@mnemonik/credentials 0.1.0

package/dist/index.js

@@ -0,0 +1,596 @@
+import { createHmac, randomBytes } from 'node:crypto';
+import { join } from 'node:path';
+import { windowsCurrentUserAcl, withLock } from '@mnemonik/local-setup';
+import { SimulatedSecretStore, CredentialSessionUnavailableError, } from './contracts.js';
+import { CredentialError, SecureFiles, credentialPaths, stateDirectory, } from './storage.js';
+export * from './contracts.js';
+import { osSecretStore } from './osSecretStore.js';
+export { osSecretStore };
+export { CredentialError, SimulatedSecretStore, credentialPaths, stateDirectory, windowsCurrentUserAcl, };
+const json = (value) => Buffer.from(`${JSON.stringify(value, null, 2)}\n`);
+const parse = (bytes, expectedKind) => {
+    let value;
+    try {
+        value = JSON.parse(bytes.toString());
+    }
+    catch {
+        throw new Error('credential_record_invalid');
+    }
+    if (!value ||
+        typeof value !== 'object' ||
+        value.schemaVersion !== 1 ||
+        value.kind !== expectedKind)
+        throw new Error('credential_record_invalid');
+    return value;
+};
+const wait = (milliseconds) => new Promise((resolvePromise) => setTimeout(resolvePromise, milliseconds));
+const action = (familyId, reason) => ({
+    status: 'ACTION_REQUIRED',
+    reason,
+    familyId,
+});
+const retryLater = (familyId, reason) => ({
+    status: 'RETRY_LATER',
+    reason,
+    familyId,
+});
+const isFailure = (result) => 'status' in result &&
+    (result.status === 'ACTION_REQUIRED' ||
+        result.status === 'RETRY_LATER');
+const diagnosedStores = new WeakSet();
+export function createCredentialAdapter(options = {}) {
+    const files = new SecureFiles({ ...options, stateDir: options.stateDir ?? stateDirectory() });
+    const paths = credentialPaths(files.stateDir);
+    const now = options.now ?? Date.now;
+    const sleep = options.sleep ?? wait;
+    const retryLimit = options.retryLimit ?? 2;
+    const store = options.secretStore;
+    const rotations = new Map();
+    let osAvailable;
+    const disable = () => {
+        osAvailable = Promise.resolve(false);
+        if (store && !diagnosedStores.has(store)) {
+            diagnosedStores.add(store);
+            options.onDiagnostic?.('os_store_unavailable');
+        }
+    };
+    const available = () => (osAvailable ??= store
+        ? store
+            .isAvailable()
+            .catch(() => false)
+            .then((ok) => {
+            if (!ok)
+                disable();
+            return ok;
+        })
+        : Promise.resolve(false));
+    const reference = (name) => `mnemonik.credentials.v1:${name}`;
+    const relativeSecret = (path) => path.slice(files.stateDir.length + 1);
+    const fileBackend = {
+        store: 'file',
+        isAvailable: async () => true,
+        read: async (_reference, file) => files.read(file),
+        write: async (_reference, file, secret) => files.write(file, secret, 'secret'),
+        delete: async (_reference, file) => files.remove(file),
+    };
+    const osBackend = {
+        store: 'os',
+        isAvailable: available,
+        read: async (reference) => {
+            if (!(await available()) || !store)
+                throw new Error('os_store_unavailable');
+            const value = await store.get(reference);
+            return value == null ? null : Buffer.from(value, 'base64');
+        },
+        write: async (reference, _file, secret) => {
+            if (!(await available()) || !store)
+                throw new Error('os_store_unavailable');
+            await store.set(reference, secret.toString('base64'));
+        },
+        delete: async (reference) => {
+            if (!(await available()) || !store)
+                throw new Error('os_store_unavailable');
+            await store.delete(reference);
+        },
+    };
+    async function locator(name, file, existing) {
+        if (existing?.store === 'os')
+            return existing;
+        return name === 'cli-oauth' && (await osBackend.isAvailable())
+            ? { store: 'os', secretRef: reference(name) }
+            : { store: 'file', secretFile: relativeSecret(file) };
+    }
+    const useFile = (location, file) => {
+        Object.assign(location, { store: 'file', secretFile: relativeSecret(file) });
+        delete location.secretRef;
+    };
+    async function writeSecret(location, file, value) {
+        if (location.store === 'os') {
+            try {
+                await osBackend.write(referenceFor(location), file, value);
+                return;
+            }
+            catch {
+                disable();
+            }
+            useFile(location, file);
+        }
+        await fileBackend.write('', file, value);
+    }
+    async function readSecret(location, file) {
+        let sessionUnavailable = false;
+        if (location.store === 'os') {
+            try {
+                const value = await osBackend.read(referenceFor(location), file);
+                if (value)
+                    return value;
+            }
+            catch {
+                disable();
+                sessionUnavailable = true;
+            }
+        }
+        const value = await fileBackend.read('', file);
+        if (!value && sessionUnavailable)
+            throw new CredentialSessionUnavailableError(store?.kind ?? 'os');
+        if (!value)
+            throw new Error('credential_secret_missing');
+        useFile(location, file);
+        return value;
+    }
+    async function deleteSecret(location, file) {
+        if (location.store === 'os') {
