@eco-incorp/sauce 0.99.5 → 0.99.7

package/sdk/dist/cli/password.js

@@ -0,0 +1,148 @@
+/**
+ * Where a keystore's or a wallet's password comes from: exactly one source, named on the command
+ * line, or else a prompt at the terminal. There is no `--password <value>` flag — a value on the
+ * command line lands in shell history and the process list — and nothing is read implicitly:
+ *
+ *  - `--password-env <NAME>`: the variable NAME, and no other. THE `sauce` COMMAND'S ONE
+ *    DELIBERATE READ OF THE ENVIRONMENT, and only of the variable the user names: an agent's
+ *    password lives in its `.env` or its secret store, which hands it to the process that way.
+ *  - `--password-file <path>`: the file's text, one trailing newline dropped. A file that others
+ *    can read or write is refused, as ssh refuses a private key others can read.
+ *  - `--password-command "<command>"`: what the command prints, one trailing newline dropped — a
+ *    secret manager's CLI (`pass show sauce`, `op read op://…`, `security find-generic-password
+ *    -w …`). It runs with no stdin, and a failure says only its exit status: its output may be the
+ *    password, or part of it.
+ *  - otherwise a hidden prompt at the terminal, asked twice when a wallet is being created.
+ *
+ * The password is registered as a secret (`signer.ts#secret`) the moment it is read, before
+ * anything can fail, so no message, log or result can carry it. Node-only, like all of `cli/`.
+ */
+import { CliError, UsageError } from "./args.js";
+import { secret } from "./signer.js";
+/** The shortest password a wallet is created with. */
+export const MIN_PASSWORD = 8;
+const ENV_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
+/** The one source `flags` name, or the prompt when they name none. */
+export function passwordSource(flags) {
+    const given = [
+        flags.env === undefined ? [] : ["--password-env"],
+        flags.file === undefined ? [] : ["--password-file"],
+        flags.command === undefined ? [] : ["--password-command"],
+    ].flat();
+    if (given.length > 1) {
+        throw new UsageError(`give one password source, not ${given.join(" and ")}`);
+    }
+    if (flags.env !== undefined) {
+        if (!ENV_NAME.test(flags.env)) {
+            throw new UsageError(`--password-env takes the NAME of an environment variable (letters, digits and _), not ` +
+                "its value");
+        }
+        return { from: "env", name: flags.env };
+    }
+    if (flags.file !== undefined)
+        return { from: "file", path: flags.file };
+    if (flags.command !== undefined) {
+        if (flags.command.trim() === "")
+            throw new UsageError("--password-command is empty");
+        return { from: "command", command: flags.command };
+    }
+    return { from: "prompt" };
+}
+/** How a source is named in a message: its flag and the variable or file, never a value. */
+export function describeSource(source) {
+    switch (source.from) {
+        case "env":
+            return `--password-env ${source.name}`;
+        case "file":
+            return `--password-file ${source.path}`;
+        case "command":
+            // The command itself is not repeated: it may carry an argument someone would rather not see.
+            return "--password-command";
+        case "prompt":
+            return "the terminal";
+    }
+}
+/** One trailing newline, as `echo` and a text editor leave it. */
+const withoutNewline = (text) => text.replace(/\r?\n$/, "");
+/** Whether permission bits let anyone but the owner read or write. */
+const sharedMode = (mode) => (mode & 0o077) !== 0;
+/** The password `source` gives, registered as a secret before anything else happens to it. */
+export async function readPassword(source, io, options) {
+    const password = await fromSource(source, io, options);
+    if (password === "") {
+        throw new UsageError(`${describeSource(source)} gives an empty password`);
+    }
+    if (options.creating === true && [...password].length < MIN_PASSWORD) {
+        throw new UsageError(`${describeSource(source)} gives a password of under ${MIN_PASSWORD} characters: a ` +
+            "wallet's password protects its key on disk, so use a longer one");
+    }
+    return password;
+}
+async function fromSource(source, io, options) {
+    switch (source.from) {
+        case "env": {
+            const value = io.readEnv(source.name);
+            if (value !== undefined)
+                secret(value);
+            if (value === undefined) {
+                throw new UsageError(`--password-env ${source.name}: the variable is not set`);
+            }
+            return value;
+        }
+        case "file": {
+            let mode;
+            try {
+                mode = io.fileMode(source.path);
+            }
+            catch (error) {
+                throw unreadable(source.path, error);
+            }
+            if (mode !== undefined && sharedMode(mode)) {
+                throw new CliError(`--password-file ${source.path} can be read or written by others (mode ` +
+                    `${(mode & 0o777).toString(8).padStart(3, "0")}): a password file must be yours ` +
+                    `alone. Run \`chmod 600 ${source.path}\`, then try again`);
+            }
+            let text;
+            try {
+                text = io.readText(source.path);
+            }
+            catch (error) {
+                throw unreadable(source.path, error);
+            }
+            secret(text.trim());
+            const password = withoutNewline(text);
+            secret(password);
+            return password;
+        }
+        case "command": {
+            const ran = io.capture(source.command);
+            // Whatever it printed is a secret, finished or not: a failure may still have printed it.
