@muhkoo/connect 0.14.0-alpha.1 → 0.14.0-alpha.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (10) hide show
  1. package/package.json +1 -1
  2. package/dist/browser/blockEngine.worker.js +0 -349
  3. package/dist/browser/blockEngine.worker.js.map +0 -1
  4. package/dist/browser/index.js +0 -15716
  5. package/dist/browser/index.js.map +0 -1
  6. package/dist/connect.d.ts +0 -7518
  7. package/dist/server/index.js +0 -15917
  8. package/dist/server/index.js.map +0 -1
  9. package/dist/workers/index.js +0 -2670
  10. package/dist/workers/index.js.map +0 -1
package/dist/browser/index.js.map DELETED
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.js","sources":["../../src/utilities/Logger.ts","../../src/utilities/bytes.ts","../../src/utilities/index.ts","../../src/messaging/Message.ts","../../src/messaging/Packet.ts","../../src/messaging/decorators.ts","../../src/messaging/index.ts","../../src/types/zk.ts","../../src/crypto/primitives/subtle.ts","../../src/crypto/primitives/random.ts","../../src/crypto/primitives/aes-gcm.ts","../../src/crypto/primitives/kdf.ts","../../src/crypto/KeyStore.ts","../../src/crypto/DoubleRatchet.ts","../../src/crypto/ZeroKnowledge.ts","../../src/crypto/Authenticator.ts","../../src/crypto/DoubleRatchetManager.ts","../../src/crypto/ChunkCipher.ts","../../src/crypto/PassphraseWrap.ts","../../src/events/EventCore.ts","../../src/sessions/EncryptedSession.ts","../../src/transport/WSTransport.ts","../../src/sessions/BroadcastChannel.ts","../../src/workers/groth16-verifier.ts","../../src/personal/PersonalSpaceClient.ts","../../src/storage/types.ts","../../src/storage/encoding/ReedSolomon/wasm/rs.ts","../../src/storage/encoding/ReedSolomon/ReedSolomonCodec.ts","../../src/storage/transport/ShardClient.ts","../../src/storage/FileStorage.ts","../../src/storage/transport/SharedSpaceClient.ts","../../src/auth/AuthClient.ts","../../src/auth/identity.ts","../../src/auth/poseidon.ts","../../src/auth/proof.ts","../../src/auth/keys.ts","../../src/auth/vault.ts","../../src/auth/hostedHandoff.ts","../../src/version.ts","../../src/core/HttpClient.ts","../../src/core/Session.ts","../../src/auth/recoveryPhrase.ts","../../src/auth/oprf.ts","../../src/auth/gatedFactor.ts","../../src/auth/passkey.ts","../../src/auth/deviceStore.ts","../../src/core/namespaces/HostedAuth.ts","../../src/core/namespaces/AuthNamespace.ts","../../src/crypto/StorageCipher.ts","../../src/core/namespaces/KvNamespace.ts","../../src/core/namespaces/DbNamespace.ts","../../src/core/namespaces/FileNamespace.ts","../../src/spaces/SpaceCipher.ts","../../src/spaces/SpacePacketCipher.ts","../../src/spaces/Space.ts","../../src/core/namespaces/MessageNamespace.ts","../../src/spaces/SpaceKeyring.ts","../../src/spaces/KeyringClient.ts","../../src/offline/crdt/MessageLog.ts","../../src/offline/SpaceCache.ts","../../src/offline/cache/ShardCache.ts","../../src/p2p/PeerExchange.ts","../../src/p2p/signaling/SpaceSignaler.ts","../../src/p2p/transport/WebRtcTransport.ts","../../src/p2p/transport/PeerTransport.ts","../../src/p2p/worker/protocol.ts","../../src/p2p/worker/blockEngine.ts","../../src/p2p/worker/engineHost.ts","../../src/p2p/worker/engineClient.ts","../../src/p2p/PeerNetwork.ts","../../src/p2p/detect.ts","../../src/core/namespaces/SpaceNamespace.ts","../../src/core/namespaces/AgentsNamespace.ts","../../src/core/namespaces/FunctionsNamespace.ts","../../src/core/namespaces/AccessTokensNamespace.ts","../../src/vfs/types.ts","../../src/vfs/recordCipher.ts","../../src/vfs/paths.ts","../../src/vfs/glob.ts","../../src/vfs/VfsNamespace.ts","../../src/vcs/hash.ts","../../src/vcs/merge3.ts","../../src/vcs/types.ts","../../src/vcs/VcsNamespace.ts","../../src/core/ChatKeyVault.ts","../../src/offline/clock/HlcTimestamp.ts","../../src/offline/clock/HLC.ts","../../src/offline/ConnectivityManager.ts","../../src/offline/OutboundQueue.ts","../../src/offline/SyncEngine.ts","../../src/offline/errors.ts","../../src/offline/namespaces/SnapshotNamespace.ts","../../src/offline/store/schema.ts","../../src/offline/OfflineManager.ts","../../src/offline/detect.ts","../../src/offline/store/idb.ts","../../src/offline/store/IndexedDbStore.ts","../../src/offline/store/NoopStore.ts","../../src/offline/crdt/LWWRegister.ts","../../src/offline/KvCache.ts","../../src/offline/DbCache.ts","../../src/core/Client.ts","../../src/core/agents/describe.ts","../../src/offline/crdt/LWWMap.ts","../../src/offline/crdt/ORSet.ts","../../src/network/PacketCipher.ts","../../src/browser/index.ts","../../src/storage/encoding/ReedSolomon/wasm/bundled-loader.ts"],"sourcesContent":["// Tiny browser-safe replacement for the `chalk` Node module.\n// Emits ANSI escape codes when running attached to a TTY (Node terminal);\n// returns plain strings everywhere else (browsers, log files, CF Workers).\n// Avoids dragging chalk + its terminfo deps into the browser/Workers bundles.\ntype ColorFn = (s: string) => string;\nconst _isTty: boolean = (() => {\n try {\n const proc = (globalThis as { process?: { stdout?: { isTTY?: boolean } } }).process;\n return !!proc?.stdout?.isTTY;\n } catch { return false; }\n})();\nconst _ansi = (code: string): ColorFn =>\n _isTty ? (s) => `\\x1b[${code}m${s}\\x1b[0m` : (s) => s;\nconst colors = {\n gray: _ansi('90'),\n red: _ansi('31'),\n green: _ansi('32'),\n yellow: _ansi('33'),\n blue: _ansi('34'),\n magenta: _ansi('35'),\n cyan: _ansi('36'),\n dim: _ansi('2'),\n};\n\nenum LogLevel {\n VERBOSE = 0,\n DEBUG = 1,\n INFO = 2,\n SUCCESS = 3,\n WARN = 4,\n ERROR = 5,\n}\n\ninterface CallerInfo {\n file?: string;\n line?: number;\n column?: number;\n function?: string;\n}\n\nclass Logger {\n private prefix: string;\n private logLevel: LogLevel;\n private console: Console;\n private showCaller: boolean;\n level: string = 'INFO';\n\n constructor(prefix: string = 'CONNECT', LOGLEVEL: string = 'INFO', showCaller: boolean = false) {\n this.prefix = colors.gray(`[${prefix}]`);\n this.showCaller = showCaller;\n let envLevel;\n\n // Check environment: browser vs Node.js\n if (typeof window !== 'undefined') {\n // Browser environment\n envLevel = (LOGLEVEL).toUpperCase() as keyof typeof LogLevel;\n } else {\n // Node.js environment - safely access process.env\n const globalProcess = (globalThis as any).process;\n const nodeEnv = globalProcess?.env?.LOG_LEVEL;\n envLevel = (nodeEnv || LOGLEVEL).toUpperCase() as keyof typeof LogLevel;\n }\n\n this.level = envLevel;\n this.logLevel = LogLevel[envLevel] ?? LogLevel.INFO;\n this.console = globalThis.console;\n }\n\n private shouldLog(level: LogLevel): boolean {\n return level >= this.logLevel;\n }\n\n /**\n * Extract caller information from stack trace\n */\n private getCallerInfo(): CallerInfo | null {\n if (!this.showCaller) return null;\n\n try {\n const stack = new Error().stack;\n if (!stack) return null;\n\n // Split stack trace into lines\n const lines = stack.split('\\n');\n\n // Skip first 3 lines (Error, getCallerInfo, the log method itself)\n // The 4th line should be the actual caller\n const callerLine = lines[3];\n if (!callerLine) return null;\n\n // Parse stack trace line\n // Format: \" at ClassName.methodName (file:line:column)\"\n // or: \" at file:line:column\"\n const match = callerLine.match(/at\\s+(?:(.+?)\\s+\\()?(.+?):(\\d+):(\\d+)\\)?/);\n\n if (!match) return null;\n\n const [, functionName, filePath, line, column] = match;\n\n // Extract just the filename from the full path\n const file = filePath.split('/').pop()?.split('?')[0];\n\n return {\n file,\n line: parseInt(line, 10),\n column: parseInt(column, 10),\n function: functionName || undefined,\n };\n } catch (error) {\n // If we can't parse the stack, just return null\n return null;\n }\n }\n\n /**\n * Format caller info for display\n */\n private formatCallerInfo(info: CallerInfo | null): string {\n if (!info) return '';\n\n const parts: string[] = [];\n\n if (info.function) {\n parts.push(colors.cyan(info.function));\n }\n\n if (info.file) {\n const location = info.line ? `${info.file}:${info.line}` : info.file;\n parts.push(colors.dim(`(${location})`));\n }\n\n return parts.length > 0 ? ' ' + parts.join(' ') : '';\n }\n\n setLevel(level: string): void {\n this.level = level.toUpperCase();\n const envLevel = level.toUpperCase() as keyof typeof LogLevel;\n this.logLevel = LogLevel[envLevel] ?? LogLevel.INFO;\n }\n\n setShowCaller(show: boolean): void {\n this.showCaller = show;\n }\n\n // Logging methods with automatic caller detection\n info(...args: any[]): void {\n if (this.shouldLog(LogLevel.INFO)) {\n const caller = this.formatCallerInfo(this.getCallerInfo());\n this.console.info(this.prefix, colors.blue('INFO') + caller, ...args);\n }\n }\n\n log(...args: any[]): void {\n this.info(...args); // Alias for info\n }\n\n verbose(...args: any[]): void {\n if (this.shouldLog(LogLevel.VERBOSE)) {\n const caller = this.formatCallerInfo(this.getCallerInfo());\n this.console.log(this.prefix, colors.cyan('VERBOSE') + caller, ...args);\n }\n }\n\n success(...args: any[]): void {\n if (this.shouldLog(LogLevel.SUCCESS)) {\n const caller = this.formatCallerInfo(this.getCallerInfo());\n this.console.debug(this.prefix, colors.green('SUCCESS') + caller, ...args);\n }\n }\n\n warn(...args: any[]): void {\n if (this.shouldLog(LogLevel.WARN)) {\n const caller = this.formatCallerInfo(this.getCallerInfo());\n this.console.warn(this.prefix, colors.yellow('WARN') + caller, ...args);\n }\n }\n\n error(...args: any[]): void {\n if (this.shouldLog(LogLevel.ERROR)) {\n const caller = this.formatCallerInfo(this.getCallerInfo());\n this.console.error(this.prefix, colors.red('ERROR') + caller, ...args);\n }\n }\n\n debug(...args: any[]): void {\n if (this.shouldLog(LogLevel.DEBUG)) {\n const caller = this.formatCallerInfo(this.getCallerInfo());\n this.console.debug(this.prefix, colors.magenta('DEBUG') + caller, ...args);\n }\n }\n\n // Rest of the methods remain unchanged\n assert(condition?: boolean, ...data: any[]): void {\n this.console.assert(condition, ...data);\n }\n\n clear(): void {\n this.console.clear();\n }\n\n count(label?: string): void {\n this.console.count(label);\n }\n\n countReset(label?: string): void {\n this.console.countReset(label);\n }\n\n dir(item?: any, options?: any): void {\n this.console.dir(item, options);\n }\n\n dirxml(...data: any[]): void {\n this.console.dirxml(...data);\n }\n\n group(...data: any[]): void {\n this.console.group(...data);\n }\n\n groupCollapsed(...data: any[]): void {\n this.console.groupCollapsed(...data);\n }\n\n groupEnd(): void {\n this.console.groupEnd();\n }\n\n table(tabularData?: any, properties?: string[]): void {\n this.console.table(tabularData, properties);\n }\n\n time(label?: string): void {\n this.console.time(label);\n }\n\n timeEnd(label?: string): void {\n this.console.timeEnd(label);\n }\n\n timeLog(label?: string, ...data: any[]): void {\n this.console.timeLog(label, ...data);\n }\n\n trace(...data: any[]): void {\n this.console.trace(...data);\n }\n\n // Note: Console property removed as it's Node.js-specific and not needed\n\n profile(label?: string): void {\n if ('profile' in this.console) {\n (this.console as any).profile(label);\n }\n }\n\n profileEnd(label?: string): void {\n if ('profileEnd' in this.console) {\n (this.console as any).profileEnd(label);\n }\n }\n\n timeStamp(label?: string): void {\n if ('timeStamp' in this.console) {\n (this.console as any).timeStamp(label);\n }\n }\n}\n\n// Export Logger class for custom instances\nexport { Logger };\n\n// Export default instance for general use\nexport const log = new Logger('CONNECT', 'INFO', false);\n\n// Also export as default\nexport default log;\n\ndeclare global {\n interface Console {\n success(...args: any[]): void;\n verbose(...args: any[]): void;\n }\n}","/**\n * Byte conversion helpers usable in both Node and the browser.\n *\n * Replaces Node's `Buffer` API for the small set of operations we actually\n * need in the crypto layer: hex/base64/base64url encode + decode, and array\n * concatenation. Lets `DoubleRatchet`, `KeyStore`, etc. compile against\n * platforms without `Buffer` (browsers, CF Workers).\n */\n\nconst HEX_CHARS = \"0123456789abcdef\";\n\n/** Encode a byte array as a lowercase hex string. */\nexport function toHex(bytes: Uint8Array): string {\n let out = \"\";\n for (let i = 0; i < bytes.length; i++) {\n const b = bytes[i];\n out += HEX_CHARS[b >> 4] + HEX_CHARS[b & 0x0f];\n }\n return out;\n}\n\n/** Decode a hex string into a byte array. Accepts upper/lowercase; rejects odd-length input. */\nexport function fromHex(hex: string): Uint8Array<ArrayBuffer> {\n if (hex.length % 2 !== 0) {\n throw new Error(`fromHex: input length must be even (got ${hex.length})`);\n }\n const ab = new ArrayBuffer(hex.length / 2);\n const out = new Uint8Array(ab);\n for (let i = 0; i < out.length; i++) {\n const byte = parseInt(hex.substring(i * 2, i * 2 + 2), 16);\n if (Number.isNaN(byte)) {\n throw new Error(`fromHex: invalid hex character at offset ${i * 2}`);\n }\n out[i] = byte;\n }\n return out;\n}\n\n/** Encode a byte array as a standard base64 string. */\nexport function toBase64(bytes: Uint8Array): string {\n let binary = \"\";\n for (let i = 0; i < bytes.length; i++) {\n binary += String.fromCharCode(bytes[i]);\n }\n return btoa(binary);\n}\n\n/** Decode a standard base64 string to bytes. */\nexport function fromBase64(b64: string): Uint8Array<ArrayBuffer> {\n const binary = atob(b64);\n const ab = new ArrayBuffer(binary.length);\n const out = new Uint8Array(ab);\n for (let i = 0; i < binary.length; i++) out[i] = binary.charCodeAt(i);\n return out;\n}\n\n/** Encode a byte array as a base64url string (no padding). */\nexport function toBase64Url(bytes: Uint8Array): string {\n return toBase64(bytes).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\n/** Decode a base64url string (with or without padding) to bytes. */\nexport function fromBase64Url(b64url: string): Uint8Array<ArrayBuffer> {\n const padded = b64url.replace(/-/g, \"+\").replace(/_/g, \"/\") +\n \"=\".repeat((4 - (b64url.length % 4)) % 4);\n return fromBase64(padded);\n}\n\n/** Concatenate any number of byte arrays into a single Uint8Array. */\nexport function concatBytes(...arrays: (Uint8Array | ArrayBuffer)[]): Uint8Array<ArrayBuffer> {\n let total = 0;\n for (const a of arrays) total += a.byteLength;\n const ab = new ArrayBuffer(total);\n const out = new Uint8Array(ab);\n let offset = 0;\n for (const a of arrays) {\n const view = a instanceof Uint8Array ? a : new Uint8Array(a);\n out.set(view, offset);\n offset += view.length;\n }\n return out;\n}\n\n/** Encode a UTF-8 string as bytes. Thin wrapper around TextEncoder for symmetry. */\nexport function utf8Encode(s: string): Uint8Array<ArrayBuffer> {\n // TextEncoder.encode returns Uint8Array<ArrayBufferLike>; widen to the\n // ArrayBuffer variant explicitly so WebCrypto's BufferSource type accepts it.\n const u8 = new TextEncoder().encode(s);\n const ab = new ArrayBuffer(u8.byteLength);\n const out = new Uint8Array(ab);\n out.set(u8);\n return out;\n}\n\n/** Decode UTF-8 bytes to a string. */\nexport function utf8Decode(bytes: Uint8Array): string {\n return new TextDecoder().decode(bytes);\n}\n","import log, { Logger } from './Logger';\n\nconst base58Alphabet = \"123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz\";\n\nexport {\n log,\n Logger\n}\n\n// Browser-safe byte conversion helpers (hex / base64 / base64url / concat).\n// The crypto layer uses these instead of Node's Buffer so it runs in browsers\n// and CF Workers as well as Node.\nexport * from './bytes';\n//0ba25dcb0db07dbac27435857ab55150d2a2e6c8f73a969c74b7659c7a8dd3a3\n\n/**\n * @public\n * @remarks Asserts the basic type of a variable\n * @param value - The value to check\n * @param type - The expected type\n * \n * @throws Error - If the type of the value does not match the expected type\n * \n */\nexport function assertType<T>(\n value: unknown,\n typeOrConstructors: string | (new (...args: any[]) => any) | (new (...args: any[]) => any)[]\n): asserts value is T {\n if (typeof typeOrConstructors === 'string') {\n // Single primitive type\n if (typeof value !== typeOrConstructors) {\n throw new Error(\n `Expected type '${typeOrConstructors}', received '${typeof value}'`\n );\n }\n } else if (Array.isArray(typeOrConstructors)) {\n // OR scenario: Array of constructors\n const isValid = typeOrConstructors.some((ctor) => value instanceof ctor);\n if (!isValid) {\n const expectedTypes = typeOrConstructors.map((ctor) => ctor.name).join(' or ');\n const receivedType = value?.constructor?.name || typeof value;\n throw new Error(\n `Expected instance of ${expectedTypes}, received '${receivedType}'`\n );\n }\n } else if (typeof typeOrConstructors === 'function') {\n // Single constructor check\n if (!(value instanceof typeOrConstructors)) {\n const expectedType = typeOrConstructors.name || 'Unknown';\n const receivedType = value?.constructor?.name || typeof value;\n throw new Error(\n `Expected instance of '${expectedType}', received '${receivedType}'`\n );\n }\n } else {\n throw new Error(`Invalid type or constructor provided for assertion.`);\n }\n}\n\n/**\n * @public\n * @remarks Encodes a string to Base58\n * @param input - the data to encode, must be a cloneable object\n * @returns string\n */\nexport function base58Encode(input: ArrayBuffer | string): string {\n const bytes = typeof input === \"string\"\n ? new TextEncoder().encode(input)\n : new Uint8Array(input);\n\n let num = BigInt(0);\n for (const byte of bytes) {\n num = (num << BigInt(8)) + BigInt(byte);\n }\n\n let result = \"\";\n while (num > 0) {\n const remainder = Number(num % BigInt(58));\n num = num / BigInt(58);\n result = base58Alphabet[remainder] + result;\n }\n\n // Preserve leading zero bytes as \"1\" in Base58\n for (const byte of bytes) {\n if (byte === 0) result = \"1\" + result;\n else break;\n }\n return result;\n}\n\n\n/**\n * @public\n * @remarks Decodes a Base58 string to a Uint8Array\n * @param input - the Base58 string to decode\n * @returns Uint8Array\n */\n\n\n// Function to decode a Base58 string to ArrayBuffer\nexport function base58Decode(input: string): ArrayBuffer {\n try {\n const base58Map = new Map(base58Alphabet.split(\"\").map((char, index) => [char, index]));\n\n let num = BigInt(0);\n for (const char of input) {\n const value = base58Map.get(char);\n if (value === undefined) throw new Error(`Invalid Base58 character: ${char}`);\n num = num * BigInt(58) + BigInt(value);\n }\n\n const byteArray: number[] = [];\n while (num > 0) {\n byteArray.push(Number(num % BigInt(256)));\n num = num / BigInt(256);\n }\n\n byteArray.reverse();\n\n // Restore leading zero bytes from Base58 \"1\"\n const leadingZeros = Array.from(input).filter((char) => char === \"1\").length;\n return new Uint8Array([...Array(leadingZeros).fill(0), ...byteArray]).buffer;\n } catch (e) {\n log.error(e);\n throw new Error(\"Invalid input\");\n }\n}\n\n/**\n * Simple checksum function using djb2 hash algorithm\n * Works in both browser and Node.js environments\n */\nfunction simpleChecksum(str: string): string {\n let hash = 5381;\n for (let i = 0; i < str.length; i++) {\n hash = ((hash << 5) + hash) + str.charCodeAt(i); // hash * 33 + c\n }\n return (hash >>> 0).toString(16); // Convert to unsigned 32-bit hex\n}\n\n\n\n/**\n * @public\n * @remarks Generates a checksum for a given input\n * @param input - The input to generate a checksum for as a string\n * @returns string\n */\nexport function generateChecksum(input: string): string {\n assertType<string>(input, \"string\");\n return simpleChecksum(input);\n}\n\n/**\n * @public\n * @remarks Verifies a checksum for a given input\n * @param input - The input to verify as a string\n * @param checksum - The checksum to verify as a string\n * @returns boolean\n */\nexport function verifyChecksum(input: string, checksum: string): boolean {\n assertType<string>(input, \"string\");\n assertType<string>(checksum, \"string\");\n return !!(simpleChecksum(input) === checksum);\n}\n\n/**\n * @internal\n * @remarks Generates a random UUID for a given packet\n * @returns string\n */\nexport function _packetId(): string {\n return \"PKT\" + generateId();\n}\n\n/**\n * @internal\n * @remarks Generates a random UUID for a given object\n * @returns string\n * \n */\n\nexport function _objectId(): string {\n return \"OBJ\" + generateId();\n}\n\n/**\n * @internal\n * @remarks Generates a random UUID for a given user\n * @returns string\n * \n */\n\nexport function _userId(): string {\n return \"USR\" + generateId();\n}\n\n/**\n * @internal\n * @remarks Generates a random UUID for a given account\n * @returns string\n * \n */\n\nexport function _accountId(): string {\n return \"ACC\" + generateId();\n}\n\n/**\n * @internal\n * @remarks Generates a random UUID for a socket\n * @returns string\n * \n */\nexport function _socketId(): string {\n return \"SKT\" + generateId();\n}\n\n/**\n * @internal\n * @remarks Generates a random UUID for a message\n * @returns string\n */\n\nexport function _messageId(): string {\n return \"MSG\" + generateId();\n}\n\n/**\n * @public\n * @remarks Generates a random UUID and base58 encodes it\n * @returns string\n */\n\nexport function generateId(): string {\n // Web-standard UUID generator (available in every modern browser and\n // Node 14+). Replaces the npm `uuid` dep so the browser bundle has one\n // fewer external import to resolve.\n return base58Encode(crypto.randomUUID());\n}\n\n/**\n * @public\n * @remarks Serializes data to a base58 encoded string\n * @param data - The data to serialize\n * @typeParam T - The type of the data to serialize\n * @returns base58 encoded string\n */\nexport function serialize<T>(data: T): string {\n const arrayBuffer = structuredCloneToArrayBuffer(data);\n return base58Encode(arrayBuffer);\n}\n\n/**\n * @public\n * @remarks Deserializes a base58 encoded string to data\n * @param base58String - The base58 encoded string to deserialize\n * @returns Deserialized data\n */\nexport function deserialize<T>(base58String: string): T {\n const arrayBuffer = base58Decode(base58String);\n return deserializeWithStructuredClone(arrayBufferToData(arrayBuffer)) as T;\n}\n\nfunction deserializeWithStructuredClone(data: any): unknown {\n const deserializeHelper = (item: any): any => {\n if (item === null || typeof item !== 'object') {\n return item; // Handle primitives directly\n }\n\n if (item.__type === \"Symbol\") {\n return Symbol.for(item.value) || Symbol(item.value);\n }\n\n if (item.__type === 'Date') {\n return new Date(item.value); // Rehydrate Date\n }\n\n if (item.__type === 'Map') {\n return new Map(item.value); // Rehydrate Map\n }\n\n if (item.__type === 'Set') {\n return new Set(item.value); // Rehydrate Set\n }\n\n if (Array.isArray(item)) {\n return item.map(deserializeHelper); // Rehydrate Array recursively\n }\n\n // Generic object case\n const deserializedObject: any = {};\n for (const key of Object.keys(item)) {\n deserializedObject[key] = deserializeHelper(item[key]);\n }\n return deserializedObject;\n };\n\n return deserializeHelper(data);\n}\n\nfunction structuredCloneToArrayBuffer(data: any): ArrayBuffer {\n // Clone and transform the data for serialization\n const serializeHelper = (item: any): any => {\n if (item === null || typeof item !== \"object\") return item;\n\n if (typeof item === \"symbol\") {\n const key = Symbol.keyFor(item) || item.description || \"\";\n return { __type: \"Symbol\", value: key };\n }\n\n if (item.constructor === Date) return { __type: \"Date\", value: item.toISOString() };\n if (item.constructor === Map) return { __type: \"Map\", value: Array.from(item.entries()) };\n if (item.constructor === Set) return { __type: \"Set\", value: Array.from(item) };\n if (Array.isArray(item)) return item.map(serializeHelper);\n\n const serializedObject: any = {};\n for (const key of Object.keys(item)) {\n serializedObject[key] = serializeHelper(item[key]);\n }\n return serializedObject;\n };\n\n // Serialize the structured data into a JSON string\n const jsonString = JSON.stringify(serializeHelper(data));\n return new TextEncoder().encode(jsonString).buffer as ArrayBuffer;\n}\n\nfunction arrayBufferToData(arrayBuffer: ArrayBuffer): any {\n let jsonString = new TextDecoder().decode(new Uint8Array(arrayBuffer));\n jsonString = jsonString.replace(/^\\0+/, '')\n return JSON.parse(jsonString);\n}\n\n/**\n * @public\n * @remarks Retries a method a specified number of times with a delay between each attempt, this is a decorator\n * @param retries - The number of times to retry the method\n * @param delay - The delay in milliseconds between each attempt\n */\nexport function Retry(retries: number = 3, delay: number = 1000): MethodDecorator {\n\n return function (target: object, propertyKey: string | symbol, descriptor: TypedPropertyDescriptor<any>) {\n // Ensure the descriptor exists\n if (!descriptor || typeof descriptor.value !== \"function\") {\n throw new Error(\"Retry decorator can only be applied to methods.\");\n }\n\n const originalMethod = descriptor.value;\n\n descriptor.value = async function (...args: any[]) {\n let attempt = 0;\n\n while (attempt < retries) {\n try {\n return await originalMethod.apply(this, args);\n } catch (error) {\n attempt++;\n log.debug(`Retrying ${String(propertyKey)} - Attempt ${attempt}/${retries}`);\n if (attempt >= retries) {\n throw error; // Re-throw the error if retries are exhausted\n }\n log.log(`Waiting for ${delay}ms before retrying...`);\n await new Promise(res => setTimeout(res, delay));\n }\n }\n };\n\n return descriptor;\n };\n}\n\n/**\n * @public\n * @remarks Waits for a class property to be ready before executing a method, this is a decorator.\n * @param readyPropertyName - The class property to check for readiness\n */\nexport function Ready(readyPropertyName: string = \"ready\"): MethodDecorator | PropertyDecorator {\n return function (target: object, propertyKey: string | symbol, descriptor: PropertyDescriptor) {\n if (descriptor === undefined) {\n throw new Error(\"@Ready can only be applied to methods, getters, or setters.\");\n }\n\n const isGetter = typeof descriptor.get === \"function\";\n const isSetter = typeof descriptor.set === \"function\";\n const isMethod = typeof descriptor.value === \"function\";\n\n const readyCheck = async (instance: any) => {\n const readyProperty = instance[readyPropertyName];\n\n if (!readyProperty || !(readyProperty instanceof Promise)) {\n log.warn(`Property \"${readyPropertyName}\" must be a Promise.`);\n return\n }\n await readyProperty; // Wait for the property to resolve\n };\n\n if (isMethod) {\n const originalMethod = descriptor.value;\n descriptor.value = async function (...args: any[]) {\n await readyCheck(this);\n return originalMethod.apply(this, args);\n };\n } else if (isGetter || isSetter) {\n const originalGetter = descriptor.get;\n const originalSetter = descriptor.set;\n\n if (isGetter) {\n descriptor.get = async function () {\n await readyCheck(this);\n return originalGetter!.call(this);\n };\n }\n\n if (isSetter) {\n descriptor.set = async function (value: any) {\n await readyCheck(this);\n return originalSetter!.call(this, value);\n };\n }\n } else {\n throw new Error(\"@Ready can only be applied to methods, getters, or setters.\");\n }\n\n return descriptor;\n };\n}\n\n\n/**\n * Converts bytes into a more human-friendly format (e.g., KB, MB, GB).\n * @internal\n * @param bytes - The number of bytes to convert.\n * @param decimals - The number of decimals to display (default is 2).\n * @returns A formatted string representing the size in appropriate units.\n */\nexport function _formatBytes(bytes: number, decimals: number = 2): string {\n if (bytes === 0) return \"0 Bytes\";\n\n const k = 1024; // 1 KB = 1024 Bytes\n const sizes = [\"Bytes\", \"KB\", \"MB\", \"GB\", \"TB\", \"PB\", \"EB\", \"ZB\", \"YB\"];\n const i = Math.floor(Math.log(bytes) / Math.log(k)); // Determines the index for size\n const sizeInUnit = bytes / Math.pow(k, i); // Converts bytes to appropriate unit\n\n return `${sizeInUnit.toFixed(decimals)} ${sizes[i]}`;\n}\n\n/**\n * Retrieves the IP address(es) for a given hostname using Cloudflare's DNS-over-HTTPS service.\n *\n * This function queries the Cloudflare DNS API to resolve the provided hostname to its corresponding\n * IPv4 address(es) (A records). It returns an array of IP addresses or logs an error if the resolution fails.\n *\n * @param hostname - The hostname to resolve (e.g., \"example.com\").\n * @returns A promise that resolves to an array of IP addresses (strings) associated with the hostname.\n * If no IP addresses are found or an error occurs, an empty array or undefined may be returned.\n * @throws Error If the DNS query fails due to a network error or invalid response from the server.\n * @public\n * @example\n * ```typescript\n * import { log } from '@muhkoo/connect/utilities';\n * getIPAddress(\"example.com\").then(ips => log.debug(ips));\n * // Output: [\"93.184.216.34\"]\n * ```\n */\nexport async function getIPAddress(hostname: string) {\n const url = `https://cloudflare-dns.com/dns-query?name=${hostname}&type=A`;\n\n try {\n const response = await fetch(url, {\n headers: {\n Accept: \"application/dns-json\",\n },\n });\n\n if (!response.ok) {\n throw new Error(`Failed to fetch DNS records: ${response.statusText}`);\n }\n\n const data = await response.json();\n\n // Extract the IP address from the DNS response\n const ipAddresses = data.Answer?.map((record: { data: string }) => record.data) || [];\n log.debug(`IP addresses for ${hostname}:`, ipAddresses);\n\n return ipAddresses;\n } catch (error) {\n log.error(`Error resolving IP for ${hostname}:`, error);\n }\n}\n\nexport function isNumber(value: string | number): boolean {\n // Check if the value is a number\n if (typeof value === 'number' && !isNaN(value) && isFinite(value)) {\n return true;\n }\n // Check if the value is a string and represents a valid number\n if (typeof value === 'string') {\n return !isNaN(parseFloat(value)) && isFinite(value as any);\n }\n // Return false for other types\n return false;\n}\n\nexport function getId(row: { insertId?: number, id?: number }): number {\n if (row.insertId) {\n return row.insertId;\n } else if (row.id) {\n return row.id;\n } else {\n throw new Error('No ID found in the row');\n }\n}","import { _messageId, generateChecksum, verifyChecksum, serialize, deserialize, _formatBytes, log } from '../utilities';\n\n/**\n * @public\n * @remarks\n * The body type is a generic type that can be any value. Internally we handle the serialization and deserialization of the body.\n */\nexport type MessageBody = any;\n\n/**\n * @public\n * @remarks\n * The message headers type is a simple record object that contains key value pairs. Think of these as metadata for the message, similar to HTTP headers.\n */\nexport type MessageHeaders = Map<string, string>;\n\n/**\n * @public\n * @remarks\n * The message options type is a record object that contains the options for the message.\n */\nexport interface MessageOptions {\n id?: string;\n body: MessageBody;\n status?: \"pending\" | \"processed\" | \"failed\" | \"delivered\";\n checksum?: string;\n}\n\n\n/**\n * @public\n * @remarks\n * The message class is a simple class that represents a message object.\n * @sealed\n */\nexport class Message {\n id: string = _messageId();\n timestamp: number = Date.now();\n status?: \"pending\" | \"processed\" | \"failed\" | \"delivered\" = \"pending\";\n checksum?: string;\n private _body: MessageBody;\n\n constructor(msg: MessageBody)\n constructor(msg: MessageOptions)\n constructor(msg: MessageOptions | MessageBody) {\n\n if (typeof msg === 'object' && msg.hasOwnProperty('body')) {\n this.id = msg.id || this.id;\n this.timestamp = msg.timestamp || this.timestamp;\n this.status = msg.status || this.status;\n this.checksum = msg.checksum || this.checksum;\n this.body = msg.body;\n } else {\n this.body = msg;\n }\n this.validatebodySize();\n }\n\n get body(): MessageBody {\n return deserialize(this._body);\n }\n\n set body(value: MessageBody) {\n this._body = serialize(value);\n if (!this.checksum) {\n this.checksum = generateChecksum(this._body);\n }\n }\n\n verifyChecksum = () => {\n if (!this.checksum) throw new Error(\"No message checksum\");\n const isValid = verifyChecksum(this._body, this.checksum);\n if (!isValid) throw new Error(\"Invalid message checksum\");\n }\n\n private validatebodySize(maxSize: number = 1024 * 1024 * 3) {\n const sizeInBytes = new TextEncoder().encode(this._body).length;\n if (sizeInBytes > maxSize) {\n throw new Error(`body size exceeds the limit of ${_formatBytes(maxSize)}.`);\n }\n }\n\n\n serialize = (): string => {\n return JSON.stringify({\n id: this.id,\n timestamp: this.timestamp,\n body: this.body,\n status: this.status,\n checksum: this.checksum,\n });\n }\n\n static deserialize = (data: string): Message => {\n if (typeof data !== 'string') {\n log.warn('Message.deserialize: data is not a string', data);\n }\n const msg = JSON.parse(data);\n return new Message(msg);\n }\n}\n\nexport default Message;","import { Message } from \"./Message\";\nimport { _packetId } from \"../utilities\";\n\ntype Address = string; // Represents a unique peer or node ID in the network\n\nexport interface PacketOptions {\n id?: string;\n subject: string;\n source: Address;\n target: Address;\n headers?: {\n [key: string]: string | number | boolean | undefined; // Optional: Additional headers for the packet\n };\n message?: Message;\n ttl?: number;\n timestamp?: number;\n signature?: string;\n}\n\n/**\n * @public\n * @remarks\n * This class represents a message object that can be sent over the network\n * @sealed\n */\nexport class Packet {\n id: string;\n subject: string;\n source: Address;\n target: Address;\n headers?: PacketOptions['headers']; // Optional: Additional headers for the packet\n message?: Message; // By making the message optional, we can send packets without messages. Essentially performing a GET request or other bodyless requests\n timestamp: number;\n ttl?: number; // Optional: Time-to-live in milliseconds\n signature?: string; // Optional: Cryptographic signature for verification\n\n constructor({\n id,\n subject,\n source,\n target,\n headers,\n message,\n ttl,\n signature,\n timestamp\n }: PacketOptions) {\n this.id = id || _packetId(); // Ensure the packet has a unique ID\n this.subject = subject;\n this.source = source;\n this.target = target;\n this.headers = headers || {};\n this.message = message;\n this.timestamp = Date.now(); // Automatically track packet creation time\n this.ttl = ttl;\n this.signature = signature;\n this.timestamp = timestamp || Date.now();\n }\n\n // Serialize the packet for network transmission\n serialize(): string {\n return JSON.stringify({\n id: this.id,\n source: this.source,\n subject: this.subject,\n target: this.target,\n headers: this.headers,\n message: this.message && this.message.serialize(),\n timestamp: this.timestamp,\n ttl: this.ttl,\n signature: this.signature,\n });\n }\n\n // Deserialize a packet from a string\n static deserialize(data: string): Packet {\n const obj = JSON.parse(data);\n return new Packet({\n id: obj.id,\n subject: obj.subject,\n source: obj.source,\n target: obj.target,\n headers: obj.headers,\n message: obj.message && Message.deserialize(obj.message),\n timestamp: obj.timestamp,\n ttl: obj.ttl,\n signature: obj.signature,\n });\n }\n\n // Verify TTL: Checks if the packet is still valid based on TTL\n isExpired(): boolean {\n if (!this.ttl) return false; // No TTL means no expiration\n return Date.now() > this.timestamp + this.ttl;\n }\n\n // sign(signingKey: string) {\n // this.signature = generateSignature(this.serialize(), signingKey); // Example signature function\n // }\n\n // verifySignature(publicKey: string): boolean {\n // if (!this.signature) throw new Error(\"No signature to verify\");\n // return verifySignature(this.serialize(), this.signature, publicKey);\n // }\n}","import { Message } from \"./Message\";\nimport { Packet } from \"./Packet\";\n\n\nexport function SerializeMessage(target: any, propertyKey: string, descriptor: PropertyDescriptor) {\n const originalMethod = descriptor.value;\n\n descriptor.value = function (...args: any[]) {\n const [subject, message] = args;\n\n if (typeof message !== \"string\") {\n throw new Error(\"Message must be a string\");\n }\n\n const serializedMessage = new Message({\n subject,\n payload: message,\n status: \"pending\",\n headers: new Map([[\"Content-Type\", \"application/json\"]]),\n }).serialize();\n\n\n return originalMethod.apply(this, [subject, serializedMessage]);\n };\n\n return descriptor;\n}","// Re-export Message and its types\nexport { Message, type MessageHeaders, type MessageBody, type MessageOptions } from \"./Message\";\nexport { default as MessageDefault } from \"./Message\";\n\n// Re-export Packet and its types\nexport { Packet, type PacketOptions } from \"./Packet\";\n\n// Export decorators\nexport { SerializeMessage } from \"./decorators\";\n\nimport { SerializeMessage } from \"./decorators\";\nconst decorators = {\n SerializeMessage\n}\n\nexport { decorators }","/**\n * Shared zero-knowledge types and circuit constants.\n *\n * Used by both the browser/server builds (where snarkjs handles proof generation\n * and verification) and the workers build (where verification runs through\n * `bn128.wasm` via `src/workers/groth16-verifier.ts`). Keeping these here ensures\n * proof shapes and verification keys stay identical across runtimes.\n */\n\n/**\n * Groth16 proof structure (BN128).\n *\n * - `pi_a`: G1 point as `[x, y]` or projective `[x, y, z]`.\n * - `pi_b`: G2 point as `[[x0, x1], [y0, y1]]` or projective `[..., [z0, z1]]`.\n * - `pi_c`: G1 point as `[x, y]` or projective `[x, y, z]`.\n *\n * Field elements are decimal-string-encoded BigInts (snarkjs convention).\n */\nexport interface Groth16Proof {\n pi_a: string[];\n pi_b: string[][];\n pi_c: string[];\n protocol?: string;\n curve?: string;\n}\n\n/**\n * Groth16 verification key (BN128).\n *\n * Field elements are decimal-string-encoded BigInts (snarkjs convention).\n */\nexport interface VerificationKey {\n protocol: string;\n curve: string;\n nPublic: number;\n vk_alpha_1: string[];\n vk_beta_2: string[][];\n vk_gamma_2: string[][];\n vk_delta_2: string[][];\n vk_alphabeta_12: string[][][];\n IC: string[][];\n}\n\n/**\n * Verification key for the `preimagePoK` circuit (Poseidon-commitment\n * proof-of-knowledge with three public signals: commitment, nonce, ecdsaPubHash).\n *\n * Pinned here so worker-side and SDK-side verification agree on the key being\n * checked. If the circuit is recompiled, regenerate this constant and\n * `public/circuits/build/preimagePoK_verification_key.json` together.\n */\nexport const PREIMAGE_POK_VERIFICATION_KEY: VerificationKey = {\n protocol: \"groth16\",\n curve: \"bn128\",\n nPublic: 3,\n vk_alpha_1: [\n \"20491192805390485299153009773594534940189261866228447918068658471970481763042\",\n \"9383485363053290200918347156157836566562967994039712273449902621266178545958\",\n \"1\"\n ],\n vk_beta_2: [\n [\n \"6375614351688725206403948262868962793625744043794305715222011528459656738731\",\n \"4252822878758300859123897981450591353533073413197771768651442665752259397132\"\n ],\n [\n \"10505242626370262277552901082094356697409835680220590971873171140371331206856\",\n \"21847035105528745403288232691147584728191162732299865338377159692350059136679\"\n ],\n [\n \"1\",\n \"0\"\n ]\n ],\n vk_gamma_2: [\n [\n \"10857046999023057135944570762232829481370756359578518086990519993285655852781\",\n \"11559732032986387107991004021392285783925812861821192530917403151452391805634\"\n ],\n [\n \"8495653923123431417604973247489272438418190587263600148770280649306958101930\",\n \"4082367875863433681332203403145435568316851327593401208105741076214120093531\"\n ],\n [\n \"1\",\n \"0\"\n ]\n ],\n vk_delta_2: [\n [\n \"16843627858994773805056502117979518680360297888097507527057721641174626133429\",\n \"2669618170444825402403730985182974839894668798317345855172970345856260721653\"\n ],\n [\n \"20564952487570762020467138133408075499830271526522626813107251678961587215295\",\n \"9630342855454833575580303045534431010412631371159617591163132980579520487965\"\n ],\n [\n \"1\",\n \"0\"\n ]\n ],\n vk_alphabeta_12: [\n [\n [\n \"2029413683389138792403550203267699914886160938906632433982220835551125967885\",\n \"21072700047562757817161031222997517981543347628379360635925549008442030252106\"\n ],\n [\n \"5940354580057074848093997050200682056184807770593307860589430076672439820312\",\n \"12156638873931618554171829126792193045421052652279363021382169897324752428276\"\n ],\n [\n \"7898200236362823042373859371574133993780991612861777490112507062703164551277\",\n \"7074218545237549455313236346927434013100842096812539264420499035217050630853\"\n ]\n ],\n [\n [\n \"7077479683546002997211712695946002074877511277312570035766170199895071832130\",\n \"10093483419865920389913245021038182291233451549023025229112148274109565435465\"\n ],\n [\n \"4595479056700221319381530156280926371456704509942304414423590385166031118820\",\n \"19831328484489333784475432780421641293929726139240675179672856274388269393268\"\n ],\n [\n \"11934129596455521040620786944827826205713621633706285934057045369193958244500\",\n \"8037395052364110730298837004334506829870972346962140206007064471173334027475\"\n ]\n ]\n ],\n IC: [\n [\n \"6593633352362890744195366164011945207337919238085164401989523182031213441232\",\n \"21183283244721822514187218730411278389501771108619619957207607994811554523781\",\n \"1\"\n ],\n [\n \"19317830753800014286972931403860527733342849870141075528271937285218206220756\",\n \"14626265811834596630857393417326981325583938311796888424299048456918853093257\",\n \"1\"\n ],\n [\n \"7942727853353225551121019923926808347232536417992238353855978019969636961405\",\n \"8824649763391398686420260814761862276544573369118345976741973565095405175062\",\n \"1\"\n ],\n [\n \"8369441262422248167284752361555580367206817200973928868895308479466335503315\",\n \"7836653245051994305208746627300011506099851195782496031197976259815728652585\",\n \"1\"\n ]\n ]\n};\n","/**\n * WebCrypto subtle-interface resolver.\n *\n * Available natively in every runtime this SDK targets (modern browsers,\n * Node 16+, CF Workers). Centralized here so the runtime check + error\n * message are consistent across every primitive — and so a future polyfill\n * shim has one place to plug in.\n */\n\nexport function getSubtle(): SubtleCrypto {\n const s = (globalThis.crypto as Crypto | undefined)?.subtle;\n if (!s) {\n throw new Error(\n \"@muhkoo/connect crypto: `globalThis.crypto.subtle` is unavailable. \" +\n \"Modern browsers, Node 16+, and CF Workers expose it natively.\",\n );\n }\n return s;\n}\n","/**\n * Cryptographically secure random bytes.\n *\n * Wraps `crypto.getRandomValues` with two small affordances every caller\n * needs:\n * - Allocates over a fresh, non-shared `ArrayBuffer` so the returned\n * `Uint8Array` satisfies WebCrypto's `BufferSource` type under strict\n * TS lib settings (where `Uint8Array<ArrayBufferLike>` isn't directly\n * assignable).\n * - Chunks requests larger than 65 KiB, the per-call cap browsers enforce\n * on `getRandomValues`.\n */\n\nconst MAX_PER_CALL = 65536;\n\nexport function randomBytes(n: number): Uint8Array {\n if (!Number.isInteger(n) || n < 0) {\n throw new Error(`randomBytes: n must be a non-negative integer (got ${n})`);\n }\n const buf = new Uint8Array(new ArrayBuffer(n));\n for (let offset = 0; offset < n; offset += MAX_PER_CALL) {\n const slice = buf.subarray(offset, Math.min(offset + MAX_PER_CALL, n));\n (globalThis.crypto as Crypto).getRandomValues(slice);\n }\n return buf;\n}\n","/**\n * AES-256-GCM encryption / decryption with raw key bytes.\n *\n * The two functions here are the single canonical AES-GCM call site in the\n * SDK. Earlier copies of this logic existed inline in `DoubleRatchet`, in the\n * storage `ChunkCipher`, and in the passphrase-wrap helpers — they all now\n * route through here so the algorithm, IV size, and tag handling stay in one\n * place.\n *\n * Conventions:\n * - 256-bit keys only. Passing 16- or 24-byte keys throws; callers that\n * need AES-128 should add a dedicated primitive.\n * - 96-bit IVs. WebCrypto's recommended GCM IV length; trades the 4-byte\n * IV economy of 128-bit for compatibility with every spec-compliant\n * implementation.\n * - The 16-byte GCM authentication tag is appended to the ciphertext by\n * WebCrypto's default behavior. Callers don't manage it separately.\n *\n * If a future need arises for AAD (associated data), add an optional `aad`\n * parameter to both functions rather than introducing a parallel primitive.\n */\n\nimport { getSubtle } from \"./subtle\";\n\n/** Length of the AES key in bytes. */\nexport const AES_GCM_KEY_BYTES = 32;\n\n/** Length of the AES-GCM IV in bytes (WebCrypto-recommended). */\nexport const AES_GCM_IV_BYTES = 12;\n\n/** Length of the AES-GCM authentication tag in bytes (appended to ciphertext). */\nexport const AES_GCM_TAG_BYTES = 16;\n\n/**\n * Encrypt `plaintext` under a 32-byte AES-256 key with the supplied 12-byte\n * IV. Returns ciphertext with the 16-byte GCM tag appended (so the output\n * length is `plaintext.length + 16`).\n *\n * The IV must be unique per (key, message). Callers that generate the IV\n * randomly should grab it via `randomBytes(AES_GCM_IV_BYTES)`; callers\n * managing a counter pass their own.\n */\nexport async function encryptAesGcm(\n key: Uint8Array,\n iv: Uint8Array,\n plaintext: Uint8Array,\n): Promise<Uint8Array> {\n assertKey(key);\n assertIv(iv);\n const cryptoKey = await importAesGcmKey(key, [\"encrypt\"]);\n const ciphertext = await getSubtle().encrypt(\n { name: \"AES-GCM\", iv: iv as BufferSource },\n cryptoKey,\n plaintext as BufferSource,\n );\n return new Uint8Array(ciphertext);\n}\n\n/**\n * Inverse of {@link encryptAesGcm}. Throws if the GCM auth tag fails — this\n * captures \"wrong key\", \"wrong IV\", or \"ciphertext was tampered with\",\n * indistinguishably. Callers that care about distinguishing those should\n * keep separate provenance bookkeeping, not invent a parallel MAC.\n */\nexport async function decryptAesGcm(\n key: Uint8Array,\n iv: Uint8Array,\n ciphertext: Uint8Array,\n): Promise<Uint8Array> {\n assertKey(key);\n assertIv(iv);\n const cryptoKey = await importAesGcmKey(key, [\"decrypt\"]);\n const plaintext = await getSubtle().decrypt(\n { name: \"AES-GCM\", iv: iv as BufferSource },\n cryptoKey,\n ciphertext as BufferSource,\n );\n return new Uint8Array(plaintext);\n}\n\nasync function importAesGcmKey(key: Uint8Array, usages: KeyUsage[]): Promise<CryptoKey> {\n return await getSubtle().importKey(\n \"raw\",\n key as BufferSource,\n { name: \"AES-GCM\" },\n false,\n usages,\n );\n}\n\nfunction assertKey(key: Uint8Array): void {\n if (key.byteLength !== AES_GCM_KEY_BYTES) {\n throw new Error(\n `aes-gcm: key must be ${AES_GCM_KEY_BYTES} bytes (got ${key.byteLength})`,\n );\n }\n}\n\nfunction assertIv(iv: Uint8Array): void {\n if (iv.byteLength !== AES_GCM_IV_BYTES) {\n throw new Error(\n `aes-gcm: iv must be ${AES_GCM_IV_BYTES} bytes (got ${iv.byteLength})`,\n );\n }\n}\n","/**\n * Key-derivation primitives — PBKDF2 (for passphrase → key) and HKDF (for\n * symmetric key material → expanded key material).\n *\n * PBKDF2 is the slow, salted KDF the passphrase-wrap helper uses to harden\n * user passwords against offline guessing. HKDF is the fast, deterministic\n * KDF the Double Ratchet uses to derive root + chain + message keys from\n * shared secrets.\n *\n * Both are SHA-256-backed everywhere in this codebase — keep it that way\n * unless there's a concrete reason to diverge.\n */\n\nimport { getSubtle } from \"./subtle\";\n\n/**\n * Iteration count default for PBKDF2 passphrase hardening. Tuned for\n * 2024–2026 hardware: slow enough to deter offline guessing of weak\n * passphrases (~100ms on commodity laptops), fast enough that interactive\n * unlock stays sub-second.\n */\nexport const PBKDF2_DEFAULT_ITERATIONS = 200_000;\n\n/**\n * Derive a 256-bit AES-GCM key from `passphrase + salt` via PBKDF2-SHA256.\n *\n * Returned as raw bytes (not a `CryptoKey`) so callers can hand it straight\n * to {@link encryptAesGcm} — that's the convention everywhere else in the\n * primitive layer. If a future caller needs the non-extractable\n * `CryptoKey` form, add a parallel `deriveCryptoKeyFromPassphrase` variant\n * rather than overloading this one.\n */\nexport async function deriveAesKeyFromPassphrase(\n passphrase: string,\n salt: Uint8Array,\n iterations: number = PBKDF2_DEFAULT_ITERATIONS,\n): Promise<Uint8Array> {\n if (typeof passphrase !== \"string\" || passphrase.length === 0) {\n throw new Error(\"kdf.deriveAesKeyFromPassphrase: passphrase must be a non-empty string\");\n }\n const s = getSubtle();\n const passphraseKey = await s.importKey(\n \"raw\",\n new TextEncoder().encode(passphrase),\n { name: \"PBKDF2\" },\n false,\n [\"deriveBits\"],\n );\n const bits = await s.deriveBits(\n {\n name: \"PBKDF2\",\n salt: salt as BufferSource,\n iterations,\n hash: \"SHA-256\",\n },\n passphraseKey,\n 256,\n );\n return new Uint8Array(bits);\n}\n\n/**\n * HKDF-Expand with SHA-256, returning `lengthBytes` raw bytes of key material.\n *\n * `info` is the per-purpose label (e.g. `\"DoubleRatchetMsg\"`). Optional\n * `salt` defaults to an empty buffer, matching the way the Double Ratchet\n * code has always used it.\n *\n * Note: this is intentionally a one-shot Extract-then-Expand call rather than\n * exposing Extract and Expand separately — every call site in this codebase\n * wants the same shape, and a richer API can be added later if needed.\n */\nexport async function deriveBitsHkdf(\n inputKeyMaterial: Uint8Array,\n info: string,\n lengthBytes: number,\n salt: Uint8Array = new Uint8Array(0),\n): Promise<Uint8Array> {\n if (lengthBytes <= 0) {\n throw new Error(`kdf.deriveBitsHkdf: lengthBytes must be > 0 (got ${lengthBytes})`);\n }\n const s = getSubtle();\n const key = await s.importKey(\n \"raw\",\n inputKeyMaterial as BufferSource,\n { name: \"HKDF\" },\n false,\n [\"deriveBits\"],\n );\n const bits = await s.deriveBits(\n {\n name: \"HKDF\",\n hash: \"SHA-256\",\n salt: salt as BufferSource,\n info: new TextEncoder().encode(info) as BufferSource,\n },\n key,\n lengthBytes * 8,\n );\n return new Uint8Array(bits);\n}\n","import { serialize, deserialize, toBase64, fromBase64, fromBase64Url, concatBytes, utf8Decode } from '../utilities';\ninterface KeyPair {\n privateKey: CryptoKey | null;\n publicKey: CryptoKey;\n}\n\ninterface AuthKeyPair {\n privateKey: CryptoKey | null;\n publicKey: CryptoKey;\n}\n\ninterface DehydratedKeys {\n ecdhPub: string; // ECDH public key in JWK format\n ecdhPriv: string; // ECDH private key in JWK format\n ecdsaPub: string; // ECDSA public key in JWK format\n ecdsaPriv: string; // ECDSA private key in JWK format\n}\n\nclass KeyStore {\n private static instance: KeyStore;\n private _keys: Map<string, KeyPair> = new Map();\n private _authKeys: Map<string, AuthKeyPair> = new Map();\n\n private constructor() { }\n\n public static getInstance(): KeyStore {\n if (!KeyStore.instance) {\n KeyStore.instance = new KeyStore();\n }\n return KeyStore.instance;\n }\n\n get keys(): Map<string, KeyPair> {\n return this._keys;\n }\n\n get authKeys(): Map<string, AuthKeyPair> {\n return this._authKeys;\n }\n\n public async generateOwnKeyPair(id: string): Promise<KeyPair> {\n if (this._keys.has(id)) {\n throw new Error(`Key pair for ${id} already exists.`);\n }\n const ecdhKeyPair = await crypto.subtle.generateKey(\n { name: 'ECDH', namedCurve: 'P-384' },\n true,\n ['deriveKey', 'deriveBits']\n );\n this._keys.set(id, { privateKey: ecdhKeyPair.privateKey, publicKey: ecdhKeyPair.publicKey });\n\n const ecdsaKeyPair = await crypto.subtle.generateKey(\n { name: 'ECDSA', namedCurve: 'P-384' },\n true,\n ['sign', 'verify']\n );\n this._authKeys.set(id, { privateKey: ecdsaKeyPair.privateKey, publicKey: ecdsaKeyPair.publicKey });\n\n const dehydrated = await this.dehydrateKeyPair(id);\n appLogger.debug(`Generated key pair for ${id}: publicKey=${dehydrated.ecdhPub.slice(0, 16)}...`);\n return { privateKey: ecdhKeyPair.privateKey, publicKey: ecdhKeyPair.publicKey };\n }\n\n public async storeRemotePublicKeys(id: string, ecdhPublicKey: CryptoKey, ecdsaPublicKey: CryptoKey): Promise<void> {\n const existing = this._keys.get(id);\n if (!existing || !existing.privateKey) {\n this._keys.set(id, { privateKey: null, publicKey: ecdhPublicKey });\n }\n const existingAuth = this._authKeys.get(id);\n if (!existingAuth || !existingAuth.privateKey) {\n this._authKeys.set(id, { privateKey: null, publicKey: ecdsaPublicKey });\n }\n const dehydrated = await this.dehydrateKeyPair(id);\n appLogger.debug(`Stored remote public keys for ${id}: ecdhPub=${dehydrated.ecdhPub.slice(0, 16)}...`);\n }\n\n public async hydrateKeyPair(id: string, dehydrated: DehydratedKeys): Promise<void> {\n const ecdhPubJwk = JSON.parse(deserialize(dehydrated.ecdhPub));\n const ecdhPublicKey = await crypto.subtle.importKey(\n 'jwk',\n ecdhPubJwk,\n { name: 'ECDH', namedCurve: 'P-384' },\n true,\n []\n );\n const ecdsaPubJwk = JSON.parse(deserialize(dehydrated.ecdsaPub));\n const ecdsaPublicKey = await crypto.subtle.importKey(\n 'jwk',\n ecdsaPubJwk,\n { name: 'ECDSA', namedCurve: 'P-384' },\n true,\n ['verify']\n );\n let ecdhPrivateKey: CryptoKey | null = null;\n let ecdsaPrivateKey: CryptoKey | null = null;\n if (dehydrated.ecdhPriv) {\n const ecdhPrivJwk = JSON.parse(deserialize(dehydrated.ecdhPriv));\n ecdhPrivateKey = await crypto.subtle.importKey(\n 'jwk',\n ecdhPrivJwk,\n { name: 'ECDH', namedCurve: 'P-384' },\n true,\n ['deriveKey', 'deriveBits']\n );\n }\n if (dehydrated.ecdsaPriv) {\n const ecdsaPrivJwk = JSON.parse(deserialize(dehydrated.ecdsaPriv));\n ecdsaPrivateKey = await crypto.subtle.importKey(\n 'jwk',\n ecdsaPrivJwk,\n { name: 'ECDSA', namedCurve: 'P-384' },\n true,\n ['sign']\n );\n }\n const existing = this._keys.get(id);\n if (!existing || !existing.privateKey) {\n this._keys.set(id, { privateKey: ecdhPrivateKey, publicKey: ecdhPublicKey });\n }\n const existingAuth = this._authKeys.get(id);\n if (!existingAuth || !existingAuth.privateKey) {\n this._authKeys.set(id, { privateKey: ecdsaPrivateKey, publicKey: ecdsaPublicKey });\n }\n }\n\n public getKeyPair(id: string): KeyPair | null {\n return this._keys.get(id) || null;\n }\n\n public getAuthKeyPair(id: string): AuthKeyPair | null {\n return this._authKeys.get(id) || null;\n }\n\n public async dehydrateKeyPair(id: string): Promise<DehydratedKeys> {\n const keyPair = this._keys.get(id);\n const authKeyPair = this._authKeys.get(id);\n if (!keyPair || !authKeyPair) {\n throw new Error(`No key pair for ${id}`);\n }\n const ecdhPubJwk = await crypto.subtle.exportKey('jwk', keyPair.publicKey);\n const ecdhPrivJwk = keyPair.privateKey ? await crypto.subtle.exportKey('jwk', keyPair.privateKey) : null;\n const ecdsaPubJwk = await crypto.subtle.exportKey('jwk', authKeyPair.publicKey);\n const ecdsaPrivJwk = authKeyPair.privateKey ? await crypto.subtle.exportKey('jwk', authKeyPair.privateKey) : null;\n const ecdhPubBase64 = JSON.stringify(ecdhPubJwk).replace(/=+$/, '');\n const ecdhPrivBase64 = ecdhPrivJwk ? JSON.stringify(ecdhPrivJwk).replace(/=+$/, '') : '';\n const ecdsaPubBase64 = JSON.stringify(ecdsaPubJwk).replace(/=+$/, '');\n const ecdsaPrivBase64 = ecdsaPrivJwk ? JSON.stringify(ecdsaPrivJwk).replace(/=+$/, '') : '';\n return {\n ecdhPub: serialize(ecdhPubBase64),\n ecdhPriv: ecdhPrivBase64 ? serialize(ecdhPrivBase64) : '',\n ecdsaPub: serialize(ecdsaPubBase64),\n ecdsaPriv: ecdsaPrivBase64 ? serialize(ecdsaPrivBase64) : '',\n };\n }\n\n public async getRawEcdsaPublicKey(id: string): Promise<Uint8Array | null> {\n const authKeyPair = this._authKeys.get(id);\n if (!authKeyPair) {\n return null;\n }\n const jwk = await crypto.subtle.exportKey('jwk', authKeyPair.publicKey);\n const x = fromBase64Url(jwk.x!);\n const y = fromBase64Url(jwk.y!);\n // SEC1 uncompressed point: 0x04 || x || y\n return concatBytes(new Uint8Array([0x04]), x, y);\n }\n\n public async packDehydratedKeys(id: string): Promise<string> {\n const dehydrated = await this.dehydrateKeyPair(id);\n const combined = JSON.stringify(dehydrated);\n return toBase64(new TextEncoder().encode(combined));\n }\n\n public async hydrateFromPacked(id: string, masterKey: string): Promise<void> {\n const decoded = utf8Decode(fromBase64(masterKey));\n const dehydrated: DehydratedKeys = JSON.parse(decoded);\n await this.hydrateKeyPair(id, dehydrated);\n }\n}\n\nexport { KeyStore, KeyPair, AuthKeyPair, DehydratedKeys };","import { RatchetState, CipherMessage, CipherMessageHeader } from './types.d';\nimport { KeyStore } from './KeyStore';\nimport { deserialize, toHex, fromHex, concatBytes, utf8Encode } from '../utilities';\nimport {\n encryptAesGcm,\n decryptAesGcm,\n deriveBitsHkdf,\n randomBytes,\n AES_GCM_IV_BYTES,\n} from './primitives';\n\n// We rely on the WebCrypto global (`crypto`/`globalThis.crypto`) — present in\n// browsers, CF Workers, and Node 19+. No `require('crypto')` Node fallback;\n// supported runtimes all expose WebCrypto natively.\n\nasync function getPubKeyHex(pubKey: CryptoKey): Promise<string> {\n const exported = await crypto.subtle.exportKey('raw', pubKey);\n return toHex(new Uint8Array(exported));\n}\n\nasync function keysEqual(key1: CryptoKey, key2: CryptoKey): Promise<boolean> {\n const hex1 = await getPubKeyHex(key1);\n const hex2 = await getPubKeyHex(key2);\n return hex1 === hex2;\n}\n\n\nclass DoubleRatchet {\n private state: RatchetState;\n private sessionType: 'global' | 'specific';\n private maxSkip: number = 3000;\n private overlapPeriod: number = 30000; // ms\n private windowSize: number = 100; // messages per DH ratchet\n\n constructor(senderId: string, recipientId: string, sessionType: 'global' | 'specific', isClient: boolean = true) {\n this.sessionType = sessionType;\n const keyStore = KeyStore.getInstance();\n const senderKeyPair = keyStore.getKeyPair(senderId);\n const recipientKeyPair = keyStore.getKeyPair(recipientId);\n\n if (!senderKeyPair || !senderKeyPair.privateKey) {\n throw new Error(`Missing own key pair for sender ${senderId}`);\n }\n if (!recipientKeyPair || !recipientKeyPair.publicKey) {\n throw new Error(`Missing public key for recipient ${recipientId}`);\n }\n\n this.state = {\n clientDhPriv: isClient ? senderKeyPair.privateKey : null,\n clientDhPub: isClient ? senderKeyPair.publicKey : recipientKeyPair.publicKey,\n serverDhPriv: isClient ? null : senderKeyPair.privateKey,\n serverDhPub: isClient ? recipientKeyPair.publicKey : senderKeyPair.publicKey,\n rootKey: null,\n sendChainKey: null,\n recvChainKey: null,\n sendCount: 0,\n recvCount: 0,\n prevChainLength: 0,\n currentSkippedKeys: new Map(),\n oldSkippedMessageKeys: new Map(),\n };\n\n appLogger.debug(`Constructor: senderId=${senderId}, recipientId=${recipientId}, isClient=${isClient}`);\n }\n\n private hkdf(input: Uint8Array, info: string, length: number): Promise<Uint8Array> {\n return deriveBitsHkdf(input, info, length);\n }\n\n public async initializeSession(isClient: boolean = true): Promise<void> {\n appLogger.debug(`Initializing session: isClient=${isClient}, sessionType=${this.sessionType}`);\n const ownPriv = isClient ? this.state.clientDhPriv : this.state.serverDhPriv;\n if (!ownPriv) {\n throw new Error('Missing own private key');\n }\n const remotePub = isClient ? this.state.serverDhPub : this.state.clientDhPub;\n const sharedSecret = await crypto.subtle.deriveBits(\n { name: 'ECDH', public: remotePub },\n ownPriv,\n 384\n );\n const keys = await this.hkdf(new Uint8Array(sharedSecret), 'DoubleRatchetInit', 32);\n this.state.rootKey = keys;\n this.state.sendChainKey = this.state.rootKey;\n this.state.recvChainKey = this.state.rootKey;\n appLogger.debug(`Initialized: rootKey set`);\n }\n\n private async dhRatchet(newPubKey: CryptoKey, isClient: boolean = true): Promise<void> {\n appLogger.debug(`DH ratchet: isClient=${isClient}`);\n const ownPriv = isClient ? this.state.clientDhPriv : this.state.serverDhPriv;\n if (!ownPriv) {\n throw new Error('Missing own private key');\n }\n const sharedSecret = await crypto.subtle.deriveBits(\n { name: 'ECDH', public: newPubKey },\n ownPriv,\n 384\n );\n const input = concatBytes(this.state.rootKey!, new Uint8Array(sharedSecret));\n const keys = await this.hkdf(input, 'DoubleRatchetDH', 64);\n this.state.rootKey = keys.subarray(0, 32);\n this.state.recvChainKey = keys.subarray(32);\n this.state.sendChainKey = isClient ? this.state.recvChainKey : this.state.rootKey;\n this.state.prevChainLength = this.state.sendCount;\n this.state.sendCount = 0;\n this.state.recvCount = 0;\n appLogger.debug(`DH ratchet complete`);\n }\n\n private async symmetricRatchet(chainKey: Uint8Array): Promise<[Uint8Array, Uint8Array]> {\n const keys = await this.hkdf(chainKey, 'DoubleRatchetMsg', 64);\n const messageKey = keys.subarray(0, 32);\n const newChainKey = keys.subarray(32);\n appLogger.debug(`Symmetric ratchet: messageKey generated`);\n return [messageKey, newChainKey];\n }\n\n public async encrypt(\n plaintext: string,\n newDhKey: boolean = false,\n senderId: string,\n recipientId: string,\n sessionId: string,\n sessionType: 'global' | 'specific'\n ): Promise<CipherMessage> {\n if (sessionType !== this.sessionType) {\n throw new Error(`Session type mismatch: expected ${this.sessionType}, got ${sessionType}`);\n }\n\n const keyStore = KeyStore.getInstance();\n if (this.sessionType === 'specific' && this.state.sendCount >= this.windowSize && this.state.sendCount > 0) {\n newDhKey = true;\n }\n if (newDhKey && this.sessionType === 'specific') {\n appLogger.debug(`Generating new DH key pair for ${senderId}`);\n const ecdhKeyPair = await crypto.subtle.generateKey(\n { name: 'ECDH', namedCurve: 'P-384' },\n true,\n ['deriveKey', 'deriveBits']\n );\n this.state.clientDhPriv = ecdhKeyPair.privateKey as CryptoKey;\n this.state.clientDhPub = ecdhKeyPair.publicKey as CryptoKey;\n keyStore.keys.set(senderId, { privateKey: ecdhKeyPair.privateKey as CryptoKey, publicKey: ecdhKeyPair.publicKey as CryptoKey });\n await this.dhRatchet(this.state.serverDhPub, true);\n }\n\n const [messageKey, newChainKey] = await this.symmetricRatchet(this.state.sendChainKey!);\n this.state.sendChainKey = newChainKey;\n\n const iv = randomBytes(AES_GCM_IV_BYTES);\n const encrypted = await encryptAesGcm(messageKey, iv, utf8Encode(plaintext));\n const cipherTextWithTag = toHex(encrypted);\n appLogger.debug(`Encrypt: plaintextLength=${plaintext.length}, ciphertextLength=${encrypted.byteLength}`);\n\n this.state.sendCount++;\n const dehydratedSender = await keyStore.dehydrateKeyPair(senderId);\n const header: CipherMessageHeader = {\n dhPub: dehydratedSender.ecdhPub,\n prevChainLength: this.state.prevChainLength,\n messageNumber: this.state.sendCount,\n sessionId,\n sessionType,\n senderId,\n recipientId,\n timestamp: Date.now(),\n signature: '',\n };\n appLogger.debug(`Message header:`, header);\n appLogger.debug(`Message header:`, keyStore.getAuthKeyPair(senderId)!.privateKey!);\n const sign = await crypto.subtle.sign(\n { name: 'ECDSA', hash: 'SHA-256' },\n keyStore.getAuthKeyPair(senderId)!.privateKey!,\n utf8Encode(JSON.stringify({\n dhPub: header.dhPub,\n prevChainLength: header.prevChainLength,\n messageNumber: header.messageNumber,\n sessionId,\n sessionType,\n senderId,\n recipientId,\n timestamp: header.timestamp\n }))\n );\n header.signature = toHex(new Uint8Array(sign));\n\n appLogger.debug(`Encrypted: sessionId=${sessionId}, messageNumber=${this.state.sendCount}, sender=${senderId}, recipient=${recipientId}`);\n return {\n header,\n ciphertext: cipherTextWithTag,\n nonce: toHex(iv),\n };\n }\n\n private cleanOldSkippedKeys(): void {\n const now = Date.now();\n for (const skipped of this.state.oldSkippedMessageKeys.entries()) {\n // [pubHex, { created }]\n const pubHex = skipped[0];\n const data = skipped[1];\n const created = data.created;\n if (now > created + this.overlapPeriod) {\n this.state.oldSkippedMessageKeys.delete(pubHex);\n }\n }\n }\n\n public async decrypt(message: CipherMessage, isClient: boolean = true): Promise<string> {\n // const { header, ciphertext, nonce } = message;\n const header = message.header;\n const ciphertext = message.ciphertext;\n const nonce = message.nonce;\n if (header.sessionType !== this.sessionType) {\n throw new Error(`Session type mismatch: expected ${this.sessionType}, got ${header.sessionType}`);\n }\n\n const keyStore = KeyStore.getInstance();\n const verify = await crypto.subtle.verify(\n { name: 'ECDSA', hash: 'SHA-256' },\n keyStore.getAuthKeyPair(header.senderId)!.publicKey,\n fromHex(header.signature),\n utf8Encode(JSON.stringify({\n dhPub: header.dhPub,\n prevChainLength: header.prevChainLength,\n messageNumber: header.messageNumber,\n sessionId: header.sessionId,\n sessionType: header.sessionType,\n senderId: header.senderId,\n recipientId: header.recipientId,\n timestamp: header.timestamp\n }))\n );\n if (!verify) {\n throw new Error('Invalid signature');\n }\n\n const maxAge = 5 * 60 * 1000;\n if (Math.abs(Date.now() - header.timestamp) > maxAge) {\n throw new Error('CipherMessage too old, possible replay attack');\n }\n\n appLogger.debug(`Decrypting: sessionId=${header.sessionId}, messageNumber=${header.messageNumber}, sender=${header.senderId}, recipient=${header.recipientId}`);\n\n if (!ciphertext || !nonce || !header.dhPub) {\n throw new Error('Invalid message: missing ciphertext, nonce, or dhPub');\n }\n\n if (!/^[0-9a-fA-F]+$/.test(ciphertext) || ciphertext.length % 2 !== 0) {\n throw new Error(`Invalid ciphertext: not a valid hex string (length=${ciphertext.length})`);\n }\n\n if (!/^[0-9a-fA-F]+$/.test(nonce) || nonce.length % 2 !== 0) {\n throw new Error(`Invalid nonce: not a valid hex string (length=${nonce.length})`);\n }\n\n const ciphertextBuffer = fromHex(ciphertext);\n const nonceBuffer = fromHex(nonce);\n if (nonceBuffer.length !== 12) {\n throw new Error(`Invalid nonce: must be 12 bytes (length=${nonceBuffer.length})`);\n }\n\n const senderPubJwk = JSON.parse(deserialize(header.dhPub));\n const senderPubKey = await crypto.subtle.importKey(\n 'jwk',\n senderPubJwk,\n { name: 'ECDH', namedCurve: 'P-384' },\n true,\n []\n );\n const senderPubHex = await getPubKeyHex(senderPubKey as CryptoKey);\n const currentSenderPub = isClient ? this.state.serverDhPub : this.state.clientDhPub;\n const currentSenderPubHex = await getPubKeyHex(currentSenderPub);\n\n this.cleanOldSkippedKeys();\n\n let messageKey: Uint8Array;\n if (senderPubHex === currentSenderPubHex) {\n // Current chain\n if (header.messageNumber > this.state.recvCount) {\n const numSkips = header.messageNumber - this.state.recvCount - 1;\n if (numSkips > this.maxSkip) {\n throw new Error('Too many skipped messages');\n }\n for (let i = 0; i < numSkips; i++) {\n const [skippedKey, newChainKey] = await this.symmetricRatchet(this.state.recvChainKey!);\n this.state.currentSkippedKeys.set(this.state.recvCount + 1 + i, skippedKey);\n this.state.recvChainKey = newChainKey;\n }\n }\n\n if (this.state.currentSkippedKeys.has(header.messageNumber)) {\n messageKey = this.state.currentSkippedKeys.get(header.messageNumber)!;\n this.state.currentSkippedKeys.delete(header.messageNumber);\n appLogger.debug(`Using skipped key for messageNumber=${header.messageNumber}`);\n } else {\n const [msgKey, newChainKey] = await this.symmetricRatchet(this.state.recvChainKey!);\n messageKey = msgKey;\n this.state.recvChainKey = newChainKey;\n }\n\n this.state.recvCount = Math.max(this.state.recvCount, header.messageNumber);\n } else {\n // Check if new DH pub\n const expectedPubKey = keyStore.getKeyPair(header.senderId)!.publicKey;\n if (!(await keysEqual(senderPubKey as CryptoKey, expectedPubKey))) {\n // New DH key, handle skip on old chain before ratchet\n const oldSenderPubHex = currentSenderPubHex;\n const numSkips = header.prevChainLength - this.state.recvCount;\n if (numSkips > this.maxSkip) {\n throw new Error('Too many skipped messages on old chain');\n }\n let oldSkips = this.state.oldSkippedMessageKeys.get(oldSenderPubHex)?.skips || new Map<number, Uint8Array>();\n let tempRecvChainKey = this.state.recvChainKey!;\n for (let i = 0; i < numSkips; i++) {\n const [skippedKey, newChainKey] = await this.symmetricRatchet(tempRecvChainKey);\n oldSkips.set(this.state.recvCount + 1 + i, skippedKey);\n tempRecvChainKey = newChainKey;\n }\n this.state.oldSkippedMessageKeys.set(oldSenderPubHex, { skips: oldSkips, created: Date.now() });\n\n // Clear current skipped\n this.state.currentSkippedKeys.clear();\n\n // Perform DH ratchet\n await this.dhRatchet(senderPubKey as CryptoKey, isClient);\n\n // Update state sender pub\n if (isClient) {\n this.state.serverDhPub = senderPubKey as CryptoKey;\n } else {\n this.state.clientDhPub = senderPubKey as CryptoKey;\n }\n\n // Update keyStore\n keyStore.storeRemotePublicKeys(header.senderId, senderPubKey as CryptoKey, keyStore.getAuthKeyPair(header.senderId)!.publicKey);\n\n // Now derive message key for new chain\n if (header.messageNumber > this.state.recvCount) {\n const numSkipsNew = header.messageNumber - this.state.recvCount - 1;\n if (numSkipsNew > this.maxSkip) {\n throw new Error('Too many skipped messages');\n }\n for (let i = 0; i < numSkipsNew; i++) {\n const [skippedKey, newChainKey] = await this.symmetricRatchet(this.state.recvChainKey!);\n this.state.currentSkippedKeys.set(this.state.recvCount + 1 + i, skippedKey);\n this.state.recvChainKey = newChainKey;\n }\n }\n\n if (this.state.currentSkippedKeys.has(header.messageNumber)) {\n messageKey = this.state.currentSkippedKeys.get(header.messageNumber)!;\n this.state.currentSkippedKeys.delete(header.messageNumber);\n } else {\n const [msgKey, newChainKey] = await this.symmetricRatchet(this.state.recvChainKey!);\n messageKey = msgKey;\n this.state.recvChainKey = newChainKey;\n }\n\n this.state.recvCount = Math.max(this.state.recvCount, header.messageNumber);\n } else {\n // Old chain\n const oldData = this.state.oldSkippedMessageKeys.get(senderPubHex);\n if (oldData && oldData.skips.has(header.messageNumber)) {\n messageKey = oldData.skips.get(header.messageNumber)!;\n oldData.skips.delete(header.messageNumber);\n if (oldData.skips.size === 0) {\n this.state.oldSkippedMessageKeys.delete(senderPubHex);\n }\n appLogger.debug(`Using old skipped key for messageNumber=${header.messageNumber} on old chain`);\n } else {\n throw new Error('No key for message on old chain');\n }\n }\n }\n\n try {\n const decrypted = await decryptAesGcm(messageKey, nonceBuffer, ciphertextBuffer);\n appLogger.debug(`Decrypted successfully: sessionId=${header.sessionId}, messageNumber=${header.messageNumber}`);\n return new TextDecoder().decode(decrypted);\n } catch (error) {\n appLogger.error(`Decryption failed: ${error instanceof Error ? error.message : 'unknown error'}`);\n throw new Error(`Decryption failed: ${error instanceof Error ? error.message : 'unknown error'}`);\n }\n }\n\n public getState(): RatchetState {\n return { ...this.state };\n }\n\n public setState(state: RatchetState): void {\n this.state = { ...state };\n }\n}\n\nexport {\n RatchetState,\n CipherMessage,\n CipherMessageHeader,\n DoubleRatchet,\n}","import { prove as groth16Prove, verify as groth16Verify } from '@zk-kit/groth16';\nimport type { PublicSignals as Groth16PublicSignals } from '@zk-kit/groth16';\n// Shared ZK types live in src/types/zk so the workers build (which can't pull\n// in snarkjs) sees the same VerificationKey / Groth16Proof shapes used here.\nimport type { Groth16Proof, VerificationKey } from '../types/zk';\n\n// Re-export so existing consumers of crypto/* keep working\nexport type SnarkProof = Groth16Proof;\nexport type { VerificationKey } from '../types/zk';\n\nexport interface ZkCompiled {\n verificationKey: VerificationKey;\n}\n\n// Authentication public input structure\nexport class AuthPublicInput {\n commitment: string;\n nonce: string;\n ecdsaPubHash: string;\n\n constructor(commitment: string, nonce: string, ecdsaPubHash: string) {\n this.commitment = commitment;\n this.nonce = nonce;\n this.ecdsaPubHash = ecdsaPubHash;\n }\n\n toPublicSignals(): string[] {\n return [this.commitment, this.nonce, this.ecdsaPubHash];\n }\n}\n\n// Helper functions for Field operations using native BigInt\nexport class Field {\n private value: bigint;\n public static readonly FIELD_SIZE = BigInt('21888242871839275222246405745257275088548364400416034343698204186575808495617'); // BN254 field size\n\n constructor(value: bigint | string | number) {\n if (typeof value === 'string') {\n this.value = BigInt(value);\n } else if (typeof value === 'number') {\n this.value = BigInt(value);\n } else {\n this.value = value;\n }\n // Ensure value is within field\n this.value = this.value % Field.FIELD_SIZE;\n if (this.value < 0n) {\n this.value += Field.FIELD_SIZE;\n }\n }\n\n toBigInt(): bigint {\n return this.value;\n }\n\n toString(): string {\n return this.value.toString();\n }\n\n toHex(): string {\n return '0x' + this.value.toString(16).padStart(64, '0');\n }\n\n equals(other: Field): boolean {\n return this.value === other.value;\n }\n\n static fromHex(hex: string): Field {\n if (!hex.startsWith('0x')) {\n throw new Error('Invalid hex prefix');\n }\n return new Field(BigInt(hex));\n }\n}\n\n// Import Poseidon from circomlibjs\nlet poseidonModule: any = null;\nlet poseidonF: any = null;\n\nasync function loadPoseidon() {\n if (!poseidonModule) {\n try {\n // Try to load circomlibjs poseidon\n const buildPoseidon = (await import('circomlibjs')).buildPoseidon;\n const poseidonBuilder = await buildPoseidon();\n poseidonModule = poseidonBuilder;\n poseidonF = poseidonBuilder.F;\n } catch (error) {\n console.warn('Failed to load circomlibjs poseidon, using fallback:', error);\n // Fallback implementation for testing - this is NOT cryptographically secure\n poseidonModule = async (inputs: any[]) => {\n const data = inputs.map(i => i.toString()).join('');\n const encoder = new TextEncoder();\n const hashBuffer = await crypto.subtle.digest('SHA-256', encoder.encode(data));\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n const hashHex = hashArray.map(b => b.toString(16).padStart(2, '0')).join('');\n return BigInt('0x' + hashHex) % Field.FIELD_SIZE;\n };\n poseidonF = {\n toString: (val: any) => val.toString()\n };\n }\n }\n return { poseidon: poseidonModule, F: poseidonF };\n}\n\n// Poseidon hash implementation\nexport class Poseidon {\n static async hash(inputs: Field[]): Promise<Field> {\n const { poseidon, F } = await loadPoseidon();\n const inputBigInts = inputs.map(f => f.toBigInt());\n const hashResult = poseidon(inputBigInts);\n const hashString = F.toString(hashResult);\n return new Field(BigInt(hashString));\n }\n}\n\n// Encoding: BigInt to hex string\nexport function encodeToHex(field: Field): string {\n return field.toHex();\n}\n\n// Decoding: Hex string back to Field\nexport function decodeFromHex(hexStr: string): Field {\n return Field.fromHex(hexStr);\n}\n\n// Circuit configuration - buffers only\nexport interface CircuitBufferConfig {\n wasm: Uint8Array;\n zkey: Uint8Array;\n verificationKey: VerificationKey;\n}\n\n// Circuit wrapper for HashKnowledge\nexport class HashKnowledge {\n private static wasmBuffer?: Uint8Array;\n private static zkeyBuffer?: Uint8Array;\n private static verificationKey?: VerificationKey;\n\n static setCircuitBuffers(wasm: Uint8Array, zkey: Uint8Array, verificationKey: VerificationKey) {\n this.wasmBuffer = wasm;\n this.zkeyBuffer = zkey;\n this.verificationKey = verificationKey;\n }\n\n static async compile(): Promise<ZkCompiled> {\n if (!this.verificationKey) {\n throw new Error('Circuit not initialized. Call setCircuitBuffers() first.');\n }\n return { verificationKey: this.verificationKey };\n }\n\n static async prove(secret: Field): Promise<{ proof: SnarkProof; publicSignals: string[] }> {\n if (!this.wasmBuffer || !this.zkeyBuffer) {\n throw new Error('Circuit not initialized. Call setCircuitBuffers() first.');\n }\n\n // Calculate the hash (this should match what the circuit computes)\n await Poseidon.hash([secret]);\n\n // Create input for the circuit\n const input = {\n secret: secret.toString()\n };\n\n // Generate the proof using @zk-kit/groth16\n const { proof, publicSignals } = await groth16Prove(\n input,\n this.wasmBuffer,\n this.zkeyBuffer\n );\n\n return { proof, publicSignals: publicSignals as string[] };\n }\n\n static async verify(proof: SnarkProof, publicSignals?: string[]): Promise<boolean> {\n if (!this.verificationKey) {\n throw new Error('Circuit not initialized. Call setCircuitBuffers() first.');\n }\n\n try {\n // Cast to satisfy @zk-kit/groth16's stricter Groth16Proof type\n // (protocol/curve required there, optional in our shared type).\n const result = await groth16Verify(\n this.verificationKey,\n { proof: proof as unknown as Parameters<typeof groth16Verify>[1][\"proof\"], publicSignals: (publicSignals || []) as Groth16PublicSignals }\n );\n return result;\n } catch (error) {\n console.error('Verification error:', error);\n return false;\n }\n }\n}\n\n// Circuit wrapper for PreimagePoK (Proof of Knowledge)\nexport class PreimagePoK {\n private static wasmBuffer?: Uint8Array;\n private static zkeyBuffer?: Uint8Array;\n private static verificationKey?: VerificationKey;\n\n static setCircuitBuffers(wasm: Uint8Array, zkey: Uint8Array, verificationKey: VerificationKey) {\n this.wasmBuffer = wasm;\n this.zkeyBuffer = zkey;\n this.verificationKey = verificationKey;\n }\n\n static async compile(): Promise<ZkCompiled> {\n if (!this.verificationKey) {\n throw new Error('Circuit not initialized. Call setCircuitBuffers() first.');\n }\n return { verificationKey: this.verificationKey };\n }\n\n static async prove(\n publicInput: AuthPublicInput,\n secret: Field,\n salt: Field,\n ecdsaPub: Field\n ): Promise<{ proof: SnarkProof; publicSignals: string[] }> {\n if (!this.wasmBuffer || !this.zkeyBuffer) {\n throw new Error('Circuit not initialized. Call setCircuitBuffers() first.');\n }\n\n // Create input for the circuit\n const input = {\n // Public inputs\n commitment: publicInput.commitment,\n nonce: publicInput.nonce,\n ecdsaPubHash: publicInput.ecdsaPubHash,\n // Private inputs\n secret: secret.toString(),\n salt: salt.toString(),\n ecdsaPub: ecdsaPub.toString()\n };\n\n // Generate the proof using @zk-kit/groth16\n const { proof, publicSignals } = await groth16Prove(\n input,\n this.wasmBuffer,\n this.zkeyBuffer\n );\n\n return { proof, publicSignals: publicSignals as string[] };\n }\n\n static async verify(proof: SnarkProof, publicSignals?: string[]): Promise<boolean> {\n if (!this.verificationKey) {\n throw new Error('Circuit not initialized. Call setCircuitBuffers() first.');\n }\n\n try {\n // Cast to satisfy @zk-kit/groth16's stricter Groth16Proof type\n // (protocol/curve required there, optional in our shared type).\n const result = await groth16Verify(\n this.verificationKey,\n { proof: proof as unknown as Parameters<typeof groth16Verify>[1][\"proof\"], publicSignals: (publicSignals || []) as Groth16PublicSignals }\n );\n return result;\n } catch (error) {\n console.error('Verification error:', error);\n return false;\n }\n }\n}\n\n// Verify function for HashKnowledge proof\nexport async function verifyHashKnowledge(\n proof: SnarkProof,\n expectedOutput?: Field,\n publicSignals?: string[]\n): Promise<boolean> {\n try {\n const result = await HashKnowledge.verify(proof, publicSignals);\n\n if (!result) {\n console.error('Hash knowledge proof verification failed');\n return false;\n }\n\n // Optionally verify the public output matches expected value\n if (expectedOutput && publicSignals && publicSignals.length > 0) {\n const outputField = new Field(publicSignals[0]);\n if (!outputField.equals(expectedOutput)) {\n console.error('Public output mismatch in hash knowledge proof');\n return false;\n }\n }\n\n return true;\n } catch (error) {\n console.error('Error verifying hash knowledge proof:', error);\n return false;\n }\n}\n\n// Verify function for PreimagePoK proof\nexport async function verifyPreimagePoK(\n proof: SnarkProof,\n publicSignals?: string[]\n): Promise<boolean> {\n try {\n const result = await PreimagePoK.verify(proof, publicSignals);\n\n if (!result) {\n console.error('Preimage proof verification failed');\n return false;\n }\n\n console.log('Preimage proof verified successfully');\n return true;\n } catch (error) {\n console.error('Error verifying preimage proof:', error);\n return false;\n }\n}\n\n// Generic verify function that determines which program to use\nexport async function verify(\n programType: 'HashKnowledge' | 'PreimagePoK',\n proof: SnarkProof,\n options?: {\n expectedOutput?: Field,\n publicSignals?: string[]\n }\n): Promise<boolean> {\n if (programType === 'HashKnowledge') {\n return verifyHashKnowledge(proof, options?.expectedOutput, options?.publicSignals);\n } else if (programType === 'PreimagePoK') {\n return verifyPreimagePoK(proof, options?.publicSignals);\n } else {\n throw new Error(`Unknown program type: ${programType}`);\n }\n}\n\n// Helper function to verify proof directly\nexport async function quickVerify(\n program: typeof HashKnowledge | typeof PreimagePoK,\n proof: SnarkProof,\n publicSignals?: string[]\n): Promise<boolean> {\n try {\n return await program.verify(proof, publicSignals);\n } catch (error) {\n console.error('Quick verify failed:', error);\n return false;\n }\n}\n\n// Function to initialize circuits with buffers\nexport function initializeCircuits(config: {\n hashKnowledge?: CircuitBufferConfig;\n preimagePoK?: CircuitBufferConfig;\n}) {\n if (config.hashKnowledge) {\n HashKnowledge.setCircuitBuffers(\n config.hashKnowledge.wasm,\n config.hashKnowledge.zkey,\n config.hashKnowledge.verificationKey\n );\n }\n if (config.preimagePoK) {\n PreimagePoK.setCircuitBuffers(\n config.preimagePoK.wasm,\n config.preimagePoK.zkey,\n config.preimagePoK.verificationKey\n );\n }\n}\n\n// Function to compile and cache verification keys\nexport async function compilePrograms(): Promise<{\n hashKnowledge: ZkCompiled,\n preimagePoK: ZkCompiled\n}> {\n console.log('Compiling ZK circuits...');\n\n const [hashKnowledgeCompiled, preimagePoKCompiled] = await Promise.all([\n HashKnowledge.compile(),\n PreimagePoK.compile()\n ]);\n\n console.log('ZK circuits compiled successfully');\n\n return {\n hashKnowledge: hashKnowledgeCompiled,\n preimagePoK: preimagePoKCompiled\n };\n}\n\nexport { Field as FieldElement }; // Export with alias to avoid confusion with Field type\n","import { PreimagePoK, AuthPublicInput, Field, Poseidon, verify, VerificationKey } from './ZeroKnowledge';\nimport { toHex, fromHex, fromBase64Url } from '../utilities';\n\ninterface AuthToken {\n peerId: string;\n timestamp: number;\n signature: string;\n}\n\nclass Authenticator {\n private trustedKeys: Map<string, CryptoKey> = new Map();\n private zkVerificationKey: VerificationKey | null = null;\n\n public async initializeZK(): Promise<void> {\n if (!this.zkVerificationKey) {\n appLogger.debug('Compiling PreimagePoK for verification...');\n const compiled = await PreimagePoK.compile();\n this.zkVerificationKey = compiled.verificationKey;\n }\n }\n\n public getZKVerificationKey(): VerificationKey | null {\n return this.zkVerificationKey;\n }\n\n public addTrustedServer(serverId: string, publicKey: CryptoKey): void {\n this.trustedKeys.set(serverId, publicKey);\n }\n\n public async generateAuthToken(peerId: string, privateKey: CryptoKey): Promise<AuthToken> {\n if (!privateKey) {\n throw new Error(`No private key for ${peerId}`);\n }\n const timestamp = Date.now();\n const data = new TextEncoder().encode(`${peerId}:${timestamp}`);\n const signature = await crypto.subtle.sign(\n { name: 'ECDSA', hash: 'SHA-256' },\n privateKey,\n data\n );\n return { peerId, timestamp, signature: toHex(new Uint8Array(signature)) };\n }\n\n public async verifyAuthToken(token: AuthToken, clientPublicKey: CryptoKey): Promise<boolean> {\n const maxAge = 5 * 60 * 1000;\n if (Math.abs(Date.now() - token.timestamp) > maxAge) {\n appLogger.debug('Auth token expired');\n return false;\n }\n return await crypto.subtle.verify(\n { name: 'ECDSA', hash: 'SHA-256' },\n clientPublicKey,\n fromHex(token.signature),\n new TextEncoder().encode(`${token.peerId}:${token.timestamp}`)\n );\n }\n\n public async verifyZKProof(\n proof: any,\n publicInput: AuthPublicInput,\n storedCommitment: Field,\n ecdsaPub: CryptoKey\n ): Promise<boolean> {\n if (!this.zkVerificationKey) {\n throw new Error('ZK verification key not initialized');\n }\n\n // Convert publicInput to signals array for snarkjs\n const publicSignals = publicInput.toPublicSignals();\n\n // Verify the proof using snarkjs\n const isValid = await verify('PreimagePoK', proof, { publicSignals });\n if (!isValid) {\n appLogger.debug('ZK proof verification failed');\n return false;\n }\n\n // Verify the commitment matches stored value\n const proofCommitment = new Field(publicSignals[0]);\n const matchesCommitment = proofCommitment.equals(storedCommitment);\n\n // Verify nonce matches\n const proofNonce = new Field(publicSignals[1]);\n const expectedNonce = new Field(publicInput.nonce);\n const matchesNonce = proofNonce.equals(expectedNonce);\n\n // Verify ECDSA public key hash\n const ecdsaJwk = await crypto.subtle.exportKey('jwk', ecdsaPub);\n const ecdsaHex = toHex(fromBase64Url(ecdsaJwk.x!)).slice(0, 64);\n const ecdsaPubField = new Field(BigInt('0x' + ecdsaHex));\n const expectedEcdsaPubHash = await Poseidon.hash([ecdsaPubField]);\n const proofEcdsaPubHash = new Field(publicSignals[2]);\n const matchesEcdsaPub = proofEcdsaPubHash.equals(expectedEcdsaPubHash);\n\n appLogger.debug('ZK proof valid:', isValid, 'Commitment:', matchesCommitment, 'Nonce:', matchesNonce, 'ECDSA:', matchesEcdsaPub);\n return isValid && matchesCommitment && matchesNonce && matchesEcdsaPub;\n }\n}\n\nexport { Authenticator, AuthToken };","import { AuthPublicInput, Field, Poseidon } from './ZeroKnowledge';\nimport { Authenticator, AuthToken } from './Authenticator';\nimport { DoubleRatchet } from './DoubleRatchet';\nimport { KeyStore } from './KeyStore';\nimport { CipherMessage, RatchetState } from './types.d';\nimport { toHex, fromBase64Url } from '../utilities';\n\n\nclass DoubleRatchetManager {\n private sessions: Map<string, DoubleRatchet> = new Map();\n private sessionStates: Map<string, RatchetState> = new Map(); // In-memory storage for session states\n private keyStore: KeyStore;\n private _authenticator: Authenticator;\n private registeredUsers: Map<string, { commitment: Field; salt: Field }> = new Map();\n private id: string; // Unique ID for this manager (e.g., client1, server1)\n\n constructor(id: string) {\n this.id = id;\n this.keyStore = KeyStore.getInstance();\n this._authenticator = new Authenticator();\n }\n\n get authenticator(): Authenticator {\n return this._authenticator;\n }\n\n public async addTrustedServer(serverId: string, publicKey: CryptoKey): Promise<void> {\n this._authenticator.addTrustedServer(serverId, publicKey);\n }\n\n public async registerZK(\n clientId: string,\n secret: Field,\n salt: Field,\n ecdsaPub: CryptoKey,\n ): Promise<void> {\n await this._authenticator.initializeZK();\n const ecdsaJwk = await crypto.subtle.exportKey('jwk', ecdsaPub);\n const ecdsaHex = toHex(fromBase64Url(ecdsaJwk.x!)).slice(0, 64);\n const ecdsaPubField = new Field(BigInt('0x' + ecdsaHex));\n const ecdsaPubHash = await Poseidon.hash([ecdsaPubField]);\n const commitment = await Poseidon.hash([secret, salt, ecdsaPubHash]);\n this.registeredUsers.set(clientId, { commitment, salt });\n // NB: never log `secret`, `salt`, or `commitment` — `salt` is a private\n // witness for the ZK circuit and `commitment` is the user's stable id.\n appLogger.debug(`Registered ZK identity for ${clientId}`);\n }\n\n public async performHandshake(\n senderId: string,\n recipientId: string,\n zkProof: any,\n publicInput: AuthPublicInput,\n clientPublicKey: CryptoKey, // ECDH pub for session\n clientAuthPublicKey: CryptoKey, // ECDSA pub for auth\n authToken: AuthToken // Client-generated token\n ): Promise<void> {\n await this._authenticator.initializeZK();\n\n const userData = this.registeredUsers.get(senderId);\n if (!userData) {\n throw new Error(`No registered commitment for ${senderId}`);\n }\n\n const isZKValid = await this._authenticator.verifyZKProof(\n zkProof,\n publicInput,\n userData.commitment,\n clientAuthPublicKey\n );\n if (!isZKValid) {\n throw new Error(`ZK handshake failed for ${senderId}`);\n }\n\n // Verify client-provided auth token\n if (!await this._authenticator.verifyAuthToken(authToken, clientAuthPublicKey)) {\n throw new Error(`Token verification failed for ${senderId}`);\n }\n\n // Store only public keys\n await this.keyStore.storeRemotePublicKeys(senderId, clientPublicKey, clientAuthPublicKey);\n const serverKeyPair = this.keyStore.getKeyPair(recipientId)!;\n const serverAuth = this.keyStore.getAuthKeyPair(recipientId)!;\n await this.keyStore.storeRemotePublicKeys(recipientId, serverKeyPair.publicKey, serverAuth.publicKey);\n appLogger.debug(`Handshake completed for ${senderId} -> ${recipientId}`);\n }\n\n public async initializeSession(\n senderId: string,\n recipientId: string,\n isClient: boolean = true,\n sessionType: 'global' | 'specific' = 'specific',\n sessionId?: string,\n zkProof?: any,\n publicInput?: AuthPublicInput,\n clientPublicKey?: CryptoKey,\n clientAuthPublicKey?: CryptoKey,\n clientEcdhPrivateKey?: CryptoKey,\n clientAuthPrivateKey?: CryptoKey\n ): Promise<string> {\n const keyStore = KeyStore.getInstance();\n const recipientKeyPair = keyStore.getKeyPair(recipientId);\n if (!recipientKeyPair?.publicKey && sessionType === 'specific' && isClient) {\n // Generate auth token from client auth private key if provided\n const authToken = clientAuthPrivateKey ?\n await this._authenticator.generateAuthToken(senderId, clientAuthPrivateKey) :\n await this._authenticator.generateAuthToken(senderId, this.keyStore.getAuthKeyPair(senderId)!.privateKey!);\n\n await this.performHandshake(\n senderId,\n recipientId,\n zkProof!,\n publicInput!,\n clientPublicKey!,\n clientAuthPublicKey!,\n authToken\n );\n } else if (!recipientKeyPair?.publicKey) {\n throw new Error(`Missing public key for ${recipientId}. Perform handshake or register first.`);\n }\n\n const finalSessionId = sessionId || (sessionType === 'specific'\n ? [senderId, recipientId].sort().join(':') + `:${Date.now()}`\n : `${senderId}:${recipientId}:${Date.now()}`);\n\n const ratchet = new DoubleRatchet(senderId, recipientId, sessionType, isClient);\n await ratchet.initializeSession(isClient);\n this.sessions.set(finalSessionId, ratchet);\n await this.saveState(finalSessionId, ratchet.getState());\n appLogger.debug(`Session initialized: ${finalSessionId}, type=${sessionType}`);\n return finalSessionId;\n }\n\n public async encrypt(\n senderId: string,\n recipientId: string,\n sessionId: string,\n plaintext: string,\n newDhKey: boolean = false,\n sessionType: 'global' | 'specific' = 'specific'\n ): Promise<CipherMessage> {\n let ratchet = this.sessions.get(sessionId);\n if (!ratchet) {\n const state = await this.loadState(sessionId);\n if (!state) throw new Error(`Session not found: ${sessionId}`);\n ratchet = new DoubleRatchet(senderId, recipientId, sessionType, false);\n ratchet.setState(state);\n this.sessions.set(sessionId, ratchet);\n }\n\n const message = await ratchet.encrypt(plaintext, newDhKey, senderId, recipientId, sessionId, sessionType);\n await this.saveState(sessionId, ratchet.getState());\n appLogger.debug('KeyStore after encrypt:', Array.from(this.keyStore.keys.entries()).map(([id]) => `${id}: publicKey`));\n return message;\n }\n\n public async decrypt(message: CipherMessage, isClient: boolean = true): Promise<string> {\n // const { sessionId, sessionType, senderId, recipientId } = message.header;\n const header = message.header;\n let ratchet = this.sessions.get(header.sessionId);\n if (!ratchet) {\n const state = await this.loadState(header.sessionId);\n if (!state) throw new Error(`Session not found: ${header.sessionId}`);\n ratchet = new DoubleRatchet(header.senderId, header.recipientId, header.sessionType, isClient);\n ratchet.setState(state);\n this.sessions.set(header.sessionId, ratchet);\n }\n\n const plaintext = await ratchet.decrypt(message, isClient);\n await this.saveState(header.sessionId, ratchet.getState());\n return plaintext;\n }\n\n public async getSessionSharedSecret(sessionId: string): Promise<Uint8Array | null> {\n let ratchet = this.sessions.get(sessionId);\n if (!ratchet) {\n const state = await this.loadState(sessionId);\n if (!state || !state.rootKey) {\n appLogger.debug(`No shared secret found for session: ${sessionId}`);\n return null;\n }\n return state.rootKey;\n }\n\n const state = ratchet.getState();\n if (!state.rootKey) {\n appLogger.debug(`Session ${sessionId} not initialized yet`);\n return null;\n }\n\n return state.rootKey;\n }\n\n private async saveState(sessionId: string, state: RatchetState): Promise<void> {\n appLogger.debug(`Saving state in memory: sessionId=${sessionId}`);\n // Store the state directly in memory\n // No need to serialize/deserialize as we're keeping it in memory\n this.sessionStates.set(`${this.id}-${sessionId}`, state);\n }\n\n private async loadState(sessionId: string): Promise<RatchetState | null> {\n appLogger.debug(`Loading state from memory: sessionId=${sessionId}`);\n // Retrieve the state directly from memory\n const state = this.sessionStates.get(`${this.id}-${sessionId}`);\n return state || null;\n }\n}\n\nexport { DoubleRatchetManager, RatchetState, CipherMessage, AuthPublicInput };","/**\n * Per-chunk AES-256-GCM encryption with random keys and IVs.\n *\n * Each chunk of a stored file gets its own freshly generated 256-bit AES key\n * and 96-bit IV. The (key, IV) pair lives in the file manifest, which the\n * application is responsible for storing under whatever access-control regime\n * it uses (in this codebase: the `SharedSpaceClient` writes manifests into\n * ZK-gated multi-user spaces; the shard store itself is open).\n *\n * Per-chunk keys (rather than a per-file DEK) lets future versions revoke or\n * re-share individual chunks without re-encrypting the whole file. The\n * additional manifest size is dominated by the shard hash list anyway.\n *\n * The cipher itself delegates to the canonical `encryptAesGcm` / `decryptAesGcm`\n * primitives — this class only wraps them with key-material generation and\n * the JSON-friendly base64 serialization the manifest needs.\n */\n\nimport { fromBase64, toBase64 } from \"../utilities/bytes\";\nimport {\n encryptAesGcm,\n decryptAesGcm,\n randomBytes,\n AES_GCM_KEY_BYTES,\n AES_GCM_IV_BYTES,\n} from \"./primitives\";\n\n/**\n * Per-chunk key material, base64-encoded for JSON-friendly storage in the\n * manifest. The IV is unique per chunk; the key is unique per chunk too in\n * this codebase, though that's a stricter property than AES-GCM strictly\n * requires (which is \"unique IV per key\").\n */\nexport interface ChunkKeyMaterial {\n /** Base64-encoded 32-byte AES-256 key. */\n key: string;\n /** Base64-encoded 12-byte AES-GCM IV. */\n iv: string;\n}\n\nexport class ChunkCipher {\n /**\n * Generate a fresh random (key, iv) pair encoded for the manifest.\n * Callers should generate one of these per chunk before calling\n * {@link encryptChunk}.\n */\n generateKeyMaterial(): ChunkKeyMaterial {\n return {\n key: toBase64(randomBytes(AES_GCM_KEY_BYTES)),\n iv: toBase64(randomBytes(AES_GCM_IV_BYTES)),\n };\n }\n\n /**\n * Encrypt `plaintext` under the supplied key + IV. Returns the AES-GCM\n * ciphertext with the 16-byte auth tag appended (WebCrypto's default\n * GCM behavior).\n */\n async encryptChunk(plaintext: Uint8Array, material: ChunkKeyMaterial): Promise<Uint8Array> {\n return encryptAesGcm(fromBase64(material.key), fromBase64(material.iv), plaintext);\n }\n\n /**\n * Inverse of {@link encryptChunk}. Throws if the auth tag fails — that\n * means the ciphertext was tampered with, the key/iv was wrong, or the\n * shards were reassembled incorrectly.\n */\n async decryptChunk(ciphertext: Uint8Array, material: ChunkKeyMaterial): Promise<Uint8Array> {\n try {\n return await decryptAesGcm(\n fromBase64(material.key),\n fromBase64(material.iv),\n ciphertext,\n );\n } catch {\n // WebCrypto throws a vague OperationError on GCM tag mismatch.\n // Surface a stable, readable message so callers can react to it.\n throw new Error(\n \"ChunkCipher.decryptChunk: decryption failed (key/iv mismatch, corrupted ciphertext, or reassembly error)\",\n );\n }\n }\n}\n\nexport default ChunkCipher;\n","/**\n * Passphrase-based wrap / unwrap helpers using WebCrypto.\n *\n * Encrypt a payload with a user-supplied passphrase before persisting it\n * somewhere the server can see (e.g. the manifest blob in a ZK-gated\n * SharedSpace, or chat-key material in a PersonalSpace). The server never\n * sees the passphrase or the plaintext — both wrap and unwrap run entirely\n * client-side.\n *\n * Algorithm (the only one this codebase has ever shipped):\n * - PBKDF2-SHA256 with 200_000 iterations derives a 256-bit AES key from\n * `passphrase || salt`.\n * - AES-256-GCM encrypts the plaintext with a fresh random 12-byte IV.\n * - The auth tag is appended to the ciphertext by WebCrypto's default\n * GCM behaviour, so {@link WrappedPayload.ciphertext} carries it implicitly.\n *\n * The returned {@link WrappedPayload} is JSON-friendly (all base64 fields), so\n * it can be `JSON.stringify`-ed straight into a KV layer.\n */\n\nimport {\n encryptAesGcm,\n decryptAesGcm,\n deriveAesKeyFromPassphrase,\n randomBytes,\n PBKDF2_DEFAULT_ITERATIONS,\n AES_GCM_IV_BYTES,\n} from \"./primitives\";\n\n/**\n * The persisted, JSON-friendly representation of a passphrase-wrapped blob.\n *\n * The `alg` field is a self-describing marker — if we ever rotate KDF/cipher,\n * unwrap can switch on this value to keep older payloads readable.\n */\nexport interface WrappedPayload {\n /** Random per-wrap salt for PBKDF2, base64. */\n salt: string;\n /** AES-GCM IV, base64. */\n iv: string;\n /** AES-GCM ciphertext (includes 16-byte GCM auth tag), base64. */\n ciphertext: string;\n /** Algorithm marker so future readers know what they're looking at. */\n alg: \"PBKDF2-SHA256/AES-256-GCM\";\n /** PBKDF2 iteration count used. */\n iter: number;\n}\n\n/** Length of the PBKDF2 salt, in bytes. */\nconst SALT_BYTES = 16;\n\n/** Encode a `Uint8Array` to standard base64 (with padding). */\nfunction bytesToBase64(bytes: Uint8Array): string {\n // Build chunk-wise to avoid blowing the call stack on large payloads.\n let binary = \"\";\n const CHUNK = 0x8000;\n for (let i = 0; i < bytes.length; i += CHUNK) {\n binary += String.fromCharCode(...bytes.subarray(i, i + CHUNK));\n }\n if (typeof btoa === \"function\") return btoa(binary);\n return Buffer.from(bytes).toString(\"base64\");\n}\n\n/** Decode a base64 string back into a `Uint8Array`. */\nfunction base64ToBytes(b64: string): Uint8Array {\n if (typeof atob === \"function\") {\n const binary = atob(b64);\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);\n return bytes;\n }\n return new Uint8Array(Buffer.from(b64, \"base64\"));\n}\n\n/**\n * Encrypt `plaintext` under a key derived from `passphrase`. The returned\n * payload bundles the salt, IV, and ciphertext so unwrap only needs the\n * passphrase to reverse the operation.\n */\nexport async function wrapWithPassphrase(\n passphrase: string,\n plaintext: Uint8Array,\n): Promise<WrappedPayload> {\n if (typeof passphrase !== \"string\" || passphrase.length === 0) {\n throw new Error(\"wrapWithPassphrase: passphrase must be a non-empty string\");\n }\n const salt = randomBytes(SALT_BYTES);\n const iv = randomBytes(AES_GCM_IV_BYTES);\n const key = await deriveAesKeyFromPassphrase(passphrase, salt, PBKDF2_DEFAULT_ITERATIONS);\n const ciphertext = await encryptAesGcm(key, iv, plaintext);\n return {\n salt: bytesToBase64(salt),\n iv: bytesToBase64(iv),\n ciphertext: bytesToBase64(ciphertext),\n alg: \"PBKDF2-SHA256/AES-256-GCM\",\n iter: PBKDF2_DEFAULT_ITERATIONS,\n };\n}\n\n/**\n * Decrypt a {@link WrappedPayload} produced by {@link wrapWithPassphrase}.\n * Throws if the passphrase is wrong, the payload is tampered with, or the\n * algorithm marker is unrecognised.\n */\nexport async function unwrapWithPassphrase(\n passphrase: string,\n wrapped: WrappedPayload,\n): Promise<Uint8Array> {\n if (typeof passphrase !== \"string\" || passphrase.length === 0) {\n throw new Error(\"unwrapWithPassphrase: passphrase must be a non-empty string\");\n }\n if (wrapped.alg !== \"PBKDF2-SHA256/AES-256-GCM\") {\n throw new Error(`unwrapWithPassphrase: unsupported alg \"${wrapped.alg}\"`);\n }\n const salt = base64ToBytes(wrapped.salt);\n const iv = base64ToBytes(wrapped.iv);\n const ciphertext = base64ToBytes(wrapped.ciphertext);\n const key = await deriveAesKeyFromPassphrase(\n passphrase,\n salt,\n wrapped.iter ?? PBKDF2_DEFAULT_ITERATIONS,\n );\n try {\n return await decryptAesGcm(key, iv, ciphertext);\n } catch {\n // WebCrypto throws a vague OperationError on GCM tag mismatch; turn it\n // into a stable, readable message so callers can react to it.\n throw new Error(\n \"unwrapWithPassphrase: decryption failed (wrong passphrase or tampered payload)\",\n );\n }\n}\n","export enum EventCoreEvents {\n CONNECTED = \"connected\",\n DISCONNECTED = \"disconnected\",\n RECONNECTING = \"reconnecting\",\n ERROR = \"error\",\n DATA_RECEIVED = \"data_received\",\n DATA_SENT = \"data_sent\",\n MESSAGE = \"message\",\n GET_HISTORY = \"get_history\",\n RECEIVED_HISTORY = \"received_history\",\n // Offline layer — connectivity + background sync lifecycle. Emitted by the\n // ConnectivityManager / SyncEngine; apps subscribe to drive a status UI.\n ONLINE = \"online\",\n OFFLINE = \"offline\",\n SYNCING = \"syncing\",\n SYNC_PROGRESS = \"sync_progress\",\n SYNC_COMPLETE = \"sync_complete\",\n SYNC_ERROR = \"sync_error\",\n}\n\n\n/**\n * @public\n * EventCore is a static event emitter with singleton functionality for global event handling.\n */\nexport class EventCore {\n private static eventTarget: EventTarget = new EventTarget();\n private static events = new Map<string, EventListener | CallableFunction>();\n\n /**\n * @remarks Listen to an event.\n * @example EventCore.on('event', (e) =\\> appLogger.debug(e));\n */\n static on(event: EventCoreEvents, handler: EventListener | CallableFunction) {\n if (!EventCore.events.has(event)) {\n EventCore.events.set(event, handler);\n }\n EventCore.eventTarget.addEventListener(event, handler as EventListener);\n }\n\n /**\n * @remarks Stop listening to an event.\n * @example EventCore.off('event', handler);\n */\n static off(event: EventCoreEvents, handler: EventListener | CallableFunction) {\n if (EventCore.events.has(event)) {\n EventCore.events.delete(event);\n }\n EventCore.eventTarget.removeEventListener(event, handler as EventListener);\n }\n\n /**\n * @remarks Emit an event.\n * @example EventCore.emit('event', data);\n */\n static emit(event: EventCoreEvents, data: any) {\n if (!EventCore.events.has(event)) {\n appLogger.debug(`Warning: No listeners for event: ${event}`);\n // appLogger.verbose(`Event data:`, data);\n }\n EventCore.eventTarget.dispatchEvent(new CustomEvent(event, { detail: data }));\n }\n}\n\nexport default EventCore;","/**\n * An end-to-end-encrypted communication session for one local identity\n * (`myId`) talking to an arbitrary set of peers. Wraps `KeyStore` +\n * per-pair `DoubleRatchet` instances and owns the protocol bookkeeping\n * (handshake reciprocation, dedup, role assignment, broadcast fan-out,\n * recipient filtering) so application code doesn't have to.\n *\n * Transport-agnostic by design: the Session never touches a WebSocket\n * (or HTTP, or anything else). Application code:\n * - calls `session.encrypt(text)` and gets back an array of frames it\n * ships over whatever transport it has;\n * - calls `session.receive(frame)` with each inbound frame and acts on\n * the typed result (plaintext, handshake-done, ignored).\n *\n * Frames are plain JSON objects with the same shape the existing chat\n * protocol uses (`{ keyExchange: {...} }` and `{ cipherMessage: {...} }`),\n * so this can drop into a chat app without changing the wire format.\n */\n\nimport { KeyStore } from \"../crypto/KeyStore\";\nimport { DoubleRatchet } from \"../crypto/DoubleRatchet\";\nimport type { CipherMessage } from \"../crypto/types.d\";\n\n// ---------------------------------------------------------------------------\n// Public types\n// ---------------------------------------------------------------------------\n\nexport interface SessionOptions {\n /** This client's identifier (e.g. username / DID / public-key string). */\n myId: string;\n}\n\n/** A handshake frame the application ships to peers (or receives from them). */\nexport interface KeyExchangeFrame {\n type: \"handshake\" | \"update\";\n userId: string;\n /** Base64-encoded JWK of the sender's ECDH public key. */\n ecdhPublicKey: string;\n /** Base64-encoded JWK of the sender's ECDSA public key. */\n ecdsaPublicKey: string;\n}\n\n/** A ciphertext frame, addressed to exactly one peer. */\nexport interface CipherFrame {\n cipherMessage: CipherMessage;\n}\n\n/** Anything inbound the application might hand to `session.receive()`. */\nexport type IncomingFrame =\n | { keyExchange: KeyExchangeFrame }\n | { cipherMessage: CipherMessage }\n // Permits passing arbitrary frames; Session returns `kind: 'ignored'`.\n | Record<string, unknown>;\n\n/** Outcome of feeding one frame through `session.receive()`. */\nexport type ReceiveResult =\n | {\n kind: \"plaintext\";\n /** The sender's id (from the cipherMessage header). */\n from: string;\n /** Decrypted message body. */\n text: string;\n /** The original cipherMessage, for callers that want it. */\n cipherMessage: CipherMessage;\n }\n | {\n kind: \"handshake\";\n /** The peer whose handshake was just processed. */\n peerId: string;\n /**\n * If non-null, the application MUST send this frame back to the peer\n * (e.g. broadcast on the room WebSocket). It's our reciprocation —\n * giving the peer our public keys so they can verify our messages.\n *\n * The Session dedups internally: we only emit this on the first\n * handshake we process for a given peer in this Session's lifetime.\n */\n outbound: { keyExchange: KeyExchangeFrame } | null;\n }\n | {\n kind: \"ignored\";\n /** Why we ignored the frame (debugging aid; not for branching on). */\n reason: string;\n };\n\n// ---------------------------------------------------------------------------\n// EncryptedSession\n// ---------------------------------------------------------------------------\n\nexport class EncryptedSession {\n private readonly myId: string;\n private readonly keyStore: KeyStore;\n\n /** One DoubleRatchet per peer pair. */\n private readonly ratchets = new Map<string, DoubleRatchet>();\n\n /** Peers we've already sent our keyExchange to in this Session. */\n private readonly sentHandshakeTo = new Set<string>();\n\n /** Resolved when own keys are generated and ready to use. */\n private readonly _ready: Promise<void>;\n private _resolveReady!: () => void;\n private _initialized = false;\n\n constructor(opts: SessionOptions) {\n if (!opts || !opts.myId) {\n throw new Error(\"EncryptedSession: `myId` is required\");\n }\n this.myId = opts.myId;\n this.keyStore = KeyStore.getInstance();\n this._ready = new Promise<void>((resolve) => {\n this._resolveReady = resolve;\n });\n }\n\n /** A promise that resolves once `initialize()` has completed. */\n get ready(): Promise<void> {\n return this._ready;\n }\n\n /** Our local identifier. */\n get id(): string {\n return this.myId;\n }\n\n /**\n * Generate this client's ECDH + ECDSA keypair (idempotent — safe to call\n * multiple times across reconnects; only the first call generates).\n */\n async initialize(): Promise<void> {\n if (this._initialized) return;\n if (!this.keyStore.getKeyPair(this.myId)) {\n await this.keyStore.generateOwnKeyPair(this.myId);\n }\n this._initialized = true;\n this._resolveReady();\n }\n\n /**\n * Build the keyExchange frame this client should send to peers when it\n * comes online. Application is responsible for actually transmitting it\n * (e.g. ws.send(JSON.stringify(frame))).\n */\n async getOwnKeyExchange(): Promise<{ keyExchange: KeyExchangeFrame }> {\n await this._ready;\n const ownEcdh = this.keyStore.getKeyPair(this.myId);\n const ownEcdsa = this.keyStore.getAuthKeyPair(this.myId);\n if (!ownEcdh || !ownEcdsa) {\n throw new Error(\"EncryptedSession.getOwnKeyExchange: keys not initialized\");\n }\n return {\n keyExchange: {\n type: \"handshake\",\n userId: this.myId,\n ecdhPublicKey: await exportJwkBase64(ownEcdh.publicKey),\n ecdsaPublicKey: await exportJwkBase64(ownEcdsa.publicKey),\n },\n };\n }\n\n /**\n * Encrypt a plaintext to every peer we currently have a ratchet for, and\n * return one cipherMessage frame per recipient. The application sends\n * each frame over its transport.\n *\n * If there are no peers yet (or all peers are still mid-handshake), the\n * returned array may be empty — the caller should typically render the\n * outgoing message locally in that case (since there's no one to send\n * it to yet).\n */\n async encrypt(plaintext: string): Promise<CipherFrame[]> {\n await this._ready;\n const frames: CipherFrame[] = [];\n for (const peerId of this.ratchets.keys()) {\n const ratchet = this.ratchets.get(peerId)!;\n const sessionId = this._sessionIdFor(peerId);\n const cipherMessage = await ratchet.encrypt(\n plaintext,\n /* newDhKey */ false,\n this.myId,\n peerId,\n sessionId,\n \"specific\",\n );\n frames.push({ cipherMessage });\n }\n return frames;\n }\n\n /**\n * Hand an inbound frame to the session. Returns a typed result the\n * application acts on.\n *\n * - `kind: 'plaintext'` — decrypted; render `result.text`\n * - `kind: 'handshake'` — a peer's keys are now stored, and if\n * `result.outbound` is set, send it\n * - `kind: 'ignored'` — not for us, malformed, duplicate, etc.\n *\n * Calling code should always handle `'ignored'` (no UI side effect).\n */\n async receive(frame: IncomingFrame): Promise<ReceiveResult> {\n await this._ready;\n\n // -- handshake frame -----------------------------------------------------\n if (isKeyExchangeFrame(frame)) {\n const kx = frame.keyExchange;\n const peerId = kx.userId;\n\n if (peerId === this.myId) {\n return { kind: \"ignored\", reason: \"own keyExchange echo\" };\n }\n\n const isNew = !this.ratchets.has(peerId);\n\n // (Re-)store the peer's pubkeys + (re-)build the ratchet if needed.\n const peerEcdh = await importJwkBase64(kx.ecdhPublicKey, \"ECDH\");\n const peerEcdsa = await importJwkBase64(kx.ecdsaPublicKey, \"ECDSA\");\n await this.keyStore.storeRemotePublicKeys(peerId, peerEcdh, peerEcdsa);\n\n if (isNew) {\n const isClient = this.myId < peerId;\n const ratchet = new DoubleRatchet(this.myId, peerId, \"specific\", isClient);\n await ratchet.initializeSession(isClient);\n this.ratchets.set(peerId, ratchet);\n }\n\n // Reciprocate exactly once per peer per session lifetime.\n let outbound: { keyExchange: KeyExchangeFrame } | null = null;\n if (isNew && !this.sentHandshakeTo.has(peerId)) {\n outbound = await this.getOwnKeyExchange();\n this.sentHandshakeTo.add(peerId);\n }\n\n return { kind: \"handshake\", peerId, outbound };\n }\n\n // -- ciphertext frame ----------------------------------------------------\n if (isCipherFrame(frame)) {\n const cipherMessage = frame.cipherMessage;\n const header = cipherMessage?.header;\n if (!header) {\n return { kind: \"ignored\", reason: \"cipherMessage has no header\" };\n }\n if (header.senderId === this.myId) {\n return { kind: \"ignored\", reason: \"own outbound echo\" };\n }\n if (header.recipientId && header.recipientId !== this.myId) {\n return { kind: \"ignored\", reason: \"addressed to a different peer\" };\n }\n\n const ratchet = this.ratchets.get(header.senderId);\n if (!ratchet) {\n return {\n kind: \"ignored\",\n reason: `no ratchet with sender ${header.senderId} (handshake hasn't completed)`,\n };\n }\n\n const isClient = this.myId < header.senderId;\n let text: string;\n try {\n text = await ratchet.decrypt(cipherMessage, isClient);\n } catch (err) {\n // DoubleRatchet's wallclock-based replay-protection check throws\n // \"CipherMessage too old, possible replay attack\" for any frame\n // older than 5 minutes. Real replays still fail downstream because\n // the message key has been consumed; the wallclock check is a\n // defense-in-depth heuristic, not a security boundary. Treating it\n // as `ignored` lets the channel survive legacy backlog replays and\n // CF WS-idle-timeout reconnect cycles without spamming the\n // channel's ERROR stream.\n const msg = err instanceof Error ? err.message : String(err);\n if (msg.includes(\"too old\") || msg.includes(\"replay attack\")) {\n return { kind: \"ignored\", reason: `stale cipherMessage rejected: ${msg}` };\n }\n throw err;\n }\n return { kind: \"plaintext\", from: header.senderId, text, cipherMessage };\n }\n\n return { kind: \"ignored\", reason: \"unknown frame type\" };\n }\n\n // -- introspection ---------------------------------------------------------\n\n /** List of peer ids we have an established ratchet for. */\n peers(): string[] {\n return Array.from(this.ratchets.keys());\n }\n\n /** Has the handshake completed for this peer? */\n hasRatchetFor(peerId: string): boolean {\n return this.ratchets.has(peerId);\n }\n\n /**\n * Tear down a peer's ratchet (e.g. when they leave the room). The peer's\n * stored keys remain in `KeyStore` so a fresh handshake can be set up\n * later without re-fetching them, but the ratchet state is dropped.\n */\n forgetPeer(peerId: string): void {\n this.ratchets.delete(peerId);\n this.sentHandshakeTo.delete(peerId);\n }\n\n // -- internals -------------------------------------------------------------\n\n /** Deterministic per-pair session id — same string on both sides. */\n private _sessionIdFor(peerId: string): string {\n return [this.myId, peerId].sort().join(\":\");\n }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers — JWK <-> base64 string for key transport\n// ---------------------------------------------------------------------------\n\nasync function exportJwkBase64(key: CryptoKey): Promise<string> {\n const jwk = await crypto.subtle.exportKey(\"jwk\", key);\n return btoa(JSON.stringify(jwk));\n}\n\nasync function importJwkBase64(\n b64: string,\n type: \"ECDH\" | \"ECDSA\",\n): Promise<CryptoKey> {\n const jwk = JSON.parse(atob(b64));\n const algorithm =\n type === \"ECDH\"\n ? { name: \"ECDH\", namedCurve: \"P-384\" }\n : { name: \"ECDSA\", namedCurve: \"P-384\" };\n const usages: KeyUsage[] = type === \"ECDH\" ? [] : [\"verify\"];\n return await crypto.subtle.importKey(\"jwk\", jwk, algorithm, true, usages);\n}\n\n// ---------------------------------------------------------------------------\n// Type guards\n// ---------------------------------------------------------------------------\n\nfunction isKeyExchangeFrame(\n frame: IncomingFrame,\n): frame is { keyExchange: KeyExchangeFrame } {\n const kx = (frame as { keyExchange?: unknown }).keyExchange;\n if (!kx || typeof kx !== \"object\") return false;\n const k = kx as Partial<KeyExchangeFrame>;\n return (\n typeof k.userId === \"string\" &&\n typeof k.ecdhPublicKey === \"string\" &&\n typeof k.ecdsaPublicKey === \"string\"\n );\n}\n\nfunction isCipherFrame(\n frame: IncomingFrame,\n): frame is { cipherMessage: CipherMessage } {\n const cm = (frame as { cipherMessage?: unknown }).cipherMessage;\n if (!cm || typeof cm !== \"object\") return false;\n const m = cm as Partial<CipherMessage>;\n return Boolean(m.header && m.ciphertext && m.nonce);\n}\n","/**\n * Pure WebSocket transport — owns the socket lifecycle and nothing else.\n *\n * Hands raw frame strings up (via the `MESSAGE` event) and accepts raw frame\n * strings down (via `send`). Anything frame-shape, encryption, or serialization\n * related belongs in the layer above (e.g. `Network` for client↔server\n * encrypted pipes, `BroadcastChannel` for multi-peer E2E rooms).\n *\n * Responsibilities:\n * - Open / close the WebSocket\n * - Auto-reconnect with linear backoff after an unexpected close\n * - Buffer outbound frames while disconnected (capped queue)\n * - Emit lifecycle events (CONNECTED / DISCONNECTED / RECONNECTING / ERROR)\n * plus raw inbound MESSAGE events\n */\n\nimport { EventCore, EventCoreEvents } from \"../events\";\n\n/** Monotonic source of unique transport ids when a caller doesn't supply one. */\nlet __wsInstanceSeq = 0;\n\nexport interface WSTransportOptions {\n /** WebSocket URL, e.g. `ws://localhost:8787/foo`. */\n url: string;\n /**\n * Optional async provider for a FRESH connection URL, called before each\n * RECONNECT. Use it when the URL carries a single-use/expiring credential\n * (e.g. a one-time WS upgrade ticket): on reconnect the baked-in ticket is\n * already consumed/expired, so without this the reconnect is rejected and the\n * transport burns through its attempts. The initial connect uses `url` as-is.\n */\n urlProvider?: () => string | Promise<string>;\n /**\n * Stable identifier for this connection (a channel / space / personal-space\n * id). Lifecycle + MESSAGE events are namespaced by it on the shared\n * `EventCore` bus so concurrent transports (chat room A, room B, the storage\n * feed, …) never receive each other's frames. Optional — a unique id is\n * generated when omitted; pass a semantic one for clearer debugging.\n */\n id?: string;\n /** Reconnect automatically after unexpected disconnect (default `true`). */\n autoReconnect?: boolean;\n /** Delay between reconnect attempts in ms (default `3000`). */\n reconnectDelay?: number;\n /** Cap on reconnect attempts (default `5`; `0` means unlimited). */\n maxReconnectAttempts?: number;\n /**\n * Max outbound frames buffered while disconnected. Sending past this caps\n * throws synchronously. Default `100`.\n */\n maxQueueSize?: number;\n /**\n * Heartbeat interval in ms. While connected, a `pingFrame` is sent every\n * interval to keep the socket warm (long-lived WebSockets get dropped by CF\n * / intermediaries when idle) and to detect a silently-dead connection.\n * Default `30000`. Set `0` to disable the heartbeat entirely.\n */\n heartbeatInterval?: number;\n /**\n * How long (ms) to wait for a `pongFrame` after sending a ping before\n * treating the connection as dead and forcing a reconnect. Should be well\n * under `heartbeatInterval`. Default `10000`.\n */\n heartbeatTimeout?: number;\n /** Outbound keep-alive frame. Default `\"ping\"`. */\n pingFrame?: string;\n /**\n * Inbound keep-alive ack. Matching frames are swallowed (never surfaced as a\n * `MESSAGE`) and reset the liveness timer. Must match the server's\n * auto-response. Default `\"pong\"`.\n */\n pongFrame?: string;\n}\n\nexport class WSTransport extends EventCore {\n /**\n * Per-instance event scope. `EventCore` is a process-global static emitter,\n * so without namespacing every WSTransport would hear every other one's\n * frames. We prefix each event with this transport's `id` and expose\n * `on`/`off`/`emit` that scope transparently — callers still use the plain\n * `EventCoreEvents` enum and only ever see their own connection's events.\n */\n readonly id: string;\n\n readonly emit = (event: EventCoreEvents, data: unknown): void => {\n EventCore.emit(this.scopedEvent(event), data);\n };\n readonly on = (event: EventCoreEvents, handler: EventListener | CallableFunction): void => {\n EventCore.on(this.scopedEvent(event), handler);\n };\n readonly off = (event: EventCoreEvents, handler: EventListener | CallableFunction): void => {\n EventCore.off(this.scopedEvent(event), handler);\n };\n\n private scopedEvent(event: EventCoreEvents): EventCoreEvents {\n return `${this.id}:${event}` as EventCoreEvents;\n }\n\n private url: string;\n private urlProvider?: () => string | Promise<string>;\n private socket: WebSocket | null = null;\n private _isConnected = false;\n private _isConnecting = false;\n\n // Reconnect state\n private autoReconnect: boolean;\n private reconnectDelay: number;\n private maxReconnectAttempts: number;\n private reconnectAttempts = 0;\n private reconnectTimeout: ReturnType<typeof setTimeout> | null = null;\n\n // Outbound queue (raw frame strings — already serialized by caller)\n private outboundQueue: string[] = [];\n private maxQueueSize: number;\n\n // Heartbeat / liveness state\n private heartbeatInterval: number;\n private heartbeatTimeout: number;\n private pingFrame: string;\n private pongFrame: string;\n private heartbeatTimer: ReturnType<typeof setInterval> | null = null;\n private pongTimer: ReturnType<typeof setTimeout> | null = null;\n\n constructor(opts: WSTransportOptions) {\n super();\n if (!opts || !opts.url) {\n throw new Error(\"WSTransport: `url` is required\");\n }\n this.url = opts.url;\n this.urlProvider = opts.urlProvider;\n this.id = opts.id ?? `ws${++__wsInstanceSeq}`;\n this.autoReconnect = opts.autoReconnect ?? true;\n this.reconnectDelay = opts.reconnectDelay ?? 3000;\n this.maxReconnectAttempts = opts.maxReconnectAttempts ?? 5;\n this.maxQueueSize = opts.maxQueueSize ?? 100;\n this.heartbeatInterval = opts.heartbeatInterval ?? 30000;\n this.heartbeatTimeout = opts.heartbeatTimeout ?? 10000;\n this.pingFrame = opts.pingFrame ?? \"ping\";\n this.pongFrame = opts.pongFrame ?? \"pong\";\n }\n\n /** Open the socket. Resolves when CONNECTED fires. Rejects on first error. */\n async connect(): Promise<void> {\n if (this._isConnected || this._isConnecting) {\n throw new Error(\"WSTransport: already connected or connecting\");\n }\n this._isConnecting = true;\n\n // On a RECONNECT, refresh the URL (the baked-in single-use ticket is spent).\n // The first connect uses `url` as-is. If the provider throws (e.g. can't\n // mint a ticket), surface it and let scheduleReconnect retry.\n if (this.urlProvider && this.reconnectAttempts > 0) {\n try {\n this.url = await this.urlProvider();\n } catch (err) {\n this._isConnecting = false;\n throw err;\n }\n }\n\n return new Promise<void>((resolve, reject) => {\n try {\n const socket = new WebSocket(this.url);\n this.socket = socket;\n\n socket.onopen = () => {\n this._isConnected = true;\n this._isConnecting = false;\n this.reconnectAttempts = 0;\n this.emit(EventCoreEvents.CONNECTED, undefined);\n this.flushQueue();\n this.startHeartbeat();\n resolve();\n };\n\n socket.onmessage = (event: MessageEvent) => {\n // Heartbeat ack — swallow it (don't surface as a MESSAGE) and clear\n // the liveness deadline. The layer above never sees keep-alive frames.\n if (event.data === this.pongFrame) {\n if (this.pongTimer) {\n clearTimeout(this.pongTimer);\n this.pongTimer = null;\n }\n return;\n }\n // Raw inbound frame — layer above is responsible for parsing.\n this.emit(EventCoreEvents.MESSAGE, event.data);\n };\n\n socket.onerror = (err) => {\n this.emit(EventCoreEvents.ERROR, err);\n if (this._isConnecting) {\n this._isConnecting = false;\n reject(err);\n }\n };\n\n socket.onclose = () => {\n const wasConnected = this._isConnected;\n this._isConnected = false;\n this._isConnecting = false;\n this.stopHeartbeat();\n this.emit(EventCoreEvents.DISCONNECTED, undefined);\n if (this.autoReconnect && wasConnected) {\n this.scheduleReconnect();\n }\n };\n } catch (err) {\n this._isConnecting = false;\n reject(err);\n }\n });\n }\n\n /** Close the socket and stop reconnecting. */\n disconnect(): void {\n if (this.reconnectTimeout) {\n clearTimeout(this.reconnectTimeout);\n this.reconnectTimeout = null;\n }\n this.stopHeartbeat();\n this.autoReconnect = false;\n if (this.socket) {\n try { this.socket.close(); } catch { /* ignore */ }\n this.socket = null;\n }\n this._isConnected = false;\n this._isConnecting = false;\n }\n\n /**\n * Send a raw frame. If currently disconnected, the frame is queued and sent\n * after the next successful reconnect (up to `maxQueueSize`).\n */\n send(frame: string): void {\n if (this._isConnected && this.socket) {\n this.socket.send(frame);\n return;\n }\n if (this.outboundQueue.length >= this.maxQueueSize) {\n throw new Error(\n `WSTransport: outbound queue full (${this.maxQueueSize}); drop or wait for reconnect`,\n );\n }\n this.outboundQueue.push(frame);\n }\n\n isConnected(): boolean { return this._isConnected; }\n isConnecting(): boolean { return this._isConnecting; }\n queuedFrames(): number { return this.outboundQueue.length; }\n reconnectAttemptCount(): number { return this.reconnectAttempts; }\n\n // -- internals -------------------------------------------------------------\n\n /** Begin the keep-alive loop (no-op when disabled). */\n private startHeartbeat(): void {\n if (this.heartbeatInterval <= 0) return;\n this.stopHeartbeat();\n this.heartbeatTimer = setInterval(() => this.sendHeartbeat(), this.heartbeatInterval);\n }\n\n /** Stop the keep-alive loop and clear any pending liveness deadline. */\n private stopHeartbeat(): void {\n if (this.heartbeatTimer) {\n clearInterval(this.heartbeatTimer);\n this.heartbeatTimer = null;\n }\n if (this.pongTimer) {\n clearTimeout(this.pongTimer);\n this.pongTimer = null;\n }\n }\n\n /**\n * Send one ping and arm a liveness deadline. If no `pongFrame` arrives before\n * `heartbeatTimeout`, the connection is considered dead and we force a\n * reconnect — this is what catches a silently-dropped TCP connection that\n * never fired `onclose` (the failure mode that \"loses connection with the\n * Accelerator\" on long sessions).\n */\n private sendHeartbeat(): void {\n if (!this._isConnected || !this.socket) return;\n try {\n this.socket.send(this.pingFrame);\n } catch {\n this.forceReconnect();\n return;\n }\n // A still-pending deadline means the previous pong never came back.\n if (this.pongTimer) return;\n this.pongTimer = setTimeout(() => {\n this.pongTimer = null;\n this.forceReconnect();\n }, this.heartbeatTimeout);\n }\n\n /**\n * Tear down a connection we believe is dead and kick off reconnect, without\n * waiting on the OS/browser to eventually fire `onclose` (which a half-open\n * socket may never do). We detach the handlers first so the normal close path\n * can't double-fire the reconnect.\n */\n private forceReconnect(): void {\n this.stopHeartbeat();\n const sock = this.socket;\n const wasConnected = this._isConnected;\n this.socket = null;\n this._isConnected = false;\n this._isConnecting = false;\n if (sock) {\n sock.onopen = null;\n sock.onmessage = null;\n sock.onerror = null;\n sock.onclose = null;\n try { sock.close(); } catch { /* already gone */ }\n }\n this.emit(EventCoreEvents.ERROR, new Error(\"WSTransport: heartbeat timeout\"));\n this.emit(EventCoreEvents.DISCONNECTED, undefined);\n if (this.autoReconnect && wasConnected) {\n this.scheduleReconnect();\n }\n }\n\n private scheduleReconnect(): void {\n if (\n this.maxReconnectAttempts > 0 &&\n this.reconnectAttempts >= this.maxReconnectAttempts\n ) {\n this.emit(\n EventCoreEvents.ERROR,\n new Error(\"WSTransport: max reconnect attempts reached\"),\n );\n return;\n }\n this.reconnectAttempts++;\n this.emit(EventCoreEvents.RECONNECTING, { attempt: this.reconnectAttempts });\n this.reconnectTimeout = setTimeout(async () => {\n try {\n await this.connect();\n } catch {\n // A failed reconnect never opened the socket, so its `onclose` won't\n // re-schedule (that path is guarded by `wasConnected`). Re-schedule here\n // so we keep retrying (with a fresh ticket each time) until we succeed\n // or hit the attempt cap.\n if (this.autoReconnect) this.scheduleReconnect();\n }\n }, this.reconnectDelay);\n }\n\n private flushQueue(): void {\n if (this.outboundQueue.length === 0 || !this.socket) return;\n const pending = this.outboundQueue;\n this.outboundQueue = [];\n for (const frame of pending) {\n try {\n this.socket.send(frame);\n } catch {\n // re-queue if a flush fails\n this.outboundQueue.push(frame);\n }\n }\n }\n}\n\nexport default WSTransport;\n","/**\n * BroadcastChannel — a turnkey end-to-end encrypted channel for multi-peer\n * \"room\"-style apps (e.g. a chat). Wires together:\n *\n * - `WSTransport` for socket lifecycle, reconnect, and offline frame queue\n * - `EncryptedSession` for per-peer Double Ratchet state, handshake\n * reciprocation, fan-out encryption, and recipient filtering\n *\n * The host app only deals with high-level events and method calls; it never\n * touches `new WebSocket(...)` or builds cipherMessage frames by hand.\n *\n * Wire protocol (kept compatible with the existing chat protocol so this\n * drops into the deployed Accelerator without server changes):\n *\n * outbound: `{ keyExchange: {...} }` — produced by us on `announce()`\n * `{ cipherMessage: {...} }` — produced by `send(text)`,\n * one frame per peer\n * arbitrary JSON — sent via `sendRaw(obj)`\n *\n * inbound: `{ keyExchange: {...} }` — routed into EncryptedSession;\n * emits `peer_handshake`\n * `{ cipherMessage: {...} }` — decrypted; emits `message`\n * anything else — passes through as `raw_frame`\n * (the app decides what to do)\n *\n * **Event scoping.** Unlike `Network`, BroadcastChannel uses a per-instance\n * `EventTarget`, so two channels (e.g. two rooms in the same app) don't\n * cross-contaminate each other's events.\n *\n * Note: this class shadows the `BroadcastChannel` Web API global (cross-tab\n * messaging) only when imported by name. They're unrelated.\n */\n\nimport { EventCoreEvents } from \"../events\";\nimport { WSTransport, WSTransportOptions } from \"../transport\";\nimport { EncryptedSession } from \"./EncryptedSession\";\n\n// ---------------------------------------------------------------------------\n// Event names\n// ---------------------------------------------------------------------------\n\n/**\n * Event names BroadcastChannel emits. Lifecycle events reuse the\n * `EventCoreEvents` string values (`connected`, `disconnected`, etc.) so\n * apps can use shared constants if they want. Channel-specific events are\n * prefixed `channel:` to avoid colliding with other event systems in the\n * same app.\n */\nexport const BroadcastChannelEvents = {\n CONNECTED: EventCoreEvents.CONNECTED,\n DISCONNECTED: EventCoreEvents.DISCONNECTED,\n RECONNECTING: EventCoreEvents.RECONNECTING,\n ERROR: EventCoreEvents.ERROR,\n /** A peer's ratchet is now ready. `detail.peerId` is the peer's id. */\n PEER_HANDSHAKE: \"channel:peer_handshake\",\n /** Decrypted message. `detail` is `{ from, text, cipherMessage }`. */\n MESSAGE: \"channel:message\",\n /** Inbound frame BroadcastChannel didn't recognize. App handles it. */\n RAW_FRAME: \"channel:raw_frame\",\n} as const;\n\nexport type BroadcastChannelEvent = (typeof BroadcastChannelEvents)[keyof typeof BroadcastChannelEvents];\n\nexport interface BroadcastChannelOptions extends WSTransportOptions {\n /** This client's identifier (username, DID, public-key string, etc.). */\n myId: string;\n /**\n * If true (default false), automatically send our keyExchange as soon as\n * the socket is connected. For chat-style apps that send a `{name}` frame\n * first, leave this false and call `announce()` after that handshake.\n */\n autoAnnounce?: boolean;\n}\n\n// ---------------------------------------------------------------------------\n// BroadcastChannel\n// ---------------------------------------------------------------------------\n\nexport class BroadcastChannel {\n readonly transport: WSTransport;\n readonly session: EncryptedSession;\n readonly myId: string;\n\n private autoAnnounce: boolean;\n private announced = false;\n\n /** Per-instance EventTarget — events do NOT leak across BroadcastChannels. */\n private events = new EventTarget();\n\n constructor(opts: BroadcastChannelOptions) {\n if (!opts || !opts.myId) {\n throw new Error(\"BroadcastChannel: `myId` is required\");\n }\n this.myId = opts.myId;\n this.autoAnnounce = opts.autoAnnounce ?? false;\n\n this.transport = new WSTransport(opts);\n this.session = new EncryptedSession({ myId: opts.myId });\n\n // Pass-through lifecycle events from the transport. `EventCore.on` is\n // static so it routes back through the shared singleton; we bridge it\n // into our instance-scoped event target.\n this.transport.on(EventCoreEvents.CONNECTED, () => {\n // Reset the announce flag on every (re)connect. CF Workers WebSockets\n // hit an idle timeout and force reconnects; without resetting, the\n // SDK would short-circuit announce() and any peer who joined the\n // room after our last announce would never see our pubkey.\n this.announced = false;\n this.emit(BroadcastChannelEvents.CONNECTED);\n if (this.autoAnnounce) {\n void this.announce();\n }\n });\n this.transport.on(EventCoreEvents.DISCONNECTED, () => {\n this.emit(BroadcastChannelEvents.DISCONNECTED);\n });\n this.transport.on(EventCoreEvents.RECONNECTING, (e: CustomEvent) => {\n this.emit(BroadcastChannelEvents.RECONNECTING, e.detail);\n });\n this.transport.on(EventCoreEvents.ERROR, (e: CustomEvent) => {\n this.emit(BroadcastChannelEvents.ERROR, e.detail);\n });\n\n // Route inbound raw frames through our framing/decryption logic.\n this.transport.on(EventCoreEvents.MESSAGE, (e: CustomEvent) => {\n void this.handleInboundFrame(e.detail as string);\n });\n }\n\n // -- event API -------------------------------------------------------------\n\n /** Subscribe to a channel event. Handler receives a CustomEvent. */\n on(event: BroadcastChannelEvent | string, handler: (e: CustomEvent) => void): void {\n this.events.addEventListener(event, handler as EventListener);\n }\n\n /** Unsubscribe. */\n off(event: BroadcastChannelEvent | string, handler: (e: CustomEvent) => void): void {\n this.events.removeEventListener(event, handler as EventListener);\n }\n\n private emit(event: BroadcastChannelEvent | string, detail?: unknown): void {\n this.events.dispatchEvent(new CustomEvent(event, { detail }));\n }\n\n // -- lifecycle -------------------------------------------------------------\n\n /** Generate our keys (idempotent) and open the WebSocket. */\n async connect(): Promise<void> {\n await this.session.initialize();\n await this.transport.connect();\n }\n\n /** Close the WebSocket and stop reconnecting. */\n disconnect(): void {\n this.transport.disconnect();\n }\n\n /**\n * Send our `keyExchange` frame to the room. Idempotent — only sends on the\n * first call. Call this once your higher-level handshake (e.g. sending a\n * `{name}` identification frame) has completed.\n */\n async announce(): Promise<void> {\n if (this.announced) return;\n this.announced = true;\n const frame = await this.session.getOwnKeyExchange();\n this.transport.send(JSON.stringify(frame));\n }\n\n /**\n * Encrypt `plaintext` to every peer we have a ratchet with, and send each\n * cipherMessage as its own WS frame. Returns the number of peers we sent to\n * (0 if no peers are handshaken yet — in which case the caller should\n * typically render the message locally for the sender and try again later).\n */\n async send(plaintext: string): Promise<number> {\n const frames = await this.session.encrypt(plaintext);\n for (const frame of frames) {\n this.transport.send(JSON.stringify(frame));\n }\n return frames.length;\n }\n\n /**\n * Send an arbitrary JSON-serializable frame as-is. The app uses this for\n * any frame that isn't channel-managed (e.g. a chat's `{name}`, `{file}`,\n * or unencrypted `{message}`).\n */\n sendRaw(frame: unknown): void {\n this.transport.send(JSON.stringify(frame));\n }\n\n // -- introspection ---------------------------------------------------------\n\n /** List of peer ids we have an established ratchet for. */\n peers(): string[] {\n return this.session.peers();\n }\n\n /** Drop a peer's ratchet (e.g. when they leave the room). */\n forgetPeer(peerId: string): void {\n this.session.forgetPeer(peerId);\n }\n\n isConnected(): boolean {\n return this.transport.isConnected();\n }\n\n // -- internals -------------------------------------------------------------\n\n private async handleInboundFrame(raw: string): Promise<void> {\n let parsed: unknown;\n try {\n parsed = JSON.parse(raw);\n } catch (err) {\n this.emit(BroadcastChannelEvents.ERROR, err);\n return;\n }\n\n if (!parsed || typeof parsed !== \"object\") {\n this.emit(BroadcastChannelEvents.RAW_FRAME, parsed);\n return;\n }\n\n const obj = parsed as Record<string, unknown>;\n\n // Channel-managed: keyExchange & cipherMessage. Anything else is RAW_FRAME.\n if (\"keyExchange\" in obj || \"cipherMessage\" in obj) {\n try {\n const result = await this.session.receive(\n obj as Parameters<typeof this.session.receive>[0],\n );\n if (result.kind === \"handshake\") {\n if (result.outbound) {\n this.transport.send(JSON.stringify(result.outbound));\n }\n this.emit(BroadcastChannelEvents.PEER_HANDSHAKE, { peerId: result.peerId });\n } else if (result.kind === \"plaintext\") {\n this.emit(BroadcastChannelEvents.MESSAGE, {\n from: result.from,\n text: result.text,\n cipherMessage: result.cipherMessage,\n });\n }\n // `ignored` is intentionally swallowed; subscribe to ERROR for bad frames.\n } catch (err) {\n this.emit(BroadcastChannelEvents.ERROR, err);\n }\n return;\n }\n\n this.emit(BroadcastChannelEvents.RAW_FRAME, obj);\n }\n}\n\nexport default BroadcastChannel;\n","/**\n * Cloudflare-Workers-compatible Groth16 ZK proof verifier.\n *\n * Drives the BN128 WASM module's exported pairing functions directly. Does NOT\n * use snarkjs/ffjavascript — those depend on runtime features (most notably\n * `URL.createObjectURL`) that CF Workers don't expose. See ROADMAP / CLAUDE.md.\n *\n * Two ways to initialize:\n * 1. `await initBn128Wasm()` — uses the bundled bn128.wasm (base64-inlined at\n * build time via `@rollup/plugin-wasm`). Works in any modern JS runtime\n * that allows runtime `WebAssembly.compile()` — Node, browsers, most\n * Workers configurations.\n * 2. `await initBn128Wasm(myWasmModule)` — accepts a pre-compiled\n * `WebAssembly.Module`. Lets a CF-Workers consumer keep the native pattern\n * of importing `.wasm` so wrangler precompiles it at deploy time and the\n * worker never pays for runtime compilation.\n */\n\nimport loadBundledBn128 from \"./wasm/bn128.wasm\";\nimport type { Groth16Proof, VerificationKey } from \"../types/zk\";\n\n// Re-export the shared ZK types so workers consumers can pull everything from\n// one place: `import { verifyGroth16, type Groth16Proof } from \"@muhkoo/connect\"`.\nexport type { Groth16Proof, VerificationKey } from \"../types/zk\";\nexport { PREIMAGE_POK_VERIFICATION_KEY } from \"../types/zk\";\n\n// BN128 curve sizing\nconst n8q = 32;\nconst n8r = 32;\nconst f1size = n8q;\nconst g1size = f1size * 3;\nconst g2size = f1size * 6;\nconst ftsize = f1size * 12;\n\n// Field modulus q (base field) and r (scalar field)\nconst q = BigInt(\"21888242871839275222246405745257275088696311157297823662689037894645226208583\");\nconst r = BigInt(\"21888242871839275222246405745257275088548364400416034343698204186575808495617\");\n\n// Initial linear memory: 25 * 64KB = 1.6MB\nconst MEM_SIZE = 25;\n\nexport interface Bn128WasmInstance {\n instance: WebAssembly.Instance;\n memory: WebAssembly.Memory;\n initialPFree: number;\n}\n\n/**\n * Initialize the BN128 WASM module.\n *\n * @param wasmModule Optional pre-compiled `WebAssembly.Module`. If omitted, the\n * bundled bn128.wasm (base64-inlined by `@rollup/plugin-wasm` at build time)\n * is used. Passing your own module is the recommended path inside CF Workers,\n * where wrangler can precompile a `.wasm` import at deploy time and avoid the\n * runtime compile cost.\n */\nexport async function initBn128Wasm(wasmModule?: WebAssembly.Module): Promise<Bn128WasmInstance> {\n const memory = new WebAssembly.Memory({ initial: MEM_SIZE, maximum: 32767 });\n const imports = { env: { memory } };\n\n let instance: WebAssembly.Instance;\n if (wasmModule) {\n instance = await WebAssembly.instantiate(wasmModule, imports);\n } else {\n // Bundled fallback: the rollup plugin returns a loader function that takes\n // an import object and resolves to an instantiated WebAssembly.Instance.\n instance = await loadBundledBn128(imports as Record<string, Record<string, unknown>>);\n }\n\n // The first u32 in linear memory is the heap free pointer (set by the module\n // during static initialization). Remember it so we can reset between calls.\n const u32 = new Uint32Array(memory.buffer);\n const initialPFree = u32[0];\n return { instance, memory, initialPFree };\n}\n\n/**\n * Verify a Groth16 proof.\n *\n * Returns `false` (rather than throwing) for any structural problem — malformed\n * proof, out-of-range field elements, off-curve points, or a failed pairing.\n * Throws only for runtime/WASM faults.