@maudecode/talaria-web 0.0.0

package/contract_versions.json

@@ -0,0 +1,18 @@
+{
+  "schemaVersion": 1,
+  "appWeb": {
+    "fixtureVersion": 1,
+    "transport": "HTTP+SSE"
+  },
+  "webRelay": {
+    "protocolVersion": 2,
+    "httpPrefix": "/v1"
+  },
+  "appRelay": {
+    "httpPrefix": "/v1",
+    "aggregateSchemaVersion": 1
+  },
+  "activityScene": {
+    "version": "activity_scene_v1"
+  }
+}

package/dist/api/auth-raw.d.ts

@@ -0,0 +1,9 @@
+import type { RequestContext } from '../http/context.js';
+/** Python `_validated_request_host`: a bare `host[:port]` with no userinfo, path, or stray separators. */
+export declare function validatedRequestHost(raw: string | undefined): string | null;
+/** Python `_effective_request_host`: forwarded hosts count only with `HERMES_WEBUI_TRUST_FORWARDED_HOST` and when they agree. */
+export declare function effectiveRequestHost(ctx: RequestContext): string;
+/** Python `_request_base_url`: the configured OIDC origin wins, else scheme + effective host. */
+export declare function requestBaseUrl(ctx: RequestContext): string;
+export declare function handleOidcStart(ctx: RequestContext): Promise<void>;
+export declare function handleOidcCallback(ctx: RequestContext): Promise<void>;

package/dist/api/auth-raw.js

@@ -0,0 +1,134 @@
+/**
+ * Browser OIDC redirects (Python `/api/auth/oidc/start` and `/callback`):
+ * 302 responses with `Cache-Control: no-store`, outside oRPC because they
+ * set cookies and never answer JSON on success.
+ */
+import { truthy } from '../config.js';
+import { normalizeHostPort } from '../http/origin.js';
+import { buildProfileCookie, safeLoginRedirectPath } from '../auth/gate.js';
+import { OidcAuthError, OidcConfigError } from '../auth/oidc.js';
+/** Python `_validated_request_host`: a bare `host[:port]` with no userinfo, path, or stray separators. */
+export function validatedRequestHost(raw) {
+    const value = (raw ?? '').trim();
+    if (!value || /[\s/\\?#,@%]/.test(value))
+        return null;
+    let url;
+    try {
+        url = new URL(`http://${value}`);
+    }
+    catch {
+        return null;
+    }
+    if (!url.hostname || url.username || url.password || url.pathname !== '/' || url.search || url.hash || value.endsWith(':'))
+        return null;
+    const [host, port] = normalizeHostPort(value);
+    if (!host)
+        return null;
+    return port ? `${host}:${port}` : host;
+}
+/** Python `_effective_request_host`: forwarded hosts count only with `HERMES_WEBUI_TRUST_FORWARDED_HOST` and when they agree. */
+export function effectiveRequestHost(ctx) {
+    const direct = validatedRequestHost(ctx.header('host')) ?? '127.0.0.1:8787';
+    if (!truthy(ctx.deps.config.env.HERMES_WEBUI_TRUST_FORWARDED_HOST))
+        return direct;
+    const forwarded = [ctx.header('x-forwarded-host'), ctx.header('x-real-host')].map((v) => (v ?? '').trim()).filter(Boolean);
+    if (!forwarded.length)
+        return direct;
+    const normalized = forwarded.map(validatedRequestHost);
+    if (normalized.some((v) => v === null) || new Set(normalized).size !== 1)
+        return direct;
+    return normalized[0] ?? direct;
+}
+/** Python `_request_base_url`: the configured OIDC origin wins, else scheme + effective host. */
+export function requestBaseUrl(ctx) {
+    const configured = ctx.deps.oidc.configuredOrigin();
+    if (configured)
+        return configured;
+    return `${ctx.isSecureContext() ? 'https' : 'http'}://${effectiveRequestHost(ctx)}`;
+}
+function redirectNoStore(ctx, location) {
+    ctx.redirect(location, { headers: { 'Cache-Control': 'no-store', 'Content-Length': '0' } });
+}
+/** Python answered OIDC failures through `j()`: security headers, `application/json; charset=utf-8`, `no-store`. */
+function oidcFailure(ctx, error) {
+    if (error instanceof OidcConfigError)
+        ctx.json({ error: error.message }, { status: 404 });
+    else if (error instanceof OidcAuthError)
+        ctx.json({ error: error.message }, { status: error.status });
+    else
+        throw error;
+}
+export async function handleOidcStart(ctx) {
+    ctx.requestProfile = null;
+    const nextPath = safeLoginRedirectPath(ctx.query.get('next'));
+    const nativeFlowId = (ctx.query.get('native_flow') ?? '').trim() || null;
+    let location;
+    try {
+        location = await ctx.deps.oidc.authorizationRedirect(requestBaseUrl(ctx), nextPath, nativeFlowId);
+    }
+    catch (error) {
+        oidcFailure(ctx, error);
+        return;
+    }
+    redirectNoStore(ctx, location);
+}
+export async function handleOidcCallback(ctx) {
+    ctx.requestProfile = null;
+    const { oidc, auth } = ctx.deps;
+    const query = ctx.query;
+    const state = (query.get('state') ?? '').trim();
+    const providerError = (query.get('error') ?? '').trim();
+    const base = requestBaseUrl(ctx);
