@hydra-acp/browser 0.1.26 → 0.1.28

package/dist/setup/tailscale-wizard.js

@@ -0,0 +1,229 @@
+import { spawnSync } from "node:child_process";
+import { chmodSync, existsSync, mkdirSync } from "node:fs";
+import { userInfo } from "node:os";
+import { createInterface } from "node:readline";
+import { delimiter, join, resolve } from "node:path";
+import { paths } from "../util/paths.js";
+import { CONF_PATH, readExisting, writeConf } from "./conf-writer.js";
+const BOLD = "\x1b[1m";
+const GREEN = "\x1b[32m";
+const YELLOW = "\x1b[33m";
+const RED = "\x1b[31m";
+const RESET = "\x1b[0m";
+function header(num, total, title) {
+    process.stdout.write(`\n  ${BOLD}[${num}/${total}] ${title}${RESET}\n\n`);
+}
+function ok(msg) {
+    process.stdout.write(`      ${GREEN}✓${RESET} ${msg}\n`);
+}
+function warn(msg) {
+    process.stdout.write(`      ${YELLOW}⚠${RESET} ${msg}\n`);
+}
+function fail(msg) {
+    process.stderr.write(`      ${RED}✗ ${msg}${RESET}\n`);
+    process.exit(1);
+}
+function info(msg) {
+    process.stdout.write(`      ${msg}\n`);
+}
+function blank() {
+    process.stdout.write("\n");
+}
+async function confirm(label, defaultYes) {
+    const hint = defaultYes ? "[Y/n]" : "[y/N]";
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        const reply = await new Promise((res) => {
+            rl.question(`      ${label} ${hint}: `, res);
+        });
+        const trimmed = reply.trim().toLowerCase();
+        if (!trimmed)
+            return defaultYes;
+        return trimmed.startsWith("y");
+    }
+    finally {
+        rl.close();
+    }
+}
+function hasBin(name) {
+    const dirs = (process.env.PATH ?? "").split(delimiter);
+    const exts = process.platform === "win32" ? [".exe", ".cmd", ".bat", ""] : [""];
+    for (const dir of dirs) {
+        if (!dir)
+            continue;
+        for (const ext of exts) {
+            try {
+                if (existsSync(join(dir, name + ext)))
+                    return true;
+            }
+            catch {
+                // not present in this dir; keep looking
+            }
+        }
+    }
+    return false;
+}
+const TOTAL_STEPS = 4;
+function step1Prereqs() {
+    header(1, TOTAL_STEPS, "Checking Tailscale");
+    if (!hasBin("tailscale")) {
+        fail("tailscale not found on PATH. Install it first: https://tailscale.com/download");
+    }
+    ok("tailscale is installed");
+    const result = spawnSync("tailscale", ["status", "--json"], { encoding: "utf8" });
+    if (result.status !== 0) {
+        fail(`tailscale status failed: ${result.stderr?.trim() || "unknown error"}. Is the daemon running?`);
+    }
+    let status;
+    try {
+        status = JSON.parse(result.stdout);
+    }
+    catch {
+        fail("Couldn't parse `tailscale status --json` output.");
+    }
+    if (status.BackendState !== "Running") {
+        fail(`Tailscale isn't logged in (state: ${status.BackendState ?? "unknown"}). Run \`sudo tailscale up\` first, then re-run this wizard.`);
+    }
+    const dnsName = status.Self?.DNSName?.replace(/\.$/, "");
+    const tailscaleIp = status.Self?.TailscaleIPs?.[0];
+    if (!dnsName || !tailscaleIp) {
+        fail("Couldn't read this device's MagicDNS name or tailnet IP from `tailscale status`. Is MagicDNS enabled for this tailnet?");
+    }
+    ok(`Logged in as ${dnsName}`);
+    ok(`Tailnet IP: ${tailscaleIp}`);
+    return { dnsName, tailscaleIp };
+}
+function isPermissionError(stderr) {
+    return /access denied|permission denied|must be root|operator/i.test(stderr);
+}
+// Tailscale's own wording for this varies ("HTTPS is not enabled for your
+// tailnet" from older CLI builds vs. "your Tailscale account does not
+// support getting TLS certs" from the control plane) — match both rather
+// than one exact string.
