@dsh-enhanced/coding-subscription-provider 0.1.2 → 0.1.3

package/lib/codex-direct-auth.js

@@ -0,0 +1,604 @@
+import { constants } from 'node:fs';
+import { lstat, open, realpath, rename, unlink } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { basename, dirname, join, resolve } from 'node:path';
+import { createHash, randomUUID } from 'node:crypto';
+import { attributionHeaders } from '@deepseek-ai/dsh-llm';
+export const CODEX_RESPONSES_URL = 'https://chatgpt.com/backend-api/codex/responses';
+export const CODEX_OAUTH_REFRESH_URL = 'https://auth.openai.com/oauth/token';
+/**
+ * Private Responses routing is version-gated independently of this plugin's
+ * package version. These compatibility identifiers describe this reconstructed
+ * dialect; the deliberately minimal user agent is not byte-identical to the
+ * platform/terminal-qualified value emitted by the official Codex binary.
+ */
+export const CODEX_WIRE_ORIGINATOR = 'codex_cli_rs';
+export const CODEX_WIRE_CLIENT_VERSION = '0.149.1';
+export const CODEX_WIRE_USER_AGENT = `${CODEX_WIRE_ORIGINATOR}/${CODEX_WIRE_CLIENT_VERSION}`;
+const CODEX_OAUTH_CLIENT_ID = 'app_EMoamEEZ73f0CkXaXp7hrann';
+const MAX_AUTH_FILE_BYTES = 1024 * 1024;
+const MAX_REFRESH_RESPONSE_BYTES = 64 * 1024;
+const MAX_TOKEN_BYTES = 64 * 1024;
+const MAX_ACCOUNT_ID_BYTES = 4 * 1024;
+const BEARER_PREFIX = 'Bearer ';
+const MAX_ACCESS_TOKEN_BYTES = MAX_TOKEN_BYTES - Buffer.byteLength(BEARER_PREFIX, 'utf8');
+const MAX_AUTH_READ_ATTEMPTS = 3;
+const MAX_PERSIST_ATTEMPTS = 3;
+export class CodexDirectAuthError extends Error {
+    status;
+    constructor(message, cause = 'subscription-auth', status) {
+        super(message, { cause });
+        this.name = 'CodexDirectAuthError';
+        this.status = status;
+    }
+}
+class CredentialSnapshotChangedError extends Error {
+}
+/** Process-wide without ever placing raw credential material in the map key. */
+const refreshFlights = new Map();
+/**
+ * Narrow credential capability for Codex's fixed private Responses endpoint.
+ * It intentionally does not expose bearer tokens or a generic authenticated fetch.
+ */
+export class CodexCredentialStore {
+    #authFile;
+    #fetch;
+    #refreshTimeoutMs;
+    #now;
+    constructor(options = {}) {
+        const configuredHome = process.env.CODEX_HOME?.trim();
+        const authFile = options.authFile ?? join(configuredHome || join(homedir(), '.codex'), 'auth.json');
+        this.#authFile = resolve(authFile);
+        this.#fetch = options.fetch ?? globalThis.fetch;
+        this.#refreshTimeoutMs = requireRefreshTimeout(options.refreshTimeoutMs ?? 10_000);
+        this.#now = options.now ?? (() => new Date());
+    }
+    async requestResponses(body, signal) {
+        throwIfCallerAborted(signal);
+        const original = await readCredentialFile(this.#authFile);
+        const sessionId = randomUUID();
+        const threadId = randomUUID();
+        const first = await this.#postResponses(body, original, sessionId, threadId, signal);
+        if (first.status !== 401)
+            return first;
+        discardBody(first);
+        throwIfCallerAborted(signal);
+        const onDisk = await readCredentialFile(this.#authFile);
+        if (onDisk.accountId !== original.accountId) {
+            throw new CodexDirectAuthError('Codex authentication account changed during unauthorized recovery');
+        }
+        const credentials = credentialsChanged(original, onDisk)
+            ? onDisk
+            : await waitForSignal(this.#refreshOnce(original), signal);
+        assertSameAccount(original, credentials);
+        return this.#postResponses(body, credentials, sessionId, threadId, signal);
+    }
+    async #postResponses(body, credentials, sessionId, threadId, signal) {
+        throwIfCallerAborted(signal);
+        const headers = createValidatedHeaders(() => ({
+            ...attributionHeaders(),
+            authorization: `${BEARER_PREFIX}${credentials.accessToken}`,
+            'chatgpt-account-id': credentials.accountId,
+            'content-type': 'application/json',
+            accept: 'text/event-stream',
+            'openai-beta': 'responses=v1',
+            originator: CODEX_WIRE_ORIGINATOR,
+            version: CODEX_WIRE_CLIENT_VERSION,
+            'user-agent': CODEX_WIRE_USER_AGENT,
+            'session-id': sessionId,
+            'thread-id': threadId,
+            'x-client-request-id': threadId,
+        }));
+        throwIfCallerAborted(signal);
+        try {
+            return await this.#fetch(CODEX_RESPONSES_URL, {
+                method: 'POST',
+                headers,
+                body,
+                signal,
+                redirect: 'error',
+                credentials: 'omit',
+            });
+        }
+        catch {
+            if (signal.aborted)
+                throwCallerAbortReason(signal);
+            throw new CodexDirectAuthError('Codex private Responses transport failed', 'transport');
+        }
+    }
+    #refreshOnce(snapshot) {
+        const key = refreshFlightKey(this.#authFile, snapshot);
+        const current = refreshFlights.get(key);
+        if (current !== undefined)
+            return current;
+        const promise = this.#refresh(snapshot);
+        refreshFlights.set(key, promise);
+        void promise.finally(() => {
+            if (refreshFlights.get(key) === promise)
+                refreshFlights.delete(key);
+        }).catch(() => { });
+        return promise;
+    }
+    async #refresh(snapshot) {
+        const timeoutSignal = AbortSignal.timeout(this.#refreshTimeoutMs);
+        const headers = createValidatedHeaders(() => ({
+            ...attributionHeaders(),
+            'content-type': 'application/json',
+            accept: 'application/json',
+        }));
+        const body = JSON.stringify({
+            client_id: CODEX_OAUTH_CLIENT_ID,
