@machina.ai/cell-cli-core 1.36.0-rc1 → 1.38.1-rc2

package/dist/src/services/sandboxManager.integration.test.js

@@ -0,0 +1,445 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, beforeAll, afterAll } from 'vitest';
+import { createSandboxManager } from './sandboxManagerFactory.js';
+import { ShellExecutionService } from './shellExecutionService.js';
+import { getSecureSanitizationConfig } from './environmentSanitization.js';
+import { NoopSandboxManager, LocalSandboxManager, } from './sandboxManager.js';
+import { execFile, execSync } from 'node:child_process';
+import { promisify } from 'node:util';
+import os from 'node:os';
+import fs from 'node:fs';
+import path from 'node:path';
+import http from 'node:http';
+/**
+ * Abstracts platform-specific shell commands for integration testing.
+ */
+const Platform = {
+    isWindows: os.platform() === 'win32',
+    /** Returns a command to create an empty file. */
+    touch(filePath) {
+        return this.isWindows
+            ? {
+                command: 'powershell.exe',
+                args: [
+                    '-NoProfile',
+                    '-Command',
+                    `New-Item -Path "${filePath}" -ItemType File -Force`,
+                ],
+            }
+            : { command: 'touch', args: [filePath] };
+    },
+    /** Returns a command to read a file's content. */
+    cat(filePath) {
+        return this.isWindows
+            ? { command: 'cmd.exe', args: ['/c', `type "${filePath}"`] }
+            : { command: 'cat', args: [filePath] };
+    },
+    /** Returns a command to echo a string. */
+    echo(text) {
+        return this.isWindows
+            ? { command: 'cmd.exe', args: ['/c', `echo ${text}`] }
+            : { command: 'echo', args: [text] };
+    },
+    /** Returns a command to perform a network request. */
+    curl(url) {
+        return { command: 'curl', args: ['-s', '--connect-timeout', '1', url] };
+    },
+    /** Returns a command that checks if the current terminal is interactive. */
+    isPty() {
+        return this.isWindows
+            ? 'powershell.exe -NoProfile -Command "echo True"'
+            : 'bash -c "if [ -t 1 ]; then echo True; else echo False; fi"';
+    },
+    /** Returns a path that is strictly outside the workspace and likely blocked. */
+    getExternalBlockedPath() {
+        return this.isWindows
+            ? 'C:\\Windows\\System32\\drivers\\etc\\hosts'
+            : '/Users/Shared/.gemini_test_blocked';
+    },
+};
+async function runCommand(command) {
+    try {
+        const { stdout, stderr } = await promisify(execFile)(command.program, command.args, {
+            cwd: command.cwd,
+            env: command.env,
+            encoding: 'utf-8',
+        });
+        return { status: 0, stdout, stderr };
+    }
+    catch (error) {
+        const err = error;
+        return {
+            status: err.code ?? 1,
+            stdout: err.stdout ?? '',
+            stderr: err.stderr ?? '',
+        };
+    }
+}
+/**
+ * Determines if the system has the necessary binaries to run the sandbox.
+ * Throws an error if a supported platform is missing its required tools.
+ */
+function ensureSandboxAvailable() {
+    const platform = os.platform();
+    if (platform === 'win32') {
+        // Windows sandboxing relies on icacls, which is a core system utility and
+        // always available.
