh is. A wildcard bind still advertises loopback, since a wildcard is not a dialable name. */
+    /** P2 item 6: the manager-injected mesh-session establisher backing `POST /session/<name>`
+     *  (the console's session-client transport). Absent ⇒ the route 503s. Wired at 6b-2. */
+    establishSession, 
+    /** Bind address, and the host advertised in {@link consoleUrl}. Defaults to loopback; the
+     *  manager passes an operator-chosen address when the console is meant to be reachable from
+     *  another machine. A wildcard bind still advertises loopback, since a wildcard is not a
+     *  dialable name. */
     host = "127.0.0.1", 
-    /** The endpoint credential. Generated per manager process; required on every route. */
+    /** The endpoint credential. Generated per manager process; required on every data route. */
     token = randomBytes(32).toString("hex")) {
-        this.lookup = lookup;
         this.list = list;
         this.snapshot = snapshot;
+        this.establishSession = establishSession;
         this.token = token;
+        // A blank credential is the fail-OPEN shape of this gate, and it would only ever be consulted on
+        // the dangerous path. Refuse it at CONSTRUCTION, not at request time: an endpoint that cannot be
+        // credentialed must not exist rather than serve the roster, the feed and the session mint to
+        // anyone who can reach the bind host. (The default above means "no token configured" is already
+        // a fresh per-process secret; this closes the one way a caller could ask for none.)
+        if (!token)
+            throw new Error("AttachEndpoint: refusing to serve without a console token - the roster, the feed and the session mint are all credentialed on it");
         this.#port = port;
         this.#host = host;
         this.#http = createServer((req, res) => this.#onRequest(req, res));
-        this.#wss = new WebSocketServer({ noServer: true });
-        this.#http.on("upgrade", (req, socket, head) => {
-            const path = (req.url ?? "/").split("?")[0];
-            if (!path.startsWith("/attach/")) {
-                socket.destroy();
-                return;
-            }
-            let name;
-            try {
-                name = decodeURIComponent(path.slice("/attach/".length));
-            }
-            catch {
-                socket.end("HTTP/1.1 400 Bad Request\r\nConnection: close\r\n\r\n");
-                return;
-            }
-            // Terminal read+write, so the capability must name THIS agent: a ticket issued for one agent
-            // must never attach another. Redeemed against the decoded name — the name is parsed first only
-            // because the check needs it, and a malformed name is refused before any credential is looked
-            // at, so neither order leaks the other's outcome.
-            if (!this.#redeemAttach(req, name)) {
-                socket.end("HTTP/1.1 401 Unauthorized\r\nConnection: close\r\n\r\n");
-                return;
-            }
-            this.#wss.handleUpgrade(req, socket, head, (ws) => {
-                this.#onConnection(ws, name).catch(() => ws.close());
-            });
-        });
+        // HTTP-only face: refuse any WebSocket upgrade with a clean 400 (P2 item 6 removed the loopback
+        // `ws://.../attach/` terminal transport — the console drives the terminal over the mesh session).
+        // A proper response beats leaving a stray/malformed upgrade hanging or resetting it abruptly.
+        this.#http.on("upgrade", (_req, socket) => socket.end("HTTP/1.1 400 Bad Request\r\nConnection: close\r\n\r\n"));
     }
     /** The credential a request presents, from `?t=` or a bearer header. */
     #presented(req) {
@@ -158,67 +130,22 @@ export class AttachEndpoint {
         const b = Buffer.from(secret);
         return a.length === b.length && timingSafeEqual(a, b);
     }
-    /** The MANAGER-WIDE credential: the operator's own console session. It reaches every agent, which
-     *  is not an escalation — it is only ever printed to the manager process's own output, and anyone
-     *  who can read that already controls the process. Never handed to a mesh caller. */
+    /** The operator's own console credential. It reaches every managed agent, because the console
+     *  legitimately drives all of them, and it is printed solely to this manager process's output (so
+     *  it is as sensitive as `.cotal/manager.log`, and never handed to a mesh caller). */
     #authorized(req) {
         return this.#sameSecret(this.#presented(req), this.token);
     }
-    /**
-     * Redeem an attach capability for EXACTLY `name`.