+            secret(ran.stdout.trim());
+            if (ran.status === null) {
+                throw new CliError(`--password-command did not finish${ran.error === undefined ? "" : ` (${ran.error})`}; ` +
+                    "its output is not shown");
+            }
+            if (ran.status !== 0) {
+                throw new CliError(`--password-command exited with status ${ran.status}; its output is not shown`);
+            }
+            const password = withoutNewline(ran.stdout);
+            secret(password);
+            return password;
+        }
+        case "prompt": {
+            const first = await io.promptPassword(`Password for ${options.what}: `);
+            secret(first);
+            if (options.creating !== true)
+                return first;
+            const again = await io.promptPassword(`The same password again: `);
+            if (again !== first)
+                throw new CliError("the two passwords differ: nothing was written");
+            return first;
+        }
+    }
+}
+function unreadable(path, error) {
+    const code = error.code;
+    return new CliError(`--password-file ${path}: ${code === "ENOENT" ? "no such file" : "unreadable"}`);
+}
+//# sourceMappingURL=password.js.map

package/sdk/dist/cli/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../src/cli/password.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAsCrC,sDAAsD;AACtD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAE9B,MAAM,QAAQ,GAAG,0BAA0B,CAAC;AAE5C,sEAAsE;AACtE,MAAM,UAAU,cAAc,CAAC,KAAoB;IACjD,MAAM,KAAK,GAAG;QACZ,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;QACjD,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC;QACnD,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC;KAC1D,CAAC,IAAI,EAAE,CAAC;IACT,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,UAAU,CAAC,iCAAiC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,UAAU,CAClB,wFAAwF;gBACtF,WAAW,CACd,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IACxE,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,MAAM,IAAI,UAAU,CAAC,6BAA6B,CAAC,CAAC;QAErF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,KAAK;YACR,OAAO,kBAAkB,MAAM,CAAC,IAAI,EAAE,CAAC;QACzC,KAAK,MAAM;YACT,OAAO,mBAAmB,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1C,KAAK,SAAS;YACZ,6FAA6F;YAC7F,OAAO,oBAAoB,CAAC;QAC9B,KAAK,QAAQ;YACX,OAAO,cAAc,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,cAAc,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAE5E,sEAAsE;AACtE,MAAM,UAAU,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;AASnE,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAsB,EACtB,EAAc,EACd,OAA4B;IAE5B,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,UAAU,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;QACrE,MAAM,IAAI,UAAU,CAClB,GAAG,cAAc,CAAC,MAAM,CAAC,8BAA8B,YAAY,iBAAiB;YAClF,iEAAiE,CACpE,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,MAAsB,EACtB,EAAc,EACd,OAA4B;IAE5B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,UAAU,CAAC,kBAAkB,MAAM,CAAC,IAAI,2BAA2B,CAAC,CAAC;YACjF,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,IAAI,IAAwB,CAAC;YAC7B,IAAI,CAAC;gBACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,QAAQ,CAChB,mBAAmB,MAAM,CAAC,IAAI,0CAA0C;oBACtE,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,mCAAmC;oBACjF,0BAA0B,MAAM,CAAC,IAAI,oBAAoB,CAC5D,CAAC;YACJ,CAAC;YACD,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACvC,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACpB,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAEjB,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvC,yFAAyF;YACzF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1B,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACxB,MAAM,IAAI,QAAQ,CAChB,oCAAoC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,KAAK,GAAG,IAAI;oBACtF,yBAAyB,CAC5B,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,QAAQ,CAChB,yCAAyC,GAAG,CAAC,MAAM,2BAA2B,CAC/E,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC;YAEjB,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,cAAc,CAAC,gBAAgB,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;YACxE,MAAM,CAAC,KAAK,CAAC,CAAC;YACd,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC;YAC5C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAAC;YACnE,IAAI,KAAK,KAAK,KAAK;gBAAE,MAAM,IAAI,QAAQ,CAAC,+CAA+C,CAAC,CAAC;YAEzF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,KAAc;IAC9C,MAAM,IAAI,GAAI,KAA2B,CAAC,IAAI,CAAC;IAE/C,OAAO,IAAI,QAAQ,CACjB,mBAAmB,IAAI,KAAK,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,EAAE,CAChF,CAAC;AACJ,CAAC"}