+        // TODO: reenable once flakiness is addressed
+        return false;
+    }
+    if (platform === 'darwin') {
+        if (fs.existsSync('/usr/bin/sandbox-exec')) {
+            try {
+                execSync('sandbox-exec -p "(version 1)(allow default)" echo test', {
+                    stdio: 'ignore',
+                });
+                return true;
+            }
+            catch {
+                // eslint-disable-next-line no-console
+                console.warn('sandbox-exec is present but cannot be used (likely running inside a sandbox already). Skipping sandbox tests.');
+                return false;
+            }
+        }
+        throw new Error('Sandboxing tests on macOS require /usr/bin/sandbox-exec to be present.');
+    }
+    if (platform === 'linux') {
+        try {
+            execSync('which bwrap', { stdio: 'ignore' });
+            return true;
+        }
+        catch {
+            throw new Error('Sandboxing tests on Linux require bubblewrap (bwrap) to be installed.');
+        }
+    }
+    return false;
+}
+describe('SandboxManager Integration', () => {
+    const workspace = process.cwd();
+    const manager = createSandboxManager({ enabled: true }, { workspace });
+    // Skip if we are on an unsupported platform or if it's a NoopSandboxManager
+    const shouldSkip = manager instanceof NoopSandboxManager ||
+        manager instanceof LocalSandboxManager ||
+        !ensureSandboxAvailable();
+    describe.skipIf(shouldSkip)('Cross-platform Sandbox Behavior', () => {
+        describe('Basic Execution', () => {
+            it('executes commands within the workspace', async () => {
+                const { command, args } = Platform.echo('sandbox test');
+                const sandboxed = await manager.prepareCommand({
+                    command,
+                    args,
+                    cwd: workspace,
+                    env: process.env,
+                });
+                const result = await runCommand(sandboxed);
+                expect(result.status).toBe(0);
+                expect(result.stdout.trim()).toBe('sandbox test');
+            });
+            // The Windows sandbox wrapper (GeminiSandbox.exe) uses standard pipes
+            // for I/O interception, which breaks ConPTY pseudo-terminal inheritance.
+            it.skipIf(Platform.isWindows)('supports interactive pseudo-terminals (node-pty)', async () => {
+                const handle = await ShellExecutionService.execute(Platform.isPty(), workspace, () => { }, new AbortController().signal, true, {
+                    sanitizationConfig: getSecureSanitizationConfig(),
+                    sandboxManager: manager,
+                });
+                const result = await handle.result;
+                expect(result.exitCode).toBe(0);
+                expect(result.output).toContain('True');
+            });
+        });
+        describe('File System Access', () => {
+            it('blocks access outside the workspace', async () => {
+                const blockedPath = Platform.getExternalBlockedPath();
+                const { command, args } = Platform.touch(blockedPath);
+                const sandboxed = await manager.prepareCommand({
+                    command,
+                    args,
+                    cwd: workspace,
+                    env: process.env,
+                });
+                const result = await runCommand(sandboxed);
+                expect(result.status).not.toBe(0);
+            });
+            it('allows dynamic expansion of permissions after a failure', async () => {
+                const tempDir = fs.mkdtempSync(path.join(workspace, '..', 'expansion-'));
+                const testFile = path.join(tempDir, 'test.txt');
+                try {
+                    const { command, args } = Platform.touch(testFile);
+                    // First attempt: fails due to sandbox restrictions
+                    const sandboxed1 = await manager.prepareCommand({
+                        command,
+                        args,
+                        cwd: workspace,
+                        env: process.env,
+                    });
+                    const result1 = await runCommand(sandboxed1);
+                    expect(result1.status).not.toBe(0);
+                    expect(fs.existsSync(testFile)).toBe(false);
+                    // Second attempt: succeeds with additional permissions
+                    const sandboxed2 = await manager.prepareCommand({
+                        command,
+                        args,
+                        cwd: workspace,
+                        env: process.env,
+                        policy: { allowedPaths: [tempDir] },
+                    });
+                    const result2 = await runCommand(sandboxed2);
+                    expect(result2.status).toBe(0);
+                    expect(fs.existsSync(testFile)).toBe(true);
+                }
+                finally {
+                    if (fs.existsSync(testFile))
+                        fs.unlinkSync(testFile);
+                    fs.rmSync(tempDir, { recursive: true, force: true });
+                }
+            });
+            it('grants access to explicitly allowed paths', async () => {
+                const allowedDir = fs.mkdtempSync(path.join(workspace, '..', 'allowed-'));
+                const testFile = path.join(allowedDir, 'test.txt');
+                try {
+                    const { command, args } = Platform.touch(testFile);
+                    const sandboxed = await manager.prepareCommand({
+                        command,
+                        args,
+                        cwd: workspace,
+                        env: process.env,
+                        policy: { allowedPaths: [allowedDir] },
+                    });
+                    const result = await runCommand(sandboxed);
