@decibelsystems/tools 2.2.0-beta.0 → 3.1.0

package/dist/pty/routes.js

@@ -0,0 +1,624 @@
+// ============================================================================
+// Hosted-session HTTP + WebSocket routes (ADR-0012 / decibel-hq EPIC-0015)
+// ============================================================================
+// Productised from the T3 probe (a88c533). The auth shape is unchanged:
+//
+//   loopback peer  ->  exact Origin allowlist  ->  sessions bearer
+//
+// for every WRITE route (attach-token, control, spawn, restore), and for the WS upgrade
+// the bearer is replaced by a 30s single-use attach token presented as the
+// `attach.<token>` subprotocol — a browser cannot set Authorization on a
+// WebSocket handshake. Every upgrade refusal happens BEFORE handleUpgrade, so
+// an unauthorised peer never becomes a WebSocket.
+//
+// The session bearer is `sessions.token` in ~/.decibel/config.yaml, not the
+// daemon auth_token, which is usually unset on a localhost daemon (the 127.0.0.1
+// bind is its boundary). That boundary is fine for reads and not fine for
+// "start claude and type into it" — any dev server on any localhost port would
+// pass it. With no sessions.token the write routes fail closed (503).
+//
+// Frames on the attach socket: binary = raw PTY bytes both ways. Text = JSON
+// control: client->server {"type":"resize","cols","rows"},
+// {"type":"scroll","lines":n} (n<0 up) and {"type":"scroll","cancel":true}
+// (tmux copy-mode, see scrollPane); server->client
+// {"attached":"<key>"} first and {"exit":code} last. Closing the socket kills
+// the attach CLIENT pty only — the tmux session lives on — and never sends
+// keystrokes into the session.
+// ============================================================================
+import { randomBytes } from 'crypto';
+import { homedir } from 'os';
+import { WebSocketServer, WebSocket } from 'ws';
+import { loadConfig } from '../daemonConfig.js';
+import { log } from '../config.js';
+import { isLoopbackPeer, isAllowedOrigin, presentedBearer, respondToPnaPreflight, timingSafeTokenCompare, } from './boundary.js';
+import { resolveTmux, sessionTarget, socketArgs, serverFor, cleanEnv } from './tmux.js';
+import { sendChat, ChatError } from '../chat.js';
+import { fleet } from './fleet.js';
+import { pairingOf, hasPairingHeaders, verifyPairedRequest, isPairingActive, requestPairing, pairingStatus, issueNonces, revokePairing, } from './pairing.js';
+import { SessionError, controlSession, loadPty, resolveAttachable, scrollPane, spawnSession, } from './sessions.js';
+import { openTerminal } from './openTerminal.js';
+import { confirmPairingLocally } from './pairDialog.js';
+/** The dialog belongs to the real daemon, never to tests or a plain --http run. */
+function isDaemonProcess() {
+    return process.argv.includes('--daemon') && !process.env.VITEST;
+}
+/** How long a minted attach token stays usable. Deliberately short. */
+export const ATTACH_TOKEN_TTL_MS = 30_000;
+const SUBPROTOCOL_PREFIX = 'attach.';
+/** HQ dev server, through the Vite proxy (decibel-hq EPIC-0015 phase 1). */
+export const DEFAULT_SESSION_ORIGINS = ['http://localhost:5733', 'http://127.0.0.1:5733'];
+/**
+ * The default allowlist: the dev server, plus the origin of the deployed HQ the
+ * daemon already talks to (hq.url in config.yaml). Deployed HQ has no bearer;
+ * it can only act through an approved pairing (src/pty/pairing.ts).
+ */
+function defaultOrigins(hqUrl) {
+    const out = [...DEFAULT_SESSION_ORIGINS];
+    if (hqUrl) {
+        try {
+            const u = new URL(hqUrl);
+            if (u.protocol === 'https:')
+                out.push(`${u.protocol}//${u.host}`);
+        }
+        catch {
+            /* not a URL; ignore */
+        }
+    }
+    return out;
+}
+/**
+ * Read per request: the file is small, these routes are rare, and it means a
+ * token set in config.yaml takes effect without a daemon restart.
+ */
+let authOverride = null;
+// The rate limiter also reads this, on every request that carries a bearer, so
+// it is cached for a few seconds rather than parsed from YAML each time.