-     *
-     * The per-name control-plane authorization (`Manager.opAttach` → `authorizeNamed`) is only real if
-     * the credential it hands back is bound to the agent it authorized. A manager-wide token is not:
-     * a caller legitimately authorized for its own agent could edit `/attach/mine` to `/attach/victim`
-     * and the endpoint, checking only "is this the manager's token", would attach it — silently
-     * defeating the owner-domain and cross-owner admin boundaries on a user-auth mesh. So a mesh
-     * caller receives a ticket that names one agent, expires, and is consumed on redemption.
-     *
-     * The console token is also accepted here, because the console legitimately drives every agent.
-     */
-    #redeemAttach(req, name) {
-        const presented = this.#presented(req);
-        if (!presented)
-            return false;
-        if (this.#sameSecret(presented, this.token))
-            return true; // operator console: all agents
-        const ticket = this.#tickets.get(presented);
-        if (!ticket)
-            return false;
-        this.#tickets.delete(presented); // single use, redeemed or not
-        if (ticket.expires < Date.now())
-            return false;
-        // Compare the BOUND name against the requested one in constant time, so a redemption cannot be
-        // probed character-by-character for another agent's name.
-        if (!this.#sameSecret(name, ticket.name))
-            return false;
-        // A NAME IS A REUSABLE SLOT, not an identity. Binding the capability to the name alone leaves it
-        // valid for whoever occupies that slot at redemption time: if the authorized agent exits and a
-        // same-name successor — possibly a different owner's — takes the slot inside the TTL, the
-        // untouched URL would attach the successor's terminal. Bind to the incarnation instead. The
-        // handle object IS that identity: the manager creates a new one per spawn, so a successor can
-        // never compare equal to its predecessor.
-        return this.lookup(name) === ticket.handle;
-    }
-    /** Drop expired tickets so an idle manager doesn't accumulate them. */
-    #sweepTickets() {
-        const now = Date.now();
-        for (const [t, v] of this.#tickets)
-            if (v.expires < now)
-                this.#tickets.delete(t);
-    }
     async start() {
-        // The bind host is the BROKER's, which is right when the manager is co-located with it (every
-        // `cotal up` stack). A manager pointed at a broker on ANOTHER machine does not own that address,
-        // and `listen` fails EADDRNOTAVAIL. Say so in operator terms instead of surfacing a bare errno
-        // from deep inside startup: the address is the diagnosis, and the two real resolutions are to
-        // run the manager on the broker's host or to give this space a broker address this host owns.
+        // The bind host is the operator's explicit choice. A manager asked to bind an address this
+        // machine does not own dies deep inside startup with a bare errno; say so in operator terms
+        // instead — the address is the diagnosis.
         await new Promise((resolve, reject) => {
             const onError = (e) => {
                 if (e.code === "EADDRNOTAVAIL" || e.code === "EADDRINUSE") {
                     reject(new Error(e.code === "EADDRINUSE"
-                        ? `the manager's attach endpoint cannot bind ${this.#host}:${this.#port} - that port is already in use on this host`
-                        : `the manager's attach endpoint cannot bind ${this.#host} - this machine has no such address. The attach face binds the broker's host, so the manager must run on the machine the broker is bound to.`));
+                        ? `the manager's console endpoint cannot bind ${this.#host}:${this.#port} - that port is already in use on this host`
+                        : `the manager's console endpoint cannot bind ${this.#host} - this machine has no such address. Give this manager a console host it owns, or leave it on loopback.`));
                     return;
                 }
                 reject(e);
@@ -245,8 +172,6 @@ export class AttachEndpoint {
         for (const res of this.#sse)
             res.end();
         this.#sse.clear();
-        for (const ws of this.#wss.clients)
-            ws.terminate();
         await new Promise((resolve) => this.#http.close(() => resolve()));
     }
     /** Push a named event to every connected console (SSE). */
@@ -261,31 +186,6 @@ export class AttachEndpoint {
             return "127.0.0.1";
         return this.#host.includes(":") && !this.#host.startsWith("[") ? `[${this.#host}]` : this.#host;
     }
-    /**
-     * The ws URL a client uses to attach to `name`, carrying a capability bound to THAT agent.
