@moxxy/plugin-channel-web 0.27.0

package/dist/channel.js

@@ -0,0 +1,595 @@
+import { createServer } from 'node:http';
+import { readFile } from 'node:fs/promises';
+import { fileURLToPath } from 'node:url';
+import * as path from 'node:path';
+import { randomBytes } from 'node:crypto';
+import { WebSocketServer } from 'ws';
+import { createAllowListResolver } from '@moxxy/sdk';
+import { bearerTokenMatches } from '@moxxy/sdk/server';
+import { EventProjector } from './projector.js';
+import { actionPrompt, clientFrameSchema } from './protocol.js';
+/** Hard cap on an inbound WS frame; anything larger is garbage, not a prompt. */
+const MAX_FRAME_BYTES = 256 * 1024;
+/** Invalid-frame warnings are rate-limited to one per this window. */
+const DROP_WARN_INTERVAL_MS = 10_000;
+/**
+ * Cap on distinct NAMED screens kept for replay. Named views replace in place
+ * (bounded by an app's screen count) but we still LRU-evict so a pathological
+ * agent that mints unbounded distinct names can't grow the map without limit.
+ */
+const MAX_REPLAY_VIEWS = 32;
+/**
+ * Replay-map slot shared by every UNNAMED view (latest wins). The leading
+ * newline guarantees no collision with an agent-chosen `<view name>` (view
+ * names can't contain control chars), so a real named screen never lands here.
+ */
+const UNNAMED_VIEW_KEY = '\n__current__';
+function isAddrInUse(err) {
+    return (!!err &&
+        typeof err === 'object' &&
+        err.code === 'EADDRINUSE');
+}
+/** Run a command and collect its stdout. Empty string on any failure. */
+async function captureStdout(cmd, args) {
+    const { spawn } = await import('node:child_process');
+    return await new Promise((resolve) => {
+        let out = '';
+        try {
+            const child = spawn(cmd, [...args], { stdio: ['ignore', 'pipe', 'ignore'] });
+            child.stdout.on('data', (b) => {
+                out += b.toString();
+            });
+            child.on('error', () => resolve(''));
+            child.on('close', () => resolve(out));
+        }
+        catch {
+            resolve('');
+        }
+    });
+}
+/** PIDs actively LISTENing on a TCP port (lsof; empty on Windows / no lsof). */
+async function pidsListeningOn(port) {
+    if (process.platform === 'win32')
+        return [];
+    const out = await captureStdout('lsof', ['-t', `-iTCP:${port}`, '-sTCP:LISTEN']);
+    const found = new Set();
+    for (const line of out.split('\n')) {
+        const n = parseInt(line.trim(), 10);
+        if (Number.isFinite(n) && n > 0)
+            found.add(n);
+    }
+    return [...found];
+}
+/** A PID's command line via `ps`. Empty when the process is gone / unknowable. */
+async function pidCommand(pid) {
+    return (await captureStdout('ps', ['-p', String(pid), '-o', 'command='])).trim();
+}
+/** Identity gate: only ever signal processes that look like moxxy's own
+ *  (CLI bin / `moxxy serve` daemon / desktop app). An unidentifiable
+ *  command line fails the gate — never kill what we can't name. */
+function looksLikeMoxxy(command) {
+    return command.length > 0 && /moxxy/i.test(command);
+}
+const realFreePortDeps = {
+    pidsListeningOn,
+    pidCommand,
+    kill: (pid, signal) => process.kill(pid, signal),
+    graceMs: 400,
+};
+/**
+ * Free a TCP port ONLY if every process holding it is a moxxy process
+ * (stale `moxxy serve` leftovers — legitimate self-healing). Returns true
+ * when a kill was attempted. Anything else holding the port (the default,
+ * 4040, is also ngrok's local-UI port!) is left alone — the caller falls
+ * back to an ephemeral port instead. SIGTERM → grace → SIGKILL.