+                    expect(result.status).toBe(0);
+                    expect(fs.existsSync(testFile)).toBe(true);
+                }
+                finally {
+                    if (fs.existsSync(testFile))
+                        fs.unlinkSync(testFile);
+                    fs.rmSync(allowedDir, { recursive: true, force: true });
+                }
+            });
+            it('blocks access to forbidden paths within the workspace', async () => {
+                const tempWorkspace = fs.mkdtempSync(path.join(os.tmpdir(), 'workspace-'));
+                const forbiddenDir = path.join(tempWorkspace, 'forbidden');
+                const testFile = path.join(forbiddenDir, 'test.txt');
+                fs.mkdirSync(forbiddenDir);
+                try {
+                    const osManager = createSandboxManager({ enabled: true }, {
+                        workspace: tempWorkspace,
+                        forbiddenPaths: async () => [forbiddenDir],
+                    });
+                    const { command, args } = Platform.touch(testFile);
+                    const sandboxed = await osManager.prepareCommand({
+                        command,
+                        args,
+                        cwd: tempWorkspace,
+                        env: process.env,
+                    });
+                    const result = await runCommand(sandboxed);
+                    expect(result.status).not.toBe(0);
+                }
+                finally {
+                    fs.rmSync(tempWorkspace, { recursive: true, force: true });
+                }
+            });
+            it('blocks access to files inside forbidden directories recursively', async () => {
+                const tempWorkspace = fs.mkdtempSync(path.join(os.tmpdir(), 'workspace-'));
+                const forbiddenDir = path.join(tempWorkspace, 'forbidden');
+                const nestedDir = path.join(forbiddenDir, 'nested');
+                const nestedFile = path.join(nestedDir, 'test.txt');
+                fs.mkdirSync(nestedDir, { recursive: true });
+                fs.writeFileSync(nestedFile, 'secret');
+                try {
+                    const osManager = createSandboxManager({ enabled: true }, {
+                        workspace: tempWorkspace,
+                        forbiddenPaths: async () => [forbiddenDir],
+                    });
+                    const { command, args } = Platform.cat(nestedFile);
+                    const sandboxed = await osManager.prepareCommand({
+                        command,
+                        args,
+                        cwd: tempWorkspace,
+                        env: process.env,
+                    });
+                    const result = await runCommand(sandboxed);
+                    expect(result.status).not.toBe(0);
+                }
+                finally {
+                    fs.rmSync(tempWorkspace, { recursive: true, force: true });
+                }
+            });
+            it('prioritizes forbiddenPaths over allowedPaths', async () => {
+                const tempWorkspace = fs.mkdtempSync(path.join(os.tmpdir(), 'workspace-'));
+                const conflictDir = path.join(tempWorkspace, 'conflict');
+                const testFile = path.join(conflictDir, 'test.txt');
+                fs.mkdirSync(conflictDir);
+                try {
+                    const osManager = createSandboxManager({ enabled: true }, {
+                        workspace: tempWorkspace,
+                        forbiddenPaths: async () => [conflictDir],
+                    });
+                    const { command, args } = Platform.touch(testFile);
+                    const sandboxed = await osManager.prepareCommand({
+                        command,
+                        args,
+                        cwd: tempWorkspace,
+                        env: process.env,
+                        policy: {
+                            allowedPaths: [conflictDir],
+                        },
+                    });
+                    const result = await runCommand(sandboxed);
+                    expect(result.status).not.toBe(0);
+                }
+                finally {
+                    fs.rmSync(tempWorkspace, { recursive: true, force: true });
+                }
+            });
+            it('gracefully ignores non-existent paths in allowedPaths and forbiddenPaths', async () => {
+                const tempWorkspace = fs.mkdtempSync(path.join(os.tmpdir(), 'workspace-'));
+                const nonExistentPath = path.join(tempWorkspace, 'does-not-exist');
+                try {
+                    const osManager = createSandboxManager({ enabled: true }, {
+                        workspace: tempWorkspace,
+                        forbiddenPaths: async () => [nonExistentPath],
+                    });
+                    const { command, args } = Platform.echo('survived');
+                    const sandboxed = await osManager.prepareCommand({
+                        command,
+                        args,
+                        cwd: tempWorkspace,
+                        env: process.env,
+                        policy: {
+                            allowedPaths: [nonExistentPath],
+                        },
+                    });
+                    const result = await runCommand(sandboxed);
+                    expect(result.status).toBe(0);
+                    expect(result.stdout.trim()).toBe('survived');
+                }
+                finally {
+                    fs.rmSync(tempWorkspace, { recursive: true, force: true });
+                }
+            });
+            it('prevents creation of non-existent forbidden paths', async () => {
+                // Windows icacls cannot explicitly protect paths that have not yet been created.