+            try {
+                await osBackend.delete(referenceFor(location), file);
+            }
+            catch {
+                disable();
+            }
+        }
+        await fileBackend.delete('', file);
+    }
+    const referenceFor = (location) => location.store === 'os' ? location.secretRef : '';
+    async function readRecord(path, kind) {
+        const bytes = await files.read(path);
+        return bytes ? parse(bytes, kind) : null;
+    }
+    async function putCliOAuth(metadata, tokens) {
+        const current = await readRecord(paths.cliRecord, 'cli-oauth');
+        const location = await locator('cli-oauth', paths.cliSecret, current ?? undefined);
+        const secret = typeof tokens === 'string'
+            ? { accessToken: '', refreshToken: tokens, accessExpiresAt: new Date(0).toISOString() }
+            : tokens;
+        await writeSecret(location, paths.cliSecret, Buffer.from(JSON.stringify(secret)));
+        const record = { schemaVersion: 1, kind: 'cli-oauth', ...metadata, ...location };
+        await files.write(paths.cliRecord, json(record), 'record');
+        if (location.store === 'os')
+            await files.remove(paths.cliSecret);
+        return { store: location.store === 'os' ? (store?.kind ?? 'os') : 'file' };
+    }
+    async function readCliOAuth() {
+        const record = await readRecord(paths.cliRecord, 'cli-oauth');
+        if (!record)
+            return null;
+        const stored = (await readSecret(record, paths.cliSecret)).toString();
+        const tokens = stored.startsWith('{')
+            ? JSON.parse(stored)
+            : { accessToken: '', refreshToken: stored, accessExpiresAt: new Date(0).toISOString() };
+        if (typeof tokens.accessToken !== 'string' ||
+            typeof tokens.refreshToken !== 'string' ||
+            typeof tokens.accessExpiresAt !== 'string')
+            throw new Error('credential_record_invalid');
+        const { schemaVersion: _schema, kind: _kind, ...metadata } = record;
+        void _schema;
+        void _kind;
+        const { secretRef: _ref, secretFile: _file, ...publicMetadata } = metadata;
+        void _ref;
+        void _file;
+        return {
+            ...publicMetadata,
+            ...tokens,
+            store: record.store === 'os' ? (store?.kind ?? 'os') : 'file',
+        };
+    }
+    async function persistFamily(componentKind, response, existing) {
+        if (existing && existing.familyId !== response.id)
+            throw new Error('family_id_changed');
+        const familyPaths = credentialPaths(files.stateDir, response.id);
+        const location = await locator(`component:${response.id}`, familyPaths.secret, existing);
+        const rotationTime = now();
+        const secret = {
+            accessToken: response.access_token,
+            refreshToken: response.refresh_token,
+        };
+        await writeSecret(location, familyPaths.secret, Buffer.from(JSON.stringify(secret)));
+        const record = {
+            schemaVersion: 1,
+            kind: 'component',
+            familyId: response.id,
+            componentKind,
+            scopes: response.scope.split(' ').filter(Boolean),
+            accessExpiresAt: new Date(rotationTime + response.expires_in * 1000).toISOString(),
+            refreshExpiresAt: new Date(rotationTime + response.refresh_expires_in * 1000).toISOString(),
+            lastRotationTime: new Date(rotationTime).toISOString(),
+            ...location,
+        };
+        await files.write(familyPaths.record, json(record), 'record');
+        return {
+            store: location.store,
+            familyId: record.familyId,
+            componentKind: record.componentKind,
+            scopes: record.scopes,
+            accessExpiresAt: record.accessExpiresAt,
+            refreshExpiresAt: record.refreshExpiresAt,
+            lastRotationTime: record.lastRotationTime,
+            ...secret,
+        };
+    }
+    async function putFamily(componentKind, response) {
+        const familyPaths = credentialPaths(files.stateDir, response.id);
+        const current = await readRecord(familyPaths.record, 'component');
+        return persistFamily(componentKind, response, current ?? undefined);
+    }
+    async function readFamily(familyId) {
+        const familyPaths = credentialPaths(files.stateDir, familyId);
+        const record = await readRecord(familyPaths.record, 'component');
+        if (!record)
+            return null;
+        if (record.familyId !== familyId)
+            throw new Error('credential_record_invalid');
+        const secret = JSON.parse((await readSecret(record, familyPaths.secret)).toString());
+        if (typeof secret.accessToken !== 'string' || typeof secret.refreshToken !== 'string')
+            throw new Error('credential_record_invalid');
+        const { schemaVersion: _schema, kind: _kind, ...metadata } = record;
+        void _schema;
+        void _kind;
+        const { secretRef: _ref, secretFile: _file, ...publicMetadata } = metadata;
+        void _ref;
+        void _file;
+        return { ...publicMetadata, ...secret };
+    }
+    async function requestRotation(familyId, request) {
+        const started = now();
+        let lostResponseRetried = false;
+        let retryableAttempt = 0;
+        while (true) {
+            let response;
+            try {
+                response = await request();
+            }
+            catch {
+                if (lostResponseRetried)
+                    return action(familyId, 'rotation_response_lost');
