@cybedefend/vibedefend 1.4.7 → 1.6.0

package/dist/mcp/proxy/upstreamHttp.js

@@ -0,0 +1,499 @@
+/**
+ * HTTP upstream: Streamable HTTP first, legacy HTTP+SSE as a fallback.
+ *
+ * Streamable HTTP (spec 2025-03-26 and later) posts every client message to a
+ * single endpoint. The server answers with `202 Accepted` (nothing to say), a
+ * JSON body (one answer), or an SSE stream (an answer plus whatever the
+ * server wants to send while it works). A `GET` on the same endpoint opens
+ * the channel the server uses to start its own requests.
+ *
+ * The 2024-11-05 transport did it the other way round: `GET` first, the
+ * server announces a POST endpoint in an `endpoint` event, and every answer
+ * comes back on the original stream. Servers using it are still deployed, so
+ * a POST rejected as unroutable falls back to that handshake once.
+ *
+ * A 401 is surfaced as a readable error, and the pending request is failed so
+ * the agent is told rather than left waiting. Turning that 401 into a login
+ * is Phase 2.
+ */
+import { isResponse } from './jsonrpc.js';
+import { SseParser } from './sse.js';
+/** JSON-RPC error code the proxy uses for an upstream that refuses to talk. */
+export const UPSTREAM_HTTP_ERROR = -32010;
+/** JSON-RPC error code for a 401 with no token. Phase 2 turns this into a login. */
+export const UPSTREAM_UNAUTHORIZED = -32011;
+/**
+ * JSON-RPC error code for an upstream that answered a request with a redirect.
+ *
+ * Named rather than folded into {@link UPSTREAM_HTTP_ERROR}: a server that
+ * answers a POST carrying `Authorization: Bearer …` and the arguments of a
+ * `tools/call` with a 307 is not having an incident, it is trying to have
+ * that request replayed somewhere the user never configured. `undici` strips
+ * the `Authorization` header across origins; it does not strip the body, and
+ * the body is exactly what Phase 4 exists to keep on this machine.
+ */
+export const UPSTREAM_SUSPICIOUS_REDIRECT = -32012;
+/** Attempts to reopen the server-to-client stream before giving up. */
+export const MAX_STREAM_RECONNECTS = 5;
+/**
+ * Repairs attempted after a 401 before the request is failed.
+ *
+ * Two, because there are two ways to obtain a token the server has not just
+ * refused: reading the store (the first 401 of a session, when nothing was
+ * sent yet) and forcing a renewal (a stored token the server no longer
+ * accepts — revoked, or expired earlier than advertised). Both have to happen
+ * before `initialize` is answered: a session whose first request fails and
+ * whose second one works is a server the client files as broken.
+ */
+export const MAX_401_REPAIRS = 2;
+const RECONNECT_BASE_MS = 250;
+const RECONNECT_MAX_MS = 5000;
+export class HttpUpstream {
+    options;
+    kind = 'http';
+    fetchImpl;
+    sleep;
+    sessionId;
+    protocolVersion;
+    legacyPostUrl;
+    legacyProbed = false;
+    serverStream;
+    serverStreamOpen = false;
+    lastEventId;
+    closed = false;
+    /**
+     * Serialises the DISPATCH of the POSTs, not their bodies: the session
+     * identifier the server hands out on the first exchange has to be on every
+     * later request, so the requests leave in order. What comes back is read
+     * concurrently, see `post`.
+     */
+    tail = Promise.resolve();
+    constructor(options) {
+        this.options = options;
+        this.fetchImpl = options.fetchImpl ?? ((input, init) => fetch(input, init));
+        this.sleep = options.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+    }
+    async start() {
+        // Nothing to do eagerly: the session identifier and the negotiated
+        // protocol version only exist once `initialize` has been answered, and
+        // both are needed to open the server-to-client stream.