+            grant_type: 'refresh_token',
+            refresh_token: snapshot.refreshToken,
+        });
+        let response;
+        try {
+            response = await this.#fetch(CODEX_OAUTH_REFRESH_URL, {
+                method: 'POST',
+                headers,
+                body,
+                signal: timeoutSignal,
+                redirect: 'error',
+                credentials: 'omit',
+            });
+        }
+        catch {
+            if (timeoutSignal.aborted) {
+                throw new CodexDirectAuthError('Codex OAuth token refresh timed out', 'timeout');
+            }
+            throw new CodexDirectAuthError('Codex OAuth token refresh transport failed', 'transport');
+        }
+        if (timeoutSignal.aborted) {
+            discardBody(response);
+            throw new CodexDirectAuthError('Codex OAuth token refresh timed out', 'timeout');
+        }
+        if (!response.ok) {
+            discardBody(response);
+            if (response.status === 400 || response.status === 401) {
+                throw new CodexDirectAuthError('Codex OAuth token refresh rejected the local ChatGPT session', 'subscription-auth', response.status);
+            }
+            throw new CodexDirectAuthError(`Codex OAuth token refresh returned HTTP ${response.status}`, 'provider-http', response.status);
+        }
+        let contents;
+        try {
+            contents = await readBoundedBody(response, MAX_REFRESH_RESPONSE_BYTES, timeoutSignal);
+        }
+        catch (error) {
+            if (timeoutSignal.aborted) {
+                throw new CodexDirectAuthError('Codex OAuth token refresh timed out', 'timeout');
+            }
+            if (error instanceof CodexDirectAuthError)
+                throw error;
+            throw new CodexDirectAuthError('Codex OAuth token refresh returned an invalid body', 'protocol');
+        }
+        if (timeoutSignal.aborted) {
+            throw new CodexDirectAuthError('Codex OAuth token refresh timed out', 'timeout');
+        }
+        return this.#persistRefresh(snapshot, parseRefreshResponse(contents));
+    }
+    async #persistRefresh(snapshot, refreshed) {
+        let refreshedAt;
+        try {
+            refreshedAt = this.#now().toISOString();
+        }
+        catch {
+            throw new CodexDirectAuthError('Could not securely update the Codex authentication file');
+        }
+        for (let attempt = 0; attempt < MAX_PERSIST_ATTEMPTS; attempt += 1) {
+            const current = await readCredentialFile(this.#authFile);
+            if (credentialsChanged(snapshot, current))
+                return assertSameAccount(snapshot, current);
+            const tokens = {
+                ...current.document.tokens,
+                access_token: refreshed.accessToken,
+                refresh_token: refreshed.refreshToken ?? current.refreshToken,
+                id_token: refreshed.idToken ?? current.idToken,
+                account_id: current.accountId,
+            };
+            const document = {
+                ...current.document,
+                auth_mode: 'chatgpt',
+                tokens,
+                last_refresh: refreshedAt,
+            };
+            const serialized = JSON.stringify(document);
+            if (Buffer.byteLength(serialized, 'utf8') > MAX_AUTH_FILE_BYTES) {
+                throw new CodexDirectAuthError('Refreshed Codex authentication data exceeds its safety limit');
+            }
+            const directory = dirname(this.#authFile);
+            const temporary = join(directory, `.${basename(this.#authFile)}.dsh-${process.pid}-${randomUUID()}.tmp`);
+            let temporaryExists = false;
+            try {
+                await assertTrustedParent(this.#authFile);
+                const handle = await open(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+                temporaryExists = true;
+                let handleStat;
+                try {
+                    await handle.chmod(0o600);
+                    await handle.writeFile(serialized, 'utf8');
+                    await handle.sync();
+                    handleStat = await handle.stat({ bigint: true });
+                    assertSecureTemporaryFile(handleStat, Buffer.byteLength(serialized, 'utf8'));
+                }
+                finally {
+                    await handle.close();
+                }
+                const temporaryStat = await lstat(temporary, { bigint: true });
+                assertSecureTemporaryFile(temporaryStat, Buffer.byteLength(serialized, 'utf8'));
+                if (temporaryStat.dev !== handleStat.dev || temporaryStat.ino !== handleStat.ino) {
+                    throw new CodexDirectAuthError('Codex authentication temporary file changed before persistence');
+                }
+                const beforeRename = await readCredentialFile(this.#authFile);
+                if (credentialsChanged(snapshot, beforeRename))
+                    return assertSameAccount(snapshot, beforeRename);
+                if (!sameFingerprint(current.fingerprint, beforeRename.fingerprint))
+                    continue;
+                await assertTrustedParent(this.#authFile);
+                const finalTemporaryStat = await lstat(temporary, { bigint: true });
+                assertSecureTemporaryFile(finalTemporaryStat, Buffer.byteLength(serialized, 'utf8'));
+                if (finalTemporaryStat.dev !== handleStat.dev || finalTemporaryStat.ino !== handleStat.ino) {
+                    throw new CodexDirectAuthError('Codex authentication temporary file changed before rename');
+                }
+                /*
+                 * This compare-then-rename is deliberately best-effort across processes.
+                 * Official Codex writers do not share a lock with this plugin, so another
+                 * writer can still win after the final comparison.
