@ftptech/canton-agent-wallet 2.1.0 → 2.3.0

package/dist/quest-fund.js

@@ -1,355 +0,0 @@
-/**
- * Quest-funded bootstrap client.
- *
- * WHY this exists: a bare public faucet that hands free CC to any fresh party is
- * farmable — a bot mints parties in a loop and drains it. So the raw facilitator
- * faucet is locked to the pay-proxy, and the ONLY way to get CC out of it is the
- * pay-proxy's quest flow, which binds the grant to a REAL x402 payment: it mints a
- * wallet, faucets it, immediately spends the bulk on a CanTrust image call, and
- * leaves the small change. An abuser therefore cannot extract the full grant — to
- * get the change they must make (and pay for) a real on-ledger transaction, which
- * is exactly the work we want, not free money.
- *
- * `auto_fund` uses this instead of a bare faucet: it runs the quest, then imports
- * the returned wallet key so the agent SELF-CUSTODIES the funded wallet (it holds
- * the private key afterwards; the pay-proxy holds nothing). The agent ends with a
- * funded wallet + a made image, having spent no human effort.
- *
- * The flow is the pay-proxy 2-step (both async POST→poll, because each leg has a
- * multi-second on-ledger tail):
- *   STEP 1  POST /v1/quest/wallet/create           → 202 { walletJobId }
- *           GET  /v1/quest/wallet/result?walletJobId → funded { secret, walletToken }
- *   STEP 2  POST /v1/quest/wallet/pay { walletToken } → 202 { payJobId }
- *           GET  /v1/quest/wallet/pay-result?payJobId → done { updateId, image, balanceCc }
- */
-import { agentKeyFromPrivatePem } from "./keys.js";
-import { ensureWallet } from "./onboard.js";
-import { loadWallet, saveWallet, walletDir } from "./store.js";
-import { mkdirSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
-import { RelayClient } from "./relay-client.js";
-/** A quest leg failed or the flow could not complete. `auto_fund` catches this
- *  and falls back to the manual-funding ask, so a pay-proxy hiccup never turns
- *  into a hard tool error. */
-/**
- * `recoverable` is set when the quest failed AFTER step 1 handed us a real
- * party and its private key. Losing that key loses custody of whatever the
- * faucet already put on that party — the throw used to discard it, and the CLI
- * then told the operator to ask their owner for CC while the grant sat on a
- * party nobody could act as any more.
- */
-export class QuestFundError extends Error {
-    constructor(message, recoverable) {
-        super(message);
-        this.name = "QuestFundError";
-        if (recoverable) {
-            Object.defineProperty(this, "recoverable", {
-                value: recoverable,
-                enumerable: false,
-                writable: false,
-                configurable: false,
-            });
-        }
-    }
-}
-/**
- * The parsed body, or undefined when the answer was not a readable JSON result.
- *
- * The distinction is the point. A reverse proxy in front of the pay-proxy
- * answers a restart or an upstream hiccup with a 502/504 HTML page, and a
- * rate-limiter answers 429 — none of which is the job telling us anything. The
- * old version flattened all of it to `{}`, which matched neither "pending" nor
- * the terminal status, so a poll that could not be read was reported as "the
- * quest failed" on the very first blip, with 39 polls of budget still unused.
- * The two POSTs in this file check `status !== 202` correctly; the rule was
- * simply dropped on the reads that decide the outcome.
- */
-async function jsonOf(r) {
-    if (!r.ok)
-        return undefined;
-    const text = await r.text();
-    try {
-        return JSON.parse(text) ?? undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-/**
- * Run the pay-proxy quest and return a funded wallet (key + change + image).
- * Throws QuestFundError on any refusal / timeout — never a partial state.
