@harrylabsj/kiwi 0.8.0 → 0.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (214) hide show
  1. package/README.md +1 -1
  2. package/dist/a2a/negotiate.d.ts +6 -2
  3. package/dist/a2a/negotiate.js +10 -3
  4. package/dist/a2a/negotiate.js.map +1 -1
  5. package/dist/a2a/node.d.ts +4 -1
  6. package/dist/a2a/node.js +56 -3
  7. package/dist/a2a/node.js.map +1 -1
  8. package/dist/a2a/server/merchant-handler.d.ts +11 -3
  9. package/dist/a2a/server/merchant-handler.js +84 -26
  10. package/dist/a2a/server/merchant-handler.js.map +1 -1
  11. package/dist/agent/buyer/buyer-tools.js +2 -2
  12. package/dist/agent/buyer/buyer-tools.js.map +1 -1
  13. package/dist/agent/kernel.js +5 -1
  14. package/dist/agent/kernel.js.map +1 -1
  15. package/dist/agent/memory/schema.d.ts +1 -1
  16. package/dist/agent/memory/schema.js +9 -1
  17. package/dist/agent/memory/schema.js.map +1 -1
  18. package/dist/agent/merchant/action-candidate.d.ts +18 -0
  19. package/dist/agent/merchant/action-candidate.js +51 -0
  20. package/dist/agent/merchant/action-candidate.js.map +1 -1
  21. package/dist/agent/merchant/fake-merchant-client.js +6 -1
  22. package/dist/agent/merchant/fake-merchant-client.js.map +1 -1
  23. package/dist/agent/merchant/intelligence/default-backend.js +25 -2
  24. package/dist/agent/merchant/intelligence/default-backend.js.map +1 -1
  25. package/dist/agent/merchant/merchant-client.d.ts +50 -1
  26. package/dist/agent/merchant/merchant-client.js +157 -8
  27. package/dist/agent/merchant/merchant-client.js.map +1 -1
  28. package/dist/agent/merchant/merchant-presentations.js +25 -2
  29. package/dist/agent/merchant/merchant-presentations.js.map +1 -1
  30. package/dist/agent/merchant/merchant-tools.js +102 -188
  31. package/dist/agent/merchant/merchant-tools.js.map +1 -1
  32. package/dist/agent/merchant/types.d.ts +6 -2
  33. package/dist/agent/merchant/types.js +45 -0
  34. package/dist/agent/merchant/types.js.map +1 -1
  35. package/dist/auth/merchant-authorization.d.ts +49 -0
  36. package/dist/auth/merchant-authorization.js +61 -0
  37. package/dist/auth/merchant-authorization.js.map +1 -0
  38. package/dist/auth/merchant-oauth.d.ts +255 -0
  39. package/dist/auth/merchant-oauth.js +764 -0
  40. package/dist/auth/merchant-oauth.js.map +1 -0
  41. package/dist/auth/merchant-pairing.d.ts +62 -0
  42. package/dist/auth/merchant-pairing.js +199 -0
  43. package/dist/auth/merchant-pairing.js.map +1 -0
  44. package/dist/auth/merchant-sessions.d.ts +71 -0
  45. package/dist/auth/merchant-sessions.js +168 -0
  46. package/dist/auth/merchant-sessions.js.map +1 -0
  47. package/dist/buyer-core/build-service.d.ts +5 -0
  48. package/dist/buyer-core/build-service.js +12 -0
  49. package/dist/buyer-core/build-service.js.map +1 -1
  50. package/dist/buyer-core/errors.d.ts +1 -1
  51. package/dist/buyer-core/errors.js +2 -0
  52. package/dist/buyer-core/errors.js.map +1 -1
  53. package/dist/buyer-core/merchant-index.d.ts +19 -4
  54. package/dist/buyer-core/merchant-index.js +137 -16
  55. package/dist/buyer-core/merchant-index.js.map +1 -1
  56. package/dist/buyer-core/negotiator.d.ts +0 -10
  57. package/dist/buyer-core/negotiator.js +12 -1
  58. package/dist/buyer-core/negotiator.js.map +1 -1
  59. package/dist/buyer-core/quote-fetcher.js +2 -1
  60. package/dist/buyer-core/quote-fetcher.js.map +1 -1
  61. package/dist/buyer-core/service.d.ts +104 -0
  62. package/dist/buyer-core/service.js +105 -1
  63. package/dist/buyer-core/service.js.map +1 -1
  64. package/dist/cli.d.ts +4 -2
  65. package/dist/cli.js +612 -20
  66. package/dist/cli.js.map +1 -1
  67. package/dist/config/profile.d.ts +30 -0
  68. package/dist/config/profile.js +126 -61
  69. package/dist/config/profile.js.map +1 -1
  70. package/dist/demo/demo-runner.js +12 -9
  71. package/dist/demo/demo-runner.js.map +1 -1
  72. package/dist/discovery/catalog-source/buyer-follows.d.ts +82 -0
  73. package/dist/discovery/catalog-source/buyer-follows.js +228 -0
  74. package/dist/discovery/catalog-source/buyer-follows.js.map +1 -0
  75. package/dist/discovery/catalog-source/connector-identity.d.ts +75 -0
  76. package/dist/discovery/catalog-source/connector-identity.js +175 -0
  77. package/dist/discovery/catalog-source/connector-identity.js.map +1 -0
  78. package/dist/discovery/catalog-source/errors.d.ts +1 -1
  79. package/dist/discovery/catalog-source/errors.js +2 -0
  80. package/dist/discovery/catalog-source/errors.js.map +1 -1
  81. package/dist/discovery/catalog-source/merchant-publications.d.ts +65 -0
  82. package/dist/discovery/catalog-source/merchant-publications.js +207 -0
  83. package/dist/discovery/catalog-source/merchant-publications.js.map +1 -0
  84. package/dist/discovery/catalog-source/register.d.ts +24 -0
  85. package/dist/discovery/catalog-source/register.js +46 -0
  86. package/dist/discovery/catalog-source/register.js.map +1 -1
  87. package/dist/discovery/catalog-source/source.js +2 -1
  88. package/dist/discovery/catalog-source/source.js.map +1 -1
  89. package/dist/fs/atomic-write.d.ts +18 -0
  90. package/dist/fs/atomic-write.js +29 -0
  91. package/dist/fs/atomic-write.js.map +1 -0
  92. package/dist/http/server.js +4 -1
  93. package/dist/http/server.js.map +1 -1
  94. package/dist/mcp/cli.d.ts +2 -0
  95. package/dist/mcp/cli.js +7 -6
  96. package/dist/mcp/cli.js.map +1 -1
  97. package/dist/mcp/merchant-auth.d.ts +78 -0
  98. package/dist/mcp/merchant-auth.js +146 -0
  99. package/dist/mcp/merchant-auth.js.map +1 -0
  100. package/dist/mcp/merchant-dirs.d.ts +26 -0
  101. package/dist/mcp/merchant-dirs.js +44 -0
  102. package/dist/mcp/merchant-dirs.js.map +1 -0
  103. package/dist/mcp/merchant-resources.d.ts +38 -0
  104. package/dist/mcp/merchant-resources.js +146 -0
  105. package/dist/mcp/merchant-resources.js.map +1 -0
  106. package/dist/mcp/merchant-server.d.ts +106 -0
  107. package/dist/mcp/merchant-server.js +615 -0
  108. package/dist/mcp/merchant-server.js.map +1 -0
  109. package/dist/mcp/merchant-tools.d.ts +103 -0
  110. package/dist/mcp/merchant-tools.js +517 -0