+    }
+    send(message) {
+        const context = {
+            id: typeof message.id === 'string' || typeof message.id === 'number' ? message.id : undefined,
+            method: typeof message.method === 'string' ? message.method : undefined,
+        };
+        this.tail = this.tail
+            .then(() => this.post(message, context))
+            .catch((error) => {
+            const reported = error instanceof Error ? error : new Error(String(error));
+            this.options.logger.error('upstream POST failed', {
+                method: context.method,
+                error: reported.message,
+            });
+            this.failPending(context, UPSTREAM_HTTP_ERROR, reported.message);
+            this.options.events.onError(reported);
+        });
+    }
+    async close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        this.serverStream?.abort();
+        // Best effort: the spec lets a client end a session with DELETE, and a
+        // server that does not implement it answers 405, which is fine.
+        if (this.sessionId && !this.legacyPostUrl) {
+            try {
+                await this.fetchImpl(this.options.spec.url, {
+                    method: 'DELETE',
+                    redirect: 'manual',
+                    headers: (await this.headersWithAuth({ accept: false })).headers,
+                });
+            }
+            catch (error) {
+                this.options.logger.debug('session DELETE failed', {
+                    error: error instanceof Error ? error.message : String(error),
+                });
+            }
+        }
+        this.options.events.onClose({ reason: 'closed by the proxy' });
+    }
+    // ── POST ──────────────────────────────────────────────────────────────────
+    async post(message, context, repairs = 0) {
+        if (this.closed)
+            return;
+        const target = this.legacyPostUrl ?? this.options.spec.url;
+        const { headers, token } = await this.headersWithAuth({ accept: true });
+        const response = await this.fetchImpl(target, {
+            method: 'POST',
+            // Never followed. This request carries the bearer token and, for a
+            // `tools/call`, the user's arguments; a 307 would replay both against
+            // an origin nobody chose to talk to.
+            redirect: 'manual',
+            headers: { ...headers, 'content-type': 'application/json' },
+            body: JSON.stringify(message),
+        });
+        if (isRedirect(response.status)) {
+            await response.text().catch(() => '');
+            const text = `upstream ${this.options.spec.url} answered with a redirect (HTTP ${response.status}) ` +
+                'to a request carrying credentials. VibeDefend does not follow it: a server that does ' +
+                'this is asking for the request to be replayed elsewhere.';
+            this.options.logger.error('upstream answered a credential-bearing request with a redirect', {
+                status: response.status,
+                method: context.method,
+            });
+            this.failPending(context, UPSTREAM_SUSPICIOUS_REDIRECT, text);
+            this.options.events.onError(new Error(text));
+            return;
+        }
+        if (response.status === 401) {
+            await response.text().catch(() => '');
+            // Bounded by construction, see MAX_401_REPAIRS: every retry carries a
+            // token different from the one just refused, and a source that hands
+            // the same one back is not retried. Beyond that the credential is
+            // genuinely no good, and looping would hammer the server with it.
+            if (repairs < MAX_401_REPAIRS && this.options.auth) {
+                const repair = await this.options.auth.reauthorize(token).catch(() => null);
+                if (repair?.token && repair.token !== token) {
+                    this.options.logger.info(repair.renewed
+                        ? 'upstream token renewed after a 401, retrying'
+                        : 'upstream token read from the store after a 401, retrying', { repair: repairs + 1 });
+                    await this.post(message, context, repairs + 1);
+                    return;
+                }
+            }
+            const challenge = response.headers.get('www-authenticate') ?? '';
+            const detail = challenge ? ` (${challenge})` : '';
+            const text = `upstream ${this.options.spec.url} requires authentication${detail}. ` +
+                'Run `vibedefend connect` to authorize it, or pass --header "Authorization: Bearer <token>".';
+            this.options.logger.error('upstream returned 401', {
+                challenge,
+                repairs,
+            });
+            this.failPending(context, UPSTREAM_UNAUTHORIZED, text);
+            this.options.events.onError(new Error(text));
+            return;
+        }
+        // Unroutable POST: either the server speaks the 2024-11-05 transport, or
+        // the URL is wrong. One probe tells us which.
