@executor-js/sdk 1.4.29 → 1.4.30

package/dist/chunk-BZNIRSMG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/blob.ts","../src/connections.ts","../src/plugin.ts","../src/tool-result.ts","../src/core-tools.ts","../src/elicitation.ts","../src/secrets.ts","../src/oauth-helpers.ts","../src/oauth-discovery.ts","../src/oauth-service.ts","../src/schema-refs.ts","../src/vendor/json-schema-to-typescript/compat.ts","../src/vendor/json-schema-to-typescript/formatter.ts","../src/vendor/json-schema-to-typescript/types/AST.ts","../src/vendor/json-schema-to-typescript/types/JSONSchema.ts","../src/vendor/json-schema-to-typescript/utils.ts","../src/vendor/json-schema-to-typescript/generator.ts","../src/vendor/json-schema-to-typescript/typesOfSchema.ts","../src/vendor/json-schema-to-typescript/applySchemaTyping.ts","../src/vendor/json-schema-to-typescript/normalizer.ts","../src/vendor/json-schema-to-typescript/optimizer.ts","../src/vendor/json-schema-to-typescript/parser.ts","../src/vendor/json-schema-to-typescript/resolver.ts","../src/vendor/json-schema-to-typescript/validator.ts","../src/vendor/json-schema-to-typescript/linker.ts","../src/vendor/json-schema-to-typescript/optionValidator.ts","../src/vendor/json-schema-to-typescript/index.ts","../src/schema-types.ts","../src/hosted-http-client.ts","../src/executor.ts","../src/scope.ts"],"sourcesContent":["// ---------------------------------------------------------------------------\n// BlobStore — the seam for large, opaque, write-once data. Blobs are stored\n// in FumaDB with their own lifecycle and namespacing, separate from source\n// metadata and plugin-owned config rows.\n//\n// Plugins see a `PluginBlobStore` that's already namespaced to the\n// plugin id and bound to the executor's scope stack. Reads fall through\n// the stack in order (innermost first, first hit wins); writes and\n// deletes require an explicit scope id naming where the operation\n// should land. That mirrors the secrets API — shadowing by key on\n// read, explicit target on write.\n//\n// Error channel is `StorageError` — blobs only do read/write/delete, so\n// they never produce `UniqueViolationError`. The HTTP edge translates\n// `StorageError` to the opaque public `InternalError({ traceId })`.\n// ---------------------------------------------------------------------------\n\nimport { Effect } from \"effect\";\n\nimport { StorageError, type IFumaClient } from \"./fuma-runtime\";\n\nexport interface BlobStore {\n  readonly get: (namespace: string, key: string) => Effect.Effect<string | null, StorageError>;\n  /** Multi-namespace lookup for a single key. Backends issue one query\n   *  (`WHERE namespace IN (...) AND key = ?`) and return the hits keyed\n   *  by namespace — the caller applies its own precedence. Lets\n   *  `pluginBlobStore` walk the scope stack in O(1) round-trips instead\n   *  of one per scope. */\n  readonly getMany: (\n    namespaces: readonly string[],\n    key: string,\n  ) => Effect.Effect<ReadonlyMap<string, string>, StorageError>;\n  readonly put: (\n    namespace: string,\n    key: string,\n    value: string,\n  ) => Effect.Effect<void, StorageError>;\n  readonly delete: (namespace: string, key: string) => Effect.Effect<void, StorageError>;\n  readonly has: (namespace: string, key: string) => Effect.Effect<boolean, StorageError>;\n}\n\nexport interface PluginBlobStore {\n  /** Walk the scope stack (innermost first) and return the first\n   *  non-null value for `key`. */\n  readonly get: (key: string) => Effect.Effect<string | null, StorageError>;\n  /** Write `value` under `key` at the named scope. Scope must be one\n   *  of the executor's configured scopes. */\n  readonly put: (\n    key: string,\n    value: string,\n    options: { readonly scope: string },\n  ) => Effect.Effect<void, StorageError>;\n  /** Delete `key` at the named scope. */\n  readonly delete: (\n    key: string,\n    options: { readonly scope: string },\n  ) => Effect.Effect<void, StorageError>;\n  /** Walk the scope stack and return true if any scope has a value for `key`. */\n  readonly has: (key: string) => Effect.Effect<boolean, StorageError>;\n}\n\nconst assertScope = (scope: string, scopes: readonly string[]): Effect.Effect<void, StorageError> =>\n  scopes.includes(scope)\n    ? Effect.void\n    : Effect.fail(\n        new StorageError({\n          message:\n            `Blob write targets scope \"${scope}\" which is not in the ` +\n            `executor's scope stack [${scopes.join(\", \")}].`,\n          cause: undefined,\n        }),\n      );\n\nconst nsFor = (scope: string, pluginId: string) => `${scope}/${pluginId}`;\n\n/**\n * Bind a `BlobStore` to a specific scope stack and plugin id. Reads\n * fall through the stack; writes require an explicit scope. Used by\n * the executor to build the `blobs` field handed to each plugin's\n * `storage` factory.\n */\nexport const pluginBlobStore = (\n  store: BlobStore,\n  scopes: readonly string[],\n  pluginId: string,\n): PluginBlobStore => ({\n  get: (key) =>\n    Effect.gen(function* () {\n      const namespaces = scopes.map((s) => nsFor(s, pluginId));\n      const hits = yield* store.getMany(namespaces, key);\n      if (hits.size === 0) return null;\n      for (const ns of namespaces) {\n        const v = hits.get(ns);\n        if (v !== undefined) return v;\n      }\n      return null;\n    }),\n  put: (key, value, options) =>\n    Effect.flatMap(assertScope(options.scope, scopes), () =>\n      store.put(nsFor(options.scope, pluginId), key, value),\n    ),\n  delete: (key, options) =>\n    Effect.flatMap(assertScope(options.scope, scopes), () =>\n      store.delete(nsFor(options.scope, pluginId), key),\n    ),\n  has: (key) =>\n    store\n      .getMany(\n        scopes.map((s) => nsFor(s, pluginId)),\n        key,\n      )\n      .pipe(Effect.map((hits) => hits.size > 0)),\n});\n\n/**\n * Minimal in-memory BlobStore — good for tests and trivial hosts. Real\n * backends (filesystem, S3/R2, SQLite-table-backed) implement the same\n * interface.\n *\n * Every method is `Effect<_, never>` — a pure in-memory Map can't fail.\n * `never` is assignable to `StorageError`, so the result still fits the\n * `BlobStore` interface.\n */\nexport const makeInMemoryBlobStore = (): BlobStore => {\n  const store = new Map<string, string>();\n  const k = (ns: string, key: string) => `${ns}::${key}`;\n  return {\n    get: (ns, key) => Effect.sync(() => store.get(k(ns, key)) ?? null),\n    getMany: (namespaces, key) =>\n      Effect.sync(() => {\n        const hits = new Map<string, string>();\n        for (const ns of namespaces) {\n          const v = store.get(k(ns, key));\n          if (v !== undefined) hits.set(ns, v);\n        }\n        return hits;\n      }),\n    put: (ns, key, value) =>\n      Effect.sync(() => {\n        store.set(k(ns, key), value);\n      }),\n    delete: (ns, key) =>\n      Effect.sync(() => {\n        store.delete(k(ns, key));\n      }),\n    has: (ns, key) => Effect.sync(() => store.has(k(ns, key))),\n  };\n};\n\nconst blobId = (namespace: string, key: string): string => JSON.stringify([namespace, key]);\n\ntype BlobRow = {\n  readonly id: string;\n  readonly namespace: string;\n  readonly key: string;\n  readonly value: string;\n};\n\nconst toBlobRows = (rows: unknown): readonly BlobRow[] => rows as readonly BlobRow[];\n\nexport const makeFumaBlobStore = (fuma: IFumaClient): BlobStore => ({\n  get: (namespace, key) =>\n    fuma\n      .use(\"blob.get\", (db) =>\n        db.findFirst(\"blob\", {\n          where: (b) => b.and(b(\"namespace\", \"=\", namespace), b(\"key\", \"=\", key)),\n        }),\n      )\n      .pipe(Effect.map((row) => row as BlobRow | null))\n      .pipe(\n        Effect.map((row) => row?.value ?? null),\n        Effect.mapError(\n          (cause) => new StorageError({ message: \"FumaDB blob operation failed\", cause }),\n        ),\n      ),\n  getMany: (namespaces, key) =>\n    namespaces.length === 0\n      ? Effect.succeed(new Map<string, string>())\n      : fuma\n          .use(\"blob.getMany\", (db) =>\n            db.findMany(\"blob\", {\n              where: (b) => b.and(b(\"namespace\", \"in\", [...namespaces]), b(\"key\", \"=\", key)),\n            }),\n          )\n          .pipe(Effect.map(toBlobRows))\n          .pipe(\n            Effect.map((rows) => {\n              const out = new Map<string, string>();\n              for (const row of rows) out.set(row.namespace, row.value);\n              return out;\n            }),\n            Effect.mapError(\n              (cause) => new StorageError({ message: \"FumaDB blob operation failed\", cause }),\n            ),\n          ),\n  put: (namespace, key, value) =>\n    Effect.gen(function* () {\n      const id = blobId(namespace, key);\n      const existing = (yield* fuma.use(\"blob.findForPut\", (db) =>\n        db.findFirst(\"blob\", { where: (b) => b(\"id\", \"=\", id) }),\n      )) as BlobRow | null;\n      if (existing) {\n        yield* fuma.use(\"blob.update\", (db) =>\n          db.updateMany(\"blob\", { where: (b) => b(\"id\", \"=\", id), set: { value } }),\n        );\n        return;\n      }\n      yield* fuma.use(\"blob.create\", (db) => db.create(\"blob\", { id, namespace, key, value }));\n    }).pipe(\n      Effect.mapError(\n        (cause) => new StorageError({ message: \"FumaDB blob operation failed\", cause }),\n      ),\n    ),\n  delete: (namespace, key) =>\n    fuma\n      .use(\"blob.delete\", (db) =>\n        db.deleteMany(\"blob\", { where: (b) => b(\"id\", \"=\", blobId(namespace, key)) }),\n      )\n      .pipe(\n        Effect.asVoid,\n        Effect.mapError(\n          (cause) => new StorageError({ message: \"FumaDB blob operation failed\", cause }),\n        ),\n      ),\n  has: (namespace, key) =>\n    fuma\n      .use(\"blob.has\", (db) =>\n        db.count(\"blob\", { where: (b) => b(\"id\", \"=\", blobId(namespace, key)) }),\n      )\n      .pipe(\n        Effect.map((count) => count > 0),\n        Effect.mapError(\n          (cause) => new StorageError({ message: \"FumaDB blob operation failed\", cause }),\n        ),\n      ),\n});\n","import { Data, Effect, Schema } from \"effect\";\n\nimport { ConnectionId, ScopeId, SecretId } from \"./ids\";\n\n// ---------------------------------------------------------------------------\n// Connections — the product-level \"sign-in state\" primitive. A Connection\n// owns one or more backing `secret` rows (access + refresh tokens) via\n// `secret.owned_by_connection_id`; the user sees the Connection, the SDK\n// handles every refresh internally. Plugins register a refresh handler\n// per provider via `plugin.connectionProviders`, mirroring the shape of\n// `plugin.secretProviders` for ordinary secret backends.\n// ---------------------------------------------------------------------------\n\n/** Minimal JSON-object carrier for the plugin-owned `providerState`\n *  blob. The SDK never inspects its shape; plugins encode/decode their\n *  own structure. Never sensitive — that's what the secret rows are\n *  for. */\nexport const ConnectionProviderState = Schema.Record(Schema.String, Schema.Unknown);\nexport type ConnectionProviderState = typeof ConnectionProviderState.Type;\n\n// ---------------------------------------------------------------------------\n// ConnectionRef — metadata projection returned from `ctx.connections.list`\n// / `executor.connections.list`. Holds token secret ids (so a plugin can\n// reference them from its source config) but not token values.\n// ---------------------------------------------------------------------------\n\nexport const ConnectionRef = Schema.Struct({\n  id: ConnectionId,\n  scopeId: ScopeId,\n  provider: Schema.String,\n  identityLabel: Schema.NullOr(Schema.String),\n  accessTokenSecretId: SecretId,\n  refreshTokenSecretId: Schema.NullOr(SecretId),\n  /** Epoch ms when the access token expires; null if not declared. */\n  expiresAt: Schema.NullOr(Schema.Number),\n  /** OAuth-style scope string as returned by the token endpoint. Named\n   *  `oauthScope` to avoid collision with the executor scope id. */\n  oauthScope: Schema.NullOr(Schema.String),\n  providerState: Schema.NullOr(ConnectionProviderState),\n  createdAt: Schema.Date,\n  updatedAt: Schema.Date,\n});\nexport type ConnectionRef = typeof ConnectionRef.Type;\n\n// ---------------------------------------------------------------------------\n// CreateConnectionInput — what a plugin passes to create a fresh\n// Connection after a successful OAuth exchange. The SDK writes the\n// backing secret rows and the connection row in one transaction, and\n// stamps `owned_by_connection_id` so `ctx.secrets.list` automatically\n// hides them from the bare-secrets UI.\n//\n// `provider` must match a registered `ConnectionProvider.key`. The SDK\n// validates this at create time so a typo surfaces immediately instead\n// of the first time a refresh is attempted.\n// ---------------------------------------------------------------------------\n\nexport const TokenMaterial = Schema.Struct({\n  /** Target secret id. Plugins typically derive this from the source id\n   *  + a stable suffix (e.g. `${sourceId}.access_token`). */\n  secretId: SecretId,\n  /** Display name stamped on the secret row. Only visible to code — the\n   *  Connections UI hides connection-owned secrets. */\n  name: Schema.String,\n  value: Schema.String,\n});\nexport type TokenMaterial = typeof TokenMaterial.Type;\n\nexport const CreateConnectionInput = Schema.Struct({\n  id: ConnectionId,\n  /** Executor scope id that will own this connection + its backing\n   *  secrets. This is the sharing boundary: a user scope is personal,\n   *  an org/workspace scope is shared with descendants. */\n  scope: ScopeId,\n  provider: Schema.String,\n  identityLabel: Schema.NullOr(Schema.String),\n  accessToken: TokenMaterial,\n  refreshToken: Schema.NullOr(TokenMaterial),\n  expiresAt: Schema.NullOr(Schema.Number),\n  /** OAuth-style scope string. Distinct from the executor scope above. */\n  oauthScope: Schema.NullOr(Schema.String),\n  providerState: Schema.NullOr(ConnectionProviderState),\n});\nexport type CreateConnectionInput = typeof CreateConnectionInput.Type;\n\n// ---------------------------------------------------------------------------\n// ConnectionRefreshError — typed error surface for refresh handlers.\n// Plugins either return a fresh token envelope or fail with this error;\n// the SDK rethrows it from `ctx.connections.accessToken` callers.\n// ---------------------------------------------------------------------------\n\nexport class ConnectionRefreshError extends Data.TaggedError(\"ConnectionRefreshError\")<{\n  readonly connectionId: ConnectionId;\n  readonly message: string;\n  /**\n   * Set by providers when the refresh failed in a way that the stored\n   * refresh token cannot recover from (RFC 6749 §5.2 `invalid_grant`\n   * — the AS has revoked the grant, the user changed their password,\n   * the refresh token rotated out from under us, ...). The SDK\n   * translates this into a `ConnectionReauthRequiredError` so callers\n   * can prompt the user to sign in again instead of silently retrying.\n   */\n  readonly reauthRequired?: boolean;\n  readonly cause?: unknown;\n}> {}\n\n// ---------------------------------------------------------------------------\n// ConnectionRefreshInput — what the SDK hands to a provider's `refresh`\n// callback. Includes the current refresh-token value (already resolved\n// from the secret row) and the opaque providerState blob so handlers\n// don't need to hit secrets themselves.\n// ---------------------------------------------------------------------------\n\nexport interface ConnectionRefreshInput {\n  readonly connectionId: ConnectionId;\n  readonly scopeId: ScopeId;\n  readonly identityLabel: string | null;\n  /** Resolved refresh token value, or null if the connection has none. */\n  readonly refreshToken: string | null;\n  /** Plugin-owned blob persisted at create / previous refresh. */\n  readonly providerState: ConnectionProviderState | null;\n  /** OAuth scope string from the last token issuance. */\n  readonly oauthScope: string | null;\n}\n\n// ---------------------------------------------------------------------------\n// ConnectionRefreshResult — what a provider's `refresh` callback returns\n// on success. The SDK writes the new token values through the secret\n// providers, updates `expires_at` / `scope` / `provider_state` on the\n// connection row, and returns the fresh access token to the caller.\n//\n// `refreshToken` is optional: if the AS rotates refresh tokens it's\n// present, if the AS issues long-lived refresh tokens it's absent. The\n// SDK updates the refresh secret only when a new value is supplied.\n// ---------------------------------------------------------------------------\n\nexport interface ConnectionRefreshResult {\n  readonly accessToken: string;\n  readonly refreshToken?: string | null;\n  readonly expiresAt?: number | null;\n  readonly oauthScope?: string | null;\n  readonly providerState?: ConnectionProviderState | null;\n}\n\n// ---------------------------------------------------------------------------\n// ConnectionProvider — plugin contribution. Registered via\n// `plugin.connectionProviders`. One per refresh strategy (oauth2\n// authorization-code, oauth2 client-credentials, per-provider custom,\n// etc). Keyed by `key`; the connection row's `provider` column\n// references this key.\n//\n// Omitting `refresh` means \"tokens minted by this provider never\n// refresh\" — accessToken(id) just returns the stored value. Useful for\n// long-lived API tokens wrapped as connections for UX consistency.\n// ---------------------------------------------------------------------------\n\nexport interface ConnectionProvider {\n  readonly key: string;\n  readonly refresh?: (\n    input: ConnectionRefreshInput,\n  ) => Effect.Effect<ConnectionRefreshResult, ConnectionRefreshError>;\n}\n\n// ---------------------------------------------------------------------------\n// UpdateConnectionTokensInput — for flows that re-exchange tokens out\n// of band (e.g. an OAuth re-auth where the user signs in again). The\n// SDK overwrites the backing secrets and updates the connection row in\n// one transaction.\n// ---------------------------------------------------------------------------\n\nexport const UpdateConnectionTokensInput = Schema.Struct({\n  id: ConnectionId,\n  accessToken: Schema.String,\n  refreshToken: Schema.optional(Schema.NullOr(Schema.String)),\n  expiresAt: Schema.optional(Schema.NullOr(Schema.Number)),\n  oauthScope: Schema.optional(Schema.NullOr(Schema.String)),\n  providerState: Schema.optional(Schema.NullOr(ConnectionProviderState)),\n  identityLabel: Schema.optional(Schema.NullOr(Schema.String)),\n});\nexport type UpdateConnectionTokensInput = typeof UpdateConnectionTokensInput.Type;\n\nexport const RemoveConnectionInput = Schema.Struct({\n  id: ConnectionId,\n  /** Scope id whose connection row and owned token secrets should be removed. */\n  targetScope: ScopeId,\n});\nexport type RemoveConnectionInput = typeof RemoveConnectionInput.Type;\n","import { Effect, type Schema as EffectSchema } from \"effect\";\nimport type { Context, Layer } from \"effect\";\nimport type { HttpClient } from \"effect/unstable/http\";\nimport type { HttpApiGroup } from \"effect/unstable/httpapi\";\nimport type { StandardJSONSchemaV1, StandardSchemaV1 } from \"@standard-schema/spec\";\nimport type { FumaTables, IFumaClient, StorageFailure, TablesToFumaSchema } from \"./fuma-runtime\";\n\nimport type { PluginBlobStore } from \"./blob\";\nimport type {\n  ConnectionProvider,\n  ConnectionRef,\n  ConnectionRefreshError,\n  CreateConnectionInput,\n  RemoveConnectionInput,\n  UpdateConnectionTokensInput,\n} from \"./connections\";\nimport type {\n  CredentialBindingRef,\n  CredentialBindingsFacade,\n  RemoveSourceCredentialBindingInput,\n  SetSourceCredentialBindingInput,\n  SourceCredentialBindingSlotInput,\n  SourceCredentialBindingSourceInput,\n} from \"./credential-bindings\";\nimport type { DefinitionsInput, SourceInput, ToolAnnotations, ToolRow } from \"./core-schema\";\nimport type { ScopeId } from \"./ids\";\nimport type { RefreshSourceInput, RemoveSourceInput, Source, SourceDetectionResult } from \"./types\";\nimport type {\n  ElicitationDeclinedError,\n  ElicitationHandler,\n  ElicitationRequest,\n  ElicitationResponse,\n} from \"./elicitation\";\nimport type {\n  ConnectionInUseError,\n  ConnectionNotFoundError,\n  ConnectionProviderNotRegisteredError,\n  ConnectionReauthRequiredError,\n  ConnectionRefreshNotSupportedError,\n  SecretInUseError,\n  SecretOwnedByConnectionError,\n  SourceRemovalNotAllowedError,\n} from \"./errors\";\nimport type { OAuthService } from \"./oauth\";\nimport type { PluginStorageFacade } from \"./plugin-storage\";\nimport type {\n  CreateToolPolicyInput,\n  RemoveToolPolicyInput,\n  ToolPolicy,\n  UpdateToolPolicyInput,\n} from \"./policies\";\nimport type { Scope } from \"./scope\";\nimport type { RemoveSecretInput, SecretProvider, SecretRef, SetSecretInput } from \"./secrets\";\nimport type { Usage, UsagesForConnectionInput, UsagesForSecretInput } from \"./usages\";\n\n// ---------------------------------------------------------------------------\n// StorageDeps — backing passed to a plugin's `storage` factory. Plugins see\n// FumaDB through the Effect boundary, narrowed to their declared tables. Scope\n// behavior is domain code, not hidden adapter behavior: reads should include\n// `scopedWhere(...)` and writes stamp an explicit `scope_id`.\n// ---------------------------------------------------------------------------\n\nexport interface StorageDeps<TTables extends FumaTables | undefined = FumaTables> {\n  /**\n   * Precedence-ordered scope stack visible to this executor. Innermost\n   * first. Reads on scoped tables walk every scope; writes require the\n   * plugin to name a target scope explicitly (via `scope_id` on the\n   * row payload, via `options.scope` on the blob store).\n   */\n  readonly scopes: readonly Scope[];\n  /** Plugin-facing FumaDB query boundary. */\n  readonly fuma: IFumaClient<TablesToFumaSchema<TTables>>;\n  readonly blobs: PluginBlobStore;\n  readonly pluginStorage: PluginStorageFacade;\n}\n\n// ---------------------------------------------------------------------------\n// Elicit — suspends the fiber, calls the invoke-time elicitation\n// handler, resumes with the user's response. Available on both static\n// tool handlers and dynamic `invokeTool` handlers. Threaded through\n// the executor from `createExecutor({ onElicitation })`.\n// ---------------------------------------------------------------------------\n\nexport type Elicit = (\n  request: ElicitationRequest,\n) => Effect.Effect<ElicitationResponse, ElicitationDeclinedError>;\n\n// ---------------------------------------------------------------------------\n// PluginCtx — threaded into every extension method, static tool handler,\n// and dynamic tool handler. No raw adapter, no raw blobs. Core writes\n// go through `core.sources.register` / `core.definitions.register`.\n// ---------------------------------------------------------------------------\n\nexport interface PluginCtx<TStore = unknown> {\n  /**\n   * Precedence-ordered scope stack visible to this executor. Innermost\n   * first. Plugins that write scoped rows must pick an element of\n   * `scopes` as the `scope`/`scope_id` they stamp; reads should apply\n   * explicit FumaDB scope predicates or use `ctx.secrets` / `ctx.connections`\n   * helpers.\n   */\n  readonly scopes: readonly Scope[];\n  readonly storage: TStore;\n  readonly pluginStorage: PluginStorageFacade;\n  readonly httpClientLayer: Layer.Layer<HttpClient.HttpClient>;\n\n  readonly core: {\n    readonly sources: {\n      readonly register: (input: SourceInput) => Effect.Effect<void, StorageFailure>;\n      readonly unregister: (input: RemoveSourceInput) => Effect.Effect<void, StorageFailure>;\n      readonly update: (input: {\n        readonly id: string;\n        readonly scope: string;\n        readonly name?: string;\n        readonly url?: string | null;\n      }) => Effect.Effect<void, StorageFailure>;\n      readonly list: () => Effect.Effect<readonly Source[], StorageFailure>;\n      readonly remove: (\n        input: RemoveSourceInput,\n      ) => Effect.Effect<void, SourceRemovalNotAllowedError | StorageFailure>;\n      readonly refresh: (input: RefreshSourceInput) => Effect.Effect<void, StorageFailure>;\n      readonly detect: (\n        url: string,\n      ) => Effect.Effect<readonly SourceDetectionResult[], StorageFailure>;\n      readonly configure: (input: {\n        readonly source: {\n          readonly id: string;\n          readonly scope: ScopeId | string;\n        };\n        readonly scope: ScopeId | string;\n        readonly type?: string;\n        readonly config: unknown;\n      }) => Effect.Effect<unknown, StorageFailure>;\n      readonly listBindings: (\n        input: SourceCredentialBindingSourceInput,\n      ) => Effect.Effect<readonly CredentialBindingRef[], StorageFailure>;\n      readonly resolveBinding: (\n        input: SourceCredentialBindingSlotInput,\n      ) => Effect.Effect<CredentialBindingRef | null, StorageFailure>;\n      readonly setBinding: (\n        input: SetSourceCredentialBindingInput,\n      ) => Effect.Effect<CredentialBindingRef, StorageFailure>;\n      readonly removeBinding: (\n        input: RemoveSourceCredentialBindingInput,\n      ) => Effect.Effect<void, StorageFailure>;\n      /** Source configuration declarations for every plugin that\n       *  supports `executor.sources.configure`. Exposed to core tools\n       *  so agent-facing configuration surfaces can describe the\n       *  plugin-specific payload shape before dispatching a write. */\n      readonly configureSchemas: () => readonly SourceConfigureSchema[];\n      readonly presets: () => readonly SourcePresetCatalogEntry[];\n    };\n    readonly policies: {\n      readonly list: () => Effect.Effect<readonly ToolPolicy[], StorageFailure>;\n      readonly create: (input: CreateToolPolicyInput) => Effect.Effect<ToolPolicy, StorageFailure>;\n      readonly update: (input: UpdateToolPolicyInput) => Effect.Effect<ToolPolicy, StorageFailure>;\n      readonly remove: (input: RemoveToolPolicyInput) => Effect.Effect<void, StorageFailure>;\n    };\n    /** Register shared JSON-schema `$defs` for a source. Tool\n     *  input/output schemas registered via `sources.register` can carry\n     *  `$ref: \"#/$defs/X\"` pointers; `executor.tools.schema(toolId)`\n     *  returns matching reachable defs alongside the schema roots. Call\n     *  inside the same `ctx.transaction` as `sources.register` for atomicity.\n     *  Replaces any existing defs for the given sourceId. */\n    readonly definitions: {\n      readonly register: (input: DefinitionsInput) => Effect.Effect<void, StorageFailure>;\n    };\n  };\n\n  readonly secrets: {\n    readonly get: (\n      id: string,\n    ) => Effect.Effect<string | null, SecretOwnedByConnectionError | StorageFailure>;\n    readonly getAtScope: (\n      id: string,\n      scope: string,\n    ) => Effect.Effect<string | null, SecretOwnedByConnectionError | StorageFailure>;\n    /** List user-visible secrets. Connection-owned secrets (rows with\n     *  `owned_by_connection_id` set) are filtered out so they don't\n     *  clutter the UI — users see the Connection instead. */\n    readonly list: () => Effect.Effect<\n      readonly {\n        readonly id: string;\n        readonly scopeId: ScopeId;\n        readonly name: string;\n        readonly provider: string;\n      }[],\n      StorageFailure\n    >;\n    readonly status: (id: string) => Effect.Effect<\"resolved\" | \"missing\", StorageFailure>;\n    readonly usages: (id: string) => Effect.Effect<readonly Usage[], StorageFailure>;\n    readonly providers: () => Effect.Effect<readonly string[], never>;\n    /** Write a secret value through a provider. Used by plugins that\n     *  mint secrets on behalf of the user (OAuth2 token storage,\n     *  interactive onboarding flows). Normally writes go through\n     *  `executor.secrets.set` on the host surface, but OAuth2 refresh\n     *  and one-shot token capture from plugin-owned flows need it here\n     *  too. Same routing rules as the host-level setter. */\n    readonly set: (input: SetSecretInput) => Effect.Effect<SecretRef, StorageFailure>;\n    /** Delete a secret from its pinned provider and the core table.\n     *  Rejects with `SecretOwnedByConnectionError` if the row is owned\n     *  by a connection — callers must go through `connections.remove`\n     *  to drop the whole sign-in. Rejects with `SecretInUseError` if\n     *  any plugin reports the secret as in use; the caller should ask\n     *  the user to detach the listed sources first. */\n    readonly remove: (\n      input: RemoveSecretInput,\n    ) => Effect.Effect<void, SecretOwnedByConnectionError | SecretInUseError | StorageFailure>;\n  };\n\n  /** Connections — product-level sign-in state. Owns backing secret\n   *  rows via `secret.owned_by_connection_id`. Plugins call\n   *  `connections.accessToken(id)` at invoke time to get a guaranteed-\n   *  fresh token (the SDK handles refresh via the registered provider\n   *  keyed by `connection.provider`). */\n  readonly connections: {\n    readonly get: (id: string) => Effect.Effect<ConnectionRef | null, StorageFailure>;\n    readonly getAtScope: (\n      id: string,\n      scope: string,\n    ) => Effect.Effect<ConnectionRef | null, StorageFailure>;\n    readonly list: () => Effect.Effect<readonly ConnectionRef[], StorageFailure>;\n    readonly usages: (id: string) => Effect.Effect<readonly Usage[], StorageFailure>;\n    readonly providers: () => Effect.Effect<readonly string[], never>;\n    readonly create: (\n      input: CreateConnectionInput,\n    ) => Effect.Effect<ConnectionRef, ConnectionProviderNotRegisteredError | StorageFailure>;\n    readonly updateTokens: (\n      input: UpdateConnectionTokensInput,\n    ) => Effect.Effect<ConnectionRef, ConnectionNotFoundError | StorageFailure>;\n    readonly setIdentityLabel: (\n      id: string,\n      label: string | null,\n    ) => Effect.Effect<void, ConnectionNotFoundError | StorageFailure>;\n    /** Get a guaranteed-fresh access token. Calls the provider's\n     *  `refresh` handler if `expires_at` is in the past / within the\n     *  refresh skew window. */\n    readonly accessToken: (\n      id: string,\n    ) => Effect.Effect<\n      string,\n      | ConnectionNotFoundError\n      | ConnectionProviderNotRegisteredError\n      | ConnectionRefreshNotSupportedError\n      | ConnectionReauthRequiredError\n      | ConnectionRefreshError\n      | StorageFailure\n    >;\n    readonly accessTokenAtScope: (\n      id: string,\n      scope: string,\n    ) => Effect.Effect<\n      string,\n      | ConnectionNotFoundError\n      | ConnectionProviderNotRegisteredError\n      | ConnectionRefreshNotSupportedError\n      | ConnectionReauthRequiredError\n      | ConnectionRefreshError\n      | StorageFailure\n    >;\n    /** Refuses with `ConnectionInUseError` if any plugin reports the\n     *  connection as in use. Caller surfaces the `usages` list to the\n     *  user. */\n    readonly remove: (\n      input: RemoveConnectionInput,\n    ) => Effect.Effect<void, ConnectionInUseError | StorageFailure>;\n  };\n\n  readonly credentialBindings: CredentialBindingsFacade;\n\n  /** Shared OAuth service. Plugins use this to probe/start/complete OAuth\n   *  flows; invocation should still resolve tokens via `connections.accessToken`. */\n  readonly oauth: OAuthService;\n\n  /** Run `effect` inside a FumaDB transaction. Use this in extension methods that\n   *  need atomicity across plugin storage writes AND core source/tool\n   *  registration. */\n  readonly transaction: <A, E>(effect: Effect.Effect<A, E>) => Effect.Effect<A, E | StorageFailure>;\n}\n\n// ---------------------------------------------------------------------------\n// Static tool / source declarations. Pure data + handlers declared at\n// plugin-definition time.\n//\n// Importantly, `StaticToolDecl.handler` does NOT reference TExtension.\n// If it did, the nested generic would break inference for the whole\n// PluginSpec (TS would fall back to the `object` constraint on TExtension).\n// `self: NoInfer<TExtension>` lives on `staticSources` one level up\n// instead, and plugin authors close over it via the arrow-function\n// closure when they write their handler.\n// ---------------------------------------------------------------------------\n\nexport interface StaticToolHandlerInput<TStore = unknown> {\n  readonly ctx: PluginCtx<TStore>;\n  readonly args: unknown;\n  /** Suspend the fiber to request user input. The handler passed to\n   *  `createExecutor({ onElicitation })` is called. */\n  readonly elicit: Elicit;\n}\n\nexport interface StaticToolExecuteContext<TStore = unknown> {\n  readonly ctx: PluginCtx<TStore>;\n  /** Suspend the fiber to request user input. The handler passed to\n   *  `createExecutor({ onElicitation })` is called. */\n  readonly elicit: Elicit;\n}\n\nexport type StaticToolSchema<Input = unknown, Output = Input> = StandardSchemaV1<Input, Output> &\n  StandardJSONSchemaV1<Input, Output>;\n\nexport interface StaticToolDecl<TStore = unknown> {\n  readonly name: string;\n  readonly description: string;\n  readonly inputSchema?: StaticToolSchema;\n  readonly outputSchema?: StaticToolSchema;\n  /** Default-policy annotations — `requiresApproval`, `approvalDescription`,\n   *  `mayElicit`. Enforced by the executor before the handler runs.\n   *  Inline because static tools have no plugin storage to resolve from;\n   *  the plugin author literally writes this at definition time. */\n  readonly annotations?: ToolAnnotations;\n  readonly handler: (input: StaticToolHandlerInput<TStore>) => Effect.Effect<unknown, unknown>;\n}\n\nconst decodeStaticToolArgs = (\n  schema: StaticToolSchema | undefined,\n  args: unknown,\n): Effect.Effect<unknown, unknown> => {\n  if (schema == null) return Effect.succeed(args);\n  return Effect.promise(() => Promise.resolve(schema[\"~standard\"].validate(args))).pipe(\n    Effect.flatMap((result) =>\n      \"value\" in result ? Effect.succeed(result.value) : Effect.fail(result),\n    ),\n  );\n};\n\nexport interface StaticToolInput<\n  TStore = unknown,\n  TInputSchema extends StaticToolSchema | undefined = StaticToolSchema | undefined,\n> {\n  readonly name: string;\n  readonly description: string;\n  readonly inputSchema?: TInputSchema;\n  readonly outputSchema?: StaticToolSchema;\n  /** Default-policy annotations — `requiresApproval`, `approvalDescription`,\n   *  `mayElicit`. Enforced by the executor before the handler runs. */\n  readonly annotations?: ToolAnnotations;\n  readonly execute: (\n    args: TInputSchema extends StaticToolSchema\n      ? StandardSchemaV1.InferOutput<TInputSchema>\n      : unknown,\n    context: StaticToolExecuteContext<TStore>,\n  ) => Effect.Effect<unknown, unknown>;\n}\n\nexport const tool = <\n  TStore = unknown,\n  TInputSchema extends StaticToolSchema | undefined = StaticToolSchema | undefined,\n>(\n  input: StaticToolInput<TStore, TInputSchema>,\n): StaticToolDecl<TStore> => ({\n  name: input.name,\n  description: input.description,\n  inputSchema: input.inputSchema,\n  outputSchema: input.outputSchema,\n  annotations: input.annotations,\n  handler: ({ args, ctx, elicit }) =>\n    decodeStaticToolArgs(input.inputSchema, args).pipe(\n      Effect.flatMap((decoded) =>\n        input.execute(\n          decoded as TInputSchema extends StaticToolSchema\n            ? StandardSchemaV1.InferOutput<TInputSchema>\n            : unknown,\n          { ctx, elicit },\n        ),\n      ),\n    ),\n});\n\nexport interface StaticSourceDecl<TStore = unknown> {\n  readonly id: string;\n  readonly kind: string;\n  readonly name: string;\n  readonly url?: string;\n  /** Static sources default to `canRemove: false` because they are\n   *  plugin-provided surfaces and shouldn't usually be user-removable.\n   *  Override only if you really want that. */\n  readonly canRemove?: boolean;\n  readonly canRefresh?: boolean;\n  readonly canEdit?: boolean;\n  readonly tools: readonly StaticToolDecl<TStore>[];\n}\n\n// ---------------------------------------------------------------------------\n// Dynamic invoke / source lifecycle inputs.\n// ---------------------------------------------------------------------------\n\nexport interface InvokeToolInput<TStore = unknown> {\n  readonly ctx: PluginCtx<TStore>;\n  /** Already-loaded tool row. Plugin doesn't need to re-fetch or parse\n   *  the tool id. Carries source_id, name, input/output schemas,\n   *  annotations. */\n  readonly toolRow: ToolRow;\n  readonly args: unknown;\n  /** Elicitation handle for plugins that need mid-invocation user input\n   *  (onepassword auth prompt, interactive MCP tools, etc.). */\n  readonly elicit: Elicit;\n}\n\nexport interface SourceLifecycleInput<TStore = unknown> {\n  readonly ctx: PluginCtx<TStore>;\n  readonly sourceId: string;\n  /**\n   * Scope of the source row being removed/refreshed — resolved by the\n   * SDK's `sources.remove` / `sources.refresh` via innermost-wins lookup\n   * across the executor's scope stack. Plugins that own a side table\n   * keyed by (id, scope_id) must pin their own cleanup to this scope;\n   * relying on stack-wide scope fall-through\n   * would widen the mutation across the whole stack and wipe a\n   * shadowed outer-scope row.\n   */\n  readonly scope: string;\n}\n\nexport interface ConfigureSourceHandlerInput<TStore = unknown> {\n  readonly ctx: PluginCtx<TStore>;\n  readonly sourceId: string;\n  readonly sourceScope: string;\n  readonly targetScope: string;\n  readonly config: unknown;\n}\n\nexport interface SourceConfigureDecl<TStore = unknown> {\n  readonly type: string;\n  readonly schema?: StaticToolSchema | EffectSchema.Decoder<unknown, never>;\n  readonly configure: (\n    input: ConfigureSourceHandlerInput<TStore>,\n  ) => Effect.Effect<unknown, unknown>;\n}\n\nexport interface SourceConfigureSchema {\n  readonly pluginId: string;\n  readonly type: string;\n  readonly schema?: unknown;\n}\n\nexport interface SourcePreset {\n  readonly id: string;\n  readonly name: string;\n  readonly summary: string;\n  readonly url?: string;\n  readonly endpoint?: string;\n  readonly icon?: string;\n  readonly featured?: boolean;\n  readonly transport?: \"remote\" | \"stdio\";\n  readonly command?: string;\n  readonly args?: readonly string[];\n  readonly env?: Readonly<Record<string, string>>;\n}\n\nexport interface SourcePresetCatalogEntry extends SourcePreset {\n  readonly pluginId: string;\n}\n\n// ---------------------------------------------------------------------------\n// PluginSpec — what a `definePlugin(factory)` call returns.\n// ---------------------------------------------------------------------------\n\n// Defaults are `any` for slots that surface in contravariant positions\n// (storage/extension callbacks consume `TStore`/`TSchema`; `staticSources`\n// closes over `TExtension` via `NoInfer`). `any` is bivariant, so\n// `Plugin<string>` is a structural supertype of every concrete plugin\n// — `AnyPlugin = Plugin<string>` keeps the generic explosion contained\n// to this single declaration. Concrete specs ignore the defaults; TS\n// infers each slot from the literal returned by the author factory.\n//\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport interface PluginSpec<\n  TId extends string = string,\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  TExtension extends object = any,\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  TStore = any,\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  TSchema extends FumaTables | undefined = any,\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  TExtensionService extends Context.Service<any, any> | undefined = any,\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  THandlersLayer extends Layer.Layer<any, any, any> = any,\n  TGroup extends HttpApiGroup.Any = HttpApiGroup.Any,\n> {\n  readonly id: TId;\n  /** npm package name. The Vite plugin uses this to derive the\n   *  `./client` import path for the frontend bundle (so the same\n   *  `executor.config.ts` drives both server and client) — `${packageName}/client`\n   *  is what gets bundled. The author writes the same string they\n   *  publish to npm; no transforms, no scope conventions. Required for\n   *  plugins that ship a `./client` entry; can be omitted for SDK-only\n   *  plugins (no client bundle = nothing to resolve). */\n  readonly packageName?: string;\n  /** Plugin-declared schema. Merged with coreSchema and other plugins'\n   *  tables at executor startup via `collectTables`. The type flows\n   *  into the `storage` factory's `deps.fuma` as a FumaDB query boundary so\n   *  plugins get narrowed table names + typed rows for free. */\n  readonly schema?: TSchema;\n  /** Build the plugin's typed store from backing. `deps.fuma` is\n   *  already narrowed to this plugin's tables; `deps.blobs` is already\n   *  scoped to the plugin id so key collisions across plugins are\n   *  structurally impossible. */\n  readonly storage: (deps: StorageDeps<TSchema>) => TStore;\n\n  /** JSON-serializable config the plugin wants its `./client` bundle to\n   *  see. The Vite plugin reads this off each `executor.config.ts` spec\n   *  at build time and bakes it into the virtual `plugins-client`\n   *  module by calling the plugin's default `./client` export as a\n   *  factory: `__p(<JSON.stringify(clientConfig)>)`. Plugins that don't\n   *  set this stay as bare-value default exports — no churn.\n   *\n   *  Use this when a server-side option (e.g. `dangerouslyAllowStdioMCP`)\n   *  needs to drive client UI behaviour: declaring it once in\n   *  `executor.config.ts` flows through to the bundle automatically,\n   *  with no runtime fetch and no parallel client-side flag to keep in\n   *  sync. */\n  readonly clientConfig?: unknown;\n\n  /** Source presets shown by the web UI's \"Popular sources\" list and\n   *  exposed through core tools for agents. Keep this server-safe:\n   *  no React components, only JSON-serializable metadata and optional\n   *  add-flow hints such as URL or stdio command. */\n  readonly sourcePresets?: readonly SourcePreset[];\n\n  /** Build the plugin's extension API. The returned object becomes\n   *  `executor[plugin.id]` and is also the `self` passed to\n   *  `staticSources`. Field order matters: `extension` MUST appear\n   *  before `staticSources` so TS infers TExtension from this\n   *  factory's return BEFORE type-checking `self: NoInfer<TExtension>`. */\n  readonly extension?: (ctx: PluginCtx<TStore>) => TExtension;\n\n  /** Static sources contributed by this plugin with inline tool\n   *  handlers. Lives entirely in memory — no DB writes at startup.\n   *  Handlers close over `self` via the closure, so a control tool\n   *  that delegates to the plugin's real API is a one-liner:\n   *  `({ args }) => self.addSpec(args)`. */\n  readonly staticSources?: (self: NoInfer<TExtension>) => readonly StaticSourceDecl<TStore>[];\n\n  /** HttpApiGroup contributed by this plugin. Composed into the host's\n   *  `HttpApi` via the `addGroup` helper at runtime. The host mounts\n   *  the group at `/_executor/plugins/{id}/...` (or wherever the\n   *  plugin declares its base path) with the host's auth + scope\n   *  middleware applied. Endpoints automatically appear in the\n   *  executor OpenAPI doc and the typed reactive client.\n   *\n   *  TGroup is inferred from the plugin's own group declaration so the\n   *  precise group identity flows through `composePluginApi(plugins)` —\n   *  the host's typed `HttpApi<\"executor\", CoreGroups | PluginGroups>`\n   *  is derived from the plugin tuple alone, with no per-plugin Group\n   *  imports at the host. Per-endpoint typing already lives inside the\n   *  plugin — its `handlers` Layer is built against its own bundled\n   *  `HttpApi.make(\"foo\").add(FooApi)` for full `.handle(\"name\", ...)`\n   *  inference, and its client imports the same group directly. */\n  readonly routes?: () => TGroup;\n\n  /** Handlers Layer for this plugin's group. Built by the plugin against\n   *  its own bundled API for full type safety on `.handle(\"name\", ...)`,\n   *  composes into the host's runtime `FullApi` because\n   *  `HttpApiBuilder.group` keys the layer by group identity, not by the\n   *  surrounding API.\n   *\n   *  Late-binding: the layer leaves the plugin's extension as a Service\n   *  Tag requirement (see `extensionService` below). The host satisfies\n   *  it however its runtime wants:\n   *    - local: at boot via `Layer.succeed(extensionService)(executor[id])`\n   *      (see `composePluginHandlers`)\n   *    - cloud: per-request via `Effect.provideService(extensionService,\n   *      requestExecutor[id])` in the auth middleware\n   *\n   *  The Layer's channels are typed `any` because `Layer<RIn, E, ROut>`'s\n   *  `ROut` is contravariant — the host accepts any layer here and merges\n   *  them; per-plugin requirements flow through the merge. */\n  readonly handlers?: () => THandlersLayer;\n\n  /** Service tag the plugin's `handlers` layer requires. Set by plugins\n   *  whose handlers consume their extension via a `Context.Service` tag\n   *  (the established pattern: `*Handlers` reads `*ExtensionService`).\n   *  The host binds the tag to the live extension — at boot for local,\n   *  per request for cloud. Pairs with `handlers`; either both fields\n   *  are set or neither.\n   *\n   *  Inferred via the `TExtensionService` generic so the per-plugin\n   *  Service class identity propagates through `composePluginHandlers`,\n   *  `composePluginHandlerLayer`, and `providePluginExtensions` —\n   *  cloud's per-request middleware needs the precise tag for layer\n   *  satisfaction. */\n  readonly extensionService?: TExtensionService;\n\n  /** Invoke a dynamic tool. Called when the executor's static-handler\n   *  map doesn't have the toolId. The plugin reads its own enrichment\n   *  via `ctx.storage` and returns the result. Optional — plugins with\n   *  only static tools can omit it. */\n  readonly invokeTool?: (input: InvokeToolInput<TStore>) => Effect.Effect<unknown, unknown>;\n\n  /** Bulk resolve annotations (requiresApproval, approvalDescription,\n   *  mayElicit) for a set of tool rows under a single source. Called\n   *  by the executor:\n   *    - at invoke time with a single-element `toolRows` array, to\n   *      enforce approval on the about-to-run tool\n   *    - at list time with every dynamic tool row under each source,\n   *      grouped by source_id, to populate `Tool.annotations` for UI\n   *\n   *  The expected implementation for most plugins is: read plugin\n   *  storage once for the given source/rows, derive annotations from\n   *  the same data that was used to build the tool (HTTP method +\n   *  path for openapi, introspection kind for graphql, etc.), return\n   *  a map keyed by tool id.\n   *\n   *  Omit if the plugin has no annotations to contribute — executor\n   *  treats tools from that plugin as auto-approved with no\n   *  elicitation. */\n  readonly resolveAnnotations?: (input: {\n    readonly ctx: PluginCtx<TStore>;\n    readonly sourceId: string;\n    readonly toolRows: readonly ToolRow[];\n  }) => Effect.Effect<Record<string, ToolAnnotations>, unknown>;\n\n  /** Find every place a secret id is referenced by this plugin's stored\n   *  rows. Implementations query their normalized columns (e.g.\n   *  `WHERE secret_id = $1`) and return one `Usage` per hit, with\n   *  `ownerKind` / `slot` tagging the location. The executor fans out\n   *  across all plugins and the result powers the Secrets-tab \"Used\n   *  by\" list and the deletion-blocking check in `secrets.remove`.\n   *\n   *  Plugins that never store secret refs (secret-provider-only\n   *  plugins like keychain / file-secrets / 1password) omit this. */\n  readonly usagesForSecret?: (input: {\n    readonly ctx: PluginCtx<TStore>;\n    readonly args: UsagesForSecretInput;\n  }) => Effect.Effect<readonly Usage[], unknown>;\n\n  /** Same shape as `usagesForSecret`, but for connection refs. */\n  readonly usagesForConnection?: (input: {\n    readonly ctx: PluginCtx<TStore>;\n    readonly args: UsagesForConnectionInput;\n  }) => Effect.Effect<readonly Usage[], unknown>;\n\n  /** Called when `executor.sources.remove({ id, targetScope })` targets\n   *  a source owned by this plugin. Plugin-side cleanup only; the\n   *  executor deletes the core source/tool rows after this callback\n   *  returns, inside the same transaction. */\n  readonly removeSource?: (input: SourceLifecycleInput<TStore>) => Effect.Effect<void, unknown>;\n\n  readonly refreshSource?: (input: SourceLifecycleInput<TStore>) => Effect.Effect<void, unknown>;\n\n  /** Core-dispatched source configuration. The executor resolves the\n   *  source row, finds the owning plugin, and calls this handler with\n   *  an explicit source scope plus explicit target scope for credential\n   *  values. Plugin-native `openapi.configure` style methods can call\n   *  the same implementation, but callers do not need to know about\n   *  low-level credential bindings. */\n  readonly sourceConfigure?: SourceConfigureDecl<TStore>;\n\n  /** URL autodetection hook. When the user pastes a URL in the\n   *  onboarding UI, `executor.sources.detect(url)` fans out to every\n   *  plugin's `detect`. Return a `SourceDetectionResult` if you\n   *  recognize the URL, `null` otherwise. Implementations should be\n   *  defensive — swallow fetch errors and return null rather than\n   *  throwing. First high-confidence match wins. */\n  readonly detect?: (input: {\n    readonly ctx: PluginCtx<TStore>;\n    readonly url: string;\n  }) => Effect.Effect<SourceDetectionResult | null, unknown>;\n\n  /** Secret providers contributed by this plugin. Either a static\n   *  array, a function of ctx (for providers that need per-instance\n   *  state like the keychain's scope-derived service name), or a\n   *  function returning an Effect so plugins can probe for backend\n   *  availability at startup and register conditionally. Called once\n   *  at executor startup after `storage` and `extension` have been\n   *  built. */\n  readonly secretProviders?:\n    | readonly SecretProvider[]\n    | ((ctx: PluginCtx<TStore>) => readonly SecretProvider[])\n    | ((ctx: PluginCtx<TStore>) => Effect.Effect<readonly SecretProvider[]>);\n\n  /** Connection providers contributed by this plugin. Same registration\n   *  shape as `secretProviders`. Each provider's `key` is what\n   *  `connection.provider` references in the core table; the `refresh`\n   *  handler is the SDK's single entry point for token lifecycle —\n   *  plugins don't run their own refresh loops anymore. */\n  readonly connectionProviders?:\n    | readonly ConnectionProvider[]\n    | ((ctx: PluginCtx<TStore>) => readonly ConnectionProvider[])\n    | ((ctx: PluginCtx<TStore>) => Effect.Effect<readonly ConnectionProvider[]>);\n\n  readonly close?: () => Effect.Effect<void, unknown>;\n}\n\nexport interface Plugin<\n  TId extends string = string,\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  TExtension extends object = any,\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  TStore = any,\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  TSchema extends FumaTables | undefined = any,\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  TExtensionService extends Context.Service<any, any> | undefined = any,\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  THandlersLayer extends Layer.Layer<any, any, any> = any,\n  TGroup extends HttpApiGroup.Any = HttpApiGroup.Any,\n> extends PluginSpec<TId, TExtension, TStore, TSchema, TExtensionService, THandlersLayer, TGroup> {}\n\n// ---------------------------------------------------------------------------\n// definePlugin — factory-returning-spec. Options from the author factory\n// are merged with a storage override so consumers can swap the default\n// store implementation without touching plugin internals.\n// ---------------------------------------------------------------------------\n\nexport type ConfiguredPlugin<\n  TId extends string,\n  TExtension extends object,\n  TStore,\n  TOptions extends object,\n  TSchema extends FumaTables | undefined,\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  TExtensionService extends Context.Service<any, any> | undefined = undefined,\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  THandlersLayer extends Layer.Layer<any, any, any> = Layer.Layer<unknown, never, never>,\n  TGroup extends HttpApiGroup.Any = HttpApiGroup.Any,\n> = (\n  options?: TOptions & {\n    readonly storage?: (deps: StorageDeps<TSchema>) => TStore;\n  },\n) => Plugin<TId, TExtension, TStore, TSchema, TExtensionService, THandlersLayer, TGroup>;\n\n// eslint-disable-next-line @typescript-eslint/ban-types\nexport function definePlugin<\n  TId extends string,\n  TExtension extends object,\n  TStore,\n  TSchema extends FumaTables | undefined = undefined,\n  TOptions extends object = {},\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  TExtensionService extends Context.Service<any, any> | undefined = undefined,\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  THandlersLayer extends Layer.Layer<any, any, any> = Layer.Layer<unknown, never, never>,\n  TGroup extends HttpApiGroup.Any = HttpApiGroup.Any,\n>(\n  authorFactory: (\n    options?: TOptions,\n  ) => PluginSpec<TId, TExtension, TStore, TSchema, TExtensionService, THandlersLayer, TGroup>,\n): ConfiguredPlugin<\n  TId,\n  TExtension,\n  TStore,\n  TOptions,\n  TSchema,\n  TExtensionService,\n  THandlersLayer,\n  TGroup\n> {\n  return (options) => {\n    const {\n      storage: storageOverride,\n      ...rest\n    }: {\n      storage?: (deps: StorageDeps<TSchema>) => TStore;\n      [key: string]: unknown;\n    } = options ?? {};\n\n    const hasAuthorOptions = Object.keys(rest).length > 0;\n    const spec = authorFactory(hasAuthorOptions ? (rest as TOptions) : undefined);\n\n    return {\n      ...spec,\n      storage: storageOverride ?? spec.storage,\n    };\n  };\n}\n\n// ---------------------------------------------------------------------------\n// AnyPlugin / PluginExtensions — type-level glue for the Executor surface.\n// ---------------------------------------------------------------------------\n\n// `Plugin<string>` (with all subsequent slots taking their wide defaults)\n// is structurally any concrete plugin — the `any` cascade stays inside\n// the spec's defaults instead of leaking into every consumer.\nexport type AnyPlugin = Plugin<string>;\n\nexport type PluginExtensions<TPlugins extends readonly AnyPlugin[]> = {\n  readonly [P in TPlugins[number] as P[\"id\"]]: P extends Plugin<string, infer TExt> ? TExt : never;\n};\n\n/** Lightweight projection of a secret entry as returned by `ctx.secrets.list`. */\nexport interface SecretListEntry {\n  readonly id: string;\n  readonly name: string;\n  readonly provider: string;\n}\n\n// Re-exported for consumers that check the elicitation handler type.\nexport type { ElicitationHandler };\n","// ---------------------------------------------------------------------------\n// ToolResult — typed value-based discriminated union returned by tool\n// handlers and `invokeTool`. Domain success and expected failure both\n// resolve through Effect's success channel; only true infra defects use\n// the Effect failure channel.\n// ---------------------------------------------------------------------------\n\nimport { Schema } from \"effect\";\n\nexport const ToolErrorSchema = Schema.Struct({\n  code: Schema.String,\n  message: Schema.String,\n  status: Schema.optional(Schema.Number),\n  details: Schema.optional(Schema.Unknown),\n  retryable: Schema.optional(Schema.Boolean),\n});\n\nexport type ToolError = typeof ToolErrorSchema.Type;\n\nexport type ToolResult<T> =\n  | { readonly ok: true; readonly data: T }\n  | { readonly ok: false; readonly error: ToolError };\n\nexport const ToolResult = {\n  ok: <T>(data: T): ToolResult<T> => ({ ok: true, data }),\n  fail: <T = never>(error: ToolError): ToolResult<T> => ({ ok: false, error }),\n} as const;\n\nconst ToolResultSchema = Schema.Union([\n  Schema.Struct({ ok: Schema.Literal(true), data: Schema.Unknown }),\n  Schema.Struct({ ok: Schema.Literal(false), error: ToolErrorSchema }),\n]);\n\nconst isUnknownToolResult = Schema.is(ToolResultSchema);\n\nexport const isToolResult = (value: unknown): value is ToolResult<unknown> =>\n  isUnknownToolResult(value);\n","// ---------------------------------------------------------------------------\n// core-tools plugin\n//\n// Built-in plugin that contributes agent-facing static tools for configuring\n// executor-level primitives. The important boundary: sensitive values never\n// travel through tool arguments. Agents create secret placeholders and OAuth\n// sessions, then hand the returned browser URL to the user.\n// ---------------------------------------------------------------------------\n\nimport { Data, Effect, Schema } from \"effect\";\n\nimport { ConnectionRef } from \"./connections\";\nimport { CredentialBindingRef, CredentialBindingValue } from \"./credential-bindings\";\nimport { ConnectionId, ScopeId, SecretId } from \"./ids\";\nimport { OAuthStrategy as OAuthStrategySchema } from \"./oauth\";\nimport { definePlugin, tool, type StaticToolSchema } from \"./plugin\";\nimport { ToolPolicyActionSchema } from \"./policies\";\nimport { ToolResult } from \"./tool-result\";\nimport { SourceDetectionResult } from \"./types\";\nimport { Usage } from \"./usages\";\n\nconst schemaToStandard = <A, I>(schema: Schema.Decoder<A, I>): StaticToolSchema<A, I> =>\n  Schema.toStandardSchemaV1(Schema.toStandardJSONSchemaV1(schema) as never) as StaticToolSchema<\n    A,\n    I\n  >;\n\nconst UnknownRecord = Schema.Record(Schema.String, Schema.Unknown);\n\nconst ScopeName = Schema.String;\n\nconst ScopesListOutput = Schema.Struct({\n  scopes: Schema.Array(\n    Schema.Struct({\n      id: Schema.String,\n      name: Schema.String,\n    }),\n  ),\n});\n\nconst SecretRefOutput = Schema.Struct({\n  id: Schema.String,\n  scopeId: Schema.String,\n  name: Schema.String,\n  provider: Schema.String,\n});\n\nconst SecretsListOutput = Schema.Struct({\n  secrets: Schema.Array(SecretRefOutput),\n});\n\nconst SecretsCreateInput = Schema.Struct({\n  name: Schema.String,\n  scope: Schema.optional(ScopeName),\n  provider: Schema.optional(Schema.String),\n});\n\nconst SecretsCreateOutput = Schema.Struct({\n  id: Schema.String,\n  url: Schema.String,\n  instructions: Schema.String,\n});\n\nconst SecretPointerInput = Schema.Struct({\n  id: Schema.String,\n});\n\nconst SecretScopedPointerInput = Schema.Struct({\n  id: Schema.String,\n  targetScope: Schema.String,\n});\n\nconst SecretStatusOutput = Schema.Struct({\n  id: Schema.String,\n  status: Schema.Literals([\"resolved\", \"missing\"]),\n});\n\nconst SecretUsagesOutput = Schema.Struct({\n  usages: Schema.Array(Usage),\n});\n\nconst ProvidersOutput = Schema.Struct({\n  providers: Schema.Array(Schema.String),\n});\n\nconst RemovedOutput = Schema.Struct({\n  removed: Schema.Boolean,\n});\n\nconst RefreshedOutput = Schema.Struct({\n  refreshed: Schema.Boolean,\n});\n\nconst SourceOutput = Schema.Struct({\n  id: Schema.String,\n  scopeId: Schema.optional(Schema.String),\n  kind: Schema.String,\n  name: Schema.String,\n  url: Schema.optional(Schema.String),\n  pluginId: Schema.String,\n  canRemove: Schema.Boolean,\n  canRefresh: Schema.Boolean,\n  canEdit: Schema.Boolean,\n  runtime: Schema.Boolean,\n});\n\nconst SourcesListOutput = Schema.Struct({\n  sources: Schema.Array(SourceOutput),\n});\n\nconst SourcesDetectInput = Schema.Struct({\n  url: Schema.String,\n});\n\nconst SourcesDetectOutput = Schema.Struct({\n  results: Schema.Array(SourceDetectionResult),\n});\n\nconst SourcePresetOutput = Schema.Struct({\n  pluginId: Schema.String,\n  id: Schema.String,\n  name: Schema.String,\n  summary: Schema.String,\n  url: Schema.optional(Schema.String),\n  endpoint: Schema.optional(Schema.String),\n  icon: Schema.optional(Schema.String),\n  featured: Schema.optional(Schema.Boolean),\n  transport: Schema.optional(Schema.Literals([\"remote\", \"stdio\"])),\n  command: Schema.optional(Schema.String),\n  args: Schema.optional(Schema.Array(Schema.String)),\n  env: Schema.optional(Schema.Record(Schema.String, Schema.String)),\n});\n\nconst SourcesPresetsInput = Schema.Struct({\n  query: Schema.optional(Schema.String),\n  pluginId: Schema.optional(Schema.String),\n  featuredOnly: Schema.optional(Schema.Boolean),\n  limit: Schema.optional(Schema.Number),\n});\n\nconst SourcesPresetsOutput = Schema.Struct({\n  presets: Schema.Array(SourcePresetOutput),\n});\n\nconst SourcePointer = Schema.Struct({\n  id: Schema.String,\n  scope: Schema.String,\n});\n\nconst SourcesConfigureInput = Schema.Struct({\n  source: SourcePointer,\n  scope: Schema.String,\n  type: Schema.optional(Schema.String),\n  config: Schema.Unknown,\n});\n\nconst SourcesConfigureOutput = Schema.Struct({\n  result: Schema.Unknown,\n});\n\nconst SourceLifecycleInput = Schema.Struct({\n  id: Schema.String,\n  targetScope: Schema.String,\n});\n\nconst SourceBindingsListInput = Schema.Struct({\n  source: SourcePointer,\n});\n\nconst SourceBindingsResolveInput = Schema.Struct({\n  source: SourcePointer,\n  slotKey: Schema.String,\n});\n\nconst SourceBindingsSetInput = Schema.Struct({\n  scope: Schema.String,\n  source: SourcePointer,\n  slotKey: Schema.String,\n  value: CredentialBindingValue,\n});\n\nconst SourceBindingsRemoveInput = Schema.Struct({\n  scope: Schema.String,\n  source: SourcePointer,\n  slotKey: Schema.String,\n});\n\nconst SourceBindingsListOutput = Schema.Struct({\n  bindings: Schema.Array(CredentialBindingRef),\n});\n\nconst SourceBindingsResolveOutput = Schema.Struct({\n  binding: Schema.NullOr(CredentialBindingRef),\n});\n\nconst SourceBindingsSetOutput = Schema.Struct({\n  binding: CredentialBindingRef,\n});\n\nconst ConnectionsListOutput = Schema.Struct({\n  connections: Schema.Array(ConnectionRef),\n});\n\nconst ConnectionPointerInput = Schema.Struct({\n  id: Schema.String,\n});\n\nconst ConnectionScopedPointerInput = Schema.Struct({\n  id: Schema.String,\n  targetScope: Schema.String,\n});\n\nconst ConnectionUsagesOutput = Schema.Struct({\n  usages: Schema.Array(Usage),\n});\n\nconst PolicyOutput = Schema.Struct({\n  id: Schema.String,\n  scopeId: Schema.String,\n  pattern: Schema.String,\n  action: ToolPolicyActionSchema,\n  position: Schema.String,\n  createdAt: Schema.Number,\n  updatedAt: Schema.Number,\n});\n\nconst PoliciesListOutput = Schema.Struct({\n  policies: Schema.Array(PolicyOutput),\n});\n\nconst PolicyCreateInput = Schema.Struct({\n  targetScope: Schema.String,\n  pattern: Schema.String,\n  action: ToolPolicyActionSchema,\n  position: Schema.optional(Schema.String),\n});\n\nconst PolicyUpdateInput = Schema.Struct({\n  id: Schema.String,\n  targetScope: Schema.String,\n  pattern: Schema.optional(Schema.String),\n  action: Schema.optional(ToolPolicyActionSchema),\n  position: Schema.optional(Schema.String),\n});\n\nconst PolicyRemoveInput = Schema.Struct({\n  id: Schema.String,\n  targetScope: Schema.String,\n});\n\nconst PolicyMutationOutput = Schema.Struct({\n  policy: PolicyOutput,\n});\n\nconst OAuthProbeInput = Schema.Struct({\n  endpoint: Schema.String,\n  headers: Schema.optional(Schema.Record(Schema.String, Schema.String)),\n  queryParams: Schema.optional(Schema.Record(Schema.String, Schema.String)),\n});\n\nconst OAuthProbeOutput = Schema.Struct({\n  resourceMetadata: Schema.NullOr(UnknownRecord),\n  resourceMetadataUrl: Schema.NullOr(Schema.String),\n  authorizationServerMetadata: Schema.NullOr(UnknownRecord),\n  authorizationServerMetadataUrl: Schema.NullOr(Schema.String),\n  authorizationServerUrl: Schema.NullOr(Schema.String),\n  supportsDynamicRegistration: Schema.Boolean,\n  isBearerChallengeEndpoint: Schema.Boolean,\n});\n\nconst OAuthStartInput = Schema.Struct({\n  credentialScope: Schema.optional(Schema.String),\n  endpoint: Schema.String,\n  connectionId: Schema.String,\n  pluginId: Schema.String,\n  identityLabel: Schema.optional(Schema.String),\n  redirectUrl: Schema.optional(Schema.String),\n  headers: Schema.optional(Schema.Record(Schema.String, Schema.String)),\n  queryParams: Schema.optional(Schema.Record(Schema.String, Schema.String)),\n  strategy: OAuthStrategySchema,\n});\n\nconst OAuthStartOutput = Schema.Struct({\n  sessionId: Schema.String,\n  authorizationUrl: Schema.NullOr(Schema.String),\n  completedConnection: Schema.NullOr(Schema.Struct({ connectionId: Schema.String })),\n  instructions: Schema.String,\n});\n\nconst OAuthCancelInput = Schema.Struct({\n  credentialScope: Schema.optional(Schema.String),\n  sessionId: Schema.String,\n});\n\nconst OAuthCancelOutput = Schema.Struct({\n  cancelled: Schema.Boolean,\n});\n\nconst ScopesListOutputStd = schemaToStandard(ScopesListOutput);\nconst SecretsListOutputStd = schemaToStandard(SecretsListOutput);\nconst SecretsCreateInputStd = schemaToStandard<\n  typeof SecretsCreateInput.Type,\n  typeof SecretsCreateInput.Encoded\n>(SecretsCreateInput);\nconst SecretsCreateOutputStd = schemaToStandard(SecretsCreateOutput);\nconst SecretPointerInputStd = schemaToStandard<\n  typeof SecretPointerInput.Type,\n  typeof SecretPointerInput.Encoded\n>(SecretPointerInput);\nconst SecretScopedPointerInputStd = schemaToStandard<\n  typeof SecretScopedPointerInput.Type,\n  typeof SecretScopedPointerInput.Encoded\n>(SecretScopedPointerInput);\nconst SecretStatusOutputStd = schemaToStandard(SecretStatusOutput);\nconst SecretUsagesOutputStd = schemaToStandard(SecretUsagesOutput);\nconst ProvidersOutputStd = schemaToStandard(ProvidersOutput);\nconst RemovedOutputStd = schemaToStandard(RemovedOutput);\nconst RefreshedOutputStd = schemaToStandard(RefreshedOutput);\nconst SourcesListOutputStd = schemaToStandard(SourcesListOutput);\nconst SourcesDetectInputStd = schemaToStandard<\n  typeof SourcesDetectInput.Type,\n  typeof SourcesDetectInput.Encoded\n>(SourcesDetectInput);\nconst SourcesDetectOutputStd = schemaToStandard(SourcesDetectOutput);\nconst SourcesPresetsInputStd = schemaToStandard<\n  typeof SourcesPresetsInput.Type,\n  typeof SourcesPresetsInput.Encoded\n>(SourcesPresetsInput);\nconst SourcesPresetsOutputStd = schemaToStandard(SourcesPresetsOutput);\nconst SourcesConfigureInputStd = schemaToStandard<\n  typeof SourcesConfigureInput.Type,\n  typeof SourcesConfigureInput.Encoded\n>(SourcesConfigureInput);\nconst SourcesConfigureOutputStd = schemaToStandard(SourcesConfigureOutput);\nconst SourceLifecycleInputStd = schemaToStandard<\n  typeof SourceLifecycleInput.Type,\n  typeof SourceLifecycleInput.Encoded\n>(SourceLifecycleInput);\nconst SourceBindingsListInputStd = schemaToStandard<\n  typeof SourceBindingsListInput.Type,\n  typeof SourceBindingsListInput.Encoded\n>(SourceBindingsListInput);\nconst SourceBindingsResolveInputStd = schemaToStandard<\n  typeof SourceBindingsResolveInput.Type,\n  typeof SourceBindingsResolveInput.Encoded\n>(SourceBindingsResolveInput);\nconst SourceBindingsSetInputStd = schemaToStandard<\n  typeof SourceBindingsSetInput.Type,\n  typeof SourceBindingsSetInput.Encoded\n>(SourceBindingsSetInput);\nconst SourceBindingsRemoveInputStd = schemaToStandard<\n  typeof SourceBindingsRemoveInput.Type,\n  typeof SourceBindingsRemoveInput.Encoded\n>(SourceBindingsRemoveInput);\nconst SourceBindingsListOutputStd = schemaToStandard(SourceBindingsListOutput);\nconst SourceBindingsResolveOutputStd = schemaToStandard(SourceBindingsResolveOutput);\nconst SourceBindingsSetOutputStd = schemaToStandard(SourceBindingsSetOutput);\nconst ConnectionsListOutputStd = schemaToStandard(ConnectionsListOutput);\nconst ConnectionPointerInputStd = schemaToStandard<\n  typeof ConnectionPointerInput.Type,\n  typeof ConnectionPointerInput.Encoded\n>(ConnectionPointerInput);\nconst ConnectionScopedPointerInputStd = schemaToStandard<\n  typeof ConnectionScopedPointerInput.Type,\n  typeof ConnectionScopedPointerInput.Encoded\n>(ConnectionScopedPointerInput);\nconst ConnectionUsagesOutputStd = schemaToStandard(ConnectionUsagesOutput);\nconst PoliciesListOutputStd = schemaToStandard(PoliciesListOutput);\nconst PolicyCreateInputStd = schemaToStandard<\n  typeof PolicyCreateInput.Type,\n  typeof PolicyCreateInput.Encoded\n>(PolicyCreateInput);\nconst PolicyUpdateInputStd = schemaToStandard<\n  typeof PolicyUpdateInput.Type,\n  typeof PolicyUpdateInput.Encoded\n>(PolicyUpdateInput);\nconst PolicyRemoveInputStd = schemaToStandard<\n  typeof PolicyRemoveInput.Type,\n  typeof PolicyRemoveInput.Encoded\n>(PolicyRemoveInput);\nconst PolicyMutationOutputStd = schemaToStandard(PolicyMutationOutput);\nconst OAuthProbeInputStd = schemaToStandard<\n  typeof OAuthProbeInput.Type,\n  typeof OAuthProbeInput.Encoded\n>(OAuthProbeInput);\nconst OAuthProbeOutputStd = schemaToStandard(OAuthProbeOutput);\nconst OAuthStartInputStd = schemaToStandard<\n  typeof OAuthStartInput.Type,\n  typeof OAuthStartInput.Encoded\n>(OAuthStartInput);\nconst OAuthStartOutputStd = schemaToStandard(OAuthStartOutput);\nconst OAuthCancelInputStd = schemaToStandard<\n  typeof OAuthCancelInput.Type,\n  typeof OAuthCancelInput.Encoded\n>(OAuthCancelInput);\nconst OAuthCancelOutputStd = schemaToStandard(OAuthCancelOutput);\n\nexport interface CoreToolsPluginOptions {\n  readonly webBaseUrl?: string;\n}\n\nclass CoreToolsConfigurationError extends Data.TaggedError(\"CoreToolsConfigurationError\")<{\n  readonly message: string;\n}> {}\n\nclass CoreToolsScopeNotFoundError extends Data.TaggedError(\"CoreToolsScopeNotFoundError\")<{\n  readonly scope: string;\n  readonly message: string;\n}> {}\n\nconst findScopeByNameOrId = (\n  scopes: readonly { readonly id: ScopeId; readonly name: string }[],\n  value: string,\n) => scopes.find((scope) => scope.name === value || String(scope.id) === value);\n\nconst resolveScopeInput = (\n  scopes: readonly { readonly id: ScopeId; readonly name: string }[],\n  value: string | undefined,\n) => {\n  if (value === undefined) {\n    const [onlyScope] = scopes;\n    return onlyScope && scopes.length === 1\n      ? Effect.succeed(String(onlyScope.id))\n      : Effect.fail(\n          new CoreToolsScopeNotFoundError({\n            scope: \"\",\n            message:\n              scopes.length === 0\n                ? \"No visible scopes are available.\"\n                : \"Multiple scopes are visible. Call scopes.list and pass the target scope id or name.\",\n          }),\n        );\n  }\n\n  const scope = findScopeByNameOrId(scopes, value);\n  return scope\n    ? Effect.succeed(String(scope.id))\n    : Effect.fail(\n        new CoreToolsScopeNotFoundError({\n          scope: value,\n          message: `Unknown scope \"${value}\". Call scopes.list to see valid scope ids and names.`,\n        }),\n      );\n};\n\nconst normalizeCredentialBindingValue = (\n  value: typeof CredentialBindingValue.Encoded,\n): CredentialBindingValue => {\n  if (value.kind === \"text\") {\n    return value;\n  }\n  if (value.kind === \"secret\") {\n    return {\n      kind: \"secret\",\n      secretId: SecretId.make(value.secretId),\n      ...(value.secretScopeId ? { secretScopeId: ScopeId.make(value.secretScopeId) } : {}),\n    };\n  }\n  return {\n    kind: \"connection\",\n    connectionId: ConnectionId.make(value.connectionId),\n  };\n};\n\nconst oauthToolFailure = (code: string, message: string, details?: unknown) =>\n  ToolResult.fail({\n    code,\n    message,\n    ...(details === undefined ? {} : { details }),\n  });\n\nconst requireWebBaseUrl = (value: string | undefined) =>\n  value\n    ? Effect.succeed(value.replace(/\\/$/, \"\"))\n    : Effect.fail(\n        new CoreToolsConfigurationError({\n          message: \"This executor did not provide a webBaseUrl for browser handoff flows.\",\n        }),\n      );\n\nconst policyOutput = (policy: {\n  readonly id: string;\n  readonly scopeId: string;\n  readonly pattern: string;\n  readonly action: typeof ToolPolicyActionSchema.Type;\n  readonly position: string;\n  readonly createdAt: Date;\n  readonly updatedAt: Date;\n}) => ({\n  id: String(policy.id),\n  scopeId: String(policy.scopeId),\n  pattern: policy.pattern,\n  action: policy.action,\n  position: policy.position,\n  createdAt: policy.createdAt.getTime(),\n  updatedAt: policy.updatedAt.getTime(),\n});\n\nexport const coreToolsPlugin = definePlugin((options: CoreToolsPluginOptions = {}) => ({\n  id: \"core-tools\" as const,\n  packageName: \"@executor-js/sdk/core-tools\",\n  storage: () => ({}),\n  extension: () => ({}),\n\n  staticSources: () => [\n    {\n      id: \"coreTools\",\n      kind: \"executor\",\n      name: \"Executor\",\n      tools: [\n        tool({\n          name: \"scopes.list\",\n          description:\n            \"List visible executor scopes. Call this before write tools when more than one scope is visible; single-scope local executors can usually omit scope inputs.\",\n          outputSchema: ScopesListOutputStd,\n          execute: (_args, { ctx }) =>\n            Effect.succeed({\n              scopes: ctx.scopes.map((s) => ({ id: String(s.id), name: s.name })),\n            }),\n        }),\n        tool({\n          name: \"secrets.list\",\n          description:\n            \"List visible secrets by id, name, and provider. This never returns values. Use returned ids in source configuration or OAuth client credential strategies.\",\n          outputSchema: SecretsListOutputStd,\n          execute: (_args, { ctx }) =>\n            Effect.map(ctx.secrets.list(), (refs) => ({\n              secrets: refs.map((r) => ({\n                id: String(r.id),\n                scopeId: String(r.scopeId),\n                name: r.name,\n                provider: r.provider,\n              })),\n            })),\n        }),\n        tool({\n          name: \"secrets.create\",\n          description:\n            \"Create a secret placeholder and return a browser URL for the user to enter the sensitive value. Never ask the user to paste passwords, tokens, client secrets, or API keys into chat. In a single-scope local executor, omit `scope`; otherwise call `scopes.list` and pass the target credential scope id or name. The optional `provider` is the Executor secret storage backend, not the API vendor; omit it unless the user explicitly chose a value returned by `secrets.providers`.\",\n          inputSchema: SecretsCreateInputStd,\n          outputSchema: SecretsCreateOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.gen(function* () {\n              const webBaseUrl = yield* requireWebBaseUrl(options.webBaseUrl);\n              if (input.provider) {\n                const providers = yield* ctx.secrets.providers();\n                if (!providers.includes(input.provider)) {\n                  return oauthToolFailure(\n                    \"secret_provider_not_found\",\n                    `Unknown secret storage provider \"${input.provider}\". Omit provider unless the user chose one from secrets.providers.`,\n                    { providers },\n                  );\n                }\n              }\n              const targetScope = yield* resolveScopeInput(ctx.scopes, input.scope);\n\n              const secretId = crypto.randomUUID();\n              const url = new URL(`${webBaseUrl}/secrets`);\n              url.searchParams.set(\"scope\", targetScope);\n              url.searchParams.set(\"name\", input.name);\n              url.searchParams.set(\"secretId\", secretId);\n              if (input.provider) url.searchParams.set(\"provider\", input.provider);\n              return {\n                id: secretId,\n                url: url.toString(),\n                instructions:\n                  \"The user needs to open this URL and set the secret value in the browser. Until the user saves the value there, this secret is only a placeholder and will not be available for binding. After the user saves it, call secrets.status for this id before using it in source configuration.\",\n              };\n            }).pipe(\n              Effect.catchTags({\n                CoreToolsConfigurationError: ({ message }) =>\n                  Effect.succeed(oauthToolFailure(\"secret_handoff_not_configured\", message)),\n                CoreToolsScopeNotFoundError: ({ message, scope }) =>\n                  Effect.succeed(oauthToolFailure(\"scope_not_found\", message, { scope })),\n              }),\n            ),\n        }),\n        tool({\n          name: \"secrets.status\",\n          description:\n            \"Check whether a user-visible secret id has a backing value without revealing that value. Use this after a browser handoff from `secrets.create` before wiring the secret into a source.\",\n          inputSchema: SecretPointerInputStd,\n          outputSchema: SecretStatusOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.map(ctx.secrets.status(input.id), (status) => ({ id: input.id, status })),\n        }),\n        tool({\n          name: \"secrets.usages\",\n          description:\n            \"List sources and credential slots that reference a secret. Call this before removing a secret so the user can detach it first if needed.\",\n          inputSchema: SecretPointerInputStd,\n          outputSchema: SecretUsagesOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.map(ctx.secrets.usages(input.id), (usages) => ({ usages })),\n        }),\n        tool({\n          name: \"secrets.providers\",\n          description:\n            \"List registered secret storage providers. Only use these exact values for the optional `provider` field in `secrets.create`; do not use API vendor names such as Vercel, GitHub, Stripe, or Google. Sensitive values still must be entered through the returned browser URL.\",\n          outputSchema: ProvidersOutputStd,\n          execute: (_args, { ctx }) =>\n            Effect.map(ctx.secrets.providers(), (providers) => ({ providers })),\n        }),\n        tool({\n          name: \"secrets.remove\",\n          description:\n            \"Remove a user-visible secret from a target scope. Call `secrets.usages` first; removal is refused while sources still reference the secret. Connection-owned token secrets cannot be removed here; remove the connection instead.\",\n          annotations: {\n            requiresApproval: true,\n            approvalDescription: \"Remove an Executor secret\",\n          },\n          inputSchema: SecretScopedPointerInputStd,\n          outputSchema: RemovedOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.gen(function* () {\n              const targetScope = yield* resolveScopeInput(ctx.scopes, input.targetScope);\n              return yield* Effect.as(\n                ctx.secrets.remove({\n                  id: SecretId.make(input.id),\n                  targetScope: ScopeId.make(targetScope),\n                }),\n                { removed: true },\n              );\n            }),\n        }),\n        tool({\n          name: \"sources.list\",\n          description:\n            \"List configured and built-in sources. Use this to find source ids/scopes before calling plugin-specific configureSource tools, `sources.bindings.*`, refresh, remove, or tool discovery.\",\n          outputSchema: SourcesListOutputStd,\n          execute: (_args, { ctx }) =>\n            Effect.map(ctx.core.sources.list(), (sources) => ({ sources })),\n        }),\n        tool({\n          name: \"sources.detect\",\n          description:\n            \"Detect which plugin can add or configure a URL. This is the same URL auto-detection used by the Executor web Connect dialog. Use this when the user gives a URL but not a source type; then call the matching plugin add tool such as `openapi.previewSpec` + `openapi.addSource`, `graphql.addSource`, or `mcp.addSource`.\",\n          inputSchema: SourcesDetectInputStd,\n          outputSchema: SourcesDetectOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.map(ctx.core.sources.detect(input.url), (results) => ({ results })),\n        }),\n        tool({\n          name: \"sources.presets\",\n          description:\n            \"List the same popular source presets shown in Executor web's Connect dialog. Use this before asking the user what to connect; filter with `query` for names like GitHub, Stripe, Axiom, Google Calendar, Linear, or OpenAI. For MCP and GraphQL presets, pass `endpoint` to the probe/add tools. For OpenAPI and Google Discovery presets, pass `url` to the preview/probe and add tools. For stdio MCP presets, use the returned command/args/env.\",\n          inputSchema: SourcesPresetsInputStd,\n          outputSchema: SourcesPresetsOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.sync(() => {\n              const query = input.query?.trim().toLowerCase() ?? \"\";\n              const pluginId = input.pluginId?.trim();\n              const featuredOnly = input.featuredOnly ?? false;\n              const limit = Math.max(0, Math.trunc(input.limit ?? 50));\n              const presets = ctx.core.sources\n                .presets()\n                .filter((preset) => (pluginId ? preset.pluginId === pluginId : true))\n                .filter((preset) => (featuredOnly ? preset.featured === true : true))\n                .filter((preset) => {\n                  if (query.length === 0) return true;\n                  const corpus =\n                    `${preset.name} ${preset.summary} ${preset.pluginId} ${preset.id}`.toLowerCase();\n                  return corpus.includes(query);\n                })\n                .slice(0, limit);\n              return { presets };\n            }),\n        }),\n        tool({\n          name: \"sources.configure\",\n          description:\n            'Low-level escape hatch for configuring an existing source through its owning plugin. Prefer plugin-specific tools such as `openapi.configureSource`, `graphql.configureSource`, `mcp.configureSource`, or `googleDiscovery.configureSource`; this accepts plugin config as `unknown` for repair and compatibility cases. Use `secrets.create`/`oauth.start` first for sensitive inputs. Pass secret refs as `{kind:\"secret\", secretId}` and OAuth connections as `{kind:\"connection\", connectionId}` when the plugin schema supports them.',\n          annotations: {\n            requiresApproval: true,\n            approvalDescription: \"Configure an Executor source\",\n          },\n          inputSchema: SourcesConfigureInputStd,\n          outputSchema: SourcesConfigureOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.gen(function* () {\n              const sourceScope = yield* resolveScopeInput(ctx.scopes, input.source.scope);\n              const targetScope = yield* resolveScopeInput(ctx.scopes, input.scope);\n              const result = yield* ctx.core.sources.configure({\n                ...input,\n                source: { ...input.source, scope: sourceScope },\n                scope: targetScope,\n              });\n              return { result };\n            }),\n        }),\n        tool({\n          name: \"sources.refresh\",\n          description:\n            \"Refresh a configurable source's registered tools from its backing spec/server. Use `sources.list` first to get the source id and owning scope, then refresh the owning scope.\",\n          annotations: {\n            requiresApproval: true,\n            approvalDescription: \"Refresh an Executor source\",\n          },\n          inputSchema: SourceLifecycleInputStd,\n          outputSchema: RefreshedOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.gen(function* () {\n              const targetScope = yield* resolveScopeInput(ctx.scopes, input.targetScope);\n              return yield* Effect.as(ctx.core.sources.refresh({ ...input, targetScope }), {\n                refreshed: true,\n              });\n            }),\n        }),\n        tool({\n          name: \"sources.remove\",\n          description:\n            \"Remove a configurable source and its registered tools from a target scope. Use `sources.list` and, when credentials are involved, `sources.bindings.list` first so the user can confirm exactly what will be removed.\",\n          annotations: {\n            requiresApproval: true,\n            approvalDescription: \"Remove an Executor source\",\n          },\n          inputSchema: SourceLifecycleInputStd,\n          outputSchema: RemovedOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.gen(function* () {\n              const targetScope = yield* resolveScopeInput(ctx.scopes, input.targetScope);\n              return yield* Effect.as(ctx.core.sources.remove({ ...input, targetScope }), {\n                removed: true,\n              });\n            }),\n        }),\n        tool({\n          name: \"sources.bindings.list\",\n          description:\n            \"List credential bindings for a source. Use this to verify that secrets or OAuth connections were bound after a plugin-specific configureSource tool.\",\n          inputSchema: SourceBindingsListInputStd,\n          outputSchema: SourceBindingsListOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.gen(function* () {\n              const sourceScope = yield* resolveScopeInput(ctx.scopes, input.source.scope);\n              const bindings = yield* ctx.core.sources.listBindings({\n                source: { id: input.source.id, scope: ScopeId.make(sourceScope) },\n              });\n              return { bindings };\n            }),\n        }),\n        tool({\n          name: \"sources.bindings.resolve\",\n          description:\n            \"Resolve the effective credential binding for one source slot, accounting for scope shadowing. Values are references only; plaintext is never returned.\",\n          inputSchema: SourceBindingsResolveInputStd,\n          outputSchema: SourceBindingsResolveOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.gen(function* () {\n              const sourceScope = yield* resolveScopeInput(ctx.scopes, input.source.scope);\n              const binding = yield* ctx.core.sources.resolveBinding({\n                source: { id: input.source.id, scope: ScopeId.make(sourceScope) },\n                slotKey: input.slotKey,\n              });\n              return { binding };\n            }),\n        }),\n        tool({\n          name: \"sources.bindings.set\",\n          description:\n            \"Set one credential binding for a source slot. Prefer plugin-specific configureSource tools for normal flows because they name the right credential fields. Use this low-level tool only when a plugin or status output has given an exact slot key.