@kodycodes/cli 1.26.2 → 1.26.3

package/dist/auth.js

@@ -1,386 +0,0 @@
-import { createServer, } from 'node:http';
-import { auth, } from '@modelcontextprotocol/client';
-import { missingCliAuthMessage } from './api-token.js';
-import { accessTokenSkewMs, cliRedirectUrl, defaultMcpUrl, defaultScopes, loginTimeoutMs, } from './defaults.js';
-import { discoverLoginIdentity, } from './discover-login-identity.js';
-import { discoverOrgSlugFromAccessToken } from './discover-org.js';
-import { loginCallbackErrorFromOAuthError, renderLoginCallbackPage, } from './login-callback-page.js';
-import { createCliOAuthProvider, orgSlugFromFlag } from './oauth-provider.js';
-import { redactError } from './redact.js';
-import { loadCredentialStore, loadCredentials, loadPendingCredentials, promotePendingOrg, saveCredentials, } from './store.js';
-export function isAccessTokenExpired(credentials, now = Date.now()) {
-    if (!credentials.expiresAt)
-        return false;
-    return now + accessTokenSkewMs >= credentials.expiresAt;
-}
-export function credentialsFromTokens(input) {
-    const now = input.now ?? Date.now();
-    const expiresAt = typeof input.tokens.expires_in === 'number'
-        ? now + input.tokens.expires_in * 1000
-        : input.previous?.expiresAt;
-    const org = input.org ?? input.previous?.org;
-    return {
-        version: 1,
-        mcpUrl: input.mcpUrl,
-        ...(org ? { org } : {}),
-        resource: input.resource,
-        authorizationServerUrl: input.authorizationServerUrl,
-        clientId: input.client.client_id,
-        clientSecret: 'client_secret' in input.client
-            ? input.client.client_secret
-            : input.previous?.clientSecret,
-        accessToken: input.tokens.access_token,
-        refreshToken: input.tokens.refresh_token ?? input.previous?.refreshToken,
-        tokenType: input.tokens.token_type ?? 'bearer',
-        expiresAt,
-        scope: input.tokens.scope ?? input.previous?.scope,
-    };
-}
-async function persistAuthorizedSession(input) {
-    const tokens = await input.provider.tokens();
-    const client = await input.provider.clientInformation();
-    if (!tokens || !client) {
-        throw new Error('OAuth completed without tokens. Run `kody login`.');
-    }
-    const clientIssuer = 'issuer' in client && typeof client.issuer === 'string'
-        ? client.issuer
-        : undefined;
-    const credentials = credentialsFromTokens({
-        mcpUrl: input.mcpUrl,
-        resource: input.mcpUrl,
-        authorizationServerUrl: tokens.issuer ??
-            clientIssuer ??
-            input.previous?.authorizationServerUrl ??
-            new URL(input.mcpUrl).origin,
-        client,
-        tokens,
-        previous: input.previous,
-        org: input.org ?? input.previous?.org,
-        now: input.now,
-    });
-    const saved = saveCredentials(credentials, input.backend, input.resolution, {
-        activate: input.activate !== false,
-    });
-    return { credentials, saved };
-}
-export async function refreshStoredCredentials(input) {
-    const { credentials } = input;
-    if (!credentials.refreshToken) {
-        throw new Error('No refresh token is stored. Run `kody login`.');
-    }
-    const provider = createCliOAuthProvider({
-        mcpUrl: credentials.mcpUrl,
-        redirectUri: cliRedirectUrl(),
-        existing: credentials,
-        loadStoredTokens: true,
-        openBrowser: false,
-        expectedState: crypto.randomUUID(),
-    });
-    const result = await auth(provider, {
-        serverUrl: credentials.mcpUrl,
-        scope: defaultScopes.join(' '),
-        fetchFn: input.fetchFn,
-    });
-    if (result !== 'AUTHORIZED') {
-        throw new Error('Token refresh requires a new `kody login`.');
-    }
-    const { credentials: next } = await persistAuthorizedSession({
-        mcpUrl: credentials.mcpUrl,
-        provider,
-        backend: input.backend,
-        resolution: input.resolution,
-        previous: credentials,
-        org: credentials.org,
-        now: input.now,
-        // Do not steal activeOrg during a one-shot `--org` / KODY_ORG refresh.
-        activate: false,
-    });
-    return next;
-}
-/**
- * Finish silent v1→multi-org migration when a pending session has no slug yet.