+        if (!this.legacyPostUrl && !this.legacyProbed && isUnroutable(response.status)) {
+            await response.text().catch(() => '');
+            this.legacyProbed = true;
+            const endpoint = await this.probeLegacyEndpoint();
+            if (endpoint) {
+                this.options.logger.info('upstream speaks the legacy HTTP+SSE transport', { endpoint });
+                this.legacyPostUrl = endpoint;
+                await this.post(message, context);
+                return;
+            }
+            throw new Error(`upstream ${this.options.spec.url} rejected the POST with ${response.status} and does not expose an SSE endpoint`);
+        }
+        if (!response.ok) {
+            const body = await response.text().catch(() => '');
+            throw new Error(`upstream ${target} answered ${response.status} ${response.statusText}${body ? `: ${truncate(body)}` : ''}`);
+        }
+        this.captureSession(response);
+        if (response.status === 202 || response.status === 204) {
+            // Accepted; anything to say comes back on a stream.
+            return;
+        }
+        const contentType = (response.headers.get('content-type') ?? '').toLowerCase();
+        if (contentType.includes('text/event-stream')) {
+            // Read the stream OUTSIDE the send queue. A tool call that needs
+            // something back from the client — `sampling/createMessage`,
+            // `elicitation/create` — holds this stream open until it gets its
+            // answer, and that answer is itself a POST. Awaiting the body here
+            // would make the two wait for each other for ever.
+            void this.readSseBody(response).catch((error) => {
+                this.options.logger.warn('a response stream failed', {
+                    method: context.method,
+                    error: error instanceof Error ? error.message : String(error),
+                });
+            });
+            return;
+        }
+        if (contentType.includes('application/json')) {
+            const text = await response.text();
+            this.deliverJsonText(text);
+            return;
+        }
+        const text = await response.text();
+        if (text.trim() !== '')
+            this.deliverJsonText(text);
+    }
+    // ── Server-to-client stream ───────────────────────────────────────────────
+    /**
+     * Opens the stream the server uses for its own requests and notifications.
+     * Called once `initialize` has been answered, because the session header
+     * has to be on it.
+     */
+    openServerStream() {
+        if (this.legacyPostUrl)
+            return; // legacy mode already has its stream open
+        if (this.serverStreamOpen || this.closed)
+            return;
+        this.serverStreamOpen = true;
+        void this.runServerStream();
+    }
+    async runServerStream() {
+        const maxReconnects = this.options.maxReconnects ?? MAX_STREAM_RECONNECTS;
+        for (let attempt = 0; attempt <= maxReconnects && !this.closed; attempt += 1) {
+            let controller;
+            try {
+                controller = new AbortController();
+                this.serverStream = controller;
+                const headers = {
+                    ...(await this.headersWithAuth({ accept: false })).headers,
+                    accept: 'text/event-stream',
+                };
+                if (this.lastEventId)
+                    headers['last-event-id'] = this.lastEventId;
+                const response = await this.fetchImpl(this.options.spec.url, {
+                    method: 'GET',
+                    // The stream request carries the bearer too.
