@kodycodes/cli 1.26.2 → 1.27.0

package/dist/auth-bootstrap.js

@@ -1,373 +0,0 @@
-import { assertTokenSafeApiUrl, capabilityProxyUrl } from './capability-proxy.js';
-import { cliName, defaultApiUrl } from './defaults.js';
-import { summarizeNonJsonErrorBody } from './http-error-body.js';
-import { describeNetworkError } from './network-error.js';
-import { readPackageVersion } from './package-info.js';
-import { saveStoredApiToken, } from './api-token-store.js';
-/** ADR 0056 one-shot bootstrap code prefix (`kody_bc_…`). */
-export const cliBootstrapCodePrefix = 'kody_bc_';
-/** Platform shape: `kody_bc_<16 alnum>_<32 base64url>`. */
-const bootstrapCodePattern = /^kody_bc_([a-z0-9]{16})_([A-Za-z0-9_-]{32})$/;
-export const bootstrapRedeemPath = 'v1/tokens/bootstrap/redeem';
-/** ADR 0056 idle / absolute lifetime caps (seconds). */
-export const cliTokenLifetimePolicy = {
-    minIdleTtlSeconds: 60,
-    /** Idle timeout at most 14 days. */
-    maxIdleTtlSeconds: 14 * 24 * 60 * 60,
-    /** Absolute lifetime at most 3 months. */
-    maxMaxLifetimeSeconds: 90 * 24 * 60 * 60,
-};
-/**
- * Input aliases for required token lifetimes. Sugar only: never stored on the
- * token. `short` suits single-task agents; `long` is the policy maximum.
- */
-export const cliTokenLifetimeAliases = {
-    short: {
-        idleTtlSeconds: 60 * 60,
-        maxLifetimeSeconds: 24 * 60 * 60,
-    },
-    long: {
-        idleTtlSeconds: cliTokenLifetimePolicy.maxIdleTtlSeconds,
-        maxLifetimeSeconds: cliTokenLifetimePolicy.maxMaxLifetimeSeconds,
-    },
-};
-export function parseCliBootstrapCode(value) {
-    const match = bootstrapCodePattern.exec(value.trim());
-    if (!match)
-        return null;
-    const [, codeId, secret] = match;
-    if (!codeId || !secret)
-        return null;
-    return { codeId, secret };
-}
-export function assertCliBootstrapCode(code) {
-    const trimmed = code.trim();
-    if (!parseCliBootstrapCode(trimmed)) {
-        throw new Error(`Invalid bootstrap code. Expected a one-shot ${cliBootstrapCodePrefix}… from cliCredentialBootstrap (MCP api / kody.cliCredentialBootstrap).`);
-    }
-    return trimmed;
-}
-/** Exact CLI flag syntax for a missing lifetime (ADR 0056). */
-export function cliTokenLifetimeMissingError() {
-    return ('Token lifetime is required. Pass --lifetime short|long, or both ' +
-        `--idle-ttl-seconds <n> and --max-lifetime-seconds <n> ` +
-        `(idle ${cliTokenLifetimePolicy.minIdleTtlSeconds}-${cliTokenLifetimePolicy.maxIdleTtlSeconds}s, ` +
-        `max age up to ${cliTokenLifetimePolicy.maxMaxLifetimeSeconds}s). ` +
-        'Single-task agents should use --lifetime short.');
-}
-/**
- * Resolve a required lifetime choice. Aliases expand to idle/max seconds for
- * validation; the redeem body still sends the alias or explicit seconds only.