\n */\nexport async function verifyGroth16(\n wasmInstance: WebAssembly.Instance,\n memory: WebAssembly.Memory,\n initialPFree: number,\n verificationKey: VerificationKey,\n proof: Groth16Proof,\n publicSignals: string[]\n): Promise<boolean> {\n try {\n const vk = unstringifyBigInts(verificationKey);\n const p = unstringifyBigInts(proof);\n const signals: bigint[] = unstringifyBigInts(publicSignals);\n\n // Validate proof coordinates are within the base field\n if (!validateG1InField(p.pi_a)) return false;\n if (!validateG1InField(p.pi_c)) return false;\n for (let i = 0; i < 2; i++) {\n for (let j = 0; j < 2; j++) {\n const val = typeof p.pi_b[i][j] === \"bigint\" ? p.pi_b[i][j] : BigInt(String(p.pi_b[i][j]));\n if (val >= q) return false;\n }\n }\n\n // Validate public signals are within the scalar field\n for (const signal of signals) {\n if (signal >= r) return false;\n }\n\n const exports = wasmInstance.exports;\n const u8 = new Uint8Array(memory.buffer);\n const u32 = new Uint32Array(memory.buffer);\n\n // Reset the WASM allocator's heap pointer between invocations\n u32[0] = initialPFree;\n\n const g1m_add = exports[\"g1m_add\"] as CallableFunction;\n const g1m_timesScalar = exports[\"g1m_timesScalar\"] as CallableFunction;\n const g1m_neg = exports[\"g1m_neg\"] as CallableFunction;\n const g1m_inCurve = exports[\"g1m_inCurve\"] as CallableFunction;\n const g2m_inCurve = exports[\"g2m_inCurve\"] as CallableFunction;\n const ftm_one = exports[\"ftm_one\"] as CallableFunction;\n const bn128_pairingEq4 = exports[\"bn128_pairingEq4\"] as CallableFunction;\n\n // Compute vk_x = IC[0] + sum(IC[i+1] * signal[i])\n const pVkX = alloc(u32, g1size);\n const pIC0 = alloc(u32, g1size);\n writeG1Point(u8, pIC0, vk.IC[0], exports);\n u8.set(u8.slice(pIC0, pIC0 + g1size), pVkX);\n\n const pTemp = alloc(u32, g1size);\n const pScalar = alloc(u32, n8r);\n\n for (let i = 0; i < signals.length; i++) {\n const pICi = alloc(u32, g1size);\n writeG1Point(u8, pICi, vk.IC[i + 1], exports);\n\n u8.set(bigIntToLE(signals[i], n8r), pScalar);\n g1m_timesScalar(pICi, pScalar, n8r, pTemp);\n\n const pSum = alloc(u32, g1size);\n g1m_add(pVkX, pTemp, pSum);\n u8.set(u8.slice(pSum, pSum + g1size), pVkX);\n }\n\n // Allocate proof points\n const pA = alloc(u32, g1size);\n const pNegA = alloc(u32, g1size);\n const pB = alloc(u32, g2size);\n const pC = alloc(u32, g1size);\n\n writeG1Point(u8, pA, p.pi_a, exports);\n writeG2Point(u8, pB, p.pi_b, exports);\n writeG1Point(u8, pC, p.pi_c, exports);\n\n // Subgroup / on-curve checks\n if (!g1m_inCurve(pA)) return false;\n if (!g2m_inCurve(pB)) return false;\n if (!g1m_inCurve(pC)) return false;\n\n g1m_neg(pA, pNegA);\n\n // Verification key points\n const pAlpha = alloc(u32, g1size);\n const pBeta = alloc(u32, g2size);\n const pGamma = alloc(u32, g2size);\n const pDelta = alloc(u32, g2size);\n\n writeG1Point(u8, pAlpha, vk.vk_alpha_1, exports);\n writeG2Point(u8, pBeta, vk.vk_beta_2, exports);\n writeG2Point(u8, pGamma, vk.vk_gamma_2, exports);\n writeG2Point(u8, pDelta, vk.vk_delta_2, exports);\n\n // Target: F12 element representing 1\n const pOne = alloc(u32, ftsize);\n ftm_one(pOne);\n\n // e(-A, B) * e(alpha, beta) * e(vk_x, gamma) * e(C, delta) == 1\n const result = bn128_pairingEq4(\n pNegA, pB,\n pAlpha, pBeta,\n pVkX, pGamma,\n pC, pDelta,\n pOne\n );\n\n return result === 1;\n } catch {\n return false;\n }\n}\n\n// ---------------------------------------------------------------------------\n// Internals\n// ---------------------------------------------------------------------------\n\nfunction parseToBigInt(value: bigint | string | number): bigint {\n if (typeof value === \"string\") {\n if (/^0x[0-9a-fA-F]+$/.test(value)) return BigInt(value);\n if (/^[0-9a-fA-F]+$/.test(value) && /[a-fA-F]/.test(value)) return BigInt(\"0x\" + value);\n if (/^[0-9]+$/.test(value)) return BigInt(value);\n throw new Error(`Cannot convert ${value} to BigInt`);\n }\n if (typeof value === \"number\") return BigInt(value);\n return value;\n}\n\nfunction bigIntToLE(value: bigint | string | number, size: number): Uint8Array {\n const result = new Uint8Array(size);\n let v = parseToBigInt(value);\n for (let i = 0; i < size; i++) {\n result[i] = Number(v & 0xffn);\n v = v >> 8n;\n }\n return result;\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nfunction unstringifyBigInts(o: any): any {\n if (typeof o === \"string\") {\n try {\n if (/^[0-9]+$/.test(o) || /^0x[0-9a-fA-F]+$/.test(o) ||\n (/^[0-9a-fA-F]+$/.test(o) && /[a-fA-F]/.test(o))) {\n return parseToBigInt(o);\n }\n } catch {\n // fall through\n }\n return o;\n }\n if (Array.isArray(o)) return o.map(unstringifyBigInts);\n if (typeof o === \"object\" && o !== null) {\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\n const res: any = {};\n for (const k of Object.keys(o)) res[k] = unstringifyBigInts(o[k]);\n return res;\n }\n return o;\n}\n\nfunction validateG1InField(point: (bigint | string | number)[]): boolean {\n const x = typeof point[0] === \"bigint\" ? point[0] : BigInt(String(point[0]));\n const y = typeof point[1] === \"bigint\" ? point[1] : BigInt(String(point[1]));\n return x < q && y < q;\n}\n\nfunction writeG1Point(\n u8: Uint8Array,\n offset: number,\n point: (bigint | string | number)[],\n exports: WebAssembly.Exports\n): void {\n const x = point[0];\n const y = point[1];\n const z = point.length > 2 ? point[2] : 1n;\n\n u8.set(bigIntToLE(x, f1size), offset);\n u8.set(bigIntToLE(y, f1size), offset + f1size);\n u8.set(bigIntToLE(z, f1size), offset + 2 * f1size);\n\n const f1m_toMontgomery = exports[\"f1m_toMontgomery\"] as CallableFunction;\n f1m_toMontgomery(offset, offset);\n f1m_toMontgomery(offset + f1size, offset + f1size);\n f1m_toMontgomery(offset + 2 * f1size, offset + 2 * f1size);\n}\n\nfunction writeG2Point(\n u8: Uint8Array,\n offset: number,\n point: (bigint | string | number)[][],\n exports: WebAssembly.Exports\n): void {\n const x = point[0];\n const y = point[1];\n const z = point.length > 2 ? point[2] : [1n, 0n];\n\n u8.set(bigIntToLE(x[0], f1size), offset);\n u8.set(bigIntToLE(x[1], f1size), offset + f1size);\n u8.set(bigIntToLE(y[0], f1size), offset + 2 * f1size);\n u8.set(bigIntToLE(y[1], f1size), offset + 3 * f1size);\n u8.set(bigIntToLE(z[0], f1size), offset + 4 * f1size);\n u8.set(bigIntToLE(z[1], f1size), offset + 5 * f1size);\n\n const f1m_toMontgomery = exports[\"f1m_toMontgomery\"] as CallableFunction;\n for (let i = 0; i < 6; i++) {\n f1m_toMontgomery(offset + i * f1size, offset + i * f1size);\n }\n}\n\nfunction alloc(u32: Uint32Array, size: number): number {\n while (u32[0] & 3) u32[0]++;\n const ptr = u32[0];\n u32[0] += size;\n return ptr;\n}\n","/**\n * `PersonalSpaceClient` — the client-side counterpart to the accelerator's\n * `PersonalSpaceDO`. Wraps the `/api/personal/:commitment/*` HTTP protocol so\n * callers can `put` / `get` / `delete` / `list` per-user KV blobs without\n * thinking about challenges, nonces, or Groth16 proof generation.\n *\n * Every gated operation:\n * 1. Requests a one-shot challenge from the DO (`POST /challenge`).\n * 2. Converts the returned hex nonce into a BN254 field element.\n * 3. Generates a fresh Groth16 proof for the `preimagePoK` circuit using\n * snarkjs, with the user's secret/salt/ecdsaPub as private inputs and\n * `{commitment, nonce, ecdsaPubHash}` as public signals.\n * 4. POSTs the proof + publicSignals + (optional) value to the gated endpoint.\n *\n * snarkjs is loaded lazily (dynamic `import`) the first time a proof is\n * generated — it's an optional peer dependency that only the ZK-proof path\n * needs, so importing this module (or constructing a `Client`) never requires\n * it. Consumers using the proof path install `snarkjs`, or provide it via an\n * import map in the browser (see the README).\n *\n * Encryption of the stored values is the caller's responsibility — the DO\n * sees only opaque JSON. The companion `wrap.ts` helpers in this folder are\n * a convenient way to passphrase-encrypt a payload before putting it.\n */\n\nimport type { Groth16Proof } from \"../types/zk\";\n\ntype Snarkjs = {\n groth16: {\n fullProve: (\n input: unknown,\n wasm: string,\n zkey: string,\n ) => Promise<{ proof: unknown; publicSignals: string[] }>;\n };\n};\nlet _snarkjs: Snarkjs | null = null;\nasync function loadSnarkjs(): Promise<Snarkjs> {\n if (_snarkjs) return _snarkjs;\n _snarkjs = (await import(\"snarkjs\")) as unknown as Snarkjs;\n return _snarkjs;\n}\n\n/**\n * BN254 scalar field modulus. The DO's challenge endpoint returns a 32-byte\n * random hex nonce — but the Circom circuit expects a field element, so the\n * nonce is reduced mod this prime before being fed into the witness.\n *\n * Must stay in sync with the `nonce` public-signal width used by both\n * accelerator's `verifyZkAuthProof` and the `preimagePoK` circuit.\n */\nconst FIELD_SIZE = 21888242871839275222246405745257275088548364400416034343698204186575808495617n;\n\n/**\n * Constructor options for {@link PersonalSpaceClient}.\n *\n * All of `secret`, `salt`, `ecdsaPub`, and `ecdsaPubHash` are decimal-encoded\n * BigInt strings (snarkjs convention). `commitment` is likewise decimal — it's\n * the Poseidon hash of `(secret, salt, ecdsaPubHash)`.\n */\nexport interface PersonalSpaceClientOptions {\n /** Base URL of the accelerator, e.g. `http://localhost:8787`. */\n baseUrl: string;\n /** The user's Poseidon commitment as a decimal string (~78 digits). */\n commitment: string;\n /** ZK identity material — private inputs to the proof. Decimal BigInt string. */\n secret: string;\n /** ZK identity salt. Decimal BigInt string. */\n salt: string;\n /** Raw ECDSA public-key field representation. Decimal BigInt string. */\n ecdsaPub: string;\n /** Poseidon hash of `ecdsaPub`, used as a public signal. Decimal BigInt string. */\n ecdsaPubHash: string;\n /** Where the runtime can fetch the compiled circuit assets. */\n circuits: {\n /** URL of the `preimagePoK.wasm` witness generator. */\n wasmUrl: string;\n /** URL of the `preimagePoK_0001.zkey` proving key. */\n zkeyUrl: string;\n };\n}\n\n/** Shape of the DO's `/challenge` response. */\ninterface ChallengeResponse {\n challengeId: string;\n nonce: string; // hex\n commitment: string;\n}\n\n/** Body shape sent to every gated endpoint. `value` is only used by PUT. */\ninterface GatedBody {\n challengeId: string;\n proof: Groth16Proof;\n publicSignals: string[];\n value?: unknown;\n}\n\n/**\n * Reduce a hex nonce into a BN254 field-element decimal string, matching what\n * the Circom circuit expects as the `nonce` public signal.\n */\nfunction nonceHexToFieldString(nonceHex: string): string {\n const hex = nonceHex.startsWith(\"0x\") ? nonceHex : \"0x\" + nonceHex;\n return (BigInt(hex) % FIELD_SIZE).toString();\n}\n\n/**\n * Read the response body as JSON, falling back to text for the error message\n * when the body isn't JSON. Centralized so every method handles failures the\n * same way.\n */\nasync function parseOrThrow<T>(response: Response, label: string): Promise<T> {\n if (!response.ok) {\n let detail = \"\";\n try {\n const text = await response.text();\n detail = text ? `: ${text}` : \"\";\n } catch {\n // ignore — we'll just use the status code\n }\n throw new Error(`PersonalSpaceClient ${label} failed (${response.status})${detail}`);\n }\n return (await response.json()) as T;\n}\n\nexport class PersonalSpaceClient {\n private readonly baseUrl: string;\n private readonly commitment: string;\n private readonly secret: string;\n private readonly salt: string;\n private readonly ecdsaPub: string;\n private readonly ecdsaPubHash: string;\n private readonly wasmUrl: string;\n private readonly zkeyUrl: string;\n\n constructor(opts: PersonalSpaceClientOptions) {\n if (!opts.baseUrl) throw new Error(\"PersonalSpaceClient: `baseUrl` is required\");\n if (!opts.commitment) throw new Error(\"PersonalSpaceClient: `commitment` is required\");\n if (!opts.secret) throw new Error(\"PersonalSpaceClient: `secret` is required\");\n if (!opts.salt) throw new Error(\"PersonalSpaceClient: `salt` is required\");\n if (!opts.ecdsaPub) throw new Error(\"PersonalSpaceClient: `ecdsaPub` is required\");\n if (!opts.ecdsaPubHash) throw new Error(\"PersonalSpaceClient: `ecdsaPubHash` is required\");\n if (!opts.circuits?.wasmUrl || !opts.circuits?.zkeyUrl) {\n throw new Error(\"PersonalSpaceClient: `circuits.wasmUrl` and `circuits.zkeyUrl` are required\");\n }\n\n // Strip trailing slash so concatenation stays clean regardless of how\n // the caller formatted the base URL.\n this.baseUrl = opts.baseUrl.replace(/\\/+$/, \"\");\n this.commitment = opts.commitment;\n this.secret = opts.secret;\n this.salt = opts.salt;\n this.ecdsaPub = opts.ecdsaPub;\n this.ecdsaPubHash = opts.ecdsaPubHash;\n this.wasmUrl = opts.circuits.wasmUrl;\n this.zkeyUrl = opts.circuits.zkeyUrl;\n }\n\n /** Store `value` under `key`, replacing any prior value. */\n async put(key: string, value: unknown): Promise<void> {\n const { challengeId, proof, publicSignals } = await this.proveFreshChallenge();\n const url = `${this.baseUrl}/api/personal/${encodeURIComponent(this.commitment)}/kv/${encodeURIComponent(key)}`;\n const body: GatedBody = { challengeId, proof, publicSignals, value };\n const response = await this.fetch(url, \"POST\", body);\n await parseOrThrow<{ ok: true }>(response, `put(${key})`);\n }\n\n /** Fetch the value stored under `key`. Returns `null` if absent. */\n async get<T = unknown>(key: string): Promise<T | null> {\n const { challengeId, proof, publicSignals } = await this.proveFreshChallenge();\n const url = `${this.baseUrl}/api/personal/${encodeURIComponent(this.commitment)}/kv/${encodeURIComponent(key)}/get`;\n const body: GatedBody = { challengeId, proof, publicSignals };\n const response = await this.fetch(url, \"POST\", body);\n const data = await parseOrThrow<{ key: string; value: T | null }>(response, `get(${key})`);\n return data.value ?? null;\n }\n\n /** Remove `key` from the user's space. Returns whether the key existed. */\n async delete(key: string): Promise<boolean> {\n const { challengeId, proof, publicSignals } = await this.proveFreshChallenge();\n const url = `${this.baseUrl}/api/personal/${encodeURIComponent(this.commitment)}/kv/${encodeURIComponent(key)}`;\n const body: GatedBody = { challengeId, proof, publicSignals };\n const response = await this.fetch(url, \"DELETE\", body);\n const data = await parseOrThrow<{ ok: true; existed: boolean }>(response, `delete(${key})`);\n return data.existed;\n }\n\n /** List every key currently stored in the user's space. */\n async list(): Promise<string[]> {\n const { challengeId, proof, publicSignals } = await this.proveFreshChallenge();\n const url = `${this.baseUrl}/api/personal/${encodeURIComponent(this.commitment)}/list`;\n const body: GatedBody = { challengeId, proof, publicSignals };\n const response = await this.fetch(url, \"POST\", body);\n const data = await parseOrThrow<{ keys: string[] }>(response, \"list()\");\n return Array.isArray(data.keys) ? data.keys : [];\n }\n\n // -------------------------------------------------------------------------\n // Internals\n // -------------------------------------------------------------------------\n\n /**\n * Run the full pre-flight: ask the DO for a challenge, reduce the nonce to\n * a field element, and generate a fresh Groth16 proof. Returns everything\n * the gated endpoints need in their body.\n */\n private async proveFreshChallenge(): Promise<{\n challengeId: string;\n proof: Groth16Proof;\n publicSignals: string[];\n }> {\n const challenge = await this.requestChallenge();\n const nonceField = nonceHexToFieldString(challenge.nonce);\n\n // Inputs to the `preimagePoK` circuit. Public signals are\n // `[commitment, nonce, ecdsaPubHash]`; the rest are private witnesses.\n const input = {\n commitment: this.commitment,\n nonce: nonceField,\n ecdsaPubHash: this.ecdsaPubHash,\n secret: this.secret,\n salt: this.salt,\n ecdsaPub: this.ecdsaPub,\n };\n\n const snarkjs = await loadSnarkjs();\n const { proof, publicSignals } = await snarkjs.groth16.fullProve(\n input,\n this.wasmUrl,\n this.zkeyUrl,\n );\n\n return {\n challengeId: challenge.challengeId,\n proof: proof as unknown as Groth16Proof,\n publicSignals: publicSignals as string[],\n };\n }\n\n /** Hit `POST /challenge` and return the issued nonce + ID. */\n private async requestChallenge(): Promise<ChallengeResponse> {\n const url = `${this.baseUrl}/api/personal/${encodeURIComponent(this.commitment)}/challenge`;\n const response = await this.fetch(url, \"POST\", {});\n return await parseOrThrow<ChallengeResponse>(response, \"challenge\");\n }\n\n /**\n * Thin wrapper over `globalThis.fetch` so all methods share a single set of\n * headers and body-encoding behaviour. `globalThis.fetch` is available in\n * modern browsers, Node 18+, Workers, and Bun.\n */\n private async fetch(url: string, method: string, body: unknown): Promise<Response> {\n const fetchFn = globalThis.fetch;\n if (typeof fetchFn !== \"function\") {\n throw new Error(\n \"PersonalSpaceClient: `globalThis.fetch` is not available. \" +\n \"On older Node versions, install a fetch polyfill (e.g. undici).\",\n );\n }\n return await fetchFn(url, {\n method,\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify(body ?? {}),\n });\n }\n}\n","/**\n * Wire types for the storage layer.\n *\n * The `FileManifest` is the single piece of metadata the system needs to\n * reassemble a file: per-chunk encryption material, RS parameters, and the\n * SHA-256 content hashes of every shard that belongs to the chunk. With the\n * manifest in hand, a reader can pull each shard from the open content-\n * addressed shard store, decode, decrypt, and concatenate to recover the\n * original bytes.\n *\n * The manifest itself lives inside a `SharedSpaceDO` (Phase B) which gates\n * access by ZK proof + ACL. Shards are stored in the open content-addressed\n * `ShardStoreDO` — anyone can put/get any shard, but without the manifest\n * (which has the keys) the ciphertext is just noise.\n */\n\nimport type { ChunkKeyMaterial } from \"../crypto/ChunkCipher\";\n\n/**\n * One chunk's metadata. A file is the concatenation of `chunks` in order.\n *\n * - `originalSize` is the chunk's plaintext length, before AES-GCM expanded\n * it by 16 bytes for the auth tag and before RS padded it for shard\n * alignment.\n * - `ciphertextSize` is the AES-GCM output length (plaintext + 16). This is\n * what the RS decoder trims back to.\n * - `shardHashes` lists every shard's SHA-256 in encoding order — the first\n * `dataShards` are data shards, the trailing `parityShards` are parity.\n */\nexport interface ChunkManifest {\n /** Stable per-chunk ID (uuid-like). Useful for client-side resume / dedup. */\n id: string;\n /** Position of this chunk in the file (0-indexed). */\n chunkIndex: number;\n /** Plaintext byte length of the chunk before encryption. */\n originalSize: number;\n /** AES-GCM ciphertext byte length (originalSize + 16 for the tag). */\n ciphertextSize: number;\n /** Number of RS data shards. */\n dataShards: number;\n /** Number of RS parity shards. */\n parityShards: number;\n /** Length in bytes of every shard (data and parity are equal). */\n shardSize: number;\n /** SHA-256 (hex) of each shard's ciphertext bytes, in shard order. */\n shardHashes: string[];\n /** Per-chunk AES-256-GCM key + IV. Plain in the manifest — gating happens at the SpaceDO. */\n cipher: ChunkKeyMaterial;\n}\n\n/**\n * Top-level manifest for a single stored file. Persisted in the user's\n * SharedSpace by file id; readable / writable per the space's ACL.\n */\nexport interface FileManifest {\n /** Stable file ID. Assigned by the SDK at write time; used to read or delete. */\n id: string;\n /** Human-readable filename (display only — not used by the shard store). */\n name: string;\n /** Total plaintext byte length. Sum of chunk `originalSize`s. */\n size: number;\n /** MIME type the application supplied at write time. Opaque to storage. */\n type: string;\n /** Optional virtual path / folder hint for the application. */\n path?: string;\n /** When the file was last modified per the application (ms epoch). */\n lastModified: number;\n /** When this manifest was created on the SDK side (ms epoch). */\n createdAt: number;\n /** Ordered list of chunks. Concatenate them in index order to rebuild the file. */\n chunks: ChunkManifest[];\n /** SDK schema version. Bump on breaking manifest-shape changes. */\n version: 1;\n}\n\n/**\n * Lightweight summary returned by `FileStorage.writeFile` and surfaced in\n * directory-style listings. The full manifest is only fetched when actually\n * reassembling the file.\n */\nexport interface FileStat {\n id: string;\n name: string;\n size: number;\n type: string;\n path?: string;\n lastModified: number;\n createdAt: number;\n chunkCount: number;\n shardCount: number;\n}\n\n/** Distil a `FileManifest` into a `FileStat`. */\nexport function manifestToStat(manifest: FileManifest): FileStat {\n let shardCount = 0;\n for (const c of manifest.chunks) shardCount += c.shardHashes.length;\n return {\n id: manifest.id,\n name: manifest.name,\n size: manifest.size,\n type: manifest.type,\n path: manifest.path,\n lastModified: manifest.lastModified,\n createdAt: manifest.createdAt,\n chunkCount: manifest.chunks.length,\n shardCount,\n };\n}\n","/**\n * Universal wasm-bindgen glue for `wasm-reed-solomon-erasure` (v0.2.2 — Rust\n * Reed–Solomon erasure-coding library compiled with `wasm-pack --target nodejs`).\n *\n * The upstream npm package ships `wasm_reed_solomon_erasure.js` which uses\n * `require('fs').readFileSync()` to load the WASM file at module load time —\n * that hard-codes Node and breaks browsers / CF Workers. This file is a port\n * of that glue with the Node-only pieces removed:\n *\n * - `TextDecoder` is taken from the global (available in Node 12+, every\n * modern browser, and Workers — no `require('util')`).\n * - The WASM module is loaded via the rollup-inlined `.wasm` import, the\n * same `targetEnv: 'auto-inline'` path the bn128 verifier uses. Works in\n * Node, browser, and Workers without runtime fs access.\n *\n * Only the two public functions consumers actually need (`encode` and\n * `reconstruct`) are exported. The rest is the wbindgen heap-table dance.\n *\n * Encoding:\n * `encode(dataShards: Uint8Array[], parityShard: number)` → array of\n * `dataShards.length + parityShard` Uint8Arrays. The first N are the input\n * shards unchanged; the trailing M are the freshly computed parity shards.\n * All shards are the same length — caller is responsible for padding the\n * data into equal-size data shards.\n *\n * Reconstruction:\n * `reconstruct(corruptedShards, parityShard, deadIndexes)` → fully recovered\n * array. Pass placeholders (empty Uint8Arrays) at the dead indexes; the\n * reconstructor fills them in. Up to `parityShard` shards may be missing.\n */\n\n// The bundled-WASM loader lives in its own module so the `.wasm` static import\n// is only encountered when the fallback path is actually exercised. Tools\n// that can't parse the import (vitest without `vite-plugin-wasm`) can import\n// `rs.ts` cleanly so long as callers always pass a pre-compiled\n// `WebAssembly.Module` to `initRsWasm`.\n//\n// `@rollup/plugin-wasm` (with `targetEnv: 'auto-inline'`) actually returns\n// the result of `WebAssembly.instantiate(buffer, imports)` — which, when\n// called with a `BufferSource`, yields the `{ module, instance }` source\n// pair, NOT a bare `WebAssembly.Instance`. The plugin's own typings claim\n// the latter; treat the result as `unknown` and unwrap defensively below.\ntype BundledLoader = (\n imports?: Record<string, Record<string, unknown>>,\n) => Promise<unknown>;\n\n// ---------------------------------------------------------------------------\n// wbindgen heap-object table\n// ---------------------------------------------------------------------------\n//\n// wbindgen passes JS values to/from WASM by storing them in this JS-side heap\n// and shuttling integer indexes across the boundary. Indexes 0–35 are reserved\n// for runtime constants (`undefined`, `null`, `true`, `false`); 36+ are\n// recyclable slots.\n\nconst heap: unknown[] = new Array(32).fill(undefined);\nheap.push(undefined, null, true, false);\nlet heap_next = heap.length;\n\nfunction getObject(idx: number): unknown {\n return heap[idx];\n}\n\nfunction dropObject(idx: number): void {\n if (idx < 36) return;\n heap[idx] = heap_next;\n heap_next = idx;\n}\n\nfunction takeObject(idx: number): unknown {\n const ret = getObject(idx);\n dropObject(idx);\n return ret;\n}\n\nfunction addHeapObject(obj: unknown): number {\n if (heap_next === heap.length) heap.push(heap.length + 1);\n const idx = heap_next;\n heap_next = heap[idx] as number;\n heap[idx] = obj;\n return idx;\n}\n\n// ---------------------------------------------------------------------------\n// WASM memory views (lazily re-bound when memory.buffer grows on alloc)\n// ---------------------------------------------------------------------------\n\nlet wasm: WasmExports | null = null;\n\nlet cachedUint8: Uint8Array | null = null;\nfunction u8(): Uint8Array {\n if (cachedUint8 === null || cachedUint8.buffer !== wasm!.memory.buffer) {\n cachedUint8 = new Uint8Array(wasm!.memory.buffer);\n }\n return cachedUint8;\n}\n\nlet cachedUint32: Uint32Array | null = null;\nfunction u32(): Uint32Array {\n if (cachedUint32 === null || cachedUint32.buffer !== wasm!.memory.buffer) {\n cachedUint32 = new Uint32Array(wasm!.memory.buffer);\n }\n return cachedUint32;\n}\n\nlet cachedInt32: Int32Array | null = null;\nfunction i32(): Int32Array {\n if (cachedInt32 === null || cachedInt32.buffer !== wasm!.memory.buffer) {\n cachedInt32 = new Int32Array(wasm!.memory.buffer);\n }\n return cachedInt32;\n}\n\nconst textDecoder = new TextDecoder(\"utf-8\", { ignoreBOM: true, fatal: true });\n\n// ---------------------------------------------------------------------------\n// Boundary helpers — moving JS arrays of Uint8Arrays across the FFI\n// ---------------------------------------------------------------------------\n\nlet WASM_VECTOR_LEN = 0;\n\n/**\n * Allocate `array.length * 4` bytes inside the WASM heap and write each\n * element's heap-table index there as a u32. Used to pass `Uint8Array[]` into\n * Rust — wbindgen reads each index back via the `__wbg_*` import callbacks.\n */\nfunction passArrayJsValueToWasm(array: Uint8Array[], malloc: (n: number) => number): number {\n const ptr = malloc(array.length * 4);\n const mem = u32();\n for (let i = 0; i < array.length; i++) {\n mem[ptr / 4 + i] = addHeapObject(array[i]);\n }\n WASM_VECTOR_LEN = array.length;\n return ptr;\n}\n\n/**\n * Pull `len` heap-table indexes from WASM memory starting at `ptr`, take each\n * referenced object, and return them as a plain JS array. The take() consumes\n * the heap slot so it can be reused.\n */\nfunction getArrayJsValueFromWasm(ptr: number, len: number): Uint8Array[] {\n const mem = u32();\n const slice = mem.subarray(ptr / 4, ptr / 4 + len);\n const result: Uint8Array[] = [];\n for (let i = 0; i < slice.length; i++) {\n result.push(takeObject(slice[i]) as Uint8Array);\n }\n return result;\n}\n\nfunction getStringFromWasm(ptr: number, len: number): string {\n return textDecoder.decode(u8().subarray(ptr, ptr + len));\n}\n\n// ---------------------------------------------------------------------------\n// WASM module typings + initialization\n// ---------------------------------------------------------------------------\n\ninterface WasmExports {\n memory: WebAssembly.Memory;\n encode: (retptr: number, ptr: number, len: number, parity: number) => void;\n reconstruct: (retptr: number, ptr: number, len: number, parity: number, deadIdx: number) => void;\n __wbindgen_add_to_stack_pointer: (n: number) => number;\n __wbindgen_malloc: (n: number) => number;\n __wbindgen_free: (ptr: number, size: number) => void;\n}\n\n/**\n * The wbindgen import object — every callback Rust expects from JS. Names are\n * hard-coded by wasm-bindgen based on the Rust function signatures; do not\n * rename. If the upstream package is regenerated, these may drift and need\n * resyncing with the new `wasm_reed_solomon_erasure.js`.\n */\nfunction buildImports(): WebAssembly.Imports {\n const wbindgen: Record<string, (...args: number[]) => number | void> = {\n __wbindgen_object_drop_ref: (arg0: number) => {\n takeObject(arg0);\n },\n __wbg_buffer_7af23f65f6c64548: (arg0: number) => {\n const ret = (getObject(arg0) as Uint8Array).buffer;\n return addHeapObject(ret);\n },\n __wbg_newwithbyteoffsetandlength_ce1e75f0ce5f7974: (arg0: number, arg1: number, arg2: number) => {\n const ret = new Uint8Array(getObject(arg0) as ArrayBuffer, arg1 >>> 0, arg2 >>> 0);\n return addHeapObject(ret);\n },\n __wbg_new_cc9018bd6f283b6f: (arg0: number) => {\n const ret = new Uint8Array(getObject(arg0) as ArrayBuffer);\n return addHeapObject(ret);\n },\n __wbg_set_f25e869e4565d2a2: (arg0: number, arg1: number, arg2: number) => {\n (getObject(arg0) as Uint8Array).set(getObject(arg1) as Uint8Array, arg2 >>> 0);\n },\n __wbg_length_0acb1cf9bbaf8519: (arg0: number) => {\n return (getObject(arg0) as Uint8Array).length;\n },\n __wbg_new_e8c5277c0f9e2cfc: (arg0: number) => {\n const ret = new Uint32Array(getObject(arg0) as ArrayBuffer);\n return addHeapObject(ret);\n },\n __wbg_set_03c7d8c063f469ef: (arg0: number, arg1: number, arg2: number) => {\n (getObject(arg0) as Uint32Array).set(getObject(arg1) as Uint32Array, arg2 >>> 0);\n },\n __wbg_length_f98ca60981480796: (arg0: number) => {\n return (getObject(arg0) as Uint32Array).length;\n },\n __wbindgen_throw: (arg0: number, arg1: number) => {\n throw new Error(getStringFromWasm(arg0, arg1));\n },\n __wbindgen_memory: () => {\n return addHeapObject(wasm!.memory);\n },\n };\n return { __wbindgen_placeholder__: wbindgen as unknown as WebAssembly.ModuleImports };\n}\n\nlet _readyPromise: Promise<void> | null = null;\n\n/**\n * Load and instantiate the WASM module. Idempotent — repeated calls await the\n * same one-shot promise.\n *\n * Two ways to initialize, matching the pattern used by `workers/groth16-verifier`:\n * 1. `await initRsWasm()` — uses the bundled .wasm (base64-inlined at build\n * time by `@rollup/plugin-wasm`). Works in any runtime that allows\n * runtime `WebAssembly.compile()`.\n * 2. `await initRsWasm(myWasmModule)` — accepts a pre-compiled\n * `WebAssembly.Module`. Useful when the bundled loader path isn't\n * available (vitest, CF Workers wanting deploy-time precompile, etc.).\n */\nexport async function initRsWasm(wasmModule?: WebAssembly.Module): Promise<void> {\n if (_readyPromise) return _readyPromise;\n _readyPromise = (async () => {\n const imports = buildImports();\n let instance: WebAssembly.Instance;\n if (wasmModule) {\n // `instantiate(module, imports)` returns a bare Instance.\n instance = await WebAssembly.instantiate(wasmModule, imports);\n } else {\n // Defer the `.wasm` import to a separate module so vitest can load\n // `rs.ts` without it. Production callers either don't pass a\n // module (and hit the bundled loader here) or pass one explicitly.\n const bundled = (await import(\"./bundled-loader\")).default as BundledLoader;\n const result = await bundled(imports as Record<string, Record<string, unknown>>);\n // The bundled loader's actual return type is\n // `{ module: WebAssembly.Module, instance: WebAssembly.Instance }`\n // — the rollup-plugin-wasm shape from `WebAssembly.instantiate(buffer, imports)`.\n // Older versions (or future changes) may return a bare Instance,\n // so accept either shape.\n instance = unwrapInstance(result);\n }\n wasm = instance.exports as unknown as WasmExports;\n })();\n return _readyPromise;\n}\n\n/**\n * Normalize the value returned by `WebAssembly.instantiate` / the\n * rollup-plugin-wasm loader into a bare `WebAssembly.Instance`. Handles\n * both the `(module, imports)` overload (returns Instance) and the\n * `(buffer, imports)` overload (returns `{ module, instance }`).\n */\nfunction unwrapInstance(result: unknown): WebAssembly.Instance {\n if (result && typeof result === \"object\") {\n const candidate = result as { instance?: WebAssembly.Instance; exports?: unknown };\n if (candidate.instance && typeof candidate.instance === \"object\" && \"exports\" in candidate.instance) {\n return candidate.instance;\n }\n if (\"exports\" in candidate) {\n return result as WebAssembly.Instance;\n }\n }\n throw new Error(\n \"rs.ts: bundled WASM loader returned an unrecognized shape — expected WebAssembly.Instance or { module, instance }\",\n );\n}\n\n/**\n * Reset the singleton (test-only escape hatch). Lets a test load a different\n * pre-compiled module without restarting the process. Production code should\n * never need this.\n */\nexport function _resetRsWasmForTests(): void {\n _readyPromise = null;\n wasm = null;\n cachedUint8 = null;\n cachedUint32 = null;\n cachedInt32 = null;\n}\n\nfunction ensureReady(): void {\n if (!wasm) {\n throw new Error(\"rs.ts: WASM not initialized. Call `await initRsWasm()` first.\");\n }\n}\n\n// ---------------------------------------------------------------------------\n// Public API — encode + reconstruct\n// ---------------------------------------------------------------------------\n\n/**\n * Encode the input data shards with `parityShard` parity shards. All input\n * shards must be Uint8Arrays of equal length; output contains the input shards\n * unchanged plus `parityShard` newly computed parity shards.\n */\nexport function encode(dataShards: Uint8Array[], parityShard: number): Uint8Array[] {\n ensureReady();\n const w = wasm!;\n try {\n const retptr = w.__wbindgen_add_to_stack_pointer(-16);\n const ptr0 = passArrayJsValueToWasm(dataShards, w.__wbindgen_malloc);\n const len0 = WASM_VECTOR_LEN;\n w.encode(retptr, ptr0, len0, parityShard);\n const r0 = i32()[retptr / 4 + 0];\n const r1 = i32()[retptr / 4 + 1];\n const v1 = getArrayJsValueFromWasm(r0, r1).slice();\n w.__wbindgen_free(r0, r1 * 4);\n return v1;\n } finally {\n w.__wbindgen_add_to_stack_pointer(16);\n }\n}\n\n/**\n * Reconstruct the original full shard array. `corruptedShards` is the full\n * list (data + parity) with placeholder Uint8Arrays at positions listed in\n * `deadShardIndexes`. Returns the recovered, complete list of shards.\n *\n * Up to `parityShard` shards may be missing; more than that is uncorrectable\n * and the underlying WASM throws.\n */\nexport function reconstruct(\n corruptedShards: Uint8Array[],\n parityShard: number,\n deadShardIndexes: Uint32Array,\n): Uint8Array[] {\n ensureReady();\n const w = wasm!;\n try {\n const retptr = w.__wbindgen_add_to_stack_pointer(-16);\n const ptr0 = passArrayJsValueToWasm(corruptedShards, w.__wbindgen_malloc);\n const len0 = WASM_VECTOR_LEN;\n w.reconstruct(retptr, ptr0, len0, parityShard, addHeapObject(deadShardIndexes));\n const r0 = i32()[retptr / 4 + 0];\n const r1 = i32()[retptr / 4 + 1];\n const v1 = getArrayJsValueFromWasm(r0, r1).slice();\n w.__wbindgen_free(r0, r1 * 4);\n return v1;\n } finally {\n w.__wbindgen_add_to_stack_pointer(16);\n }\n}\n","/**\n * Reed–Solomon erasure-coding codec.\n *\n * Wraps the WASM-backed `encode` / `reconstruct` primitives in `wasm/rs.ts`\n * with shard-padding bookkeeping so callers can hand it any-length input and\n * get back uniform-size shards.\n *\n * Usage:\n * const codec = new ReedSolomonCodec();\n * await codec.ready();\n * const { shards, shardSize, originalSize } = codec.encode(plaintext, 4, 2);\n * // 6 shards (4 data + 2 parity), each `shardSize` bytes\n * // …ship them, lose up to 2, then …\n * const recovered = codec.decode(shards, 2, deadIndexes, originalSize);\n *\n * Why the explicit `originalSize`: RS pads input to make every data shard the\n * same length. The decoder must trim that padding back off after recovery.\n * The caller is responsible for stashing `originalSize` somewhere durable\n * (the file manifest, in this codebase).\n */\n\nimport { initRsWasm, encode as wasmEncode, reconstruct as wasmReconstruct } from \"./wasm/rs\";\n\nexport interface EncodeResult {\n /** All `dataShards + parityShards` shards. All have length `shardSize`. */\n shards: Uint8Array[];\n /** Length of every shard (data and parity). */\n shardSize: number;\n /** Length of the original input before padding. Needed to trim on decode. */\n originalSize: number;\n /** How many of the leading shards are data (the rest are parity). */\n dataShards: number;\n /** How many parity shards trail the data shards. */\n parityShards: number;\n}\n\nexport class ReedSolomonCodec {\n /**\n * Resolves once the WASM module is loaded; safe to call repeatedly.\n *\n * Pass `wasmModule` to use a pre-compiled module (e.g. in tests where the\n * rollup-inlined loader path isn't available, or in CF Workers where you\n * want to load the module at deploy time). Default path uses the bundled\n * base64-inlined wasm — works in Node, browsers, and Workers.\n */\n ready(wasmModule?: WebAssembly.Module): Promise<void> {\n return initRsWasm(wasmModule);\n }\n\n /**\n * Split `data` into `dataShards` equal-size chunks (zero-padded to fit),\n * compute `parityShards` parity shards, and return all of them.\n */\n encode(data: Uint8Array, dataShards: number, parityShards: number): EncodeResult {\n if (dataShards < 1) throw new Error(\"ReedSolomonCodec.encode: dataShards must be >= 1\");\n if (parityShards < 1) throw new Error(\"ReedSolomonCodec.encode: parityShards must be >= 1\");\n if (data.length === 0) throw new Error(\"ReedSolomonCodec.encode: data is empty\");\n\n // The wbindgen-generated WASM in `wasm-reed-solomon-erasure@0.2.2` takes\n // the `parity_shard` count separately and infers `total = data.length +\n // parity_shard`. Every shard must be the same length, so we pad the\n // input to `dataShards * shardSize` with trailing zeros.\n const shardSize = Math.ceil(data.length / dataShards);\n const splitInputs: Uint8Array[] = [];\n for (let i = 0; i < dataShards; i++) {\n // Each shard is its own backing ArrayBuffer so the WASM side\n // doesn't observe overlapping views (which would confuse the\n // wbindgen length lookups).\n const shard = new Uint8Array(shardSize);\n const start = i * shardSize;\n const end = Math.min(start + shardSize, data.length);\n if (start < data.length) {\n shard.set(data.subarray(start, end));\n }\n splitInputs.push(shard);\n }\n\n const shards = wasmEncode(splitInputs, parityShards);\n // The underlying call returns N+M shards; first N are the (padded)\n // data shards we just sent in, last M are the parity shards.\n return {\n shards,\n shardSize,\n originalSize: data.length,\n dataShards,\n parityShards,\n };\n }\n\n /**\n * Reconstruct the original `data` from `shards`. Up to `parityShards`\n * shards may be missing; for each missing shard, pass an empty\n * `Uint8Array` placeholder at its position and list the position in\n * `deadShardIndexes`.\n *\n * `originalSize` is required so the trailing zero-padding can be trimmed.\n */\n decode(\n shards: Uint8Array[],\n parityShards: number,\n deadShardIndexes: number[],\n originalSize: number,\n ): Uint8Array {\n if (parityShards < 1) throw new Error(\"ReedSolomonCodec.decode: parityShards must be >= 1\");\n if (shards.length <= parityShards) {\n throw new Error(\"ReedSolomonCodec.decode: shards.length must be > parityShards\");\n }\n if (deadShardIndexes.length > parityShards) {\n throw new Error(\n `ReedSolomonCodec.decode: too many missing shards (${deadShardIndexes.length} > ${parityShards})`,\n );\n }\n\n const dataShards = shards.length - parityShards;\n const recovered =\n deadShardIndexes.length === 0\n ? shards\n : wasmReconstruct(shards, parityShards, new Uint32Array(deadShardIndexes));\n\n // Concatenate the leading `dataShards`, then trim padding back off.\n const shardSize = recovered[0]?.length ?? 0;\n const out = new Uint8Array(dataShards * shardSize);\n for (let i = 0; i < dataShards; i++) {\n out.set(recovered[i], i * shardSize);\n }\n return out.subarray(0, originalSize);\n }\n}\n\nexport default ReedSolomonCodec;\n","/**\n * HTTP client for the open content-addressed shard store.\n *\n * Each shard is named by the lowercase hex SHA-256 of its ciphertext bytes.\n * The server verifies the hash on PUT, so the address authenticates the\n * contents — there's no benefit to ACLing PUT/GET, and making them open\n * enables cross-user dedup down the line.\n *\n * Wire protocol:\n * PUT /api/shards/:hash body: shard bytes (application/octet-stream)\n * 200 { ok: true, hash, size, dedup: boolean }\n * 400 if hash doesn't match body\n *\n * GET /api/shards/:hash 200 with shard bytes (application/octet-stream)\n * 404 if absent\n *\n * HEAD /api/shards/:hash 200 if present (no body) — used by callers to\n * skip a PUT they'd otherwise dedup-rewrite. The\n * server can ignore the optimization if it wants.\n */\n\nimport { toHex } from \"../../utilities/bytes\";\n\n/** Peer head-start (ms) before origin joins the race in {@link ShardClient.getShard}. */\nconst HEDGE_MS = 500;\n\n/**\n * A content-addressed byte cache for shards (the offline layer's `ShardCache`\n * satisfies this structurally). Declared here as a minimal interface so the\n * storage layer doesn't import the offline module — keeping the dependency\n * arrow one-way (offline → storage).\n */\nexport interface ShardByteCache {\n get(hash: string): Promise<Uint8Array | null>;\n put(hash: string, bytes: Uint8Array): Promise<void>;\n}\n\n/**\n * A peer block source (the p2p layer's `PeerExchange` satisfies this\n * structurally). Consulted between the local cache and origin: a block fetched\n * from a peer is verified by hash before use. Declared here so the storage layer\n * doesn't import the p2p module (dependency arrow stays p2p → storage).\n */\nexport interface PeerBlockSource {\n getBlock(hash: string, opts?: { timeoutMs?: number }): Promise<Uint8Array | null>;\n announce(hash: string): void;\n}\n\nexport interface ShardClientOptions {\n /** Base URL of the accelerator (e.g. `https://muhkoo-accelerator.workers.dev`). */\n baseUrl: string;\n /**\n * Path prefix for the shard endpoints, joined to `baseUrl` before the\n * hash. Defaults to `/api/shards`, which targets a global shard store\n * (e.g. a dedicated `ShardStoreDO`). Pass a room-scoped value like\n * `/api/spaces/{roomId}/shards` to keep shards bound to a specific\n * `SharedSpaceDO` — that's the path the chat application uses today.\n *\n * Leading slash optional; trailing slash stripped. The final URL is\n * always `${baseUrl}${normalizedPrefix}/${encodeURIComponent(hash)}`.\n */\n pathPrefix?: string;\n /**\n * Optional custom fetch implementation. Defaults to `globalThis.fetch`.\n * Provided so callers can inject retries / auth / instrumentation.\n */\n fetch?: typeof fetch;\n /**\n * Optional offline byte cache. When present, GETs are served cache-first and\n * populated on success, and PUTs write the cache before the network so a\n * just-uploaded file reads back offline. See {@link ShardByteCache}.\n */\n cache?: ShardByteCache;\n /**\n * Called when a PUT can't reach the network (offline). Lets the caller queue\n * the upload for replay on reconnect; the bytes are already in {@link cache}\n * keyed by `hash`, so only the hash needs recording.\n */\n deferUpload?: (hash: string) => Promise<void>;\n /**\n * Optional peer block source. When present, GETs try peers between the local\n * cache and origin (peer blocks are verified by hash); PUTs announce the new\n * block to peers. Best-effort — any failure falls through to origin.\n */\n peers?: PeerBlockSource;\n /**\n * When true, {@link ShardClient.putShard} returns as soon as the shard is\n * written to {@link cache} and announced to {@link peers} — the origin PUT is\n * fired in the BACKGROUND rather than awaited. This makes a large write's\n * manifest available immediately (so a peer/worker can start pulling the\n * shards over P2P right away) while origin catches up as a durable fallback.\n * On a background-PUT failure the shard is handed to {@link deferUpload} (if\n * present) for replay. Requires a {@link cache} so the bytes survive locally\n * until the background upload lands. No-op without a cache.\n */\n backgroundUpload?: boolean;\n}\n\n/**\n * Compute the lowercase hex SHA-256 of `bytes`. Available via WebCrypto in\n * every runtime this SDK targets.\n */\nexport async function shardHash(bytes: Uint8Array): Promise<string> {\n const subtle = (globalThis.crypto as Crypto | undefined)?.subtle;\n if (!subtle) {\n throw new Error(\"shardHash: `globalThis.crypto.subtle` is unavailable in this runtime.\");\n }\n const digest = await subtle.digest(\"SHA-256\", bytes as BufferSource);\n return toHex(new Uint8Array(digest));\n}\n\nexport class ShardClient {\n private readonly baseUrl: string;\n private readonly pathPrefix: string;\n private readonly fetchFn: typeof fetch;\n private readonly cache?: ShardByteCache;\n private readonly deferUpload?: (hash: string) => Promise<void>;\n private readonly peers?: PeerBlockSource;\n private readonly backgroundUpload: boolean;\n\n constructor(opts: ShardClientOptions) {\n if (!opts?.baseUrl) throw new Error(\"ShardClient: `baseUrl` is required\");\n // Strip trailing slash so url concatenation stays clean.\n this.baseUrl = opts.baseUrl.replace(/\\/+$/, \"\");\n // Normalize prefix to leading-slash + no-trailing-slash form so the\n // URL builder can blindly append `/{hash}`.\n const rawPrefix = opts.pathPrefix ?? \"/api/shards\";\n const withSlash = rawPrefix.startsWith(\"/\") ? rawPrefix : `/${rawPrefix}`;\n this.pathPrefix = withSlash.replace(/\\/+$/, \"\");\n const f = opts.fetch ?? globalThis.fetch;\n if (typeof f !== \"function\") {\n throw new Error(\"ShardClient: `globalThis.fetch` is unavailable; pass an explicit fetch.\");\n }\n this.fetchFn = f.bind(globalThis);\n this.cache = opts.cache;\n this.deferUpload = opts.deferUpload;\n this.peers = opts.peers;\n // Background upload needs a local cache to hold the bytes until the PUT\n // lands; without one it would race the reader against a not-yet-uploaded\n // origin, so we quietly ignore the flag when there's no cache.\n this.backgroundUpload = Boolean(opts.backgroundUpload && opts.cache);\n }\n\n /** Build the URL for a given shard hash — exposed for callers that want to log or pre-resolve. */\n urlForHash(hash: string): string {\n return `${this.baseUrl}${this.pathPrefix}/${encodeURIComponent(hash)}`;\n }\n\n /**\n * Upload a shard. The server verifies SHA-256(body) matches `:hash` and\n * rejects with 400 if not, so the caller is the source of truth on\n * naming. Re-uploading an existing shard is idempotent — the server\n * returns `dedup: true` in that case.\n */\n async putShard(hash: string, bytes: Uint8Array): Promise<{ dedup: boolean }> {\n const url = this.urlForHash(hash);\n // Write the cache first so a just-uploaded file reads back even if the\n // network PUT then fails (offline). The bytes are content-addressed, so\n // this is safe to keep regardless of upload outcome.\n if (this.cache) await this.cache.put(hash, bytes);\n // Tell the swarm we now hold this block, so peers can pull it from us.\n if (this.peers) this.peers.announce(hash);\n // Background mode: the bytes are cached + announced, so return now and let\n // origin catch up asynchronously (a peer can already pull this block). The\n // PUT is enqueued through a bounded worker pool so a big file doesn't fire\n // hundreds of concurrent uploads at once.\n if (this.backgroundUpload) {\n this.enqueueBackgroundUpload(url, hash);\n return { dedup: false };\n }\n let response: Response;\n try {\n response = await this.fetchFn(url, {\n method: \"PUT\",\n headers: { \"content-type\": \"application/octet-stream\" },\n // BufferSource is what fetch's body expects; a Uint8Array satisfies it.\n body: bytes as BodyInit,\n });\n } catch (err) {\n // Network unreachable (offline). If a defer hook is wired, queue the\n // upload for replay and report success — the bytes are cached.\n if (this.deferUpload) {\n await this.deferUpload(hash);\n return { dedup: false };\n }\n throw err;\n }\n if (!response.ok) {\n const text = await safeText(response);\n throw new Error(`ShardClient.putShard(${hash}) failed (${response.status}): ${text}`);\n }\n let dedup = false;\n try {\n const json = (await response.json()) as { dedup?: boolean };\n dedup = Boolean(json?.dedup);\n } catch {\n // Server returned 200 with no body — treat as fresh upload.\n }\n return { dedup };\n }\n\n // ── bounded background-upload pool (backgroundUpload mode) ──\n private bgActive = 0;\n private readonly bgQueue: Array<() => void> = [];\n private static readonly BG_CONCURRENCY = 6;\n\n /** Queue a shard's origin PUT to run in the background under a concurrency\n * cap. Bytes are re-read from {@link cache} at upload time (not held in the\n * queue) so a large file's backlog doesn't pin a second copy in memory. */\n private enqueueBackgroundUpload(url: string, hash: string): void {\n const run = async () => {\n this.bgActive++;\n try {\n const bytes = this.cache ? await this.cache.get(hash) : null;\n if (bytes) await this.uploadToOrigin(url, hash, bytes);\n } catch {\n // Origin unreachable/failed — queue for replay if we can; otherwise\n // the block is still cached + peer-served, so a later re-PUT covers it.\n if (this.deferUpload) { try { await this.deferUpload(hash); } catch { /* best-effort */ } }\n } finally {\n this.bgActive--;\n const next = this.bgQueue.shift();\n if (next) next();\n }\n };\n if (this.bgActive < ShardClient.BG_CONCURRENCY) void run();\n else this.bgQueue.push(() => void run());\n }\n\n /** PUT the shard bytes to origin, verifying the server accepted them.\n * Used by the background-upload path; throws on network/HTTP failure. */\n private async uploadToOrigin(url: string, hash: string, bytes: Uint8Array): Promise<void> {\n const response = await this.fetchFn(url, {\n method: \"PUT\",\n headers: { \"content-type\": \"application/octet-stream\" },\n body: bytes as BodyInit,\n });\n if (!response.ok) {\n const text = await safeText(response);\n throw new Error(`ShardClient.putShard(${hash}) failed (${response.status}): ${text}`);\n }\n }\n\n /**\n * Fetch a shard by hash. Throws if the server returns a non-200; returns\n * `null` for 404 so callers can distinguish \"missing\" from \"errored\".\n */\n async getShard(hash: string): Promise<Uint8Array | null> {\n // Cache-first: a hit is content-verified by construction (key == hash).\n if (this.cache) {\n const cached = await this.cache.get(hash);\n if (cached) return cached;\n }\n // No peers → straight to origin.\n if (!this.peers) return this.fetchFromOrigin(hash);\n\n // HEDGED RACE: prefer a peer (saves origin egress) but never let a slow\n // or missing peer stall delivery — give the peer a short head start, then\n // start origin in parallel and take whichever returns the block first.\n const peers = this.peers;\n return new Promise<Uint8Array | null>((resolve, reject) => {\n let done = false;\n let originStarted = false;\n let timer: ReturnType<typeof setTimeout> | null = null;\n const win = (b: Uint8Array | null) => {\n if (done) return;\n done = true;\n if (timer) clearTimeout(timer);\n resolve(b);\n };\n const fail = (e: unknown) => {\n if (!done) { done = true; reject(e); }\n };\n const startOrigin = () => {\n if (originStarted || done) return;\n originStarted = true;\n if (timer) { clearTimeout(timer); timer = null; }\n this.fetchFromOrigin(hash).then(win, fail);\n };\n timer = setTimeout(startOrigin, HEDGE_MS);\n peers.getBlock(hash).then(\n (b) => {\n if (b) {\n if (this.cache) void this.cache.put(hash, b);\n win(b); // peer delivered first\n } else {\n startOrigin(); // peer miss → don't wait out the hedge\n }\n },\n () => startOrigin(), // peer error → origin now\n );\n });\n }\n\n /** Fetch a shard from origin. Returns `null` for 404 (or offline when a\n * cache is present, so RS recovery can proceed); throws otherwise. */\n private async fetchFromOrigin(hash: string): Promise<Uint8Array | null> {\n const url = this.urlForHash(hash);\n let response: Response;\n try {\n response = await this.fetchFn(url, { method: \"GET\" });\n } catch (err) {\n if (this.cache) return null;\n throw err;\n }\n if (response.status === 404) return null;\n if (!response.ok) {\n const text = await safeText(response);\n throw new Error(`ShardClient.getShard(${hash}) failed (${response.status}): ${text}`);\n }\n const bytes = new Uint8Array(await response.arrayBuffer());\n if (this.cache) void this.cache.put(hash, bytes);\n return bytes;\n }\n\n /**\n * Check whether a shard exists. Lets the caller skip a PUT they'd otherwise\n * dedup-rewrite. The server can implement this as a HEAD or return a small\n * JSON body — we don't depend on either.\n */\n async hasShard(hash: string): Promise<boolean> {\n const url = this.urlForHash(hash);\n const response = await this.fetchFn(url, { method: \"HEAD\" });\n return response.status === 200;\n }\n}\n\nasync function safeText(response: Response): Promise<string> {\n try { return await response.text(); } catch { return \"\"; }\n}\n","/**\n * `FileStorage` — top-level entry point for chunked, encrypted, erasure-coded\n * file storage.\n *\n * Pipeline for writing a file:\n * 1. Split the plaintext into fixed-size chunks (default 4 MiB).\n * 2. For each chunk:\n * a. Generate a fresh AES-256-GCM key + 12-byte IV (`ChunkCipher`).\n * b. Encrypt the chunk → ciphertext (plaintext.length + 16 bytes tag).\n * c. Reed–Solomon encode the ciphertext into `dataShards + parityShards`\n * equal-length shards (`ReedSolomonCodec`).\n * d. PUT every shard to the content-addressed shard store, keyed by\n * SHA-256 of the shard bytes (`ShardClient`).\n * 3. Build a `FileManifest` listing every chunk's keys, IVs, sizes, and\n * the SHA-256 of every shard in order.\n *\n * Two ways to use the manifest:\n * - {@link FileStorage.writeFileToShards} returns it to the caller, who is\n * then responsible for delivering it to readers (e.g. by E2E-encrypting\n * it as a chat message). The chat application takes this path.\n * - {@link FileStorage.writeFile} additionally POSTs the manifest to a\n * gated multi-user space (`SharedSpaceClient`) so any participant of the\n * space can read the file by manifest id later.\n *\n * Reading is the inverse: {@link FileStorage.readFileFromShards} takes a\n * manifest and reassembles the plaintext; {@link FileStorage.readFile} first\n * fetches the manifest from the space.\n */\n\nimport type { FileManifest, FileStat, ChunkManifest } from \"./types\";\nimport { manifestToStat } from \"./types\";\nimport { ChunkCipher } from \"../crypto/ChunkCipher\";\nimport type { ChunkKeyMaterial } from \"../crypto/ChunkCipher\";\nimport { ReedSolomonCodec } from \"./encoding\";\nimport { ShardClient, shardHash } from \"./transport/ShardClient\";\nimport { SharedSpaceClient } from \"./transport/SharedSpaceClient\";\nimport { generateId } from \"../utilities\";\n\nexport interface FileStorageOptions {\n /** Talks to the content-addressed shard store. Always required. */\n shards: ShardClient;\n /**\n * Talks to the gated multi-user space holding manifests + ACLs.\n * Optional — only required by {@link FileStorage.writeFile} /\n * {@link FileStorage.readFile} / {@link FileStorage.deleteFile} /\n * {@link FileStorage.listFiles} / {@link FileStorage.readManifest}.\n *\n * Callers that ship the manifest themselves (e.g. via an encrypted chat\n * message) can omit `space` and use the `*FromShards` / `*ToShards`\n * methods directly.\n */\n space?: SharedSpaceClient;\n /**\n * Plaintext chunk size in bytes. After encryption each chunk gains 16\n * bytes (GCM tag); after RS encoding the size is rounded up to a multiple\n * of `dataShards` per chunk. Default 4 MiB — a balance between\n * round-trip cost and parallelism on the upload path.\n */\n chunkSize?: number;\n /** RS data shards per chunk (default 4). */\n dataShards?: number;\n /** RS parity shards per chunk (default 2). */\n parityShards?: number;\n /**\n * Cap on concurrent shard uploads / downloads. Tune for the network. The\n * default of 8 saturates most home connections without overwhelming the\n * server's per-IP rate limiter.\n */\n concurrency?: number;\n /**\n * Optional pre-compiled RS WebAssembly module. Defaults to the bundled\n * loader. Pass this in environments where the bundled loader path isn't\n * available (vitest, deploy-time-precompiled CF Workers).\n */\n rsWasmModule?: WebAssembly.Module;\n}\n\n/**\n * Input to {@link FileStorage.writeFile} (which writes the manifest to a\n * `SharedSpaceClient`). Carries the destination `spaceId`.\n */\nexport interface WriteFileInput extends WriteToShardsInput {\n /** Space to write the manifest to — must allow the caller `write`. */\n spaceId: string;\n}\n\n/**\n * Input to {@link FileStorage.writeFileToShards} (which doesn't write a\n * manifest anywhere — that's the caller's job).\n */\nexport interface WriteToShardsInput {\n /** Raw data, a Blob, or a File. */\n data: Uint8Array | Blob | File;\n /** Application-supplied display metadata. */\n metadata: {\n name: string;\n type: string;\n path?: string;\n lastModified?: number;\n };\n /**\n * Optional pre-allocated file id. Defaults to a fresh one. Useful for\n * resumable uploads: the same id always maps to the same manifest slot.\n */\n fileId?: string;\n /**\n * Optional upload-progress callback, invoked after each chunk finishes\n * (`completed` of `total` chunks). Lets a UI show a progress bar. Called once\n * with `(0, total)` before the first chunk so a bar can render immediately.\n */\n onProgress?: (completed: number, total: number) => void;\n}\n\nexport class FileStorage {\n private readonly space: SharedSpaceClient | undefined;\n private readonly shards: ShardClient;\n private readonly chunkSize: number;\n private readonly dataShards: number;\n private readonly parityShards: number;\n private readonly concurrency: number;\n private readonly cipher = new ChunkCipher();\n private readonly codec = new ReedSolomonCodec();\n private readonly rsWasmModule?: WebAssembly.Module;\n\n constructor(opts: FileStorageOptions) {\n if (!opts?.shards) throw new Error(\"FileStorage: `shards` (ShardClient) is required\");\n\n this.space = opts.space;\n this.shards = opts.shards;\n this.chunkSize = opts.chunkSize ?? 4 * 1024 * 1024;\n this.dataShards = opts.dataShards ?? 4;\n this.parityShards = opts.parityShards ?? 2;\n this.concurrency = Math.max(1, opts.concurrency ?? 8);\n this.rsWasmModule = opts.rsWasmModule;\n\n if (this.chunkSize < 1) throw new Error(\"FileStorage: chunkSize must be >= 1 byte\");\n if (this.dataShards < 1) throw new Error(\"FileStorage: dataShards must be >= 1\");\n if (this.parityShards < 1) throw new Error(\"FileStorage: parityShards must be >= 1\");\n }\n\n // -------------------------------------------------------------------------\n // Shard-only pipeline — the caller owns the manifest. Used by chat file\n // sharing, where the manifest rides as an E2E-encrypted chat message.\n // -------------------------------------------------------------------------\n\n /**\n * Chunk → encrypt → encode → upload-shards. Returns the resulting manifest\n * along with a `FileStat` summary. The caller is responsible for storing\n * or transmitting the manifest however it likes.\n */\n async writeFileToShards(\n input: WriteToShardsInput,\n ): Promise<{ manifest: FileManifest; stat: FileStat }> {\n await this.codec.ready(this.rsWasmModule);\n\n const fileId = input.fileId ?? generateId();\n const createdAt = Date.now();\n const chunks: ChunkManifest[] = [];\n\n // Read the source per-chunk so the peak memory footprint stays at\n // ~chunkSize even for multi-GB files. A Blob/File is sliced lazily (only\n // the current chunk's bytes are materialized) — reading the whole thing\n // up front would blow past the browser's ~2GB ArrayBuffer cap and throw\n // \"the file could not be read\". A caller that already has the bytes in a\n // Uint8Array just gets zero-copy subarray views.\n const asBytes = input.data instanceof Uint8Array ? input.data : null;\n const size = asBytes ? asBytes.length : (input.data as Blob).size;\n const readChunk = async (start: number, end: number): Promise<Uint8Array> =>\n asBytes ? asBytes.subarray(start, end)\n : new Uint8Array(await (input.data as Blob).slice(start, end).arrayBuffer());\n\n const totalChunks = Math.max(1, Math.ceil(size / this.chunkSize));\n input.onProgress?.(0, totalChunks);\n\n // Within a chunk, the shard uploads are parallelized up to `this.concurrency`.\n for (let chunkIndex = 0; chunkIndex * this.chunkSize < Math.max(1, size); chunkIndex++) {\n const start = chunkIndex * this.chunkSize;\n const end = Math.min(start + this.chunkSize, size);\n const plaintext = await readChunk(start, end);\n chunks.push(await this.writeChunk(plaintext, chunkIndex));\n input.onProgress?.(chunks.length, totalChunks);\n // Stop after one iteration if the file is empty — we still emit a\n // single zero-length chunk so the manifest has a stable shape.\n if (size === 0) break;\n }\n\n const manifest: FileManifest = {\n id: fileId,\n name: input.metadata.name,\n size,\n type: input.metadata.type,\n path: input.metadata.path,\n lastModified: input.metadata.lastModified ?? createdAt,\n createdAt,\n chunks,\n version: 1,\n };\n\n return { manifest, stat: manifestToStat(manifest) };\n }\n\n /**\n * Inverse of {@link writeFileToShards}. Takes a manifest the caller\n * obtained somehow (chat message, share link, etc.) and reassembles the\n * plaintext. Throws if too many shards are missing or any chunk's auth\n * tag fails.\n */\n async readFileFromShards(\n manifest: FileManifest,\n ): Promise<{ data: Uint8Array; stat: FileStat }> {\n await this.codec.ready(this.rsWasmModule);\n\n // Materialize each chunk into plaintext, then concatenate. We don't\n // stream across chunks here because the consuming surface returns\n // `Uint8Array`; a streaming variant would reuse `readChunk` unchanged.\n const plaintextChunks: Uint8Array[] = [];\n for (const chunkManifest of [...manifest.chunks].sort((a, b) => a.chunkIndex - b.chunkIndex)) {\n plaintextChunks.push(await this.readChunk(chunkManifest));\n }\n let total = 0;\n for (const c of plaintextChunks) total += c.length;\n const out = new Uint8Array(total);\n let offset = 0;\n for (const c of plaintextChunks) {\n out.set(c, offset);\n offset += c.length;\n }\n return { data: out, stat: manifestToStat(manifest) };\n }\n\n /**\n * Streaming inverse of {@link writeFileToShards}: yields each chunk's\n * decrypted plaintext in order WITHOUT concatenating. Peak memory stays at\n * ~one chunk, so multi-GB files (which overflow a single `Uint8Array`) can be\n * piped straight to a file/socket. Same shard sourcing (cache → peers →\n * origin) and per-chunk auth as {@link readFileFromShards}.\n */\n async *readChunksFromShards(manifest: FileManifest): AsyncGenerator<Uint8Array> {\n await this.codec.ready(this.rsWasmModule);\n for (const chunkManifest of [...manifest.chunks].sort((a, b) => a.chunkIndex - b.chunkIndex)) {\n yield await this.readChunk(chunkManifest);\n }\n }\n\n // -------------------------------------------------------------------------\n // Space-backed convenience wrappers — encrypt + upload + write manifest.\n // Require a `SharedSpaceClient` to have been provided at construction.\n // -------------------------------------------------------------------------\n\n /** As {@link writeFileToShards}, plus POSTs the manifest to `input.spaceId`. */\n async writeFile(input: WriteFileInput): Promise<FileStat> {\n const space = this.requireSpace(\"writeFile\");\n const { manifest, stat } = await this.writeFileToShards(input);\n await space.writeFileManifest(input.spaceId, manifest);\n return stat;\n }\n\n /** As {@link readFileFromShards}, but fetches the manifest from a space first. */\n async readFile(spaceId: string, fileId: string): Promise<{ data: Uint8Array; stat: FileStat }> {\n const space = this.requireSpace(\"readFile\");\n const manifest = await space.readFileManifest(spaceId, fileId);\n return await this.readFileFromShards(manifest);\n }\n\n /**\n * Delete the manifest from a space. **Does not GC the shards** — those\n * are content-addressed and may be referenced by other manifests.\n * Garbage collection is a separate server-side concern (Phase D / D-ish).\n */\n async deleteFile(spaceId: string, fileId: string): Promise<boolean> {\n const space = this.requireSpace(\"deleteFile\");\n return space.deleteFileManifest(spaceId, fileId);\n }\n\n /** Convenience pass-through. */\n async listFiles(spaceId: string): Promise<FileStat[]> {\n const space = this.requireSpace(\"listFiles\");\n return space.listFiles(spaceId);\n }\n\n /** Read a manifest verbatim — useful for \"share file\" / export flows. */\n async readManifest(spaceId: string, fileId: string): Promise<FileManifest> {\n const space = this.requireSpace(\"readManifest\");\n return space.readFileManifest(spaceId, fileId);\n }\n\n // -------------------------------------------------------------------------\n // Internals\n // -------------------------------------------------------------------------\n\n private requireSpace(operation: string): SharedSpaceClient {\n if (!this.space) {\n throw new Error(\n `FileStorage.${operation}: a SharedSpaceClient is required for this operation ` +\n \"(constructor was called without `space`)\",\n );\n }\n return this.space;\n }\n\n /** Encrypt + encode + upload one chunk; return its manifest entry. */\n private async writeChunk(plaintext: Uint8Array, chunkIndex: number): Promise<ChunkManifest> {\n const keyMaterial: ChunkKeyMaterial = this.cipher.generateKeyMaterial();\n const ciphertext =\n plaintext.length === 0\n ? new Uint8Array(0)\n : await this.cipher.encryptChunk(plaintext, keyMaterial);\n\n // An empty chunk encodes to nothing — emit a manifest entry with no\n // shards so the reader can re-emit an empty plaintext and skip the\n // shard round-trip.\n if (ciphertext.length === 0) {\n return {\n id: generateId(),\n chunkIndex,\n originalSize: 0,\n ciphertextSize: 0,\n dataShards: this.dataShards,\n parityShards: this.parityShards,\n shardSize: 0,\n shardHashes: [],\n cipher: keyMaterial,\n };\n }\n\n const encoded = this.codec.encode(ciphertext, this.dataShards, this.parityShards);\n const hashes = await Promise.all(encoded.shards.map((s) => shardHash(s)));\n await this.runWithConcurrency(\n encoded.shards.map((bytes, i) => async () => {\n await this.shards.putShard(hashes[i], bytes);\n }),\n );\n\n return {\n id: generateId(),\n chunkIndex,\n originalSize: plaintext.length,\n ciphertextSize: ciphertext.length,\n dataShards: encoded.dataShards,\n parityShards: encoded.parityShards,\n shardSize: encoded.shardSize,\n shardHashes: hashes,\n cipher: keyMaterial,\n };\n }\n\n /** Inverse of `writeChunk`. */\n private async readChunk(manifest: ChunkManifest): Promise<Uint8Array> {\n if (manifest.shardHashes.length === 0) {\n // Empty chunk fast path.\n return new Uint8Array(0);\n }\n\n // Fetch shards in parallel. Anything missing becomes a placeholder so\n // the decoder can fill it in from the parity shards (up to\n // `parityShards` allowed).\n const fetched = new Array<Uint8Array | null>(manifest.shardHashes.length);\n await this.runWithConcurrency(\n manifest.shardHashes.map((hash, i) => async () => {\n fetched[i] = await this.shards.getShard(hash);\n }),\n );\n\n const deadIndexes: number[] = [];\n const shards: Uint8Array[] = fetched.map((bytes, i) => {\n if (bytes === null) {\n deadIndexes.push(i);\n return new Uint8Array(manifest.shardSize);\n }\n if (bytes.length !== manifest.shardSize) {\n throw new Error(\n `FileStorage: shard ${manifest.shardHashes[i]} has wrong size ` +\n `(got ${bytes.length}, expected ${manifest.shardSize})`,\n );\n }\n return bytes;\n });\n\n if (deadIndexes.length > manifest.parityShards) {\n throw new Error(\n `FileStorage: chunk ${manifest.id} unrecoverable — ${deadIndexes.length} shards missing, ` +\n `only ${manifest.parityShards} tolerated`,\n );\n }\n\n const ciphertextPadded = this.codec.decode(\n shards,\n manifest.parityShards,\n deadIndexes,\n manifest.ciphertextSize,\n );\n return await this.cipher.decryptChunk(ciphertextPadded, manifest.cipher);\n }\n\n /** Run `tasks` with at most `this.concurrency` in flight. */\n private async runWithConcurrency(tasks: Array<() => Promise<void>>): Promise<void> {\n let cursor = 0;\n const concurrency = this.concurrency;\n async function nextWorker(): Promise<void> {\n while (cursor < tasks.length) {\n const idx = cursor++;\n await tasks[idx]();\n }\n }\n const workers = new Array(Math.min(concurrency, tasks.length))\n .fill(null)\n .map(() => nextWorker());\n await Promise.all(workers);\n }\n}\n\nexport default FileStorage;\n","/**\n * HTTP client for the gated file-manifest store on a SharedSpace\n * (`/api/spaces/:spaceId/files`).\n *\n * A \"file\" in a space is its **manifest** (per-chunk keys + the SHA-256 of each\n * global shard). The shard bytes live in the open `/api/shards` store; the\n * manifest is the capability. This client only moves manifests in/out of the\n * space's gated store.\n *\n * Authorization is **session-based**, consistent with the rest of the\n * SharedSpace (keyring, websocket): the SDK's credential-stamping `fetch`\n * (from {@link HttpClient}) attaches the app key + session token, the platform\n * validates the session and injects a trusted `X-Muhkoo-User-Context`, and the\n * DO authorizes on that + channel membership. There is no per-op Groth16 proof.\n *\n * Wire protocol (server: `SharedSpaceDO`):\n * POST /api/spaces/:spaceId/files body: { manifest } → { ok, fileId }\n * GET /api/spaces/:spaceId/files → { files: FileStat[] }\n * GET /api/spaces/:spaceId/files/:fileId → { manifest }\n * DELETE /api/spaces/:spaceId/files/:fileId → { ok, existed }\n */\n\nimport type { FileManifest, FileStat } from \"../types\";\n\nexport interface SharedSpaceClientOptions {\n /** Base URL of the accelerator (e.g. `https://api.muhkoo.dev`). */\n baseUrl: string;\n /**\n * Credential-stamping fetch — pass {@link HttpClient.fetch} so requests\n * carry the app key + session token. Defaults to `globalThis.fetch`\n * (unauthenticated; only useful in tests).\n */\n fetch?: typeof fetch;\n}\n\nexport class SharedSpaceClient {\n private readonly baseUrl: string;\n private readonly fetchFn: typeof fetch;\n\n constructor(opts: SharedSpaceClientOptions) {\n if (!opts?.baseUrl) throw new Error(\"SharedSpaceClient: `baseUrl` is required\");\n this.baseUrl = opts.baseUrl.replace(/\\/+$/, \"\");\n const f = opts.fetch ?? globalThis.fetch;\n if (typeof f !== \"function\") {\n throw new Error(\"SharedSpaceClient: `globalThis.fetch` is unavailable; pass an explicit fetch.\");\n }\n this.fetchFn = f.bind(globalThis);\n }\n\n /** Write a file manifest into the space. Requires space membership. */\n async writeFileManifest(spaceId: string, manifest: FileManifest): Promise<void> {\n const url = `${this.filesBase(spaceId)}`;\n const res = await this.fetchFn(url, this.jsonRequest(\"POST\", { manifest }));\n await parseOrThrow<{ ok: true; fileId: string }>(res, `writeFileManifest(${manifest.id})`);\n }\n\n /** Read a file manifest by id. Requires space membership. */\n async readFileManifest(spaceId: string, fileId: string): Promise<FileManifest> {\n const url = `${this.filesBase(spaceId)}/${encodeURIComponent(fileId)}`;\n const res = await this.fetchFn(url, this.jsonRequest(\"GET\"));\n const data = await parseOrThrow<{ manifest: FileManifest }>(res, `readFileManifest(${fileId})`);\n return data.manifest;\n }\n\n /** Delete a file manifest by id. Requires space membership. */\n async deleteFileManifest(spaceId: string, fileId: string): Promise<boolean> {\n const url = `${this.filesBase(spaceId)}/${encodeURIComponent(fileId)}`;\n const res = await this.fetchFn(url, this.jsonRequest(\"DELETE\"));\n const data = await parseOrThrow<{ ok: true; existed: boolean }>(res, `deleteFileManifest(${fileId})`);\n return data.existed;\n }\n\n /** List file summaries in the space. Requires space membership. */\n async listFiles(spaceId: string): Promise<FileStat[]> {\n const url = `${this.filesBase(spaceId)}`;\n const res = await this.fetchFn(url, this.jsonRequest(\"GET\"));\n const data = await parseOrThrow<{ files: FileStat[] }>(res, \"listFiles\");\n return Array.isArray(data.files) ? data.files : [];\n }\n\n // -------------------------------------------------------------------------\n\n private filesBase(spaceId: string): string {\n return `${this.baseUrl}/api/spaces/${encodeURIComponent(spaceId)}/files`;\n }\n\n private jsonRequest(method: string, body?: unknown): RequestInit {\n const init: RequestInit = { method };\n if (body !== undefined) {\n init.headers = { \"Content-Type\": \"application/json\" };\n init.body = JSON.stringify(body);\n }\n return init;\n }\n}\n\nasync function parseOrThrow<T>(response: Response, op: string): Promise<T> {\n let parsed: unknown = null;\n try {\n parsed = await response.json();\n } catch {\n // non-JSON body\n }\n if (!response.ok) {\n const msg =\n parsed && typeof parsed === \"object\" && \"error\" in (parsed as object)\n ? String((parsed as { error: unknown }).error)\n : `${response.status} ${response.statusText}`;\n throw new Error(`SharedSpaceClient.${op}: ${msg}`);\n }\n return parsed as T;\n}\n\nexport default SharedSpaceClient;\n","/**\n * HTTP client for the accelerator's `/api/auth/*` endpoints.\n *\n * Owns the wire shapes for register / challenge / authenticate / verify so\n * the React SPA (and any future consumers) don't reimplement them. The ZK\n * identity derivation + Groth16 proof generation stay on the application\n * side — this client handles only the round-trips.\n *\n * Mirrors `PersonalSpaceClient` / `ShardClient` / `SharedSpaceClient`: takes\n * a `baseUrl`, optional custom `fetch`, throws typed `Error`s on failure\n * (with the worker's message inlined where available).\n */\n\nimport type { Groth16Proof } from \"../types/zk\";\n\n// ---------------------------------------------------------------------------\n// Wire types — must stay in sync with `accelerator/src/durable-objects/UserAuth.ts`.\n// ---------------------------------------------------------------------------\n\nexport interface ZkRegisterRequest {\n username: string;\n /** Decimal-string Poseidon commitment. */\n commitment: string;\n /** Base64-encoded raw uncompressed ECDH public key (SEC1 0x04‖X‖Y). */\n ecdhPublicKey: string;\n /** Base64-encoded raw uncompressed ECDSA public key. */\n ecdsaPublicKey: string;\n email?: string | null;\n}\n\nexport interface ZkRegisterResponse {\n success: boolean;\n}\n\nexport interface ZkChallengeResponse {\n challengeId: string;\n /** Hex-encoded random nonce — caller reduces into a BN254 field element for the proof. */\n nonce: string;\n /** Decimal-string Poseidon commitment the server has on file for this user. */\n commitment: string;\n}\n\nexport interface ZkAuthenticateRequest {\n challengeId: string;\n proof: {\n commitment: string;\n /** Original hex nonce from the challenge (NOT the field-reduced version). */\n nonce: string;\n response: {\n proof: Groth16Proof;\n publicSignals: string[];\n };\n /** Base64 ECDSA-SHA256 signature over `JSON.stringify(response.proof)`. */\n signature: string;\n };\n rememberMe?: boolean;\n}\n\nexport interface AuthSuccess {\n token: string;\n username: string;\n}\n\n/** A vault factor record (M1.0 + M2 gated types). Wrap/iv are base64 AES-GCM; absent for phrase. */\nexport interface VaultFactor {\n id: string;\n type: \"password\" | \"passkey\" | \"phrase-marker\" | \"email\" | \"google\" | \"device\";\n wrap?: string;\n iv?: string;\n params?: Record<string, unknown>;\n label?: string;\n createdAt?: number;\n /** Display hint for gated factors (\"m•••@gmail.com\") — list responses only. */\n masked?: string;\n /** Passkey's origin (RP id) — list responses only. A passkey only unlocks\n * from this host or a subdomain of it, so apps on several hosts enroll one\n * per origin. */\n rpId?: string;\n}\n\n// ---------------------------------------------------------------------------\n// AuthClient\n// ---------------------------------------------------------------------------\n\nexport interface AuthClientOptions {\n /** Absolute URL of the accelerator worker (no trailing slash required). */\n baseUrl: string;\n /** Optional custom fetch — defaults to `globalThis.fetch`. */\n fetch?: typeof fetch;\n}\n\nexport class AuthClient {\n private readonly baseUrl: string;\n private readonly fetchFn: typeof fetch;\n\n constructor(opts: AuthClientOptions) {\n if (!opts?.baseUrl) throw new Error(\"AuthClient: `baseUrl` is required\");\n this.baseUrl = opts.baseUrl.replace(/\\/+$/, \"\");\n const f = opts.fetch ?? globalThis.fetch;\n if (typeof f !== \"function\") {\n throw new Error(\"AuthClient: `globalThis.fetch` is unavailable; pass an explicit fetch.\");\n }\n this.fetchFn = f.bind(globalThis);\n }\n\n /** Submit ZK registration. Caller has already derived the identity + commitment. */\n async register(req: ZkRegisterRequest): Promise<ZkRegisterResponse> {\n const res = await this.fetchFn(`${this.baseUrl}/api/auth/zk-register`, this.json(\"POST\", req));\n return await this.parse<ZkRegisterResponse>(\"register\", res);\n }\n\n /** Request an auth challenge for `username` (server issues a fresh nonce). */\n async getChallenge(username: string): Promise<ZkChallengeResponse> {\n const res = await this.fetchFn(`${this.baseUrl}/api/auth/challenge`, this.json(\"POST\", { username }));\n return await this.parse<ZkChallengeResponse>(\"getChallenge\", res);\n }\n\n /** Trade a challenge + proof for a session token. */\n async authenticate(req: ZkAuthenticateRequest): Promise<AuthSuccess> {\n const res = await this.fetchFn(`${this.baseUrl}/api/auth/zk-authenticate`, this.json(\"POST\", req));\n return await this.parse<AuthSuccess>(\"authenticate\", res);\n }\n\n /**\n * Validate a previously stored session token. Returns `{ username }` on\n * success; throws on 401/404 — caller uses that to drop a stale token\n * when restoring a session after a reload.\n */\n async verify(token: string): Promise<{ username: string }> {\n const res = await this.fetchFn(`${this.baseUrl}/api/auth/verify`, this.json(\"POST\", { token }));\n return await this.parse<{ username: string }>(\"verify\", res);\n }\n\n // ---- Identity vault (M1.0) ----------------------------------------------\n\n /** Blinded OPRF evaluation — the server-gated half of a password/recovery wrap key. */\n async oprfEvaluate(username: string, blinded: string): Promise<{ evaluated: string }> {\n const res = await this.fetchFn(`${this.baseUrl}/api/auth/oprf`, this.json(\"POST\", { username, blinded }));\n return await this.parse<{ evaluated: string }>(\"oprfEvaluate\", res);\n }\n\n /**\n * Gated split-key OPRF evaluation (M2 — email/google factors). Requires a\n * live `verifyToken` from {@link emailOtpVerify}; returns BOTH trust\n * domains' evaluations. The recover token is consumed by this call.\n */\n async oprfEvaluateGated(\n username: string,\n blinded: string,\n factorType: \"email\" | \"google\",\n purpose: \"enroll\" | \"recover\",\n verifyToken: string,\n ): Promise<{ evaluated: string; evaluated2: string }> {\n const res = await this.fetchFn(\n `${this.baseUrl}/api/auth/oprf`,\n this.json(\"POST\", { username, blinded, factorType, purpose, verifyToken }),\n );\n return await this.parse<{ evaluated: string; evaluated2: string }>(\"oprfEvaluateGated\", res);\n }\n\n /**\n * Request an email OTP. With a session `token` this is the ENROLL flow\n * (code sent to `email`); without one it's RECOVER (code sent to the\n * account's enrolled address — the response is uniform either way).\n */\n async emailOtpStart(opts: { token?: string; email?: string; username?: string }): Promise<void> {\n const init = this.json(\"POST\", { email: opts.email, username: opts.username });\n if (opts.token) (init.headers as Record<string, string>)[\"X-Muhkoo-Session\"] = opts.token;\n const res = await this.fetchFn(`${this.baseUrl}/api/auth/email/start`, init);\n await this.parse<{ sent: boolean }>(\"emailOtpStart\", res);\n }\n\n /** Trade an emailed code for a single-use verifyToken (+ the proven address). */\n async emailOtpVerify(opts: { code: string; token?: string; username?: string }): Promise<{ verifyToken: string; email: string }> {\n const init = this.json(\"POST\", { code: opts.code, username: opts.username });\n if (opts.token) (init.headers as Record<string, string>)[\"X-Muhkoo-Session\"] = opts.token;\n const res = await this.fetchFn(`${this.baseUrl}/api/auth/email/verify`, init);\n return await this.parse<{ verifyToken: string; email: string }>(\"emailOtpVerify\", res);\n }\n\n /**\n * Verify a Google ID token (M2.3). With a session `token` it's the ENROLL\n * gate; without, it's RECOVER/LOGIN (the Google account must already be\n * linked). Returns a single-use verifyToken bound to the account's `sub`.\n */\n async googleVerify(opts: { idToken: string; token?: string; username?: string }): Promise<{ verifyToken: string; sub: string; emailHint: string | null }> {\n const init = this.json(\"POST\", { idToken: opts.idToken, username: opts.username });\n if (opts.token) (init.headers as Record<string, string>)[\"X-Muhkoo-Session\"] = opts.token;\n const res = await this.fetchFn(`${this.baseUrl}/api/auth/google/verify`, init);\n return await this.parse<{ verifyToken: string; sub: string; emailHint: string | null }>(\"googleVerify\", res);\n }\n\n // ---- Hosted-auth authorization-code flow (H0) ---------------------------\n\n /** Mint a single-use authorization code for an app (called by the hosted page; session-authed). */\n async grant(token: string, body: { appId: string; redirectUri: string; codeChallenge: string; sealedKeys: string }): Promise<{ code: string }> {\n const init = this.json(\"POST\", body);\n (init.headers as Record<string, string>)[\"X-Muhkoo-Session\"] = token;\n const res = await this.fetchFn(`${this.baseUrl}/api/auth/grant`, init);\n return await this.parse<{ code: string }>(\"grant\", res);\n }\n\n /** Exchange an authorization code + PKCE verifier for the session + sealed key material. */\n async token(body: { code: string; codeVerifier: string; appId?: string }): Promise<{ sessionToken: string; username: string; commitment: string; sealedKeys: string; appId: string }> {\n const res = await this.fetchFn(`${this.baseUrl}/api/auth/token`, this.json(\"POST\", body));\n return await this.parse<{ sessionToken: string; username: string; commitment: string; sealedKeys: string; appId: string }>(\"token\", res);\n }\n\n /**\n * Read a factor record for `username` (returns an indistinguishable decoy if\n * absent). Gated types (email) require the recover `verifyToken`.\n */\n async vaultRead(\n username: string,\n factorType: VaultFactor[\"type\"],\n verifyToken?: string,\n /** Passkeys are per-origin: naming the caller's host returns THAT origin's\n * passkey instead of whichever was enrolled first (which WebAuthn would\n * refuse). Ignored for other factor types. */\n rpId?: string,\n /** Device factors are selected by id — a user may have many machines. */\n factorId?: string,\n ): Promise<{ factor: VaultFactor | null }> {\n const res = await this.fetchFn(\n `${this.baseUrl}/api/auth/vault`,\n this.json(\"POST\", { username, factorType, verifyToken, rpId, factorId }),\n );\n return await this.parse<{ factor: VaultFactor | null }>(\"vaultRead\", res);\n }\n\n /**\n * Add/replace a factor (session-authed; the seed is already wrapped\n * client-side). Email factors additionally require (and consume) the\n * enroll `verifyToken`; the stored address must be the verified one.\n */\n async vaultPutFactor(token: string, factor: VaultFactor, verifyToken?: string): Promise<{ ok: boolean; id: string }> {\n const init = this.json(\"PUT\", { factor, verifyToken });\n (init.headers as Record<string, string>)[\"Authorization\"] = `Bearer ${token}`;\n const res = await this.fetchFn(`${this.baseUrl}/api/auth/vault/factor`, init);\n return await this.parse<{ ok: boolean; id: string }>(\"vaultPutFactor\", res);\n }\n\n /** List the user's factor metadata (no ciphertext). Session-authed. */\n async vaultFactors(token: string): Promise<{ factors: VaultFactor[]; migrated: boolean }> {\n const init: RequestInit = { method: \"GET\", headers: { Authorization: `Bearer ${token}` } };\n const res = await this.fetchFn(`${this.baseUrl}/api/auth/vault/factors`, init);\n return await this.parse<{ factors: VaultFactor[]; migrated: boolean }>(\"vaultFactors\", res);\n }\n\n /** Remove a factor by id (can't remove the last one). Session-authed. */\n async vaultDeleteFactor(token: string, id: string): Promise<{ deleted: boolean }> {\n const res = await this.fetchFn(`${this.baseUrl}/api/auth/vault/factor`, {\n method: \"DELETE\",\n headers: { \"Content-Type\": \"application/json\", Authorization: `Bearer ${token}` },\n body: JSON.stringify({ id }),\n });\n return await this.parse<{ deleted: boolean }>(\"vaultDeleteFactor\", res);\n }\n\n // -------------------------------------------------------------------------\n // Internals\n // -------------------------------------------------------------------------\n\n private json(method: string, body: unknown): RequestInit {\n return {\n method,\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n };\n }\n\n private async parse<T>(label: string, res: Response): Promise<T> {\n let body: unknown = null;\n try {\n body = await res.json();\n } catch {\n // Leave body null; we'll fall through to the status-only message.\n }\n if (!res.ok) {\n const msg =\n body && typeof body === \"object\" && \"error\" in (body as object)\n ? String((body as { error: unknown }).error)\n : `${res.status} ${res.statusText}`;\n throw new Error(`AuthClient.${label}: ${msg}`);\n }\n return body as T;\n }\n}\n\nexport default AuthClient;\n","/**\n * Deterministic ZK identity derivation from `(username, password)`.\n *\n * Same inputs on ANY device produce the same secret, salt, and P-256\n * ECDSA + ECDH keypairs — which is what makes federated login from a\n * fresh browser possible. There is no localStorage involvement: every\n * register and login call re-derives the identity on demand.\n *\n * Pipeline:\n * master_seed = PBKDF2-SHA256(password, \"muhkoo-zk-v1:\" || username, 200k iters)\n * secret = HKDF-Expand-SHA256(master_seed, \"zk-secret\", 32 bytes) → hex\n * salt = HKDF-Expand-SHA256(master_seed, \"zk-salt\", 32 bytes) → hex\n * ecdsa_priv = HKDF-Expand-SHA256(master_seed, \"ecdsa-priv\", 32 bytes)\n * ecdh_priv = HKDF-Expand-SHA256(master_seed, \"ecdh-priv\", 32 bytes)\n *\n * P-256 public points are computed via `@noble/curves` (WebCrypto has no\n * derive-public-from-private-scalar API), then both keypairs are imported\n * into SubtleCrypto in JWK form so the rest of the crypto stack can keep\n * using `crypto.subtle.sign` / `crypto.subtle.deriveBits`.\n *\n * Originally lived in `accelerator/public/js/zk-identity.js` and was ported\n * to `muhkoo/web/src/zk/identity.ts`; consolidated here so the SDK owns\n * identity derivation end-to-end.\n */\n\n// @noble/curves v2 consolidated all NIST curves under `nist`; v1 had a\n// `/p256` subpath. Update if the dep changes again.\nimport { p256 } from \"@noble/curves/nist.js\";\nimport { toHex } from \"../utilities/bytes\";\n\nconst TEXT_ENCODER = new TextEncoder();\nconst PBKDF2_ITERATIONS = 200_000;\nconst SCALAR_BYTES = 32;\n\nexport interface ZkIdentity {\n /** 32-byte secret, hex-encoded. Private witness for the ZK circuit. */\n secretHex: string;\n /** 32-byte salt, hex-encoded. Private witness for the ZK circuit. */\n saltHex: string;\n /** P-256 ECDSA keypair, used to sign auth proofs. */\n ecdsaKeyPair: CryptoKeyPair;\n /** P-256 ECDH keypair, used by the chat ratchet. */\n ecdhKeyPair: CryptoKeyPair;\n}\n\nasync function pbkdf2Bytes(password: string, info: string, byteLength: number): Promise<Uint8Array> {\n const baseKey = await crypto.subtle.importKey(\n \"raw\",\n TEXT_ENCODER.encode(password),\n { name: \"PBKDF2\" },\n false,\n [\"deriveBits\"],\n );\n const bits = await crypto.subtle.deriveBits(\n {\n name: \"PBKDF2\",\n salt: TEXT_ENCODER.encode(info),\n iterations: PBKDF2_ITERATIONS,\n hash: \"SHA-256\",\n },\n baseKey,\n byteLength * 8,\n );\n return new Uint8Array(bits);\n}\n\nasync function hkdfExpand(prk: Uint8Array, info: string, byteLength: number): Promise<Uint8Array> {\n const baseKey = await crypto.subtle.importKey(\n \"raw\",\n prk as BufferSource,\n { name: \"HKDF\" },\n false,\n [\"deriveBits\"],\n );\n const bits = await crypto.subtle.deriveBits(\n {\n name: \"HKDF\",\n hash: \"SHA-256\",\n salt: new Uint8Array() as BufferSource,\n info: TEXT_ENCODER.encode(info) as BufferSource,\n },\n baseKey,\n byteLength * 8,\n );\n return new Uint8Array(bits);\n}\n\nfunction bytesToBase64url(bytes: Uint8Array): string {\n let str = \"\";\n for (let i = 0; i < bytes.length; i++) str += String.fromCharCode(bytes[i]);\n return btoa(str).replace(/=+$/g, \"\").replace(/\\+/g, \"-\").replace(/\\//g, \"_\");\n}\n\n// Convert a 32-byte scalar into a valid P-256 keypair. Probability of drawing\n// 0 or a value >= curve order from HKDF output is negligible (~2^-128); noble\n// will throw if it ever happens.\nasync function importP256KeyPair(\n privBytes: Uint8Array,\n algo: EcKeyAlgorithm,\n privKeyUses: KeyUsage[],\n pubKeyUses: KeyUsage[],\n): Promise<CryptoKeyPair> {\n const pubBytes = p256.getPublicKey(privBytes, false); // 65-byte 0x04||X||Y\n const x = pubBytes.slice(1, 33);\n const y = pubBytes.slice(33, 65);\n const xB = bytesToBase64url(x);\n const yB = bytesToBase64url(y);\n const dB = bytesToBase64url(privBytes);\n\n const privateKey = await crypto.subtle.importKey(\n \"jwk\",\n { kty: \"EC\", crv: \"P-256\", d: dB, x: xB, y: yB, ext: true },\n algo,\n false,\n privKeyUses,\n );\n const publicKey = await crypto.subtle.importKey(\n \"jwk\",\n { kty: \"EC\", crv: \"P-256\", x: xB, y: yB, ext: true },\n algo,\n true,\n pubKeyUses,\n );\n return { privateKey, publicKey };\n}\n\nasync function importEcdsaKeyPair(privBytes: Uint8Array): Promise<CryptoKeyPair> {\n return importP256KeyPair(\n privBytes,\n { name: \"ECDSA\", namedCurve: \"P-256\" },\n [\"sign\"],\n [\"verify\"],\n );\n}\n\nasync function importEcdhKeyPair(privBytes: Uint8Array): Promise<CryptoKeyPair> {\n return importP256KeyPair(\n privBytes,\n { name: \"ECDH\", namedCurve: \"P-256\" },\n [\"deriveKey\", \"deriveBits\"],\n [],\n );\n}\n\n/**\n * Derive a deterministic ZK identity from `(username, password)`.\n *\n * Same inputs always produce the same identity, on any device — that's\n * what makes federated login work without dragging encrypted state across\n * devices.\n */\nexport async function deriveIdentity(username: string, password: string): Promise<ZkIdentity> {\n if (typeof username !== \"string\" || username.length === 0) {\n throw new Error(\"deriveIdentity: `username` is required\");\n }\n if (typeof password !== \"string\" || password.length === 0) {\n throw new Error(\"deriveIdentity: `password` is required\");\n }\n const seed = await deriveMasterSeedFromPassword(username, password);\n return deriveIdentityFromSeed(seed);\n}\n\n/**\n * Legacy master-seed derivation: `PBKDF2(password, \"muhkoo-zk-v1:\"||username)`.\n *\n * This was the *only* path pre-vault, where the identity descended directly from\n * the password. It's kept so existing accounts still re-derive their seed (and\n * the vault can adopt that exact seed on migration, preserving the commitment).\n * New accounts use a random seed (`vault.randomSeed`) instead, so their identity\n * is no longer a function of the password.\n */\nexport async function deriveMasterSeedFromPassword(username: string, password: string): Promise<Uint8Array> {\n return pbkdf2Bytes(password, \"muhkoo-zk-v1:\" + username, SCALAR_BYTES);\n}\n\n/**\n * Derive the (unchanged) ZK identity from a 32-byte **master seed**. The seed is\n * HKDF-expanded into secret/salt + the P-256 ECDSA & ECDH keypairs exactly as\n * before — so the resulting commitment is byte-identical for a given seed. The\n * vault wraps THIS seed under each recovery factor.\n */\nexport async function deriveIdentityFromSeed(seed: Uint8Array): Promise<ZkIdentity> {\n if (!(seed instanceof Uint8Array) || seed.length !== SCALAR_BYTES) {\n throw new Error(`deriveIdentityFromSeed: expected a ${SCALAR_BYTES}-byte seed`);\n }\n\n const secretBytes = await hkdfExpand(seed, \"zk-secret\", SCALAR_BYTES);\n const saltBytes = await hkdfExpand(seed, \"zk-salt\", SCALAR_BYTES);\n const ecdsaPriv = await hkdfExpand(seed, \"ecdsa-priv\", SCALAR_BYTES);\n const ecdhPriv = await hkdfExpand(seed, \"ecdh-priv\", SCALAR_BYTES);\n\n const ecdsaKeyPair = await importEcdsaKeyPair(ecdsaPriv);\n const ecdhKeyPair = await importEcdhKeyPair(ecdhPriv);\n\n return {\n secretHex: toHex(secretBytes),\n saltHex: toHex(saltBytes),\n ecdsaKeyPair,\n ecdhKeyPair,\n };\n}\n","/**\n * Poseidon hash wrapper used by the ZK auth flow.\n *\n * Backed by `circomlibjs`'s `buildPoseidon`. Builder is lazy and cached\n * because the JS-side Babyjubjub field reps take ~100ms to construct, and\n * we'd rather not pay that on every page load.\n *\n * Returns hashes as decimal-string BigInts — same format snarkjs and the\n * `preimagePoK` circuit expect for inputs.\n *\n * Note: circomlibjs is `optionalDependencies` in connect's package.json.\n * Consumers that use the ZK auth flow (browser/server, not workers) need\n * it installed. The workers build does not import this module.\n */\n\nimport { buildPoseidon } from \"circomlibjs\";\n\ntype PoseidonF = { toString(val: unknown): string };\ntype PoseidonFn = ((inputs: Array<bigint | string | number>) => unknown) & { F: PoseidonF };\n\nlet _poseidon: PoseidonFn | null = null;\nlet _loadPromise: Promise<PoseidonFn> | null = null;\n\nasync function loadPoseidon(): Promise<PoseidonFn> {\n if (_poseidon) return _poseidon;\n if (_loadPromise) return _loadPromise;\n _loadPromise = (async () => {\n const fn = (await buildPoseidon()) as unknown as PoseidonFn;\n _poseidon = fn;\n return fn;\n })();\n return _loadPromise;\n}\n\n/**\n * Poseidon-hash `inputs` and return the result as a decimal-string BigInt.\n * Inputs are converted to BigInt — pass either bigints, numbers, or numeric\n * strings.\n */\nexport async function poseidonHash(\n inputs: Array<bigint | string | number>,\n): Promise<string> {\n const p = await loadPoseidon();\n const bigInputs = inputs.map((i) => {\n if (typeof i === \"bigint\") return i;\n if (typeof i === \"string\") return BigInt(i);\n return BigInt(i);\n });\n const hash = p(bigInputs);\n return p.F.toString(hash);\n}\n","/**\n * Groth16 proof generation for the `preimagePoK` circuit.\n *\n * The circuit proves knowledge of `(secret, salt, ecdsaPub)` such that\n * commitment = Poseidon(secret, salt, Poseidon(ecdsaPub))\n * while only revealing `(commitment, nonce, ecdsaPubHash)` as public signals.\n *\n * Circuit assets (wasm + zkey) are served by the accelerator worker. Their\n * URLs are a required argument of {@link generateAuthProof} — there is no\n * default. The web app constructs them relative to its configured worker\n * `baseUrl` so the SPA can target either the local wrangler dev or a deployed\n * worker depending on `VITE_WORKER_URL`.\n */\n\n// snarkjs has no TypeScript types in the npm package — the shared shim in\n// `types/snarkjs.d.ts` (already present for ZeroKnowledge.ts) covers the\n// `groth16.fullProve` call we need here too.\n//\n// Imported lazily (dynamic `import`) rather than at module top-level: snarkjs\n// is an externalized peer dependency that only the ZK login proof path needs.\n// Loading it eagerly would force every consumer of the SDK — and the test\n// runner — to have snarkjs resolvable just to construct a `Client`. The lazy\n// loader defers that cost until `generateAuthProof` actually runs.\nimport type { Groth16Proof } from \"../types/zk\";\nimport { poseidonHash } from \"./poseidon\";\n\ntype Snarkjs = {\n groth16: {\n fullProve: (\n input: unknown,\n wasm: string,\n zkey: string,\n ) => Promise<{ proof: unknown; publicSignals: string[] }>;\n };\n};\nlet _snarkjs: Snarkjs | null = null;\nasync function loadSnarkjs(): Promise<Snarkjs> {\n if (_snarkjs) return _snarkjs;\n _snarkjs = (await import(\"snarkjs\")) as unknown as Snarkjs;\n return _snarkjs;\n}\n\nexport type { Groth16Proof };\n\nexport interface CircuitUrls {\n /** preimagePoK.wasm — the circuit's witness generator. */\n wasmUrl: string;\n /** preimagePoK_0001.zkey — the proving key. */\n zkeyUrl: string;\n}\n\n/**\n * Canonical {@link CircuitUrls} for the `preimagePoK` login circuit, anchored\n * at a base URL where the accelerator serves the circuit assets out of\n * `circuits/build/`. The filenames here are fixed by the circom build output\n * (the witness generator lands inside a `preimagePoK_js/` directory); callers\n * shouldn't hard-code them. `Client` uses this to default its `circuits`\n * option, and `PersonalSpaceClient` consumers can pass `defaultCircuitUrls(baseUrl)`.\n */\nexport function defaultCircuitUrls(baseUrl: string): CircuitUrls {\n const base = baseUrl.replace(/\\/+$/, \"\");\n return {\n wasmUrl: `${base}/circuits/build/preimagePoK_js/preimagePoK.wasm`,\n zkeyUrl: `${base}/circuits/build/preimagePoK_0001.zkey`,\n };\n}\n\n/** BN254 scalar field modulus — the prime the circuit's signals live in. */\nconst FIELD_SIZE = 21888242871839275222246405745257275088548364400416034343698204186575808495617n;\n\n/**\n * Reduce any hex/decimal/byte input to a decimal-string field element in\n * `[0, FIELD_SIZE)`. snarkjs and the `preimagePoK` circuit both want decimal\n * strings; everything else gets normalized here.\n *\n * **Behavior is intentionally byte-for-byte compatible with the legacy\n * `accelerator/public/js/zk-snarkjs-client.js#toField`.** Diverging produces\n * different commitments than accounts registered via the legacy flow,\n * which locks those users out forever — the worker stores whatever\n * commitment the client sent at register time and compares it as a string\n * at login time.\n *\n * In particular: a 32+ char string of hex chars is always treated as hex,\n * even if every character happens to be 0-9 with no a-f letters. An\n * earlier version of this function gated the hex branch on \"has at least\n * one letter\" — that broke the digit-only-hex edge case (rare in practice,\n * but real). DO NOT add that letter check back.\n */\nexport function toField(value: string | bigint | number): string {\n let v: bigint;\n if (typeof value === \"bigint\") v = value;\n else if (typeof value === \"number\") v = BigInt(value);\n else if (value.startsWith(\"0x\")) v = BigInt(value);\n else if (/^[0-9a-fA-F]+$/.test(value) && value.length >= 32) {\n // Raw hex without prefix — secret, salt, ecdsaPub, nonce all hit this.\n v = BigInt(\"0x\" + value);\n } else if (/^[0-9]+$/.test(value)) v = BigInt(value);\n else {\n // Treat any other string as utf-8 bytes — matches the legacy client.\n const bytes = new TextEncoder().encode(value);\n let hex = \"\";\n for (const b of bytes) hex += b.toString(16).padStart(2, \"0\");\n v = BigInt(\"0x\" + hex);\n }\n v = v % FIELD_SIZE;\n if (v < 0n) v += FIELD_SIZE;\n return v.toString();\n}\n\n/**\n * Build the user's Poseidon commitment binding `(secret, salt, ecdsaPubHash)`.\n * Same formula the worker verifies against on register and authenticate.\n */\nexport async function buildCommitment(\n secretHex: string,\n saltHex: string,\n ecdsaPubHex: string,\n): Promise<string> {\n const secretField = toField(secretHex);\n const saltField = toField(saltHex);\n const ecdsaPubField = toField(ecdsaPubHex);\n const ecdsaPubHash = await poseidonHash([ecdsaPubField]);\n return await poseidonHash([secretField, saltField, ecdsaPubHash]);\n}\n\n/**\n * Generate a Groth16 proof for the `preimagePoK` circuit. Public signals end\n * up `[commitment, nonce, ecdsaPubHash]` — the worker checks the commitment\n * matches the stored one and the nonce matches the issued challenge nonce\n * reduced into the field.\n *\n * Throws if circuit URLs are unreachable or snarkjs decides the inputs are\n * malformed.\n */\nexport async function generateAuthProof(args: {\n secretHex: string;\n saltHex: string;\n ecdsaPubHex: string;\n nonceHex: string;\n /** Required — caller supplies URLs scoped to the worker they want to talk to. */\n circuits: CircuitUrls;\n}): Promise<{\n proof: Groth16Proof;\n publicSignals: string[];\n commitment: string;\n nonceField: string;\n ecdsaPubHash: string;\n}> {\n const secretField = toField(args.secretHex);\n const saltField = toField(args.saltHex);\n const ecdsaPubField = toField(args.ecdsaPubHex);\n const nonceField = toField(args.nonceHex);\n\n const ecdsaPubHash = await poseidonHash([ecdsaPubField]);\n const commitment = await poseidonHash([secretField, saltField, ecdsaPubHash]);\n\n const circuitInput: Record<string, string> = {\n // Public inputs (must appear in the same order the circuit declares).\n commitment,\n nonce: nonceField,\n ecdsaPubHash,\n // Private witnesses.\n secret: secretField,\n salt: saltField,\n ecdsaPub: ecdsaPubField,\n };\n\n const snarkjs = await loadSnarkjs();\n const { proof, publicSignals } = await snarkjs.groth16.fullProve(\n circuitInput,\n args.circuits.wasmUrl,\n args.circuits.zkeyUrl,\n );\n\n return {\n proof: proof as Groth16Proof,\n publicSignals,\n commitment,\n nonceField,\n ecdsaPubHash,\n };\n}\n","/**\n * Conversions between SubtleCrypto `CryptoKey`s and the wire formats the\n * accelerator's auth endpoints + `preimagePoK` circuit expect.\n *\n * Two outputs we need from an ECDSA `CryptoKey`:\n * - **base64 raw** — passed to `/api/auth/zk-register` as\n * `ecdsaPublicKey` / `ecdhPublicKey`. (Name is historical;\n * the legacy client called it `exportPublicKeyToBase58`\n * but actually used base64 — kept as base64.)\n * - **hex raw** — fed to the proof as `ecdsaPub` input; the circuit\n * reduces it into a field element.\n *\n * Both go through `crypto.subtle.exportKey(\"raw\", ...)` which yields the\n * uncompressed SEC1 form (`0x04 || X || Y`).\n */\n\nimport { toHex } from \"../utilities/bytes\";\n\nfunction bytesToBase64(bytes: Uint8Array): string {\n let str = \"\";\n for (let i = 0; i < bytes.length; i++) str += String.fromCharCode(bytes[i]);\n return btoa(str);\n}\n\n/** Raw uncompressed (`0x04 || X || Y`) public key bytes, as lowercase hex. */\nexport async function exportPublicKeyHex(publicKey: CryptoKey): Promise<string> {\n const buf = await crypto.subtle.exportKey(\"raw\", publicKey);\n return toHex(new Uint8Array(buf));\n}\n\n/** Raw uncompressed public key as base64 — wire format for the auth endpoints. */\nexport async function exportPublicKeyBase64(publicKey: CryptoKey): Promise<string> {\n const buf = await crypto.subtle.exportKey(\"raw\", publicKey);\n return bytesToBase64(new Uint8Array(buf));\n}\n\n/** Sign a UTF-8 `message` with an ECDSA private key. Returns base64. */\nexport async function signMessage(message: string, privateKey: CryptoKey): Promise<string> {\n const data = new TextEncoder().encode(message);\n const sig = await crypto.subtle.sign(\n { name: \"ECDSA\", hash: \"SHA-256\" },\n privateKey,\n data,\n );\n return bytesToBase64(new Uint8Array(sig));\n}\n","/**\n * Identity vault primitives (M1.0).\n *\n * The vault decouples the identity from the password: a random 32-byte **master\n * seed** yields the (unchanged) ZK identity via {@link deriveIdentityFromSeed},\n * and that seed is AES-256-GCM-wrapped under one key *per factor* (password,\n * passkey, recovery phrase). Server stores only ciphertext.\n *\n * This module holds the PURE primitives (seed gen, the memory-hard password\n * pre-hash, AES-GCM wrap/unwrap, the OPRF -> wrap-key HKDF). The networked\n * orchestration (calling the server's OPRF endpoint, fetching/storing factor\n * records) lives in the AuthNamespace, which has transport access.\n *\n * Memory-hard KDF: we use **scrypt** (vetted, in `@noble/hashes`, runs in\n * browser + Workers + Node - no wasm dependency) instead of argon2id; it is the\n * pre-hash fed into the OPRF, so even if the OPRF key ever leaked, guesses still\n * pay the scrypt cost.\n */\n\nimport { scrypt } from \"@noble/hashes/scrypt.js\";\n\nconst TE = new TextEncoder();\n\n// Interactive-login scrypt params (~100ms on a laptop). N must be a power of 2.\nconst SCRYPT = { N: 1 << 15, r: 8, p: 1, dkLen: 32 } as const;\n\n/** 32 random bytes - the master seed for a brand-new identity. */\nexport function randomSeed(): Uint8Array {\n return crypto.getRandomValues(new Uint8Array(32));\n}\n\n/** Memory-hard pre-hash of the password - the OPRF input. Salted by username. */\nexport function passwordPreHash(username: string, password: string): Uint8Array {\n return scrypt(TE.encode(password), TE.encode(\"muhkoo-vault-v1:\" + username.toLowerCase()), SCRYPT);\n}\n\n/** HKDF the 64-byte OPRF output into a non-extractable AES-256-GCM wrap key. */\nexport async function wrapKeyFromOprf(oprfOutput: Uint8Array): Promise<CryptoKey> {\n const prk = await crypto.subtle.importKey(\"raw\", oprfOutput as BufferSource, { name: \"HKDF\" }, false, [\"deriveKey\"]);\n return crypto.subtle.deriveKey(\n { name: \"HKDF\", hash: \"SHA-256\", salt: new Uint8Array() as BufferSource, info: TE.encode(\"muhkoo-vault-wrap\") as BufferSource },\n prk,\n { name: \"AES-GCM\", length: 256 },\n false,\n [\"encrypt\", \"decrypt\"],\n );\n}\n\n/** HKDF arbitrary 32-byte key material (e.g. a passkey PRF output) into an AES-GCM wrap key. */\nexport async function wrapKeyFromBytes(keyMaterial: Uint8Array, info: string): Promise<CryptoKey> {\n const prk = await crypto.subtle.importKey(\"raw\", keyMaterial as BufferSource, { name: \"HKDF\" }, false, [\"deriveKey\"]);\n return crypto.subtle.deriveKey(\n { name: \"HKDF\", hash: \"SHA-256\", salt: new Uint8Array() as BufferSource, info: TE.encode(info) as BufferSource },\n prk,\n { name: \"AES-GCM\", length: 256 },\n false,\n [\"encrypt\", \"decrypt\"],\n );\n}\n\n/** A seed wrapped under a factor key - what the server stores (base64). */\nexport interface WrappedSeed {\n iv: string;\n ct: string;\n}\n\nexport async function wrapSeed(seed: Uint8Array, key: CryptoKey): Promise<WrappedSeed> {\n const iv = crypto.getRandomValues(new Uint8Array(12));\n const ct = await crypto.subtle.encrypt({ name: \"AES-GCM\", iv }, key, seed as BufferSource);\n return { iv: toBase64(iv), ct: toBase64(new Uint8Array(ct)) };\n}\n\n/** Decrypt a wrapped seed. Throws (AES-GCM tag failure) on a wrong key. */\nexport async function unwrapSeed(wrapped: WrappedSeed, key: CryptoKey): Promise<Uint8Array> {\n const pt = await crypto.subtle.decrypt(\n { name: \"AES-GCM\", iv: fromBase64(wrapped.iv) as BufferSource },\n key,\n fromBase64(wrapped.ct) as BufferSource,\n );\n return new Uint8Array(pt);\n}\n\nexport function toBase64(bytes: Uint8Array): string {\n let s = \"\";\n for (let i = 0; i < bytes.length; i++) s += String.fromCharCode(bytes[i]);\n return btoa(s);\n}\n\nexport function fromBase64(b64: string): Uint8Array {\n const s = atob(b64);\n const out = new Uint8Array(s.length);\n for (let i = 0; i < s.length; i++) out[i] = s.charCodeAt(i);\n return out;\n}\n","/**\n * Hosted-auth handoff crypto (auth.muhkoo.dev — AUTH_HOSTED_PLAN.md §3).\n *\n * The hosted page authenticates the user and ends up holding the master seed.\n * To pass it to the developer's app without it ever sitting server-readable or\n * landing in browser history:\n *\n * 1. {@link sealSeed} generates a one-time key K_t, AES-256-GCM-seals the seed\n * under it, and returns the ciphertext envelope (`sealedKeys`, stored in\n * the grant the server relays but can't read) plus K_t (`fragmentKey`,\n * placed ONLY in the redirect URL fragment — fragments never hit a server).\n * 2. The app exchanges the code for `sealedKeys`, reads K_t from the fragment,\n * and {@link unsealSeed} recovers the seed, then strips the fragment.\n *\n * Trust-equivalent to today's embedded SDK (the app still ends up with the\n * seed) while moving credential entry onto the Muhkoo origin. The envelope is\n * versioned so a future per-app-key handoff (v2) can swap in without a protocol\n * change.\n *\n * ## v2 — device pairing (TV / no-redirect handoff)\n *\n * v1's K_t rides in the redirect URL *fragment*, which works only because the\n * receiving app is a browser page that can read `location.hash`. A TV app has\n * no redirect to receive: it polls. So v2 keeps the *entire* v1 shape — the\n * server relays a sealed envelope it cannot read — and replaces only the key\n * agreement:\n *\n * - the TV generates an ephemeral P-256 ECDH keypair in memory and publishes\n * the public half ({@link generateDevicePairingKeypair});\n * - the hosted page (the component that already holds the unlocked seed and\n * already owns sealing) seals *to that public key* with a fresh ephemeral\n * keypair of its own ({@link sealSeedToDevice}) — ECDH → HKDF-SHA256 →\n * AES-256-GCM;\n * - the TV recovers the seed with its private key\n * ({@link unsealSeedFromDevice}).\n *\n * The server stores and relays the v2 envelope byte-for-byte, exactly as it\n * does for v1, and can read neither. The one thing ECDH cannot supply is proof\n * that the public key the hosted page sealed to is *the TV's* rather than an\n * attacker's — that is what {@link pairingVerificationCode} is for, and it is\n * the only MITM defence in the flow (see the entropy note on that function).\n */\n\nimport { toBase64, fromBase64 } from \"./vault\";\n\nconst TE = new TextEncoder();\nconst TD = new TextDecoder();\n\ninterface SealedEnvelope {\n v: 1;\n iv: string; // base64\n ct: string; // base64\n}\n\ninterface SealedEnvelopeV2 {\n v: 2;\n /** base64 raw (SEC1 uncompressed) P-256 public key of the SEALER's ephemeral keypair. */\n epk: string;\n iv: string; // base64\n ct: string; // base64\n}\n\nexport interface SealedHandoff {\n /** base64 JSON envelope — relayed by the server in the grant; server-opaque. */\n sealedKeys: string;\n /** base64url one-time key — rides ONLY in the redirect URL fragment. */\n fragmentKey: string;\n}\n\n/** Seal the master seed under a fresh one-time key for the redirect handoff. */\nexport async function sealSeed(seed: Uint8Array): Promise<SealedHandoff> {\n const ktRaw = crypto.getRandomValues(new Uint8Array(32));\n const key = await crypto.subtle.importKey(\"raw\", ktRaw as BufferSource, { name: \"AES-GCM\" }, false, [\"encrypt\"]);\n const iv = crypto.getRandomValues(new Uint8Array(12));\n const ct = new Uint8Array(await crypto.subtle.encrypt({ name: \"AES-GCM\", iv: iv as BufferSource }, key, seed as BufferSource));\n const envelope: SealedEnvelope = { v: 1, iv: toBase64(iv), ct: toBase64(ct) };\n return {\n sealedKeys: toBase64(TE.encode(JSON.stringify(envelope))),\n fragmentKey: base64UrlEncode(ktRaw),\n };\n}\n\n/** Recover the master seed from the sealed envelope + the fragment key. */\nexport async function unsealSeed(sealedKeys: string, fragmentKey: string): Promise<Uint8Array> {\n const envelope = JSON.parse(TD.decode(fromBase64(sealedKeys))) as SealedEnvelope;\n if (envelope.v !== 1) throw new Error(`Unsupported handoff envelope version ${envelope.v}`);\n const ktRaw = base64UrlDecode(fragmentKey);\n const key = await crypto.subtle.importKey(\"raw\", ktRaw as BufferSource, { name: \"AES-GCM\" }, false, [\"decrypt\"]);\n const seed = await crypto.subtle.decrypt(\n { name: \"AES-GCM\", iv: fromBase64(envelope.iv) as BufferSource },\n key,\n fromBase64(envelope.ct) as BufferSource,\n );\n return new Uint8Array(seed);\n}\n\n// ---- v2: ECDH device pairing ----------------------------------------------\n//\n// Deliberately a SEPARATE unseal entry point rather than one `unsealSeed` that\n// dispatches on `envelope.v`. The two versions do not just differ in envelope\n// shape — their *second argument* is a different kind of thing entirely (v1: a\n// base64url string plucked out of a URL fragment; v2: a non-extractable\n// `CryptoKey`). Overloading one function on a `string | CryptoKey` union would\n// buy nothing at the call sites (each caller statically knows which flow it is\n// in) while adding a narrowing branch to the v1 path, which is live in\n// production hosted auth. Each function still validates `v` and rejects the\n// other version's envelope, so a mis-routed envelope fails loudly rather than\n// being interpreted under the wrong scheme.\n\n/** P-256 curve parameters for the pairing ECDH. */\nconst PAIRING_CURVE: EcKeyGenParams & EcKeyImportParams = { name: \"ECDH\", namedCurve: \"P-256\" };\n\n/**\n * HKDF `info` for the v2 seal. Versioned and domain-separated: v1 derives no\n * key at all (K_t is raw random), so no v1 key can ever collide with this, and\n * a future v3 must pick a new label rather than reuse this one.\n */\nconst HKDF_INFO_V2 = \"muhkoo/hosted-handoff/v2/device-seal\";\n\n/** Domain separator for {@link pairingVerificationCode} — distinct from the seal KDF. */\nconst PAIRING_CODE_DOMAIN = \"muhkoo/hosted-handoff/v2/pairing-code\";\n\n/**\n * Alphabet for the pairing verification code: 30 symbols, every confusable pair\n * removed in BOTH directions — no `0`/`O`, no `1`/`I`/`L`, and no `U` (which is\n * read as `V` on the low-resolution, far-viewed type a TV renders). Because the\n * user compares this string across two screens by eye, unambiguity beats the\n * convenience of a power-of-two alphabet; the derivation below rejection-samples\n * to avoid the modulo bias that costs us.\n */\nexport const PAIRING_CODE_ALPHABET = \"ABCDEFGHJKMNPQRSTVWXYZ23456789\";\n\n/** Length of the pairing verification code, in characters. 30^8 ≈ 39.3 bits. */\nexport const PAIRING_CODE_LENGTH = 8;\n\n/**\n * PBKDF2 iterations for the verification code. This is NOT protecting a\n * password — it is a deliberate work factor on an attacker precomputing codes.\n * See {@link pairingVerificationCode}.\n */\nconst PAIRING_CODE_ITERATIONS = 200_000;\n\n/** An ephemeral ECDH keypair generated by the pairing device (the TV). */\nexport interface DevicePairingKeypair {\n /** base64 raw (SEC1 uncompressed, 65 bytes) public key — safe to publish. */\n publicKeyB64: string;\n /**\n * Non-extractable private half. In-memory only, one per pairing attempt:\n * it is never persisted and never leaves the device, so a captured pairing\n * transcript is undecryptable once the attempt ends.\n */\n privateKey: CryptoKey;\n}\n\n/**\n * (Device side) Generate the ephemeral P-256 ECDH keypair for one pairing\n * attempt. Call this once per attempt and throw it away when the attempt ends —\n * reusing a keypair across attempts would let an old, observed ciphertext be\n * decrypted by whoever later obtains the key.\n */\nexport async function generateDevicePairingKeypair(): Promise<DevicePairingKeypair> {\n const pair = (await crypto.subtle.generateKey(PAIRING_CURVE, false, [\"deriveBits\"])) as CryptoKeyPair;\n const raw = new Uint8Array(await crypto.subtle.exportKey(\"raw\", pair.publicKey));\n return { publicKeyB64: toBase64(raw), privateKey: pair.privateKey };\n}\n\n/**\n * (Hosted-page side) Seal the master seed *to a device's* pairing public key.\n *\n * A fresh ephemeral keypair is generated per call and its public half is\n * carried in the envelope (`epk`), so sealing the same seed to the same device\n * twice yields unrelated ciphertext — and the sealer retains nothing that could\n * later reopen the envelope.\n *\n * Returns the v2 `sealedKeys` string, which slots into exactly the same server\n * field as v1: relayed verbatim, never read.\n */\nexport async function sealSeedToDevice(seed: Uint8Array, devicePublicKeyB64: string): Promise<string> {\n const devicePubRaw = decodePairingPublicKey(devicePublicKeyB64);\n const devicePub = await importPairingPublicKey(devicePubRaw);\n\n const ephemeral = (await crypto.subtle.generateKey(PAIRING_CURVE, false, [\"deriveBits\"])) as CryptoKeyPair;\n const epkRaw = new Uint8Array(await crypto.subtle.exportKey(\"raw\", ephemeral.publicKey));\n\n const key = await deriveDeviceSealKey(ephemeral.privateKey, devicePub, epkRaw, devicePubRaw, [\"encrypt\"]);\n const iv = crypto.getRandomValues(new Uint8Array(12));\n const ct = new Uint8Array(\n await crypto.subtle.encrypt({ name: \"AES-GCM\", iv: iv as BufferSource }, key, seed as BufferSource),\n );\n\n const envelope: SealedEnvelopeV2 = { v: 2, epk: toBase64(epkRaw), iv: toBase64(iv), ct: toBase64(ct) };\n return toBase64(TE.encode(JSON.stringify(envelope)));\n}\n\n/**\n * (Device side) Recover the master seed from a v2 envelope using the ephemeral\n * private key from {@link generateDevicePairingKeypair}.\n *\n * Throws on any tamper: a substituted `epk` yields a different shared secret\n * (or fails point validation outright), and any edit to `iv`/`ct` fails the\n * AES-GCM tag. There is no path that returns partially-authenticated bytes.\n *\n * `devicePublicKeyB64` is the caller's OWN public half (from\n * {@link generateDevicePairingKeypair}). It is required, not optional, because\n * it is mixed into the KDF — see {@link deriveDeviceSealKey} for why binding the\n * recipient matters. A device always holds both halves, so this costs nothing.\n */\nexport async function unsealSeedFromDevice(\n sealedKeys: string,\n privateKey: CryptoKey,\n devicePublicKeyB64: string,\n): Promise<Uint8Array> {\n const envelope = JSON.parse(TD.decode(fromBase64Loose(sealedKeys))) as SealedEnvelopeV2;\n if (envelope.v !== 2) throw new Error(`Unsupported device-handoff envelope version ${envelope.v}`);\n\n const devicePubRaw = decodePairingPublicKey(devicePublicKeyB64);\n const epkRaw = decodePairingPublicKey(envelope.epk);\n const epk = await importPairingPublicKey(epkRaw);\n\n const key = await deriveDeviceSealKey(privateKey, epk, epkRaw, devicePubRaw, [\"decrypt\"]);\n const seed = await crypto.subtle.decrypt(\n { name: \"AES-GCM\", iv: fromBase64Loose(envelope.iv) as BufferSource },\n key,\n fromBase64Loose(envelope.ct) as BufferSource,\n );\n return new Uint8Array(seed);\n}\n\n/**\n * Short code derived deterministically from the device's pairing public key,\n * displayed on BOTH the TV and the approving browser so the human can confirm\n * they match before approving.\n *\n * ## What this is worth (be honest about it)\n *\n * ~39.3 bits (30^8), rendered in an unambiguous 30-symbol alphabet and grouped\n * as `XXXX-XXXX` for comparison. Alongside the recipient-key binding in\n * {@link deriveDeviceSealKey}, this is what stops a substituted device key: the\n * KDF rejects a *negated* key, and this code is what a human uses to reject a\n * wholly *attacker-generated* one, which the crypto cannot detect on its own —\n * ECDH proves nothing about WHOSE public key it is.\n *\n * Two attacks, and what each actually costs:\n *\n * 1. **Online grind.** Generate keypairs until one's code equals the honest\n * TV's. ~2^39 trials. Naively that reads as \"keygen + hash\", but a real\n * attacker never generates keys: walking `P_{i+1} = P_i + G` while tracking\n * `d_i = d_0 + i` makes each trial one point-add plus one derivation. With\n * a plain hash that is well under a core-day — which is why this uses\n * PBKDF2-SHA256 at {@link PAIRING_CODE_ITERATIONS} iterations instead. The\n * work factor applies per trial, pushing the same grind to the order of\n * 10^5 core-days. The target is also only learned when pairing starts, so\n * the grind is online against the pairing TTL (keep it minutes).\n * 2. **Precomputed table.** The reason this is not a plain hash. A table over\n * candidate keys is computed once and reused forever; with SHA-256 that is\n * cheap enough to be the preferred attack. The iteration count multiplies\n * the table's build cost by the same 2 * 10^5.\n *\n * Neither is a proof of security, and an adversary with ASIC-scale hardware\n * changes these numbers. If the margin is ever judged insufficient, raise\n * {@link PAIRING_CODE_LENGTH} — 10 characters buys ~49 bits for two more\n * characters of human comparison, and is display-only: it does not touch the\n * envelope or the wire format.\n *\n * The cost is paid once per pairing, on two idle devices, so ~200k iterations\n * is imperceptible here in a way it would not be on a hot path.\n */\nexport async function pairingVerificationCode(devicePublicKeyB64: string): Promise<string> {\n const pubRaw = decodePairingPublicKey(devicePublicKeyB64);\n const material = await crypto.subtle.importKey(\"raw\", pubRaw as BufferSource, { name: \"PBKDF2\" }, false, [\n \"deriveBits\",\n ]);\n // Enough bytes that rejection sampling (below) effectively never runs dry:\n // each byte is rejected with p = 16/256, so 32 bytes yields 8 symbols with\n // overwhelming probability.\n const bits = new Uint8Array(\n await crypto.subtle.deriveBits(\n {\n name: \"PBKDF2\",\n hash: \"SHA-256\",\n salt: TE.encode(PAIRING_CODE_DOMAIN) as BufferSource,\n iterations: PAIRING_CODE_ITERATIONS,\n },\n material,\n 256,\n ),\n );\n\n // Rejection-sample so all 30 symbols are equally likely. 256 is not a\n // multiple of 30, so a plain modulo would over-weight the first 16 symbols.\n const n = PAIRING_CODE_ALPHABET.length;\n const limit = Math.floor(256 / n) * n; // 240\n let out = \"\";\n for (let i = 0; i < bits.length && out.length < PAIRING_CODE_LENGTH; i++) {\n if (bits[i] >= limit) continue;\n out += PAIRING_CODE_ALPHABET[bits[i] % n];\n }\n if (out.length < PAIRING_CODE_LENGTH) {\n // Astronomically unlikely (p < 2^-40); fail loudly rather than return a\n // short code that two screens would still \"agree\" on.\n throw new Error(\"Pairing code derivation ran out of entropy.\");\n }\n // Grouped for human comparison — the format the spec and both UIs display.\n return out.slice(0, 4) + \"-\" + out.slice(4);\n}\n\n// ---- v2 internals ----------------------------------------------------------\n\n/**\n * ECDH → HKDF-SHA256 → AES-256-GCM key.\n *\n * The raw ECDH output is never used as a key directly; it is extracted+expanded\n * with BOTH public keys mixed in:\n *\n * - the sender's ephemeral key as HKDF **salt**, and\n * - the recipient's device key appended to the HKDF **info**.\n *\n * Binding the recipient is not decoration. P-256 ECDH returns only the shared\n * point's x-coordinate, and negating a public key — `(x, y)` → `(x, p−y)`, which\n * is still on the curve and which ANYONE can compute from the published key —\n * yields the SAME x. So without the recipient in the KDF, a seal addressed to\n * the negated key still decrypts under the honest private key, even though that\n * negated key displays a DIFFERENT {@link pairingVerificationCode}. That would\n * leave the human code as the only thing rejecting a substituted recipient.\n * Mixing `devicePubRaw` in makes the substitution fail in the crypto layer,\n * where it belongs.\n *\n * (The salt is load-bearing for the same reason — it is what makes a swapped\n * `epk` derive a different key. Do not \"simplify\" either input away.)\n */\nasync function deriveDeviceSealKey(\n priv: CryptoKey,\n pub: CryptoKey,\n epkRaw: Uint8Array,\n devicePubRaw: Uint8Array,\n usages: KeyUsage[],\n): Promise<CryptoKey> {\n const shared = new Uint8Array(await crypto.subtle.deriveBits({ name: \"ECDH\", public: pub }, priv, 256));\n const prk = await crypto.subtle.importKey(\"raw\", shared as BufferSource, { name: \"HKDF\" }, false, [\"deriveBits\"]);\n const label = TE.encode(HKDF_INFO_V2);\n const info = new Uint8Array(label.length + devicePubRaw.length);\n info.set(label, 0);\n info.set(devicePubRaw, label.length);\n const okm = await crypto.subtle.deriveBits(\n {\n name: \"HKDF\",\n hash: \"SHA-256\",\n salt: epkRaw as BufferSource,\n info: info as BufferSource,\n },\n prk,\n 256,\n );\n return crypto.subtle.importKey(\"raw\", okm, { name: \"AES-GCM\" }, false, usages);\n}\n\n/** Decode + shape-check a raw SEC1 uncompressed P-256 public key. */\nfunction decodePairingPublicKey(b64: string): Uint8Array {\n if (typeof b64 !== \"string\" || b64.length === 0) {\n throw new Error(\"Pairing public key must be a non-empty base64 string.\");\n }\n const raw = fromBase64Loose(b64);\n if (raw.length !== 65 || raw[0] !== 0x04) {\n throw new Error(\"Pairing public key must be a 65-byte uncompressed P-256 point.\");\n }\n return raw;\n}\n\n/** Import a raw P-256 point for ECDH. Rejects points that are not on the curve. */\nfunction importPairingPublicKey(raw: Uint8Array): Promise<CryptoKey> {\n return crypto.subtle.importKey(\"raw\", raw as BufferSource, PAIRING_CURVE, false, []);\n}\n\n/**\n * Base64 decode that also accepts the URL-safe alphabet and missing padding —\n * pairing public keys may travel through query strings, QR payloads, or JSON\n * depending on the client, and rejecting a key over `-` vs `+` would be a\n * miserable failure mode to debug.\n */\nfunction fromBase64Loose(s: string): Uint8Array {\n const norm = s.replace(/-/g, \"+\").replace(/_/g, \"/\");\n return fromBase64(norm.padEnd(Math.ceil(norm.length / 4) * 4, \"=\"));\n}\n\n// ---- PKCE (RFC 7636, S256) -------------------------------------------------\n\nexport interface Pkce {\n codeVerifier: string;\n codeChallenge: string;\n}\n\n/** Generate a PKCE verifier + S256 challenge for the authorize→token exchange. */\nexport async function generatePkce(): Promise<Pkce> {\n const codeVerifier = base64UrlEncode(crypto.getRandomValues(new Uint8Array(32)));\n const digest = new Uint8Array(await crypto.subtle.digest(\"SHA-256\", TE.encode(codeVerifier)));\n return { codeVerifier, codeChallenge: base64UrlEncode(digest) };\n}\n\n/** A random URL-safe value for the OAuth `state` (CSRF binding on the callback). */\nexport function randomState(): string {\n return base64UrlEncode(crypto.getRandomValues(new Uint8Array(16)));\n}\n\nfunction base64UrlEncode(bytes: Uint8Array): string {\n return toBase64(bytes).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\nfunction base64UrlDecode(s: string): Uint8Array {\n return fromBase64(s.replace(/-/g, \"+\").replace(/_/g, \"/\").padEnd(Math.ceil(s.length / 4) * 4, \"=\"));\n}\n","/**\n * SDK build version — stamped to the console when a {@link Client} is created.\n *\n * During active development, bump the `-alpha.N` suffix whenever we ship a build\n * so we can confirm in the browser console that the page is running the build we\n * expect (and isn't serving a stale cached bundle). Keep this in sync with\n * `package.json` `version`.\n */\nexport const VERSION = \"0.14.0-alpha.1\";\n","/**\n * `HttpClient` — the one place the unified {@link Client} talks to the\n * accelerator over HTTP.\n *\n * Every request carries two independent credentials:\n * - the **app key** (`mk_…`) on `X-Muhkoo-Key` — resolves the app /\n * developer / env context the accelerator uses for routing + billing;\n * - the **user session token** on `X-Muhkoo-Session` (when a user is\n * logged in) — the accelerator validates it and injects a trusted\n * `X-Muhkoo-User-Context` downstream so per-user spaces can authorize\n * the request without a fresh Groth16 proof.\n *\n * `X-Muhkoo-Key` is used (rather than `Authorization: Bearer`) because it is\n * a non-forbidden header that skips the CORS preflight in browsers.\n *\n * The class exposes a header-injecting {@link fetch} that can be handed to\n * lower-level building blocks (`AuthClient`, `PersonalSpaceClient`) so they\n * keep owning their own wire shapes while still getting the credentials, plus\n * convenience JSON helpers (`get`/`post`/`del`) for code that talks to the\n * accelerator directly.\n */\n\nexport interface HttpClientOptions {\n /** Absolute URL of the accelerator worker (trailing slash optional). */\n baseUrl: string;\n /**\n * App / publishable key, e.g. `mk_test_pk_…`. Sent on every request as\n * `X-Muhkoo-Key` when present. Transitionally optional (auth + personal\n * storage still function without it), but the product direction is to\n * REQUIRE it — it attributes traffic for billing/metering and authorizes\n * shared-space (messaging) websockets.\n */\n apiKey?: string;\n /**\n * A scoped, expiring **access token** (`mk_<env>_at_…`) — the non-ZK\n * machine-to-machine credential. It resolves through the SAME accelerator\n * path as an app key and rides the same `X-Muhkoo-Key` header; when present\n * it takes precedence over {@link apiKey}. Use it for server-side / CI\n * callers that shouldn't carry the app's publishable key.\n */\n accessToken?: string;\n /** Returns the current user session token, or `null` when logged out. */\n getSessionToken?: () => string | null;\n /** Custom fetch — defaults to `globalThis.fetch`. */\n fetch?: typeof fetch;\n /**\n * Called when a token-gated request comes back `401` (stale/expired\n * session). Should attempt to silently re-establish a session and resolve\n * `true` if it succeeded (the request is then retried once with the fresh\n * token) or `false` if it couldn't (the `401` propagates as an\n * {@link HttpError}). Wired by {@link Client} to `auth.zk.recover()`.\n *\n * Only consulted by the JSON helpers (`get`/`post`/`del`); the raw\n * {@link fetch} passes 401s straight through so the auth wire calls that\n * power recovery itself can't recurse.\n */\n onUnauthorized?: () => Promise<boolean>;\n}\n\n/** Per-request timing logs, enabled on staging only (temporary diagnostic). */\nconst HTTP_DEBUG = (() => {\n try {\n return typeof location !== \"undefined\" && /(^|\\.)staging\\./.test(location.hostname);\n } catch {\n return false;\n }\n})();\n\n/** Short, readable request path (pathname + search) for the timing log. */\nfunction reqPath(input: RequestInfo | URL): string {\n try {\n const u = typeof input === \"string\" ? input : input instanceof URL ? input.href : (input as Request).url;\n if (!/^https?:\\/\\//i.test(u)) return u;\n const parsed = new URL(u);\n return parsed.pathname + parsed.search;\n } catch {\n return \"?\";\n }\n}\n\n/** Thrown for any non-2xx accelerator response. Carries the HTTP status. */\nexport class HttpError extends Error {\n constructor(\n message: string,\n readonly status: number,\n readonly body?: unknown,\n ) {\n super(message);\n this.name = \"HttpError\";\n }\n}\n\nexport class HttpClient {\n readonly baseUrl: string;\n /** Origin of {@link baseUrl} — credentials are only attached same-origin. */\n private readonly baseOrigin: string;\n private readonly apiKey: string | null;\n /** Scoped machine access token — takes precedence over {@link apiKey} on `X-Muhkoo-Key`. */\n private readonly accessToken: string | null;\n private readonly getSessionToken: () => string | null;\n private readonly onUnauthorized: (() => Promise<boolean>) | null;\n private readonly fetchFn: typeof fetch;\n\n constructor(opts: HttpClientOptions) {\n if (!opts?.baseUrl) throw new Error(\"HttpClient: `baseUrl` is required\");\n this.baseUrl = opts.baseUrl.replace(/\\/+$/, \"\");\n try { this.baseOrigin = new URL(this.baseUrl).origin; } catch { this.baseOrigin = \"\"; }\n this.apiKey = opts.apiKey ?? null;\n this.accessToken = opts.accessToken ?? null;\n this.getSessionToken = opts.getSessionToken ?? (() => null);\n this.onUnauthorized = opts.onUnauthorized ?? null;\n\n const f = opts.fetch ?? globalThis.fetch;\n if (typeof f !== \"function\") {\n throw new Error(\n \"HttpClient: `globalThis.fetch` is unavailable; pass an explicit `fetch`.\",\n );\n }\n this.fetchFn = f.bind(globalThis);\n }\n\n /**\n * A `fetch`-compatible function that injects the app key + session token\n * headers. Hand this to `AuthClient` / `PersonalSpaceClient` so they pick\n * up credentials without knowing about them.\n */\n readonly fetch: typeof fetch = (input, init) => {\n const headers = new Headers(init?.headers);\n // Only attach credentials when the request stays on the accelerator's\n // origin. An absolute URL pointing elsewhere (e.g. a caller-supplied or\n // server-reflected path that escapes `baseUrl`) must NOT receive the app\n // key or session token, or it becomes a token-exfiltration vector.\n if (this.isSameOrigin(input)) {\n // Access token and app key resolve through the same accelerator path\n // and ride the same header; the access token takes precedence.\n const key = this.accessToken ?? this.apiKey;\n if (key) headers.set(\"X-Muhkoo-Key\", key);\n const token = this.getSessionToken();\n if (token) headers.set(\"X-Muhkoo-Session\", token);\n }\n const finalInit = { ...init, headers };\n if (!HTTP_DEBUG) return this.fetchFn(input, finalInit);\n // Staging diagnostic: time every accelerator request (this `fetch` is the\n // single chokepoint — JSON helpers + the roster/shard fetches ride it).\n const t = performance.now();\n const tag = `${init?.method ?? \"GET\"} ${reqPath(input)}`;\n return this.fetchFn(input, finalInit).then(\n (res) => { console.info(`[muhkoo:http] ${tag} → ${res.status} ${Math.round(performance.now() - t)}ms`); return res; },\n (err) => { console.info(`[muhkoo:http] ${tag} → ERROR ${Math.round(performance.now() - t)}ms`); throw err; },\n );\n };\n\n /** True when `input` resolves to {@link baseOrigin} (relative URLs always do). */\n private isSameOrigin(input: RequestInfo | URL): boolean {\n try {\n const urlStr =\n typeof input === \"string\" ? input\n : input instanceof URL ? input.href\n : (input as Request).url;\n // Relative URLs are resolved against baseUrl downstream → same origin.\n if (!/^https?:\\/\\//i.test(urlStr)) return true;\n return new URL(urlStr).origin === this.baseOrigin;\n } catch {\n return true;\n }\n }\n\n // -------------------------------------------------------------------------\n // JSON convenience helpers (path is relative to baseUrl)\n // -------------------------------------------------------------------------\n\n get<T = unknown>(path: string): Promise<T> {\n return this.request<T>(\"GET\", path);\n }\n\n post<T = unknown>(path: string, body?: unknown): Promise<T> {\n return this.request<T>(\"POST\", path, body);\n }\n\n patch<T = unknown>(path: string, body?: unknown): Promise<T> {\n return this.request<T>(\"PATCH\", path, body);\n }\n\n del<T = unknown>(path: string, body?: unknown): Promise<T> {\n return this.request<T>(\"DELETE\", path, body);\n }\n\n private async request<T>(method: string, path: string, body?: unknown, allowRecovery = true): Promise<T> {\n const url = path.startsWith(\"http\") ? path : `${this.baseUrl}${path.startsWith(\"/\") ? \"\" : \"/\"}${path}`;\n const init: RequestInit = { method };\n if (body !== undefined) {\n init.headers = { \"Content-Type\": \"application/json\" };\n init.body = JSON.stringify(body);\n }\n const res = await this.fetch(url, init);\n\n // Stale session: try to silently re-auth and replay the request once.\n // `allowRecovery` is cleared on the retry so a still-401 response (e.g.\n // recovery minted a token the endpoint still rejects) can't loop.\n if (res.status === 401 && allowRecovery && this.onUnauthorized && this.getSessionToken()) {\n const recovered = await this.onUnauthorized();\n if (recovered) {\n return this.request<T>(method, path, body, false);\n }\n }\n\n let parsed: unknown = null;\n try {\n parsed = await res.json();\n } catch {\n // Non-JSON body — leave null and fall through to status-only error.\n }\n if (!res.ok) {\n const msg =\n parsed && typeof parsed === \"object\" && \"error\" in (parsed as object)\n ? String((parsed as { error: unknown }).error)\n : `${res.status} ${res.statusText}`;\n throw new HttpError(msg, res.status, parsed);\n }\n return parsed as T;\n }\n}\n\nexport default HttpClient;\n","/**\n * `SessionState` — the in-memory source of truth for \"who is signed in\" on a\n * {@link Client}.\n *\n * It separates two concerns that have different lifetimes and security\n * properties:\n *\n * - **session** (`{ token, username, commitment }`) — proves the user is\n * authenticated to the accelerator. Cheap to persist (the token is an\n * opaque server-side handle) and enough to authorize token-gated REST\n * calls. Restored from a {@link SessionStore} across reloads.\n *\n * - **identity** ({@link ZkIdentity}) — the derived secret + keypairs. Lets\n * the client *prove* ownership (ZK), derive at-rest encryption keys, and\n * run the messaging ratchet. It is derived from `(username, password)` and\n * is deliberately **never** persisted by default — a restored session has\n * a valid token but no identity until the user re-derives it\n * (`client.auth.zk.unlock(password)`).\n *\n * This split is what makes `restore()` (authenticated, can't decrypt) and\n * `unlock()` (now can decrypt) two distinct, intentional states.\n */\n\nimport type { ZkIdentity } from \"../auth/identity\";\n\n/** The persistable part of a session — safe-ish to keep across reloads. */\nexport interface StoredSession {\n token: string;\n username: string;\n /** Decimal-string Poseidon commitment — the user's stable id. */\n commitment: string;\n}\n\n/**\n * Pluggable persistence for the session token. Browser apps typically back\n * this with `localStorage`; the default is in-memory (lost on reload).\n *\n * Identity material is intentionally not part of this interface — see the\n * class docs. Apps that want federated session restore without re-prompting\n * for a password can persist it themselves and call `unlock()` on boot.\n */\nexport interface SessionStore {\n load(): StoredSession | null | Promise<StoredSession | null>;\n save(session: StoredSession): void | Promise<void>;\n clear(): void | Promise<void>;\n}\n\n/** Default in-memory store — holds the session for the process lifetime only. */\nexport class MemorySessionStore implements SessionStore {\n private current: StoredSession | null = null;\n load(): StoredSession | null {\n return this.current;\n }\n save(session: StoredSession): void {\n this.current = session;\n }\n clear(): void {\n this.current = null;\n }\n}\n\n/**\n * A {@link SessionStore} backed by the browser's `localStorage`, so a session\n * survives page reloads. This is the store most browser apps want — pass it to\n * `new Client({ sessionStore: new LocalStorageSessionStore() })`.\n *\n * Browser-only: construction throws if `localStorage` is unavailable (Node,\n * Workers, or SSR before hydration) — use {@link MemorySessionStore} or a\n * custom store there. Keys are namespaced under `keyPrefix` so multiple apps\n * on the same origin don't collide.\n */\nexport class LocalStorageSessionStore implements SessionStore {\n private readonly tokenKey: string;\n private readonly usernameKey: string;\n private readonly commitmentKey: string;\n\n constructor(keyPrefix = \"muhkoo.session.\") {\n if (typeof localStorage === \"undefined\") {\n throw new Error(\n \"LocalStorageSessionStore requires a browser environment with localStorage; \" +\n \"use MemorySessionStore (or a custom SessionStore) on the server.\",\n );\n }\n this.tokenKey = `${keyPrefix}token`;\n this.usernameKey = `${keyPrefix}username`;\n this.commitmentKey = `${keyPrefix}commitment`;\n }\n\n load(): StoredSession | null {\n const token = localStorage.getItem(this.tokenKey);\n const username = localStorage.getItem(this.usernameKey);\n const commitment = localStorage.getItem(this.commitmentKey);\n if (!token || !username || !commitment) return null;\n return { token, username, commitment };\n }\n\n save(session: StoredSession): void {\n localStorage.setItem(this.tokenKey, session.token);\n localStorage.setItem(this.usernameKey, session.username);\n localStorage.setItem(this.commitmentKey, session.commitment);\n }\n\n clear(): void {\n localStorage.removeItem(this.tokenKey);\n localStorage.removeItem(this.usernameKey);\n localStorage.removeItem(this.commitmentKey);\n }\n}\n\n/**\n * The {@link SessionStore} a {@link Client} uses when none is supplied: a\n * {@link LocalStorageSessionStore} in the browser (so sessions survive\n * reloads), falling back to {@link MemorySessionStore} anywhere `localStorage`\n * is unavailable or unusable (Node, Workers, SSR, or private-mode browsers\n * that throw on access). Pass an explicit store to override.\n */\nexport function defaultSessionStore(keyPrefix?: string): SessionStore {\n try {\n // Touch the API, not just `typeof`: some environments expose\n // `localStorage` but throw on access (Safari private mode, sandboxed\n // iframes). LocalStorageSessionStore's constructor only checks for\n // existence, so probe a real read here and fall back on any throw.\n if (typeof localStorage !== \"undefined\") {\n localStorage.getItem(\"muhkoo.__probe__\");\n return new LocalStorageSessionStore(keyPrefix);\n }\n } catch {\n // fall through to in-memory\n }\n return new MemorySessionStore();\n}\n\nexport class SessionState {\n private session: StoredSession | null = null;\n private _identity: ZkIdentity | null = null;\n /** The 32-byte master seed, in-memory only (never persisted). Held after\n * login/register so additional recovery factors (passkey, phrase) can be\n * enrolled, and a password can be changed, without re-deriving. */\n private _seed: Uint8Array | null = null;\n private readonly store: SessionStore;\n\n constructor(store?: SessionStore) {\n this.store = store ?? new MemorySessionStore();\n }\n\n /** True once a token-bearing session exists (regardless of identity). */\n get isAuthenticated(): boolean {\n return this.session !== null;\n }\n\n /** True once identity material is available (login or unlock happened). */\n get isUnlocked(): boolean {\n return this._identity !== null;\n }\n\n get token(): string | null {\n return this.session?.token ?? null;\n }\n\n get username(): string | null {\n return this.session?.username ?? null;\n }\n\n get commitment(): string | null {\n return this.session?.commitment ?? null;\n }\n\n get identity(): ZkIdentity | null {\n return this._identity;\n }\n\n /** Identity material, throwing a clear error when the client is locked. */\n requireIdentity(): ZkIdentity {\n if (!this._identity) {\n throw new Error(\n \"This operation needs the user's identity. Call `client.auth.zk.login()` \" +\n \"or `client.auth.zk.unlock(password)` first.\",\n );\n }\n return this._identity;\n }\n\n /** Persist + hold a freshly authenticated session. */\n async setSession(session: StoredSession): Promise<void> {\n this.session = session;\n await this.store.save(session);\n }\n\n /** Attach derived identity material to the current session. */\n setIdentity(identity: ZkIdentity): void {\n this._identity = identity;\n }\n\n /** The in-memory master seed (or null when locked / not held). */\n get seed(): Uint8Array | null {\n return this._seed;\n }\n\n /** Hold the master seed in memory (set on login/register when available). */\n setSeed(seed: Uint8Array | null): void {\n this._seed = seed;\n }\n\n /** Load a persisted session (used by `restore()`); identity stays null. */\n async loadPersisted(): Promise<StoredSession | null> {\n const loaded = await this.store.load();\n if (loaded) this.session = loaded;\n return loaded;\n }\n\n /** Drop all session + identity state and clear persistence. */\n async clear(): Promise<void> {\n this.session = null;\n this._identity = null;\n if (this._seed) this._seed.fill(0); // wipe the master seed\n this._seed = null;\n await this.store.clear();\n }\n}\n\nexport default SessionState;\n","/**\n * Recovery phrase (M1.2) — a 24-word BIP39 mnemonic that ENCODES the 32-byte\n * master seed directly. Nothing is stored server-side (the phrase *is* the seed),\n * so it's a fully offline, self-sovereign recovery factor: enter the phrase →\n * decode → master seed → identity. A `phrase-marker` factor is kept in the vault\n * only so the UI can show \"recovery phrase: enabled\".