@forestrie/mcp-register 0.0.0-stage → 0.1.1

package/dist/node/grant-tools.js

@@ -0,0 +1,498 @@
+/**
+ * The requester's tools: issue_grant signs a child grant with the authority
+ * key, and register_grant registers it with canopy, paying canopy's 402
+ * within the configured caps or relaying the payment requirements, then
+ * follows it to its receipt and completes it.
+ *
+ * register_grant is resumable by the child log id. Each call advances the
+ * stored record as far as it can (issued → payment_required → accepted →
+ * complete) and stops at the first thing it has to wait for. Every payment
+ * it signs for a grant carries a nonce derived from that grant, so one grant
+ * can never be paid for twice.
+ *
+ * Same contract as `tools.ts`: a refusal, an HTTP failure or bad input is a
+ * `structuredContent.problem` with a `code`, never a throw.
+ */
+import { randomUUID } from "node:crypto";
+import { z } from "zod";
+import { NetError, fetchReceipt } from "@forestrie/mcp-resolve/net";
+import { base64ToBytes, bytesToBase64 } from "../core/base64.js";
+import { inspectGrant } from "../core/grant.js";
+import { toHex } from "../core/hex.js";
+function hexToBytes(hex) {
+    const h = hex.replace(/^0x/, "");
+    const out = new Uint8Array(h.length / 2);
+    for (let i = 0; i < out.length; i++)
+        out[i] = parseInt(h.slice(i * 2, i * 2 + 2), 16);
+    return out;
+}
+import { MAX_PARENT_GRANT_BYTES, completeGrant, grantContent, issueChildGrant, parentGrantProblems, registerGrantBody, } from "../core/issue.js";
+import { originOf, readReceiptResponse, readRegisterGrantResponse, readStatusResponse, } from "../core/scrapi.js";
+import { PaymentError, grantPaymentNonce, readPaymentPayload, readPaymentRequired, selectWithinCaps, } from "../core/x402.js";
+import { getRegistrationStatus, postGrant, registerGrantUrl, } from "../net/write.js";
+import { readPaymentCaps } from "./payer.js";
+import { InputError } from "./resolve-input.js";
+import { BaseUrlSchema, GrantSchema, decodeBase64Text, guardHandler, httpProblem, httpProblemValue, missingInput, ok, problemResult, resolveGrant, } from "./tools.js";
+const ParentGrantSchema = z
+    .string()
+    .min(1)
+    .describe("your authority grant: the completed grant that created your authority log and names this server's authority key, as base64 or a file path; falls back to FORESTRIE_AUTHORITY_GRANT");
+const LogIdSchema = z
+    .string()
+    .regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/)
+    .describe("a child log id: a lowercase UUID");
+export const issueGrantInputShape = {
+    maxHeight: z
+        .number()
+        .int()
+        .positive()
+        .describe("the grant's batch ceiling. canopy prices a payment-gated child grant as its unit price × maxHeight, so size it to the work it is for"),
+    parentGrant: ParentGrantSchema.optional(),
+    grantee: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("base64 of the 64-byte x‖y the grant names (the performer's log key); defaults to this server's own log key, for a self-purchase"),
+    logId: LogIdSchema.optional().describe("the child data log to create; a fresh random UUID by default"),
+};
+export const registerGrantInputShape = {
+    logId: LogIdSchema.optional().describe("the child log id issue_grant returned: register_grant resumes that grant from wherever the last call reached"),
+    grant: GrantSchema.optional().describe("a child grant signed elsewhere (base64 or a file path), instead of logId"),
+    parentGrant: ParentGrantSchema.optional(),
+    payment: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("relay mode: the X-PAYMENT header value your own x402 wallet produced for the payment requirements register_grant returned"),
+    baseUrl: BaseUrlSchema.optional(),
+    rootLogId: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("the forest's root log id (R in /register/{R}/grants); falls back to FORESTRIE_ROOT_LOG_ID"),
+};
+/* ------------------------------ issue_grant ----------------------------- */
+export function makeIssueGrantTool(deps) {
+    return (args) => guardHandler("issue_grant", async () => {
+        const parent = resolveGrant(args.parentGrant, deps, "FORESTRIE_AUTHORITY_GRANT");
+        if (!parent)
+            return missingInput("issue_grant", "parentGrant", "FORESTRIE_AUTHORITY_GRANT");
+        const authority = await deps.authoritySigner();
+        const refusals = parentGrantProblems(parent.view, await authority.publicKeyXY());
+        if (refusals.length > 0)
+            return problemResult("issue_grant", {
+                code: "parent_unusable",
+                message: refusals.join("; "),
+                ownerLogId: parent.view.logId,
+            });
+        let grantee;
+        let granteeIs;
+        if (args.grantee !== undefined) {
+            grantee = decodeBase64Text(args.grantee, "grantee");
+            if (grantee.length !== 64)
+                throw new InputError(`grantee must decode to 64 bytes x‖y (got ${grantee.length})`);
+            granteeIs = "the key supplied";
+        }
+        else {
+            grantee = await (await deps.signer()).publicKeyXY();
+            granteeIs = "this server's log key";
+        }
+        const logId = args.logId ?? randomUUID();
+        if (deps.grants.has(logId))
+            return problemResult("issue_grant", {
+                code: "already_issued",
+                message: `a grant for log ${logId} is already recorded here; call register_grant with that logId, or issue for a new log`,