- */
-export function resolveCliTokenLifetime(input) {
-    const aliasRaw = typeof input.lifetime === 'string' ? input.lifetime.trim() : '';
-    const hasAlias = aliasRaw.length > 0;
-    const hasIdle = input.idleTtlSeconds !== undefined;
-    const hasMax = input.maxLifetimeSeconds !== undefined;
-    if (!hasAlias && !hasIdle && !hasMax) {
-        throw new Error(cliTokenLifetimeMissingError());
-    }
-    if (hasAlias && (hasIdle || hasMax)) {
-        throw new Error('Pass --lifetime short|long, or both --idle-ttl-seconds and --max-lifetime-seconds, not both forms.');
-    }
-    if (hasAlias) {
-        if (!(aliasRaw in cliTokenLifetimeAliases)) {
-            throw new Error(`--lifetime must be short or long (got ${JSON.stringify(aliasRaw)}).`);
-        }
-        const lifetime = aliasRaw;
-        const resolved = cliTokenLifetimeAliases[lifetime];
-        return {
-            kind: 'alias',
-            lifetime,
-            idleTtlSeconds: resolved.idleTtlSeconds,
-            maxLifetimeSeconds: resolved.maxLifetimeSeconds,
-        };
-    }
-    if (!hasIdle || !hasMax) {
-        throw new Error('When not using --lifetime short|long, both --idle-ttl-seconds and --max-lifetime-seconds are required.');
-    }
-    const idleTtlSeconds = readRequiredInteger({
-        value: input.idleTtlSeconds,
-        min: cliTokenLifetimePolicy.minIdleTtlSeconds,
-        max: cliTokenLifetimePolicy.maxIdleTtlSeconds,
-        field: '--idle-ttl-seconds',
-    });
-    const maxLifetimeSeconds = readRequiredInteger({
-        value: input.maxLifetimeSeconds,
-        min: idleTtlSeconds,
-        max: cliTokenLifetimePolicy.maxMaxLifetimeSeconds,
-        field: '--max-lifetime-seconds',
-    });
-    return {
-        kind: 'explicit',
-        idleTtlSeconds,
-        maxLifetimeSeconds,
-    };
-}
-/** Build the redeem JSON body (alias or explicit seconds — never both). */
-export function bootstrapRedeemRequestBody(code, lifetime) {
-    if (lifetime.kind === 'alias') {
-        return { code, lifetime: lifetime.lifetime };
-    }
-    return {
-        code,
-        idle_ttl_seconds: lifetime.idleTtlSeconds,
-        max_lifetime_seconds: lifetime.maxLifetimeSeconds,
-    };
-}
-/** Parse a CLI `--idle-ttl-seconds` / `--max-lifetime-seconds` string flag. */
-export function parseCliLifetimeSecondsFlag(raw, flag) {
-    if (raw === undefined)
-        return undefined;
-    const trimmed = raw.trim();
-    if (!/^-?\d+$/.test(trimmed)) {
-        throw new Error(`${flag} must be an integer.`);
-    }
-    return Number(trimmed);
-}
-/**
- * Lifetime for redeem after a successful mint. Trusts the server's clamped
- * idle/max seconds (may be below CLI flag mins, or max below the requested
- * idle). Only coerces idle down when max < idle so the pair stays consistent.
- */
-export function resolveMintedRedeemLifetime(minted) {
-    const maxLifetimeSeconds = minted.max_lifetime_seconds;
-    const idleTtlSeconds = Math.min(minted.idle_ttl_seconds, maxLifetimeSeconds);
-    return {
-        kind: 'explicit',
-        idleTtlSeconds,
-        maxLifetimeSeconds,
-    };
-}
-/**
- * POST /v1/tokens/bootstrap/redeem with JSON `{ code, lifetime }` or
- * `{ code, idle_ttl_seconds, max_lifetime_seconds }` and **no** Authorization
- * header (ADR 0056). Returns the minted `kody_at_…` once.
- *
- * Pass `trustedMintLifetime` after cliCredentialBootstrap so server-clamped
- * seconds are redeemed without re-applying CLI flag mins (max may be below
- * the requested idle or below `--idle-ttl-seconds` minimum).
- */
-export async function redeemBootstrapCode(input) {
-    const code = assertCliBootstrapCode(input.code);
-    const lifetime = input.trustedMintLifetime
-        ? resolveMintedRedeemLifetime(input.trustedMintLifetime)
-        : resolveCliTokenLifetime({
-            lifetime: input.lifetime,
-            idleTtlSeconds: input.idleTtlSeconds,
-            maxLifetimeSeconds: input.maxLifetimeSeconds,
-        });
-    const apiUrl = input.apiUrl || defaultApiUrl;
-    assertTokenSafeApiUrl(apiUrl);
-    const url = capabilityProxyUrl(apiUrl, bootstrapRedeemPath);
-    const fetchFn = input.fetchFn ?? fetch;
-    let response;
-    try {
-        response = await fetchFn(url, {
-            method: 'POST',
-            headers: {
-                accept: 'application/json',
-                'content-type': 'application/json',
-                'user-agent': `${cliName}/${readPackageVersion()}`,
-            },
-            body: JSON.stringify(bootstrapRedeemRequestBody(code, lifetime)),
-        });
-    }
-    catch (error) {
-        const reason = describeNetworkError(error);
-        throw new Error(`Could not reach the Kody API at ${url.origin} (${reason}). Check --api-url / KODY_API_URL and your network.`);
-    }
-    const body = await readJson(response);
-    if (!response.ok) {
-        throw describeRedeemFailure(response.status, body, url);
-    }
-    return parseRedeemResponse(body);
-}
-export function storedApiTokenFromRedeem(input) {
-    const token = input.redeemed.token.trim();
-    if (!token.startsWith('kody_at_')) {
-        throw new Error('Bootstrap redeem did not return a scoped kody_at_… API token.');
-    }
-    return {
-        version: 1,
-        apiUrl: input.apiUrl,
-        token,
-        tokenId: input.redeemed.id,
-        ...(input.redeemed.name ? { name: input.redeemed.name } : {}),
-        ...(Array.isArray(input.redeemed.scopes) ? { scopes: input.redeemed.scopes } : {}),
-        expiresAt: input.redeemed.expires_at ?? null,
-        maxExpiresAt: input.redeemed.max_expires_at ?? null,
-        createdVia: input.redeemed.created_via ?? 'cli-bootstrap',
-    };
-}
-/**
- * Redeem a one-shot `kody_bc_…` and persist the resulting API token for
- * `execute --local`. Never returns the token string to callers that print
- * success output — use `stored.tokenId` / backend kind only.
