@maudecode/talaria-web 0.0.0

package/dist/auth/store.js

@@ -0,0 +1,485 @@
+/**
+ * Session, key, password-hash, and login-rate state (Python `api/auth.py`).
+ * Every on-disk artefact keeps its Python name and format so an install can
+ * switch backends without a forced logout: `.pbkdf2_key`, `.signing_key`,
+ * `.sessions.json`, `.login_attempts.json`.
+ */
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { atomicWriteSecretJson } from '../fs/atomic.js';
+import { truthy } from '../config.js';
+import { COOKIE_NAME_RE } from './cookies.js';
+import { hashPassword, hmacHex, newKey, newSessionToken, safeEqual, splitSigned } from './crypto.js';
+export const SESSION_TTL = 86400 * 30;
+export const COOKIE_NAME = 'hermes_session';
+export const CSRF_HEADER_NAME = 'X-Hermes-CSRF-Token';
+const LOGIN_MAX_ATTEMPTS = 5;
+const LOGIN_WINDOW = 60;
+const OIDC_KEEP = new Set(['oidc_mapping_fingerprint', 'oidc_profile_identity', 'oidc_owner']);
+export function sessionExpiry(record) {
+    const raw = record && typeof record === 'object' ? (record.expiry ?? record.expires_at) : record;
+    const expiry = typeof raw === 'number' ? raw : typeof raw === 'string' ? Number(raw) : Number.NaN;
+    return Number.isFinite(expiry) ? expiry : null;
+}
+/** Returned while settings.json cannot be read: auth counts as enabled and no password verifies against it. */
+const UNREADABLE_PASSWORD_HASH = 'unreadable';
+export class AuthStore {
+    stateDir;
+    env;
+    settings;
+    now;
+    log;
+    sessionsFile;
+    attemptsFile;
+    sessions;
+    attempts;
+    pbkdf2KeyCache = null;
+    signingKeyCache = null;
+    passwordHash = { computed: false, value: null, pending: null };
+    warned = new Set();
+    passkeysEnabled;
+    oidcEnabled;
+    oidcProbe;
+    passkeyConfigFlag;
+    constructor(opts) {
+        this.stateDir = opts.stateDir;
+        this.env = opts.env;
+        this.settings = opts.settings;
+        this.now = opts.now ?? (() => Date.now() / 1000);
+        this.log = opts.log ?? ((line) => { console.error(line); });
+        this.sessionsFile = resolve(this.stateDir, '.sessions.json');
+        this.attemptsFile = resolve(this.stateDir, '.login_attempts.json');
+        this.sessions = this.loadSessions();
+        this.attempts = this.loadLoginAttempts();
+        this.passkeysEnabled = opts.passkeysEnabled ?? (() => false);
+        this.oidcEnabled = opts.oidcEnabled ?? (() => false);
+        this.oidcProbe = opts.oidcProbe ?? (() => Promise.resolve());
+        this.passkeyConfigFlag = opts.passkeyConfigFlag ?? (() => undefined);
+    }
+    warnPersistence(prefix, artifact, error, consequence) {
+        const err = error;
+        this.log(`[webui] WARNING: ${prefix} at ${artifact} (STATE_DIR=${this.stateDir}): ${err.name ?? 'Error'}: ${err.message ?? String(error)}; ${consequence}`);
+    }
+    warnOnce(key, message) {
+        if (this.warned.has(key))
+            return;
+        this.warned.add(key);
+        this.log(`[webui] WARNING: ${message}`);
+    }
+    // ── keys ──────────────────────────────────────────────────────────────────
+    loadKey(filename) {
+        const file = resolve(this.stateDir, filename);
+        try {
+            if (existsSync(file)) {
+                const raw = readFileSync(file);
+                if (raw.length >= 32)
+                    return raw.subarray(0, 32);
+            }
+        }
+        catch (error) {
+            this.warnPersistence('Auth key read failed', file, error, 'generating a new key and continuing');
+        }
+        const key = newKey();
+        try {
+            mkdirSync(this.stateDir, { recursive: true });
+            writeFileSync(file, key);
+            chmodSync(file, 0o600);
+        }
+        catch (error) {
+            this.warnPersistence('Auth key persistence failed', file, error, 'returning the generated key so startup can continue');
+        }
+        return key;
+    }
+    pbkdf2Key() {
+        this.pbkdf2KeyCache ??= this.loadKey('.pbkdf2_key');
+        return this.pbkdf2KeyCache;
+    }
+    signingKey() {
+        this.signingKeyCache ??= this.loadKey('.signing_key');
+        return this.signingKeyCache;
+    }
+    /** Tests inject fixed keys to assert byte compatibility with Python outputs. */
+    setKeysForTest(pbkdf2Key, signingKey) {
+        this.pbkdf2KeyCache = pbkdf2Key;
+        this.signingKeyCache = signingKey;
+    }
+    hashPassword(password, salt) {
+        return hashPassword(password, salt ?? this.pbkdf2Key());
+    }
+    // ── password hash / enablement ────────────────────────────────────────────
+    invalidatePasswordHashCache() {
+        this.passwordHash = { computed: false, value: null, pending: null };
+    }
+    async getPasswordHash() {
+        if (this.passwordHash.computed)
+            return this.passwordHash.value;
+        if (this.passwordHash.pending)
+            return this.passwordHash.pending;
+        // Single flight: a burst of requests computes PBKDF2 once (Python's double-checked lock).
