@gitkraken/core-gitlens 0.3.1 → 0.4.100

package/dist/plus/integrations/authentication/configuredIntegrationService.d.ts

@@ -0,0 +1,114 @@
+import type { Disposable } from '../../../utils/disposable.js';
+import type { Event } from '../../../utils/event.js';
+import type { IntegrationIds } from '../constants.js';
+import type { IntegrationServiceContext } from '../context.js';
+import type { IntegrationAuthenticationSessionDescriptor } from './integrationAuthenticationProvider.js';
+import type { CloudIntegrationAuthType, ConfiguredIntegrationDescriptor, ProviderAuthenticationSession } from './models.js';
+interface StoredSession {
+    id: string;
+    accessToken: string;
+    account?: {
+        label?: string;
+        displayName?: string;
+        id: string;
+    };
+    scopes: string[];
+    cloud?: boolean;
+    type: CloudIntegrationAuthType | undefined;
+    expiresAt?: string;
+    domain?: string;
+    protocol?: string;
+    /** The provider app key paired with the token for providers whose client needs one (e.g. Trello). */
+    appKey?: string;
+}
+export interface ConfiguredIntegrationsChangeEvent {
+    readonly added: readonly IntegrationIds[];
+    readonly removed: readonly IntegrationIds[];
+}
+export declare class ConfiguredIntegrationService implements Disposable {
+    private readonly ctx;
+    private readonly _onDidChange;
+    get onDidChange(): Event<ConfiguredIntegrationsChangeEvent>;
+    constructor(ctx: IntegrationServiceContext);
+    dispose(): void;
+    private _configured?;
+    private get configured();
+    getConfigured(id?: IntegrationIds, options?: {
+        cloud?: boolean;
+        domain?: string;
+    }): ConfiguredIntegrationDescriptor[];
+    private storeConfigured;
+    private addOrUpdateConfigured;
+    private removeConfigured;
+    storeSession(id: IntegrationIds, session: ProviderAuthenticationSession): Promise<void>;
+    getStoredSession(id: IntegrationIds, descriptor: IntegrationAuthenticationSessionDescriptor): Promise<ProviderAuthenticationSession | undefined>;
+    deleteStoredSessions(id: IntegrationIds, descriptor: IntegrationAuthenticationSessionDescriptor, cloud?: boolean, options?: {
+        preserveConfigured?: boolean;
+    }): Promise<void>;
+    deleteAllStoredSessions(id: IntegrationIds, cloud?: boolean, domain?: string): Promise<void>;
+    /**
+     * Reclaims all stored configuration + secrets for the given (typically retired) integration ids.
+     * Used to clean up state left behind when an id is removed from the model — e.g. the local
+     * self-managed `github-enterprise`/`gitlab-self-hosted` ids dropped when integrations went cloud-only.
+     * Domains are read from the stored config (secrets are keyed by domain); ids with no stored config
+     * are a no-op.
+     */
+    purgeStoredConfiguration(ids: readonly string[]): Promise<void>;
+    deleteSecrets(id: IntegrationIds, connectionId: string, cloud?: boolean, options?: {
+        preserveConfigured?: boolean;
+    }): Promise<void>;
+    deleteAllSecrets(id: IntegrationIds, cloud?: boolean, domain?: string): Promise<void>;
+    writeSecret(id: IntegrationIds, session: ProviderAuthenticationSession | StoredSession): Promise<void>;
+    readSecret(id: IntegrationIds, sessionId: string, cloud?: boolean): Promise<StoredSession | undefined>;
+    private getSecretKey;
+    private getLocalSecretKey;
+    private getCloudSecretKey;
+    private getPrimaryScope;
+    private isInPrimaryScope;
+    /**
+     * Resolves the connection id used as the secret-key session id for an auth descriptor.
+     * - If the descriptor targets a specific connection (`connectionId`), that wins.
+     * - Otherwise returns the primary connection's id for the provider (matching the descriptor's domain
+     *   for self-managed hosts; any connection for cloud hosts, where the stored domain is undefined).
+     * - Falls back to the descriptor domain when nothing is configured yet, preserving legacy
+     *   (pre-multi-account) reads with zero secret migration.
+     */
+    resolveConnectionId(id: IntegrationIds, descriptor: IntegrationAuthenticationSessionDescriptor): string;
+    /**
+     * Returns the id of the configured connection an unscoped descriptor resolves to (the primary for the
+     * descriptor's domain, matching {@link resolveConnectionId}'s selection), or `undefined` when nothing is
+     * configured for it. Unlike {@link resolveConnectionId} this only returns a genuine per-connection cloud
+     * token id (never a local/PAT or domain-derived legacy id), so callers can safely use it to scope a cloud
+     * token fetch to one host of a multi-host self-managed provider, or fall through to the provider-global
+     * primary endpoint on `undefined`.
+     */
+    getConfiguredConnectionId(id: IntegrationIds, domain: string | undefined, cloud?: boolean): string | undefined;
+    /**
+     * Selects configured descriptors for a provider matching `domain`, further narrowed to the `cloud`
+     * variant when specified. A connection id can have both a local (PAT) and cloud descriptor whose ids
+     * differ (e.g. a legacy local descriptor keyed by domain alongside a real cloud token id); scoping by
+     * `cloud` keeps a cloud-scoped read/delete from resolving the local id (and vice versa). Falls back to
+     * the domain-only set when no variant matches, so legacy single-variant resolution is unchanged.
+     */
+    private scopeConnectionCandidates;
+    /**
+     * Marks the given connection as the primary/default for the provider and clears the flag on its
+     * siblings. Persists immediately instead of relying on a session re-store to carry the primary flag.
+     */
+    setPrimaryConnection(id: IntegrationIds, connectionId: string): Promise<void>;
+    /**
+     * Removes a single connection (its secret + configured descriptor). If it was the primary and other
+     * connections remain, a secondary is promoted (see {@link removeConfigured}). Unlike
+     * {@link deleteAllStoredSessions}, this only affects the targeted connection. Pass `cloud` to scope
+     * the removal to the cloud/local variant when a local PAT and a cloud session share a connection id.
