@monoes/monomindcli 1.18.6 → 1.18.7

package/dist/src/services/crash-reporter.js

@@ -0,0 +1,373 @@
+/**
+ * Crash reporter — shared across the monoes tool family.
+ *
+ * monomind's own uncaught-exception handler uses this directly. mono-agent
+ * (Go), monotask, and mono-clip (Rust) shell out to `monomind report-crash`
+ * from their own panic/recover handlers so redaction, dedup, and GitHub auth
+ * logic live in exactly one place instead of being reimplemented per language.
+ *
+ * Default: ON (files real GitHub issues on crash). Opt out with
+ * `monomind crash-reporting disable`.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync, openSync, closeSync, unlinkSync, statSync } from 'fs';
+import { homedir } from 'os';
+import { join } from 'path';
+import { createHash } from 'crypto';
+import { execFile } from 'child_process';
+import { promisify } from 'util';
+const execFileAsync = promisify(execFile);
+const STATE_DIR = join(homedir(), '.monomind');
+const CONFIG_PATH = join(STATE_DIR, 'crash-reporting.json');
+const LEDGER_PATH = join(STATE_DIR, 'crash-reports.json');
+const PENDING_DIR = join(STATE_DIR, 'pending-reports');
+const LOCK_PATH = join(STATE_DIR, 'crash-reports.lock');
+const DEDUP_WINDOW_MS = 30 * 24 * 60 * 60 * 1000; // 30 days
+// Worst-case critical section is ~28s (5s hasGhAuth + 8s upstream search + 15s
+// issue create) — stale threshold needs real margin above that so a slow-but-
+// legitimate holder never gets its lock stolen mid-operation.
+const LOCK_STALE_MS = 60 * 1000;
+const LOCK_WAIT_MS = 3 * 1000; // bounded poll for a concurrent holder to finish — closes the
+// near-simultaneous-crash race without blocking the handler for long
+const RATE_LIMIT_WINDOW_MS = 60 * 60 * 1000; // 1 hour
+const RATE_LIMIT_MAX_PER_REPO = 5; // circuit breaker independent of per-signature dedup
+function ensureStateDir() {
+    if (!existsSync(STATE_DIR))
+        mkdirSync(STATE_DIR, { recursive: true });
+}
+function readJsonSafe(path, fallback) {
+    try {
+        if (!existsSync(path))
+            return fallback;
+        return JSON.parse(readFileSync(path, 'utf8'));
+    }
+    catch {
+        return fallback;
+    }
+}
+function writeJsonSafe(path, data) {
+    try {
+        ensureStateDir();
+        writeFileSync(path, JSON.stringify(data, null, 2), 'utf8');
+    }
+    catch {
+        // best-effort — a failed write here shouldn't crash the crash reporter
+    }
+}
+export function isEnabled() {
+    const config = readJsonSafe(CONFIG_PATH, { enabled: true });
+    return config.enabled !== false;
+}
+export function setEnabled(enabled) {
+    writeJsonSafe(CONFIG_PATH, { enabled });
+}
+/**
+ * Strip obvious secrets/PII before anything gets sent to a public GitHub repo.
+ * Not a substitute for careful callers — this is a last-resort net.
+ */
+export function redact(text) {
+    let out = text;
+    const home = homedir();
+    if (home)
+        out = out.split(home).join('~');
+    const username = home.split('/').pop();
+    if (username && username.length > 2) {
+        out = out.replace(new RegExp(`\\b${username}\\b`, 'g'), '<user>');
+    }
+    // Generic path prefixes, in case a compiled binary's stack trace embeds a
+    // *different* machine's home dir (e.g. the CI runner or maintainer's build
+    // box) than the one redaction above is keyed to.