+                lostResponseRetried = true;
+                await sleep(250);
+                if (now() > started + 60_000)
+                    return action(familyId, 'rotation_response_lost');
+                continue;
+            }
+            if (response.status === 400 && response.body.error === 'invalid_grant')
+                return action(familyId, 'invalid_grant');
+            if (response.status === 429 || response.status >= 500) {
+                if (lostResponseRetried)
+                    return action(familyId, 'rotation_response_lost');
+                if (retryableAttempt >= retryLimit)
+                    return retryLater(familyId, response.status === 429 ? 'rate_limited' : 'server_error');
+                const delay = response.retryAfterMs ?? 250 * 2 ** retryableAttempt;
+                retryableAttempt += 1;
+                await sleep(delay);
+                continue;
+            }
+            return response;
+        }
+    }
+    async function rotateStored(lockPath, missingId, read, request, decode, persist) {
+        const predecessor = await read();
+        if (!predecessor)
+            return action(missingId, 'family_missing');
+        return withLock(lockPath, options.lockWaitMs ?? 60_000, async () => {
+            const current = await read();
+            if (!current)
+                return action(predecessor.familyId, 'family_missing');
+            if (current.refreshToken !== predecessor.refreshToken)
+                return current;
+            const response = await requestRotation(current.familyId, () => request(current));
+            if ('status' in response &&
+                (response.status === 'ACTION_REQUIRED' || response.status === 'RETRY_LATER'))
+                return response;
+            if (response.status !== 200)
+                return action(current.familyId, 'error' in response.body ? response.body.error : 'rotation_refused');
+            const body = decode(response.body);
+            if (!body)
+                return action(current.familyId, 'rotation_refused');
+            try {
+                return await persist(current, body);
+            }
+            catch {
+                return action(current.familyId, 'persistence_failed');
+            }
+        });
+    }
+    function rotateLocked(familyId, transport) {
+        const familyPaths = credentialPaths(files.stateDir, familyId);
+        return rotateStored(familyPaths.record, familyId, () => readFamily(familyId), (current) => transport.rotateFamily(familyId, current.refreshToken), (body) => ('access_token' in body ? body : null), (current, body) => persistFamily(current.componentKind, body, {
+            schemaVersion: 1,
+            kind: 'component',
+            familyId: current.familyId,
+            componentKind: current.componentKind,
+            scopes: current.scopes,
+            accessExpiresAt: current.accessExpiresAt,
+            refreshExpiresAt: current.refreshExpiresAt,
+            lastRotationTime: current.lastRotationTime,
+            ...(current.store === 'os'
+                ? { store: 'os', secretRef: reference(`component:${familyId}`) }
+                : { store: 'file', secretFile: relativeSecret(familyPaths.secret) }),
+        }));
+    }
+    function rotateFamily(familyId, transport) {
+        const active = rotations.get(familyId);
+        if (active)
+            return active;
+        const rotation = rotateLocked(familyId, transport);
+        rotations.set(familyId, rotation);
+        const clear = () => {
+            if (rotations.get(familyId) === rotation)
+                rotations.delete(familyId);
+        };
+        void rotation.then(clear, clear);
+        return rotation;
+    }
+    function rotateCliLocked(transport) {
+        return rotateStored(paths.cliRecord, 'cli', readCliOAuth, (current) => transport.rotateCli(current), (body) => 'access_token' in body &&
+            typeof body.access_token === 'string' &&
+            'refresh_token' in body &&
+            typeof body.refresh_token === 'string' &&
+            'expires_in' in body &&
+            typeof body.expires_in === 'number' &&
+            'scope' in body &&
+            typeof body.scope === 'string'
+            ? body
+            : null, async (current, body) => {
+            const rotatedAt = now();
+            await putCliOAuth({
+                issuer: current.issuer,
+                clientId: current.clientId,
+                familyId: current.familyId,
+                scopes: body.scope.split(' ').filter(Boolean),
+                lastRotationTime: new Date(rotatedAt).toISOString(),
+            }, {
+                accessToken: body.access_token,
+                refreshToken: body.refresh_token,
+                accessExpiresAt: new Date(rotatedAt + body.expires_in * 1000).toISOString(),
+            });
+            const stored = await readCliOAuth();
+            if (!stored)
+                throw new Error('credential_persistence_failed');
+            return stored;
+        });
+    }
+    function rotateCli(transport) {
+        const key = 'cli';
+        const active = rotations.get(key);
+        if (active)
+            return active;
+        const rotation = rotateCliLocked(transport);
+        rotations.set(key, rotation);
+        const clear = () => {
+            if (rotations.get(key) === rotation)
+                rotations.delete(key);
+        };
+        void rotation.then(clear, clear);
+        return rotation;
+    }
+    async function withCliCredential(transport, work) {