\n */\n\nimport { entropyToMnemonic, mnemonicToEntropy, validateMnemonic } from \"@scure/bip39\";\nimport { wordlist } from \"@scure/bip39/wordlists/english.js\";\n\n/** Encode a 32-byte master seed as a 24-word BIP39 recovery phrase. */\nexport function seedToMnemonic(seed: Uint8Array): string {\n if (!(seed instanceof Uint8Array) || seed.length !== 32) {\n throw new Error(\"seedToMnemonic: expected a 32-byte seed\");\n }\n return entropyToMnemonic(seed, wordlist);\n}\n\nfunction normalize(mnemonic: string): string {\n return mnemonic.trim().toLowerCase().replace(/\\s+/g, \" \");\n}\n\n/** Decode a recovery phrase back to the 32-byte master seed. Throws if invalid. */\nexport function mnemonicToSeed(mnemonic: string): Uint8Array {\n const m = normalize(mnemonic);\n if (!validateMnemonic(m, wordlist)) throw new Error(\"Invalid recovery phrase.\");\n return mnemonicToEntropy(m, wordlist);\n}\n\n/** Whether `mnemonic` is a well-formed BIP39 phrase (checksum valid). */\nexport function isValidPhrase(mnemonic: string): boolean {\n try {\n return validateMnemonic(normalize(mnemonic), wordlist);\n } catch {\n return false;\n }\n}\n","/**\n * OPRF (Oblivious PRF) — RFC 9497, ristretto255-SHA512, mode 0x00.\n *\n * Used to gate the password/recovery factors of the identity vault\n * ({@link ./vault}). The wrap key for a password factor is\n * `HKDF(OPRF(serverKey, scrypt(password)))`, so:\n * - the client cannot derive the wrap key offline (it needs the server's\n * secret-keyed evaluation), and\n * - the server learns nothing — it only ever sees a *blinded* group element,\n * never the password or the resulting key.\n *\n * Net effect: a stolen vault blob is NOT offline-crackable; every guess costs a\n * round-trip to a rate-limited server endpoint. The same OPRF backs the M2\n * Google/email factors.\n *\n * Thin wrapper over `@noble/curves`' vetted `ristretto255_oprf` so the protocol\n * (blind / blindEvaluate / finalize) lives in one named place. CLIENT uses\n * {@link oprfBlind} + {@link oprfFinalize}; SERVER uses {@link oprfDeriveKey} +\n * {@link oprfBlindEvaluate} (imported by the accelerator's VaultDO).\n */\n\nimport { ristretto255_oprf } from \"@noble/curves/ed25519.js\";\n\nconst OPRF = ristretto255_oprf.oprf;\n// Domain separation for the server key derivation (RFC 9497 `info`).\nconst KEY_INFO = new TextEncoder().encode(\"muhkoo-oprf-v1\");\n\nexport interface OprfBlind {\n /** Secret blind scalar — stays on the client; needed to finalize. */\n blind: Uint8Array;\n /** Blinded group element — sent to the server for evaluation. */\n blinded: Uint8Array;\n}\n\n/** CLIENT: blind `input` (e.g. `scrypt(password)`) before the server eval. */\nexport function oprfBlind(input: Uint8Array): OprfBlind {\n const { blind, blinded } = OPRF.blind(input);\n return { blind, blinded };\n}\n\n/** CLIENT: fold the server's blinded evaluation into the final 64-byte OPRF output. */\nexport function oprfFinalize(input: Uint8Array, blind: Uint8Array, evaluated: Uint8Array): Uint8Array {\n return OPRF.finalize(input, blind, evaluated);\n}\n\n/** SERVER: derive the stable OPRF secret key from a seed (a Worker secret). */\nexport function oprfDeriveKey(seed: Uint8Array): Uint8Array {\n return OPRF.deriveKeyPair(seed, KEY_INFO).secretKey;\n}\n\n/** SERVER: evaluate a blinded element with the secret key (learns nothing about input). */\nexport function oprfBlindEvaluate(secretKey: Uint8Array, blinded: Uint8Array): Uint8Array {\n return OPRF.blindEvaluate(secretKey, blinded);\n}\n\n/** Direct (unblinded) OPRF evaluation — for tests / equivalence checks only.\n * (`evaluate` exists at runtime in `ristretto255_oprf.oprf` but isn't in the\n * published type, so we reach it through a narrow cast.) */\nexport function oprfEvaluate(secretKey: Uint8Array, input: Uint8Array): Uint8Array {\n return (OPRF as unknown as { evaluate(sk: Uint8Array, input: Uint8Array): Uint8Array }).evaluate(secretKey, input);\n}\n","/**\n * Verification-gated vault factors (M2 — email, later Google).\n *\n * These factors have NO client-side secret: the user proves *channel control*\n * (an email OTP) and the server releases a split-key OPRF evaluation —\n * `wrapKey = HKDF( OPRF(K1, input) ‖ OPRF(K2, input) )` where K1 lives on the\n * accelerator and K2 in a separate trust domain, so no single server-side\n * compromise can derive the wrap key offline. See accelerator\n * `AUTH_M2_PLAN.md` §1; the canonical reference implementation is\n * accelerator `tests/gated-oprf.test.ts` — keep these derivations in\n * byte-exact lockstep with it.\n */\n\nimport { oprfBlind, oprfFinalize, type OprfBlind } from \"./oprf\";\nimport { wrapKeyFromBytes, fromBase64 } from \"./vault\";\n\nexport type GatedPurpose = \"enroll\" | \"recover\";\n\n/**\n * Deterministic OPRF input for an email factor. Public-ish by design (the\n * verification gate, not the input, is what protects the eval) — but it must\n * be stable forever: username + address are lowercased, the tag is versioned.\n */\nexport async function emailFactorInput(username: string, email: string): Promise<Uint8Array> {\n const tag = `muhkoo/factor:email:v1:${username.toLowerCase()}:${email.toLowerCase()}`;\n const digest = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(tag));\n return new Uint8Array(digest);\n}\n\n/**\n * Deterministic OPRF input for a google factor — keyed on the stable Google\n * account id (`sub`), not the email (which can change). Same versioning rules\n * as {@link emailFactorInput}.\n */\nexport async function googleFactorInput(username: string, sub: string): Promise<Uint8Array> {\n const tag = `muhkoo/factor:google:v1:${username.toLowerCase()}:${sub}`;\n const digest = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(tag));\n return new Uint8Array(digest);\n}\n\n/** Blind a gated input for the split eval (same blind serves both domains). */\nexport function gatedBlind(input: Uint8Array): OprfBlind {\n return oprfBlind(input);\n}\n\n/**\n * Fold the two domains' evaluations into the AES-256-GCM wrap key:\n * unblind each, concatenate, HKDF with the gated-factor domain separation.\n */\nexport async function gatedWrapKey(\n input: Uint8Array,\n blind: Uint8Array,\n evaluatedB64: string,\n evaluated2B64: string,\n): Promise<CryptoKey> {\n const out1 = oprfFinalize(input, blind, fromBase64(evaluatedB64));\n const out2 = oprfFinalize(input, blind, fromBase64(evaluated2B64));\n const ikm = new Uint8Array(out1.length + out2.length);\n ikm.set(out1);\n ikm.set(out2, out1.length);\n return wrapKeyFromBytes(ikm, \"muhkoo-gated-wrap-v1\");\n}\n","/**\n * Passkey factor (M1.1) — WebAuthn with the **PRF extension**.\n *\n * A passkey becomes a device-bound, platform-synced source of a stable secret:\n * for a fixed salt, the authenticator's PRF returns the same 32 bytes, which we\n * HKDF into an AES key that wraps the master seed. The server never sees the\n * passkey — it's purely a local key source; the ZK proof remains the server auth.\n *\n * BROWSER ONLY (`navigator.credentials`). The PRF extension fields aren't in the\n * standard DOM types yet, so they're reached through narrow casts.\n */\n\nfunction rand(n: number): Uint8Array {\n return crypto.getRandomValues(new Uint8Array(n));\n}\n\n/** Whether this environment can do WebAuthn at all. (PRF support is checked at enroll.) */\nexport function passkeySupported(): boolean {\n return (\n typeof navigator !== \"undefined\" &&\n !!navigator.credentials &&\n typeof PublicKeyCredential !== \"undefined\"\n );\n}\n\n/**\n * Whether this browser's authenticator can do the **PRF extension** our passkey\n * factor needs. A browser can save passkeys (e.g. for password autofill) yet not\n * expose PRF — PRF is what derives the stable secret we wrap the seed under, so a\n * passkey without it is useless to us.\n *\n * Uses `PublicKeyCredential.getClientCapabilities()` (the `extension:prf` cap)\n * where available. Returns:\n * - `true` — PRF is supported,\n * - `false` — definitively NOT supported (hide the option),\n * - `null` — couldn't determine (older browser without the capabilities API);\n * the caller may optimistically allow and let enroll surface a real\n * error if it turns out PRF isn't there.\n */\nexport async function passkeyPrfCapable(): Promise<boolean | null> {\n if (!passkeySupported()) return false;\n const PC = PublicKeyCredential as unknown as {\n getClientCapabilities?: () => Promise<Record<string, boolean>>;\n };\n if (typeof PC.getClientCapabilities !== \"function\") return null;\n try {\n const caps = await PC.getClientCapabilities();\n // The spec keys extension caps as `extension:<name>`; tolerate variants.\n const prf = caps[\"extension:prf\"] ?? caps[\"extensions:prf\"] ?? caps[\"prf\"];\n return typeof prf === \"boolean\" ? prf : null;\n } catch {\n return null;\n }\n}\n\n/** Best-effort registrable RP id — the host. Apps spanning subdomains should pass\n * the parent domain (e.g. \"muhkoo.dev\") explicitly. */\nexport function defaultRpId(): string {\n return typeof location !== \"undefined\" ? location.hostname : \"\";\n}\n\n/**\n * Can a passkey enrolled under `rpId` be used from the CURRENT origin?\n *\n * WebAuthn only accepts an RP id that is the origin's own host or a registrable\n * *parent* of it — so a passkey enrolled on `app.example.com` is unusable on\n * `app.example.net`, and one enrolled on a full host is unusable from a sibling\n * host. An app served on BOTH a custom domain and the platform host therefore\n * needs one passkey per origin.\n *\n * Call this BEFORE `navigator.credentials.get()`: passing a foreign rpId throws\n * a raw \"The requested RPID did not match the origin or related origins\", which\n * is a dead end for the user. Checking first lets the caller fall back to normal\n * sign-in (and offer to enroll a passkey for this origin) instead.\n */\nexport function rpIdUsableForOrigin(rpId: string | undefined | null, host?: string): boolean {\n const h = host ?? (typeof location !== \"undefined\" ? location.hostname : \"\");\n if (!rpId || !h) return false;\n return h === rpId || h.endsWith(`.${rpId}`);\n}\n\n/**\n * Would {@link AuthNamespace.loginWithPasskey} accept a factor recorded with\n * this `rpId`, from `host`?\n *\n * This is deliberately NOT the same as {@link rpIdUsableForOrigin}. That answers\n * a raw WebAuthn question and is `false` for a missing rpId. But a factor with\n * NO recorded rpId predates per-origin enrolment, and `loginWithPasskey`\n * resolves it as `params.rpId ?? host` — so it IS usable, from anywhere.\n *\n * Callers deciding \"should I even try a passkey here?\" must use this one.\n * Reaching for `rpIdUsableForOrigin` instead silently excludes every legacy\n * passkey holder, which has locked real users out of production twice.\n *\n * The `?? host` fallback applies to nullish only, matching `loginWithPasskey`:\n * an empty-string rpId stays unusable rather than resolving to the host.\n */\nexport function passkeyUsableFromOrigin(rpId: string | undefined | null, host?: string): boolean {\n const h = host ?? defaultRpId();\n if (!h) return false;\n if (rpId == null) return true;\n return rpIdUsableForOrigin(rpId, h);\n}\n\n/** Thrown when the account's passkey belongs to a different origin. Callers\n * should treat this as \"no passkey here\" and fall back to another factor. */\nexport class PasskeyOriginError extends Error {\n readonly code = \"passkey_wrong_origin\";\n constructor(message = \"No passkey is enrolled for this site. Sign in another way, then add one for this device.\") {\n super(message);\n this.name = \"PasskeyOriginError\";\n }\n}\n\nexport interface PasskeyEnrollment {\n credentialId: Uint8Array;\n prfSalt: Uint8Array;\n prfOutput: Uint8Array;\n}\n\n/**\n * Create a passkey with PRF and return its credential id, a fresh PRF salt, and\n * the PRF output for that salt. Throws if the authenticator can't do PRF.\n */\nexport async function createPasskeyWithPrf(opts: { rpId: string; rpName: string; username: string }): Promise<PasskeyEnrollment> {\n if (!passkeySupported()) throw new Error(\"Passkeys aren't supported in this browser.\");\n const created = (await navigator.credentials.create({\n publicKey: {\n rp: { id: opts.rpId, name: opts.rpName },\n user: { id: rand(16) as BufferSource, name: opts.username, displayName: opts.username },\n challenge: rand(32) as BufferSource,\n pubKeyCredParams: [{ type: \"public-key\", alg: -7 }, { type: \"public-key\", alg: -257 }],\n // Force the PLATFORM authenticator (Touch ID / Windows Hello / iCloud\n // Keychain). Our factor needs the PRF extension to wrap the seed, and\n // third-party browser password-manager extensions register as cross-platform\n // authenticators that often DON'T implement PRF — letting one handle the\n // request is the main cause of \"didn't return a PRF result\" failures. Pinning\n // to platform routes it to the OS authenticator, which supports PRF.\n authenticatorSelection: { authenticatorAttachment: \"platform\", residentKey: \"preferred\", userVerification: \"preferred\" },\n extensions: { prf: {} } as AuthenticationExtensionsClientInputs,\n },\n })) as PublicKeyCredential | null;\n if (!created) throw new Error(\"Passkey creation was cancelled.\");\n const credentialId = new Uint8Array(created.rawId);\n // Don't trust `prf.enabled` from create() alone — several browsers only report\n // PRF support on the first get() eval, so a precheck false-negatives. Try the\n // actual PRF eval; if it yields a result, PRF works.\n const prfSalt = rand(32);\n let prfOutput: Uint8Array;\n try {\n prfOutput = await evaluatePasskeyPrf(opts.rpId, credentialId, prfSalt);\n } catch {\n // Empty PRF result almost always means a third-party credential manager\n // (e.g. a browser password-manager extension) handled the request instead of\n // the platform authenticator, and that manager doesn't implement PRF. The\n // device's built-in passkey (Touch ID / Windows Hello / iCloud Keychain)\n // normally does — so steer the user there rather than blaming the device.\n throw new Error(\n \"That passkey can't be used for recovery — it didn't return a PRF result. \" +\n \"A browser password-manager extension may have handled it; try again and \" +\n \"pick your device's built-in passkey (Touch ID / Windows Hello), or use a \" +\n \"recovery phrase instead.\",\n );\n }\n return { credentialId, prfSalt, prfOutput };\n}\n\n/** Evaluate a passkey's PRF for `salt` → 32 bytes. Used at recover/login. */\nexport async function evaluatePasskeyPrf(rpId: string, credentialId: Uint8Array, salt: Uint8Array): Promise<Uint8Array> {\n if (!passkeySupported()) throw new Error(\"Passkeys aren't supported in this browser.\");\n const assertion = (await navigator.credentials.get({\n publicKey: {\n rpId,\n challenge: rand(32) as BufferSource,\n allowCredentials: [{ type: \"public-key\", id: credentialId as BufferSource }],\n userVerification: \"preferred\",\n extensions: { prf: { eval: { first: salt } } } as AuthenticationExtensionsClientInputs,\n },\n })) as PublicKeyCredential | null;\n if (!assertion) throw new Error(\"Passkey authentication was cancelled.\");\n const results = (assertion.getClientExtensionResults() as { prf?: { results?: { first?: ArrayBuffer } } })?.prf?.results;\n if (!results?.first) throw new Error(\"Your passkey didn't return a PRF result.\");\n return new Uint8Array(results.first);\n}\n","/**\n * `deviceStore` — at-rest persistence for a paired device (the TV).\n *\n * A device that has completed {@link HostedAuth.startDevicePairing} holds the\n * account's **master seed**. Android WebView has no WebAuthn, so the passkey\n * wrapping used elsewhere isn't available, and re-pairing on every cold start\n * is not acceptable UX for a set-top box. So the seed is persisted, encrypted:\n *\n * | Item | Where | Form |\n * | ------------------------ | ------------------------------------ | ---- |\n * | wrapping key | IndexedDB (`muhkoo.device.v1`) | `CryptoKey`, AES-GCM-256, **non-extractable** |\n * | device identity keypair | IndexedDB (`muhkoo.device.v1`) | `CryptoKeyPair`, ECDSA P-256, private half **non-extractable** |\n * | sealed identity blob | localStorage `muhkoo.tv.identity.v1` | `{\"v\":1,\"iv\":…,\"ct\":…}` over `JSON{username, commitment, seed(b64), pairedAt}` |\n *\n * The split is deliberate — ciphertext in one backend, key in another, and the\n * key non-extractable so JS can *use* it but not export it.\n *\n * ## Be honest about what this is worth\n *\n * **This is obfuscation, not protection.** It raises the cost of a casual\n * `localStorage` dump to \"nothing useful\", and that is all:\n *\n * - **XSS on the device origin** cannot *exfiltrate* the wrapping key (it is\n * non-extractable) but can absolutely call `decrypt` and read the seed. The\n * only mitigation is that there is no third-party script in the shell —\n * enforce a strict CSP with no `unsafe-inline`, no CDN, no remote fonts.\n * - **ADB / root / a backup extraction / a forensic image recovers the seed.**\n * The IndexedDB LevelDB files hold the AES key bytes in the clear; WebCrypto\n * \"non-extractable\" is a JS-API boundary, not an OS one. **A stolen device is\n * a stolen identity.**\n *\n * That is not an implementation shortcut, it is the shape of the problem: any\n * wrapping key usable without user interaction lives somewhere equally readable\n * on a keyboard-less device with no hardware key store exposed to WebView.\n * Reduce the blast radius with `android:allowBackup=\"false\"`,\n * `android:debuggable=\"false\"`, a strict CSP, and by storing *only* the 32-byte\n * seed + username + commitment (never a session token, never a recovery phrase).\n *\n * ## Documented upgrade path — no protocol change\n *\n * If the native shell exposes a Keystore bridge:\n *\n * ```java\n * @JavascriptInterface public String wrap(String b64plain); // AES-GCM, StrongBox when present\n * @JavascriptInterface public String unwrap(String b64cipher);\n * ```\n *\n * this module prefers `globalThis.MuhkooKeystore` automatically and falls back\n * to the WebCrypto scheme otherwise. The Keystore key is hardware-backed and\n * non-exportable at the OS level, so a copied filesystem image alone becomes\n * useless. Nothing on the wire, in the endpoint contracts, or in the SDK surface\n * changes — only the two functions below do, internally.\n *\n * ## Degradation\n *\n * Nothing here throws at import time. On a runtime with neither backend (SSR,\n * Workers, Node) the module still loads: {@link loadDeviceIdentity} returns\n * `null`, {@link persistDeviceIdentity} throws a typed\n * {@link DeviceStoreUnavailableError} the caller can swallow, and\n * {@link deviceIdentityKey} falls back to an **in-memory** keypair for the\n * lifetime of the process (so pairing still works; the device is just never\n * recognised as \"known\" on a later run).\n */\n\nimport { toBase64, fromBase64 } from \"./vault\";\n\nconst TE = new TextEncoder();\nconst TD = new TextDecoder();\n\n/** localStorage key holding the AES-GCM-sealed identity blob. */\nexport const DEVICE_IDENTITY_STORAGE_KEY = \"muhkoo.tv.identity.v1\";\n/** IndexedDB database holding the non-extractable keys. */\nexport const DEVICE_KEY_DB_NAME = \"muhkoo.device.v1\";\nconst DEVICE_KEY_STORE = \"keys\";\nconst WRAP_KEY_ID = \"wrap\";\nconst IDENTITY_KEY_ID = \"identity\";\n\n/** What a paired device persists. The seed **is** the identity — treat it as such. */\nexport interface PersistedDeviceIdentity {\n username: string;\n /** Decimal-string Poseidon commitment. Pinned: a later pairing that yields a\n * different commitment for this device must be refused, not adopted. */\n commitment: string;\n /** The 32-byte master seed. */\n seed: Uint8Array;\n pairedAt: number;\n}\n\n/** Thrown when persistence is impossible (no IndexedDB and/or no localStorage). */\nexport class DeviceStoreUnavailableError extends Error {\n constructor(what: string) {\n super(\n `Device identity can't be persisted here: ${what}. ` +\n \"Pairing still works, but this device will have to pair again after a restart.\",\n );\n this.name = \"DeviceStoreUnavailableError\";\n }\n}\n\n// ---- pluggable backends ----------------------------------------------------\n//\n// Both backends are injectable. This is a TEST SEAM (a `CryptoKey` round-trips\n// through IndexedDB by structured clone, which no in-process IndexedDB shim\n// reproduces faithfully) and doubles as the hook an embedder would use to point\n// the store at its own storage. Apps should never need to call\n// `configureDeviceStore`.\n\n/** Key/value store for live `CryptoKey` objects (IndexedDB in the browser). */\nexport interface DeviceKeyVault {\n get(id: string): Promise<unknown | null>;\n put(id: string, value: unknown): Promise<void>;\n /** Delete the entire store — used by `clearDeviceIdentity`. */\n destroy(): Promise<void>;\n}\n\n/** String store for the sealed blob (localStorage in the browser). */\nexport interface DeviceBlobStore {\n get(key: string): string | null;\n set(key: string, value: string): void;\n remove(key: string): void;\n}\n\n/** The native Keystore bridge, when the shell provides one (see module docs). */\nexport interface MuhkooKeystoreBridge {\n wrap(b64plain: string): string | Promise<string>;\n unwrap(b64cipher: string): string | Promise<string>;\n}\n\nlet injectedKeys: DeviceKeyVault | null | undefined;\nlet injectedBlobs: DeviceBlobStore | null | undefined;\nlet injectedKeystore: MuhkooKeystoreBridge | null | undefined;\n\n/** Memoized so a pairing attempt and its follow-up touch use one keypair. */\nlet identityMemo: Promise<CryptoKeyPair> | null = null;\nlet identityEphemeral = false;\n\n/**\n * Point the store at explicit backends (or `null` to force \"unavailable\"), and\n * reset the memoized device keypair. Testing / embedding seam — pass `{}` to\n * restore the default browser backends.\n */\nexport function configureDeviceStore(opts: {\n keys?: DeviceKeyVault | null;\n blobs?: DeviceBlobStore | null;\n keystore?: MuhkooKeystoreBridge | null;\n} = {}): void {\n injectedKeys = opts.keys;\n injectedBlobs = opts.blobs;\n injectedKeystore = opts.keystore;\n identityMemo = null;\n identityEphemeral = false;\n}\n\n/**\n * True when {@link deviceIdentityKey} had to fall back to an in-memory keypair\n * because no key vault was available. Such a device can pair, but will never be\n * recognised as \"known\" afterwards (so approval always needs a fresh factor).\n */\nexport function deviceIdentityIsEphemeral(): boolean {\n return identityEphemeral;\n}\n\n// ---- public API ------------------------------------------------------------\n\n/**\n * The device's **persistent** ECDSA P-256 identity keypair, created on first\n * call. This is not a browser fingerprint — it is a key, and every\n * `POST /api/auth/device/code` proves possession of it. Without that proof,\n * \"known device\" would be an unauthenticated string anyone could claim in order\n * to skip the approver's re-authentication.\n *\n * The private half is non-extractable and never leaves IndexedDB as bytes.\n */\nexport async function deviceIdentityKey(): Promise<CryptoKeyPair> {\n if (!identityMemo) identityMemo = loadOrCreateIdentityKey();\n try {\n return await identityMemo;\n } catch (e) {\n identityMemo = null; // don't cache a failure\n throw e;\n }\n}\n\n/** `base64url(SHA-256(raw SEC1 device identity public key))` — 43 chars. */\nexport async function deviceFingerprint(): Promise<string> {\n const pair = await deviceIdentityKey();\n return fingerprintOf(pair.publicKey);\n}\n\n/** Whether a sealed identity blob exists. Cheap: no crypto, no IndexedDB, no network. */\nexport async function hasDeviceIdentity(): Promise<boolean> {\n return blobStore()?.get(DEVICE_IDENTITY_STORAGE_KEY) != null;\n}\n\n/**\n * Seal and store the identity. Throws {@link DeviceStoreUnavailableError} when\n * there is nowhere to put it — callers should treat that as \"this device won't\n * resume\", not as a pairing failure.\n */\nexport async function persistDeviceIdentity(v: PersistedDeviceIdentity): Promise<void> {\n if (!(v?.seed instanceof Uint8Array) || v.seed.length !== 32) {\n throw new Error(\"persistDeviceIdentity: expected a 32-byte seed.\");\n }\n const blobs = blobStore();\n if (!blobs) throw new DeviceStoreUnavailableError(\"no localStorage\");\n\n const plain = TE.encode(JSON.stringify({\n username: v.username,\n commitment: v.commitment,\n seed: toBase64(v.seed),\n pairedAt: v.pairedAt,\n }));\n\n const bridge = keystoreBridge();\n let envelope: SealedIdentityBlob;\n if (bridge) {\n envelope = { v: 1, ks: 1, ct: await bridge.wrap(toBase64(plain)) };\n } else {\n const key = await wrapKey(true);\n if (!key) throw new DeviceStoreUnavailableError(\"no IndexedDB for the wrapping key\");\n const iv = crypto.getRandomValues(new Uint8Array(12));\n const ct = new Uint8Array(\n await crypto.subtle.encrypt({ name: \"AES-GCM\", iv: iv as BufferSource }, key, plain as BufferSource),\n );\n envelope = { v: 1, iv: toBase64(iv), ct: toBase64(ct) };\n }\n blobs.set(DEVICE_IDENTITY_STORAGE_KEY, JSON.stringify(envelope));\n}\n\n/**\n * Recover the persisted identity, or `null` when there is none / it can't be\n * opened (wiped IndexedDB, a different browser profile, a corrupted blob).\n * Never throws — a cold start with unreadable storage must fall back to a fresh\n * pairing, not to an error screen.\n */\nexport async function loadDeviceIdentity(): Promise<PersistedDeviceIdentity | null> {\n const blobs = blobStore();\n const raw = blobs?.get(DEVICE_IDENTITY_STORAGE_KEY);\n if (!raw) return null;\n try {\n const envelope = JSON.parse(raw) as SealedIdentityBlob;\n if (envelope?.v !== 1) return null;\n\n let plain: Uint8Array;\n const bridge = keystoreBridge();\n if (envelope.ks === 1) {\n if (!bridge) return null; // sealed by the native shell; nothing else can open it\n plain = fromBase64(await bridge.unwrap(envelope.ct));\n } else {\n const key = await wrapKey(false);\n if (!key || !envelope.iv) return null;\n plain = new Uint8Array(await crypto.subtle.decrypt(\n { name: \"AES-GCM\", iv: fromBase64(envelope.iv) as BufferSource },\n key,\n fromBase64(envelope.ct) as BufferSource,\n ));\n }\n\n const parsed = JSON.parse(TD.decode(plain)) as {\n username?: string; commitment?: string; seed?: string; pairedAt?: number;\n };\n if (!parsed?.username || !parsed?.commitment || !parsed?.seed) return null;\n const seed = fromBase64(parsed.seed);\n if (seed.length !== 32) return null;\n return {\n username: parsed.username,\n commitment: parsed.commitment,\n seed,\n pairedAt: typeof parsed.pairedAt === \"number\" ? parsed.pairedAt : 0,\n };\n } catch {\n return null;\n }\n}\n\n/**\n * Wipe everything: the sealed blob **and** the whole key database — so the\n * wrapping key never outlives the ciphertext it opens, and the device identity\n * key is regenerated (a re-pair is then correctly treated as a new device).\n */\nexport async function clearDeviceIdentity(): Promise<void> {\n identityMemo = null;\n identityEphemeral = false;\n try { blobStore()?.remove(DEVICE_IDENTITY_STORAGE_KEY); } catch { /* nothing to remove */ }\n try { await keyVault()?.destroy(); } catch { /* already gone */ }\n}\n\n// ---- internals -------------------------------------------------------------\n\ninterface SealedIdentityBlob {\n v: 1;\n /** Present (and `1`) when the native Keystore bridge produced `ct`. */\n ks?: 1;\n /** base64 12-byte AES-GCM IV. Absent for keystore-sealed blobs. */\n iv?: string;\n /** base64 ciphertext‖tag (WebCrypto) or the bridge's opaque wrap output. */\n ct: string;\n}\n\nasync function fingerprintOf(publicKey: CryptoKey): Promise<string> {\n const raw = new Uint8Array(await crypto.subtle.exportKey(\"raw\", publicKey));\n const digest = new Uint8Array(await crypto.subtle.digest(\"SHA-256\", raw as BufferSource));\n return toBase64(digest).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function loadOrCreateIdentityKey(): Promise<CryptoKeyPair> {\n const vault = keyVault();\n if (vault) {\n const existing = (await vault.get(IDENTITY_KEY_ID)) as CryptoKeyPair | null;\n if (existing?.privateKey && existing?.publicKey) {\n identityEphemeral = false;\n return existing;\n }\n }\n // `extractable: false` applies to the PRIVATE half only — WebCrypto always\n // allows exporting a public key, which is what the fingerprint needs.\n const pair = (await crypto.subtle.generateKey(\n { name: \"ECDSA\", namedCurve: \"P-256\" },\n false,\n [\"sign\", \"verify\"],\n )) as CryptoKeyPair;\n if (vault) {\n try {\n await vault.put(IDENTITY_KEY_ID, pair);\n identityEphemeral = false;\n return pair;\n } catch { /* structured clone refused / quota — fall through */ }\n }\n // No durable home: keep it for this process only. Pairing still works; the\n // device just won't be recognised next boot.\n identityEphemeral = true;\n return pair;\n}\n\n/**\n * The AES-GCM wrapping key. `create` generates + stores one when absent;\n * otherwise a missing key means the blob is unopenable (return null, not throw).\n */\nasync function wrapKey(create: boolean): Promise<CryptoKey | null> {\n const vault = keyVault();\n if (!vault) return null;\n const existing = (await vault.get(WRAP_KEY_ID)) as CryptoKey | null;\n if (existing) return existing;\n if (!create) return null;\n const key = await crypto.subtle.generateKey({ name: \"AES-GCM\", length: 256 }, false, [\"encrypt\", \"decrypt\"]);\n await vault.put(WRAP_KEY_ID, key);\n return key;\n}\n\nfunction keystoreBridge(): MuhkooKeystoreBridge | null {\n if (injectedKeystore !== undefined) return injectedKeystore;\n const ks = (globalThis as { MuhkooKeystore?: MuhkooKeystoreBridge }).MuhkooKeystore;\n return typeof ks?.wrap === \"function\" && typeof ks?.unwrap === \"function\" ? ks : null;\n}\n\nfunction blobStore(): DeviceBlobStore | null {\n if (injectedBlobs !== undefined) return injectedBlobs;\n try {\n const ls = (globalThis as { localStorage?: Storage }).localStorage;\n if (!ls) return null;\n ls.getItem(\"muhkoo.__probe__\"); // Safari private mode throws on access, not on typeof\n return {\n get: (k) => ls.getItem(k),\n set: (k, v) => ls.setItem(k, v),\n remove: (k) => ls.removeItem(k),\n };\n } catch {\n return null;\n }\n}\n\nfunction keyVault(): DeviceKeyVault | null {\n if (injectedKeys !== undefined) return injectedKeys;\n const idb = (globalThis as { indexedDB?: IDBFactory }).indexedDB;\n if (!idb) return null;\n return indexedDbVault(idb);\n}\n\n/** Minimal promise wrapper over one object store. Opened per operation — these\n * are cold-start-rare calls, and holding a connection open would block the\n * `deleteDatabase` that `clearDeviceIdentity` needs to win. */\nfunction indexedDbVault(idb: IDBFactory): DeviceKeyVault {\n const open = () => new Promise<IDBDatabase>((resolve, reject) => {\n const req = idb.open(DEVICE_KEY_DB_NAME, 1);\n req.onupgradeneeded = () => {\n const db = req.result;\n if (!db.objectStoreNames.contains(DEVICE_KEY_STORE)) db.createObjectStore(DEVICE_KEY_STORE);\n };\n req.onsuccess = () => resolve(req.result);\n req.onerror = () => reject(req.error);\n req.onblocked = () => reject(new Error(\"IndexedDB open blocked\"));\n });\n\n return {\n async get(id) {\n const db = await open();\n try {\n return await new Promise((resolve, reject) => {\n const req = db.transaction(DEVICE_KEY_STORE, \"readonly\").objectStore(DEVICE_KEY_STORE).get(id);\n req.onsuccess = () => resolve(req.result ?? null);\n req.onerror = () => reject(req.error);\n });\n } finally { db.close(); }\n },\n async put(id, value) {\n const db = await open();\n try {\n await new Promise<void>((resolve, reject) => {\n const tx = db.transaction(DEVICE_KEY_STORE, \"readwrite\");\n tx.objectStore(DEVICE_KEY_STORE).put(value, id);\n tx.oncomplete = () => resolve();\n tx.onerror = () => reject(tx.error);\n tx.onabort = () => reject(tx.error);\n });\n } finally { db.close(); }\n },\n destroy() {\n return new Promise<void>((resolve, reject) => {\n const req = idb.deleteDatabase(DEVICE_KEY_DB_NAME);\n req.onsuccess = () => resolve();\n req.onerror = () => reject(req.error);\n // A live connection elsewhere would block the delete; the blob is\n // already gone by then, so don't hang the sign-out on it.\n req.onblocked = () => resolve();\n });\n },\n };\n}\n","/**\n * `client.auth.hosted` — centralized hosted auth (auth.muhkoo.dev).\n * AUTH_HOSTED_PLAN.md; TV device pairing per `muhkoo/auth/docs/tv-device-pairing-spec.md`.\n *\n * Two sides share this class:\n * - **Developer apps** call {@link login} (redirect to the hosted page) and\n * {@link handleCallback} (exchange the returned code → session + seed). The\n * app carries no snarkjs and never sees the user's credentials.\n * - **The hosted page** (the muhkoo/auth SPA), once it has authenticated the\n * user via the normal `client.auth.zk.*` flow, calls\n * {@link completeAuthorize} to seal the seed, mint the grant, and build the\n * redirect-back URL.\n *\n * Flow (authorization-code + PKCE + sealed-seed handoff):\n * app → GET auth.muhkoo.dev/authorize?app_id&redirect_uri&state&code_challenge\n * page → (user authenticates) → POST /api/auth/grant → redirect_uri?code&state#k=<K_t>\n * app → POST /api/auth/token {code, code_verifier} → {sessionToken, sealedKeys}\n * → unseal sealedKeys with K_t → master seed → session ready\n *\n * ## Device pairing (v2 — TVs and other keyboard-less devices)\n *\n * The redirect flow above is unchanged and remains the fallback for anything\n * with a browser and a keyboard. A device with no redirect to receive instead\n * displays a code and **polls**:\n *\n * TV → {@link startDevicePairing} → shows `userCode` + `verificationCode`\n * user → opens auth.muhkoo.dev/link, signs in, {@link lookupDevicePairing}\n * user → compares the verification code on both screens,\n * {@link approveDevicePairing} seals the seed TO the TV's public key\n * TV → {@link waitForDevicePairing} → unseal → own ZK session → persisted\n *\n * Same invariant as v1: the accelerator relays a sealed envelope it cannot read.\n * Only the key agreement changes (ECDH to a key the TV generated, instead of a\n * one-time key delivered in a URL fragment a TV can't receive).\n */\n\nimport type { AuthClient } from \"../../auth/AuthClient\";\nimport type { SessionState } from \"../Session\";\nimport type { AuthUser, LoginOptions } from \"./AuthNamespace\";\nimport { deriveIdentityFromSeed, type ZkIdentity } from \"../../auth/identity\";\nimport { exportPublicKeyHex, exportPublicKeyBase64, signMessage } from \"../../auth/keys\";\nimport { buildCommitment, generateAuthProof, defaultCircuitUrls, type CircuitUrls } from \"../../auth/proof\";\nimport {\n sealSeed, unsealSeed, generatePkce, randomState,\n generateDevicePairingKeypair, sealSeedToDevice, unsealSeedFromDevice, pairingVerificationCode,\n PAIRING_CODE_ALPHABET, PAIRING_CODE_LENGTH,\n} from \"../../auth/hostedHandoff\";\nimport {\n deviceIdentityKey, deviceFingerprint, persistDeviceIdentity, loadDeviceIdentity,\n clearDeviceIdentity, hasDeviceIdentity,\n} from \"../../auth/deviceStore\";\n\nexport interface HostedAuthDeps {\n auth: AuthClient;\n session: SessionState;\n /** Base URL of the hosted auth SPA (e.g. https://auth.muhkoo.dev). */\n authBaseUrl: string;\n /**\n * Absolute URL of the accelerator (e.g. https://api.muhkoo.dev) — the origin\n * the `/api/auth/device*` endpoints live on.\n *\n * Optional for backwards compatibility: `AuthNamespace` does not pass it\n * today, so it is resolved from the {@link AuthClient} at call time (see\n * `apiBase`). Pass it explicitly whenever you construct `HostedAuth` yourself.\n */\n apiBaseUrl?: string;\n /**\n * `preimagePoK` circuit assets, used when a paired device mints its OWN ZK\n * session. Defaults to {@link defaultCircuitUrls} anchored at `apiBaseUrl` —\n * which matches `Client`'s own default. Supply it if the app overrode\n * `ClientOptions.circuits`.\n */\n circuits?: CircuitUrls;\n /** Custom fetch — defaults to `globalThis.fetch`. */\n fetch?: typeof fetch;\n /** Sleep used by the poll loop. Injectable so tests don't burn wall-clock. */\n sleep?: (ms: number, signal?: AbortSignal) => Promise<void>;\n}\n\nconst PKCE_STORE_KEY = \"muhkoo.hosted.pkce\";\n\n// ---- device pairing: constants (tv-device-pairing-spec.md §4.5, §9) --------\n\n/** RFC-8628-style backoff step applied on every `slow_down` (spec §9.1). */\nconst SLOW_DOWN_STEP_S = 5;\n/** Ceiling for the transport-failure backoff, so a flaky TV Wi-Fi still recovers. */\nconst MAX_BACKOFF_INTERVAL_S = 30;\n/** Consecutive transport failures tolerated before giving up on a pairing. */\nconst MAX_CONSECUTIVE_NETWORK_ERRORS = 5;\n/** Server-sanitized anyway; clipped here so the request is never rejected for it. */\nconst DEVICE_LABEL_MAX = 64;\n/** §4.4 signing-input prefixes. Changing either breaks server verification. */\nconst DEVICE_PAIR_SIG_PREFIX = \"muhkoo-device-pair-v1\";\nconst DEVICE_TOUCH_SIG_PREFIX = \"muhkoo-device-touch-v1\";\n\n// ---- device pairing: types (tv-device-pairing-spec.md §7) ------------------\n\n/** One in-flight pairing attempt. Hold it; pass it back into poll/wait/cancel. */\nexport interface DevicePairingSession {\n /** Opaque; carry it back into poll/wait/cancel. Never render it. */\n deviceCode: string;\n /** Show this, large. Formatted `\"XXXX-XXXX\"`. */\n userCode: string;\n /**\n * Show this too, and tell the user it must match the browser. Computed\n * LOCALLY from this device's own public key — the server's copy is never\n * trusted (that binding is the only MITM defence in the flow).\n */\n verificationCode: string;\n verificationUri: string;\n /** Same URI with the code pre-filled — render as a QR code. */\n verificationUriComplete: string;\n /** Absolute epoch-ms. */\n expiresAt: number;\n /** Server-recommended seconds between polls; may grow via `slow_down`. */\n interval: number;\n /** Ephemeral private key for this attempt. In memory only, never persisted. */\n privateKey: CryptoKey;\n /**\n * This attempt's own public half, base64 raw SEC1.\n *\n * NOT in the spec's §7 listing, but REQUIRED: `unsealSeedFromDevice` takes\n * the recipient key as a third argument because it is mixed into the KDF to\n * defeat a point-negation substitution. The shipped crypto is authoritative;\n * carrying the public half here costs nothing (a device always holds both).\n */\n devicePublicKeyB64: string;\n}\n\n/** The result of one poll. Discriminated on `status`. */\nexport type DevicePairingPoll =\n | { status: \"pending\"; interval: number; expiresIn: number }\n | { status: \"slow_down\"; interval: number; retryAfter: number }\n | { status: \"approved\"; user: AuthUser }\n | { status: \"denied\" }\n | { status: \"expired\" };\n\nexport interface StartDevicePairingOptions {\n appId: string;\n /** Human label shown to the approver. Default: a UA-derived guess. */\n label?: string;\n}\n\nexport interface WaitForDevicePairingOptions {\n signal?: AbortSignal;\n /** Called before each sleep — drive a countdown / \"waiting…\" UI. */\n onTick?: (remainingMs: number, interval: number) => void;\n}\n\n/** A pending pairing, resolved by the approver from the typed `user_code`. */\nexport interface DevicePairingRequest {\n userCode: string;\n devicePublicKeyB64: string;\n /** Recomputed locally by the SDK; compare with what the TV shows. */\n verificationCode: string;\n deviceFingerprint: string;\n deviceLabel: string;\n appId: string;\n appLabel: string;\n isKnownDevice: boolean;\n requiresReauth: boolean;\n expiresAt: number;\n}\n\n/** A device the account has paired, as listed on the security page. */\nexport interface PairedDevice {\n id: string;\n label: string;\n appId: string;\n pairedAt: number;\n lastSeenAt: number;\n activeSession: boolean;\n}\n\n/**\n * Why a pairing ended.\n *\n * `denied` / `expired` / `aborted` / `rate_limited` are the four the spec names\n * for {@link HostedAuth.waitForDevicePairing}. The rest are additive and exist\n * because the flow genuinely produces them:\n * - `network` — the reference loop in spec §9.2 throws it after 5 consecutive\n * transport failures;\n * - `commitment_mismatch` — spec §10.8's MANDATORY client check failed (the\n * seed does not derive the commitment the server sent). This is what turns\n * §10.2's substitution attack from silent into loud;\n * - `account_mismatch` — spec §10.2 detection 2: this device was previously\n * paired to a DIFFERENT account. Refuse rather than silently adopt;\n * - `reauth_required` — see {@link ReauthRequiredError};\n * - `invalid_user_code` — client-side canonicalization rejected the input;\n * - `error` — anything else; read `.code` for the server's machine code.\n */\nexport type DevicePairingErrorReason =\n | \"denied\" | \"expired\" | \"aborted\" | \"rate_limited\" | \"network\"\n | \"commitment_mismatch\" | \"account_mismatch\" | \"reauth_required\"\n | \"invalid_user_code\" | \"error\";\n\n/**\n * Any terminal failure of the pairing flow.\n *\n * `.reason` drives the device's UI state machine; `.code` carries the server's\n * machine error code verbatim (spec §6.7) for the cases the reason collapses —\n * e.g. `consent_required`, `too_many_devices`, `key_mismatch` all arrive as\n * `reason: \"error\"` with a distinct `.code`.\n */\nexport class DevicePairingError extends Error {\n readonly reason: DevicePairingErrorReason;\n /** Machine code from the error envelope (`{error, message}`), when there was one. */\n readonly code?: string;\n readonly status?: number;\n /** Seconds, from `Retry-After`, when the server sent one. */\n readonly retryAfter?: number;\n /** Any extra fields the error envelope carried (e.g. `version`). */\n readonly details?: Record<string, unknown>;\n\n constructor(\n reason: DevicePairingErrorReason,\n opts: {\n message?: string;\n code?: string;\n status?: number;\n retryAfter?: number;\n details?: Record<string, unknown>;\n cause?: unknown;\n } = {},\n ) {\n super(opts.message ?? DEFAULT_PAIRING_MESSAGES[reason]);\n this.name = \"DevicePairingError\";\n this.reason = reason;\n this.code = opts.code;\n this.status = opts.status;\n this.retryAfter = opts.retryAfter;\n this.details = opts.details;\n if (opts.cause !== undefined) (this as Error & { cause?: unknown }).cause = opts.cause;\n }\n}\n\nconst DEFAULT_PAIRING_MESSAGES: Record<DevicePairingErrorReason, string> = {\n denied: \"Sign-in was declined on the other device.\",\n expired: \"That code expired. Get a new code and try again.\",\n aborted: \"Pairing was cancelled.\",\n rate_limited: \"Too many attempts — wait a moment and start again.\",\n network: \"Couldn't reach Muhkoo. Check the connection and try again.\",\n commitment_mismatch:\n \"The account handed back doesn't match the key material — pairing aborted. \" +\n \"Do not sign in on this device; report it.\",\n account_mismatch: \"This device was previously signed in as a different account.\",\n reauth_required: \"Confirm it's you before approving a new device.\",\n invalid_user_code: `Codes are ${PAIRING_CODE_LENGTH} characters from ${PAIRING_CODE_ALPHABET} — no O, I, L, U, 0 or 1.`,\n error: \"Device pairing failed.\",\n};\n\n/**\n * Approving a **new** device needs a recently authenticated approver (spec\n * §10.7, `FRESH_AUTH_MAX_AGE_MS`). The hosted page catches this, prompts for a\n * password / passkey / Google factor, and retries the approval.\n *\n * Server-enforced, not a UI convention — `requiresReauth` on\n * {@link DevicePairingRequest} is only the hint.\n */\nexport class ReauthRequiredError extends DevicePairingError {\n /** How long ago the approver's session authenticated, in seconds. */\n readonly authAgeSeconds?: number;\n /** The freshness window the server enforces, in seconds. */\n readonly maxAgeSeconds?: number;\n\n constructor(opts: { message?: string; authAgeSeconds?: number; maxAgeSeconds?: number; status?: number } = {}) {\n super(\"reauth_required\", { message: opts.message, code: \"reauth_required\", status: opts.status ?? 401 });\n this.name = \"ReauthRequiredError\";\n this.authAgeSeconds = opts.authAgeSeconds;\n this.maxAgeSeconds = opts.maxAgeSeconds;\n }\n}\n\nexport class HostedAuth {\n constructor(private readonly deps: HostedAuthDeps) {}\n\n /**\n * (App side) Begin hosted login: stash a PKCE verifier + state, then send\n * the browser to the hosted authorize page. Returns the URL it redirects to\n * (also useful for popup mode / tests). `redirectUri` must be registered for\n * the app in the portal.\n */\n async login(opts: { appId: string; redirectUri: string; redirect?: boolean; prompt?: \"login\" }): Promise<string> {\n const { codeVerifier, codeChallenge } = await generatePkce();\n const state = randomState();\n this.store({ codeVerifier, state, appId: opts.appId, redirectUri: opts.redirectUri });\n const params: Record<string, string> = {\n app_id: opts.appId,\n redirect_uri: opts.redirectUri,\n state,\n code_challenge: codeChallenge,\n code_challenge_method: \"S256\",\n };\n // `prompt=login` forces the credential screen even when the browser is\n // remembered. Without it, an app's own \"sign out\" would be undone on the\n // very next sign-in click: single sign-on means the hosted page still\n // knows you, so the app must be able to say \"ask anyway\". Named after the\n // OIDC parameter that solves the same problem.\n if (opts.prompt) params.prompt = opts.prompt;\n const url = `${this.deps.authBaseUrl}/authorize?` + new URLSearchParams(params).toString();\n if (opts.redirect !== false) this.location().assign(url);\n return url;\n }\n\n /**\n * (App side) Send the user to centralized account & security management on\n * the hosted page (auth.muhkoo.dev/security) — manage passkeys, recovery\n * phrase, email, Google, change password, and remove login methods, all in\n * one place. `returnUri` (default: the current URL) gives the hosted page a\n * \"Back to app\" target. Redirects the browser; resolves to the URL.\n */\n async manageAccount(opts: { returnUri?: string } = {}): Promise<string> {\n const ret = opts.returnUri ?? this.location().href;\n const url = `${this.deps.authBaseUrl}/security?` + new URLSearchParams({ return: ret }).toString();\n this.location().assign(url);\n return url;\n }\n\n /** Whether the current URL looks like a hosted-auth callback (has code + state). */\n isCallback(): boolean {\n try {\n const q = new URLSearchParams(this.location().search);\n return q.has(\"code\") && q.has(\"state\");\n } catch { return false; }\n }\n\n /**\n * (App side) Complete login on the callback URL: verify state, exchange the\n * code (+ PKCE verifier) for the session, unseal the seed from the fragment,\n * establish the session, and scrub the URL. Returns the signed-in user.\n */\n async handleCallback(): Promise<AuthUser> {\n const loc = this.location();\n const query = new URLSearchParams(loc.search);\n const code = query.get(\"code\");\n const state = query.get(\"state\");\n const fragmentKey = new URLSearchParams(loc.hash.replace(/^#/, \"\")).get(\"k\");\n if (!code || !state) throw new Error(\"Not a hosted-auth callback.\");\n if (!fragmentKey) throw new Error(\"Missing handoff key — the login link was altered.\");\n\n const stash = this.take();\n if (!stash || stash.state !== state) throw new Error(\"State mismatch — possible CSRF; start login again.\");\n\n const res = await this.deps.auth.token({ code, codeVerifier: stash.codeVerifier, appId: stash.appId });\n const seed = await unsealSeed(res.sealedKeys, fragmentKey);\n const identity = await deriveIdentityFromSeed(seed);\n await this.deps.session.setSession({ token: res.sessionToken, username: res.username, commitment: res.commitment });\n this.deps.session.setIdentity(identity);\n this.deps.session.setSeed(seed);\n\n this.scrubUrl();\n return { username: res.username, commitment: res.commitment };\n }\n\n /**\n * (Hosted-page side) Finish an /authorize request after the user has\n * authenticated here: seal the in-memory seed, mint the grant, and return\n * the URL to redirect the browser back to. The seed must be held (the user\n * just signed in via `client.auth.zk.*`).\n */\n async completeAuthorize(opts: { appId: string; redirectUri: string; codeChallenge: string; state: string }): Promise<string> {\n const token = this.deps.session.token;\n const seed = this.deps.session.seed;\n if (!token || !seed) throw new Error(\"Authenticate the user before completing authorization.\");\n const { sealedKeys, fragmentKey } = await sealSeed(seed);\n const { code } = await this.deps.auth.grant(token, {\n appId: opts.appId, redirectUri: opts.redirectUri, codeChallenge: opts.codeChallenge, sealedKeys,\n });\n const url = new URL(opts.redirectUri);\n url.searchParams.set(\"code\", code);\n url.searchParams.set(\"state\", opts.state);\n url.hash = `k=${fragmentKey}`;\n return url.toString();\n }\n\n // =========================================================================\n // Device pairing — device (TV) side\n // =========================================================================\n\n /**\n * (Device side) Begin pairing. Generates the ephemeral ECDH keypair, ensures\n * a persistent device identity key exists, signs a possession proof over it,\n * and calls `POST /api/auth/device/code`.\n *\n * Display `userCode` (large, monospace) **and** `verificationCode`, then call\n * {@link waitForDevicePairing}. The verification code returned here is\n * computed locally from this device's own public key — the server also\n * returns a copy, which is ignored on purpose: trusting it would forfeit the\n * entire MITM binding (spec §6.1, §10.1).\n */\n async startDevicePairing(opts: StartDevicePairingOptions): Promise<DevicePairingSession> {\n if (!opts?.appId) throw new DevicePairingError(\"error\", { message: \"startDevicePairing: `appId` is required.\" });\n\n const pairing = await generateDevicePairingKeypair();\n const identityKey = await deviceIdentityKey();\n const deviceIdentityKeyB64 = await exportPublicKeyBase64(identityKey.publicKey);\n const issuedAt = Date.now();\n const signature = await signMessage(\n [DEVICE_PAIR_SIG_PREFIX, opts.appId, pairing.publicKeyB64, String(issuedAt)].join(\"|\"),\n identityKey.privateKey,\n );\n\n const res = await this.deviceApi(\"POST\", \"/api/auth/device/code\", {\n app_id: opts.appId,\n device_public_key: pairing.publicKeyB64,\n device_identity_key: deviceIdentityKeyB64,\n device_signature: signature,\n issued_at: issuedAt,\n device_label: (opts.label ?? defaultDeviceLabel()).slice(0, DEVICE_LABEL_MAX),\n });\n this.throwForStatus(res);\n\n const body = res.body as {\n device_code: string; user_code: string;\n verification_uri?: string; verification_uri_complete?: string;\n expires_in?: number; interval?: number;\n };\n if (!body?.device_code || !body?.user_code) {\n throw new DevicePairingError(\"error\", { message: \"Device pairing start returned no code.\" });\n }\n\n const expiresIn = numberOr(body.expires_in, 600);\n const verificationUri = body.verification_uri || `${this.deps.authBaseUrl}/link`;\n return {\n deviceCode: body.device_code,\n userCode: body.user_code,\n // LOCAL derivation — never `body.verification_code`.\n verificationCode: await pairingVerificationCode(pairing.publicKeyB64),\n verificationUri,\n verificationUriComplete: body.verification_uri_complete\n || `${verificationUri}?code=${encodeURIComponent(body.user_code)}`,\n expiresAt: Date.now() + expiresIn * 1000,\n interval: numberOr(body.interval, 5),\n privateKey: pairing.privateKey,\n devicePublicKeyB64: pairing.publicKeyB64,\n };\n }\n\n /**\n * (Device side) One poll of `POST /api/auth/device/token`.\n *\n * On `\"approved\"` this does the whole tail of the flow before returning: it\n * unseals the envelope with the ephemeral private key, derives the identity,\n * **verifies the commitment matches** (spec §10.8 — mandatory, and the check\n * that makes a substituted seed loud rather than silent), mints the device's\n * OWN long-lived ZK session, registers the device via `PUT /api/auth/devices`,\n * and persists the identity for cold starts.\n *\n * Prefer {@link waitForDevicePairing}; use this only for a custom loop. A\n * transport failure REJECTS (the caller decides whether to retry); protocol\n * outcomes resolve as a status.\n */\n async pollDevicePairing(session: DevicePairingSession): Promise<DevicePairingPoll> {\n this.assertLive(session);\n const res = await this.deviceApi(\"POST\", \"/api/auth/device/token\", { device_code: session.deviceCode });\n\n if (res.status === 429 && res.code === \"slow_down\") {\n const interval = numberOr((res.body as { interval?: number })?.interval, session.interval + SLOW_DOWN_STEP_S);\n return { status: \"slow_down\", interval, retryAfter: res.retryAfter ?? interval };\n }\n // `expired_token` is deliberately uniform server-side for unknown /\n // expired / already-redeemed codes, so all three land here.\n if (res.status === 401 && res.code === \"expired_token\") return { status: \"expired\" };\n if (res.status === 403 && res.code === \"access_denied\") return { status: \"denied\" };\n this.throwForStatus(res);\n\n const body = res.body as {\n status?: string; interval?: number; expires_in?: number;\n sealed_keys?: string; username?: string; commitment?: string; device_fingerprint?: string;\n };\n if (body?.status === \"pending\") {\n return {\n status: \"pending\",\n interval: numberOr(body.interval, session.interval),\n expiresIn: numberOr(body.expires_in, Math.max(0, Math.round((session.expiresAt - Date.now()) / 1000))),\n };\n }\n if (body?.status === \"denied\") return { status: \"denied\" };\n if (body?.status === \"expired\") return { status: \"expired\" };\n if (body?.status !== \"approved\") {\n throw new DevicePairingError(\"error\", { message: `Unexpected pairing status \"${body?.status}\".` });\n }\n if (!body.sealed_keys || !body.username || !body.commitment) {\n throw new DevicePairingError(\"error\", { message: \"Approved pairing was missing its sealed payload.\" });\n }\n\n const user = await this.adoptSealedSeed(session, {\n sealedKeys: body.sealed_keys,\n username: body.username,\n commitment: body.commitment,\n });\n return { status: \"approved\", user };\n }\n\n /**\n * (Device side) Poll to completion with the interval + `slow_down` backoff of\n * spec §9.\n *\n * The server's `interval` is authoritative: on `slow_down` the client moves to\n * `max(serverInterval, own + 5, retryAfter)` so the two can't drift into a\n * permanent slow_down loop. Sleeps carry ±10 % jitter so a rack of devices\n * restarted together doesn't synchronise, and the loop stops at `expiresAt`\n * without waiting for the server to say so.\n *\n * Resolves with the signed-in user, or rejects with {@link DevicePairingError}.\n */\n async waitForDevicePairing(\n session: DevicePairingSession,\n opts: WaitForDevicePairingOptions = {},\n ): Promise<AuthUser> {\n let interval = session.interval;\n let consecutiveNetworkErrors = 0;\n\n for (;;) {\n if (opts.signal?.aborted) throw new DevicePairingError(\"aborted\");\n this.assertLive(session);\n\n const remaining = session.expiresAt - Date.now();\n if (remaining <= 0) throw new DevicePairingError(\"expired\");\n opts.onTick?.(remaining, interval);\n\n const jitter = 1 + (Math.random() * 0.2 - 0.1);\n await this.sleep(Math.min(interval * 1000 * jitter, remaining), opts.signal);\n\n let result: DevicePairingPoll;\n try {\n result = await this.pollDevicePairing(session);\n consecutiveNetworkErrors = 0;\n } catch (e) {\n // A protocol verdict (denied, budget exhausted, a failed\n // commitment check) is terminal — it must NOT be swallowed by the\n // transport-retry arm the way the spec's reference loop would.\n if (e instanceof DevicePairingError) throw e;\n // Transport failure: a TV's Wi-Fi drops constantly, and the\n // pairing stays valid server-side until it expires. Back off.\n if (++consecutiveNetworkErrors > MAX_CONSECUTIVE_NETWORK_ERRORS) {\n throw new DevicePairingError(\"network\", { cause: e });\n }\n interval = Math.min(interval * 2, MAX_BACKOFF_INTERVAL_S);\n continue;\n }\n\n switch (result.status) {\n case \"pending\":\n interval = result.interval; // server-authoritative\n break;\n case \"slow_down\":\n interval = Math.max(result.interval, interval + SLOW_DOWN_STEP_S, result.retryAfter);\n break;\n case \"approved\":\n return result.user;\n case \"denied\":\n throw new DevicePairingError(\"denied\");\n case \"expired\":\n throw new DevicePairingError(\"expired\");\n }\n }\n }\n\n /**\n * (Device side) Abandon an attempt. Marks the session dead so an in-flight\n * {@link waitForDevicePairing} rejects with `aborted` on its next tick, and\n * clears the device code.\n *\n * The ephemeral `CryptoKey` cannot be zeroed from JS — dropping the last\n * reference to `session` is what makes it unrecoverable, so don't keep the\n * object around. Deliberately does NOT notify the server: the pairing is\n * single-use and expires on its own, and an unauthenticated \"cancel\" endpoint\n * would just be another way to grief someone else's pending code.\n */\n cancelDevicePairing(session: DevicePairingSession): void {\n if (!session) return;\n cancelledPairings.add(session);\n session.deviceCode = \"\";\n }\n\n /**\n * (Device side) Cold-start path. Reads the persisted device identity,\n * re-derives the ZK identity from the stored seed, mints a fresh session, and\n * touches `PUT /api/auth/devices`.\n *\n * Returns `null` when nothing is persisted, when the blob doesn't derive its\n * own pinned commitment (corrupt/tampered storage), or when the account no\n * longer accepts the identity — call {@link startDevicePairing} then.\n */\n async resumeDeviceSession(): Promise<AuthUser | null> {\n const persisted = await loadDeviceIdentity();\n if (!persisted) return null;\n try {\n const identity = await deriveIdentityFromSeed(persisted.seed);\n const commitment = await commitmentFor(identity);\n // Storage integrity: the seed must still derive the commitment it was\n // stored with. A mismatch means the blob was swapped, not that the\n // account changed — refuse it rather than authenticate as someone else.\n if (commitment !== persisted.commitment) return null;\n const user = await this.mintSession(persisted.username, identity, persisted.seed, { rememberMe: true });\n await this.touchPairedDevice();\n return user;\n } catch {\n return null;\n }\n }\n\n /** (Device side) Wipe the persisted seed, the device identity key, and the session. */\n async forgetDeviceSession(): Promise<void> {\n await clearDeviceIdentity();\n await this.deps.session.clear();\n }\n\n /** (Device side) Whether a persisted device identity exists. Cheap: no crypto, no network. */\n async hasDeviceSession(): Promise<boolean> {\n return hasDeviceIdentity();\n }\n\n // =========================================================================\n // Device pairing — approver (hosted page) side\n // =========================================================================\n\n /**\n * (Hosted page) Resolve a typed `user_code` into the pending request.\n * Session-authed.\n *\n * `verificationCode` is recomputed here from the returned device key — the\n * server's copy is discarded. Both screens must show independently derived\n * values or the comparison proves nothing.\n */\n async lookupDevicePairing(userCode: string): Promise<DevicePairingRequest> {\n const code = formatUserCode(canonicalUserCode(userCode));\n const res = await this.deviceApi(\"POST\", \"/api/auth/device/lookup\", { user_code: code }, true);\n this.throwForStatus(res);\n\n const body = res.body as {\n user_code?: string; device_public_key?: string; device_fingerprint?: string;\n device_label?: string; app_id?: string; app_label?: string;\n is_known_device?: boolean; requires_reauth?: boolean; expires_in?: number;\n };\n if (!body?.device_public_key) {\n throw new DevicePairingError(\"error\", { message: \"Pairing lookup returned no device key.\" });\n }\n const isKnown = body.is_known_device === true;\n return {\n userCode: body.user_code || code,\n devicePublicKeyB64: body.device_public_key,\n verificationCode: await pairingVerificationCode(body.device_public_key),\n deviceFingerprint: body.device_fingerprint ?? \"\",\n deviceLabel: body.device_label ?? \"TV\",\n appId: body.app_id ?? \"\",\n appLabel: body.app_label ?? \"\",\n isKnownDevice: isKnown,\n requiresReauth: body.requires_reauth ?? !isKnown,\n expiresAt: Date.now() + numberOr(body.expires_in, 0) * 1000,\n };\n }\n\n /**\n * (Hosted page) Seal the in-memory seed to the device's public key and post\n * the ciphertext. Requires an unlocked seed — the user just authenticated\n * here — exactly like {@link completeAuthorize}. The server stores and relays\n * the envelope verbatim and can't read it.\n *\n * Show the user the verification code and the device label FIRST, and only\n * call this on an explicit tap. Throws {@link ReauthRequiredError} when the\n * account's last authentication is too old for a new device; the page should\n * prompt for a factor and retry. A stale legal agreement arrives as\n * `DevicePairingError` with `.code === \"consent_required\"` and\n * `.details.version`.\n */\n async approveDevicePairing(req: DevicePairingRequest, opts: { label?: string } = {}): Promise<{ deviceId: string }> {\n const seed = this.deps.session.seed;\n if (!this.deps.session.token || !seed) {\n throw new DevicePairingError(\"error\", { message: \"Authenticate the user before approving a device.\" });\n }\n if (!req?.devicePublicKeyB64) {\n throw new DevicePairingError(\"error\", { message: \"approveDevicePairing: the request has no device key.\" });\n }\n const code = formatUserCode(canonicalUserCode(req.userCode));\n const sealedKeys = await sealSeedToDevice(seed, req.devicePublicKeyB64);\n\n const res = await this.deviceApi(\"POST\", \"/api/auth/device/approve\", {\n user_code: code,\n device_public_key: req.devicePublicKeyB64,\n sealed_keys: sealedKeys,\n device_label: (opts.label ?? req.deviceLabel ?? \"\").slice(0, DEVICE_LABEL_MAX) || undefined,\n }, true);\n this.throwForStatus(res);\n\n return { deviceId: String((res.body as { device_id?: string })?.device_id ?? req.deviceFingerprint ?? \"\") };\n }\n\n /**\n * (Hosted page) Refuse a pairing. No re-auth and no consent gate — declining\n * must never be harder than accepting. Leaves a tombstone so the device is\n * told \"declined\" rather than an indistinguishable \"expired\".\n */\n async denyDevicePairing(userCode: string): Promise<void> {\n const code = formatUserCode(canonicalUserCode(userCode));\n const res = await this.deviceApi(\"POST\", \"/api/auth/device/deny\", { user_code: code }, true);\n this.throwForStatus(res);\n }\n\n // =========================================================================\n // Device pairing — paired-device management\n // =========================================================================\n\n /**\n * The account's paired devices. Session-authed.\n *\n * UI copy note (spec §10.6): removing a device forces a full re-approval next\n * time, but be careful what you promise. It does NOT sign the device out —\n * the server returns `session_revoked: false`, and that session runs until it\n * expires — and it cannot take back the master seed the device already holds.\n * Users assume \"remove\" means \"locked out immediately\"; it does not.\n */\n async listPairedDevices(): Promise<PairedDevice[]> {\n const res = await this.deviceApi(\"GET\", \"/api/auth/devices\", undefined, true);\n this.throwForStatus(res);\n const rows = (res.body as { devices?: unknown[] })?.devices ?? [];\n return rows.map((raw) => {\n const d = raw as {\n id?: string; label?: string; app_id?: string;\n paired_at?: number; last_seen_at?: number; active_session?: boolean;\n };\n return {\n id: d.id ?? \"\",\n label: d.label ?? \"\",\n appId: d.app_id ?? \"\",\n pairedAt: numberOr(d.paired_at, 0),\n lastSeenAt: numberOr(d.last_seen_at, 0),\n activeSession: d.active_session === true,\n };\n });\n }\n\n /**\n * Un-pair a device. Session-authed.\n *\n * It stops being a \"known\" device, so pairing it again needs full approval\n * with a fresh factor. It does NOT end that device's current session — the\n * server reports `session_revoked: false` — and it cannot take back the\n * master seed the device already holds. Do not write UI copy promising an\n * immediate sign-out; users will assume it and be wrong.\n */\n async revokePairedDevice(id: string): Promise<void> {\n if (!id) throw new DevicePairingError(\"error\", { message: \"revokePairedDevice: `id` is required.\" });\n const res = await this.deviceApi(\"DELETE\", \"/api/auth/devices\", { id }, true);\n this.throwForStatus(res);\n }\n\n // ---- device pairing internals -------------------------------------------\n\n /**\n * The whole tail of an approved pairing: unseal → derive → **verify** →\n * authenticate → register → persist. Split out of `pollDevicePairing` so the\n * ordering (and the two refusals) stay readable.\n */\n private async adoptSealedSeed(\n session: DevicePairingSession,\n payload: { sealedKeys: string; username: string; commitment: string },\n ): Promise<AuthUser> {\n let seed: Uint8Array;\n try {\n seed = await unsealSeedFromDevice(payload.sealedKeys, session.privateKey, session.devicePublicKeyB64);\n } catch (e) {\n throw new DevicePairingError(\"commitment_mismatch\", {\n message: \"The sealed key material couldn't be opened on this device — pairing aborted.\",\n cause: e,\n });\n }\n\n const identity = await deriveIdentityFromSeed(seed);\n const commitment = await commitmentFor(identity);\n // §10.8, mandatory: the seed we were handed must derive the commitment the\n // server claims. A compromised API can seal an attacker-controlled seed to\n // this device (§10.2) — this is the check that makes that loud.\n if (commitment !== payload.commitment) {\n throw new DevicePairingError(\"commitment_mismatch\", {\n details: { expected: payload.commitment, derived: commitment },\n });\n }\n // §10.2 detection 2 — commitment pinning across re-pairs. A device that\n // was signed in as someone else must fail closed, not silently switch.\n const pinned = await loadDeviceIdentity();\n if (pinned && pinned.commitment !== commitment) {\n throw new DevicePairingError(\"account_mismatch\", {\n details: { pinnedUsername: pinned.username, offeredUsername: payload.username },\n });\n }\n\n // The device mints its OWN session rather than sharing the approver's, so\n // revoking the TV doesn't sign out the phone that approved it.\n const user = await this.mintSession(payload.username, identity, seed, { rememberMe: true });\n\n // Both are best-effort: the user IS signed in at this point, and failing\n // the whole pairing over a bookkeeping call would be worse than degrading.\n await this.touchPairedDevice();\n try {\n await persistDeviceIdentity({ username: user.username, commitment, seed, pairedAt: Date.now() });\n } catch (e) {\n appLoggerWarn(\"device identity could not be persisted; this device will pair again after a restart\", e);\n }\n return user;\n }\n\n /**\n * Run the standard ZK challenge → Groth16 proof → authenticate round-trip for\n * an identity derived from a seed the caller already holds, and store the\n * resulting session.\n *\n * Identical to `ZkAuth.login()`'s tail (`proveAndStore`) — same challenge,\n * same circuit, same signature — so the commitment is byte-identical to\n * `zk.login(username, password)` by construction. No new endpoint, no circuit\n * change, no alternative derivation.\n *\n * (Spec §7 puts this on `AuthNamespace` as `loginWithSeed`; see the report —\n * it lives here because `AuthNamespace.ts` was out of scope for this change,\n * and `proveAndStore` is private.)\n */\n private async mintSession(\n username: string,\n identity: ZkIdentity,\n seed: Uint8Array,\n opts: LoginOptions = {},\n ): Promise<AuthUser> {\n const ecdsaPubHex = await exportPublicKeyHex(identity.ecdsaKeyPair.publicKey);\n const challenge = await this.deps.auth.getChallenge(username);\n const { proof, publicSignals, commitment } = await generateAuthProof({\n secretHex: identity.secretHex,\n saltHex: identity.saltHex,\n ecdsaPubHex,\n nonceHex: challenge.nonce,\n circuits: this.circuits(),\n });\n const signature = await signMessage(JSON.stringify(proof), identity.ecdsaKeyPair.privateKey);\n const result = await this.deps.auth.authenticate({\n challengeId: challenge.challengeId,\n proof: {\n commitment,\n // The accelerator expects the original hex nonce, not the\n // field-reduced version fed into the circuit.\n nonce: challenge.nonce,\n response: { proof, publicSignals },\n signature,\n },\n rememberMe: opts.rememberMe,\n });\n await this.deps.session.setSession({ token: result.token, username: result.username, commitment });\n this.deps.session.setIdentity(identity);\n this.deps.session.setSeed(seed);\n return { username: result.username, commitment };\n }\n\n /**\n * `PUT /api/auth/devices` — the device checks in after each self-login so the\n * security page can show \"last seen\" and revoke the right session. Never\n * creates a record (only approve does), so a 404 here is expected on a device\n * whose pairing was revoked. Best-effort by design.\n */\n private async touchPairedDevice(): Promise<void> {\n try {\n const identityKey = await deviceIdentityKey();\n const fingerprint = await deviceFingerprint();\n const issuedAt = Date.now();\n const signature = await signMessage(\n [DEVICE_TOUCH_SIG_PREFIX, fingerprint, String(issuedAt)].join(\"|\"),\n identityKey.privateKey,\n );\n await this.deviceApi(\"PUT\", \"/api/auth/devices\", {\n fingerprint,\n issued_at: issuedAt,\n device_signature: signature,\n }, true);\n } catch (e) {\n appLoggerWarn(\"device check-in failed\", e);\n }\n }\n\n /** Reject a session that {@link cancelDevicePairing} has retired. */\n private assertLive(session: DevicePairingSession): void {\n if (!session || cancelledPairings.has(session) || !session.deviceCode) {\n throw new DevicePairingError(\"aborted\");\n }\n }\n\n private sleep(ms: number, signal?: AbortSignal): Promise<void> {\n if (this.deps.sleep) return this.deps.sleep(ms, signal);\n return new Promise((resolve, reject) => {\n const timer = setTimeout(() => {\n signal?.removeEventListener(\"abort\", onAbort);\n resolve();\n }, ms);\n const onAbort = () => {\n clearTimeout(timer);\n reject(new DevicePairingError(\"aborted\"));\n };\n if (signal?.aborted) return onAbort();\n signal?.addEventListener(\"abort\", onAbort, { once: true });\n });\n }\n\n /**\n * One round-trip to a `/api/auth/device*` endpoint. Never throws on a non-2xx\n * — the poll path has to inspect 401/403/429 itself — so callers that don't\n * want that follow up with {@link throwForStatus}.\n */\n private async deviceApi(\n method: string,\n path: string,\n body?: unknown,\n withSession = false,\n ): Promise<DeviceApiResponse> {\n const headers: Record<string, string> = {};\n if (body !== undefined) headers[\"Content-Type\"] = \"application/json\";\n if (withSession) {\n const token = this.deps.session.token;\n if (!token) throw new DevicePairingError(\"error\", { code: \"unauthorized\", status: 401, message: \"Sign in first.\" });\n // X-Muhkoo-Session, not `Authorization: Bearer` — the accelerator's\n // session resolver prefers it and raw SPA fetches must use it.\n headers[\"X-Muhkoo-Session\"] = token;\n }\n const fetchFn = this.deps.fetch ?? globalThis.fetch?.bind(globalThis);\n if (typeof fetchFn !== \"function\") throw new Error(\"HostedAuth: no fetch available.\");\n\n const res = await fetchFn(`${this.apiBase()}${path}`, {\n method,\n headers,\n body: body === undefined ? undefined : JSON.stringify(body),\n });\n\n let parsed: unknown = null;\n try { parsed = await res.json(); } catch { /* empty or non-JSON body */ }\n const envelope = (parsed ?? {}) as { error?: unknown; message?: unknown };\n const retryAfterHeader = Number(res.headers?.get?.(\"Retry-After\"));\n\n return {\n status: res.status,\n ok: res.ok,\n body: parsed,\n code: res.ok || typeof envelope.error !== \"string\" ? undefined : envelope.error,\n message: typeof envelope.message === \"string\"\n ? envelope.message\n : typeof envelope.error === \"string\" ? envelope.error : undefined,\n retryAfter: Number.isFinite(retryAfterHeader) && retryAfterHeader > 0 ? retryAfterHeader : null,\n };\n }\n\n /** Turn a non-2xx device-endpoint response into the right typed error. */\n private throwForStatus(res: DeviceApiResponse): void {\n if (res.ok) return;\n const details = (res.body ?? undefined) as Record<string, unknown> | undefined;\n if (res.code === \"reauth_required\") {\n throw new ReauthRequiredError({\n message: res.message,\n status: res.status,\n authAgeSeconds: numberOrUndefined(details?.auth_age_seconds),\n maxAgeSeconds: numberOrUndefined(details?.max_age_seconds),\n });\n }\n throw new DevicePairingError(reasonForCode(res.code, res.status), {\n message: res.message,\n code: res.code,\n status: res.status,\n retryAfter: res.retryAfter ?? undefined,\n details,\n });\n }\n\n /**\n * Accelerator origin for the device endpoints.\n *\n * Prefers the explicit dep. Falls back to the {@link AuthClient}'s own base\n * URL, because `AuthNamespace` builds `HostedAuth` without one today and a\n * hard-coded default would silently point a staging or local build at\n * production. Last resort: map the auth SPA host (`auth.…` → `api.…`).\n */\n private apiBase(): string {\n const explicit = this.deps.apiBaseUrl;\n if (explicit) return explicit.replace(/\\/+$/, \"\");\n const fromAuthClient = (this.deps.auth as unknown as { baseUrl?: string })?.baseUrl;\n if (typeof fromAuthClient === \"string\" && fromAuthClient) return fromAuthClient.replace(/\\/+$/, \"\");\n try {\n const url = new URL(this.deps.authBaseUrl);\n url.hostname = url.hostname.replace(/^auth\\./, \"api.\");\n url.pathname = \"\";\n return url.toString().replace(/\\/+$/, \"\");\n } catch {\n throw new Error(\"HostedAuth: can't resolve the accelerator base URL — pass `apiBaseUrl`.\");\n }\n }\n\n private circuits(): CircuitUrls {\n return this.deps.circuits ?? defaultCircuitUrls(this.apiBase());\n }\n\n // ---- internals ----------------------------------------------------------\n\n private location(): Location {\n const loc = (globalThis as { location?: Location }).location;\n if (!loc) throw new Error(\"Hosted auth requires a browser environment.\");\n return loc;\n }\n\n private store(v: { codeVerifier: string; state: string; appId: string; redirectUri: string }): void {\n const ss = (globalThis as { sessionStorage?: Storage }).sessionStorage;\n if (!ss) throw new Error(\"Hosted auth requires sessionStorage.\");\n ss.setItem(PKCE_STORE_KEY, JSON.stringify(v));\n }\n\n private take(): { codeVerifier: string; state: string; appId: string; redirectUri: string } | null {\n const ss = (globalThis as { sessionStorage?: Storage }).sessionStorage;\n if (!ss) return null;\n const raw = ss.getItem(PKCE_STORE_KEY);\n if (!raw) return null;\n ss.removeItem(PKCE_STORE_KEY);\n try { return JSON.parse(raw); } catch { return null; }\n }\n\n /** Drop `code`, `state`, and the `#k` fragment from the address bar. */\n private scrubUrl(): void {\n const h = (globalThis as { history?: History }).history;\n const loc = this.location();\n if (h?.replaceState) h.replaceState(null, \"\", loc.pathname);\n }\n}\n\n// ---- device pairing: module helpers ----------------------------------------\n\n/** Sessions retired by {@link HostedAuth.cancelDevicePairing}. Weak so a dropped\n * session is collectable — this must not become a leak on a device that runs\n * for months. */\nconst cancelledPairings = new WeakSet<DevicePairingSession>();\n\ninterface DeviceApiResponse {\n status: number;\n ok: boolean;\n body: unknown;\n /** Machine code from `{error, message}`. Undefined on 2xx. */\n code?: string;\n /** Human sentence — `message`, falling back to `error` for the older shape. */\n message?: string;\n retryAfter: number | null;\n}\n\n/**\n * Map a server error code to the reason the device's state machine branches on.\n * Codes with no dedicated reason land on `\"error\"` and stay readable through\n * {@link DevicePairingError.code}.\n */\nfunction reasonForCode(code: string | undefined, status: number): DevicePairingErrorReason {\n switch (code) {\n case \"expired_token\":\n case \"pairing_not_found\":\n return \"expired\";\n case \"access_denied\":\n return \"denied\";\n case \"slow_down\":\n case \"rate_limited\":\n case \"too_many_requests\":\n return \"rate_limited\";\n case \"reauth_required\":\n return \"reauth_required\";\n case \"invalid_user_code\":\n return \"invalid_user_code\";\n default:\n return status === 429 ? \"rate_limited\" : \"error\";\n }\n}\n\n/**\n * Canonicalize a typed `user_code`: uppercase, drop whitespace and `-`.\n *\n * We deliberately do NOT guess (`O → 0`, `I → 1`, …). Both members of every\n * confusable pair are excluded from the alphabet, so a typed `O` is a genuine\n * misread — telling the user is more useful than silently resolving it.\n */\nexport function canonicalUserCode(input: string): string {\n const code = String(input ?? \"\").toUpperCase().replace(/[\\s-]/g, \"\");\n if (code.length !== PAIRING_CODE_LENGTH) throw new DevicePairingError(\"invalid_user_code\");\n for (const ch of code) {\n if (!PAIRING_CODE_ALPHABET.includes(ch)) throw new DevicePairingError(\"invalid_user_code\");\n }\n return code;\n}\n\n/** Group a canonical code for display and for the wire: `\"K7QD3MXR\"` → `\"K7QD-3MXR\"`. */\nexport function formatUserCode(canonical: string): string {\n const half = Math.ceil(canonical.length / 2);\n return `${canonical.slice(0, half)}-${canonical.slice(half)}`;\n}\n\n/** Poseidon commitment for an identity — the value the server stores. */\nasync function commitmentFor(identity: ZkIdentity): Promise<string> {\n const ecdsaPubHex = await exportPublicKeyHex(identity.ecdsaKeyPair.publicKey);\n return buildCommitment(identity.secretHex, identity.saltHex, ecdsaPubHex);\n}\n\n/**\n * A label the approver can recognise, guessed from the user agent. Android TV\n * user agents are famously uninformative, so this is a coarse family name —\n * §6.4 lets the approver rename the device at approval time.\n */\nfunction defaultDeviceLabel(): string {\n const ua = (globalThis as { navigator?: { userAgent?: string } }).navigator?.userAgent ?? \"\";\n if (/AFT[A-Z]/i.test(ua)) return \"Fire TV\";\n if (/Android.*TV|GoogleTV|Chromecast/i.test(ua)) return \"Android TV\";\n if (/AppleTV|tvOS/i.test(ua)) return \"Apple TV\";\n if (/Tizen|Web0S|WebOS|SMART-TV|BRAVIA|HbbTV|NetCast/i.test(ua)) return \"Smart TV\";\n return \"TV\";\n}\n\nfunction numberOr(v: unknown, fallback: number): number {\n return typeof v === \"number\" && Number.isFinite(v) ? v : fallback;\n}\n\nfunction numberOrUndefined(v: unknown): number | undefined {\n return typeof v === \"number\" && Number.isFinite(v) ? v : undefined;\n}\n\n/** Non-fatal diagnostics. The SDK logger is optional, so never let it throw. */\nfunction appLoggerWarn(message: string, err: unknown): void {\n try {\n (globalThis as { appLogger?: { warn?: (...a: unknown[]) => void } }).appLogger?.warn?.(\n `[hosted-auth] ${message}:`, err instanceof Error ? err.message : err,\n );\n } catch { /* diagnostics must never break the flow */ }\n}\n","/**\n * `client.auth` — user authentication, exposed today through the `zk`\n * sub-namespace (`client.auth.zk.login(...)`). Leaving room under `auth` for\n * other strategies later (e.g. `auth.oauth`) without reshaping the surface.\n *\n * `ZkAuth` absorbs the full ZK register/login dance that used to live in the\n * web app's `AuthContext`:\n *\n * register: derive identity → commitment → POST /api/auth/zk-register\n * login: derive identity → challenge → Groth16 proof → sign →\n * POST /api/auth/zk-authenticate → session token\n *\n * The derived {@link ZkIdentity} (secret + ECDSA/ECDH keypairs) is held in\n * {@link SessionState} so the storage + message namespaces can reuse it for\n * at-rest encryption and the messaging ratchet without re-deriving.\n */\n\nimport { AuthClient } from \"../../auth/AuthClient\";\nimport { deriveIdentity, deriveIdentityFromSeed, deriveMasterSeedFromPassword, type ZkIdentity } from \"../../auth/identity\";\nimport { seedToMnemonic, mnemonicToSeed } from \"../../auth/recoveryPhrase\";\nimport { generateAuthProof, buildCommitment, type CircuitUrls } from \"../../auth/proof\";\nimport { exportPublicKeyHex, exportPublicKeyBase64, signMessage } from \"../../auth/keys\";\nimport {\n randomSeed, passwordPreHash, wrapKeyFromOprf, wrapKeyFromBytes, wrapSeed, unwrapSeed, toBase64, fromBase64,\n} from \"../../auth/vault\";\nimport { oprfBlind, oprfFinalize } from \"../../auth/oprf\";\nimport { emailFactorInput, googleFactorInput, gatedBlind, gatedWrapKey } from \"../../auth/gatedFactor\";\nimport { passkeySupported, passkeyPrfCapable, createPasskeyWithPrf, evaluatePasskeyPrf, defaultRpId, rpIdUsableForOrigin, passkeyUsableFromOrigin, PasskeyOriginError } from \"../../auth/passkey\";\nimport type { SessionState } from \"../Session\";\nimport { HostedAuth } from \"./HostedAuth\";\n\n/**\n * Thrown when the identity vault can't be reached to unlock the seed — a network\n * failure, a 5xx, or the per-user rate limit (429). This is distinct from a wrong\n * password, and is surfaced so `login`/`unlock` do NOT silently fall back to the\n * legacy password derivation (which, for a vault account, yields a misleading\n * \"commitment mismatch\"). Callers should ask the user to retry, not re-enter a\n * password.\n */\nexport class VaultUnavailableError extends Error {\n constructor(cause?: unknown) {\n const detail = cause instanceof Error ? cause.message : String(cause ?? \"\");\n super(\n /too many|rate.?limit|\\b429\\b/i.test(detail)\n ? \"Too many attempts — please wait a moment and try again.\"\n : \"Couldn't reach the secure vault. Check your connection and try again.\",\n );\n this.name = \"VaultUnavailableError\";\n (this as Error & { cause?: unknown }).cause = cause;\n }\n}\n\n/**\n * A stored device pairing that the account has since revoked.\n *\n * Typed rather than a bare Error because the right response is specific and the\n * wrong one is harmful: the caller must DISCARD its stored key and fall back to\n * a password. Retrying is futile (the factor is gone from the vault), and\n * silently re-pairing would undo the revocation that a user performed\n * deliberately — the whole point of a revocable pairing is that withdrawing it\n * stays withdrawn.\n *\n * Distinct from a wrong key, which fails to decrypt rather than failing to\n * resolve. A machine whose access was withdrawn should be able to say so.\n */\nexport class DeviceRevokedError extends Error {\n constructor() {\n super(\"This device is no longer paired — its access was revoked. Sign in again to re-pair.\");\n this.name = \"DeviceRevokedError\";\n }\n}\n\n/** What the auth methods resolve to — the stable, non-secret user facts. */\nexport interface AuthUser {\n username: string;\n /** Decimal-string Poseidon commitment — the user's stable id. */\n commitment: string;\n}\n\nexport interface RegisterParams {\n username: string;\n password: string;\n email?: string | null;\n /** Sign in immediately after registering (default: true). */\n login?: boolean;\n}\n\nexport interface LoginOptions {\n /** Ask the accelerator for a long-lived (30d) session (default: false). */\n rememberMe?: boolean;\n}\n\nexport interface ZkAuthDeps {\n auth: AuthClient;\n circuits: CircuitUrls;\n session: SessionState;\n}\n\n/**\n * ZK identity auth. One instance per {@link Client}; reads/writes the shared\n * {@link SessionState}.\n */\n/** HKDF label separating a device wrap key from every other use of the seed. */\nconst DEVICE_WRAP_INFO = \"muhkoo-device-key-v1\";\n\nexport class ZkAuth {\n constructor(private readonly deps: ZkAuthDeps) {}\n\n /**\n * Register a new user, then (by default) sign them in.\n *\n * M1.0: the identity now descends from a **random master seed** (not the\n * password), so it's recoverable + the password can be changed. We register\n * the commitment, sign in with the in-memory identity to get a token, then\n * enroll the OPRF-gated **password factor** (the seed wrapped under a key the\n * server can't derive offline). Future logins unlock the seed via that factor.\n */\n async register(params: RegisterParams): Promise<AuthUser> {\n const { username, password, email = null, login = true } = params;\n const seed = randomSeed();\n const identity = await deriveIdentityFromSeed(seed);\n const commitment = await this.commitmentFor(identity);\n\n await this.deps.auth.register({\n username,\n commitment,\n ecdhPublicKey: await exportPublicKeyBase64(identity.ecdhKeyPair.publicKey),\n ecdsaPublicKey: await exportPublicKeyBase64(identity.ecdsaKeyPair.publicKey),\n email,\n });\n\n // Sign in with the in-memory (random-seed) identity to obtain a session\n // token, then enroll the password factor so the next login can recover\n // the seed. (A token is required to write the factor.)\n const user = await this.proveAndStore(username, identity, {});\n await this.enrollPasswordFactor(username, password, seed, this.deps.session.token!);\n this.deps.session.setSeed(seed); // held so a passkey/phrase can be enrolled next\n\n if (!login) await this.logout();\n return user;\n }\n\n /**\n * Sign in. M1.0 is **vault-first**: read the password factor and OPRF-unwrap\n * the master seed → identity. If that fails (a pre-vault account, whose factor\n * is absent so the server returns a decoy, or a wrong password), fall back to\n * the legacy password-derived identity. Either way we then prove knowledge of\n * the identity and trade it for a session token.\n */\n async login(username: string, password: string, opts: LoginOptions = {}): Promise<AuthUser> {\n // Vault-first; fall back to the legacy password-derived seed (pre-vault\n // accounts). Either way we end up with the master seed, which we hold so\n // recovery factors can be enrolled.\n const vaultSeed = await this.tryUnlockSeed(username, password);\n const seed = vaultSeed ?? await deriveMasterSeedFromPassword(username, password);\n const identity = await deriveIdentityFromSeed(seed);\n const user = await this.proveAndStore(username, identity, opts);\n this.deps.session.setSeed(seed);\n // Migrate a legacy account into the vault on first vault-aware login: it has\n // no password factor (`vaultSeed` is null), so enroll one now — wrapping the\n // exact legacy-derived seed the proof just validated, so the commitment is\n // preserved. Best-effort; the legacy path still works if this fails.\n if (!vaultSeed) await this.migrateLegacyPasswordFactor(username, password, seed);\n return user;\n }\n\n /** Enroll the password factor for a legacy (pre-vault) account. Idempotent +\n * best-effort; failure just means we retry on the next login. */\n private async migrateLegacyPasswordFactor(username: string, password: string, seed: Uint8Array): Promise<void> {\n const token = this.deps.session.token;\n if (!token) return;\n try {\n await this.enrollPasswordFactor(username, password, seed, token);\n } catch {\n /* migrate next time */\n }\n }\n\n /**\n * Silently re-authenticate the current user without prompting for a\n * password. Only possible while the client is **unlocked** — i.e. the\n * derived {@link ZkIdentity} (secret + keypairs) is still in memory from a\n * prior `login()`/`unlock()`. Re-runs the full challenge→proof→authenticate\n * dance with that in-memory identity and swaps in the fresh token.\n *\n * Returns `true` if a new session was minted, `false` if recovery isn't\n * possible (no active user, or locked — the identity was never derived or\n * was lost on reload). A `false` result is the app's cue to send the user\n * back to the login screen.\n *\n * Used automatically by the {@link Client} when a token-gated request comes\n * back `401` (stale/expired token), so transient session expiry self-heals\n * instead of surfacing errors mid-session.\n */\n async recover(): Promise<boolean> {\n const username = this.deps.session.username;\n const identity = this.deps.session.identity;\n if (!username || !identity) return false;\n try {\n await this.proveAndStore(username, identity, {});\n return true;\n } catch {\n return false;\n }\n }\n\n /**\n * Shared sign-in core: prove knowledge of `identity` against a fresh\n * challenge and persist the resulting session + identity. Used by both\n * `login()` (identity derived from a password) and `recover()` (identity\n * already in memory).\n */\n private async proveAndStore(\n username: string,\n identity: ZkIdentity,\n opts: LoginOptions,\n ): Promise<AuthUser> {\n const ecdsaPubHex = await exportPublicKeyHex(identity.ecdsaKeyPair.publicKey);\n\n const challenge = await this.deps.auth.getChallenge(username);\n\n const { proof, publicSignals, commitment } = await generateAuthProof({\n secretHex: identity.secretHex,\n saltHex: identity.saltHex,\n ecdsaPubHex,\n nonceHex: challenge.nonce,\n circuits: this.deps.circuits,\n });\n\n const signature = await signMessage(JSON.stringify(proof), identity.ecdsaKeyPair.privateKey);\n\n const result = await this.deps.auth.authenticate({\n challengeId: challenge.challengeId,\n proof: {\n commitment,\n // The accelerator expects the original hex nonce here, not the\n // field-reduced version fed into the circuit.\n nonce: challenge.nonce,\n response: { proof, publicSignals },\n signature,\n },\n rememberMe: opts.rememberMe,\n });\n\n await this.deps.session.setSession({\n token: result.token,\n username: result.username,\n commitment,\n });\n this.deps.session.setIdentity(identity);\n\n return { username: result.username, commitment };\n }\n\n /**\n * Restore a persisted session on boot. Validates the stored token with the\n * accelerator; returns the user when valid, or `null` (and clears the\n * stale session) otherwise. Identity stays locked — call {@link unlock}\n * to re-enable encryption/messaging without a full re-login.\n */\n async restore(): Promise<AuthUser | null> {\n const stored = await this.deps.session.loadPersisted();\n if (!stored) return null;\n try {\n await this.deps.auth.verify(stored.token);\n return { username: stored.username, commitment: stored.commitment };\n } catch {\n await this.deps.session.clear();\n return null;\n }\n }\n\n /**\n * Boot helper — call this once on app start. Restores the session AND, when a\n * passkey is enrolled, silently unlocks the identity via WebAuthn (recovering\n * the master seed so the ratchet keypair rehydrates and `client.kv` works).\n * The seed is never persisted, so a passkey (or password) is the only way to\n * unlock after a reload — this keeps that off the app's plate.\n *\n * Returns `{ user, unlocked }`. When `unlocked` is false (no passkey, the\n * user cancelled, or the browser required a gesture), prompt for a password\n * and call {@link unlock}. Apps need no key-management scaffolding beyond this.\n */\n async resume(): Promise<{ user: AuthUser | null; unlocked: boolean }> {\n const user = await this.restore();\n if (!user) return { user: null, unlocked: false };\n if (this.deps.session.isUnlocked) return { user, unlocked: true };\n try {\n const factors = await this.listFactors();\n // Only auto-attempt when a passkey is usable from THIS origin.\n //\n // Passkeys are per-origin, and an account's passkey may belong to a\n // different host entirely (hosted-auth enrolment records\n // `auth.muhkoo.dev`, so a user who added a passkey there is\n // mismatched on every app host). Attempting anyway means\n // `loginWithPasskey` does an unauthenticated vault read for a\n // passkey this origin doesn't have. Today that returns a decoy with\n // no `prfSalt`, so it fails the guard before touching WebAuthn — the\n // silence is incidental. Once the decoy is reshaped to be\n // indistinguishable (it must carry `prfSalt` to stop being an\n // account-enumeration oracle) that same call would sail through and\n // fire a modal `navigator.credentials.get()` at page load, on every\n // boot, for a credential that does not exist. `resume()` is awaited\n // inside every app's readiness gate, so that dialog lands on the\n // splash screen before the user has asked for anything.\n //\n // `listFactors` is session-authenticated and returns real records,\n // so decoys never appear here — this reads true rpIds.\n //\n // `passkeyUsableFromOrigin`, NOT `rpIdUsableForOrigin`: a factor\n // with no recorded rpId predates per-origin enrolment and is still\n // usable (`loginWithPasskey` resolves it as `params.rpId ?? host`).\n // The raw predicate is false for undefined, so using it here would\n // skip exactly those users — the regression that locked legacy\n // passkey holders out of production twice.\n const host = defaultRpId();\n if (factors.some((f) => f.type === \"passkey\" && passkeyUsableFromOrigin(f.rpId, host))) {\n await this.loginWithPasskey(user.username);\n }\n } catch {\n /* no passkey / cancelled / no user gesture — leave locked for a prompt */\n }\n return { user, unlocked: this.deps.session.isUnlocked };\n }\n\n /**\n * Re-derive identity material for an already-authenticated (restored)\n * session, so the client can decrypt storage and run the ratchet. Verifies\n * the password by checking the derived commitment matches the session's.\n */\n async unlock(password: string): Promise<void> {\n const username = this.deps.session.username;\n const expected = this.deps.session.commitment;\n if (!username || !expected) {\n throw new Error(\"ZkAuth.unlock: no active session to unlock — sign in first.\");\n }\n const vaultSeed = await this.tryUnlockSeed(username, password);\n const seed = vaultSeed ?? await deriveMasterSeedFromPassword(username, password);\n const identity = await deriveIdentityFromSeed(seed);\n const commitment = await this.commitmentFor(identity);\n if (commitment !== expected) {\n throw new Error(\"ZkAuth.unlock: incorrect password (commitment mismatch).\");\n }\n this.deps.session.setIdentity(identity);\n this.deps.session.setSeed(seed);\n // Migrate a legacy account into the vault if it has no password factor.\n if (!vaultSeed) await this.migrateLegacyPasswordFactor(username, password, seed);\n }\n\n /**\n * Generate a 24-word **recovery phrase** that encodes the master seed, and\n * record a marker in the vault so the UI knows one exists. Show the returned\n * phrase to the user ONCE — it's never stored server-side (the phrase *is* the\n * seed). Requires being signed in (the seed must be held in memory).\n */\n async enrollRecoveryPhrase(): Promise<string> {\n const seed = this.deps.session.seed;\n const token = this.deps.session.token;\n if (!seed || !token) {\n throw new Error(\"Sign in first to set up a recovery phrase.\");\n }\n const mnemonic = seedToMnemonic(seed);\n await this.deps.auth.vaultPutFactor(token, { id: \"phrase\", type: \"phrase-marker\", createdAt: Date.now() });\n return mnemonic;\n }\n\n /**\n * Recover an account with its recovery phrase (the \"forgot password\" path).\n * Decodes the phrase to the master seed → identity → session. After this,\n * call {@link changePassword} to set a new password. No server lookup needed.\n */\n async recoverWithPhrase(username: string, mnemonic: string, opts: LoginOptions = {}): Promise<AuthUser> {\n const seed = mnemonicToSeed(mnemonic);\n const identity = await deriveIdentityFromSeed(seed);\n const user = await this.proveAndStore(username, identity, opts);\n this.deps.session.setSeed(seed);\n return user;\n }\n\n /**\n * Add an **email** as a recovery + login factor (M2 verification-gated:\n * the server only releases the split-key OPRF eval after the address is\n * OTP-verified). Sends the code, then returns a `confirm` continuation:\n *\n * const { confirm } = await client.auth.zk.enrollEmailFactor(\"me@x.com\");\n * await confirm(codeFromInbox);\n *\n * Requires being signed in with the seed held (like the other enrolls).\n * Custody note: gated factors trade some custody for recoverability — the\n * trade-off should be disclosed in the enroll UI.\n */\n async enrollEmailFactor(email: string): Promise<{ email: string; confirm: (code: string) => Promise<void> }> {\n const seed = this.deps.session.seed;\n const token = this.deps.session.token;\n const username = this.deps.session.username;\n if (!seed || !token || !username) {\n throw new Error(\"Sign in first to add a recovery email.\");\n }\n await this.deps.auth.emailOtpStart({ token, email });\n return {\n email,\n confirm: async (code: string) => {\n const { verifyToken, email: verified } = await this.deps.auth.emailOtpVerify({ token, code });\n const input = await emailFactorInput(username, verified);\n const { blind, blinded } = gatedBlind(input);\n const evals = await this.deps.auth.oprfEvaluateGated(username, toBase64(blinded), \"email\", \"enroll\", verifyToken);\n const key = await gatedWrapKey(input, blind, evals.evaluated, evals.evaluated2);\n const wrapped = await wrapSeed(seed, key);\n await this.deps.auth.vaultPutFactor(\n token,\n { id: \"email\", type: \"email\", wrap: wrapped.ct, iv: wrapped.iv, params: { email: verified }, createdAt: Date.now() },\n verifyToken,\n );\n },\n };\n }\n\n /**\n * Recover an account via its enrolled **email** factor. Sends a code to the\n * enrolled address (the response never reveals whether one exists), then\n * `confirm(code)` completes: gated read + split-key eval → unwrap seed →\n * normal ZK login. After this, call {@link changePassword} to set a new\n * password.\n *\n * const { confirm } = await client.auth.zk.recoverWithEmail(\"alice\");\n * const user = await confirm(codeFromInbox);\n */\n async recoverWithEmail(username: string, opts: LoginOptions = {}): Promise<{ confirm: (code: string) => Promise<AuthUser> }> {\n await this.deps.auth.emailOtpStart({ username });\n return {\n confirm: async (code: string) => {\n const { verifyToken, email } = await this.deps.auth.emailOtpVerify({ username, code });\n const { factor } = await this.deps.auth.vaultRead(username, \"email\", verifyToken);\n if (!factor?.wrap || !factor?.iv) {\n throw new Error(\"This account has no email recovery set up.\");\n }\n const input = await emailFactorInput(username, email);\n const { blind, blinded } = gatedBlind(input);\n const evals = await this.deps.auth.oprfEvaluateGated(username, toBase64(blinded), \"email\", \"recover\", verifyToken);\n const key = await gatedWrapKey(input, blind, evals.evaluated, evals.evaluated2);\n const seed = await unwrapSeed({ iv: factor.iv, ct: factor.wrap }, key);\n const identity = await deriveIdentityFromSeed(seed);\n const user = await this.proveAndStore(username, identity, opts);\n this.deps.session.setSeed(seed);\n return user;\n },\n };\n }\n\n // --- Google factor (M2.3) ------------------------------------------------\n // Google is pure authentication UX: its verified ID token gates the\n // split-key OPRF eval that releases the master seed. The ZK identity layer\n // is unchanged. The app obtains `idToken` via Google Identity Services and\n // passes it in; the SDK never renders Google UI.\n\n /**\n * Link a Google account as a recovery + login factor. Requires being signed\n * in with the seed held. `idToken` is a fresh Google ID token (GIS).\n */\n async enrollGoogleFactor(idToken: string): Promise<void> {\n const seed = this.deps.session.seed;\n const token = this.deps.session.token;\n const username = this.deps.session.username;\n if (!seed || !token || !username) throw new Error(\"Sign in first to link a Google account.\");\n const { verifyToken, sub, emailHint } = await this.deps.auth.googleVerify({ idToken, token });\n const input = await googleFactorInput(username, sub);\n const { blind, blinded } = gatedBlind(input);\n const evals = await this.deps.auth.oprfEvaluateGated(username, toBase64(blinded), \"google\", \"enroll\", verifyToken);\n const key = await gatedWrapKey(input, blind, evals.evaluated, evals.evaluated2);\n const wrapped = await wrapSeed(seed, key);\n await this.deps.auth.vaultPutFactor(\n token,\n { id: \"google\", type: \"google\", wrap: wrapped.ct, iv: wrapped.iv, params: { sub, emailHint: emailHint ?? undefined }, createdAt: Date.now() },\n verifyToken,\n );\n }\n\n /**\n * Sign in with Google — verify the ID token, unlock the seed via the gated\n * split-key eval, and establish a session. Same machinery serves \"Sign in\n * with Google\" and \"recover with Google\"; the account must have linked the\n * factor first.\n */\n async loginWithGoogle(username: string, idToken: string, opts: LoginOptions = {}): Promise<AuthUser> {\n const { verifyToken, sub } = await this.deps.auth.googleVerify({ idToken, username });\n const { factor } = await this.deps.auth.vaultRead(username, \"google\", verifyToken);\n if (!factor?.wrap || !factor?.iv) throw new Error(\"No Google account is linked to this username.\");\n const input = await googleFactorInput(username, sub);\n const { blind, blinded } = gatedBlind(input);\n const evals = await this.deps.auth.oprfEvaluateGated(username, toBase64(blinded), \"google\", \"recover\", verifyToken);\n const key = await gatedWrapKey(input, blind, evals.evaluated, evals.evaluated2);\n const seed = await unwrapSeed({ iv: factor.iv, ct: factor.wrap }, key);\n const identity = await deriveIdentityFromSeed(seed);\n const user = await this.proveAndStore(username, identity, opts);\n this.deps.session.setSeed(seed);\n return user;\n }\n\n /**\n * Register a brand-new, **passwordless** account whose only factor is Google.\n * A random master seed is generated and wrapped under the Google-gated key;\n * the user can add a password / passkey / phrase later. The ZK registration\n * is identical to a password signup.\n */\n async registerWithGoogle(username: string, idToken: string): Promise<AuthUser> {\n const seed = randomSeed();\n const identity = await deriveIdentityFromSeed(seed);\n const commitment = await this.commitmentFor(identity);\n await this.deps.auth.register({\n username,\n commitment,\n ecdhPublicKey: await exportPublicKeyBase64(identity.ecdhKeyPair.publicKey),\n ecdsaPublicKey: await exportPublicKeyBase64(identity.ecdsaKeyPair.publicKey),\n email: null,\n });\n const user = await this.proveAndStore(username, identity, {});\n this.deps.session.setSeed(seed);\n // Enroll Google as the sole factor (session + seed are now in hand).\n await this.enrollGoogleFactor(idToken);\n return user;\n }\n\n /**\n * Change the password — re-wraps the (unchanged) master seed under the new\n * password's OPRF-gated key. The identity/commitment never moves. Requires\n * being signed in (or freshly recovered) so the seed is held.\n */\n async changePassword(newPassword: string): Promise<void> {\n const seed = this.deps.session.seed;\n const username = this.deps.session.username;\n const token = this.deps.session.token;\n if (!seed || !username || !token) {\n throw new Error(\"Sign in first to change your password.\");\n }\n await this.enrollPasswordFactor(username, newPassword, seed, token);\n }\n\n /** Whether this browser can use passkeys (WebAuthn) at all. */\n passkeyAvailable(): boolean {\n return passkeySupported();\n }\n\n /**\n * Whether this browser's authenticator can do the **PRF extension** our\n * passkey factor requires. A browser may support passkeys generally but not\n * PRF — in which case enrolling one would fail. Resolves `true`/`false`, or\n * `null` when it can't be determined (no capabilities API). Use this to gate\n * the passkey UI so users don't hit a dead-end error.\n */\n async passkeyPrfAvailable(): Promise<boolean | null> {\n return passkeyPrfCapable();\n }\n\n /**\n * Add a **passkey** recovery factor. Creates a WebAuthn passkey with PRF,\n * wraps the master seed under its PRF output, and stores the factor. The\n * passkey (synced via the platform's keychain) then unlocks the account on\n * any device — no password. Requires being signed in (seed held in memory).\n */\n async enrollPasskey(opts?: { rpId?: string; rpName?: string; label?: string }): Promise<void> {\n const seed = this.deps.session.seed;\n const token = this.deps.session.token;\n const username = this.deps.session.username;\n if (!seed || !token || !username) {\n throw new Error(\"Sign in first to add a passkey.\");\n }\n const rpId = opts?.rpId ?? defaultRpId();\n const { credentialId, prfSalt, prfOutput } = await createPasskeyWithPrf({\n rpId,\n rpName: opts?.rpName ?? \"Muhkoo\",\n username,\n });\n const key = await wrapKeyFromBytes(prfOutput, \"muhkoo-passkey-wrap\");\n const wrapped = await wrapSeed(seed, key);\n await this.deps.auth.vaultPutFactor(token, {\n id: `passkey:${toBase64(credentialId).slice(0, 16)}`,\n type: \"passkey\",\n wrap: wrapped.ct,\n iv: wrapped.iv,\n params: { credentialId: toBase64(credentialId), prfSalt: toBase64(prfSalt), rpId },\n label: opts?.label ?? \"Passkey\",\n createdAt: Date.now(),\n });\n }\n\n /**\n * Sign in with a passkey (no password). Reads the passkey factor, evaluates\n * its PRF, unwraps the master seed → identity → session.\n */\n async loginWithPasskey(username: string, opts: LoginOptions = {}): Promise<AuthUser> {\n // Ask for THIS origin's passkey — they're enrolled per-origin, so the\n // account's first passkey may belong to a different host entirely.\n const host = defaultRpId();\n const { factor } = await this.deps.auth.vaultRead(username, \"passkey\", undefined, host);\n const params = factor?.params as { credentialId?: string; prfSalt?: string; rpId?: string } | undefined;\n if (!factor?.wrap || !factor?.iv || !params?.credentialId || !params?.prfSalt) {\n throw new Error(\"No passkey is set up for this account.\");\n }\n const rpId = params.rpId ?? host;\n // Refuse a foreign rpId up front: WebAuthn would throw a raw \"requested\n // RPID did not match the origin\", which reads as a hard failure to the\n // user. A typed error lets the app fall back to another factor and offer\n // to enroll a passkey for this origin.\n if (!rpIdUsableForOrigin(rpId, host)) throw new PasskeyOriginError();\n const prfOutput = await evaluatePasskeyPrf(\n rpId,\n fromBase64(params.credentialId),\n fromBase64(params.prfSalt),\n );\n const key = await wrapKeyFromBytes(prfOutput, \"muhkoo-passkey-wrap\");\n const seed = await unwrapSeed({ iv: factor.iv, ct: factor.wrap }, key);\n const identity = await deriveIdentityFromSeed(seed);\n const user = await this.proveAndStore(username, identity, opts);\n this.deps.session.setSeed(seed);\n return user;\n }\n\n /**\n * List the user's enrolled login methods (metadata only). Session-authed.\n * Gated factors (email/google) carry a `masked` display hint\n * (\"m•••@gmail.com\"); the full value is never returned.\n */\n async listFactors(): Promise<Array<{ id: string; type: string; label?: string; createdAt?: number; masked?: string; rpId?: string }>> {\n const token = this.deps.session.token;\n if (!token) throw new Error(\"Sign in first to view your login methods.\");\n const { factors } = await this.deps.auth.vaultFactors(token);\n return factors;\n }\n\n /**\n * Is a passkey enrolled that can unlock from THIS origin?\n *\n * Passkeys are origin-bound, so an app served on both a custom domain and the\n * platform host needs one per host. Use this to decide whether to offer\n * \"Unlock with passkey\" or go straight to sign-in — prompting with another\n * origin's passkey fails with a raw WebAuthn error. Requires a session\n * (metadata read); returns false when signed out or unsupported.\n */\n async hasPasskeyForThisOrigin(): Promise<boolean> {\n if (!passkeySupported()) return false;\n try {\n const host = defaultRpId();\n const factors = await this.listFactors();\n return factors.some((f) => f.type === \"passkey\" && rpIdUsableForOrigin(f.rpId, host));\n } catch {\n return false;\n }\n }\n\n /** Remove a login method by id (can't remove your only one). Session-authed. */\n async removeFactor(id: string): Promise<void> {\n const token = this.deps.session.token;\n if (!token) throw new Error(\"Sign in first to manage your login methods.\");\n await this.deps.auth.vaultDeleteFactor(token, id);\n }\n\n /** Sign out: clears the session, identity, and persisted token. */\n async logout(): Promise<void> {\n await this.deps.session.clear();\n }\n\n /** The signed-in user, or `null`. Synchronous read of current state. */\n get user(): AuthUser | null {\n const username = this.deps.session.username;\n const commitment = this.deps.session.commitment;\n return username && commitment ? { username, commitment } : null;\n }\n\n /**\n * The derived identity material for the current session, or `null` when\n * locked. Exposed so apps that still drive lower-level primitives (e.g. a\n * chat ratchet keyed off the same identity) can reuse it without\n * re-deriving from the password.\n */\n get identity(): ZkIdentity | null {\n return this.deps.session.identity;\n }\n\n /** The current session token, or `null` when signed out. */\n get token(): string | null {\n return this.deps.session.token;\n }\n\n /**\n * The master seed as base64, or `null` when locked. The host app uses this to\n * wrap app-level data (e.g. chat ratchet keys) to the **seed** instead of the\n * password — so that data survives password changes and can be unlocked by a\n * passwordless (passkey) login, both of which recover the same seed.\n */\n get seedBase64(): string | null {\n const seed = this.deps.session.seed;\n return seed ? toBase64(seed) : null;\n }\n\n /**\n * Pair this machine, so it can unlock the account later without a password.\n *\n * Generates a random 32-byte key, wraps the master seed under it, and stores\n * only the CIPHERTEXT in the vault as a `device` factor. The key is returned\n * for the caller to persist locally and is never sent anywhere.\n *\n * The split is the point: the seed itself never lands on disk, and the\n * server holds a blob it cannot open. Revoking the factor\n * ({@link revokeDevice}) makes the local key inert immediately — which a\n * stored master seed can never be, because nothing can reach out and\n * un-store it.\n *\n * Returns the factor id and the key, both base64. Losing the key just means\n * re-pairing; leaking it is equivalent to leaking the seed for as long as\n * the factor exists, so store it with the tightest permissions available.\n */\n async enrollDevice(label: string): Promise<{ factorId: string; deviceKey: string }> {\n const seed = this.deps.session.seed;\n const token = this.deps.session.token;\n if (!seed || !token) throw new Error(\"Sign in first to pair this device.\");\n\n const keyBytes = randomSeed(); // 32 bytes of CSPRNG\n const key = await wrapKeyFromBytes(keyBytes, DEVICE_WRAP_INFO);\n const wrapped = await wrapSeed(seed, key);\n // 128 bits of id, so reading a factor by id is not an enumeration surface.\n const factorId = `device:${toBase64(randomSeed()).replace(/[+/=]/g, \"\").slice(0, 22)}`;\n\n await this.deps.auth.vaultPutFactor(token, {\n id: factorId,\n type: \"device\",\n wrap: wrapped.ct,\n iv: wrapped.iv,\n label,\n createdAt: Date.now(),\n });\n return { factorId, deviceKey: toBase64(keyBytes) };\n }\n\n /**\n * Unlock using a key stored by {@link enrollDevice}.\n *\n * Fetches the wrapped seed and opens it locally. Establishes the encryption\n * identity only — pair it with a session for calls that need one.\n *\n * Throws distinguishably: a REVOKED factor is gone from the vault and says\n * so, where a wrong key fails to decrypt. A machine that has had its access\n * withdrawn should be able to tell you that, not just \"decryption failed\".\n */\n async unlockWithDevice(username: string, factorId: string, deviceKey: string): Promise<void> {\n const seed = await this.openDeviceFactor(username, factorId, deviceKey);\n this.deps.session.setSeed(seed);\n }\n\n /**\n * Sign in using a key stored by {@link enrollDevice} — session AND seed.\n *\n * {@link unlockWithDevice} recovers only the encryption identity, which suits\n * a CLI that already holds a session token on disk. A browser generally does\n * not: its session expires while the device pairing is still perfectly valid,\n * and at that point it holds the means to decrypt everything but no way to\n * make an authenticated call. So this derives the ZK identity from the\n * recovered seed and proves it, exactly as {@link recoverWithPhrase} does —\n * the seed has always been sufficient to authenticate, and withholding that\n * here just meant re-typing a password to prove something already known.\n *\n * This is what makes single sign-on possible without any credential at rest:\n * the seed is never stored, only a key that opens a server-held blob, and\n * revoking the factor ({@link revokeDevice}) severs it immediately.\n *\n * Throws distinguishably on a revoked pairing, so a caller can clear its\n * stored key and fall back to a password rather than retrying forever.\n */\n async loginWithDevice(username: string, factorId: string, deviceKey: string, opts: LoginOptions = {}): Promise<AuthUser> {\n const seed = await this.openDeviceFactor(username, factorId, deviceKey);\n const identity = await deriveIdentityFromSeed(seed);\n const user = await this.proveAndStore(username, identity, opts);\n this.deps.session.setSeed(seed);\n return user;\n }\n\n /** Fetch and open a `device` factor. Shared by the unlock and login paths so\n * the two can never disagree about what a revoked pairing looks like. */\n private async openDeviceFactor(username: string, factorId: string, deviceKey: string): Promise<Uint8Array> {\n const { factor } = await this.deps.auth.vaultRead(username, \"device\", undefined, undefined, factorId);\n if (!factor) {\n throw new DeviceRevokedError();\n }\n if (!factor.wrap || !factor.iv) throw new Error(\"The stored device factor is incomplete; re-pair this device.\");\n const key = await wrapKeyFromBytes(fromBase64(deviceKey), DEVICE_WRAP_INFO);\n return unwrapSeed({ iv: factor.iv, ct: factor.wrap }, key);\n }\n\n /** Paired machines, newest first. Metadata only — never the ciphertext. */\n async listDevices(): Promise<Array<{ id: string; label?: string; createdAt?: number }>> {\n const token = this.deps.session.token;\n if (!token) throw new Error(\"Sign in first to list paired devices.\");\n const { factors } = await this.deps.auth.vaultFactors(token);\n return factors\n .filter((f) => f.type === \"device\")\n .map((f) => ({ id: f.id, label: f.label, createdAt: f.createdAt }))\n .sort((a, b) => (b.createdAt ?? 0) - (a.createdAt ?? 0));\n }\n\n /** Withdraw a machine's access. Its stored key stops working immediately. */\n async revokeDevice(factorId: string): Promise<boolean> {\n const token = this.deps.session.token;\n if (!token) throw new Error(\"Sign in first to revoke a device.\");\n const { deleted } = await this.deps.auth.vaultDeleteFactor(token, factorId);\n return deleted;\n }\n\n /**\n * Restore an unlocked identity from a seed you already hold.\n *\n * The inverse of {@link seedBase64}, for hosts that persist the seed\n * themselves rather than re-deriving it from a password: a CLI holding it in\n * a 0600 file, a server-side tool, a test. Without this the seed is a\n * one-way export and anything outside a browser has to run a full ZK login —\n * circuits download and proof — on every single invocation.\n *\n * Establishes the ENCRYPTION identity only. It does not authenticate: pair\n * it with a session token (`sessionStore`) for calls that need one.\n *\n * Treat a persisted seed as the master credential it is. It is not scoped\n * and cannot be revoked server-side the way a session token can — rotating\n * it means moving the identity.\n */\n unlockWithSeed(seedBase64: string): void {\n const seed = fromBase64(seedBase64);\n if (seed.length !== 32) {\n throw new Error(`auth.zk.unlockWithSeed: expected a 32-byte seed, got ${seed.length}`);\n }\n this.deps.session.setSeed(seed);\n }\n\n // -------------------------------------------------------------------------\n\n /** Poseidon commitment for an identity — the value the server stores. */\n private async commitmentFor(identity: ZkIdentity): Promise<string> {\n // generateAuthProof recomputes this internally, but registration needs\n // it before any challenge exists, so derive it directly here.\n const ecdsaPubHex = await exportPublicKeyHex(identity.ecdsaKeyPair.publicKey);\n return buildCommitment(identity.secretHex, identity.saltHex, ecdsaPubHex);\n }\n\n // ---- Identity vault (M1.0) ----------------------------------------------\n\n /**\n * Derive the OPRF-gated wrap key for the password factor: `scrypt(password)`\n * is blinded, evaluated by the server's secret OPRF key (so it can't be\n * derived offline), unblinded, then HKDF'd into an AES-GCM key.\n */\n private async passwordWrapKey(username: string, password: string): Promise<CryptoKey> {\n const pre = passwordPreHash(username, password);\n const { blind, blinded } = oprfBlind(pre);\n const { evaluated } = await this.deps.auth.oprfEvaluate(username, toBase64(blinded));\n return wrapKeyFromOprf(oprfFinalize(pre, blind, fromBase64(evaluated)));\n }\n\n /**\n * Try to recover the master seed from the password factor.\n *\n * Returns `null` only when the vault read SUCCEEDS but the seed can't be\n * unwrapped — i.e. there's no real factor (a pre-vault/legacy account, whose\n * read returns a decoy that won't unwrap) or the password is wrong. The caller\n * then legitimately falls back to the legacy password-derived identity.\n *\n * Throws {@link VaultUnavailableError} when the vault itself can't be reached\n * (network / 5xx / rate-limit) — so a *transient* failure is NOT silently\n * turned into a legacy fallback (which would surface as \"commitment mismatch\").\n */\n private async tryUnlockSeed(username: string, password: string): Promise<Uint8Array | null> {\n const read = await this.deps.auth\n .vaultRead(username, \"password\")\n .catch((e) => { throw new VaultUnavailableError(e); });\n const factor = read.factor;\n if (!factor?.wrap || !factor?.iv) return null; // genuinely no factor → legacy account\n\n const key = await this\n .passwordWrapKey(username, password)\n .catch((e) => { throw new VaultUnavailableError(e); }); // OPRF eval unreachable / rate-limited\n\n try {\n return await unwrapSeed({ iv: factor.iv, ct: factor.wrap }, key);\n } catch {\n return null; // factor present but won't unwrap → wrong password, or a decoy\n }\n }\n\n /**\n * Enroll/replace the password factor for `username` — wraps `seed` under the\n * OPRF-gated key and stores it (needs a session `token`).\n *\n * Retries: this is the step that persists the (otherwise in-memory-only)\n * master seed. If it fails after a fresh registration the account would be\n * unrecoverable, so we retry a few times before surfacing the error.\n */\n private async enrollPasswordFactor(username: string, password: string, seed: Uint8Array, token: string): Promise<void> {\n const key = await this.passwordWrapKey(username, password);\n const wrapped = await wrapSeed(seed, key);\n const factor = { id: \"password\", type: \"password\" as const, wrap: wrapped.ct, iv: wrapped.iv, createdAt: Date.now() };\n\n let lastErr: unknown;\n for (let attempt = 0; attempt < 3; attempt++) {\n try {\n await this.deps.auth.vaultPutFactor(token, factor);\n return;\n } catch (err) {\n lastErr = err;\n await new Promise((r) => setTimeout(r, 200 * (attempt + 1)));\n }\n }\n throw new Error(\n \"Registration could not finish securing your account (vault enrollment failed). \" +\n \"Please try again. \" + (lastErr instanceof Error ? lastErr.message : \"\"),\n );\n }\n}\n\n/** `client.auth` — the auth namespace. Strategies hang off here. */\nexport class AuthNamespace {\n readonly zk: ZkAuth;\n /** Centralized hosted auth (auth.muhkoo.dev) — `client.auth.hosted.login(...)`. */\n readonly hosted: HostedAuth;\n constructor(deps: ZkAuthDeps & { authBaseUrl: string; apiBaseUrl?: string }) {\n this.zk = new ZkAuth(deps);\n this.hosted = new HostedAuth({\n auth: deps.auth,\n session: deps.session,\n authBaseUrl: deps.authBaseUrl,\n // Forwarded explicitly so device pairing resolves the accelerator\n // origin and the circuit assets the SAME way the rest of the client\n // does. Without these, `HostedAuth` falls back to reading\n // `AuthClient.baseUrl` reflectively and to `defaultCircuitUrls`,\n // which silently ignores an app's `ClientOptions.circuits` override.\n apiBaseUrl: deps.apiBaseUrl,\n circuits: deps.circuits,\n });\n }\n\n /** Convenience pass-through: the currently signed-in user, or `null`. */\n get user(): AuthUser | null {\n return this.zk.user;\n }\n}\n\nexport default AuthNamespace;\n","/**\n * `StorageCipher` — transparent at-rest encryption for `client.storage`.\n *\n * Derives a single AES-256-GCM key from the user's ZK identity (HKDF over the\n * secret, salted with the identity salt) and uses it to seal/open the JSON\n * values the storage namespace persists. The accelerator only ever sees the\n * {@link EncryptedEnvelope} — opaque ciphertext + a per-value random IV.\n *\n * The key is deterministic in the identity, so the same `(username, password)`\n * decrypts the same data on any device — no key material is shipped or stored.\n */\n\nimport {\n deriveBitsHkdf,\n encryptAesGcm,\n decryptAesGcm,\n randomBytes,\n AES_GCM_IV_BYTES,\n AES_GCM_KEY_BYTES,\n} from \"./primitives\";\nimport { fromHex, toBase64, fromBase64, utf8Encode, utf8Decode } from \"../utilities/bytes\";\n\n/** The on-the-wire shape of an encrypted value. `_enc` tags the scheme. */\nexport interface EncryptedEnvelope {\n _enc: \"a256gcm\";\n /** Base64 random 12-byte GCM IV. */\n iv: string;\n /** Base64 ciphertext with the appended 16-byte GCM tag. */\n ct: string;\n}\n\n/** HKDF label binding the derived key to the storage-at-rest purpose. */\nconst STORAGE_KEY_INFO = \"muhkoo-storage-v1\";\n\nexport class StorageCipher {\n /** Lazily-derived AES key, memoized for the cipher's lifetime. */\n private readonly keyPromise: Promise<Uint8Array>;\n\n constructor(secretHex: string, saltHex: string) {\n this.keyPromise = deriveBitsHkdf(\n fromHex(secretHex),\n STORAGE_KEY_INFO,\n AES_GCM_KEY_BYTES,\n fromHex(saltHex),\n );\n }\n\n /** Seal a JSON-serializable value into an {@link EncryptedEnvelope}. */\n async encrypt(value: unknown): Promise<EncryptedEnvelope> {\n const key = await this.keyPromise;\n const iv = randomBytes(AES_GCM_IV_BYTES);\n const plaintext = utf8Encode(JSON.stringify(value));\n const ciphertext = await encryptAesGcm(key, iv, plaintext);\n return { _enc: \"a256gcm\", iv: toBase64(iv), ct: toBase64(ciphertext) };\n }\n\n /** Open an {@link EncryptedEnvelope} back into the original value. */\n async decrypt<T = unknown>(envelope: EncryptedEnvelope): Promise<T> {\n const key = await this.keyPromise;\n const iv = fromBase64(envelope.iv);\n const ciphertext = fromBase64(envelope.ct);\n const plaintext = await decryptAesGcm(key, iv, ciphertext);\n return JSON.parse(utf8Decode(plaintext)) as T;\n }\n\n /** Type guard — is `v` an encrypted envelope (vs. a plaintext value)? */\n static isEnvelope(v: unknown): v is EncryptedEnvelope {\n return (\n !!v &&\n typeof v === \"object\" &&\n (v as { _enc?: unknown })._enc === \"a256gcm\" &&\n typeof (v as { iv?: unknown }).iv === \"string\" &&\n typeof (v as { ct?: unknown }).ct === \"string\"\n );\n }\n}\n\nexport default StorageCipher;\n","/**\n * `client.kv` — per-user key/value storage backed by the accelerator's personal\n * space.\n *\n * await client.kv.set('todos', id, { title, completed })\n * const todo = await client.kv.get('todos', id)\n * const ids = await client.kv.list('todos')\n * await client.kv.delete('todos', id)\n * const off = client.kv.on('change', e => …) // realtime, cross-device\n *\n * A *collection* is a key namespace within the user's space; the stored key is\n * `${collection}/${id}`. Operations are authorized by the user's session token\n * (stamped on every request by {@link HttpClient}) — no per-op Groth16 proof.\n *\n * Values are encrypted at rest by default ({@link StorageCipher}, an AES-GCM\n * key derived from the ZK identity); pass `{ encrypt: false }` to store\n * plaintext. The realtime feed rides the personal space's websocket over a\n * {@link WSTransport} (heartbeat keep-alive + auto-reconnect, event-namespaced\n * so it doesn't cross wires with chat/space transports).\n *\n * For **files** (blobs), use `client.storage` instead — `client.kv` is for\n * small structured values. `query()` is intentionally deferred.\n */\n\nimport { HttpClient, HttpError } from \"../HttpClient\";\nimport type { SessionState } from \"../Session\";\nimport type { ZkIdentity } from \"../../auth/identity\";\nimport { StorageCipher } from \"../../crypto/StorageCipher\";\nimport { WSTransport } from \"../../transport/WSTransport\";\nimport { EventCoreEvents } from \"../../events\";\nimport type { KvCache } from \"../../offline/KvCache\";\nimport type { QueueEntry } from \"../../offline/store/OfflineStore\";\n\nexport interface KvNamespaceDeps {\n http: HttpClient;\n session: SessionState;\n /** WebSocket base (ws/wss) for the change feed; derived from baseUrl. */\n wsBaseUrl: string;\n /** Offline cache + queue. Undefined ⇒ no offline behavior (network-only). */\n offline?: KvCache;\n}\n\nexport interface SetOptions {\n /** Encrypt the value at rest (default: true). */\n encrypt?: boolean;\n}\n\nexport interface StorageChangeEvent<T = unknown> {\n collection: string;\n id: string;\n type: \"set\" | \"delete\";\n /** The decrypted value for `set`; `null` for `delete`. */\n data: T | null;\n}\n\n/** Raw change frame pushed by `PersonalSpaceDO`'s websocket. */\ninterface ChangeFrame {\n _t: \"change\";\n key: string;\n op: \"set\" | \"delete\";\n value?: unknown;\n /** HLC stamp (present once the accelerator's LWW support is deployed). */\n hlc?: string;\n}\n\nexport class KvNamespace {\n /** One personal-space socket, shared by every subscriber. */\n private feed: {\n transport: WSTransport;\n handlers: Set<(frame: unknown) => void>;\n onMessage: (e: CustomEvent) => void;\n } | null = null;\n\n private cipher: StorageCipher | null = null;\n private cipherIdentity: ZkIdentity | null = null;\n\n constructor(private readonly deps: KvNamespaceDeps) {\n // Replay queued kv writes on reconnect by re-issuing the original request.\n if (deps.offline?.enabled) {\n // Registration is on the manager via the cache's manager handle; the\n // Client wires the replayer (it owns the manager) — see Client.ts.\n }\n }\n\n /** Replay one queued kv mutation (called by the sync engine). */\n async replay(entry: QueueEntry): Promise<void> {\n const a = entry.args as { collection: string; id: string; stored?: unknown; hlc: string };\n if (entry.method === \"set\") {\n await this.deps.http.post(this.kvPath(a.collection, a.id), { value: a.stored, hlc: a.hlc });\n } else {\n await this.deps.http.del(this.kvPath(a.collection, a.id), { hlc: a.hlc });\n }\n }\n\n /** Store `value` under `collection`/`id` (encrypted at rest by default). */\n async set<T = unknown>(collection: string, id: string, value: T, opts?: SetOptions): Promise<void> {\n const encrypt = opts?.encrypt !== false;\n const stored = encrypt ? await this.getCipher().encrypt(value) : value;\n const offline = this.deps.offline;\n if (!offline?.enabled) {\n await this.deps.http.post(this.kvPath(collection, id), { value: stored });\n return;\n }\n const fullKey = `${collection}/${id}`;\n const hlc = await offline.nextHlc();\n await offline.writeLocal(this.commitment(), fullKey, stored, hlc);\n try {\n await this.deps.http.post(this.kvPath(collection, id), { value: stored, hlc });\n } catch (err) {\n if (err instanceof HttpError) throw err; // server reachable + refused\n await offline.enqueue(\"set\", { collection, id, stored, hlc }, hlc, offline.newClientId());\n }\n }\n\n /** Fetch the value at `collection`/`id`, or `null` if absent. */\n async get<T = unknown>(collection: string, id: string): Promise<T | null> {\n const offline = this.deps.offline;\n if (!offline?.enabled) {\n const res = await this.deps.http.post<{ value: unknown }>(`${this.kvPath(collection, id)}/get`, {});\n return this.decode<T>(res.value);\n }\n const fullKey = `${collection}/${id}`;\n try {\n const res = await this.deps.http.post<{ value: unknown; hlc?: string }>(\n `${this.kvPath(collection, id)}/get`,\n {},\n );\n // Refresh the cache from the authoritative read (merge by HLC).\n await offline.mergeRemote(\n this.commitment(),\n fullKey,\n res.value ?? null,\n res.value == null ? \"delete\" : \"set\",\n res.hlc,\n );\n return this.decode<T>(res.value);\n } catch (err) {\n if (err instanceof HttpError) throw err; // a real server error, not offline\n const entry = await offline.read(this.commitment(), fullKey);\n if (!entry || entry.deleted) return null;\n return this.decode<T>(entry.value);\n }\n }\n\n /** Delete `collection`/`id`. Returns whether the key existed. */\n async delete(collection: string, id: string): Promise<boolean> {\n const offline = this.deps.offline;\n if (!offline?.enabled) {\n const res = await this.deps.http.del<{ ok: boolean; existed: boolean }>(this.kvPath(collection, id), {});\n return Boolean(res.existed);\n }\n const fullKey = `${collection}/${id}`;\n const hlc = await offline.nextHlc();\n await offline.deleteLocal(this.commitment(), fullKey, hlc);\n try {\n const res = await this.deps.http.del<{ ok: boolean; existed: boolean }>(this.kvPath(collection, id), { hlc });\n return Boolean(res.existed);\n } catch (err) {\n if (err instanceof HttpError) throw err;\n await offline.enqueue(\"delete\", { collection, id, hlc }, hlc, offline.newClientId());\n return true; // optimistic\n }\n }\n\n /** List the ids present in `collection`. */\n async list(collection: string): Promise<string[]> {\n const prefix = `${collection}/`;\n const offline = this.deps.offline;\n const fromKeys = (keys: string[]) =>\n keys.filter((k) => k.startsWith(prefix)).map((k) => k.slice(prefix.length));\n if (!offline?.enabled) {\n const res = await this.deps.http.post<{ keys: string[] }>(this.spacePath(\"/list\"), {});\n return fromKeys(res.keys ?? []);\n }\n try {\n const res = await this.deps.http.post<{ keys: string[] }>(this.spacePath(\"/list\"), {});\n // Union with cached live keys so un-synced offline creates still show.\n const cached = await offline.liveKeys(this.commitment());\n return [...new Set([...(res.keys ?? []), ...cached].filter((k) => k.startsWith(prefix)))].map((k) =>\n k.slice(prefix.length),\n );\n } catch (err) {\n if (err instanceof HttpError) throw err;\n return fromKeys(await offline.liveKeys(this.commitment()));\n }\n }\n\n /** Reserved — server-side query is deferred (see the overhaul plan). */\n async query(_collection: string, _filter?: unknown): Promise<never> {\n throw new Error(\"client.kv.query is not implemented yet (deferred in the SDK overhaul).\");\n }\n\n /**\n * Subscribe to realtime changes to this user's data across devices. Opens\n * the personal space's websocket and decrypts each change before handing\n * it to `handler`. Returns an unsubscribe function.\n *\n * Requires a `WebSocket` global (browsers; Node 22+ or a `ws` shim).\n */\n on<T = unknown>(event: \"change\", handler: (e: StorageChangeEvent<T>) => void): () => void {\n if (event !== \"change\") throw new Error(`client.kv: unknown event \"${event}\"`);\n\n if (typeof (globalThis as { WebSocket?: typeof WebSocket }).WebSocket !== \"function\") {\n throw new Error(\"client.kv.on: no `WebSocket` global available in this runtime.\");\n }\n const token = this.deps.session.token;\n if (!token) throw new Error(\"client.kv.on: not signed in.\");\n\n const commitment = this.commitment();\n const url = `${this.deps.wsBaseUrl}/api/personal/${encodeURIComponent(commitment)}/websocket?session=${encodeURIComponent(token)}`;\n\n // Ride a WSTransport rather than a bare socket: it keeps the (otherwise\n // idle) personal-space feed warm with heartbeat pings, auto-reconnects\n // if it drops, and namespaces its events by `id` so this feed never\n // crosses wires with chat/space transports on the shared EventCore bus.\n return this.onRaw((raw) => {\n void this.dispatchChange<T>(raw, handler);\n });\n }\n\n /**\n * Subscribe to the personal space's raw change feed.\n *\n * Every key this user owns crosses this socket, not only `client.kv`\n * collections — the VFS keeps its directory records here too. Consumers get\n * the frame untouched: no decryption, no offline-cache merge, because the\n * value's meaning depends on which subsystem wrote it.\n *\n * The transport is SHARED and reference-counted. `WSTransport` namespaces\n * its events by `id`, so two transports with the same id would cross wires\n * on the shared event bus — and a second socket to the same Durable Object\n * would be pure waste besides.\n */\n onRaw(handler: (frame: unknown) => void): () => void {\n if (typeof (globalThis as { WebSocket?: typeof WebSocket }).WebSocket !== \"function\") {\n throw new Error(\"client.kv.onRaw: no `WebSocket` global available in this runtime.\");\n }\n const token = this.deps.session.token;\n if (!token) throw new Error(\"client.kv.onRaw: not signed in.\");\n const commitment = this.commitment();\n\n if (!this.feed) {\n const url = `${this.deps.wsBaseUrl}/api/personal/${encodeURIComponent(commitment)}/websocket?session=${encodeURIComponent(token)}`;\n // Ride a WSTransport rather than a bare socket: it keeps the\n // (otherwise idle) feed warm with heartbeat pings, auto-reconnects\n // if it drops, and namespaces its events by `id`.\n const transport = new WSTransport({ url, id: `personal:${commitment}` });\n const handlers = new Set<(frame: unknown) => void>();\n const onMessage = (e: CustomEvent) => {\n for (const fn of handlers) fn(e.detail);\n };\n transport.on(EventCoreEvents.MESSAGE, onMessage);\n // Fire-and-forget: the feed is best-effort, and the transport queues\n // nothing it needs before CONNECTED (server→client only).\n void transport.connect();\n this.feed = { transport, handlers, onMessage };\n }\n\n const feed = this.feed;\n feed.handlers.add(handler);\n return () => {\n feed.handlers.delete(handler);\n // Last subscriber out closes the socket, so an app that unsubscribes\n // everything is not left holding an open connection.\n if (feed.handlers.size === 0 && this.feed === feed) {\n feed.transport.off(EventCoreEvents.MESSAGE, feed.onMessage);\n feed.transport.disconnect();\n this.feed = null;\n }\n };\n }\n\n // -------------------------------------------------------------------------\n // Internals\n // -------------------------------------------------------------------------\n\n private async dispatchChange<T>(\n raw: unknown,\n handler: (e: StorageChangeEvent<T>) => void,\n ): Promise<void> {\n let frame: ChangeFrame;\n try {\n frame = typeof raw === \"string\" ? JSON.parse(raw) : raw;\n } catch {\n return;\n }\n if (!frame || frame._t !== \"change\" || typeof frame.key !== \"string\") return;\n\n const slash = frame.key.indexOf(\"/\");\n if (slash < 0) return;\n const collection = frame.key.slice(0, slash);\n const id = frame.key.slice(slash + 1);\n\n // Keep the offline cache warm from the realtime feed (merge by HLC).\n if (this.deps.offline?.enabled) {\n await this.deps.offline.mergeRemote(\n this.commitment(),\n frame.key,\n frame.op === \"set\" ? frame.value ?? null : null,\n frame.op,\n frame.hlc,\n );\n }\n\n const data = frame.op === \"set\" ? await this.decode<T>(frame.value) : null;\n handler({ collection, id, type: frame.op, data });\n }\n\n /** Decode a stored value: decrypt envelopes, pass plaintext through. */\n private async decode<T>(value: unknown): Promise<T | null> {\n if (value == null) return null;\n if (StorageCipher.isEnvelope(value)) return this.getCipher().decrypt<T>(value);\n return value as T;\n }\n\n private commitment(): string {\n const c = this.deps.session.commitment;\n if (!c) throw new Error(\"client.kv: not signed in — call client.auth.zk.login() first.\");\n return c;\n }\n\n private spacePath(suffix: string): string {\n return `/api/personal/${encodeURIComponent(this.commitment())}${suffix}`;\n }\n\n private kvPath(collection: string, id: string): string {\n const key = `${collection}/${id}`;\n return this.spacePath(`/kv/${encodeURIComponent(key)}`);\n }\n\n /** The at-rest cipher for the current identity (re-derived if it changes). */\n private getCipher(): StorageCipher {\n const identity = this.deps.session.requireIdentity();\n if (this.cipher && this.cipherIdentity === identity) return this.cipher;\n this.cipher = new StorageCipher(identity.secretHex, identity.saltHex);\n this.cipherIdentity = identity;\n return this.cipher;\n }\n}\n\nexport default KvNamespace;\n","/**\n * `client.db` — the app's scalable database. A developer defines tables in the\n * Muhkoo portal (columns + indexes); each table is backed by its own Durable\n * Object SQLite instance and reachable through a sanitized REST gateway. This\n * namespace wraps that gateway:\n *\n * const todos = client.db.table('todos');\n * const { id } = await todos.insert({ title: 'Buy milk', done: false });\n * const one = await todos.get(id);\n * const { rows, nextCursor } = await todos.query({\n * where: [{ column: 'done', op: 'eq', value: false }],\n * orderBy: { column: 'rank', dir: 'asc' },\n * limit: 50,\n * });\n * await todos.update(id, { done: true });\n * await todos.delete(id);\n *\n * Authorization is the **app key** ({@link HttpClient} stamps it on every\n * request); the appId + environment are resolved server-side from the key, so a\n * key can only ever reach its own app's tables. The front end never touches the\n * database directly — this REST surface is the only gateway, and all input is\n * validated against the table's schema (parameterized statements, column +\n * operator allowlists). There is no raw-SQL passthrough.\n *\n * Schema is authored in the portal, not here (the SDK reads + writes rows, it\n * doesn't create tables). Pagination is keyset-based: pass the `nextCursor` from\n * a previous `query()` back as `cursor` to fetch the next page.\n */\n\nimport { HttpClient, HttpError } from \"../HttpClient\";\nimport type { DbCache } from \"../../offline/DbCache\";\nimport type { QueueEntry } from \"../../offline/store/OfflineStore\";\n\nexport interface DbNamespaceDeps {\n http: HttpClient;\n /** Offline row/query cache + write queue. Undefined ⇒ network-only. */\n offline?: DbCache;\n}\n\n/** Comparison operators allowed in a {@link DbQuery} `where` clause. */\nexport type DbFilterOp =\n | \"eq\" | \"neq\" | \"gt\" | \"gte\" | \"lt\" | \"lte\"\n | \"in\" | \"like\" | \"likeStartsWith\" | \"likeContains\";\n\nexport interface DbWhereCondition {\n column: string;\n op: DbFilterOp;\n /** Scalar for most ops; an array for `in`; a string for the `like` family. */\n value: unknown;\n}\n\nexport interface DbQuery {\n /** Columns to return; omit for all columns. */\n select?: string[];\n /** Conditions AND-combined. */\n where?: DbWhereCondition[];\n /** Sort by a column (defaults to the primary key, ascending). */\n orderBy?: { column: string; dir?: \"asc\" | \"desc\" };\n /** Page size, clamped server-side to 100. */\n limit?: number;\n /** Opaque keyset cursor from a previous query's `nextCursor`. */\n cursor?: string;\n}\n\nexport interface DbQueryResult<T = Record<string, unknown>> {\n rows: T[];\n /** Cursor for the next page, or `null` when the last page was returned. */\n nextCursor: string | null;\n}\n\n/** A handle to one table — the ergonomic surface for row operations. */\nexport class DbTable<T extends Record<string, unknown> = Record<string, unknown>> {\n constructor(\n private readonly http: HttpClient,\n private readonly name: string,\n private readonly offline?: DbCache,\n ) {}\n\n private base(): string {\n return `/api/db/${encodeURIComponent(this.name)}`;\n }\n private rowUrl(id: string | number): string {\n return `${this.base()}/${encodeURIComponent(String(id))}`;\n }\n\n /** Insert a row. Returns the created row and its primary-key value. */\n async insert(values: Partial<T>): Promise<{ row: T; id: unknown }> {\n if (!this.offline?.enabled) return this.http.post(this.base(), { values });\n const hlc = await this.offline.nextHlc();\n const _hlc = this.offline.columnStamps(values as Record<string, unknown>, hlc);\n try {\n const res = await this.http.post<{ row: T; id: unknown }>(this.base(), { values, _hlc });\n await this.offline.writeRow(this.name, String(res.id), res.row as Record<string, unknown>);\n return res;\n } catch (err) {\n if (err instanceof HttpError) throw err;\n // Offline: queue for replay. No server pk yet — return a provisional\n // client id so the caller has a stable handle until sync.\n const clientId = this.offline.newClientId();\n await this.offline.enqueue(\"insert\", { table: this.name, values, _hlc }, hlc, clientId);\n return { row: values as T, id: clientId };\n }\n }\n\n /** Fetch a row by primary key, or `null` if it doesn't exist. */\n async get(id: string | number): Promise<T | null> {\n try {\n const res = await this.http.get<{ row: T }>(this.rowUrl(id));\n if (this.offline?.enabled) await this.offline.writeRow(this.name, String(id), res.row as Record<string, unknown>);\n return res.row;\n } catch (e) {\n if ((e as { status?: number })?.status === 404) return null;\n if (this.offline?.enabled && !(e instanceof HttpError)) {\n return (await this.offline.readRow(this.name, String(id))) as T | null;\n }\n throw e;\n }\n }\n\n /** Query rows with filters, ordering, and keyset pagination. */\n async query(query: DbQuery = {}): Promise<DbQueryResult<T>> {\n if (!this.offline?.enabled) return this.http.post(`${this.base()}/query`, query);\n try {\n const res = await this.http.post<DbQueryResult<T>>(`${this.base()}/query`, query);\n await this.offline.writeQuery(this.name, query, res as { rows: Array<Record<string, unknown>>; nextCursor: string | null });\n return res;\n } catch (e) {\n if (e instanceof HttpError) throw e;\n const cached = await this.offline.readQuery(this.name, query);\n return (cached as DbQueryResult<T> | null) ?? { rows: [], nextCursor: null };\n }\n }\n\n /** Update a row by primary key. Returns the updated row. */\n async update(id: string | number, values: Partial<T>): Promise<{ row: T }> {\n if (!this.offline?.enabled) return this.http.patch(this.rowUrl(id), { values });\n const hlc = await this.offline.nextHlc();\n const _hlc = this.offline.columnStamps(values as Record<string, unknown>, hlc);\n await this.offline.patchRow(this.name, String(id), values as Record<string, unknown>); // optimistic\n try {\n const res = await this.http.patch<{ row: T }>(this.rowUrl(id), { values, _hlc });\n await this.offline.writeRow(this.name, String(id), res.row as Record<string, unknown>);\n return res;\n } catch (err) {\n if (err instanceof HttpError) throw err;\n await this.offline.enqueue(\"update\", { table: this.name, id, values, _hlc }, hlc, this.offline.newClientId());\n return { row: (await this.offline.readRow(this.name, String(id))) as T };\n }\n }\n\n /** Delete a row by primary key. Returns the number of rows removed (0 or 1). */\n async delete(id: string | number): Promise<number> {\n if (!this.offline?.enabled) {\n const res = await this.http.del<{ deleted: number }>(this.rowUrl(id));\n return res.deleted ?? 