@hyper3d/cli 0.0.1 → 0.1.0-beta.2.1

package/dist/auth.js

@@ -0,0 +1,316 @@
+import { execFile } from 'node:child_process';
+import { randomBytes, createHash } from 'node:crypto';
+import { mkdir, readFile, writeFile, rename, rm } from 'node:fs/promises';
+import { join } from 'node:path';
+import { setTimeout as sleep } from 'node:timers/promises';
+import { promisify } from 'node:util';
+import { discoverOAuthProtectedResourceMetadata, discoverAuthorizationServerMetadata, selectResourceURL, } from '@modelcontextprotocol/sdk/client/auth.js';
+import { OAuthTokensSchema } from '@modelcontextprotocol/sdk/shared/auth.js';
+import { secureUrl } from './endpoints.js';
+import { getConfigDir } from './utils.js';
+export const DEVICE_GRANT_TYPE = 'urn:ietf:params:oauth:grant-type:device_code';
+export const CLI_CLIENT_ID = 'https://hyper3d.ai/oauth_cimd/cli.json';
+export const CLI_SCOPES = 'rodin:generate rodin:read account:read offline_access';
+export function clientMetadata() {
+    return {
+        client_id: CLI_CLIENT_ID,
+        client_name: 'Hyper3D CLI',
+        client_uri: 'https://github.com/DeemosTech/hyper3d-cli',
+        application_type: 'native',
+        redirect_uris: [],
+        grant_types: [DEVICE_GRANT_TYPE, 'refresh_token'],
+        response_types: [],
+        token_endpoint_auth_method: 'none',
+        scope: CLI_SCOPES,
+    };
+}
+export function credentialPath(endpoint) {
+    const key = createHash('sha256').update(new URL(endpoint).href).digest('hex');
+    return join(getConfigDir(), `${key}.json`);
+}
+export async function loadCredentials(endpoint) {
+    try {
+        return JSON.parse(await readFile(credentialPath(endpoint), 'utf8'));
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return {};
+        throw error;
+    }
+}
+async function saveCredentials(endpoint, data) {
+    const path = credentialPath(endpoint);
+    await mkdir(join(path, '..'), { recursive: true, mode: 0o700 });
+    const temporary = `${path}.${randomBytes(8).toString('hex')}.tmp`;
+    try {
+        await writeFile(temporary, `${JSON.stringify(data)}\n`, {
+            mode: 0o600,
+            flag: 'wx',
+        });
+        await rename(temporary, path);
+    }
+    finally {
+        await rm(temporary, { force: true });
+    }
+}
+export async function logout(endpoint) {
+    await rm(credentialPath(endpoint), { force: true });
+}
+export function createProvider(endpoint, data) {
+    if (data.clientId && data.clientId !== CLI_CLIENT_ID)
+        throw new Error('Stored credentials belong to a different client. Run hyper3d auth login again.');
+    data = { ...data, clientId: CLI_CLIENT_ID };
+    const metadata = clientMetadata();
+    return {
+        redirectUrl: undefined,
+        saveCodeVerifier: async () => {
+            throw new Error('Use Device Flow via hyper3d auth login.');
+        },
+        codeVerifier: async () => {
+            throw new Error('Use Device Flow via hyper3d auth login.');
+        },
+        clientMetadataUrl: CLI_CLIENT_ID,
+        get clientMetadata() {
+            return Object.fromEntries(Object.entries(metadata).filter(([key]) => key !== 'client_id'));
+        },
+        clientInformation: () => ({ client_id: CLI_CLIENT_ID }),
+        tokens: () => data.tokens,
+        saveTokens: async (tokens) => {
+            data.tokens = {
+                ...tokens,
+                refresh_token: tokens.refresh_token ?? data.tokens?.refresh_token,
+            };
+            data.expiresAt = tokens.expires_in
+                ? Date.now() + tokens.expires_in * 1000
+                : undefined;
+            await saveCredentials(endpoint, data);
+        },
+        prepareTokenRequest: () => {
+            if (!data.tokens?.refresh_token)
+                throw new Error('Authentication expired. Run hyper3d auth login.');
+            return new URLSearchParams({
+                grant_type: 'refresh_token',
+                refresh_token: data.tokens.refresh_token,
+            });
+        },
+        redirectToAuthorization: () => {
+            throw new Error('Run hyper3d auth login to authorize this device.');
+        },
+        invalidateCredentials: async (scope) => {
+            if (scope === 'all' || scope === 'tokens') {
+                delete data.tokens;
+                delete data.expiresAt;
+                await saveCredentials(endpoint, data);
+            }
+        },
+    };
+}
+async function openBrowser(url) {
+    const command = process.platform === 'darwin'
+        ? 'open'
+        : process.platform === 'win32'
+            ? 'rundll32.exe'
+            : 'xdg-open';
+    const args = process.platform === 'win32' ? ['url.dll,FileProtocolHandler', url] : [url];
+    await promisify(execFile)(command, args, { timeout: 5000 });