+                if (Platform.isWindows)
+                    return;
+                const tempWorkspace = fs.mkdtempSync(path.join(os.tmpdir(), 'workspace-'));
+                const nonExistentFile = path.join(tempWorkspace, 'never-created.txt');
+                try {
+                    const osManager = createSandboxManager({ enabled: true }, {
+                        workspace: tempWorkspace,
+                        forbiddenPaths: async () => [nonExistentFile],
+                    });
+                    // We use touch to attempt creation of the file
+                    const { command: cmdTouch, args: argsTouch } = Platform.touch(nonExistentFile);
+                    const sandboxedCmd = await osManager.prepareCommand({
+                        command: cmdTouch,
+                        args: argsTouch,
+                        cwd: tempWorkspace,
+                        env: process.env,
+                    });
+                    // Execute the command, we expect it to fail (permission denied or read-only file system)
+                    const result = await runCommand(sandboxedCmd);
+                    expect(result.status).not.toBe(0);
+                    expect(fs.existsSync(nonExistentFile)).toBe(false);
+                }
+                finally {
+                    fs.rmSync(tempWorkspace, { recursive: true, force: true });
+                }
+            });
+            it('blocks access to both a symlink and its target when the symlink is forbidden', async () => {
+                if (Platform.isWindows)
+                    return;
+                const tempWorkspace = fs.mkdtempSync(path.join(os.tmpdir(), 'workspace-'));
+                const targetFile = path.join(tempWorkspace, 'target.txt');
+                const symlinkFile = path.join(tempWorkspace, 'link.txt');
+                fs.writeFileSync(targetFile, 'secret data');
+                fs.symlinkSync(targetFile, symlinkFile);
+                try {
+                    const osManager = createSandboxManager({ enabled: true }, {
+                        workspace: tempWorkspace,
+                        forbiddenPaths: async () => [symlinkFile],
+                    });
+                    // Attempt to read the target file directly
+                    const { command: cmdTarget, args: argsTarget } = Platform.cat(targetFile);
+                    const commandTarget = await osManager.prepareCommand({
+                        command: cmdTarget,
+                        args: argsTarget,
+                        cwd: tempWorkspace,
+                        env: process.env,
+                    });
+                    const resultTarget = await runCommand(commandTarget);
+                    expect(resultTarget.status).not.toBe(0);
+                    // Attempt to read via the symlink
+                    const { command: cmdLink, args: argsLink } = Platform.cat(symlinkFile);
+                    const commandLink = await osManager.prepareCommand({
+                        command: cmdLink,
+                        args: argsLink,
+                        cwd: tempWorkspace,
+                        env: process.env,
+                    });
+                    const resultLink = await runCommand(commandLink);
+                    expect(resultLink.status).not.toBe(0);
+                }
+                finally {
+                    fs.rmSync(tempWorkspace, { recursive: true, force: true });
+                }
+            });
+        });
+        describe('Network Access', () => {
+            let server;
+            let url;
+            beforeAll(async () => {
+                server = http.createServer((_, res) => {
+                    res.setHeader('Connection', 'close');
+                    res.writeHead(200);
+                    res.end('ok');
+                });
+                await new Promise((resolve, reject) => {
+                    server.on('error', reject);
+                    server.listen(0, '127.0.0.1', () => {
+                        const addr = server.address();
+                        url = `http://127.0.0.1:${addr.port}`;
+                        resolve();
+                    });
+                });
+            });
+            afterAll(async () => {
+                if (server)
+                    await new Promise((res) => server.close(() => res()));
+            });
+            // Windows Job Object rate limits exempt loopback (127.0.0.1) traffic,
+            // so this test cannot verify loopback blocking on Windows.