+let authCache = null;
+const AUTH_CACHE_MS = 5_000;
+export function sessionAuthConfig() {
+    if (authOverride)
+        return authOverride;
+    if (authCache && Date.now() - authCache.at < AUTH_CACHE_MS)
+        return authCache.value;
+    const cfg = loadConfig();
+    const s = cfg.sessions;
+    const value = {
+        token: s?.token || undefined,
+        allowedOrigins: s?.allowed_origins?.length ? s.allowed_origins : defaultOrigins(cfg.hq?.url),
+    };
+    authCache = { at: Date.now(), value };
+    return value;
+}
+/** Test seam. */
+export function _setSessionAuthConfig(c) {
+    authOverride = c;
+    authCache = null;
+}
+const tokens = new Map();
+let now = Date.now;
+/** Test seam. */
+export function _setClock(fn) {
+    now = fn ?? Date.now;
+}
+export function outstandingTokens() {
+    sweep();
+    return tokens.size;
+}
+function sweep() {
+    const t = now();
+    for (const [k, rec] of tokens)
+        if (rec.expiresAt <= t)
+            tokens.delete(k);
+}
+// ----------------------------------------------------------------------------
+// Routing
+// ----------------------------------------------------------------------------
+const ATTACH_TOKEN_RE = /^\/sessions\/([^/]+)\/attach-token$/;
+const CONTROL_RE = /^\/sessions\/([^/]+)\/control$/;
+const ATTACH_RE = /^\/sessions\/([^/]+)\/attach$/;
+/** The routes this module gates itself. GET /sessions and /sessions/last-fleet are NOT among them. */
+export function isSessionWritePath(path) {
+    return path === '/sessions/spawn' || path === '/sessions/restore' || path === '/sessions/open-terminal' ||
+        ATTACH_TOKEN_RE.test(path) || CONTROL_RE.test(path);
+}
+export function isSessionAttachPath(path) {
+    return ATTACH_RE.test(path);
+}
+function decodeKey(raw) {
+    try {
+        const k = decodeURIComponent(raw);
+        // tmux session names: no ':' or '.' (target syntax), no control chars.
+        return /^[^\x00-\x1f:.]{1,128}$/.test(k) ? k : null;
+    }
+    catch {
+        return null;
+    }
+}
+function sendJson(res, status, body, origin) {
+    const headers = { 'Content-Type': 'application/json' };
+    if (origin) {
+        headers['Access-Control-Allow-Origin'] = origin;
+        headers.Vary = 'Origin';
+    }
+    res.writeHead(status, headers).end(JSON.stringify(body));
+}
+async function readJson(req, limit = 64 * 1024) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of req) {
+        size += chunk.length;
+        if (size > limit)
+            throw new SessionError(413, 'BODY_TOO_LARGE', 'Request body too large.');
+        chunks.push(chunk);
+    }
+    if (!size)
+        return {};
+    try {
+        const v = JSON.parse(Buffer.concat(chunks).toString('utf-8'));
+        return v && typeof v === 'object' && !Array.isArray(v) ? v : {};
+    }
+    catch {
+        throw new SessionError(400, 'BAD_JSON', 'Body is not valid JSON.');
+    }
+}
+/**
+ * The write-route gate. Returns the origin to echo on success ('' for a
+ * request that carried none), or writes the refusal and returns null.
+ *
+ * A request with NO Origin header is a local CLI (`decibel up`, decibel-hq
+ * ADR-0018 D5): admitted on loopback with a valid bearer. The Origin check
+ * exists to stop browser CSRF, and browsers always send Origin on a
+ * cross-origin POST, so this opens no browser path. An Origin that IS sent
+ * must still be allowlisted.
+ */
+function gate(req, res) {
+    const cfg = sessionAuthConfig();
+    const origin = req.headers.origin;
+    // A request already verified under an approved pairing (httpServer.ts ran
+    // verifyPairedRequest: loopback, origin allowlist, pairing bound to this
+    // origin, fresh single-use nonce, signature). No bearer involved.
+    if (pairingOf(req))
+        return origin;
+    if (!cfg.token) {
+        sendJson(res, 503, {
+            error: 'Hosted sessions are not configured: set sessions.token in ~/.decibel/config.yaml.',
+            code: 'SESSIONS_NOT_CONFIGURED',
+        });
+        return null;
+    }
+    if (!isLoopbackPeer(req)) {
+        sendJson(res, 403, { error: 'not a loopback peer', code: 'FORBIDDEN' });
+        return null;
+    }
+    if (origin !== undefined && !isAllowedOrigin(origin, cfg.allowedOrigins)) {
+        sendJson(res, 403, { error: 'origin not allowed', code: 'FORBIDDEN' });
+        return null;
+    }
+    const presented = presentedBearer(req);
+    if (!presented || !timingSafeTokenCompare(presented, cfg.token)) {
+        sendJson(res, 401, { error: 'bad bearer', code: 'UNAUTHORIZED' }, origin);
+        return null;
+    }
+    return origin ?? '';
+}
+/**
+ * Handle a session write route or its preflight. Called by httpServer.ts for
+ * any path where isSessionWritePath() is true, before the daemon's own auth
+ * gate (which knows nothing of the sessions bearer).