- */
-export async function authBootstrap(input) {
-    const apiUrl = input.apiUrl || defaultApiUrl;
-    const redeemed = await redeemBootstrapCode({
-        code: input.code,
-        lifetime: input.lifetime,
-        idleTtlSeconds: input.idleTtlSeconds,
-        maxLifetimeSeconds: input.maxLifetimeSeconds,
-        apiUrl,
-        fetchFn: input.fetchFn,
-    });
-    const stored = storedApiTokenFromRedeem({ apiUrl, redeemed });
-    const saved = saveStoredApiToken(stored, input.backend, input.resolution);
-    return {
-        stored,
-        backendKind: saved.backend.kind,
-        ...(saved.backend.path ? { backendPath: saved.backend.path } : {}),
-    };
-}
-export const cliCredentialBootstrapOperationId = 'cliCredentialBootstrap';
-/**
- * Parse `--scopes`. Comma- or space-separated, deduped, order kept. The list
- * replaces cliCredentialBootstrap's default scopes; the server validates names.
- */
-export function parseCliScopesFlag(raw) {
-    if (raw === undefined)
-        return undefined;
-    const scopes = [
-        ...new Set(raw
-            .split(/[\s,]+/)
-            .map((scope) => scope.trim())
-            .filter(Boolean)),
-    ];
-    if (scopes.length === 0) {
-        throw new Error('--scopes needs at least one scope (e.g. --scopes org:execute,package:write).');
-    }
-    return scopes;
-}
-/** cliCredentialBootstrap params for an explicit scope list and lifetime. */
-export function bootstrapMintParams(scopes, lifetime) {
-    return {
-        scopes: [...scopes],
-        ...bootstrapMintLifetimeFields(lifetime),
-    };
-}
-export function bootstrapMintLifetimeFields(lifetime) {
-    return lifetime.kind === 'alias'
-        ? { lifetime: lifetime.lifetime }
-        : {
-            idle_ttl_seconds: lifetime.idleTtlSeconds,
-            max_lifetime_seconds: lifetime.maxLifetimeSeconds,
-        };
-}
-export function parseBootstrapMintResponse(body) {
-    if (!isRecord(body) ||
-        typeof body.bootstrap_code !== 'string' ||
-        typeof body.idle_ttl_seconds !== 'number' ||
-        typeof body.max_lifetime_seconds !== 'number') {
-        throw new Error('cliCredentialBootstrap returned an unexpected response.');
-    }
-    return {
-        bootstrap_code: body.bootstrap_code,
-        scopes: Array.isArray(body.scopes)
-            ? body.scopes.filter((scope) => typeof scope === 'string')
-            : [],
-        idle_ttl_seconds: body.idle_ttl_seconds,
-        max_lifetime_seconds: body.max_lifetime_seconds,
-    };
-}
-/**
- * Mint a bootstrap code with explicit `scopes` through the caller's current
- * Kody credential, then redeem and store it like `authBootstrap`. Redeems with
- * the minted idle/max seconds because the server may clamp the max lifetime to
- * a parent API token's remaining lifetime — those values must not be
- * re-validated as CLI lifetime flags (which would burn the one-shot code).