+    out = out.replace(/\/home\/[^/\s]+/g, '/home/<user>');
+    out = out.replace(/\/Users\/[^/\s]+/g, '/Users/<user>');
+    out = out.replace(/C:\\Users\\[^\\\s]+/g, 'C:\\Users\\<user>');
+    const SECRET_PATTERNS = [
+        /(?:api[_-]?key|apikey)\s*[:=]\s*['"]?[^\s'"]{8,}['"]?/gi,
+        /(?:secret|password|passwd|pwd)\s*[:=]\s*['"]?[^\s'"]{8,}['"]?/gi,
+        /(?:token|bearer)\s*[:=]\s*['"]?[^\s'"]{10,}['"]?/gi,
+        /-----BEGIN (?:RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----/g,
+        /sk-[a-zA-Z0-9]{20,}/g,
+        /ghp_[a-zA-Z0-9]{36}/g,
+        /gho_[a-zA-Z0-9]{36}/g,
+        /npm_[a-zA-Z0-9]{36}/g,
+        /AKIA[0-9A-Z]{16}/g,
+        /eyJ[a-zA-Z0-9_-]{10,}\.[a-zA-Z0-9_-]{10,}\.[a-zA-Z0-9_-]{10,}/g, // JWT
+        /[a-zA-Z][a-zA-Z0-9+.-]*:\/\/[^:\s]+:[^@\s]+@[^\s'"]+/g, // user:pass@host connection strings
+    ];
+    for (const pattern of SECRET_PATTERNS)
+        out = out.replace(pattern, '[redacted]');
+    return out;
+}
+/**
+ * Normalize a title before hashing so crashes that differ only in a varying
+ * value (an index, an ID, a byte count, an address) collapse to the same
+ * signature instead of filing a fresh issue every time. Digits, hex runs,
+ * and pointer-looking addresses are stripped rather than just non-alphanumerics.
+ */
+function normalizeForSignature(title) {
+    return title
+        .toLowerCase()
+        .replace(/0x[0-9a-f]+/g, '<addr>')
+        .replace(/\b[0-9a-f]{8,}\b/g, '<hex>')
+        .replace(/\d+/g, '<n>')
+        .replace(/[^a-z0-9<>]+/g, ' ')
+        .trim();
+}
+export function computeSignature(repo, title) {
+    const normalized = normalizeForSignature(title);
+    return createHash('sha1').update(`${repo}:${normalized}`).digest('hex').slice(0, 16);
+}
+function loadLedger() {
+    const raw = readJsonSafe(LEDGER_PATH, {});
+    // Defensive defaults — also covers the pre-rate-limiting ledger format
+    // (a flat signature->entry map with no `bySignature` wrapper).
+    return { bySignature: raw.bySignature ?? {}, filedAtByRepo: raw.filedAtByRepo ?? {} };
+}
+function saveLedger(ledger) {
+    writeJsonSafe(LEDGER_PATH, ledger);
+}
+function checkLedger(ledger, signature) {
+    const entry = ledger.bySignature[signature];
+    if (!entry)
+        return null;
+    if (Date.now() - entry.reportedAt > DEDUP_WINDOW_MS)
+        return null;
+    return entry;
+}
+/** True if this repo has already hit the rolling-window issue-filing cap — an
+ * independent circuit breaker for the case where per-signature dedup is
+ * defeated by a crash message that varies every time (e.g. a hot-loop panic
+ * with a different index/value in the message on every iteration). */
+function isRateLimited(ledger, repo) {
+    const recent = (ledger.filedAtByRepo[repo] ?? []).filter(t => Date.now() - t < RATE_LIMIT_WINDOW_MS);
+    return recent.length >= RATE_LIMIT_MAX_PER_REPO;
+}
+/** Records a dedup entry. Only counts against the rate-limit budget when
+ * `countsTowardRateLimit` is true — recognizing an already-filed upstream
+ * issue isn't new noise on the repo and shouldn't consume the same budget
+ * that's meant to cap genuinely new issue creation. */
+function recordFiled(ledger, signature, repo, url, countsTowardRateLimit) {
+    ledger.bySignature[signature] = { url, repo, reportedAt: Date.now() };
+    if (countsTowardRateLimit) {
+        const recent = (ledger.filedAtByRepo[repo] ?? []).filter(t => Date.now() - t < RATE_LIMIT_WINDOW_MS);
+        recent.push(Date.now());
+        ledger.filedAtByRepo[repo] = recent;
+    }
+}
+function sleep(ms) {
+    return new Promise(resolve => setTimeout(resolve, ms));
+}
+/** Tries once to atomically create the lock file with an ownership token. */
+function tryAcquireOnce(token) {
+    ensureStateDir();
+    try {
+        const fd = openSync(LOCK_PATH, 'wx');
+        writeFileSync(fd, token);
+        closeSync(fd);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Best-effort advisory lock around the ledger's check-then-write sequence,
+ * to close the race where two near-simultaneous crashes (e.g. a supervisor
+ * restarting a process that panics on every startup) both pass the dedup
+ * check before either records its result, filing duplicate issues.