-     *
-     * Called once per authorized control-plane `attach` request, so the ticket inherits exactly the
-     * authorization the manager just performed for this caller and this agent. It is single-use and
-     * short-lived: the client redeems it immediately, and a leaked URL (shell history, a log, a
-     * `Referer`) is spent or expired rather than a standing key to someone's terminal.
-     *
-     * `expected` is the handle the caller actually authorized, and it is REQUIRED. A name is a reusable
-     * slot, and authorization is async (a user-mode ledger read), so between the caller resolving the
-     * name and arriving here the slot can have been stopped and refilled by a same-name successor.
-     * Re-resolving the name would then mint a valid ticket for an agent nobody authorized. Binding to
-     * the caller's own handle closes that window: if the slot moved, there is no capability to issue.
-     */
-    url(name, expected) {
-        this.#sweepTickets();
-        const handle = this.lookup(name);
-        if (!handle)
-            throw new Error(`cannot issue an attach capability for "${name}": no such running agent`);
-        if (handle !== expected)
-            throw new Error(`cannot issue an attach capability for "${name}": it was replaced during authorization`);
-        const ticket = randomBytes(32).toString("hex");
-        this.#tickets.set(ticket, { name, handle: expected, expires: Date.now() + ATTACH_TICKET_TTL_MS });
-        return `ws://${this.#advertised}:${this.#port}/attach/${encodeURIComponent(name)}?t=${ticket}`;
-    }
     /** The console page URL. The token rides the FRAGMENT, which a browser never sends to a server:
      *  it stays out of this endpoint's request handling, out of any proxy's logs, and out of the
      *  `Referer` a click on the page would otherwise leak. The page reads it from `location.hash` and
@@ -297,30 +197,37 @@ export class AttachEndpoint {
     #onRequest(req, res) {
         try {
             const path = (req.url ?? "/").split("?")[0];
-            // Every DATA route is credentialed: the managed roster and the live mesh feed both describe
-            // real agents. The console shell (its HTML, its script, the vendored xterm assets) is static
-            // and carries nothing about this mesh, so it stays open — that is what lets the page load and
-            // then present the token, held in memory from its own URL, on the requests that do matter.
-            //
-            // Deliberately NOT a cookie. Cookies are host-scoped, not port-scoped: a `cotal_attach` cookie
-            // set by a manager on one port would be sent by the browser to EVERY other HTTP service on
-            // that host, handing a terminal credential to anything the operator happens to visit, and two
-            // managers on one host would silently overwrite each other's. `Secure` fixes neither, and is
-            // unavailable over plain HTTP anyway.
-            // The console shell must not be cached or leak a referrer: the page holds a terminal-capable
+            // The console shell must not be cached or leak a referrer: the page holds the console
             // credential in memory, and a stale cached copy would keep working against a restarted
             // manager whose token has rotated.
             if (PAGE[path]) {
                 res.setHeader("cache-control", "no-store");
                 res.setHeader("referrer-policy", "no-referrer");
             }
-            if (path === "/agents" || path === "/feed") {
+            // Every DATA route is credentialed. The roster and the live feed describe real agents, and
+            // `POST /session/` MINTS a §13.6 grant plus a per-session caller credential — the most
+            // sensitive thing this face does. Loopback alone stopped being the trust boundary once the
+            // bind host became an operator choice, so the token gate is unconditional.