0;\n }\n const hlc = await this.offline.nextHlc();\n await this.offline.deleteRow(this.name, String(id)); // optimistic\n try {\n const res = await this.http.del<{ deleted: number }>(this.rowUrl(id), { _hlc: hlc });\n return res.deleted ?? 0;\n } catch (err) {\n if (err instanceof HttpError) throw err;\n await this.offline.enqueue(\"delete\", { table: this.name, id, hlc }, hlc, this.offline.newClientId());\n return 1; // optimistic\n }\n }\n}\n\nexport class DbNamespace {\n constructor(private readonly deps: DbNamespaceDeps) {}\n\n /**\n * A handle to a table defined in the portal. The optional type parameter\n * gives row operations a typed shape:\n *\n * interface Todo { _id: number; title: string; done: boolean }\n * const todos = client.db.table<Todo>('todos');\n */\n table<T extends Record<string, unknown> = Record<string, unknown>>(name: string): DbTable<T> {\n return new DbTable<T>(this.deps.http, name, this.deps.offline);\n }\n\n /** Replay one queued db mutation (called by the sync engine). */\n async replay(entry: QueueEntry): Promise<void> {\n const a = entry.args as {\n table: string;\n id?: string | number;\n values?: Record<string, unknown>;\n _hlc?: Record<string, string>;\n hlc?: string;\n };\n const base = `/api/db/${encodeURIComponent(a.table)}`;\n if (entry.method === \"insert\") {\n await this.deps.http.post(base, { values: a.values, _hlc: a._hlc });\n } else if (entry.method === \"update\") {\n await this.deps.http.patch(`${base}/${encodeURIComponent(String(a.id))}`, { values: a.values, _hlc: a._hlc });\n } else if (entry.method === \"delete\") {\n await this.deps.http.del(`${base}/${encodeURIComponent(String(a.id))}`, { _hlc: a.hlc });\n }\n }\n}\n\nexport default DbNamespace;\n","/**\n * `client.storage` — file storage. Hides the `FileStorage` / `ShardClient` /\n * `SharedSpaceClient` primitives behind the unified client.\n *\n * const { stat, manifest } = await client.storage.writeFile({ spaceId, data, metadata })\n * const { data } = await client.storage.readFile(spaceId, fileId)\n * const files = await client.storage.listFiles() // my shared files\n * const files = await client.storage.listFiles({ spaceId }) // a space's files\n * await client.storage.deleteFile(spaceId, fileId)\n *\n * Model:\n * - **Files are written to a SharedSpace** (never the personal space). A file\n * is its manifest (per-chunk keys + global shard hashes); the manifest lives\n * in the space's gated, metered `/files` store, the shard ciphertext in the\n * global open `/api/shards` store.\n * - **The manifest is the capability** — anyone holding it reads the file from\n * the global shards, anywhere ({@link readByManifest}). Share a file by\n * sharing its manifest.\n * - **Personal discovery mirror** — on a successful write the SDK also records\n * the manifest in the user's `client.kv` under a reserved collection, so\n * {@link listFiles} (no `spaceId`) can show \"files I've shared\" without\n * enumerating spaces. The mirror is unmetered and is NOT a write path.\n *\n * For small structured values use `client.kv` instead.\n */\n\nimport type { HttpClient } from \"../HttpClient\";\nimport type { KvNamespace } from \"./KvNamespace\";\nimport { FileStorage } from \"../../storage/FileStorage\";\nimport { ShardClient, type ShardByteCache } from \"../../storage/transport/ShardClient\";\nimport { SharedSpaceClient } from \"../../storage/transport/SharedSpaceClient\";\nimport { manifestToStat, type FileManifest, type FileStat } from \"../../storage/types\";\n\n/** Reserved `client.kv` collection holding the personal manifest mirror. */\nconst MIRROR_COLLECTION = \"__files__\";\n\nexport interface FileNamespaceDeps {\n http: HttpClient;\n baseUrl: string;\n /** Used for the unmetered personal discovery mirror. */\n kv: KvNamespace;\n /**\n * Optional pre-compiled Reed–Solomon WASM module. Defaults to the bundled\n * loader; pass one where the bundled loader path isn't available (vitest,\n * deploy-time-precompiled environments). Forwarded to {@link FileStorage}.\n */\n rsWasmModule?: WebAssembly.Module;\n /** Offline shard-byte cache (browser). Enables offline reads of cached files. */\n shardCache?: ShardByteCache;\n /** Queue a shard PUT that couldn't reach the network (offline). */\n deferShardUpload?: (hash: string) => Promise<void>;\n}\n\nexport interface WriteFileOptions {\n /** SharedSpace the file is written to (obtain via `client.space`). */\n spaceId: string;\n data: Uint8Array | Blob | File;\n metadata: { name: string; type: string; path?: string; lastModified?: number };\n}\n\n/** What the personal mirror stores per file. */\ninterface MirrorEntry {\n spaceId: string;\n manifest: FileManifest;\n}\n\nexport class StorageNamespace {\n private fileStorage: FileStorage | null = null;\n\n constructor(private readonly deps: FileNamespaceDeps) {}\n\n /**\n * Write a file to a SharedSpace: shard ciphertext → the global store, the\n * manifest → the space's gated store, and a mirror copy → the caller's\n * personal index. Returns the `stat` and the `manifest` (share the manifest\n * to let others read the file).\n */\n async writeFile(input: WriteFileOptions): Promise<{ stat: FileStat; manifest: FileManifest }> {\n if (!input?.spaceId) {\n throw new Error(\"client.storage.writeFile: `spaceId` is required (files live in a SharedSpace).\");\n }\n const fs = this.fs();\n const { manifest, stat } = await fs.writeFileToShards({\n data: input.data,\n metadata: input.metadata,\n });\n // Authoritative, metered write: the manifest into the space's gated store.\n await this.space().writeFileManifest(input.spaceId, manifest);\n // Best-effort personal discovery mirror (unmetered). A failure here\n // leaves the file intact in the space — log and continue.\n try {\n await this.deps.kv.set<MirrorEntry>(MIRROR_COLLECTION, manifest.id, {\n spaceId: input.spaceId,\n manifest,\n });\n } catch (err) {\n console.warn(\"client.storage.writeFile: discovery mirror failed (file still written):\", err);\n }\n return { stat, manifest };\n }\n\n /** Read a file from its space (resolves the manifest, then the shards). */\n async readFile(spaceId: string, fileId: string): Promise<{ data: Uint8Array; stat: FileStat }> {\n return this.fs().readFile(spaceId, fileId);\n }\n\n /**\n * Read a file straight from a manifest — the capability path. No space\n * membership needed; this is how a shared file is opened.\n */\n async readByManifest(manifest: FileManifest): Promise<{ data: Uint8Array; stat: FileStat }> {\n return this.fs().readFileFromShards(manifest);\n }\n\n /**\n * List files. With no argument, returns the caller's own shared files from\n * the personal mirror; with `{ spaceId }`, lists that space's files.\n */\n async listFiles(opts?: { spaceId?: string }): Promise<FileStat[]> {\n if (opts?.spaceId) return this.space().listFiles(opts.spaceId);\n const ids = await this.deps.kv.list(MIRROR_COLLECTION);\n const entries = await Promise.all(\n ids.map((id) => this.deps.kv.get<MirrorEntry>(MIRROR_COLLECTION, id)),\n );\n return entries\n .filter((e): e is MirrorEntry => Boolean(e?.manifest))\n .map((e) => manifestToStat(e.manifest));\n }\n\n /** Delete a file from its space and remove the personal mirror entry. */\n async deleteFile(spaceId: string, fileId: string): Promise<boolean> {\n const existed = await this.fs().deleteFile(spaceId, fileId);\n try {\n await this.deps.kv.delete(MIRROR_COLLECTION, fileId);\n } catch {\n // mirror cleanup is best-effort\n }\n return existed;\n }\n\n /** Read a manifest verbatim (e.g. to share a file). */\n async getManifest(spaceId: string, fileId: string): Promise<FileManifest> {\n return this.fs().readManifest(spaceId, fileId);\n }\n\n // -------------------------------------------------------------------------\n // Internals — lazily built so an unauthenticated client is cheap to create.\n // -------------------------------------------------------------------------\n\n private fs(): FileStorage {\n if (!this.fileStorage) {\n this.fileStorage = new FileStorage({\n shards: this.shards(),\n space: this.space(),\n rsWasmModule: this.deps.rsWasmModule,\n });\n }\n return this.fileStorage;\n }\n\n private _shards: ShardClient | null = null;\n private shards(): ShardClient {\n // Global, content-addressed shard store. The credential-stamping fetch\n // attaches the app key so PUTs are attributed + quota-gated; GETs are open.\n if (!this._shards) {\n this._shards = new ShardClient({\n baseUrl: this.deps.baseUrl,\n pathPrefix: \"/api/shards\",\n fetch: this.deps.http.fetch,\n cache: this.deps.shardCache,\n deferUpload: this.deps.deferShardUpload,\n });\n }\n return this._shards;\n }\n\n private _space: SharedSpaceClient | null = null;\n private space(): SharedSpaceClient {\n if (!this._space) {\n this._space = new SharedSpaceClient({\n baseUrl: this.deps.baseUrl,\n fetch: this.deps.http.fetch,\n });\n }\n return this._space;\n }\n}\n\nexport default StorageNamespace;\n","/**\n * SpaceCipher — pure crypto for the fan-out group-encryption layer.\n *\n * Everything here routes through the canonical primitives in\n * `src/crypto/primitives` (AES-256-GCM, HKDF-SHA256, randomBytes) and the\n * P-384 ECDH `deriveBits` call the Double Ratchet already uses. No new\n * algorithms, no `crypto.subtle` reach-arounds beyond key gen / derive /\n * import-export (which the primitive layer intentionally doesn't cover).\n *\n * Three concerns:\n * 1. Space identity — a P-384 ECDH keypair; the encoded public key is the\n * space's id.\n * 2. Group key distribution — ECIES wrap/unwrap of `K_space` to a member's\n * identity ECDH public key (ephemeral-static ECDH → HKDF → AES-GCM).\n * 3. Message sealing — encrypt the serialized `Message` once under the\n * epoch's group key.\n *\n * Public keys are transported as base64url-encoded JWK, matching the JWK\n * transport convention already used in `EncryptedSession`.\n */\n\nimport { Message } from \"../messaging/Message\";\nimport {\n encryptAesGcm,\n decryptAesGcm,\n deriveBitsHkdf,\n randomBytes,\n getSubtle,\n AES_GCM_KEY_BYTES,\n AES_GCM_IV_BYTES,\n} from \"../crypto/primitives\";\nimport {\n toBase64,\n fromBase64,\n toBase64Url,\n fromBase64Url,\n utf8Encode,\n utf8Decode,\n} from \"../utilities\";\nimport type { WrappedKey } from \"./types\";\n\n/** HKDF label binding the wrap key to this protocol + version. */\nconst WRAP_INFO = \"muhkoo/space/keywrap/v1\";\n/** Algorithm tag stamped into every WrappedKey. */\nconst WRAP_ALG = \"ECDH-P384/HKDF-SHA256/AES-256-GCM\";\n/** Bits in a P-384 ECDH shared secret. */\nconst P384_BITS = 384;\n\nconst ECDH_PARAMS: EcKeyGenParams = { name: \"ECDH\", namedCurve: \"P-384\" };\n\n// ---------------------------------------------------------------------------\n// Public-key transport (base64url JWK)\n// ---------------------------------------------------------------------------\n\n/** Encode an ECDH public `CryptoKey` as a base64url JWK string. */\nexport async function exportEcdhPublicKey(key: CryptoKey): Promise<string> {\n const jwk = await getSubtle().exportKey(\"jwk\", key);\n return toBase64Url(utf8Encode(JSON.stringify(jwk)));\n}\n\n/** Decode a base64url JWK string back into an ECDH public `CryptoKey`. */\nexport async function importEcdhPublicKey(encoded: string): Promise<CryptoKey> {\n const jwk = JSON.parse(utf8Decode(fromBase64Url(encoded)));\n // Public keys carry no usages.\n return getSubtle().importKey(\"jwk\", jwk, ECDH_PARAMS, true, []);\n}\n\n/** The space's id is just its encoded ECDH public key. */\nexport const encodeSpaceId = exportEcdhPublicKey;\n\n// ---------------------------------------------------------------------------\n// Sender authentication (ECDSA P-384, matching the Double Ratchet path).\n// A fan-out message is signed by its sender's identity ECDSA key so receivers\n// can verify authorship end-to-end — independent of the relay, which only\n// stamps `source` server-side. SHA-256 hash to match `DoubleRatchet`.\n// ---------------------------------------------------------------------------\n\nconst ECDSA_PARAMS: EcKeyImportParams = { name: \"ECDSA\", namedCurve: \"P-384\" };\nconst ECDSA_SIGN: EcdsaParams = { name: \"ECDSA\", hash: \"SHA-256\" };\n\n/** Encode an ECDSA public `CryptoKey` as a base64url JWK string. */\nexport async function exportEcdsaPublicKey(key: CryptoKey): Promise<string> {\n const jwk = await getSubtle().exportKey(\"jwk\", key);\n return toBase64Url(utf8Encode(JSON.stringify(jwk)));\n}\n\n/** Decode a base64url JWK string back into an ECDSA verify-only public key. */\nexport async function importEcdsaPublicKey(encoded: string): Promise<CryptoKey> {\n const jwk = JSON.parse(utf8Decode(fromBase64Url(encoded)));\n return getSubtle().importKey(\"jwk\", jwk, ECDSA_PARAMS, true, [\"verify\"]);\n}\n\n/**\n * Canonical bytes a sender signs (and a receiver re-derives). Binds the claimed\n * sender + routing + the sealed ciphertext, so a relay can't relabel `source`\n * and a member can't reuse another's ciphertext under a new envelope.\n */\nexport function canonicalMessage(fields: {\n source: string;\n target: string;\n subject: string;\n epoch: number;\n iv: string;\n ciphertext: string;\n}): string {\n return [fields.source, fields.target, fields.subject, fields.epoch, fields.iv, fields.ciphertext].join(\"\\n\");\n}\n\n/** Sign the canonical bytes with the sender's ECDSA identity private key. */\nexport async function signSpaceMessage(canonical: string, ecdsaPriv: CryptoKey): Promise<string> {\n const sig = await getSubtle().sign(ECDSA_SIGN, ecdsaPriv, utf8Encode(canonical));\n return toBase64(new Uint8Array(sig));\n}\n\n/** Verify a signature over the canonical bytes against the sender's ECDSA key. */\nexport async function verifySpaceMessage(canonical: string, sigB64: string, ecdsaPub: CryptoKey): Promise<boolean> {\n try {\n return await getSubtle().verify(ECDSA_SIGN, ecdsaPub, fromBase64(sigB64), utf8Encode(canonical));\n } catch {\n return false;\n }\n}\n\n// ---------------------------------------------------------------------------\n// Space identity\n// ---------------------------------------------------------------------------\n\nexport interface SpaceIdentity {\n /** Encoded public key — the space's logical id. */\n id: string;\n publicKey: CryptoKey;\n privateKey: CryptoKey;\n}\n\n/** Generate a fresh space identity keypair (P-384 ECDH). */\nexport async function generateSpaceIdentity(): Promise<SpaceIdentity> {\n const kp = await getSubtle().generateKey(ECDH_PARAMS, true, [\"deriveBits\"]);\n const id = await encodeSpaceId(kp.publicKey);\n return { id, publicKey: kp.publicKey, privateKey: kp.privateKey };\n}\n\n// ---------------------------------------------------------------------------\n// Group key\n// ---------------------------------------------------------------------------\n\n/** Mint a fresh 256-bit group key for an epoch. */\nexport function generateSpaceKey(): Uint8Array {\n return randomBytes(AES_GCM_KEY_BYTES);\n}\n\n// ---------------------------------------------------------------------------\n// ECIES wrap / unwrap of the group key\n// ---------------------------------------------------------------------------\n\n/**\n * Wrap `kSpace` for `recipientEcdhPub` using an ephemeral ECDH keypair.\n * The HKDF salt binds the wrap key to `epoch`, so a wrap minted for one epoch\n * cannot be replayed to unwrap a different epoch's blob.\n */\nexport async function wrapSpaceKey(\n kSpace: Uint8Array,\n epoch: number,\n recipientEcdhPub: CryptoKey,\n): Promise<WrappedKey> {\n const eph = await getSubtle().generateKey(ECDH_PARAMS, true, [\"deriveBits\"]);\n const shared = new Uint8Array(\n await getSubtle().deriveBits(\n { name: \"ECDH\", public: recipientEcdhPub },\n eph.privateKey,\n P384_BITS,\n ),\n );\n const wrapKey = await deriveBitsHkdf(\n shared,\n WRAP_INFO,\n AES_GCM_KEY_BYTES,\n utf8Encode(`epoch:${epoch}`),\n );\n const iv = randomBytes(AES_GCM_IV_BYTES);\n const ciphertext = await encryptAesGcm(wrapKey, iv, kSpace);\n return {\n epoch,\n ephemeralPub: await exportEcdhPublicKey(eph.publicKey),\n iv: toBase64(iv),\n ciphertext: toBase64(ciphertext),\n alg: WRAP_ALG,\n };\n}\n\n/**\n * Unwrap a {@link WrappedKey} using the recipient's identity ECDH private key.\n * Throws (GCM tag failure) on the wrong private key or a tampered blob.\n */\nexport async function unwrapSpaceKey(\n wrapped: WrappedKey,\n ownEcdhPriv: CryptoKey,\n): Promise<Uint8Array> {\n const ephPub = await importEcdhPublicKey(wrapped.ephemeralPub);\n const shared = new Uint8Array(\n await getSubtle().deriveBits(\n { name: \"ECDH\", public: ephPub },\n ownEcdhPriv,\n P384_BITS,\n ),\n );\n const wrapKey = await deriveBitsHkdf(\n shared,\n WRAP_INFO,\n AES_GCM_KEY_BYTES,\n utf8Encode(`epoch:${wrapped.epoch}`),\n );\n return decryptAesGcm(wrapKey, fromBase64(wrapped.iv), fromBase64(wrapped.ciphertext));\n}\n\n// ---------------------------------------------------------------------------\n// Message sealing\n// ---------------------------------------------------------------------------\n\n/** Seal an already-serialized message string under the group key. */\nexport async function sealSerialized(\n kSpace: Uint8Array,\n serialized: string,\n): Promise<{ iv: string; ciphertext: string }> {\n const iv = randomBytes(AES_GCM_IV_BYTES);\n const ciphertext = await encryptAesGcm(kSpace, iv, utf8Encode(serialized));\n return { iv: toBase64(iv), ciphertext: toBase64(ciphertext) };\n}\n\n/**\n * Open a sealed payload back into its serialized message string. Throws (GCM\n * tag failure) on the wrong group key or a tampered ciphertext.\n */\nexport async function openSerialized(\n kSpace: Uint8Array,\n iv: string,\n ciphertext: string,\n): Promise<string> {\n const plaintext = await decryptAesGcm(kSpace, fromBase64(iv), fromBase64(ciphertext));\n return utf8Decode(plaintext);\n}\n\n/** Seal a `Message` once under the group key. Returns base64 iv + ciphertext. */\nexport async function sealMessage(\n kSpace: Uint8Array,\n msg: Message,\n): Promise<{ iv: string; ciphertext: string }> {\n return sealSerialized(kSpace, msg.serialize());\n}\n\n/**\n * Open a sealed message back into a `Message`. Throws (GCM tag failure) on the\n * wrong group key or a tampered ciphertext.\n */\nexport async function openMessage(\n kSpace: Uint8Array,\n iv: string,\n ciphertext: string,\n): Promise<Message> {\n return Message.deserialize(await openSerialized(kSpace, iv, ciphertext));\n}\n","/**\n * SpacePacketCipher — the {@link PacketCipher} that seals packets with a\n * space's group key instead of a per-peer Double Ratchet.\n *\n * It pulls the active epoch's key from an {@link EpochKeyProvider} (the\n * SpaceKeyring), so this adapter stays decoupled from the keyring's transport\n * and caching concerns — it only needs \"what key seals epoch N\".\n */\n\nimport type { PacketCipher, PacketHeaders, SealedHeaders } from \"../network/PacketCipher\";\nimport { sealSerialized, openSerialized } from \"./SpaceCipher\";\n\n/** Minimal view of the keyring the cipher needs. */\nexport interface EpochKeyProvider {\n /** Epoch new messages are sealed under (advances on rotation). */\n currentEpoch(): number;\n /** The 32-byte group key for an epoch, or undefined if we don't hold it. */\n keyForEpoch(epoch: number): Uint8Array | undefined;\n}\n\nexport class SpacePacketCipher implements PacketCipher {\n constructor(\n private readonly keys: EpochKeyProvider,\n private readonly contentType?: string,\n ) {}\n\n async seal(serializedMessage: string): Promise<SealedHeaders> {\n const epoch = this.keys.currentEpoch();\n const key = this.keys.keyForEpoch(epoch);\n if (!key) {\n throw new Error(`SpacePacketCipher: no group key for epoch ${epoch}`);\n }\n const { iv, ciphertext } = await sealSerialized(key, serializedMessage);\n const headers: SealedHeaders = { spaceSealed: true, epoch, iv, ciphertext };\n if (this.contentType) headers.contentType = this.contentType;\n return headers;\n }\n\n handles(headers: PacketHeaders): boolean {\n return headers?.spaceSealed === true &&\n typeof headers?.iv === \"string\" &&\n typeof headers?.ciphertext === \"string\";\n }\n\n /** Returns null for epochs we don't hold (surfaced as undecryptable). */\n async open(headers: PacketHeaders): Promise<string | null> {\n if (!this.handles(headers)) return null;\n const epoch = Number(headers!.epoch);\n const key = this.keys.keyForEpoch(epoch);\n if (!key) return null;\n return openSerialized(key, headers!.iv as string, headers!.ciphertext as string);\n }\n}\n","/**\n * `Space` — a client handle for one shared space.\n *\n * A space is the unit everything is built on. It carries:\n * - **realtime transport** over a {@link BroadcastChannel} (group handshake,\n * roster frames, raw-frame passthrough);\n * - **fan-out group messaging** — `Message`s sealed once with the space's\n * group key (via {@link SpacePacketCipher}), wrapped in a cleartext\n * {@link Packet} envelope, broadcast AND persisted by the server as\n * history (the `spaceMessage` frame);\n * - **room-scoped file storage** via {@link FileStorage} over the shard\n * endpoint;\n * - **legacy per-peer Double Ratchet messaging** (`send`/`announce`) for the\n * ephemeral, no-history path — unchanged so existing callers (the chat hook\n * reached via `client.message.room(name)`) keep working.\n *\n * `Space` was formerly `Room`; `Room` remains exported as an alias. The\n * fan-out methods (`sendMessage`/`onMessage`/`history`/`join`/`admit`/`rotate`)\n * require a {@link SpaceKeyring} dep; without one only the transport + DR +\n * file surface is available.\n */\n\nimport { BroadcastChannel, BroadcastChannelEvents } from \"../sessions/BroadcastChannel\";\nimport { FileStorage } from \"../storage/FileStorage\";\nimport { ShardClient, type ShardByteCache, type PeerBlockSource } from \"../storage/transport/ShardClient\";\nimport type { FileManifest, FileStat } from \"../storage/types\";\nimport { Message } from \"../messaging/Message\";\nimport { Packet } from \"../messaging/Packet\";\nimport { SpacePacketCipher } from \"./SpacePacketCipher\";\nimport type { SpaceKeyring } from \"./SpaceKeyring\";\nimport { canonicalMessage, signSpaceMessage, verifySpaceMessage } from \"./SpaceCipher\";\nimport { KeyStore } from \"../crypto/KeyStore\";\nimport type { JoinRequest, HistoryPolicy } from \"./types\";\n\ntype Listener = (e: CustomEvent) => void;\n\n/**\n * A P2P swarm attached to a Space (the p2p layer's `PeerNetwork` satisfies this\n * structurally — Space never imports the p2p module). `exchange` is consulted by\n * the Space's file `ShardClient`; `start` runs peer discovery on connect; `close`\n * tears the mesh down.\n */\nexport interface AttachedPeerNetwork {\n readonly exchange: PeerBlockSource;\n start(): void;\n close(): void;\n gossip(data: Uint8Array): void;\n onGossip(cb: (from: string, data: Uint8Array) => void): () => void;\n}\n\nexport interface SpaceFileMetadata {\n name: string;\n type: string;\n path?: string;\n lastModified?: number;\n}\n\n/** A decrypted inbound fan-out message. */\nexport interface SpaceMessageEvent {\n from: string;\n channel: string;\n epoch: number;\n contentType?: string;\n /**\n * Server storage handle — the monotonic server timestamp this message is\n * persisted under (`msg:<handle>`). Stable across history replay; pass it to\n * {@link Space.editMessage} / {@link Space.deleteMessage} to mutate the\n * persisted entry. Carried on edit events too (same handle as the original).\n */\n handle: number;\n message: Message;\n /**\n * Sender-generated id, present on locally-originated messages (carried in the\n * cleartext `cid` header). Lets the UI dedupe an optimistic send against its\n * server echo, and the offline cache replace a pending entry with the real one.\n */\n clientId?: string;\n /** True for an optimistic local send not yet acknowledged by the server. */\n pending?: boolean;\n}\n\n/**\n * One sealed message frame as cached for offline use. The `packet` is the\n * ciphertext-bearing serialized {@link Packet} (decrypted lazily on read), so\n * nothing readable is persisted. Structurally matches the offline layer's\n * `MessageEntry`; declared here so the spaces module doesn't import `../offline`.\n */\nexport interface CachedSpaceMessage {\n handle: string;\n packet: string | null;\n op: \"msg\" | \"edit\" | \"delete\";\n clientId?: string;\n hlc?: string;\n pending?: boolean;\n deleted?: boolean;\n}\n\n/** The offline adapter a {@link Space} drives. Implemented by `SpaceCache`. */\nexport interface SpaceOfflineAdapter {\n readonly enabled: boolean;\n newClientId(): string;\n nextHlc(): Promise<string>;\n putMessage(spaceId: string, entry: CachedSpaceMessage): Promise<void>;\n putDeleted(spaceId: string, handle: number): Promise<void>;\n dropPending(spaceId: string, clientId: string): Promise<void>;\n loadMessages(spaceId: string): Promise<CachedSpaceMessage[]>;\n getCursor(spaceId: string): Promise<{ lastSeenHandle: number; oldestHandle: number } | null>;\n observeHandle(spaceId: string, handle: number): Promise<void>;\n enqueueFrame(spaceId: string, frame: unknown, clientId: string, hlc: string): Promise<void>;\n registerCatchUp(task: () => Promise<void>): () => void;\n}\n\n/**\n * An inbound ephemeral signal — an application broadcast the server relays to\n * the room but never persists (no history). Rides the generic `pub` relay:\n * `subject` is an app-defined routing key, `data` is opaque app JSON, and\n * `from` is the server-authenticated sender. Typing indicators, presence pings,\n * live cursors, etc. are built on top of this in the app layer — the SDK and\n * server stay domain-agnostic.\n */\nexport interface EphemeralEvent {\n /** Server-stamped authenticated sender. */\n from: string;\n /** Application-defined routing key (e.g. \"typing\"). */\n subject: string;\n /** Opaque application payload. */\n data: unknown;\n}\n\n/** A server-authoritative deletion of the persisted message at `handle`. */\nexport interface MessageDeletedEvent {\n handle: number;\n}\n\nexport interface SpaceDeps {\n /** Transport room id. For fan-out spaces this is the encoded space pubkey. */\n name: string;\n wsBaseUrl: string;\n httpBaseUrl: string;\n /** Header-injecting fetch from the client's HttpClient. */\n fetch: typeof fetch;\n /** Resolves the user id used for the ratchet / member id (signed-in username). */\n myId: () => string;\n /** Resolves a short-lived WS upgrade ticket (or null when keyless). */\n fetchTicket: () => Promise<string | null>;\n /** Optional group-key keyring — required for the fan-out methods. */\n keyring?: SpaceKeyring;\n /** History policy for this space (advisory; defaults to static). */\n historyPolicy?: HistoryPolicy;\n /**\n * When true (default), a connected member that holds the group key\n * automatically wraps it for any newcomer that posts a join request —\n * the \"any online key-holder admits\" model. Set false to gate membership\n * yourself via `onJoinRequest` + `admit`.\n */\n autoAdmit?: boolean;\n /**\n * Test seam — defaults to constructing a real {@link BroadcastChannel}.\n * A test can inject an in-memory channel to exercise the fan-out wire\n * without a live websocket.\n */\n createChannel?: (url: string, myId: string) => SpaceChannelLike;\n /** Offline shard-byte cache for room files (browser). */\n shardCache?: ShardByteCache;\n /** Queue a room-file shard PUT that couldn't reach the network. */\n deferShardUpload?: (hash: string) => Promise<void>;\n /** Offline message cache + send queue. Undefined ⇒ no offline behavior. */\n offline?: SpaceOfflineAdapter;\n}\n\n/** The subset of {@link BroadcastChannel} a {@link Space} drives. */\nexport interface SpaceChannelLike {\n on(event: string, handler: (e: CustomEvent) => void): void;\n off(event: string, handler: (e: CustomEvent) => void): void;\n connect(): Promise<void>;\n disconnect(): void;\n announce(): Promise<void>;\n send(plaintext: string): Promise<number>;\n sendRaw(frame: unknown): void;\n peers?(): string[];\n isConnected?(): boolean;\n}\n\nexport class Space {\n readonly name: string;\n readonly historyPolicy: HistoryPolicy;\n private channel: SpaceChannelLike | null = null;\n private readonly pending: Array<[string, Listener]> = [];\n private readonly cipher: SpacePacketCipher | null;\n /** Per-instance event bus for fan-out events (isolated across spaces). */\n private readonly events = new EventTarget();\n private rawWired = false;\n private catchUpUnsub: (() => void) | null = null;\n /** Optional P2P swarm for this Space (block exchange among members). */\n private peerNet: AttachedPeerNetwork | null = null;\n\n constructor(private readonly deps: SpaceDeps) {\n this.name = deps.name;\n this.historyPolicy = deps.historyPolicy ?? \"static\";\n this.cipher = deps.keyring ? new SpacePacketCipher(deps.keyring) : null;\n }\n\n /** The encoded space id (same as the transport name for fan-out spaces). */\n get id(): string {\n return this.name;\n }\n\n /** The keyring backing this space's group keys, if any. */\n get keyring(): SpaceKeyring | undefined {\n return this.deps.keyring;\n }\n\n // -- transport -------------------------------------------------------------\n\n /** Open the space websocket (resolves the ticket + identity lazily). */\n async connect(): Promise<void> {\n if (!this.channel) {\n // The WS upgrade ticket is single-use + short-TTL, so a reconnect\n // must mint a FRESH one — otherwise the socket drops (idle timeout,\n // network blip) and never comes back. `buildUrl` is handed to the\n // transport as a `urlProvider` it calls before each reconnect.\n const buildUrl = async () => {\n const ticket = await this.deps.fetchTicket();\n return (\n `${this.deps.wsBaseUrl}/api/spaces/${encodeURIComponent(this.name)}/websocket` +\n (ticket ? `?ticket=${encodeURIComponent(ticket)}` : \"\")\n );\n };\n const url = await buildUrl();\n this.channel = this.deps.createChannel\n ? this.deps.createChannel(url, this.deps.myId())\n : new BroadcastChannel({\n url,\n myId: this.deps.myId(),\n autoAnnounce: false,\n urlProvider: buildUrl,\n // Keep recovering across network flaps (each attempt mints a\n // fresh ticket); teardown calls disconnect() which stops it.\n maxReconnectAttempts: 0,\n });\n for (const [event, handler] of this.pending) this.channel.on(event, handler);\n this.pending.length = 0;\n // Fan-out spaces drive their own `{name}` handshake + frame routing.\n // Legacy (keyring-less) callers wire these themselves, so leave that\n // path byte-for-byte unchanged.\n if (this.deps.keyring) {\n this.channel.on(BroadcastChannelEvents.CONNECTED, () => {\n this.channel?.sendRaw({ name: this.deps.myId() });\n // Kick P2P peer discovery now the signaling channel is live\n // (re-runs on each reconnect to re-form the mesh).\n this.peerNet?.start();\n });\n this.wireFanout();\n // Register offline catch-up once: on each reconnect the sync\n // engine pages history forward to fill any gap we missed.\n if (this.deps.offline?.enabled && !this.catchUpUnsub) {\n this.catchUpUnsub = this.deps.offline.registerCatchUp(() => this.catchUp());\n }\n }\n }\n await this.channel.connect();\n }\n\n disconnect(): void {\n this.channel?.disconnect();\n this.catchUpUnsub?.();\n this.catchUpUnsub = null;\n this.peerNet?.close();\n this.peerNet = null;\n }\n\n /** Attach a P2P swarm so this Space's file reads/writes can use peers. */\n attachPeerNetwork(net: AttachedPeerNetwork): void {\n this.peerNet = net;\n }\n\n /**\n * Broadcast an app payload directly to connected Space peers over P2P,\n * **bypassing the server** — for CRDT ops / high-frequency state (live\n * cursors, presence, collaborative edits) you don't want to push through the\n * relay. No-op when no P2P mesh is active (requires `client` `p2p`).\n * Unlike {@link sendEphemeral} (server-relayed, metered, size-limited), this\n * is peer-direct and fragments large payloads.\n */\n gossipToPeers(data: Uint8Array): void {\n this.peerNet?.gossip(data);\n }\n\n /** Subscribe to peer gossip ({@link gossipToPeers}). Returns an unsubscribe fn. */\n onPeerGossip(handler: (from: string, data: Uint8Array) => void): () => void {\n return this.peerNet?.onGossip(handler) ?? (() => {});\n }\n\n /** Subscribe to a raw channel event. Buffered until `connect()` if early. */\n on(event: string, handler: Listener): void {\n if (this.channel) this.channel.on(event, handler);\n else this.pending.push([event, handler]);\n }\n\n off(event: string, handler: Listener): void {\n if (this.channel) this.channel.off(event, handler);\n else {\n const i = this.pending.findIndex(([e, h]) => e === event && h === handler);\n if (i >= 0) this.pending.splice(i, 1);\n }\n }\n\n // -- legacy Double Ratchet path (unchanged) --------------------------------\n\n /** Advertise our keyExchange to the room (idempotent per connection). */\n announce(): Promise<void> {\n return this.channel ? this.channel.announce() : Promise.resolve();\n }\n\n /** E2E-encrypt `text` to every peer via the Double Ratchet (no history). */\n send(text: string): Promise<number> {\n return this.channel ? this.channel.send(text) : Promise.resolve(0);\n }\n\n /** Send an arbitrary JSON frame (e.g. the `{name}` handshake). */\n sendRaw(frame: unknown): void {\n this.channel?.sendRaw(frame);\n }\n\n peers(): string[] {\n return this.channel?.peers ? this.channel.peers() : [];\n }\n\n isConnected(): boolean {\n return this.channel?.isConnected ? this.channel.isConnected() : false;\n }\n\n /** The underlying channel, for advanced use. `null` before `connect()`. */\n get raw(): SpaceChannelLike | null {\n return this.channel;\n }\n\n // -- fan-out group messaging -----------------------------------------------\n\n /**\n * Seal `payload` once with the current group key and broadcast it as a\n * persisted `spaceMessage`. Requires a keyring.\n */\n async sendMessage(\n payload: unknown,\n opts: { channel?: string; contentType?: string } = {},\n ): Promise<void> {\n const offline = this.deps.offline;\n if (!offline?.enabled) {\n this.sendRaw({ spaceMessage: await this.sealMessage(payload, opts.channel, opts.contentType) });\n return;\n }\n // Offline-aware path: stamp the message, cache it optimistically (so the\n // UI can show it instantly via cachedMessages), then send if connected\n // or durably queue it for replay on reconnect.\n const clientId = offline.newClientId();\n const hlc = await offline.nextHlc();\n const packet = await this.sealMessage(payload, opts.channel, opts.contentType, clientId);\n const frame = { spaceMessage: packet };\n const entry = {\n handle: provisionalSpaceKey(clientId),\n packet,\n op: \"msg\" as const,\n clientId,\n hlc,\n pending: true,\n };\n if (this.isConnected()) {\n this.sendRaw(frame); // send first — don't block the wire on IndexedDB\n void offline.putMessage(this.id, entry); // optimistic cache off the hot path\n } else {\n // Offline: persist the optimistic entry + durable replay queue.\n void offline.putMessage(this.id, entry);\n await offline.enqueueFrame(this.id, frame, clientId, hlc);\n }\n }\n\n /** Subscribe to decrypted fan-out messages. Returns an unsubscribe fn. */\n onMessage(handler: (e: SpaceMessageEvent) => void): () => void {\n const listener = (e: Event) => handler((e as CustomEvent<SpaceMessageEvent>).detail);\n this.events.addEventListener(\"message\", listener);\n return () => this.events.removeEventListener(\"message\", listener);\n }\n\n /**\n * Edit a persisted message IN PLACE, addressed by its server\n * {@link SpaceMessageEvent.handle}. Re-seals `payload` and asks the server\n * to replace the stored entry; the server authorizes against the original\n * author. Receivers get an {@link onMessageEdited} event carrying the new\n * content at the same handle. This is a generic persisted-item edit — the\n * server has no notion of what the payload means.\n */\n async editMessage(handle: number, payload: unknown, opts: { channel?: string; contentType?: string } = {}): Promise<void> {\n const spaceMessage = await this.sealMessage(payload, opts.channel, opts.contentType);\n const frame = { editSpaceMessage: { ts: handle, spaceMessage } };\n const offline = this.deps.offline;\n if (offline?.enabled) {\n await offline.putMessage(this.id, {\n handle: padSpaceHandle(handle),\n packet: spaceMessage,\n op: \"edit\",\n hlc: await offline.nextHlc(),\n });\n if (this.isConnected()) this.sendRaw(frame);\n else await offline.enqueueFrame(this.id, frame, offline.newClientId(), await offline.nextHlc());\n return;\n }\n this.sendRaw(frame);\n }\n\n /**\n * Hard-delete a persisted message by its server {@link SpaceMessageEvent.handle}\n * — the ciphertext is removed from storage. Server authorizes against the\n * original author. Receivers get an {@link onMessageDeleted} event.\n */\n async deleteMessage(handle: number): Promise<void> {\n const frame = { deleteSpaceMessage: { ts: handle } };\n const offline = this.deps.offline;\n if (offline?.enabled) {\n await offline.putDeleted(this.id, handle);\n if (this.isConnected()) this.sendRaw(frame);\n else await offline.enqueueFrame(this.id, frame, offline.newClientId(), await offline.nextHlc());\n return;\n }\n this.sendRaw(frame);\n }\n\n /**\n * Decrypt and return the locally-cached message log for this space, in\n * handle order (pending sends last). Works offline — the source is the\n * IndexedDB cache populated by live frames + {@link history}. Apps call this\n * on boot to paint instantly, then subscribe to {@link onMessage} for live\n * updates. Returns `[]` when offline support is off.\n */\n async cachedMessages(): Promise<SpaceMessageEvent[]> {\n const offline = this.deps.offline;\n if (!offline?.enabled || !this.cipher) return [];\n const entries = (await offline.loadMessages(this.id)).filter((e) => !e.deleted && e.packet);\n // Decode in parallel (already verified when cached → skipVerify).\n const decodedAll = await Promise.all(\n entries.map((e) =>\n this.decodeFrame(e.packet!, this.cipher!, /*isRawFrame*/ true, e.pending ? 0 : Number(e.handle), /*skipVerify*/ true),\n ),\n );\n const out: SpaceMessageEvent[] = [];\n for (let i = 0; i < decodedAll.length; i++) {\n const decoded = decodedAll[i];\n if (decoded) {\n decoded.pending = entries[i].pending;\n out.push(decoded);\n }\n }\n return out;\n }\n\n /** Subscribe to in-place edits of persisted messages (new content at the same handle). */\n onMessageEdited(handler: (e: SpaceMessageEvent) => void): () => void {\n const listener = (e: Event) => handler((e as CustomEvent<SpaceMessageEvent>).detail);\n this.events.addEventListener(\"message-edited\", listener);\n return () => this.events.removeEventListener(\"message-edited\", listener);\n }\n\n /** Subscribe to deletions of persisted messages. */\n onMessageDeleted(handler: (e: MessageDeletedEvent) => void): () => void {\n const listener = (e: Event) => handler((e as CustomEvent<MessageDeletedEvent>).detail);\n this.events.addEventListener(\"message-deleted\", listener);\n return () => this.events.removeEventListener(\"message-deleted\", listener);\n }\n\n /**\n * Broadcast an ephemeral, never-persisted signal to the room over the\n * generic `pub` relay. `subject` is an app-defined routing key; `data` is\n * opaque. The transport stays domain-agnostic — app concepts like typing\n * indicators, presence, or live cursors are built on top of this. No-op if\n * the space isn't connected (ephemeral signals aren't worth queuing).\n */\n sendEphemeral(subject: string, data: unknown, to?: string): void {\n if (!this.isConnected()) return;\n // `to` (a member id) lets the server unicast a *directed* ephemeral\n // instead of broadcasting; omitted ⇒ broadcast to the room (unchanged).\n this.sendRaw({ pub: to ? { subject, data, to } : { subject, data } });\n }\n\n /** Subscribe to inbound ephemeral signals. `from` is the authenticated sender. */\n onEphemeral(handler: (e: EphemeralEvent) => void): () => void {\n const listener = (e: Event) => handler((e as CustomEvent<EphemeralEvent>).detail);\n this.events.addEventListener(\"ephemeral\", listener);\n return () => this.events.removeEventListener(\"ephemeral\", listener);\n }\n\n /** Subscribe to inbound join requests (for a key-holder to admit). */\n onJoinRequest(handler: (req: JoinRequest) => void): () => void {\n const listener = (e: Event) => handler((e as CustomEvent<JoinRequest>).detail);\n this.events.addEventListener(\"join-request\", listener);\n return () => this.events.removeEventListener(\"join-request\", listener);\n }\n\n /**\n * Fetch + decrypt persisted history beyond the live backlog.\n * `before` is an opaque cursor returned as `nextCursor`.\n */\n async history(\n opts: { before?: string; limit?: number } = {},\n ): Promise<{ messages: SpaceMessageEvent[]; nextCursor: string | null }> {\n const cipher = this.requireCipher();\n const params = new URLSearchParams();\n if (opts.before) params.set(\"before\", opts.before);\n if (opts.limit) params.set(\"limit\", String(opts.limit));\n const url =\n `${this.deps.httpBaseUrl}/api/spaces/${encodeURIComponent(this.name)}/history` +\n (params.toString() ? `?${params}` : \"\");\n // Temporary staging diagnostic: split fetch / directory / decode time.\n const dbg = (() => { try { return globalThis.location?.hostname?.includes(\"staging\"); } catch { return false; } })();\n const mark = () => (typeof performance !== \"undefined\" ? performance.now() : Date.now());\n const t0 = mark();\n const res = await this.deps.fetch(url);\n if (!res.ok) throw new Error(`Space.history: ${res.status} ${res.statusText}`);\n const body = (await res.json()) as { messages: string[]; nextCursor: string | null };\n const tFetch = mark();\n // Warm the member directory once so historical senders' signatures verify.\n // Force past the cooldown — a history load is an explicit \"get fresh\".\n await this.deps.keyring?.refreshDirectory({ force: true });\n const tDir = mark();\n // Decode the whole page in PARALLEL — each frame is an AES-GCM decrypt +\n // ECDSA verify on the WebCrypto thread; doing them sequentially (await\n // per message) serializes ~100 main↔crypto round-trips and dominates\n // load time. Promise.all preserves input order.\n const raws = body.messages ?? [];\n const decodedAll = await Promise.all(raws.map((raw) => this.decodeFrame(raw, cipher)));\n if (dbg) {\n console.info(\n `[muhkoo:space] history n=${raws.length} | fetch ${Math.round(tFetch - t0)}ms | dir ${Math.round(tDir - tFetch)}ms | decode ${Math.round(mark() - tDir)}ms`,\n );\n }\n const messages: SpaceMessageEvent[] = [];\n for (let i = 0; i < decodedAll.length; i++) {\n const decoded = decodedAll[i];\n if (!decoded) continue;\n messages.push(decoded);\n // Warm the offline cache off the hot path (best-effort, non-blocking).\n if (this.deps.offline?.enabled) {\n try {\n const outer = JSON.parse(raws[i]) as { spaceMessage?: string };\n if (typeof outer.spaceMessage === \"string\") {\n void this.cacheFrame(outer.spaceMessage, decoded, \"msg\");\n }\n } catch {\n /* unparseable history row — skip caching, still surfaced above */\n }\n }\n }\n return { messages, nextCursor: body.nextCursor ?? null };\n }\n\n /**\n * Bring this member's group keys up to date: load from cache, and if we\n * hold nothing, request a key and poll until one arrives (or timeout).\n */\n async join(opts: { timeoutMs?: number; pollMs?: number } = {}): Promise<boolean> {\n const keyring = this.requireKeyring();\n await this.connect();\n if (await keyring.loadFromCache()) return true;\n if (keyring.hasAnyKey()) return true;\n await keyring.requestKey();\n const deadline = Date.now() + (opts.timeoutMs ?? 15000);\n const pollMs = opts.pollMs ?? 500;\n // eslint-disable-next-line no-constant-condition\n while (Date.now() < deadline) {\n if ((await keyring.pullKeys()) > 0) return true;\n await delay(pollMs);\n }\n return false;\n }\n\n /** Creator path: mint the initial group key, then connect. */\n async create(): Promise<void> {\n const keyring = this.requireKeyring();\n await keyring.bootstrapNew();\n await this.connect();\n // Publish our identity in the member directory so peers can verify our\n // message signatures (the creator never \"joins\", so register here).\n await keyring.requestKey().catch(() => {});\n // Admit anyone who requested a key before we were listening.\n if (this.deps.autoAdmit !== false) {\n await keyring.admitPending().catch(() => {});\n }\n }\n\n /** Wrap the group key for a newcomer and post it (key-holder action). */\n async admit(memberId: string, identityEcdhPub: string): Promise<void> {\n await this.requireKeyring().admit(memberId, identityEcdhPub);\n }\n\n /** Invite a user to this (private) channel's membership allowlist. */\n async invite(username: string): Promise<void> {\n await this.requireKeyring().invite(username);\n }\n\n /** Rotate to a fresh epoch and re-wrap to the roster (rotate spaces). */\n async rotate(roster?: Array<{ memberId: string; identityEcdhPub: string }>): Promise<number> {\n return this.requireKeyring().rotate(roster);\n }\n\n // -- room-scoped files (no websocket needed) -------------------------------\n\n async putFile(\n file: File | Blob | Uint8Array,\n metadata: SpaceFileMetadata,\n opts: {\n onProgress?: (completed: number, total: number) => void;\n /**\n * Return the manifest as soon as shards are cached + announced to the\n * mesh, uploading to origin in the background. Lets a peer/worker start\n * pulling the file over P2P immediately instead of waiting out the full\n * origin upload. Requires an offline cache (browser); ignored without.\n */\n backgroundUpload?: boolean;\n } = {},\n ): Promise<{ manifest: FileManifest; stat: FileStat }> {\n const result = await this.fileStorage(opts.backgroundUpload)\n .writeFileToShards({ data: file, metadata, onProgress: opts.onProgress });\n // Declare this manifest's shards to the accelerator: attributes the stored\n // bytes to the owning app (so storage is never unmetered) and reference-\n // counts the shards for GC. Public shard hashes only — the per-chunk keys\n // stay inside the manifest, which the caller keeps in a vault/Space.\n await this.commitShards(result.manifest, \"commit\");\n return result;\n }\n\n async getFile(manifest: FileManifest): Promise<{ data: Uint8Array; stat: FileStat }> {\n return this.fileStorage().readFileFromShards(manifest);\n }\n\n /** Streaming read: async-iterate a stored file's decrypted chunks in order,\n * never holding the whole file in memory. Use for multi-GB files (a single\n * `Uint8Array` can't hold them) — e.g. a transcoder piping the raw to a temp\n * file. Same peer/origin shard sourcing as {@link getFile}. */\n getFileStream(manifest: FileManifest): AsyncGenerator<Uint8Array> {\n return this.fileStorage().readChunksFromShards(manifest);\n }\n\n /** Declare a file's shards (ref++ + meter) for a manifest already stored —\n * used to back-fill accounting for files written before commit existed, or to\n * register a manifest received via sharing. `putFile` already commits new\n * writes automatically; this is the explicit form. */\n async commitFile(manifest: FileManifest): Promise<void> {\n await this.commitShards(manifest, \"commit\");\n }\n\n /** Release a file's shards (ref--) when the owner deletes or unshares it. At\n * zero references a shard enters a retention window, then is GC'd. Idempotent-\n * ish: safe to call once per manifest the owner drops. */\n async releaseFile(manifest: FileManifest): Promise<void> {\n await this.commitShards(manifest, \"release\");\n }\n\n /** Commit/release a manifest's shards with the accelerator (metering + refcount). */\n private async commitShards(manifest: FileManifest, action: \"commit\" | \"release\"): Promise<void> {\n const hashes = manifest.chunks.flatMap((c) => c.shardHashes);\n if (hashes.length === 0) return;\n const body = JSON.stringify({ hashes, bytes: manifest.size });\n for (let attempt = 0; attempt < 3; attempt++) {\n try {\n const res = await this.deps.fetch(`${this.deps.httpBaseUrl}/api/storage/${action}`, {\n method: \"POST\", headers: { \"Content-Type\": \"application/json\" }, body,\n });\n if (res.ok) return;\n } catch { /* retry */ }\n await new Promise((r) => setTimeout(r, 400 * (attempt + 1)));\n }\n // Best-effort: a missed commit leaves the shards to orphan-GC (still not\n // durable-unmetered long-term); a missed release just delays GC. Reconciled\n // by the platform sweep. Don't fail the caller's write on a metering hiccup.\n console.warn(`[muhkoo] storage ${action} did not confirm for ${hashes.length} shard(s)`);\n }\n\n private fileStorage(backgroundUpload = false): FileStorage {\n // Global, content-addressed shard store — same store `client.storage`\n // uses, so a file shared into a channel resolves from anywhere by\n // manifest. (Shards are encrypted ciphertext; the manifest is the\n // capability.)\n const shards = new ShardClient({\n baseUrl: this.deps.httpBaseUrl,\n pathPrefix: \"/api/shards\",\n fetch: this.deps.fetch,\n cache: this.deps.shardCache,\n deferUpload: this.deps.deferShardUpload,\n peers: this.peerNet?.exchange,\n backgroundUpload,\n });\n return new FileStorage({ shards });\n }\n\n // -- internals -------------------------------------------------------------\n\n /** Wire the RAW_FRAME handler that drives fan-out events. */\n private wireFanout(): void {\n if (this.rawWired || !this.channel) return;\n this.rawWired = true;\n this.channel.on(BroadcastChannelEvents.RAW_FRAME, (e: CustomEvent) => {\n void this.onRawFrame(e.detail);\n });\n }\n\n private async onRawFrame(frame: unknown): Promise<void> {\n const f = frame as Record<string, unknown>;\n if (!f || typeof f !== \"object\") return;\n if (typeof f.spaceMessage === \"string\" && this.cipher) {\n const handle = Number(f.timestamp ?? 0);\n const decoded = await this.decodeFrame(f.spaceMessage as string, this.cipher, /*raw*/ true, handle);\n if (decoded) {\n this.emitEvent(\"message\", decoded); // UI first\n void this.cacheFrame(f.spaceMessage as string, decoded, \"msg\"); // cache off the hot path\n }\n return;\n }\n if (f.editSpaceMessage && typeof f.editSpaceMessage === \"object\" && this.cipher) {\n // Server-authoritative in-place edit: new sealed content at the same\n // handle. Decode and surface it; the app replaces by `handle`.\n const e = f.editSpaceMessage as { ts?: number; spaceMessage?: string };\n if (typeof e.spaceMessage === \"string\") {\n const decoded = await this.decodeFrame(e.spaceMessage, this.cipher, /*raw*/ true, Number(e.ts ?? 0));\n if (decoded) {\n this.emitEvent(\"message-edited\", decoded);\n void this.cacheFrame(e.spaceMessage, decoded, \"edit\");\n }\n }\n return;\n }\n if (f.deleteSpaceMessage && typeof f.deleteSpaceMessage === \"object\") {\n const d = f.deleteSpaceMessage as { ts?: number };\n const handle = Number(d.ts ?? 0);\n this.emitEvent(\"message-deleted\", { handle });\n if (this.deps.offline?.enabled) {\n // Cache the tombstone off the hot path.\n void this.deps.offline.putDeleted(this.id, handle).then(() =>\n this.deps.offline?.observeHandle(this.id, handle),\n );\n }\n return;\n }\n if (f.pub && typeof f.pub === \"object\") {\n // Generic ephemeral relay frame. The server stamps the authenticated\n // sender as `name`; `pub` carries the app's {subject, data}. We\n // surface the authenticated `name` as `from` (not any client-set\n // value inside `pub`), so app signals can't spoof their sender.\n const p = f.pub as { subject?: unknown; data?: unknown };\n const from = typeof f.name === \"string\" ? f.name : \"\";\n if (from && typeof p.subject === \"string\") {\n this.emitEvent(\"ephemeral\", { from, subject: p.subject, data: p.data });\n }\n return;\n }\n if (f.joinRequest && typeof f.joinRequest === \"object\") {\n const req = f.joinRequest as JoinRequest;\n this.emitEvent(\"join-request\", req);\n // A new member appeared — refresh the directory so their future\n // messages verify, and (if we hold the key) auto-admit them.\n void this.deps.keyring?.refreshDirectory({ force: true });\n if (this.deps.autoAdmit !== false && this.deps.keyring?.hasAnyKey() && req.memberId !== this.deps.myId()) {\n void this.deps.keyring.admit(req.memberId, req.identityEcdhPub).catch(() => {});\n }\n return;\n }\n if (f.keyringReady && this.deps.keyring) {\n // A key was wrapped for us — pull it.\n void this.deps.keyring.pullKeys().catch(() => {});\n }\n }\n\n /**\n * Seal `payload` once with the current group key + sign it, returning the\n * serialized `Packet` string. Shared by send (a new message) and edit\n * (replacement content for an existing handle). Requires a keyring.\n */\n private async sealMessage(payload: unknown, channel?: string, contentType?: string, clientId?: string): Promise<string> {\n const cipher = this.requireCipher(contentType);\n const message = new Message(payload);\n const headers = await cipher.seal(message.serialize());\n const source = this.deps.myId();\n const subject = channel ?? \"default\";\n // Cleartext dedupe hint — lets the sender match its optimistic entry to\n // the server echo. Not part of the signed canonical form (it carries no\n // authority); worst case a stale hint just shows a transient duplicate.\n if (clientId) headers.cid = clientId;\n // Sign with our identity ECDSA key so receivers can verify authorship\n // end-to-end (independent of the relay's `source` stamp).\n const authPriv = KeyStore.getInstance().getAuthKeyPair(source)?.privateKey;\n if (authPriv) {\n const canonical = canonicalMessage({\n source, target: this.name, subject,\n epoch: Number(headers.epoch), iv: String(headers.iv), ciphertext: String(headers.ciphertext),\n });\n headers.sig = await signSpaceMessage(canonical, authPriv);\n }\n return new Packet({ subject, source, target: this.name, headers }).serialize();\n }\n\n /**\n * Decode one persisted/broadcast frame into a SpaceMessageEvent.\n * `isRawFrame` true means `input` is the already-extracted `spaceMessage`\n * packet string (and `serverTs` carries the message's storage handle from\n * the enclosing frame); false means `input` is the full\n * `{spaceMessage, name, timestamp}` frame and the handle is read from it.\n */\n private async decodeFrame(\n input: string,\n cipher: SpacePacketCipher,\n isRawFrame = false,\n serverTs = 0,\n skipVerify = false,\n ): Promise<SpaceMessageEvent | null> {\n try {\n let packetJson = input;\n let handle = serverTs;\n if (!isRawFrame) {\n const outer = JSON.parse(input) as { spaceMessage?: string; timestamp?: number };\n if (typeof outer.spaceMessage !== \"string\") return null;\n packetJson = outer.spaceMessage;\n handle = Number(outer.timestamp ?? 0);\n }\n const packet = Packet.deserialize(packetJson);\n if (!cipher.handles(packet.headers)) return null;\n\n // Verify sender authenticity end-to-end: the message must be signed\n // by `source`'s identity ECDSA key (looked up in the member\n // directory). Drop anything unsigned, signed by an unknown member,\n // or whose signature doesn't match — this defeats both member\n // impersonation and a relay rewriting `source`. Skipped only when\n // re-reading from the local cache (already verified before caching).\n if (!skipVerify && !(await this.verifySender(packet))) return null;\n\n const serialized = await cipher.open(packet.headers);\n if (serialized === null) return null; // epoch key we don't hold\n const message = Message.deserialize(serialized);\n return {\n from: packet.source,\n channel: packet.subject,\n epoch: Number(packet.headers?.epoch ?? 0),\n contentType: packet.headers?.contentType as string | undefined,\n handle,\n clientId: packet.headers?.cid as string | undefined,\n message,\n };\n } catch (err) {\n this.emitEvent(\"error\", err);\n return null;\n }\n }\n\n /**\n * True if `packet` carries a valid signature by `source`'s identity key.\n * On a directory cache miss, refresh once (a new member may have just\n * joined) before giving up. Without a keyring (legacy handle) there's\n * nothing to verify against → reject.\n */\n private async verifySender(packet: Packet): Promise<boolean> {\n // Trust our OWN messages — we sent them, so there's nothing to prove\n // against the roster. This also keeps a returning member (who loaded a\n // cached key and never re-published a join-request) from dropping the\n // echo of their own messages when their `ecdsaPub` isn't in the roster.\n if (packet.source === this.deps.myId()) return true;\n const keyring = this.deps.keyring;\n const sig = packet.headers?.sig;\n if (!keyring || typeof sig !== \"string\") return false;\n let key = keyring.ecdsaKeyFor(packet.source);\n if (!key) {\n await keyring.refreshDirectory();\n key = keyring.ecdsaKeyFor(packet.source);\n if (!key) return false;\n }\n const canonical = canonicalMessage({\n source: packet.source,\n target: packet.target,\n subject: packet.subject,\n epoch: Number(packet.headers?.epoch ?? 0),\n iv: String(packet.headers?.iv ?? \"\"),\n ciphertext: String(packet.headers?.ciphertext ?? \"\"),\n });\n return verifySpaceMessage(canonical, sig, key);\n }\n\n /** Persist a decoded live/history/edit frame to the offline cache. */\n private async cacheFrame(packet: string, decoded: SpaceMessageEvent, op: \"msg\" | \"edit\"): Promise<void> {\n const offline = this.deps.offline;\n if (!offline?.enabled) return;\n // An incoming real message supersedes any optimistic pending entry.\n if (decoded.clientId) await offline.dropPending(this.id, decoded.clientId);\n await offline.putMessage(this.id, {\n handle: padSpaceHandle(decoded.handle),\n packet,\n op,\n clientId: decoded.clientId,\n });\n await offline.observeHandle(this.id, decoded.handle);\n }\n\n /**\n * Inbound reconciliation run on reconnect: page the server's forward delta\n * (`?since=<lastSeenHandle>`) to the head, pulling exactly the messages that\n * landed while we were offline into the cache. Bounded so a long absence\n * can't page forever. Falls back gracefully if the endpoint is unavailable.\n */\n private async catchUp(): Promise<void> {\n const offline = this.deps.offline;\n if (!offline?.enabled || !this.cipher) return;\n const cursor = await offline.getCursor(this.id);\n let since = String(cursor?.lastSeenHandle ?? 0);\n // Warm the member directory once so historical senders' signatures verify.\n await this.deps.keyring?.refreshDirectory({ force: true });\n for (let page = 0; page < 50; page++) {\n const url =\n `${this.deps.httpBaseUrl}/api/spaces/${encodeURIComponent(this.name)}/history` +\n `?since=${encodeURIComponent(since)}&limit=100`;\n const res = await this.deps.fetch(url);\n if (!res.ok) break;\n const body = (await res.json()) as { messages: string[]; nextCursor: string | null };\n for (const raw of body.messages ?? []) {\n const decoded = await this.decodeFrame(raw, this.cipher);\n if (!decoded) continue;\n try {\n const outer = JSON.parse(raw) as { spaceMessage?: string };\n if (typeof outer.spaceMessage === \"string\") {\n await this.cacheFrame(outer.spaceMessage, decoded, \"msg\");\n }\n } catch {\n /* unparseable row — skip */\n }\n }\n if (!body.nextCursor) break;\n since = body.nextCursor;\n }\n }\n\n private emitEvent(type: string, detail: unknown): void {\n this.events.dispatchEvent(new CustomEvent(type, { detail }));\n }\n\n private requireKeyring(): SpaceKeyring {\n if (!this.deps.keyring) {\n throw new Error(\"Space: this operation requires a keyring (open via client.space).\");\n }\n return this.deps.keyring;\n }\n\n private requireCipher(contentType?: string): SpacePacketCipher {\n if (!this.deps.keyring) {\n throw new Error(\"Space: fan-out messaging requires a keyring (open via client.space).\");\n }\n return contentType ? new SpacePacketCipher(this.deps.keyring, contentType) : this.cipher!;\n }\n}\n\nfunction delay(ms: number): Promise<void> {\n return new Promise((r) => setTimeout(r, ms));\n}\n\n/**\n * Zero-pad a numeric server handle for use as a cache key, so string-ordered\n * keys sort in handle order. Must match the offline layer's `padHandle`.\n */\nfunction padSpaceHandle(handle: number): string {\n return String(Math.max(0, Math.floor(handle))).padStart(16, \"0\");\n}\n\n/** Cache key for an un-acked optimistic send. Must match the offline layer's\n * `provisionalHandle` (sorts after every real, zero-padded handle). */\nfunction provisionalSpaceKey(clientId: string): string {\n return `~local:${clientId}`;\n}\n\nexport default Space;\n","/**\n * `client.message` — realtime messaging over the shared-space primitive.\n *\n * const sub = client.message.subscribe('todos', e => …) // pub/sub feed\n * await client.message.publish('todos', data)\n * await client.message.send('user:abc', { text: 'Hello!' }) // E2E DM\n *\n * Two distinct modes, one transport (a shared-space room websocket via\n * {@link BroadcastChannel}):\n *\n * - **pub/sub** — `publish`/`subscribe(subject)` ride plaintext `pub` frames\n * the accelerator blind-relays to everyone in the room `pub:<subject>`.\n * - **direct messages** — `send('user:x', …)` is end-to-end encrypted via the\n * Double Ratchet, fanned out in the recipient's inbox room `inbox:x`;\n * the recipient receives them by `subscribe('user:x', …)` (their own id).\n *\n * Every room websocket is opened with a short-lived signed ticket fetched from\n * `POST /api/ws-ticket` (browsers can't set the app-key header on\n * `new WebSocket()`), then completes the room's `{name}` → `{ready}` handshake\n * before any frame is sent.\n */\n\nimport type { HttpClient } from \"../HttpClient\";\nimport type { SessionState } from \"../Session\";\nimport { BroadcastChannel, BroadcastChannelEvents } from \"../../sessions/BroadcastChannel\";\nimport { Room } from \"../Room\";\n\n/** The subset of {@link BroadcastChannel} this namespace drives (test seam). */\nexport interface ChannelLike {\n on(event: string, handler: (e: CustomEvent) => void): void;\n off(event: string, handler: (e: CustomEvent) => void): void;\n connect(): Promise<void>;\n disconnect(): void;\n announce(): Promise<void>;\n send(plaintext: string): Promise<number>;\n sendRaw(frame: unknown): void;\n}\n\nexport interface MessageNamespaceDeps {\n http: HttpClient;\n session: SessionState;\n /** WebSocket base (ws/wss); derived from the accelerator baseUrl. */\n wsBaseUrl: string;\n /** Test seam — defaults to constructing a real {@link BroadcastChannel}. */\n createChannel?: (url: string, myId: string) => ChannelLike;\n}\n\nexport interface MuhkooMessageEvent<T = unknown> {\n subject: string;\n from: string;\n data: T;\n}\n\n/** Handle returned by `subscribe`; call `.unsubscribe()` to detach. */\nexport interface MessageSubscription {\n subject: string;\n unsubscribe(): void;\n}\n\ninterface RoomConn {\n channel: ChannelLike;\n /** Resolves once the room handshake (`{name}` → `{ready}`) completes. */\n ready: Promise<void>;\n}\n\nexport class MessageNamespace {\n /** One connection per room, memoized. */\n private readonly rooms = new Map<string, Promise<RoomConn>>();\n\n constructor(private readonly deps: MessageNamespaceDeps) {}\n\n /**\n * Subscribe to a subject (pub/sub) or to this user's own id (`user:<me>`)\n * to receive direct messages. Returns an unsubscribe handle.\n */\n subscribe<T = unknown>(subject: string, handler: (e: MuhkooMessageEvent<T>) => void): MessageSubscription {\n const isDM = subject.startsWith(\"user:\");\n const room = isDM ? `inbox:${subject.slice(\"user:\".length)}` : `pub:${subject}`;\n const connP = this.getRoom(room, isDM);\n\n let detach = () => {};\n void connP.then(({ channel }) => {\n if (isDM) {\n const onMsg = (e: CustomEvent) => {\n const { from, text } = (e.detail ?? {}) as { from: string; text: string };\n handler({ subject, from, data: parseMaybeJson<T>(text) });\n };\n channel.on(BroadcastChannelEvents.MESSAGE, onMsg);\n detach = () => channel.off(BroadcastChannelEvents.MESSAGE, onMsg);\n } else {\n const onRaw = (e: CustomEvent) => {\n const f = e.detail as { pub?: { subject: string; from?: string; data: T }; name?: string };\n if (f?.pub && f.pub.subject === subject) {\n handler({ subject, from: f.pub.from ?? f.name ?? \"\", data: f.pub.data });\n }\n };\n channel.on(BroadcastChannelEvents.RAW_FRAME, onRaw);\n detach = () => channel.off(BroadcastChannelEvents.RAW_FRAME, onRaw);\n }\n });\n\n return { subject, unsubscribe: () => detach() };\n }\n\n /** Publish `data` to every subscriber of `subject` (plaintext fan-out). */\n async publish<T = unknown>(subject: string, data: T): Promise<void> {\n const { channel, ready } = await this.getRoom(`pub:${subject}`, false);\n await ready;\n channel.sendRaw({ pub: { subject, from: this.myId(), data } });\n }\n\n /**\n * Send an end-to-end-encrypted direct message to `user:<id>`. Delivered in\n * the recipient's inbox room; the recipient must be subscribed\n * (`subscribe('user:<id>')`) and online to receive it (E2E requires a live\n * ratchet between both parties).\n */\n async send<T = unknown>(target: string, payload: T): Promise<void> {\n if (!target.startsWith(\"user:\")) {\n throw new Error(\"client.message.send: target must be 'user:<id>' (use publish() for pub/sub).\");\n }\n const { channel, ready } = await this.getRoom(`inbox:${target.slice(\"user:\".length)}`, true);\n await ready;\n await channel.announce();\n await channel.send(JSON.stringify(payload));\n }\n\n /**\n * Mint a new private shared-space id, server-side. The id MUST come from\n * the accelerator: it's a 64-hex string that embeds the spaces DO class\n * hash, which the worker validates on every subsequent request — client-\n * generated ids would be rejected. Pass the returned id to {@link room}\n * (or share it) to open the space.\n */\n async createRoom(): Promise<string> {\n const body = await this.deps.http.post<{ spaceId?: string }>(\"/api/spaces\");\n if (!body?.spaceId || !/^[0-9a-f]{64}$/.test(body.spaceId)) {\n throw new Error(\"createRoom: malformed server response (expected a 64-hex spaceId)\");\n }\n return body.spaceId;\n }\n\n /**\n * Open a handle to a shared-space room — group E2E messaging plus\n * room-scoped file storage. The websocket isn't opened until\n * `room.connect()`; `room.putFile`/`getFile` work without it. This is the\n * primitive group chat is built on (`publish`/`subscribe`/`send` are the\n * higher-level conveniences layered over the same space transport).\n */\n room(roomName: string): Room {\n return new Room({\n name: roomName,\n wsBaseUrl: this.deps.wsBaseUrl,\n httpBaseUrl: this.deps.http.baseUrl,\n fetch: this.deps.http.fetch,\n myId: () => this.myId(),\n fetchTicket: () => this.fetchTicket(),\n });\n }\n\n /** Close every open room connection (e.g. on logout). */\n disconnect(): void {\n for (const p of this.rooms.values()) {\n void p.then(({ channel }) => channel.disconnect()).catch(() => {});\n }\n this.rooms.clear();\n }\n\n // -------------------------------------------------------------------------\n // Internals\n // -------------------------------------------------------------------------\n\n private getRoom(room: string, e2e: boolean): Promise<RoomConn> {\n let p = this.rooms.get(room);\n if (!p) {\n p = this.openRoom(room, e2e);\n this.rooms.set(room, p);\n }\n return p;\n }\n\n private async openRoom(room: string, _e2e: boolean): Promise<RoomConn> {\n const myId = this.myId();\n const ticket = await this.fetchTicket();\n const url =\n `${this.deps.wsBaseUrl}/api/spaces/${encodeURIComponent(room)}/websocket` +\n (ticket ? `?ticket=${encodeURIComponent(ticket)}` : \"\");\n\n const channel = (this.deps.createChannel ?? defaultCreateChannel)(url, myId);\n\n let resolveReady!: () => void;\n const ready = new Promise<void>((r) => { resolveReady = r; });\n\n // Room handshake: identify with `{name}` on every (re)connect, and\n // mark ready once the server echoes `{ready:true}`.\n channel.on(BroadcastChannelEvents.CONNECTED, () => channel.sendRaw({ name: myId }));\n channel.on(BroadcastChannelEvents.RAW_FRAME, (e: CustomEvent) => {\n if ((e.detail as { ready?: boolean })?.ready) resolveReady();\n });\n\n await channel.connect();\n return { channel, ready };\n }\n\n /** Fetch a short-lived WS upgrade ticket scoped to this app key. */\n private async fetchTicket(): Promise<string | null> {\n try {\n const res = await this.deps.http.post<{ ticket: string }>(\"/api/ws-ticket\", {});\n return res?.ticket ?? null;\n } catch {\n return null;\n }\n }\n\n private myId(): string {\n const id = this.deps.session.username;\n if (!id) throw new Error(\"client.message: not signed in — call client.auth.zk.login() first.\");\n return id;\n }\n}\n\n/** Default channel factory — a real `BroadcastChannel` over the room socket. */\nfunction defaultCreateChannel(url: string, myId: string): ChannelLike {\n return new BroadcastChannel({ url, myId, autoAnnounce: false });\n}\n\n/** Parse a DM payload back from its JSON string, tolerating plain strings. */\nfunction parseMaybeJson<T>(text: string): T {\n try {\n return JSON.parse(text) as T;\n } catch {\n return text as unknown as T;\n }\n}\n\nexport default MessageNamespace;\n","/**\n * SpaceKeyring — the client's view of a space's group keys.\n *\n * Holds the per-epoch group keys this member possesses (in memory, optionally\n * mirrored to PersonalSpace), and orchestrates the server-blind distribution\n * dance against a {@link KeyringTransport}:\n *\n * - a newcomer posts a join request and pulls the wrapped key blob addressed\n * to it, unwrapping with its identity private key;\n * - an existing key-holder wraps the group key for a newcomer (ECIES to the\n * newcomer's identity public key) and posts the opaque blob;\n * - on membership change (rotate spaces) a fresh epoch key is minted and\n * re-wrapped to the current roster.\n *\n * The server only ever stores opaque {@link WrappedKey} blobs — it cannot read\n * the group key. Implements {@link EpochKeyProvider} so it can back a\n * {@link SpacePacketCipher} directly.\n */\n\nimport type { WrappedKey, JoinRequest, HistoryPolicy, SpaceMetadata, RosterMember } from \"./types\";\nimport {\n generateSpaceKey,\n wrapSpaceKey,\n unwrapSpaceKey,\n importEcdhPublicKey,\n importEcdsaPublicKey,\n} from \"./SpaceCipher\";\nimport type { EpochKeyProvider } from \"./SpacePacketCipher\";\n\n/**\n * Reserved member id for the app's \"keeper\" — a trusted always-available member\n * (the accelerator's AppDOv1) that holds the group key and re-issues it to\n * newcomers, so a channel is joinable with no human online. Admitting this id\n * at channel creation hands the key to the keeper. MUST match the accelerator's\n * `KEEPER_MEMBER_ID`.\n */\nexport const KEEPER_MEMBER_ID = \"__keeper__\";\n\n/** Staging-only keyring diagnostics (group-key cache hit/miss, persist, pulls). */\nconst KEYRING_DEBUG = (() => {\n try {\n return typeof location !== \"undefined\" && /(^|\\.)staging\\./.test(location.hostname);\n } catch {\n return false;\n }\n})();\nfunction klog(msg: string): void {\n if (KEYRING_DEBUG) console.info(`[muhkoo:keyring] ${msg}`);\n}\n\n/** Opaque-blob transport to the space's keyring (HTTP or in-memory test seam). */\nexport interface KeyringTransport {\n postJoinRequest(req: JoinRequest): Promise<void>;\n /** All wrapped blobs addressed to `memberId` (any epoch). */\n fetchBlobs(memberId: string): Promise<WrappedKey[]>;\n /** Post a wrapped key blob for `targetMemberId`. */\n postWrappedKey(targetMemberId: string, wrapped: WrappedKey, fromMemberId: string): Promise<void>;\n /** Outstanding join requests (for an online key-holder to fulfill). */\n fetchPending(): Promise<JoinRequest[]>;\n /** Current roster: member ids + their identity ECDH/ECDSA public keys. */\n fetchRoster(): Promise<RosterMember[]>;\n /** Advisory epoch bump; returns the agreed new epoch. */\n rotate(nextEpoch: number): Promise<{ epoch: number }>;\n /** Add `username` to a private channel's membership allowlist. */\n invite(username: string): Promise<void>;\n fetchMetadata(): Promise<SpaceMetadata | null>;\n}\n\n/** PersonalSpace-backed cache of this member's group keys (epoch → base64 key). */\nexport interface SpaceKeyCache {\n loadKeys(spaceId: string): Promise<Record<string, string> | null>;\n saveKeys(spaceId: string, keys: Record<string, string>): Promise<void>;\n}\n\nexport interface SpaceKeyringDeps {\n spaceId: string;\n memberId: string;\n /** This member's identity ECDH public key, base64url JWK (for join requests). */\n identityEcdhPub: string;\n /** This member's identity ECDSA public key, base64url JWK (published for\n * sender-signature verification). */\n identityEcdsaPub?: string;\n /** Resolves this member's identity ECDH private key (for unwrapping). */\n ownPrivateKey: () => CryptoKey | null;\n transport: KeyringTransport;\n cache?: SpaceKeyCache;\n historyPolicy?: HistoryPolicy;\n}\n\nexport class SpaceKeyring implements EpochKeyProvider {\n private readonly keys = new Map<number, Uint8Array>();\n private epoch = 0;\n private readonly policy: HistoryPolicy;\n /** Cached member directory: memberId → imported ECDSA verify key. */\n private readonly memberEcdsa = new Map<string, CryptoKey>();\n /** Coalesce concurrent roster refreshes (the parallel history/backlog decode\n * would otherwise fire one `roster` fetch PER message — a thundering herd). */\n private dirInFlight: Promise<void> | null = null;\n private dirRefreshedAt = 0;\n /** Min gap between non-forced roster refreshes. A miss that persists within\n * this window won't re-fetch (the roster hasn't changed that fast); genuine\n * membership changes use `{ force: true }` (join requests / history loads). */\n private static readonly DIR_COOLDOWN_MS = 5000;\n\n constructor(private readonly deps: SpaceKeyringDeps) {\n this.policy = deps.historyPolicy ?? \"static\";\n }\n\n // -- member directory (for verifying sender signatures) -------------------\n\n /** The cached ECDSA verify key for a member, if known. */\n ecdsaKeyFor(memberId: string): CryptoKey | undefined {\n return this.memberEcdsa.get(memberId);\n }\n\n /**\n * Refresh the member directory (memberId → ECDSA key) from the roster.\n * Coalesces concurrent callers into ONE fetch, and skips a fetch when one\n * completed within {@link DIR_COOLDOWN_MS} (unless `force`). Without this, a\n * page of N messages decoded in parallel — each missing the cold directory —\n * fires N simultaneous `roster` requests that queue behind the browser's\n * connection limit and take many seconds.\n */\n async refreshDirectory(opts?: { force?: boolean }): Promise<void> {\n if (this.dirInFlight) return this.dirInFlight; // a refresh is already running\n if (!opts?.force && Date.now() - this.dirRefreshedAt < SpaceKeyring.DIR_COOLDOWN_MS) {\n return; // refreshed very recently — the roster won't have changed\n }\n this.dirInFlight = this.doRefreshDirectory().finally(() => {\n this.dirRefreshedAt = Date.now();\n this.dirInFlight = null;\n });\n return this.dirInFlight;\n }\n\n private async doRefreshDirectory(): Promise<void> {\n let roster: RosterMember[];\n try {\n roster = await this.deps.transport.fetchRoster();\n } catch {\n return;\n }\n for (const m of roster) {\n if (!m.identityEcdsaPub || this.memberEcdsa.has(m.memberId)) continue;\n try {\n this.memberEcdsa.set(m.memberId, await importEcdsaPublicKey(m.identityEcdsaPub));\n } catch {\n /* skip malformed entries */\n }\n }\n }\n\n // -- EpochKeyProvider ------------------------------------------------------\n\n currentEpoch(): number {\n return this.epoch;\n }\n\n keyForEpoch(epoch: number): Uint8Array | undefined {\n return this.keys.get(epoch);\n }\n\n hasAnyKey(): boolean {\n return this.keys.size > 0;\n }\n\n // -- lifecycle -------------------------------------------------------------\n\n /** Hydrate keys from the PersonalSpace cache, if available. Best-effort —\n * a cache miss/failure (e.g. not unlocked) must not block joining. */\n async loadFromCache(): Promise<boolean> {\n if (!this.deps.cache) return false;\n // The cache entries are ECIES-wrapped to our identity key, so we unwrap\n // with the keyring's OWN private key — available whenever chat works,\n // unlike client.kv's StorageCipher which needs the full unlocked identity.\n const priv = this.deps.ownPrivateKey();\n if (!priv) {\n klog(\"loadFromCache: no private key available yet\");\n return false;\n }\n let cached: Record<string, string> | null;\n try {\n cached = await this.deps.cache.loadKeys(this.deps.spaceId);\n } catch (e) {\n klog(`loadFromCache: ERROR reading cache — ${e instanceof Error ? e.message : e}`);\n return false;\n }\n if (!cached) {\n klog(\"loadFromCache: cache empty\");\n return false;\n }\n for (const [epochStr, serialized] of Object.entries(cached)) {\n try {\n const blob = JSON.parse(serialized) as WrappedKey;\n this.keys.set(Number(epochStr), await unwrapSpaceKey(blob, priv));\n } catch {\n /* stale / old-format entry — skip; we'll re-admit and re-persist */\n }\n }\n if (this.keys.size === 0) {\n klog(\"loadFromCache: no usable entries (stale format → will re-admit)\");\n return false;\n }\n this.epoch = Math.max(0, ...Array.from(this.keys.keys()));\n klog(`loadFromCache: HIT ${this.keys.size} epoch(s), current=${this.epoch}`);\n return true;\n }\n\n private async persist(): Promise<void> {\n if (!this.deps.cache || this.keys.size === 0) return;\n // Best-effort: caching is an optimization; a write failure must not break\n // key acquisition.\n try {\n // Wrap each epoch key to our OWN identity key (ECIES-to-self). The\n // cache stays server-blind (the kv layer stores it with encrypt:false\n // — it's already encrypted) AND readable with the keyring private key\n // alone, so it works while the full identity is locked (post-reload).\n const selfPub = await importEcdhPublicKey(this.deps.identityEcdhPub);\n const out: Record<string, string> = {};\n for (const [epoch, key] of this.keys) {\n out[String(epoch)] = JSON.stringify(await wrapSpaceKey(key, epoch, selfPub));\n }\n await this.deps.cache.saveKeys(this.deps.spaceId, out);\n klog(`persist: saved ${Object.keys(out).length} epoch(s)`);\n } catch (e) {\n klog(`persist: FAILED — ${e instanceof Error ? e.message : e}`);\n }\n }\n\n /** Creator path: mint epoch-0 group key for a brand-new space. */\n async bootstrapNew(): Promise<void> {\n this.keys.set(0, generateSpaceKey());\n this.epoch = 0;\n await this.persist();\n }\n\n // -- newcomer: request + pull ---------------------------------------------\n\n /**\n * Post a join request so an online key-holder can wrap a key for us. Also\n * publishes our identity keys in the member directory (so others can verify\n * our message signatures, and the keeper can wrap to us).\n */\n async requestKey(desiredEpoch?: number): Promise<void> {\n await this.deps.transport.postJoinRequest({\n memberId: this.deps.memberId,\n identityEcdhPub: this.deps.identityEcdhPub,\n identityEcdsaPub: this.deps.identityEcdsaPub,\n desiredEpoch,\n });\n }\n\n /**\n * Pull and unwrap any blobs addressed to us. Returns the number of new\n * epoch keys obtained. Safe to call repeatedly (idempotent).\n */\n async pullKeys(): Promise<number> {\n const priv = this.deps.ownPrivateKey();\n if (!priv) throw new Error(\"SpaceKeyring: no identity private key to unwrap with\");\n const blobs = await this.deps.transport.fetchBlobs(this.deps.memberId);\n let added = 0;\n for (const blob of blobs) {\n if (this.keys.has(blob.epoch)) continue;\n try {\n const key = await unwrapSpaceKey(blob, priv);\n this.keys.set(blob.epoch, key);\n added++;\n } catch {\n // Not for us / tampered — skip this blob.\n }\n }\n if (added > 0) {\n this.epoch = Math.max(this.epoch, ...Array.from(this.keys.keys()));\n await this.persist();\n }\n klog(`pullKeys: +${added} epoch(s) (now hold ${this.keys.size}, current=${this.epoch})`);\n return added;\n }\n\n /**\n * Background freshness check for the cache-hit fast path: confirm we hold the\n * current epoch (picks up a rotation / our removal) WITHOUT the full newcomer\n * admit handshake. Cheap + idempotent; never blocks first paint. Returns the\n * number of newly-obtained epoch keys (0 = already current).\n */\n async reconcile(): Promise<number> {\n await this.refreshDirectory({ force: true });\n try {\n return await this.pullKeys();\n } catch {\n return 0; // best-effort — the live keyringReady frame is the backstop\n }\n }\n\n // -- key-holder: admit + rotate -------------------------------------------\n\n /**\n * Wrap our group key(s) for a newcomer and post the blobs. In a `static`\n * space the newcomer receives every epoch we hold (full history); in a\n * `rotate` space they receive only the current epoch.\n */\n async admit(targetMemberId: string, identityEcdhPub: string): Promise<void> {\n const recipient = await importEcdhPublicKey(identityEcdhPub);\n const epochs = this.policy === \"static\"\n ? Array.from(this.keys.keys())\n : [this.epoch];\n for (const epoch of epochs) {\n const key = this.keys.get(epoch);\n if (!key) continue;\n const wrapped = await wrapSpaceKey(key, epoch, recipient);\n await this.deps.transport.postWrappedKey(targetMemberId, wrapped, this.deps.memberId);\n }\n }\n\n /**\n * Admit every outstanding join request (an online key-holder fulfilling\n * pending newcomers). Returns the ids admitted.\n */\n async admitPending(): Promise<string[]> {\n const pending = await this.deps.transport.fetchPending();\n const admitted: string[] = [];\n for (const req of pending) {\n if (req.memberId === this.deps.memberId) continue;\n await this.admit(req.memberId, req.identityEcdhPub);\n admitted.push(req.memberId);\n }\n return admitted;\n }\n\n /**\n * Rotate to a fresh epoch (rotate spaces). Mints a new group key, advances\n * the epoch, and re-wraps it to every member in `roster` (plus ourselves).\n */\n async rotate(roster?: Array<{ memberId: string; identityEcdhPub: string }>): Promise<number> {\n const members = roster ?? (await this.deps.transport.fetchRoster());\n const { epoch: nextEpoch } = await this.deps.transport.rotate(this.epoch + 1);\n const newKey = generateSpaceKey();\n this.keys.set(nextEpoch, newKey);\n this.epoch = nextEpoch;\n for (const m of members) {\n if (m.memberId === this.deps.memberId) continue;\n const recipient = await importEcdhPublicKey(m.identityEcdhPub);\n const wrapped = await wrapSpaceKey(newKey, nextEpoch, recipient);\n await this.deps.transport.postWrappedKey(m.memberId, wrapped, this.deps.memberId);\n }\n await this.persist();\n return nextEpoch;\n }\n\n /** Add `username` to a private channel's membership allowlist (member-only). */\n async invite(username: string): Promise<void> {\n await this.deps.transport.invite(username);\n }\n}\n","/**\n * KeyringClient — HTTP implementation of {@link KeyringTransport} against the\n * accelerator's per-space keyring endpoints. All blobs are opaque to the\n * server; this client just moves them.\n *\n * POST /api/spaces/:id/keyring/join-request { ...JoinRequest }\n * GET /api/spaces/:id/keyring/blobs/:member -> WrappedKey[]\n * POST /api/spaces/:id/keyring/wrap { targetMemberId, fromMemberId, wrapped }\n * GET /api/spaces/:id/keyring/pending -> JoinRequest[]\n * GET /api/spaces/:id/keyring/roster -> { memberId, identityEcdhPub }[]\n * POST /api/spaces/:id/keyring/rotate { nextEpoch } -> { epoch }\n * GET /api/spaces/:id/metadata -> SpaceMetadata\n */\n\nimport type { KeyringTransport } from \"./SpaceKeyring\";\nimport type { WrappedKey, JoinRequest, SpaceMetadata, RosterMember, InviteLink } from \"./types\";\n\nexport interface KeyringClientDeps {\n spaceId: string;\n httpBaseUrl: string;\n /** Header-injecting fetch from the client's HttpClient. */\n fetch: typeof fetch;\n}\n\nexport class KeyringClient implements KeyringTransport {\n constructor(private readonly deps: KeyringClientDeps) {}\n\n private url(suffix: string): string {\n return `${this.deps.httpBaseUrl}/api/spaces/${encodeURIComponent(this.deps.spaceId)}${suffix}`;\n }\n\n private async post<T>(suffix: string, body: unknown): Promise<T> {\n const res = await this.deps.fetch(this.url(suffix), {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n });\n if (!res.ok) throw new Error(`KeyringClient POST ${suffix}: ${res.status} ${res.statusText}`);\n return (await res.json().catch(() => ({}))) as T;\n }\n\n private async get<T>(suffix: string): Promise<T> {\n const res = await this.deps.fetch(this.url(suffix));\n if (!res.ok) throw new Error(`KeyringClient GET ${suffix}: ${res.status} ${res.statusText}`);\n return (await res.json()) as T;\n }\n\n async postJoinRequest(req: JoinRequest): Promise<void> {\n await this.post(\"/keyring/join-request\", req);\n }\n\n async fetchBlobs(memberId: string): Promise<WrappedKey[]> {\n const body = await this.get<{ blobs?: WrappedKey[] }>(\n `/keyring/blobs/${encodeURIComponent(memberId)}`,\n );\n return body.blobs ?? [];\n }\n\n async postWrappedKey(targetMemberId: string, wrapped: WrappedKey, fromMemberId: string): Promise<void> {\n await this.post(\"/keyring/wrap\", { targetMemberId, fromMemberId, wrapped });\n }\n\n async fetchPending(): Promise<JoinRequest[]> {\n const body = await this.get<{ pending?: JoinRequest[] }>(\"/keyring/pending\");\n return body.pending ?? [];\n }\n\n async fetchRoster(): Promise<RosterMember[]> {\n const body = await this.get<{ roster?: RosterMember[] }>(\"/keyring/roster\");\n return body.roster ?? [];\n }\n\n async rotate(nextEpoch: number): Promise<{ epoch: number }> {\n return this.post<{ epoch: number }>(\"/keyring/rotate\", { nextEpoch });\n }\n\n async invite(username: string): Promise<void> {\n await this.post(\"/keyring/invite\", { username });\n }\n\n // -- Shareable invite links ----------------------------------------------\n // A capability token tied to this space. Redeeming it allowlists the holder\n // so the keeper admits them — the link IS the invitation. Mint/list/revoke\n // require the caller to be the creator or an existing member.\n\n async createInviteLink(opts: { expiresInSec?: number; maxUses?: number; role?: string } = {}): Promise<InviteLink> {\n return this.post<InviteLink>(\"/keyring/link\", opts);\n }\n\n async listInviteLinks(): Promise<InviteLink[]> {\n const body = await this.get<{ links?: InviteLink[] }>(\"/keyring/links\");\n return body.links ?? [];\n }\n\n /** Set a member's role (\"viewer\" | \"editor\"). Owner-only on the server. */\n async setMemberRole(username: string, role: string): Promise<void> {\n await this.post(\"/keyring/role\", { username, role });\n }\n\n /** Roster with roles (owner/members only). */\n async members(): Promise<Array<{ memberId: string; role: string }>> {\n const body = await this.get<{ members?: Array<{ memberId: string; role: string }> }>(\"/keyring/members\");\n return body.members ?? [];\n }\n\n async revokeInviteLink(token: string): Promise<void> {\n await this.post(\"/keyring/link-revoke\", { token });\n }\n\n /** Redeem a link: the server allowlists this member and asks the keeper to\n * wrap the group key for their identity. Caller must be authenticated. */\n async redeemInvite(req: { token: string; identityEcdhPub: string; identityEcdsaPub?: string; desiredEpoch?: number }): Promise<void> {\n await this.post(\"/keyring/redeem\", req);\n }\n\n async fetchMetadata(): Promise<SpaceMetadata | null> {\n try {\n return await this.get<SpaceMetadata>(\"/metadata\");\n } catch {\n return null;\n }\n }\n}\n","/**\n * Message-log helpers — the conflict model for a Space's message history.\n *\n * Messages are the easy CRDT: the accelerator assigns every persisted message a\n * monotonic, zero-padded `handle` that already totally-orders the log, and the\n * sealed body is immutable. So the \"log\" is just a grow-only set keyed by\n * `handle`, and convergence is structural — no server change needed.\n *\n * The only subtleties this module encodes:\n * - **Optimistic sends** have no server handle yet. We key them by a\n * provisional handle that sorts *after* every real one, and tag them with\n * the sender's `clientId` so the real frame (carrying the same `clientId`)\n * can replace the placeholder instead of duplicating it.\n * - **Edits** are a per-message LWW register on the body (greater HLC wins).\n * - **Deletes** are a tombstone at the message's handle.\n */\n\nexport type MessageOp = \"msg\" | \"edit\" | \"delete\";\n\nexport interface MessageEntry {\n /** Server-assigned handle, or a {@link provisionalHandle} while pending. */\n handle: string;\n /** Sealed packet string (ciphertext at rest); `null` for a delete tombstone. */\n packet: string | null;\n op: MessageOp;\n /** Sender-generated id, present on locally-originated sends for dedupe. */\n clientId?: string;\n /** HLC stamp — orders edits to the same message. */\n hlc?: string;\n /** True while an optimistic send has not yet been acked by the server. */\n pending?: boolean;\n deleted?: boolean;\n}\n\n/** IndexedDB key for a message within a space. */\nexport function messageKey(spaceId: string, handle: string): string {\n return `${spaceId}|${handle}`;\n}\n\n/**\n * A handle for an un-acked optimistic message. Prefixed with `\"~\"` (0x7E),\n * which sorts after every digit, so pending sends always appear at the tail of\n * the handle-ordered log until the real handle arrives.\n */\nexport function provisionalHandle(clientId: string): string {\n return `~local:${clientId}`;\n}\n\nexport function isProvisional(handle: string): boolean {\n return handle.startsWith(\"~local:\");\n}\n\n/**\n * Merge two entries for the SAME handle. A delete always wins (tombstone); an\n * edit wins over the entry it supersedes when its HLC is greater; otherwise the\n * existing entry stands (a re-delivered `msg` is idempotent).\n */\nexport function mergeMessage(local: MessageEntry | null, incoming: MessageEntry): MessageEntry {\n if (!local) return incoming;\n if (incoming.op === \"delete\" || local.deleted) {\n return { ...local, op: \"delete\", packet: null, deleted: true };\n }\n if (incoming.op === \"edit\") {\n if (!local.hlc || (incoming.hlc && incoming.hlc > local.hlc)) {\n return { ...local, packet: incoming.packet, hlc: incoming.hlc, op: \"edit\" };\n }\n return local;\n }\n // incoming.op === \"msg\": keep the already-stored (de-pending) entry.\n return { ...local, pending: false };\n}\n","/**\n * `SpaceCache` — the offline adapter a {@link ../spaces/Space} talks to. It\n * persists sealed message frames (ciphertext at rest), tracks per-space sync\n * cursors, and records offline sends in the durable queue. Kept as its own\n * object (rather than wiring the Space straight to the store + clock) so the\n * Space stays decoupled from IndexedDB and so the no-op path is a single\n * `enabled` check.\n *\n * Messages are the structural CRDT (see {@link ./crdt/MessageLog}): the server\n * assigns a monotonic `handle` that totally-orders the log, so the cache just\n * stores frames keyed by a zero-padded handle (real) or a provisional key\n * (pending sends, which sort to the tail until their echo arrives).\n */\n\nimport {\n messageKey,\n provisionalHandle,\n type MessageEntry,\n type MessageOp,\n} from \"./crdt/MessageLog\";\nimport type { OfflineManager } from \"./OfflineManager\";\nimport type { OfflineStore } from \"./store/OfflineStore\";\n\n/** Zero-pad a numeric server handle so string keys sort in handle order. */\nexport function padHandle(handle: number): string {\n return String(Math.max(0, Math.floor(handle))).padStart(16, \"0\");\n}\n\nexport interface SpaceCursor {\n lastSeenHandle: number;\n oldestHandle: number;\n fullyBackfilled: boolean;\n}\n\n/**\n * The surface a {@link ../spaces/Space} uses. Declared structurally on the\n * Space side too (as `SpaceOfflineAdapter`) so the spaces module never imports\n * the offline module.\n */\nexport class SpaceCache {\n private readonly store: OfflineStore;\n\n constructor(private readonly manager: OfflineManager) {\n this.store = manager.store;\n }\n\n get enabled(): boolean {\n return this.manager.enabled;\n }\n\n newClientId(): string {\n return this.manager.newClientId();\n }\n\n nextHlc(): Promise<string> {\n return this.manager.nextHlc();\n }\n\n /** Persist a sealed message frame keyed by its (real or provisional) handle. */\n async putMessage(spaceId: string, entry: MessageEntry): Promise<void> {\n await this.store.put(\"space-messages\", messageKey(spaceId, entry.handle), entry);\n }\n\n /** Tombstone the message at `handle`. */\n async putDeleted(spaceId: string, handle: number): Promise<void> {\n const key = messageKey(spaceId, padHandle(handle));\n const existing = await this.store.get<MessageEntry>(\"space-messages\", key);\n await this.store.put(\"space-messages\", key, {\n handle: padHandle(handle),\n packet: null,\n op: \"delete\" as MessageOp,\n deleted: true,\n clientId: existing?.clientId,\n });\n }\n\n /** Drop a pending (optimistic) entry once its real echo has been stored. */\n async dropPending(spaceId: string, clientId: string): Promise<void> {\n await this.store.delete(\"space-messages\", messageKey(spaceId, provisionalHandle(clientId)));\n }\n\n /** All cached frames for a space, in handle order (pending ones last). */\n async loadMessages(spaceId: string): Promise<MessageEntry[]> {\n const rows = await this.store.range<MessageEntry>(\n \"space-messages\",\n `${spaceId}|`,\n `${spaceId}|￿`,\n );\n return rows.map((r) => r.value);\n }\n\n async getCursor(spaceId: string): Promise<SpaceCursor | null> {\n return this.store.get<SpaceCursor>(\"space-cursors\", spaceId);\n }\n\n /** Advance the last-seen handle (monotonic) and track the oldest fetched. */\n async observeHandle(spaceId: string, handle: number): Promise<void> {\n if (!handle) return;\n const cur = (await this.getCursor(spaceId)) ?? {\n lastSeenHandle: 0,\n oldestHandle: handle,\n fullyBackfilled: false,\n };\n const next: SpaceCursor = {\n lastSeenHandle: Math.max(cur.lastSeenHandle, handle),\n oldestHandle: cur.oldestHandle ? Math.min(cur.oldestHandle, handle) : handle,\n fullyBackfilled: cur.fullyBackfilled,\n };\n await this.store.put(\"space-cursors\", spaceId, next);\n }\n\n /** Queue a raw space frame for replay when the connection returns. */\n async enqueueFrame(spaceId: string, frame: unknown, clientId: string, hlc: string): Promise<void> {\n await this.manager.enqueue({\n hlc,\n clientId,\n domain: \"space\",\n method: \"sendRaw\",\n args: { spaceId, frame },\n });\n }\n\n /** Register an inbound catch-up task (forward/back history paging). */\n registerCatchUp(task: () => Promise<void>): () => void {\n return this.manager.registerCatchUp(task);\n }\n}\n\nexport default SpaceCache;\n","/**\n * `ShardCache` — a Cache-API-backed store for file-shard bytes. Shards are\n * content-addressed (the key IS the SHA-256 of the ciphertext), so caching them\n * is uniquely safe: a cache hit is self-validating, immutable, and shareable\n * across files. The Cache API (rather than IndexedDB) is the right home for\n * large binary blobs — it streams, it's purpose-built for response bodies, and\n * it has its own eviction.\n *\n * Keys are SYNTHETIC absolute URLs (`https://shard.muhkoo.local/<hash>`) rather\n * than the real shard endpoint, so the cache is addressable by hash alone — the\n * sync engine can re-PUT a deferred shard knowing only its hash, without\n * reconstructing the accelerator URL. We never fetch these synthetic URLs; they\n * exist only as cache keys.\n *\n * Every method degrades to a no-op / null where the Cache API is unavailable\n * (Node, Workers, insecure contexts), so callers don't need to branch.\n */\n\nconst CACHE_NAME = \"muhkoo-shards-v1\";\n\nexport class ShardCache {\n static available(): boolean {\n try {\n return typeof caches !== \"undefined\";\n } catch {\n return false;\n }\n }\n\n private key(hash: string): string {\n return `https://shard.muhkoo.local/${encodeURIComponent(hash)}`;\n }\n\n private open(): Promise<Cache> {\n return caches.open(CACHE_NAME);\n }\n\n /** Cached shard bytes, or `null` on miss / when unavailable. */\n async get(hash: string): Promise<Uint8Array | null> {\n if (!ShardCache.available()) return null;\n try {\n const cache = await this.open();\n const res = await cache.match(this.key(hash));\n if (!res) return null;\n return new Uint8Array(await res.arrayBuffer());\n } catch {\n return null;\n }\n }\n\n /** Store shard bytes under their hash. Best-effort. */\n async put(hash: string, bytes: Uint8Array): Promise<void> {\n if (!ShardCache.available()) return;\n try {\n const cache = await this.open();\n await cache.put(\n this.key(hash),\n new Response(bytes as BodyInit, {\n headers: { \"content-type\": \"application/octet-stream\" },\n }),\n );\n } catch {\n /* quota / unavailable — degrade to online-only for this shard */\n }\n }\n\n /** Whether a shard is present in the cache. */\n async has(hash: string): Promise<boolean> {\n if (!ShardCache.available()) return false;\n try {\n const cache = await this.open();\n return Boolean(await cache.match(this.key(hash)));\n } catch {\n return false;\n }\n }\n}\n\nexport default ShardCache;\n","/**\n * `PeerExchange` — the thin façade the storage layer consults to try fetching a\n * block from peers before falling back to origin. It satisfies the structural\n * `PeerBlockSource` interface that {@link ../storage/transport/ShardClient}\n * declares (so storage never imports the p2p module — the dependency arrow stays\n * one-way, p2p → storage).\n *\n * It delegates to an {@link EngineHandle} — either an in-process {@link\n * ./worker/blockEngine.BlockEngine} or the Web Worker proxy — so the same façade\n * works whether the block engine runs on the main thread or off it.\n */\n\nimport type { PeerBlockSource } from \"../storage/transport/ShardClient\";\n\n/** The subset of a block engine (in-process or worker-proxied) PeerExchange drives. */\nexport interface EngineHandle {\n want(hash: string, timeoutMs: number): Promise<Uint8Array | null>;\n announce(hash: string): void;\n}\n\nexport interface PeerExchangeOptions {\n /** How long to wait for a peer before giving up to origin. Default 2500ms. */\n timeoutMs?: number;\n /** Log peer-served vs origin-fallback per block to the console. */\n debug?: boolean;\n}\n\nexport class PeerExchange implements PeerBlockSource {\n private readonly timeoutMs: number;\n private readonly debug: boolean;\n\n constructor(private readonly engine: EngineHandle, opts: PeerExchangeOptions = {}) {\n this.timeoutMs = opts.timeoutMs ?? 2500;\n this.debug = opts.debug ?? false;\n }\n\n async getBlock(hash: string, opts?: { timeoutMs?: number }): Promise<Uint8Array | null> {\n const bytes = await this.engine.want(hash, opts?.timeoutMs ?? this.timeoutMs);\n if (this.debug) {\n console.info(\n `%c[muhkoo:p2p] ${bytes ? \"✓ peer-served\" : \"✗ miss → origin\"} shard ${hash.slice(0, 10)}…`,\n `color:${bytes ? \"#58da7d\" : \"#888\"}`,\n );\n }\n return bytes;\n }\n\n announce(hash: string): void {\n if (this.debug) console.info(`[muhkoo:p2p] announce shard ${hash.slice(0, 10)}…`);\n this.engine.announce(hash);\n }\n}\n\nexport default PeerExchange;\n","/**\n * `SpaceSignaler` — WebRTC signaling carried over the Space's existing ephemeral\n * relay. No new server channel: `Space.sendEphemeral`/`onEphemeral` already\n * blind-relay `pub` frames stamped with the authenticated sender, so SDP\n * offers/answers and ICE candidates ride a reserved subject (`__p2p__`) scoped\n * to Space membership. The sender (`from`) is server-stamped and can't be\n * spoofed; the payload is opaque to the server.\n *\n * Peers are identified by a unique **peer id** (per device/connection), carried\n * in the envelope's `from`/`to` — NOT by the server-stamped member id. This is\n * essential: one user's own devices share a member id, so the server's `from`\n * can't tell them apart (and would make each treat the others' signals as its\n * own echo). We therefore route entirely on the envelope peer ids and broadcast\n * to the whole Space, filtering client-side. The server `from` still guarantees\n * the sender is an authenticated Space member.\n */\n\nexport const P2P_SUBJECT = \"__p2p__\";\n\nexport type SignalKind = \"hello\" | \"bye\" | \"offer\" | \"answer\" | \"ice\";\n\nexport interface SignalEnvelope {\n /** Sender's unique PEER id (per device/connection). */\n from: string;\n /** Target peer id, or `\"*\"` to broadcast (discovery / departure). */\n to: string;\n kind: SignalKind;\n data?: unknown;\n}\n\n/** The slice of {@link ../../spaces/Space.Space} the signaler needs. */\nexport interface SignalingSpace {\n sendEphemeral(subject: string, data: unknown, to?: string): void;\n onEphemeral(handler: (e: { from: string; subject: string; data: unknown }) => void): () => void;\n}\n\nexport class SpaceSignaler {\n constructor(\n private readonly space: SignalingSpace,\n private readonly myId: string,\n ) {}\n\n /** Send a signal to one peer (or `\"*\"`). */\n send(to: string, kind: SignalKind, data?: unknown): void {\n const env: SignalEnvelope = { from: this.myId, to, kind, data };\n // Always broadcast to the Space: the server can't unicast to a specific\n // DEVICE (a user's devices share a member id), so we route client-side on\n // the envelope peer id. Signaling frames are tiny.\n this.space.sendEphemeral(P2P_SUBJECT, env);\n }\n\n /** Announce/withdraw P2P availability to all Space members. */\n broadcast(kind: SignalKind, data?: unknown): void {\n this.send(\"*\", kind, data);\n }\n\n /**\n * Subscribe to inbound signals addressed to us (or broadcast). Skips our own\n * echoes. Returns an unsubscribe function. Routing is entirely by the envelope\n * peer id (`env.from`/`env.to`), so a user's own devices — which share the\n * server-stamped `e.from` — are correctly distinguished.\n */\n onSignal(cb: (from: string, kind: SignalKind, data: unknown) => void): () => void {\n return this.space.onEphemeral((e) => {\n if (e.subject !== P2P_SUBJECT) return;\n const env = e.data as SignalEnvelope | undefined;\n if (!env || typeof env.kind !== \"string\" || typeof env.from !== \"string\") return;\n if (env.from === this.myId) return; // our own device's echo\n if (env.to !== this.myId && env.to !== \"*\") return;\n cb(env.from, env.kind, env.data);\n });\n }\n}\n\nexport default SpaceSignaler;\n","/**\n * `WebRtcTransport` — a {@link ./PeerTransport.PeerTransport} over RTCDataChannels,\n * signaled by {@link ../signaling/SpaceSignaler}. Runs on the **main thread**\n * (`RTCPeerConnection` is Window-only — not available in Workers), so the block\n * engine lives in a Worker and this only shuttles bytes.\n *\n * Connection setup uses a deterministic initiator (the peer with the smaller id\n * dials) to avoid offer/answer glare. STUN handles NAT traversal; there is no\n * TURN — an unreachable peer simply never connects and the caller falls back to\n * origin (P2P is best-effort).\n *\n * Frames (up to a 4 MiB shard) exceed an RTCDataChannel's max message size, so\n * each frame is fragmented into `CHUNK`-sized pieces with a 12-byte header\n * `[msgId u32][index u32][total u32]` and reassembled per peer.\n */\n\nimport type { PeerId, PeerTransport } from \"./PeerTransport\";\nimport type { SpaceSignaler, SignalKind } from \"../signaling/SpaceSignaler\";\n\nconst CHUNK = 16 * 1024;\n// [msgId u32][index u32][total u32][channel u32]\nconst HEADER = 16;\n/** Pause sends when a channel has this many bytes buffered (backpressure). */\nconst MAX_BUFFERED = 4 * 1024 * 1024;\n\nconst DEFAULT_ICE: RTCIceServer[] = [{ urls: \"stun:stun.cloudflare.com:3478\" }];\n\ninterface Reassembly {\n chunks: Array<Uint8Array | undefined>;\n received: number;\n total: number;\n size: number;\n channel: number;\n}\n\ninterface PeerConn {\n pc: RTCPeerConnection;\n dc?: RTCDataChannel;\n reasm: Map<number, Reassembly>;\n /** Has setRemoteDescription completed? ICE can't be added before it. */\n remoteSet: boolean;\n /** ICE candidates that arrived before SRD — flushed once remoteSet. */\n pendingIce: RTCIceCandidateInit[];\n}\n\nexport interface WebRtcTransportOptions {\n iceServers?: RTCIceServer[];\n /** Cap on simultaneous peer connections (mesh size). Default 8. */\n maxPeers?: number;\n /** Log ICE/connection state transitions for diagnosing peer connectivity. */\n debug?: boolean;\n}\n\nexport class WebRtcTransport implements PeerTransport {\n private readonly conns = new Map<PeerId, PeerConn>();\n private readonly msgCbs = new Set<(peer: PeerId, data: Uint8Array, channel: number) => void>();\n private readonly peerCbs = new Set<(peers: PeerId[]) => void>();\n private readonly offSignal: () => void;\n private readonly iceServers: RTCIceServer[];\n private readonly maxPeers: number;\n private readonly debug: boolean;\n private nextMsgId = 1;\n\n constructor(\n private readonly signaler: SpaceSignaler,\n private readonly myId: PeerId,\n opts: WebRtcTransportOptions = {},\n ) {\n this.iceServers = opts.iceServers ?? DEFAULT_ICE;\n this.maxPeers = opts.maxPeers ?? 8;\n this.debug = opts.debug ?? false;\n this.offSignal = this.signaler.onSignal((from, kind, data) => this.onSignal(from, kind, data));\n }\n\n private log(...a: unknown[]): void {\n if (this.debug) console.info(\"[muhkoo:p2p]\", ...a);\n }\n\n peers(): PeerId[] {\n return [...this.conns].filter(([, c]) => c.dc?.readyState === \"open\").map(([id]) => id);\n }\n\n /** Dial a peer (no-op unless we're the deterministic initiator for the pair). */\n connectTo(peerId: PeerId): void {\n if (peerId === this.myId || this.conns.has(peerId)) return;\n if (this.conns.size >= this.maxPeers) return; // mesh cap\n if (this.myId < peerId) void this.initiate(peerId); // smaller id dials\n }\n\n send(peer: PeerId, data: Uint8Array, channel = 0): void {\n const dc = this.conns.get(peer)?.dc;\n if (dc?.readyState === \"open\") void this.sendFragmented(dc, data, channel);\n }\n\n broadcast(data: Uint8Array, channel = 0): void {\n for (const [, c] of this.conns) {\n if (c.dc?.readyState === \"open\") void this.sendFragmented(c.dc, data, channel);\n }\n }\n\n onMessage(cb: (peer: PeerId, data: Uint8Array, channel: number) => void): () => void {\n this.msgCbs.add(cb);\n return () => this.msgCbs.delete(cb);\n }\n\n onPeerChange(cb: (peers: PeerId[]) => void): () => void {\n this.peerCbs.add(cb);\n return () => this.peerCbs.delete(cb);\n }\n\n close(): void {\n this.offSignal();\n for (const [, c] of this.conns) {\n try { c.dc?.close(); } catch { /* already closing */ }\n try { c.pc.close(); } catch { /* already closing */ }\n }\n this.conns.clear();\n this.msgCbs.clear();\n this.peerCbs.clear();\n }\n\n // -- internals -----------------------------------------------------------\n\n private newPc(peerId: PeerId): PeerConn {\n const pc = new RTCPeerConnection({ iceServers: this.iceServers });\n const conn: PeerConn = { pc, reasm: new Map(), remoteSet: false, pendingIce: [] };\n this.conns.set(peerId, conn);\n const short = String(peerId).slice(0, 8);\n pc.onicecandidate = (e) => {\n if (e.candidate) {\n this.log(`${short} local candidate ${e.candidate.type ?? \"?\"} ${(e.candidate.address ?? e.candidate.candidate).toString().slice(0, 40)}`);\n this.signaler.send(peerId, \"ice\", e.candidate.toJSON());\n }\n };\n pc.onconnectionstatechange = () => {\n this.log(`${short} connection=${pc.connectionState}`);\n if ([\"failed\", \"closed\", \"disconnected\"].includes(pc.connectionState)) this.drop(peerId);\n };\n if (this.debug) {\n pc.oniceconnectionstatechange = () => this.log(`${short} ice=${pc.iceConnectionState}`);\n pc.onicegatheringstatechange = () => this.log(`${short} gathering=${pc.iceGatheringState}`);\n }\n pc.ondatachannel = (e) => this.bindChannel(peerId, conn, e.channel);\n return conn;\n }\n\n /** Mark a peer's remote description as set and apply any ICE candidates that\n * arrived before it (dropping them, the old behavior, breaks LAN dials). */\n private async markRemoteSet(conn: PeerConn): Promise<void> {\n conn.remoteSet = true;\n const pending = conn.pendingIce;\n conn.pendingIce = [];\n for (const cand of pending) {\n try { await conn.pc.addIceCandidate(cand); } catch { /* stale/duplicate */ }\n }\n if (pending.length) this.log(`flushed ${pending.length} queued ICE candidate(s)`);\n }\n\n private async initiate(peerId: PeerId): Promise<void> {\n const conn = this.newPc(peerId);\n const dc = conn.pc.createDataChannel(\"blocks\");\n this.bindChannel(peerId, conn, dc);\n const offer = await conn.pc.createOffer();\n await conn.pc.setLocalDescription(offer);\n this.signaler.send(peerId, \"offer\", offer);\n }\n\n private bindChannel(peerId: PeerId, conn: PeerConn, dc: RTCDataChannel): void {\n dc.binaryType = \"arraybuffer\";\n conn.dc = dc;\n dc.onopen = () => this.firePeerChange();\n dc.onclose = () => this.drop(peerId);\n dc.onmessage = (e) => this.onChunk(peerId, conn, new Uint8Array(e.data as ArrayBuffer));\n }\n\n private async onSignal(from: PeerId, kind: SignalKind, data: unknown): Promise<void> {\n if (kind === \"offer\") {\n if (!this.conns.has(from) && this.conns.size >= this.maxPeers) return; // mesh cap\n const conn = this.conns.get(from) ?? this.newPc(from);\n await conn.pc.setRemoteDescription(data as RTCSessionDescriptionInit);\n await this.markRemoteSet(conn);\n const answer = await conn.pc.createAnswer();\n await conn.pc.setLocalDescription(answer);\n this.signaler.send(from, \"answer\", answer);\n } else if (kind === \"answer\") {\n const conn = this.conns.get(from);\n if (conn) {\n await conn.pc.setRemoteDescription(data as RTCSessionDescriptionInit);\n await this.markRemoteSet(conn);\n }\n } else if (kind === \"ice\") {\n const conn = this.conns.get(from);\n if (conn && data) {\n // Queue candidates that arrive before setRemoteDescription — adding\n // them early throws and (previously) dropped them, which killed the\n // connection on fast LANs where ICE beats the SDP answer.\n if (!conn.remoteSet) { conn.pendingIce.push(data as RTCIceCandidateInit); return; }\n try { await conn.pc.addIceCandidate(data as RTCIceCandidateInit); } catch { /* stale */ }\n }\n } else if (kind === \"bye\") {\n this.drop(from);\n }\n }\n\n private drop(peerId: PeerId): void {\n const conn = this.conns.get(peerId);\n if (!conn) return;\n this.conns.delete(peerId);\n try { conn.dc?.close(); } catch { /* already closing */ }\n try { conn.pc.close(); } catch { /* already closing */ }\n this.firePeerChange();\n }\n\n private firePeerChange(): void {\n const peers = this.peers();\n for (const cb of this.peerCbs) cb(peers);\n }\n\n // -- fragmentation -------------------------------------------------------\n\n private async sendFragmented(dc: RTCDataChannel, data: Uint8Array, channel: number): Promise<void> {\n const msgId = this.nextMsgId++ >>> 0;\n const total = Math.max(1, Math.ceil(data.length / CHUNK));\n for (let i = 0; i < total; i++) {\n const slice = data.subarray(i * CHUNK, (i + 1) * CHUNK);\n const frame = new Uint8Array(HEADER + slice.length);\n const dv = new DataView(frame.buffer);\n dv.setUint32(0, msgId);\n dv.setUint32(4, i);\n dv.setUint32(8, total);\n dv.setUint32(12, channel);\n frame.set(slice, HEADER);\n if (dc.bufferedAmount > MAX_BUFFERED) await this.drain(dc);\n dc.send(frame);\n }\n }\n\n private drain(dc: RTCDataChannel): Promise<void> {\n return new Promise((resolve) => {\n dc.bufferedAmountLowThreshold = MAX_BUFFERED / 2;\n const onLow = () => { dc.removeEventListener(\"bufferedamountlow\", onLow); resolve(); };\n dc.addEventListener(\"bufferedamountlow\", onLow);\n });\n }\n\n private onChunk(peerId: PeerId, conn: PeerConn, frame: Uint8Array): void {\n if (frame.length < HEADER) return;\n const dv = new DataView(frame.buffer, frame.byteOffset, frame.byteLength);\n const msgId = dv.getUint32(0);\n const index = dv.getUint32(4);\n const total = dv.getUint32(8);\n const channel = dv.getUint32(12);\n const chunk = frame.slice(HEADER);\n\n let r = conn.reasm.get(msgId);\n if (!r) {\n r = { chunks: new Array(total), received: 0, total, size: 0, channel };\n conn.reasm.set(msgId, r);\n }\n if (r.chunks[index]) return; // dup\n r.chunks[index] = chunk;\n r.received++;\n r.size += chunk.length;\n if (r.received < r.total) return;\n\n conn.reasm.delete(msgId);\n const out = new Uint8Array(r.size);\n let off = 0;\n for (const c of r.chunks) {\n if (!c) return; // gap — shouldn't happen on reliable ordered\n out.set(c, off);\n off += c.length;\n }\n for (const cb of this.msgCbs) cb(peerId, out, r.channel);\n }\n}\n\nexport default WebRtcTransport;\n","/**\n * `PeerTransport` — the pluggable wire under the block engine. It moves opaque\n * frames between Space peers; it knows nothing about blocks, hashes, or the\n * protocol. {@link ./WebRtcTransport} implements it over RTCDataChannels today;\n * a future libp2p/Helia transport can implement the same interface without the\n * block engine or `ShardClient` changing.\n *\n * Implementations are responsible for fragmenting/ reassembling frames larger\n * than the underlying channel's max message size (a 4 MiB shard won't fit in one\n * `RTCDataChannel.send`); the engine always deals in whole frames.\n */\n\nexport type PeerId = string;\n\n/**\n * Logical channels multiplexed over the one data link. `0` is block exchange\n * (the engine), `1` is gossip (app/CRDT data). The tag rides the framing header\n * so payloads aren't copied to prepend it.\n */\nexport const CHANNEL_BLOCK = 0;\nexport const CHANNEL_GOSSIP = 1;\n\nexport interface PeerTransport {\n /** Currently connected peer ids. */\n peers(): PeerId[];\n /** Dial a discovered peer (optional — some transports connect implicitly). */\n connectTo?(peer: PeerId): void;\n /** Send a whole frame to one peer on `channel` (fragmented internally if needed). */\n send(peer: PeerId, data: Uint8Array, channel?: number): void;\n /** Send a whole frame to every connected peer on `channel`. */\n broadcast(data: Uint8Array, channel?: number): void;\n /** Subscribe to inbound (reassembled) frames. Returns an unsubscribe fn. */\n onMessage(cb: (peer: PeerId, data: Uint8Array, channel: number) => void): () => void;\n /** Subscribe to the connected-peer set changing. Returns an unsubscribe fn. */\n onPeerChange(cb: (peers: PeerId[]) => void): () => void;\n /** Tear down all connections. */\n close(): void;\n}\n","/**\n * Bitswap-lite wire protocol for peer block exchange. Four frame types over a\n * {@link ../transport/PeerTransport} data channel:\n *\n * WANT(hash) — \"does anyone have this block?\" / \"send it to me\"\n * HAVE(hash) — \"I hold this block\" (announce / reply to a WANT)\n * BLOCK(hash, bytes) — the block itself (verified by hash on receipt)\n * CANCEL(hash) — \"stop, I got it elsewhere\"\n *\n * Frames are compact binary so a 4 MiB shard isn't base64-bloated through JSON:\n *\n * byte 0 : type (0 WANT | 1 HAVE | 2 BLOCK | 3 CANCEL)\n * bytes 1..33 : 32-byte raw SHA-256 of the block (our shard hash, hex-decoded)\n * bytes 33.. : payload (BLOCK only)\n *\n * Blocks are AES-GCM ciphertext, so a frame carries nothing readable; the hash\n * is the capability check (the receiver re-hashes the payload and drops a\n * mismatch). See {@link ./blockEngine}.\n */\n\nexport enum FrameType {\n WANT = 0,\n HAVE = 1,\n BLOCK = 2,\n CANCEL = 3,\n}\n\nexport interface DecodedFrame {\n type: FrameType;\n /** Lowercase hex SHA-256 (matches `shardHash`). */\n hash: string;\n /** Present only for {@link FrameType.BLOCK}. */\n payload?: Uint8Array;\n}\n\nconst HASH_BYTES = 32;\nconst HEADER = 1 + HASH_BYTES; // type + hash\n\nfunction hexToBytes(hex: string): Uint8Array {\n if (hex.length !== HASH_BYTES * 2) {\n throw new Error(`protocol: expected a ${HASH_BYTES}-byte hex hash, got ${hex.length / 2} bytes`);\n }\n const out = new Uint8Array(HASH_BYTES);\n for (let i = 0; i < HASH_BYTES; i++) out[i] = parseInt(hex.substr(i * 2, 2), 16);\n return out;\n}\n\nconst HEX = Array.from({ length: 256 }, (_, i) => i.toString(16).padStart(2, \"0\"));\nfunction bytesToHex(bytes: Uint8Array): string {\n let s = \"\";\n for (let i = 0; i < bytes.length; i++) s += HEX[bytes[i]];\n return s;\n}\n\nfunction header(type: FrameType, hash: string, extra = 0): { buf: Uint8Array; offset: number } {\n const buf = new Uint8Array(HEADER + extra);\n buf[0] = type;\n buf.set(hexToBytes(hash), 1);\n return { buf, offset: HEADER };\n}\n\nexport function encodeWant(hash: string): Uint8Array {\n return header(FrameType.WANT, hash).buf;\n}\n\nexport function encodeHave(hash: string): Uint8Array {\n return header(FrameType.HAVE, hash).buf;\n}\n\nexport function encodeCancel(hash: string): Uint8Array {\n return header(FrameType.CANCEL, hash).buf;\n}\n\nexport function encodeBlock(hash: string, payload: Uint8Array): Uint8Array {\n const { buf, offset } = header(FrameType.BLOCK, hash, payload.length);\n buf.set(payload, offset);\n return buf;\n}\n\nexport function decode(frame: Uint8Array): DecodedFrame {\n if (frame.length < HEADER) throw new Error(\"protocol: frame too short\");\n const type = frame[0] as FrameType;\n const hash = bytesToHex(frame.subarray(1, HEADER));\n if (type === FrameType.BLOCK) {\n // Copy the payload out so it doesn't alias a transferred/pooled buffer.\n return { type, hash, payload: frame.slice(HEADER) };\n }\n return { type, hash };\n}\n","/**\n * `BlockEngine` — the bitswap-lite want/have ledger. Host-agnostic: it speaks\n * only to a {@link BlockStore} (get/put/has) and an `out` sink that ships\n * encoded frames to a peer (or `\"*\"` to broadcast). The host wires `out` and\n * `handleFrame` to a real transport — on the main thread or inside the Web\n * Worker (see {@link ./engineClient}) — so this class is pure and unit-testable.\n *\n * It never sees keys: blocks are AES-GCM ciphertext, addressed by SHA-256. The\n * one trust check is integrity — an inbound BLOCK is re-hashed and dropped on\n * mismatch, so a malicious peer can't poison the store (the requester just\n * falls back to origin).\n */\n\nimport {\n FrameType,\n decode,\n encodeWant,\n encodeHave,\n encodeBlock,\n encodeCancel,\n} from \"./protocol\";\n\nexport interface BlockStore {\n get(hash: string): Promise<Uint8Array | null>;\n put(hash: string, bytes: Uint8Array): Promise<void>;\n has(hash: string): Promise<boolean>;\n}\n\n/** Ship an encoded frame to one peer, or `\"*\"` for every connected peer. */\nexport type OutSink = (target: string | \"*\", frame: Uint8Array) => void;\n\n/** Lowercase hex SHA-256 of `bytes` — injected so tests can stub it. */\nexport type Hasher = (bytes: Uint8Array) => Promise<string>;\n\ninterface PendingWant {\n resolvers: Array<(b: Uint8Array | null) => void>;\n timer: ReturnType<typeof setTimeout>;\n}\n\nexport class BlockEngine {\n private readonly wants = new Map<string, PendingWant>();\n\n constructor(\n private readonly store: BlockStore,\n private readonly out: OutSink,\n private readonly hash: Hasher,\n ) {}\n\n /**\n * Ask the swarm for a block. Resolves with the verified bytes, or `null` on\n * timeout (caller then falls back to origin). Returns immediately if we\n * already hold it; concurrent wants for the same hash share one request.\n */\n want(hash: string, timeoutMs: number): Promise<Uint8Array | null> {\n return new Promise((resolve) => {\n void this.store.get(hash).then((local) => {\n if (local) return resolve(local);\n const existing = this.wants.get(hash);\n if (existing) {\n existing.resolvers.push(resolve);\n return;\n }\n const timer = setTimeout(() => {\n const w = this.wants.get(hash);\n this.wants.delete(hash);\n this.out(\"*\", encodeCancel(hash));\n w?.resolvers.forEach((r) => r(null));\n }, timeoutMs);\n this.wants.set(hash, { resolvers: [resolve], timer });\n this.out(\"*\", encodeWant(hash));\n });\n });\n }\n\n /** Tell the swarm we now hold `hash` (so peers wanting it can pull from us). */\n announce(hash: string): void {\n this.out(\"*\", encodeHave(hash));\n }\n\n /** Handle one inbound frame from `peer`. */\n async handleFrame(peer: string, frame: Uint8Array): Promise<void> {\n let f;\n try {\n f = decode(frame);\n } catch {\n return; // malformed — ignore\n }\n switch (f.type) {\n case FrameType.WANT: {\n const bytes = await this.store.get(f.hash);\n if (bytes) this.out(peer, encodeBlock(f.hash, bytes));\n return;\n }\n case FrameType.HAVE: {\n // A peer announced a block we're still waiting for → pull from them.\n if (this.wants.has(f.hash)) this.out(peer, encodeWant(f.hash));\n return;\n }\n case FrameType.BLOCK: {\n const pending = this.wants.get(f.hash);\n if (!pending || !f.payload) return; // unsolicited / empty — ignore\n // Integrity: a peer can't poison the store. Drop a mismatch and\n // keep waiting (the timeout will fall back to origin).\n const got = await this.hash(f.payload);\n if (got !== f.hash) return;\n await this.store.put(f.hash, f.payload);\n this.wants.delete(f.hash);\n clearTimeout(pending.timer);\n this.out(\"*\", encodeCancel(f.hash)); // others can stop sending\n pending.resolvers.forEach((r) => r(f.payload!));\n return;\n }\n case FrameType.CANCEL:\n // We serve WANTs synchronously, so there's nothing in flight to\n // cancel yet. Reserved for chunked-send cancellation later.\n return;\n }\n }\n\n /** Drop all pending waits (resolve null) — on teardown. */\n close(): void {\n for (const [, w] of this.wants) {\n clearTimeout(w.timer);\n w.resolvers.forEach((r) => r(null));\n }\n this.wants.clear();\n }\n}\n\nexport default BlockEngine;\n","/**\n * `EngineHost` — the boundary {@link ../PeerNetwork} wires a transport to. It\n * abstracts *where* the {@link ./blockEngine.BlockEngine} runs:\n * - {@link LocalEngineHost} runs it on the calling thread (tests, or a\n * fallback when the Web Worker can't be built by a consumer's bundler);\n * - the Worker proxy ({@link ./engineClient}) runs it off-thread.\n *\n * Either way the host exposes the same surface: drive `want`/`announce`, feed it\n * inbound frames via `handleFrame`, and receive its outbound frames via\n * `onOutbound` (which the network forwards to the transport).\n */\n\nimport { BlockEngine, type BlockStore, type Hasher } from \"./blockEngine\";\n\nexport interface EngineHost {\n want(hash: string, timeoutMs: number): Promise<Uint8Array | null>;\n announce(hash: string): void;\n /** Feed an inbound frame received from `peer` on the transport. */\n handleFrame(peer: string, frame: Uint8Array): void;\n /** Receive frames the engine wants to send (`\"*\"` = broadcast). */\n onOutbound(cb: (target: string, frame: Uint8Array) => void): () => void;\n close(): void;\n}\n\n/** Runs the engine in-process (main thread or test). */\nexport class LocalEngineHost implements EngineHost {\n private readonly engine: BlockEngine;\n private readonly cbs = new Set<(target: string, frame: Uint8Array) => void>();\n\n constructor(store: BlockStore, hasher: Hasher) {\n this.engine = new BlockEngine(\n store,\n (target, frame) => {\n for (const cb of this.cbs) cb(target, frame);\n },\n hasher,\n );\n }\n\n want(hash: string, timeoutMs: number): Promise<Uint8Array | null> {\n return this.engine.want(hash, timeoutMs);\n }\n announce(hash: string): void {\n this.engine.announce(hash);\n }\n handleFrame(peer: string, frame: Uint8Array): void {\n void this.engine.handleFrame(peer, frame);\n }\n onOutbound(cb: (target: string, frame: Uint8Array) => void): () => void {\n this.cbs.add(cb);\n return () => this.cbs.delete(cb);\n }\n close(): void {\n this.engine.close();\n this.cbs.clear();\n }\n}\n\nexport default LocalEngineHost;\n","/**\n * `WorkerEngineHost` — the main-thread proxy to a {@link ./blockEngine.BlockEngine}\n * running inside a dedicated Web Worker (so hashing, blockstore I/O, and the\n * protocol codec stay off the main thread). It speaks the small message protocol\n * in {@link ./blockEngine.worker} and satisfies {@link ./engineHost.EngineHost},\n * so {@link ../PeerNetwork} treats it identically to the in-process host.\n *\n * Block bytes cross the worker boundary as **transferable** ArrayBuffers\n * (zero-copy). Only encrypted blocks ever cross — keys never enter the worker.\n */\n\nimport type { EngineHost } from \"./engineHost\";\n\ntype WorkerOut =\n | { t: \"out\"; target: string; data: ArrayBuffer }\n | { t: \"want-result\"; id: number; data: ArrayBuffer | null };\n\nexport class WorkerEngineHost implements EngineHost {\n private readonly wants = new Map<number, (b: Uint8Array | null) => void>();\n private readonly cbs = new Set<(target: string, frame: Uint8Array) => void>();\n private nextId = 1;\n\n constructor(private readonly worker: Worker) {\n this.worker.onmessage = (e: MessageEvent<WorkerOut>) => {\n const m = e.data;\n if (m.t === \"out\") {\n const frame = new Uint8Array(m.data);\n for (const cb of this.cbs) cb(m.target, frame);\n } else if (m.t === \"want-result\") {\n const resolve = this.wants.get(m.id);\n if (resolve) {\n this.wants.delete(m.id);\n resolve(m.data ? new Uint8Array(m.data) : null);\n }\n }\n };\n }\n\n want(hash: string, timeoutMs: number): Promise<Uint8Array | null> {\n return new Promise((resolve) => {\n const id = this.nextId++;\n this.wants.set(id, resolve);\n this.worker.postMessage({ t: \"want\", id, hash, timeout: timeoutMs });\n });\n }\n\n announce(hash: string): void {\n this.worker.postMessage({ t: \"announce\", hash });\n }\n\n handleFrame(peer: string, frame: Uint8Array): void {\n // Transfer an exact-size buffer; copy if the view doesn't own the whole buffer.\n const buf =\n frame.byteOffset === 0 && frame.byteLength === frame.buffer.byteLength\n ? frame.buffer\n : frame.slice().buffer;\n this.worker.postMessage({ t: \"frame\", peer, data: buf }, [buf]);\n }\n\n onOutbound(cb: (target: string, frame: Uint8Array) => void): () => void {\n this.cbs.add(cb);\n return () => this.cbs.delete(cb);\n }\n\n close(): void {\n try { this.worker.postMessage({ t: \"close\" }); } catch { /* already gone */ }\n this.worker.terminate();\n this.wants.forEach((r) => r(null));\n this.wants.clear();\n this.cbs.clear();\n }\n}\n\nexport default WorkerEngineHost;\n","/**\n * `PeerNetwork` — the per-Space orchestrator that ties the pieces together on\n * the main thread:\n *\n * transport (WebRTC) ⇄ engine host (Worker or in-process) → PeerExchange\n * ▲ │\n * └────────────── signaling over the Space relay ─────────────┘\n *\n * It owns one {@link ./transport/WebRtcTransport} + one {@link\n * ./worker/engineHost.EngineHost}, wires inbound frames to the engine and the\n * engine's outbound frames back to the transport, runs peer discovery over the\n * Space's ephemeral channel, and exposes a {@link ./PeerExchange.PeerExchange}\n * for `ShardClient` to consult. Scope is one Space (private swarm).\n *\n * `engineHost` defaults to in-process; pass `workerFactory` to run the block\n * engine off the main thread (the consumer's bundler resolves the worker URL).\n */\n\nimport { ShardCache } from \"../offline/cache/ShardCache\";\nimport { shardHash } from \"../storage/transport/ShardClient\";\nimport { PeerExchange } from \"./PeerExchange\";\nimport { SpaceSignaler, type SignalingSpace } from \"./signaling/SpaceSignaler\";\nimport { WebRtcTransport } from \"./transport/WebRtcTransport\";\nimport { CHANNEL_BLOCK, CHANNEL_GOSSIP, type PeerTransport } from \"./transport/PeerTransport\";\nimport { LocalEngineHost, type EngineHost } from \"./worker/engineHost\";\nimport { WorkerEngineHost } from \"./worker/engineClient\";\nimport type { BlockStore } from \"./worker/blockEngine\";\n\nexport interface PeerNetworkOptions {\n /** The Space (used for signaling over its ephemeral relay). */\n space: SignalingSpace;\n /** Our authenticated member id (the Space's `myId`). */\n myId: string;\n /** Blockstore for the in-process engine. Defaults to a `ShardCache`. */\n store?: BlockStore;\n /** Run the block engine in a Worker — `() => new Worker(new URL(...))`. */\n workerFactory?: () => Worker;\n iceServers?: RTCIceServer[];\n maxPeers?: number;\n /** Peer fetch timeout passed to PeerExchange. */\n timeoutMs?: number;\n /** Inject a transport (tests / a future libp2p transport). Default WebRTC. */\n transport?: PeerTransport;\n /** Log mesh + block-exchange activity to the console (use on staging/dev). */\n debug?: boolean;\n}\n\n/**\n * Build the engine host, preferring an off-thread Web Worker:\n * 1. an explicit `workerFactory` (most reliable in app bundlers), else\n * 2. the bundled worker resolved relative to this module (works where the\n * bundler supports `new Worker(new URL(...))`, e.g. Vite builds), else\n * 3. the in-process engine (always works; tests + non-worker runtimes).\n * Any worker construction failure degrades to in-process.\n */\nfunction buildEngineHost(opts: PeerNetworkOptions): EngineHost {\n try {\n const worker = opts.workerFactory ? opts.workerFactory() : defaultWorker();\n if (worker) return new WorkerEngineHost(worker);\n } catch {\n /* no Worker global / bundler can't resolve it → in-process */\n }\n return new LocalEngineHost(opts.store ?? new ShardCache(), shardHash);\n}\n\n/** Construct the bundled worker if the runtime + bundler support it, else null. */\nfunction defaultWorker(): Worker | null {\n try {\n if (typeof Worker === \"undefined\") return null;\n // The string is resolved by the consumer's bundler relative to the\n // built connect module (sibling of dist/browser/index.js).\n return new Worker(new URL(\"./blockEngine.worker.js\", import.meta.url), { type: \"module\" });\n } catch {\n return null;\n }\n}\n\nexport class PeerNetwork {\n /** Pass this to a `ShardClient` as `peers`. */\n readonly exchange: PeerExchange;\n private readonly transport: PeerTransport;\n private readonly host: EngineHost;\n private readonly signaler: SpaceSignaler;\n private readonly offs: Array<() => void> = [];\n private readonly gossipCbs = new Set<(from: string, data: Uint8Array) => void>();\n private closed = false;\n\n constructor(opts: PeerNetworkOptions) {\n this.signaler = new SpaceSignaler(opts.space, opts.myId);\n this.transport =\n opts.transport ??\n new WebRtcTransport(this.signaler, opts.myId, {\n iceServers: opts.iceServers,\n maxPeers: opts.maxPeers,\n debug: opts.debug,\n });\n this.host = buildEngineHost(opts);\n\n // Wire transport ⇄ engine, demuxing block (engine) from gossip (app).\n this.offs.push(\n this.transport.onMessage((peer, data, channel) => {\n if (channel === CHANNEL_GOSSIP) {\n for (const cb of this.gossipCbs) cb(peer, data);\n } else {\n this.host.handleFrame(peer, data);\n }\n }),\n );\n this.offs.push(\n this.host.onOutbound((target, frame) =>\n target === \"*\"\n ? this.transport.broadcast(frame, CHANNEL_BLOCK)\n : this.transport.send(target, frame, CHANNEL_BLOCK),\n ),\n );\n\n // Discovery: a broadcast hello triggers a unicast hello back (so a\n // newcomer learns existing members); both sides connectTo (the smaller\n // id actually dials). Deterministic + idempotent.\n this.offs.push(\n this.signaler.onSignal((from, kind, data) => {\n if (kind !== \"hello\") return;\n this.transport.connectTo?.(from);\n if ((data as { broadcast?: boolean } | undefined)?.broadcast) {\n this.signaler.send(from, \"hello\", { broadcast: false });\n }\n }),\n );\n\n this.exchange = new PeerExchange(this.host, { timeoutMs: opts.timeoutMs, debug: opts.debug });\n\n if (opts.debug) {\n console.info(\"[muhkoo:p2p] mesh attached for space; awaiting peers…\");\n this.offs.push(\n this.transport.onPeerChange((peers) =>\n console.info(`%c[muhkoo:p2p] connected peers: ${peers.length}`, \"color:#58da7d\", peers),\n ),\n );\n }\n }\n\n /**\n * Begin peer discovery — broadcast a hello so existing members dial us and\n * we learn them. Call once the signaling channel is live (the Space fires\n * this on CONNECTED); safe to call again on reconnect.\n */\n start(): void {\n if (this.closed) return;\n this.signaler.broadcast(\"hello\", { broadcast: true });\n }\n\n /**\n * Broadcast an app payload to all connected peers over the gossip channel —\n * a direct, server-bypassing data path for CRDT ops / high-frequency state\n * (cursors, presence, collaborative edits). Single-hop (no re-forwarding).\n */\n gossip(data: Uint8Array): void {\n this.transport.broadcast(data, CHANNEL_GOSSIP);\n }\n\n /** Subscribe to gossip from peers. Returns an unsubscribe function. */\n onGossip(cb: (from: string, data: Uint8Array) => void): () => void {\n this.gossipCbs.add(cb);\n return () => this.gossipCbs.delete(cb);\n }\n\n /** Connected peer count (open data channels). */\n peerCount(): number {\n return this.transport.peers().length;\n }\n\n close(): void {\n if (this.closed) return;\n this.closed = true;\n try { this.signaler.broadcast(\"bye\"); } catch { /* socket may be gone */ }\n for (const off of this.offs) off();\n this.transport.close();\n this.host.close();\n }\n}\n\nexport default PeerNetwork;\n","/**\n * Whether this environment can do WebRTC peering. `RTCPeerConnection` is\n * Window-only (absent in Node/Workers/SSR), so this gates whether a\n * {@link ./PeerNetwork} can be built at all.\n */\nexport function isP2pCapable(): boolean {\n try {\n return typeof RTCPeerConnection !== \"undefined\";\n } catch {\n return false;\n }\n}\n","/**\n * `client.space` — the fan-out group-encryption surface.\n *\n * const space = await client.space.createSpace({ historyPolicy: \"static\" });\n * await space.sendMessage({ text: \"hello\" });\n * space.onMessage(e => …);\n *\n * const joined = await client.space.joinSpace(space.id); // newcomer\n *\n * A space owns a client-generated keypair whose public key is its id, a\n * symmetric group key distributed server-blind via the keyring, and a\n * persisted message log. This namespace wires the {@link Space} handle to the\n * HTTP {@link KeyringClient}, the member's identity keys (from {@link KeyStore},\n * shared with the Double Ratchet path), and a PersonalSpace-backed key cache.\n */\n\nimport type { HttpClient } from \"../HttpClient\";\nimport { HttpError } from \"../HttpClient\";\nimport type { SessionState } from \"../Session\";\nimport { KeyStore } from \"../../crypto/KeyStore\";\nimport { Space } from \"../../spaces/Space\";\nimport { SpaceKeyring, KEEPER_MEMBER_ID, type SpaceKeyCache } from \"../../spaces/SpaceKeyring\";\nimport { KeyringClient } from \"../../spaces/KeyringClient\";\nimport { generateSpaceIdentity, exportEcdhPublicKey, exportEcdsaPublicKey } from \"../../spaces/SpaceCipher\";\nimport type { HistoryPolicy, InviteLink } from \"../../spaces/types\";\nimport type { OfflineManager } from \"../../offline/OfflineManager\";\nimport { SpaceCache } from \"../../offline/SpaceCache\";\nimport { PeerNetwork } from \"../../p2p/PeerNetwork\";\nimport { isP2pCapable } from \"../../p2p/detect\";\nimport type { ChatKeyVault } from \"../ChatKeyVault\";\nimport { toBase64 } from \"../../utilities\";\n\n/** Thrown by `joinChannel` when no channel with that name is registered. */\nexport class ChannelNotFoundError extends Error {\n constructor(readonly channelName: string) {\n super(`Channel \"${channelName}\" does not exist. Create it first.`);\n this.name = \"ChannelNotFoundError\";\n }\n}\n\n/** Thrown by `createChannel` when the name is already registered. */\nexport class ChannelExistsError extends Error {\n constructor(readonly channelName: string) {\n super(`Channel \"${channelName}\" already exists.`);\n this.name = \"ChannelExistsError\";\n }\n}\n\nexport interface SpaceNamespaceDeps {\n http: HttpClient;\n session: SessionState;\n /** WebSocket base (ws/wss); derived from the accelerator baseUrl. */\n wsBaseUrl: string;\n /** Optional PersonalSpace-backed cache of group keys (encrypted at rest). */\n cache?: SpaceKeyCache;\n /** Offline manager — enables message caching + offline send replay. */\n offline?: OfflineManager;\n /** SDK-owned ratchet-keypair vault — gives a STABLE member keypair across\n * reloads (rehydrate-or-provision) instead of a fresh one each session. */\n chatKeys?: ChatKeyVault;\n /** P2P swarm config — enables peer block exchange among Space members. */\n p2p?: {\n enabled?: boolean;\n /** `() => new Worker(new URL(...))` to run the block engine off-thread. */\n workerFactory?: () => Worker;\n iceServers?: RTCIceServer[];\n maxPeers?: number;\n debug?: boolean;\n };\n}\n\nexport class SpaceNamespace {\n private spaceCache?: SpaceCache;\n /** Spaces built this session, by id — used to route offline send replays. */\n private readonly openSpaces = new Map<string, Space>();\n /** Unique id for THIS device/session — the P2P peer identity. A user's own\n * devices share a member id, so the mesh MUST distinguish them by this or a\n * device treats its siblings' signals as its own echo and never connects. */\n private readonly deviceId =\n `peer-${globalThis.crypto?.randomUUID?.() ?? Math.random().toString(36).slice(2) + Math.random().toString(36).slice(2)}`;\n\n constructor(private readonly deps: SpaceNamespaceDeps) {\n if (deps.offline?.enabled) {\n this.spaceCache = new SpaceCache(deps.offline);\n // Replay queued space frames on reconnect: route each to its space\n // (reopening + connecting it if needed), then re-send the raw frame.\n deps.offline.registerReplayer(\"space\", async (entry) => {\n const { spaceId, frame } = entry.args as { spaceId: string; frame: unknown };\n let space = this.openSpaces.get(spaceId);\n if (!space) space = await this.get(spaceId);\n await space.connect();\n if (!space.isConnected()) throw new Error(`space ${spaceId} not connected for replay`);\n space.sendRaw(frame);\n });\n }\n }\n\n /**\n * Create a new space: generate its keypair (public key = id), register\n * metadata, mint the initial group key, and connect. Returns the open Space.\n */\n /**\n * Create a space.\n *\n * `messaging: false` registers the space and stops there — no group-key\n * bootstrap and no WebSocket. Use it for a space that only ever holds\n * FILES: each chunk carries its own key inside its manifest, so the group\n * keyring buys nothing, and opening a socket makes the write path depend on\n * a live connection. That dependency is wrong for a CLI, and it is what made\n * the first VFS write hang forever instead of failing.\n */\n async createSpace(\n opts: { historyPolicy?: HistoryPolicy; private?: boolean; messaging?: boolean } = {},\n ): Promise<Space> {\n const historyPolicy = opts.historyPolicy ?? \"static\";\n const identity = await generateSpaceIdentity();\n // Register the space (server records pubkey + policy; the DO is lazy).\n // For a private space the server also records the creator (this user) as\n // its first member — so the metadata POST must carry the user session.\n await this.deps.http.post(\n `/api/spaces/${encodeURIComponent(identity.id)}/metadata`,\n { spacePubKey: identity.id, historyPolicy, visibility: opts.private ? \"private\" : \"public\" },\n );\n const space = await this.build(identity.id, historyPolicy);\n if (opts.messaging !== false) await space.create();\n return space;\n }\n\n /** Join an existing space by id (its public key). Resolves once a key arrives. */\n async joinSpace(spaceId: string, opts: { timeoutMs?: number } = {}): Promise<Space> {\n const policy = await this.fetchPolicy(spaceId);\n const space = await this.build(spaceId, policy);\n await space.join({ timeoutMs: opts.timeoutMs });\n return space;\n }\n\n /** A handle to a space without auto-connecting (uses cached keys on demand). */\n async get(spaceId: string, historyPolicy: HistoryPolicy = \"static\"): Promise<Space> {\n return this.build(spaceId, historyPolicy);\n }\n\n // -------------------------------------------------------------------------\n // Channels — named, app-scoped pointers to spaces. The name → space-id\n // directory is app-public config (server-readable, scoped to this app via\n // its key); the channel CONTENTS stay fan-out E2E-encrypted. Lets chat use\n // human room names (`general`) instead of raw pubkey ids.\n // -------------------------------------------------------------------------\n\n /** List this app's channels (name → space-id) for the key's environment. */\n async listChannels(): Promise<Array<{ name: string; spaceId: string }>> {\n const body = await this.deps.http.get<{ channels?: Array<{ name: string; spaceId: string }> }>(\n \"/api/app/channels\",\n );\n return body.channels ?? [];\n }\n\n /** Resolve a channel name to its space id, or null if it doesn't exist. */\n async resolveChannel(name: string): Promise<string | null> {\n try {\n const body = await this.deps.http.get<{ spaceId: string }>(\n `/api/app/channels/${encodeURIComponent(name)}`,\n );\n return body.spaceId ?? null;\n } catch (err) {\n if (err instanceof HttpError && err.status === 404) return null;\n throw err;\n }\n }\n\n /**\n * Create a new channel: mint a fan-out space (the caller becomes its first\n * key-holder) and register `name → spaceId` in the app directory. Throws\n * {@link ChannelExistsError} if the name is already taken.\n */\n async createChannel(name: string, opts: { historyPolicy?: HistoryPolicy; private?: boolean } = {}): Promise<Space> {\n const space = await this.createSpace(opts);\n // Register name → id first so a name clash doesn't leave an admitted keeper.\n try {\n await this.deps.http.post(\"/api/app/channels\", { name, spaceId: space.id, visibility: opts.private ? \"private\" : \"public\" });\n } catch (err) {\n if (err instanceof HttpError && err.status === 409) {\n throw new ChannelExistsError(name);\n }\n throw err;\n }\n // Admit the app keeper so the channel is joinable with no member online.\n // Best-effort: a channel still works (members admit each other) without it.\n try {\n const { pubkey } = await this.deps.http.get<{ pubkey?: string }>(\"/api/app/keeper\");\n if (pubkey && space.keyring) await space.keyring.admit(KEEPER_MEMBER_ID, pubkey);\n } catch (err) {\n console.warn(\"[client.space] keeper admit failed (channel still usable):\", err);\n }\n return space;\n }\n\n /**\n * Join an existing channel by name. Throws {@link ChannelNotFoundError} if\n * no channel with that name is registered (use {@link createChannel} first).