- * Best-effort: failures leave pending in place so commands still work.
- */
-export async function resolvePendingOrgSlug(input) {
-    const mcpUrl = input.mcpUrl ?? defaultMcpUrl;
-    const snapshot = loadCredentialStore(mcpUrl, input.backend, input.resolution);
-    if (!snapshot?.pending)
-        return snapshot?.activeOrg ?? null;
-    let pending = loadPendingCredentials(mcpUrl, input.backend, input.resolution);
-    if (!pending)
-        return snapshot.activeOrg ?? null;
-    if (isAccessTokenExpired(pending, input.now)) {
-        if (!pending.refreshToken)
-            return null;
-        try {
-            pending = await refreshStoredCredentials({
-                credentials: pending,
-                backend: input.backend,
-                resolution: input.resolution,
-                now: input.now,
-                fetchFn: input.fetchFn,
-            });
-        }
-        catch {
-            return null;
-        }
-    }
-    const discover = input.discoverOrg ?? discoverOrgSlugFromAccessToken;
-    try {
-        const slug = await discover({
-            mcpUrl,
-            accessToken: pending.accessToken,
-            fetchFn: input.fetchFn,
-        });
-        promotePendingOrg(mcpUrl, slug, input.backend, input.resolution);
-        return slug;
-    }
-    catch {
-        return null;
-    }
-}
-export async function ensureFreshCredentials(input) {
-    const mcpUrl = input.mcpUrl ?? defaultMcpUrl;
-    await resolvePendingOrgSlug({
-        mcpUrl,
-        backend: input.backend,
-        resolution: input.resolution,
-        now: input.now,
-        fetchFn: input.fetchFn,
-        discoverOrg: input.discoverOrg,
-    });
-    const credentials = loadCredentials(mcpUrl, input.backend, input.resolution, {
-        org: input.org,
-    });
-    if (!credentials) {
-        if (input.org) {
-            throw new Error(`No login stored for org "${input.org}". Run \`kody login --org ${input.org}\` (or \`kody org use ${input.org}\` after logging in).`);
-        }
-        throw new Error(missingCliAuthMessage());
-    }
-    if (!isAccessTokenExpired(credentials, input.now)) {
-        return credentials;
-    }
-    return await refreshStoredCredentials({
-        credentials,
-        backend: input.backend,
-        resolution: input.resolution,
-        now: input.now,
-        fetchFn: input.fetchFn,
-    });
-}
-function startCallbackServer(redirectUri) {
-    return new Promise((resolve, reject) => {
-        const server = createServer();
-        const port = Number(redirectUri.port);
-        server.listen(port, redirectUri.hostname, () => resolve(server));
-        server.on('error', (error) => {
-            if ('code' in error && error.code === 'EADDRINUSE') {
-                reject(new Error(`Login callback port ${port} is in use. Stop the other listener and retry.`));
-                return;
-            }
-            reject(error);
-        });
-    });
-}
-function sendCallbackHtml(response, status, page) {
-    if (response.headersSent)
-        return;
-    response.writeHead(status, {
-        'Content-Type': 'text/html; charset=utf-8',
-        'Cache-Control': 'no-store',
-    });
-    response.end(renderLoginCallbackPage(page));
-}
-function waitForCallback(input) {
-    return new Promise((resolve, reject) => {
-        let settled = false;
-        let pendingResponse;
-        const closeServer = () => {
-            input.server.close();
-        };
-        const rejectOnce = (error) => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timer);
-            closeServer();
-            reject(error);
-        };
-        const resolveOnce = (result) => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timer);
-            resolve(result);
-        };
-        const timer = setTimeout(() => {
-            if (pendingResponse && !pendingResponse.headersSent) {
-                sendCallbackHtml(pendingResponse, 408, {
-                    kind: 'error',
-                    error: 'expired',
-                });
-            }
-            rejectOnce(new Error('Timed out waiting for the browser login.'));
-        }, input.timeoutMs);
-        input.server.on('request', (request, response) => {
-            try {
-                const url = new URL(request.url ?? '/', input.redirectUri);
-                if (url.pathname !== input.redirectUri.pathname) {
-                    response.writeHead(404).end('Not found');
-                    return;
-                }
-                const error = url.searchParams.get('error');
-                if (error) {