+ *
+ * Returns an ownership token if acquired (pass to releaseLock so it only ever
+ * removes its OWN lock, never one a stale-recovery elsewhere already
+ * re-acquired), or null if not acquired — callers proceed unlocked rather
+ * than block indefinitely, since a lock miss only reopens the same race this
+ * exists to narrow, not something worth ever hanging a crash handler over.
+ */
+async function acquireLock() {
+    const token = `${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
+    if (tryAcquireOnce(token))
+        return token;
+    // Bounded poll: closes the race for genuinely-simultaneous crashes (the
+    // common real case — e.g. two crash handlers firing within the same
+    // second) without blocking the handler for the full worst-case critical
+    // section duration.
+    const deadline = Date.now() + LOCK_WAIT_MS;
+    while (Date.now() < deadline) {
+        await sleep(150);
+        if (tryAcquireOnce(token))
+            return token;
+    }
+    // Still held — check staleness (crashed holder that never released it).
+    try {
+        const age = Date.now() - statSync(LOCK_PATH).mtimeMs;
+        if (age > LOCK_STALE_MS) {
+            unlinkSync(LOCK_PATH);
+            if (tryAcquireOnce(token))
+                return token;
+        }
+    }
+    catch {
+        // lock disappeared or another race — fall through to unlocked
+    }
+    return null;
+}
+function releaseLock(token) {
+    if (!token)
+        return;
+    try {
+        if (readFileSync(LOCK_PATH, 'utf8') === token)
+            unlinkSync(LOCK_PATH);
+        // else: someone else's lock (ours was stolen after going stale) — leave it alone
+    }
+    catch {
+        // already gone — fine
+    }
+}
+async function hasGhAuth() {
+    try {
+        await execFileAsync('gh', ['auth', 'status'], { timeout: 5000 });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Best-effort — checks if an open issue with this exact title already exists upstream. */
+async function findExistingUpstreamIssue(repo, title) {
+    try {
+        // title passed as a single argv element (no shell involved) — a literal
+        // `"` inside it can still break the `in:title` search-string parsing on
+        // GitHub's side, which just degrades to "no match found", not a security issue.
+        const { stdout } = await execFileAsync('gh', ['issue', 'list', '-R', repo, '--search', `"${title}" in:title`, '--json', 'url,title', '--limit', '5'], { timeout: 8000 });
+        const issues = JSON.parse(stdout);
+        const match = issues.find(i => i.title === title);
+        return match?.url ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+async function createIssueViaGh(repo, title, body) {
+    const { stdout } = await execFileAsync('gh', ['issue', 'create', '-R', repo, '--title', title, '--body', body], { timeout: 15000 });
+    return stdout.trim().split('\n').pop() ?? stdout.trim();
+}
+async function createIssueViaToken(repo, title, body, token) {
+    const res = await fetch(`https://api.github.com/repos/${repo}/issues`, {
+        method: 'POST',
+        headers: {
+            Authorization: `token ${token}`,
+            Accept: 'application/vnd.github+json',
+            'Content-Type': 'application/json',
+            'User-Agent': 'monomind-crash-reporter',
+        },
+        body: JSON.stringify({ title, body }),
+        signal: AbortSignal.timeout(15000),
+    });
+    if (!res.ok)
+        throw new Error(`GitHub API ${res.status}: ${await res.text()}`);
+    const json = (await res.json());
+    return json.html_url;
+}
+function saveLocally(repo, title, body) {
+    ensureStateDir();
+    if (!existsSync(PENDING_DIR))
+        mkdirSync(PENDING_DIR, { recursive: true });
+    const slug = title.toLowerCase().replace(/[^a-z0-9]+/g, '-').slice(0, 60);
+    const path = join(PENDING_DIR, `${Date.now()}-${slug}.md`);
+    writeFileSync(path, `# ${title}\n\nRepo: ${repo}\n\n${body}\n`, 'utf8');
+    return path;
+}
+/**
+ * Report a crash. Never throws — always resolves to a result the caller can
+ * log and move on from, since this runs inside a crash handler. Every step
+ * is async (no synchronous blocking child-process calls) so a caller racing
+ * this against a timeout (e.g. monomind's own uncaughtException handler)
+ * gets a bound that's actually enforceable.
+ */
+export async function reportCrash(input) {
+    let lockToken = null;
+    try {
+        if (!isEnabled()) {
+            return { status: 'disabled', message: 'Crash reporting is disabled (monomind crash-reporting enable to turn back on).' };
+        }
+        const title = redact(input.title).slice(0, 250);
+        const body = redact(input.body).slice(0, 60_000);
+        // Run caller-supplied signatures through the same digit/hex/address
+        // normalization as derived ones — otherwise an explicit --signature that
+        // itself embeds a varying value reopens the dedup-defeat bug this was
+        // meant to fix.
+        const signature = input.signature
+            ? createHash('sha1').update(`${input.repo}:${normalizeForSignature(redact(input.signature))}`).digest('hex').slice(0, 16)
+            : computeSignature(input.repo, title);
+        // Bounded wait — closes the near-simultaneous-crash race without ever
+        // blocking the handler for long; proceeds unlocked if still contended.
+        lockToken = await acquireLock();
+        let ledger = loadLedger();
+        const existing = checkLedger(ledger, signature);
+        if (existing) {
+            return { status: 'duplicate', url: existing.url, message: `Already reported: ${existing.url}` };
+        }
+        if (isRateLimited(ledger, input.repo)) {
+            return {
+                status: 'rate-limited',
+                message: `Already filed ${RATE_LIMIT_MAX_PER_REPO}+ crash issues on ${input.repo} in the last hour — suppressing further auto-reports to avoid spamming the repo. Saved locally instead.`,
+                path: saveLocally(input.repo, title, body),
+            };
+        }
+        const upstreamUrl = await findExistingUpstreamIssue(input.repo, title);
+        if (upstreamUrl) {
+            ledger = loadLedger();
+            recordFiled(ledger, signature, input.repo, upstreamUrl, false);
+            saveLedger(ledger);
+            return { status: 'duplicate', url: upstreamUrl, message: `Matching issue already exists upstream: ${upstreamUrl}` };
+        }
+        // Try gh CLI, then GITHUB_TOKEN, falling back to a local save on ANY
+        // failure in either path (not just "no auth found") — a transient
+        // network/API error shouldn't silently drop the report.