+        let settled = false;
+        const pending = (async () => {
+            const envPw = (this.env.HERMES_WEBUI_PASSWORD ?? '').trim();
+            let stored;
+            try {
+                stored = this.settings.readRaw({ strict: true }).password_hash;
+            }
+            catch (error) {
+                // An unreadable settings.json (permissions, I/O, corrupt JSON) must not read as "no password": report a hash
+                // that no input can match, and do not cache so the next request retries the read.
+                settled = true;
+                this.passwordHash = { computed: false, value: null, pending: null };
+                this.log(`[auth] settings.json unreadable; password auth stays enabled and login is refused: ${error.message}`);
+                return UNREADABLE_PASSWORD_HASH;
+            }
+            const value = envPw ? await this.hashPassword(envPw) : typeof stored === 'string' && stored ? stored : null;
+            settled = true;
+            this.passwordHash = { computed: true, value, pending: null };
+            return value;
+        })();
+        if (!settled)
+            this.passwordHash.pending = pending;
+        return pending;
+    }
+    async isPasswordAuthEnabled() {
+        return (await this.getPasswordHash()) !== null;
+    }
+    /** Python `_passkey_feature_flag_enabled`: env wins, else `webui_passkey_enabled` in the operator config. */
+    /** The flag as configured: `null` while the operator config cannot be read (the last-known snapshot is cold). */
+    passkeyFeatureFlagState() {
+        const raw = this.env.HERMES_WEBUI_PASSKEY ?? '';
+        if (raw)
+            return truthy(raw);
+        const cfg = this.passkeyConfigFlag();
+        if (cfg === null)
+            return null;
+        if (typeof cfg === 'boolean')
+            return cfg;
+        if (typeof cfg === 'string')
+            return truthy(cfg);
+        return false;
+    }
+    passkeyFeatureFlagEnabled() {
+        return this.passkeyFeatureFlagState() === true;
+    }
+    /**
+     * Feature flag AND at least one registered credential (Python `are_passkeys_enabled`). With credentials on disk and
+     * the flag unknown (sidecar down, config changed underneath), the gate stays closed rather than opening the API.
+     */
+    passkeysAvailable() {
+        return this.passkeysEnabled() && this.passkeyFeatureFlagState() !== false;
+    }
+    isTrustedAuthEnabled() {
+        return Boolean((this.env.HERMES_WEBUI_TRUSTED_AUTH_HEADER ?? '').trim());
+    }
+    async isAuthEnabled() {
+        if (await this.isPasswordAuthEnabled())
+            return true;
+        if (this.passkeysAvailable() || this.isTrustedAuthEnabled())
+            return true;
+        try {
+            await this.oidcProbe();
+        }
+        catch { /* last-known config stands */ }
+        return this.oidcEnabled();
+    }
+    async verifyPassword(plain) {
+        const expected = await this.getPasswordHash();
+        if (!expected)
+            return false;
+        if (safeEqual(await this.hashPassword(plain), expected))
+            return true;
+        const legacySalt = this.signingKey();
+        if (!legacySalt.equals(this.pbkdf2Key()) && safeEqual(await this.hashPassword(plain, legacySalt), expected)) {
+            await this.settings.save({ _set_password: plain });
+            return true;
+        }
+        return false;
+    }
+    // ── TTL / cookie policy ───────────────────────────────────────────────────
+    resolveSessionTtl() {
+        const envV = (this.env.HERMES_WEBUI_SESSION_TTL ?? '').trim();
+        if (/^\d+$/.test(envV)) {
+            const val = Number.parseInt(envV, 10);
+            if (val >= 60 && val <= 86400 * 365)
+                return val;
+        }
+        const v = this.settings.load().session_ttl_seconds;
+        if (typeof v === 'number' && Number.isInteger(v) && v >= 60 && v <= 86400 * 365)
+            return v;
+        return SESSION_TTL;
+    }
+    resolveSessionSliding() {
+        const value = (this.env.HERMES_WEBUI_SESSION_SLIDING ?? '').trim().toLowerCase();
+        if (value)
+            return ['1', 'true', 'yes', 'on'].includes(value);
+        let webui;
+        try {
+            webui = this.settings.readRaw({ strict: true }).webui ?? {};
+        }
+        catch (error) {
+            this.warnOnce('session-sliding-settings', `Cannot read session sliding policy (${error.name}); session renewal is disabled`);
+            return false;
+        }
+        if (!webui || typeof webui !== 'object' || Array.isArray(webui))
+            return false;
+        const sliding = webui.session_sliding;
+        return sliding === undefined || sliding === true;
+    }
+    cookieName() {
+        const name = (this.env.HERMES_WEBUI_COOKIE_NAME ?? '').trim();
+        if (!name)
+            return COOKIE_NAME;
+        if (COOKIE_NAME_RE.test(name))
+            return name;
+        this.warnOnce('cookie-name', `Ignoring invalid HERMES_WEBUI_COOKIE_NAME=${JSON.stringify(name)}; falling back to ${JSON.stringify(COOKIE_NAME)} (name must be a valid RFC 6265 token)`);
+        return COOKIE_NAME;
+    }
+    // ── sessions ──────────────────────────────────────────────────────────────
+    loadSessions() {
+        let data;
+        try {
+            if (!existsSync(this.sessionsFile))
+                return {};
+            data = JSON.parse(readFileSync(this.sessionsFile, 'utf8'));
+            if (!data || typeof data !== 'object' || Array.isArray(data))