+    if (providerError) {
+        const nativeFlowId = oidc.consumeFailedProviderAuthorization(state);
+        if (nativeFlowId) {
+            try {
+                redirectNoStore(ctx, oidc.failNative(base, nativeFlowId, 'provider_error'));
+            }
+            catch (error) {
+                oidcFailure(ctx, error);
+            }
+            return;
+        }
+        const description = (query.get('error_description') ?? '').trim();
+        ctx.rawJson(401, { error: description || providerError });
+        return;
+    }
+    const code = (query.get('code') ?? '').trim();
+    if (!state || !code) {
+        ctx.rawJson(400, { error: 'Missing OIDC callback state or code' });
+        return;
+    }
+    let result;
+    try {
+        result = await oidc.completeCodeFlow(base, state, code);
+    }
+    catch (error) {
+        const nativeFlowId = (error instanceof OidcConfigError || error instanceof OidcAuthError) ? error.nativeFlowId : null;
+        if (nativeFlowId) {
+            try {
+                redirectNoStore(ctx, oidc.failNative(base, nativeFlowId, 'authentication_failed'));
+                return;
+            }
+            catch { /* fall through to the JSON error */ }
+        }
+        oidcFailure(ctx, error);
+        return;
+    }
+    if (result.native_flow_id) {
+        try {
+            redirectNoStore(ctx, oidc.finishNative(base, result.native_flow_id, result));
+        }
+        catch (error) {
+            oidcFailure(ctx, error);
+        }
+        return;
+    }
+    const username = (result.email || result.subject).trim();
+    const cookieVal = auth.createSession({ authType: 'oidc', username, boundProfile: result.bound_profile, oidcBinding: result.oidc_binding });
+    ctx.queueCookie(ctx.authCookieHeader(cookieVal));
+    if (result.bound_profile)
+        ctx.queueCookie(await buildProfileCookie(ctx, result.bound_profile, cookieVal));
+    redirectNoStore(ctx, safeLoginRedirectPath(result.next_path));
+}
+//# sourceMappingURL=auth-raw.js.map

package/dist/api/auth-raw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-raw.js","sourceRoot":"","sources":["../../src/api/auth-raw.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAErC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAC3E,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEhE,0GAA0G;AAC1G,MAAM,UAAU,oBAAoB,CAAC,GAAuB;IAC1D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAChC,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACrD,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,KAAK,EAAE,CAAC,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACvI,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAC7C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AACxC,CAAC;AAED,iIAAiI;AACjI,MAAM,UAAU,oBAAoB,CAAC,GAAmB;IACtD,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,gBAAgB,CAAA;IAC3E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iCAAiC,CAAC;QAAE,OAAO,MAAM,CAAA;IACjF,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC1H,IAAI,CAAC,SAAS,CAAC,MAAM;QAAE,OAAO,MAAM,CAAA;IACpC,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;IACtD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IACvF,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,MAAM,CAAA;AAChC,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,cAAc,CAAC,GAAmB;IAChD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAA;IACnD,IAAI,UAAU;QAAE,OAAO,UAAU,CAAA;IACjC,OAAO,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAA;AACrF,CAAC;AAED,SAAS,eAAe,CAAC,GAAmB,EAAE,QAAgB;IAC5D,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;AAC7F,CAAC;AAED,oHAAoH;AACpH,SAAS,WAAW,CAAC,GAAmB,EAAE,KAAc;IACtD,IAAI,KAAK,YAAY,eAAe;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;SACpF,IAAI,KAAK,YAAY,aAAa;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;;QAChG,MAAM,KAAK,CAAA;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAmB;IACvD,GAAG,CAAC,cAAc,GAAG,IAAI,CAAA;IACzB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7D,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAA;IACxE,IAAI,QAAgB,CAAA;IACpB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAA;IACnG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACvB,OAAM;IACR,CAAC;IACD,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAmB;IAC1D,GAAG,CAAC,cAAc,GAAG,IAAI,CAAA;IACzB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,CAAA;IAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAA;IACvB,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAC/C,MAAM,aAAa,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACvD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,YAAY,GAAG,IAAI,CAAC,kCAAkC,CAAC,KAAK,CAAC,CAAA;QACnE,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAA;YAC7E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACzB,CAAC;YACD,OAAM;QACR,CAAC;QACD,