\",\n          annotations: {\n            requiresApproval: true,\n            approvalDescription: \"Set a source credential binding\",\n          },\n          inputSchema: SourceBindingsSetInputStd,\n          outputSchema: SourceBindingsSetOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.gen(function* () {\n              const scope = yield* resolveScopeInput(ctx.scopes, input.scope);\n              const sourceScope = yield* resolveScopeInput(ctx.scopes, input.source.scope);\n              const binding = yield* ctx.core.sources.setBinding({\n                scope: ScopeId.make(scope),\n                source: { id: input.source.id, scope: ScopeId.make(sourceScope) },\n                slotKey: input.slotKey,\n                value: normalizeCredentialBindingValue(input.value),\n              });\n              return { binding };\n            }),\n        }),\n        tool({\n          name: \"sources.bindings.remove\",\n          description:\n            \"Remove one credential binding from a source slot at a target scope. Use `sources.bindings.list` first so the user can confirm the exact binding being removed.\",\n          annotations: {\n            requiresApproval: true,\n            approvalDescription: \"Remove a source credential binding\",\n          },\n          inputSchema: SourceBindingsRemoveInputStd,\n          execute: (input, { ctx }) =>\n            Effect.gen(function* () {\n              const scope = yield* resolveScopeInput(ctx.scopes, input.scope);\n              const sourceScope = yield* resolveScopeInput(ctx.scopes, input.source.scope);\n              return yield* Effect.asVoid(\n                ctx.core.sources.removeBinding({\n                  scope: ScopeId.make(scope),\n                  source: { id: input.source.id, scope: ScopeId.make(sourceScope) },\n                  slotKey: input.slotKey,\n                }),\n              );\n            }),\n        }),\n        tool({\n          name: \"connections.list\",\n          description:\n            \"List OAuth/sign-in connections. This returns metadata and token secret ids, never token values. Use it to verify that `oauth.start` completed, then bind the connection id with the relevant plugin-specific configureSource tool.\",\n          outputSchema: ConnectionsListOutputStd,\n          execute: (_args, { ctx }) =>\n            Effect.map(ctx.connections.list(), (connections) => ({ connections })),\n        }),\n        tool({\n          name: \"connections.usages\",\n          description:\n            \"List sources and credential slots that reference an OAuth/sign-in connection. Call this before removing a connection so the user can detach it first if needed.\",\n          inputSchema: ConnectionPointerInputStd,\n          outputSchema: ConnectionUsagesOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.map(ctx.connections.usages(input.id), (usages) => ({ usages })),\n        }),\n        tool({\n          name: \"connections.providers\",\n          description:\n            \"List registered connection providers. Use this to understand which OAuth/sign-in connection kinds this executor can mint and refresh.\",\n          outputSchema: ProvidersOutputStd,\n          execute: (_args, { ctx }) =>\n            Effect.map(ctx.connections.providers(), (providers) => ({ providers })),\n        }),\n        tool({\n          name: \"connections.remove\",\n          description:\n            \"Remove an OAuth/sign-in connection and its owned token secrets from a target scope. Call `connections.usages` first; removal is refused while sources still reference the connection.\",\n          annotations: {\n            requiresApproval: true,\n            approvalDescription: \"Remove an Executor connection\",\n          },\n          inputSchema: ConnectionScopedPointerInputStd,\n          outputSchema: RemovedOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.gen(function* () {\n              const targetScope = yield* resolveScopeInput(ctx.scopes, input.targetScope);\n              return yield* Effect.as(\n                ctx.connections.remove({\n                  id: ConnectionId.make(input.id),\n                  targetScope: ScopeId.make(targetScope),\n                }),\n                { removed: true },\n              );\n            }),\n        }),\n        tool({\n          name: \"policies.list\",\n          description:\n            \"List tool approval policies visible to this executor, sorted in evaluation order. Use this before creating, updating, reordering, or removing policies.\",\n          outputSchema: PoliciesListOutputStd,\n          execute: (_args, { ctx }) =>\n            Effect.map(ctx.core.policies.list(), (policies) => ({\n              policies: policies.map(policyOutput),\n            })),\n        }),\n        tool({\n          name: \"policies.create\",\n          description:\n            'Create a tool approval policy. Patterns are exact tool ids, a trailing wildcard such as `executor.openapi.*`, or `*`. Actions are `\"approve\"`, `\"require_approval\"`, or `\"block\"`. Omit `position` to place the policy at the top of the target scope.',\n          annotations: {\n            requiresApproval: true,\n            approvalDescription: \"Create an Executor tool policy\",\n          },\n          inputSchema: PolicyCreateInputStd,\n          outputSchema: PolicyMutationOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.gen(function* () {\n              const targetScope = yield* resolveScopeInput(ctx.scopes, input.targetScope);\n              const policy = yield* ctx.core.policies.create({ ...input, targetScope });\n              return { policy: policyOutput(policy) };\n            }),\n        }),\n        tool({\n          name: \"policies.update\",\n          description:\n            \"Update or reorder an approval policy. Use `policies.list` first; preserve fields you are not changing, and use the listed `position` values when computing a new order.\",\n          annotations: {\n            requiresApproval: true,\n            approvalDescription: \"Update an Executor tool policy\",\n          },\n          inputSchema: PolicyUpdateInputStd,\n          outputSchema: PolicyMutationOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.gen(function* () {\n              const targetScope = yield* resolveScopeInput(ctx.scopes, input.targetScope);\n              const policy = yield* ctx.core.policies.update({ ...input, targetScope });\n              return { policy: policyOutput(policy) };\n            }),\n        }),\n        tool({\n          name: \"policies.remove\",\n          description:\n            \"Remove an approval policy from a target scope. Use `policies.list` first so the user can confirm the exact rule id and pattern.\",\n          annotations: {\n            requiresApproval: true,\n            approvalDescription: \"Remove an Executor tool policy\",\n          },\n          inputSchema: PolicyRemoveInputStd,\n          outputSchema: RemovedOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.gen(function* () {\n              const targetScope = yield* resolveScopeInput(ctx.scopes, input.targetScope);\n              return yield* Effect.as(ctx.core.policies.remove({ ...input, targetScope }), {\n                removed: true,\n              });\n            }),\n        }),\n        tool({\n          name: \"oauth.probe\",\n          description:\n            'Probe an OAuth-protected endpoint before starting OAuth. For dynamic MCP-style OAuth, call this first; if `supportsDynamicRegistration` is true, call `oauth.start` with strategy `{kind:\"dynamic-dcr\"}`. If false, create client id/secret secrets in the browser and use an `authorization-code` strategy.',\n          inputSchema: OAuthProbeInputStd,\n          outputSchema: OAuthProbeOutputStd,\n          execute: (input, { ctx }) =>\n            ctx.oauth\n              .probe(input)\n              .pipe(\n                Effect.catchTag(\"OAuthProbeError\", ({ message }) =>\n                  Effect.succeed(oauthToolFailure(\"oauth_probe_failed\", message)),\n                ),\n              ),\n        }),\n        tool({\n          name: \"oauth.start\",\n          description:\n            \"Start an OAuth flow and return the authorization URL the user must open in a browser. `credentialScope` chooses where Executor stores the OAuth connection/token secrets; omit it only in a single-scope local executor, otherwise call `scopes.list` and ask whether the connection should be personal/user-scoped or organization-scoped. OAuth permission scopes belong in `strategy.scopes`. Never put OAuth passwords, authorization codes, or client secrets in chat. For confidential clients, first call `secrets.create` for client id/secret and pass those secret ids in the strategy. After the browser callback completes, call `connections.list`, then configure the source with the returned connection id.\",\n          inputSchema: OAuthStartInputStd,\n          outputSchema: OAuthStartOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.gen(function* () {\n              const webBaseUrl = yield* requireWebBaseUrl(options.webBaseUrl);\n              const tokenScope = yield* resolveScopeInput(ctx.scopes, input.credentialScope);\n              const result = yield* ctx.oauth.start({\n                endpoint: input.endpoint,\n                headers: input.headers,\n                queryParams: input.queryParams,\n                redirectUrl: input.redirectUrl ?? `${webBaseUrl}/api/oauth/callback`,\n                connectionId: input.connectionId,\n                tokenScope,\n                strategy: input.strategy,\n                pluginId: input.pluginId,\n                identityLabel: input.identityLabel,\n              });\n              return {\n                ...result,\n                instructions:\n                  result.authorizationUrl === null\n                    ? \"This OAuth flow completed without a browser handoff. The OAuth connection/token secrets were saved to the selected credential scope. Call connections.list to verify the connection id, then pass that connection id to the relevant source configuration tool.\"\n                    : \"The user needs to open this authorization URL in a browser and complete the OAuth/sign-in flow. Until the browser callback completes, no connection is available for binding. After the user finishes sign-in, call connections.list to find the connection id, then pass that connection id to the relevant source configuration tool. The OAuth connection/token secrets are saved to the selected credential scope.\",\n              };\n            }).pipe(\n              Effect.catchTags({\n                CoreToolsConfigurationError: ({ message }) =>\n                  Effect.succeed(oauthToolFailure(\"oauth_start_not_configured\", message)),\n                CoreToolsScopeNotFoundError: ({ message, scope }) =>\n                  Effect.succeed(oauthToolFailure(\"scope_not_found\", message, { scope })),\n                OAuthStartError: ({ message, error, errorDescription }) =>\n                  Effect.succeed(\n                    oauthToolFailure(\"oauth_start_failed\", message, {\n                      ...(error ? { error } : {}),\n                      ...(errorDescription ? { errorDescription } : {}),\n                    }),\n                  ),\n              }),\n            ),\n        }),\n        tool({\n          name: \"oauth.cancel\",\n          description:\n            \"`credentialScope` must match where `oauth.start` saved the pending browser handoff. Cancel it if the user declines or the wrong flow was started.\",\n          inputSchema: OAuthCancelInputStd,\n          outputSchema: OAuthCancelOutputStd,\n          execute: (input, { ctx }) =>\n            Effect.gen(function* () {\n              const scope = yield* resolveScopeInput(ctx.scopes, input.credentialScope);\n              return yield* Effect.as(ctx.oauth.cancel(input.sessionId, scope), {\n                cancelled: true,\n              });\n            }).pipe(\n              Effect.catchTag(\"CoreToolsScopeNotFoundError\", ({ message, scope }) =>\n                Effect.succeed(oauthToolFailure(\"scope_not_found\", message, { scope })),\n              ),\n            ),\n        }),\n      ],\n    },\n  ],\n}));\n\nexport default coreToolsPlugin;\n","import { Effect, Schema } from \"effect\";\n\nimport { ToolId } from \"./ids\";\n\n// ---------------------------------------------------------------------------\n// Elicitation request — what a tool sends when it needs user input\n// ---------------------------------------------------------------------------\n\n/** Tool needs structured input from the user (render a form) */\nexport const FormElicitation = Schema.TaggedStruct(\"FormElicitation\", {\n  message: Schema.String,\n  /** JSON Schema describing the fields to collect */\n  requestedSchema: Schema.Record(Schema.String, Schema.Unknown),\n});\nexport type FormElicitation = typeof FormElicitation.Type;\n\n/** Tool needs the user to visit a URL (OAuth, approval page, etc.) */\nexport const UrlElicitation = Schema.TaggedStruct(\"UrlElicitation\", {\n  message: Schema.String,\n  url: Schema.String,\n  /** Unique ID so the host can correlate the callback */\n  elicitationId: Schema.String,\n});\nexport type UrlElicitation = typeof UrlElicitation.Type;\n\nexport type ElicitationRequest = FormElicitation | UrlElicitation;\n\n// ---------------------------------------------------------------------------\n// Elicitation response — what the host sends back\n// ---------------------------------------------------------------------------\n\nexport const ElicitationAction = Schema.Literals([\"accept\", \"decline\", \"cancel\"]);\nexport type ElicitationAction = typeof ElicitationAction.Type;\n\nexport const ElicitationResponse = Schema.Struct({\n  action: ElicitationAction,\n  /** Present when action is \"accept\" — the data the user provided */\n  content: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),\n});\nexport type ElicitationResponse = typeof ElicitationResponse.Type;\n\n// ---------------------------------------------------------------------------\n// Elicitation handler — the host provides this to handle requests\n// ---------------------------------------------------------------------------\n\nexport interface ElicitationContext {\n  readonly toolId: ToolId;\n  readonly args: unknown;\n  readonly request: ElicitationRequest;\n}\n\n/**\n * A function the host provides to handle elicitation.\n * The SDK calls this when a tool suspends to ask for user input.\n * The host renders UI / prompts the user / does OAuth / etc.\n */\nexport type ElicitationHandler = (ctx: ElicitationContext) => Effect.Effect<ElicitationResponse>;\n\n// ---------------------------------------------------------------------------\n// Elicitation error — tool was declined or cancelled\n// ---------------------------------------------------------------------------\n\nexport class ElicitationDeclinedError extends Schema.TaggedErrorClass<ElicitationDeclinedError>()(\n  \"ElicitationDeclinedError\",\n  {\n    toolId: ToolId,\n    action: Schema.Literals([\"decline\", \"cancel\"]),\n  },\n) {}\n","import { Effect, Schema } from \"effect\";\n\nimport type { StorageFailure } from \"./fuma-runtime\";\n\nimport { SecretId, ScopeId } from \"./ids\";\n\n// ---------------------------------------------------------------------------\n// SecretProvider — what a concrete backend (keychain, 1password, file,\n// memory, workos-vault, …) implements. Providers are contributed by\n// plugins via `plugin.secretProviders` and registered in the executor\n// at startup; there's no runtime registration.\n//\n// The `key` field is the provider's identifier in the secret table's\n// `provider` column and in `executor.secrets.set({ provider, ... })`.\n// Unique per executor.\n// ---------------------------------------------------------------------------\n\nexport interface SecretProvider {\n  /** Unique key (e.g. \"keychain\", \"env\", \"1password\", \"memory\"). */\n  readonly key: string;\n  /** If false, `set` and `delete` are never called. The executor\n   *  honours this before routing writes — trying to write to a\n   *  read-only provider is an error, not a silent drop. */\n  readonly writable: boolean;\n  /** Get a secret value. `scope` is the executor scope the lookup is\n   *  being made on behalf of — providers that partition their storage\n   *  by scope (memory, keychain via service name, per-vault in\n   *  1password) use it; providers without tenancy ignore it and fall\n   *  back to a flat lookup. Failures (provider unreachable, decryption\n   *  failed, etc.) surface as `StorageFailure` — the executor treats\n   *  a provider call the same as a DB call; `StorageError` is captured\n   *  at the HTTP edge to `InternalError`, `UniqueViolationError` dies. */\n  readonly get: (id: string, scope: string) => Effect.Effect<string | null, StorageFailure>;\n  /** Check whether a provider has a backing value without returning it.\n   *  Providers that can answer this cheaply should implement it so\n   *  stale core routing rows don't appear as selectable secrets. */\n  readonly has?: (id: string, scope: string) => Effect.Effect<boolean, StorageFailure>;\n  /** Set a secret value at a named scope. Only called on writable\n   *  providers. Providers that partition by scope use this arg to\n   *  decide where to write; flat providers ignore it. */\n  readonly set?: (id: string, value: string, scope: string) => Effect.Effect<void, StorageFailure>;\n  /** Delete a secret at a named scope. Only called on writable providers.\n   *  Returns true if something was deleted. */\n  readonly delete?: (id: string, scope: string) => Effect.Effect<boolean, StorageFailure>;\n  /** Enumerate known secret entries. Optional — not all backends can\n   *  enumerate (env-backed providers, for example). */\n  readonly list?: () => Effect.Effect<\n    readonly { readonly id: string; readonly name: string }[],\n    StorageFailure\n  >;\n  /** Whether the provider may be asked during id-only fallback resolution.\n   *  Providers whose own auth depends on `ctx.secrets.get` should opt out to\n   *  avoid recursive fallback through themselves. */\n  readonly allowFallback?: boolean;\n}\n\n// ---------------------------------------------------------------------------\n// SecretRef — metadata about a stored secret. Returned from\n// `executor.secrets.list()`. The actual value lives in the provider\n// and is only reachable via `executor.secrets.get(id)`.\n// ---------------------------------------------------------------------------\n\nexport const SecretRef = Schema.Struct({\n  id: SecretId,\n  scopeId: ScopeId,\n  /** Human-readable label (e.g. \"Cloudflare API Token\") */\n  name: Schema.String,\n  /** Which provider holds the value */\n  provider: Schema.String,\n  createdAt: Schema.Date,\n});\nexport type SecretRef = typeof SecretRef.Type;\n\n// ---------------------------------------------------------------------------\n// SetSecretInput — all the metadata to write a secret in one call.\n// `executor.secrets.set(input)` takes this and writes both the\n// value (to the provider) and the ref (to the `secret` table).\n//\n// `scope` is required — there's no default write target. Callers name\n// which scope in the executor's stack should own the secret. Typical\n// pattern: UI wiring up org-level API keys writes to the org scope;\n// OAuth token exchange writes to the innermost per-user scope.\n// ---------------------------------------------------------------------------\n\nexport const SetSecretInput = Schema.Struct({\n  id: SecretId,\n  /** Scope id to own this secret. Must be one of the executor's\n   *  configured scopes. */\n  scope: ScopeId,\n  /** Display name shown in secret-list UI. */\n  name: Schema.String,\n  /** The secret value itself — never persisted outside the provider. */\n  value: Schema.String,\n  /** Optional provider routing. If unset the executor picks the first\n   *  writable provider in registration order. */\n  provider: Schema.optional(Schema.String),\n});\nexport type SetSecretInput = typeof SetSecretInput.Type;\n\nexport const RemoveSecretInput = Schema.Struct({\n  id: SecretId,\n  /** Scope id whose secret row/value should be removed. Must be one of\n   *  the executor's configured scopes. */\n  targetScope: ScopeId,\n});\nexport type RemoveSecretInput = typeof RemoveSecretInput.Type;\n","// ---------------------------------------------------------------------------\n// OAuth 2.0 helpers — generic, isomorphic building blocks.\n//\n// Thin wrappers around `oauth4webapi` (stateless; pure Web Crypto +\n// `fetch`, no deps; runs unchanged in Node, CF Workers, and browsers).\n// Each public helper is a single `Effect.tryPromise` call that delegates\n// the RFC work to the library and normalises the failure surface into\n// `OAuth2Error`.\n//\n// What stays hand-rolled:\n//   - `OAuth2Error` — our tagged error; we want a stable shape across\n//     every token-endpoint call\n//   - `shouldRefreshToken` — skew check, trivial\n//   - `buildAuthorizationUrl` — the library doesn't expose a raw\n//     authorization-URL builder (it prefers PAR); a 30-line manual\n//     construction keeps the call sync and lets callers opt out of PAR\n// ---------------------------------------------------------------------------\n\nimport { Data, Effect, Predicate } from \"effect\";\nimport * as oauth from \"oauth4webapi\";\n\n// ---------------------------------------------------------------------------\n// Errors\n// ---------------------------------------------------------------------------\n\nexport class OAuth2Error extends Data.TaggedError(\"OAuth2Error\")<{\n  readonly message: string;\n  /**\n   * RFC 6749 §5.2 error code, when the token endpoint returned one\n   * (`invalid_grant`, `invalid_client`, `unauthorized_client`, ...).\n   * Callers use this to distinguish terminal failures (a refresh token\n   * the AS no longer honours → re-auth required) from transient ones.\n   */\n  readonly error?: string;\n  readonly cause?: unknown;\n}> {}\n\n// ---------------------------------------------------------------------------\n// Token response shape (RFC 6749 §5.1)\n// ---------------------------------------------------------------------------\n\nexport type OAuth2TokenResponse = {\n  readonly access_token: string;\n  readonly token_type?: string;\n  readonly refresh_token?: string;\n  readonly expires_in?: number;\n  readonly scope?: string;\n};\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\n/** Refresh tokens this many ms before expiry to avoid mid-request expiration. */\nexport const OAUTH2_REFRESH_SKEW_MS = 60_000;\n\n/** Default token-endpoint timeout. */\nexport const OAUTH2_DEFAULT_TIMEOUT_MS = 20_000;\n\nexport interface OAuthEndpointUrlPolicy {\n  readonly allowHttp?: boolean;\n}\n\nconst isLoopbackHttpUrl = (value: string): boolean => {\n  if (!URL.canParse(value)) return false;\n  const url = new URL(value);\n  if (url.protocol !== \"http:\") return false;\n  const hostname = url.hostname.toLowerCase();\n  return (\n    hostname === \"localhost\" ||\n    hostname === \"0.0.0.0\" ||\n    hostname === \"::1\" ||\n    hostname === \"[::1]\" ||\n    hostname.startsWith(\"127.\")\n  );\n};\n\nexport const isSupportedOAuthEndpointUrl = (\n  value: string,\n  policy: OAuthEndpointUrlPolicy = {},\n): boolean => {\n  if (!URL.canParse(value)) return false;\n  const url = new URL(value);\n  return (\n    url.protocol === \"https:\" ||\n    isLoopbackHttpUrl(value) ||\n    (url.protocol === \"http:\" && policy.allowHttp === true)\n  );\n};\n\nexport const assertSupportedOAuthEndpointUrl = (\n  value: string,\n  label = \"OAuth endpoint URL\",\n  policy: OAuthEndpointUrlPolicy = {},\n): string => {\n  if (isSupportedOAuthEndpointUrl(value, policy)) return value;\n  // oxlint-disable-next-line executor/no-try-catch-or-throw, executor/no-error-constructor -- boundary: synchronous assertion helper used by URL constructors and Effect.try wrappers\n  throw new TypeError(`${label} must use https: or loopback http:`);\n};\n\n// ---------------------------------------------------------------------------\n// PKCE (RFC 7636) — straight delegation to `oauth4webapi`\n// ---------------------------------------------------------------------------\n\nexport const createPkceCodeVerifier = (): string => oauth.generateRandomCodeVerifier();\n\nexport const createPkceCodeChallenge = (verifier: string): Promise<string> =>\n  oauth.calculatePKCECodeChallenge(verifier);\n\n// ---------------------------------------------------------------------------\n// Authorization URL builder\n// ---------------------------------------------------------------------------\n\nexport type BuildAuthorizationUrlInput = {\n  readonly authorizationUrl: string;\n  readonly clientId: string;\n  readonly redirectUrl: string;\n  readonly scopes: readonly string[];\n  readonly state: string;\n  /** Pre-computed base64url S256 challenge (from `createPkceCodeChallenge`). */\n  readonly codeChallenge: string;\n  /** Separator between scopes. RFC 6749 says space; some providers use comma. */\n  readonly scopeSeparator?: string;\n  /** RFC 8707 Resource Indicator. MCP Authorization 2025-06-18 §\"Resource\n   *  Parameter Implementation\" requires clients to send this on every\n   *  authorization request, regardless of AS support. */\n  readonly resource?: string;\n  /** Provider-specific extras (e.g. Google's `access_type=offline`). */\n  readonly extraParams?: Readonly<Record<string, string>>;\n  readonly endpointUrlPolicy?: OAuthEndpointUrlPolicy;\n};\n\n/** Build an RFC 6749 §4.1.1 authorization URL. Sync; pre-computed\n *  challenge lets this stay out of the Promise world. */\nexport const buildAuthorizationUrl = (input: BuildAuthorizationUrlInput): string => {\n  const url = new URL(\n    assertSupportedOAuthEndpointUrl(\n      input.authorizationUrl,\n      \"Authorization URL\",\n      input.endpointUrlPolicy,\n    ),\n  );\n  const separator = input.scopeSeparator ?? \" \";\n  url.searchParams.set(\"client_id\", input.clientId);\n  url.searchParams.set(\"redirect_uri\", input.redirectUrl);\n  url.searchParams.set(\"response_type\", \"code\");\n  if (input.scopes.length > 0) {\n    url.searchParams.set(\"scope\", input.scopes.join(separator));\n  }\n  url.searchParams.set(\"state\", input.state);\n  url.searchParams.set(\"code_challenge_method\", \"S256\");\n  url.searchParams.set(\"code_challenge\", input.codeChallenge);\n  if (input.resource) {\n    url.searchParams.set(\"resource\", input.resource);\n  }\n  if (input.extraParams) {\n    for (const [k, v] of Object.entries(input.extraParams)) {\n      url.searchParams.set(k, v);\n    }\n  }\n  return url.toString();\n};\n\n// ---------------------------------------------------------------------------\n// Error mapping — `oauth4webapi`'s `process*Response` failure shapes are\n// either a WWW-Authenticate challenge or an RFC 6749 §5.2 error body,\n// both exposed via `.error` / `.error_description`. Probing the envelope\n// preserves RFC 6749 error-code semantics (e.g., mapping `invalid_grant`\n// to reauth-required) across wrappers.\n// ---------------------------------------------------------------------------\n\nconst isOAuth2Error = Predicate.isTagged(\"OAuth2Error\") as (cause: unknown) => cause is OAuth2Error;\n\nconst responseFromOAuthErrorCause = (cause: unknown): Response | undefined => {\n  if (cause instanceof Response) return cause;\n  if (typeof cause !== \"object\" || cause === null) return undefined;\n  const envelope = cause as {\n    readonly cause?: unknown;\n    readonly response?: unknown;\n  };\n  if (envelope.response instanceof Response) return envelope.response;\n  if (envelope.cause instanceof Response) return envelope.cause;\n  return undefined;\n};\n\nconst redactTokenEndpointBody = (body: string): string =>\n  body\n    .replaceAll(\n      /(\"(?:access_token|refresh_token|id_token|client_secret)\"\\s*:\\s*\")[^\"]*(\")/gi,\n      \"$1[redacted]$2\",\n    )\n    .replaceAll(\n      /((?:access_token|refresh_token|id_token|client_secret|code)=)[^&\\s]*/gi,\n      \"$1[redacted]\",\n    );\n\nconst tokenEndpointHttpSummary = async (response: Response): Promise<string> => {\n  const status = `HTTP ${response.status}${response.statusText ? ` ${response.statusText}` : \"\"}`;\n  const contentType = response.headers.get(\"content-type\");\n  const url = response.url ? ` from ${response.url}` : \"\";\n  const parts = [`${status}${url}`];\n  if (contentType) parts.push(`content-type ${contentType}`);\n  const preview = await bodyPreviewFromResponse(response);\n  if (preview) parts.push(`body: ${preview}`);\n  return parts.join(\"; \");\n};\n\nconst bodyPreviewFromResponse = async (response: Response): Promise<string | undefined> => {\n  const text = await Promise.resolve()\n    .then(() => response.clone().text())\n    .then(\n      (value) => value.trim(),\n      () => \"\",\n    );\n  if (!text) return undefined;\n  const redacted = redactTokenEndpointBody(text.replaceAll(/\\s+/g, \" \"));\n  return redacted.length > 500 ? `${redacted.slice(0, 500)}...` : redacted;\n};\n\nconst toOAuth2Error = (cause: unknown): OAuth2Error => {\n  if (isOAuth2Error(cause)) return cause;\n  if (typeof cause === \"object\" && cause !== null) {\n    const c = cause as {\n      error?: unknown;\n      error_description?: unknown;\n      message?: unknown;\n    };\n    const code = typeof c.error === \"string\" ? c.error : undefined;\n    const description =\n      typeof c.error_description === \"string\"\n        ? c.error_description\n        : typeof c.message === \"string\"\n          ? c.message\n          : undefined;\n    return new OAuth2Error({\n      message: `OAuth token exchange failed: ${description ?? code ?? \"unknown error\"}`,\n      error: code,\n      cause,\n    });\n  }\n  return new OAuth2Error({\n    message: \"OAuth token exchange failed\",\n    cause,\n  });\n};\n\nconst toOAuth2ErrorWithHttpSummary = (cause: unknown): Effect.Effect<OAuth2Error> => {\n  if (isOAuth2Error(cause)) return Effect.succeed(cause);\n  const base = toOAuth2Error(cause);\n  const response = responseFromOAuthErrorCause(cause);\n  if (!response) return Effect.succeed(base);\n  return Effect.promise(() => tokenEndpointHttpSummary(response)).pipe(\n    Effect.map(\n      (summary) =>\n        new OAuth2Error({\n          message: `${base.message} (${summary})`,\n          error: base.error,\n          cause,\n        }),\n    ),\n  );\n};\n\nconst failOAuth2WithHttpSummary = (cause: unknown): Effect.Effect<never, OAuth2Error> =>\n  toOAuth2ErrorWithHttpSummary(cause).pipe(Effect.flatMap((error) => Effect.fail(error)));\n\n// ---------------------------------------------------------------------------\n// oauth4webapi adapter helpers\n// ---------------------------------------------------------------------------\n\nexport type ClientAuthMethod = \"body\" | \"basic\";\n\nconst asFromTokenUrl = (\n  tokenUrl: string,\n  endpointUrlPolicy: OAuthEndpointUrlPolicy = {},\n): oauth.AuthorizationServer => {\n  assertSupportedOAuthEndpointUrl(tokenUrl, \"Token URL\", endpointUrlPolicy);\n  const url = new URL(tokenUrl);\n  return {\n    issuer: `${url.protocol}//${url.host}`,\n    token_endpoint: tokenUrl,\n  };\n};\n\nconst asFromTokenUrlAndIssuer = (\n  tokenUrl: string,\n  issuerUrl: string | null | undefined,\n  options: {\n    readonly idTokenSigningAlgValuesSupported?: readonly string[];\n    readonly endpointUrlPolicy?: OAuthEndpointUrlPolicy;\n  } = {},\n): oauth.AuthorizationServer => {\n  const as = asFromTokenUrl(tokenUrl, options.endpointUrlPolicy);\n  const withIssuer = issuerUrl ? { ...as, issuer: issuerUrl } : as;\n  return options.idTokenSigningAlgValuesSupported\n    ? {\n        ...withIssuer,\n        id_token_signing_alg_values_supported: [...options.idTokenSigningAlgValuesSupported],\n      }\n    : withIssuer;\n};\n\nconst oauth4webapiRequestOptions = (\n  targetUrl: string,\n  timeoutMs: number | undefined,\n  endpointUrlPolicy: OAuthEndpointUrlPolicy = {},\n): Record<string, unknown> => {\n  const options: Record<string, unknown> = {\n    signal: AbortSignal.timeout(timeoutMs ?? OAUTH2_DEFAULT_TIMEOUT_MS),\n  };\n  if (\n    isLoopbackHttpUrl(targetUrl) ||\n    (URL.canParse(targetUrl) &&\n      new URL(targetUrl).protocol === \"http:\" &&\n      endpointUrlPolicy.allowHttp === true)\n  ) {\n    (options as { [oauth.allowInsecureRequests]?: boolean })[oauth.allowInsecureRequests] = true;\n  }\n  return options;\n};\n\nconst pickClientAuth = (\n  clientSecret: string | null | undefined,\n  method: ClientAuthMethod,\n): oauth.ClientAuth => {\n  if (!clientSecret) return oauth.None();\n  return method === \"basic\"\n    ? oauth.ClientSecretBasic(clientSecret)\n    : oauth.ClientSecretPost(clientSecret);\n};\n\nconst tokenResponseFrom = (r: oauth.TokenEndpointResponse): OAuth2TokenResponse => ({\n  access_token: r.access_token,\n  token_type: r.token_type,\n  refresh_token: r.refresh_token,\n  expires_in: typeof r.expires_in === \"number\" ? r.expires_in : undefined,\n  scope: r.scope,\n});\n\n// MCP source connections are pure OAuth 2.0 — we never request `openid` and\n// never consume `id_token`. Some providers (PostHog, etc.) front an OIDC\n// backend and emit an `id_token` anyway; oauth4webapi then strict-validates\n// its claims against the AS metadata and rejects mismatches we don't care\n// about. Strip the field before delegation.\nconst stripIdToken = async (response: Response): Promise<Response> => {\n  const body = await response\n    .clone()\n    .json()\n    .then(\n      (value: unknown) => value,\n      () => null,\n    );\n  if (!body || typeof body !== \"object\" || !(\"id_token\" in (body as Record<string, unknown>))) {\n    return response;\n  }\n  const { id_token: _ignored, ...rest } = body as Record<string, unknown>;\n  return new Response(JSON.stringify(rest), {\n    status: response.status,\n    statusText: response.statusText,\n    headers: response.headers,\n  });\n};\n\nconst processTokenEndpointResponse = async (\n  as: oauth.AuthorizationServer,\n  client: oauth.Client,\n  response: Response,\n): Promise<OAuth2TokenResponse> =>\n  tokenResponseFrom(\n    await oauth.processGenericTokenEndpointResponse(as, client, await stripIdToken(response)),\n  );\n\n// ---------------------------------------------------------------------------\n// Exchange authorization code → tokens\n// ---------------------------------------------------------------------------\n\nexport type ExchangeAuthorizationCodeInput = {\n  readonly tokenUrl: string;\n  readonly issuerUrl?: string | null;\n  readonly clientId: string;\n  readonly clientSecret?: string | null;\n  readonly redirectUrl: string;\n  readonly codeVerifier: string;\n  readonly code: string;\n  readonly clientAuth?: ClientAuthMethod;\n  readonly idTokenSigningAlgValuesSupported?: readonly string[];\n  /** RFC 8707 Resource Indicator. MCP Auth spec MUST-requires this on\n   *  the token request when the client knows the resource it intends\n   *  to call. */\n  readonly resource?: string;\n  readonly timeoutMs?: number;\n  readonly endpointUrlPolicy?: OAuthEndpointUrlPolicy;\n};\n\nexport const exchangeAuthorizationCode = (\n  input: ExchangeAuthorizationCodeInput,\n): Effect.Effect<OAuth2TokenResponse, OAuth2Error> =>\n  Effect.tryPromise({\n    try: async () => {\n      const as = asFromTokenUrlAndIssuer(input.tokenUrl, input.issuerUrl, {\n        idTokenSigningAlgValuesSupported: input.idTokenSigningAlgValuesSupported,\n        endpointUrlPolicy: input.endpointUrlPolicy,\n      });\n      const client: oauth.Client = { client_id: input.clientId };\n      const clientAuth = pickClientAuth(input.clientSecret, input.clientAuth ?? \"body\");\n      // `authorizationCodeGrantRequest` requires its `callbackParameters`\n      // to have been returned from `validateAuthResponse`. Our public API\n      // takes the `code` directly (the UI already validated `state` by\n      // looking up the session), so skip the library's state-validation\n      // rail and go through the generic grant request instead.\n      const params = new URLSearchParams({\n        code: input.code,\n        redirect_uri: input.redirectUrl,\n        code_verifier: input.codeVerifier,\n      });\n      if (input.resource) {\n        params.set(\"resource\", input.resource);\n      }\n      const response = await oauth.genericTokenEndpointRequest(\n        as,\n        client,\n        clientAuth,\n        \"authorization_code\",\n        params,\n        oauth4webapiRequestOptions(input.tokenUrl, input.timeoutMs, input.endpointUrlPolicy),\n      );\n      return await processTokenEndpointResponse(as, client, response);\n    },\n    catch: (cause) => cause,\n  }).pipe(Effect.catch(failOAuth2WithHttpSummary));\n\n// ---------------------------------------------------------------------------\n// Exchange client credentials → tokens (RFC 6749 §4.4)\n// ---------------------------------------------------------------------------\n\nexport type ExchangeClientCredentialsInput = {\n  readonly tokenUrl: string;\n  readonly clientId: string;\n  readonly clientSecret: string;\n  readonly scopes?: readonly string[];\n  readonly scopeSeparator?: string;\n  readonly clientAuth?: ClientAuthMethod;\n  readonly timeoutMs?: number;\n  readonly endpointUrlPolicy?: OAuthEndpointUrlPolicy;\n};\n\nexport const exchangeClientCredentials = (\n  input: ExchangeClientCredentialsInput,\n): Effect.Effect<OAuth2TokenResponse, OAuth2Error> =>\n  Effect.tryPromise({\n    try: async () => {\n      const as = asFromTokenUrl(input.tokenUrl, input.endpointUrlPolicy);\n      const client: oauth.Client = { client_id: input.clientId };\n      const clientAuth = pickClientAuth(input.clientSecret, input.clientAuth ?? \"body\");\n      const params = new URLSearchParams();\n      if (input.scopes && input.scopes.length > 0) {\n        params.set(\"scope\", input.scopes.join(input.scopeSeparator ?? \" \"));\n      }\n      const response = await oauth.clientCredentialsGrantRequest(\n        as,\n        client,\n        clientAuth,\n        params,\n        oauth4webapiRequestOptions(input.tokenUrl, input.timeoutMs, input.endpointUrlPolicy),\n      );\n      const result = await oauth.processClientCredentialsResponse(as, client, response);\n      return tokenResponseFrom(result);\n    },\n    catch: (cause) => cause,\n  }).pipe(Effect.catch(failOAuth2WithHttpSummary));\n\n// ---------------------------------------------------------------------------\n// Refresh access token\n// ---------------------------------------------------------------------------\n\nexport type RefreshAccessTokenInput = {\n  readonly tokenUrl: string;\n  readonly issuerUrl?: string | null;\n  readonly clientId: string;\n  readonly clientSecret?: string | null;\n  readonly refreshToken: string;\n  readonly scopes?: readonly string[];\n  readonly scopeSeparator?: string;\n  readonly clientAuth?: ClientAuthMethod;\n  readonly idTokenSigningAlgValuesSupported?: readonly string[];\n  /** RFC 8707 Resource Indicator — MCP spec MUST-requires this on\n   *  refresh requests so the new access token's audience is bound to\n   *  the same resource. */\n  readonly resource?: string;\n  readonly timeoutMs?: number;\n  readonly endpointUrlPolicy?: OAuthEndpointUrlPolicy;\n};\n\nexport const refreshAccessToken = (\n  input: RefreshAccessTokenInput,\n): Effect.Effect<OAuth2TokenResponse, OAuth2Error> =>\n  Effect.tryPromise({\n    try: async () => {\n      const as = asFromTokenUrlAndIssuer(input.tokenUrl, input.issuerUrl, {\n        idTokenSigningAlgValuesSupported: input.idTokenSigningAlgValuesSupported,\n        endpointUrlPolicy: input.endpointUrlPolicy,\n      });\n      const client: oauth.Client = { client_id: input.clientId };\n      const clientAuth = pickClientAuth(input.clientSecret, input.clientAuth ?? \"body\");\n      const extraParams = new URLSearchParams();\n      if (input.scopes && input.scopes.length > 0) {\n        extraParams.set(\"scope\", input.scopes.join(input.scopeSeparator ?? \" \"));\n      }\n      if (input.resource) {\n        extraParams.set(\"resource\", input.resource);\n      }\n      const additionalParameters =\n        Array.from(extraParams.keys()).length > 0 ? extraParams : undefined;\n      const response = await oauth.refreshTokenGrantRequest(\n        as,\n        client,\n        clientAuth,\n        input.refreshToken,\n        {\n          ...oauth4webapiRequestOptions(input.tokenUrl, input.timeoutMs, input.endpointUrlPolicy),\n          additionalParameters,\n        },\n      );\n      const result = await oauth.processRefreshTokenResponse(\n        as,\n        client,\n        await stripIdToken(response),\n      );\n      return tokenResponseFrom(result);\n    },\n    catch: (cause) => cause,\n  }).pipe(Effect.catch(failOAuth2WithHttpSummary));\n\n// ---------------------------------------------------------------------------\n// Refresh-needed predicate\n// ---------------------------------------------------------------------------\n\nexport const shouldRefreshToken = (input: {\n  readonly expiresAt: number | null;\n  readonly now?: number;\n  readonly skewMs?: number;\n}): boolean => {\n  if (input.expiresAt === null) return false;\n  const now = input.now ?? Date.now();\n  const skew = input.skewMs ?? OAUTH2_REFRESH_SKEW_MS;\n  return input.expiresAt <= now + skew;\n};\n","// ---------------------------------------------------------------------------\n// OAuth 2.0 metadata discovery + DCR.\n//\n// The token-endpoint helpers in `./oauth-helpers.ts` assume the caller\n// already knows the authorization/token URLs and client_id — that's\n// fine for static integrations (Google, a specific OpenAPI server).\n// The zero-config case — user pastes an arbitrary endpoint URL and we\n// figure out its OAuth configuration — needs three more building blocks:\n//\n//   - RFC 9728 Protected Resource Metadata (/.well-known/oauth-protected-resource)\n//   - RFC 8414 Authorization Server Metadata (/.well-known/oauth-authorization-server,\n//     with OIDC /.well-known/openid-configuration as fallback)\n//   - RFC 7591 Dynamic Client Registration (POST `registration_endpoint`)\n//\n// The discovery path uses Effect HttpClient throughout so tests can provide\n// realistic local HTTP services without patching `globalThis.fetch`. A\n// convenience `beginDynamicAuthorization` chains all three into the single\n// call callers actually need.\n// ---------------------------------------------------------------------------\n\nimport { Data, Duration, Effect, Layer, Option, Predicate, Result, Schema } from \"effect\";\nimport { FetchHttpClient, HttpClient, HttpClientRequest } from \"effect/unstable/http\";\n\nimport {\n  OAUTH2_DEFAULT_TIMEOUT_MS,\n  assertSupportedOAuthEndpointUrl,\n  buildAuthorizationUrl,\n  createPkceCodeChallenge,\n  createPkceCodeVerifier,\n  type OAuthEndpointUrlPolicy,\n} from \"./oauth-helpers\";\n\n// ---------------------------------------------------------------------------\n// Errors\n// ---------------------------------------------------------------------------\n\n/** Separate tag from `OAuth2Error` so callers can distinguish discovery\n *  / DCR failures (happen once, before any token round-trips) from\n *  token-endpoint failures. A plugin's refresh path should never have\n *  to inspect error messages to tell \"metadata drifted, re-discover\"\n *  apart from \"refresh token is no longer honoured\". */\nexport class OAuthDiscoveryError extends Data.TaggedError(\"OAuthDiscoveryError\")<{\n  readonly message: string;\n  readonly status?: number;\n  /** RFC 6749 §5.2 / RFC 7591 §3.2.2 error code, when the AS returned\n   *  one (`invalid_client_metadata`, `invalid_redirect_uri`, ...). Lets\n   *  the HTTP edge surface a structured error to the UI rather than\n   *  swallow the AS's response into a generic message string. */\n  readonly error?: string;\n  readonly errorDescription?: string;\n  readonly cause?: unknown;\n}> {}\n\n// ---------------------------------------------------------------------------\n// Schemas (narrow structural parsing — the RFCs leave many fields\n// optional; we validate only the subset consumers read)\n// ---------------------------------------------------------------------------\n\nconst StringArray = Schema.Array(Schema.String);\n\nexport const OAuthProtectedResourceMetadataSchema = Schema.Struct({\n  resource: Schema.optional(Schema.String),\n  authorization_servers: Schema.optional(StringArray),\n  scopes_supported: Schema.optional(StringArray),\n  bearer_methods_supported: Schema.optional(StringArray),\n  resource_documentation: Schema.optional(Schema.String),\n}).annotate({ identifier: \"OAuthProtectedResourceMetadata\" });\nexport type OAuthProtectedResourceMetadata = typeof OAuthProtectedResourceMetadataSchema.Type;\n\nexport const OAuthAuthorizationServerMetadataSchema = Schema.Struct({\n  issuer: Schema.String,\n  authorization_endpoint: Schema.String,\n  token_endpoint: Schema.String,\n  registration_endpoint: Schema.optional(Schema.String),\n  scopes_supported: Schema.optional(StringArray),\n  response_types_supported: Schema.optional(StringArray),\n  grant_types_supported: Schema.optional(StringArray),\n  code_challenge_methods_supported: Schema.optional(StringArray),\n  token_endpoint_auth_methods_supported: Schema.optional(StringArray),\n  revocation_endpoint: Schema.optional(Schema.String),\n  introspection_endpoint: Schema.optional(Schema.String),\n  userinfo_endpoint: Schema.optional(Schema.String),\n  id_token_signing_alg_values_supported: Schema.optional(StringArray),\n}).annotate({ identifier: \"OAuthAuthorizationServerMetadata\" });\nexport type OAuthAuthorizationServerMetadata = typeof OAuthAuthorizationServerMetadataSchema.Type;\n\nexport type DynamicClientMetadata = {\n  readonly client_name?: string;\n  readonly redirect_uris: readonly string[];\n  readonly grant_types?: readonly string[];\n  readonly response_types?: readonly string[];\n  readonly token_endpoint_auth_method?:\n    | \"none\"\n    | \"client_secret_basic\"\n    | \"client_secret_post\"\n    | \"private_key_jwt\";\n  readonly scope?: string;\n  readonly application_type?: \"web\" | \"native\";\n  readonly client_uri?: string;\n  readonly logo_uri?: string;\n  readonly contacts?: readonly string[];\n  readonly software_id?: string;\n  readonly software_version?: string;\n  /** Escape hatch for provider-specific extensions; merged last. */\n  readonly extra?: Readonly<Record<string, unknown>>;\n};\n\nexport const OAuthClientInformationSchema = Schema.Struct({\n  client_id: Schema.String,\n  client_secret: Schema.optional(Schema.String),\n  client_id_issued_at: Schema.optional(Schema.Number),\n  client_secret_expires_at: Schema.optional(Schema.Number),\n  registration_access_token: Schema.optional(Schema.String),\n  registration_client_uri: Schema.optional(Schema.String),\n  token_endpoint_auth_method: Schema.optional(Schema.String),\n  grant_types: Schema.optional(StringArray),\n  response_types: Schema.optional(StringArray),\n  redirect_uris: Schema.optional(StringArray),\n  client_name: Schema.optional(Schema.String),\n  scope: Schema.optional(Schema.String),\n}).annotate({ identifier: \"OAuthClientInformation\" });\nexport type OAuthClientInformation = typeof OAuthClientInformationSchema.Type;\n\nconst decodeResourceMetadataJson = Schema.decodeUnknownEffect(\n  Schema.fromJsonString(OAuthProtectedResourceMetadataSchema),\n);\nconst decodeAuthServerMetadata = Schema.decodeUnknownEffect(OAuthAuthorizationServerMetadataSchema);\nconst decodeClientInformationJson = Schema.decodeUnknownEffect(\n  Schema.fromJsonString(OAuthClientInformationSchema),\n);\n\nexport interface DiscoveryRequestOptions {\n  /** Injected for tests. Defaults to the platform fetch-backed HttpClient. */\n  readonly httpClientLayer?: Layer.Layer<HttpClient.HttpClient>;\n  /** Abort the request after this many ms. Default 20000. */\n  readonly timeoutMs?: number;\n  /** Send `MCP-Protocol-Version: <value>` on every request. Harmless\n   *  for non-MCP servers; required by the MCP authorization spec. */\n  readonly mcpProtocolVersion?: string;\n  /** Credentials needed to reach the protected resource itself. These\n   *  are intentionally used only for resource-side probes, never for\n   *  authorization-server metadata, DCR, authorization, or token calls. */\n  readonly resourceHeaders?: Readonly<Record<string, string>>;\n  readonly resourceQueryParams?: Readonly<Record<string, string>>;\n  readonly endpointUrlPolicy?: OAuthEndpointUrlPolicy;\n}\n\nconst MCP_PROTOCOL_VERSION_HEADER = \"mcp-protocol-version\";\n\nconst validateEndpointUrl = (\n  value: string,\n  label: string,\n  policy: OAuthEndpointUrlPolicy = {},\n): Effect.Effect<string, OAuthDiscoveryError> =>\n  Effect.try({\n    try: () => assertSupportedOAuthEndpointUrl(value, label, policy),\n    catch: (cause) =>\n      new OAuthDiscoveryError({\n        message: `${label} must use https: or loopback http:`,\n        cause,\n      }),\n  });\n\nconst validateAuthorizationServerMetadata = (\n  metadata: OAuthAuthorizationServerMetadata,\n  policy: OAuthEndpointUrlPolicy = {},\n): Effect.Effect<void, OAuthDiscoveryError> =>\n  Effect.gen(function* () {\n    yield* validateEndpointUrl(metadata.issuer, \"issuer\", policy);\n    yield* validateEndpointUrl(metadata.authorization_endpoint, \"authorization_endpoint\", policy);\n    yield* validateEndpointUrl(metadata.token_endpoint, \"token_endpoint\", policy);\n    if (metadata.registration_endpoint) {\n      yield* validateEndpointUrl(metadata.registration_endpoint, \"registration_endpoint\", policy);\n    }\n  });\n\nconst provideHttpClient = <A, E>(\n  effect: Effect.Effect<A, E, HttpClient.HttpClient>,\n  options: DiscoveryRequestOptions,\n): Effect.Effect<A, E> =>\n  effect.pipe(Effect.provide(options.httpClientLayer ?? FetchHttpClient.layer));\n\nconst executeText = (\n  request: HttpClientRequest.HttpClientRequest,\n  options: DiscoveryRequestOptions,\n  errorMessage: string,\n): Effect.Effect<{ readonly status: number; readonly body: string }, OAuthDiscoveryError> =>\n  provideHttpClient(\n    Effect.gen(function* () {\n      const client = yield* HttpClient.HttpClient;\n      const response = yield* client.execute(request).pipe(\n        Effect.timeoutOrElse({\n          duration: Duration.millis(options.timeoutMs ?? OAUTH2_DEFAULT_TIMEOUT_MS),\n          orElse: () =>\n            Effect.fail(\n              new OAuthDiscoveryError({\n                message: errorMessage,\n                cause: \"timeout\",\n              }),\n            ),\n        }),\n        Effect.mapError((cause) =>\n          Predicate.isTagged(cause, \"OAuthDiscoveryError\")\n            ? cause\n            : new OAuthDiscoveryError({\n                message: errorMessage,\n                cause,\n              }),\n        ),\n      );\n      const body = yield* response.text.pipe(\n        Effect.catch(() => Effect.succeed(\"\")),\n        Effect.mapError(\n          (cause) =>\n            new OAuthDiscoveryError({\n              message: `${errorMessage}: response body could not be read`,\n              status: response.status,\n              cause,\n            }),\n        ),\n      );\n      return { status: response.status, body };\n    }),\n    options,\n  );\n\n// ---------------------------------------------------------------------------\n// RFC 9728 — Protected Resource Metadata\n//\n// Not covered by `oauth4webapi`. Hand-rolled probe: try the path-scoped\n// well-known first, then the origin-scoped fallback.\n// ---------------------------------------------------------------------------\n\nconst buildResourceMetadataUrls = (resourceUrl: string): string[] => {\n  const url = new URL(resourceUrl);\n  const origin = `${url.protocol}//${url.host}`;\n  const path = url.pathname.replace(/\\/+$/, \"\");\n  const urls: string[] = [];\n  if (path && path !== \"/\") {\n    urls.push(`${origin}/.well-known/oauth-protected-resource${path}`);\n  }\n  urls.push(`${origin}/.well-known/oauth-protected-resource`);\n  return urls;\n};\n\nconst withResourceQueryParams = (\n  url: string,\n  queryParams: Readonly<Record<string, string>> | undefined,\n): string => {\n  if (!queryParams || Object.keys(queryParams).length === 0) return url;\n  const parsed = new URL(url);\n  for (const [key, value] of Object.entries(queryParams)) {\n    parsed.searchParams.set(key, value);\n  }\n  return parsed.toString();\n};\n\nexport const discoverProtectedResourceMetadata = (\n  resourceUrl: string,\n  options: DiscoveryRequestOptions = {},\n): Effect.Effect<\n  { readonly metadataUrl: string; readonly metadata: OAuthProtectedResourceMetadata } | null,\n  OAuthDiscoveryError\n> =>\n  Effect.gen(function* () {\n    for (const url of buildResourceMetadataUrls(resourceUrl)) {\n      const requestUrl = withResourceQueryParams(url, options.resourceQueryParams);\n      let request = HttpClientRequest.get(requestUrl).pipe(\n        HttpClientRequest.setHeader(\"accept\", \"application/json\"),\n      );\n      for (const [name, value] of Object.entries(options.resourceHeaders ?? {})) {\n        request = HttpClientRequest.setHeader(request, name, value);\n      }\n      if (options.mcpProtocolVersion) {\n        request = HttpClientRequest.setHeader(\n          request,\n          MCP_PROTOCOL_VERSION_HEADER,\n          options.mcpProtocolVersion,\n        );\n      }\n\n      const result = yield* executeText(\n        request,\n        options,\n        `Failed to fetch protected resource metadata from ${url}`,\n      );\n      if (result.status === 404 || result.status === 405 || result.body.length === 0) continue;\n      if (result.status < 200 || result.status >= 300) {\n        return yield* new OAuthDiscoveryError({\n          message: `Protected resource metadata returned status ${result.status}`,\n          status: result.status,\n        });\n      }\n      const metadata = yield* decodeResourceMetadataJson(result.body).pipe(\n        Effect.mapError(\n          (err) =>\n            new OAuthDiscoveryError({\n              message: \"Protected resource metadata is malformed\",\n              cause: err,\n            }),\n        ),\n      );\n      return { metadataUrl: url, metadata };\n    }\n    return null;\n  });\n\n// ---------------------------------------------------------------------------\n// RFC 8414 + OIDC Discovery — Authorization Server Metadata\n//\n// Try RFC 8414 (`oauth2`) first and fall back to OIDC Discovery. Keep the\n// probing in this module so the whole discovery stack shares the same Effect\n// HttpClient boundary and timeout behavior.\n// ---------------------------------------------------------------------------\n\nconst wellKnownUrlFor = (\n  issuerOrigin: string,\n  algorithm: \"oauth2\" | \"oidc\",\n  issuerPath: string,\n): string => {\n  // Mirrors the library's own well-known composition so the URL we\n  // surface matches what was actually fetched.\n  const suffix = algorithm === \"oauth2\" ? \"oauth-authorization-server\" : \"openid-configuration\";\n  return issuerPath && issuerPath !== \"/\"\n    ? `${issuerOrigin}/.well-known/${suffix}${issuerPath}`\n    : `${issuerOrigin}/.well-known/${suffix}`;\n};\n\nexport const discoverAuthorizationServerMetadata = (\n  issuer: string,\n  options: DiscoveryRequestOptions = {},\n): Effect.Effect<\n  {\n    readonly metadataUrl: string;\n    readonly metadata: OAuthAuthorizationServerMetadata;\n  } | null,\n  OAuthDiscoveryError\n> =>\n  Effect.gen(function* () {\n    yield* validateEndpointUrl(issuer, \"issuer\", options.endpointUrlPolicy);\n    const issuerUrl = new URL(issuer);\n    const issuerOrigin = `${issuerUrl.protocol}//${issuerUrl.host}`;\n    const issuerPath = issuerUrl.pathname.replace(/\\/+$/, \"\");\n\n    for (const algorithm of [\"oauth2\", \"oidc\"] as const) {\n      const metadataUrl = wellKnownUrlFor(issuerOrigin, algorithm, issuerPath);\n      let request = HttpClientRequest.get(metadataUrl).pipe(\n        HttpClientRequest.setHeader(\"accept\", \"application/json\"),\n      );\n      if (options.mcpProtocolVersion) {\n        request = HttpClientRequest.setHeader(\n          request,\n          MCP_PROTOCOL_VERSION_HEADER,\n          options.mcpProtocolVersion,\n        );\n      }\n      const result = yield* executeText(\n        request,\n        options,\n        `Discovery (${algorithm}) failed for ${issuer}`,\n      ).pipe(\n        Effect.map((response) => {\n          if (response.status === 404 || response.status === 405) return null;\n          return response;\n        }),\n        // If one algorithm fails mid-roundtrip (network, parse, issuer\n        // mismatch) we still want to try the other before giving up.\n        Effect.result,\n      );\n\n      if (Result.isFailure(result)) continue;\n      const response = result.success;\n      if (response === null) continue;\n      if (response.status < 200 || response.status >= 300) continue;\n\n      const raw = yield* Schema.decodeUnknownEffect(Schema.fromJsonString(Schema.Unknown))(\n        response.body,\n      ).pipe(\n        Effect.mapError(\n          (err) =>\n            new OAuthDiscoveryError({\n              message: \"Authorization server metadata is malformed\",\n              cause: err,\n            }),\n        ),\n      );\n      const metadata = yield* decodeAuthServerMetadata(raw).pipe(\n        Effect.mapError(\n          (err) =>\n            new OAuthDiscoveryError({\n              message: \"Authorization server metadata is malformed\",\n              cause: err,\n            }),\n        ),\n      );\n      yield* validateAuthorizationServerMetadata(metadata, options.endpointUrlPolicy);\n      return { metadataUrl, metadata };\n    }\n    return null;\n  });\n\n// ---------------------------------------------------------------------------\n// RFC 7591 — Dynamic Client Registration\n//\n// Hand-rolled instead of delegating to oauth4webapi. The library's\n// `processDynamicClientRegistrationResponse` requires the AS return\n// HTTP 201 Created (RFC 7591 §3.2.1), but Todoist (and others) return\n// 200 OK on success. We accept both, and still surface 4xx OAuth error\n// envelopes the same way oauth4webapi would.\n// ---------------------------------------------------------------------------\n\nexport interface RegisterDynamicClientInput {\n  readonly registrationEndpoint: string;\n  readonly metadata: DynamicClientMetadata;\n  readonly initialAccessToken?: string | null;\n}\n\n// Internal failure modes — collapsed into `OAuthDiscoveryError` at the\n// boundary. Tagged so we can match without `instanceof`.\nclass DcrErrorBody extends Data.TaggedError(\"DcrErrorBody\")<{\n  readonly status: number;\n  readonly error: string;\n  readonly error_description?: string;\n}> {}\n\nclass DcrTransport extends Data.TaggedError(\"DcrTransport\")<{\n  readonly detail: string;\n  readonly status?: number;\n  readonly cause?: unknown;\n}> {}\n\nconst DcrErrorBodyJson = Schema.Struct({\n  error: Schema.String,\n  error_description: Schema.optional(Schema.String),\n});\nconst decodeDcrErrorBodyJson = Schema.decodeUnknownOption(Schema.fromJsonString(DcrErrorBodyJson));\n\nconst buildDcrBody = (m: DynamicClientMetadata): Record<string, unknown> => {\n  const body: Record<string, unknown> = { redirect_uris: [...m.redirect_uris] };\n  if (m.client_name !== undefined) body.client_name = m.client_name;\n  if (m.grant_types !== undefined) body.grant_types = [...m.grant_types];\n  if (m.response_types !== undefined) body.response_types = [...m.response_types];\n  if (m.token_endpoint_auth_method !== undefined) {\n    body.token_endpoint_auth_method = m.token_endpoint_auth_method;\n  }\n  if (m.scope !== undefined) body.scope = m.scope;\n  if (m.application_type !== undefined) body.application_type = m.application_type;\n  if (m.client_uri !== undefined) body.client_uri = m.client_uri;\n  if (m.logo_uri !== undefined) body.logo_uri = m.logo_uri;\n  if (m.contacts !== undefined) body.contacts = [...m.contacts];\n  if (m.software_id !== undefined) body.software_id = m.software_id;\n  if (m.software_version !== undefined) body.software_version = m.software_version;\n  if (m.extra) for (const [k, v] of Object.entries(m.extra)) body[k] = v;\n  return body;\n};\n\nconst interpretDcrFailure = (status: number, text: string): DcrErrorBody | DcrTransport => {\n  // RFC 6749 error envelope: `{error, error_description?}` with 4xx.\n  if (status >= 400 && status < 500) {\n    const body = text ? decodeDcrErrorBodyJson(text) : null;\n    return Option.match(body ?? Option.none(), {\n      onNone: () =>\n        new DcrTransport({\n          detail: `Dynamic Client Registration endpoint returned status ${status}${\n            text ? ` — ${text.slice(0, 200)}` : \"\"\n          }`,\n          status,\n        }),\n      onSome: (parsed) =>\n        parsed.error.length > 0\n          ? new DcrErrorBody({\n              status,\n              error: parsed.error,\n              error_description: parsed.error_description,\n            })\n          : new DcrTransport({\n              detail: `Dynamic Client Registration endpoint returned status ${status}${\n                text ? ` — ${text.slice(0, 200)}` : \"\"\n              }`,\n              status,\n            }),\n    });\n  }\n  return new DcrTransport({\n    detail: `Dynamic Client Registration endpoint returned status ${status}${\n      text ? ` — ${text.slice(0, 200)}` : \"\"\n    }`,\n    status,\n  });\n};\n\nexport const registerDynamicClient = (\n  input: RegisterDynamicClientInput,\n  options: DiscoveryRequestOptions = {},\n): Effect.Effect<OAuthClientInformation, OAuthDiscoveryError> =>\n  Effect.gen(function* () {\n    yield* validateEndpointUrl(\n      input.registrationEndpoint,\n      \"registration_endpoint\",\n      options.endpointUrlPolicy,\n    ).pipe(\n      Effect.mapError(\n        (cause) =>\n          new DcrTransport({\n            detail: \"registration_endpoint must use https: or loopback http:\",\n            cause,\n          }),\n      ),\n    );\n\n    const headers: Record<string, string> = {\n      \"content-type\": \"application/json\",\n      accept: \"application/json\",\n    };\n    if (input.initialAccessToken) {\n      headers.authorization = `Bearer ${input.initialAccessToken}`;\n    }\n\n    let request = HttpClientRequest.post(input.registrationEndpoint).pipe(\n      HttpClientRequest.bodyJsonUnsafe(buildDcrBody(input.metadata)),\n    );\n    for (const [name, value] of Object.entries(headers)) {\n      request = HttpClientRequest.setHeader(request, name, value);\n    }\n\n    const response = yield* executeText(\n      request,\n      options,\n      \"Dynamic Client Registration request failed\",\n    ).pipe(\n      Effect.mapError(\n        (cause) =>\n          new DcrTransport({\n            detail: \"Dynamic Client Registration request failed\",\n            cause,\n          }),\n      ),\n    );\n\n    // Accept both 200 and 201 as success — RFC 7591 mandates 201, but\n    // Todoist (and others) return 200 OK with the client information body.\n    if (response.status !== 200 && response.status !== 201) {\n      return yield* interpretDcrFailure(response.status, response.body);\n    }\n\n    return yield* decodeClientInformationJson(response.body).pipe(\n      Effect.mapError(\n        (err) =>\n          new OAuthDiscoveryError({\n            message: \"Dynamic Client Registration response is malformed\",\n            cause: err,\n          }),\n      ),\n    );\n  }).pipe(\n    Effect.catchTags({\n      DcrErrorBody: (err) =>\n        Effect.fail(\n          new OAuthDiscoveryError({\n            message: `Dynamic Client Registration failed: ${err.error}${\n              err.error_description ? ` — ${err.error_description}` : \"\"\n            }`,\n            status: err.status,\n            error: err.error,\n            errorDescription: err.error_description,\n            cause: err,\n          }),\n        ),\n      DcrTransport: (err) =>\n        Effect.fail(\n          new OAuthDiscoveryError({\n            message: `Dynamic Client Registration failed: ${err.detail}`,\n            status: err.status,\n            cause: err.cause ?? err,\n          }),\n        ),\n    }),\n  );\n\n// ---------------------------------------------------------------------------\n// RFC 8707 — Resource Indicator canonicalisation\n//\n// MCP Authorization 2025-06-18 requires `resource` on /authorize and /token\n// requests. RFC 8707 §2 says the value is \"an absolute URI\" identifying the\n// protected resource — same scheme + host + (optional) path, no fragment,\n// no query, lowercased scheme/host.\n// ---------------------------------------------------------------------------\n\nexport const canonicalResourceUrl = (value: string): string => {\n  const url = new URL(value);\n  const scheme = url.protocol.toLowerCase();\n  const host = url.host.toLowerCase();\n  const path = url.pathname.replace(/\\/+$/, \"\");\n  return `${scheme}//${host}${path}`;\n};\n\nconst validateResourceIndicator = (\n  value: string,\n  expected: string,\n): Effect.Effect<string, OAuthDiscoveryError> =>\n  Effect.try({\n    try: () => canonicalResourceUrl(value),\n    catch: (cause) =>\n      new OAuthDiscoveryError({\n        message: \"Protected resource metadata resource is malformed\",\n        cause,\n      }),\n  }).pipe(\n    Effect.flatMap((actual) =>\n      actual === expected || expected.startsWith(`${actual}/`)\n        ? Effect.succeed(actual)\n        : Effect.fail(\n            new OAuthDiscoveryError({\n              message: \"Protected resource metadata resource does not match requested endpoint\",\n              cause: { expected, actual },\n            }),\n          ),\n    ),\n  );\n\n// ---------------------------------------------------------------------------\n// Token-endpoint auth method negotiation\n//\n// OAuth 2.1 §2.4 leaves the choice to the client; our preference order is\n// security-first: PKCE-only public client > client_secret_post >\n// client_secret_basic. Servers like Clay only advertise the secret variants;\n// servers like most MCP examples only advertise `none`.\n// ---------------------------------------------------------------------------\n\nconst SUPPORTED_DCR_AUTH_METHODS = [\"none\", \"client_secret_post\", \"client_secret_basic\"] as const;\n\ntype DcrAuthMethod = (typeof SUPPORTED_DCR_AUTH_METHODS)[number];\n\nconst negotiateAuthMethod = (advertised: readonly string[] | undefined): DcrAuthMethod | null => {\n  if (!advertised || advertised.length === 0) return \"none\";\n  for (const candidate of SUPPORTED_DCR_AUTH_METHODS) {\n    if (advertised.includes(candidate)) return candidate;\n  }\n  return null;\n};\n\n// ---------------------------------------------------------------------------\n// Convenience: begin the full dynamic flow in one call\n// ---------------------------------------------------------------------------\n\nexport interface DynamicAuthorizationState {\n  readonly resourceMetadata: OAuthProtectedResourceMetadata | null;\n  readonly resourceMetadataUrl: string | null;\n  readonly authorizationServerUrl: string;\n  readonly authorizationServerMetadataUrl: string;\n  readonly authorizationServerMetadata: OAuthAuthorizationServerMetadata;\n  readonly clientInformation: OAuthClientInformation;\n  /** RFC 8707 canonical resource URL passed on /authorize and persisted\n   *  for the matching /token + refresh calls. */\n  readonly resource: string;\n  /** Scopes ultimately requested at /authorize. Persisted so refresh\n   *  can replay the same set. */\n  readonly scopes: readonly string[];\n}\n\nexport interface DynamicAuthorizationStartResult {\n  readonly authorizationUrl: string;\n  readonly codeVerifier: string;\n  readonly state: DynamicAuthorizationState;\n}\n\nexport interface BeginDynamicAuthorizationInput {\n  readonly endpoint: string;\n  readonly redirectUrl: string;\n  /** RFC 6749 `state` — callers typically pass a per-session random id. */\n  readonly state: string;\n  /** Defaults: `redirect_uris=[redirectUrl]`, `token_endpoint_auth_method=\"none\"`\n   *  (public client + PKCE). */\n  readonly clientMetadata?: Partial<DynamicClientMetadata>;\n  /** Scopes to request. Defaults to `scopes_supported`; omitted if\n   *  neither is set. */\n  readonly scopes?: readonly string[];\n  /** Pre-existing state from a previous flow. When provided, the\n   *  matching discovery / DCR step is skipped so multi-user sign-ins\n   *  against the same source don't re-pay those costs. */\n  readonly previousState?: {\n    readonly authorizationServerUrl?: string | null;\n    readonly authorizationServerMetadata?: OAuthAuthorizationServerMetadata | null;\n    readonly authorizationServerMetadataUrl?: string | null;\n    readonly resourceMetadata?: OAuthProtectedResourceMetadata | null;\n    readonly resourceMetadataUrl?: string | null;\n    readonly clientInformation?: OAuthClientInformation | null;\n  };\n}\n\nexport const beginDynamicAuthorization = (\n  input: BeginDynamicAuthorizationInput,\n  options: DiscoveryRequestOptions = {},\n): Effect.Effect<DynamicAuthorizationStartResult, OAuthDiscoveryError> =>\n  Effect.gen(function* () {\n    const prior = input.previousState ?? {};\n\n    // Skip the resource-metadata probe when we already know (or can\n    // derive) the authorization server URL. Saves two round-trips for\n    // every second-and-later user signing into the same source.\n    const canSkipResourceDiscovery =\n      prior.resourceMetadata !== undefined ||\n      !!prior.authorizationServerUrl ||\n      !!prior.authorizationServerMetadata;\n\n    const resource = canSkipResourceDiscovery\n      ? prior.resourceMetadata\n        ? {\n            metadata: prior.resourceMetadata,\n            metadataUrl: prior.resourceMetadataUrl ?? null,\n          }\n        : null\n      : yield* discoverProtectedResourceMetadata(input.endpoint, options);\n\n    const expectedResource = canonicalResourceUrl(input.endpoint);\n\n    // RFC 9728 allows multiple authorization_servers — try each in\n    // listed order. Fall back to the endpoint's origin only when no\n    // PRM is advertised.\n    const candidateAuthorizationServerUrls: readonly string[] = (() => {\n      if (prior.authorizationServerUrl) return [prior.authorizationServerUrl];\n      const fromResource = resource?.metadata.authorization_servers ?? [];\n      if (fromResource.length > 0) return fromResource;\n      const u = new URL(input.endpoint);\n      return [`${u.protocol}//${u.host}`];\n    })();\n\n    const priorAuthServer =\n      prior.authorizationServerMetadata && prior.authorizationServerMetadataUrl\n        ? {\n            metadata: prior.authorizationServerMetadata,\n            metadataUrl: prior.authorizationServerMetadataUrl,\n            url: prior.authorizationServerUrl ?? candidateAuthorizationServerUrls[0]!,\n          }\n        : null;\n\n    const discovered = priorAuthServer\n      ? priorAuthServer\n      : yield* (() => {\n          const tried: string[] = [];\n          return Effect.gen(function* () {\n            for (const candidate of candidateAuthorizationServerUrls) {\n              tried.push(candidate);\n              const md = yield* discoverAuthorizationServerMetadata(candidate, options).pipe(\n                Effect.catchTag(\"OAuthDiscoveryError\", () => Effect.succeed(null)),\n              );\n              if (md) {\n                return { metadata: md.metadata, metadataUrl: md.metadataUrl, url: candidate };\n              }\n            }\n            return yield* new OAuthDiscoveryError({\n              message: `No OAuth authorization server metadata found (tried: ${tried.join(\", \")})`,\n            });\n          });\n        })();\n\n    const authServer = { metadata: discovered.metadata, metadataUrl: discovered.metadataUrl };\n    const authorizationServerUrl = discovered.url;\n\n    const pkceMethods = authServer.metadata.code_challenge_methods_supported ?? [];\n    if (pkceMethods.length > 0 && !pkceMethods.includes(\"S256\")) {\n      return yield* new OAuthDiscoveryError({\n        message: `Authorization server does not support PKCE S256 (advertised: ${pkceMethods.join(\", \")})`,\n      });\n    }\n\n    const responseTypes = authServer.metadata.response_types_supported ?? [];\n    if (responseTypes.length > 0 && !responseTypes.includes(\"code\")) {\n      return yield* new OAuthDiscoveryError({\n        message: `Authorization server does not support response_type=code (advertised: ${responseTypes.join(\", \")})`,\n      });\n    }\n\n    // RFC 9728 §2: PRM `scopes_supported` is the resource-scoped list and is\n    // authoritative when present. AS-level `scopes_supported` is global and\n    // (per RFC 9728 §2) \"not meant to indicate that an OAuth client should\n    // request all scopes in the list\", so we don't auto-expand it. When only\n    // AS-level scopes are advertised we request none and let the AS apply\n    // its default — callers wanting refresh tokens / specific scopes pass\n    // them explicitly via `input.scopes`.\n    const scopes: readonly string[] =\n      input.scopes ??\n      (resource?.metadata.scopes_supported && resource.metadata.scopes_supported.length > 0\n        ? resource.metadata.scopes_supported\n        : []);\n\n    const negotiatedAuthMethod = negotiateAuthMethod(\n      authServer.metadata.token_endpoint_auth_methods_supported,\n    );\n    if (!negotiatedAuthMethod) {\n      return yield* new OAuthDiscoveryError({\n        message: `Authorization server does not support a usable token_endpoint_auth_method (advertised: ${(\n          authServer.metadata.token_endpoint_auth_methods_supported ?? []\n        ).join(\", \")})`,\n      });\n    }\n\n    const baseClientMetadata: DynamicClientMetadata = {\n      grant_types: [\"authorization_code\", \"refresh_token\"],\n      response_types: [\"code\"],\n      token_endpoint_auth_method: negotiatedAuthMethod,\n      client_name: \"Executor\",\n      client_uri: \"https://executor.sh\",\n      ...(scopes.length > 0 ? { scope: scopes.join(\" \") } : {}),\n      ...(input.clientMetadata ?? {}),\n      redirect_uris: input.clientMetadata?.redirect_uris ?? [input.redirectUrl],\n    };\n\n    const clientInformation =\n      prior.clientInformation ??\n      (yield* (() => {\n        const reg = authServer.metadata.registration_endpoint;\n        if (!reg) {\n          return Effect.fail(\n            new OAuthDiscoveryError({\n              message:\n                \"Authorization server does not advertise registration_endpoint — cannot auto-register a client\",\n            }),\n          );\n        }\n        return registerDynamicClient(\n          { registrationEndpoint: reg, metadata: baseClientMetadata },\n          options,\n        );\n      })());\n\n    const resourceValue = resource?.metadata.resource\n      ? yield* validateResourceIndicator(resource.metadata.resource, expectedResource)\n      : expectedResource;\n\n    const codeVerifier = createPkceCodeVerifier();\n    const codeChallenge = yield* Effect.promise(() => createPkceCodeChallenge(codeVerifier));\n\n    const authorizationUrl = buildAuthorizationUrl({\n      authorizationUrl: authServer.metadata.authorization_endpoint,\n      clientId: clientInformation.client_id,\n      redirectUrl: input.redirectUrl,\n      scopes,\n      state: input.state,\n      codeChallenge,\n      resource: resourceValue,\n      endpointUrlPolicy: options.endpointUrlPolicy,\n    });\n\n    return {\n      authorizationUrl,\n      codeVerifier,\n      state: {\n        resourceMetadata: resource?.metadata ?? null,\n        resourceMetadataUrl: resource?.metadataUrl ?? null,\n        authorizationServerUrl,\n        authorizationServerMetadataUrl: authServer.metadataUrl,\n        authorizationServerMetadata: authServer.metadata,\n        clientInformation,\n        resource: resourceValue,\n        scopes,\n      },\n    };\n  });\n\nexport { createPkceCodeChallenge };\n","// ---------------------------------------------------------------------------\n// OAuth service implementation — the runtime behind `ctx.oauth`.\n//\n// Owns three flows, all on one codepath:\n//\n//   - probe(endpoint)            RFC 9728 + 8414 metadata lookup without\n//                                 starting a flow. Used by onboarding UI\n//                                 to decide between dynamic-DCR and\n//                                 paste-your-credentials strategies.\n//\n//   - start({strategy, ...})      Persists an `oauth2_session` row.\n//                                 * `dynamic-dcr`    runs discovery +\n//                                                    DCR + PKCE, emits\n//                                                    an authorization URL.\n//                                 * `authorization-code`\n//                                                    uses pre-configured\n//                                                    client_id (secret)\n//                                                    + endpoints + PKCE.\n//                                 * `client-credentials`\n//                                                    no user step —\n//                                                    mints the Connection\n//                                                    inline, returns\n//                                                    authorizationUrl=null.\n//\n//   - complete({state, code})     Looks up the session, exchanges code\n//                                 for tokens, creates the Connection via\n//                                 `ctx.connections.create`, deletes the\n//                                 session. Idempotent-ish in the sense\n//                                 that a retried code past TTL fails\n//                                 clean rather than draining the AS.\n//\n// The service also exposes a canonical `\"oauth2\"` `ConnectionProvider`\n// for refresh. The provider reads `providerState.kind` to pick which\n// token endpoint + client credentials to present; one handler covers\n// every strategy because refresh semantics are strategy-independent.\n// ---------------------------------------------------------------------------\n\nimport { Duration, Effect, Layer, Match, Option, Schema } from \"effect\";\nimport { FetchHttpClient, HttpClient, HttpClientRequest } from \"effect/unstable/http\";\n\nimport type { IFumaClient, StorageFailure } from \"./fuma-runtime\";\n\nimport {\n  ConnectionRefreshError,\n  CreateConnectionInput,\n  TokenMaterial,\n  type ConnectionProvider,\n  type ConnectionRefreshInput,\n  type ConnectionRefreshResult,\n  type ConnectionRef,\n} from \"./connections\";\nimport type { ConnectionProviderNotRegisteredError } from \"./errors\";\nimport { ConnectionId, ScopeId, SecretId } from \"./ids\";\nimport { SetSecretInput, type SecretRef } from \"./secrets\";\nimport {\n  OAUTH2_PROVIDER_KEY,\n  OAUTH2_SESSION_TTL_MS,\n  OAuthCompleteError,\n  OAuthProbeError,\n  OAuthProviderState as OAuthProviderStateSchema,\n  OAuthSessionNotFoundError,\n  OAuthStartError,\n  type OAuthAuthorizationCodeStrategy,\n  type OAuthClientCredentialsStrategy,\n  type OAuthCompleteInput,\n  type OAuthCompleteResult,\n  type OAuthDynamicDcrStrategy,\n  type OAuthProbeInput,\n  type OAuthProbeResult,\n  type OAuthProviderState,\n  type OAuthService,\n  type OAuthStartInput,\n  type OAuthStartResult,\n} from \"./oauth\";\nimport {\n  beginDynamicAuthorization,\n  discoverAuthorizationServerMetadata,\n  discoverProtectedResourceMetadata,\n} from \"./oauth-discovery\";\nimport {\n  buildAuthorizationUrl,\n  createPkceCodeChallenge,\n  createPkceCodeVerifier,\n  exchangeAuthorizationCode,\n  exchangeClientCredentials,\n  type OAuth2Error,\n  type OAuthEndpointUrlPolicy,\n  refreshAccessToken,\n} from \"./oauth-helpers\";\n\n// ---------------------------------------------------------------------------\n// Session payload — persisted under `oauth2_session.payload` as opaque\n// JSON. Shape is strategy-specific; the discriminator matches\n// `OAuthStrategy[\"kind\"]` so completion picks the right exchange path.\n// ---------------------------------------------------------------------------\n\nconst OAuthAuthorizationServerMetadataJson = Schema.Record(Schema.String, Schema.Unknown);\nconst OAuthClientInformationJson = Schema.Record(Schema.String, Schema.Unknown);\n\nconst DynamicDcrSessionPayload = Schema.Struct({\n  kind: Schema.Literal(\"dynamic-dcr\"),\n  identityLabel: Schema.NullOr(Schema.String),\n  codeVerifier: Schema.String,\n  authorizationServerUrl: Schema.String,\n  authorizationServerMetadataUrl: Schema.String,\n  authorizationServerMetadata: OAuthAuthorizationServerMetadataJson,\n  clientInformation: OAuthClientInformationJson,\n  resourceMetadataUrl: Schema.NullOr(Schema.String),\n  resourceMetadata: Schema.NullOr(Schema.Record(Schema.String, Schema.Unknown)),\n  scopes: Schema.Array(Schema.String),\n  resource: Schema.NullOr(Schema.String).pipe(Schema.withDecodingDefaultType(Effect.succeed(null))),\n});\n\nconst AuthorizationCodeSessionPayload = Schema.Struct({\n  kind: Schema.Literal(\"authorization-code\"),\n  identityLabel: Schema.NullOr(Schema.String),\n  codeVerifier: Schema.String,\n  authorizationEndpoint: Schema.String,\n  tokenEndpoint: Schema.String,\n  issuerUrl: Schema.NullOr(Schema.String).pipe(\n    Schema.withDecodingDefaultType(Effect.succeed(null)),\n  ),\n  clientIdSecretId: Schema.String,\n  clientIdSecretScopeId: Schema.NullOr(Schema.String).pipe(\n    Schema.withDecodingDefaultType(Effect.succeed(null)),\n  ),\n  clientSecretSecretId: Schema.NullOr(Schema.String),\n  clientSecretSecretScopeId: Schema.NullOr(Schema.String).pipe(\n    Schema.withDecodingDefaultType(Effect.succeed(null)),\n  ),\n  scopes: Schema.Array(Schema.String),\n  scopeSeparator: Schema.optional(Schema.String),\n  clientAuth: Schema.Literals([\"body\", \"basic\"]),\n});\n\n/** `client-credentials` doesn't produce a session row — it mints the\n *  Connection inline during `start`. The shape is included here for\n *  completeness / future device-code use. */\nconst OAuthSessionPayload = Schema.Union([\n  DynamicDcrSessionPayload,\n  AuthorizationCodeSessionPayload,\n]);\ntype OAuthSessionPayload = typeof OAuthSessionPayload.Type;\n\nconst decodeSessionPayload = Schema.decodeUnknownSync(OAuthSessionPayload);\nconst encodeSessionPayload = Schema.encodeSync(OAuthSessionPayload);\n\nconst UnknownFromJsonString = Schema.fromJsonString(Schema.Unknown);\nconst decodeUnknownJsonOption = Schema.decodeUnknownOption(UnknownFromJsonString);\n\nconst decodeProviderStateSync = Schema.decodeUnknownSync(OAuthProviderStateSchema);\nconst encodeProviderStateSync = Schema.encodeSync(OAuthProviderStateSchema);\n\nconst coerceJson = (value: unknown): unknown => {\n  if (typeof value !== \"string\") return value;\n  return decodeUnknownJsonOption(value).pipe(Option.getOrElse(() => value));\n};\n\nconst decodeProviderState = (value: unknown): OAuthProviderState =>\n  decodeProviderStateSync(coerceJson(value));\n\n// ---------------------------------------------------------------------------\n// Service dependencies — the executor wires these up when it constructs\n// the service. Every dep is a narrow surface so the service stays\n// testable: point to a FumaDB handle + a secrets stub and every\n// code path is exercisable.\n// ---------------------------------------------------------------------------\n\nexport interface OAuthServiceDeps {\n  readonly fuma: IFumaClient;\n  /** Resolves client-id / client-secret refs at start + refresh time.\n   *  A `null` return means \"secret row is gone\" and aborts the flow. */\n  readonly secretsGet: (id: string) => Effect.Effect<string | null, StorageFailure>;\n  readonly secretsGetResolved?: (\n    id: string,\n  ) => Effect.Effect<\n    { readonly value: string; readonly scopeId: string | null } | null,\n    StorageFailure\n  >;\n  readonly secretsGetAtScope?: (\n    id: string,\n    scope: string,\n  ) => Effect.Effect<string | null, StorageFailure>;\n  readonly secretsSet: (input: SetSecretInput) => Effect.Effect<SecretRef, StorageFailure>;\n  /** Mints the Connection row + backing secret rows. Called from\n   *  `complete` (and from `start` for `client-credentials`). */\n  readonly connectionsCreate: (\n    input: CreateConnectionInput,\n  ) => Effect.Effect<ConnectionRef, ConnectionProviderNotRegisteredError | StorageFailure>;\n  /** Random session id generator. Tests override to make outputs\n   *  deterministic. */\n  readonly newSessionId?: () => string;\n  /** `Date.now()` substitute — tests override to drive TTL behavior. */\n  readonly now?: () => number;\n  /** Outbound HTTP client used for OAuth metadata/DCR probes. */\n  readonly httpClientLayer?: Layer.Layer<HttpClient.HttpClient>;\n  readonly endpointUrlPolicy?: OAuthEndpointUrlPolicy;\n}\n\nconst defaultSessionId = (): string => {\n  const crypto = globalThis.crypto;\n  if (crypto?.randomUUID) return `oauth2_session_${crypto.randomUUID()}`;\n  const bytes = new Uint8Array(16);\n  crypto.getRandomValues(bytes);\n  return `oauth2_session_${Array.from(bytes, (byte) => byte.toString(16).padStart(2, \"0\")).join(\n    \"\",\n  )}`;\n};\n\nconst secretIdPart = (value: string): string =>\n  value\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9-]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\") || \"oauth\";\n\nconst oauthSecretId = (\n  connectionId: string,\n  suffix: \"access-token\" | \"refresh-token\" | \"client-secret\",\n): string => {\n  const base = secretIdPart(connectionId);\n  const readable = base.length <= 48 ? base : base.slice(0, 40);\n  return `oauth2-${readable}-${suffix}`;\n};\n\nconst scopedSessionId = (scopeId: string, sessionId: string): string =>\n  `${sessionId}_${secretIdPart(scopeId).slice(0, 24)}`;\n\nconst terminalRefreshErrors = new Set([\"invalid_grant\", \"invalid_client\", \"unauthorized_client\"]);\n\n// ---------------------------------------------------------------------------\n// Service factory\n// ---------------------------------------------------------------------------\n\nexport const makeOAuth2Service = (\n  deps: OAuthServiceDeps,\n): { readonly service: OAuthService; readonly connectionProvider: ConnectionProvider } => {\n  const now = deps.now ?? (() => Date.now());\n  const newSessionId = deps.newSessionId ?? defaultSessionId;\n  const httpClientLayer = deps.httpClientLayer;\n  const endpointUrlPolicy = deps.endpointUrlPolicy;\n  const secretsGetResolved =\n    deps.secretsGetResolved ??