+ */
+export async function handleSessionWrite(req, res, path) {
+    if (respondToPnaPreflight(req, res, sessionAuthConfig().allowedOrigins))
+        return;
+    if (req.method !== 'POST') {
+        sendJson(res, 405, { error: 'POST only', code: 'METHOD_NOT_ALLOWED' });
+        return;
+    }
+    const origin = gate(req, res);
+    if (origin === null)
+        return;
+    try {
+        if (path === '/sessions/spawn') {
+            const body = await readJson(req);
+            sendJson(res, 200, await spawnSession(body), origin);
+            return;
+        }
+        // decibel-hq ADR-0018: resume ledger sessions. Never takes a cwd, flags
+        // or an arbitrary uuid; every one must be in the daemon's own ledger.
+        if (path === '/sessions/restore') {
+            const body = await readJson(req);
+            sendJson(res, 200, await fleet().restore(body.session_ids), origin);
+            return;
+        }
+        if (path === '/sessions/open-terminal') {
+            sendJson(res, 200, await openTerminal(await readJson(req)), origin);
+            return;
+        }
+        const tokenMatch = path.match(ATTACH_TOKEN_RE);
+        if (tokenMatch) {
+            const key = decodeKey(tokenMatch[1]);
+            if (!key)
+                throw new SessionError(400, 'BAD_SESSION_KEY', 'Malformed session key.');
+            if (!(await loadPty())) {
+                throw new SessionError(503, 'PTY_UNAVAILABLE', 'node-pty is not installed; attach is unavailable on this daemon.');
+            }
+            await resolveAttachable(key);
+            sweep();
+            const token = randomBytes(32).toString('hex');
+            const expiresAt = now() + ATTACH_TOKEN_TTL_MS;
+            tokens.set(token, { sessionKey: key, expiresAt, pairingId: pairingOf(req) });
+            sendJson(res, 200, { token, expires_at: new Date(expiresAt).toISOString() }, origin);
+            return;
+        }
+        const controlMatch = path.match(CONTROL_RE);
+        if (controlMatch) {
+            const key = decodeKey(controlMatch[1]);
+            if (!key)
+                throw new SessionError(400, 'BAD_SESSION_KEY', 'Malformed session key.');
+            const body = await readJson(req);
+            sendJson(res, 200, await controlSession(key, body.action), origin);
+            return;
+        }
+        sendJson(res, 404, { error: 'Not found', code: 'NOT_FOUND' }, origin);
+    }
+    catch (err) {
+        if (err instanceof SessionError) {
+            sendJson(res, err.status, { error: err.message, code: err.code }, origin);
+        }
+        else {
+            log(`Sessions: ${path} failed: ${err instanceof Error ? err.message : String(err)}`);
+            sendJson(res, 500, { error: 'internal error', code: 'INTERNAL' }, origin);
+        }
+    }
+}
+/**
+ * POST /chat (decibel-hq EPIC-0016): send as the HQ chat peer. Same gate as
+ * the session writes: it puts text into other sessions.
+ */
+export async function handleChatWrite(req, res) {
+    if (respondToPnaPreflight(req, res, sessionAuthConfig().allowedOrigins))
+        return;
+    if (req.method !== 'POST') {
+        sendJson(res, 405, { error: 'POST only', code: 'METHOD_NOT_ALLOWED' });
+        return;
+    }
+    const origin = gate(req, res);
+    if (origin === null)
+        return;
+    try {
+        const body = await readJson(req, 16 * 1024);
+        sendJson(res, 200, await sendChat(body.to, body.text), origin);
+    }
+    catch (err) {
+        if (err instanceof ChatError || err instanceof SessionError) {
+            sendJson(res, err.status, { error: err.message, code: err.code }, origin);
+        }
+        else {
+            log(`Chat: POST /chat failed: ${err instanceof Error ? err.message : String(err)}`);
+            sendJson(res, 500, { error: 'internal error', code: 'INTERNAL' }, origin);
+        }
+    }
+}
+/**
+ * Signed requests from a paired browser (ADR-0012 in this repo). httpServer.ts
+ * calls this once per request, before rate limiting and auth. A verified
+ * request is marked (pairingOf) and stands in for a bearer everywhere after.
+ * A request that CLAIMS a pairing and fails verification is refused outright
+ * rather than falling through as anonymous. Returns false when it refused.