+                logId,
+            });
+        const issued = await issueChildGrant({
+            logId,
+            ownerLogId: parent.view.logId,
+            grantData: grantee,
+            maxHeight: args.maxHeight,
+        }, authority);
+        const record = {
+            logId,
+            ownerLogId: parent.view.logId,
+            state: "issued",
+            issuedHere: true,
+            granteeHex: toHex(grantee),
+            maxHeight: args.maxHeight,
+            flagsHex: toHex(issued.flags),
+            parentRequiresPayment: parent.view.requiresChildPayment,
+            issuedAt: deps.now().toISOString(),
+        };
+        deps.grants.save(record, {
+            "grant.cose": issued.grant,
+            "parent.cose": base64ToBytes(parent.b64),
+        });
+        return ok(`issued: a data-log creation grant for log ${logId} under authority log ${record.ownerLogId}, naming ${granteeIs}, maxHeight ${args.maxHeight}. Not yet registered${record.parentRequiresPayment ? "; your authority grant makes its registration payment-gated" : ""}: call register_grant with this logId.`, {
+            ...record,
+            grantee: granteeIs,
+            grantBase64: bytesToBase64(issued.grant),
+        });
+    });
+}
+/** The grant this call is about: a stored one by logId, or one supplied. */
+function locate(args, deps) {
+    if (args.grant !== undefined) {
+        const supplied = resolveGrant(args.grant, deps);
+        const bytes = base64ToBytes(supplied.b64);
+        const logId = supplied.view.logId;
+        if (args.logId !== undefined && args.logId !== logId)
+            throw new InputError(`the grant is for log ${logId}, not the logId given (${args.logId})`);
+        if (deps.grants.has(logId)) {
+            const stored = deps.grants.read(logId, "grant.cose");
+            if (stored === undefined || toHex(stored) !== toHex(bytes))
+                return problemResult("register_grant", {
+                    code: "grant_conflict",
+                    message: `a different grant for log ${logId} is already recorded here; pass logId alone to resume it`,
+                    logId,
+                });
+            return {
+                record: deps.grants.load(logId),
+                grant: bytes,
+                view: supplied.view,
+            };
+        }
+        const record = {
+            logId,
+            ownerLogId: supplied.view.ownerLogId,
+            state: "issued",
+            issuedHere: false,
+            granteeHex: toHex(supplied.view.grantData),
+            ...(supplied.view.maxHeight !== undefined
+                ? { maxHeight: supplied.view.maxHeight }
+                : {}),
+            flagsHex: supplied.view.flagsHex,
+            issuedAt: deps.now().toISOString(),
+        };
+        deps.grants.save(record, { "grant.cose": bytes });
+        return { record, grant: bytes, view: supplied.view };
+    }
+    if (args.logId === undefined)
+        return problemResult("register_grant", {
+            code: "missing_input",
+            message: "pass logId (a grant issue_grant made) or grant (one signed elsewhere)",
+        });
+    const record = deps.grants.load(args.logId);
+    const grant = deps.grants.read(args.logId, "grant.cose");
+    if (grant === undefined)
+        return problemResult("register_grant", {
+            code: "corrupt_record",
+            message: `grant ${args.logId} has a record but no grant.cose`,
+        });
+    return { record, grant, view: inspectGrant(grant) };
+}
+function decodeHeaderJson(value, what) {
+    let text;
+    try {
+        text = new TextDecoder("utf-8", { fatal: true }).decode(base64ToBytes(value));
+    }
+    catch {
+        throw new PaymentError(what === "X-PAYMENT"
+            ? "invalid_payment"
+            : "invalid_payment_requirements", `${what} is not base64 of UTF-8 text`);
+    }
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new PaymentError(what === "X-PAYMENT"
+            ? "invalid_payment"
+            : "invalid_payment_requirements", `${what} is not base64 of JSON`);
+    }
+}
+function requirementsView(required) {
+    return {
+        accepts: required.accepts,
+        ...(required.resource !== undefined
+            ? { resource: required.resource }
+            : {}),
+    };
+}
+/**
+ * No lock: paying twice for one grant is prevented by the nonce, not by
+ * serialising calls. Every authorisation this server signs for a grant
+ * carries `grantPaymentNonce(grant content, payer)`, so overlapping calls,
+ * a retry after a lost answer and other processes sharing the payer all
+ * sign the same nonce, and EIP-3009 settles at most one authorisation per
+ * (payer, nonce). The daily cap is approximate under concurrency: calls that
+ * pass the check before either records its payment can overshoot it by at
+ * most one per-call cap each.
+ */
+export function makeRegisterGrantTool(deps) {
+    return (args) => registerGrant(args, deps);
+}
+function registerGrant(args, deps) {
+    return guardHandler("register_grant", async () => {
+        const located = locate(args, deps);
+        if ("content" in located)
+            return located;
+        const { record, grant } = located;
+        const store = deps.grants;
+        if (record.state === "complete")
+            return completeResult(record, deps);
+        if (record.state === "accepted")
+            return advance(record, grant, deps);
+        // issued | payment_required: (re)send the registration.