package/sdk/dist/cli/policy.d.ts

@@ -0,0 +1,130 @@
+import { type Address as SvmAddress, type createSolanaRpc, type Transaction } from "@solana/kit";
+import { type Address, type Hex, type PublicClient } from "viem";
+import { type CanonicalChain } from "../chains/canonical.js";
+import { CliError } from "./args.js";
+import type { TxRequest } from "./chain.js";
+import type { WalletInfo } from "./wallets.js";
+type Rpc = ReturnType<typeof createSolanaRpc>;
+/** An amount as a policy writes it: whole units, or base units (`…n`). */
+type Amount = {
+    readonly units: string;
+} | {
+    readonly base: bigint;
+};
+interface Limit {
+    readonly perTransaction?: Amount;
+    readonly perDay?: Amount;
+}
+export interface Policy {
+    readonly path: string;
+    readonly chains?: readonly CanonicalChain[];
+    /** Lowercase 0x hex, or a base58 Solana address as written. */
+    readonly to?: readonly string[];
+    readonly native?: Limit;
+    /** By the key the file names it with: a symbol (uppercase) or an address. */
+    readonly tokens: ReadonlyMap<string, Limit>;
+}
+/** A policy refused: which limit, and why, in one sentence. */
+export declare class PolicyRefusal extends CliError {
+    /** The limit, as the policy file spells its path: `tokens.USDC.perDay`, `chains`, `to`. */
+    readonly limit: string;
+    constructor(
+    /** The limit, as the policy file spells its path: `tokens.USDC.perDay`, `chains`, `to`. */
+    limit: string, message: string);
+}
+/** A policy file's text, checked whole: an unknown field is an error, never ignored. */
+export declare function parsePolicy(text: string, path: string): Policy;
+/**
+ * The wallet's policy, `undefined` when it has none. A file that others may write is refused: they
+ * could loosen it.
+ */
+export declare function readPolicy(info: WalletInfo): Policy | undefined;
+/** What a send result says of a wallet with no policy. */
+export declare const noPolicyNote: (info: WalletInfo) => string;
+/** One asset leaving the wallet's accounts. */
+interface Outflow {
+    /** An EVM token's checksummed address, a Solana mint, or "native". */
+    readonly token: string;
+    readonly symbol?: string;
+    readonly decimals?: number;
+    readonly amount: bigint;
+}
+interface Approval extends Outflow {
+    readonly spender: string;
+}
+/** What one transaction spends, as measured. */
+export interface Measured {
+    readonly chain: CanonicalChain;
+    /** Where it goes: an EVM `to`, or the programs a Solana transaction calls. */
+    readonly to: readonly string[];
+    readonly native: Outflow;
+    readonly tokens: readonly Outflow[];
+    readonly approvals: readonly Approval[];
+    /** Why native or token movements could not be measured, when they could not. */
+    readonly unmeasured: {
+        readonly native?: string;
+        readonly tokens?: string;
+    };
+}
+/** A log as `eth_simulateV1` returns it. */
+interface Log {
+    readonly address: Address;
+    readonly topics: readonly Hex[];
+    readonly data: Hex;
+}
+/** One call's outcome in a rehearsal of a plan: whether it succeeded, and its logs. */
+export interface Rehearsed {
+    readonly status: "success" | "failure";
+    readonly logs: readonly Log[];
+    /** What it returned, or reverted with. */
+    readonly data: Hex;
+}
+/**
+ * `calls` rehearsed in order from `wallet` in one `eth_simulateV1` block, state carried from each to
+ * the next and native transfers traced; `undefined` where the endpoint does not run it.
+ */
+export declare function rehearsePlan(client: PublicClient, wallet: Address, calls: readonly TxRequest[]): Promise<readonly Rehearsed[] | undefined>;
+/**
+ * What `calls`, sent in order from `wallet`, move out of the wallet and the Pot each cooks on: one
+ * {@link Measured} per call, from `rehearsed` (a {@link rehearsePlan} of them; rehearsed here when
+ * not given). Where the endpoint does not run `eth_simulateV1` the movements are unmeasured; a call
+ * that fails is refused, as a send would be.
+ */
+export declare function measureEvm(client: PublicClient, chain: CanonicalChain, wallet: Address, calls: readonly TxRequest[], rehearsed?: readonly Rehearsed[]): Promise<Measured[]>;
+/**
+ * What a signed Solana `transaction` moves out of `wallet` and the Pots it cooks on, as a
+ * simulation that reports its writable accounts shows it; a transaction that would fail is refused.