+                 */
+                await rename(temporary, this.#authFile);
+                temporaryExists = false;
+                await syncDirectory(directory);
+                return assertSameAccount(snapshot, await readCredentialFile(this.#authFile));
+            }
+            catch (error) {
+                if (error instanceof CodexDirectAuthError)
+                    throw error;
+                throw new CodexDirectAuthError('Could not securely update the Codex authentication file');
+            }
+            finally {
+                if (temporaryExists)
+                    await unlink(temporary).catch(() => { });
+            }
+        }
+        throw new CodexDirectAuthError('Codex authentication file changed too often to update safely');
+    }
+}
+async function readCredentialFile(path) {
+    ensurePosixSecuritySupport();
+    for (let attempt = 0; attempt < MAX_AUTH_READ_ATTEMPTS; attempt += 1) {
+        try {
+            return await readCredentialSnapshot(path);
+        }
+        catch (error) {
+            if (error instanceof CredentialSnapshotChangedError) {
+                if (attempt + 1 < MAX_AUTH_READ_ATTEMPTS)
+                    continue;
+                throw new CodexDirectAuthError('Codex authentication file changed while it was read');
+            }
+            if (error instanceof CodexDirectAuthError)
+                throw error;
+            throw new CodexDirectAuthError('Could not securely read the Codex authentication file');
+        }
+    }
+    throw new CodexDirectAuthError('Codex authentication file changed while it was read');
+}
+async function readCredentialSnapshot(path) {
+    await assertTrustedParent(path);
+    let handle;
+    try {
+        const before = await lstat(path, { bigint: true });
+        assertSecureAuthFile(before);
+        handle = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+        const opened = await handle.stat({ bigint: true });
+        assertSecureAuthFile(opened);
+        if (!sameFingerprint(fingerprint(before), fingerprint(opened))) {
+            throw new CredentialSnapshotChangedError();
+        }
+        const bytes = await readBoundedFile(handle, MAX_AUTH_FILE_BYTES);
+        const after = await handle.stat({ bigint: true });
+        const afterPath = await lstat(path, { bigint: true });
+        assertSecureAuthFile(after);
+        assertSecureAuthFile(afterPath);
+        if (!sameFingerprint(fingerprint(opened), fingerprint(after))
+            || !sameFingerprint(fingerprint(after), fingerprint(afterPath))
+            || after.size !== BigInt(bytes.byteLength)) {
+            throw new CredentialSnapshotChangedError();
+        }
+        await assertTrustedParent(path);
+        const document = parseCredentialDocument(decodeStrictUtf8(bytes));
+        return {
+            document,
+            fingerprint: fingerprint(after),
+            accessToken: document.tokens.access_token,
+            refreshToken: document.tokens.refresh_token,
+            idToken: document.tokens.id_token,
+            accountId: document.tokens.account_id,
+        };
+    }
+    catch (error) {
+        if (error instanceof CredentialSnapshotChangedError || error instanceof CodexDirectAuthError)
+            throw error;
+        throw new CodexDirectAuthError('Could not securely read the Codex authentication file');
+    }
+    finally {
+        await handle?.close().catch(() => { });
+    }
+}
+async function assertTrustedParent(path) {
+    ensurePosixSecuritySupport();
+    const parent = dirname(path);
+    try {
+        const before = await lstat(parent, { bigint: true });
+        assertSecureParent(before);
+        const canonical = await realpath(parent);
+        const after = await lstat(parent, { bigint: true });
+        assertSecureParent(after);
+        if (canonical !== resolve(parent) || before.dev !== after.dev || before.ino !== after.ino) {
+            throw new CodexDirectAuthError('Codex authentication parent must not contain symbolic links');
+        }
+    }
+    catch (error) {
+        if (error instanceof CodexDirectAuthError)
+            throw error;
+        throw new CodexDirectAuthError('Could not securely inspect the Codex authentication parent');
+    }
+}
+function assertSecureParent(stat) {
+    if (!stat.isDirectory() || stat.isSymbolicLink()) {
+        throw new CodexDirectAuthError('Codex authentication parent must be a regular directory');
+    }
+    if (stat.uid !== currentUid()) {
+        throw new CodexDirectAuthError('Codex authentication parent must be owned by the current user');
+    }
+    if ((stat.mode & 18n) !== 0n) {
+        throw new CodexDirectAuthError('Codex authentication parent permissions are unsafe');
+    }
+}
+function assertSecureAuthFile(stat) {
+    if (!stat.isFile() || stat.isSymbolicLink()) {
+        throw new CodexDirectAuthError('Codex authentication path must be a regular file');
+    }
+    if (stat.uid !== currentUid()) {
+        throw new CodexDirectAuthError('Codex authentication file must be owned by the current user');
+    }
+    if ((stat.mode & 63n) !== 0n || stat.nlink !== 1n) {
+        throw new CodexDirectAuthError('Codex authentication file permissions are unsafe');
+    }
+    if (stat.size <= 0n || stat.size > BigInt(MAX_AUTH_FILE_BYTES)) {
+        throw new CodexDirectAuthError('Codex authentication file size is invalid');
+    }
+}
+function assertSecureTemporaryFile(stat, expectedBytes) {
+    if (!stat.isFile() || stat.isSymbolicLink()
+        || stat.uid !== currentUid()
+        || (stat.mode & 511n) !== 384n
+        || stat.nlink !== 1n
+        || stat.size !== BigInt(expectedBytes)) {
+        throw new CodexDirectAuthError('Codex authentication temporary file is unsafe');
+    }
+}