+            it.skipIf(Platform.isWindows)('blocks network access by default', async () => {
+                const { command, args } = Platform.curl(url);
+                const sandboxed = await manager.prepareCommand({
+                    command,
+                    args,
+                    cwd: workspace,
+                    env: process.env,
+                });
+                const result = await runCommand(sandboxed);
+                expect(result.status).not.toBe(0);
+            });
+            it('grants network access when explicitly allowed', async () => {
+                const { command, args } = Platform.curl(url);
+                const sandboxed = await manager.prepareCommand({
+                    command,
+                    args,
+                    cwd: workspace,
+                    env: process.env,
+                    policy: { networkAccess: true },
+                });
+                const result = await runCommand(sandboxed);
+                expect(result.status).toBe(0);
+                if (!Platform.isWindows) {
+                    expect(result.stdout.trim()).toBe('ok');
+                }
+            });
+        });
+    });
+});
+//# sourceMappingURL=sandboxManager.integration.test.js.map

package/dist/src/services/sandboxManager.integration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxManager.integration.test.js","sourceRoot":"","sources":["../../../src/services/sandboxManager.integration.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAEL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;GAEG;AACH,MAAM,QAAQ,GAAG;IACf,SAAS,EAAE,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO;IAEpC,iDAAiD;IACjD,KAAK,CAAC,QAAgB;QACpB,OAAO,IAAI,CAAC,SAAS;YACnB,CAAC,CAAC;gBACE,OAAO,EAAE,gBAAgB;gBACzB,IAAI,EAAE;oBACJ,YAAY;oBACZ,UAAU;oBACV,mBAAmB,QAAQ,yBAAyB;iBACrD;aACF;YACH,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC7C,CAAC;IAED,kDAAkD;IAClD,GAAG,CAAC,QAAgB;QAClB,OAAO,IAAI,CAAC,SAAS;YACnB,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,QAAQ,GAAG,CAAC,EAAE;YAC5D,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3C,CAAC;IAED,0CAA0C;IAC1C,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,SAAS;YACnB,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE;YACtD,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;IACxC,CAAC;IAED,sDAAsD;IACtD,IAAI,CAAC,GAAW;QACd,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;IAC1E,CAAC;IAED,4EAA4E;IAC5E,KAAK;QACH,OAAO,IAAI,CAAC,SAAS;YACnB,CAAC,CAAC,gDAAgD;YAClD,CAAC,CAAC,4DAA4D,CAAC;IACnE,CAAC;IAED,gFAAgF;IAChF,sBAAsB;QACpB,OAAO,IAAI,CAAC,SAAS;YACnB,CAAC,CAAC,4CAA4C;YAC9C,CAAC,CAAC,oCAAoC,CAAC;IAC3C,CAAC;CACF,CAAC;AAEF,KAAK,UAAU,UAAU,CAAC,OAAyB;IACjD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAClD,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,IAAI,EACZ;YACE,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,OAAO;SAClB,CACF,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAA4D,CAAC;QACzE,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC;YACrB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;SACzB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB;IAC7B,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAE/B,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,0EAA0E;QAC1E,oBAAoB;QACpB,6CAA6C;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,QAAQ,CAAC,wDAAwD,EAAE;oBACjE,KAAK,EAAE,QAAQ;iBAChB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,sCAAsC;gBACtC,OAAO,CAAC,IAAI,CACV,+GAA+G,CAChH,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,QAAQ,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,oBAAoB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAEvE,4EAA4E;IAC5E,MAAM,UAAU,GACd,OAAO,YAAY,kBAAkB;QACrC,OAAO,YAAY,mBAAmB;QACtC,CAAC,sBAAsB,EAAE,CAAC;IAE5B,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,iCAAiC,EAAE,GAAG,EAAE;QAClE,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;YAC/B,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;gBACtD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBACxD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;oBAC7C,OAAO;oBACP,IAAI;oBACJ,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,OAAO,CAAC,GAAG;iBACjB,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC;YAEH,sEAAsE;YACtE,yEAAyE;YACzE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC3B,kDAAkD,EAClD,KAAK,IAAI,EAAE;gBACT,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAChD,QAAQ,CAAC,KAAK,EAAE,EAChB,SAAS,EACT,GAAG,EAAE,GAAE,CAAC,EACR,IAAI,eAAe,EAAE,CAAC,MAAM,EAC5B,IAAI,EACJ;oBACE,kBAAkB,EAAE,2BAA2B,EAAE;oBACjD,cAAc,EAAE,OAAO;iBACxB,CACF,CAAC;gBAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;gBACnC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;YAClC,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;gBACnD,MAAM,WAAW,GAAG,QAAQ,CAAC,sBAAsB,EAAE,CAAC;gBACtD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAEtD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