+ */
+export function applyPairingAuth(req, res, url) {
+    if (!hasPairingHeaders(req))
+        return true;
+    const allowed = sessionAuthConfig().allowedOrigins;
+    const origin = req.headers.origin;
+    const echo = isAllowedOrigin(origin, allowed)
+        ? { 'Access-Control-Allow-Origin': origin, Vary: 'Origin' }
+        : {};
+    try {
+        verifyPairedRequest(req, url.pathname + url.search, allowed);
+        for (const [k, v] of Object.entries(echo))
+            res.setHeader(k, v);
+        return true;
+    }
+    catch (err) {
+        const status = err instanceof SessionError ? err.status : 401;
+        const code = err instanceof SessionError ? err.code : 'BAD_SIGNATURE';
+        res.writeHead(status, { 'Content-Type': 'application/json', ...echo });
+        res.end(JSON.stringify({ error: err instanceof Error ? err.message : String(err), code }));
+        return false;
+    }
+}
+// ----------------------------------------------------------------------------
+// Pairing routes
+// ----------------------------------------------------------------------------
+// None of these approves anything: approval is `decibel-tools pair approve
+// <code>` on this machine, and nowhere else.
+const PAIR_STATUS_RE = /^\/pair\/status\/([A-Za-z0-9_]{1,64})$/;
+export function isPairPath(path) {
+    return path === '/pair/request' || path === '/pair/challenge' || path === '/pair/revoke' || PAIR_STATUS_RE.test(path);
+}
+export async function handlePair(req, res, path) {
+    const cfg = sessionAuthConfig();
+    if (respondToPnaPreflight(req, res, cfg.allowedOrigins))
+        return;
+    const origin = req.headers.origin;
+    if (!isLoopbackPeer(req)) {
+        sendJson(res, 403, { error: 'not a loopback peer', code: 'FORBIDDEN' });
+        return;
+    }
+    if (!isAllowedOrigin(origin, cfg.allowedOrigins)) {
+        sendJson(res, 403, { error: 'origin not allowed', code: 'FORBIDDEN' });
+        return;
+    }
+    try {
+        const statusMatch = path.match(PAIR_STATUS_RE);
+        if (statusMatch && req.method === 'GET') {
+            sendJson(res, 200, pairingStatus(statusMatch[1], origin), origin);
+            return;
+        }
+        if (req.method !== 'POST') {
+            sendJson(res, 405, { error: 'method not allowed', code: 'METHOD_NOT_ALLOWED' }, origin);
+            return;
+        }
+        const body = await readJson(req, 8 * 1024);
+        if (path === '/pair/request') {
+            const pending = await requestPairing(origin, body.public_key_jwk, body.label);
+            sendJson(res, 200, pending, origin);
+            // macOS: ask on this screen (ISS-0228). The response never waits on it.
+            if (isDaemonProcess())
+                void confirmPairingLocally(pending.pairing_id);
+            return;
+        }
+        if (path === '/pair/challenge') {
+            sendJson(res, 200, issueNonces(body.pairing_id, origin, body.count), origin);
+            return;
+        }
+        if (path === '/pair/revoke') {
+            // Only a pairing can revoke itself over HTTP, and only by a signed request.
+            const id = pairingOf(req);
+            if (!id)
+                throw new SessionError(401, 'NOT_PAIRED', 'Revoke must be a signed request from the pairing being revoked.');
+            await revokePairing(id);
+            closeRevokedSockets();
+            sendJson(res, 200, { ok: true, revoked: id }, origin);
+            return;
+        }
+        sendJson(res, 404, { error: 'Not found', code: 'NOT_FOUND' }, origin);
+    }
+    catch (err) {
+        if (err instanceof SessionError) {
+            sendJson(res, err.status, { error: err.message, code: err.code }, origin);
+        }
+        else {
+            log(`Pairing: ${path} failed: ${err instanceof Error ? err.message : String(err)}`);
+            sendJson(res, 500, { error: 'internal error', code: 'INTERNAL' }, origin);
+        }
+    }
+}
+// ----------------------------------------------------------------------------
+// WebSocket attach
+// ----------------------------------------------------------------------------
+// noServer: the upgrade is authorised by us first, and only an authorised one
+// is handed to ws. handleProtocols echoes the token-bearing subprotocol back,
+// which every engine expects to see in the response.
+let wss = null;
+function getWss() {
+    if (!wss) {
+        wss = new WebSocketServer({
+            noServer: true,
+            maxPayload: 1024 * 1024,
+            handleProtocols: (protocols) => {
+                for (const p of protocols)
+                    if (p.startsWith(SUBPROTOCOL_PREFIX))
+                        return p;
+                return false;
+            },
+        });
+    }
+    return wss;
+}
+/** Live attach sockets, so shutdown can close them. */
+const liveSockets = new Map();
+/**
+ * Revocation reaches live sockets. A CLI revoke edits pairings.yaml in another
+ * process, so the daemon checks every paired socket's pairing on a short
+ * interval rather than waiting to be told.