+        let current = await readCliOAuth();
+        if (!current)
+            return action('cli', 'family_missing');
+        if (!current.accessToken || Date.parse(current.accessExpiresAt) <= now()) {
+            const rotated = await rotateCli(transport);
+            if (isFailure(rotated))
+                return rotated;
+            current = rotated;
+        }
+        const first = await work(current.accessToken);
+        if (first.status !== 401)
+            return first;
+        const rotated = await rotateCli(transport);
+        if (isFailure(rotated))
+            return rotated;
+        const second = await work(rotated.accessToken);
+        return second.status === 401 ? action(rotated.familyId, 'protected_unauthorized') : second;
+    }
+    async function removeCliOAuth() {
+        const record = await readRecord(paths.cliRecord, 'cli-oauth');
+        if (!record)
+            return;
+        await deleteSecret(record, paths.cliSecret);
+        await files.remove(paths.cliRecord);
+    }
+    async function withCredential(familyId, transport, work) {
+        let current = await readFamily(familyId);
+        if (!current)
+            return action(familyId, 'family_missing');
+        if (!current.accessToken || Date.parse(current.accessExpiresAt) <= now()) {
+            const rotated = await rotateFamily(familyId, transport);
+            if (isFailure(rotated))
+                return rotated;
+            current = rotated;
+        }
+        const first = await work(current.accessToken);
+        if (first.status !== 401)
+            return first;
+        const rotated = await rotateFamily(familyId, transport);
+        if (isFailure(rotated))
+            return rotated;
+        const second = await work(rotated.accessToken);
+        return second.status === 401 ? action(familyId, 'protected_unauthorized') : second;
+    }
+    async function removeFamily(familyId) {
+        const familyPaths = credentialPaths(files.stateDir, familyId);
+        const record = await readRecord(familyPaths.record, 'component');
+        if (!record)
+            return;
+        await deleteSecret(record, familyPaths.secret);
+        await files.remove(familyPaths.record);
+    }
+    async function revokeFamily(familyId, transport) {
+        const current = await readFamily(familyId);
+        if (!current)
+            return action(familyId, 'family_missing');
+        const response = await transport.revokeFamily(familyId, current.refreshToken);
+        if (response.status === 429)
+            return retryLater(familyId, 'rate_limited');
+        if (response.status >= 500)
+            return retryLater(familyId, 'server_error');
+        if (response.status !== 200)
+            return action(familyId, 'error' in response.body ? response.body.error : 'revoke_refused');
+        await removeFamily(familyId);
+        return { status: 'revoked', familyId };
+    }
+    async function rootKey() {
+        return withLock(paths.rootRecord, options.lockWaitMs ?? 60_000, async () => {
+            const record = await readRecord(paths.rootRecord, 'root-binding');
+            if (record) {
+                const key = await readSecret(record, paths.rootSecret);
+                if (!key || key.length !== 32)
+                    throw new Error('root_binding_key_invalid');
+                return key;
+            }
+            const location = await locator('root-binding', paths.rootSecret);
+            const key = randomBytes(32);
+            await writeSecret(location, paths.rootSecret, key);
+            await files.write(paths.rootRecord, json({ schemaVersion: 1, kind: 'root-binding', ...location }), 'record');
+            return key;
+        });
+    }
+    async function hmacRootBinding(version, input) {
+        if (version !== 1)
+            throw new Error('unsupported_root_binding_version');
+        const key = await rootKey();
+        return { version, hmac: createHmac('sha256', key).update(input).digest('base64url') };
+    }
+    async function forget() {
+        const cli = await readRecord(paths.cliRecord, 'cli-oauth');
+        const componentFamilyIds = [];
+        for (const name of await files.list(paths.familyRecords)) {
+            const recordPath = join(paths.familyRecords, name);
+            const record = await readRecord(recordPath, 'component');
+            if (!record)
+                continue;
+            componentFamilyIds.push(record.familyId);
+            await removeFamily(record.familyId);
+        }
+        if (cli) {
+            await deleteSecret(cli, paths.cliSecret);
+            await files.remove(paths.cliRecord);
+        }
+        const root = await readRecord(paths.rootRecord, 'root-binding');
+        if (root) {
+            await deleteSecret(root, paths.rootSecret);
+            await files.remove(paths.rootRecord);
+        }
+        await files.removeEmptyDirectories([
+            paths.familySecrets,
+            paths.familyRecords,
+            paths.secrets,
+            paths.records,
+            paths.root,
+        ]);
+        return {
+            status: 'forgotten',
+            retainedServerSide: {
+                ...(cli ? { cliFamilyId: cli.familyId } : {}),
+                componentFamilyIds: componentFamilyIds.sort(),
+            },
+        };
+    }
+    return {
+        putCliOAuth,
+        readCliOAuth,
+        rotateCli,
+        withCliCredential,
+        removeCliOAuth,
+        putFamily,
+        readFamily,
+        rotateFamily,
+        withCredential,