;oBAC7C,OAAO;oBACP,IAAI;oBACJ,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,OAAO,CAAC,GAAG;iBACjB,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;gBACvE,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAC5B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,CACzC,CAAC;gBACF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBAEhD,IAAI,CAAC;oBACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBAEnD,mDAAmD;oBACnD,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;wBAC9C,OAAO;wBACP,IAAI;wBACJ,GAAG,EAAE,SAAS;wBACd,GAAG,EAAE,OAAO,CAAC,GAAG;qBACjB,CAAC,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;oBAC7C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACnC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAE5C,uDAAuD;oBACvD,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;wBAC9C,OAAO;wBACP,IAAI;wBACJ,GAAG,EAAE,SAAS;wBACd,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,OAAO,CAAC,EAAE;qBACpC,CAAC,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;oBAC7C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC/B,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7C,CAAC;wBAAS,CAAC;oBACT,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;wBAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACrD,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;gBACzD,MAAM,UAAU,GAAG,EAAE,CAAC,WAAW,CAC/B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,CACvC,CAAC;gBACF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;gBAEnD,IAAI,CAAC;oBACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBACnD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;wBAC7C,OAAO;wBACP,IAAI;wBACJ,GAAG,EAAE,SAAS;wBACd,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,UAAU,CAAC,EAAE;qBACvC,CAAC,CAAC;oBAEH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;oBAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC9B,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7C,CAAC;wBAAS,CAAC;oBACT,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;wBAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACrD,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;gBACrE,MAAM,aAAa,GAAG,EAAE,CAAC,WAAW,CAClC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CACrC,CAAC;gBACF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;gBAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;gBACrD,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;gBAE3B,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,oBAAoB,CACpC,EAAE,OAAO,EAAE,IAAI,EAAE,EACjB;wBACE,SAAS,EAAE,aAAa;wBACxB,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC;qBAC3C,CACF,CAAC;oBACF,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBAEnD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC;wBAC/C,OAAO;wBACP,IAAI;wBACJ,GAAG,EAAE,aAAa;wBAClB,GAAG,EAAE,OAAO,CAAC,GAAG;qBACjB,CAAC,CAAC;oBAEH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;oBAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACpC,CAAC;wBAAS,CAAC;oBACT,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;gBAC/E,MAAM,aAAa,GAAG,EAAE,CAAC,WAAW,CAClC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CACrC,CAAC;gBACF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;gBAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;gBACpD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;gBAEpD,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7C,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBAEvC,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,oBAAoB,CACpC,EAAE,OAAO,EAAE,IAAI,EAAE,EACjB;wBACE,SAAS,EAAE,aAAa;wBACxB,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC;qBAC3C,CACF,CAAC;oBACF,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAEnD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC;wBAC/C,OAAO;wBACP,IAAI;wBACJ,GAAG,EAAE,aAAa;wBAClB,GAAG,EAAE,OAAO,CAAC,GAAG;qBACjB,CAAC,CAAC;oBAEH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;oBAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACpC,CAAC;wBAAS,CAAC;oBACT,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;gBAC5D,MAAM,aAAa,GAAG,EAAE,CAAC,WAAW,CAClC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CACrC,CAAC;gBACF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;gBACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;gBACpD,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;gBAE1B,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,oBAAoB,CACpC,EAAE,OAAO,EAAE,IAAI,EAAE,EACjB;wBACE,SAAS,EAAE,aAAa;wBACxB,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC;qBAC1C,CACF,CAAC;oBACF,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBAEnD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC;wBAC/C,OAAO;wBACP,IAAI;wBACJ,GAAG,EAAE,aAAa;wBAClB,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,MAAM,EAAE;4BACN,YAAY,EAAE,CAAC,WAAW,CAAC;yBAC5B;qBACF,CAAC,CAAC;oBAEH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;oBAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACpC,CAAC;wBAAS,CAAC;oBACT,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;gBACxF,MAAM,aAAa,GAAG,EAAE,CAAC,WAAW,CAClC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CACrC,CAAC;gBACF,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;gBAEnE,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,oBAAoB,CACpC,EAAE,OAAO,EAAE,IAAI,EAAE,EACjB;wBACE,SAAS,EAAE,aAAa;wBACxB,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,eAAe,CAAC;qBAC9C,CACF,CAAC;oBACF,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACpD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC;wBAC/C,OAAO;wBACP,IAAI;wBACJ,GAAG,EAAE,aAAa;wBAClB,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,MAAM,EAAE;4BACN,YAAY,EAAE,CAAC,eAAe,CAAC;yBAChC;qBACF,CAAC,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;oBAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAChD,CAAC;wBAAS,CAAC;oBACT,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;gBACjE,iFAAiF;gBACjF,IAAI,QAAQ,CAAC,SAAS;oBAAE,OAAO;gBAE/B,MAAM,aAAa,GAAG,EAAE,CAAC,WAAW,CAClC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CACrC,CAAC;gBACF,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;gBAEtE,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,oBAAoB,CACpC,EAAE,OAAO,EAAE,IAAI,EAAE,EACjB;wBACE,SAAS,EAAE,aAAa;wBACxB,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,eAAe,CAAC;qBAC9C,CACF,CAAC;oBAEF,+CAA+C;oBAC/C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,GAC1C,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;oBAElC,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC;wBAClD,OAAO,EAAE,QAAQ;wBACjB,IAAI,EAAE,SAAS;wBACf,GAAG,EAAE,aAAa;wBAClB,GAAG,EAAE,OAAO,CAAC,GAAG;qBACjB,CAAC,CAAC;oBAEH,yFAAyF;oBACzF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC;oBAE9C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrD,CAAC;wBAAS,CAAC;oBACT,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;gBAC5F,IAAI,QAAQ,CAAC,SAAS;oBAAE,OAAO;gBAE/B,MAAM,aAAa,GAAG,EAAE,CAAC,WAAW,CAClC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CACrC,CAAC;gBACF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;gBAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;gBAEzD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;gBAC5C,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBAExC,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,oBAAoB,CACpC,EAAE,OAAO,EAAE,IAAI,EAAE,EACjB;wBACE,SAAS,EAAE,aAAa;wBACxB,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC;qBAC1C,CACF,CAAC;oBAEF,2CAA2C;oBAC3C,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,GAC5C,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAC3B,MAAM,aAAa,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC;wBACnD,OAAO,EAAE,SAAS;wBAClB,IAAI,EAAE,UAAU;wBAChB,GAAG,EAAE,aAAa;wBAClB,GAAG,EAAE,OAAO,CAAC,GAAG;qBACjB,CAAC,CAAC;oBACH,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC;oBACrD,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAExC,kCAAkC;oBAClC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GACxC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBAC5B,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC;wBACjD,OAAO,EAAE,OAAO;wBAChB,IAAI,EAAE,QAAQ;wBACd,GAAG,EAAE,aAAa;wBAClB,GAAG,EAAE,OAAO,CAAC,GAAG;qBACjB,CAAC,CAAC;oBACH,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;oBACjD,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACxC,CAAC;wBAAS,CAAC;oBACT,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;YAC9B,IAAI,MAAmB,CAAC;YACxB,IAAI,GAAW,CAAC;YAEhB,SAAS,CAAC,KAAK,IAAI,EAAE;gBACnB,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;oBACpC,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;oBACrC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChB,CAAC,CAAC,CAAC;gBACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC1C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;wBACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAA+B,CAAC;wBAC3D,GAAG,GAAG,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC;wBACtC,OAAO,EAAE,CAAC;oBACZ,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;gBAClB,IAAI,MAAM;oBAAE,MAAM,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1E,CAAC,CAAC,CAAC;YAEH,sEAAsE;YACtE,2DAA2D;YAC3D,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC3B,kCAAkC,EAClC,KAAK,IAAI,EAAE;gBACT,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC7C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;oBAC7C,OAAO;oBACP,IAAI;oBACJ,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,OAAO,CAAC,GAAG;iBACjB,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpC,CAAC,CACF,CAAC;YAEF,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;gBAC7D,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC7C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;oBAC7C,OAAO;oBACP,IAAI;oBACJ,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;iBAChC,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC9B,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;oBACxB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}