+     */
+    deleteConnection(id: IntegrationIds, connectionId: string, cloud?: boolean): Promise<void>;
+    private _addedIds;
+    private _removedIds;
+    private _fireChangeDebounced?;
+    private normalizeConfiguredDomain;
+    private domainsMatch;
+    private fireChange;
+}
+export {};
+//# sourceMappingURL=configuredIntegrationService.d.ts.map

package/dist/plus/integrations/authentication/configuredIntegrationService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configuredIntegrationService.d.ts","sourceRoot":"","sources":["../../../../src/plus/integrations/authentication/configuredIntegrationService.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAGrD,OAAO,KAAK,EACX,cAAc,EAGd,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAI/D,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AACzG,OAAO,KAAK,EACX,wBAAwB,EACxB,+BAA+B,EAC/B,6BAA6B,EAC7B,MAAM,aAAa,CAAC;AAErB,UAAU,aAAa;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/D,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qGAAqG;IACrG,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iCAAiC;IACjD,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;CAC5C;AAED,qBAAa,4BAA6B,YAAW,UAAU;IAMlD,OAAO,CAAC,QAAQ,CAAC,GAAG;IALhC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoD;IACjF,IAAI,WAAW,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAE1D;IAED,YAA6B,GAAG,EAAE,yBAAyB,EAAI;IAE/D,OAAO,IAAI,IAAI,CAEd;IAED,OAAO,CAAC,WAAW,CAAC,CAAyD;IAC7E,OAAO,KAAK,UAAU,GA4BrB;IAID,aAAa,CACZ,EAAE,CAAC,EAAE,cAAc,EACnB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5C,+BAA+B,EAAE,CA2BnC;YAEa,eAAe;YAiBf,qBAAqB;YA8DrB,gBAAgB;IA2CxB,YAAY,CAAC,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5F;IAEK,gBAAgB,CACrB,EAAE,EAAE,cAAc,EAClB,UAAU,EAAE,0CAA0C,GACpD,OAAO,CAAC,6BAA6B,GAAG,SAAS,CAAC,CAwBpD;IAEK,oBAAoB,CACzB,EAAE,EAAE,cAAc,EAClB,UAAU,EAAE,0CAA0C,EACtD,KAAK,CAAC,EAAE,OAAO,EACf,OAAO,CAAC,EAAE;QAAE,kBAAkB,CAAC,EAAE,OAAO,CAAA;KAAE,GACxC,OAAO,CAAC,IAAI,CAAC,CAEf;IAEK,uBAAuB,CAAC,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEjG;IAED;;;;;;OAMG;IACG,wBAAwB,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BpE;IAEK,aAAa,CAClB,EAAE,EAAE,cAAc,EAClB,YAAY,EAAE,MAAM,EACpB,KAAK,CAAC,EAAE,OAAO,EACf,OAAO,CAAC,EAAE;QAAE,kBAAkB,CAAC,EAAE,OAAO,CAAA;KAAE,GACxC,OAAO,CAAC,IAAI,CAAC,CAYf;IAEK,gBAAgB,CAAC,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA8B1F;IAEK,WAAW,CAAC,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,6BAA6B,GAAG,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB3G;IAEK,UAAU,CACf,EAAE,EAAE,cAAc,EAClB,SAAS,EAAE,MAAM,EACjB,KAAK,GAAE,OAAe,GACpB,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAuCpC;IAED,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,gBAAgB;IAQxB;;;;;;;OAOG;IACH,mBAAmB,CAAC,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,0CAA0C,GAAG,MAAM,CAQtG;IAED;;;;;;;OAOG;IACH,yBAAyB,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAkB7G;IAED;;;;;;OAMG;IACH,OAAO,CAAC,yBAAyB;IAYjC;;;OAGG;IACG,oBAAoB,CAAC,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgClF;IAED;;;;;OAKG;IACG,gBAAgB,CAAC,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/F;IAED,OAAO,CAAC,SAAS,CAA6B;IAC9C,OAAO,CAAC,WAAW,CAA6B;IAChD,OAAO,CAAC,oBAAoB,CAAC,CAAa;IAE1C,OAAO,CAAC,yBAAyB;IAMjC,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,UAAU;CAkBlB"}

package/dist/plus/integrations/authentication/configuredIntegrationService.js

@@ -0,0 +1,497 @@
+import { debounce } from '../../../utils/debounce.js';
+import { Emitter } from '../../../utils/event.js';
+import { flatten } from '../../../utils/iterable.js';
+import { providersMetadata } from '../providers/models.js';
+import { areDomainsOnSameHost, hostFromDomain } from '../utils/domain.utils.js';
+import { isGitSelfManagedHostIntegrationId } from '../utils/integration.utils.js';
+export class ConfiguredIntegrationService {
+    ctx;
+    _onDidChange = new Emitter();
+    get onDidChange() {
+        return this._onDidChange.event;
+    }
+    constructor(ctx) {
+        this.ctx = ctx;
+    }
+    dispose() {
+        this._onDidChange.dispose();
+    }
+    _configured;
+    get configured() {
+        if (this._configured == null) {
+            this._configured = new Map();
+            const storedConfigured = this.ctx.storage.get('integrations:configured');
+            for (const [id, configured] of Object.entries(storedConfigured ?? {})) {
+                if (configured == null)
+                    continue;
+                const descriptors = configured.map(d => ({
+                    ...d,
+                    domain: this.normalizeConfiguredDomain(id, d.domain),
+                    // Backfill a stable connection id for pre-multi-account stored data: the domain for
+                    // self-managed hosts, or the provider's canonical domain for cloud (which is the legacy
+                    // secret-key session id), so existing secrets keep resolving with zero migration. Fall back
+                    // to the integration id (never empty) when no domain is known — self-managed providers carry
+                    // `domain: ''` in metadata, and an empty id would collide across connections and produce
+                    // ambiguous secret keys (`...|`).
+                    id: d.id || d.domain || providersMetadata[id]?.domain || id,
+                    expiresAt: d.expiresAt ? new Date(d.expiresAt) : undefined,
+                }));
+                this._configured.set(id, descriptors);
+            }
+        }
+        return this._configured;
+    }
+    // Synchronous: reads the in-memory configured map (lazily hydrated from storage). No async work —
+    // the old async variant only existed to weave in the built-in VS Code GitHub session, which is gone.