+ */
+let revocationTimer = null;
+export function closeRevokedSockets() {
+    let closed = 0;
+    for (const [ws, pairingId] of liveSockets) {
+        if (pairingId && !isPairingActive(pairingId)) {
+            try {
+                ws.close(4401, 'pairing revoked');
+            }
+            catch {
+                /* ignore */
+            }
+            liveSockets.delete(ws);
+            closed++;
+        }
+    }
+    if (![...liveSockets.values()].some(Boolean) && revocationTimer) {
+        clearInterval(revocationTimer);
+        revocationTimer = null;
+    }
+    return closed;
+}
+function watchRevocation() {
+    if (revocationTimer)
+        return;
+    revocationTimer = setInterval(() => {
+        try {
+            closeRevokedSockets();
+        }
+        catch (err) {
+            log(`Sessions: revocation check failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }, 5_000);
+    revocationTimer.unref?.();
+}
+function refuse(socket, status, why) {
+    socket.write(`HTTP/1.1 ${status}\r\nContent-Length: 0\r\nConnection: close\r\nX-Attach-Refused: ${why}\r\n\r\n`);
+    socket.destroy();
+}
+function clampDim(v, fallback, max) {
+    const n = Number(v);
+    return Number.isInteger(n) && n > 0 ? Math.min(n, max) : fallback;
+}
+/**
+ * Handle an upgrade on /sessions/<key>/attach. The caller (httpServer.ts)
+ * routes here only for that path; anything else it refuses itself.
+ */
+export async function handleSessionUpgrade(req, socket, head, url) {
+    const cfg = sessionAuthConfig();
+    if (!cfg.token)
+        return refuse(socket, '503 Service Unavailable', 'not-configured');
+    if (!isLoopbackPeer(req))
+        return refuse(socket, '403 Forbidden', 'peer');
+    if (!isAllowedOrigin(req.headers.origin, cfg.allowedOrigins)) {
+        return refuse(socket, '403 Forbidden', 'origin');
+    }
+    const m = url.pathname.match(ATTACH_RE);
+    const key = m ? decodeKey(m[1]) : null;
+    if (!key)
+        return refuse(socket, '400 Bad Request', 'bad-key');
+    const offered = req.headers['sec-websocket-protocol'] ?? '';
+    const chosen = offered
+        .split(',')
+        .map((p) => p.trim())
+        .find((p) => p.startsWith(SUBPROTOCOL_PREFIX));
+    if (!chosen)
+        return refuse(socket, '401 Unauthorized', 'no-token');
+    const presented = chosen.slice(SUBPROTOCOL_PREFIX.length);
+    sweep();
+    const rec = tokens.get(presented);
+    if (!rec)
+        return refuse(socket, '401 Unauthorized', 'unknown-token');
+    // Burn it before anything async, so two concurrent upgrades presenting the
+    // same token cannot both win.
+    tokens.delete(presented);
+    if (rec.expiresAt <= now())
+        return refuse(socket, '401 Unauthorized', 'token-expired');
+    if (rec.sessionKey !== key)
+        return refuse(socket, '403 Forbidden', 'token-session-mismatch');
+    const pty = await loadPty();
+    if (!pty)
+        return refuse(socket, '503 Service Unavailable', 'no-pty');
+    try {
+        await resolveAttachable(key);
+    }
+    catch (err) {
+        const why = err instanceof SessionError ? err.code.toLowerCase() : 'session';
+        return refuse(socket, '409 Conflict', why);
+    }
+    const cols = clampDim(url.searchParams.get('cols'), 120, 500);
+    const rows = clampDim(url.searchParams.get('rows'), 32, 200);
+    getWss().handleUpgrade(req, socket, head, (ws) => {
+        const env = { ...cleanEnv(), TERM: 'xterm-256color' };
+        let term;
+        try {
+            term = pty.spawn(resolveTmux(), [...socketArgs(serverFor(key)), 'attach-session', '-t', sessionTarget(key)], {
+                name: 'xterm-256color',
+                cols,
+                rows,
+                cwd: homedir(),
+                env,
+            });
+        }
+        catch (err) {
+            log(`Sessions: attach spawn failed for ${key}: ${err instanceof Error ? err.message : String(err)}`);
+            ws.send(JSON.stringify({ exit: -1, error: 'attach failed' }));
+            ws.close(1011, 'attach failed');
+            return;
+        }
+        liveSockets.set(ws, rec.pairingId);
+        if (rec.pairingId)
+            watchRevocation();
+        log(`Sessions: attached ${key} (pid ${term.pid})`);
+        ws.send(JSON.stringify({ attached: key }));
+        let exited = false;
+        term.onData((data) => {
+            if (ws.readyState === WebSocket.OPEN)
+                ws.send(Buffer.from(data, 'utf-8'), { binary: true });
+        });
+        term.onExit(({ exitCode }) => {
+            exited = true;
+            if (ws.readyState === WebSocket.OPEN) {
+                ws.send(JSON.stringify({ exit: exitCode }));
+                ws.close(1000, 'detached');
+            }
+        });
+        // Scroll frames run tmux asynchronously, and a keystroke that overtook
+        // HQ's cancel would land in copy-mode as a copy-mode command. So once a
+        // scroll is pending, everything after it on this socket waits its turn.