  111. package/dist/mcp/merchant-tools.js.map +1 -0
  112. package/dist/mcp/server.js +4 -3
  113. package/dist/mcp/server.js.map +1 -1
  114. package/dist/mcp/tools.d.ts +5 -3
  115. package/dist/mcp/tools.js +102 -5
  116. package/dist/mcp/tools.js.map +1 -1
  117. package/dist/mcp/types.d.ts +1 -1
  118. package/dist/mcp/types.js +4 -0
  119. package/dist/mcp/types.js.map +1 -1
  120. package/dist/merchant/ops.d.ts +0 -11
  121. package/dist/merchant/ops.js +13 -1
  122. package/dist/merchant/ops.js.map +1 -1
  123. package/dist/merchant/workbench-service.d.ts +189 -0
  124. package/dist/merchant/workbench-service.js +417 -0
  125. package/dist/merchant/workbench-service.js.map +1 -0
  126. package/dist/merchant-admin/pending-page.d.ts +35 -0
  127. package/dist/merchant-admin/pending-page.js +69 -0
  128. package/dist/merchant-admin/pending-page.js.map +1 -0
  129. package/dist/merchant-core/commands.d.ts +99 -0
  130. package/dist/merchant-core/commands.js +179 -0
  131. package/dist/merchant-core/commands.js.map +1 -0
  132. package/dist/merchant-core/executor.d.ts +69 -0
  133. package/dist/merchant-core/executor.js +218 -0
  134. package/dist/merchant-core/executor.js.map +1 -0
  135. package/dist/merchant-core/negotiation-adapters.d.ts +55 -0
  136. package/dist/merchant-core/negotiation-adapters.js +55 -0
  137. package/dist/merchant-core/negotiation-adapters.js.map +1 -0
  138. package/dist/merchant-core/network-checks.d.ts +65 -0
  139. package/dist/merchant-core/network-checks.js +111 -0
  140. package/dist/merchant-core/network-checks.js.map +1 -0
  141. package/dist/merchant-core/operations.d.ts +64 -0
  142. package/dist/merchant-core/operations.js +136 -0
  143. package/dist/merchant-core/operations.js.map +1 -0
  144. package/dist/merchant-core/policy-runtime.d.ts +70 -0
  145. package/dist/merchant-core/policy-runtime.js +181 -0
  146. package/dist/merchant-core/policy-runtime.js.map +1 -0
  147. package/dist/merchant-core/product-import.d.ts +67 -0
  148. package/dist/merchant-core/product-import.js +160 -0
  149. package/dist/merchant-core/product-import.js.map +1 -0
  150. package/dist/merchant-core/service.d.ts +203 -0
  151. package/dist/merchant-core/service.js +402 -0
  152. package/dist/merchant-core/service.js.map +1 -0
  153. package/dist/merchant-gateway/catalog-publications.d.ts +71 -0
  154. package/dist/merchant-gateway/catalog-publications.js +175 -0
  155. package/dist/merchant-gateway/catalog-publications.js.map +1 -0
  156. package/dist/merchant-gateway/catalog-tools.d.ts +46 -0
  157. package/dist/merchant-gateway/catalog-tools.js +277 -0
  158. package/dist/merchant-gateway/catalog-tools.js.map +1 -0
  159. package/dist/merchant-gateway/cli.d.ts +75 -0
  160. package/dist/merchant-gateway/cli.js +458 -0
  161. package/dist/merchant-gateway/cli.js.map +1 -0
  162. package/dist/merchant-gateway/credential-vault.d.ts +44 -0
  163. package/dist/merchant-gateway/credential-vault.js +111 -0
  164. package/dist/merchant-gateway/credential-vault.js.map +1 -0
  165. package/dist/merchant-gateway/entry-server.d.ts +117 -0
  166. package/dist/merchant-gateway/entry-server.js +710 -0
  167. package/dist/merchant-gateway/entry-server.js.map +1 -0
  168. package/dist/merchant-gateway/instance-registration.d.ts +143 -0
  169. package/dist/merchant-gateway/instance-registration.js +382 -0
  170. package/dist/merchant-gateway/instance-registration.js.map +1 -0
  171. package/dist/merchant-gateway/instance-tools.d.ts +58 -0
  172. package/dist/merchant-gateway/instance-tools.js +184 -0
  173. package/dist/merchant-gateway/instance-tools.js.map +1 -0
  174. package/dist/merchant-gateway/mcp-proxy.d.ts +25 -0
  175. package/dist/merchant-gateway/mcp-proxy.js +192 -0
  176. package/dist/merchant-gateway/mcp-proxy.js.map +1 -0
  177. package/dist/merchant-gateway/pinned-fetch.d.ts +52 -0
  178. package/dist/merchant-gateway/pinned-fetch.js +212 -0
  179. package/dist/merchant-gateway/pinned-fetch.js.map +1 -0
  180. package/dist/merchant-gateway/tenant-registry.d.ts +82 -0
  181. package/dist/merchant-gateway/tenant-registry.js +190 -0
  182. package/dist/merchant-gateway/tenant-registry.js.map +1 -0
  183. package/dist/merchant-gateway/tool-bundle.d.ts +26 -0
  184. package/dist/merchant-gateway/tool-bundle.js +56 -0
  185. package/dist/merchant-gateway/tool-bundle.js.map +1 -0
  186. package/dist/merchant-runtime/backup.d.ts +48 -0
  187. package/dist/merchant-runtime/backup.js +226 -0
  188. package/dist/merchant-runtime/backup.js.map +1 -0
  189. package/dist/merchant-runtime/health.d.ts +99 -0
  190. package/dist/merchant-runtime/health.js +206 -0
  191. package/dist/merchant-runtime/health.js.map +1 -0
  192. package/dist/merchant-runtime/jobs.d.ts +64 -0
  193. package/dist/merchant-runtime/jobs.js +107 -0
  194. package/dist/merchant-runtime/jobs.js.map +1 -0
  195. package/dist/merchant-runtime/manager.d.ts +94 -0
  196. package/dist/merchant-runtime/manager.js +305 -0
  197. package/dist/merchant-runtime/manager.js.map +1 -0
  198. package/dist/merchant-runtime/services.d.ts +30 -0
  199. package/dist/merchant-runtime/services.js +51 -0
  200. package/dist/merchant-runtime/services.js.map +1 -0
  201. package/dist/net/url.d.ts +26 -0
  202. package/dist/net/url.js +32 -0
  203. package/dist/net/url.js.map +1 -0
  204. package/dist/product-cli.js +22 -3
  205. package/dist/product-cli.js.map +1 -1
  206. package/dist/product-compat.d.ts +9 -1
  207. package/dist/product-compat.js +12 -1
  208. package/dist/product-compat.js.map +1 -1
  209. package/dist/product-init.js +17 -5
  210. package/dist/product-init.js.map +1 -1
  211. package/dist/product-publish.js +2 -1
  212. package/dist/product-publish.js.map +1 -1
  213. package/package.json +3 -2
  214. package/skills/kiwi-buyer/SKILL.md +2 -0
@@ -0,0 +1,615 @@
1
+ /**
2
+ * Copyright 2026 harrylabsj
3
+ *
4
+ * Licensed under the Apache License, Version 2.0 (the "License");
5
+ * you may not use this file except in compliance with the License.