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACjE,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,IAAI,aAAa,EAAE,CAAC,CAAA;QACzD,OAAM;IACR,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAC7C,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAA;QAClE,OAAM;IACR,CAAC;IACD,IAAI,MAAyD,CAAA;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,CAAC,KAAK,YAAY,eAAe,IAAI,KAAK,YAAY,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAA;QACrH,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,uBAAuB,CAAC,CAAC,CAAA;gBAClF,OAAM;YACR,CAAC;YAAC,MAAM,CAAC,CAAC,oCAAoC,CAAC,CAAC;QAClD,CAAC;QACD,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACvB,OAAM;IACR,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAA;QAC9E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACzB,CAAC;QACD,OAAM;IACR,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAA;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,aAAa,EAAE,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAA;IAC1I,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAA;IAChD,IAAI,MAAM,CAAC,aAAa;QAAE,GAAG,CAAC,WAAW,CAAC,MAAM,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAA;IACzG,eAAe,CAAC,GAAG,EAAE,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;AAC/D,CAAC"}

package/dist/api/automation-raw.d.ts

@@ -0,0 +1,16 @@
+/** Kanban event stream, terminal output stream, extension static files, and the extension sidecar proxy (raw handlers). */
+import type { RequestContext } from '../http/context.js';
+/** Python `_handle_events_sse_stream`: `hello`, then `events` batches with `id: <cursor>`, 1 s poll, 15 s keepalive. */
+export declare function handleKanbanEventsStream(ctx: RequestContext): Promise<void>;
+/** Python `_handle_terminal_output`: backlog replay after `Last-Event-ID`, integer ids, 5 s heartbeat, close on `terminal_closed`/`terminal_error`. */
+export declare function handleTerminalOutput(ctx: RequestContext): Promise<void>;
+/** `/extensions/*`: always 200 or a bare 404 (Python `serve_extension_static`). */
+export declare function handleExtensionStatic(ctx: RequestContext): void;
+/**
+ * Python `_project_runner_event_payload`: runner events relay session snapshots (`session.messages`) or bare
+ * message-shaped payloads (`messages`) to the browser; provider sidecars and row-id aliases never leave the server.
+ */
+export declare function projectRunnerEventPayload<T>(payload: T): T;
+export declare function matchSidecarProxy(path: string): [string, string] | null;
+/** Python `_handle_extension_sidecar_proxy`: same-origin browser provenance on every method, header stripping, 10 s, 512 KiB. */
+export declare function handleExtensionSidecarProxy(ctx: RequestContext, extensionId: string, proxyPath: string): Promise<void>;

package/dist/api/automation-raw.js

@@ -0,0 +1,340 @@
+import { HttpError } from './router.js';
+import { activeProfileName } from '../auth/gate.js';
+import { claimOrReject, SSE_HEARTBEAT_INTERVAL_MS } from './sse-routes.js';
+import { ExtensionError, EXTENSION_PANEL_SANDBOX_CSP, EXTENSION_ROUTE_PREFIX, normalizeProxyPath, validId } from '../tools/extensions.js';
+import { kanbanFailure } from '../tools/kanban.js';
+import { HttpFailure } from '../sessions/service.js';
+import { terminalGate } from './automation-router.js';
+import { checkSameOriginBrowserRequest, csrfRejectionError } from '../http/origin.js';
+import { str } from '../util.js';
+import { readCapped } from '../http/capped.js';
+import { stripPublicInternalFields } from '../redact.js';
+const KANBAN_POLL_MS = 1_000;
+const KANBAN_HEARTBEAT_MS = 15_000;
+const PROXY_MAX_RESPONSE = 512 * 1024;
+const PROXY_MAX_REDIRECTS = 10;
+const PROXY_RE = /^\/api\/extensions\/([^/]+)\/sidecar(?:\/(.*))?$/;
+const HOP_BY_HOP = new Set(['connection', 'keep-alive', 'proxy-authenticate', 'proxy-authorization', 'te', 'trailer', 'transfer-encoding', 'upgrade']);
+const sleep = (ms, signal) => new Promise((resolve) => {
+    if (signal.aborted) {
+        resolve();
+        return;
+    }
+    const t = setTimeout(() => { signal.removeEventListener('abort', onAbort); resolve(); }, ms);
+    const onAbort = () => { clearTimeout(t); resolve(); };
+    signal.addEventListener('abort', onAbort, { once: true });
+});
+/** Python `_handle_events_sse_stream`: `hello`, then `events` batches with `id: <cursor>`, 1 s poll, 15 s keepalive. */
+export async function handleKanbanEventsStream(ctx) {
+    const board = str(ctx.query.get('board')).trim() || null;
+    const sinceRaw = ctx.query.get('since') ?? ctx.header('last-event-id') ?? null;
+    let cursor = sinceRaw === null ? 0 : Number.parseInt(sinceRaw, 10);
+    if (!Number.isFinite(cursor) || cursor < 0)
+        cursor = 0;
+    const home = ctx.deps.profileHome(activeProfileName(ctx));
+    // Python `_resolve_board` normalised the slug before the `hello` frame carried it.