+        let pending = null;
+        const inOrder = (fn) => {
+            if (!pending) {
+                const r = fn();
+                if (!r)
+                    return;
+                pending = r;
+            }
+            else {
+                pending = pending.then(fn);
+            }
+            const mine = pending;
+            mine.catch(() => { }).finally(() => {
+                if (pending === mine)
+                    pending = null;
+            });
+        };
+        ws.on('message', (data, isBinary) => {
+            if (isBinary) {
+                inOrder(() => {
+                    if (!exited)
+                        term.write(data);
+                });
+                return;
+            }
+            let msg;
+            try {
+                msg = JSON.parse(data.toString('utf-8'));
+            }
+            catch {
+                return; // Ignore malformed control frames; they are never keystrokes.
+            }
+            if (msg?.type === 'resize') {
+                inOrder(() => {
+                    if (!exited)
+                        term.resize(clampDim(msg.cols, cols, 500), clampDim(msg.rows, rows, 200));
+                });
+            }
+            else if (msg?.type === 'scroll') {
+                inOrder(() => scrollPane(key, msg));
+            }
+        });
+        ws.on('close', () => {
+            liveSockets.delete(ws);
+            // Kill the attach CLIENT only. The tmux session is untouched, and no
+            // keystroke (not even the detach prefix) is ever sent into it.
+            if (!exited) {
+                try {
+                    term.kill();
+                }
+                catch {
+                    /* already gone */
+                }
+            }
+            log(`Sessions: detached ${key}`);
+        });
+    });
+}
+/** Close every live attach socket (daemon shutdown). */
+export function closeAllAttachSockets() {
+    for (const ws of liveSockets.keys()) {
+        try {
+            ws.close(1001, 'daemon shutting down');
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    liveSockets.clear();
+}
+//# sourceMappingURL=routes.js.map

package/dist/pty/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/pty/routes.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,2EAA2E;AAC3E,+EAA+E;AAC/E,wEAAwE;AACxE,EAAE;AACF,mEAAmE;AACnE,EAAE;AACF,wFAAwF;AACxF,2EAA2E;AAC3E,yEAAyE;AACzE,8EAA8E;AAC9E,kDAAkD;AAClD,EAAE;AACF,4EAA4E;AAC5E,iFAAiF;AACjF,0EAA0E;AAC1E,+EAA+E;AAC/E,sEAAsE;AACtE,EAAE;AACF,6EAA6E;AAC7E,2DAA2D;AAC3D,2EAA2E;AAC3E,mDAAmD;AACnD,8EAA8E;AAC9E,2EAA2E;AAC3E,+BAA+B;AAC/B,+EAA+E;AAI/E,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EACL,cAAc,EACd,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACxF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,aAAa,EACb,WAAW,EACX,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,YAAY,EACZ,cAAc,EACd,OAAO,EACP,iBAAiB,EACjB,UAAU,EACV,YAAY,GACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,mFAAmF;AACnF,SAAS,eAAe;IACtB,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;AAClE,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAC1C,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAErC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,uBAAuB,EAAE,uBAAuB,CAAC,CAAC;AAE1F;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAyB;IAC/C,MAAM,GAAG,GAAG,CAAC,GAAG,uBAAuB,CAAC,CAAC;IACzC,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD;;;GAGG;AACH,IAAI,YAAY,GAA6B,IAAI,CAAC;AAClD,+EAA+E;AAC/E,yEAAyE;AACzE,IAAI,SAAS,GAAoD,IAAI,CAAC;AACtE,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,UAAU,iBAAiB;IAC/B,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,EAAE,GAAG,aAAa;QAAE,OAAO,SAAS,CAAC,KAAK,CAAC;IACnF,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;IACvB,MAAM,KAAK,GAAG;QACZ,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,SAAS;QAC5B,cAAc,EAAE,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC;KAC7F,CAAC;IACF,SAAS,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC;IACtC,OAAO,KAAK,CAAC;AACf,CAAC;AACD,iBAAiB;AACjB,MAAM,UAAU,qBAAqB,CAAC,CAA2B;IAC/D,YAAY,GAAG,CAAC,CAAC;IACjB,SAAS,GAAG,IAAI,CAAC;AACnB,CAAC;AAYD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;AAC9C,IAAI,GAAG,GAAiB,IAAI,CAAC,GAAG,CAAC;AACjC,iBAAiB;AACjB,MAAM,UAAU,SAAS,CAAC,EAAyB;IACjD,GAAG,GAAG,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC;AACvB,CAAC;AACD,MAAM,UAAU,iBAAiB;IAC/B,KAAK,EAAE,CAAC;IACR,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AACD,SAAS,KAAK;IACZ,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM;QAAE,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAC9D,MAAM,UAAU,GAAG,gCAAgC,CAAC;AACpD,MAAM,SAAS,GAAG,+BAA+B,CAAC;AAElD,sGAAsG;AACtG,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,yBAAyB;QACrG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAClC,uEAAuE;QACvE,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa,EAAE,MAAe;IACnF,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IAC/E,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,6BAA6B,CAAC,GAAG,MAAM,CAAC;QAChD,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;IAC1B,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoB,EAAE,KAAK,GAAG,EAAE,GAAG,IAAI;IAC7D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,IAAI,IAAK,KAAgB,CAAC,MAAM,CAAC;QACjC,IAAI,IAAI,GAAG,KAAK;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,gBAAgB,EAAE,yBAAyB,CAAC,CAAC;QAC3F,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,UAAU,EAAE,yBAAyB,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,IAAI,CAAC,GAAoB,EAAE,GAAmB;IACrD,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAA4B,CAAC;IACxD,0EAA0E;IAC1E,yEAAyE;IACzE,kEAAkE;IAClE,IAAI,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO,MAAO,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,KAAK,EAAE,mFAAmF;YAC1F,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACzE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,SAAS,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,MAAM,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAoB,EAAE,GAAmB,EAAE,IAAY;IAC9F,IAAI,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,cAAc,CAAC;QAAE,OAAO;IAChF,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9B,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO;IAE5B,IAAI,CAAC;QACH,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,wEAAwE;QACxE,sEAAsE;QACtE,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,KAAK,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,IAAI,IAAI,KAAK,yBAAyB,EAAE,CAAC;YACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC/C,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,iBAAiB,EAAE,wBAAwB,CAAC,CAAC;YACnF,IAAI,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,iBAAiB,EAAE,kEAAkE,CAAC,CAAC;YACrH,CAAC;YACD,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAC7B,KAAK,EAAE,CAAC;YACR,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,GAAG,EAAE,GAAG,mBAAmB,CAAC;YAC9C,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC7E,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,iBAAiB,EAAE,wBAAwB,CAAC,CAAC;YACnF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;YAChC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,aAAa,IAAI,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAoB,EAAE,GAAmB;IAC7E,IAAI,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,cAAc,CAAC;QAAE,OAAO;IAChF,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9B,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO;IAC5B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;QAC5C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,SAAS,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;YAC5D,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAoB,EAAE,GAAmB,EAAE,GAAQ;IAClF,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC,cAAc,CAAC;IACnD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAA4B,CAAC;IACxD,MAAM,IAAI,GAA2B,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC;QACnE,CAAC,CAAC,EAAE,6BAA6B,EAAE,MAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC5D,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,CAAC;QACH,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9D,MAAM,IAAI,GAAG,GAAG,YAAY,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC;QACtE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QACvE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3F,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAC/E,2EAA2E;AAC3E,6CAA6C;AAE7C,MAAM,cAAc,GAAG,wCAAwC,CAAC;AAEhE,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,cAAc,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAoB,EAAE,GAAmB,EAAE,IAAY;IACtF,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,IAAI,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,cAAc,CAAC;QAAE,OAAO;IAChE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAA4B,CAAC;IACxD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACjD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC/C,IAAI,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACxC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAO,CAAC,EAAE,MAAM,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,MAAM,CAAC,CAAC;YACxF,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAO,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/E,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACpC,wEAAwE;YACxE,IAAI,eAAe,EAAE;gBAAE,KAAK,qBAAqB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC/B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,MAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5B,4EAA4E;YAC5E,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,YAAY,EAAE,iEAAiE,CAAC,CAAC;YACtH,MAAM,aAAa,CAAC,EAAE,CAAC,CAAC;YACxB,mBAAmB,EAAE,CAAC;YACtB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;YAChC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,YAAY,IAAI,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,8EAA8E;AAC9E,8EAA8E;AAC9E,qDAAqD;AACrD,IAAI,GAAG,GAA2B,IAAI,CAAC;AACvC,SAAS,MAAM;IACb,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,IAAI,eAAe,CAAC;YACxB,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,IAAI,GAAG,IAAI;