6
+ * You may obtain a copy of the License at
7
+ *
8
+ * http://www.apache.org/licenses/LICENSE-2.0
9
+ *
10
+ * Unless required by applicable law or agreed to in writing, software
11
+ * distributed under the License is distributed on an "AS IS" BASIS,
12
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13
+ * See the License for the specific language governing permissions and
14
+ * limitations under the License.
15
+ */
16
+ /**
17
+ * Merchant Workbench 标准远程 MCP Server(WorkBuddy Buddy 应用开发计划 阶段二)。
18
+ *
19
+ * 官方 @modelcontextprotocol/sdk 的 StreamableHTTPServerTransport(无状态模式,
20
+ * sessionIdGenerator: undefined——每个请求独立的 Server+Transport,天然适配
21
+ * 远程连接器,不维护进程内会话状态),承载在 Node http 上。
22
+ *
23
+ * 边界:
24
+ * - 独立端口/路径(缺省 9100 / /mcp),不复用 A2A `/` 端点;
25
+ * - 单商家一服务(MVP):一个实例绑定一个 MerchantWorkbenchService(其
26
+ * expectedMerchantId = profile.owner_id),租户校验在 Facade 内;
27
+ * - Bearer 认证由调用方注入校验器(merchant-auth.ts);本层只负责在配置
28
+ * 了校验器时强制执行(401,不回显原因细节之外的信息);
29
+ * - 不持有任何商业状态——状态唯一权威在 MerchantWorkbenchService 背后的
30
+ * Ledger/Store。
31
+ */
32
+ import { createServer, } from "node:http";
33
+ import { Server } from "@modelcontextprotocol/sdk/server/index.js";
34
+ import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
35
+ import { CallToolRequestSchema, ListResourcesRequestSchema, ListToolsRequestSchema, ReadResourceRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
36
+ import { buildMerchantMcpTools, } from "./merchant-tools.js";
37
+ import { renderPendingPage } from "../merchant-admin/pending-page.js";
38
+ import { ADMIN_SESSION_COOKIE, readAdminCredentials, renderAdminLoginPage, verifyAdminPassword, } from "../auth/merchant-sessions.js";
39
+ import { contentHash } from "../agent/merchant/action-candidate.js";
40
+ import { issuePairedCredential, redeemPairingCode } from "../auth/merchant-pairing.js";
41
+ /** 从 Cookie 头取值(管理会话)。 */
42
+ function cookieValue(req, name) {
43
+ const header = req.headers.cookie;
44
+ if (header === undefined)
45
+ return undefined;
46
+ for (const part of header.split(";")) {
47
+ const eq = part.indexOf("=");
48
+ if (eq === -1)
49
+ continue;
50
+ if (part.slice(0, eq).trim() === name)
51
+ return part.slice(eq + 1).trim();
52
+ }
53
+ return undefined;
54
+ }
55
+ /** 只允许管理面内部相对路径,避免 XSS 和开放重定向。 */
56
+ function safeAdminNext(value) {
57
+ if (value === undefined ||
58
+ value === "" ||
59
+ !value.startsWith("/") ||
60
+ value.startsWith("//") ||
61
+ value.includes("\\")) {
62
+ return "/admin/pending";
63
+ }
64
+ return value;
65
+ }
66
+ /** 缺省监听地址(远程连接器形态;fail-closed 由 merchant-auth 守卫)。 */
67
+ export const DEFAULT_MERCHANT_MCP_HOST = "0.0.0.0";
68
+ /** 缺省端口(与 A2A 9000 分离)。 */
69
+ export const DEFAULT_MERCHANT_MCP_PORT = 9100;
70
+ /** 缺省 MCP endpoint 路径。 */
71
+ export const DEFAULT_MERCHANT_MCP_PATH = "/mcp";
72
+ /** POST body 上限(防御性;MCP 工具入参都很小)。 */
73
+ const MAX_BODY_BYTES = 1_048_576;
74
+ function writeJson(res, status, body, headers = {}) {
75
+ const text = JSON.stringify(body);
76
+ res.writeHead(status, { "content-type": "application/json", ...headers });
77
+ res.end(text);
78
+ }
79
+ /** RFC 6749 §5.1:token/授权/管理面响应必须 no-store(审查 P2:token 与
80
+ * 一次性确认凭证不得落入共享缓存)。 */
81
+ const NO_STORE_HEADERS = {
82
+ "cache-control": "no-store",
83
+ pragma: "no-cache",
84
+ };
85
+ /** 读 POST body(超上限直接拒绝,绝不流入解析)。 */
86
+ async function readBody(req) {
87
+ const chunks = [];
88
+ let size = 0;
89
+ for await (const chunk of req) {
90
+ size += chunk.length;
91
+ if (size > MAX_BODY_BYTES) {
92
+ throw new Error(`request body exceeds ${MAX_BODY_BYTES} bytes`);
93
+ }
94
+ chunks.push(chunk);
95
+ }
96
+ if (chunks.length === 0)
97
+ return undefined;
98
+ return JSON.parse(Buffer.concat(chunks).toString("utf8"));
99
+ }
100
+ /** 每个请求独立的协议 Server(无状态模式),handlers 引用共享的工具分发器。
101
+ * scopes 来自本次请求的授权上下文(OAuth access_token);undefined = 静态
102
+ * token 过渡模式(全量 scope)。tools/list 按 scope 过滤,tools/call 逐次强制。 */
103
+ export function createProtocolServer(serverInfo, toolsBundle, scopes, presentations) {
104
+ const server = new Server({ name: serverInfo.name, version: serverInfo.version }, { capabilities: { tools: {}, ...(presentations !== undefined ? { resources: {} } : {}) } });
105
+ server.setRequestHandler(ListToolsRequestSchema, async () => ({
106
+ tools: await toolsBundle.listTools(scopes),
107
+ }));
108
+ if (presentations !== undefined) {
109
+ server.setRequestHandler(ListResourcesRequestSchema, () => ({
110
+ resources: scopes === undefined || scopes.includes("merchant:read") ? presentations.list() : [],
111
+ }));
112
+ server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
113
+ if (scopes !== undefined && !scopes.includes("merchant:read")) {
114
+ throw new Error("scope 不足:resources/read 需要 merchant:read");
115
+ }
116
+ return await presentations.read(request.params.uri);
117
+ });
118
+ }
119
+ server.setRequestHandler(CallToolRequestSchema, async (request) => {
120
+ const result = await toolsBundle.call(request.params.name, (request.params.arguments ?? {}), scopes);
121
+ // SDK 1.30 的 CallToolResult 含 task 增强变体;本 server 只用经典
122
+ // content/structuredContent/isError 形状。
123
+ return result;
124
+ });
125
+ return server;
126
+ }
127
+ /**
128
+ * 启动 Merchant MCP Server(streamable HTTP,无状态)。
129
+ * 返回 handle 含实际 host/port(port 传 0 时取 ephemeral 端口)与优雅关闭。
130
+ */
131
+ export async function startMerchantMcpServer(options) {
132
+ const host = options.host ?? DEFAULT_MERCHANT_MCP_HOST;
133
+ const port = options.port ?? DEFAULT_MERCHANT_MCP_PORT;
134
+ const mcpPath = options.path ?? DEFAULT_MERCHANT_MCP_PATH;
135
+ const serverInfo = options.serverInfo ?? { name: "kiwi-merchant-workbench", version: "0.0.0" };
136
+ const toolsBundle = buildMerchantMcpTools(options.service, {
137
+ ...(options.maxChars !== undefined ? { maxChars: options.maxChars } : {}),
138
+ ...(options.requestTimeoutMs !== undefined
139
+ ? { requestTimeoutMs: options.requestTimeoutMs }
140
+ : {}),
141
+ });
142
+ // 活跃连接跟踪:close() 时连同 transport 一起关闭,优雅退出。
143
+ const transports = new Set();
144
+ let closing = false;
145
+ // 审查 P2:无认证端点限速(进程内计数,重启归零可接受——目标是抬高脚本
146
+ // 刷注册/在线爆破口令的成本,不做分布式级配额)。
147
+ const registerHits = new Map();
148
+ const loginFailures = new Map();
149
+ const REGISTER_LIMIT_PER_HOUR = 20;
150
+ const LOGIN_MAX_FAILURES = 10;
151
+ const LOGIN_BLOCK_MS = 5 * 60 * 1000;
152
+ const clientKey = (req) => req.socket.remoteAddress ?? "unknown";
153
+ const pruneRateLimits = (nowMs) => {
154
+ if (registerHits.size > 4096) {
155
+ for (const [k, v] of registerHits) {
156
+ if (nowMs - v.windowStart > 60 * 60 * 1000)
157
+ registerHits.delete(k);
158
+ }
159
+ }
160
+ if (loginFailures.size > 4096) {
161
+ for (const [k, v] of loginFailures) {
162