+ */
+export async function freeTcpPortIfMoxxy(port, logger, deps = realFreePortDeps) {
+    if (process.platform === 'win32')
+        return false;
+    const pids = (await deps.pidsListeningOn(port)).filter((pid) => pid !== process.pid);
+    if (pids.length === 0)
+        return false;
+    const holders = await Promise.all(pids.map(async (pid) => ({ pid, command: await deps.pidCommand(pid) })));
+    const foreign = holders.filter((h) => !looksLikeMoxxy(h.command));
+    if (foreign.length > 0) {
+        logger?.warn?.(`port ${port} is held by non-moxxy process(es); not killing them`, {
+            holders: foreign.map((h) => `${h.pid}: ${h.command || '<unknown command>'}`),
+        });
+        return false;
+    }
+    // Re-verify identity immediately before each signal. Between the `ps`
+    // snapshot above and the kill, a holder PID can exit and be reused by an
+    // unrelated process — so re-read its command and skip any whose name no
+    // longer looks like moxxy. Narrows (can't fully close — POSIX signalling
+    // is inherently racy) the TOCTOU on the identity gate.
+    let attempted = false;
+    for (const { pid } of holders) {
+        const command = await deps.pidCommand(pid);
+        if (!looksLikeMoxxy(command))
+            continue;
+        try {
+            // Log the exact command we judged moxxy-owned before signalling, so a
+            // mis-fire on a substring-collision process is auditable after the fact.
+            logger?.warn?.('freeing port: SIGTERM to apparent stale moxxy process', { pid, command });
+            deps.kill(pid, 'SIGTERM');
+            attempted = true;
+        }
+        catch {
+            /* may already be gone */
+        }
+    }
+    if (!attempted)
+        return false;
+    await new Promise((r) => setTimeout(r, deps.graceMs ?? 400));
+    for (const { pid } of holders) {
+        // Re-check identity again before escalating to SIGKILL.
+        try {
+            deps.kill(pid, 0);
+        }
+        catch {
+            continue; /* dead — nothing to escalate */
+        }
+        const command = await deps.pidCommand(pid);
+        if (!looksLikeMoxxy(command))
+            continue;
+        try {
+            logger?.warn?.('freeing port: SIGKILL to apparent stale moxxy process', { pid, command });
+            deps.kill(pid, 'SIGKILL');
+        }
+        catch {
+            /* dead */
+        }
+    }
+    return true;
+}
+/** Where `scripts/build-web.mjs` writes the browser bundle (relative to dist/channel.js). */
+const PUBLIC_DIR = path.join(path.dirname(fileURLToPath(import.meta.url)), 'public');
+/** The path the tunnel exposes us under (e.g. `/web`), or `''` for the root. */
+export function basePathFromUrl(url) {
+    try {
+        const p = new URL(url).pathname;
+        return p === '/' ? '' : p.replace(/\/+$/, '');
+    }
+    catch {
+        return '';
+    }
+}
+/** Inject the base path into index.html so relative assets (`app.js`) resolve
+ *  under it and the client builds the right WS URL — works at root or `/web`. */
+export function injectBaseHtml(html, basePath) {
+    const inject = `<base href="${basePath}/" />` +
+        `<script>window.__MOXXY_BASE__=${JSON.stringify(basePath)}</script>`;
+    return html.replace('<!--moxxy:base-->', inject);
+}
+export class WebChannel {
+    name = 'web';
+    permissionResolver;
+    port;
+    host;
+    token;
+    logger;
+    getTunnel;
+    publishSurface;
+    publishControls;
+    server = null;
+    wss = null;
+    clients = new Set();
+    /**
+     * Built screens replayed to a newly-connected browser, keyed by logical
+     * `name`. UNNAMED views all share {@link UNNAMED_VIEW_KEY} (latest wins), so
+     * an agent that presents many unnamed views over a long session can't leak
+     * one ViewDoc per render. Named views LRU-evict at {@link MAX_REPLAY_VIEWS}.
