@guanjinke/artifact-client 1.5.1 → 1.6.1

package/dist/web/api.js

@@ -0,0 +1,336 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createRequestHandler = createRequestHandler;
+const crypto_1 = require("crypto");
+const registry_1 = require("../environment/registry");
+const plan_1 = require("../environment/plan");
+const update_1 = require("../environment/update");
+const assets_1 = require("./assets");
+const http_1 = require("./http");
+/** The page has no inline script or style, so the strictest policy still works. */
+const htmlPolicy = "default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self' data:; connect-src 'self'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'";
+const failure = (error) => (error instanceof Error ? error.message : String(error));
+/** Constant-time comparison over fixed-size digests, so unequal lengths are safe. */
+function tokenMatches(presented, expected) {
+    if (presented === undefined)
+        return false;
+    const a = (0, crypto_1.createHash)('sha256').update(presented).digest();
+    const b = (0, crypto_1.createHash)('sha256').update(expected).digest();
+    return (0, crypto_1.timingSafeEqual)(a, b);
+}
+function presentedToken(request) {
+    const direct = (0, http_1.header)(request, 'x-afm-token');
+    if (direct)
+        return direct;
+    const authorization = (0, http_1.header)(request, 'authorization');
+    return authorization?.toLowerCase().startsWith('bearer ') ? authorization.slice(7).trim() : undefined;
+}
+function createRequestHandler(context) {
+    return (request, response) => {
+        handle(context, request, response).catch(error => {
+            if (response.headersSent || response.writableEnded) {
+                response.destroy();
+                return;
+            }
+            const status = error instanceof http_1.HttpError ? error.status : 500;
+            (0, http_1.sendJson)(response, status, { error: failure(error) }, error instanceof http_1.HttpError ? error.allow : undefined);
+        });
+    };
+}
+async function handle(context, request, response) {
+    // The Host check comes first: this server binds 127.0.0.1, and a DNS-rebound
+    // request reaches it while carrying the attacker's own host name.
+    if (!context.allowedHosts.has(((0, http_1.header)(request, 'host') ?? '').toLowerCase()))
+        throw new http_1.HttpError(403, 'Unexpected Host header: this server answers only 127.0.0.1/localhost on its own port.');
+    const url = new URL(request.url ?? '/', 'http://127.0.0.1');
+    const segments = url.pathname.split('/').filter(Boolean);
+    if (segments[0] === 'api')
+        return api(context, request, response, segments);
+    return staticAsset(context, request, response, url.pathname);
+}
+async function api(context, request, response, segments) {
+    // A cross-origin page cannot read a reply without CORS, and cannot send a
+    // custom header without a preflight we never answer; the Origin check is the
+    // belt to that suspender for anything a browser sends anyway.
+    const origin = (0, http_1.header)(request, 'origin');
+    if (origin !== undefined) {
+        const permitted = [...context.allowedHosts].some(host => origin === `http://${host}`);
+        if (!permitted)
+            throw new http_1.HttpError(403, 'Cross-origin requests are not accepted.');
+    }
+    if (!tokenMatches(presentedToken(request), context.token))
+        throw new http_1.HttpError(401, 'Missing or invalid token. Open the URL printed by `afm web` (it carries the token).');
+    const method = request.method ?? 'GET';
+    // /api/state | /api/jobs | /api/jobs/<id> | /api/environments | /api/environments/<name>/<action>
+    if (segments[1] === 'state' && segments.length === 2) {
+        if (method !== 'GET')
+            throw new http_1.HttpError(405, 'GET only.', 'GET');
+        return (0, http_1.sendJson)(response, 200, await state(context));
+    }
+    if (segments[1] === 'jobs') {
+        if (segments.length === 2) {
+            if (method !== 'GET')
+                throw new http_1.HttpError(405, 'GET only.', 'GET');
+            return (0, http_1.sendJson)(response, 200, { jobs: context.jobs.list() });
+        }
+        if (segments.length === 3 && method === 'GET') {
+            const job = context.jobs.get(decodeURIComponent(segments[2]));
+            if (!job)
+                throw new http_1.HttpError(404, 'Unknown job.');