- */
-export async function questFund(opts) {
-    const base = opts.payProxyUrl.replace(/\/$/, "");
-    const doFetch = opts.fetchImpl ?? fetch;
-    const pollMs = opts.pollMs ?? 3000;
-    const maxPolls = opts.maxPolls ?? 40;
-    const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
-    // --- STEP 1: create ---
-    const createRes = await doFetch(`${base}/v1/quest/wallet/create`, {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: "{}",
-    });
-    if (createRes.status !== 202) {
-        throw new QuestFundError(`quest create returned ${createRes.status} (expected 202)`);
-    }
-    const walletJobId = (await jsonOf(createRes))?.walletJobId;
-    if (typeof walletJobId !== "string" || !walletJobId) {
-        throw new QuestFundError("quest create returned no walletJobId");
-    }
-    // --- STEP 1 poll: result ---
-    let funded;
-    for (let i = 0; i < maxPolls; i++) {
-        await sleep(pollMs);
-        const r = await doFetch(`${base}/v1/quest/wallet/result?walletJobId=${encodeURIComponent(walletJobId)}`);
-        const body = await jsonOf(r);
-        // Unreadable answer: not a verdict. Keep polling with the budget we have.
-        if (!body)
-            continue;
-        if (body.status === "pending")
-            continue;
-        if (body.status === "funded") {
-            funded = body;
-            break;
-        }
-        throw new QuestFundError(`quest STEP 1 failed: ${String(body.error ?? body.status ?? "unknown")}`);
-    }
-    if (!funded)
-        throw new QuestFundError("quest STEP 1 timed out");
-    const secret = funded.secret;
-    const walletToken = funded.walletToken;
-    const party = funded.party;
-    const network = funded.network;
-    if (typeof secret !== "string" ||
-        typeof walletToken !== "string" ||
-        typeof party !== "string") {
-        throw new QuestFundError("quest STEP 1 returned an incomplete funded body");
-    }
-    // --- STEP 2: pay (faucet + CanTrust image + change, on the minted wallet) ---
-    const payRes = await doFetch(`${base}/v1/quest/wallet/pay`, {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-            walletToken,
-            ...(opts.prompt !== undefined ? { prompt: opts.prompt } : {}),
-        }),
-    });
-    if (payRes.status !== 202) {
-        throw new QuestFundError(`quest pay returned ${payRes.status} (expected 202)`);
-    }
-    const payJobId = (await jsonOf(payRes))?.payJobId;
-    if (typeof payJobId !== "string" || !payJobId) {
-        throw new QuestFundError("quest pay returned no payJobId");
-    }
-    // --- STEP 2 poll: pay-result ---
-    let done;
-    for (let i = 0; i < maxPolls; i++) {
-        await sleep(pollMs);
-        const r = await doFetch(`${base}/v1/quest/wallet/pay-result?payJobId=${encodeURIComponent(payJobId)}`);
-        const body = await jsonOf(r);
-        if (!body)
-            continue;
-        if (body.status === "pending")
-            continue;
-        if (body.status === "done") {
-            done = body;
-            break;
-        }
-        throw new QuestFundError(`quest STEP 2 failed: ${String(body.error ?? body.status ?? "unknown")}`, { secret, party, network: typeof network === "string" ? network : "canton:mainnet" });
-    }
-    if (!done) {
-        throw new QuestFundError("quest STEP 2 timed out", {
-            secret,
-            party,
-            network: typeof network === "string" ? network : "canton:mainnet",
-        });
-    }
-    return {
-        secret,
-        party,
-        network: typeof network === "string" ? network : "canton:mainnet",
-        balanceCc: typeof done.balanceCc === "string" ? done.balanceCc : undefined,
-        updateId: typeof done.updateId === "string" ? done.updateId : undefined,
-        image: typeof done.image === "string" ? done.image : undefined,
-    };
-}
-/**
- * Persist a key rescued from a failed quest, beside the wallet but never AS the
- * wallet.
- *
- * EXPORTED because the MCP server runs the same quest through the lower-level
- * `questFund` and needs the same rescue. It had none: the only copy of the
- * private key rode away inside the thrown Error and was collected, leaving
- * faucet CC on a MainNet party nobody can spend. One rescue, one place. Overwriting wallet.json here would destroy the private key of an
- * existing wallet on an error path — the exact loss this rescue exists to
- * prevent, aimed at the other wallet. The party goes in the filename so two
- * rescues cannot silently overwrite each other.