+function isCertsUnavailableError(stderr) {
+    return /https is not enabled|does not support getting tls certs/i.test(stderr);
+}
+function failCertsUnavailable() {
+    fail("This tailnet doesn't have HTTPS certificates enabled (or your account's plan " +
+        "doesn't support them). Enable them at https://login.tailscale.com/admin/dns " +
+        "(DNS tab -> HTTPS Certificates); if it's already on, this account/plan may not " +
+        "support tailnet TLS certs at all — check https://tailscale.com/kb/1153/enabling-https.");
+}
+async function step2MintCert(dnsName) {
+    header(2, TOTAL_STEPS, "Minting cert");
+    const tlsDir = resolve(paths.home(), "tls");
+    mkdirSync(tlsDir, { recursive: true });
+    chmodSync(tlsDir, 0o700);
+    const certPath = resolve(tlsDir, "cert.pem");
+    const keyPath = resolve(tlsDir, "key.pem");
+    const certArgs = ["cert", "--cert-file", certPath, "--key-file", keyPath, dnsName];
+    info("Requesting cert from Tailscale (network call, can take a few seconds)...");
+    const attempt = spawnSync("tailscale", certArgs, { encoding: "utf8" });
+    if (attempt.status !== 0) {
+        const stderr = attempt.stderr?.trim() ?? "";
+        if (isCertsUnavailableError(stderr)) {
+            failCertsUnavailable();
+        }
+        if (!isPermissionError(stderr)) {
+            fail(`tailscale cert failed: ${stderr || "unknown error"}`);
+        }
+        warn("tailscale cert needs elevated access to the local tailscaled socket.");
+        info("Fix this permanently: sudo tailscale set --operator=$(whoami)");
+        info("Future tailscale commands, including re-runs of this wizard, won't need sudo after that.");
+        blank();
+        if (!(await confirm("Retry cert generation with sudo now instead?", true))) {
+            fail("Run `sudo tailscale set --operator=$(whoami)`, then re-run this wizard.");
+        }
+        // stdin stays attached to the real terminal so sudo's password prompt
+        // still works; stdout/stderr are captured so we can still recognize a
+        // certs-unavailable failure instead of just reporting a bare exit code.
+        info("Requesting cert via sudo (may prompt for your password, then a network call)...");
+        const sudoAttempt = spawnSync("sudo", ["tailscale", ...certArgs], {
+            stdio: ["inherit", "pipe", "pipe"],
+            encoding: "utf8",
+        });
+        if (sudoAttempt.status !== 0) {
+            const sudoStderr = sudoAttempt.stderr?.trim() ?? "";
+            if (sudoStderr)
+                process.stderr.write(`      ${sudoStderr}\n`);
+            if (isCertsUnavailableError(sudoStderr)) {
+                failCertsUnavailable();
+            }
+            fail(`tailscale cert failed even with sudo (exit ${sudoAttempt.status ?? "?"}).`);
+        }
+        // tailscale ran as root, so it owns the files it just wrote — the browser
+        // server (running as the invoking user) needs to be able to read them.