+            return (0, http_1.sendJson)(response, 200, job);
+        }
+        throw new http_1.HttpError(404, 'Unknown endpoint.');
+    }
+    if (segments[1] === 'credentials') {
+        if (segments.length === 2 && method === 'POST')
+            return (0, http_1.sendJson)(response, 200, await saveCredentials(context, request));
+        if (segments.length === 3 && method === 'DELETE') {
+            const provider = decodeURIComponent(segments[2] ?? '');
+            if (provider !== 'az' && provider !== 'oss')
+                throw new http_1.HttpError(400, '"provider" must be az or oss.');
+            await context.providers.clear(provider);
+            return (0, http_1.sendJson)(response, 200, credentialsState(context));
+        }
+        if (segments.length === 2 || segments.length === 3)
+            throw new http_1.HttpError(405, method === 'POST' ? 'DELETE only.' : 'POST only.', 'POST, DELETE');
+        throw new http_1.HttpError(404, 'Unknown endpoint.');
+    }
+    if (segments[1] === 'environment-root' && segments.length === 2) {
+        if (method !== 'POST')
+            throw new http_1.HttpError(405, 'POST only.', 'POST');
+        return (0, http_1.sendJson)(response, 200, await setEnvironmentRoot(context, request));
+    }
+    if (segments[1] === 'environments') {
+        if (segments.length === 2) {
+            if (method !== 'POST')
+                throw new http_1.HttpError(405, 'POST only.', 'POST');
+            return (0, http_1.sendJson)(response, 202, await create(context, request));
+        }
+        const name = decodeURIComponent(segments[2] ?? '');
+        if (segments.length === 3) {
+            if (method !== 'DELETE')
+                throw new http_1.HttpError(405, 'DELETE only.', 'DELETE');
+            return (0, http_1.sendJson)(response, 202, await remove(context, request, name));
+        }
+        if (segments.length === 4 && segments[3] === 'modules') {
+            if (method !== 'POST')
+                throw new http_1.HttpError(405, 'POST only.', 'POST');
+            return (0, http_1.sendJson)(response, 202, await updateModules(context, request, name));
+        }
+        if (segments.length === 4 && segments[3] === 'lifecycle') {
+            if (method !== 'POST')
+                throw new http_1.HttpError(405, 'POST only.', 'POST');
+            return (0, http_1.sendJson)(response, 202, await lifecycle(context, request, name));
+        }
+    }
+    throw new http_1.HttpError(404, 'Unknown endpoint.');
+}
+async function staticAsset(context, request, response, pathname) {
+    const method = request.method ?? 'GET';
+    if (method !== 'GET' && method !== 'HEAD')
+        throw new http_1.HttpError(405, 'GET only.', 'GET, HEAD');
+    const route = pathname.endsWith('/') && pathname !== '/' ? pathname.slice(0, -1) : pathname;
+    if (!assets_1.assetRoutes[route])
+        throw new http_1.HttpError(404, 'Not found.');
+    const asset = await (0, assets_1.loadAsset)(context.assetsDirectory, route);
+    if (!asset)
+        throw new http_1.HttpError(404, 'Web interface asset is missing; rebuild with "npm run build".');
+    (0, http_1.sendText)(response, 200, asset.body.toString('utf8'), asset.contentType, asset.contentType.startsWith('text/html') ? { 'Content-Security-Policy': htmlPolicy } : undefined);
+}
+/** Projection of a registry row: the page never needs process command lines. */
+function environmentRow(row) {
+    return {
+        id: row.id, name: row.name, root: row.root, port: row.port, edition: row.edition, major: row.major, profile: row.profile,
+        modules: row.modules, localModules: row.localModules ?? [], state: row.state, observedState: row.observedState,
+        ...(row.problem !== undefined ? { problem: row.problem } : {}),
+        createdAt: row.createdAt, ...(row.lastMode !== undefined ? { lastMode: row.lastMode } : {}),
+        ...(row.run ? { pid: row.run.pid, runMode: row.run.mode } : {}),
+    };
+}
+/** Non-secret credential facts the page may show after a save or a clear. */
+function credentialsState(context) {
+    return { providers: context.providers.available(), providerInfo: context.providers.info() };
+}
+/**
+ * Store one provider's credentials.
+ *
+ * The reply carries availability and non-secret names only: a SAS URL or an OSS
+ * key is never sent back to the browser (or into a job log).