+    let helloBoard = board;
+    if (board) {
+        try {
+            helloBoard = (await ctx.deps.kanban.sidecar().call('kanban.normalize_board', { profile_home: home, board })).board;
+        }
+        catch (error) {
+            try {
+                kanbanFailure(error);
+            }
+            catch (mapped) {
+                if (mapped instanceof HttpFailure) {
+                    ctx.json({ error: mapped.message }, { status: mapped.status });
+                    return;
+                }
+            }
+            throw error;
+        }
+    }
+    const sse = claimOrReject(ctx, true);
+    if (!sse)
+        return;
+    const abort = new AbortController();
+    ctx.res.on('close', () => { abort.abort(); });
+    try {
+        sse.start();
+        sse.event('hello', { cursor, board: helloBoard });
+        let lastWrite = Date.now();
+        while (!sse.isClosed && !abort.signal.aborted) {
+            let events = [];
+            try {
+                const page = await ctx.deps.kanban.events(home, board, cursor, 200);
+                events = Array.isArray(page.events) ? page.events : [];
+                if (events.length)
+                    cursor = Number(page.cursor) || cursor;
+            }
+            catch {
+                events = [];
+            }
+            if (sse.isClosed)
+                return;
+            if (events.length) {
+                sse.event('events', { events: events.map((e) => projectRunnerEventPayload(e)), cursor }, String(cursor));
+                lastWrite = Date.now();
+            }
+            else if (Date.now() - lastWrite >= KANBAN_HEARTBEAT_MS) {
+                sse.comment('keepalive');
+                lastWrite = Date.now();
+            }
+            await sleep(KANBAN_POLL_MS, abort.signal);
+        }
+    }
+    finally {
+        sse.end();
+    }
+}
+/** Python `_handle_terminal_output`: backlog replay after `Last-Event-ID`, integer ids, 5 s heartbeat, close on `terminal_closed`/`terminal_error`. */
+export async function handleTerminalOutput(ctx) {
+    try {
+        await terminalGate(ctx);
+    }
+    catch (error) {
+        if (error instanceof HttpError) {
+            ctx.json({ error: error.message }, { status: error.status });
+            return;
+        }
+        throw error;
+    }
+    const sid = str(ctx.query.get('session_id')).trim();
+    if (!sid) {
+        ctx.json({ error: 'session_id required' }, { status: 400 });
+        return;
+    }
+    let session;
+    try {
+        session = ctx.deps.sessionStore.get(sid, { metadataOnly: true });
+    }
+    catch {
+        ctx.json({ error: 'Session not found' }, { status: 404 });
+        return;
+    }
+    if (!ctx.deps.workspaces.profileSupportsLocalIo(session.profile)) {
+        ctx.json({ error: 'remote_terminal_backend_unsupported', message: 'Embedded terminal is only supported for local terminal backends.' }, { status: 400 });
+        return;
+    }
+    const term = ctx.deps.terminals.get(sid);
+    if (!term) {
+        ctx.json({ error: 'terminal not running' }, { status: 404 });
+        return;
+    }
+    const lastId = (ctx.header('last-event-id') ?? '').trim();
+    const afterSeq = lastId && /^\d+$/.test(lastId) ? Math.max(0, Number.parseInt(lastId, 10)) : null;
+    const sse = claimOrReject(ctx, true);
+    if (!sse)
+        return;
+    const queue = [];
+    let wake = null;
+    const unsubscribe = term.subscribe(afterSeq, (item) => { queue.push(item); wake?.(); });
+    const abort = new AbortController();
+    ctx.res.on('close', () => { abort.abort(); wake?.(); });
+    try {
+        sse.start();
+        let lastWrite = Date.now();
+        while (!sse.isClosed && !abort.signal.aborted) {
+            const item = queue.shift();
+            if (item) {
+                sse.event(item.event, item.data, String(item.seq));
+                lastWrite = Date.now();
+                if (item.event === 'terminal_closed' || item.event === 'terminal_error')
+                    return;
+                continue;
+            }
+            if (term.closed) {
+                sse.event('terminal_closed', { exit_code: term.exitCode });
+                return;
+            }
+            const remaining = SSE_HEARTBEAT_INTERVAL_MS - (Date.now() - lastWrite);
+            if (remaining <= 0) {
+                sse.comment('terminal heartbeat');
+                lastWrite = Date.now();
+                continue;
+            }
+            await new Promise((resolve) => {
+                const onAbort = () => { clearTimeout(t); finish(); };
+                const finish = () => { abort.signal.removeEventListener('abort', onAbort); resolve(); };
+                const t = setTimeout(finish, remaining);
+                wake = () => { clearTimeout(t); finish(); };
+                abort.signal.addEventListener('abort', onAbort, { once: true });
+            });
+            wake = null;
+        }
+    }
+    finally {
+        unsubscribe();
+        sse.end();
+    }
+}
+/** `/extensions/*`: always 200 or a bare 404 (Python `serve_extension_static`). */
+export function handleExtensionStatic(ctx) {
+    // Python `unquote` runs once on the request path.