+            if (path === "/agents" || path === "/feed" || path.startsWith("/session/")) {
                 if (!this.#authorized(req)) {
                     res.writeHead(401, { "content-type": "text/plain" });
                     res.end("unauthorized - this endpoint requires the manager's console token");
                     return;
                 }
             }
+            // P2 item 6: the console's mesh §13.6 session establishment. `POST /session/<name>` mints the
+            // holder-bound offer + the per-session caller credential (via the injected establisher) and
+            // returns {grant, wsUrl, creds} for the browser to open the caller rail — no ws:// terminal
+            // transport in the reply.
+            if (path.startsWith("/session/")) {
+                this.#onSession(req, res, path);
+                return;
+            }
+            // Browsers request the favicon unprompted; answer 204 so it isn't a noisy 404 in the console.
+            if (path === "/favicon.ico") {
+                res.writeHead(204).end();
+                return;
+            }
             if (path === "/agents") {
                 const body = JSON.stringify(this.list());
                 res.writeHead(200, { "content-type": "application/json" });
@@ -350,6 +257,47 @@ export class AttachEndpoint {
             }
         }
     }
+    /** `POST /session/<name>` (P2 item 6): establish a mesh §13.6 session for the console and return
+     *  {grant, wsUrl, creds}. POST because it has side effects (it mints a one-use offer + a
+     *  per-session credential). 503 when no establisher is wired (open mesh / pre-6b-2). */
+    #onSession(req, res, path) {
+        if (req.method !== "POST") {
+            res.writeHead(405, { allow: "POST" }).end("method not allowed");
+            return;
+        }
+        if (!this.establishSession) {
+            res.writeHead(503).end("mesh session establishment is not available (open mesh, or not yet wired)");
+            return;
+        }
+        let name;
+        try {
+            name = decodeURIComponent(path.slice("/session/".length));
+        }
+        catch {
+            res.writeHead(400).end("bad agent name");
+            return;
+        }
+        if (!name) {
+            res.writeHead(400).end("missing agent name");
+            return;
+        }
+        this.establishSession(name)
+            .then((est) => {
+            res.writeHead(200, { "content-type": "application/json" });
+            res.end(JSON.stringify(est));
+        })
+            .catch((e) => {
+            // A CAPACITY refusal is not an internal fault, and the browser has to be able to tell them
+            // apart: the live-session ceiling is a bounded, retryable condition (429), while a 500 says
+            // the manager broke. Both carry the envelope `code`, so the page branches on a stable token
+            // rather than on message text.
+            const code = e instanceof EpEnvelopeError ? e.code : undefined;
+            const status = code === "resource-exhausted" ? 429 : 500;
+            if (!res.headersSent)
+                res.writeHead(status, { "content-type": "application/json" });
+            res.end(JSON.stringify({ error: e.message, ...(code ? { code } : {}) }));
+        });
+    }
     #serveFile(res, file, type) {
         try {
             const body = readFileSync(file);
@@ -389,77 +337,5 @@ export class AttachEndpoint {
             return;
         res.write(`event: ${event}\ndata: ${JSON.stringify(data)}\n\n`);
     }
-    async #onConnection(ws, name) {
-        const handle = this.lookup(name);
-        if (!handle || handle.status() !== "running") {
-            ws.close();
-            return;
-        }
-        // Only streamable backends (pty/host) can be attached over the wire; external runtimes are watched
-        // natively and their attach() throws. Close cleanly instead of letting it crash the upgrade.