+                    redirect: 'manual',
+                    headers,
+                    signal: controller.signal,
+                });
+                if (isRedirect(response.status)) {
+                    this.options.logger.error('server-to-client stream answered with a redirect', {
+                        status: response.status,
+                    });
+                    this.serverStreamOpen = false;
+                    return;
+                }
+                if (response.status === 405 || response.status === 404 || response.status === 501) {
+                    this.options.logger.debug('upstream has no server-to-client stream', {
+                        status: response.status,
+                    });
+                    this.serverStreamOpen = false;
+                    return;
+                }
+                if (!response.ok) {
+                    throw new Error(`GET stream answered ${response.status} ${response.statusText}`);
+                }
+                this.captureSession(response);
+                await this.readSseBody(response);
+                if (this.closed)
+                    return;
+                this.options.logger.debug('server-to-client stream ended, reopening');
+            }
+            catch (error) {
+                if (this.closed || controller?.signal.aborted)
+                    return;
+                this.options.logger.warn('server-to-client stream dropped', {
+                    attempt,
+                    error: error instanceof Error ? error.message : String(error),
+                });
+            }
+            if (attempt < maxReconnects && !this.closed) {
+                await this.sleep(Math.min(RECONNECT_BASE_MS * 2 ** attempt, RECONNECT_MAX_MS));
+            }
+        }
+        this.serverStreamOpen = false;
+        if (!this.closed) {
+            this.options.logger.error('gave up reopening the server-to-client stream');
+        }
+    }
+    /** The legacy transport announces its POST endpoint on a GET stream. */
+    async probeLegacyEndpoint() {
+        const controller = new AbortController();
+        let response;
+        try {
+            response = await this.fetchImpl(this.options.spec.url, {
+                method: 'GET',
+                redirect: 'manual',
+                headers: { accept: 'text/event-stream' },
+                signal: controller.signal,
+            });
+        }
+        catch (error) {
+            this.options.logger.debug('legacy SSE probe failed', {
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return undefined;
+        }
+        if (!response.ok || !(response.headers.get('content-type') ?? '').includes('text/event-stream')) {
+            await response.text().catch(() => '');
+            return undefined;
+        }
+        // The stream stays open for the whole session: it carries every answer.
+        this.serverStream = controller;
+        this.serverStreamOpen = true;
+        const endpoint = await this.readLegacyStream(response);
+        return endpoint;
+    }
+    /**
+     * Reads the legacy stream, resolving on the `endpoint` event and then
+     * continuing to deliver messages in the background for the rest of the
+     * session.
+     */
+    readLegacyStream(response) {
+        return new Promise((resolve) => {
+            let settled = false;
+            const finish = (value) => {
+                if (settled)
+                    return;
+                settled = true;
+                resolve(value);
+            };
+            void this.pump(response, (event) => {
+                if (event.event === 'endpoint') {
+                    const url = new URL(event.data.trim(), this.options.spec.url).toString();
+                    finish(url);
+                    return;
+                }
+                if (event.event === 'message' || event.event === '')
+                    this.deliverJsonText(event.data);
+            })
+                .catch((error) => {
+                this.options.logger.warn('legacy SSE stream failed', {
+                    error: error instanceof Error ? error.message : String(error),
+                });
+            })
+                .finally(() => {
+                this.serverStreamOpen = false;
+                finish(undefined);
+            });
+        });
+    }
+    async readSseBody(response) {
+        await this.pump(response, (event) => {
+            if (event.id)
+                this.lastEventId = event.id;
+            if (event.event === 'message' || event.event === '')
+                this.deliverJsonText(event.data);
+            else
+                this.options.logger.debug('ignoring an SSE event', { event: event.event });
+        });
+    }
+    async pump(response, onEvent) {
+        const body = response.body;
+        if (!body)
+            return;
+        const reader = body.getReader();
+        const decoder = new TextDecoder();
+        const parser = new SseParser();
+        try {
+            for (;;) {
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                const events = parser.push(decoder.decode(value, { stream: true }));
+                for (const event of events)
+                    onEvent(event);
+            }
+            const tail = parser.push(decoder.decode());
+            for (const event of tail)
+                onEvent(event);
+        }
+        finally {
+            try {
+                reader.releaseLock();
+            }
+            catch {
+                /* the stream is already gone */
+            }
+        }
+    }
+    // ── Helpers ───────────────────────────────────────────────────────────────
+    deliverJsonText(text) {
+        const trimmed = text.trim();
+        if (trimmed === '')
+            return;
+        let parsed;
+        try {
+            parsed = JSON.parse(trimmed);
+        }
+        catch {
+            this.options.logger.warn('upstream sent a non-JSON payload', { sample: truncate(trimmed) });
+            return;
+        }
+        // A batch is legal on HTTP; the agent's stdio channel takes them one by one.