+                throw new Error('malformed sessions file: expected dict');
+        }
+        catch (error) {
+            const prefix = error.code ? 'Auth session store read failed' : 'Ignoring malformed auth session store';
+            this.warnPersistence(prefix, this.sessionsFile, error, 'starting fresh with an empty session table');
+            return {};
+        }
+        const now = this.now();
+        const sessions = {};
+        for (const [token, record] of Object.entries(data)) {
+            if (!token)
+                continue;
+            const expiry = sessionExpiry(record);
+            if (expiry === null || expiry <= now)
+                continue;
+            if (record && typeof record === 'object') {
+                const normalized = { expiry };
+                for (const [key, value] of Object.entries(record)) {
+                    if (key.startsWith('oidc_') && !OIDC_KEEP.has(key))
+                        continue;
+                    normalized[key] = value;
+                }
+                normalized.expiry = expiry;
+                sessions[token] = normalized;
+            }
+            else {
+                sessions[token] = expiry;
+            }
+        }
+        return sessions;
+    }
+    persistSessions() {
+        try {
+            mkdirSync(this.stateDir, { recursive: true });
+            atomicWriteSecretJson(this.sessionsFile, this.sessions);
+        }
+        catch (error) {
+            this.warnPersistence('Auth session persistence failed', this.sessionsFile, error, 'keeping the in-process session table available');
+        }
+    }
+    /** Test seam: the in-memory table, keyed by raw token. */
+    get sessionTable() {
+        return this.sessions;
+    }
+    signToken(token) {
+        return hmacHex(this.signingKey(), token);
+    }
+    createSession(opts = {}) {
+        const token = newSessionToken();
+        const expiry = this.now() + this.resolveSessionTtl();
+        const typed = [opts.authType, opts.username, opts.boundProfile, opts.oidcBinding].some((v) => v !== null && v !== undefined);
+        let record = expiry;
+        if (typed) {
+            record = { expiry, auth_type: opts.authType ?? null, username: opts.username ?? null, bound_profile: opts.boundProfile ?? null };
+            if (opts.oidcBinding) {
+                record.oidc_mapping_fingerprint = opts.oidcBinding.mapping_fingerprint ?? null;
+                record.oidc_profile_identity = opts.oidcBinding.profile_identity ?? null;
+                if (opts.oidcBinding.owner)
+                    record.oidc_owner = true;
+            }
+        }
+        this.sessions[token] = record;
+        this.persistSessions();
+        return `${token}.${this.signToken(token)}`;
+    }
+    pruneExpiredSessions() {
+        const now = this.now();
+        let changed = false;
+        for (const [token, record] of Object.entries(this.sessions)) {
+            const expiry = sessionExpiry(record);
+            if (expiry === null || now > expiry) {
+                Reflect.deleteProperty(this.sessions, token);
+                changed = true;
+            }
+        }
+        if (changed)
+            this.persistSessions();
+    }
+    verifySession(cookieValue) {
+        if (!cookieValue)
+            return false;
+        const parts = splitSigned(cookieValue);
+        if (!parts)
+            return false;
+        this.pruneExpiredSessions();
+        const [token, sig] = parts;
+        const full = this.signToken(token);
+        const valid = safeEqual(sig, full) || (sig.length === 32 && safeEqual(sig, full.slice(0, 32)));
+        if (!valid)
+            return false;
+        const expiry = sessionExpiry(this.sessions[token]);
+        if (expiry === null || this.now() > expiry) {
+            Reflect.deleteProperty(this.sessions, token);
+            this.persistSessions();
+            return false;
+        }
+        return true;
+    }
+    static tokenFromCookieValue(cookieValue) {
+        if (!cookieValue)
+            return null;
+        const parts = splitSigned(cookieValue);
+        return parts?.[0] ?? null;
+    }
+    getSessionInfo(cookieValue) {
+        if (!this.verifySession(cookieValue))
+            return null;
+        const token = AuthStore.tokenFromCookieValue(cookieValue);
+        if (!token)
+            return null;
+        const record = this.sessions[token];
+        const expiry = sessionExpiry(record);
+        if (expiry === null)
+            return null;
+        const info = { token, expiry, auth_type: null, username: null, bound_profile: null };
+        if (record && typeof record === 'object') {
+            for (const [k, v] of Object.entries(record))
+                if (k !== 'expiry')
+                    info[k] = v;
+            if (!('bound_profile' in record) && typeof record.profile === 'string')
+                info.bound_profile = record.profile;
+        }
+        info.auth_type = (info.auth_type) ?? null;
+        info.username = (info.username) ?? null;
+        info.bound_profile = (info.bound_profile) ?? null;
+        return info;
+    }
+    invalidateSession(cookieValue) {
+        const token = AuthStore.tokenFromCookieValue(cookieValue);
+        if (!token)
+            return;
+        Reflect.deleteProperty(this.sessions, token);
+        this.persistSessions();
+    }
+    /**
+     * Sliding renewal: extend a live session when its remaining lifetime has
+     * dropped below TTL minus min(TTL/10, 1h). Returns true when extended.