- */
-export function writeRescueKey(secret, party, _network) {
-    const d = walletDir();
-    mkdirSync(d, { recursive: true, mode: 0o700 });
-    const safe = party.replace(/[^A-Za-z0-9_.-]/g, "_").slice(0, 80);
-    const p = join(d, `rescued-key-${safe}.pem`);
-    writeFileSync(p, secret.endsWith("\n") ? secret : secret + "\n", { mode: 0o600 });
-    return p;
-}
-/**
- * Bootstrap a funded self-custody wallet through the quest (mint → grant →
- * CanTrust payment → change) and INSTALL it (`saveWallet`) so the caller owns the
- * key. This is the ONLY non-farmable funding path: the grant is inseparable from a
- * real payment, so an abuser gets only the small change, not free CC.
- *
- * NO-CLOBBER: if a wallet already exists AND holds a balance, it is NEVER replaced
- * — the existing wallet is returned as `already_funded`. Only an absent or empty
- * wallet home is bootstrapped. Throws QuestFundError on quest failure (the caller
- * decides the fallback, e.g. manual funding).
- */
-export async function fundViaQuest(opts) {
-    const load = opts.loadWalletImpl ?? loadWallet;
-    const balanceOf = opts.balanceOf ??
-        (async (relayUrl, party) => (await new RelayClient({ relayUrl }).balance(party)).cc);
-    const pendingOf = opts.pendingOf ??
-        (async (relayUrl, party) => (await new RelayClient({ relayUrl }).pending(party)).pending);
-    const existing = load();
-    if (existing) {
-        // UNREADABLE IS NOT EMPTY.
-        //
-        // The guard below is the only thing standing between an existing wallet
-        // and `saveWallet` overwriting it — and overwriting wallet.json destroys
-        // the private key, which is the one thing here that cannot be undone. The
-        // old code caught the balance read into `cc = "0"` and commented that as
-        // "treat as empty and proceed to bootstrap": a relay blip, a DNS hiccup or
-        // any 5xx therefore looked exactly like an empty wallet, and the key of a
-        // wallet holding real CC was replaced.
-        //
-        // A wallet is only ever replaced when we KNOW it is empty. If the balance
-        // cannot be read we refuse and say so; the caller retries when the relay
-        // is back, and nothing was lost in the meantime.
-        let cc;
-        try {
-            cc = await balanceOf(opts.relayUrl, existing.party);
-        }
-        catch (err) {
-            throw new QuestFundError(`a wallet already exists (${existing.party}) but its balance could not ` +
-                `be read (${err instanceof Error ? err.message : String(err)}) — ` +
-                `refusing to overwrite it, because an unreadable balance is not an ` +
-                `empty one and replacing the wallet would destroy its private key. ` +
-                `Retry once the relay is reachable.`);
-        }
-        if (Number(cc) > 0) {
-            return { kind: "already_funded", party: existing.party, balanceCc: cc };
-        }
-        // A BALANCE OF ZERO IS NOT PROOF OF AN EMPTY WALLET.
-        //
-        // The relay's /balance counts `Splice.Amulet:Amulet` contracts and nothing
-        // else (facilitator routes/wallet.ts scopes the query to that template on
-        // purpose). CC that someone has SENT to this party but that nobody has
-        // accepted yet is not an Amulet — it is a pending TransferInstruction, and
-        // it reads as 0.0000000000 here.
-        //
-        // That is the normal state of an agent wallet, not an exotic one: an agent
-        // has no TransferPreapproval, which is precisely why a separate `claim`
-        // step exists ("run after the owner has sent CC"). So the window between
-        // "owner sent the funds" and "agent accepted them" is exactly the window in
-        // which this guard called the wallet empty and `saveWallet` destroyed the
-        // private key of the party those funds are addressed to. The CC stays on
-        // the ledger, addressed to a party nobody can act as any more.
-        //
-        // Same rule as the balance read above, applied to the other half of the
-        // question: unreadable is not empty, and neither is unclaimed.