+    getConfigured(id, options) {
+        const descriptors = [];
+        const configured = id != null
+            ? this.configured.get(id)
+            : [...flatten(this.configured.values())];
+        if (!configured?.length)
+            return descriptors;
+        if (options?.domain != null || options?.cloud != null) {
+            for (const descriptor of configured) {
+                if ((options?.domain != null &&
+                    !this.domainsMatch(id ?? descriptor.integrationId, descriptor.domain, options.domain)) ||
+                    (options?.cloud === true && !descriptor.cloud) ||
+                    (options?.cloud === false && descriptor.cloud)) {
+                    continue;
+                }
+                descriptors.push(descriptor);
+            }
+        }
+        else {
+            descriptors.push(...configured);
+        }
+        return descriptors;
+    }
+    async storeConfigured() {
+        // We need to convert the map to a record to store
+        const configured = {};
+        for (const [id, descriptors] of this.configured) {
+            configured[id] = descriptors.map(d => ({
+                ...d,
+                expiresAt: d.expiresAt
+                    ? d.expiresAt instanceof Date
+                        ? d.expiresAt.toISOString()
+                        : d.expiresAt
+                    : undefined,
+            }));
+        }
+        await this.ctx.storage.store('integrations:configured', configured);
+    }
+    async addOrUpdateConfigured(descriptor) {
+        descriptor = {
+            ...descriptor,
+            domain: this.normalizeConfiguredDomain(descriptor.integrationId, descriptor.domain),
+        };
+        const descriptors = this.configured.get(descriptor.integrationId) ?? [];
+        // Key connections by their stable id (+ cloud, to preserve legacy local/cloud coexistence) so
+        // multiple accounts on the same provider+domain no longer overwrite each other.
+        const existing = descriptors.find(d => d.id === descriptor.id && d.cloud === descriptor.cloud);
+        // The first connection for a provider/domain is primary by default; an explicit flag (or the
+        // existing value) always wins. Self-managed providers can span multiple hosts under the same
+        // integration id, so each host needs its own primary.
+        const primaryScope = this.getPrimaryScope(descriptor.integrationId, descriptors, descriptor.domain);
+        const primary = descriptor.primary ?? existing?.primary ?? !primaryScope.some(d => d.primary);
+        // Preserve a previously-resolved type/accountName when the incoming write doesn't carry them (e.g.
+        // the model re-stores the primary session with an empty account, after reconcile enriched it).
+        const type = descriptor.type ?? existing?.type;
+        const accountName = descriptor.accountName ?? existing?.accountName;
+        const normalized = {
+            ...descriptor,
+            primary: primary,
+            type: type,
+            accountName: accountName,
+        };
+        let changed;
+        if (existing != null) {
+            if (existing.domain === normalized.domain &&
+                existing.expiresAt === normalized.expiresAt &&
+                existing.scopes === normalized.scopes &&
+                (existing.primary ?? false) === (normalized.primary ?? false) &&
+                existing.type === normalized.type &&
+                existing.accountName === normalized.accountName) {
+                return;
+            }
+            // Only fire the change event on domain/scopes/primary/type/accountName changes (ignore expiresAt churn)
+            changed =
+                existing.domain !== normalized.domain ||
+                    existing.scopes !== normalized.scopes ||
+                    (existing.primary ?? false) !== (normalized.primary ?? false) ||
+                    existing.type !== normalized.type ||
+                    existing.accountName !== normalized.accountName;
+            // remove the existing descriptor from the array
+            descriptors.splice(descriptors.indexOf(existing), 1);
+        }
+        else {
+            changed = true;
+        }
+        descriptors.push(normalized);
+        this.configured.set(descriptor.integrationId, descriptors);
+        if (changed) {
+            this.fireChange(descriptor.integrationId);
+        }
+        await this.storeConfigured();
+    }
+    async removeConfigured(id, options) {
+        const existing = this.configured.get(id);
+        if (existing == null || existing.length === 0)
+            return;
+        const removedPrimaryDomains = new Set();
+        const descriptors = [];
+        for (const d of existing) {
+            if (d.id === options.connectionId &&
+                (options?.cloud == null ||
+                    (options?.cloud === true && d.cloud === true) ||
+                    (options?.cloud === false && d.cloud === false))) {
+                if (d.primary) {
+                    removedPrimaryDomains.add(d.domain);
+                }
+                continue;
+            }
+            descriptors.push(d);
+        }
+        if (descriptors.length === existing.length)
+            return; // nothing matched
+        // Promote a secondary to primary when the removed connection was the primary and others remain
+        // in the same primary scope, so the provider/host stays in a well-defined connected state.
+        for (const domain of removedPrimaryDomains) {
+            if (descriptors.some(d => this.isInPrimaryScope(id, d, domain) && d.primary))
+                continue;
+            const index = descriptors.findIndex(d => this.isInPrimaryScope(id, d, domain));
+            if (index !== -1) {
+                descriptors[index] = { ...descriptors[index], primary: true };
+            }
+        }
+        this.configured.set(id, descriptors);
+        this.fireChange(undefined, id);
+        await this.storeConfigured();
+    }
+    async storeSession(id, session) {
+        await this.writeSecret(id, session);
+    }
+    async getStoredSession(id, descriptor) {
+        const sessionId = this.resolveConnectionId(id, descriptor);
+        let session = descriptor.cloud === true ? undefined : await this.readSecret(id, sessionId, false);
+        let cloudIfMissing = false;
+        if (session != null) {
+            // Check the `expiresAt` field
+            // If it has an expiresAt property and the key is the old type, then it's a cloud session,
+            // so delete it from the local key and
+            // store with the "cloud" type key, and then use that one.
+            // Otherwise it's a local session under the local key, so just return it.
+            if (session.expiresAt != null) {
+                cloudIfMissing = true;
+                await Promise.allSettled([this.deleteSecrets(id, session.id), this.writeSecret(id, session)]);
+            }
+        }
+        // If no local session we try to restore a session with the cloud key
+        if (session == null && descriptor.cloud !== false) {
+            cloudIfMissing = true;
+            session = await this.readSecret(id, sessionId, true);
+        }
+        return convertStoredSessionToSession(session, descriptor, cloudIfMissing);
+    }
+    async deleteStoredSessions(id, descriptor, cloud, options) {
+        await this.deleteSecrets(id, this.resolveConnectionId(id, descriptor), cloud, options);
+    }
+    async deleteAllStoredSessions(id, cloud, domain) {
+        await this.deleteAllSecrets(id, cloud, domain);
+    }
+    /**
+     * Reclaims all stored configuration + secrets for the given (typically retired) integration ids.