-                    const description = url.searchParams.get('error_description') ?? '';
-                    const kind = loginCallbackErrorFromOAuthError(error);
-                    sendCallbackHtml(response, 400, { kind: 'error', error: kind });
-                    rejectOnce(new Error(description || error));
-                    return;
-                }
-                const state = url.searchParams.get('state');
-                const code = url.searchParams.get('code');
-                const iss = url.searchParams.get('iss') ?? undefined;
-                if (state !== input.expectedState || !code) {
-                    const kind = state && state !== input.expectedState
-                        ? 'state_mismatch'
-                        : 'failed';
-                    sendCallbackHtml(response, 400, { kind: 'error', error: kind });
-                    rejectOnce(new Error('OAuth callback missing code or state.'));
-                    return;
-                }
-                pendingResponse = response;
-                resolveOnce({
-                    code,
-                    ...(iss ? { iss } : {}),
-                    complete(page) {
-                        sendCallbackHtml(response, page.kind === 'success' ? 200 : 400, page);
-                        closeServer();
-                    },
-                });
-            }
-            catch (error) {
-                rejectOnce(redactError(error));
-            }
-        });
-    });
-}
-export async function login(options = {}) {
-    const mcpUrl = options.mcpUrl ?? defaultMcpUrl;
-    const orgHint = options.org === undefined ? undefined : orgSlugFromFlag(options.org);
-    const redirectUri = cliRedirectUrl();
-    const expectedState = crypto.randomUUID();
-    const server = await startCallbackServer(redirectUri);
-    let authorizationUrl = redirectUri;
-    const provider = createCliOAuthProvider({
-        mcpUrl,
-        redirectUri,
-        loadStoredTokens: false,
-        openBrowser: options.openBrowser !== false,
-        expectedState,
-        ...(orgHint ? { org: orgHint } : {}),
-        onAuthorizationUrl: (url) => {
-            authorizationUrl = url;
-            options.onAuthorizationUrl?.(url);
-        },
-    });
-    let completeCallback;
-    try {
-        const first = await auth(provider, {
-            serverUrl: mcpUrl,
-            scope: defaultScopes.join(' '),
-            fetchFn: options.fetchFn,
-        });
-        if (first !== 'AUTHORIZED') {
-            const callback = await waitForCallback({
-                server,
-                redirectUri,
-                expectedState,
-                timeoutMs: options.timeoutMs ?? loginTimeoutMs,
-            });
-            completeCallback = callback.complete;
-            const exchanged = await auth(provider, {
-                serverUrl: mcpUrl,
-                authorizationCode: callback.code,
-                ...(callback.iss ? { iss: callback.iss } : {}),
-                scope: defaultScopes.join(' '),
-                fetchFn: options.fetchFn,
-            });
-            if (exchanged !== 'AUTHORIZED') {
-                completeCallback({ kind: 'error', error: 'failed' });
-                completeCallback = undefined;
-                throw new Error('OAuth redirect completed without tokens.');
-            }
-        }
-        else {
-            server.close();
-        }
-        const tokens = await provider.tokens();
-        if (!tokens?.access_token) {
-            throw new Error('OAuth completed without tokens. Run `kody login`.');
-        }
-        let org = orgHint;
-        let account;
-        const discover = options.discoverIdentity ?? discoverLoginIdentity;
-        try {
-            const identity = await discover({
-                mcpUrl,
-                accessToken: tokens.access_token,
-                fetchFn: options.fetchFn,
-            });
-            if (orgHint && identity.org !== orgHint) {
-                completeCallback?.({ kind: 'error', error: 'failed' });
-                completeCallback = undefined;
-                throw new Error(`Login was bound to org "${identity.org}" but \`--org ${orgHint}\` was requested.`);
-            }
-            org = identity.org;
-            account = identity.account;
-        }
-        catch (error) {
-            // Org mismatch always fails. Soft-fail other discovery errors only
-            // when we can still name the login (--org) or park a sole pending
-            // migration (no named orgs yet). Otherwise a nameless pending
-            // beside existing orgs would never become active.