+        revokeFamily,
+        forget,
+        hmacRootBinding,
+    };
+}
+/** Shared CLI/hook backend selection; component records keep their recorded backend. */
+export function createLocalCredentialAdapter(options = {}) {
+    return createCredentialAdapter({
+        ...options,
+        secretStore: options.secretStore ?? osSecretStore(),
+    });
+}
+const hookFamilies = new Map();
+/** Family handles contain no tokens. Legacy keys are considered only without a family. */
+export function resolveHookCredential(legacyKey, server, env = process.env, argv = process.argv.slice(2)) {
+    const index = argv.indexOf('--credential-family');
+    const familyId = (index >= 0 ? argv[index + 1]?.trim() : '') || env.MNEMONIK_HOOK_FAMILY?.trim();
+    if (!familyId)
+        return legacyKey;
+    const key = JSON.stringify([server, familyId]);
+    let family = hookFamilies.get(key);
+    if (!family) {
+        family = {
+            familyId,
+            server,
+            unavailable: false,
+            credentials: createLocalCredentialAdapter({ lockWaitMs: 2_000, retryLimit: 0 }),
+        };
+        hookFamilies.set(key, family);
+    }
+    return family;
+}
+/** Preserve each caller's wire body and budget; share rotation and failure state with bound context. */
+export async function fetchWithHookCredential(credential, url, init) {
+    const send = (token) => fetch(url, {
+        ...init,
+        headers: { ...init.headers, authorization: `Bearer ${token}` },
+    });
+    if (typeof credential === 'string')
+        return send(credential);
+    const unavailable = () => new Response('{"ok":false}', { status: 403 });
+    if (!credential || credential.unavailable)
+        return unavailable();
+    try {
+        const result = await credential.credentials.withCredential(credential.familyId, {
+            rotateFamily: async (id, token) => {
+                const response = await fetch(`${credential.server}/api/v1/component-credentials/${encodeURIComponent(id)}/rotate`, {
+                    method: 'POST',
+                    headers: { 'content-type': 'application/json', authorization: `Bearer ${token}` },
+                    body: '{}',
+                    signal: init.signal
+                        ? AbortSignal.any([init.signal, AbortSignal.timeout(2_000)])
+                        : AbortSignal.timeout(2_000),
+                });
+                return {
+                    status: response.status,
+                    body: await response.json(),
+                };
+            },
+            revokeFamily: async () => {
+                throw new Error('unused');
+            },
+        }, async (token) => {
+            const response = await send(token);
+            return { status: response.status, body: response };
+        });
+        if (typeof result.status === 'number' && 'body' in result)
+            return result.body;
+        credential.unavailable ||= result.reason === 'invalid_grant';
+    }
+    catch (error) {
+        // Only explicit revocation/expiry disables the family; a rejected route is call-local.
+        credential.unavailable ||= error?.code === 'invalid_grant';
+    }
+    if (!credential.diagnosed)
+        process.stderr.write('mnemonik-hook: credentials unavailable - fail-open.\n');
+    credential.diagnosed = true;
+    return unavailable();
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAeL,oBAAoB,EACpB,iCAAiC,GAGlC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,WAAW,EACX,eAAe,EACf,cAAc,GAEf,MAAM,cAAc,CAAC;AAEtB,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,CAAC;AACzB,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,cAAc,EACd,qBAAqB,GACtB,CAAC;AAyBF,MAAM,IAAI,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAC5F,MAAM,KAAK,GAAG,CAAI,KAAa,EAAE,YAAoB,EAAK,EAAE;IAC1D,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACxB,KAAqC,CAAC,aAAa,KAAK,CAAC;QACzD,KAA4B,CAAC,IAAI,KAAK,YAAY;QAEnD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,OAAO,KAAU,CAAC;AACpB,CAAC,CAAC;AACF,MAAM,IAAI,GAAG,CAAC,YAAoB,EAAE,EAAE,CACpC,IAAI,OAAO,CAAO,CAAC,cAAc,EAAE,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC;AAClF,MAAM,MAAM,GAAG,CAAC,QAAgB,EAAE,MAAc,EAAkB,EAAE,CAAC,CAAC;IACpE,MAAM,EAAE,iBAAiB;IACzB,MAAM;IACN,QAAQ;CACT,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAE,MAA4B,EAAc,EAAE,CAAC,CAAC;IAClF,MAAM,EAAE,aAAa;IACrB,MAAM;IACN,QAAQ;CACT,CAAC,CAAC;AACH,MAAM,SAAS,GAAG,CAAC,MAAc,EAAyC,EAAE,CAC1E,QAAQ,IAAI,MAAM;IAClB,CAAE,MAA8B,CAAC,MAAM,KAAK,iBAAiB;QAC1D,MAA8B,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC;AAE9D,MAAM,eAAe,GAAG,IAAI,OAAO,EAAe,CAAC;AAEnD,MAAM,UAAU,uBAAuB,CAAC,OAAO,GAA6B,EAAE;IAC5E,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,cAAc,EAAE,EAAE,CAAC,CAAC;IAC9F,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC;IACpC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwD,CAAC;IAClF,IAAI,WAAyC,CAAC;IAE9C,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,KAAK,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,CAAC,YAAY,EAAE,CAAC,sBAAsB,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,CAAC,WAAW,KAAK,KAAK;QACpB,CAAC,CAAC,KAAK;aACF,WAAW,EAAE;aACb,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;aAClB,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;YACX,IAAI,CAAC,EAAE;gBAAE,OAAO,EAAE,CAAC;YACnB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACN,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,2BAA2B,IAAI,EAAE,CAAC;IACtE,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAsB;QACrC,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;QAC7B,