+ if (nowMs >= v.blockedUntil && v.count === 0)
163
+ loginFailures.delete(k);
164
+ }
165
+ }
166
+ };
167
+ /** OAuth 端点结果写出(JSON / HTML 授权页 / 302 回跳)。统一附加 no-store。 */
168
+ const writeOAuthResult = (res, result) => {
169
+ const headers = { ...NO_STORE_HEADERS, ...(result.headers ?? {}) };
170
+ if (result.html !== undefined) {
171
+ res.writeHead(result.status, {
172
+ "content-type": "text/html; charset=utf-8",
173
+ ...headers,
174
+ });
175
+ res.end(result.html);
176
+ return;
177
+ }
178
+ if (headers.location !== undefined) {
179
+ res.writeHead(result.status, headers);
180
+ res.end();
181
+ return;
182
+ }
183
+ writeJson(res, result.status, result.body ?? {}, headers);
184
+ };
185
+ /** 读表单/JSON body(/oauth/token 等用 application/x-www-form-urlencoded)。 */
186
+ const readForm = async (req) => {
187
+ const chunks = [];
188
+ let size = 0;
189
+ for await (const chunk of req) {
190
+ size += chunk.length;
191
+ if (size > MAX_BODY_BYTES)
192
+ throw new Error(`request body exceeds ${MAX_BODY_BYTES} bytes`);
193
+ chunks.push(chunk);
194
+ }
195
+ const text = Buffer.concat(chunks).toString("utf8");
196
+ if (text.trim() === "")
197
+ return {};
198
+ if ((req.headers["content-type"] ?? "").includes("application/json")) {
199
+ return JSON.parse(text);
200
+ }
201
+ return Object.fromEntries(new URLSearchParams(text).entries());
202
+ };
203
+ /** OAuth 端点路由(授权流程本身不需要 Bearer;/mcp 才校验)。 */
204
+ const routeOAuth = async (req, res, url) => {
205
+ const oauth = options.oauth;
206
+ if (oauth === undefined)
207
+ return false;
208
+ const p = url.pathname;
209
+ if (req.method === "GET" && p === "/.well-known/oauth-protected-resource") {
210
+ writeOAuthResult(res, oauth.protectedResourceMetadata());
211
+ return true;
212
+ }
213
+ if (req.method === "GET" && p === "/.well-known/oauth-authorization-server") {
214
+ writeOAuthResult(res, oauth.authorizationServerMetadata());
215
+ return true;
216
+ }
217
+ if (req.method === "POST" && p === "/oauth/register") {
218
+ // 限速(审查 P2):注册无认证,按来源 IP 限每小时次数。
219
+ const nowMs = Date.now();
220
+ pruneRateLimits(nowMs);
221
+ const ip = clientKey(req);
222
+ const reg = registerHits.get(ip);
223
+ if (reg === undefined || nowMs - reg.windowStart > 60 * 60 * 1000) {
224
+ registerHits.set(ip, { count: 1, windowStart: nowMs });
225
+ }
226
+ else {
227
+ reg.count += 1;
228
+ if (reg.count > REGISTER_LIMIT_PER_HOUR) {
229
+ writeJson(res, 429, {
230
+ error: "slow_down",
231
+ error_description: "too many client registrations from this source",
232
+ });
233
+ return true;
234
+ }
235
+ }
236
+ // RFC 7591:畸形 body 属客户端错误 → 400 invalid_client_metadata,
237
+ // 不冒泡成 500(审查 P2:此前 500 且顶层 catch 静默无日志)。
238
+ let body;
239
+ try {
240
+ body = await readBody(req);
241
+ }
242
+ catch (err) {
243
+ process.stderr.write(`[merchant oauth] /oauth/register body 解析失败:${err instanceof Error ? err.message : String(err)}\n`);
244
+ writeJson(res, 400, {
245
+ error: "invalid_client_metadata",
246
+ error_description: "request body must be valid JSON",
247
+ });
248
+ return true;
249
+ }
250
+ writeOAuthResult(res, oauth.register(body));
251
+ return true;
252
+ }
253
+ if (req.method === "GET" && p === "/oauth/authorize") {
254
+ // BUG-01:授权页需要管理登录会话(cookie);无会话 → 303 登录页。
255
+ const sessionId = cookieValue(req, ADMIN_SESSION_COOKIE);
256
+ const session = sessionId !== undefined && options.admin !== undefined
257
+ ? options.admin.sessions.getSession(sessionId)
258
+ : undefined;
259
+ writeOAuthResult(res, oauth.authorize(Object.fromEntries(url.searchParams.entries()), session));
260
+ return true;
261
+ }
262
+ if (req.method === "POST" &&
263
+ (p === "/oauth/authorize" || p === "/oauth/token" || p === "/oauth/revoke")) {
264
+ let form;
265
+ try {
266
+ form = await readForm(req);
267
+ }
268
+ catch (err) {
269
+ process.stderr.write(`[merchant oauth] ${p} body 解析失败:${err instanceof Error ? err.message : String(err)}\n`);
270
+ writeJson(res, 400, {
271
+ error: "invalid_request",
272
+ error_description: "malformed request body",
273
+ });
274
+ return true;
275
+ }
276
+ let result;
277
+ if (p === "/oauth/authorize") {
278
+ const sessionId = cookieValue(req, ADMIN_SESSION_COOKIE);
279
+ const session = sessionId !== undefined && options.admin !== undefined
280
+ ? options.admin.sessions.getSession(sessionId)
281
+ : undefined;
282
+ if (session === undefined) {
283
+ writeOAuthResult(res, {
284
+ status: 401,
285
+ body: {
286
+ error: "login_required",
287
+ error_description: "授权提交需要有效的商家管理会话",
288
+ },
289
+ });
290
+ return true;
291
+ }
292
+ result = oauth.authorizeSubmit(form, session);
293
+ }
294
+ else if (p === "/oauth/token") {
295
+ result = oauth.token(form);
296
+ }
297
+ else {
298
+ result = oauth.revoke(form);
299
+ }
300
+ writeOAuthResult(res, result);
301
+ return true;
302
+ }
303
+ if (p.startsWith("/oauth/") || p.startsWith("/.well-known/oauth-")) {
304
+ writeJson(res, 404, { error: "not_found", message: `unknown OAuth endpoint ${p}` });
305
+ return true;
306
+ }
307
+ return false;
308
+ };
309
+ const httpServer = createServer((req, res) => {
310
+ void (async () => {
311
+ const url = new URL(req.url ?? "/", "http://localhost");
312
+ if (await routeOAuth(req, res, url))
313
+ return;
314
+ // 一次性配对码兑换(设计 §8.4 第二期):只能兑换一次,过期即失效;
315
+ // 成功才返回内部凭据(供商家连接器网关按 merchant_id 路由使用)。
316
+ if (options.pairing !== undefined &&
317
+ req.method === "POST" &&
318
+ url.pathname === "/pairing/redeem") {
319
+ const nowMs = Date.now();
320
+ pruneRateLimits(nowMs);
321
+ const ip = clientKey(req);
322
+ const hits = registerHits.get(`pair:${ip}`);
323
+ if (hits === undefined || nowMs - hits.windowStart > 60 * 60 * 1000) {
324
+ registerHits.set(`pair:${ip}`, { count: 1, windowStart: nowMs });
325
+ }
326
+ else {
327
+ hits.count += 1;
328
+ if (hits.count > 30) {
329
+ writeJson(res, 429, { error: "slow_down", message: "配对码尝试过于频繁" });
330
+ return;
331
+ }
332
+ }
333
+ let form;
334
+ try {
335
+ form = await readForm(req);
336
+ }
337
+ catch {
338
+ writeJson(res, 400, { error: "invalid_request", message: "请求体解析失败" });
339
+ return;
340
+ }
341
+ const code = String(form.code ?? "");
342
+ if (!redeemPairingCode(options.pairing.dir, code)) {
343
+ writeJson(res, 403, {
344
+ error: "invalid_pairing_code",
345
+ message: "配对码无效或已过期(请在实例上重新生成)",
346
+ });
347
+ return;
348
+ }
349
+ const identity = options.pairing.instance();
350
+ // 兑换即签发:新凭据覆盖旧的(单槽轮换),明文只在此响应里出现一次。
351
+ const issued = issuePairedCredential(options.pairing.dir);
352
+ process.stderr.write(`[merchant pairing] issued paired credential for owner=${identity.ownerId}` +
353
+ `(旧配对凭据已失效)\n`);
354
+ writeJson(res, 200, {
355
+ ok: true,
356
+ instance: { owner_id: identity.ownerId, principal_id: identity.principalId },
357