+     */
+    extendSession(cookieValue, ttl) {
+        const token = AuthStore.tokenFromCookieValue(cookieValue);
+        if (!token)
+            return false;
+        const record = this.sessions[token];
+        const expiry = sessionExpiry(record);
+        const now = this.now();
+        if (expiry === null || now >= expiry || expiry - now >= ttl - Math.min(ttl / 10, 3600))
+            return false;
+        const updated = record && typeof record === 'object' ? { ...record } : { expiry };
+        updated.expiry = now + ttl;
+        this.sessions[token] = updated;
+        this.persistSessions();
+        return true;
+    }
+    // ── CSRF and profile cookie signatures ────────────────────────────────────
+    csrfTokenForSession(cookieValue) {
+        const token = AuthStore.tokenFromCookieValue(cookieValue);
+        return token ? hmacHex(this.signingKey(), `csrf:${token}`) : null;
+    }
+    verifyCsrfToken(cookieValue, csrfToken) {
+        if (!cookieValue || !csrfToken || !this.verifySession(cookieValue))
+            return false;
+        const expected = this.csrfTokenForSession(cookieValue);
+        return Boolean(expected && safeEqual(csrfToken, expected));
+    }
+    signProfileCookieValue(profileName, sessionCookieValue) {
+        if (!sessionCookieValue || !this.verifySession(sessionCookieValue))
+            throw new Error('active auth session is required to sign profile cookie');
+        const token = AuthStore.tokenFromCookieValue(sessionCookieValue);
+        if (!token)
+            throw new Error('active auth session is required to sign profile cookie');
+        return `${profileName}.${hmacHex(this.signingKey(), `profile:${token}:${profileName}`)}`;
+    }
+    verifyProfileCookieValue(cookieValue, sessionCookieValue, validName) {
+        const parts = splitSigned(cookieValue);
+        if (!parts || !sessionCookieValue || !this.verifySession(sessionCookieValue))
+            return null;
+        const [profileName, sig] = parts;
+        const token = AuthStore.tokenFromCookieValue(sessionCookieValue);
+        if (!profileName || !token || !sig)
+            return null;
+        if (!validName(profileName))
+            return null;
+        const expected = hmacHex(this.signingKey(), `profile:${token}:${profileName}`);
+        return safeEqual(sig, expected) ? profileName : null;
+    }
+    // ── login rate limit ──────────────────────────────────────────────────────
+    loadLoginAttempts() {
+        try {
+            if (!existsSync(this.attemptsFile))
+                return {};
+            const data = JSON.parse(readFileSync(this.attemptsFile, 'utf8'));
+            if (!data || typeof data !== 'object' || Array.isArray(data))
+                return {};
+            const now = this.now();
+            const attempts = {};
+            for (const [ip, times] of Object.entries(data)) {
+                if (!Array.isArray(times))
+                    continue;
+                const fresh = times.filter((t) => typeof t === 'number' && now - t < LOGIN_WINDOW);
+                if (fresh.length)
+                    attempts[ip] = fresh;
+            }
+            return attempts;
+        }
+        catch {
+            return {};
+        }
+    }
+    saveLoginAttempts() {
+        try {
+            mkdirSync(this.stateDir, { recursive: true });
+            atomicWriteSecretJson(this.attemptsFile, this.attempts);
+        }
+        catch {
+            /* debug-level in Python */
+        }
+    }
+    checkLoginRate(ip) {
+        const now = this.now();
+        const attempts = (this.attempts[ip] ?? []).filter((t) => now - t < LOGIN_WINDOW);
+        if (attempts.length)
+            this.attempts[ip] = attempts;
+        else
+            Reflect.deleteProperty(this.attempts, ip);
+        this.saveLoginAttempts();
+        return attempts.length < LOGIN_MAX_ATTEMPTS;
+    }
+    recordLoginAttempt(ip) {
+        const list = this.attempts[ip] ?? [];
+        list.push(this.now());
+        this.attempts[ip] = list;
+        this.saveLoginAttempts();
+    }
+    clearLoginAttempts(ip) {
+        if (ip in this.attempts) {
+            Reflect.deleteProperty(this.attempts, ip);
+            this.saveLoginAttempts();
+        }
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/auth/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/auth/store.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AACvD,OAAO,EAAE,MAAM,EAAY,MAAM,cAAc,CAAA;AAE/C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEpG,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,GAAG,EAAE,CAAA;AACrC,MAAM,CAAC,MAAM,WAAW,GAAG,gBAAgB,CAAA;AAC3C,MAAM,CAAC,MAAM,gBAAgB,GAAG,qBAAqB,CAAA;AACrD,MAAM,kBAAkB,GAAG,CAAC,CAAA;AAC5B,MAAM,YAAY,GAAG,EAAE,CAAA;AAsBvB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,0BAA0B,EAAE,uBAAuB,EAAE,YAAY,CAAC,CAAC,CAAA;AAE9F,MAAM,UAAU,aAAa,CAAC,MAAe;IAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAE,MAAwB,CAAC,MAAM,IAAK,MAAkC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IAChJ,MAAM,MAAM,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA;IACjG,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;AAChD,CAAC;AAmBD,+GAA+G;AAC/G,MAAM,wBAAwB,GAAG,YAAY,CAAA;AAE7C,MAAM,OAAO,SAAS;IACX,QAAQ,CAAQ;IAChB,GAAG,CAAK;IACR,QAAQ,CAAe;IACvB,GAAG,CAAc;IACT,GAAG,CAAwB;IAC3B,YAAY,CAAQ;IACpB,YAAY,CAAQ;IAC7B,QAAQ,CAA+B;IACvC,QAAQ,CAA0B;IAClC,cAAc,GAAkB,IAAI,CAAA;IACpC,eAAe,GAAkB,IAAI,CAAA;IACrC,YAAY,GAAwF,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1I,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;IAC3C,eAAe,CAAe;IAC9B,WAAW,CAAe;IACT,SAAS,CAAwB;IAClD,iBAAiB,CAAe;IAEhC,YAAY,IAAsB;QAChC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QAC7B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAA;QACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QAC7B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QAChD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QAC1D,