-        let session;
-        try {
-            session = handle.attach();
-        }
-        catch {
-            ws.close(1011, `attach unsupported for the ${handle.kind} runtime - watch its surface directly`);
-            return;
-        }
-        const send = (b) => {
-            if (ws.readyState === ws.OPEN)
-                ws.send(b);
-        };
-        // Subscribe to live output BEFORE requesting the snapshot, and buffer what arrives until the
-        // snapshot is sent. The snapshot (below) is a point-in-time screen image; anything the child
-        // emits after it must land after it, in order. Subscribing first (no await in between) means no
-        // chunk can slip through unobserved, and the buffer stops a mid-snapshot burst from racing ahead
-        // of — or being lost before — the image.
-        let live = false;
-        const buffered = [];
-        const offData = session.onData((chunk) => {
-            if (live)
-                send(chunk);
-            else
-                buffered.push(chunk);
-        });
-        const offExit = session.onExit(() => ws.close());
-        // Wire input + cleanup now too, so the client's initial `r:cols,rows` (and any early keystrokes)
-        // during the snapshot await aren't dropped, and a disconnect mid-await still unsubscribes.
-        ws.on("message", (data, isBinary) => {
-            if (isBinary) {
-                session.write(data.toString("utf8"));
-                return;
-            }
-            const text = data.toString();
-            const m = /^r:(\d+),(\d+)$/.exec(text);
-            if (!m) {
-                session.write(text);
-                return;
-            }
-            session.resize(Number(m[1]), Number(m[2]));
-        });
-        ws.on("close", () => {
-            offData();
-            offExit();
-        });
-        // Reconstructed screen image: the backend replays a byte-exact snapshot — including the
-        // alternate-screen buffer of a full-screen TUI (OpenCode/Claude) — so a late or concurrent attach
-        // paints correctly without depending on the child to repaint. (Raw scrollback replay couldn't
-        // rebuild an alt-screen, leaving same-size re/co-attaches a partial screen.) Then flush anything
-        // that arrived while we built it, and switch to sending live output straight through.
-        let snapshot;
-        try {
-            snapshot = await session.backlog();
-        }
-        catch {
-            ws.close(1011, "attach snapshot failed");
-            return;
-        }
-        if (snapshot.length)
-            send(snapshot);
-        for (const chunk of buffered)
-            send(chunk);
-        live = true; // snapshot delivered — stream subsequent output straight through
-    }
 }
 //# sourceMappingURL=attach-endpoint.js.map

package/dist/attach-endpoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"attach-endpoint.js","sourceRoot":"","sources":["../src/attach-endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAkB,MAAM,IAAI,CAAC;AAIrD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAErD,gFAAgF;AAChF,MAAM,MAAM,GAAmD;IAC7D,kBAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACnG,mBAAmB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE;IAC9F,sBAAsB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,mCAAmC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAC/G,yBAAyB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,yCAAyC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE;CACzH,CAAC;AAEF,8EAA8E;AAC9E,MAAM,IAAI,GAAmD;IAC3D,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE;IAClE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE;CAC3E,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CAAC,OAA2B;IACpD,IAAI,CAAC,OAAO;QAAE,OAAO,WAAW,CAAC;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,WAAW,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC;IACzC,IAAI,CAAC,QAAQ;QAAE,OAAO,WAAW,CAAC;IAClC,yFAAyF;IACzF,iGAAiG;IACjG,kGAAkG;IAClG,2EAA2E;IAC3E,OAAO,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/F,CAAC;AAED;;iFAEiF;AACjF,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAQrC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,OAAO,cAAc;IAYN;IACA;IAEA;IAOA;IArBnB,KAAK,CAAS;IACd,IAAI