+     */
+    views = new Map();
+    unsubscribe = null;
+    session = null;
+    busy = false;
+    controller = null;
+    tunnel = null;
+    tunnelBase = null;
+    /** Public path the surface is served under (e.g. `/web` behind the relay; `''` local). */
+    basePath = '';
+    viewSeq = 0;
+    droppedFrames = 0;
+    lastDropWarnAt = 0;
+    constructor(opts = {}) {
+        this.port = opts.port ?? 4040;
+        this.host = opts.host ?? '127.0.0.1';
+        this.token = opts.authToken ?? randomBytes(16).toString('hex');
+        this.logger = opts.logger;
+        this.getTunnel = opts.getTunnel;
+        this.publishSurface = opts.publishSurface;
+        this.publishControls = opts.publishControls;
+        // The interactive surface is the gate; tools still need an upfront
+        // allow-list (no per-call clicker). Default to present_view + the read-only
+        // fetch tools so apps can pull REAL data out of the box. Extend via
+        // config.allowedTools. (When co-attached, the PRIMARY channel's resolver
+        // governs instead — e.g. the TUI prompts per tool.)
+        const allowed = opts.allowedTools && opts.allowedTools.length > 0
+            ? [...opts.allowedTools]
+            : ['present_view', 'web_fetch', 'browser_session'];
+        this.permissionResolver = createAllowListResolver(allowed);
+    }
+    /** The local URL (token embedded). */
+    get url() {
+        return `http://${this.host}:${this.port}/?t=${this.token}`;
+    }
+    /** The URL to hand the user — the tunnel base if open, else local. */
+    get shareUrl() {
+        const base = this.tunnelBase ?? `http://${this.host}:${this.port}`;
+        return `${base}/?t=${this.token}`;
+    }
+    async start(startOpts) {
+        this.session = startOpts.session;
+        const projector = new EventProjector();
+        this.unsubscribe = startOpts.session.log.subscribe((event) => {
+            for (const frame of projector.project(event)) {
+                // Remember each screen so a browser that connects AFTER the agent built
+                // the app (the normal flow: build in TUI/Telegram → open the link) still
+                // sees it. Named screens replace in place; unnamed ones coalesce into a
+                // single latest-wins slot so the replay set stays bounded.
+                if (frame.kind === 'view')
+                    this.rememberView(frame);
+                this.broadcast(frame);
+            }
+        });
+        const server = createServer((req, res) => {
+            void this.handleHttp(req, res);
+        });
+        this.server = server;
+        // Bind FIRST: ws re-emits the http server's 'error' events on the
+        // WebSocketServer, so a WSS attached before a failed listen turns a
+        // recoverable EADDRINUSE into an unhandled 'error' → process crash.
+        await this.bindServerWithRetry(server);
+        // Validate the token at the handshake so a bad token is rejected with 401
+        // and the client never opens (the token is the only public-internet gate).
+        const wss = new WebSocketServer({
+            server,
+            // No fixed `path`: behind the relay the upgrade may arrive as `/ws` or
+            // `/<base>/ws`; verifyClient base-strips and checks it (plus the token).
+            // Frames past maxPayload are dropped at the socket layer (ws closes with
+            // 1009) instead of being buffered; onMessage applies a tighter cap.
+            maxPayload: 1024 * 1024,
+            verifyClient: (info) => {
+                const p = this.stripBase((info.req.url ?? '/').split('?')[0] ?? '/');
+                return p === '/ws' && this.validToken(info.req.url);
+            },
+        });
+        this.wss = wss;
+        wss.on('connection', (ws) => this.onConnection(ws));
+        // Never leave an EventEmitter 'error' unhandled — it would throw at the
+        // process level. Forwarded server errors after bind are log-and-survive.
+        wss.on('error', (err) => this.logger?.warn?.('web socket server error', { err: String(err) }));
+        await this.openTunnel();
+        this.publishSurface?.({ url: this.shareUrl, nextViewId: () => `v_srv_${++this.viewSeq}` });
+        this.publishControls?.({ retunnel: () => this.retunnel() });
+        const running = new Promise((resolve) => server.once('close', () => resolve()));
+        return { running, stop: () => this.stop() };
+    }
+    /**
+     * Bind the HTTP server, with recovery if the port is already in use.
+     * A stale `moxxy serve` from a prior install often leaves 4040 bound
+     * even after its unix socket has been released — if (and only if) the
+     * holder is verifiably a moxxy process we kill it and retry. Anything
+     * else (ngrok's local UI also defaults to 4040) is never signalled;
+     * we bind an ephemeral port instead and log loudly which port the
+     * surface actually got (the share URL embeds the real port either way).