\n */\n async joinChannel(name: string, opts: { timeoutMs?: number } = {}): Promise<Space> {\n const spaceId = await this.resolveChannel(name);\n if (!spaceId) throw new ChannelNotFoundError(name);\n return this.joinSpace(spaceId, opts);\n }\n\n // -------------------------------------------------------------------------\n // Invite links — shareable, keeper-gated invitations to a space. The token\n // is a capability: anyone signed in who redeems it is admitted by the\n // keeper. Mint/list/revoke require the caller to be the space's creator or\n // an existing member.\n // -------------------------------------------------------------------------\n\n /** Mint a shareable invite link for a space. `opts.expiresInSec` / `maxUses`\n * bound it (0/undefined = unlimited); `opts.role` (\"viewer\"|\"editor\") is the\n * access granted to redeemers (default viewer). Returns the link. */\n async createInviteLink(spaceId: string, opts: { expiresInSec?: number; maxUses?: number; role?: string } = {}): Promise<InviteLink> {\n return this.keyringFor(spaceId).createInviteLink(opts);\n }\n\n /** Set a member's role on a space (\"viewer\" | \"editor\"). Owner-only. */\n async setMemberRole(spaceId: string, username: string, role: string): Promise<void> {\n await this.keyringFor(spaceId).setMemberRole(username, role);\n }\n\n /** Roster with roles (owner/members only). */\n async members(spaceId: string): Promise<Array<{ memberId: string; role: string }>> {\n return this.keyringFor(spaceId).members();\n }\n\n /** List a space's active invite links (creator/members only). */\n async listInviteLinks(spaceId: string): Promise<InviteLink[]> {\n return this.keyringFor(spaceId).listInviteLinks();\n }\n\n /** Revoke an invite link by token. */\n async revokeInviteLink(spaceId: string, token: string): Promise<void> {\n await this.keyringFor(spaceId).revokeInviteLink(token);\n }\n\n /**\n * Join a space using an invite link: redeem the token (the keeper admits\n * this member), then connect and resolve once the group key arrives.\n * Returns the open {@link Space}.\n */\n async joinByInvite(spaceId: string, token: string, opts: { timeoutMs?: number } = {}): Promise<Space> {\n const memberId = this.myId();\n const { ecdhPub, ecdsaPub } = await this.ensureIdentity(memberId);\n await this.keyringFor(spaceId).redeemInvite({ token, identityEcdhPub: ecdhPub, identityEcdsaPub: ecdsaPub });\n return this.joinSpace(spaceId, opts);\n }\n\n /** The current member roster of a space (member id → identity public keys). */\n async roster(spaceId: string): Promise<Array<{ memberId: string; identityEcdhPub: string; identityEcdsaPub?: string }>> {\n return this.keyringFor(spaceId).fetchRoster();\n }\n\n private keyringFor(spaceId: string): KeyringClient {\n return new KeyringClient({\n spaceId,\n httpBaseUrl: this.deps.http.baseUrl,\n fetch: this.deps.http.fetch,\n });\n }\n\n // -------------------------------------------------------------------------\n // Internals\n // -------------------------------------------------------------------------\n\n private async build(spaceId: string, historyPolicy: HistoryPolicy): Promise<Space> {\n const memberId = this.myId();\n const { ecdhPub, ecdsaPub } = await this.ensureIdentity(memberId);\n const transport = new KeyringClient({\n spaceId,\n httpBaseUrl: this.deps.http.baseUrl,\n fetch: this.deps.http.fetch,\n });\n const keyring = new SpaceKeyring({\n spaceId,\n memberId,\n identityEcdhPub: ecdhPub,\n identityEcdsaPub: ecdsaPub,\n ownPrivateKey: () => KeyStore.getInstance().getKeyPair(memberId)?.privateKey ?? null,\n transport,\n cache: this.deps.cache,\n historyPolicy,\n });\n const space = new Space({\n name: spaceId,\n wsBaseUrl: this.deps.wsBaseUrl,\n httpBaseUrl: this.deps.http.baseUrl,\n fetch: this.deps.http.fetch,\n myId: () => memberId,\n fetchTicket: () => this.fetchTicket(),\n keyring,\n historyPolicy,\n offline: this.spaceCache,\n shardCache: this.deps.offline?.fileCache,\n deferShardUpload: this.deps.offline\n ? (hash: string) => this.deps.offline!.deferShardUpload(hash)\n : undefined,\n });\n this.openSpaces.set(spaceId, space);\n // Attach a private P2P swarm scoped to this Space (block exchange among\n // members; signaled over the Space relay). Discovery starts on connect.\n if (this.deps.p2p?.enabled && isP2pCapable()) {\n space.attachPeerNetwork(\n new PeerNetwork({\n space,\n myId: this.deviceId, // per-device peer id, NOT the shared member id\n workerFactory: this.deps.p2p.workerFactory,\n iceServers: this.deps.p2p.iceServers,\n maxPeers: this.deps.p2p.maxPeers,\n debug: this.deps.p2p.debug,\n }),\n );\n }\n return space;\n }\n\n /** Ensure the member has an identity keypair; return its public ECDH + ECDSA keys. */\n private async ensureIdentity(memberId: string): Promise<{ ecdhPub: string; ecdsaPub: string }> {\n const store = KeyStore.getInstance();\n if (!store.getKeyPair(memberId)) {\n // Unlocked (seed in hand): rehydrate the member's STABLE keypair from\n // the vault, or provision + persist one on first use. This keeps the\n // member the same identity across reloads — no re-admit each session,\n // and the group-key cache round-trips. Best-effort: a personal-space\n // hiccup falls through to an ephemeral keypair (today's behavior).\n const seed = this.deps.session.seed;\n const staging = (() => { try { return typeof location !== \"undefined\" && /(^|\\.)staging\\./.test(location.hostname); } catch { return false; } })();\n if (staging) console.info(`[muhkoo:vault] ensureIdentity: unlocked=${!!seed} vault=${!!this.deps.chatKeys}`);\n if (this.deps.chatKeys && seed) {\n try {\n await this.deps.chatKeys.ensure(memberId, toBase64(seed));\n } catch (e) {\n if (staging) console.info(`[muhkoo:vault] ensureIdentity: vault.ensure failed — ${e instanceof Error ? e.message : e}`);\n }\n }\n if (!store.getKeyPair(memberId)) {\n if (staging) console.info(\"[muhkoo:vault] ensureIdentity: EPHEMERAL keypair (locked / no vault) → will re-admit\");\n await store.generateOwnKeyPair(memberId);\n }\n }\n const ecdhPub = await exportEcdhPublicKey(store.getKeyPair(memberId)!.publicKey);\n const ecdsaPub = await exportEcdsaPublicKey(store.getAuthKeyPair(memberId)!.publicKey);\n return { ecdhPub, ecdsaPub };\n }\n\n private async fetchPolicy(spaceId: string): Promise<HistoryPolicy> {\n const meta = await new KeyringClient({\n spaceId,\n httpBaseUrl: this.deps.http.baseUrl,\n fetch: this.deps.http.fetch,\n }).fetchMetadata();\n return meta?.historyPolicy ?? \"static\";\n }\n\n private async fetchTicket(): Promise<string | null> {\n try {\n const res = await this.deps.http.post<{ ticket: string }>(\"/api/ws-ticket\", {});\n return res?.ticket ?? null;\n } catch {\n return null;\n }\n }\n\n private myId(): string {\n const id = this.deps.session.username;\n if (!id) throw new Error(\"client.space: not signed in — call client.auth.zk.login() first.\");\n return id;\n }\n}\n\nexport default SpaceNamespace;\n","/**\n * `client.agents` — manage an app's **Programmable Agents** (server-side\n * \"virtual users\" backed by Workers AI).\n *\n * const { config } = await client.agents.create(appId, {\n * handle: '@assistant', displayName: 'Assistant',\n * systemPrompt: 'You are a helpful teammate in this Space.',\n * triggers: [{ type: 'mention' }],\n * });\n * await client.agents.enable(appId, config.agentId, spaceId); // per-Space opt-in\n *\n * These are MANAGEMENT calls — the agent itself runs on the accelerator. Only an\n * app's owner or an editor of its shared Space may create/update/enable an agent\n * (viewers can read). Authorization rides the user session token; non-owner\n * editors pass their management Space via `opts.space`.\n *\n * An agent is \"prompts + persona\": a system prompt, a model, named prompt\n * `skills`, and `triggers` that decide when it speaks — plus optional `tools`\n * that let it act on the app (query/write its database, call its functions,\n * resolve its channels) via a server-side function-calling loop. See\n * {@link AgentToolsConfig}. Pair with the `@MuhkooAgent`/`@MuhkooSpace`/\n * `@MuhkooDB`/`@MuhkooFunction` decorators + `ejectAgentPrompt`/`ejectAgentTools`\n * to generate `systemPrompt` and `tools` straight from your app's surface.\n */\n\nimport type { HttpClient } from \"../HttpClient\";\n\nexport type AgentTriggerType = \"mention\" | \"keyword\" | \"regex\" | \"always\";\n\n/** How much database access the agent's tool-use has. */\nexport type AgentDbToolMode = \"off\" | \"read\" | \"write\";\n\n/**\n * Tool-use config — lets the agent act on the app through a function-calling\n * loop. Opt-in and conservatively gated server-side: a fresh agent has tools\n * off, the DB is read-only and per-table allowlisted, functions are per-name\n * allowlisted, and channels are off. **Enabling tools requires a\n * function-calling `model` in the same create/update payload** (the server\n * rejects `enabled: true` otherwise). `ejectAgentTools` produces this shape.\n */\nexport interface AgentToolsConfig {\n enabled: boolean;\n db: {\n /** `off` = no DB tools; `read` = query/get; `write` = + insert/update/delete. */\n mode: AgentDbToolMode;\n /** Allowlisted table names the agent may touch. */\n tables: string[];\n };\n /** Allowlisted serverless-function names the agent may call. */\n functions: string[];\n /** Whether the agent may resolve the app's PUBLIC channels. */\n channels: boolean;\n /** Max tool-call rounds per reply (1..6). */\n maxIterations: number;\n}\n\nexport interface AgentTrigger {\n type: AgentTriggerType;\n /** Required for `keyword` (case-insensitive substring) and `regex`. */\n pattern?: string;\n /** Name of a {@link AgentSkill} to run on match. */\n skill?: string;\n}\n\nexport interface AgentSkill {\n name: string;\n prompt: string;\n}\n\nexport interface AgentConfig {\n agentId: string;\n /** @-mention target, e.g. \"@assistant\". */\n handle: string;\n displayName: string;\n model: string;\n systemPrompt: string;\n skills: AgentSkill[];\n triggers: AgentTrigger[];\n /** Space ids this agent is enabled on (per-Space opt-in). */\n enabledSpaces: string[];\n caps: { dailyTokenBudget: number };\n /** Tool-use config (absent / `enabled: false` = prompt-only). */\n tools?: AgentToolsConfig;\n createdAt: number;\n updatedAt: number;\n}\n\n/** The editor-settable fields when creating an agent. */\nexport interface AgentCreateInput {\n handle: string;\n displayName: string;\n systemPrompt: string;\n model?: string;\n skills?: AgentSkill[];\n triggers?: AgentTrigger[];\n caps?: { dailyTokenBudget: number };\n /** Grant tool-use. Requires `model` to be a function-calling model. */\n tools?: AgentToolsConfig;\n}\n\nexport type AgentUpdateInput = Partial<AgentCreateInput>;\n\n/** Create/get response — the config plus the agent's published identity keys. */\nexport interface AgentProvisioned {\n config: AgentConfig;\n /** The agent's Space member id (`__agent__:<agentId>`). */\n memberId: string;\n /** base64url-JWK identity ECDH public key (null until provisioned). */\n ecdhPub: string | null;\n /** base64url-JWK identity ECDSA public key — verifies the agent's messages. */\n ecdsaPub: string | null;\n}\n\nexport interface AgentsNamespaceDeps {\n http: HttpClient;\n}\n\n/** Common option: a management Space for delegated (non-owner) access. */\nexport interface AgentScopeOpts {\n space?: string;\n}\n\nexport class AgentsNamespace {\n constructor(private readonly deps: AgentsNamespaceDeps) {}\n\n /** List the app's agents. */\n async list(appId: string, opts: AgentScopeOpts = {}): Promise<AgentConfig[]> {\n const res = await this.deps.http.get<{ agents: AgentConfig[] }>(this.path(appId, \"\", opts));\n return res.agents ?? [];\n }\n\n /** Read one agent (config + identity keys). */\n async get(appId: string, agentId: string, opts: AgentScopeOpts = {}): Promise<AgentProvisioned> {\n return this.deps.http.get<AgentProvisioned>(this.path(appId, `/${encodeURIComponent(agentId)}`, opts));\n }\n\n /** Create an agent (owner/editor only). */\n async create(appId: string, input: AgentCreateInput, opts: AgentScopeOpts = {}): Promise<AgentProvisioned> {\n return this.deps.http.post<AgentProvisioned>(this.path(appId, \"\", {}), { ...input, space: opts.space });\n }\n\n /** Update an agent's editor-settable fields (owner/editor only). */\n async update(appId: string, agentId: string, patch: AgentUpdateInput, opts: AgentScopeOpts = {}): Promise<{ config: AgentConfig }> {\n return this.deps.http.patch<{ config: AgentConfig }>(\n this.path(appId, `/${encodeURIComponent(agentId)}`, {}),\n { ...patch, space: opts.space },\n );\n }\n\n /** Delete an agent (owner/editor only). */\n async delete(appId: string, agentId: string, opts: AgentScopeOpts = {}): Promise<{ deleted: boolean }> {\n return this.deps.http.del<{ deleted: boolean }>(\n this.path(appId, `/${encodeURIComponent(agentId)}`, {}),\n { space: opts.space },\n );\n }\n\n /** Enable the agent on a Space (per-Space opt-in). */\n async enable(appId: string, agentId: string, spaceId: string, opts: AgentScopeOpts = {}): Promise<{ config: AgentConfig }> {\n return this.deps.http.post<{ config: AgentConfig }>(\n this.path(appId, `/${encodeURIComponent(agentId)}/enable`, {}),\n { targetSpaceId: spaceId, space: opts.space },\n );\n }\n\n /** Disable the agent on a Space. */\n async disable(appId: string, agentId: string, spaceId: string, opts: AgentScopeOpts = {}): Promise<{ config: AgentConfig }> {\n return this.deps.http.post<{ config: AgentConfig }>(\n this.path(appId, `/${encodeURIComponent(agentId)}/disable`, {}),\n { targetSpaceId: spaceId, space: opts.space },\n );\n }\n\n private path(appId: string, suffix: string, opts: AgentScopeOpts): string {\n const q = opts.space ? `?space=${encodeURIComponent(opts.space)}` : \"\";\n return `/api/apps/${encodeURIComponent(appId)}/agents${suffix}${q}`;\n }\n}\n\nexport default AgentsNamespace;\n","/**\n * `client.functions` — manage an app's **serverless functions** (developer-\n * authored code that runs on the accelerator).\n *\n * const { config } = await client.functions.deploy(appId, {\n * name: 'hello', displayName: 'Hello',\n * code: `export default { fetch: () => new Response('hi') }`,\n * triggers: { http: { enabled: true } },\n * });\n * // HTTP-reachable at hello--<slug>.fns.muhkoo.dev\n * await client.functions.enable(appId, config.functionId, spaceId); // Space-bound\n * const out = await client.functions.invoke({ name: 'hello', slug }, { body: { q: 1 } });\n *\n * These are MANAGEMENT calls — the function itself runs on the accelerator\n * (uploaded just-in-time, decrypted only at invocation). Only an app's owner or\n * an editor of its shared Space may deploy/update/enable (viewers read).\n * Authorization rides the user session token; non-owner editors pass their\n * management Space via `opts.space`.\n *\n * v1 is \"compute-only\": a function is an untrusted single-module ES worker\n * (`export default { fetch }`) with NO platform bindings — it reaches the\n * platform as an external client (the end-user session is passed through). Two\n * triggers: `http` (its own subdomain) and `space` (invoked on Space messages,\n * like a Programmable Agent).\n */\n\nimport { HttpError, type HttpClient } from \"../HttpClient\";\n\nexport type FunctionTriggerType = \"keyword\" | \"regex\" | \"always\";\n\nexport interface FunctionTrigger {\n type: FunctionTriggerType;\n /** Required for `keyword` (case-insensitive substring) and `regex`. */\n pattern?: string;\n}\n\nexport interface FunctionTriggers {\n /** HTTP-invocable at `<name>--<slug>.fns.<zone>`. */\n http?: { enabled: boolean; methods?: string[] };\n /** Invoked on matching Space messages (per-Space opt-in via enable). */\n space?: { match: FunctionTrigger[] };\n}\n\nexport interface FunctionCaps {\n /** Per-invocation CPU ceiling (ms). */\n cpuMs: number;\n /** Per-invocation subrequest ceiling. */\n subRequests: number;\n /** Hard daily invocation cap (0 = unlimited). */\n dailyInvocationBudget: number;\n}\n\nexport interface FunctionConfig {\n functionId: string;\n /** DNS-safe slug — the function's subdomain label + WfP script name part. */\n name: string;\n displayName: string;\n triggers: FunctionTriggers;\n /** Space ids this function is enabled on (per-Space opt-in for `space`). */\n enabledSpaces: string[];\n caps: FunctionCaps;\n scriptName: string;\n /** sha-256 of the last-deployed source. */\n codeHash?: string;\n /** When the source was last (re)deployed. */\n deployedAt?: number;\n createdAt: number;\n updatedAt: number;\n}\n\n/** The editor-settable fields when deploying a function. */\nexport interface FunctionDeployInput {\n name: string;\n displayName: string;\n /** Raw single-module ES worker source (`export default { fetch }`). */\n code: string;\n triggers?: FunctionTriggers;\n caps?: Partial<FunctionCaps>;\n}\n\n/** Update input — any subset, including new `code` to redeploy. */\nexport type FunctionUpdateInput = Partial<FunctionDeployInput>;\n\nexport interface FunctionsNamespaceDeps {\n http: HttpClient;\n /**\n * Wildcard zone HTTP functions are served from\n * (`<name>--<slug>.<suffix>`). Defaults to the hosted platform's\n * {@link DEFAULT_FN_HOST_SUFFIX}; override for staging / self-hosted.\n */\n fnHostSuffix?: string;\n}\n\n/** The hosted platform's HTTP-function zone. */\nexport const DEFAULT_FN_HOST_SUFFIX = \"fns.muhkoo.dev\";\n\n/** Options for {@link FunctionsNamespace.invoke}. */\nexport interface FunctionInvokeOptions {\n /** HTTP method. Defaults to `POST` when `body` is present, else `GET`. */\n method?: string;\n /**\n * Request body. Plain objects/arrays are JSON-encoded (with\n * `Content-Type: application/json`); strings, `FormData`, `Blob`,\n * `ArrayBuffer`/views and `URLSearchParams` are sent as-is.\n */\n body?: unknown;\n /** Extra headers, merged over the SDK's credential headers. */\n headers?: HeadersInit;\n /** Sub-path (and query) on the function's host, e.g. `/reports?from=...`. */\n path?: string;\n}\n\n/** Bodies `fetch` accepts natively — everything else is JSON-encoded. */\nfunction isRawBody(body: unknown): body is BodyInit {\n return (\n typeof body === \"string\" ||\n body instanceof FormData ||\n body instanceof Blob ||\n body instanceof ArrayBuffer ||\n ArrayBuffer.isView(body) ||\n body instanceof URLSearchParams ||\n (typeof ReadableStream !== \"undefined\" && body instanceof ReadableStream)\n );\n}\n\n/** Common option: a management Space for delegated (non-owner) access. */\nexport interface FunctionScopeOpts {\n space?: string;\n}\n\nexport class FunctionsNamespace {\n constructor(private readonly deps: FunctionsNamespaceDeps) {}\n\n /** List the app's functions. */\n async list(appId: string, opts: FunctionScopeOpts = {}): Promise<FunctionConfig[]> {\n const res = await this.deps.http.get<{ functions: FunctionConfig[] }>(this.path(appId, \"\", opts));\n return res.functions ?? [];\n }\n\n /** Read one function's config. */\n async get(appId: string, functionId: string, opts: FunctionScopeOpts = {}): Promise<{ config: FunctionConfig }> {\n return this.deps.http.get<{ config: FunctionConfig }>(this.path(appId, `/${encodeURIComponent(functionId)}`, opts));\n }\n\n /** Read a function's decrypted source (owner/editor; for the editor UI). */\n async code(appId: string, functionId: string, opts: FunctionScopeOpts = {}): Promise<{ functionId: string; code: string; codeHash: string | null }> {\n return this.deps.http.get<{ functionId: string; code: string; codeHash: string | null }>(\n this.path(appId, `/${encodeURIComponent(functionId)}/code`, opts),\n );\n }\n\n /** Deploy (create) a function (owner/editor only). */\n async deploy(appId: string, input: FunctionDeployInput, opts: FunctionScopeOpts = {}): Promise<{ config: FunctionConfig }> {\n return this.deps.http.post<{ config: FunctionConfig }>(this.path(appId, \"\", {}), { ...input, space: opts.space });\n }\n\n /** Update a function's editor-settable fields and/or redeploy its `code`. */\n async update(appId: string, functionId: string, patch: FunctionUpdateInput, opts: FunctionScopeOpts = {}): Promise<{ config: FunctionConfig }> {\n return this.deps.http.patch<{ config: FunctionConfig }>(\n this.path(appId, `/${encodeURIComponent(functionId)}`, {}),\n { ...patch, space: opts.space },\n );\n }\n\n /** Delete a function (owner/editor only). */\n async delete(appId: string, functionId: string, opts: FunctionScopeOpts = {}): Promise<{ deleted: boolean }> {\n return this.deps.http.del<{ deleted: boolean }>(\n this.path(appId, `/${encodeURIComponent(functionId)}`, {}),\n { space: opts.space },\n );\n }\n\n /** Enable the function on a Space (per-Space opt-in for the `space` trigger). */\n async enable(appId: string, functionId: string, spaceId: string, opts: FunctionScopeOpts = {}): Promise<{ config: FunctionConfig }> {\n return this.deps.http.post<{ config: FunctionConfig }>(\n this.path(appId, `/${encodeURIComponent(functionId)}/enable`, {}),\n { targetSpaceId: spaceId, space: opts.space },\n );\n }\n\n /** Disable the function on a Space. */\n async disable(appId: string, functionId: string, spaceId: string, opts: FunctionScopeOpts = {}): Promise<{ config: FunctionConfig }> {\n return this.deps.http.post<{ config: FunctionConfig }>(\n this.path(appId, `/${encodeURIComponent(functionId)}/disable`, {}),\n { targetSpaceId: spaceId, space: opts.space },\n );\n }\n\n /**\n * Invoke an HTTP-triggered function and parse its JSON response.\n *\n * const out = await client.functions.invoke({ name: 'hello', slug: 'myapp' });\n * const out = await client.functions.invoke('hello--myapp', { body: { q: 1 } });\n * const out = await client.functions.invoke('https://hello--myapp.fns.muhkoo.dev/x');\n *\n * The request carries the SDK's credentials (`X-Muhkoo-Key` and, when a\n * user is signed in, `X-Muhkoo-Session`) — the platform passes the session\n * token through to the function, which can verify it server-side via\n * `POST /api/auth/verify` to establish the caller's identity.\n *\n * Non-2xx responses throw {@link HttpError}. For functions that return\n * something other than JSON, use {@link invokeRaw}.\n */\n async invoke<T = unknown>(\n target: string | { name: string; slug: string },\n opts: FunctionInvokeOptions = {},\n ): Promise<T> {\n const res = await this.invokeRaw(target, opts);\n let parsed: unknown = null;\n try {\n parsed = await res.json();\n } catch {\n // Non-JSON body — fall through to the status-only error below.\n }\n if (!res.ok) {\n const msg =\n parsed && typeof parsed === \"object\" && \"error\" in (parsed as object)\n ? String((parsed as { error: unknown }).error)\n : `${res.status} ${res.statusText}`;\n throw new HttpError(msg, res.status, parsed);\n }\n return parsed as T;\n }\n\n /** Invoke an HTTP-triggered function and return the raw `Response`. */\n async invokeRaw(\n target: string | { name: string; slug: string },\n opts: FunctionInvokeOptions = {},\n ): Promise<Response> {\n const init: RequestInit = {\n method: opts.method ?? (opts.body !== undefined ? \"POST\" : \"GET\"),\n };\n const headers = new Headers(opts.headers);\n if (opts.body !== undefined) {\n if (isRawBody(opts.body)) {\n init.body = opts.body;\n } else {\n init.body = JSON.stringify(opts.body);\n if (!headers.has(\"Content-Type\")) headers.set(\"Content-Type\", \"application/json\");\n }\n }\n init.headers = headers;\n return this.deps.http.fetch(this.invokeUrl(target, opts.path), init);\n }\n\n /** Resolve an invoke target to the function's absolute URL. */\n invokeUrl(target: string | { name: string; slug: string }, path = \"\"): string {\n const suffix = this.deps.fnHostSuffix ?? DEFAULT_FN_HOST_SUFFIX;\n let base: string;\n if (typeof target === \"string\") {\n base = /^https?:\\/\\//.test(target) ? target : `https://${target}.${suffix}`;\n } else {\n base = `https://${target.name}--${target.slug}.${suffix}`;\n }\n if (!path) return base;\n return `${base.replace(/\\/+$/, \"\")}${path.startsWith(\"/\") ? \"\" : \"/\"}${path}`;\n }\n\n private path(appId: string, suffix: string, opts: FunctionScopeOpts): string {\n const q = opts.space ? `?space=${encodeURIComponent(opts.space)}` : \"\";\n return `/api/apps/${encodeURIComponent(appId)}/functions${suffix}${q}`;\n }\n}\n\nexport default FunctionsNamespace;\n","/**\n * `client.accessTokens` — manage an app's **access tokens**: scoped, expiring,\n * non-ZK machine-to-machine credentials (`mk_<env>_at_…`).\n *\n * const { plaintext } = await client.accessTokens.create(appId, {\n * scopes: [\"db:read\", \"db:write\"], env: \"live\", expiresInDays: 30,\n * label: \"ci-runner\",\n * });\n * // hand `plaintext` to the machine caller as its ClientOptions.accessToken\n *\n * These are MANAGEMENT calls — creating/listing/revoking tokens is authorized by\n * the developer session (same as the `agents`/`functions` namespaces). The token\n * itself resolves through the SAME accelerator path as an app key (the\n * `X-Muhkoo-Key` header), but is scoped to a fixed vocabulary of permissions and\n * expires. The plaintext is returned ONCE, on create — store it then; it can't\n * be read back.\n */\n\nimport type { HttpClient } from \"../HttpClient\";\n\n/** The fixed vocabulary of permissions an access token can be granted. */\nexport type Scope =\n | \"db:read\"\n | \"db:write\"\n | \"kv:read\"\n | \"kv:write\"\n | \"storage:read\"\n | \"storage:write\"\n | \"messages:read\"\n | \"messages:write\"\n | \"functions:invoke\"\n | \"ai:infer\";\n\n/** All valid {@link Scope}s, in canonical order. */\nexport const ACCESS_TOKEN_SCOPES: Scope[] = [\n \"db:read\",\n \"db:write\",\n \"kv:read\",\n \"kv:write\",\n \"storage:read\",\n \"storage:write\",\n \"messages:read\",\n \"messages:write\",\n \"functions:invoke\",\n \"ai:infer\",\n];\n\n/** A token as returned by {@link AccessTokensNamespace.list} (never the plaintext). */\nexport interface AccessTokenInfo {\n keyId: string;\n env: \"live\" | \"test\";\n scopes: string[];\n /** Epoch ms, or absent if the token never expires. */\n expiresAt?: number;\n label?: string;\n createdAt: number;\n revoked: boolean;\n /** True once past {@link expiresAt}. */\n expired: boolean;\n}\n\n/** The editor-settable fields when minting an access token. */\nexport interface CreateAccessTokenInput {\n scopes: string[];\n /** Defaults to `live` on the accelerator. */\n env?: \"live\" | \"test\";\n /** Omit for a non-expiring token. */\n expiresInDays?: number;\n label?: string;\n}\n\n/** Create response — includes the one-time {@link plaintext} secret. */\nexport interface CreatedAccessToken {\n keyId: string;\n env: \"live\" | \"test\";\n /** The `mk_<env>_at_…` secret. Returned ONCE — store it now. */\n plaintext: string;\n scopes: string[];\n expiresAt: number;\n label?: string;\n createdAt: number;\n}\n\nexport interface AccessTokensNamespaceDeps {\n http: HttpClient;\n}\n\nexport class AccessTokensNamespace {\n constructor(private readonly deps: AccessTokensNamespaceDeps) {}\n\n /** List the app's access tokens (metadata only — never the plaintext). */\n async list(appId: string): Promise<AccessTokenInfo[]> {\n const res = await this.deps.http.get<{ tokens: AccessTokenInfo[] }>(this.path(appId, \"\"));\n return res.tokens ?? [];\n }\n\n /** Mint an access token (owner/editor only). The plaintext is returned once. */\n async create(appId: string, input: CreateAccessTokenInput): Promise<CreatedAccessToken> {\n return this.deps.http.post<CreatedAccessToken>(this.path(appId, \"\"), input);\n }\n\n /** Revoke an access token by its `keyId`. */\n async revoke(appId: string, keyId: string): Promise<{ revoked: boolean }> {\n return this.deps.http.del<{ revoked: boolean }>(this.path(appId, `/${encodeURIComponent(keyId)}`));\n }\n\n private path(appId: string, suffix: string): string {\n return `/api/apps/${encodeURIComponent(appId)}/access-tokens${suffix}`;\n }\n}\n\nexport default AccessTokensNamespace;\n","/**\n * Wire types for the VFS metadata layer.\n *\n * ## What is stored where\n *\n * The filesystem is a graph of **directory records**, one per directory, each\n * held under a personal-space KV key and encrypted client-side. A record lists\n * only its immediate children — so listing a directory is one fetch, and you\n * only ever pay for the subtrees you actually open.\n *\n * File CONTENT is not here. Bytes are written with `client.storage.writeFile`\n * exactly as any other file — into a real Space, with a real gated manifest —\n * and the entry keeps the returned `FileManifest` as its handle.\n * `client.storage.readByManifest(manifest)` then reconstructs the bytes from\n * the content-addressed shard store with no space membership or directory\n * lookup needed, which is what makes a file shareable by handing over the\n * handle alone.\n *\n * This supersedes the flat personal mirror `writeFile` already maintains\n * (`{spaceId, manifest}` keyed by manifest id): the same metadata, in the same\n * personal space, arranged as a tree you can actually navigate.\n *\n * ## Why directories have stable random ids, not content hashes\n *\n * A git-style tree keys each directory by the hash of its contents, so writing\n * one file rewrites every ancestor up to the root. Here a directory's id is\n * random and permanent, so a file write touches exactly ONE record — its\n * parent — and renaming or moving a directory edits only the parent entry\n * while the whole subtree underneath stays byte-identical and untouched.\n *\n * ## Why a directory's key lives in its parent\n *\n * Only the root key is derived from the master seed. Every other directory has\n * a random key stored in its parent's entry, which chains capabilities\n * downward: handing someone `{id, key}` for `/apps/my-app` lets them walk that\n * subtree and nothing else, because no key can be derived upward. That is the\n * seam group-sharing hangs off later without re-encrypting the filesystem.\n */\n\nimport type { FileManifest } from \"../storage/types\";\n\n/** Personal-space KV key holding a directory record. */\nexport const dirKey = (id: string): string => `vfs/d/${id}`;\n/** Personal-space KV key holding one file's prior versions. */\nexport const historyKey = (id: string): string => `vfs/h/${id}`;\n\n/** The root directory's id is fixed — it is the one node reached without a parent. */\nexport const ROOT_ID = \"root\";\n/** HKDF label for the seed-derived root key. Sits alongside `muhkoo-storage-v1`. */\nexport const VFS_ROOT_INFO = \"muhkoo-vfs-v1\";\n\nexport interface FileEntry {\n kind: \"file\";\n /**\n * Stable identity, independent of name and location. Renaming a file keeps\n * its id, so its version history follows it rather than being orphaned.\n */\n id: string;\n /** The handle: everything needed to read the current bytes back. */\n manifest: FileManifest;\n /** Plaintext byte length. */\n size: number;\n mtime: number;\n /**\n * Count of prior versions in the file's history record.\n *\n * Denormalised on purpose: the file tree wants to show \"3 versions\" while\n * listing a directory, and fetching every history record to answer that\n * would defeat the point of keeping history out of the directory record.\n */\n versions?: number;\n}\n\nexport interface DirEntry {\n kind: \"dir\";\n /** Record id — `dirKey(id)` locates it. Permanent for the directory's life. */\n id: string;\n /** Base64 AES-256 key for that record. See the capability note above. */\n key: string;\n mtime: number;\n}\n\nexport type Entry = FileEntry | DirEntry;\n\n/** One directory record, as stored (before encryption). */\nexport interface DirNode {\n v: 1;\n /** Child name → entry. Names are unique within a directory, per filesystem. */\n entries: Record<string, Entry>;\n mtime: number;\n}\n\n/** A file's prior versions, newest first. Fetched only when asked for. */\nexport interface HistoryRecord {\n v: 1;\n versions: Array<{ manifest: FileManifest; size: number; mtime: number }>;\n}\n\n/** What `stat` and `list` hand back — a path-addressed view of an entry. */\nexport interface VfsStat {\n path: string;\n name: string;\n kind: \"file\" | \"dir\";\n size: number;\n mtime: number;\n versions: number;\n}\n\n/** The encrypted envelope every record is stored in. */\nexport interface SealedRecord {\n v: 1;\n /** Base64 12-byte AES-GCM IV. */\n iv: string;\n /** Base64 ciphertext with the 16-byte tag appended. */\n ct: string;\n}\n\n/** The personal-space blob store the VFS persists through. */\nexport interface VfsStore {\n get(key: string): Promise<unknown | null>;\n put(key: string, value: unknown): Promise<void>;\n delete(key: string): Promise<void>;\n /** Every key in the store — the personal space is shared, so this is NOT VFS-only. */\n list(): Promise<string[]>;\n}\n\n/** Raised when the master seed is not held, so the root key cannot be derived. */\nexport class VfsLockedError extends Error {\n constructor() {\n // Named rather than generic because the caller's remedy is specific and\n // not guessable from a failed decrypt: re-authenticate to recover the\n // seed. A page reload alone loses it — it is memory-only, never stored.\n super(\"VFS is locked: the master seed is not in memory. Sign in again to unlock.\");\n this.name = \"VfsLockedError\";\n }\n}\n\n/** Raised for a path that does not exist. */\nexport class VfsNotFoundError extends Error {\n constructor(path: string) {\n super(`VFS: ${path} does not exist`);\n this.name = \"VfsNotFoundError\";\n }\n}\n\n/** Raised when an operation would clobber or misuse an existing entry. */\nexport class VfsConflictError extends Error {\n constructor(message: string) {\n super(`VFS: ${message}`);\n this.name = \"VfsConflictError\";\n }\n}\n","/**\n * Sealing for VFS metadata records.\n *\n * Every directory and history record is AES-256-GCM encrypted before it leaves\n * the process, so the server holds ciphertext and never learns a filename, a\n * directory shape, or a file size. The manifests inside carry their own chunk\n * keys, which is why the metadata must be sealed too: a readable directory\n * record would hand over the keys to its files.\n */\n\nimport { encryptAesGcm, decryptAesGcm } from \"../crypto/primitives/aes-gcm\";\nimport { deriveBitsHkdf } from \"../crypto/primitives/kdf\";\nimport { randomBytes } from \"../crypto/primitives/random\";\nimport { VFS_ROOT_INFO, type SealedRecord } from \"./types\";\n\nconst AES_GCM_IV_BYTES = 12;\nconst AES_KEY_BYTES = 32;\n\nexport function toBase64(bytes: Uint8Array): string {\n let s = \"\";\n for (const b of bytes) s += String.fromCharCode(b);\n return btoa(s);\n}\n\nexport function fromBase64(b64: string): Uint8Array {\n const s = atob(b64);\n const out = new Uint8Array(s.length);\n for (let i = 0; i < s.length; i++) out[i] = s.charCodeAt(i);\n return out;\n}\n\n/** A fresh random key for a newly created directory. */\nexport function newDirKey(): Uint8Array {\n return randomBytes(AES_KEY_BYTES);\n}\n\n/**\n * A fresh random id.\n *\n * Ids are opaque and never derived from names or contents — a predictable id\n * would leak the directory structure through the KV key, which is the one part\n * of a record the server does see.\n */\nexport function newId(): string {\n return toBase64(randomBytes(16)).replace(/[+/=]/g, \"\").slice(0, 22);\n}\n\n/** The root key, derived from the master seed. The only key not stored in a parent. */\n/**\n * The key a project's repository objects are sealed with.\n *\n * Per project, not one key for everything: commits, trees and refs describe a\n * single project's history, and deriving per slug keeps that blast radius small\n * if a key is ever shared to collaborate on one project.\n */\nexport async function deriveRepoKey(seed: Uint8Array, slug: string): Promise<Uint8Array> {\n return deriveBitsHkdf(seed, `${VFS_ROOT_INFO}:vcs:${slug}`, AES_KEY_BYTES);\n}\n\nexport async function deriveRootKey(seed: Uint8Array): Promise<Uint8Array> {\n return deriveBitsHkdf(seed, VFS_ROOT_INFO, AES_KEY_BYTES);\n}\n\nexport async function seal(key: Uint8Array, value: unknown): Promise<SealedRecord> {\n const iv = randomBytes(AES_GCM_IV_BYTES);\n const plaintext = new TextEncoder().encode(JSON.stringify(value));\n const ct = await encryptAesGcm(key, iv, plaintext);\n return { v: 1, iv: toBase64(iv), ct: toBase64(ct) };\n}\n\n/**\n * Open a sealed record. Returns null for anything that is not a well-formed\n * envelope, so a missing or corrupt record reads as \"absent\" rather than\n * throwing — the caller can then rebuild it. A WRONG KEY still throws, because\n * silently treating an undecryptable directory as empty would present the user\n * with an empty filesystem and then let a write overwrite the real one.\n */\nexport async function unseal<T>(key: Uint8Array, record: unknown): Promise<T | null> {\n if (!record || typeof record !== \"object\") return null;\n const r = record as Partial<SealedRecord>;\n if (typeof r.iv !== \"string\" || typeof r.ct !== \"string\") return null;\n const plaintext = await decryptAesGcm(key, fromBase64(r.iv), fromBase64(r.ct));\n return JSON.parse(new TextDecoder().decode(plaintext)) as T;\n}\n","/**\n * Absolute POSIX paths for the VFS.\n *\n * A path is a lookup route, not a stored value: nothing in the metadata records\n * a full path, only a name inside its parent directory. That is what makes\n * renaming or moving a directory a single-record edit instead of a rewrite of\n * every descendant.\n */\n\n/** Absolute, single leading slash, no `.` / `..`, no trailing slash. Root is `/`. */\nexport function normalizePath(input: string): string {\n const out: string[] = [];\n for (const part of input.split(\"/\")) {\n if (part === \"\" || part === \".\") continue;\n if (part === \"..\") out.pop();\n else out.push(part);\n }\n return \"/\" + out.join(\"/\");\n}\n\n/** Path split into its segments. `/` yields `[]`. */\nexport function segments(path: string): string[] {\n return normalizePath(path).split(\"/\").filter(Boolean);\n}\n\n/**\n * Resolve `path` against a working directory, POSIX-style.\n *\n * An absolute path ignores the cwd; a relative one hangs off it; `..` climbs\n * and stops at the root rather than escaping it. This is the single place\n * relativity is interpreted, so every VFS method behaves the same way — a\n * filesystem where `cat a.txt` and `list(\"a\")` disagreed about what \"here\"\n * means would be worse than having no cwd at all.\n */\nexport function resolveFrom(cwd: string, path: string): string {\n if (path.startsWith(\"/\")) return normalizePath(path);\n return normalizePath(`${cwd}/${path}`);\n}\n\nexport function dirname(path: string): string {\n const p = normalizePath(path);\n const i = p.lastIndexOf(\"/\");\n return i <= 0 ? \"/\" : p.slice(0, i);\n}\n\nexport function basename(path: string): string {\n const p = normalizePath(path);\n return p.slice(p.lastIndexOf(\"/\") + 1);\n}\n\nexport function join(...parts: string[]): string {\n return normalizePath(parts.join(\"/\"));\n}\n\n/**\n * Is `path` inside `dir` (at any depth)? A directory is never \"under\" itself,\n * which is what makes it usable as the guard against moving a directory into\n * its own subtree.\n */\nexport function isUnder(path: string, dir: string): boolean {\n const p = normalizePath(path);\n const d = normalizePath(dir);\n if (p === d) return false;\n return d === \"/\" ? true : p.startsWith(d + \"/\");\n}\n\n/**\n * Reject names that would make a path ambiguous or unrepresentable.\n *\n * `/` would forge a nesting level, and `.` / `..` would resolve to a different\n * directory on the next lookup — a file literally named `..` could never be\n * addressed again.\n */\n/** The longest a single entry name may be. Matches the common filesystem limit. */\nexport const MAX_NAME_BYTES = 255;\n\n/**\n * Is this a name we are willing to store, and to hand back as a path segment?\n *\n * This is the READ-side check as much as the write-side one, and the read side\n * is the one that matters: a directory record is sealed with a key that any\n * holder of the master seed can derive, so its contents are not necessarily\n * something this SDK wrote. A name arriving from a record is input.\n *\n * What each rule is for:\n * - `/` and backslash would become path structure. Backslash is a separator on\n * Windows, which makes it traversal there and an odd filename elsewhere.\n * - `.` and `..` navigate rather than name.\n * - NUL terminates a path in every syscall that takes one.\n * - Other control characters and bidi overrides let a name print as something\n * other than what it is - the classic way a file passes review.\n * - A length cap, because nothing else imposes one.\n */\nexport function isSafeName(name: string): boolean {\n if (!name || name === \".\" || name === \"..\") return false;\n if (name.includes(\"/\") || name.includes(String.fromCharCode(92))) return false;\n const CONTROL_OR_BIDI = new RegExp(\"[\\\\u0000-\\\\u001f\\\\u007f-\\\\u009f\\\\u202a-\\\\u202e\\\\u2066-\\\\u2069]\");\n if (CONTROL_OR_BIDI.test(name)) return false;\n return new TextEncoder().encode(name).length <= MAX_NAME_BYTES;\n}\n\nexport function assertValidName(name: string): void {\n if (!name) throw new Error(\"VFS: name cannot be empty\");\n if (!isSafeName(name)) throw new Error(`VFS: ${JSON.stringify(name)} is not a usable name`);\n}\n\n/**\n * MIME type for a filename.\n *\n * Stored with the content rather than guessed at read time, because whatever\n * eventually serves these bytes — a preview, a static host — sends this as the\n * `Content-Type`, and a browser will refuse to run a module or apply a\n * stylesheet labelled `application/octet-stream`.\n */\nexport function contentTypeFor(name: string): string {\n const ext = name.slice(name.lastIndexOf(\".\") + 1).toLowerCase();\n switch (ext) {\n case \"html\": case \"htm\": return \"text/html; charset=utf-8\";\n case \"css\": return \"text/css; charset=utf-8\";\n case \"js\": case \"mjs\": case \"jsx\": return \"text/javascript; charset=utf-8\";\n case \"ts\": case \"tsx\": return \"text/typescript; charset=utf-8\";\n case \"json\": return \"application/json; charset=utf-8\";\n case \"md\": return \"text/markdown; charset=utf-8\";\n case \"txt\": return \"text/plain; charset=utf-8\";\n case \"svg\": return \"image/svg+xml\";\n case \"png\": return \"image/png\";\n case \"jpg\": case \"jpeg\": return \"image/jpeg\";\n case \"gif\": return \"image/gif\";\n case \"webp\": return \"image/webp\";\n case \"avif\": return \"image/avif\";\n case \"ico\": return \"image/x-icon\";\n case \"woff2\": return \"font/woff2\";\n case \"woff\": return \"font/woff\";\n case \"wasm\": return \"application/wasm\";\n case \"map\": return \"application/json\";\n default: return \"application/octet-stream\";\n }\n}\n","/**\n * Glob matching for VFS paths.\n *\n * A deliberately small dialect — `*`, `**`, `?`, and `{a,b}` — because these\n * cover what a project actually asks for (`**\\/*.tsx`, `src/*.css`) and every\n * addition beyond them is a new way for a pattern to mean something the caller\n * did not expect.\n */\n\n/** `*` stops at a separator; `**` crosses them. That distinction is the whole point. */\nexport function globToRegExp(pattern: string): RegExp {\n let out = \"\";\n for (let i = 0; i < pattern.length; i++) {\n const c = pattern[i];\n if (c === \"*\") {\n if (pattern[i + 1] === \"*\") {\n // `**/` should also match zero directories, so `/**/x` finds `/x`.\n if (pattern[i + 2] === \"/\") {\n out += \"(?:.*/)?\";\n i += 2;\n } else {\n out += \".*\";\n i += 1;\n }\n } else {\n out += \"[^/]*\";\n }\n } else if (c === \"?\") {\n out += \"[^/]\";\n } else if (c === \"{\") {\n const close = pattern.indexOf(\"}\", i);\n if (close === -1) {\n out += \"\\\\{\";\n } else {\n const alts = pattern.slice(i + 1, close).split(\",\");\n out += `(?:${alts.map(escapeLiteral).join(\"|\")})`;\n i = close;\n }\n } else {\n out += escapeLiteral(c);\n }\n }\n return new RegExp(`^${out}$`);\n}\n\nfunction escapeLiteral(s: string): string {\n return s.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n","/**\n * `client.vfs` — a real filesystem over Muhkoo primitives.\n *\n * Metadata is a graph of encrypted directory records in the user's personal\n * space; file content is chunked, encrypted and stored in the global\n * content-addressed shard store, referenced by manifest. See `types.ts` for\n * why directories carry stable random ids and why each key lives in its parent.\n *\n * ## Consistency\n *\n * Every mutation is a read-modify-write of exactly ONE directory record, so a\n * write cannot leave the tree half-updated: either the parent names the new\n * child or it does not. Two tabs writing different directories never conflict;\n * two tabs writing the SAME directory resolve last-writer-wins at the personal\n * space, which carries an HLC per key. Orphaned records (a directory whose\n * parent entry lost the race) are unreachable rather than corrupting — they\n * cost storage until a future sweep, which is the trade this shape makes in\n * exchange for single-record writes.\n */\n\nimport type { FileManifest } from \"../storage/types\";\nimport {\n dirKey,\n historyKey,\n ROOT_ID,\n VfsConflictError,\n VfsLockedError,\n VfsNotFoundError,\n type DirEntry,\n type DirNode,\n type Entry,\n type FileEntry,\n type HistoryRecord,\n type VfsStat,\n type VfsStore,\n} from \"./types\";\nimport { deriveRootKey, fromBase64, newDirKey, newId, seal, toBase64, unseal } from \"./recordCipher\";\nimport {\n assertValidName, basename, contentTypeFor, dirname, isSafeName, isUnder, join, normalizePath, resolveFrom, segments,\n} from \"./paths\";\nimport { globToRegExp } from \"./glob\";\n\n/**\n * The slice of content storage the VFS needs.\n *\n * Narrow on purpose: the VFS knows how to name and arrange things, not how to\n * shard them. The adapter in `Client` resolves the content space and calls\n * `client.storage.writeFile` unchanged — the file still lands in a real Space\n * with a real gated manifest, and the VFS just keeps the handle somewhere\n * better than a flat mirror.\n */\nexport interface VfsContentStore {\n write(\n data: Uint8Array | Blob,\n meta: { name: string; type: string },\n ): Promise<{ manifest: FileManifest; size: number }>;\n read(manifest: FileManifest): Promise<Uint8Array>;\n /**\n * Drop a reference to a manifest's shards.\n *\n * Shards are content-addressed and reference-counted, so deleting a file is\n * not enough to reclaim the bytes — without this, every version ever\n * written stays on disk and billed forever. Best-effort: a failure here\n * leaks storage but must not block the delete.\n */\n release(manifest: FileManifest): Promise<void>;\n /**\n * Take an ADDITIONAL reference to shards that already exist.\n *\n * Needed when a manifest gains a second owner without new bytes being\n * written — copying a file. Without it the copy holds a handle to shards\n * with a refcount of one, and deleting the original frees the bytes out\n * from under it.\n */\n retain(manifest: FileManifest): Promise<void>;\n}\n\nexport interface VfsNamespaceDeps {\n store: VfsStore;\n /**\n * Subscribe to the personal space's raw change feed, if the runtime has one.\n * Optional so the VFS works headlessly (a CLI, a test) with no socket.\n */\n subscribe?: (handler: (frame: unknown) => void) => () => void;\n content: VfsContentStore;\n /** The in-memory master seed, or null when locked. Read per call — it can change. */\n seed: () => Uint8Array | null;\n /** Versions retained per file. */\n historyLimit?: number;\n}\n\n/** A directory record plus the key it was opened with. */\ninterface OpenDir {\n id: string;\n key: Uint8Array;\n node: DirNode;\n}\n\n/**\n * How deep a tree may be before we stop walking it.\n *\n * Well past anything a real project needs, and low enough that a malformed or\n * hostile record cannot spend the caller's memory before the cycle guard sees a\n * repeat.\n */\nconst MAX_DEPTH = 64;\n\n/**\n * How many directories `walk` lists at once.\n *\n * Enough to hide per-request latency on a wide tree; low enough that a big\n * project does not open a request per directory. Browsers cap concurrency per\n * origin anyway, so a larger number mostly moves the queue.\n */\nconst WALK_CONCURRENCY = 8;\n\n/**\n * `Promise.all` with a ceiling, preserving input order.\n *\n * Results are written back BY INDEX rather than pushed as they settle, so the\n * output order matches the input regardless of which finishes first — which is\n * what lets `walk` parallelise without changing what it returns.\n */\nasync function mapLimit<T, R>(items: T[], limit: number, fn: (item: T) => Promise<R>): Promise<R[]> {\n if (items.length <= 1) return items.length ? [await fn(items[0])] : [];\n const out = new Array<R>(items.length);\n let next = 0;\n await Promise.all(\n Array.from({ length: Math.min(limit, items.length) }, async () => {\n for (let i = next++; i < items.length; i = next++) out[i] = await fn(items[i]);\n }),\n );\n return out;\n}\n\nconst DEFAULT_HISTORY_LIMIT = 20;\n\nexport class VfsNamespace {\n private rootKey: Uint8Array | null = null;\n /**\n * Decrypted directory records, by id.\n *\n * The file tree re-lists constantly while typing, and every miss is a\n * network round trip plus a decrypt. Invalidated precisely on write rather\n * than by TTL — a stale directory listing shows files that are not there.\n */\n private cache = new Map<string, Promise<OpenDir>>();\n private readonly historyLimit: number;\n\n constructor(private readonly deps: VfsNamespaceDeps) {\n this.historyLimit = deps.historyLimit ?? DEFAULT_HISTORY_LIMIT;\n }\n\n /**\n * The working directory relative paths resolve against.\n *\n * Kept here rather than left to each caller so that a CLI, a script and the\n * SDK all agree on what \"here\" means — the alternative is every consumer\n * re-implementing `cd`, and disagreeing about `..`.\n */\n private _cwd = \"/\";\n\n /** The current working directory. Always absolute. */\n get cwd(): string {\n return this._cwd;\n }\n\n /**\n * Change the working directory.\n *\n * Verifies the target is a real directory, so a typo fails here — where the\n * message can name the path — rather than turning every later relative path\n * into a confusing \"does not exist\".\n */\n async cd(path: string): Promise<string> {\n const target = this.resolve(path);\n if (target !== \"/\") {\n const found = await this.find(target);\n if (!found) throw new VfsNotFoundError(target);\n if (found.entry.kind !== \"dir\") throw new VfsConflictError(`${target} is not a directory`);\n }\n this._cwd = target;\n return target;\n }\n\n /** Resolve a path against the working directory. Absolute paths pass through. */\n resolve(path: string): string {\n return resolveFrom(this._cwd, path);\n }\n\n /** True when the master seed is held, so the root key can be derived. */\n get unlocked(): boolean {\n return this.deps.seed() !== null;\n }\n\n /**\n * Drop every cached record.\n *\n * Call after signing in as someone else — the cache is keyed by directory\n * id with no notion of whose filesystem it came from, and serving one\n * identity's directories to another would be the worst possible bug here.\n */\n clearCache(): void {\n this.cache.clear();\n this.rootKey = null;\n this._cwd = \"/\"; // a different identity's tree has different directories\n }\n\n /**\n * Call `handler` when this filesystem changes somewhere else — another tab,\n * another machine, the CLI.\n *\n * Deliberately a NOTIFICATION, not a diff: the frame names a record id, and\n * a record id is not a path (paths are resolved by walking, and the walk is\n * what the change may have invalidated). So the cache is dropped and the\n * caller re-reads whatever it is actually showing. Trying to translate a\n * record id back into a path would mean maintaining a reverse index that\n * could itself go stale.\n *\n * Returns an unsubscribe function. A runtime with no socket (a CLI) gets a\n * no-op rather than an error — watching is an optimisation, never required\n * for correctness.\n */\n watch(handler: () => void): () => void {\n if (!this.deps.subscribe) return () => {};\n return this.deps.subscribe((raw) => {\n let frame: { _t?: string; key?: string };\n try {\n frame = typeof raw === \"string\" ? JSON.parse(raw) : (raw as typeof frame);\n } catch {\n return;\n }\n if (frame?._t !== \"change\" || typeof frame.key !== \"string\") return;\n if (!frame.key.startsWith(\"vfs/\")) return; // someone else's data on the shared feed\n\n // Drop only the record that changed.\n //\n // Clearing everything looked cheap and is not: our own writes echo\n // back, so a sync that writes a few hundred files emptied the cache\n // a few hundred times, and every path resolution in flight went back\n // to the network for the root and every directory below it. The key\n // names the record, so there is no need to guess.\n const id = frame.key.startsWith(\"vfs/d/\") ? frame.key.slice(\"vfs/d/\".length) : null;\n if (id) this.cache.delete(id);\n else this.cache.clear(); // a shape we do not recognise: be safe\n handler();\n });\n }\n\n // ---- reads --------------------------------------------------------------\n\n async exists(path: string): Promise<boolean> {\n return (await this.find(path)) !== null;\n }\n\n async stat(path: string): Promise<VfsStat> {\n const found = await this.find(path);\n if (!found) throw new VfsNotFoundError(this.resolve(path));\n return toStat(this.resolve(path), found.name, found.entry);\n }\n\n /** Immediate children of a directory. One record fetch. */\n async list(path = \".\"): Promise<VfsStat[]> {\n const dir = await this.openDir(path);\n const base = this.resolve(path);\n return Object.entries(dir.node.entries)\n // Validate the name HERE, where it is read.\n //\n // A directory record is sealed under a key derivable from the master\n // seed, so its contents are not necessarily something this SDK\n // wrote, and the write-side check never sees them. An unusable name\n // is dropped rather than thrown on: one bad entry must not make the\n // whole directory unlistable, and callers walk this output straight\n // into filesystem paths.\n .filter(([name]) => {\n if (isSafeName(name)) return true;\n this.warn(`ignoring entry with an unusable name in ${base}`);\n return false;\n })\n .map(([name, entry]) => toStat(join(base, name), name, entry))\n .sort(byDirsThenName);\n }\n\n private warn(message: string): void {\n // Kept quiet by default in a browser console that the user cannot act\n // on, but never silent: a dropped entry is a real difference between\n // what is stored and what is shown.\n console.warn(`[muhkoo/vfs] ${message}`);\n }\n\n /**\n * Every file path under a prefix, depth-first.\n *\n * Deliberately separate from `list`: this walks the whole subtree, which is\n * one fetch per directory. Fine for a project, wrong as a default.\n */\n async walk(path = \".\"): Promise<string[]> {\n /**\n * Sibling directories are listed CONCURRENTLY.\n *\n * Each `list` is a round trip for one directory record, and walking them\n * one after another cost the sum of those latencies: measured against a\n * real project, the walk alone was 1–2.1s before a single file had been\n * read. Directories are independent, so there was never a reason to\n * queue them.\n *\n * Order is preserved exactly. Each entry maps to its own slice of the\n * result and the slices are concatenated in listing order, so the output\n * is identical to the depth-first version — callers and tests that\n * depend on it are unaffected, and only the timing changes.\n */\n const seen = new Set<string>();\n\n const visit = async (dirPath: string, depth: number): Promise<string[]> => {\n if (depth > MAX_DEPTH) {\n this.warn(`stopping at ${dirPath}: deeper than ${MAX_DEPTH} levels`);\n return [];\n }\n // Claimed BEFORE the first await, so two concurrent visits to the\n // same directory cannot both get past this. A record whose entry\n // points back at an ancestor would otherwise recurse forever, and\n // nothing in the format prevents one.\n if (seen.has(dirPath)) {\n this.warn(`stopping at ${dirPath}: already visited (the tree contains a cycle)`);\n return [];\n }\n seen.add(dirPath);\n\n const entries = await this.list(dirPath);\n const slices = await mapLimit(entries, WALK_CONCURRENCY, async (entry) =>\n entry.kind === \"dir\" ? visit(entry.path, depth + 1) : [entry.path],\n );\n return slices.flat();\n };\n\n return visit(this.resolve(path), 0);\n }\n\n async readFile(path: string): Promise<Uint8Array> {\n const entry = await this.expectFile(path);\n return this.deps.content.read(entry.manifest);\n }\n\n async readText(path: string): Promise<string> {\n return new TextDecoder().decode(await this.readFile(path));\n }\n\n /**\n * A file's manifest — the handle itself, without reading the bytes.\n *\n * Version control records manifests rather than content, so a commit costs\n * a hash and a reference, not a copy.\n */\n async statManifest(path: string): Promise<{ manifest: FileManifest; size: number }> {\n const entry = await this.expectFile(path);\n return { manifest: entry.manifest, size: entry.size };\n }\n\n /**\n * Read content by its manifest, wherever it came from.\n *\n * A merge needs the COMMON ANCESTOR's version of a file, which by definition\n * is not in the working tree any more. The manifest is the whole capability,\n * so no path lookup is involved.\n */\n async readByManifest(manifest: FileManifest): Promise<Uint8Array> {\n return this.deps.content.read(manifest);\n }\n\n /**\n * Pin content that something other than the working tree depends on.\n *\n * A commit references a manifest, so it is an OWNER of that content — without\n * a reference of its own, deleting the file from the working tree would free\n * shards the history still needs, and checking out an older commit would find\n * the content gone. (It did, in test.)\n */\n async retainManifest(manifest: FileManifest): Promise<void> {\n await this.deps.content.retain(manifest);\n }\n\n /**\n * Point a path at content that already exists.\n *\n * This is how a checkout restores a file: the bytes are in the shard store\n * already, so nothing is uploaded or downloaded — only the directory record\n * changes. Takes a reference, because a second path now depends on those\n * shards.\n */\n async writeManifest(path: string, manifest: FileManifest, size: number): Promise<VfsStat> {\n const target = this.resolve(path);\n const name = basename(target);\n assertValidName(name);\n await this.mkdir(dirname(target), { recursive: true });\n\n const parent = await this.openDir(dirname(target));\n const prior = parent.node.entries[name];\n if (prior?.kind === \"dir\") throw new VfsConflictError(`${target} is a directory`);\n\n await this.deps.content.retain(manifest);\n const entry: FileEntry = {\n kind: \"file\",\n id: prior?.id ?? newId(),\n manifest,\n size,\n mtime: Date.now(),\n versions: prior?.versions ?? 0,\n };\n await this.mutate(parent, (node) => {\n node.entries[name] = entry;\n });\n return toStat(target, name, entry);\n }\n\n // ---- writes -------------------------------------------------------------\n\n /**\n * Create a directory. `recursive` creates missing parents and tolerates an\n * existing target, matching `mkdir -p`.\n */\n async mkdir(path: string, opts: { recursive?: boolean } = {}): Promise<void> {\n const target = this.resolve(path);\n if (target === \"/\") return;\n const parts = segments(target);\n\n let current = \"/\";\n for (let i = 0; i < parts.length; i++) {\n const name = parts[i];\n const isLast = i === parts.length - 1;\n const next = join(current, name);\n const existing = (await this.openDir(current)).node.entries[name];\n\n if (existing) {\n if (existing.kind === \"file\") throw new VfsConflictError(`${next} is a file`);\n if (isLast && !opts.recursive) throw new VfsConflictError(`${next} already exists`);\n } else {\n if (!isLast && !opts.recursive) throw new VfsNotFoundError(current);\n await this.createDir(current, name);\n }\n current = next;\n }\n }\n\n /**\n * Write a file, creating parent directories as needed.\n *\n * The previous version is pushed onto the file's history record before the\n * directory entry is replaced, so an interrupted write can lose the new\n * version but never the old one.\n */\n async writeFile(\n path: string,\n data: Uint8Array | string | Blob,\n opts: { type?: string } = {},\n ): Promise<VfsStat> {\n const target = this.resolve(path);\n const name = basename(target);\n assertValidName(name);\n const parentPath = dirname(target);\n await this.mkdir(parentPath, { recursive: true });\n\n const bytes = typeof data === \"string\" ? new TextEncoder().encode(data) : data;\n const { manifest, size } = await this.deps.content.write(bytes, {\n name,\n type: opts.type ?? contentTypeFor(name),\n });\n\n const parent = await this.openDir(parentPath);\n const prior = parent.node.entries[name];\n if (prior?.kind === \"dir\") throw new VfsConflictError(`${target} is a directory`);\n\n const id = prior?.id ?? newId();\n let versions = prior?.versions ?? 0;\n if (prior) versions = await this.pushHistory(parent, id, prior as FileEntry);\n\n const entry: FileEntry = { kind: \"file\", id, manifest, size, mtime: Date.now(), versions };\n await this.mutate(parent, (node) => {\n node.entries[name] = entry;\n });\n return toStat(target, name, entry);\n }\n\n /**\n * Delete a file, or a directory when `recursive`.\n *\n * `keepContent` removes the entry WITHOUT releasing its shards. A checkout\n * needs that: the file is leaving the working tree, but commits still\n * reference the same manifest, and releasing would free content history\n * depends on.\n */\n async delete(path: string, opts: { recursive?: boolean; keepContent?: boolean } = {}): Promise<void> {\n const target = this.resolve(path);\n if (target === \"/\") throw new VfsConflictError(\"the root directory cannot be deleted\");\n const name = basename(target);\n const parent = await this.openDir(dirname(target));\n const entry = parent.node.entries[name];\n if (!entry) throw new VfsNotFoundError(target);\n\n if (entry.kind === \"dir\") {\n const child = await this.openDirById(entry.id, fromBase64(entry.key));\n const empty = Object.keys(child.node.entries).length === 0;\n if (!empty && !opts.recursive) throw new VfsConflictError(`${target} is not empty`);\n await this.purge(child);\n } else if (opts.keepContent) {\n await this.deps.store.delete(historyKey(entry.id)).catch(() => {});\n } else {\n await this.releaseFile(parent, entry);\n }\n\n await this.mutate(parent, (node) => {\n delete node.entries[name];\n });\n }\n\n /**\n * Move or rename. Works across directories, which is the same operation:\n * detach the entry from one parent and attach it to another.\n *\n * A directory move is O(1) regardless of how much is inside it — the\n * subtree records are not touched at all, because nothing in them records\n * its own path.\n */\n async rename(from: string, to: string): Promise<void> {\n const src = this.resolve(from);\n const dst = this.resolve(to);\n if (src === dst) return;\n if (src === \"/\") throw new VfsConflictError(\"the root directory cannot be moved\");\n if (isUnder(dst, src)) throw new VfsConflictError(`cannot move ${src} into itself`);\n\n const dstName = basename(dst);\n assertValidName(dstName);\n\n const srcParent = await this.openDir(dirname(src));\n const entry = srcParent.node.entries[basename(src)];\n if (!entry) throw new VfsNotFoundError(src);\n\n await this.mkdir(dirname(dst), { recursive: true });\n const dstParent = await this.openDir(dirname(dst));\n if (dstParent.node.entries[dstName]) throw new VfsConflictError(`${dst} already exists`);\n\n // Attach before detaching. If the second write fails the entry is\n // reachable from both parents — visible and fixable. The other order\n // would lose the subtree entirely.\n const moved: Entry = { ...entry, mtime: Date.now() };\n await this.mutate(dstParent, (node) => {\n node.entries[dstName] = moved;\n });\n\n // Re-open: same-parent moves mutated the record we are about to edit.\n const detachFrom = await this.openDir(dirname(src));\n await this.mutate(detachFrom, (node) => {\n delete node.entries[basename(src)];\n });\n }\n\n /**\n * Copy a file or a directory tree.\n *\n * Copying a FILE moves no bytes: content is immutable and content-addressed,\n * so the new entry simply points at the same manifest. A 200 MB asset\n * duplicates in one small metadata write, and the shard store already holds\n * exactly one copy of it.\n *\n * The copy gets a NEW file id, so it does not inherit or share history —\n * two paths sharing an id would mean saving one silently pushed a version\n * onto the other.\n */\n async copy(from: string, to: string): Promise<VfsStat> {\n const src = this.resolve(from);\n const dst = this.resolve(to);\n if (src === \"/\") throw new VfsConflictError(\"the root directory cannot be copied\");\n if (src === dst) throw new VfsConflictError(`${dst} already exists`);\n if (isUnder(dst, src)) throw new VfsConflictError(`cannot copy ${src} into itself`);\n\n const found = await this.find(src);\n if (!found) throw new VfsNotFoundError(src);\n\n const dstName = basename(dst);\n assertValidName(dstName);\n await this.mkdir(dirname(dst), { recursive: true });\n const dstParent = await this.openDir(dirname(dst));\n if (dstParent.node.entries[dstName]) throw new VfsConflictError(`${dst} already exists`);\n\n const copied = await this.cloneEntry(found.entry);\n await this.mutate(dstParent, (node) => {\n node.entries[dstName] = copied;\n });\n return toStat(dst, dstName, copied);\n }\n\n /**\n * Paths matching a glob, relative to the whole filesystem.\n *\n * Matching happens on the client over a walk of the tree, so the cost is one\n * record fetch per directory — cheap for a project, and worth knowing before\n * pointing it at the root of a large filesystem. Use `walk` when the prefix\n * already narrows it.\n */\n async glob(pattern: string, opts: { from?: string } = {}): Promise<string[]> {\n const re = globToRegExp(this.resolve(pattern));\n return (await this.walk(opts.from ?? \".\")).filter((path) => re.test(path));\n }\n\n /**\n * Delete metadata records no longer reachable from the root.\n *\n * These accumulate because every write touches exactly one record: if two\n * tabs edit the same directory, last-writer-wins at the personal space can\n * leave a child whose parent entry lost the race. Unreachable is harmless —\n * it is invisible and undecryptable-by-nobody — but it costs storage, so\n * this reclaims it.\n *\n * Deliberately explicit, never automatic: a sweep racing another tab's\n * in-flight write could delete a record that is about to be referenced.\n * Run it when the filesystem is idle.\n */\n async sweep(opts: { force?: boolean } = {}): Promise<{ removed: string[] }> {\n const root = await this.root();\n const reachable = new Set<string>();\n const visit = async (dir: OpenDir): Promise<void> => {\n // `reachable` was already the visited set - it just was not being\n // TESTED before recursing, so a cycle looped forever. Here the\n // consequence would have been worse than a hang: sweep decides what\n // to delete, and it never got as far as deciding.\n if (reachable.has(dirKey(dir.id))) return;\n reachable.add(dirKey(dir.id));\n for (const entry of Object.values(dir.node.entries)) {\n if (entry.kind === \"dir\") {\n await visit(await this.openDirById(entry.id, fromBase64(entry.key)));\n } else {\n reachable.add(historyKey(entry.id));\n }\n }\n };\n await visit(root);\n\n // Only ever consider OUR records: the personal space is shared with\n // chat keys, space keys and the legacy file mirror, and a sweep that\n // reached beyond its own namespace would be a data-loss bug.\n const mine = (await this.deps.store.list()).filter((k) => /^vfs\\/[dh]\\//.test(k));\n const orphans = mine.filter((k) => !reachable.has(k));\n\n // A root that read as EMPTY while orphans exist is the shape of a failed\n // load, not of a fresh filesystem — deleting here would wipe a tree we\n // merely failed to reach. Refuse unless the caller insists.\n const rootEmpty = Object.keys(root.node.entries).length === 0;\n if (rootEmpty && orphans.length && !opts.force) {\n throw new VfsConflictError(\n `refusing to sweep ${orphans.length} record(s) with an empty root — ` +\n \"this looks like a failed load rather than an empty filesystem; pass { force: true } if it really is empty\",\n );\n }\n\n for (const key of orphans) await this.deps.store.delete(key).catch(() => {});\n return { removed: orphans };\n }\n\n // ---- history ------------------------------------------------------------\n\n /** Prior versions of a file, newest first. One record fetch. */\n async history(path: string): Promise<Array<{ size: number; mtime: number }>> {\n const entry = await this.expectFile(path);\n const record = await this.readHistory(await this.openDir(dirname(path)), entry.id);\n return record.versions.map(({ size, mtime }) => ({ size, mtime }));\n }\n\n /**\n * Restore a prior version, where 0 is the most recent one.\n *\n * The current version is pushed onto history first, so restoring is itself\n * undoable rather than a one-way door.\n */\n async restore(path: string, index = 0): Promise<VfsStat> {\n const target = this.resolve(path);\n const name = basename(target);\n const parent = await this.openDir(dirname(target));\n const entry = parent.node.entries[name];\n if (!entry || entry.kind !== \"file\") throw new VfsNotFoundError(target);\n\n const record = await this.readHistory(parent, entry.id);\n const version = record.versions[index];\n if (!version) throw new VfsNotFoundError(`${target} version ${index}`);\n\n const versions = await this.pushHistory(parent, entry.id, entry);\n const restored: FileEntry = {\n kind: \"file\",\n id: entry.id,\n manifest: version.manifest,\n size: version.size,\n mtime: Date.now(),\n versions,\n };\n await this.mutate(parent, (node) => {\n node.entries[name] = restored;\n });\n return toStat(target, name, restored);\n }\n\n // ---- internals ----------------------------------------------------------\n\n private async expectFile(path: string): Promise<FileEntry> {\n const found = await this.find(path);\n if (!found) throw new VfsNotFoundError(this.resolve(path));\n if (found.entry.kind !== \"file\") throw new VfsConflictError(`${this.resolve(path)} is a directory`);\n return found.entry;\n }\n\n /** Resolve a path to its entry, or null. Root has no entry of its own. */\n private async find(path: string): Promise<{ name: string; entry: Entry } | null> {\n const target = this.resolve(path);\n if (target === \"/\") return null;\n const parent = await this.openDirOrNull(dirname(target));\n if (!parent) return null;\n const name = basename(target);\n const entry = parent.node.entries[name];\n return entry ? { name, entry } : null;\n }\n\n private async root(): Promise<OpenDir> {\n const seed = this.deps.seed();\n if (!seed) throw new VfsLockedError();\n if (!this.rootKey) this.rootKey = await deriveRootKey(seed);\n return this.openDirById(ROOT_ID, this.rootKey);\n }\n\n /** Open a directory by path, creating nothing. Throws if it is missing. */\n private async openDir(path: string): Promise<OpenDir> {\n const dir = await this.openDirOrNull(path);\n if (!dir) throw new VfsNotFoundError(this.resolve(path));\n return dir;\n }\n\n private async openDirOrNull(path: string): Promise<OpenDir | null> {\n let dir = await this.root();\n for (const name of segments(this.resolve(path))) {\n const entry: Entry | undefined = dir.node.entries[name];\n if (!entry || entry.kind !== \"dir\") return null;\n dir = await this.openDirById(entry.id, fromBase64(entry.key));\n }\n return dir;\n }\n\n private openDirById(id: string, key: Uint8Array): Promise<OpenDir> {\n const hit = this.cache.get(id);\n if (hit) return hit;\n\n // The PROMISE goes in the cache, not the resolved value.\n //\n // Reading a project means resolving hundreds of paths that share the\n // same handful of directories. Caching only the settled value leaves\n // every concurrent reader to miss and fire its own request for the same\n // record — which is how loading one project turned into thousands of\n // identical `vfs/d/<id>` fetches, most of them in flight at once.\n const pending = (async () => {\n const raw = await this.deps.store.get(dirKey(id));\n // An absent record is an EMPTY directory, not an error: the root\n // exists before anything has been written to it, and a directory is\n // created by its parent naming it rather than by its own record\n // appearing.\n const node = (await unseal<DirNode>(key, raw)) ?? { v: 1, entries: {}, mtime: Date.now() };\n return { id, key, node } satisfies OpenDir;\n })().catch((err) => {\n // A failed read must not be remembered, or one blip poisons the\n // directory for the life of the session.\n if (this.cache.get(id) === pending) this.cache.delete(id);\n throw err;\n });\n\n this.cache.set(id, pending);\n return pending;\n }\n\n /** Apply an edit to a directory record and persist it. */\n private async mutate(dir: OpenDir, edit: (node: DirNode) => void): Promise<void> {\n edit(dir.node);\n dir.node.mtime = Date.now();\n await this.deps.store.put(dirKey(dir.id), await seal(dir.key, dir.node));\n this.cache.set(dir.id, Promise.resolve(dir));\n }\n\n private async createDir(parentPath: string, name: string): Promise<void> {\n assertValidName(name);\n const parent = await this.openDir(parentPath);\n const entry: DirEntry = { kind: \"dir\", id: newId(), key: toBase64(newDirKey()), mtime: Date.now() };\n await this.mutate(parent, (node) => {\n node.entries[name] = entry;\n });\n }\n\n /** Recursively remove a subtree's records. Best-effort: unreachable ≠ fatal. */\n private async purge(dir: OpenDir, seen = new Set<string>()): Promise<void> {\n // A record that references an ancestor would otherwise recurse forever:\n // the id is only removed from the cache AFTER the loop, so re-entering\n // it hits the same cached record every time.\n if (seen.has(dir.id)) return;\n seen.add(dir.id);\n for (const entry of Object.values(dir.node.entries)) {\n if (entry.kind === \"dir\") {\n await this.purge(await this.openDirById(entry.id, fromBase64(entry.key)), seen);\n } else {\n await this.releaseFile(dir, entry);\n }\n }\n this.cache.delete(dir.id);\n await this.deps.store.delete(dirKey(dir.id)).catch(() => {});\n }\n\n /**\n * Deep-copy an entry. Files reuse their manifest (no bytes move); each\n * directory gets a fresh id and key, so the copy is independent of the\n * original — writing into one must never appear in the other.\n */\n private async cloneEntry(entry: Entry, seen = new Set<string>()): Promise<Entry> {\n if (entry.kind === \"file\") {\n // Same bytes, second owner: take a reference so deleting either one\n // leaves the other readable.\n await this.deps.content.retain(entry.manifest);\n return { kind: \"file\", id: newId(), manifest: entry.manifest, size: entry.size, mtime: Date.now(), versions: 0 };\n }\n // The most expensive walker to leave unguarded: it mints a NEW id, key\n // and stored record at every level, so a cyclic tree does not merely\n // hang - it writes records to the store, and to the user's bill, in an\n // unbounded loop.\n if (seen.has(entry.id) || seen.size > MAX_DEPTH) {\n throw new VfsConflictError(\"VFS: refusing to copy a directory that contains a cycle\");\n }\n seen.add(entry.id);\n const source = await this.openDirById(entry.id, fromBase64(entry.key));\n const clone: DirEntry = { kind: \"dir\", id: newId(), key: toBase64(newDirKey()), mtime: Date.now() };\n const node: DirNode = { v: 1, entries: {}, mtime: Date.now() };\n for (const [name, child] of Object.entries(source.node.entries)) {\n // Names are validated on read everywhere else; a copy must not be\n // the way a bad one is carried into a fresh record.\n if (!isSafeName(name)) {\n this.warn(`skipping entry with an unusable name while copying`);\n continue;\n }\n node.entries[name] = await this.cloneEntry(child, seen);\n }\n const open: OpenDir = { id: clone.id, key: fromBase64(clone.key), node };\n await this.deps.store.put(dirKey(open.id), await seal(open.key, node));\n this.cache.set(open.id, Promise.resolve(open));\n return clone;\n }\n\n /**\n * Let go of a file's bytes: the current manifest and every retained\n * version, then the history record itself.\n */\n private async releaseFile(parent: OpenDir, entry: FileEntry): Promise<void> {\n const record = await this.readHistory(parent, entry.id).catch(() => ({ v: 1, versions: [] } as HistoryRecord));\n const manifests = [entry.manifest, ...record.versions.map((v) => v.manifest)];\n for (const manifest of manifests) await this.deps.content.release(manifest).catch(() => {});\n await this.deps.store.delete(historyKey(entry.id)).catch(() => {});\n }\n\n private async readHistory(parent: OpenDir, fileId: string): Promise<HistoryRecord> {\n const raw = await this.deps.store.get(historyKey(fileId));\n return (await unseal<HistoryRecord>(parent.key, raw)) ?? { v: 1, versions: [] };\n }\n\n /** Push `entry` onto its history record. Returns the new version count. */\n private async pushHistory(parent: OpenDir, fileId: string, entry: FileEntry): Promise<number> {\n const record = await this.readHistory(parent, fileId);\n record.versions.unshift({ manifest: entry.manifest, size: entry.size, mtime: entry.mtime });\n // Bounded, because this is a single stored value. Unchanged chunks are\n // deduped by the content-addressed shard store, so the cost of keeping\n // versions is this record's own growth — which is what the cap bounds.\n const evicted = record.versions.slice(this.historyLimit);\n record.versions = record.versions.slice(0, this.historyLimit);\n // A version that falls off the end is unreachable — release its shards\n // or the cap bounds the record's size while the storage grows forever.\n for (const v of evicted) await this.deps.content.release(v.manifest).catch(() => {});\n await this.deps.store.put(historyKey(fileId), await seal(parent.key, record));\n return record.versions.length;\n }\n}\n\nfunction toStat(path: string, name: string, entry: Entry): VfsStat {\n return {\n path,\n name,\n kind: entry.kind,\n size: entry.kind === \"file\" ? entry.size : 0,\n mtime: entry.mtime,\n versions: entry.kind === \"file\" ? (entry.versions ?? 0) : 0,\n };\n}\n\n/** Directories first, then alphabetical — what every file explorer does. */\nfunction byDirsThenName(a: VfsStat, b: VfsStat): number {\n if (a.kind !== b.kind) return a.kind === \"dir\" ? -1 : 1;\n return a.name.localeCompare(b.name);\n}\n","/**\n * Content addressing for repository objects.\n *\n * The hash must depend only on MEANING, never on serialisation accidents — two\n * clients that build the same tree have to agree on its hash, or history forks\n * for no reason. So keys are sorted and the encoding is fixed here rather than\n * left to `JSON.stringify`'s insertion order.\n */\n\n/** Canonical JSON: object keys sorted, recursively. */\nexport function canonical(value: unknown): string {\n if (value === null || typeof value !== \"object\") return JSON.stringify(value) ?? \"null\";\n if (Array.isArray(value)) return `[${value.map(canonical).join(\",\")}]`;\n const entries = Object.entries(value as Record<string, unknown>)\n .filter(([, v]) => v !== undefined)\n .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));\n return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${canonical(v)}`).join(\",\")}}`;\n}\n\n/** SHA-256 of an object's canonical form, hex. */\nexport async function hashObject(value: unknown): Promise<string> {\n const bytes = new TextEncoder().encode(canonical(value));\n const digest = await crypto.subtle.digest(\"SHA-256\", bytes as BufferSource);\n return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n","/**\n * Three-way line merge.\n *\n * Given a common ancestor and two descendants, produce the combined text — or\n * report the regions where both sides changed the same lines differently.\n *\n * The server cannot do any of this: it holds ciphertext and cannot compare\n * versions, so merging is entirely a client concern and has to be exact here.\n */\n\nexport interface MergeRegionConflict {\n /** 1-based line where the conflict begins in the merged output. */\n line: number;\n ours: string[];\n theirs: string[];\n}\n\nexport interface Merge3Result {\n lines: string[];\n conflicts: MergeRegionConflict[];\n}\n\n/**\n * Longest common subsequence, as a list of matched index pairs.\n *\n * Classic dynamic programming. Fine for source files; a file with hundreds of\n * thousands of lines would want a smarter algorithm, and would also be a strange\n * thing to merge.\n */\nfunction lcs(a: string[], b: string[]): Array<[number, number]> {\n const n = a.length;\n const m = b.length;\n const table: number[][] = Array.from({ length: n + 1 }, () => new Array(m + 1).fill(0));\n for (let i = n - 1; i >= 0; i--) {\n for (let j = m - 1; j >= 0; j--) {\n table[i][j] = a[i] === b[j] ? table[i + 1][j + 1] + 1 : Math.max(table[i + 1][j], table[i][j + 1]);\n }\n }\n const pairs: Array<[number, number]> = [];\n let i = 0;\n let j = 0;\n while (i < n && j < m) {\n if (a[i] === b[j]) {\n pairs.push([i, j]);\n i++;\n j++;\n } else if (table[i + 1][j] >= table[i][j + 1]) i++;\n else j++;\n }\n return pairs;\n}\n\n/**\n * Lines of `base` that BOTH sides left untouched.\n *\n * These are the anchors the merge is built around: between two consecutive\n * anchors, each side has some (possibly empty) replacement, and comparing those\n * replacements is the entire decision.\n */\nfunction stableAnchors(base: string[], ours: string[], theirs: string[]): Array<[number, number, number]> {\n const ourMatch = new Map(lcs(base, ours));\n const theirMatch = new Map(lcs(base, theirs));\n const anchors: Array<[number, number, number]> = [];\n for (let b = 0; b < base.length; b++) {\n const o = ourMatch.get(b);\n const t = theirMatch.get(b);\n if (o !== undefined && t !== undefined) anchors.push([b, o, t]);\n }\n return anchors;\n}\n\nconst same = (a: string[], b: string[]): boolean => a.length === b.length && a.every((x, i) => x === b[i]);\n\n/**\n * Merge `ours` and `theirs` over their common ancestor `base`.\n *\n * A region where only one side changed takes that side. A region where both\n * made the SAME change takes it once — two people fixing the same typo is not a\n * conflict. Only genuinely divergent edits conflict.\n */\nexport function merge3(base: string[], ours: string[], theirs: string[]): Merge3Result {\n const anchors = stableAnchors(base, ours, theirs);\n const out: string[] = [];\n const conflicts: MergeRegionConflict[] = [];\n\n let b = 0;\n let o = 0;\n let t = 0;\n\n const settle = (ourSlice: string[], theirSlice: string[], baseSlice: string[]): void => {\n if (same(ourSlice, theirSlice)) {\n out.push(...ourSlice); // identical edits, or no edit\n } else if (same(ourSlice, baseSlice)) {\n out.push(...theirSlice); // only they changed it\n } else if (same(theirSlice, baseSlice)) {\n out.push(...ourSlice); // only we changed it\n } else {\n conflicts.push({ line: out.length + 1, ours: ourSlice, theirs: theirSlice });\n out.push(...ourSlice); // markers are added by the caller\n }\n };\n\n for (const [ab, ao, at] of anchors) {\n settle(ours.slice(o, ao), theirs.slice(t, at), base.slice(b, ab));\n out.push(base[ab]);\n b = ab + 1;\n o = ao + 1;\n t = at + 1;\n }\n settle(ours.slice(o), theirs.slice(t), base.slice(b));\n\n return { lines: out, conflicts };\n}\n\n/**\n * Merge to text, writing conflict markers where the sides diverged.\n *\n * Markers rather than a bespoke format: they are what every developer already\n * knows how to resolve, and resolving becomes ordinary editing.\n */\nexport function merge3Text(\n base: string,\n ours: string,\n theirs: string,\n labels: { ours: string; theirs: string } = { ours: \"ours\", theirs: \"theirs\" },\n): { text: string; conflicted: boolean } {\n const split = (s: string) => (s === \"\" ? [] : s.split(\"\\n\"));\n const anchors = stableAnchors(split(base), split(ours), split(theirs));\n const B = split(base);\n const O = split(ours);\n const T = split(theirs);\n\n const out: string[] = [];\n let conflicted = false;\n let b = 0;\n let o = 0;\n let t = 0;\n\n const settle = (ourSlice: string[], theirSlice: string[], baseSlice: string[]): void => {\n if (same(ourSlice, theirSlice)) out.push(...ourSlice);\n else if (same(ourSlice, baseSlice)) out.push(...theirSlice);\n else if (same(theirSlice, baseSlice)) out.push(...ourSlice);\n else {\n conflicted = true;\n out.push(`<<<<<<< ${labels.ours}`, ...ourSlice, \"=======\", ...theirSlice, `>>>>>>> ${labels.theirs}`);\n }\n };\n\n for (const [ab, ao, at] of anchors) {\n settle(O.slice(o, ao), T.slice(t, at), B.slice(b, ab));\n out.push(B[ab]);\n b = ab + 1;\n o = ao + 1;\n t = at + 1;\n }\n settle(O.slice(o), T.slice(t), B.slice(b));\n\n return { text: out.join(\"\\n\"), conflicted };\n}\n","/**\n * Object model for version control over the VFS. See `docs/VCS_DESIGN.md`.\n *\n * Two spaces, deliberately: the WORKING TREE (`/apps/<slug>`) uses mutable\n * random directory ids so a file write touches one record; the REPOSITORY\n * (here) is content-addressed so a commit means the same thing forever. Git\n * makes the same split, for the same reason.\n */\nimport type { FileManifest } from \"../storage/types\";\n\n/** A file in a commit. The manifest IS the content — there are no blob objects. */\nexport interface TreeFile {\n kind: \"file\";\n manifest: FileManifest;\n size: number;\n}\n\n/** A subdirectory, by the hash of its own tree object. */\nexport interface TreeDir {\n kind: \"tree\";\n hash: string;\n}\n\nexport type TreeEntry = TreeFile | TreeDir;\n\n/**\n * One directory, frozen.\n *\n * Addressed by the hash of its canonical form, so an unchanged directory has\n * the same hash in every commit containing it — a deep project costs one new\n * tree per CHANGED directory, not one per commit.\n */\nexport interface Tree {\n v: 1;\n entries: Record<string, TreeEntry>;\n}\n\nexport interface Commit {\n v: 1;\n /** Hash of the root tree. */\n tree: string;\n /**\n * Ancestors. An ARRAY because a merge has two; the first commit has none.\n * Order matters: `parents[0]` is the branch being committed onto.\n */\n parents: string[];\n message: string;\n author: string;\n at: number;\n}\n\n/** Where a branch points, or a specific commit when detached. */\nexport type Head = { branch: string } | { detached: string };\n\n/** A single change between two trees. */\nexport interface Change {\n path: string;\n kind: \"added\" | \"removed\" | \"modified\";\n}\n\n/** A path the merge could not settle on its own. */\nexport interface Conflict {\n path: string;\n /** `binary` cannot be merged at all — the user picks a side. */\n reason: \"content\" | \"binary\" | \"modify-delete\";\n}\n\nexport interface MergeResult {\n /** \"up-to-date\" and \"fast-forward\" do no three-way work at all. */\n kind: \"up-to-date\" | \"fast-forward\" | \"merged\" | \"conflicted\";\n commit?: string;\n conflicts: Conflict[];\n}\n\nexport interface LogEntry {\n hash: string;\n message: string;\n author: string;\n at: number;\n parents: string[];\n}\n\n/** Storage keys. Namespaced per project so repositories cannot collide. */\nexport const objectKey = (slug: string, hash: string): string => `vcs/${slug}/obj/${hash}`;\nexport const refKey = (slug: string, name: string): string => `vcs/${slug}/refs/${name}`;\nexport const headKey = (slug: string): string => `vcs/${slug}/HEAD`;\nexport const refsIndexKey = (slug: string): string => `vcs/${slug}/refs`;\n/** An in-progress merge: what to make the second parent when it is committed. */\nexport const mergeKey = (slug: string): string => `vcs/${slug}/MERGE`;\n\nexport const DEFAULT_BRANCH = \"main\";\n\nexport class VcsError extends Error {\n constructor(message: string) {\n super(message);\n this.name = \"VcsError\";\n }\n}\n","/**\n * `client.vcs` — version control for a project in the VFS.\n *\n * Phase 1: objects, commit, log, checkout, diff. Branches and merge build on\n * this; see `docs/VCS_DESIGN.md` for the whole shape and for why the repository\n * is content-addressed while the working tree is not.\n */\nimport type { VfsNamespace } from \"../vfs/VfsNamespace\";\nimport type { VfsStore } from \"../vfs/types\";\nimport { deriveRepoKey, seal, unseal } from \"../vfs/recordCipher\";\nimport { hashObject } from \"./hash\";\nimport { merge3Text } from \"./merge3\";\nimport {\n DEFAULT_BRANCH,\n VcsError,\n headKey,\n mergeKey,\n objectKey,\n refKey,\n refsIndexKey,\n type Change,\n type Commit,\n type Conflict,\n type Head,\n type LogEntry,\n type MergeResult,\n type Tree,\n type TreeEntry,\n type TreeFile,\n} from \"./types\";\n\nexport interface VcsNamespaceDeps {\n vfs: VfsNamespace;\n store: VfsStore;\n /** The key repository objects are sealed with — the project's own. */\n key: () => Promise<Uint8Array>;\n /** Who to record as the author. */\n author: () => string;\n}\n\n/** A project's repository. One per `/apps/<slug>`. */\n/**\n * Types never worth attempting a three-way merge on.\n *\n * NOT application/octet-stream: that is the UNKNOWN case, which is what every\n * extensionless text file gets labelled, so it must reach the content sniff\n * rather than being rejected on the label.\n */\nconst BINARY_TYPE = /^(image|audio|video|font)\\/|^application\\/(wasm|zip|pdf|x-tar|gzip)/;\n\n/**\n * Does this look like text a person could resolve conflict markers in?\n *\n * A NUL byte is the classic tell and the one git uses — no textual encoding we\n * care about produces one. Invalid UTF-8 is the other: decoding it would\n * corrupt the file on write-back even if the merge itself succeeded.\n */\nfunction looksTextual(bytes: Uint8Array): boolean {\n if (bytes.includes(0)) return false;\n try {\n new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes);\n return true;\n } catch {\n return false;\n }\n}\n\n/** Compare two path → entry maps into a change list. */\nfunction comparePaths(before: Map<string, TreeFile>, after: Map<string, TreeFile>): Change[] {\n const changes: Change[] = [];\n for (const [path, entry] of after) {\n const was = before.get(path);\n if (!was) changes.push({ path, kind: \"added\" });\n else if (was.manifest.id !== entry.manifest.id) changes.push({ path, kind: \"modified\" });\n }\n for (const path of before.keys()) if (!after.has(path)) changes.push({ path, kind: \"removed\" });\n return changes.sort((a, b) => (a.path < b.path ? -1 : 1));\n}\n\nexport class Repo {\n constructor(\n private readonly slug: string,\n private readonly deps: VcsNamespaceDeps,\n ) {}\n\n private get root(): string {\n return `/apps/${this.slug}`;\n }\n\n // ---- objects ------------------------------------------------------------\n\n /** Store an object, returning its hash and whether it was new. */\n private async put(value: unknown): Promise<{ hash: string; created: boolean }> {\n const hash = await hashObject(value);\n // Content-addressed, so re-writing an identical object is a no-op —\n // worth skipping because an unchanged directory is written on every\n // commit that touches any of its siblings.\n const existing = await this.deps.store.get(objectKey(this.slug, hash));\n if (existing) return { hash, created: false };\n await this.deps.store.put(objectKey(this.slug, hash), await seal(await this.deps.key(), value));\n return { hash, created: true };\n }\n\n private async get<T>(hash: string): Promise<T> {\n const raw = await this.deps.store.get(objectKey(this.slug, hash));\n const value = raw ? await unseal<T>(await this.deps.key(), raw) : null;\n if (!value) throw new VcsError(`object ${hash.slice(0, 8)} is missing from this repository`);\n return value;\n }\n\n // ---- refs ---------------------------------------------------------------\n\n private async head(): Promise<Head> {\n const raw = await this.deps.store.get(headKey(this.slug));\n const value = raw ? await unseal<Head>(await this.deps.key(), raw) : null;\n return value ?? { branch: DEFAULT_BRANCH };\n }\n\n private async setHead(head: Head): Promise<void> {\n await this.deps.store.put(headKey(this.slug), await seal(await this.deps.key(), head));\n }\n\n private async readRef(name: string): Promise<string | null> {\n const raw = await this.deps.store.get(refKey(this.slug, name));\n return raw ? await unseal<{ commit: string }>(await this.deps.key(), raw).then((v) => v?.commit ?? null) : null;\n }\n\n private async writeRef(name: string, commit: string): Promise<void> {\n await this.deps.store.put(refKey(this.slug, name), await seal(await this.deps.key(), { commit }));\n // The personal space has no prefix listing, so branches are tracked in\n // an index. Kept append-only-ish: losing a name here loses the branch.\n const names = new Set(await this.branches());\n names.add(name);\n await this.deps.store.put(\n refsIndexKey(this.slug),\n await seal(await this.deps.key(), { names: [...names].sort() }),\n );\n }\n\n /** Every branch name in this repository. */\n async branches(): Promise<string[]> {\n const raw = await this.deps.store.get(refsIndexKey(this.slug));\n const value = raw ? await unseal<{ names: string[] }>(await this.deps.key(), raw) : null;\n return value?.names ?? [];\n }\n\n /** The commit HEAD resolves to, or null in an empty repository. */\n async current(): Promise<string | null> {\n const head = await this.head();\n return \"detached\" in head ? head.detached : this.readRef(head.branch);\n }\n\n // ---- commit -------------------------------------------------------------\n\n /**\n * Freeze the working tree as a commit.\n *\n * Trees are written bottom-up so a directory's hash is known before its\n * parent references it. Nothing is written to the shard store: file entries\n * carry the manifest the VFS already holds.\n */\n async commit(message: string, parents?: string[]): Promise<string> {\n if (!message.trim()) throw new VcsError(\"a commit needs a message\");\n const tree = await this.writeTree(this.root);\n const parent = await this.current();\n\n // Finish an interrupted merge: the recorded other side becomes the\n // second parent. Losing this would produce a single-parent commit, and\n // the merge would look as though it never happened — the branches would\n // still appear diverged.\n const pending = parents ? null : await this.pendingMerge();\n const resolved = parents ?? (pending ? [parent!, pending.theirs] : parent ? [parent] : []);\n\n if (!parents && !pending && parent) {\n const previous = await this.get<Commit>(parent);\n // An empty commit is almost always a mistake — the user believes\n // they saved something they did not.\n if (previous.tree === tree) throw new VcsError(\"nothing to commit — the project is unchanged\");\n }\n\n const commit: Commit = {\n v: 1,\n tree,\n parents: resolved,\n message: message.trim(),\n author: this.deps.author(),\n at: Date.now(),\n };\n const { hash } = await this.put(commit);\n await this.advance(hash);\n if (pending) await this.deps.store.delete(mergeKey(this.slug)).catch(() => {});\n return hash;\n }\n\n /** Move whatever HEAD points at onto a new commit. */\n private async advance(hash: string): Promise<void> {\n const head = await this.head();\n if (\"detached\" in head) await this.setHead({ detached: hash });\n else await this.writeRef(head.branch, hash);\n }\n\n /** The other side of a merge that stopped for conflicts, if any. */\n async pendingMerge(): Promise<{ theirs: string; name: string } | null> {\n const raw = await this.deps.store.get(mergeKey(this.slug));\n return raw ? await unseal<{ theirs: string; name: string }>(await this.deps.key(), raw) : null;\n }\n\n /** Write a directory and everything under it, returning the tree's hash. */\n private async writeTree(path: string): Promise<string> {\n const entries: Record<string, TreeEntry> = {};\n for (const entry of await this.deps.vfs.list(path)) {\n if (entry.kind === \"dir\") {\n entries[entry.name] = { kind: \"tree\", hash: await this.writeTree(entry.path) };\n } else {\n const stat = await this.deps.vfs.statManifest(entry.path);\n entries[entry.name] = { kind: \"file\", manifest: stat.manifest, size: entry.size };\n }\n }\n const { hash, created } = await this.put({ v: 1, entries } satisfies Tree);\n\n // A NEW tree means this directory's contents are newly recorded, so the\n // repository takes its own reference to their content. Without it, a\n // later working-tree delete frees shards the commit still needs and the\n // history becomes unreadable.\n //\n // Retaining per new tree rather than per changed FILE slightly\n // over-retains — an unchanged file in a directory whose sibling changed\n // gets a second reference. That errs towards keeping content, which is\n // the correct direction to err in.\n if (created) {\n for (const entry of Object.values(entries)) {\n if (entry.kind === \"file\") await this.deps.vfs.retainManifest(entry.manifest);\n }\n }\n return hash;\n }\n\n // ---- history ------------------------------------------------------------\n\n /** Commits reachable from HEAD, newest first. */\n async log(limit = 50): Promise<LogEntry[]> {\n const start = await this.current();\n if (!start) return [];\n\n const out: LogEntry[] = [];\n const seen = new Set<string>();\n // Breadth-first over parents so a merge's two sides both appear, and\n // `seen` keeps a diamond from listing the shared history twice.\n const queue = [start];\n while (queue.length && out.length < limit) {\n const hash = queue.shift()!;\n if (seen.has(hash)) continue;\n seen.add(hash);\n const commit = await this.get<Commit>(hash);\n out.push({\n hash,\n message: commit.message,\n author: commit.author,\n at: commit.at,\n parents: commit.parents,\n });\n queue.push(...commit.parents);\n }\n return out.sort((a, b) => b.at - a.at);\n }\n\n // ---- diff ---------------------------------------------------------------\n\n /**\n * What changed between two commits.\n *\n * Identical subtree hashes prune the walk: an untouched directory is one\n * comparison regardless of how much is inside it. That is the payoff for\n * content-addressing the trees.\n */\n async diff(fromHash: string | null, toHash: string): Promise<Change[]> {\n const from = fromHash ? (await this.get<Commit>(fromHash)).tree : null;\n const to = (await this.get<Commit>(toHash)).tree;\n const changes: Change[] = [];\n await this.diffTrees(from, to, \"\", changes);\n return changes.sort((a, b) => (a.path < b.path ? -1 : 1));\n }\n\n private async diffTrees(\n fromHash: string | null,\n toHash: string | null,\n prefix: string,\n out: Change[],\n ): Promise<void> {\n if (fromHash === toHash) return; // identical subtrees: nothing below can differ\n const from = fromHash ? await this.get<Tree>(fromHash) : { v: 1 as const, entries: {} };\n const to = toHash ? await this.get<Tree>(toHash) : { v: 1 as const, entries: {} };\n\n for (const name of new Set([...Object.keys(from.entries), ...Object.keys(to.entries)])) {\n const a = from.entries[name];\n const b = to.entries[name];\n const path = `${prefix}/${name}`;\n\n if (a && b && a.kind === \"tree\" && b.kind === \"tree\") {\n await this.diffTrees(a.hash, b.hash, path, out);\n } else if (a?.kind === \"tree\" || b?.kind === \"tree\") {\n // A directory replaced by a file (or the reverse) — recurse both\n // sides so every affected path is reported, not just the name.\n await this.diffTrees(a?.kind === \"tree\" ? a.hash : null, b?.kind === \"tree\" ? b.hash : null, path, out);\n if (a?.kind === \"file\") out.push({ path, kind: \"removed\" });\n if (b?.kind === \"file\") out.push({ path, kind: \"added\" });\n } else if (!a && b) {\n out.push({ path, kind: \"added\" });\n } else if (a && !b) {\n out.push({ path, kind: \"removed\" });\n } else if (a?.kind === \"file\" && b?.kind === \"file\" && a.manifest.id !== b.manifest.id) {\n out.push({ path, kind: \"modified\" });\n }\n }\n }\n\n // ---- checkout -----------------------------------------------------------\n\n /**\n * Replace the working tree with a commit's.\n *\n * Moves no file content: entries carry manifests the shard store already\n * holds, so this rewrites directory records only.\n */\n /**\n * What has changed since the last commit.\n *\n * Compares the WORKING TREE against HEAD without writing any objects: the\n * common case is answering \"anything to commit?\", and a `status` that\n * quietly stored a tree object every time would litter the repository with\n * trees for states nobody chose to keep.\n */\n async status(): Promise<Change[]> {\n const head = await this.current();\n const before = head ? await this.filesOf(head) : new Map<string, TreeFile>();\n const after = await this.workingFiles();\n return comparePaths(before, after);\n }\n\n /** The working tree as a path → entry map, mirroring `filesOf`. */\n private async workingFiles(): Promise<Map<string, TreeFile>> {\n const out = new Map<string, TreeFile>();\n for (const abs of await this.deps.vfs.walk(this.root)) {\n const stat = await this.deps.vfs.statManifest(abs);\n out.set(abs.slice(this.root.length), { kind: \"file\", manifest: stat.manifest, size: stat.size });\n }\n return out;\n }\n\n /**\n * Turn what a person typed into a commit hash.\n *\n * Accepts a branch name, `HEAD`, a full or abbreviated hash, and trailing\n * `^` / `~n` to walk back through parents — so `show abc123^` means \"the\n * commit before that one\" the way anyone who has used git expects.\n */\n async resolve(rev: string): Promise<string> {\n const m = /^(.*?)((?:\\^|~\\d+)*)$/.exec(rev.trim());\n if (!m) throw new VcsError(`cannot understand \"${rev}\"`);\n const [, base, steps] = m;\n\n let hash: string | null = null;\n if (!base || base === \"HEAD\") hash = await this.current();\n else if (await this.readRef(base)) hash = await this.readRef(base);\n else hash = await this.expand(base);\n if (!hash) throw new VcsError(`no commit matches \"${rev}\"`);\n\n for (const step of steps.match(/\\^|~\\d+/g) ?? []) {\n const back = step === \"^\" ? 1 : Number(step.slice(1));\n for (let i = 0; i < back; i++) {\n const parents: string[] = (await this.get<Commit>(hash!)).parents;\n if (!parents.length) throw new VcsError(`\"${rev}\" reaches past the first commit`);\n hash = parents[0]; // first parent: the branch you were on\n }\n }\n return hash!;\n }\n\n /** A hash prefix a person typed → the one commit it names. */\n private async expand(prefix: string): Promise<string | null> {\n if (!/^[0-9a-f]{4,}$/.test(prefix)) return null;\n const keys = await this.deps.store.list();\n const wanted = objectKey(this.slug, prefix);\n const hits = keys.filter((k) => k.startsWith(wanted));\n // Ambiguous is an error, not a coin toss — acting on the wrong commit\n // is exactly the kind of mistake version control exists to prevent.\n if (hits.length > 1) throw new VcsError(`\"${prefix}\" matches ${hits.length} objects — use more characters`);\n if (!hits.length) return null;\n const hash = hits[0].slice(objectKey(this.slug, \"\").length);\n // Objects include trees; only a commit is a valid revision.\n const object = await this.get<{ v: number; tree?: string }>(hash);\n return object && \"tree\" in object ? hash : null;\n }\n\n /**\n * Put one file back to the way it was in a commit.\n *\n * Scoped to a path on purpose — recovering one file you broke should not\n * mean rewinding everything else you have done since.\n */\n async restore(path: string, rev = \"HEAD\"): Promise<void> {\n const hash = await this.resolve(rev);\n const files = await this.filesOf(hash);\n const key = path.startsWith(this.root) ? path.slice(this.root.length) : path.startsWith(\"/\") ? path : `/${path}`;\n const entry = files.get(key);\n if (!entry) throw new VcsError(`${key} is not in ${rev}`);\n await this.deps.vfs.writeManifest(this.abs(key), entry.manifest, entry.size);\n }\n\n async checkout(commitHash: string, opts: { discardChanges?: boolean } = {}): Promise<void> {\n await this.guardWorkingTree(opts.discardChanges);\n await this.materialise(commitHash);\n // DETACHED on purpose: committing from a historical state must not\n // silently rewrite whichever branch you happened to be on. `switchTo`\n // is how you re-attach.\n await this.setHead({ detached: commitHash });\n }\n\n /** Make the working tree match a commit, leaving HEAD alone. */\n private async materialise(commitHash: string): Promise<void> {\n const commit = await this.get<Commit>(commitHash);\n const wanted = new Map<string, TreeFile>();\n await this.collect(commit.tree, \"\", wanted);\n\n // Remove what the commit does not have BEFORE writing what it does —\n // otherwise a file replaced by a directory of the same name collides.\n for (const abs of await this.deps.vfs.walk(this.root)) {\n const path = abs.slice(this.root.length);\n // keepContent: history still references these manifests.\n if (!wanted.has(path)) await this.deps.vfs.delete(abs, { keepContent: true }).catch(() => {});\n }\n for (const [path, entry] of wanted) {\n await this.deps.vfs.writeManifest(this.abs(path), entry.manifest, entry.size);\n }\n }\n\n /** Project-relative path → absolute VFS path. */\n private abs(path: string): string {\n return `${this.root}${path}`;\n }\n\n private async collect(\n treeHash: string,\n prefix: string,\n out: Map<string, TreeFile>,\n ): Promise<void> {\n const tree = await this.get<Tree>(treeHash);\n for (const [name, entry] of Object.entries(tree.entries)) {\n const path = `${prefix}/${name}`;\n if (entry.kind === \"tree\") await this.collect(entry.hash, path, out);\n else out.set(path, entry);\n }\n }\n\n // ---- branches -----------------------------------------------------------\n\n /** Create a branch at a commit (HEAD by default). Does not switch to it. */\n async branch(name: string, at?: string): Promise<string> {\n if (!/^[A-Za-z0-9][A-Za-z0-9._\\/-]*$/.test(name)) throw new VcsError(`\"${name}\" is not a usable branch name`);\n if (await this.readRef(name)) throw new VcsError(`branch \"${name}\" already exists`);\n const commit = at ?? (await this.current());\n if (!commit) throw new VcsError(\"cannot branch an empty repository — commit something first\");\n await this.writeRef(name, commit);\n return commit;\n }\n\n /**\n * Move onto a branch, bringing the working tree with it.\n *\n * Unlike {@link checkout}, this ATTACHES head: later commits advance the\n * branch. Checking out a bare commit deliberately does not, so that\n * committing from a historical state cannot silently rewrite a branch.\n */\n async switchTo(name: string, opts: { discardChanges?: boolean } = {}): Promise<void> {\n const commit = await this.readRef(name);\n if (!commit) throw new VcsError(`no branch named \"${name}\"`);\n await this.guardWorkingTree(opts.discardChanges);\n await this.materialise(commit);\n await this.setHead({ branch: name });\n }\n\n /**\n * Refuse to overwrite work that was never recorded.\n *\n * Moving between commits REPLACES the working tree, so uncommitted edits\n * are gone — and unlike an ordinary overwrite, the person did not ask for\n * anything to be written. Naming the files is the point: \"you have changes\"\n * with no list leaves them guessing what they are about to lose.\n */\n private async guardWorkingTree(discard?: boolean): Promise<void> {\n if (discard) return;\n const pending = await this.status();\n if (!pending.length) return;\n const names = pending.slice(0, 5).map((c) => c.path).join(\", \");\n const more = pending.length > 5 ? `, and ${pending.length - 5} more` : \"\";\n throw new VcsError(\n `${pending.length} uncommitted change(s) would be lost: ${names}${more}. ` +\n \"Commit them first, or pass { discardChanges: true } to throw them away.\",\n );\n }\n\n /** The branch HEAD is on, or null when detached. */\n async currentBranch(): Promise<string | null> {\n const head = await this.head();\n return \"detached\" in head ? null : head.branch;\n }\n\n // ---- merge --------------------------------------------------------------\n\n /**\n * Merge another branch into the current one.\n *\n * Every part of this is client-side by necessity: the server holds\n * ciphertext and cannot compare versions, so base, ours and theirs are all\n * fetched and decrypted here.\n */\n async merge(name: string, opts: { discardChanges?: boolean } = {}): Promise<MergeResult> {\n const theirs = await this.readRef(name);\n if (!theirs) throw new VcsError(`no branch named \"${name}\"`);\n // A merge writes to the working tree as freely as a switch does.\n await this.guardWorkingTree(opts.discardChanges);\n const ours = await this.current();\n if (!ours) throw new VcsError(\"nothing to merge into — commit something first\");\n if (ours === theirs) return { kind: \"up-to-date\", conflicts: [] };\n\n const base = await this.mergeBase(ours, theirs);\n if (base === theirs) return { kind: \"up-to-date\", conflicts: [] };\n if (base === ours) {\n // Fast-forward: our history is contained in theirs, so there is\n // nothing to combine — just move.\n await this.materialise(theirs);\n await this.advance(theirs);\n return { kind: \"fast-forward\", commit: theirs, conflicts: [] };\n }\n\n const [baseFiles, ourFiles, theirFiles] = await Promise.all([\n base ? this.filesOf(base) : new Map<string, TreeFile>(),\n this.filesOf(ours),\n this.filesOf(theirs),\n ]);\n\n const conflicts: Conflict[] = [];\n for (const path of new Set([...ourFiles.keys(), ...theirFiles.keys(), ...baseFiles.keys()])) {\n const b = baseFiles.get(path);\n const o = ourFiles.get(path);\n const t = theirFiles.get(path);\n const conflict = await this.settlePath(path, b, o, t);\n if (conflict) conflicts.push(conflict);\n }\n\n if (conflicts.length) {\n // Record what to merge with, so finishing is just: fix the files,\n // then commit. Losing this would silently produce a commit with one\n // parent, and the merge would appear never to have happened.\n await this.deps.store.put(mergeKey(this.slug), await seal(await this.deps.key(), { theirs, name }));\n return { kind: \"conflicted\", conflicts };\n }\n\n const commit = await this.commit(`Merge ${name}`, [ours, theirs]);\n return { kind: \"merged\", commit, conflicts: [] };\n }\n\n /** Decide one path. Returns a conflict when it cannot be settled. */\n private async settlePath(\n path: string,\n b: TreeFile | undefined,\n o: TreeFile | undefined,\n t: TreeFile | undefined,\n ): Promise<Conflict | null> {\n const id = (f?: TreeFile) => f?.manifest.id;\n if (id(o) === id(t)) return null; // already agree\n\n if (!o && !b && t) return this.take(path, t); // only they added it\n if (!t && !b && o) return null; // only we added it\n if (id(o) === id(b)) { // only they touched it\n if (!t) { await this.deps.vfs.delete(this.abs(path), { keepContent: true }).catch(() => {}); return null; }\n return this.take(path, t);\n }\n if (id(t) === id(b)) return null; // only we touched it\n\n // Both sides moved. A file one side deleted and the other edited is not\n // a merge decision a tool should make silently.\n if (!o || !t) return { path, reason: \"modify-delete\" };\n\n // Definitely-binary types are rejected WITHOUT reading them — merging\n // bytes line-by-line produces corruption, not a result, and these files\n // are exactly the large ones.\n if (BINARY_TYPE.test(o.manifest.type ?? \"\") || BINARY_TYPE.test(t.manifest.type ?? \"\")) {\n return { path, reason: \"binary\" };\n }\n\n const [baseBytes, ourBytes, theirBytes] = await Promise.all([\n b ? this.deps.vfs.readByManifest(b.manifest) : Promise.resolve(new Uint8Array()),\n this.deps.vfs.readByManifest(o.manifest),\n this.deps.vfs.readByManifest(t.manifest),\n ]);\n\n // Then judge by CONTENT, not by the declared type.\n //\n // The type is a hint we do not own: a content store may omit it, and\n // plenty of real text files carry no extension to derive one from\n // (Makefile, LICENSE, .gitignore, .env). Trusting it alone turned every\n // one of those into an unmergeable false conflict.\n if (![ourBytes, theirBytes, baseBytes].every(looksTextual)) return { path, reason: \"binary\" };\n\n const decode = (bytes: Uint8Array) => new TextDecoder().decode(bytes);\n const { text, conflicted } = merge3Text(decode(baseBytes), decode(ourBytes), decode(theirBytes));\n await this.deps.vfs.writeFile(this.abs(path), text);\n return conflicted ? { path, reason: \"content\" } : null;\n }\n\n private async take(path: string, entry: TreeFile): Promise<null> {\n await this.deps.vfs.writeManifest(this.abs(path), entry.manifest, entry.size);\n return null;\n }\n\n /**\n * The most recent commit reachable from both.\n *\n * Walks our ancestry into a set, then theirs breadth-first until it hits it —\n * so the first match is the nearest, which is what a three-way merge needs.\n */\n async mergeBase(a: string, b: string): Promise<string | null> {\n const ancestors = new Set<string>();\n const collect = async (start: string): Promise<void> => {\n const queue = [start];\n while (queue.length) {\n const hash = queue.shift()!;\n if (ancestors.has(hash)) continue;\n ancestors.add(hash);\n queue.push(...(await this.get<Commit>(hash)).parents);\n }\n };\n await collect(a);\n\n const queue = [b];\n const seen = new Set<string>();\n while (queue.length) {\n const hash = queue.shift()!;\n if (seen.has(hash)) continue;\n seen.add(hash);\n if (ancestors.has(hash)) return hash;\n queue.push(...(await this.get<Commit>(hash)).parents);\n }\n return null;\n }\n\n /** Every file in a commit, by path. */\n private async filesOf(commitHash: string): Promise<Map<string, TreeFile>> {\n const commit = await this.get<Commit>(commitHash);\n const out = new Map<string, TreeFile>();\n await this.collect(commit.tree, \"\", out);\n return out;\n }\n\n}\n\n/**\n * Version control over the VFS.\n *\n * One repository per project, addressed by slug — the same slug the VFS stores\n * that project's working tree under. `client.vcs.open(\"my-app\")` is the whole\n * entry point.\n */\nexport class VcsNamespace {\n private readonly repos = new Map<string, Repo>();\n\n constructor(private readonly deps: VcsNamespaceOptions) {}\n\n /** The repository for one project. Cheap and cached; creates nothing. */\n open(slug: string): Repo {\n let repo = this.repos.get(slug);\n if (!repo) {\n repo = new Repo(slug, {\n vfs: this.deps.vfs,\n store: this.deps.store,\n key: async () => {\n const seed = this.deps.seed();\n if (!seed) throw new VcsError(\"client.vcs: no session — sign in first.\");\n return deriveRepoKey(seed, slug);\n },\n author: this.deps.author,\n });\n this.repos.set(slug, repo);\n }\n return repo;\n }\n}\n\nexport interface VcsNamespaceOptions {\n vfs: VfsNamespace;\n store: VfsStore;\n /** The in-memory master seed, or null when locked. Read per call. */\n seed: () => Uint8Array | null;\n author: () => string;\n}\n","/**\n * `ChatKeyVault` — SDK-owned lifecycle for a member's long-lived ratchet/space\n * keypair (the connect `KeyStore` entry keyed by the member id / username).\n *\n * Historically each app hand-rolled this (see the web app's old\n * `personal/spaceLoader.ts`): generate a keypair at register, seed-wrap it, and\n * PUT it to the personal space; on login GET + unwrap + hydrate the `KeyStore`.\n * That scaffolding now lives here so ANY app gets a **stable** member keypair\n * across reloads for free — without which the member re-admits to every space on\n * every load and the group-key cache can never round-trip.\n *\n * Security invariant: the wrapping secret is the **master seed** (not the\n * password), so the blob survives password changes and unlocks under a passkey.\n * The seed is only ever held in memory (never persisted), so this vault can only\n * provision/rehydrate while the client is unlocked.\n */\n\nimport { KeyStore } from \"../crypto/KeyStore\";\nimport { wrapWithPassphrase, unwrapWithPassphrase, type WrappedPayload } from \"../crypto/PassphraseWrap\";\n\n/** Staging-only diagnostics: is the member keypair stable across reloads? */\nconst VAULT_DEBUG = (() => {\n try {\n return typeof location !== \"undefined\" && /(^|\\.)staging\\./.test(location.hostname);\n } catch {\n return false;\n }\n})();\nfunction vlog(msg: string): void {\n if (VAULT_DEBUG) console.info(`[muhkoo:vault] ${msg}`);\n}\n/** A short, stable fingerprint of the member's current keypair (ecdsa pub). */\nasync function fingerprint(memberId: string): Promise<string> {\n try {\n const raw = await KeyStore.getInstance().getRawEcdsaPublicKey(memberId);\n if (!raw) return \"none\";\n let s = 0;\n for (const b of raw) s = (s * 31 + b) >>> 0;\n return s.toString(16).padStart(8, \"0\");\n } catch {\n return \"err\";\n }\n}\n\n/** Opaque personal-space blob store (a `PersonalSpaceClient` or a kv-backed shim). */\nexport interface ChatKeyStore {\n get(key: string): Promise<WrappedPayload | null>;\n put(key: string, value: WrappedPayload): Promise<void>;\n}\n\n/** Personal-space key holding the seed-wrapped, dehydrated ratchet keypair. */\nexport const CHAT_KEYS_KEY = \"chat-keys\";\n\nexport class ChatKeyVault {\n constructor(private readonly store: ChatKeyStore) {}\n\n /**\n * Register-time: ensure a keypair exists for `memberId`, seed-wrap the\n * dehydrated form, and persist it to the personal space. Idempotent — reuses\n * an existing in-tab keypair rather than minting a second one.\n */\n async provision(memberId: string, seedSecret: string): Promise<void> {\n const ks = KeyStore.getInstance();\n if (!ks.getKeyPair(memberId)) {\n try {\n await ks.generateOwnKeyPair(memberId);\n } catch (e) {\n if (!String((e as Error)?.message ?? e).includes(\"already exists\")) throw e;\n }\n }\n const dehydrated = await ks.dehydrateKeyPair(memberId);\n const plaintext = new TextEncoder().encode(JSON.stringify(dehydrated));\n await this.store.put(CHAT_KEYS_KEY, await wrapWithPassphrase(seedSecret, plaintext));\n vlog(`provision: minted+persisted keypair fp=${await fingerprint(memberId)}`);\n }\n\n /**\n * Sign-in / unlock time: fetch the wrapped blob, unwrap with the seed, and\n * hydrate the `KeyStore` — restoring the SAME keypair the member had before.\n * Returns `true` when a keypair is now in hand (already present or hydrated),\n * `false` when there's no blob yet (a brand-new member → caller provisions).\n * Throws only on a genuine unwrap failure (wrong secret / tampered blob).\n */\n async rehydrate(memberId: string, seedSecret: string): Promise<boolean> {\n // Already unlocked in this tab — nothing to do.\n if (KeyStore.getInstance().getKeyPair(memberId)?.privateKey) return true;\n const wrapped = await this.store.get(CHAT_KEYS_KEY);\n if (!wrapped) {\n vlog(\"rehydrate: no chat-keys blob (new member → will provision)\");\n return false;\n }\n const bytes = await unwrapWithPassphrase(seedSecret, wrapped);\n const dehydrated = JSON.parse(new TextDecoder().decode(bytes));\n await KeyStore.getInstance().hydrateKeyPair(memberId, dehydrated);\n vlog(`rehydrate: HIT — restored stable keypair fp=${await fingerprint(memberId)}`);\n return true;\n }\n\n /**\n * Ensure a stable keypair is in hand: rehydrate from the vault if a blob\n * exists, otherwise mint one and persist it (so it's stable next session).\n * Used at register and lazily when a space is first opened.\n */\n async ensure(memberId: string, seedSecret: string): Promise<void> {\n if (await this.rehydrate(memberId, seedSecret)) return;\n await this.provision(memberId, seedSecret);\n }\n}\n\nexport default ChatKeyVault;\n","/**\n * `HlcTimestamp` — a Hybrid Logical Clock reading, packed into a single\n * lexicographically-sortable string so the whole offline layer (and the\n * accelerator) can compare causality with one plain string comparison.\n *\n * An HLC fuses a physical wall-clock millisecond with a logical `counter`\n * (breaks ties inside the same millisecond and lets the clock advance past a\n * remote event without the wall clock moving) and a stable `nodeId` (a final,\n * deterministic tiebreak so two devices never produce an \"equal but different\"\n * stamp). See {@link ./HLC}.\n *\n * The packed form is `\"{wall}:{counter}:{nodeId}\"` with `wall` and `counter`\n * zero-padded to a FIXED width. Fixed width is what makes lexicographic order\n * equal to numeric order — `\"0000000000123:...\"` < `\"0000000000124:...\"`. The\n * server only ever compares these strings; it never has to parse them.\n */\n\n/** Zero-padded width of the wall-clock field. 15 digits holds ms timestamps\n * past the year 5000, so `Date.now()` (currently 13 digits) never overflows. */\nexport const WALL_DIGITS = 15;\n\n/** Zero-padded width of the logical counter. 5 digits allows 100k events in a\n * single wall-clock millisecond before the clock is forced forward — far more\n * than any real burst. */\nexport const COUNTER_DIGITS = 5;\n\n/** The smallest possible stamp — used as the \"nothing stored yet\" sentinel so a\n * first real write always wins (`compareHlc(real, ZERO_HLC) > 0`). */\nexport const ZERO_HLC = pack(0, 0, \"\");\n\nexport interface HlcParts {\n /** Physical wall-clock time, milliseconds since the Unix epoch. */\n wall: number;\n /** Logical counter within `wall`. */\n counter: number;\n /** Stable per-install node id (tiebreak). */\n nodeId: string;\n}\n\nfunction padNum(n: number, width: number): string {\n const s = Math.max(0, Math.floor(n)).toString();\n return s.length >= width ? s : \"0\".repeat(width - s.length) + s;\n}\n\n/** Pack the three components into the sortable string form. */\nexport function pack(wall: number, counter: number, nodeId: string): string {\n return `${padNum(wall, WALL_DIGITS)}:${padNum(counter, COUNTER_DIGITS)}:${nodeId}`;\n}\n\n/** Pack from a {@link HlcParts}. */\nexport function packParts(parts: HlcParts): string {\n return pack(parts.wall, parts.counter, parts.nodeId);\n}\n\n/** Parse a packed stamp back into its components. Tolerates the empty/zero\n * sentinel. Throws on a malformed string so corruption surfaces loudly. */\nexport function unpack(stamp: string): HlcParts {\n const idx1 = stamp.indexOf(\":\");\n const idx2 = stamp.indexOf(\":\", idx1 + 1);\n if (idx1 < 0 || idx2 < 0) {\n throw new Error(`malformed HLC timestamp: ${JSON.stringify(stamp)}`);\n }\n return {\n wall: Number(stamp.slice(0, idx1)),\n counter: Number(stamp.slice(idx1 + 1, idx2)),\n nodeId: stamp.slice(idx2 + 1),\n };\n}\n\n/**\n * Total order over packed HLC strings: negative if `a < b`, positive if\n * `a > b`, `0` only when they are byte-identical. Because the fields are\n * fixed-width and ordered (wall, counter, nodeId), a single string comparison\n * already yields causal order — this helper just normalizes the result to the\n * `-1 | 0 | 1` shape callers expect.\n */\nexport function compareHlc(a: string, b: string): number {\n if (a === b) return 0;\n return a < b ? -1 : 1;\n}\n\n/** Convenience: is `a` strictly newer than `b`? */\nexport function isNewer(a: string, b: string): boolean {\n return compareHlc(a, b) > 0;\n}\n","/**\n * `HLC` — a Hybrid Logical Clock. Hands out monotonically increasing\n * {@link HlcTimestamp} stamps that (a) track real time closely enough to be\n * human-meaningful, yet (b) never go backwards, even across a reload or when a\n * peer's clock is ahead of ours.\n *\n * Two operations, both the textbook HLC algorithm (Kulkarni et al.):\n * - `now()` — stamp a local event.\n * - `update(remote)` — observe a remote stamp (e.g. arriving on the realtime\n * change feed) and advance our clock past it, so any event we generate\n * afterwards is causally `> remote`.\n *\n * State is just `{ wall, counter }`; `nodeId` is fixed for the install. The\n * owner ({@link ../OfflineManager}) seeds the clock from persisted state on\n * boot and persists `getState()` after each tick so monotonicity survives page\n * reloads — without that, a reload could mint a stamp that loses to one written\n * seconds earlier.\n */\n\nimport { pack, type HlcParts } from \"./HlcTimestamp\";\n\nexport interface HlcState {\n wall: number;\n counter: number;\n}\n\n/** Injected physical-time source — defaults to `Date.now`. Overridable so\n * tests can drive the clock deterministically. */\nexport type PhysicalClock = () => number;\n\nexport class HLC {\n private wall: number;\n private counter: number;\n private readonly nodeId: string;\n private readonly physical: PhysicalClock;\n\n constructor(nodeId: string, opts: { state?: HlcState | null; physical?: PhysicalClock } = {}) {\n this.nodeId = nodeId;\n this.physical = opts.physical ?? (() => Date.now());\n this.wall = opts.state?.wall ?? 0;\n this.counter = opts.state?.counter ?? 0;\n }\n\n /** Stamp a locally-generated event. Advances the clock. */\n now(): string {\n const pt = this.physical();\n const prevWall = this.wall;\n this.wall = Math.max(prevWall, pt);\n this.counter = this.wall === prevWall ? this.counter + 1 : 0;\n return this.current();\n }\n\n /**\n * Merge in an observed remote stamp and advance our clock strictly past it.\n * Call this for every inbound HLC (change-feed frames, history rows) so the\n * next `now()` is causally after anything we've seen.\n */\n update(remote: HlcParts): string {\n const pt = this.physical();\n const prevWall = this.wall;\n const newWall = Math.max(prevWall, remote.wall, pt);\n if (newWall === prevWall && newWall === remote.wall) {\n this.counter = Math.max(this.counter, remote.counter) + 1;\n } else if (newWall === prevWall) {\n this.counter = this.counter + 1;\n } else if (newWall === remote.wall) {\n this.counter = remote.counter + 1;\n } else {\n this.counter = 0;\n }\n this.wall = newWall;\n return this.current();\n }\n\n /** The current stamp without advancing the clock. */\n current(): string {\n return pack(this.wall, this.counter, this.nodeId);\n }\n\n /** Serializable `{ wall, counter }` for persistence. */\n getState(): HlcState {\n return { wall: this.wall, counter: this.counter };\n }\n}\n\nexport default HLC;\n","/**\n * `ConnectivityManager` — the single source of truth for \"are we online\", which\n * the offline layer needs to decide between a network call and a cache read, and\n * to know when to flush the durable outbound queue.\n *\n * `navigator.onLine` alone lies often (captive portals, VPN flaps, a laptop\n * that's \"connected\" to a network with no route), so we fuse three signals:\n * 1. the browser `online`/`offline` events (coarse but free),\n * 2. real fetch outcomes reported by {@link ../core/HttpClient} and the shard\n * client — a thrown `TypeError`/abort is the most reliable \"offline\" tell,\n * and a 2xx is the most reliable \"online\" tell,\n * 3. the sync engine, which flips us to `syncing` while it drains the queue.\n *\n * The offline→online edge fires `onReconnect` (wired to the sync engine) so\n * queued writes replay automatically. Transitions are debounced to avoid\n * flapping the UI on a brief blip. State changes also emit on {@link EventCore}\n * (`ONLINE`/`OFFLINE`/`SYNCING`) so apps can render a status indicator.\n */\n\nimport { EventCore, EventCoreEvents } from \"../events/EventCore\";\n\nexport type ConnectivityState = \"online\" | \"offline\" | \"syncing\";\n\nexport interface ConnectivityOptions {\n /** Called on each offline→online transition (drives queue replay). */\n onReconnect?: () => void;\n /** Debounce window for offline transitions, ms. Default 1500. */\n debounceMs?: number;\n}\n\nexport class ConnectivityManager {\n private state: ConnectivityState;\n private readonly listeners = new Set<(state: ConnectivityState) => void>();\n private readonly onReconnect?: () => void;\n private readonly debounceMs: number;\n private offlineTimer: ReturnType<typeof setTimeout> | null = null;\n private started = false;\n\n private readonly handleOnline = () => this.markOnline();\n private readonly handleOffline = () => this.scheduleOffline();\n\n constructor(opts: ConnectivityOptions = {}) {\n this.onReconnect = opts.onReconnect;\n this.debounceMs = opts.debounceMs ?? 1500;\n this.state =\n typeof navigator !== \"undefined\" && navigator.onLine === false ? \"offline\" : \"online\";\n }\n\n /** Attach to the browser online/offline events. Safe to call in Node (no-op). */\n start(): void {\n if (this.started || typeof window === \"undefined\") return;\n window.addEventListener(\"online\", this.handleOnline);\n window.addEventListener(\"offline\", this.handleOffline);\n this.started = true;\n }\n\n stop(): void {\n if (!this.started || typeof window === \"undefined\") return;\n window.removeEventListener(\"online\", this.handleOnline);\n window.removeEventListener(\"offline\", this.handleOffline);\n if (this.offlineTimer) clearTimeout(this.offlineTimer);\n this.started = false;\n }\n\n get current(): ConnectivityState {\n return this.state;\n }\n\n get isOnline(): boolean {\n return this.state !== \"offline\";\n }\n\n /** Subscribe to state changes. Returns an unsubscribe function. */\n onChange(cb: (state: ConnectivityState) => void): () => void {\n this.listeners.add(cb);\n return () => this.listeners.delete(cb);\n }\n\n /** Report a failed network attempt (thrown fetch / abort). */\n reportFetchFailure(): void {\n this.scheduleOffline();\n }\n\n /** Report a successful network round-trip — strongest \"we're online\" signal. */\n reportFetchSuccess(): void {\n this.markOnline();\n }\n\n /** The sync engine entering its drain phase. */\n markSyncing(): void {\n if (this.offlineTimer) {\n clearTimeout(this.offlineTimer);\n this.offlineTimer = null;\n }\n this.set(\"syncing\");\n }\n\n /** The sync engine finished — settle back to online. */\n markSynced(): void {\n this.set(\"online\");\n }\n\n private markOnline(): void {\n if (this.offlineTimer) {\n clearTimeout(this.offlineTimer);\n this.offlineTimer = null;\n }\n // The sync engine owns the syncing→online transition (via markSynced).\n // A request succeeding mid-drain must not cut the syncing state short.\n if (this.state === \"syncing\") return;\n const wasOffline = this.state === \"offline\";\n this.set(\"online\");\n if (wasOffline) {\n try {\n this.onReconnect?.();\n } catch {\n /* a reconnect handler must not break connectivity tracking */\n }\n }\n }\n\n private scheduleOffline(): void {\n if (this.state === \"offline\" || this.offlineTimer) return;\n this.offlineTimer = setTimeout(() => {\n this.offlineTimer = null;\n this.set(\"offline\");\n }, this.debounceMs);\n }\n\n private set(state: ConnectivityState): void {\n if (state === this.state) return;\n this.state = state;\n for (const cb of this.listeners) {\n try {\n cb(state);\n } catch {\n /* a bad listener mustn't break the others */\n }\n }\n const event =\n state === \"online\"\n ? EventCoreEvents.ONLINE\n : state === \"offline\"\n ? EventCoreEvents.OFFLINE\n : EventCoreEvents.SYNCING;\n EventCore.emit(event, { state });\n }\n}\n\nexport default ConnectivityManager;\n","/**\n * `OutboundQueue` — the durable record of writes made while offline (or that\n * failed mid-flight) plus the machinery to replay them on reconnect. This is\n * what makes offline writes *survive a reload*: unlike the in-memory buffer in\n * {@link ../transport/WSTransport}, every entry lives in IndexedDB until it has\n * been acknowledged by the server.\n *\n * Each domain registers a **replayer** — a function that re-applies one queued\n * mutation by re-invoking the real namespace method (with an `isReplay` flag so\n * it doesn't re-enqueue). `drain()` replays entries in HLC order:\n * - success → remove the entry;\n * - permanent failure (4xx) → drop it and surface a `SYNC_ERROR` (a write the\n * server will never accept must not wedge the queue forever);\n * - transient/network failure → stop draining and leave the rest for the next\n * reconnect.\n *\n * Replays are idempotent by construction (kv/db are LWW-by-key, messages dedupe\n * by `clientId`, file PUTs are content-addressed), so re-running a partially\n * drained queue is safe.\n */\n\nimport { EventCore, EventCoreEvents } from \"../events/EventCore\";\nimport { HttpError } from \"../core/HttpClient\";\nimport type { OfflineStore, QueueEntry } from \"./store/OfflineStore\";\n\nexport type Replayer = (entry: QueueEntry) => Promise<void>;\n\nexport class OutboundQueue {\n private readonly replayers = new Map<QueueEntry[\"domain\"], Replayer>();\n private draining: Promise<void> | null = null;\n\n constructor(private readonly store: OfflineStore) {}\n\n /** A domain registers how to replay its mutations. */\n register(domain: QueueEntry[\"domain\"], replayer: Replayer): void {\n this.replayers.set(domain, replayer);\n }\n\n /** Record a mutation for later replay; resolves with its assigned seq. */\n enqueue(entry: Omit<QueueEntry, \"seq\">): Promise<number> {\n return this.store.enqueue(entry);\n }\n\n /** Number of writes still awaiting sync. */\n async pending(): Promise<number> {\n return (await this.store.queued()).length;\n }\n\n /**\n * Replay queued mutations in HLC order. Coalesces concurrent calls into a\n * single in-flight drain. Stops on the first transient failure, leaving the\n * remaining entries for the next attempt.\n */\n drain(): Promise<void> {\n if (this.draining) return this.draining;\n this.draining = this.runDrain().finally(() => {\n this.draining = null;\n });\n return this.draining;\n }\n\n private async runDrain(): Promise<void> {\n const entries = await this.store.queued();\n for (const entry of entries) {\n const replayer = this.replayers.get(entry.domain);\n if (!replayer) {\n // No handler registered (namespace not wired) — drop it rather\n // than block the queue; nothing can ever replay it.\n await this.store.dequeue(entry.seq);\n continue;\n }\n try {\n await replayer(entry);\n await this.store.dequeue(entry.seq);\n EventCore.emit(EventCoreEvents.SYNC_PROGRESS, {\n domain: entry.domain,\n method: entry.method,\n });\n } catch (err) {\n if (isPermanent(err)) {\n await this.store.dequeue(entry.seq);\n EventCore.emit(EventCoreEvents.SYNC_ERROR, {\n domain: entry.domain,\n method: entry.method,\n error: String((err as Error)?.message ?? err),\n dropped: true,\n });\n continue;\n }\n // Transient (offline again, 5xx) — keep the entry, stop here.\n throw err;\n }\n }\n }\n}\n\n/** A 4xx is the server permanently refusing the write; anything else is worth\n * retrying on the next reconnect. */\nfunction isPermanent(err: unknown): boolean {\n return err instanceof HttpError && err.status >= 400 && err.status < 500;\n}\n\nexport default OutboundQueue;\n","/**\n * `SyncEngine` — orchestrates catch-up when the client comes back online. It's\n * the thing wired to the {@link ConnectivityManager}'s offline→online edge.\n *\n * One `run()` does, in order:\n * 1. **Guard** — only proceed when the session is authenticated and unlocked\n * (replays may need to re-seal/re-encrypt, and there's no point pushing\n * writes for a logged-out user).\n * 2. **Drain** the durable {@link OutboundQueue} — push every offline write.\n * 3. **Catch-up tasks** — domain-registered pulls that reconcile *inbound*\n * state we missed while offline (e.g. a Space paging history forward to its\n * last-seen handle). Registered by the namespaces.\n *\n * Concurrent triggers coalesce into a single in-flight run (a reconnect often\n * fires several signals at once), mirroring `Client.recoverInFlight`.\n */\n\nimport { EventCore, EventCoreEvents } from \"../events/EventCore\";\nimport type { ConnectivityManager } from \"./ConnectivityManager\";\nimport type { OutboundQueue } from \"./OutboundQueue\";\n\nexport interface SyncEngineDeps {\n queue: OutboundQueue;\n connectivity: ConnectivityManager;\n /** Proceed only when this returns true (authenticated + unlocked). */\n canSync: () => boolean;\n}\n\nexport class SyncEngine {\n private readonly catchUpTasks = new Set<() => Promise<void>>();\n private running: Promise<void> | null = null;\n\n constructor(private readonly deps: SyncEngineDeps) {}\n\n /** Register an inbound reconciliation task run after the queue drains. */\n registerCatchUp(task: () => Promise<void>): () => void {\n this.catchUpTasks.add(task);\n return () => this.catchUpTasks.delete(task);\n }\n\n /** Drain + catch up. Concurrent calls share one in-flight run. */\n run(): Promise<void> {\n if (this.running) return this.running;\n this.running = this.execute().finally(() => {\n this.running = null;\n });\n return this.running;\n }\n\n private async execute(): Promise<void> {\n if (!this.deps.canSync()) return;\n this.deps.connectivity.markSyncing();\n try {\n await this.deps.queue.drain();\n for (const task of this.catchUpTasks) {\n try {\n await task();\n } catch {\n // One domain's catch-up failing shouldn't abort the others\n // or wedge the sync; it'll retry on the next reconnect.\n }\n }\n EventCore.emit(EventCoreEvents.SYNC_COMPLETE, {});\n } finally {\n this.deps.connectivity.markSynced();\n }\n }\n}\n\nexport default SyncEngine;\n","/**\n * Errors specific to the offline layer.\n */\n\n/**\n * Thrown when an offline read/write needs the user's identity (to decrypt or\n * re-encrypt cached data) but the client is locked — typically right after a\n * reload, where only the session token was restored and `unlock()` hasn't run\n * yet. Distinct from the generic \"not signed in\" identity error so apps can\n * specifically prompt the user to unlock to see their offline data.\n */\nexport class OfflineLockedError extends Error {\n constructor(message = \"Unlock required to access encrypted offline data. Call client.auth.zk.unlock(password).\") {\n super(message);\n this.name = \"OfflineLockedError\";\n }\n}\n","/**\n * `client.offline.snapshot` — a small, encrypted, app-state cache. Apps stash\n * whatever they need to repaint instantly on a cold offline boot: the last open\n * Space, a draft message, scroll position, the current route. It's deliberately\n * separate from `client.kv`: snapshots are **local-only by default** (instant,\n * never metered, never leave the device) and hold view state rather than domain\n * data.\n *\n * await client.offline.snapshot.save('ui', { route, openSpaceId, draft })\n * const ui = await client.offline.snapshot.load<UiState>('ui')\n *\n * Values are encrypted at rest with the same identity-derived {@link StorageCipher}\n * as `client.kv`, so a snapshot is unreadable until the user unlocks — `load`\n * returns `null` when locked or absent, and `save` throws {@link OfflineLockedError}.\n * Conflict model is a single-writer LWW register (the latest save wins).\n */\n\nimport type { SessionState } from \"../../core/Session\";\nimport type { ZkIdentity } from \"../../auth/identity\";\nimport { StorageCipher, type EncryptedEnvelope } from \"../../crypto/StorageCipher\";\nimport type { OfflineStore } from \"../store/OfflineStore\";\nimport { OfflineLockedError } from \"../errors\";\n\nexport interface SnapshotNamespaceDeps {\n store: OfflineStore;\n session: SessionState;\n /** Stamp the saved record (LWW ordering); supplied by the OfflineManager. */\n nextHlc: () => Promise<string>;\n}\n\ninterface SnapshotRecord {\n envelope: EncryptedEnvelope;\n hlc: string;\n updatedAt: number;\n}\n\nexport class SnapshotNamespace {\n private cipher: StorageCipher | null = null;\n private cipherIdentity: ZkIdentity | null = null;\n\n constructor(private readonly deps: SnapshotNamespaceDeps) {}\n\n /** Persist `state` under `name` (encrypted). No-op when offline support is off. */\n async save<T = unknown>(name: string, state: T): Promise<void> {\n if (!this.deps.store.enabled) return;\n const envelope = await this.requireCipher().encrypt(state);\n const record: SnapshotRecord = {\n envelope,\n hlc: await this.deps.nextHlc(),\n updatedAt: Date.now(),\n };\n await this.deps.store.put(\"snapshots\", this.key(name), record);\n }\n\n /** Load and decrypt the snapshot `name`, or `null` if absent/locked. */\n async load<T = unknown>(name: string): Promise<T | null> {\n if (!this.deps.store.enabled) return null;\n const record = await this.deps.store.get<SnapshotRecord>(\"snapshots\", this.key(name));\n if (!record) return null;\n if (!this.deps.session.isUnlocked) return null;\n return this.requireCipher().decrypt<T>(record.envelope);\n }\n\n /** Remove the snapshot `name`. */\n async delete(name: string): Promise<void> {\n if (!this.deps.store.enabled) return;\n await this.deps.store.delete(\"snapshots\", this.key(name));\n }\n\n /** Names of all snapshots for the current user. */\n async list(): Promise<string[]> {\n if (!this.deps.store.enabled) return [];\n const prefix = `${this.commitment()}|`;\n const rows = await this.deps.store.prefix<SnapshotRecord>(\"snapshots\", prefix);\n return rows.map((r) => r.key.slice(prefix.length));\n }\n\n private key(name: string): string {\n return `${this.commitment()}|${name}`;\n }\n\n private commitment(): string {\n // Snapshots are scoped per user; before sign-in they share an \"anon\"\n // bucket so pre-auth UI state (e.g. a chosen theme) still persists.\n return this.deps.session.commitment ?? \"anon\";\n }\n\n private requireCipher(): StorageCipher {\n if (!this.deps.session.isUnlocked) throw new OfflineLockedError();\n const identity = this.deps.session.requireIdentity();\n if (this.cipher && this.cipherIdentity === identity) return this.cipher;\n this.cipher = new StorageCipher(identity.secretHex, identity.saltHex);\n this.cipherIdentity = identity;\n return this.cipher;\n }\n}\n\nexport default SnapshotNamespace;\n","/**\n * IndexedDB schema for the offline layer — the single source of truth for the\n * database name, version, and object stores. Bump {@link DB_VERSION} whenever\n * the store set changes; {@link ./idb}'s `onupgradeneeded` creates any store\n * that doesn't exist yet (additive migrations only — never drop\n * `outbound-queue`, it holds un-synced writes).\n *\n * One database per origin. Records are partitioned *by key* (most keys are\n * prefixed with the user's `commitment`) rather than by separate databases, so\n * a single connection serves every signed-in user on the origin and prefix\n * scans isolate a user's data.\n */\n\nexport const DB_NAME = \"muhkoo.offline\";\nexport const DB_VERSION = 1;\n\nexport type StoreName =\n | \"kv-cache\"\n | \"db-row-cache\"\n | \"db-query-cache\"\n | \"space-messages\"\n | \"space-cursors\"\n | \"outbound-queue\"\n | \"snapshots\"\n | \"hlc-state\"\n | \"meta\";\n\nexport interface StoreDef {\n name: StoreName;\n /** Auto-incrementing in-line key (used by the durable outbound queue). */\n autoIncrement?: boolean;\n /** Key path for an in-line key; omit for out-of-line (explicit) keys. */\n keyPath?: string;\n}\n\nexport const STORES: StoreDef[] = [\n { name: \"kv-cache\" },\n { name: \"db-row-cache\" },\n { name: \"db-query-cache\" },\n { name: \"space-messages\" },\n { name: \"space-cursors\" },\n { name: \"outbound-queue\", autoIncrement: true, keyPath: \"seq\" },\n { name: \"snapshots\" },\n { name: \"hlc-state\" },\n { name: \"meta\" },\n];\n\n/** Fixed keys in the `meta` store. */\nexport const META_NODE_ID = \"nodeId\";\nexport const META_SCHEMA_VERSION = \"schemaVersion\";\n","/**\n * `OfflineManager` — the object `client.offline` points at, and the single\n * owner of everything the offline layer needs at runtime: the {@link\n * OfflineStore}, the {@link HLC} (Hybrid Logical Clock), the {@link\n * ConnectivityManager}, the durable {@link OutboundQueue}, the {@link\n * SyncEngine}, and the {@link SnapshotNamespace}.