+ // 能力探测:实例自报名称/版本,供网关在绑定页展示与兼容性判断。
358
+ server_info: { name: serverInfo.name, version: serverInfo.version },
359
+ credential: issued.credential,
360
+ });
361
+ return;
362
+ }
363
+ // 配套商家管理面(BUG-01/03 修复后):登录用 cookie 会话(HttpOnly/
364
+ // SameSite=Lax/生产 Secure);/admin/pending 需会话;/admin/decision
365
+ // 需会话 + 一次性确认凭证(绑定候选摘要/主体/商家/动作,单次用途)。
366
+ if (options.admin !== undefined && url.pathname.startsWith("/admin/")) {
367
+ const admin = options.admin;
368
+ // 登录端点(公开;口令校验后签发会话)。失败退避(审查 P2:scrypt
369
+ // 单次成本不足以挡在线爆破,按来源连续失败 10 次锁 5 分钟)。
370
+ if (url.pathname === "/admin/login") {
371
+ if (req.method === "GET") {
372
+ res.writeHead(200, {
373
+ "content-type": "text/html; charset=utf-8",
374
+ ...NO_STORE_HEADERS,
375
+ });
376
+ res.end(renderAdminLoginPage({
377
+ next: safeAdminNext(url.searchParams.get("next") ?? undefined),
378
+ }));
379
+ return;
380
+ }
381
+ if (req.method === "POST") {
382
+ const nowMs = Date.now();
383
+ pruneRateLimits(nowMs);
384
+ const ip = clientKey(req);
385
+ const failure = loginFailures.get(ip);
386
+ if (failure !== undefined && nowMs < failure.blockedUntil) {
387
+ res.writeHead(429, {
388
+ "content-type": "text/html; charset=utf-8",
389
+ ...NO_STORE_HEADERS,
390
+ });
391
+ res.end(renderAdminLoginPage({ error: "失败次数过多,请 5 分钟后再试" }));
392
+ return;
393
+ }
394
+ const form = await readForm(req);
395
+ const creds = readAdminCredentials(admin.adminDir);
396
+ const password = form.password ?? "";
397
+ if (creds === undefined || !verifyAdminPassword(password, creds.password_hash)) {
398
+ const count = (failure?.count ?? 0) + 1;
399
+ loginFailures.set(ip, {
400
+ count,
401
+ blockedUntil: count >= LOGIN_MAX_FAILURES ? nowMs + LOGIN_BLOCK_MS : failure?.blockedUntil ?? 0,
402
+ });
403
+ res.writeHead(200, {
404
+ "content-type": "text/html; charset=utf-8",
405
+ ...NO_STORE_HEADERS,
406
+ });
407
+ res.end(renderAdminLoginPage({ error: "口令错误或管理员未初始化" }));
408
+ return;
409
+ }
410
+ loginFailures.delete(ip);
411
+ const session = admin.sessions.createSession({
412
+ principalId: creds.principal_id,
413
+ merchantId: creds.merchant_id,
414
+ });
415
+ const secure = admin.secureCookies === true ? "; Secure" : "";
416
+ res.writeHead(303, {
417
+ location: safeAdminNext(form.next),
418
+ "set-cookie": `${ADMIN_SESSION_COOKIE}=${session.sessionId}; HttpOnly; SameSite=Lax; Path=/${secure}`,
419
+ });
420
+ res.end();
421
+ return;
422
+ }
423
+ }
424
+ // 其余 /admin/* 需要有效会话
425
+ const sessionId = cookieValue(req, ADMIN_SESSION_COOKIE);
426
+ const session = sessionId !== undefined ? admin.sessions.getSession(sessionId) : undefined;
427
+ if (session === undefined) {
428
+ res.writeHead(303, { location: "/admin/login" });
429
+ res.end();
430
+ return;
431
+ }
432
+ if (req.method === "GET" && url.pathname === "/admin/pending") {
433
+ const commands = admin.surface.listPending();
434
+ // 按候选签发一次性确认凭证(表单 CSRF + 确认绑定,单次用途)
435
+ const tokenFor = (candidateId, action) => {
436
+ const candidate = commands.find((c) => c.candidate_id === candidateId);
437
+ if (candidate === undefined)
438
+ return "";
439
+ return admin.store.createConfirmation({
440
+ candidateId,
441
+ candidateDigest: contentHash({
442
+ arguments: candidate.arguments,
443
+ preconditions: candidate.preconditions,
444
+ }),
445
+ principalId: session.principal_id,
446
+ merchantId: session.merchant_id,
447
+ action,
448
+ });
449
+ };
450
+ res.writeHead(200, {
451
+ "content-type": "text/html; charset=utf-8",
452
+ // 页面内嵌一次性确认凭证(审查 P2):绝不进缓存。
453
+ ...NO_STORE_HEADERS,
454
+ });
455
+ res.end(renderPendingPage(admin.merchantName, commands, tokenFor));
456
+ return;
457
+ }
458
+ if (req.method === "POST" && url.pathname === "/admin/decision") {
459
+ const form = await readForm(req);
460
+ const commandId = form.command_id ?? "";
461
+ const action = form.decision === "approve"
462
+ ? "approve"
463
+ : form.decision === "reject"
464
+ ? "reject"
465
+ : undefined;
466
+ if (action === undefined) {
467
+ writeJson(res, 400, {
468
+ error: "invalid_request",
469
+ message: "decision 必须是 approve/reject",
470
+ });
471
+ return;
472
+ }
473
+ const candidate = admin.surface.listPending().find((c) => c.candidate_id === commandId);
474
+ if (candidate === undefined) {
475
+ writeJson(res, 400, {
476
+ error: "not_found",
477
+ message: `未知或非 pending 命令 ${commandId}`,
478
+ });
479
+ return;
480
+ }
481
+ // 一次性确认凭证由执行层(命令日志)逐项核对并核销(候选内容摘要/
482
+ // 主体/商家/动作/有效期/单次用途)——路由不再预消费,防双重核销。
483
+ try {
484
+ if (action === "approve") {
485
+ await admin.surface.executeApproved(commandId, session.principal_id, form.confirmation);
486
+ }
487
+ else {
488
+ await admin.surface.rejectCandidate(commandId, session.principal_id, form.confirmation);
489
+ }
490
+ }
491
+ catch (err) {
492
+ // 不回显异常消息(可能含内部细节):只按「确认凭证失效」与「其余失败」
493
+ // 两类给稳定结论,原文进 stderr。
494
+ const expired = err instanceof Error && err.message.includes("确认凭证");
495
+ process.stderr.write(`[merchant mcp] /admin/decision 失败:${err instanceof Error ? err.message : String(err)}\n`);
496
+ writeJson(res, expired ? 403 : 400, {
497
+ error: expired ? "invalid_confirmation" : "command_failed",
498
+ message: expired ? "确认凭证无效或已过期,请刷新待批准页重试" : "审批未执行(详见服务日志)",
499
+ });
500
+ return;
501
+ }
502
+ // 回跳待批准页(PRG 模式)
503
+ res.writeHead(303, { location: "/admin/pending" });
504
+ res.end();
505
+ return;
506
+ }
507
+ writeJson(res, 404, { error: "not_found" });
508
+ return;
509
+ }
510
+ if (url.pathname !== mcpPath) {
511
+ writeJson(res, 404, { error: "not_found", message: `unknown path ${url.pathname}` });
512
+ return;
513
+ }
514
+ let scopes;
515
+ if (options.auth !== undefined) {
516
+ const verdict = options.auth.verify({
517
+ ...(typeof req.headers.authorization === "string"
518
+ ? { authorizationHeader: req.headers.authorization }
519
+ : {}),
520
+ });
521
+ if (!verdict.ok) {
522
+ // RFC 9728:401 携带 resource_metadata 指引客户端发现授权服务器。
523
+ writeJson(res, 401, { error: "unauthorized", message: "认证失败:需要有效的 Bearer token" }, {
524
+ "www-authenticate": options.oauth !== undefined
525
+ ? `Bearer resource_metadata="${options.oauth.resourceMetadataUrl}"`
526
+ : "Bearer",
527
+ });
528
+ return;
529
+ }
530
+ // OAuth 模式按 token scope 过滤;静态 token 过渡模式全量(undefined)。
531
+ scopes = verdict.authorization?.scopes;
532
+ }
533
+ if (req.method !== "POST" && req.method !== "GET" && req.method !== "DELETE") {
534
+ writeJson(res, 405, { error: "method_not_allowed" }, { allow: "POST, GET, DELETE" });
535
+ return;
536
+ }
537
+ let body;
538
+ try {
539
+ body = req.method === "POST" ? await readBody(req) : undefined;
540
+ }
541
+ catch (err) {
542
+ // 超限 413;其余(JSON 解析失败等)属客户端错误 → 400(审查 P2)。
543
+ const tooLarge = err instanceof Error && err.message.includes("exceeds");
544
+ if (!tooLarge) {