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAA;QAC5D,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAA;QAClE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;QACnC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAA;QACxC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAA;QAC5D,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAA;QACpD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;QAC5D,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACtE,CAAC;IAEO,eAAe,CAAC,MAAc,EAAE,QAAgB,EAAE,KAAc,EAAE,WAAmB;QAC3F,MAAM,GAAG,GAAG,KAA4C,CAAA;QACxD,IAAI,CAAC,GAAG,CAAC,oBAAoB,MAAM,OAAO,QAAQ,eAAe,IAAI,CAAC,QAAQ,MAAM,GAAG,CAAC,IAAI,IAAI,OAAO,KAAK,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,WAAW,EAAE,CAAC,CAAA;IAC7J,CAAC;IAED,QAAQ,CAAC,GAAW,EAAE,OAAe;QACnC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAM;QAChC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACpB,IAAI,CAAC,GAAG,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAA;IACzC,CAAC;IAED,6EAA6E;IAErE,OAAO,CAAC,QAAgB;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QAC7C,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;gBAC9B,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE;oBAAE,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YAClD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,eAAe,CAAC,sBAAsB,EAAE,IAAI,EAAE,KAAK,EAAE,qCAAqC,CAAC,CAAA;QAClG,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;QACpB,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC7C,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YACxB,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,eAAe,CAAC,6BAA6B,EAAE,IAAI,EAAE,KAAK,EAAE,qDAAqD,CAAC,CAAA;QACzH,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,SAAS;QACP,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QACnD,OAAO,IAAI,CAAC,cAAc,CAAA;IAC5B,CAAC;IAED,UAAU;QACR,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;QACrD,OAAO,IAAI,CAAC,eAAe,CAAA;IAC7B,CAAC;IAED,gFAAgF;IAChF,cAAc,CAAC,SAAiB,EAAE,UAAkB;QAClD,IAAI,CAAC,cAAc,GAAG,SAAS,CAAA;QAC/B,IAAI,CAAC,eAAe,GAAG,UAAU,CAAA;IACnC,CAAC;IAED,YAAY,CAAC,QAAgB,EAAE,IAAa;QAC1C,OAAO,YAAY,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,CAAA;IACzD,CAAC;IAED,6EAA6E;IAE7E,2BAA2B;QACzB,IAAI,CAAC,YAAY,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IACrE,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAA;QAC9D,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAA;QAC/D,0FAA0F;QAC1F,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;YAC3D,IAAI,MAAe,CAAA;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,aAAa,CAAA;YAChE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,6GAA6G;gBAC7G,kFAAkF;gBAClF,OAAO,GAAG,IAAI,CAAA;gBACd,IAAI,CAAC,YAAY,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;gBACnE,IAAI,CAAC,GAAG,CAAC,sFAAuF,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;gBAC1H,OAAO,wBAAwB,CAAA;YACjC,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;YAC3G,OAAO,GAAG,IAAI,CAAA;YACd,IAAI,CAAC,YAAY,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;YAC5D,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,EAAE,CAAA;QACJ,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,YAAY,CAAC,OAAO,GAAG,OAAO,CAAA;QACjD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,OAAO,CAAC,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC,KAAK,IAAI,CAAA;IAChD,CAAC;IAED,6GAA6G;IAC7G,iHAAiH;IACjH,uBAAuB;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAA;QAC/C,IAAI,GAAG;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAA;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAA;QACpC,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAC7B,IAAI,OAAO,GAAG,KAAK,SAAS;YAAE,OAAO,GAAG,CAAA;QACxC,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAA;QAC/C,OAAO,KAAK,CAAA;IACd,CAAC;IAED,yBAAyB;QACvB,OAAO,IAAI,CAAC,uBAAuB,EAAE,KAAK,IAAI,CAAA;IAChD,CAAC;IAED;;;OAGG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,eAAe,EAAE,IAAI,IAAI,CAAC,uBAAuB,EAAE,KAAK,KAAK,CAAA;IAC3E,CAAC;IAED,oBAAoB;QAClB,OAAO,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IAC1E,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IAAI,MAAM,IAAI,CAAC,qBAAqB,EAAE;YAAE,OAAO,IAAI,CAAA;QACnD,IAAI,IAAI,CAAC,iBAAiB,EAAE,IAAI,IAAI,CAAC,oBAAoB,EAAE;YAAE,OAAO,IAAI,CAAA;QACxE,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC,WAAW,EAAE,CAAA;IAC3B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAA;QAC7C,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAA;QAC3B,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;QACpE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,CAAA;QACpC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC5G,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAA;YAClD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,6EAA6E;IAE7E,iBAAiB;QACf,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC7D,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YACrC,IAAI,GAAG,IAAI,EAAE,IAAI,GAAG,IAAI,KAAK,GAAG,GAAG;gBAAE,OAAO,GAAG,CAAA;QACjD,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,mBAAmB,CAAA;QAClD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,GAAG,GAAG;YAAE,OAAO,CAAC,CAAA;QACzF,OAAO,WAAW,CAAA;IACpB,CAAC;IAED,qBAAqB;QACnB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAChF,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC5D,IAAI,KAAc,CAAA;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,CAAA;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,0BAA0B,EAAE,uCAAwC,KAAe,CAAC,IAAI,gCAAgC,CAAC,CAAA;YACvI,OAAO,KAAK,CAAA;QACd,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;QAC7E,MAAM,OAAO,GAAI,KAAiC,CAAC,eAAe,CAAA;QAClE,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,CAAA;IAClD,CAAC;IAED,UAAU;QACR,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC7D,IAAI,CAAC,IAAI;YAAE,OAAO,WAAW,CAAA;QAC7B,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAC1C,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,6CAA6C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,wCAAwC,CAAC,CAAA;QACvL,OAAO,WAAW,CAAA;IACpB,CAAC;IAED,6EAA6E;IAErE,YAAY;QAClB,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;gBAAE,OAAO,EAAE,CAAA;YAC7C,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAA;YAC1D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;QACzH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAI,KAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,uCAAuC,CAAA;YACjI,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,4CAA4C,CAAC,CAAA;YACpG,OAAO,EAAE,CAAA;QACX,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,QAAQ,GAAkC,EAAE,CAAA;QAClD,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;YAC9E,IAAI,CAAC,KAAK;gBAAE,SAAQ;YACpB,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;YACpC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,IAAI,GAAG;gBAAE,SAAQ;YAC9C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,MAAM,UAAU,GAAkB,EAAE,MAAM,EAAE,CAAA;gBAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAiC,CAAC,EAAE,CAAC;oBAC7E,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;wBAAE,SAAQ;oBAC5D,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;gBACzB,CAAC;gBACD,UAAU,CAAC,MAAM,GAAG,MAAM,CAAA;gBAC1B,QAAQ,CAAC,KAAK,CAAC,GAAG,UAAU,CAAA;YAC9B,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,KAAK,CAAC,GAAG,MAAM,CAAA;YAC1B,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAEO,eAAe;QACrB,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC7C,qBAAqB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,eAAe,CAAC,iCAAiC,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,gDAAgD,CAAC,CAAA;QACrI,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAED,SAAS,CAAC,KAAa;QACrB,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,KAAK,CAAC,CAAA;IAC1C,CAAC;IAED,aAAa,CAAC,OAA2I,EAAE;QACzJ,MAAM,KAAK,GAAG,eAAe,EAAE,CAAA;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAA;QACpD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,CAAA;QAC5H,IAAI,MAAM,GAAkB,MAAM,CAAA;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI,EAAE,CAAA;YAChI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,MAAM,CAAC,wBAAwB,GAAI,IAAI,CAAC,WAAW,CAAC,mBAA0C,IAAI,IAAI,CAAA;gBACtG,MAAM,CAAC,qBAAqB,GAAI,IAAI,CAAC,WAAW,CAAC,gBAAuC,IAAI,IAAI,CAAA;gBAChG,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK;oBAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAA;YACtD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,MAAM,CAAA;QAC7B,IAAI,CAAC,eAAe,EAAE,CAAA;QACtB,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAA;IAC5C,CAAC;IAEO,oBAAoB;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;YACpC,IAAI,MAAM,KAAK,IAAI,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC;gBACpC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;gBAC5C,OAAO,GAAG,IAAI,CAAA;YAChB,CAAC;QACH,CAAC;QACD,IAAI,OAAO;YAAE,IAAI,CAAC,eAAe,EAAE,CAAA;IACrC,CAAC;IAED,aAAa,CAAC,WAAsC;QAClD,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAA;QAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAA;QACxB,IAAI,CAAC,oBAAoB,EAAE,CAAA;QAC3B,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,KAAK,CAAA;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;QAC9F,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAA;QACxB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;QAClD,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;YAC3C,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;YAC5C,IAAI,CAAC,eAAe,EAAE,CAAA;YACtB,OAAO,KAAK,CAAA;QACd,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,CAAC,oBAAoB,CAAC,WAAsC;QAChE,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAA;QAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;QACtC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;IAC3B,CAAC;IAED,cAAc,CAAC,WAAsC;QACnD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAA;QACjD,MAAM,KAAK,GAAG,SAAS,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAA;QACzD,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;QACpC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAChC,MAAM,IAAI,GAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAA;QACjG,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,IAAI,CAAC,KAAK,QAAQ;oBAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;YAC5E,IAAI,CAAC,CAAC,eAAe,IAAI,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;gBAAE,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,OAAO,CAAA;QAC7G,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAA;QACzC,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAA;QACvC,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,CAAA;QACjD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,iBAAiB,CAAC,WAAsC;QACtD,MAAM,KAAK,GAAG,SAAS,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAA;QACzD,IAAI,CAAC,KAAK;YAAE,OAAM;QAClB,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QAC5C,IAAI,CAAC,eAAe,EAAE,CAAA;IACxB,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,WAAmB,EAAE,GAAW;QAC5C,MAAM,KAAK,GAAG,SAAS,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAA;QACzD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAA;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IAAI,MAAM,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,IAAI,MAAM,GAAG,GAAG,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,EAAE,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QACpG,MAAM,OAAO,GAAkB,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAA;QAChG,OAAO,CAAC,MAAM,GAAG,GAAG,GAAG,GAAG,CAAA;QAC1B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,OAAO,CAAA;QAC9B,IAAI,CAAC,eAAe,EAAE,CAAA;QACtB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,6EAA6E;IAE7E,mBAAmB,CAAC,WAAsC;QACxD,MAAM,KAAK,GAAG,SAAS,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAA;QACzD,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACnE,CAAC;IAED,eAAe,CAAC,WAAmB,EAAE,SAAiB;QACpD,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAA;QAChF,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAA;QACtD,OAAO,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC5D,CAAC;IAED,sBAAsB,CAAC,WAAmB,EAAE,kBAA6C;QACvF,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;QAC7I,MAAM,KAAK,GAAG,SAAS,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,CAAA;QAChE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;QACrF,OAAO,GAAG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,WAAW,KAAK,IAAI,WAAW,EAAE,CAAC,EAAE,CAAA;IAC1F,CAAC;IAED,wBAAwB,CAAC,WAAmB,EAAE,kBAA6C,EAAE,SAAoC;QAC/H,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;QACtC,IAAI,CAAC,KAAK,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC;YAAE,OAAO,IAAI,CAAA;QACzF,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,GAAG,KAAK,CAAA;QAChC,MAAM,KAAK,GAAG,SAAS,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,CAAA;QAChE,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QAC/C,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAA;QACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,WAAW,KAAK,IAAI,WAAW,EAAE,CAAC,CAAA;QAC9E,OAAO,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAA;IACtD,CAAC;IAED,6EAA6E;IAErE,iBAAiB;QACvB,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;gBAAE,OAAO,EAAE,CAAA;YAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAY,CAAA;YAC3E,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,CAAA;YACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,MAAM,QAAQ,GAA6B,EAAE,CAAA;YAC7C,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;gBAC1E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,SAAQ;gBACnC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,GAAG,GAAG,CAAC,GAAG,YAAY,CAAC,CAAA;gBAC/F,IAAI,KAAK,CAAC,MAAM;oBAAE,QAAQ,CAAC,EAAE,CAAC,GAAG,KAAK,CAAA;YACxC,CAAC;YACD,OAAO,QAAQ,CAAA;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC7C,qBAAqB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IAED,cAAc,CAAC,EAAU;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,YAAY,CAAC,CAAA;QAChF,IAAI,QAAQ,CAAC,MAAM;YAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAA;;YAC5C,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC9C,IAAI,CAAC,iBAAiB,EAAE,CAAA;QACxB,OAAO,QAAQ,CAAC,MAAM,GAAG,kBAAkB,CAAA;IAC7C,CAAC;IAED,kBAAkB,CAAC,EAAU;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;QACrB,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,IAAI,CAAA;QACxB,IAAI,CAAC,iBAAiB,EAAE,CAAA;IAC1B,CAAC;IAED,kBAAkB,CAAC,EAAU;QAC3B,IAAI,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;YACzC,IAAI,CAAC,iBAAiB,EAAE,CAAA;QAC1B,CAAC;IACH,CAAC;CACF"}

package/dist/bin/talaria-web-mcp.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/bin/talaria-web-mcp.js

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+/** `talaria-web-mcp`: MCP stdio server exposing Talaria Web project and session management (Python `mcp_server.py`). */
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { createTalariaMcpServer } from '../mcp/server.js';
+const args = process.argv.slice(2);
+const profileIndex = args.indexOf('--profile');
+const profile = profileIndex >= 0 ? (args[profileIndex + 1] ?? null) : null;
+const host = process.env.HERMES_WEBUI_HOST ?? '127.0.0.1';
+const port = process.env.HERMES_WEBUI_PORT ?? '8787';
+const server = createTalariaMcpServer({ baseUrl: `http://${host}:${port}`, password: (process.env.HERMES_WEBUI_PASSWORD ?? '').trim() || null, profile });
+await server.connect(new StdioServerTransport());
+//# sourceMappingURL=talaria-web-mcp.js.map

package/dist/bin/talaria-web-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"talaria-web-mcp.js","sourceRoot":"","sources":["../../src/bin/talaria-web-mcp.ts"],"names":[],"mappings":";AACA,wHAAwH;AACxH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AAEzD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAClC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;AAC9C,MAAM,OAAO,GAAG,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,WAAW,CAAA;AACzD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,CAAA;AACpD,MAAM,MAAM,GAAG,sBAAsB,CAAC,EAAE,OAAO,EAAE,UAAU,IAAI,IAAI,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;AACzJ,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAA"}

package/dist/bin/talaria-web.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/bin/talaria-web.js

@@ -0,0 +1,87 @@
+#!/usr/bin/env node
+/**
+ * `talaria-web` (Python `start.sh` + `bootstrap.py` + `ctl.sh`):
+ *   talaria-web [port] [--host H] [--no-browser] [--foreground] [--skip-agent-install]   launch (detached unless supervised)
+ *   talaria-web serve [launcher args]                                                     run the server (supervised worker; self-update restarts it)
+ *   talaria-web ctl <start|stop|restart|status|logs> [...]                                daemon control
+ */
+import { createApp } from '../app.js';
+import { loadConfig } from '../config.js';
+import { createDeps } from '../runtime.js';
+import { loadReleaseInfo } from '../release.js';
+import { startServer } from '../server.js';
+import { launchSidecar } from '../sidecar/discover.js';
+import { loadStartupEnv } from '../cli/dotenv.js';
+import { parseBootstrapArgs, runBootstrap } from '../cli/launcher.js';
+import { runCtl } from '../cli/ctl.js';
+import { resolveWebRoot } from '../cli/web-root.js';
+import { supervise, WORKER_ENV } from '../cli/supervise.js';
+const webRoot = process.env.TALARIA_WEB_ROOT ?? resolveWebRoot(import.meta.dirname);
+const log = (line) => { console.log(line); };
+const warn = (line) => { console.error(line); };
+const bin = process.argv[1] ?? '';
+const serveCommand = [process.execPath, bin, 'serve'];
+function applyServeArgs(argv) {
+    const args = parseBootstrapArgs(argv, process.env);
+    process.env.HERMES_WEBUI_HOST = args.host;
+    process.env.HERMES_WEBUI_PORT = String(args.port);
+}
+/** The long-lived server: `.env` precedence, Agent sidecar, workers. A supervisor parent respawns the worker after a self-update. */
+async function serve(args) {
+    if (process.env[WORKER_ENV] !== '1')
+        return supervise({ command: [...serveCommand, ...args], env: process.env, log });
+    // dotenv first so explicit serve arguments (positional port, --host) win over the checkout `.env`.