\n    ((id: string) =>\n      deps\n        .secretsGet(id)\n        .pipe(Effect.map((value) => (value === null ? null : { value, scopeId: null }))));\n  const getSecretFromRecordedScope = (params: {\n    readonly secretId: string;\n    readonly scopeId: string | null;\n  }) =>\n    params.scopeId && deps.secretsGetAtScope\n      ? deps.secretsGetAtScope(params.secretId, params.scopeId)\n      : deps.secretsGet(params.secretId);\n  const secretsGetResolvedAtScope = (params: {\n    readonly secretId: string;\n    readonly scopeId?: string | null;\n  }) =>\n    params.scopeId && deps.secretsGetAtScope\n      ? deps\n          .secretsGetAtScope(params.secretId, params.scopeId)\n          .pipe(\n            Effect.map((value) =>\n              value === null ? null : { value, scopeId: params.scopeId ?? null },\n            ),\n          )\n      : secretsGetResolved(params.secretId);\n\n  // -------------------------------------------------------------------\n  // probe\n  // -------------------------------------------------------------------\n  const probe = (input: OAuthProbeInput): Effect.Effect<OAuthProbeResult, OAuthProbeError> =>\n    Effect.gen(function* () {\n      const resource = yield* discoverProtectedResourceMetadata(input.endpoint, {\n        httpClientLayer,\n        resourceHeaders: input.headers,\n        resourceQueryParams: input.queryParams,\n      }).pipe(\n        Effect.catchTag(\"OAuthDiscoveryError\", ({ message }) =>\n          Effect.fail(\n            new OAuthProbeError({\n              message: `Protected resource metadata probe failed: ${message}`,\n            }),\n          ),\n        ),\n      );\n\n      const authorizationServerUrl = yield* (() => {\n        const fromResource = resource?.metadata.authorization_servers?.[0];\n        if (fromResource) return Effect.succeed(fromResource);\n        return Effect.try({\n          try: () => {\n            const u = new URL(input.endpoint);\n            return `${u.protocol}//${u.host}`;\n          },\n          catch: () => null,\n        }).pipe(Effect.catch(() => Effect.succeed(null)));\n      })();\n\n      const authServer = authorizationServerUrl\n        ? yield* discoverAuthorizationServerMetadata(authorizationServerUrl, {\n            httpClientLayer,\n          }).pipe(Effect.catchTag(\"OAuthDiscoveryError\", () => Effect.succeed(null)))\n        : null;\n\n      // Dynamic registration is only viable when the AS advertises a\n      // registration_endpoint AND a token_endpoint_auth_method we can use\n      // (`none`, `client_secret_post`, or `client_secret_basic`). If the AS\n      // doesn't list any methods we assume `none` is acceptable per OAuth\n      // 2.1 §2.4 (server's choice).\n      const advertisedAuthMethods =\n        authServer?.metadata.token_endpoint_auth_methods_supported ?? [];\n      const hasNegotiableAuthMethod =\n        advertisedAuthMethods.length === 0 ||\n        advertisedAuthMethods.some(\n          (m) => m === \"none\" || m === \"client_secret_post\" || m === \"client_secret_basic\",\n        );\n      const supportsDynamicRegistration = !!(\n        authServer?.metadata.registration_endpoint && hasNegotiableAuthMethod\n      );\n\n      // Bearer challenge probe — POST the endpoint unauth, look for\n      // 401 + WWW-Authenticate: Bearer. Harmless against non-MCP\n      // endpoints (Railway/GraphQL endpoints respond 200 or 400 with\n      // protocol-specific bodies that we simply read as \"not a bearer\n      // challenge\").\n      const isBearerChallengeEndpoint = yield* Effect.gen(function* () {\n        const client = yield* HttpClient.HttpClient;\n        const probeUrl = new URL(input.endpoint);\n        for (const [key, value] of Object.entries(input.queryParams ?? {})) {\n          probeUrl.searchParams.set(key, value);\n        }\n        let request = HttpClientRequest.post(probeUrl.toString()).pipe(\n          HttpClientRequest.setHeader(\"content-type\", \"application/json\"),\n          HttpClientRequest.setHeader(\"accept\", \"application/json, text/event-stream\"),\n          HttpClientRequest.bodyJsonUnsafe({\n            jsonrpc: \"2.0\",\n            id: 1,\n            method: \"initialize\",\n            params: {\n              protocolVersion: \"2025-06-18\",\n              capabilities: {},\n              clientInfo: { name: \"executor-probe\", version: \"0\" },\n            },\n          }),\n        );\n        for (const [name, value] of Object.entries(input.headers ?? {})) {\n          request = HttpClientRequest.setHeader(request, name, value);\n        }\n        const response = yield* client.execute(request).pipe(Effect.timeout(Duration.seconds(6)));\n        if (response.status !== 401) return false;\n        const wwwAuth =\n          response.headers[\"www-authenticate\"] ?? response.headers[\"WWW-Authenticate\"];\n        return !!wwwAuth && /^\\s*bearer\\b/i.test(wwwAuth);\n      }).pipe(\n        Effect.provide(httpClientLayer ?? FetchHttpClient.layer),\n        Effect.catch(() => Effect.succeed(false)),\n      );\n\n      return {\n        resourceMetadata: (resource?.metadata as Record<string, unknown> | undefined) ?? null,\n        resourceMetadataUrl: resource?.metadataUrl ?? null,\n        authorizationServerMetadata:\n          (authServer?.metadata as Record<string, unknown> | undefined) ?? null,\n        authorizationServerMetadataUrl: authServer?.metadataUrl ?? null,\n        authorizationServerUrl: authorizationServerUrl ?? null,\n        supportsDynamicRegistration,\n        isBearerChallengeEndpoint,\n      };\n    });\n\n  // -------------------------------------------------------------------\n  // start — branches on strategy.kind\n  // -------------------------------------------------------------------\n  const startDynamicDcr = (\n    input: OAuthStartInput,\n    strategy: OAuthDynamicDcrStrategy,\n  ): Effect.Effect<OAuthStartResult, OAuthStartError | StorageFailure> =>\n    Effect.gen(function* () {\n      const started = yield* beginDynamicAuthorization(\n        {\n          endpoint: input.endpoint,\n          redirectUrl: input.redirectUrl,\n          state: \"\",\n          scopes: strategy.scopes,\n        },\n        {\n          httpClientLayer,\n          resourceHeaders: input.headers,\n          resourceQueryParams: input.queryParams,\n          endpointUrlPolicy,\n        },\n      ).pipe(\n        Effect.catchTag(\"OAuthDiscoveryError\", ({ message, error, errorDescription }) =>\n          Effect.fail(\n            new OAuthStartError({\n              message: `Dynamic authorization setup failed: ${message}`,\n              error,\n              errorDescription,\n            }),\n          ),\n        ),\n      );\n\n      const sessionId = scopedSessionId(input.tokenScope, newSessionId());\n\n      // beginDynamicAuthorization returns an authorizationUrl already\n      // signed with whatever `state` we passed. We need the session id\n      // to be the state parameter so completion can look up the row.\n      // Re-build the URL with the corrected state — cheap, one SHA-256\n      // for the PKCE challenge, no network calls.\n      const codeChallenge = yield* Effect.promise(() =>\n        createPkceCodeChallenge(started.codeVerifier),\n      );\n      const authorizationUrl = buildAuthorizationUrl({\n        authorizationUrl: started.state.authorizationServerMetadata.authorization_endpoint,\n        clientId: started.state.clientInformation.client_id,\n        redirectUrl: input.redirectUrl,\n        scopes: started.state.scopes,\n        state: sessionId,\n        codeChallenge,\n        resource: started.state.resource,\n        endpointUrlPolicy,\n      });\n\n      const payload: OAuthSessionPayload = {\n        kind: \"dynamic-dcr\",\n        identityLabel: input.identityLabel ?? null,\n        codeVerifier: started.codeVerifier,\n        authorizationServerUrl: started.state.authorizationServerUrl,\n        authorizationServerMetadataUrl: started.state.authorizationServerMetadataUrl,\n        authorizationServerMetadata: started.state.authorizationServerMetadata as Record<\n          string,\n          unknown\n        >,\n        clientInformation: (() => {\n          const value: unknown = started.state.clientInformation;\n          return value as Record<string, unknown>;\n        })(),\n        resourceMetadataUrl: started.state.resourceMetadataUrl,\n        resourceMetadata:\n          (started.state.resourceMetadata as Record<string, unknown> | null) ?? null,\n        scopes: [...started.state.scopes],\n        resource: started.state.resource,\n      };\n\n      yield* writeSession({\n        sessionId,\n        input,\n        payload,\n        strategyKind: \"dynamic-dcr\",\n      });\n\n      return {\n        sessionId,\n        authorizationUrl,\n        completedConnection: null,\n      };\n    });\n\n  const startAuthorizationCode = (\n    input: OAuthStartInput,\n    strategy: OAuthAuthorizationCodeStrategy,\n  ): Effect.Effect<OAuthStartResult, OAuthStartError | StorageFailure> =>\n    Effect.gen(function* () {\n      const clientIdRef = yield* secretsGetResolvedAtScope({\n        secretId: strategy.clientIdSecretId,\n        scopeId: strategy.clientIdSecretScopeId,\n      }).pipe(\n        Effect.mapError(\n          (err) =>\n            // Storage failure propagates; null returns aren't errors — the\n            // branch below handles them.\n            err,\n        ),\n      );\n      if (clientIdRef === null) {\n        return yield* new OAuthStartError({\n          message: `client_id secret \"${strategy.clientIdSecretId}\" not found`,\n        });\n      }\n\n      const sessionId = scopedSessionId(input.tokenScope, newSessionId());\n      const codeVerifier = createPkceCodeVerifier();\n      const codeChallenge = yield* Effect.promise(() => createPkceCodeChallenge(codeVerifier));\n\n      const authorizationUrl = buildAuthorizationUrl({\n        authorizationUrl: strategy.authorizationEndpoint,\n        clientId: clientIdRef.value,\n        redirectUrl: input.redirectUrl,\n        scopes: strategy.scopes,\n        state: sessionId,\n        codeChallenge,\n        scopeSeparator: strategy.scopeSeparator,\n        extraParams: strategy.extraAuthorizationParams,\n        endpointUrlPolicy,\n      });\n\n      const payload: OAuthSessionPayload = {\n        kind: \"authorization-code\",\n        identityLabel: input.identityLabel ?? null,\n        codeVerifier,\n        authorizationEndpoint: strategy.authorizationEndpoint,\n        tokenEndpoint: strategy.tokenEndpoint,\n        issuerUrl: strategy.issuerUrl ?? new URL(strategy.authorizationEndpoint).origin,\n        clientIdSecretId: strategy.clientIdSecretId,\n        clientIdSecretScopeId: clientIdRef.scopeId,\n        clientSecretSecretId: strategy.clientSecretSecretId ?? null,\n        clientSecretSecretScopeId: strategy.clientSecretSecretId\n          ? ((yield* secretsGetResolvedAtScope({\n              secretId: strategy.clientSecretSecretId,\n              scopeId: strategy.clientSecretSecretScopeId,\n            }))?.scopeId ?? null)\n          : null,\n        scopes: [...strategy.scopes],\n        scopeSeparator: strategy.scopeSeparator,\n        clientAuth: strategy.clientAuth ?? \"body\",\n      };\n\n      yield* writeSession({\n        sessionId,\n        input,\n        payload,\n        strategyKind: \"authorization-code\",\n      });\n\n      return {\n        sessionId,\n        authorizationUrl,\n        completedConnection: null,\n      };\n    });\n\n  const startClientCredentials = (\n    input: OAuthStartInput,\n    strategy: OAuthClientCredentialsStrategy,\n  ): Effect.Effect<OAuthStartResult, OAuthStartError | StorageFailure> =>\n    Effect.gen(function* () {\n      const clientIdRef = yield* secretsGetResolvedAtScope({\n        secretId: strategy.clientIdSecretId,\n        scopeId: strategy.clientIdSecretScopeId,\n      });\n      const clientSecretRef = yield* secretsGetResolvedAtScope({\n        secretId: strategy.clientSecretSecretId,\n        scopeId: strategy.clientSecretSecretScopeId,\n      });\n      if (clientIdRef === null || clientSecretRef === null) {\n        return yield* new OAuthStartError({\n          message: \"client_id / client_secret secret not found\",\n        });\n      }\n\n      const tokens = yield* exchangeClientCredentials({\n        tokenUrl: strategy.tokenEndpoint,\n        clientId: clientIdRef.value,\n        clientSecret: clientSecretRef.value,\n        scopes: strategy.scopes,\n        scopeSeparator: strategy.scopeSeparator,\n        clientAuth: strategy.clientAuth ?? \"body\",\n        endpointUrlPolicy,\n      }).pipe(\n        Effect.mapError(\n          ({ message }: OAuth2Error) =>\n            new OAuthStartError({\n              message: `Client credentials exchange failed: ${message}`,\n            }),\n        ),\n      );\n\n      const expiresAt =\n        typeof tokens.expires_in === \"number\" ? now() + tokens.expires_in * 1000 : null;\n\n      const providerState: OAuthProviderState = {\n        kind: \"client-credentials\",\n        tokenEndpoint: strategy.tokenEndpoint,\n        clientIdSecretId: strategy.clientIdSecretId,\n        clientIdSecretScopeId: clientIdRef.scopeId,\n        clientSecretSecretId: strategy.clientSecretSecretId,\n        clientSecretSecretScopeId: clientSecretRef.scopeId,\n        scopes: [...(strategy.scopes ?? [])],\n        scopeSeparator: strategy.scopeSeparator,\n        clientAuth: strategy.clientAuth ?? \"body\",\n        scope: tokens.scope ?? null,\n      };\n\n      yield* deps\n        .connectionsCreate(\n          CreateConnectionInput.make({\n            id: ConnectionId.make(input.connectionId),\n            scope: ScopeId.make(input.tokenScope),\n            provider: OAUTH2_PROVIDER_KEY,\n            identityLabel: input.identityLabel ?? safeHostname(input.endpoint),\n            accessToken: TokenMaterial.make({\n              secretId: SecretId.make(oauthSecretId(input.connectionId, \"access-token\")),\n              name: \"OAuth Access Token\",\n              value: tokens.access_token,\n            }),\n            refreshToken: null,\n            expiresAt,\n            oauthScope: tokens.scope ?? null,\n            providerState: encodeProviderStateSync(providerState) as Record<string, unknown>,\n          }),\n        )\n        .pipe(\n          Effect.catchTags({\n            ConnectionProviderNotRegisteredError: () =>\n              Effect.fail(\n                new OAuthStartError({\n                  message: \"Failed to mint connection: ConnectionProviderNotRegisteredError\",\n                }),\n              ),\n            StorageError: ({ message }) =>\n              Effect.fail(\n                new OAuthStartError({\n                  message: `Failed to mint connection: ${message}`,\n                }),\n              ),\n            UniqueViolationError: () =>\n              Effect.fail(\n                new OAuthStartError({\n                  message: \"Failed to mint connection: UniqueViolationError\",\n                }),\n              ),\n          }),\n        );\n\n      return {\n        sessionId: \"\",\n        authorizationUrl: null,\n        completedConnection: { connectionId: input.connectionId },\n      };\n    });\n\n  const start = (\n    input: OAuthStartInput,\n  ): Effect.Effect<OAuthStartResult, OAuthStartError | StorageFailure> =>\n    Match.value(input.strategy).pipe(\n      Match.when({ kind: \"dynamic-dcr\" }, (strategy) => startDynamicDcr(input, strategy)),\n      Match.when({ kind: \"authorization-code\" }, (strategy) =>\n        startAuthorizationCode(input, strategy),\n      ),\n      Match.when({ kind: \"client-credentials\" }, (strategy) =>\n        startClientCredentials(input, strategy),\n      ),\n      Match.exhaustive,\n    );\n\n  const writeSession = (args: {\n    sessionId: string;\n    input: OAuthStartInput;\n    payload: OAuthSessionPayload;\n    strategyKind: string;\n  }): Effect.Effect<void, StorageFailure> =>\n    deps.fuma\n      .use(\"oauth2_session.create\", (db) =>\n        db.create(\"oauth2_session\", {\n          id: args.sessionId,\n          scope_id: args.input.tokenScope,\n          plugin_id: args.input.pluginId,\n          strategy: args.strategyKind,\n          connection_id: args.input.connectionId,\n          token_scope: args.input.tokenScope,\n          redirect_url: args.input.redirectUrl,\n          payload: encodeSessionPayload(args.payload) as Record<string, unknown>,\n          expires_at: now() + OAUTH2_SESSION_TTL_MS,\n          created_at: new Date(),\n        }),\n      )\n      .pipe(Effect.asVoid);\n\n  // -------------------------------------------------------------------\n  // complete — exchange the code, mint the Connection, delete the session\n  // -------------------------------------------------------------------\n  const complete = (\n    input: OAuthCompleteInput,\n  ): Effect.Effect<\n    OAuthCompleteResult,\n    OAuthCompleteError | OAuthSessionNotFoundError | StorageFailure\n  > =>\n    Effect.gen(function* () {\n      const row = (yield* deps.fuma.use(\"oauth2_session.findForComplete\", (db) =>\n        db.findFirst(\"oauth2_session\", {\n          where: (b) => b(\"id\", \"=\", input.state),\n        }),\n      )) as {\n        readonly id: string;\n        readonly scope_id: string;\n        readonly connection_id: string;\n        readonly token_scope: string;\n        readonly redirect_url: string;\n        readonly payload: unknown;\n        readonly expires_at: number | bigint | string;\n      } | null;\n      if (!row) {\n        return yield* new OAuthSessionNotFoundError({ sessionId: input.state });\n      }\n      if (input.tokenScope !== undefined && row.token_scope !== input.tokenScope) {\n        return yield* new OAuthSessionNotFoundError({ sessionId: input.state });\n      }\n\n      const deleteSession = deps.fuma.use(\"oauth2_session.deleteForComplete\", (db) =>\n        db.deleteMany(\"oauth2_session\", {\n          where: (b) => b.and(b(\"id\", \"=\", input.state), b(\"scope_id\", \"=\", row.scope_id)),\n        }),\n      );\n\n      if (input.error) {\n        yield* deleteSession;\n        return yield* new OAuthCompleteError({\n          message: `Authorization server returned error: ${input.error}`,\n          code: input.error,\n        });\n      }\n      if (!input.code) {\n        yield* deleteSession;\n        return yield* new OAuthCompleteError({\n          message: \"Missing authorization code\",\n        });\n      }\n      const expiresAt = Number(row.expires_at as number | bigint);\n      if (expiresAt <= now()) {\n        yield* deleteSession;\n        return yield* new OAuthCompleteError({\n          message: \"OAuth session expired\",\n        });\n      }\n\n      const payload = decodeSessionPayload(coerceJson(row.payload));\n      const endpoint = \"\"; // not stored on the row — the payload's own\n      // endpoint fields drive exchange; we just need\n      // a display string for the identity label.\n      const connectionId = row.connection_id;\n      const tokenScope = row.token_scope;\n      const redirectUrl = row.redirect_url;\n\n      // Dispatch to the strategy-specific exchange.\n      const inputCode = input.code;\n      const exchangeResult = yield* Match.value(payload)\n        .pipe(\n          Match.when({ kind: \"dynamic-dcr\" }, (p) => exchangeDynamicDcr(p, inputCode, redirectUrl)),\n          Match.when({ kind: \"authorization-code\" }, (p) =>\n            exchangeAuthorizationCodeStrategy(p, inputCode, redirectUrl),\n          ),\n          Match.exhaustive,\n        )\n        .pipe(Effect.tapError(() => deleteSession));\n\n      const connectionExpiresAt =\n        typeof exchangeResult.tokens.expires_in === \"number\"\n          ? now() + exchangeResult.tokens.expires_in * 1000\n          : null;\n\n      const dynamicClientSecretSecretId = yield* (() => {\n        if (payload.kind !== \"dynamic-dcr\") return Effect.succeed(null);\n        const clientSecret = payload.clientInformation.client_secret;\n        if (typeof clientSecret !== \"string\" || clientSecret.length === 0) {\n          return Effect.succeed(null);\n        }\n        const secretId = oauthSecretId(connectionId, \"client-secret\");\n        return deps\n          .secretsSet(\n            SetSecretInput.make({\n              id: SecretId.make(secretId),\n              scope: ScopeId.make(tokenScope),\n              name: \"OAuth Client Secret\",\n              value: clientSecret,\n            }),\n          )\n          .pipe(\n            Effect.as(secretId),\n            Effect.catchTags({\n              StorageError: ({ message }) =>\n                Effect.fail(\n                  new OAuthCompleteError({\n                    message: `Failed to persist DCR client_secret: ${message}`,\n                  }),\n                ),\n              UniqueViolationError: () =>\n                Effect.fail(\n                  new OAuthCompleteError({\n                    message: \"Failed to persist DCR client_secret: UniqueViolationError\",\n                  }),\n                ),\n            }),\n          );\n      })();\n\n      const providerState: OAuthProviderState =\n        payload.kind === \"dynamic-dcr\"\n          ? {\n              kind: \"dynamic-dcr\",\n              tokenEndpoint: (\n                payload.authorizationServerMetadata as {\n                  token_endpoint: string;\n                }\n              ).token_endpoint,\n              issuerUrl:\n                (payload.authorizationServerMetadata as { issuer?: string }).issuer ?? null,\n              authorizationServerUrl: payload.authorizationServerUrl,\n              authorizationServerMetadataUrl: payload.authorizationServerMetadataUrl,\n              idTokenSigningAlgValuesSupported: (\n                payload.authorizationServerMetadata as {\n                  id_token_signing_alg_values_supported?: string[];\n                }\n              ).id_token_signing_alg_values_supported,\n              clientId: (payload.clientInformation as { client_id: string }).client_id,\n              clientSecretSecretId: dynamicClientSecretSecretId,\n              clientAuth:\n                (payload.clientInformation as { token_endpoint_auth_method?: string })\n                  .token_endpoint_auth_method === \"client_secret_basic\"\n                  ? \"basic\"\n                  : \"body\",\n              clientSecretSecretScopeId: dynamicClientSecretSecretId ? tokenScope : null,\n              scopes: [...payload.scopes],\n              scope: exchangeResult.tokens.scope ?? null,\n              resource: payload.resource,\n            }\n          : {\n              kind: \"authorization-code\",\n              tokenEndpoint: payload.tokenEndpoint,\n              issuerUrl: payload.issuerUrl,\n              clientIdSecretId: payload.clientIdSecretId,\n              clientIdSecretScopeId: payload.clientIdSecretScopeId,\n              clientSecretSecretId: payload.clientSecretSecretId,\n              clientSecretSecretScopeId: payload.clientSecretSecretScopeId,\n              clientAuth: payload.clientAuth,\n              scopes: [...payload.scopes],\n              scopeSeparator: payload.scopeSeparator,\n              scope: exchangeResult.tokens.scope ?? null,\n            };\n\n      yield* deps\n        .connectionsCreate(\n          CreateConnectionInput.make({\n            id: ConnectionId.make(connectionId),\n            scope: ScopeId.make(tokenScope),\n            provider: OAUTH2_PROVIDER_KEY,\n            identityLabel: safeHostname(\n              payload.identityLabel ?? exchangeResult.endpointForDisplay ?? endpoint,\n            ),\n            accessToken: TokenMaterial.make({\n              secretId: SecretId.make(oauthSecretId(connectionId, \"access-token\")),\n              name: \"OAuth Access Token\",\n              value: exchangeResult.tokens.access_token,\n            }),\n            refreshToken: exchangeResult.tokens.refresh_token\n              ? TokenMaterial.make({\n                  secretId: SecretId.make(oauthSecretId(connectionId, \"refresh-token\")),\n                  name: \"OAuth Refresh Token\",\n                  value: exchangeResult.tokens.refresh_token,\n                })\n              : null,\n            expiresAt: connectionExpiresAt,\n            oauthScope: exchangeResult.tokens.scope ?? null,\n            providerState: encodeProviderStateSync(providerState) as Record<string, unknown>,\n          }),\n        )\n        .pipe(\n          Effect.catchTags({\n            ConnectionProviderNotRegisteredError: () =>\n              Effect.fail(\n                new OAuthCompleteError({\n                  message: \"Failed to mint connection: ConnectionProviderNotRegisteredError\",\n                }),\n              ),\n            StorageError: ({ message }) =>\n              Effect.fail(\n                new OAuthCompleteError({\n                  message: `Failed to mint connection: ${message}`,\n                }),\n              ),\n            UniqueViolationError: () =>\n              Effect.fail(\n                new OAuthCompleteError({\n                  message: \"Failed to mint connection: UniqueViolationError\",\n                }),\n              ),\n          }),\n        );\n\n      yield* deleteSession;\n\n      return {\n        connectionId,\n        expiresAt: connectionExpiresAt,\n        scope: exchangeResult.tokens.scope ?? null,\n      };\n    });\n\n  interface ExchangeResult {\n    readonly tokens: {\n      readonly access_token: string;\n      readonly refresh_token?: string;\n      readonly expires_in?: number;\n      readonly scope?: string;\n      readonly token_type?: string;\n    };\n    readonly endpointForDisplay: string | null;\n  }\n\n  const exchangeDynamicDcr = (\n    payload: Extract<OAuthSessionPayload, { kind: \"dynamic-dcr\" }>,\n    code: string,\n    redirectUrl: string,\n  ): Effect.Effect<ExchangeResult, OAuthCompleteError> =>\n    Effect.gen(function* () {\n      const md = payload.authorizationServerMetadata as {\n        token_endpoint: string;\n        issuer?: string;\n        id_token_signing_alg_values_supported?: string[];\n      };\n      const ci = payload.clientInformation as {\n        client_id: string;\n        client_secret?: string;\n        token_endpoint_auth_method?: string;\n      };\n      const tokens = yield* exchangeAuthorizationCode({\n        tokenUrl: md.token_endpoint,\n        issuerUrl: md.issuer,\n        clientId: ci.client_id,\n        clientSecret: ci.client_secret ?? undefined,\n        redirectUrl,\n        codeVerifier: payload.codeVerifier,\n        code,\n        idTokenSigningAlgValuesSupported: md.id_token_signing_alg_values_supported,\n        clientAuth: ci.token_endpoint_auth_method === \"client_secret_basic\" ? \"basic\" : \"body\",\n        resource: payload.resource ?? undefined,\n        endpointUrlPolicy,\n      }).pipe(\n        Effect.mapError(\n          ({ message, error }: OAuth2Error) =>\n            new OAuthCompleteError({\n              message: `Token exchange failed: ${message}`,\n              code: error,\n            }),\n        ),\n      );\n      return {\n        tokens,\n        endpointForDisplay: payload.authorizationServerUrl,\n      };\n    });\n\n  const exchangeAuthorizationCodeStrategy = (\n    payload: Extract<OAuthSessionPayload, { kind: \"authorization-code\" }>,\n    code: string,\n    redirectUrl: string,\n  ): Effect.Effect<ExchangeResult, OAuthCompleteError | StorageFailure> =>\n    Effect.gen(function* () {\n      const clientId = payload.clientIdSecretScopeId\n        ? yield* getSecretFromRecordedScope({\n            secretId: payload.clientIdSecretId,\n            scopeId: payload.clientIdSecretScopeId,\n          })\n        : yield* deps.secretsGet(payload.clientIdSecretId);\n      if (clientId === null) {\n        return yield* new OAuthCompleteError({\n          message: `client_id secret \"${payload.clientIdSecretId}\" not found`,\n        });\n      }\n      const clientSecret = payload.clientSecretSecretId\n        ? yield* getSecretFromRecordedScope({\n            secretId: payload.clientSecretSecretId,\n            scopeId: payload.clientSecretSecretScopeId,\n          })\n        : null;\n      if (payload.clientSecretSecretId && clientSecret === null) {\n        return yield* new OAuthCompleteError({\n          message: `client_secret secret \"${payload.clientSecretSecretId}\" not found`,\n        });\n      }\n\n      const tokens = yield* exchangeAuthorizationCode({\n        tokenUrl: payload.tokenEndpoint,\n        issuerUrl: payload.issuerUrl,\n        clientId,\n        clientSecret: clientSecret ?? undefined,\n        redirectUrl,\n        codeVerifier: payload.codeVerifier,\n        code,\n        clientAuth: payload.clientAuth,\n        endpointUrlPolicy,\n      }).pipe(\n        Effect.mapError(\n          ({ message, error }: OAuth2Error) =>\n            new OAuthCompleteError({\n              message: `Token exchange failed: ${message}`,\n              code: error,\n            }),\n        ),\n      );\n      return {\n        tokens,\n        endpointForDisplay: null,\n      };\n    });\n\n  const cancel = (sessionId: string, tokenScope: string): Effect.Effect<void, StorageFailure> =>\n    deps.fuma\n      .use(\"oauth2_session.cancel\", (db) =>\n        db.deleteMany(\"oauth2_session\", {\n          where: (b) => b.and(b(\"id\", \"=\", sessionId), b(\"scope_id\", \"=\", tokenScope)),\n        }),\n      )\n      .pipe(Effect.asVoid);\n\n  // -------------------------------------------------------------------\n  // Canonical connection provider — refresh handler\n  // -------------------------------------------------------------------\n  const connectionProvider: ConnectionProvider = {\n    key: OAUTH2_PROVIDER_KEY,\n    refresh: (input: ConnectionRefreshInput) =>\n      Effect.gen(function* () {\n        if (!input.providerState) {\n          return yield* new ConnectionRefreshError({\n            connectionId: input.connectionId,\n            message: \"oauth2 connection missing providerState\",\n          });\n        }\n        const state = yield* Effect.try({\n          try: () => decodeProviderState(input.providerState),\n          catch: (cause) =>\n            new ConnectionRefreshError({\n              connectionId: input.connectionId,\n              message: \"oauth2 providerState is malformed\",\n              cause,\n            }),\n        });\n\n        if (state.kind !== \"client-credentials\" && !input.refreshToken) {\n          return yield* new ConnectionRefreshError({\n            connectionId: input.connectionId,\n            message: \"oauth2 connection has no refresh token\",\n            reauthRequired: true,\n          });\n        }\n\n        // Resolve client credentials depending on strategy. Dynamic-DCR\n        // embeds `client_id` inline (DCR-minted public client);\n        // authorization-code reads it off a secret; client-credentials\n        // reads both id + secret.\n        const { clientId, clientSecret } = yield* Match.value(state).pipe(\n          Match.when({ kind: \"dynamic-dcr\" }, (s) =>\n            Effect.gen(function* () {\n              const csec = s.clientSecretSecretId\n                ? yield* getSecretFromRecordedScope({\n                    secretId: s.clientSecretSecretId,\n                    scopeId: s.clientSecretSecretScopeId ?? null,\n                  }).pipe(\n                    Effect.catchTags({\n                      StorageError: ({ message, cause }) =>\n                        Effect.fail(\n                          new ConnectionRefreshError({\n                            connectionId: input.connectionId,\n                            message: `Failed to resolve DCR client_secret: ${message}`,\n                            cause,\n                          }),\n                        ),\n                      UniqueViolationError: (cause) =>\n                        Effect.fail(\n                          new ConnectionRefreshError({\n                            connectionId: input.connectionId,\n                            message: \"Failed to resolve DCR client_secret: UniqueViolationError\",\n                            cause,\n                          }),\n                        ),\n                    }),\n                  )\n                : null;\n              if (s.clientSecretSecretId && csec === null) {\n                return yield* new ConnectionRefreshError({\n                  connectionId: input.connectionId,\n                  message: `client_secret secret \"${s.clientSecretSecretId}\" not found`,\n                  reauthRequired: true,\n                });\n              }\n              return { clientId: s.clientId, clientSecret: csec };\n            }),\n          ),\n          Match.whenOr({ kind: \"authorization-code\" }, { kind: \"client-credentials\" }, (s) =>\n            Effect.gen(function* () {\n              const cid = yield* getSecretFromRecordedScope({\n                secretId: s.clientIdSecretId,\n                scopeId: s.clientIdSecretScopeId ?? null,\n              }).pipe(\n                Effect.catchTags({\n                  StorageError: ({ message, cause }) =>\n                    Effect.fail(\n                      new ConnectionRefreshError({\n                        connectionId: input.connectionId,\n                        message: `Failed to resolve client_id secret: ${message}`,\n                        cause,\n                      }),\n                    ),\n                  UniqueViolationError: (cause) =>\n                    Effect.fail(\n                      new ConnectionRefreshError({\n                        connectionId: input.connectionId,\n                        message: \"Failed to resolve client_id secret: UniqueViolationError\",\n                        cause,\n                      }),\n                    ),\n                }),\n              );\n              if (cid === null) {\n                return yield* new ConnectionRefreshError({\n                  connectionId: input.connectionId,\n                  message: `client_id secret \"${s.clientIdSecretId}\" not found`,\n                  reauthRequired: true,\n                });\n              }\n              const csec = s.clientSecretSecretId\n                ? yield* getSecretFromRecordedScope({\n                    secretId: s.clientSecretSecretId,\n                    scopeId: s.clientSecretSecretScopeId ?? null,\n                  }).pipe(\n                    Effect.catchTags({\n                      StorageError: ({ message, cause }) =>\n                        Effect.fail(\n                          new ConnectionRefreshError({\n                            connectionId: input.connectionId,\n                            message: `Failed to resolve client_secret: ${message}`,\n                            cause,\n                          }),\n                        ),\n                      UniqueViolationError: (cause) =>\n                        Effect.fail(\n                          new ConnectionRefreshError({\n                            connectionId: input.connectionId,\n                            message: \"Failed to resolve client_secret: UniqueViolationError\",\n                            cause,\n                          }),\n                        ),\n                    }),\n                  )\n                : null;\n              if (s.clientSecretSecretId && csec === null) {\n                return yield* new ConnectionRefreshError({\n                  connectionId: input.connectionId,\n                  message: `client_secret secret \"${s.clientSecretSecretId}\" not found`,\n                  reauthRequired: true,\n                });\n              }\n              return { clientId: cid, clientSecret: csec };\n            }),\n          ),\n          Match.exhaustive,\n        );\n\n        const tokenEndpoint = yield* (() => {\n          if (state.tokenEndpoint) return Effect.succeed(state.tokenEndpoint);\n          return Effect.fail(\n            new ConnectionRefreshError({\n              connectionId: input.connectionId,\n              message: \"oauth2 providerState is missing token endpoint\",\n              reauthRequired: true,\n            }),\n          );\n        })();\n\n        const tokens = yield* (\n          state.kind === \"client-credentials\"\n            ? exchangeClientCredentials({\n                tokenUrl: tokenEndpoint,\n                clientId,\n                clientSecret: clientSecret ?? \"\",\n                scopes: state.scopes,\n                scopeSeparator: state.scopeSeparator,\n                clientAuth: state.clientAuth,\n                endpointUrlPolicy,\n              })\n            : refreshAccessToken({\n                tokenUrl: tokenEndpoint,\n                issuerUrl:\n                  state.kind === \"dynamic-dcr\" || state.kind === \"authorization-code\"\n                    ? (state.issuerUrl ?? undefined)\n                    : undefined,\n                clientId,\n                clientSecret: clientSecret ?? undefined,\n                refreshToken: input.refreshToken!,\n                scopes:\n                  state.kind === \"dynamic-dcr\" || state.kind === \"authorization-code\"\n                    ? state.scopes\n                    : undefined,\n                scopeSeparator:\n                  state.kind === \"dynamic-dcr\" || state.kind === \"authorization-code\"\n                    ? state.scopeSeparator\n                    : undefined,\n                clientAuth: state.clientAuth,\n                idTokenSigningAlgValuesSupported:\n                  state.kind === \"dynamic-dcr\" ? state.idTokenSigningAlgValuesSupported : undefined,\n                endpointUrlPolicy,\n                resource:\n                  state.kind === \"dynamic-dcr\" || state.kind === \"authorization-code\"\n                    ? (state.resource ?? undefined)\n                    : undefined,\n              })\n        ).pipe(\n          Effect.mapError(\n            ({ message, error }: OAuth2Error) =>\n              new ConnectionRefreshError({\n                connectionId: input.connectionId,\n                message: `OAuth refresh failed: ${message}`,\n                // Terminal RFC 6749 §5.2 errors mean retrying won't heal it.\n                reauthRequired: error ? terminalRefreshErrors.has(error) : false,\n              }),\n          ),\n        );\n\n        const expiresAt =\n          typeof tokens.expires_in === \"number\" ? now() + tokens.expires_in * 1000 : null;\n\n        const result: ConnectionRefreshResult = {\n          accessToken: tokens.access_token,\n          refreshToken: tokens.refresh_token,\n          expiresAt,\n          oauthScope: tokens.scope ?? input.oauthScope,\n          providerState: encodeProviderStateSync({\n            ...state,\n            tokenEndpoint,\n            scope: tokens.scope ?? state.scope,\n          }) as Record<string, unknown>,\n        };\n        return result;\n      }),\n  };\n\n  const service: OAuthService = { probe, start, complete, cancel };\n\n  return { service, connectionProvider };\n};\n\nconst safeHostname = (value: string | null): string | null => {\n  if (!value) return null;\n  // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: URL constructor is the platform parser; non-URL labels remain display labels\n  try {\n    return new URL(value).host;\n  } catch {\n    return value;\n  }\n};\n","// ---------------------------------------------------------------------------\n// JSON Schema $ref hoisting and re-attachment\n//\n// Core logic for deduplicating shared definitions across tools.\n// Used by any ToolRegistry implementation (in-memory, database-backed, etc.)\n//\n// Only handles standard JSON Schema formats ($defs, definitions).\n// Plugin-specific formats (e.g. OpenAPI components/schemas) must be\n// normalized by the plugin before calling registerDefinitions/register.\n// ---------------------------------------------------------------------------\n\ntype Obj = Record<string, unknown>;\n\n/** Standard JSON Schema $ref patterns. */\nconst REF_PATTERN = /^#\\/(?:\\$defs|definitions)\\/(.+)$/;\n\n/** Extract the definition name from a standard $ref pointer. */\nconst parseRefName = (ref: string): string | undefined => ref.match(REF_PATTERN)?.[1];\n\n/**\n * Recursively rewrite `#/definitions/<name>` pointers to `#/$defs/<name>`.\n * Returns the input unchanged if no rewrites are needed.\n */\nexport const normalizeRefs = (node: unknown): unknown => {\n  if (node == null || typeof node !== \"object\") return node;\n  if (Array.isArray(node)) {\n    let changed = false;\n    const out = node.map((item) => {\n      const n = normalizeRefs(item);\n      if (n !== item) changed = true;\n      return n;\n    });\n    return changed ? out : node;\n  }\n\n  const obj = node as Obj;\n\n  if (typeof obj.$ref === \"string\") {\n    const name = parseRefName(obj.$ref);\n    if (name) {\n      const canonical = `#/$defs/${name}`;\n      return canonical !== obj.$ref ? { ...obj, $ref: canonical } : obj;\n    }\n    return obj;\n  }\n\n  let changed = false;\n  const result: Obj = {};\n  for (const [k, v] of Object.entries(obj)) {\n    const n = normalizeRefs(v);\n    if (n !== v) changed = true;\n    result[k] = n;\n  }\n  return changed ? result : obj;\n};\n\n/**\n * Extract `$defs` and `definitions` from a JSON Schema,\n * returning { stripped, defs } where `stripped` is the schema without local\n * definitions and `defs` is a flat map of definition name → schema.\n */\nexport const hoistDefinitions = (\n  schema: unknown,\n): { stripped: unknown; defs: Record<string, unknown> } => {\n  if (schema == null || typeof schema !== \"object\") {\n    return { stripped: schema, defs: {} };\n  }\n  const obj = schema as Obj;\n  const defs: Record<string, unknown> = {};\n\n  if (obj.$defs && typeof obj.$defs === \"object\") {\n    for (const [k, v] of Object.entries(obj.$defs as Obj)) {\n      defs[k] = v;\n    }\n  }\n\n  if (obj.definitions && typeof obj.definitions === \"object\") {\n    for (const [k, v] of Object.entries(obj.definitions as Obj)) {\n      defs[k] = v;\n    }\n  }\n\n  const { $defs: _a, definitions: _b, ...rest } = obj;\n  return { stripped: rest, defs };\n};\n\n/**\n * Walk a schema and collect all $ref target names transitively.\n * e.g. \"#/$defs/Address\" → \"Address\", and if Address references City, both.\n */\nexport const collectRefs = (\n  node: unknown,\n  defs: ReadonlyMap<string, unknown>,\n  found: Set<string> = new Set(),\n): Set<string> => {\n  if (node == null || typeof node !== \"object\") return found;\n  const obj = node as Obj;\n\n  if (typeof obj.$ref === \"string\") {\n    const name = parseRefName(obj.$ref);\n    if (name && !found.has(name)) {\n      found.add(name);\n      const def = defs.get(name);\n      if (def) collectRefs(def, defs, found);\n    }\n    return found;\n  }\n\n  for (const v of Object.values(obj)) {\n    if (v && typeof v === \"object\") {\n      if (Array.isArray(v)) {\n        for (const item of v) collectRefs(item, defs, found);\n      } else {\n        collectRefs(v, defs, found);\n      }\n    }\n  }\n  return found;\n};\n\nexport const collectReferencedDefinitions = (\n  roots: readonly unknown[],\n  defs: ReadonlyMap<string, unknown>,\n): Record<string, unknown> => {\n  const refs = new Set<string>();\n  for (const root of roots) {\n    collectRefs(root, defs, refs);\n  }\n\n  const referenced: Record<string, unknown> = {};\n  for (const name of refs) {\n    const def = defs.get(name);\n    if (def) referenced[name] = def;\n  }\n  return referenced;\n};\n\n/**\n * Re-attach only the referenced shared definitions into a schema,\n * so the caller gets a self-contained, usable JSON Schema.\n *\n * Assumes all `$ref` pointers and definitions have already been normalized\n * to `#/$defs/<name>` form at registration time.\n */\nexport const reattachDefs = (schema: unknown, defs: ReadonlyMap<string, unknown>): unknown => {\n  if (schema == null || typeof schema !== \"object\") return schema;\n  const attached = collectReferencedDefinitions([schema], defs);\n  if (Object.keys(attached).length === 0) return schema;\n\n  return { ...(schema as Record<string, unknown>), $defs: attached };\n};\n","import { Struct } from \"effect\";\n\n// Keep these helpers deliberately small and local. They preserve only the\n// upstream helper behavior this vendored compiler actually uses.\nexport const isPlainObject = (value: unknown): value is Record<string, unknown> => {\n  if (value === null || typeof value !== \"object\") return false;\n  const prototype = Object.getPrototypeOf(value);\n  return prototype === Object.prototype || prototype === null;\n};\n\nexport const cloneDeep = <T>(value: T): T => structuredClone(value);\n\nexport const merge = <T extends object>(\n  target: T,\n  ...sources: ReadonlyArray<object | undefined>\n): T => {\n  const output = target as Record<string, unknown>;\n  for (const source of sources) {\n    if (!source) continue;\n    for (const [key, value] of Object.entries(source as Record<string, unknown>)) {\n      const current = output[key];\n      output[key] =\n        isPlainObject(current) && isPlainObject(value)\n          ? merge({ ...current }, value)\n          : cloneDeep(value);\n    }\n  }\n  return target;\n};\n\nexport const findKey = <T>(\n  object: Record<string, T> | undefined,\n  predicate: (value: T, key: string) => boolean,\n): string | undefined => {\n  if (!object) return undefined;\n  for (const [key, value] of Object.entries(object)) {\n    if (predicate(value, key)) return key;\n  }\n  return undefined;\n};\n\nexport const memoize = <F extends (arg: any, ...rest: any[]) => any>(fn: F): F => {\n  const cache = new Map<Parameters<F>[0], ReturnType<F>>();\n  return ((arg: Parameters<F>[0], ...rest: unknown[]) => {\n    if (cache.has(arg)) return cache.get(arg);\n    const value = fn(arg, ...rest);\n    cache.set(arg, value);\n    return value;\n  }) as F;\n};\n\nexport const omit = <T extends object, K extends keyof T>(object: T, ...keys: K[]): Omit<T, K> =>\n  Struct.omit(object, keys);\n\nexport const uniqBy = <T>(items: ReadonlyArray<T>, iteratee: (value: T) => string): T[] => {\n  const seen = new Set<string>();\n  const result: T[] = [];\n  for (const item of items) {\n    const key = iteratee(item);\n    if (seen.has(key)) continue;\n    seen.add(key);\n    result.push(item);\n  }\n  return result;\n};\n\nexport const deburr = (value: string): string =>\n  value.normalize(\"NFD\").replace(/[\\u0300-\\u036f]/g, \"\");\n\nexport const upperFirst = (value: string): string =>\n  value.length === 0 ? value : value[0]!.toUpperCase() + value.slice(1);\n","import type { Options } from \"./\";\n\nexport function format(code: string, options: Options): string {\n  void options;\n  return code;\n}\n","import type { JSONSchema4Type } from \"./json-schema\";\n\nexport type AST_TYPE = AST[\"type\"];\n\nexport type AST =\n  | TAny\n  | TArray\n  | TBoolean\n  | TEnum\n  | TInterface\n  | TNamedInterface\n  | TIntersection\n  | TLiteral\n  | TNever\n  | TNumber\n  | TNull\n  | TObject\n  | TReference\n  | TString\n  | TTuple\n  | TUnion\n  | TUnknown\n  | TCustomType;\n\nexport interface AbstractAST {\n  comment?: string;\n  keyName?: string;\n  standaloneName?: string;\n  type: AST_TYPE;\n  deprecated?: boolean;\n}\n\nexport type ASTWithComment = AST & { comment: string };\nexport type ASTWithName = AST & { keyName: string };\nexport type ASTWithStandaloneName = AST & { standaloneName: string };\n\nexport function hasComment(ast: AST): ast is ASTWithComment {\n  return (\n    (\"comment\" in ast && ast.comment != null && ast.comment !== \"\") ||\n    // Compare to true because ast.deprecated might be undefined\n    (\"deprecated\" in ast && ast.deprecated === true)\n  );\n}\n\nexport function hasStandaloneName(ast: AST): ast is ASTWithStandaloneName {\n  return \"standaloneName\" in ast && ast.standaloneName != null && ast.standaloneName !== \"\";\n}\n\n////////////////////////////////////////////     types\n\nexport interface TAny extends AbstractAST {\n  type: \"ANY\";\n}\n\nexport interface TArray extends AbstractAST {\n  type: \"ARRAY\";\n  params: AST;\n}\n\nexport interface TBoolean extends AbstractAST {\n  type: \"BOOLEAN\";\n}\n\nexport interface TEnum extends AbstractAST {\n  standaloneName: string;\n  type: \"ENUM\";\n  params: TEnumParam[];\n}\n\nexport interface TEnumParam {\n  ast: AST;\n  keyName: string;\n}\n\nexport interface TInterface extends AbstractAST {\n  type: \"INTERFACE\";\n  params: TInterfaceParam[];\n  superTypes: TNamedInterface[];\n}\n\nexport interface TNamedInterface extends AbstractAST {\n  standaloneName: string;\n  type: \"INTERFACE\";\n  params: TInterfaceParam[];\n  superTypes: TNamedInterface[];\n}\n\nexport interface TNever extends AbstractAST {\n  type: \"NEVER\";\n}\n\nexport interface TInterfaceParam {\n  ast: AST;\n  keyName: string;\n  isRequired: boolean;\n  isPatternProperty: boolean;\n  isUnreachableDefinition: boolean;\n}\n\nexport interface TIntersection extends AbstractAST {\n  type: \"INTERSECTION\";\n  params: AST[];\n}\n\nexport interface TLiteral extends AbstractAST {\n  params: JSONSchema4Type;\n  type: \"LITERAL\";\n}\n\nexport interface TNumber extends AbstractAST {\n  type: \"NUMBER\";\n}\n\nexport interface TNull extends AbstractAST {\n  type: \"NULL\";\n}\n\nexport interface TObject extends AbstractAST {\n  type: \"OBJECT\";\n}\n\nexport interface TReference extends AbstractAST {\n  type: \"REFERENCE\";\n  params: string;\n}\n\nexport interface TString extends AbstractAST {\n  type: \"STRING\";\n}\n\nexport interface TTuple extends AbstractAST {\n  type: \"TUPLE\";\n  params: AST[];\n  spreadParam?: AST;\n  minItems: number;\n  maxItems?: number;\n}\n\nexport interface TUnion extends AbstractAST {\n  type: \"UNION\";\n  params: AST[];\n}\n\nexport interface TUnknown extends AbstractAST {\n  type: \"UNKNOWN\";\n}\n\nexport interface TCustomType extends AbstractAST {\n  type: \"CUSTOM_TYPE\";\n  params: string;\n}\n\n////////////////////////////////////////////     literals\n\nexport const T_ANY: TAny = {\n  type: \"ANY\",\n};\n\nexport const T_ANY_ADDITIONAL_PROPERTIES: TAny & ASTWithName = {\n  keyName: \"[k: string]\",\n  type: \"ANY\",\n};\n\nexport const T_UNKNOWN: TUnknown = {\n  type: \"UNKNOWN\",\n};\n\nexport const T_UNKNOWN_ADDITIONAL_PROPERTIES: TUnknown & ASTWithName = {\n  keyName: \"[k: string]\",\n  type: \"UNKNOWN\",\n};\n","import type { JSONSchema4, JSONSchema4Type, JSONSchema4TypeName } from \"./json-schema\";\nimport { isPlainObject, memoize } from \"../compat\";\n\nexport type SchemaType =\n  | \"ALL_OF\"\n  | \"UNNAMED_SCHEMA\"\n  | \"ANY\"\n  | \"ANY_OF\"\n  | \"BOOLEAN\"\n  | \"NAMED_ENUM\"\n  | \"NAMED_SCHEMA\"\n  | \"NEVER\"\n  | \"NULL\"\n  | \"NUMBER\"\n  | \"STRING\"\n  | \"OBJECT\"\n  | \"ONE_OF\"\n  | \"TYPED_ARRAY\"\n  | \"REFERENCE\"\n  | \"UNION\"\n  | \"UNNAMED_ENUM\"\n  | \"UNTYPED_ARRAY\"\n  | \"CUSTOM_TYPE\";\n\nexport type JSONSchemaTypeName = JSONSchema4TypeName;\nexport type JSONSchemaType = JSONSchema4Type;\n\nexport interface JSONSchema extends JSONSchema4 {\n  /**\n   * schema extension to support numeric enums\n   */\n  tsEnumNames?: string[];\n  /**\n   * schema extension to support custom types\n   */\n  tsType?: string;\n  /**\n   * property exists at least in https://json-schema.org/draft/2019-09/json-schema-validation.html#rfc.section.9.3\n   */\n  deprecated?: boolean;\n}\n\nexport const Parent = Symbol(\"Parent\");\n\nexport interface LinkedJSONSchema extends JSONSchema {\n  /**\n   * A reference to this schema's parent node, for convenience.\n   * `null` when this is the root schema.\n   */\n  [Parent]: LinkedJSONSchema | null;\n\n  additionalItems?: boolean | LinkedJSONSchema;\n  additionalProperties?: boolean | LinkedJSONSchema;\n  items?: LinkedJSONSchema | LinkedJSONSchema[];\n  definitions?: {\n    [k: string]: LinkedJSONSchema;\n  };\n  properties?: {\n    [k: string]: LinkedJSONSchema;\n  };\n  patternProperties?: {\n    [k: string]: LinkedJSONSchema;\n  };\n  dependencies?: {\n    [k: string]: LinkedJSONSchema | string[];\n  };\n  allOf?: LinkedJSONSchema[];\n  anyOf?: LinkedJSONSchema[];\n  oneOf?: LinkedJSONSchema[];\n  not?: LinkedJSONSchema;\n}\n\nexport const Types = Symbol(\"Types\");\nexport const Intersection = Symbol(\"Intersection\");\n\n/**\n * Normalized JSON schema.\n *\n * Note: `definitions` and `id` are removed by the normalizer. Use `$defs` and `$id` instead.\n */\nexport interface NormalizedJSONSchema extends Omit<LinkedJSONSchema, \"definitions\" | \"id\"> {\n  [Intersection]?: NormalizedJSONSchema;\n  [Parent]: NormalizedJSONSchema | null;\n  [Types]: ReadonlySet<SchemaType>;\n\n  additionalItems?: boolean | NormalizedJSONSchema;\n  additionalProperties: boolean | NormalizedJSONSchema;\n  extends?: string[];\n  items?: NormalizedJSONSchema | NormalizedJSONSchema[];\n  $defs?: {\n    [k: string]: NormalizedJSONSchema;\n  };\n  properties?: {\n    [k: string]: NormalizedJSONSchema;\n  };\n  patternProperties?: {\n    [k: string]: NormalizedJSONSchema;\n  };\n  dependencies?: {\n    [k: string]: NormalizedJSONSchema | string[];\n  };\n  allOf?: NormalizedJSONSchema[];\n  anyOf?: NormalizedJSONSchema[];\n  oneOf?: NormalizedJSONSchema[];\n  not?: NormalizedJSONSchema;\n  required: string[];\n}\n\nexport interface EnumJSONSchema extends NormalizedJSONSchema {\n  enum: JSONSchema4Type[];\n}\n\nexport interface NamedEnumJSONSchema extends NormalizedJSONSchema {\n  tsEnumNames: string[];\n}\n\nexport interface SchemaSchema extends NormalizedJSONSchema {\n  properties: {\n    [k: string]: NormalizedJSONSchema;\n  };\n  required: string[];\n}\n\nexport interface JSONSchemaWithDefinitions extends NormalizedJSONSchema {\n  $defs: {\n    [k: string]: NormalizedJSONSchema;\n  };\n}\n\nexport interface CustomTypeJSONSchema extends NormalizedJSONSchema {\n  tsType: string;\n}\n\nexport const getRootSchema = memoize((schema: NormalizedJSONSchema): NormalizedJSONSchema => {\n  const parent = schema[Parent];\n  if (!parent) {\n    return schema;\n  }\n  return getRootSchema(parent);\n});\n\nexport function isBoolean(schema: LinkedJSONSchema | JSONSchemaType): schema is boolean {\n  return schema === true || schema === false;\n}\n\nexport function isPrimitive(schema: LinkedJSONSchema | JSONSchemaType): schema is JSONSchemaType {\n  return !isPlainObject(schema);\n}\n\nexport function isCompound(schema: JSONSchema): boolean {\n  return Array.isArray(schema.type) || \"anyOf\" in schema || \"oneOf\" in schema;\n}\n","import { deburr, isPlainObject, upperFirst } from \"./compat\";\nimport {\n  Intersection,\n  type JSONSchema,\n  type LinkedJSONSchema,\n  type NormalizedJSONSchema,\n  Parent,\n} from \"./types/JSONSchema\";\n\n// keys that shouldn't be traversed by the catchall step\nconst BLACKLISTED_KEYS = new Set([\n  \"id\",\n  \"$defs\",\n  \"$id\",\n  \"$schema\",\n  \"title\",\n  \"description\",\n  \"default\",\n  \"multipleOf\",\n  \"maximum\",\n  \"exclusiveMaximum\",\n  \"minimum\",\n  \"exclusiveMinimum\",\n  \"maxLength\",\n  \"minLength\",\n  \"pattern\",\n  \"additionalItems\",\n  \"items\",\n  \"maxItems\",\n  \"minItems\",\n  \"uniqueItems\",\n  \"maxProperties\",\n  \"minProperties\",\n  \"required\",\n  \"additionalProperties\",\n  \"definitions\",\n  \"properties\",\n  \"patternProperties\",\n  \"dependencies\",\n  \"enum\",\n  \"type\",\n  \"allOf\",\n  \"anyOf\",\n  \"oneOf\",\n  \"not\",\n]);\n\nfunction traverseObjectKeys(\n  obj: Record<string, LinkedJSONSchema>,\n  callback: (schema: LinkedJSONSchema, key: string | null) => void,\n  processed: Set<LinkedJSONSchema>,\n) {\n  Object.keys(obj).forEach((k) => {\n    if (obj[k] && typeof obj[k] === \"object\" && !Array.isArray(obj[k])) {\n      traverse(obj[k], callback, processed, k);\n    }\n  });\n}\n\nfunction traverseArray(\n  arr: LinkedJSONSchema[],\n  callback: (schema: LinkedJSONSchema, key: string | null) => void,\n  processed: Set<LinkedJSONSchema>,\n) {\n  arr.forEach((s, k) => traverse(s, callback, processed, k.toString()));\n}\n\nfunction traverseIntersection(\n  schema: LinkedJSONSchema,\n  callback: (schema: LinkedJSONSchema, key: string | null) => void,\n  processed: Set<LinkedJSONSchema>,\n) {\n  if (typeof schema !== \"object\" || !schema) {\n    return;\n  }\n\n  const r = schema as unknown as Record<string | symbol, unknown>;\n  const intersection = r[Intersection] as NormalizedJSONSchema | undefined;\n  if (!intersection) {\n    return;\n  }\n\n  if (Array.isArray(intersection.allOf)) {\n    traverseArray(intersection.allOf, callback, processed);\n  }\n}\n\nexport function traverse(\n  schema: LinkedJSONSchema,\n  callback: (schema: LinkedJSONSchema, key: string | null) => void,\n  processed = new Set<LinkedJSONSchema>(),\n  key?: string,\n): void {\n  // Handle recursive schemas\n  if (processed.has(schema)) {\n    return;\n  }\n\n  processed.add(schema);\n  callback(schema, key ?? null);\n\n  if (schema.anyOf) {\n    traverseArray(schema.anyOf, callback, processed);\n  }\n  if (schema.allOf) {\n    traverseArray(schema.allOf, callback, processed);\n  }\n  if (schema.oneOf) {\n    traverseArray(schema.oneOf, callback, processed);\n  }\n  if (schema.properties) {\n    traverseObjectKeys(schema.properties, callback, processed);\n  }\n  if (schema.patternProperties) {\n    traverseObjectKeys(schema.patternProperties, callback, processed);\n  }\n  if (schema.additionalProperties && typeof schema.additionalProperties === \"object\") {\n    traverse(schema.additionalProperties, callback, processed);\n  }\n  if (schema.items) {\n    const { items } = schema;\n    if (Array.isArray(items)) {\n      traverseArray(items, callback, processed);\n    } else {\n      traverse(items, callback, processed);\n    }\n  }\n  if (schema.additionalItems && typeof schema.additionalItems === \"object\") {\n    traverse(schema.additionalItems, callback, processed);\n  }\n  if (schema.dependencies) {\n    if (Array.isArray(schema.dependencies)) {\n      traverseArray(schema.dependencies, callback, processed);\n    } else {\n      traverseObjectKeys(schema.dependencies as LinkedJSONSchema, callback, processed);\n    }\n  }\n  if (schema.definitions) {\n    traverseObjectKeys(schema.definitions as Record<string, LinkedJSONSchema>, callback, processed);\n  }\n  if (schema.$defs) {\n    traverseObjectKeys(schema.$defs as Record<string, LinkedJSONSchema>, callback, processed);\n  }\n  if (schema.not) {\n    traverse(schema.not, callback, processed);\n  }\n  traverseIntersection(schema, callback, processed);\n\n  // technically you can put definitions on any key\n  Object.keys(schema)\n    .filter((key) => !BLACKLISTED_KEYS.has(key))\n    .forEach((key) => {\n      const child = schema[key];\n      if (child && typeof child === \"object\") {\n        traverseObjectKeys(child, callback, processed);\n      }\n    });\n}\n\n/**\n * Eg. `foo/bar/baz.json` => `baz`\n */\nexport function justName(filename = \"\"): string {\n  return stripExtension(filename.split(/[\\\\/]/).pop() ?? \"\");\n}\n\n/**\n * Avoid appending \"js\" to top-level unnamed schemas\n */\nexport function stripExtension(filename: string): string {\n  return filename.replace(/\\.[^./\\\\]*$/, \"\");\n}\n\n/**\n * Convert a string that might contain spaces or special characters to one that\n * can safely be used as a TypeScript interface or enum name.\n */\nexport function toSafeString(string: string): string {\n  // identifiers in javaScript/ts:\n  // First character: a-zA-Z | _ | $\n  // Rest: a-zA-Z | _ | $ | 0-9\n\n  return upperFirst(\n    // remove accents, umlauts, ... by their basic latin letters\n    deburr(string)\n      // replace chars which are not valid for typescript identifiers with whitespace\n      .replace(/(^\\s*[^a-zA-Z_$])|([^a-zA-Z_$\\d])/g, \" \")\n      // uppercase leading underscores followed by lowercase\n      .replace(/^_[a-z]/g, (match) => match.toUpperCase())\n      // remove non-leading underscores followed by lowercase (convert snake_case)\n      .replace(/_[a-z]/g, (match) => match.substr(1, match.length).toUpperCase())\n      // uppercase letters after digits, dollars\n      .replace(/([\\d$]+[a-zA-Z])/g, (match) => match.toUpperCase())\n      // uppercase first letter after whitespace\n      .replace(/\\s+([a-zA-Z])/g, (match) => match.toUpperCase().trim())\n      // remove remaining whitespace\n      .replace(/\\s/g, \"\"),\n  );\n}\n\nexport function generateName(from: string, usedNames: Set<string>) {\n  let name = toSafeString(from);\n  if (!name) {\n    name = \"NoName\";\n  }\n\n  // increment counter until we find a free name\n  if (usedNames.has(name)) {\n    let counter = 1;\n    let nameWithCounter = `${name}${counter}`;\n    while (usedNames.has(nameWithCounter)) {\n      nameWithCounter = `${name}${counter}`;\n      counter++;\n    }\n    name = nameWithCounter;\n  }\n\n  usedNames.add(name);\n  return name;\n}\n\n/**\n * escape block comments in schema descriptions so that they don't unexpectedly close JSDoc comments in generated typescript interfaces\n */\nexport function escapeBlockComment(schema: JSONSchema) {\n  const replacer = \"* /\";\n  if (schema === null || typeof schema !== \"object\") {\n    return;\n  }\n  for (const key of Object.keys(schema)) {\n    if (key === \"description\" && typeof schema[key] === \"string\") {\n      schema[key] = schema[key]!.replace(/\\*\\//g, replacer);\n    }\n  }\n}\n\n/**\n * Removes the schema's `default` property if it doesn't match the schema's `type` property.\n * Useful when parsing unions.\n *\n * Mutates `schema`.\n */\nexport function maybeStripDefault(schema: LinkedJSONSchema): LinkedJSONSchema {\n  if (!(\"default\" in schema)) {\n    return schema;\n  }\n\n  switch (schema.type) {\n    case \"array\":\n      if (Array.isArray(schema.default)) {\n        return schema;\n      }\n      break;\n    case \"boolean\":\n      if (typeof schema.default === \"boolean\") {\n        return schema;\n      }\n      break;\n    case \"integer\":\n    case \"number\":\n      if (typeof schema.default === \"number\") {\n        return schema;\n      }\n      break;\n    case \"string\":\n      if (typeof schema.default === \"string\") {\n        return schema;\n      }\n      break;\n    case \"null\":\n      if (schema.default === null) {\n        return schema;\n      }\n      break;\n    case \"object\":\n      if (isPlainObject(schema.default)) {\n        return schema;\n      }\n      break;\n  }\n  delete schema.default;\n  return schema;\n}\n\nexport function appendToDescription(\n  existingDescription: string | undefined,\n  ...values: string[]\n): string {\n  if (existingDescription) {\n    return `${existingDescription}\\n\\n${values.join(\"\\n\")}`;\n  }\n  return values.join(\"\\n\");\n}\n\nexport function isSchemaLike(schema: any): schema is LinkedJSONSchema {\n  if (!isPlainObject(schema)) {\n    return false;\n  }\n\n  // top-level schema\n  const parent = (schema as LinkedJSONSchema)[Parent] as LinkedJSONSchema | null;\n  if (parent === null) {\n    return true;\n  }\n\n  const JSON_SCHEMA_KEYWORDS = [\n    \"$defs\",\n    \"allOf\",\n    \"anyOf\",\n    \"definitions\",\n    \"dependencies\",\n    \"enum\",\n    \"not\",\n    \"oneOf\",\n    \"patternProperties\",\n    \"properties\",\n    \"required\",\n  ];\n  if (JSON_SCHEMA_KEYWORDS.some((_) => parent[_] === schema)) {\n    return false;\n  }\n\n  return true;\n}\n","import { memoize, omit } from \"./compat\";\nimport { DEFAULT_OPTIONS, type Options } from \"./index\";\nimport { hasComment, hasStandaloneName, T_ANY, T_UNKNOWN } from \"./types/AST\";\nimport type {\n  AST,\n  ASTWithStandaloneName,\n  TArray,\n  TEnum,\n  TInterface,\n  TIntersection,\n  TNamedInterface,\n  TUnion,\n} from \"./types/AST\";\nimport { toSafeString } from \"./utils\";\n\nexport function generate(ast: AST, options = DEFAULT_OPTIONS): string {\n  return (\n    [\n      options.bannerComment,\n      declareNamedTypes(ast, options, ast.standaloneName!),\n      declareNamedInterfaces(ast, options, ast.standaloneName!),\n      declareEnums(ast, options),\n    ]\n      .filter(Boolean)\n      .join(\"\\n\\n\") + \"\\n\"\n  ); // trailing newline\n}\n\nfunction declareEnums(ast: AST, options: Options, processed = new Set<AST>()): string {\n  if (processed.has(ast)) {\n    return \"\";\n  }\n\n  processed.add(ast);\n  let type = \"\";\n\n  switch (ast.type) {\n    case \"ENUM\":\n      return generateStandaloneEnum(ast, options) + \"\\n\";\n    case \"ARRAY\":\n      return declareEnums(ast.params, options, processed);\n    case \"UNION\":\n    case \"INTERSECTION\":\n      return ast.params.reduce((prev, ast) => prev + declareEnums(ast, options, processed), \"\");\n    case \"TUPLE\":\n      type = ast.params.reduce((prev, ast) => prev + declareEnums(ast, options, processed), \"\");\n      if (ast.spreadParam) {\n        type += declareEnums(ast.spreadParam, options, processed);\n      }\n      return type;\n    case \"INTERFACE\":\n      return getSuperTypesAndParams(ast).reduce(\n        (prev, ast) => prev + declareEnums(ast, options, processed),\n        \"\",\n      );\n    default:\n      return \"\";\n  }\n}\n\nfunction declareNamedInterfaces(\n  ast: AST,\n  options: Options,\n  rootASTName: string,\n  processed = new Set<AST>(),\n): string {\n  if (processed.has(ast)) {\n    return \"\";\n  }\n\n  processed.add(ast);\n  let type = \"\";\n\n  switch (ast.type) {\n    case \"ARRAY\":\n      type = declareNamedInterfaces((ast as TArray).params, options, rootASTName, processed);\n      break;\n    case \"INTERFACE\":\n      type = [\n        hasStandaloneName(ast) &&\n          (ast.standaloneName === rootASTName || options.declareExternallyReferenced) &&\n          generateStandaloneInterface(ast, options),\n        getSuperTypesAndParams(ast)\n          .map((ast) => declareNamedInterfaces(ast, options, rootASTName, processed))\n          .filter(Boolean)\n          .join(\"\\n\"),\n      ]\n        .filter(Boolean)\n        .join(\"\\n\");\n      break;\n    case \"INTERSECTION\":\n    case \"TUPLE\":\n    case \"UNION\":\n      type = ast.params\n        .map((_) => declareNamedInterfaces(_, options, rootASTName, processed))\n        .filter(Boolean)\n        .join(\"\\n\");\n      if (ast.type === \"TUPLE\" && ast.spreadParam) {\n        type += declareNamedInterfaces(ast.spreadParam, options, rootASTName, processed);\n      }\n      break;\n    default:\n      type = \"\";\n  }\n\n  return type;\n}\n\nfunction declareNamedTypes(\n  ast: AST,\n  options: Options,\n  rootASTName: string,\n  processed = new Set<AST>(),\n): string {\n  if (processed.has(ast)) {\n    return \"\";\n  }\n\n  processed.add(ast);\n\n  switch (ast.type) {\n    case \"ARRAY\":\n      return [\n        declareNamedTypes(ast.params, options, rootASTName, processed),\n        hasStandaloneName(ast) ? generateStandaloneType(ast, options) : undefined,\n      ]\n        .filter(Boolean)\n        .join(\"\\n\");\n    case \"ENUM\":\n      return \"\";\n    case \"INTERFACE\":\n      return getSuperTypesAndParams(ast)\n        .map(\n          (ast) =>\n            (ast.standaloneName === rootASTName || options.declareExternallyReferenced) &&\n            declareNamedTypes(ast, options, rootASTName, processed),\n        )\n        .filter(Boolean)\n        .join(\"\\n\");\n    case \"INTERSECTION\":\n    case \"TUPLE\":\n    case \"UNION\":\n      return [\n        hasStandaloneName(ast) ? generateStandaloneType(ast, options) : undefined,\n        ast.params\n          .map((ast) => declareNamedTypes(ast, options, rootASTName, processed))\n          .filter(Boolean)\n          .join(\"\\n\"),\n        \"spreadParam\" in ast && ast.spreadParam\n          ? declareNamedTypes(ast.spreadParam, options, rootASTName, processed)\n          : undefined,\n      ]\n        .filter(Boolean)\n        .join(\"\\n\");\n    default:\n      if (hasStandaloneName(ast)) {\n        return generateStandaloneType(ast, options);\n      }\n      return \"\";\n  }\n}\n\nfunction generateTypeUnmemoized(ast: AST, options: Options): string {\n  const type = generateRawType(ast, options);\n\n  if (options.strictIndexSignatures && ast.keyName === \"[k: string]\") {\n    return `${type} | undefined`;\n  }\n\n  return type;\n}\nexport const generateType = memoize(generateTypeUnmemoized);\n\nfunction generateRawType(ast: AST, options: Options): string {\n  if (hasStandaloneName(ast)) {\n    return toSafeString(ast.standaloneName);\n  }\n\n  switch (ast.type) {\n    case \"ANY\":\n      return \"any\";\n    case \"ARRAY\":\n      return (() => {\n        const type = generateType(ast.params, options);\n        return type.endsWith('\"') ? \"(\" + type + \")[]\" : type + \"[]\";\n      })();\n    case \"BOOLEAN\":\n      return \"boolean\";\n    case \"INTERFACE\":\n      return generateInterface(ast, options);\n    case \"INTERSECTION\":\n      return generateSetOperation(ast, options);\n    case \"LITERAL\":\n      return JSON.stringify(ast.params);\n    case \"NEVER\":\n      return \"never\";\n    case \"NUMBER\":\n      return \"number\";\n    case \"NULL\":\n      return \"null\";\n    case \"OBJECT\":\n      return \"object\";\n    case \"REFERENCE\":\n      return ast.params;\n    case \"STRING\":\n      return \"string\";\n    case \"TUPLE\":\n      return (() => {\n        const minItems = ast.minItems;\n        const maxItems = ast.maxItems || -1;\n\n        let spreadParam = ast.spreadParam;\n        const astParams = [...ast.params];\n        if (minItems > 0 && minItems > astParams.length && ast.spreadParam === undefined) {\n          // this is a valid state, and JSONSchema doesn't care about the item type\n          if (maxItems < 0) {\n            // no max items and no spread param, so just spread any\n            spreadParam = options.unknownAny ? T_UNKNOWN : T_ANY;\n          }\n        }\n        if (maxItems > astParams.length && ast.spreadParam === undefined) {\n          // this is a valid state, and JSONSchema doesn't care about the item type\n          // fill the tuple with any elements\n          for (let i = astParams.length; i < maxItems; i += 1) {\n            astParams.push(options.unknownAny ? T_UNKNOWN : T_ANY);\n          }\n        }\n\n        function addSpreadParam(params: string[]): string[] {\n          if (spreadParam) {\n            const spread = \"...(\" + generateType(spreadParam, options) + \")[]\";\n            params.push(spread);\n          }\n          return params;\n        }\n\n        function paramsToString(params: string[]): string {\n          return \"[\" + params.join(\", \") + \"]\";\n        }\n\n        const paramsList = astParams.map((param) => generateType(param, options));\n\n        if (paramsList.length > minItems) {\n          /*\n        if there are more items than the min, we return a union of tuples instead of\n        using the optional element operator. This is done because it is more typesafe.\n\n        // optional element operator\n        type A = [string, string?, string?]\n        const a: A = ['a', undefined, 'c'] // no error\n\n        // union of tuples\n        type B = [string] | [string, string] | [string, string, string]\n        const b: B = ['a', undefined, 'c'] // TS error\n        */\n\n          const cumulativeParamsList: string[] = paramsList.slice(0, minItems);\n          const typesToUnion: string[] = [];\n\n          if (cumulativeParamsList.length > 0) {\n            // actually has minItems, so add the initial state\n            typesToUnion.push(paramsToString(cumulativeParamsList));\n          } else {\n            // no minItems means it's acceptable to have an empty tuple type\n            typesToUnion.push(paramsToString([]));\n          }\n\n          for (let i = minItems; i < paramsList.length; i += 1) {\n            cumulativeParamsList.push(paramsList[i]);\n\n            if (i === paramsList.length - 1) {\n              // only the last item in the union should have the spread parameter\n              addSpreadParam(cumulativeParamsList);\n            }\n\n            typesToUnion.push(paramsToString(cumulativeParamsList));\n          }\n\n          return typesToUnion.join(\"|\");\n        }\n\n        // no max items so only need to return one type\n        return paramsToString(addSpreadParam(paramsList));\n      })();\n    case \"UNION\":\n      return generateSetOperation(ast, options);\n    case \"UNKNOWN\":\n      return \"unknown\";\n    case \"CUSTOM_TYPE\":\n      return ast.params;\n  }\n}\n\n/**\n * Generate a Union or Intersection\n */\nfunction generateSetOperation(ast: TIntersection | TUnion, options: Options): string {\n  const members = (ast as TUnion).params.map((_) => generateType(_, options));\n  const separator = ast.type === \"UNION\" ? \"|\" : \"&\";\n  return members.length === 1 ? members[0] : \"(\" + members.join(\" \" + separator + \" \") + \")\";\n}\n\nfunction generateInterface(ast: TInterface, options: Options): string {\n  return (\n    `{` +\n    \"\\n\" +\n    ast.params\n      .filter((_) => !_.isPatternProperty && !_.isUnreachableDefinition)\n      .map(\n        ({ isRequired, keyName, ast }) =>\n          [isRequired, keyName, ast, generateType(ast, options)] as [boolean, string, AST, string],\n      )\n      .map(\n        ([isRequired, keyName, ast, type]) =>\n          (hasComment(ast) && !ast.standaloneName\n            ? generateComment(ast.comment, ast.deprecated) + \"\\n\"\n            : \"\") +\n          escapeKeyName(keyName) +\n          (isRequired ? \"\" : \"?\") +\n          \": \" +\n          type,\n      )\n      .join(\"\\n\") +\n    \"\\n\" +\n    \"}\"\n  );\n}\n\nfunction generateComment(comment?: string, deprecated?: boolean): string {\n  const commentLines = [\"/**\"];\n  if (deprecated) {\n    commentLines.push(\" * @deprecated\");\n  }\n  if (typeof comment !== \"undefined\") {\n    commentLines.push(...comment.split(\"\\n\").map((_) => \" * \" + _));\n  }\n  commentLines.push(\" */\");\n  return commentLines.join(\"\\n\");\n}\n\nfunction generateStandaloneEnum(ast: TEnum, options: Options): string {\n  const containsSpecialCharacters = (key: string): boolean => /[^a-zA-Z0-9_]/.test(key);\n\n  return (\n    (hasComment(ast) ? generateComment(ast.comment, ast.deprecated) + \"\\n\" : \"\") +\n    \"export \" +\n    (options.enableConstEnums ? \"const \" : \"\") +\n    `enum ${toSafeString(ast.standaloneName)} {` +\n    \"\\n\" +\n    ast.params\n      .map(\n        ({ ast, keyName }) =>\n          (containsSpecialCharacters(keyName) ? `\"${keyName}\"` : keyName) +\n          \" = \" +\n          generateType(ast, options),\n      )\n      .join(\",\\n\") +\n    \"\\n\" +\n    \"}\"\n  );\n}\n\nfunction generateStandaloneInterface(ast: TNamedInterface, options: Options): string {\n  return (\n    (hasComment(ast) ? generateComment(ast.comment, ast.deprecated) + \"\\n\" : \"\") +\n    `export interface ${toSafeString(ast.standaloneName)} ` +\n    (ast.superTypes.length > 0\n      ? `extends ${ast.superTypes.map((superType) => toSafeString(superType.standaloneName)).join(\", \")} `\n      : \"\") +\n    generateInterface(ast, options)\n  );\n}\n\nfunction generateStandaloneType(ast: ASTWithStandaloneName, options: Options): string {\n  return (\n    (hasComment(ast) ? generateComment(ast.comment) + \"\\n\" : \"\") +\n    `export type ${toSafeString(ast.standaloneName)} = ${generateType(\n      omit(ast, \"standaloneName\") as AST /* TODO */,\n      options,\n    )}`\n  );\n}\n\nfunction escapeKeyName(keyName: string): string {\n  if (keyName.length && /[A-Za-z_$]/.test(keyName.charAt(0)) && /^[\\w$]+$/.test(keyName)) {\n    return keyName;\n  }\n  if (keyName === \"[k: string]\") {\n    return keyName;\n  }\n  return JSON.stringify(keyName);\n}\n\nfunction getSuperTypesAndParams(ast: TInterface): AST[] {\n  return ast.params.map((param) => param.ast).concat(ast.superTypes);\n}\n","import { isPlainObject } from \"./compat\";\nimport { isCompound } from \"./types/JSONSchema\";\nimport type { JSONSchema, SchemaType } from \"./types/JSONSchema\";\n\n/**\n * Duck types a JSONSchema schema or property to determine which kind of AST node to parse it into.\n *\n * Due to what some might say is an oversight in the JSON-Schema spec, a given schema may\n * implicitly be an *intersection* of multiple JSON-Schema directives (ie. multiple TypeScript\n * types). The spec leaves it up to implementations to decide what to do with this\n * loosely-defined behavior.\n */\nexport function typesOfSchema(schema: JSONSchema): Set<SchemaType> {\n  // tsType is an escape hatch that supercedes all other directives\n  if (schema.tsType) {\n    return new Set([\"CUSTOM_TYPE\"]);\n  }\n\n  // Collect matched types\n  const matchedTypes = new Set<SchemaType>();\n  for (const [schemaType, f] of Object.entries(matchers)) {\n    if (f(schema)) {\n      matchedTypes.add(schemaType as SchemaType);\n    }\n  }\n\n  // Default to an unnamed schema\n  if (!matchedTypes.size) {\n    matchedTypes.add(\"UNNAMED_SCHEMA\");\n  }\n\n  return matchedTypes;\n}\n\nconst matchers: Record<SchemaType, (schema: JSONSchema) => boolean> = {\n  ALL_OF(schema) {\n    return \"allOf\" in schema;\n  },\n  ANY(schema) {\n    if (Object.keys(schema).length === 0) {\n      // The empty schema {} validates any value\n      // @see https://json-schema.org/draft-07/json-schema-core.html#rfc.section.4.3.1\n      return true;\n    }\n    return schema.type === \"any\";\n  },\n  ANY_OF(schema) {\n    return \"anyOf\" in schema;\n  },\n  BOOLEAN(schema) {\n    if (\"enum\" in schema) {\n      return false;\n    }\n    if (schema.type === \"boolean\") {\n      return true;\n    }\n    if (!isCompound(schema) && typeof schema.default === \"boolean\") {\n      return true;\n    }\n    return false;\n  },\n  CUSTOM_TYPE() {\n    return false; // Explicitly handled before we try to match\n  },\n  NAMED_ENUM(schema) {\n    return \"enum\" in schema && \"tsEnumNames\" in schema;\n  },\n  NAMED_SCHEMA(schema) {\n    // 8.2.1. The presence of \"$id\" in a subschema indicates that the subschema constitutes a distinct schema resource within a single schema document.\n    return \"$id\" in schema && (\"patternProperties\" in schema || \"properties\" in schema);\n  },\n  NEVER(schema: JSONSchema | boolean) {\n    return schema === false;\n  },\n  NULL(schema) {\n    return schema.type === \"null\";\n  },\n  NUMBER(schema) {\n    if (\"enum\" in schema) {\n      return false;\n    }\n    if (schema.type === \"integer\" || schema.type === \"number\") {\n      return true;\n    }\n    if (!isCompound(schema) && typeof schema.default === \"number\") {\n      return true;\n    }\n    return false;\n  },\n  OBJECT(schema) {\n    return (\n      schema.type === \"object\" &&\n      !isPlainObject(schema.additionalProperties) &&\n      !schema.allOf &&\n      !schema.anyOf &&\n      !schema.oneOf &&\n      !schema.patternProperties &&\n      !schema.properties &&\n      !schema.required\n    );\n  },\n  ONE_OF(schema) {\n    return \"oneOf\" in schema;\n  },\n  REFERENCE(schema) {\n    return \"$ref\" in schema;\n  },\n  STRING(schema) {\n    if (\"enum\" in schema) {\n      return false;\n    }\n    if (schema.type === \"string\") {\n      return true;\n    }\n    if (!isCompound(schema) && typeof schema.default === \"string\") {\n      return true;\n    }\n    return false;\n  },\n  TYPED_ARRAY(schema) {\n    if (schema.type && schema.type !== \"array\") {\n      return false;\n    }\n    return \"items\" in schema;\n  },\n  UNION(schema) {\n    return Array.isArray(schema.type);\n  },\n  UNNAMED_ENUM(schema) {\n    if (\"tsEnumNames\" in schema) {\n      return false;\n    }\n    if (\n      schema.type &&\n      schema.type !== \"boolean\" &&\n      schema.type !== \"integer\" &&\n      schema.type !== \"number\" &&\n      schema.type !== \"string\"\n    ) {\n      return false;\n    }\n    return \"enum\" in schema;\n  },\n  UNNAMED_SCHEMA() {\n    return false; // Explicitly handled as the default case\n  },\n  UNTYPED_ARRAY(schema) {\n    return schema.type === \"array\" && !(\"items\" in schema);\n  },\n};\n","import type { LinkedJSONSchema } from \"./types/JSONSchema\";\nimport { Intersection, Parent, Types } from \"./types/JSONSchema\";\nimport { typesOfSchema } from \"./typesOfSchema\";\n\nexport function applySchemaTyping(schema: LinkedJSONSchema) {\n  const types = typesOfSchema(schema);\n\n  Object.defineProperty(schema, Types, {\n    enumerable: false,\n    value: types,\n    writable: false,\n  });\n\n  if (types.size === 1) {\n    return;\n  }\n\n  // Some schemas can be understood as multiple possible types (see related\n  // comment in `typesOfSchema.ts`). In such cases, we generate an `ALL_OF`\n  // intersection that will ultimately be used to generate a union type.\n  //\n  // The original schema's name, title, and description are hoisted to the\n  // new intersection schema to prevent duplication.\n  //\n  // If the original schema also contained its own `ALL_OF` property, it is\n  // also hoiested to the new intersection schema.\n  const intersection = {\n    [Parent]: schema,\n    [Types]: new Set([\"ALL_OF\"]),\n    $id: schema.$id,\n    description: schema.description,\n    name: schema.name,\n    title: schema.title,\n    allOf: schema.allOf ?? [],\n    required: [],\n    additionalProperties: false,\n  };\n\n  types.delete(\"ALL_OF\");\n  delete schema.allOf;\n  delete schema.$id;\n  delete schema.description;\n  delete schema.name;\n  delete schema.title;\n\n  Object.defineProperty(schema, Intersection, {\n    enumerable: false,\n    value: intersection,\n    writable: false,\n  });\n}\n","import { Parent } from \"./types/JSONSchema\";\nimport type {\n  JSONSchemaTypeName,\n  LinkedJSONSchema,\n  NormalizedJSONSchema,\n} from \"./types/JSONSchema\";\nimport {\n  appendToDescription,\n  escapeBlockComment,\n  isSchemaLike,\n  justName,\n  toSafeString,\n  traverse,\n} from \"./utils\";\nimport type { Options } from \"./\";\nimport { applySchemaTyping } from \"./applySchemaTyping\";\nimport type { DereferencedPaths } from \"./resolver\";\n\nconst isJsonEqual = (left: unknown, right: unknown): boolean => {\n  if (left === right) return true;\n  if (typeof left !== typeof right) return false;\n  if (left === null || right === null) return false;\n  if (typeof left !== \"object\" || typeof right !== \"object\") return false;\n\n  if (Array.isArray(left) || Array.isArray(right)) {\n    if (!Array.isArray(left) || !Array.isArray(right) || left.length !== right.length) {\n      return false;\n    }\n    return left.every((value, index) => isJsonEqual(value, right[index]));\n  }\n\n  const leftRecord = left as Record<string, unknown>;\n  const rightRecord = right as Record<string, unknown>;\n  const leftKeys = Object.keys(leftRecord);\n  const rightKeys = Object.keys(rightRecord);\n  if (leftKeys.length !== rightKeys.length) return false;\n\n  return leftKeys.every(\n    (key) => Object.hasOwn(rightRecord, key) && isJsonEqual(leftRecord[key], rightRecord[key]),\n  );\n};\n\ntype Rule = (\n  schema: LinkedJSONSchema,\n  fileName: string,\n  options: Options,\n  key: string | null,\n  dereferencedPaths: DereferencedPaths,\n) => void;\nconst rules = new Map<string, Rule>();\n\nfunction hasType(schema: LinkedJSONSchema, type: JSONSchemaTypeName) {\n  return schema.type === type || (Array.isArray(schema.type) && schema.type.includes(type));\n}\nfunction isObjectType(schema: LinkedJSONSchema) {\n  return schema.properties !== undefined || hasType(schema, \"object\") || hasType(schema, \"any\");\n}\nfunction isArrayType(schema: LinkedJSONSchema) {\n  return schema.items !== undefined || hasType(schema, \"array\") || hasType(schema, \"any\");\n}\nfunction isEnumTypeWithoutTsEnumNames(schema: LinkedJSONSchema) {\n  return schema.type === \"string\" && schema.enum !== undefined && schema.tsEnumNames === undefined;\n}\n\nrules.set('Remove `type=[\"null\"]` if `enum=[null]`', (schema) => {\n  if (\n    Array.isArray(schema.enum) &&\n    schema.enum.some((e) => e === null) &&\n    Array.isArray(schema.type) &&\n    schema.type.includes(\"null\")\n  ) {\n    schema.type = schema.type.filter((type) => type !== \"null\");\n  }\n});\n\nrules.set(\"Destructure unary types\", (schema) => {\n  if (schema.type && Array.isArray(schema.type) && schema.type.length === 1) {\n    schema.type = schema.type[0];\n  }\n});\n\nrules.set(\"Add empty `required` property if none is defined\", (schema) => {\n  if (isObjectType(schema) && !(\"required\" in schema)) {\n    schema.required = [];\n  }\n});\n\nrules.set(\"Transform `required`=false to `required`=[]\", (schema) => {\n  if (schema.required === false) {\n    schema.required = [];\n  }\n});\n\nrules.set(\"Default additionalProperties\", (schema, _, options) => {\n  if (\n    isObjectType(schema) &&\n    !(\"additionalProperties\" in schema) &&\n    schema.patternProperties === undefined\n  ) {\n    schema.additionalProperties = options.additionalProperties;\n  }\n});\n\nrules.set(\"Transform id to $id\", (schema, fileName) => {\n  if (!isSchemaLike(schema)) {\n    return;\n  }\n  if (schema.id && schema.$id && schema.id !== schema.$id) {\n    throw ReferenceError(\n      `Schema must define either id or $id, not both. Given id=${schema.id}, $id=${schema.$id} in ${fileName}`,\n    );\n  }\n  if (schema.id) {\n    schema.$id = schema.id;\n    delete schema.id;\n  }\n});\n\nrules.set(\n  \"Add an $id to anything that needs it\",\n  (schema, fileName, _options, _key, dereferencedPaths) => {\n    if (!isSchemaLike(schema)) {\n      return;\n    }\n\n    // Top-level schema\n    if (!schema.$id && !schema[Parent]) {\n      schema.$id = toSafeString(justName(fileName));\n      return;\n    }\n\n    // Sub-schemas with references\n    if (!isArrayType(schema) && !isObjectType(schema)) {\n      return;\n    }\n\n    // We'll infer from $id and title downstream\n    // TODO: Normalize upstream\n    const dereferencedName = dereferencedPaths.get(schema);\n    if (!schema.$id && !schema.title && dereferencedName) {\n      schema.$id = toSafeString(justName(dereferencedName));\n    }\n\n    if (dereferencedName) {\n      dereferencedPaths.delete(schema);\n    }\n  },\n);\n\nrules.set(\"Escape closing JSDoc comment\", (schema) => {\n  escapeBlockComment(schema);\n});\n\nrules.set(\"Add JSDoc comments for minItems and maxItems\", (schema) => {\n  if (!isArrayType(schema)) {\n    return;\n  }\n  const commentsToAppend = [\n    \"minItems\" in schema ? `@minItems ${schema.minItems}` : \"\",\n    \"maxItems\" in schema ? `@maxItems ${schema.maxItems}` : \"\",\n  ].filter(Boolean);\n  if (commentsToAppend.length) {\n    schema.description = appendToDescription(schema.description, ...commentsToAppend);\n  }\n});\n\nrules.set(\"Optionally remove maxItems and minItems\", (schema, _fileName, options) => {\n  if (!isArrayType(schema)) {\n    return;\n  }\n  if (\"minItems\" in schema && options.ignoreMinAndMaxItems) {\n    delete schema.minItems;\n  }\n  if (\"maxItems\" in schema && (options.ignoreMinAndMaxItems || options.maxItems === -1)) {\n    delete schema.maxItems;\n  }\n});\n\nrules.set(\"Normalize schema.minItems\", (schema, _fileName, options) => {\n  if (options.ignoreMinAndMaxItems) {\n    return;\n  }\n  // make sure we only add the props onto array types\n  if (!isArrayType(schema)) {\n    return;\n  }\n  const { minItems } = schema;\n  schema.minItems = typeof minItems === \"number\" ? minItems : 0;\n  // cannot normalize maxItems because maxItems = 0 has an actual meaning\n});\n\nrules.set(\n  \"Remove maxItems if it is big enough to likely cause OOMs\",\n  (schema, _fileName, options) => {\n    if (options.ignoreMinAndMaxItems || options.maxItems === -1) {\n      return;\n    }\n    if (!isArrayType(schema)) {\n      return;\n    }\n    const { maxItems, minItems } = schema;\n    // minItems is guaranteed to be a number after the previous rule runs\n    if (maxItems !