+        const baseUrl = args.baseUrl ?? record.baseUrl ?? deps.env["FORESTRIE_BASE_URL"];
+        if (!baseUrl)
+            return missingInput("register_grant", "baseUrl", "FORESTRIE_BASE_URL");
+        const rootLogId = args.rootLogId ?? record.rootLogId ?? deps.env["FORESTRIE_ROOT_LOG_ID"];
+        if (!rootLogId)
+            return missingInput("register_grant", "rootLogId", "FORESTRIE_ROOT_LOG_ID");
+        if ((record.baseUrl !== undefined && record.baseUrl !== baseUrl) ||
+            (record.rootLogId !== undefined && record.rootLogId !== rootLogId))
+            return problemResult("register_grant", {
+                code: "invalid_input",
+                message: `grant ${record.logId} was already sent to ${record.baseUrl} for forest ${record.rootLogId}; it is resumed there, not moved`,
+            });
+        let parent = store.read(record.logId, "parent.cose");
+        if (args.parentGrant !== undefined || parent === undefined) {
+            const p = resolveGrant(args.parentGrant, deps, "FORESTRIE_AUTHORITY_GRANT");
+            if (p !== undefined) {
+                if (p.view.logId !== record.ownerLogId)
+                    throw new InputError(`the parent grant is for log ${p.view.logId}, but this grant's owner is ${record.ownerLogId}`);
+                parent = base64ToBytes(p.b64);
+                record.parentRequiresPayment = p.view.requiresChildPayment;
+            }
+        }
+        if (parent !== undefined && parent.length > MAX_PARENT_GRANT_BYTES)
+            throw new InputError(`the parent grant is ${parent.length} bytes; canopy reads at most ${MAX_PARENT_GRANT_BYTES}`);
+        // Without the parent as evidence canopy cannot see a payment policy;
+        // send an empty body rather than guess one.
+        const body = parent !== undefined ? registerGrantBody(parent) : new Uint8Array(0);
+        record.baseUrl = baseUrl;
+        record.rootLogId = rootLogId;
+        store.save(record, parent !== undefined ? { "parent.cose": parent } : {});
+        const grantB64 = bytesToBase64(grant);
+        const resourceUrl = registerGrantUrl(baseUrl, rootLogId);
+        const send = (payment) => postGrant({
+            baseUrl,
+            rootLogId,
+            grantB64,
+            body,
+            ...(payment !== undefined ? { payment } : {}),
+        }, { fetchImpl: deps.fetchImpl });
+        // A payment the caller relays from its own wallet.
+        let payment;
+        if (args.payment !== undefined) {
+            readPaymentPayload(decodeHeaderJson(args.payment, "X-PAYMENT"));
+            payment = { header: args.payment, via: "relay" };
+        }
+        let outcome = await sendOrReport(record, deps, () => send(payment?.header), payment);
+        if ("content" in outcome)
+            return outcome;
+        if (outcome.kind === "payment_required" && payment === undefined) {
+            const required = readPaymentRequired(decodeHeaderJson(outcome.paymentRequiredHeader, "X-PAYMENT-REQUIRED"));
+            record.paymentRequired = required;
+            record.state = "payment_required";
+            store.save(record);
+            const payer = deps.payer();
+            if (payer === undefined)
+                return ok(`payment_required: canopy asks ${describeOptions(required)} to register the grant for log ${record.logId}. No payer is configured here, so pay from your own x402 wallet: give it the paymentRequiredHeader (or the requirements), then call register_grant again with logId ${record.logId} and payment set to the X-PAYMENT value it returns.`, {
+                    state: "payment_required",
+                    logId: record.logId,
+                    resourceUrl,
+                    requirements: requirementsView(required),
+                    paymentRequiredHeader: outcome.paymentRequiredHeader,
+                    ...(outcome.problem.detail !== undefined
+                        ? { detail: outcome.problem.detail }
+                        : {}),
+                });
+            // Pay within the caps, only the canopy this server is configured for.
+            const configured = deps.env["FORESTRIE_BASE_URL"];
+            if (configured === undefined ||
+                originOf(configured) === undefined ||
+                originOf(configured) !== originOf(baseUrl))
+                return problemResult("register_grant", {
+                    code: "cap_origin",
+                    message: `this server pays only the canopy in FORESTRIE_BASE_URL (${configured ?? "unset"}), not ${baseUrl}`,
+                    requirements: requirementsView(required),
+                });
+            const caps = readPaymentCaps(deps.env);
+            const now = deps.now();
+            let option;
+            try {
+                option = selectWithinCaps(required, caps, {
+                    resourceUrl,
+                    spentTodayAtomic: deps.ledger.spentToday(now, caps.network, caps.asset),
+                });
+            }
+            catch (err) {
+                if (!(err instanceof PaymentError))
+                    throw err;
+                return problemResult("register_grant", {
+                    code: err.code,
+                    message: err.message,
+                    requirements: requirementsView(required),
+                });
+            }
+            const nonce = await grantPaymentNonce(grantContent(grant), hexToBytes(payer.address));
+            let header;
+            try {
+                header = await payer.pay({
+                    required,
+                    option,
+                    nonce,
+                    nowSeconds: Math.floor(now.getTime() / 1000),
+                });
+            }
+            catch (err) {
+                return problemResult("register_grant", {
+                    code: "payer_failed",
+                    message: `the payer (${payer.description}) did not sign the payment: ${err instanceof Error ? err.message : String(err)}. Nothing was sent or counted.`,
+                });
+            }
+            const summary = readPaymentPayload(decodeHeaderJson(header, "X-PAYMENT"));
+            if (summary.value !== option.amount ||
+                summary.to.toLowerCase() !== option.payTo.toLowerCase() ||
+                summary.network !== option.network ||
+                summary.nonce.toLowerCase() !== nonce)
+                return problemResult("register_grant", {
+                    code: "invalid_payment",
+                    message: `the payer signed ${summary.value} to ${summary.to} on ${summary.network} with nonce ${summary.nonce}, not the ${option.amount} to ${option.payTo} on ${option.network} with the grant's nonce ${nonce} it was asked for; not sending it`,
+                });
+            // Committed from here: count it, then send it. A retry re-signs with
+            // the same nonce, which the ledger counts once.