- */
-export async function authBootstrapWithScopes(input) {
-    const minted = parseBootstrapMintResponse(await input.mint(bootstrapMintParams(input.scopes, input.lifetime)));
-    const apiUrl = input.apiUrl || defaultApiUrl;
-    const redeemed = await redeemBootstrapCode({
-        code: minted.bootstrap_code,
-        trustedMintLifetime: {
-            idle_ttl_seconds: minted.idle_ttl_seconds,
-            max_lifetime_seconds: minted.max_lifetime_seconds,
-        },
-        apiUrl,
-        fetchFn: input.fetchFn,
-    });
-    const stored = storedApiTokenFromRedeem({ apiUrl, redeemed });
-    const saved = saveStoredApiToken(stored, input.backend, input.resolution);
-    return {
-        stored,
-        backendKind: saved.backend.kind,
-        ...(saved.backend.path ? { backendPath: saved.backend.path } : {}),
-    };
-}
-function readRequiredInteger(input) {
-    if (!Number.isInteger(input.value) ||
-        input.value < input.min ||
-        input.value > input.max) {
-        throw new Error(`${input.field} must be an integer between ${input.min} and ${input.max}.`);
-    }
-    return input.value;
-}
-function parseRedeemResponse(body) {
-    if (!isRecord(body) || typeof body.token !== 'string' || typeof body.id !== 'string') {
-        throw new Error('Bootstrap redeem returned an unexpected response.');
-    }
-    return {
-        token: body.token,
-        token_type: typeof body.token_type === 'string' ? body.token_type : undefined,
-        id: body.id,
-        name: typeof body.name === 'string' ? body.name : null,
-        scopes: Array.isArray(body.scopes)
-            ? body.scopes.filter((scope) => typeof scope === 'string')
-            : undefined,
-        status: typeof body.status === 'string' ? body.status : undefined,
-        idle_ttl_seconds: typeof body.idle_ttl_seconds === 'number' ? body.idle_ttl_seconds : undefined,
-        expires_at: typeof body.expires_at === 'string' ? body.expires_at : null,
-        max_expires_at: typeof body.max_expires_at === 'string' ? body.max_expires_at : null,
-        created_via: typeof body.created_via === 'string' ? body.created_via : undefined,
-    };
-}
-function describeRedeemFailure(status, body, url) {
-    const failure = readErrorBody(body);
-    const detail = failure?.message ? ` Server said: ${failure.message}` : '';
-    if (status === 400 || status === 401 || status === 403 || status === 404) {
-        return new Error(`Bootstrap redeem failed (HTTP ${status}). The code may be invalid, expired, or already used. Call cliCredentialBootstrap again for a fresh code.${detail}`);
-    }
-    return new Error(failure?.message ??
-        `Bootstrap redeem failed with HTTP ${status} (${url.pathname}).${detail}`);
-}
-async function readJson(response) {
-    const text = await response.text();
-    if (!text)
-        return null;
-    try {
-        return JSON.parse(text);
-    }
-    catch {
-        return text;
-    }
-}
-function readErrorBody(body) {
-    if (!isRecord(body) || body.error == null) {
-        if (typeof body === 'string' && body.trim()) {
-            return { code: null, message: summarizeNonJsonErrorBody(body) };
-        }
-        if (isRecord(body) && typeof body.message === 'string') {
-            return { code: null, message: body.message };
-        }
-        return null;
-    }
-    const { error } = body;
-    if (typeof error === 'string')
-        return { code: null, message: error };
-    if (isRecord(error)) {
-        const code = typeof error.code === 'string' ? error.code : null;
-        const message = typeof error.message === 'string' ? error.message : code ?? JSON.stringify(error);
-        return { code, message };
-    }
-    return { code: null, message: String(error) };
-}
-function isRecord(value) {
-    return value !== null && typeof value === 'object' && !Array.isArray(value);
-}
-//# sourceMappingURL=auth-bootstrap.js.map

package/dist/auth-bootstrap.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-bootstrap.js","sourceRoot":"","sources":["../src/auth-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AACjF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAA;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EACN,kBAAkB,GAElB,MAAM,sBAAsB,CAAA;AAG7B,6DAA6D;AAC7D,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAA;AAEhD,2DAA2D;AAC3D,MAAM,oBAAoB,GAAG,8CAA8C,CAAA;AAE3E,MAAM,CAAC,MAAM,mBAAmB,GAAG,4BAA4B,CAAA;AAE/D,wDAAwD;AACxD,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACrC,iBAAiB,EAAE,EAAE;IACrB,oCAAoC;IACpC,iBAAiB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;IACpC,0CAA0C;IAC1C,qBAAqB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;CAC/B,CAAA;AAEV;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACtC,KAAK,EAAE;QACN,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