,CAAkB;IACtB,KAAK,CAAS;IACd,KAAK,CAAS;IACd,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjC,KAAK,CAAkC;IACvC;2FACuF;IACvF,QAAQ,GAAG,IAAI,GAAG,EAAkE,CAAC;IAErF,YACmB,MAAiD,EACjD,IAAmB;IACpC,2FAA2F;IAC1E,QAA2B,EAC5C,IAAI,GAAG,CAAC;IACR;;uGAEmG;IACnG,IAAI,GAAG,WAAW;IAClB,uFAAuF;IACtE,QAAgB,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAV/C,WAAM,GAAN,MAAM,CAA2C;QACjD,SAAI,GAAJ,IAAI,CAAe;QAEnB,aAAQ,GAAR,QAAQ,CAAmB;QAO3B,UAAK,GAAL,KAAK,CAA0C;QAEhE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAC7C,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACjC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YACD,6FAA6F;YAC7F,+FAA+F;YAC/F,8FAA8F;YAC9F,kDAAkD;YAClD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;gBACrE,OAAO;YACT,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;gBAChD,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;YACvD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,UAAU,CAAC,GAAoB;QAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,OAAO,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;IAClH,CAAC;IAED,mGAAmG;IACnG,WAAW,CAAC,SAA6B,EAAE,MAAc;QACvD,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;IAED;;yFAEqF;IACrF,WAAW,CAAC,GAAoB;QAC9B,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,GAAoB,EAAE,IAAY;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,+BAA+B;QACzF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,8BAA8B;QAC/D,IAAI,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;QAC9C,+FAA+F;QAC/F,0DAA0D;QAC1D,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACvD,iGAAiG;QACjG,+FAA+F;QAC/F,0FAA0F;QAC1F,4FAA4F;QAC5F,8FAA8F;QAC9F,0CAA0C;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC;IAC7C,CAAC;IAED,uEAAuE;IACvE,aAAa;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,CAAC,OAAO,GAAG,GAAG;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,KAAK;QACT,8FAA8F;QAC9F,iGAAiG;QACjG,+FAA+F;QAC/F,8FAA8F;QAC9F,8FAA8F;QAC9F,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,OAAO,GAAG,CAAC,CAAwB,EAAE,EAAE;gBAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC1D,MAAM,CACJ,IAAI,KAAK,CACP,CAAC,CAAC,IAAI,KAAK,YAAY;wBACrB,CAAC,CAAC,6CAA6C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,6CAA6C;wBACpH,CAAC,CAAC,6CAA6C,IAAI,CAAC,KAAK,8IAA8I,CAC1M,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,CAAC,CAAC,CAAC;YACZ,CAAC,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE;gBAC7C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACjC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC;QAC7D,+EAA+E;QAC/E,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI;gBAAE,IAAI,CAAC,GAAG,CAAC,aAAa;oBAAE,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC/E,CAAC,EAAE,MAAM,CAAC,CAAC;IACb,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI;YAAE,GAAG,CAAC,GAAG,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,EAAE,CAAC,SAAS,EAAE,CAAC;QACnD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,2DAA2D;IAC3D,OAAO,CAAC,KAAa,EAAE,IAAa;QAClC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IAED;0CACsC;IACtC,IAAI,WAAW;QACb,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO,WAAW,CAAC;QACjG,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IAClG,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,GAAG,CAAC,IAAY,EAAE,QAAqB;QACrC,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,0BAA0B,CAAC,CAAC;QACvG,IAAI,MAAM,KAAK,QAAQ;YACrB,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,yCAAyC,CAAC,CAAC;QAC3G,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,oBAAoB,EAAE,CAAC,CAAC;QAClG,OAAO,QAAQ,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,WAAW,kBAAkB,CAAC,IAAI,CAAC,MAAM,MAAM,EAAE,CAAC;IACjG,CAAC;IAED;;;;sCAIkC;IAClC,UAAU;QACR,OAAO,UAAU,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;IACrE,CAAC;IAED,UAAU,CAAC,GAAoB,EAAE,GAAmB;QAClD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,4FAA4F;YAC5F,6FAA6F;YAC7F,8FAA8F;YAC9F,2FAA2F;YAC3F,EAAE;YACF,+FAA+F;YAC/F,2FAA2F;YAC3F,8FAA8F;YAC9F,6FAA6F;YAC7F,sCAAsC;YACtC,6FAA6F;YAC7F,uFAAuF;YACvF,mCAAmC;YACnC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACf,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;gBAC3C,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;YAClD,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC3C,