+async function readBoundedFile(handle, maxBytes) {
+    const output = Buffer.allocUnsafe(maxBytes + 1);
+    let total = 0;
+    while (total < output.byteLength) {
+        const part = await handle.read(output, total, output.byteLength - total, null);
+        if (part.bytesRead === 0)
+            break;
+        total += part.bytesRead;
+    }
+    if (total > maxBytes) {
+        throw new CodexDirectAuthError('Codex authentication file exceeded its safety limit');
+    }
+    return output.subarray(0, total);
+}
+function decodeStrictUtf8(contents) {
+    try {
+        return new TextDecoder('utf-8', { fatal: true }).decode(contents);
+    }
+    catch {
+        throw new CodexDirectAuthError('Codex authentication file is not valid UTF-8');
+    }
+}
+function parseCredentialDocument(contents) {
+    let parsed;
+    try {
+        parsed = JSON.parse(contents);
+    }
+    catch {
+        throw new CodexDirectAuthError('Codex authentication file is not valid JSON');
+    }
+    if (!isRecord(parsed) || parsed.auth_mode !== 'chatgpt' || !isRecord(parsed.tokens)) {
+        throw new CodexDirectAuthError('Codex authentication file does not contain a ChatGPT session');
+    }
+    const tokens = parsed.tokens;
+    requireHeaderValue(tokens.access_token, 'access token', MAX_ACCESS_TOKEN_BYTES, 'subscription-auth');
+    requireBoundedString(tokens.refresh_token, 'refresh token', MAX_TOKEN_BYTES, 'subscription-auth');
+    requireBoundedString(tokens.id_token, 'ID token', MAX_TOKEN_BYTES, 'subscription-auth');
+    requireHeaderValue(tokens.account_id, 'account id', MAX_ACCOUNT_ID_BYTES, 'subscription-auth');
+    return parsed;
+}
+function parseRefreshResponse(contents) {
+    let parsed;
+    try {
+        parsed = JSON.parse(contents);
+    }
+    catch {
+        throw new CodexDirectAuthError('Codex OAuth token refresh returned invalid JSON', 'protocol');
+    }
+    if (!isRecord(parsed)) {
+        throw new CodexDirectAuthError('Codex OAuth token refresh returned an invalid payload', 'protocol');
+    }
+    const accessToken = requireHeaderValue(parsed.access_token, 'refreshed access token', MAX_ACCESS_TOKEN_BYTES, 'protocol');
+    const refreshToken = optionalBoundedString(parsed.refresh_token, 'refreshed refresh token', MAX_TOKEN_BYTES, 'protocol');
+    const idToken = optionalBoundedString(parsed.id_token, 'refreshed ID token', MAX_TOKEN_BYTES, 'protocol');
+    return {
+        accessToken,
+        ...(refreshToken === undefined ? {} : { refreshToken }),
+        ...(idToken === undefined ? {} : { idToken }),
+    };
+}
+function requireBoundedString(value, label, maxBytes, cause) {
+    if (typeof value !== 'string' || value.length === 0 || Buffer.byteLength(value, 'utf8') > maxBytes) {
+        throw new CodexDirectAuthError(`Codex ${label} is missing or invalid`, cause);
+    }
+    return value;
+}
+function requireHeaderValue(value, label, maxBytes, cause) {
+    const parsed = requireBoundedString(value, label, maxBytes, cause);
+    for (let index = 0; index < parsed.length; index += 1) {
+        const code = parsed.charCodeAt(index);
+        if (code <= 0x20 || code >= 0x7f) {
+            throw new CodexDirectAuthError(`Codex ${label} cannot be used as a safe HTTP header value`, cause);
+        }
+    }
+    return parsed;
+}
+function optionalBoundedString(value, label, maxBytes, cause) {
+    return value === undefined ? undefined : requireBoundedString(value, label, maxBytes, cause);
+}
+function validatedHeaders(headers) {
+    for (const value of Object.values(headers)) {
+        if (value.length === 0 || Buffer.byteLength(value, 'utf8') > MAX_TOKEN_BYTES) {
+            throw new CodexDirectAuthError('Codex request header is invalid', 'protocol');
+        }
+        for (let index = 0; index < value.length; index += 1) {
+            const code = value.charCodeAt(index);
+            if ((code < 0x20 && code !== 0x09) || code >= 0x7f) {
+                throw new CodexDirectAuthError('Codex request header is unsafe', 'protocol');
+            }
+        }
+    }
+    return headers;
+}
+function createValidatedHeaders(factory) {
+    try {
+        return validatedHeaders(factory());
+    }
+    catch (error) {
+        if (error instanceof CodexDirectAuthError)
+            throw error;
+        throw new CodexDirectAuthError('Could not construct safe Codex request headers', 'protocol');
+    }
+}
+function credentialsChanged(left, right) {
+    return left.accessToken !== right.accessToken
+        || left.refreshToken !== right.refreshToken
+        || left.idToken !== right.idToken
+        || left.accountId !== right.accountId;
+}
+function assertSameAccount(expected, candidate) {
+    if (candidate.accountId !== expected.accountId) {
+        throw new CodexDirectAuthError('Codex authentication account changed during unauthorized recovery');
+    }
+    return candidate;
+}
+function refreshFlightKey(path, snapshot) {
+    const hash = createHash('sha256');
+    for (const value of [path, snapshot.accessToken, snapshot.refreshToken, snapshot.idToken, snapshot.accountId]) {
+        hash.update(String(Buffer.byteLength(value, 'utf8')));
+        hash.update(':');
+        hash.update(value);
+    }
+    return hash.digest('hex');
+}
+function fingerprint(stat) {
+    return {
+        dev: stat.dev,
+        ino: stat.ino,
+        size: stat.size,
+        mtimeNs: stat.mtimeNs,
+        ctimeNs: stat.ctimeNs,
+    };
+}
+function sameFingerprint(left, right) {
+    return left.dev === right.dev
+        && left.ino === right.ino
+        && left.size === right.size
+        && left.mtimeNs === right.mtimeNs
+        && left.ctimeNs === right.ctimeNs;
+}
+function isRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+async function readBoundedBody(response, maxBytes, signal) {