+     * Used to clean up state left behind when an id is removed from the model — e.g. the local
+     * self-managed `github-enterprise`/`gitlab-self-hosted` ids dropped when integrations went cloud-only.
+     * Domains are read from the stored config (secrets are keyed by domain); ids with no stored config
+     * are a no-op.
+     */
+    async purgeStoredConfiguration(ids) {
+        const stored = this.ctx.storage.get('integrations:configured');
+        if (stored == null)
+            return;
+        let changed = false;
+        for (const id of ids) {
+            if (!(id in stored))
+                continue;
+            for (const descriptor of stored[id] ?? []) {
+                // Mirror the hydration backfill so the secret keys we delete match what was written: fall back
+                // through domain, the provider's canonical domain, then the integration id (never empty). A
+                // legacy cloud descriptor stored neither id nor domain, so an empty connection id here would
+                // miss the canonical-domain secret (e.g. `integration.auth.cloud:github|github.com`) and orphan it.
+                const connectionId = descriptor.id || descriptor.domain || providersMetadata[id]?.domain || id;
+                await this.ctx.storage.deleteSecret(this.getLocalSecretKey(id, connectionId));
+                await this.ctx.storage.deleteSecret(this.getCloudSecretKey(id, connectionId));
+                if (descriptor.domain) {
+                    await this.ctx.storage.deleteWorkspace(`connected:${id}:${descriptor.domain}`);
+                }
+            }
+            changed = true;
+        }
+        if (!changed)
+            return;
+        const remaining = Object.fromEntries(Object.entries(stored).filter(([key]) => !ids.includes(key)));
+        await this.ctx.storage.store('integrations:configured', remaining);
+    }
+    async deleteSecrets(id, connectionId, cloud, options) {
+        if (cloud == null || cloud === false) {
+            await this.ctx.storage.deleteSecret(this.getLocalSecretKey(id, connectionId));
+        }
+        if (cloud == null || cloud === true) {
+            await this.ctx.storage.deleteSecret(this.getCloudSecretKey(id, connectionId));
+        }
+        if (options?.preserveConfigured)
+            return;
+        await this.removeConfigured(id, { connectionId: connectionId, cloud: cloud });
+    }
+    async deleteAllSecrets(id, cloud, domain) {
+        // Delete every connection's secret (multi-account): secrets are keyed per connection id, so a
+        // single canonical-domain delete would orphan secondary tokens. When a domain is given (self-managed
+        // disconnect of one host), scope to that host so other hosts under the same provider id survive.
+        const descriptors = this.configured.get(id);
+        const connectionIds = [
+            ...new Set((domain != null ? descriptors?.filter(c => this.domainsMatch(id, c.domain, domain)) : descriptors)?.map(c => c.id) ?? []),
+        ];
+        if (connectionIds.length) {
+            for (const connectionId of connectionIds) {
+                await this.deleteSecrets(id, connectionId, cloud);
+            }
+            return;
+        }
+        // A domain-scoped clear that matched nothing means this host has no stored connections, so it must be
+        // a no-op. The canonical-domain fallback below would target a bogus key (self-managed canonical domain
+        // is empty), so skip it.
+        if (domain != null)
+            return;
+        // No configured connections (e.g. an orphaned secret with no descriptor): fall back to the
+        // provider's canonical domain, which is the legacy session id for cloud providers. Mirror the
+        // hydration backfill's `|| id` guard so a self-managed provider (empty canonical domain) doesn't
+        // target an ambiguous empty connection id.
+        await this.deleteSecrets(id, providersMetadata[id]?.domain || id, cloud);
+    }
+    async writeSecret(id, session) {
+        await this.ctx.storage.storeSecret(this.getSecretKey(id, session.id, session.cloud ?? false), JSON.stringify(session));
+        await this.addOrUpdateConfigured({
+            id: session.id,
+            integrationId: id,
+            domain: isGitSelfManagedHostIntegrationId(id) ? session.domain : undefined,
+            expiresAt: session.expiresAt,
+            scopes: session.scopes.join(','),
+            cloud: session.cloud ?? false,
+            type: session.type,
+            accountName: session.account?.label || undefined,
+        });
+    }
+    async readSecret(id, sessionId, cloud = false) {
+        let storedSession;
+        try {
+            const sessionJSON = await this.ctx.storage.getSecret(this.getSecretKey(id, sessionId, cloud));
+            if (sessionJSON) {
+                storedSession = JSON.parse(sessionJSON);
+                if (storedSession != null) {
+                    const configured = this.configured.get(id);
+                    const connectionId = storedSession.id ?? sessionId;
+                    const sessionCloud = storedSession.cloud ?? cloud;
+                    const domain = isGitSelfManagedHostIntegrationId(id)
+                        ? (storedSession.domain ?? storedSession.id)
+                        : undefined;
+                    if (configured == null ||
+                        configured.length === 0 ||
+                        !configured.some(c => c.id === connectionId && c.integrationId === id && c.cloud === sessionCloud)) {
+                        await this.addOrUpdateConfigured({
+                            id: connectionId,
+                            integrationId: id,
+                            domain: domain,
+                            expiresAt: storedSession.expiresAt,
+                            scopes: storedSession.scopes.join(','),
+                            cloud: sessionCloud,
+                            type: storedSession.type,
+                            accountName: storedSession.account?.label || undefined,
+                        });
+                    }
+                }
+            }
+        }
+        catch (_ex) {
+            try {
+                await this.deleteSecrets(id, sessionId, cloud);
+            }
+            catch { }
+        }
+        return storedSession;
+    }
+    getSecretKey(id, sessionId, cloud = false) {
+        return cloud ? this.getCloudSecretKey(id, sessionId) : this.getLocalSecretKey(id, sessionId);
+    }
+    getLocalSecretKey(id, sessionId) {
+        return `integration.auth:${id}|${sessionId}`;
+    }
+    getCloudSecretKey(id, sessionId) {
+        return `integration.auth.cloud:${id}|${sessionId}`;
+    }
+    getPrimaryScope(id, descriptors, domain) {
+        return isGitSelfManagedHostIntegrationId(id)
+            ? descriptors.filter(d => this.isInPrimaryScope(id, d, domain))
+            : descriptors;
+    }
+    isInPrimaryScope(id, descriptor, domain) {
+        return !isGitSelfManagedHostIntegrationId(id) || this.domainsMatch(id, descriptor.domain, domain);
+    }
+    /**
+     * Resolves the connection id used as the secret-key session id for an auth descriptor.