+        const owner = userInfo().username;
+        const chownResult = spawnSync("sudo", ["chown", owner, certPath, keyPath], {
+            stdio: "inherit",
+        });
+        if (chownResult.status !== 0) {
+            warn(`Couldn't chown the cert files to ${owner}. Fix manually: sudo chown ${owner} ${certPath} ${keyPath}`);
+        }
+    }
+    try {
+        chmodSync(certPath, 0o600);
+        chmodSync(keyPath, 0o600);
+    }
+    catch (err) {
+        warn(`Couldn't chmod cert files (${err.message}). Check ownership if HTTPS fails to start.`);
+    }
+    ok(`Wrote ${certPath}`);
+    ok(`Wrote ${keyPath}`);
+    info("Tailscale certs are valid ~90 days. Re-run this wizard to renew before expiry.");
+    return { certPath, keyPath };
+}
+function step3WriteConfig(args) {
+    header(3, TOTAL_STEPS, "Writing config");
+    const { map } = readExisting(CONF_PATH);
+    const existingHosts = (map.get("BROWSER_ALLOWED_HOSTS") ?? "")
+        .split(",")
+        .map((s) => s.trim())
+        .filter((s) => s.length > 0);
+    const hosts = new Set(existingHosts);
+    hosts.add(args.dnsName);
+    const port = Number.parseInt(map.get("BROWSER_PORT") ?? "", 10) || 5514;
+    writeConf(CONF_PATH, {
+        BROWSER_TLS_CERT: args.certPath,
+        BROWSER_TLS_KEY: args.keyPath,
+        BROWSER_HOST: args.tailscaleIp,
+        BROWSER_ALLOWED_HOSTS: Array.from(hosts).join(","),
+    });
+    ok(`Wrote ${CONF_PATH} (chmod 600)`);
+    info(`BROWSER_HOST=${args.tailscaleIp} — bound to the tailnet interface only, not your LAN.`);
+    if (map.get("BROWSER_HOST") === "0.0.0.0") {
+        warn("Previously bound to 0.0.0.0 (every interface). Narrowed to the tailnet IP.");
+    }
+    return port;
+}
+async function step4RestartExtension() {
+    header(4, TOTAL_STEPS, "Apply");
+    if (!hasBin("hydra-acp")) {
+        info("hydra-acp not found on PATH. Restart hydra-acp-browser manually to apply.");
+        return;
+    }
+    if (!(await confirm("Restart the hydra-acp-browser extension now?", true))) {
+        info("Skipped. Apply later with: hydra-acp extensions restart hydra-acp-browser");
+        return;
+    }
+    const result = spawnSync("hydra-acp", ["extensions", "restart", "hydra-acp-browser"], {
+        stdio: "inherit",
+    });
+    if (result.status === 0) {
+        ok("Restarted.");
+    }
+    else {
+        warn(`hydra-acp exited with code ${result.status ?? "?"}. Restart manually if needed.`);
+    }
+}
+export async function runTailscaleSetup() {
+    process.stdout.write(`\n  ${BOLD}hydra-acp-browser tailscale setup${RESET}\n`);
+    const { dnsName, tailscaleIp } = step1Prereqs();
+    const { certPath, keyPath } = await step2MintCert(dnsName);
+    const port = step3WriteConfig({ dnsName, tailscaleIp, certPath, keyPath });
+    await step4RestartExtension();
+    blank();
+    ok("Setup complete.");
+    info(`Open: https://${dnsName}:${port}/`);
+}
+//# sourceMappingURL=tailscale-wizard.js.map

package/dist/setup/tailscale-wizard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tailscale-wizard.js","sourceRoot":"","sources":["../../src/setup/tailscale-wizard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEtE,MAAM,IAAI,GAAG,SAAS,CAAC;AACvB,MAAM,KAAK,GAAG,UAAU,CAAC;AACzB,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,MAAM,GAAG,GAAG,UAAU,CAAC;AACvB,MAAM,KAAK,GAAG,SAAS,CAAC;AAExB,SAAS,MAAM,CAAC,GAAW,EAAE,KAAa,EAAE,KAAa;IACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,GAAG,IAAI,KAAK,KAAK,KAAK,GAAG,KAAK,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,EAAE,CAAC,GAAW;IACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,MAAM,IAAI,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC;IACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,KAAK;IACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,KAAa,EAAE,UAAmB;IACvD,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5C,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,KAAK,GAAW,MAAM,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YAC9C,EAAE,CAAC,QAAQ,CAAC,SAAS,KAAK,IAAI,IAAI,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,OAAO;YACV,OAAO,UAAU,CAAC;QACpB,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG;YACN,SAAS;QACX,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;oBACnC,OAAO,IAAI,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,wCAAwC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAYD,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB,SAAS,YAAY;IACnB,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,oBAAoB,CAAC,CAAC;IAE7C,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACzB,IAAI,CACF,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,EAAE,CAAC,wBAAwB,CAAC,CAAC;IAE7B,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAClF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,IAAI,CACF,4BAA4B,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,eAAe,0BAA0B,CAC/F,CAAC;IACJ,CAAC;IACD,IAAI,MAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAoB,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,kDAAkD,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,CACF,qCAAqC,MAAM,CAAC,YAAY,IAAI,SAAS,8DAA8D,CACpI,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7B,IAAI,CACF,wHAAwH,CACzH,CAAC;IACJ,CAAC;IACD,EAAE,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC;IAC9B,EAAE,CAAC,eAAe,WAAW,EAAE,CAAC,CAAC;IACjC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,OAAO,wDAAwD,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC/E,CAAC;AAED,0EAA0E;AAC1E,sEAAsE;AACtE,yEAAyE;AACzE,yBAAyB;AACzB,SAAS,uBAAuB,CAAC,MAAc;IAC7C,OAAO,0DAA0D,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,oBAAoB;IAC3B,IAAI,CACF,+EAA+E;QAC7E,8EAA8E;QAC9E,iFAAiF;QACjF,wFAAwF,CAC3F,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAAe;IAC1C,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAC5C,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAEnF,IAAI,CAAC,0EAA0E,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC5C,IAAI,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,oBAAoB,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,0BAA0B,MAAM,IAAI,eAAe,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,CAAC,sEAAsE,CAAC,CAAC;QAC7E,IAAI,CAAC,+DAA+D,CAAC,CAAC;QACtE,IAAI,CAAC,0FAA0F,CAAC,CAAC;QACjG,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,8CAA8C,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC,yEAAyE,CAAC,CAAC;QAClF,CAAC;QACD,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,IAAI,CAAC,iFAAiF,CAAC,CAAC;QACxF,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,EAAE;YAChE,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;YAClC,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACpD,IAAI,UAAU;gBACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,UAAU,IAAI,CAAC,CAAC;YAChD,IAAI,uBAAuB,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxC,oBAAoB,EAAE,CAAC;YACzB,CAAC;YACD,IAAI,CAAC,8CAA8C,WAAW,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC;QACpF,CAAC;QACD,0EAA0E;QAC1E,uEAAuE;QACvE,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC,QAAQ,CAAC;QAClC,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE;YACzE,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,IAAI,CACF,oCAAoC,KAAK,8BAA8B,KAAK,IAAI,QAAQ,IAAI,OAAO,EAAE,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3B,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,8BAA+B,GAAa,CAAC,OAAO,6CAA6C,CAAC,CAAC;IAC1G,CAAC;IACD,EAAE,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC;IACxB,EAAE,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IACvB,IAAI,CAAC,gFAAgF,CAAC,CAAC;IACvF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,gBAAgB,CAAC,IAKzB;IACC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAEzC,MAAM,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC;SAC3D,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IACrC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAExB,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC;IAExE,SAAS,CAAC,SAAS,EAAE;QACnB,gBAAgB,EAAE,IAAI,CAAC,QAAQ;QAC/B,eAAe,EAAE,IAAI,CAAC,OAAO;QAC7B,YAAY,EAAE,IAAI,CAAC,WAAW;QAC9B,qBAAqB,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;KACnD,CAAC,CAAC;IACH,EAAE,CAAC,SAAS,SAAS,cAAc,CAAC,CAAC;IACrC,IAAI,CAAC,gBAAgB,IAAI,CAAC,WAAW,uDAAuD,CAAC,CAAC;IAC9F,IAAI,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,4EAA4E,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,qBAAqB;IAClC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAEhC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,2EAA2E,CAAC,CAAC;QAClF,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,8CAA8C,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,2EAA2E,CAAC,CAAC;QAClF,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,mBAAmB,CAAC,EAAE;QACpF,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,YAAY,CAAC,CAAC;IACnB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,8BAA8B,MAAM,CAAC,MAAM,IAAI,GAAG,+BAA+B,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,oCAAoC,KAAK,IAAI,CAAC,CAAC;IAE/E,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,YAAY,EAAE,CAAC;IAChD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3E,MAAM,qBAAqB,EAAE,CAAC;IAE9B,KAAK,EAAE,CAAC;IACR,EAAE,CAAC,iBAAiB,CAAC,CAAC;IACtB,IAAI,CAAC,iBAAiB,OAAO,IAAI,IAAI,GAAG,CAAC,CAAC;AAC5C,CAAC"}