== undefined && maxItems - (minItems as number) > options.maxItems) {\n      delete schema.maxItems;\n    }\n  },\n);\n\nrules.set(\"Normalize schema.items\", (schema, _fileName, options) => {\n  if (options.ignoreMinAndMaxItems) {\n    return;\n  }\n  const { maxItems, minItems } = schema;\n  const hasMaxItems = typeof maxItems === \"number\" && maxItems >= 0;\n  const hasMinItems = typeof minItems === \"number\" && minItems > 0;\n\n  if (schema.items && !Array.isArray(schema.items) && (hasMaxItems || hasMinItems)) {\n    const items = schema.items;\n    // create a tuple of length N\n    const newItems = Array(maxItems || minItems || 0).fill(items);\n    if (!hasMaxItems) {\n      // if there is no maximum, then add a spread item to collect the rest\n      schema.additionalItems = items;\n    }\n    schema.items = newItems;\n  }\n\n  if (Array.isArray(schema.items) && hasMaxItems && maxItems! < schema.items.length) {\n    // it's perfectly valid to provide 5 item defs but require maxItems 1\n    // obviously we shouldn't emit a type for items that aren't expected\n    schema.items = schema.items.slice(0, maxItems);\n  }\n\n  return schema;\n});\n\nrules.set(\"Remove extends, if it is empty\", (schema) => {\n  if (!schema.hasOwnProperty(\"extends\")) {\n    return;\n  }\n  if (schema.extends == null || (Array.isArray(schema.extends) && schema.extends.length === 0)) {\n    delete schema.extends;\n  }\n});\n\nrules.set(\"Make extends always an array, if it is defined\", (schema) => {\n  if (schema.extends == null) {\n    return;\n  }\n  if (!Array.isArray(schema.extends)) {\n    schema.extends = [schema.extends];\n  }\n});\n\nrules.set(\"Transform definitions to $defs\", (schema, fileName) => {\n  if (schema.definitions && schema.$defs && !isJsonEqual(schema.definitions, schema.$defs)) {\n    throw ReferenceError(\n      `Schema must define either definitions or $defs, not both. Given id=${schema.id} in ${fileName}`,\n    );\n  }\n  if (schema.definitions) {\n    schema.$defs = schema.definitions;\n    delete schema.definitions;\n  }\n});\n\nrules.set(\"Transform const to singleton enum\", (schema) => {\n  if (schema.const !== undefined) {\n    schema.enum = [schema.const];\n    delete schema.const;\n  }\n});\n\nrules.set(\"Add tsEnumNames to enum types\", (schema, _, options) => {\n  if (isEnumTypeWithoutTsEnumNames(schema) && options.inferStringEnumKeysFromValues) {\n    schema.tsEnumNames = schema.enum?.map(String);\n  }\n});\n\n// Precalculation of the schema types is necessary because the ALL_OF type\n// is implemented in a way that mutates the schema object. Detection of the\n// NAMED_SCHEMA type relies on the presence of the $id property, which is\n// hoisted to a parent schema object during the ALL_OF type implementation,\n// and becomes unavailable if the same schema is used in multiple places.\n//\n// Precalculation of the `ALL_OF` intersection schema is necessary because\n// the intersection schema needs to participate in the schema cache during\n// the parsing step, so it cannot be re-calculated every time the schema\n// is encountered.\nrules.set(\"Pre-calculate schema types and intersections\", (schema) => {\n  if (schema !== null && typeof schema === \"object\") {\n    applySchemaTyping(schema);\n  }\n});\n\nexport function normalize(\n  rootSchema: LinkedJSONSchema,\n  dereferencedPaths: DereferencedPaths,\n  filename: string,\n  options: Options,\n): NormalizedJSONSchema {\n  rules.forEach((rule) =>\n    traverse(rootSchema, (schema, key) => rule(schema, filename, options, key, dereferencedPaths)),\n  );\n  return rootSchema as NormalizedJSONSchema;\n}\n","import { uniqBy } from \"./compat\";\nimport type { Options } from \".\";\nimport { generateType } from \"./generator\";\nimport { T_ANY, T_UNKNOWN } from \"./types/AST\";\nimport type { AST } from \"./types/AST\";\n\nexport function optimize(ast: AST, options: Options, processed = new Set<AST>()): AST {\n  if (processed.has(ast)) {\n    return ast;\n  }\n\n  processed.add(ast);\n\n  switch (ast.type) {\n    case \"ARRAY\":\n      return Object.assign(ast, {\n        params: optimize(ast.params, options, processed),\n      });\n    case \"INTERFACE\":\n      return Object.assign(ast, {\n        params: ast.params.map((_) =>\n          Object.assign(_, { ast: optimize(_.ast, options, processed) }),\n        ),\n      });\n    case \"INTERSECTION\":\n    case \"UNION\":\n      // Start with the leaves...\n      const optimizedAST = Object.assign(ast, {\n        params: ast.params.map((_) => optimize(_, options, processed)),\n      });\n\n      // [A, B, C, Any] -> Any\n      if (optimizedAST.params.some((_) => _.type === \"ANY\")) {\n        return T_ANY;\n      }\n\n      // [A, B, C, Unknown] -> Unknown\n      if (optimizedAST.params.some((_) => _.type === \"UNKNOWN\")) {\n        return T_UNKNOWN;\n      }\n\n      // [A (named), A] -> [A (named)]\n      if (\n        optimizedAST.params.every((_) => {\n          const a = generateType(omitStandaloneName(_), options);\n          const b = generateType(omitStandaloneName(optimizedAST.params[0]), options);\n          return a === b;\n        }) &&\n        optimizedAST.params.some((_) => _.standaloneName !== undefined)\n      ) {\n        optimizedAST.params = optimizedAST.params.filter((_) => _.standaloneName !== undefined);\n      }\n\n      // [A, B, B] -> [A, B]\n      const params = uniqBy(optimizedAST.params, (_) => generateType(_, options));\n      if (params.length !== optimizedAST.params.length) {\n        optimizedAST.params = params;\n      }\n\n      return Object.assign(optimizedAST, {\n        params: optimizedAST.params.map((_) => optimize(_, options, processed)),\n      });\n    default:\n      return ast;\n  }\n}\n\n// TODO: More clearly disambiguate standalone names vs. aliased names instead.\nfunction omitStandaloneName<A extends AST>(ast: A): A {\n  switch (ast.type) {\n    case \"ENUM\":\n      return ast;\n    default:\n      return { ...ast, standaloneName: undefined };\n  }\n}\n","import type { JSONSchema4Type, JSONSchema4TypeName } from \"./types/json-schema\";\nimport { findKey, isPlainObject, memoize, omit } from \"./compat\";\nimport type { Options } from \"./\";\nimport { applySchemaTyping } from \"./applySchemaTyping\";\nimport type {\n  AST,\n  TInterface,\n  TInterfaceParam,\n  TIntersection,\n  TNamedInterface,\n  TTuple,\n} from \"./types/AST\";\nimport {\n  T_ANY,\n  T_ANY_ADDITIONAL_PROPERTIES,\n  T_UNKNOWN,\n  T_UNKNOWN_ADDITIONAL_PROPERTIES,\n} from \"./types/AST\";\nimport type {\n  EnumJSONSchema,\n  JSONSchemaWithDefinitions,\n  LinkedJSONSchema,\n  NormalizedJSONSchema,\n  SchemaSchema,\n  SchemaType,\n} from \"./types/JSONSchema\";\nimport { Intersection, Types, getRootSchema, isBoolean, isPrimitive } from \"./types/JSONSchema\";\nimport { generateName, maybeStripDefault } from \"./utils\";\n\nexport type Processed = Map<NormalizedJSONSchema, Map<SchemaType, AST>>;\n\nexport type UsedNames = Set<string>;\n\nexport function parse(\n  schema: NormalizedJSONSchema | JSONSchema4Type,\n  options: Options,\n  keyName?: string,\n  processed: Processed = new Map(),\n  usedNames = new Set<string>(),\n): AST {\n  if (isPrimitive(schema)) {\n    if (isBoolean(schema)) {\n      return parseBooleanSchema(schema, keyName, options);\n    }\n\n    return parseLiteral(schema, keyName);\n  }\n\n  const normalizedSchema = schema as NormalizedJSONSchema;\n  const intersection = normalizedSchema[Intersection];\n  const types = normalizedSchema[Types];\n\n  if (intersection) {\n    const ast = parseAsTypeWithCache(\n      intersection,\n      \"ALL_OF\",\n      options,\n      keyName,\n      processed,\n      usedNames,\n    ) as TIntersection;\n\n    types.forEach((type) => {\n      ast.params.push(\n        parseAsTypeWithCache(normalizedSchema, type, options, keyName, processed, usedNames),\n      );\n    });\n\n    return ast;\n  }\n\n  if (types.size === 1) {\n    const type = [...types][0];\n    const ast = parseAsTypeWithCache(\n      normalizedSchema,\n      type,\n      options,\n      keyName,\n      processed,\n      usedNames,\n    );\n    return ast;\n  }\n\n  throw new ReferenceError(\"Expected intersection schema. Please file an issue on GitHub.\");\n}\n\nfunction parseAsTypeWithCache(\n  schema: NormalizedJSONSchema,\n  type: SchemaType,\n  options: Options,\n  keyName?: string,\n  processed: Processed = new Map(),\n  usedNames = new Set<string>(),\n): AST {\n  // If we've seen this node before, return it.\n  let cachedTypeMap = processed.get(schema);\n  if (!cachedTypeMap) {\n    cachedTypeMap = new Map();\n    processed.set(schema, cachedTypeMap);\n  }\n  const cachedAST = cachedTypeMap.get(type);\n  if (cachedAST) {\n    return cachedAST;\n  }\n\n  // Cache processed ASTs before they are actually computed, then update\n  // them in place using set(). This is to avoid cycles.\n  // TODO: Investigate alternative approaches (lazy-computing nodes, etc.)\n  const ast = {} as AST;\n  cachedTypeMap.set(type, ast);\n\n  // Update the AST in place. This updates the `processed` cache, as well\n  // as any nodes that directly reference the node.\n  return Object.assign(ast, parseNonLiteral(schema, type, options, keyName, processed, usedNames));\n}\n\nfunction parseBooleanSchema(schema: boolean, keyName: string | undefined, options: Options): AST {\n  if (schema) {\n    return {\n      keyName,\n      type: options.unknownAny ? \"UNKNOWN\" : \"ANY\",\n    };\n  }\n\n  return {\n    keyName,\n    type: \"NEVER\",\n  };\n}\n\nfunction parseLiteral(schema: JSONSchema4Type, keyName: string | undefined): AST {\n  return {\n    keyName,\n    params: schema,\n    type: \"LITERAL\",\n  };\n}\n\nfunction parseNonLiteral(\n  schema: NormalizedJSONSchema,\n  type: SchemaType,\n  options: Options,\n  keyName: string | undefined,\n  processed: Processed,\n  usedNames: UsedNames,\n): AST {\n  const definitions = getDefinitionsMemoized(getRootSchema(schema as any)); // TODO\n  const keyNameFromDefinition = findKey(definitions, (_) => _ === schema);\n\n  switch (type) {\n    case \"ALL_OF\":\n      return {\n        comment: schema.description,\n        deprecated: schema.deprecated,\n        keyName,\n        standaloneName: standaloneName(schema, keyNameFromDefinition, usedNames, options),\n        params: schema.allOf!.map((_) => parse(_, options, undefined, processed, usedNames)),\n        type: \"INTERSECTION\",\n      };\n    case \"ANY\":\n      return {\n        ...(options.unknownAny ? T_UNKNOWN : T_ANY),\n        comment: schema.description,\n        deprecated: schema.deprecated,\n        keyName,\n        standaloneName: standaloneName(schema, keyNameFromDefinition, usedNames, options),\n      };\n    case \"ANY_OF\":\n      return {\n        comment: schema.description,\n        deprecated: schema.deprecated,\n        keyName,\n        standaloneName: standaloneName(schema, keyNameFromDefinition, usedNames, options),\n        params: schema.anyOf!.map((_) => parse(_, options, undefined, processed, usedNames)),\n        type: \"UNION\",\n      };\n    case \"BOOLEAN\":\n      return {\n        comment: schema.description,\n        deprecated: schema.deprecated,\n        keyName,\n        standaloneName: standaloneName(schema, keyNameFromDefinition, usedNames, options),\n        type: \"BOOLEAN\",\n      };\n    case \"CUSTOM_TYPE\":\n      return {\n        comment: schema.description,\n        deprecated: schema.deprecated,\n        keyName,\n        params: schema.tsType!,\n        standaloneName: standaloneName(schema, keyNameFromDefinition, usedNames, options),\n        type: \"CUSTOM_TYPE\",\n      };\n    case \"NAMED_ENUM\":\n      return {\n        comment: schema.description,\n        deprecated: schema.deprecated,\n        keyName,\n        standaloneName: standaloneName(\n          schema,\n          keyNameFromDefinition ?? keyName,\n          usedNames,\n          options,\n        )!,\n        params: (schema as EnumJSONSchema).enum!.map((_, n) => ({\n          ast: parseLiteral(_, undefined),\n          keyName: schema.tsEnumNames![n],\n        })),\n        type: \"ENUM\",\n      };\n    case \"NAMED_SCHEMA\":\n      return newInterface(schema as SchemaSchema, options, processed, usedNames, keyName);\n    case \"NEVER\":\n      return {\n        comment: schema.description,\n        deprecated: schema.deprecated,\n        keyName,\n        standaloneName: standaloneName(schema, keyNameFromDefinition, usedNames, options),\n        type: \"NEVER\",\n      };\n    case \"NULL\":\n      return {\n        comment: schema.description,\n        deprecated: schema.deprecated,\n        keyName,\n        standaloneName: standaloneName(schema, keyNameFromDefinition, usedNames, options),\n        type: \"NULL\",\n      };\n    case \"NUMBER\":\n      return {\n        comment: schema.description,\n        deprecated: schema.deprecated,\n        keyName,\n        standaloneName: standaloneName(schema, keyNameFromDefinition, usedNames, options),\n        type: \"NUMBER\",\n      };\n    case \"OBJECT\":\n      return {\n        comment: schema.description,\n        keyName,\n        standaloneName: standaloneName(schema, keyNameFromDefinition, usedNames, options),\n        type: \"OBJECT\",\n        deprecated: schema.deprecated,\n      };\n    case \"ONE_OF\":\n      return {\n        comment: schema.description,\n        deprecated: schema.deprecated,\n        keyName,\n        standaloneName: standaloneName(schema, keyNameFromDefinition, usedNames, options),\n        params: schema.oneOf!.map((_) => parse(_, options, undefined, processed, usedNames)),\n        type: \"UNION\",\n      };\n    case \"REFERENCE\":\n      throw Error(\"Refs should have been resolved by the resolver.\");\n    case \"STRING\":\n      return {\n        comment: schema.description,\n        deprecated: schema.deprecated,\n        keyName,\n        standaloneName: standaloneName(schema, keyNameFromDefinition, usedNames, options),\n        type: \"STRING\",\n      };\n    case \"TYPED_ARRAY\":\n      if (Array.isArray(schema.items)) {\n        // normalised to not be undefined\n        const minItems = schema.minItems!;\n        const maxItems = schema.maxItems!;\n        const arrayType: TTuple = {\n          comment: schema.description,\n          deprecated: schema.deprecated,\n          keyName,\n          maxItems,\n          minItems,\n          standaloneName: standaloneName(schema, keyNameFromDefinition, usedNames, options),\n          params: schema.items.map((_) => parse(_, options, undefined, processed, usedNames)),\n          type: \"TUPLE\",\n        };\n        if (schema.additionalItems === true) {\n          arrayType.spreadParam = options.unknownAny ? T_UNKNOWN : T_ANY;\n        } else if (schema.additionalItems) {\n          arrayType.spreadParam = parse(\n            schema.additionalItems,\n            options,\n            undefined,\n            processed,\n            usedNames,\n          );\n        }\n        return arrayType;\n      } else {\n        return {\n          comment: schema.description,\n          deprecated: schema.deprecated,\n          keyName,\n          standaloneName: standaloneName(schema, keyNameFromDefinition, usedNames, options),\n          params: parse(\n            schema.items!,\n            options,\n            `{keyNameFromDefinition}Items`,\n            processed,\n            usedNames,\n          ),\n          type: \"ARRAY\",\n        };\n      }\n    case \"UNION\":\n      return {\n        comment: schema.description,\n        deprecated: schema.deprecated,\n        keyName,\n        standaloneName: standaloneName(schema, keyNameFromDefinition, usedNames, options),\n        params: (schema.type as JSONSchema4TypeName[]).map((type) => {\n          const member: LinkedJSONSchema = { ...omit(schema, \"$id\", \"description\", \"title\"), type };\n          maybeStripDefault(member);\n          applySchemaTyping(member);\n          return parse(member, options, undefined, processed, usedNames);\n        }),\n        type: \"UNION\",\n      };\n    case \"UNNAMED_ENUM\":\n      return {\n        comment: schema.description,\n        deprecated: schema.deprecated,\n        keyName,\n        standaloneName: standaloneName(schema, keyNameFromDefinition, usedNames, options),\n        params: (schema as EnumJSONSchema).enum!.map((_) => parseLiteral(_, undefined)),\n        type: \"UNION\",\n      };\n    case \"UNNAMED_SCHEMA\":\n      return newInterface(\n        schema as SchemaSchema,\n        options,\n        processed,\n        usedNames,\n        keyName,\n        keyNameFromDefinition,\n      );\n    case \"UNTYPED_ARRAY\":\n      // normalised to not be undefined\n      const minItems = schema.minItems!;\n      const maxItems = typeof schema.maxItems === \"number\" ? schema.maxItems : -1;\n      const params = options.unknownAny ? T_UNKNOWN : T_ANY;\n      if (minItems > 0 || maxItems >= 0) {\n        return {\n          comment: schema.description,\n          deprecated: schema.deprecated,\n          keyName,\n          maxItems: schema.maxItems,\n          minItems,\n          // create a tuple of length N\n          params: Array(Math.max(maxItems, minItems) || 0).fill(params),\n          // if there is no maximum, then add a spread item to collect the rest\n          spreadParam: maxItems >= 0 ? undefined : params,\n          standaloneName: standaloneName(schema, keyNameFromDefinition, usedNames, options),\n          type: \"TUPLE\",\n        };\n      }\n\n      return {\n        comment: schema.description,\n        deprecated: schema.deprecated,\n        keyName,\n        params,\n        standaloneName: standaloneName(schema, keyNameFromDefinition, usedNames, options),\n        type: \"ARRAY\",\n      };\n  }\n}\n\n/**\n * Compute a schema name using a series of fallbacks\n */\nfunction standaloneName(\n  schema: NormalizedJSONSchema,\n  keyNameFromDefinition: string | undefined,\n  usedNames: UsedNames,\n  options: Options,\n): string | undefined {\n  const name =\n    options.customName?.(schema, keyNameFromDefinition) ||\n    schema.title ||\n    schema.$id ||\n    keyNameFromDefinition;\n  if (name) {\n    return generateName(name, usedNames);\n  }\n}\n\nfunction newInterface(\n  schema: SchemaSchema,\n  options: Options,\n  processed: Processed,\n  usedNames: UsedNames,\n  keyName?: string,\n  keyNameFromDefinition?: string,\n): TInterface {\n  const name = standaloneName(schema, keyNameFromDefinition, usedNames, options)!;\n  return {\n    comment: schema.description,\n    deprecated: schema.deprecated,\n    keyName,\n    params: parseSchema(schema, options, processed, usedNames, name),\n    standaloneName: name,\n    superTypes: parseSuperTypes(schema, options, processed, usedNames),\n    type: \"INTERFACE\",\n  };\n}\n\nfunction parseSuperTypes(\n  schema: SchemaSchema,\n  options: Options,\n  processed: Processed,\n  usedNames: UsedNames,\n): TNamedInterface[] {\n  // Type assertion needed because of dereferencing step\n  // TODO: Type it upstream\n  const superTypes = schema.extends as SchemaSchema[] | undefined;\n  if (!superTypes) {\n    return [];\n  }\n  return superTypes.map(\n    (_) => parse(_, options, undefined, processed, usedNames) as TNamedInterface,\n  );\n}\n\n/**\n * Helper to parse schema properties into params on the parent schema's type\n */\nfunction parseSchema(\n  schema: SchemaSchema,\n  options: Options,\n  processed: Processed,\n  usedNames: UsedNames,\n  parentSchemaName: string,\n): TInterfaceParam[] {\n  const required = new Set(schema.required ?? []);\n  let asts: TInterfaceParam[] = Object.entries(schema.properties ?? {}).map(([key, value]) => ({\n    ast: parse(value, options, key, processed, usedNames),\n    isPatternProperty: false,\n    isRequired: required.has(key),\n    isUnreachableDefinition: false,\n    keyName: key,\n  }));\n\n  let singlePatternProperty = false;\n  if (schema.patternProperties) {\n    // partially support patternProperties. in the case that\n    // additionalProperties is not set, and there is only a single\n    // value definition, we can validate against that.\n    singlePatternProperty =\n      !schema.additionalProperties && Object.keys(schema.patternProperties).length === 1;\n\n    asts = asts.concat(\n      Object.entries(schema.patternProperties).map(([key, value]) => {\n        const ast = parse(value, options, key, processed, usedNames);\n        const comment = `This interface was referenced by \\`${parentSchemaName}\\`'s JSON-Schema definition\nvia the \\`patternProperty\\` \"${key.replace(\"*/\", \"*\\\\/\")}\".`;\n        ast.comment = ast.comment ? `${ast.comment}\\n\\n${comment}` : comment;\n        return {\n          ast,\n          isPatternProperty: !singlePatternProperty,\n          isRequired: singlePatternProperty || required.has(key),\n          isUnreachableDefinition: false,\n          keyName: singlePatternProperty ? \"[k: string]\" : key,\n        };\n      }),\n    );\n  }\n\n  if (options.unreachableDefinitions) {\n    asts = asts.concat(\n      Object.entries(schema.$defs ?? {}).map(([key, value]) => {\n        const ast = parse(value, options, key, processed, usedNames);\n        const comment = `This interface was referenced by \\`${parentSchemaName}\\`'s JSON-Schema\nvia the \\`definition\\` \"${key}\".`;\n        ast.comment = ast.comment ? `${ast.comment}\\n\\n${comment}` : comment;\n        return {\n          ast,\n          isPatternProperty: false,\n          isRequired: required.has(key),\n          isUnreachableDefinition: true,\n          keyName: key,\n        };\n      }),\n    );\n  }\n\n  // handle additionalProperties\n  switch (schema.additionalProperties) {\n    case undefined:\n    case true:\n      if (singlePatternProperty) {\n        return asts;\n      }\n      return asts.concat({\n        ast: options.unknownAny ? T_UNKNOWN_ADDITIONAL_PROPERTIES : T_ANY_ADDITIONAL_PROPERTIES,\n        isPatternProperty: false,\n        isRequired: true,\n        isUnreachableDefinition: false,\n        keyName: \"[k: string]\",\n      });\n\n    case false:\n      return asts;\n\n    // pass \"true\" as the last param because in TS, properties\n    // defined via index signatures are already optional\n    default:\n      return asts.concat({\n        ast: parse(schema.additionalProperties, options, \"[k: string]\", processed, usedNames),\n        isPatternProperty: false,\n        isRequired: true,\n        isUnreachableDefinition: false,\n        keyName: \"[k: string]\",\n      });\n  }\n}\n\ntype Definitions = { [k: string]: NormalizedJSONSchema };\n\nfunction getDefinitions(\n  schema: NormalizedJSONSchema,\n  isSchema = true,\n  processed = new Set<NormalizedJSONSchema>(),\n): Definitions {\n  if (processed.has(schema)) {\n    return {};\n  }\n  processed.add(schema);\n  if (Array.isArray(schema)) {\n    return schema.reduce(\n      (prev, cur) => ({\n        ...prev,\n        ...getDefinitions(cur, false, processed),\n      }),\n      {},\n    );\n  }\n  if (isPlainObject(schema)) {\n    return {\n      ...(isSchema && hasDefinitions(schema) ? schema.$defs : {}),\n      ...Object.keys(schema).reduce<Definitions>(\n        (prev, cur) => ({\n          ...prev,\n          ...getDefinitions(schema[cur], false, processed),\n        }),\n        {},\n      ),\n    };\n  }\n  return {};\n}\n\nconst getDefinitionsMemoized = memoize(getDefinitions);\n\n/**\n * TODO: Reduce rate of false positives\n */\nfunction hasDefinitions(schema: NormalizedJSONSchema): schema is JSONSchemaWithDefinitions {\n  return \"$defs\" in schema;\n}\n","import type { JSONSchema } from \"./types/JSONSchema\";\n\nexport type DereferencedPaths = WeakMap<JSONSchema, string>;\n\ntype RefCache = Map<string, unknown>;\ntype SeenCache = WeakMap<object, unknown>;\n\nconst isObject = (value: unknown): value is Record<string, unknown> =>\n  value !== null && typeof value === \"object\";\n\nconst decodePointerSegment = (segment: string): string => {\n  try {\n    return decodeURIComponent(segment).replace(/~1/g, \"/\").replace(/~0/g, \"~\");\n  } catch {\n    throw new ReferenceError(`Invalid JSON Pointer segment \"${segment}\" in $ref`);\n  }\n};\n\nconst encodePointerSegment = (segment: string): string =>\n  segment.replace(/~/g, \"~0\").replace(/\\//g, \"~1\");\n\nconst childPointer = (parent: string, key: string): string =>\n  parent === \"#\" ? `#/${encodePointerSegment(key)}` : `${parent}/${encodePointerSegment(key)}`;\n\nconst normalizeLocalRef = (ref: string): string => {\n  if (ref === \"#\") return ref;\n  if (!ref.startsWith(\"#/\")) {\n    throw new ReferenceError(\n      `Unsupported $ref \"${ref}\". Only same-document JSON Pointer refs are supported.`,\n    );\n  }\n  return `#/${ref\n    .slice(2)\n    .split(\"/\")\n    .map(decodePointerSegment)\n    .map(encodePointerSegment)\n    .join(\"/\")}`;\n};\n\nconst resolvePointer = (root: unknown, ref: string): unknown => {\n  const pointer = normalizeLocalRef(ref);\n  if (pointer === \"#\") return root;\n\n  let current = root;\n  for (const rawSegment of pointer.slice(2).split(\"/\")) {\n    const segment = decodePointerSegment(rawSegment);\n    if (!isObject(current) || !(segment in current)) {\n      throw new ReferenceError(`Unable to resolve $ref \"${ref}\"`);\n    }\n    current = current[segment];\n  }\n  return current;\n};\n\nconst dereferenceNode = (\n  root: JSONSchema,\n  node: unknown,\n  pointer: string,\n  dereferencedPaths: DereferencedPaths,\n  refCache: RefCache,\n  seenCache: SeenCache,\n): unknown => {\n  if (!isObject(node)) return node;\n\n  if (typeof node.$ref === \"string\") {\n    const ref = normalizeLocalRef(node.$ref);\n    const cached = refCache.get(ref);\n    if (cached) {\n      if (isObject(cached)) {\n        dereferencedPaths.set(cached as JSONSchema, ref);\n      }\n      return cached;\n    }\n\n    const target = resolvePointer(root, ref);\n    if (!isObject(target)) return target;\n\n    const targetClone: Record<string, unknown> | unknown[] = Array.isArray(target) ? [] : {};\n    refCache.set(ref, targetClone);\n    seenCache.set(target, targetClone);\n    dereferencedPaths.set(targetClone as JSONSchema, ref);\n\n    const targetPointer = ref;\n    for (const [key, value] of Object.entries(target)) {\n      (targetClone as Record<string, unknown>)[key] = dereferenceNode(\n        root,\n        value,\n        childPointer(targetPointer, key),\n        dereferencedPaths,\n        refCache,\n        seenCache,\n      );\n    }\n    return targetClone;\n  }\n\n  const seen = seenCache.get(node);\n  if (seen) return seen;\n\n  const clone: Record<string, unknown> | unknown[] = Array.isArray(node) ? [] : {};\n  seenCache.set(node, clone);\n  refCache.set(pointer, clone);\n\n  if (Array.isArray(node)) {\n    node.forEach((value, index) => {\n      (clone as unknown[])[index] = dereferenceNode(\n        root,\n        value,\n        childPointer(pointer, String(index)),\n        dereferencedPaths,\n        refCache,\n        seenCache,\n      );\n    });\n    return clone;\n  }\n\n  for (const [key, value] of Object.entries(node)) {\n    (clone as Record<string, unknown>)[key] = dereferenceNode(\n      root,\n      value,\n      childPointer(pointer, key),\n      dereferencedPaths,\n      refCache,\n      seenCache,\n    );\n  }\n\n  return clone;\n};\n\nexport function dereference(schema: JSONSchema): {\n  dereferencedPaths: DereferencedPaths;\n  dereferencedSchema: JSONSchema;\n} {\n  const dereferencedPaths: DereferencedPaths = new WeakMap();\n  const dereferencedSchema = dereferenceNode(\n    schema,\n    schema,\n    \"#\",\n    dereferencedPaths,\n    new Map(),\n    new WeakMap(),\n  ) as JSONSchema;\n  return { dereferencedPaths, dereferencedSchema };\n}\n","import type { JSONSchema, LinkedJSONSchema } from \"./types/JSONSchema\";\nimport { traverse } from \"./utils\";\n\ntype Rule = (schema: JSONSchema) => boolean | void;\nconst rules = new Map<string, Rule>();\n\nrules.set(\"Enum members and tsEnumNames must be of the same length\", (schema) => {\n  if (schema.enum && schema.tsEnumNames && schema.enum.length !== schema.tsEnumNames.length) {\n    return false;\n  }\n});\n\nrules.set(\"tsEnumNames must be an array of strings\", (schema) => {\n  if (schema.tsEnumNames && schema.tsEnumNames.some((_) => typeof _ !== \"string\")) {\n    return false;\n  }\n});\n\nrules.set(\"When both maxItems and minItems are present, maxItems >= minItems\", (schema) => {\n  const { maxItems, minItems } = schema;\n  if (typeof maxItems === \"number\" && typeof minItems === \"number\") {\n    return maxItems >= minItems;\n  }\n});\n\nrules.set(\"When maxItems exists, maxItems >= 0\", (schema) => {\n  const { maxItems } = schema;\n  if (typeof maxItems === \"number\") {\n    return maxItems >= 0;\n  }\n});\n\nrules.set(\"When minItems exists, minItems >= 0\", (schema) => {\n  const { minItems } = schema;\n  if (typeof minItems === \"number\") {\n    return minItems >= 0;\n  }\n});\n\nrules.set(\"deprecated must be a boolean\", (schema) => {\n  const typeOfDeprecated = typeof schema.deprecated;\n  return typeOfDeprecated === \"boolean\" || typeOfDeprecated === \"undefined\";\n});\n\nexport function validate(schema: LinkedJSONSchema, filename: string): string[] {\n  const errors: string[] = [];\n  rules.forEach((rule, ruleName) => {\n    traverse(schema, (schema, key) => {\n      if (rule(schema) === false) {\n        errors.push(`Error at key \"${key}\" in file \"${filename}\": ${ruleName}`);\n      }\n      return schema;\n    });\n  });\n  return errors;\n}\n","import { Parent } from \"./types/JSONSchema\";\nimport type { JSONSchema, LinkedJSONSchema } from \"./types/JSONSchema\";\nimport { isPlainObject } from \"./compat\";\nimport type { JSONSchema4Type } from \"./types/json-schema\";\n\n/**\n * Traverses over the schema, giving each node a reference to its\n * parent node. We need this for downstream operations.\n */\nexport function link(\n  schema: JSONSchema4Type | JSONSchema,\n  parent: JSONSchema4Type | null = null,\n): LinkedJSONSchema {\n  if (!Array.isArray(schema) && !isPlainObject(schema)) {\n    return schema as LinkedJSONSchema;\n  }\n\n  // Handle cycles\n  if ((schema as JSONSchema).hasOwnProperty(Parent)) {\n    return schema as LinkedJSONSchema;\n  }\n\n  // Add a reference to this schema's parent\n  Object.defineProperty(schema, Parent, {\n    enumerable: false,\n    value: parent,\n    writable: false,\n  });\n\n  // Arrays\n  if (Array.isArray(schema)) {\n    schema.forEach((child) => link(child, schema));\n  }\n\n  // Objects\n  for (const key in schema as JSONSchema) {\n    link((schema as JSONSchema)[key], schema);\n  }\n\n  return schema as LinkedJSONSchema;\n}\n","import type { Options } from \".\";\n\nexport function validateOptions({ maxItems }: Partial<Options>): void {\n  if (maxItems !== undefined && maxItems < -1) {\n    throw RangeError(`Expected options.maxItems to be >= -1, but was given ${maxItems}.`);\n  }\n}\n","import type { JSONSchema4 } from \"./types/json-schema\";\nimport { cloneDeep, merge } from \"./compat\";\nimport { format } from \"./formatter\";\nimport { generate } from \"./generator\";\nimport { normalize } from \"./normalizer\";\nimport { optimize } from \"./optimizer\";\nimport { parse } from \"./parser\";\nimport { dereference } from \"./resolver\";\nimport { validate } from \"./validator\";\nimport { link } from \"./linker\";\nimport { validateOptions } from \"./optionValidator\";\nimport type { JSONSchema as LinkedJSONSchema } from \"./types/JSONSchema\";\n\nexport type {\n  EnumJSONSchema,\n  JSONSchema,\n  NamedEnumJSONSchema,\n  CustomTypeJSONSchema,\n} from \"./types/JSONSchema\";\n\nexport interface FormatOptions {\n  bracketSpacing?: boolean;\n  printWidth?: number;\n  semi?: boolean;\n  singleQuote?: boolean;\n  tabWidth?: number;\n  trailingComma?: \"none\" | \"es5\" | \"all\";\n  useTabs?: boolean;\n}\n\nexport type RefOptions = Record<string, unknown>;\n\nexport interface Options {\n  /**\n   * Preserved for upstream API compatibility.\n   *\n   * Executor's vendored compiler only resolves same-document JSON Pointer\n   * `$ref`s and never fetches or reads external references, so this option is\n   * accepted but ignored.\n   */\n  $refOptions: RefOptions;\n  /**\n   * Default value for additionalProperties, when it is not explicitly set.\n   */\n  additionalProperties: boolean;\n  /**\n   * Disclaimer comment prepended to the top of each generated file.\n   */\n  bannerComment: string;\n  /**\n   * Custom function to provide a type name for a given schema\n   */\n  customName?: (\n    schema: LinkedJSONSchema,\n    keyNameFromDefinition: string | undefined,\n  ) => string | undefined;\n  /**\n   * Preserved for upstream API compatibility. External refs are not resolved,\n   * so this option is accepted but ignored.\n   */\n  cwd: string;\n  /**\n   * Declare external schemas referenced via `$ref`?\n   */\n  declareExternallyReferenced: boolean;\n  /**\n   * Prepend enums with [`const`](https://www.typescriptlang.org/docs/handbook/enums.html#computed-and-constant-members)?\n   */\n  enableConstEnums: boolean;\n  /**\n   * Create enums from JSON enums with eponymous keys\n   */\n  inferStringEnumKeysFromValues: boolean;\n  /**\n   * Format code? Preserved for upstream API compatibility.\n   *\n   * Executor's vendored compiler does not bundle a formatter, so this option is\n   * accepted but does not change output.\n   */\n  format: boolean;\n  /**\n   * Ignore maxItems and minItems for `array` types, preventing tuples being generated.\n   */\n  ignoreMinAndMaxItems: boolean;\n  /**\n   * Maximum number of unioned tuples to emit when representing bounded-size array types,\n   * before falling back to emitting unbounded arrays. Increase this to improve precision\n   * of emitted types, decrease it to improve performance, or set it to `-1` to ignore\n   * `minItems` and `maxItems`.\n   */\n  maxItems: number;\n  /**\n   * Append all index signatures with `| undefined` so that they are strictly typed.\n   *\n   * This is required to be compatible with `strictNullChecks`.\n   */\n  strictIndexSignatures: boolean;\n  /**\n   * Formatting configuration. Preserved for upstream API compatibility.\n   */\n  style: FormatOptions;\n  /**\n   * Generate code for `definitions` that aren't referenced by the schema?\n   */\n  unreachableDefinitions: boolean;\n  /**\n   * Generate unknown type instead of any\n   */\n  unknownAny: boolean;\n}\n\nexport const DEFAULT_OPTIONS: Options = {\n  $refOptions: {},\n  additionalProperties: true, // TODO: default to empty schema (as per spec) instead\n  bannerComment: `/* eslint-disable */\n/**\n* This file was automatically generated by json-schema-to-typescript.\n* DO NOT MODIFY IT BY HAND. Instead, modify the source JSONSchema file,\n* and run json-schema-to-typescript to regenerate this file.\n*/`,\n  cwd: \"\",\n  declareExternallyReferenced: true,\n  enableConstEnums: true,\n  inferStringEnumKeysFromValues: false,\n  format: false,\n  ignoreMinAndMaxItems: false,\n  maxItems: 20,\n  strictIndexSignatures: false,\n  style: {\n    bracketSpacing: false,\n    printWidth: 120,\n    semi: true,\n    singleQuote: false,\n    tabWidth: 2,\n    trailingComma: \"none\",\n    useTabs: false,\n  },\n  unreachableDefinitions: false,\n  unknownAny: true,\n};\n\nexport function compile(schema: JSONSchema4, name: string, options: Partial<Options> = {}): string {\n  validateOptions(options);\n\n  const _options = merge({} as Options, DEFAULT_OPTIONS, options);\n\n  // Initial clone to avoid mutating the input\n  const _schema = cloneDeep(schema);\n\n  const { dereferencedPaths, dereferencedSchema } = dereference(_schema);\n  const linked = link(dereferencedSchema);\n  const errors = validate(linked, name);\n  if (errors.length) {\n    throw new ValidationError(errors.join(\"\\n\"));\n  }\n\n  const normalized = normalize(linked, dereferencedPaths, name, _options);\n  const parsed = parse(normalized, _options);\n  const optimized = optimize(parsed, _options);\n  const generated = generate(optimized, _options);\n  const formatted = format(generated, _options);\n\n  return formatted;\n}\n\nexport class ValidationError extends Error {}\n","import { hoistDefinitions, normalizeRefs } from \"./schema-refs\";\nimport { compile } from \"./vendor/json-schema-to-typescript\";\n\ntype JsonSchemaRecord = Record<string, unknown>;\ntype CompilerJsonSchema = JsonSchemaRecord | boolean;\ntype CompilerFormatOptions = {\n  [key: string]: unknown;\n  printWidth?: number;\n  semi?: boolean;\n  singleQuote?: boolean;\n  trailingComma?: \"none\" | \"es5\" | \"all\";\n};\ntype SchemaCompilerOptions = {\n  [key: string]: unknown;\n  additionalProperties?: boolean;\n  bannerComment?: string;\n  enableConstEnums?: boolean;\n  format?: boolean;\n  style?: CompilerFormatOptions;\n  unknownAny?: boolean;\n  unreachableDefinitions?: boolean;\n};\n\nexport type TypeScriptRenderOptions = {\n  compilerOptions?: Partial<SchemaCompilerOptions>;\n};\n\nexport type TypeScriptSchemaPreview = {\n  readonly type: string;\n  readonly definitions: Record<string, string>;\n};\n\nconst ROOT_WRAPPER_NAME = \"SchemaPreview\";\nconst ROOT_PROPERTY_NAME = \"__root\";\nconst TOOL_INPUT_PROPERTY_NAME = \"__input\";\nconst TOOL_OUTPUT_PROPERTY_NAME = \"__output\";\n\nconst DEFAULT_COMPILER_OPTIONS = {\n  additionalProperties: false,\n  bannerComment: \"\",\n  enableConstEnums: false,\n  format: false,\n  unknownAny: true,\n  unreachableDefinitions: false,\n  style: {\n    printWidth: 120,\n    semi: true,\n    singleQuote: false,\n    trailingComma: \"none\",\n  },\n} satisfies Partial<SchemaCompilerOptions>;\n\nconst DEFINITION_REF_PATTERN = /^#\\/definitions\\/(.+)$/;\nconst IDENTIFIER_PATTERN = /^[A-Za-z_$][A-Za-z0-9_$]*$/;\n\nconst asRecord = (value: unknown): JsonSchemaRecord =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value)\n    ? (value as JsonSchemaRecord)\n    : {};\n\nconst asCompilerSchema = (value: unknown): CompilerJsonSchema => {\n  if (typeof value === \"boolean\") {\n    return value;\n  }\n\n  if (value !== null && typeof value === \"object\") {\n    return value as JsonSchemaRecord;\n  }\n\n  return {};\n};\n\nconst isNullSchema = (value: unknown): boolean => {\n  if (value === false) {\n    return false;\n  }\n\n  const schema = asRecord(value);\n  return schema.type === \"null\" || schema.const === null;\n};\n\nconst appendNullSchema = (schemas: ReadonlyArray<unknown>): Array<unknown> =>\n  schemas.some(isNullSchema) ? [...schemas] : [...schemas, { type: \"null\" }];\n\nconst schemaAlreadyAllowsNull = (schema: JsonSchemaRecord): boolean => {\n  if (schema.type === \"null\" || schema.const === null) {\n    return true;\n  }\n\n  if (Array.isArray(schema.type) && schema.type.includes(\"null\")) {\n    return true;\n  }\n\n  if (Array.isArray(schema.enum) && schema.enum.includes(null)) {\n    return true;\n  }\n\n  const compositeSchemas = [\n    ...(Array.isArray(schema.anyOf) ? schema.anyOf : []),\n    ...(Array.isArray(schema.oneOf) ? schema.oneOf : []),\n  ];\n  return compositeSchemas.some(isNullSchema);\n};\n\nconst normalizeNullable = (schema: JsonSchemaRecord): JsonSchemaRecord => {\n  if (schema.nullable !== true) {\n    return schema;\n  }\n\n  const { nullable: _nullable, ...base } = schema;\n  if (schemaAlreadyAllowsNull(base)) {\n    return base;\n  }\n\n  if (\"const\" in base) {\n    const { const: constValue, type: _type, ...rest } = base;\n    return { ...rest, enum: [constValue, null] };\n  }\n\n  if (Array.isArray(base.enum)) {\n    return { ...base, enum: [...base.enum, null] };\n  }\n\n  if (typeof base.type === \"string\") {\n    return { ...base, type: [base.type, \"null\"] };\n  }\n\n  if (Array.isArray(base.type)) {\n    const types = base.type.filter((value): value is string => typeof value === \"string\");\n    return types.length > 0\n      ? { ...base, type: [...types, \"null\"] }\n      : { anyOf: [base, { type: \"null\" }] };\n  }\n\n  if (Array.isArray(base.oneOf)) {\n    return { ...base, oneOf: appendNullSchema(base.oneOf) };\n  }\n\n  if (Array.isArray(base.anyOf)) {\n    return { ...base, anyOf: appendNullSchema(base.anyOf) };\n  }\n\n  return { anyOf: [base, { type: \"null\" }] };\n};\n\nconst normalizeSchema = (node: unknown): unknown => {\n  if (node === null || typeof node !== \"object\") {\n    return node;\n  }\n\n  if (Array.isArray(node)) {\n    return node.map((item) => normalizeSchema(item));\n  }\n\n  const schema = node as JsonSchemaRecord;\n  const normalized: JsonSchemaRecord = {};\n\n  for (const [key, value] of Object.entries(schema)) {\n    if (key === \"$ref\" && typeof value === \"string\") {\n      const definitionName = value.match(DEFINITION_REF_PATTERN)?.[1];\n      normalized[key] = definitionName ? `#/$defs/${definitionName}` : value;\n      continue;\n    }\n\n    normalized[key] = normalizeSchema(value);\n  }\n\n  const nullable = normalizeNullable(normalized);\n  if (\n    nullable.type === \"object\" &&\n    nullable.properties === undefined &&\n    nullable.additionalProperties === undefined\n  ) {\n    return { ...nullable, additionalProperties: {} };\n  }\n  return nullable;\n};\n\nconst mergeDefinitions = (\n  externalDefs: ReadonlyMap<string, unknown>,\n  localDefs: Record<string, unknown>,\n): Record<string, unknown> => {\n  const merged: Record<string, unknown> = {};\n\n  for (const [name, schema] of externalDefs) {\n    merged[name] = normalizeSchema(normalizeRefs(asCompilerSchema(schema)));\n  }\n\n  for (const [name, schema] of Object.entries(localDefs)) {\n    merged[name] = normalizeSchema(normalizeRefs(asCompilerSchema(schema)));\n  }\n\n  return merged;\n};\n\nconst buildWrappedObjectSchema = (\n  properties: ReadonlyArray<readonly [string, unknown]>,\n  defs: ReadonlyMap<string, unknown>,\n): JsonSchemaRecord => {\n  const normalizedProperties: Record<string, unknown> = {};\n  const localDefs: Record<string, unknown> = {};\n\n  for (const [name, schema] of properties) {\n    const normalizedSchema = normalizeSchema(normalizeRefs(asCompilerSchema(schema)));\n    const { stripped, defs: schemaDefs } = hoistDefinitions(normalizedSchema);\n    normalizedProperties[name] = asCompilerSchema(stripped);\n    Object.assign(localDefs, schemaDefs);\n  }\n\n  const mergedDefs = mergeDefinitions(defs, localDefs);\n  const wrappedSchema: JsonSchemaRecord = {\n    type: \"object\",\n    properties: normalizedProperties,\n    required: properties.map(([name]) => name),\n    additionalProperties: false,\n  };\n\n  if (Object.keys(mergedDefs).length > 0) {\n    wrappedSchema.$defs = mergedDefs;\n  }\n\n  return wrappedSchema;\n};\n\nconst buildWrappedSchema = (\n  schema: unknown,\n  defs: ReadonlyMap<string, unknown>,\n): JsonSchemaRecord => buildWrappedObjectSchema([[ROOT_PROPERTY_NAME, schema]], defs);\n\nconst compilerOptionsFrom = (options: TypeScriptRenderOptions): Partial<SchemaCompilerOptions> => ({\n  ...DEFAULT_COMPILER_OPTIONS,\n  ...options.compilerOptions,\n  bannerComment: \"\",\n  format: false,\n  style: {\n    ...DEFAULT_COMPILER_OPTIONS.style,\n    ...options.compilerOptions?.style,\n  },\n});\n\ntype GeneratedDeclaration = {\n  readonly kind: \"interface\" | \"type\";\n  readonly name: string;\n  readonly body: string;\n};\n\ntype ScanState = {\n  quote: '\"' | \"'\" | \"`\" | null;\n  escaping: boolean;\n  lineComment: boolean;\n  blockComment: boolean;\n};\n\nconst emptyScanState = (): ScanState => ({\n  quote: null,\n  escaping: false,\n  lineComment: false,\n  blockComment: false,\n});\n\nconst stepScanState = (state: ScanState, current: string, next: string): { skipNext: boolean } => {\n  if (state.lineComment) {\n    if (current === \"\\n\" || current === \"\\r\") {\n      state.lineComment = false;\n    }\n    return { skipNext: false };\n  }\n\n  if (state.blockComment) {\n    if (current === \"*\" && next === \"/\") {\n      state.blockComment = false;\n      return { skipNext: true };\n    }\n    return { skipNext: false };\n  }\n\n  if (state.quote) {\n    if (state.escaping) {\n      state.escaping = false;\n      return { skipNext: false };\n    }\n\n    if (current === \"\\\\\") {\n      state.escaping = true;\n      return { skipNext: false };\n    }\n\n    if (current === state.quote) {\n      state.quote = null;\n    }\n    return { skipNext: false };\n  }\n\n  if (current === \"/\" && next === \"/\") {\n    state.lineComment = true;\n    return { skipNext: true };\n  }\n\n  if (current === \"/\" && next === \"*\") {\n    state.blockComment = true;\n    return { skipNext: true };\n  }\n\n  if (current === '\"' || current === \"'\" || current === \"`\") {\n    state.quote = current;\n  }\n\n  return { skipNext: false };\n};\n\nconst findMatchingBrace = (source: string, start: number): number => {\n  const state = emptyScanState();\n  let depth = 0;\n\n  for (let index = start; index < source.length; index += 1) {\n    const current = source[index] ?? \"\";\n    const next = source[index + 1] ?? \"\";\n    const wasCode = !state.quote && !state.lineComment && !state.blockComment;\n    const { skipNext } = stepScanState(state, current, next);\n\n    if (wasCode && !state.quote && !state.lineComment && !state.blockComment) {\n      if (current === \"{\") {\n        depth += 1;\n      } else if (current === \"}\") {\n        depth -= 1;\n        if (depth === 0) {\n          return index;\n        }\n      }\n    }\n\n    if (skipNext) {\n      index += 1;\n    }\n  }\n\n  return -1;\n};\n\nconst findMatchingParen = (source: string, start: number): number => {\n  const state = emptyScanState();\n  let depth = 0;\n\n  for (let index = start; index < source.length; index += 1) {\n    const current = source[index] ?? \"\";\n    const next = source[index + 1] ?? \"\";\n    const wasCode = !state.quote && !state.lineComment && !state.blockComment;\n    const { skipNext } = stepScanState(state, current, next);\n\n    if (wasCode && !state.quote && !state.lineComment && !state.blockComment) {\n      if (current === \"(\") {\n        depth += 1;\n      } else if (current === \")\") {\n        depth -= 1;\n        if (depth === 0) {\n          return index;\n        }\n      }\n    }\n\n    if (skipNext) {\n      index += 1;\n    }\n  }\n\n  return -1;\n};\n\nconst findTypeAliasEnd = (source: string, start: number): number => {\n  const state = emptyScanState();\n  let braceDepth = 0;\n  let bracketDepth = 0;\n  let parenDepth = 0;\n  let seenToken = false;\n\n  for (let index = start; index < source.length; index += 1) {\n    const current = source[index] ?? \"\";\n    const next = source[index + 1] ?? \"\";\n    const wasCode = !state.quote && !state.lineComment && !state.blockComment;\n    const { skipNext } = stepScanState(state, current, next);\n\n    if (wasCode && !state.quote && !state.lineComment && !state.blockComment) {\n      if (current === \"{\") {\n        braceDepth += 1;\n      } else if (current === \"}\") {\n        braceDepth = Math.max(0, braceDepth - 1);\n      } else if (current === \"[\") {\n        bracketDepth += 1;\n      } else if (current === \"]\") {\n        bracketDepth = Math.max(0, bracketDepth - 1);\n      } else if (current === \"(\") {\n        parenDepth += 1;\n      } else if (current === \")\") {\n        parenDepth = Math.max(0, parenDepth - 1);\n      }\n\n      if (!/\\s/.test(current)) {\n        seenToken = true;\n      }\n\n      if (\n        seenToken &&\n        (current === \";\" || current === \"\\n\" || current === \"\\r\") &&\n        braceDepth === 0 &&\n        bracketDepth === 0 &&\n        parenDepth === 0\n      ) {\n        return index;\n      }\n    }\n\n    if (skipNext) {\n      index += 1;\n    }\n  }\n\n  return -1;\n};\n\nconst parseGeneratedDeclarations = (source: string): Array<GeneratedDeclaration> => {\n  const declarations: Array<GeneratedDeclaration> = [];\n  const pattern = /export\\s+(interface|type)\\s+([A-Za-z_$][A-Za-z0-9_$]*)/g;\n\n  for (let match = pattern.exec(source); match; match = pattern.exec(source)) {\n    const kind = match[1] as \"interface\" | \"type\";\n    const name = match[2] ?? \"\";\n\n    if (!IDENTIFIER_PATTERN.test(name)) {\n      continue;\n    }\n\n    if (kind === \"interface\") {\n      const braceStart = source.indexOf(\"{\", pattern.lastIndex);\n      if (braceStart < 0) {\n        continue;\n      }\n\n      const braceEnd = findMatchingBrace(source, braceStart);\n      if (braceEnd < 0) {\n        continue;\n      }\n\n      declarations.push({\n        kind,\n        name,\n        body: source.slice(braceStart, braceEnd + 1),\n      });\n      pattern.lastIndex = braceEnd + 1;\n      continue;\n    }\n\n    const equalsIndex = source.indexOf(\"=\", pattern.lastIndex);\n    if (equalsIndex < 0) {\n      continue;\n    }\n\n    const end = findTypeAliasEnd(source, equalsIndex + 1);\n    if (end < 0) {\n      continue;\n    }\n\n    declarations.push({\n      kind,\n      name,\n      body: source.slice(equalsIndex + 1, end).trim(),\n    });\n    pattern.lastIndex = end + 1;\n  }\n\n  return declarations;\n};\n\nconst extractPropertyType = (interfaceBody: string, propertyName: string): string | null => {\n  const propertyIndex = interfaceBody.indexOf(propertyName);\n  if (propertyIndex < 0) {\n    return null;\n  }\n\n  const colonIndex = interfaceBody.indexOf(\":\", propertyIndex + propertyName.length);\n  if (colonIndex < 0) {\n    return null;\n  }\n\n  const end = findTypeAliasEnd(interfaceBody, colonIndex + 1);\n  if (end < 0) {\n    return null;\n  }\n\n  return interfaceBody.slice(colonIndex + 1, end).trim();\n};\n\nconst containsTopLevelUnion = (source: string): boolean => {\n  const state = emptyScanState();\n  let braceDepth = 0;\n  let bracketDepth = 0;\n  let parenDepth = 0;\n\n  for (let index = 0; index < source.length; index += 1) {\n    const current = source[index] ?? \"\";\n    const next = source[index + 1] ?? \"\";\n    const wasCode = !state.quote && !state.lineComment && !state.blockComment;\n    const { skipNext } = stepScanState(state, current, next);\n\n    if (wasCode && !state.quote && !state.lineComment && !state.blockComment) {\n      if (current === \"{\") {\n        braceDepth += 1;\n      } else if (current === \"}\") {\n        braceDepth = Math.max(0, braceDepth - 1);\n      } else if (current === \"[\") {\n        bracketDepth += 1;\n      } else if (current === \"]\") {\n        bracketDepth = Math.max(0, bracketDepth - 1);\n      } else if (current === \"(\") {\n        parenDepth += 1;\n      } else if (current === \")\") {\n        parenDepth = Math.max(0, parenDepth - 1);\n      } else if (current === \"|\" && braceDepth === 0 && bracketDepth === 0 && parenDepth === 0) {\n        return true;\n      }\n    }\n\n    if (skipNext) {\n      index += 1;\n    }\n  }\n\n  return false;\n};\n\nconst significantBefore = (source: string, start: number): string => {\n  for (let index = start; index >= 0; index -= 1) {\n    const char = source[index] ?? \"\";\n    if (!/\\s/.test(char)) {\n      return char;\n    }\n  }\n  return \"\";\n};\n\nconst significantAfter = (source: string, start: number): string => {\n  for (let index = start; index < source.length; index += 1) {\n    const char = source[index] ?? \"\";\n    if (!/\\s/.test(char)) {\n      return char;\n    }\n  }\n  return \"\";\n};\n\nconst stripRedundantUnionParens = (source: string): string => {\n  let output = \"\";\n\n  for (let index = 0; index < source.length; index += 1) {\n    const current = source[index] ?? \"\";\n    if (current !== \"(\") {\n      output += current;\n      continue;\n    }\n\n    const end = findMatchingParen(source, index);\n    if (end < 0) {\n      output += current;\n      continue;\n    }\n\n    const previous = significantBefore(source, index - 1);\n    const next = significantAfter(source, end + 1);\n    const inner = source.slice(index + 1, end);\n    const keepParens =\n      !containsTopLevelUnion(inner) ||\n      /[A-Za-z0-9_$]/.test(previous) ||\n      next === \"[\" ||\n      next === \".\" ||\n      next === \"<\";\n\n    if (keepParens) {\n      output += source.slice(index, end + 1);\n    } else {\n      output += stripRedundantUnionParens(inner);\n    }\n    index = end;\n  }\n\n  return output;\n};\n\nconst compactTypeScript = (value: string): string => {\n  const state = emptyScanState();\n  let output = \"\";\n  let pendingWhitespace = false;\n  let braceDepth = 0;\n\n  const emitWhitespace = () => {\n    if (output.length > 0) {\n      pendingWhitespace = true;\n    }\n  };\n\n  const previousSignificant = (): string => output.trimEnd().at(-1) ?? \"\";\n\n  const nextSignificant = (start: number): string => {\n    for (let index = start; index < value.length; index += 1) {\n      const char = value[index] ?? \"\";\n      if (!/\\s/.test(char)) {\n        return char;\n      }\n    }\n    return \"\";\n  };\n\n  const terminateMemberAtNewline = (index: number): void => {\n    if (braceDepth <= 0) {\n      return;\n    }\n\n    const previous = previousSignificant();\n    if (!previous || previous === \"{\" || previous === \";\" || previous === \"|\" || previous === \"&\") {\n      return;\n    }\n\n    const next = nextSignificant(index + 1);\n    if (!next || next === \"|\" || next === \"&\" || next === \")\" || next === \"]\" || next === \",\") {\n      return;\n    }\n\n    output = output.trimEnd() + \";\";\n    pendingWhitespace = true;\n  };\n\n  for (let index = 0; index < value.length; index += 1) {\n    const current = value[index] ?? \"\";\n    const next = value[index + 1] ?? \"\";\n\n    if (!state.quote && !state.lineComment && !state.blockComment) {\n      if (current === \"/\" && next === \"/\") {\n        emitWhitespace();\n        index += 1;\n        state.lineComment = true;\n        continue;\n      }\n\n      if (current === \"/\" && next === \"*\") {\n        emitWhitespace();\n        index += 1;\n        state.blockComment = true;\n        continue;\n      }\n\n      if (/\\s/.test(current)) {\n        if (current === \"\\n\" || current === \"\\r\") {\n          terminateMemberAtNewline(index);\n        }\n        emitWhitespace();\n        continue;\n      }\n    }\n\n    if (state.lineComment) {\n      if (current === \"\\n\" || current === \"\\r\") {\n        state.lineComment = false;\n      }\n      continue;\n    }\n\n    if (state.blockComment) {\n      if (current === \"*\" && next === \"/\") {\n        state.blockComment = false;\n        index += 1;\n      }\n      continue;\n    }\n\n    if (pendingWhitespace && output.length > 0) {\n      output += \" \";\n    }\n    pendingWhitespace = false;\n    output += current;\n\n    if (state.quote) {\n      if (state.escaping) {\n        state.escaping = false;\n      } else if (current === \"\\\\\") {\n        state.escaping = true;\n      } else if (current === state.quote) {\n        state.quote = null;\n      }\n      continue;\n    }\n\n    if (current === '\"' || current === \"'\" || current === \"`\") {\n      state.quote = current;\n      continue;\n    }\n\n    if (current === \"{\") {\n      braceDepth += 1;\n    } else if (current === \"}\") {\n      braceDepth = Math.max(0, braceDepth - 1);\n    }\n  }\n\n  return stripRedundantUnionParens(output.trim());\n};\n\nconst getDefinitionsFromDeclarations = (\n  declarations: ReadonlyArray<GeneratedDeclaration>,\n): Record<string, string> =>\n  Object.fromEntries(\n    declarations\n      .filter((declaration) => declaration.name !== ROOT_WRAPPER_NAME)\n      .map((declaration) => [declaration.name, compactTypeScript(declaration.body)])\n      .sort(([left], [right]) => left.localeCompare(right)),\n  );\n\nconst previewFromCompiledTypeScript = (source: string): TypeScriptSchemaPreview => {\n  const declarations = parseGeneratedDeclarations(source);\n  const rootDeclaration = declarations.find(\n    (declaration) => declaration.name === ROOT_WRAPPER_NAME,\n  );\n  const rootType =\n    rootDeclaration?.kind === \"interface\"\n      ? extractPropertyType(rootDeclaration.body, ROOT_PROPERTY_NAME)\n      : null;\n\n  return {\n    type: compactTypeScript(rootType ?? \"unknown\"),\n    definitions: getDefinitionsFromDeclarations(declarations),\n  };\n};\n\nconst previewToolFromCompiledTypeScript = (source: string): ToolTypeScriptPreview => {\n  const declarations = parseGeneratedDeclarations(source);\n  const rootDeclaration = declarations.find(\n    (declaration) => declaration.name === ROOT_WRAPPER_NAME,\n  );\n  const inputType =\n    rootDeclaration?.kind === \"interface\"\n      ? extractPropertyType(rootDeclaration.body, TOOL_INPUT_PROPERTY_NAME)\n      : null;\n  const outputType =\n    rootDeclaration?.kind === \"interface\"\n      ? extractPropertyType(rootDeclaration.body, TOOL_OUTPUT_PROPERTY_NAME)\n      : null;\n  const definitions = getDefinitionsFromDeclarations(declarations);\n\n  return {\n    ...(inputType ? { inputTypeScript: compactTypeScript(inputType) } : {}),\n    ...(outputType ? { outputTypeScript: compactTypeScript(outputType) } : {}),\n    ...(Object.keys(definitions).length > 0 ? { typeScriptDefinitions: definitions } : {}),\n  };\n};\n\nconst compileSchemaPreview = async (\n  schema: unknown,\n  defs: ReadonlyMap<string, unknown>,\n  options: TypeScriptRenderOptions,\n): Promise<TypeScriptSchemaPreview> => {\n  const wrappedSchema = buildWrappedSchema(schema, defs);\n  const source = compile(wrappedSchema, ROOT_WRAPPER_NAME, compilerOptionsFrom(options));\n  return previewFromCompiledTypeScript(source);\n};\n\nexport const schemaToTypeScriptPreview = (\n  schema: unknown,\n  options: TypeScriptRenderOptions = {},\n): Promise<TypeScriptSchemaPreview> => {\n  const localDefs = new Map<string, unknown>(\n    Object.entries(hoistDefinitions(asCompilerSchema(schema)).defs),\n  );\n  return schemaToTypeScriptPreviewWithDefs(schema, localDefs, options);\n};\n\nexport const schemaToTypeScriptPreviewWithDefs = (\n  schema: unknown,\n  defs: ReadonlyMap<string, unknown>,\n  options: TypeScriptRenderOptions = {},\n): Promise<TypeScriptSchemaPreview> =>\n  compileSchemaPreview(schema, defs, options).then(\n    (preview) => preview,\n    () => ({\n      type: \"unknown\",\n      definitions: {},\n    }),\n  );\n\nexport type ToolTypeScriptPreview = {\n  inputTypeScript?: string;\n  outputTypeScript?: string;\n  typeScriptDefinitions?: Record<string, string>;\n};\n\nexport const buildToolTypeScriptPreview = async (input: {\n  inputSchema?: unknown;\n  outputSchema?: unknown;\n  defs: ReadonlyMap<string, unknown>;\n  options?: TypeScriptRenderOptions;\n}): Promise<ToolTypeScriptPreview> => {\n  const properties: Array<readonly [string, unknown]> = [];\n  if (input.inputSchema !== undefined) {\n    properties.push([TOOL_INPUT_PROPERTY_NAME, input.inputSchema]);\n  }\n  if (input.outputSchema !== undefined) {\n    properties.push([TOOL_OUTPUT_PROPERTY_NAME, input.outputSchema]);\n  }\n  if (properties.length === 0) {\n    return {};\n  }\n\n  const wrappedSchema = buildWrappedObjectSchema(properties, input.defs);\n  return Promise.resolve()\n    .then(() => compile(wrappedSchema, ROOT_WRAPPER_NAME, compilerOptionsFrom(input.options ?? {})))\n    .then(\n      (source) => previewToolFromCompiledTypeScript(source),\n      () => ({\n        ...(input.inputSchema !== undefined ? { inputTypeScript: \"unknown\" } : {}),\n        ...(input.outputSchema !== undefined ? { outputTypeScript: \"unknown\" } : {}),\n      }),\n    );\n};\n","import { Effect, Layer, Schema } from \"effect\";\nimport { FetchHttpClient, HttpClient } from \"effect/unstable/http\";\n\nexport class HostedOutboundRequestBlocked extends Schema.TaggedErrorClass<HostedOutboundRequestBlocked>()(\n  \"HostedOutboundRequestBlocked\",\n  {\n    url: Schema.String,\n    reason: Schema.String,\n  },\n) {}\n\nexport interface HostedHttpClientOptions {\n  readonly allowLocalNetwork?: boolean;\n  readonly maxRedirects?: number;\n  readonly fetch?: typeof globalThis.fetch;\n}\n\nconst parseIpv4 = (hostname: string): readonly [number, number, number, number] | null => {\n  const parts = hostname.split(\".\");\n  if (parts.length !== 4) return null;\n  const parsed: number[] = [];\n  for (const part of parts) {\n    if (!/^\\d+$/.test(part)) return null;\n    const value = Number(part);\n    if (!Number.isInteger(value) || value < 0 || value > 255) return null;\n    parsed.push(value);\n  }\n  return parsed as [number, number, number, number];\n};\n\nconst parseIpv4MappedIpv6 = (\n  hostname: string,\n): readonly [number, number, number, number] | null => {\n  const prefix = \"::ffff:\";\n  if (!hostname.startsWith(prefix)) return null;\n  const embedded = hostname.slice(prefix.length);\n  const dotted = parseIpv4(embedded);\n  if (dotted) return dotted;\n\n  const parts = embedded.split(\":\");\n  if (parts.length !== 2) return null;\n\n  const words = parts.map((part) => Number.parseInt(part, 16));\n  if (\n    words.some(\n      (word, index) =>\n        parts[index] === \"\" ||\n        !/^[0-9a-f]+$/i.test(parts[index]) ||\n        !Number.isInteger(word) ||\n        word < 0 ||\n        word > 0xffff,\n    )\n  ) {\n    return null;\n  }\n\n  const [high, low] = words;\n  return [high >> 8, high & 0xff, low >> 8, low & 0xff];\n};\n\nconst isPrivateIpv4 = ([a, b]: readonly [number, number, number, number]): boolean =>\n  a === 0 ||\n  a === 10 ||\n  a === 127 ||\n  (a === 169 && b === 254) ||\n  (a === 172 && b >= 16 && b <= 31) ||\n  (a === 192 && b === 168);\n\nconst isBlockedMetadataHostname = (hostname: string): boolean => {\n  const normalized = hostname.toLowerCase();\n  return (\n    normalized === \"metadata.google.internal\" ||\n    normalized === \"metadata\" ||\n    normalized === \"instance-data\" ||\n    normalized === \"169.254.169.254\"\n  );\n};\n\nconst isLocalOrPrivateHostname = (hostname: string): boolean => {\n  const normalized = hostname.toLowerCase().replace(/^\\[|\\]$/g, \"\");\n  if (normalized === \"localhost\" || normalized.endsWith(\".localhost\")) return true;\n  const ipv4 = parseIpv4(normalized);\n  if (ipv4) return isPrivateIpv4(ipv4);\n  const mappedIpv4 = parseIpv4MappedIpv6(normalized);\n  if (mappedIpv4) return isPrivateIpv4(mappedIpv4);\n  return (\n    normalized === \"::1\" ||\n    normalized.startsWith(\"fe80:\") ||\n    normalized.startsWith(\"fc\") ||\n    normalized.startsWith(\"fd\")\n  );\n};\n\nexport const validateHostedOutboundUrl = (\n  value: string,\n  options: HostedHttpClientOptions = {},\n): Effect.Effect<void, HostedOutboundRequestBlocked> =>\n  Effect.gen(function* () {\n    const url = yield* Effect.try({\n      try: () => new URL(value),\n      catch: () =>\n        new HostedOutboundRequestBlocked({\n          url: value,\n          reason: \"URL is invalid\",\n        }),\n    });\n\n    if (url.protocol !== \"http:\" && url.protocol !== \"https:\") {\n      return yield* new HostedOutboundRequestBlocked({\n        url: value,\n        reason: \"Only HTTP and HTTPS outbound requests are allowed\",\n      });\n    }\n\n    if (isBlockedMetadataHostname(url.hostname)) {\n      return yield* new HostedOutboundRequestBlocked({\n        url: value,\n        reason: \"Metadata service addresses are not allowed\",\n      });\n    }\n\n    if (!options.allowLocalNetwork && isLocalOrPrivateHostname(url.hostname)) {\n      return yield* new HostedOutboundRequestBlocked({\n        url: value,\n        reason: \"Local and private network addresses are not allowed\",\n      });\n    }\n  });\n\nconst guardFetch = (\n  underlying: typeof globalThis.fetch,\n  options: HostedHttpClientOptions,\n): typeof globalThis.fetch =>\n  (async (input, init) => {\n    const maxRedirects = options.maxRedirects ?? 10;\n    let current: Parameters<typeof globalThis.fetch>[0] | URL = input;\n    for (let redirects = 0; redirects <= maxRedirects; redirects++) {\n      const url = current instanceof Request ? current.url : String(current);\n      Effect.runSync(validateHostedOutboundUrl(url, options));\n      const response = await underlying(current, { ...init, redirect: \"manual\" });\n      if (\n        response.status >= 300 &&\n        response.status < 400 &&\n        response.headers.has(\"location\") &&\n        redirects < maxRedirects\n      ) {\n        const next = new URL(response.headers.get(\"location\")!, url);\n        if (next.origin !== new URL(url).origin) {\n          // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: fetch-compatible adapter must reject blocked requests\n          throw new HostedOutboundRequestBlocked({\n            url: next.toString(),\n            reason: \"Cross-origin redirects are not allowed\",\n          });\n        }\n        current = next.toString();\n        continue;\n      }\n      return response;\n    }\n    return await underlying(current, { ...init, redirect: \"manual\" });\n  }) as typeof globalThis.fetch;\n\nexport const makeHostedHttpClientLayer = (\n  options: HostedHttpClientOptions = {},\n): Layer.Layer<HttpClient.HttpClient> =>\n  FetchHttpClient.layer.pipe(\n    Layer.provide(\n      options.fetch\n        ? Layer.succeed(FetchHttpClient.Fetch)(guardFetch(options.fetch, options))\n        : Layer.effect(\n            FetchHttpClient.Fetch,\n            Effect.map(Effect.service(FetchHttpClient.Fetch), (underlying) =>\n              guardFetch(underlying, options),\n            ),\n          ),\n    ),\n  );\n","import {\n  Deferred,\n  Duration,\n  Effect,\n  Layer,\n  Match,\n  Option,\n  Predicate,\n  Result,\n  Schema,\n  Semaphore,\n} from \"effect\";\nimport { FetchHttpClient, type HttpClient } from \"effect/unstable/http\";\nimport { fumadb } from \"fumadb\";\nimport { memoryAdapter } from \"fumadb/adapters/memory\";\nimport { withQueryContext, type Condition, type ConditionBuilder } from \"fumadb/query\";\nimport { schema as fumaSchema, type RelationsMap } from \"fumadb/schema\";\nimport type { AnyColumn } from \"fumadb/schema\";\nimport type { OAuthEndpointUrlPolicy } from \"./oauth-helpers\";\nimport { generateKeyBetween } from \"fractional-indexing\";\nimport {\n  StorageError,\n  isStorageFailure,\n  makeFumaClient,\n  type FumaDb,\n  type FumaRow,\n  type FumaTables,\n  type StorageFailure,\n} from \"./fuma-runtime\";\n\nimport { makeFumaBlobStore, pluginBlobStore } from \"./blob\";\nimport { coreToolsPlugin } from \"./core-tools\";\nimport {\n  ConnectionProviderState,\n  ConnectionRef,\n  ConnectionRefreshError,\n  type ConnectionProvider,\n  type ConnectionRefreshResult,\n  type CreateConnectionInput,\n  type RemoveConnectionInput,\n  type UpdateConnectionTokensInput,\n} from \"./connections\";\nimport {\n  credentialBindingId,\n  credentialBindingRowToRef,\n  type CredentialBindingRef,\n  type CredentialBindingsFacade,\n  type CredentialBindingSlotInput,\n  type CredentialBindingSourceInput,\n  type RemoveCredentialBindingInput,\n  type RemoveSourceCredentialBindingInput,\n  type ReplaceCredentialBindingsInput,\n  type ReplaceSourceCredentialBindingsInput,\n  ResolvedCredentialSlot,\n  type SetPluginCredentialBindingInput,\n  type SetSourceCredentialBindingInput,\n  type SourceCredentialBindingSlotInput,\n  type SourceCredentialBindingSourceInput,\n} from \"./credential-bindings\";\nimport {\n  coreSchema,\n  isToolPolicyAction,\n  type ConnectionRow,\n  type CredentialBindingRow,\n  type CoreSchema,\n  type DefinitionsInput,\n  type SecretRow,\n  type SourceInput,\n  type SourceRow,\n  type ToolAnnotations,\n  type ToolPolicyRow,\n  type ToolRow,\n} from \"./core-schema\";\nimport {\n  ElicitationDeclinedError,\n  ElicitationResponse,\n  FormElicitation,\n  type ElicitationHandler,\n  type ElicitationRequest,\n} from \"./elicitation\";\nimport {\n  ConnectionInUseError,\n  ConnectionNotFoundError,\n  ConnectionProviderNotRegisteredError,\n  ConnectionReauthRequiredError,\n  ConnectionRefreshNotSupportedError,\n  NoHandlerError,\n  PluginNotLoadedError,\n  SecretInUseError,\n  SecretOwnedByConnectionError,\n  SourceRemovalNotAllowedError,\n  ToolBlockedError,\n  ToolInvocationError,\n  ToolNotFoundError,\n} from \"./errors\";\nimport { ConnectionId, ScopeId, SecretId, ToolId } from \"./ids\";\nimport { makeOAuth2Service } from \"./oauth-service\";\nimport type { OAuthService } from \"./oauth\";\nimport {\n  comparePolicyRow,\n  isValidPattern,\n  resolveToolPolicy,\n  rowToToolPolicy,\n  type CreateToolPolicyInput,\n  type PolicyMatch,\n  type RemoveToolPolicyInput,\n  type ToolPolicy,\n  type UpdateToolPolicyInput,\n} from \"./policies\";\nimport type {\n  AnyPlugin,\n  Elicit,\n  PluginCtx,\n  PluginExtensions,\n  SourceConfigureSchema,\n  StaticSourceDecl,\n  StaticToolDecl,\n  StaticToolSchema,\n  StorageDeps,\n} from \"./plugin\";\nimport {\n  pluginStorageId,\n  type PluginStorageEntry,\n  type PluginStorageFacade,\n} from \"./plugin-storage\";\nimport type { Scope } from \"./scope\";\nimport { RemoveSecretInput, SecretRef, SetSecretInput, type SecretProvider } from \"./secrets\";\nimport { Usage } from \"./usages\";\nimport {\n  ToolSchema,\n  type RefreshSourceInput,\n  type RemoveSourceInput,\n  type Source,\n  type SourceDetectionResult,\n  type Tool,\n  type ToolListFilter,\n} from \"./types\";\nimport { buildToolTypeScriptPreview, type ToolTypeScriptPreview } from \"./schema-types\";\nimport { collectReferencedDefinitions } from \"./schema-refs\";\nimport { assertExecutorScopePolicyTable, type ExecutorScopePolicyContext } from \"./scope-policy\";\nimport { validateHostedOutboundUrl } from \"./hosted-http-client\";\n\nconst MAX_ANNOTATION_GROUPS = 64;\nconst MAX_APPROVAL_ARGUMENT_PREVIEW_CHARS = 4_000;\n\n// ---------------------------------------------------------------------------\n// Elicitation handler — set once at `createExecutor({ onElicitation })`\n// and threaded into every tool invocation. A tool that requests user\n// input mid-execution suspends the fiber and the handler decides how to\n// respond. Tools that never elicit simply don't trigger the handler.\n//\n// The \"accept-all\" sentinel is convenient for tests and CLI automation —\n// every elicitation request gets auto-accepted with an empty content\n// payload. For real interactive hosts, pass a real handler.\n//\n// Required at the executor level rather than per-invoke, so the\n// \"what if a caller forgot to pass a handler\" branch is structurally\n// impossible. Higher layers that need per-invocation handler control\n// (an MCP server bridging different per-client handlers, the execution\n// engine threading agent-loop callbacks) can pass an override via\n// `tools.invoke(id, args, { onElicitation })` — the executor-level\n// handler is the fallback, never null.\n// ---------------------------------------------------------------------------\n\nexport type OnElicitation = ElicitationHandler | \"accept-all\";\n\nexport interface InvokeOptions {\n  /** Override the executor-level handler for this single call. */\n  readonly onElicitation?: OnElicitation;\n}\n\nconst acceptAllHandler: ElicitationHandler = () =>\n  Effect.succeed(ElicitationResponse.make({ action: \"accept\" }));\n\nconst resolveElicitationHandler = (onElicitation: OnElicitation): ElicitationHandler =>\n  onElicitation === \"accept-all\" ? acceptAllHandler : onElicitation;\n\n// ---------------------------------------------------------------------------\n// Executor — public surface. Every list/invoke/schema call is a direct\n// core-table query (for dynamic rows) unioned with the in-memory static\n// pool. No ToolRegistry, no SourceRegistry, no SecretStore services.\n// ---------------------------------------------------------------------------\n\nexport type Executor<TPlugins extends readonly AnyPlugin[] = readonly []> = {\n  /**\n   * Precedence-ordered scope stack this executor was configured with.\n   * Innermost first. Consumers that need \"the display scope\" typically\n   * pick `scopes.at(-1)` (outermost, e.g. the organization) or\n   * `scopes[0]` (innermost, e.g. the current user-in-org) depending on\n   * what they're rendering.\n   */\n  readonly scopes: readonly Scope[];\n\n  readonly tools: {\n    readonly list: (filter?: ToolListFilter) => Effect.Effect<readonly Tool[], StorageFailure>;\n    /** Fetch a tool's schema view: JSON schemas with `$defs`\n     *  attached from the core `definition` table, plus TypeScript\n     *  preview strings. Returns `null` for unknown tool ids. */\n    readonly schema: (toolId: string) => Effect.Effect<ToolSchema | null, StorageFailure>;\n    /** Every `$defs` entry across every source, grouped by source id.\n     *  Used for bulk schema export and downstream TypeScript rendering. */\n    readonly definitions: () => Effect.Effect<\n      Record<string, Record<string, unknown>>,\n      StorageFailure\n    >;\n    readonly invoke: (\n      toolId: string,\n      args: unknown,\n      options?: InvokeOptions,\n    ) => Effect.Effect<\n      unknown,\n      | ToolNotFoundError\n      | ToolBlockedError\n      | PluginNotLoadedError\n      | NoHandlerError\n      | ToolInvocationError\n      | ElicitationDeclinedError\n      | StorageFailure\n    >;\n  };\n\n  readonly sources: {\n    readonly list: () => Effect.Effect<readonly Source[], StorageFailure>;\n    readonly remove: (\n      input: RemoveSourceInput,\n    ) => Effect.Effect<void, SourceRemovalNotAllowedError | StorageFailure>;\n    readonly refresh: (input: RefreshSourceInput) => Effect.Effect<void, StorageFailure>;\n    /** URL autodetection — fans out to every plugin's `detect` hook\n     *  (if declared), returns every high/medium/low-confidence match.\n     *  UI picks a winner from the list. */\n    readonly detect: (\n      url: string,\n    ) => Effect.Effect<readonly SourceDetectionResult[], StorageFailure>;\n    /** All `$defs` registered for a single source, keyed by def name. */\n    readonly definitions: (\n      sourceId: string,\n    ) => Effect.Effect<Record<string, unknown>, StorageFailure>;\n    readonly configure: (input: {\n      readonly source: {\n        readonly id: string;\n        readonly scope: ScopeId | string;\n      };\n      readonly scope: ScopeId | string;\n      readonly type?: string;\n      readonly config: unknown;\n    }) => Effect.Effect<unknown, StorageFailure>;\n    readonly listBindings: (\n      input: SourceCredentialBindingSourceInput,\n    ) => Effect.Effect<readonly CredentialBindingRef[], StorageFailure>;\n    readonly resolveBinding: (\n      input: SourceCredentialBindingSlotInput,\n    ) => Effect.Effect<CredentialBindingRef | null, StorageFailure>;\n    readonly setBinding: (\n      input: SetSourceCredentialBindingInput,\n    ) => Effect.Effect<CredentialBindingRef, StorageFailure>;\n    readonly removeBinding: (\n      input: RemoveSourceCredentialBindingInput,\n    ) => Effect.Effect<void, StorageFailure>;\n    readonly replaceBindings: (\n      input: ReplaceSourceCredentialBindingsInput,\n    ) => Effect.Effect<readonly CredentialBindingRef[], StorageFailure>;\n  };\n\n  readonly secrets: {\n    readonly get: (\n      id: string,\n    ) => Effect.Effect<string | null, SecretOwnedByConnectionError | StorageFailure>;\n    readonly getAtScope: (\n      id: string,\n      scope: string,\n    ) => Effect.Effect<string | null, SecretOwnedByConnectionError | StorageFailure>;\n    /** Fast-path existence check — hits the core `secret` routing table\n     *  only, never calls the provider. Use this for UI state (\"secret\n     *  missing, prompt to add\") to avoid keychain permission prompts\n     *  or 1password IPC roundtrips on a pre-flight check. */\n    readonly status: (id: string) => Effect.Effect<\"resolved\" | \"missing\", StorageFailure>;\n    readonly set: (input: SetSecretInput) => Effect.Effect<SecretRef, StorageFailure>;\n    /** Delete a bare (non-connection-owned) secret. Connection-owned\n     *  secrets are rejected with `SecretOwnedByConnectionError` — use\n     *  `connections.remove` instead. Refuses with `SecretInUseError`\n     *  if any plugin reports the secret as in use; the caller should\n     *  show the `usages(id)` list and ask the user to detach first. */\n    readonly remove: (\n      input: RemoveSecretInput,\n    ) => Effect.Effect<void, SecretOwnedByConnectionError | SecretInUseError | StorageFailure>;\n    readonly list: () => Effect.Effect<readonly SecretRef[], StorageFailure>;\n    /** Management view of visible secret rows. Unlike `list`, this does\n     *  not collapse same-id rows across scopes, so UI that writes exact\n     *  credential targets can show both personal and shared rows. */\n    readonly listAll: () => Effect.Effect<readonly SecretRef[], StorageFailure>;\n    /** All places this secret is referenced — fans out across every\n     *  plugin's `usagesForSecret`. Used by the Secrets-tab \"Used by\"\n     *  list and by `remove` for its RESTRICT check. */\n    readonly usages: (id: string) => Effect.Effect<readonly Usage[], StorageFailure>;\n    readonly providers: () => Effect.Effect<readonly string[]>;\n  };\n\n  readonly connections: {\n    readonly get: (id: string) => Effect.Effect<ConnectionRef | null, StorageFailure>;\n    readonly getAtScope: (\n      id: string,\n      scope: string,\n    ) => Effect.Effect<ConnectionRef | null, StorageFailure>;\n    readonly list: () => Effect.Effect<readonly ConnectionRef[], StorageFailure>;\n    readonly create: (\n      input: CreateConnectionInput,\n    ) => Effect.Effect<ConnectionRef, ConnectionProviderNotRegisteredError | StorageFailure>;\n    readonly updateTokens: (\n      input: UpdateConnectionTokensInput,\n    ) => Effect.Effect<ConnectionRef, ConnectionNotFoundError | StorageFailure>;\n    readonly setIdentityLabel: (\n      id: string,\n      label: string | null,\n    ) => Effect.Effect<void, ConnectionNotFoundError | StorageFailure>;\n    readonly accessToken: (\n      id: string,\n    ) => Effect.Effect<\n      string,\n      | ConnectionNotFoundError\n      | ConnectionProviderNotRegisteredError\n      | ConnectionRefreshNotSupportedError\n      | ConnectionReauthRequiredError\n      | ConnectionRefreshError\n      | StorageFailure\n    >;\n    readonly accessTokenAtScope: (\n      id: string,\n      scope: string,\n    ) => Effect.Effect<\n      string,\n      | ConnectionNotFoundError\n      | ConnectionProviderNotRegisteredError\n      | ConnectionRefreshNotSupportedError\n      | ConnectionReauthRequiredError\n      | ConnectionRefreshError\n      | StorageFailure\n    >;\n    /** Refuses with `ConnectionInUseError` if any plugin reports the\n     *  connection as in use. */\n    readonly remove: (\n      input: RemoveConnectionInput,\n    ) => Effect.Effect<void, ConnectionInUseError | StorageFailure>;\n    /** All places this connection is referenced — fans out across every\n     *  plugin's `usagesForConnection`. */\n    readonly usages: (id: string) => Effect.Effect<readonly Usage[], StorageFailure>;\n    readonly providers: () => Effect.Effect<readonly string[]>;\n  };\n\n  /** Shared credential slot bindings. Plugins decide what slot keys mean;\n   *  core owns scoped storage, resolution status, and usage visibility. */\n  readonly credentialBindings: CredentialBindingsFacade;\n\n  /** Shared OAuth service. Hosts use this through the core HTTP OAuth group;\n   *  plugins see the same service as `ctx.oauth`. */\n  readonly oauth: OAuthService;\n\n  readonly policies: {\n    /** All policies visible across the executor's scope stack, sorted\n     *  by (innermost-scope-first, position ascending) — i.e. the order\n     *  in which they're evaluated by first-match-wins. */\n    readonly list: () => Effect.Effect<readonly ToolPolicy[], StorageFailure>;\n    /** Create a new policy. Defaults to the top of the target scope's\n     *  list (highest precedence) when `position` is omitted. */\n    readonly create: (input: CreateToolPolicyInput) => Effect.Effect<ToolPolicy, StorageFailure>;\n    readonly update: (input: UpdateToolPolicyInput) => Effect.Effect<ToolPolicy, StorageFailure>;\n    readonly remove: (input: RemoveToolPolicyInput) => Effect.Effect<void, StorageFailure>;\n    /** Resolve the effective policy for a tool id by walking the scope-\n     *  stacked policy list with first-match-wins semantics. Returns\n     *  `undefined` when no rule matches (caller falls back to the\n     *  plugin's `resolveAnnotations` output). */\n    readonly resolve: (toolId: string) => Effect.Effect<PolicyMatch | undefined, StorageFailure>;\n  };\n\n  readonly close: () => Effect.Effect<void, StorageFailure>;\n} & PluginExtensions<TPlugins>;\n\nexport interface ExecutorDb {\n  readonly db: FumaDb<any>;\n  readonly close?: () => Effect.Effect<void, StorageFailure> | Promise<void> | void;\n}\n\nexport type ExecutorDbInput = FumaDb<any> | ExecutorDb;\n\nexport type ExecutorDbFactory = (config: {\n  readonly tables: FumaTables;\n}) => ExecutorDbInput | Effect.Effect<ExecutorDbInput, StorageFailure>;\n\nexport interface ExecutorConfig<TPlugins extends readonly AnyPlugin[] = readonly []> {\n  /**\n   * Precedence-ordered scope stack. Innermost first; typical shape is\n   * `[userInOrgScope, orgScope]`. Reads on scoped tables walk the\n   * stack (first hit wins for shadow-by-id consumers like secrets and\n   * blobs); writes require callers to name an explicit target scope.\n   * Must be non-empty.\n   */\n  readonly scopes: readonly Scope[];\n  readonly db?: ExecutorDbInput | ExecutorDbFactory;\n  readonly plugins?: TPlugins;\n  /**\n   * How to respond when a tool requests user input mid-invocation. Pass\n   * `\"accept-all\"` for tests / non-interactive hosts, or a handler\n   * `(ctx) => Effect<ElicitationResponse>` for interactive ones.\n   * Required at construction so per-invoke calls don't have to thread\n   * an options arg.\n   */\n  readonly onElicitation: OnElicitation;\n  readonly httpClientLayer?: Layer.Layer<HttpClient.HttpClient>;\n  readonly oauthEndpointUrlPolicy?: OAuthEndpointUrlPolicy;\n  readonly sourceDetection?: {\n    readonly maxUrlLength?: number;\n    readonly maxDetectors?: number;\n    readonly maxResults?: number;\n    readonly timeout?: Duration.Input;\n    readonly hostedOutboundPolicy?: boolean;\n  };\n  /**\n   * Enable the built-in `core-tools` plugin which contributes\n   * agent-facing static tools (`scopes.list`, `secrets.list`,\n   * `secrets.create`). The `webBaseUrl` is where the executor's web\n   * UI lives; `secrets.create` builds a URL elicitation that points\n   * the user at `${webBaseUrl}/secrets?...` so the plaintext value\n   * never crosses the agent.\n   *\n   * Omit to skip registration (tests, MCP-only hosts that don't\n   * surface a web UI, etc.).\n   */\n  readonly coreTools?: {\n    readonly webBaseUrl: string;\n  };\n}\n\n// ---------------------------------------------------------------------------\n// collectTables — merge core tables with every plugin's declared Fuma table.\n// Hosts pass the result to FumaDB when constructing the database client.\n// ---------------------------------------------------------------------------\n\nexport const collectTables = (plugins: readonly AnyPlugin[]): FumaTables => {\n  const merged: FumaTables = { ...coreSchema };\n  for (const plugin of plugins) {\n    if (!plugin.schema) continue;\n    for (const [tableKey, tableDef] of Object.entries(plugin.schema)) {\n      if (merged[tableKey]) {\n        // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: collectTables is a synchronous configuration API\n        throw new StorageError({\n          message:\n            `Duplicate storage table \"${tableKey}\" contributed by plugin \"${plugin.id}\"` +\n            ` (reserved by core or another plugin)`,\n          cause: undefined,\n        });\n      }\n      merged[tableKey] = tableDef as FumaTables[string];\n    }\n  }\n\n  validateExecutorScopePolicyTables(merged);\n\n  return merged;\n};\n\nconst validateExecutorScopePolicyTables = (tables: FumaTables): void => {\n  for (const [tableKey, tableDef] of Object.entries(tables)) {\n    assertExecutorScopePolicyTable(tableDef, tableKey);\n  }\n};\n\nconst validateExecutorDbTables = (required: FumaTables, actual: FumaTables): void => {\n  const missing = Object.keys(required)\n    .filter((tableName) => !actual[tableName])\n    .sort();\n  if (missing.length === 0) return;\n\n  // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: synchronous startup validation before Executor services are built\n  throw new StorageError({\n    message: `Executor database is missing required table definitions: ${missing.join(\", \")}`,\n    cause: {\n      missing,\n      available: Object.keys(actual).sort(),\n    },\n  });\n};\n\nconst storageFailureFromUnknown = (message: string, cause: unknown): StorageFailure =>\n  isStorageFailure(cause) ? cause : new StorageError({ message, cause });\n\nconst pluginStorageFailure = (pluginId: string, hook: string, cause: unknown): StorageFailure =>\n  storageFailureFromUnknown(`${hook} failed for plugin ${pluginId}`, cause);\n\nconst createDefaultMemoryDb = (tables: FumaTables): ExecutorDb => {\n  const version = \"1.0.0\";\n  const latestSchema = fumaSchema<string, FumaTables, RelationsMap<FumaTables>>({\n    version,\n    tables,\n  });\n  const factory = fumadb({\n    namespace: \"executor_memory\",\n    schemas: [latestSchema],\n  });\n\n  // oxlint-disable-next-line executor/no-double-cast -- boundary: dynamic plugin table map is known only after collectTables()\n  const db = factory.client(memoryAdapter()).orm(version) as unknown as FumaDb;\n  return {\n    db,\n  };\n};\n\n// ---------------------------------------------------------------------------\n// Row → public projection conversions\n// ---------------------------------------------------------------------------\n\nconst rowToSource = (row: SourceRow): Source => ({\n  id: row.id,\n  scopeId: row.scope_id,\n  kind: row.kind,\n  name: row.name,\n  url: row.url ?? undefined,\n  pluginId: row.plugin_id,\n  canRemove: Boolean(row.can_remove),\n  canRefresh: Boolean(row.can_refresh),\n  canEdit: Boolean(row.can_edit),\n  runtime: false,\n});\n\nconst staticDeclToSource = (decl: StaticSourceDecl, pluginId: string): Source => ({\n  id: decl.id,\n  scopeId: undefined,\n  kind: decl.kind,\n  name: decl.name,\n  url: decl.url,\n  pluginId,\n  canRemove: decl.canRemove ?? false,\n  canRefresh: decl.canRefresh ?? false,\n  canEdit: decl.canEdit ?? false,\n  runtime: true,\n});\n\nconst decodeJsonFromString = Schema.decodeUnknownOption(Schema.UnknownFromJsonString);\n\nconst decodeJsonColumn = (value: unknown): unknown => {\n  if (value === null || value === undefined) return undefined;\n  if (typeof value !