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QAClD,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC;QAC9E,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;KACvD,CAAC;IACF,MAAM,SAAS,GAAsB;QACnC,KAAK,EAAE,IAAI;QACX,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YACxB,IAAI,CAAC,CAAC,MAAM,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC5E,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACzC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACxC,IAAI,CAAC,CAAC,MAAM,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC5E,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YAC1B,IAAI,CAAC,CAAC,MAAM,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC5E,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;IAEF,KAAK,UAAU,OAAO,CACpB,IAAY,EACZ,IAAY,EACZ,QAAwB;QAExB,IAAI,QAAQ,EAAE,KAAK,KAAK,IAAI;YAAE,OAAO,QAAQ,CAAC;QAC9C,OAAO,IAAI,KAAK,WAAW,IAAI,CAAC,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC;YAC5D,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE;YAC7C,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,QAAuB,EAAE,IAAY,EAAE,EAAE;QACxD,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7E,OAAQ,QAAmC,CAAC,SAAS,CAAC;IACxD,CAAC,CAAC;IACF,KAAK,UAAU,WAAW,CAAC,QAAuB,EAAE,IAAY,EAAE,KAAa;QAC7E,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,QAAuB,EAAE,IAAY;QAC7D,IAAI,kBAAkB,GAAG,KAAK,CAAC;QAC/B,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;gBACjE,IAAI,KAAK;oBAAE,OAAO,KAAK,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;gBACV,kBAAkB,GAAG,IAAI,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,IAAI,kBAAkB;YAC9B,MAAM,IAAI,iCAAiC,CAAC,KAAK,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACzD,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,QAAuB,EAAE,IAAY;QAC/D,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,MAAM,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,QAAuB,EAAE,EAAE,CAC/C,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAEpD,KAAK,UAAU,UAAU,CAAI,IAAY,EAAE,IAAY;QACrD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAI,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,QAA0B,EAAE,MAA+B;QACpF,MAAM,OAAO,GAAG,MAAM,UAAU,CAAY,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,IAAI,SAAS,CAAC,CAAC;QACnF,MAAM,MAAM,GACV,OAAO,MAAM,KAAK,QAAQ;YACxB,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE;YACvF,CAAC,CAAC,MAAM,CAAC;QACb,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClF,MAAM,MAAM,GAAc,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC5F,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC3D,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI;YAAE,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7E,CAAC;IAED,KAAK,UAAU,YAAY;QACzB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAY,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,MAAM,GAAG,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtE,MAAM,MAAM,GAAmB,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;YACnD,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAoB;YACxC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1F,IACE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;YACtC,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YACvC,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ;YAE1C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC;QACpE,KAAK,OAAO,CAAC;QACb,KAAK,KAAK,CAAC;QACX,MAAM,EACJ,SAAS,EAAE,IAAI,EACf,UAAU,EAAE,KAAK,EACjB,GAAG,cAAc,EAClB,GAAG,QAIH,CAAC;QACF,KAAK,IAAI,CAAC;QACV,KAAK,KAAK,CAAC;QACX,OAAO;YACL,GAAG,cAAc;YACjB,GAAG,MAAM;YACT,KAAK,EAAE,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;SAC9D,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,aAAa,CAC1B,aAA4B,EAC5B,QAAqC,EACrC,QAAuB;QAEvB,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxF,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAa,QAAQ,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACzF,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAiB;YAC3B,WAAW,EAAE,QAAQ,CAAC,YAAY;YAClC,YAAY,EAAE,QAAQ,CAAC,aAAa;SACrC,CAAC;QACF,MAAM,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAiB;YAC3B,aAAa,EAAE,CAAC;YAChB,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,QAAQ,CAAC,EAAE;YACrB,aAAa;YACb,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACjD,eAAe,EAAE,IAAI,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;YAClF,gBAAgB,EAAE,IAAI,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;YAC3F,gBAAgB,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;YACtD,GAAG,QAAQ;SACZ,CAAC;QACF,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC9D,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,GAAG,MAAM;SACV,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,SAAS,CAAC,aAA4B,EAAE,QAAqC;QAC1F,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAe,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAChF,OAAO,aAAa,CAAC,aAAa,EAAE,QAAQ,EAAE,OAAO,IAAI,SAAS,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,QAAgB;QACxC,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAe,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAC1C,CAAC;QAClB,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YACnF,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC;QACpE,KAAK,OAAO,CAAC;QACb,KAAK,KAAK,CAAC;QACX,MAAM,EACJ,SAAS,EAAE,IAAI,EACf,UAAU,EAAE,KAAK,EACjB,GAAG,cAAc,EAClB,GAAG,QAGH,CAAC;QACF,KAAK,IAAI,CAAC;QACV,KAAK,KAAK,CAAC;QACX,OAAO,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAC1C,CAAC;IAED,KAAK,UAAU,eAAe,CAC5B,QAAgB,EAChB,OAA4C;QAE5C,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;QACtB,IAAI,mBAAmB,GAAG,KAAK,CAAC;QAChC,IAAI,gBAAgB,GAAG,CAAC,CAAC;QACzB,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