+    let rel;
+    try {
+        rel = decodeURIComponent(ctx.path.slice(EXTENSION_ROUTE_PREFIX.length));
+    }
+    catch {
+        ctx.json({ error: 'not found' }, { status: 404 });
+        return;
+    }
+    const file = ctx.deps.extensions.staticFile(rel);
+    if (!file) {
+        ctx.json({ error: 'not found' }, { status: 404 });
+        return;
+    }
+    const headers = { 'Content-Type': file.contentType, 'Cache-Control': 'no-store' };
+    if (file.html) {
+        // HWEB-100: the page policy stays and a second CSP header adds the sandbox, so a panel opened directly is isolated.
+        const page = ctx.securityHeaders()['Content-Security-Policy'];
+        headers['Content-Security-Policy'] = [...(typeof page === 'string' ? [page] : Array.isArray(page) ? page : []), EXTENSION_PANEL_SANDBOX_CSP];
+        headers['X-Frame-Options'] = 'SAMEORIGIN';
+    }
+    ctx.send({ status: 200, headers, body: file.body, security: true });
+}
+/**
+ * Python `_project_runner_event_payload`: runner events relay session snapshots (`session.messages`) or bare
+ * message-shaped payloads (`messages`) to the browser; provider sidecars and row-id aliases never leave the server.
+ */
+export function projectRunnerEventPayload(payload) {
+    if (!payload || typeof payload !== 'object' || Array.isArray(payload))
+        return payload;
+    const out = { ...payload };
+    const session = out.session;
+    if (session && typeof session === 'object' && !Array.isArray(session) && Array.isArray(session.messages)) {
+        out.session = { ...session, messages: stripPublicInternalFields(session.messages, { messageRecords: true }) };
+    }
+    if (Array.isArray(out.messages))
+        out.messages = stripPublicInternalFields(out.messages, { messageRecords: true });
+    return out;
+}
+export function matchSidecarProxy(path) {
+    const m = PROXY_RE.exec(path);
+    return m ? [m[1] ?? '', m[2] ?? ''] : null;
+}
+/** Python `_handle_extension_sidecar_proxy`: same-origin browser provenance on every method, header stripping, 10 s, 512 KiB. */
+export async function handleExtensionSidecarProxy(ctx, extensionId, proxyPath) {
+    const env = ctx.deps.config.env;
+    const provenance = checkSameOriginBrowserRequest({ origin: ctx.header('origin'), referer: ctx.header('referer'), secFetchSite: ctx.header('sec-fetch-site'), host: ctx.header('host'), forwardedHost: ctx.header('x-forwarded-host'), realHost: ctx.header('x-real-host') }, env, { requireProvenance: true });
+    if (provenance !== null) {
+        ctx.json({ error: csrfRejectionError(provenance) }, { status: 403 });
+        return;
+    }
+    // Python matched the id raw (`[^/]+`) and validated it as-is: a percent-malformed id is invalid, and an encoded
+    // spelling of a valid id is not accepted either. The sub-path keeps its raw shape (`//`, trailing `/` are invalid).
+    const rawTarget = (ctx.req.url ?? '').split('?')[0] ?? '';
+    const rawMatch = /^\/api\/extensions\/([^/]+)\/sidecar\/(.*)$/.exec(rawTarget);
+    const rawId = rawMatch?.[1] ?? extensionId;
+    const rawProxyPath = rawMatch?.[2] ?? proxyPath;
+    if (!validId(rawId)) {
+        ctx.json({ error: 'Invalid extension id' }, { status: 400 });
+        return;
+    }
+    if (rawProxyPath !== proxyPath && normalizeProxyPath(rawProxyPath) === null) {
+        ctx.json({ error: 'Invalid sidecar proxy path' }, { status: 400 });
+        return;
+    }
+    let body = null;
+    if (ctx.method !== 'GET' && ctx.method !== 'HEAD') {
+        try {
+            body = await ctx.readRawBody(20 * 1024 * 1024);
+        }
+        catch (error) {
+            ctx.json({ error: str(error.message) }, { status: /too large/i.test(str(error.message)) ? 413 : 400 });
+            return;
+        }
+    }
+    let target;
+    try {
+        target = await ctx.deps.extensions.proxyTarget(rawId, rawProxyPath, ctx.search.replace(/^\?/, ''));
+    }
+    catch (error) {
+        if (error instanceof ExtensionError) {
+            ctx.json({ error: error.message }, { status: error.status });
+            return;
+        }
+        throw error;
+    }
+    const headers = {};
+    // Python `_connection_bound_header_names`: every token the request's `Connection:` names is hop-by-hop too.