+    const reader = response.body?.getReader();
+    if (reader === undefined)
+        return '';
+    const decoder = new TextDecoder('utf-8', { fatal: true });
+    let total = 0;
+    let output = '';
+    try {
+        while (true) {
+            const part = await waitForSignal(reader.read(), signal);
+            if (part.done)
+                break;
+            total += part.value.byteLength;
+            if (total > maxBytes) {
+                throw new CodexDirectAuthError('Codex OAuth token refresh response exceeded its safety limit', 'protocol');
+            }
+            output += decoder.decode(part.value, { stream: true });
+        }
+        return output + decoder.decode();
+    }
+    catch (error) {
+        void reader.cancel().catch(() => { });
+        if (signal.aborted) {
+            throw new CodexDirectAuthError('Codex OAuth token refresh timed out', 'timeout');
+        }
+        if (error instanceof CodexDirectAuthError)
+            throw error;
+        throw new CodexDirectAuthError('Could not read the Codex OAuth token refresh response', 'protocol');
+    }
+    finally {
+        try {
+            reader.releaseLock();
+        }
+        catch { }
+    }
+}
+function discardBody(response) {
+    try {
+        void response.body?.cancel().catch(() => { });
+    }
+    catch { }
+}
+async function syncDirectory(path) {
+    const handle = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_DIRECTORY);
+    try {
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+function waitForSignal(promise, signal) {
+    if (signal.aborted)
+        return Promise.reject(signal.reason);
+    return new Promise((resolvePromise, rejectPromise) => {
+        const aborted = () => rejectPromise(signal.reason);
+        signal.addEventListener('abort', aborted, { once: true });
+        void promise.then(resolvePromise, rejectPromise).finally(() => signal.removeEventListener('abort', aborted));
+    });
+}
+function requireRefreshTimeout(value) {
+    if (!Number.isSafeInteger(value) || value <= 0 || value > 2_147_483_647) {
+        throw new CodexDirectAuthError('Codex OAuth refresh timeout is invalid');
+    }
+    return value;
+}
+function ensurePosixSecuritySupport() {
+    if (process.platform === 'win32' || typeof process.getuid !== 'function') {
+        throw new CodexDirectAuthError('Codex direct authentication requires POSIX file permissions');
+    }
+}
+function currentUid() {
+    ensurePosixSecuritySupport();
+    return BigInt(process.getuid());
+}
+function throwIfCallerAborted(signal) {
+    if (signal.aborted)
+        throwCallerAbortReason(signal);
+}
+function throwCallerAbortReason(signal) {
+    throw signal.reason ?? new Error('Codex direct request aborted', { cause: 'abort' });
+}
+//# sourceMappingURL=codex-direct-auth.js.map

package/lib/codex-direct-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-direct-auth.js","sourceRoot":"","sources":["../src/codex-direct-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAoB,MAAM,SAAS,CAAA;AACrD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC5D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAEzD,MAAM,CAAC,MAAM,mBAAmB,GAAG,iDAAiD,CAAA;AACpF,MAAM,CAAC,MAAM,uBAAuB,GAAG,qCAAqC,CAAA;AAC5E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,cAAc,CAAA;AACnD,MAAM,CAAC,MAAM,yBAAyB,GAAG,SAAS,CAAA;AAClD,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,qBAAqB,IAAI,yBAAyB,EAAE,CAAA;AAE5F,MAAM,qBAAqB,GAAG,8BAA8B,CAAA;AAC5D,MAAM,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAA;AACvC,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,CAAA;AAC5C,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAA;AACjC,MAAM,oBAAoB,GAAG,CAAC,GAAG,IAAI,CAAA;AACrC,MAAM,aAAa,GAAG,SAAS,CAAA;AAC/B,MAAM,sBAAsB,GAAG,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;AACzF,MAAM,sBAAsB,GAAG,CAAC,CAAA;AAChC,MAAM,oBAAoB,GAAG,CAAC,CAAA;AAqD9B,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,MAAM,CAAoB;IAEnC,YACE,OAAe,EACf,QAAgC,mBAAmB,EACnD,MAAe;QAEf,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QACzB,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAA;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAED,MAAM,8BAA+B,SAAQ,KAAK;CAAG;AAErD,gFAAgF;AAChF,MAAM,cAAc,GAAG,IAAI,GAAG,EAAuC,CAAA;AAErE;;;GAGG;AACH,MAAM,OAAO,oBAAoB;IACtB,SAAS,CAAQ;IACjB,MAAM,CAAO;IACb,iBAAiB,CAAQ;IACzB,IAAI,CAAY;IAEzB,YAAY,UAAuC,EAAE;QACnD,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAA;QACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAA;QACnG,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;QAC/C,IAAI,CAAC,iBAAiB,GAAG,qBAAqB,CAAC,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC,CAAA;QAClF,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IAC/C,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAY,EAAE,MAAmB;QACtD,oBAAoB,CAAC,MAAM,CAAC,CAAA;QAC5B,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACzD,MAAM,SAAS,GAAG,UAAU,EAAE,CAAA;QAC9B,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAA;QAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;QACpF,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,KAAK,CAAA;QACtC,WAAW,CAAC,KAAK,CAAC,CAAA;QAClB,oBAAoB,CAAC,MAAM,CAAC,CAAA;QAE5B,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACvD,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC5C,MAAM,IAAI,oBAAoB,CAAC,mEAAmE,CAAC,CAAA;QACrG,CAAC;QACD,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC;YACtD,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;QAC5D,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;QACxC,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC5E,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,IAAY,EACZ,WAA+B,EAC/B,SAAiB,EACjB,QAAgB,EAChB,MAAmB;QAEnB,oBAAoB,CAAC,MAAM,CAAC,CAAA;QAC5B,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5C,GAAG,kBAAkB,EAAE;YACvB,aAAa,EAAE,GAAG,aAAa,GAAG,WAAW,CAAC,WAAW,EAAE;YAC3D,oBAAoB,EAAE,WAAW,CAAC,SAAS;YAC3C,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,mBAAmB;YAC3B,aAAa,EAAE,cAAc;YAC7B,UAAU,EAAE,qBAAqB;YACjC,OAAO,EAAE,yBAAyB;YAClC,YAAY,EAAE,qBAAqB;YACnC,YAAY,EAAE,SAAS;YACvB,WAAW,EAAE,QAAQ;YACrB,qBAAqB,EAAE,QAAQ;SAChC,CAAC,CAAC,CAAA;QACH,oBAAoB,CAAC,MAAM,CAAC,CAAA;QAC5B,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE;gBAC5C,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI;gBACJ,MAAM;gBACN,QAAQ,EAAE,OAAO;gBACjB,WAAW,EAAE,MAAM;aACpB,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,MAAM,CAAC,OAAO;gBAAE,sBAAsB,CAAC,MAAM,CAAC,CAAA;YAClD,MAAM,IAAI,oBAAoB,CAAC,0CAA0C,EAAE,WAAW,CAAC,CAAA;QACzF,CAAC;IACH,CAAC;IAED,YAAY,CAAC,QAA4B;QACvC,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QACtD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACvC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAA;QAEzC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACvC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAChC,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;YACxB,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;gBAAE,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACrE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAClB,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAA4B;QACzC,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QACjE,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5C,GAAG,kBAAkB,EAAE;YACvB,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;SAC3B,CAAC,CAAC,CAAA;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,SAAS,EAAE,qBAAqB;YAChC,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,QAAQ,CAAC,YAAY;SACrC,CAAC,CAAA;QACF,IAAI,QAAkB,CAAA;QACtB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE;gBACpD,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI;gBACJ,MAAM,EAAE,aAAa;gBACrB,QAAQ,EAAE,OAAO;gBACjB,WAAW,EAAE,MAAM;aACpB,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC1B,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,EAAE,SAAS,CAAC,CAAA;YAClF,CAAC;YACD,MAAM,IAAI,oBAAoB,CAAC,4CAA4C,EAAE,WAAW,CAAC,CAAA;QAC3F,CAAC;QAED,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;YAC1B,WAAW,CAAC,QAAQ,CAAC,CAAA;YACrB,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,EAAE,SAAS,CAAC,CAAA;QAClF,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,WAAW,CAAC,QAAQ,CAAC,CAAA;YACrB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvD,MAAM,IAAI,oBAAoB,CAC5B,8DAA8D,EAC9D,mBAAmB,EACnB,QAAQ,CAAC,MAAM,CAChB,CAAA;YACH,CAAC;YACD,MAAM,IAAI,oBAAoB,CAC5B,2CAA2C,QAAQ,CAAC,MAAM,EAAE,EAC5D,eAAe,EACf,QAAQ,CAAC,MAAM,CAChB,CAAA;QACH,CAAC;QAED,IAAI,QAAgB,CAAA;QACpB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,0BAA0B,EAAE,aAAa,CAAC,CAAA;QACvF,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC1B,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,EAAE,SAAS,CAAC,CAAA;YAClF,CAAC;YACD,IAAI,KAAK,YAAY,oBAAoB;gBAAE,MAAM,KAAK,CAAA;YACtD,MAAM,IAAI,oBAAoB,CAAC,oDAAoD,EAAE,UAAU,CAAC,CAAA;QAClG,CAAC;QACD,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,EAAE,SAAS,CAAC,CAAA;QAClF,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAA;IACvE,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,QAA4B,EAAE,SAAwB;QAC1E,IAAI,WAAmB,CAAA;QACvB,IAAI,CAAC;YACH,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,oBAAoB,CAAC,yDAAyD,CAAC,CAAA;QAC3F,CAAC;QAED,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,oBAAoB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACnE,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACxD,IAAI,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC;gBAAE,OAAO,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;YAEtF,MAAM,MAAM,GAAqB;gBAC/B,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAC1B,YAAY,EAAE,SAAS,CAAC,WAAW;gBACnC,aAAa,EAAE,SAAS,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY;gBAC7D,QAAQ,EAAE,SAAS,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO;gBAC9C,UAAU,EAAE,OAAO,CAAC,SAAS;aAC9B,CAAA;YACD,MAAM,QAAQ,GAAuB;gBACnC,GAAG,OAAO,CAAC,QAAQ;gBACnB,SAAS,EAAE,SAAS;gBACpB,MAAM;gBACN,YAAY,EAAE,WAAW;aAC1B,CAAA;YACD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;YAC3C,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,mBAAmB,EAAE,CAAC;gBAChE,MAAM,IAAI,oBAAoB,CAAC,8DAA8D,CAAC,CAAA;YAChG,CAAC;YAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACzC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC,CAAA;YACxG,IAAI,eAAe,GAAG,KAAK,CAAA;YAC3B,IAAI,CAAC;gBACH,MAAM,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;gBACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,SAAS,EACT,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAChF,KAAK,CACN,CAAA;gBACD,eAAe,GAAG,IAAI,CAAA;gBACtB,IAAI,UAAuB,CAAA;gBAC3B,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;oBACzB,MAAM,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;oBAC1C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;oBACnB,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;oBAChD,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAA;gBAC9E,CAAC;wBAAS,CAAC;oBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;gBACtB,CAAC;gBAED,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC9D,yBAAyB,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAA;gBAC/E,IAAI,aAAa,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG,IAAI,aAAa,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG,EAAE,CAAC;oBACjF,MAAM,IAAI,oBAAoB,CAAC,gEAAgE,CAAC,CAAA;gBAClG,CAAC;gBAED,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;gBAC7D,IAAI,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC;oBAAE,OAAO,iBAAiB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;gBAChG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,WAAW,CAAC;oBAAE,SAAQ;gBAE7E,MAAM,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;gBACzC,MAAM,kBAAkB,