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;oBACrD,GAAG,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;oBAC7E,OAAO;gBACT,CAAC;YACH,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACzC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;YAC5E,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,WAAW;oBAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACzC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,UAAU,CAAC,GAAmB,EAAE,IAAY,EAAE,IAAY;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAChC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAA0B,CAAC;YACvC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACpD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,mCAAmC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;YAC/D,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,SAAS,CAAC,GAAmB;QAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,YAAY;SACzB,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE;gBAAE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,WAAW,CAAC,GAAmB,EAAE,KAAa,EAAE,IAAa;QAC3D,IAAI,GAAG,CAAC,aAAa;YAAE,OAAO;QAC9B,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAa,EAAE,IAAY;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,KAAK,SAAS,EAAE,CAAC;YAC7C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QACD,mGAAmG;QACnG,6FAA6F;QAC7F,IAAI,OAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,8BAA8B,MAAM,CAAC,IAAI,uCAAuC,CAAC,CAAC;YACjG,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;YACzB,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE,CAAC,IAAI;gBAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC;QACF,6FAA6F;QAC7F,6FAA6F;QAC7F,gGAAgG;QAChG,iGAAiG;QACjG,yCAAyC;QACzC,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACvC,IAAI,IAAI;gBAAE,IAAI,CAAC,KAAK,CAAC,CAAC;;gBACjB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QACjD,iGAAiG;QACjG,2FAA2F;QAC3F,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE;YAClC,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAE,IAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACP,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,wFAAwF;QACxF,kGAAkG;QAClG,8FAA8F;QAC9F,iGAAiG;QACjG,sFAAsF;QACtF,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM;YAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,QAAQ;YAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,GAAG,IAAI,CAAC,CAAC,iEAAiE;IAChF,CAAC;CACF"}
+{"version":3,"file":"attach-endpoint.js","sourceRoot":"","sources":["../src/attach-endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAErD,gFAAgF;AAChF,MAAM,MAAM,GAAmD;IAC7D,kBAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACnG,mBAAmB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE;IAC9F,sBAAsB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,mCAAmC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAC/G,yBAAyB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,yCAAyC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE;CACzH,CAAC;AAEF;;6FAE6F;AAC7F,MAAM,IAAI,GAAmD;IAC3D,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE;IAClE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAC1E,oBAAoB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,2BAA2B,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE;CACjG,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,OAA2B;IACpD,IAAI,CAAC,OAAO;QAAE,OAAO,WAAW,CAAC;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,WAAW,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC;IACzC,IAAI,CAAC,QAAQ;QAAE,OAAO,WAAW,CAAC;IAClC,yFAAyF;IACzF,iGAAiG;IACjG,kGAAkG;IAClG,2EAA2E;IAC3E,OAAO,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/F,CAAC;AAyBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,OAAO,cAAc;IAQN;IAEA;IAIA;IAOA;IApBnB,KAAK,CAAS;IACd,KAAK,CAAS;IACd,KAAK,CAAS;IACd,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjC,KAAK,CAAkC;IAEvC,YACmB,IAAmB;IACpC,2FAA2F;IAC1E,QAA2B,EAC5C,IAAI,GAAG,CAAC;IACR;4FACwF;IACvE,gBAAqC;IACtD;;;yBAGqB;IACrB,IAAI,GAAG,WAAW;IAClB,4FAA4F;IAC3E,QAAgB,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAb/C,SAAI,GAAJ,IAAI,CAAe;QAEnB,aAAQ,GAAR,QAAQ,CAAmB;QAI3B,qBAAgB,GAAhB,gBAAgB,CAAqB;QAOrC,UAAK,GAAL,KAAK,CAA0C;QAEhE,iGAAiG;QACjG,iGAAiG;QACjG,6FAA6F;QAC7F,gGAAgG;QAChG,oFAAoF;QACpF,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,kIAAkI,CAAC,CAAC;QAChK,