-            if (error instanceof Error &&
-                error.message.startsWith('Login was bound to org ')) {
-                throw error;
-            }
-            if (!orgHint) {
-                const existing = loadCredentialStore(mcpUrl, options.backend, options.resolution);
-                if (existing && Object.keys(existing.orgs).length > 0) {
-                    completeCallback?.({ kind: 'error', error: 'failed' });
-                    completeCallback = undefined;
-                    throw new Error('Could not determine the organization for this login. Re-run with `kody login --org <slug>`.');
-                }
-            }
-        }
-        const { credentials, saved } = await persistAuthorizedSession({
-            mcpUrl,
-            provider,
-            backend: options.backend,
-            resolution: options.resolution,
-            org,
-            now: options.now?.(),
-        });
-        completeCallback?.({
-            kind: 'success',
-            ...(org ? { org } : {}),
-            ...(account ? { account } : {}),
-        });
-        completeCallback = undefined;
-        return {
-            credentials,
-            authorizationUrl,
-            backendKind: saved.backend.kind,
-            backendPath: saved.backend.path,
-            ...(org ? { org } : {}),
-            ...(account ? { account } : {}),
-        };
-    }
-    catch (error) {
-        completeCallback?.({ kind: 'error', error: 'failed' });
-        server.close();
-        throw redactError(error);
-    }
-}
-//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,YAAY,GAIZ,MAAM,WAAW,CAAA;AAClB,OAAO,EACN,IAAI,GAGJ,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,EACN,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,aAAa,EACb,cAAc,GACd,MAAM,eAAe,CAAA;AACtB,OAAO,EACN,qBAAqB,GAErB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAA;AAClE,OAAO,EACN,gCAAgC,EAChC,uBAAuB,GAGvB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EACN,mBAAmB,EACnB,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,GAIf,MAAM,YAAY,CAAA;AAyBnB,MAAM,UAAU,oBAAoB,CACnC,WAA8B,EAC9B,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,IAAI,CAAC,WAAW,CAAC,SAAS;QAAE,OAAO,KAAK,CAAA;IACxC,OAAO,GAAG,GAAG,iBAAiB,IAAI,WAAW,CAAC,SAAS,CAAA;AACxD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KASrC;IACA,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;IACnC,MAAM,SAAS,GACd,OAAO,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,QAAQ;QAC1C,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI;QACtC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAA;IAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAA;IAC5C,OAAO;QACN,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;QAChC,YAAY,EACX,eAAe,IAAI,KAAK,CAAC,MAAM;YAC9B,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa;YAC5B,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY;QAChC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY;QACtC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,aAAa,IAAI,KAAK,CAAC,QAAQ,EAAE,YAAY;QACxE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,IAAI,QAAQ;QAC9C,SAAS;QACT,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,EAAE,KAAK;KAClD,CAAA;AACF,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,KAUvC;IAIA,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAA;IAC5C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAA;IACvD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACrE,CAAC;IACD,MAAM,YAAY,GACjB,QAAQ,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QACtD,CAAC,CAAC,MAAM,CAAC,MAAM;QACf,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,WAAW,GAAG,qBAAqB,CAAC;QACzC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,MAAM;QACtB,sBAAsB,EACrB,MAAM,CAAC,MAAM;YACb,YAAY;YACZ,KAAK,CAAC,QAAQ,EAAE,sBAAsB;YACtC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM;QAC7B,MAAM;QACN,MAAM;QACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,GAAG;QACrC,GAAG,EAAE,KAAK,CAAC,GAAG;KACd,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE;QAC3E,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,KAAK;KAClC,CAAC,CAAA;IACF,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAM9C;IACA,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAA;IAC7B,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;IACjE,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC;QACvC,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,WAAW,EAAE,cAAc,EAAE;QAC7B,QAAQ,EAAE,WAAW;QACrB,gBAAgB,EAAE,IAAI;QACtB,WAAW,EAAE,KAAK;QAClB,aAAa,EAAE,MAAM,CAAC,UAAU,EAAE;KAClC,