\n *\n * The {@link ../core/Client} constructs one of these (always — it's a cheap\n * no-op when offline support is off) and hands the namespaces the small set of\n * primitives they need to participate: `nextHlc()` to stamp a write,\n * `observeHlc()` to fold in a remote stamp, `enqueue()` to record an offline\n * mutation, and `registerReplayer()`/`registerCatchUp()` to define how their\n * domain re-syncs on reconnect. Keeping that wiring here means the namespaces\n * stay decoupled from IndexedDB and the clock.\n */\n\nimport { generateId } from \"../utilities\";\nimport type { SessionState } from \"../core/Session\";\nimport { HLC, type HlcState } from \"./clock/HLC\";\nimport { unpack } from \"./clock/HlcTimestamp\";\nimport { ConnectivityManager, type ConnectivityState } from \"./ConnectivityManager\";\nimport { OutboundQueue, type Replayer } from \"./OutboundQueue\";\nimport { SyncEngine } from \"./SyncEngine\";\nimport { SnapshotNamespace } from \"./namespaces/SnapshotNamespace\";\nimport { ShardCache } from \"./cache/ShardCache\";\nimport type { OfflineStore, QueueEntry } from \"./store/OfflineStore\";\nimport { META_NODE_ID } from \"./store/schema\";\n\nexport interface OfflineManagerDeps {\n store: OfflineStore;\n session: SessionState;\n /** Whether offline support is active (browser) vs a no-op (Node/Workers). */\n enabled: boolean;\n}\n\nconst HLC_STATE_KEY = \"global\";\n\nexport class OfflineManager {\n /** True in browsers with IndexedDB; false when running over a NoopStore. */\n readonly enabled: boolean;\n readonly store: OfflineStore;\n readonly connectivity: ConnectivityManager;\n readonly queue: OutboundQueue;\n readonly sync: SyncEngine;\n /** `client.offline.snapshot` — encrypted app-state cache. */\n readonly snapshot: SnapshotNamespace;\n /** Cache-API store for file-shard bytes (browser only). */\n readonly fileCache?: ShardCache;\n\n private hlc: HLC | null = null;\n private nodeId = \"\";\n private readonly bootPromise: Promise<void>;\n private persistTimer: ReturnType<typeof setTimeout> | null = null;\n\n constructor(deps: OfflineManagerDeps) {\n this.enabled = deps.enabled;\n this.store = deps.store;\n this.queue = new OutboundQueue(deps.store);\n this.connectivity = new ConnectivityManager({\n onReconnect: () => void this.sync.run(),\n });\n this.sync = new SyncEngine({\n queue: this.queue,\n connectivity: this.connectivity,\n // Replays may need to re-seal/re-encrypt, and there's no point\n // pushing a logged-out user's writes — gate on a usable session.\n canSync: () => deps.session.isAuthenticated && deps.session.isUnlocked,\n });\n this.snapshot = new SnapshotNamespace({\n store: deps.store,\n session: deps.session,\n nextHlc: () => this.nextHlc(),\n });\n\n if (this.enabled && ShardCache.available()) this.fileCache = new ShardCache();\n\n this.bootPromise = this.boot();\n if (this.enabled) this.connectivity.start();\n }\n\n /**\n * Queue a shard upload that couldn't reach the network. The bytes are\n * already cached (keyed by `hash`), so only the hash is recorded; the file\n * replayer re-PUTs from the cache on reconnect.\n */\n async deferShardUpload(hash: string): Promise<void> {\n await this.enqueue({\n hlc: await this.nextHlc(),\n clientId: this.newClientId(),\n domain: \"file\",\n method: \"putShard\",\n args: { hash },\n });\n }\n\n /** Resolve once the clock + node id are loaded. */\n ready(): Promise<void> {\n return this.bootPromise;\n }\n\n /** Current connectivity state (`online` | `offline` | `syncing`). */\n get status(): ConnectivityState {\n return this.connectivity.current;\n }\n\n /** Subscribe to connectivity changes. Returns an unsubscribe function. */\n onStatusChange(cb: (state: ConnectivityState) => void): () => void {\n return this.connectivity.onChange(cb);\n }\n\n /** Stamp a locally-generated write with a fresh, monotonic HLC. */\n async nextHlc(): Promise<string> {\n await this.bootPromise;\n const stamp = this.hlc!.now();\n this.schedulePersist();\n return stamp;\n }\n\n /** Fold an observed remote HLC into the clock (call for inbound stamps). */\n async observeHlc(remote: string): Promise<void> {\n await this.bootPromise;\n this.hlc!.update(unpack(remote));\n this.schedulePersist();\n }\n\n /** A fresh client-generated id (idempotent replay / message dedupe). */\n newClientId(): string {\n return generateId();\n }\n\n /** Record an offline mutation for replay on reconnect. */\n enqueue(entry: Omit<QueueEntry, \"seq\">): Promise<number> {\n return this.queue.enqueue(entry);\n }\n\n /** A domain registers how to replay its queued mutations. */\n registerReplayer(domain: QueueEntry[\"domain\"], replayer: Replayer): void {\n this.queue.register(domain, replayer);\n }\n\n /** A domain registers an inbound catch-up task (run after the queue drains). */\n registerCatchUp(task: () => Promise<void>): () => void {\n return this.sync.registerCatchUp(task);\n }\n\n /** Surface a network failure to connectivity tracking. */\n reportFetchFailure(): void {\n this.connectivity.reportFetchFailure();\n }\n\n /** Surface a successful round-trip to connectivity tracking. */\n reportFetchSuccess(): void {\n this.connectivity.reportFetchSuccess();\n }\n\n /** Tear down listeners (tests / hot-reload). */\n dispose(): void {\n this.connectivity.stop();\n if (this.persistTimer) clearTimeout(this.persistTimer);\n }\n\n private async boot(): Promise<void> {\n if (!this.enabled) {\n // In-memory clock only; nothing is persisted over a NoopStore.\n this.nodeId = generateId();\n this.hlc = new HLC(this.nodeId);\n return;\n }\n let nodeId = await this.store.get<string>(\"meta\", META_NODE_ID);\n if (!nodeId) {\n nodeId = generateId();\n await this.store.put(\"meta\", META_NODE_ID, nodeId);\n }\n this.nodeId = nodeId;\n const state = await this.store.get<HlcState>(\"hlc-state\", HLC_STATE_KEY);\n this.hlc = new HLC(nodeId, { state });\n }\n\n /** Coalesce HLC-state writes — a burst of stamps persists once. */\n private schedulePersist(): void {\n if (!this.enabled || this.persistTimer) return;\n this.persistTimer = setTimeout(() => {\n this.persistTimer = null;\n if (this.hlc) void this.store.put(\"hlc-state\", HLC_STATE_KEY, this.hlc.getState());\n }, 200);\n }\n}\n\nexport default OfflineManager;\n","/**\n * Environment probe deciding whether the offline layer turns itself on. Offline\n * support is **on by default in browsers** and a no-op everywhere else, so this\n * is the gate the {@link ../core/Client} consults to pick {@link\n * ./store/IndexedDbStore} vs {@link ./store/NoopStore}.\n *\n * We require all three web APIs the layer leans on — `indexedDB` (structured\n * cache + durable queue), the Cache API (file-shard bytes), and a `window`\n * (so we're in a real document with online/offline events) — and we *touch*\n * them inside a try/catch, because some sandboxed or private-mode contexts\n * expose the globals but throw on use (mirrors `defaultSessionStore`).\n */\n\nexport function isOfflineCapable(): boolean {\n try {\n return (\n typeof window !== \"undefined\" &&\n typeof indexedDB !== \"undefined\" &&\n typeof caches !== \"undefined\"\n );\n } catch {\n return false;\n }\n}\n","/**\n * A ~thin promise wrapper over the raw IndexedDB API — just enough surface for\n * {@link ./IndexedDbStore}: open-with-migration, get/put/delete, prefix and\n * range cursor scans, autoincrement append, and clear. We hand-roll this rather\n * than depend on `idb`/`dexie` because the access patterns are simple and\n * `@muhkoo/connect` keeps its runtime dependency surface minimal.\n *\n * Everything here assumes a browser (or a `fake-indexeddb` test shim) — callers\n * gate construction behind {@link ../detect}.\n */\n\nimport { DB_NAME, DB_VERSION, STORES, type StoreName } from \"./schema\";\n\nfunction req<T>(request: IDBRequest<T>): Promise<T> {\n return new Promise((resolve, reject) => {\n request.onsuccess = () => resolve(request.result);\n request.onerror = () => reject(request.error);\n });\n}\n\n/** Open (and migrate) the offline database. Creates any missing object store. */\nexport function openDatabase(): Promise<IDBDatabase> {\n return new Promise((resolve, reject) => {\n const open = indexedDB.open(DB_NAME, DB_VERSION);\n open.onupgradeneeded = () => {\n const db = open.result;\n for (const def of STORES) {\n if (db.objectStoreNames.contains(def.name)) continue;\n db.createObjectStore(\n def.name,\n def.autoIncrement ? { keyPath: def.keyPath, autoIncrement: true } : undefined,\n );\n }\n };\n open.onsuccess = () => resolve(open.result);\n open.onerror = () => reject(open.error);\n // A blocked upgrade means another tab holds an older version open; let\n // it surface as an error rather than hang forever.\n open.onblocked = () => reject(new Error(\"offline DB upgrade blocked by another tab\"));\n });\n}\n\nexport interface IdbEntry<T> {\n key: string;\n value: T;\n}\n\n/** Wraps an open connection with the typed operations the store needs. */\nexport class IdbConnection {\n constructor(private readonly db: IDBDatabase) {}\n\n private tx(store: StoreName, mode: IDBTransactionMode): IDBObjectStore {\n return this.db.transaction(store, mode).objectStore(store);\n }\n\n get<T>(store: StoreName, key: string): Promise<T | null> {\n return req<T | undefined>(this.tx(store, \"readonly\").get(key)).then((v) => v ?? null);\n }\n\n async put<T>(store: StoreName, key: string, value: T): Promise<void> {\n await req(this.tx(store, \"readwrite\").put(value as unknown, key));\n }\n\n async delete(store: StoreName, key: IDBValidKey): Promise<void> {\n await req(this.tx(store, \"readwrite\").delete(key));\n }\n\n async clear(store: StoreName): Promise<void> {\n await req(this.tx(store, \"readwrite\").clear());\n }\n\n /** Append to an autoincrement store; resolves with the generated key. */\n async append<T>(store: StoreName, value: T): Promise<number> {\n const key = await req(this.tx(store, \"readwrite\").add(value as unknown));\n return key as number;\n }\n\n /** All entries whose string key falls in `[lower, upper)`, in key order. */\n range<T>(store: StoreName, lower: string, upper: string): Promise<Array<IdbEntry<T>>> {\n return this.scan<T>(store, IDBKeyRange.bound(lower, upper, false, true));\n }\n\n /** All entries whose key starts with `prefix`, in key order. */\n prefix<T>(store: StoreName, prefix: string): Promise<Array<IdbEntry<T>>> {\n // \"￿\" is the largest BMP code unit, so `[prefix, prefix+￿)`\n // bounds every key that begins with `prefix`.\n return this.scan<T>(store, IDBKeyRange.bound(prefix, prefix + \"￿\", false, true));\n }\n\n /** Every entry in the store, in key order. */\n all<T>(store: StoreName): Promise<Array<IdbEntry<T>>> {\n return this.scan<T>(store, null);\n }\n\n private scan<T>(store: StoreName, range: IDBKeyRange | null): Promise<Array<IdbEntry<T>>> {\n return new Promise((resolve, reject) => {\n const out: Array<IdbEntry<T>> = [];\n const cursorReq = this.tx(store, \"readonly\").openCursor(range ?? undefined);\n cursorReq.onsuccess = () => {\n const cursor = cursorReq.result;\n if (!cursor) return resolve(out);\n out.push({ key: String(cursor.key), value: cursor.value as T });\n cursor.continue();\n };\n cursorReq.onerror = () => reject(cursorReq.error);\n });\n }\n}\n","/**\n * `IndexedDbStore` — the browser {@link OfflineStore}, backed by one IndexedDB\n * database per origin (see {@link ./schema}). It opens lazily on first use and\n * memoizes the connection. The queue methods sit on the autoincrement\n * `outbound-queue` store and return mutations in HLC order for the sync engine.\n *\n * Construct only where `indexedDB` exists — {@link ../detect.isOfflineCapable}\n * gates this, and the {@link ../../core/Client} falls back to {@link ./NoopStore}\n * everywhere else.\n */\n\nimport { compareHlc } from \"../clock/HlcTimestamp\";\nimport { IdbConnection, openDatabase } from \"./idb\";\nimport type { OfflineEntry, OfflineStore, QueueEntry } from \"./OfflineStore\";\nimport type { StoreName } from \"./schema\";\n\nexport class IndexedDbStore implements OfflineStore {\n readonly enabled = true;\n private conn: IdbConnection | null = null;\n private opening: Promise<IdbConnection> | null = null;\n\n private connect(): Promise<IdbConnection> {\n if (this.conn) return Promise.resolve(this.conn);\n if (!this.opening) {\n this.opening = openDatabase()\n .then((db) => {\n this.conn = new IdbConnection(db);\n return this.conn;\n })\n .finally(() => {\n this.opening = null;\n });\n }\n return this.opening;\n }\n\n async ready(): Promise<void> {\n await this.connect();\n }\n\n async get<T>(store: StoreName, key: string): Promise<T | null> {\n return (await this.connect()).get<T>(store, key);\n }\n\n async put<T>(store: StoreName, key: string, value: T): Promise<void> {\n await (await this.connect()).put(store, key, value);\n }\n\n async delete(store: StoreName, key: string): Promise<void> {\n await (await this.connect()).delete(store, key);\n }\n\n async prefix<T>(store: StoreName, prefix: string): Promise<Array<OfflineEntry<T>>> {\n return (await this.connect()).prefix<T>(store, prefix);\n }\n\n async range<T>(store: StoreName, lower: string, upper: string): Promise<Array<OfflineEntry<T>>> {\n return (await this.connect()).range<T>(store, lower, upper);\n }\n\n async all<T>(store: StoreName): Promise<Array<OfflineEntry<T>>> {\n return (await this.connect()).all<T>(store);\n }\n\n async clear(store: StoreName): Promise<void> {\n await (await this.connect()).clear(store);\n }\n\n async enqueue(entry: Omit<QueueEntry, \"seq\">): Promise<number> {\n // keyPath autoincrement writes the generated `seq` back into the record.\n return (await this.connect()).append(\"outbound-queue\", entry);\n }\n\n async dequeue(seq: number): Promise<void> {\n await (await this.connect()).delete(\"outbound-queue\", seq);\n }\n\n async queued(): Promise<QueueEntry[]> {\n const rows = await (await this.connect()).all<QueueEntry>(\"outbound-queue\");\n return rows.map((r) => r.value).sort((a, b) => compareHlc(a.hlc, b.hlc));\n }\n}\n\nexport default IndexedDbStore;\n","/**\n * `NoopStore` — the {@link OfflineStore} used wherever offline support is off\n * (Node, Workers, SSR, or when a consumer disables it). Every read returns\n * empty and every write is dropped, so the namespace hooks that call into it\n * behave exactly as they did before the offline layer existed. `enabled` is\n * `false` so hot paths can skip the call entirely.\n */\n\nimport type { OfflineEntry, OfflineStore, QueueEntry } from \"./OfflineStore\";\nimport type { StoreName } from \"./schema\";\n\nexport class NoopStore implements OfflineStore {\n readonly enabled = false;\n\n async ready(): Promise<void> {}\n async get<T>(_store: StoreName, _key: string): Promise<T | null> {\n return null;\n }\n async put<T>(_store: StoreName, _key: string, _value: T): Promise<void> {}\n async delete(_store: StoreName, _key: string): Promise<void> {}\n async prefix<T>(_store: StoreName, _prefix: string): Promise<Array<OfflineEntry<T>>> {\n return [];\n }\n async range<T>(_store: StoreName, _lower: string, _upper: string): Promise<Array<OfflineEntry<T>>> {\n return [];\n }\n async all<T>(_store: StoreName): Promise<Array<OfflineEntry<T>>> {\n return [];\n }\n async clear(_store: StoreName): Promise<void> {}\n async enqueue(_entry: Omit<QueueEntry, \"seq\">): Promise<number> {\n return -1;\n }\n async dequeue(_seq: number): Promise<void> {}\n async queued(): Promise<QueueEntry[]> {\n return [];\n }\n}\n\nexport default NoopStore;\n","/**\n * `LWWRegister` — a last-write-wins register CRDT, the conflict model for a\n * `kv` value and for an app-state snapshot. A register holds a single value\n * stamped with the {@link HlcTimestamp} of the write that produced it. Two\n * concurrent writes converge to the one with the greater HLC; the loser is\n * discarded. A delete is just a write that sets `deleted` (a tombstone), so a\n * stale write that arrives after a newer delete can't resurrect the value.\n *\n * Because the HLC total-orders every write deterministically (down to a nodeId\n * tiebreak), every replica that has seen the same set of writes lands on the\n * same value — that's the convergence guarantee.\n */\n\nimport { compareHlc, ZERO_HLC } from \"../clock/HlcTimestamp\";\n\nexport interface LwwRegister<T> {\n /** The current value, or `null` when tombstoned / never written. */\n value: T | null;\n /** HLC of the write that produced this state. */\n hlc: string;\n /** True when the latest write was a delete. */\n deleted: boolean;\n}\n\n/** An empty register that loses to any real write. */\nexport function emptyRegister<T>(): LwwRegister<T> {\n return { value: null, hlc: ZERO_HLC, deleted: true };\n}\n\n/**\n * Merge two register states, returning the winner (greater HLC). Pure: neither\n * input is mutated. Used identically on the inbound change feed and on\n * sync-replay reconciliation so there's exactly one definition of \"who wins\".\n */\nexport function mergeRegister<T>(a: LwwRegister<T>, b: LwwRegister<T>): LwwRegister<T> {\n return compareHlc(a.hlc, b.hlc) >= 0 ? a : b;\n}\n\n/** Build the register produced by a `set`. */\nexport function writeRegister<T>(value: T, hlc: string): LwwRegister<T> {\n return { value, hlc, deleted: false };\n}\n\n/** Build the register produced by a `delete` (a tombstone at `hlc`). */\nexport function deleteRegister<T>(hlc: string): LwwRegister<T> {\n return { value: null, hlc, deleted: true };\n}\n","/**\n * `KvCache` — the offline adapter for `client.kv`. Stores each value's\n * ciphertext envelope (never plaintext) under `${commitment}|${collection}/${id}`\n * as an LWW-Register stamped with an HLC, so reads work offline and concurrent\n * writes converge (see {@link ./crdt/LWWRegister}). Deletes are causal\n * tombstones — a stale write can't resurrect a key a newer delete removed.\n *\n * True cross-device convergence also needs the accelerator to honor the HLC\n * (see the server's `kvmeta` sidecar); this adapter embeds the stamp now and\n * degrades gracefully (last-writer-by-arrival) until that ships.\n */\n\nimport {\n emptyRegister,\n mergeRegister,\n writeRegister,\n deleteRegister,\n type LwwRegister,\n} from \"./crdt/LWWRegister\";\nimport type { OfflineManager } from \"./OfflineManager\";\nimport type { OfflineStore } from \"./store/OfflineStore\";\n\nexport type KvEntry = LwwRegister<unknown>;\n\nexport class KvCache {\n private readonly store: OfflineStore;\n constructor(private readonly manager: OfflineManager) {\n this.store = manager.store;\n }\n\n get enabled(): boolean {\n return this.manager.enabled;\n }\n\n nextHlc(): Promise<string> {\n return this.manager.nextHlc();\n }\n\n newClientId(): string {\n return this.manager.newClientId();\n }\n\n private key(commitment: string, fullKey: string): string {\n return `${commitment}|${fullKey}`;\n }\n\n /** Read the cached register for `collection/id`, or null when absent. */\n read(commitment: string, fullKey: string): Promise<KvEntry | null> {\n return this.store.get<KvEntry>(\"kv-cache\", this.key(commitment, fullKey));\n }\n\n /** Optimistically record a local `set` (ciphertext envelope + HLC). */\n async writeLocal(commitment: string, fullKey: string, envelope: unknown, hlc: string): Promise<void> {\n await this.store.put(\"kv-cache\", this.key(commitment, fullKey), writeRegister(envelope, hlc));\n }\n\n /** Optimistically record a local `delete` (tombstone at HLC). */\n async deleteLocal(commitment: string, fullKey: string, hlc: string): Promise<void> {\n await this.store.put(\"kv-cache\", this.key(commitment, fullKey), deleteRegister(hlc));\n }\n\n /**\n * Merge an authoritative value (from a GET refresh or a realtime frame) into\n * the cache by HLC. When the server doesn't supply an HLC yet, treat it as\n * \"now-ish\" by stamping our clock so a server value still beats stale local\n * state but a fresh local write wins.\n */\n async mergeRemote(\n commitment: string,\n fullKey: string,\n envelope: unknown | null,\n op: \"set\" | \"delete\",\n hlc?: string,\n ): Promise<void> {\n const k = this.key(commitment, fullKey);\n const incoming: KvEntry =\n op === \"delete\"\n ? deleteRegister(hlc ?? (await this.nextHlc()))\n : writeRegister(envelope, hlc ?? (await this.nextHlc()));\n const local = (await this.store.get<KvEntry>(\"kv-cache\", k)) ?? emptyRegister();\n await this.store.put(\"kv-cache\", k, mergeRegister(local, incoming));\n }\n\n /** Non-tombstoned full keys for a commitment (used for offline `list`). */\n async liveKeys(commitment: string): Promise<string[]> {\n const prefix = `${commitment}|`;\n const rows = await this.store.prefix<KvEntry>(\"kv-cache\", prefix);\n return rows.filter((r) => !r.value.deleted).map((r) => r.key.slice(prefix.length));\n }\n\n /** Queue a kv mutation for replay on reconnect. */\n async enqueue(method: \"set\" | \"delete\", args: unknown, hlc: string, clientId: string): Promise<void> {\n await this.manager.enqueue({ hlc, clientId, domain: \"kv\", method, args });\n }\n}\n\nexport default KvCache;\n","/**\n * `DbCache` — the offline adapter for `client.db`. Unlike kv, db rows are\n * server-plaintext, so they're cached as-is. The SDK doesn't know a table's\n * primary-key column, so it caches schema-agnostically:\n * - `get(id)` results keyed by the requested id (`${table}|row|${id}`),\n * - `query(q)` result pages keyed by a stable hash of the query.\n *\n * Writes carry per-column HLC stamps (`_hlc`) so the accelerator's per-column\n * LWW merge can converge concurrent edits; offline writes are queued and\n * replayed. Optimistic row patches keep `get` fresh between sync cycles.\n */\n\nimport type { OfflineManager } from \"./OfflineManager\";\nimport type { OfflineStore } from \"./store/OfflineStore\";\n\nexport interface DbQueryPage {\n rows: Array<Record<string, unknown>>;\n nextCursor: string | null;\n}\n\n/** Stable JSON for query-cache keys (sorted object keys → deterministic). */\nexport function stableStringify(value: unknown): string {\n if (value === null || typeof value !== \"object\") return JSON.stringify(value);\n if (Array.isArray(value)) return `[${value.map(stableStringify).join(\",\")}]`;\n const obj = value as Record<string, unknown>;\n return `{${Object.keys(obj)\n .sort()\n .map((k) => `${JSON.stringify(k)}:${stableStringify(obj[k])}`)\n .join(\",\")}}`;\n}\n\nexport class DbCache {\n private readonly store: OfflineStore;\n constructor(private readonly manager: OfflineManager) {\n this.store = manager.store;\n }\n\n get enabled(): boolean {\n return this.manager.enabled;\n }\n nextHlc(): Promise<string> {\n return this.manager.nextHlc();\n }\n newClientId(): string {\n return this.manager.newClientId();\n }\n\n /** Build the `{ [col]: hlc }` map for a write (one stamp across its columns). */\n columnStamps(values: Record<string, unknown>, hlc: string): Record<string, string> {\n const out: Record<string, string> = {};\n for (const col of Object.keys(values)) out[col] = hlc;\n return out;\n }\n\n private rowKey(table: string, id: string): string {\n return `${table}|row|${id}`;\n }\n private queryKey(table: string, q: unknown): string {\n return `${table}|query|${stableStringify(q)}`;\n }\n\n async readRow(table: string, id: string): Promise<Record<string, unknown> | null> {\n return this.store.get(\"db-row-cache\", this.rowKey(table, id));\n }\n async writeRow(table: string, id: string, row: Record<string, unknown>): Promise<void> {\n await this.store.put(\"db-row-cache\", this.rowKey(table, id), row);\n }\n /** Shallow-merge a partial update into a cached row (optimistic). */\n async patchRow(table: string, id: string, values: Record<string, unknown>): Promise<void> {\n const existing = (await this.readRow(table, id)) ?? {};\n await this.writeRow(table, id, { ...existing, ...values });\n }\n async deleteRow(table: string, id: string): Promise<void> {\n await this.store.delete(\"db-row-cache\", this.rowKey(table, id));\n }\n\n async readQuery(table: string, q: unknown): Promise<DbQueryPage | null> {\n return this.store.get(\"db-query-cache\", this.queryKey(table, q));\n }\n async writeQuery(table: string, q: unknown, page: DbQueryPage): Promise<void> {\n await this.store.put(\"db-query-cache\", this.queryKey(table, q), page);\n }\n\n async enqueue(\n method: \"insert\" | \"update\" | \"delete\",\n args: unknown,\n hlc: string,\n clientId: string,\n ): Promise<void> {\n await this.manager.enqueue({ hlc, clientId, domain: \"db\", method, args });\n }\n}\n\nexport default DbCache;\n","/**\n * `Client` — the single entry point to the Muhkoo SDK.\n *\n * Everything an app does flows through namespaces hanging off one client:\n *\n * const client = new Client({ apiKey, baseUrl });\n * const user = await client.auth.zk.login(username, password);\n * await client.storage.set('todos', id, { title, completed: false });\n * client.message.subscribe('todos', e => …);\n * await client.message.send('user:abc', { text: 'Hello!' });\n *\n * The client owns:\n * - an {@link HttpClient} that stamps the app key + session token onto every\n * request to the accelerator;\n * - a {@link SessionState} shared across namespaces (auth writes it; storage\n * and message read identity + token from it);\n * - the three namespaces: {@link AuthNamespace}, {@link StorageNamespace},\n * {@link MessageNamespace}.\n *\n * The lower-level building blocks (`AuthClient`, `PersonalSpaceClient`,\n * `FileStorage`, `EncryptedSession`, `Network`, …) remain exported and usable\n * directly, but the client is the supported, ergonomic surface.\n */\n\nimport { AuthClient } from \"../auth\";\nimport { VERSION } from \"../version\";\nimport { defaultCircuitUrls, type CircuitUrls } from \"../auth/proof\";\nimport { HttpClient } from \"./HttpClient\";\nimport { SessionState, defaultSessionStore, type SessionStore } from \"./Session\";\nimport { AuthNamespace } from \"./namespaces/AuthNamespace\";\nimport { KvNamespace } from \"./namespaces/KvNamespace\";\nimport { DbNamespace } from \"./namespaces/DbNamespace\";\nimport { StorageNamespace } from \"./namespaces/FileNamespace\";\nimport { MessageNamespace } from \"./namespaces/MessageNamespace\";\nimport { SpaceNamespace } from \"./namespaces/SpaceNamespace\";\nimport { AgentsNamespace } from \"./namespaces/AgentsNamespace\";\nimport { FunctionsNamespace } from \"./namespaces/FunctionsNamespace\";\nimport { AccessTokensNamespace } from \"./namespaces/AccessTokensNamespace\";\nimport type { SpaceKeyCache } from \"../spaces/SpaceKeyring\";\nimport { VfsNamespace } from \"../vfs/VfsNamespace\";\nimport { VcsNamespace } from \"../vcs/VcsNamespace\";\n\n/** Personal-space key holding the id of the space VFS content is written to. */\nconst VFS_SPACE_KEY = \"vfs/space\";\nimport type { VfsStore } from \"../vfs/types\";\nimport type { Space } from \"../spaces/Space\";\nimport { ChatKeyVault, type ChatKeyStore } from \"./ChatKeyVault\";\nimport type { WrappedPayload } from \"../crypto/PassphraseWrap\";\nimport { OfflineManager } from \"../offline/OfflineManager\";\nimport { isOfflineCapable } from \"../offline/detect\";\nimport { IndexedDbStore } from \"../offline/store/IndexedDbStore\";\nimport { NoopStore } from \"../offline/store/NoopStore\";\nimport type { OfflineStore } from \"../offline/store/OfflineStore\";\nimport { KvCache } from \"../offline/KvCache\";\nimport { DbCache } from \"../offline/DbCache\";\nimport { ShardClient } from \"../storage/transport/ShardClient\";\n\n/** The hosted Muhkoo Accelerator — the default {@link ClientOptions.baseUrl}. */\nexport const DEFAULT_BASE_URL = \"https://api.muhkoo.dev\";\n\n/** The hosted auth SPA — the default {@link ClientOptions.authBaseUrl}. */\nexport const DEFAULT_AUTH_BASE_URL = \"https://auth.muhkoo.dev\";\n\nexport interface ClientOptions {\n /**\n * App / publishable key issued by the accelerator (e.g. `mk_test_pk_…`).\n *\n * TRANSITIONALLY optional: auth + storage currently function without it so\n * the in-tree web app can migrate before a key is provisioned. The product\n * direction is that the app key becomes REQUIRED — it's how every app\n * authenticates to the Accelerator and gets attributed for metering/billing.\n * New integrations should always pass one.\n */\n apiKey?: string;\n /**\n * A scoped, expiring **access token** (`mk_<env>_at_…`) — the non-ZK\n * machine-to-machine credential. It resolves through the SAME accelerator\n * path as {@link apiKey} (both ride the `X-Muhkoo-Key` header) and, when\n * set, takes precedence over it. Use it for server-side / CI callers that\n * shouldn't carry the app's publishable key. Mint one with\n * `client.accessTokens.create(...)`.\n */\n accessToken?: string;\n /**\n * Absolute URL of the accelerator (trailing slash optional). Defaults to\n * the hosted Muhkoo Accelerator ({@link DEFAULT_BASE_URL}); override to\n * point at staging, a local `wrangler dev`, or a self-hosted deployment.\n */\n baseUrl?: string;\n /**\n * URLs of the `preimagePoK` circuit assets used for ZK login proofs.\n * Defaults to {@link defaultCircuitUrls} anchored at `baseUrl` — i.e.\n * `${baseUrl}/circuits/build/preimagePoK_js/preimagePoK.wasm` and\n * `…/preimagePoK_0001.zkey`, where the accelerator serves them.\n */\n circuits?: CircuitUrls;\n /** Pluggable session-token persistence. Defaults to in-memory. */\n sessionStore?: SessionStore;\n /** Custom fetch — defaults to `globalThis.fetch`. */\n fetch?: typeof fetch;\n /** Optional log level for the SDK logger. */\n logLevel?: string;\n /**\n * Wildcard zone HTTP serverless functions are served from\n * (`<name>--<slug>.<suffix>`), used by `client.functions.invoke(...)`.\n * Defaults to the hosted platform's zone (`fns.muhkoo.dev`); override for\n * staging or a self-hosted deployment.\n */\n functionsHostSuffix?: string;\n /**\n * Base URL of the centralized hosted auth SPA (`client.auth.hosted`).\n * Defaults to {@link DEFAULT_AUTH_BASE_URL} (`auth.muhkoo.dev`); override for\n * staging (`auth.staging.muhkoo.dev`) or a self-hosted deployment.\n */\n authBaseUrl?: string;\n /**\n * Offline support (`client.offline`) — transparent local caching + a durable\n * write queue + CRDT sync. **On by default in browsers** (IndexedDB + Cache\n * API present), a no-op everywhere else. Override to force it on/off or to\n * supply a custom {@link OfflineStore}.\n */\n offline?: {\n /** Force enable/disable. Default: auto-detect (browser on, Node off). */\n enabled?: boolean;\n /** Pluggable persistence. Default: IndexedDB in the browser. */\n store?: OfflineStore;\n /** Cache file-shard bytes in the Cache API. Default: true in the browser. */\n cacheShards?: boolean;\n /** Soft cap on durable-queue bytes before degrading to online-only. */\n maxQueueBytes?: number;\n };\n /**\n * Peer-to-peer block exchange (`client.space` files) among Space members,\n * over WebRTC signaled on the Space relay. Best-effort — falls back to\n * origin. **Opt-in** (browser only). Pass `workerFactory` to run the block\n * engine off the main thread.\n */\n p2p?: {\n enabled?: boolean;\n workerFactory?: () => Worker;\n iceServers?: RTCIceServer[];\n maxPeers?: number;\n /** Log P2P mesh + block-exchange activity to the console (staging/dev). */\n debug?: boolean;\n };\n}\n\n/**\n * Turn the HTTP base URL into a websocket base (`http(s)://` → `ws(s)://`).\n * The accelerator serves spaces over both on the same origin.\n */\nfunction toWsBase(baseUrl: string): string {\n return baseUrl.replace(/\\/+$/, \"\").replace(/^http/, \"ws\");\n}\n\nexport class Client {\n readonly baseUrl: string;\n\n /** Authentication — `client.auth.zk.login(...)`, etc. */\n readonly auth: AuthNamespace;\n /** Per-user key/value storage — `client.kv.set(...)`, etc. */\n readonly kv: KvNamespace;\n /** App scalable database — `client.db.table('todos').query(...)`, etc. */\n readonly db: DbNamespace;\n /** File storage — `client.storage.writeFile(...)`, etc. */\n readonly storage: StorageNamespace;\n\n /** Filesystem over the personal space: directories, versions, real paths. */\n readonly vfs: VfsNamespace;\n /** Version control over the VFS: commits, branches, merges — per project. */\n readonly vcs: VcsNamespace;\n /** Realtime messaging — `client.message.subscribe(...)`, etc. */\n readonly message: MessageNamespace;\n /** Fan-out group spaces — `client.space.createSpace(...)`, etc. */\n readonly space: SpaceNamespace;\n /** Programmable Agents — `client.agents.create(appId, …)`, etc. */\n readonly agents: AgentsNamespace;\n /** Serverless functions — `client.functions.deploy(appId, …)`, etc. */\n readonly functions: FunctionsNamespace;\n /** Access tokens — `client.accessTokens.create(appId, …)`, etc. */\n readonly accessTokens: AccessTokensNamespace;\n /** Offline cache + sync — `client.offline.status`, `client.offline.snapshot`, etc. */\n readonly offline: OfflineManager;\n\n private readonly session: SessionState;\n private readonly http: HttpClient;\n\n /** Subscribers notified when a session expires and can't be recovered. */\n private readonly sessionExpiredHandlers = new Set<() => void>();\n /** Shared in-flight recovery so a burst of 401s triggers one re-auth. */\n private recoverInFlight: Promise<boolean> | null = null;\n\n constructor(options: ClientOptions = {}) {\n // Build stamp — always logged (independent of logLevel) so the running\n // build is identifiable in the console. Catches stale cached bundles\n // during development; bump `VERSION` (and package.json) each build.\n try {\n console.info(`[@muhkoo/connect] initialized — v${VERSION}`);\n } catch { /* console may be unavailable in some runtimes */ }\n\n if (options.logLevel && typeof globalThis.appLogger?.setLevel === \"function\") {\n globalThis.appLogger.setLevel(options.logLevel);\n }\n\n this.baseUrl = (options.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/+$/, \"\");\n this.session = new SessionState(options.sessionStore ?? defaultSessionStore());\n\n // Offline layer. On by default in browsers, a no-op (NoopStore) in Node,\n // Workers, and SSR — so existing consumers are unaffected unless they're\n // in a browser that can actually cache.\n const offlineEnabled = options.offline?.enabled ?? isOfflineCapable();\n const offlineStore: OfflineStore = offlineEnabled\n ? (options.offline?.store ?? new IndexedDbStore())\n : new NoopStore();\n this.offline = new OfflineManager({\n store: offlineStore,\n session: this.session,\n enabled: offlineEnabled,\n });\n\n // Wrap fetch so every accelerator round-trip feeds the connectivity\n // detector: a thrown fetch is the strongest \"offline\" signal, a 2xx the\n // strongest \"online\" one. Only when offline support is active.\n const baseFetch = options.fetch ?? globalThis.fetch?.bind(globalThis);\n const reportingFetch: typeof fetch | undefined =\n offlineEnabled && baseFetch\n ? async (input, init) => {\n try {\n const res = await baseFetch(input, init);\n this.offline.reportFetchSuccess();\n return res;\n } catch (err) {\n this.offline.reportFetchFailure();\n throw err;\n }\n }\n : options.fetch;\n\n this.http = new HttpClient({\n baseUrl: this.baseUrl,\n apiKey: options.apiKey,\n accessToken: options.accessToken,\n getSessionToken: () => this.session.token,\n fetch: reportingFetch,\n // Self-heal stale sessions: on a 401, try a silent re-auth (only\n // works while unlocked). If it can't, `recoverSession` fires the\n // session-expired event so the app can redirect to login.\n onUnauthorized: () => this.recoverSession(),\n });\n\n const circuits = options.circuits ?? defaultCircuitUrls(this.baseUrl);\n const authClient = new AuthClient({ baseUrl: this.baseUrl, fetch: this.http.fetch });\n\n const wsBaseUrl = toWsBase(this.baseUrl);\n const authBaseUrl = (options.authBaseUrl ?? DEFAULT_AUTH_BASE_URL).replace(/\\/+$/, \"\");\n this.auth = new AuthNamespace({\n auth: authClient, circuits, session: this.session, authBaseUrl,\n // The accelerator origin, for `auth.hosted`'s device-pairing endpoints.\n apiBaseUrl: this.baseUrl,\n });\n const deferShardUpload = offlineEnabled\n ? (hash: string) => this.offline.deferShardUpload(hash)\n : undefined;\n\n const kvCache = offlineEnabled ? new KvCache(this.offline) : undefined;\n this.kv = new KvNamespace({ http: this.http, session: this.session, wsBaseUrl, offline: kvCache });\n if (offlineEnabled) this.offline.registerReplayer(\"kv\", (e) => this.kv.replay(e));\n const dbCache = offlineEnabled ? new DbCache(this.offline) : undefined;\n this.db = new DbNamespace({ http: this.http, offline: dbCache });\n if (offlineEnabled) this.offline.registerReplayer(\"db\", (e) => this.db.replay(e));\n this.storage = new StorageNamespace({\n http: this.http,\n baseUrl: this.baseUrl,\n kv: this.kv,\n shardCache: this.offline.fileCache,\n deferShardUpload,\n });\n this.message = new MessageNamespace({ http: this.http, session: this.session, wsBaseUrl });\n\n // The VFS stores its metadata in the personal space — the same place\n // `storage.writeFile` already mirrors `{spaceId, manifest}` to, only\n // arranged as a navigable tree instead of a flat index keyed by file id.\n //\n // Content still goes through `storage.writeFile` untouched, into a real\n // Space with a real gated manifest. The space is created once, lazily,\n // and its id recorded in the personal space: a filesystem that has never\n // been written to should not cost a space.\n const personalStore: VfsStore = {\n get: async (key) => {\n const c = this.session.commitment;\n if (!c) throw new Error(\"client.vfs: no session — sign in first.\");\n const res = await this.http.post<{ value: unknown }>(\n `/api/personal/${encodeURIComponent(c)}/kv/${encodeURIComponent(key)}/get`,\n {},\n );\n return res?.value ?? null;\n },\n put: async (key, value) => {\n const c = this.session.commitment;\n if (!c) throw new Error(\"client.vfs: no session — sign in first.\");\n await this.http.post(`/api/personal/${encodeURIComponent(c)}/kv/${encodeURIComponent(key)}`, { value });\n },\n delete: async (key) => {\n const c = this.session.commitment;\n if (!c) throw new Error(\"client.vfs: no session — sign in first.\");\n await this.http.del(`/api/personal/${encodeURIComponent(c)}/kv/${encodeURIComponent(key)}`);\n },\n list: async () => {\n const c = this.session.commitment;\n if (!c) throw new Error(\"client.vfs: no session — sign in first.\");\n const res = await this.http.post<{ keys: string[] }>(\n `/api/personal/${encodeURIComponent(c)}/list`,\n {},\n );\n return res?.keys ?? [];\n },\n };\n\n let contentSpace: Promise<Space> | null = null;\n const resolveContentSpace = (): Promise<Space> => {\n // Cached as the PROMISE, not the value: two concurrent first writes\n // would otherwise each create a space and one would be orphaned.\n if (!contentSpace) {\n contentSpace = (async () => {\n const existing = await personalStore.get(VFS_SPACE_KEY);\n if (typeof existing === \"string\" && existing) return this.space.get(existing);\n // `messaging: false` — this space only ever holds files, and\n // file chunks carry their own keys, so it needs no group\n // keyring and no socket. Creating it the normal way opens a\n // WebSocket, which made the first write hang indefinitely.\n const space = await this.space.createSpace({ private: true, messaging: false });\n await personalStore.put(VFS_SPACE_KEY, space.id);\n return space;\n })().catch((err) => {\n contentSpace = null; // let the next write retry\n throw err;\n });\n }\n return contentSpace;\n };\n\n this.vfs = new VfsNamespace({\n store: personalStore,\n seed: () => this.session.seed,\n // Share the personal space's socket with `client.kv` rather than\n // opening a second one to the same Durable Object.\n subscribe: (handler) => this.kv.onRaw(handler),\n content: {\n // `putFile` needs no WebSocket and commits the shards, so the\n // bytes are metered to the owning app and reference-counted for\n // GC. `storage.writeFile` would additionally index the manifest\n // in the space — a second, diverging source of truth for a file\n // whose handle the VFS already holds.\n write: async (data, meta) => {\n const space = await resolveContentSpace();\n const { manifest, stat } = await space.putFile(data, { name: meta.name, type: meta.type });\n return { manifest, size: stat.size };\n },\n // Reads go through the manifest alone — no space needed. That is\n // the capability path, so it keeps working for a file whose\n // handle was shared from someone else's filesystem.\n read: async (manifest) => (await this.storage.readByManifest(manifest)).data,\n release: async (manifest) => {\n await (await resolveContentSpace()).releaseFile(manifest);\n },\n retain: async (manifest) => {\n await (await resolveContentSpace()).commitFile(manifest);\n },\n },\n });\n\n // Sealed into the SAME personal store as the VFS metadata, so a project\n // and its history live or die together — there is no way to end up with\n // commits whose working tree is gone, or the reverse.\n this.vcs = new VcsNamespace({\n vfs: this.vfs,\n store: personalStore,\n seed: () => this.session.seed,\n author: () => this.session.commitment ?? \"unknown\",\n });\n\n\n // Group keys are cached in the user's PersonalSpace (encrypted at rest\n // by client.kv), so a returning member hydrates without a fresh keyring\n // round-trip. The server only ever sees ciphertext.\n //\n // `encrypt: false` is deliberate: the keyring already ECIES-wraps each\n // key to the member's identity (server-blind), and StorageCipher would\n // additionally require the FULL unlocked identity (`requireIdentity()`),\n // which is locked after a page reload — that coupling is exactly why the\n // cache previously never read or persisted. The wrapped blobs are opaque.\n const spaceKeyCache: SpaceKeyCache = {\n loadKeys: (spaceId) => this.kv.get<Record<string, string>>(\"space-keys\", spaceId),\n saveKeys: (spaceId, keys) => this.kv.set(\"space-keys\", spaceId, keys, { encrypt: false }),\n };\n // SDK-owned vault for the member's long-lived ratchet/space keypair.\n // Stored at the personal-space `chat-keys` key (same key the app used to\n // manage by hand), seed-wrapped, session-token authed (no snarkjs). This\n // gives every app a STABLE keypair across reloads — no per-app scaffolding\n // — so members don't re-admit each load and the group-key cache works.\n const chatKeyStore: ChatKeyStore = {\n get: async (key) => {\n const c = this.session.commitment;\n if (!c) return null;\n const res = await this.http.post<{ value: unknown }>(\n `/api/personal/${encodeURIComponent(c)}/kv/${encodeURIComponent(key)}/get`,\n {},\n );\n return (res?.value ?? null) as WrappedPayload | null;\n },\n put: async (key, value) => {\n const c = this.session.commitment;\n if (!c) throw new Error(\"ChatKeyVault: no session — sign in first.\");\n await this.http.post(`/api/personal/${encodeURIComponent(c)}/kv/${encodeURIComponent(key)}`, { value });\n },\n };\n const chatKeys = new ChatKeyVault(chatKeyStore);\n\n this.space = new SpaceNamespace({\n http: this.http,\n session: this.session,\n wsBaseUrl,\n cache: spaceKeyCache,\n offline: this.offline,\n p2p: options.p2p,\n chatKeys,\n });\n this.agents = new AgentsNamespace({ http: this.http });\n this.functions = new FunctionsNamespace({ http: this.http, fnHostSuffix: options.functionsHostSuffix });\n this.accessTokens = new AccessTokensNamespace({ http: this.http });\n\n // Replay deferred shard uploads on reconnect. The bytes live in the\n // Cache API keyed by hash; re-PUT them through a (defer-free) shard\n // client so a failure surfaces as transient and the entry stays queued.\n if (offlineEnabled && this.offline.fileCache) {\n const replayShards = new ShardClient({\n baseUrl: this.baseUrl,\n pathPrefix: \"/api/shards\",\n fetch: this.http.fetch,\n cache: this.offline.fileCache,\n });\n this.offline.registerReplayer(\"file\", async (entry) => {\n const { hash } = entry.args as { hash: string };\n const bytes = await this.offline.fileCache!.get(hash);\n if (!bytes) return; // evicted from cache — nothing to replay\n await replayShards.putShard(hash, bytes);\n });\n }\n }\n\n /** The currently signed-in user, or `null`. */\n get user() {\n return this.auth.user;\n }\n\n /** Whether a token-bearing session is active. */\n get isAuthenticated(): boolean {\n return this.session.isAuthenticated;\n }\n\n /**\n * Subscribe to session expiry that couldn't be silently recovered (the\n * user's identity wasn't in memory to re-prove — typically after a reload\n * where only the token was persisted, and that token has since gone stale).\n * This is the signal to send the user back to the login screen.\n *\n * Returns an unsubscribe function.\n *\n * const off = client.onSessionExpired(() => router.push('/login'));\n */\n onSessionExpired(handler: () => void): () => void {\n this.sessionExpiredHandlers.add(handler);\n return () => this.sessionExpiredHandlers.delete(handler);\n }\n\n /**\n * Attempt a silent re-auth of the current user. Concurrent callers share a\n * single in-flight attempt (a stale token usually 401s several requests at\n * once — we re-auth once, not once per request). On failure the\n * session-expired event fires so the app can react. Exposed so apps can\n * also drive recovery proactively (e.g. on `visibilitychange`).\n */\n recoverSession(): Promise<boolean> {\n if (this.recoverInFlight) return this.recoverInFlight;\n this.recoverInFlight = this.auth.zk\n .recover()\n .then((ok) => {\n if (!ok) {\n for (const handler of this.sessionExpiredHandlers) {\n try { handler(); } catch { /* a bad listener mustn't break recovery */ }\n }\n }\n return ok;\n })\n .finally(() => {\n this.recoverInFlight = null;\n });\n return this.recoverInFlight;\n }\n}\n\nexport default Client;\n","/**\n * Muhkoo app decorators — declare your app's agent-facing surface in code, then\n * \"eject\" a system prompt you hand to a Programmable Agent.\n *\n * You annotate a plain class with `@MuhkooAgent` (the app's identity + how the\n * agent should behave) plus per-surface decorators — `@MuhkooSpace`,\n * `@MuhkooDB`, `@MuhkooFunction` — that describe what each channel, table, and\n * function is *for*. {@link ejectAgentPrompt} reads those annotations and\n * produces a `systemPrompt` string:\n *\n * ```ts\n * @MuhkooAgent({\n * name: \"Chat Assistant\",\n * purpose: \"A helpful assistant inside a real-time team chat.\",\n * guidance: [\"Keep replies short.\", \"Only chime in when relevant.\"],\n * })\n * class ChatAssistant {\n * @MuhkooSpace({ description: \"Main team discussion.\" }) general!: string;\n * @MuhkooDB({ access: \"read\", description: \"Chat message history.\" }) messages!: unknown;\n * @MuhkooFunction({ description: \"Open a support ticket.\" }) openTicket!: () => void;\n * }\n *\n * const systemPrompt = ejectAgentPrompt(ChatAssistant);\n * await client.agents.create({ handle: \"assistant\", displayName: \"Assistant\", systemPrompt });\n * ```\n *\n * The ejected prompt owns the **semantic** layer — what the app is, how to act,\n * and what each surface means. The Muhkoo runtime separately appends the\n * **authoritative** roster (exact columns, function parameters, and the closed\n * list of callable tools), so the prompt here never needs to restate schema and\n * can't drift from it. Decorators only describe; they never change runtime\n * behavior, so they're safe to apply to a throwaway descriptor class.\n *\n * Requires `experimentalDecorators` (already enabled in this package). Metadata\n * is captured in a per-class registry — no `reflect-metadata` dependency.\n */\n\nimport type { AgentToolsConfig } from \"../namespaces/AgentsNamespace\";\n\n/** Whether the agent may only read a table, or read and write it. */\nexport type MuhkooDBAccess = \"read\" | \"write\";\n\n/** App-level identity + behavioral guidance — the heart of the ejected prompt. */\nexport interface MuhkooAgentMeta {\n /** The agent persona's name (e.g. \"Chat Assistant\"). */\n name: string;\n /** What the app is and the agent's role in it. One or two sentences. */\n purpose: string;\n /** Short behavioral rules, rendered as a bulleted list. */\n guidance?: string[];\n /** Optional free-form instructions appended verbatim after the surface. */\n instructions?: string;\n}\n\n/** A channel/Space the agent can resolve and post into. */\nexport interface MuhkooSpaceMeta {\n /** Channel name. Defaults to the decorated member's name. */\n name?: string;\n description: string;\n}\n\n/** An app database table the agent can query (and optionally mutate). */\nexport interface MuhkooDBMeta {\n /** Table name. Defaults to the decorated member's name. */\n table?: string;\n /** Read-only by default. */\n access?: MuhkooDBAccess;\n /**\n * Backend-only table — omitted from {@link ejectAgentPrompt}. Use for tables\n * an agent should never be told about (server-managed / internal state).\n */\n backend?: boolean;\n description: string;\n}\n\n/** A serverless function the agent can invoke via `call_function`. */\nexport interface MuhkooFunctionMeta {\n /** Function name. Defaults to the decorated member's name. */\n name?: string;\n description: string;\n}\n\ninterface SpaceEntry { name: string; description: string; }\ninterface TableEntry { table: string; access: MuhkooDBAccess; description: string; backend: boolean; }\ninterface FunctionEntry { name: string; description: string; }\n\n/** The full annotated surface gathered from one decorated class. */\nexport interface MuhkooAppDescriptor {\n agent?: MuhkooAgentMeta;\n spaces: SpaceEntry[];\n tables: TableEntry[];\n functions: FunctionEntry[];\n}\n\n// Per-class metadata store, keyed by the class constructor. Member decorators\n// run during class-body evaluation (before the class decorator), so each\n// decorator get-or-creates the descriptor and they all converge on one entry.\nconst REGISTRY = new WeakMap<object, MuhkooAppDescriptor>();\n\nfunction descriptorFor(ctor: object): MuhkooAppDescriptor {\n let d = REGISTRY.get(ctor);\n if (!d) {\n d = { spaces: [], tables: [], functions: [] };\n REGISTRY.set(ctor, d);\n }\n return d;\n}\n\n/** Resolve the owning class constructor from a decorator `target` — the\n * prototype for instance members, the constructor itself for static ones. */\nfunction ctorOf(target: object): object {\n return typeof target === \"function\" ? target : (target as { constructor: object }).constructor;\n}\n\n/**\n * Class decorator. Declares the app's agent identity, purpose, and behavioral\n * guidance. Apply it to the class whose members carry the surface decorators.\n */\nexport function MuhkooAgent(meta: MuhkooAgentMeta): ClassDecorator {\n return (target) => {\n descriptorFor(target as unknown as object).agent = meta;\n };\n}\n\n/** Member decorator. Marks a channel/Space the agent can resolve and post to. */\nexport function MuhkooSpace(meta: MuhkooSpaceMeta): PropertyDecorator & MethodDecorator {\n return ((target: object, propertyKey: string | symbol) => {\n descriptorFor(ctorOf(target)).spaces.push({\n name: meta.name ?? String(propertyKey),\n description: meta.description,\n });\n }) as PropertyDecorator & MethodDecorator;\n}\n\n/** Member decorator. Marks an app database table the agent can query/mutate. */\nexport function MuhkooDB(meta: MuhkooDBMeta): PropertyDecorator & MethodDecorator {\n return ((target: object, propertyKey: string | symbol) => {\n descriptorFor(ctorOf(target)).tables.push({\n table: meta.table ?? String(propertyKey),\n access: meta.access ?? \"read\",\n description: meta.description,\n backend: meta.backend ?? false,\n });\n }) as PropertyDecorator & MethodDecorator;\n}\n\n/** Member decorator. Marks a serverless function the agent can call. */\nexport function MuhkooFunction(meta: MuhkooFunctionMeta): PropertyDecorator & MethodDecorator {\n return ((target: object, propertyKey: string | symbol) => {\n descriptorFor(ctorOf(target)).functions.push({\n name: meta.name ?? String(propertyKey),\n description: meta.description,\n });\n }) as PropertyDecorator & MethodDecorator;\n}\n\n/** Read back the raw descriptor a class accumulated (for tooling/tests). */\nexport function getMuhkooAppDescriptor(appClass: Function): MuhkooAppDescriptor | undefined {\n return REGISTRY.get(appClass);\n}\n\n/**\n * Compose the agent system prompt from a `@MuhkooAgent`-decorated class. Throws\n * if the class isn't decorated. The result is the semantic layer only — the\n * runtime appends exact schema + the closed tool list at invocation time.\n */\nexport function ejectAgentPrompt(appClass: Function): string {\n const d = REGISTRY.get(appClass);\n if (!d || !d.agent) {\n throw new Error(\"ejectAgentPrompt: the class must be decorated with @MuhkooAgent\");\n }\n const { agent } = d;\n const lines: string[] = [];\n lines.push(`You are ${agent.name}. ${agent.purpose}`.trim());\n\n if (agent.guidance?.length) {\n lines.push(\"\", \"Guidance:\");\n for (const g of agent.guidance) lines.push(`- ${g}`);\n }\n\n if (d.spaces.length) {\n lines.push(\"\", \"Channels (Spaces) you can resolve with resolve_channel and post messages into:\");\n for (const s of d.spaces) lines.push(`- ${s.name}: ${s.description}`);\n }\n\n // Backend-only tables are deliberately withheld — the agent should never be\n // told about server-managed / internal state it can't (and shouldn't) touch.\n const promptTables = d.tables.filter((t) => !t.backend);\n if (promptTables.length) {\n lines.push(\"\", \"App database tables:\");\n for (const t of promptTables) {\n const verbs = t.access === \"write\"\n ? \"read & write — db_query/db_get/db_insert/db_update/db_delete\"\n : \"read-only — db_query/db_get\";\n lines.push(`- ${t.table} (${verbs}): ${t.description}`);\n }\n }\n\n if (d.functions.length) {\n lines.push(\"\", \"Functions you can invoke with call_function:\");\n for (const f of d.functions) lines.push(`- ${f.name}: ${f.description}`);\n }\n\n if (agent.instructions?.trim()) {\n lines.push(\"\", agent.instructions.trim());\n }\n\n // How to respond — the load-bearing behavioral contract. Without this, models\n // (especially gpt-oss) tend to run tool calls and then end their turn with no\n // user-facing message, so the user sees the work happen but gets no reply.\n const hasTools = promptTables.length > 0 || d.functions.length > 0;\n lines.push(\"\", \"How to respond:\");\n if (hasTools) {\n lines.push(\n \"- When you need information or need to make a change, call your tools immediately — don't ask the user to do it, and don't describe or name the tools to them.\",\n \"- After your tool calls return, you MUST send one final reply to the channel, in plain language, that answers the request using the results.\",\n );\n }\n lines.push(\n \"- Always end your turn with a short written reply (one or two sentences). Never finish with only tool calls and no message, and never reply with an empty message.\",\n \"- Don't restate function names, parameters, JSON, or your list of tools to the user — just give them the answer.\",\n );\n\n lines.push(\n \"\",\n \"The exact columns, function parameters, and the full list of callable tools are supplied to you by the runtime. Follow that authoritative list — never invent tables, columns, functions, or tools.\",\n );\n\n return lines.join(\"\\n\");\n}\n\n/**\n * The tools-config shape the Muhkoo platform uses to gate an agent. Alias of\n * `client.agents`' {@link AgentToolsConfig} so {@link ejectAgentTools} output\n * drops straight into `client.agents.create({ tools })`.\n */\nexport type MuhkooAgentToolsConfig = AgentToolsConfig;\n\n/**\n * Derive a suggested tools allowlist from a decorated class — the db tables\n * (and whether any are writable), the callable functions, and whether channels\n * are in play. Pair with {@link ejectAgentPrompt} when configuring the agent.\n *\n * If any tables/functions are present the result has `enabled: true`; to\n * actually grant tools you must also pass a function-calling `model` in the same\n * `client.agents.create`/`update` call (the server enforces this).\n */\nexport function ejectAgentTools(appClass: Function, opts?: { maxIterations?: number }): AgentToolsConfig {\n const d = REGISTRY.get(appClass);\n if (!d) {\n throw new Error(\"ejectAgentTools: the class must be decorated with @MuhkooAgent\");\n }\n const anyWrite = d.tables.some((t) => t.access === \"write\");\n const mode = d.tables.length === 0 ? \"off\" : anyWrite ? \"write\" : \"read\";\n return {\n enabled: d.tables.length > 0 || d.functions.length > 0 || d.spaces.length > 0,\n db: { mode, tables: d.tables.map((t) => t.table) },\n functions: d.functions.map((f) => f.name),\n channels: d.spaces.length > 0,\n maxIterations: opts?.maxIterations ?? 6,\n };\n}\n","/**\n * `LWWMap` — a map of independent last-write-wins registers, one per column.\n * This is the conflict model for a `db` row: two devices that edit *different*\n * columns of the same row while offline both keep their edits (no lost update),\n * and two that edit the *same* column converge to the greater-HLC write. A row\n * delete is a causal tombstone (see {@link ./ORSet}); a later write to any\n * column resurrects the row with just the surviving columns.\n *\n * This mirrors, on the client, exactly what the accelerator's `_muhkoo_crdt`\n * sidecar does server-side — so a row materializes identically whether it was\n * merged locally (offline) or by the server on replay.\n */\n\nimport { compareHlc } from \"../clock/HlcTimestamp\";\n\nexport interface LwwMap {\n /** Per-column value of the winning write. */\n fields: Record<string, unknown>;\n /** Per-column HLC of the winning write. */\n columnHlc: Record<string, string>;\n /** Row-delete tombstone HLC, or `null` when the row was never deleted. */\n tombstone: string | null;\n}\n\nexport function emptyMap(): LwwMap {\n return { fields: {}, columnHlc: {}, tombstone: null };\n}\n\n/** Apply a local column write (insert/update) at the given per-column HLCs. */\nexport function writeColumns(map: LwwMap, values: Record<string, unknown>, hlc: string): LwwMap {\n const next: LwwMap = {\n fields: { ...map.fields },\n columnHlc: { ...map.columnHlc },\n tombstone: map.tombstone,\n };\n for (const [col, value] of Object.entries(values)) {\n const prev = next.columnHlc[col];\n if (!prev || compareHlc(hlc, prev) > 0) {\n next.fields[col] = value;\n next.columnHlc[col] = hlc;\n }\n }\n return next;\n}\n\n/** Apply a row delete at `hlc` (causal tombstone). */\nexport function tombstoneRow(map: LwwMap, hlc: string): LwwMap {\n const tombstone = !map.tombstone || compareHlc(hlc, map.tombstone) > 0 ? hlc : map.tombstone;\n return { fields: { ...map.fields }, columnHlc: { ...map.columnHlc }, tombstone };\n}\n\n/** Merge two row states column-by-column. Pure; neither input is mutated. */\nexport function mergeMap(a: LwwMap, b: LwwMap): LwwMap {\n const cols = new Set([...Object.keys(a.columnHlc), ...Object.keys(b.columnHlc)]);\n const out = emptyMap();\n for (const col of cols) {\n const ah = a.columnHlc[col];\n const bh = b.columnHlc[col];\n const aWins = ah && (!bh || compareHlc(ah, bh) >= 0);\n const winner = aWins ? a : b;\n out.fields[col] = winner.fields[col];\n out.columnHlc[col] = winner.columnHlc[col];\n }\n out.tombstone =\n a.tombstone && b.tombstone\n ? compareHlc(a.tombstone, b.tombstone) >= 0\n ? a.tombstone\n : b.tombstone\n : (a.tombstone ?? b.tombstone);\n return out;\n}\n\n/**\n * Materialize the visible row from merged state, or `null` when the row is\n * deleted. A column is visible only when its write is causally newer than the\n * tombstone — so a delete hides every prior column, but a post-delete write to\n * a column brings the row back with just that column populated.\n */\nexport function materializeRow(map: LwwMap): Record<string, unknown> | null {\n const visible: Record<string, unknown> = {};\n let any = false;\n for (const [col, hlc] of Object.entries(map.columnHlc)) {\n if (!map.tombstone || compareHlc(hlc, map.tombstone) > 0) {\n visible[col] = map.fields[col];\n any = true;\n }\n }\n return any ? visible : null;\n}\n","/**\n * Tombstone helpers shared by the LWW CRDTs. We don't need a full\n * observed-remove set — every domain that deletes (kv keys, db rows) does so\n * by stamping a delete with an HLC and keeping that stamp around. The only\n * rule that matters is the causal one:\n *\n * a delete at HLC `d` hides the value, but a *later* write at HLC `w > d`\n * resurrects it; a *stale* write at `w <= d` is dropped.\n *\n * Keeping the delete HLC (rather than physically forgetting the key) is what\n * prevents a delayed offline write from \"un-deleting\" something a peer already\n * removed. Callers GC tombstones older than any possible offline window.\n */\n\nimport { compareHlc } from \"../clock/HlcTimestamp\";\n\n/**\n * Does a write at `writeHlc` win against a tombstone at `tombstoneHlc`?\n * `true` ⇒ the write applies (resurrecting a deleted item if needed); `false`\n * ⇒ the tombstone still holds and the write is dropped. A missing tombstone\n * (`null`) means there's nothing suppressing the write.\n */\nexport function writeBeatsTombstone(writeHlc: string, tombstoneHlc: string | null): boolean {\n if (!tombstoneHlc) return true;\n return compareHlc(writeHlc, tombstoneHlc) > 0;\n}\n\n/**\n * Does a delete at `deleteHlc` win against the latest write at `writeHlc`?\n * `true` ⇒ the item is now tombstoned. Ties go to the delete (remove-wins) so\n * that a delete and a write stamped in the same instant resolve deterministically\n * toward removal.\n */\nexport function deleteBeatsWrite(deleteHlc: string, writeHlc: string | null): boolean {\n if (!writeHlc) return true;\n return compareHlc(deleteHlc, writeHlc) >= 0;\n}\n","/**\n * PacketCipher — the strategy `Network` uses to seal/open a packet's payload.\n *\n * `Network` owns the wire shape (Message ↔ Packet, header placement, transport,\n * reconnect, checksum). The *encryption* is pluggable: the default\n * {@link DoubleRatchetCipher} reproduces the per-peer Double Ratchet behavior\n * Network has always had, while the Space layer supplies a group-key cipher.\n *\n * The sealed ciphertext always rides in `Packet.headers` (cleartext routing\n * fields stay readable to the server); `Packet.message` is left undefined on\n * the wire so the server never sees the real payload.\n */\n\nimport type { Packet } from \"../messaging/Packet\";\nimport type { DoubleRatchetManager, CipherMessage } from \"../crypto/DoubleRatchetManager\";\n\nexport type PacketHeaders = Packet[\"headers\"];\n\n/** Header fields a cipher merges into the outgoing packet. */\nexport type SealedHeaders = Record<string, string | number | boolean>;\n\nexport interface PacketCipher {\n /**\n * Seal the serialized `Message`. Returns the header fields to merge into\n * the outgoing packet (these carry the ciphertext). `Network` clears\n * `packet.message` after calling this.\n */\n seal(serializedMessage: string, packet: Packet): Promise<SealedHeaders>;\n\n /** True if the inbound headers look like this cipher's sealed form. */\n handles(headers: PacketHeaders): boolean;\n\n /**\n * Open an inbound packet's headers back into a serialized `Message` string.\n * Returns `null` when the packet is not sealed for / not decryptable by us\n * (e.g. an epoch key we don't hold) — `Network` then leaves `packet.message`\n * untouched rather than throwing.\n */\n open(headers: PacketHeaders): Promise<string | null>;\n}\n\nexport interface DoubleRatchetCipherDeps {\n ratchetManager: DoubleRatchetManager;\n clientId: string;\n serverId: string;\n sessionType: \"global\" | \"specific\";\n /** Resolves the live session id (Network manages the session lifecycle). */\n getSessionId: () => string | null;\n /** Whether this side is the ratchet \"client\" (default true). */\n isClient?: boolean;\n}\n\n/**\n * Default cipher: per-peer Double Ratchet. Reproduces Network's original\n * `{ encrypted: true, cipherMessage: <json> }` header convention exactly so\n * existing consumers are unaffected.\n */\nexport class DoubleRatchetCipher implements PacketCipher {\n constructor(private readonly deps: DoubleRatchetCipherDeps) {}\n\n async seal(serializedMessage: string): Promise<SealedHeaders> {\n const sessionId = this.deps.getSessionId();\n if (!sessionId) {\n throw new Error(\"DoubleRatchetCipher: no active session to seal under\");\n }\n const cipherMessage = await this.deps.ratchetManager.encrypt(\n this.deps.clientId,\n this.deps.serverId,\n sessionId,\n serializedMessage,\n false, // newDhKey — let the ratchet manage key rotation\n this.deps.sessionType,\n );\n return { encrypted: true, cipherMessage: JSON.stringify(cipherMessage) };\n }\n\n handles(headers: PacketHeaders): boolean {\n return !!(headers?.encrypted && headers?.cipherMessage);\n }\n\n async open(headers: PacketHeaders): Promise<string | null> {\n if (!this.handles(headers)) return null;\n const cipherMessage = JSON.parse(headers!.cipherMessage as string) as CipherMessage;\n return this.deps.ratchetManager.decrypt(cipherMessage, this.deps.isClient ?? true);\n }\n}\n","import { Logger } from \"../utilities/Logger\";\n\nconst appLogger = new Logger(\"connect\", 'ERROR');\nglobalThis.appLogger = appLogger;\n\nexport * from \"../messaging\";\nexport * from \"../messaging/Packet\";\nexport * from \"../types\";\nexport * from \"../crypto\";\nexport * from \"../events\";\nexport * from \"../sessions\";\nexport * from \"../transport\";\n// Universal Groth16 verifier (bn128.wasm-driven). Works anywhere WebAssembly\n// runs: Node, browsers, CF Workers. The same code path the workers build uses.\nexport * from \"../workers/groth16-verifier\";\n// PersonalSpaceClient + passphrase wrap helpers. Pulls in snarkjs as an\n// external — the consuming app's import map (or bundler) resolves it.\nexport * from \"../personal\";\n// FileStorage + ShardClient + SharedSpaceClient (session-based, no snarkjs).\n// Wrapped by `client.storage` on the unified Client.\nexport * from \"../storage\";\n// AuthClient — `/api/auth/*` HTTP wrapper. Browser + server only; the\n// workers build is the auth backend itself, no point importing the client.\nexport * from \"../auth\";\n// Unified Client facade — the supported entry point. These use the `export *`\n// form (not named `export { … } from`) because rollup-plugin-dts silently\n// drops named cross-module re-exports in this codebase's layout, which would\n// strip `Client` et al. from the rolled-up `connect.d.ts`. The class modules\n// don't re-run core's appLogger setup (that lives in `../core/index`, which we\n// deliberately don't import here).\nexport * from \"../core/Client\";\nexport * from \"../core/HttpClient\";\nexport * from \"../core/Session\";\nexport * from \"../core/Room\";\nexport * from \"../core/namespaces/AuthNamespace\";\n// Hosted auth (`client.auth.hosted`): the redirect flow + TV device pairing\n// (startDevicePairing / waitForDevicePairing / approveDevicePairing / …).\n// `HostedAuth` no longer declares its own `AuthUser` — it reuses the one from\n// AuthNamespace above — so these two `export *`s can't produce an ambiguous\n// (and therefore silently dropped) star export.\nexport * from \"../core/namespaces/HostedAuth\";\n// The paired device's at-rest identity store (encrypted localStorage blob +\n// non-extractable IndexedDB key). Read the module docs before relying on it:\n// it is obfuscation, not protection.\nexport * from \"../auth/deviceStore\";\nexport * from \"../core/namespaces/KvNamespace\";\nexport * from \"../core/namespaces/FileNamespace\";\nexport * from \"../core/namespaces/MessageNamespace\";\nexport * from \"../core/namespaces/SpaceNamespace\";\nexport * from \"../core/namespaces/AgentsNamespace\";\nexport * from \"../core/namespaces/FunctionsNamespace\";\nexport * from \"../core/namespaces/AccessTokensNamespace\";\n// The filesystem and its history. Flat `export *` for the same dts-plugin\n// reason as the Client exports above — named re-exports are silently dropped,\n// which would leave `client.vfs`/`client.vcs` usable but untypeable.\nexport * from \"../vfs/VfsNamespace\";\nexport * from \"../vfs/types\";\nexport * from \"../vcs/VcsNamespace\";\nexport * from \"../vcs/types\";\nexport * from \"../vcs/merge3\";\n// WebAuthn helpers — notably `PasskeyOriginError` / `rpIdUsableForOrigin`, so an\n// app can tell \"this passkey belongs to another origin\" from a cancelled prompt.\n// Flat `export *` so the dts plugin keeps the TYPES (named re-exports get dropped).\nexport * from \"../auth/passkey\";\n// App-describing decorators (@MuhkooAgent/@MuhkooSpace/@MuhkooDB/@MuhkooFunction\n// + ejectAgentPrompt). Cherry-picked like the rest of core for the dts plugin.\nexport * from \"../core/agents/describe\";\n// Offline layer — caching + durable write queue + CRDT sync (`client.offline`).\n// Flat `export *` for the same dts-plugin reason as the Client exports above.\nexport * from \"../offline\";\n// P2P layer — private Space-scoped peer block exchange over WebRTC. Opt-in.\nexport * from \"../p2p\";\n// Fan-out group-encryption layer (Space, keyring, cipher). Flat `export *`\n// for the same dts-plugin reason as the Client exports above.\nexport * from \"../spaces/Space\";\nexport * from \"../spaces/SpaceKeyring\";\nexport * from \"../spaces/SpacePacketCipher\";\nexport * from \"../spaces/KeyringClient\";\nexport * from \"../network/PacketCipher\";\n","/**\n * Bundled-WASM loader for the RS codec.\n *\n * Isolated in its own module so the rollup-plugin-wasm `import` of `.wasm` is\n * only encountered when this file is actually evaluated. The main `rs.ts`\n * file dynamically imports this module only on the fallback path (no\n * pre-compiled `WebAssembly.Module` provided), which lets tools that can't\n * parse the `.wasm` import (vitest under vite, without `vite-plugin-wasm`)\n * import `rs.ts` cleanly as long as callers always supply a module.\n *\n * Production builds (rollup) hit this path via the bundled loader; tests\n * skip it entirely by passing a fs-loaded module to `initRsWasm`.\n */\n\nimport loadRsWasm from \"./wasm_reed_solomon_erasure_bg.wasm\";\n\n/** Re-exports the rollup-plugin-wasm loader shape. */\nexport default loadRsWasm;\n"],"names":["toBase64","fromBase64","AES_GCM_IV_BYTES","loadPoseidon","groth16Prove","groth16Verify","bytesToBase64","_snarkjs","loadSnarkjs","FIELD_SIZE","parseOrThrow","wasmEncode","wasmReconstruct","TE","TD","Room","HEADER","appLogger"],"mappings":";;;;;;;;AAKA,MAAM,MAAM,GAAY,CAAC,MAAK;AAC5B,IAAA,IAAI;AACF,QAAA,MAAM,IAAI,GAAI,UAA6D,CAAC,OAAO;AACnF,QAAA,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK;IAC9B;AAAE,IAAA,MAAM;AAAE,QAAA,OAAO,KAAK;IAAE;AAC1B,CAAC,GAAG;AACJ,MAAM,KAAK,GAAG,CAAC,IAAY,KACzB,MAAM,GAAG,CAAC,CAAC,KAAK,CAAA,KAAA,EAAQ,IAAI,CAAA,CAAA,EAAI,CAAC,CAAA,OAAA,CAAS,GAAG,CAAC,CAAC,KAAK,CAAC;AACvD,MAAM,MAAM,GAAG;AACX,IAAA,IAAI,EAAK,KAAK,CAAC,IAAI,CAAC;AACpB,IAAA,GAAG,EAAM,KAAK,CAAC,IAAI,CAAC;AACpB,IAAA,KAAK,EAAI,KAAK,CAAC,IAAI,CAAC;AACpB,IAAA,MAAM,EAAG,KAAK,CAAC,IAAI,CAAC;AACpB,IAAA,IAAI,EAAK,KAAK,CAAC,IAAI,CAAC;AACpB,IAAA,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC;AACpB,IAAA,IAAI,EAAK,KAAK,CAAC,IAAI,CAAC;AACpB,IAAA,GAAG,EAAM,KAAK,CAAC,GAAG,CAAC;CACtB;AAED,IAAK,QAOJ;AAPD,CAAA,UAAK,QAAQ,EAAA;AACT,IAAA,QAAA,CAAA,QAAA,CAAA,SAAA,CAAA,GAAA,CAAA,CAAA,GAAA,SAAW;AACX,IAAA,QAAA,CAAA,QAAA,CAAA,OAAA,CAAA,GAAA,CAAA,CAAA,GAAA,OAAS;AACT,IAAA,QAAA,CAAA,QAAA,CAAA,MAAA,CAAA,GAAA,CAAA,CAAA,GAAA,MAAQ;AACR,IAAA,QAAA,CAAA,QAAA,CAAA,SAAA,CAAA,GAAA,CAAA,CAAA,GAAA,SAAW;AACX,IAAA,QAAA,CAAA,QAAA,CAAA,MAAA,CAAA,GAAA,CAAA,CAAA,GAAA,MAAQ;AACR,IAAA,QAAA,CAAA,QAAA,CAAA,OAAA,CAAA,GAAA,CAAA,CAAA,GAAA,OAAS;AACb,CAAC,EAPI,QAAQ,KAAR,QAAQ,GAAA,EAAA,CAAA,CAAA;AAgBb,MAAM,MAAM,CAAA;AACA,IAAA,MAAM;AACN,IAAA,QAAQ;AACR,IAAA,OAAO;AACP,IAAA,UAAU;IAClB,KAAK,GAAW,MAAM;AAEtB,IAAA,WAAA,CAAY,SAAiB,SAAS,EAAE,WAAmB,MAAM,EAAE,aAAsB,KAAK,EAAA;QAC1F,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA,CAAG,CAAC;AACxC,QAAA,IAAI,CAAC,UAAU,GAAG,UAAU;AAC5B,QAAA,IAAI,QAAQ;;AAGZ,QAAA,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;;AAE/B,YAAA,QAAQ,GAAG,CAAC,QAAQ,EAAE,WAAW,EAA2B;QAChE;aAAO;;AAEH,YAAA,MAAM,aAAa,GAAI,UAAkB,CAAC,OAAO;AACjD,YAAA,MAAM,OAAO,GAAG,aAAa,EAAE,GAAG,EAAE,SAAS;YAC7C,QAAQ,GAAG,CAAC,OAAO,IAAI,QAAQ,EAAE,WAAW,EAA2B;QAC3E;AAEA,QAAA,IAAI,CAAC,KAAK,GAAG,QAAQ;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI;AACnD,QAAA,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO;IACrC;AAEQ,IAAA,SAAS,CAAC,KAAe,EAAA;AAC7B,QAAA,OAAO,KAAK,IAAI,IAAI,CAAC,QAAQ;IACjC;AAEA;;AAEG;IACK,aAAa,GAAA;QACjB,IAAI,CAAC,IAAI,CAAC,UAAU;AAAE,YAAA,OAAO,IAAI;AAEjC,QAAA,IAAI;AACA,YAAA,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,KAAK;AAC/B,YAAA,IAAI,CAAC,KAAK;AAAE,gBAAA,OAAO,IAAI;;YAGvB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;;;AAI/B,YAAA,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC;AAC3B,YAAA,IAAI,CAAC,UAAU;AAAE,gBAAA,OAAO,IAAI;;;;YAK5B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,0CAA0C,CAAC;AAE1E,YAAA,IAAI,CAAC,KAAK;AAAE,gBAAA,OAAO,IAAI;AAEvB,YAAA,MAAM,GAAG,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,KAAK;;AAGtD,YAAA,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAErD,OAAO;gBACH,IAAI;AACJ,gBAAA,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;AACxB,gBAAA,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC5B,QAAQ,EAAE,YAAY,IAAI,SAAS;aACtC;QACL;QAAE,OAAO,KAAK,EAAE;;AAEZ,YAAA,OAAO,IAAI;QACf;IACJ;AAEA;;AAEG;AACK,IAAA,gBAAgB,CAAC,IAAuB,EAAA;AAC5C,QAAA,IAAI,CAAC,IAAI;AAAE,YAAA,OAAO,EAAE;QAEpB,MAAM,KAAK,GAAa,EAAE;AAE1B,QAAA,IAAI,IAAI,CAAC,QAAQ,EAAE;AACf,YAAA,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C;AAEA,QAAA,IAAI,IAAI,CAAC,IAAI,EAAE;YACX,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,GAAG,CAAA,EAAG,IAAI,CAAC,IAAI,CAAA,CAAA,EAAI,IAAI,CAAC,IAAI,CAAA,CAAE,GAAG,IAAI,CAAC,IAAI;AACpE,YAAA,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA,CAAG,CAAC,CAAC;QAC3C;QAEA,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;IACxD;AAEA,IAAA,QAAQ,CAAC,KAAa,EAAA;AAClB,QAAA,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE;AAChC,QAAA,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,EAA2B;QAC7D,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI;IACvD;AAEA,IAAA,aAAa,CAAC,IAAa,EAAA;AACvB,QAAA,IAAI,CAAC,UAAU,GAAG,IAAI;IAC1B;;IAGA,IAAI,CAAC,GAAG,IAAW,EAAA;QACf,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;YAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QACzE;IACJ;IAEA,GAAG,CAAC,GAAG,IAAW,EAAA;QACd,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB;IAEA,OAAO,CAAC,GAAG,IAAW,EAAA;QAClB,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QAC3E;IACJ;IAEA,OAAO,CAAC,GAAG,IAAW,EAAA;QAClB,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QAC9E;IACJ;IAEA,IAAI,CAAC,GAAG,IAAW,EAAA;QACf,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;YAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QAC3E;IACJ;IAEA,KAAK,CAAC,GAAG,IAAW,EAAA;QAChB,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QAC1E;IACJ;IAEA,KAAK,CAAC,GAAG,IAAW,EAAA;QAChB,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QAC9E;IACJ;;AAGA,IAAA,MAAM,CAAC,SAAmB,EAAE,GAAG,IAAW,EAAA;QACtC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC;IAC3C;IAEA,KAAK,GAAA;AACD,QAAA,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;IACxB;AAEA,IAAA,KAAK,CAAC,KAAc,EAAA;AAChB,QAAA,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;IAC7B;AAEA,IAAA,UAAU,CAAC,KAAc,EAAA;AACrB,QAAA,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC;IAClC;IAEA,GAAG,CAAC,IAAU,EAAE,OAAa,EAAA;QACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;IACnC;IAEA,MAAM,CAAC,GAAG,IAAW,EAAA;QACjB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IAChC;IAEA,KAAK,CAAC,GAAG,IAAW,EAAA;QAChB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC/B;IAEA,cAAc,CAAC,GAAG,IAAW,EAAA;QACzB,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC;IACxC;IAEA,QAAQ,GAAA;AACJ,QAAA,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;IAC3B;IAEA,KAAK,CAAC,WAAiB,EAAE,UAAqB,EAAA;QAC1C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC;IAC/C;AAEA,IAAA,IAAI,CAAC,KAAc,EAAA;AACf,QAAA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;IAC5B;AAEA,IAAA,OAAO,CAAC,KAAc,EAAA;AAClB,QAAA,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/B;AAEA,IAAA,OAAO,CAAC,KAAc,EAAE,GAAG,IAAW,EAAA;QAClC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC;IACxC;IAEA,KAAK,CAAC,GAAG,IAAW,EAAA;QAChB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC/B;;AAIA,IAAA,OAAO,CAAC,KAAc,EAAA;AAClB,QAAA,IAAI,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE;AAC1B,YAAA,IAAI,CAAC,OAAe,CAAC,OAAO,CAAC,KAAK,CAAC;QACxC;IACJ;AAEA,IAAA,UAAU,CAAC,KAAc,EAAA;AACrB,QAAA,IAAI,YAAY,IAAI,IAAI,CAAC,OAAO,EAAE;AAC7B,YAAA,IAAI,CAAC,OAAe,CAAC,UAAU,CAAC,KAAK,CAAC;QAC3C;IACJ;AAEA,IAAA,SAAS,CAAC,KAAc,EAAA;AACpB,QAAA,IAAI,WAAW,IAAI,IAAI,CAAC,OAAO,EAAE;AAC5B,YAAA,IAAI,CAAC,OAAe,CAAC,SAAS,CAAC,KAAK,CAAC;QAC1C;IACJ;AACH;AAKD;AACO,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;;ACjRvD;;;;;;;AAOG;AAEH,MAAM,SAAS,GAAG,kBAAkB;AAEpC;AACM,SAAU,KAAK,CAAC,KAAiB,EAAA;IACrC,IAAI,GAAG,GAAG,EAAE;AACZ,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACrC,QAAA,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;AAClB,QAAA,GAAG,IAAI,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC;IAChD;AACA,IAAA,OAAO,GAAG;AACZ;AAEA;AACM,SAAU,OAAO,CAAC,GAAW,EAAA;IACjC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE;QACxB,MAAM,IAAI,KAAK,CAAC,CAAA,wCAAA,EAA2C,GAAG,CAAC,MAAM,CAAA,CAAA,CAAG,CAAC;IAC3E;IACA,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;AAC1C,IAAA,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;AAC9B,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC;AAC1D,QAAA,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,CAAA,yCAAA,EAA4C,CAAC,GAAG,CAAC,CAAA,CAAE,CAAC;QACtE;AACA,QAAA,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI;IACf;AACA,IAAA,OAAO,GAAG;AACZ;AAEA;AACM,SAAUA,UAAQ,CAAC,KAAiB,EAAA;IACxC,IAAI,MAAM,GAAG,EAAE;AACf,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACrC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzC;AACA,IAAA,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB;AAEA;AACM,SAAUC,YAAU,CAAC,GAAW,EAAA;AACpC,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC;IACxB,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;AACzC,IAAA,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;AAC9B,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;AACrE,IAAA,OAAO,GAAG;AACZ;AAEA;AACM,SAAU,WAAW,CAAC,KAAiB,EAAA;IAC3C,OAAOD,UAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;AACnF;AAEA;AACM,SAAU,aAAa,CAAC,MAAc,EAAA;AAC1C,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AACzD,QAAA,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;AAC3C,IAAA,OAAOC,YAAU,CAAC,MAAM,CAAC;AAC3B;AAEA;AACM,SAAU,WAAW,CAAC,GAAG,MAAoC,EAAA;IACjE,IAAI,KAAK,GAAG,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,MAAM;AAAE,QAAA,KAAK,IAAI,CAAC,CAAC,UAAU;AAC7C,IAAA,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC;AACjC,IAAA,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;IAC9B,IAAI,MAAM,GAAG,CAAC;AACd,IAAA,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE;AACtB,QAAA,MAAM,IAAI,GAAG,CAAC,YAAY,UAAU,GAAG,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC;AAC5D,QAAA,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC;AACrB,QAAA,MAAM,IAAI,IAAI,CAAC,MAAM;IACvB;AACA,IAAA,OAAO,GAAG;AACZ;AAEA;AACM,SAAU,UAAU,CAAC,CAAS,EAAA;;;IAGlC,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,UAAU,CAAC;AACzC,IAAA,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;AAC9B,IAAA,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;AACX,IAAA,OAAO,GAAG;AACZ;AAEA;AACM,SAAU,UAAU,CAAC,KAAiB,EAAA;IAC1C,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;AACxC;;AC/FA,MAAM,cAAc,GAAG,4DAA4D;AAWnF;AAEA;;;;;;;;AAQG;AACG,SAAU,UAAU,CACtB,KAAc,EACd,kBAA4F,EAAA;AAE5F,IAA4C;;AAExC,QAAA,IAAI,OAAO,KAAK,KAAK,kBAAkB,EAAE;YACrC,MAAM,IAAI,KAAK,CACX,CAAA,eAAA,EAAkB,kBAAkB,gBAAgB,OAAO,KAAK,CAAA,CAAA,CAAG,CACtE;QACL;IACJ;AAsBJ;AAEA;;;;;AAKG;AACG,SAAU,YAAY,CAAC,KAA2B,EAAA;AACpD,IAAA,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK;UACzB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK;AAChC,UAAE,IAAI,UAAU,CAAC,KAAK,CAAC;AAE3B,IAAA,IAAI,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC;AACnB,IAAA,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;AACtB,QAAA,GAAG,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC;IAC3C;IAEA,IAAI,MAAM,GAAG,EAAE;AACf,IAAA,OAAO,GAAG,GAAG,CAAC,EAAE;QACZ,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;AAC1C,QAAA,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC;AACtB,QAAA,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,MAAM;IAC/C;;AAGA,IAAA,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;QACtB,IAAI,IAAI,KAAK,CAAC;AAAE,YAAA,MAAM,GAAG,GAAG,GAAG,MAAM;;YAChC;IACT;AACA,IAAA,OAAO,MAAM;AACjB;AAGA;;;;;AAKG;AAGH;AACM,SAAU,YAAY,CAAC,KAAa,EAAA;AACtC,IAAA,IAAI;AACA,QAAA,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AAEvF,QAAA,IAAI,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC;AACnB,QAAA,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;YACtB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YACjC,IAAI,KAAK,KAAK,SAAS;AAAE,gBAAA,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAA,CAAE,CAAC;AAC7E,YAAA,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1C;QAEA,MAAM,SAAS,GAAa,EAAE;AAC9B,QAAA,OAAO,GAAG,GAAG,CAAC,EAAE;AACZ,YAAA,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACzC,YAAA,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QAC3B;QAEA,SAAS,CAAC,OAAO,EAAE;;QAGnB,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC,MAAM;QAC5E,OAAO,IAAI,UAAU,CAAC,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM;IAChF;IAAE,OAAO,CAAC,EAAE;AACR,QAAA,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACZ,QAAA,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC;IACpC;AACJ;AAEA;;;AAGG;AACH,SAAS,cAAc,CAAC,GAAW,EAAA;IAC/B,IAAI,IAAI,GAAG,IAAI;AACf,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACjC,QAAA,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACpD;AACA,IAAA,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;AACrC;AAIA;;;;;AAKG;AACG,SAAU,gBAAgB,CAAC,KAAa,EAAA;AAC1C,IAAA,UAAU,CAAS,KAAK,EAAE,QAAQ,CAAC;AACnC,IAAA,OAAO,cAAc,CAAC,KAAK,CAAC;AAChC;AAEA;;;;;;AAMG;AACG,SAAU,cAAc,CAAC,KAAa,EAAE,QAAgB,EAAA;AAC1D,IAAA,UAAU,CAAS,KAAK,EAAE,QAAQ,CAAC;AACnC,IAAA,UAAU,CAAS,QAAQ,EAAE,QAAQ,CAAC;IACtC,OAAO,CAAC,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC;AACjD;AAEA;;;;AAIG;SACa,SAAS,GAAA;AACrB,IAAA,OAAO,KAAK,GAAG,UAAU,EAAE;AAC/B;AA6CA;;;;AAIG;SAEa,UAAU,GAAA;AACtB,IAAA,OAAO,KAAK,GAAG,UAAU,EAAE;AAC/B;AAEA;;;;AAIG;SAEa,UAAU,GAAA;;;;AAItB,IAAA,OAAO,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;AAC5C;AAEA;;;;;;AAMG;AACG,SAAU,SAAS,CAAI,IAAO,EAAA;AAChC,IAAA,MAAM,WAAW,GAAG,4BAA4B,CAAC,IAAI,CAAC;AACtD,IAAA,OAAO,YAAY,CAAC,WAAW,CAAC;AACpC;AAEA;;;;;AAKG;AACG,SAAU,WAAW,CAAI,YAAoB,EAAA;AAC/C,IAAA,MAAM,WAAW,GAAG,YAAY,CAAC,YAAY,CAAC;AAC9C,IAAA,OAAO,8BAA8B,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAM;AAC9E;AAEA,SAAS,8BAA8B,CAAC,IAAS,EAAA;AAC7C,IAAA,MAAM,iBAAiB,GAAG,CAAC,IAAS,KAAS;QACzC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;YAC3C,OAAO,IAAI,CAAC;QAChB;AAEA,QAAA,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE;AAC1B,YAAA,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACvD;AAEA,QAAA,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE;YACxB,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC;AAEA,QAAA,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE;YACvB,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B;AAEA,QAAA,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE;YACvB,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B;AAEA,QAAA,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YACrB,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACvC;;QAGA,MAAM,kBAAkB,GAAQ,EAAE;QAClC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACjC,kBAAkB,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1D;AACA,QAAA,OAAO,kBAAkB;AAC7B,IAAA,CAAC;AAED,IAAA,OAAO,iBAAiB,CAAC,IAAI,CAAC;AAClC;AAEA,SAAS,4BAA4B,CAAC,IAAS,EAAA;;AAE3C,IAAA,MAAM,eAAe,GAAG,CAAC,IAAS,KAAS;AACvC,QAAA,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;AAAE,YAAA,OAAO,IAAI;AAE1D,QAAA,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;AAC1B,YAAA,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE;YACzD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;QAC3C;AAEA,QAAA,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;AAAE,YAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE;AACnF,QAAA,IAAI,IAAI,CAAC,WAAW,KAAK,GAAG;AAAE,YAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE;AACzF,QAAA,IAAI,IAAI,CAAC,WAAW,KAAK,GAAG;AAAE,YAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;AAC/E,QAAA,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;AAAE,YAAA,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC;QAEzD,MAAM,gBAAgB,GAAQ,EAAE;QAChC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACjC,gBAAgB,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtD;AACA,QAAA,OAAO,gBAAgB;AAC3B,IAAA,CAAC;;IAGD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAqB;AACrE;AAEA,SAAS,iBAAiB,CAAC,WAAwB,EAAA;AAC/C,IAAA,IAAI,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;IACtE,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;AAC3C,IAAA,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;AACjC;AAiGA;;;;;;AAMG;SACa,YAAY,CAAC,KAAa,EAAE,WAAmB,CAAC,EAAA;IAC5D,IAAI,KAAK,KAAK,CAAC;AAAE,QAAA,OAAO,SAAS;AAEjC,IAAA,MAAM,CAAC,GAAG,IAAI,CAAC;IACf,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;IACvE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,IAAA,MAAM,UAAU,GAAG,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAE1C,IAAA,OAAO,CAAA,EAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA,CAAA,EAAI,KAAK,CAAC,CAAC,CAAC,EAAE;AACxD;;AChaA;;;;;AAKG;MACU,OAAO,CAAA;IAChB,EAAE,GAAW,UAAU,EAAE;AACzB,IAAA,SAAS,GAAW,IAAI,CAAC,GAAG,EAAE;IAC9B,MAAM,GAAsD,SAAS;AACrE,IAAA,QAAQ;AACA,IAAA,KAAK;AAIb,IAAA,WAAA,CAAY,GAAiC,EAAA;AAEzC,QAAA,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE;YACvD,IAAI,CAAC,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE;YAC3B,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS;YAChD,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM;YACvC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;AAC7C,YAAA,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI;QACxB;aAAO;AACH,YAAA,IAAI,CAAC,IAAI,GAAG,GAAG;QACnB;QACA,IAAI,CAAC,gBAAgB,EAAE;IAC3B;AAEA,IAAA,IAAI,IAAI,GAAA;AACJ,QAAA,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;IAClC;IAEA,IAAI,IAAI,CAAC,KAAkB,EAAA;AACvB,QAAA,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;AAC7B,QAAA,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YAChB,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAChD;IACJ;IAEA,cAAc,GAAG,MAAK;QAClB,IAAI,CAAC,IAAI,CAAC,QAAQ;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC;AAC1D,QAAA,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC;AACzD,QAAA,IAAI,CAAC,OAAO;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC;AAC7D,IAAA,CAAC;AAEO,IAAA,gBAAgB,CAAC,OAAA,GAAkB,IAAI,GAAG,IAAI,GAAG,CAAC,EAAA;AACtD,QAAA,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;AAC/D,QAAA,IAAI,WAAW,GAAG,OAAO,EAAE;YACvB,MAAM,IAAI,KAAK,CAAC,CAAA,+BAAA,EAAkC,YAAY,CAAC,OAAO,CAAC,CAAA,CAAA,CAAG,CAAC;QAC/E;IACJ;IAGA,SAAS,GAAG,MAAa;QACrB,OAAO,IAAI,CAAC,SAAS,CAAC;YAClB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;AAC1B,SAAA,CAAC;AACN,IAAA,CAAC;AAED,IAAA,OAAO,WAAW,GAAG,CAAC,IAAY,KAAa;AAC3C,QAAA,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;AAC1B,YAAA,GAAG,CAAC,IAAI,CAAC,2CAA2C,EAAE,IAAI,CAAC;QAC/D;QACA,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;AAC5B,QAAA,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC;AAC3B,IAAA,CAAC;;;AChFL;;;;;AAKG;MACU,MAAM,CAAA;AACf,IAAA,EAAE;AACF,IAAA,OAAO;AACP,IAAA,MAAM;AACN,IAAA,MAAM;IACN,OAAO,CAA4B;IACnC,OAAO,CAAW;AAClB,IAAA,SAAS;IACT,GAAG,CAAU;IACb,SAAS,CAAU;AAEnB,IAAA,WAAA,CAAY,EACR,EAAE,EACF,OAAO,EACP,MAAM,EACN,MAAM,EACN,OAAO,EACP,OAAO,EACP,GAAG,EACH,SAAS,EACT,SAAS,EACG,EAAA;QACZ,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,SAAS,EAAE,CAAC;AAC5B,QAAA,IAAI,CAAC,OAAO,GAAG,OAAO;AACtB,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;AACpB,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;AACpB,QAAA,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE;AAC5B,QAAA,IAAI,CAAC,OAAO,GAAG,OAAO;QACtB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAC5B,QAAA,IAAI,CAAC,GAAG,GAAG,GAAG;AACd,QAAA,IAAI,CAAC,SAAS,GAAG,SAAS;QAC1B,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;IAC5C;;IAGA,SAAS,GAAA;QACL,OAAO,IAAI,CAAC,SAAS,CAAC;YAClB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;YACjD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;AAC5B,SAAA,CAAC;IACN;;IAGA,OAAO,WAAW,CAAC,IAAY,EAAA;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAC5B,OAAO,IAAI,MAAM,CAAC;YACd,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,OAAO;AACpB,YAAA,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;YACxD,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,SAAS,EAAE,GAAG,CAAC,SAAS;AAC3B,SAAA,CAAC;IACN;;IAGA,SAAS,GAAA;QACL,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;AAC5B,QAAA,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG;IACjD;AAUH;;SCpGe,gBAAgB,CAAC,MAAW,EAAE,WAAmB,EAAE,UAA8B,EAAA;AAC7F,IAAA,MAAM,cAAc,GAAG,UAAU,CAAC,KAAK;AAEvC,IAAA,UAAU,CAAC,KAAK,GAAG,UAAU,GAAG,IAAW,EAAA;AACvC,QAAA,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,IAAI;AAE/B,QAAA,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE;AAC7B,YAAA,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC;QAC/C;AAEA,QAAA,MAAM,iBAAiB,GAAG,IAAI,OAAO,CAAC;YAClC,OAAO;AACP,YAAA,OAAO,EAAE,OAAO;AAChB,YAAA,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC;SAC3D,CAAC,CAAC,SAAS,EAAE;AAGd,QAAA,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;AACnE,IAAA,CAAC;AAED,IAAA,OAAO,UAAU;AACrB;;AC1BA;AAWA,MAAM,UAAU,GAAG;IACf;;;ACZJ;;;;;;;AAOG;AAoCH;;;;;;;AAOG;AACI,MAAM,6BAA6B,GAAoB;AAC5D,IAAA,QAAQ,EAAE,SAAS;AACnB,IAAA,KAAK,EAAE,OAAO;AACd,IAAA,OAAO,EAAE,CAAC;AACV,IAAA,UAAU,EAAE;QACV,+EAA+E;QAC/E,8EAA8E;QAC9E;AACD,KAAA;AACD,IAAA,SAAS,EAAE;AACT,QAAA;YACE,8EAA8E;YAC9E;AACD,SAAA;AACD,QAAA;YACE,+EAA+E;YAC/E;AACD,SAAA;AACD,QAAA;YACE,GAAG;YACH;AACD;AACF,KAAA;AACD,IAAA,UAAU,EAAE;AACV,QAAA;YACE,+EAA+E;YAC/E;AACD,SAAA;AACD,QAAA;YACE,8EAA8E;YAC9E;AACD,SAAA;AACD,QAAA;YACE,GAAG;YACH;AACD;AACF,KAAA;AACD,IAAA,UAAU,EAAE;AACV,QAAA;YACE,+EAA+E;YAC/E;AACD,SAAA;AACD,QAAA;YACE,+EAA+E;YAC/E;AACD,SAAA;AACD,QAAA;YACE,GAAG;YACH;AACD;AACF,KAAA;AACD,IAAA,eAAe,EAAE;AACf,QAAA;AACE,YAAA;gBACE,8EAA8E;gBAC9E;AACD,aAAA;AACD,YAAA;gBACE,8EAA8E;gBAC9E;AACD,aAAA;AACD,YAAA;gBACE,8EAA8E;gBAC9E;AACD;AACF,SAAA;AACD,QAAA;AACE,YAAA;gBACE,8EAA8E;gBAC9E;AACD,aAAA;AACD,YAAA;gBACE,8EAA8E;gBAC9E;AACD,aAAA;AACD,YAAA;gBACE,+EAA+E;gBAC/E;AACD;AACF;AACF,KAAA;AACD,IAAA,EAAE,EAAE;AACF,QAAA;YACE,8EAA8E;YAC9E,+EAA+E;YAC/E;AACD,SAAA;AACD,QAAA;YACE,+EAA+E;YAC/E,+EAA+E;YAC/E;AACD,SAAA;AACD,QAAA;YACE,8EAA8E;YAC9E,8EAA8E;YAC9E;AACD,SAAA;AACD,QAAA;YACE,8EAA8E;YAC9E,8EAA8E;YAC9E;AACD;AACF;;;ACzJH;;;;;;;AAOG;SAEa,SAAS,GAAA;AACrB,IAAA,MAAM,CAAC,GAAI,UAAU,CAAC,MAA6B,EAAE,MAAM;IAC3D,IAAI,CAAC,CAAC,EAAE;QACJ,MAAM,IAAI,KAAK,CACX,qEAAqE;AACrE,YAAA,+DAA+D,CAClE;IACL;AACA,IAAA,OAAO,CAAC;AACZ;;AClBA;;;;;;;;;;;AAWG;AAEH,MAAM,YAAY,GAAG,KAAK;AAEpB,SAAU,WAAW,CAAC,CAAS,EAAA;AACjC,IAAA,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;AAC/B,QAAA,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA,CAAA,CAAG,CAAC;IAC/E;IACA,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;AAC9C,IAAA,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,MAAM,IAAI,YAAY,EAAE;AACrD,QAAA,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC;AACrE,QAAA,UAAU,CAAC,MAAiB,CAAC,eAAe,CAAC,KAAK,CAAC;IACxD;AACA,IAAA,OAAO,GAAG;AACd;;ACzBA;;;;;;;;;;;;;;;;;;;;AAoBG;AAIH;AACO,MAAM,iBAAiB,GAAG;AAEjC;AACO,MAAMC,kBAAgB,GAAG;AAEhC;AACO,MAAM,iBAAiB,GAAG;AAEjC;;;;;;;;AAQG;AACI,eAAe,aAAa,CAC/B,GAAe,EACf,EAAc,EACd,SAAqB,EAAA;IAErB,SAAS,CAAC,GAAG,CAAC;IACd,QAAQ,CAAC,EAAE,CAAC;IACZ,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CACxC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAC3C,SAAS,EACT,SAAyB,CAC5B;AACD,IAAA,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC;AACrC;AAEA;;;;;AAKG;AACI,eAAe,aAAa,CAC/B,GAAe,EACf,EAAc,EACd,UAAsB,EAAA;IAEtB,SAAS,CAAC,GAAG,CAAC;IACd,QAAQ,CAAC,EAAE,CAAC;IACZ,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CACvC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAC3C,SAAS,EACT,UAA0B,CAC7B;AACD,IAAA,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC;AACpC;AAEA,eAAe,eAAe,CAAC,GAAe,EAAE,MAAkB,EAAA;IAC9D,OAAO,MAAM,SAAS,EAAE,CAAC,SAAS,CAC9B,KAAK,EACL,GAAmB,EACnB,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,KAAK,EACL,MAAM,CACT;AACL;AAEA,SAAS,SAAS,CAAC,GAAe,EAAA;AAC9B,IAAA,IAAI,GAAG,CAAC,UAAU,KAAK,iBAAiB,EAAE;QACtC,MAAM,IAAI,KAAK,CACX,CAAA,qBAAA,EAAwB,iBAAiB,CAAA,YAAA,EAAe,GAAG,CAAC,UAAU,CAAA,CAAA,CAAG,CAC5E;IACL;AACJ;AAEA,SAAS,QAAQ,CAAC,EAAc,EAAA;AAC5B,IAAA,IAAI,EAAE,CAAC,UAAU,KAAKA,kBAAgB,EAAE;QACpC,MAAM,IAAI,KAAK,CACX,CAAA,oBAAA,EAAuBA,kBAAgB,CAAA,YAAA,EAAe,EAAE,CAAC,UAAU,CAAA,CAAA,CAAG,CACzE;IACL;AACJ;;ACxGA;;;;;;;;;;;AAWG;AAIH;;;;;AAKG;AACI,MAAM,yBAAyB,GAAG;AAEzC;;;;;;;;AAQG;AACI,eAAe,0BAA0B,CAC5C,UAAkB,EAClB,IAAgB,EAChB,UAAA,GAAqB,yBAAyB,EAAA;IAE9C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE;AAC3D,QAAA,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC;IAC5F;AACA,IAAA,MAAM,CAAC,GAAG,SAAS,EAAE;AACrB,IAAA,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,SAAS,CACnC,KAAK,EACL,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EACpC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAClB,KAAK,EACL,CAAC,YAAY,CAAC,CACjB;AACD,IAAA,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,UAAU,CAC3B;AACI,QAAA,IAAI,EAAE,QAAQ;AACd,QAAA,IAAI,EAAE,IAAoB;QAC1B,UAAU;AACV,QAAA,IAAI,EAAE,SAAS;AAClB,KAAA,EACD,aAAa,EACb,GAAG,CACN;AACD,IAAA,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC;AAC/B;AAEA;;;;;;;;;;AAUG;AACI,eAAe,cAAc,CAChC,gBAA4B,EAC5B,IAAY,EACZ,WAAmB,EACnB,IAAA,GAAmB,IAAI,UAAU,CAAC,CAAC,CAAC,EAAA;AAEpC,IAAA,IAAI,WAAW,IAAI,CAAC,EAAE;AAClB,QAAA,MAAM,IAAI,KAAK,CAAC,oDAAoD,WAAW,CAAA,CAAA,CAAG,CAAC;IACvF;AACA,IAAA,MAAM,CAAC,GAAG,SAAS,EAAE;IACrB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,SAAS,CACzB,KAAK,EACL,gBAAgC,EAChC,EAAE,IAAI,EAAE,MAAM,EAAE,EAChB,KAAK,EACL,CAAC,YAAY,CAAC,CACjB;AACD,IAAA,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,UAAU,CAC3B;AACI,QAAA,IAAI,EAAE,MAAM;AACZ,QAAA,IAAI,EAAE,SAAS;AACf,QAAA,IAAI,EAAE,IAAoB;QAC1B,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAiB;AACvD,KAAA,EACD,GAAG,EACH,WAAW,GAAG,CAAC,CAClB;AACD,IAAA,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC;AAC/B;;AClFA,MAAM,QAAQ,CAAA;IACF,OAAO,QAAQ;AACf,IAAA,KAAK,GAAyB,IAAI,GAAG,EAAE;AACvC,IAAA,SAAS,GAA6B,IAAI,GAAG,EAAE;AAEvD,IAAA,WAAA,GAAA,EAAwB;AAEjB,IAAA,OAAO,WAAW,GAAA;AACrB,QAAA,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE;AACpB,YAAA,QAAQ,CAAC,QAAQ,GAAG,IAAI,QAAQ,EAAE;QACtC;QACA,OAAO,QAAQ,CAAC,QAAQ;IAC5B;AAEA,IAAA,IAAI,IAAI,GAAA;QACJ,OAAO,IAAI,CAAC,KAAK;IACrB;AAEA,IAAA,IAAI,QAAQ,GAAA;QACR,OAAO,IAAI,CAAC,SAAS;IACzB;IAEO,MAAM,kBAAkB,CAAC,EAAU,EAAA;QACtC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;AACpB,YAAA,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAA,gBAAA,CAAkB,CAAC;QACzD;QACA,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAC/C,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EACrC,IAAI,EACJ,CAAC,WAAW,EAAE,YAAY,CAAC,CAC9B;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC;QAE5F,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAChD,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,IAAI,EACJ,CAAC,MAAM,EAAE,QAAQ,CAAC,CACrB;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC;QAElG,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;AAClD,QAAA,SAAS,CAAC,KAAK,CAAC,0BAA0B,EAAE,CAAA,YAAA,EAAe,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA,GAAA,CAAK,CAAC;AAChG,QAAA,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE;IACnF;AAEO,IAAA,MAAM,qBAAqB,CAAC,EAAU,EAAE,aAAwB,EAAE,cAAyB,EAAA;QAC9F,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE;AACnC,YAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;QACtE;QACA,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE;AAC3C,YAAA,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;QAC3E;QACA,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;AAClD,QAAA,SAAS,CAAC,KAAK,CAAC,iCAAiC,EAAE,CAAA,UAAA,EAAa,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA,GAAA,CAAK,CAAC;IACzG;AAEO,IAAA,MAAM,cAAc,CAAC,EAAU,EAAE,UAA0B,EAAA;AAC9D,QAAA,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC/C,KAAK,EACL,UAAU,EACV,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EACrC,IAAI,EACJ,EAAE,CACL;AACD,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AAChE,QAAA,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAChD,KAAK,EACL,WAAW,EACX,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,IAAI,EACJ,CAAC,QAAQ,CAAC,CACb;QACD,IAAI,cAAc,GAAqB,IAAI;QAC3C,IAAI,eAAe,GAAqB,IAAI;AAC5C,QAAA,IAAI,UAAU,CAAC,QAAQ,EAAE;AACrB,YAAA,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AAChE,YAAA,cAAc,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC1C,KAAK,EACL,WAAW,EACX,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EACrC,IAAI,EACJ,CAAC,WAAW,EAAE,YAAY,CAAC,CAC9B;QACL;AACA,QAAA,IAAI,UAAU,CAAC,SAAS,EAAE;AACtB,YAAA,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AAClE,YAAA,eAAe,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC3C,KAAK,EACL,YAAY,EACZ,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,IAAI,EACJ,CAAC,MAAM,CAAC,CACX;QACL;QACA,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE;AACnC,YAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;QAChF;QACA,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE;AAC3C,YAAA,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;QACtF;IACJ;AAEO,IAAA,UAAU,CAAC,EAAU,EAAA;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI;IACrC;AAEO,IAAA,cAAc,CAAC,EAAU,EAAA;QAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI;IACzC;IAEO,MAAM,gBAAgB,CAAC,EAAU,EAAA;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;AAC1C,QAAA,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE;AAC1B,YAAA,MAAM,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAA,CAAE,CAAC;QAC5C;AACA,QAAA,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC;QAC1E,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI;AACxG,QAAA,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,SAAS,CAAC;QAC/E,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,UAAU,CAAC,GAAG,IAAI;AACjH,QAAA,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACnE,MAAM,cAAc,GAAG,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE;AACxF,QAAA,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACrE,MAAM,eAAe,GAAG,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE;QAC3F,OAAO;AACH,YAAA,OAAO,EAAE,SAAS,CAAC,aAAa,CAAC;AACjC,YAAA,QAAQ,EAAE,cAAc,GAAG,SAAS,CAAC,cAAc,CAAC,GAAG,EAAE;AACzD,YAAA,QAAQ,EAAE,SAAS,CAAC,cAAc,CAAC;AACnC,YAAA,SAAS,EAAE,eAAe,GAAG,SAAS,CAAC,eAAe,CAAC,GAAG,EAAE;SAC/D;IACL;IAEO,MAAM,oBAAoB,CAAC,EAAU,EAAA;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,WAAW,EAAE;AACd,YAAA,OAAO,IAAI;QACf;AACA,QAAA,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,SAAS,CAAC;QACvE,MAAM,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAE,CAAC;;AAE/B,QAAA,OAAO,WAAW,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACpD;IAEO,MAAM,kBAAkB,CAAC,EAAU,EAAA;QACtC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;QAC3C,OAAOF,UAAQ,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvD;AAEO,IAAA,MAAM,iBAAiB,CAAC,EAAU,EAAE,SAAiB,EAAA;QACxD,MAAM,OAAO,GAAG,UAAU,CAACC,YAAU,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,UAAU,GAAmB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QACtD,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,UAAU,CAAC;IAC7C;AACH;;ACvKD;AACA;AACA;AAEA,eAAe,YAAY,CAAC,MAAiB,EAAA;AACzC,IAAA,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC;IAC7D,OAAO,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC1C;AAEA,eAAe,SAAS,CAAC,IAAe,EAAE,IAAe,EAAA;AACrD,IAAA,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC;AACrC,IAAA,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC;IACrC,OAAO,IAAI,KAAK,IAAI;AACxB;AAGA,MAAM,aAAa,CAAA;AACP,IAAA,KAAK;AACL,IAAA,WAAW;IACX,OAAO,GAAW,IAAI;AACtB,IAAA,aAAa,GAAW,KAAK,CAAC;AAC9B,IAAA,UAAU,GAAW,GAAG,CAAC;AAEjC,IAAA,WAAA,CAAY,QAAgB,EAAE,WAAmB,EAAE,WAAkC,EAAE,WAAoB,IAAI,EAAA;AAC3G,QAAA,IAAI,CAAC,WAAW,GAAG,WAAW;AAC9B,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE;QACvC,MAAM,aAAa,GAAG,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;QACnD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC;QAEzD,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE;AAC7C,YAAA,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,CAAA,CAAE,CAAC;QAClE;QACA,IAAI,CAAC,gBAAgB,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE;AAClD,YAAA,MAAM,IAAI,KAAK,CAAC,oCAAoC,WAAW,CAAA,CAAE,CAAC;QACtE;QAEA,IAAI,CAAC,KAAK,GAAG;YACT,YAAY,EAAE,QAAQ,GAAG,aAAa,CAAC,UAAU,GAAG,IAAI;AACxD,YAAA,WAAW,EAAE,QAAQ,GAAG,aAAa,CAAC,SAAS,GAAG,gBAAgB,CAAC,SAAS;YAC5E,YAAY,EAAE,QAAQ,GAAG,IAAI,GAAG,aAAa,CAAC,UAAU;AACxD,YAAA,WAAW,EAAE,QAAQ,GAAG,gBAAgB,CAAC,SAAS,GAAG,aAAa,CAAC,SAAS;AAC5E,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,YAAY,EAAE,IAAI;AAClB,YAAA,YAAY,EAAE,IAAI;AAClB,YAAA,SAAS,EAAE,CAAC;AACZ,YAAA,SAAS,EAAE,CAAC;AACZ,YAAA,eAAe,EAAE,CAAC;YAClB,kBAAkB,EAAE,IAAI,GAAG,EAAE;YAC7B,qBAAqB,EAAE,IAAI,GAAG,EAAE;SACnC;QAED,SAAS,CAAC,KAAK,CAAC,CAAA,sBAAA,EAAyB,QAAQ,CAAA,cAAA,EAAiB,WAAW,CAAA,WAAA,EAAc,QAAQ,CAAA,CAAE,CAAC;IAC1G;AAEQ,IAAA,IAAI,CAAC,KAAiB,EAAE,IAAY,EAAE,MAAc,EAAA;QACxD,OAAO,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC;IAC9C;AAEO,IAAA,MAAM,iBAAiB,CAAC,QAAA,GAAoB,IAAI,EAAA;QACnD,SAAS,CAAC,KAAK,CAAC,CAAA,+BAAA,EAAkC,QAAQ,CAAA,cAAA,EAAiB,IAAI,CAAC,WAAW,CAAA,CAAE,CAAC;AAC9F,QAAA,MAAM,OAAO,GAAG,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY;QAC5E,IAAI,CAAC,OAAO,EAAE;AACV,YAAA,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC;QAC9C;AACA,QAAA,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW;QAC5E,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAC/C,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,EACnC,OAAO,EACP,GAAG,CACN;AACD,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,mBAAmB,EAAE,EAAE,CAAC;AACnF,QAAA,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI;QACzB,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO;QAC5C,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO;AAC5C,QAAA,SAAS,CAAC,KAAK,CAAC,CAAA,wBAAA,CAA0B,CAAC;IAC/C;AAEQ,IAAA,MAAM,SAAS,CAAC,SAAoB,EAAE,WAAoB,IAAI,EAAA;AAClE,QAAA,SAAS,CAAC,KAAK,CAAC,wBAAwB,QAAQ,CAAA,CAAE,CAAC;AACnD,QAAA,MAAM,OAAO,GAAG,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY;QAC5E,IAAI,CAAC,OAAO,EAAE;AACV,YAAA,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC;QAC9C;QACA,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAC/C,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,EACnC,OAAO,EACP,GAAG,CACN;AACD,QAAA,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAQ,EAAE,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;AAC5E,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE,CAAC;AAC1D,QAAA,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO;QACjF,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS;AACjD,QAAA,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC;AACxB,QAAA,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC;AACxB,QAAA,SAAS,CAAC,KAAK,CAAC,CAAA,mBAAA,CAAqB,CAAC;IAC1C;IAEQ,MAAM,gBAAgB,CAAC,QAAoB,EAAA;AAC/C,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,EAAE,EAAE,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;AACrC,QAAA,SAAS,CAAC,KAAK,CAAC,CAAA,uCAAA,CAAyC,CAAC;AAC1D,QAAA,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC;IACpC;AAEO,IAAA,MAAM,OAAO,CAChB,SAAiB,EACjB,QAAA,GAAoB,KAAK,EACzB,QAAgB,EAChB,WAAmB,EACnB,SAAiB,EACjB,WAAkC,EAAA;AAElC,QAAA,IAAI,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE;YAClC,MAAM,IAAI,KAAK,CAAC,CAAA,gCAAA,EAAmC,IAAI,CAAC,WAAW,CAAA,MAAA,EAAS,WAAW,CAAA,CAAE,CAAC;QAC9F;AAEA,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE;QACvC,IAAI,IAAI,CAAC,WAAW,KAAK,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE;YACxG,QAAQ,GAAG,IAAI;QACnB;QACA,IAAI,QAAQ,IAAI,IAAI,CAAC,WAAW,KAAK,UAAU,EAAE;AAC7C,YAAA,SAAS,CAAC,KAAK,CAAC,kCAAkC,QAAQ,CAAA,CAAE,CAAC;YAC7D,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAC/C,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EACrC,IAAI,EACJ,CAAC,WAAW,EAAE,YAAY,CAAC,CAC9B;YACD,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,WAAW,CAAC,UAAuB;YAC7D,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC,SAAsB;YAC3D,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,WAAW,CAAC,UAAuB,EAAE,SAAS,EAAE,WAAW,CAAC,SAAsB,EAAE,CAAC;AAC/H,YAAA,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC;QACtD;AAEA,QAAA,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAa,CAAC;AACvF,QAAA,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,WAAW;AAErC,QAAA,MAAM,EAAE,GAAG,WAAW,CAACC,kBAAgB,CAAC;AACxC,QAAA,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,EAAE,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;AAC5E,QAAA,MAAM,iBAAiB,GAAG,KAAK,CAAC,SAAS,CAAC;AAC1C,QAAA,SAAS,CAAC,KAAK,CAAC,CAAA,yBAAA,EAA4B,SAAS,CAAC,MAAM,CAAA,mBAAA,EAAsB,SAAS,CAAC,UAAU,CAAA,CAAE,CAAC;AAEzG,QAAA,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;QACtB,MAAM,gBAAgB,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC;AAClE,QAAA,MAAM,MAAM,GAAwB;YAChC,KAAK,EAAE,gBAAgB,CAAC,OAAO;AAC/B,YAAA,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe;AAC3C,YAAA,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;YACnC,SAAS;YACT,WAAW;YACX,QAAQ;YACR,WAAW;AACX,YAAA,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;AACrB,YAAA,SAAS,EAAE,EAAE;SAChB;AACD,QAAA,SAAS,CAAC,KAAK,CAAC,iBAAiB,EAAE,MAAM,CAAC;AAC1C,QAAA,SAAS,CAAC,KAAK,CAAC,CAAA,eAAA,CAAiB,EAAE,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAE,CAAC,UAAW,CAAC;AAClF,QAAA,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CACjC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAClC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAE,CAAC,UAAW,EAC9C,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;YACtB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,SAAS;YACT,WAAW;YACX,QAAQ;YACR,WAAW;YACX,SAAS,EAAE,MAAM,CAAC;SACrB,CAAC,CAAC,CACN;QACD,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AAE9C,QAAA,SAAS,CAAC,KAAK,CAAC,CAAA,qBAAA,EAAwB,SAAS,mBAAmB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAA,SAAA,EAAY,QAAQ,eAAe,WAAW,CAAA,CAAE,CAAC;QACzI,OAAO;YACH,MAAM;AACN,YAAA,UAAU,EAAE,iBAAiB;AAC7B,YAAA,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;SACnB;IACL;IAEQ,mBAAmB,GAAA;AACvB,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACtB,QAAA,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,OAAO,EAAE,EAAE;;AAE9D,YAAA,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;AACzB,YAAA,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC;AACvB,YAAA,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO;YAC5B,IAAI,GAAG,GAAG,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE;gBACpC,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC;YACnD;QACJ;IACJ;AAEO,IAAA,MAAM,OAAO,CAAC,OAAsB,EAAE,WAAoB,IAAI,EAAA;;AAEjE,QAAA,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;AAC7B,QAAA,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU;AACrC,QAAA,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK;QAC3B,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE;AACzC,YAAA,MAAM,IAAI,KAAK,CAAC,CAAA,gCAAA,EAAmC,IAAI,CAAC,WAAW,CAAA,MAAA,EAAS,MAAM,CAAC,WAAW,CAAA,CAAE,CAAC;QACrG;AAEA,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE;AACvC,QAAA,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACrC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAClC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAE,CAAC,SAAS,EACnD,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EACzB,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;YACtB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC;SACrB,CAAC,CAAC,CACN;QACD,IAAI,CAAC,MAAM,EAAE;AACT,YAAA,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC;QACxC;AAEA,QAAA,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI;AAC5B,QAAA,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE;AAClD,YAAA,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC;QACpE;QAEA,SAAS,CAAC,KAAK,CAAC,CAAA,sBAAA,EAAyB,MAAM,CAAC,SAAS,mBAAmB,MAAM,CAAC,aAAa,CAAA,SAAA,EAAY,MAAM,CAAC,QAAQ,CAAA,YAAA,EAAe,MAAM,CAAC,WAAW,CAAA,CAAE,CAAC;QAE/J,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;AACxC,YAAA,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;QAC3E;AAEA,QAAA,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE;YACnE,MAAM,IAAI,KAAK,CAAC,CAAA,mDAAA,EAAsD,UAAU,CAAC,MAAM,CAAA,CAAA,CAAG,CAAC;QAC/F;AAEA,QAAA,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE;YACzD,MAAM,IAAI,KAAK,CAAC,CAAA,8CAAA,EAAiD,KAAK,CAAC,MAAM,CAAA,CAAA,CAAG,CAAC;QACrF;AAEA,QAAA,MAAM,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;AAC5C,QAAA,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;AAClC,QAAA,IAAI,WAAW,CAAC,MAAM,KAAK,EAAE,EAAE;YAC3B,MAAM,IAAI,KAAK,CAAC,CAAA,wCAAA,EAA2C,WAAW,CAAC,MAAM,CAAA,CAAA,CAAG,CAAC;QACrF;AAEA,QAAA,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC9C,KAAK,EACL,YAAY,EACZ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EACrC,IAAI,EACJ,EAAE,CACL;AACD,QAAA,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,YAAyB,CAAC;AAClE,QAAA,MAAM,gBAAgB,GAAG,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW;AACnF,QAAA,MAAM,mBAAmB,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC;QAEhE,IAAI,CAAC,mBAAmB,EAAE;AAE1B,QAAA,IAAI,UAAsB;AAC1B,QAAA,IAAI,YAAY,KAAK,mBAAmB,EAAE;;YAEtC,IAAI,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;AAC7C,gBAAA,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC;AAChE,gBAAA,IAAI,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE;AACzB,oBAAA,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC;gBAChD;AACA,gBAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE;AAC/B,oBAAA,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAa,CAAC;AACvF,oBAAA,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;AAC3E,oBAAA,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,WAAW;gBACzC;YACJ;AAEA,YAAA,IAAI,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE;AACzD,gBAAA,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAE;gBACrE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;gBAC1D,SAAS,CAAC,KAAK,CAAC,CAAA,oCAAA,EAAuC,MAAM,CAAC,aAAa,CAAA,CAAE,CAAC;YAClF;iBAAO;AACH,gBAAA,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAa,CAAC;gBACnF,UAAU,GAAG,MAAM;AACnB,gBAAA,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,WAAW;YACzC;AAEA,YAAA,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC;QAC/E;aAAO;;AAEH,YAAA,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAE,CAAC,SAAS;YACtE,IAAI,EAAE,MAAM,SAAS,CAAC,YAAyB,EAAE,cAAc,CAAC,CAAC,EAAE;;gBAE/D,MAAM,eAAe,GAAG,mBAAmB;gBAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS;AAC9D,gBAAA,IAAI,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE;AACzB,oBAAA,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC;gBAC7D;AACA,gBAAA,IAAI,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,KAAK,IAAI,IAAI,GAAG,EAAsB;AAC5G,gBAAA,IAAI,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,YAAa;AAC/C,gBAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE;AAC/B,oBAAA,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC;AAC/E,oBAAA,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;oBACtD,gBAAgB,GAAG,WAAW;gBAClC;gBACA,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;;AAG/F,gBAAA,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE;;gBAGrC,MAAM,IAAI,CAAC,SAAS,CAAC,YAAyB,EAAE,QAAQ,CAAC;;gBAGzD,IAAI,QAAQ,EAAE;AACV,oBAAA,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,YAAyB;gBACtD;qBAAO;AACH,oBAAA,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,YAAyB;gBACtD;;gBAGA,QAAQ,CAAC,qBAAqB,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAyB,EAAE,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAE,CAAC,SAAS,CAAC;;gBAG/H,IAAI,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;AAC7C,oBAAA,MAAM,WAAW,GAAG,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC;AACnE,oBAAA,IAAI,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE;AAC5B,wBAAA,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC;oBAChD;AACA,oBAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE;AAClC,wBAAA,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAa,CAAC;AACvF,wBAAA,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;AAC3E,wBAAA,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,WAAW;oBACzC;gBACJ;AAEA,gBAAA,IAAI,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE;AACzD,oBAAA,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAE;oBACrE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;gBAC9D;qBAAO;AACH,oBAAA,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAa,CAAC;oBACnF,UAAU,GAAG,MAAM;AACnB,oBAAA,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,WAAW;gBACzC;AAEA,gBAAA,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC;YAC/E;iBAAO;;AAEH,gBAAA,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC;AAClE,gBAAA,IAAI,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE;oBACpD,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAE;oBACrD,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;oBAC1C,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE;wBAC1B,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC;oBACzD;oBACA,SAAS,CAAC,KAAK,CAAC,CAAA,wCAAA,EAA2C,MAAM,CAAC,aAAa,CAAA,aAAA,CAAe,CAAC;gBACnG;qBAAO;AACH,oBAAA,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC;gBACtD;YACJ;QACJ;AAEA,QAAA,IAAI;YACA,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,gBAAgB,CAAC;AAChF,YAAA,SAAS,CAAC,KAAK,CAAC,CAAA,kCAAA,EAAqC,MAAM,CAAC,SAAS,CAAA,gBAAA,EAAmB,MAAM,CAAC,aAAa,CAAA,CAAE,CAAC;YAC/G,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;QAC9C;QAAE,OAAO,KAAK,EAAE;AACZ,YAAA,SAAS,CAAC,KAAK,CAAC,sBAAsB,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,eAAe,CAAA,CAAE,CAAC;AACjG,YAAA,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,eAAe,CAAA,CAAE,CAAC;QACrG;IACJ;IAEO,QAAQ,GAAA;AACX,QAAA,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE;IAC5B;AAEO,IAAA,QAAQ,CAAC,KAAmB,EAAA;AAC/B,QAAA,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE;IAC7B;AACH;;AC1XD;MACa,eAAe,CAAA;AACxB,IAAA,UAAU;AACV,IAAA,KAAK;AACL,IAAA,YAAY;AAEZ,IAAA,WAAA,CAAY,UAAkB,EAAE,KAAa,EAAE,YAAoB,EAAA;AAC/D,QAAA,IAAI,CAAC,UAAU,GAAG,UAAU;AAC5B,QAAA,IAAI,CAAC,KAAK,GAAG,KAAK;AAClB,QAAA,IAAI,CAAC,YAAY,GAAG,YAAY;IACpC;IAEA,eAAe,GAAA;AACX,QAAA,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC;IAC3D;AACH;AAED;MACa,KAAK,CAAA;AACN,IAAA,KAAK;IACN,OAAgB,UAAU,GAAG,MAAM,CAAC,+EAA+E,CAAC,CAAC;AAE5H,IAAA,WAAA,CAAY,KAA+B,EAAA;AACvC,QAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;AAC3B,YAAA,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC9B;AAAO,aAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;AAClC,YAAA,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC9B;aAAO;AACH,YAAA,IAAI,CAAC,KAAK,GAAG,KAAK;QACtB;;QAEA,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,UAAU;AAC1C,QAAA,IAAI,IAAI,CAAC,KAAK,GAAG,EAAE,EAAE;AACjB,YAAA,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU;QAClC;IACJ;IAEA,QAAQ,GAAA;QACJ,OAAO,IAAI,CAAC,KAAK;IACrB;IAEA,QAAQ,GAAA;AACJ,QAAA,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE;IAChC;IAEA,KAAK,GAAA;AACD,QAAA,OAAO,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC;IAC3D;AAEA,IAAA,MAAM,CAAC,KAAY,EAAA;AACf,QAAA,OAAO,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;IACrC;IAEA,OAAO,OAAO,CAAC,GAAW,EAAA;QACtB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;AACvB,YAAA,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC;QACzC;QACA,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjC;;AAGJ;AACA,IAAI,cAAc,GAAQ,IAAI;AAC9B,IAAI,SAAS,GAAQ,IAAI;AAEzB,eAAeC,cAAY,GAAA;IACvB,IAAI,CAAC,cAAc,EAAE;AACjB,QAAA,IAAI;;YAEA,MAAM,aAAa,GAAG,CAAC,MAAM,OAAO,aAAa,CAAC,EAAE,aAAa;AACjE,YAAA,MAAM,eAAe,GAAG,MAAM,aAAa,EAAE;YAC7C,cAAc,GAAG,eAAe;AAChC,YAAA,SAAS,GAAG,eAAe,CAAC,CAAC;QACjC;QAAE,OAAO,KAAK,EAAE;AACZ,YAAA,OAAO,CAAC,IAAI,CAAC,sDAAsD,EAAE,KAAK,CAAC;;AAE3E,YAAA,cAAc,GAAG,OAAO,MAAa,KAAI;gBACrC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AACnD,gBAAA,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE;AACjC,gBAAA,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC9E,gBAAA,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;AACxD,gBAAA,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5E,OAAO,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,KAAK,CAAC,UAAU;AACpD,YAAA,CAAC;AACD,YAAA,SAAS,GAAG;gBACR,QAAQ,EAAE,CAAC,GAAQ,KAAK,GAAG,CAAC,QAAQ;aACvC;QACL;IACJ;IACA,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE,SAAS,EAAE;AACrD;AAEA;MACa,QAAQ,CAAA;AACjB,IAAA,aAAa,IAAI,CAAC,MAAe,EAAA;QAC7B,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,MAAMA,cAAY,EAAE;AAC5C,QAAA,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;AAClD,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,YAAY,CAAC;QACzC,MAAM,UAAU,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QACzC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxC;AACH;AAED;AACM,SAAU,WAAW,CAAC,KAAY,EAAA;AACpC,IAAA,OAAO,KAAK,CAAC,KAAK,EAAE;AACxB;AAEA;AACM,SAAU,aAAa,CAAC,MAAc,EAAA;AACxC,IAAA,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;AAChC;AASA;MACa,aAAa,CAAA;IACd,OAAO,UAAU;IACjB,OAAO,UAAU;IACjB,OAAO,eAAe;AAE9B,IAAA,OAAO,iBAAiB,CAAC,IAAgB,EAAE,IAAgB,EAAE,eAAgC,EAAA;AACzF,QAAA,IAAI,CAAC,UAAU,GAAG,IAAI;AACtB,QAAA,IAAI,CAAC,UAAU,GAAG,IAAI;AACtB,QAAA,IAAI,CAAC,eAAe,GAAG,eAAe;IAC1C;IAEA,aAAa,OAAO,GAAA;AAChB,QAAA,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE;AACvB,YAAA,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC;QAC/E;AACA,QAAA,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE;IACpD;AAEA,IAAA,aAAa,KAAK,CAAC,MAAa,EAAA;QAC5B,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;AACtC,YAAA,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC;QAC/E;;QAGA,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC;;AAG7B,QAAA,MAAM,KAAK,GAAG;AACV,YAAA,MAAM,EAAE,MAAM,CAAC,QAAQ;SAC1B;;AAGD,QAAA,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAMC,KAAY,CAC/C,KAAK,EACL,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,UAAU,CAClB;AAED,QAAA,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,aAAyB,EAAE;IAC9D;AAEA,IAAA,aAAa,MAAM,CAAC,KAAiB,EAAE,aAAwB,EAAA;AAC3D,QAAA,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE;AACvB,YAAA,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC;QAC/E;AAEA,QAAA,IAAI;;;YAGA,MAAM,MAAM,GAAG,MAAMC,QAAa,CAC9B,IAAI,CAAC,eAAe,EACpB,EAAE,KAAK,EAAE,KAAgE,EAAE,aAAa,GAAG,aAAa,IAAI,EAAE,CAAyB,EAAE,CAC5I;AACD,YAAA,OAAO,MAAM;QACjB;QAAE,OAAO,KAAK,EAAE;AACZ,YAAA,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC;AAC3C,YAAA,OAAO,KAAK;QAChB;IACJ;AACH;AAED;MACa,WAAW,CAAA;IACZ,OAAO,UAAU;IACjB,OAAO,UAAU;IACjB,OAAO,eAAe;AAE9B,IAAA,OAAO,iBAAiB,CAAC,IAAgB,EAAE,IAAgB,EAAE,eAAgC,EAAA;AACzF,QAAA,IAAI,CAAC,UAAU,GAAG,IAAI;AACtB,QAAA,IAAI,CAAC,UAAU,GAAG,IAAI;AACtB,QAAA,IAAI,CAAC,eAAe,GAAG,eAAe;IAC1C;IAEA,aAAa,OAAO,GAAA;AAChB,QAAA,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE;AACvB,YAAA,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC;QAC/E;AACA,QAAA,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE;IACpD;IAEA,aAAa,KAAK,CACd,WAA4B,EAC5B,MAAa,EACb,IAAW,EACX,QAAe,EAAA;QAEf,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;AACtC,YAAA,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC;QAC/E;;AAGA,QAAA,MAAM,KAAK,GAAG;;YAEV,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,YAAY,EAAE,WAAW,CAAC,YAAY;;AAEtC,YAAA,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;AACzB,YAAA,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;AACrB,YAAA,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC9B;;AAGD,QAAA,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAMD,KAAY,CAC/C,KAAK,EACL,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,UAAU,CAClB;AAED,QAAA,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,aAAyB,EAAE;IAC9D;AAEA,IAAA,aAAa,MAAM,CAAC,KAAiB,EAAE,aAAwB,EAAA;AAC3D,QAAA,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE;AACvB,YAAA,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC;QAC/E;AAEA,QAAA,IAAI;;;YAGA,MAAM,MAAM,GAAG,MAAMC,QAAa,CAC9B,IAAI,CAAC,eAAe,EACpB,EAAE,KAAK,EAAE,KAAgE,EAAE,aAAa,GAAG,aAAa,IAAI,EAAE,CAAyB,EAAE,CAC5I;AACD,YAAA,OAAO,MAAM;QACjB;QAAE,OAAO,KAAK,EAAE;AACZ,YAAA,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC;AAC3C,YAAA,OAAO,KAAK;QAChB;IACJ;AACH;AAED;AACO,eAAe,mBAAmB,CACrC,KAAiB,EACjB,cAAsB,EACtB,aAAwB,EAAA;AAExB,IAAA,IAAI;QACA,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC;QAE/D,IAAI,CAAC,MAAM,EAAE;AACT,YAAA,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC;AACzD,YAAA,OAAO,KAAK;QAChB;;QAGA,IAAI,cAAc,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE;YAC7D,MAAM,WAAW,GAAG,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE;AACrC,gBAAA,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC;AAC/D,gBAAA,OAAO,KAAK;YAChB;QACJ;AAEA,QAAA,OAAO,IAAI;IACf;IAAE,OAAO,KAAK,EAAE;AACZ,QAAA,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC;AAC7D,QAAA,OAAO,KAAK;IAChB;AACJ;AAEA;AACO,eAAe,iBAAiB,CACnC,KAAiB,EACjB,aAAwB,EAAA;AAExB,IAAA,IAAI;QACA,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC;QAE7D,IAAI,CAAC,MAAM,EAAE;AACT,YAAA,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC;AACnD,YAAA,OAAO,KAAK;QAChB;AAEA,QAAA,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC;AACnD,QAAA,OAAO,IAAI;IACf;IAAE,OAAO,KAAK,EAAE;AACZ,QAAA,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC;AACvD,QAAA,OAAO,KAAK;IAChB;AACJ;AAEA;AACO,eAAe,MAAM,CACxB,WAA4C,EAC5C,KAAiB,EACjB,OAGC,EAAA;AAED,IAAA,IAAI,WAAW,KAAK,eAAe,EAAE;AACjC,QAAA,OAAO,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,CAAC;IACtF;AAAO,SAAA,IAAI,WAAW,KAAK,aAAa,EAAE;QACtC,OAAO,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC;IAC3D;SAAO;AACH,QAAA,MAAM,IAAI,KAAK,CAAC,yBAAyB,WAAW,CAAA,CAAE,CAAC;IAC3D;AACJ;AAEA;AACO,eAAe,WAAW,CAC7B,OAAkD,EAClD,KAAiB,EACjB,aAAwB,EAAA;AAExB,IAAA,IAAI;QACA,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC;IACrD;IAAE,OAAO,KAAK,EAAE;AACZ,QAAA,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC;AAC5C,QAAA,OAAO,KAAK;IAChB;AACJ;AAEA;AACM,SAAU,kBAAkB,CAAC,MAGlC,EAAA;AACG,IAAA,IAAI,MAAM,CAAC,aAAa,EAAE;QACtB,aAAa,CAAC,iBAAiB,CAC3B,MAAM,CAAC,aAAa,CAAC,IAAI,EACzB,MAAM,CAAC,aAAa,CAAC,IAAI,EACzB,MAAM,CAAC,aAAa,CAAC,eAAe,CACvC;IACL;AACA,IAAA,IAAI,MAAM,CAAC,WAAW,EAAE;QACpB,WAAW,CAAC,iBAAiB,CACzB,MAAM,CAAC,WAAW,CAAC,IAAI,EACvB,MAAM,CAAC,WAAW,CAAC,IAAI,EACvB,MAAM,CAAC,WAAW,CAAC,eAAe,CACrC;IACL;AACJ;AAEA;AACO,eAAe,eAAe,GAAA;AAIjC,IAAA,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IAEvC,MAAM,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnE,aAAa,CAAC,OAAO,EAAE;QACvB,WAAW,CAAC,OAAO;AACtB,KAAA,CAAC;AAEF,IAAA,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC;IAEhD,OAAO;AACH,QAAA,aAAa,EAAE,qBAAqB;AACpC,QAAA,WAAW,EAAE;KAChB;AACL;;AC5XA,MAAM,aAAa,CAAA;AACP,IAAA,WAAW,GAA2B,IAAI,GAAG,EAAE;IAC/C,iBAAiB,GAA2B,IAAI;AAEjD,IAAA,MAAM,YAAY,GAAA;AACrB,QAAA,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;AACzB,YAAA,SAAS,CAAC,KAAK,CAAC,2CAA2C,CAAC;AAC5D,YAAA,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE;AAC5C,YAAA,IAAI,CAAC,iBAAiB,GAAG,QAAQ,CAAC,eAAe;QACrD;IACJ;IAEO,oBAAoB,GAAA;QACvB,OAAO,IAAI,CAAC,iBAAiB;IACjC;IAEO,gBAAgB,CAAC,QAAgB,EAAE,SAAoB,EAAA;QAC1D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC;IAC7C;AAEO,IAAA,MAAM,iBAAiB,CAAC,MAAc,EAAE,UAAqB,EAAA;QAChE,IAAI,CAAC,UAAU,EAAE;AACb,YAAA,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAA,CAAE,CAAC;QACnD;AACA,QAAA,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;AAC5B,QAAA,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,SAAS,CAAA,CAAE,CAAC;QAC/D,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CACtC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAClC,UAAU,EACV,IAAI,CACP;AACD,QAAA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE;IAC7E;AAEO,IAAA,MAAM,eAAe,CAAC,KAAgB,EAAE,eAA0B,EAAA;AACrE,QAAA,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI;AAC5B,QAAA,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE;AACjD,YAAA,SAAS,CAAC,KAAK,CAAC,oBAAoB,CAAC;AACrC,YAAA,OAAO,KAAK;QAChB;AACA,QAAA,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC7B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAClC,eAAe,EACf,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EACxB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAA,EAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,CAAA,CAAE,CAAC,CACjE;IACL;IAEO,MAAM,aAAa,CACtB,KAAU,EACV,WAA4B,EAC5B,gBAAuB,EACvB,QAAmB,EAAA;AAEnB,QAAA,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;AACzB,YAAA,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC;QAC1D;;AAGA,QAAA,MAAM,aAAa,GAAG,WAAW,CAAC,eAAe,EAAE;;AAGnD,QAAA,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,EAAE,aAAa,EAAE,CAAC;QACrE,IAAI,CAAC,OAAO,EAAE;AACV,YAAA,SAAS,CAAC,KAAK,CAAC,8BAA8B,CAAC;AAC/C,YAAA,OAAO,KAAK;QAChB;;QAGA,MAAM,eAAe,GAAG,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,iBAAiB,GAAG,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC;;QAGlE,MAAM,UAAU,GAAG,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC;QAClD,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC;;AAGrD,QAAA,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC;AAC/D,QAAA,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;AAC/D,QAAA,MAAM,aAAa,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC;QACxD,MAAM,oBAAoB,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;QACjE,MAAM,iBAAiB,GAAG,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,eAAe,GAAG,iBAAiB,CAAC,MAAM,CAAC,oBAAoB,CAAC;AAEtE,QAAA,SAAS,CAAC,KAAK,CAAC,iBAAiB,EAAE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,eAAe,CAAC;AAChI,QAAA,OAAO,OAAO,IAAI,iBAAiB,IAAI,YAAY,IAAI,eAAe;IAC1E;AACH;;ACzFD,MAAM,oBAAoB,CAAA;AACd,IAAA,QAAQ,GAA+B,IAAI,GAAG,EAAE;AAChD,IAAA,aAAa,GAA8B,IAAI,GAAG,EAAE,CAAC;AACrD,IAAA,QAAQ;AACR,IAAA,cAAc;AACd,IAAA,eAAe,GAAoD,IAAI,GAAG,EAAE;IAC5E,EAAE,CAAS;AAEnB,IAAA,WAAA,CAAY,EAAU,EAAA;AAClB,QAAA,IAAI,CAAC,EAAE,GAAG,EAAE;AACZ,QAAA,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE;AACtC,QAAA,IAAI,CAAC,cAAc,GAAG,IAAI,aAAa,EAAE;IAC7C;AAEA,IAAA,IAAI,aAAa,GAAA;QACb,OAAO,IAAI,CAAC,cAAc;IAC9B;AAEO,IAAA,MAAM,gBAAgB,CAAC,QAAgB,EAAE,SAAoB,EAAA;QAChE,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC;IAC7D;IAEO,MAAM,UAAU,CACnB,QAAgB,EAChB,MAAa,EACb,IAAW,EACX,QAAmB,EAAA;AAEnB,QAAA,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE;AACxC,QAAA,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC;AAC/D,QAAA,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;AAC/D,QAAA,MAAM,aAAa,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC;QACxD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AACzD,QAAA,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;AACpE,QAAA,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;;;AAGxD,QAAA,SAAS,CAAC,KAAK,CAAC,8BAA8B,QAAQ,CAAA,CAAE,CAAC;IAC7D;AAEO,IAAA,MAAM,gBAAgB,CACzB,QAAgB,EAChB,WAAmB,EACnB,OAAY,EACZ,WAA4B,EAC5B,eAA0B;AAC1B,IAAA,mBAA8B;AAC9B,IAAA,SAAoB;;AAEpB,QAAA,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE;QAExC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC;QACnD,IAAI,CAAC,QAAQ,EAAE;AACX,YAAA,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAA,CAAE,CAAC;QAC/D;AAEA,QAAA,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CACrD,OAAO,EACP,WAAW,EACX,QAAQ,CAAC,UAAU,EACnB,mBAAmB,CACtB;QACD,IAAI,CAAC,SAAS,EAAE;AACZ,YAAA,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,CAAA,CAAE,CAAC;QAC1D;;AAGA,QAAA,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,SAAS,EAAE,mBAAmB,CAAC,EAAE;AAC5E,YAAA,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAA,CAAE,CAAC;QAChE;;AAGA,QAAA,MAAM,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,QAAQ,EAAE,eAAe,EAAE,mBAAmB,CAAC;QACzF,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAE;QAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,WAAW,CAAE;AAC7D,QAAA,MAAM,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,WAAW,EAAE,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC;QACrG,SAAS,CAAC,KAAK,CAAC,CAAA,wBAAA,EAA2B,QAAQ,CAAA,IAAA,EAAO,WAAW,CAAA,CAAE,CAAC;IAC5E;IAEO,MAAM,iBAAiB,CAC1B,QAAgB,EAChB,WAAmB,EACnB,QAAA,GAAoB,IAAI,EACxB,WAAA,GAAqC,UAAU,EAC/C,SAAkB,EAClB,OAAa,EACb,WAA6B,EAC7B,eAA2B,EAC3B,mBAA+B,EAC/B,oBAAgC,EAChC,oBAAgC,EAAA;AAEhC,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE;QACvC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC;QACzD,IAAI,CAAC,gBAAgB,EAAE,SAAS,IAAI,WAAW,KAAK,UAAU,IAAI,QAAQ,EAAE;;AAExE,YAAA,MAAM,SAAS,GAAG,oBAAoB;gBAClC,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,QAAQ,EAAE,oBAAoB,CAAC;AAC3E,gBAAA,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAE,CAAC,UAAW,CAAC;AAE9G,YAAA,MAAM,IAAI,CAAC,gBAAgB,CACvB,QAAQ,EACR,WAAW,EACX,OAAQ,EACR,WAAY,EACZ,eAAgB,EAChB,mBAAoB,EACpB,SAAS,CACZ;QACL;AAAO,aAAA,IAAI,CAAC,gBAAgB,EAAE,SAAS,EAAE;AACrC,YAAA,MAAM,IAAI,KAAK,CAAC,0BAA0B,WAAW,CAAA,sCAAA,CAAwC,CAAC;QAClG;AAEA,QAAA,MAAM,cAAc,GAAG,SAAS,KAAK,WAAW,KAAK;cAC/C,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA,CAAA,EAAI,IAAI,CAAC,GAAG,EAAE,CAAA;AAC3D,cAAE,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,WAAW,CAAA,CAAA,EAAI,IAAI,CAAC,GAAG,EAAE,CAAA,CAAE,CAAC;AAEjD,QAAA,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC;AAC/E,QAAA,MAAM,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC;QAC1C,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;QACxD,SAAS,CAAC,KAAK,CAAC,CAAA,qBAAA,EAAwB,cAAc,CAAA,OAAA,EAAU,WAAW,CAAA,CAAE,CAAC;AAC9E,QAAA,OAAO,cAAc;IACzB;AAEO,IAAA,MAAM,OAAO,CAChB,QAAgB,EAChB,WAAmB,EACnB,SAAiB,EACjB,SAAiB,EACjB,QAAA,GAAoB,KAAK,EACzB,cAAqC,UAAU,EAAA;QAE/C,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE;YACV,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;AAC7C,YAAA,IAAI,CAAC,KAAK;AAAE,gBAAA,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,CAAA,CAAE,CAAC;AAC9D,YAAA,OAAO,GAAG,IAAI,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC;AACtE,YAAA,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;YACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC;QACzC;AAEA,QAAA,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC;QACzG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;AACnD,QAAA,SAAS,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAA,EAAG,EAAE,CAAA,WAAA,CAAa,CAAC,CAAC;AACtH,QAAA,OAAO,OAAO;IAClB;AAEO,IAAA,MAAM,OAAO,CAAC,OAAsB,EAAE,WAAoB,IAAI,EAAA;;AAEjE,QAAA,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;AAC7B,QAAA,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;QACjD,IAAI,CAAC,OAAO,EAAE;YACV,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;AACpD,YAAA,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,CAAA,mBAAA,EAAsB,MAAM,CAAC,SAAS,CAAA,CAAE,CAAC;AACrE,YAAA,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC;AAC9F,YAAA,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;YACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC;QAChD;QAEA,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC;AAC1D,QAAA,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;AAC1D,QAAA,OAAO,SAAS;IACpB;IAEO,MAAM,sBAAsB,CAAC,SAAiB,EAAA;QACjD,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE;YACV,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;YAC7C,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;AAC1B,gBAAA,SAAS,CAAC,KAAK,CAAC,uCAAuC,SAAS,CAAA,CAAE,CAAC;AACnE,gBAAA,OAAO,IAAI;YACf;YACA,OAAO,KAAK,CAAC,OAAO;QACxB;AAEA,QAAA,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE;AAChC,QAAA,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;AAChB,YAAA,SAAS,CAAC,KAAK,CAAC,WAAW,SAAS,CAAA,oBAAA,CAAsB,CAAC;AAC3D,YAAA,OAAO,IAAI;QACf;QAEA,OAAO,KAAK,CAAC,OAAO;IACxB;AAEQ,IAAA,MAAM,SAAS,CAAC,SAAiB,EAAE,KAAmB,EAAA;AAC1D,QAAA,SAAS,CAAC,KAAK,CAAC,qCAAqC,SAAS,CAAA,CAAE,CAAC;;;AAGjE,QAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA,EAAG,IAAI,CAAC,EAAE,IAAI,SAAS,CAAA,CAAE,EAAE,KAAK,CAAC;IAC5D;IAEQ,MAAM,SAAS,CAAC,SAAiB,EAAA;AACrC,QAAA,SAAS,CAAC,KAAK,CAAC,wCAAwC,SAAS,CAAA,CAAE,CAAC;;AAEpE,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA,EAAG,IAAI,CAAC,EAAE,CAAA,CAAA,EAAI,SAAS,CAAA,CAAE,CAAC;QAC/D,OAAO,KAAK,IAAI,IAAI;IACxB;AACH;;AC9MD;;;;;;;;;;;;;;;;AAgBG;MAwBU,WAAW,CAAA;AACpB;;;;AAIG;IACH,mBAAmB,GAAA;QACf,OAAO;AACH,YAAA,GAAG,EAAEL,UAAQ,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;AAC7C,YAAA,EAAE,EAAEA,UAAQ,CAAC,WAAW,CAACE,kBAAgB,CAAC,CAAC;SAC9C;IACL;AAEA;;;;AAIG;AACH,IAAA,MAAM,YAAY,CAAC,SAAqB,EAAE,QAA0B,EAAA;AAChE,QAAA,OAAO,aAAa,CAACD,YAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAEA,YAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC;IACtF;AAEA;;;;AAIG;AACH,IAAA,MAAM,YAAY,CAAC,UAAsB,EAAE,QAA0B,EAAA;AACjE,QAAA,IAAI;AACA,YAAA,OAAO,MAAM,aAAa,CACtBA,YAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EACxBA,YAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,EACvB,UAAU,CACb;QACL;AAAE,QAAA,MAAM;;;AAGJ,YAAA,MAAM,IAAI,KAAK,CACX,0GAA0G,CAC7G;QACL;IACJ;AACH;;AClFD;;;;;;;;;;;;;;;;;;AAkBG;AA8BH;AACA,MAAM,UAAU,GAAG,EAAE;AAErB;AACA,SAASK,eAAa,CAAC,KAAiB,EAAA;;IAEpC,IAAI,MAAM,GAAG,EAAE;IACf,MAAM,KAAK,GAAG,MAAM;AACpB,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK,EAAE;AAC1C,QAAA,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC;IAClE;IACA,IAAI,OAAO,IAAI,KAAK,UAAU;AAAE,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC;IACnD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;AAChD;AAEA;AACA,SAAS,aAAa,CAAC,GAAW,EAAA;AAC9B,IAAA,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE;AAC5B,QAAA,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC;QACxB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;AAC3C,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;AACvE,QAAA,OAAO,KAAK;IAChB;AACA,IAAA,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACrD;AAEA;;;;AAIG;AACI,eAAe,kBAAkB,CACpC,UAAkB,EAClB,SAAqB,EAAA;IAErB,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE;AAC3D,QAAA,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC;IAChF;AACA,IAAA,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC;AACpC,IAAA,MAAM,EAAE,GAAG,WAAW,CAACJ,kBAAgB,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,0BAA0B,CAAC,UAAU,EAAE,IAAI,EAAE,yBAAyB,CAAC;IACzF,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC;IAC1D,OAAO;AACH,QAAA,IAAI,EAAEI,eAAa,CAAC,IAAI,CAAC;AACzB,QAAA,EAAE,EAAEA,eAAa,CAAC,EAAE,CAAC;AACrB,QAAA,UAAU,EAAEA,eAAa,CAAC,UAAU,CAAC;AACrC,QAAA,GAAG,EAAE,2BAA2B;AAChC,QAAA,IAAI,EAAE,yBAAyB;KAClC;AACL;AAEA;;;;AAIG;AACI,eAAe,oBAAoB,CACtC,UAAkB,EAClB,OAAuB,EAAA;IAEvB,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE;AAC3D,QAAA,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC;IAClF;AACA,IAAA,IAAI,OAAO,CAAC,GAAG,KAAK,2BAA2B,EAAE;QAC7C,MAAM,IAAI,KAAK,CAAC,CAAA,uCAAA,EAA0C,OAAO,CAAC,GAAG,CAAA,CAAA,CAAG,CAAC;IAC7E;IACA,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC;IACxC,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC;AACpD,IAAA,MAAM,GAAG,GAAG,MAAM,0BAA0B,CACxC,UAAU,EACV,IAAI,EACJ,OAAO,CAAC,IAAI,IAAI,yBAAyB,CAC5C;AACD,IAAA,IAAI;QACA,OAAO,MAAM,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,UAAU,CAAC;IACnD;AAAE,IAAA,MAAM;;;AAGJ,QAAA,MAAM,IAAI,KAAK,CACX,gFAAgF,CACnF;IACL;AACJ;;ICnIY;AAAZ,CAAA,UAAY,eAAe,EAAA;AACvB,IAAA,eAAA,CAAA,WAAA,CAAA,GAAA,WAAuB;AACvB,IAAA,eAAA,CAAA,cAAA,CAAA,GAAA,cAA6B;AAC7B,IAAA,eAAA,CAAA,cAAA,CAAA,GAAA,cAA6B;AAC7B,IAAA,eAAA,CAAA,OAAA,CAAA,GAAA,OAAe;AACf,IAAA,eAAA,CAAA,eAAA,CAAA,GAAA,eAA+B;AAC/B,IAAA,eAAA,CAAA,WAAA,CAAA,GAAA,WAAuB;AACvB,IAAA,eAAA,CAAA,SAAA,CAAA,GAAA,SAAmB;AACnB,IAAA,eAAA,CAAA,aAAA,CAAA,GAAA,aAA2B;AAC3B,IAAA,eAAA,CAAA,kBAAA,CAAA,GAAA,kBAAqC;;;AAGrC,IAAA,eAAA,CAAA,QAAA,CAAA,GAAA,QAAiB;AACjB,IAAA,eAAA,CAAA,SAAA,CAAA,GAAA,SAAmB;AACnB,IAAA,eAAA,CAAA,SAAA,CAAA,GAAA,SAAmB;AACnB,IAAA,eAAA,CAAA,eAAA,CAAA,GAAA,eAA+B;AAC/B,IAAA,eAAA,CAAA,eAAA,CAAA,GAAA,eAA+B;AAC/B,IAAA,eAAA,CAAA,YAAA,CAAA,GAAA,YAAyB;AAC7B,CAAC,EAlBW,eAAe,KAAf,eAAe,GAAA,EAAA,CAAA,CAAA;AAqB3B;;;AAGG;MACU,SAAS,CAAA;AACV,IAAA,OAAO,WAAW,GAAgB,IAAI,WAAW,EAAE;AACnD,IAAA,OAAO,MAAM,GAAG,IAAI,GAAG,EAA4C;AAE3E;;;AAGG;AACH,IAAA,OAAO,EAAE,CAAC,KAAsB,EAAE,OAAyC,EAAA;QACvE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YAC9B,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC;QACxC;QACA,SAAS,CAAC,WAAW,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAwB,CAAC;IAC3E;AAEA;;;AAGG;AACH,IAAA,OAAO,GAAG,CAAC,KAAsB,EAAE,OAAyC,EAAA;QACxE,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;AAC7B,YAAA,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAClC;QACA,SAAS,CAAC,WAAW,CAAC,mBAAmB,CAAC,KAAK,EAAE,OAAwB,CAAC;IAC9E;AAEA;;;AAGG;AACH,IAAA,OAAO,IAAI,CAAC,KAAsB,EAAE,IAAS,EAAA;QACzC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;AAC9B,YAAA,SAAS,CAAC,KAAK,CAAC,oCAAoC,KAAK,CAAA,CAAE,CAAC;;QAEhE;AACA,QAAA,SAAS,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACjF;;;AC7DJ;;;;;;;;;;;;;;;;;AAiBG;AAoEH;AACA;AACA;MAEa,gBAAgB,CAAA;AACV,IAAA,IAAI;AACJ,IAAA,QAAQ;;AAGR,IAAA,QAAQ,GAAG,IAAI,GAAG,EAAyB;;AAG3C,IAAA,eAAe,GAAG,IAAI,GAAG,EAAU;;AAGnC,IAAA,MAAM;AACf,IAAA,aAAa;IACb,YAAY,GAAG,KAAK;AAE5B,IAAA,WAAA,CAAY,IAAoB,EAAA;QAC9B,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;AACvB,YAAA,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;QACzD;AACA,QAAA,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI;AACrB,QAAA,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE;QACtC,IAAI,CAAC,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,KAAI;AAC1C,YAAA,IAAI,CAAC,aAAa,GAAG,OAAO;AAC9B,QAAA,CAAC,CAAC;IACJ;;AAGA,IAAA,IAAI,KAAK,GAAA;QACP,OAAO,IAAI,CAAC,MAAM;IACpB;;AAGA,IAAA,IAAI,EAAE,GAAA;QACJ,OAAO,IAAI,CAAC,IAAI;IAClB;AAEA;;;AAGG;AACH,IAAA,MAAM,UAAU,GAAA;QACd,IAAI,IAAI,CAAC,YAAY;YAAE;AACvB,QAAA,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACxC,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QACnD;AACA,QAAA,IAAI,CAAC,YAAY,GAAG,IAAI;QACxB,IAAI,CAAC,aAAa,EAAE;IACtB;AAEA;;;;AAIG;AACH,IAAA,MAAM,iBAAiB,GAAA;QACrB,MAAM,IAAI,CAAC,MAAM;AACjB,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;AACnD,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;AACxD,QAAA,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE;AACzB,YAAA,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC;QAC7E;QACA,OAAO;AACL,YAAA,WAAW,EAAE;AACX,gBAAA,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,IAAI,CAAC,IAAI;AACjB,gBAAA,aAAa,EAAE,MAAM,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC;AACvD,gBAAA,cAAc,EAAE,MAAM,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC;AAC1D,aAAA;SACF;IACH;AAEA;;;;;;;;;AASG;IACH,MAAM,OAAO,CAAC,SAAiB,EAAA;QAC7B,MAAM,IAAI,CAAC,MAAM;QACjB,MAAM,MAAM,GAAkB,EAAE;QAChC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE;YACzC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAE;YAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;AAC5C,YAAA,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,OAAO,CACzC,SAAS;AACT,2BAAe,KAAK,EACpB,IAAI,CAAC,IAAI,EACT,MAAM,EACN,SAAS,EACT,UAAU,CACX;AACD,YAAA,MAAM,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC;QAChC;AACA,QAAA,OAAO,MAAM;IACf;AAEA;;;;;;;;;;AAUG;IACH,MAAM,OAAO,CAAC,KAAoB,EAAA;QAChC,MAAM,IAAI,CAAC,MAAM;;AAGjB,QAAA,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE;AAC7B,YAAA,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW;AAC5B,YAAA,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM;AAExB,YAAA,IAAI,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE;gBACxB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,sBAAsB,EAAE;YAC5D;YAEA,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;;YAGxC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC;YAChE,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,cAAc,EAAE,OAAO,CAAC;AACnE,YAAA,MAAM,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;YAEtE,IAAI,KAAK,EAAE;AACT,gBAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,GAAG,MAAM;AACnC,gBAAA,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC;AAC1E,gBAAA,MAAM,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC;gBACzC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC;YACpC;;YAGA,IAAI,QAAQ,GAA6C,IAAI;AAC7D,YAAA,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;AAC9C,gBAAA,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE;AACzC,gBAAA,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;YAClC;YAEA,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE;QAChD;;AAGA,QAAA,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE;AACxB,YAAA,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa;AACzC,YAAA,MAAM,MAAM,GAAG,aAAa,EAAE,MAAM;YACpC,IAAI,CAAC,MAAM,EAAE;gBACX,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,6BAA6B,EAAE;YACnE;YACA,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,EAAE;gBACjC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE;YACzD;AACA,YAAA,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,IAAI,EAAE;gBAC1D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,+BAA+B,EAAE;YACrE;AAEA,YAAA,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YAClD,IAAI,CAAC,OAAO,EAAE;gBACZ,OAAO;AACL,oBAAA,IAAI,EAAE,SAAS;AACf,oBAAA,MAAM,EAAE,CAAA,uBAAA,EAA0B,MAAM,CAAC,QAAQ,CAAA,6BAAA,CAA+B;iBACjF;YACH;YAEA,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ;AAC5C,YAAA,IAAI,IAAY;AAChB,YAAA,IAAI;gBACF,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC;YACvD;YAAE,OAAO,GAAG,EAAE;;;;;;;;;AASZ,gBAAA,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC;AAC5D,gBAAA,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE;oBAC5D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA,8BAAA,EAAiC,GAAG,CAAA,CAAE,EAAE;gBAC5E;AACA,gBAAA,MAAM,GAAG;YACX;AACA,YAAA,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE;QAC1E;QAEA,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,oBAAoB,EAAE;IAC1D;;;IAKA,KAAK,GAAA;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzC;;AAGA,IAAA,aAAa,CAAC,MAAc,EAAA;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;IAClC;AAEA;;;;AAIG;AACH,IAAA,UAAU,CAAC,MAAc,EAAA;AACvB,QAAA,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;AAC5B,QAAA,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC;IACrC;;;AAKQ,IAAA,aAAa,CAAC,MAAc,EAAA;AAClC,QAAA,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;IAC7C;AACD;AAED;AACA;AACA;AAEA,eAAe,eAAe,CAAC,GAAc,EAAA;AAC3C,IAAA