+     * - If the descriptor targets a specific connection (`connectionId`), that wins.
+     * - Otherwise returns the primary connection's id for the provider (matching the descriptor's domain
+     *   for self-managed hosts; any connection for cloud hosts, where the stored domain is undefined).
+     * - Falls back to the descriptor domain when nothing is configured yet, preserving legacy
+     *   (pre-multi-account) reads with zero secret migration.
+     */
+    resolveConnectionId(id, descriptor) {
+        // An empty connectionId is not a real target — treat it as "no target" so it resolves the primary
+        // rather than keying a secret under an empty id.
+        if (descriptor.connectionId)
+            return descriptor.connectionId;
+        const domain = isGitSelfManagedHostIntegrationId(id) ? descriptor.domain : undefined;
+        const candidates = this.scopeConnectionCandidates(id, domain, descriptor.cloud);
+        return (candidates?.find(c => c.primary) ?? candidates?.[0])?.id ?? descriptor.domain;
+    }
+    /**
+     * Returns the id of the configured connection an unscoped descriptor resolves to (the primary for the
+     * descriptor's domain, matching {@link resolveConnectionId}'s selection), or `undefined` when nothing is
+     * configured for it. Unlike {@link resolveConnectionId} this only returns a genuine per-connection cloud
+     * token id (never a local/PAT or domain-derived legacy id), so callers can safely use it to scope a cloud
+     * token fetch to one host of a multi-host self-managed provider, or fall through to the provider-global
+     * primary endpoint on `undefined`.
+     */
+    getConfiguredConnectionId(id, domain, cloud) {
+        const scoped = isGitSelfManagedHostIntegrationId(id) ? domain : undefined;
+        const candidates = this.scopeConnectionCandidates(id, scoped, cloud);
+        const connection = candidates?.find(c => c.primary) ?? candidates?.[0];
+        if (connection == null)
+            return undefined;
+        // Only return a real per-connection cloud token id. Reject a local (PAT) descriptor (surfaced by
+        // scopeConnectionCandidates' non-cloud fallback) and a domain-derived legacy id (the descriptor's own
+        // domain or the provider's canonical domain — see ConfiguredIntegrationDescriptor.id), either of which
+        // would target `v1/provider-tokens/tokens/{domain}` (rejected as a non-uuid). Callers then fall through
+        // to the provider-scoped primary endpoint.
+        if (!connection.cloud)
+            return undefined;
+        const canonicalDomain = providersMetadata[id]?.domain;
+        if (connection.id === connection.domain || (canonicalDomain && connection.id === canonicalDomain)) {
+            return undefined;
+        }
+        return connection.id;
+    }
+    /**
+     * Selects configured descriptors for a provider matching `domain`, further narrowed to the `cloud`
+     * variant when specified. A connection id can have both a local (PAT) and cloud descriptor whose ids
+     * differ (e.g. a legacy local descriptor keyed by domain alongside a real cloud token id); scoping by
+     * `cloud` keeps a cloud-scoped read/delete from resolving the local id (and vice versa). Falls back to
+     * the domain-only set when no variant matches, so legacy single-variant resolution is unchanged.
+     */
+    scopeConnectionCandidates(id, domain, cloud) {
+        const candidates = this.configured.get(id)?.filter(c => this.domainsMatch(id, c.domain, domain));
+        if (cloud == null || candidates == null)
+            return candidates;
+        const scoped = candidates.filter(c => c.cloud === cloud);
+        return scoped.length ? scoped : candidates;
+    }
+    /**
+     * Marks the given connection as the primary/default for the provider and clears the flag on its
+     * siblings. Persists immediately instead of relying on a session re-store to carry the primary flag.
+     */
+    async setPrimaryConnection(id, connectionId) {
+        const descriptors = this.configured.get(id);
+        if (descriptors == null || descriptors.length === 0)
+            return;
+        if (!descriptors.some(d => d.id === connectionId))
+            return;
+        const target = descriptors.find(d => d.id === connectionId && d.cloud) ?? descriptors.find(d => d.id === connectionId);
+        if (target == null)
+            return;
+        const domain = isGitSelfManagedHostIntegrationId(id) ? target.domain : undefined;
+        // A connection id can have both a local (PAT) and cloud descriptor. Mark the primary on a single
+        // canonical variant (prefer cloud, since multi-account primaries are cloud-driven) within the
+        // provider/host scope, so other self-managed hosts keep their own default connection.
+        const primaryIsCloud = descriptors.some(d => d.id === connectionId && d.cloud && this.isInPrimaryScope(id, d, domain));
+        let changed = false;
+        const updated = descriptors.map(d => {
+            if (!this.isInPrimaryScope(id, d, domain))
+                return d;
+            const primary = d.id === connectionId && (d.cloud ?? false) === primaryIsCloud;
+            if ((d.primary ?? false) === primary)
+                return d;
+            changed = true;
+            return { ...d, primary: primary };
+        });
+        if (!changed)
+            return;
+        this.configured.set(id, updated);
+        this.fireChange(id);
+        await this.storeConfigured();
+    }
+    /**
+     * Removes a single connection (its secret + configured descriptor). If it was the primary and other
+     * connections remain, a secondary is promoted (see {@link removeConfigured}). Unlike
+     * {@link deleteAllStoredSessions}, this only affects the targeted connection. Pass `cloud` to scope
+     * the removal to the cloud/local variant when a local PAT and a cloud session share a connection id.