+ */
+export declare function measureSvm(rpc: Rpc, chain: CanonicalChain, wallet: SvmAddress, transaction: Transaction): Promise<Measured>;
+/** A reservation in the ledger, closed once the transaction is sent or is not. */
+export interface Reservation {
+    sent(tx: string): void;
+    released(why: string): void;
+}
+/** A wallet's guard: its policy (if any), and the ledger and lock beside it. */
+export declare class SendGuard {
+    readonly wallet: WalletInfo;
+    readonly policy: Policy | undefined;
+    private readonly ledger;
+    private readonly lock;
+    constructor(wallet: WalletInfo, policy: Policy | undefined);
+    /** Every check before a send that does not need what the transaction moves. */
+    gate(chain: CanonicalChain): void;
+    /**
+     * Checks a plan's transactions against the policy before any is sent: each one's limits, and
+     * the day's totals with the earlier ones counted. Nothing is reserved; each is again when sent.
+     */
+    preflight(measured: readonly Measured[]): Promise<void>;
+    /** Checks one transaction and reserves what it spends, in one step under the lock. */
+    private reserve;
+    /** Measures and reserves one EVM transaction, just before it is sent. */
+    evm(client: PublicClient, tx: TxRequest): Promise<Reservation>;
+    /** Measures and reserves one signed Solana transaction, just before it is sent. */
+    svm(rpc: Rpc, transaction: Transaction): Promise<Reservation>;
+}
+/** Guards the wallet `info`: from now on every send from its address passes its policy. */
+export declare function guardWallet(info: WalletInfo, policy: Policy | undefined): SendGuard;
+/** The guard of the wallet at `address`, if this process unlocked one there. */
+export declare const guardOf: (address: string) => SendGuard | undefined;
+export {};
+//# sourceMappingURL=policy.d.ts.map

package/sdk/dist/cli/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/cli/policy.ts"],"names":[],"mappings":"AAsDA,OAAO,EAML,KAAK,OAAO,IAAI,UAAU,EAC1B,KAAK,eAAe,EACpB,KAAK,WAAW,EACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAOL,KAAK,OAAO,EACZ,KAAK,GAAG,EACR,KAAK,YAAY,EAClB,MAAM,MAAM,CAAC;AAEd,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAM3E,OAAO,EAAE,QAAQ,EAAc,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAI5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,KAAK,GAAG,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC;AAM9C,0EAA0E;AAC1E,KAAK,MAAM,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErE,UAAU,KAAK;IACb,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CAC7C;AAED,+DAA+D;AAC/D,qBAAa,aAAc,SAAQ,QAAQ;IAEvC,2FAA2F;IAC3F,QAAQ,CAAC,KAAK,EAAE,MAAM;;IADtB,2FAA2F;IAClF,KAAK,EAAE,MAAM,EACtB,OAAO,EAAE,MAAM;CAIlB;AAmCD,wFAAwF;AACxF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAiE9D;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAgB/D;AAED,0DAA0D;AAC1D,eAAO,MAAM,YAAY,GAAI,MAAM,UAAU,KAAG,MAEyC,CAAC;AAsB1F,+CAA+C;AAC/C,UAAU,OAAO;IACf,sEAAsE;IACtE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,QAAS,SAAQ,OAAO;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,gDAAgD;AAChD,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAC;IACxC,gFAAgF;IAChF,QAAQ,CAAC,UAAU,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7E;AAUD,4CAA4C;AAC5C,UAAU,GAAG;IACX,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,EAAE,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC;CACpB;AAmBD,uFAAuF;AACvF,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,EAAE,CAAC;IAC9B,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,SAAS,SAAS,EAAE,GAC1B,OAAO,CAAC,SAAS,SAAS,EAAE,GAAG,SAAS,CAAC,CA6B3C;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,SAAS,SAAS,EAAE,EAC3B,SAAS,CAAC,EAAE,SAAS,SAAS,EAAE,GAC/B,OAAO,CAAC,QAAQ,EAAE,CAAC,CAkGrB;AAUD;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,GAAG,EACR,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,UAAU,EAClB,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,QAAQ,CAAC,CA8FnB;AAyOD,kFAAkF;AAClF,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAYD,gFAAgF;AAChF,qBAAa,SAAS;IACpB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;gBAElB,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS;IAQ1D,+EAA+E;IAC/E,IAAI,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI;IAIjC;;;OAGG;IACG,SAAS,CAAC,QAAQ,EAAE,SAAS,QAAQ,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB7D,sFAAsF;YACxE,OAAO;IAwBrB,yEAAyE;IACnE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IASpE,mFAAmF;IAC7E,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;CAQpE;AAKD,2FAA2F;AAC3F,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAKnF;AAKD,gFAAgF;AAChF,eAAO,MAAM,OAAO,GAAI,SAAS,MAAM,KAAG,SAAS,GAAG,SAAuC,CAAC"}