+        const messages = Array.isArray(parsed) ? parsed : [parsed];
+        for (const message of messages) {
+            if (typeof message !== 'object' || message === null)
+                continue;
+            const typed = message;
+            this.noteProtocolVersion(typed);
+            this.options.events.onMessage(typed);
+        }
+    }
+    /**
+     * `MCP-Protocol-Version` must be sent on every request after the
+     * negotiation, and the negotiated value is the one in the `initialize`
+     * result — not the one the agent asked for.
+     */
+    noteProtocolVersion(message) {
+        if (this.protocolVersion || !isResponse(message))
+            return;
+        const result = message.result;
+        if (typeof result !== 'object' || result === null)
+            return;
+        const version = result.protocolVersion;
+        if (typeof version === 'string') {
+            this.protocolVersion = version;
+            this.openServerStream();
+        }
+    }
+    captureSession(response) {
+        const sessionId = response.headers.get('mcp-session-id');
+        if (sessionId && sessionId !== this.sessionId) {
+            this.sessionId = sessionId;
+            this.options.logger.debug('upstream session established', { sessionId });
+        }
+    }
+    /**
+     * The headers plus the bearer token, when there is one.
+     *
+     * An explicit `--header Authorization: …` wins: an operator who typed a
+     * token on the command line meant that one, and silently replacing it with
+     * a stored credential would be the kind of surprise that costs an hour.
+     */
+    async headersWithAuth(options) {
+        const headers = this.headers(options);
+        if (!this.options.auth)
+            return { headers, token: null };
+        if (Object.keys(headers).some((name) => name.toLowerCase() === 'authorization')) {
+            return { headers, token: null };
+        }
+        const token = await this.options.auth.token().catch(() => null);
+        if (token)
+            headers.authorization = `Bearer ${token}`;
+        return { headers, token };
+    }
+    headers(options) {
+        const headers = { ...(this.options.spec.headers ?? {}) };
+        if (options.accept)
+            headers.accept = 'application/json, text/event-stream';
+        if (this.sessionId)
+            headers['mcp-session-id'] = this.sessionId;
+        if (this.protocolVersion)
+            headers['mcp-protocol-version'] = this.protocolVersion;
+        return headers;
+    }
+    /**
+     * Answers a request the upstream will never answer. Without this the agent
+     * waits for its own timeout with no explanation; with it, the failure is on
+     * screen in the client.
+     */
+    failPending(context, code, message) {
+        if (context.id === undefined)
+            return;
+        this.options.events.onMessage({
+            jsonrpc: '2.0',
+            id: context.id,
+            error: { code, message },
+        });
+    }
+}
+function isUnroutable(status) {
+    return status === 404 || status === 405 || status === 406 || status === 415;
+}
+function isRedirect(status) {
+    return status >= 300 && status < 400;
+}
+function truncate(value, max = 300) {
+    return value.length <= max ? value : `${value.slice(0, max)}…`;
+}
+//# sourceMappingURL=upstreamHttp.js.map

package/dist/mcp/proxy/upstreamHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstreamHttp.js","sourceRoot":"","sources":["../../../src/mcp/proxy/upstreamHttp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,UAAU,EAAuC,MAAM,cAAc,CAAC;AAE/E,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAIrC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAK,CAAC;AAC1C,oFAAoF;AACpF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAK,CAAC;AAC5C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,KAAK,CAAC;AAEnD,uEAAuE;AACvE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AACvC;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AACjC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAgD9B,MAAM,OAAO,YAAY;IAsBM;IArBpB,IAAI,GAAG,MAAe,CAAC;IAEf,SAAS,CAAY;IACrB,KAAK,CAAgC;IAE9C,SAAS,CAAU;IACnB,eAAe,CAAU;IACzB,aAAa,CAAU;IACvB,YAAY,GAAG,KAAK,CAAC;IACrB,YAAY,CAAmB;IAC/B,gBAAgB,GAAG,KAAK,CAAC;IACzB,WAAW,CAAU;IACrB,MAAM,GAAG,KAAK,CAAC;IACvB;;;;;OAKG;IACK,IAAI,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEhD,YAA6B,OAA4B;QAA5B,YAAO,GAAP,OAAO,CAAqB;QACvD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED,KAAK,CAAC,KAAK;QACT,mEAAmE;QACnE,uEAAuE;QACvE,uDAAuD;IACzD,CAAC;IAED,IAAI,CAAC,OAAuB;QAC1B,MAAM,OAAO,GAAgB;YAC3B,EAAE,EAAE,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;YAC7F,MAAM,EAAE,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;SACxE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI;aAClB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