+     */
+    async bindServerWithRetry(server) {
+        const tryListen = () => new Promise((resolve, reject) => {
+            const onError = (err) => {
+                server.off('listening', onListening);
+                reject(err);
+            };
+            const onListening = () => {
+                server.off('error', onError);
+                const addr = server.address();
+                if (addr && typeof addr === 'object')
+                    this.port = addr.port;
+                this.logger?.info?.('web channel listening', { url: this.url });
+                resolve();
+            };
+            server.once('error', onError);
+            server.once('listening', onListening);
+            server.listen(this.port, this.host);
+        });
+        try {
+            await tryListen();
+            return;
+        }
+        catch (err) {
+            if (!isAddrInUse(err))
+                throw err;
+        }
+        const requested = this.port;
+        const freed = await freeTcpPortIfMoxxy(requested, this.logger).catch(() => false);
+        if (freed) {
+            this.logger?.warn?.(`web channel port ${requested} was held by a stale moxxy process; freed it, retrying`);
+            try {
+                await tryListen();
+                return;
+            }
+            catch (err) {
+                if (!isAddrInUse(err))
+                    throw err;
+            }
+        }
+        // The holder is not ours to kill (or would not die) — take an
+        // ephemeral port. onListening reads back the real bound port, so
+        // this.url / shareUrl / the tunnel all carry it automatically.
+        this.port = 0;
+        await tryListen();
+        this.logger?.warn?.(`web channel port ${requested} was in use by another process; bound ephemeral port ${this.port} instead`, { requestedPort: requested, boundPort: this.port, url: this.url });
+    }
+    /**
+     * (Re-)open the tunnel via the active provider, closing any prior one FIRST so
+     * a switch never leaks a subprocess. Non-fatal: on failure (e.g. the relay
+     * not installed) we fall back to the local URL.
+     */
+    async openTunnel() {
+        if (this.tunnel) {
+            try {
+                await this.tunnel.close();
+            }
+            catch {
+                /* ignore */
+            }
+            this.tunnel = null;
+            this.tunnelBase = null;
+            this.basePath = '';
+        }
+        const provider = this.getTunnel?.() ?? null;
+        if (!provider || provider.name === 'localhost')
+            return;
+        try {
+            // Route the preview under the `web` path so the relay can multiplex it
+            // alongside the mobile bridge under one uuid subdomain.
+            this.tunnel = await provider.open({ port: this.port, host: this.host, label: 'web' });
+            this.tunnelBase = this.tunnel.url;
+            this.basePath = basePathFromUrl(this.tunnel.url);
+            this.logger?.info?.('web surface tunnel open', { provider: provider.name, url: this.shareUrl });
+        }
+        catch (err) {
+            this.logger?.warn?.('web surface tunnel failed; using local URL', { provider: provider.name, err: String(err) });
+        }
+    }
+    /** Switch tunnels live (agent's web_set_tunnel) and republish the surface URL. */
+    async retunnel() {
+        await this.openTunnel();
+        this.publishSurface?.({ url: this.shareUrl, nextViewId: () => `v_srv_${++this.viewSeq}` });
+        return this.shareUrl;
+    }
+    async stop() {
+        this.publishSurface?.(null);
+        this.publishControls?.(null);
+        this.unsubscribe?.();
+        this.unsubscribe = null;
+        this.controller?.abort();
+        if (this.tunnel) {
+            try {
+                await this.tunnel.close();
+            }
+            catch {
+                /* ignore */
+            }
+            this.tunnel = null;
+            this.tunnelBase = null;
+            this.basePath = '';
+        }
+        for (const ws of this.clients) {
+            try {
+                ws.close();
+            }
+            catch {
+                /* ignore */
+            }
+        }
+        this.clients.clear();
+        await new Promise((resolve) => (this.wss ? this.wss.close(() => resolve()) : resolve()));
+        await new Promise((resolve) => (this.server ? this.server.close(() => resolve()) : resolve()));
+    }
+    validToken(reqUrl) {
+        try {
+            // Constant-time compare so the token isn't recoverable byte-by-byte via
+            // response timing (this is the only public-internet gate).
+            const presented = new URL(reqUrl ?? '/', 'http://localhost').searchParams.get('t');
+            return bearerTokenMatches(presented, this.token);
+        }
+        catch {
+            return false;
+        }
+    }
+    /** Strip the public base path (if any) so internal routing stays root-relative.