-        let pending;
-        try {
-            pending = await pendingOf(opts.relayUrl, existing.party);
-        }
-        catch (err) {
-            throw new QuestFundError(`a wallet already exists (${existing.party}) and reads as empty, but ` +
-                `its pending incoming transfers could not be read (${err instanceof Error ? err.message : String(err)}) — refusing to overwrite it, because a balance of zero only proves ` +
-                `there are no ACCEPTED funds. Retry once the relay is reachable.`);
-        }
-        if (pending.length > 0) {
-            const total = pending
-                .reduce((sum, p) => sum + Number(p.amount ?? 0), 0)
-                .toFixed(10);
-            throw new QuestFundError(`a wallet already exists (${existing.party}) with ${pending.length} ` +
-                `unaccepted incoming transfer(s) totalling ${total} CC — refusing to ` +
-                `overwrite it, because replacing the wallet would destroy the private ` +
-                `key those funds are addressed to and they could never be claimed. ` +
-                `Run \`claim\` to accept them first.`);
-        }
-    }
-    const runQuest = opts.questFundImpl ?? questFund;
-    const rescueKey = opts.rescueKeyImpl ?? writeRescueKey;
-    let funded;
-    try {
-        funded = await runQuest({
-            payProxyUrl: opts.payProxyUrl,
-            ...(opts.prompt !== undefined ? { prompt: opts.prompt } : {}),
-            ...(opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}),
-        });
-    }
-    catch (err) {
-        // A QUEST THAT FAILS PAST STEP 1 STILL LEFT US HOLDING A KEY.
-        //
-        // Step 2 is the leg that faucets, accepts and spends, so by the time it can
-        // fail the party may already hold real CC. Letting the exception carry the
-        // only copy of its private key away turned a recoverable interruption into
-        // funds nobody can ever move. We write the key out and name the file in the
-        // error — deliberately NOT into wallet.json, which may hold another wallet
-        // whose own key must not be destroyed by an error path.
-        const rec = err instanceof QuestFundError ? err.recoverable : undefined;
-        if (!rec)
-            throw err;
-        let where;
-        try {
-            where = rescueKey(rec.secret, rec.party, rec.network);
-        }
-        catch (writeErr) {
-            throw new QuestFundError(`${err.message} — and the funded party's key could NOT be ` +
-                `written to disk (${writeErr instanceof Error ? writeErr.message : String(writeErr)}). Party ${rec.party} may hold CC that is now unreachable; capture ` +
-                `the key from this process before it exits.`, rec);
-        }
-        throw new QuestFundError(`${err.message} — the funded party's key was saved to ${where}. ` +
-            `Party ${rec.party} may already hold CC: run ` +
-            `\`canton-agent-wallet import --key-file ${where}\` in an empty wallet ` +
-            `home to take custody, then \`claim\`.`, rec);
-    }
-    const install = opts.installKey ??
-        (async (secret, relayUrl, network) => {
-            const key = agentKeyFromPrivatePem(secret);
-            // ensureWallet is LOAD-FIRST: with a wallet already on disk it returns
-            // THAT wallet and silently ignores `key` (the CLI `import` refuses
-            // non-empty homes for exactly this reason). We only reach here after the
-            // no-clobber check DECIDED to replace (absent or empty wallet), so skip
-            // the store read with `ephemeral` and persist the imported key
-            // explicitly — otherwise the funded key is dropped and the empty boot
-            // wallet survives (found live: MCP auto_fund reported the funded party
-            // while wallet.json still held the empty boot wallet).
-            const w = await ensureWallet({
-                relayUrl,
-                network,
-                key,
-                restore: true,
-                ephemeral: true,
-            });
-            saveWallet(w);
-            return w;
-        });
-    const wallet = await install(funded.secret, opts.relayUrl, funded.network);
-    // FAIL LOUD, never lie: the installed wallet MUST be the funded party. Any
-    // install path that keeps a different wallet (a load-first ensure, a stale
-    // injected seam) would otherwise report success while the grant sits on a
-    // party whose key was just dropped.