,QAA8B,CAAC;YACnC,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,OAAO,EAAE,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,mBAAmB;oBAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;gBAC3E,mBAAmB,GAAG,IAAI,CAAC;gBAC3B,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBACjB,IAAI,GAAG,EAAE,GAAG,OAAO,GAAG,MAAM;oBAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;gBAChF,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,eAAe;gBACpE,OAAO,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBACtD,IAAI,mBAAmB;oBAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;gBAC3E,IAAI,gBAAgB,IAAI,UAAU;oBAChC,OAAO,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;gBACzF,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,IAAI,GAAG,GAAG,CAAC,IAAI,gBAAgB,CAAC;gBACnE,gBAAgB,IAAI,CAAC,CAAC;gBACtB,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,KAAK,UAAU,YAAY,CAIzB,QAAgB,EAChB,SAAiB,EACjB,IAAmC,EACnC,OAA+D,EAC/D,MAAuD,EACvD,OAA2D;QAE3D,MAAM,WAAW,GAAG,MAAM,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,WAAW;YAAE,OAAO,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAC7D,OAAO,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,IAAI,MAAM,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,OAAO;gBAAE,OAAO,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YACpE,IAAI,OAAO,CAAC,YAAY,KAAK,WAAW,CAAC,YAAY;gBAAE,OAAO,OAAO,CAAC;YACtE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACjF,IACE,QAAQ,IAAI,QAAQ;gBACpB,CAAC,QAAQ,CAAC,MAAM,KAAK,iBAAiB,IAAI,QAAQ,CAAC,MAAM,KAAK,aAAa,CAAC;gBAE5E,OAAO,QAAQ,CAAC;YAClB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACzB,OAAO,MAAM,CACX,OAAO,CAAC,QAAQ,EAChB,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,CACpE,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,IAAI;gBAAE,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;YAC/D,IAAI,CAAC;gBACH,OAAO,MAAM,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;YACxD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,YAAY,CAAC,QAAgB,EAAE,SAA8B;QACpE,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC9D,OAAO,YAAY,CACjB,WAAW,CAAC,MAAM,EAClB,QAAQ,EACR,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAC1B,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,EACnE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAChD,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAChB,aAAa,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,EAAE;YACzC,aAAa,EAAE,CAAC;YAChB,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI;gBACxB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,aAAa,QAAQ,EAAE,CAAC,EAAE;gBAChE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;SACvE,CAAC,CACL,CAAC;IACJ,CAAC;IAED,SAAS,YAAY,CAAC,QAAgB,EAAE,SAA8B;QACpE,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,MAAM;YAAE,OAAO,MAAiC,CAAC;QACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACnD,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ;gBAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvE,CAAC,CAAC;QACF,KAAK,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,SAAS,eAAe,CAAC,SAAiC;QACxD,OAAO,YAAY,CACjB,KAAK,CAAC,SAAS,EACf,KAAK,EACL,YAAY,EACZ,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,EACzC,CAAC,IAAI,EAAE,EAAE,CACP,cAAc,IAAI,IAAI;YACtB,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YACrC,eAAe,IAAI,IAAI;YACvB,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;YACtC,YAAY,IAAI,IAAI;YACpB,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACnC,OAAO,IAAI,IAAI;YACf,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAC5B,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,EACV,KAAK,EAAE,OAAO,EAAE,IAAsB,EAAE,EAAE;YACxC,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;YACxB,MAAM,WAAW,CACf;gBACE,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC7C,gBAAgB,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;aACpD,EACD;gBACE,WAAW,EAAE,IAAI,CAAC,YAAY;gBAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;gBAChC,eAAe,EAAE,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;aAC5E,CACF,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAC9D,OAAO,MAAM,CAAC;QAChB,CAAC,CACF,CAAC;IACJ,CAAC;IAED,SAAS,SAAS,CAChB,SAAiC;QAEjC,MAAM,GAAG,GAAG,KAAK,CAAC;QAClB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,MAAM;YAAE,OAAO,MAAmE,CAAC;QACvF,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QAC5C,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ;gBAAE,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,CAAC,CAAC;QACF,KAAK,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,UAAU,iBAAiB,CAC9B,SAAiC,EACjC,IAAuD;QAEvD,IAAI,OAAO,GAAG,MAAM,YAAY,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC;YACzE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;YAC3C,IAAI,SAAS,CAAC,OAAO,CAAC;gBAAE,OAAO,OAAO,CAAC;YACvC,OAAO,GAAG,OAAO,CAAC;QACpB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,SAAS,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7F,CAAC;IAED,KAAK,UAAU,cAAc;QAC3B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAY,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,UAAU,cAAc,CAC3B,QAAgB,EAChB,SAA8B,EAC9B,IAAuD;QAEvD,IAAI,OAAO,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC;YACzE,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACxD,IAAI,SAAS,CAAC,OAAO,CAAC;gBAAE,OAAO,OAAO,CAAC;YACvC,OAAO,GAAG,OAAO,CAAC;QACpB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACxD,IAAI,SAAS,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACrF,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,QAAgB;QAC1C,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAe,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,SAA8B;QAC1