+    const home = process.env.HOME ?? '';
+    loadStartupEnv({ env: process.env, webRoot, home, log: warn });
+    applyServeArgs(args);
+    const config = loadConfig({ webRoot });
+    const sidecar = launchSidecar({ env: config.env, hermesHome: config.hermesHome, webRoot, home: config.homeDir, log });
+    if (sidecar) {
+        try {
+            const describe = await sidecar.start();
+            log(`[sidecar] ready: agent ${describe.agent_version ?? describe.agent_revision ?? 'unknown'} (${describe.compatible ? 'compatible' : 'incompatible'})`);
+        }
+        catch (error) {
+            log(`[sidecar] failed to start: ${error.message}; chat is unavailable until it recovers`);
+        }
+    }
+    const deps = createDeps({ webRoot, sidecar });
+    // Every exit path (SIGINT/SIGTERM shutdown, `/api/shutdown`, self-update restart) reaps embedded terminals first.
+    process.on('exit', () => { deps.terminals.closeAll({ immediate: true }); });
+    // Renamed root profiles and the active profile's config must be known before the first request (Python read both
+    // synchronously at startup); until then local-I/O gates fail closed.
+    await deps.profiles.warmRootAliases();
+    await deps.agentConfig.read(deps.profileHome(deps.activeProfile())).catch(() => undefined);
+    const app = createApp(deps);
+    const running = await startServer(app, deps.config);
+    deps.relay.start();
+    deps.completions.start();
+    deps.hygiene.start();
+    log(`  Then open:     ${running.scheme}://localhost:${running.port}`);
+    await new Promise(() => undefined);
+    return 0;
+}
+async function main(argv) {
+    const [first, ...rest] = argv;
+    if (first === 'ctl')
+        return runCtl({ env: process.env, webRoot, home: process.env.HOME ?? '', serveCommand, log, warn }, rest);
+    if (first === 'serve')
+        return serve(rest);
+    if (first === '-h' || first === '--help' || first === 'help') {
+        log('Usage: talaria-web [port] [--host HOST] [--no-browser] [--skip-agent-install] [--foreground]\n       talaria-web serve [args]\n       talaria-web ctl <start|stop|restart|status|logs>');
+        return 0;
+    }
+    const home = process.env.HOME ?? '';
+    const { hermesHome } = loadStartupEnv({ env: process.env, webRoot, home, log: warn });
+    const args = parseBootstrapArgs(argv, process.env);
+    const release = loadReleaseInfo({ webRoot });
+    return runBootstrap({ env: process.env, webRoot, hermesHome, home, compatibleAgentRevision: release.compatibleAgent.sourceRevision, serveCommand, log }, args, async () => { await serve(['--host', args.host, String(args.port)]); });
+}
+try {
+    process.exitCode = await main(process.argv.slice(2));
+}
+catch (error) {
+    warn(`[bootstrap] ERROR: ${error.message}`);
+    process.exitCode = 1;
+}
+//# sourceMappingURL=talaria-web.js.map

package/dist/bin/talaria-web.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"talaria-web.js","sourceRoot":"","sources":["../../src/bin/talaria-web.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACrE,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAE3D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AACnF,MAAM,GAAG,GAAG,CAAC,IAAY,EAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,CAAA;AACzD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAQ,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,CAAA;AAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;AACjC,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;AAErD,SAAS,cAAc,CAAC,IAAc;IACpC,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;IAClD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAA;IACzC,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACnD,CAAC;AAED,qIAAqI;AACrI,KAAK,UAAU,KAAK,CAAC,IAAc;IACjC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,YAAY,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;IACrH,mGAAmG;IACnG,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAA;IACnC,cAAc,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9D,cAAc,CAAC,IAAI,CAAC,CAAA;IACpB,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IACtC,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;IACrH,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;YACtC,GAAG,CAAC,0BAA0B,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,cAAc,IAAI,SAAS,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAA;QAC1J,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,8BAA+B,KAAe,CAAC,OAAO,yCAAyC,CAAC,CAAA;QACtG,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;IAC7C,kHAAkH;IAClH,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;IAC1E,iHAAiH;IACjH,qEAAqE;IACrE,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAA;IACrC,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC1F,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC3B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IACnD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;IAClB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAA;IACxB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;IACpB,GAAG,CAAC,oBAAoB,OAAO,CAAC,MAAM,gBAAgB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IACrE,MAAM,IAAI,OAAO,CAAO,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACxC,OAAO,CAAC,CAAA;AACV,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAc;IAChC,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;IAC7B,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAAA;IAC9H,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAA;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAC7D,GAAG,CAAC,wLAAwL,CAAC,CAAA;QAC7L,OAAO,CAAC,CAAA;IACV,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAA;IACnC,MAAM,EAAE,UAAU,EAAE,GAAG,cAAc,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;IACrF,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;IAClD,MAAM,OAAO,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IAC5C,OAAO,YAAY,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,CAAC,eAAe,CAAC,cAAc,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;AACvO,CAAC;AAED,IAAI,CAAC;IACH,OAAO,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;AACtD,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,IAAI,CAAC,sBAAuB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;IACtD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;AACtB,CAAC"}