-    if (wallet.party !== funded.party) {
-        throw new QuestFundError(`installed wallet party ${wallet.party} is not the funded party ${funded.party} — ` +
-            `the funded key was NOT persisted; refusing to report success`);
-    }
-    return {
-        kind: "funded",
-        wallet,
-        balanceCc: funded.balanceCc,
-        updateId: funded.updateId,
-        image: funded.image,
-    };
-}
-//# sourceMappingURL=quest-fund.js.map

package/dist/quest-fund.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"quest-fund.js","sourceRoot":"","sources":["../src/quest-fund.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAoB,MAAM,YAAY,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA6BhD;;8BAE8B;AAC9B;;;;;;GAMG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IAwBvC,YACE,OAAe,EACf,WAAgE;QAEhE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE;gBACzC,KAAK,EAAE,WAAW;gBAClB,UAAU,EAAE,KAAK;gBACjB,QAAQ,EAAE,KAAK;gBACf,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,MAAM,CAAC,CAAW;IAC/B,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,OAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6B,IAAI,SAAS,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAmB;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAE9E,yBAAyB;IACzB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,yBAAyB,EAAE;QAChE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI;KACX,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,cAAc,CACtB,yBAAyB,SAAS,CAAC,MAAM,iBAAiB,CAC3D,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC;IAC3D,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,IAAI,cAAc,CAAC,sCAAsC,CAAC,CAAC;IACnE,CAAC;IAED,8BAA8B;IAC9B,IAAI,MAA2C,CAAC;IAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,GAAG,MAAM,OAAO,CACrB,GAAG,IAAI,uCAAuC,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAChF,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7B,0EAA0E;QAC1E,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QACxC,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,GAAG,IAAI,CAAC;YACd,MAAM;QACR,CAAC;QACD,MAAM,IAAI,cAAc,CACtB,wBAAwB,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,EAAE,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,cAAc,CAAC,wBAAwB,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,OAAO,WAAW,KAAK,QAAQ;QAC/B,OAAO,KAAK,KAAK,QAAQ,EACzB,CAAC;QACD,MAAM,IAAI,cAAc,CAAC,iDAAiD,CAAC,CAAC;IAC9E,CAAC;IAED,+EAA+E;IAC/E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,sBAAsB,EAAE;QAC1D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,WAAW;YACX,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC;KACH,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1B,MAAM,IAAI,cAAc,CACtB,sBAAsB,MAAM,CAAC,MAAM,iBAAiB,CACrD,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC;IAClD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,cAAc,CAAC,gCAAgC,CAAC,CAAC;IAC7D,CAAC;IAED,kCAAkC;IAClC,IAAI,IAAyC,CAAC;IAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,GAAG,MAAM,OAAO,CACrB,GAAG,IAAI,wCAAwC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAC9E,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QACxC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,IAAI,GAAG,IAAI,CAAC;YACZ,MAAM;QACR,CAAC;QACD,MAAM,IAAI,cAAc,CACtB,wBAAwB,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,EAAE,EACxE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,cAAc,CAAC,wBAAwB,EAAE;YACjD,MAAM;YACN,KAAK;YACL,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB;SAClE,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,MAAM;QACN,KAAK;QACL,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB;QACjE,SAAS,EAAE,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAC1E,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACvE,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;KAC/D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,KAAa,EAAE,QAAgB;IAC5E,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;IACtB,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,eAAe,IAAI,MAAM,CAAC,CAAC;IAC7C,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,OAAO,CAAC,CAAC;AACX,CAAC;AA8CD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAsB;IAEtB,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,IAAI,UAAU,CAAC;IAC/C,MAAM,SAAS,GACb,IAAI,CAAC,SAAS;QACd,CAAC,KAAK,EAAE,QAAgB,EAAE,KAAa,EAAE,EAAE,CACzC,CAAC,MAAM,IAAI,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,GACb,IAAI,CAAC,SAAS;QACd,CAAC,KAAK,EAAE,QAAgB,EAAE,KAAa,EAAE,EAAE,CACzC,CAAC,MAAM,IAAI,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAElE,MAAM,QAAQ,GAAG,IAAI,EAAE,CAAC;IACxB,IAAI,QAAQ,EAAE,CAAC;QACb,2BAA2B;QAC3B,EAAE;QACF,wEAAwE;QACxE,yEAAyE;QACzE,0EAA0E;QAC1E,yEAAyE;QACzE,2EAA2E;QAC3E,0EAA0E;QAC1E,uCAAuC;QACvC,EAAE;QACF,0EAA0E;QAC1E,yEAAyE;QACzE,iDAAiD;QACjD,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,cAAc,CACtB,4BAA4B,QAAQ,CAAC,KAAK,8BAA8B;gBACtE,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM;gBAClE,oEAAoE;gBACpE,oEAAoE;gBACpE,oCAAoC,CACvC,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YACnB,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC1E,CAAC;QAED,qDAAqD;QACrD,EAAE;QACF,2EAA2E;QAC3E,0EAA0E;QAC1E,uEAAuE;QACvE,2EAA2E;QAC3E,iCAAiC;QACjC,EAAE;QACF,2EAA2E;QAC3E,wEAAwE;QACxE,yEAAyE;QACzE,4EAA4E;QAC5E,0EAA0E;QAC1E,yEAAyE;QACzE,+DAA+D;QAC/D,EAAE;QACF,wEAAwE;QACxE,+DAA+D;QAC/D,IAAI,OAAgD,CAAC;QACrD,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,cAAc,CACtB,4BAA4B,QAAQ,CAAC,KAAK,4BAA4B;gBACpE,qDACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,sEAAsE;gBACtE,iEAAiE,CACpE,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,OAAO;iBAClB,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;iBAClD,OAAO,CAAC,EAAE,CAAC,CAAC;YACf,MAAM,IAAI,cAAc,CACtB,4BAA4B,QAAQ,CAAC,KAAK,UAAU,OAAO,CAAC,MAAM,GAAG;gBACnE,6CAA6C,KAAK,oBAAoB;gBACtE,uEAAuE;gBACvE,oEAAoE;gBACpE,qCAAqC,CACxC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,IAAI,SAAS,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,IAAI,cAAc,CAAC;IACvD,IAAI,MAA6C,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC;YACtB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,8DAA8D;QAC9D,EAAE;QACF,4EAA4E;QAC5E,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,wDAAwD;QACxD,MAAM,GAAG,GAAG,GAAG,YAAY,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,IAAI,CAAC,GAAG;YAAE,MAAM,GAAG,CAAC;QACpB,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,cAAc,CACtB,GAAI,GAAa,CAAC,OAAO,6CAA6C;gBACpE,oBACE,QAAQ,YAAY,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAChE,YAAY,GAAG,CAAC,KAAK,gDAAgD;gBACrE,4CAA4C,EAC9C,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,cAAc,CACtB,GAAI,GAAa,CAAC,OAAO,0CAA0C,KAAK,IAAI;YAC1E,SAAS,GAAG,CAAC,KAAK,4BAA4B;YAC9C,2CAA2C,KAAK,wBAAwB;YACxE,uCAAuC,EACzC,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GACX,IAAI,CAAC,UAAU;QACf,CAAC,KAAK,EAAE,MAAc,EAAE,QAAgB,EAAE,OAAe,EAAE,EAAE;YAC3D,MAAM,GAAG,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;YAC3C,uEAAuE;YACvE,mEAAmE;YACnE,yEAAyE;YACzE,wEAAwE;YACxE,+DAA+D;YAC/D,sEAAsE;YACtE,uEAAuE;YACvE,uDAAuD;YACvD,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC;gBAC3B,QAAQ;gBACR,OAAO;gBACP,GAAG;gBACH,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,UAAU,CAAC,CAAC,CAAC,CAAC;YACd,OAAO,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACL,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAE3E,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,oCAAoC;IACpC,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,IAAI,cAAc,CACtB,0BAA0B,MAAM,CAAC,KAAK,4BAA4B,MAAM,CAAC,KAAK,KAAK;YACjF,8DAA8D,CACjE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC;AACJ,CAAC"}