== \"string\") return value;\n  return decodeJsonFromString(value).pipe(Option.getOrElse(() => value));\n};\n\nconst decodeProviderState = Schema.decodeUnknownOption(ConnectionProviderState);\n\nconst rowToTool = (row: ToolRow, annotations?: ToolAnnotations): Tool => ({\n  id: row.id,\n  sourceId: row.source_id,\n  pluginId: row.plugin_id,\n  name: row.name,\n  description: row.description,\n  inputSchema: decodeJsonColumn(row.input_schema),\n  outputSchema: decodeJsonColumn(row.output_schema),\n  annotations,\n});\n\nconst staticDeclToTool = (\n  source: StaticSourceDecl,\n  tool: StaticToolDecl,\n  pluginId: string,\n): Tool => ({\n  id: `${source.id}.${tool.name}`,\n  sourceId: source.id,\n  pluginId,\n  name: tool.name,\n  description: tool.description,\n  inputSchema: toToolJsonSchema(tool.inputSchema),\n  outputSchema: toToolJsonSchema(tool.outputSchema, \"output\"),\n  annotations: tool.annotations,\n});\n\nconst toToolJsonSchema = (\n  schema: StaticToolSchema | undefined,\n  direction: \"input\" | \"output\" = \"input\",\n): unknown => {\n  if (schema == null) return undefined;\n  return schema[\"~standard\"].jsonSchema[direction]({\n    target: \"draft-2020-12\",\n  });\n};\n\nconst toConfigureJsonSchema = (\n  schema: StaticToolSchema | Schema.Decoder<unknown, never> | undefined,\n): unknown => {\n  if (schema == null) return undefined;\n  const standard = schema as {\n    readonly \"~standard\"?: {\n      readonly validate?: unknown;\n      readonly jsonSchema?: StaticToolSchema[\"~standard\"][\"jsonSchema\"];\n    };\n  };\n  if (typeof standard[\"~standard\"]?.validate !== \"function\") {\n    const jsonSchema = Schema.toStandardSchemaV1(\n      Schema.toStandardJSONSchemaV1(schema as Schema.Decoder<unknown, never>) as never,\n    ) as StaticToolSchema;\n    return toToolJsonSchema(jsonSchema);\n  }\n  return standard[\"~standard\"].jsonSchema?.input({\n    target: \"draft-2020-12\",\n  });\n};\n\nconst decodeConfigureInput = (\n  schema: StaticToolSchema | Schema.Decoder<unknown, never> | undefined,\n  input: unknown,\n): Effect.Effect<unknown, unknown> => {\n  if (schema == null) return Effect.succeed(input);\n  const standard = schema as {\n    readonly \"~standard\"?: { readonly validate?: unknown };\n  };\n  if (standard[\"~standard\"] === undefined || typeof standard[\"~standard\"].validate !== \"function\") {\n    return Schema.decodeUnknownEffect(schema as Schema.Decoder<unknown, never>)(input);\n  }\n  return Effect.promise(() =>\n    Promise.resolve((standard[\"~standard\"]!.validate as (input: unknown) => unknown)(input)),\n  ).pipe(\n    Effect.flatMap((result) => {\n      const validationResult = result as { readonly value?: unknown };\n      return \"value\" in validationResult\n        ? Effect.succeed(validationResult.value)\n        : Effect.fail(result);\n    }),\n  );\n};\n\nconst sourceConfigureSchemaView = (\n  pluginId: string,\n  configure: NonNullable<AnyPlugin[\"sourceConfigure\"]>,\n): SourceConfigureSchema => ({\n  pluginId,\n  type: configure.type,\n  schema: toConfigureJsonSchema(configure.schema),\n});\n\nconst EXECUTOR_SOURCE_ID = \"executor\";\nconst EXECUTOR_SOURCE: StaticSourceDecl = {\n  id: EXECUTOR_SOURCE_ID,\n  kind: \"built-in\",\n  name: \"Executor\",\n  canRemove: false,\n  canRefresh: false,\n  canEdit: false,\n  tools: [],\n};\n\nconst scopeFilter =\n  (scopes: readonly string[]) =>\n  (b: ConditionBuilder<Record<string, AnyColumn>>): Condition =>\n    scopes.length === 1 ? b(\"scope_id\", \"=\", scopes[0]!) : b(\"scope_id\", \"in\", [...scopes]);\n\nconst scopedWhere =\n  (\n    scopes: readonly string[],\n    where?: (b: ConditionBuilder<Record<string, AnyColumn>>) => Condition | boolean,\n  ) =>\n  (b: ConditionBuilder<Record<string, AnyColumn>>): Condition | boolean =>\n    b.and(scopeFilter(scopes)(b), where ? where(b) : true);\n\nconst byId =\n  (id: string) =>\n  (b: ConditionBuilder<Record<string, AnyColumn>>): Condition =>\n    b(\"id\", \"=\", id);\n\nconst byScopedId =\n  (scope: string, id: string) =>\n  (b: ConditionBuilder<Record<string, AnyColumn>>): Condition =>\n    b.and(b(\"scope_id\", \"=\", scope), b(\"id\", \"=\", id)) as Condition;\n\nconst toolSourceId = (toolId: string): string | null => {\n  const dot = toolId.indexOf(\".\");\n  return dot === -1 ? null : toolId.slice(0, dot);\n};\n\nconst levenshteinDistance = (left: string, right: string): number => {\n  const previous = Array.from({ length: right.length + 1 }, (_, index) => index);\n  const current = Array.from({ length: right.length + 1 }, () => 0);\n  for (let i = 0; i < left.length; i++) {\n    current[0] = i + 1;\n    for (let j = 0; j < right.length; j++) {\n      current[j + 1] =\n        left[i] === right[j]\n          ? previous[j]!\n          : Math.min(previous[j]!, previous[j + 1]!, current[j]!) + 1;\n    }\n    for (let j = 0; j < previous.length; j++) previous[j] = current[j]!;\n  }\n  return previous[right.length]!;\n};\n\nconst missingToolSuggestionScore = (query: string, candidate: string): number => {\n  const normalizedQuery = query.toLowerCase();\n  const normalizedCandidate = candidate.toLowerCase();\n  if (normalizedCandidate === normalizedQuery) return 0;\n  if (normalizedCandidate.startsWith(normalizedQuery)) return 1;\n  if (normalizedQuery.startsWith(normalizedCandidate)) return 2;\n  if (normalizedCandidate.includes(normalizedQuery)) return 3;\n  const queryLeaf = normalizedQuery.split(\".\").at(-1) ?? normalizedQuery;\n  const candidateLeaf = normalizedCandidate.split(\".\").at(-1) ?? normalizedCandidate;\n  if (candidateLeaf.startsWith(queryLeaf) || queryLeaf.startsWith(candidateLeaf)) return 4;\n  return 10 + levenshteinDistance(normalizedQuery, normalizedCandidate);\n};\n\nconst missingToolSuggestions = (\n  toolId: string,\n  rows: readonly { readonly id: string }[],\n): readonly ToolId[] =>\n  rows\n    .map((row) => ({ id: row.id, score: missingToolSuggestionScore(toolId, row.id) }))\n    .sort((left, right) => left.score - right.score || left.id.localeCompare(right.id))\n    .slice(0, 5)\n    .map((item) => ToolId.make(item.id));\n\ntype CoreTableName = keyof CoreSchema & string;\ntype CoreRow<TName extends CoreTableName> = FumaRow<CoreSchema[TName]>;\ntype CoreWhere<_TName extends CoreTableName> = (\n  b: ConditionBuilder<Record<string, AnyColumn>>,\n) => Condition | boolean;\ntype CoreFindManyOptions<TName extends CoreTableName> = {\n  readonly where?: CoreWhere<TName>;\n  readonly limit?: number;\n  readonly offset?: number;\n  readonly orderBy?:\n    | readonly [string, \"asc\" | \"desc\"]\n    | readonly (readonly [string, \"asc\" | \"desc\"])[];\n};\ntype CoreFindFirstOptions<TName extends CoreTableName> = Omit<\n  CoreFindManyOptions<TName>,\n  \"limit\" | \"offset\"\n>;\n\ntype LooseStorageDb = {\n  readonly count: (tableName: string, options?: unknown) => Promise<number>;\n  readonly create: (\n    tableName: string,\n    row: Record<string, unknown>,\n  ) => Promise<Record<string, unknown>>;\n  readonly createMany: (\n    tableName: string,\n    rows: readonly Record<string, unknown>[],\n  ) => Promise<readonly unknown[]>;\n  readonly deleteMany: (tableName: string, options?: unknown) => Promise<void>;\n  readonly findFirst: (\n    tableName: string,\n    options?: unknown,\n  ) => Promise<Record<string, unknown> | null>;\n  readonly findMany: (\n    tableName: string,\n    options?: unknown,\n  ) => Promise<readonly Record<string, unknown>[]>;\n  readonly updateMany: (tableName: string, options: unknown) => Promise<void>;\n};\n\nconst asLooseStorageDb = (db: unknown): LooseStorageDb => db as LooseStorageDb;\n\nconst makeCoreDb = (fuma: ReturnType<typeof makeFumaClient>) => ({\n  count: <TName extends CoreTableName>(\n    tableName: TName,\n    options?: { readonly where?: CoreWhere<TName> },\n  ): Effect.Effect<number, StorageFailure> =>\n    fuma.use(`${tableName}.count`, (db) => asLooseStorageDb(db).count(tableName, options)),\n  create: <TName extends CoreTableName>(\n    tableName: TName,\n    row: Record<string, unknown>,\n  ): Effect.Effect<CoreRow<TName>, StorageFailure> =>\n    fuma.use(`${tableName}.create`, (db) =>\n      asLooseStorageDb(db).create(tableName, row),\n    ) as Effect.Effect<CoreRow<TName>, StorageFailure>,\n  createMany: <TName extends CoreTableName>(\n    tableName: TName,\n    rows: readonly Record<string, unknown>[],\n  ): Effect.Effect<void, StorageFailure> =>\n    rows.length === 0\n      ? Effect.void\n      : fuma\n          .use(`${tableName}.createMany`, (db) => asLooseStorageDb(db).createMany(tableName, rows))\n          .pipe(Effect.asVoid),\n  deleteMany: <TName extends CoreTableName>(\n    tableName: TName,\n    options: { readonly where?: CoreWhere<TName> } = {},\n  ): Effect.Effect<void, StorageFailure> =>\n    fuma.use(`${tableName}.deleteMany`, (db) =>\n      asLooseStorageDb(db).deleteMany(tableName, options),\n    ),\n  findFirst: <TName extends CoreTableName>(\n    tableName: TName,\n    options: CoreFindFirstOptions<TName>,\n  ): Effect.Effect<CoreRow<TName> | null, StorageFailure> =>\n    fuma.use(`${tableName}.findFirst`, (db) =>\n      asLooseStorageDb(db).findFirst(tableName, options),\n    ) as Effect.Effect<CoreRow<TName> | null, StorageFailure>,\n  findMany: <TName extends CoreTableName>(\n    tableName: TName,\n    options: CoreFindManyOptions<TName> = {},\n  ): Effect.Effect<readonly CoreRow<TName>[], StorageFailure> =>\n    fuma.use(`${tableName}.findMany`, (db) =>\n      asLooseStorageDb(db).findMany(tableName, options),\n    ) as Effect.Effect<readonly CoreRow<TName>[], StorageFailure>,\n  updateMany: <TName extends CoreTableName>(\n    tableName: TName,\n    options: {\n      readonly where?: CoreWhere<TName>;\n      readonly set: Record<string, unknown>;\n    },\n  ): Effect.Effect<void, StorageFailure> =>\n    fuma.use(`${tableName}.updateMany`, (db) =>\n      asLooseStorageDb(db).updateMany(tableName, options),\n    ),\n});\n\nconst pluginStorageEntryFromRow = <T>(row: CoreRow<\"plugin_storage\">): PluginStorageEntry<T> => ({\n  id: row.id,\n  scopeId: ScopeId.make(row.scope_id),\n  pluginId: row.plugin_id,\n  collection: row.collection,\n  key: row.key,\n  data: row.data as T,\n  createdAt: row.created_at instanceof Date ? row.created_at : new Date(row.created_at),\n  updatedAt: row.updated_at instanceof Date ? row.updated_at : new Date(row.updated_at),\n});\n\nconst makePluginStorageFacade = (input: {\n  readonly core: ReturnType<typeof makeCoreDb>;\n  readonly pluginId: string;\n  readonly scopeIds: readonly string[];\n}): PluginStorageFacade => {\n  const whereFor = (collection: string, key?: string) =>\n    scopedWhere(input.scopeIds, (b) =>\n      b.and(\n        b(\"plugin_id\", \"=\", input.pluginId),\n        b(\"collection\", \"=\", collection),\n        key === undefined ? true : b(\"key\", \"=\", key),\n      ),\n    );\n\n  const sortByScopePrecedence = (rows: readonly CoreRow<\"plugin_storage\">[]) =>\n    [...rows].sort((left, right) => {\n      const leftIndex = input.scopeIds.indexOf(left.scope_id);\n      const rightIndex = input.scopeIds.indexOf(right.scope_id);\n      return leftIndex - rightIndex || left.key.localeCompare(right.key);\n    });\n\n  const getVisible = <T>(collection: string, key: string) =>\n    input.core\n      .findMany(\"plugin_storage\", { where: whereFor(collection, key) })\n      .pipe(Effect.map((rows) => sortByScopePrecedence(rows)[0] ?? null))\n      .pipe(Effect.map((row) => (row ? pluginStorageEntryFromRow<T>(row) : null)));\n\n  return {\n    get: (storageInput) => getVisible(storageInput.collection, storageInput.key),\n    getAtScope: (storageInput) =>\n      input.core\n        .findFirst(\"plugin_storage\", {\n          where: byScopedId(\n            storageInput.scope,\n            pluginStorageId({\n              pluginId: input.pluginId,\n              collection: storageInput.collection,\n              key: storageInput.key,\n            }),\n          ),\n        })\n        .pipe(Effect.map((row) => (row ? pluginStorageEntryFromRow(row) : null))),\n    list: (storageInput) =>\n      input.core.findMany(\"plugin_storage\", { where: whereFor(storageInput.collection) }).pipe(\n        Effect.map((rows) =>\n          sortByScopePrecedence(rows)\n            .filter((row) =>\n              storageInput.keyPrefix === undefined\n                ? true\n                : row.key.startsWith(storageInput.keyPrefix),\n            )\n            .map((row) => pluginStorageEntryFromRow(row)),\n        ),\n      ),\n    put: (storageInput) =>\n      Effect.gen(function* () {\n        if (!input.scopeIds.includes(storageInput.scope)) {\n          return yield* new StorageError({\n            message: `Unknown plugin storage target scope: ${storageInput.scope}`,\n            cause: undefined,\n          });\n        }\n        const id = pluginStorageId({\n          pluginId: input.pluginId,\n          collection: storageInput.collection,\n          key: storageInput.key,\n        });\n        const existing = yield* input.core.findFirst(\"plugin_storage\", {\n          where: byScopedId(storageInput.scope, id),\n        });\n        const now = new Date();\n        if (existing) {\n          yield* input.core.updateMany(\"plugin_storage\", {\n            where: byScopedId(storageInput.scope, id),\n            set: {\n              data: storageInput.data,\n              updated_at: now,\n            },\n          });\n          return pluginStorageEntryFromRow({\n            ...existing,\n            data: storageInput.data,\n            updated_at: now,\n          });\n        }\n        const row = yield* input.core.create(\"plugin_storage\", {\n          id,\n          scope_id: storageInput.scope,\n          plugin_id: input.pluginId,\n          collection: storageInput.collection,\n          key: storageInput.key,\n          data: storageInput.data,\n          created_at: now,\n          updated_at: now,\n        });\n        return pluginStorageEntryFromRow(row);\n      }),\n    remove: (storageInput) =>\n      input.core.deleteMany(\"plugin_storage\", {\n        where: byScopedId(\n          storageInput.scope,\n          pluginStorageId({\n            pluginId: input.pluginId,\n            collection: storageInput.collection,\n            key: storageInput.key,\n          }),\n        ),\n      }),\n  };\n};\n\n// ---------------------------------------------------------------------------\n// Dynamic-row writers — used by ctx.core.sources.register. Static sources\n// never touch these functions.\n// ---------------------------------------------------------------------------\n\n// Upsert shape: delete any existing source + tools + definitions for\n// `input.id` before creating fresh rows. Keeps replayable — boot-time\n// sync from executor.jsonc can call register() on rows that already\n// exist without tripping a UNIQUE constraint.\nconst writeSourceInput = (\n  core: ReturnType<typeof makeCoreDb>,\n  pluginId: string,\n  input: SourceInput,\n): Effect.Effect<void, StorageFailure> =>\n  Effect.gen(function* () {\n    yield* deleteSourceById(core, input.id, input.scope);\n\n    const now = new Date();\n    yield* core.create(\"source\", {\n      id: input.id,\n      scope_id: input.scope,\n      plugin_id: pluginId,\n      kind: input.kind,\n      name: input.name,\n      url: input.url ?? null,\n      can_remove: input.canRemove ?? true,\n      can_refresh: input.canRefresh ?? false,\n      can_edit: input.canEdit ?? false,\n      created_at: now,\n      updated_at: now,\n    });\n\n    const toolsById = new Map<string, (typeof input.tools)[number]>();\n    for (const tool of input.tools) {\n      toolsById.set(`${input.id}.${tool.name}`, tool);\n    }\n    const tools = [...toolsById.entries()];\n\n    if (tools.length > 0) {\n      yield* core.createMany(\n        \"tool\",\n        tools.map(([id, tool]) => ({\n          id,\n          scope_id: input.scope,\n          source_id: input.id,\n          plugin_id: pluginId,\n          name: tool.name,\n          description: tool.description,\n          input_schema: tool.inputSchema ?? null,\n          output_schema: tool.outputSchema ?? null,\n          created_at: now,\n          updated_at: now,\n        })),\n      );\n    }\n  });\n\n// Delete a source and its tools + definitions at ONE specific scope.\n// The helper pins `scope_id = scopeId` so it never widens into a stack-wide\n// wipe; a bystander scope's rows with a colliding `source_id` must survive.\nconst deleteSourceById = (\n  core: ReturnType<typeof makeCoreDb>,\n  sourceId: string,\n  scopeId: string,\n): Effect.Effect<void, StorageFailure> =>\n  Effect.gen(function* () {\n    yield* core.deleteMany(\"tool\", {\n      where: (b) => b.and(b(\"source_id\", \"=\", sourceId), b(\"scope_id\", \"=\", scopeId)),\n    });\n    yield* core.deleteMany(\"definition\", {\n      where: (b) => b.and(b(\"source_id\", \"=\", sourceId), b(\"scope_id\", \"=\", scopeId)),\n    });\n    yield* core.deleteMany(\"source\", {\n      where: byScopedId(scopeId, sourceId),\n    });\n  });\n\nconst writeDefinitions = (\n  core: ReturnType<typeof makeCoreDb>,\n  pluginId: string,\n  input: DefinitionsInput,\n): Effect.Effect<void, StorageFailure> =>\n  Effect.gen(function* () {\n    // Pin the delete to `input.scope` so an inner-scope writer cannot remove\n    // outer-scope definitions for the same source id.\n    yield* core.deleteMany(\"definition\", {\n      where: (b) => b.and(b(\"source_id\", \"=\", input.sourceId), b(\"scope_id\", \"=\", input.scope)),\n    });\n    const entries = Object.entries(input.definitions);\n    if (entries.length === 0) return;\n    const now = new Date();\n    yield* core.createMany(\n      \"definition\",\n      entries.map(([name, schema]) => ({\n        id: `${input.sourceId}.${name}`,\n        scope_id: input.scope,\n        source_id: input.sourceId,\n        plugin_id: pluginId,\n        name,\n        schema: schema as Record<string, unknown>,\n        created_at: now,\n      })),\n    );\n  });\n\n// ---------------------------------------------------------------------------\n// Filtering — shared between dynamic (DB) and static (in-memory) pools\n// so `tools.list({ query, sourceId })` matches across both.\n// ---------------------------------------------------------------------------\n\nconst toolMatchesFilter = (tool: Tool, filter: ToolListFilter): boolean => {\n  if (filter.sourceId && tool.sourceId !== filter.sourceId) return false;\n  if (filter.query) {\n    const q = filter.query.toLowerCase();\n    const hay = `${tool.name} ${tool.description}`.toLowerCase();\n    if (!hay.includes(q)) return false;\n  }\n  return true;\n};\n\nconst approvalArgumentPreview = (args: unknown): string => {\n  const text = JSON.stringify(args ?? {}, null, 2) ?? \"null\";\n  return text.length > MAX_APPROVAL_ARGUMENT_PREVIEW_CHARS\n    ? `${text.slice(0, MAX_APPROVAL_ARGUMENT_PREVIEW_CHARS)}...`\n    : text;\n};\n\n// ---------------------------------------------------------------------------\n// createExecutor\n// ---------------------------------------------------------------------------\n\ninterface StaticTools {\n  readonly source: StaticSourceDecl;\n  readonly tool: StaticToolDecl;\n  readonly pluginId: string;\n  readonly ctx: PluginCtx<unknown>;\n}\n\ninterface StaticSources {\n  readonly source: StaticSourceDecl;\n  readonly pluginId: string;\n}\n\ninterface PluginRuntime {\n  readonly plugin: AnyPlugin;\n  readonly storage: unknown;\n  readonly ctx: PluginCtx<unknown>;\n}\n\nexport const createExecutor = <const TPlugins extends readonly AnyPlugin[] = readonly []>(\n  config: ExecutorConfig<TPlugins>,\n): Effect.Effect<Executor<TPlugins>, StorageFailure> =>\n  Effect.gen(function* () {\n    const defaultPlugins = (): TPlugins => {\n      const empty: readonly AnyPlugin[] = [];\n      return empty as TPlugins;\n    };\n    const { scopes, plugins: userPlugins = defaultPlugins() } = config;\n\n    if (scopes.length === 0) {\n      return yield* new StorageError({\n        message: \"createExecutor requires a non-empty scopes array\",\n        cause: undefined,\n      });\n    }\n\n    // Built-in core-tools plugin: contributes scopes.list / secrets.list /\n    // secrets.create static tools so agents can manage executor primitives\n    // without the host wiring it explicitly. Opt-in via `coreTools` config.\n    const plugins: readonly AnyPlugin[] = config.coreTools\n      ? ([\n          coreToolsPlugin({ webBaseUrl: config.coreTools.webBaseUrl }),\n          ...userPlugins,\n        ] as readonly AnyPlugin[])\n      : (userPlugins as readonly AnyPlugin[]);\n\n    const tables = yield* Effect.try({\n      try: () => collectTables(plugins),\n      catch: (cause) => storageFailureFromUnknown(\"Failed to collect executor tables\", cause),\n    });\n    const dbInput = yield* Effect.suspend(() => {\n      if (!config.db) return Effect.succeed(createDefaultMemoryDb(tables));\n      if (typeof config.db !== \"function\") return Effect.succeed(config.db);\n      const out = config.db({ tables });\n      return Effect.isEffect(out) ? out : Effect.succeed(out);\n    });\n    const rootDbUntyped = \"db\" in dbInput ? dbInput.db : dbInput;\n    const closeDb = \"db\" in dbInput ? dbInput.close : undefined;\n    yield* Effect.try({\n      try: () => {\n        validateExecutorDbTables(tables, rootDbUntyped.internal.tables);\n        validateExecutorScopePolicyTables(rootDbUntyped.internal.tables);\n      },\n      catch: (cause) => storageFailureFromUnknown(\"Failed to validate executor tables\", cause),\n    });\n    const scopeIds = scopes.map((s) => String(s.id));\n    const rootDb = withQueryContext(rootDbUntyped, {\n      allowedScopeIds: new Set(scopeIds),\n    } satisfies ExecutorScopePolicyContext);\n    const fuma = makeFumaClient(rootDb);\n    const core = makeCoreDb(fuma);\n    const blobs = makeFumaBlobStore(fuma);\n    const transaction = <A, E>(effect: Effect.Effect<A, E>) => fuma.transaction(effect);\n\n    // Populated once, never mutated after startup.\n    const staticTools = new Map<string, StaticTools>();\n    const staticSources = new Map<string, StaticSources>();\n\n    // Per-plugin runtime state.\n    const runtimes = new Map<string, PluginRuntime>();\n    // Secret providers keyed by `provider.key`.\n    const secretProviders = new Map<string, SecretProvider>();\n    // Connection providers keyed by `provider.key` — drive the refresh\n    // lifecycle for connection-owned tokens.\n    const connectionProviders = new Map<string, ConnectionProvider>();\n    const resolveConnectionProvider = (key: string): ConnectionProvider | undefined =>\n      connectionProviders.get(key);\n    // In-flight refresh dedup. `connectionsAccessToken` stamps a\n    // `Deferred` here before calling the provider's `refresh`; parallel\n    // callers that walk in while a refresh is still running observe\n    // the same Deferred and await its resolution instead of hitting\n    // the AS a second time. The map is mutated under a semaphore so\n    // check-or-register is atomic under fiber interleavings.\n    const refreshInFlight = new Map<\n      string,\n      Deferred.Deferred<\n        string,\n        | ConnectionNotFoundError\n        | ConnectionProviderNotRegisteredError\n        | ConnectionRefreshNotSupportedError\n        | ConnectionReauthRequiredError\n        | ConnectionRefreshError\n        | StorageFailure\n      >\n    >();\n    const refreshInFlightLock = Semaphore.makeUnsafe(1);\n    const extensions: Record<string, object> = {};\n\n    // ------------------------------------------------------------------\n    // Secrets facade — fast path is the core `secret` routing table\n    // (explicit set()s, keychain entries, etc). Fallback is a walk\n    // across providers that implement `list()`, because those are the\n    // providers that own their own inventories (1password, file-secrets,\n    // workos-vault, env) and enumerate-without-register. Providers\n    // without a list() implementation (keychain) never hit the fallback\n    // walk because their secrets must be registered through set() to\n    // be known at all.\n    //\n    // Multi-scope behavior: the routing-table lookup pulls every row\n    // for this id across the scope stack in a single `IN (...)` query,\n    // then sorts innermost-first so a secret registered in a deeper\n    // scope shadows one with the same id at a shallower scope (e.g. a\n    // user's personal OAuth token wins over an org-wide one). Provider\n    // calls stay sequential — scope-partitioning providers (workos-vault,\n    // 1password-per-vault) have to be asked per scope because the object\n    // name includes the scope — but they're bounded by the number of\n    // registered rows for this id, not by scope-stack depth. The\n    // provider-enumeration fallback is scope-agnostic: providers like\n    // env or 1password don't partition their inventory by executor scope.\n    const scopePrecedence = new Map<string, number>();\n    scopeIds.forEach((s, i) => scopePrecedence.set(s, i));\n\n    // Rank a row by how close its `scope_id` sits to the innermost scope.\n    // Rows whose scope isn't in the stack get pushed to the end (they\n    // should only arrive through explicit scope predicates, but guarding here\n    // means a stray row can't silently win).\n    const rowScopeId = (row: { readonly scope_id: unknown }) =>\n      typeof row.scope_id === \"string\" ? row.scope_id : null;\n    const scopeRank = (row: { readonly scope_id: unknown }) => {\n      const scopeId = rowScopeId(row);\n      return scopeId === null ? Infinity : (scopePrecedence.get(scopeId) ?? Infinity);\n    };\n\n    // Pick the innermost-scope row from a scoped Fuma query. Callers that\n    // need one logical row query the whole visible scope stack and resolve\n    // shadowing here.\n    const findInnermost = <T extends { scope_id: unknown }>(rows: readonly T[]): T | null => {\n      if (rows.length === 0) return null;\n      let winner: T | undefined;\n      let best = Infinity;\n      for (const row of rows) {\n        const rank = scopeRank(row);\n        if (rank < best) {\n          best = rank;\n          winner = row;\n        }\n      }\n      return winner ?? null;\n    };\n\n    const filterUsagesToScopeStack = (usages: readonly Usage[]): readonly Usage[] =>\n      usages.filter((usage) => scopeIds.includes(usage.scopeId));\n\n    const secretRowsForId = (id: string): Effect.Effect<readonly SecretRow[], StorageFailure> =>\n      core.findMany(\"secret\", { where: scopedWhere(scopeIds, byId(id)) }) as Effect.Effect<\n        readonly SecretRow[],\n        StorageFailure\n      >;\n\n    const resolveSecretValueFromRows = (\n      id: string,\n      rows: readonly SecretRow[],\n    ): Effect.Effect<string | null, StorageFailure> =>\n      Effect.gen(function* () {\n        const ordered = [...rows].sort((a, b) => scopeRank(a) - scopeRank(b));\n        for (const row of ordered) {\n          const provider = secretProviders.get(row.provider);\n          if (!provider) continue;\n          const value = yield* provider.get(id, row.scope_id);\n          if (value !== null) return value;\n        }\n\n        // Fallback: ask enumerating providers in registration order. First\n        // non-null wins. Providers that throw\n        // are treated as \"don't have it\" so one flaky provider can't\n        // block resolution via others. Scope-partitioning providers\n        // get asked at the innermost scope as a display default — the\n        // enumeration fallback doesn't know which scope the value\n        // lives in; flat providers ignore the arg.\n        const fallbackScope = scopeIds[0]!;\n        const candidates = [...secretProviders.values()].filter(\n          (p) => p.list && p.allowFallback !== false,\n        );\n        for (const provider of candidates) {\n          const value = yield* provider\n            .get(id, fallbackScope)\n            .pipe(Effect.catch(() => Effect.succeed(null)));\n          if (value !== null) return value;\n        }\n        return null;\n      });\n\n    const secretsGet = (\n      id: string,\n    ): Effect.Effect<string | null, SecretOwnedByConnectionError | StorageFailure> =>\n      Effect.gen(function* () {\n        // Connection-owned token rows are internal plumbing; public secret\n        // resolution must not expose them even if a token secret id is leaked.\n        const rows = yield* secretRowsForId(id);\n        const owned = rows.find((row) => row.owned_by_connection_id);\n        const ownedByConnectionId = owned?.owned_by_connection_id;\n        if (ownedByConnectionId) {\n          return yield* new SecretOwnedByConnectionError({\n            secretId: SecretId.make(id),\n            connectionId: ConnectionId.make(ownedByConnectionId),\n          });\n        }\n        return yield* resolveSecretValueFromRows(id, rows);\n      });\n\n    const secretsGetResolved = (\n      id: string,\n    ): Effect.Effect<\n      { readonly value: string; readonly scopeId: string | null } | null,\n      StorageFailure\n    > =>\n      Effect.gen(function* () {\n        const rows = yield* secretRowsForId(id);\n        const ordered = [...rows].sort((a, b) => scopeRank(a) - scopeRank(b));\n        for (const row of ordered) {\n          if (row.owned_by_connection_id) continue;\n          const value = yield* resolveSecretValueAtScope(row, id);\n          if (value !== null) return { value, scopeId: row.scope_id };\n        }\n        const value = yield* resolveSecretValueFromRows(id, []);\n        return value === null ? null : { value, scopeId: null };\n      });\n\n    const resolveSecretValueAtScope = (\n      row: SecretRow | null,\n      id: string,\n    ): Effect.Effect<string | null, StorageFailure> =>\n      Effect.gen(function* () {\n        if (!row) return null;\n        const provider = secretProviders.get(row.provider);\n        if (!provider) return null;\n        return yield* provider.get(id, row.scope_id);\n      });\n\n    const secretsGetAtScope = (\n      id: string,\n      scope: string,\n    ): Effect.Effect<string | null, SecretOwnedByConnectionError | StorageFailure> =>\n      Effect.gen(function* () {\n        yield* assertScopeInStack(\"secret get scope\", scope);\n        const row = yield* findSecretRowAtScope({\n          secretId: id,\n          scopeId: scope,\n        });\n        if (row?.owned_by_connection_id) {\n          return yield* new SecretOwnedByConnectionError({\n            secretId: SecretId.make(id),\n            connectionId: ConnectionId.make(row.owned_by_connection_id),\n          });\n        }\n        return yield* resolveSecretValueAtScope(row, id);\n      });\n\n    const connectionSecretGetAtScope = (\n      id: string,\n      scope: string,\n    ): Effect.Effect<string | null, StorageFailure> =>\n      Effect.gen(function* () {\n        yield* assertScopeInStack(\"connection secret get scope\", scope);\n        const row = yield* findSecretRowAtScope({\n          secretId: id,\n          scopeId: scope,\n        });\n        return yield* resolveSecretValueAtScope(row, id);\n      });\n\n    const secretRouteHasBackingValue = (row: SecretRow) => {\n      const provider = secretProviders.get(row.provider);\n      if (!provider?.has) return Effect.succeed(true);\n      return provider.has(row.id, row.scope_id).pipe(Effect.catch(() => Effect.succeed(false)));\n    };\n\n    const secretsSet = (input: SetSecretInput): Effect.Effect<SecretRef, StorageFailure> =>\n      Effect.gen(function* () {\n        // Validate the write target before we touch the provider.\n        if (!scopeIds.includes(input.scope)) {\n          return yield* new StorageError({\n            message:\n              `secrets.set targets scope \"${input.scope}\" which is not ` +\n              `in the executor's scope stack [${scopeIds.join(\", \")}].`,\n            cause: undefined,\n          });\n        }\n\n        // Pick provider: explicit or first-writable. Misconfiguration\n        // (unknown provider, no writable provider, read-only provider)\n        // is a host setup bug — surface as `StorageError` so it lands\n        // as a captured InternalError(traceId) at the SDK boundary.\n        let target: SecretProvider | undefined;\n        if (input.provider) {\n          target = secretProviders.get(input.provider);\n          if (!target) {\n            return yield* new StorageError({\n              message: `Unknown secret provider: ${input.provider}`,\n              cause: undefined,\n            });\n          }\n        } else {\n          for (const provider of secretProviders.values()) {\n            if (provider.writable && provider.set) {\n              target = provider;\n              break;\n            }\n          }\n          if (!target) {\n            return yield* new StorageError({\n              message: \"No writable secret providers registered\",\n              cause: undefined,\n            });\n          }\n        }\n        if (!target.writable || !target.set) {\n          return yield* new StorageError({\n            message: `Secret provider \"${target.key}\" is read-only`,\n            cause: undefined,\n          });\n        }\n\n        yield* target.set(input.id, input.value, input.scope);\n\n        // Upsert metadata row in the core `secret` table at the\n        // caller-named scope. Pin the delete to `scope_id = input.scope`\n        // so a personal override never deletes an org-wide secret with\n        // the same id.\n        const now = new Date();\n        yield* core.deleteMany(\"secret\", {\n          where: byScopedId(input.scope, input.id),\n        });\n        yield* core.create(\"secret\", {\n          id: input.id,\n          scope_id: input.scope,\n          name: input.name,\n          provider: target.key,\n          owned_by_connection_id: null,\n          created_at: now,\n        });\n\n        return SecretRef.make({\n          id: input.id,\n          scopeId: input.scope,\n          name: input.name,\n          provider: target.key,\n          createdAt: now,\n        });\n      });\n\n    // Fan out across every plugin that contributes `usagesForSecret`. Each\n    // plugin queries its own normalized columns with explicit scope filters.\n    //\n    // The display path (`secretsUsages` / `connectionsUsages` from the API)\n    // calls `*Lenient`: per-plugin errors become a logWarning so one buggy\n    // plugin can't break the UI footer. The delete RESTRICT path\n    // (`secretsRemove` / `connectionsRemove`) calls `*Strict`: per-plugin\n    // errors fail the whole call so a transient plugin failure can't be\n    // mistaken for \"no usages\" and let through a delete that creates\n    // dangling refs.\n    const secretsUsagesStrict = (id: string): Effect.Effect<readonly Usage[], StorageFailure> =>\n      Effect.gen(function* () {\n        const secretId = SecretId.make(id);\n        const coreUsages = yield* credentialBindingUsagesForSecret(id);\n        const perPlugin = yield* Effect.all(\n          [...runtimes.values()]\n            .filter((r) => r.plugin.usagesForSecret)\n            .map((r) =>\n              r.plugin.usagesForSecret!({\n                ctx: r.ctx,\n                args: { secretId },\n              }).pipe(\n                Effect.mapError(\n                  (cause): StorageFailure =>\n                    new StorageError({\n                      message: `usagesForSecret failed for plugin ${r.plugin.id}`,\n                      cause,\n                    }),\n                ),\n              ),\n            ),\n          { concurrency: \"unbounded\" },\n        );\n        return filterUsagesToScopeStack([...coreUsages, ...perPlugin.flat()]);\n      });\n\n    const secretsUsages = (id: string): Effect.Effect<readonly Usage[], StorageFailure> =>\n      Effect.gen(function* () {\n        const secretId = SecretId.make(id);\n        const coreUsages = yield* credentialBindingUsagesForSecret(id);\n        const perPlugin = yield* Effect.all(\n          [...runtimes.values()]\n            .filter((r) => r.plugin.usagesForSecret)\n            .map((r) =>\n              r.plugin.usagesForSecret!({\n                ctx: r.ctx,\n                args: { secretId },\n              }).pipe(\n                Effect.catchCause((cause: unknown) =>\n                  Effect.logWarning(`usagesForSecret failed for plugin ${r.plugin.id}`, cause).pipe(\n                    Effect.as([] as readonly Usage[]),\n                  ),\n                ),\n              ),\n            ),\n          { concurrency: \"unbounded\" },\n        );\n        return filterUsagesToScopeStack([...coreUsages, ...perPlugin.flat()]);\n      });\n\n    const connectionsUsagesStrict = (id: string): Effect.Effect<readonly Usage[], StorageFailure> =>\n      Effect.gen(function* () {\n        const connectionId = ConnectionId.make(id);\n        const coreUsages = yield* credentialBindingUsagesForConnection(id);\n        const perPlugin = yield* Effect.all(\n          [...runtimes.values()]\n            .filter((r) => r.plugin.usagesForConnection)\n            .map((r) =>\n              r.plugin.usagesForConnection!({\n                ctx: r.ctx,\n                args: { connectionId },\n              }).pipe(\n                Effect.mapError(\n                  (cause): StorageFailure =>\n                    new StorageError({\n                      message: `usagesForConnection failed for plugin ${r.plugin.id}`,\n                      cause,\n                    }),\n                ),\n              ),\n            ),\n          { concurrency: \"unbounded\" },\n        );\n        return filterUsagesToScopeStack([...coreUsages, ...perPlugin.flat()]);\n      });\n\n    const connectionsUsages = (id: string): Effect.Effect<readonly Usage[], StorageFailure> =>\n      Effect.gen(function* () {\n        const connectionId = ConnectionId.make(id);\n        const coreUsages = yield* credentialBindingUsagesForConnection(id);\n        const perPlugin = yield* Effect.all(\n          [...runtimes.values()]\n            .filter((r) => r.plugin.usagesForConnection)\n            .map((r) =>\n              r.plugin.usagesForConnection!({\n                ctx: r.ctx,\n                args: { connectionId },\n              }).pipe(\n                Effect.catchCause((cause: unknown) =>\n                  Effect.logWarning(\n                    `usagesForConnection failed for plugin ${r.plugin.id}`,\n                    cause,\n                  ).pipe(Effect.as([] as readonly Usage[])),\n                ),\n              ),\n            ),\n          { concurrency: \"unbounded\" },\n        );\n        return filterUsagesToScopeStack([...coreUsages, ...perPlugin.flat()]);\n      });\n\n    const secretsRemove = (\n      input: RemoveSecretInput,\n    ): Effect.Effect<void, SecretOwnedByConnectionError | SecretInUseError | StorageFailure> =>\n      Effect.gen(function* () {\n        const id = input.id;\n        const targetScope = input.targetScope;\n        if (!scopeIds.includes(targetScope)) {\n          return yield* new StorageError({\n            message:\n              `secret remove targetScope \"${targetScope}\" is not in the executor's scope stack ` +\n              `[${scopeIds.join(\", \")}].`,\n            cause: undefined,\n          });\n        }\n\n        // Remove is target-scope aware: drop only the explicitly named\n        // scope row. Removing a user-scope override on a secret that also\n        // has an org-scope default should reveal the org default, not wipe\n        // it. If no core row exists at the target scope, provider cleanup\n        // is still scoped to the explicit target for provider-enumerated\n        // secrets, but core metadata never falls through to an outer row.\n        const rows = yield* core.findMany(\"secret\", {\n          where: scopedWhere(scopeIds, byId(id)),\n        });\n        const target = rows.find((row) => row.scope_id === targetScope);\n        // Refuse to delete connection-owned secrets. The connection owns\n        // the lifecycle — callers must go through connections.remove.\n        if (target && target.owned_by_connection_id) {\n          return yield* new SecretOwnedByConnectionError({\n            secretId: SecretId.make(id),\n            connectionId: ConnectionId.make(target.owned_by_connection_id),\n          });\n        }\n        // RESTRICT: source/binding rows are pinned to the credential row's\n        // scope. A same-id row in an outer scope does not satisfy a binding\n        // written at the target scope, so the delete gate filters usages to\n        // the exact row being removed.\n        if (target) {\n          const usages = (yield* secretsUsagesStrict(id)).filter(\n            (usage) => usage.scopeId === targetScope,\n          );\n          if (usages.length > 0) {\n            return yield* new SecretInUseError({\n              secretId: SecretId.make(id),\n              usageCount: usages.length,\n            });\n          }\n        }\n\n        const deleters = [...secretProviders.values()].filter(\n          (p): p is typeof p & { delete: NonNullable<typeof p.delete> } =>\n            !!(p.writable && p.delete),\n        );\n        yield* Effect.all(\n          deleters.map((p) => p.delete(id, targetScope)),\n          { concurrency: \"unbounded\" },\n        );\n\n        if (target) {\n          yield* core.deleteMany(\"secret\", {\n            where: byScopedId(targetScope, id),\n          });\n        }\n      });\n\n    // List is a union of two sources of truth:\n    //\n    //   1. Core `secret` rows — secrets explicitly registered via\n    //      executor.secrets.set(...). These carry their pinned provider\n    //      and are authoritative for routing (get() uses them).\n    //   2. Each provider's own `list()` — for read-only or\n    //      already-populated providers (1password, file-secrets,\n    //      workos-vault, env), the provider enumerates what's actually\n    //      in its backend. These show up in the list even if the user\n    //      never called set() through the executor.\n    //\n    // Dedupe by secret id; core rows win over provider-enumerated ones\n    // so that routing information in the core table is authoritative.\n    // Providers without a list() method (e.g. keychain) contribute\n    // only via the core table path.\n    //\n    // Multi-scope: core rows from any scope in the stack show up, each\n    // tagged with its own `scope_id`. When the same id appears in multiple scopes, the\n    // innermost wins — same rule as `secretsGet`. Provider-enumerated\n    // entries don't know what scope they belong to and are attributed\n    // to the innermost scope as a display default.\n    const secretsList = (): Effect.Effect<readonly SecretRef[], StorageFailure> =>\n      Effect.gen(function* () {\n        const byId = new Map<string, SecretRef>();\n\n        // Core routing rows first. Resolve collisions using the caller's\n        // precedence order (innermost first). Rows owned by a connection\n        // are filtered out — the user sees the Connection entry, not its\n        // backing token secrets. Their ids go in a deny-set so provider\n        // `list()` results for the same id can't leak them back in below.\n        const allRows = yield* core.findMany(\"secret\", { where: scopedWhere(scopeIds) });\n        const rows = allRows.filter((r) => !r.owned_by_connection_id);\n        const pick = (row: (typeof rows)[number]) => {\n          const existing = byId.get(row.id);\n          const incomingScope = row.scope_id;\n          const incomingRank = scopeRank(row);\n          if (existing) {\n            const existingRank = scopePrecedence.get(existing.scopeId) ?? Infinity;\n            if (existingRank <= incomingRank) return;\n          }\n          byId.set(\n            row.id,\n            SecretRef.make({\n              id: SecretId.make(row.id),\n              scopeId: ScopeId.make(incomingScope),\n              name: row.name,\n              provider: row.provider,\n              createdAt: row.created_at instanceof Date ? row.created_at : new Date(row.created_at),\n            }),\n          );\n        };\n        for (const row of rows) {\n          const hasBackingValue = yield* secretRouteHasBackingValue(row);\n          if (hasBackingValue) pick(row);\n        }\n\n        // Don't let provider-enumerated entries resurrect ids that\n        // belong to a connection-owned core row.\n        const connectionOwnedIds = new Set(\n          allRows.filter((r) => r.owned_by_connection_id).map((r) => r.id),\n        );\n        // Attribute provider-listed entries to the innermost scope as\n        // a display default — providers like 1password and env don't\n        // partition their inventory by executor scope.\n        const innermostScopeId = scopeIds[0];\n        if (innermostScopeId !== undefined) {\n          for (const [key, provider] of secretProviders) {\n            if (!provider.list) continue;\n            const entries = yield* provider\n              .list()\n              .pipe(Effect.catch(() => Effect.succeed([] as const)));\n            for (const entry of entries) {\n              if (byId.has(entry.id)) continue;\n              if (connectionOwnedIds.has(entry.id)) continue;\n              byId.set(\n                entry.id,\n                SecretRef.make({\n                  id: SecretId.make(entry.id),\n                  scopeId: ScopeId.make(innermostScopeId),\n                  name: entry.name,\n                  provider: key,\n                  createdAt: new Date(0),\n                }),\n              );\n            }\n          }\n        }\n\n        return Array.from(byId.values());\n      });\n\n    const secretsListAll = (): Effect.Effect<readonly SecretRef[], StorageFailure> =>\n      Effect.gen(function* () {\n        const allRows = yield* core.findMany(\"secret\", { where: scopedWhere(scopeIds) });\n        const coreIds = new Set<string>();\n        const refs: SecretRef[] = [];\n\n        for (const row of allRows) {\n          coreIds.add(row.id);\n          if (row.owned_by_connection_id) continue;\n          const hasBackingValue = yield* secretRouteHasBackingValue(row);\n          if (!hasBackingValue) continue;\n          refs.push(\n            SecretRef.make({\n              id: SecretId.make(row.id),\n              scopeId: ScopeId.make(row.scope_id),\n              name: row.name,\n              provider: row.provider,\n              createdAt: row.created_at instanceof Date ? row.created_at : new Date(row.created_at),\n            }),\n          );\n        }\n\n        return refs.sort((a, b) => {\n          const rank =\n            (scopePrecedence.get(a.scopeId) ?? Infinity) -\n            (scopePrecedence.get(b.scopeId) ?? Infinity);\n          if (rank !== 0) return rank;\n          const name = a.name.localeCompare(b.name);\n          return name === 0 ? String(a.id).localeCompare(String(b.id)) : name;\n        });\n      });\n\n    // Same union shape as secretsList but projected to the leaner\n    // SecretListEntry shape that plugins get via ctx.secrets.list().\n    const secretsListForCtx = () =>\n      Effect.gen(function* () {\n        const list = yield* secretsList();\n        return list.map((ref) => ({\n          id: String(ref.id),\n          scopeId: ref.scopeId,\n          name: ref.name,\n          provider: ref.provider,\n        }));\n      });\n\n    // ------------------------------------------------------------------\n    // Connections facade — sign-in state as a first-class primitive.\n    // Connection rows own one or more backing `secret` rows via\n    // `secret.owned_by_connection_id`; the SDK orchestrates refresh via\n    // the registered provider keyed by `connection.provider`.\n    // ------------------------------------------------------------------\n\n    // Refresh skew: treat the access token as \"about to expire\" when\n    // we're within this many ms of the expiry the AS declared.\n    // Matches the value the old per-plugin refresh code used, so\n    // behavior under the new SDK orchestration stays identical.\n    const CONNECTION_REFRESH_SKEW_MS = 60_000;\n\n    const rowToConnection = (row: ConnectionRow): ConnectionRef =>\n      ConnectionRef.make({\n        id: ConnectionId.make(row.id),\n        scopeId: ScopeId.make(row.scope_id),\n        provider: row.provider,\n        identityLabel: row.identity_label ?? null,\n        accessTokenSecretId: SecretId.make(row.access_token_secret_id),\n        refreshTokenSecretId:\n          row.refresh_token_secret_id != null ? SecretId.make(row.refresh_token_secret_id) : null,\n        expiresAt: row.expires_at != null ? Number(row.expires_at) : null,\n        oauthScope: row.scope ?? null,\n        providerState: Option.getOrNull(decodeProviderState(decodeJsonColumn(row.provider_state))),\n        createdAt: row.created_at instanceof Date ? row.created_at : new Date(row.created_at),\n        updatedAt: row.updated_at instanceof Date ? row.updated_at : new Date(row.updated_at),\n      });\n\n    const findInnermostConnectionRow = (\n      id: string,\n    ): Effect.Effect<ConnectionRow | null, StorageFailure> =>\n      Effect.gen(function* () {\n        const rows = yield* core.findMany(\"connection\", {\n          where: scopedWhere(scopeIds, byId(id)),\n        });\n        return findInnermost(rows as readonly ConnectionRow[]);\n      });\n\n    const connectionsGet = (id: string): Effect.Effect<ConnectionRef | null, StorageFailure> =>\n      Effect.gen(function* () {\n        const row = yield* findInnermostConnectionRow(id);\n        return row ? rowToConnection(row) : null;\n      });\n\n    const connectionsGetAtScope = (\n      id: string,\n      scope: string,\n    ): Effect.Effect<ConnectionRef | null, StorageFailure> =>\n      Effect.gen(function* () {\n        yield* assertScopeInStack(\"connection get scope\", scope);\n        const row = yield* findConnectionRowAtScope({\n          connectionId: id,\n          scopeId: scope,\n        });\n        return row ? rowToConnection(row) : null;\n      });\n\n    const connectionsList = (): Effect.Effect<readonly ConnectionRef[], StorageFailure> =>\n      Effect.gen(function* () {\n        const rows = yield* core.findMany(\"connection\", { where: scopedWhere(scopeIds) });\n        // Dedup by id, innermost scope wins — same rule as sources/tools.\n        const byId = new Map<string, ConnectionRow>();\n        const byIdRank = new Map<string, number>();\n        for (const row of rows as readonly ConnectionRow[]) {\n          const rank = scopeRank(row);\n          const existing = byIdRank.get(row.id);\n          if (existing === undefined || rank < existing) {\n            byId.set(row.id, row);\n            byIdRank.set(row.id, rank);\n          }\n        }\n        return [...byId.values()].map(rowToConnection);\n      });\n\n    // Write a secret value through a specific provider, bypassing the\n    // bare-secrets ownership check so the SDK can stamp\n    // `owned_by_connection_id` atomically alongside a connection row.\n    const writeOwnedSecret = (params: {\n      id: string;\n      scope: string;\n      name: string;\n      value: string;\n      provider: string;\n      ownedByConnectionId: string;\n    }): Effect.Effect<void, StorageFailure> =>\n      Effect.gen(function* () {\n        const target = secretProviders.get(params.provider);\n        if (!target) {\n          return yield* new StorageError({\n            message: `Unknown secret provider: ${params.provider}`,\n            cause: undefined,\n          });\n        }\n        if (!target.writable || !target.set) {\n          return yield* new StorageError({\n            message: `Secret provider \"${target.key}\" is read-only`,\n            cause: undefined,\n          });\n        }\n        yield* target.set(params.id, params.value, params.scope);\n\n        const now = new Date();\n        yield* core.deleteMany(\"secret\", {\n          where: byScopedId(params.scope, params.id),\n        });\n        yield* core.create(\"secret\", {\n          id: params.id,\n          scope_id: params.scope,\n          name: params.name,\n          provider: target.key,\n          owned_by_connection_id: params.ownedByConnectionId,\n          created_at: now,\n        });\n      });\n\n    const pickWritableProvider = (\n      requested?: string,\n    ): Effect.Effect<SecretProvider, StorageFailure> =>\n      Effect.gen(function* () {\n        if (requested) {\n          const p = secretProviders.get(requested);\n          if (!p) {\n            return yield* new StorageError({\n              message: `Unknown secret provider: ${requested}`,\n              cause: undefined,\n            });\n          }\n          return p;\n        }\n        for (const p of secretProviders.values()) {\n          if (p.writable && p.set) return p;\n        }\n        return yield* new StorageError({\n          message: \"No writable secret providers registered\",\n          cause: undefined,\n        });\n      });\n\n    const connectionsCreate = (\n      input: CreateConnectionInput,\n    ): Effect.Effect<ConnectionRef, ConnectionProviderNotRegisteredError | StorageFailure> =>\n      Effect.gen(function* () {\n        if (!scopeIds.some((scopeId) => scopeId === input.scope)) {\n          return yield* new StorageError({\n            message:\n              `connections.create targets scope \"${input.scope}\" which is not ` +\n              `in the executor's scope stack [${scopeIds.join(\", \")}].`,\n            cause: undefined,\n          });\n        }\n        if (!resolveConnectionProvider(input.provider)) {\n          return yield* new ConnectionProviderNotRegisteredError({\n            provider: input.provider,\n            connectionId: input.id,\n          });\n        }\n\n        const writable = yield* pickWritableProvider();\n        const now = new Date();\n\n        return yield* transaction(\n          Effect.gen(function* () {\n            // Drop any existing connection row at this scope first so a\n            // re-auth replaces cleanly. Owned-secret rows for the old\n            // connection are removed by the cascade below (we delete\n            // both old + new token secret ids explicitly).\n            yield* core.deleteMany(\"connection\", {\n              where: byScopedId(input.scope, input.id),\n            });\n\n            yield* writeOwnedSecret({\n              id: input.accessToken.secretId,\n              scope: input.scope,\n              name: input.accessToken.name,\n              value: input.accessToken.value,\n              provider: writable.key,\n              ownedByConnectionId: input.id,\n            });\n            if (input.refreshToken) {\n              yield* writeOwnedSecret({\n                id: input.refreshToken.secretId,\n                scope: input.scope,\n                name: input.refreshToken.name,\n                value: input.refreshToken.value,\n                provider: writable.key,\n                ownedByConnectionId: input.id,\n              });\n            }\n\n            yield* core.create(\"connection\", {\n              id: input.id,\n              scope_id: input.scope,\n              provider: input.provider,\n              identity_label: input.identityLabel ?? null,\n              access_token_secret_id: input.accessToken.secretId,\n              refresh_token_secret_id: input.refreshToken?.secretId ?? null,\n              expires_at: input.expiresAt ?? null,\n              scope: input.oauthScope ?? null,\n              provider_state: input.providerState ?? null,\n              created_at: now,\n              updated_at: now,\n            });\n\n            return ConnectionRef.make({\n              id: input.id,\n              scopeId: input.scope,\n              provider: input.provider,\n              identityLabel: input.identityLabel,\n              accessTokenSecretId: input.accessToken.secretId,\n              refreshTokenSecretId: input.refreshToken?.secretId ?? null,\n              expiresAt: input.expiresAt,\n              oauthScope: input.oauthScope,\n              providerState: input.providerState,\n              createdAt: now,\n              updatedAt: now,\n            });\n          }),\n        );\n      });\n\n    // Write new token material into the existing secret rows and bump\n    // the connection row's expiry / scope / providerState. Never\n    // mutates `access_token_secret_id` or `refresh_token_secret_id` —\n    // those stay pinned so consumers that stashed them in source\n    // configs still resolve.\n    const connectionsUpdateTokensForRow = (\n      input: UpdateConnectionTokensInput,\n      row: ConnectionRow,\n    ): Effect.Effect<ConnectionRef, ConnectionNotFoundError | StorageFailure> =>\n      Effect.gen(function* () {\n        const writable = yield* pickWritableProvider();\n        const accessName = `Connection ${input.id} access token`;\n        const refreshName = `Connection ${input.id} refresh token`;\n\n        return yield* transaction(\n          Effect.gen(function* () {\n            yield* writeOwnedSecret({\n              id: row.access_token_secret_id,\n              scope: row.scope_id,\n              name: accessName,\n              value: input.accessToken,\n              provider: writable.key,\n              ownedByConnectionId: row.id,\n            });\n            const rotatedRefresh = input.refreshToken ?? undefined;\n            if (rotatedRefresh && row.refresh_token_secret_id) {\n              yield* writeOwnedSecret({\n                id: row.refresh_token_secret_id,\n                scope: row.scope_id,\n                name: refreshName,\n                value: rotatedRefresh,\n                provider: writable.key,\n                ownedByConnectionId: row.id,\n              });\n            }\n            const now = new Date();\n            const patch: Record<string, unknown> = { updated_at: now };\n            if (input.expiresAt !== undefined) patch.expires_at = input.expiresAt ?? null;\n            if (input.oauthScope !== undefined) patch.scope = input.oauthScope ?? null;\n            if (input.providerState !== undefined)\n              patch.provider_state = input.providerState ?? null;\n            if (input.identityLabel !== undefined)\n              patch.identity_label = input.identityLabel ?? null;\n            yield* core.updateMany(\"connection\", {\n              where: byScopedId(row.scope_id, row.id),\n              set: patch,\n            });\n            const updated = yield* findConnectionRowAtScope({\n              connectionId: row.id,\n              scopeId: row.scope_id,\n            });\n            if (!updated) {\n              return yield* new ConnectionNotFoundError({\n                connectionId: input.id,\n              });\n            }\n            return rowToConnection(updated);\n          }),\n        );\n      });\n\n    const connectionsUpdateTokens = (\n      input: UpdateConnectionTokensInput,\n    ): Effect.Effect<ConnectionRef, ConnectionNotFoundError | StorageFailure> =>\n      Effect.gen(function* () {\n        const row = yield* findInnermostConnectionRow(input.id);\n        if (!row) {\n          return yield* new ConnectionNotFoundError({ connectionId: input.id });\n        }\n        return yield* connectionsUpdateTokensForRow(input, row);\n      });\n\n    const connectionsSetIdentityLabel = (\n      id: string,\n      label: string | null,\n    ): Effect.Effect<void, ConnectionNotFoundError | StorageFailure> =>\n      Effect.gen(function* () {\n        const row = yield* findInnermostConnectionRow(id);\n        if (!row) {\n          return yield* new ConnectionNotFoundError({\n            connectionId: ConnectionId.make(id),\n          });\n        }\n        yield* core.updateMany(\"connection\", {\n          where: byScopedId(row.scope_id, id),\n          set: {\n            identity_label: label ?? null,\n            updated_at: new Date(),\n          },\n        });\n      });\n\n    const connectionsRemove = (\n      input: RemoveConnectionInput,\n    ): Effect.Effect<void, ConnectionInUseError | StorageFailure> =>\n      Effect.gen(function* () {\n        const id = input.id;\n        const targetScope = input.targetScope;\n        yield* assertScopeInStack(\"connection remove targetScope\", targetScope);\n        const allRows = yield* core.findMany(\"connection\", {\n          where: scopedWhere(scopeIds, byId(id)),\n        });\n        const row =\n          (allRows as readonly ConnectionRow[]).find(\n            (candidate) => candidate.scope_id === targetScope,\n          ) ?? null;\n        if (!row) return;\n        const usages = (yield* connectionsUsagesStrict(id)).filter(\n          (usage) => usage.scopeId === targetScope,\n        );\n        if (usages.length > 0) {\n          return yield* new ConnectionInUseError({\n            connectionId: ConnectionId.make(id),\n            usageCount: usages.length,\n          });\n        }\n        const scope = targetScope;\n        yield* transaction(\n          Effect.gen(function* () {\n            // Find every owned secret at this scope and drop through\n            // its provider + the core row. We look up by\n            // `owned_by_connection_id` rather than just the two ids on\n            // the connection row so any accidentally-orphaned siblings\n            // get cleaned up too.\n            const owned = yield* core.findMany(\"secret\", {\n              where: (b) => b.and(b(\"owned_by_connection_id\", \"=\", id), b(\"scope_id\", \"=\", scope)),\n            });\n            const deleters = [...secretProviders.values()].filter(\n              (p): p is typeof p & { delete: NonNullable<typeof p.delete> } =>\n                !!(p.writable && p.delete),\n            );\n            for (const secret of owned) {\n              yield* Effect.all(\n                deleters.map((p) =>\n                  p\n                    .delete(secret.id, scope)\n                    .pipe(\n                      Effect.catchCause((cause) =>\n                        Effect.logWarning(\n                          `Failed to delete connection-owned secret from provider ${p.key}`,\n                          cause,\n                        ).pipe(Effect.as(false)),\n                      ),\n                    ),\n                ),\n                { concurrency: \"unbounded\" },\n              );\n            }\n            yield* core.deleteMany(\"secret\", {\n              where: (b) => b.and(b(\"owned_by_connection_id\", \"=\", id), b(\"scope_id\", \"=\", scope)),\n            });\n            yield* core.deleteMany(\"connection\", {\n              where: byScopedId(scope, id),\n            });\n          }),\n        );\n      });\n\n    // Typed error union that `connectionsAccessToken` and every helper\n    // that participates in a refresh returns. Pulled out into a type\n    // alias because it has to match the Deferred's channel exactly —\n    // otherwise concurrent waiters and the leader diverge on the error\n    // type.\n    type AccessTokenError =\n      | ConnectionNotFoundError\n      | ConnectionProviderNotRegisteredError\n      | ConnectionRefreshNotSupportedError\n      | ConnectionReauthRequiredError\n      | ConnectionRefreshError\n      | StorageFailure;\n\n    // The actual work of a single refresh cycle, factored out so the\n    // concurrency gate (`connectionsAccessToken`) stays readable. Runs\n    // for the fiber that wins the `refreshInFlight` race.\n    const performRefresh = (ref: ConnectionRef): Effect.Effect<string, AccessTokenError> =>\n      Effect.gen(function* () {\n        const provider = resolveConnectionProvider(ref.provider);\n        if (!provider) {\n          return yield* new ConnectionProviderNotRegisteredError({\n            provider: ref.provider,\n            connectionId: ref.id,\n          });\n        }\n        if (!provider.refresh) {\n          return yield* new ConnectionRefreshNotSupportedError({\n            connectionId: ref.id,\n            provider: ref.provider,\n          });\n        }\n\n        const refreshTokenValue = ref.refreshTokenSecretId\n          ? yield* connectionSecretGetAtScope(ref.refreshTokenSecretId, ref.scopeId)\n          : null;\n\n        // RFC 6749 §5.2 `invalid_grant` (and anything else the\n        // provider tags with `reauthRequired`) is terminal — the\n        // stored refresh token can't recover. Translate into the\n        // caller-visible \"re-authenticate\" error so the UI can\n        // prompt sign-in instead of silently retrying.\n        const rawResult: Result.Result<ConnectionRefreshResult, ConnectionRefreshError> =\n          yield* Effect.result(\n            provider.refresh({\n              connectionId: ref.id,\n              scopeId: ref.scopeId,\n              identityLabel: ref.identityLabel,\n              refreshToken: refreshTokenValue,\n              providerState: ref.providerState,\n              oauthScope: ref.oauthScope,\n            }),\n          );\n        if (Result.isFailure(rawResult)) {\n          const err = rawResult.failure;\n          if (err.reauthRequired) {\n            return yield* new ConnectionReauthRequiredError({\n              connectionId: err.connectionId,\n              provider: ref.provider,\n              // oxlint-disable-next-line executor/no-unknown-error-message -- typed: ConnectionRefreshError.message is provider-facing domain data, not an unknown caught error\n              message: err[\"message\"],\n            });\n          }\n          return yield* err;\n        }\n        const result = rawResult.success;\n\n        const row = yield* findConnectionRowAtScope({\n          connectionId: ref.id,\n          scopeId: ref.scopeId,\n        });\n        if (!row) {\n          return yield* new ConnectionNotFoundError({\n            connectionId: ref.id,\n          });\n        }\n        yield* connectionsUpdateTokensForRow(\n          {\n            id: ref.id,\n            accessToken: result.accessToken,\n            refreshToken: result.refreshToken,\n            expiresAt: result.expiresAt,\n            oauthScope: result.oauthScope,\n            providerState: result.providerState,\n          } as UpdateConnectionTokensInput,\n          row,\n        );\n\n        return result.accessToken;\n      });\n\n    // accessToken(id) — the single surface plugins use at invoke time.\n    // Resolves the backing secret, checks expiry, calls the provider's\n    // refresh handler if we're inside the skew window. New tokens are\n    // written back through the same provider and the connection row is\n    // patched with the new expiry.\n    //\n    // Concurrent invokes on an expired token all share one refresh.\n    // The fiber that wins the `refreshInFlightLock` race registers a\n    // Deferred and performs the refresh; every other concurrent caller\n    // observes the Deferred and awaits its completion. The Deferred is\n    // pulled out of the map before the refresh result resolves so\n    // later invokes don't reuse a completed slot.\n    const connectionsAccessTokenForRow = (\n      row: ConnectionRow,\n    ): Effect.Effect<string, AccessTokenError> =>\n      Effect.gen(function* () {\n        const ref = rowToConnection(row);\n        const now = Date.now();\n        const needsRefresh =\n          ref.expiresAt !== null && ref.expiresAt - CONNECTION_REFRESH_SKEW_MS <= now;\n\n        if (!needsRefresh) {\n          const current = yield* connectionSecretGetAtScope(ref.accessTokenSecretId, ref.scopeId);\n          if (current !== null) return current;\n          // Fall through to refresh if the stored token vanished — a\n          // genuinely-missing secret with no way to refresh is a\n          // hard-failure, same behavior as if `expires_at` had passed.\n        }\n\n        // Concurrency gate. `action` either returns the fresh access\n        // token (this fiber did the refresh) or the already-running\n        // Deferred that another fiber stamped into the map (this fiber\n        // piggybacks on their refresh).\n        const refreshKey = `${ref.scopeId}\\u0000${ref.id}`;\n        const action = yield* refreshInFlightLock.withPermits(1)(\n          Effect.gen(function* () {\n            const existing = refreshInFlight.get(refreshKey);\n            if (existing) {\n              return {\n                kind: \"await\" as const,\n                deferred: existing,\n              };\n            }\n            const deferred = yield* Deferred.make<string, AccessTokenError>();\n            refreshInFlight.set(refreshKey, deferred);\n            return { kind: \"lead\" as const, deferred };\n          }),\n        );\n\n        if (action.kind === \"await\") {\n          return yield* Deferred.await(action.deferred);\n        }\n\n        // Leader path: run the refresh, pipe the outcome into the\n        // Deferred (so waiters wake up), and then clear the map slot\n        // regardless of success or failure. Completing before delete\n        // ensures a caller that arrives during cleanup can still observe\n        // the settled leader result instead of starting a second refresh.\n        return yield* performRefresh(ref).pipe(\n          Effect.onExit((exit) =>\n            refreshInFlightLock.withPermits(1)(\n              Effect.gen(function* () {\n                yield* Deferred.done(action.deferred, exit);\n                refreshInFlight.delete(refreshKey);\n              }),\n            ),\n          ),\n        );\n      });\n\n    const connectionsAccessToken = (id: string): Effect.Effect<string, AccessTokenError> =>\n      Effect.gen(function* () {\n        const row = yield* findInnermostConnectionRow(id);\n        if (!row) {\n          return yield* new ConnectionNotFoundError({\n            connectionId: ConnectionId.make(id),\n          });\n        }\n        return yield* connectionsAccessTokenForRow(row);\n      });\n\n    const connectionsAccessTokenAtScope = (\n      id: string,\n      scope: string,\n    ): Effect.Effect<string, AccessTokenError> =>\n      Effect.gen(function* () {\n        yield* assertScopeInStack(\"connection accessToken scope\", scope);\n        const row = yield* findConnectionRowAtScope({\n          connectionId: id,\n          scopeId: scope,\n        });\n        if (!row) {\n          return yield* new ConnectionNotFoundError({\n            connectionId: ConnectionId.make(id),\n          });\n        }\n        return yield* connectionsAccessTokenForRow(row);\n      });\n\n    const connectionsListForCtx = () => connectionsList();\n\n    const scopeListLabel = () => `[${scopeIds.join(\", \")}]`;\n\n    const assertScopeInStack = (\n      label: string,\n      scopeId: string,\n    ): Effect.Effect<void, StorageError> =>\n      scopeIds.includes(scopeId)\n        ? Effect.void\n        : Effect.fail(\n            new StorageError({\n              message: `${label} \"${scopeId}\" is not in the executor's scope stack ${scopeListLabel()}.`,\n              cause: undefined,\n            }),\n          );\n\n    const findSourceRowAtScope = (input: {\n      readonly pluginId: string;\n      readonly sourceId: string;\n      readonly sourceScope: string;\n    }): Effect.Effect<SourceRow | null, StorageFailure> =>\n      Effect.gen(function* () {\n        if (!scopeIds.includes(input.sourceScope)) return null;\n        return yield* core.findFirst(\"source\", {\n          where: (b) =>\n            b.and(\n              b(\"plugin_id\", \"=\", input.pluginId),\n              b(\"id\", \"=\", input.sourceId),\n              b(\"scope_id\", \"=\", input.sourceScope),\n            ),\n        });\n      });\n\n    const findSourceOwnerRowAtScope = (input: {\n      readonly sourceId: string;\n      readonly sourceScope: string;\n    }): Effect.Effect<SourceRow | null, StorageFailure> =>\n      Effect.gen(function* () {\n        if (!scopeIds.includes(input.sourceScope)) return null;\n        return yield* core.findFirst(\"source\", {\n          where: byScopedId(input.sourceScope, input.sourceId),\n        });\n      });\n\n    const findSecretRowAtScope = (input: {\n      readonly secretId: string;\n      readonly scopeId: string;\n    }): Effect.Effect<SecretRow | null, StorageFailure> =>\n      Effect.gen(function* () {\n        if (!scopeIds.includes(input.scopeId)) return null;\n        return yield* core.findFirst(\"secret\", {\n          where: byScopedId(input.scopeId, input.secretId),\n        });\n      });\n\n    const findConnectionRowAtScope = (input: {\n      readonly connectionId: string;\n      readonly scopeId: string;\n    }): Effect.Effect<ConnectionRow | null, StorageFailure> =>\n      Effect.gen(function* () {\n        if (!scopeIds.includes(input.scopeId)) return null;\n        return yield* core.findFirst(\"connection\", {\n          where: byScopedId(input.scopeId, input.connectionId),\n        });\n      });\n\n    const credentialBindingRowsForSource = (\n      input: CredentialBindingSourceInput,\n    ): Effect.Effect<readonly CredentialBindingRow[], StorageFailure> =>\n      scopeIds.includes(input.sourceScope)\n        ? (core\n            .findMany(\"credential_binding\", {\n              where: scopedWhere(scopeIds, (b) =>\n                b.and(\n                  b(\"plugin_id\", \"=\", input.pluginId),\n                  b(\"source_id\", \"=\", input.sourceId),\n                  b(\"source_scope_id\", \"=\", input.sourceScope),\n                ),\n              ),\n            })\n            .pipe(\n              Effect.map((rows) => {\n                const sourceSourceRank = scopePrecedence.get(input.sourceScope) ?? Infinity;\n                return (rows as readonly CredentialBindingRow[]).filter(\n                  (row) => scopeRank(row) <= sourceSourceRank,\n                );\n              }),\n            ) as Effect.Effect<readonly CredentialBindingRow[], StorageFailure>)\n        : Effect.succeed([]);\n\n    const credentialBindingRowsForSlot = (\n      input: CredentialBindingSlotInput,\n    ): Effect.Effect<readonly CredentialBindingRow[], StorageFailure> =>\n      scopeIds.includes(input.sourceScope)\n        ? (core\n            .findMany(\"credential_binding\", {\n              where: scopedWhere(scopeIds, (b) =>\n                b.and(\n                  b(\"plugin_id\", \"=\", input.pluginId),\n                  b(\"source_id\", \"=\", input.sourceId),\n                  b(\"source_scope_id\", \"=\", input.sourceScope),\n                  b(\"slot_key\", \"=\", input.slotKey),\n                ),\n              ),\n            })\n            .pipe(\n              Effect.map((rows) => {\n                const sourceSourceRank = scopePrecedence.get(input.sourceScope) ?? Infinity;\n                return (rows as readonly CredentialBindingRow[]).filter(\n                  (row) => scopeRank(row) <= sourceSourceRank,\n                );\n              }),\n            ) as Effect.Effect<readonly CredentialBindingRow[], StorageFailure>)\n        : Effect.succeed([]);\n\n    const assertCredentialBindingTargetNotOuter = (input: {\n      readonly label: string;\n      readonly targetScope: string;\n      readonly sourceScope: string;\n      readonly sourceId: string;\n    }): Effect.Effect<void, StorageFailure> =>\n      Effect.gen(function* () {\n        const sourceSourceRank = scopePrecedence.get(input.sourceScope) ?? Infinity;\n        const targetRank = scopePrecedence.get(input.targetScope) ?? Infinity;\n        if (targetRank > sourceSourceRank) {\n          return yield* new StorageError({\n            message:\n              `${input.label} for source \"${input.sourceId}\" cannot target outer scope ` +\n              `\"${input.targetScope}\" because the source lives at scope \"${input.sourceScope}\".`,\n            cause: undefined,\n          });\n        }\n      });\n\n    const credentialBindingListForSource = (input: CredentialBindingSourceInput) =>\n      Effect.gen(function* () {\n        const rows = yield* credentialBindingRowsForSource(input);\n        return rows\n          .slice()\n          .sort((a, b) => {\n            const slot = a.slot_key.localeCompare(b.slot_key);\n            return slot === 0 ? scopeRank(a) - scopeRank(b) : slot;\n          })\n          .map(credentialBindingRowToRef);\n      });\n\n    const credentialBindingSet = (input: SetPluginCredentialBindingInput) =>\n      Effect.gen(function* () {\n        yield* assertScopeInStack(\"credential binding targetScope\", input.targetScope);\n        yield* assertScopeInStack(\"credential binding sourceScope\", input.sourceScope);\n        yield* assertCredentialBindingTargetNotOuter({\n          label: \"credential binding\",\n          targetScope: input.targetScope,\n          sourceScope: input.sourceScope,\n          sourceId: input.sourceId,\n        });\n\n        const source = yield* findSourceRowAtScope({\n          pluginId: input.pluginId,\n          sourceId: input.sourceId,\n          sourceScope: input.sourceScope,\n        });\n        if (!source) {\n          return yield* new StorageError({\n            message:\n              `Cannot set credential binding for source \"${input.sourceId}\" ` +\n              `at scope \"${input.sourceScope}\": source is not visible.`,\n            cause: undefined,\n          });\n        }\n\n        if (input.value.kind === \"secret\") {\n          const secretId = input.value.secretId;\n          const secretScope = input.value.secretScopeId ?? input.targetScope;\n          yield* assertScopeInStack(\"credential binding secretScope\", secretScope);\n          if (scopePrecedence.get(secretScope)! < scopePrecedence.get(input.targetScope)!) {\n            return yield* new StorageError({\n              message:\n                `Cannot bind secret \"${secretId}\" from scope \"${secretScope}\" ` +\n                `to target scope \"${input.targetScope}\": shared bindings cannot reference inner-scope secrets.`,\n              cause: undefined,\n            });\n          }\n          const secret = yield* findSecretRowAtScope({\n            secretId,\n            scopeId: secretScope,\n          });\n          if (!secret) {\n            // No core routing row at this scope yet. Read-only providers\n            // (1password, env, …) own items that never get a row via\n            // `secrets.set()`, so a config-sync referencing one of those\n            // ids by value otherwise fails here. Walk providers that can\n            // enumerate, and if any owns the id, materialize a routing row\n            // pointing at that provider so resolution finds it.\n            let materialized = false;\n            for (const [key, provider] of secretProviders) {\n              let name: string | undefined;\n              if (provider.list) {\n                const entries = yield* provider\n                  .list()\n                  .pipe(Effect.catch(() => Effect.succeed([] as const)));\n                const found = entries.find((e) => e.id === secretId);\n                if (found) name = found.name;\n              }\n              if (name === undefined) {\n                // Provider didn't enumerate the id (slow list(), failed list,\n                // or no list() at all). Probe with get() — cheap for most\n                // backends — and use the id as the display name.\n                const value = yield* provider\n                  .get(secretId, secretScope)\n                  .pipe(Effect.catch(() => Effect.succeed(null as string | null)));\n                if (value !== null) name = secretId;\n              }\n              if (name === undefined) continue;\n              const now = new Date();\n              yield* core.create(\"secret\", {\n                id: secretId,\n                scope_id: secretScope,\n                name,\n                provider: key,\n                owned_by_connection_id: null,\n                created_at: now,\n              });\n              materialized = true;\n              break;\n            }\n            if (!materialized) {\n              const providerKeys = [...secretProviders.keys()];\n              return yield* new StorageError({\n                message:\n                  `Cannot bind secret \"${secretId}\" at scope \"${secretScope}\": ` +\n                  `no registered secret provider has an item with this id ` +\n                  `(checked: ${providerKeys.join(\", \") || \"none\"}). ` +\n                  `If this id points to a 1Password item, the item may have been deleted, ` +\n                  `renamed, or live in a different vault than the one configured for this scope.`,\n                cause: undefined,\n              });\n            }\n          }\n        }\n\n        if (input.value.kind === \"connection\") {\n          const connection = yield* findConnectionRowAtScope({\n            connectionId: input.value.connectionId,\n            scopeId: input.targetScope,\n          });\n          if (!connection) {\n            return yield* new StorageError({\n              message:\n                `Cannot bind connection \"${input.value.connectionId}\" at scope \"${input.targetScope}\": ` +\n                `the connection must be owned by the same scope as the binding.`,\n              cause: undefined,\n            });\n          }\n        }\n\n        const id = credentialBindingId(input);\n        const now = new Date();\n        yield* core.deleteMany(\"credential_binding\", {\n          where: (b) =>\n            b.and(\n              b(\"scope_id\", \"=\", input.targetScope),\n              b(\"plugin_id\", \"=\", input.pluginId),\n              b(\"source_id\", \"=\", input.sourceId),\n              b(\"source_scope_id\", \"=\", input.sourceScope),\n              b(\"slot_key\", \"=\", input.slotKey),\n            ),\n        });\n        yield* core.create(\"credential_binding\", {\n          id,\n          scope_id: input.targetScope,\n          plugin_id: input.pluginId,\n          source_id: input.sourceId,\n          source_scope_id: input.sourceScope,\n          slot_key: input.slotKey,\n          kind: input.value.kind,\n          text_value: input.value.kind === \"text\" ? input.value.text : null,\n          secret_id: input.value.kind === \"secret\" ? input.value.secretId : null,\n          secret_scope_id:\n            input.value.kind === \"secret\" ? (input.value.secretScopeId ?? input.targetScope) : null,\n          connection_id: input.value.kind === \"connection\" ? input.value.connectionId : null,\n          created_at: now,\n          updated_at: now,\n        });\n        return credentialBindingRowToRef({\n          id,\n          scope_id: input.targetScope,\n          plugin_id: input.pluginId,\n          source_id: input.sourceId,\n          source_scope_id: input.sourceScope,\n          slot_key: input.slotKey,\n          kind: input.value.kind,\n          text_value: input.value.kind === \"text\" ? input.value.text : undefined,\n          secret_id: input.value.kind === \"secret\" ? input.value.secretId : undefined,\n          secret_scope_id:\n            input.value.kind === \"secret\"\n              ? (input.value.secretScopeId ?? input.targetScope)\n              : undefined,\n          connection_id: input.value.kind === \"connection\" ? input.value.connectionId : undefined,\n          created_at: now,\n          updated_at: now,\n        } as CredentialBindingRow);\n      });\n\n    const credentialBindingRemove = (input: RemoveCredentialBindingInput) =>\n      Effect.gen(function* () {\n        yield* assertScopeInStack(\"credential binding targetScope\", input.targetScope);\n        yield* assertScopeInStack(\"credential binding sourceScope\", input.sourceScope);\n        yield* assertCredentialBindingTargetNotOuter({\n          label: \"credential binding removal\",\n          targetScope: input.targetScope,\n          sourceScope: input.sourceScope,\n          sourceId: input.sourceId,\n        });\n\n        const source = yield* findSourceRowAtScope({\n          pluginId: input.pluginId,\n          sourceId: input.sourceId,\n          sourceScope: input.sourceScope,\n        });\n        if (!source) {\n          return yield* new StorageError({\n            message:\n              `Cannot remove credential binding for source \"${input.sourceId}\" ` +\n              `at scope \"${input.sourceScope}\": source is not visible.`,\n            cause: undefined,\n          });\n        }\n\n        yield* core.deleteMany(\"credential_binding\", {\n          where: (b) =>\n            b.and(\n              b(\"scope_id\", \"=\", input.targetScope),\n              b(\"plugin_id\", \"=\", input.pluginId),\n              b(\"source_id\", \"=\", input.sourceId),\n              b(\"source_scope_id\", \"=\", input.sourceScope),\n              b(\"slot_key\", \"=\", input.slotKey),\n            ),\n        });\n      });\n\n    const credentialBindingReplaceForSource = (input: ReplaceCredentialBindingsInput) =>\n      Effect.gen(function* () {\n        yield* assertScopeInStack(\"credential binding targetScope\", input.targetScope);\n        yield* assertScopeInStack(\"credential binding sourceScope\", input.sourceScope);\n        yield* assertCredentialBindingTargetNotOuter({\n          label: \"credential binding replacement\",\n          targetScope: input.targetScope,\n          sourceScope: input.sourceScope,\n          sourceId: input.sourceId,\n        });\n\n        const source = yield* findSourceRowAtScope({\n          pluginId: input.pluginId,\n          sourceId: input.sourceId,\n          sourceScope: input.sourceScope,\n        });\n        if (!source) {\n          return yield* new StorageError({\n            message:\n              `Cannot replace credential bindings for source \"${input.sourceId}\" ` +\n              `at scope \"${input.sourceScope}\": source is not visible.