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;gBACnE,yBAAyB,CAAC,kBAAkB,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAA;gBACpF,IAAI,kBAAkB,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG,IAAI,kBAAkB,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG,EAAE,CAAC;oBAC3F,MAAM,IAAI,oBAAoB,CAAC,2DAA2D,CAAC,CAAA;gBAC7F,CAAC;gBAED;;;;mBAIG;gBACH,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;gBACvC,eAAe,GAAG,KAAK,CAAA;gBACvB,MAAM,aAAa,CAAC,SAAS,CAAC,CAAA;gBAC9B,OAAO,iBAAiB,CAAC,QAAQ,EAAE,MAAM,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;YAC9E,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,IAAI,KAAK,YAAY,oBAAoB;oBAAE,MAAM,KAAK,CAAA;gBACtD,MAAM,IAAI,oBAAoB,CAAC,yDAAyD,CAAC,CAAA;YAC3F,CAAC;oBAAS,CAAC;gBACT,IAAI,eAAe;oBAAE,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAC9D,CAAC;QACH,CAAC;QAED,MAAM,IAAI,oBAAoB,CAAC,8DAA8D,CAAC,CAAA;IAChG,CAAC;CACF;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAY;IAC5C,0BAA0B,EAAE,CAAA;IAC5B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,sBAAsB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACrE,IAAI,CAAC;YACH,OAAO,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAA;QAC3C,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;gBACpD,IAAI,OAAO,GAAG,CAAC,GAAG,sBAAsB;oBAAE,SAAQ;gBAClD,MAAM,IAAI,oBAAoB,CAAC,qDAAqD,CAAC,CAAA;YACvF,CAAC;YACD,IAAI,KAAK,YAAY,oBAAoB;gBAAE,MAAM,KAAK,CAAA;YACtD,MAAM,IAAI,oBAAoB,CAAC,uDAAuD,CAAC,CAAA;QACzF,CAAC;IACH,CAAC;IACD,MAAM,IAAI,oBAAoB,CAAC,qDAAqD,CAAC,CAAA;AACvF,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,IAAY;IAChD,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,MAAoD,CAAA;IACxD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAClD,oBAAoB,CAAC,MAAM,CAAC,CAAA;QAC5B,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACpE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAClD,oBAAoB,CAAC,MAAM,CAAC,CAAA;QAC5B,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,8BAA8B,EAAE,CAAA;QAC5C,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;QAChE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACjD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACrD,oBAAoB,CAAC,KAAK,CAAC,CAAA;QAC3B,oBAAoB,CAAC,SAAS,CAAC,CAAA;QAC/B,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;eACxD,CAAC,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;eAC5D,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,8BAA8B,EAAE,CAAA;QAC5C,CAAC;QACD,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAA;QAE/B,MAAM,QAAQ,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAA;QACjE,OAAO;YACL,QAAQ;YACR,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC;YAC/B,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY;YACzC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa;YAC3C,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ;YACjC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU;SACtC,CAAA;IACH,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,8BAA8B,IAAI,KAAK,YAAY,oBAAoB;YAAE,MAAM,KAAK,CAAA;QACzG,MAAM,IAAI,oBAAoB,CAAC,uDAAuD,CAAC,CAAA;IACzF,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACvC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAC7C,0BAA0B,EAAE,CAAA;IAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACpD,kBAAkB,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAA;QACxC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACnD,kBAAkB,CAAC,KAAK,CAAC,CAAA;QACzB,IAAI,SAAS,KAAK,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;YAC1F,MAAM,IAAI,oBAAoB,CAAC,6DAA6D,CAAC,CAAA;QAC/F,CAAC;IACH,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,oBAAoB;YAAE,MAAM,KAAK,CAAA;QACtD,MAAM,IAAI,oBAAoB,CAAC,4DAA4D,CAAC,CAAA;IAC9F,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAiB;IAC3C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,oBAAoB,CAAC,yDAAyD,CAAC,CAAA;IAC3F,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,UAAU,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,oBAAoB,CAAC,+DAA+D,CAAC,CAAA;IACjG,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,GAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,oBAAoB,CAAC,oDAAoD,CAAC,CAAA;IACtF,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAiB;IAC7C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,oBAAoB,CAAC,kDAAkD,CAAC,CAAA;IACpF,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,UAAU,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,oBAAoB,CAAC,6DAA6D,CAAC,CAAA;IAC/F,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,GAAK,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,oBAAoB,CAAC,kDAAkD,CAAC,CAAA;IACpF,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,oBAAoB,CAAC,2CAA2C,CAAC,CAAA;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAiB,EAAE,aAAqB;IACzE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;WACtC,IAAI,CAAC,GAAG,KAAK,UAAU,EAAE;WACzB,CAAC,IAAI,CAAC,IAAI,GAAG,IAAM,CAAC,KAAK,IAAM;WAC/B,IAAI,CAAC,KAAK,KAAK,EAAE;WACjB,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,oBAAoB,CAAC,+CAA+C,CAAC,CAAA;IACjF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,MAAwC,EACxC,QAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAA;IAC/C,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,OAAO,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,GAAG,KAAK,EAAE,IAAI,CAAC,CAAA;QAC9E,IAAI,IAAI,CAAC,SAAS,KAAK,CAAC;YAAE,MAAK;QAC/B,KAAK,IAAI,IAAI,CAAC,SAAS,CAAA;IACzB,CAAC;IACD,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,oBAAoB,CAAC,qDAAqD,CAAC,CAAA;IACvF,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;AAClC,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAoB;IAC5C,IAAI,CAAC;QACH,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,oBAAoB,CAAC,8CAA8C,CAAC,CAAA;IAChF,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,oBAAoB,CAAC,6CAA6C,CAAC,CAAA;IAC/E,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,oBAAoB,CAAC,8DAA8D,CAAC,CAAA;IAChG,