,kBAAkB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;KAChC;IACD,IAAI,EAAE;QACL,cAAc,EAAE,sBAAsB,CAAC,iBAAiB;QACxD,kBAAkB,EAAE,sBAAsB,CAAC,qBAAqB;KAChE;CACQ,CAAA;AA2CV,MAAM,UAAU,qBAAqB,CAAC,KAAa;IAClD,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;IACrD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAA;IAChC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACnC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACd,+CAA+C,sBAAsB,wEAAwE,CAC7I,CAAA;IACF,CAAC;IACD,OAAO,OAAO,CAAA;AACf,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,4BAA4B;IAC3C,OAAO,CACN,kEAAkE;QAClE,wDAAwD;QACxD,SAAS,sBAAsB,CAAC,iBAAiB,IAAI,sBAAsB,CAAC,iBAAiB,KAAK;QAClG,iBAAiB,sBAAsB,CAAC,qBAAqB,MAAM;QACnE,iDAAiD,CACjD,CAAA;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAIvC;IACA,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAChF,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAA;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,KAAK,SAAS,CAAA;IAClD,MAAM,MAAM,GAAG,KAAK,CAAC,kBAAkB,KAAK,SAAS,CAAA;IAErD,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,4BAA4B,EAAE,CAAC,CAAA;IAChD,CAAC;IACD,IAAI,QAAQ,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACd,oGAAoG,CACpG,CAAA;IACF,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC,CAAC,QAAQ,IAAI,uBAAuB,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACd,yCAAyC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CACrE,CAAA;QACF,CAAC;QACD,MAAM,QAAQ,GAAG,QAAiC,CAAA;QAClD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAA;QAClD,OAAO;YACN,IAAI,EAAE,OAAO;YACb,QAAQ;YACR,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;SAC/C,CAAA;IACF,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACd,wGAAwG,CACxG,CAAA;IACF,CAAC;IACD,MAAM,cAAc,GAAG,mBAAmB,CAAC;QAC1C,KAAK,EAAE,KAAK,CAAC,cAAe;QAC5B,GAAG,EAAE,sBAAsB,CAAC,iBAAiB;QAC7C,GAAG,EAAE,sBAAsB,CAAC,iBAAiB;QAC7C,KAAK,EAAE,oBAAoB;KAC3B,CAAC,CAAA;IACF,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;QAC9C,KAAK,EAAE,KAAK,CAAC,kBAAmB;QAChC,GAAG,EAAE,cAAc;QACnB,GAAG,EAAE,sBAAsB,CAAC,qBAAqB;QACjD,KAAK,EAAE,wBAAwB;KAC/B,CAAC,CAAA;IACF,OAAO;QACN,IAAI,EAAE,UAAU;QAChB,cAAc;QACd,kBAAkB;KAClB,CAAA;AACF,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,0BAA0B,CACzC,IAAY,EACZ,QAAkC;IAElC,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAA;IAC7C,CAAC;IACD,OAAO;QACN,IAAI;QACJ,gBAAgB,EAAE,QAAQ,CAAC,cAAc;QACzC,oBAAoB,EAAE,QAAQ,CAAC,kBAAkB;KACjD,CAAA;AACF,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,2BAA2B,CAC1C,GAAuB,EACvB,IAAqD;IAErD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACvC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IAC1B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,sBAAsB,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAA;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAG3C;IACA,MAAM,kBAAkB,GAAG,MAAM,CAAC,oBAAoB,CAAA;IACtD,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAA;IAC5E,OAAO;QACN,IAAI,EAAE,UAAU;QAChB,cAAc;QACd,kBAAkB;KAClB,CAAA;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAWzC;IACA,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,mBAAmB;QACzC,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC,mBAAmB,CAAC;QACxD,CAAC,CAAC,uBAAuB,CAAC;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;SAC5C,CAAC,CAAA;IACJ,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,aAAa,CAAA;IAC5C,qBAAqB,CAAC,MAAM,CAAC,CAAA;IAC7B,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;IAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAA;IACtC,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,GAAG,OAAO,IAAI,kBAAkB,EAAE,EAAE;aAClD;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,0BAA0B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;SAChE,CAAC,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAA;QAC1C,MAAM,IAAI,KAAK,CACd,mCAAmC,GAAG,CAAC,MAAM,KAAK,MAAM,qDAAqD,CAC7G,CAAA;IACF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACrC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,qBAAqB,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAGxC;IACA,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;IACzC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;IACjF,CAAC;IACD,OAAO;QACN,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK;QACL,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;QAC1B,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI;QAC5C,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc,IAAI,IAAI;QACnD,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,IAAI,eAAe;KACzD,CAAA;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KASnC;IAKA,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,aAAa,CAAA;IAC5C,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;QAC1C,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,MAAM;QACN,OAAO,EAAE,KAAK,CAAC,OAAO;KACtB,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