E,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAC9E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,UAAU,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACzE,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO,UAAU,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACxE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YACzB,OAAO,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAC7F,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,SAAkB,EAAE,QAAQ,EAAE,CAAC;IAClD,CAAC;IAED,KAAK,UAAU,OAAO;QACpB,OAAO,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,MAAM,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAa,KAAK,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAC9E,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;gBACvD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBAC3E,OAAO,GAAG,CAAC;YACb,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YACjE,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;YAC5B,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YACnD,MAAM,KAAK,CAAC,KAAK,CACf,KAAK,CAAC,UAAU,EAChB,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,QAAQ,EAAuB,CAAC,EAClF,QAAQ,CACT,CAAC;YACF,OAAO,GAAG,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,eAAe,CAAC,OAAU,EAAE,KAAa;QACtD,IAAI,OAAO,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;QAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;IACxF,CAAC;IAED,KAAK,UAAU,MAAM;QACnB,MAAM,GAAG,GAAG,MAAM,UAAU,CAAY,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACtE,MAAM,kBAAkB,GAAa,EAAE,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YACzD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAe,UAAU,EAAE,WAAW,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YACzC,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAa,KAAK,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAC5E,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAC3C,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,KAAK,CAAC,sBAAsB,CAAC;YACjC,KAAK,CAAC,aAAa;YACnB,KAAK,CAAC,aAAa;YACnB,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,IAAI;SACX,CAAC,CAAC;QACH,OAAO;YACL,MAAM,EAAE,WAAoB;YAC5B,kBAAkB,EAAE;gBAClB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,kBAAkB,EAAE,kBAAkB,CAAC,IAAI,EAAE;aAC9C;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW;QACX,YAAY;QACZ,SAAS;QACT,iBAAiB;QACjB,cAAc;QACd,SAAS;QACT,UAAU;QACV,YAAY;QACZ,cAAc;QACd,YAAY;QACZ,MAAM;QACN,eAAe;KAChB,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,4BAA4B,CAAC,OAAO,GAA6B,EAAE;IACjF,OAAO,uBAAuB,CAAC;QAC7B,GAAG,OAAO;QACV,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,aAAa,EAAE;KACpD,CAAC,CAAC;AACL,CAAC;AAUD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAsB,CAAC;AAEnD,0FAA0F;AAC1F,MAAM,UAAU,qBAAqB,CACnC,SAAwB,EACxB,MAAc,EACd,GAAG,GAAsB,OAAO,CAAC,GAAG,EACpC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAE5B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACjG,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/C,IAAI,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG;YACP,QAAQ;YACR,MAAM;YACN,WAAW,EAAE,KAAK;YAClB,WAAW,EAAE,4BAA4B,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;SAChF,CAAC;QACF,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAiC,EACjC,GAAW,EACX,IAAqF;IAErF,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE,CAC7B,KAAK,CAAC,GAAG,EAAE;QACT,GAAG,IAAI;QACP,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;KAC/D,CAAC,CAAC;IACL,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,WAAW;QAAE,OAAO,WAAW,EAAE,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,cAAc,CACxD,UAAU,CAAC,QAAQ,EACnB;YACE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE;gBAChC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,UAAU,CAAC,MAAM,iCAAiC,kBAAkB,CAAC,EAAE,CAAC,SAAS,EACpF;oBACE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;oBACjF,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,IAAI,CAAC,MAAM;wBACjB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;wBAC5D,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;iBAC/B,CACF,CAAC;gBACF,OAAO;oBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE;iBACsB,CAAC;YACtD,CAAC;YACD,YAAY,EAAE,KAAK,IAAI,EAAE;gBACvB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC;SACF,EACD,KAAK,EAAE,KAAK,EAAE,EAAE;YACd,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACrD,CAAC,CACF,CAAC;QACF,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QAC9E,UAAU,CAAC,WAAW,KAAK,MAAM,CAAC,MAAM,KAAK,eAAe,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,uFAAuF;QACvF,UAAU,CAAC,WAAW,KAAM,KAAkC,EAAE,IAAI,KAAK,eAAe,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,SAAS;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAChF,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC;IAC5B,OAAO,WAAW,EAAE,CAAC;AACvB,CAAC"}

package/dist/osSecretStore.d.ts

@@ -0,0 +1,10 @@
+import { execFile as nodeExecFile } from 'node:child_process';
+import type { SecretStore } from './contracts.js';
+type Options = {
+    platform?: NodeJS.Platform;
+    execFile?: typeof nodeExecFile;
+};
+/** CLI wiring opts in. Production availability/failure is shared for this process. */
+export declare function osSecretStore(options?: Options): SecretStore | undefined;
+export {};
+//# sourceMappingURL=osSecretStore.d.ts.map

package/dist/osSecretStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"osSecretStore.d.ts","sourceRoot":"","sources":["../src/osSecretStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAGlD,KAAK,OAAO,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,YAAY,CAAA;CAAE,CAAC;AAiN9E,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,CAKxE"}