+ */
+async function saveCredentials(context, request) {
+    const body = await (0, http_1.readJson)(request, context.maxBodyBytes);
+    const provider = (0, http_1.requireEnum)(body, 'provider', ['az', 'oss']);
+    const credentials = {
+        ...((0, http_1.optionalString)(body, 'sasUrl') !== undefined ? { sasUrl: (0, http_1.optionalString)(body, 'sasUrl') } : {}),
+        ...((0, http_1.optionalString)(body, 'keyId') !== undefined ? { keyId: (0, http_1.optionalString)(body, 'keyId') } : {}),
+        ...((0, http_1.optionalString)(body, 'key') !== undefined ? { key: (0, http_1.optionalString)(body, 'key') } : {}),
+        ...((0, http_1.optionalString)(body, 'bucket') !== undefined ? { bucket: (0, http_1.optionalString)(body, 'bucket') } : {}),
+        ...((0, http_1.optionalString)(body, 'region') !== undefined ? { region: (0, http_1.optionalString)(body, 'region') } : {}),
+    };
+    try {
+        await context.providers.save(provider, credentials);
+    }
+    catch (error) {
+        throw new http_1.HttpError(400, failure(error));
+    }
+    return credentialsState(context);
+}
+/** Remember the directory new environments are created in; `unset` forgets it. */
+async function setEnvironmentRoot(context, request) {
+    const body = await (0, http_1.readJson)(request, context.maxBodyBytes);
+    const unset = (0, http_1.optionalBoolean)(body, 'unset') ?? false;
+    const requested = (0, http_1.optionalString)(body, 'root');
+    if (unset && requested !== undefined && requested.trim() !== '')
+        throw new http_1.HttpError(400, 'Pass either "root" or "unset", not both.');
+    try {
+        const root = await context.setEnvironmentRoot(unset || requested === undefined || requested.trim() === '' ? null : requested.trim());
+        return { environmentRoot: root, exists: root !== null };
+    }
+    catch (error) {
+        throw new http_1.HttpError(400, failure(error));
+    }
+}
+async function state(context) {
+    const info = context.state();
+    const rows = await context.manager.list();
+    return {
+        version: info.version,
+        platform: info.platform,
+        environmentRoot: info.environmentRoot,
+        providers: context.providers.available(),
+        providerInfo: context.providers.info(),
+        createOptions: { optionalModulesByEdition: plan_1.optionalModulesByEdition, editions: ['cn', 'en'], majors: ['9.1', 'dev'], defaultPort: plan_1.defaultPort, portRange: { first: plan_1.portRange.first, last: plan_1.portRange.last } },
+        updateOptions: { modules: [...update_1.updatableModules] },
+        environments: rows.map(environmentRow),
+        jobs: context.jobs.list().slice(0, 12),
+    };
+}
+async function create(context, request) {
+    const body = await (0, http_1.readJson)(request, context.maxBodyBytes);
+    const name = (0, http_1.requireString)(body, 'name');
+    try {
+        (0, registry_1.validateName)(name);
+    }
+    catch (error) {
+        throw new http_1.HttpError(400, failure(error));
+    }
+    const provider = (0, http_1.requireEnum)(body, 'provider', ['az', 'oss']);
+    if (!context.providers.available()[provider])
+        throw new http_1.HttpError(400, `Provider ${provider} has no stored credentials. Run "afm ${provider} login" first.`);
+    const major = (0, http_1.requireString)(body, 'major');
+    const modules = body.modules === undefined ? [] : (0, http_1.requireStringList)(body, 'modules');
+    const edition = (0, http_1.optionalEnum)(body, 'edition', ['cn', 'en']) ?? 'cn';
+    const port = (0, http_1.requireOptionalInteger)(body, 'port', 1, 65535);
+    const dryRun = (0, http_1.optionalBoolean)(body, 'dryRun') ?? false;
+    const requestedRoot = (0, http_1.optionalString)(body, 'root')?.trim() || undefined;
+    // Fail a duplicate name before a job is queued; the manager re-checks inside
+    // the registry lock, which is the authoritative reservation.
+    if ((await context.registry.read()).some(entry => entry.name.toLowerCase() === name.toLowerCase()))
+        throw new http_1.HttpError(409, `Environment name already registered: ${name}.`);
+    const root = await context.resolveRoot(name, requestedRoot, dryRun);
+    const options = { root, major, modules, edition, profile: 'embedded', ...(port !== undefined ? { port } : {}), dryRun };
+    // `create-env` validates the options and target directory before it builds a
+    // plan; doing the same here turns a bad major or module into an immediate 400
+    // instead of a failed job.