;aACvC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;gBAChD,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK,EAAE,QAAQ,CAAC,OAAO;aACxB,CAAC,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,mBAAmB,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YACjE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC;QAC3B,uEAAuE;QACvE,gEAAgE;QAChE,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE;oBAC1C,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO;iBACjE,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;oBACjD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,6EAA6E;IAErE,KAAK,CAAC,IAAI,CAChB,OAAuB,EACvB,OAAoB,EACpB,OAAO,GAAG,CAAC;QAEX,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QAExB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAC3D,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE;YAC5C,MAAM,EAAE,MAAM;YACd,mEAAmE;YACnE,sEAAsE;YACtE,qCAAqC;YACrC,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC3D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACtC,MAAM,IAAI,GACR,YAAY,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,mCAAmC,QAAQ,CAAC,MAAM,IAAI;gBACvF,uFAAuF;gBACvF,0DAA0D,CAAC;YAC7D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gEAAgE,EAAE;gBAC1F,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,4BAA4B,EAAE,IAAI,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAEtC,sEAAsE;YACtE,qEAAqE;YACrE,kEAAkE;YAClE,kEAAkE;YAClE,IAAI,OAAO,GAAG,eAAe,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC5E,IAAI,MAAM,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;oBAC5C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CACtB,MAAM,CAAC,OAAO;wBACZ,CAAC,CAAC,8CAA8C;wBAChD,CAAC,CAAC,0DAA0D,EAC9D,EAAE,MAAM,EAAE,OAAO,GAAG,CAAC,EAAE,CACxB,CAAC;oBACF,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;oBAC/C,OAAO;gBACT,CAAC;YACH,CAAC;YAED,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;YACjE,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,GACR,YAAY,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,2BAA2B,MAAM,IAAI;gBACtE,6FAA6F,CAAC;YAChG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;gBACjD,SAAS;gBACT,OAAO;aACR,CAAC,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC;YACvD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,yEAAyE;QACzE,8CAA8C;QAC9C,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/E,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAClD,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACxF,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;gBAC9B,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAClC,OAAO;YACT,CAAC;YACD,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,2BAA2B,QAAQ,CAAC,MAAM,sCAAsC,CAClH,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,YAAY,MAAM,aAAa,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5G,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAE9B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,oDAAoD;YACpD,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/E,IAAI,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC9C,iEAAiE;YACjE,6DAA6D;YAC7D,kEAAkE;YAClE,mEAAmE;YACnE,mDAAmD;YACnD,KAAK,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACvD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;oBACnD,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,6EAA6E;IAE7E;;;;OAIG;IACH,gBAAgB;QACd,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO,CAAC,0CAA0C;QAC1E,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACjD,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,qBAAqB,CAAC;QAC1E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,aAAa,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAC7E,IAAI,UAAuC,CAAC;YAC5C,IAAI,CAAC;gBACH,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;gBACnC,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC;gBAC/B,MAAM,OAAO,GAA2B;oBACtC,GAAG,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO;oBAC1D,MAAM,EAAE,mBAAmB;iBAC5B,CAAC;gBACF,IAAI,IAAI,CAAC,WAAW;oBAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;gBAElE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE;oBAC3D,MAAM,EAAE,KAAK;oBACb,6CAA6C;oBAC7C,QAAQ,EAAE,QAAQ;oBAClB,OAAO;oBACP,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBAEH,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAChC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;wBAC5E,MAAM,EAAE,QAAQ,CAAC,MAAM;qBACxB,CAAC,CAAC;oBACH,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;oBAC9B,OAAO;gBACT,CAAC;gBAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAClF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;wBACnE,MAAM,EAAE,QAAQ,CAAC,MAAM;qBACxB,CAAC,CAAC;oBACH,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;oBAC9B,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;gBACnF,CAAC;gBACD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAC9B,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