`,\n            cause: undefined,\n          });\n        }\n\n        const nextSlots = new Set(input.bindings.map((binding) => binding.slotKey));\n        const existing = yield* core.findMany(\"credential_binding\", {\n          where: (b) =>\n            b.and(\n              b(\"scope_id\", \"=\", input.targetScope),\n              b(\"plugin_id\", \"=\", input.pluginId),\n              b(\"source_id\", \"=\", input.sourceId),\n              b(\"source_scope_id\", \"=\", input.sourceScope),\n            ),\n        });\n        for (const row of existing as readonly CredentialBindingRow[]) {\n          const shouldOwnSlot = input.slotPrefixes.some((prefix) =>\n            row.slot_key.startsWith(prefix),\n          );\n          if (shouldOwnSlot && !nextSlots.has(row.slot_key)) {\n            yield* credentialBindingRemove({\n              targetScope: input.targetScope,\n              pluginId: input.pluginId,\n              sourceId: input.sourceId,\n              sourceScope: input.sourceScope,\n              slotKey: row.slot_key,\n            });\n          }\n        }\n\n        const refs: CredentialBindingRef[] = [];\n        for (const binding of input.bindings) {\n          refs.push(\n            yield* credentialBindingSet({\n              targetScope: input.targetScope,\n              pluginId: input.pluginId,\n              sourceId: input.sourceId,\n              sourceScope: input.sourceScope,\n              slotKey: binding.slotKey,\n              value: binding.value,\n            }),\n          );\n        }\n        return refs;\n      });\n\n    const credentialBindingRemoveForSource = (input: CredentialBindingSourceInput) =>\n      Effect.gen(function* () {\n        yield* assertScopeInStack(\"credential binding sourceScope\", input.sourceScope);\n        const source = yield* findSourceRowAtScope(input);\n        if (!source) return;\n\n        // Source-owner cleanup is intentionally broader than a normal scoped\n        // binding delete. Removing a shared source must detach all credential\n        // rows for that source identity, including user-owned bindings that\n        // are not in the source owner's current stack.\n        yield* core.deleteMany(\"credential_binding\", {\n          where: (b) =>\n            b.and(\n              b(\"plugin_id\", \"=\", input.pluginId),\n              b(\"source_id\", \"=\", input.sourceId),\n              b(\"source_scope_id\", \"=\", input.sourceScope),\n            ),\n        });\n      });\n\n    const credentialBindingResolutionStatus = (\n      row: CredentialBindingRow,\n    ): Effect.Effect<\"resolved\" | \"missing\", StorageFailure> =>\n      Effect.gen(function* () {\n        if (row.kind === \"text\") return typeof row.text_value === \"string\" ? \"resolved\" : \"missing\";\n        if (row.kind === \"secret\") {\n          if (!row.secret_id) return \"missing\";\n          const secret = yield* findSecretRowAtScope({\n            secretId: row.secret_id,\n            scopeId: row.secret_scope_id ?? row.scope_id,\n          });\n          if (!secret) return \"missing\";\n          return (yield* secretRouteHasBackingValue(secret)) ? \"resolved\" : \"missing\";\n        }\n        if (row.kind === \"connection\") {\n          if (!row.connection_id) return \"missing\";\n          const connection = yield* findConnectionRowAtScope({\n            connectionId: row.connection_id,\n            scopeId: row.scope_id,\n          });\n          return connection ? \"resolved\" : \"missing\";\n        }\n        return \"missing\";\n      });\n\n    const credentialBindingResolveBinding = (input: CredentialBindingSlotInput) =>\n      Effect.gen(function* () {\n        const rows = yield* credentialBindingRowsForSlot(input);\n        const row = findInnermost(rows);\n        return row ? credentialBindingRowToRef(row) : null;\n      });\n\n    const credentialBindingResolve = (input: CredentialBindingSlotInput) =>\n      Effect.gen(function* () {\n        const rows = yield* credentialBindingRowsForSlot(input);\n        const row = findInnermost(rows);\n        if (!row) {\n          return ResolvedCredentialSlot.make({\n            pluginId: input.pluginId,\n            sourceId: input.sourceId,\n            sourceScopeId: input.sourceScope,\n            slotKey: input.slotKey,\n            bindingScopeId: null,\n            kind: null,\n            status: \"missing\" as const,\n          });\n        }\n        return ResolvedCredentialSlot.make({\n          pluginId: input.pluginId,\n          sourceId: input.sourceId,\n          sourceScopeId: input.sourceScope,\n          slotKey: input.slotKey,\n          bindingScopeId: ScopeId.make(row.scope_id),\n          kind:\n            row.kind === \"text\" || row.kind === \"secret\" || row.kind === \"connection\"\n              ? row.kind\n              : null,\n          status: yield* credentialBindingResolutionStatus(row),\n        });\n      });\n\n    const sourceNamesForCredentialBindings = (\n      rows: readonly CredentialBindingRow[],\n    ): Effect.Effect<Map<string, string>, StorageFailure> =>\n      Effect.gen(function* () {\n        const sourceIds = [...new Set(rows.map((row) => row.source_id))];\n        if (sourceIds.length === 0) return new Map<string, string>();\n        const sourceRows = yield* core.findMany(\"source\", {\n          where: scopedWhere(scopeIds, (b) => b(\"id\", \"in\", sourceIds)),\n        });\n        return new Map(\n          sourceRows.map((row) => [`${row.scope_id}\\u0000${row.id}`, row.name] as const),\n        );\n      });\n\n    const credentialBindingRowsToUsages = (\n      rows: readonly CredentialBindingRow[],\n    ): Effect.Effect<readonly Usage[], StorageFailure> =>\n      Effect.gen(function* () {\n        const names = yield* sourceNamesForCredentialBindings(rows);\n        return rows.map((row) =>\n          Usage.make({\n            pluginId: row.plugin_id,\n            scopeId: ScopeId.make(\n              row.kind === \"secret\" ? (row.secret_scope_id ?? row.scope_id) : row.scope_id,\n            ),\n            ownerKind: \"credential-binding\",\n            ownerId: row.source_id,\n            ownerName: names.get(`${row.source_scope_id}\\u0000${row.source_id}`) ?? null,\n            slot: row.slot_key,\n          }),\n        );\n      });\n\n    const credentialBindingUsagesForSecret = (\n      id: string,\n    ): Effect.Effect<readonly Usage[], StorageFailure> =>\n      Effect.gen(function* () {\n        const rows = yield* core.findMany(\"credential_binding\", {\n          where: scopedWhere(scopeIds, (b) => b(\"secret_id\", \"=\", id)),\n        });\n        return yield* credentialBindingRowsToUsages(rows as readonly CredentialBindingRow[]);\n      });\n\n    const credentialBindingUsagesForConnection = (\n      id: string,\n    ): Effect.Effect<readonly Usage[], StorageFailure> =>\n      Effect.gen(function* () {\n        const rows = yield* core.findMany(\"credential_binding\", {\n          where: scopedWhere(scopeIds, (b) => b(\"connection_id\", \"=\", id)),\n        });\n        return yield* credentialBindingRowsToUsages(rows as readonly CredentialBindingRow[]);\n      });\n\n    const credentialBindings: CredentialBindingsFacade = {\n      listForSource: credentialBindingListForSource,\n      resolveBinding: credentialBindingResolveBinding,\n      resolve: credentialBindingResolve,\n      set: credentialBindingSet,\n      remove: credentialBindingRemove,\n      replaceForSource: credentialBindingReplaceForSource,\n      removeForSource: credentialBindingRemoveForSource,\n      usagesForSecret: credentialBindingUsagesForSecret,\n      usagesForConnection: credentialBindingUsagesForConnection,\n    };\n\n    const credentialBindingInputForSource = (input: SourceCredentialBindingSourceInput) =>\n      Effect.gen(function* () {\n        const source = yield* findSourceOwnerRowAtScope({\n          sourceId: input.source.id,\n          sourceScope: input.source.scope,\n        });\n        return source\n          ? ({\n              pluginId: source.plugin_id,\n              sourceId: input.source.id,\n              sourceScope: input.source.scope,\n            } satisfies CredentialBindingSourceInput)\n          : null;\n      });\n\n    const sourceBindingList = (input: SourceCredentialBindingSourceInput) =>\n      Effect.gen(function* () {\n        const bindingInput = yield* credentialBindingInputForSource(input);\n        return bindingInput ? yield* credentialBindingListForSource(bindingInput) : [];\n      });\n\n    const sourceBindingResolve = (input: SourceCredentialBindingSlotInput) =>\n      Effect.gen(function* () {\n        const bindingInput = yield* credentialBindingInputForSource(input);\n        return bindingInput\n          ? yield* credentialBindingResolveBinding({\n              ...bindingInput,\n              slotKey: input.slotKey,\n            })\n          : null;\n      });\n\n    const sourceBindingSet = (input: SetSourceCredentialBindingInput) =>\n      Effect.gen(function* () {\n        const bindingInput = yield* credentialBindingInputForSource(input);\n        if (!bindingInput) {\n          return yield* new StorageError({\n            message:\n              `Cannot set credential binding for source \"${input.source.id}\" ` +\n              `at scope \"${input.source.scope}\": source is not visible.`,\n            cause: undefined,\n          });\n        }\n        return yield* credentialBindingSet({\n          ...bindingInput,\n          targetScope: input.scope,\n          slotKey: input.slotKey,\n          value: input.value,\n        });\n      });\n\n    const sourceBindingRemove = (input: RemoveSourceCredentialBindingInput) =>\n      Effect.gen(function* () {\n        const bindingInput = yield* credentialBindingInputForSource(input);\n        if (!bindingInput) {\n          return yield* new StorageError({\n            message:\n              `Cannot remove credential binding for source \"${input.source.id}\" ` +\n              `at scope \"${input.source.scope}\": source is not visible.`,\n            cause: undefined,\n          });\n        }\n        yield* credentialBindingRemove({\n          ...bindingInput,\n          targetScope: input.scope,\n          slotKey: input.slotKey,\n        });\n      });\n\n    const sourceBindingReplace = (input: ReplaceSourceCredentialBindingsInput) =>\n      Effect.gen(function* () {\n        const bindingInput = yield* credentialBindingInputForSource(input);\n        if (!bindingInput) {\n          return yield* new StorageError({\n            message:\n              `Cannot replace credential bindings for source \"${input.source.id}\" ` +\n              `at scope \"${input.source.scope}\": source is not visible.`,\n            cause: undefined,\n          });\n        }\n        return yield* credentialBindingReplaceForSource({\n          ...bindingInput,\n          targetScope: input.scope,\n          slotPrefixes: input.slotPrefixes,\n          bindings: input.bindings,\n        });\n      });\n\n    const sourceConfigure = (input: {\n      readonly source: {\n        readonly id: string;\n        readonly scope: ScopeId | string;\n      };\n      readonly scope: ScopeId | string;\n      readonly type?: string;\n      readonly config: unknown;\n    }) =>\n      Effect.gen(function* () {\n        yield* assertScopeInStack(\"source configure source scope\", input.source.scope);\n        yield* assertScopeInStack(\"source configure target scope\", input.scope);\n\n        const source = yield* core.findFirst(\"source\", {\n          where: byScopedId(input.source.scope, input.source.id),\n        });\n        if (!source) {\n          return yield* new StorageError({\n            message:\n              `Cannot configure source \"${input.source.id}\" at scope ` +\n              `\"${input.source.scope}\": source is not visible.`,\n            cause: undefined,\n          });\n        }\n\n        const runtime = runtimes.get(source.plugin_id);\n        const configure = runtime?.plugin.sourceConfigure;\n        if (!runtime || !configure) {\n          return yield* new StorageError({\n            message: `Plugin \"${source.plugin_id}\" does not support source.configure.`,\n            cause: undefined,\n          });\n        }\n        if (input.type !== undefined && input.type !== configure.type) {\n          return yield* new StorageError({\n            message:\n              `Source configure type mismatch for plugin \"${source.plugin_id}\": ` +\n              `expected \"${configure.type}\", received \"${input.type}\".`,\n            cause: undefined,\n          });\n        }\n\n        const decoded = yield* decodeConfigureInput(configure.schema, input.config).pipe(\n          Effect.mapError((cause) =>\n            storageFailureFromUnknown(\n              `Invalid source.configure payload for ${configure.type}`,\n              cause,\n            ),\n          ),\n        );\n\n        return yield* configure\n          .configure({\n            ctx: runtime.ctx,\n            sourceId: input.source.id,\n            sourceScope: input.source.scope,\n            targetScope: input.scope,\n            config: decoded,\n          })\n          .pipe(\n            Effect.mapError((cause) =>\n              pluginStorageFailure(source.plugin_id, \"sourceConfigure\", cause),\n            ),\n          );\n      });\n\n    const oauthBundle = makeOAuth2Service({\n      fuma,\n      secretsGet: (id) =>\n        secretsGet(id).pipe(\n          Effect.catchTag(\"SecretOwnedByConnectionError\", () => Effect.succeed(null)),\n        ),\n      secretsGetResolved: (id) => secretsGetResolved(id),\n      secretsGetAtScope: (id, scope) =>\n        secretsGetAtScope(id, scope).pipe(\n          Effect.catchTag(\"SecretOwnedByConnectionError\", () => Effect.succeed(null)),\n        ),\n      secretsSet: (input) => secretsSet(input),\n      connectionsCreate: (input) => connectionsCreate(input),\n      httpClientLayer: config.httpClientLayer,\n      endpointUrlPolicy: config.oauthEndpointUrlPolicy,\n    });\n    connectionProviders.set(oauthBundle.connectionProvider.key, oauthBundle.connectionProvider);\n\n    // ------------------------------------------------------------------\n    // Plugin wiring — build ctx, run extension, populate static pools,\n    // register secret providers. No adapter reads here.\n    // ------------------------------------------------------------------\n    for (const plugin of plugins) {\n      if (runtimes.has(plugin.id)) {\n        return yield* new StorageError({\n          message: `Duplicate plugin id: ${plugin.id}`,\n          cause: undefined,\n        });\n      }\n\n      const pluginFuma = makeFumaClient(\n        rootDb,\n        plugin.schema ? { tables: new Set(Object.keys(plugin.schema)) } : { tables: new Set() },\n      );\n      const pluginStorage = makePluginStorageFacade({\n        core,\n        pluginId: plugin.id,\n        scopeIds,\n      });\n      const storageDeps: StorageDeps = {\n        scopes,\n        fuma: pluginFuma,\n        // Blob keys are namespaced by `<scope>/<plugin>` so two tenants\n        // sharing a backing BlobStore can't collide or leak on the\n        // same `(plugin, key)` pair. The store's `get`/`has` walk the\n        // scope stack (innermost first); `put`/`delete` require the\n        // plugin to name a target scope explicitly.\n        blobs: pluginBlobStore(blobs, scopeIds, plugin.id),\n        pluginStorage,\n      };\n      const storage = plugin.storage(storageDeps);\n\n      const ctx: PluginCtx<unknown> = {\n        scopes,\n        storage,\n        pluginStorage,\n        httpClientLayer: config.httpClientLayer ?? FetchHttpClient.layer,\n        core: {\n          sources: {\n            register: (input: SourceInput) =>\n              Effect.gen(function* () {\n                // Guard: reject a dynamic source whose id collides with\n                // a static source id, or any of whose would-be tool ids\n                // collide with a static tool id. Tool ids are\n                // `${source_id}.${tool.name}` — static and dynamic\n                // share the same string space. Fails as `StorageError`\n                // so the HTTP edge surfaces it as `InternalError(traceId)`.\n                if (staticSources.has(input.id)) {\n                  return yield* new StorageError({\n                    message: `Source id \"${input.id}\" collides with a static source`,\n                    cause: undefined,\n                  });\n                }\n                for (const tool of input.tools) {\n                  const fqid = `${input.id}.${tool.name}`;\n                  if (staticTools.has(fqid)) {\n                    return yield* new StorageError({\n                      message: `Tool id \"${fqid}\" collides with a static tool`,\n                      cause: undefined,\n                    });\n                  }\n                }\n                yield* transaction(writeSourceInput(core, plugin.id, input));\n              }),\n            unregister: (input: RemoveSourceInput) =>\n              // `unregister` is scoped to a caller-named source row. The\n              // plugin already knows which source owner it is updating,\n              // so the core path must not infer an innermost target.\n              transaction(\n                Effect.gen(function* () {\n                  yield* assertScopeInStack(\"source unregister targetScope\", input.targetScope);\n                  const row = yield* core.findFirst(\"source\", {\n                    where: byScopedId(input.targetScope, input.id),\n                  });\n                  if (!row) return;\n                  yield* deleteSourceById(core, input.id, input.targetScope);\n                }),\n              ),\n            update: (input) =>\n              core\n                .updateMany(\"source\", {\n                  where: byScopedId(input.scope, input.id),\n                  set: {\n                    ...(input.name !== undefined ? { name: input.name } : {}),\n                    ...(input.url !== undefined ? { url: input.url ?? null } : {}),\n                    updated_at: new Date(),\n                  },\n                })\n                .pipe(Effect.asVoid),\n            list: () => listSources(),\n            remove: (input) => removeSource(input),\n            refresh: (input) => refreshSource(input),\n            detect: (url) => detectSource(url),\n            configure: (input) => sourceConfigure(input),\n            listBindings: (input) => sourceBindingList(input),\n            resolveBinding: (input) => sourceBindingResolve(input),\n            setBinding: (input) => sourceBindingSet(input),\n            removeBinding: (input) => sourceBindingRemove(input),\n            configureSchemas: () =>\n              Array.from(runtimes.values())\n                .map(({ plugin }) =>\n                  plugin.sourceConfigure\n                    ? sourceConfigureSchemaView(plugin.id, plugin.sourceConfigure)\n                    : undefined,\n                )\n                .filter(Predicate.isNotUndefined),\n            presets: () =>\n              Array.from(runtimes.values()).flatMap(({ plugin }) =>\n                (plugin.sourcePresets ?? []).map((preset) => ({\n                  ...preset,\n                  pluginId: plugin.id,\n                })),\n              ),\n          },\n          policies: {\n            list: () => policiesList(),\n            create: (input) => policiesCreate(input),\n            update: (input) => policiesUpdate(input),\n            remove: (input) => policiesRemove(input),\n          },\n          definitions: {\n            register: (input: DefinitionsInput) =>\n              transaction(writeDefinitions(core, plugin.id, input)),\n          },\n        },\n        secrets: {\n          get: (id) => secretsGet(id),\n          getAtScope: (id, scope) => secretsGetAtScope(id, scope),\n          list: () => secretsListForCtx(),\n          status: (id) => secretsStatus(id),\n          usages: (id) => secretsUsages(id),\n          providers: () =>\n            Effect.sync(() => Array.from(secretProviders.keys()) as readonly string[]),\n          set: (input) => secretsSet(input),\n          remove: (input) => secretsRemove(input),\n        },\n        connections: {\n          get: (id) => connectionsGet(id),\n          getAtScope: (id, scope) => connectionsGetAtScope(id, scope),\n          list: () => connectionsListForCtx(),\n          usages: (id) => connectionsUsages(id),\n          providers: () =>\n            Effect.sync(() => Array.from(connectionProviders.keys()) as readonly string[]),\n          create: (input) => connectionsCreate(input),\n          updateTokens: (input) => connectionsUpdateTokens(input),\n          setIdentityLabel: (id, label) => connectionsSetIdentityLabel(id, label),\n          accessToken: (id) => connectionsAccessToken(id),\n          accessTokenAtScope: (id, scope) => connectionsAccessTokenAtScope(id, scope),\n          remove: (input) => connectionsRemove(input),\n        },\n        credentialBindings,\n        oauth: oauthBundle.service,\n        transaction: <A, E>(effect: Effect.Effect<A, E>) => transaction(effect),\n      };\n\n      // Build extension FIRST so it's available as `self` when resolving\n      // staticSources. Field ordering in the plugin spec matters — TS\n      // infers TExtension from `extension`'s return type, then NoInfer\n      // locks `self` to that inferred type on `staticSources`.\n      const extension: object = plugin.extension ? plugin.extension(ctx) : {};\n      if (plugin.extension) {\n        extensions[plugin.id] = extension;\n      }\n\n      // Resolve static declarations to the in-memory pools. NO DB WRITES.\n      // Plugin-owned executor tools are intentionally mounted under the\n      // single `executor` namespace so source inventory is about configured\n      // integrations, not plugin management surfaces. The static source id\n      // becomes the path segment, so plugins can expose TypeScript-friendly\n      // management namespaces without changing their persisted plugin ids:\n      //   openapi.addSource -> executor.openapi.addSource\n      //   googleDiscovery.addSource -> executor.googleDiscovery.addSource\n      const decls = plugin.staticSources ? plugin.staticSources(extension) : [];\n      for (const source of decls) {\n        const mountUnderExecutor = source.kind === \"executor\";\n        const mountedSource = mountUnderExecutor ? EXECUTOR_SOURCE : source;\n\n        if (mountUnderExecutor) {\n          if (!staticSources.has(EXECUTOR_SOURCE_ID)) {\n            staticSources.set(EXECUTOR_SOURCE_ID, {\n              source: EXECUTOR_SOURCE,\n              pluginId: EXECUTOR_SOURCE_ID,\n            });\n          }\n        } else {\n          if (staticSources.has(source.id)) {\n            return yield* new StorageError({\n              message: `Duplicate static source id: ${source.id} (plugin ${plugin.id})`,\n              cause: undefined,\n            });\n          }\n          staticSources.set(source.id, { source, pluginId: plugin.id });\n        }\n\n        for (const tool of source.tools) {\n          const mountedTool = mountUnderExecutor\n            ? {\n                ...tool,\n                name: `${source.id}.${tool.name}`,\n              }\n            : tool;\n          const fqid = `${mountedSource.id}.${mountedTool.name}`;\n          if (staticTools.has(fqid)) {\n            return yield* new StorageError({\n              message: `Duplicate static tool id: ${fqid} (plugin ${plugin.id})`,\n              cause: undefined,\n            });\n          }\n          staticTools.set(fqid, {\n            source: mountedSource,\n            tool: mountedTool,\n            pluginId: plugin.id,\n            ctx,\n          });\n        }\n      }\n\n      runtimes.set(plugin.id, { plugin, storage, ctx });\n\n      if (plugin.secretProviders) {\n        const raw =\n          typeof plugin.secretProviders === \"function\"\n            ? plugin.secretProviders(ctx)\n            : plugin.secretProviders;\n        const providers = Effect.isEffect(raw)\n          ? yield* raw.pipe(\n              Effect.mapError((cause) => pluginStorageFailure(plugin.id, \"secretProviders\", cause)),\n            )\n          : raw;\n        for (const provider of providers) {\n          if (secretProviders.has(provider.key)) {\n            return yield* new StorageError({\n              message: `Duplicate secret provider key: ${provider.key} (from plugin ${plugin.id})`,\n              cause: undefined,\n            });\n          }\n          secretProviders.set(provider.key, provider);\n        }\n      }\n\n      if (plugin.connectionProviders) {\n        const raw =\n          typeof plugin.connectionProviders === \"function\"\n            ? plugin.connectionProviders(ctx)\n            : plugin.connectionProviders;\n        const providers = Effect.isEffect(raw)\n          ? yield* raw.pipe(\n              Effect.mapError((cause) =>\n                pluginStorageFailure(plugin.id, \"connectionProviders\", cause),\n              ),\n            )\n          : raw;\n        for (const provider of providers) {\n          if (connectionProviders.has(provider.key)) {\n            return yield* new StorageError({\n              message: `Duplicate connection provider key: ${provider.key} (from plugin ${plugin.id})`,\n              cause: undefined,\n            });\n          }\n          connectionProviders.set(provider.key, provider);\n        }\n      }\n    }\n\n    // ------------------------------------------------------------------\n    // Executor surface\n    // ------------------------------------------------------------------\n    const listSources = () =>\n      Effect.gen(function* () {\n        const dynamic = yield* core.findMany(\"source\", { where: scopedWhere(scopeIds) });\n        // Dedup by id with innermost scope winning. Without this, a user\n        // who shadowed an org-wide source at their inner scope would see\n        // two rows — their override and the outer default — which is\n        // inconsistent with how `secrets.list` and every other list\n        // surface dedup shadowed entries.\n        const byId = new Map<string, (typeof dynamic)[number]>();\n        const byIdRank = new Map<string, number>();\n        for (const row of dynamic) {\n          const rank = scopeRank(row);\n          const existing = byIdRank.get(row.id);\n          if (existing === undefined || rank < existing) {\n            byId.set(row.id, row);\n            byIdRank.set(row.id, rank);\n          }\n        }\n        const dynamicDeduped = [...byId.values()];\n        const staticList: Source[] = [];\n        for (const { source, pluginId } of staticSources.values()) {\n          staticList.push(staticDeclToSource(source, pluginId));\n        }\n        const merged = [...staticList, ...dynamicDeduped.map(rowToSource)];\n        yield* Effect.annotateCurrentSpan({\n          \"executor.sources.static_count\": staticList.length,\n          \"executor.sources.dynamic_count\": dynamicDeduped.length,\n        });\n        return merged;\n      }).pipe(Effect.withSpan(\"executor.sources.list\"));\n\n    // Bulk-resolve annotations across a set of dynamic tool rows by\n    // grouping them under their owning plugin's resolveAnnotations\n    // callback. One plugin call per (plugin_id, source_id) pair, not\n    // per row. Plugins without a resolver simply contribute no\n    // annotations for their rows.\n    const resolveAnnotationsFor = (rows: readonly ToolRow[]) =>\n      Effect.gen(function* () {\n        const result = new Map<string, ToolAnnotations>();\n        if (rows.length === 0) return result;\n\n        // Group by (plugin_id, source_id)\n        const groups = new Map<string, ToolRow[]>();\n        for (const row of rows) {\n          const key = `${row.plugin_id}\\u0000${row.source_id}`;\n          const bucket = groups.get(key);\n          if (bucket) bucket.push(row);\n          else groups.set(key, [row]);\n        }\n\n        // Each (plugin_id, source_id) group is an independent DB read,\n        // so fan them out concurrently. Yielding them serially stacks\n        // ~200-300ms storage round-trips end-to-end and dominates the\n        // `executor.tools.list.annotations` span.\n        const maps = yield* Effect.forEach(\n          [...groups].slice(0, MAX_ANNOTATION_GROUPS),\n          ([key, groupRows]) =>\n            Effect.gen(function* () {\n              const [pluginId, sourceId] = key.split(\"\\u0000\") as [string, string];\n              const runtime = runtimes.get(pluginId);\n              if (!runtime?.plugin.resolveAnnotations) return undefined;\n              return yield* runtime.plugin\n                .resolveAnnotations({\n                  ctx: runtime.ctx,\n                  sourceId,\n                  toolRows: groupRows,\n                })\n                .pipe(\n                  Effect.mapError((cause) =>\n                    pluginStorageFailure(pluginId, \"resolveAnnotations\", cause),\n                  ),\n                );\n            }),\n          { concurrency: \"unbounded\" },\n        );\n        for (const map of maps) {\n          if (!map) continue;\n          for (const [toolId, annotations] of Object.entries(map)) {\n            result.set(toolId, annotations);\n          }\n        }\n        return result;\n      });\n\n    const listTools = (filter?: ToolListFilter) =>\n      Effect.gen(function* () {\n        const dynamic = yield* core.findMany(\"tool\", {\n          where: scopedWhere(\n            scopeIds,\n            filter?.sourceId ? (b) => b(\"source_id\", \"=\", filter.sourceId!) : undefined,\n          ),\n        });\n        // Dedup by tool id, innermost scope winning — same reason as\n        // `listSources` above: a shadowed id must surface as one entry\n        // (the inner one), not two.\n        const byId = new Map<string, (typeof dynamic)[number]>();\n        const byIdRank = new Map<string, number>();\n        for (const row of dynamic) {\n          const rank = scopeRank(row);\n          const existing = byIdRank.get(row.id);\n          if (existing === undefined || rank < existing) {\n            byId.set(row.id, row);\n            byIdRank.set(row.id, rank);\n          }\n        }\n        const dynamicDeduped = [...byId.values()];\n        const annotations =\n          filter?.includeAnnotations === false\n            ? new Map<string, ToolAnnotations>()\n            : yield* resolveAnnotationsFor(dynamicDeduped).pipe(\n                Effect.withSpan(\"executor.tools.list.annotations\"),\n              );\n\n        const out: Tool[] = [];\n        // Static tools — annotations from the declaration, not a resolver.\n        for (const entry of staticTools.values()) {\n          out.push(staticDeclToTool(entry.source, entry.tool, entry.pluginId));\n        }\n        for (const row of dynamicDeduped) {\n          out.push(rowToTool(row, annotations.get(row.id)));\n        }\n        const filtered = filter ? out.filter((t) => toolMatchesFilter(t, filter)) : out;\n\n        // Drop tools blocked by user policy unless the caller explicitly\n        // asked to see them (the settings UI does, agent surfaces don't).\n        // One findMany covers the entire scope stack; resolution per\n        // tool is in-memory.\n        let result = filtered;\n        let blockedCount = 0;\n        if (filter?.includeBlocked !== true) {\n          const policies = yield* loadAllPolicies();\n          if (policies.length > 0) {\n            const kept: Tool[] = [];\n            for (const tool of filtered) {\n              const match = resolveToolPolicy(tool.id, policies, scopeRank);\n              if (match?.action === \"block\") {\n                blockedCount++;\n                continue;\n              }\n              kept.push(tool);\n            }\n            result = kept;\n          }\n        }\n\n        yield* Effect.annotateCurrentSpan({\n          \"executor.tools.static_count\": staticTools.size,\n          \"executor.tools.dynamic_count\": dynamicDeduped.length,\n          \"executor.tools.result_count\": result.length,\n          \"executor.tools.blocked_count\": blockedCount,\n        });\n        return result;\n      }).pipe(Effect.withSpan(\"executor.tools.list\"));\n\n    // Load all definitions for a single source as a plain map. Defs\n    // for the same name can exist at multiple scopes (an admin registers\n    // a default, a user overrides one entry with a tighter schema) —\n    // dedup by name keeping the innermost-scope row.\n    const loadDefinitionsForSource = (sourceId: string) =>\n      Effect.gen(function* () {\n        const defRows = yield* core.findMany(\"definition\", {\n          where: scopedWhere(scopeIds, (b) => b(\"source_id\", \"=\", sourceId)),\n        });\n        const winners = new Map<string, { row: (typeof defRows)[number]; rank: number }>();\n        for (const row of defRows) {\n          const rank = scopeRank(row);\n          const existing = winners.get(row.name);\n          if (!existing || rank < existing.rank) {\n            winners.set(row.name, { row, rank });\n          }\n        }\n        const out: Record<string, unknown> = {};\n        for (const [name, { row }] of winners) out[name] = row.schema;\n        return out;\n      });\n\n    // Render the ToolSchema view for a tool. Raw JSON schema roots stay small,\n    // while source-level definitions are returned once for the UI schema\n    // explorer and passed separately to the TypeScript preview compiler.\n    const buildToolSchemaView = (opts: {\n      toolId: string;\n      name?: string;\n      description?: string;\n      sourceId: string | undefined;\n      rawInput: unknown;\n      rawOutput: unknown;\n    }) =>\n      Effect.gen(function* () {\n        const defs: Record<string, unknown> = opts.sourceId\n          ? yield* loadDefinitionsForSource(opts.sourceId).pipe(\n              Effect.withSpan(\"executor.tool.schema.load_defs\"),\n            )\n          : {};\n\n        const sourceDefsMap = new Map<string, unknown>(Object.entries(defs));\n        const schemaDefinitions = collectReferencedDefinitions(\n          [opts.rawInput, opts.rawOutput],\n          sourceDefsMap,\n        );\n        const schemaDefsMap = new Map<string, unknown>(Object.entries(schemaDefinitions));\n        const preview: ToolTypeScriptPreview = yield* Effect.promise(() =>\n          buildToolTypeScriptPreview({\n            inputSchema: opts.rawInput,\n            outputSchema: opts.rawOutput,\n            defs: schemaDefsMap,\n          }),\n        ).pipe(\n          Effect.withSpan(\"schema.compile.preview\", {\n            attributes: {\n              \"schema.kind\": \"tool.preview\",\n              \"schema.has_input\": opts.rawInput !== undefined,\n              \"schema.has_output\": opts.rawOutput !== undefined,\n              \"schema.def_count\": schemaDefsMap.size,\n              \"schema.source_def_count\": sourceDefsMap.size,\n            },\n          }),\n        );\n\n        return ToolSchema.make({\n          id: ToolId.make(opts.toolId),\n          name: opts.name,\n          description: opts.description,\n          inputSchema: opts.rawInput,\n          outputSchema: opts.rawOutput,\n          schemaDefinitions:\n            Object.keys(schemaDefinitions).length > 0 ? schemaDefinitions : undefined,\n          inputTypeScript: preview.inputTypeScript ?? undefined,\n          outputTypeScript: preview.outputTypeScript ?? undefined,\n          typeScriptDefinitions: preview.typeScriptDefinitions ?? undefined,\n        });\n      });\n\n    const toolSchema = (toolId: string) =>\n      Effect.gen(function* () {\n        // Static pool first — static tools have no source in the DB so\n        // no `$defs` attach; just wrap the declared schemas.\n        const staticEntry = staticTools.get(toolId);\n        if (staticEntry) {\n          yield* Effect.annotateCurrentSpan({\n            \"executor.tool.dispatch_path\": \"static\",\n            \"executor.source_id\": staticEntry.source.id,\n            \"executor.source_kind\": staticEntry.source.kind,\n          });\n          return yield* buildToolSchemaView({\n            toolId,\n            name: staticEntry.tool.name,\n            description: staticEntry.tool.description,\n            sourceId: undefined,\n            rawInput: toToolJsonSchema(staticEntry.tool.inputSchema),\n            rawOutput: toToolJsonSchema(staticEntry.tool.outputSchema, \"output\"),\n          });\n        }\n        // Innermost-wins lookup across every visible scope.\n        const rows = yield* core\n          .findMany(\"tool\", {\n            where: scopedWhere(scopeIds, byId(toolId)),\n          })\n          .pipe(Effect.withSpan(\"executor.tool.resolve\"));\n        const row = findInnermost(rows);\n        if (!row) return null;\n        yield* Effect.annotateCurrentSpan({\n          \"executor.tool.dispatch_path\": \"dynamic\",\n          \"executor.source_id\": row.source_id,\n          \"executor.plugin_id\": row.plugin_id,\n        });\n        return yield* buildToolSchemaView({\n          toolId,\n          name: row.name,\n          description: row.description,\n          sourceId: row.source_id,\n          rawInput: decodeJsonColumn(row.input_schema),\n          rawOutput: decodeJsonColumn(row.output_schema),\n        });\n      }).pipe(\n        Effect.withSpan(\"executor.tool.schema\", {\n          attributes: { \"mcp.tool.name\": toolId },\n        }),\n      );\n\n    // Bulk definitions accessor — every source's $defs, grouped by\n    // source id. One query against the definition table, plus an\n    // in-memory group-by with innermost-scope dedup: if the same\n    // (source_id, name) pair exists at multiple scopes, the inner\n    // scope's schema wins.\n    const toolsDefinitions = () =>\n      Effect.gen(function* () {\n        const rows = yield* core.findMany(\"definition\", { where: scopedWhere(scopeIds) });\n        const winners = new Map<string, { row: (typeof rows)[number]; rank: number }>();\n        for (const row of rows) {\n          const key = `${row.source_id}\\u0000${row.name}`;\n          const rank = scopeRank(row);\n          const existing = winners.get(key);\n          if (!existing || rank < existing.rank) {\n            winners.set(key, { row, rank });\n          }\n        }\n        const out: Record<string, Record<string, unknown>> = {};\n        for (const { row } of winners.values()) {\n          let bucket = out[row.source_id];\n          if (!bucket) {\n            bucket = {};\n            out[row.source_id] = bucket;\n          }\n          bucket[row.name] = row.schema;\n        }\n        return out;\n      });\n\n    const defaultElicitationHandler = resolveElicitationHandler(config.onElicitation);\n    const pickHandler = (options: InvokeOptions | undefined): ElicitationHandler =>\n      options?.onElicitation\n        ? resolveElicitationHandler(options.onElicitation)\n        : defaultElicitationHandler;\n\n    const buildElicit = (toolId: string, args: unknown, handler: ElicitationHandler): Elicit => {\n      return (request: ElicitationRequest) =>\n        Effect.gen(function* () {\n          const tid = ToolId.make(toolId);\n          const response: ElicitationResponse = yield* handler({\n            toolId: tid,\n            args,\n            request,\n          });\n          if (response.action !== \"accept\") {\n            return yield* new ElicitationDeclinedError({\n              toolId: tid,\n              action: response.action,\n            });\n          }\n          return response;\n        });\n    };\n\n    // ------------------------------------------------------------------\n    // Tool policies — user-authored overrides of the plugin-derived\n    // approval annotations. Resolution walks the scope-stacked policy\n    // table with first-match-wins ordering (innermost scope first, then\n    // `position` ascending). The result either short-circuits invoke\n    // (`block`), forces approval (`require_approval`), skips approval\n    // (`approve`), or returns `undefined` so the plugin annotation is\n    // used as today.\n    // ------------------------------------------------------------------\n\n    const loadAllPolicies = () => core.findMany(\"tool_policy\", { where: scopedWhere(scopeIds) });\n\n    const resolveToolPolicyForId = (toolId: string) =>\n      Effect.gen(function* () {\n        const policies = yield* loadAllPolicies();\n        return resolveToolPolicy(toolId, policies, scopeRank);\n      });\n\n    const enforceApproval = (\n      annotations: ToolAnnotations | undefined,\n      toolId: string,\n      args: unknown,\n      policy: PolicyMatch | undefined,\n      handler: ElicitationHandler,\n    ) =>\n      Effect.gen(function* () {\n        // approve → never prompt regardless of plugin annotation.\n        if (policy?.action === \"approve\") return;\n\n        // require_approval → always prompt. If the plugin already had a\n        // description, prefer it; otherwise show the matched pattern so\n        // the user can see *why* the prompt fired.\n        const policyForcesApproval = policy?.action === \"require_approval\";\n        if (!policyForcesApproval && !annotations?.requiresApproval) return;\n\n        const tid = ToolId.make(toolId);\n        const message = annotations?.approvalDescription\n          ? annotations.approvalDescription\n          : policyForcesApproval && policy\n            ? `Approve ${toolId}? (matched policy: ${policy.pattern})`\n            : `Approve ${toolId}?`;\n        const request = FormElicitation.make({\n          message: `${message}\\n\\nArguments:\\n${approvalArgumentPreview(args)}`,\n          requestedSchema: {\n            type: \"object\",\n            properties: {},\n          },\n        });\n        const response = yield* handler({ toolId: tid, args, request });\n        if (response.action !== \"accept\") {\n          return yield* new ElicitationDeclinedError({\n            toolId: tid,\n            action: response.action,\n          });\n        }\n      });\n\n    const invokeTool = (toolId: string, args: unknown, options?: InvokeOptions) => {\n      const handler = pickHandler(options);\n      return Effect.gen(function* () {\n        const formatInvocationCauseMessage = (cause: unknown): string => {\n          // oxlint-disable-next-line executor/no-instanceof-error, executor/no-unknown-error-message -- boundary: preserve public invoke error message wrapping for unknown plugin failures\n          return cause instanceof Error ? cause.message : String(cause);\n        };\n        const wrapInvocationError =\n          (resolvedToolId: string) =>\n          <A, E>(effect: Effect.Effect<A, E>): Effect.Effect<A, ToolInvocationError> =>\n            effect.pipe(\n              Effect.mapError(\n                (cause) =>\n                  new ToolInvocationError({\n                    toolId: ToolId.make(resolvedToolId),\n                    message: formatInvocationCauseMessage(cause),\n                    cause,\n                  }),\n              ),\n            );\n\n        // Static path — O(1) map lookup, no DB hit.\n        const staticEntry = staticTools.get(toolId);\n        if (staticEntry) {\n          // Resolve the user-authored policy before static plugin code\n          // runs. Dynamic tools resolve policy after canonicalizing the\n          // stored tool id so casing aliases cannot bypass rules.\n          const policy = yield* resolveToolPolicyForId(toolId).pipe(\n            Effect.withSpan(\"executor.tool.resolve_policy\"),\n          );\n          if (policy?.action === \"block\") {\n            return yield* new ToolBlockedError({\n              toolId: ToolId.make(toolId),\n              pattern: policy.pattern,\n            });\n          }\n          yield* Effect.annotateCurrentSpan({\n            \"executor.tool.dispatch_path\": \"static\",\n            \"executor.source_id\": staticEntry.source.id,\n            \"executor.source_kind\": staticEntry.source.kind,\n            \"executor.plugin_id\": staticEntry.pluginId,\n          });\n          yield* enforceApproval(staticEntry.tool.annotations, toolId, args, policy, handler).pipe(\n            Effect.withSpan(\"executor.tool.enforce_approval\"),\n          );\n          return yield* wrapInvocationError(toolId)(\n            staticEntry.tool.handler({\n              ctx: staticEntry.ctx,\n              args,\n              elicit: buildElicit(toolId, args, handler),\n            }),\n          ).pipe(Effect.withSpan(\"executor.tool.handler\"));\n        }\n\n        // Dynamic path — DB lookup + delegate to owning plugin. Walk the\n        // whole scope stack and pick the innermost-scope row so a user's\n        // shadow of an outer tool actually wins on invoke.\n        let toolRows = yield* core\n          .findMany(\"tool\", {\n            where: scopedWhere(scopeIds, byId(toolId)),\n          })\n          .pipe(Effect.withSpan(\"executor.tool.resolve\"));\n        let row = findInnermost(toolRows);\n        let resolvedToolId = toolId;\n        let suggestionRows: readonly CoreRow<\"tool\">[] = toolRows;\n        if (!row) {\n          suggestionRows = yield* core\n            .findMany(\"tool\", {\n              where: scopedWhere(scopeIds),\n            })\n            .pipe(Effect.withSpan(\"executor.tool.resolve_suggestions\"));\n          const sourceId = toolSourceId(toolId);\n          if (sourceId) {\n            const normalizedToolId = toolId.toLowerCase();\n            row = findInnermost(\n              suggestionRows.filter(\n                (toolRow) =>\n                  toolRow.source_id === sourceId && toolRow.id.toLowerCase() === normalizedToolId,\n              ),\n            );\n            if (row) resolvedToolId = row.id;\n          }\n        }\n        if (!row) {\n          return yield* new ToolNotFoundError({\n            toolId: ToolId.make(toolId),\n            suggestions: missingToolSuggestions(toolId, suggestionRows),\n          });\n        }\n        yield* Effect.annotateCurrentSpan({\n          \"executor.tool.dispatch_path\": \"dynamic\",\n          \"executor.source_id\": row.source_id,\n          \"executor.plugin_id\": row.plugin_id,\n          \"executor.tool.resolved_id\": resolvedToolId,\n        });\n        const policy = yield* resolveToolPolicyForId(resolvedToolId).pipe(\n          Effect.withSpan(\"executor.tool.resolve_policy\"),\n        );\n        if (policy?.action === \"block\") {\n          return yield* new ToolBlockedError({\n            toolId: ToolId.make(resolvedToolId),\n            pattern: policy.pattern,\n          });\n        }\n        const runtime = runtimes.get(row.plugin_id);\n        if (!runtime) {\n          return yield* new PluginNotLoadedError({\n            pluginId: row.plugin_id,\n            toolId: ToolId.make(toolId),\n          });\n        }\n        if (!runtime.plugin.invokeTool) {\n          return yield* new NoHandlerError({\n            toolId: ToolId.make(toolId),\n            pluginId: row.plugin_id,\n          });\n        }\n\n        // Ask the plugin to derive annotations for this one row, if it\n        // has a resolver. Cheap because the plugin typically already\n        // needs to load its enrichment data to invoke the tool —\n        // implementations should structure their resolver + invokeTool\n        // around a single storage read. Skipped entirely when the user\n        // policy is `approve` — the prompt is going to be skipped no\n        // matter what the plugin says, so don't pay for the lookup.\n        let annotations: ToolAnnotations | undefined;\n        if (policy?.action !== \"approve\" && runtime.plugin.resolveAnnotations) {\n          const map = yield* runtime.plugin\n            .resolveAnnotations({\n              ctx: runtime.ctx,\n              sourceId: row.source_id,\n              toolRows: [row],\n            })\n            .pipe(wrapInvocationError(resolvedToolId))\n            .pipe(Effect.withSpan(\"executor.tool.resolve_annotations\"));\n          annotations = map[resolvedToolId];\n        }\n        yield* enforceApproval(annotations, resolvedToolId, args, policy, handler).pipe(\n          Effect.withSpan(\"executor.tool.enforce_approval\"),\n        );\n\n        return yield* wrapInvocationError(resolvedToolId)(\n          runtime.plugin.invokeTool({\n            ctx: runtime.ctx,\n            toolRow: row,\n            args,\n            elicit: buildElicit(resolvedToolId, args, handler),\n          }),\n        ).pipe(Effect.withSpan(\"executor.tool.handler\"));\n      }).pipe(\n        Effect.withSpan(\"executor.tool.invoke\", {\n          attributes: {\n            \"mcp.tool.name\": toolId,\n          },\n        }),\n      );\n    };\n\n    const removeSource = (input: RemoveSourceInput) =>\n      Effect.gen(function* () {\n        yield* assertScopeInStack(\"source remove targetScope\", input.targetScope);\n        const sourceId = input.id;\n        // Block removal of static sources structurally.\n        if (staticSources.has(sourceId)) {\n          return yield* new SourceRemovalNotAllowedError({ sourceId });\n        }\n        const sourceRow = yield* core.findFirst(\"source\", {\n          where: byScopedId(input.targetScope, sourceId),\n        });\n        if (!sourceRow) return;\n        if (!sourceRow.can_remove) {\n          return yield* new SourceRemovalNotAllowedError({ sourceId });\n        }\n        const runtime = runtimes.get(sourceRow.plugin_id);\n        // Group the plugin's own cleanup + the core row delete into one\n        // Fuma transaction so removeSource never leaves orphan rows on failure.\n        yield* transaction(\n          Effect.gen(function* () {\n            if (runtime?.plugin.removeSource) {\n              yield* runtime.plugin\n                .removeSource({\n                  ctx: runtime.ctx,\n                  sourceId,\n                  scope: input.targetScope,\n                })\n                .pipe(\n                  Effect.mapError((cause) =>\n                    pluginStorageFailure(runtime.plugin.id, \"removeSource\", cause),\n                  ),\n                );\n            }\n            yield* deleteSourceById(core, sourceId, input.targetScope);\n          }),\n        );\n      });\n\n    const refreshSource = (input: RefreshSourceInput) =>\n      Effect.gen(function* () {\n        yield* assertScopeInStack(\"source refresh targetScope\", input.targetScope);\n        const sourceId = input.id;\n        if (staticSources.has(sourceId)) return;\n        const sourceRow = yield* core.findFirst(\"source\", {\n          where: byScopedId(input.targetScope, sourceId),\n        });\n        if (!sourceRow) return;\n        const runtime = runtimes.get(sourceRow.plugin_id);\n        if (runtime?.plugin.refreshSource) {\n          yield* runtime.plugin\n            .refreshSource({\n              ctx: runtime.ctx,\n              sourceId,\n              scope: input.targetScope,\n            })\n            .pipe(\n              Effect.mapError((cause) =>\n                pluginStorageFailure(runtime.plugin.id, \"refreshSource\", cause),\n              ),\n            );\n        }\n      });\n\n    const sourceDetectionMaxUrlLength = config.sourceDetection?.maxUrlLength ?? 2_048;\n    const sourceDetectionMaxDetectors = config.sourceDetection?.maxDetectors ?? 6;\n    const sourceDetectionMaxResults = config.sourceDetection?.maxResults ?? 4;\n    const sourceDetectionTimeout = config.sourceDetection?.timeout ?? \"60 seconds\";\n    const sourceDetectionHostedOutboundPolicy =\n      config.sourceDetection?.hostedOutboundPolicy ?? config.httpClientLayer !== undefined;\n\n    // URL autodetection — fan out across a bounded set of plugins that\n    // declared a `detect` hook. Collect non-null results up to the\n    // configured cap. Plugin-level detect implementations should\n    // swallow fetch errors and return null, so one flaky plugin doesn't\n    // block the whole dispatch.\n    const detectionConfidenceScore = (confidence: SourceDetectionResult[\"confidence\"]) =>\n      Match.value(confidence).pipe(\n        Match.when(\"high\", () => 3),\n        Match.when(\"medium\", () => 2),\n        Match.when(\"low\", () => 1),\n        Match.exhaustive,\n      );\n\n    const detectSource = (url: string) =>\n      Effect.gen(function* () {\n        const trimmed = url.trim();\n        if (trimmed.length === 0 || trimmed.length > sourceDetectionMaxUrlLength) return [];\n        const parsed = yield* Effect.try({\n          try: () => new URL(trimmed),\n          catch: (error) => error,\n        }).pipe(Effect.option);\n        if (Option.isNone(parsed)) return [];\n        if (parsed.value.protocol !== \"http:\" && parsed.value.protocol !== \"https:\") return [];\n        if (sourceDetectionHostedOutboundPolicy) {\n          const allowed = yield* validateHostedOutboundUrl(trimmed).pipe(\n            Effect.as(true),\n            Effect.catch(() => Effect.succeed(false)),\n          );\n          if (!allowed) return [];\n        }\n\n        const results: SourceDetectionResult[] = [];\n        let detectorCount = 0;\n        for (const runtime of runtimes.values()) {\n          if (!runtime.plugin.detect) continue;\n          if (detectorCount >= sourceDetectionMaxDetectors) break;\n          detectorCount++;\n          const result = yield* runtime.plugin\n            .detect({ ctx: runtime.ctx, url: trimmed })\n            .pipe(Effect.timeout(sourceDetectionTimeout))\n            .pipe(Effect.catch(() => Effect.succeed(null)));\n          if (result) results.push(result);\n        }\n        return results\n          .sort(\n            (a, b) =>\n              detectionConfidenceScore(b.confidence) - detectionConfidenceScore(a.confidence),\n          )\n          .slice(0, sourceDetectionMaxResults);\n      });\n\n    // Per-source definitions accessor — one query, one mapping pass.\n    const sourceDefinitions = (sourceId: string) => loadDefinitionsForSource(sourceId);\n\n    // Existence check for user-facing secret pickers. Core `secret`\n    // rows are routing metadata; when a provider can answer `has()`,\n    // confirm the backing value still exists. Providers without `has()`\n    // remain conservative so keychain/1password don't need to return\n    // the value or prompt just to populate picker/status UI.\n    const secretsStatus = (id: string): Effect.Effect<\"resolved\" | \"missing\", StorageFailure> =>\n      Effect.gen(function* () {\n        const rows = yield* secretRowsForId(id);\n        if (rows.some((row) => row.owned_by_connection_id)) return \"missing\";\n        for (const row of rows) {\n          if (yield* secretRouteHasBackingValue(row)) return \"resolved\";\n        }\n\n        return \"missing\";\n      });\n\n    // ------------------------------------------------------------------\n    // Policies — CRUD surface backed by the `tool_policy` core table.\n    // The cloud settings UI is one consumer; plugins call the same API\n    // when they programmatically manage policies.\n    //\n    // `list` orders rows innermost scope first, then position ascending.\n    // Resolution then takes the first local match per scope and applies\n    // the most restrictive action across scopes.\n    // ------------------------------------------------------------------\n    const policiesList = () =>\n      Effect.gen(function* () {\n        const rows = yield* loadAllPolicies();\n        const sorted = [...rows].sort((a, b) => {\n          const sa = scopeRank(a);\n          const sb = scopeRank(b);\n          if (sa !== sb) return sa - sb;\n          return comparePolicyRow(a, b);\n        });\n        return sorted.map((row) => rowToToolPolicy(row));\n      }).pipe(Effect.withSpan(\"executor.policies.list\"));\n\n    const policiesCreate = (input: CreateToolPolicyInput) =>\n      Effect.gen(function* () {\n        yield* assertScopeInStack(\"tool policy targetScope\", input.targetScope);\n        if (!isValidPattern(input.pattern)) {\n          return yield* new StorageError({\n            message:\n              `Invalid tool policy pattern \"${input.pattern}\". ` +\n              `Patterns must be \"*\" (every tool), an exact tool id (\"a.b.c\"), ` +\n              `or a trailing wildcard (\"a.b.*\"). Leading \"*\" prefixes ` +\n              `(\"*foo\", \"*.foo\") and \"**\" are not supported.`,\n            cause: undefined,\n          });\n        }\n        if (!isToolPolicyAction(input.action)) {\n          return yield* new StorageError({\n            message:\n              `Invalid tool policy action \"${String(input.action)}\". ` +\n              `Expected \"approve\" | \"require_approval\" | \"block\".`,\n            cause: undefined,\n          });\n        }\n\n        // Default position: a fractional-indexing key above the\n        // current minimum. Lets newly-created rules win against\n        // existing ones, which matches the v1 design — users typically\n        // add a rule to override behavior they're seeing right now,\n        // not as a background fallback.\n        let position = input.position;\n        if (position === undefined) {\n          const existing = yield* core.findMany(\"tool_policy\", {\n            where: (b) => b(\"scope_id\", \"=\", input.targetScope),\n          });\n          let min: string | null = null;\n          for (const row of existing) {\n            const p = row.position;\n            if (min === null || p < min) min = p;\n          }\n          position = generateKeyBetween(null, min);\n        }\n\n        const id = `pol_${Math.random().toString(36).slice(2, 10)}_${Date.now().toString(36)}`;\n        const now = new Date();\n        yield* core.create(\"tool_policy\", {\n          id,\n          scope_id: input.targetScope,\n          pattern: input.pattern,\n          action: input.action,\n          position,\n          created_at: now,\n          updated_at: now,\n        });\n        return rowToToolPolicy({\n          id,\n          scope_id: input.targetScope,\n          pattern: input.pattern,\n          action: input.action,\n          position,\n          created_at: now,\n          updated_at: now,\n        } as ToolPolicyRow);\n      }).pipe(Effect.withSpan(\"executor.policies.create\"));\n\n    const policiesUpdate = (input: UpdateToolPolicyInput) =>\n      Effect.gen(function* () {\n        yield* assertScopeInStack(\"tool policy targetScope\", input.targetScope);\n        if (input.pattern !== undefined && !isValidPattern(input.pattern)) {\n          return yield* new StorageError({\n            message: `Invalid tool policy pattern \"${input.pattern}\".`,\n            cause: undefined,\n          });\n        }\n        if (input.action !== undefined && !isToolPolicyAction(input.action)) {\n          return yield* new StorageError({\n            message: `Invalid tool policy action \"${String(input.action)}\".`,\n            cause: undefined,\n          });\n        }\n\n        const rows = yield* core.findMany(\"tool_policy\", {\n          where: byScopedId(input.targetScope, input.id),\n        });\n        const row = rows[0] ?? null;\n        if (!row) {\n          return yield* new StorageError({\n            message: `Tool policy \"${input.id}\" not found in scope \"${input.targetScope}\".`,\n            cause: undefined,\n          });\n        }\n\n        const updated: ToolPolicyRow = {\n          ...row,\n          pattern: input.pattern ?? row.pattern,\n          action: input.action ?? row.action,\n          position: input.position ?? row.position,\n          updated_at: new Date(),\n        };\n        yield* core.updateMany(\"tool_policy\", {\n          where: byScopedId(input.targetScope, input.id),\n          set: {\n            pattern: updated.pattern,\n            action: updated.action,\n            position: updated.position,\n            updated_at: updated.updated_at,\n          },\n        });\n        return rowToToolPolicy(updated);\n      }).pipe(Effect.withSpan(\"executor.policies.update\"));\n\n    const policiesRemove = (input: RemoveToolPolicyInput) =>\n      Effect.gen(function* () {\n        yield* assertScopeInStack(\"tool policy targetScope\", input.targetScope);\n        yield* core.deleteMany(\"tool_policy\", {\n          where: byScopedId(input.targetScope, input.id),\n        });\n      }).pipe(Effect.withSpan(\"executor.policies.remove\"));\n\n    const policiesResolve = (toolId: string) =>\n      resolveToolPolicyForId(toolId).pipe(Effect.withSpan(\"executor.policies.resolve\"));\n\n    const close = () =>\n      Effect.gen(function* () {\n        for (const runtime of runtimes.values()) {\n          if (runtime.plugin.close) {\n            yield* runtime.plugin\n              .close()\n              .pipe(\n                Effect.mapError((cause) => pluginStorageFailure(runtime.plugin.id, \"close\", cause)),\n              );\n          }\n        }\n        if (closeDb) {\n          const out = closeDb();\n          if (Effect.isEffect(out)) {\n            yield* out;\n          } else if (out instanceof Promise) {\n            yield* Effect.tryPromise({\n              try: () => out,\n              catch: (cause) =>\n                new StorageError({\n                  message: \"Executor database close failed\",\n                  cause,\n                }),\n            });\n          }\n        }\n      });\n\n    // Public Executor surface — storage-backed methods surface\n    // `StorageFailure` (StorageError | UniqueViolationError) raw. The\n    // HTTP edge wraps this surface with `withCapture` to\n    // translate `StorageError` → `InternalError({ traceId })`; non-HTTP\n    // consumers (CLI, Promise SDK, tests) see the raw typed channel.\n    const base = {\n      scopes,\n      tools: {\n        list: listTools,\n        schema: toolSchema,\n        definitions: toolsDefinitions,\n        invoke: invokeTool,\n      },\n      sources: {\n        list: listSources,\n        remove: removeSource,\n        refresh: refreshSource,\n        detect: detectSource,\n        definitions: sourceDefinitions,\n        configure: sourceConfigure,\n        listBindings: sourceBindingList,\n        resolveBinding: sourceBindingResolve,\n        setBinding: sourceBindingSet,\n        removeBinding: sourceBindingRemove,\n        replaceBindings: sourceBindingReplace,\n      },\n      secrets: {\n        get: secretsGet,\n        getAtScope: secretsGetAtScope,\n        status: secretsStatus,\n        set: secretsSet,\n        remove: secretsRemove,\n        list: secretsList,\n        listAll: secretsListAll,\n        usages: secretsUsages,\n        providers: () => Effect.sync(() => Array.from(secretProviders.keys()) as readonly string[]),\n      },\n      connections: {\n        get: connectionsGet,\n        getAtScope: connectionsGetAtScope,\n        list: connectionsList,\n        create: connectionsCreate,\n        updateTokens: connectionsUpdateTokens,\n        setIdentityLabel: connectionsSetIdentityLabel,\n        accessToken: connectionsAccessToken,\n        accessTokenAtScope: connectionsAccessTokenAtScope,\n        remove: connectionsRemove,\n        usages: connectionsUsages,\n        providers: () =>\n          Effect.sync(() => Array.from(connectionProviders.keys()) as readonly string[]),\n      },\n      credentialBindings,\n      oauth: oauthBundle.service,\n      policies: {\n        list: policiesList,\n        create: policiesCreate,\n        update: policiesUpdate,\n        remove: policiesRemove,\n        resolve: policiesResolve,\n      },\n      close,\n    };\n\n    // Plugin extension keys are known from the generic plugin tuple,\n    // while runtime registration builds the same shape dynamically.\n    const toExecutor = (value: unknown): Executor<TPlugins> => value as Executor<TPlugins>;\n    return toExecutor(Object.assign(base, extensions));\n  });\n","import { Schema } from \"effect\";\n\nimport { ScopeId } from \"./ids\";\n\nexport const Scope = Schema.Struct({\n  id: ScopeId,\n  name: Schema.String,\n  createdAt: Schema.Date,\n});\nexport type Scope = typeof Scope.Type;\n\n/**\n * Source-add flows that do not expose a user-facing placement choice install\n * sources at the outermost visible scope. Local executors have one scope, while\n * cloud executors use an innermost personal scope plus an outer organization\n * scope where shared sources live.\n */\nexport const defaultSourceInstallScopeId = (\n  scopes: readonly { readonly id: ScopeId | string }[],\n): string | null => {\n  const scope = scopes[scopes.length - 1];\n  return scope ? String(scope.id) : null;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiBA,SAAS,cAAc;AA4CvB,IAAM,cAAc,CAAC,OAAe,WAClC,OAAO,SAAS,KAAK,IACjB,OAAO,OACP,OAAO;AAAA,EACL,IAAI,aAAa;AAAA,IACf,SACE,6BAA6B,KAAK,iDACP,OAAO,KAAK,IAAI,CAAC;AAAA,IAC9C,OAAO;AAAA,EACT,CAAC;AACH;AAEN,IAAM,QAAQ,CAAC,OAAe,aAAqB,GAAG,KAAK,IAAI,QAAQ;AAQhE,IAAM,kBAAkB,CAC7B,OACA,QACA,cACqB;AAAA,EACrB,KAAK,CAAC,QACJ,OAAO,IAAI,aAAa;AACtB,UAAM,aAAa,OAAO,IAAI,CAAC,MAAM,MAAM,GAAG,QAAQ,CAAC;AACvD,UAAM,OAAO,OAAO,MAAM,QAAQ,YAAY,GAAG;AACjD,QAAI,KAAK,SAAS,EAAG,QAAO;AAC5B,eAAW,MAAM,YAAY;AAC3B,YAAM,IAAI,KAAK,IAAI,EAAE;AACrB,UAAI,MAAM,OAAW,QAAO;AAAA,IAC9B;AACA,WAAO;AAAA,EACT,CAAC;AAAA,EACH,KAAK,CAAC,KAAK,OAAO,YAChB,OAAO;AAAA,IAAQ,YAAY,QAAQ,OAAO,MAAM;AAAA,IAAG,MACjD,MAAM,IAAI,MAAM,QAAQ,OAAO,QAAQ,GAAG,KAAK,KAAK;AAAA,EACtD;AAAA,EACF,QAAQ,CAAC,KAAK,YACZ,OAAO;AAAA,IAAQ,YAAY,QAAQ,OAAO,MAAM;AAAA,IAAG,MACjD,MAAM,OAAO,MAAM,QAAQ,OAAO,QAAQ,GAAG,GAAG;AAAA,EAClD;AAAA,EACF,KAAK,CAAC,QACJ,MACG;AAAA,IACC,OAAO,IAAI,CAAC,MAAM,MAAM,GAAG,QAAQ,CAAC;AAAA,IACpC;AAAA,EACF,EACC,KAAK,OAAO,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC;AAC/C;AAWO,IAAM,wBAAwB,MAAiB;AACpD,QAAM,QAAQ,oBAAI,IAAoB;AACtC,QAAM,IAAI,CAAC,IAAY,QAAgB,GAAG,EAAE,KAAK,GAAG;AACpD,SAAO;AAAA,IACL,KAAK,CAAC,IAAI,QAAQ,OAAO,KAAK,MAAM,MAAM,IAAI,EAAE,IAAI,GAAG,CAAC,KAAK,IAAI;AAAA,IACjE,SAAS,CAAC,YAAY,QACpB,OAAO,KAAK,MAAM;AAChB,YAAM,OAAO,oBAAI,IAAoB;AACrC,iBAAW,MAAM,YAAY;AAC3B,cAAM,IAAI,MAAM,IAAI,EAAE,IAAI,GAAG,CAAC;AAC9B,YAAI,MAAM,OAAW,MAAK,IAAI,IAAI,CAAC;AAAA,MACrC;AACA,aAAO;AAAA,IACT,CAAC;AAAA,IACH,KAAK,CAAC,IAAI,KAAK,UACb,OAAO,KAAK,MAAM;AAChB,YAAM,IAAI,EAAE,IAAI,GAAG,GAAG,KAAK;AAAA,IAC7B,CAAC;AAAA,IACH,QAAQ,CAAC,IAAI,QACX,OAAO,KAAK,MAAM;AAChB,YAAM,OAAO,EAAE,IAAI,GAAG,CAAC;AAAA,IACzB,CAAC;AAAA,IACH,KAAK,CAAC,IAAI,QAAQ,OAAO,KAAK,MAAM,MAAM,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC;AAAA,EAC3D;AACF;AAEA,IAAM,SAAS,CAAC,WAAmB,QAAwB,KAAK,UAAU,CAAC,WAAW,GAAG,CAAC;AAS1F,IAAM,aAAa,CAAC,SAAsC;AAEnD,IAAM,oBAAoB,CAAC,UAAkC;AAAA,EAClE,KAAK,CAAC,WAAW,QACf,KACG;AAAA,IAAI;AAAA,IAAY,CAAC,OAChB,GAAG,UAAU,QAAQ;AAAA,MACnB,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,KAAK,SAAS,GAAG,EAAE,OAAO,KAAK,GAAG,CAAC;AAAA,IACxE,CAAC;AAAA,EACH,EACC,KAAK,OAAO,IAAI,CAAC,QAAQ,GAAqB,CAAC,EAC/C;AAAA,IACC,OAAO,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI;AAAA,IACtC,OAAO;AAAA,MACL,CAAC,UAAU,IAAI,aAAa,EAAE,SAAS,gCAAgC,MAAM,CAAC;AAAA,IAChF;AAAA,EACF;AAAA,EACJ,SAAS,CAAC,YAAY,QACpB,WAAW,WAAW,IAClB,OAAO,QAAQ,oBAAI,IAAoB,CAAC,IACxC,KACG;AAAA,IAAI;AAAA,IAAgB,CAAC,OACpB,GAAG,SAAS,QAAQ;AAAA,MAClB,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,KAAK,GAAG,CAAC;AAAA,IAC/E,CAAC;AAAA,EACH,EACC,KAAK,OAAO,IAAI,UAAU,CAAC,EAC3B;AAAA,IACC,OAAO,IAAI,CAAC,SAAS;AACnB,YAAM,MAAM,oBAAI,IAAoB;AACpC,iBAAW,OAAO,KAAM,KAAI,IAAI,IAAI,WAAW,IAAI,KAAK;AACxD,aAAO;AAAA,IACT,CAAC;AAAA,IACD,OAAO;AAAA,MACL,CAAC,UAAU,IAAI,aAAa,EAAE,SAAS,gCAAgC,MAAM,CAAC;AAAA,IAChF;AAAA,EACF;AAAA,EACR,KAAK,CAAC,WAAW,KAAK,UACpB,OAAO,IAAI,aAAa;AACtB,UAAM,KAAK,OAAO,WAAW,GAAG;AAChC,UAAM,WAAY,OAAO,KAAK;AAAA,MAAI;AAAA,MAAmB,CAAC,OACpD,GAAG,UAAU,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,KAAK,EAAE,EAAE,CAAC;AAAA,IACzD;AACA,QAAI,UAAU;AACZ,aAAO,KAAK;AAAA,QAAI;AAAA,QAAe,CAAC,OAC9B,GAAG,WAAW,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,KAAK,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC;AAAA,MAC1E;AACA;AAAA,IACF;AACA,WAAO,KAAK,IAAI,eAAe,CAAC,OAAO,GAAG,OAAO,QAAQ,EAAE,IAAI,WAAW,KAAK,MAAM,CAAC,CAAC;AAAA,EACzF,CAAC,EAAE;AAAA,IACD,OAAO;AAAA,MACL,CAAC,UAAU,IAAI,aAAa,EAAE,SAAS,gCAAgC,MAAM,CAAC;AAAA,IAChF;AAAA,EACF;AAAA,EACF,QAAQ,CAAC,WAAW,QAClB,KACG;AAAA,IAAI;AAAA,IAAe,CAAC,OACnB,GAAG,WAAW,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,WAAW,GAAG,CAAC,EAAE,CAAC;AAAA,EAC9E,EACC;AAAA,IACC,OAAO;AAAA,IACP,OAAO;AAAA,MACL,CAAC,UAAU,IAAI,aAAa,EAAE,SAAS,gCAAgC,MAAM,CAAC;AAAA,IAChF;AAAA,EACF;AAAA,EACJ,KAAK,CAAC,WAAW,QACf,KACG;AAAA,IAAI;AAAA,IAAY,CAAC,OAChB,GAAG,MAAM,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,WAAW,GAAG,CAAC,EAAE,CAAC;AAAA,EACzE,EACC;AAAA,IACC,OAAO,IAAI,CAAC,UAAU,QAAQ,CAAC;AAAA,IAC/B,OAAO;AAAA,MACL,CAAC,UAAU,IAAI,aAAa,EAAE,SAAS,gCAAgC,MAAM,CAAC;AAAA,IAChF;AAAA,EACF;AACN;;;AC3OA,SAAS,MAAc,cAAc;AAiB9B,IAAM,0BAA0B,OAAO,OAAO,OAAO,QAAQ,OAAO,OAAO;AAS3E,IAAM,gBAAgB,OAAO,OAAO;AAAA,EACzC,IAAI;AAAA,EACJ,SAAS;AAAA,EACT,UAAU,OAAO;AAAA,EACjB,eAAe,OAAO,OAAO,OAAO,MAAM;AAAA,EAC1C,qBAAqB;AAAA,EACrB,sBAAsB,OAAO,OAAO,QAAQ;AAAA;AAAA,EAE5C,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA;AAAA,EAGtC,YAAY,OAAO,OAAO,OAAO,MAAM;AAAA,EACvC,eAAe,OAAO,OAAO,uBAAuB;AAAA,EACpD,WAAW,OAAO;AAAA,EAClB,WAAW,OAAO;AACpB,CAAC;AAeM,IAAM,gBAAgB,OAAO,OAAO;AAAA;AAAA;AAAA,EAGzC,UAAU;AAAA;AAAA;AAAA,EAGV,MAAM,OAAO;AAAA,EACb,OAAO,OAAO;AAChB,CAAC;AAGM,IAAM,wBAAwB,OAAO,OAAO;AAAA,EACjD,IAAI;AAAA;AAAA;AAAA;AAAA,EAIJ,OAAO;AAAA,EACP,UAAU,OAAO;AAAA,EACjB,eAAe,OAAO,OAAO,OAAO,MAAM;AAAA,EAC1C,aAAa;AAAA,EACb,cAAc,OAAO,OAAO,aAAa;AAAA,EACzC,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA;AAAA,EAEtC,YAAY,OAAO,OAAO,OAAO,MAAM;AAAA,EACvC,eAAe,OAAO,OAAO,uBAAuB;AACtD,CAAC;AASM,IAAM,yBAAN,cAAqC,KAAK,YAAY,wBAAwB,EAalF;AAAC;AAkEG,IAAM,8BAA8B,OAAO,OAAO;AAAA,EACvD,IAAI;AAAA,EACJ,aAAa,OAAO;AAAA,EACpB,cAAc,OAAO,SAAS,OAAO,OAAO,OAAO,MAAM,CAAC;AAAA,EAC1D,WAAW,OAAO,SAAS,OAAO,OAAO,OAAO,MAAM,CAAC;AAAA,EACvD,YAAY,OAAO,SAAS,OAAO,OAAO,OAAO,MAAM,CAAC;AAAA,EACxD,eAAe,OAAO,SAAS,OAAO,OAAO,uBAAuB,CAAC;AAAA,EACrE,eAAe,OAAO,SAAS,OAAO,OAAO,OAAO,MAAM,CAAC;AAC7D,CAAC;AAGM,IAAM,wBAAwB,OAAO,OAAO;AAAA,EACjD,IAAI;AAAA;AAAA,EAEJ,aAAa;AACf,CAAC;;;ACxLD,SAAS,UAAAA,eAA2C;AAmUpD,IAAM,uBAAuB,CAC3B,QACA,SACoC;AACpC,MAAI,UAAU,KAAM,QAAOA,QAAO,QAAQ,IAAI;AAC9C,SAAOA,QAAO,QAAQ,MAAM,QAAQ,QAAQ,OAAO,WAAW,EAAE,SAAS,IAAI,CAAC,CAAC,EAAE;AAAA,IAC/EA,QAAO;AAAA,MAAQ,CAAC,WACd,WAAW,SAASA,QAAO,QAAQ,OAAO,KAAK,IAAIA,QAAO,KAAK,MAAM;AAAA,IACvE;AAAA,EACF;AACF;AAqBO,IAAM,OAAO,CAIlB,WAC4B;AAAA,EAC5B,MAAM,MAAM;AAAA,EACZ,aAAa,MAAM;AAAA,EACnB,aAAa,MAAM;AAAA,EACnB,cAAc,MAAM;AAAA,EACpB,aAAa,MAAM;AAAA,EACnB,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,MAC5B,qBAAqB,MAAM,aAAa,IAAI,EAAE;AAAA,IAC5CA,QAAO;AAAA,MAAQ,CAAC,YACd,MAAM;AAAA,QACJ;AAAA,QAGA,EAAE,KAAK,OAAO;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AACJ;AAsWO,SAAS,aAYd,eAYA;AACA,SAAO,CAAC,YAAY;AAClB,UAAM;AAAA,MACJ,SAAS;AAAA,MACT,GAAG;AAAA,IACL,IAGI,WAAW,CAAC;AAEhB,UAAM,mBAAmB,OAAO,KAAK,IAAI,EAAE,SAAS;AACpD,UAAM,OAAO,cAAc,mBAAoB,OAAoB,MAAS;AAE5E,WAAO;AAAA,MACL,GAAG;AAAA,MACH,SAAS,mBAAmB,KAAK;AAAA,IACnC;AAAA,EACF;AACF;;;ACjwBA,SAAS,UAAAC,eAAc;AAEhB,IAAM,kBAAkBA,QAAO,OAAO;AAAA,EAC3C,MAAMA,QAAO;AAAA,EACb,SAASA,QAAO;AAAA,EAChB,QAAQA,QAAO,SAASA,QAAO,MAAM;AAAA,EACrC,SAASA,QAAO,SAASA,QAAO,OAAO;AAAA,EACvC,WAAWA,QAAO,SAASA,QAAO,OAAO;AAC3C,CAAC;AAQM,IAAM,aAAa;AAAA,EACxB,IAAI,CAAI,UAA4B,EAAE,IAAI,MAAM,KAAK;AAAA,EACrD,MAAM,CAAY,WAAqC,EAAE,IAAI,OAAO,MAAM;AAC5E;AAEA,IAAM,mBAAmBA,QAAO,MAAM;AAAA,EACpCA,QAAO,OAAO,EAAE,IAAIA,QAAO,QAAQ,IAAI,GAAG,MAAMA,QAAO,QAAQ,CAAC;AAAA,EAChEA,QAAO,OAAO,EAAE,IAAIA,QAAO,QAAQ,KAAK,GAAG,OAAO,gBAAgB,CAAC;AACrE,CAAC;AAED,IAAM,sBAAsBA,QAAO,GAAG,gBAAgB;AAE/C,IAAM,eAAe,CAAC,UAC3B,oBAAoB,KAAK;;;AC3B3B,SAAS,QAAAC,OAAM,UAAAC,SAAQ,UAAAC,eAAc;AAYrC,IAAM,mBAAmB,CAAO,WAC9BC,QAAO,mBAAmBA,QAAO,uBAAuB,MAAM,CAAU;AAK1E,IAAM,gBAAgBA,QAAO,OAAOA,QAAO,QAAQA,QAAO,OAAO;AAEjE,IAAM,YAAYA,QAAO;AAEzB,IAAM,mBAAmBA,QAAO,OAAO;AAAA,EACrC,QAAQA,QAAO;AAAA,IACbA,QAAO,OAAO;AAAA,MACZ,IAAIA,QAAO;AAAA,MACX,MAAMA,QAAO;AAAA,IACf,CAAC;AAAA,EACH;AACF,CAAC;AAED,IAAM,kBAAkBA,QAAO,OAAO;AAAA,EACpC,IAAIA,QAAO;AAAA,EACX,SAASA,QAAO;AAAA,EAChB,MAAMA,QAAO;AAAA,EACb,UAAUA,QAAO;AACnB,CAAC;AAED,IAAM,oBAAoBA,QAAO,OAAO;AAAA,EACtC,SAASA,QAAO,MAAM,eAAe;AACvC,CAAC;AAED,IAAM,qBAAqBA,QAAO,OAAO;AAAA,EACvC,MAAMA,QAAO;AAAA,EACb,OAAOA,QAAO,SAAS,SAAS;AAAA,EAChC,UAAUA,QAAO,SAASA,QAAO,MAAM;AACzC,CAAC;AAED,IAAM,sBAAsBA,QAAO,OAAO;AAAA,EACxC,IAAIA,QAAO;AAAA,EACX,KAAKA,QAAO;AAAA,EACZ,cAAcA,QAAO;AACvB,CAAC;AAED,IAAM,qBAAqBA,QAAO,OAAO;AAAA,EACvC,IAAIA,QAAO;AACb,CAAC;AAED,IAAM,2BAA2BA,QAAO,OAAO;AAAA,EAC7C,IAAIA,QAAO;AAAA,EACX,aAAaA,QAAO;AACtB,CAAC;AAED,IAAM,qBAAqBA,QAAO,OAAO;AAAA,EACvC,IAAIA,QAAO;AAAA,EACX,QAAQA,QAAO,SAAS,CAAC,YAAY,SAAS,CAAC;AACjD,CAAC;AAED,IAAM,qBAAqBA,QAAO,OAAO;AAAA,EACvC,QAAQA,QAAO,MAAM,KAAK;AAC5B,CAAC;AAED,IAAM,kBAAkBA,QAAO,OAAO;AAAA,EACpC,WAAWA,QAAO,MAAMA,QAAO,MAAM;AACvC,CAAC;AAED,IAAM,gBAAgBA,QAAO,OAAO;AAAA,EAClC,SAASA,QAAO;AAClB,CAAC;AAED,IAAM,kBAAkBA,QAAO,OAAO;AAAA,EACpC,WAAWA,QAAO;AACpB,CAAC;AAED,IAAM,eAAeA,QAAO,OAAO;AAAA,EACjC,IAAIA,QAAO;AAAA,EACX,SAASA,QAAO,SAASA,QAAO,MAAM;AAAA,EACtC,MAAMA,QAAO;AAAA,EACb,MAAMA,QAAO;AAAA,EACb,KAAKA,QAAO,SAASA,QAAO,MAAM;AAAA,EAClC,UAAUA,QAAO;AAAA,EACjB,WAAWA,QAAO;AAAA,EAClB,YAAYA,QAAO;AAAA,EACnB,SAASA,QAAO;AAAA,EAChB,SAASA,QAAO;AAClB,CAAC;AAED,IAAM,oBAAoBA,QAAO,OAAO;AAAA,EACtC,SAASA,QAAO,MAAM,YAAY;AACpC,CAAC;AAED,IAAM,qBAAqBA,QAAO,OAAO;AAAA,EACvC,KAAKA,QAAO;AACd,CAAC;AAED,IAAM,sBAAsBA,QAAO,OAAO;AAAA,EACxC,SAASA,QAAO,MAAM,qBAAqB;AAC7C,CAAC;AAED,IAAM,qBAAqBA,QAAO,OAAO;AAAA,EACvC,UAAUA,QAAO;AAAA,EACjB,IAAIA,QAAO;AAAA,EACX,MAAMA,QAAO;AAAA,EACb,SAASA,QAAO;AAAA,EAChB,KAAKA,QAAO,SAASA,QAAO,MAAM;AAAA,EAClC,UAAUA,QAAO,SAASA,QAAO,MAAM;AAAA,EACvC,MAAMA,QAAO,SAASA,QAAO,MAAM;AAAA,EACnC,UAAUA,QAAO,SAASA,QAAO,OAAO;AAAA,EACxC,WAAWA,QAAO,SAASA,QAAO,SAAS,CAAC,UAAU,OAAO,CAAC,CAAC;AAAA,EAC/D,SAASA,QAAO,SAASA,QAAO,MAAM;AAAA,EACtC,MAAMA,QAAO,SAASA,QAAO,MAAMA,QAAO,MAAM,CAAC;AAAA,EACjD,KAAKA,QAAO,SAASA,QAAO,OAAOA,QAAO,QAAQA,QAAO,MAAM,CAAC;AAClE,CAAC;AAED,IAAM,sBAAsBA,QAAO,OAAO;AAAA,EACxC,OAAOA,QAAO,SAASA,QAAO,MAAM;AAAA,EACpC,UAAUA,QAAO,SAASA,QAAO,MAAM;AAAA,EACvC,cAAcA,QAAO,SAASA,QAAO,OAAO;AAAA,EAC5C,OAAOA,QAAO,SAASA,QAAO,MAAM;AACtC,CAAC;AAED,IAAM,uBAAuBA,QAAO,OAAO;AAAA,EACzC,SAASA,QAAO,MAAM,kBAAkB;AAC1C,CAAC;AAED,IAAM,gBAAgBA,QAAO,OAAO;AAAA,EAClC,IAAIA,QAAO;AAAA,EACX,OAAOA,QAAO;AAChB,CAAC;AAED,IAAM,wBAAwBA,QAAO,OAAO;AAAA,EAC1C,QAAQ;AAAA,EACR,OAAOA,QAAO;AAAA,EACd,MAAMA,QAAO,SAASA,QAAO,MAAM;AAAA,EACnC,QAAQA,QAAO;AACjB,CAAC;AAED,IAAM,yBAAyBA,QAAO,OAAO;AAAA,EAC3C,QAAQA,QAAO;AACjB,CAAC;AAED,IAAM,uBAAuBA,QAAO,OAAO;AAAA,EACzC,IAAIA,QAAO;AAAA,EACX,aAAaA,QAAO;AACtB,CAAC;AAED,IAAM,0BAA0BA,QAAO,OAAO;AAAA,EAC5C,QAAQ;AACV,CAAC;AAED,IAAM,6BAA6BA,QAAO,OAAO;AAAA,EAC/C,QAAQ;AAAA,EACR,SAASA,QAAO;AAClB,CAAC;AAED,IAAM,yBAAyBA,QAAO,OAAO;AAAA,EAC3C,OAAOA,QAAO;AAAA,EACd,QAAQ;AAAA,EACR,SAASA,QAAO;AAAA,EAChB,OAAO;AACT,CAAC;AAED,IAAM,4BAA4BA,QAAO,OAAO;AAAA,EAC9C,OAAOA,QAAO;AAAA,EACd,QAAQ;AAAA,EACR,SAASA,QAAO;AAClB,CAAC;AAED,IAAM,2BAA2BA,QAAO,OAAO;AAAA,EAC7C,UAAUA,QAAO,MAAM,oBAAoB;AAC7C,CAAC;AAED,IAAM,8BAA8BA,QAAO,OAAO;AAAA,EAChD,SAASA,QAAO,OAAO,oBAAoB;AAC7C,CAAC;AAED,IAAM,0BAA0BA,QAAO,OAAO;AAAA,EAC5C,SAAS;AACX,CAAC;AAED,IAAM,wBAAwBA,QAAO,OAAO;AAAA,EAC1C,aAAaA,QAAO,MAAM,aAAa;AACzC,CAAC;AAED,IAAM,yBAAyBA,QAAO,OAAO;AAAA,EAC3C,IAAIA,QAAO;AACb,CAAC;AAED,IAAM,+BAA+BA,QAAO,OAAO;AAAA,EACjD,IAAIA,QAAO;AAAA,EACX,aAAaA,QAAO;AACtB,CAAC;AAED,IAAM,yBAAyBA,QAAO,OAAO;AAAA,EAC3C,QAAQA,QAAO,MAAM,KAAK;AAC5B,CAAC;AAED,IAAM,eAAeA,QAAO,OAAO;AAAA,EACjC,IAAIA,QAAO;AAAA,EACX,SAASA,QAAO;AAAA,EAChB,SAASA,QAAO;AAAA,EAChB,QAAQ;AAAA,EACR,UAAUA,QAAO;AAAA,EACjB,WAAWA,QAAO;AAAA,EAClB,WAAWA,QAAO;AACpB,CAAC;AAED,IAAM,qBAAqBA,QAAO,OAAO;AAAA,EACvC,UAAUA,QAAO,MAAM,YAAY;AACrC,CAAC;AAED,IAAM,oBAAoBA,QAAO,OAAO;AAAA,EACtC,aAAaA,QAAO;AAAA,EACpB,SAASA,QAAO;AAAA,EAChB,QAAQ;AAAA,EACR,UAAUA,QAAO,SAASA,QAAO,MAAM;AACzC,CAAC;AAED,IAAM,oBAAoBA,QAAO,OAAO;AAAA,EACtC,IAAIA,QAAO;AAAA,EACX,aAAaA,QAAO;AAAA,EACpB,SAASA,QAAO,SAASA,QAAO,MAAM;AAAA,EACtC,QAAQA,QAAO,SAAS,sBAAsB;AAAA,EAC9C,UAAUA,QAAO,SAASA,QAAO,MAAM;AACzC,CAAC;AAED,IAAM,oBAAoBA,QAAO,OAAO;AAAA,EACtC,IAAIA,QAAO;AAAA,EACX,aAAaA,QAAO;AACtB,CAAC;AAED,IAAM,uBAAuBA,QAAO,OAAO;AAAA,EACzC,QAAQ;AACV,CAAC;AAED,IAAM,kBAAkBA,QAAO,OAAO;AAAA,EACpC,UAAUA,QAAO;AAAA,EACjB,SAASA,QAAO,SAASA,QAAO,OAAOA,QAAO,QAAQA,QAAO,MAAM,CAAC;AAAA,EACpE,aAAaA,QAAO,SAASA,QAAO,OAAOA,QAAO,QAAQA,QAAO,MAAM,CAAC;AAC1E,CAAC;AAED,IAAM,mBAAmBA,QAAO,OAAO;AAAA,EACrC,kBAAkBA,QAAO,OAAO,aAAa;AAAA,EAC7C,qBAAqBA,QAAO,OAAOA,QAAO,MAAM;AAAA,EAChD,6BAA6BA,QAAO,OAAO,aAAa;AAAA,EACxD,gCAAgCA,QAAO,OAAOA,QAAO,MAAM;AAAA,EAC3D,wBAAwBA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACnD,6BAA6BA,QAAO;AAAA,EACpC,2BAA2BA,QAAO;AACpC,CAAC;AAED,IAAM,kBAAkBA,QAAO,OAAO;AAAA,EACpC,iBAAiBA,QAAO,SAASA,QAAO,MAAM;AAAA,EAC9C,UAAUA,QAAO;AAAA,EACjB,cAAcA,QAAO;AAAA,EACrB,UAAUA,QAAO;AAAA,EACjB,eAAeA,QAAO,SAASA,QAAO,MAAM;AAAA,EAC5C,aAAaA,QAAO,SAASA,QAAO,MAAM;AAAA,EAC1C,SAASA,QAAO,SAASA,QAAO,OAAOA,QAAO,QAAQA,QAAO,MAAM,CAAC;AAAA,EACpE,aAAaA,QAAO,SAASA,QAAO,OAAOA,QAAO,QAAQA,QAAO,MAAM,CAAC;AAAA,EACxE,UAAU;AACZ,CAAC;AAED,IAAM,mBAAmBA,QAAO,OAAO;AAAA,EACrC,WAAWA,QAAO;AAAA,EAClB,kBAAkBA,QAAO,OAAOA,QAAO,MAAM;AAAA,EAC7C,qBAAqBA,QAAO,OAAOA,QAAO,OAAO,EAAE,cAAcA,QAAO,OAAO,CAAC,CAAC;AAAA,EACjF,cAAcA,QAAO;AACvB,CAAC;AAED,IAAM,mBAAmBA,QAAO,OAAO;AAAA,EACrC,iBAAiBA,QAAO,SAASA,QAAO,MAAM;AAAA,EAC9C,WAAWA,QAAO;AACpB,CAAC;AAED,IAAM,oBAAoBA,QAAO,OAAO;AAAA,EACtC,WAAWA,QAAO;AACpB,CAAC;AAED,IAAM,sBAAsB,iBAAiB,gBAAgB;AAC7D,IAAM,uBAAuB,iBAAiB,iBAAiB;AAC/D,IAAM,wBAAwB,iBAG5B,kBAAkB;AACpB,IAAM,yBAAyB,iBAAiB,mBAAmB;AACnE,IAAM,wBAAwB,iBAG5B,kBAAkB;AACpB,IAAM,8BAA8B,iBAGlC,wBAAwB;AAC1B,IAAM,wBAAwB,iBAAiB,kBAAkB;AACjE,IAAM,wBAAwB,iBAAiB,kBAAkB;AACjE,IAAM,qBAAqB,iBAAiB,eAAe;AAC3D,IAAM,mBAAmB,iBAAiB,aAAa;AACvD,IAAM,qBAAqB,iBAAiB,eAAe;AAC3D,IAAM,uBAAuB,iBAAiB,iBAAiB;AAC/D,IAAM,wBAAwB,iBAG5B,kBAAkB;AACpB,IAAM,yBAAyB,iBAAiB,mBAAmB;AACnE,IAAM,yBAAyB,iBAG7B,mBAAmB;AACrB,IAAM,0BAA0B,iBAAiB,oBAAoB;AACrE,IAAM,2BAA2B,iBAG/B,qBAAqB;AACvB,IAAM,4BAA4B,iBAAiB,sBAAsB;AACzE,IAAM,0BAA0B,iBAG9B,oBAAoB;AACtB,IAAM,6BAA6B,iBAGjC,uBAAuB;AACzB,IAAM,gCAAgC,iBAGpC,0BAA0B;AAC5B,IAAM,4BAA4B,iBAGhC,sBAAsB;AACxB,IAAM,+BAA+B,iBAGnC,yBAAyB;AAC3B,IAAM,8BAA8B,iBAAiB,wBAAwB;AAC7E,IAAM,iCAAiC,iBAAiB,2BAA2B;AACnF,IAAM,6BAA6B,iBAAiB,uBAAuB;AAC3E,IAAM,2BAA2B,iBAAiB,qBAAqB;AACvE,IAAM,4BAA4B,iBAGhC,sBAAsB;AACxB,IAAM,kCAAkC,iBAGtC,4BAA4B;AAC9B,IAAM,4BAA4B,iBAAiB,sBAAsB;AACzE,IAAM,wBAAwB,iBAAiB,kBAAkB;AACjE,IAAM,uBAAuB,iBAG3B,iBAAiB;AACnB,IAAM,uBAAuB,iBAG3B,iBAAiB;AACnB,IAAM,uBAAuB,iBAG3B,iBAAiB;AACnB,IAAM,0BAA0B,iBAAiB,oBAAoB;AACrE,IAAM,qBAAqB,iBAGzB,eAAe;AACjB,IAAM,sBAAsB,iBAAiB,gBAAgB;AAC7D,IAAM,qBAAqB,iBAGzB,eAAe;AACjB,IAAM,sBAAsB,iBAAiB,gBAAgB;AAC7D,IAAM,sBAAsB,iBAG1B,gBAAgB;AAClB,IAAM,uBAAuB,iBAAiB,iBAAiB;AAM/D,IAAM,8BAAN,cAA0CC,MAAK,YAAY,6BAA6B,EAErF;AAAC;AAEJ,IAAM,8BAAN,cAA0CA,MAAK,YAAY,6BAA6B,EAGrF;AAAC;AAEJ,IAAM,sBAAsB,CAC1B,QACA,UACG,OAAO,KAAK,CAAC,UAAU,MAAM,SAAS,SAAS,OAAO,MAAM,EAAE,MAAM,KAAK;AAE9E,IAAM,oBAAoB,CACxB,QACA,UACG;AACH,MAAI,UAAU,QAAW;AACvB,UAAM,CAAC,SAAS,IAAI;AACpB,WAAO,aAAa,OAAO,WAAW,IAClCC,QAAO,QAAQ,OAAO,UAAU,EAAE,CAAC,IACnCA,QAAO;AAAA,MACL,IAAI,4BAA4B;AAAA,QAC9B,OAAO;AAAA,QACP,SACE,OAAO,WAAW,IACd,qCACA;AAAA,MACR,CAAC;AAAA,IACH;AAAA,EACN;AAEA,QAAM,QAAQ,oBAAoB,QAAQ,KAAK;AAC/C,SAAO,QACHA,QAAO,QAAQ,OAAO,MAAM,EAAE,CAAC,IAC/BA,QAAO;AAAA,IACL,IAAI,4BAA4B;AAAA,MAC9B,OAAO;AAAA,MACP,SAAS,kBAAkB,KAAK;AAAA,IAClC,CAAC;AAAA,EACH;AACN;AAEA,IAAM,kCAAkC,CACtC,UAC2B;AAC3B,MAAI,MAAM,SAAS,QAAQ;AACzB,WAAO;AAAA,EACT;AACA,MAAI,MAAM,SAAS,UAAU;AAC3B,WAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU,SAAS,KAAK,MAAM,QAAQ;AAAA,MACtC,GAAI,MAAM,gBAAgB,EAAE,eAAe,QAAQ,KAAK,MAAM,aAAa,EAAE,IAAI,CAAC;AAAA,IACpF;AAAA,EACF;AACA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,cAAc,aAAa,KAAK,MAAM,YAAY;AAAA,EACpD;AACF;AAEA,IAAM,mBAAmB,CAAC,MAAc,SAAiB,YACvD,WAAW,KAAK;AAAA,EACd;AAAA,EACA;AAAA,EACA,GAAI,YAAY,SAAY,CAAC,IAAI,EAAE,QAAQ;AAC7C,CAAC;AAEH,IAAM,oBAAoB,CAAC,UACzB,QACIA,QAAO,QAAQ,MAAM,QAAQ,OAAO,EAAE,CAAC,IACvCA,QAAO;AAAA,EACL,IAAI,4BAA4B;AAAA,IAC9B,SAAS;AAAA,EACX,CAAC;AACH;AAEN,IAAM,eAAe,CAAC,YAQf;AAAA,EACL,IAAI,OAAO,OAAO,EAAE;AAAA,EACpB,SAAS,OAAO,OAAO,OAAO;AAAA,EAC9B,SAAS,OAAO;AAAA,EAChB,QAAQ,OAAO;AAAA,EACf,UAAU,OAAO;AAAA,EACjB,WAAW,OAAO,UAAU,QAAQ;AAAA,EACpC,WAAW,OAAO,UAAU,QAAQ;AACtC;AAEO,IAAM,kBAAkB,aAAa,CAAC,UAAkC,CAAC,OAAO;AAAA,EACrF,IAAI;AAAA,EACJ,aAAa;AAAA,EACb,SAAS,OAAO,CAAC;AAAA,EACjB,WAAW,OAAO,CAAC;AAAA,EAEnB,eAAe,MAAM;AAAA,IACnB;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,QACL,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,QAAQ;AAAA,YACb,QAAQ,IAAI,OAAO,IAAI,CAAC,OAAO,EAAE,IAAI,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE;AAAA,UACpE,CAAC;AAAA,QACL,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,IAAI,QAAQ,KAAK,GAAG,CAAC,UAAU;AAAA,YACxC,SAAS,KAAK,IAAI,CAAC,OAAO;AAAA,cACxB,IAAI,OAAO,EAAE,EAAE;AAAA,cACf,SAAS,OAAO,EAAE,OAAO;AAAA,cACzB,MAAM,EAAE;AAAA,cACR,UAAU,EAAE;AAAA,YACd,EAAE;AAAA,UACJ,EAAE;AAAA,QACN,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,aAAa;AACtB,kBAAM,aAAa,OAAO,kBAAkB,QAAQ,UAAU;AAC9D,gBAAI,MAAM,UAAU;AAClB,oBAAM,YAAY,OAAO,IAAI,QAAQ,UAAU;AAC/C,kBAAI,CAAC,UAAU,SAAS,MAAM,QAAQ,GAAG;AACvC,uBAAO;AAAA,kBACL;AAAA,kBACA,oCAAoC,MAAM,QAAQ;AAAA,kBAClD,EAAE,UAAU;AAAA,gBACd;AAAA,cACF;AAAA,YACF;AACA,kBAAM,cAAc,OAAO,kBAAkB,IAAI,QAAQ,MAAM,KAAK;AAEpE,kBAAM,WAAW,OAAO,WAAW;AACnC,kBAAM,MAAM,IAAI,IAAI,GAAG,UAAU,UAAU;AAC3C,gBAAI,aAAa,IAAI,SAAS,WAAW;AACzC,gBAAI,aAAa,IAAI,QAAQ,MAAM,IAAI;AACvC,gBAAI,aAAa,IAAI,YAAY,QAAQ;AACzC,gBAAI,MAAM,SAAU,KAAI,aAAa,IAAI,YAAY,MAAM,QAAQ;AACnE,mBAAO;AAAA,cACL,IAAI;AAAA,cACJ,KAAK,IAAI,SAAS;AAAA,cAClB,cACE;AAAA,YACJ;AAAA,UACF,CAAC,EAAE;AAAA,YACDA,QAAO,UAAU;AAAA,cACf,6BAA6B,CAAC,EAAE,QAAQ,MACtCA,QAAO,QAAQ,iBAAiB,iCAAiC,OAAO,CAAC;AAAA,cAC3E,6BAA6B,CAAC,EAAE,SAAS,MAAM,MAC7CA,QAAO,QAAQ,iBAAiB,mBAAmB,SAAS,EAAE,MAAM,CAAC,CAAC;AAAA,YAC1E,CAAC;AAAA,UACH;AAAA,QACJ,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,IAAI,QAAQ,OAAO,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,IAAI,MAAM,IAAI,OAAO,EAAE;AAAA,QACnF,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,IAAI,QAAQ,OAAO,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE;AAAA,QACrE,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,IAAI,QAAQ,UAAU,GAAG,CAAC,eAAe,EAAE,UAAU,EAAE;AAAA,QACtE,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,YACX,kBAAkB;AAAA,YAClB,qBAAqB;AAAA,UACvB;AAAA,UACA,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,aAAa;AACtB,kBAAM,cAAc,OAAO,kBAAkB,IAAI,QAAQ,MAAM,WAAW;AAC1E,mBAAO,OAAOA,QAAO;AAAA,cACnB,IAAI,QAAQ,OAAO;AAAA,gBACjB,IAAI,SAAS,KAAK,MAAM,EAAE;AAAA,gBAC1B,aAAa,QAAQ,KAAK,WAAW;AAAA,cACvC,CAAC;AAAA,cACD,EAAE,SAAS,KAAK;AAAA,YAClB;AAAA,UACF,CAAC;AAAA,QACL,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,IAAI,KAAK,QAAQ,KAAK,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE;AAAA,QAClE,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,IAAI,KAAK,QAAQ,OAAO,MAAM,GAAG,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE;AAAA,QAC7E,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,KAAK,MAAM;AAChB,kBAAM,QAAQ,MAAM,OAAO,KAAK,EAAE,YAAY,KAAK;AACnD,kBAAM,WAAW,MAAM,UAAU,KAAK;AACtC,kBAAM,eAAe,MAAM,gBAAgB;AAC3C,kBAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,MAAM,MAAM,SAAS,EAAE,CAAC;AACvD,kBAAM,UAAU,IAAI,KAAK,QACtB,QAAQ,EACR,OAAO,CAAC,WAAY,WAAW,OAAO,aAAa,WAAW,IAAK,EACnE,OAAO,CAAC,WAAY,eAAe,OAAO,aAAa,OAAO,IAAK,EACnE,OAAO,CAAC,WAAW;AAClB,kBAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,oBAAM,SACJ,GAAG,OAAO,IAAI,IAAI,OAAO,OAAO,IAAI,OAAO,QAAQ,IAAI,OAAO,EAAE,GAAG,YAAY;AACjF,qBAAO,OAAO,SAAS,KAAK;AAAA,YAC9B,CAAC,EACA,MAAM,GAAG,KAAK;AACjB,mBAAO,EAAE,QAAQ;AAAA,UACnB,CAAC;AAAA,QACL,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,YACX,kBAAkB;AAAA,YAClB,qBAAqB;AAAA,UACvB;AAAA,UACA,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,aAAa;AACtB,kBAAM,cAAc,OAAO,kBAAkB,IAAI,QAAQ,MAAM,OAAO,KAAK;AAC3E,kBAAM,cAAc,OAAO,kBAAkB,IAAI,QAAQ,MAAM,KAAK;AACpE,kBAAM,SAAS,OAAO,IAAI,KAAK,QAAQ,UAAU;AAAA,cAC/C,GAAG;AAAA,cACH,QAAQ,EAAE,GAAG,MAAM,QAAQ,OAAO,YAAY;AAAA,cAC9C,OAAO;AAAA,YACT,CAAC;AACD,mBAAO,EAAE,OAAO;AAAA,UAClB,CAAC;AAAA,QACL,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,YACX,kBAAkB;AAAA,YAClB,qBAAqB;AAAA,UACvB;AAAA,UACA,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,aAAa;AACtB,kBAAM,cAAc,OAAO,kBAAkB,IAAI,QAAQ,MAAM,WAAW;AAC1E,mBAAO,OAAOA,QAAO,GAAG,IAAI,KAAK,QAAQ,QAAQ,EAAE,GAAG,OAAO,YAAY,CAAC,GAAG;AAAA,cAC3E,WAAW;AAAA,YACb,CAAC;AAAA,UACH,CAAC;AAAA,QACL,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,YACX,kBAAkB;AAAA,YAClB,qBAAqB;AAAA,UACvB;AAAA,UACA,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,aAAa;AACtB,kBAAM,cAAc,OAAO,kBAAkB,IAAI,QAAQ,MAAM,WAAW;AAC1E,mBAAO,OAAOA,QAAO,GAAG,IAAI,KAAK,QAAQ,OAAO,EAAE,GAAG,OAAO,YAAY,CAAC,GAAG;AAAA,cAC1E,SAAS;AAAA,YACX,CAAC;AAAA,UACH,CAAC;AAAA,QACL,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,aAAa;AACtB,kBAAM,cAAc,OAAO,kBAAkB,IAAI,QAAQ,MAAM,OAAO,KAAK;AAC3E,kBAAM,WAAW,OAAO,IAAI,KAAK,QAAQ,aAAa;AAAA,cACpD,QAAQ,EAAE,IAAI,MAAM,OAAO,IAAI,OAAO,QAAQ,KAAK,WAAW,EAAE;AAAA,YAClE,CAAC;AACD,mBAAO,EAAE,SAAS;AAAA,UACpB,CAAC;AAAA,QACL,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,aAAa;AACtB,kBAAM,cAAc,OAAO,kBAAkB,IAAI,QAAQ,MAAM,OAAO,KAAK;AAC3E,kBAAM,UAAU,OAAO,IAAI,KAAK,QAAQ,eAAe;AAAA,cACrD,QAAQ,EAAE,IAAI,MAAM,OAAO,IAAI,OAAO,QAAQ,KAAK,WAAW,EAAE;AAAA,cAChE,SAAS,MAAM;AAAA,YACjB,CAAC;AACD,mBAAO,EAAE,QAAQ;AAAA,UACnB,CAAC;AAAA,QACL,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,YACX,kBAAkB;AAAA,YAClB,qBAAqB;AAAA,UACvB;AAAA,UACA,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,aAAa;AACtB,kBAAM,QAAQ,OAAO,kBAAkB,IAAI,QAAQ,MAAM,KAAK;AAC9D,kBAAM,cAAc,OAAO,kBAAkB,IAAI,QAAQ,MAAM,OAAO,KAAK;AAC3E,kBAAM,UAAU,OAAO,IAAI,KAAK,QAAQ,WAAW;AAAA,cACjD,OAAO,QAAQ,KAAK,KAAK;AAAA,cACzB,QAAQ,EAAE,IAAI,MAAM,OAAO,IAAI,OAAO,QAAQ,KAAK,WAAW,EAAE;AAAA,cAChE,SAAS,MAAM;AAAA,cACf,OAAO,gCAAgC,MAAM,KAAK;AAAA,YACpD,CAAC;AACD,mBAAO,EAAE,QAAQ;AAAA,UACnB,CAAC;AAAA,QACL,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,YACX,kBAAkB;AAAA,YAClB,qBAAqB;AAAA,UACvB;AAAA,UACA,aAAa;AAAA,UACb,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,aAAa;AACtB,kBAAM,QAAQ,OAAO,kBAAkB,IAAI,QAAQ,MAAM,KAAK;AAC9D,kBAAM,cAAc,OAAO,kBAAkB,IAAI,QAAQ,MAAM,OAAO,KAAK;AAC3E,mBAAO,OAAOA,QAAO;AAAA,cACnB,IAAI,KAAK,QAAQ,cAAc;AAAA,gBAC7B,OAAO,QAAQ,KAAK,KAAK;AAAA,gBACzB,QAAQ,EAAE,IAAI,MAAM,OAAO,IAAI,OAAO,QAAQ,KAAK,WAAW,EAAE;AAAA,gBAChE,SAAS,MAAM;AAAA,cACjB,CAAC;AAAA,YACH;AAAA,UACF,CAAC;AAAA,QACL,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,IAAI,YAAY,KAAK,GAAG,CAAC,iBAAiB,EAAE,YAAY,EAAE;AAAA,QACzE,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,IAAI,YAAY,OAAO,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE;AAAA,QACzE,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,IAAI,YAAY,UAAU,GAAG,CAAC,eAAe,EAAE,UAAU,EAAE;AAAA,QAC1E,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,YACX,kBAAkB;AAAA,YAClB,qBAAqB;AAAA,UACvB;AAAA,UACA,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,aAAa;AACtB,kBAAM,cAAc,OAAO,kBAAkB,IAAI,QAAQ,MAAM,WAAW;AAC1E,mBAAO,OAAOA,QAAO;AAAA,cACnB,IAAI,YAAY,OAAO;AAAA,gBACrB,IAAI,aAAa,KAAK,MAAM,EAAE;AAAA,gBAC9B,aAAa,QAAQ,KAAK,WAAW;AAAA,cACvC,CAAC;AAAA,cACD,EAAE,SAAS,KAAK;AAAA,YAClB;AAAA,UACF,CAAC;AAAA,QACL,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,IAAI,KAAK,SAAS,KAAK,GAAG,CAAC,cAAc;AAAA,YAClD,UAAU,SAAS,IAAI,YAAY;AAAA,UACrC,EAAE;AAAA,QACN,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,YACX,kBAAkB;AAAA,YAClB,qBAAqB;AAAA,UACvB;AAAA,UACA,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,aAAa;AACtB,kBAAM,cAAc,OAAO,kBAAkB,IAAI,QAAQ,MAAM,WAAW;AAC1E,kBAAM,SAAS,OAAO,IAAI,KAAK,SAAS,OAAO,EAAE,GAAG,OAAO,YAAY,CAAC;AACxE,mBAAO,EAAE,QAAQ,aAAa,MAAM,EAAE;AAAA,UACxC,CAAC;AAAA,QACL,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,YACX,kBAAkB;AAAA,YAClB,qBAAqB;AAAA,UACvB;AAAA,UACA,