+}
+function oauthFailure(body, status) {
+    const messages = {
+        access_denied: 'Authorization denied.',
+        expired_token: 'Device code expired. Run hyper3d auth login again.',
+        invalid_grant: 'Device authorization is invalid or already used. Run hyper3d auth login again.',
+        unauthorized_client: 'Device Flow is not enabled for this CLI client.',
+        invalid_client: 'The server rejected this CLI. Update Hyper3D CLI or contact support.',
+    };
+    return new Error(messages[body?.error ?? ''] ?? `OAuth request failed (HTTP ${status}).`);
+}
+async function discoverDeviceFlow(endpoint, provider, request) {
+    const resourceMetadata = await discoverOAuthProtectedResourceMetadata(endpoint, undefined, request);
+    const issuer = resourceMetadata.authorization_servers?.[0];
+    if (!issuer)
+        throw new Error('MCP discovery did not advertise an authorization server.');
+    secureUrl(issuer);
+    // SDK's OIDC schema strips Device Flow extension fields. Preserve the
+    // endpoint from the same successful document while retaining SDK validation.
+    let deviceAuthorizationEndpoint;
+    const metadata = await discoverAuthorizationServerMetadata(issuer, {
+        fetchFn: async (input, init) => {
+            const response = await request(input, init);
+            if (response.ok)
+                deviceAuthorizationEndpoint = (await response.clone().json())
+                    .device_authorization_endpoint;
+            return response;
+        },
+    });
+    if (!metadata || new URL(metadata.issuer).href !== new URL(issuer).href)
+        throw new Error('OAuth discovery issuer mismatch.');
+    if (typeof deviceAuthorizationEndpoint !== 'string' ||
+        !metadata.grant_types_supported?.includes(DEVICE_GRANT_TYPE))
+        throw new Error('The server does not advertise Device Flow. Deploy and enable the backend before logging in.');
+    if (!metadata.token_endpoint)
+        throw new Error('Missing OAuth token endpoint');
+    secureUrl(metadata.token_endpoint);
+    const resource = String(await selectResourceURL(new URL(endpoint), provider, resourceMetadata));
+    return {
+        deviceAuthorizationEndpoint,
+        tokenEndpoint: metadata.token_endpoint,
+        resource,
+    };
+}
+async function requestDeviceAuthorization(deviceAuthorizationEndpoint, resource, post) {
+    const response = await post(deviceAuthorizationEndpoint, {
+        client_id: CLI_CLIENT_ID,
+        resource,
+        scope: CLI_SCOPES,
+    });
+    const device = await response.json();
+    if (!response.ok)
+        throw oauthFailure(device, response.status);
+    if (typeof device.device_code !== 'string' ||
+        !device.device_code ||
+        typeof device.user_code !== 'string' ||
+        !/^[A-Za-z0-9 -]{1,64}$/.test(device.user_code) ||
+        !Number.isSafeInteger(device.expires_in) ||
+        device.expires_in <= 0 ||
+        device.expires_in > 86400 ||
+        (device.interval !== undefined &&
+            (!Number.isSafeInteger(device.interval) ||
+                device.interval <= 0 ||
+                device.interval > 86400)))
+        throw new Error('Invalid device authorization response.');
+    const verification = secureUrl(device.verification_uri);
+    const complete = device.verification_uri_complete
+        ? secureUrl(device.verification_uri_complete)
+        : verification;
+    if (complete.origin !== verification.origin)
+        throw new Error('Verification URL origin mismatch.');
+    return {
+        device_code: device.device_code,
+        user_code: device.user_code,
+        expires_in: device.expires_in,
+        interval: device.interval,
+        verificationUrl: complete,
+    };
+}
+async function pollDeviceTokens(tokenEndpoint, device, post, { active, pollSignal, deadline, wait, now, }) {
+    let interval = (device.interval ?? 5) * 1000;
+    while (now() < deadline) {
+        active.throwIfAborted();
+        await wait(Math.min(interval, deadline - now()), undefined, {
+            signal: pollSignal,
+        });
+        if (now() >= deadline)
+            break;
+        let tokenResponse;
+        try {
+            tokenResponse = await post(tokenEndpoint, {
+                grant_type: DEVICE_GRANT_TYPE,
+                client_id: CLI_CLIENT_ID,
+                device_code: device.device_code,
+            }, pollSignal);
+        }
+        catch (error) {
+            pollSignal.throwIfAborted();
+            if (error.name !== 'TimeoutError' &&
+                !(error instanceof TypeError))
+                throw error;
+            interval = Math.min(interval * 2, device.expires_in * 1000);
+            continue;
+        }
+        // Back off when the server is rate-limited or temporarily unavailable.