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC5B,kBAAkB,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,sBAAsB,EAAE,mBAAmB,CAAC,CAAA;IACpG,oBAAoB,CAAC,MAAM,CAAC,aAAa,EAAE,eAAe,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAA;IACjG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAA;IACvF,kBAAkB,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,CAAC,CAAA;IAC9F,OAAO,MAA4B,CAAA;AACrC,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,oBAAoB,CAAC,iDAAiD,EAAE,UAAU,CAAC,CAAA;IAC/F,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,oBAAoB,CAAC,uDAAuD,EAAE,UAAU,CAAC,CAAA;IACrG,CAAC;IACD,MAAM,WAAW,GAAG,kBAAkB,CACpC,MAAM,CAAC,YAAY,EACnB,wBAAwB,EACxB,sBAAsB,EACtB,UAAU,CACX,CAAA;IACD,MAAM,YAAY,GAAG,qBAAqB,CACxC,MAAM,CAAC,aAAa,EACpB,yBAAyB,EACzB,eAAe,EACf,UAAU,CACX,CAAA;IACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,QAAQ,EAAE,oBAAoB,EAAE,eAAe,EAAE,UAAU,CAAC,CAAA;IACzG,OAAO;QACL,WAAW;QACX,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;QACvD,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;KAC9C,CAAA;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAc,EACd,KAAa,EACb,QAAgB,EAChB,KAA6B;IAE7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;QACnG,MAAM,IAAI,oBAAoB,CAAC,SAAS,KAAK,wBAAwB,EAAE,KAAK,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc,EACd,KAAa,EACb,QAAgB,EAChB,KAA6B;IAE7B,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;IAClE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QACrC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,oBAAoB,CAAC,SAAS,KAAK,6CAA6C,EAAE,KAAK,CAAC,CAAA;QACpG,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAc,EACd,KAAa,EACb,QAAgB,EAChB,KAA6B;IAE7B,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;AAC9F,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAyC;IACjE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;YAC7E,MAAM,IAAI,oBAAoB,CAAC,iCAAiC,EAAE,UAAU,CAAC,CAAA;QAC/E,CAAC;QACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;YACpC,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;gBACnD,MAAM,IAAI,oBAAoB,CAAC,gCAAgC,EAAE,UAAU,CAAC,CAAA;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAA+C;IAE/C,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAA;IACpC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,oBAAoB;YAAE,MAAM,KAAK,CAAA;QACtD,MAAM,IAAI,oBAAoB,CAAC,gDAAgD,EAAE,UAAU,CAAC,CAAA;IAC9F,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAwB,EAAE,KAAyB;IAC7E,OAAO,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;WACxC,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;WACxC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;WAC9B,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAA;AACzC,CAAC;AAED,SAAS,iBAAiB,CACxB,QAA4B,EAC5B,SAA6B;IAE7B,IAAI,SAAS,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC/C,MAAM,IAAI,oBAAoB,CAAC,mEAAmE,CAAC,CAAA;IACrG,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,QAA4B;IAClE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACjC,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9G,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;QACrD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC3B,CAAC;AAED,SAAS,WAAW,CAAC,IAAiB;IACpC,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAqB,EAAE,KAAsB;IACpE,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;WACxB,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;WACtB,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;WACxB,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;WAC9B,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAA;AACrC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAAkB,EAClB,QAAgB,EAChB,MAAmB;IAEnB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAA;IACzC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACnC,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAA;YACvD,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAK;YACpB,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAA;YAC9B,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACrB,MAAM,IAAI,oBAAoB,CAAC,8DAA8D,EAAE,UAAU,CAAC,CAAA;YAC5G,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,CAAC;QACD,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAA;IAClC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACpC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,EAAE,SAAS,CAAC,CAAA;QAClF,CAAC;QACD,IAAI,KAAK,YAAY,oBAAoB;YAAE,MAAM,KAAK,CAAA;QACtD,MAAM,IAAI,oBAAoB,CAAC,uDAAuD,EAAE,UAAU,CAAC,CAAA;IACrG,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,WAAW,EAAE,CAAA;QACtB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,QAAkB;IACrC,IAAI,CAAC;QACH,KAAK,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC9C,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,WAAW,CAAC,CAAA;IAClG,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;IACrB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAI,OAAmB,EAAE,MAAmB;IAChE,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACxD,OAAO,IAAI,OAAO,CAAI,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;QACtD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAClD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,KAAK,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IAC9G,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,aAAa,EAAE,CAAC;QACxE,MAAM,IAAI,oBAAoB,CAAC,wCAAwC,CAAC,CAAA;IAC1E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,0BAA0B;IACjC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACzE,MAAM,IAAI,oBAAoB,CAAC,6DAA6D,CAAC,CAAA;IAC/F,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IACjB,0BAA0B,EAAE,CAAA;IAC5B,OAAO,MAAM,CAAC,OAAO,CAAC,MAAO,EAAE,CAAC,CAAA;AAClC,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAmB;IAC/C,IAAI,MAAM,CAAC,OAAO;QAAE,sBAAsB,CAAC,MAAM,CAAC,CAAA;AACpD,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAmB;IACjD,MAAM,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;AACtF,CAAC"}