+    try {
+        await (0, plan_1.validateEnvironmentOptions)(options);
+    }
+    catch (error) {
+        throw new http_1.HttpError(400, failure(error));
+    }
+    return context.jobs.run({ kind: 'create', target: name, provider, dryRun }, progress => context.manager.create(name, options, () => context.providers.client(provider), progress));
+}
+async function requireEnvironment(context, name) {
+    try {
+        (0, registry_1.validateName)(name);
+    }
+    catch (error) {
+        throw new http_1.HttpError(400, failure(error));
+    }
+    try {
+        return await context.registry.get(name);
+    }
+    catch (error) {
+        throw new http_1.HttpError(404, failure(error));
+    }
+}
+async function remove(context, request, name) {
+    const entry = await requireEnvironment(context, name);
+    const body = await (0, http_1.readJson)(request, context.maxBodyBytes);
+    const confirmation = (0, http_1.optionalString)(body, 'confirm')?.trim() ?? '';
+    if (confirmation.toLowerCase() !== entry.name.toLowerCase())
+        throw new http_1.HttpError(400, `Deletion requires "confirm": "${entry.name}" — the environment name typed exactly.`);
+    const target = entry.name;
+    return context.jobs.run({ kind: 'delete', target }, progress => {
+        progress(`Stopping and deleting ${target} at ${entry.root}`);
+        return context.manager.delete(target, async () => true);
+    });
+}
+async function lifecycle(context, request, name) {
+    const entry = await requireEnvironment(context, name);
+    const body = await (0, http_1.readJson)(request, context.maxBodyBytes);
+    const action = (0, http_1.requireEnum)(body, 'action', ['start', 'stop', 'restart']);
+    const target = entry.name;
+    return context.jobs.run({ kind: 'lifecycle', target }, async (progress) => {
+        // Background only: a foreground monitor inherits this server's console and
+        // would keep the job open until the web server itself exits.
+        if (action === 'start') {
+            progress(`Starting ${target} in background mode`);
+            await context.manager.start(target, 'background');
+        }
+        else if (action === 'restart') {
+            progress(`Restarting ${target} in background mode`);
+            await context.manager.restart(target, 'background');
+        }
+        else {
+            progress(`Stopping ${target}`);
+            await context.manager.stop(target);
+        }
+        const after = (await context.registry.read()).find(entry => entry.name.toLowerCase() === target.toLowerCase());
+        progress(`${target}: ${action} complete; registry state ${after?.state ?? 'unknown'}. Output goes to <root>/logs/server.*.log; HTTP readiness is not checked.`);
+        return { name: target, action, ...(action === 'stop' ? {} : { mode: 'background' }) };
+    });
+}
+async function updateModules(context, request, name) {
+    const entry = await requireEnvironment(context, name);
+    const body = await (0, http_1.readJson)(request, context.maxBodyBytes);
+    const specs = (0, http_1.requireRawStringList)(body, 'specs');
+    let parsed;
+    try {
+        parsed = (0, update_1.parseModuleSpecs)(specs);
+    }
+    catch (error) {
+        throw new http_1.HttpError(400, failure(error));
+    }
+    if (!parsed.length)
+        throw new http_1.HttpError(400, '"specs" must contain at least one module spec.');
+    const dryRun = (0, http_1.optionalBoolean)(body, 'dryRun') ?? false;
+    const requestedProvider = (0, http_1.optionalString)(body, 'provider');
+    if (requestedProvider !== undefined && requestedProvider !== 'az' && requestedProvider !== 'oss')
+        throw new http_1.HttpError(400, '"provider" must be az or oss.');
+    // Local-only updates never construct a client, so no provider is needed then.