+        if (tokenResponse.status === 429 || tokenResponse.status >= 500) {
+            const retry = Number(tokenResponse.headers.get('Retry-After'));
+            interval = Math.max(interval + 5000, Number.isFinite(retry) && retry > 0 ? retry * 1000 : 0);
+            await tokenResponse.body?.cancel();
+            continue;
+        }
+        const tokens = await tokenResponse.json();
+        if (tokenResponse.ok) {
+            return OAuthTokensSchema.parse(tokens);
+        }
+        if (tokens.error === 'authorization_pending')
+            continue;
+        if (tokens.error === 'slow_down') {
+            interval += 5000;
+            continue;
+        }
+        throw oauthFailure(tokens, tokenResponse.status);
+    }
+    throw new Error('Device code expired. Run hyper3d auth login again.');
+}
+export async function login(endpoint, { browser = true, fetchFn = fetch, open = openBrowser, write = (text) => process.stderr.write(text), wait = sleep, now = Date.now, signal, } = {}) {
+    secureUrl(endpoint);
+    const provider = createProvider(endpoint, {});
+    // Set up cancellation and time limits for OAuth requests.
+    const cancelled = new AbortController();
+    const stop = () => cancelled.abort(new Error('Login cancelled'));
+    process.once('SIGINT', stop);
+    const active = signal
+        ? AbortSignal.any([signal, cancelled.signal])
+        : cancelled.signal;
+    // Bound discovery and issuance too, not only the polling phase.
+    const setupSignal = AbortSignal.any([active, AbortSignal.timeout(60000)]);
+    const request = async (input, init = {}) => {
+        secureUrl(input);
+        return fetchFn(input, {
+            ...init,
+            redirect: 'error',
+            signal: AbortSignal.any([
+                init.signal ?? setupSignal,
+                AbortSignal.timeout(15000),
+            ]),
+        });
+    };
+    const post = async (url, fields, requestSignal) => request(url, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/x-www-form-urlencoded',
+            Accept: 'application/json',
+        },
+        body: new URLSearchParams(fields),
+        signal: requestSignal,
+    });
+    try {
+        const { deviceAuthorizationEndpoint, tokenEndpoint, resource } = await discoverDeviceFlow(endpoint, provider, request);
+        const device = await requestDeviceAuthorization(deviceAuthorizationEndpoint, resource, post);
+        // Start the expiry clock before opening the browser for authorization.
+        const deadline = now() + device.expires_in * 1000;
+        const pollSignal = AbortSignal.any([
+            active,
+            AbortSignal.timeout(device.expires_in * 1000),
+        ]);
+        write(`Confirm that the browser shows this same code: ${device.user_code}\nOpen this URL on this or another device:\n${device.verificationUrl.href}\n`);
+        if (browser) {
+            try {
+                await open(device.verificationUrl.href);
+            }
+            catch {
+                write('Could not open a browser. Open the link above manually; login is still waiting.\n');
+            }
+        }
+        // Poll for tokens until authorization succeeds or the device code expires.
+        write('Waiting for authorization…\n');
+        const tokens = await pollDeviceTokens(tokenEndpoint, device, post, {
+            active,
+            pollSignal,
+            deadline,
+            wait,
+            now,
+        });
+        await provider.saveTokens(tokens);
+    }
+    catch (error) {
+        // Surface cancellation and timeouts as login errors.