+    const requestBound = connectionBoundNames(ctx.req.headers.connection);
+    for (const [name, value] of Object.entries(ctx.req.headers)) {
+        const lower = name.toLowerCase();
+        if (HOP_BY_HOP.has(lower) || requestBound.has(lower) || ['authorization', 'cookie', 'content-length', 'host', 'origin', 'referer'].includes(lower) || lower.startsWith('x-csrf') || lower.startsWith('x-hermes-'))
+            continue;
+        if (typeof value === 'string')
+            headers[name] = value;
+    }
+    try {
+        // Python `_extension_sidecar_proxy_same_origin_opener`: redirects are followed here, never handed to the browser,
+        // and every hop must stay on the declared origin (urllib's default hop limit).
+        const allowedOrigin = new URL(target.origin).origin;
+        let url = target.upstream_url;
+        let method = ctx.method;
+        let requestBody = body;
+        let res;
+        for (let hop = 0;; hop += 1) {
+            res = await ctx.deps.fetch(url, { method, headers, ...(requestBody ? { body: requestBody } : {}), redirect: 'manual', signal: AbortSignal.timeout(10_000) });
+            if (res.status < 300 || res.status >= 400 || !res.headers.has('location'))
+                break;
+            let resolved = null;
+            try {
+                resolved = new URL(res.headers.get('location') ?? '', url);
+            }
+            catch {
+                resolved = null;
+            }
+            // Python's opener raised on a cross-origin hop or the hop limit, which surfaced as the generic reach failure.
+            if (resolved?.origin !== allowedOrigin || hop >= PROXY_MAX_REDIRECTS) {
+                ctx.json({ error: 'Failed to reach extension sidecar' }, { status: 502 });
+                return;
+            }
+            await res.body?.cancel();
+            url = resolved.href;
+            if ((res.status === 301 || res.status === 302 || res.status === 303) && method !== 'GET' && method !== 'HEAD') {
+                method = 'GET';
+                requestBody = null;
+                delete headers['content-type'];
+                delete headers['Content-Type'];
+            }
+        }
+        const raw = await readCapped(res, PROXY_MAX_RESPONSE);
+        if (raw === null) {
+            ctx.json({ error: 'Extension sidecar response too large' }, { status: 502 });
+            return;
+        }
+        const out = {};
+        let contentType = false;
+        const responseBound = connectionBoundNames(res.headers.get('connection'));
+        res.headers.forEach((value, name) => {
+            const lower = name.toLowerCase();
+            if (HOP_BY_HOP.has(lower) || responseBound.has(lower) || lower === 'content-length' || lower === 'set-cookie' || lower === 'content-encoding' || lower.startsWith('x-hermes-'))
+                return;
+            if (lower === 'content-type')
+                contentType = true;
+            out[name] = value;
+        });
+        if (!contentType)
+            out['Content-Type'] = 'application/octet-stream';
+        out['Cache-Control'] = 'no-store';
+        ctx.send({ status: res.status, headers: out, body: raw, security: true, gzip: false });
+    }
+    catch (error) {
+        ctx.deps.log(`[webui] extension sidecar proxy failed: ${str(error.message)}`);
+        ctx.json({ error: 'Failed to reach extension sidecar' }, { status: 502 });
+    }
+}
+/** Python `_connection_bound_header_names`: the header names listed in `Connection:` (plus `proxy-connection`). */
+function connectionBoundNames(value) {
+    const names = new Set(['proxy-connection']);
+    for (const raw of Array.isArray(value) ? value : value ? [value] : [])
+        for (const token of raw.split(',')) {
+            const t = token.trim().toLowerCase();
+            if (t)
+                names.add(t);
+        }
+    return names;
+}
+//# sourceMappingURL=automation-raw.js.map

package/dist/api/automation-raw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation-raw.js","sourceRoot":"","sources":["../../src/api/automation-raw.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA;AAC1E,OAAO,EAAE,cAAc,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAA;AACzI,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACrD,OAAO,EAAE,6BAA6B,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACrF,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AAGxD,MAAM,cAAc,GAAG,KAAK,CAAA;AAC5B,MAAM,mBAAmB,GAAG,MAAM,CAAA;AAClC,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,CAAA;AACrC,MAAM,mBAAmB,GAAG,EAAE,CAAA;AAC9B,MAAM,QAAQ,GAAG,kDAAkD,CAAA;AACnE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC,CAAA;AAEtJ,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,MAAmB,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IACxF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,OAAO,EAAE,CAAC;QAAC,OAAM;IAAC,CAAC;IACzC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC3F,MAAM,OAAO,GAAG,GAAS,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA,CAAC,CAAC,CAAA;IAC1D,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;AAC3D,CAAC,CAAC,CAAA;AAEF,wHAAwH;AACxH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,GAAmB;IAChE,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAA;IACxD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,IAAI,CAAA;IAC9E,IAAI,MAAM,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;IAClE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAAE,MAAM,GAAG,CAAC,CAAA;IACtD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAA;IACzD,mFAAmF;IACnF,IAAI,UAAU,GAAG,KAAK,CAAA;IACtB,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,CAAC;YAAC,UAAU,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACxI,IAAI,CAAC;gBAAC,aAAa,CAAC,KAAK,CAAC,CAAA;YAAC,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;gBAAC,IAAI,MAAM,YAAY,WAAW,EAAE,CAAC;oBAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;oBAAC,OAAM;gBAAC,CAAC;YAAC,CAAC;YAC7J,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACpC,IAAI,CAAC,GAAG;QAAE,OAAM;IAChB,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAA;IACnC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA,CAAC,CAAC,CAAC,CAAA;IAC5C,IAAI,CAAC;QACH,GAAG,CAAC,KAAK,EAAE,CAAA;QACX,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAA;QACjD,IAAI,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC1B,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9C,IAAI,MAAM,GAAc,EAAE,CAAA;YAC1B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;gBACnE,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;gBACtD,IAAI,MAAM,CAAC,MAAM;oBAAE,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAA;YAC3D,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,GAAG,EAAE,CAAA;YAAC,CAAC;YACvB,IAAI,GAAG,CAAC,QAAQ;gBAAE,OAAM;YACxB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAAC,CAAC;iBAClJ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,mBAAmB,EAAE,CAAC;gBAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAAC,CAAC;YAC5G,MAAM,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,GAAG,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,uJAAuJ;AACvJ,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAmB;IAC5D,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAAC,OAAM;QAAC,CAAC;QACxG,MAAM,KAAK,CAAA;IACb,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACnD,IAAI,CAAC,GAAG,EAAE,CAAC;QAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAAC,OAAM;IAAC,CAAC;IACjF,IAAI,OAAO,CAAA;IACX,IAAI,CAAC;QAAC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAAC,OAAM;IAAC,CAAC;IACpJ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,OAAO,EAAE,kEAAkE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAAC,OAAM;IAAC,CAAC;IACtO,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAAC,OAAM;IAAC,CAAC;IACnF,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACzD,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACjG,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACpC,IAAI,CAAC,GAAG;QAAE,OAAM;IAChB,MAAM,KAAK,GAAmB,EAAE,CAAA;IAChC,IAAI,IAAI,GAAwB,IAAI,CAAA;IACpC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAA,CAAC,CAAC,CAAC,CAAA;IACtF,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAA;IACnC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAA,CAAC,CAAC,CAAC,CAAA;IACtD,IAAI,CAAC;QACH,GAAG,CAAC,KAAK,EAAE,CAAA;QACX,IAAI,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC1B,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;YAC1B,IAAI,IAAI,EAAE,CAAC;gBACT,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;gBAClD,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBACtB,IAAI,IAAI,CAAC,KAAK,KAAK,iBAAiB,IAAI,IAAI,CAAC,KAAK,KAAK,gBAAgB;oBAAE,OAAM;gBAC/E,SAAQ;YACV,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YACvF,MAAM,SAAS,GAAG,yBAAyB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAA;YACtE,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBAAC,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;gBAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAC,SAAQ;YAAC,CAAC;YAC3F,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,OAAO,GAAG,GAAS,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA,CAAC,CAAC,CAAA;gBACzD,MAAM,MAAM,GAAG,GAAS,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA,CAAC,CAAC,CAAA;gBAC5F,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;gBACvC,IAAI,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA,CAAC,CAAC,CAAA;gBAC1C,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YACjE,CAAC,CAAC,CAAA;YACF,IAAI,GAAG,IAAI,CAAA;QACb,CAAC;IACH,CAAC;YAAS,CAAC;QACT,WAAW,EAAE,CAAA;QACb,GAAG,CAAC,GAAG,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,qBAAqB,CAAC,GAAmB;IACvD,kDAAkD;IAClD,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QAAC,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAAC,OAAM;IAAC,CAAC;IACnJ,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;IAChD,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAAC,OAAM;IAAC,CAAC;IACxE,MAAM,OAAO,GAAsC,EAAE,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,CAAA;IACpH