YACvB,eAAe,EAAE,CAAC,SAAsB,EAAE,EAAE;gBAC1C,KAAK,MAAM,CAAC,IAAI,SAAS;oBAAE,IAAI,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC;wBAAE,OAAO,CAAC,CAAC;gBAC1E,OAAO,KAAK,CAAC;YACf,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uDAAuD;AACvD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAiC,CAAC;AAE7D;;;;GAIG;AACH,IAAI,eAAe,GAA0C,IAAI,CAAC;AAClE,MAAM,UAAU,mBAAmB;IACjC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,WAAW,EAAE,CAAC;QAC1C,IAAI,SAAS,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACvB,MAAM,EAAE,CAAC;QACX,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,eAAe,EAAE,CAAC;QAChE,aAAa,CAAC,eAAe,CAAC,CAAC;QAC/B,eAAe,GAAG,IAAI,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,eAAe;IACtB,IAAI,eAAe;QAAE,OAAO;IAC5B,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;QACjC,IAAI,CAAC;YACH,mBAAmB,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,sCAAsC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC,EAAE,KAAK,CAAC,CAAC;IACV,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,MAAM,CAAC,MAAc,EAAE,MAAc,EAAE,GAAW;IACzD,MAAM,CAAC,KAAK,CAAC,YAAY,MAAM,mEAAmE,GAAG,UAAU,CAAC,CAAC;IACjH,MAAM,CAAC,OAAO,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU,EAAE,QAAgB,EAAE,GAAW;IACzD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAoB,EAAE,MAAc,EAAE,IAAY,EAAE,GAAQ;IACrG,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,MAAM,EAAE,yBAAyB,EAAE,gBAAgB,CAAC,CAAC;IACnF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;IACzE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,MAA4B,EAAE,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACnF,OAAO,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;IAE9D,MAAM,OAAO,GAAI,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAwB,IAAI,EAAE,CAAC;IACpF,MAAM,MAAM,GAAG,OAAO;SACnB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAC;IAEnE,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC1D,KAAK,EAAE,CAAC;IACR,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,eAAe,CAAC,CAAC;IACrE,2EAA2E;IAC3E,8BAA8B;IAC9B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzB,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,EAAE;QAAE,OAAO,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,eAAe,CAAC,CAAC;IACvF,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,wBAAwB,CAAC,CAAC;IAE7F,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC,MAAM,EAAE,yBAAyB,EAAE,QAAQ,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7E,OAAO,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAE7D,MAAM,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAa,EAAE,EAAE;QAC1D,MAAM,GAAG,GAAG,EAAE,GAAG,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;QACtD,IAAI,IAA6B,CAAC;QAClC,IAAI,CAAC;YACH,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE;gBAC3G,IAAI,EAAE,gBAAgB;gBACtB,IAAI;gBACJ,IAAI;gBACJ,GAAG,EAAE,OAAO,EAAE;gBACd,GAAG;aACJ,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,qCAAqC,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;YAC9D,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QAED,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,GAAG,CAAC,SAAS;YAAE,eAAe,EAAE,CAAC;QACrC,GAAG,CAAC,sBAAsB,GAAG,SAAS,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QACnD,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAE3C,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE;YAC3B,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;gBAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9F,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC3B,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAC5C,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,IAAI,OAAO,GAAyB,IAAI,CAAC;QACzC,MAAM,OAAO,GAAG,CAAC,EAA8B,EAAQ,EAAE;YACvD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC;oBAAE,OAAO;gBACf,OAAO,GAAG,CAAC,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC7B,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,CAAC;YACrB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;gBAChC,IAAI,OAAO,KAAK,IAAI;oBAAE,OAAO,GAAG,IAAI,CAAC;YACvC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAY,EAAE,QAAiB,EAAE,EAAE;YACnD,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,EAAE;oBACX,IAAI,CAAC,MAAM;wBAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,CAAC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,GAA0F,CAAC;YAC/F,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,8DAA8D;YACxE,CAAC;YACD,IAAI,GAAG,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,EAAE;oBACX,IAAI,CAAC,MAAM;wBAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;gBACzF,CAAC,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,GAAG,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAClC,OAAO,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACvB,qEAAqE;YACrE,+DAA+D;YAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,CAAC;gBAAC,MAAM,CAAC;oBACP,kBAAkB;gBACpB,CAAC;YACH,CAAC;YACD,GAAG,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,qBAAqB;IACnC,KAAK,MAAM,EAAE,IAAI,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IACD,WAAW,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC"}