+     */
+    async deleteConnection(id, connectionId, cloud) {
+        await this.deleteSecrets(id, connectionId, cloud);
+    }
+    _addedIds = new Set();
+    _removedIds = new Set();
+    _fireChangeDebounced;
+    normalizeConfiguredDomain(id, domain) {
+        if (!isGitSelfManagedHostIntegrationId(id))
+            return domain;
+        return hostFromDomain(domain) ?? domain;
+    }
+    domainsMatch(id, first, second) {
+        if (first === second)
+            return true;
+        if (!isGitSelfManagedHostIntegrationId(id))
+            return false;
+        if (first == null || second == null)
+            return false;
+        return areDomainsOnSameHost(first, second);
+    }
+    fireChange(added, removed) {
+        this._fireChangeDebounced ??= debounce(() => {
+            const added = [...this._addedIds];
+            this._addedIds.clear();
+            const removed = [...this._removedIds];
+            this._removedIds.clear();
+            this._onDidChange.fire({ added: added, removed: removed });
+        }, 250);
+        if (added != null) {
+            this._addedIds.add(added);
+        }
+        if (removed != null) {
+            this._removedIds.add(removed);
+        }
+        this._fireChangeDebounced();
+    }
+}
+function convertStoredSessionToSession(storedSession, descriptor, cloudIfMissing) {
+    if (storedSession == null)
+        return undefined;
+    return {
+        id: storedSession.id,
+        accessToken: storedSession.accessToken,
+        account: {
+            id: storedSession.account?.id ?? '',
+            label: storedSession.account?.label ?? '',
+        },
+        scopes: storedSession.scopes,
+        cloud: storedSession.cloud ?? cloudIfMissing,
+        expiresAt: storedSession.expiresAt ? new Date(storedSession.expiresAt) : undefined,
+        domain: storedSession.domain ?? descriptor.domain,
+        protocol: storedSession.protocol,
+        type: storedSession.type,
+        // Carried for providers whose client needs an app key alongside the token (e.g. Trello); without
+        // this a rehydrated session silently loses the key and every read no-ops.
+        appKey: storedSession.appKey,
+    };
+}
+//# sourceMappingURL=configuredIntegrationService.js.map

package/dist/plus/integrations/authentication/configuredIntegrationService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configuredIntegrationService.js","sourceRoot":"","sources":["../../../../src/plus/integrations/authentication/configuredIntegrationService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAGtD,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAOrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAChF,OAAO,EAAE,iCAAiC,EAAE,MAAM,+BAA+B,CAAC;AA2BlF,MAAM,OAAO,4BAA4B;IAMX,GAAG;IALf,YAAY,GAAG,IAAI,OAAO,EAAqC,CAAC;IACjF,IAAI,WAAW;QACd,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;IAChC,CAAC;IAED,YAA6B,GAA8B;mBAA9B,GAAG;IAA8B,CAAC;IAE/D,OAAO;QACN,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;IAEO,WAAW,CAA0D;IAC7E,IAAY,UAAU;QACrB,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAqD,CAAC;YAEhF,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YACzE,KAAK,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAGjE,EAAE,CAAC;gBACL,IAAI,UAAU,IAAI,IAAI;oBAAE,SAAS;gBAEjC,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACxC,GAAG,CAAC;oBACJ,MAAM,EAAE,IAAI,CAAC,yBAAyB,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpD,oFAAoF;oBACpF,wFAAwF;oBACxF,4FAA4F;oBAC5F,6FAA6F;oBAC7F,yFAAyF;oBACzF,kCAAkC;oBAClC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,iBAAiB,CAAC,EAAE,CAAC,EAAE,MAAM,IAAI,EAAE;oBAC3D,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;iBAC1D,CAAC,CAAC,CAAC;gBACJ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YACvC,CAAC;QACF,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC;IACzB,CAAC;IAED,kGAAkG;IAClG,qGAAqG;IACrG,aAAa,CACZ,EAAmB,EACnB,OAA8C;QAE9C,MAAM,WAAW,GAAsC,EAAE,CAAC;QAE1D,MAAM,UAAU,GACf,EAAE,IAAI,IAAI;YACT,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAkC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,UAAU,EAAE,MAAM;YAAE,OAAO,WAAW,CAAC;QAE5C,IAAI,OAAO,EAAE,MAAM,IAAI,IAAI,IAAI,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC;YACvD,KAAK,MAAM,UAAU,IAAI,UAAU,EAAE,CAAC;gBACrC,IACC,CAAC,OAAO,EAAE,MAAM,IAAI,IAAI;oBACvB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,UAAU,CAAC,aAAa,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;oBACvF,CAAC,OAAO,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;oBAC9C,CAAC,OAAO,EAAE,KAAK,KAAK,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,EAC7C,CAAC;oBACF,SAAS;gBACV,CAAC;gBAED,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9B,CAAC;QACF,CAAC;aAAM,CAAC;YACP,WAAW,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,WAAW,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,eAAe;QAC5B,kDAAkD;QAClD,MAAM,UAAU,GAAoC,EAAgD,CAAC;QACrG,KAAK,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACjD,UAAU,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACtC,GAAG,CAAC;gBACJ,SAAS,EAAE,CAAC,CAAC,SAAS;oBACrB,CAAC,CAAC,CAAC,CAAC,SAAS,YAAY,IAAI;wBAC5B,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;wBAC3B,CAAC,CAAC,CAAC,CAAC,SAAS;oBACd,CAAC,CAAC,SAAS;aACZ,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,UAAU,CAAC,CAAC;IACrE,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,UAA2C;QAC9E,UAAU,GAAG;YACZ,GAAG,UAAU;YACb,MAAM,EAAE,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC;SACnF,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QACxE,8FAA8F;QAC9F,gFAAgF;QAChF,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,CAAC,CAAC;QAE/F,6FAA6F;QAC7F,6FAA6F;QAC7F,sDAAsD;QACtD,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,aAAa,EAAE,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QACpG,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,IAAI,QAAQ,EAAE,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC9F,mGAAmG;QACnG,+FAA+F;QAC/F,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,IAAI,QAAQ,EAAE,IAAI,CAAC;QAC/C,MAAM,WAAW,GAAG,UAAU,CAAC,WAAW,IAAI,QAAQ,