,wBAAwB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC7D,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;IACzE,OAAO;QACN,MAAM;QACN,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;QAC/B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAA;AACF,CAAC;AAED,MAAM,CAAC,MAAM,iCAAiC,GAAG,wBAAwB,CAAA;AASzE;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAuB;IACzD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACvC,MAAM,MAAM,GAAG;QACd,GAAG,IAAI,GAAG,CACT,GAAG;aACD,KAAK,CAAC,QAAQ,CAAC;aACf,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,OAAO,CAAC,CACjB;KACD,CAAA;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAA;IAChG,CAAC;IACD,OAAO,MAAM,CAAA;AACd,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CAClC,MAA6B,EAC7B,QAAkC;IAElC,OAAO;QACN,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC;QACnB,GAAG,2BAA2B,CAAC,QAAQ,CAAC;KACxC,CAAA;AACF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAC1C,QAAkC;IAElC,OAAO,QAAQ,CAAC,IAAI,KAAK,OAAO;QAC/B,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;QACjC,CAAC,CAAC;YACA,gBAAgB,EAAE,QAAQ,CAAC,cAAc;YACzC,oBAAoB,EAAE,QAAQ,CAAC,kBAAkB;SACjD,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAAa;IACvD,IACC,CAAC,QAAQ,CAAC,IAAI,CAAC;QACf,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ;QACvC,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ;QACzC,OAAO,IAAI,CAAC,oBAAoB,KAAK,QAAQ,EAC5C,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO;QACN,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YACjC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YAC3E,CAAC,CAAC,EAAE;QACL,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;KAC/C,CAAA;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAQ7C;IACA,MAAM,MAAM,GAAG,0BAA0B,CACxC,MAAM,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CACnE,CAAA;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,aAAa,CAAA;IAC5C,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;QAC1C,IAAI,EAAE,MAAM,CAAC,cAAc;QAC3B,mBAAmB,EAAE;YACpB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;SACjD;QACD,MAAM;QACN,OAAO,EAAE,KAAK,CAAC,OAAO;KACtB,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,wBAAwB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC7D,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;IACzE,OAAO;QACN,MAAM;QACN,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;QAC/B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAA;AACF,CAAC;AAED,SAAS,mBAAmB,CAAC,KAK5B;IACA,IACC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9B,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG;QACvB,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,EACtB,CAAC;QACF,MAAM,IAAI,KAAK,CACd,GAAG,KAAK,CAAC,KAAK,+BAA+B,KAAK,CAAC,GAAG,QAAQ,KAAK,CAAC,GAAG,GAAG,CAC1E,CAAA;IACF,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAA;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAa;IACzC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACrE,CAAC;IACD,OAAO;QACN,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QAC7E,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QACtD,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YACjC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YAC3E,CAAC,CAAC,SAAS;QACZ,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACjE,gBAAgB,EACf,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;QAC9E,UAAU,EAAE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;QACxE,cAAc,EAAE,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;QACpF,WAAW,EAAE,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;KAChF,CAAA;AACF,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc,EAAE,IAAa,EAAE,GAAQ;IACrE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,MAAM,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACzE,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1E,OAAO,IAAI,KAAK,CACf,iCAAiC,MAAM,4GAA4G,MAAM,EAAE,CAC3J,CAAA;IACF,CAAC;IACD,OAAO,IAAI,KAAK,CACf,OAAO,EAAE,OAAO;QACf,qCAAqC,MAAM,KAAK,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAC1E,CAAA;AACF,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACzC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAA;IACZ,CAAC;AACF,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;QAC3C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAA;QAChE,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACxD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;QAC7C,CAAC;QACD,OAAO,IAAI,CAAA;IACZ,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;IACtB,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACpE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;QAC/D,MAAM,OAAO,GACZ,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAClF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IACzB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AAC9C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC"}