545
+ process.stderr.write(`[merchant mcp] /mcp body 解析失败:${err instanceof Error ? err.message : String(err)}\n`);
546
+ }
547
+ // 不回显异常消息:响应只给稳定结论,细节已在上面进 stderr。
548
+ writeJson(res, tooLarge ? 413 : 400, {
549
+ error: "invalid_request",
550
+ message: tooLarge ? "请求体超过大小上限" : "请求体无法解析",
551
+ });
552
+ return;
553
+ }
554
+ const protocolServer = createProtocolServer(serverInfo, toolsBundle, scopes, options.presentations);
555
+ const transport = new StreamableHTTPServerTransport({
556
+ sessionIdGenerator: undefined,
557
+ enableJsonResponse: true,
558
+ });
559
+ transports.add(transport);
560
+ res.on("close", () => {
561
+ transports.delete(transport);
562
+ void transport.close().catch(() => undefined);
563
+ void protocolServer.close().catch(() => undefined);
564
+ });
565
+ try {
566
+ await protocolServer.connect(transport);
567
+ await transport.handleRequest(req, res, body);
568
+ }
569
+ catch (err) {
570
+ // 内部异常消息(可能含栈/上游响应内容)只进 stderr,不回显给调用方。
571
+ process.stderr.write(`[merchant mcp] /mcp transport error:${err instanceof Error ? err.message : String(err)}\n`);
572
+ if (!res.headersSent) {
573
+ writeJson(res, 500, { error: "internal_error", message: "服务内部错误" });
574
+ }
575
+ else {
576
+ res.end();
577
+ }
578
+ }
579
+ })().catch((err) => {
580
+ // 审查 P2:顶层静默吞错让排障无迹——记错误摘要(不含 body 与凭据)。
581
+ process.stderr.write(`[merchant mcp] ${req.method} ${req.url ?? "/"} 处理异常:` +
582
+ `${err instanceof Error ? err.message : String(err)}\n`);
583
+ if (!res.headersSent)
584
+ writeJson(res, 500, { error: "internal_error" });
585
+ else
586
+ res.end();
587
+ });
588
+ });
589
+ await new Promise((resolve, reject) => {
590
+ httpServer.once("error", reject);
591
+ httpServer.listen(port, host, () => resolve());
592
+ });
593
+ const address = httpServer.address();
594
+ const boundPort = typeof address === "object" && address !== null ? address.port : port;
595
+ return {
596
+ host,
597
+ port: boundPort,
598
+ path: mcpPath,
599
+ url: `http://${host === "0.0.0.0" ? "127.0.0.1" : host}:${boundPort}${mcpPath}`,
600
+ close: async () => {
601
+ if (closing)
602
+ return;
603
+ closing = true;
604
+ for (const transport of transports) {
605
+ await transport.close().catch(() => undefined);
606
+ }
607
+ transports.clear();
608
+ await new Promise((resolve) => {
609
+ httpServer.close(() => resolve());
610
+ httpServer.closeAllConnections();
611
+ });
612
+ },
613
+ };
614
+ }
615
+ //# sourceMappingURL=merchant-server.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"merchant-server.js","sourceRoot":"","sources":["../../src/mcp/merchant-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EACL,YAAY,GAIb,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,GAE1B,MAAM,oCAAoC,CAAC;AAK5C,OAAO,EACL,qBAAqB,GAGtB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAA6B,MAAM,mCAAmC,CAAC;AACjG,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,GAEpB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEvF,0BAA0B;AAC1B,SAAS,WAAW,CAAC,GAAoB,EAAE,IAAY;IACrD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,kCAAkC;AAClC,SAAS,aAAa,CAAC,KAAyB;IAC9C,IACE,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,EAAE;QACZ,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACtB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EACpB,CAAC;QACD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,MAAM,yBAAyB,GAAG,SAAS,CAAC;AACnD,2BAA2B;AAC3B,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAC9C,0BAA0B;AAC1B,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEhD,qCAAqC;AACrC,MAAM,cAAc,GAAG,SAAS,CAAC;AAwDjC,SAAS,SAAS,CAChB,GAAmB,EACnB,MAAc,EACd,IAAa,EACb,UAAkC,EAAE;IAEpC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC1E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;wBACwB;AACxB,MAAM,gBAAgB,GAA2B;IAC/C,eAAe,EAAE,UAAU;IAC3B,MAAM,EAAE,UAAU;CACnB,CAAC;AAEF,mCAAmC;AACnC,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,IAAI,IAAK,KAAgB,CAAC,MAAM,CAAC;QACjC,IAAI,IAAI,GAAG,cAAc,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,wBAAwB,cAAc,QAAQ,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;AACvE,CAAC;AAeD;;kEAEkE;AAClE,MAAM,UAAU,oBAAoB,CAClC,UAA6C,EAC7C,WAA2B,EAC3B,MAA4B,EAC5B,aAAqE;IAErE,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,EACtD,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC3F,CAAC;IACF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,EAAE,MAAM,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC;KAC3C,CAAC,CAAC,CAAC;IACJ,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,CAAC,iBAAiB,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC;YAC1D,SAAS,EAAE,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;SAChG,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACpE,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC9D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CACnC,OAAO,CAAC,MAAM,CAAC,IAAI,EACnB,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAA4B,EAC3D,MAAM,CACP,CAAC;QACF,sDAAsD;QACtD,wCAAwC;QACxC,OAAO,MAAwB,CAAC;IAClC,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAiC;IAEjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,yBAAyB,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,yBAAyB,CAAC;IACvD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,yBAAyB,CAAC;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC/F,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE;QACzD,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;YACxC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IAEH,0CAA0C;IAC1C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC5D,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,uCAAuC;IACvC,2BAA2B;IAC3B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkD,CAAC;IAC/E,MAAM,aAAa,GAAG,IAAI,GAAG,EAAmD,CAAC;IACjF,MAAM,uBAAuB,GAAG,EAAE,CAAC;IACnC,MAAM,kBAAkB,GAAG,EAAE,CAAC;IAC9B,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACrC,MAAM,SAAS,GAAG,CAAC,GAAoB,EAAU,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;IAC1F,MAAM,eAAe,GAAG,CAAC,KAAa,EAAQ,EAAE;QAC9C,IAAI,YAAY,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;YAC7B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC;gBAClC,IAAI,KAAK,GAAG,CAAC,CAAC,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;oBAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QACD,IAAI,aAAa,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;YAC9B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,aAAa,EAAE,CAAC;gBACnC,IAAI,KAAK,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC;oBAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,4DAA4D;IAC5D,MAAM,gBAAgB,GAAG,CAAC,GAAmB,EAAE,MAAuB,EAAQ,EAAE;QAC9E,MAAM,OAAO,GAAG,EAAE,GAAG,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QACnE,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE;gBAC3B,cAAc,EAAE,0BAA