+            deps.ledger.record(now, {
+                at: now.toISOString(),
+                network: option.network,
+                asset: option.asset.toLowerCase(),
+                amount: option.amount,
+                payTo: option.payTo,
+                from: summary.from,
+                nonce: summary.nonce,
+                logId: record.logId,
+            });
+            payment = { header, via: "payer" };
+            outcome = await sendOrReport(record, deps, () => send(header), payment);
+            if ("content" in outcome)
+                return outcome;
+        }
+        if (payment !== undefined) {
+            const summary = readPaymentPayload(decodeHeaderJson(payment.header, "X-PAYMENT"));
+            if (outcome.kind === "payment_required") {
+                // canopy refused the payment presented: the next call starts from
+                // the challenge again.
+                record.state = "payment_required";
+                store.save(record);
+                return problemResult("register_grant", {
+                    code: "payment_rejected",
+                    message: `canopy refused the payment (${outcome.problem.detail ?? outcome.problem.title}). Nothing was registered${payment.via === "payer" ? "; the authorisation still counts toward today's cap until it expires unspent" : ""}.`,
+                    logId: record.logId,
+                    payment: summary,
+                });
+            }
+            record.payment = {
+                ...summary,
+                via: payment.via,
+                at: deps.now().toISOString(),
+            };
+        }
+        if (outcome.kind === "problem") {
+            store.save(record);
+            return problemResult("register_grant", {
+                ...httpProblemValue("canopy refused the grant", outcome.problem),
+                logId: record.logId,
+            });
+        }
+        if (outcome.kind === "payment_required")
+            // Only reachable with a payment present, handled above.
+            throw new Error("unreachable: payment_required after payment");
+        record.state = "accepted";
+        record.statusUrl = outcome.statusUrl;
+        record.acceptedAt = deps.now().toISOString();
+        store.save(record);
+        return ok(`accepted: canopy enqueued the grant for log ${record.logId} for sequencing under authority log ${record.ownerLogId}${record.payment ? `, paid ${record.payment.value} (${record.payment.via})` : ""}. Call register_grant again with logId ${record.logId}${outcome.retryAfterSeconds !== undefined ? ` in about ${outcome.retryAfterSeconds}s` : ""} to follow it to its receipt.`, {
+            ...record,
+            ...(outcome.retryAfterSeconds !== undefined
+                ? { retryAfterSeconds: outcome.retryAfterSeconds }
+                : {}),
+        });
+    });
+}
+/** Send, mapping a lost answer to a problem that says how to resume. */
+async function sendOrReport(record, deps, send, payment) {
+    let res;
+    try {
+        res = await send();
+    }
+    catch (err) {
+        if (!(err instanceof NetError))
+            throw err;
+        return problemResult("register_grant", {
+            code: err.code,
+            message: `${err.message}. canopy may or may not have received the grant${payment ? " and the payment" : ""}. Call register_grant again with logId ${record.logId}: ${payment?.via === "payer" ? "it signs again with the grant's own nonce, so at most one payment can settle" : payment ? "pass the same payment again" : "it is sent again unchanged"}.`,
+            logId: record.logId,
+        });
+    }
+    return readRegisterGrantResponse(res, originOf(record.baseUrl));
+}
+function describeOptions(required) {
+    return required.accepts
+        .map((o) => `${o.amount} atomic units of ${o.asset} on ${o.network}, to ${o.payTo}`)
+        .join(" or ");
+}
+/** Accepted: follow the status URL to the receipt, then complete the grant. */
+async function advance(record, grant, deps) {
+    const store = deps.grants;
+    const origin = originOf(record.baseUrl);
+    if (record.receiptUrl === undefined) {
+        const res = await getRegistrationStatus({ statusUrl: record.statusUrl }, { fetchImpl: deps.fetchImpl });
+        const status = readStatusResponse(res, origin);
+        if (status.kind === "problem")
+            return httpProblem("register_grant", "the grant's status URL answered with a problem", status.problem);
+        if (status.kind === "pending") {
+            record.firstPendingAt ??= res.at;
+            store.save(record);
+            return ok(`pending: the grant for log ${record.logId} is not yet sequenced; call register_grant again in ${status.retryAfterSeconds}s`, {
+                state: "accepted",
+                logId: record.logId,
+                retryAfterSeconds: status.retryAfterSeconds,
+                firstPendingAt: record.firstPendingAt,
+            });
+        }
+        record.receiptUrl = status.receiptUrl;
+        record.entryId = status.entryId;
+        record.massifHeight = status.massifHeight;
+        store.save(record);
+    }
+    const res = await fetchReceipt({ receiptUrl: record.receiptUrl }, { fetchImpl: deps.fetchImpl });
+    const receipt = readReceiptResponse(res);
+    if (receipt.kind === "problem")
+        return httpProblem("register_grant", "the grant's receipt URL answered with a problem", receipt.problem);
+    if (receipt.kind === "awaiting_seal")
+        return ok(`awaiting_seal: the grant is sequenced as entry ${record.entryId} in authority log ${record.ownerLogId}; canopy says "${receipt.reason}". It seals once that log's sealing is delegated (delegate_sealing with as: "authority"); call register_grant again in about a minute.`, {
+            state: "accepted",
+            sealed: false,
+            logId: record.logId,
+            entryId: record.entryId,
+            receiptUrl: record.receiptUrl,
+            reason: receipt.reason,
+        });
+    const completed = completeGrant(grant, receipt.receipt, record.entryId);
+    record.state = "complete";