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,aAAa;AACtB,kBAAM,cAAc,OAAO,kBAAkB,IAAI,QAAQ,MAAM,WAAW;AAC1E,kBAAM,SAAS,OAAO,IAAI,KAAK,SAAS,OAAO,EAAE,GAAG,OAAO,YAAY,CAAC;AACxE,mBAAO,EAAE,QAAQ,aAAa,MAAM,EAAE;AAAA,UACxC,CAAC;AAAA,QACL,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,YACX,kBAAkB;AAAA,YAClB,qBAAqB;AAAA,UACvB;AAAA,UACA,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,aAAa;AACtB,kBAAM,cAAc,OAAO,kBAAkB,IAAI,QAAQ,MAAM,WAAW;AAC1E,mBAAO,OAAOA,QAAO,GAAG,IAAI,KAAK,SAAS,OAAO,EAAE,GAAG,OAAO,YAAY,CAAC,GAAG;AAAA,cAC3E,SAAS;AAAA,YACX,CAAC;AAAA,UACH,CAAC;AAAA,QACL,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrB,IAAI,MACD,MAAM,KAAK,EACX;AAAA,YACCA,QAAO;AAAA,cAAS;AAAA,cAAmB,CAAC,EAAE,QAAQ,MAC5CA,QAAO,QAAQ,iBAAiB,sBAAsB,OAAO,CAAC;AAAA,YAChE;AAAA,UACF;AAAA,QACN,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,aAAa;AACtB,kBAAM,aAAa,OAAO,kBAAkB,QAAQ,UAAU;AAC9D,kBAAM,aAAa,OAAO,kBAAkB,IAAI,QAAQ,MAAM,eAAe;AAC7E,kBAAM,SAAS,OAAO,IAAI,MAAM,MAAM;AAAA,cACpC,UAAU,MAAM;AAAA,cAChB,SAAS,MAAM;AAAA,cACf,aAAa,MAAM;AAAA,cACnB,aAAa,MAAM,eAAe,GAAG,UAAU;AAAA,cAC/C,cAAc,MAAM;AAAA,cACpB;AAAA,cACA,UAAU,MAAM;AAAA,cAChB,UAAU,MAAM;AAAA,cAChB,eAAe,MAAM;AAAA,YACvB,CAAC;AACD,mBAAO;AAAA,cACL,GAAG;AAAA,cACH,cACE,OAAO,qBAAqB,OACxB,oQACA;AAAA,YACR;AAAA,UACF,CAAC,EAAE;AAAA,YACDA,QAAO,UAAU;AAAA,cACf,6BAA6B,CAAC,EAAE,QAAQ,MACtCA,QAAO,QAAQ,iBAAiB,8BAA8B,OAAO,CAAC;AAAA,cACxE,6BAA6B,CAAC,EAAE,SAAS,MAAM,MAC7CA,QAAO,QAAQ,iBAAiB,mBAAmB,SAAS,EAAE,MAAM,CAAC,CAAC;AAAA,cACxE,iBAAiB,CAAC,EAAE,SAAS,OAAO,iBAAiB,MACnDA,QAAO;AAAA,gBACL,iBAAiB,sBAAsB,SAAS;AAAA,kBAC9C,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,kBACzB,GAAI,mBAAmB,EAAE,iBAAiB,IAAI,CAAC;AAAA,gBACjD,CAAC;AAAA,cACH;AAAA,YACJ,CAAC;AAAA,UACH;AAAA,QACJ,CAAC;AAAA,QACD,KAAK;AAAA,UACH,MAAM;AAAA,UACN,aACE;AAAA,UACF,aAAa;AAAA,UACb,cAAc;AAAA,UACd,SAAS,CAAC,OAAO,EAAE,IAAI,MACrBA,QAAO,IAAI,aAAa;AACtB,kBAAM,QAAQ,OAAO,kBAAkB,IAAI,QAAQ,MAAM,eAAe;AACxE,mBAAO,OAAOA,QAAO,GAAG,IAAI,MAAM,OAAO,MAAM,WAAW,KAAK,GAAG;AAAA,cAChE,WAAW;AAAA,YACb,CAAC;AAAA,UACH,CAAC,EAAE;AAAA,YACDA,QAAO;AAAA,cAAS;AAAA,cAA+B,CAAC,EAAE,SAAS,MAAM,MAC/DA,QAAO,QAAQ,iBAAiB,mBAAmB,SAAS,EAAE,MAAM,CAAC,CAAC;AAAA,YACxE;AAAA,UACF;AAAA,QACJ,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACF,EAAE;;;AC/9BF,SAAiB,UAAAC,eAAc;AASxB,IAAM,kBAAkBC,QAAO,aAAa,mBAAmB;AAAA,EACpE,SAASA,QAAO;AAAA;AAAA,EAEhB,iBAAiBA,QAAO,OAAOA,QAAO,QAAQA,QAAO,OAAO;AAC9D,CAAC;AAIM,IAAM,iBAAiBA,QAAO,aAAa,kBAAkB;AAAA,EAClE,SAASA,QAAO;AAAA,EAChB,KAAKA,QAAO;AAAA;AAAA,EAEZ,eAAeA,QAAO;AACxB,CAAC;AASM,IAAM,oBAAoBA,QAAO,SAAS,CAAC,UAAU,WAAW,QAAQ,CAAC;AAGzE,IAAM,sBAAsBA,QAAO,OAAO;AAAA,EAC/C,QAAQ;AAAA;AAAA,EAER,SAASA,QAAO,SAASA,QAAO,OAAOA,QAAO,QAAQA,QAAO,OAAO,CAAC;AACvE,CAAC;AAwBM,IAAM,2BAAN,cAAuCA,QAAO,iBAA2C;AAAA,EAC9F;AAAA,EACA;AAAA,IACE,QAAQ;AAAA,IACR,QAAQA,QAAO,SAAS,CAAC,WAAW,QAAQ,CAAC;AAAA,EAC/C;AACF,EAAE;AAAC;;;ACpEH,SAAiB,UAAAC,eAAc;AA8DxB,IAAM,YAAYC,QAAO,OAAO;AAAA,EACrC,IAAI;AAAA,EACJ,SAAS;AAAA;AAAA,EAET,MAAMA,QAAO;AAAA;AAAA,EAEb,UAAUA,QAAO;AAAA,EACjB,WAAWA,QAAO;AACpB,CAAC;AAcM,IAAM,iBAAiBA,QAAO,OAAO;AAAA,EAC1C,IAAI;AAAA;AAAA;AAAA,EAGJ,OAAO;AAAA;AAAA,EAEP,MAAMA,QAAO;AAAA;AAAA,EAEb,OAAOA,QAAO;AAAA;AAAA;AAAA,EAGd,UAAUA,QAAO,SAASA,QAAO,MAAM;AACzC,CAAC;AAGM,IAAM,oBAAoBA,QAAO,OAAO;AAAA,EAC7C,IAAI;AAAA;AAAA;AAAA,EAGJ,aAAa;AACf,CAAC;;;ACtFD,SAAS,QAAAC,OAAM,UAAAC,SAAQ,iBAAiB;AACxC,YAAY,WAAW;AAMhB,IAAM,cAAN,cAA0BD,MAAK,YAAY,aAAa,EAU5D;AAAC;AAmBG,IAAM,yBAAyB;AAG/B,IAAM,4BAA4B;AAMzC,IAAM,oBAAoB,CAAC,UAA2B;AACpD,MAAI,CAAC,IAAI,SAAS,KAAK,EAAG,QAAO;AACjC,QAAM,MAAM,IAAI,IAAI,KAAK;AACzB,MAAI,IAAI,aAAa,QAAS,QAAO;AACrC,QAAM,WAAW,IAAI,SAAS,YAAY;AAC1C,SACE,aAAa,eACb,aAAa,aACb,aAAa,SACb,aAAa,WACb,SAAS,WAAW,MAAM;AAE9B;AAEO,IAAM,8BAA8B,CACzC,OACA,SAAiC,CAAC,MACtB;AACZ,MAAI,CAAC,IAAI,SAAS,KAAK,EAAG,QAAO;AACjC,QAAM,MAAM,IAAI,IAAI,KAAK;AACzB,SACE,IAAI,aAAa,YACjB,kBAAkB,KAAK,KACtB,IAAI,aAAa,WAAW,OAAO,cAAc;AAEtD;AAEO,IAAM,kCAAkC,CAC7C,OACA,QAAQ,sBACR,SAAiC,CAAC,MACvB;AACX,MAAI,4BAA4B,OAAO,MAAM,EAAG,QAAO;AAEvD,QAAM,IAAI,UAAU,GAAG,KAAK,oCAAoC;AAClE;AAMO,IAAM,yBAAyB,MAAoB,iCAA2B;AAE9E,IAAM,0BAA0B,CAAC,aAChC,iCAA2B,QAAQ;AA2BpC,IAAM,wBAAwB,CAAC,UAA8C;AAClF,QAAM,MAAM,IAAI;AAAA,IACd;AAAA,MACE,MAAM;AAAA,MACN;AAAA,MACA,MAAM;AAAA,IACR;AAAA,EACF;AACA,QAAM,YAAY,MAAM,kBAAkB;AAC1C,MAAI,aAAa,IAAI,aAAa,MAAM,QAAQ;AAChD,MAAI,aAAa,IAAI,gBAAgB,MAAM,WAAW;AACtD,MAAI,aAAa,IAAI,iBAAiB,MAAM;AAC5C,MAAI,MAAM,OAAO,SAAS,GAAG;AAC3B,QAAI,aAAa,IAAI,SAAS,MAAM,OAAO,KAAK,SAAS,CAAC;AAAA,EAC5D;AACA,MAAI,aAAa,IAAI,SAAS,MAAM,KAAK;AACzC,MAAI,aAAa,IAAI,yBAAyB,MAAM;AACpD,MAAI,aAAa,IAAI,kBAAkB,MAAM,aAAa;AAC1D,MAAI,MAAM,UAAU;AAClB,QAAI,aAAa,IAAI,YAAY,MAAM,QAAQ;AAAA,EACjD;AACA,MAAI,MAAM,aAAa;AACrB,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,WAAW,GAAG;AACtD,UAAI,aAAa,IAAI,GAAG,CAAC;AAAA,IAC3B;AAAA,EACF;AACA,SAAO,IAAI,SAAS;AACtB;AAUA,IAAM,gBAAgB,UAAU,SAAS,aAAa;AAEtD,IAAM,8BAA8B,CAAC,UAAyC;AAC5E,MAAI,iBAAiB,SAAU,QAAO;AACtC,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,WAAW;AAIjB,MAAI,SAAS,oBAAoB,SAAU,QAAO,SAAS;AAC3D,MAAI,SAAS,iBAAiB,SAAU,QAAO,SAAS;AACxD,SAAO;AACT;AAEA,IAAM,0BAA0B,CAAC,SAC/B,KACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF;AAEJ,IAAM,2BAA2B,OAAO,aAAwC;AAC9E,QAAM,SAAS,QAAQ,SAAS,MAAM,GAAG,SAAS,aAAa,IAAI,SAAS,UAAU,KAAK,EAAE;AAC7F,QAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;AACvD,QAAM,MAAM,SAAS,MAAM,SAAS,SAAS,GAAG,KAAK;AACrD,QAAM,QAAQ,CAAC,GAAG,MAAM,GAAG,GAAG,EAAE;AAChC,MAAI,YAAa,OAAM,KAAK,gBAAgB,WAAW,EAAE;AACzD,QAAM,UAAU,MAAM,wBAAwB,QAAQ;AACtD,MAAI,QAAS,OAAM,KAAK,SAAS,OAAO,EAAE;AAC1C,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,IAAM,0BAA0B,OAAO,aAAoD;AACzF,QAAM,OAAO,MAAM,QAAQ,QAAQ,EAChC,KAAK,MAAM,SAAS,MAAM,EAAE,KAAK,CAAC,EAClC;AAAA,IACC,CAAC,UAAU,MAAM,KAAK;AAAA,IACtB,MAAM;AAAA,EACR;AACF,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,WAAW,wBAAwB,KAAK,WAAW,QAAQ,GAAG,CAAC;AACrE,SAAO,SAAS,SAAS,MAAM,GAAG,SAAS,MAAM,GAAG,GAAG,CAAC,QAAQ;AAClE;AAEA,IAAM,gBAAgB,CAAC,UAAgC;AACrD,MAAI,cAAc,KAAK,EAAG,QAAO;AACjC,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,UAAM,IAAI;AAKV,UAAM,OAAO,OAAO,EAAE,UAAU,WAAW,EAAE,QAAQ;AACrD,UAAM,cACJ,OAAO,EAAE,sBAAsB,WAC3B,EAAE,oBACF,OAAO,EAAE,YAAY,WACnB,EAAE,UACF;AACR,WAAO,IAAI,YAAY;AAAA,MACrB,SAAS,gCAAgC,eAAe,QAAQ,eAAe;AAAA,MAC/E,OAAO;AAAA,MACP;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO,IAAI,YAAY;AAAA,IACrB,SAAS;AAAA,IACT;AAAA,EACF,CAAC;AACH;AAEA,IAAM,+BAA+B,CAAC,UAA+C;AACnF,MAAI,cAAc,KAAK,EAAG,QAAOC,QAAO,QAAQ,KAAK;AACrD,QAAM,OAAO,cAAc,KAAK;AAChC,QAAM,WAAW,4BAA4B,KAAK;AAClD,MAAI,CAAC,SAAU,QAAOA,QAAO,QAAQ,IAAI;AACzC,SAAOA,QAAO,QAAQ,MAAM,yBAAyB,QAAQ,CAAC,EAAE;AAAA,IAC9DA,QAAO;AAAA,MACL,CAAC,YACC,IAAI,YAAY;AAAA,QACd,SAAS,GAAG,KAAK,OAAO,KAAK,OAAO;AAAA,QACpC,OAAO,KAAK;AAAA,QACZ;AAAA,MACF,CAAC;AAAA,IACL;AAAA,EACF;AACF;AAEA,IAAM,4BAA4B,CAAC,UACjC,6BAA6B,KAAK,EAAE,KAAKA,QAAO,QAAQ,CAAC,UAAUA,QAAO,KAAK,KAAK,CAAC,CAAC;AAQxF,IAAM,iBAAiB,CACrB,UACA,oBAA4C,CAAC,MACf;AAC9B,kCAAgC,UAAU,aAAa,iBAAiB;AACxE,QAAM,MAAM,IAAI,IAAI,QAAQ;AAC5B,SAAO;AAAA,IACL,QAAQ,GAAG,IAAI,QAAQ,KAAK,IAAI,IAAI;AAAA,IACpC,gBAAgB;AAAA,EAClB;AACF;AAEA,IAAM,0BAA0B,CAC9B,UACA,WACA,UAGI,CAAC,MACyB;AAC9B,QAAM,KAAK,eAAe,UAAU,QAAQ,iBAAiB;AAC7D,QAAM,aAAa,YAAY,EAAE,GAAG,IAAI,QAAQ,UAAU,IAAI;AAC9D,SAAO,QAAQ,mCACX;AAAA,IACE,GAAG;AAAA,IACH,uCAAuC,CAAC,GAAG,QAAQ,gCAAgC;AAAA,EACrF,IACA;AACN;AAEA,IAAM,6BAA6B,CACjC,WACA,WACA,oBAA4C,CAAC,MACjB;AAC5B,QAAM,UAAmC;AAAA,IACvC,QAAQ,YAAY,QAAQ,aAAa,yBAAyB;AAAA,EACpE;AACA,MACE,kBAAkB,SAAS,KAC1B,IAAI,SAAS,SAAS,KACrB,IAAI,IAAI,SAAS,EAAE,aAAa,WAChC,kBAAkB,cAAc,MAClC;AACA,IAAC,QAA8D,2BAAqB,IAAI;AAAA,EAC1F;AACA,SAAO;AACT;AAEA,IAAM,iBAAiB,CACrB,cACA,WACqB;AACrB,MAAI,CAAC,aAAc,QAAa,WAAK;AACrC,SAAO,WAAW,UACR,wBAAkB,YAAY,IAC9B,uBAAiB,YAAY;AACzC;AAEA,IAAM,oBAAoB,CAAC,OAAyD;AAAA,EAClF,cAAc,EAAE;AAAA,EAChB,YAAY,EAAE;AAAA,EACd,eAAe,EAAE;AAAA,EACjB,YAAY,OAAO,EAAE,eAAe,WAAW,EAAE,aAAa;AAAA,EAC9D,OAAO,EAAE;AACX;AAOA,IAAM,eAAe,OAAO,aAA0C;AACpE,QAAM,OAAO,MAAM,SAChB,MAAM,EACN,KAAK,EACL;AAAA,IACC,CAAC,UAAmB;AAAA,IACpB,MAAM;AAAA,EACR;AACF,MAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,EAAE,cAAe,OAAmC;AAC3F,WAAO;AAAA,EACT;AACA,QAAM,EAAE,UAAU,UAAU,GAAG,KAAK,IAAI;AACxC,SAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG;AAAA,IACxC,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS;AAAA,IACrB,SAAS,SAAS;AAAA,EACpB,CAAC;AACH;AAEA,IAAM,+BAA+B,OACnC,IACA,QACA,aAEA;AAAA,EACE,MAAY,0CAAoC,IAAI,QAAQ,MAAM,aAAa,QAAQ,CAAC;AAC1F;AAwBK,IAAM,4BAA4B,CACvC,UAEAA,QAAO,WAAW;AAAA,EAChB,KAAK,YAAY;AACf,UAAM,KAAK,wBAAwB,MAAM,UAAU,MAAM,WAAW;AAAA,MAClE,kCAAkC,MAAM;AAAA,MACxC,mBAAmB,MAAM;AAAA,IAC3B,CAAC;AACD,UAAM,SAAuB,EAAE,WAAW,MAAM,SAAS;AACzD,UAAM,aAAa,eAAe,MAAM,cAAc,MAAM,cAAc,MAAM;AAMhF,UAAM,SAAS,IAAI,gBAAgB;AAAA,MACjC,MAAM,MAAM;AAAA,MACZ,cAAc,MAAM;AAAA,MACpB,eAAe,MAAM;AAAA,IACvB,CAAC;AACD,QAAI,MAAM,UAAU;AAClB,aAAO,IAAI,YAAY,MAAM,QAAQ;AAAA,IACvC;AACA,UAAM,WAAW,MAAY;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,2BAA2B,MAAM,UAAU,MAAM,WAAW,MAAM,iBAAiB;AAAA,IACrF;AACA,WAAO,MAAM,6BAA6B,IAAI,QAAQ,QAAQ;AAAA,EAChE;AAAA,EACA,OAAO,CAAC,UAAU;AACpB,CAAC,EAAE,KAAKA,QAAO,MAAM,yBAAyB,CAAC;AAiB1C,IAAM,4BAA4B,CACvC,UAEAA,QAAO,WAAW;AAAA,EAChB,KAAK,YAAY;AACf,UAAM,KAAK,eAAe,MAAM,UAAU,MAAM,iBAAiB;AACjE,UAAM,SAAuB,EAAE,WAAW,MAAM,SAAS;AACzD,UAAM,aAAa,eAAe,MAAM,cAAc,MAAM,cAAc,MAAM;AAChF,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,MAAM,UAAU,MAAM,OAAO,SAAS,GAAG;AAC3C,aAAO,IAAI,SAAS,MAAM,OAAO,KAAK,MAAM,kBAAkB,GAAG,CAAC;AAAA,IACpE;AACA,UAAM,WAAW,MAAY;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,2BAA2B,MAAM,UAAU,MAAM,WAAW,MAAM,iBAAiB;AAAA,IACrF;AACA,UAAM,SAAS,MAAY,uCAAiC,IAAI,QAAQ,QAAQ;AAChF,WAAO,kBAAkB,MAAM;AAAA,EACjC;AAAA,EACA,OAAO,CAAC,UAAU;AACpB,CAAC,EAAE,KAAKA,QAAO,MAAM,yBAAyB,CAAC;AAwB1C,IAAM,qBAAqB,CAChC,UAEAA,QAAO,WAAW;AAAA,EAChB,KAAK,YAAY;AACf,UAAM,KAAK,wBAAwB,MAAM,UAAU,MAAM,WAAW;AAAA,MAClE,kCAAkC,MAAM;AAAA,MACxC,mBAAmB,MAAM;AAAA,IAC3B,CAAC;AACD,UAAM,SAAuB,EAAE,WAAW,MAAM,SAAS;AACzD,UAAM,aAAa,eAAe,MAAM,cAAc,MAAM,cAAc,MAAM;AAChF,UAAM,cAAc,IAAI,gBAAgB;AACxC,QAAI,MAAM,UAAU,MAAM,OAAO,SAAS,GAAG;AAC3C,kBAAY,IAAI,SAAS,MAAM,OAAO,KAAK,MAAM,kBAAkB,GAAG,CAAC;AAAA,IACzE;AACA,QAAI,MAAM,UAAU;AAClB,kBAAY,IAAI,YAAY,MAAM,QAAQ;AAAA,IAC5C;AACA,UAAM,uBACJ,MAAM,KAAK,YAAY,KAAK,CAAC,EAAE,SAAS,IAAI,cAAc;AAC5D,UAAM,WAAW,MAAY;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA,MAAM;AAAA,MACN;AAAA,QACE,GAAG,2BAA2B,MAAM,UAAU,MAAM,WAAW,MAAM,iBAAiB;AAAA,QACtF;AAAA,MACF;AAAA,IACF;AACA,UAAM,SAAS,MAAY;AAAA,MACzB;AAAA,MACA;AAAA,MACA,MAAM,aAAa,QAAQ;AAAA,IAC7B;AACA,WAAO,kBAAkB,MAAM;AAAA,EACjC;AAAA,EACA,OAAO,CAAC,UAAU;AACpB,CAAC,EAAE,KAAKA,QAAO,MAAM,yBAAyB,CAAC;AAM1C,IAAM,qBAAqB,CAAC,UAIpB;AACb,MAAI,MAAM,cAAc,KAAM,QAAO;AACrC,QAAM,MAAM,MAAM,OAAO,KAAK,IAAI;AAClC,QAAM,OAAO,MAAM,UAAU;AAC7B,SAAO,MAAM,aAAa,MAAM;AAClC;;;AC9gBA,SAAS,QAAAC,OAAM,UAAU,UAAAC,SAAe,QAAQ,aAAAC,YAAW,QAAQ,UAAAC,eAAc;AACjF,SAAS,iBAAiB,YAAY,yBAAyB;AAoBxD,IAAM,sBAAN,cAAkCC,MAAK,YAAY,qBAAqB,EAU5E;AAAC;AAOJ,IAAM,cAAcC,QAAO,MAAMA,QAAO,MAAM;AAEvC,IAAM,uCAAuCA,QAAO,OAAO;AAAA,EAChE,UAAUA,QAAO,SAASA,QAAO,MAAM;AAAA,EACvC,uBAAuBA,QAAO,SAAS,WAAW;AAAA,EAClD,kBAAkBA,QAAO,SAAS,WAAW;AAAA,EAC7C,0BAA0BA,QAAO,SAAS,WAAW;AAAA,EACrD,wBAAwBA,QAAO,SAASA,QAAO,MAAM;AACvD,CAAC,EAAE,SAAS,EAAE,YAAY,iCAAiC,CAAC;AAGrD,IAAM,yCAAyCA,QAAO,OAAO;AAAA,EAClE,QAAQA,QAAO;AAAA,EACf,wBAAwBA,QAAO;AAAA,EAC/B,gBAAgBA,QAAO;AAAA,EACvB,uBAAuBA,QAAO,SAASA,QAAO,MAAM;AAAA,EACpD,kBAAkBA,QAAO,SAAS,WAAW;AAAA,EAC7C,0BAA0BA,QAAO,SAAS,WAAW;AAAA,EACrD,uBAAuBA,QAAO,SAAS,WAAW;AAAA,EAClD,kCAAkCA,QAAO,SAAS,WAAW;AAAA,EAC7D,uCAAuCA,QAAO,SAAS,WAAW;AAAA,EAClE,qBAAqBA,QAAO,SAASA,QAAO,MAAM;AAAA,EAClD,wBAAwBA,QAAO,SAASA,QAAO,MAAM;AAAA,EACrD,mBAAmBA,QAAO,SAASA,QAAO,MAAM;AAAA,EAChD,uCAAuCA,QAAO,SAAS,WAAW;AACpE,CAAC,EAAE,SAAS,EAAE,YAAY,mCAAmC,CAAC;AAwBvD,IAAM,+BAA+BA,QAAO,OAAO;AAAA,EACxD,WAAWA,QAAO;AAAA,EAClB,eAAeA,QAAO,SAASA,QAAO,MAAM;AAAA,EAC5C,qBAAqBA,QAAO,SAASA,QAAO,MAAM;AAAA,EAClD,0BAA0BA,QAAO,SAASA,QAAO,MAAM;AAAA,EACvD,2BAA2BA,QAAO,SAASA,QAAO,MAAM;AAAA,EACxD,yBAAyBA,QAAO,SAASA,QAAO,MAAM;AAAA,EACtD,4BAA4BA,QAAO,SAASA,QAAO,MAAM;AAAA,EACzD,aAAaA,QAAO,SAAS,WAAW;AAAA,EACxC,gBAAgBA,QAAO,SAAS,WAAW;AAAA,EAC3C,eAAeA,QAAO,SAAS,WAAW;AAAA,EAC1C,aAAaA,QAAO,SAASA,QAAO,MAAM;AAAA,EAC1C,OAAOA,QAAO,SAASA,QAAO,MAAM;AACtC,CAAC,EAAE,SAAS,EAAE,YAAY,yBAAyB,CAAC;AAGpD,IAAM,6BAA6BA,QAAO;AAAA,EACxCA,QAAO,eAAe,oCAAoC;AAC5D;AACA,IAAM,2BAA2BA,QAAO,oBAAoB,sCAAsC;AAClG,IAAM,8BAA8BA,QAAO;AAAA,EACzCA,QAAO,eAAe,4BAA4B;AACpD;AAkBA,IAAM,8BAA8B;AAEpC,IAAM,sBAAsB,CAC1B,OACA,OACA,SAAiC,CAAC,MAElCC,QAAO,IAAI;AAAA,EACT,KAAK,MAAM,gCAAgC,OAAO,OAAO,MAAM;AAAA,EAC/D,OAAO,CAAC,UACN,IAAI,oBAAoB;AAAA,IACtB,SAAS,GAAG,KAAK;AAAA,IACjB;AAAA,EACF,CAAC;AACL,CAAC;AAEH,IAAM,sCAAsC,CAC1C,UACA,SAAiC,CAAC,MAElCA,QAAO,IAAI,aAAa;AACtB,SAAO,oBAAoB,SAAS,QAAQ,UAAU,MAAM;AAC5D,SAAO,oBAAoB,SAAS,wBAAwB,0BAA0B,MAAM;AAC5F,SAAO,oBAAoB,SAAS,gBAAgB,kBAAkB,MAAM;AAC5E,MAAI,SAAS,uBAAuB;AAClC,WAAO,oBAAoB,SAAS,uBAAuB,yBAAyB,MAAM;AAAA,EAC5F;AACF,CAAC;AAEH,IAAM,oBAAoB,CACxB,QACA,YAEA,OAAO,KAAKA,QAAO,QAAQ,QAAQ,mBAAmB,gBAAgB,KAAK,CAAC;AAE9E,IAAM,cAAc,CAClB,SACA,SACA,iBAEA;AAAA,EACEA,QAAO,IAAI,aAAa;AACtB,UAAM,SAAS,OAAO,WAAW;AACjC,UAAM,WAAW,OAAO,OAAO,QAAQ,OAAO,EAAE;AAAA,MAC9CA,QAAO,cAAc;AAAA,QACnB,UAAU,SAAS,OAAO,QAAQ,aAAa,yBAAyB;AAAA,QACxE,QAAQ,MACNA,QAAO;AAAA,UACL,IAAI,oBAAoB;AAAA,YACtB,SAAS;AAAA,YACT,OAAO;AAAA,UACT,CAAC;AAAA,QACH;AAAA,MACJ,CAAC;AAAA,MACDA,QAAO;AAAA,QAAS,CAAC,UACfC,WAAU,SAAS,OAAO,qBAAqB,IAC3C,QACA,IAAI,oBAAoB;AAAA,UACtB,SAAS;AAAA,UACT;AAAA,QACF,CAAC;AAAA,MACP;AAAA,IACF;AACA,UAAM,OAAO,OAAO,SAAS,KAAK;AAAA,MAChCD,QAAO,MAAM,MAAMA,QAAO,QAAQ,EAAE,CAAC;AAAA,MACrCA,QAAO;AAAA,QACL,CAAC,UACC,IAAI,oBAAoB;AAAA,UACtB,SAAS,GAAG,YAAY;AAAA,UACxB,QAAQ,SAAS;AAAA,UACjB;AAAA,QACF,CAAC;AAAA,MACL;AAAA,IACF;AACA,WAAO,EAAE,QAAQ,SAAS,QAAQ,KAAK;AAAA,EACzC,CAAC;AAAA,EACD;AACF;AASF,IAAM,4BAA4B,CAAC,gBAAkC;AACnE,QAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,QAAM,SAAS,GAAG,IAAI,QAAQ,KAAK,IAAI,IAAI;AAC3C,QAAM,OAAO,IAAI,SAAS,QAAQ,QAAQ,EAAE;AAC5C,QAAM,OAAiB,CAAC;AACxB,MAAI,QAAQ,SAAS,KAAK;AACxB,SAAK,KAAK,GAAG,MAAM,wCAAwC,IAAI,EAAE;AAAA,EACnE;AACA,OAAK,KAAK,GAAG,MAAM,uCAAuC;AAC1D,SAAO;AACT;AAEA,IAAM,0BAA0B,CAC9B,KACA,gBACW;AACX,MAAI,CAAC,eAAe,OAAO,KAAK,WAAW,EAAE,WAAW,EAAG,QAAO;AAClE,QAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,WAAW,GAAG;AACtD,WAAO,aAAa,IAAI,KAAK,KAAK;AAAA,EACpC;AACA,SAAO,OAAO,SAAS;AACzB;AAEO,IAAM,oCAAoC,CAC/C,aACA,UAAmC,CAAC,MAKpCA,QAAO,IAAI,aAAa;AACtB,aAAW,OAAO,0BAA0B,WAAW,GAAG;AACxD,UAAM,aAAa,wBAAwB,KAAK,QAAQ,mBAAmB;AAC3E,QAAI,UAAU,kBAAkB,IAAI,UAAU,EAAE;AAAA,MAC9C,kBAAkB,UAAU,UAAU,kBAAkB;AAAA,IAC1D;AACA,eAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,QAAQ,mBAAmB,CAAC,CAAC,GAAG;AACzE,gBAAU,kBAAkB,UAAU,SAAS,MAAM,KAAK;AAAA,IAC5D;AACA,QAAI,QAAQ,oBAAoB;AAC9B,gBAAU,kBAAkB;AAAA,QAC1B;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,IACF;AAEA,UAAM,SAAS,OAAO;AAAA,MACpB;AAAA,MACA;AAAA,MACA,oDAAoD,GAAG;AAAA,IACzD;AACA,QAAI,OAAO,WAAW,OAAO,OAAO,WAAW,OAAO,OAAO,KAAK,WAAW,EAAG;AAChF,QAAI,OAAO,SAAS,OAAO,OAAO,UAAU,KAAK;AAC/C,aAAO,OAAO,IAAI,oBAAoB;AAAA,QACpC,SAAS,+CAA+C,OAAO,MAAM;AAAA,QACrE,QAAQ,OAAO;AAAA,MACjB,CAAC;AAAA,IACH;AACA,UAAM,WAAW,OAAO,2BAA2B,OAAO,IAAI,EAAE;AAAA,MAC9DA,QAAO;AAAA,QACL,CAAC,QACC,IAAI,oBAAoB;AAAA,UACtB,SAAS;AAAA,UACT,OAAO;AAAA,QACT,CAAC;AAAA,MACL;AAAA,IACF;AACA,WAAO,EAAE,aAAa,KAAK,SAAS;AAAA,EACtC;AACA,SAAO;AACT,CAAC;AAUH,IAAM,kBAAkB,CACtB,cACA,WACA,eACW;AAGX,QAAM,SAAS,cAAc,WAAW,+BAA+B;AACvE,SAAO,cAAc,eAAe,MAChC,GAAG,YAAY,gBAAgB,MAAM,GAAG,UAAU,KAClD,GAAG,YAAY,gBAAgB,MAAM;AAC3C;AAEO,IAAM,sCAAsC,CACjD,QACA,UAAmC,CAAC,MAQpCA,QAAO,IAAI,aAAa;AACtB,SAAO,oBAAoB,QAAQ,UAAU,QAAQ,iBAAiB;AACtE,QAAM,YAAY,IAAI,IAAI,MAAM;AAChC,QAAM,eAAe,GAAG,UAAU,QAAQ,KAAK,UAAU,IAAI;AAC7D,QAAM,aAAa,UAAU,SAAS,QAAQ,QAAQ,EAAE;AAExD,aAAW,aAAa,CAAC,UAAU,MAAM,GAAY;AACnD,UAAM,cAAc,gBAAgB,cAAc,WAAW,UAAU;AACvE,QAAI,UAAU,kBAAkB,IAAI,WAAW,EAAE;AAAA,MAC/C,kBAAkB,UAAU,UAAU,kBAAkB;AAAA,IAC1D;AACA,QAAI,QAAQ,oBAAoB;AAC9B,gBAAU,kBAAkB;AAAA,QAC1B;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,IACF;AACA,UAAM,SAAS,OAAO;AAAA,MACpB;AAAA,MACA;AAAA,MACA,cAAc,SAAS,gBAAgB,MAAM;AAAA,IAC/C,EAAE;AAAA,MACAA,QAAO,IAAI,CAACE,cAAa;AACvB,YAAIA,UAAS,WAAW,OAAOA,UAAS,WAAW,IAAK,QAAO;AAC/D,eAAOA;AAAA,MACT,CAAC;AAAA;AAAA;AAAA,MAGDF,QAAO;AAAA,IACT;AAEA,QAAI,OAAO,UAAU,MAAM,EAAG;AAC9B,UAAM,WAAW,OAAO;AACxB,QAAI,aAAa,KAAM;AACvB,QAAI,SAAS,SAAS,OAAO,SAAS,UAAU,IAAK;AAErD,UAAM,MAAM,OAAOD,QAAO,oBAAoBA,QAAO,eAAeA,QAAO,OAAO,CAAC;AAAA,MACjF,SAAS;AAAA,IACX,EAAE;AAAA,MACAC,QAAO;AAAA,QACL,CAAC,QACC,IAAI,oBAAoB;AAAA,UACtB,SAAS;AAAA,UACT,OAAO;AAAA,QACT,CAAC;AAAA,MACL;AAAA,IACF;AACA,UAAM,WAAW,OAAO,yBAAyB,GAAG,EAAE;AAAA,MACpDA,QAAO;AAAA,QACL,CAAC,QACC,IAAI,oBAAoB;AAAA,UACtB,SAAS;AAAA,UACT,OAAO;AAAA,QACT,CAAC;AAAA,MACL;AAAA,IACF;AACA,WAAO,oCAAoC,UAAU,QAAQ,iBAAiB;AAC9E,WAAO,EAAE,aAAa,SAAS;AAAA,EACjC;AACA,SAAO;AACT,CAAC;AAoBH,IAAM,eAAN,cAA2BF,MAAK,YAAY,cAAc,EAIvD;AAAC;AAEJ,IAAM,eAAN,cAA2BA,MAAK,YAAY,cAAc,EAIvD;AAAC;AAEJ,IAAM,mBAAmBC,QAAO,OAAO;AAAA,EACrC,OAAOA,QAAO;AAAA,EACd,mBAAmBA,QAAO,SAASA,QAAO,MAAM;AAClD,CAAC;AACD,IAAM,yBAAyBA,QAAO,oBAAoBA,QAAO,eAAe,gBAAgB,CAAC;AAEjG,IAAM,eAAe,CAAC,MAAsD;AAC1E,QAAM,OAAgC,EAAE,eAAe,CAAC,GAAG,EAAE,aAAa,EAAE;AAC5E,MAAI,EAAE,gBAAgB,OAAW,MAAK,cAAc,EAAE;AACtD,MAAI,EAAE,gBAAgB,OAAW,MAAK,cAAc,CAAC,GAAG,EAAE,WAAW;AACrE,MAAI,EAAE,mBAAmB,OAAW,MAAK,iBAAiB,CAAC,GAAG,EAAE,cAAc;AAC9E,MAAI,EAAE,+BAA+B,QAAW;AAC9C,SAAK,6BAA6B,EAAE;AAAA,EACtC;AACA,MAAI,EAAE,UAAU,OAAW,MAAK,QAAQ,EAAE;AAC1C,MAAI,EAAE,qBAAqB,OAAW,MAAK,mBAAmB,EAAE;AAChE,MAAI,EAAE,eAAe,OAAW,MAAK,aAAa,EAAE;AACpD,MAAI,EAAE,aAAa,OAAW,MAAK,WAAW,EAAE;AAChD,MAAI,EAAE,aAAa,OAAW,MAAK,WAAW,CAAC,GAAG,EAAE,QAAQ;AAC5D,MAAI,EAAE,gBAAgB,OAAW,MAAK,cAAc,EAAE;AACtD,MAAI,EAAE,qBAAqB,OAAW,MAAK,mBAAmB,EAAE;AAChE,MAAI,EAAE,MAAO,YAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,EAAE,KAAK,EAAG,MAAK,CAAC,IAAI;AACrE,SAAO;AACT;AAEA,IAAM,sBAAsB,CAAC,QAAgB,SAA8C;AAEzF,MAAI,UAAU,OAAO,SAAS,KAAK;AACjC,UAAM,OAAO,OAAO,uBAAuB,IAAI,IAAI;AACnD,WAAO,OAAO,MAAM,QAAQ,OAAO,KAAK,GAAG;AAAA,MACzC,QAAQ,MACN,IAAI,aAAa;AAAA,QACf,QAAQ,wDAAwD,MAAM,GACpE,OAAO,WAAM,KAAK,MAAM,GAAG,GAAG,CAAC,KAAK,EACtC;AAAA,QACA;AAAA,MACF,CAAC;AAAA,MACH,QAAQ,CAAC,WACP,OAAO,MAAM,SAAS,IAClB,IAAI,aAAa;AAAA,QACf;AAAA,QACA,OAAO,OAAO;AAAA,QACd,mBAAmB,OAAO;AAAA,MAC5B,CAAC,IACD,IAAI,aAAa;AAAA,QACf,QAAQ,wDAAwD,MAAM,GACpE,OAAO,WAAM,KAAK,MAAM,GAAG,GAAG,CAAC,KAAK,EACtC;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACT,CAAC;AAAA,EACH;AACA,SAAO,IAAI,aAAa;AAAA,IACtB,QAAQ,wDAAwD,MAAM,GACpE,OAAO,WAAM,KAAK,MAAM,GAAG,GAAG,CAAC,KAAK,EACtC;AAAA,IACA;AAAA,EACF,CAAC;AACH;AAEO,IAAM,wBAAwB,CACnC,OACA,UAAmC,CAAC,MAEpCC,QAAO,IAAI,aAAa;AACtB,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,QAAQ;AAAA,EACV,EAAE;AAAA,IACAA,QAAO;AAAA,MACL,CAAC,UACC,IAAI,aAAa;AAAA,QACf,QAAQ;AAAA,QACR;AAAA,MACF,CAAC;AAAA,IACL;AAAA,EACF;AAEA,QAAM,UAAkC;AAAA,IACtC,gBAAgB;AAAA,IAChB,QAAQ;AAAA,EACV;AACA,MAAI,MAAM,oBAAoB;AAC5B,YAAQ,gBAAgB,UAAU,MAAM,kBAAkB;AAAA,EAC5D;AAEA,MAAI,UAAU,kBAAkB,KAAK,MAAM,oBAAoB,EAAE;AAAA,IAC/D,kBAAkB,eAAe,aAAa,MAAM,QAAQ,CAAC;AAAA,EAC/D;AACA,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AACnD,cAAU,kBAAkB,UAAU,SAAS,MAAM,KAAK;AAAA,EAC5D;AAEA,QAAM,WAAW,OAAO;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE;AAAA,IACAA,QAAO;AAAA,MACL,CAAC,UACC,IAAI,aAAa;AAAA,QACf,QAAQ;AAAA,QACR;AAAA,MACF,CAAC;AAAA,IACL;AAAA,EACF;AAIA,MAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;AACtD,WAAO,OAAO,oBAAoB,SAAS,QAAQ,SAAS,IAAI;AAAA,EAClE;AAEA,SAAO,OAAO,4BAA4B,SAAS,IAAI,EAAE;AAAA,IACvDA,QAAO;AAAA,MACL,CAAC,QACC,IAAI,oBAAoB;AAAA,QACtB,SAAS;AAAA,QACT,OAAO;AAAA,MACT,CAAC;AAAA,IACL;AAAA,EACF;AACF,CAAC,EAAE;AAAA,EACDA,QAAO,UAAU;AAAA,IACf,cAAc,CAAC,QACbA,QAAO;AAAA,MACL,IAAI,oBAAoB;AAAA,QACtB,SAAS,uCAAuC,IAAI,KAAK,GACvD,IAAI,oBAAoB,WAAM,IAAI,iBAAiB,KAAK,EAC1D;AAAA,QACA,QAAQ,IAAI;AAAA,QACZ,OAAO,IAAI;AAAA,QACX,kBAAkB,IAAI;AAAA,QACtB,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,IACF,cAAc,CAAC,QACbA,QAAO;AAAA,MACL,IAAI,oBAAoB;AAAA,QACtB,SAAS,uCAAuC,IAAI,MAAM;AAAA,QAC1D,QAAQ,IAAI;AAAA,QACZ,OAAO,IAAI,SAAS;AAAA,MACtB,CAAC;AAAA,IACH;AAAA,EACJ,CAAC;AACH;AAWK,IAAM,uBAAuB,CAAC,UAA0B;AAC7D,QAAM,MAAM,IAAI,IAAI,KAAK;AACzB,QAAM,SAAS,IAAI,SAAS,YAAY;AACxC,QAAM,OAAO,IAAI,KAAK,YAAY;AAClC,QAAM,OAAO,IAAI,SAAS,QAAQ,QAAQ,EAAE;AAC5C,SAAO,GAAG,MAAM,KAAK,IAAI,GAAG,IAAI;AAClC;AAEA,IAAM,4BAA4B,CAChC,OACA,aAEAA,QAAO,IAAI;AAAA,EACT,KAAK,MAAM,qBAAqB,KAAK;AAAA,EACrC,OAAO,CAAC,UACN,IAAI,oBAAoB;AAAA,IACtB,SAAS;AAAA,IACT;AAAA,EACF,CAAC;AACL,CAAC,EAAE;AAAA,EACDA,QAAO;AAAA,IAAQ,CAAC,WACd,WAAW,YAAY,SAAS,WAAW,GAAG,MAAM,GAAG,IACnDA,QAAO,QAAQ,MAAM,IACrBA,QAAO;AAAA,MACL,IAAI,oBAAoB;AAAA,QACtB,SAAS;AAAA,QACT,OAAO,EAAE,UAAU,OAAO;AAAA,MAC5B,CAAC;AAAA,IACH;AAAA,EACN;AACF;AAWF,IAAM,6BAA6B,CAAC,QAAQ,sBAAsB,qBAAqB;AAIvF,IAAM,sBAAsB,CAAC,eAAoE;AAC/F,MAAI,CAAC,cAAc,WAAW,WAAW,EAAG,QAAO;AACnD,aAAW,aAAa,4BAA4B;AAClD,QAAI,WAAW,SAAS,SAAS,EAAG,QAAO;AAAA,EAC7C;AACA,SAAO;AACT;AAmDO,IAAM,4BAA4B,CACvC,OACA,UAAmC,CAAC,MAEpCA,QAAO,IAAI,aAAa;AACtB,QAAM,QAAQ,MAAM,iBAAiB,CAAC;AAKtC,QAAM,2BACJ,MAAM,qBAAqB,UAC3B,CAAC,CAAC,MAAM,0BACR,CAAC,CAAC,MAAM;AAEV,QAAM,WAAW,2BACb,MAAM,mBACJ;AAAA,IACE,UAAU,MAAM;AAAA,IAChB,aAAa,MAAM,uBAAuB;AAAA,EAC5C,IACA,OACF,OAAO,kCAAkC,MAAM,UAAU,OAAO;AAEpE,QAAM,mBAAmB,qBAAqB,MAAM,QAAQ;AAK5D,QAAM,oCAAuD,MAAM;AACjE,QAAI,MAAM,uBAAwB,QAAO,CAAC,MAAM,sBAAsB;AACtE,UAAM,eAAe,UAAU,SAAS,yBAAyB,CAAC;AAClE,QAAI,aAAa,SAAS,EAAG,QAAO;AACpC,UAAM,IAAI,IAAI,IAAI,MAAM,QAAQ;AAChC,WAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,EAAE,IAAI,EAAE;AAAA,EACpC,GAAG;AAEH,QAAM,kBACJ,MAAM,+BAA+B,MAAM,iCACvC;AAAA,IACE,UAAU,MAAM;AAAA,IAChB,aAAa,MAAM;AAAA,IACnB,KAAK,MAAM,0BAA0B,iCAAiC,CAAC;AAAA,EACzE,IACA;AAEN,QAAM,aAAa,kBACf,kBACA,QAAQ,MAAM;AACZ,UAAM,QAAkB,CAAC;AACzB,WAAOA,QAAO,IAAI,aAAa;AAC7B,iBAAW,aAAa,kCAAkC;AACxD,cAAM,KAAK,SAAS;AACpB,cAAM,KAAK,OAAO,oCAAoC,WAAW,OAAO,EAAE;AAAA,UACxEA,QAAO,SAAS,uBAAuB,MAAMA,QAAO,QAAQ,IAAI,CAAC;AAAA,QACnE;AACA,YAAI,IAAI;AACN,iBAAO,EAAE,UAAU,GAAG,UAAU,aAAa,GAAG,aAAa,KAAK,UAAU;AAAA,QAC9E;AAAA,MACF;AACA,aAAO,OAAO,IAAI,oBAAoB;AAAA,QACpC,SAAS,wDAAwD,MAAM,KAAK,IAAI,CAAC;AAAA,MACnF,CAAC;AAAA,IACH,CAAC;AAAA,EACH,GAAG;AAEP,QAAM,aAAa,EAAE,UAAU,WAAW,UAAU,aAAa,WAAW,YAAY;AACxF,QAAM,yBAAyB,WAAW;AAE1C,QAAM,cAAc,WAAW,SAAS,oCAAoC,CAAC;AAC7E,MAAI,YAAY,SAAS,KAAK,CAAC,YAAY,SAAS,MAAM,GAAG;AAC3D,WAAO,OAAO,IAAI,oBAAoB;AAAA,MACpC,SAAS,gEAAgE,YAAY,KAAK,IAAI,CAAC;AAAA,IACjG,CAAC;AAAA,EACH;AAEA,QAAM,gBAAgB,WAAW,SAAS,4BAA4B,CAAC;AACvE,MAAI,cAAc,SAAS,KAAK,CAAC,cAAc,SAAS,MAAM,GAAG;AAC/D,WAAO,OAAO,IAAI,oBAAoB;AAAA,MACpC,SAAS,yEAAyE,cAAc,KAAK,IAAI,CAAC;AAAA,IAC5G,CAAC;AAAA,EACH;AASA,QAAM,SACJ,MAAM,WACL,UAAU,SAAS,oBAAoB,SAAS,SAAS,iBAAiB,SAAS,IAChF,SAAS,SAAS,mBAClB,CAAC;AAEP,QAAM,uBAAuB;AAAA,IAC3B,WAAW,SAAS;AAAA,EACtB;AACA,MAAI,CAAC,sBAAsB;AACzB,WAAO,OAAO,IAAI,oBAAoB;AAAA,MACpC,SAAS,2FACP,WAAW,SAAS,yCAAyC,CAAC,GAC9D,KAAK,IAAI,CAAC;AAAA,IACd,CAAC;AAAA,EACH;AAEA,QAAM,qBAA4C;AAAA,IAChD,aAAa,CAAC,sBAAsB,eAAe;AAAA,IACnD,gBAAgB,CAAC,MAAM;AAAA,IACvB,4BAA4B;AAAA,IAC5B,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,GAAI,OAAO,SAAS,IAAI,EAAE,OAAO,OAAO,KAAK,GAAG,EAAE,IAAI,CAAC;AAAA,IACvD,GAAI,MAAM,kBAAkB,CAAC;AAAA,IAC7B,eAAe,MAAM,gBAAgB,iBAAiB,CAAC,MAAM,WAAW;AAAA,EAC1E;AAEA,QAAM,oBACJ,MAAM,sBACL,QAAQ,MAAM;AACb,UAAM,MAAM,WAAW,SAAS;AAChC,QAAI,CAAC,KAAK;AACR,aAAOA,QAAO;AAAA,QACZ,IAAI,oBAAoB;AAAA,UACtB,SACE;AAAA,QACJ,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,MACL,EAAE,sBAAsB,KAAK,UAAU,mBAAmB;AAAA,MAC1D;AAAA,IACF;AAAA,EACF,GAAG;AAEL,QAAM,gBAAgB,UAAU,SAAS,WACrC,OAAO,0BAA0B,SAAS,SAAS,UAAU,gBAAgB,IAC7E;AAEJ,QAAM,eAAe,uBAAuB;AAC5C,QAAM,gBAAgB,OAAOA,QAAO,QAAQ,MAAM,wBAAwB,YAAY,CAAC;AAEvF,QAAM,mBAAmB,sBAAsB;AAAA,IAC7C,kBAAkB,WAAW,SAAS;AAAA,IACtC,UAAU,kBAAkB;AAAA,IAC5B,aAAa,MAAM;AAAA,IACnB;AAAA,IACA,OAAO,MAAM;AAAA,IACb;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB,QAAQ;AAAA,EAC7B,CAAC;AAED,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO;AAAA,MACL,kBAAkB,UAAU,YAAY;AAAA,MACxC,qBAAqB,UAAU,eAAe;AAAA,MAC9C;AAAA,MACA,gCAAgC,WAAW;AAAA,MAC3C,6BAA6B,WAAW;AAAA,MACxC;AAAA,MACA,UAAU;AAAA,MACV;AAAA,IACF;AAAA,EACF;AACF,CAAC;;;ACrzBH,SAAS,YAAAG,WAAU,UAAAC,SAAe,OAAO,UAAAC,SAAQ,UAAAC,eAAc;AAC/D,SAAS,mBAAAC,kBAAiB,cAAAC,aAAY,qBAAAC,0BAAyB;AA0D/D,IAAM,uCAAuCC,QAAO,OAAOA,QAAO,QAAQA,QAAO,OAAO;AACxF,IAAM,6BAA6BA,QAAO,OAAOA,QAAO,QAAQA,QAAO,OAAO;AAE9E,IAAM,2BAA2BA,QAAO,OAAO;AAAA,EAC7C,MAAMA,QAAO,QAAQ,aAAa;AAAA,EAClC,eAAeA,QAAO,OAAOA,QAAO,MAAM;AAAA,EAC1C,cAAcA,QAAO;AAAA,EACrB,wBAAwBA,QAAO;AAAA,EAC/B,gCAAgCA,QAAO;AAAA,EACvC,6BAA6B;AAAA,EAC7B,mBAAmB;AAAA,EACnB,qBAAqBA,QAAO,OAAOA,QAAO,MAAM;AAAA,EAChD,kBAAkBA,QAAO,OAAOA,QAAO,OAAOA,QAAO,QAAQA,QAAO,OAAO,CAAC;AAAA,EAC5E,QAAQA,QAAO,MAAMA,QAAO,MAAM;AAAA,EAClC,UAAUA,QAAO,OAAOA,QAAO,MAAM,EAAE,KAAKA,QAAO,wBAAwBC,QAAO,QAAQ,IAAI,CAAC,CAAC;AAClG,CAAC;AAED,IAAM,kCAAkCD,QAAO,OAAO;AAAA,EACpD,MAAMA,QAAO,QAAQ,oBAAoB;AAAA,EACzC,eAAeA,QAAO,OAAOA,QAAO,MAAM;AAAA,EAC1C,cAAcA,QAAO;AAAA,EACrB,uBAAuBA,QAAO;AAAA,EAC9B,eAAeA,QAAO;AAAA,EACtB,WAAWA,QAAO,OAAOA,QAAO,MAAM,EAAE;AAAA,IACtCA,QAAO,wBAAwBC,QAAO,QAAQ,IAAI,CAAC;AAAA,EACrD;AAAA,EACA,kBAAkBD,QAAO;AAAA,EACzB,uBAAuBA,QAAO,OAAOA,QAAO,MAAM,EAAE;AAAA,IAClDA,QAAO,wBAAwBC,QAAO,QAAQ,IAAI,CAAC;AAAA,EACrD;AAAA,EACA,sBAAsBD,QAAO,OAAOA,QAAO,MAAM;AAAA,EACjD,2BAA2BA,QAAO,OAAOA,QAAO,MAAM,EAAE;AAAA,IACtDA,QAAO,wBAAwBC,QAAO,QAAQ,IAAI,CAAC;AAAA,EACrD;AAAA,EACA,QAAQD,QAAO,MAAMA,QAAO,MAAM;AAAA,EAClC,gBAAgBA,QAAO,SAASA,QAAO,MAAM;AAAA,EAC7C,YAAYA,QAAO,SAAS,CAAC,QAAQ,OAAO,CAAC;AAC/C,CAAC;AAKD,IAAM,sBAAsBA,QAAO,MAAM;AAAA,EACvC;AAAA,EACA;AACF,CAAC;AAGD,IAAM,uBAAuBA,QAAO,kBAAkB,mBAAmB;AACzE,IAAM,uBAAuBA,QAAO,WAAW,mBAAmB;AAElE,IAAM,wBAAwBA,QAAO,eAAeA,QAAO,OAAO;AAClE,IAAM,0BAA0BA,QAAO,oBAAoB,qBAAqB;AAEhF,IAAM,0BAA0BA,QAAO,kBAAkB,kBAAwB;AACjF,IAAM,0BAA0BA,QAAO,WAAW,kBAAwB;AAE1E,IAAM,aAAa,CAAC,UAA4B;AAC9C,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,SAAO,wBAAwB,KAAK,EAAE,KAAKE,QAAO,UAAU,MAAM,KAAK,CAAC;AAC1E;AAEA,IAAM,sBAAsB,CAAC,UAC3B,wBAAwB,WAAW,KAAK,CAAC;AAwC3C,IAAM,mBAAmB,MAAc;AACrC,QAAMC,UAAS,WAAW;AAC1B,MAAIA,SAAQ,WAAY,QAAO,kBAAkBA,QAAO,WAAW,CAAC;AACpE,QAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,EAAAA,QAAO,gBAAgB,KAAK;AAC5B,SAAO,kBAAkB,MAAM,KAAK,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE;AAAA,IACvF;AAAA,EACF,CAAC;AACH;AAEA,IAAM,eAAe,CAAC,UACpB,MACG,KAAK,EACL,YAAY,EACZ,QAAQ,gBAAgB,GAAG,EAC3B,QAAQ,YAAY,EAAE,KAAK;AAEhC,IAAM,gBAAgB,CACpB,cACA,WACW;AACX,QAAM,OAAO,aAAa,YAAY;AACtC,QAAM,WAAW,KAAK,UAAU,KAAK,OAAO,KAAK,MAAM,GAAG,EAAE;AAC5D,SAAO,UAAU,QAAQ,IAAI,MAAM;AACrC;AAEA,IAAM,kBAAkB,CAAC,SAAiB,cACxC,GAAG,SAAS,IAAI,aAAa,OAAO,EAAE,MAAM,GAAG,EAAE,CAAC;AAEpD,IAAM,wBAAwB,oBAAI,IAAI,CAAC,iBAAiB,kBAAkB,qBAAqB,CAAC;AAMzF,IAAM,oBAAoB,CAC/B,SACwF;AACxF,QAAM,MAAM,KAAK,QAAQ,MAAM,KAAK,IAAI;AACxC,QAAM,eAAe,KAAK,gBAAgB;AAC1C,QAAM,kBAAkB,KAAK;AAC7B,QAAM,oBAAoB,KAAK;AAC/B,QAAM,qBACJ,KAAK,uBACJ,CAAC,OACA,KACG,WAAW,EAAE,EACb,KAAKF,QAAO,IAAI,CAAC,UAAW,UAAU,OAAO,OAAO,EAAE,OAAO,SAAS,KAAK,CAAE,CAAC;AACrF,QAAM,6BAA6B,CAAC,WAIlC,OAAO,WAAW,KAAK,oBACnB,KAAK,kBAAkB,OAAO,UAAU,OAAO,OAAO,IACtD,KAAK,WAAW,OAAO,QAAQ;AACrC,QAAM,4BAA4B,CAAC,WAIjC,OAAO,WAAW,KAAK,oBACnB,KACG,kBAAkB,OAAO,UAAU,OAAO,OAAO,EACjD;AAAA,IACCA,QAAO;AAAA,MAAI,CAAC,UACV,UAAU,OAAO,OAAO,EAAE,OAAO,SAAS,OAAO,WAAW,KAAK;AAAA,IACnE;AAAA,EACF,IACF,mBAAmB,OAAO,QAAQ;AAKxC,QAAM,QAAQ,CAAC,UACbA,QAAO,IAAI,aAAa;AACtB,UAAM,WAAW,OAAO,kCAAkC,MAAM,UAAU;AAAA,MACxE;AAAA,MACA,iBAAiB,MAAM;AAAA,MACvB,qBAAqB,MAAM;AAAA,IAC7B,CAAC,EAAE;AAAA,MACDA,QAAO;AAAA,QAAS;AAAA,QAAuB,CAAC,EAAE,QAAQ,MAChDA,QAAO;AAAA,UACL,IAAI,gBAAgB;AAAA,YAClB,SAAS,6CAA6C,OAAO;AAAA,UAC/D,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAEA,UAAM,yBAAyB,QAAQ,MAAM;AAC3C,YAAM,eAAe,UAAU,SAAS,wBAAwB,CAAC;AACjE,UAAI,aAAc,QAAOA,QAAO,QAAQ,YAAY;AACpD,aAAOA,QAAO,IAAI;AAAA,QAChB,KAAK,MAAM;AACT,gBAAM,IAAI,IAAI,IAAI,MAAM,QAAQ;AAChC,iBAAO,GAAG,EAAE,QAAQ,KAAK,EAAE,IAAI;AAAA,QACjC;AAAA,QACA,OAAO,MAAM;AAAA,MACf,CAAC,EAAE,KAAKA,QAAO,MAAM,MAAMA,QAAO,QAAQ,IAAI,CAAC,CAAC;AAAA,IAClD,GAAG;AAEH,UAAM,aAAa,yBACf,OAAO,oCAAoC,wBAAwB;AAAA,MACjE;AAAA,IACF,CAAC,EAAE,KAAKA,QAAO,SAAS,uBAAuB,MAAMA,QAAO,QAAQ,IAAI,CAAC,CAAC,IAC1E;AAOJ,UAAM,wBACJ,YAAY,SAAS,yCAAyC,CAAC;AACjE,UAAM,0BACJ,sBAAsB,WAAW,KACjC,sBAAsB;AAAA,MACpB,CAAC,MAAM,MAAM,UAAU,MAAM,wBAAwB,MAAM;AAAA,IAC7D;AACF,UAAM,8BAA8B,CAAC,EACnC,YAAY,SAAS,yBAAyB;AAQhD,UAAM,4BAA4B,OAAOA,QAAO,IAAI,aAAa;AAC/D,YAAM,SAAS,OAAOG,YAAW;AACjC,YAAM,WAAW,IAAI,IAAI,MAAM,QAAQ;AACvC,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,eAAe,CAAC,CAAC,GAAG;AAClE,iBAAS,aAAa,IAAI,KAAK,KAAK;AAAA,MACtC;AACA,UAAI,UAAUC,mBAAkB,KAAK,SAAS,SAAS,CAAC,EAAE;AAAA,QACxDA,mBAAkB,UAAU,gBAAgB,kBAAkB;AAAA,QAC9DA,mBAAkB,UAAU,UAAU,qCAAqC;AAAA,QAC3EA,mBAAkB,eAAe;AAAA,UAC/B,SAAS;AAAA,UACT,IAAI;AAAA,UACJ,QAAQ;AAAA,UACR,QAAQ;AAAA,YACN,iBAAiB;AAAA,YACjB,cAAc,CAAC;AAAA,YACf,YAAY,EAAE,MAAM,kBAAkB,SAAS,IAAI;AAAA,UACrD;AAAA,QACF,CAAC;AAAA,MACH;AACA,iBAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,MAAM,WAAW,CAAC,CAAC,GAAG;AAC/D,kBAAUA,mBAAkB,UAAU,SAAS,MAAM,KAAK;AAAA,MAC5D;AACA,YAAM,WAAW,OAAO,OAAO,QAAQ,OAAO,EAAE,KAAKJ,QAAO,QAAQK,UAAS,QAAQ,CAAC,CAAC,CAAC;AACxF,UAAI,SAAS,WAAW,IAAK,QAAO;AACpC,YAAM,UACJ,SAAS,QAAQ,kBAAkB,KAAK,SAAS,QAAQ,kBAAkB;AAC7E,aAAO,CAAC,CAAC,WAAW,gBAAgB,KAAK,OAAO;AAAA,IAClD,CAAC,EAAE;AAAA,MACDL,QAAO,QAAQ,mBAAmBM,iBAAgB,KAAK;AAAA,MACvDN,QAAO,MAAM,MAAMA,QAAO,QAAQ,KAAK,CAAC;AAAA,IAC1C;AAEA,WAAO;AAAA,MACL,kBAAmB,UAAU,YAAoD;AAAA,MACjF,qBAAqB,UAAU,eAAe;AAAA,MAC9C,6BACG,YAAY,YAAoD;AAAA,MACnE,gCAAgC,YAAY,eAAe;AAAA,MAC3D,wBAAwB,0BAA0B;AAAA,MAClD;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AAKH,QAAM,kBAAkB,CACtB,OACA,aAEAA,QAAO,IAAI,aAAa;AACtB,UAAM,UAAU,OAAO;AAAA,MACrB;AAAA,QACE,UAAU,MAAM;AAAA,QAChB,aAAa,MAAM;AAAA,QACnB,OAAO;AAAA,QACP,QAAQ,SAAS;AAAA,MACnB;AAAA,MACA;AAAA,QACE;AAAA,QACA,iBAAiB,MAAM;AAAA,QACvB,qBAAqB,MAAM;AAAA,QAC3B;AAAA,MACF;AAAA,IACF,EAAE;AAAA,MACAA,QAAO;AAAA,QAAS;AAAA,QAAuB,CAAC,EAAE,SAAS,OAAO,iBAAiB,MACzEA,QAAO;AAAA,UACL,IAAI,gBAAgB;AAAA,YAClB,SAAS,uCAAuC,OAAO;AAAA,YACvD;AAAA,YACA;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,gBAAgB,MAAM,YAAY,aAAa,CAAC;AAOlE,UAAM,gBAAgB,OAAOA,QAAO;AAAA,MAAQ,MAC1C,wBAAwB,QAAQ,YAAY;AAAA,IAC9C;AACA,UAAM,mBAAmB,sBAAsB;AAAA,MAC7C,kBAAkB,QAAQ,MAAM,4BAA4B;AAAA,MAC5D,UAAU,QAAQ,MAAM,kBAAkB;AAAA,MAC1C,aAAa,MAAM;AAAA,MACnB,QAAQ,QAAQ,MAAM;AAAA,MACtB,OAAO;AAAA,MACP;AAAA,MACA,UAAU,QAAQ,MAAM;AAAA,MACxB;AAAA,IACF,CAAC;AAED,UAAM,UAA+B;AAAA,MACnC,MAAM;AAAA,MACN,eAAe,MAAM,iBAAiB;AAAA,MACtC,cAAc,QAAQ;AAAA,MACtB,wBAAwB,QAAQ,MAAM;AAAA,MACtC,gCAAgC,QAAQ,MAAM;AAAA,MAC9C,6BAA6B,QAAQ,MAAM;AAAA,MAI3C,oBAAoB,MAAM;AACxB,cAAM,QAAiB,QAAQ,MAAM;AACrC,eAAO;AAAA,MACT,GAAG;AAAA,MACH,qBAAqB,QAAQ,MAAM;AAAA,MACnC,kBACG,QAAQ,MAAM,oBAAuD;AAAA,MACxE,QAAQ,CAAC,GAAG,QAAQ,MAAM,MAAM;AAAA,MAChC,UAAU,QAAQ,MAAM;AAAA,IAC1B;AAEA,WAAO,aAAa;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AAED,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,qBAAqB;AAAA,IACvB;AAAA,EACF,CAAC;AAEH,QAAM,yBAAyB,CAC7B,OACA,aAEAA,QAAO,IAAI,aAAa;AACtB,UAAM,cAAc,OAAO,0BAA0B;AAAA,MACnD,UAAU,SAAS;AAAA,MACnB,SAAS,SAAS;AAAA,IACpB,CAAC,EAAE;AAAA,MACDA,QAAO;AAAA,QACL,CAAC;AAAA;AAAA;AAAA,UAGC;AAAA;AAAA,MACJ;AAAA,IACF;AACA,QAAI,gBAAgB,MAAM;AACxB,aAAO,OAAO,IAAI,gBAAgB;AAAA,QAChC,SAAS,qBAAqB,SAAS,gBAAgB;AAAA,MACzD,CAAC;AAAA,IACH;AAEA,UAAM,YAAY,gBAAgB,MAAM,YAAY,aAAa,CAAC;AAClE,UAAM,eAAe,uBAAuB;AAC5C,UAAM,gBAAgB,OAAOA,QAAO,QAAQ,MAAM,wBAAwB,YAAY,CAAC;AAEvF,UAAM,mBAAmB,sBAAsB;AAAA,MAC7C,kBAAkB,SAAS;AAAA,MAC3B,UAAU,YAAY;AAAA,MACtB,aAAa,MAAM;AAAA,MACnB,QAAQ,SAAS;AAAA,MACjB,OAAO;AAAA,MACP;AAAA,MACA,gBAAgB,SAAS;AAAA,MACzB,aAAa,SAAS;AAAA,MACtB;AAAA,IACF,CAAC;AAED,UAAM,UAA+B;AAAA,MACnC,MAAM;AAAA,MACN,eAAe,MAAM,iBAAiB;AAAA,MACtC;AAAA,MACA,uBAAuB,SAAS;AAAA,MAChC,eAAe,SAAS;AAAA,MACxB,WAAW,SAAS,aAAa,IAAI,IAAI,SAAS,qBAAqB,EAAE;AAAA,MACzE,kBAAkB,SAAS;AAAA,MAC3B,uBAAuB,YAAY;AAAA,MACnC,sBAAsB,SAAS,wBAAwB;AAAA,MACvD,2BAA2B,SAAS,wBAC9B,OAAO,0BAA0B;AAAA,QACjC,UAAU,SAAS;AAAA,QACnB,SAAS,SAAS;AAAA,MACpB,CAAC,IAAI,WAAW,OAChB;AAAA,MACJ,QAAQ,CAAC,GAAG,SAAS,MAAM;AAAA,MAC3B,gBAAgB,SAAS;AAAA,MACzB,YAAY,SAAS,cAAc;AAAA,IACrC;AAEA,WAAO,aAAa;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AAED,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,qBAAqB;AAAA,IACvB;AAAA,EACF,CAAC;AAEH,QAAM,yBAAyB,CAC7B,OACA,aAEAA,QAAO,IAAI,aAAa;AACtB,UAAM,cAAc,OAAO,0BAA0B;AAAA,MACnD,UAAU,SAAS;AAAA,MACnB,SAAS,SAAS;AAAA,IACpB,CAAC;AACD,UAAM,kBAAkB,OAAO,0BAA0B;AAAA,MACvD,UAAU,SAAS;AAAA,MACnB,SAAS,SAAS;AAAA,IACpB,CAAC;AACD,QAAI,gBAAgB,QAAQ,oBAAoB,MAAM;AACpD,aAAO,OAAO,IAAI,gBAAgB;AAAA,QAChC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAEA,UAAM,SAAS,OAAO,0BAA0B;AAAA,MAC9C,UAAU,SAAS;AAAA,MACnB,UAAU,YAAY;AAAA,MACtB,cAAc,gBAAgB;AAAA,MAC9B,QAAQ,SAAS;AAAA,MACjB,gBAAgB,SAAS;AAAA,MACzB,YAAY,SAAS,cAAc;AAAA,MACnC;AAAA,IACF,CAAC,EAAE;AAAA,MACDA,QAAO;AAAA,QACL,CAAC,EAAE,QAAQ,MACT,IAAI,gBAAgB;AAAA,UAClB,SAAS,uCAAuC,OAAO;AAAA,QACzD,CAAC;AAAA,MACL;AAAA,IACF;AAEA,UAAM,YACJ,OAAO,OAAO,eAAe,WAAW,IAAI,IAAI,OAAO,aAAa,MAAO;AAE7E,UAAM,gBAAoC;AAAA,MACxC,MAAM;AAAA,MACN,eAAe,SAAS;AAAA,MACxB,kBAAkB,SAAS;AAAA,MAC3B,uBAAuB,YAAY;AAAA,MACnC,sBAAsB,SAAS;AAAA,MAC/B,2BAA2B,gBAAgB;AAAA,MAC3C,QAAQ,CAAC,GAAI,SAAS,UAAU,CAAC,CAAE;AAAA,MACnC,gBAAgB,SAAS;AAAA,MACzB,YAAY,SAAS,cAAc;AAAA,MACnC,OAAO,OAAO,SAAS;AAAA,IACzB;AAEA,WAAO,KACJ;AAAA,MACC,sBAAsB,KAAK;AAAA,QACzB,IAAI,aAAa,KAAK,MAAM,YAAY;AAAA,QACxC,OAAO,QAAQ,KAAK,MAAM,UAAU;AAAA,QACpC,UAAU;AAAA,QACV,eAAe,MAAM,iBAAiB,aAAa,MAAM,QAAQ;AAAA,QACjE,aAAa,cAAc,KAAK;AAAA,UAC9B,UAAU,SAAS,KAAK,cAAc,MAAM,cAAc,cAAc,CAAC;AAAA,UACzE,MAAM;AAAA,UACN,OAAO,OAAO;AAAA,QAChB,CAAC;AAAA,QACD,cAAc;AAAA,QACd;AAAA,QACA,YAAY,OAAO,SAAS;AAAA,QAC5B,eAAe,wBAAwB,aAAa;AAAA,MACtD,CAAC;AAAA,IACH,EACC;AAAA,MACCA,QAAO,UAAU;AAAA,QACf,sCAAsC,MACpCA,QAAO;AAAA,UACL,IAAI,gBAAgB;AAAA,YAClB,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AAAA,QACF,cAAc,CAAC,EAAE,QAAQ,MACvBA,QAAO;AAAA,UACL,IAAI,gBAAgB;AAAA,YAClB,SAAS,8BAA8B,OAAO;AAAA,UAChD,CAAC;AAAA,QACH;AAAA,QACF,sBAAsB,MACpBA,QAAO;AAAA,UACL,IAAI,gBAAgB;AAAA,YAClB,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AAAA,MACJ,CAAC;AAAA,IACH;AAEF,WAAO;AAAA,MACL,WAAW;AAAA,MACX,kBAAkB;AAAA,MAClB,qBAAqB,EAAE,cAAc,MAAM,aAAa;AAAA,IAC1D;AAAA,EACF,CAAC;AAEH,QAAM,QAAQ,CACZ,UAEA,MAAM,MAAM,MAAM,QAAQ,EAAE;AAAA,IAC1B,MAAM,KAAK,EAAE,MAAM,cAAc,GAAG,CAAC,aAAa,gBAAgB,OAAO,QAAQ,CAAC;AAAA,IAClF,MAAM;AAAA,MAAK,EAAE,MAAM,qBAAqB;AAAA,MAAG,CAAC,aAC1C,uBAAuB,OAAO,QAAQ;AAAA,IACxC;AAAA,IACA,MAAM;AAAA,MAAK,EAAE,MAAM,qBAAqB;AAAA,MAAG,CAAC,aAC1C,uBAAuB,OAAO,QAAQ;AAAA,IACxC;AAAA,IACA,MAAM;AAAA,EACR;AAEF,QAAM,eAAe,CAAC,SAMpB,KAAK,KACF;AAAA,IAAI;AAAA,IAAyB,CAAC,OAC7B,GAAG,OAAO,kBAAkB;AAAA,MAC1B,IAAI,KAAK;AAAA,MACT,UAAU,KAAK,MAAM;AAAA,MACrB,WAAW,KAAK,MAAM;AAAA,MACtB,UAAU,KAAK;AAAA,MACf,eAAe,KAAK,MAAM;AAAA,MAC1B,aAAa,KAAK,MAAM;AAAA,MACxB,cAAc,KAAK,MAAM;AAAA,MACzB,SAAS,qBAAqB,KAAK,OAAO;AAAA,MAC1C,YAAY,IAAI,IAAI;AAAA,MACpB,YAAY,oBAAI,KAAK;AAAA,IACvB,CAAC;AAAA,EACH,EACC,KAAKA,QAAO,MAAM;AAKvB,QAAM,WAAW,CACf,UAKAA,QAAO,IAAI,aAAa;AACtB,UAAM,MAAO,OAAO,KAAK,KAAK;AAAA,MAAI;AAAA,MAAkC,CAAC,OACnE,GAAG,UAAU,kBAAkB;AAAA,QAC7B,OAAO,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,KAAK;AAAA,MACxC,CAAC;AAAA,IACH;AASA,QAAI,CAAC,KAAK;AACR,aAAO,OAAO,IAAI,0BAA0B,EAAE,WAAW,MAAM,MAAM,CAAC;AAAA,IACxE;AACA,QAAI,MAAM,eAAe,UAAa,IAAI,gBAAgB,MAAM,YAAY;AAC1E,aAAO,OAAO,IAAI,0BAA0B,EAAE,WAAW,MAAM,MAAM,CAAC;AAAA,IACxE;AAEA,UAAM,gBAAgB,KAAK,KAAK;AAAA,MAAI;AAAA,MAAoC,CAAC,OACvE,GAAG,WAAW,kBAAkB;AAAA,QAC9B,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,KAAK,GAAG,EAAE,YAAY,KAAK,IAAI,QAAQ,CAAC;AAAA,MACjF,CAAC;AAAA,IACH;AAEA,QAAI,MAAM,OAAO;AACf,aAAO;AACP,aAAO,OAAO,IAAI,mBAAmB;AAAA,QACnC,SAAS,wCAAwC,MAAM,KAAK;AAAA,QAC5D,MAAM,MAAM;AAAA,MACd,CAAC;AAAA,IACH;AACA,QAAI,CAAC,MAAM,MAAM;AACf,aAAO;AACP,aAAO,OAAO,IAAI,mBAAmB;AAAA,QACnC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,UAAM,YAAY,OAAO,IAAI,UAA6B;AAC1D,QAAI,aAAa,IAAI,GAAG;AACtB,aAAO;AACP,aAAO,OAAO,IAAI,mBAAmB;AAAA,QACnC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAEA,UAAM,UAAU,qBAAqB,WAAW,IAAI,OAAO,CAAC;AAC5D,UAAM,WAAW;AAGjB,UAAM,eAAe,IAAI;AACzB,UAAM,aAAa,IAAI;AACvB,UAAM,cAAc,IAAI;AAGxB,UAAM,YAAY,MAAM;AACxB,UAAM,iBAAiB,OAAO,MAAM,MAAM,OAAO,EAC9C;AAAA,MACC,MAAM,KAAK,EAAE,MAAM,cAAc,GAAG,CAAC,MAAM,mBAAmB,GAAG,WAAW,WAAW,CAAC;AAAA,MACxF,MAAM;AAAA,QAAK,EAAE,MAAM,qBAAqB;AAAA,QAAG,CAAC,MAC1C,kCAAkC,GAAG,WAAW,WAAW;AAAA,MAC7D;AAAA,MACA,MAAM;AAAA,IACR,EACC,KAAKA,QAAO,SAAS,MAAM,aAAa,CAAC;AAE5C,UAAM,sBACJ,OAAO,eAAe,OAAO,eAAe,WACxC,IAAI,IAAI,eAAe,OAAO,aAAa,MAC3C;AAEN,UAAM,8BAA8B,QAAQ,MAAM;AAChD,UAAI,QAAQ,SAAS,cAAe,QAAOA,QAAO,QAAQ,IAAI;AAC9D,YAAM,eAAe,QAAQ,kBAAkB;AAC/C,UAAI,OAAO,iBAAiB,YAAY,aAAa,WAAW,GAAG;AACjE,eAAOA,QAAO,QAAQ,IAAI;AAAA,MAC5B;AACA,YAAM,WAAW,cAAc,cAAc,eAAe;AAC5D,aAAO,KACJ;AAAA,QACC,eAAe,KAAK;AAAA,UAClB,IAAI,SAAS,KAAK,QAAQ;AAAA,UAC1B,OAAO,QAAQ,KAAK,UAAU;AAAA,UAC9B,MAAM;AAAA,UACN,OAAO;AAAA,QACT,CAAC;AAAA,MACH,EACC;AAAA,QACCA,QAAO,GAAG,QAAQ;AAAA,QAClBA,QAAO,UAAU;AAAA,UACf,cAAc,CAAC,EAAE,QAAQ,MACvBA,QAAO;AAAA,YACL,IAAI,mBAAmB;AAAA,cACrB,SAAS,wCAAwC,OAAO;AAAA,YAC1D,CAAC;AAAA,UACH;AAAA,UACF,sBAAsB,MACpBA,QAAO;AAAA,YACL,IAAI,mBAAmB;AAAA,cACrB,SAAS;AAAA,YACX,CAAC;AAAA,UACH;AAAA,QACJ,CAAC;AAAA,MACH;AAAA,IACJ,GAAG;AAEH,UAAM,gBACJ,QAAQ,SAAS,gBACb;AAAA,MACE,MAAM;AAAA,MACN,eACE,QAAQ,4BAGR;AAAA,MACF,WACG,QAAQ,4BAAoD,UAAU;AAAA,MACzE,wBAAwB,QAAQ;AAAA,MAChC,gCAAgC,QAAQ;AAAA,MACxC,kCACE,QAAQ,4BAGR;AAAA,MACF,UAAW,QAAQ,kBAA4C;AAAA,MAC/D,sBAAsB;AAAA,MACtB,YACG,QAAQ,kBACN,+BAA+B,wBAC9B,UACA;AAAA,MACN,2BAA2B,8BAA8B,aAAa;AAAA,MACtE,QAAQ,CAAC,GAAG,QAAQ,MAAM;AAAA,MAC1B,OAAO,eAAe,OAAO,SAAS;AAAA,MACtC,UAAU,QAAQ;AAAA,IACpB,IACA;AAAA,MACE,MAAM;AAAA,MACN,eAAe,QAAQ;AAAA,MACvB,WAAW,QAAQ;AAAA,MACnB,kBAAkB,QAAQ;AAAA,MAC1B,uBAAuB,QAAQ;AAAA,MAC/B,sBAAsB,QAAQ;AAAA,MAC9B,2BAA2B,QAAQ;AAAA,MACnC,YAAY,QAAQ;AAAA,MACpB,QAAQ,CAAC,GAAG,QAAQ,MAAM;AAAA,MAC1B,gBAAgB,QAAQ;AAAA,MACxB,OAAO,eAAe,OAAO,SAAS;AAAA,IACxC;AAEN,WAAO,KACJ;AAAA,MACC,sBAAsB,KAAK;AAAA,QACzB,IAAI,aAAa,KAAK,YAAY;AAAA,QAClC,OAAO,QAAQ,KAAK,UAAU;AAAA,QAC9B,UAAU;AAAA,QACV,eAAe;AAAA,UACb,QAAQ,iBAAiB,eAAe,sBAAsB;AAAA,QAChE;AAAA,QACA,aAAa,cAAc,KAAK;AAAA,UAC9B,UAAU,SAAS,KAAK,cAAc,cAAc,cAAc,CAAC;AAAA,UACnE,MAAM;AAAA,UACN,OAAO,eAAe,OAAO;AAAA,QAC/B,CAAC;AAAA,QACD,cAAc,eAAe,OAAO,gBAChC,cAAc,KAAK;AAAA,UACjB,UAAU,SAAS,KAAK,cAAc,cAAc,eAAe,CAAC;AAAA,UACpE,MAAM;AAAA,UACN,OAAO,eAAe,OAAO;AAAA,QAC/B,CAAC,IACD;AAAA,QACJ,WAAW;AAAA,QACX,YAAY,eAAe,OAAO,SAAS;AAAA,QAC3C,eAAe,wBAAwB,aAAa;AAAA,MACtD,CAAC;AAAA,IACH,EACC;AAAA,MACCA,QAAO,UAAU;AAAA,QACf,sCAAsC,MACpCA,QAAO;AAAA,UACL,IAAI,mBAAmB;AAAA,YACrB,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AAAA,QACF,cAAc,CAAC,EAAE,QAAQ,MACvBA,QAAO;AAAA,UACL,IAAI,mBAAmB;AAAA,YACrB,SAAS,8BAA8B,OAAO;AAAA,UAChD,CAAC;AAAA,QACH;AAAA,QACF,sBAAsB,MACpBA,QAAO;AAAA,UACL,IAAI,mBAAmB;AAAA,YACrB,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AAAA,MACJ,CAAC;AAAA,IACH;AAEF,WAAO;AAEP,WAAO;AAAA,MACL;AAAA,MACA,WAAW;AAAA,MACX,OAAO,eAAe,OAAO,SAAS;AAAA,IACxC;AAAA,EACF,CAAC;AAaH,QAAM,qBAAqB,CACzB,SACA,MACA,gBAEAA,QAAO,IAAI,aAAa;AACtB,UAAM,KAAK,QAAQ;AAKnB,UAAM,KAAK,QAAQ;AAKnB,UAAM,SAAS,OAAO,0BAA0B;AAAA,MAC9C,UAAU,GAAG;AAAA,MACb,WAAW,GAAG;AAAA,MACd,UAAU,GAAG;AAAA,MACb,cAAc,GAAG,iBAAiB;AAAA,MAClC;AAAA,MACA,cAAc,QAAQ;AAAA,MACtB;AAAA,MACA,kCAAkC,GAAG;AAAA,MACrC,YAAY,GAAG,+BAA+B,wBAAwB,UAAU;AAAA,MAChF,UAAU,QAAQ,YAAY;AAAA,MAC9B;AAAA,IACF,CAAC,EAAE;AAAA,MACDA,QAAO;AAAA,QACL,CAAC,EAAE,SAAS,MAAM,MAChB,IAAI,mBAAmB;AAAA,UACrB,SAAS,0BAA0B,OAAO;AAAA,UAC1C,MAAM;AAAA,QACR,CAAC;AAAA,MACL;AAAA,IACF;AACA,WAAO;AAAA,MACL;AAAA,MACA,oBAAoB,QAAQ;AAAA,IAC9B;AAAA,EACF,CAAC;AAEH,QAAM,oCAAoC,CACxC,SACA,MACA,gBAEAA,QAAO,IAAI,aAAa;AACtB,UAAM,WAAW,QAAQ,wBACrB,OAAO,2BAA2B;AAAA,MAChC,UAAU,QAAQ;AAAA,MAClB,SAAS,QAAQ;AAAA,IACnB,CAAC,IACD,OAAO,KAAK,WAAW,QAAQ,gBAAgB;AACnD,QAAI,aAAa,MAAM;AACrB,aAAO,OAAO,IAAI,mBAAmB;AAAA,QACnC,SAAS,qBAAqB,QAAQ,gBAAgB;AAAA,MACxD,CAAC;AAAA,IACH;AACA,UAAM,eAAe,QAAQ,uBACzB,OAAO,2BAA2B;AAAA,MAChC,UAAU,QAAQ;AAAA,MAClB,SAAS,QAAQ;AAAA,IACnB,CAAC,IACD;AACJ,QAAI,QAAQ,wBAAwB,iBAAiB,MAAM;AACzD,aAAO,OAAO,IAAI,mBAAmB;AAAA,QACnC,SAAS,yBAAyB,QAAQ,oBAAoB;AAAA,MAChE,CAAC;AAAA,IACH;AAEA,UAAM,SAAS,OAAO,0BAA0B;AAAA,MAC9C,UAAU,QAAQ;AAAA,MAClB,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,cAAc,gBAAgB;AAAA,MAC9B;AAAA,MACA,cAAc,QAAQ;AAAA,MACtB;AAAA,MACA,YAAY,QAAQ;AAAA,MACpB;AAAA,IACF,CAAC,EAAE;AAAA,MACDA,QAAO;AAAA,QACL,CAAC,EAAE,SAAS,MAAM,MAChB,IAAI,mBAAmB;AAAA,UACrB,SAAS,0BAA0B,OAAO;AAAA,UAC1C,MAAM;AAAA,QACR,CAAC;AAAA,MACL;AAAA,IACF;AACA,WAAO;AAAA,MACL;AAAA,MACA,oBAAoB;AAAA,IACtB;AAAA,EACF,CAAC;AAEH,QAAM,SAAS,CAAC,WAAmB,eACjC,KAAK,KACF;AAAA,IAAI;AAAA,IAAyB,CAAC,OAC7B,GAAG,WAAW,kBAAkB;AAAA,MAC9B,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,SAAS,GAAG,EAAE,YAAY,KAAK,UAAU,CAAC;AAAA,IAC7E,CAAC;AAAA,EACH,EACC,KAAKA,QAAO,MAAM;AAKvB,QAAM,qBAAyC;AAAA,IAC7C,KAAK;AAAA,IACL,SAAS,CAAC,UACRA,QAAO,IAAI,aAAa;AACtB,UAAI,CAAC,MAAM,eAAe;AACxB,eAAO,OAAO,IAAI,uBAAuB;AAAA,UACvC,cAAc,MAAM;AAAA,UACpB,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AACA,YAAM,QAAQ,OAAOA,QAAO,IAAI;AAAA,QAC9B,KAAK,MAAM,oBAAoB,MAAM,aAAa;AAAA,QAClD,OAAO,CAAC,UACN,IAAI,uBAAuB;AAAA,UACzB,cAAc,MAAM;AAAA,UACpB,SAAS;AAAA,UACT;AAAA,QACF,CAAC;AAAA,MACL,CAAC;AAED,UAAI,MAAM,SAAS,wBAAwB,CAAC,MAAM,cAAc;AAC9D,eAAO,OAAO,IAAI,uBAAuB;AAAA,UACvC,cAAc,MAAM;AAAA,UACpB,SAAS;AAAA,UACT,gBAAgB;AAAA,QAClB,CAAC;AAAA,MACH;AAMA,YAAM,EAAE,UAAU,aAAa,IAAI,OAAO,MAAM,MAAM,KAAK,EAAE;AAAA,QAC3D,MAAM;AAAA,UAAK,EAAE,MAAM,cAAc;AAAA,UAAG,CAAC,MACnCA,QAAO,IAAI,aAAa;AACtB,kBAAM,OAAO,EAAE,uBACX,OAAO,2BAA2B;AAAA,cAChC,UAAU,EAAE;AAAA,cACZ,SAAS,EAAE,6BAA6B;AAAA,YAC1C,CAAC,EAAE;AAAA,cACDA,QAAO,UAAU;AAAA,gBACf,cAAc,CAAC,EAAE,SAAS,MAAM,MAC9BA,QAAO;AAAA,kBACL,IAAI,uBAAuB;AAAA,oBACzB,cAAc,MAAM;AAAA,oBACpB,SAAS,wCAAwC,OAAO;AAAA,oBACxD;AAAA,kBACF,CAAC;AAAA,gBACH;AAAA,gBACF,sBAAsB,CAAC,UACrBA,QAAO;AAAA,kBACL,IAAI,uBAAuB;AAAA,oBACzB,cAAc,MAAM;AAAA,oBACpB,SAAS;AAAA,oBACT;AAAA,kBACF,CAAC;AAAA,gBACH;AAAA,cACJ,CAAC;AAAA,YACH,IACA;AACJ,gBAAI,EAAE,wBAAwB,SAAS,MAAM;AAC3C,qBAAO,OAAO,IAAI,uBAAuB;AAAA,gBACvC,cAAc,MAAM;AAAA,gBACpB,SAAS,yBAAyB,EAAE,oBAAoB;AAAA,gBACxD,gBAAgB;AAAA,cAClB,CAAC;AAAA,YACH;AACA,mBAAO,EAAE,UAAU,EAAE,UAAU,cAAc,KAAK;AAAA,UACpD,CAAC;AAAA,QACH;AAAA,QACA,MAAM;AAAA,UAAO,EAAE,MAAM,qBAAqB;AAAA,UAAG,EAAE,MAAM,qBAAqB;AAAA,UAAG,CAAC,MAC5EA,QAAO,IAAI,aAAa;AACtB,kBAAM,MAAM,OAAO,2BAA2B;AAAA,cAC5C,UAAU,EAAE;AAAA,cACZ,SAAS,EAAE,yBAAyB;AAAA,YACtC,CAAC,EAAE;AAAA,cACDA,QAAO,UAAU;AAAA,gBACf,cAAc,CAAC,EAAE,SAAS,MAAM,MAC9BA,QAAO;AAAA,kBACL,IAAI,uBAAuB;AAAA,oBACzB,cAAc,MAAM;AAAA,oBACpB,SAAS,uCAAuC,OAAO;AAAA,oBACvD;AAAA,kBACF,CAAC;AAAA,gBACH;AAAA,gBACF,sBAAsB,CAAC,UACrBA,QAAO;AAAA,kBACL,IAAI,uBAAuB;AAAA,oBACzB,cAAc,MAAM;AAAA,oBACpB,SAAS;AAAA,oBACT;AAAA,kBACF,CAAC;AAAA,gBACH;AAAA,cACJ,CAAC;AAAA,YACH;AACA,gBAAI,QAAQ,MAAM;AAChB,qBAAO,OAAO,IAAI,uBAAuB;AAAA,gBACvC,cAAc,MAAM;AAAA,gBACpB,SAAS,qBAAqB,EAAE,gBAAgB;AAAA,gBAChD,gBAAgB;AAAA,cAClB,CAAC;AAAA,YACH;AACA,kBAAM,OAAO,EAAE,uBACX,OAAO,2BAA2B;AAAA,cAChC,UAAU,EAAE;AAAA,cACZ,SAAS,EAAE,6BAA6B;AAAA,YAC1C,CAAC,EAAE;AAAA,cACDA,QAAO,UAAU;AAAA,gBACf,cAAc,CAAC,EAAE,SAAS,MAAM,MAC9BA,QAAO;AAAA,kBACL,IAAI,uBAAuB;AAAA,oBACzB,cAAc,MAAM;AAAA,oBACpB,SAAS,oCAAoC,OAAO;AAAA,oBACpD;AAAA,kBACF,CAAC;AAAA,gBACH;AAAA,gBACF,sBAAsB,CAAC,UACrBA,QAAO;AAAA,kBACL,IAAI,uBAAuB;AAAA,oBACzB,cAAc,MAAM;AAAA,oBACpB,SAAS;AAAA,oBACT;AAAA,kBACF,CAAC;AAAA,gBACH;AAAA,cACJ,CAAC;AAAA,YACH,IACA;AACJ,gBAAI,EAAE,wBAAwB,SAAS,MAAM;AAC3C,qBAAO,OAAO,IAAI,uBAAuB;AAAA,gBACvC,cAAc,MAAM;AAAA,gBACpB,SAAS,yBAAyB,EAAE,oBAAoB;AAAA,gBACxD,gBAAgB;AAAA,cAClB,CAAC;AAAA,YACH;AACA,mBAAO,EAAE,UAAU,KAAK,cAAc,KAAK;AAAA,UAC7C,CAAC;AAAA,QACH;AAAA,QACA,MAAM;AAAA,MACR;AAEA,YAAM,gBAAgB,QAAQ,MAAM;AAClC,YAAI,MAAM,cAAe,QAAOA,QAAO,QAAQ,MAAM,aAAa;AAClE,eAAOA,QAAO;AAAA,UACZ,IAAI,uBAAuB;AAAA,YACzB,cAAc,MAAM;AAAA,YACpB,SAAS;AAAA,YACT,gBAAgB;AAAA,UAClB,CAAC;AAAA,QACH;AAAA,MACF,GAAG;AAEH,YAAM,SAAS,QACb,MAAM,SAAS,uBACX,0BAA0B;AAAA,QACxB,UAAU;AAAA,QACV;AAAA,QACA,cAAc,gBAAgB;AAAA,QAC9B,QAAQ,MAAM;AAAA,QACd,gBAAgB,MAAM;AAAA,QACtB,YAAY,MAAM;AAAA,QAClB;AAAA,MACF,CAAC,IACD,mBAAmB;AAAA,QACjB,UAAU;AAAA,QACV,WACE,MAAM,SAAS,iBAAiB,MAAM,SAAS,uBAC1C,MAAM,aAAa,SACpB;AAAA,QACN;AAAA,QACA,cAAc,gBAAgB;AAAA,QAC9B,cAAc,MAAM;AAAA,QACpB,QACE,MAAM,SAAS,iBAAiB,MAAM,SAAS,uBAC3C,MAAM,SACN;AAAA,QACN,gBACE,MAAM,SAAS,iBAAiB,MAAM,SAAS,uBAC3C,MAAM,iBACN;AAAA,QACN,YAAY,MAAM;AAAA,QAClB,kCACE,MAAM,SAAS,gBAAgB,MAAM,mCAAmC;AAAA,QAC1E;AAAA,QACA,UACE,MAAM,SAAS,iBAAiB,MAAM,SAAS,uBAC1C,MAAM,YAAY,SACnB;AAAA,MACR,CAAC,GACL;AAAA,QACAA,QAAO;AAAA,UACL,CAAC,EAAE,SAAS,MAAM,MAChB,IAAI,uBAAuB;AAAA,YACzB,cAAc,MAAM;AAAA,YACpB,SAAS,yBAAyB,OAAO;AAAA;AAAA,YAEzC,gBAAgB,QAAQ,sBAAsB,IAAI,KAAK,IAAI;AAAA,UAC7D,CAAC;AAAA,QACL;AAAA,MACF;AAEA,YAAM,YACJ,OAAO,OAAO,eAAe,WAAW,IAAI,IAAI,OAAO,aAAa,MAAO;AAE7E,YAAM,SAAkC;AAAA,QACtC,aAAa,OAAO;AAAA,QACpB,cAAc,OAAO;AAAA,QACrB;AAAA,QACA,YAAY,OAAO,SAAS,MAAM;AAAA,QAClC,eAAe,wBAAwB;AAAA,UACrC,GAAG;AAAA,UACH;AAAA,UACA,OAAO,OAAO,SAAS,MAAM;AAAA,QAC/B,CAAC;AAAA,MACH;AACA,aAAO;AAAA,IACT,CAAC;AAAA,EACL;AAEA,QAAM,UAAwB,EAAE,OAAO,OAAO,UAAU,OAAO;AAE/D,SAAO,EAAE,SAAS,mBAAmB;AACvC;AAEA,IAAM,eAAe,CAAC,UAAwC;AAC5D,MAAI,CAAC,MAAO,QAAO;AAEnB,MAAI;AACF,WAAO,IAAI,IAAI,KAAK,EAAE;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;AC1sCA,IAAM,cAAc;AAGpB,IAAM,eAAe,CAAC,QAAoC,IAAI,MAAM,WAAW,IAAI,CAAC;AAM7E,IAAM,gBAAgB,CAAC,SAA2B;AACvD,MAAI,QAAQ,QAAQ,OAAO,SAAS,SAAU,QAAO;AACrD,MAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,QAAIO,WAAU;AACd,UAAM,MAAM,KAAK,IAAI,CAAC,SAAS;AAC7B,YAAM,IAAI,cAAc,IAAI;AAC5B,UAAI,MAAM,KAAM,CAAAA,WAAU;AAC1B,aAAO;AAAA,IACT,CAAC;AACD,WAAOA,WAAU,MAAM;AAAA,EACzB;AAEA,QAAM,MAAM;AAEZ,MAAI,OAAO,IAAI,SAAS,UAAU;AAChC,UAAM,OAAO,aAAa,IAAI,IAAI;AAClC,QAAI,MAAM;AACR,YAAM,YAAY,WAAW,IAAI;AACjC,aAAO,cAAc,IAAI,OAAO,EAAE,GAAG,KAAK,MAAM,UAAU,IAAI;AAAA,IAChE;AACA,WAAO;AAAA,EACT;AAEA,MAAI,UAAU;AACd,QAAM,SAAc,CAAC;AACrB,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,GAAG;AACxC,UAAM,IAAI,cAAc,CAAC;AACzB,QAAI,MAAM,EAAG,WAAU;AACvB,WAAO,CAAC,IAAI;AAAA,EACd;AACA,SAAO,UAAU,SAAS;AAC5B;AAOO,IAAM,mBAAmB,CAC9B,WACyD;AACzD,MAAI,UAAU,QAAQ,OAAO,WAAW,UAAU;AAChD,WAAO,EAAE,UAAU,QAAQ,MAAM,CAAC,EAAE;AAAA,EACtC;AACA,QAAM,MAAM;AACZ,QAAM,OAAgC,CAAC;AAEvC,MAAI,IAAI,SAAS,OAAO,IAAI,UAAU,UAAU;AAC9C,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,IAAI,KAAY,GAAG;AACrD,WAAK,CAAC,IAAI;AAAA,IACZ;AAAA,EACF;AAEA,MAAI,IAAI,eAAe,OAAO,IAAI,gBAAgB,UAAU;AAC1D,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,IAAI,WAAkB,GAAG;AAC3D,WAAK,CAAC,IAAI;AAAA,IACZ;AAAA,EACF;AAEA,QAAM,EAAE,OAAO,IAAI,aAAa,IAAI,GAAG,KAAK,IAAI;AAChD,SAAO,EAAE,UAAU,MAAM,KAAK;AAChC;AAMO,IAAM,cAAc,CACzB,MACA,MACA,QAAqB,oBAAI,IAAI,MACb;AAChB,MAAI,QAAQ,QAAQ,OAAO,SAAS,SAAU,QAAO;AACrD,QAAM,MAAM;AAEZ,MAAI,OAAO,IAAI,SAAS,UAAU;AAChC,UAAM,OAAO,aAAa,IAAI,IAAI;AAClC,QAAI,QAAQ,CAAC,MAAM,IAAI,IAAI,GAAG;AAC5B,YAAM,IAAI,IAAI;AACd,YAAM,MAAM,KAAK,IAAI,IAAI;AACzB,UAAI,IAAK,aAAY,KAAK,MAAM,KAAK;AAAA,IACvC;AACA,WAAO;AAAA,EACT;AAEA,aAAW,KAAK,OAAO,OAAO,GAAG,GAAG;AAClC,QAAI,KAAK,OAAO,MAAM,UAAU;AAC9B,UAAI,MAAM,QAAQ,CAAC,GAAG;AACpB,mBAAW,QAAQ,EAAG,aAAY,MAAM,MAAM,KAAK;AAAA,MACrD,OAAO;AACL,oBAAY,GAAG,MAAM,KAAK;AAAA,MAC5B;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,IAAM,+BAA+B,CAC1C,OACA,SAC4B;AAC5B,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,QAAQ,OAAO;AACxB,gBAAY,MAAM,MAAM,IAAI;AAAA,EAC9B;AAEA,QAAM,aAAsC,CAAC;AAC7C,aAAW,QAAQ,MAAM;AACvB,UAAM,MAAM,KAAK,IAAI,IAAI;AACzB,QAAI,IAAK,YAAW,IAAI,IAAI;AAAA,EAC9B;AACA,SAAO;AACT;AASO,IAAM,eAAe,CAAC,QAAiB,SAAgD;AAC5F,MAAI,UAAU,QAAQ,OAAO,WAAW,SAAU,QAAO;AACzD,QAAM,WAAW,6BAA6B,CAAC,MAAM,GAAG,IAAI;AAC5D,MAAI,OAAO,KAAK,QAAQ,EAAE,WAAW,EAAG,QAAO;AAE/C,SAAO,EAAE,GAAI,QAAoC,OAAO,SAAS;AACnE;;;ACtJA,SAAS,cAAc;AAIhB,IAAM,gBAAgB,CAAC,UAAqD;AACjF,MAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,QAAO;AACxD,QAAM,YAAY,OAAO,eAAe,KAAK;AAC7C,SAAO,cAAc,OAAO,aAAa,cAAc;AACzD;AAEO,IAAM,YAAY,CAAI,UAAgB,gBAAgB,KAAK;AAE3D,IAAM,QAAQ,CACnB,WACG,YACG;AACN,QAAM,SAAS;AACf,aAAW,UAAU,SAAS;AAC5B,QAAI,CAAC,OAAQ;AACb,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAiC,GAAG;AAC5E,YAAM,UAAU,OAAO,GAAG;AAC1B,aAAO,GAAG,IACR,cAAc,OAAO,KAAK,cAAc,KAAK,IACzC,MAAM,EAAE,GAAG,QAAQ,GAAG,KAAK,IAC3B,UAAU,KAAK;AAAA,IACvB;AAAA,EACF;AACA,SAAO;AACT;AAEO,IAAM,UAAU,CACrB,QACA,cACuB;AACvB,MAAI,CAAC,OAAQ,QAAO;AACpB,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,QAAI,UAAU,OAAO,GAAG,EAAG,QAAO;AAAA,EACpC;AACA,SAAO;AACT;AAEO,IAAM,UAAU,CAA8C,OAAa;AAChF,QAAM,QAAQ,oBAAI,IAAqC;AACvD,UAAQ,CAAC,QAA0B,SAAoB;AACrD,QAAI,MAAM,IAAI,GAAG,EAAG,QAAO,MAAM,IAAI,GAAG;AACxC,UAAM,QAAQ,GAAG,KAAK,GAAG,IAAI;AAC7B,UAAM,IAAI,KAAK,KAAK;AACpB,WAAO;AAAA,EACT;AACF;AAEO,IAAM,OAAO,CAAsC,WAAc,SACtE,OAAO,KAAK,QAAQ,IAAI;AAEnB,IAAM,SAAS,CAAI,OAAyB,aAAwC;AACzF,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,SAAc,CAAC;AACrB,aAAW,QAAQ,OAAO;AACxB,UAAM,MAAM,SAAS,IAAI;AACzB,QAAI,KAAK,IAAI,GAAG,EAAG;AACnB,SAAK,IAAI,GAAG;AACZ,WAAO,KAAK,IAAI;AAAA,EAClB;AACA,SAAO;AACT;AAEO,IAAM,SAAS,CAAC,UACrB,MAAM,UAAU,KAAK,EAAE,QAAQ,oBAAoB,EAAE;AAEhD,IAAM,aAAa,CAAC,UACzB,MAAM,WAAW,IAAI,QAAQ,MAAM,CAAC,EAAG,YAAY,IAAI,MAAM,MAAM,CAAC;;;ACpE/D,SAAS,OAAO,MAAc,SAA0B;AAC7D,OAAK;AACL,SAAO;AACT;;;AC+BO,SAAS,WAAW,KAAiC;AAC1D,SACG,aAAa,OAAO,IAAI,WAAW,QAAQ,IAAI,YAAY;AAAA,EAE3D,gBAAgB,OAAO,IAAI,eAAe;AAE/C;AAEO,SAAS,kBAAkB,KAAwC;AACxE,SAAO,oBAAoB,OAAO,IAAI,kBAAkB,QAAQ,IAAI,mBAAmB;AACzF;AA4GO,IAAM,QAAc;AAAA,EACzB,MAAM;AACR;AAEO,IAAM,8BAAkD;AAAA,EAC7D,SAAS;AAAA,EACT,MAAM;AACR;AAEO,IAAM,YAAsB;AAAA,EACjC,MAAM;AACR;AAEO,IAAM,kCAA0D;AAAA,EACrE,SAAS;AAAA,EACT,MAAM;AACR;;;AChIO,IAAM,SAAS,uBAAO,QAAQ;AA8B9B,IAAM,QAAQ,uBAAO,OAAO;AAC5B,IAAM,eAAe,uBAAO,cAAc;AA4D1C,IAAM,gBAAgB,QAAQ,CAAC,WAAuD;AAC3F,QAAM,SAAS,OAAO,MAAM;AAC5B,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,EACT;AACA,SAAO,cAAc,MAAM;AAC7B,CAAC;AAEM,SAAS,UAAU,QAA8D;AACtF,SAAO,WAAW,QAAQ,WAAW;AACvC;AAEO,SAAS,YAAY,QAAqE;AAC/F,SAAO,CAAC,cAAc,MAAM;AAC9B;AAEO,SAAS,WAAW,QAA6B;AACtD,SAAO,MAAM,QAAQ,OAAO,IAAI,KAAK,WAAW,UAAU,WAAW;AACvE;;;AC7IA,IAAM,mBAAmB,oBAAI,IAAI;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,mBACP,KACA,UACA,WACA;AACA,SAAO,KAAK,GAAG,EAAE,QAAQ,CAAC,MAAM;AAC9B,QAAI,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,MAAM,YAAY,CAAC,MAAM,QAAQ,IAAI,CAAC,CAAC,GAAG;AAClE,eAAS,IAAI,CAAC,GAAG,UAAU,WAAW,CAAC;AAAA,IACzC;AAAA,EACF,CAAC;AACH;AAEA,SAAS,cACP,KACA,UACA,WACA;AACA,MAAI,QAAQ,CAAC,GAAG,MAAM,SAAS,GAAG,UAAU,WAAW,EAAE,SAAS,CAAC,CAAC;AACtE;AAEA,SAAS,qBACP,QACA,UACA,WACA;AACA,MAAI,OAAO,WAAW,YAAY,CAAC,QAAQ;AACzC;AAAA,EACF;AAEA,QAAM,IAAI;AACV,QAAM,eAAe,EAAE,YAAY;AACnC,MAAI,CAAC,cAAc;AACjB;AAAA,EACF;AAEA,MAAI,MAAM,QAAQ,aAAa,KAAK,GAAG;AACrC,kBAAc,aAAa,OAAO,UAAU,SAAS;AAAA,EACvD;AACF;AAEO,SAAS,SACd,QACA,UACA,YAAY,oBAAI,IAAsB,GACtC,KACM;AAEN,MAAI,UAAU,IAAI,MAAM,GAAG;AACzB;AAAA,EACF;AAEA,YAAU,IAAI,MAAM;AACpB,WAAS,QAAQ,OAAO,IAAI;AAE5B,MAAI,OAAO,OAAO;AAChB,kBAAc,OAAO,OAAO,UAAU,SAAS;AAAA,EACjD;AACA,MAAI,OAAO,OAAO;AAChB,kBAAc,OAAO,OAAO,UAAU,SAAS;AAAA,EACjD;AACA,MAAI,OAAO,OAAO;AAChB,kBAAc,OAAO,OAAO,UAAU,SAAS;AAAA,EACjD;AACA,MAAI,OAAO,YAAY;AACrB,uBAAmB,OAAO,YAAY,UAAU,SAAS;AAAA,EAC3D;AACA,MAAI,OAAO,mBAAmB;AAC5B,uBAAmB,OAAO,mBAAmB,UAAU,SAAS;AAAA,EAClE;AACA,MAAI,OAAO,wBAAwB,OAAO,OAAO,yBAAyB,UAAU;AAClF,aAAS,OAAO,sBAAsB,UAAU,SAAS;AAAA,EAC3D;AACA,MAAI,OAAO,OAAO;AAChB,UAAM,EAAE,MAAM,IAAI;AAClB,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,oBAAc,OAAO,UAAU,SAAS;AAAA,IAC1C,OAAO;AACL,eAAS,OAAO,UAAU,SAAS;AAAA,IACrC;AAAA,EACF;AACA,MAAI,OAAO,mBAAmB,OAAO,OAAO,oBAAoB,UAAU;AACxE,aAAS,OAAO,iBAAiB,UAAU,SAAS;AAAA,EACtD;AACA,MAAI,OAAO,cAAc;AACvB,QAAI,MAAM,QAAQ,OAAO,YAAY,GAAG;AACtC,oBAAc,OAAO,cAAc,UAAU,SAAS;AAAA,IACxD,OAAO;AACL,yBAAmB,OAAO,cAAkC,UAAU,SAAS;AAAA,IACjF;AAAA,EACF;AACA,MAAI,OAAO,aAAa;AACtB,uBAAmB,OAAO,aAAiD,UAAU,SAAS;AAAA,EAChG;AACA,MAAI,OAAO,OAAO;AAChB,uBAAmB,OAAO,OAA2C,UAAU,SAAS;AAAA,EAC1F;AACA,MAAI,OAAO,KAAK;AACd,aAAS,OAAO,KAAK,UAAU,SAAS;AAAA,EAC1C;AACA,uBAAqB,QAAQ,UAAU,SAAS;AAGhD,SAAO,KAAK,MAAM,EACf,OAAO,CAACC,SAAQ,CAAC,iBAAiB,IAAIA,IAAG,CAAC,EAC1C,QAAQ,CAACA,SAAQ;AAChB,UAAM,QAAQ,OAAOA,IAAG;AACxB,QAAI,SAAS,OAAO,UAAU,UAAU;AACtC,yBAAmB,OAAO,UAAU,SAAS;AAAA,IAC/C;AAAA,EACF,CAAC;AACL;AAKO,SAAS,SAAS,WAAW,IAAY;AAC9C,SAAO,eAAe,SAAS,MAAM,OAAO,EAAE,IAAI,KAAK,EAAE;AAC3D;AAKO,SAAS,eAAe,UAA0B;AACvD,SAAO,SAAS,QAAQ,eAAe,EAAE;AAC3C;AAMO,SAAS,aAAa,QAAwB;AAKnD,SAAO;AAAA;AAAA,IAEL,OAAO,MAAM,EAEV,QAAQ,sCAAsC,GAAG,EAEjD,QAAQ,YAAY,CAAC,UAAU,MAAM,YAAY,CAAC,EAElD,QAAQ,WAAW,CAAC,UAAU,MAAM,OAAO,GAAG,MAAM,MAAM,EAAE,YAAY,CAAC,EAEzE,QAAQ,qBAAqB,CAAC,UAAU,MAAM,YAAY,CAAC,EAE3D,QAAQ,kBAAkB,CAAC,UAAU,MAAM,YAAY,EAAE,KAAK,CAAC,EAE/D,QAAQ,OAAO,EAAE;AAAA,EACtB;AACF;AAEO,SAAS,aAAa,MAAc,WAAwB;AACjE,MAAI,OAAO,aAAa,IAAI;AAC5B,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AAGA,MAAI,UAAU,IAAI,IAAI,GAAG;AACvB,QAAI,UAAU;AACd,QAAI,kBAAkB,GAAG,IAAI,GAAG,OAAO;AACvC,WAAO,UAAU,IAAI,eAAe,GAAG;AACrC,wBAAkB,GAAG,IAAI,GAAG,OAAO;AACnC;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,YAAU,IAAI,IAAI;AAClB,SAAO;AACT;AAKO,SAAS,mBAAmB,QAAoB;AACrD,QAAM,WAAW;AACjB,MAAI,WAAW,QAAQ,OAAO,WAAW,UAAU;AACjD;AAAA,EACF;AACA,aAAW,OAAO,OAAO,KAAK,MAAM,GAAG;AACrC,QAAI,QAAQ,iBAAiB,OAAO,OAAO,GAAG,MAAM,UAAU;AAC5D,aAAO,GAAG,IAAI,OAAO,GAAG,EAAG,QAAQ,SAAS,QAAQ;AAAA,IACtD;AAAA,EACF;AACF;AAQO,SAAS,kBAAkB,QAA4C;AAC5E,MAAI,EAAE,aAAa,SAAS;AAC1B,WAAO;AAAA,EACT;AAEA,UAAQ,OAAO,MAAM;AAAA,IACnB,KAAK;AACH,UAAI,MAAM,QAAQ,OAAO,OAAO,GAAG;AACjC,eAAO;AAAA,MACT;AACA;AAAA,IACF,KAAK;AACH,UAAI,OAAO,OAAO,YAAY,WAAW;AACvC,eAAO;AAAA,MACT;AACA;AAAA,IACF,KAAK;AAAA,IACL,KAAK;AACH,UAAI,OAAO,OAAO,YAAY,UAAU;AACtC,eAAO;AAAA,MACT;AACA;AAAA,IACF,KAAK;AACH,UAAI,OAAO,OAAO,YAAY,UAAU;AACtC,eAAO;AAAA,MACT;AACA;AAAA,IACF,KAAK;AACH,UAAI,OAAO,YAAY,MAAM;AAC3B,eAAO;AAAA,MACT;AACA;AAAA,IACF,KAAK;AACH,UAAI,cAAc,OAAO,OAAO,GAAG;AACjC,eAAO;AAAA,MACT;AACA;AAAA,EACJ;AACA,SAAO,OAAO;AACd,SAAO;AACT;AAEO,SAAS,oBACd,wBACG,QACK;AACR,MAAI,qBAAqB;AACvB,WAAO,GAAG,mBAAmB;AAAA;AAAA,EAAO,OAAO,KAAK,IAAI,CAAC;AAAA,EACvD;AACA,SAAO,OAAO,KAAK,IAAI;AACzB;AAEO,SAAS,aAAa,QAAyC;AACpE,MAAI,CAAC,cAAc,MAAM,GAAG;AAC1B,WAAO;AAAA,EACT;AAGA,QAAM,SAAU,OAA4B,MAAM;AAClD,MAAI,WAAW,MAAM;AACnB,WAAO;AAAA,EACT;AAEA,QAAM,uBAAuB;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,qBAAqB,KAAK,CAAC,MAAM,OAAO,CAAC,MAAM,MAAM,GAAG;AAC1D,WAAO;AAAA,EACT;AAEA,SAAO;AACT;;;ACpTO,SAAS,SAAS,KAAU,UAAU,iBAAyB;AACpE,SACE;AAAA,IACE,QAAQ;AAAA,IACR,kBAAkB,KAAK,SAAS,IAAI,cAAe;AAAA,IACnD,uBAAuB,KAAK,SAAS,IAAI,cAAe;AAAA,IACxD,aAAa,KAAK,OAAO;AAAA,EAC3B,EACG,OAAO,OAAO,EACd,KAAK,MAAM,IAAI;AAEtB;AAEA,SAAS,aAAa,KAAU,SAAkB,YAAY,oBAAI,IAAS,GAAW;AACpF,MAAI,UAAU,IAAI,GAAG,GAAG;AACtB,WAAO;AAAA,EACT;AAEA,YAAU,IAAI,GAAG;AACjB,MAAI,OAAO;AAEX,UAAQ,IAAI,MAAM;AAAA,IAChB,KAAK;AACH,aAAO,uBAAuB,KAAK,OAAO,IAAI;AAAA,IAChD,KAAK;AACH,aAAO,aAAa,IAAI,QAAQ,SAAS,SAAS;AAAA,IACpD,KAAK;AAAA,IACL,KAAK;AACH,aAAO,IAAI,OAAO,OAAO,CAAC,MAAMC,SAAQ,OAAO,aAAaA,MAAK,SAAS,SAAS,GAAG,EAAE;AAAA,IAC1F,KAAK;AACH,aAAO,IAAI,OAAO,OAAO,CAAC,MAAMA,SAAQ,OAAO,aAAaA,MAAK,SAAS,SAAS,GAAG,EAAE;AACxF,UAAI,IAAI,aAAa;AACnB,gBAAQ,aAAa,IAAI,aAAa,SAAS,SAAS;AAAA,MAC1D;AACA,aAAO;AAAA,IACT,KAAK;AACH,aAAO,uBAAuB,GAAG,EAAE;AAAA,QACjC,CAAC,MAAMA,SAAQ,OAAO,aAAaA,MAAK,SAAS,SAAS;AAAA,QAC1D;AAAA,MACF;AAAA,IACF;AACE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,uBACP,KACA,SACA,aACA,YAAY,oBAAI,IAAS,GACjB;AACR,MAAI,UAAU,IAAI,GAAG,GAAG;AACtB,WAAO;AAAA,EACT;AAEA,YAAU,IAAI,GAAG;AACjB,MAAI,OAAO;AAEX,UAAQ,IAAI,MAAM;AAAA,IAChB,KAAK;AACH,aAAO,uBAAwB,IAAe,QAAQ,SAAS,aAAa,SAAS;AACrF;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,kBAAkB,GAAG,MAClB,IAAI,mBAAmB,eAAe,QAAQ,gCAC/C,4BAA4B,KAAK,OAAO;AAAA,QAC1C,uBAAuB,GAAG,EACvB,IAAI,CAACA,SAAQ,uBAAuBA,MAAK,SAAS,aAAa,SAAS,CAAC,EACzE,OAAO,OAAO,EACd,KAAK,IAAI;AAAA,MACd,EACG,OAAO,OAAO,EACd,KAAK,IAAI;AACZ;AAAA,IACF,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO,IAAI,OACR,IAAI,CAAC,MAAM,uBAAuB,GAAG,SAAS,aAAa,SAAS,CAAC,EACrE,OAAO,OAAO,EACd,KAAK,IAAI;AACZ,UAAI,IAAI,SAAS,WAAW,IAAI,aAAa;AAC3C,gBAAQ,uBAAuB,IAAI,aAAa,SAAS,aAAa,SAAS;AAAA,MACjF;AACA;AAAA,IACF;AACE,aAAO;AAAA,EACX;AAEA,SAAO;AACT;AAEA,SAAS,kBACP,KACA,SACA,aACA,YAAY,oBAAI,IAAS,GACjB;AACR,MAAI,UAAU,IAAI,GAAG,GAAG;AACtB,WAAO;AAAA,EACT;AAEA,YAAU,IAAI,GAAG;AAEjB,UAAQ,IAAI,MAAM;AAAA,IAChB,KAAK;AACH,aAAO;AAAA,QACL,kBAAkB,IAAI,QAAQ,SAAS,aAAa,SAAS;AAAA,QAC7D,kBAAkB,GAAG,IAAI,uBAAuB,KAAK,OAAO,IAAI;AAAA,MAClE,EACG,OAAO,OAAO,EACd,KAAK,IAAI;AAAA,IACd,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,uBAAuB,GAAG,EAC9B;AAAA,QACC,CAACA,UACEA,KAAI,mBAAmB,eAAe,QAAQ,gCAC/C,kBAAkBA,MAAK,SAAS,aAAa,SAAS;AAAA,MAC1D,EACC,OAAO,OAAO,EACd,KAAK,IAAI;AAAA,IACd,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,QACL,kBAAkB,GAAG,IAAI,uBAAuB,KAAK,OAAO,IAAI;AAAA,QAChE,IAAI,OACD,IAAI,CAACA,SAAQ,kBAAkBA,MAAK,SAAS,aAAa,SAAS,CAAC,EACpE,OAAO,OAAO,EACd,KAAK,IAAI;AAAA,QACZ,iBAAiB,OAAO,IAAI,cACxB,kBAAkB,IAAI,aAAa,SAAS,aAAa,SAAS,IAClE;AAAA,MACN,EACG,OAAO,OAAO,EACd,KAAK,IAAI;AAAA,IACd;AACE,UAAI,kBAAkB,GAAG,GAAG;AAC1B,eAAO,uBAAuB,KAAK,OAAO;AAAA,MAC5C;AACA,aAAO;AAAA,EACX;AACF;AAEA,SAAS,uBAAuB,KAAU,SAA0B;AAClE,QAAM,OAAO,gBAAgB,KAAK,OAAO;AAEzC,MAAI,QAAQ,yBAAyB,IAAI,YAAY,eAAe;AAClE,WAAO,GAAG,IAAI;AAAA,EAChB;AAEA,SAAO;AACT;AACO,IAAM,eAAe,QAAQ,sBAAsB;AAE1D,SAAS,gBAAgB,KAAU,SAA0B;AAC3D,MAAI,kBAAkB,GAAG,GAAG;AAC1B,WAAO,aAAa,IAAI,cAAc;AAAA,EACxC;AAEA,UAAQ,IAAI,MAAM;AAAA,IAChB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,cAAQ,MAAM;AACZ,cAAM,OAAO,aAAa,IAAI,QAAQ,OAAO;AAC7C,eAAO,KAAK,SAAS,GAAG,IAAI,MAAM,OAAO,QAAQ,OAAO;AAAA,MAC1D,GAAG;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,kBAAkB,KAAK,OAAO;AAAA,IACvC,KAAK;AACH,aAAO,qBAAqB,KAAK,OAAO;AAAA,IAC1C,KAAK;AACH,aAAO,KAAK,UAAU,IAAI,MAAM;AAAA,IAClC,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,IAAI;AAAA,IACb,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,cAAQ,MAAM;AACZ,cAAM,WAAW,IAAI;AACrB,cAAM,WAAW,IAAI,YAAY;AAEjC,YAAI,cAAc,IAAI;AACtB,cAAM,YAAY,CAAC,GAAG,IAAI,MAAM;AAChC,YAAI,WAAW,KAAK,WAAW,UAAU,UAAU,IAAI,gBAAgB,QAAW;AAEhF,cAAI,WAAW,GAAG;AAEhB,0BAAc,QAAQ,aAAa,YAAY;AAAA,UACjD;AAAA,QACF;AACA,YAAI,WAAW,UAAU,UAAU,IAAI,gBAAgB,QAAW;AAGhE,mBAAS,IAAI,UAAU,QAAQ,IAAI,UAAU,KAAK,GAAG;AACnD,sBAAU,KAAK,QAAQ,aAAa,YAAY,KAAK;AAAA,UACvD;AAAA,QACF;AAEA,iBAAS,eAAe,QAA4B;AAClD,cAAI,aAAa;AACf,kBAAM,SAAS,SAAS,aAAa,aAAa,OAAO,IAAI;AAC7D,mBAAO,KAAK,MAAM;AAAA,UACpB;AACA,iBAAO;AAAA,QACT;AAEA,iBAAS,eAAe,QAA0B;AAChD,iBAAO,MAAM,OAAO,KAAK,IAAI,IAAI;AAAA,QACnC;AAEA,cAAM,aAAa,UAAU,IAAI,CAAC,UAAU,aAAa,OAAO,OAAO,CAAC;AAExE,YAAI,WAAW,SAAS,UAAU;AAchC,gBAAM,uBAAiC,WAAW,MAAM,GAAG,QAAQ;AACnE,gBAAM,eAAyB,CAAC;AAEhC,cAAI,qBAAqB,SAAS,GAAG;AAEnC,yBAAa,KAAK,eAAe,oBAAoB,CAAC;AAAA,UACxD,OAAO;AAEL,yBAAa,KAAK,eAAe,CAAC,CAAC,CAAC;AAAA,UACtC;AAEA,mBAAS,IAAI,UAAU,IAAI,WAAW,QAAQ,KAAK,GAAG;AACpD,iCAAqB,KAAK,WAAW,CAAC,CAAC;AAEvC,gBAAI,MAAM,WAAW,SAAS,GAAG;AAE/B,6BAAe,oBAAoB;AAAA,YACrC;AAEA,yBAAa,KAAK,eAAe,oBAAoB,CAAC;AAAA,UACxD;AAEA,iBAAO,aAAa,KAAK,GAAG;AAAA,QAC9B;AAGA,eAAO,eAAe,eAAe,UAAU,CAAC;AAAA,MAClD,GAAG;AAAA,IACL,KAAK;AACH,aAAO,qBAAqB,KAAK,OAAO;AAAA,IAC1C,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,IAAI;AAAA,EACf;AACF;AAKA,SAAS,qBAAqB,KAA6B,SAA0B;AACnF,QAAM,UAAW,IAAe,OAAO,IAAI,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AAC1E,QAAM,YAAY,IAAI,SAAS,UAAU,MAAM;AAC/C,SAAO,QAAQ,WAAW,IAAI,QAAQ,CAAC,IAAI,MAAM,QAAQ,KAAK,MAAM,YAAY,GAAG,IAAI;AACzF;AAEA,SAAS,kBAAkB,KAAiB,SAA0B;AACpE,SACE;AAAA,IAEA,IAAI,OACD,OAAO,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC,EAAE,uBAAuB,EAChE;AAAA,IACC,CAAC,EAAE,YAAY,SAAS,KAAAA,KAAI,MAC1B,CAAC,YAAY,SAASA,MAAK,aAAaA,MAAK,OAAO,CAAC;AAAA,EACzD,EACC;AAAA,IACC,CAAC,CAAC,YAAY,SAASA,MAAK,IAAI,OAC7B,WAAWA,IAAG,KAAK,CAACA,KAAI,iBACrB,gBAAgBA,KAAI,SAASA,KAAI,UAAU,IAAI,OAC/C,MACJ,cAAc,OAAO,KACpB,aAAa,KAAK,OACnB,OACA;AAAA,EACJ,EACC,KAAK,IAAI,IACZ;AAGJ;AAEA,SAAS,gBAAgB,SAAkB,YAA8B;AACvE,QAAM,eAAe,CAAC,KAAK;AAC3B,MAAI,YAAY;AACd,iBAAa,KAAK,gBAAgB;AAAA,EACpC;AACA,MAAI,OAAO,YAAY,aAAa;AAClC,iBAAa,KAAK,GAAG,QAAQ,MAAM,IAAI,EAAE,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC;AAAA,EAChE;AACA,eAAa,KAAK,KAAK;AACvB,SAAO,aAAa,KAAK,IAAI;AAC/B;AAEA,SAAS,uBAAuB,KAAY,SAA0B;AACpE,QAAM,4BAA4B,CAAC,QAAyB,gBAAgB,KAAK,GAAG;AAEpF,UACG,WAAW,GAAG,IAAI,gBAAgB,IAAI,SAAS,IAAI,UAAU,IAAI,OAAO,MACzE,aACC,QAAQ,mBAAmB,WAAW,MACvC,QAAQ,aAAa,IAAI,cAAc,CAAC;AAAA,IAExC,IAAI,OACD;AAAA,IACC,CAAC,EAAE,KAAAA,MAAK,QAAQ,OACb,0BAA0B,OAAO,IAAI,IAAI,OAAO,MAAM,WACvD,QACA,aAAaA,MAAK,OAAO;AAAA,EAC7B,EACC,KAAK,KAAK,IACb;AAGJ;AAEA,SAAS,4BAA4B,KAAsB,SAA0B;AACnF,UACG,WAAW,GAAG,IAAI,gBAAgB,IAAI,SAAS,IAAI,UAAU,IAAI,OAAO,MACzE,oBAAoB,aAAa,IAAI,cAAc,CAAC,OACnD,IAAI,WAAW,SAAS,IACrB,WAAW,IAAI,WAAW,IAAI,CAAC,cAAc,aAAa,UAAU,cAAc,CAAC,EAAE,KAAK,IAAI,CAAC,MAC/F,MACJ,kBAAkB,KAAK,OAAO;AAElC;AAEA,SAAS,uBAAuB,KAA4B,SAA0B;AACpF,UACG,WAAW,GAAG,IAAI,gBAAgB,IAAI,OAAO,IAAI,OAAO,MACzD,eAAe,aAAa,IAAI,cAAc,CAAC,MAAM;AAAA,IACnD,KAAK,KAAK,gBAAgB;AAAA,IAC1B;AAAA,EACF,CAAC;AAEL;AAEA,SAAS,cAAc,SAAyB;AAC9C,MAAI,QAAQ,UAAU,aAAa,KAAK,QAAQ,OAAO,CAAC,CAAC,KAAK,WAAW,KAAK,OAAO,GAAG;AACtF,WAAO;AAAA,EACT;AACA,MAAI,YAAY,eAAe;AAC7B,WAAO;AAAA,EACT;AACA,SAAO,KAAK,UAAU,OAAO;AAC/B;AAEA,SAAS,uBAAuB,KAAwB;AACtD,SAAO,IAAI,OAAO,IAAI,CAAC,UAAU,MAAM,GAAG,EAAE,OAAO,IAAI,UAAU;AACnE;;;AC/XO,SAAS,cAAc,QAAqC;AAEjE,MAAI,OAAO,QAAQ;AACjB,WAAO,oBAAI,IAAI,CAAC,aAAa,CAAC;AAAA,EAChC;AAGA,QAAM,eAAe,oBAAI,IAAgB;AACzC,aAAW,CAAC,YAAY,CAAC,KAAK,OAAO,QAAQ,QAAQ,GAAG;AACtD,QAAI,EAAE,MAAM,GAAG;AACb,mBAAa,IAAI,UAAwB;AAAA,IAC3C;AAAA,EACF;AAGA,MAAI,CAAC,aAAa,MAAM;AACtB,iBAAa,IAAI,gBAAgB;AAAA,EACnC;AAEA,SAAO;AACT;AAEA,IAAM,WAAgE;AAAA,EACpE,OAAO,QAAQ;AACb,WAAO,WAAW;AAAA,EACpB;AAAA,EACA,IAAI,QAAQ;AACV,QAAI,OAAO,KAAK,MAAM,EAAE,WAAW,GAAG;AAGpC,aAAO;AAAA,IACT;AACA,WAAO,OAAO,SAAS;AAAA,EACzB;AAAA,EACA,OAAO,QAAQ;AACb,WAAO,WAAW;AAAA,EACpB;AAAA,EACA,QAAQ,QAAQ;AACd,QAAI,UAAU,QAAQ;AACpB,aAAO;AAAA,IACT;AACA,QAAI,OAAO,SAAS,WAAW;AAC7B,aAAO;AAAA,IACT;AACA,QAAI,CAAC,WAAW,MAAM,KAAK,OAAO,OAAO,YAAY,WAAW;AAC9D,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,cAAc;AACZ,WAAO;AAAA,EACT;AAAA,EACA,WAAW,QAAQ;AACjB,WAAO,UAAU,UAAU,iBAAiB;AAAA,EAC9C;AAAA,EACA,aAAa,QAAQ;AAEnB,WAAO,SAAS,WAAW,uBAAuB,UAAU,gBAAgB;AAAA,EAC9E;AAAA,EACA,MAAM,QAA8B;AAClC,WAAO,WAAW;AAAA,EACpB;AAAA,EACA,KAAK,QAAQ;AACX,WAAO,OAAO,SAAS;AAAA,EACzB;AAAA,EACA,OAAO,QAAQ;AACb,QAAI,UAAU,QAAQ;AACpB,aAAO;AAAA,IACT;AACA,QAAI,OAAO,SAAS,aAAa,OAAO,SAAS,UAAU;AACzD,aAAO;AAAA,IACT;AACA,QAAI,CAAC,WAAW,MAAM,KAAK,OAAO,OAAO,YAAY,UAAU;AAC7D,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,OAAO,QAAQ;AACb,WACE,OAAO,SAAS,YAChB,CAAC,cAAc,OAAO,oBAAoB,KAC1C,CAAC,OAAO,SACR,CAAC,OAAO,SACR,CAAC,OAAO,SACR,CAAC,OAAO,qBACR,CAAC,OAAO,cACR,CAAC,OAAO;AAAA,EAEZ;AAAA,EACA,OAAO,QAAQ;AACb,WAAO,WAAW;AAAA,EACpB;AAAA,EACA,UAAU,QAAQ;AAChB,WAAO,UAAU;AAAA,EACnB;AAAA,EACA,OAAO,QAAQ;AACb,QAAI,UAAU,QAAQ;AACpB,aAAO;AAAA,IACT;AACA,QAAI,OAAO,SAAS,UAAU;AAC5B,aAAO;AAAA,IACT;AACA,QAAI,CAAC,WAAW,MAAM,KAAK,OAAO,OAAO,YAAY,UAAU;AAC7D,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,YAAY,QAAQ;AAClB,QAAI,OAAO,QAAQ,OAAO,SAAS,SAAS;AAC1C,aAAO;AAAA,IACT;AACA,WAAO,WAAW;AAAA,EACpB;AAAA,EACA,MAAM,QAAQ;AACZ,WAAO,MAAM,QAAQ,OAAO,IAAI;AAAA,EAClC;AAAA,EACA,aAAa,QAAQ;AACnB,QAAI,iBAAiB,QAAQ;AAC3B,aAAO;AAAA,IACT;AACA,QACE,OAAO,QACP,OAAO,SAAS,aAChB,OAAO,SAAS,aAChB,OAAO,SAAS,YAChB,OAAO,SAAS,UAChB;AACA,aAAO;AAAA,IACT;AACA,WAAO,UAAU;AAAA,EACnB;AAAA,EACA,iBAAiB;AACf,WAAO;AAAA,EACT;AAAA,EACA,cAAc,QAAQ;AACpB,WAAO,OAAO,SAAS,WAAW,EAAE,WAAW;AAAA,EACjD;AACF;;;ACjJO,SAAS,kBAAkB,QAA0B;AAC1D,QAAM,QAAQ,cAAc,MAAM;AAElC,SAAO,eAAe,QAAQ,OAAO;AAAA,IACnC,YAAY;AAAA,IACZ,OAAO;AAAA,IACP,UAAU;AAAA,EACZ,CAAC;AAED,MAAI,MAAM,SAAS,GAAG;AACpB;AAAA,EACF;AAWA,QAAM,eAAe;AAAA,IACnB,CAAC,MAAM,GAAG;AAAA,IACV,CAAC,KAAK,GAAG,oBAAI,IAAI,CAAC,QAAQ,CAAC;AAAA,IAC3B,KAAK,OAAO;AAAA,IACZ,aAAa,OAAO;AAAA,IACpB,MAAM,OAAO;AAAA,IACb,OAAO,OAAO;AAAA,IACd,OAAO,OAAO,SAAS,CAAC;AAAA,IACxB,UAAU,CAAC;AAAA,IACX,sBAAsB;AAAA,EACxB;AAEA,QAAM,OAAO,QAAQ;AACrB,SAAO,OAAO;AACd,SAAO,OAAO;AACd,SAAO,OAAO;AACd,SAAO,OAAO;AACd,SAAO,OAAO;AAEd,SAAO,eAAe,QAAQ,cAAc;AAAA,IAC1C,YAAY;AAAA,IACZ,OAAO;AAAA,IACP,UAAU;AAAA,EACZ,CAAC;AACH;;;AChCA,IAAM,cAAc,CAAC,MAAe,UAA4B;AAC9D,MAAI,SAAS,MAAO,QAAO;AAC3B,MAAI,OAAO,SAAS,OAAO,MAAO,QAAO;AACzC,MAAI,SAAS,QAAQ,UAAU,KAAM,QAAO;AAC5C,MAAI,OAAO,SAAS,YAAY,OAAO,UAAU,SAAU,QAAO;AAElE,MAAI,MAAM,QAAQ,IAAI,KAAK,MAAM,QAAQ,KAAK,GAAG;AAC/C,QAAI,CAAC,MAAM,QAAQ,IAAI,KAAK,CAAC,MAAM,QAAQ,KAAK,KAAK,KAAK,WAAW,MAAM,QAAQ;AACjF,aAAO;AAAA,IACT;AACA,WAAO,KAAK,MAAM,CAAC,OAAO,UAAU,YAAY,OAAO,MAAM,KAAK,CAAC,CAAC;AAAA,EACtE;AAEA,QAAM,aAAa;AACnB,QAAM,cAAc;AACpB,QAAM,WAAW,OAAO,KAAK,UAAU;AACvC,QAAM,YAAY,OAAO,KAAK,WAAW;AACzC,MAAI,SAAS,WAAW,UAAU,OAAQ,QAAO;AAEjD,SAAO,SAAS;AAAA,IACd,CAAC,QAAQ,OAAO,OAAO,aAAa,GAAG,KAAK,YAAY,WAAW,GAAG,GAAG,YAAY,GAAG,CAAC;AAAA,EAC3F;AACF;AASA,IAAM,QAAQ,oBAAI,IAAkB;AAEpC,SAAS,QAAQ,QAA0B,MAA0B;AACnE,SAAO,OAAO,SAAS,QAAS,MAAM,QAAQ,OAAO,IAAI,KAAK,OAAO,KAAK,SAAS,IAAI;AACzF;AACA,SAAS,aAAa,QAA0B;AAC9C,SAAO,OAAO,eAAe,UAAa,QAAQ,QAAQ,QAAQ,KAAK,QAAQ,QAAQ,KAAK;AAC9F;AACA,SAAS,YAAY,QAA0B;AAC7C,SAAO,OAAO,UAAU,UAAa,QAAQ,QAAQ,OAAO,KAAK,QAAQ,QAAQ,KAAK;AACxF;AACA,SAAS,6BAA6B,QAA0B;AAC9D,SAAO,OAAO,SAAS,YAAY,OAAO,SAAS,UAAa,OAAO,gBAAgB;AACzF;AAEA,MAAM,IAAI,2CAA2C,CAAC,WAAW;AAC/D,MACE,MAAM,QAAQ,OAAO,IAAI,KACzB,OAAO,KAAK,KAAK,CAAC,MAAM,MAAM,IAAI,KAClC,MAAM,QAAQ,OAAO,IAAI,KACzB,OAAO,KAAK,SAAS,MAAM,GAC3B;AACA,WAAO,OAAO,OAAO,KAAK,OAAO,CAAC,SAAS,SAAS,MAAM;AAAA,EAC5D;AACF,CAAC;AAED,MAAM,IAAI,2BAA2B,CAAC,WAAW;AAC/C,MAAI,OAAO,QAAQ,MAAM,QAAQ,OAAO,IAAI,KAAK,OAAO,KAAK,WAAW,GAAG;AACzE,WAAO,OAAO,OAAO,KAAK,CAAC;AAAA,EAC7B;AACF,CAAC;AAED,MAAM,IAAI,oDAAoD,CAAC,WAAW;AACxE,MAAI,aAAa,MAAM,KAAK,EAAE,cAAc,SAAS;AACnD,WAAO,WAAW,CAAC;AAAA,EACrB;AACF,CAAC;AAED,MAAM,IAAI,+CAA+C,CAAC,WAAW;AACnE,MAAI,OAAO,aAAa,OAAO;AAC7B,WAAO,WAAW,CAAC;AAAA,EACrB;AACF,CAAC;AAED,MAAM,IAAI,gCAAgC,CAAC,QAAQ,GAAG,YAAY;AAChE,MACE,aAAa,MAAM,KACnB,EAAE,0BAA0B,WAC5B,OAAO,sBAAsB,QAC7B;AACA,WAAO,uBAAuB,QAAQ;AAAA,EACxC;AACF,CAAC;AAED,MAAM,IAAI,uBAAuB,CAAC,QAAQ,aAAa;AACrD,MAAI,CAAC,aAAa,MAAM,GAAG;AACzB;AAAA,EACF;AACA,MAAI,OAAO,MAAM,OAAO,OAAO,OAAO,OAAO,OAAO,KAAK;AACvD,UAAM;AAAA,MACJ,2DAA2D,OAAO,EAAE,SAAS,OAAO,GAAG,OAAO,QAAQ;AAAA,IACxG;AAAA,EACF;AACA,MAAI,OAAO,IAAI;AACb,WAAO,MAAM,OAAO;AACpB,WAAO,OAAO;AAAA,EAChB;AACF,CAAC;AAED,MAAM;AAAA,EACJ;AAAA,EACA,CAAC,QAAQ,UAAU,UAAU,MAAM,sBAAsB;AACvD,QAAI,CAAC,aAAa,MAAM,GAAG;AACzB;AAAA,IACF;AAGA,QAAI,CAAC,OAAO,OAAO,CAAC,OAAO,MAAM,GAAG;AAClC,aAAO,MAAM,aAAa,SAAS,QAAQ,CAAC;AAC5C;AAAA,IACF;AAGA,QAAI,CAAC,YAAY,MAAM,KAAK,CAAC,aAAa,MAAM,GAAG;AACjD;AAAA,IACF;AAIA,UAAM,mBAAmB,kBAAkB,IAAI,MAAM;AACrD,QAAI,CAAC,OAAO,OAAO,CAAC,OAAO,SAAS,kBAAkB;AACpD,aAAO,MAAM,aAAa,SAAS,gBAAgB,CAAC;AAAA,IACtD;AAEA,QAAI,kBAAkB;AACpB,wBAAkB,OAAO,MAAM;AAAA,IACjC;AAAA,EACF;AACF;AAEA,MAAM,IAAI,gCAAgC,CAAC,WAAW;AACpD,qBAAmB,MAAM;AAC3B,CAAC;AAED,MAAM,IAAI,gDAAgD,CAAC,WAAW;AACpE,MAAI,CAAC,YAAY,MAAM,GAAG;AACxB;AAAA,EACF;AACA,QAAM,mBAAmB;AAAA,IACvB,cAAc,SAAS,aAAa,OAAO,QAAQ,KAAK;AAAA,IACxD,cAAc,SAAS,aAAa,OAAO,QAAQ,KAAK;AAAA,EAC1D,EAAE,OAAO,OAAO;AAChB,MAAI,iBAAiB,QAAQ;AAC3B,WAAO,cAAc,oBAAoB,OAAO,aAAa,GAAG,gBAAgB;AAAA,EAClF;AACF,CAAC;AAED,MAAM,IAAI,2CAA2C,CAAC,QAAQ,WAAW,YAAY;AACnF,MAAI,CAAC,YAAY,MAAM,GAAG;AACxB;AAAA,EACF;AACA,MAAI,cAAc,UAAU,QAAQ,sBAAsB;AACxD,WAAO,OAAO;AAAA,EAChB;AACA,MAAI,cAAc,WAAW,QAAQ,wBAAwB,QAAQ,aAAa,KAAK;AACrF,WAAO,OAAO;AAAA,EAChB;AACF,CAAC;AAED,MAAM,IAAI,6BAA6B,CAAC,QAAQ,WAAW,YAAY;AACrE,MAAI,QAAQ,sBAAsB;AAChC;AAAA,EACF;AAEA,MAAI,CAAC,YAAY,MAAM,GAAG;AACxB;AAAA,EACF;AACA,QAAM,EAAE,SAAS,IAAI;AACrB,SAAO,WAAW,OAAO,aAAa,WAAW,WAAW;AAE9D,CAAC;AAED,MAAM;AAAA,EACJ;AAAA,EACA,CAAC,QAAQ,WAAW,YAAY;AAC9B,QAAI,QAAQ,wBAAwB,QAAQ,aAAa,IAAI;AAC3D;AAAA,IACF;AACA,QAAI,CAAC,YAAY,MAAM,GAAG;AACxB;AAAA,IACF;AACA,UAAM,EAAE,UAAU,SAAS,IAAI;AAE/B,QAAI,aAAa,UAAa,WAAY,WAAsB,QAAQ,UAAU;AAChF,aAAO,OAAO;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,IAAI,0BAA0B,CAAC,QAAQ,WAAW,YAAY;AAClE,MAAI,QAAQ,sBAAsB;AAChC;AAAA,EACF;AACA,QAAM,EAAE,UAAU,SAAS,IAAI;AAC/B,QAAM,cAAc,OAAO,aAAa,YAAY,YAAY;AAChE,QAAM,cAAc,OAAO,aAAa,YAAY,WAAW;AAE/D,MAAI,OAAO,SAAS,CAAC,MAAM,QAAQ,OAAO,KAAK,MAAM,eAAe,cAAc;AAChF,UAAM,QAAQ,OAAO;AAErB,UAAM,WAAW,MAAM,YAAY,YAAY,CAAC,EAAE,KAAK,KAAK;AAC5D,QAAI,CAAC,aAAa;AAEhB,aAAO,kBAAkB;AAAA,IAC3B;AACA,WAAO,QAAQ;AAAA,EACjB;AAEA,MAAI,MAAM,QAAQ,OAAO,KAAK,KAAK,eAAe,WAAY,OAAO,MAAM,QAAQ;AAGjF,WAAO,QAAQ,OAAO,MAAM,MAAM,GAAG,QAAQ;AAAA,EAC/C;AAEA,SAAO;AACT,CAAC;AAED,MAAM,IAAI,kCAAkC,CAAC,WAAW;AACtD,MAAI,CAAC,OAAO,eAAe,SAAS,GAAG;AACrC;AAAA,EACF;AACA,MAAI,OAAO,WAAW,QAAS,MAAM,QAAQ,OAAO,OAAO,KAAK,OAAO,QAAQ,WAAW,GAAI;AAC5F,WAAO,OAAO;AAAA,EAChB;AACF,CAAC;AAED,MAAM,IAAI,kDAAkD,CAAC,WAAW;AACtE,MAAI,OAAO,WAAW,MAAM;AAC1B;AAAA,EACF;AACA,MAAI,CAAC,MAAM,QAAQ,OAAO,OAAO,GAAG;AAClC,WAAO,UAAU,CAAC,OAAO,OAAO;AAAA,EAClC;AACF,CAAC;AAED,MAAM,IAAI,kCAAkC,CAAC,QAAQ,aAAa;AAChE,MAAI,OAAO,eAAe,OAAO,SAAS,CAAC,YAAY,OAAO,aAAa,OAAO,KAAK,GAAG;AACxF,UAAM;AAAA,MACJ,sEAAsE,OAAO,EAAE,OAAO,QAAQ;AAAA,IAChG;AAAA,EACF;AACA,MAAI,OAAO,aAAa;AACtB,WAAO,QAAQ,OAAO;AACtB,WAAO,OAAO;AAAA,EAChB;AACF,CAAC;AAED,MAAM,IAAI,qCAAqC,CAAC,WAAW;AACzD,MAAI,OAAO,UAAU,QAAW;AAC9B,WAAO,OAAO,CAAC,OAAO,KAAK;AAC3B,WAAO,OAAO;AAAA,EAChB;AACF,CAAC;AAED,MAAM,IAAI,iCAAiC,CAAC,QAAQ,GAAG,YAAY;AACjE,MAAI,6BAA6B,MAAM,KAAK,QAAQ,+BAA+B;AACjF,WAAO,cAAc,OAAO,MAAM,IAAI,MAAM;AAAA,EAC9C;AACF,CAAC;AAYD,MAAM,IAAI,gDAAgD,CAAC,WAAW;AACpE,MAAI,WAAW,QAAQ,OAAO,WAAW,UAAU;AACjD,sBAAkB,MAAM;AAAA,EAC1B;AACF,CAAC;AAEM,SAAS,UACd,YACA,mBACA,UACA,SACsB;AACtB,QAAM;AAAA,IAAQ,CAAC,SACb,SAAS,YAAY,CAAC,QAAQ,QAAQ,KAAK,QAAQ,UAAU,SAAS,KAAK,iBAAiB,CAAC;AAAA,EAC/F;AACA,SAAO;AACT;;;AC3SO,SAAS,SAAS,KAAU,SAAkB,YAAY,oBAAI,IAAS,GAAQ;AACpF,MAAI,UAAU,IAAI,GAAG,GAAG;AACtB,WAAO;AAAA,EACT;AAEA,YAAU,IAAI,GAAG;AAEjB,UAAQ,IAAI,MAAM;AAAA,IAChB,KAAK;AACH,aAAO,OAAO,OAAO,KAAK;AAAA,QACxB,QAAQ,SAAS,IAAI,QAAQ,SAAS,SAAS;AAAA,MACjD,CAAC;AAAA,IACH,KAAK;AACH,aAAO,OAAO,OAAO,KAAK;AAAA,QACxB,QAAQ,IAAI,OAAO;AAAA,UAAI,CAAC,MACtB,OAAO,OAAO,GAAG,EAAE,KAAK,SAAS,EAAE,KAAK,SAAS,SAAS,EAAE,CAAC;AAAA,QAC/D;AAAA,MACF,CAAC;AAAA,IACH,KAAK;AAAA,IACL,KAAK;AAEH,YAAM,eAAe,OAAO,OAAO,KAAK;AAAA,QACtC,QAAQ,IAAI,OAAO,IAAI,CAAC,MAAM,SAAS,GAAG,SAAS,SAAS,CAAC;AAAA,MAC/D,CAAC;AAGD,UAAI,aAAa,OAAO,KAAK,CAAC,MAAM,EAAE,SAAS,KAAK,GAAG;AACrD,eAAO;AAAA,MACT;AAGA,UAAI,aAAa,OAAO,KAAK,CAAC,MAAM,EAAE,SAAS,SAAS,GAAG;AACzD,eAAO;AAAA,MACT;AAGA,UACE,aAAa,OAAO,MAAM,CAAC,MAAM;AAC/B,cAAM,IAAI,aAAa,mBAAmB,CAAC,GAAG,OAAO;AACrD,cAAM,IAAI,aAAa,mBAAmB,aAAa,OAAO,CAAC,CAAC,GAAG,OAAO;AAC1E,eAAO,MAAM;AAAA,MACf,CAAC,KACD,aAAa,OAAO,KAAK,CAAC,MAAM,EAAE,mBAAmB,MAAS,GAC9D;AACA,qBAAa,SAAS,aAAa,OAAO,OAAO,CAAC,MAAM,EAAE,mBAAmB,MAAS;AAAA,MACxF;AAGA,YAAM,SAAS,OAAO,aAAa,QAAQ,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AAC1E,UAAI,OAAO,WAAW,aAAa,OAAO,QAAQ;AAChD,qBAAa,SAAS;AAAA,MACxB;AAEA,aAAO,OAAO,OAAO,cAAc;AAAA,QACjC,QAAQ,aAAa,OAAO,IAAI,CAAC,MAAM,SAAS,GAAG,SAAS,SAAS,CAAC;AAAA,MACxE,CAAC;AAAA,IACH;AACE,aAAO;AAAA,EACX;AACF;AAGA,SAAS,mBAAkC,KAAW;AACpD,UAAQ,IAAI,MAAM;AAAA,IAChB,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO,EAAE,GAAG,KAAK,gBAAgB,OAAU;AAAA,EAC/C;AACF;;;AC1CO,SAAS,MACd,QACA,SACA,SACA,YAAuB,oBAAI,IAAI,GAC/B,YAAY,oBAAI,IAAY,GACvB;AACL,MAAI,YAAY,MAAM,GAAG;AACvB,QAAI,UAAU,MAAM,GAAG;AACrB,aAAO,mBAAmB,QAAQ,SAAS,OAAO;AAAA,IACpD;AAEA,WAAO,aAAa,QAAQ,OAAO;AAAA,EACrC;AAEA,QAAM,mBAAmB;AACzB,QAAM,eAAe,iBAAiB,YAAY;AAClD,QAAM,QAAQ,iBAAiB,KAAK;AAEpC,MAAI,cAAc;AAChB,UAAM,MAAM;AAAA,MACV;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM,QAAQ,CAAC,SAAS;AACtB,UAAI,OAAO;AAAA,QACT,qBAAqB,kBAAkB,MAAM,SAAS,SAAS,WAAW,SAAS;AAAA,MACrF;AAAA,IACF,CAAC;AAED,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,SAAS,GAAG;AACpB,UAAM,OAAO,CAAC,GAAG,KAAK,EAAE,CAAC;AACzB,UAAM,MAAM;AAAA,MACV;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,IAAI,eAAe,+DAA+D;AAC1F;AAEA,SAAS,qBACP,QACA,MACA,SACA,SACA,YAAuB,oBAAI,IAAI,GAC/B,YAAY,oBAAI,IAAY,GACvB;AAEL,MAAI,gBAAgB,UAAU,IAAI,MAAM;AACxC,MAAI,CAAC,eAAe;AAClB,oBAAgB,oBAAI,IAAI;AACxB,cAAU,IAAI,QAAQ,aAAa;AAAA,EACrC;AACA,QAAM,YAAY,cAAc,IAAI,IAAI;AACxC,MAAI,WAAW;AACb,WAAO;AAAA,EACT;AAKA,QAAM,MAAM,CAAC;AACb,gBAAc,IAAI,MAAM,GAAG;AAI3B,SAAO,OAAO,OAAO,KAAK,gBAAgB,QAAQ,MAAM,SAAS,SAAS,WAAW,SAAS,CAAC;AACjG;AAEA,SAAS,mBAAmB,QAAiB,SAA6B,SAAuB;AAC/F,MAAI,QAAQ;AACV,WAAO;AAAA,MACL;AAAA,MACA,MAAM,QAAQ,aAAa,YAAY;AAAA,IACzC;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA,MAAM;AAAA,EACR;AACF;AAEA,SAAS,aAAa,QAAyB,SAAkC;AAC/E,SAAO;AAAA,IACL;AAAA,IACA,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AACF;AAEA,SAAS,gBACP,QACA,MACA,SACA,SACA,WACA,WACK;AACL,QAAM,cAAc,uBAAuB,cAAc,MAAa,CAAC;AACvE,QAAM,wBAAwB,QAAQ,aAAa,CAAC,MAAM,MAAM,MAAM;AAEtE,UAAQ,MAAM;AAAA,IACZ,KAAK;AACH,aAAO;AAAA,QACL,SAAS,OAAO;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB;AAAA,QACA,gBAAgB,eAAe,QAAQ,uBAAuB,WAAW,OAAO;AAAA,QAChF,QAAQ,OAAO,MAAO,IAAI,CAAC,MAAM,MAAM,GAAG,SAAS,QAAW,WAAW,SAAS,CAAC;AAAA,QACnF,MAAM;AAAA,MACR;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,GAAI,QAAQ,aAAa,YAAY;AAAA,QACrC,SAAS,OAAO;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB;AAAA,QACA,gBAAgB,eAAe,QAAQ,uBAAuB,WAAW,OAAO;AAAA,MAClF;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,SAAS,OAAO;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB;AAAA,QACA,gBAAgB,eAAe,QAAQ,uBAAuB,WAAW,OAAO;AAAA,QAChF,QAAQ,OAAO,MAAO,IAAI,CAAC,MAAM,MAAM,GAAG,SAAS,QAAW,WAAW,SAAS,CAAC;AAAA,QACnF,MAAM;AAAA,MACR;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,SAAS,OAAO;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB;AAAA,QACA,gBAAgB,eAAe,QAAQ,uBAAuB,WAAW,OAAO;AAAA,QAChF,MAAM;AAAA,MACR;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,SAAS,OAAO;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB;AAAA,QACA,QAAQ,OAAO;AAAA,QACf,gBAAgB,eAAe,QAAQ,uBAAuB,WAAW,OAAO;AAAA,QAChF,MAAM;AAAA,MACR;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,SAAS,OAAO;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB;AAAA,QACA,gBAAgB;AAAA,UACd;AAAA,UACA,yBAAyB;AAAA,UACzB;AAAA,UACA;AAAA,QACF;AAAA,QACA,QAAS,OAA0B,KAAM,IAAI,CAAC,GAAG,OAAO;AAAA,UACtD,KAAK,aAAa,GAAG,MAAS;AAAA,UAC9B,SAAS,OAAO,YAAa,CAAC;AAAA,QAChC,EAAE;AAAA,QACF,MAAM;AAAA,MACR;AAAA,IACF,KAAK;AACH,aAAO,aAAa,QAAwB,SAAS,WAAW,WAAW,OAAO;AAAA,IACpF,KAAK;AACH,aAAO;AAAA,QACL,SAAS,OAAO;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB;AAAA,QACA,gBAAgB,eAAe,QAAQ,uBAAuB,WAAW,OAAO;AAAA,QAChF,MAAM;AAAA,MACR;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,SAAS,OAAO;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB;AAAA,QACA,gBAAgB,eAAe,QAAQ,uBAAuB,WAAW,OAAO;AAAA,QAChF,MAAM;AAAA,MACR;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,SAAS,OAAO;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB;AAAA,QACA,gBAAgB,eAAe,QAAQ,uBAAuB,WAAW,OAAO;AAAA,QAChF,MAAM;AAAA,MACR;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,SAAS,OAAO;AAAA,QAChB;AAAA,QACA,gBAAgB,eAAe,QAAQ,uBAAuB,WAAW,OAAO;AAAA,QAChF,MAAM;AAAA,QACN,YAAY,OAAO;AAAA,MACrB;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,SAAS,OAAO;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB;AAAA,QACA,gBAAgB,eAAe,QAAQ,uBAAuB,WAAW,OAAO;AAAA,QAChF,QAAQ,OAAO,MAAO,IAAI,CAAC,MAAM,MAAM,GAAG,SAAS,QAAW,WAAW,SAAS,CAAC;AAAA,QACnF,MAAM;AAAA,MACR;AAAA,IACF,KAAK;AACH,YAAM,MAAM,iDAAiD;AAAA,IAC/D,KAAK;AACH,aAAO;AAAA,QACL,SAAS,OAAO;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB;AAAA,QACA,gBAAgB,eAAe,QAAQ,uBAAuB,WAAW,OAAO;AAAA,QAChF,MAAM;AAAA,MACR;AAAA,IACF,KAAK;AACH,UAAI,MAAM,QAAQ,OAAO,KAAK,GAAG;AAE/B,cAAMC,YAAW,OAAO;AACxB,cAAMC,YAAW,OAAO;AACxB,cAAM,YAAoB;AAAA,UACxB,SAAS,OAAO;AAAA,UAChB,YAAY,OAAO;AAAA,UACnB;AAAA,UACA,UAAAA;AAAA,UACA,UAAAD;AAAA,UACA,gBAAgB,eAAe,QAAQ,uBAAuB,WAAW,OAAO;AAAA,UAChF,QAAQ,OAAO,MAAM,IAAI,CAAC,MAAM,MAAM,GAAG,SAAS,QAAW,WAAW,SAAS,CAAC;AAAA,UAClF,MAAM;AAAA,QACR;AACA,YAAI,OAAO,oBAAoB,MAAM;AACnC,oBAAU,cAAc,QAAQ,aAAa,YAAY;AAAA,QAC3D,WAAW,OAAO,iBAAiB;AACjC,oBAAU,cAAc;AAAA,YACtB,OAAO;AAAA,YACP;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,eAAO;AAAA,MACT,OAAO;AACL,eAAO;AAAA,UACL,SAAS,OAAO;AAAA,UAChB,YAAY,OAAO;AAAA,UACnB;AAAA,UACA,gBAAgB,eAAe,QAAQ,uBAAuB,WAAW,OAAO;AAAA,UAChF,QAAQ;AAAA,YACN,OAAO;AAAA,YACP;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,UACA,MAAM;AAAA,QACR;AAAA,MACF;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,SAAS,OAAO;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB;AAAA,QACA,gBAAgB,eAAe,QAAQ,uBAAuB,WAAW,OAAO;AAAA,QAChF,QAAS,OAAO,KAA+B,IAAI,CAACE,UAAS;AAC3D,gBAAM,SAA2B,EAAE,GAAG,KAAK,QAAQ,OAAO,eAAe,OAAO,GAAG,MAAAA,MAAK;AACxF,4BAAkB,MAAM;AACxB,4BAAkB,MAAM;AACxB,iBAAO,MAAM,QAAQ,SAAS,QAAW,WAAW,SAAS;AAAA,QAC/D,CAAC;AAAA,QACD,MAAM;AAAA,MACR;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,SAAS,OAAO;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB;AAAA,QACA,gBAAgB,eAAe,QAAQ,uBAAuB,WAAW,OAAO;AAAA,QAChF,QAAS,OAA0B,KAAM,IAAI,CAAC,MAAM,aAAa,GAAG,MAAS,CAAC;AAAA,QAC9E,MAAM;AAAA,MACR;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF,KAAK;AAEH,YAAM,WAAW,OAAO;AACxB,YAAM,WAAW,OAAO,OAAO,aAAa,WAAW,OAAO,WAAW;AACzE,YAAM,SAAS,QAAQ,aAAa,YAAY;AAChD,UAAI,WAAW,KAAK,YAAY,GAAG;AACjC,eAAO;AAAA,UACL,SAAS,OAAO;AAAA,UAChB,YAAY,OAAO;AAAA,UACnB;AAAA,UACA,UAAU,OAAO;AAAA,UACjB;AAAA;AAAA,UAEA,QAAQ,MAAM,KAAK,IAAI,UAAU,QAAQ,KAAK,CAAC,EAAE,KAAK,MAAM;AAAA;AAAA,UAE5D,aAAa,YAAY,IAAI,SAAY;AAAA,UACzC,gBAAgB,eAAe,QAAQ,uBAAuB,WAAW,OAAO;AAAA,UAChF,MAAM;AAAA,QACR;AAAA,MACF;AAEA,aAAO;AAAA,QACL,SAAS,OAAO;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB;AAAA,QACA;AAAA,QACA,gBAAgB,eAAe,QAAQ,uBAAuB,WAAW,OAAO;AAAA,QAChF,MAAM;AAAA,MACR;AAAA,EACJ;AACF;AAKA,SAAS,eACP,QACA,uBACA,WACA,SACoB;AACpB,QAAM,OACJ,QAAQ,aAAa,QAAQ,qBAAqB,KAClD,OAAO,SACP,OAAO,OACP;AACF,MAAI,MAAM;AACR,WAAO,aAAa,MAAM,SAAS;AAAA,EACrC;AACF;AAEA,SAAS,aACP,QACA,SACA,WACA,WACA,SACA,uBACY;AACZ,QAAM,OAAO,eAAe,QAAQ,uBAAuB,WAAW,OAAO;AAC7E,SAAO;AAAA,IACL,SAAS,OAAO;AAAA,IAChB,YAAY,OAAO;AAAA,IACnB;AAAA,IACA,QAAQ,YAAY,QAAQ,SAAS,WAAW,WAAW,IAAI;AAAA,IAC/D,gBAAgB;AAAA,IAChB,YAAY,gBAAgB,QAAQ,SAAS,WAAW,SAAS;AAAA,IACjE,MAAM;AAAA,EACR;AACF;AAEA,SAAS,gBACP,QACA,SACA,WACA,WACmB;AAGnB,QAAM,aAAa,OAAO;AAC1B,MAAI,CAAC,YAAY;AACf,WAAO,CAAC;AAAA,EACV;AACA,SAAO,WAAW;AAAA,IAChB,CAAC,MAAM,MAAM,GAAG,SAAS,QAAW,WAAW,SAAS;AAAA,EAC1D;AACF;AAKA,SAAS,YACP,QACA,SACA,WACA,WACA,kBACmB;AACnB,QAAM,WAAW,IAAI,IAAI,OAAO,YAAY,CAAC,CAAC;AAC9C,MAAI,OAA0B,OAAO,QAAQ,OAAO,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO;AAAA,IAC3F,KAAK,MAAM,OAAO,SAAS,KAAK,WAAW,SAAS;AAAA,IACpD,mBAAmB;AAAA,IACnB,YAAY,SAAS,IAAI,GAAG;AAAA,IAC5B,yBAAyB;AAAA,IACzB,SAAS;AAAA,EACX,EAAE;AAEF,MAAI,wBAAwB;AAC5B,MAAI,OAAO,mBAAmB;AAI5B,4BACE,CAAC,OAAO,wBAAwB,OAAO,KAAK,OAAO,iBAAiB,EAAE,WAAW;AAEnF,WAAO,KAAK;AAAA,MACV,OAAO,QAAQ,OAAO,iBAAiB,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM;AAC7D,cAAM,MAAM,MAAM,OAAO,SAAS,KAAK,WAAW,SAAS;AAC3D,cAAM,UAAU,sCAAsC,gBAAgB;AAAA,+BAC/C,IAAI,QAAQ,MAAM,MAAM,CAAC;AAChD,YAAI,UAAU,IAAI,UAAU,GAAG,IAAI,OAAO;AAAA;AAAA,EAAO,OAAO,KAAK;AAC7D,eAAO;AAAA,UACL;AAAA,UACA,mBAAmB,CAAC;AAAA,UACpB,YAAY,yBAAyB,SAAS,IAAI,GAAG;AAAA,UACrD,yBAAyB;AAAA,UACzB,SAAS,wBAAwB,gBAAgB;AAAA,QACnD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI,QAAQ,wBAAwB;AAClC,WAAO,KAAK;AAAA,MACV,OAAO,QAAQ,OAAO,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM;AACvD,cAAM,MAAM,MAAM,OAAO,SAAS,KAAK,WAAW,SAAS;AAC3D,cAAM,UAAU,sCAAsC,gBAAgB;AAAA,0BACpD,GAAG;AACrB,YAAI,UAAU,IAAI,UAAU,GAAG,IAAI,OAAO;AAAA;AAAA,EAAO,OAAO,KAAK;AAC7D,eAAO;AAAA,UACL;AAAA,UACA,mBAAmB;AAAA,UACnB,YAAY,SAAS,IAAI,GAAG;AAAA,UAC5B,yBAAyB;AAAA,UACzB,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAGA,UAAQ,OAAO,sBAAsB;AAAA,IACnC,KAAK;AAAA,IACL,KAAK;AACH,UAAI,uBAAuB;AACzB,eAAO;AAAA,MACT;AACA,aAAO,KAAK,OAAO;AAAA,QACjB,KAAK,QAAQ,aAAa,kCAAkC;AAAA,QAC5D,mBAAmB;AAAA,QACnB,YAAY;AAAA,QACZ,yBAAyB;AAAA,QACzB,SAAS;AAAA,MACX,CAAC;AAAA,IAEH,KAAK;AACH,aAAO;AAAA;AAAA;AAAA,IAIT;AACE,aAAO,KAAK,OAAO;AAAA,QACjB,KAAK,MAAM,OAAO,sBAAsB,SAAS,eAAe,WAAW,SAAS;AAAA,QACpF,mBAAmB;AAAA,QACnB,YAAY;AAAA,QACZ,yBAAyB;AAAA,QACzB,SAAS;AAAA,MACX,CAAC;AAAA,EACL;AACF;AAIA,SAAS,eACP,QACA,WAAW,MACX,YAAY,oBAAI,IAA0B,GAC7B;AACb,MAAI,UAAU,IAAI,MAAM,GAAG;AACzB,WAAO,CAAC;AAAA,EACV;AACA,YAAU,IAAI,MAAM;AACpB,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,WAAO,OAAO;AAAA,MACZ,CAAC,MAAM,SAAS;AAAA,QACd,GAAG;AAAA,QACH,GAAG,eAAe,KAAK,OAAO,SAAS;AAAA,MACzC;AAAA,MACA,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,cAAc,MAAM,GAAG;AACzB,WAAO;AAAA,MACL,GAAI,YAAY,eAAe,MAAM,IAAI,OAAO,QAAQ,CAAC;AAAA,MACzD,GAAG,OAAO,KAAK,MAAM,EAAE;AAAA,QACrB,CAAC,MAAM,SAAS;AAAA,UACd,GAAG;AAAA,UACH,GAAG,eAAe,OAAO,GAAG,GAAG,OAAO,SAAS;AAAA,QACjD;AAAA,QACA,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACA,SAAO,CAAC;AACV;AAEA,IAAM,yBAAyB,QAAQ,cAAc;AAKrD,SAAS,eAAe,QAAmE;AACzF,SAAO,WAAW;AACpB;;;AC3iBA,IAAM,WAAW,CAAC,UAChB,UAAU,QAAQ,OAAO,UAAU;AAErC,IAAM,uBAAuB,CAAC,YAA4B;AACxD,MAAI;AACF,WAAO,mBAAmB,OAAO,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AAAA,EAC3E,QAAQ;AACN,UAAM,IAAI,eAAe,iCAAiC,OAAO,WAAW;AAAA,EAC9E;AACF;AAEA,IAAM,uBAAuB,CAAC,YAC5B,QAAQ,QAAQ,MAAM,IAAI,EAAE,QAAQ,OAAO,IAAI;AAEjD,IAAM,eAAe,CAAC,QAAgB,QACpC,WAAW,MAAM,KAAK,qBAAqB,GAAG,CAAC,KAAK,GAAG,MAAM,IAAI,qBAAqB,GAAG,CAAC;AAE5F,IAAM,oBAAoB,CAAC,QAAwB;AACjD,MAAI,QAAQ,IAAK,QAAO;AACxB,MAAI,CAAC,IAAI,WAAW,IAAI,GAAG;AACzB,UAAM,IAAI;AAAA,MACR,qBAAqB,GAAG;AAAA,IAC1B;AAAA,EACF;AACA,SAAO,KAAK,IACT,MAAM,CAAC,EACP,MAAM,GAAG,EACT,IAAI,oBAAoB,EACxB,IAAI,oBAAoB,EACxB,KAAK,GAAG,CAAC;AACd;AAEA,IAAM,iBAAiB,CAAC,MAAe,QAAyB;AAC9D,QAAM,UAAU,kBAAkB,GAAG;AACrC,MAAI,YAAY,IAAK,QAAO;AAE5B,MAAI,UAAU;AACd,aAAW,cAAc,QAAQ,MAAM,CAAC,EAAE,MAAM,GAAG,GAAG;AACpD,UAAM,UAAU,qBAAqB,UAAU;AAC/C,QAAI,CAAC,SAAS,OAAO,KAAK,EAAE,WAAW,UAAU;AAC/C,YAAM,IAAI,eAAe,2BAA2B,GAAG,GAAG;AAAA,IAC5D;AACA,cAAU,QAAQ,OAAO;AAAA,EAC3B;AACA,SAAO;AACT;AAEA,IAAM,kBAAkB,CACtB,MACA,MACA,SACA,mBACA,UACA,cACY;AACZ,MAAI,CAAC,SAAS,IAAI,EAAG,QAAO;AAE5B,MAAI,OAAO,KAAK,SAAS,UAAU;AACjC,UAAM,MAAM,kBAAkB,KAAK,IAAI;AACvC,UAAM,SAAS,SAAS,IAAI,GAAG;AAC/B,QAAI,QAAQ;AACV,UAAI,SAAS,MAAM,GAAG;AACpB,0BAAkB,IAAI,QAAsB,GAAG;AAAA,MACjD;AACA,aAAO;AAAA,IACT;AAEA,UAAM,SAAS,eAAe,MAAM,GAAG;AACvC,QAAI,CAAC,SAAS,MAAM,EAAG,QAAO;AAE9B,UAAM,cAAmD,MAAM,QAAQ,MAAM,IAAI,CAAC,IAAI,CAAC;AACvF,aAAS,IAAI,KAAK,WAAW;AAC7B,cAAU,IAAI,QAAQ,WAAW;AACjC,sBAAkB,IAAI,aAA2B,GAAG;AAEpD,UAAM,gBAAgB;AACtB,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,MAAC,YAAwC,GAAG,IAAI;AAAA,QAC9C;AAAA,QACA;AAAA,QACA,aAAa,eAAe,GAAG;AAAA,QAC/B;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,OAAO,UAAU,IAAI,IAAI;AAC/B,MAAI,KAAM,QAAO;AAEjB,QAAM,QAA6C,MAAM,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC;AAC/E,YAAU,IAAI,MAAM,KAAK;AACzB,WAAS,IAAI,SAAS,KAAK;AAE3B,MAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,SAAK,QAAQ,CAAC,OAAO,UAAU;AAC7B,MAAC,MAAoB,KAAK,IAAI;AAAA,QAC5B;AAAA,QACA;AAAA,QACA,aAAa,SAAS,OAAO,KAAK,CAAC;AAAA,QACnC;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC;AACD,WAAO;AAAA,EACT;AAEA,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAAI,GAAG;AAC/C,IAAC,MAAkC,GAAG,IAAI;AAAA,MACxC;AAAA,MACA;AAAA,MACA,aAAa,SAAS,GAAG;AAAA,MACzB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEO,SAAS,YAAY,QAG1B;AACA,QAAM,oBAAuC,oBAAI,QAAQ;AACzD,QAAM,qBAAqB;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,oBAAI,IAAI;AAAA,IACR,oBAAI,QAAQ;AAAA,EACd;AACA,SAAO,EAAE,mBAAmB,mBAAmB;AACjD;;;AC7IA,IAAMC,SAAQ,oBAAI,IAAkB;AAEpCA,OAAM,IAAI,2DAA2D,CAAC,WAAW;AAC/E,MAAI,OAAO,QAAQ,OAAO,eAAe,OAAO,KAAK,WAAW,OAAO,YAAY,QAAQ;AACzF,WAAO;AAAA,EACT;AACF,CAAC;AAEDA,OAAM,IAAI,2CAA2C,CAAC,WAAW;AAC/D,MAAI,OAAO,eAAe,OAAO,YAAY,KAAK,CAAC,MAAM,OAAO,MAAM,QAAQ,GAAG;AAC/E,WAAO;AAAA,EACT;AACF,CAAC;AAEDA,OAAM,IAAI,qEAAqE,CAAC,WAAW;AACzF,QAAM,EAAE,UAAU,SAAS,IAAI;AAC/B,MAAI,OAAO,aAAa,YAAY,OAAO,aAAa,UAAU;AAChE,WAAO,YAAY;AAAA,EACrB;AACF,CAAC;AAEDA,OAAM,IAAI,uCAAuC,CAAC,WAAW;AAC3D,QAAM,EAAE,SAAS,IAAI;AACrB,MAAI,OAAO,aAAa,UAAU;AAChC,WAAO,YAAY;AAAA,EACrB;AACF,CAAC;AAEDA,OAAM,IAAI,uCAAuC,CAAC,WAAW;AAC3D,QAAM,EAAE,SAAS,IAAI;AACrB,MAAI,OAAO,aAAa,UAAU;AAChC,WAAO,YAAY;AAAA,EACrB;AACF,CAAC;AAEDA,OAAM,IAAI,gCAAgC,CAAC,WAAW;AACpD,QAAM,mBAAmB,OAAO,OAAO;AACvC,SAAO,qBAAqB,aAAa,qBAAqB;AAChE,CAAC;AAEM,SAAS,SAAS,QAA0B,UAA4B;AAC7E,QAAM,SAAmB,CAAC;AAC1B,EAAAA,OAAM,QAAQ,CAAC,MAAM,aAAa;AAChC,aAAS,QAAQ,CAACC,SAAQ,QAAQ;AAChC,UAAI,KAAKA,OAAM,MAAM,OAAO;AAC1B,eAAO,KAAK,iBAAiB,GAAG,cAAc,QAAQ,MAAM,QAAQ,EAAE;AAAA,MACxE;AACA,aAAOA;AAAA,IACT,CAAC;AAAA,EACH,CAAC;AACD,SAAO;AACT;;;AC9CO,SAAS,KACd,QACA,SAAiC,MACf;AAClB,MAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,CAAC,cAAc,MAAM,GAAG;AACpD,WAAO;AAAA,EACT;AAGA,MAAK,OAAsB,eAAe,MAAM,GAAG;AACjD,WAAO;AAAA,EACT;AAGA,SAAO,eAAe,QAAQ,QAAQ;AAAA,IACpC,YAAY;AAAA,IACZ,OAAO;AAAA,IACP,UAAU;AAAA,EACZ,CAAC;AAGD,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,WAAO,QAAQ,CAAC,UAAU,KAAK,OAAO,MAAM,CAAC;AAAA,EAC/C;AAGA,aAAW,OAAO,QAAsB;AACtC,SAAM,OAAsB,GAAG,GAAG,MAAM;AAAA,EAC1C;AAEA,SAAO;AACT;;;ACtCO,SAAS,gBAAgB,EAAE,SAAS,GAA2B;AACpE,MAAI,aAAa,UAAa,WAAW,IAAI;AAC3C,UAAM,WAAW,wDAAwD,QAAQ,GAAG;AAAA,EACtF;AACF;;;ACyGO,IAAM,kBAA2B;AAAA,EACtC,aAAa,CAAC;AAAA,EACd,sBAAsB;AAAA;AAAA,EACtB,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMf,KAAK;AAAA,EACL,6BAA6B;AAAA,EAC7B,kBAAkB;AAAA,EAClB,+BAA+B;AAAA,EAC/B,QAAQ;AAAA,EACR,sBAAsB;AAAA,EACtB,UAAU;AAAA,EACV,uBAAuB;AAAA,EACvB,OAAO;AAAA,IACL,gBAAgB;AAAA,IAChB,YAAY;AAAA,IACZ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,eAAe;AAAA,IACf,SAAS;AAAA,EACX;AAAA,EACA,wBAAwB;AAAA,EACxB,YAAY;AACd;AAEO,SAAS,QAAQ,QAAqB,MAAc,UAA4B,CAAC,GAAW;AACjG,kBAAgB,OAAO;AAEvB,QAAM,WAAW,MAAM,CAAC,GAAc,iBAAiB,OAAO;AAG9D,QAAM,UAAU,UAAU,MAAM;AAEhC,QAAM,EAAE,mBAAmB,mBAAmB,IAAI,YAAY,OAAO;AACrE,QAAM,SAAS,KAAK,kBAAkB;AACtC,QAAM,SAAS,SAAS,QAAQ,IAAI;AACpC,MAAI,OAAO,QAAQ;AACjB,UAAM,IAAI,gBAAgB,OAAO,KAAK,IAAI,CAAC;AAAA,EAC7C;AAEA,QAAM,aAAa,UAAU,QAAQ,mBAAmB,MAAM,QAAQ;AACtE,QAAM,SAAS,MAAM,YAAY,QAAQ;AACzC,QAAM,YAAY,SAAS,QAAQ,QAAQ;AAC3C,QAAM,YAAY,SAAS,WAAW,QAAQ;AAC9C,QAAM,YAAY,OAAO,WAAW,QAAQ;AAE5C,SAAO;AACT;AAEO,IAAM,kBAAN,cAA8B,MAAM;AAAC;;;ACrI5C,IAAM,oBAAoB;AAC1B,IAAM,qBAAqB;AAC3B,IAAM,2BAA2B;AACjC,IAAM,4BAA4B;AAElC,IAAM,2BAA2B;AAAA,EAC/B,sBAAsB;AAAA,EACtB,eAAe;AAAA,EACf,kBAAkB;AAAA,EAClB,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,wBAAwB;AAAA,EACxB,OAAO;AAAA,IACL,YAAY;AAAA,IACZ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,eAAe;AAAA,EACjB;AACF;AAEA,IAAM,yBAAyB;AAC/B,IAAM,qBAAqB;AAE3B,IAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK,IAC9D,QACD,CAAC;AAEP,IAAM,mBAAmB,CAAC,UAAuC;AAC/D,MAAI,OAAO,UAAU,WAAW;AAC9B,WAAO;AAAA,EACT;AAEA,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,WAAO;AAAA,EACT;AAEA,SAAO,CAAC;AACV;AAEA,IAAM,eAAe,CAAC,UAA4B;AAChD,MAAI,UAAU,OAAO;AACnB,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,SAAS,KAAK;AAC7B,SAAO,OAAO,SAAS,UAAU,OAAO,UAAU;AACpD;AAEA,IAAM,mBAAmB,CAAC,YACxB,QAAQ,KAAK,YAAY,IAAI,CAAC,GAAG,OAAO,IAAI,CAAC,GAAG,SAAS,EAAE,MAAM,OAAO,CAAC;AAE3E,IAAM,0BAA0B,CAAC,WAAsC;AACrE,MAAI,OAAO,SAAS,UAAU,OAAO,UAAU,MAAM;AACnD,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,QAAQ,OAAO,IAAI,KAAK,OAAO,KAAK,SAAS,MAAM,GAAG;AAC9D,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,QAAQ,OAAO,IAAI,KAAK,OAAO,KAAK,SAAS,IAAI,GAAG;AAC5D,WAAO;AAAA,EACT;AAEA,QAAM,mBAAmB;AAAA,IACvB,GAAI,MAAM,QAAQ,OAAO,KAAK,IAAI,OAAO,QAAQ,CAAC;AAAA,IAClD,GAAI,MAAM,QAAQ,OAAO,KAAK,IAAI,OAAO,QAAQ,CAAC;AAAA,EACpD;AACA,SAAO,iBAAiB,KAAK,YAAY;AAC3C;AAEA,IAAM,oBAAoB,CAAC,WAA+C;AACxE,MAAI,OAAO,aAAa,MAAM;AAC5B,WAAO;AAAA,EACT;AAEA,QAAM,EAAE,UAAU,WAAW,GAAG,KAAK,IAAI;AACzC,MAAI,wBAAwB,IAAI,GAAG;AACjC,WAAO;AAAA,EACT;AAEA,MAAI,WAAW,MAAM;AACnB,UAAM,EAAE,OAAO,YAAY,MAAM,OAAO,GAAG,KAAK,IAAI;AACpD,WAAO,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,IAAI,EAAE;AAAA,EAC7C;AAEA,MAAI,MAAM,QAAQ,KAAK,IAAI,GAAG;AAC5B,WAAO,EAAE,GAAG,MAAM,MAAM,CAAC,GAAG,KAAK,MAAM,IAAI,EAAE;AAAA,EAC/C;AAEA,MAAI,OAAO,KAAK,SAAS,UAAU;AACjC,WAAO,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,MAAM,MAAM,EAAE;AAAA,EAC9C;AAEA,MAAI,MAAM,QAAQ,KAAK,IAAI,GAAG;AAC5B,UAAM,QAAQ,KAAK,KAAK,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AACpF,WAAO,MAAM,SAAS,IAClB,EAAE,GAAG,MAAM,MAAM,CAAC,GAAG,OAAO,MAAM,EAAE,IACpC,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,EAAE;AAAA,EACxC;AAEA,MAAI,MAAM,QAAQ,KAAK,KAAK,GAAG;AAC7B,WAAO,EAAE,GAAG,MAAM,OAAO,iBAAiB,KAAK,KAAK,EAAE;AAAA,EACxD;AAEA,MAAI,MAAM,QAAQ,KAAK,KAAK,GAAG;AAC7B,WAAO,EAAE,GAAG,MAAM,OAAO,iBAAiB,KAAK,KAAK,EAAE;AAAA,EACxD;AAEA,SAAO,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,EAAE;AAC3C;AAEA,IAAM,kBAAkB,CAAC,SAA2B;AAClD,MAAI,SAAS,QAAQ,OAAO,SAAS,UAAU;AAC7C,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,WAAO,KAAK,IAAI,CAAC,SAAS,gBAAgB,IAAI,CAAC;AAAA,EACjD;AAEA,QAAM,SAAS;AACf,QAAM,aAA+B,CAAC;AAEtC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,QAAI,QAAQ,UAAU,OAAO,UAAU,UAAU;AAC/C,YAAM,iBAAiB,MAAM,MAAM,sBAAsB,IAAI,CAAC;AAC9D,iBAAW,GAAG,IAAI,iBAAiB,WAAW,cAAc,KAAK;AACjE;AAAA,IACF;AAEA,eAAW,GAAG,IAAI,gBAAgB,KAAK;AAAA,EACzC;AAEA,QAAM,WAAW,kBAAkB,UAAU;AAC7C,MACE,SAAS,SAAS,YAClB,SAAS,eAAe,UACxB,SAAS,yBAAyB,QAClC;AACA,WAAO,EAAE,GAAG,UAAU,sBAAsB,CAAC,EAAE;AAAA,EACjD;AACA,SAAO;AACT;AAEA,IAAM,mBAAmB,CACvB,cACA,cAC4B;AAC5B,QAAM,SAAkC,CAAC;AAEzC,aAAW,CAAC,MAAM,MAAM,KAAK,cAAc;AACzC,WAAO,IAAI,IAAI,gBAAgB,cAAc,iBAAiB,MAAM,CAAC,CAAC;AAAA,EACxE;AAEA,aAAW,CAAC,MAAM,MAAM,KAAK,OAAO,QAAQ,SAAS,GAAG;AACtD,WAAO,IAAI,IAAI,gBAAgB,cAAc,iBAAiB,MAAM,CAAC,CAAC;AAAA,EACxE;AAEA,SAAO;AACT;AAEA,IAAM,2BAA2B,CAC/B,YACA,SACqB;AACrB,QAAM,uBAAgD,CAAC;AACvD,QAAM,YAAqC,CAAC;AAE5C,aAAW,CAAC,MAAM,MAAM,KAAK,YAAY;AACvC,UAAM,mBAAmB,gBAAgB,cAAc,iBAAiB,MAAM,CAAC,CAAC;AAChF,UAAM,EAAE,UAAU,MAAM,WAAW,IAAI,iBAAiB,gBAAgB;AACxE,yBAAqB,IAAI,IAAI,iBAAiB,QAAQ;AACtD,WAAO,OAAO,WAAW,UAAU;AAAA,EACrC;AAEA,QAAM,aAAa,iBAAiB,MAAM,SAAS;AACnD,QAAM,gBAAkC;AAAA,IACtC,MAAM;AAAA,IACN,YAAY;AAAA,IACZ,UAAU,WAAW,IAAI,CAAC,CAAC,IAAI,MAAM,IAAI;AAAA,IACzC,sBAAsB;AAAA,EACxB;AAEA,MAAI,OAAO,KAAK,UAAU,EAAE,SAAS,GAAG;AACtC,kBAAc,QAAQ;AAAA,EACxB;AAEA,SAAO;AACT;