0B;gBAC1C,GAAG,OAAO;aACX,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACtC,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC,CAAC;IAEF,wEAAwE;IACxE,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAoB,EAA+C,EAAE;QAC3F,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;YAC9B,IAAI,IAAK,KAAgB,CAAC,MAAM,CAAC;YACjC,IAAI,IAAI,GAAG,cAAc;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,cAAc,QAAQ,CAAC,CAAC;YAC3F,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuC,CAAC;QAChE,CAAC;QACD,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC;IAEF,6CAA6C;IAC7C,MAAM,UAAU,GAAG,KAAK,EACtB,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACU,EAAE;QACpB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;QACvB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,KAAK,uCAAuC,EAAE,CAAC;YAC1E,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,yBAAyB,EAAE,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,KAAK,yCAAyC,EAAE,CAAC;YAC5E,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,2BAA2B,EAAE,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,KAAK,iBAAiB,EAAE,CAAC;YACrD,iCAAiC;YACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,eAAe,CAAC,KAAK,CAAC,CAAC;YACvB,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjC,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,GAAG,CAAC,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;gBAClE,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;gBACf,IAAI,GAAG,CAAC,KAAK,GAAG,uBAAuB,EAAE,CAAC;oBACxC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;wBAClB,KAAK,EAAE,WAAW;wBAClB,iBAAiB,EAAE,gDAAgD;qBACpE,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,yDAAyD;YACzD,0CAA0C;YAC1C,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8CAA8C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CACnG,CAAC;gBACF,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;oBAClB,KAAK,EAAE,yBAAyB;oBAChC,iBAAiB,EAAE,iCAAiC;iBACrD,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;YACD,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,IAA0C,CAAC,CAAC,CAAC;YAClF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,KAAK,kBAAkB,EAAE,CAAC;YACrD,4CAA4C;YAC5C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;YACzD,MAAM,OAAO,GACX,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;gBACpD,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;gBAC9C,CAAC,CAAC,SAAS,CAAC;YAChB,gBAAgB,CACd,GAAG,EACH,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,CACzE,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IACE,GAAG,CAAC,MAAM,KAAK,MAAM;YACrB,CAAC,CAAC,KAAK,kBAAkB,IAAI,CAAC,KAAK,cAAc,IAAI,CAAC,KAAK,eAAe,CAAC,EAC3E,CAAC;YACD,IAAI,IAAwC,CAAC;YAC7C,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oBAAoB,CAAC,cAAc,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CACxF,CAAC;gBACF,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;oBAClB,KAAK,EAAE,iBAAiB;oBACxB,iBAAiB,EAAE,wBAAwB;iBAC5C,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,MAAuB,CAAC;YAC5B,IAAI,CAAC,KAAK,kBAAkB,EAAE,CAAC;gBAC7B,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;gBACzD,MAAM,OAAO,GACX,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;oBACpD,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;oBAC9C,CAAC,CAAC,SAAS,CAAC;gBAChB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,gBAAgB,CAAC,GAAG,EAAE;wBACpB,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE;4BACJ,KAAK,EAAE,gBAAgB;4BACvB,iBAAiB,EAAE,iBAAiB;yBACrC;qBACF,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAChD,CAAC;iBAAM,IAAI,CAAC,KAAK,cAAc,EAAE,CAAC;gBAChC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9B,CAAC;YACD,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACnE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,0BAA0B,CAAC,EAAE,EAAE,CAAC,CAAC;YACpF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,UAAU,GAAe,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvD,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACxD,IAAI,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;gBAAE,OAAO;YAC5C,sCAAsC;YACtC,yCAAyC;YACzC,IACE,OAAO,CAAC,OAAO,KAAK,SAAS;gBAC7B,GAAG,CAAC,MAAM,KAAK,MAAM;gBACrB,GAAG,CAAC,QAAQ,KAAK,iBAAiB,EAClC,CAAC;gBACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACzB,eAAe,CAAC,KAAK,CAAC,CAAC;gBACvB,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;gBAC1B,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC5C,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;oBACpE,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnE,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;oBAChB,IAAI,IAAI,CAAC,KAAK,GAAG,EAAE,EAAE,CAAC;wBACpB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;wBAClE,OAAO;oBACT,CAAC;gBACH,CAAC;gBACD,IAAI,IAAwC,CAAC;gBAC7C,IAAI,CAAC;oBACH,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC7B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;oBACtE,OAAO;gBACT,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBACrC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;oBAClD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;wBAClB,KAAK,EAAE,sBAAsB;wBAC7B,OAAO,EAAE,sBAAsB;qBAChC,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC5C,oCAAoC;gBACpC,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yDAAyD,QAAQ,CAAC,OAAO,EAAE;oBACzE,cAAc,CACjB,CAAC;gBACF,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;oBAClB,EAAE,EAAE,IAAI;oBACR,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,WAAW,EAAE;oBAC5E,kCAAkC;oBAClC,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE;oBACnE,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,iDAAiD;YACjD,6DAA6D;YAC7D,uCAAuC;YACvC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;gBAC5B,uCAAuC;gBACvC,oCAAoC;gBACpC,IAAI,GAAG,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;oBACpC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;wBACzB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;4BACjB,cAAc,EAAE,0BAA0B;4BAC1C,GAAG,gBAAgB;yBACpB,CAAC,CAAC;wBACH,GAAG,CAAC,GAAG,CACL,oBAAoB,CAAC;4BACnB,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;yBAC/D,CAAC,CACH,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;wBAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;wBACzB,eAAe,CAAC,KAAK,CAAC,CAAC;wBACvB,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;wBAC1B,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBACtC,IAAI,OAAO,KAAK,SAAS,IAAI,KAAK,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;4BAC1D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gCACjB,cAAc,EAAE,0BAA0B;gCAC1C,GAAG,gBAAgB;6BACpB,CAAC,CAAC;4BACH,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;4BAC7D,OAAO;wBACT,CAAC;wBACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;wBACjC,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;wBACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;wBACrC