+    const needsRemote = parsed.some(spec => spec.localPath === undefined);
+    let provider;
+    if (needsRemote) {
+        const available = context.providers.available();
+        const configured = ['az', 'oss'].filter(candidate => available[candidate]);
+        if (requestedProvider !== undefined)
+            provider = requestedProvider;
+        else if (configured.length === 1)
+            provider = configured[0];
+        else if (!configured.length)
+            throw new http_1.HttpError(400, 'No cloud provider is configured: run "afm az login" or "afm oss login" first.');
+        else
+            throw new http_1.HttpError(400, 'Both az and oss are configured: pass "provider" to say which one resolves these artifacts.');
+        if (!available[provider])
+            throw new http_1.HttpError(400, `Provider ${provider} has no stored credentials. Run "afm ${provider} login" first.`);
+    }
+    const target = entry.name;
+    const clientFactory = () => {
+        if (provider === undefined)
+            throw new Error('A cloud provider is required for remote module specs.');
+        return context.providers.client(provider);
+    };
+    return context.jobs.run({ kind: 'update', target, ...(provider !== undefined ? { provider } : {}), dryRun }, progress => context.updater.update(target, specs, clientFactory, { dryRun, onProgress: progress }));
+}
+//# sourceMappingURL=api.js.map

package/dist/web/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/web/api.ts"],"names":[],"mappings":";;AAuDA,oDAQC;AA9DD,mCAAqD;AACrD,sDAA0E;AAC1E,8CAAmH;AAEnH,kDAA2E;AAC3E,qCAAkD;AAClD,iCAAqN;AAIrN,mFAAmF;AACnF,MAAM,UAAU,GAAG,gKAAgK,CAAC;AA0BpL,MAAM,OAAO,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAErG,qFAAqF;AACrF,SAAS,YAAY,CAAC,SAA6B,EAAE,QAAgB;IACnE,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,CAAC,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1D,MAAM,CAAC,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;IACzD,OAAO,IAAA,wBAAe,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CAAC,OAAwB;IAC9C,MAAM,MAAM,GAAG,IAAA,aAAM,EAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,aAAa,GAAG,IAAA,aAAM,EAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACvD,OAAO,aAAa,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACxG,CAAC;AAED,SAAgB,oBAAoB,CAAC,OAAmB;IACtD,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3B,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YAC/C,IAAI,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;gBAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACnF,MAAM,MAAM,GAAG,KAAK,YAAY,gBAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;YAC/D,IAAA,eAAQ,EAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,YAAY,gBAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC9G,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,OAAmB,EAAE,OAAwB,EAAE,QAAwB;IAC3F,6EAA6E;IAC7E,kEAAkE;IAClE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAA,aAAM,EAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,uFAAuF,CAAC,CAAC;IAChM,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK;QAAE,OAAO,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5E,OAAO,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,OAAmB,EAAE,OAAwB,EAAE,QAAwB,EAAE,QAAkB;IAC5G,0EAA0E;IAC1E,6EAA6E;IAC7E,8DAA8D;IAC9D,MAAM,MAAM,GAAG,IAAA,aAAM,EAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC,CAAC;QACtF,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,yCAAyC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,qFAAqF,CAAC,CAAC;IAE3K,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;IACvC,kGAAkG;IAClG,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,IAAI,MAAM,KAAK,KAAK;YAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QACnE,OAAO,IAAA,eAAQ,EAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC3B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,MAAM,KAAK,KAAK;gBAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;YACnE,OAAO,IAAA,eAAQ,EAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YACnD,OAAO,IAAA,eAAQ,EAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;QAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,IAAA,eAAQ,EAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACxH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACvD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,KAAK;gBAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;YACvG,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACxC,OAAO,IAAA,eAAQ,EAAC,QAAQ,EAAE,GAAG,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QAChJ,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,kBAAkB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,IAAI,MAAM,KAAK,MAAM;YAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QACtE,OAAO,IAAA,eAAQ,EAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,cAAc,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACtE,OAAO,IAAA,eAAQ,EAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,MAAM,KAAK,QAAQ;gBAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;YAC5E,OAAO,IAAA,eAAQ,EAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACvD,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACtE,OAAO,IAAA,eAAQ,EAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YACzD,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACtE,OAAO,IAAA,eAAQ,EAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAmB,EAAE,OAAwB,EAAE,QAAwB,EAAE,QAAgB;IAClH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;IACvC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM;QAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAC9F,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5F,IAAI,CAAC,oBAAW,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,MAAM,IAAA,kBAAS,EAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,+DAA+D,CAAC,CAAC;IACtG,IAAA,eAAQ,EAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,yBAAyB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAC7K,CAAC;AAED,gFAAgF;AAChF,SAAS,cAAc,CAAC,GAAmB;IACzC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO;QACxH,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa;QAC9G,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,SAAS,gBAAgB,CAAC,OAAmB;IAC3C,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;AAC9F,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAAC,OAAmB,EAAE,OAAwB;IAC1E,MAAM,IAAI,GAAG,MAAM,IAAA,eAAQ,EAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAA,kBAAW,EAAW,IAAI,EAAE,UAAU,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACxE,MAAM,WAAW,GAAyB;QACxC,GAAG,CAAC,IAAA,qBAAc,EAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAA,qBAAc,EAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnG,GAAG,CAAC,IAAA,qBAAc,EAAC,IAAI,EAAE,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAA,qBAAc,EAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,GAAG,CAAC,IAAA,qBAAc,EAAC,IAAI,EAAE,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAA,qBAAc,EAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,GAAG,CAAC,IAAA,qBAAc,EAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAA,qBAAc,EAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnG,GAAG,CAAC,IAAA,qBAAc,EAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAA,qBAAc,EAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpG,CAAC;IACF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,kBAAkB,CAAC,OAAmB,EAAE,OAAwB;IAC7E,MAAM,IAAI,GAAG,MAAM,IAAA,eAAQ,EAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAA,sBAAe,EAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC;IACtD,MAAM,SAAS,GAAG,IAAA,qBAAc,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/C,IAAI,KAAK,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;IACtI,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,KAAK,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QACrI,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,OAAmB;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1C,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE;QACxC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE;QACtC,aAAa,EAAE,EAAE,wBAAwB,EAAxB,+BAAwB,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,WAAW,EAAX,kBAAW,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,gBAAS,CAAC,KAAK,EAAE,IAAI,EAAE,gBAAS,CAAC,IAAI,EAAE,EAAE;QACrK,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,yBAAgB,CAAC,EAAE;QACjD,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC;QACtC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,OAAmB,EAAE,OAAwB;IACjE,MAAM,IAAI,GAAG,MAAM,IAAA,eAAQ,EAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAA,oBAAa,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC;QAAC,IAAA,uBAAY,EAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,IAAA,kBAAW,EAAW,IAAI,EAAE,UAAU,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,YAAY,QAAQ,wCAAwC,QAAQ,gBAAgB,CAAC,CAAC;IAC7J,MAAM,KAAK,GAAG,IAAA,oBAAa,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAA,wBAAiB,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,IAAA,mBAAY,EAAC,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,CAAU,CAAC,IAAI,IAAI,CAAC;IAC7E,MAAM,IAAI,GAAG,IAAA,6BAAsB,EAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,IAAA,sBAAe,EAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC;IACxD,MAAM,aAAa,GAAG,IAAA,qBAAc,EAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAExE,6EAA6E;IAC7E,6DAA6D;IAC7D,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,wCAAwC,IAAI,GAAG,CAAC,CAAC;IAC9K,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,OAAO,GAAuB,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5I,6EAA6E;IAC7E,8EAA8E;IAC9E,2BAA2B;IAC3B,IAAI,CAAC;QAAC,MAAM,IAAA,iCAA0B,EAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,CAAC;IAC9G,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;AACrL,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,OAAmB,EAAE,IAAY;IACjE,IAAI,CAAC;QAAC,IAAA,uBAAY,EAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,CAAC;IACvF,IAAI,CAAC;QAAC,OAAO,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,CAAC;AAC9G,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,OAAmB,EAAE,OAAwB,EAAE,IAAY;IAC/E,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,IAAA,eAAQ,EAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,IAAA,qBAAc,EAAC,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnE,IAAI,YAAY,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,iCAAiC,KAAK,CAAC,IAAI,yCAAyC,CAAC,CAAC;IAC5K,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC;IAC1B,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,QAAQ,CAAC,EAAE;QAC7D,QAAQ,CAAC,yBAAyB,MAAM,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAAmB,EAAE,OAAwB,EAAE,IAAY;IAClF,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,IAAA,eAAQ,EAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAA,kBAAW,EAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC;IAC1B,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,KAAK,EAAC,QAAQ,EAAC,EAAE;QACtE,2EAA2E;QAC3E,6DAA6D;QAC7D,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YAAC,QAAQ,CAAC,YAAY,MAAM,qBAAqB,CAAC,CAAC;YAAC,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAAC,CAAC;aAC5H,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAAC,QAAQ,CAAC,cAAc,MAAM,qBAAqB,CAAC,CAAC;YAAC,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAAC,CAAC;aACvI,CAAC;YAAC,QAAQ,CAAC,YAAY,MAAM,EAAE,CAAC,CAAC;YAAC,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/G,QAAQ,CAAC,GAAG,MAAM,KAAK,MAAM,6BAA6B,KAAK,EAAE,KAAK,IAAI,SAAS,2EAA2E,CAAC,CAAC;QAChK,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAAmB,EAAE,OAAwB,EAAE,IAAY;IACtF,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,IAAA,eAAQ,EAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAA,2BAAoB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QAAC,MAAM,GAAG,IAAA,yBAAgB,EAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,CAAC;IACrG,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,gDAAgD,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,IAAA,sBAAe,EAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC;IACxD,MAAM,iBAAiB,GAAG,IAAA,qBAAc,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC3D,IAAI,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,KAAK,IAAI,IAAI,iBAAiB,KAAK,KAAK;QAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAE5J,8EAA8E;IAC9E,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IACtE,IAAI,QAA8B,CAAC;IACnC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QAChD,MAAM,UAAU,GAAI,CAAC,IAAI,EAAE,KAAK,CAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3F,IAAI,iBAAiB,KAAK,SAAS;YAAE,QAAQ,GAAG,iBAA6B,CAAC;aACzE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;aACtD,IAAI,CAAC,UAAU,CAAC,MAAM;YAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,+EAA+E,CAAC,CAAC;;YAClI,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,4FAA4F,CAAC,CAAC;QAC5H,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,gBAAS,CAAC,GAAG,EAAE,YAAY,QAAQ,wCAAwC,QAAQ,gBAAgB,CAAC,CAAC;IAC3I,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC;IAC1B,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACrG,OAAO,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;AACnN,CAAC"}

package/dist/web/assets.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The web bundle is a fixed set of files built from `web/` by
+ * `scripts/build-web.js` into `dist/web/static`. Only these exact routes are
+ * served, so no request can ever reach a caller-chosen path.