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACnE,gGAAgG;QAChG,kGAAkG;QAClG,8FAA8F;QAC9F,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC,CAAC;IAClH,CAAC;IAED,wEAAwE;IACxE,UAAU,CAAC,GAAoB;QAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,OAAO,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;IAClH,CAAC;IAED,mGAAmG;IACnG,WAAW,CAAC,SAA6B,EAAE,MAAc;QACvD,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;IAED;;0FAEsF;IACtF,WAAW,CAAC,GAAoB;QAC9B,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,KAAK;QACT,2FAA2F;QAC3F,4FAA4F;QAC5F,0CAA0C;QAC1C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,OAAO,GAAG,CAAC,CAAwB,EAAE,EAAE;gBAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC1D,MAAM,CACJ,IAAI,KAAK,CACP,CAAC,CAAC,IAAI,KAAK,YAAY;wBACrB,CAAC,CAAC,8CAA8C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,6CAA6C;wBACrH,CAAC,CAAC,8CAA8C,IAAI,CAAC,KAAK,yGAAyG,CACtK,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,CAAC,CAAC,CAAC;YACZ,CAAC,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE;gBAC7C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACjC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC;QAC7D,+EAA+E;QAC/E,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI;gBAAE,IAAI,CAAC,GAAG,CAAC,aAAa;oBAAE,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC/E,CAAC,EAAE,MAAM,CAAC,CAAC;IACb,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI;YAAE,GAAG,CAAC,GAAG,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,2DAA2D;IAC3D,OAAO,CAAC,KAAa,EAAE,IAAa;QAClC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IAED;0CACsC;IACtC,IAAI,WAAW;QACb,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO,WAAW,CAAC;QACjG,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IAClG,CAAC;IAED;;;;sCAIkC;IAClC,UAAU;QACR,OAAO,UAAU,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;IACrE,CAAC;IAED,UAAU,CAAC,GAAoB,EAAE,GAAmB;QAClD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,sFAAsF;YACtF,uFAAuF;YACvF,mCAAmC;YACnC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACf,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;gBAC3C,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;YAClD,CAAC;YACD,2FAA2F;YAC3F,uFAAuF;YACvF,2FAA2F;YAC3F,2EAA2E;YAC3E,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC3E,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;oBACrD,GAAG,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;oBAC7E,OAAO;gBACT,CAAC;YACH,CAAC;YACD,8FAA8F;YAC9F,4FAA4F;YAC5F,4FAA4F;YAC5F,0BAA0B;YAC1B,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,8FAA8F;YAC9F,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;gBAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACzC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;YAC5E,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,WAAW;oBAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACzC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;4FAEwF;IACxF,UAAU,CAAC,GAAoB,EAAE,GAAmB,EAAE,IAAY;QAChE,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;YACpG,OAAO;QACT,CAAC;QACD,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;aACxB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACZ,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YACX,2FAA2F;YAC3F,4FAA4F;YAC5F,4FAA4F;YAC5F,+BAA+B;YAC/B,MAAM,IAAI,GAAG,CAAC,YAAY,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/D,MAAM,MAAM,GAAG,IAAI,KAAK,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACzD,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACpF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;IACP,CAAC;IAED,UAAU,CAAC,GAAmB,EAAE,IAAY,EAAE,IAAY;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAChC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAA0B,CAAC;YACvC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACpD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,mCAAmC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;YAC/D,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,SAAS,CAAC,GAAmB;QAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,YAAY;SACzB,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE;gBAAE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,WAAW,CAAC,GAAmB,EAAE,KAAa,EAAE,IAAa;QAC3D,IAAI,GAAG,CAAC,aAAa;YAAE,OAAO;QAC9B,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC;CACF"}