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;4BAC/E,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;4BACxC,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE;gCACpB,KAAK;gCACL,YAAY,EACV,KAAK,IAAI,kBAAkB,CAAC,CAAC,CAAC,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,OAAO,EAAE,YAAY,IAAI,CAAC;6BACpF,CAAC,CAAC;4BACH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gCACjB,cAAc,EAAE,0BAA0B;gCAC1C,GAAG,gBAAgB;6BACpB,CAAC,CAAC;4BACH,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;4BACzD,OAAO;wBACT,CAAC;wBACD,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;wBACzB,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;4BAC3C,WAAW,EAAE,KAAK,CAAC,YAAY;4BAC/B,UAAU,EAAE,KAAK,CAAC,WAAW;yBAC9B,CAAC,CAAC;wBACH,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC9D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;4BACjB,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;4BAClC,YAAY,EAAE,GAAG,oBAAoB,IAAI,OAAO,CAAC,SAAS,mCAAmC,MAAM,EAAE;yBACtG,CAAC,CAAC;wBACH,GAAG,CAAC,GAAG,EAAE,CAAC;wBACV,OAAO;oBACT,CAAC;gBACH,CAAC;gBACD,qBAAqB;gBACrB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;gBACzD,MAAM,OAAO,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3F,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;oBACjD,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;oBAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;oBAC7C,oCAAoC;oBACpC,MAAM,QAAQ,GAAG,CAAC,WAAmB,EAAE,MAA4B,EAAU,EAAE;wBAC7E,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,WAAW,CAAC,CAAC;wBACvE,IAAI,SAAS,KAAK,SAAS;4BAAE,OAAO,EAAE,CAAC;wBACvC,OAAO,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC;4BACpC,WAAW;4BACX,eAAe,EAAE,WAAW,CAAC;gCAC3B,SAAS,EAAE,SAAS,CAAC,SAAS;gCAC9B,aAAa,EAAE,SAAS,CAAC,aAAa;6BACvC,CAAC;4BACF,WAAW,EAAE,OAAO,CAAC,YAAY;4BACjC,UAAU,EAAE,OAAO,CAAC,WAAW;4BAC/B,MAAM;yBACP,CAAC,CAAC;oBACL,CAAC,CAAC;oBACF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;wBACjB,cAAc,EAAE,0BAA0B;wBAC1C,4BAA4B;wBAC5B,GAAG,gBAAgB;qBACpB,CAAC,CAAC;oBACH,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;oBACnE,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;oBAChE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;oBACxC,MAAM,MAAM,GACV,IAAI,CAAC,QAAQ,KAAK,SAAS;wBACzB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ;4BAC1B,CAAC,CAAC,QAAQ;4BACV,CAAC,CAAC,SAAS,CAAC;oBAClB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;wBACzB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;4BAClB,KAAK,EAAE,iBAAiB;4BACxB,OAAO,EAAE,6BAA6B;yBACvC,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBACD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC;oBACxF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;wBAC5B,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;4BAClB,KAAK,EAAE,WAAW;4BAClB,OAAO,EAAE,mBAAmB,SAAS,EAAE;yBACxC,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBACD,mCAAmC;oBACnC,qCAAqC;oBACrC,IAAI,CAAC;wBACH,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;4BACzB,MAAM,KAAK,CAAC,OAAO,CAAC,eAAe,CACjC,SAAS,EACT,OAAO,CAAC,YAAY,EACpB,IAAI,CAAC,YAAY,CAClB,CAAC;wBACJ,CAAC;6BAAM,CAAC;4BACN,MAAM,KAAK,CAAC,OAAO,CAAC,eAAe,CACjC,SAAS,EACT,OAAO,CAAC,YAAY,EACpB,IAAI,CAAC,YAAY,CAClB,CAAC;wBACJ,CAAC;oBACH,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,qCAAqC;wBACrC,sBAAsB;wBACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;wBACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qCAAqC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC1F,CAAC;wBACF,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;4BAClC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,gBAAgB;4BAC1D,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,eAAe;yBAC5D,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBACD,iBAAiB;oBACjB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC;oBACnD,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBACD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC5C,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC7B,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;YACD,IAAI,MAA4B,CAAC;YACjC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;oBAClC,GAAG,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,QAAQ;wBAC/C,CAAC,CAAC,EAAE,mBAAmB,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;wBACpD,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;oBAChB,kDAAkD;oBAClD,SAAS,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAC7D;wBACE,kBAAkB,EAChB,OAAO,CAAC,KAAK,KAAK,SAAS;4BACzB,CAAC,CAAC,6BAA6B,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG;4BACnE,CAAC,CAAC,QAAQ;qBACf,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,uDAAuD;gBACvD,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC;YACzC,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7E,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;YACD,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,4CAA4C;gBAC5C,MAAM,QAAQ,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACzE,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CACtF,CAAC;gBACJ,CAAC;gBACD,mCAAmC;gBACnC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;oBACnC,KAAK,EAAE,iBAAiB;oBACxB,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;iBAC5C,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,cAAc,GAAG,oBAAoB,CACzC,UAAU,EACV,WAAW,EACX,MAAM,EACN,OAAO,CAAC,aAAa,CACtB,CAAC;YACF,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;gBAClD,kBAAkB,EAAE,SAAS;gBAC7B,kBAAkB,EAAE,IAAI;aACzB,CAAC,CAAC;YACH,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACnB,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC7B,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC9C,KAAK,cAAc,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACrD,CAAC,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACxC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,wCAAwC;gBACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uCAAuC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC5F,CAAC;gBACF,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACtE,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,GAAG,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjB,yCAAyC;YACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kBAAkB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,QAAQ;gBACpD,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC1D,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;;gBAClE,GAAG,CAAC,GAAG,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAExF,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,OAAO;QACb,GAAG,EAAE,UAAU,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,SAAS,GAAG,OAAO,EAAE;QAC/E,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACjD,CAAC;YACD,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBAClC,UAAU,CAAC,mBAAmB,EAAE,CAAC;YACnC,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}