+        if (await hasGhAuth()) {
+            try {
+                const url = await createIssueViaGh(input.repo, title, body);
+                ledger = loadLedger();
+                recordFiled(ledger, signature, input.repo, url, true);
+                saveLedger(ledger);
+                return { status: 'created', url, message: `Filed: ${url}` };
+            }
+            catch (error) {
+                const path = saveLocally(input.repo, title, body);
+                return {
+                    status: 'saved-locally',
+                    path,
+                    message: `gh issue create failed (${error instanceof Error ? error.message : String(error)}); saved locally to ${path}`,
+                };
+            }
+        }
+        const token = process.env.GITHUB_TOKEN;
+        if (token) {
+            try {
+                const url = await createIssueViaToken(input.repo, title, body, token);
+                ledger = loadLedger();
+                recordFiled(ledger, signature, input.repo, url, true);
+                saveLedger(ledger);
+                return { status: 'created', url, message: `Filed: ${url}` };
+            }
+            catch (error) {
+                const path = saveLocally(input.repo, title, body);
+                return {
+                    status: 'saved-locally',
+                    path,
+                    message: `GitHub API issue creation failed (${error instanceof Error ? error.message : String(error)}); saved locally to ${path}`,
+                };
+            }
+        }
+        const path = saveLocally(input.repo, title, body);
+        return {
+            status: 'saved-locally',
+            path,
+            message: `No GitHub auth found (gh CLI or GITHUB_TOKEN). Report saved to ${path} — file it yourself with: gh issue create -R ${input.repo} --title "..." --body-file "${path}"`,
+        };
+    }
+    catch (error) {
+        return { status: 'error', message: error instanceof Error ? error.message : String(error) };
+    }
+    finally {
+        releaseLock(lockToken);
+    }
+}
+//# sourceMappingURL=crash-reporter.js.map

package/dist/src/services/crash-reporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crash-reporter.js","sourceRoot":"","sources":["../../../src/services/crash-reporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACnH,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;AAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;AAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;AACvD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;AAExD,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,UAAU;AAC5D,+EAA+E;AAC/E,8EAA8E;AAC9E,8DAA8D;AAC9D,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC;AAChC,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,8DAA8D;AAC7D,qEAAqE;AACrG,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AACtD,MAAM,uBAAuB,GAAG,CAAC,CAAC,CAAC,qDAAqD;AAkCxF,SAAS,cAAc;IACrB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,YAAY,CAAI,IAAY,EAAE,QAAW;IAChD,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,QAAQ,CAAC;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,IAAa;IAChD,IAAI,CAAC;QACH,cAAc,EAAE,CAAC;QACjB,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,MAAM,MAAM,GAAG,YAAY,CAAc,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAgB;IACzC,aAAa,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,IAAI,GAAG,GAAG,IAAI,CAAC;IAEf,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,IAAI;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE1C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACvC,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,QAAQ,KAAK,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpE,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,iDAAiD;IACjD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;IACtD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;IACxD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,sBAAsB,EAAE,mBAAmB,CAAC,CAAC;IAE/D,MAAM,eAAe,GAAa;QAChC,yDAAyD;QACzD,iEAAiE;QACjE,oDAAoD;QACpD,qHAAqH;QACrH,sBAAsB;QACtB,sBAAsB;QACtB,sBAAsB;QACtB,sBAAsB;QACtB,mBAAmB;QACnB,gEAAgE,EAAE,MAAM;QACxE,uDAAuD,EAAS,oCAAoC;KACrG,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,eAAe;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAEhF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,KAAK;SACT,WAAW,EAAE;SACb,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC;SACjC,OAAO,CAAC,mBAAmB,EAAE,OAAO,CAAC;SACrC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;SACtB,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;SAC7B,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IAC1D,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,GAAG,GAAG,YAAY,CAAkB,WAAW,EAAE,EAAE,CAAC,CAAC;IAC3D,uEAAuE;IACvE,+DAA+D;IAC/D,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,UAAU,CAAC,MAAc;IAChC,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,SAAiB;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,GAAG,eAAe;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;sEAGsE;AACtE,SAAS,aAAa,CAAC,MAAc,EAAE,IAAY;IACjD,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,oBAAoB,CAAC,CAAC;IACrG,OAAO,MAAM,CAAC,MAAM,IAAI,uBAAuB,CAAC;AAClD,CAAC;AAED;;;uDAGuD;AACvD,SAAS,WAAW,CAAC,MAAc,EAAE,SAAiB,EAAE,IAAY,EAAE,GAAW,EAAE,qBAA8B;IAC/G,