+ */
+export type AssetRoute = {
+    file: string;
+    contentType: string;
+};
+export declare const assetRoutes: Record<string, AssetRoute>;
+/** Every file a complete `dist/web/static` build contains. */
+export declare const assetFiles: readonly ["index.html", "app.js", "styles.css", "favicon.svg"];
+/** `dist/web/static` next to the compiled server. */
+export declare function defaultAssetDirectory(): string;
+export declare function loadAsset(directory: string, route: string): Promise<{
+    body: Buffer;
+    contentType: string;
+} | undefined>;
+/**
+ * Fail fast with an actionable message when the frontend was never built.
+ *
+ * `tsc` alone does not produce the bundle, so a server started from a
+ * partially built tree would otherwise serve 404s for its own page.
+ */
+export declare function verifyAssets(directory: string): Promise<void>;
+//# sourceMappingURL=assets.d.ts.map

package/dist/web/assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../src/web/assets.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/D,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAOlD,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,UAAU,gEAAiE,CAAC;AAEzF,qDAAqD;AACrD,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,wBAAsB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAAC,CAS5H;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASnE"}

package/dist/web/assets.js

@@ -0,0 +1,87 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assetFiles = exports.assetRoutes = void 0;
+exports.defaultAssetDirectory = defaultAssetDirectory;
+exports.loadAsset = loadAsset;
+exports.verifyAssets = verifyAssets;
+const fs = __importStar(require("fs/promises"));
+const path = __importStar(require("path"));
+exports.assetRoutes = {
+    '/': { file: 'index.html', contentType: 'text/html; charset=utf-8' },
+    '/index.html': { file: 'index.html', contentType: 'text/html; charset=utf-8' },
+    '/app.js': { file: 'app.js', contentType: 'text/javascript; charset=utf-8' },
+    '/styles.css': { file: 'styles.css', contentType: 'text/css; charset=utf-8' },
+    // The page declares this icon, so it must be served or every load logs a 404.
+    '/favicon.svg': { file: 'favicon.svg', contentType: 'image/svg+xml' },
+};
+/** Every file a complete `dist/web/static` build contains. */
+exports.assetFiles = ['index.html', 'app.js', 'styles.css', 'favicon.svg'];
+/** `dist/web/static` next to the compiled server. */
+function defaultAssetDirectory() {
+    return path.join(__dirname, 'static');
+}
+async function loadAsset(directory, route) {
+    const asset = exports.assetRoutes[route];
+    if (!asset)
+        return undefined;
+    try {
+        return { body: await fs.readFile(path.join(directory, asset.file)), contentType: asset.contentType };
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return undefined;
+        throw error;
+    }
+}
+/**
+ * Fail fast with an actionable message when the frontend was never built.
+ *
+ * `tsc` alone does not produce the bundle, so a server started from a
+ * partially built tree would otherwise serve 404s for its own page.