+     *  Tolerant: handles both `/web/app.js` (relay didn't strip) and `/app.js`
+     *  (relay stripped the first request line). */
+    stripBase(pathname) {
+        const b = this.basePath;
+        if (b && (pathname === b || pathname.startsWith(`${b}/`))) {
+            const rest = pathname.slice(b.length);
+            return rest === '' ? '/' : rest;
+        }
+        return pathname;
+    }
+    async handleHttp(req, res) {
+        const pathname = this.stripBase((req.url ?? '/').split('?')[0] ?? '/');
+        if (pathname === '/v1/health') {
+            res.writeHead(200, { 'content-type': 'application/json' });
+            res.end('{"status":"ok"}');
+            return;
+        }
+        if (req.method === 'GET' && (pathname === '/' || pathname === '/index.html')) {
+            if (!this.validToken(req.url)) {
+                res.writeHead(401, { 'content-type': 'text/plain' });
+                res.end('unauthorized — open the tokenized URL the agent gave you');
+                return;
+            }
+            await this.serveFile(res, 'index.html', 'text/html; charset=utf-8');
+            return;
+        }
+        if (req.method === 'GET' && pathname === '/app.js') {
+            await this.serveFile(res, 'app.js', 'text/javascript; charset=utf-8');
+            return;
+        }
+        res.writeHead(404, { 'content-type': 'text/plain' });
+        res.end('not found');
+    }
+    /**
+     * Defense-in-depth headers for the internet-exposed surface (served over
+     * public tunnels). CSP contains any future renderer regression: scripts may
+     * only load from this origin (`'self'`) — no inline scripts — while the inline
+     * `<style>` block needs `style-src 'unsafe-inline'`; `connect-src` permits the
+     * same-origin WebSocket. `frame-ancestors 'none'` + `X-Frame-Options: DENY`
+     * stop the tokenized page from being framed (clickjacking); `Referrer-Policy:
+     * no-referrer` keeps the `?t` token out of the Referer header on agent-authored
+     * outbound links.
+     */
+    securityHeaders() {
+        return {
+            'content-security-policy': "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; " +
+                "img-src 'self' data: https:; connect-src 'self' ws: wss:; " +
+                "base-uri 'none'; form-action 'none'; frame-ancestors 'none'",
+            'referrer-policy': 'no-referrer',
+            'x-content-type-options': 'nosniff',
+            'x-frame-options': 'DENY',
+        };
+    }
+    async serveFile(res, name, contentType) {
+        try {
+            let buf = await readFile(path.join(PUBLIC_DIR, name));
+            if (name === 'index.html') {
+                buf = Buffer.from(injectBaseHtml(buf.toString('utf8'), this.basePath), 'utf8');
+            }
+            res.writeHead(200, { 'content-type': contentType, ...this.securityHeaders() });
+            res.end(buf);
+        }
+        catch {
+            // Defense-in-depth headers are unconditional — they apply to the error
+            // response too, so a missing/unreadable bundle never serves a page
+            // without the clickjacking / referrer-token protections.
+            res.writeHead(500, { 'content-type': 'text/plain', ...this.securityHeaders() });
+            res.end('web surface bundle missing — run `pnpm --filter @moxxy/plugin-channel-web build`');
+        }
+    }
+    /**
+     * Record a view frame for replay with a bounded footprint. Named views key
+     * by their name (re-render replaces in place) under an LRU bounded at
+     * {@link MAX_REPLAY_VIEWS}; unnamed views all collapse into a single
+     * latest-wins slot so an unbounded stream of unnamed renders can't leak.
+     */
+    rememberView(frame) {
+        const key = frame.name ?? UNNAMED_VIEW_KEY;
+        // Re-insert at the tail to refresh LRU recency on re-render.
+        this.views.delete(key);
+        this.views.set(key, frame);
+        while (this.views.size > MAX_REPLAY_VIEWS) {
+            const oldest = this.views.keys().next().value;
+            if (oldest === undefined)
+                break;
+            this.views.delete(oldest);
+        }
+    }
+    onConnection(ws) {
+        this.clients.add(ws);
+        ws.on('close', () => this.clients.delete(ws));
+        ws.on('message', (data) => this.onMessage(ws, data));
+        this.send(ws, { kind: 'hello' });
+        // Replay already-built screens so a browser opening the link AFTER the agent
+        // built the app sees it immediately (no "No view yet").