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,oHAAoH;QACpH,MAAM,IAAI,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC,yBAAyB,CAAC,CAAA;QAC7D,OAAO,CAAC,yBAAyB,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,2BAA2B,CAAC,CAAA;QAC5I,OAAO,CAAC,iBAAiB,CAAC,GAAG,YAAY,CAAA;IAC3C,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAI,OAAU;IACrD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAA;IACrF,MAAM,GAAG,GAA4B,EAAE,GAAI,OAAmC,EAAE,CAAA;IAChF,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAA;IAC3B,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAE,OAAmC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtI,GAAG,CAAC,OAAO,GAAG,EAAE,GAAI,OAAmC,EAAE,QAAQ,EAAE,yBAAyB,CAAE,OAAmC,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;IACzK,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,GAAG,CAAC,QAAQ,GAAG,yBAAyB,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;IACjH,OAAO,GAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7B,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC5C,CAAC;AAED,iIAAiI;AACjI,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,GAAmB,EAAE,WAAmB,EAAE,SAAiB;IAC3G,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAA;IAC/B,MAAM,UAAU,GAAG,6BAA6B,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9S,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAAC,OAAM;IAAC,CAAC;IACzG,gHAAgH;IAChH,oHAAoH;IACpH,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACzD,MAAM,QAAQ,GAAG,6CAA6C,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC9E,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,CAAA;IAC1C,MAAM,YAAY,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAA;IAC/C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAAC,OAAM;IAAC,CAAC;IAC7F,IAAI,YAAY,KAAK,SAAS,IAAI,kBAAkB,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC;QAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAAC,OAAM;IAAC,CAAC;IAC3J,IAAI,IAAI,GAAkB,IAAI,CAAA;IAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClD,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAE,KAAe,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAAC,OAAM;QAAC,CAAC;IAC/M,CAAC;IACD,IAAI,MAAgD,CAAA;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAA;IACpG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAAC,OAAM;QAAC,CAAC;QAC7G,MAAM,KAAK,CAAA;IACb,CAAC;IACD,MAAM,OAAO,GAA2B,EAAE,CAAA;IAC1C,4GAA4G;IAC5G,MAAM,YAAY,GAAG,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACrE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;QAChC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,SAAQ;QAC3N,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;IACtD,CAAC;IACD,IAAI,CAAC;QACH,kHAAkH;QAClH,+EAA+E;QAC/E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAA;QACnD,IAAI,GAAG,GAAG,MAAM,CAAC,YAAY,CAAA;QAC7B,IAAI,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;QACvB,IAAI,WAAW,GAAkB,IAAI,CAAA;QACrC,IAAI,GAAa,CAAA;QACjB,KAAK,IAAI,GAAG,GAAG,CAAC,GAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YAC7B,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAC5J,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,MAAK;YAChF,IAAI,QAAQ,GAAe,IAAI,CAAA;YAC/B,IAAI,CAAC;gBAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,QAAQ,GAAG,IAAI,CAAA;YAAC,CAAC;YAC5F,8GAA8G;YAC9G,IAAI,QAAQ,EAAE,MAAM,KAAK,aAAa,IAAI,GAAG,IAAI,mBAAmB,EAAE,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YAC3J,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAA;YACxB,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAA;YACnB,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAAC,MAAM,GAAG,KAAK,CAAC;gBAAC,WAAW,GAAG,IAAI,CAAC;gBAAC,OAAO,OAAO,CAAC,cAAc,CAAC,CAAC;gBAAC,OAAO,OAAO,CAAC,cAAc,CAAC,CAAA;YAAC,CAAC;QACvN,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;QACrD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAAC,OAAM;QAAC,CAAC;QAC1G,MAAM,GAAG,GAA2B,EAAE,CAAA;QACtC,IAAI,WAAW,GAAG,KAAK,CAAA;QACvB,MAAM,aAAa,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAA;QACzE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;YAChC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,gBAAgB,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,kBAAkB,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;gBAAE,OAAM;YACtL,IAAI,KAAK,KAAK,cAAc;gBAAE,WAAW,GAAG,IAAI,CAAA;YAChD,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;QACnB,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,WAAW;YAAE,GAAG,CAAC,cAAc,CAAC,GAAG,0BAA0B,CAAA;QAClE,GAAG,CAAC,eAAe,CAAC,GAAG,UAAU,CAAA;QACjC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACxF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,2CAA2C,GAAG,CAAE,KAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACxF,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IAC3E,CAAC;AACH,CAAC;AAED,mHAAmH;AACnH,SAAS,oBAAoB,CAAC,KAA2C;IACvE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,kBAAkB,CAAC,CAAC,CAAA;IACnD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;QAAE,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAAC,CAAC;IACxK,OAAO,KAAK,CAAA;AACd,CAAC"}