AAEA,IAAM,qBAAqB,CACzB,QACA,SACqB,yBAAyB,CAAC,CAAC,oBAAoB,MAAM,CAAC,GAAG,IAAI;AAEpF,IAAM,sBAAsB,CAAC,aAAsE;AAAA,EACjG,GAAG;AAAA,EACH,GAAG,QAAQ;AAAA,EACX,eAAe;AAAA,EACf,QAAQ;AAAA,EACR,OAAO;AAAA,IACL,GAAG,yBAAyB;AAAA,IAC5B,GAAG,QAAQ,iBAAiB;AAAA,EAC9B;AACF;AAeA,IAAM,iBAAiB,OAAkB;AAAA,EACvC,OAAO;AAAA,EACP,UAAU;AAAA,EACV,aAAa;AAAA,EACb,cAAc;AAChB;AAEA,IAAM,gBAAgB,CAAC,OAAkB,SAAiB,SAAwC;AAChG,MAAI,MAAM,aAAa;AACrB,QAAI,YAAY,QAAQ,YAAY,MAAM;AACxC,YAAM,cAAc;AAAA,IACtB;AACA,WAAO,EAAE,UAAU,MAAM;AAAA,EAC3B;AAEA,MAAI,MAAM,cAAc;AACtB,QAAI,YAAY,OAAO,SAAS,KAAK;AACnC,YAAM,eAAe;AACrB,aAAO,EAAE,UAAU,KAAK;AAAA,IAC1B;AACA,WAAO,EAAE,UAAU,MAAM;AAAA,EAC3B;AAEA,MAAI,MAAM,OAAO;AACf,QAAI,MAAM,UAAU;AAClB,YAAM,WAAW;AACjB,aAAO,EAAE,UAAU,MAAM;AAAA,IAC3B;AAEA,QAAI,YAAY,MAAM;AACpB,YAAM,WAAW;AACjB,aAAO,EAAE,UAAU,MAAM;AAAA,IAC3B;AAEA,QAAI,YAAY,MAAM,OAAO;AAC3B,YAAM,QAAQ;AAAA,IAChB;AACA,WAAO,EAAE,UAAU,MAAM;AAAA,EAC3B;AAEA,MAAI,YAAY,OAAO,SAAS,KAAK;AACnC,UAAM,cAAc;AACpB,WAAO,EAAE,UAAU,KAAK;AAAA,EAC1B;AAEA,MAAI,YAAY,OAAO,SAAS,KAAK;AACnC,UAAM,eAAe;AACrB,WAAO,EAAE,UAAU,KAAK;AAAA,EAC1B;AAEA,MAAI,YAAY,OAAO,YAAY,OAAO,YAAY,KAAK;AACzD,UAAM,QAAQ;AAAA,EAChB;AAEA,SAAO,EAAE,UAAU,MAAM;AAC3B;AAEA,IAAM,oBAAoB,CAAC,QAAgB,UAA0B;AACnE,QAAM,QAAQ,eAAe;AAC7B,MAAI,QAAQ;AAEZ,WAAS,QAAQ,OAAO,QAAQ,OAAO,QAAQ,SAAS,GAAG;AACzD,UAAM,UAAU,OAAO,KAAK,KAAK;AACjC,UAAM,OAAO,OAAO,QAAQ,CAAC,KAAK;AAClC,UAAM,UAAU,CAAC,MAAM,SAAS,CAAC,MAAM,eAAe,CAAC,MAAM;AAC7D,UAAM,EAAE,SAAS,IAAI,cAAc,OAAO,SAAS,IAAI;AAEvD,QAAI,WAAW,CAAC,MAAM,SAAS,CAAC,MAAM,eAAe,CAAC,MAAM,cAAc;AACxE,UAAI,YAAY,KAAK;AACnB,iBAAS;AAAA,MACX,WAAW,YAAY,KAAK;AAC1B,iBAAS;AACT,YAAI,UAAU,GAAG;AACf,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAEA,QAAI,UAAU;AACZ,eAAS;AAAA,IACX;AAAA,EACF;AAEA,SAAO;AACT;AAEA,IAAM,oBAAoB,CAAC,QAAgB,UAA0B;AACnE,QAAM,QAAQ,eAAe;AAC7B,MAAI,QAAQ;AAEZ,WAAS,QAAQ,OAAO,QAAQ,OAAO,QAAQ,SAAS,GAAG;AACzD,UAAM,UAAU,OAAO,KAAK,KAAK;AACjC,UAAM,OAAO,OAAO,QAAQ,CAAC,KAAK;AAClC,UAAM,UAAU,CAAC,MAAM,SAAS,CAAC,MAAM,eAAe,CAAC,MAAM;AAC7D,UAAM,EAAE,SAAS,IAAI,cAAc,OAAO,SAAS,IAAI;AAEvD,QAAI,WAAW,CAAC,MAAM,SAAS,CAAC,MAAM,eAAe,CAAC,MAAM,cAAc;AACxE,UAAI,YAAY,KAAK;AACnB,iBAAS;AAAA,MACX,WAAW,YAAY,KAAK;AAC1B,iBAAS;AACT,YAAI,UAAU,GAAG;AACf,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAEA,QAAI,UAAU;AACZ,eAAS;AAAA,IACX;AAAA,EACF;AAEA,SAAO;AACT;AAEA,IAAM,mBAAmB,CAAC,QAAgB,UAA0B;AAClE,QAAM,QAAQ,eAAe;AAC7B,MAAI,aAAa;AACjB,MAAI,eAAe;AACnB,MAAI,aAAa;AACjB,MAAI,YAAY;AAEhB,WAAS,QAAQ,OAAO,QAAQ,OAAO,QAAQ,SAAS,GAAG;AACzD,UAAM,UAAU,OAAO,KAAK,KAAK;AACjC,UAAM,OAAO,OAAO,QAAQ,CAAC,KAAK;AAClC,UAAM,UAAU,CAAC,MAAM,SAAS,CAAC,MAAM,eAAe,CAAC,MAAM;AAC7D,UAAM,EAAE,SAAS,IAAI,cAAc,OAAO,SAAS,IAAI;AAEvD,QAAI,WAAW,CAAC,MAAM,SAAS,CAAC,MAAM,eAAe,CAAC,MAAM,cAAc;AACxE,UAAI,YAAY,KAAK;AACnB,sBAAc;AAAA,MAChB,WAAW,YAAY,KAAK;AAC1B,qBAAa,KAAK,IAAI,GAAG,aAAa,CAAC;AAAA,MACzC,WAAW,YAAY,KAAK;AAC1B,wBAAgB;AAAA,MAClB,WAAW,YAAY,KAAK;AAC1B,uBAAe,KAAK,IAAI,GAAG,eAAe,CAAC;AAAA,MAC7C,WAAW,YAAY,KAAK;AAC1B,sBAAc;AAAA,MAChB,WAAW,YAAY,KAAK;AAC1B,qBAAa,KAAK,IAAI,GAAG,aAAa,CAAC;AAAA,MACzC;AAEA,UAAI,CAAC,KAAK,KAAK,OAAO,GAAG;AACvB,oBAAY;AAAA,MACd;AAEA,UACE,cACC,YAAY,OAAO,YAAY,QAAQ,YAAY,SACpD,eAAe,KACf,iBAAiB,KACjB,eAAe,GACf;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAEA,QAAI,UAAU;AACZ,eAAS;AAAA,IACX;AAAA,EACF;AAEA,SAAO;AACT;AAEA,IAAM,6BAA6B,CAAC,WAAgD;AAClF,QAAM,eAA4C,CAAC;AACnD,QAAM,UAAU;AAEhB,WAAS,QAAQ,QAAQ,KAAK,MAAM,GAAG,OAAO,QAAQ,QAAQ,KAAK,MAAM,GAAG;AAC1E,UAAM,OAAO,MAAM,CAAC;AACpB,UAAM,OAAO,MAAM,CAAC,KAAK;AAEzB,QAAI,CAAC,mBAAmB,KAAK,IAAI,GAAG;AAClC;AAAA,IACF;AAEA,QAAI,SAAS,aAAa;AACxB,YAAM,aAAa,OAAO,QAAQ,KAAK,QAAQ,SAAS;AACxD,UAAI,aAAa,GAAG;AAClB;AAAA,MACF;AAEA,YAAM,WAAW,kBAAkB,QAAQ,UAAU;AACrD,UAAI,WAAW,GAAG;AAChB;AAAA,MACF;AAEA,mBAAa,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,QACA,MAAM,OAAO,MAAM,YAAY,WAAW,CAAC;AAAA,MAC7C,CAAC;AACD,cAAQ,YAAY,WAAW;AAC/B;AAAA,IACF;AAEA,UAAM,cAAc,OAAO,QAAQ,KAAK,QAAQ,SAAS;AACzD,QAAI,cAAc,GAAG;AACnB;AAAA,IACF;AAEA,UAAM,MAAM,iBAAiB,QAAQ,cAAc,CAAC;AACpD,QAAI,MAAM,GAAG;AACX;AAAA,IACF;AAEA,iBAAa,KAAK;AAAA,MAChB;AAAA,MACA;AAAA,MACA,MAAM,OAAO,MAAM,cAAc,GAAG,GAAG,EAAE,KAAK;AAAA,IAChD,CAAC;AACD,YAAQ,YAAY,MAAM;AAAA,EAC5B;AAEA,SAAO;AACT;AAEA,IAAM,sBAAsB,CAAC,eAAuB,iBAAwC;AAC1F,QAAM,gBAAgB,cAAc,QAAQ,YAAY;AACxD,MAAI,gBAAgB,GAAG;AACrB,WAAO;AAAA,EACT;AAEA,QAAM,aAAa,cAAc,QAAQ,KAAK,gBAAgB,aAAa,MAAM;AACjF,MAAI,aAAa,GAAG;AAClB,WAAO;AAAA,EACT;AAEA,QAAM,MAAM,iBAAiB,eAAe,aAAa,CAAC;AAC1D,MAAI,MAAM,GAAG;AACX,WAAO;AAAA,EACT;AAEA,SAAO,cAAc,MAAM,aAAa,GAAG,GAAG,EAAE,KAAK;AACvD;AAEA,IAAM,wBAAwB,CAAC,WAA4B;AACzD,QAAM,QAAQ,eAAe;AAC7B,MAAI,aAAa;AACjB,MAAI,eAAe;AACnB,MAAI,aAAa;AAEjB,WAAS,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SAAS,GAAG;AACrD,UAAM,UAAU,OAAO,KAAK,KAAK;AACjC,UAAM,OAAO,OAAO,QAAQ,CAAC,KAAK;AAClC,UAAM,UAAU,CAAC,MAAM,SAAS,CAAC,MAAM,eAAe,CAAC,MAAM;AAC7D,UAAM,EAAE,SAAS,IAAI,cAAc,OAAO,SAAS,IAAI;AAEvD,QAAI,WAAW,CAAC,MAAM,SAAS,CAAC,MAAM,eAAe,CAAC,MAAM,cAAc;AACxE,UAAI,YAAY,KAAK;AACnB,sBAAc;AAAA,MAChB,WAAW,YAAY,KAAK;AAC1B,qBAAa,KAAK,IAAI,GAAG,aAAa,CAAC;AAAA,MACzC,WAAW,YAAY,KAAK;AAC1B,wBAAgB;AAAA,MAClB,WAAW,YAAY,KAAK;AAC1B,uBAAe,KAAK,IAAI,GAAG,eAAe,CAAC;AAAA,MAC7C,WAAW,YAAY,KAAK;AAC1B,sBAAc;AAAA,MAChB,WAAW,YAAY,KAAK;AAC1B,qBAAa,KAAK,IAAI,GAAG,aAAa,CAAC;AAAA,MACzC,WAAW,YAAY,OAAO,eAAe,KAAK,iBAAiB,KAAK,eAAe,GAAG;AACxF,eAAO;AAAA,MACT;AAAA,IACF;AAEA,QAAI,UAAU;AACZ,eAAS;AAAA,IACX;AAAA,EACF;AAEA,SAAO;AACT;AAEA,IAAM,oBAAoB,CAAC,QAAgB,UAA0B;AACnE,WAAS,QAAQ,OAAO,SAAS,GAAG,SAAS,GAAG;AAC9C,UAAM,OAAO,OAAO,KAAK,KAAK;AAC9B,QAAI,CAAC,KAAK,KAAK,IAAI,GAAG;AACpB,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,IAAM,mBAAmB,CAAC,QAAgB,UAA0B;AAClE,WAAS,QAAQ,OAAO,QAAQ,OAAO,QAAQ,SAAS,GAAG;AACzD,UAAM,OAAO,OAAO,KAAK,KAAK;AAC9B,QAAI,CAAC,KAAK,KAAK,IAAI,GAAG;AACpB,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,IAAM,4BAA4B,CAAC,WAA2B;AAC5D,MAAI,SAAS;AAEb,WAAS,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SAAS,GAAG;AACrD,UAAM,UAAU,OAAO,KAAK,KAAK;AACjC,QAAI,YAAY,KAAK;AACnB,gBAAU;AACV;AAAA,IACF;AAEA,UAAM,MAAM,kBAAkB,QAAQ,KAAK;AAC3C,QAAI,MAAM,GAAG;AACX,gBAAU;AACV;AAAA,IACF;AAEA,UAAM,WAAW,kBAAkB,QAAQ,QAAQ,CAAC;AACpD,UAAM,OAAO,iBAAiB,QAAQ,MAAM,CAAC;AAC7C,UAAM,QAAQ,OAAO,MAAM,QAAQ,GAAG,GAAG;AACzC,UAAM,aACJ,CAAC,sBAAsB,KAAK,KAC5B,gBAAgB,KAAK,QAAQ,KAC7B,SAAS,OACT,SAAS,OACT,SAAS;AAEX,QAAI,YAAY;AACd,gBAAU,OAAO,MAAM,OAAO,MAAM,CAAC;AAAA,IACvC,OAAO;AACL,gBAAU,0BAA0B,KAAK;AAAA,IAC3C;AACA,YAAQ;AAAA,EACV;AAEA,SAAO;AACT;AAEA,IAAM,oBAAoB,CAAC,UAA0B;AACnD,QAAM,QAAQ,eAAe;AAC7B,MAAI,SAAS;AACb,MAAI,oBAAoB;AACxB,MAAI,aAAa;AAEjB,QAAM,iBAAiB,MAAM;AAC3B,QAAI,OAAO,SAAS,GAAG;AACrB,0BAAoB;AAAA,IACtB;AAAA,EACF;AAEA,QAAM,sBAAsB,MAAc,OAAO,QAAQ,EAAE,GAAG,EAAE,KAAK;AAErE,QAAM,kBAAkB,CAAC,UAA0B;AACjD,aAAS,QAAQ,OAAO,QAAQ,MAAM,QAAQ,SAAS,GAAG;AACxD,YAAM,OAAO,MAAM,KAAK,KAAK;AAC7B,UAAI,CAAC,KAAK,KAAK,IAAI,GAAG;AACpB,eAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,2BAA2B,CAAC,UAAwB;AACxD,QAAI,cAAc,GAAG;AACnB;AAAA,IACF;AAEA,UAAM,WAAW,oBAAoB;AACrC,QAAI,CAAC,YAAY,aAAa,OAAO,aAAa,OAAO,aAAa,OAAO,aAAa,KAAK;AAC7F;AAAA,IACF;AAEA,UAAM,OAAO,gBAAgB,QAAQ,CAAC;AACtC,QAAI,CAAC,QAAQ,SAAS,OAAO,SAAS,OAAO,SAAS,OAAO,SAAS,OAAO,SAAS,KAAK;AACzF;AAAA,IACF;AAEA,aAAS,OAAO,QAAQ,IAAI;AAC5B,wBAAoB;AAAA,EACtB;AAEA,WAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;AACpD,UAAM,UAAU,MAAM,KAAK,KAAK;AAChC,UAAM,OAAO,MAAM,QAAQ,CAAC,KAAK;AAEjC,QAAI,CAAC,MAAM,SAAS,CAAC,MAAM,eAAe,CAAC,MAAM,cAAc;AAC7D,UAAI,YAAY,OAAO,SAAS,KAAK;AACnC,uBAAe;AACf,iBAAS;AACT,cAAM,cAAc;AACpB;AAAA,MACF;AAEA,UAAI,YAAY,OAAO,SAAS,KAAK;AACnC,uBAAe;AACf,iBAAS;AACT,cAAM,eAAe;AACrB;AAAA,MACF;AAEA,UAAI,KAAK,KAAK,OAAO,GAAG;AACtB,YAAI,YAAY,QAAQ,YAAY,MAAM;AACxC,mCAAyB,KAAK;AAAA,QAChC;AACA,uBAAe;AACf;AAAA,MACF;AAAA,IACF;AAEA,QAAI,MAAM,aAAa;AACrB,UAAI,YAAY,QAAQ,YAAY,MAAM;AACxC,cAAM,cAAc;AAAA,MACtB;AACA;AAAA,IACF;AAEA,QAAI,MAAM,cAAc;AACtB,UAAI,YAAY,OAAO,SAAS,KAAK;AACnC,cAAM,eAAe;AACrB,iBAAS;AAAA,MACX;AACA;AAAA,IACF;AAEA,QAAI,qBAAqB,OAAO,SAAS,GAAG;AAC1C,gBAAU;AAAA,IACZ;AACA,wBAAoB;AACpB,cAAU;AAEV,QAAI,MAAM,OAAO;AACf,UAAI,MAAM,UAAU;AAClB,cAAM,WAAW;AAAA,MACnB,WAAW,YAAY,MAAM;AAC3B,cAAM,WAAW;AAAA,MACnB,WAAW,YAAY,MAAM,OAAO;AAClC,cAAM,QAAQ;AAAA,MAChB;AACA;AAAA,IACF;AAEA,QAAI,YAAY,OAAO,YAAY,OAAO,YAAY,KAAK;AACzD,YAAM,QAAQ;AACd;AAAA,IACF;AAEA,QAAI,YAAY,KAAK;AACnB,oBAAc;AAAA,IAChB,WAAW,YAAY,KAAK;AAC1B,mBAAa,KAAK,IAAI,GAAG,aAAa,CAAC;AAAA,IACzC;AAAA,EACF;AAEA,SAAO,0BAA0B,OAAO,KAAK,CAAC;AAChD;AAEA,IAAM,iCAAiC,CACrC,iBAEA,OAAO;AAAA,EACL,aACG,OAAO,CAAC,gBAAgB,YAAY,SAAS,iBAAiB,EAC9D,IAAI,CAAC,gBAAgB,CAAC,YAAY,MAAM,kBAAkB,YAAY,IAAI,CAAC,CAAC,EAC5E,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,MAAM,KAAK,cAAc,KAAK,CAAC;AACxD;AAEF,IAAM,gCAAgC,CAAC,WAA4C;AACjF,QAAM,eAAe,2BAA2B,MAAM;AACtD,QAAM,kBAAkB,aAAa;AAAA,IACnC,CAAC,gBAAgB,YAAY,SAAS;AAAA,EACxC;AACA,QAAM,WACJ,iBAAiB,SAAS,cACtB,oBAAoB,gBAAgB,MAAM,kBAAkB,IAC5D;AAEN,SAAO;AAAA,IACL,MAAM,kBAAkB,YAAY,SAAS;AAAA,IAC7C,aAAa,+BAA+B,YAAY;AAAA,EAC1D;AACF;AAEA,IAAM,oCAAoC,CAAC,WAA0C;AACnF,QAAM,eAAe,2BAA2B,MAAM;AACtD,QAAM,kBAAkB,aAAa;AAAA,IACnC,CAAC,gBAAgB,YAAY,SAAS;AAAA,EACxC;AACA,QAAM,YACJ,iBAAiB,SAAS,cACtB,oBAAoB,gBAAgB,MAAM,wBAAwB,IAClE;AACN,QAAM,aACJ,iBAAiB,SAAS,cACtB,oBAAoB,gBAAgB,MAAM,yBAAyB,IACnE;AACN,QAAM,cAAc,+BAA+B,YAAY;AAE/D,SAAO;AAAA,IACL,GAAI,YAAY,EAAE,iBAAiB,kBAAkB,SAAS,EAAE,IAAI,CAAC;AAAA,IACrE,GAAI,aAAa,EAAE,kBAAkB,kBAAkB,UAAU,EAAE,IAAI,CAAC;AAAA,IACxE,GAAI,OAAO,KAAK,WAAW,EAAE,SAAS,IAAI,EAAE,uBAAuB,YAAY,IAAI,CAAC;AAAA,EACtF;AACF;AAEA,IAAM,uBAAuB,OAC3B,QACA,MACA,YACqC;AACrC,QAAM,gBAAgB,mBAAmB,QAAQ,IAAI;AACrD,QAAM,SAAS,QAAQ,eAAe,mBAAmB,oBAAoB,OAAO,CAAC;AACrF,SAAO,8BAA8B,MAAM;AAC7C;AAEO,IAAM,4BAA4B,CACvC,QACA,UAAmC,CAAC,MACC;AACrC,QAAM,YAAY,IAAI;AAAA,IACpB,OAAO,QAAQ,iBAAiB,iBAAiB,MAAM,CAAC,EAAE,IAAI;AAAA,EAChE;AACA,SAAO,kCAAkC,QAAQ,WAAW,OAAO;AACrE;AAEO,IAAM,oCAAoC,CAC/C,QACA,MACA,UAAmC,CAAC,MAEpC,qBAAqB,QAAQ,MAAM,OAAO,EAAE;AAAA,EAC1C,CAAC,YAAY;AAAA,EACb,OAAO;AAAA,IACL,MAAM;AAAA,IACN,aAAa,CAAC;AAAA,EAChB;AACF;AAQK,IAAM,6BAA6B,OAAO,UAKX;AACpC,QAAM,aAAgD,CAAC;AACvD,MAAI,MAAM,gBAAgB,QAAW;AACnC,eAAW,KAAK,CAAC,0BAA0B,MAAM,WAAW,CAAC;AAAA,EAC/D;AACA,MAAI,MAAM,iBAAiB,QAAW;AACpC,eAAW,KAAK,CAAC,2BAA2B,MAAM,YAAY,CAAC;AAAA,EACjE;AACA,MAAI,WAAW,WAAW,GAAG;AAC3B,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,gBAAgB,yBAAyB,YAAY,MAAM,IAAI;AACrE,SAAO,QAAQ,QAAQ,EACpB,KAAK,MAAM,QAAQ,eAAe,mBAAmB,oBAAoB,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,EAC9F;AAAA,IACC,CAAC,WAAW,kCAAkC,MAAM;AAAA,IACpD,OAAO;AAAA,MACL,GAAI,MAAM,gBAAgB,SAAY,EAAE,iBAAiB,UAAU,IAAI,CAAC;AAAA,MACxE,GAAI,MAAM,iBAAiB,SAAY,EAAE,kBAAkB,UAAU,IAAI,CAAC;AAAA,IAC5E;AAAA,EACF;AACJ;;;AClzBA,SAAS,UAAAC,UAAQ,SAAAC,QAAO,UAAAC,eAAc;AACtC,SAAS,mBAAAC,wBAAmC;AAErC,IAAM,+BAAN,cAA2CD,QAAO,iBAA+C;AAAA,EACtG;AAAA,EACA;AAAA,IACE,KAAKA,QAAO;AAAA,IACZ,QAAQA,QAAO;AAAA,EACjB;AACF,EAAE;AAAC;AAQH,IAAM,YAAY,CAAC,aAAuE;AACxF,QAAM,QAAQ,SAAS,MAAM,GAAG;AAChC,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,SAAmB,CAAC;AAC1B,aAAW,QAAQ,OAAO;AACxB,QAAI,CAAC,QAAQ,KAAK,IAAI,EAAG,QAAO;AAChC,UAAM,QAAQ,OAAO,IAAI;AACzB,QAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,QAAQ,IAAK,QAAO;AACjE,WAAO,KAAK,KAAK;AAAA,EACnB;AACA,SAAO;AACT;AAEA,IAAM,sBAAsB,CAC1B,aACqD;AACrD,QAAM,SAAS;AACf,MAAI,CAAC,SAAS,WAAW,MAAM,EAAG,QAAO;AACzC,QAAM,WAAW,SAAS,MAAM,OAAO,MAAM;AAC7C,QAAM,SAAS,UAAU,QAAQ;AACjC,MAAI,OAAQ,QAAO;AAEnB,QAAM,QAAQ,SAAS,MAAM,GAAG;AAChC,MAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,QAAM,QAAQ,MAAM,IAAI,CAAC,SAAS,OAAO,SAAS,MAAM,EAAE,CAAC;AAC3D,MACE,MAAM;AAAA,IACJ,CAAC,MAAM,UACL,MAAM,KAAK,MAAM,MACjB,CAAC,eAAe,KAAK,MAAM,KAAK,CAAC,KACjC,CAAC,OAAO,UAAU,IAAI,KACtB,OAAO,KACP,OAAO;AAAA,EACX,GACA;AACA,WAAO;AAAA,EACT;AAEA,QAAM,CAAC,MAAM,GAAG,IAAI;AACpB,SAAO,CAAC,QAAQ,GAAG,OAAO,KAAM,OAAO,GAAG,MAAM,GAAI;AACtD;AAEA,IAAM,gBAAgB,CAAC,CAAC,GAAG,CAAC,MAC1B,MAAM,KACN,MAAM,MACN,MAAM,OACL,MAAM,OAAO,MAAM,OACnB,MAAM,OAAO,KAAK,MAAM,KAAK,MAC7B,MAAM,OAAO,MAAM;AAEtB,IAAM,4BAA4B,CAAC,aAA8B;AAC/D,QAAM,aAAa,SAAS,YAAY;AACxC,SACE,eAAe,8BACf,eAAe,cACf,eAAe,mBACf,eAAe;AAEnB;AAEA,IAAM,2BAA2B,CAAC,aAA8B;AAC9D,QAAM,aAAa,SAAS,YAAY,EAAE,QAAQ,YAAY,EAAE;AAChE,MAAI,eAAe,eAAe,WAAW,SAAS,YAAY,EAAG,QAAO;AAC5E,QAAM,OAAO,UAAU,UAAU;AACjC,MAAI,KAAM,QAAO,cAAc,IAAI;AACnC,QAAM,aAAa,oBAAoB,UAAU;AACjD,MAAI,WAAY,QAAO,cAAc,UAAU;AAC/C,SACE,eAAe,SACf,WAAW,WAAW,OAAO,KAC7B,WAAW,WAAW,IAAI,KAC1B,WAAW,WAAW,IAAI;AAE9B;AAEO,IAAM,4BAA4B,CACvC,OACA,UAAmC,CAAC,MAEpCF,SAAO,IAAI,aAAa;AACtB,QAAM,MAAM,OAAOA,SAAO,IAAI;AAAA,IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK;AAAA,IACxB,OAAO,MACL,IAAI,6BAA6B;AAAA,MAC/B,KAAK;AAAA,MACL,QAAQ;AAAA,IACV,CAAC;AAAA,EACL,CAAC;AAED,MAAI,IAAI,aAAa,WAAW,IAAI,aAAa,UAAU;AACzD,WAAO,OAAO,IAAI,6BAA6B;AAAA,MAC7C,KAAK;AAAA,MACL,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AAEA,MAAI,0BAA0B,IAAI,QAAQ,GAAG;AAC3C,WAAO,OAAO,IAAI,6BAA6B;AAAA,MAC7C,KAAK;AAAA,MACL,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AAEA,MAAI,CAAC,QAAQ,qBAAqB,yBAAyB,IAAI,QAAQ,GAAG;AACxE,WAAO,OAAO,IAAI,6BAA6B;AAAA,MAC7C,KAAK;AAAA,MACL,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AACF,CAAC;AAEH,IAAM,aAAa,CACjB,YACA,aAEC,OAAO,OAAO,SAAS;AACtB,QAAM,eAAe,QAAQ,gBAAgB;AAC7C,MAAI,UAAwD;AAC5D,WAAS,YAAY,GAAG,aAAa,cAAc,aAAa;AAC9D,UAAM,MAAM,mBAAmB,UAAU,QAAQ,MAAM,OAAO,OAAO;AACrE,IAAAA,SAAO,QAAQ,0BAA0B,KAAK,OAAO,CAAC;AACtD,UAAM,WAAW,MAAM,WAAW,SAAS,EAAE,GAAG,MAAM,UAAU,SAAS,CAAC;AAC1E,QACE,SAAS,UAAU,OACnB,SAAS,SAAS,OAClB,SAAS,QAAQ,IAAI,UAAU,KAC/B,YAAY,cACZ;AACA,YAAM,OAAO,IAAI,IAAI,SAAS,QAAQ,IAAI,UAAU,GAAI,GAAG;AAC3D,UAAI,KAAK,WAAW,IAAI,IAAI,GAAG,EAAE,QAAQ;AAEvC,cAAM,IAAI,6BAA6B;AAAA,UACrC,KAAK,KAAK,SAAS;AAAA,UACnB,QAAQ;AAAA,QACV,CAAC;AAAA,MACH;AACA,gBAAU,KAAK,SAAS;AACxB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,SAAO,MAAM,WAAW,SAAS,EAAE,GAAG,MAAM,UAAU,SAAS,CAAC;AAClE;AAEK,IAAM,4BAA4B,CACvC,UAAmC,CAAC,MAEpCG,iBAAgB,MAAM;AAAA,EACpBF,OAAM;AAAA,IACJ,QAAQ,QACJA,OAAM,QAAQE,iBAAgB,KAAK,EAAE,WAAW,QAAQ,OAAO,OAAO,CAAC,IACvEF,OAAM;AAAA,MACJE,iBAAgB;AAAA,MAChBH,SAAO;AAAA,QAAIA,SAAO,QAAQG,iBAAgB,KAAK;AAAA,QAAG,CAAC,eACjD,WAAW,YAAY,OAAO;AAAA,MAChC;AAAA,IACF;AAAA,EACN;AACF;;;AChLF;AAAA,EACE;AAAA,EAEA,UAAAC;AAAA,EAEA,SAAAC;AAAA,EACA,UAAAC;AAAA,EACA,aAAAC;AAAA,EACA,UAAAC;AAAA,EACA,UAAAC;AAAA,EACA;AAAA,OACK;AACP,SAAS,mBAAAC,wBAAwC;AACjD,SAAS,cAAc;AACvB,SAAS,qBAAqB;AAC9B,SAAS,wBAA+D;AACxE,SAAS,UAAU,kBAAqC;AAGxD,SAAS,0BAA0B;AA2HnC,IAAM,wBAAwB;AAC9B,IAAM,sCAAsC;AA4B5C,IAAM,mBAAuC,MAC3CC,SAAO,QAAQ,oBAAoB,KAAK,EAAE,QAAQ,SAAS,CAAC,CAAC;AAE/D,IAAM,4BAA4B,CAAC,kBACjC,kBAAkB,eAAe,mBAAmB;AAqQ/C,IAAM,gBAAgB,CAAC,YAA8C;AAC1E,QAAM,SAAqB,EAAE,GAAG,WAAW;AAC3C,aAAW,UAAU,SAAS;AAC5B,QAAI,CAAC,OAAO,OAAQ;AACpB,eAAW,CAAC,UAAU,QAAQ,KAAK,OAAO,QAAQ,OAAO,MAAM,GAAG;AAChE,UAAI,OAAO,QAAQ,GAAG;AAEpB,cAAM,IAAI,aAAa;AAAA,UACrB,SACE,4BAA4B,QAAQ,4BAA4B,OAAO,EAAE;AAAA,UAE3E,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AACA,aAAO,QAAQ,IAAI;AAAA,IACrB;AAAA,EACF;AAEA,oCAAkC,MAAM;AAExC,SAAO;AACT;AAEA,IAAM,oCAAoC,CAAC,WAA6B;AACtE,aAAW,CAAC,UAAU,QAAQ,KAAK,OAAO,QAAQ,MAAM,GAAG;AACzD,mCAA+B,UAAU,QAAQ;AAAA,EACnD;AACF;AAEA,IAAM,2BAA2B,CAAC,UAAsB,WAA6B;AACnF,QAAM,UAAU,OAAO,KAAK,QAAQ,EACjC,OAAO,CAAC,cAAc,CAAC,OAAO,SAAS,CAAC,EACxC,KAAK;AACR,MAAI,QAAQ,WAAW,EAAG;AAG1B,QAAM,IAAI,aAAa;AAAA,IACrB,SAAS,4DAA4D,QAAQ,KAAK,IAAI,CAAC;AAAA,IACvF,OAAO;AAAA,MACL;AAAA,MACA,WAAW,OAAO,KAAK,MAAM,EAAE,KAAK;AAAA,IACtC;AAAA,EACF,CAAC;AACH;AAEA,IAAM,4BAA4B,CAAC,SAAiB,UAClD,iBAAiB,KAAK,IAAI,QAAQ,IAAI,aAAa,EAAE,SAAS,MAAM,CAAC;AAEvE,IAAM,uBAAuB,CAAC,UAAkB,MAAc,UAC5D,0BAA0B,GAAG,IAAI,sBAAsB,QAAQ,IAAI,KAAK;AAE1E,IAAM,wBAAwB,CAAC,WAAmC;AAChE,QAAM,UAAU;AAChB,QAAM,eAAe,WAAyD;AAAA,IAC5E;AAAA,IACA;AAAA,EACF,CAAC;AACD,QAAM,UAAU,OAAO;AAAA,IACrB,WAAW;AAAA,IACX,SAAS,CAAC,YAAY;AAAA,EACxB,CAAC;AAGD,QAAM,KAAK,QAAQ,OAAO,cAAc,CAAC,EAAE,IAAI,OAAO;AACtD,SAAO;AAAA,IACL;AAAA,EACF;AACF;AAMA,IAAM,cAAc,CAAC,SAA4B;AAAA,EAC/C,IAAI,IAAI;AAAA,EACR,SAAS,IAAI;AAAA,EACb,MAAM,IAAI;AAAA,EACV,MAAM,IAAI;AAAA,EACV,KAAK,IAAI,OAAO;AAAA,EAChB,UAAU,IAAI;AAAA,EACd,WAAW,QAAQ,IAAI,UAAU;AAAA,EACjC,YAAY,QAAQ,IAAI,WAAW;AAAA,EACnC,SAAS,QAAQ,IAAI,QAAQ;AAAA,EAC7B,SAAS;AACX;AAEA,IAAM,qBAAqB,CAAC,MAAwB,cAA8B;AAAA,EAChF,IAAI,KAAK;AAAA,EACT,SAAS;AAAA,EACT,MAAM,KAAK;AAAA,EACX,MAAM,KAAK;AAAA,EACX,KAAK,KAAK;AAAA,EACV;AAAA,EACA,WAAW,KAAK,aAAa;AAAA,EAC7B,YAAY,KAAK,cAAc;AAAA,EAC/B,SAAS,KAAK,WAAW;AAAA,EACzB,SAAS;AACX;AAEA,IAAM,uBAAuBC,QAAO,oBAAoBA,QAAO,qBAAqB;AAEpF,IAAM,mBAAmB,CAAC,UAA4B;AACpD,MAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,SAAO,qBAAqB,KAAK,EAAE,KAAKC,QAAO,UAAU,MAAM,KAAK,CAAC;AACvE;AAEA,IAAMC,uBAAsBF,QAAO,oBAAoB,uBAAuB;AAE9E,IAAM,YAAY,CAAC,KAAc,iBAAyC;AAAA,EACxE,IAAI,IAAI;AAAA,EACR,UAAU,IAAI;AAAA,EACd,UAAU,IAAI;AAAA,EACd,MAAM,IAAI;AAAA,EACV,aAAa,IAAI;AAAA,EACjB,aAAa,iBAAiB,IAAI,YAAY;AAAA,EAC9C,cAAc,iBAAiB,IAAI,aAAa;AAAA,EAChD;AACF;AAEA,IAAM,mBAAmB,CACvB,QACAG,OACA,cACU;AAAA,EACV,IAAI,GAAG,OAAO,EAAE,IAAIA,MAAK,IAAI;AAAA,EAC7B,UAAU,OAAO;AAAA,EACjB;AAAA,EACA,MAAMA,MAAK;AAAA,EACX,aAAaA,MAAK;AAAA,EAClB,aAAa,iBAAiBA,MAAK,WAAW;AAAA,EAC9C,cAAc,iBAAiBA,MAAK,cAAc,QAAQ;AAAA,EAC1D,aAAaA,MAAK;AACpB;AAEA,IAAM,mBAAmB,CACvB,QACA,YAAgC,YACpB;AACZ,MAAI,UAAU,KAAM,QAAO;AAC3B,SAAO,OAAO,WAAW,EAAE,WAAW,SAAS,EAAE;AAAA,IAC/C,QAAQ;AAAA,EACV,CAAC;AACH;AAEA,IAAM,wBAAwB,CAC5B,WACY;AACZ,MAAI,UAAU,KAAM,QAAO;AAC3B,QAAM,WAAW;AAMjB,MAAI,OAAO,SAAS,WAAW,GAAG,aAAa,YAAY;AACzD,UAAM,aAAaH,QAAO;AAAA,MACxBA,QAAO,uBAAuB,MAAwC;AAAA,IACxE;AACA,WAAO,iBAAiB,UAAU;AAAA,EACpC;AACA,SAAO,SAAS,WAAW,EAAE,YAAY,MAAM;AAAA,IAC7C,QAAQ;AAAA,EACV,CAAC;AACH;AAEA,IAAM,uBAAuB,CAC3B,QACA,UACoC;AACpC,MAAI,UAAU,KAAM,QAAOD,SAAO,QAAQ,KAAK;AAC/C,QAAM,WAAW;AAGjB,MAAI,SAAS,WAAW,MAAM,UAAa,OAAO,SAAS,WAAW,EAAE,aAAa,YAAY;AAC/F,WAAOC,QAAO,oBAAoB,MAAwC,EAAE,KAAK;AAAA,EACnF;AACA,SAAOD,SAAO;AAAA,IAAQ,MACpB,QAAQ,QAAS,SAAS,WAAW,EAAG,SAAyC,KAAK,CAAC;AAAA,EACzF,EAAE;AAAA,IACAA,SAAO,QAAQ,CAAC,WAAW;AACzB,YAAM,mBAAmB;AACzB,aAAO,WAAW,mBACdA,SAAO,QAAQ,iBAAiB,KAAK,IACrCA,SAAO,KAAK,MAAM;AAAA,IACxB,CAAC;AAAA,EACH;AACF;AAEA,IAAM,4BAA4B,CAChC,UACA,eAC2B;AAAA,EAC3B;AAAA,EACA,MAAM,UAAU;AAAA,EAChB,QAAQ,sBAAsB,UAAU,MAAM;AAChD;AAEA,IAAM,qBAAqB;AAC3B,IAAM,kBAAoC;AAAA,EACxC,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,MAAM;AAAA,EACN,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,SAAS;AAAA,EACT,OAAO,CAAC;AACV;AAEA,IAAM,cACJ,CAAC,WACD,CAAC,MACC,OAAO,WAAW,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,CAAE,IAAI,EAAE,YAAY,MAAM,CAAC,GAAG,MAAM,CAAC;AAE1F,IAAM,cACJ,CACE,QACA,UAEF,CAAC,MACC,EAAE,IAAI,YAAY,MAAM,EAAE,CAAC,GAAG,QAAQ,MAAM,CAAC,IAAI,IAAI;AAEzD,IAAM,OACJ,CAAC,OACD,CAAC,MACC,EAAE,MAAM,KAAK,EAAE;AAEnB,IAAM,aACJ,CAAC,OAAe,OAChB,CAAC,MACC,EAAE,IAAI,EAAE,YAAY,KAAK,KAAK,GAAG,EAAE,MAAM,KAAK,EAAE,CAAC;AAErD,IAAM,eAAe,CAAC,WAAkC;AACtD,QAAM,MAAM,OAAO,QAAQ,GAAG;AAC9B,SAAO,QAAQ,KAAK,OAAO,OAAO,MAAM,GAAG,GAAG;AAChD;AAEA,IAAM,sBAAsB,CAAC,MAAc,UAA0B;AACnE,QAAM,WAAW,MAAM,KAAK,EAAE,QAAQ,MAAM,SAAS,EAAE,GAAG,CAAC,GAAG,UAAU,KAAK;AAC7E,QAAM,UAAU,MAAM,KAAK,EAAE,QAAQ,MAAM,SAAS,EAAE,GAAG,MAAM,CAAC;AAChE,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,YAAQ,CAAC,IAAI,IAAI;AACjB,aAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,cAAQ,IAAI,CAAC,IACX,KAAK,CAAC,MAAM,MAAM,CAAC,IACf,SAAS,CAAC,IACV,KAAK,IAAI,SAAS,CAAC,GAAI,SAAS,IAAI,CAAC,GAAI,QAAQ,CAAC,CAAE,IAAI;AAAA,IAChE;AACA,aAAS,IAAI,GAAG,IAAI,SAAS,QAAQ,IAAK,UAAS,CAAC,IAAI,QAAQ,CAAC;AAAA,EACnE;AACA,SAAO,SAAS,MAAM,MAAM;AAC9B;AAEA,IAAM,6BAA6B,CAAC,OAAe,cAA8B;AAC/E,QAAM,kBAAkB,MAAM,YAAY;AAC1C,QAAM,sBAAsB,UAAU,YAAY;AAClD,MAAI,wBAAwB,gBAAiB,QAAO;AACpD,MAAI,oBAAoB,WAAW,eAAe,EAAG,QAAO;AAC5D,MAAI,gBAAgB,WAAW,mBAAmB,EAAG,QAAO;AAC5D,MAAI,oBAAoB,SAAS,eAAe,EAAG,QAAO;AAC1D,QAAM,YAAY,gBAAgB,MAAM,GAAG,EAAE,GAAG,EAAE,KAAK;AACvD,QAAM,gBAAgB,oBAAoB,MAAM,GAAG,EAAE,GAAG,EAAE,KAAK;AAC/D,MAAI,cAAc,WAAW,SAAS,KAAK,UAAU,WAAW,aAAa,EAAG,QAAO;AACvF,SAAO,KAAK,oBAAoB,iBAAiB,mBAAmB;AACtE;AAEA,IAAM,yBAAyB,CAC7B,QACA,SAEA,KACG,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,OAAO,2BAA2B,QAAQ,IAAI,EAAE,EAAE,EAAE,EAChF,KAAK,CAAC,MAAM,UAAU,KAAK,QAAQ,MAAM,SAAS,KAAK,GAAG,cAAc,MAAM,EAAE,CAAC,EACjF,MAAM,GAAG,CAAC,EACV,IAAI,CAAC,SAAS,OAAO,KAAK,KAAK,EAAE,CAAC;AA0CvC,IAAM,mBAAmB,CAAC,OAAgC;AAE1D,IAAM,aAAa,CAAC,UAA6C;AAAA,EAC/D,OAAO,CACL,WACA,YAEA,KAAK,IAAI,GAAG,SAAS,UAAU,CAAC,OAAO,iBAAiB,EAAE,EAAE,MAAM,WAAW,OAAO,CAAC;AAAA,EACvF,QAAQ,CACN,WACA,QAEA,KAAK;AAAA,IAAI,GAAG,SAAS;AAAA,IAAW,CAAC,OAC/B,iBAAiB,EAAE,EAAE,OAAO,WAAW,GAAG;AAAA,EAC5C;AAAA,EACF,YAAY,CACV,WACA,SAEA,KAAK,WAAW,IACZA,SAAO,OACP,KACG,IAAI,GAAG,SAAS,eAAe,CAAC,OAAO,iBAAiB,EAAE,EAAE,WAAW,WAAW,IAAI,CAAC,EACvF,KAAKA,SAAO,MAAM;AAAA,EAC3B,YAAY,CACV,WACA,UAAiD,CAAC,MAElD,KAAK;AAAA,IAAI,GAAG,SAAS;AAAA,IAAe,CAAC,OACnC,iBAAiB,EAAE,EAAE,WAAW,WAAW,OAAO;AAAA,EACpD;AAAA,EACF,WAAW,CACT,WACA,YAEA,KAAK;AAAA,IAAI,GAAG,SAAS;AAAA,IAAc,CAAC,OAClC,iBAAiB,EAAE,EAAE,UAAU,WAAW,OAAO;AAAA,EACnD;AAAA,EACF,UAAU,CACR,WACA,UAAsC,CAAC,MAEvC,KAAK;AAAA,IAAI,GAAG,SAAS;AAAA,IAAa,CAAC,OACjC,iBAAiB,EAAE,EAAE,SAAS,WAAW,OAAO;AAAA,EAClD;AAAA,EACF,YAAY,CACV,WACA,YAKA,KAAK;AAAA,IAAI,GAAG,SAAS;AAAA,IAAe,CAAC,OACnC,iBAAiB,EAAE,EAAE,WAAW,WAAW,OAAO;AAAA,EACpD;AACJ;AAEA,IAAM,4BAA4B,CAAI,SAA2D;AAAA,EAC/F,IAAI,IAAI;AAAA,EACR,SAAS,QAAQ,KAAK,IAAI,QAAQ;AAAA,EAClC,UAAU,IAAI;AAAA,EACd,YAAY,IAAI;AAAA,EAChB,KAAK,IAAI;AAAA,EACT,MAAM,IAAI;AAAA,EACV,WAAW,IAAI,sBAAsB,OAAO,IAAI,aAAa,IAAI,KAAK,IAAI,UAAU;AAAA,EACpF,WAAW,IAAI,sBAAsB,OAAO,IAAI,aAAa,IAAI,KAAK,IAAI,UAAU;AACtF;AAEA,IAAM,0BAA0B,CAAC,UAIN;AACzB,QAAM,WAAW,CAAC,YAAoB,QACpC;AAAA,IAAY,MAAM;AAAA,IAAU,CAAC,MAC3B,EAAE;AAAA,MACA,EAAE,aAAa,KAAK,MAAM,QAAQ;AAAA,MAClC,EAAE,cAAc,KAAK,UAAU;AAAA,MAC/B,QAAQ,SAAY,OAAO,EAAE,OAAO,KAAK,GAAG;AAAA,IAC9C;AAAA,EACF;AAEF,QAAM,wBAAwB,CAAC,SAC7B,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,MAAM,UAAU;AAC9B,UAAM,YAAY,MAAM,SAAS,QAAQ,KAAK,QAAQ;AACtD,UAAM,aAAa,MAAM,SAAS,QAAQ,MAAM,QAAQ;AACxD,WAAO,YAAY,cAAc,KAAK,IAAI,cAAc,MAAM,GAAG;AAAA,EACnE,CAAC;AAEH,QAAM,aAAa,CAAI,YAAoB,QACzC,MAAM,KACH,SAAS,kBAAkB,EAAE,OAAO,SAAS,YAAY,GAAG,EAAE,CAAC,EAC/D,KAAKA,SAAO,IAAI,CAAC,SAAS,sBAAsB,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,EACjE,KAAKA,SAAO,IAAI,CAAC,QAAS,MAAM,0BAA6B,GAAG,IAAI,IAAK,CAAC;AAE/E,SAAO;AAAA,IACL,KAAK,CAAC,iBAAiB,WAAW,aAAa,YAAY,aAAa,GAAG;AAAA,IAC3E,YAAY,CAAC,iBACX,MAAM,KACH,UAAU,kBAAkB;AAAA,MAC3B,OAAO;AAAA,QACL,aAAa;AAAA,QACb,gBAAgB;AAAA,UACd,UAAU,MAAM;AAAA,UAChB,YAAY,aAAa;AAAA,UACzB,KAAK,aAAa;AAAA,QACpB,CAAC;AAAA,MACH;AAAA,IACF,CAAC,EACA,KAAKA,SAAO,IAAI,CAAC,QAAS,MAAM,0BAA0B,GAAG,IAAI,IAAK,CAAC;AAAA,IAC5E,MAAM,CAAC,iBACL,MAAM,KAAK,SAAS,kBAAkB,EAAE,OAAO,SAAS,aAAa,UAAU,EAAE,CAAC,EAAE;AAAA,MAClFA,SAAO;AAAA,QAAI,CAAC,SACV,sBAAsB,IAAI,EACvB;AAAA,UAAO,CAAC,QACP,aAAa,cAAc,SACvB,OACA,IAAI,IAAI,WAAW,aAAa,SAAS;AAAA,QAC/C,EACC,IAAI,CAAC,QAAQ,0BAA0B,GAAG,CAAC;AAAA,MAChD;AAAA,IACF;AAAA,IACF,KAAK,CAAC,iBACJA,SAAO,IAAI,aAAa;AACtB,UAAI,CAAC,MAAM,SAAS,SAAS,aAAa,KAAK,GAAG;AAChD,eAAO,OAAO,IAAI,aAAa;AAAA,UAC7B,SAAS,wCAAwC,aAAa,KAAK;AAAA,UACnE,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AACA,YAAM,KAAK,gBAAgB;AAAA,QACzB,UAAU,MAAM;AAAA,QAChB,YAAY,aAAa;AAAA,QACzB,KAAK,aAAa;AAAA,MACpB,CAAC;AACD,YAAM,WAAW,OAAO,MAAM,KAAK,UAAU,kBAAkB;AAAA,QAC7D,OAAO,WAAW,aAAa,OAAO,EAAE;AAAA,MAC1C,CAAC;AACD,YAAM,MAAM,oBAAI,KAAK;AACrB,UAAI,UAAU;AACZ,eAAO,MAAM,KAAK,WAAW,kBAAkB;AAAA,UAC7C,OAAO,WAAW,aAAa,OAAO,EAAE;AAAA,UACxC,KAAK;AAAA,YACH,MAAM,aAAa;AAAA,YACnB,YAAY;AAAA,UACd;AAAA,QACF,CAAC;AACD,eAAO,0BAA0B;AAAA,UAC/B,GAAG;AAAA,UACH,MAAM,aAAa;AAAA,UACnB,YAAY;AAAA,QACd,CAAC;AAAA,MACH;AACA,YAAM,MAAM,OAAO,MAAM,KAAK,OAAO,kBAAkB;AAAA,QACrD;AAAA,QACA,UAAU,aAAa;AAAA,QACvB,WAAW,MAAM;AAAA,QACjB,YAAY,aAAa;AAAA,QACzB,KAAK,aAAa;AAAA,QAClB,MAAM,aAAa;AAAA,QACnB,YAAY;AAAA,QACZ,YAAY;AAAA,MACd,CAAC;AACD,aAAO,0BAA0B,GAAG;AAAA,IACtC,CAAC;AAAA,IACH,QAAQ,CAAC,iBACP,MAAM,KAAK,WAAW,kBAAkB;AAAA,MACtC,OAAO;AAAA,QACL,aAAa;AAAA,QACb,gBAAgB;AAAA,UACd,UAAU,MAAM;AAAA,UAChB,YAAY,aAAa;AAAA,UACzB,KAAK,aAAa;AAAA,QACpB,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAAA,EACL;AACF;AAWA,IAAM,mBAAmB,CACvB,MACA,UACA,UAEAA,SAAO,IAAI,aAAa;AACtB,SAAO,iBAAiB,MAAM,MAAM,IAAI,MAAM,KAAK;AAEnD,QAAM,MAAM,oBAAI,KAAK;AACrB,SAAO,KAAK,OAAO,UAAU;AAAA,IAC3B,IAAI,MAAM;AAAA,IACV,UAAU,MAAM;AAAA,IAChB,WAAW;AAAA,IACX,MAAM,MAAM;AAAA,IACZ,MAAM,MAAM;AAAA,IACZ,KAAK,MAAM,OAAO;AAAA,IAClB,YAAY,MAAM,aAAa;AAAA,IAC/B,aAAa,MAAM,cAAc;AAAA,IACjC,UAAU,MAAM,WAAW;AAAA,IAC3B,YAAY;AAAA,IACZ,YAAY;AAAA,EACd,CAAC;AAED,QAAM,YAAY,oBAAI,IAA0C;AAChE,aAAWI,SAAQ,MAAM,OAAO;AAC9B,cAAU,IAAI,GAAG,MAAM,EAAE,IAAIA,MAAK,IAAI,IAAIA,KAAI;AAAA,EAChD;AACA,QAAM,QAAQ,CAAC,GAAG,UAAU,QAAQ,CAAC;AAErC,MAAI,MAAM,SAAS,GAAG;AACpB,WAAO,KAAK;AAAA,MACV;AAAA,MACA,MAAM,IAAI,CAAC,CAAC,IAAIA,KAAI,OAAO;AAAA,QACzB;AAAA,QACA,UAAU,MAAM;AAAA,QAChB,WAAW,MAAM;AAAA,QACjB,WAAW;AAAA,QACX,MAAMA,MAAK;AAAA,QACX,aAAaA,MAAK;AAAA,QAClB,cAAcA,MAAK,eAAe;AAAA,QAClC,eAAeA,MAAK,gBAAgB;AAAA,QACpC,YAAY;AAAA,QACZ,YAAY;AAAA,MACd,EAAE;AAAA,IACJ;AAAA,EACF;AACF,CAAC;AAKH,IAAM,mBAAmB,CACvB,MACA,UACA,YAEAJ,SAAO,IAAI,aAAa;AACtB,SAAO,KAAK,WAAW,QAAQ;AAAA,IAC7B,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,KAAK,QAAQ,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC;AAAA,EAChF,CAAC;AACD,SAAO,KAAK,WAAW,cAAc;AAAA,IACnC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,KAAK,QAAQ,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC;AAAA,EAChF,CAAC;AACD,SAAO,KAAK,WAAW,UAAU;AAAA,IAC/B,OAAO,WAAW,SAAS,QAAQ;AAAA,EACrC,CAAC;AACH,CAAC;AAEH,IAAM,mBAAmB,CACvB,MACA,UACA,UAEAA,SAAO,IAAI,aAAa;AAGtB,SAAO,KAAK,WAAW,cAAc;AAAA,IACnC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,KAAK,MAAM,QAAQ,GAAG,EAAE,YAAY,KAAK,MAAM,KAAK,CAAC;AAAA,EAC1F,CAAC;AACD,QAAM,UAAU,OAAO,QAAQ,MAAM,WAAW;AAChD,MAAI,QAAQ,WAAW,EAAG;AAC1B,QAAM,MAAM,oBAAI,KAAK;AACrB,SAAO,KAAK;AAAA,IACV;AAAA,IACA,QAAQ,IAAI,CAAC,CAAC,MAAM,MAAM,OAAO;AAAA,MAC/B,IAAI,GAAG,MAAM,QAAQ,IAAI,IAAI;AAAA,MAC7B,UAAU,MAAM;AAAA,MAChB,WAAW,MAAM;AAAA,MACjB,WAAW;AAAA,MACX;AAAA,MACA;AAAA,MACA,YAAY;AAAA,IACd,EAAE;AAAA,EACJ;AACF,CAAC;AAOH,IAAM,oBAAoB,CAACI,OAAY,WAAoC;AACzE,MAAI,OAAO,YAAYA,MAAK,aAAa,OAAO,SAAU,QAAO;AACjE,MAAI,OAAO,OAAO;AAChB,UAAM,IAAI,OAAO,MAAM,YAAY;AACnC,UAAM,MAAM,GAAGA,MAAK,IAAI,IAAIA,MAAK,WAAW,GAAG,YAAY;AAC3D,QAAI,CAAC,IAAI,SAAS,CAAC,EAAG,QAAO;AAAA,EAC/B;AACA,SAAO;AACT;AAEA,IAAM,0BAA0B,CAAC,SAA0B;AACzD,QAAM,OAAO,KAAK,UAAU,QAAQ,CAAC,GAAG,MAAM,CAAC,KAAK;AACpD,SAAO,KAAK,SAAS,sCACjB,GAAG,KAAK,MAAM,GAAG,mCAAmC,CAAC,QACrD;AACN;AAwBO,IAAM,iBAAiB,CAC5B,WAEAJ,SAAO,IAAI,aAAa;AACtB,QAAM,iBAAiB,MAAgB;AACrC,UAAM,QAA8B,CAAC;AACrC,WAAO;AAAA,EACT;AACA,QAAM,EAAE,QAAQ,SAAS,cAAc,eAAe,EAAE,IAAI;AAE5D,MAAI,OAAO,WAAW,GAAG;AACvB,WAAO,OAAO,IAAI,aAAa;AAAA,MAC7B,SAAS;AAAA,MACT,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AAKA,QAAM,UAAgC,OAAO,YACxC;AAAA,IACC,gBAAgB,EAAE,YAAY,OAAO,UAAU,WAAW,CAAC;AAAA,IAC3D,GAAG;AAAA,EACL,IACC;AAEL,QAAM,SAAS,OAAOA,SAAO,IAAI;AAAA,IAC/B,KAAK,MAAM,cAAc,OAAO;AAAA,IAChC,OAAO,CAAC,UAAU,0BAA0B,qCAAqC,KAAK;AAAA,EACxF,CAAC;AACD,QAAM,UAAU,OAAOA,SAAO,QAAQ,MAAM;AAC1C,QAAI,CAAC,OAAO,GAAI,QAAOA,SAAO,QAAQ,sBAAsB,MAAM,CAAC;AACnE,QAAI,OAAO,OAAO,OAAO,WAAY,QAAOA,SAAO,QAAQ,OAAO,EAAE;AACpE,UAAM,MAAM,OAAO,GAAG,EAAE,OAAO,CAAC;AAChC,WAAOA,SAAO,SAAS,GAAG,IAAI,MAAMA,SAAO,QAAQ,GAAG;AAAA,EACxD,CAAC;AACD,QAAM,gBAAgB,QAAQ,UAAU,QAAQ,KAAK;AACrD,QAAM,UAAU,QAAQ,UAAU,QAAQ,QAAQ;AAClD,SAAOA,SAAO,IAAI;AAAA,IAChB,KAAK,MAAM;AACT,+BAAyB,QAAQ,cAAc,SAAS,MAAM;AAC9D,wCAAkC,cAAc,SAAS,MAAM;AAAA,IACjE;AAAA,IACA,OAAO,CAAC,UAAU,0BAA0B,sCAAsC,KAAK;AAAA,EACzF,CAAC;AACD,QAAM,WAAW,OAAO,IAAI,CAAC,MAAM,OAAO,EAAE,EAAE,CAAC;AAC/C,QAAM,SAAS,iBAAiB,eAAe;AAAA,IAC7C,iBAAiB,IAAI,IAAI,QAAQ;AAAA,EACnC,CAAsC;AACtC,QAAM,OAAO,eAAe,MAAM;AAClC,QAAM,OAAO,WAAW,IAAI;AAC5B,QAAM,QAAQ,kBAAkB,IAAI;AACpC,QAAM,cAAc,CAAO,WAAgC,KAAK,YAAY,MAAM;AAGlF,QAAM,cAAc,oBAAI,IAAyB;AACjD,QAAM,gBAAgB,oBAAI,IAA2B;AAGrD,QAAM,WAAW,oBAAI,IAA2B;AAEhD,QAAM,kBAAkB,oBAAI,IAA4B;AAGxD,QAAM,sBAAsB,oBAAI,IAAgC;AAChE,QAAM,4BAA4B,CAAC,QACjC,oBAAoB,IAAI,GAAG;AAO7B,QAAM,kBAAkB,oBAAI,IAW1B;AACF,QAAM,sBAAsB,UAAU,WAAW,CAAC;AAClD,QAAM,aAAqC,CAAC;AAuB5C,QAAM,kBAAkB,oBAAI,IAAoB;AAChD,WAAS,QAAQ,CAAC,GAAG,MAAM,gBAAgB,IAAI,GAAG,CAAC,CAAC;AAMpD,QAAM,aAAa,CAAC,QAClB,OAAO,IAAI,aAAa,WAAW,IAAI,WAAW;AACpD,QAAM,YAAY,CAAC,QAAwC;AACzD,UAAM,UAAU,WAAW,GAAG;AAC9B,WAAO,YAAY,OAAO,WAAY,gBAAgB,IAAI,OAAO,KAAK;AAAA,EACxE;AAKA,QAAM,gBAAgB,CAAkC,SAAiC;AACvF,QAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,QAAI;AACJ,QAAI,OAAO;AACX,eAAW,OAAO,MAAM;AACtB,YAAM,OAAO,UAAU,GAAG;AAC1B,UAAI,OAAO,MAAM;AACf,eAAO;AACP,iBAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,UAAU;AAAA,EACnB;AAEA,QAAM,2BAA2B,CAAC,WAChC,OAAO,OAAO,CAAC,UAAU,SAAS,SAAS,MAAM,OAAO,CAAC;AAE3D,QAAM,kBAAkB,CAAC,OACvB,KAAK,SAAS,UAAU,EAAE,OAAO,YAAY,UAAU,KAAK,EAAE,CAAC,EAAE,CAAC;AAKpE,QAAM,6BAA6B,CACjC,IACA,SAEAA,SAAO,IAAI,aAAa;AACtB,UAAM,UAAU,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,UAAU,CAAC,CAAC;AACpE,eAAW,OAAO,SAAS;AACzB,YAAM,WAAW,gBAAgB,IAAI,IAAI,QAAQ;AACjD,UAAI,CAAC,SAAU;AACf,YAAM,QAAQ,OAAO,SAAS,IAAI,IAAI,IAAI,QAAQ;AAClD,UAAI,UAAU,KAAM,QAAO;AAAA,IAC7B;AASA,UAAM,gBAAgB,SAAS,CAAC;AAChC,UAAM,aAAa,CAAC,GAAG,gBAAgB,OAAO,CAAC,EAAE;AAAA,MAC/C,CAAC,MAAM,EAAE,QAAQ,EAAE,kBAAkB;AAAA,IACvC;AACA,eAAW,YAAY,YAAY;AACjC,YAAM,QAAQ,OAAO,SAClB,IAAI,IAAI,aAAa,EACrB,KAAKA,SAAO,MAAM,MAAMA,SAAO,QAAQ,IAAI,CAAC,CAAC;AAChD,UAAI,UAAU,KAAM,QAAO;AAAA,IAC7B;AACA,WAAO;AAAA,EACT,CAAC;AAEH,QAAM,aAAa,CACjB,OAEAA,SAAO,IAAI,aAAa;AAGtB,UAAM,OAAO,OAAO,gBAAgB,EAAE;AACtC,UAAM,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,sBAAsB;AAC3D,UAAM,sBAAsB,OAAO;AACnC,QAAI,qBAAqB;AACvB,aAAO,OAAO,IAAI,6BAA6B;AAAA,QAC7C,UAAU,SAAS,KAAK,EAAE;AAAA,QAC1B,cAAc,aAAa,KAAK,mBAAmB;AAAA,MACrD,CAAC;AAAA,IACH;AACA,WAAO,OAAO,2BAA2B,IAAI,IAAI;AAAA,EACnD,CAAC;AAEH,QAAM,qBAAqB,CACzB,OAKAA,SAAO,IAAI,aAAa;AACtB,UAAM,OAAO,OAAO,gBAAgB,EAAE;AACtC,UAAM,UAAU,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,UAAU,CAAC,CAAC;AACpE,eAAW,OAAO,SAAS;AACzB,UAAI,IAAI,uBAAwB;AAChC,YAAMK,SAAQ,OAAO,0BAA0B,KAAK,EAAE;AACtD,UAAIA,WAAU,KAAM,QAAO,EAAE,OAAAA,QAAO,SAAS,IAAI,SAAS;AAAA,IAC5D;AACA,UAAM,QAAQ,OAAO,2BAA2B,IAAI,CAAC,CAAC;AACtD,WAAO,UAAU,OAAO,OAAO,EAAE,OAAO,SAAS,KAAK;AAAA,EACxD,CAAC;AAEH,QAAM,4BAA4B,CAChC,KACA,OAEAL,SAAO,IAAI,aAAa;AACtB,QAAI,CAAC,IAAK,QAAO;AACjB,UAAM,WAAW,gBAAgB,IAAI,IAAI,QAAQ;AACjD,QAAI,CAAC,SAAU,QAAO;AACtB,WAAO,OAAO,SAAS,IAAI,IAAI,IAAI,QAAQ;AAAA,EAC7C,CAAC;AAEH,QAAM,oBAAoB,CACxB,IACA,UAEAA,SAAO,IAAI,aAAa;AACtB,WAAO,mBAAmB,oBAAoB,KAAK;AACnD,UAAM,MAAM,OAAO,qBAAqB;AAAA,MACtC,UAAU;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AACD,QAAI,KAAK,wBAAwB;AAC/B,aAAO,OAAO,IAAI,6BAA6B;AAAA,QAC7C,UAAU,SAAS,KAAK,EAAE;AAAA,QAC1B,cAAc,aAAa,KAAK,IAAI,sBAAsB;AAAA,MAC5D,CAAC;AAAA,IACH;AACA,WAAO,OAAO,0BAA0B,KAAK,EAAE;AAAA,EACjD,CAAC;AAEH,QAAM,6BAA6B,CACjC,IACA,UAEAA,SAAO,IAAI,aAAa;AACtB,WAAO,mBAAmB,+BAA+B,KAAK;AAC9D,UAAM,MAAM,OAAO,qBAAqB;AAAA,MACtC,UAAU;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AACD,WAAO,OAAO,0BAA0B,KAAK,EAAE;AAAA,EACjD,CAAC;AAEH,QAAM,6BAA6B,CAAC,QAAmB;AACrD,UAAM,WAAW,gBAAgB,IAAI,IAAI,QAAQ;AACjD,QAAI,CAAC,UAAU,IAAK,QAAOA,SAAO,QAAQ,IAAI;AAC9C,WAAO,SAAS,IAAI,IAAI,IAAI,IAAI,QAAQ,EAAE,KAAKA,SAAO,MAAM,MAAMA,SAAO,QAAQ,KAAK,CAAC,CAAC;AAAA,EAC1F;AAEA,QAAM,aAAa,CAAC,UAClBA,SAAO,IAAI,aAAa;AAEtB,QAAI,CAAC,SAAS,SAAS,MAAM,KAAK,GAAG;AACnC,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SACE,8BAA8B,MAAM,KAAK,iDACP,SAAS,KAAK,IAAI,CAAC;AAAA,QACvD,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAMA,QAAI;AACJ,QAAI,MAAM,UAAU;AAClB,eAAS,gBAAgB,IAAI,MAAM,QAAQ;AAC3C,UAAI,CAAC,QAAQ;AACX,eAAO,OAAO,IAAI,aAAa;AAAA,UAC7B,SAAS,4BAA4B,MAAM,QAAQ;AAAA,UACnD,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AAAA,IACF,OAAO;AACL,iBAAW,YAAY,gBAAgB,OAAO,GAAG;AAC/C,YAAI,SAAS,YAAY,SAAS,KAAK;AACrC,mBAAS;AACT;AAAA,QACF;AAAA,MACF;AACA,UAAI,CAAC,QAAQ;AACX,eAAO,OAAO,IAAI,aAAa;AAAA,UAC7B,SAAS;AAAA,UACT,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AAAA,IACF;AACA,QAAI,CAAC,OAAO,YAAY,CAAC,OAAO,KAAK;AACnC,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SAAS,oBAAoB,OAAO,GAAG;AAAA,QACvC,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAEA,WAAO,OAAO,IAAI,MAAM,IAAI,MAAM,OAAO,MAAM,KAAK;AAMpD,UAAM,MAAM,oBAAI,KAAK;AACrB,WAAO,KAAK,WAAW,UAAU;AAAA,MAC/B,OAAO,WAAW,MAAM,OAAO,MAAM,EAAE;AAAA,IACzC,CAAC;AACD,WAAO,KAAK,OAAO,UAAU;AAAA,MAC3B,IAAI,MAAM;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,MAAM,MAAM;AAAA,MACZ,UAAU,OAAO;AAAA,MACjB,wBAAwB;AAAA,MACxB,YAAY;AAAA,IACd,CAAC;AAED,WAAO,UAAU,KAAK;AAAA,MACpB,IAAI,MAAM;AAAA,MACV,SAAS,MAAM;AAAA,MACf,MAAM,MAAM;AAAA,MACZ,UAAU,OAAO;AAAA,MACjB,WAAW;AAAA,IACb,CAAC;AAAA,EACH,CAAC;AAYH,QAAM,sBAAsB,CAAC,OAC3BA,SAAO,IAAI,aAAa;AACtB,UAAM,WAAW,SAAS,KAAK,EAAE;AACjC,UAAM,aAAa,OAAO,iCAAiC,EAAE;AAC7D,UAAM,YAAY,OAAOA,SAAO;AAAA,MAC9B,CAAC,GAAG,SAAS,OAAO,CAAC,EAClB,OAAO,CAAC,MAAM,EAAE,OAAO,eAAe,EACtC;AAAA,QAAI,CAAC,MACJ,EAAE,OAAO,gBAAiB;AAAA,UACxB,KAAK,EAAE;AAAA,UACP,MAAM,EAAE,SAAS;AAAA,QACnB,CAAC,EAAE;AAAA,UACDA,SAAO;AAAA,YACL,CAAC,UACC,IAAI,aAAa;AAAA,cACf,SAAS,qCAAqC,EAAE,OAAO,EAAE;AAAA,cACzD;AAAA,YACF,CAAC;AAAA,UACL;AAAA,QACF;AAAA,MACF;AAAA,MACF,EAAE,aAAa,YAAY;AAAA,IAC7B;AACA,WAAO,yBAAyB,CAAC,GAAG,YAAY,GAAG,UAAU,KAAK,CAAC,CAAC;AAAA,EACtE,CAAC;AAEH,QAAM,gBAAgB,CAAC,OACrBA,SAAO,IAAI,aAAa;AACtB,UAAM,WAAW,SAAS,KAAK,EAAE;AACjC,UAAM,aAAa,OAAO,iCAAiC,EAAE;AAC7D,UAAM,YAAY,OAAOA,SAAO;AAAA,MAC9B,CAAC,GAAG,SAAS,OAAO,CAAC,EAClB,OAAO,CAAC,MAAM,EAAE,OAAO,eAAe,EACtC;AAAA,QAAI,CAAC,MACJ,EAAE,OAAO,gBAAiB;AAAA,UACxB,KAAK,EAAE;AAAA,UACP,MAAM,EAAE,SAAS;AAAA,QACnB,CAAC,EAAE;AAAA,UACDA,SAAO;AAAA,YAAW,CAAC,UACjBA,SAAO,WAAW,qCAAqC,EAAE,OAAO,EAAE,IAAI,KAAK,EAAE;AAAA,cAC3EA,SAAO,GAAG,CAAC,CAAqB;AAAA,YAClC;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MACF,EAAE,aAAa,YAAY;AAAA,IAC7B;AACA,WAAO,yBAAyB,CAAC,GAAG,YAAY,GAAG,UAAU,KAAK,CAAC,CAAC;AAAA,EACtE,CAAC;AAEH,QAAM,0BAA0B,CAAC,OAC/BA,SAAO,IAAI,aAAa;AACtB,UAAM,eAAe,aAAa,KAAK,EAAE;AACzC,UAAM,aAAa,OAAO,qCAAqC,EAAE;AACjE,UAAM,YAAY,OAAOA,SAAO;AAAA,MAC9B,CAAC,GAAG,SAAS,OAAO,CAAC,EAClB,OAAO,CAAC,MAAM,EAAE,OAAO,mBAAmB,EAC1C;AAAA,QAAI,CAAC,MACJ,EAAE,OAAO,oBAAqB;AAAA,UAC5B,KAAK,EAAE;AAAA,UACP,MAAM,EAAE,aAAa;AAAA,QACvB,CAAC,EAAE;AAAA,UACDA,SAAO;AAAA,YACL,CAAC,UACC,IAAI,aAAa;AAAA,cACf,SAAS,yCAAyC,EAAE,OAAO,EAAE;AAAA,cAC7D;AAAA,YACF,CAAC;AAAA,UACL;AAAA,QACF;AAAA,MACF;AAAA,MACF,EAAE,aAAa,YAAY;AAAA,IAC7B;AACA,WAAO,yBAAyB,CAAC,GAAG,YAAY,GAAG,UAAU,KAAK,CAAC,CAAC;AAAA,EACtE,CAAC;AAEH,QAAM,oBAAoB,CAAC,OACzBA,SAAO,IAAI,aAAa;AACtB,UAAM,eAAe,aAAa,KAAK,EAAE;AACzC,UAAM,aAAa,OAAO,qCAAqC,EAAE;AACjE,UAAM,YAAY,OAAOA,SAAO;AAAA,MAC9B,CAAC,GAAG,SAAS,OAAO,CAAC,EAClB,OAAO,CAAC,MAAM,EAAE,OAAO,mBAAmB,EAC1C;AAAA,QAAI,CAAC,MACJ,EAAE,OAAO,oBAAqB;AAAA,UAC5B,KAAK,EAAE;AAAA,UACP,MAAM,EAAE,aAAa;AAAA,QACvB,CAAC,EAAE;AAAA,UACDA,SAAO;AAAA,YAAW,CAAC,UACjBA,SAAO;AAAA,cACL,yCAAyC,EAAE,OAAO,EAAE;AAAA,cACpD;AAAA,YACF,EAAE,KAAKA,SAAO,GAAG,CAAC,CAAqB,CAAC;AAAA,UAC1C;AAAA,QACF;AAAA,MACF;AAAA,MACF,EAAE,aAAa,YAAY;AAAA,IAC7B;AACA,WAAO,yBAAyB,CAAC,GAAG,YAAY,GAAG,UAAU,KAAK,CAAC,CAAC;AAAA,EACtE,CAAC;AAEH,QAAM,gBAAgB,CACpB,UAEAA,SAAO,IAAI,aAAa;AACtB,UAAM,KAAK,MAAM;AACjB,UAAM,cAAc,MAAM;AAC1B,QAAI,CAAC,SAAS,SAAS,WAAW,GAAG;AACnC,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SACE,8BAA8B,WAAW,2CACrC,SAAS,KAAK,IAAI,CAAC;AAAA,QACzB,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAQA,UAAM,OAAO,OAAO,KAAK,SAAS,UAAU;AAAA,MAC1C,OAAO,YAAY,UAAU,KAAK,EAAE,CAAC;AAAA,IACvC,CAAC;AACD,UAAM,SAAS,KAAK,KAAK,CAAC,QAAQ,IAAI,aAAa,WAAW;AAG9D,QAAI,UAAU,OAAO,wBAAwB;AAC3C,aAAO,OAAO,IAAI,6BAA6B;AAAA,QAC7C,UAAU,SAAS,KAAK,EAAE;AAAA,QAC1B,cAAc,aAAa,KAAK,OAAO,sBAAsB;AAAA,MAC/D,CAAC;AAAA,IACH;AAKA,QAAI,QAAQ;AACV,YAAM,UAAU,OAAO,oBAAoB,EAAE,GAAG;AAAA,QAC9C,CAAC,UAAU,MAAM,YAAY;AAAA,MAC/B;AACA,UAAI,OAAO,SAAS,GAAG;AACrB,eAAO,OAAO,IAAI,iBAAiB;AAAA,UACjC,UAAU,SAAS,KAAK,EAAE;AAAA,UAC1B,YAAY,OAAO;AAAA,QACrB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,WAAW,CAAC,GAAG,gBAAgB,OAAO,CAAC,EAAE;AAAA,MAC7C,CAAC,MACC,CAAC,EAAE,EAAE,YAAY,EAAE;AAAA,IACvB;AACA,WAAOA,SAAO;AAAA,MACZ,SAAS,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,WAAW,CAAC;AAAA,MAC7C,EAAE,aAAa,YAAY;AAAA,IAC7B;AAEA,QAAI,QAAQ;AACV,aAAO,KAAK,WAAW,UAAU;AAAA,QAC/B,OAAO,WAAW,aAAa,EAAE;AAAA,MACnC,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAuBH,QAAM,cAAc,MAClBA,SAAO,IAAI,aAAa;AACtB,UAAMM,QAAO,oBAAI,IAAuB;AAOxC,UAAM,UAAU,OAAO,KAAK,SAAS,UAAU,EAAE,OAAO,YAAY,QAAQ,EAAE,CAAC;AAC/E,UAAM,OAAO,QAAQ,OAAO,CAAC,MAAM,CAAC,EAAE,sBAAsB;AAC5D,UAAM,OAAO,CAAC,QAA+B;AAC3C,YAAM,WAAWA,MAAK,IAAI,IAAI,EAAE;AAChC,YAAM,gBAAgB,IAAI;AAC1B,YAAM,eAAe,UAAU,GAAG;AAClC,UAAI,UAAU;AACZ,cAAM,eAAe,gBAAgB,IAAI,SAAS,OAAO,KAAK;AAC9D,YAAI,gBAAgB,aAAc;AAAA,MACpC;AACA,MAAAA,MAAK;AAAA,QACH,IAAI;AAAA,QACJ,UAAU,KAAK;AAAA,UACb,IAAI,SAAS,KAAK,IAAI,EAAE;AAAA,UACxB,SAAS,QAAQ,KAAK,aAAa;AAAA,UACnC,MAAM,IAAI;AAAA,UACV,UAAU,IAAI;AAAA,UACd,WAAW,IAAI,sBAAsB,OAAO,IAAI,aAAa,IAAI,KAAK,IAAI,UAAU;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AACA,eAAW,OAAO,MAAM;AACtB,YAAM,kBAAkB,OAAO,2BAA2B,GAAG;AAC7D,UAAI,gBAAiB,MAAK,GAAG;AAAA,IAC/B;AAIA,UAAM,qBAAqB,IAAI;AAAA,MAC7B,QAAQ,OAAO,CAAC,MAAM,EAAE,sBAAsB,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE;AAAA,IACjE;AAIA,UAAM,mBAAmB,SAAS,CAAC;AACnC,QAAI,qBAAqB,QAAW;AAClC,iBAAW,CAAC,KAAK,QAAQ,KAAK,iBAAiB;AAC7C,YAAI,CAAC,SAAS,KAAM;AACpB,cAAM,UAAU,OAAO,SACpB,KAAK,EACL,KAAKN,SAAO,MAAM,MAAMA,SAAO,QAAQ,CAAC,CAAU,CAAC,CAAC;AACvD,mBAAW,SAAS,SAAS;AAC3B,cAAIM,MAAK,IAAI,MAAM,EAAE,EAAG;AACxB,cAAI,mBAAmB,IAAI,MAAM,EAAE,EAAG;AACtC,UAAAA,MAAK;AAAA,YACH,MAAM;AAAA,YACN,UAAU,KAAK;AAAA,cACb,IAAI,SAAS,KAAK,MAAM,EAAE;AAAA,cAC1B,SAAS,QAAQ,KAAK,gBAAgB;AAAA,cACtC,MAAM,MAAM;AAAA,cACZ,UAAU;AAAA,cACV,WAAW,oBAAI,KAAK,CAAC;AAAA,YACvB,CAAC;AAAA,UACH;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,WAAO,MAAM,KAAKA,MAAK,OAAO,CAAC;AAAA,EACjC,CAAC;AAEH,QAAM,iBAAiB,MACrBN,SAAO,IAAI,aAAa;AACtB,UAAM,UAAU,OAAO,KAAK,SAAS,UAAU,EAAE,OAAO,YAAY,QAAQ,EAAE,CAAC;AAC/E,UAAM,UAAU,oBAAI,IAAY;AAChC,UAAM,OAAoB,CAAC;AAE3B,eAAW,OAAO,SAAS;AACzB,cAAQ,IAAI,IAAI,EAAE;AAClB,UAAI,IAAI,uBAAwB;AAChC,YAAM,kBAAkB,OAAO,2BAA2B,GAAG;AAC7D,UAAI,CAAC,gBAAiB;AACtB,WAAK;AAAA,QACH,UAAU,KAAK;AAAA,UACb,IAAI,SAAS,KAAK,IAAI,EAAE;AAAA,UACxB,SAAS,QAAQ,KAAK,IAAI,QAAQ;AAAA,UAClC,MAAM,IAAI;AAAA,UACV,UAAU,IAAI;AAAA,UACd,WAAW,IAAI,sBAAsB,OAAO,IAAI,aAAa,IAAI,KAAK,IAAI,UAAU;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO,KAAK,KAAK,CAAC,GAAG,MAAM;AACzB,YAAM,QACH,gBAAgB,IAAI,EAAE,OAAO,KAAK,aAClC,gBAAgB,IAAI,EAAE,OAAO,KAAK;AACrC,UAAI,SAAS,EAAG,QAAO;AACvB,YAAM,OAAO,EAAE,KAAK,cAAc,EAAE,IAAI;AACxC,aAAO,SAAS,IAAI,OAAO,EAAE,EAAE,EAAE,cAAc,OAAO,EAAE,EAAE,CAAC,IAAI;AAAA,IACjE,CAAC;AAAA,EACH,CAAC;AAIH,QAAM,oBAAoB,MACxBA,SAAO,IAAI,aAAa;AACtB,UAAM,OAAO,OAAO,YAAY;AAChC,WAAO,KAAK,IAAI,CAAC,SAAS;AAAA,MACxB,IAAI,OAAO,IAAI,EAAE;AAAA,MACjB,SAAS,IAAI;AAAA,MACb,MAAM,IAAI;AAAA,MACV,UAAU,IAAI;AAAA,IAChB,EAAE;AAAA,EACJ,CAAC;AAaH,QAAM,6BAA6B;AAEnC,QAAM,kBAAkB,CAAC,QACvB,cAAc,KAAK;AAAA,IACjB,IAAI,aAAa,KAAK,IAAI,EAAE;AAAA,IAC5B,SAAS,QAAQ,KAAK,IAAI,QAAQ;AAAA,IAClC,UAAU,IAAI;AAAA,IACd,eAAe,IAAI,kBAAkB;AAAA,IACrC,qBAAqB,SAAS,KAAK,IAAI,sBAAsB;AAAA,IAC7D,sBACE,IAAI,2BAA2B,OAAO,SAAS,KAAK,IAAI,uBAAuB,IAAI;AAAA,IACrF,WAAW,IAAI,cAAc,OAAO,OAAO,IAAI,UAAU,IAAI;AAAA,IAC7D,YAAY,IAAI,SAAS;AAAA,IACzB,eAAeE,QAAO,UAAUC,qBAAoB,iBAAiB,IAAI,cAAc,CAAC,CAAC;AAAA,IACzF,WAAW,IAAI,sBAAsB,OAAO,IAAI,aAAa,IAAI,KAAK,IAAI,UAAU;AAAA,IACpF,WAAW,IAAI,sBAAsB,OAAO,IAAI,aAAa,IAAI,KAAK,IAAI,UAAU;AAAA,EACtF,CAAC;AAEH,QAAM,6BAA6B,CACjC,OAEAH,SAAO,IAAI,aAAa;AACtB,UAAM,OAAO,OAAO,KAAK,SAAS,cAAc;AAAA,MAC9C,OAAO,YAAY,UAAU,KAAK,EAAE,CAAC;AAAA,IACvC,CAAC;AACD,WAAO,cAAc,IAAgC;AAAA,EACvD,CAAC;AAEH,QAAM,iBAAiB,CAAC,OACtBA,SAAO,IAAI,aAAa;AACtB,UAAM,MAAM,OAAO,2BAA2B,EAAE;AAChD,WAAO,MAAM,gBAAgB,GAAG,IAAI;AAAA,EACtC,CAAC;AAEH,QAAM,wBAAwB,CAC5B,IACA,UAEAA,SAAO,IAAI,aAAa;AACtB,WAAO,mBAAmB,wBAAwB,KAAK;AACvD,UAAM,MAAM,OAAO,yBAAyB;AAAA,MAC1C,cAAc;AAAA,MACd,SAAS;AAAA,IACX,CAAC;AACD,WAAO,MAAM,gBAAgB,GAAG,IAAI;AAAA,EACtC,CAAC;AAEH,QAAM,kBAAkB,MACtBA,SAAO,IAAI,aAAa;AACtB,UAAM,OAAO,OAAO,KAAK,SAAS,cAAc,EAAE,OAAO,YAAY,QAAQ,EAAE,CAAC;AAEhF,UAAMM,QAAO,oBAAI,IAA2B;AAC5C,UAAM,WAAW,oBAAI,IAAoB;AACzC,eAAW,OAAO,MAAkC;AAClD,YAAM,OAAO,UAAU,GAAG;AAC1B,YAAM,WAAW,SAAS,IAAI,IAAI,EAAE;AACpC,UAAI,aAAa,UAAa,OAAO,UAAU;AAC7C,QAAAA,MAAK,IAAI,IAAI,IAAI,GAAG;AACpB,iBAAS,IAAI,IAAI,IAAI,IAAI;AAAA,MAC3B;AAAA,IACF;AACA,WAAO,CAAC,GAAGA,MAAK,OAAO,CAAC,EAAE,IAAI,eAAe;AAAA,EAC/C,CAAC;AAKH,QAAM,mBAAmB,CAAC,WAQxBN,SAAO,IAAI,aAAa;AACtB,UAAM,SAAS,gBAAgB,IAAI,OAAO,QAAQ;AAClD,QAAI,CAAC,QAAQ;AACX,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SAAS,4BAA4B,OAAO,QAAQ;AAAA,QACpD,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,QAAI,CAAC,OAAO,YAAY,CAAC,OAAO,KAAK;AACnC,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SAAS,oBAAoB,OAAO,GAAG;AAAA,QACvC,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,WAAO,OAAO,IAAI,OAAO,IAAI,OAAO,OAAO,OAAO,KAAK;AAEvD,UAAM,MAAM,oBAAI,KAAK;AACrB,WAAO,KAAK,WAAW,UAAU;AAAA,MAC/B,OAAO,WAAW,OAAO,OAAO,OAAO,EAAE;AAAA,IAC3C,CAAC;AACD,WAAO,KAAK,OAAO,UAAU;AAAA,MAC3B,IAAI,OAAO;AAAA,MACX,UAAU,OAAO;AAAA,MACjB,MAAM,OAAO;AAAA,MACb,UAAU,OAAO;AAAA,MACjB,wBAAwB,OAAO;AAAA,MAC/B,YAAY;AAAA,IACd,CAAC;AAAA,EACH,CAAC;AAEH,QAAM,uBAAuB,CAC3B,cAEAA,SAAO,IAAI,aAAa;AACtB,QAAI,WAAW;AACb,YAAM,IAAI,gBAAgB,IAAI,SAAS;AACvC,UAAI,CAAC,GAAG;AACN,eAAO,OAAO,IAAI,aAAa;AAAA,UAC7B,SAAS,4BAA4B,SAAS;AAAA,UAC9C,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AACA,aAAO;AAAA,IACT;AACA,eAAW,KAAK,gBAAgB,OAAO,GAAG;AACxC,UAAI,EAAE,YAAY,EAAE,IAAK,QAAO;AAAA,IAClC;AACA,WAAO,OAAO,IAAI,aAAa;AAAA,MAC7B,SAAS;AAAA,MACT,OAAO;AAAA,IACT,CAAC;AAAA,EACH,CAAC;AAEH,QAAM,oBAAoB,CACxB,UAEAA,SAAO,IAAI,aAAa;AACtB,QAAI,CAAC,SAAS,KAAK,CAAC,YAAY,YAAY,MAAM,KAAK,GAAG;AACxD,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SACE,qCAAqC,MAAM,KAAK,iDACd,SAAS,KAAK,IAAI,CAAC;AAAA,QACvD,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,QAAI,CAAC,0BAA0B,MAAM,QAAQ,GAAG;AAC9C,aAAO,OAAO,IAAI,qCAAqC;AAAA,QACrD,UAAU,MAAM;AAAA,QAChB,cAAc,MAAM;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,OAAO,qBAAqB;AAC7C,UAAM,MAAM,oBAAI,KAAK;AAErB,WAAO,OAAO;AAAA,MACZA,SAAO,IAAI,aAAa;AAKtB,eAAO,KAAK,WAAW,cAAc;AAAA,UACnC,OAAO,WAAW,MAAM,OAAO,MAAM,EAAE;AAAA,QACzC,CAAC;AAED,eAAO,iBAAiB;AAAA,UACtB,IAAI,MAAM,YAAY;AAAA,UACtB,OAAO,MAAM;AAAA,UACb,MAAM,MAAM,YAAY;AAAA,UACxB,OAAO,MAAM,YAAY;AAAA,UACzB,UAAU,SAAS;AAAA,UACnB,qBAAqB,MAAM;AAAA,QAC7B,CAAC;AACD,YAAI,MAAM,cAAc;AACtB,iBAAO,iBAAiB;AAAA,YACtB,IAAI,MAAM,aAAa;AAAA,YACvB,OAAO,MAAM;AAAA,YACb,MAAM,MAAM,aAAa;AAAA,YACzB,OAAO,MAAM,aAAa;AAAA,YAC1B,UAAU,SAAS;AAAA,YACnB,qBAAqB,MAAM;AAAA,UAC7B,CAAC;AAAA,QACH;AAEA,eAAO,KAAK,OAAO,cAAc;AAAA,UAC/B,IAAI,MAAM;AAAA,UACV,UAAU,MAAM;AAAA,UAChB,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM,iBAAiB;AAAA,UACvC,wBAAwB,MAAM,YAAY;AAAA,UAC1C,yBAAyB,MAAM,cAAc,YAAY;AAAA,UACzD,YAAY,MAAM,aAAa;AAAA,UAC/B,OAAO,MAAM,cAAc;AAAA,UAC3B,gBAAgB,MAAM,iBAAiB;AAAA,UACvC,YAAY;AAAA,UACZ,YAAY;AAAA,QACd,CAAC;AAED,eAAO,cAAc,KAAK;AAAA,UACxB,IAAI,MAAM;AAAA,UACV,SAAS,MAAM;AAAA,UACf,UAAU,MAAM;AAAA,UAChB,eAAe,MAAM;AAAA,UACrB,qBAAqB,MAAM,YAAY;AAAA,UACvC,sBAAsB,MAAM,cAAc,YAAY;AAAA,UACtD,WAAW,MAAM;AAAA,UACjB,YAAY,MAAM;AAAA,UAClB,eAAe,MAAM;AAAA,UACrB,WAAW;AAAA,UACX,WAAW;AAAA,QACb,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAOH,QAAM,gCAAgC,CACpC,OACA,QAEAA,SAAO,IAAI,aAAa;AACtB,UAAM,WAAW,OAAO,qBAAqB;AAC7C,UAAM,aAAa,cAAc,MAAM,EAAE;AACzC,UAAM,cAAc,cAAc,MAAM,EAAE;AAE1C,WAAO,OAAO;AAAA,MACZA,SAAO,IAAI,aAAa;AACtB,eAAO,iBAAiB;AAAA,UACtB,IAAI,IAAI;AAAA,UACR,OAAO,IAAI;AAAA,UACX,MAAM;AAAA,UACN,OAAO,MAAM;AAAA,UACb,UAAU,SAAS;AAAA,UACnB,qBAAqB,IAAI;AAAA,QAC3B,CAAC;AACD,cAAM,iBAAiB,MAAM,gBAAgB;AAC7C,YAAI,kBAAkB,IAAI,yBAAyB;AACjD,iBAAO,iBAAiB;AAAA,YACtB,IAAI,IAAI;AAAA,YACR,OAAO,IAAI;AAAA,YACX,MAAM;AAAA,YACN,OAAO;AAAA,YACP,UAAU,SAAS;AAAA,YACnB,qBAAqB,IAAI;AAAA,UAC3B,CAAC;AAAA,QACH;AACA,cAAM,MAAM,oBAAI,KAAK;AACrB,cAAM,QAAiC,EAAE,YAAY,IAAI;AACzD,YAAI,MAAM,cAAc,OAAW,OAAM,aAAa,MAAM,aAAa;AACzE,YAAI,MAAM,eAAe,OAAW,OAAM,QAAQ,MAAM,cAAc;AACtE,YAAI,MAAM,kBAAkB;AAC1B,gBAAM,iBAAiB,MAAM,iBAAiB;AAChD,YAAI,MAAM,kBAAkB;AAC1B,gBAAM,iBAAiB,MAAM,iBAAiB;AAChD,eAAO,KAAK,WAAW,cAAc;AAAA,UACnC,OAAO,WAAW,IAAI,UAAU,IAAI,EAAE;AAAA,UACtC,KAAK;AAAA,QACP,CAAC;AACD,cAAM,UAAU,OAAO,yBAAyB;AAAA,UAC9C,cAAc,IAAI;AAAA,UAClB,SAAS,IAAI;AAAA,QACf,CAAC;AACD,YAAI,CAAC,SAAS;AACZ,iBAAO,OAAO,IAAI,wBAAwB;AAAA,YACxC,cAAc,MAAM;AAAA,UACtB,CAAC;AAAA,QACH;AACA,eAAO,gBAAgB,OAAO;AAAA,MAChC,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAEH,QAAM,0BAA0B,CAC9B,UAEAA,SAAO,IAAI,aAAa;AACtB,UAAM,MAAM,OAAO,2BAA2B,MAAM,EAAE;AACtD,QAAI,CAAC,KAAK;AACR,aAAO,OAAO,IAAI,wBAAwB,EAAE,cAAc,MAAM,GAAG,CAAC;AAAA,IACtE;AACA,WAAO,OAAO,8BAA8B,OAAO,GAAG;AAAA,EACxD,CAAC;AAEH,QAAM,8BAA8B,CAClC,IACA,UAEAA,SAAO,IAAI,aAAa;AACtB,UAAM,MAAM,OAAO,2BAA2B,EAAE;AAChD,QAAI,CAAC,KAAK;AACR,aAAO,OAAO,IAAI,wBAAwB;AAAA,QACxC,cAAc,aAAa,KAAK,EAAE;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO,KAAK,WAAW,cAAc;AAAA,MACnC,OAAO,WAAW,IAAI,UAAU,EAAE;AAAA,MAClC,KAAK;AAAA,QACH,gBAAgB,SAAS;AAAA,QACzB,YAAY,oBAAI,KAAK;AAAA,MACvB;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAEH,QAAM,oBAAoB,CACxB,UAEAA,SAAO,IAAI,aAAa;AACtB,UAAM,KAAK,MAAM;AACjB,UAAM,cAAc,MAAM;AAC1B,WAAO,mBAAmB,iCAAiC,WAAW;AACtE,UAAM,UAAU,OAAO,KAAK,SAAS,cAAc;AAAA,MACjD,OAAO,YAAY,UAAU,KAAK,EAAE,CAAC;AAAA,IACvC,CAAC;AACD,UAAM,MACH,QAAqC;AAAA,MACpC,CAAC,cAAc,UAAU,aAAa;AAAA,IACxC,KAAK;AACP,QAAI,CAAC,IAAK;AACV,UAAM,UAAU,OAAO,wBAAwB,EAAE,GAAG;AAAA,MAClD,CAAC,UAAU,MAAM,YAAY;AAAA,IAC/B;AACA,QAAI,OAAO,SAAS,GAAG;AACrB,aAAO,OAAO,IAAI,qBAAqB;AAAA,QACrC,cAAc,aAAa,KAAK,EAAE;AAAA,QAClC,YAAY,OAAO;AAAA,MACrB,CAAC;AAAA,IACH;AACA,UAAM,QAAQ;AACd,WAAO;AAAA,MACLA,SAAO,IAAI,aAAa;AAMtB,cAAM,QAAQ,OAAO,KAAK,SAAS,UAAU;AAAA,UAC3C,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,0BAA0B,KAAK,EAAE,GAAG,EAAE,YAAY,KAAK,KAAK,CAAC;AAAA,QACrF,CAAC;AACD,cAAM,WAAW,CAAC,GAAG,gBAAgB,OAAO,CAAC,EAAE;AAAA,UAC7C,CAAC,MACC,CAAC,EAAE,EAAE,YAAY,EAAE;AAAA,QACvB;AACA,mBAAW,UAAU,OAAO;AAC1B,iBAAOA,SAAO;AAAA,YACZ,SAAS;AAAA,cAAI,CAAC,MACZ,EACG,OAAO,OAAO,IAAI,KAAK,EACvB;AAAA,gBACCA,SAAO;AAAA,kBAAW,CAAC,UACjBA,SAAO;AAAA,oBACL,0DAA0D,EAAE,GAAG;AAAA,oBAC/D;AAAA,kBACF,EAAE,KAAKA,SAAO,GAAG,KAAK,CAAC;AAAA,gBACzB;AAAA,cACF;AAAA,YACJ;AAAA,YACA,EAAE,aAAa,YAAY;AAAA,UAC7B;AAAA,QACF;AACA,eAAO,KAAK,WAAW,UAAU;AAAA,UAC/B,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,0BAA0B,KAAK,EAAE,GAAG,EAAE,YAAY,KAAK,KAAK,CAAC;AAAA,QACrF,CAAC;AACD,eAAO,KAAK,WAAW,cAAc;AAAA,UACnC,OAAO,WAAW,OAAO,EAAE;AAAA,QAC7B,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAkBH,QAAM,iBAAiB,CAAC,QACtBA,SAAO,IAAI,aAAa;AACtB,UAAM,WAAW,0BAA0B,IAAI,QAAQ;AACvD,QAAI,CAAC,UAAU;AACb,aAAO,OAAO,IAAI,qCAAqC;AAAA,QACrD,UAAU,IAAI;AAAA,QACd,cAAc,IAAI;AAAA,MACpB,CAAC;AAAA,IACH;AACA,QAAI,CAAC,SAAS,SAAS;AACrB,aAAO,OAAO,IAAI,mCAAmC;AAAA,QACnD,cAAc,IAAI;AAAA,QAClB,UAAU,IAAI;AAAA,MAChB,CAAC;AAAA,IACH;AAEA,UAAM,oBAAoB,IAAI,uBAC1B,OAAO,2BAA2B,IAAI,sBAAsB,IAAI,OAAO,IACvE;AAOJ,UAAM,YACJ,OAAOA,SAAO;AAAA,MACZ,SAAS,QAAQ;AAAA,QACf,cAAc,IAAI;AAAA,QAClB,SAAS,IAAI;AAAA,QACb,eAAe,IAAI;AAAA,QACnB,cAAc;AAAA,QACd,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,MAClB,CAAC;AAAA,IACH;AACF,QAAIO,QAAO,UAAU,SAAS,GAAG;AAC/B,YAAM,MAAM,UAAU;AACtB,UAAI,IAAI,gBAAgB;AACtB,eAAO,OAAO,IAAI,8BAA8B;AAAA,UAC9C,cAAc,IAAI;AAAA,UAClB,UAAU,IAAI;AAAA;AAAA,UAEd,SAAS,IAAI,SAAS;AAAA,QACxB,CAAC;AAAA,MACH;AACA,aAAO,OAAO;AAAA,IAChB;AACA,UAAM,SAAS,UAAU;AAEzB,UAAM,MAAM,OAAO,yBAAyB;AAAA,MAC1C,cAAc,IAAI;AAAA,MAClB,SAAS,IAAI;AAAA,IACf,CAAC;AACD,QAAI,CAAC,KAAK;AACR,aAAO,OAAO,IAAI,wBAAwB;AAAA,QACxC,cAAc,IAAI;AAAA,MACpB,CAAC;AAAA,IACH;AACA,WAAO;AAAA,MACL;AAAA,QACE,IAAI,IAAI;AAAA,QACR,aAAa,OAAO;AAAA,QACpB,cAAc,OAAO;AAAA,QACrB,WAAW,OAAO;AAAA,QAClB,YAAY,OAAO;AAAA,QACnB,eAAe,OAAO;AAAA,MACxB;AAAA,MACA;AAAA,IACF;AAEA,WAAO,OAAO;AAAA,EAChB,CAAC;AAcH,QAAM,+BAA+B,CACnC,QAEAP,SAAO,IAAI,aAAa;AACtB,UAAM,MAAM,gBAAgB,GAAG;AAC/B,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,eACJ,IAAI,cAAc,QAAQ,IAAI,YAAY,8BAA8B;AAE1E,QAAI,CAAC,cAAc;AACjB,YAAM,UAAU,OAAO,2BAA2B,IAAI,qBAAqB,IAAI,OAAO;AACtF,UAAI,YAAY,KAAM,QAAO;AAAA,IAI/B;AAMA,UAAM,aAAa,GAAG,IAAI,OAAO,KAAS,IAAI,EAAE;AAChD,UAAM,SAAS,OAAO,oBAAoB,YAAY,CAAC;AAAA,MACrDA,SAAO,IAAI,aAAa;AACtB,cAAM,WAAW,gBAAgB,IAAI,UAAU;AAC/C,YAAI,UAAU;AACZ,iBAAO;AAAA,YACL,MAAM;AAAA,YACN,UAAU;AAAA,UACZ;AAAA,QACF;AACA,cAAM,WAAW,OAAO,SAAS,KAA+B;AAChE,wBAAgB,IAAI,YAAY,QAAQ;AACxC,eAAO,EAAE,MAAM,QAAiB,SAAS;AAAA,MAC3C,CAAC;AAAA,IACH;AAEA,QAAI,OAAO,SAAS,SAAS;AAC3B,aAAO,OAAO,SAAS,MAAM,OAAO,QAAQ;AAAA,IAC9C;AAOA,WAAO,OAAO,eAAe,GAAG,EAAE;AAAA,MAChCA,SAAO;AAAA,QAAO,CAAC,SACb,oBAAoB,YAAY,CAAC;AAAA,UAC/BA,SAAO,IAAI,aAAa;AACtB,mBAAO,SAAS,KAAK,OAAO,UAAU,IAAI;AAC1C,4BAAgB,OAAO,UAAU;AAAA,UACnC,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AAEH,QAAM,yBAAyB,CAAC,OAC9BA,SAAO,IAAI,aAAa;AACtB,UAAM,MAAM,OAAO,2BAA2B,EAAE;AAChD,QAAI,CAAC,KAAK;AACR,aAAO,OAAO,IAAI,wBAAwB;AAAA,QACxC,cAAc,aAAa,KAAK,EAAE;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO,OAAO,6BAA6B,GAAG;AAAA,EAChD,CAAC;AAEH,QAAM,gCAAgC,CACpC,IACA,UAEAA,SAAO,IAAI,aAAa;AACtB,WAAO,mBAAmB,gCAAgC,KAAK;AAC/D,UAAM,MAAM,OAAO,yBAAyB;AAAA,MAC1C,cAAc;AAAA,MACd,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,KAAK;AACR,aAAO,OAAO,IAAI,wBAAwB;AAAA,QACxC,cAAc,aAAa,KAAK,EAAE;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO,OAAO,6BAA6B,GAAG;AAAA,EAChD,CAAC;AAEH,QAAM,wBAAwB,MAAM,gBAAgB;AAEpD,QAAM,iBAAiB,MAAM,IAAI,SAAS,KAAK,IAAI,CAAC;AAEpD,QAAM,qBAAqB,CACzB,OACA,YAEA,SAAS,SAAS,OAAO,IACrBA,SAAO,OACPA,SAAO;AAAA,IACL,IAAI,aAAa;AAAA,MACf,SAAS,GAAG,KAAK,KAAK,OAAO,0CAA0C,eAAe,CAAC;AAAA,MACvF,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AAEN,QAAM,uBAAuB,CAAC,UAK5BA,SAAO,IAAI,aAAa;AACtB,QAAI,CAAC,SAAS,SAAS,MAAM,WAAW,EAAG,QAAO;AAClD,WAAO,OAAO,KAAK,UAAU,UAAU;AAAA,MACrC,OAAO,CAAC,MACN,EAAE;AAAA,QACA,EAAE,aAAa,KAAK,MAAM,QAAQ;AAAA,QAClC,EAAE,MAAM,KAAK,MAAM,QAAQ;AAAA,QAC3B,EAAE,YAAY,KAAK,MAAM,WAAW;AAAA,MACtC;AAAA,IACJ,CAAC;AAAA,EACH,CAAC;AAEH,QAAM,4BAA4B,CAAC,UAIjCA,SAAO,IAAI,aAAa;AACtB,QAAI,CAAC,SAAS,SAAS,MAAM,WAAW,EAAG,QAAO;AAClD,WAAO,OAAO,KAAK,UAAU,UAAU;AAAA,MACrC,OAAO,WAAW,MAAM,aAAa,MAAM,QAAQ;AAAA,IACrD,CAAC;AAAA,EACH,CAAC;AAEH,QAAM,uBAAuB,CAAC,UAI5BA,SAAO,IAAI,aAAa;AACtB,QAAI,CAAC,SAAS,SAAS,MAAM,OAAO,EAAG,QAAO;AAC9C,WAAO,OAAO,KAAK,UAAU,UAAU;AAAA,MACrC,OAAO,WAAW,MAAM,SAAS,MAAM,QAAQ;AAAA,IACjD,CAAC;AAAA,EACH,CAAC;AAEH,QAAM,2BAA2B,CAAC,UAIhCA,SAAO,IAAI,aAAa;AACtB,QAAI,CAAC,SAAS,SAAS,MAAM,OAAO,EAAG,QAAO;AAC9C,WAAO,OAAO,KAAK,UAAU,cAAc;AAAA,MACzC,OAAO,WAAW,MAAM,SAAS,MAAM,YAAY;AAAA,IACrD,CAAC;AAAA,EACH,CAAC;AAEH,QAAM,iCAAiC,CACrC,UAEA,SAAS,SAAS,MAAM,WAAW,IAC9B,KACE,SAAS,sBAAsB;AAAA,IAC9B,OAAO;AAAA,MAAY;AAAA,MAAU,CAAC,MAC5B,EAAE;AAAA,QACA,EAAE,aAAa,KAAK,MAAM,QAAQ;AAAA,QAClC,EAAE,aAAa,KAAK,MAAM,QAAQ;AAAA,QAClC,EAAE,mBAAmB,KAAK,MAAM,WAAW;AAAA,MAC7C;AAAA,IACF;AAAA,EACF,CAAC,EACA;AAAA,IACCA,SAAO,IAAI,CAAC,SAAS;AACnB,YAAM,mBAAmB,gBAAgB,IAAI,MAAM,WAAW,KAAK;AACnE,aAAQ,KAAyC;AAAA,QAC/C,CAAC,QAAQ,UAAU,GAAG,KAAK;AAAA,MAC7B;AAAA,IACF,CAAC;AAAA,EACH,IACFA,SAAO,QAAQ,CAAC,CAAC;AAEvB,QAAM,+BAA+B,CACnC,UAEA,SAAS,SAAS,MAAM,WAAW,IAC9B,KACE,SAAS,sBAAsB;AAAA,IAC9B,OAAO;AAAA,MAAY;AAAA,MAAU,CAAC,MAC5B,EAAE;AAAA,QACA,EAAE,aAAa,KAAK,MAAM,QAAQ;AAAA,QAClC,EAAE,aAAa,KAAK,MAAM,QAAQ;AAAA,QAClC,EAAE,mBAAmB,KAAK,MAAM,WAAW;AAAA,QAC3C,EAAE,YAAY,KAAK,MAAM,OAAO;AAAA,MAClC;AAAA,IACF;AAAA,EACF,CAAC,EACA;AAAA,IACCA,SAAO,IAAI,CAAC,SAAS;AACnB,YAAM,mBAAmB,gBAAgB,IAAI,MAAM,WAAW,KAAK;AACnE,aAAQ,KAAyC;AAAA,QAC/C,CAAC,QAAQ,UAAU,GAAG,KAAK;AAAA,MAC7B;AAAA,IACF,CAAC;AAAA,EACH,IACFA,SAAO,QAAQ,CAAC,CAAC;AAEvB,QAAM,wCAAwC,CAAC,UAM7CA,SAAO,IAAI,aAAa;AACtB,UAAM,mBAAmB,gBAAgB,IAAI,MAAM,WAAW,KAAK;AACnE,UAAM,aAAa,gBAAgB,IAAI,MAAM,WAAW,KAAK;AAC7D,QAAI,aAAa,kBAAkB;AACjC,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SACE,GAAG,MAAM,KAAK,gBAAgB,MAAM,QAAQ,gCACxC,MAAM,WAAW,wCAAwC,MAAM,WAAW;AAAA,QAChF,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAEH,QAAM,iCAAiC,CAAC,UACtCA,SAAO,IAAI,aAAa;AACtB,UAAM,OAAO,OAAO,+BAA+B,KAAK;AACxD,WAAO,KACJ,MAAM,EACN,KAAK,CAAC,GAAG,MAAM;AACd,YAAM,OAAO,EAAE,SAAS,cAAc,EAAE,QAAQ;AAChD,aAAO,SAAS,IAAI,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI;AAAA,IACpD,CAAC,EACA,IAAI,yBAAyB;AAAA,EAClC,CAAC;AAEH,QAAM,uBAAuB,CAAC,UAC5BA,SAAO,IAAI,aAAa;AACtB,WAAO,mBAAmB,kCAAkC,MAAM,WAAW;AAC7E,WAAO,mBAAmB,kCAAkC,MAAM,WAAW;AAC7E,WAAO,sCAAsC;AAAA,MAC3C,OAAO;AAAA,MACP,aAAa,MAAM;AAAA,MACnB,aAAa,MAAM;AAAA,MACnB,UAAU,MAAM;AAAA,IAClB,CAAC;AAED,UAAM,SAAS,OAAO,qBAAqB;AAAA,MACzC,UAAU,MAAM;AAAA,MAChB,UAAU,MAAM;AAAA,MAChB,aAAa,MAAM;AAAA,IACrB,CAAC;AACD,QAAI,CAAC,QAAQ;AACX,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SACE,6CAA6C,MAAM,QAAQ,eAC9C,MAAM,WAAW;AAAA,QAChC,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAEA,QAAI,MAAM,MAAM,SAAS,UAAU;AACjC,YAAM,WAAW,MAAM,MAAM;AAC7B,YAAM,cAAc,MAAM,MAAM,iBAAiB,MAAM;AACvD,aAAO,mBAAmB,kCAAkC,WAAW;AACvE,UAAI,gBAAgB,IAAI,WAAW,IAAK,gBAAgB,IAAI,MAAM,WAAW,GAAI;AAC/E,eAAO,OAAO,IAAI,aAAa;AAAA,UAC7B,SACE,uBAAuB,QAAQ,iBAAiB,WAAW,sBACvC,MAAM,WAAW;AAAA,UACvC,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AACA,YAAM,SAAS,OAAO,qBAAqB;AAAA,QACzC;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,UAAI,CAAC,QAAQ;AAOX,YAAI,eAAe;AACnB,mBAAW,CAAC,KAAK,QAAQ,KAAK,iBAAiB;AAC7C,cAAI;AACJ,cAAI,SAAS,MAAM;AACjB,kBAAM,UAAU,OAAO,SACpB,KAAK,EACL,KAAKA,SAAO,MAAM,MAAMA,SAAO,QAAQ,CAAC,CAAU,CAAC,CAAC;AACvD,kBAAM,QAAQ,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO,QAAQ;AACnD,gBAAI,MAAO,QAAO,MAAM;AAAA,UAC1B;AACA,cAAI,SAAS,QAAW;AAItB,kBAAM,QAAQ,OAAO,SAClB,IAAI,UAAU,WAAW,EACzB,KAAKA,SAAO,MAAM,MAAMA,SAAO,QAAQ,IAAqB,CAAC,CAAC;AACjE,gBAAI,UAAU,KAAM,QAAO;AAAA,UAC7B;AACA,cAAI,SAAS,OAAW;AACxB,gBAAMQ,OAAM,oBAAI,KAAK;AACrB,iBAAO,KAAK,OAAO,UAAU;AAAA,YAC3B,IAAI;AAAA,YACJ,UAAU;AAAA,YACV;AAAA,YACA,UAAU;AAAA,YACV,wBAAwB;AAAA,YACxB,YAAYA;AAAA,UACd,CAAC;AACD,yBAAe;AACf;AAAA,QACF;AACA,YAAI,CAAC,cAAc;AACjB,gBAAM,eAAe,CAAC,GAAG,gBAAgB,KAAK,CAAC;AAC/C,iBAAO,OAAO,IAAI,aAAa;AAAA,YAC7B,SACE,uBAAuB,QAAQ,eAAe,WAAW,uEAE5C,aAAa,KAAK,IAAI,KAAK,MAAM;AAAA,YAGhD,OAAO;AAAA,UACT,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAEA,QAAI,MAAM,MAAM,SAAS,cAAc;AACrC,YAAM,aAAa,OAAO,yBAAyB;AAAA,QACjD,cAAc,MAAM,MAAM;AAAA,QAC1B,SAAS,MAAM;AAAA,MACjB,CAAC;AACD,UAAI,CAAC,YAAY;AACf,eAAO,OAAO,IAAI,aAAa;AAAA,UAC7B,SACE,2BAA2B,MAAM,MAAM,YAAY,eAAe,MAAM,WAAW;AAAA,UAErF,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,KAAK,oBAAoB,KAAK;AACpC,UAAM,MAAM,oBAAI,KAAK;AACrB,WAAO,KAAK,WAAW,sBAAsB;AAAA,MAC3C,OAAO,CAAC,MACN,EAAE;AAAA,QACA,EAAE,YAAY,KAAK,MAAM,WAAW;AAAA,QACpC,EAAE,aAAa,KAAK,MAAM,QAAQ;AAAA,QAClC,EAAE,aAAa,KAAK,MAAM,QAAQ;AAAA,QAClC,EAAE,mBAAmB,KAAK,MAAM,WAAW;AAAA,QAC3C,EAAE,YAAY,KAAK,MAAM,OAAO;AAAA,MAClC;AAAA,IACJ,CAAC;AACD,WAAO,KAAK,OAAO,sBAAsB;AAAA,MACvC;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,WAAW,MAAM;AAAA,MACjB,WAAW,MAAM;AAAA,MACjB,iBAAiB,MAAM;AAAA,MACvB,UAAU,MAAM;AAAA,MAChB,MAAM,MAAM,MAAM;AAAA,MAClB,YAAY,MAAM,MAAM,SAAS,SAAS,MAAM,MAAM,OAAO;AAAA,MAC7D,WAAW,MAAM,MAAM,SAAS,WAAW,MAAM,MAAM,WAAW;AAAA,MAClE,iBACE,MAAM,MAAM,SAAS,WAAY,MAAM,MAAM,iBAAiB,MAAM,cAAe;AAAA,MACrF,eAAe,MAAM,MAAM,SAAS,eAAe,MAAM,MAAM,eAAe;AAAA,MAC9E,YAAY;AAAA,MACZ,YAAY;AAAA,IACd,CAAC;AACD,WAAO,0BAA0B;AAAA,MAC/B;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,WAAW,MAAM;AAAA,MACjB,WAAW,MAAM;AAAA,MACjB,iBAAiB,MAAM;AAAA,MACvB,UAAU,MAAM;AAAA,MAChB,MAAM,MAAM,MAAM;AAAA,MAClB,YAAY,MAAM,MAAM,SAAS,SAAS,MAAM,MAAM,OAAO;AAAA,MAC7D,WAAW,MAAM,MAAM,SAAS,WAAW,MAAM,MAAM,WAAW;AAAA,MAClE,iBACE,MAAM,MAAM,SAAS,WAChB,MAAM,MAAM,iBAAiB,MAAM,cACpC;AAAA,MACN,eAAe,MAAM,MAAM,SAAS,eAAe,MAAM,MAAM,eAAe;AAAA,MAC9E,YAAY;AAAA,MACZ,YAAY;AAAA,IACd,CAAyB;AAAA,EAC3B,CAAC;AAEH,QAAM,0BAA0B,CAAC,UAC/BR,SAAO,IAAI,aAAa;AACtB,WAAO,mBAAmB,kCAAkC,MAAM,WAAW;AAC7E,WAAO,mBAAmB,kCAAkC,MAAM,WAAW;AAC7E,WAAO,sCAAsC;AAAA,MAC3C,OAAO;AAAA,MACP,aAAa,MAAM;AAAA,MACnB,aAAa,MAAM;AAAA,MACnB,UAAU,MAAM;AAAA,IAClB,CAAC;AAED,UAAM,SAAS,OAAO,qBAAqB;AAAA,MACzC,UAAU,MAAM;AAAA,MAChB,UAAU,MAAM;AAAA,MAChB,aAAa,MAAM;AAAA,IACrB,CAAC;AACD,QAAI,CAAC,QAAQ;AACX,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SACE,gDAAgD,MAAM,QAAQ,eACjD,MAAM,WAAW;AAAA,QAChC,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAEA,WAAO,KAAK,WAAW,sBAAsB;AAAA,MAC3C,OAAO,CAAC,MACN,EAAE;AAAA,QACA,EAAE,YAAY,KAAK,MAAM,WAAW;AAAA,QACpC,EAAE,aAAa,KAAK,MAAM,QAAQ;AAAA,QAClC,EAAE,aAAa,KAAK,MAAM,QAAQ;AAAA,QAClC,EAAE,mBAAmB,KAAK,MAAM,WAAW;AAAA,QAC3C,EAAE,YAAY,KAAK,MAAM,OAAO;AAAA,MAClC;AAAA,IACJ,CAAC;AAAA,EACH,CAAC;AAEH,QAAM,oCAAoC,CAAC,UACzCA,SAAO,IAAI,aAAa;AACtB,WAAO,mBAAmB,kCAAkC,MAAM,WAAW;AAC7E,WAAO,mBAAmB,kCAAkC,MAAM,WAAW;AAC7E,WAAO,sCAAsC;AAAA,MAC3C,OAAO;AAAA,MACP,aAAa,MAAM;AAAA,MACnB,aAAa,MAAM;AAAA,MACnB,UAAU,MAAM;AAAA,IAClB,CAAC;AAED,UAAM,SAAS,OAAO,qBAAqB;AAAA,MACzC,UAAU,MAAM;AAAA,MAChB,UAAU,MAAM;AAAA,MAChB,aAAa,MAAM;AAAA,IACrB,CAAC;AACD,QAAI,CAAC,QAAQ;AACX,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SACE,kDAAkD,MAAM,QAAQ,eACnD,MAAM,WAAW;AAAA,QAChC,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAEA,UAAM,YAAY,IAAI,IAAI,MAAM,SAAS,IAAI,CAAC,YAAY,QAAQ,OAAO,CAAC;AAC1E,UAAM,WAAW,OAAO,KAAK,SAAS,sBAAsB;AAAA,MAC1D,OAAO,CAAC,MACN,EAAE;AAAA,QACA,EAAE,YAAY,KAAK,MAAM,WAAW;AAAA,QACpC,EAAE,aAAa,KAAK,MAAM,QAAQ;AAAA,QAClC,EAAE,aAAa,KAAK,MAAM,QAAQ;AAAA,QAClC,EAAE,mBAAmB,KAAK,MAAM,WAAW;AAAA,MAC7C;AAAA,IACJ,CAAC;AACD,eAAW,OAAO,UAA6C;AAC7D,YAAM,gBAAgB,MAAM,aAAa;AAAA,QAAK,CAAC,WAC7C,IAAI,SAAS,WAAW,MAAM;AAAA,MAChC;AACA,UAAI,iBAAiB,CAAC,UAAU,IAAI,IAAI,QAAQ,GAAG;AACjD,eAAO,wBAAwB;AAAA,UAC7B,aAAa,MAAM;AAAA,UACnB,UAAU,MAAM;AAAA,UAChB,UAAU,MAAM;AAAA,UAChB,aAAa,MAAM;AAAA,UACnB,SAAS,IAAI;AAAA,QACf,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,OAA+B,CAAC;AACtC,eAAW,WAAW,MAAM,UAAU;AACpC,WAAK;AAAA,QACH,OAAO,qBAAqB;AAAA,UAC1B,aAAa,MAAM;AAAA,UACnB,UAAU,MAAM;AAAA,UAChB,UAAU,MAAM;AAAA,UAChB,aAAa,MAAM;AAAA,UACnB,SAAS,QAAQ;AAAA,UACjB,OAAO,QAAQ;AAAA,QACjB,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,CAAC;AAEH,QAAM,mCAAmC,CAAC,UACxCA,SAAO,IAAI,aAAa;AACtB,WAAO,mBAAmB,kCAAkC,MAAM,WAAW;AAC7E,UAAM,SAAS,OAAO,qBAAqB,KAAK;AAChD,QAAI,CAAC,OAAQ;AAMb,WAAO,KAAK,WAAW,sBAAsB;AAAA,MAC3C,OAAO,CAAC,MACN,EAAE;AAAA,QACA,EAAE,aAAa,KAAK,MAAM,QAAQ;AAAA,QAClC,EAAE,aAAa,KAAK,MAAM,QAAQ;AAAA,QAClC,EAAE,mBAAmB,KAAK,MAAM,WAAW;AAAA,MAC7C;AAAA,IACJ,CAAC;AAAA,EACH,CAAC;AAEH,QAAM,oCAAoC,CACxC,QAEAA,SAAO,IAAI,aAAa;AACtB,QAAI,IAAI,SAAS,OAAQ,QAAO,OAAO,IAAI,eAAe,WAAW,aAAa;AAClF,QAAI,IAAI,SAAS,UAAU;AACzB,UAAI,CAAC,IAAI,UAAW,QAAO;AAC3B,YAAM,SAAS,OAAO,qBAAqB;AAAA,QACzC,UAAU,IAAI;AAAA,QACd,SAAS,IAAI,mBAAmB,IAAI;AAAA,MACtC,CAAC;AACD,UAAI,CAAC,OAAQ,QAAO;AACpB,cAAQ,OAAO,2BAA2B,MAAM,KAAK,aAAa;AAAA,IACpE;AACA,QAAI,IAAI,SAAS,cAAc;AAC7B,UAAI,CAAC,IAAI,cAAe,QAAO;AAC/B,YAAM,aAAa,OAAO,yBAAyB;AAAA,QACjD,cAAc,IAAI;AAAA,QAClB,SAAS,IAAI;AAAA,MACf,CAAC;AACD,aAAO,aAAa,aAAa;AAAA,IACnC;AACA,WAAO;AAAA,EACT,CAAC;AAEH,QAAM,kCAAkC,CAAC,UACvCA,SAAO,IAAI,aAAa;AACtB,UAAM,OAAO,OAAO,6BAA6B,KAAK;AACtD,UAAM,MAAM,cAAc,IAAI;AAC9B,WAAO,MAAM,0BAA0B,GAAG,IAAI;AAAA,EAChD,CAAC;AAEH,QAAM,2BAA2B,CAAC,UAChCA,SAAO,IAAI,aAAa;AACtB,UAAM,OAAO,OAAO,6BAA6B,KAAK;AACtD,UAAM,MAAM,cAAc,IAAI;AAC9B,QAAI,CAAC,KAAK;AACR,aAAO,uBAAuB,KAAK;AAAA,QACjC,UAAU,MAAM;AAAA,QAChB,UAAU,MAAM;AAAA,QAChB,eAAe,MAAM;AAAA,QACrB,SAAS,MAAM;AAAA,QACf,gBAAgB;AAAA,QAChB,MAAM;AAAA,QACN,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,WAAO,uBAAuB,KAAK;AAAA,MACjC,UAAU,MAAM;AAAA,MAChB,UAAU,MAAM;AAAA,MAChB,eAAe,MAAM;AAAA,MACrB,SAAS,MAAM;AAAA,MACf,gBAAgB,QAAQ,KAAK,IAAI,QAAQ;AAAA,MACzC,MACE,IAAI,SAAS,UAAU,IAAI,SAAS,YAAY,IAAI,SAAS,eACzD,IAAI,OACJ;AAAA,MACN,QAAQ,OAAO,kCAAkC,GAAG;AAAA,IACtD,CAAC;AAAA,EACH,CAAC;AAEH,QAAM,mCAAmC,CACvC,SAEAA,SAAO,IAAI,aAAa;AACtB,UAAM,YAAY,CAAC,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC;AAC/D,QAAI,UAAU,WAAW,EAAG,QAAO,oBAAI,IAAoB;AAC3D,UAAM,aAAa,OAAO,KAAK,SAAS,UAAU;AAAA,MAChD,OAAO,YAAY,UAAU,CAAC,MAAM,EAAE,MAAM,MAAM,SAAS,CAAC;AAAA,IAC9D,CAAC;AACD,WAAO,IAAI;AAAA,MACT,WAAW,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,QAAQ,KAAS,IAAI,EAAE,IAAI,IAAI,IAAI,CAAU;AAAA,IAC/E;AAAA,EACF,CAAC;AAEH,QAAM,gCAAgC,CACpC,SAEAA,SAAO,IAAI,aAAa;AACtB,UAAM,QAAQ,OAAO,iCAAiC,IAAI;AAC1D,WAAO,KAAK;AAAA,MAAI,CAAC,QACf,MAAM,KAAK;AAAA,QACT,UAAU,IAAI;AAAA,QACd,SAAS,QAAQ;AAAA,UACf,IAAI,SAAS,WAAY,IAAI,mBAAmB,IAAI,WAAY,IAAI;AAAA,QACtE;AAAA,QACA,WAAW;AAAA,QACX,SAAS,IAAI;AAAA,QACb,WAAW,MAAM,IAAI,GAAG,IAAI,eAAe,KAAS,IAAI,SAAS,EAAE,KAAK;AAAA,QACxE,MAAM,IAAI;AAAA,MACZ,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAEH,QAAM,mCAAmC,CACvC,OAEAA,SAAO,IAAI,aAAa;AACtB,UAAM,OAAO,OAAO,KAAK,SAAS,sBAAsB;AAAA,MACtD,OAAO,YAAY,UAAU,CAAC,MAAM,EAAE,aAAa,KAAK,EAAE,CAAC;AAAA,IAC7D,CAAC;AACD,WAAO,OAAO,8BAA8B,IAAuC;AAAA,EACrF,CAAC;AAEH,QAAM,uCAAuC,CAC3C,OAEAA,SAAO,IAAI,aAAa;AACtB,UAAM,OAAO,OAAO,KAAK,SAAS,sBAAsB;AAAA,MACtD,OAAO,YAAY,UAAU,CAAC,MAAM,EAAE,iBAAiB,KAAK,EAAE,CAAC;AAAA,IACjE,CAAC;AACD,WAAO,OAAO,8BAA8B,IAAuC;AAAA,EACrF,CAAC;AAEH,QAAM,qBAA+C;AAAA,IACnD,eAAe;AAAA,IACf,gBAAgB;AAAA,IAChB,SAAS;AAAA,IACT,KAAK;AAAA,IACL,QAAQ;AAAA,IACR,kBAAkB;AAAA,IAClB,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,IACjB,qBAAqB;AAAA,EACvB;AAEA,QAAM,kCAAkC,CAAC,UACvCA,SAAO,IAAI,aAAa;AACtB,UAAM,SAAS,OAAO,0BAA0B;AAAA,MAC9C,UAAU,MAAM,OAAO;AAAA,MACvB,aAAa,MAAM,OAAO;AAAA,IAC5B,CAAC;AACD,WAAO,SACF;AAAA,MACC,UAAU,OAAO;AAAA,MACjB,UAAU,MAAM,OAAO;AAAA,MACvB,aAAa,MAAM,OAAO;AAAA,IAC5B,IACA;AAAA,EACN,CAAC;AAEH,QAAM,oBAAoB,CAAC,UACzBA,SAAO,IAAI,aAAa;AACtB,UAAM,eAAe,OAAO,gCAAgC,KAAK;AACjE,WAAO,eAAe,OAAO,+BAA+B,YAAY,IAAI,CAAC;AAAA,EAC/E,CAAC;AAEH,QAAM,uBAAuB,CAAC,UAC5BA,SAAO,IAAI,aAAa;AACtB,UAAM,eAAe,OAAO,gCAAgC,KAAK;AACjE,WAAO,eACH,OAAO,gCAAgC;AAAA,MACrC,GAAG;AAAA,MACH,SAAS,MAAM;AAAA,IACjB,CAAC,IACD;AAAA,EACN,CAAC;AAEH,QAAM,mBAAmB,CAAC,UACxBA,SAAO,IAAI,aAAa;AACtB,UAAM,eAAe,OAAO,gCAAgC,KAAK;AACjE,QAAI,CAAC,cAAc;AACjB,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SACE,6CAA6C,MAAM,OAAO,EAAE,eAC/C,MAAM,OAAO,KAAK;AAAA,QACjC,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,WAAO,OAAO,qBAAqB;AAAA,MACjC,GAAG;AAAA,MACH,aAAa,MAAM;AAAA,MACnB,SAAS,MAAM;AAAA,MACf,OAAO,MAAM;AAAA,IACf,CAAC;AAAA,EACH,CAAC;AAEH,QAAM,sBAAsB,CAAC,UAC3BA,SAAO,IAAI,aAAa;AACtB,UAAM,eAAe,OAAO,gCAAgC,KAAK;AACjE,QAAI,CAAC,cAAc;AACjB,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SACE,gDAAgD,MAAM,OAAO,EAAE,eAClD,MAAM,OAAO,KAAK;AAAA,QACjC,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,WAAO,wBAAwB;AAAA,MAC7B,GAAG;AAAA,MACH,aAAa,MAAM;AAAA,MACnB,SAAS,MAAM;AAAA,IACjB,CAAC;AAAA,EACH,CAAC;AAEH,QAAM,uBAAuB,CAAC,UAC5BA,SAAO,IAAI,aAAa;AACtB,UAAM,eAAe,OAAO,gCAAgC,KAAK;AACjE,QAAI,CAAC,cAAc;AACjB,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SACE,kDAAkD,MAAM,OAAO,EAAE,eACpD,MAAM,OAAO,KAAK;AAAA,QACjC,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,WAAO,OAAO,kCAAkC;AAAA,MAC9C,GAAG;AAAA,MACH,aAAa,MAAM;AAAA,MACnB,cAAc,MAAM;AAAA,MACpB,UAAU,MAAM;AAAA,IAClB,CAAC;AAAA,EACH,CAAC;AAEH,QAAM,kBAAkB,CAAC,UASvBA,SAAO,IAAI,aAAa;AACtB,WAAO,mBAAmB,iCAAiC,MAAM,OAAO,KAAK;AAC7E,WAAO,mBAAmB,iCAAiC,MAAM,KAAK;AAEtE,UAAM,SAAS,OAAO,KAAK,UAAU,UAAU;AAAA,MAC7C,OAAO,WAAW,MAAM,OAAO,OAAO,MAAM,OAAO,EAAE;AAAA,IACvD,CAAC;AACD,QAAI,CAAC,QAAQ;AACX,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SACE,4BAA4B,MAAM,OAAO,EAAE,eACvC,MAAM,OAAO,KAAK;AAAA,QACxB,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAEA,UAAM,UAAU,SAAS,IAAI,OAAO,SAAS;AAC7C,UAAM,YAAY,SAAS,OAAO;AAClC,QAAI,CAAC,WAAW,CAAC,WAAW;AAC1B,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SAAS,WAAW,OAAO,SAAS;AAAA,QACpC,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,QAAI,MAAM,SAAS,UAAa,MAAM,SAAS,UAAU,MAAM;AAC7D,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SACE,8CAA8C,OAAO,SAAS,gBACjD,UAAU,IAAI,gBAAgB,MAAM,IAAI;AAAA,QACvD,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAEA,UAAM,UAAU,OAAO,qBAAqB,UAAU,QAAQ,MAAM,MAAM,EAAE;AAAA,MAC1EA,SAAO;AAAA,QAAS,CAAC,UACf;AAAA,UACE,wCAAwC,UAAU,IAAI;AAAA,UACtD;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,WAAO,OAAO,UACX,UAAU;AAAA,MACT,KAAK,QAAQ;AAAA,MACb,UAAU,MAAM,OAAO;AAAA,MACvB,aAAa,MAAM,OAAO;AAAA,MAC1B,aAAa,MAAM;AAAA,MACnB,QAAQ;AAAA,IACV,CAAC,EACA;AAAA,MACCA,SAAO;AAAA,QAAS,CAAC,UACf,qBAAqB,OAAO,WAAW,mBAAmB,KAAK;AAAA,MACjE;AAAA,IACF;AAAA,EACJ,CAAC;AAEH,QAAM,cAAc,kBAAkB;AAAA,IACpC;AAAA,IACA,YAAY,CAAC,OACX,WAAW,EAAE,EAAE;AAAA,MACbA,SAAO,SAAS,gCAAgC,MAAMA,SAAO,QAAQ,IAAI,CAAC;AAAA,IAC5E;AAAA,IACF,oBAAoB,CAAC,OAAO,mBAAmB,EAAE;AAAA,IACjD,mBAAmB,CAAC,IAAI,UACtB,kBAAkB,IAAI,KAAK,EAAE;AAAA,MAC3BA,SAAO,SAAS,gCAAgC,MAAMA,SAAO,QAAQ,IAAI,CAAC;AAAA,IAC5E;AAAA,IACF,YAAY,CAAC,UAAU,WAAW,KAAK;AAAA,IACvC,mBAAmB,CAAC,UAAU,kBAAkB,KAAK;AAAA,IACrD,iBAAiB,OAAO;AAAA,IACxB,mBAAmB,OAAO;AAAA,EAC5B,CAAC;AACD,sBAAoB,IAAI,YAAY,mBAAmB,KAAK,YAAY,kBAAkB;AAM1F,aAAW,UAAU,SAAS;AAC5B,QAAI,SAAS,IAAI,OAAO,EAAE,GAAG;AAC3B,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SAAS,wBAAwB,OAAO,EAAE;AAAA,QAC1C,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAEA,UAAM,aAAa;AAAA,MACjB;AAAA,MACA,OAAO,SAAS,EAAE,QAAQ,IAAI,IAAI,OAAO,KAAK,OAAO,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,oBAAI,IAAI,EAAE;AAAA,IACxF;AACA,UAAM,gBAAgB,wBAAwB;AAAA,MAC5C;AAAA,MACA,UAAU,OAAO;AAAA,MACjB;AAAA,IACF,CAAC;AACD,UAAM,cAA2B;AAAA,MAC/B;AAAA,MACA,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMN,OAAO,gBAAgB,OAAO,UAAU,OAAO,EAAE;AAAA,MACjD;AAAA,IACF;AACA,UAAM,UAAU,OAAO,QAAQ,WAAW;AAE1C,UAAM,MAA0B;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,MACA,iBAAiB,OAAO,mBAAmBS,iBAAgB;AAAA,MAC3D,MAAM;AAAA,QACJ,SAAS;AAAA,UACP,UAAU,CAAC,UACTT,SAAO,IAAI,aAAa;AAOtB,gBAAI,cAAc,IAAI,MAAM,EAAE,GAAG;AAC/B,qBAAO,OAAO,IAAI,aAAa;AAAA,gBAC7B,SAAS,cAAc,MAAM,EAAE;AAAA,gBAC/B,OAAO;AAAA,cACT,CAAC;AAAA,YACH;AACA,uBAAWI,SAAQ,MAAM,OAAO;AAC9B,oBAAM,OAAO,GAAG,MAAM,EAAE,IAAIA,MAAK,IAAI;AACrC,kBAAI,YAAY,IAAI,IAAI,GAAG;AACzB,uBAAO,OAAO,IAAI,aAAa;AAAA,kBAC7B,SAAS,YAAY,IAAI;AAAA,kBACzB,OAAO;AAAA,gBACT,CAAC;AAAA,cACH;AAAA,YACF;AACA,mBAAO,YAAY,iBAAiB,MAAM,OAAO,IAAI,KAAK,CAAC;AAAA,UAC7D,CAAC;AAAA,UACH,YAAY,CAAC;AAAA;AAAA;AAAA;AAAA,YAIX;AAAA,cACEJ,SAAO,IAAI,aAAa;AACtB,uBAAO,mBAAmB,iCAAiC,MAAM,WAAW;AAC5E,sBAAM,MAAM,OAAO,KAAK,UAAU,UAAU;AAAA,kBAC1C,OAAO,WAAW,MAAM,aAAa,MAAM,EAAE;AAAA,gBAC/C,CAAC;AACD,oBAAI,CAAC,IAAK;AACV,uBAAO,iBAAiB,MAAM,MAAM,IAAI,MAAM,WAAW;AAAA,cAC3D,CAAC;AAAA,YACH;AAAA;AAAA,UACF,QAAQ,CAAC,UACP,KACG,WAAW,UAAU;AAAA,YACpB,OAAO,WAAW,MAAM,OAAO,MAAM,EAAE;AAAA,YACvC,KAAK;AAAA,cACH,GAAI,MAAM,SAAS,SAAY,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;AAAA,cACvD,GAAI,MAAM,QAAQ,SAAY,EAAE,KAAK,MAAM,OAAO,KAAK,IAAI,CAAC;AAAA,cAC5D,YAAY,oBAAI,KAAK;AAAA,YACvB;AAAA,UACF,CAAC,EACA,KAAKA,SAAO,MAAM;AAAA,UACvB,MAAM,MAAM,YAAY;AAAA,UACxB,QAAQ,CAAC,UAAU,aAAa,KAAK;AAAA,UACrC,SAAS,CAAC,UAAU,cAAc,KAAK;AAAA,UACvC,QAAQ,CAAC,QAAQ,aAAa,GAAG;AAAA,UACjC,WAAW,CAAC,UAAU,gBAAgB,KAAK;AAAA,UAC3C,cAAc,CAAC,UAAU,kBAAkB,KAAK;AAAA,UAChD,gBAAgB,CAAC,UAAU,qBAAqB,KAAK;AAAA,UACrD,YAAY,CAAC,UAAU,iBAAiB,KAAK;AAAA,UAC7C,eAAe,CAAC,UAAU,oBAAoB,KAAK;AAAA,UACnD,kBAAkB,MAChB,MAAM,KAAK,SAAS,OAAO,CAAC,EACzB;AAAA,YAAI,CAAC,EAAE,QAAAU,QAAO,MACbA,QAAO,kBACH,0BAA0BA,QAAO,IAAIA,QAAO,eAAe,IAC3D;AAAA,UACN,EACC,OAAOC,WAAU,cAAc;AAAA,UACpC,SAAS,MACP,MAAM,KAAK,SAAS,OAAO,CAAC,EAAE;AAAA,YAAQ,CAAC,EAAE,QAAAD,QAAO,OAC7CA,QAAO,iBAAiB,CAAC,GAAG,IAAI,CAAC,YAAY;AAAA,cAC5C,GAAG;AAAA,cACH,UAAUA,QAAO;AAAA,YACnB,EAAE;AAAA,UACJ;AAAA,QACJ;AAAA,QACA,UAAU;AAAA,UACR,MAAM,MAAM,aAAa;AAAA,UACzB,QAAQ,CAAC,UAAU,eAAe,KAAK;AAAA,UACvC,QAAQ,CAAC,UAAU,eAAe,KAAK;AAAA,UACvC,QAAQ,CAAC,UAAU,eAAe,KAAK;AAAA,QACzC;AAAA,QACA,aAAa;AAAA,UACX,UAAU,CAAC,UACT,YAAY,iBAAiB,MAAM,OAAO,IAAI,KAAK,CAAC;AAAA,QACxD;AAAA,MACF;AAAA,MACA,SAAS;AAAA,QACP,KAAK,CAAC,OAAO,WAAW,EAAE;AAAA,QAC1B,YAAY,CAAC,IAAI,UAAU,kBAAkB,IAAI,KAAK;AAAA,QACtD,MAAM,MAAM,kBAAkB;AAAA,QAC9B,QAAQ,CAAC,OAAO,cAAc,EAAE;AAAA,QAChC,QAAQ,CAAC,OAAO,cAAc,EAAE;AAAA,QAChC,WAAW,MACTV,SAAO,KAAK,MAAM,MAAM,KAAK,gBAAgB,KAAK,CAAC,CAAsB;AAAA,QAC3E,KAAK,CAAC,UAAU,WAAW,KAAK;AAAA,QAChC,QAAQ,CAAC,UAAU,cAAc,KAAK;AAAA,MACxC;AAAA,MACA,aAAa;AAAA,QACX,KAAK,CAAC,OAAO,eAAe,EAAE;AAAA,QAC9B,YAAY,CAAC,IAAI,UAAU,sBAAsB,IAAI,KAAK;AAAA,QAC1D,MAAM,MAAM,sBAAsB;AAAA,QAClC,QAAQ,CAAC,OAAO,kBAAkB,EAAE;AAAA,QACpC,WAAW,MACTA,SAAO,KAAK,MAAM,MAAM,KAAK,oBAAoB,KAAK,CAAC,CAAsB;AAAA,QAC/E,QAAQ,CAAC,UAAU,kBAAkB,KAAK;AAAA,QAC1C,cAAc,CAAC,UAAU,wBAAwB,KAAK;AAAA,QACtD,kBAAkB,CAAC,IAAI,UAAU,4BAA4B,IAAI,KAAK;AAAA,QACtE,aAAa,CAAC,OAAO,uBAAuB,EAAE;AAAA,QAC9C,oBAAoB,CAAC,IAAI,UAAU,8BAA8B,IAAI,KAAK;AAAA,QAC1E,QAAQ,CAAC,UAAU,kBAAkB,KAAK;AAAA,MAC5C;AAAA,MACA;AAAA,MACA,OAAO,YAAY;AAAA,MACnB,aAAa,CAAO,WAAgC,YAAY,MAAM;AAAA,IACxE;AAMA,UAAM,YAAoB,OAAO,YAAY,OAAO,UAAU,GAAG,IAAI,CAAC;AACtE,QAAI,OAAO,WAAW;AACpB,iBAAW,OAAO,EAAE,IAAI;AAAA,IAC1B;AAUA,UAAM,QAAQ,OAAO,gBAAgB,OAAO,cAAc,SAAS,IAAI,CAAC;AACxE,eAAW,UAAU,OAAO;AAC1B,YAAM,qBAAqB,OAAO,SAAS;AAC3C,YAAM,gBAAgB,qBAAqB,kBAAkB;AAE7D,UAAI,oBAAoB;AACtB,YAAI,CAAC,cAAc,IAAI,kBAAkB,GAAG;AAC1C,wBAAc,IAAI,oBAAoB;AAAA,YACpC,QAAQ;AAAA,YACR,UAAU;AAAA,UACZ,CAAC;AAAA,QACH;AAAA,MACF,OAAO;AACL,YAAI,cAAc,IAAI,OAAO,EAAE,GAAG;AAChC,iBAAO,OAAO,IAAI,aAAa;AAAA,YAC7B,SAAS,+BAA+B,OAAO,EAAE,YAAY,OAAO,EAAE;AAAA,YACtE,OAAO;AAAA,UACT,CAAC;AAAA,QACH;AACA,sBAAc,IAAI,OAAO,IAAI,EAAE,QAAQ,UAAU,OAAO,GAAG,CAAC;AAAA,MAC9D;AAEA,iBAAWI,SAAQ,OAAO,OAAO;AAC/B,cAAM,cAAc,qBAChB;AAAA,UACE,GAAGA;AAAA,UACH,MAAM,GAAG,OAAO,EAAE,IAAIA,MAAK,IAAI;AAAA,QACjC,IACAA;AACJ,cAAM,OAAO,GAAG,cAAc,EAAE,IAAI,YAAY,IAAI;AACpD,YAAI,YAAY,IAAI,IAAI,GAAG;AACzB,iBAAO,OAAO,IAAI,aAAa;AAAA,YAC7B,SAAS,6BAA6B,IAAI,YAAY,OAAO,EAAE;AAAA,YAC/D,OAAO;AAAA,UACT,CAAC;AAAA,QACH;AACA,oBAAY,IAAI,MAAM;AAAA,UACpB,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,UAAU,OAAO;AAAA,UACjB;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAEA,aAAS,IAAI,OAAO,IAAI,EAAE,QAAQ,SAAS,IAAI,CAAC;AAEhD,QAAI,OAAO,iBAAiB;AAC1B,YAAM,MACJ,OAAO,OAAO,oBAAoB,aAC9B,OAAO,gBAAgB,GAAG,IAC1B,OAAO;AACb,YAAM,YAAYJ,SAAO,SAAS,GAAG,IACjC,OAAO,IAAI;AAAA,QACTA,SAAO,SAAS,CAAC,UAAU,qBAAqB,OAAO,IAAI,mBAAmB,KAAK,CAAC;AAAA,MACtF,IACA;AACJ,iBAAW,YAAY,WAAW;AAChC,YAAI,gBAAgB,IAAI,SAAS,GAAG,GAAG;AACrC,iBAAO,OAAO,IAAI,aAAa;AAAA,YAC7B,SAAS,kCAAkC,SAAS,GAAG,iBAAiB,OAAO,EAAE;AAAA,YACjF,OAAO;AAAA,UACT,CAAC;AAAA,QACH;AACA,wBAAgB,IAAI,SAAS,KAAK,QAAQ;AAAA,MAC5C;AAAA,IACF;AAEA,QAAI,OAAO,qBAAqB;AAC9B,YAAM,MACJ,OAAO,OAAO,wBAAwB,aAClC,OAAO,oBAAoB,GAAG,IAC9B,OAAO;AACb,YAAM,YAAYA,SAAO,SAAS,GAAG,IACjC,OAAO,IAAI;AAAA,QACTA,SAAO;AAAA,UAAS,CAAC,UACf,qBAAqB,OAAO,IAAI,uBAAuB,KAAK;AAAA,QAC9D;AAAA,MACF,IACA;AACJ,iBAAW,YAAY,WAAW;AAChC,YAAI,oBAAoB,IAAI,SAAS,GAAG,GAAG;AACzC,iBAAO,OAAO,IAAI,aAAa;AAAA,YAC7B,SAAS,sCAAsC,SAAS,GAAG,iBAAiB,OAAO,EAAE;AAAA,YACrF,OAAO;AAAA,UACT,CAAC;AAAA,QACH;AACA,4BAAoB,IAAI,SAAS,KAAK,QAAQ;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAKA,QAAM,cAAc,MAClBA,SAAO,IAAI,aAAa;AACtB,UAAM,UAAU,OAAO,KAAK,SAAS,UAAU,EAAE,OAAO,YAAY,QAAQ,EAAE,CAAC;AAM/E,UAAMM,QAAO,oBAAI,IAAsC;AACvD,UAAM,WAAW,oBAAI,IAAoB;AACzC,eAAW,OAAO,SAAS;AACzB,YAAM,OAAO,UAAU,GAAG;AAC1B,YAAM,WAAW,SAAS,IAAI,IAAI,EAAE;AACpC,UAAI,aAAa,UAAa,OAAO,UAAU;AAC7C,QAAAA,MAAK,IAAI,IAAI,IAAI,GAAG;AACpB,iBAAS,IAAI,IAAI,IAAI,IAAI;AAAA,MAC3B;AAAA,IACF;AACA,UAAM,iBAAiB,CAAC,GAAGA,MAAK,OAAO,CAAC;AACxC,UAAM,aAAuB,CAAC;AAC9B,eAAW,EAAE,QAAQ,SAAS,KAAK,cAAc,OAAO,GAAG;AACzD,iBAAW,KAAK,mBAAmB,QAAQ,QAAQ,CAAC;AAAA,IACtD;AACA,UAAM,SAAS,CAAC,GAAG,YAAY,GAAG,eAAe,IAAI,WAAW,CAAC;AACjE,WAAON,SAAO,oBAAoB;AAAA,MAChC,iCAAiC,WAAW;AAAA,MAC5C,kCAAkC,eAAe;AAAA,IACnD,CAAC;AACD,WAAO;AAAA,EACT,CAAC,EAAE,KAAKA,SAAO,SAAS,uBAAuB,CAAC;AAOlD,QAAM,wBAAwB,CAAC,SAC7BA,SAAO,IAAI,aAAa;AACtB,UAAM,SAAS,oBAAI,IAA6B;AAChD,QAAI,KAAK,WAAW,EAAG,QAAO;AAG9B,UAAM,SAAS,oBAAI,IAAuB;AAC1C,eAAW,OAAO,MAAM;AACtB,YAAM,MAAM,GAAG,IAAI,SAAS,KAAS,IAAI,SAAS;AAClD,YAAM,SAAS,OAAO,IAAI,GAAG;AAC7B,UAAI,OAAQ,QAAO,KAAK,GAAG;AAAA,UACtB,QAAO,IAAI,KAAK,CAAC,GAAG,CAAC;AAAA,IAC5B;AAMA,UAAM,OAAO,OAAOA,SAAO;AAAA,MACzB,CAAC,GAAG,MAAM,EAAE,MAAM,GAAG,qBAAqB;AAAA,MAC1C,CAAC,CAAC,KAAK,SAAS,MACdA,SAAO,IAAI,aAAa;AACtB,cAAM,CAAC,UAAU,QAAQ,IAAI,IAAI,MAAM,IAAQ;AAC/C,cAAM,UAAU,SAAS,IAAI,QAAQ;AACrC,YAAI,CAAC,SAAS,OAAO,mBAAoB,QAAO;AAChD,eAAO,OAAO,QAAQ,OACnB,mBAAmB;AAAA,UAClB,KAAK,QAAQ;AAAA,UACb;AAAA,UACA,UAAU;AAAA,QACZ,CAAC,EACA;AAAA,UACCA,SAAO;AAAA,YAAS,CAAC,UACf,qBAAqB,UAAU,sBAAsB,KAAK;AAAA,UAC5D;AAAA,QACF;AAAA,MACJ,CAAC;AAAA,MACH,EAAE,aAAa,YAAY;AAAA,IAC7B;AACA,eAAW,OAAO,MAAM;AACtB,UAAI,CAAC,IAAK;AACV,iBAAW,CAAC,QAAQ,WAAW,KAAK,OAAO,QAAQ,GAAG,GAAG;AACvD,eAAO,IAAI,QAAQ,WAAW;AAAA,MAChC;AAAA,IACF;AACA,WAAO;AAAA,EACT,CAAC;AAEH,QAAM,YAAY,CAAC,WACjBA,SAAO,IAAI,aAAa;AACtB,UAAM,UAAU,OAAO,KAAK,SAAS,QAAQ;AAAA,MAC3C,OAAO;AAAA,QACL;AAAA,QACA,QAAQ,WAAW,CAAC,MAAM,EAAE,aAAa,KAAK,OAAO,QAAS,IAAI;AAAA,MACpE;AAAA,IACF,CAAC;AAID,UAAMM,QAAO,oBAAI,IAAsC;AACvD,UAAM,WAAW,oBAAI,IAAoB;AACzC,eAAW,OAAO,SAAS;AACzB,YAAM,OAAO,UAAU,GAAG;AAC1B,YAAM,WAAW,SAAS,IAAI,IAAI,EAAE;AACpC,UAAI,aAAa,UAAa,OAAO,UAAU;AAC7C,QAAAA,MAAK,IAAI,IAAI,IAAI,GAAG;AACpB,iBAAS,IAAI,IAAI,IAAI,IAAI;AAAA,MAC3B;AAAA,IACF;AACA,UAAM,iBAAiB,CAAC,GAAGA,MAAK,OAAO,CAAC;AACxC,UAAM,cACJ,QAAQ,uBAAuB,QAC3B,oBAAI,IAA6B,IACjC,OAAO,sBAAsB,cAAc,EAAE;AAAA,MAC3CN,SAAO,SAAS,iCAAiC;AAAA,IACnD;AAEN,UAAM,MAAc,CAAC;AAErB,eAAW,SAAS,YAAY,OAAO,GAAG;AACxC,UAAI,KAAK,iBAAiB,MAAM,QAAQ,MAAM,MAAM,MAAM,QAAQ,CAAC;AAAA,IACrE;AACA,eAAW,OAAO,gBAAgB;AAChC,UAAI,KAAK,UAAU,KAAK,YAAY,IAAI,IAAI,EAAE,CAAC,CAAC;AAAA,IAClD;AACA,UAAM,WAAW,SAAS,IAAI,OAAO,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI;AAM5E,QAAI,SAAS;AACb,QAAI,eAAe;AACnB,QAAI,QAAQ,mBAAmB,MAAM;AACnC,YAAM,WAAW,OAAO,gBAAgB;AACxC,UAAI,SAAS,SAAS,GAAG;AACvB,cAAM,OAAe,CAAC;AACtB,mBAAWI,SAAQ,UAAU;AAC3B,gBAAM,QAAQ,kBAAkBA,MAAK,IAAI,UAAU,SAAS;AAC5D,cAAI,OAAO,WAAW,SAAS;AAC7B;AACA;AAAA,UACF;AACA,eAAK,KAAKA,KAAI;AAAA,QAChB;AACA,iBAAS;AAAA,MACX;AAAA,IACF;AAEA,WAAOJ,SAAO,oBAAoB;AAAA,MAChC,+BAA+B,YAAY;AAAA,MAC3C,gCAAgC,eAAe;AAAA,MAC/C,+BAA+B,OAAO;AAAA,MACtC,gCAAgC;AAAA,IAClC,CAAC;AACD,WAAO;AAAA,EACT,CAAC,EAAE,KAAKA,SAAO,SAAS,qBAAqB,CAAC;AAMhD,QAAM,2BAA2B,CAAC,aAChCA,SAAO,IAAI,aAAa;AACtB,UAAM,UAAU,OAAO,KAAK,SAAS,cAAc;AAAA,MACjD,OAAO,YAAY,UAAU,CAAC,MAAM,EAAE,aAAa,KAAK,QAAQ,CAAC;AAAA,IACnE,CAAC;AACD,UAAM,UAAU,oBAAI,IAA6D;AACjF,eAAW,OAAO,SAAS;AACzB,YAAM,OAAO,UAAU,GAAG;AAC1B,YAAM,WAAW,QAAQ,IAAI,IAAI,IAAI;AACrC,UAAI,CAAC,YAAY,OAAO,SAAS,MAAM;AACrC,gBAAQ,IAAI,IAAI,MAAM,EAAE,KAAK,KAAK,CAAC;AAAA,MACrC;AAAA,IACF;AACA,UAAM,MAA+B,CAAC;AACtC,eAAW,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,QAAS,KAAI,IAAI,IAAI,IAAI;AACvD,WAAO;AAAA,EACT,CAAC;AAKH,QAAM,sBAAsB,CAAC,SAQ3BA,SAAO,IAAI,aAAa;AACtB,UAAM,OAAgC,KAAK,WACvC,OAAO,yBAAyB,KAAK,QAAQ,EAAE;AAAA,MAC7CA,SAAO,SAAS,gCAAgC;AAAA,IAClD,IACA,CAAC;AAEL,UAAM,gBAAgB,IAAI,IAAqB,OAAO,QAAQ,IAAI,CAAC;AACnE,UAAM,oBAAoB;AAAA,MACxB,CAAC,KAAK,UAAU,KAAK,SAAS;AAAA,MAC9B;AAAA,IACF;AACA,UAAM,gBAAgB,IAAI,IAAqB,OAAO,QAAQ,iBAAiB,CAAC;AAChF,UAAM,UAAiC,OAAOA,SAAO;AAAA,MAAQ,MAC3D,2BAA2B;AAAA,QACzB,aAAa,KAAK;AAAA,QAClB,cAAc,KAAK;AAAA,QACnB,MAAM;AAAA,MACR,CAAC;AAAA,IACH,EAAE;AAAA,MACAA,SAAO,SAAS,0BAA0B;AAAA,QACxC,YAAY;AAAA,UACV,eAAe;AAAA,UACf,oBAAoB,KAAK,aAAa;AAAA,UACtC,qBAAqB,KAAK,cAAc;AAAA,UACxC,oBAAoB,cAAc;AAAA,UAClC,2BAA2B,cAAc;AAAA,QAC3C;AAAA,MACF,CAAC;AAAA,IACH;AAEA,WAAO,WAAW,KAAK;AAAA,MACrB,IAAI,OAAO,KAAK,KAAK,MAAM;AAAA,MAC3B,MAAM,KAAK;AAAA,MACX,aAAa,KAAK;AAAA,MAClB,aAAa,KAAK;AAAA,MAClB,cAAc,KAAK;AAAA,MACnB,mBACE,OAAO,KAAK,iBAAiB,EAAE,SAAS,IAAI,oBAAoB;AAAA,MAClE,iBAAiB,QAAQ,mBAAmB;AAAA,MAC5C,kBAAkB,QAAQ,oBAAoB;AAAA,MAC9C,uBAAuB,QAAQ,yBAAyB;AAAA,IAC1D,CAAC;AAAA,EACH,CAAC;AAEH,QAAM,aAAa,CAAC,WAClBA,SAAO,IAAI,aAAa;AAGtB,UAAM,cAAc,YAAY,IAAI,MAAM;AAC1C,QAAI,aAAa;AACf,aAAOA,SAAO,oBAAoB;AAAA,QAChC,+BAA+B;AAAA,QAC/B,sBAAsB,YAAY,OAAO;AAAA,QACzC,wBAAwB,YAAY,OAAO;AAAA,MAC7C,CAAC;AACD,aAAO,OAAO,oBAAoB;AAAA,QAChC;AAAA,QACA,MAAM,YAAY,KAAK;AAAA,QACvB,aAAa,YAAY,KAAK;AAAA,QAC9B,UAAU;AAAA,QACV,UAAU,iBAAiB,YAAY,KAAK,WAAW;AAAA,QACvD,WAAW,iBAAiB,YAAY,KAAK,cAAc,QAAQ;AAAA,MACrE,CAAC;AAAA,IACH;AAEA,UAAM,OAAO,OAAO,KACjB,SAAS,QAAQ;AAAA,MAChB,OAAO,YAAY,UAAU,KAAK,MAAM,CAAC;AAAA,IAC3C,CAAC,EACA,KAAKA,SAAO,SAAS,uBAAuB,CAAC;AAChD,UAAM,MAAM,cAAc,IAAI;AAC9B,QAAI,CAAC,IAAK,QAAO;AACjB,WAAOA,SAAO,oBAAoB;AAAA,MAChC,+BAA+B;AAAA,MAC/B,sBAAsB,IAAI;AAAA,MAC1B,sBAAsB,IAAI;AAAA,IAC5B,CAAC;AACD,WAAO,OAAO,oBAAoB;AAAA,MAChC;AAAA,MACA,MAAM,IAAI;AAAA,MACV,aAAa,IAAI;AAAA,MACjB,UAAU,IAAI;AAAA,MACd,UAAU,iBAAiB,IAAI,YAAY;AAAA,MAC3C,WAAW,iBAAiB,IAAI,aAAa;AAAA,IAC/C,CAAC;AAAA,EACH,CAAC,EAAE;AAAA,IACDA,SAAO,SAAS,wBAAwB;AAAA,MACtC,YAAY,EAAE,iBAAiB,OAAO;AAAA,IACxC,CAAC;AAAA,EACH;AAOF,QAAM,mBAAmB,MACvBA,SAAO,IAAI,aAAa;AACtB,UAAM,OAAO,OAAO,KAAK,SAAS,cAAc,EAAE,OAAO,YAAY,QAAQ,EAAE,CAAC;AAChF,UAAM,UAAU,oBAAI,IAA0D;AAC9E,eAAW,OAAO,MAAM;AACtB,YAAM,MAAM,GAAG,IAAI,SAAS,KAAS,IAAI,IAAI;AAC7C,YAAM,OAAO,UAAU,GAAG;AAC1B,YAAM,WAAW,QAAQ,IAAI,GAAG;AAChC,UAAI,CAAC,YAAY,OAAO,SAAS,MAAM;AACrC,gBAAQ,IAAI,KAAK,EAAE,KAAK,KAAK,CAAC;AAAA,MAChC;AAAA,IACF;AACA,UAAM,MAA+C,CAAC;AACtD,eAAW,EAAE,IAAI,KAAK,QAAQ,OAAO,GAAG;AACtC,UAAI,SAAS,IAAI,IAAI,SAAS;AAC9B,UAAI,CAAC,QAAQ;AACX,iBAAS,CAAC;AACV,YAAI,IAAI,SAAS,IAAI;AAAA,MACvB;AACA,aAAO,IAAI,IAAI,IAAI,IAAI;AAAA,IACzB;AACA,WAAO;AAAA,EACT,CAAC;AAEH,QAAM,4BAA4B,0BAA0B,OAAO,aAAa;AAChF,QAAM,cAAc,CAAC,YACnB,SAAS,gBACL,0BAA0B,QAAQ,aAAa,IAC/C;AAEN,QAAM,cAAc,CAAC,QAAgB,MAAe,YAAwC;AAC1F,WAAO,CAAC,YACNA,SAAO,IAAI,aAAa;AACtB,YAAM,MAAM,OAAO,KAAK,MAAM;AAC9B,YAAM,WAAgC,OAAO,QAAQ;AAAA,QACnD,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF,CAAC;AACD,UAAI,SAAS,WAAW,UAAU;AAChC,eAAO,OAAO,IAAI,yBAAyB;AAAA,UACzC,QAAQ;AAAA,UACR,QAAQ,SAAS;AAAA,QACnB,CAAC;AAAA,MACH;AACA,aAAO;AAAA,IACT,CAAC;AAAA,EACL;AAYA,QAAM,kBAAkB,MAAM,KAAK,SAAS,eAAe,EAAE,OAAO,YAAY,QAAQ,EAAE,CAAC;AAE3F,QAAM,yBAAyB,CAAC,WAC9BA,SAAO,IAAI,aAAa;AACtB,UAAM,WAAW,OAAO,gBAAgB;AACxC,WAAO,kBAAkB,QAAQ,UAAU,SAAS;AAAA,EACtD,CAAC;AAEH,QAAM,kBAAkB,CACtB,aACA,QACA,MACA,QACA,YAEAA,SAAO,IAAI,aAAa;AAEtB,QAAI,QAAQ,WAAW,UAAW;AAKlC,UAAM,uBAAuB,QAAQ,WAAW;AAChD,QAAI,CAAC,wBAAwB,CAAC,aAAa,iBAAkB;AAE7D,UAAM,MAAM,OAAO,KAAK,MAAM;AAC9B,UAAM,UAAU,aAAa,sBACzB,YAAY,sBACZ,wBAAwB,SACtB,WAAW,MAAM,sBAAsB,OAAO,OAAO,MACrD,WAAW,MAAM;AACvB,UAAM,UAAU,gBAAgB,KAAK;AAAA,MACnC,SAAS,GAAG,OAAO;AAAA;AAAA;AAAA,EAAmB,wBAAwB,IAAI,CAAC;AAAA,MACnE,iBAAiB;AAAA,QACf,MAAM;AAAA,QACN,YAAY,CAAC;AAAA,MACf;AAAA,IACF,CAAC;AACD,UAAM,WAAW,OAAO,QAAQ,EAAE,QAAQ,KAAK,MAAM,QAAQ,CAAC;AAC9D,QAAI,SAAS,WAAW,UAAU;AAChC,aAAO,OAAO,IAAI,yBAAyB;AAAA,QACzC,QAAQ;AAAA,QACR,QAAQ,SAAS;AAAA,MACnB,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAEH,QAAM,aAAa,CAAC,QAAgB,MAAe,YAA4B;AAC7E,UAAM,UAAU,YAAY,OAAO;AACnC,WAAOA,SAAO,IAAI,aAAa;AAC7B,YAAM,+BAA+B,CAAC,UAA2B;AAE/D,eAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D;AACA,YAAM,sBACJ,CAACY,oBACD,CAAO,WACL,OAAO;AAAA,QACLZ,SAAO;AAAA,UACL,CAAC,UACC,IAAI,oBAAoB;AAAA,YACtB,QAAQ,OAAO,KAAKY,eAAc;AAAA,YAClC,SAAS,6BAA6B,KAAK;AAAA,YAC3C;AAAA,UACF,CAAC;AAAA,QACL;AAAA,MACF;AAGJ,YAAM,cAAc,YAAY,IAAI,MAAM;AAC1C,UAAI,aAAa;AAIf,cAAMC,UAAS,OAAO,uBAAuB,MAAM,EAAE;AAAA,UACnDb,SAAO,SAAS,8BAA8B;AAAA,QAChD;AACA,YAAIa,SAAQ,WAAW,SAAS;AAC9B,iBAAO,OAAO,IAAI,iBAAiB;AAAA,YACjC,QAAQ,OAAO,KAAK,MAAM;AAAA,YAC1B,SAASA,QAAO;AAAA,UAClB,CAAC;AAAA,QACH;AACA,eAAOb,SAAO,oBAAoB;AAAA,UAChC,+BAA+B;AAAA,UAC/B,sBAAsB,YAAY,OAAO;AAAA,UACzC,wBAAwB,YAAY,OAAO;AAAA,UAC3C,sBAAsB,YAAY;AAAA,QACpC,CAAC;AACD,eAAO,gBAAgB,YAAY,KAAK,aAAa,QAAQ,MAAMa,SAAQ,OAAO,EAAE;AAAA,UAClFb,SAAO,SAAS,gCAAgC;AAAA,QAClD;AACA,eAAO,OAAO,oBAAoB,MAAM;AAAA,UACtC,YAAY,KAAK,QAAQ;AAAA,YACvB,KAAK,YAAY;AAAA,YACjB;AAAA,YACA,QAAQ,YAAY,QAAQ,MAAM,OAAO;AAAA,UAC3C,CAAC;AAAA,QACH,EAAE,KAAKA,SAAO,SAAS,uBAAuB,CAAC;AAAA,MACjD;AAKA,UAAI,WAAW,OAAO,KACnB,SAAS,QAAQ;AAAA,QAChB,OAAO,YAAY,UAAU,KAAK,MAAM,CAAC;AAAA,MAC3C,CAAC,EACA,KAAKA,SAAO,SAAS,uBAAuB,CAAC;AAChD,UAAI,MAAM,cAAc,QAAQ;AAChC,UAAI,iBAAiB;AACrB,UAAI,iBAA6C;AACjD,UAAI,CAAC,KAAK;AACR,yBAAiB,OAAO,KACrB,SAAS,QAAQ;AAAA,UAChB,OAAO,YAAY,QAAQ;AAAA,QAC7B,CAAC,EACA,KAAKA,SAAO,SAAS,mCAAmC,CAAC;AAC5D,cAAM,WAAW,aAAa,MAAM;AACpC,YAAI,UAAU;AACZ,gBAAM,mBAAmB,OAAO,YAAY;AAC5C,gBAAM;AAAA,YACJ,eAAe;AAAA,cACb,CAAC,YACC,QAAQ,cAAc,YAAY,QAAQ,GAAG,YAAY,MAAM;AAAA,YACnE;AAAA,UACF;AACA,cAAI,IAAK,kBAAiB,IAAI;AAAA,QAChC;AAAA,MACF;AACA,UAAI,CAAC,KAAK;AACR,eAAO,OAAO,IAAI,kBAAkB;AAAA,UAClC,QAAQ,OAAO,KAAK,MAAM;AAAA,UAC1B,aAAa,uBAAuB,QAAQ,cAAc;AAAA,QAC5D,CAAC;AAAA,MACH;AACA,aAAOA,SAAO,oBAAoB;AAAA,QAChC,+BAA+B;AAAA,QAC/B,sBAAsB,IAAI;AAAA,QAC1B,sBAAsB,IAAI;AAAA,QAC1B,6BAA6B;AAAA,MAC/B,CAAC;AACD,YAAM,SAAS,OAAO,uBAAuB,cAAc,EAAE;AAAA,QAC3DA,SAAO,SAAS,8BAA8B;AAAA,MAChD;AACA,UAAI,QAAQ,WAAW,SAAS;AAC9B,eAAO,OAAO,IAAI,iBAAiB;AAAA,UACjC,QAAQ,OAAO,KAAK,cAAc;AAAA,UAClC,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AACA,YAAM,UAAU,SAAS,IAAI,IAAI,SAAS;AAC1C,UAAI,CAAC,SAAS;AACZ,eAAO,OAAO,IAAI,qBAAqB;AAAA,UACrC,UAAU,IAAI;AAAA,UACd,QAAQ,OAAO,KAAK,MAAM;AAAA,QAC5B,CAAC;AAAA,MACH;AACA,UAAI,CAAC,QAAQ,OAAO,YAAY;AAC9B,eAAO,OAAO,IAAI,eAAe;AAAA,UAC/B,QAAQ,OAAO,KAAK,MAAM;AAAA,UAC1B,UAAU,IAAI;AAAA,QAChB,CAAC;AAAA,MACH;AASA,UAAI;AACJ,UAAI,QAAQ,WAAW,aAAa,QAAQ,OAAO,oBAAoB;AACrE,cAAM,MAAM,OAAO,QAAQ,OACxB,mBAAmB;AAAA,UAClB,KAAK,QAAQ;AAAA,UACb,UAAU,IAAI;AAAA,UACd,UAAU,CAAC,GAAG;AAAA,QAChB,CAAC,EACA,KAAK,oBAAoB,cAAc,CAAC,EACxC,KAAKA,SAAO,SAAS,mCAAmC,CAAC;AAC5D,sBAAc,IAAI,cAAc;AAAA,MAClC;AACA,aAAO,gBAAgB,aAAa,gBAAgB,MAAM,QAAQ,OAAO,EAAE;AAAA,QACzEA,SAAO,SAAS,gCAAgC;AAAA,MAClD;AAEA,aAAO,OAAO,oBAAoB,cAAc;AAAA,QAC9C,QAAQ,OAAO,WAAW;AAAA,UACxB,KAAK,QAAQ;AAAA,UACb,SAAS;AAAA,UACT;AAAA,UACA,QAAQ,YAAY,gBAAgB,MAAM,OAAO;AAAA,QACnD,CAAC;AAAA,MACH,EAAE,KAAKA,SAAO,SAAS,uBAAuB,CAAC;AAAA,IACjD,CAAC,EAAE;AAAA,MACDA,SAAO,SAAS,wBAAwB;AAAA,QACtC,YAAY;AAAA,UACV,iBAAiB;AAAA,QACnB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,eAAe,CAAC,UACpBA,SAAO,IAAI,aAAa;AACtB,WAAO,mBAAmB,6BAA6B,MAAM,WAAW;AACxE,UAAM,WAAW,MAAM;AAEvB,QAAI,cAAc,IAAI,QAAQ,GAAG;AAC/B,aAAO,OAAO,IAAI,6BAA6B,EAAE,SAAS,CAAC;AAAA,IAC7D;AACA,UAAM,YAAY,OAAO,KAAK,UAAU,UAAU;AAAA,MAChD,OAAO,WAAW,MAAM,aAAa,QAAQ;AAAA,IAC/C,CAAC;AACD,QAAI,CAAC,UAAW;AAChB,QAAI,CAAC,UAAU,YAAY;AACzB,aAAO,OAAO,IAAI,6BAA6B,EAAE,SAAS,CAAC;AAAA,IAC7D;AACA,UAAM,UAAU,SAAS,IAAI,UAAU,SAAS;AAGhD,WAAO;AAAA,MACLA,SAAO,IAAI,aAAa;AACtB,YAAI,SAAS,OAAO,cAAc;AAChC,iBAAO,QAAQ,OACZ,aAAa;AAAA,YACZ,KAAK,QAAQ;AAAA,YACb;AAAA,YACA,OAAO,MAAM;AAAA,UACf,CAAC,EACA;AAAA,YACCA,SAAO;AAAA,cAAS,CAAC,UACf,qBAAqB,QAAQ,OAAO,IAAI,gBAAgB,KAAK;AAAA,YAC/D;AAAA,UACF;AAAA,QACJ;AACA,eAAO,iBAAiB,MAAM,UAAU,MAAM,WAAW;AAAA,MAC3D,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAEH,QAAM,gBAAgB,CAAC,UACrBA,SAAO,IAAI,aAAa;AACtB,WAAO,mBAAmB,8BAA8B,MAAM,WAAW;AACzE,UAAM,WAAW,MAAM;AACvB,QAAI,cAAc,IAAI,QAAQ,EAAG;AACjC,UAAM,YAAY,OAAO,KAAK,UAAU,UAAU;AAAA,MAChD,OAAO,WAAW,MAAM,aAAa,QAAQ;AAAA,IAC/C,CAAC;AACD,QAAI,CAAC,UAAW;AAChB,UAAM,UAAU,SAAS,IAAI,UAAU,SAAS;AAChD,QAAI,SAAS,OAAO,eAAe;AACjC,aAAO,QAAQ,OACZ,cAAc;AAAA,QACb,KAAK,QAAQ;AAAA,QACb;AAAA,QACA,OAAO,MAAM;AAAA,MACf,CAAC,EACA;AAAA,QACCA,SAAO;AAAA,UAAS,CAAC,UACf,qBAAqB,QAAQ,OAAO,IAAI,iBAAiB,KAAK;AAAA,QAChE;AAAA,MACF;AAAA,IACJ;AAAA,EACF,CAAC;AAEH,QAAM,8BAA8B,OAAO,iBAAiB,gBAAgB;AAC5E,QAAM,8BAA8B,OAAO,iBAAiB,gBAAgB;AAC5E,QAAM,4BAA4B,OAAO,iBAAiB,cAAc;AACxE,QAAM,yBAAyB,OAAO,iBAAiB,WAAW;AAClE,QAAM,sCACJ,OAAO,iBAAiB,wBAAwB,OAAO,oBAAoB;AAO7E,QAAM,2BAA2B,CAAC,eAChCc,OAAM,MAAM,UAAU,EAAE;AAAA,IACtBA,OAAM,KAAK,QAAQ,MAAM,CAAC;AAAA,IAC1BA,OAAM,KAAK,UAAU,MAAM,CAAC;AAAA,IAC5BA,OAAM,KAAK,OAAO,MAAM,CAAC;AAAA,IACzBA,OAAM;AAAA,EACR;AAEF,QAAM,eAAe,CAAC,QACpBd,SAAO,IAAI,aAAa;AACtB,UAAM,UAAU,IAAI,KAAK;AACzB,QAAI,QAAQ,WAAW,KAAK,QAAQ,SAAS,4BAA6B,QAAO,CAAC;AAClF,UAAM,SAAS,OAAOA,SAAO,IAAI;AAAA,MAC/B,KAAK,MAAM,IAAI,IAAI,OAAO;AAAA,MAC1B,OAAO,CAAC,UAAU;AAAA,IACpB,CAAC,EAAE,KAAKA,SAAO,MAAM;AACrB,QAAIE,QAAO,OAAO,MAAM,EAAG,QAAO,CAAC;AACnC,QAAI,OAAO,MAAM,aAAa,WAAW,OAAO,MAAM,aAAa,SAAU,QAAO,CAAC;AACrF,QAAI,qCAAqC;AACvC,YAAM,UAAU,OAAO,0BAA0B,OAAO,EAAE;AAAA,QACxDF,SAAO,GAAG,IAAI;AAAA,QACdA,SAAO,MAAM,MAAMA,SAAO,QAAQ,KAAK,CAAC;AAAA,MAC1C;AACA,UAAI,CAAC,QAAS,QAAO,CAAC;AAAA,IACxB;AAEA,UAAM,UAAmC,CAAC;AAC1C,QAAI,gBAAgB;AACpB,eAAW,WAAW,SAAS,OAAO,GAAG;AACvC,UAAI,CAAC,QAAQ,OAAO,OAAQ;AAC5B,UAAI,iBAAiB,4BAA6B;AAClD;AACA,YAAM,SAAS,OAAO,QAAQ,OAC3B,OAAO,EAAE,KAAK,QAAQ,KAAK,KAAK,QAAQ,CAAC,EACzC,KAAKA,SAAO,QAAQ,sBAAsB,CAAC,EAC3C,KAAKA,SAAO,MAAM,MAAMA,SAAO,QAAQ,IAAI,CAAC,CAAC;AAChD,UAAI,OAAQ,SAAQ,KAAK,MAAM;AAAA,IACjC;AACA,WAAO,QACJ;AAAA,MACC,CAAC,GAAG,MACF,yBAAyB,EAAE,UAAU,IAAI,yBAAyB,EAAE,UAAU;AAAA,IAClF,EACC,MAAM,GAAG,yBAAyB;AAAA,EACvC,CAAC;AAGH,QAAM,oBAAoB,CAAC,aAAqB,yBAAyB,QAAQ;AAOjF,QAAM,gBAAgB,CAAC,OACrBA,SAAO,IAAI,aAAa;AACtB,UAAM,OAAO,OAAO,gBAAgB,EAAE;AACtC,QAAI,KAAK,KAAK,CAAC,QAAQ,IAAI,sBAAsB,EAAG,QAAO;AAC3D,eAAW,OAAO,MAAM;AACtB,UAAI,OAAO,2BAA2B,GAAG,EAAG,QAAO;AAAA,IACrD;AAEA,WAAO;AAAA,EACT,CAAC;AAWH,QAAM,eAAe,MACnBA,SAAO,IAAI,aAAa;AACtB,UAAM,OAAO,OAAO,gBAAgB;AACpC,UAAM,SAAS,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM;AACtC,YAAM,KAAK,UAAU,CAAC;AACtB,YAAM,KAAK,UAAU,CAAC;AACtB,UAAI,OAAO,GAAI,QAAO,KAAK;AAC3B,aAAO,iBAAiB,GAAG,CAAC;AAAA,IAC9B,CAAC;AACD,WAAO,OAAO,IAAI,CAAC,QAAQ,gBAAgB,GAAG,CAAC;AAAA,EACjD,CAAC,EAAE,KAAKA,SAAO,SAAS,wBAAwB,CAAC;AAEnD,QAAM,iBAAiB,CAAC,UACtBA,SAAO,IAAI,aAAa;AACtB,WAAO,mBAAmB,2BAA2B,MAAM,WAAW;AACtE,QAAI,CAAC,eAAe,MAAM,OAAO,GAAG;AAClC,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SACE,gCAAgC,MAAM,OAAO;AAAA,QAI/C,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,QAAI,CAAC,mBAAmB,MAAM,MAAM,GAAG;AACrC,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SACE,+BAA+B,OAAO,MAAM,MAAM,CAAC;AAAA,QAErD,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAOA,QAAI,WAAW,MAAM;AACrB,QAAI,aAAa,QAAW;AAC1B,YAAM,WAAW,OAAO,KAAK,SAAS,eAAe;AAAA,QACnD,OAAO,CAAC,MAAM,EAAE,YAAY,KAAK,MAAM,WAAW;AAAA,MACpD,CAAC;AACD,UAAI,MAAqB;AACzB,iBAAW,OAAO,UAAU;AAC1B,cAAM,IAAI,IAAI;AACd,YAAI,QAAQ,QAAQ,IAAI,IAAK,OAAM;AAAA,MACrC;AACA,iBAAW,mBAAmB,MAAM,GAAG;AAAA,IACzC;AAEA,UAAM,KAAK,OAAO,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC,IAAI,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC;AACpF,UAAM,MAAM,oBAAI,KAAK;AACrB,WAAO,KAAK,OAAO,eAAe;AAAA,MAChC;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd;AAAA,MACA,YAAY;AAAA,MACZ,YAAY;AAAA,IACd,CAAC;AACD,WAAO,gBAAgB;AAAA,MACrB;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd;AAAA,MACA,YAAY;AAAA,MACZ,YAAY;AAAA,IACd,CAAkB;AAAA,EACpB,CAAC,EAAE,KAAKA,SAAO,SAAS,0BAA0B,CAAC;AAErD,QAAM,iBAAiB,CAAC,UACtBA,SAAO,IAAI,aAAa;AACtB,WAAO,mBAAmB,2BAA2B,MAAM,WAAW;AACtE,QAAI,MAAM,YAAY,UAAa,CAAC,eAAe,MAAM,OAAO,GAAG;AACjE,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SAAS,gCAAgC,MAAM,OAAO;AAAA,QACtD,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,QAAI,MAAM,WAAW,UAAa,CAAC,mBAAmB,MAAM,MAAM,GAAG;AACnE,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SAAS,+BAA+B,OAAO,MAAM,MAAM,CAAC;AAAA,QAC5D,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAEA,UAAM,OAAO,OAAO,KAAK,SAAS,eAAe;AAAA,MAC/C,OAAO,WAAW,MAAM,aAAa,MAAM,EAAE;AAAA,IAC/C,CAAC;AACD,UAAM,MAAM,KAAK,CAAC,KAAK;AACvB,QAAI,CAAC,KAAK;AACR,aAAO,OAAO,IAAI,aAAa;AAAA,QAC7B,SAAS,gBAAgB,MAAM,EAAE,yBAAyB,MAAM,WAAW;AAAA,QAC3E,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAEA,UAAM,UAAyB;AAAA,MAC7B,GAAG;AAAA,MACH,SAAS,MAAM,WAAW,IAAI;AAAA,MAC9B,QAAQ,MAAM,UAAU,IAAI;AAAA,MAC5B,UAAU,MAAM,YAAY,IAAI;AAAA,MAChC,YAAY,oBAAI,KAAK;AAAA,IACvB;AACA,WAAO,KAAK,WAAW,eAAe;AAAA,MACpC,OAAO,WAAW,MAAM,aAAa,MAAM,EAAE;AAAA,MAC7C,KAAK;AAAA,QACH,SAAS,QAAQ;AAAA,QACjB,QAAQ,QAAQ;AAAA,QAChB,UAAU,QAAQ;AAAA,QAClB,YAAY,QAAQ;AAAA,MACtB;AAAA,IACF,CAAC;AACD,WAAO,gBAAgB,OAAO;AAAA,EAChC,CAAC,EAAE,KAAKA,SAAO,SAAS,0BAA0B,CAAC;AAErD,QAAM,iBAAiB,CAAC,UACtBA,SAAO,IAAI,aAAa;AACtB,WAAO,mBAAmB,2BAA2B,MAAM,WAAW;AACtE,WAAO,KAAK,WAAW,eAAe;AAAA,MACpC,OAAO,WAAW,MAAM,aAAa,MAAM,EAAE;AAAA,IAC/C,CAAC;AAAA,EACH,CAAC,EAAE,KAAKA,SAAO,SAAS,0BAA0B,CAAC;AAErD,QAAM,kBAAkB,CAAC,WACvB,uBAAuB,MAAM,EAAE,KAAKA,SAAO,SAAS,2BAA2B,CAAC;AAElF,QAAM,QAAQ,MACZA,SAAO,IAAI,aAAa;AACtB,eAAW,WAAW,SAAS,OAAO,GAAG;AACvC,UAAI,QAAQ,OAAO,OAAO;AACxB,eAAO,QAAQ,OACZ,MAAM,EACN;AAAA,UACCA,SAAO,SAAS,CAAC,UAAU,qBAAqB,QAAQ,OAAO,IAAI,SAAS,KAAK,CAAC;AAAA,QACpF;AAAA,MACJ;AAAA,IACF;AACA,QAAI,SAAS;AACX,YAAM,MAAM,QAAQ;AACpB,UAAIA,SAAO,SAAS,GAAG,GAAG;AACxB,eAAO;AAAA,MACT,WAAW,eAAe,SAAS;AACjC,eAAOA,SAAO,WAAW;AAAA,UACvB,KAAK,MAAM;AAAA,UACX,OAAO,CAAC,UACN,IAAI,aAAa;AAAA,YACf,SAAS;AAAA,YACT;AAAA,UACF,CAAC;AAAA,QACL,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF,CAAC;AAOH,QAAM,OAAO;AAAA,IACX;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,WAAW;AAAA,MACX,cAAc;AAAA,MACd,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,eAAe;AAAA,MACf,iBAAiB;AAAA,IACnB;AAAA,IACA,SAAS;AAAA,MACP,KAAK;AAAA,MACL,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,WAAW,MAAMA,SAAO,KAAK,MAAM,MAAM,KAAK,gBAAgB,KAAK,CAAC,CAAsB;AAAA,IAC5F;AAAA,IACA,aAAa;AAAA,MACX,KAAK;AAAA,MACL,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,kBAAkB;AAAA,MAClB,aAAa;AAAA,MACb,oBAAoB;AAAA,MACpB,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW,MACTA,SAAO,KAAK,MAAM,MAAM,KAAK,oBAAoB,KAAK,CAAC,CAAsB;AAAA,IACjF;AAAA,IACA;AAAA,IACA,OAAO,YAAY;AAAA,IACnB,UAAU;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,SAAS;AAAA,IACX;AAAA,IACA;AAAA,EACF;AAIA,QAAM,aAAa,CAAC,UAAuC;AAC3D,SAAO,WAAW,OAAO,OAAO,MAAM,UAAU,CAAC;AACnD,CAAC;;;AC5nIH,SAAS,UAAAe,gBAAc;AAIhB,IAAM,QAAQC,SAAO,OAAO;AAAA,EACjC,IAAI;AAAA,EACJ,MAAMA,SAAO;AAAA,EACb,WAAWA,SAAO;AACpB,CAAC;AASM,IAAM,8BAA8B,CACzC,WACkB;AAClB,QAAM,QAAQ,OAAO,OAAO,SAAS,CAAC;AACtC,SAAO,QAAQ,OAAO,MAAM,EAAE,IAAI;AACpC;","names":["Effect","Schema","Data","Effect","Schema","Schema","Data","Effect","Schema","Schema","Schema","Schema","Data","Effect","Data","Effect","Predicate","Schema","Data","Schema","Effect","Predicate","response","Duration","Effect","Option","Schema","FetchHttpClient","HttpClient","HttpClientRequest","Schema","Effect","Option","crypto","HttpClient","HttpClientRequest","Duration","FetchHttpClient","changed","key","ast","minItems","maxItems","type","rules","schema","Effect","Layer","Schema","FetchHttpClient","Effect","Match","Option","Predicate","Result","Schema","FetchHttpClient","Effect","Schema","Option","decodeProviderState","tool","value","byId","Result","now","FetchHttpClient","plugin","Predicate","resolvedToolId","policy","Match","Schema","Schema"]}