+        for (const frame of this.views.values())
+            this.send(ws, frame);
+    }
+    /**
+     * Handle a browser → server frame. This is a trust boundary (tunnels put
+     * it on the public internet): every frame is schema-validated before any
+     * field access, and invalid ones are dropped — a thrown error in a ws
+     * 'message' listener escalates to a process-level uncaughtException.
+     */
+    onMessage(ws, data) {
+        const raw = String(data);
+        if (raw.length > MAX_FRAME_BYTES) {
+            this.dropFrame('oversized frame');
+            return;
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch {
+            this.dropFrame('invalid JSON');
+            return;
+        }
+        const result = clientFrameSchema.safeParse(parsed);
+        if (!result.success) {
+            this.dropFrame('schema mismatch');
+            return;
+        }
+        const frame = result.data;
+        if (frame.kind === 'prompt') {
+            if (frame.text.trim())
+                void this.drive(frame.text);
+            return;
+        }
+        if (frame.kind === 'action') {
+            if (this.busy) {
+                this.send(ws, { kind: 'ack', actionId: frame.actionId, accepted: false, reason: 'busy' });
+                return;
+            }
+            this.send(ws, { kind: 'ack', actionId: frame.actionId, accepted: true });
+            void this.drive(actionPrompt(frame.action, frame.formValues));
+        }
+    }
+    /** Count a dropped inbound frame; warn at most once per window (no log spam). */
+    dropFrame(reason) {
+        this.droppedFrames += 1;
+        const now = Date.now();
+        if (now - this.lastDropWarnAt < DROP_WARN_INTERVAL_MS)
+            return;
+        this.lastDropWarnAt = now;
+        this.logger?.warn?.('web channel dropped invalid client frame(s)', {
+            reason,
+            droppedTotal: this.droppedFrames,
+        });
+    }
+    async drive(prompt) {
+        if (!this.session || this.busy)
+            return;
+        this.busy = true;
+        this.controller = new AbortController();
+        try {
+            // Rendering happens via the log subscription; we only need to drain the
+            // iterator so the turn actually executes.
+            for await (const _event of this.session.runTurn(prompt, { signal: this.controller.signal })) {
+                void _event;
+            }
+        }
+        catch (err) {
+            this.broadcast({ kind: 'status', turnId: '', phase: 'error', text: err instanceof Error ? err.message : String(err) });
+        }
+        finally {
+            this.busy = false;
+            this.controller = null;
+        }
+    }
+    broadcast(frame) {
+        const s = JSON.stringify(frame);
+        for (const ws of this.clients) {
+            if (ws.readyState === ws.OPEN) {
+                try {
+                    ws.send(s);
+                }
+                catch {
+                    /* ignore */
+                }
+            }
+        }
+    }
+    send(ws, frame) {
+        try {
+            ws.send(JSON.stringify(frame));
+        }
+        catch {
+            /* ignore */
+        }
+    }
+}
+//# sourceMappingURL=channel.js.map

package/dist/channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel.js","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AAEjG,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAkB,MAAM,IAAI,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAUvD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsC,MAAM,eAAe,CAAC;AAEpG,iFAAiF;AACjF,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,CAAC;AACnC,sEAAsE;AACtE,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,eAAe,CAAC;AAEzC,SAAS,WAAW,CAAC,GAAY;IAC/B,OAAO,CACL,CAAC,CAAC,GAAG;QACL,OAAO,GAAG,KAAK,QAAQ;QACtB,GAAyB,CAAC,IAAI,KAAK,YAAY,CACjD,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,IAA2B;IACnE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACrD,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QAC3C,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC7E,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC5B,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACtB,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YACrC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,UAAU,CAAC,GAAW;IACnC,OAAO,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACnF,CAAC;AAED;;mEAEmE;AACnE,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACtD,CAAC;AAWD,MAAM,gBAAgB,GAAiB;IACrC,eAAe;IACf,UAAU;IACV,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IAChD,OAAO,EAAE,GAAG;CACb,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,MAAmC,EACnC,OAAqB,gBAAgB;IAErC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACrF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CACxE,CAAC;IACF,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,IAAI,qDAAqD,EAAE;YAChF,