+        if (active.aborted)
+            throw active.reason;
+        if (error instanceof Error &&
+            (error.name === 'TimeoutError' ||
+                error.cause?.name === 'TimeoutError'))
+            throw new Error('Login timed out. Run hyper3d auth login again.');
+        throw error;
+    }
+    finally {
+        process.removeListener('SIGINT', stop);
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACnC,iBAAiB,GAClB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAE7E,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAc1C,MAAM,CAAC,MAAM,iBAAiB,GAAG,8CAA8C,CAAC;AAChF,MAAM,CAAC,MAAM,aAAa,GAAG,wCAAwC,CAAC;AACtE,MAAM,CAAC,MAAM,UAAU,GACrB,uDAAuD,CAAC;AAC1D,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,SAAS,EAAE,aAAa;QACxB,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,2CAA2C;QACvD,gBAAgB,EAAE,QAAQ;QAC1B,aAAa,EAAE,EAAE;QACjB,WAAW,EAAE,CAAC,iBAAiB,EAAE,eAAe,CAAC;QACjD,cAAc,EAAE,EAAE;QAClB,0BAA0B,EAAE,MAAM;QAClC,KAAK,EAAE,UAAU;KAClB,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;AAC7C,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB;IACpD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAClE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AACD,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,IAAiB;IAChE,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE;YACtD,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,QAAgB;IAC3C,MAAM,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,IAAiB;IAChE,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,aAAa;QAClD,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;IACJ,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,OAAO;QACL,WAAW,EAAE,SAAS;QACtB,gBAAgB,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,YAAY,EAAE,KAAK,IAAqB,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,iBAAiB,EAAE,aAAa;QAChC,IAAI,cAAc;YAChB,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,CAAC,CAC1B,CAAC;QAC1C,CAAC;QACD,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;QACvD,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM;QACzB,UAAU,EAAE,KAAK,EAAE,MAAmB,EAAE,EAAE;YACxC,IAAI,CAAC,MAAM,GAAG;gBACZ,GAAG,MAAM;gBACT,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,EAAE,aAAa;aAClE,CAAC;YACF,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU;gBAChC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI;gBACvC,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC;QACD,mBAAmB,EAAE,GAAG,EAAE;YACxB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa;gBAC7B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,OAAO,IAAI,eAAe,CAAC;gBACzB,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;aACzC,CAAC,CAAC;QACL,CAAC;QACD,uBAAuB,EAAE,GAAG,EAAE;YAC5B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,qBAAqB,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;YAC7C,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC1C,OAAO,IAAI,CAAC,MAAM,CAAC;gBACnB,OAAO,IAAI,CAAC,SAAS,CAAC;gBACtB,MAAM,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAW;IACpC,MAAM,OAAO,GACX,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,UAAU,CAAC;IACnB,MAAM,IAAI,GACR,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9E,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,YAAY,CAAC,IAAwB,EAAE,MAAc;IAC5D,MAAM,QAAQ,GAA2B;QACvC,aAAa,EAAE,uBAAuB;QACtC,aAAa,EAAE,oDAAoD;QACnE,aAAa,EACX,gFAAgF;QAClF,mBAAmB,EAAE,iDAAiD;QACtE,cAAc,EACZ,sEAAsE;KACzE,CAAC;IACF,OAAO,IAAI,KAAK,CACd,QAAQ,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,8BAA8B,MAAM,IAAI,CACxE,CAAC;AACJ,CAAC;AAgBD,KAAK,UAAU,kBAAkB,CAC/B,QAAgB,EAChB,QAA2C,EAC3C,OAAqB;IAErB,MAAM,gBAAgB,GAAG,MAAM,sCAAsC,CACnE,QAAQ,EACR,SAAS,EACT,OAAO,CACR,CAAC;IACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM;QACT,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,SAAS,CAAC,MAAM,CAAC,CAAC;IAElB,sEAAsE;IACtE,6EAA6E;IAC7E,IAAI,2BAA2B,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAM,mCAAmC,CAAC,MAAM,EAAE;QACjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC7B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC5C,IAAI,QAAQ,CAAC,EAAE;gBACb,2BAA2B,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;qBAC1D,6BAA6B,CAAC;YACnC,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI;QACrE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,IACE,OAAO,2BAA2B,KAAK,QAAQ;QAC/C,CAAC,QAAQ,CAAC,qBAAqB,EAAE,QAAQ,CAAC,iBAAiB,CAAC;QAE5D,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;IACJ,IAAI,CAAC,QAAQ,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9E,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAEnC,MAAM,QAAQ,GAAG,MAAM,CACrB,MAAM,iBAAiB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CACvE,CAAC;IACF,OAAO;QACL,2BAA2B;QAC3B,aAAa,EAAE,QAAQ,CAAC,cAAc;QACtC,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,2BAAmC,EACnC,QAAgB,EAChB,IAAe;IAEf