+    record.completedAt = deps.now().toISOString();
+    store.save(record, {
+        "receipt.cose": receipt.receipt,
+        "completed.cose": completed,
+    });
+    return completeResult(record, deps);
+}
+async function completeResult(record, deps) {
+    const completed = deps.grants.read(record.logId, "completed.cose");
+    if (completed === undefined)
+        return problemResult("register_grant", {
+            code: "corrupt_record",
+            message: `grant ${record.logId} is marked complete but has no completed.cose`,
+        });
+    const logKey = await (await deps.signer()).publicKeyXY();
+    const namesThisServer = record.granteeHex === toHex(logKey);
+    return ok(`complete: the grant for log ${record.logId} is sealed (entry ${record.entryId}) and completed with its receipt. ${namesThisServer ? "It names this server's log key: pass grantBase64 as grant to delegate_sealing, then to register_statement (or set FORESTRIE_GRANT to it)." : "It names another key: give grantBase64 to the performer holding that key."}`, {
+        ...record,
+        grantBase64: bytesToBase64(completed),
+        namesThisServer,
+    });
+}
+//# sourceMappingURL=grant-tools.js.map

package/dist/node/grant-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-tools.js","sourceRoot":"","sources":["../../src/node/grant-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAkB,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAEvC,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QACjC,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnD,OAAO,GAAG,CAAC;AACb,CAAC;AACD,OAAO,EACL,sBAAsB,EACtB,aAAa,EACb,YAAY,EACZ,eAAe,EACf,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,QAAQ,EACR,mBAAmB,EACnB,yBAAyB,EACzB,kBAAkB,GAEnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,GAEjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EACL,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,EAAE,EACF,aAAa,EACb,YAAY,GAIb,MAAM,YAAY,CAAC;AAEpB,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,QAAQ,CACP,oLAAoL,CACrL,CAAC;AAEJ,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,EAAE;KACR,KAAK,CAAC,gEAAgE,CAAC;KACvE,QAAQ,CAAC,kCAAkC,CAAC,CAAC;AAEhD,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CACP,sIAAsI,CACvI;IACH,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,iIAAiI,CAClI;IACH,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACpC,8DAA8D,CAC/D;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACpC,8GAA8G,CAC/G;IACD,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACpC,0EAA0E,CAC3E;IACD,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,2HAA2H,CAC5H;IACH,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,2FAA2F,CAC5F;CACJ,CAAC;AAEF,8EAA8E;AAE9E,MAAM,UAAU,kBAAkB,CAAC,IAAkB;IACnD,OAAO,CAAC,IAAuC,EAAE,EAAE,CACjD,YAAY,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,MAAM,GAAG,YAAY,CACzB,IAAI,CAAC,WAAW,EAChB,IAAI,EACJ,2BAA2B,CAC5B,CAAC;QACF,IAAI,CAAC,MAAM;YACT,OAAO,YAAY,CACjB,aAAa,EACb,aAAa,EACb,2BAA2B,CAC5B,CAAC;QACJ,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,mBAAmB,CAClC,MAAM,CAAC,IAAI,EACX,MAAM,SAAS,CAAC,WAAW,EAAE,CAC9B,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YACrB,OAAO,aAAa,CAAC,aAAa,EAAE;gBAClC,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC5B,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;aAC9B,CAAC,CAAC;QAEL,IAAI,OAAmB,CAAC;QACxB,IAAI,SAAiB,CAAC;QACtB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACpD,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE;gBACvB,MAAM,IAAI,UAAU,CAClB,4CAA4C,OAAO,CAAC,MAAM,GAAG,CAC9D,CAAC;YACJ,SAAS,GAAG,kBAAkB,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACpD,SAAS,GAAG,uBAAuB,CAAC;QACtC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YACxB,OAAO,aAAa,CAAC,aAAa,EAAE;gBAClC,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,mBAAmB,KAAK,wFAAwF;gBACzH,KAAK;aACN,CAAC,CAAC;QAEL,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC;YACE,KAAK;YACL,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;YAC7B,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,EACD,SAAS,CACV,CAAC;QACF,MAAM,MAAM,GAAgB;YAC1B,KAAK;YACL,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;YAC7B,KAAK,EAAE,QAAQ;YACf,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC;YAC1B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7B,qBAAqB,EAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB;YACvD,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;SACnC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE;YACvB,YAAY,EAAE,MAAM,CAAC,KAAK;YAC1B,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;SACzC,CAAC,CAAC;QACH,OAAO,EAAE,CACP,6CAA6C,KAAK,wBAAwB,MAAM,CAAC,UAAU,YAAY,SAAS,eAAe,IAAI,CAAC,SAAS,uBAAuB,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,6DAA6D,CAAC,CAAC,CAAC,EAAE,wCAAwC,EAC7S;YACE,GAAG,MAAM;YACT,OAAO,EAAE,SAAS;YAClB,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;SACzC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAUD,4EAA4E;AAC5E,SAAS,MAAM,CACb,IAA0C,EAC1C,IAAkB;IAElB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAE,CAAC;QACjD,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;YAClD,MAAM,IAAI,UAAU,CAClB,wBAAwB,KAAK,0BAA0B,IAAI,CAAC,KAAK,GAAG,CACrE,CAAC;QACJ,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YACrD,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC;gBACxD,OAAO,aAAa,CAAC,gBAAgB,EAAE;oBACrC,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,6BAA6B,KAAK,0DAA0D;oBACrG,KAAK;iBACN,CAAC,CAAC;YACL,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;gBAC/B,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE,QAAQ,CAAC,IAAI;aACpB,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAgB;YAC1B,KAAK;YACL,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;YACpC,KAAK,EAAE,QAAQ;YACf,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;YAC1C,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE;gBACxC,CAAC,CAAC,EAAE,CAAC;YACP,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;YAChC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;SACnC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAC1B,OAAO,aAAa,CAAC,gBAAgB,EAAE;YACrC,IAAI,EAAE,eAAe;YACrB,OAAO,EACL,uEAAuE;SAC1E,CAAC,CAAC;IACL,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACzD,IAAI,KAAK,KAAK,SAAS;QACrB,OAAO,aAAa,CAAC,gBAAgB,EAAE;YACrC,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,SAAS,IAAI,CAAC,KAAK,iCAAiC;SAC9D,CAAC,CAAC;IACL,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,IAAY;IACnD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CACrD,aAAa,CAAC,KAAK,CAAC,CACrB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CACpB,IAAI,KAAK,WAAW;YAClB,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,8BAA8B,EAClC,GAAG,IAAI,8BAA8B,CACtC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CACpB,IAAI,KAAK,WAAW;YAClB,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,8BAA8B,EAClC,GAAG,IAAI,wBAAwB,CAChC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAyB;IACjD,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;YACjC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAkB;IACtD,OAAO,CAAC,IAA0C,EAAE,EAAE,CACpD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,aAAa,CACpB,IAA0C,EAC1C,IAAkB;IAElB,OAAO,YAAY,CAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,SAAS,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QACzC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAE1B,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;YAAE,OAAO,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;YAAE,OAAO,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAErE,wDAAwD;QACxD,MAAM,OAAO,GACX,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACnE,IAAI,CAAC,OAAO;YACV,OAAO,YAAY,CAAC,gBAAgB,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;QACzE,MAAM,SAAS,GACb,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QAC1E,IAAI,CAAC,SAAS;YACZ,OAAO,YAAY,CACjB,gBAAgB,EAChB,WAAW,EACX,uBAAuB,CACxB,CAAC;QACJ,IACE,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC;YAC5D,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC;YAElE,OAAO,aAAa,CAAC,gBAAgB,EAAE;gBACrC,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,SAAS,MAAM,CAAC,KAAK,wBAAwB,MAAM,CAAC,OAAO,eAAe,MAAM,CAAC,SAAS,kCAAkC;aACtI,CAAC,CAAC;QAEL,IAAI,MAAM,GAA2B,KAAK,CAAC,IAAI,CAC7C,MAAM,CAAC,KAAK,EACZ,aAAa,CACd,CAAC;QACF,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3D,MAAM,CAAC,GAAG,YAAY,CACpB,IAAI,CAAC,WAAW,EAChB,IAAI,EACJ,2BAA2B,CAC5B,CAAC;YACF,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpB,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,UAAU;oBACpC,MAAM,IAAI,UAAU,CAClB,+BAA+B,CAAC,CAAC,IAAI,CAAC,KAAK,+BAA+B,MAAM,CAAC,UAAU,EAAE,CAC9F,CAAC;gBACJ,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC9B,MAAM,CAAC,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,sBAAsB;YAChE,MAAM,IAAI,UAAU,CAClB,uBAAuB,MAAM,CAAC,MAAM,gCAAgC,sBAAsB,EAAE,CAC7F,CAAC;QACJ,qEAAqE;QACrE,4CAA4C;QAC5C,MAAM,IAAI,GACR,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAEvE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAE1E,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,CAAC,OAAgB,EAAE,EAAE,CAChC,SAAS,CACP;YACE,OAAO;YACP,SAAS;YACT,QAAQ;YACR,IAAI;YACJ,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,EACD,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAC9B,CAAC;QAEJ,mDAAmD;QACnD,IAAI,OAA+D,CAAC;QACpE,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,kBAAkB,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;YAChE,OAAO,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;QACnD,CAAC;QAED,IAAI,OAAO,GAAG,MAAM,YAAY,CAC9B,MAAM,EACN,IAAI,EACJ,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAC3B,OAAO,CACR,CAAC;QACF,IAAI,SAAS,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAEzC,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACjE,MAAM,QAAQ,GAAG,mBAAmB,CAClC,gBAAgB,CAAC,OAAO,CAAC,qBAAqB,EAAE,oBAAoB,CAAC,CACtE,CAAC;YACF,MAAM,CAAC,eAAe,GAAG,QAAQ,CAAC;YAClC,MAAM,CAAC,KAAK,GAAG,kBAAkB,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEnB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,KAAK,KAAK,SAAS;gBACrB,OAAO,EAAE,CACP,iCAAiC,eAAe,CAAC,QAAQ,CAAC,kCAAkC,MAAM,CAAC,KAAK,uKAAuK,MAAM,CAAC,KAAK,qDAAqD,EAChV;oBACE,KAAK,EAAE,kBAAkB;oBACzB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,WAAW;oBACX,YAAY,EAAE,gBAAgB,CAAC,QAAQ,CAAC;oBACxC,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;oBACpD,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;wBACtC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE;wBACpC,CAAC,CAAC,EAAE,CAAC;iBACR,CACF,CAAC;YAEJ,sEAAsE;YACtE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAClD,IACE,UAAU,KAAK,SAAS;gBACxB,QAAQ,CAAC,UAAU,CAAC,KAAK,SAAS;gBAClC,QAAQ,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,OAAO,CAAC;gBAE1C,OAAO,aAAa,CAAC,gBAAgB,EAAE;oBACrC,IAAI,EAAE,YAAY;oBAClB,OAAO,EAAE,2DAA2D,UAAU,IAAI,OAAO,UAAU,OAAO,EAAE;oBAC5G,YAAY,EAAE,gBAAgB,CAAC,QAAQ,CAAC;iBACzC,CAAC,CAAC;YACL,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE;oBACxC,WAAW;oBACX,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CACtC,GAAG,EACH,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,KAAK,CACX;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,CAAC,GAAG,YAAY,YAAY,CAAC;oBAAE,MAAM,GAAG,CAAC;gBAC9C,OAAO,aAAa,CAAC,gBAAgB,EAAE;oBACrC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,YAAY,EAAE,gBAAgB,CAAC,QAAQ,CAAC;iBACzC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CACnC,YAAY,CAAC,KAAK,CAAC,EACnB,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAC1B,CAAC;YACF,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC;oBACvB,QAAQ;oBACR,MAAM;oBACN,KAAK;oBACL,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;iBAC7C,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,aAAa,CAAC,gBAAgB,EAAE;oBACrC,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,cAAc,KAAK,CAAC,WAAW,+BAA+B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,gCAAgC;iBACxJ,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,kBAAkB,CAChC,gBAAgB,CAAC,MAAM,EAAE,WAAW,CAAC,CACtC,CAAC;YACF,IACE,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,MAAM;gBAC/B,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE;gBACvD,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;gBAClC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK;gBAErC,OAAO,aAAa,CAAC,gBAAgB,EAAE;oBACrC,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,oBAAoB