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,IAAI,mBAAmB,EAAE,CAAC;SAC7E,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IACD,sEAAsE;IACtE,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,uDAAuD;IACvD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAAE,SAAS;QACvC,IAAI,CAAC;YACH,sEAAsE;YACtE,yEAAyE;YACzE,MAAM,EAAE,IAAI,EAAE,CAAC,uDAAuD,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1F,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC1B,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;IACD,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,OAAO,EAAE,CAAC;QAC9B,wDAAwD;QACxD,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,gCAAgC;QAC5C,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAAE,SAAS;QACvC,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,CAAC,uDAAuD,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1F,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AAErF,gFAAgF;AAChF,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QAChC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;iFACiF;AACjF,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,QAAgB;IAC3D,MAAM,MAAM,GACV,eAAe,QAAQ,OAAO;QAC9B,iCAAiC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;IACvE,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;AACnD,CAAC;AAoCD,MAAM,OAAO,UAAU;IACZ,IAAI,GAAG,KAAK,CAAC;IACb,kBAAkB,CAAqB;IACxC,IAAI,CAAS;IACJ,IAAI,CAAS;IACb,KAAK,CAAS;IACd,MAAM,CAA8B;IACpC,SAAS,CAAiC;IAC1C,cAAc,CAAsC;IACpD,eAAe,CAAuC;IAC/D,MAAM,GAAkB,IAAI,CAAC;IAC7B,GAAG,GAA2B,IAAI,CAAC;IAC1B,OAAO,GAAG,IAAI,GAAG,EAAa,CAAC;IAChD;;;;;OAKG;IACc,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,WAAW,GAAwB,IAAI,CAAC;IACxC,OAAO,GAAyB,IAAI,CAAC;IACrC,IAAI,GAAG,KAAK,CAAC;IACb,UAAU,GAA2B,IAAI,CAAC;IAC1C,MAAM,GAAwB,IAAI,CAAC;IACnC,UAAU,GAAkB,IAAI,CAAC;IACzC,0FAA0F;IAClF,QAAQ,GAAG,EAAE,CAAC;IACd,OAAO,GAAG,CAAC,CAAC;IACZ,aAAa,GAAG,CAAC,CAAC;IAClB,cAAc,GAAG,CAAC,CAAC;IAE3B,YAAY,OAA0B,EAAE;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;QAC5C,mEAAmE;QACnE,4EAA4E;QAC5E,oEAAoE;QACpE,yEAAyE;QACzE,oDAAoD;QACpD,MAAM,OAAO,GACX,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YAC/C,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;YACxB,CAAC,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;QACvD,IAAI,CAAC,kBAAkB,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,sCAAsC;IACtC,IAAI,GAAG;QACL,OAAO,UAAU,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;IAC7D,CAAC;IAED,sEAAsE;IACtE,IAAI,QAAQ;QACV,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,IAAI,UAAU,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACnE,OAAO,GAAG,IAAI,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAuB;QACjC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QACjC,MAAM,SAAS,GAAG,IAAI,cAAc,EAAE,CAAC;QACvC,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;YAC3D,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7C,wEAAwE;gBACxE,yEAAyE;gBACzE,wEAAwE;gBACxE,2DAA2D;gBAC3D,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;oBAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACvC,KAAK,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,kEAAkE;QAClE,oEAAoE;QACpE,oEAAoE;QACpE,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAEvC,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC;YAC9B,MAAM;YACN,uEAAuE;YACvE,yEAAyE;YACzE,yEAAyE;YACzE,oEAAoE;YACpE,UAAU,EAAE,IAAI,GAAG,IAAI;YACvB,YAAY,EAAE,CAAC,IAA8B,EAAE,EAAE;gBAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;gBACrE,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtD,CAAC;SACF,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;QACpD,wEAAwE;QACxE,yEAAyE;QACzE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,yBAAyB,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/F,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,IAAI,CAAC,cAAc,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,eAAe,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAE5D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACtF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IAC9C,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,mBAAmB,CAAC,MAAuC;QACvE,MAAM,SAAS,GAAG,GAAkB,EAAE,CACpC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpC,MAAM,OAAO,GAAG,CAAC,GAAU,EAAQ,EAAE;gBACnC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;gBACrC,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC;YACF,MAAM,WAAW,GAAG,GAAS,EAAE;gBAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,IAAI,CAAC,IAAI,GAAI,IAAoB,CAAC,IAAI,CAAC;gBAC7E,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,uBAAuB,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAChE,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEL,IAAI,CAAC;YACH,MAAM,SAAS,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;QACnC,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QAClF,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB,oBAAoB,SAAS,wDAAwD,CACtF,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,SAAS,EAAE,CAAC;gBAClB,OAAO;YACT,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC;YACnC,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,iEAAiE;QACjE,+DAA+D;QAC/D,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QACd,MAAM,SAAS,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB,oBAAoB,SAAS,wDAAwD,IAAI,CAAC,IAAI,UAAU,EACxG,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAClE,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,UAAU;QACtB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,IAAI,CAAC;QAC5C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO;QACvD,IAAI,CAAC;YACH,uEAAuE;YACvE,wDAAwD;YACxD,IAAI,CAAC,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACtF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAClC,IAAI,CAAC,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,yBAAyB,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,4CAA4C,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnH,CAAC;IACH,CAAC;IAED,kFAAkF;IAC1E,KAAK,CAAC,QAAQ;QACpB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,IAAI,CAAC,cAAc,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3F,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,IAAI,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACrB,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC/F,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACvG,CAAC;IAEO,UAAU,CAAC,MAA0B;QAC3C,IAAI,CAAC;YACH,wEAAwE;YACxE,2DAA2D;YAC3D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnF,OAAO,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;mDAE+C;IACvC,SAAS,CAAC,QAAgB;QAChC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACtC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAClC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,GAAoB,EAAE,GAAmB;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QACvE,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC9B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,aAAa,CAAC,EAAE,CAAC;YAC7E,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;gBACrD,GAAG,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YACD,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,YAAY,EAAE,0BAA0B,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnD,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,gCAAgC,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACvB,CAAC;IAED;;;;;;;;;OASG;IACK,eAAe;QACrB,OAAO;YACL,yBAAyB,EACvB,2EAA2E;gBAC3E,4DAA4D;gBAC5D,6DAA6D;YAC/D,iBAAiB,EAAE,aAAa;YAChC,wBAAwB,EAAE,SAAS;YACnC,iBAAiB,EAAE,MAAM;SAC1B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,GAAmB,EAAE,IAAY,EAAE,WAAmB;QAC5E,IAAI,CAAC;YACH,IAAI,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;YACtD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1B,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;YACjF,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;YAC/E,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,mEAAmE;YACnE,yDAAyD;YACzD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;YAChF,GAAG,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,YAAY,CAAC,KAA6C;QAChE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,gBAAgB,CAAC;QAC3C,6DAA6D;QAC7D,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,gBAAgB,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC9C,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,EAAa;QAChC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrB,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9C,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACjC,6EAA6E;QAC7E,wDAAwD;QACxD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IAED;;;;;OAKG;IACK,SAAS,CAAC,EAAa,EAAE,IAAa;QAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,GAAG,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YACjC,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAgB,MAAM,CAAC,IAAI,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC1F,OAAO;YACT,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,KAAK,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,iFAAiF;IACzE,SAAS,CAAC,MAAc;QAC9B,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,cAAc,GAAG,qBAAqB;YAAE,OAAO;QAC9D,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC;QAC1B,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,6CAA6C,EAAE;YACjE,MAAM;YACN,YAAY,EAAE,IAAI,CAAC,aAAa;SACjC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,MAAc;QAChC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO;QACvC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,wEAAwE;YACxE,0CAA0C;YAC1C,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;gBAC5F,KAAK,MAAM,CAAC;YACd,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;YAClB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,KAAkB;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;gBAC9B,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY;gBACd,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,EAAa,EAAE,KAAkB;QAC5C,IAAI,CAAC;YACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;CACF"}