,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,2BAA2B,EAAE;QACvD,SAAS,EAAE,aAAa;QACxB,QAAQ;QACR,KAAK,EAAE,UAAU;KAClB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9D,IACE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QACtC,CAAC,MAAM,CAAC,WAAW;QACnB,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QACpC,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAC/C,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC;QACxC,MAAM,CAAC,UAAU,IAAI,CAAC;QACtB,MAAM,CAAC,UAAU,GAAG,KAAK;QACzB,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;YAC5B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACrC,MAAM,CAAC,QAAQ,IAAI,CAAC;gBACpB,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC;QAE7B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,yBAAyB;QAC/C,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,yBAAyB,CAAC;QAC7C,CAAC,CAAC,YAAY,CAAC;IACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;QACzC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,eAAe,EAAE,QAAQ;KAC1B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,aAAqB,EACrB,MAA2B,EAC3B,IAAe,EACf,EACE,MAAM,EACN,UAAU,EACV,QAAQ,EACR,IAAI,EACJ,GAAG,GAOJ;IAED,IAAI,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAC7C,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QACxB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,GAAG,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE;YAC1D,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;QACH,IAAI,GAAG,EAAE,IAAI,QAAQ;YAAE,MAAM;QAE7B,IAAI,aAAa,CAAC;QAClB,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,IAAI,CACxB,aAAa,EACb;gBACE,UAAU,EAAE,iBAAiB;gBAC7B,SAAS,EAAE,aAAa;gBACxB,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,EACD,UAAU,CACX,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,UAAU,CAAC,cAAc,EAAE,CAAC;YAC5B,IACG,KAAe,CAAC,IAAI,KAAK,cAAc;gBACxC,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC;gBAE7B,MAAM,KAAK,CAAC;YACd,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QAED,uEAAuE;QACvE,IAAI,aAAa,CAAC,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAChE,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;YAC/D,QAAQ,GAAG,IAAI,CAAC,GAAG,CACjB,QAAQ,GAAG,IAAI,EACf,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CACvD,CAAC;YACF,MAAM,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YACnC,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,aAAa,CAAC,EAAE,EAAE,CAAC;YACrB,OAAO,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,KAAK,uBAAuB;YAAE,SAAS;QACvD,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACjC,QAAQ,IAAI,IAAI,CAAC;YACjB,SAAS;QACX,CAAC;QACD,MAAM,YAAY,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,QAAgB,EAChB,EACE,OAAO,GAAG,IAAI,EACd,OAAO,GAAG,KAAK,EACf,IAAI,GAAG,WAAW,EAClB,KAAK,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAC5C,IAAI,GAAG,KAAK,EACZ,GAAG,GAAG,IAAI,CAAC,GAAG,EACd,MAAM,MACU,EAAE;IAEpB,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpB,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAE9C,0DAA0D;IAC1D,MAAM,SAAS,GAAG,IAAI,eAAe,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM;QACnB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;IACrB,gEAAgE;IAChE,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAiB,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE;QACvD,SAAS,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,OAAO,CAAC,KAAK,EAAE;YACpB,GAAG,IAAI;YACP,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC;gBACtB,IAAI,CAAC,MAAM,IAAI,WAAW;gBAC1B,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;aAC3B,CAAC;SACH,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,IAAI,GAAc,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CAC3D,OAAO,CAAC,GAAG,EAAE;QACX,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC;QACjC,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;IAEL,IAAI,CAAC;QACH,MAAM,EAAE,2BAA2B,EAAE,aAAa,EAAE,QAAQ,EAAE,GAC5D,MAAM,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAC7C,2BAA2B,EAC3B,QAAQ,EACR,IAAI,CACL,CAAC;QAEF,uEAAuE;QACvE,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;QAClD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC;YACjC,MAAM;YACN,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;SAC9C,CAAC,CAAC;QAEH,KAAK,CACH,kDAAkD,MAAM,CAAC,SAAS,+CAA+C,MAAM,CAAC,eAAe,CAAC,IAAI,IAAI,CACjJ,CAAC;QACF,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CACH,mFAAmF,CACpF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE;YACjE,MAAM;YACN,UAAU;YACV,QAAQ;YACR,IAAI;YACJ,GAAG;SACJ,CAAC,CAAC;QACH,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qDAAqD;QACrD,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC;QACxC,IACE,KAAK,YAAY,KAAK;YACtB,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc;gBAC3B,KAAK,CAAC,KAAe,EAAE,IAAI,KAAK,cAAc,CAAC;YAElD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;AACH,CAAC"}