,OAAO,CAAC,KAAK,OAAO,OAAO,CAAC,EAAE,OAAO,OAAO,CAAC,OAAO,eAAe,OAAO,CAAC,KAAK,aAAa,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,KAAK,OAAO,MAAM,CAAC,OAAO,2BAA2B,KAAK,mCAAmC;iBACnP,CAAC,CAAC;YACL,qEAAqE;YACrE,gDAAgD;YAChD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE;gBACtB,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE;gBACjC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC,CAAC;YACH,OAAO,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;YACnC,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;YACxE,IAAI,SAAS,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;QAC3C,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,kBAAkB,CAChC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAC9C,CAAC;YACF,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACxC,kEAAkE;gBAClE,uBAAuB;gBACvB,MAAM,CAAC,KAAK,GAAG,kBAAkB,CAAC;gBAClC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACnB,OAAO,aAAa,CAAC,gBAAgB,EAAE;oBACrC,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,+BAA+B,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,4BAA4B,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,8EAA8E,CAAC,CAAC,CAAC,EAAE,GAAG;oBACnO,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,OAAO,EAAE,OAAO;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,OAAO,GAAG;gBACf,GAAG,OAAO;gBACV,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;aAC7B,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO,aAAa,CAAC,gBAAgB,EAAE;gBACrC,GAAG,gBAAgB,CAAC,0BAA0B,EAAE,OAAO,CAAC,OAAO,CAAC;gBAChE,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB;YACrC,wDAAwD;YACxD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAEjE,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC;QAC1B,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACrC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO,EAAE,CACP,+CAA+C,MAAM,CAAC,KAAK,uCAAuC,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,0CAA0C,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,EAAE,+BAA+B,EACpX;YACE,GAAG,MAAM;YACT,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS;gBACzC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;SACR,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wEAAwE;AACxE,KAAK,UAAU,YAAY,CACzB,MAAmB,EACnB,IAAkB,EAClB,IAAwC,EACxC,OAA+C;IAE/C,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,IAAI,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,QAAQ,CAAC;YAAE,MAAM,GAAG,CAAC;QAC1C,OAAO,aAAa,CAAC,gBAAgB,EAAE;YACrC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,kDAAkD,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,0CAA0C,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,8EAA8E,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,4BAA4B,GAAG;YAC1V,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,yBAAyB,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAQ,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,eAAe,CAAC,QAAyB;IAChD,OAAO,QAAQ,CAAC,OAAO;SACpB,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,GAAG,CAAC,CAAC,MAAM,oBAAoB,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,KAAK,EAAE,CAC1E;SACA,IAAI,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,KAAK,UAAU,OAAO,CACpB,MAAmB,EACnB,KAAiB,EACjB,IAAkB;IAElB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAQ,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,qBAAqB,CACrC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAU,EAAE,EAChC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAC9B,CAAC;QACF,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAC3B,OAAO,WAAW,CAChB,gBAAgB,EAChB,gDAAgD,EAChD,MAAM,CAAC,OAAO,CACf,CAAC;QACJ,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,CAAC,cAAc,KAAK,GAAG,CAAC,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO,EAAE,CACP,8BAA8B,MAAM,CAAC,KAAK,uDAAuD,MAAM,CAAC,iBAAiB,GAAG,EAC5H;gBACE,KAAK,EAAE,UAAU;gBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,cAAc,EAAE,MAAM,CAAC,cAAc;aACtC,CACF,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACtC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAChC,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,YAAY,CAC5B,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EACjC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAC9B,CAAC;IACF,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAC5B,OAAO,WAAW,CAChB,gBAAgB,EAChB,iDAAiD,EACjD,OAAO,CAAC,OAAO,CAChB,CAAC;IACJ,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe;QAClC,OAAO,EAAE,CACP,kDAAkD,MAAM,CAAC,OAAO,qBAAqB,MAAM,CAAC,UAAU,kBAAkB,OAAO,CAAC,MAAM,wIAAwI,EAC9Q;YACE,KAAK,EAAE,UAAU;YACjB,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CACF,CAAC;IACJ,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,OAAQ,CAAC,CAAC;IACzE,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC;IAC1B,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;QACjB,cAAc,EAAE,OAAO,CAAC,OAAO;QAC/B,gBAAgB,EAAE,SAAS;KAC5B,CAAC,CAAC;IACH,OAAO,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,MAAmB,EACnB,IAAkB;IAElB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACnE,IAAI,SAAS,KAAK,SAAS;QACzB,OAAO,aAAa,CAAC,gBAAgB,EAAE;YACrC,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,SAAS,MAAM,CAAC,KAAK,+CAA+C;SAC9E,CAAC,CAAC;IACL,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5D,OAAO,EAAE,CACP,+BAA+B,MAAM,CAAC,KAAK,qBAAqB,MAAM,CAAC,OAAO,qCAAqC,eAAe,CAAC,CAAC,CAAC,2IAA2I,CAAC,CAAC,CAAC,2EAA2E,EAAE,EAChW;QACE,GAAG,MAAM;QACT,WAAW,EAAE,aAAa,CAAC,SAAS,CAAC;QACrC,eAAe;KAChB,CACF,CAAC;AACJ,CAAC"}

package/dist/node/ledger.d.ts

@@ -0,0 +1,26 @@
+export interface LedgerEntry {
+    at: string;
+    network: string;
+    asset: string;
+    amount: string;
+    payTo: string;
+    from: string;
+    nonce: string;
+    /** The child log whose grant the payment is for. */
+    logId: string;
+}
+export declare class SpendLedger {
+    readonly root: string;
+    constructor(root: string);
+    private file;
+    static day(now: Date): string;
+    entries(now: Date): LedgerEntry[];
+    /**
+     * Atomic units committed today on this network and asset. Each nonce
+     * counts once: a retry re-signs a grant's payment with the same nonce,
+     * and at most one authorisation per nonce can ever settle.