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE;QACnC,SAAS,EAAE,WAAW,CAAC,MAAM;QAC7B,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;KACtB,CAAC,CAAA;IACF,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,MAAM,wBAAwB,CAAC;QAC5D,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,QAAQ;QACR,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,WAAW;QACrB,GAAG,EAAE,WAAW,CAAC,GAAG;QACpB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,uEAAuE;QACvE,QAAQ,EAAE,KAAK;KACf,CAAC,CAAA;IACF,OAAO,IAAI,CAAA;AACZ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAW3C;IACA,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,aAAa,CAAA;IAC5C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;IAC7E,IAAI,CAAC,QAAQ,EAAE,OAAO;QAAE,OAAO,QAAQ,EAAE,SAAS,IAAI,IAAI,CAAA;IAC1D,IAAI,OAAO,GAAG,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;IAC7E,IAAI,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAA;IAC/C,IAAI,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO,CAAC,YAAY;YAAE,OAAO,IAAI,CAAA;QACtC,IAAI,CAAC;YACJ,OAAO,GAAG,MAAM,wBAAwB,CAAC;gBACxC,WAAW,EAAE,OAAO;gBACpB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,OAAO,EAAE,KAAK,CAAC,OAAO;aACtB,CAAC,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAA;QACZ,CAAC;IACF,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,IAAI,8BAA8B,CAAA;IACpE,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC;YAC3B,MAAM;YACN,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,OAAO,EAAE,KAAK,CAAC,OAAO;SACtB,CAAC,CAAA;QACF,iBAAiB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;QAChE,OAAO,IAAI,CAAA;IACZ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAA;IACZ,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAY5C;IACA,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,aAAa,CAAA;IAC5C,MAAM,qBAAqB,CAAC;QAC3B,MAAM;QACN,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC9B,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE;QAC5E,GAAG,EAAE,KAAK,CAAC,GAAG;KACd,CAAC,CAAA;IACF,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACd,4BAA4B,KAAK,CAAC,GAAG,6BAA6B,KAAK,CAAC,GAAG,yBAAyB,KAAK,CAAC,GAAG,uBAAuB,CACpI,CAAA;QACF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC,CAAA;IACzC,CAAC;IACD,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,OAAO,WAAW,CAAA;IACnB,CAAC;IACD,OAAO,MAAM,wBAAwB,CAAC;QACrC,WAAW;QACX,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,OAAO,EAAE,KAAK,CAAC,OAAO;KACtB,CAAC,CAAA;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAgB;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAA;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACpD,MAAM,CACL,IAAI,KAAK,CACR,uBAAuB,IAAI,gDAAgD,CAC3E,CACD,CAAA;gBACD,OAAM;YACP,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,CAAA;QACd,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACH,CAAC;AAYD,SAAS,gBAAgB,CACxB,QAAwB,EACxB,MAAc,EACd,IAAmD;IAEnD,IAAI,QAAQ,CAAC,WAAW;QAAE,OAAM;IAChC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QAC1B,cAAc,EAAE,0BAA0B;QAC1C,eAAe,EAAE,UAAU;KAC3B,CAAC,CAAA;IACF,QAAQ,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAA;AAC5C,CAAC;AAED,SAAS,eAAe,CAAC,KAKxB;IACA,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,IAAI,eAA2C,CAAA;QAE/C,MAAM,WAAW,GAAG,GAAG,EAAE;YACxB,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QACrB,CAAC,CAAA;QAED,MAAM,UAAU,GAAG,CAAC,KAAY,EAAE,EAAE;YACnC,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,WAAW,EAAE,CAAA;YACb,MAAM,CAAC,KAAK,CAAC,CAAA;QACd,CAAC,CAAA;QAED,MAAM,WAAW,GAAG,CAAC,MAAuB,EAAE,EAAE;YAC/C,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,CAAC,MAAM,CAAC,CAAA;QAChB,CAAC,CAAA;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,IAAI,eAAe,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;gBACrD,gBAAgB,CAAC,eAAe,EAAE,GAAG,EAAE;oBACtC,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,SAAS;iBAChB,CAAC,CAAA;YACH,CAAC;YACD,UAAU,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAA;QAClE,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;QAEnB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAwB,EAAE,QAAwB,EAAE,EAAE;YACjF,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;gBAC1D,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;oBACjD,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;oBACxC,OAAM;gBACP,CAAC;gBACD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;gBAC3C,IAAI,KAAK,EAAE,CAAC;oBACX,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAA;oBACnE,MAAM,IAAI,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAA;oBACpD,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;oBAC/D,UAAU,CAAC,