;gBACjC,IAAI,IAAI,CAAC,MAAM;oBAAE,OAAO;gBACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACxE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,IAAI,CAAC,MAAM,IAAI,UAAU,EAAE,MAAM,CAAC,OAAO;oBAAE,OAAO;gBACtD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;oBAC1D,OAAO;oBACP,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;YACL,CAAC;YACD,IAAI,OAAO,GAAG,aAAa,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC5C,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,IAAI,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QACD,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,wEAAwE;IAChE,KAAK,CAAC,mBAAmB;QAC/B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE;gBACxC,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBACnD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAChG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACtC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,wEAAwE;QACxE,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC;QAC/B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAE7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACvD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;OAIG;IACK,gBAAgB,CAAC,QAAkB;QACzC,OAAO,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,EAAE;YACjD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,MAAM,GAAG,CAAC,KAAyB,EAAQ,EAAE;gBACjD,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC,CAAC;YACF,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjC,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;oBAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;oBACzE,MAAM,CAAC,GAAG,CAAC,CAAC;oBACZ,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE;oBAAE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxF,CAAC,CAAC;iBACC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;oBACnD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;YACL,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE;gBACZ,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;gBAC9B,MAAM,CAAC,SAAS,CAAC,CAAC;YACpB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,QAAkB;QAC1C,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClC,IAAI,KAAK,CAAC,EAAE;gBAAE,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,EAAE,CAAC;YAC1C,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE;gBAAE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;;gBACjF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,QAAkB,EAClB,OAAsE;QAEtE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI;oBAAE,MAAM;gBAChB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACpE,KAAK,MAAM,KAAK,IAAI,MAAM;oBAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3C,KAAK,MAAM,KAAK,IAAI,IAAI;gBAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,6EAA6E;IAErE,eAAe,CAAC,IAAY;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,EAAE;YAAE,OAAO;QAC3B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5F,OAAO;QACT,CAAC;QACD,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC3D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;gBAAE,SAAS;YAC9D,MAAM,KAAK,GAAG,OAAyB,CAAC;YACxC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,mBAAmB,CAAC,OAAuB;QACjD,IAAI,IAAI,CAAC,eAAe,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO;QACzD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO;QAC1D,MAAM,OAAO,GAAI,MAAwC,CAAC,eAAe,CAAC;QAC1E,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC;YAC/B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,QAAkB;QACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACzD,IAAI,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,eAAe,CAC3B,OAA4B;QAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACxD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,EAAE,CAAC;YAChF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAClC,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,KAAK;YAAE,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;QACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAEO,OAAO,CAAC,OAA4B;QAC1C,MAAM,OAAO,GAA2B,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QACjF,IAAI,OAAO,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,GAAG,qCAAqC,CAAC;QAC3E,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/D,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC;QACjF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACK,WAAW,CAAC,OAAoB,EAAE,IAAY,EAAE,OAAe;QACrE,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;YAAE,OAAO;QACrC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;YAC5B,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;SACzB,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AAC9E,CAAC;AAED,SAAS,UAAU,CAAC,MAAc;IAChC,OAAO,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,CAAC;AACvC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,GAAG,GAAG,GAAG;IACxC,OAAO,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC;AACjE,CAAC"}