+     */
+    spentToday(now: Date, network: string, asset: string): bigint;
+    record(now: Date, entry: LedgerEntry): void;
+}
+//# sourceMappingURL=ledger.d.ts.map

package/dist/node/ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../../src/node/ledger.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,WAAW;IACV,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;IAEjC,OAAO,CAAC,IAAI;IAIZ,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,GAAG,MAAM;IAI7B,OAAO,CAAC,GAAG,EAAE,IAAI,GAAG,WAAW,EAAE;IA2BjC;;;;OAIG;IACH,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAa7D,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI;CAe5C"}

package/dist/node/ledger.js

@@ -0,0 +1,78 @@
+/**
+ * What the payer backend has committed, per UTC day:
+ * `<home>/payments/<YYYY-MM-DD>.jsonl`, one line per signed authorisation.
+ *
+ * An entry is written BEFORE the payment is sent: once signed, an
+ * authorisation can be settled whether or not this server ever sees
+ * canopy's answer, so the daily cap counts every authorisation signed, not
+ * only the ones known to have settled. The cap is approximate under
+ * concurrency: two calls can both pass the check before either is written.
+ */
+import { appendFileSync, mkdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { StoreError } from "./store.js";
+export class SpendLedger {
+    root;
+    constructor(root) {
+        this.root = root;
+    }
+    file(day) {
+        return join(this.root, "payments", `${day}.jsonl`);
+    }
+    static day(now) {
+        return now.toISOString().slice(0, 10);
+    }
+    entries(now) {
+        let text;
+        try {
+            text = readFileSync(this.file(SpendLedger.day(now)), "utf8");
+        }
+        catch (err) {
+            if (err.code === "ENOENT")
+                return [];
+            throw new StoreError("store_failed", `cannot read the spend ledger: ${err.message}`);
+        }
+        const out = [];
+        for (const line of text.split("\n")) {
+            if (line.trim() === "")
+                continue;
+            try {
+                out.push(JSON.parse(line));
+            }
+            catch {
+                // Refuse rather than guess: an unreadable line could be a payment.
+                throw new StoreError("corrupt_record", `the spend ledger ${this.file(SpendLedger.day(now))} has a line that is not JSON; fix or remove it before paying again`);
+            }
+        }
+        return out;
+    }
+    /**
+     * Atomic units committed today on this network and asset. Each nonce
+     * counts once: a retry re-signs a grant's payment with the same nonce,
+     * and at most one authorisation per nonce can ever settle.
+     */
+    spentToday(now, network, asset) {
+        let total = 0n;
+        const seen = new Set();
+        for (const e of this.entries(now)) {
+            if (e.network !== network || e.asset.toLowerCase() !== asset)
+                continue;
+            const key = `${e.from.toLowerCase()} ${e.nonce.toLowerCase()}`;
+            if (seen.has(key))
+                continue;
+            seen.add(key);
+            total += BigInt(e.amount);
+        }
+        return total;
+    }
+    record(now, entry) {
+        try {
+            mkdirSync(join(this.root, "payments"), { recursive: true, mode: 0o700 });
+            appendFileSync(this.file(SpendLedger.day(now)), JSON.stringify(entry) + "\n", { mode: 0o600 });
+        }
+        catch (err) {
+            throw new StoreError("store_failed", `cannot write the spend ledger: ${err.message}`);
+        }
+    }
+}
+//# sourceMappingURL=ledger.js.map

package/dist/node/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../src/node/ledger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAcxC,MAAM,OAAO,WAAW;IACD;IAArB,YAAqB,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAE7B,IAAI,CAAC,GAAW;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,GAAG,QAAQ,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,GAAS;QAClB,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,CAAC,GAAS;QACf,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAChE,MAAM,IAAI,UAAU,CAClB,cAAc,EACd,iCAAkC,GAAa,CAAC,OAAO,EAAE,CAC1D,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAkB,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,SAAS;YACjC,IAAI,CAAC;gBACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;gBACnE,MAAM,IAAI,UAAU,CAClB,gBAAgB,EAChB,oBAAoB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,oEAAoE,CACxH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,GAAS,EAAE,OAAe,EAAE,KAAa;QAClD,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK;gBAAE,SAAS;YACvE,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/D,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,GAAS,EAAE,KAAkB;QAClC,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzE,cAAc,CACZ,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAC/B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAC5B,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,UAAU,CAClB,cAAc,EACd,kCAAmC,GAAa,CAAC,OAAO,EAAE,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}