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,CAAC,CAAA;oBAC3C,OAAM;gBACP,CAAC;gBACD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;gBAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBACzC,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS,CAAA;gBACpD,IAAI,KAAK,KAAK,KAAK,CAAC,aAAa,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC5C,MAAM,IAAI,GACT,KAAK,IAAI,KAAK,KAAK,KAAK,CAAC,aAAa;wBACrC,CAAC,CAAC,gBAAgB;wBAClB,CAAC,CAAC,QAAQ,CAAA;oBACZ,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;oBAC/D,UAAU,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAA;oBAC9D,OAAM;gBACP,CAAC;gBACD,eAAe,GAAG,QAAQ,CAAA;gBAC1B,WAAW,CAAC;oBACX,IAAI;oBACJ,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvB,QAAQ,CAAC,IAAI;wBACZ,gBAAgB,CACf,QAAQ,EACR,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EACnC,IAAI,CACJ,CAAA;wBACD,WAAW,EAAE,CAAA;oBACd,CAAC;iBACD,CAAC,CAAA;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;YAC/B,CAAC;QACF,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,UAAwB,EAAE;IAQrD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAA;IAC9C,MAAM,OAAO,GACZ,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACrE,MAAM,WAAW,GAAG,cAAc,EAAE,CAAA;IACpC,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;IACzC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAA;IACrD,IAAI,gBAAgB,GAAG,WAAW,CAAA;IAClC,MAAM,QAAQ,GAAG,sBAAsB,CAAC;QACvC,MAAM;QACN,WAAW;QACX,gBAAgB,EAAE,KAAK;QACvB,WAAW,EAAE,OAAO,CAAC,WAAW,KAAK,KAAK;QAC1C,aAAa;QACb,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE;YAC3B,gBAAgB,GAAG,GAAG,CAAA;YACtB,OAAO,CAAC,kBAAkB,EAAE,CAAC,GAAG,CAAC,CAAA;QAClC,CAAC;KACD,CAAC,CAAA;IACF,IAAI,gBAAyD,CAAA;IAC7D,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE;YAClC,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;SACxB,CAAC,CAAA;QACF,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC;gBACtC,MAAM;gBACN,WAAW;gBACX,aAAa;gBACb,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,cAAc;aAC9C,CAAC,CAAA;YACF,gBAAgB,GAAG,QAAQ,CAAC,QAAQ,CAAA;YACpC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE;gBACtC,SAAS,EAAE,MAAM;gBACjB,iBAAiB,EAAE,QAAQ,CAAC,IAAI;gBAChC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9C,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;aACxB,CAAC,CAAA;YACF,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;gBAChC,gBAAgB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;gBACpD,gBAAgB,GAAG,SAAS,CAAA;gBAC5B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;YAC5D,CAAC;QACF,CAAC;aAAM,CAAC;YACP,MAAM,CAAC,KAAK,EAAE,CAAA;QACf,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;QACrE,CAAC;QAED,IAAI,GAAG,GAAG,OAAO,CAAA;QACjB,IAAI,OAAyC,CAAA;QAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,IAAI,qBAAqB,CAAA;QAClE,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC;gBAC/B,MAAM;gBACN,WAAW,EAAE,MAAM,CAAC,YAAY;gBAChC,OAAO,EAAE,OAAO,CAAC,OAAO;aACxB,CAAC,CAAA;YACF,IAAI,OAAO,IAAI,QAAQ,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;gBACzC,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;gBACtD,gBAAgB,GAAG,SAAS,CAAA;gBAC5B,MAAM,IAAI,KAAK,CACd,2BAA2B,QAAQ,CAAC,GAAG,iBAAiB,OAAO,mBAAmB,CAClF,CAAA;YACF,CAAC;YACD,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAA;YAClB,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAA;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,mEAAmE;YACnE,kEAAkE;YAClE,8DAA8D;YAC9D,kDAAkD;YAClD,IACC,KAAK,YAAY,KAAK;gBACtB,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAClD,CAAC;gBACF,MAAM,KAAK,CAAA;YACZ,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,QAAQ,GAAG,mBAAmB,CACnC,MAAM,EACN,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,UAAU,CAClB,CAAA;gBACD,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvD,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;oBACtD,gBAAgB,GAAG,SAAS,CAAA;oBAC5B,MAAM,IAAI,KAAK,CACd,6FAA6F,CAC7F,CAAA;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,MAAM,wBAAwB,CAAC;YAC7D,MAAM;YACN,QAAQ;YACR,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,GAAG;YACH,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE;SACpB,CAAC,CAAA;QAEF,gBAAgB,EAAE,CAAC;YAClB,IAAI,EAAE,SAAS;YACf,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/B,CAAC,CAAA;QACF,gBAAgB,GAAG,SAAS,CAAA;QAE5B,OAAO;YACN,WAAW;YACX,gBAAgB;YAChB,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;YAC/B,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;YAC/B,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/B,CAAA;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;QACtD,MAAM,CAAC,KAAK,EAAE,CAAA;QACd,MAAM,WAAW,CAAC,KAAK,CAAC,CAAA;IACzB,CAAC;AACF,CAAC"}