EAAE,WAAW,CAAC;QACpE,MAAM,UAAU,GAAoC;YACnD,GAAG,UAAU;YACb,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,IAAI;YACV,WAAW,EAAE,WAAW;SACxB,CAAC;QAEF,IAAI,OAAgB,CAAC;QACrB,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACtB,IACC,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;gBACrC,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS;gBAC3C,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;gBACrC,CAAC,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,IAAI,KAAK,CAAC;gBAC7D,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI;gBACjC,QAAQ,CAAC,WAAW,KAAK,UAAU,CAAC,WAAW,EAC9C,CAAC;gBACF,OAAO;YACR,CAAC;YAED,wGAAwG;YACxG,OAAO;gBACN,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;oBACrC,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;oBACrC,CAAC,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,IAAI,KAAK,CAAC;oBAC7D,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI;oBACjC,QAAQ,CAAC,WAAW,KAAK,UAAU,CAAC,WAAW,CAAC;YAEjD,gDAAgD;YAChD,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACP,OAAO,GAAG,IAAI,CAAC;QAChB,CAAC;QAED,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAE3D,IAAI,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC7B,EAAkB,EAClB,OAA6D;QAE7D,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEtD,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC5D,MAAM,WAAW,GAAsC,EAAE,CAAC;QAC1D,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YAC1B,IACC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,YAAY;gBAC7B,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI;oBACtB,CAAC,OAAO,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC;oBAC7C,CAAC,OAAO,EAAE,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,EAChD,CAAC;gBACF,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;oBACf,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBACrC,CAAC;gBACD,SAAS;YACV,CAAC;YAED,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YAAE,OAAO,CAAC,kBAAkB;QAEtE,+FAA+F;QAC/F,2FAA2F;QAC3F,KAAK,MAAM,MAAM,IAAI,qBAAqB,EAAE,CAAC;YAC5C,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;gBAAE,SAAS;YAEvF,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAC/E,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBAClB,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC/D,CAAC;QACF,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC/B,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAkB,EAAE,OAAsC;QAC5E,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,gBAAgB,CACrB,EAAkB,EAClB,UAAsD;QAEtD,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC3D,IAAI,OAAO,GAAG,UAAU,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAElG,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACrB,8BAA8B;YAC9B,0FAA0F;YAC1F,sCAAsC;YACtC,0DAA0D;YAC1D,yEAAyE;YACzE,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;gBAC/B,cAAc,GAAG,IAAI,CAAC;gBACtB,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;YAC/F,CAAC;QACF,CAAC;QAED,qEAAqE;QACrE,IAAI,OAAO,IAAI,IAAI,IAAI,UAAU,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YACnD,cAAc,GAAG,IAAI,CAAC;YACtB,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,6BAA6B,CAAC,OAAO,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,oBAAoB,CACzB,EAAkB,EAClB,UAAsD,EACtD,KAAe,EACf,OAA0C;QAE1C,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,mBAAmB,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,EAAkB,EAAE,KAAe,EAAE,MAAe;QACjF,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,wBAAwB,CAAC,GAAsB;QACpD,MAAM,MAAM,GACX,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CACnB,yBAAyB,CACzB,CAAC;QACH,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO;QAE3B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC;gBAAE,SAAS;YAE9B,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC3C,+FAA+F;gBAC/F,4FAA4F;gBAC5F,6FAA6F;gBAC7F,oGAAoG;gBACpG,MAAM,YAAY,GACjB,UAAU,CAAC,EAAE,IAAI,UAAU,CAAC,MAAM,IAAI,iBAAiB,CAAC,EAAoB,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC;gBAC7F,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAoB,EAAE,YAAY,CAAC,CAAC,CAAC;gBAChG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAoB,EAAE,YAAY,CAAC,CAAC,CAAC;gBAChG,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;oBACvB,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,aAAa,EAAE,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;gBAChF,CAAC;YACF,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACnG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,SAA4C,CAAC,CAAC;IACvG,CAAC;IAED,KAAK,CAAC,aAAa,CAClB,EAAkB,EAClB,YAAoB,EACpB,KAAe,EACf,OAA0C;QAE1C,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,OAAO,EAAE,kBAAkB;YAAE,OAAO;QAExC,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,EAAkB,EAAE,KAAe,EAAE,MAAe;QAC1E,8FAA8F;QAC9F,qGAAqG;QACrG,iGAAiG;QACjG,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,aAAa,GAAG;YACrB,GAAG,IAAI,GAAG,CACT,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,GAAG,CACtG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CACT,IAAI,EAAE,CACP;SACD,CAAC;QACF,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;YAC1B,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;gBAC1C,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;YACnD,CAAC;YAED,OAAO;QACR,CAAC;QAED,sGAAsG;QACtG,uGAAuG;QACvG,yBAAyB;QACzB,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO;QAE3B,2FAA2F;QAC3F,8FAA8F;QAC9F,iGAAiG;QACjG,2CAA2C;QAC3C,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,iBAAiB,CAAC,EAAE,CAAC,EAAE,MAAM,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAkB,EAAE,OAAsD;QAC3F,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CACjC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,EACzD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACvB,CAAC;QAEF,MAAM,IAAI,CAAC,qBAAqB,CAAC;YAChC,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,aAAa,EAAE,EAAE;YACjB,MAAM,EAAE,iCAAiC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YAC1E,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAChC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK;YAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,SAAS;SAChD,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