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACtE,IAAI,qBAAqB,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,oBAAoB,CAAC,CAAC;QACrG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACxB,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,6EAA6E;AAC7E,SAAS,cAAc,CAAC,KAAa;IACnC,cAAc,EAAE,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACrC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACzB,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,WAAW;IACxB,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,IAAI,cAAc,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAExC,wEAAwE;IACxE,oEAAoE;IACpE,wEAAwE;IACxE,oBAAoB;IACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;IAC3C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,cAAc,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAC1C,CAAC;IAED,wEAAwE;IACxE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;QACrD,IAAI,GAAG,GAAG,aAAa,EAAE,CAAC;YACxB,UAAU,CAAC,SAAS,CAAC,CAAC;YACtB,IAAI,cAAc,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC1C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAoB;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,IAAI,CAAC;QACH,IAAI,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,KAAK;YAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QACrE,iFAAiF;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,KAAK,UAAU,yBAAyB,CAAC,IAAY,EAAE,KAAa;IAClE,IAAI,CAAC;QACH,wEAAwE;QACxE,wEAAwE;QACxE,gFAAgF;QAChF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,IAAI,EACJ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,KAAK,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,EACvG,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;QACF,MAAM,MAAM,GAA0C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;QAClD,OAAO,KAAK,EAAE,GAAG,IAAI,IAAI,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa,EAAE,IAAY;IACvE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,IAAI,EACJ,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,EACjE,EAAE,OAAO,EAAE,KAAK,EAAE,CACnB,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa,EAAE,IAAY,EAAE,KAAa;IACzF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,gCAAgC,IAAI,SAAS,EAAE;QACrE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,SAAS,KAAK,EAAE;YAC/B,MAAM,EAAE,6BAA6B;YACrC,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,yBAAyB;SACxC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACrC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;KACnC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,MAAM,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyB,CAAC;IACxD,OAAO,IAAI,CAAC,QAAQ,CAAC;AACvB,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa,EAAE,IAAY;IAC5D,cAAc,EAAE,CAAC;IACjB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,KAAK,CAAC,CAAC;IAC3D,aAAa,CAAC,IAAI,EAAE,KAAK,KAAK,aAAa,IAAI,OAAO,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAuB;IACvD,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,gFAAgF,EAAE,CAAC;QAC3H,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACjD,oEAAoE;QACpE,yEAAyE;QACzE,sEAAsE;QACtE,gBAAgB;QAChB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS;YAC/B,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACzH,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAExC,sEAAsE;QACtE,uEAAuE;QACvE,SAAS,GAAG,MAAM,WAAW,EAAE,CAAC;QAEhC,IAAI,MAAM,GAAG,UAAU,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAChD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,qBAAqB,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC;QAClG,CAAC;QAED,IAAI,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,OAAO;gBACL,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,iBAAiB,uBAAuB,qBAAqB,KAAK,CAAC,IAAI,yGAAyG;gBACzL,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC;aAC3C,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvE,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,GAAG,UAAU,EAAE,CAAC;YACtB,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;YAC/D,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,2CAA2C,WAAW,EAAE,EAAE,CAAC;QACtH,CAAC;QAED,qEAAqE;QACrE,kEAAkE;QAClE,wDAAwD;QACxD,IAAI,MAAM,SAAS,EAAE,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC5D,MAAM,GAAG,UAAU,EAAE,CAAC;gBACtB,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBACtD,UAAU,CAAC,MAAM,CAAC,CAAC;gBACnB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,GAAG,EAAE,EAAE,CAAC;YAC9D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;gBAClD,OAAO;oBACL,MAAM,EAAE,eAAe;oBACvB,IAAI;oBACJ,OAAO,EAAE,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,IAAI,EAAE;iBACxH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QACvC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBACtE,MAAM,GAAG,UAAU,EAAE,CAAC;gBACtB,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBACtD,UAAU,CAAC,MAAM,CAAC,CAAC;gBACnB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,GAAG,EAAE,EAAE,CAAC;YAC9D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;gBAClD,OAAO;oBACL,MAAM,EAAE,eAAe;oBACvB,IAAI;oBACJ,OAAO,EAAE,qCAAqC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,IAAI,EAAE;iBAClI,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAClD,OAAO;YACL,MAAM,EAAE,eAAe;YACvB,IAAI;YACJ,OAAO,EAAE,kEAAkE,IAAI,gDAAgD,KAAK,CAAC,IAAI,+BAA+B,IAAI,GAAG;SAChL,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC9F,CAAC;YAAS,CAAC;QACT,WAAW,CAAC,SAAS,CAAC,CAAC;IACzB,CAAC;AACH,CAAC"}