+ */
+async function verifyAssets(directory) {
+    for (const file of exports.assetFiles) {
+        try {
+            const stat = await fs.stat(path.join(directory, file));
+            if (!stat.isFile())
+                throw new Error('not a file');
+        }
+        catch {
+            throw new Error(`Web interface asset missing: ${path.join(directory, file)}. Run "npm run build" to build the web bundle.`);
+        }
+    }
+}
+//# sourceMappingURL=assets.js.map

package/dist/web/assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.js","sourceRoot":"","sources":["../../src/web/assets.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBA,sDAEC;AAED,8BASC;AAQD,oCASC;AArDD,gDAAkC;AAClC,2CAA6B;AAShB,QAAA,WAAW,GAA+B;IACrD,GAAG,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,0BAA0B,EAAE;IACpE,aAAa,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,0BAA0B,EAAE;IAC9E,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;IAC5E,aAAa,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,yBAAyB,EAAE;IAC7E,8EAA8E;IAC9E,cAAc,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE;CACtE,CAAC;AAEF,8DAA8D;AACjD,QAAA,UAAU,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,CAAU,CAAC;AAEzF,qDAAqD;AACrD,SAAgB,qBAAqB;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAEM,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,KAAa;IAC9D,MAAM,KAAK,GAAG,mBAAW,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;IACvG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,YAAY,CAAC,SAAiB;IAClD,KAAK,MAAM,IAAI,IAAI,kBAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/web/http.d.ts

@@ -0,0 +1,41 @@
+import { IncomingMessage, ServerResponse } from 'http';
+/** A failure that should reach the caller as an HTTP status rather than a 500. */
+export declare class HttpError extends Error {
+    readonly status: number;
+    readonly allow?: string | undefined;
+    constructor(status: number, message: string, allow?: string | undefined);
+}
+/** Response headers shared by every reply; no CORS header is ever sent. */
+export declare function applySecurityHeaders(response: ServerResponse): void;
+export declare function sendJson(response: ServerResponse, status: number, payload: unknown, allow?: string): void;
+export declare function sendText(response: ServerResponse, status: number, text: string, contentType: string, extra?: Record<string, string>): void;
+/** First value of a possibly repeated header, or undefined. */
+export declare function header(request: IncomingMessage, name: string): string | undefined;
+/**
+ * Read a JSON object body.
+ *
+ * Only `application/json` is accepted, so a browser form (which can be posted
+ * cross-origin without a preflight) can never reach a state-changing handler.
+ * An oversized body is drained rather than aborted, so the caller still
+ * receives the 413 instead of a reset connection.
+ */
+export declare function readJson(request: IncomingMessage, limit: number): Promise<Record<string, unknown>>;
+export declare function requireString(body: Record<string, unknown>, field: string): string;
+export declare function optionalString(body: Record<string, unknown>, field: string): string | undefined;
+export declare function requireEnum<T extends string>(body: Record<string, unknown>, field: string, allowed: readonly T[]): T;
+export declare function optionalEnum<T extends string>(body: Record<string, unknown>, field: string, allowed: readonly T[]): T | undefined;
+export declare function requireOptionalInteger(body: Record<string, unknown>, field: string, min: number, max: number): number | undefined;
+export declare function optionalBoolean(body: Record<string, unknown>, field: string): boolean | undefined;
+/** A `string[]` field that also accepts a single whitespace/comma separated string. */
+export declare function requireStringList(body: Record<string, unknown>, field: string): string[];
+/**
+ * A `string[]` field that is passed through unsplit.
+ *
+ * Module *specs* must reach `parseModuleSpecs` verbatim: a spec carrying a local
+ * source (`dashboard=D:\my build\out.dll`) is split on commas only there, so a
+ * Windows path may contain spaces.
+ */
+export declare function requireRawStringList(body: Record<string, unknown>, field: string): string[];
+/** Same separator handling as the CLI's `--modules` values for plain module names. */
+export declare function splitList(value: string): string[];
+//# sourceMappingURL=http.d.ts.map

package/dist/web/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/web/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AAEvD,kFAAkF;AAClF,qBAAa,SAAU,SAAQ,KAAK;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAmB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM;gBAAxD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAW,KAAK,CAAC,EAAE,MAAM,YAAA;CAC9E;AAED,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAInE;AAED,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CASzG;AAED,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAK1I;AAED,+DAA+D;AAC/D,wBAAgB,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGjF;AAED;;;;;;;GAOG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAkBxG;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAIlF;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK/F;AAED,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAIpH;AAED,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,GAAG,SAAS,CAGjI;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKjI;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAKjG;AAED,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAQxF;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAK3F;AAED,sFAAsF;AACtF,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEjD"}