CACf,EAAkB,EAClB,SAAiB,EACjB,KAAK,GAAY,KAAK;QAEtB,IAAI,aAAwC,CAAC;QAC7C,IAAI,CAAC;YACJ,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;YAC9F,IAAI,WAAW,EAAE,CAAC;gBACjB,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBACxC,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;oBAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC3C,MAAM,YAAY,GAAG,aAAa,CAAC,EAAE,IAAI,SAAS,CAAC;oBACnD,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,IAAI,KAAK,CAAC;oBAClD,MAAM,MAAM,GAAG,iCAAiC,CAAC,EAAE,CAAC;wBACnD,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,IAAI,aAAa,CAAC,EAAE,CAAC;wBAC5C,CAAC,CAAC,SAAS,CAAC;oBACb,IACC,UAAU,IAAI,IAAI;wBAClB,UAAU,CAAC,MAAM,KAAK,CAAC;wBACvB,CAAC,UAAU,CAAC,IAAI,CACf,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,IAAI,CAAC,CAAC,aAAa,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,YAAY,CAChF,EACA,CAAC;wBACF,MAAM,IAAI,CAAC,qBAAqB,CAAC;4BAChC,EAAE,EAAE,YAAY;4BAChB,aAAa,EAAE,EAAE;4BACjB,MAAM,EAAE,MAAM;4BACd,SAAS,EAAE,aAAa,CAAC,SAAS;4BAClC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;4BACtC,KAAK,EAAE,YAAY;4BACnB,IAAI,EAAE,aAAa,CAAC,IAAI;4BACxB,WAAW,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,IAAI,SAAS;yBACtD,CAAC,CAAC;oBACJ,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACX,CAAC;QACD,OAAO,aAAa,CAAC;IACtB,CAAC;IAEO,YAAY,CACnB,EAAkB,EAClB,SAAiB,EACjB,KAAK,GAAY,KAAK;QAEtB,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9F,CAAC;IAEO,iBAAiB,CAAC,EAAkB,EAAE,SAAiB;QAC9D,OAAO,oBAAoB,EAAE,IAAI,SAAS,EAAE,CAAC;IAC9C,CAAC;IAEO,iBAAiB,CACxB,EAAkB,EAClB,SAAiB;QAEjB,OAAO,0BAA0B,EAAE,IAAI,SAAS,EAAE,CAAC;IACpD,CAAC;IAEO,eAAe,CACtB,EAAkB,EAClB,WAA8C,EAC9C,MAA0B;QAE1B,OAAO,iCAAiC,CAAC,EAAE,CAAC;YAC3C,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YAC/D,CAAC,CAAC,WAAW,CAAC;IAChB,CAAC;IAEO,gBAAgB,CACvB,EAAkB,EAClB,UAA2C,EAC3C,MAA0B;QAE1B,OAAO,CAAC,iCAAiC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnG,CAAC;IAED;;;;;;;OAOG;IACH,mBAAmB,CAAC,EAAkB,EAAE,UAAsD;QAC7F,kGAAkG;QAClG,iDAAiD;QACjD,IAAI,UAAU,CAAC,YAAY;YAAE,OAAO,UAAU,CAAC,YAAY,CAAC;QAE5D,MAAM,MAAM,GAAG,iCAAiC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACrF,MAAM,UAAU,GAAG,IAAI,CAAC,yBAAyB,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QAChF,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC;IACvF,CAAC;IAED;;;;;;;OAOG;IACH,yBAAyB,CAAC,EAAkB,EAAE,MAA0B,EAAE,KAAe;QACxF,MAAM,MAAM,GAAG,iCAAiC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,yBAAyB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,UAAU,IAAI,IAAI;YAAE,OAAO,SAAS,CAAC;QAEzC,iGAAiG;QACjG,sGAAsG;QACtG,uGAAuG;QACvG,wGAAwG;QACxG,2CAA2C;QAC3C,IAAI,CAAC,UAAU,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAExC,MAAM,eAAe,GAAG,iBAAiB,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QACtD,IAAI,UAAU,CAAC,EAAE,KAAK,UAAU,CAAC,MAAM,IAAI,CAAC,eAAe,IAAI,UAAU,CAAC,EAAE,KAAK,eAAe,CAAC,EAAE,CAAC;YACnG,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,OAAO,UAAU,CAAC,EAAE,CAAC;IACtB,CAAC;IAED;;;;;;OAMG;IACK,yBAAyB,CAChC,EAAkB,EAClB,MAA0B,EAC1B,KAA0B;QAE1B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACjG,IAAI,KAAK,IAAI,IAAI,IAAI,UAAU,IAAI,IAAI;YAAE,OAAO,UAAU,CAAC;QAE3D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,oBAAoB,CAAC,EAAkB,EAAE,YAAoB;QAClE,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,WAAW,IAAI,IAAI,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC5D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC;YAAE,OAAO;QAE1D,MAAM,MAAM,GACX,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC;QACzG,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO;QAE3B,MAAM,MAAM,GAAG,iCAAiC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,iGAAiG;QACjG,8FAA8F;QAC9F,sFAAsF;QACtF,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAC7E,CAAC;QAEF,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACnC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC;gBAAE,OAAO,CAAC,CAAC;YAEpD,MAAM,OAAO,GAAG,CAAC,CAAC,EAAE,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,cAAc,CAAC;YAC/E,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,OAAO;gBAAE,OAAO,CAAC,CAAC;YAE/C,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACpB,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;IAC9B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,EAAkB,EAAE,YAAoB,EAAE,KAAe;QAC/E,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAEO,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,oBAAoB,CAAc;IAElC,yBAAyB,CAAC,EAAkB,EAAE,MAA0B;QAC/E,IAAI,CAAC,iCAAiC,CAAC,EAAE,CAAC;YAAE,OAAO,MAAM,CAAC;QAE1D,OAAO,cAAc,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;IACzC,CAAC;IAEO,YAAY,CAAC,EAAkB,EAAE,KAAyB,EAAE,MAA0B;QAC7F,IAAI,KAAK,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAClC,IAAI,CAAC,iCAAiC,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QACzD,IAAI,KAAK,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO,KAAK,CAAC;QAElD,OAAO,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAEO,UAAU,CAAC,KAAsB,EAAE,OAAwB;QAClE,IAAI,CAAC,oBAAoB,KAAK,QAAQ,CAAC,GAAG,EAAE;YAC3C,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;YAClC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;YACtC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YAEzB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC,EAAE,GAAG,CAAC,CAAC;QAER,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC7B,CAAC;CACD;AAED,SAAS,6BAA6B,CACrC,aAAwC,EACxC,UAAsD,EACtD,cAAuB;IAEvB,IAAI,aAAa,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IAE5C,OAAO;QACN,EAAE,EAAE,aAAa,CAAC,EAAE;QACpB,WAAW,EAAE,aAAa,CAAC,WAAW;QACtC,OAAO,EAAE;YACR,EAAE,EAAE,aAAa,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE;YACnC,KAAK,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;SACzC;QACD,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,KAAK,EAAE,aAAa,CAAC,KAAK,IAAI,cAAc;QAC5C,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;QAClF,MAAM,EAAE,aAAa,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM;QACjD,QAAQ,EAAE,aAAa,CAAC,QAAQ;QAChC,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,iGAAiG;QACjG,0EAA0E;QAC1E,MAAM,EAAE,aAAa,CAAC,MAAM;KAC5B,CAAC;AACH,CAAC"}