,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC;IACrD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;AAClC;AAEA,eAAe,eAAe,CAC5B,GAAW,EACX,IAAsB,EAAA;IAEtB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjC,IAAA,MAAM,SAAS,GACb,IAAI,KAAK;UACL,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO;UACnC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE;AAC5C,IAAA,MAAM,MAAM,GAAe,IAAI,KAAK,MAAM,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC;AAC5D,IAAA,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC;AAC3E;AAEA;AACA;AACA;AAEA,SAAS,kBAAkB,CACzB,KAAoB,EAAA;AAEpB,IAAA,MAAM,EAAE,GAAI,KAAmC,CAAC,WAAW;AAC3D,IAAA,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ;AAAE,QAAA,OAAO,KAAK;IAC/C,MAAM,CAAC,GAAG,EAA+B;AACzC,IAAA,QACE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;AAC5B,QAAA,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ;AACnC,QAAA,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ;AAExC;AAEA,SAAS,aAAa,CACpB,KAAoB,EAAA;AAEpB,IAAA,MAAM,EAAE,GAAI,KAAqC,CAAC,aAAa;AAC/D,IAAA,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ;AAAE,QAAA,OAAO,KAAK;IAC/C,MAAM,CAAC,GAAG,EAA4B;AACtC,IAAA,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,KAAK,CAAC;AACrD;;ACvWA;;;;;;;;;;;;;;AAcG;AAIH;AACA,IAAI,eAAe,GAAG,CAAC;AAuDjB,MAAO,WAAY,SAAQ,SAAS,CAAA;AACxC;;;;;;AAMG;AACM,IAAA,EAAE;AAEF,IAAA,IAAI,GAAG,CAAC,KAAsB,EAAE,IAAa,KAAU;AAC9D,QAAA,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC;AAC/C,IAAA,CAAC;AACQ,IAAA,EAAE,GAAG,CAAC,KAAsB,EAAE,OAAyC,KAAU;AACxF,QAAA,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;AAChD,IAAA,CAAC;AACQ,IAAA,GAAG,GAAG,CAAC,KAAsB,EAAE,OAAyC,KAAU;AACzF,QAAA,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;AACjD,IAAA,CAAC;AAEO,IAAA,WAAW,CAAC,KAAsB,EAAA;AACxC,QAAA,OAAO,GAAG,IAAI,CAAC,EAAE,CAAA,CAAA,EAAI,KAAK,EAAqB;IACjD;AAEQ,IAAA,GAAG;AACH,IAAA,WAAW;IACX,MAAM,GAAqB,IAAI;IAC/B,YAAY,GAAG,KAAK;IACpB,aAAa,GAAG,KAAK;;AAGrB,IAAA,aAAa;AACb,IAAA,cAAc;AACd,IAAA,oBAAoB;IACpB,iBAAiB,GAAG,CAAC;IACrB,gBAAgB,GAAyC,IAAI;;IAG7D,aAAa,GAAa,EAAE;AAC5B,IAAA,YAAY;;AAGZ,IAAA,iBAAiB;AACjB,IAAA,gBAAgB;AAChB,IAAA,SAAS;AACT,IAAA,SAAS;IACT,cAAc,GAA0C,IAAI;IAC5D,SAAS,GAAyC,IAAI;AAE9D,IAAA,WAAA,CAAY,IAAwB,EAAA;AAClC,QAAA,KAAK,EAAE;QACP,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;AACtB,YAAA,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC;QACnD;AACA,QAAA,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG;AACnB,QAAA,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW;QACnC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,CAAA,EAAA,EAAK,EAAE,eAAe,CAAA,CAAE;QAC7C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI;QAC/C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI;QACjD,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,IAAI,CAAC;QAC1D,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,GAAG;QAC5C,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,KAAK;QACxD,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,KAAK;QACtD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM;QACzC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM;IAC3C;;AAGA,IAAA,MAAM,OAAO,GAAA;QACX,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,aAAa,EAAE;AAC3C,YAAA,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC;QACjE;AACA,QAAA,IAAI,CAAC,aAAa,GAAG,IAAI;;;;QAKzB,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,iBAAiB,GAAG,CAAC,EAAE;AAClD,YAAA,IAAI;gBACF,IAAI,CAAC,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE;YACrC;YAAE,OAAO,GAAG,EAAE;AACZ,gBAAA,IAAI,CAAC,aAAa,GAAG,KAAK;AAC1B,gBAAA,MAAM,GAAG;YACX;QACF;QAEA,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,KAAI;AAC3C,YAAA,IAAI;gBACF,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;AACtC,gBAAA,IAAI,CAAC,MAAM,GAAG,MAAM;AAEpB,gBAAA,MAAM,CAAC,MAAM,GAAG,MAAK;AACnB,oBAAA,IAAI,CAAC,YAAY,GAAG,IAAI;AACxB,oBAAA,IAAI,CAAC,aAAa,GAAG,KAAK;AAC1B,oBAAA,IAAI,CAAC,iBAAiB,GAAG,CAAC;oBAC1B,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC;oBAC/C,IAAI,CAAC,UAAU,EAAE;oBACjB,IAAI,CAAC,cAAc,EAAE;AACrB,oBAAA,OAAO,EAAE;AACX,gBAAA,CAAC;AAED,gBAAA,MAAM,CAAC,SAAS,GAAG,CAAC,KAAmB,KAAI;;;oBAGzC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,EAAE;AACjC,wBAAA,IAAI,IAAI,CAAC,SAAS,EAAE;AAClB,4BAAA,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;AAC5B,4BAAA,IAAI,CAAC,SAAS,GAAG,IAAI;wBACvB;wBACA;oBACF;;oBAEA,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC;AAChD,gBAAA,CAAC;AAED,gBAAA,MAAM,CAAC,OAAO,GAAG,CAAC,GAAG,KAAI;oBACvB,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC;AACrC,oBAAA,IAAI,IAAI,CAAC,aAAa,EAAE;AACtB,wBAAA,IAAI,CAAC,aAAa,GAAG,KAAK;wBAC1B,MAAM,CAAC,GAAG,CAAC;oBACb;AACF,gBAAA,CAAC;AAED,gBAAA,MAAM,CAAC,OAAO,GAAG,MAAK;AACpB,oBAAA,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY;AACtC,oBAAA,IAAI,CAAC,YAAY,GAAG,KAAK;AACzB,oBAAA,IAAI,CAAC,aAAa,GAAG,KAAK;oBAC1B,IAAI,CAAC,aAAa,EAAE;oBACpB,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,SAAS,CAAC;AAClD,oBAAA,IAAI,IAAI,CAAC,aAAa,IAAI,YAAY,EAAE;wBACtC,IAAI,CAAC,iBAAiB,EAAE;oBAC1B;AACF,gBAAA,CAAC;YACH;YAAE,OAAO,GAAG,EAAE;AACZ,gBAAA,IAAI,CAAC,aAAa,GAAG,KAAK;gBAC1B,MAAM,CAAC,GAAG,CAAC;YACb;AACF,QAAA,CAAC,CAAC;IACJ;;IAGA,UAAU,GAAA;AACR,QAAA,IAAI,IAAI,CAAC,gBAAgB,EAAE;AACzB,YAAA,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC;AACnC,YAAA,IAAI,CAAC,gBAAgB,GAAG,IAAI;QAC9B;QACA,IAAI,CAAC,aAAa,EAAE;AACpB,QAAA,IAAI,CAAC,aAAa,GAAG,KAAK;AAC1B,QAAA,IAAI,IAAI,CAAC,MAAM,EAAE;AACf,YAAA,IAAI;AAAE,gBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;YAAE;AAAE,YAAA,MAAM,eAAe;AAClD,YAAA,IAAI,CAAC,MAAM,GAAG,IAAI;QACpB;AACA,QAAA,IAAI,CAAC,YAAY,GAAG,KAAK;AACzB,QAAA,IAAI,CAAC,aAAa,GAAG,KAAK;IAC5B;AAEA;;;AAGG;AACH,IAAA,IAAI,CAAC,KAAa,EAAA;QAChB,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,EAAE;AACpC,YAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;YACvB;QACF;QACA,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE;YAClD,MAAM,IAAI,KAAK,CACb,CAAA,kCAAA,EAAqC,IAAI,CAAC,YAAY,CAAA,6BAAA,CAA+B,CACtF;QACH;AACA,QAAA,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;IAChC;AAEA,IAAA,WAAW,KAAc,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC;AACnD,IAAA,YAAY,KAAc,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;IACrD,YAAY,GAAA,EAAa,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;AAC3D,IAAA,qBAAqB,KAAa,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;;;IAKzD,cAAc,GAAA;AACpB,QAAA,IAAI,IAAI,CAAC,iBAAiB,IAAI,CAAC;YAAE;QACjC,IAAI,CAAC,aAAa,EAAE;AACpB,QAAA,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACvF;;IAGQ,aAAa,GAAA;AACnB,QAAA,IAAI,IAAI,CAAC,cAAc,EAAE;AACvB,YAAA,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC;AAClC,YAAA,IAAI,CAAC,cAAc,GAAG,IAAI;QAC5B;AACA,QAAA,IAAI,IAAI,CAAC,SAAS,EAAE;AAClB,YAAA,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;AAC5B,YAAA,IAAI,CAAC,SAAS,GAAG,IAAI;QACvB;IACF;AAEA;;;;;;AAMG;IACK,aAAa,GAAA;QACnB,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE;AACxC,QAAA,IAAI;YACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAClC;AAAE,QAAA,MAAM;YACN,IAAI,CAAC,cAAc,EAAE;YACrB;QACF;;QAEA,IAAI,IAAI,CAAC,SAAS;YAAE;AACpB,QAAA,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,MAAK;AAC/B,YAAA,IAAI,CAAC,SAAS,GAAG,IAAI;YACrB,IAAI,CAAC,cAAc,EAAE;AACvB,QAAA,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC;IAC3B;AAEA;;;;;AAKG;IACK,cAAc,GAAA;QACpB,IAAI,CAAC,aAAa,EAAE;AACpB,QAAA,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM;AACxB,QAAA,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY;AACtC,QAAA,IAAI,CAAC,MAAM,GAAG,IAAI;AAClB,QAAA,IAAI,CAAC,YAAY,GAAG,KAAK;AACzB,QAAA,IAAI,CAAC,aAAa,GAAG,KAAK;QAC1B,IAAI,IAAI,EAAE;AACR,YAAA,IAAI,CAAC,MAAM,GAAG,IAAI;AAClB,YAAA,IAAI,CAAC,SAAS,GAAG,IAAI;AACrB,YAAA,IAAI,CAAC,OAAO,GAAG,IAAI;AACnB,YAAA,IAAI,CAAC,OAAO,GAAG,IAAI;AACnB,YAAA,IAAI;gBAAE,IAAI,CAAC,KAAK,EAAE;YAAE;AAAE,YAAA,MAAM,qBAAqB;QACnD;AACA,QAAA,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,SAAS,CAAC;AAClD,QAAA,IAAI,IAAI,CAAC,aAAa,IAAI,YAAY,EAAE;YACtC,IAAI,CAAC,iBAAiB,EAAE;QAC1B;IACF;IAEQ,iBAAiB,GAAA;AACvB,QAAA,IACE,IAAI,CAAC,oBAAoB,GAAG,CAAC;AAC7B,YAAA,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,oBAAoB,EACnD;AACA,YAAA,IAAI,CAAC,IAAI,CACP,eAAe,CAAC,KAAK,EACrB,IAAI,KAAK,CAAC,6CAA6C,CAAC,CACzD;YACD;QACF;QACA,IAAI,CAAC,iBAAiB,EAAE;AACxB,QAAA,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC;AAC5E,QAAA,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,YAAW;AAC5C,YAAA,IAAI;AACF,gBAAA,MAAM,IAAI,CAAC,OAAO,EAAE;YACtB;AAAE,YAAA,MAAM;;;;;gBAKN,IAAI,IAAI,CAAC,aAAa;oBAAE,IAAI,CAAC,iBAAiB,EAAE;YAClD;AACF,QAAA,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC;IACzB;IAEQ,UAAU,GAAA;QAChB,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE;AACrD,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa;AAClC,QAAA,IAAI,CAAC,aAAa,GAAG,EAAE;AACvB,QAAA,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE;AAC3B,YAAA,IAAI;AACF,gBAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;YACzB;AAAE,YAAA,MAAM;;AAEN,gBAAA,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;YAChC;QACF;IACF;AACD;;AC1WD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BG;AAMH;AACA;AACA;AAEA;;;;;;AAMG;AACI,MAAM,sBAAsB,GAAG;IACpC,SAAS,EAAE,eAAe,CAAC,SAAS;IACpC,YAAY,EAAE,eAAe,CAAC,YAAY;IAC1C,YAAY,EAAE,eAAe,CAAC,YAAY;IAC1C,KAAK,EAAE,eAAe,CAAC,KAAK;;AAE5B,IAAA,cAAc,EAAE,wBAAwB;;AAExC,IAAA,OAAO,EAAE,iBAAiB;;AAE1B,IAAA,SAAS,EAAE,mBAAmB;;AAgBhC;AACA;AACA;MAEa,gBAAgB,CAAA;AAClB,IAAA,SAAS;AACT,IAAA,OAAO;AACP,IAAA,IAAI;AAEL,IAAA,YAAY;IACZ,SAAS,GAAG,KAAK;;AAGjB,IAAA,MAAM,GAAG,IAAI,WAAW,EAAE;AAElC,IAAA,WAAA,CAAY,IAA6B,EAAA;QACvC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;AACvB,YAAA,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;QACzD;AACA,QAAA,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI;QACrB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,KAAK;QAE9C,IAAI,CAAC,SAAS,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC;AACtC,QAAA,IAAI,CAAC,OAAO,GAAG,IAAI,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;;;;QAKxD,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,MAAK;;;;;AAKhD,YAAA,IAAI,CAAC,SAAS,GAAG,KAAK;AACtB,YAAA,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC;AAC3C,YAAA,IAAI,IAAI,CAAC,YAAY,EAAE;AACrB,gBAAA,KAAK,IAAI,CAAC,QAAQ,EAAE;YACtB;AACF,QAAA,CAAC,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE,MAAK;AACnD,YAAA,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC;AAChD,QAAA,CAAC,CAAC;AACF,QAAA,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC,CAAc,KAAI;YACjE,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;AAC1D,QAAA,CAAC,CAAC;AACF,QAAA,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC,CAAc,KAAI;YAC1D,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;AACnD,QAAA,CAAC,CAAC;;AAGF,QAAA,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,CAAc,KAAI;YAC5D,KAAK,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAgB,CAAC;AAClD,QAAA,CAAC,CAAC;IACJ;;;IAKA,EAAE,CAAC,KAAqC,EAAE,OAAiC,EAAA;QACzE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAwB,CAAC;IAC/D;;IAGA,GAAG,CAAC,KAAqC,EAAE,OAAiC,EAAA;QAC1E,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,OAAwB,CAAC;IAClE;IAEQ,IAAI,CAAC,KAAqC,EAAE,MAAgB,EAAA;AAClE,QAAA,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/D;;;AAKA,IAAA,MAAM,OAAO,GAAA;AACX,QAAA,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;AAC/B,QAAA,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE;IAChC;;IAGA,UAAU,GAAA;AACR,QAAA,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE;IAC7B;AAEA;;;;AAIG;AACH,IAAA,MAAM,QAAQ,GAAA;QACZ,IAAI,IAAI,CAAC,SAAS;YAAE;AACpB,QAAA,IAAI,CAAC,SAAS,GAAG,IAAI;QACrB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE;AACpD,QAAA,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5C;AAEA;;;;;AAKG;IACH,MAAM,IAAI,CAAC,SAAiB,EAAA;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;AACpD,QAAA,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE;AAC1B,YAAA,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5C;QACA,OAAO,MAAM,CAAC,MAAM;IACtB;AAEA;;;;AAIG;AACH,IAAA,OAAO,CAAC,KAAc,EAAA;AACpB,QAAA,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5C;;;IAKA,KAAK,GAAA;AACH,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;IAC7B;;AAGA,IAAA,UAAU,CAAC,MAAc,EAAA;AACvB,QAAA,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;IACjC;IAEA,WAAW,GAAA;AACT,QAAA,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;IACrC;;IAIQ,MAAM,kBAAkB,CAAC,GAAW,EAAA;AAC1C,QAAA,IAAI,MAAe;AACnB,QAAA,IAAI;AACF,YAAA,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAC1B;QAAE,OAAO,GAAG,EAAE;YACZ,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,GAAG,CAAC;YAC5C;QACF;QAEA,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;YACzC,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,MAAM,CAAC;YACnD;QACF;QAEA,MAAM,GAAG,GAAG,MAAiC;;QAG7C,IAAI,aAAa,IAAI,GAAG,IAAI,eAAe,IAAI,GAAG,EAAE;AAClD,YAAA,IAAI;gBACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CACvC,GAAiD,CAClD;AACD,gBAAA,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE;AAC/B,oBAAA,IAAI,MAAM,CAAC,QAAQ,EAAE;AACnB,wBAAA,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBACtD;AACA,oBAAA,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC7E;AAAO,qBAAA,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE;AACtC,oBAAA,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE;wBACxC,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,aAAa,EAAE,MAAM,CAAC,aAAa;AACpC,qBAAA,CAAC;gBACJ;;YAEF;YAAE,OAAO,GAAG,EAAE;gBACZ,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,GAAG,CAAC;YAC9C;YACA;QACF;QAEA,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,GAAG,CAAC;IAClD;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC9PD;;;;;;;;;;;;;;;;AAgBG;AAUH;AACA,MAAM,GAAG,GAAG,EAAE;AACd,MAAM,GAAG,GAAG,EAAE;AACd,MAAM,MAAM,GAAG,GAAG;AAClB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC;AACzB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC;AACzB,MAAM,MAAM,GAAG,MAAM,GAAG,EAAE;AAE1B;AACA,MAAM,CAAC,GAAG,MAAM,CAAC,+EAA+E,CAAC;AACjG,MAAM,CAAC,GAAG,MAAM,CAAC,+EAA+E,CAAC;AAEjG;AACA,MAAM,QAAQ,GAAG,EAAE;AAQnB;;;;;;;;AAQG;AACI,eAAe,aAAa,CAAC,UAA+B,EAAA;AACjE,IAAA,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5E,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE;AAEnC,IAAA,IAAI,QAA8B;IAClC,IAAI,UAAU,EAAE;QACd,QAAQ,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/D;SAAO;;;AAGL,QAAA,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAkD,CAAC;IACvF;;;IAIA,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;AAC1C,IAAA,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC;AAC3B,IAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE;AAC3C;AAEA;;;;;;AAMG;AACI,eAAe,aAAa,CACjC,YAAkC,EAClC,MAA0B,EAC1B,YAAoB,EACpB,eAAgC,EAChC,KAAmB,EACnB,aAAuB,EAAA;AAEvB,IAAA,IAAI;AACF,QAAA,MAAM,EAAE,GAAG,kBAAkB,CAAC,eAAe,CAAC;AAC9C,QAAA,MAAM,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC;AACnC,QAAA,MAAM,OAAO,GAAa,kBAAkB,CAAC,aAAa,CAAC;;AAG3D,QAAA,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;AAAE,YAAA,OAAO,KAAK;AAC5C,QAAA,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;AAAE,YAAA,OAAO,KAAK;AAC5C,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;AAC1B,YAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;gBAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1F,IAAI,GAAG,IAAI,CAAC;AAAE,oBAAA,OAAO,KAAK;YAC5B;QACF;;AAGA,QAAA,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE;YAC5B,IAAI,MAAM,IAAI,CAAC;AAAE,gBAAA,OAAO,KAAK;QAC/B;AAEA,QAAA,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO;QACpC,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;;AAG1C,QAAA,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY;AAErB,QAAA,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAqB;AACtD,QAAA,MAAM,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAqB;AACtE,QAAA,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAqB;AACtD,QAAA,MAAM,WAAW,GAAG,OAAO,CAAC,aAAa,CAAqB;AAC9D,QAAA,MAAM,WAAW,GAAG,OAAO,CAAC,aAAa,CAAqB;AAC9D,QAAA,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAqB;AACtD,QAAA,MAAM,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAqB;;QAGxE,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;AAC/B,QAAA,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;AACzC,QAAA,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAAC,EAAE,IAAI,CAAC;QAE3C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;QAChC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC;AAE/B,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;AAC/B,YAAA,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC;AAE7C,YAAA,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC;YAC5C,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;YAE1C,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;AAC/B,YAAA,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC;AAC1B,YAAA,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAAC,EAAE,IAAI,CAAC;QAC7C;;QAGA,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;QAChC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;QAC7B,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;QAE7B,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC;QACrC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC;QACrC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC;;AAGrC,QAAA,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;AAAE,YAAA,OAAO,KAAK;AAClC,QAAA,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;AAAE,YAAA,OAAO,KAAK;AAClC,QAAA,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;AAAE,YAAA,OAAO,KAAK;AAElC,QAAA,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC;;QAGlB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;QAChC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;QAEjC,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;QAChD,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC;QAC9C,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;QAChD,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;;QAGhD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC;;QAGb,MAAM,MAAM,GAAG,gBAAgB,CAC7B,KAAK,EAAE,EAAE,EACT,MAAM,EAAE,KAAK,EACb,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,IAAI,CACL;QAED,OAAO,MAAM,KAAK,CAAC;IACrB;AAAE,IAAA,MAAM;AACN,QAAA,OAAO,KAAK;IACd;AACF;AAEA;AACA;AACA;AAEA,SAAS,aAAa,CAAC,KAA+B,EAAA;AACpD,IAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;AAC7B,QAAA,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;AAAE,YAAA,OAAO,MAAM,CAAC,KAAK,CAAC;AACxD,QAAA,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;AAAE,YAAA,OAAO,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC;AACvF,QAAA,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;AAAE,YAAA,OAAO,MAAM,CAAC,KAAK,CAAC;AAChD,QAAA,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAA,UAAA,CAAY,CAAC;IACtD;IACA,IAAI,OAAO,KAAK,KAAK,QAAQ;AAAE,QAAA,OAAO,MAAM,CAAC,KAAK,CAAC;AACnD,IAAA,OAAO,KAAK;AACd;AAEA,SAAS,UAAU,CAAC,KAA+B,EAAE,IAAY,EAAA;AAC/D,IAAA,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC;AACnC,IAAA,IAAI,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC;AAC5B,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC;AAC7B,QAAA,CAAC,GAAG,CAAC,IAAI,EAAE;IACb;AACA,IAAA,OAAO,MAAM;AACf;AAEA;AACA,SAAS,kBAAkB,CAAC,CAAM,EAAA;AAChC,IAAA,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE;AACzB,QAAA,IAAI;AACF,YAAA,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;AAChD,iBAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;AACpD,gBAAA,OAAO,aAAa,CAAC,CAAC,CAAC;YACzB;QACF;AAAE,QAAA,MAAM;;QAER;AACA,QAAA,OAAO,CAAC;IACV;AACA,IAAA,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;AAAE,QAAA,OAAO,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACtD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE;;QAEvC,MAAM,GAAG,GAAQ,EAAE;QACnB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,QAAA,OAAO,GAAG;IACZ;AACA,IAAA,OAAO,CAAC;AACV;AAEA,SAAS,iBAAiB,CAAC,KAAmC,EAAA;AAC5D,IAAA,MAAM,CAAC,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5E,IAAA,MAAM,CAAC,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5E,IAAA,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;AACvB;AAEA,SAAS,YAAY,CACnB,EAAc,EACd,MAAc,EACd,KAAmC,EACnC,OAA4B,EAAA;AAE5B,IAAA,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;AAClB,IAAA,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;AAClB,IAAA,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE;AAE1C,IAAA,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC;AACrC,IAAA,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;AAC9C,IAAA,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC;AAElD,IAAA,MAAM,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAqB;AACxE,IAAA,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChC,gBAAgB,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;AAClD,IAAA,gBAAgB,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,EAAE,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC;AAC5D;AAEA,SAAS,YAAY,CACnB,EAAc,EACd,MAAc,EACd,KAAqC,EACrC,OAA4B,EAAA;AAE5B,IAAA,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;AAClB,IAAA,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IAClB,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;AAEhD,IAAA,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC;AACxC,IAAA,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;AACjD,IAAA,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC;AACrD,IAAA,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC;AACrD,IAAA,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC;AACrD,IAAA,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC;AAErD,IAAA,MAAM,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAqB;AACxE,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;AAC1B,QAAA,gBAAgB,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,EAAE,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC;IAC5D;AACF;AAEA,SAAS,KAAK,CAAC,GAAgB,EAAE,IAAY,EAAA;AAC3C,IAAA,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAAE,QAAA,GAAG,CAAC,CAAC,CAAC,EAAE;AAC3B,IAAA,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC;AAClB,IAAA,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI;AACd,IAAA,OAAO,GAAG;AACZ;;ACxSA;;;;;;;;;;;;;;;;;;;;;;;AAuBG;AAaH,IAAIC,UAAQ,GAAmB,IAAI;AACnC,eAAeC,aAAW,GAAA;AACtB,IAAA,IAAID,UAAQ;AAAE,QAAA,OAAOA,UAAQ;IAC7BA,UAAQ,IAAI,MAAM,OAAO,SAAS,CAAC,CAAuB;AAC1D,IAAA,OAAOA,UAAQ;AACnB;AAEA;;;;;;;AAOG;AACH,MAAME,YAAU,GAAG,8EAA8E;AA8CjG;;;AAGG;AACH,SAAS,qBAAqB,CAAC,QAAgB,EAAA;AAC3C,IAAA,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,GAAG,IAAI,GAAG,QAAQ;IAClE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAGA,YAAU,EAAE,QAAQ,EAAE;AAChD;AAEA;;;;AAIG;AACH,eAAeC,cAAY,CAAI,QAAkB,EAAE,KAAa,EAAA;AAC5D,IAAA,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;QACd,IAAI,MAAM,GAAG,EAAE;AACf,QAAA,IAAI;AACA,YAAA,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE;AAClC,YAAA,MAAM,GAAG,IAAI,GAAG,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,GAAG,EAAE;QACpC;AAAE,QAAA,MAAM;;QAER;AACA,QAAA,MAAM,IAAI,KAAK,CAAC,CAAA,oBAAA,EAAuB,KAAK,CAAA,SAAA,EAAY,QAAQ,CAAC,MAAM,CAAA,CAAA,EAAI,MAAM,CAAA,CAAE,CAAC;IACxF;AACA,IAAA,QAAQ,MAAM,QAAQ,CAAC,IAAI,EAAE;AACjC;MAEa,mBAAmB,CAAA;AACX,IAAA,OAAO;AACP,IAAA,UAAU;AACV,IAAA,MAAM;AACN,IAAA,IAAI;AACJ,IAAA,QAAQ;AACR,IAAA,YAAY;AACZ,IAAA,OAAO;AACP,IAAA,OAAO;AAExB,IAAA,WAAA,CAAY,IAAgC,EAAA;QACxC,IAAI,CAAC,IAAI,CAAC,OAAO;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC;QAChF,IAAI,CAAC,IAAI,CAAC,UAAU;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC;QACtF,IAAI,CAAC,IAAI,CAAC,MAAM;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC;QAC9E,IAAI,CAAC,IAAI,CAAC,IAAI;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC;QAC1E,IAAI,CAAC,IAAI,CAAC,QAAQ;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC;QAClF,IAAI,CAAC,IAAI,CAAC,YAAY;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC;AAC1F,QAAA,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE;AACpD,YAAA,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC;QAClG;;;AAIA,QAAA,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;AAC/C,QAAA,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU;AACjC,QAAA,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM;AACzB,QAAA,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI;AACrB,QAAA,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ;AAC7B,QAAA,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY;QACrC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO;QACpC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO;IACxC;;AAGA,IAAA,MAAM,GAAG,CAAC,GAAW,EAAE,KAAc,EAAA;AACjC,QAAA,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE;AAC9E,QAAA,MAAM,GAAG,GAAG,CAAA,EAAG,IAAI,CAAC,OAAO,iBAAiB,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA,IAAA,EAAO,kBAAkB,CAAC,GAAG,CAAC,EAAE;QAC/G,MAAM,IAAI,GAAc,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;AACpE,QAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC;QACpD,MAAMA,cAAY,CAAe,QAAQ,EAAE,OAAO,GAAG,CAAA,CAAA,CAAG,CAAC;IAC7D;;IAGA,MAAM,GAAG,CAAc,GAAW,EAAA;AAC9B,QAAA,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE;AAC9E,QAAA,MAAM,GAAG,GAAG,CAAA,EAAG,IAAI,CAAC,OAAO,iBAAiB,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA,IAAA,EAAO,kBAAkB,CAAC,GAAG,CAAC,MAAM;QACnH,MAAM,IAAI,GAAc,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE;AAC7D,QAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC;QACpD,MAAM,IAAI,GAAG,MAAMA,cAAY,CAAmC,QAAQ,EAAE,CAAA,IAAA,EAAO,GAAG,CAAA,CAAA,CAAG,CAAC;AAC1F,QAAA,OAAO,IAAI,CAAC,KAAK,IAAI,IAAI;IAC7B;;IAGA,MAAM,MAAM,CAAC,GAAW,EAAA;AACpB,QAAA,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE;AAC9E,QAAA,MAAM,GAAG,GAAG,CAAA,EAAG,IAAI,CAAC,OAAO,iBAAiB,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA,IAAA,EAAO,kBAAkB,CAAC,GAAG,CAAC,EAAE;QAC/G,MAAM,IAAI,GAAc,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE;AAC7D,QAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC;QACtD,MAAM,IAAI,GAAG,MAAMA,cAAY,CAAiC,QAAQ,EAAE,CAAA,OAAA,EAAU,GAAG,CAAA,CAAA,CAAG,CAAC;QAC3F,OAAO,IAAI,CAAC,OAAO;IACvB;;AAGA,IAAA,MAAM,IAAI,GAAA;AACN,QAAA,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE;AAC9E,QAAA,MAAM,GAAG,GAAG,CAAA,EAAG,IAAI,CAAC,OAAO,CAAA,cAAA,EAAiB,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO;QACtF,MAAM,IAAI,GAAc,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE;AAC7D,QAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC;QACpD,MAAM,IAAI,GAAG,MAAMA,cAAY,CAAqB,QAAQ,EAAE,QAAQ,CAAC;AACvE,QAAA,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,EAAE;IACpD;;;;AAMA;;;;AAIG;AACK,IAAA,MAAM,mBAAmB,GAAA;AAK7B,QAAA,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE;QAC/C,MAAM,UAAU,GAAG,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC;;;AAIzD,QAAA,MAAM,KAAK,GAAG;YACV,UAAU,EAAE,IAAI,CAAC,UAAU;AAC3B,YAAA,KAAK,EAAE,UAAU;YACjB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;SAC1B;AAED,QAAA,MAAM,OAAO,GAAG,MAAMF,aAAW,EAAE;QACnC,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAC5D,KAAK,EACL,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,OAAO,CACf;QAED,OAAO;YACH,WAAW,EAAE,SAAS,CAAC,WAAW;AAClC,YAAA,KAAK,EAAE,KAAgC;AACvC,YAAA,aAAa,EAAE,aAAyB;SAC3C;IACL;;AAGQ,IAAA,MAAM,gBAAgB,GAAA;AAC1B,QAAA,MAAM,GAAG,GAAG,CAAA,EAAG,IAAI,CAAC,OAAO,CAAA,cAAA,EAAiB,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY;AAC3F,QAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;AAClD,QAAA,OAAO,MAAME,cAAY,CAAoB,QAAQ,EAAE,WAAW,CAAC;IACvE;AAEA;;;;AAIG;AACK,IAAA,MAAM,KAAK,CAAC,GAAW,EAAE,MAAc,EAAE,IAAa,EAAA;AAC1D,QAAA,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK;AAChC,QAAA,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE;YAC/B,MAAM,IAAI,KAAK,CACX,4DAA4D;AAC5D,gBAAA,iEAAiE,CACpE;QACL;AACA,QAAA,OAAO,MAAM,OAAO,CAAC,GAAG,EAAE;YACtB,MAAM;AACN,YAAA,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;AACnC,SAAA,CAAC;IACN;AACH;;ACzQD;;;;;;;;;;;;;;AAcG;AA8EH;AACM,SAAU,cAAc,CAAC,QAAsB,EAAA;IACjD,IAAI,UAAU,GAAG,CAAC;AAClB,IAAA,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM;AAAE,QAAA,UAAU,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM;IACnE,OAAO;QACH,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;AAC7B,QAAA,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM;QAClC,UAAU;KACb;AACL;;AC3GA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BG;AAiBH;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA,MAAM,IAAI,GAAc,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;AACrD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC;AACvC,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM;AAE3B,SAAS,SAAS,CAAC,GAAW,EAAA;AAC1B,IAAA,OAAO,IAAI,CAAC,GAAG,CAAC;AACpB;AAEA,SAAS,UAAU,CAAC,GAAW,EAAA;IAC3B,IAAI,GAAG,GAAG,EAAE;QAAE;AACd,IAAA,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS;IACrB,SAAS,GAAG,GAAG;AACnB;AAEA,SAAS,UAAU,CAAC,GAAW,EAAA;AAC3B,IAAA,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC;IAC1B,UAAU,CAAC,GAAG,CAAC;AACf,IAAA,OAAO,GAAG;AACd;AAEA,SAAS,aAAa,CAAC,GAAY,EAAA;AAC/B,IAAA,IAAI,SAAS,KAAK,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,SAAS;AACrB,IAAA,SAAS,GAAG,IAAI,CAAC,GAAG,CAAW;AAC/B,IAAA,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG;AACf,IAAA,OAAO,GAAG;AACd;AAEA;AACA;AACA;AAEA,IAAI,IAAI,GAAuB,IAAI;AAEnC,IAAI,WAAW,GAAsB,IAAI;AACzC,SAAS,EAAE,GAAA;AACP,IAAA,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,MAAM,KAAK,IAAK,CAAC,MAAM,CAAC,MAAM,EAAE;QACpE,WAAW,GAAG,IAAI,UAAU,CAAC,IAAK,CAAC,MAAM,CAAC,MAAM,CAAC;IACrD;AACA,IAAA,OAAO,WAAW;AACtB;AAEA,IAAI,YAAY,GAAuB,IAAI;AAC3C,SAAS,GAAG,GAAA;AACR,IAAA,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,CAAC,MAAM,KAAK,IAAK,CAAC,MAAM,CAAC,MAAM,EAAE;QACtE,YAAY,GAAG,IAAI,WAAW,CAAC,IAAK,CAAC,MAAM,CAAC,MAAM,CAAC;IACvD;AACA,IAAA,OAAO,YAAY;AACvB;AAEA,IAAI,WAAW,GAAsB,IAAI;AACzC,SAAS,GAAG,GAAA;AACR,IAAA,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,MAAM,KAAK,IAAK,CAAC,MAAM,CAAC,MAAM,EAAE;QACpE,WAAW,GAAG,IAAI,UAAU,CAAC,IAAK,CAAC,MAAM,CAAC,MAAM,CAAC;IACrD;AACA,IAAA,OAAO,WAAW;AACtB;AAEA,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAE9E;AACA;AACA;AAEA,IAAI,eAAe,GAAG,CAAC;AAEvB;;;;AAIG;AACH,SAAS,sBAAsB,CAAC,KAAmB,EAAE,MAA6B,EAAA;IAC9E,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AACpC,IAAA,MAAM,GAAG,GAAG,GAAG,EAAE;AACjB,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACnC,QAAA,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9C;AACA,IAAA,eAAe,GAAG,KAAK,CAAC,MAAM;AAC9B,IAAA,OAAO,GAAG;AACd;AAEA;;;;AAIG;AACH,SAAS,uBAAuB,CAAC,GAAW,EAAE,GAAW,EAAA;AACrD,IAAA,MAAM,GAAG,GAAG,GAAG,EAAE;AACjB,IAAA,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;IAClD,MAAM,MAAM,GAAiB,EAAE;AAC/B,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAe,CAAC;IACnD;AACA,IAAA,OAAO,MAAM;AACjB;AAEA,SAAS,iBAAiB,CAAC,GAAW,EAAE,GAAW,EAAA;AAC/C,IAAA,OAAO,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;AAC5D;AAeA;;;;;AAKG;AACH,SAAS,YAAY,GAAA;AACjB,IAAA,MAAM,QAAQ,GAAyD;AACnE,QAAA,0BAA0B,EAAE,CAAC,IAAY,KAAI;YACzC,UAAU,CAAC,IAAI,CAAC;QACpB,CAAC;AACD,QAAA,6BAA6B,EAAE,CAAC,IAAY,KAAI;YAC5C,MAAM,GAAG,GAAI,SAAS,CAAC,IAAI,CAAgB,CAAC,MAAM;AAClD,YAAA,OAAO,aAAa,CAAC,GAAG,CAAC;QAC7B,CAAC;QACD,iDAAiD,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY,KAAI;AAC5F,YAAA,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,CAAgB,EAAE,IAAI,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,CAAC;AAClF,YAAA,OAAO,aAAa,CAAC,GAAG,CAAC;QAC7B,CAAC;AACD,QAAA,0BAA0B,EAAE,CAAC,IAAY,KAAI;YACzC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,CAAgB,CAAC;AAC1D,YAAA,OAAO,aAAa,CAAC,GAAG,CAAC;QAC7B,CAAC;QACD,0BAA0B,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY,KAAI;AACpE,YAAA,SAAS,CAAC,IAAI,CAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAe,EAAE,IAAI,KAAK,CAAC,CAAC;QAClF,CAAC;AACD,QAAA,6BAA6B,EAAE,CAAC,IAAY,KAAI;AAC5C,YAAA,OAAQ,SAAS,CAAC,IAAI,CAAgB,CAAC,MAAM;QACjD,CAAC;AACD,QAAA,0BAA0B,EAAE,CAAC,IAAY,KAAI;YACzC,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,IAAI,CAAgB,CAAC;AAC3D,YAAA,OAAO,aAAa,CAAC,GAAG,CAAC;QAC7B,CAAC;QACD,0BAA0B,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY,KAAI;AACpE,YAAA,SAAS,CAAC,IAAI,CAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAgB,EAAE,IAAI,KAAK,CAAC,CAAC;QACpF,CAAC;AACD,QAAA,6BAA6B,EAAE,CAAC,IAAY,KAAI;AAC5C,YAAA,OAAQ,SAAS,CAAC,IAAI,CAAiB,CAAC,MAAM;QAClD,CAAC;AACD,QAAA,gBAAgB,EAAE,CAAC,IAAY,EAAE,IAAY,KAAI;YAC7C,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClD,CAAC;QACD,iBAAiB,EAAE,MAAK;AACpB,YAAA,OAAO,aAAa,CAAC,IAAK,CAAC,MAAM,CAAC;QACtC,CAAC;KACJ;AACD,IAAA,OAAO,EAAE,wBAAwB,EAAE,QAAgD,EAAE;AACzF;AAEA,IAAI,aAAa,GAAyB,IAAI;AAE9C;;;;;;;;;;;AAWG;AACI,eAAe,UAAU,CAAC,UAA+B,EAAA;AAC5D,IAAA,IAAI,aAAa;AAAE,QAAA,OAAO,aAAa;AACvC,IAAA,aAAa,GAAG,CAAC,YAAW;AACxB,QAAA,MAAM,OAAO,GAAG,YAAY,EAAE;AAC9B,QAAA,IAAI,QAA8B;QAClC,IAAI,UAAU,EAAE;;YAEZ,QAAQ,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC;QACjE;aAAO;;;;YAIH,MAAM,OAAO,GAAG,CAAC,MAAM,6DAA0B,EAAE,OAAwB;AAC3E,YAAA,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAkD,CAAC;;;;;;AAMhF,YAAA,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC;QACrC;AACA,QAAA,IAAI,GAAG,QAAQ,CAAC,OAAiC;IACrD,CAAC,GAAG;AACJ,IAAA,OAAO,aAAa;AACxB;AAEA;;;;;AAKG;AACH,SAAS,cAAc,CAAC,MAAe,EAAA;AACnC,IAAA,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;QACtC,MAAM,SAAS,GAAG,MAAgE;AAClF,QAAA,IAAI,SAAS,CAAC,QAAQ,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ,IAAI,SAAS,IAAI,SAAS,CAAC,QAAQ,EAAE;YACjG,OAAO,SAAS,CAAC,QAAQ;QAC7B;AACA,QAAA,IAAI,SAAS,IAAI,SAAS,EAAE;AACxB,YAAA,OAAO,MAA8B;QACzC;IACJ;AACA,IAAA,MAAM,IAAI,KAAK,CACX,mHAAmH,CACtH;AACL;AAeA,SAAS,WAAW,GAAA;IAChB,IAAI,CAAC,IAAI,EAAE;AACP,QAAA,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC;IACpF;AACJ;AAEA;AACA;AACA;AAEA;;;;AAIG;AACG,SAAU,MAAM,CAAC,UAAwB,EAAE,WAAmB,EAAA;AAChE,IAAA,WAAW,EAAE;IACb,MAAM,CAAC,GAAG,IAAK;AACf,IAAA,IAAI;QACA,MAAM,MAAM,GAAG,CAAC,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,sBAAsB,CAAC,UAAU,EAAE,CAAC,CAAC,iBAAiB,CAAC;QACpE,MAAM,IAAI,GAAG,eAAe;QAC5B,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC;QACzC,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,EAAE,GAAG,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE;QAClD,CAAC,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;AAC7B,QAAA,OAAO,EAAE;IACb;YAAU;AACN,QAAA,CAAC,CAAC,+BAA+B,CAAC,EAAE,CAAC;IACzC;AACJ;AAEA;;;;;;;AAOG;SACa,WAAW,CACvB,eAA6B,EAC7B,WAAmB,EACnB,gBAA6B,EAAA;AAE7B,IAAA,WAAW,EAAE;IACb,MAAM,CAAC,GAAG,IAAK;AACf,IAAA,IAAI;QACA,MAAM,MAAM,GAAG,CAAC,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,sBAAsB,CAAC,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC;QACzE,MAAM,IAAI,GAAG,eAAe;AAC5B,QAAA,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAC/E,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,EAAE,GAAG,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE;QAClD,CAAC,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;AAC7B,QAAA,OAAO,EAAE;IACb;YAAU;AACN,QAAA,CAAC,CAAC,+BAA+B,CAAC,EAAE,CAAC;IACzC;AACJ;;AChWA;;;;;;;;;;;;;;;;;;;AAmBG;MAiBU,gBAAgB,CAAA;AACzB;;;;;;;AAOG;AACH,IAAA,KAAK,CAAC,UAA+B,EAAA;AACjC,QAAA,OAAO,UAAU,CAAC,UAAU,CAAC;IACjC;AAEA;;;AAGG;AACH,IAAA,MAAM,CAAC,IAAgB,EAAE,UAAkB,EAAE,YAAoB,EAAA;QAC7D,IAAI,UAAU,GAAG,CAAC;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC;QACvF,IAAI,YAAY,GAAG,CAAC;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC;AAC3F,QAAA,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC;;;;;AAMhF,QAAA,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;QACrD,MAAM,WAAW,GAAiB,EAAE;AACpC,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE;;;;AAIjC,YAAA,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC;AACvC,YAAA,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS;AAC3B,YAAA,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC;AACpD,YAAA,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE;AACrB,gBAAA,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACxC;AACA,YAAA,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAC3B;QAEA,MAAM,MAAM,GAAGC,MAAU,CAAC,WAAW,EAAE,YAAY,CAAC;;;QAGpD,OAAO;YACH,MAAM;YACN,SAAS;YACT,YAAY,EAAE,IAAI,CAAC,MAAM;YACzB,UAAU;YACV,YAAY;SACf;IACL;AAEA;;;;;;;AAOG;AACH,IAAA,MAAM,CACF,MAAoB,EACpB,YAAoB,EACpB,gBAA0B,EAC1B,YAAoB,EAAA;QAEpB,IAAI,YAAY,GAAG,CAAC;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC;AAC3F,QAAA,IAAI,MAAM,CAAC,MAAM,IAAI,YAAY,EAAE;AAC/B,YAAA,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC;QACpF;AACA,QAAA,IAAI,gBAAgB,CAAC,MAAM,GAAG,YAAY,EAAE;YACxC,MAAM,IAAI,KAAK,CACX,CAAA,kDAAA,EAAqD,gBAAgB,CAAC,MAAM,CAAA,GAAA,EAAM,YAAY,CAAA,CAAA,CAAG,CACpG;QACL;AAEA,QAAA,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,GAAG,YAAY;AAC/C,QAAA,MAAM,SAAS,GACX,gBAAgB,CAAC,MAAM,KAAK;AACxB,cAAE;AACF,cAAEC,WAAe,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,WAAW,CAAC,gBAAgB,CAAC,CAAC;;QAGlF,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,UAAU,GAAG,SAAS,CAAC;AAClD,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE;AACjC,YAAA,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC;QACxC;QACA,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC;IACxC;AACH;;AC/HD;;;;;;;;;;;;;;;;;;;AAmBG;AAIH;AACA,MAAM,QAAQ,GAAG,GAAG;AA0EpB;;;AAGG;AACI,eAAe,SAAS,CAAC,KAAiB,EAAA;AAC7C,IAAA,MAAM,MAAM,GAAI,UAAU,CAAC,MAA6B,EAAE,MAAM;IAChE,IAAI,CAAC,MAAM,EAAE;AACT,QAAA,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC;IAC5F;IACA,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAqB,CAAC;IACpE,OAAO,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;AACxC;MAEa,WAAW,CAAA;AACH,IAAA,OAAO;AACP,IAAA,UAAU;AACV,IAAA,OAAO;AACP,IAAA,KAAK;AACL,IAAA,WAAW;AACX,IAAA,KAAK;AACL,IAAA,gBAAgB;AAEjC,IAAA,WAAA,CAAY,IAAwB,EAAA;QAChC,IAAI,CAAC,IAAI,EAAE,OAAO;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC;;AAEzE,QAAA,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;;;AAG/C,QAAA,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,IAAI,aAAa;AAClD,QAAA,MAAM,SAAS,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,SAAS,GAAG,CAAA,CAAA,EAAI,SAAS,EAAE;QACzE,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK;AACxC,QAAA,IAAI,OAAO,CAAC,KAAK,UAAU,EAAE;AACzB,YAAA,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC;QAC9F;QACA,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;AACjC,QAAA,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;AACvB,QAAA,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW;AACnC,QAAA,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;;;;AAIvB,QAAA,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,KAAK,CAAC;IACxE;;AAGA,IAAA,UAAU,CAAC,IAAY,EAAA;AACnB,QAAA,OAAO,CAAA,EAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,UAAU,CAAA,CAAA,EAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE;IAC1E;AAEA;;;;;AAKG;AACH,IAAA,MAAM,QAAQ,CAAC,IAAY,EAAE,KAAiB,EAAA;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;;;;QAIjC,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC;;QAEjD,IAAI,IAAI,CAAC,KAAK;AAAE,YAAA,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;;;;;AAKzC,QAAA,IAAI,IAAI,CAAC,gBAAgB,EAAE;AACvB,YAAA,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC;AACvC,YAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE;QAC3B;AACA,QAAA,IAAI,QAAkB;AACtB,QAAA,IAAI;AACA,YAAA,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;AAC/B,gBAAA,MAAM,EAAE,KAAK;AACb,gBAAA,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;;AAEvD,gBAAA,IAAI,EAAE,KAAiB;AAC1B,aAAA,CAAC;QACN;QAAE,OAAO,GAAG,EAAE;;;AAGV,YAAA,IAAI,IAAI,CAAC,WAAW,EAAE;AAClB,gBAAA,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;AAC5B,gBAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE;YAC3B;AACA,YAAA,MAAM,GAAG;QACb;AACA,QAAA,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;AACd,YAAA,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC;AACrC,YAAA,MAAM,IAAI,KAAK,CAAC,CAAA,qBAAA,EAAwB,IAAI,CAAA,UAAA,EAAa,QAAQ,CAAC,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAC;QACzF;QACA,IAAI,KAAK,GAAG,KAAK;AACjB,QAAA,IAAI;YACA,MAAM,IAAI,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB;AAC3D,YAAA,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;QAChC;AAAE,QAAA,MAAM;;QAER;QACA,OAAO,EAAE,KAAK,EAAE;IACpB;;IAGQ,QAAQ,GAAG,CAAC;IACH,OAAO,GAAsB,EAAE;AACxC,IAAA,OAAgB,cAAc,GAAG,CAAC;AAE1C;;AAE4E;IACpE,uBAAuB,CAAC,GAAW,EAAE,IAAY,EAAA;AACrD,QAAA,MAAM,GAAG,GAAG,YAAW;YACnB,IAAI,CAAC,QAAQ,EAAE;AACf,YAAA,IAAI;gBACA,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI;AAC5D,gBAAA,IAAI,KAAK;oBAAE,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC;YAC1D;AAAE,YAAA,MAAM;;;AAGJ,gBAAA,IAAI,IAAI,CAAC,WAAW,EAAE;AAAE,oBAAA,IAAI;AAAE,wBAAA,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;oBAAE;AAAE,oBAAA,MAAM,oBAAoB;gBAAE;YAC9F;oBAAU;gBACN,IAAI,CAAC,QAAQ,EAAE;gBACf,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;AACjC,gBAAA,IAAI,IAAI;AAAE,oBAAA,IAAI,EAAE;YACpB;AACJ,QAAA,CAAC;AACD,QAAA,IAAI,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,cAAc;YAAE,KAAK,GAAG,EAAE;;AACrD,YAAA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;IAC5C;AAEA;AAC0E;AAClE,IAAA,MAAM,cAAc,CAAC,GAAW,EAAE,IAAY,EAAE,KAAiB,EAAA;QACrE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;AACrC,YAAA,MAAM,EAAE,KAAK;AACb,YAAA,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;AACvD,YAAA,IAAI,EAAE,KAAiB;AAC1B,SAAA,CAAC;AACF,QAAA,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;AACd,YAAA,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC;AACrC,YAAA,MAAM,IAAI,KAAK,CAAC,CAAA,qBAAA,EAAwB,IAAI,CAAA,UAAA,EAAa,QAAQ,CAAC,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAC;QACzF;IACJ;AAEA;;;AAGG;IACH,MAAM,QAAQ,CAAC,IAAY,EAAA;;AAEvB,QAAA,IAAI,IAAI,CAAC,KAAK,EAAE;YACZ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;AACzC,YAAA,IAAI,MAAM;AAAE,gBAAA,OAAO,MAAM;QAC7B;;QAEA,IAAI,CAAC,IAAI,CAAC,KAAK;AAAE,YAAA,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;;;;AAKlD,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK;QACxB,OAAO,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,MAAM,KAAI;YACtD,IAAI,IAAI,GAAG,KAAK;YAChB,IAAI,aAAa,GAAG,KAAK;YACzB,IAAI,KAAK,GAAyC,IAAI;AACtD,YAAA,MAAM,GAAG,GAAG,CAAC,CAAoB,KAAI;AACjC,gBAAA,IAAI,IAAI;oBAAE;gBACV,IAAI,GAAG,IAAI;AACX,gBAAA,IAAI,KAAK;oBAAE,YAAY,CAAC,KAAK,CAAC;gBAC9B,OAAO,CAAC,CAAC,CAAC;AACd,YAAA,CAAC;AACD,YAAA,MAAM,IAAI,GAAG,CAAC,CAAU,KAAI;gBACxB,IAAI,CAAC,IAAI,EAAE;oBAAE,IAAI,GAAG,IAAI;oBAAE,MAAM,CAAC,CAAC,CAAC;gBAAE;AACzC,YAAA,CAAC;YACD,MAAM,WAAW,GAAG,MAAK;gBACrB,IAAI,aAAa,IAAI,IAAI;oBAAE;gBAC3B,aAAa,GAAG,IAAI;gBACpB,IAAI,KAAK,EAAE;oBAAE,YAAY,CAAC,KAAK,CAAC;oBAAE,KAAK,GAAG,IAAI;gBAAE;AAChD,gBAAA,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;AAC9C,YAAA,CAAC;AACD,YAAA,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC;YACzC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CACrB,CAAC,CAAC,KAAI;gBACF,IAAI,CAAC,EAAE;oBACH,IAAI,IAAI,CAAC,KAAK;wBAAE,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AAC5C,oBAAA,GAAG,CAAC,CAAC,CAAC,CAAC;gBACX;qBAAO;oBACH,WAAW,EAAE,CAAC;gBAClB;AACJ,YAAA,CAAC,EACD,MAAM,WAAW,EAAE,CACtB;AACL,QAAA,CAAC,CAAC;IACN;AAEA;AACuE;IAC/D,MAAM,eAAe,CAAC,IAAY,EAAA;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;AACjC,QAAA,IAAI,QAAkB;AACtB,QAAA,IAAI;AACA,YAAA,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACzD;QAAE,OAAO,GAAG,EAAE;YACV,IAAI,IAAI,CAAC,KAAK;AAAE,gBAAA,OAAO,IAAI;AAC3B,YAAA,MAAM,GAAG;QACb;AACA,QAAA,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;AAAE,YAAA,OAAO,IAAI;AACxC,QAAA,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;AACd,YAAA,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC;AACrC,YAAA,MAAM,IAAI,KAAK,CAAC,CAAA,qBAAA,EAAwB,IAAI,CAAA,UAAA,EAAa,QAAQ,CAAC,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAC;QACzF;QACA,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC1D,IAAI,IAAI,CAAC,KAAK;YAAE,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC;AAChD,QAAA,OAAO,KAAK;IAChB;AAEA;;;;AAIG;IACH,MAAM,QAAQ,CAAC,IAAY,EAAA;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;AACjC,QAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5D,QAAA,OAAO,QAAQ,CAAC,MAAM,KAAK,GAAG;IAClC;;AAGJ,eAAe,QAAQ,CAAC,QAAkB,EAAA;AACtC,IAAA,IAAI;AAAE,QAAA,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE;IAAE;AAAE,IAAA,MAAM;AAAE,QAAA,OAAO,EAAE;IAAE;AAC7D;;ACzUA;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BG;MAsFU,WAAW,CAAA;AACH,IAAA,KAAK;AACL,IAAA,MAAM;AACN,IAAA,SAAS;AACT,IAAA,UAAU;AACV,IAAA,YAAY;AACZ,IAAA,WAAW;AACX,IAAA,MAAM,GAAG,IAAI,WAAW,EAAE;AAC1B,IAAA,KAAK,GAAG,IAAI,gBAAgB,EAAE;AAC9B,IAAA,YAAY;AAE7B,IAAA,WAAA,CAAY,IAAwB,EAAA;QAChC,IAAI,CAAC,IAAI,EAAE,MAAM;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC;AAErF,QAAA,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;AACvB,QAAA,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM;AACzB,QAAA,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;QAClD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC;QACtC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC;AAC1C,QAAA,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;AACrD,QAAA,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY;AAErC,QAAA,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC;AACnF,QAAA,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAChF,QAAA,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC;IACxF;;;;;AAOA;;;;AAIG;IACH,MAAM,iBAAiB,CACnB,KAAyB,EAAA;QAEzB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC;QAEzC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,UAAU,EAAE;AAC3C,QAAA,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;QAC5B,MAAM,MAAM,GAAoB,EAAE;;;;;;;AAQlC,QAAA,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,YAAY,UAAU,GAAG,KAAK,CAAC,IAAI,GAAG,IAAI;AACpE,QAAA,MAAM,IAAI,GAAG,OAAO,GAAG,OAAO,CAAC,MAAM,GAAI,KAAK,CAAC,IAAa,CAAC,IAAI;QACjE,MAAM,SAAS,GAAG,OAAO,KAAa,EAAE,GAAW,KAC/C,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG;AACjC,cAAE,IAAI,UAAU,CAAC,MAAO,KAAK,CAAC,IAAa,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AAEpF,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QACjE,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,WAAW,CAAC;;QAGlC,KAAK,IAAI,UAAU,GAAG,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE;AACpF,YAAA,MAAM,KAAK,GAAG,UAAU,GAAG,IAAI,CAAC,SAAS;AACzC,YAAA,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC;YAClD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC;AAC7C,YAAA,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YACzD,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC;;;YAG9C,IAAI,IAAI,KAAK,CAAC;gBAAE;QACpB;AAEA,QAAA,MAAM,QAAQ,GAAiB;AAC3B,YAAA,EAAE,EAAE,MAAM;AACV,YAAA,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;YACzB,IAAI;AACJ,YAAA,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;AACzB,YAAA,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;AACzB,YAAA,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY,IAAI,SAAS;YACtD,SAAS;YACT,MAAM;AACN,YAAA,OAAO,EAAE,CAAC;SACb;QAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE;IACvD;AAEA;;;;;AAKG;IACH,MAAM,kBAAkB,CACpB,QAAsB,EAAA;QAEtB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC;;;;QAKzC,MAAM,eAAe,GAAiB,EAAE;AACxC,QAAA,KAAK,MAAM,aAAa,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,EAAE;YAC1F,eAAe,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC7D;QACA,IAAI,KAAK,GAAG,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,eAAe;AAAE,YAAA,KAAK,IAAI,CAAC,CAAC,MAAM;AAClD,QAAA,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC;QACjC,IAAI,MAAM,GAAG,CAAC;AACd,QAAA,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE;AAC7B,YAAA,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC;AAClB,YAAA,MAAM,IAAI,CAAC,CAAC,MAAM;QACtB;AACA,QAAA,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE;IACxD;AAEA;;;;;;AAMG;AACH,IAAA,OAAO,oBAAoB,CAAC,QAAsB,EAAA;QAC9C,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC;AACzC,QAAA,KAAK,MAAM,aAAa,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,EAAE;AAC1F,YAAA,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;QAC7C;IACJ;;;;;;IAQA,MAAM,SAAS,CAAC,KAAqB,EAAA;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;AAC5C,QAAA,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;QAC9D,MAAM,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC;AACtD,QAAA,OAAO,IAAI;IACf;;AAGA,IAAA,MAAM,QAAQ,CAAC,OAAe,EAAE,MAAc,EAAA;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC;AAC9D,QAAA,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC;IAClD;AAEA;;;;AAIG;AACH,IAAA,MAAM,UAAU,CAAC,OAAe,EAAE,MAAc,EAAA;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;QAC7C,OAAO,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC;IACpD;;IAGA,MAAM,SAAS,CAAC,OAAe,EAAA;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;AAC5C,QAAA,OAAO,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC;IACnC;;AAGA,IAAA,MAAM,YAAY,CAAC,OAAe,EAAE,MAAc,EAAA;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC;QAC/C,OAAO,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC;IAClD;;;;AAMQ,IAAA,YAAY,CAAC,SAAiB,EAAA;AAClC,QAAA,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;AACb,YAAA,MAAM,IAAI,KAAK,CACX,CAAA,YAAA,EAAe,SAAS,CAAA,qDAAA,CAAuD;AAC/E,gBAAA,0CAA0C,CAC7C;QACL;QACA,OAAO,IAAI,CAAC,KAAK;IACrB;;AAGQ,IAAA,MAAM,UAAU,CAAC,SAAqB,EAAE,UAAkB,EAAA;QAC9D,MAAM,WAAW,GAAqB,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE;AACvE,QAAA,MAAM,UAAU,GACZ,SAAS,CAAC,MAAM,KAAK;AACjB,cAAE,IAAI,UAAU,CAAC,CAAC;AAClB,cAAE,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;;;;AAKhE,QAAA,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE;YACzB,OAAO;gBACH,EAAE,EAAE,UAAU,EAAE;gBAChB,UAAU;AACV,gBAAA,YAAY,EAAE,CAAC;AACf,gBAAA,cAAc,EAAE,CAAC;gBACjB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;AAC/B,gBAAA,SAAS,EAAE,CAAC;AACZ,gBAAA,WAAW,EAAE,EAAE;AACf,gBAAA,MAAM,EAAE,WAAW;aACtB;QACL;AAEA,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC;QACjF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,QAAA,MAAM,IAAI,CAAC,kBAAkB,CACzB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,YAAW;AACxC,YAAA,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QAChD,CAAC,CAAC,CACL;QAED,OAAO;YACH,EAAE,EAAE,UAAU,EAAE;YAChB,UAAU;YACV,YAAY,EAAE,SAAS,CAAC,MAAM;YAC9B,cAAc,EAAE,UAAU,CAAC,MAAM;YACjC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;AAC5B,YAAA,WAAW,EAAE,MAAM;AACnB,YAAA,MAAM,EAAE,WAAW;SACtB;IACL;;IAGQ,MAAM,SAAS,CAAC,QAAuB,EAAA;QAC3C,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE;;AAEnC,YAAA,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC;QAC5B;;;;QAKA,MAAM,OAAO,GAAG,IAAI,KAAK,CAAoB,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC;AACzE,QAAA,MAAM,IAAI,CAAC,kBAAkB,CACzB,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,YAAW;AAC7C,YAAA,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACjD,CAAC,CAAC,CACL;QAED,MAAM,WAAW,GAAa,EAAE;QAChC,MAAM,MAAM,GAAiB,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,KAAI;AAClD,YAAA,IAAI,KAAK,KAAK,IAAI,EAAE;AAChB,gBAAA,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AACnB,gBAAA,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC7C;YACA,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,SAAS,EAAE;gBACrC,MAAM,IAAI,KAAK,CACX,CAAA,mBAAA,EAAsB,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA,gBAAA,CAAkB;oBAC/D,CAAA,KAAA,EAAQ,KAAK,CAAC,MAAM,CAAA,WAAA,EAAc,QAAQ,CAAC,SAAS,CAAA,CAAA,CAAG,CAC1D;YACL;AACA,YAAA,OAAO,KAAK;AAChB,QAAA,CAAC,CAAC;QAEF,IAAI,WAAW,CAAC,MAAM,GAAG,QAAQ,CAAC,YAAY,EAAE;YAC5C,MAAM,IAAI,KAAK,CACX,CAAA,mBAAA,EAAsB,QAAQ,CAAC,EAAE,CAAA,iBAAA,EAAoB,WAAW,CAAC,MAAM,CAAA,iBAAA,CAAmB;AAC1F,gBAAA,CAAA,KAAA,EAAQ,QAAQ,CAAC,YAAY,CAAA,UAAA,CAAY,CAC5C;QACL;QAEA,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CACtC,MAAM,EACN,QAAQ,CAAC,YAAY,EACrB,WAAW,EACX,QAAQ,CAAC,cAAc,CAC1B;AACD,QAAA,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC;IAC5E;;IAGQ,MAAM,kBAAkB,CAAC,KAAiC,EAAA;QAC9D,IAAI,MAAM,GAAG,CAAC;AACd,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW;AACpC,QAAA,eAAe,UAAU,GAAA;AACrB,YAAA,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE;AAC1B,gBAAA,MAAM,GAAG,GAAG,MAAM,EAAE;AACpB,gBAAA,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE;YACtB;QACJ;AACA,QAAA,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC;aACxD,IAAI,CAAC,IAAI;AACT,aAAA,GAAG,CAAC,MAAM,UAAU,EAAE,CAAC;AAC5B,QAAA,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;IAC9B;AACH;;ACzZD;;;;;;;;;;;;;;;;;;;;AAoBG;MAeU,iBAAiB,CAAA;AACT,IAAA,OAAO;AACP,IAAA,OAAO;AAExB,IAAA,WAAA,CAAY,IAA8B,EAAA;QACtC,IAAI,CAAC,IAAI,EAAE,OAAO;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC;AAC/E,QAAA,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK;AACxC,QAAA,IAAI,OAAO,CAAC,KAAK,UAAU,EAAE;AACzB,YAAA,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC;QACpG;QACA,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;IACrC;;AAGA,IAAA,MAAM,iBAAiB,CAAC,OAAe,EAAE,QAAsB,EAAA;QAC3D,MAAM,GAAG,GAAG,CAAA,EAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA,CAAE;QACxC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3E,MAAM,YAAY,CAA+B,GAAG,EAAE,CAAA,kBAAA,EAAqB,QAAQ,CAAC,EAAE,CAAA,CAAA,CAAG,CAAC;IAC9F;;AAGA,IAAA,MAAM,gBAAgB,CAAC,OAAe,EAAE,MAAc,EAAA;AAClD,QAAA,MAAM,GAAG,GAAG,CAAA,EAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE;AACtE,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,YAAY,CAA6B,GAAG,EAAE,CAAA,iBAAA,EAAoB,MAAM,CAAA,CAAA,CAAG,CAAC;QAC/F,OAAO,IAAI,CAAC,QAAQ;IACxB;;AAGA,IAAA,MAAM,kBAAkB,CAAC,OAAe,EAAE,MAAc,EAAA;AACpD,QAAA,MAAM,GAAG,GAAG,CAAA,EAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE;AACtE,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAiC,GAAG,EAAE,CAAA,mBAAA,EAAsB,MAAM,CAAA,CAAA,CAAG,CAAC;QACrG,OAAO,IAAI,CAAC,OAAO;IACvB;;IAGA,MAAM,SAAS,CAAC,OAAe,EAAA;QAC3B,MAAM,GAAG,GAAG,CAAA,EAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA,CAAE;AACxC,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAwB,GAAG,EAAE,WAAW,CAAC;AACxE,QAAA,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE;IACtD;;AAIQ,IAAA,SAAS,CAAC,OAAe,EAAA;QAC7B,OAAO,CAAA,EAAG,IAAI,CAAC,OAAO,CAAA,YAAA,EAAe,kBAAkB,CAAC,OAAO,CAAC,CAAA,MAAA,CAAQ;IAC5E;IAEQ,WAAW,CAAC,MAAc,EAAE,IAAc,EAAA;AAC9C,QAAA,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE;AACpC,QAAA,IAAI,IAAI,KAAK,SAAS,EAAE;YACpB,IAAI,CAAC,OAAO,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACrD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QACpC;AACA,QAAA,OAAO,IAAI;IACf;AACH;AAED,eAAe,YAAY,CAAI,QAAkB,EAAE,EAAU,EAAA;IACzD,IAAI,MAAM,GAAY,IAAI;AAC1B,IAAA,IAAI;AACA,QAAA,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE;IAClC;AAAE,IAAA,MAAM;;IAER;AACA,IAAA,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;QACd,MAAM,GAAG,GACL,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAK;AAChD,cAAE,MAAM,CAAE,MAA6B,CAAC,KAAK;cAC3C,CAAA,EAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAA,CAAE;QACrD,MAAM,IAAI,KAAK,CAAC,CAAA,kBAAA,EAAqB,EAAE,CAAA,EAAA,EAAK,GAAG,CAAA,CAAE,CAAC;IACtD;AACA,IAAA,OAAO,MAAW;AACtB;;AC/GA;;;;;;;;;;;AAWG;MAgFU,UAAU,CAAA;AACF,IAAA,OAAO;AACP,IAAA,OAAO;AAExB,IAAA,WAAA,CAAY,IAAuB,EAAA;QAC/B,IAAI,CAAC,IAAI,EAAE,OAAO;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC;AACxE,QAAA,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK;AACxC,QAAA,IAAI,OAAO,CAAC,KAAK,UAAU,EAAE;AACzB,YAAA,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC;QAC7F;QACA,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;IACrC;;IAGA,MAAM,QAAQ,CAAC,GAAsB,EAAA;QACjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA,EAAG,IAAI,CAAC,OAAO,uBAAuB,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9F,OAAO,MAAM,IAAI,CAAC,KAAK,CAAqB,UAAU,EAAE,GAAG,CAAC;IAChE;;IAGA,MAAM,YAAY,CAAC,QAAgB,EAAA;QAC/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA,EAAG,IAAI,CAAC,OAAO,CAAA,mBAAA,CAAqB,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrG,OAAO,MAAM,IAAI,CAAC,KAAK,CAAsB,cAAc,EAAE,GAAG,CAAC;IACrE;;IAGA,MAAM,YAAY,CAAC,GAA0B,EAAA;QACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA,EAAG,IAAI,CAAC,OAAO,2BAA2B,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAClG,OAAO,MAAM,IAAI,CAAC,KAAK,CAAc,cAAc,EAAE,GAAG,CAAC;IAC7D;AAEA;;;;AAIG;IACH,MAAM,MAAM,CAAC,KAAa,EAAA;QACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA,EAAG,IAAI,CAAC,OAAO,CAAA,gBAAA,CAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/F,OAAO,MAAM,IAAI,CAAC,KAAK,CAAuB,QAAQ,EAAE,GAAG,CAAC;IAChE;;;AAKA,IAAA,MAAM,YAAY,CAAC,QAAgB,EAAE,OAAe,EAAA;QAChD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA,EAAG,IAAI,CAAC,OAAO,CAAA,cAAA,CAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACzG,OAAO,MAAM,IAAI,CAAC,KAAK,CAAwB,cAAc,EAAE,GAAG,CAAC;IACvE;AAEA;;;;AAIG;IACH,MAAM,iBAAiB,CACnB,QAAgB,EAChB,OAAe,EACf,UAA8B,EAC9B,OAA6B,EAC7B,WAAmB,EAAA;AAEnB,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAC1B,CAAA,EAAG,IAAI,CAAC,OAAO,CAAA,cAAA,CAAgB,EAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAC7E;QACD,OAAO,MAAM,IAAI,CAAC,KAAK,CAA4C,mBAAmB,EAAE,GAAG,CAAC;IAChG;AAEA;;;;AAIG;IACH,MAAM,aAAa,CAAC,IAA2D,EAAA;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9E,IAAI,IAAI,CAAC,KAAK;YAAG,IAAI,CAAC,OAAkC,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,KAAK;AACzF,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA,EAAG,IAAI,CAAC,OAAO,CAAA,qBAAA,CAAuB,EAAE,IAAI,CAAC;QAC5E,MAAM,IAAI,CAAC,KAAK,CAAoB,eAAe,EAAE,GAAG,CAAC;IAC7D;;IAGA,MAAM,cAAc,CAAC,IAAyD,EAAA;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5E,IAAI,IAAI,CAAC,KAAK;YAAG,IAAI,CAAC,OAAkC,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,KAAK;AACzF,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA,EAAG,IAAI,CAAC,OAAO,CAAA,sBAAA,CAAwB,EAAE,IAAI,CAAC;QAC7E,OAAO,MAAM,IAAI,CAAC,KAAK,CAAyC,gBAAgB,EAAE,GAAG,CAAC;IAC1F;AAEA;;;;AAIG;IACH,MAAM,YAAY,CAAC,IAA4D,EAAA;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClF,IAAI,IAAI,CAAC,KAAK;YAAG,IAAI,CAAC,OAAkC,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,KAAK;AACzF,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA,EAAG,IAAI,CAAC,OAAO,CAAA,uBAAA,CAAyB,EAAE,IAAI,CAAC;QAC9E,OAAO,MAAM,IAAI,CAAC,KAAK,CAAiE,cAAc,EAAE,GAAG,CAAC;IAChH;;;AAKA,IAAA,MAAM,KAAK,CAAC,KAAa,EAAE,IAAuF,EAAA;QAC9G,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;AACnC,QAAA,IAAI,CAAC,OAAkC,CAAC,kBAAkB,CAAC,GAAG,KAAK;AACpE,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA,EAAG,IAAI,CAAC,OAAO,CAAA,eAAA,CAAiB,EAAE,IAAI,CAAC;QACtE,OAAO,MAAM,IAAI,CAAC,KAAK,CAAmB,OAAO,EAAE,GAAG,CAAC;IAC3D;;IAGA,MAAM,KAAK,CAAC,IAA4D,EAAA;QACpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA,EAAG,IAAI,CAAC,OAAO,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzF,OAAO,MAAM,IAAI,CAAC,KAAK,CAAoG,OAAO,EAAE,GAAG,CAAC;IAC5I;AAEA;;;AAGG;AACH,IAAA,MAAM,SAAS,CACX,QAAgB,EAChB,UAA+B,EAC/B,WAAoB;AACpB;;AAE+C;IAC/C,IAAa;;IAEb,QAAiB,EAAA;AAEjB,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAC1B,CAAA,EAAG,IAAI,CAAC,OAAO,CAAA,eAAA,CAAiB,EAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAC3E;QACD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAiC,WAAW,EAAE,GAAG,CAAC;IAC7E;AAEA;;;;AAIG;AACH,IAAA,MAAM,cAAc,CAAC,KAAa,EAAE,MAAmB,EAAE,WAAoB,EAAA;AACzE,QAAA,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACrD,IAAI,CAAC,OAAkC,CAAC,eAAe,CAAC,GAAG,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE;AAC7E,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA,EAAG,IAAI,CAAC,OAAO,CAAA,sBAAA,CAAwB,EAAE,IAAI,CAAC;QAC7E,OAAO,MAAM,IAAI,CAAC,KAAK,CAA8B,gBAAgB,EAAE,GAAG,CAAC;IAC/E;;IAGA,MAAM,YAAY,CAAC,KAAa,EAAA;AAC5B,QAAA,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE,EAAE,EAAE;AAC1F,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA,EAAG,IAAI,CAAC,OAAO,CAAA,uBAAA,CAAyB,EAAE,IAAI,CAAC;QAC9E,OAAO,MAAM,IAAI,CAAC,KAAK,CAAgD,cAAc,EAAE,GAAG,CAAC;IAC/F;;AAGA,IAAA,MAAM,iBAAiB,CAAC,KAAa,EAAE,EAAU,EAAA;AAC7C,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA,EAAG,IAAI,CAAC,OAAO,CAAA,sBAAA,CAAwB,EAAE;AACpE,YAAA,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE,EAAE;YACjF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC;AAC/B,SAAA,CAAC;QACF,OAAO,MAAM,IAAI,CAAC,KAAK,CAAuB,mBAAmB,EAAE,GAAG,CAAC;IAC3E;;;;IAMQ,IAAI,CAAC,MAAc,EAAE,IAAa,EAAA;QACtC,OAAO;YACH,MAAM;AACN,YAAA,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;AAC/C,YAAA,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC7B;IACL;AAEQ,IAAA,MAAM,KAAK,CAAI,KAAa,EAAE,GAAa,EAAA;QAC/C,IAAI,IAAI,GAAY,IAAI;AACxB,QAAA,IAAI;AACA,YAAA,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE;QAC3B;AAAE,QAAA,MAAM;;QAER;AACA,QAAA,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;YACT,MAAM,GAAG,GACL,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAK;AAC5C,kBAAE,MAAM,CAAE,IAA2B,CAAC,KAAK;kBACzC,CAAA,EAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,CAAA,CAAE;YAC3C,MAAM,IAAI,KAAK,CAAC,CAAA,WAAA,EAAc,KAAK,CAAA,EAAA,EAAK,GAAG,CAAA,CAAE,CAAC;QAClD;AACA,QAAA,OAAO,IAAS;IACpB;AACH;;AC/RD;;;;;;;;;;;;;;;;;;;;;;;AAuBG;AAEH;AACA;AAIA,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE;AACtC,MAAM,iBAAiB,GAAG,OAAO;AACjC,MAAM,YAAY,GAAG,EAAE;AAavB,eAAe,WAAW,CAAC,QAAgB,EAAE,IAAY,EAAE,UAAkB,EAAA;AACzE,IAAA,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACzC,KAAK,EACL,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,EAC7B,EAAE,IAAI,EAAE,QAAQ,EAAE,EAClB,KAAK,EACL,CAAC,YAAY,CAAC,CACjB;IACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CACvC;AACI,QAAA,IAAI,EAAE,QAAQ;AACd,QAAA,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC;AAC/B,QAAA,UAAU,EAAE,iBAAiB;AAC7B,QAAA,IAAI,EAAE,SAAS;AAClB,KAAA,EACD,OAAO,EACP,UAAU,GAAG,CAAC,CACjB;AACD,IAAA,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC;AAC/B;AAEA,eAAe,UAAU,CAAC,GAAe,EAAE,IAAY,EAAE,UAAkB,EAAA;IACvE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACzC,KAAK,EACL,GAAmB,EACnB,EAAE,IAAI,EAAE,MAAM,EAAE,EAChB,KAAK,EACL,CAAC,YAAY,CAAC,CACjB;IACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CACvC;AACI,QAAA,IAAI,EAAE,MAAM;AACZ,QAAA,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,IAAI,UAAU,EAAkB;AACtC,QAAA,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAiB;AAClD,KAAA,EACD,OAAO,EACP,UAAU,GAAG,CAAC,CACjB;AACD,IAAA,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC;AAC/B;AAEA,SAAS,gBAAgB,CAAC,KAAiB,EAAA;IACvC,IAAI,GAAG,GAAG,EAAE;AACZ,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;AAChF;AAEA;AACA;AACA;AACA,eAAe,iBAAiB,CAC5B,SAAqB,EACrB,IAAoB,EACpB,WAAuB,EACvB,UAAsB,EAAA;AAEtB,IAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;IAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;AAChC,IAAA,MAAM,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC;AAC9B,IAAA,MAAM,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC;AAC9B,IAAA,MAAM,EAAE,GAAG,gBAAgB,CAAC,SAAS,CAAC;AAEtC,IAAA,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5C,KAAK,EACL,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAC3D,IAAI,EACJ,KAAK,EACL,WAAW,CACd;AACD,IAAA,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC3C,KAAK,EACL,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EACpD,IAAI,EACJ,IAAI,EACJ,UAAU,CACb;AACD,IAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE;AACpC;AAEA,eAAe,kBAAkB,CAAC,SAAqB,EAAA;IACnD,OAAO,iBAAiB,CACpB,SAAS,EACT,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,CAAC,MAAM,CAAC,EACR,CAAC,QAAQ,CAAC,CACb;AACL;AAEA,eAAe,iBAAiB,CAAC,SAAqB,EAAA;IAClD,OAAO,iBAAiB,CACpB,SAAS,EACT,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EACrC,CAAC,WAAW,EAAE,YAAY,CAAC,EAC3B,EAAE,CACL;AACL;AAEA;;;;;;AAMG;AACI,eAAe,cAAc,CAAC,QAAgB,EAAE,QAAgB,EAAA;IACnE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;AACvD,QAAA,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC;IAC7D;IACA,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;AACvD,QAAA,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC;IAC7D;IACA,MAAM,IAAI,GAAG,MAAM,4BAA4B,CAAC,QAAQ,EAAE,QAAQ,CAAC;AACnE,IAAA,OAAO,sBAAsB,CAAC,IAAI,CAAC;AACvC;AAEA;;;;;;;;AAQG;AACI,eAAe,4BAA4B,CAAC,QAAgB,EAAE,QAAgB,EAAA;IACjF,OAAO,WAAW,CAAC,QAAQ,EAAE,eAAe,GAAG,QAAQ,EAAE,YAAY,CAAC;AAC1E;AAEA;;;;;AAKG;AACI,eAAe,sBAAsB,CAAC,IAAgB,EAAA;AACzD,IAAA,IAAI,EAAE,IAAI,YAAY,UAAU,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE;AAC/D,QAAA,MAAM,IAAI,KAAK,CAAC,sCAAsC,YAAY,CAAA,UAAA,CAAY,CAAC;IACnF;IAEA,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC;IACrE,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,YAAY,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC;AAElE,IAAA,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC;AACxD,IAAA,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC;IAErD,OAAO;AACH,QAAA,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC;AAC7B,QAAA,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC;QACzB,YAAY;QACZ,WAAW;KACd;AACL;;ACxMA;;;;;;;;;;;;;AAaG;AAOH,IAAI,SAAS,GAAsB,IAAI;AACvC,IAAI,YAAY,GAA+B,IAAI;AAEnD,eAAe,YAAY,GAAA;AACvB,IAAA,IAAI,SAAS;AAAE,QAAA,OAAO,SAAS;AAC/B,IAAA,IAAI,YAAY;AAAE,QAAA,OAAO,YAAY;AACrC,IAAA,YAAY,GAAG,CAAC,YAAW;AACvB,QAAA,MAAM,EAAE,IAAI,MAAM,aAAa,EAAE,CAA0B;QAC3D,SAAS,GAAG,EAAE;AACd,QAAA,OAAO,EAAE;IACb,CAAC,GAAG;AACJ,IAAA,OAAO,YAAY;AACvB;AAEA;;;;AAIG;AACI,eAAe,YAAY,CAC9B,MAAuC,EAAA;AAEvC,IAAA,MAAM,CAAC,GAAG,MAAM,YAAY,EAAE;IAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAI;QAC/B,IAAI,OAAO,CAAC,KAAK,QAAQ;AAAE,YAAA,OAAO,CAAC;QACnC,IAAI,OAAO,CAAC,KAAK,QAAQ;AAAE,YAAA,OAAO,MAAM,CAAC,CAAC,CAAC;AAC3C,QAAA,OAAO,MAAM,CAAC,CAAC,CAAC;AACpB,IAAA,CAAC,CAAC;AACF,IAAA,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC;IACzB,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;AAC7B;;AClDA;;;;;;;;;;;;AAYG;AAuBH,IAAI,QAAQ,GAAmB,IAAI;AACnC,eAAe,WAAW,GAAA;AACtB,IAAA,IAAI,QAAQ;AAAE,QAAA,OAAO,QAAQ;IAC7B,QAAQ,IAAI,MAAM,OAAO,SAAS,CAAC,CAAuB;AAC1D,IAAA,OAAO,QAAQ;AACnB;AAWA;;;;;;;AAOG;AACG,SAAU,kBAAkB,CAAC,OAAe,EAAA;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IACxC,OAAO;QACH,OAAO,EAAE,CAAA,EAAG,IAAI,CAAA,+CAAA,CAAiD;QACjE,OAAO,EAAE,CAAA,EAAG,IAAI,CAAA,qCAAA,CAAuC;KAC1D;AACL;AAEA;AACA,MAAM,UAAU,GAAG,8EAA8E;AAEjG;;;;;;;;;;;;;;;;;AAiBG;AACG,SAAU,OAAO,CAAC,KAA+B,EAAA;AACnD,IAAA,IAAI,CAAS;IACb,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,CAAC,GAAG,KAAK;SACnC,IAAI,OAAO,KAAK,KAAK,QAAQ;AAAE,QAAA,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;AAChD,SAAA,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;AAAE,QAAA,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;AAC7C,SAAA,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE;;AAEzD,QAAA,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC;IAC5B;AAAO,SAAA,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;AAAE,QAAA,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;SAC/C;;QAED,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;QAC7C,IAAI,GAAG,GAAG,EAAE;QACZ,KAAK,MAAM,CAAC,IAAI,KAAK;AAAE,YAAA,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;AAC7D,QAAA,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC;IAC1B;AACA,IAAA,CAAC,GAAG,CAAC,GAAG,UAAU;IAClB,IAAI,CAAC,GAAG,EAAE;QAAE,CAAC,IAAI,UAAU;AAC3B,IAAA,OAAO,CAAC,CAAC,QAAQ,EAAE;AACvB;AAEA;;;AAGG;AACI,eAAe,eAAe,CACjC,SAAiB,EACjB,OAAe,EACf,WAAmB,EAAA;AAEnB,IAAA,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC;AACtC,IAAA,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;AAClC,IAAA,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC;IAC1C,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,CAAC,aAAa,CAAC,CAAC;IACxD,OAAO,MAAM,YAAY,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AACrE;AAEA;;;;;;;;AAQG;AACI,eAAe,iBAAiB,CAAC,IAOvC,EAAA;IAOG,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;IACvC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;IAEzC,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,CAAC,aAAa,CAAC,CAAC;AACxD,IAAA,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AAE7E,IAAA,MAAM,YAAY,GAA2B;;QAEzC,UAAU;AACV,QAAA,KAAK,EAAE,UAAU;QACjB,YAAY;;AAEZ,QAAA,MAAM,EAAE,WAAW;AACnB,QAAA,IAAI,EAAE,SAAS;AACf,QAAA,QAAQ,EAAE,aAAa;KAC1B;AAED,IAAA,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE;IACnC,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAC5D,YAAY,EACZ,IAAI,CAAC,QAAQ,CAAC,OAAO,EACrB,IAAI,CAAC,QAAQ,CAAC,OAAO,CACxB;IAED,OAAO;AACH,QAAA,KAAK,EAAE,KAAqB;QAC5B,aAAa;QACb,UAAU;QACV,UAAU;QACV,YAAY;KACf;AACL;;ACrLA;;;;;;;;;;;;;;AAcG;AAIH,SAAS,aAAa,CAAC,KAAiB,EAAA;IACpC,IAAI,GAAG,GAAG,EAAE;AACZ,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC3E,IAAA,OAAO,IAAI,CAAC,GAAG,CAAC;AACpB;AAEA;AACO,eAAe,kBAAkB,CAAC,SAAoB,EAAA;AACzD,IAAA,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC;IAC3D,OAAO,KAAK,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;AACrC;AAEA;AACO,eAAe,qBAAqB,CAAC,SAAoB,EAAA;AAC5D,IAAA,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC;IAC3D,OAAO,aAAa,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;AAC7C;AAEA;AACO,eAAe,WAAW,CAAC,OAAe,EAAE,UAAqB,EAAA;IACpE,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAChC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAClC,UAAU,EACV,IAAI,CACP;IACD,OAAO,aAAa,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;AAC7C;;AC7CA;;;;;;;;;;;;;;;;;AAiBG;AAIH,MAAMC,IAAE,GAAG,IAAI,WAAW,EAAE;AAE5B;AACA,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAW;AAE7D;SACgB,UAAU,GAAA;IACxB,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;AACnD;AAEA;AACM,SAAU,eAAe,CAAC,QAAgB,EAAE,QAAgB,EAAA;IAChE,OAAO,MAAM,CAACA,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAEA,IAAE,CAAC,MAAM,CAAC,kBAAkB,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC;AACpG;AAEA;AACO,eAAe,eAAe,CAAC,UAAsB,EAAA;IAC1D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAA0B,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC;IACpH,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,UAAU,EAAkB,EAAE,IAAI,EAAEA,IAAE,CAAC,MAAM,CAAC,mBAAmB,CAAiB,EAAE,EAC/H,GAAG,EACH,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB;AACH;AAEA;AACO,eAAe,gBAAgB,CAAC,WAAuB,EAAE,IAAY,EAAA;IAC1E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,WAA2B,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC;IACrH,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,UAAU,EAAkB,EAAE,IAAI,EAAEA,IAAE,CAAC,MAAM,CAAC,IAAI,CAAiB,EAAE,EAChH,GAAG,EACH,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB;AACH;AAQO,eAAe,QAAQ,CAAC,IAAgB,EAAE,GAAc,EAAA;AAC7D,IAAA,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACrD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAoB,CAAC;AAC1F,IAAA,OAAO,EAAE,EAAE,EAAEb,UAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,EAAEA,UAAQ,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE;AAC/D;AAEA;AACO,eAAe,UAAU,CAAC,OAAoB,EAAE,GAAc,EAAA;AACnE,IAAA,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACpC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAEC,YAAU,CAAC,OAAO,CAAC,EAAE,CAAiB,EAAE,EAC/D,GAAG,EACHA,YAAU,CAAC,OAAO,CAAC,EAAE,CAAiB,CACvC;AACD,IAAA,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;AAC3B;AAEM,SAAUD,UAAQ,CAAC,KAAiB,EAAA;IACxC,IAAI,CAAC,GAAG,EAAE;AACV,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzE,IAAA,OAAO,IAAI,CAAC,CAAC,CAAC;AAChB;AAEM,SAAUC,YAAU,CAAC,GAAW,EAAA;AACpC,IAAA,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;IACnB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;AACpC,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AAC3D,IAAA,OAAO,GAAG;AACZ;;AC7FA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCG;AAIH,MAAMY,IAAE,GAAG,IAAI,WAAW,EAAE;AAC5B,MAAMC,IAAE,GAAG,IAAI,WAAW,EAAE;AAuB5B;AACO,eAAe,QAAQ,CAAC,IAAgB,EAAA;AAC3C,IAAA,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,KAAqB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC;AAChH,IAAA,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACrD,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAAE,GAAG,EAAE,IAAoB,CAAC,CAAC;IAC9H,MAAM,QAAQ,GAAmB,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAEd,UAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,EAAEA,UAAQ,CAAC,EAAE,CAAC,EAAE;IAC7E,OAAO;AACH,QAAA,UAAU,EAAEA,UAAQ,CAACa,IAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzD,QAAA,WAAW,EAAE,eAAe,CAAC,KAAK,CAAC;KACtC;AACL;AAEA;AACO,eAAe,UAAU,CAAC,UAAkB,EAAE,WAAmB,EAAA;AACpE,IAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAACC,IAAE,CAAC,MAAM,CAACb,YAAU,CAAC,UAAU,CAAC,CAAC,CAAmB;AAChF,IAAA,IAAI,QAAQ,CAAC,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,CAAA,qCAAA,EAAwC,QAAQ,CAAC,CAAC,CAAA,CAAE,CAAC;AAC3F,IAAA,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,KAAqB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC;AAChH,IAAA,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACpC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAEA,YAAU,CAAC,QAAQ,CAAC,EAAE,CAAiB,EAAE,EAChE,GAAG,EACHA,YAAU,CAAC,QAAQ,CAAC,EAAE,CAAiB,CAC1C;AACD,IAAA,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC;AAC/B;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA,MAAM,aAAa,GAAuC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE;AAE/F;;;;AAIG;AACH,MAAM,YAAY,GAAG,sCAAsC;AAE3D;AACA,MAAM,mBAAmB,GAAG,uCAAuC;AAEnE;;;;;;;AAOG;AACI,MAAM,qBAAqB,GAAG;AAErC;AACO,MAAM,mBAAmB,GAAG;AAEnC;;;;AAIG;AACH,MAAM,uBAAuB,GAAG,OAAO;AAcvC;;;;;AAKG;AACI,eAAe,4BAA4B,GAAA;AAC9C,IAAA,MAAM,IAAI,IAAI,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAkB;AACrG,IAAA,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;AAChF,IAAA,OAAO,EAAE,YAAY,EAAED,UAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;AACvE;AAEA;;;;;;;;;;AAUG;AACI,eAAe,gBAAgB,CAAC,IAAgB,EAAE,kBAA0B,EAAA;AAC/E,IAAA,MAAM,YAAY,GAAG,sBAAsB,CAAC,kBAAkB,CAAC;AAC/D,IAAA,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,YAAY,CAAC;AAE5D,IAAA,MAAM,SAAS,IAAI,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAkB;AAC1G,IAAA,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;AAExF,IAAA,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,SAAS,CAAC,CAAC;AACzG,IAAA,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACrD,MAAM,EAAE,GAAG,IAAI,UAAU,CACrB,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAAE,GAAG,EAAE,IAAoB,CAAC,CACtG;AAED,IAAA,MAAM,QAAQ,GAAqB,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAEA,UAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,EAAEA,UAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,EAAEA,UAAQ,CAAC,EAAE,CAAC,EAAE;AACtG,IAAA,OAAOA,UAAQ,CAACa,IAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxD;AAEA;;;;;;;;;;;;AAYG;AACI,eAAe,oBAAoB,CACtC,UAAkB,EAClB,UAAqB,EACrB,kBAA0B,EAAA;AAE1B,IAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAACC,IAAE,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAqB;AACvF,IAAA,IAAI,QAAQ,CAAC,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,CAAA,4CAAA,EAA+C,QAAQ,CAAC,CAAC,CAAA,CAAE,CAAC;AAElG,IAAA,MAAM,YAAY,GAAG,sBAAsB,CAAC,kBAAkB,CAAC;IAC/D,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAQ,CAAC,GAAG,CAAC;AACnD,IAAA,MAAM,GAAG,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC;AAEhD,IAAA,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,SAAS,CAAC,CAAC;AACzF,IAAA,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACpC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAiB,EAAE,EACrE,GAAG,EACH,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAiB,CAC/C;AACD,IAAA,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC;AAC/B;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCG;AACI,eAAe,uBAAuB,CAAC,kBAA0B,EAAA;AACpE,IAAA,MAAM,MAAM,GAAG,sBAAsB,CAAC,kBAAkB,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAsB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE;QACrG,YAAY;AACf,KAAA,CAAC;;;;IAIF,MAAM,IAAI,GAAG,IAAI,UAAU,CACvB,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAC1B;AACI,QAAA,IAAI,EAAE,QAAQ;AACd,QAAA,IAAI,EAAE,SAAS;AACf,QAAA,IAAI,EAAED,IAAE,CAAC,MAAM,CAAC,mBAAmB,CAAiB;AACpD,QAAA,UAAU,EAAE,uBAAuB;AACtC,KAAA,EACD,QAAQ,EACR,GAAG,CACN,CACJ;;;AAID,IAAA,MAAM,CAAC,GAAG,qBAAqB,CAAC,MAAM;AACtC,IAAA,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,GAAG,GAAG,EAAE;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC,EAAE,EAAE;AACtE,QAAA,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK;YAAE;QACtB,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7C;AACA,IAAA,IAAI,GAAG,CAAC,MAAM,GAAG,mBAAmB,EAAE;;;AAGlC,QAAA,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC;IAClE;;AAEA,IAAA,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/C;AAEA;AAEA;;;;;;;;;;;;;;;;;;;;;AAqBG;AACH,eAAe,mBAAmB,CAC9B,IAAe,EACf,GAAc,EACd,MAAkB,EAClB,YAAwB,EACxB,MAAkB,EAAA;IAElB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACvG,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAsB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC;IACjH,MAAM,KAAK,GAAGA,IAAE,CAAC,MAAM,CAAC,YAAY,CAAC;AACrC,IAAA,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;AAC/D,IAAA,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CACtC;AACI,QAAA,IAAI,EAAE,MAAM;AACZ,QAAA,IAAI,EAAE,SAAS;AACf,QAAA,IAAI,EAAE,MAAsB;AAC5B,QAAA,IAAI,EAAE,IAAoB;AAC7B,KAAA,EACD,GAAG,EACH,GAAG,CACN;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC;AAClF;AAEA;AACA,SAAS,sBAAsB,CAAC,GAAW,EAAA;IACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE;AAC7C,QAAA,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC;IAC5E;AACA,IAAA,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC;AAChC,IAAA,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE;AACtC,QAAA,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC;IACrF;AACA,IAAA,OAAO,GAAG;AACd;AAEA;AACA,SAAS,sBAAsB,CAAC,GAAe,EAAA;AAC3C,IAAA,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAmB,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,CAAC;AACxF;AAEA;;;;;AAKG;AACH,SAAS,eAAe,CAAC,CAAS,EAAA;AAC9B,IAAA,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;IACpD,OAAOZ,YAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AACvE;AASA;AACO,eAAe,YAAY,GAAA;AAC9B,IAAA,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAEY,IAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IAC7F,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE;AACnE;AAEA;SACgB,WAAW,GAAA;AACvB,IAAA,OAAO,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;AACtE;AAEA,SAAS,eAAe,CAAC,KAAiB,EAAA;IACtC,OAAOb,UAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;AACrF;AACA,SAAS,eAAe,CAAC,CAAS,EAAA;AAC9B,IAAA,OAAOC,YAAU,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AACvG;;ACxZA;;;;;;;AAOG;AACI,MAAM,OAAO,GAAG,gBAAgB;;ACRvC;;;;;;;;;;;;;;;;;;;;AAoBG;AAuCH;AACA,MAAM,UAAU,GAAG,CAAC,MAAK;AACrB,IAAA,IAAI;AACA,QAAA,OAAO,OAAO,QAAQ,KAAK,WAAW,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACvF;AAAE,IAAA,MAAM;AACJ,QAAA,OAAO,KAAK;IAChB;AACJ,CAAC,GAAG;AAEJ;AACA,SAAS,OAAO,CAAC,KAAwB,EAAA;AACrC,IAAA,IAAI;AACA,QAAA,MAAM,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,GAAG,KAAK,GAAG,KAAK,YAAY,GAAG,GAAG,KAAK,CAAC,IAAI,GAAI,KAAiB,CAAC,GAAG;AACxG,QAAA,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;AAAE,YAAA,OAAO,CAAC;AACtC,QAAA,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;AACzB,QAAA,OAAO,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM;IAC1C;AAAE,IAAA,MAAM;AACJ,QAAA,OAAO,GAAG;IACd;AACJ;AAEA;AACM,MAAO,SAAU,SAAQ,KAAK,CAAA;AAGnB,IAAA,MAAA;AACA,IAAA,IAAA;AAHb,IAAA,WAAA,CACI,OAAe,EACN,MAAc,EACd,IAAc,EAAA;QAEvB,KAAK,CAAC,OAAO,CAAC;QAHL,IAAA,CAAA,MAAM,GAAN,MAAM;QACN,IAAA,CAAA,IAAI,GAAJ,IAAI;AAGb,QAAA,IAAI,CAAC,IAAI,GAAG,WAAW;IAC3B;AACH;MAEY,UAAU,CAAA;AACV,IAAA,OAAO;;AAEC,IAAA,UAAU;AACV,IAAA,MAAM;;AAEN,IAAA,WAAW;AACX,IAAA,eAAe;AACf,IAAA,cAAc;AACd,IAAA,OAAO;AAExB,IAAA,WAAA,CAAY,IAAuB,EAAA;QAC/B,IAAI,CAAC,IAAI,EAAE,OAAO;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC;AACxE,QAAA,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;AAC/C,QAAA,IAAI;AAAE,YAAA,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM;QAAE;AAAE,QAAA,MAAM;AAAE,YAAA,IAAI,CAAC,UAAU,GAAG,EAAE;QAAE;QACtF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI;QACjC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI;AAC3C,QAAA,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,KAAK,MAAM,IAAI,CAAC;QAC3D,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI;QAEjD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK;AACxC,QAAA,IAAI,OAAO,CAAC,KAAK,UAAU,EAAE;AACzB,YAAA,MAAM,IAAI,KAAK,CACX,0EAA0E,CAC7E;QACL;QACA,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;IACrC;AAEA;;;;AAIG;AACM,IAAA,KAAK,GAAiB,CAAC,KAAK,EAAE,IAAI,KAAI;QAC3C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;;;;;AAK1C,QAAA,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE;;;YAG1B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM;AAC3C,YAAA,IAAI,GAAG;AAAE,gBAAA,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC;AACzC,YAAA,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,EAAE;AACpC,YAAA,IAAI,KAAK;AAAE,gBAAA,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC;QACrD;QACA,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE;AACtC,QAAA,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC;;;AAGtD,QAAA,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE;AAC3B,QAAA,MAAM,GAAG,GAAG,CAAA,EAAG,IAAI,EAAE,MAAM,IAAI,KAAK,CAAA,CAAA,EAAI,OAAO,CAAC,KAAK,CAAC,EAAE;AACxD,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,IAAI,CACtC,CAAC,GAAG,KAAI,EAAG,OAAO,CAAC,IAAI,CAAC,CAAA,cAAA,EAAiB,GAAG,CAAA,GAAA,EAAM,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA,EAAA,CAAI,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EACrH,CAAC,GAAG,OAAO,OAAO,CAAC,IAAI,CAAC,CAAA,cAAA,EAAiB,GAAG,CAAA,SAAA,EAAY,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA,EAAA,CAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAC/G;AACL,IAAA,CAAC;;AAGO,IAAA,YAAY,CAAC,KAAwB,EAAA;AACzC,QAAA,IAAI;YACA,MAAM,MAAM,GACR,OAAO,KAAK,KAAK,QAAQ,GAAG;kBAC1B,KAAK,YAAY,GAAG,GAAG,KAAK,CAAC;AAC/B,sBAAG,KAAiB,CAAC,GAAG;;AAE5B,YAAA,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;AAAE,gBAAA,OAAO,IAAI;YAC9C,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,UAAU;QACrD;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO,IAAI;QACf;IACJ;;;;AAMA,IAAA,GAAG,CAAc,IAAY,EAAA;QACzB,OAAO,IAAI,CAAC,OAAO,CAAI,KAAK,EAAE,IAAI,CAAC;IACvC;IAEA,IAAI,CAAc,IAAY,EAAE,IAAc,EAAA;QAC1C,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;IAC9C;IAEA,KAAK,CAAc,IAAY,EAAE,IAAc,EAAA;QAC3C,OAAO,IAAI,CAAC,OAAO,CAAI,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;IAC/C;IAEA,GAAG,CAAc,IAAY,EAAE,IAAc,EAAA;QACzC,OAAO,IAAI,CAAC,OAAO,CAAI,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC;IAChD;IAEQ,MAAM,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc,EAAE,aAAa,GAAG,IAAI,EAAA;AACvF,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAA,EAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,CAAA,EAAG,IAAI,EAAE;AACvG,QAAA,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE;AACpC,QAAA,IAAI,IAAI,KAAK,SAAS,EAAE;YACpB,IAAI,CAAC,OAAO,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACrD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QACpC;QACA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;;;;AAKvC,QAAA,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,aAAa,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE;AACtF,YAAA,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE;YAC7C,IAAI,SAAS,EAAE;AACX,gBAAA,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC;YACrD;QACJ;QAEA,IAAI,MAAM,GAAY,IAAI;AAC1B,QAAA,IAAI;AACA,YAAA,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE;QAC7B;AAAE,QAAA,MAAM;;QAER;AACA,QAAA,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;YACT,MAAM,GAAG,GACL,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAK;AAChD,kBAAE,MAAM,CAAE,MAA6B,CAAC,KAAK;kBAC3C,CAAA,EAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,CAAA,CAAE;YAC3C,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;QAChD;AACA,QAAA,OAAO,MAAW;IACtB;AACH;;AC7ND;;;;;;;;;;;;;;;;;;;;;AAqBG;AA0BH;MACa,kBAAkB,CAAA;IACnB,OAAO,GAAyB,IAAI;IAC5C,IAAI,GAAA;QACA,OAAO,IAAI,CAAC,OAAO;IACvB;AACA,IAAA,IAAI,CAAC,OAAsB,EAAA;AACvB,QAAA,IAAI,CAAC,OAAO,GAAG,OAAO;IAC1B;IACA,KAAK,GAAA;AACD,QAAA,IAAI,CAAC,OAAO,GAAG,IAAI;IACvB;AACH;AAED;;;;;;;;;AASG;MACU,wBAAwB,CAAA;AAChB,IAAA,QAAQ;AACR,IAAA,WAAW;AACX,IAAA,aAAa;IAE9B,WAAA,CAAY,SAAS,GAAG,iBAAiB,EAAA;AACrC,QAAA,IAAI,OAAO,YAAY,KAAK,WAAW,EAAE;YACrC,MAAM,IAAI,KAAK,CACX,6EAA6E;AACzE,gBAAA,kEAAkE,CACzE;QACL;AACA,QAAA,IAAI,CAAC,QAAQ,GAAG,CAAA,EAAG,SAAS,OAAO;AACnC,QAAA,IAAI,CAAC,WAAW,GAAG,CAAA,EAAG,SAAS,UAAU;AACzC,QAAA,IAAI,CAAC,aAAa,GAAG,CAAA,EAAG,SAAS,YAAY;IACjD;IAEA,IAAI,GAAA;QACA,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;QACjD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;QACvD,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;AAC3D,QAAA,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU;AAAE,YAAA,OAAO,IAAI;AACnD,QAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC1C;AAEA,IAAA,IAAI,CAAC,OAAsB,EAAA;QACvB,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC;QAClD,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC;QACxD,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC;IAChE;IAEA,KAAK,GAAA;AACD,QAAA,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;AACtC,QAAA,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AACzC,QAAA,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC;IAC/C;AACH;AAED;;;;;;AAMG;AACG,SAAU,mBAAmB,CAAC,SAAkB,EAAA;AAClD,IAAA,IAAI;;;;;AAKA,QAAA,IAAI,OAAO,YAAY,KAAK,WAAW,EAAE;AACrC,YAAA,YAAY,CAAC,OAAO,CAAC,kBAAkB,CAAC;AACxC,YAAA,OAAO,IAAI,wBAAwB,CAAC,SAAS,CAAC;QAClD;IACJ;AAAE,IAAA,MAAM;;IAER;IACA,OAAO,IAAI,kBAAkB,EAAE;AACnC;MAEa,YAAY,CAAA;IACb,OAAO,GAAyB,IAAI;IACpC,SAAS,GAAsB,IAAI;AAC3C;;AAEoE;IAC5D,KAAK,GAAsB,IAAI;AACtB,IAAA,KAAK;AAEtB,IAAA,WAAA,CAAY,KAAoB,EAAA;QAC5B,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,IAAI,kBAAkB,EAAE;IAClD;;AAGA,IAAA,IAAI,eAAe,GAAA;AACf,QAAA,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI;IAChC;;AAGA,IAAA,IAAI,UAAU,GAAA;AACV,QAAA,OAAO,IAAI,CAAC,SAAS,KAAK,IAAI;IAClC;AAEA,IAAA,IAAI,KAAK,GAAA;AACL,QAAA,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI;IACtC;AAEA,IAAA,IAAI,QAAQ,GAAA;AACR,QAAA,OAAO,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,IAAI;IACzC;AAEA,IAAA,IAAI,UAAU,GAAA;AACV,QAAA,OAAO,IAAI,CAAC,OAAO,EAAE,UAAU,IAAI,IAAI;IAC3C;AAEA,IAAA,IAAI,QAAQ,GAAA;QACR,OAAO,IAAI,CAAC,SAAS;IACzB;;IAGA,eAAe,GAAA;AACX,QAAA,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YACjB,MAAM,IAAI,KAAK,CACX,0EAA0E;AAC1E,gBAAA,6CAA6C,CAChD;QACL;QACA,OAAO,IAAI,CAAC,SAAS;IACzB;;IAGA,MAAM,UAAU,CAAC,OAAsB,EAAA;AACnC,QAAA,IAAI,CAAC,OAAO,GAAG,OAAO;QACtB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;IAClC;;AAGA,IAAA,WAAW,CAAC,QAAoB,EAAA;AAC5B,QAAA,IAAI,CAAC,SAAS,GAAG,QAAQ;IAC7B;;AAGA,IAAA,IAAI,IAAI,GAAA;QACJ,OAAO,IAAI,CAAC,KAAK;IACrB;;AAGA,IAAA,OAAO,CAAC,IAAuB,EAAA;AAC3B,QAAA,IAAI,CAAC,KAAK,GAAG,IAAI;IACrB;;AAGA,IAAA,MAAM,aAAa,GAAA;QACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;AACtC,QAAA,IAAI,MAAM;AAAE,YAAA,IAAI,CAAC,OAAO,GAAG,MAAM;AACjC,QAAA,OAAO,MAAM;IACjB;;AAGA,IAAA,MAAM,KAAK,GAAA;AACP,QAAA,IAAI,CAAC,OAAO,GAAG,IAAI;AACnB,QAAA,IAAI,CAAC,SAAS,GAAG,IAAI;QACrB,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnC,QAAA,IAAI,CAAC,KAAK,GAAG,IAAI;AACjB,QAAA,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;IAC5B;AACH;;AC1ND;;;;;;AAMG;AAKH;AACM,SAAU,cAAc,CAAC,IAAgB,EAAA;AAC7C,IAAA,IAAI,EAAE,IAAI,YAAY,UAAU,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE;AACvD,QAAA,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC;IAC5D;AACA,IAAA,OAAO,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC;AAC1C;AAEA,SAAS,SAAS,CAAC,QAAgB,EAAA;AACjC,IAAA,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;AAC3D;AAEA;AACM,SAAU,cAAc,CAAC,QAAgB,EAAA;AAC7C,IAAA,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC;AAC7B,IAAA,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,QAAQ,CAAC;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC;AAC/E,IAAA,OAAO,iBAAiB,CAAC,CAAC,EAAE,QAAQ,CAAC;AACvC;;AC5BA;;;;;;;;;;;;;;;;;;;AAmBG;AAIH,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI;AACnC;AACiB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB;AAS1D;AACM,SAAU,SAAS,CAAC,KAAiB,EAAA;AACzC,IAAA,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;AAC5C,IAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;AAC3B;AAEA;SACgB,YAAY,CAAC,KAAiB,EAAE,KAAiB,EAAE,SAAqB,EAAA;IACtF,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC;AAC/C;;AC3CA;;;;;;;;;;;AAWG;AAOH;;;;AAIG;AACI,eAAe,gBAAgB,CAAC,QAAgB,EAAE,KAAa,EAAA;AAClE,IAAA,MAAM,GAAG,GAAG,CAAA,uBAAA,EAA0B,QAAQ,CAAC,WAAW,EAAE,CAAA,CAAA,EAAI,KAAK,CAAC,WAAW,EAAE,EAAE;IACrF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACnF,IAAA,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC;AACjC;AAEA;;;;AAIG;AACI,eAAe,iBAAiB,CAAC,QAAgB,EAAE,GAAW,EAAA;IACjE,MAAM,GAAG,GAAG,CAAA,wBAAA,EAA2B,QAAQ,CAAC,WAAW,EAAE,CAAA,CAAA,EAAI,GAAG,CAAA,CAAE;IACtE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACnF,IAAA,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC;AACjC;AAEA;AACM,SAAU,UAAU,CAAC,KAAiB,EAAA;AACxC,IAAA,OAAO,SAAS,CAAC,KAAK,CAAC;AAC3B;AAEA;;;AAGG;AACI,eAAe,YAAY,CAC9B,KAAiB,EACjB,KAAiB,EACjB,YAAoB,EACpB,aAAqB,EAAA;AAErB,IAAA,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,EAAEA,YAAU,CAAC,YAAY,CAAC,CAAC;AACjE,IAAA,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,EAAEA,YAAU,CAAC,aAAa,CAAC,CAAC;AAClE,IAAA,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;AACrD,IAAA,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;IACb,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;AAC1B,IAAA,OAAO,gBAAgB,CAAC,GAAG,EAAE,sBAAsB,CAAC;AACxD;;AC7DA;;;;;;;;;;AAUG;AAEH,SAAS,IAAI,CAAC,CAAS,EAAA;IACrB,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAClD;AAEA;SACgB,gBAAgB,GAAA;AAC9B,IAAA,QACE,OAAO,SAAS,KAAK,WAAW;QAChC,CAAC,CAAC,SAAS,CAAC,WAAW;AACvB,QAAA,OAAO,mBAAmB,KAAK,WAAW;AAE9C;AAEA;;;;;;;;;;;;;AAaG;AACI,eAAe,iBAAiB,GAAA;IACrC,IAAI,CAAC,gBAAgB,EAAE;AAAE,QAAA,OAAO,KAAK;IACrC,MAAM,EAAE,GAAG,mBAEV;AACD,IAAA,IAAI,OAAO,EAAE,CAAC,qBAAqB,KAAK,UAAU;AAAE,QAAA,OAAO,IAAI;AAC/D,IAAA,IAAI;AACF,QAAA,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,qBAAqB,EAAE;;AAE7C,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC;AAC1E,QAAA,OAAO,OAAO,GAAG,KAAK,SAAS,GAAG,GAAG,GAAG,IAAI;IAC9C;AAAE,IAAA,MAAM;AACN,QAAA,OAAO,IAAI;IACb;AACF;AAEA;AACwD;SACxC,WAAW,GAAA;AACzB,IAAA,OAAO,OAAO,QAAQ,KAAK,WAAW,GAAG,QAAQ,CAAC,QAAQ,GAAG,EAAE;AACjE;AAEA;;;;;;;;;;;;;AAaG;AACG,SAAU,mBAAmB,CAAC,IAA+B,EAAE,IAAa,EAAA;IAChF,MAAM,CAAC,GAAG,IAAI,KAAK,OAAO,QAAQ,KAAK,WAAW,GAAG,QAAQ,CAAC,QAAQ,GAAG,EAAE,CAAC;AAC5E,IAAA,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;AAAE,QAAA,OAAO,KAAK;AAC7B,IAAA,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAA,CAAA,EAAI,IAAI,CAAA,CAAE,CAAC;AAC7C;AAEA;;;;;;;;;;;;;;;AAeG;AACG,SAAU,uBAAuB,CAAC,IAA+B,EAAE,IAAa,EAAA;AACpF,IAAA,MAAM,CAAC,GAAG,IAAI,IAAI,WAAW,EAAE;AAC/B,IAAA,IAAI,CAAC,CAAC;AAAE,QAAA,OAAO,KAAK;IACpB,IAAI,IAAI,IAAI,IAAI;AAAE,QAAA,OAAO,IAAI;AAC7B,IAAA,OAAO,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC;AACrC;AAEA;AAC8E;AACxE,MAAO,kBAAmB,SAAQ,KAAK,CAAA;IAClC,IAAI,GAAG,sBAAsB;IACtC,WAAA,CAAY,OAAO,GAAG,0FAA0F,EAAA;QAC9G,KAAK,CAAC,OAAO,CAAC;AACd,QAAA,IAAI,CAAC,IAAI,GAAG,oBAAoB;IAClC;AACD;AAQD;;;AAGG;AACI,eAAe,oBAAoB,CAAC,IAAwD,EAAA;IACjG,IAAI,CAAC,gBAAgB,EAAE;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC;IACtF,MAAM,OAAO,IAAI,MAAM,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC;AAClD,QAAA,SAAS,EAAE;AACT,YAAA,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;YACxC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAiB,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE;AACvF,YAAA,SAAS,EAAE,IAAI,CAAC,EAAE,CAAiB;YACnC,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;;;;;;;AAOtF,YAAA,sBAAsB,EAAE,EAAE,uBAAuB,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE;AACxH,YAAA,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,EAA0C;AAChE,SAAA;AACF,KAAA,CAAC,CAA+B;AACjC,IAAA,IAAI,CAAC,OAAO;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC;IAChE,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;;;;AAIlD,IAAA,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC;AACxB,IAAA,IAAI,SAAqB;AACzB,IAAA,IAAI;AACF,QAAA,SAAS,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC;IACxE;AAAE,IAAA,MAAM;;;;;;QAMN,MAAM,IAAI,KAAK,CACb,2EAA2E;YACzE,0EAA0E;YAC1E,2EAA2E;AAC3E,YAAA,0BAA0B,CAC7B;IACH;AACA,IAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE;AAC7C;AAEA;AACO,eAAe,kBAAkB,CAAC,IAAY,EAAE,YAAwB,EAAE,IAAgB,EAAA;IAC/F,IAAI,CAAC,gBAAgB,EAAE;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC;IACtF,MAAM,SAAS,IAAI,MAAM,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC;AACjD,QAAA,SAAS,EAAE;YACT,IAAI;AACJ,YAAA,SAAS,EAAE,IAAI,CAAC,EAAE,CAAiB;YACnC,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,YAA4B,EAAE,CAAC;AAC5E,YAAA,gBAAgB,EAAE,WAAW;AAC7B,YAAA,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAA0C;AACvF,SAAA;AACF,KAAA,CAAC,CAA+B;AACjC,IAAA,IAAI,CAAC,SAAS;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC;IACxE,MAAM,OAAO,GAAI,SAAS,CAAC,yBAAyB,EAAsD,EAAE,GAAG,EAAE,OAAO;IACxH,IAAI,CAAC,OAAO,EAAE,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC;AAChF,IAAA,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;AACtC;;ACvLA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8DG;AAIH,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE;AAC5B,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE;AAE5B;AACO,MAAM,2BAA2B,GAAG;AAC3C;AACO,MAAM,kBAAkB,GAAG;AAClC,MAAM,gBAAgB,GAAG,MAAM;AAC/B,MAAM,WAAW,GAAG,MAAM;AAC1B,MAAM,eAAe,GAAG,UAAU;AAalC;AACM,MAAO,2BAA4B,SAAQ,KAAK,CAAA;AAClD,IAAA,WAAA,CAAY,IAAY,EAAA;QACpB,KAAK,CACD,CAAA,yCAAA,EAA4C,IAAI,CAAA,EAAA,CAAI;AACpD,YAAA,+EAA+E,CAClF;AACD,QAAA,IAAI,CAAC,IAAI,GAAG,6BAA6B;IAC7C;AACH;AA+BD,IAAI,YAA+C;AACnD,IAAI,aAAiD;AACrD,IAAI,gBAAyD;AAE7D;AACA,IAAI,YAAY,GAAkC,IAAI;AACtD,IAAI,iBAAiB,GAAG,KAAK;AAE7B;;;;AAIG;AACG,SAAU,oBAAoB,CAAC,IAAA,GAIjC,EAAE,EAAA;AACF,IAAA,YAAY,GAAG,IAAI,CAAC,IAAI;AACxB,IAAA,aAAa,GAAG,IAAI,CAAC,KAAK;AAC1B,IAAA,gBAAgB,GAAG,IAAI,CAAC,QAAQ;IAChC,YAAY,GAAG,IAAI;IACnB,iBAAiB,GAAG,KAAK;AAC7B;AAEA;;;;AAIG;SACa,yBAAyB,GAAA;AACrC,IAAA,OAAO,iBAAiB;AAC5B;AAEA;AAEA;;;;;;;;AAQG;AACI,eAAe,iBAAiB,GAAA;AACnC,IAAA,IAAI,CAAC,YAAY;QAAE,YAAY,GAAG,uBAAuB,EAAE;AAC3D,IAAA,IAAI;QACA,OAAO,MAAM,YAAY;IAC7B;IAAE,OAAO,CAAC,EAAE;AACR,QAAA,YAAY,GAAG,IAAI,CAAC;AACpB,QAAA,MAAM,CAAC;IACX;AACJ;AAEA;AACO,eAAe,iBAAiB,GAAA;AACnC,IAAA,MAAM,IAAI,GAAG,MAAM,iBAAiB,EAAE;AACtC,IAAA,OAAO,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC;AACxC;AAEA;AACO,eAAe,iBAAiB,GAAA;IACnC,OAAO,SAAS,EAAE,EAAE,GAAG,CAAC,2BAA2B,CAAC,IAAI,IAAI;AAChE;AAEA;;;;AAIG;AACI,eAAe,qBAAqB,CAAC,CAA0B,EAAA;AAClE,IAAA,IAAI,EAAE,CAAC,EAAE,IAAI,YAAY,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE;AAC1D,QAAA,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC;IACtE;AACA,IAAA,MAAM,KAAK,GAAG,SAAS,EAAE;AACzB,IAAA,IAAI,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,2BAA2B,CAAC,iBAAiB,CAAC;IAEpE,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QACnC,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,UAAU,EAAE,CAAC,CAAC,UAAU;AACxB,QAAA,IAAI,EAAED,UAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;AACvB,KAAA,CAAC,CAAC;AAEH,IAAA,MAAM,MAAM,GAAG,cAAc,EAAE;AAC/B,IAAA,IAAI,QAA4B;IAChC,IAAI,MAAM,EAAE;QACR,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,MAAM,CAAC,IAAI,CAACA,UAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;IACtE;SAAO;AACH,QAAA,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;AAC/B,QAAA,IAAI,CAAC,GAAG;AAAE,YAAA,MAAM,IAAI,2BAA2B,CAAC,mCAAmC,CAAC;AACpF,QAAA,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,EAAE,GAAG,IAAI,UAAU,CACrB,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAAE,GAAG,EAAE,KAAqB,CAAC,CACvG;QACD,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAEA,UAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,EAAEA,UAAQ,CAAC,EAAE,CAAC,EAAE;IAC3D;AACA,IAAA,KAAK,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AACpE;AAEA;;;;;AAKG;AACI,eAAe,kBAAkB,GAAA;AACpC,IAAA,MAAM,KAAK,GAAG,SAAS,EAAE;IACzB,MAAM,GAAG,GAAG,KAAK,EAAE,GAAG,CAAC,2BAA2B,CAAC;AACnD,IAAA,IAAI,CAAC,GAAG;AAAE,QAAA,OAAO,IAAI;AACrB,IAAA,IAAI;QACA,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB;AACtD,QAAA,IAAI,QAAQ,EAAE,CAAC,KAAK,CAAC;AAAE,YAAA,OAAO,IAAI;AAElC,QAAA,IAAI,KAAiB;AACrB,QAAA,MAAM,MAAM,GAAG,cAAc,EAAE;AAC/B,QAAA,IAAI,QAAQ,CAAC,EAAE,KAAK,CAAC,EAAE;AACnB,YAAA,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;AACzB,YAAA,KAAK,GAAGC,YAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxD;aAAO;AACH,YAAA,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC;AAChC,YAAA,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE;AAAE,gBAAA,OAAO,IAAI;AACrC,YAAA,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC9C,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAEA,YAAU,CAAC,QAAQ,CAAC,EAAE,CAAiB,EAAE,EAChE,GAAG,EACHA,YAAU,CAAC,QAAQ,CAAC,EAAE,CAAiB,CAC1C,CAAC;QACN;AAEA,QAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAEzC;AACD,QAAA,IAAI,CAAC,MAAM,EAAE,QAAQ,IAAI,CAAC,MAAM,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,IAAI;AAAE,YAAA,OAAO,IAAI;QAC1E,MAAM,IAAI,GAAGA,YAAU,CAAC,MAAM,CAAC,IAAI,CAAC;AACpC,QAAA,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE;AAAE,YAAA,OAAO,IAAI;QACnC,OAAO;YACH,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,IAAI;AACJ,YAAA,QAAQ,EAAE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC;SACtE;IACL;AAAE,IAAA,MAAM;AACJ,QAAA,OAAO,IAAI;IACf;AACJ;AAEA;;;;AAIG;AACI,eAAe,mBAAmB,GAAA;IACrC,YAAY,GAAG,IAAI;IACnB,iBAAiB,GAAG,KAAK;AACzB,IAAA,IAAI;AAAE,QAAA,SAAS,EAAE,EAAE,MAAM,CAAC,2BAA2B,CAAC;IAAE;AAAE,IAAA,MAAM,0BAA0B;AAC1F,IAAA,IAAI;AAAE,QAAA,MAAM,QAAQ,EAAE,EAAE,OAAO,EAAE;IAAE;AAAE,IAAA,MAAM,qBAAqB;AACpE;AAcA,eAAe,aAAa,CAAC,SAAoB,EAAA;AAC7C,IAAA,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAC3E,IAAA,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAmB,CAAC,CAAC;IACzF,OAAOD,UAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;AACtF;AAEA,eAAe,uBAAuB,GAAA;AAClC,IAAA,MAAM,KAAK,GAAG,QAAQ,EAAE;IACxB,IAAI,KAAK,EAAE;QACP,MAAM,QAAQ,IAAI,MAAM,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAyB;QAC3E,IAAI,QAAQ,EAAE,UAAU,IAAI,QAAQ,EAAE,SAAS,EAAE;YAC7C,iBAAiB,GAAG,KAAK;AACzB,YAAA,OAAO,QAAQ;QACnB;IACJ;;;AAGA,IAAA,MAAM,IAAI,IAAI,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CACzC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,KAAK,EACL,CAAC,MAAM,EAAE,QAAQ,CAAC,CACrB,CAAkB;IACnB,IAAI,KAAK,EAAE;AACP,QAAA,IAAI;YACA,MAAM,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC;YACtC,iBAAiB,GAAG,KAAK;AACzB,YAAA,OAAO,IAAI;QACf;AAAE,QAAA,MAAM,wDAAwD;IACpE;;;IAGA,iBAAiB,GAAG,IAAI;AACxB,IAAA,OAAO,IAAI;AACf;AAEA;;;AAGG;AACH,eAAe,OAAO,CAAC,MAAe,EAAA;AAClC,IAAA,MAAM,KAAK,GAAG,QAAQ,EAAE;AACxB,IAAA,IAAI,CAAC,KAAK;AAAE,QAAA,OAAO,IAAI;IACvB,MAAM,QAAQ,IAAI,MAAM,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAqB;AACnE,IAAA,IAAI,QAAQ;AAAE,QAAA,OAAO,QAAQ;AAC7B,IAAA,IAAI,CAAC,MAAM;AAAE,QAAA,OAAO,IAAI;IACxB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC5G,MAAM,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC;AACjC,IAAA,OAAO,GAAG;AACd;AAEA,SAAS,cAAc,GAAA;IACnB,IAAI,gBAAgB,KAAK,SAAS;AAAE,QAAA,OAAO,gBAAgB;AAC3D,IAAA,MAAM,EAAE,GAAI,UAAwD,CAAC,cAAc;IACnF,OAAO,OAAO,EAAE,EAAE,IAAI,KAAK,UAAU,IAAI,OAAO,EAAE,EAAE,MAAM,KAAK,UAAU,GAAG,EAAE,GAAG,IAAI;AACzF;AAEA,SAAS,SAAS,GAAA;IACd,IAAI,aAAa,KAAK,SAAS;AAAE,QAAA,OAAO,aAAa;AACrD,IAAA,IAAI;AACA,QAAA,MAAM,EAAE,GAAI,UAAyC,CAAC,YAAY;AAClE,QAAA,IAAI,CAAC,EAAE;AAAE,YAAA,OAAO,IAAI;AACpB,QAAA,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC/B,OAAO;YACH,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AACzB,YAAA,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/B,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;SAClC;IACL;AAAE,IAAA,MAAM;AACJ,QAAA,OAAO,IAAI;IACf;AACJ;AAEA,SAAS,QAAQ,GAAA;IACb,IAAI,YAAY,KAAK,SAAS;AAAE,QAAA,OAAO,YAAY;AACnD,IAAA,MAAM,GAAG,GAAI,UAAyC,CAAC,SAAS;AAChE,IAAA,IAAI,CAAC,GAAG;AAAE,QAAA,OAAO,IAAI;AACrB,IAAA,OAAO,cAAc,CAAC,GAAG,CAAC;AAC9B;AAEA;;AAEgE;AAChE,SAAS,cAAc,CAAC,GAAe,EAAA;AACnC,IAAA,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,KAAI;QAC5D,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;AAC3C,QAAA,GAAG,CAAC,eAAe,GAAG,MAAK;AACvB,YAAA,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM;YACrB,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,gBAAgB,CAAC;AAAE,gBAAA,EAAE,CAAC,iBAAiB,CAAC,gBAAgB,CAAC;AAC/F,QAAA,CAAC;AACD,QAAA,GAAG,CAAC,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;AACzC,QAAA,GAAG,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;AACrC,QAAA,GAAG,CAAC,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;AACrE,IAAA,CAAC,CAAC;IAEF,OAAO;QACH,MAAM,GAAG,CAAC,EAAE,EAAA;AACR,YAAA,MAAM,EAAE,GAAG,MAAM,IAAI,EAAE;AACvB,YAAA,IAAI;gBACA,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAI;oBACzC,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;AAC9F,oBAAA,GAAG,CAAC,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC;AACjD,oBAAA,GAAG,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;AACzC,gBAAA,CAAC,CAAC;YACN;oBAAU;gBAAE,EAAE,CAAC,KAAK,EAAE;YAAE;QAC5B,CAAC;AACD,QAAA,MAAM,GAAG,CAAC,EAAE,EAAE,KAAK,EAAA;AACf,YAAA,MAAM,EAAE,GAAG,MAAM,IAAI,EAAE;AACvB,YAAA,IAAI;gBACA,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,KAAI;oBACxC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,gBAAgB,EAAE,WAAW,CAAC;AACxD,oBAAA,EAAE,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC/C,EAAE,CAAC,UAAU,GAAG,MAAM,OAAO,EAAE;AAC/B,oBAAA,EAAE,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC;AACnC,oBAAA,EAAE,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC;AACvC,gBAAA,CAAC,CAAC;YACN;oBAAU;gBAAE,EAAE,CAAC,KAAK,EAAE;YAAE;QAC5B,CAAC;QACD,OAAO,GAAA;YACH,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,KAAI;gBACzC,MAAM,GAAG,GAAG,GAAG,CAAC,cAAc,CAAC,kBAAkB,CAAC;gBAClD,GAAG,CAAC,SAAS,GAAG,MAAM,OAAO,EAAE;AAC/B,gBAAA,GAAG,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;;;gBAGrC,GAAG,CAAC,SAAS,GAAG,MAAM,OAAO,EAAE;AACnC,YAAA,CAAC,CAAC;QACN,CAAC;KACJ;AACL;;AC3aA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCG;AA6CH,MAAM,cAAc,GAAG,oBAAoB;AAE3C;AAEA;AACA,MAAM,gBAAgB,GAAG,CAAC;AAC1B;AACA,MAAM,sBAAsB,GAAG,EAAE;AACjC;AACA,MAAM,8BAA8B,GAAG,CAAC;AACxC;AACA,MAAM,gBAAgB,GAAG,EAAE;AAC3B;AACA,MAAM,sBAAsB,GAAG,uBAAuB;AACtD,MAAM,uBAAuB,GAAG,wBAAwB;AAuGxD;;;;;;;AAOG;AACG,MAAO,kBAAmB,SAAQ,KAAK,CAAA;AAChC,IAAA,MAAM;;AAEN,IAAA,IAAI;AACJ,IAAA,MAAM;;AAEN,IAAA,UAAU;;AAEV,IAAA,OAAO;IAEhB,WAAA,CACI,MAAgC,EAChC,IAAA,GAOI,EAAE,EAAA;QAEN,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAC;AACvD,QAAA,IAAI,CAAC,IAAI,GAAG,oBAAoB;AAChC,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;AACpB,QAAA,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI;AACrB,QAAA,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM;AACzB,QAAA,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU;AACjC,QAAA,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO;AAC3B,QAAA,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;AAAG,YAAA,IAAoC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;IAC1F;AACH;AAED,MAAM,wBAAwB,GAA6C;AACvE,IAAA,MAAM,EAAE,2CAA2C;AACnD,IAAA,OAAO,EAAE,kDAAkD;AAC3D,IAAA,OAAO,EAAE,wBAAwB;AACjC,IAAA,YAAY,EAAE,oDAAoD;AAClE,IAAA,OAAO,EAAE,4DAA4D;AACrE,IAAA,mBAAmB,EACf,4EAA4E;QAC5E,2CAA2C;AAC/C,IAAA,gBAAgB,EAAE,8DAA8D;AAChF,IAAA,eAAe,EAAE,iDAAiD;AAClE,IAAA,iBAAiB,EAAE,CAAA,UAAA,EAAa,mBAAmB,CAAA,iBAAA,EAAoB,qBAAqB,CAAA,yBAAA,CAA2B;AACvH,IAAA,KAAK,EAAE,wBAAwB;CAClC;AAED;;;;;;;AAOG;AACG,MAAO,mBAAoB,SAAQ,kBAAkB,CAAA;;AAE9C,IAAA,cAAc;;AAEd,IAAA,aAAa;AAEtB,IAAA,WAAA,CAAY,OAA+F,EAAE,EAAA;QACzG,KAAK,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;AACxG,QAAA,IAAI,CAAC,IAAI,GAAG,qBAAqB;AACjC,QAAA,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc;AACzC,QAAA,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa;IAC3C;AACH;MAEY,UAAU,CAAA;AACU,IAAA,IAAA;AAA7B,IAAA,WAAA,CAA6B,IAAoB,EAAA;QAApB,IAAA,CAAA,IAAI,GAAJ,IAAI;IAAmB;AAEpD;;;;;AAKG;IACH,MAAM,KAAK,CAAC,IAAkF,EAAA;QAC1F,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,MAAM,YAAY,EAAE;AAC5D,QAAA,MAAM,KAAK,GAAG,WAAW,EAAE;QAC3B,IAAI,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;AACrF,QAAA,MAAM,MAAM,GAA2B;YACnC,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,YAAY,EAAE,IAAI,CAAC,WAAW;YAC9B,KAAK;AACL,YAAA,cAAc,EAAE,aAAa;AAC7B,YAAA,qBAAqB,EAAE,MAAM;SAChC;;;;;;QAMD,IAAI,IAAI,CAAC,MAAM;AAAE,YAAA,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM;AAC5C,QAAA,MAAM,GAAG,GAAG,CAAA,EAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAA,WAAA,CAAa,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;AAC1F,QAAA,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK;YAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;AACxD,QAAA,OAAO,GAAG;IACd;AAEA;;;;;;AAMG;AACH,IAAA,MAAM,aAAa,CAAC,IAAA,GAA+B,EAAE,EAAA;AACjD,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI;QAClD,MAAM,GAAG,GAAG,CAAA,EAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAA,UAAA,CAAY,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;QAClG,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;AAC3B,QAAA,OAAO,GAAG;IACd;;IAGA,UAAU,GAAA;AACN,QAAA,IAAI;AACA,YAAA,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC;AACrD,YAAA,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC1C;AAAE,QAAA,MAAM;AAAE,YAAA,OAAO,KAAK;QAAE;IAC5B;AAEA;;;;AAIG;AACH,IAAA,MAAM,cAAc,GAAA;AAChB,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE;QAC3B,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;QAChC,MAAM,WAAW,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;AAC5E,QAAA,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC;AACnE,QAAA,IAAI,CAAC,WAAW;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC;AAEtF,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE;AACzB,QAAA,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC;QAE1G,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QACtG,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC;AAC1D,QAAA,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC;AACnD,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;QACnH,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;QAE/B,IAAI,CAAC,QAAQ,EAAE;AACf,QAAA,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE;IACjE;AAEA;;;;;AAKG;IACH,MAAM,iBAAiB,CAAC,IAAkF,EAAA;QACtG,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;AACnC,QAAA,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC;QAC9F,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;AACxD,QAAA,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;AAC/C,YAAA,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU;AAClG,SAAA,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;QACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;QAClC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC;AACzC,QAAA,GAAG,CAAC,IAAI,GAAG,CAAA,EAAA,EAAK,WAAW,EAAE;AAC7B,QAAA,OAAO,GAAG,CAAC,QAAQ,EAAE;IACzB;;;;AAMA;;;;;;;;;;AAUG;IACH,MAAM,kBAAkB,CAAC,IAA+B,EAAA;QACpD,IAAI,CAAC,IAAI,EAAE,KAAK;YAAE,MAAM,IAAI,kBAAkB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;AAEhH,QAAA,MAAM,OAAO,GAAG,MAAM,4BAA4B,EAAE;AACpD,QAAA,MAAM,WAAW,GAAG,MAAM,iBAAiB,EAAE;QAC7C,MAAM,oBAAoB,GAAG,MAAM,qBAAqB,CAAC,WAAW,CAAC,SAAS,CAAC;AAC/E,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE;AAC3B,QAAA,MAAM,SAAS,GAAG,MAAM,WAAW,CAC/B,CAAC,sBAAsB,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EACtF,WAAW,CAAC,UAAU,CACzB;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,uBAAuB,EAAE;YAC9D,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,iBAAiB,EAAE,OAAO,CAAC,YAAY;AACvC,YAAA,mBAAmB,EAAE,oBAAoB;AACzC,YAAA,gBAAgB,EAAE,SAAS;AAC3B,YAAA,SAAS,EAAE,QAAQ;AACnB,YAAA,YAAY,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,kBAAkB,EAAE,EAAE,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC;AAChF,SAAA,CAAC;AACF,QAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;AAExB,QAAA,MAAM,IAAI,GAAG,GAAG,CAAC,IAIhB;QACD,IAAI,CAAC,IAAI,EAAE,WAAW,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE;YACxC,MAAM,IAAI,kBAAkB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;QAChG;QAEA,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC;AAChD,QAAA,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,IAAI,CAAA,EAAG,IAAI,CAAC,IAAI,CAAC,WAAW,OAAO;QAChF,OAAO;YACH,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,QAAQ,EAAE,IAAI,CAAC,SAAS;;AAExB,YAAA,gBAAgB,EAAE,MAAM,uBAAuB,CAAC,OAAO,CAAC,YAAY,CAAC;YACrE,eAAe;YACf,uBAAuB,EAAE,IAAI,CAAC;mBACvB,CAAA,EAAG,eAAe,SAAS,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA,CAAE;YACtE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI;YACxC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YACpC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,kBAAkB,EAAE,OAAO,CAAC,YAAY;SAC3C;IACL;AAEA;;;;;;;;;;;;;AAaG;IACH,MAAM,iBAAiB,CAAC,OAA6B,EAAA;AACjD,QAAA,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;AACxB,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,wBAAwB,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;AAEvG,QAAA,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE;AAChD,YAAA,MAAM,QAAQ,GAAG,QAAQ,CAAE,GAAG,CAAC,IAA8B,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,GAAG,gBAAgB,CAAC;AAC7G,YAAA,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,QAAQ,EAAE;QACpF;;;QAGA,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe;AAAE,YAAA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE;QACpF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe;AAAE,YAAA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE;AACnF,QAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;AAExB,QAAA,MAAM,IAAI,GAAG,GAAG,CAAC,IAGhB;AACD,QAAA,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,EAAE;YAC5B,OAAO;AACH,gBAAA,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC;AACnD,gBAAA,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;aACzG;QACL;AACA,QAAA,IAAI,IAAI,EAAE,MAAM,KAAK,QAAQ;AAAE,YAAA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE;AAC1D,QAAA,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS;AAAE,YAAA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE;AAC5D,QAAA,IAAI,IAAI,EAAE,MAAM,KAAK,UAAU,EAAE;AAC7B,YAAA,MAAM,IAAI,kBAAkB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAA,2BAAA,EAA8B,IAAI,EAAE,MAAM,CAAA,EAAA,CAAI,EAAE,CAAC;QACtG;AACA,QAAA,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;YACzD,MAAM,IAAI,kBAAkB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;QAC1G;QAEA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE;YAC7C,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;AAC9B,SAAA,CAAC;AACF,QAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE;IACvC;AAEA;;;;;;;;;;;AAWG;AACH,IAAA,MAAM,oBAAoB,CACtB,OAA6B,EAC7B,OAAoC,EAAE,EAAA;AAEtC,QAAA,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ;QAC/B,IAAI,wBAAwB,GAAG,CAAC;AAEhC,QAAA,SAAS;AACL,YAAA,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;AAAE,gBAAA,MAAM,IAAI,kBAAkB,CAAC,SAAS,CAAC;AACjE,YAAA,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAExB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;YAChD,IAAI,SAAS,IAAI,CAAC;AAAE,gBAAA,MAAM,IAAI,kBAAkB,CAAC,SAAS,CAAC;YAC3D,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE,QAAQ,CAAC;AAElC,YAAA,MAAM,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,CAAC;YAC9C,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,GAAG,MAAM,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC;AAE5E,YAAA,IAAI,MAAyB;AAC7B,YAAA,IAAI;gBACA,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;gBAC9C,wBAAwB,GAAG,CAAC;YAChC;YAAE,OAAO,CAAC,EAAE;;;;gBAIR,IAAI,CAAC,YAAY,kBAAkB;AAAE,oBAAA,MAAM,CAAC;;;AAG5C,gBAAA,IAAI,EAAE,wBAAwB,GAAG,8BAA8B,EAAE;oBAC7D,MAAM,IAAI,kBAAkB,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBACzD;gBACA,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,sBAAsB,CAAC;gBACzD;YACJ;AAEA,YAAA,QAAQ,MAAM,CAAC,MAAM;AACjB,gBAAA,KAAK,SAAS;AACV,oBAAA,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;oBAC3B;AACJ,gBAAA,KAAK,WAAW;AACZ,oBAAA,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,GAAG,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC;oBACpF;AACJ,gBAAA,KAAK,UAAU;oBACX,OAAO,MAAM,CAAC,IAAI;AACtB,gBAAA,KAAK,QAAQ;AACT,oBAAA,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC;AAC1C,gBAAA,KAAK,SAAS;AACV,oBAAA,MAAM,IAAI,kBAAkB,CAAC,SAAS,CAAC;;QAEnD;IACJ;AAEA;;;;;;;;;;AAUG;AACH,IAAA,mBAAmB,CAAC,OAA6B,EAAA;AAC7C,QAAA,IAAI,CAAC,OAAO;YAAE;AACd,QAAA,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC;AAC9B,QAAA,OAAO,CAAC,UAAU,GAAG,EAAE;IAC3B;AAEA;;;;;;;;AAQG;AACH,IAAA,MAAM,mBAAmB,GAAA;AACrB,QAAA,MAAM,SAAS,GAAG,MAAM,kBAAkB,EAAE;AAC5C,QAAA,IAAI,CAAC,SAAS;AAAE,YAAA,OAAO,IAAI;AAC3B,QAAA,IAAI;YACA,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC;AAC7D,YAAA,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC;;;;AAIhD,YAAA,IAAI,UAAU,KAAK,SAAS,CAAC,UAAU;AAAE,gBAAA,OAAO,IAAI;YACpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACvG,YAAA,MAAM,IAAI,CAAC,iBAAiB,EAAE;AAC9B,YAAA,OAAO,IAAI;QACf;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO,IAAI;QACf;IACJ;;AAGA,IAAA,MAAM,mBAAmB,GAAA;QACrB,MAAM,mBAAmB,EAAE;QAC3B,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;IACnC;;AAGA,IAAA,MAAM,gBAAgB,GAAA;QAClB,OAAO,iBAAiB,EAAE;IAC9B;;;;AAMA;;;;;;;AAOG;IACH,MAAM,mBAAmB,CAAC,QAAgB,EAAA;QACtC,MAAM,IAAI,GAAG,cAAc,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AACxD,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,yBAAyB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC;AAC9F,QAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;AAExB,QAAA,MAAM,IAAI,GAAG,GAAG,CAAC,IAIhB;AACD,QAAA,IAAI,CAAC,IAAI,EAAE,iBAAiB,EAAE;YAC1B,MAAM,IAAI,kBAAkB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;QAChG;AACA,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,KAAK,IAAI;QAC7C,OAAO;AACH,YAAA,QAAQ,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;YAChC,kBAAkB,EAAE,IAAI,CAAC,iBAAiB;AAC1C,YAAA,gBAAgB,EAAE,MAAM,uBAAuB,CAAC,IAAI,CAAC,iBAAiB,CAAC;AACvE,YAAA,iBAAiB,EAAE,IAAI,CAAC,kBAAkB,IAAI,EAAE;AAChD,YAAA,WAAW,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;AACtC,YAAA,KAAK,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;AACxB,YAAA,QAAQ,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;AAC9B,YAAA,aAAa,EAAE,OAAO;AACtB,YAAA,cAAc,EAAE,IAAI,CAAC,eAAe,IAAI,CAAC,OAAO;AAChD,YAAA,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,GAAG,IAAI;SAC9D;IACL;AAEA;;;;;;;;;;;;AAYG;AACH,IAAA,MAAM,oBAAoB,CAAC,GAAyB,EAAE,OAA2B,EAAE,EAAA;QAC/E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;AACnC,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE;YACnC,MAAM,IAAI,kBAAkB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;QAC1G;AACA,QAAA,IAAI,CAAC,GAAG,EAAE,kBAAkB,EAAE;YAC1B,MAAM,IAAI,kBAAkB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,sDAAsD,EAAE,CAAC;QAC9G;QACA,MAAM,IAAI,GAAG,cAAc,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,kBAAkB,CAAC;QAEvE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,0BAA0B,EAAE;AACjE,YAAA,SAAS,EAAE,IAAI;YACf,iBAAiB,EAAE,GAAG,CAAC,kBAAkB;AACzC,YAAA,WAAW,EAAE,UAAU;YACvB,YAAY,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,IAAI,SAAS;SAC9F,EAAE,IAAI,CAAC;AACR,QAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;AAExB,QAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAE,GAAG,CAAC,IAA+B,EAAE,SAAS,IAAI,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,EAAE;IAC/G;AAEA;;;;AAIG;IACH,MAAM,iBAAiB,CAAC,QAAgB,EAAA;QACpC,MAAM,IAAI,GAAG,cAAc,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AACxD,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,uBAAuB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC;AAC5F,QAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;IAC5B;;;;AAMA;;;;;;;;AAQG;AACH,IAAA,MAAM,iBAAiB,GAAA;AACnB,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,CAAC;AAC7E,QAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;QACxB,MAAM,IAAI,GAAI,GAAG,CAAC,IAAgC,EAAE,OAAO,IAAI,EAAE;AACjE,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,KAAI;YACpB,MAAM,CAAC,GAAG,GAGT;YACD,OAAO;AACH,gBAAA,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE;AACd,gBAAA,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;AACpB,gBAAA,KAAK,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;gBACrB,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;gBAClC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;AACvC,gBAAA,aAAa,EAAE,CAAC,CAAC,cAAc,KAAK,IAAI;aAC3C;AACL,QAAA,CAAC,CAAC;IACN;AAEA;;;;;;;;AAQG;IACH,MAAM,kBAAkB,CAAC,EAAU,EAAA;AAC/B,QAAA,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,kBAAkB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;AACpG,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,mBAAmB,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC;AAC7E,QAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;IAC5B;;AAIA;;;;AAIG;AACK,IAAA,MAAM,eAAe,CACzB,OAA6B,EAC7B,OAAqE,EAAA;AAErE,QAAA,IAAI,IAAgB;AACpB,QAAA,IAAI;AACA,YAAA,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,kBAAkB,CAAC;QACzG;QAAE,OAAO,CAAC,EAAE;AACR,YAAA,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE;AAChD,gBAAA,OAAO,EAAE,8EAA8E;AACvF,gBAAA,KAAK,EAAE,CAAC;AACX,aAAA,CAAC;QACN;AAEA,QAAA,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC;AACnD,QAAA,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC;;;;AAIhD,QAAA,IAAI,UAAU,KAAK,OAAO,CAAC,UAAU,EAAE;AACnC,YAAA,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE;gBAChD,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE;AACjE,aAAA,CAAC;QACN;;;AAGA,QAAA,MAAM,MAAM,GAAG,MAAM,kBAAkB,EAAE;QACzC,IAAI,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU,EAAE;AAC5C,YAAA,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAAE;AAC7C,gBAAA,OAAO,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,QAAQ,EAAE;AAClF,aAAA,CAAC;QACN;;;QAIA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;;;AAI3F,QAAA,MAAM,IAAI,CAAC,iBAAiB,EAAE;AAC9B,QAAA,IAAI;YACA,MAAM,qBAAqB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACpG;QAAE,OAAO,CAAC,EAAE;AACR,YAAA,aAAa,CAAC,qFAAqF,EAAE,CAAC,CAAC;QAC3G;AACA,QAAA,OAAO,IAAI;IACf;AAEA;;;;;;;;;;;;;AAaG;IACK,MAAM,WAAW,CACrB,QAAgB,EAChB,QAAoB,EACpB,IAAgB,EAChB,IAAA,GAAqB,EAAE,EAAA;QAEvB,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC;AAC7E,QAAA,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC;QAC7D,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,MAAM,iBAAiB,CAAC;YACjE,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,WAAW;YACX,QAAQ,EAAE,SAAS,CAAC,KAAK;AACzB,YAAA,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;AAC5B,SAAA,CAAC;AACF,QAAA,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,YAAY,CAAC,UAAU,CAAC;QAC5F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;YAC7C,WAAW,EAAE,SAAS,CAAC,WAAW;AAClC,YAAA,KAAK,EAAE;gBACH,UAAU;;;gBAGV,KAAK,EAAE,SAAS,CAAC,KAAK;AACtB,gBAAA,QAAQ,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;gBAClC,SAAS;AACZ,aAAA;YACD,UAAU,EAAE,IAAI,CAAC,UAAU;AAC9B,SAAA,CAAC;QACF,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC;QAClG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;QAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE;IACpD;AAEA;;;;;AAKG;AACK,IAAA,MAAM,iBAAiB,GAAA;AAC3B,QAAA,IAAI;AACA,YAAA,MAAM,WAAW,GAAG,MAAM,iBAAiB,EAAE;AAC7C,YAAA,MAAM,WAAW,GAAG,MAAM,iBAAiB,EAAE;AAC7C,YAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE;YAC3B,MAAM,SAAS,GAAG,MAAM,WAAW,CAC/B,CAAC,uBAAuB,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAClE,WAAW,CAAC,UAAU,CACzB;AACD,YAAA,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,mBAAmB,EAAE;gBAC7C,WAAW;AACX,gBAAA,SAAS,EAAE,QAAQ;AACnB,gBAAA,gBAAgB,EAAE,SAAS;aAC9B,EAAE,IAAI,CAAC;QACZ;QAAE,OAAO,CAAC,EAAE;AACR,YAAA,aAAa,CAAC,wBAAwB,EAAE,CAAC,CAAC;QAC9C;IACJ;;AAGQ,IAAA,UAAU,CAAC,OAA6B,EAAA;AAC5C,QAAA,IAAI,CAAC,OAAO,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;AACnE,YAAA,MAAM,IAAI,kBAAkB,CAAC,SAAS,CAAC;QAC3C;IACJ;IAEQ,KAAK,CAAC,EAAU,EAAE,MAAoB,EAAA;AAC1C,QAAA,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC;QACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAI;AACnC,YAAA,MAAM,KAAK,GAAG,UAAU,CAAC,MAAK;AAC1B,gBAAA,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC;AAC7C,gBAAA,OAAO,EAAE;YACb,CAAC,EAAE,EAAE,CAAC;YACN,MAAM,OAAO,GAAG,MAAK;gBACjB,YAAY,CAAC,KAAK,CAAC;AACnB,gBAAA,MAAM,CAAC,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAC;AAC7C,YAAA,CAAC;YACD,IAAI,MAAM,EAAE,OAAO;gBAAE,OAAO,OAAO,EAAE;AACrC,YAAA,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC9D,QAAA,CAAC,CAAC;IACN;AAEA;;;;AAIG;IACK,MAAM,SAAS,CACnB,MAAc,EACd,IAAY,EACZ,IAAc,EACd,WAAW,GAAG,KAAK,EAAA;QAEnB,MAAM,OAAO,GAA2B,EAAE;QAC1C,IAAI,IAAI,KAAK,SAAS;AAAE,YAAA,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB;QACpE,IAAI,WAAW,EAAE;YACb,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;AACrC,YAAA,IAAI,CAAC,KAAK;AAAE,gBAAA,MAAM,IAAI,kBAAkB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;;;AAGnH,YAAA,OAAO,CAAC,kBAAkB,CAAC,GAAG,KAAK;QACvC;AACA,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC;QACrE,IAAI,OAAO,OAAO,KAAK,UAAU;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC;AAErF,QAAA,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,CAAA,EAAG,IAAI,CAAC,OAAO,EAAE,CAAA,EAAG,IAAI,EAAE,EAAE;YAClD,MAAM;YACN,OAAO;AACP,YAAA,IAAI,EAAE,IAAI,KAAK,SAAS,GAAG,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;AAC9D,SAAA,CAAC;QAEF,IAAI,MAAM,GAAY,IAAI;AAC1B,QAAA,IAAI;AAAE,YAAA,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE;QAAE;AAAE,QAAA,MAAM,+BAA+B;AACxE,QAAA,MAAM,QAAQ,IAAI,MAAM,IAAI,EAAE,CAA2C;AACzE,QAAA,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,aAAa,CAAC,CAAC;QAElE,OAAO;YACH,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,EAAE,EAAE,GAAG,CAAC,EAAE;AACV,YAAA,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC,KAAK;AAC/E,YAAA,OAAO,EAAE,OAAO,QAAQ,CAAC,OAAO,KAAK;kBAC/B,QAAQ,CAAC;AACX,kBAAE,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,GAAG,QAAQ,CAAC,KAAK,GAAG,SAAS;AACrE,YAAA,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC,GAAG,gBAAgB,GAAG,IAAI;SAClG;IACL;;AAGQ,IAAA,cAAc,CAAC,GAAsB,EAAA;QACzC,IAAI,GAAG,CAAC,EAAE;YAAE;QACZ,MAAM,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,SAAS,CAAwC;AAC9E,QAAA,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,EAAE;YAChC,MAAM,IAAI,mBAAmB,CAAC;gBAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,MAAM,EAAE,GAAG,CAAC,MAAM;AAClB,gBAAA,cAAc,EAAE,iBAAiB,CAAC,OAAO,EAAE,gBAAgB,CAAC;AAC5D,gBAAA,aAAa,EAAE,iBAAiB,CAAC,OAAO,EAAE,eAAe,CAAC;AAC7D,aAAA,CAAC;QACN;AACA,QAAA,MAAM,IAAI,kBAAkB,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE;YAC9D,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;AAClB,YAAA,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;YACvC,OAAO;AACV,SAAA,CAAC;IACN;AAEA;;;;;;;AAOG;IACK,OAAO,GAAA;AACX,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU;AACrC,QAAA,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACjD,MAAM,cAAc,GAAI,IAAI,CAAC,IAAI,CAAC,IAAwC,EAAE,OAAO;AACnF,QAAA,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc;YAAE,OAAO,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;AACnG,QAAA,IAAI;YACA,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;AAC1C,YAAA,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;AACtD,YAAA,GAAG,CAAC,QAAQ,GAAG,EAAE;YACjB,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C;AAAE,QAAA,MAAM;AACJ,YAAA,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC;QAC9F;IACJ;IAEQ,QAAQ,GAAA;AACZ,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IACnE;;IAIQ,QAAQ,GAAA;AACZ,QAAA,MAAM,GAAG,GAAI,UAAsC,CAAC,QAAQ;AAC5D,QAAA,IAAI,CAAC,GAAG;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC;AACxE,QAAA,OAAO,GAAG;IACd;AAEQ,IAAA,KAAK,CAAC,CAA8E,EAAA;AACxF,QAAA,MAAM,EAAE,GAAI,UAA2C,CAAC,cAAc;AACtE,QAAA,IAAI,CAAC,EAAE;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAChE,QAAA,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACjD;IAEQ,IAAI,GAAA;AACR,QAAA,MAAM,EAAE,GAAI,UAA2C,CAAC,cAAc;AACtE,QAAA,IAAI,CAAC,EAAE;AAAE,YAAA,OAAO,IAAI;QACpB,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC;AACtC,QAAA,IAAI,CAAC,GAAG;AAAE,YAAA,OAAO,IAAI;AACrB,QAAA,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;AAC7B,QAAA,IAAI;AAAE,YAAA,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE;AAAE,QAAA,MAAM;AAAE,YAAA,OAAO,IAAI;QAAE;IACzD;;IAGQ,QAAQ,GAAA;AACZ,QAAA,MAAM,CAAC,GAAI,UAAoC,CAAC,OAAO;AACvD,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE;QAC3B,IAAI,CAAC,EAAE,YAAY;YAAE,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC;IAC/D;AACH;AAED;AAEA;;AAEkB;AAClB,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAAwB;AAa7D;;;;AAIG;AACH,SAAS,aAAa,CAAC,IAAwB,EAAE,MAAc,EAAA;IAC3D,QAAQ,IAAI;AACR,QAAA,KAAK,eAAe;AACpB,QAAA,KAAK,mBAAmB;AACpB,YAAA,OAAO,SAAS;AACpB,QAAA,KAAK,eAAe;AAChB,YAAA,OAAO,QAAQ;AACnB,QAAA,KAAK,WAAW;AAChB,QAAA,KAAK,cAAc;AACnB,QAAA,KAAK,mBAAmB;AACpB,YAAA,OAAO,cAAc;AACzB,QAAA,KAAK,iBAAiB;AAClB,YAAA,OAAO,iBAAiB;AAC5B,QAAA,KAAK,mBAAmB;AACpB,YAAA,OAAO,mBAAmB;AAC9B,QAAA;YACI,OAAO,MAAM,KAAK,GAAG,GAAG,cAAc,GAAG,OAAO;;AAE5D;AAEA;;;;;;AAMG;AACG,SAAU,iBAAiB,CAAC,KAAa,EAAA;AAC3C,IAAA,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;AACpE,IAAA,IAAI,IAAI,CAAC,MAAM,KAAK,mBAAmB;AAAE,QAAA,MAAM,IAAI,kBAAkB,CAAC,mBAAmB,CAAC;AAC1F,IAAA,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE;AACnB,QAAA,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;AAAE,YAAA,MAAM,IAAI,kBAAkB,CAAC,mBAAmB,CAAC;IAC9F;AACA,IAAA,OAAO,IAAI;AACf;AAEA;AACM,SAAU,cAAc,CAAC,SAAiB,EAAA;AAC5C,IAAA,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;AAC5C,IAAA,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA,CAAA,EAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;AACjE;AAEA;AACA,eAAe,aAAa,CAAC,QAAoB,EAAA;IAC7C,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC;AAC7E,IAAA,OAAO,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;AAC7E;AAEA;;;;AAIG;AACH,SAAS,kBAAkB,GAAA;IACvB,MAAM,EAAE,GAAI,UAAqD,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE;AAC5F,IAAA,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;AAAE,QAAA,OAAO,SAAS;AAC1C,IAAA,IAAI,kCAAkC,CAAC,IAAI,CAAC,EAAE,CAAC;AAAE,QAAA,OAAO,YAAY;AACpE,IAAA,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;AAAE,QAAA,OAAO,UAAU;AAC/C,IAAA,IAAI,kDAAkD,CAAC,IAAI,CAAC,EAAE,CAAC;AAAE,QAAA,OAAO,UAAU;AAClF,IAAA,OAAO,IAAI;AACf;AAEA,SAAS,QAAQ,CAAC,CAAU,EAAE,QAAgB,EAAA;AAC1C,IAAA,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,QAAQ;AACrE;AAEA,SAAS,iBAAiB,CAAC,CAAU,EAAA;AACjC,IAAA,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,SAAS;AACtE;AAEA;AACA,SAAS,aAAa,CAAC,OAAe,EAAE,GAAY,EAAA;AAChD,IAAA,IAAI;QACC,UAAmE,CAAC,SAAS,EAAE,IAAI,GAChF,CAAA,cAAA,EAAiB,OAAO,CAAA,CAAA,CAAG,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,GAAG,CACxE;IACL;AAAE,IAAA,MAAM,8CAA8C;AAC1D;;ACpmCA;;;;;;;;;;;;;;;AAeG;AAgBH;;;;;;;AAOG;AACG,MAAO,qBAAsB,SAAQ,KAAK,CAAA;AAC5C,IAAA,WAAA,CAAY,KAAe,EAAA;QACvB,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;AAC3E,QAAA,KAAK,CACD,+BAA+B,CAAC,IAAI,CAAC,MAAM;AACvC,cAAE;cACA,uEAAuE,CAChF;AACD,QAAA,IAAI,CAAC,IAAI,GAAG,uBAAuB;AAClC,QAAA,IAAoC,CAAC,KAAK,GAAG,KAAK;IACvD;AACH;AAED;;;;;;;;;;;;AAYG;AACG,MAAO,kBAAmB,SAAQ,KAAK,CAAA;AACzC,IAAA,WAAA,GAAA;QACI,KAAK,CAAC,qFAAqF,CAAC;AAC5F,QAAA,IAAI,CAAC,IAAI,GAAG,oBAAoB;IACpC;AACH;AA4BD;;;AAGG;AACH;AACA,MAAM,gBAAgB,GAAG,sBAAsB;MAElC,MAAM,CAAA;AACc,IAAA,IAAA;AAA7B,IAAA,WAAA,CAA6B,IAAgB,EAAA;QAAhB,IAAA,CAAA,IAAI,GAAJ,IAAI;IAAe;AAEhD;;;;;;;;AAQG;IACH,MAAM,QAAQ,CAAC,MAAsB,EAAA;AACjC,QAAA,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,MAAM;AACjE,QAAA,MAAM,IAAI,GAAG,UAAU,EAAE;AACzB,QAAA,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;AAErD,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC1B,QAAQ;YACR,UAAU;YACV,aAAa,EAAE,MAAM,qBAAqB,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC;YAC1E,cAAc,EAAE,MAAM,qBAAqB,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC;YAC5E,KAAK;AACR,SAAA,CAAC;;;;AAKF,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC;AAC7D,QAAA,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAM,CAAC;QACnF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAEhC,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,MAAM,IAAI,CAAC,MAAM,EAAE;AAC/B,QAAA,OAAO,IAAI;IACf;AAEA;;;;;;AAMG;IACH,MAAM,KAAK,CAAC,QAAgB,EAAE,QAAgB,EAAE,OAAqB,EAAE,EAAA;;;;QAInE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC9D,MAAM,IAAI,GAAG,SAAS,IAAI,MAAM,4BAA4B,CAAC,QAAQ,EAAE,QAAQ,CAAC;AAChF,QAAA,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC;AACnD,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;QAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;;;;AAK/B,QAAA,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,CAAC,2BAA2B,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;AAChF,QAAA,OAAO,IAAI;IACf;AAEA;AACkE;AAC1D,IAAA,MAAM,2BAA2B,CAAC,QAAgB,EAAE,QAAgB,EAAE,IAAgB,EAAA;QAC1F,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;AACrC,QAAA,IAAI,CAAC,KAAK;YAAE;AACZ,QAAA,IAAI;AACA,YAAA,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC;QACpE;AAAE,QAAA,MAAM;;QAER;IACJ;AAEA;;;;;;;;;;;;;;;AAeG;AACH,IAAA,MAAM,OAAO,GAAA;QACT,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ;AAC3C,QAAA,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;AAAE,YAAA,OAAO,KAAK;AACxC,QAAA,IAAI;YACA,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC;AAChD,YAAA,OAAO,IAAI;QACf;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO,KAAK;QAChB;IACJ;AAEA;;;;;AAKG;AACK,IAAA,MAAM,aAAa,CACvB,QAAgB,EAChB,QAAoB,EACpB,IAAkB,EAAA;QAElB,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC;AAE7E,QAAA,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC;QAE7D,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,MAAM,iBAAiB,CAAC;YACjE,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,WAAW;YACX,QAAQ,EAAE,SAAS,CAAC,KAAK;AACzB,YAAA,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;AAC/B,SAAA,CAAC;AAEF,QAAA,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,YAAY,CAAC,UAAU,CAAC;QAE5F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;YAC7C,WAAW,EAAE,SAAS,CAAC,WAAW;AAClC,YAAA,KAAK,EAAE;gBACH,UAAU;;;gBAGV,KAAK,EAAE,SAAS,CAAC,KAAK;AACtB,gBAAA,QAAQ,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;gBAClC,SAAS;AACZ,aAAA;YACD,UAAU,EAAE,IAAI,CAAC,UAAU;AAC9B,SAAA,CAAC;AAEF,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YAC/B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU;AACb,SAAA,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC;QAEvC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE;IACpD;AAEA;;;;;AAKG;AACH,IAAA,MAAM,OAAO,GAAA;QACT,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE;AACtD,QAAA,IAAI,CAAC,MAAM;AAAE,YAAA,OAAO,IAAI;AACxB,QAAA,IAAI;AACA,YAAA,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;AACzC,YAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;QACvE;AAAE,QAAA,MAAM;YACJ,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;AAC/B,YAAA,OAAO,IAAI;QACf;IACJ;AAEA;;;;;;;;;;AAUG;AACH,IAAA,MAAM,MAAM,GAAA;AACR,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;AACjC,QAAA,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;AACjD,QAAA,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU;AAAE,YAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;AACjE,QAAA,IAAI;AACA,YAAA,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BxC,YAAA,MAAM,IAAI,GAAG,WAAW,EAAE;YAC1B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,uBAAuB,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE;gBACpF,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC9C;QACJ;AAAE,QAAA,MAAM;;QAER;AACA,QAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;IAC3D;AAEA;;;;AAIG;IACH,MAAM,MAAM,CAAC,QAAgB,EAAA;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU;AAC7C,QAAA,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE;AACxB,YAAA,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC;QAClF;QACA,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC9D,MAAM,IAAI,GAAG,SAAS,IAAI,MAAM,4BAA4B,CAAC,QAAQ,EAAE,QAAQ,CAAC;AAChF,QAAA,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;AACrD,QAAA,IAAI,UAAU,KAAK,QAAQ,EAAE;AACzB,YAAA,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC;QAC/E;QACA,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;AAE/B,QAAA,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,CAAC,2BAA2B,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;IACpF;AAEA;;;;;AAKG;AACH,IAAA,MAAM,oBAAoB,GAAA;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;AACrC,QAAA,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;AACjB,YAAA,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC;QACjE;AACA,QAAA,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC;QACrC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;AAC1G,QAAA,OAAO,QAAQ;IACnB;AAEA;;;;AAIG;IACH,MAAM,iBAAiB,CAAC,QAAgB,EAAE,QAAgB,EAAE,OAAqB,EAAE,EAAA;AAC/E,QAAA,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC;AACrC,QAAA,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC;AACnD,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;QAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;AAC/B,QAAA,OAAO,IAAI;IACf;AAEA;;;;;;;;;;;AAWG;IACH,MAAM,iBAAiB,CAAC,KAAa,EAAA;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ;QAC3C,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE;AAC9B,YAAA,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC;QAC7D;AACA,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACpD,OAAO;YACH,KAAK;AACL,YAAA,OAAO,EAAE,OAAO,IAAY,KAAI;gBAC5B,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBAC7F,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC;gBACxD,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC;gBAC5C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAEA,UAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC;AACjH,gBAAA,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC;gBAC/E,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC;gBACzC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAC/B,KAAK,EACL,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EACpH,WAAW,CACd;YACL,CAAC;SACJ;IACL;AAEA;;;;;;;;;AASG;AACH,IAAA,MAAM,gBAAgB,CAAC,QAAgB,EAAE,OAAqB,EAAE,EAAA;AAC5D,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,CAAC;QAChD,OAAO;AACH,YAAA,OAAO,EAAE,OAAO,IAAY,KAAI;gBAC5B,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACtF,gBAAA,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC;gBACjF,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE;AAC9B,oBAAA,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC;gBACjE;gBACA,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC;gBACrD,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC;gBAC5C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAEA,UAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC;AAClH,gBAAA,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC;gBAC/E,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC;AACtE,gBAAA,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC;AACnD,gBAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;gBAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;AAC/B,gBAAA,OAAO,IAAI;YACf,CAAC;SACJ;IACL;;;;;;AAQA;;;AAGG;IACH,MAAM,kBAAkB,CAAC,OAAe,EAAA;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ;AAC3C,QAAA,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC;QAC5F,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC7F,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC;QACpD,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAEA,UAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC;AAClH,QAAA,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC;QAC/E,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC;QACzC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAC/B,KAAK,EACL,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,IAAI,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAC7I,WAAW,CACd;IACL;AAEA;;;;;AAKG;IACH,MAAM,eAAe,CAAC,QAAgB,EAAE,OAAe,EAAE,OAAqB,EAAE,EAAA;QAC5E,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACrF,QAAA,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC;QAClF,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC;QAClG,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC;QACpD,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAEA,UAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC;AACnH,QAAA,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC;QAC/E,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC;AACtE,QAAA,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC;AACnD,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;QAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;AAC/B,QAAA,OAAO,IAAI;IACf;AAEA;;;;;AAKG;AACH,IAAA,MAAM,kBAAkB,CAAC,QAAgB,EAAE,OAAe,EAAA;AACtD,QAAA,MAAM,IAAI,GAAG,UAAU,EAAE;AACzB,QAAA,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;AACrD,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC1B,QAAQ;YACR,UAAU;YACV,aAAa,EAAE,MAAM,qBAAqB,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC;YAC1E,cAAc,EAAE,MAAM,qBAAqB,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC;AAC5E,YAAA,KAAK,EAAE,IAAI;AACd,SAAA,CAAC;AACF,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;;AAE/B,QAAA,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;AACtC,QAAA,OAAO,IAAI;IACf;AAEA;;;;AAIG;IACH,MAAM,cAAc,CAAC,WAAmB,EAAA;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;QACrC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,EAAE;AAC9B,YAAA,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC;QAC7D;AACA,QAAA,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;IACvE;;IAGA,gBAAgB,GAAA;QACZ,OAAO,gBAAgB,EAAE;IAC7B;AAEA;;;;;;AAMG;AACH,IAAA,MAAM,mBAAmB,GAAA;QACrB,OAAO,iBAAiB,EAAE;IAC9B;AAEA;;;;;AAKG;IACH,MAAM,aAAa,CAAC,IAAyD,EAAA;QACzE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ;QAC3C,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE;AAC9B,YAAA,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC;QACtD;QACA,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,WAAW,EAAE;QACxC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,oBAAoB,CAAC;YACpE,IAAI;AACJ,YAAA,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,QAAQ;YAChC,QAAQ;AACX,SAAA,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,qBAAqB,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC;QACzC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE;AACvC,YAAA,EAAE,EAAE,CAAA,QAAA,EAAWA,UAAQ,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA,CAAE;AACpD,YAAA,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,OAAO,CAAC,EAAE;YAChB,EAAE,EAAE,OAAO,CAAC,EAAE;AACd,YAAA,MAAM,EAAE,EAAE,YAAY,EAAEA,UAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,EAAEA,UAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE;AAClF,YAAA,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,SAAS;AAC/B,YAAA,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;AACxB,SAAA,CAAC;IACN;AAEA;;;AAGG;AACH,IAAA,MAAM,gBAAgB,CAAC,QAAgB,EAAE,OAAqB,EAAE,EAAA;;;AAG5D,QAAA,MAAM,IAAI,GAAG,WAAW,EAAE;QAC1B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC;AACvF,QAAA,MAAM,MAAM,GAAG,MAAM,EAAE,MAAgF;QACvG,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE;AAC3E,YAAA,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC;QAC7D;AACA,QAAA,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI;;;;;AAKhC,QAAA,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,MAAM,IAAI,kBAAkB,EAAE;QACpE,MAAM,SAAS,GAAG,MAAM,kBAAkB,CACtC,IAAI,EACJC,YAAU,CAAC,MAAM,CAAC,YAAY,CAAC,EAC/BA,YAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAC7B;QACD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,qBAAqB,CAAC;QACpE,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC;AACtE,QAAA,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC;AACnD,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;QAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;AAC/B,QAAA,OAAO,IAAI;IACf;AAEA;;;;AAIG;AACH,IAAA,MAAM,WAAW,GAAA;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;AACrC,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC;AACxE,QAAA,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;AAC5D,QAAA,OAAO,OAAO;IAClB;AAEA;;;;;;;;AAQG;AACH,IAAA,MAAM,uBAAuB,GAAA;QACzB,IAAI,CAAC,gBAAgB,EAAE;AAAE,YAAA,OAAO,KAAK;AACrC,QAAA,IAAI;AACA,YAAA,MAAM,IAAI,GAAG,WAAW,EAAE;AAC1B,YAAA,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE;YACxC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,mBAAmB,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzF;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO,KAAK;QAChB;IACJ;;IAGA,MAAM,YAAY,CAAC,EAAU,EAAA;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;AACrC,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC;AAC1E,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,CAAC;IACrD;;AAGA,IAAA,MAAM,MAAM,GAAA;QACR,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;IACnC;;AAGA,IAAA,IAAI,IAAI,GAAA;QACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU;AAC/C,QAAA,OAAO,QAAQ,IAAI,UAAU,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAI;IACnE;AAEA;;;;;AAKG;AACH,IAAA,IAAI,QAAQ,GAAA;AACR,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ;IACrC;;AAGA,IAAA,IAAI,KAAK,GAAA;AACL,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;IAClC;AAEA;;;;;AAKG;AACH,IAAA,IAAI,UAAU,GAAA;QACV,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;AACnC,QAAA,OAAO,IAAI,GAAGD,UAAQ,CAAC,IAAI,CAAC,GAAG,IAAI;IACvC;AAEA;;;;;;;;;;;;;;;;AAgBG;IACH,MAAM,YAAY,CAAC,KAAa,EAAA;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;AACrC,QAAA,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC;AAE1E,QAAA,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,CAAC;QAC9D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC;;QAEzC,MAAM,QAAQ,GAAG,CAAA,OAAA,EAAUA,UAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA,CAAE;QAEtF,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE;AACvC,YAAA,EAAE,EAAE,QAAQ;AACZ,YAAA,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,OAAO,CAAC,EAAE;YAChB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,KAAK;AACL,YAAA,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;AACxB,SAAA,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAEA,UAAQ,CAAC,QAAQ,CAAC,EAAE;IACtD;AAEA;;;;;;;;;AASG;AACH,IAAA,MAAM,gBAAgB,CAAC,QAAgB,EAAE,QAAgB,EAAE,SAAiB,EAAA;AACxE,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC;QACvE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;IACnC;AAEA;;;;;;;;;;;;;;;;;;AAkBG;IACH,MAAM,eAAe,CAAC,QAAgB,EAAE,QAAgB,EAAE,SAAiB,EAAE,IAAA,GAAqB,EAAE,EAAA;AAChG,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC;AACvE,QAAA,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC;AACnD,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;QAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;AAC/B,QAAA,OAAO,IAAI;IACf;AAEA;AAC0E;AAClE,IAAA,MAAM,gBAAgB,CAAC,QAAgB,EAAE,QAAgB,EAAE,SAAiB,EAAA;QAChF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;QACrG,IAAI,CAAC,MAAM,EAAE;YACT,MAAM,IAAI,kBAAkB,EAAE;QAClC;QACA,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC/G,QAAA,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAACC,YAAU,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC;AAC3E,QAAA,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC;IAC9D;;AAGA,IAAA,MAAM,WAAW,GAAA;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;AACrC,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC;AACpE,QAAA,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;AAC5D,QAAA,OAAO;aACF,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,QAAQ;aACjC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;aACjE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;IAChE;;IAGA,MAAM,YAAY,CAAC,QAAgB,EAAA;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;AACrC,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC;AAChE,QAAA,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC;AAC3E,QAAA,OAAO,OAAO;IAClB;AAEA;;;;;;;;;;;;;;;AAeG;AACH,IAAA,cAAc,CAAC,UAAkB,EAAA;AAC7B,QAAA,MAAM,IAAI,GAAGA,YAAU,CAAC,UAAU,CAAC;AACnC,QAAA,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE;YACpB,MAAM,IAAI,KAAK,CAAC,CAAA,qDAAA,EAAwD,IAAI,CAAC,MAAM,CAAA,CAAE,CAAC;QAC1F;QACA,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;IACnC;;;IAKQ,MAAM,aAAa,CAAC,QAAoB,EAAA;;;QAG5C,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC;AAC7E,QAAA,OAAO,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC7E;;AAIA;;;;AAIG;AACK,IAAA,MAAM,eAAe,CAAC,QAAgB,EAAE,QAAgB,EAAA;QAC5D,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC/C,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC;QACzC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAED,UAAQ,CAAC,OAAO,CAAC,CAAC;AACpF,QAAA,OAAO,eAAe,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAEC,YAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3E;AAEA;;;;;;;;;;;AAWG;AACK,IAAA,MAAM,aAAa,CAAC,QAAgB,EAAE,QAAgB,EAAA;AAC1D,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC;AACxB,aAAA,SAAS,CAAC,QAAQ,EAAE,UAAU;AAC9B,aAAA,KAAK,CAAC,CAAC,CAAC,OAAO,MAAM,IAAI,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,QAAA,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM;QAC1B,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE;YAAE,OAAO,IAAI,CAAC;QAE9C,MAAM,GAAG,GAAG,MAAM;AACb,aAAA,eAAe,CAAC,QAAQ,EAAE,QAAQ;AAClC,aAAA,KAAK,CAAC,CAAC,CAAC,KAAI,EAAG,MAAM,IAAI,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3D,QAAA,IAAI;AACA,YAAA,OAAO,MAAM,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC;QACpE;AAAE,QAAA,MAAM;YACJ,OAAO,IAAI,CAAC;QAChB;IACJ;AAEA;;;;;;;AAOG;IACK,MAAM,oBAAoB,CAAC,QAAgB,EAAE,QAAgB,EAAE,IAAgB,EAAE,KAAa,EAAA;QAClG,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC1D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC;AACzC,QAAA,MAAM,MAAM,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAmB,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;AAErH,QAAA,IAAI,OAAgB;AACpB,QAAA,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE;AAC1C,YAAA,IAAI;AACA,gBAAA,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC;gBAClD;YACJ;YAAE,OAAO,GAAG,EAAE;gBACV,OAAO,GAAG,GAAG;gBACb,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,EAAE,GAAG,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;YAChE;QACJ;QACA,MAAM,IAAI,KAAK,CACX,iFAAiF;AACjF,YAAA,oBAAoB,IAAI,OAAO,YAAY,KAAK,GAAG,OAAO,CAAC,OAAO,GAAG,EAAE,CAAC,CAC3E;IACL;AACH;AAED;MACa,aAAa,CAAA;AACb,IAAA,EAAE;;AAEF,IAAA,MAAM;AACf,IAAA,WAAA,CAAY,IAA+D,EAAA;QACvE,IAAI,CAAC,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC;AAC1B,QAAA,IAAI,CAAC,MAAM,GAAG,IAAI,UAAU,CAAC;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;;;;;;YAM7B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;AAC1B,SAAA,CAAC;IACN;;AAGA,IAAA,IAAI,IAAI,GAAA;AACJ,QAAA,OAAO,IAAI,CAAC,EAAE,CAAC,IAAI;IACvB;AACH;;AC36BD;;;;;;;;;;AAUG;AAqBH;AACA,MAAM,gBAAgB,GAAG,mBAAmB;MAE/B,aAAa,CAAA;;AAEL,IAAA,UAAU;IAE3B,WAAA,CAAY,SAAiB,EAAE,OAAe,EAAA;AAC1C,QAAA,IAAI,CAAC,UAAU,GAAG,cAAc,CAC5B,OAAO,CAAC,SAAS,CAAC,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,OAAO,CAAC,OAAO,CAAC,CACnB;IACL;;IAGA,MAAM,OAAO,CAAC,KAAc,EAAA;AACxB,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU;AACjC,QAAA,MAAM,EAAE,GAAG,WAAW,CAACC,kBAAgB,CAAC;QACxC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC;AAC1D,QAAA,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAEF,UAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,EAAEA,UAAQ,CAAC,UAAU,CAAC,EAAE;IAC1E;;IAGA,MAAM,OAAO,CAAc,QAA2B,EAAA;AAClD,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU;QACjC,MAAM,EAAE,GAAGC,YAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,UAAU,GAAGA,YAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,UAAU,CAAC;QAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAM;IACjD;;IAGA,OAAO,UAAU,CAAC,CAAU,EAAA;QACxB,QACI,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,QAAQ;YACpB,CAAwB,CAAC,IAAI,KAAK,SAAS;AAC5C,YAAA,OAAQ,CAAsB,CAAC,EAAE,KAAK,QAAQ;AAC9C,YAAA,OAAQ,CAAsB,CAAC,EAAE,KAAK,QAAQ;IAEtD;AACH;;AC3ED;;;;;;;;;;;;;;;;;;;;;;AAsBG;MA2CU,WAAW,CAAA;AAWS,IAAA,IAAA;;IATrB,IAAI,GAID,IAAI;IAEP,MAAM,GAAyB,IAAI;IACnC,cAAc,GAAsB,IAAI;AAEhD,IAAA,WAAA,CAA6B,IAAqB,EAAA;QAArB,IAAA,CAAA,IAAI,GAAJ,IAAI;;AAE7B,QAAA,IAAI,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE;IAI/B;;IAGA,MAAM,MAAM,CAAC,KAAiB,EAAA;AAC1B,QAAA,MAAM,CAAC,GAAG,KAAK,CAAC,IAAyE;AACzF,QAAA,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE;AACxB,YAAA,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;QAC/F;aAAO;AACH,YAAA,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;QAC7E;IACJ;;IAGA,MAAM,GAAG,CAAc,UAAkB,EAAE,EAAU,EAAE,KAAQ,EAAE,IAAiB,EAAA;AAC9E,QAAA,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,KAAK,KAAK;QACvC,MAAM,MAAM,GAAG,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK;AACtE,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO;AACjC,QAAA,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE;YACnB,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACzE;QACJ;AACA,QAAA,MAAM,OAAO,GAAG,CAAA,EAAG,UAAU,CAAA,CAAA,EAAI,EAAE,EAAE;AACrC,QAAA,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE;AACnC,QAAA,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC;AACjE,QAAA,IAAI;YACA,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAClF;QAAE,OAAO,GAAG,EAAE;YACV,IAAI,GAAG,YAAY,SAAS;gBAAE,MAAM,GAAG,CAAC;YACxC,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;QAC7F;IACJ;;AAGA,IAAA,MAAM,GAAG,CAAc,UAAkB,EAAE,EAAU,EAAA;AACjD,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO;AACjC,QAAA,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE;YACnB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAqB,CAAA,EAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA,IAAA,CAAM,EAAE,EAAE,CAAC;YACnG,OAAO,IAAI,CAAC,MAAM,CAAI,GAAG,CAAC,KAAK,CAAC;QACpC;AACA,QAAA,MAAM,OAAO,GAAG,CAAA,EAAG,UAAU,CAAA,CAAA,EAAI,EAAE,EAAE;AACrC,QAAA,IAAI;YACA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACjC,CAAA,EAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA,IAAA,CAAM,EACpC,EAAE,CACL;;AAED,YAAA,MAAM,OAAO,CAAC,WAAW,CACrB,IAAI,CAAC,UAAU,EAAE,EACjB,OAAO,EACP,GAAG,CAAC,KAAK,IAAI,IAAI,EACjB,GAAG,CAAC,KAAK,IAAI,IAAI,GAAG,QAAQ,GAAG,KAAK,EACpC,GAAG,CAAC,GAAG,CACV;YACD,OAAO,IAAI,CAAC,MAAM,CAAI,GAAG,CAAC,KAAK,CAAC;QACpC;QAAE,OAAO,GAAG,EAAE;YACV,IAAI,GAAG,YAAY,SAAS;gBAAE,MAAM,GAAG,CAAC;AACxC,YAAA,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC;AAC5D,YAAA,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO;AAAE,gBAAA,OAAO,IAAI;YACxC,OAAO,IAAI,CAAC,MAAM,CAAI,KAAK,CAAC,KAAK,CAAC;QACtC;IACJ;;AAGA,IAAA,MAAM,MAAM,CAAC,UAAkB,EAAE,EAAU,EAAA;AACvC,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO;AACjC,QAAA,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE;YACnB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAoC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;AACxG,YAAA,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAC/B;AACA,QAAA,MAAM,OAAO,GAAG,CAAA,EAAG,UAAU,CAAA,CAAA,EAAI,EAAE,EAAE;AACrC,QAAA,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE;AACnC,QAAA,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC;AAC1D,QAAA,IAAI;YACA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAoC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC;AAC7G,YAAA,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAC/B;QAAE,OAAO,GAAG,EAAE;YACV,IAAI,GAAG,YAAY,SAAS;AAAE,gBAAA,MAAM,GAAG;YACvC,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;YACpF,OAAO,IAAI,CAAC;QAChB;IACJ;;IAGA,MAAM,IAAI,CAAC,UAAkB,EAAA;AACzB,QAAA,MAAM,MAAM,GAAG,CAAA,EAAG,UAAU,GAAG;AAC/B,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO;AACjC,QAAA,MAAM,QAAQ,GAAG,CAAC,IAAc,KAC5B,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/E,QAAA,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE;YACnB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAqB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACtF,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACnC;AACA,QAAA,IAAI;YACA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAqB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;;AAEtF,YAAA,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACxD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAC5F,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CACzB;QACL;QAAE,OAAO,GAAG,EAAE;YACV,IAAI,GAAG,YAAY,SAAS;AAAE,gBAAA,MAAM,GAAG;AACvC,YAAA,OAAO,QAAQ,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9D;IACJ;;AAGA,IAAA,MAAM,KAAK,CAAC,WAAmB,EAAE,OAAiB,EAAA;AAC9C,QAAA,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC;IAC7F;AAEA;;;;;;AAMG;IACH,EAAE,CAAc,KAAe,EAAE,OAA2C,EAAA;QACxE,IAAI,KAAK,KAAK,QAAQ;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,CAAA,CAAA,CAAG,CAAC;AAE9E,QAAA,IAAI,OAAQ,UAA+C,CAAC,SAAS,KAAK,UAAU,EAAE;AAClF,YAAA,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC;QACrF;QACA,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;AACrC,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC;AAE3D,QAAA,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE;AACpC,QAAY,CAAA,EAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAA,cAAA,EAAiB,kBAAkB,CAAC,UAAU,CAAC,CAAA,mBAAA,EAAsB,kBAAkB,CAAC,KAAK,CAAC;;;;;AAMhI,QAAA,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,KAAI;YACtB,KAAK,IAAI,CAAC,cAAc,CAAI,GAAG,EAAE,OAAO,CAAC;AAC7C,QAAA,CAAC,CAAC;IACN;AAEA;;;;;;;;;;;;AAYG;AACH,IAAA,KAAK,CAAC,OAAiC,EAAA;AACnC,QAAA,IAAI,OAAQ,UAA+C,CAAC,SAAS,KAAK,UAAU,EAAE;AAClF,YAAA,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC;QACxF;QACA,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;AACrC,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC;AAC9D,QAAA,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE;AAEpC,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;AACZ,YAAA,MAAM,GAAG,GAAG,CAAA,EAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAA,cAAA,EAAiB,kBAAkB,CAAC,UAAU,CAAC,CAAA,mBAAA,EAAsB,kBAAkB,CAAC,KAAK,CAAC,EAAE;;;;AAIlI,YAAA,MAAM,SAAS,GAAG,IAAI,WAAW,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAA,SAAA,EAAY,UAAU,CAAA,CAAE,EAAE,CAAC;AACxE,YAAA,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA4B;AACpD,YAAA,MAAM,SAAS,GAAG,CAAC,CAAc,KAAI;gBACjC,KAAK,MAAM,EAAE,IAAI,QAAQ;AAAE,oBAAA,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3C,YAAA,CAAC;YACD,SAAS,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC;;;AAGhD,YAAA,KAAK,SAAS,CAAC,OAAO,EAAE;YACxB,IAAI,CAAC,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE;QAClD;AAEA,QAAA,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI;AACtB,QAAA,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;AAC1B,QAAA,OAAO,MAAK;AACR,YAAA,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;;;AAG7B,YAAA,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE;AAChD,gBAAA,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;AAC3D,gBAAA,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE;AAC3B,gBAAA,IAAI,CAAC,IAAI,GAAG,IAAI;YACpB;AACJ,QAAA,CAAC;IACL;;;;AAMQ,IAAA,MAAM,cAAc,CACxB,GAAY,EACZ,OAA2C,EAAA;AAE3C,QAAA,IAAI,KAAkB;AACtB,QAAA,IAAI;AACA,YAAA,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG;QAC3D;AAAE,QAAA,MAAM;YACJ;QACJ;AACA,QAAA,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;YAAE;QAEtE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;QACpC,IAAI,KAAK,GAAG,CAAC;YAAE;AACf,QAAA,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;AAC5C,QAAA,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;;QAGrC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE;AAC5B,YAAA,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAC/B,IAAI,CAAC,UAAU,EAAE,EACjB,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,EAAE,KAAK,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,GAAG,IAAI,EAC/C,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,GAAG,CACZ;QACL;QAEA,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,KAAK,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAI,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI;AAC1E,QAAA,OAAO,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;IACrD;;IAGQ,MAAM,MAAM,CAAI,KAAc,EAAA;QAClC,IAAI,KAAK,IAAI,IAAI;AAAE,YAAA,OAAO,IAAI;AAC9B,QAAA,IAAI,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAI,KAAK,CAAC;AAC9E,QAAA,OAAO,KAAU;IACrB;IAEQ,UAAU,GAAA;QACd,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU;AACtC,QAAA,IAAI,CAAC,CAAC;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC;AACxF,QAAA,OAAO,CAAC;IACZ;AAEQ,IAAA,SAAS,CAAC,MAAc,EAAA;QAC5B,OAAO,CAAA,cAAA,EAAiB,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA,EAAG,MAAM,CAAA,CAAE;IAC5E;IAEQ,MAAM,CAAC,UAAkB,EAAE,EAAU,EAAA;AACzC,QAAA,MAAM,GAAG,GAAG,CAAA,EAAG,UAAU,CAAA,CAAA,EAAI,EAAE,EAAE;QACjC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAA,IAAA,EAAO,kBAAkB,CAAC,GAAG,CAAC,CAAA,CAAE,CAAC;IAC3D;;IAGQ,SAAS,GAAA;QACb,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE;QACpD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,cAAc,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,MAAM;AACvE,QAAA,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC;AACrE,QAAA,IAAI,CAAC,cAAc,GAAG,QAAQ;QAC9B,OAAO,IAAI,CAAC,MAAM;IACtB;AACH;;AClVD;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BG;AA2CH;MACa,OAAO,CAAA;AAEK,IAAA,IAAA;AACA,IAAA,IAAA;AACA,IAAA,OAAA;AAHrB,IAAA,WAAA,CACqB,IAAgB,EAChB,IAAY,EACZ,OAAiB,EAAA;QAFjB,IAAA,CAAA,IAAI,GAAJ,IAAI;QACJ,IAAA,CAAA,IAAI,GAAJ,IAAI;QACJ,IAAA,CAAA,OAAO,GAAP,OAAO;IACzB;IAEK,IAAI,GAAA;QACR,OAAO,CAAA,QAAA,EAAW,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;IACrD;AACQ,IAAA,MAAM,CAAC,EAAmB,EAAA;AAC9B,QAAA,OAAO,CAAA,EAAG,IAAI,CAAC,IAAI,EAAE,CAAA,CAAA,EAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE;IAC7D;;IAGA,MAAM,MAAM,CAAC,MAAkB,EAAA;AAC3B,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO;AAAE,YAAA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;QAC1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;AACxC,QAAA,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAiC,EAAE,GAAG,CAAC;AAC9E,QAAA,IAAI;YACA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAA0B,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACxF,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAA8B,CAAC;AAC1F,YAAA,OAAO,GAAG;QACd;QAAE,OAAO,GAAG,EAAE;YACV,IAAI,GAAG,YAAY,SAAS;AAAE,gBAAA,MAAM,GAAG;;;YAGvC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;YAC3C,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC;YACvF,OAAO,EAAE,GAAG,EAAE,MAAW,EAAE,EAAE,EAAE,QAAQ,EAAE;QAC7C;IACJ;;IAGA,MAAM,GAAG,CAAC,EAAmB,EAAA;AACzB,QAAA,IAAI;AACA,YAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAa,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC5D,YAAA,IAAI,IAAI,CAAC,OAAO,EAAE,OAAO;AAAE,gBAAA,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAA8B,CAAC;YACjH,OAAO,GAAG,CAAC,GAAG;QAClB;QAAE,OAAO,CAAC,EAAE;AACR,YAAA,IAAK,CAAyB,EAAE,MAAM,KAAK,GAAG;AAAE,gBAAA,OAAO,IAAI;AAC3D,YAAA,IAAI,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,YAAY,SAAS,CAAC,EAAE;AACpD,gBAAA,QAAQ,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7D;AACA,YAAA,MAAM,CAAC;QACX;IACJ;;AAGA,IAAA,MAAM,KAAK,CAAC,KAAA,GAAiB,EAAE,EAAA;AAC3B,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO;AAAE,YAAA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,EAAG,IAAI,CAAC,IAAI,EAAE,CAAA,MAAA,CAAQ,EAAE,KAAK,CAAC;AAChF,QAAA,IAAI;AACA,YAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAmB,CAAA,EAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC;AACjF,YAAA,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,GAA0E,CAAC;AAC3H,YAAA,OAAO,GAAG;QACd;QAAE,OAAO,CAAC,EAAE;YACR,IAAI,CAAC,YAAY,SAAS;AAAE,gBAAA,MAAM,CAAC;AACnC,YAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;YAC7D,OAAQ,MAAkC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;QAChF;IACJ;;AAGA,IAAA,MAAM,MAAM,CAAC,EAAmB,EAAE,MAAkB,EAAA;AAChD,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO;AAAE,YAAA,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC;QAC/E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;AACxC,QAAA,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAiC,EAAE,GAAG,CAAC;AAC9E,QAAA,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,MAAiC,CAAC,CAAC;AACtF,QAAA,IAAI;YACA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAa,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAChF,YAAA,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAA8B,CAAC;AACtF,YAAA,OAAO,GAAG;QACd;QAAE,OAAO,GAAG,EAAE;YACV,IAAI,GAAG,YAAY,SAAS;AAAE,gBAAA,MAAM,GAAG;AACvC,YAAA,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAC7G,OAAO,EAAE,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAM,EAAE;QAC5E;IACJ;;IAGA,MAAM,MAAM,CAAC,EAAmB,EAAA;AAC5B,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE;AACxB,YAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAsB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACrE,YAAA,OAAO,GAAG,CAAC,OAAO,IAAI,CAAC;QAC3B;QACA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;AACxC,QAAA,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AACpD,QAAA,IAAI;YACA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAsB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACpF,YAAA,OAAO,GAAG,CAAC,OAAO,IAAI,CAAC;QAC3B;QAAE,OAAO,GAAG,EAAE;YACV,IAAI,GAAG,YAAY,SAAS;AAAE,gBAAA,MAAM,GAAG;AACvC,YAAA,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACpG,OAAO,CAAC,CAAC;QACb;IACJ;AACH;MAEY,WAAW,CAAA;AACS,IAAA,IAAA;AAA7B,IAAA,WAAA,CAA6B,IAAqB,EAAA;QAArB,IAAA,CAAA,IAAI,GAAJ,IAAI;IAAoB;AAErD;;;;;;AAMG;AACH,IAAA,KAAK,CAA8D,IAAY,EAAA;AAC3E,QAAA,OAAO,IAAI,OAAO,CAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;IAClE;;IAGA,MAAM,MAAM,CAAC,KAAiB,EAAA;AAC1B,QAAA,MAAM,CAAC,GAAG,KAAK,CAAC,IAMf;QACD,MAAM,IAAI,GAAG,CAAA,QAAA,EAAW,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA,CAAE;AACrD,QAAA,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE;YAC3B,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvE;AAAO,aAAA,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE;AAClC,YAAA,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA,EAAG,IAAI,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjH;AAAO,aAAA,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE;AAClC,YAAA,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA,CAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;QAC5F;IACJ;AACH;;ACzMD;;;;;;;;;;;;;;;;;;;;;;;;AAwBG;AASH;AACA,MAAM,iBAAiB,GAAG,WAAW;MAgCxB,gBAAgB,CAAA;AAGI,IAAA,IAAA;IAFrB,WAAW,GAAuB,IAAI;AAE9C,IAAA,WAAA,CAA6B,IAAuB,EAAA;QAAvB,IAAA,CAAA,IAAI,GAAJ,IAAI;IAAsB;AAEvD;;;;;AAKG;IACH,MAAM,SAAS,CAAC,KAAuB,EAAA;AACnC,QAAA,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE;AACjB,YAAA,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC;QACrG;AACA,QAAA,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE;QACpB,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC;YAClD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;AAC3B,SAAA,CAAC;;AAEF,QAAA,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC;;;AAG7D,QAAA,IAAI;AACA,YAAA,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAc,iBAAiB,EAAE,QAAQ,CAAC,EAAE,EAAE;gBAChE,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ;AACX,aAAA,CAAC;QACN;QAAE,OAAO,GAAG,EAAE;AACV,YAAA,OAAO,CAAC,IAAI,CAAC,yEAAyE,EAAE,GAAG,CAAC;QAChG;AACA,QAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC7B;;AAGA,IAAA,MAAM,QAAQ,CAAC,OAAe,EAAE,MAAc,EAAA;QAC1C,OAAO,IAAI,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAC9C;AAEA;;;AAGG;IACH,MAAM,cAAc,CAAC,QAAsB,EAAA;QACvC,OAAO,IAAI,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC;IACjD;AAEA;;;AAGG;IACH,MAAM,SAAS,CAAC,IAA2B,EAAA;QACvC,IAAI,IAAI,EAAE,OAAO;YAAE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;AAC9D,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC;AACtD,QAAA,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAc,iBAAiB,EAAE,EAAE,CAAC,CAAC,CACxE;AACD,QAAA,OAAO;AACF,aAAA,MAAM,CAAC,CAAC,CAAC,KAAuB,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC;AACpD,aAAA,GAAG,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC/C;;AAGA,IAAA,MAAM,UAAU,CAAC,OAAe,EAAE,MAAc,EAAA;AAC5C,QAAA,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;AAC3D,QAAA,IAAI;AACA,YAAA,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC;QACxD;AAAE,QAAA,MAAM;;QAER;AACA,QAAA,OAAO,OAAO;IAClB;;AAGA,IAAA,MAAM,WAAW,CAAC,OAAe,EAAE,MAAc,EAAA;QAC7C,OAAO,IAAI,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC;IAClD;;;;IAMQ,EAAE,GAAA;AACN,QAAA,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;AACnB,YAAA,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC;AAC/B,gBAAA,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;AACrB,gBAAA,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;AACnB,gBAAA,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;AACvC,aAAA,CAAC;QACN;QACA,OAAO,IAAI,CAAC,WAAW;IAC3B;IAEQ,OAAO,GAAuB,IAAI;IAClC,MAAM,GAAA;;;AAGV,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;AACf,YAAA,IAAI,CAAC,OAAO,GAAG,IAAI,WAAW,CAAC;AAC3B,gBAAA,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;AAC1B,gBAAA,UAAU,EAAE,aAAa;AACzB,gBAAA,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;AAC3B,gBAAA,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;AAC3B,gBAAA,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB;AAC1C,aAAA,CAAC;QACN;QACA,OAAO,IAAI,CAAC,OAAO;IACvB;IAEQ,MAAM,GAA6B,IAAI;IACvC,KAAK,GAAA;AACT,QAAA,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;AACd,YAAA,IAAI,CAAC,MAAM,GAAG,IAAI,iBAAiB,CAAC;AAChC,gBAAA,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;AAC1B,gBAAA,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;AAC9B,aAAA,CAAC;QACN;QACA,OAAO,IAAI,CAAC,MAAM;IACtB;AACH;;AC1LD;;;;;;;;;;;;;;;;;;;AAmBG;AAsBH;AACA,MAAM,SAAS,GAAG,yBAAyB;AAC3C;AACA,MAAM,QAAQ,GAAG,mCAAmC;AACpD;AACA,MAAM,SAAS,GAAG,GAAG;AAErB,MAAM,WAAW,GAAmB,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE;AAEzE;AACA;AACA;AAEA;AACO,eAAe,mBAAmB,CAAC,GAAc,EAAA;AACpD,IAAA,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC;AACnD,IAAA,OAAO,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;AACvD;AAEA;AACO,eAAe,mBAAmB,CAAC,OAAe,EAAA;AACrD,IAAA,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;;AAE1D,IAAA,OAAO,SAAS,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;AACnE;AAEA;AACO,MAAM,aAAa,GAAG,mBAAmB;AAEhD;AACA;AACA;AACA;AACA;AACA;AAEA,MAAM,YAAY,GAAsB,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE;AAC9E,MAAM,UAAU,GAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;AAElE;AACO,eAAe,oBAAoB,CAAC,GAAc,EAAA;AACrD,IAAA,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC;AACnD,IAAA,OAAO,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;AACvD;AAEA;AACO,eAAe,oBAAoB,CAAC,OAAe,EAAA;AACtD,IAAA,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1D,IAAA,OAAO,SAAS,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC;AAC5E;AAEA;;;;AAIG;AACG,SAAU,gBAAgB,CAAC,MAOhC,EAAA;AACG,IAAA,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AAChH;AAEA;AACO,eAAe,gBAAgB,CAAC,SAAiB,EAAE,SAAoB,EAAA;AAC1E,IAAA,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IAChF,OAAOD,UAAQ,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;AACxC;AAEA;AACO,eAAe,kBAAkB,CAAC,SAAiB,EAAE,MAAc,EAAE,QAAmB,EAAA;AAC3F,IAAA,IAAI;QACA,OAAO,MAAM,SAAS,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAEC,YAAU,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IACpG;AAAE,IAAA,MAAM;AACJ,QAAA,OAAO,KAAK;IAChB;AACJ;AAaA;AACO,eAAe,qBAAqB,GAAA;AACvC,IAAA,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC;IAC3E,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,EAAE,CAAC,SAAS,CAAC;AAC5C,IAAA,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE;AACrE;AAEA;AACA;AACA;AAEA;SACgB,gBAAgB,GAAA;AAC5B,IAAA,OAAO,WAAW,CAAC,iBAAiB,CAAC;AACzC;AAEA;AACA;AACA;AAEA;;;;AAIG;AACI,eAAe,YAAY,CAC9B,MAAkB,EAClB,KAAa,EACb,gBAA2B,EAAA;AAE3B,IAAA,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC;AAC5E,IAAA,MAAM,MAAM,GAAG,IAAI,UAAU,CACzB,MAAM,SAAS,EAAE,CAAC,UAAU,CACxB,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAC1C,GAAG,CAAC,UAAU,EACd,SAAS,CACZ,CACJ;AACD,IAAA,MAAM,OAAO,GAAG,MAAM,cAAc,CAChC,MAAM,EACN,SAAS,EACT,iBAAiB,EACjB,UAAU,CAAC,CAAA,MAAA,EAAS,KAAK,CAAA,CAAE,CAAC,CAC/B;AACD,IAAA,MAAM,EAAE,GAAG,WAAW,CAACC,kBAAgB,CAAC;IACxC,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC;IAC3D,OAAO;QACH,KAAK;AACL,QAAA,YAAY,EAAE,MAAM,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC;AACtD,QAAA,EAAE,EAAEF,UAAQ,CAAC,EAAE,CAAC;AAChB,QAAA,UAAU,EAAEA,UAAQ,CAAC,UAAU,CAAC;AAChC,QAAA,GAAG,EAAE,QAAQ;KAChB;AACL;AAEA;;;AAGG;AACI,eAAe,cAAc,CAChC,OAAmB,EACnB,WAAsB,EAAA;IAEtB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,UAAU,CACzB,MAAM,SAAS,EAAE,CAAC,UAAU,CACxB,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAChC,WAAW,EACX,SAAS,CACZ,CACJ;IACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAChC,MAAM,EACN,SAAS,EACT,iBAAiB,EACjB,UAAU,CAAC,SAAS,OAAO,CAAC,KAAK,CAAA,CAAE,CAAC,CACvC;AACD,IAAA,OAAO,aAAa,CAAC,OAAO,EAAEC,YAAU,CAAC,OAAO,CAAC,EAAE,CAAC,EAAEA,YAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AACzF;AAEA;AACA;AACA;AAEA;AACO,eAAe,cAAc,CAChC,MAAkB,EAClB,UAAkB,EAAA;AAElB,IAAA,MAAM,EAAE,GAAG,WAAW,CAACC,kBAAgB,CAAC;AACxC,IAAA,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;AAC1E,IAAA,OAAO,EAAE,EAAE,EAAEF,UAAQ,CAAC,EAAE,CAAC,EAAE,UAAU,EAAEA,UAAQ,CAAC,UAAU,CAAC,EAAE;AACjE;AAEA;;;AAGG;AACI,eAAe,cAAc,CAChC,MAAkB,EAClB,EAAU,EACV,UAAkB,EAAA;AAElB,IAAA,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,MAAM,EAAEC,YAAU,CAAC,EAAE,CAAC,EAAEA,YAAU,CAAC,UAAU,CAAC,CAAC;AACrF,IAAA,OAAO,UAAU,CAAC,SAAS,CAAC;AAChC;;AC/OA;;;;;;;AAOG;MAaU,iBAAiB,CAAA;AAEL,IAAA,IAAA;AACA,IAAA,WAAA;IAFrB,WAAA,CACqB,IAAsB,EACtB,WAAoB,EAAA;QADpB,IAAA,CAAA,IAAI,GAAJ,IAAI;QACJ,IAAA,CAAA,WAAW,GAAX,WAAW;IAC7B;IAEH,MAAM,IAAI,CAAC,iBAAyB,EAAA;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE;AACN,YAAA,MAAM,IAAI,KAAK,CAAC,6CAA6C,KAAK,CAAA,CAAE,CAAC;QACzE;AACA,QAAA,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,iBAAiB,CAAC;AACvE,QAAA,MAAM,OAAO,GAAkB,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE;QAC3E,IAAI,IAAI,CAAC,WAAW;AAAE,YAAA,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW;AAC5D,QAAA,OAAO,OAAO;IAClB;AAEA,IAAA,OAAO,CAAC,OAAsB,EAAA;AAC1B,QAAA,OAAO,OAAO,EAAE,WAAW,KAAK,IAAI;AAChC,YAAA,OAAO,OAAO,EAAE,EAAE,KAAK,QAAQ;AAC/B,YAAA,OAAO,OAAO,EAAE,UAAU,KAAK,QAAQ;IAC/C;;IAGA,MAAM,IAAI,CAAC,OAAsB,EAAA;AAC7B,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAAE,YAAA,OAAO,IAAI;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAQ,CAAC,KAAK,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;AACxC,QAAA,IAAI,CAAC,GAAG;AAAE,YAAA,OAAO,IAAI;AACrB,QAAA,OAAO,cAAc,CAAC,GAAG,EAAE,OAAQ,CAAC,EAAY,EAAE,OAAQ,CAAC,UAAoB,CAAC;IACpF;AACH;;ACpDD;;;;;;;;;;;;;;;;;;;;AAoBG;MAmKU,KAAK,CAAA;AAae,IAAA,IAAA;AAZpB,IAAA,IAAI;AACJ,IAAA,aAAa;IACd,OAAO,GAA4B,IAAI;IAC9B,OAAO,GAA8B,EAAE;AACvC,IAAA,MAAM;;AAEN,IAAA,MAAM,GAAG,IAAI,WAAW,EAAE;IACnC,QAAQ,GAAG,KAAK;IAChB,YAAY,GAAwB,IAAI;;IAExC,OAAO,GAA+B,IAAI;AAElD,IAAA,WAAA,CAA6B,IAAe,EAAA;QAAf,IAAA,CAAA,IAAI,GAAJ,IAAI;AAC7B,QAAA,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI;QACrB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,QAAQ;QACnD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI;IAC3E;;AAGA,IAAA,IAAI,EAAE,GAAA;QACF,OAAO,IAAI,CAAC,IAAI;IACpB;;AAGA,IAAA,IAAI,OAAO,GAAA;AACP,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO;IAC5B;;;AAKA,IAAA,MAAM,OAAO,GAAA;AACT,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;;;;;AAKf,YAAA,MAAM,QAAQ,GAAG,YAAW;gBACxB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;AAC5C,gBAAA,QACI,CAAA,EAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAA,YAAA,EAAe,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,UAAA,CAAY;AAC9E,qBAAC,MAAM,GAAG,CAAA,QAAA,EAAW,kBAAkB,CAAC,MAAM,CAAC,CAAA,CAAE,GAAG,EAAE,CAAC;AAE/D,YAAA,CAAC;AACD,YAAA,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE;AAC5B,YAAA,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;AACrB,kBAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;kBAC7C,IAAI,gBAAgB,CAAC;oBACjB,GAAG;AACH,oBAAA,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;AACtB,oBAAA,YAAY,EAAE,KAAK;AACnB,oBAAA,WAAW,EAAE,QAAQ;;;AAGrB,oBAAA,oBAAoB,EAAE,CAAC;AAC1B,iBAAA,CAAC;YACR,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;AAC5E,YAAA,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;;;;AAIvB,YAAA,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;gBACnB,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,MAAK;AACnD,oBAAA,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;;;AAGjD,oBAAA,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE;AACzB,gBAAA,CAAC,CAAC;gBACF,IAAI,CAAC,UAAU,EAAE;;;AAGjB,gBAAA,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;AAClD,oBAAA,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC/E;YACJ;QACJ;AACA,QAAA,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;IAChC;IAEA,UAAU,GAAA;AACN,QAAA,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE;AAC1B,QAAA,IAAI,CAAC,YAAY,IAAI;AACrB,QAAA,IAAI,CAAC,YAAY,GAAG,IAAI;AACxB,QAAA,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE;AACrB,QAAA,IAAI,CAAC,OAAO,GAAG,IAAI;IACvB;;AAGA,IAAA,iBAAiB,CAAC,GAAwB,EAAA;AACtC,QAAA,IAAI,CAAC,OAAO,GAAG,GAAG;IACtB;AAEA;;;;;;;AAOG;AACH,IAAA,aAAa,CAAC,IAAgB,EAAA;AAC1B,QAAA,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC;IAC9B;;AAGA,IAAA,YAAY,CAAC,OAAiD,EAAA;AAC1D,QAAA,OAAO,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,MAAK,EAAE,CAAC,CAAC;IACxD;;IAGA,EAAE,CAAC,KAAa,EAAE,OAAiB,EAAA;QAC/B,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;;YAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5C;IAEA,GAAG,CAAC,KAAa,EAAE,OAAiB,EAAA;QAChC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC;aAC7C;YACD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,OAAO,CAAC;YAC1E,IAAI,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;QACzC;IACJ;;;IAKA,QAAQ,GAAA;AACJ,QAAA,OAAO,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;IACrE;;AAGA,IAAA,IAAI,CAAC,IAAY,EAAA;QACb,OAAO,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE;;AAGA,IAAA,OAAO,CAAC,KAAc,EAAA;AAClB,QAAA,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC;IAChC;IAEA,KAAK,GAAA;AACD,QAAA,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE;IAC1D;IAEA,WAAW,GAAA;AACP,QAAA,OAAO,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,KAAK;IACzE;;AAGA,IAAA,IAAI,GAAG,GAAA;QACH,OAAO,IAAI,CAAC,OAAO;IACvB;;AAIA;;;AAGG;AACH,IAAA,MAAM,WAAW,CACb,OAAgB,EAChB,OAAmD,EAAE,EAAA;AAErD,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO;AACjC,QAAA,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE;YACnB,IAAI,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/F;QACJ;;;;AAIA,QAAA,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE;AACtC,QAAA,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE;AACnC,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC;AACxF,QAAA,MAAM,KAAK,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE;AACtC,QAAA,MAAM,KAAK,GAAG;AACV,YAAA,MAAM,EAAE,mBAAmB,CAAC,QAAQ,CAAC;YACrC,MAAM;AACN,YAAA,EAAE,EAAE,KAAc;YAClB,QAAQ;YACR,GAAG;AACH,YAAA,OAAO,EAAE,IAAI;SAChB;AACD,QAAA,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE;AACpB,YAAA,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACpB,YAAA,KAAK,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5C;aAAO;;YAEH,KAAK,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC;AACvC,YAAA,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC;QAC7D;IACJ;;AAGA,IAAA,SAAS,CAAC,OAAuC,EAAA;AAC7C,QAAA,MAAM,QAAQ,GAAG,CAAC,CAAQ,KAAK,OAAO,CAAE,CAAoC,CAAC,MAAM,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC;AACjD,QAAA,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,QAAQ,CAAC;IACrE;AAEA;;;;;;;AAOG;IACH,MAAM,WAAW,CAAC,MAAc,EAAE,OAAgB,EAAE,OAAmD,EAAE,EAAA;AACrG,QAAA,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC;AACpF,QAAA,MAAM,KAAK,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;AAChE,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO;AACjC,QAAA,IAAI,OAAO,EAAE,OAAO,EAAE;AAClB,YAAA,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;AAC9B,gBAAA,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC;AAC9B,gBAAA,MAAM,EAAE,YAAY;AACpB,gBAAA,EAAE,EAAE,MAAM;AACV,gBAAA,GAAG,EAAE,MAAM,OAAO,CAAC,OAAO,EAAE;AAC/B,aAAA,CAAC;YACF,IAAI,IAAI,CAAC,WAAW,EAAE;AAAE,gBAAA,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;;gBACtC,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAC/F;QACJ;AACA,QAAA,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;IACvB;AAEA;;;;AAIG;IACH,MAAM,aAAa,CAAC,MAAc,EAAA;QAC9B,MAAM,KAAK,GAAG,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;AACpD,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO;AACjC,QAAA,IAAI,OAAO,EAAE,OAAO,EAAE;YAClB,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC;YACzC,IAAI,IAAI,CAAC,WAAW,EAAE;AAAE,gBAAA,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;;gBACtC,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAC/F;QACJ;AACA,QAAA,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;IACvB;AAEA;;;;;;AAMG;AACH,IAAA,MAAM,cAAc,GAAA;AAChB,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO;QACjC,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM;AAAE,YAAA,OAAO,EAAE;AAChD,QAAA,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC;;QAE3F,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KACV,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAO,EAAE,IAAI,CAAC,MAAO,iBAAiB,IAAI,EAAE,CAAC,CAAC,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,CACxH,CACJ;QACD,MAAM,GAAG,GAAwB,EAAE;AACnC,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACxC,YAAA,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC;YAC7B,IAAI,OAAO,EAAE;gBACT,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO;AACpC,gBAAA,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;YACrB;QACJ;AACA,QAAA,OAAO,GAAG;IACd;;AAGA,IAAA,eAAe,CAAC,OAAuC,EAAA;AACnD,QAAA,MAAM,QAAQ,GAAG,CAAC,CAAQ,KAAK,OAAO,CAAE,CAAoC,CAAC,MAAM,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,QAAQ,CAAC;AACxD,QAAA,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,QAAQ,CAAC;IAC5E;;AAGA,IAAA,gBAAgB,CAAC,OAAyC,EAAA;AACtD,QAAA,MAAM,QAAQ,GAAG,CAAC,CAAQ,KAAK,OAAO,CAAE,CAAsC,CAAC,MAAM,CAAC;QACtF,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,QAAQ,CAAC;AACzD,QAAA,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,QAAQ,CAAC;IAC7E;AAEA;;;;;;AAMG;AACH,IAAA,aAAa,CAAC,OAAe,EAAE,IAAa,EAAE,EAAW,EAAA;AACrD,QAAA,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE;;;QAGzB,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;IACzE;;AAGA,IAAA,WAAW,CAAC,OAAoC,EAAA;AAC5C,QAAA,MAAM,QAAQ,GAAG,CAAC,CAAQ,KAAK,OAAO,CAAE,CAAiC,CAAC,MAAM,CAAC;QACjF,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC;AACnD,QAAA,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,WAAW,EAAE,QAAQ,CAAC;IACvE;;AAGA,IAAA,aAAa,CAAC,OAAmC,EAAA;AAC7C,QAAA,MAAM,QAAQ,GAAG,CAAC,CAAQ,KAAK,OAAO,CAAE,CAA8B,CAAC,MAAM,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,cAAc,EAAE,QAAQ,CAAC;AACtD,QAAA,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,cAAc,EAAE,QAAQ,CAAC;IAC1E;AAEA;;;AAGG;AACH,IAAA,MAAM,OAAO,CACT,IAAA,GAA4C,EAAE,EAAA;AAE9C,QAAA,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE;AACnC,QAAA,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE;QACpC,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC;QAClD,IAAI,IAAI,CAAC,KAAK;AAAE,YAAA,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACvD,QAAA,MAAM,GAAG,GACL,CAAA,EAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAA,YAAA,EAAe,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,QAAA,CAAU;AAC9E,aAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAA,CAAA,EAAI,MAAM,EAAE,GAAG,EAAE,CAAC;;AAE3C,QAAA,MAAM,GAAG,GAAG,CAAC,MAAK,EAAG,IAAI;YAAE,OAAO,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC;QAAE;AAAE,QAAA,MAAM;AAAE,YAAA,OAAO,KAAK;AAAE,QAAA,CAAC,CAAC,CAAC,GAAG;QACpH,MAAM,IAAI,GAAG,OAAO,OAAO,WAAW,KAAK,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AACxF,QAAA,MAAM,EAAE,GAAG,IAAI,EAAE;QACjB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,EAAE;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,CAAA,eAAA,EAAkB,GAAG,CAAC,MAAM,CAAA,CAAA,EAAI,GAAG,CAAC,UAAU,CAAA,CAAE,CAAC;QAC9E,MAAM,IAAI,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsD;AACpF,QAAA,MAAM,MAAM,GAAG,IAAI,EAAE;;;AAGrB,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC1D,QAAA,MAAM,IAAI,GAAG,IAAI,EAAE;;;;;AAKnB,QAAA,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE;QAChC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QACtF,IAAI,GAAG,EAAE;AACL,YAAA,OAAO,CAAC,IAAI,CACR,CAAA,yBAAA,EAA4B,IAAI,CAAC,MAAM,CAAA,SAAA,EAAY,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA,SAAA,EAAY,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAA,EAAA,CAAI,CAC9J;QACL;QACA,MAAM,QAAQ,GAAwB,EAAE;AACxC,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACxC,YAAA,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC;AAC7B,YAAA,IAAI,CAAC,OAAO;gBAAE;AACd,YAAA,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;;YAEtB,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE;AAC5B,gBAAA,IAAI;oBACA,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAA8B;AAC9D,oBAAA,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,EAAE;AACxC,wBAAA,KAAK,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC;oBAC5D;gBACJ;AAAE,gBAAA,MAAM;;gBAER;YACJ;QACJ;QACA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE;IAC5D;AAEA;;;AAGG;AACH,IAAA,MAAM,IAAI,CAAC,IAAA,GAAgD,EAAE,EAAA;AACzD,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE;AACrC,QAAA,MAAM,IAAI,CAAC,OAAO,EAAE;AACpB,QAAA,IAAI,MAAM,OAAO,CAAC,aAAa,EAAE;AAAE,YAAA,OAAO,IAAI;QAC9C,IAAI,OAAO,CAAC,SAAS,EAAE;AAAE,YAAA,OAAO,IAAI;AACpC,QAAA,MAAM,OAAO,CAAC,UAAU,EAAE;AAC1B,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;AACvD,QAAA,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG;;AAEjC,QAAA,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE;YAC1B,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;AAAE,gBAAA,OAAO,IAAI;AAC/C,YAAA,MAAM,KAAK,CAAC,MAAM,CAAC;QACvB;AACA,QAAA,OAAO,KAAK;IAChB;;AAGA,IAAA,MAAM,MAAM,GAAA;AACR,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE;AACrC,QAAA,MAAM,OAAO,CAAC,YAAY,EAAE;AAC5B,QAAA,MAAM,IAAI,CAAC,OAAO,EAAE;;;AAGpB,QAAA,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,MAAK,EAAE,CAAC,CAAC;;QAE1C,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE;AAC/B,YAAA,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,MAAK,EAAE,CAAC,CAAC;QAChD;IACJ;;AAGA,IAAA,MAAM,KAAK,CAAC,QAAgB,EAAE,eAAuB,EAAA;QACjD,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC;IAChE;;IAGA,MAAM,MAAM,CAAC,QAAgB,EAAA;QACzB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;IAChD;;IAGA,MAAM,MAAM,CAAC,MAA6D,EAAA;QACtE,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;IAC/C;;IAIA,MAAM,OAAO,CACT,IAA8B,EAC9B,QAA2B,EAC3B,OASI,EAAE,EAAA;QAEN,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB;AACtD,aAAA,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;;;;;QAK7E,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC;AAClD,QAAA,OAAO,MAAM;IACjB;IAEA,MAAM,OAAO,CAAC,QAAsB,EAAA;QAChC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC;IAC1D;AAEA;;;AAGgE;AAChE,IAAA,aAAa,CAAC,QAAsB,EAAA;QAChC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC;IAC5D;AAEA;;;AAGuD;IACvD,MAAM,UAAU,CAAC,QAAsB,EAAA;QACnC,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC/C;AAEA;;AAE2D;IAC3D,MAAM,WAAW,CAAC,QAAsB,EAAA;QACpC,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC;IAChD;;AAGQ,IAAA,MAAM,YAAY,CAAC,QAAsB,EAAE,MAA4B,EAAA;AAC3E,QAAA,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC;AAC5D,QAAA,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE;AACzB,QAAA,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC7D,QAAA,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE;AAC1C,YAAA,IAAI;AACA,gBAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA,EAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAA,aAAA,EAAgB,MAAM,EAAE,EAAE;oBAChF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI;AACxE,iBAAA,CAAC;gBACF,IAAI,GAAG,CAAC,EAAE;oBAAE;YAChB;AAAE,YAAA,MAAM,cAAc;YACtB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,EAAE,GAAG,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QAChE;;;;QAIA,OAAO,CAAC,IAAI,CAAC,CAAA,iBAAA,EAAoB,MAAM,CAAA,qBAAA,EAAwB,MAAM,CAAC,MAAM,CAAA,SAAA,CAAW,CAAC;IAC5F;IAEQ,WAAW,CAAC,gBAAgB,GAAG,KAAK,EAAA;;;;;AAKxC,QAAA,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC;AAC3B,YAAA,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;AAC9B,YAAA,UAAU,EAAE,aAAa;AACzB,YAAA,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;AACtB,YAAA,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;AAC3B,YAAA,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB;AACvC,YAAA,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ;YAC7B,gBAAgB;AACnB,SAAA,CAAC;AACF,QAAA,OAAO,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACtC;;;IAKQ,UAAU,GAAA;AACd,QAAA,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE;AACpC,QAAA,IAAI,CAAC,QAAQ,GAAG,IAAI;AACpB,QAAA,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,CAAc,KAAI;YACjE,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;AAClC,QAAA,CAAC,CAAC;IACN;IAEQ,MAAM,UAAU,CAAC,KAAc,EAAA;QACnC,MAAM,CAAC,GAAG,KAAgC;AAC1C,QAAA,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE;QACjC,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE;YACnD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,YAAsB,EAAE,IAAI,CAAC,MAAM,UAAU,IAAI,EAAE,MAAM,CAAC;YACnG,IAAI,OAAO,EAAE;gBACT,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AACnC,gBAAA,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,YAAsB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YACnE;YACA;QACJ;AACA,QAAA,IAAI,CAAC,CAAC,gBAAgB,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE;;;AAG7E,YAAA,MAAM,CAAC,GAAG,CAAC,CAAC,gBAA0D;AACtE,YAAA,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,EAAE;AACpC,gBAAA,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,UAAU,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;gBACpG,IAAI,OAAO,EAAE;AACT,oBAAA,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,OAAO,CAAC;AACzC,oBAAA,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC;gBACzD;YACJ;YACA;QACJ;QACA,IAAI,CAAC,CAAC,kBAAkB,IAAI,OAAO,CAAC,CAAC,kBAAkB,KAAK,QAAQ,EAAE;AAClE,YAAA,MAAM,CAAC,GAAG,CAAC,CAAC,kBAAqC;YACjD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE;;AAE5B,gBAAA,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MACpD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CACpD;YACL;YACA;QACJ;QACA,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,EAAE;;;;;AAKpC,YAAA,MAAM,CAAC,GAAG,CAAC,CAAC,GAA4C;AACxD,YAAA,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,GAAG,CAAC,CAAC,IAAI,GAAG,EAAE;YACrD,IAAI,IAAI,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,EAAE;gBACvC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3E;YACA;QACJ;QACA,IAAI,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAE;AACpD,YAAA,MAAM,GAAG,GAAG,CAAC,CAAC,WAA0B;AACxC,YAAA,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,CAAC;;;AAGnC,YAAA,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzD,YAAA,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE;gBACtG,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,MAAK,EAAE,CAAC,CAAC;YACnF;YACA;QACJ;QACA,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;;AAErC,YAAA,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,MAAK,EAAE,CAAC,CAAC;QACrD;IACJ;AAEA;;;;AAIG;IACK,MAAM,WAAW,CAAC,OAAgB,EAAE,OAAgB,EAAE,WAAoB,EAAE,QAAiB,EAAA;QACjG,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;AAC9C,QAAA,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;AACpC,QAAA,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;AAC/B,QAAA,MAAM,OAAO,GAAG,OAAO,IAAI,SAAS;;;;AAIpC,QAAA,IAAI,QAAQ;AAAE,YAAA,OAAO,CAAC,GAAG,GAAG,QAAQ;;;AAGpC,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,UAAU;QAC1E,IAAI,QAAQ,EAAE;YACV,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAC/B,gBAAA,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO;gBAClC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;AAC/F,aAAA,CAAC;YACF,OAAO,CAAC,GAAG,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC7D;QACA,OAAO,IAAI,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE;IAClF;AAEA;;;;;;AAMG;AACK,IAAA,MAAM,WAAW,CACrB,KAAa,EACb,MAAyB,EACzB,UAAU,GAAG,KAAK,EAClB,QAAQ,GAAG,CAAC,EACZ,UAAU,GAAG,KAAK,EAAA;AAElB,QAAA,IAAI;YACA,IAAI,UAAU,GAAG,KAAK;YACtB,IAAI,MAAM,GAAG,QAAQ;YACrB,IAAI,CAAC,UAAU,EAAE;gBACb,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAkD;AAChF,gBAAA,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;AAAE,oBAAA,OAAO,IAAI;AACvD,gBAAA,UAAU,GAAG,KAAK,CAAC,YAAY;gBAC/B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC;YACzC;YACA,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;AAAE,gBAAA,OAAO,IAAI;;;;;;;AAQhD,YAAA,IAAI,CAAC,UAAU,IAAI,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;AAAE,gBAAA,OAAO,IAAI;YAElE,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACpD,IAAI,UAAU,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACrC,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC;YAC/C,OAAO;gBACH,IAAI,EAAE,MAAM,CAAC,MAAM;gBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC;AACzC,gBAAA,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,WAAiC;gBAC9D,MAAM;AACN,gBAAA,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,GAAyB;gBACnD,OAAO;aACV;QACL;QAAE,OAAO,GAAG,EAAE;AACV,YAAA,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC;AAC5B,YAAA,OAAO,IAAI;QACf;IACJ;AAEA;;;;;AAKG;IACK,MAAM,YAAY,CAAC,MAAc,EAAA;;;;;QAKrC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;AAAE,YAAA,OAAO,IAAI;AACnD,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO;AACjC,QAAA,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG;AAC/B,QAAA,IAAI,CAAC,OAAO,IAAI,OAAO,GAAG,KAAK,QAAQ;AAAE,YAAA,OAAO,KAAK;QACrD,IAAI,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE;AACN,YAAA,MAAM,OAAO,CAAC,gBAAgB,EAAE;YAChC,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;AACxC,YAAA,IAAI,CAAC,GAAG;AAAE,gBAAA,OAAO,KAAK;QAC1B;QACA,MAAM,SAAS,GAAG,gBAAgB,CAAC;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC;YACzC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC;YACpC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC;AACvD,SAAA,CAAC;QACF,OAAO,kBAAkB,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC;IAClD;;AAGQ,IAAA,MAAM,UAAU,CAAC,MAAc,EAAE,OAA0B,EAAE,EAAkB,EAAA;AACnF,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO;QACjC,IAAI,CAAC,OAAO,EAAE,OAAO;YAAE;;QAEvB,IAAI,OAAO,CAAC,QAAQ;AAAE,YAAA,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC;AAC1E,QAAA,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;AAC9B,YAAA,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;YACtC,MAAM;YACN,EAAE;YACF,QAAQ,EAAE,OAAO,CAAC,QAAQ;AAC7B,SAAA,CAAC;AACF,QAAA,MAAM,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC;IACxD;AAEA;;;;;AAKG;AACK,IAAA,MAAM,OAAO,GAAA;AACjB,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO;QACjC,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE;QACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,IAAI,CAAC,CAAC;;AAE/C,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC1D,QAAA,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE;AAClC,YAAA,MAAM,GAAG,GACL,CAAA,EAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAA,YAAA,EAAe,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,QAAA,CAAU;AAC9E,gBAAA,CAAA,OAAA,EAAU,kBAAkB,CAAC,KAAK,CAAC,YAAY;YACnD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE;YACb,MAAM,IAAI,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsD;YACpF,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE;AACnC,gBAAA,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC;AACxD,gBAAA,IAAI,CAAC,OAAO;oBAAE;AACd,gBAAA,IAAI;oBACA,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA8B;AAC1D,oBAAA,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,EAAE;AACxC,wBAAA,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC;oBAC7D;gBACJ;AAAE,gBAAA,MAAM;;gBAER;YACJ;YACA,IAAI,CAAC,IAAI,CAAC,UAAU;gBAAE;AACtB,YAAA,KAAK,GAAG,IAAI,CAAC,UAAU;QAC3B;IACJ;IAEQ,SAAS,CAAC,IAAY,EAAE,MAAe,EAAA;AAC3C,QAAA,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAChE;IAEQ,cAAc,GAAA;AAClB,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;AACpB,YAAA,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC;QACxF;AACA,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO;IAC5B;AAEQ,IAAA,aAAa,CAAC,WAAoB,EAAA;AACtC,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;AACpB,YAAA,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC;QAC3F;QACA,OAAO,WAAW,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,IAAI,CAAC,MAAO;IAC7F;AACH;AAED,SAAS,KAAK,CAAC,EAAU,EAAA;AACrB,IAAA,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChD;AAEA;;;AAGG;AACH,SAAS,cAAc,CAAC,MAAc,EAAA;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC;AACpE;AAEA;AACwE;AACxE,SAAS,mBAAmB,CAAC,QAAgB,EAAA;IACzC,OAAO,CAAA,OAAA,EAAU,QAAQ,CAAA,CAAE;AAC/B;;ACz8BA;;;;;;;;;;;;;;;;;;;;AAoBG;MA6CU,gBAAgB,CAAA;AAII,IAAA,IAAA;;AAFZ,IAAA,KAAK,GAAG,IAAI,GAAG,EAA6B;AAE7D,IAAA,WAAA,CAA6B,IAA0B,EAAA;QAA1B,IAAA,CAAA,IAAI,GAAJ,IAAI;IAAyB;AAE1D;;;AAGG;IACH,SAAS,CAAc,OAAe,EAAE,OAA2C,EAAA;QAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAA,MAAA,EAAS,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA,CAAE,GAAG,CAAA,IAAA,EAAO,OAAO,CAAA,CAAE;QAC/E,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;AAEtC,QAAA,IAAI,MAAM,GAAG,MAAK,EAAE,CAAC;QACrB,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,KAAI;YAC5B,IAAI,IAAI,EAAE;AACN,gBAAA,MAAM,KAAK,GAAG,CAAC,CAAc,KAAI;AAC7B,oBAAA,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAmC;AACzE,oBAAA,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAI,IAAI,CAAC,EAAE,CAAC;AAC7D,gBAAA,CAAC;gBACD,OAAO,CAAC,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC;AACjD,gBAAA,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC;YACrE;iBAAO;AACH,gBAAA,MAAM,KAAK,GAAG,CAAC,CAAc,KAAI;AAC7B,oBAAA,MAAM,CAAC,GAAG,CAAC,CAAC,MAA8E;AAC1F,oBAAA,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,KAAK,OAAO,EAAE;wBACrC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBAC5E;AACJ,gBAAA,CAAC;gBACD,OAAO,CAAC,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC;AACnD,gBAAA,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC;YACvE;AACJ,QAAA,CAAC,CAAC;QAEF,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,MAAM,EAAE,EAAE;IACnD;;AAGA,IAAA,MAAM,OAAO,CAAc,OAAe,EAAE,IAAO,EAAA;AAC/C,QAAA,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA,IAAA,EAAO,OAAO,EAAE,EAAE,KAAK,CAAC;AACtE,QAAA,MAAM,KAAK;QACX,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;IAClE;AAEA;;;;;AAKG;AACH,IAAA,MAAM,IAAI,CAAc,MAAc,EAAE,OAAU,EAAA;QAC9C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;AAC7B,YAAA,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC;QACnG;QACA,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA,MAAA,EAAS,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA,CAAE,EAAE,IAAI,CAAC;AAC5F,QAAA,MAAM,KAAK;AACX,QAAA,MAAM,OAAO,CAAC,QAAQ,EAAE;QACxB,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/C;AAEA;;;;;;AAMG;AACH,IAAA,MAAM,UAAU,GAAA;AACZ,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAuB,aAAa,CAAC;AAC3E,QAAA,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;AACxD,YAAA,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC;QACxF;QACA,OAAO,IAAI,CAAC,OAAO;IACvB;AAEA;;;;;;AAMG;AACH,IAAA,IAAI,CAAC,QAAgB,EAAA;QACjB,OAAO,IAAIc,KAAI,CAAC;AACZ,YAAA,IAAI,EAAE,QAAQ;AACd,YAAA,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;AAC9B,YAAA,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;AACnC,YAAA,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;AAC3B,YAAA,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,EAAE;AACvB,YAAA,WAAW,EAAE,MAAM,IAAI,CAAC,WAAW,EAAE;AACxC,SAAA,CAAC;IACN;;IAGA,UAAU,GAAA;QACN,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE;YACjC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,MAAK,EAAE,CAAC,CAAC;QACtE;AACA,QAAA,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;IACtB;;;;IAMQ,OAAO,CAAC,IAAY,EAAE,GAAY,EAAA;QACtC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,CAAC,EAAE;YACJ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3B;AACA,QAAA,OAAO,CAAC;IACZ;AAEQ,IAAA,MAAM,QAAQ,CAAC,IAAY,EAAE,IAAa,EAAA;AAC9C,QAAA,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE;AACxB,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE;AACvC,QAAA,MAAM,GAAG,GACL,CAAA,EAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAA,YAAA,EAAe,kBAAkB,CAAC,IAAI,CAAC,CAAA,UAAA,CAAY;AACzE,aAAC,MAAM,GAAG,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;AAE3D,QAAA,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,oBAAoB,EAAE,GAAG,EAAE,IAAI,CAAC;AAE5E,QAAA,IAAI,YAAyB;AAC7B,QAAA,MAAM,KAAK,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,KAAI,EAAG,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;;;QAI7D,OAAO,CAAC,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,OAAO,CAAC,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,CAAc,KAAI;AAC5D,YAAA,IAAK,CAAC,CAAC,MAA8B,EAAE,KAAK;AAAE,gBAAA,YAAY,EAAE;AAChE,QAAA,CAAC,CAAC;AAEF,QAAA,MAAM,OAAO,CAAC,OAAO,EAAE;AACvB,QAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE;IAC7B;;AAGQ,IAAA,MAAM,WAAW,GAAA;AACrB,QAAA,IAAI;AACA,YAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAqB,gBAAgB,EAAE,EAAE,CAAC;AAC/E,YAAA,OAAO,GAAG,EAAE,MAAM,IAAI,IAAI;QAC9B;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO,IAAI;QACf;IACJ;IAEQ,IAAI,GAAA;QACR,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ;AACrC,QAAA,IAAI,CAAC,EAAE;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC;AAC9F,QAAA,OAAO,EAAE;IACb;AACH;AAED;AACA,SAAS,oBAAoB,CAAC,GAAW,EAAE,IAAY,EAAA;AACnD,IAAA,OAAO,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AACnE;AAEA;AACA,SAAS,cAAc,CAAI,IAAY,EAAA;AACnC,IAAA,IAAI;AACA,QAAA,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM;IAChC;AAAE,IAAA,MAAM;AACJ,QAAA,OAAO,IAAoB;IAC/B;AACJ;;ACzOA;;;;;;;;;;;;;;;;;AAiBG;AAYH;;;;;;AAMG;AACI,MAAM,gBAAgB,GAAG;AAEhC;AACA,MAAM,aAAa,GAAG,CAAC,MAAK;AACxB,IAAA,IAAI;AACA,QAAA,OAAO,OAAO,QAAQ,KAAK,WAAW,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACvF;AAAE,IAAA,MAAM;AACJ,QAAA,OAAO,KAAK;IAChB;AACJ,CAAC,GAAG;AACJ,SAAS,IAAI,CAAC,GAAW,EAAA;AACrB,IAAA,IAAI,aAAa;AAAE,QAAA,OAAO,CAAC,IAAI,CAAC,oBAAoB,GAAG,CAAA,CAAE,CAAC;AAC9D;MAyCa,YAAY,CAAA;AAeQ,IAAA,IAAA;AAdZ,IAAA,IAAI,GAAG,IAAI,GAAG,EAAsB;IAC7C,KAAK,GAAG,CAAC;AACA,IAAA,MAAM;;AAEN,IAAA,WAAW,GAAG,IAAI,GAAG,EAAqB;AAC3D;AACgF;IACxE,WAAW,GAAyB,IAAI;IACxC,cAAc,GAAG,CAAC;AAC1B;;AAEgF;AACxE,IAAA,OAAgB,eAAe,GAAG,IAAI;AAE9C,IAAA,WAAA,CAA6B,IAAsB,EAAA;QAAtB,IAAA,CAAA,IAAI,GAAJ,IAAI;QAC7B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,IAAI,QAAQ;IAChD;;;AAKA,IAAA,WAAW,CAAC,QAAgB,EAAA;QACxB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;IACzC;AAEA;;;;;;;AAOG;IACH,MAAM,gBAAgB,CAAC,IAA0B,EAAA;QAC7C,IAAI,IAAI,CAAC,WAAW;AAAE,YAAA,OAAO,IAAI,CAAC,WAAW,CAAC;AAC9C,QAAA,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,GAAG,YAAY,CAAC,eAAe,EAAE;AACjF,YAAA,OAAO;QACX;QACA,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC,OAAO,CAAC,MAAK;AACtD,YAAA,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE;AAChC,YAAA,IAAI,CAAC,WAAW,GAAG,IAAI;AAC3B,QAAA,CAAC,CAAC;QACF,OAAO,IAAI,CAAC,WAAW;IAC3B;AAEQ,IAAA,MAAM,kBAAkB,GAAA;AAC5B,QAAA,IAAI,MAAsB;AAC1B,QAAA,IAAI;YACA,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;QACpD;AAAE,QAAA,MAAM;YACJ;QACJ;AACA,QAAA,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE;AACpB,YAAA,IAAI,CAAC,CAAC,CAAC,gBAAgB,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAAE;AAC7D,YAAA,IAAI;AACA,gBAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,oBAAoB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACpF;AAAE,YAAA,MAAM;;YAER;QACJ;IACJ;;IAIA,YAAY,GAAA;QACR,OAAO,IAAI,CAAC,KAAK;IACrB;AAEA,IAAA,WAAW,CAAC,KAAa,EAAA;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;IAC/B;IAEA,SAAS,GAAA;AACL,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;IAC7B;;AAIA;AACsE;AACtE,IAAA,MAAM,aAAa,GAAA;AACf,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;AAAE,YAAA,OAAO,KAAK;;;;QAIlC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;QACtC,IAAI,CAAC,IAAI,EAAE;YACP,IAAI,CAAC,6CAA6C,CAAC;AACnD,YAAA,OAAO,KAAK;QAChB;AACA,QAAA,IAAI,MAAqC;AACzC,QAAA,IAAI;AACA,YAAA,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9D;QAAE,OAAO,CAAC,EAAE;AACR,YAAA,IAAI,CAAC,CAAA,qCAAA,EAAwC,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC,OAAO,GAAG,CAAC,CAAA,CAAE,CAAC;AAClF,YAAA,OAAO,KAAK;QAChB;QACA,IAAI,CAAC,MAAM,EAAE;YACT,IAAI,CAAC,4BAA4B,CAAC;AAClC,YAAA,OAAO,KAAK;QAChB;AACA,QAAA,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;AACzD,YAAA,IAAI;gBACA,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAe;AACjD,gBAAA,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrE;AAAE,YAAA,MAAM;;YAER;QACJ;QACA,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE;YACtB,IAAI,CAAC,iEAAiE,CAAC;AACvE,YAAA,OAAO,KAAK;QAChB;QACA,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AACzD,QAAA,IAAI,CAAC,CAAA,mBAAA,EAAsB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAA,mBAAA,EAAsB,IAAI,CAAC,KAAK,CAAA,CAAE,CAAC;AAC5E,QAAA,OAAO,IAAI;IACf;AAEQ,IAAA,MAAM,OAAO,GAAA;AACjB,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE;;;AAG9C,QAAA,IAAI;;;;;YAKA,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;YACpE,MAAM,GAAG,GAA2B,EAAE;YACtC,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE;gBAClC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAChF;AACA,YAAA,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC;AACtD,YAAA,IAAI,CAAC,CAAA,eAAA,EAAkB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA,SAAA,CAAW,CAAC;QAC9D;QAAE,OAAO,CAAC,EAAE;AACR,YAAA,IAAI,CAAC,CAAA,kBAAA,EAAqB,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC,OAAO,GAAG,CAAC,CAAA,CAAE,CAAC;QACnE;IACJ;;AAGA,IAAA,MAAM,YAAY,GAAA;QACd,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;AACpC,QAAA,IAAI,CAAC,KAAK,GAAG,CAAC;AACd,QAAA,MAAM,IAAI,CAAC,OAAO,EAAE;IACxB;;AAIA;;;;AAIG;IACH,MAAM,UAAU,CAAC,YAAqB,EAAA;AAClC,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC;AACtC,YAAA,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;AAC5B,YAAA,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe;AAC1C,YAAA,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB;YAC5C,YAAY;AACf,SAAA,CAAC;IACN;AAEA;;;AAGG;AACH,IAAA,MAAM,QAAQ,GAAA;QACV,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;AACtC,QAAA,IAAI,CAAC,IAAI;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AAClF,QAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QACtE,IAAI,KAAK,GAAG,CAAC;AACb,QAAA,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;YACtB,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE;AAC/B,YAAA,IAAI;gBACA,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC;gBAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC;AAC9B,gBAAA,KAAK,EAAE;YACX;AAAE,YAAA,MAAM;;YAER;QACJ;AACA,QAAA,IAAI,KAAK,GAAG,CAAC,EAAE;YACX,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAClE,YAAA,MAAM,IAAI,CAAC,OAAO,EAAE;QACxB;AACA,QAAA,IAAI,CAAC,CAAA,WAAA,EAAc,KAAK,CAAA,oBAAA,EAAuB,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,KAAK,CAAA,CAAA,CAAG,CAAC;AACxF,QAAA,OAAO,KAAK;IAChB;AAEA;;;;;AAKG;AACH,IAAA,MAAM,SAAS,GAAA;QACX,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC5C,QAAA,IAAI;AACA,YAAA,OAAO,MAAM,IAAI,CAAC,QAAQ,EAAE;QAChC;AAAE,QAAA,MAAM;YACJ,OAAO,CAAC,CAAC;QACb;IACJ;;AAIA;;;;AAIG;AACH,IAAA,MAAM,KAAK,CAAC,cAAsB,EAAE,eAAuB,EAAA;AACvD,QAAA,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,eAAe,CAAC;AAC5D,QAAA,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK;cACzB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;AAC7B,cAAE,CAAC,IAAI,CAAC,KAAK,CAAC;AAClB,QAAA,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE;YACxB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;AAChC,YAAA,IAAI,CAAC,GAAG;gBAAE;YACV,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC;AACzD,YAAA,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QACzF;IACJ;AAEA;;;AAGG;AACH,IAAA,MAAM,YAAY,GAAA;QACd,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE;QACxD,MAAM,QAAQ,GAAa,EAAE;AAC7B,QAAA,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE;YACvB,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE;AACzC,YAAA,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,eAAe,CAAC;AACnD,YAAA,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC/B;AACA,QAAA,OAAO,QAAQ;IACnB;AAEA;;;AAGG;IACH,MAAM,MAAM,CAAC,MAA6D,EAAA;AACtE,QAAA,MAAM,OAAO,GAAG,MAAM,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;QACnE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;AAC7E,QAAA,MAAM,MAAM,GAAG,gBAAgB,EAAE;QACjC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC;AAChC,QAAA,IAAI,CAAC,KAAK,GAAG,SAAS;AACtB,QAAA,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE;YACrB,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE;YACvC,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,CAAC,CAAC,eAAe,CAAC;YAC9D,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;YAChE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QACrF;AACA,QAAA,MAAM,IAAI,CAAC,OAAO,EAAE;AACpB,QAAA,OAAO,SAAS;IACpB;;IAGA,MAAM,MAAM,CAAC,QAAgB,EAAA;QACzB,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC9C;;;AChWJ;;;;;;;;;;;;AAYG;MAYU,aAAa,CAAA;AACO,IAAA,IAAA;AAA7B,IAAA,WAAA,CAA6B,IAAuB,EAAA;QAAvB,IAAA,CAAA,IAAI,GAAJ,IAAI;IAAsB;AAE/C,IAAA,GAAG,CAAC,MAAc,EAAA;AACtB,QAAA,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,eAAe,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA,EAAG,MAAM,EAAE;IAClG;AAEQ,IAAA,MAAM,IAAI,CAAI,MAAc,EAAE,IAAa,EAAA;AAC/C,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;AAChD,YAAA,MAAM,EAAE,MAAM;AACd,YAAA,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;AAC/C,YAAA,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;AAC7B,SAAA,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,CAAA,mBAAA,EAAsB,MAAM,CAAA,EAAA,EAAK,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,CAAA,CAAE,CAAC;AAC7F,QAAA,QAAQ,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9C;IAEQ,MAAM,GAAG,CAAI,MAAc,EAAA;AAC/B,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,CAAC,EAAE;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,CAAA,kBAAA,EAAqB,MAAM,CAAA,EAAA,EAAK,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,CAAA,CAAE,CAAC;AAC5F,QAAA,QAAQ,MAAM,GAAG,CAAC,IAAI,EAAE;IAC5B;IAEA,MAAM,eAAe,CAAC,GAAgB,EAAA;QAClC,MAAM,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,CAAC;IACjD;IAEA,MAAM,UAAU,CAAC,QAAgB,EAAA;AAC7B,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CACvB,CAAA,eAAA,EAAkB,kBAAkB,CAAC,QAAQ,CAAC,CAAA,CAAE,CACnD;AACD,QAAA,OAAO,IAAI,CAAC,KAAK,IAAI,EAAE;IAC3B;AAEA,IAAA,MAAM,cAAc,CAAC,cAAsB,EAAE,OAAmB,EAAE,YAAoB,EAAA;AAClF,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;IAC/E;AAEA,IAAA,MAAM,YAAY,GAAA;QACd,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAA8B,kBAAkB,CAAC;AAC5E,QAAA,OAAO,IAAI,CAAC,OAAO,IAAI,EAAE;IAC7B;AAEA,IAAA,MAAM,WAAW,GAAA;QACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAA8B,iBAAiB,CAAC;AAC3E,QAAA,OAAO,IAAI,CAAC,MAAM,IAAI,EAAE;IAC5B;IAEA,MAAM,MAAM,CAAC,SAAiB,EAAA;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAoB,iBAAiB,EAAE,EAAE,SAAS,EAAE,CAAC;IACzE;IAEA,MAAM,MAAM,CAAC,QAAgB,EAAA;QACzB,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,CAAC;IACpD;;;;;AAOA,IAAA,MAAM,gBAAgB,CAAC,IAAA,GAAmE,EAAE,EAAA;QACxF,OAAO,IAAI,CAAC,IAAI,CAAa,eAAe,EAAE,IAAI,CAAC;IACvD;AAEA,IAAA,MAAM,eAAe,GAAA;QACjB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAA2B,gBAAgB,CAAC;AACvE,QAAA,OAAO,IAAI,CAAC,KAAK,IAAI,EAAE;IAC3B;;AAGA,IAAA,MAAM,aAAa,CAAC,QAAgB,EAAE,IAAY,EAAA;AAC9C,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxD;;AAGA,IAAA,MAAM,OAAO,GAAA;QACT,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAA0D,kBAAkB,CAAC;AACxG,QAAA,OAAO,IAAI,CAAC,OAAO,IAAI,EAAE;IAC7B;IAEA,MAAM,gBAAgB,CAAC,KAAa,EAAA;QAChC,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,CAAC;IACtD;AAEA;AAC2E;IAC3E,MAAM,YAAY,CAAC,GAAiG,EAAA;QAChH,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC;IAC3C;AAEA,IAAA,MAAM,aAAa,GAAA;AACf,QAAA,IAAI;AACA,YAAA,OAAO,MAAM,IAAI,CAAC,GAAG,CAAgB,WAAW,CAAC;QACrD;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO,IAAI;QACf;IACJ;AACH;;AC1HD;;;;;;;;;;;;;;;AAeG;AAmBH;AACM,SAAU,UAAU,CAAC,OAAe,EAAE,MAAc,EAAA;AACtD,IAAA,OAAO,CAAA,EAAG,OAAO,CAAA,CAAA,EAAI,MAAM,EAAE;AACjC;AAEA;;;;AAIG;AACG,SAAU,iBAAiB,CAAC,QAAgB,EAAA;IAC9C,OAAO,CAAA,OAAA,EAAU,QAAQ,CAAA,CAAE;AAC/B;AAEM,SAAU,aAAa,CAAC,MAAc,EAAA;AACxC,IAAA,OAAO,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;AACvC;AAEA;;;;AAIG;AACG,SAAU,YAAY,CAAC,KAA0B,EAAE,QAAsB,EAAA;AAC3E,IAAA,IAAI,CAAC,KAAK;AAAE,QAAA,OAAO,QAAQ;IAC3B,IAAI,QAAQ,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE;AAC3C,QAAA,OAAO,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IAClE;AACA,IAAA,IAAI,QAAQ,CAAC,EAAE,KAAK,MAAM,EAAE;AACxB,QAAA,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE;YAC1D,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE;QAC/E;AACA,QAAA,OAAO,KAAK;IAChB;;IAEA,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE;AACvC;;ACtEA;;;;;;;;;;;;AAYG;AAWH;AACM,SAAU,SAAS,CAAC,MAAc,EAAA;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC;AACpE;AAQA;;;;AAIG;MACU,UAAU,CAAA;AAGU,IAAA,OAAA;AAFZ,IAAA,KAAK;AAEtB,IAAA,WAAA,CAA6B,OAAuB,EAAA;QAAvB,IAAA,CAAA,OAAO,GAAP,OAAO;AAChC,QAAA,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK;IAC9B;AAEA,IAAA,IAAI,OAAO,GAAA;AACP,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO;IAC/B;IAEA,WAAW,GAAA;AACP,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;IACrC;IAEA,OAAO,GAAA;AACH,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;IACjC;;AAGA,IAAA,MAAM,UAAU,CAAC,OAAe,EAAE,KAAmB,EAAA;AACjD,QAAA,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;IACpF;;AAGA,IAAA,MAAM,UAAU,CAAC,OAAe,EAAE,MAAc,EAAA;QAC5C,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;AAClD,QAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,gBAAgB,EAAE,GAAG,CAAC;QAC1E,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,EAAE;AACxC,YAAA,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC;AACzB,YAAA,MAAM,EAAE,IAAI;AACZ,YAAA,EAAE,EAAE,QAAqB;AACzB,YAAA,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,QAAQ,EAAE,QAAQ;AAC/B,SAAA,CAAC;IACN;;AAGA,IAAA,MAAM,WAAW,CAAC,OAAe,EAAE,QAAgB,EAAA;AAC/C,QAAA,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,UAAU,CAAC,OAAO,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/F;;IAGA,MAAM,YAAY,CAAC,OAAe,EAAA;AAC9B,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAC/B,gBAAgB,EAChB,CAAA,EAAG,OAAO,CAAA,CAAA,CAAG,EACb,GAAG,OAAO,CAAA,EAAA,CAAI,CACjB;AACD,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;IACnC;IAEA,MAAM,SAAS,CAAC,OAAe,EAAA;QAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,eAAe,EAAE,OAAO,CAAC;IAChE;;AAGA,IAAA,MAAM,aAAa,CAAC,OAAe,EAAE,MAAc,EAAA;AAC/C,QAAA,IAAI,CAAC,MAAM;YAAE;QACb,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK;AAC3C,YAAA,cAAc,EAAE,CAAC;AACjB,YAAA,YAAY,EAAE,MAAM;AACpB,YAAA,eAAe,EAAE,KAAK;SACzB;AACD,QAAA,MAAM,IAAI,GAAgB;YACtB,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC;YACpD,YAAY,EAAE,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,MAAM;YAC5E,eAAe,EAAE,GAAG,CAAC,eAAe;SACvC;AACD,QAAA,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC;IACxD;;IAGA,MAAM,YAAY,CAAC,OAAe,EAAE,KAAc,EAAE,QAAgB,EAAE,GAAW,EAAA;AAC7E,QAAA,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YACvB,GAAG;YACH,QAAQ;AACR,YAAA,MAAM,EAAE,OAAO;AACf,YAAA,MAAM,EAAE,SAAS;AACjB,YAAA,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;AAC3B,SAAA,CAAC;IACN;;AAGA,IAAA,eAAe,CAAC,IAAyB,EAAA;QACrC,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC;IAC7C;AACH;;AC9HD;;;;;;;;;;;;;;;;AAgBG;AAEH,MAAM,UAAU,GAAG,kBAAkB;MAExB,UAAU,CAAA;AACnB,IAAA,OAAO,SAAS,GAAA;AACZ,QAAA,IAAI;AACA,YAAA,OAAO,OAAO,MAAM,KAAK,WAAW;QACxC;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO,KAAK;QAChB;IACJ;AAEQ,IAAA,GAAG,CAAC,IAAY,EAAA;AACpB,QAAA,OAAO,8BAA8B,kBAAkB,CAAC,IAAI,CAAC,EAAE;IACnE;IAEQ,IAAI,GAAA;AACR,QAAA,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;IAClC;;IAGA,MAAM,GAAG,CAAC,IAAY,EAAA;AAClB,QAAA,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE;AAAE,YAAA,OAAO,IAAI;AACxC,QAAA,IAAI;AACA,YAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE;AAC/B,YAAA,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC7C,YAAA,IAAI,CAAC,GAAG;AAAE,gBAAA,OAAO,IAAI;YACrB,OAAO,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;QAClD;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO,IAAI;QACf;IACJ;;AAGA,IAAA,MAAM,GAAG,CAAC,IAAY,EAAE,KAAiB,EAAA;AACrC,QAAA,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE;YAAE;AAC7B,QAAA,IAAI;AACA,YAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE;AAC/B,YAAA,MAAM,KAAK,CAAC,GAAG,CACX,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EACd,IAAI,QAAQ,CAAC,KAAiB,EAAE;AAC5B,gBAAA,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;AAC1D,aAAA,CAAC,CACL;QACL;AAAE,QAAA,MAAM;;QAER;IACJ;;IAGA,MAAM,GAAG,CAAC,IAAY,EAAA;AAClB,QAAA,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE;AAAE,YAAA,OAAO,KAAK;AACzC,QAAA,IAAI;AACA,YAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE;AAC/B,YAAA,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO,KAAK;QAChB;IACJ;AACH;;AC5ED;;;;;;;;;;AAUG;MAiBU,YAAY,CAAA;AAIQ,IAAA,MAAA;AAHZ,IAAA,SAAS;AACT,IAAA,KAAK;IAEtB,WAAA,CAA6B,MAAoB,EAAE,IAAA,GAA4B,EAAE,EAAA;QAApD,IAAA,CAAA,MAAM,GAAN,MAAM;QAC/B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI;QACvC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK;IACpC;AAEA,IAAA,MAAM,QAAQ,CAAC,IAAY,EAAE,IAA6B,EAAA;AACtD,QAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC;AAC7E,QAAA,IAAI,IAAI,CAAC,KAAK,EAAE;AACZ,YAAA,OAAO,CAAC,IAAI,CACR,CAAA,eAAA,EAAkB,KAAK,GAAG,eAAe,GAAG,iBAAiB,CAAA,OAAA,EAAU,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA,CAAA,CAAG,EAC3F,CAAA,MAAA,EAAS,KAAK,GAAG,SAAS,GAAG,MAAM,CAAA,CAAE,CACxC;QACL;AACA,QAAA,OAAO,KAAK;IAChB;AAEA,IAAA,QAAQ,CAAC,IAAY,EAAA;QACjB,IAAI,IAAI,CAAC,KAAK;AAAE,YAAA,OAAO,CAAC,IAAI,CAAC,CAAA,4BAAA,EAA+B,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA,CAAA,CAAG,CAAC;AACjF,QAAA,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC9B;AACH;;ACnDD;;;;;;;;;;;;;;;AAeG;AAEI,MAAM,WAAW,GAAG;MAmBd,aAAa,CAAA;AAED,IAAA,KAAA;AACA,IAAA,IAAA;IAFrB,WAAA,CACqB,KAAqB,EACrB,IAAY,EAAA;QADZ,IAAA,CAAA,KAAK,GAAL,KAAK;QACL,IAAA,CAAA,IAAI,GAAJ,IAAI;IACtB;;AAGH,IAAA,IAAI,CAAC,EAAU,EAAE,IAAgB,EAAE,IAAc,EAAA;AAC7C,QAAA,MAAM,GAAG,GAAmB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;;;;QAI/D,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW,EAAE,GAAG,CAAC;IAC9C;;IAGA,SAAS,CAAC,IAAgB,EAAE,IAAc,EAAA;QACtC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC;IAC9B;AAEA;;;;;AAKG;AACH,IAAA,QAAQ,CAAC,EAA2D,EAAA;QAChE,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,KAAI;AAChC,YAAA,IAAI,CAAC,CAAC,OAAO,KAAK,WAAW;gBAAE;AAC/B,YAAA,MAAM,GAAG,GAAG,CAAC,CAAC,IAAkC;AAChD,YAAA,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;gBAAE;AAC1E,YAAA,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;AAAE,gBAAA,OAAO;AACnC,YAAA,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,KAAK,GAAG;gBAAE;AAC5C,YAAA,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC;AACpC,QAAA,CAAC,CAAC;IACN;AACH;;ACxED;;;;;;;;;;;;;;AAcG;AAKH,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI;AACvB;AACA,MAAMC,QAAM,GAAG,EAAE;AACjB;AACA,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;AAEpC,MAAM,WAAW,GAAmB,CAAC,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC;MA4BlE,eAAe,CAAA;AAWH,IAAA,QAAA;AACA,IAAA,IAAA;AAXJ,IAAA,KAAK,GAAG,IAAI,GAAG,EAAoB;AACnC,IAAA,MAAM,GAAG,IAAI,GAAG,EAA6D;AAC7E,IAAA,OAAO,GAAG,IAAI,GAAG,EAA6B;AAC9C,IAAA,SAAS;AACT,IAAA,UAAU;AACV,IAAA,QAAQ;AACR,IAAA,KAAK;IACd,SAAS,GAAG,CAAC;AAErB,IAAA,WAAA,CACqB,QAAuB,EACvB,IAAY,EAC7B,OAA+B,EAAE,EAAA;QAFhB,IAAA,CAAA,QAAQ,GAAR,QAAQ;QACR,IAAA,CAAA,IAAI,GAAJ,IAAI;QAGrB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,WAAW;QAChD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK;AAChC,QAAA,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAClG;IAEQ,GAAG,CAAC,GAAG,CAAY,EAAA;QACvB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACtD;IAEA,KAAK,GAAA;AACD,QAAA,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,UAAU,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAC3F;;AAGA,IAAA,SAAS,CAAC,MAAc,EAAA;AACpB,QAAA,IAAI,MAAM,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE;QACpD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ;AAAE,YAAA,OAAO;AAC7C,QAAA,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM;YAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvD;AAEA,IAAA,IAAI,CAAC,IAAY,EAAE,IAAgB,EAAE,OAAO,GAAG,CAAC,EAAA;AAC5C,QAAA,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE;AACnC,QAAA,IAAI,EAAE,EAAE,UAAU,KAAK,MAAM;YAAE,KAAK,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC;IAC9E;AAEA,IAAA,SAAS,CAAC,IAAgB,EAAE,OAAO,GAAG,CAAC,EAAA;QACnC,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;AAC5B,YAAA,IAAI,CAAC,CAAC,EAAE,EAAE,UAAU,KAAK,MAAM;AAAE,gBAAA,KAAK,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC;QAClF;IACJ;AAEA,IAAA,SAAS,CAAC,EAA6D,EAAA;AACnE,QAAA,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IACvC;AAEA,IAAA,YAAY,CAAC,EAA6B,EAAA;AACtC,QAAA,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IACxC;IAEA,KAAK,GAAA;QACD,IAAI,CAAC,SAAS,EAAE;QAChB,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;AAC5B,YAAA,IAAI;AAAE,gBAAA,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE;YAAE;AAAE,YAAA,MAAM,wBAAwB;AACrD,YAAA,IAAI;AAAE,gBAAA,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE;YAAE;AAAE,YAAA,MAAM,wBAAwB;QACxD;AACA,QAAA,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;AAClB,QAAA,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;AACnB,QAAA,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;IACxB;;AAIQ,IAAA,KAAK,CAAC,MAAc,EAAA;AACxB,QAAA,MAAM,EAAE,GAAG,IAAI,iBAAiB,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;AACjE,QAAA,MAAM,IAAI,GAAa,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE;QACjF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;AAC5B,QAAA,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;AACxC,QAAA,EAAE,CAAC,cAAc,GAAG,CAAC,CAAC,KAAI;AACtB,YAAA,IAAI,CAAC,CAAC,SAAS,EAAE;AACb,gBAAA,IAAI,CAAC,GAAG,CAAC,CAAA,EAAG,KAAK,oBAAoB,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA,CAAE,CAAC;AACzI,gBAAA,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YAC3D;AACJ,QAAA,CAAC;AACD,QAAA,EAAE,CAAC,uBAAuB,GAAG,MAAK;YAC9B,IAAI,CAAC,GAAG,CAAC,CAAA,EAAG,KAAK,CAAA,YAAA,EAAe,EAAE,CAAC,eAAe,CAAA,CAAE,CAAC;AACrD,YAAA,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,eAAe,CAAC;AAAE,gBAAA,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;AAC5F,QAAA,CAAC;AACD,QAAA,IAAI,IAAI,CAAC,KAAK,EAAE;AACZ,YAAA,EAAE,CAAC,0BAA0B,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAA,EAAG,KAAK,CAAA,KAAA,EAAQ,EAAE,CAAC,kBAAkB,CAAA,CAAE,CAAC;AACvF,YAAA,EAAE,CAAC,yBAAyB,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAA,EAAG,KAAK,CAAA,WAAA,EAAc,EAAE,CAAC,iBAAiB,CAAA,CAAE,CAAC;QAC/F;QACA,EAAE,CAAC,aAAa,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;AACnE,QAAA,OAAO,IAAI;IACf;AAEA;AAC6E;IACrE,MAAM,aAAa,CAAC,IAAc,EAAA;AACtC,QAAA,IAAI,CAAC,SAAS,GAAG,IAAI;AACrB,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU;AAC/B,QAAA,IAAI,CAAC,UAAU,GAAG,EAAE;AACpB,QAAA,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE;AACxB,YAAA,IAAI;gBAAE,MAAM,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE;AAAE,YAAA,MAAM,wBAAwB;QAC/E;QACA,IAAI,OAAO,CAAC,MAAM;YAAE,IAAI,CAAC,GAAG,CAAC,CAAA,QAAA,EAAW,OAAO,CAAC,MAAM,CAAA,wBAAA,CAA0B,CAAC;IACrF;IAEQ,MAAM,QAAQ,CAAC,MAAc,EAAA;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC;QAC9C,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE;QACzC,MAAM,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;IAC9C;AAEQ,IAAA,WAAW,CAAC,MAAc,EAAE,IAAc,EAAE,EAAkB,EAAA;AAClE,QAAA,EAAE,CAAC,UAAU,GAAG,aAAa;AAC7B,QAAA,IAAI,CAAC,EAAE,GAAG,EAAE;QACZ,EAAE,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE;AACvC,QAAA,EAAE,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QACpC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,IAAmB,CAAC,CAAC;IAC3F;AAEQ,IAAA,MAAM,QAAQ,CAAC,IAAY,EAAE,IAAgB,EAAE,IAAa,EAAA;AAChE,QAAA,IAAI,IAAI,KAAK,OAAO,EAAE;AAClB,YAAA,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ;AAAE,gBAAA,OAAO;AACtE,YAAA,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACrD,MAAM,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,IAAiC,CAAC;AACrE,YAAA,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE;YAC3C,MAAM,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC;YACzC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC;QAC9C;AAAO,aAAA,IAAI,IAAI,KAAK,QAAQ,EAAE;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YACjC,IAAI,IAAI,EAAE;gBACN,MAAM,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,IAAiC,CAAC;AACrE,gBAAA,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;YAClC;QACJ;AAAO,aAAA,IAAI,IAAI,KAAK,KAAK,EAAE;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;AACjC,YAAA,IAAI,IAAI,IAAI,IAAI,EAAE;;;;AAId,gBAAA,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;AAAE,oBAAA,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAA2B,CAAC;oBAAE;gBAAQ;AAClF,gBAAA,IAAI;oBAAE,MAAM,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAA2B,CAAC;gBAAE;AAAE,gBAAA,MAAM,cAAc;YAC5F;QACJ;AAAO,aAAA,IAAI,IAAI,KAAK,KAAK,EAAE;AACvB,YAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACnB;IACJ;AAEQ,IAAA,IAAI,CAAC,MAAc,EAAA;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;AACnC,QAAA,IAAI,CAAC,IAAI;YAAE;AACX,QAAA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;AACzB,QAAA,IAAI;AAAE,YAAA,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE;QAAE;AAAE,QAAA,MAAM,wBAAwB;AACxD,QAAA,IAAI;AAAE,YAAA,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE;AAAE,QAAA,MAAM,wBAAwB;QACvD,IAAI,CAAC,cAAc,EAAE;IACzB;IAEQ,cAAc,GAAA;AAClB,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE;AAC1B,QAAA,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO;YAAE,EAAE,CAAC,KAAK,CAAC;IAC5C;;AAIQ,IAAA,MAAM,cAAc,CAAC,EAAkB,EAAE,IAAgB,EAAE,OAAe,EAAA;QAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;AACpC,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;AACzD,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE;AAC5B,YAAA,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC;YACvD,MAAM,KAAK,GAAG,IAAI,UAAU,CAACA,QAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YACnD,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;AACrC,YAAA,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC;AACtB,YAAA,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;AAClB,YAAA,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC;AACtB,YAAA,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC;AACzB,YAAA,KAAK,CAAC,GAAG,CAAC,KAAK,EAAEA,QAAM,CAAC;AACxB,YAAA,IAAI,EAAE,CAAC,cAAc,GAAG,YAAY;AAAE,gBAAA,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1D,YAAA,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;QAClB;IACJ;AAEQ,IAAA,KAAK,CAAC,EAAkB,EAAA;AAC5B,QAAA,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAI;AAC3B,YAAA,EAAE,CAAC,0BAA0B,GAAG,YAAY,GAAG,CAAC;YAChD,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACtF,YAAA,EAAE,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,KAAK,CAAC;AACnD,QAAA,CAAC,CAAC;IACN;AAEQ,IAAA,OAAO,CAAC,MAAc,EAAE,IAAc,EAAE,KAAiB,EAAA;AAC7D,QAAA,IAAI,KAAK,CAAC,MAAM,GAAGA,QAAM;YAAE;AAC3B,QAAA,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC;QACzE,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAACA,QAAM,CAAC;QAEjC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;QAC7B,IAAI,CAAC,CAAC,EAAE;YACJ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE;YACtE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5B;AACA,QAAA,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;AAAE,YAAA,OAAO;AAC5B,QAAA,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK;QACvB,CAAC,CAAC,QAAQ,EAAE;AACZ,QAAA,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM;AACtB,QAAA,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,KAAK;YAAE;AAE1B,QAAA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QAClC,IAAI,GAAG,GAAG,CAAC;AACX,QAAA,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;AACtB,YAAA,IAAI,CAAC,CAAC;AAAE,gBAAA,OAAO;AACf,YAAA,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC;AACf,YAAA,GAAG,IAAI,CAAC,CAAC,MAAM;QACnB;AACA,QAAA,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM;YAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC;IAC5D;AACH;;ACnRD;;;;;;;;;;AAUG;AAIH;;;;AAIG;AACI,MAAM,aAAa,GAAG,CAAC;AACvB,MAAM,cAAc,GAAG,CAAC;;ACpB/B;;;;;;;;;;;;;;;;;;AAkBG;AAEH,IAAY,SAKX;AALD,CAAA,UAAY,SAAS,EAAA;AACjB,IAAA,SAAA,CAAA,SAAA,CAAA,MAAA,CAAA,GAAA,CAAA,CAAA,GAAA,MAAQ;AACR,IAAA,SAAA,CAAA,SAAA,CAAA,MAAA,CAAA,GAAA,CAAA,CAAA,GAAA,MAAQ;AACR,IAAA,SAAA,CAAA,SAAA,CAAA,OAAA,CAAA,GAAA,CAAA,CAAA,GAAA,OAAS;AACT,IAAA,SAAA,CAAA,SAAA,CAAA,QAAA,CAAA,GAAA,CAAA,CAAA,GAAA,QAAU;AACd,CAAC,EALW,SAAS,KAAT,SAAS,GAAA,EAAA,CAAA,CAAA;AAerB,MAAM,UAAU,GAAG,EAAE;AACrB,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC;AAE9B,SAAS,UAAU,CAAC,GAAW,EAAA;IAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,GAAG,CAAC,EAAE;AAC/B,QAAA,MAAM,IAAI,KAAK,CAAC,CAAA,qBAAA,EAAwB,UAAU,CAAA,oBAAA,EAAuB,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA,MAAA,CAAQ,CAAC;IACpG;AACA,IAAA,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE;AAAE,QAAA,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;AAChF,IAAA,OAAO,GAAG;AACd;AAEA,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAClF,SAAS,UAAU,CAAC,KAAiB,EAAA;IACjC,IAAI,CAAC,GAAG,EAAE;AACV,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzD,IAAA,OAAO,CAAC;AACZ;AAEA,SAAS,MAAM,CAAC,IAAe,EAAE,IAAY,EAAE,KAAK,GAAG,CAAC,EAAA;IACpD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,KAAK,CAAC;AAC1C,IAAA,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI;IACb,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5B,IAAA,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE;AAClC;AAEM,SAAU,UAAU,CAAC,IAAY,EAAA;IACnC,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG;AAC3C;AAEM,SAAU,UAAU,CAAC,IAAY,EAAA;IACnC,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG;AAC3C;AAEM,SAAU,YAAY,CAAC,IAAY,EAAA;IACrC,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG;AAC7C;AAEM,SAAU,WAAW,CAAC,IAAY,EAAE,OAAmB,EAAA;AACzD,IAAA,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;AACrE,IAAA,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC;AACxB,IAAA,OAAO,GAAG;AACd;AAEM,SAAU,MAAM,CAAC,KAAiB,EAAA;AACpC,IAAA,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC;AACvE,IAAA,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAc;AAClC,IAAA,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAClD,IAAA,IAAI,IAAI,KAAK,SAAS,CAAC,KAAK,EAAE;;AAE1B,QAAA,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;IACvD;AACA,IAAA,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE;AACzB;;;;;;;;;;;;ACxFA;;;;;;;;;;;AAWG;MA4BU,WAAW,CAAA;AAIC,IAAA,KAAA;AACA,IAAA,GAAA;AACA,IAAA,IAAA;AALJ,IAAA,KAAK,GAAG,IAAI,GAAG,EAAuB;AAEvD,IAAA,WAAA,CACqB,KAAiB,EACjB,GAAY,EACZ,IAAY,EAAA;QAFZ,IAAA,CAAA,KAAK,GAAL,KAAK;QACL,IAAA,CAAA,GAAG,GAAH,GAAG;QACH,IAAA,CAAA,IAAI,GAAJ,IAAI;IACtB;AAEH;;;;AAIG;IACH,IAAI,CAAC,IAAY,EAAE,SAAiB,EAAA;AAChC,QAAA,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAI;AAC3B,YAAA,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAI;AACrC,gBAAA,IAAI,KAAK;AAAE,oBAAA,OAAO,OAAO,CAAC,KAAK,CAAC;gBAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBACrC,IAAI,QAAQ,EAAE;AACV,oBAAA,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;oBAChC;gBACJ;AACA,gBAAA,MAAM,KAAK,GAAG,UAAU,CAAC,MAAK;oBAC1B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;AAC9B,oBAAA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;oBACvB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;AACjC,oBAAA,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;gBACxC,CAAC,EAAE,SAAS,CAAC;AACb,gBAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;gBACrD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;AACnC,YAAA,CAAC,CAAC;AACN,QAAA,CAAC,CAAC;IACN;;AAGA,IAAA,QAAQ,CAAC,IAAY,EAAA;QACjB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IACnC;;AAGA,IAAA,MAAM,WAAW,CAAC,IAAY,EAAE,KAAiB,EAAA;AAC7C,QAAA,IAAI,CAAC;AACL,QAAA,IAAI;AACA,YAAA,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;QACrB;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO;QACX;AACA,QAAA,QAAQ,CAAC,CAAC,IAAI;AACV,YAAA,KAAK,SAAS,CAAC,IAAI,EAAE;AACjB,gBAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,gBAAA,IAAI,KAAK;AAAE,oBAAA,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACrD;YACJ;AACA,YAAA,KAAK,SAAS,CAAC,IAAI,EAAE;;gBAEjB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAAE,oBAAA,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC9D;YACJ;AACA,YAAA,KAAK,SAAS,CAAC,KAAK,EAAE;AAClB,gBAAA,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACtC,gBAAA,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO;AAAE,oBAAA,OAAO;;;gBAGnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AACtC,gBAAA,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI;oBAAE;AACpB,gBAAA,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;gBACvC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACzB,gBAAA,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC;AAC3B,gBAAA,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACpC,gBAAA,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAQ,CAAC,CAAC;gBAC/C;YACJ;YACA,KAAK,SAAS,CAAC,MAAM;;;gBAGjB;;IAEZ;;IAGA,KAAK,GAAA;QACD,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;AAC5B,YAAA,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC;AACrB,YAAA,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;QACvC;AACA,QAAA,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;IACtB;AACH;;AC/HD;;;;;;;;;;AAUG;AAcH;MACa,eAAe,CAAA;AACP,IAAA,MAAM;AACN,IAAA,GAAG,GAAG,IAAI,GAAG,EAA+C;IAE7E,WAAA,CAAY,KAAiB,EAAE,MAAc,EAAA;AACzC,QAAA,IAAI,CAAC,MAAM,GAAG,IAAI,WAAW,CACzB,KAAK,EACL,CAAC,MAAM,EAAE,KAAK,KAAI;AACd,YAAA,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG;AAAE,gBAAA,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;QAChD,CAAC,EACD,MAAM,CACT;IACL;IAEA,IAAI,CAAC,IAAY,EAAE,SAAiB,EAAA;QAChC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;IAC5C;AACA,IAAA,QAAQ,CAAC,IAAY,EAAA;AACjB,QAAA,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC9B;IACA,WAAW,CAAC,IAAY,EAAE,KAAiB,EAAA;QACvC,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC;IAC7C;AACA,IAAA,UAAU,CAAC,EAA+C,EAAA;AACtD,QAAA,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAChB,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACpC;IACA,KAAK,GAAA;AACD,QAAA,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;AACnB,QAAA,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE;IACpB;AACH;;ACxDD;;;;;;;;;AASG;MAQU,gBAAgB,CAAA;AAKI,IAAA,MAAA;AAJZ,IAAA,KAAK,GAAG,IAAI,GAAG,EAA0C;AACzD,IAAA,GAAG,GAAG,IAAI,GAAG,EAA+C;IACrE,MAAM,GAAG,CAAC;AAElB,IAAA,WAAA,CAA6B,MAAc,EAAA;QAAd,IAAA,CAAA,MAAM,GAAN,MAAM;QAC/B,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,CAA0B,KAAI;AACnD,YAAA,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI;AAChB,YAAA,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE;gBACf,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AACpC,gBAAA,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG;AAAE,oBAAA,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC;YAClD;AAAO,iBAAA,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa,EAAE;AAC9B,gBAAA,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpC,IAAI,OAAO,EAAE;oBACT,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AACvB,oBAAA,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;gBACnD;YACJ;AACJ,QAAA,CAAC;IACL;IAEA,IAAI,CAAC,IAAY,EAAE,SAAiB,EAAA;AAChC,QAAA,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAI;AAC3B,YAAA,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE;YACxB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC;AAC3B,YAAA,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACxE,QAAA,CAAC,CAAC;IACN;AAEA,IAAA,QAAQ,CAAC,IAAY,EAAA;AACjB,QAAA,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACpD;IAEA,WAAW,CAAC,IAAY,EAAE,KAAiB,EAAA;;AAEvC,QAAA,MAAM,GAAG,GACL,KAAK,CAAC,UAAU,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,MAAM,CAAC;cACtD,KAAK,CAAC;AACR,cAAE,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM;QAC9B,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IACnE;AAEA,IAAA,UAAU,CAAC,EAA+C,EAAA;AACtD,QAAA,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAChB,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACpC;IAEA,KAAK,GAAA;AACD,QAAA,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;QAAE;AAAE,QAAA,MAAM,qBAAqB;AAC5E,QAAA,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE;AACvB,QAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;AAClC,QAAA,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;AAClB,QAAA,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE;IACpB;AACH;;ACvED;;;;;;;;;;;;;;;;AAgBG;AA+BH;;;;;;;AAOG;AACH,SAAS,eAAe,CAAC,IAAwB,EAAA;AAC7C,IAAA,IAAI;AACA,QAAA,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,aAAa,EAAE;AAC1E,QAAA,IAAI,MAAM;AAAE,YAAA,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC;IACnD;AAAE,IAAA,MAAM;;IAER;AACA,IAAA,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,UAAU,EAAE,EAAE,SAAS,CAAC;AACzE;AAEA;AACA,SAAS,aAAa,GAAA;AAClB,IAAA,IAAI;QACA,IAAI,OAAO,MAAM,KAAK,WAAW;AAAE,YAAA,OAAO,IAAI;;;QAG9C,OAAO,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,yBAAyB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC9F;AAAE,IAAA,MAAM;AACJ,QAAA,OAAO,IAAI;IACf;AACJ;MAEa,WAAW,CAAA;;AAEX,IAAA,QAAQ;AACA,IAAA,SAAS;AACT,IAAA,IAAI;AACJ,IAAA,QAAQ;IACR,IAAI,GAAsB,EAAE;AAC5B,IAAA,SAAS,GAAG,IAAI,GAAG,EAA4C;IACxE,MAAM,GAAG,KAAK;AAEtB,IAAA,WAAA,CAAY,IAAwB,EAAA;AAChC,QAAA,IAAI,CAAC,QAAQ,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC;AACxD,QAAA,IAAI,CAAC,SAAS;AACV,YAAA,IAAI,CAAC,SAAS;gBACd,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE;oBAC1C,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,KAAK,EAAE,IAAI,CAAC,KAAK;AACpB,iBAAA,CAAC;AACN,QAAA,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC;;AAGjC,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,KAAI;AAC7C,YAAA,IAAI,OAAO,KAAK,cAAc,EAAE;AAC5B,gBAAA,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS;AAAE,oBAAA,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;YACnD;iBAAO;gBACH,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC;YACrC;QACJ,CAAC,CAAC,CACL;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CACV,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,KAAK,KAC/B,MAAM,KAAK;cACL,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE,aAAa;AAC/C,cAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,CAC1D,CACJ;;;;AAKD,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CACV,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,KAAI;YACxC,IAAI,IAAI,KAAK,OAAO;gBAAE;YACtB,IAAI,CAAC,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC;AAChC,YAAA,IAAK,IAA4C,EAAE,SAAS,EAAE;AAC1D,gBAAA,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC3D;QACJ,CAAC,CAAC,CACL;QAED,IAAI,CAAC,QAAQ,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;AAE7F,QAAA,IAAI,IAAI,CAAC,KAAK,EAAE;AACZ,YAAA,OAAO,CAAC,IAAI,CAAC,uDAAuD,CAAC;AACrE,YAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,KAAK,KAC9B,OAAO,CAAC,IAAI,CAAC,CAAA,gCAAA,EAAmC,KAAK,CAAC,MAAM,CAAA,CAAE,EAAE,eAAe,EAAE,KAAK,CAAC,CAC1F,CACJ;QACL;IACJ;AAEA;;;;AAIG;IACH,KAAK,GAAA;QACD,IAAI,IAAI,CAAC,MAAM;YAAE;AACjB,QAAA,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACzD;AAEA;;;;AAIG;AACH,IAAA,MAAM,CAAC,IAAgB,EAAA;QACnB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,cAAc,CAAC;IAClD;;AAGA,IAAA,QAAQ,CAAC,EAA4C,EAAA;AACjD,QAAA,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1C;;IAGA,SAAS,GAAA;QACL,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM;IACxC;IAEA,KAAK,GAAA;QACD,IAAI,IAAI,CAAC,MAAM;YAAE;AACjB,QAAA,IAAI,CAAC,MAAM,GAAG,IAAI;AAClB,QAAA,IAAI;AAAE,YAAA,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE;AAAE,QAAA,MAAM,2BAA2B;AACzE,QAAA,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI;AAAE,YAAA,GAAG,EAAE;AAClC,QAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;AACtB,QAAA,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;IACrB;AACH;;ACnLD;;;;AAIG;SACa,YAAY,GAAA;AACxB,IAAA,IAAI;AACA,QAAA,OAAO,OAAO,iBAAiB,KAAK,WAAW;IACnD;AAAE,IAAA,MAAM;AACJ,QAAA,OAAO,KAAK;IAChB;AACJ;;ACXA;;;;;;;;;;;;;;AAcG;AAkBH;AACM,MAAO,oBAAqB,SAAQ,KAAK,CAAA;AACtB,IAAA,WAAA;AAArB,IAAA,WAAA,CAAqB,WAAmB,EAAA;AACpC,QAAA,KAAK,CAAC,CAAA,SAAA,EAAY,WAAW,CAAA,kCAAA,CAAoC,CAAC;QADjD,IAAA,CAAA,WAAW,GAAX,WAAW;AAE5B,QAAA,IAAI,CAAC,IAAI,GAAG,sBAAsB;IACtC;AACH;AAED;AACM,MAAO,kBAAmB,SAAQ,KAAK,CAAA;AACpB,IAAA,WAAA;AAArB,IAAA,WAAA,CAAqB,WAAmB,EAAA;AACpC,QAAA,KAAK,CAAC,CAAA,SAAA,EAAY,WAAW,CAAA,iBAAA,CAAmB,CAAC;QADhC,IAAA,CAAA,WAAW,GAAX,WAAW;AAE5B,QAAA,IAAI,CAAC,IAAI,GAAG,oBAAoB;IACpC;AACH;MAyBY,cAAc,CAAA;AAUM,IAAA,IAAA;AATrB,IAAA,UAAU;;AAED,IAAA,UAAU,GAAG,IAAI,GAAG,EAAiB;AACtD;;AAE8E;AAC7D,IAAA,QAAQ,GACrB,CAAA,KAAA,EAAQ,UAAU,CAAC,MAAM,EAAE,UAAU,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;AAE5H,IAAA,WAAA,CAA6B,IAAwB,EAAA;QAAxB,IAAA,CAAA,IAAI,GAAJ,IAAI;AAC7B,QAAA,IAAI,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE;YACvB,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;;YAG9C,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,KAAK,KAAI;gBACnD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAA2C;gBAC5E,IAAI,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC;AACxC,gBAAA,IAAI,CAAC,KAAK;oBAAE,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC3C,gBAAA,MAAM,KAAK,CAAC,OAAO,EAAE;AACrB,gBAAA,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;AAAE,oBAAA,MAAM,IAAI,KAAK,CAAC,SAAS,OAAO,CAAA,yBAAA,CAA2B,CAAC;AACtF,gBAAA,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;AACxB,YAAA,CAAC,CAAC;QACN;IACJ;AAEA;;;AAGG;AACH;;;;;;;;;AASG;AACH,IAAA,MAAM,WAAW,CACb,IAAA,GAAkF,EAAE,EAAA;AAEpF,QAAA,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,QAAQ;AACpD,QAAA,MAAM,QAAQ,GAAG,MAAM,qBAAqB,EAAE;;;;AAI9C,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACrB,CAAA,YAAA,EAAe,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA,SAAA,CAAW,EACzD,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,GAAG,SAAS,GAAG,QAAQ,EAAE,CAC/F;AACD,QAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAC;AAC1D,QAAA,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK;AAAE,YAAA,MAAM,KAAK,CAAC,MAAM,EAAE;AAClD,QAAA,OAAO,KAAK;IAChB;;AAGA,IAAA,MAAM,SAAS,CAAC,OAAe,EAAE,OAA+B,EAAE,EAAA;QAC9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;AAC/C,QAAA,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;AAC/C,QAAA,OAAO,KAAK;IAChB;;AAGA,IAAA,MAAM,GAAG,CAAC,OAAe,EAAE,gBAA+B,QAAQ,EAAA;QAC9D,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC;IAC7C;;;;;;;;AAUA,IAAA,MAAM,YAAY,GAAA;AACd,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjC,mBAAmB,CACtB;AACD,QAAA,OAAO,IAAI,CAAC,QAAQ,IAAI,EAAE;IAC9B;;IAGA,MAAM,cAAc,CAAC,IAAY,EAAA;AAC7B,QAAA,IAAI;AACA,YAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjC,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,CAAA,CAAE,CAClD;AACD,YAAA,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI;QAC/B;QAAE,OAAO,GAAG,EAAE;YACV,IAAI,GAAG,YAAY,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;AAAE,gBAAA,OAAO,IAAI;AAC/D,YAAA,MAAM,GAAG;QACb;IACJ;AAEA;;;;AAIG;AACH,IAAA,MAAM,aAAa,CAAC,IAAY,EAAE,OAA6D,EAAE,EAAA;QAC7F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;;AAE1C,QAAA,IAAI;AACA,YAAA,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,GAAG,SAAS,GAAG,QAAQ,EAAE,CAAC;QAChI;QAAE,OAAO,GAAG,EAAE;YACV,IAAI,GAAG,YAAY,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE;AAChD,gBAAA,MAAM,IAAI,kBAAkB,CAAC,IAAI,CAAC;YACtC;AACA,YAAA,MAAM,GAAG;QACb;;;AAGA,QAAA,IAAI;AACA,YAAA,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAsB,iBAAiB,CAAC;AACnF,YAAA,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO;gBAAE,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,MAAM,CAAC;QACpF;QAAE,OAAO,GAAG,EAAE;AACV,YAAA,OAAO,CAAC,IAAI,CAAC,4DAA4D,EAAE,GAAG,CAAC;QACnF;AACA,QAAA,OAAO,KAAK;IAChB;AAEA;;;AAGG;AACH,IAAA,MAAM,WAAW,CAAC,IAAY,EAAE,OAA+B,EAAE,EAAA;QAC7D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;AAC/C,QAAA,IAAI,CAAC,OAAO;AAAE,YAAA,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC;QAClD,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC;IACxC;;;;;;;AASA;;AAEsE;AACtE,IAAA,MAAM,gBAAgB,CAAC,OAAe,EAAE,OAAmE,EAAE,EAAA;QACzG,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC;IAC1D;;AAGA,IAAA,MAAM,aAAa,CAAC,OAAe,EAAE,QAAgB,EAAE,IAAY,EAAA;AAC/D,QAAA,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC;IAChE;;IAGA,MAAM,OAAO,CAAC,OAAe,EAAA;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC7C;;IAGA,MAAM,eAAe,CAAC,OAAe,EAAA;QACjC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,eAAe,EAAE;IACrD;;AAGA,IAAA,MAAM,gBAAgB,CAAC,OAAe,EAAE,KAAa,EAAA;QACjD,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC;IAC1D;AAEA;;;;AAIG;IACH,MAAM,YAAY,CAAC,OAAe,EAAE,KAAa,EAAE,OAA+B,EAAE,EAAA;AAChF,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE;AAC5B,QAAA,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;QACjE,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC;QAC5G,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC;IACxC;;IAGA,MAAM,MAAM,CAAC,OAAe,EAAA;QACxB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE;IACjD;AAEQ,IAAA,UAAU,CAAC,OAAe,EAAA;QAC9B,OAAO,IAAI,aAAa,CAAC;YACrB,OAAO;AACP,YAAA,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;AACnC,YAAA,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;AAC9B,SAAA,CAAC;IACN;;;;AAMQ,IAAA,MAAM,KAAK,CAAC,OAAe,EAAE,aAA4B,EAAA;AAC7D,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE;AAC5B,QAAA,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AACjE,QAAA,MAAM,SAAS,GAAG,IAAI,aAAa,CAAC;YAChC,OAAO;AACP,YAAA,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;AACnC,YAAA,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;AAC9B,SAAA,CAAC;AACF,QAAA,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC;YAC7B,OAAO;YACP,QAAQ;AACR,YAAA,eAAe,EAAE,OAAO;AACxB,YAAA,gBAAgB,EAAE,QAAQ;AAC1B,YAAA,aAAa,EAAE,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,UAAU,IAAI,IAAI;YACpF,SAAS;AACT,YAAA,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;YACtB,aAAa;AAChB,SAAA,CAAC;AACF,QAAA,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;AACpB,YAAA,IAAI,EAAE,OAAO;AACb,YAAA,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;AAC9B,YAAA,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;AACnC,YAAA,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;AAC3B,YAAA,IAAI,EAAE,MAAM,QAAQ;AACpB,YAAA,WAAW,EAAE,MAAM,IAAI,CAAC,WAAW,EAAE;YACrC,OAAO;YACP,aAAa;YACb,OAAO,EAAE,IAAI,CAAC,UAAU;AACxB,YAAA,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS;AACxC,YAAA,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC;AACxB,kBAAE,CAAC,IAAY,KAAK,IAAI,CAAC,IAAI,CAAC,OAAQ,CAAC,gBAAgB,CAAC,IAAI;AAC5D,kBAAE,SAAS;AAClB,SAAA,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC;;;QAGnC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI,YAAY,EAAE,EAAE;AAC1C,YAAA,KAAK,CAAC,iBAAiB,CACnB,IAAI,WAAW,CAAC;gBACZ,KAAK;AACL,gBAAA,IAAI,EAAE,IAAI,CAAC,QAAQ;AACnB,gBAAA,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa;AAC1C,gBAAA,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU;AACpC,gBAAA,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ;AAChC,gBAAA,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK;AAC7B,aAAA,CAAC,CACL;QACL;AACA,QAAA,OAAO,KAAK;IAChB;;IAGQ,MAAM,cAAc,CAAC,QAAgB,EAAA;AACzC,QAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE;QACpC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;;;;;;YAM7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;AACnC,YAAA,MAAM,OAAO,GAAG,CAAC,MAAK,EAAG,IAAI;AAAE,gBAAA,OAAO,OAAO,QAAQ,KAAK,WAAW,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE;AAAE,YAAA,MAAM;AAAE,gBAAA,OAAO,KAAK;AAAE,YAAA,CAAC,CAAC,CAAC,GAAG;AAClJ,YAAA,IAAI,OAAO;AAAE,gBAAA,OAAO,CAAC,IAAI,CAAC,CAAA,wCAAA,EAA2C,CAAC,CAAC,IAAI,CAAA,OAAA,EAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAA,CAAE,CAAC;YAC5G,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,EAAE;AAC5B,gBAAA,IAAI;AACA,oBAAA,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAEhB,UAAQ,CAAC,IAAI,CAAC,CAAC;gBAC7D;gBAAE,OAAO,CAAC,EAAE;AACR,oBAAA,IAAI,OAAO;AAAE,wBAAA,OAAO,CAAC,IAAI,CAAC,wDAAwD,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC,OAAO,GAAG,CAAC,CAAA,CAAE,CAAC;gBAC3H;YACJ;YACA,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;AAC7B,gBAAA,IAAI,OAAO;AAAE,oBAAA,OAAO,CAAC,IAAI,CAAC,sFAAsF,CAAC;AACjH,gBAAA,MAAM,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC;YAC5C;QACJ;AACA,QAAA,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAE,CAAC,SAAS,CAAC;AAChF,QAAA,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAE,CAAC,SAAS,CAAC;AACtF,QAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE;IAChC;IAEQ,MAAM,WAAW,CAAC,OAAe,EAAA;AACrC,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,aAAa,CAAC;YACjC,OAAO;AACP,YAAA,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;AACnC,YAAA,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;SAC9B,CAAC,CAAC,aAAa,EAAE;AAClB,QAAA,OAAO,IAAI,EAAE,aAAa,IAAI,QAAQ;IAC1C;AAEQ,IAAA,MAAM,WAAW,GAAA;AACrB,QAAA,IAAI;AACA,YAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAqB,gBAAgB,EAAE,EAAE,CAAC;AAC/E,YAAA,OAAO,GAAG,EAAE,MAAM,IAAI,IAAI;QAC9B;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO,IAAI;QACf;IACJ;IAEQ,IAAI,GAAA;QACR,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ;AACrC,QAAA,IAAI,CAAC,EAAE;AAAE,YAAA,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC;AAC5F,QAAA,OAAO,EAAE;IACb;AACH;;ACpXD;;;;;;;;;;;;;;;;;;;;;;;AAuBG;MAmGU,eAAe,CAAA;AACK,IAAA,IAAA;AAA7B,IAAA,WAAA,CAA6B,IAAyB,EAAA;QAAzB,IAAA,CAAA,IAAI,GAAJ,IAAI;IAAwB;;AAGzD,IAAA,MAAM,IAAI,CAAC,KAAa,EAAE,OAAuB,EAAE,EAAA;QAC/C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAA4B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;AAC3F,QAAA,OAAO,GAAG,CAAC,MAAM,IAAI,EAAE;IAC3B;;IAGA,MAAM,GAAG,CAAC,KAAa,EAAE,OAAe,EAAE,OAAuB,EAAE,EAAA;QAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAmB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA,CAAA,EAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1G;;IAGA,MAAM,MAAM,CAAC,KAAa,EAAE,KAAuB,EAAE,OAAuB,EAAE,EAAA;AAC1E,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAmB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3G;;IAGA,MAAM,MAAM,CAAC,KAAa,EAAE,OAAe,EAAE,KAAuB,EAAE,IAAA,GAAuB,EAAE,EAAA;AAC3F,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CACvB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,EACvD,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAClC;IACL;;IAGA,MAAM,MAAM,CAAC,KAAa,EAAE,OAAe,EAAE,OAAuB,EAAE,EAAA;AAClE,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACrB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA,CAAA,EAAI,kBAAkB,CAAC,OAAO,CAAC,CAAA,CAAE,EAAE,EAAE,CAAC,EACvD,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CACxB;IACL;;IAGA,MAAM,MAAM,CAAC,KAAa,EAAE,OAAe,EAAE,OAAe,EAAE,IAAA,GAAuB,EAAE,EAAA;AACnF,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACtB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA,CAAA,EAAI,kBAAkB,CAAC,OAAO,CAAC,CAAA,OAAA,CAAS,EAAE,EAAE,CAAC,EAC9D,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAChD;IACL;;IAGA,MAAM,OAAO,CAAC,KAAa,EAAE,OAAe,EAAE,OAAe,EAAE,IAAA,GAAuB,EAAE,EAAA;AACpF,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACtB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA,CAAA,EAAI,kBAAkB,CAAC,OAAO,CAAC,CAAA,QAAA,CAAU,EAAE,EAAE,CAAC,EAC/D,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAChD;IACL;AAEQ,IAAA,IAAI,CAAC,KAAa,EAAE,MAAc,EAAE,IAAoB,EAAA;QAC5D,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,GAAG,CAAA,OAAA,EAAU,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA,CAAE,GAAG,EAAE;QACtE,OAAO,CAAA,UAAA,EAAa,kBAAkB,CAAC,KAAK,CAAC,UAAU,MAAM,CAAA,EAAG,CAAC,CAAA,CAAE;IACvE;AACH;;ACjLD;;;;;;;;;;;;;;;;;;;;;;;;AAwBG;AAqEH;AACO,MAAM,sBAAsB,GAAG;AAkBtC;AACA,SAAS,SAAS,CAAC,IAAa,EAAA;AAC5B,IAAA,QACI,OAAO,IAAI,KAAK,QAAQ;AACxB,QAAA,IAAI,YAAY,QAAQ;AACxB,QAAA,IAAI,YAAY,IAAI;AACpB,QAAA,IAAI,YAAY,WAAW;AAC3B,QAAA,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;AACxB,QAAA,IAAI,YAAY,eAAe;SAC9B,OAAO,cAAc,KAAK,WAAW,IAAI,IAAI,YAAY,cAAc,CAAC;AAEjF;MAOa,kBAAkB,CAAA;AACE,IAAA,IAAA;AAA7B,IAAA,WAAA,CAA6B,IAA4B,EAAA;QAA5B,IAAA,CAAA,IAAI,GAAJ,IAAI;IAA2B;;AAG5D,IAAA,MAAM,IAAI,CAAC,KAAa,EAAE,OAA0B,EAAE,EAAA;QAClD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAkC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;AACjG,QAAA,OAAO,GAAG,CAAC,SAAS,IAAI,EAAE;IAC9B;;IAGA,MAAM,GAAG,CAAC,KAAa,EAAE,UAAkB,EAAE,OAA0B,EAAE,EAAA;QACrE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAA6B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA,CAAA,EAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACvH;;IAGA,MAAM,IAAI,CAAC,KAAa,EAAE,UAAkB,EAAE,OAA0B,EAAE,EAAA;QACtE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACrB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA,CAAA,EAAI,kBAAkB,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CACpE;IACL;;IAGA,MAAM,MAAM,CAAC,KAAa,EAAE,KAA0B,EAAE,OAA0B,EAAE,EAAA;AAChF,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAA6B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACrH;;IAGA,MAAM,MAAM,CAAC,KAAa,EAAE,UAAkB,EAAE,KAA0B,EAAE,IAAA,GAA0B,EAAE,EAAA;AACpG,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CACvB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,EAC1D,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAClC;IACL;;IAGA,MAAM,MAAM,CAAC,KAAa,EAAE,UAAkB,EAAE,OAA0B,EAAE,EAAA;AACxE,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACrB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA,CAAA,EAAI,kBAAkB,CAAC,UAAU,CAAC,CAAA,CAAE,EAAE,EAAE,CAAC,EAC1D,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CACxB;IACL;;IAGA,MAAM,MAAM,CAAC,KAAa,EAAE,UAAkB,EAAE,OAAe,EAAE,IAAA,GAA0B,EAAE,EAAA;AACzF,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACtB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA,CAAA,EAAI,kBAAkB,CAAC,UAAU,CAAC,CAAA,OAAA,CAAS,EAAE,EAAE,CAAC,EACjE,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAChD;IACL;;IAGA,MAAM,OAAO,CAAC,KAAa,EAAE,UAAkB,EAAE,OAAe,EAAE,IAAA,GAA0B,EAAE,EAAA;AAC1F,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACtB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA,CAAA,EAAI,kBAAkB,CAAC,UAAU,CAAC,CAAA,QAAA,CAAU,EAAE,EAAE,CAAC,EAClE,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAChD;IACL;AAEA;;;;;;;;;;;;;;AAcG;AACH,IAAA,MAAM,MAAM,CACR,MAA+C,EAC/C,OAA8B,EAAE,EAAA;QAEhC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC;QAC9C,IAAI,MAAM,GAAY,IAAI;AAC1B,QAAA,IAAI;AACA,YAAA,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE;QAC7B;AAAE,QAAA,MAAM;;QAER;AACA,QAAA,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;YACT,MAAM,GAAG,GACL,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAK;AAChD,kBAAE,MAAM,CAAE,MAA6B,CAAC,KAAK;kBAC3C,CAAA,EAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,CAAA,CAAE;YAC3C,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;QAChD;AACA,QAAA,OAAO,MAAW;IACtB;;AAGA,IAAA,MAAM,SAAS,CACX,MAA+C,EAC/C,OAA8B,EAAE,EAAA;AAEhC,QAAA,MAAM,IAAI,GAAgB;AACtB,YAAA,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,KAAK,SAAS,GAAG,MAAM,GAAG,KAAK,CAAC;SACpE;QACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;AACzC,QAAA,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE;AACzB,YAAA,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;AACtB,gBAAA,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI;YACzB;iBAAO;gBACH,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;AACrC,gBAAA,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;AAAE,oBAAA,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC;YACrF;QACJ;AACA,QAAA,IAAI,CAAC,OAAO,GAAG,OAAO;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;IACxE;;AAGA,IAAA,SAAS,CAAC,MAA+C,EAAE,IAAI,GAAG,EAAE,EAAA;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,sBAAsB;AAC/D,QAAA,IAAI,IAAY;AAChB,QAAA,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;AAC5B,YAAA,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,CAAA,QAAA,EAAW,MAAM,CAAA,CAAA,EAAI,MAAM,EAAE;QAC/E;aAAO;AACH,YAAA,IAAI,GAAG,CAAA,QAAA,EAAW,MAAM,CAAC,IAAI,CAAA,EAAA,EAAK,MAAM,CAAC,IAAI,CAAA,CAAA,EAAI,MAAM,CAAA,CAAE;QAC7D;AACA,QAAA,IAAI,CAAC,IAAI;AAAE,YAAA,OAAO,IAAI;QACtB,OAAO,CAAA,EAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA,EAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,CAAA,EAAG,IAAI,CAAA,CAAE;IACjF;AAEQ,IAAA,IAAI,CAAC,KAAa,EAAE,MAAc,EAAE,IAAuB,EAAA;QAC/D,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,GAAG,CAAA,OAAA,EAAU,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA,CAAE,GAAG,EAAE;QACtE,OAAO,CAAA,UAAA,EAAa,kBAAkB,CAAC,KAAK,CAAC,aAAa,MAAM,CAAA,EAAG,CAAC,CAAA,CAAE;IAC1E;AACH;;ACtQD;;;;;;;;;;;;;;;;AAgBG;AAiBH;AACO,MAAM,mBAAmB,GAAY;IACxC,SAAS;IACT,UAAU;IACV,SAAS;IACT,UAAU;IACV,cAAc;IACd,eAAe;IACf,eAAe;IACf,gBAAgB;IAChB,kBAAkB;IAClB,UAAU;;MA2CD,qBAAqB,CAAA;AACD,IAAA,IAAA;AAA7B,IAAA,WAAA,CAA6B,IAA+B,EAAA;QAA/B,IAAA,CAAA,IAAI,GAAJ,IAAI;IAA8B;;IAG/D,MAAM,IAAI,CAAC,KAAa,EAAA;QACpB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAgC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACzF,QAAA,OAAO,GAAG,CAAC,MAAM,IAAI,EAAE;IAC3B;;AAGA,IAAA,MAAM,MAAM,CAAC,KAAa,EAAE,KAA6B,EAAA;AACrD,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAqB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC;IAC/E;;AAGA,IAAA,MAAM,MAAM,CAAC,KAAa,EAAE,KAAa,EAAA;QACrC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAuB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAA,CAAE,CAAC,CAAC;IACtG;IAEQ,IAAI,CAAC,KAAa,EAAE,MAAc,EAAA;QACtC,OAAO,CAAA,UAAA,EAAa,kBAAkB,CAAC,KAAK,CAAC,CAAA,cAAA,EAAiB,MAAM,EAAE;IAC1E;AACH;;AC7GD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCG;AAIH;AACO,MAAM,MAAM,GAAG,CAAC,EAAU,KAAa,CAAA,MAAA,EAAS,EAAE,CAAA;AACzD;AACO,MAAM,UAAU,GAAG,CAAC,EAAU,KAAa,CAAA,MAAA,EAAS,EAAE,CAAA;AAE7D;AACO,MAAM,OAAO,GAAG;AACvB;AACO,MAAM,aAAa,GAAG;AA6E7B;AACM,MAAO,cAAe,SAAQ,KAAK,CAAA;AACrC,IAAA,WAAA,GAAA;;;;QAII,KAAK,CAAC,2EAA2E,CAAC;AAClF,QAAA,IAAI,CAAC,IAAI,GAAG,gBAAgB;IAChC;AACH;AAED;AACM,MAAO,gBAAiB,SAAQ,KAAK,CAAA;AACvC,IAAA,WAAA,CAAY,IAAY,EAAA;AACpB,QAAA,KAAK,CAAC,CAAA,KAAA,EAAQ,IAAI,CAAA,eAAA,CAAiB,CAAC;AACpC,QAAA,IAAI,CAAC,IAAI,GAAG,kBAAkB;IAClC;AACH;AAED;AACM,MAAO,gBAAiB,SAAQ,KAAK,CAAA;AACvC,IAAA,WAAA,CAAY,OAAe,EAAA;AACvB,QAAA,KAAK,CAAC,CAAA,KAAA,EAAQ,OAAO,CAAA,CAAE,CAAC;AACxB,QAAA,IAAI,CAAC,IAAI,GAAG,kBAAkB;IAClC;AACH;;ACvJD;;;;;;;;AAQG;AAOH,MAAM,gBAAgB,GAAG,EAAE;AAC3B,MAAM,aAAa,GAAG,EAAE;AAElB,SAAU,QAAQ,CAAC,KAAiB,EAAA;IACtC,IAAI,CAAC,GAAG,EAAE;IACV,KAAK,MAAM,CAAC,IAAI,KAAK;AAAE,QAAA,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;AAClD,IAAA,OAAO,IAAI,CAAC,CAAC,CAAC;AAClB;AAEM,SAAU,UAAU,CAAC,GAAW,EAAA;AAClC,IAAA,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;IACnB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;AACpC,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AAC3D,IAAA,OAAO,GAAG;AACd;AAEA;SACgB,SAAS,GAAA;AACrB,IAAA,OAAO,WAAW,CAAC,aAAa,CAAC;AACrC;AAEA;;;;;;AAMG;SACa,KAAK,GAAA;IACjB,OAAO,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;AACvE;AAEA;AACA;;;;;;AAMG;AACI,eAAe,aAAa,CAAC,IAAgB,EAAE,IAAY,EAAA;AAC9D,IAAA,OAAO,cAAc,CAAC,IAAI,EAAE,CAAA,EAAG,aAAa,CAAA,KAAA,EAAQ,IAAI,CAAA,CAAE,EAAE,aAAa,CAAC;AAC9E;AAEO,eAAe,aAAa,CAAC,IAAgB,EAAA;IAChD,OAAO,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,aAAa,CAAC;AAC7D;AAEO,eAAe,IAAI,CAAC,GAAe,EAAE,KAAc,EAAA;AACtD,IAAA,MAAM,EAAE,GAAG,WAAW,CAAC,gBAAgB,CAAC;AACxC,IAAA,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC;AAClD,IAAA,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE;AACvD;AAEA;;;;;;AAMG;AACI,eAAe,MAAM,CAAI,GAAe,EAAE,MAAe,EAAA;AAC5D,IAAA,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;AAAE,QAAA,OAAO,IAAI;IACtD,MAAM,CAAC,GAAG,MAA+B;AACzC,IAAA,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;AAAE,QAAA,OAAO,IAAI;IACrE,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC9E,IAAA,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAM;AAC/D;;ACnFA;;;;;;;AAOG;AAEH;AACM,SAAU,aAAa,CAAC,KAAa,EAAA;IACvC,MAAM,GAAG,GAAa,EAAE;IACxB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;AACjC,QAAA,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG;YAAE;QACjC,IAAI,IAAI,KAAK,IAAI;YAAE,GAAG,CAAC,GAAG,EAAE;;AACvB,YAAA,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;IACvB;IACA,OAAO,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;AAC9B;AAEA;AACM,SAAU,QAAQ,CAAC,IAAY,EAAA;AACjC,IAAA,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;AACzD;AAEA;;;;;;;;AAQG;AACG,SAAU,WAAW,CAAC,GAAW,EAAE,IAAY,EAAA;AACjD,IAAA,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;AAAE,QAAA,OAAO,aAAa,CAAC,IAAI,CAAC;IACpD,OAAO,aAAa,CAAC,CAAA,EAAG,GAAG,IAAI,IAAI,CAAA,CAAE,CAAC;AAC1C;AAEM,SAAU,OAAO,CAAC,IAAY,EAAA;AAChC,IAAA,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC;IAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;AAC5B,IAAA,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;AACvC;AAEM,SAAU,QAAQ,CAAC,IAAY,EAAA;AACjC,IAAA,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC;AAC7B,IAAA,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC1C;AAEM,SAAU,IAAI,CAAC,GAAG,KAAe,EAAA;IACnC,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzC;AAEA;;;;AAIG;AACG,SAAU,OAAO,CAAC,IAAY,EAAE,GAAW,EAAA;AAC7C,IAAA,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC;AAC7B,IAAA,MAAM,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC;IAC5B,IAAI,CAAC,KAAK,CAAC;AAAE,QAAA,OAAO,KAAK;AACzB,IAAA,OAAO,CAAC,KAAK,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC;AACnD;AAEA;;;;;;AAMG;AACH;AACO,MAAM,cAAc,GAAG,GAAG;AAEjC;;;;;;;;;;;;;;;;AAgBG;AACG,SAAU,UAAU,CAAC,IAAY,EAAA;IACnC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI;AAAE,QAAA,OAAO,KAAK;AACxD,IAAA,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAAE,QAAA,OAAO,KAAK;AAC9E,IAAA,MAAM,eAAe,GAAG,IAAI,MAAM,CAAC,gEAAgE,CAAC;AACpG,IAAA,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;AAAE,QAAA,OAAO,KAAK;AAC5C,IAAA,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,cAAc;AAClE;AAEM,SAAU,eAAe,CAAC,IAAY,EAAA;AACxC,IAAA,IAAI,CAAC,IAAI;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC;AACvD,IAAA,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,CAAA,KAAA,EAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA,qBAAA,CAAuB,CAAC;AAC/F;AAEA;;;;;;;AAOG;AACG,SAAU,cAAc,CAAC,IAAY,EAAA;AACvC,IAAA,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE;IAC/D,QAAQ,GAAG;AACP,QAAA,KAAK,MAAM;AAAE,QAAA,KAAK,KAAK,EAAE,OAAO,0BAA0B;AAC1D,QAAA,KAAK,KAAK,EAAE,OAAO,yBAAyB;AAC5C,QAAA,KAAK,IAAI;AAAE,QAAA,KAAK,KAAK;AAAE,QAAA,KAAK,KAAK,EAAE,OAAO,gCAAgC;AAC1E,QAAA,KAAK,IAAI;AAAE,QAAA,KAAK,KAAK,EAAE,OAAO,gCAAgC;AAC9D,QAAA,KAAK,MAAM,EAAE,OAAO,iCAAiC;AACrD,QAAA,KAAK,IAAI,EAAE,OAAO,8BAA8B;AAChD,QAAA,KAAK,KAAK,EAAE,OAAO,2BAA2B;AAC9C,QAAA,KAAK,KAAK,EAAE,OAAO,eAAe;AAClC,QAAA,KAAK,KAAK,EAAE,OAAO,WAAW;AAC9B,QAAA,KAAK,KAAK;AAAE,QAAA,KAAK,MAAM,EAAE,OAAO,YAAY;AAC5C,QAAA,KAAK,KAAK,EAAE,OAAO,WAAW;AAC9B,QAAA,KAAK,MAAM,EAAE,OAAO,YAAY;AAChC,QAAA,KAAK,MAAM,EAAE,OAAO,YAAY;AAChC,QAAA,KAAK,KAAK,EAAE,OAAO,cAAc;AACjC,QAAA,KAAK,OAAO,EAAE,OAAO,YAAY;AACjC,QAAA,KAAK,MAAM,EAAE,OAAO,WAAW;AAC/B,QAAA,KAAK,MAAM,EAAE,OAAO,kBAAkB;AACtC,QAAA,KAAK,KAAK,EAAE,OAAO,kBAAkB;AACrC,QAAA,SAAS,OAAO,0BAA0B;;AAElD;;ACzIA;;;;;;;AAOG;AAEH;AACM,SAAU,YAAY,CAAC,OAAe,EAAA;IACxC,IAAI,GAAG,GAAG,EAAE;AACZ,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACrC,QAAA,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;AACpB,QAAA,IAAI,CAAC,KAAK,GAAG,EAAE;YACX,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE;;gBAExB,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE;oBACxB,GAAG,IAAI,UAAU;oBACjB,CAAC,IAAI,CAAC;gBACV;qBAAO;oBACH,GAAG,IAAI,IAAI;oBACX,CAAC,IAAI,CAAC;gBACV;YACJ;iBAAO;gBACH,GAAG,IAAI,OAAO;YAClB;QACJ;AAAO,aAAA,IAAI,CAAC,KAAK,GAAG,EAAE;YAClB,GAAG,IAAI,MAAM;QACjB;AAAO,aAAA,IAAI,CAAC,KAAK,GAAG,EAAE;YAClB,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AACrC,YAAA,IAAI,KAAK,KAAK,EAAE,EAAE;gBACd,GAAG,IAAI,KAAK;YAChB;iBAAO;AACH,gBAAA,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;AACnD,gBAAA,GAAG,IAAI,CAAA,GAAA,EAAM,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;gBACjD,CAAC,GAAG,KAAK;YACb;QACJ;aAAO;AACH,YAAA,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC;QAC3B;IACJ;AACA,IAAA,OAAO,IAAI,MAAM,CAAC,IAAI,GAAG,CAAA,CAAA,CAAG,CAAC;AACjC;AAEA,SAAS,aAAa,CAAC,CAAS,EAAA;IAC5B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC;AACnD;;AC/CA;;;;;;;;;;;;;;;;;;AAkBG;AAgFH;;;;;;AAMG;AACH,MAAM,SAAS,GAAG,EAAE;AAEpB;;;;;;AAMG;AACH,MAAM,gBAAgB,GAAG,CAAC;AAE1B;;;;;;AAMG;AACH,eAAe,QAAQ,CAAO,KAAU,EAAE,KAAa,EAAE,EAA2B,EAAA;AAChF,IAAA,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE;IACtE,MAAM,GAAG,GAAG,IAAI,KAAK,CAAI,KAAK,CAAC,MAAM,CAAC;IACtC,IAAI,IAAI,GAAG,CAAC;IACZ,MAAM,OAAO,CAAC,GAAG,CACb,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,YAAW;AAC7D,QAAA,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE;AAAE,YAAA,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,CACL;AACD,IAAA,OAAO,GAAG;AACd;AAEA,MAAM,qBAAqB,GAAG,EAAE;MAEnB,YAAY,CAAA;AAYQ,IAAA,IAAA;IAXrB,OAAO,GAAsB,IAAI;AACzC;;;;;;AAMG;AACK,IAAA,KAAK,GAAG,IAAI,GAAG,EAA4B;AAClC,IAAA,YAAY;AAE7B,IAAA,WAAA,CAA6B,IAAsB,EAAA;QAAtB,IAAA,CAAA,IAAI,GAAJ,IAAI;QAC7B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,qBAAqB;IAClE;AAEA;;;;;;AAMG;IACK,IAAI,GAAG,GAAG;;AAGlB,IAAA,IAAI,GAAG,GAAA;QACH,OAAO,IAAI,CAAC,IAAI;IACpB;AAEA;;;;;;AAMG;IACH,MAAM,EAAE,CAAC,IAAY,EAAA;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AACjC,QAAA,IAAI,MAAM,KAAK,GAAG,EAAE;YAChB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;AACrC,YAAA,IAAI,CAAC,KAAK;AAAE,gBAAA,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC;AAC9C,YAAA,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK;AAAE,gBAAA,MAAM,IAAI,gBAAgB,CAAC,GAAG,MAAM,CAAA,mBAAA,CAAqB,CAAC;QAC9F;AACA,QAAA,IAAI,CAAC,IAAI,GAAG,MAAM;AAClB,QAAA,OAAO,MAAM;IACjB;;AAGA,IAAA,OAAO,CAAC,IAAY,EAAA;QAChB,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;IACvC;;AAGA,IAAA,IAAI,QAAQ,GAAA;QACR,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI;IACpC;AAEA;;;;;;AAMG;IACH,UAAU,GAAA;AACN,QAAA,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;AAClB,QAAA,IAAI,CAAC,OAAO,GAAG,IAAI;AACnB,QAAA,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IACpB;AAEA;;;;;;;;;;;;;;AAcG;AACH,IAAA,KAAK,CAAC,OAAmB,EAAA;AACrB,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS;AAAE,YAAA,OAAO,MAAK,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,KAAI;AAC/B,YAAA,IAAI,KAAoC;AACxC,YAAA,IAAI;AACA,gBAAA,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAI,GAAoB;YAC7E;AAAE,YAAA,MAAM;gBACJ;YACJ;YACA,IAAI,KAAK,EAAE,EAAE,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;gBAAE;YAC7D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;AAAE,gBAAA,OAAO;;;;;;;;YAS1C,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI;AACnF,YAAA,IAAI,EAAE;AAAE,gBAAA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;;AACxB,gBAAA,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;AACxB,YAAA,OAAO,EAAE;AACb,QAAA,CAAC,CAAC;IACN;;IAIA,MAAM,MAAM,CAAC,IAAY,EAAA;QACrB,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI;IAC3C;IAEA,MAAM,IAAI,CAAC,IAAY,EAAA;QACnB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACnC,QAAA,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC1D,QAAA,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC;IAC9D;;AAGA,IAAA,MAAM,IAAI,CAAC,IAAI,GAAG,GAAG,EAAA;QACjB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAC/B,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO;;;;;;;;;AASjC,aAAA,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAI;YACf,IAAI,UAAU,CAAC,IAAI,CAAC;AAAE,gBAAA,OAAO,IAAI;AACjC,YAAA,IAAI,CAAC,IAAI,CAAC,2CAA2C,IAAI,CAAA,CAAE,CAAC;AAC5D,YAAA,OAAO,KAAK;AAChB,QAAA,CAAC;aACA,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC;aAC5D,IAAI,CAAC,cAAc,CAAC;IAC7B;AAEQ,IAAA,IAAI,CAAC,OAAe,EAAA;;;;AAIxB,QAAA,OAAO,CAAC,IAAI,CAAC,gBAAgB,OAAO,CAAA,CAAE,CAAC;IAC3C;AAEA;;;;;AAKG;AACH,IAAA,MAAM,IAAI,CAAC,IAAI,GAAG,GAAG,EAAA;AACjB;;;;;;;;;;;;;AAaG;AACH,QAAA,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU;QAE9B,MAAM,KAAK,GAAG,OAAO,OAAe,EAAE,KAAa,KAAuB;AACtE,YAAA,IAAI,KAAK,GAAG,SAAS,EAAE;gBACnB,IAAI,CAAC,IAAI,CAAC,CAAA,YAAA,EAAe,OAAO,CAAA,cAAA,EAAiB,SAAS,CAAA,OAAA,CAAS,CAAC;AACpE,gBAAA,OAAO,EAAE;YACb;;;;;AAKA,YAAA,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;AACnB,gBAAA,IAAI,CAAC,IAAI,CAAC,eAAe,OAAO,CAAA,6CAAA,CAA+C,CAAC;AAChF,gBAAA,OAAO,EAAE;YACb;AACA,YAAA,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAEjB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;AACxC,YAAA,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,KAAK,KACjE,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CACrE;AACD,YAAA,OAAO,MAAM,CAAC,IAAI,EAAE;AACxB,QAAA,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvC;IAEA,MAAM,QAAQ,CAAC,IAAY,EAAA;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;AACzC,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;IACjD;IAEA,MAAM,QAAQ,CAAC,IAAY,EAAA;AACvB,QAAA,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9D;AAEA;;;;;AAKG;IACH,MAAM,YAAY,CAAC,IAAY,EAAA;QAC3B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;AACzC,QAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;IACzD;AAEA;;;;;;AAMG;IACH,MAAM,cAAc,CAAC,QAAsB,EAAA;QACvC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC3C;AAEA;;;;;;;AAOG;IACH,MAAM,cAAc,CAAC,QAAsB,EAAA;QACvC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC5C;AAEA;;;;;;;AAOG;AACH,IAAA,MAAM,aAAa,CAAC,IAAY,EAAE,QAAsB,EAAE,IAAY,EAAA;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AACjC,QAAA,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC7B,eAAe,CAAC,IAAI,CAAC;AACrB,QAAA,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAEtD,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AACvC,QAAA,IAAI,KAAK,EAAE,IAAI,KAAK,KAAK;AAAE,YAAA,MAAM,IAAI,gBAAgB,CAAC,GAAG,MAAM,CAAA,eAAA,CAAiB,CAAC;QAEjF,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;AACxC,QAAA,MAAM,KAAK,GAAc;AACrB,YAAA,IAAI,EAAE,MAAM;AACZ,YAAA,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,KAAK,EAAE;YACxB,QAAQ;YACR,IAAI;AACJ,YAAA,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE;AACjB,YAAA,QAAQ,EAAE,KAAK,EAAE,QAAQ,IAAI,CAAC;SACjC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,KAAI;AAC/B,YAAA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK;AAC9B,QAAA,CAAC,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;IACtC;;AAIA;;;AAGG;AACH,IAAA,MAAM,KAAK,CAAC,IAAY,EAAE,OAAgC,EAAE,EAAA;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE;AACpB,QAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;QAE9B,IAAI,OAAO,GAAG,GAAG;AACjB,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACnC,YAAA,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC;YACrB,MAAM,MAAM,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;YACrC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC;AAChC,YAAA,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAEjE,IAAI,QAAQ,EAAE;AACV,gBAAA,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM;AAAE,oBAAA,MAAM,IAAI,gBAAgB,CAAC,GAAG,IAAI,CAAA,UAAA,CAAY,CAAC;AAC7E,gBAAA,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS;AAAE,oBAAA,MAAM,IAAI,gBAAgB,CAAC,GAAG,IAAI,CAAA,eAAA,CAAiB,CAAC;YACvF;iBAAO;AACH,gBAAA,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS;AAAE,oBAAA,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC;gBACnE,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC;YACvC;YACA,OAAO,GAAG,IAAI;QAClB;IACJ;AAEA;;;;;;AAMG;IACH,MAAM,SAAS,CACX,IAAY,EACZ,IAAgC,EAChC,OAA0B,EAAE,EAAA;QAE5B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AACjC,QAAA,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC7B,eAAe,CAAC,IAAI,CAAC;AACrB,QAAA,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;AAClC,QAAA,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAEjD,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI;AAC9E,QAAA,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE;YAC5D,IAAI;YACJ,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC;AAC1C,SAAA,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AACvC,QAAA,IAAI,KAAK,EAAE,IAAI,KAAK,KAAK;AAAE,YAAA,MAAM,IAAI,gBAAgB,CAAC,GAAG,MAAM,CAAA,eAAA,CAAiB,CAAC;QAEjF,MAAM,EAAE,GAAG,KAAK,EAAE,EAAE,IAAI,KAAK,EAAE;AAC/B,QAAA,IAAI,QAAQ,GAAG,KAAK,EAAE,QAAQ,IAAI,CAAC;AACnC,QAAA,IAAI,KAAK;AAAE,YAAA,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,EAAE,KAAkB,CAAC;QAE5E,MAAM,KAAK,GAAc,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE;QAC1F,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,KAAI;AAC/B,YAAA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK;AAC9B,QAAA,CAAC,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;IACtC;AAEA;;;;;;;AAOG;AACH,IAAA,MAAM,MAAM,CAAC,IAAY,EAAE,OAAuD,EAAE,EAAA;QAChF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;AAAE,YAAA,MAAM,IAAI,gBAAgB,CAAC,sCAAsC,CAAC;AACtF,QAAA,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC;AAC7B,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AACvC,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC;AAE9C,QAAA,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE;AACtB,YAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACrE,YAAA,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;AAC1D,YAAA,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS;AAAE,gBAAA,MAAM,IAAI,gBAAgB,CAAC,GAAG,MAAM,CAAA,aAAA,CAAe,CAAC;AACnF,YAAA,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAC3B;AAAO,aAAA,IAAI,IAAI,CAAC,WAAW,EAAE;YACzB,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAK,EAAE,CAAC,CAAC;QACtE;aAAO;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC;QACzC;QAEA,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,KAAI;AAC/B,YAAA,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AAC7B,QAAA,CAAC,CAAC;IACN;AAEA;;;;;;;AAOG;AACH,IAAA,MAAM,MAAM,CAAC,IAAY,EAAE,EAAU,EAAA;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,IAAI,GAAG,KAAK,GAAG;YAAE;QACjB,IAAI,GAAG,KAAK,GAAG;AAAE,YAAA,MAAM,IAAI,gBAAgB,CAAC,oCAAoC,CAAC;AACjF,QAAA,IAAI,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC;AAAE,YAAA,MAAM,IAAI,gBAAgB,CAAC,eAAe,GAAG,CAAA,YAAA,CAAc,CAAC;AAEnF,QAAA,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC;QAC7B,eAAe,CAAC,OAAO,CAAC;AAExB,QAAA,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAClD,QAAA,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACnD,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,MAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC;AAE3C,QAAA,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACnD,QAAA,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAClD,QAAA,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAAE,YAAA,MAAM,IAAI,gBAAgB,CAAC,GAAG,GAAG,CAAA,eAAA,CAAiB,CAAC;;;;AAKxF,QAAA,MAAM,KAAK,GAAU,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;QACpD,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,IAAI,KAAI;AAClC,YAAA,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,KAAK;AACjC,QAAA,CAAC,CAAC;;AAGF,QAAA,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,IAAI,KAAI;YACnC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACtC,QAAA,CAAC,CAAC;IACN;AAEA;;;;;;;;;;;AAWG;AACH,IAAA,MAAM,IAAI,CAAC,IAAY,EAAE,EAAU,EAAA;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,IAAI,GAAG,KAAK,GAAG;AAAE,YAAA,MAAM,IAAI,gBAAgB,CAAC,qCAAqC,CAAC;QAClF,IAAI,GAAG,KAAK,GAAG;AAAE,YAAA,MAAM,IAAI,gBAAgB,CAAC,GAAG,GAAG,CAAA,eAAA,CAAiB,CAAC;AACpE,QAAA,IAAI,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC;AAAE,YAAA,MAAM,IAAI,gBAAgB,CAAC,eAAe,GAAG,CAAA,YAAA,CAAc,CAAC;QAEnF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AAClC,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,MAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC;AAE3C,QAAA,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC;QAC7B,eAAe,CAAC,OAAO,CAAC;AACxB,QAAA,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACnD,QAAA,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAClD,QAAA,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAAE,YAAA,MAAM,IAAI,gBAAgB,CAAC,GAAG,GAAG,CAAA,eAAA,CAAiB,CAAC;QAExF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;QACjD,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,IAAI,KAAI;AAClC,YAAA,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,MAAM;AAClC,QAAA,CAAC,CAAC;QACF,OAAO,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;IACvC;AAEA;;;;;;;AAOG;AACH,IAAA,MAAM,IAAI,CAAC,OAAe,EAAE,OAA0B,EAAE,EAAA;QACpD,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AAC9C,QAAA,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E;AAEA;;;;;;;;;;;;AAYG;AACH,IAAA,MAAM,KAAK,CAAC,IAAA,GAA4B,EAAE,EAAA;AACtC,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE;AAC9B,QAAA,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU;AACnC,QAAA,MAAM,KAAK,GAAG,OAAO,GAAY,KAAmB;;;;;YAKhD,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAAE;YACnC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC7B,YAAA,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;AACjD,gBAAA,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE;AACtB,oBAAA,MAAM,KAAK,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxE;qBAAO;oBACH,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACvC;YACJ;AACJ,QAAA,CAAC;AACD,QAAA,MAAM,KAAK,CAAC,IAAI,CAAC;;;;AAKjB,QAAA,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjF,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;;;;AAKrD,QAAA,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAC7D,IAAI,SAAS,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;AAC5C,YAAA,MAAM,IAAI,gBAAgB,CACtB,qBAAqB,OAAO,CAAC,MAAM,CAAA,gCAAA,CAAkC;AACjE,gBAAA,2GAA2G,CAClH;QACL;QAEA,KAAK,MAAM,GAAG,IAAI,OAAO;AAAE,YAAA,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAK,EAAE,CAAC,CAAC;AAC5E,QAAA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;IAC/B;;;IAKA,MAAM,OAAO,CAAC,IAAY,EAAA;QACtB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;QAClF,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE;AAEA;;;;;AAKG;AACH,IAAA,MAAM,OAAO,CAAC,IAAY,EAAE,KAAK,GAAG,CAAC,EAAA;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AACjC,QAAA,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC;AAC7B,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AACvC,QAAA,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;AAAE,YAAA,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC;AAEvE,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;AACtC,QAAA,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,gBAAgB,CAAC,CAAA,EAAG,MAAM,CAAA,SAAA,EAAY,KAAK,CAAA,CAAE,CAAC;AAEtE,QAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC;AAChE,QAAA,MAAM,QAAQ,GAAc;AACxB,YAAA,IAAI,EAAE,MAAM;YACZ,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;AAClB,YAAA,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE;YACjB,QAAQ;SACX;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,KAAI;AAC/B,YAAA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ;AACjC,QAAA,CAAC,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;IACzC;;IAIQ,MAAM,UAAU,CAAC,IAAY,EAAA;QACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACnC,QAAA,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC1D,QAAA,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM;AAAE,YAAA,MAAM,IAAI,gBAAgB,CAAC,CAAA,EAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA,eAAA,CAAiB,CAAC;QACnG,OAAO,KAAK,CAAC,KAAK;IACtB;;IAGQ,MAAM,IAAI,CAAC,IAAY,EAAA;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;AAAE,YAAA,OAAO,IAAI;AAC/B,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AACxD,QAAA,IAAI,CAAC,MAAM;AAAE,YAAA,OAAO,IAAI;AACxB,QAAA,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AACvC,QAAA,OAAO,KAAK,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI;IACzC;AAEQ,IAAA,MAAM,IAAI,GAAA;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;AAC7B,QAAA,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,cAAc,EAAE;QACrC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC;QAC3D,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC;IAClD;;IAGQ,MAAM,OAAO,CAAC,IAAY,EAAA;QAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;AAC1C,QAAA,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACxD,QAAA,OAAO,GAAG;IACd;IAEQ,MAAM,aAAa,CAAC,IAAY,EAAA;AACpC,QAAA,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE;AAC3B,QAAA,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE;YAC7C,MAAM,KAAK,GAAsB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AACvD,YAAA,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;AAAE,gBAAA,OAAO,IAAI;AAC/C,YAAA,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjE;AACA,QAAA,OAAO,GAAG;IACd;IAEQ,WAAW,CAAC,EAAU,EAAE,GAAe,EAAA;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;AAC9B,QAAA,IAAI,GAAG;AAAE,YAAA,OAAO,GAAG;;;;;;;;AASnB,QAAA,MAAM,OAAO,GAAG,CAAC,YAAW;AACxB,YAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;;;;;AAKjD,YAAA,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAU,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;AAC1F,YAAA,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAoB;QAC9C,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,KAAI;;;YAGf,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,OAAO;AAAE,gBAAA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;AACzD,YAAA,MAAM,GAAG;AACb,QAAA,CAAC,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC;AAC3B,QAAA,OAAO,OAAO;IAClB;;AAGQ,IAAA,MAAM,MAAM,CAAC,GAAY,EAAE,IAA6B,EAAA;AAC5D,QAAA,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;QAC3B,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;AACxE,QAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD;AAEQ,IAAA,MAAM,SAAS,CAAC,UAAkB,EAAE,IAAY,EAAA;QACpD,eAAe,CAAC,IAAI,CAAC;QACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;QAC7C,MAAM,KAAK,GAAa,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;QACnG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,KAAI;AAC/B,YAAA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK;AAC9B,QAAA,CAAC,CAAC;IACN;;IAGQ,MAAM,KAAK,CAAC,GAAY,EAAE,IAAA,GAAO,IAAI,GAAG,EAAU,EAAA;;;;AAItD,QAAA,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE;AACtB,QAAA,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;AAChB,QAAA,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;AACjD,YAAA,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE;gBACtB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC;YACnF;iBAAO;gBACH,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC;YACtC;QACJ;QACA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAK,EAAE,CAAC,CAAC;IAChE;AAEA;;;;AAIG;IACK,MAAM,UAAU,CAAC,KAAY,EAAE,IAAA,GAAO,IAAI,GAAG,EAAU,EAAA;AAC3D,QAAA,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE;;;AAGvB,YAAA,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;AAC9C,YAAA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;QACpH;;;;;AAKA,QAAA,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS,EAAE;AAC7C,YAAA,MAAM,IAAI,gBAAgB,CAAC,yDAAyD,CAAC;QACzF;AACA,QAAA,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;AAClB,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtE,MAAM,KAAK,GAAa,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;AACnG,QAAA,MAAM,IAAI,GAAY,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;AAC9D,QAAA,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;;;AAG7D,YAAA,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;AACnB,gBAAA,IAAI,CAAC,IAAI,CAAC,CAAA,kDAAA,CAAoD,CAAC;gBAC/D;YACJ;AACA,YAAA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC;QAC3D;QACA,MAAM,IAAI,GAAY,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QACxE,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACtE,QAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9C,QAAA,OAAO,KAAK;IAChB;AAEA;;;AAGG;AACK,IAAA,MAAM,WAAW,CAAC,MAAe,EAAE,KAAgB,EAAA;AACvD,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAoB,CAAA,CAAC;QAC9G,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7E,KAAK,MAAM,QAAQ,IAAI,SAAS;AAAE,YAAA,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,MAAK,EAAE,CAAC,CAAC;QAC3F,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAK,EAAE,CAAC,CAAC;IACtE;AAEQ,IAAA,MAAM,WAAW,CAAC,MAAe,EAAE,MAAc,EAAA;AACrD,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACzD,OAAO,CAAC,MAAM,MAAM,CAAgB,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;IACnF;;AAGQ,IAAA,MAAM,WAAW,CAAC,MAAe,EAAE,MAAc,EAAE,KAAgB,EAAA;QACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;QACrD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;;;;AAI3F,QAAA,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC;AACxD,QAAA,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC;;;QAG7D,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,MAAK,EAAE,CAAC,CAAC;QACpF,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7E,QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM;IACjC;AACH;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,IAAY,EAAE,KAAY,EAAA;IACpD,OAAO;QACH,IAAI;QACJ,IAAI;QACJ,IAAI,EAAE,KAAK,CAAC,IAAI;AAChB,QAAA,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC;QAC5C,KAAK,EAAE,KAAK,CAAC,KAAK;AAClB,QAAA,QAAQ,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC;KAC9D;AACL;AAEA;AACA,SAAS,cAAc,CAAC,CAAU,EAAE,CAAU,EAAA;AAC1C,IAAA,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;AAAE,QAAA,OAAO,CAAC,CAAC,IAAI,KAAK,KAAK,GAAG,EAAE,GAAG,CAAC;IACvD,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC;;AC73BA;;;;;;;AAOG;AAEH;AACM,SAAU,SAAS,CAAC,KAAc,EAAA;AACpC,IAAA,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM;AACvF,IAAA,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;AAAE,QAAA,OAAO,CAAA,CAAA,EAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;AACtE,IAAA,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC;AAC1D,SAAA,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,SAAS;AACjC,SAAA,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,IAAA,OAAO,CAAA,CAAA,EAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA,CAAA,EAAI,SAAS,CAAC,CAAC,CAAC,CAAA,CAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;AAC3F;AAEA;AACO,eAAe,UAAU,CAAC,KAAc,EAAA;AAC3C,IAAA,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACxD,IAAA,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAqB,CAAC;AAC3E,IAAA,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3F;;ACxBA;;;;;;;;AAQG;AAcH;;;;;;AAMG;AACH,SAAS,GAAG,CAAC,CAAW,EAAE,CAAW,EAAA;AACjC,IAAA,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM;AAClB,IAAA,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM;AAClB,IAAA,MAAM,KAAK,GAAe,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACvF,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE;AAC7B,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE;YAC7B,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtG;IACJ;IACA,MAAM,KAAK,GAA4B,EAAE;IACzC,IAAI,CAAC,GAAG,CAAC;IACT,IAAI,CAAC,GAAG,CAAC;IACT,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACnB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;YACf,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAClB,YAAA,CAAC,EAAE;AACH,YAAA,CAAC,EAAE;QACP;AAAO,aAAA,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAAE,YAAA,CAAC,EAAE;;AAC7C,YAAA,CAAC,EAAE;IACZ;AACA,IAAA,OAAO,KAAK;AAChB;AAEA;;;;;;AAMG;AACH,SAAS,aAAa,CAAC,IAAc,EAAE,IAAc,EAAE,MAAgB,EAAA;AACnE,IAAA,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACzC,IAAA,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAoC,EAAE;AACnD,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3B,QAAA,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACnE;AACA,IAAA,OAAO,OAAO;AAClB;AAEA,MAAM,IAAI,GAAG,CAAC,CAAW,EAAE,CAAW,KAAc,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAE1G;;;;;;AAMG;SACa,MAAM,CAAC,IAAc,EAAE,IAAc,EAAE,MAAgB,EAAA;IACnE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC;IACjD,MAAM,GAAG,GAAa,EAAE;IACxB,MAAM,SAAS,GAA0B,EAAE;IAE3C,IAAI,CAAC,GAAG,CAAC;IACT,IAAI,CAAC,GAAG,CAAC;IACT,IAAI,CAAC,GAAG,CAAC;IAET,MAAM,MAAM,GAAG,CAAC,QAAkB,EAAE,UAAoB,EAAE,SAAmB,KAAU;AACnF,QAAA,IAAI,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE;YAC5B,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC1B;AAAO,aAAA,IAAI,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;YAClC,GAAG,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;QAC5B;AAAO,aAAA,IAAI,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE;YACpC,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC1B;aAAO;YACH,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAC5E,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC1B;AACJ,IAAA,CAAC;IAED,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,EAAE;AAChC,QAAA,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClB,QAAA,CAAC,GAAG,EAAE,GAAG,CAAC;AACV,QAAA,CAAC,GAAG,EAAE,GAAG,CAAC;AACV,QAAA,CAAC,GAAG,EAAE,GAAG,CAAC;IACd;IACA,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAErD,IAAA,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE;AACpC;AAEA;;;;;AAKG;SACa,UAAU,CACtB,IAAY,EACZ,IAAY,EACZ,MAAc,EACd,MAAA,GAA2C,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAA;IAE7E,MAAM,KAAK,GAAG,CAAC,CAAS,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC5D,IAAA,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;AACtE,IAAA,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;AACrB,IAAA,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;AACrB,IAAA,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IAEvB,MAAM,GAAG,GAAa,EAAE;IACxB,IAAI,UAAU,GAAG,KAAK;IACtB,IAAI,CAAC,GAAG,CAAC;IACT,IAAI,CAAC,GAAG,CAAC;IACT,IAAI,CAAC,GAAG,CAAC;IAET,MAAM,MAAM,GAAG,CAAC,QAAkB,EAAE,UAAoB,EAAE,SAAmB,KAAU;AACnF,QAAA,IAAI,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC;AAAE,YAAA,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;AAChD,aAAA,IAAI,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC;AAAE,YAAA,GAAG,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC;AACtD,aAAA,IAAI,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC;AAAE,YAAA,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;aACtD;YACD,UAAU,GAAG,IAAI;YACjB,GAAG,CAAC,IAAI,CAAC,CAAA,QAAA,EAAW,MAAM,CAAC,IAAI,CAAA,CAAE,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,GAAG,UAAU,EAAE,CAAA,QAAA,EAAW,MAAM,CAAC,MAAM,CAAA,CAAE,CAAC;QACzG;AACJ,IAAA,CAAC;IAED,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,EAAE;AAChC,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACf,QAAA,CAAC,GAAG,EAAE,GAAG,CAAC;AACV,QAAA,CAAC,GAAG,EAAE,GAAG,CAAC;AACV,QAAA,CAAC,GAAG,EAAE,GAAG,CAAC;IACd;IACA,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAE1C,IAAA,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE;AAC/C;;AC5EA;AACO,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,IAAY,KAAa,CAAA,IAAA,EAAO,IAAI,CAAA,KAAA,EAAQ,IAAI;AACjF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,IAAY,KAAa,CAAA,IAAA,EAAO,IAAI,CAAA,MAAA,EAAS,IAAI;AAC/E,MAAM,OAAO,GAAG,CAAC,IAAY,KAAa,CAAA,IAAA,EAAO,IAAI,CAAA,KAAA;AACrD,MAAM,YAAY,GAAG,CAAC,IAAY,KAAa,CAAA,IAAA,EAAO,IAAI,CAAA,KAAA;AACjE;AACO,MAAM,QAAQ,GAAG,CAAC,IAAY,KAAa,CAAA,IAAA,EAAO,IAAI,CAAA,MAAA;AAEtD,MAAM,cAAc,GAAG;AAExB,MAAO,QAAS,SAAQ,KAAK,CAAA;AAC/B,IAAA,WAAA,CAAY,OAAe,EAAA;QACvB,KAAK,CAAC,OAAO,CAAC;AACd,QAAA,IAAI,CAAC,IAAI,GAAG,UAAU;IAC1B;AACH;;ACzDD;AACA;;;;;;AAMG;AACH,MAAM,WAAW,GAAG,qEAAqE;AAEzF;;;;;;AAMG;AACH,SAAS,YAAY,CAAC,KAAiB,EAAA;AACnC,IAAA,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AAAE,QAAA,OAAO,KAAK;AACnC,IAAA,IAAI;AACA,QAAA,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;AACvD,QAAA,OAAO,IAAI;IACf;AAAE,IAAA,MAAM;AACJ,QAAA,OAAO,KAAK;IAChB;AACJ;AAEA;AACA,SAAS,YAAY,CAAC,MAA6B,EAAE,KAA4B,EAAA;IAC7E,MAAM,OAAO,GAAa,EAAE;IAC5B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE;QAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;AAC5B,QAAA,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;aAC1C,IAAI,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC5F;AACA,IAAA,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE;AAAE,QAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC/F,IAAA,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAC7D;MAEa,IAAI,CAAA;AAEQ,IAAA,IAAA;AACA,IAAA,IAAA;IAFrB,WAAA,CACqB,IAAY,EACZ,IAAsB,EAAA;QADtB,IAAA,CAAA,IAAI,GAAJ,IAAI;QACJ,IAAA,CAAA,IAAI,GAAJ,IAAI;IACtB;AAEH,IAAA,IAAY,IAAI,GAAA;AACZ,QAAA,OAAO,CAAA,MAAA,EAAS,IAAI,CAAC,IAAI,EAAE;IAC/B;;;IAKQ,MAAM,GAAG,CAAC,KAAc,EAAA;AAC5B,QAAA,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC;;;;QAIpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACtE,QAAA,IAAI,QAAQ;AAAE,YAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;AAC7C,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;AAC/F,QAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IAClC;IAEQ,MAAM,GAAG,CAAI,IAAY,EAAA;QAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,GAAG,GAAG,MAAM,MAAM,CAAI,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,GAAG,IAAI;AACtE,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,MAAM,IAAI,QAAQ,CAAC,CAAA,OAAA,EAAU,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA,gCAAA,CAAkC,CAAC;AAC5F,QAAA,OAAO,KAAK;IAChB;;AAIQ,IAAA,MAAM,IAAI,GAAA;AACd,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,GAAG,GAAG,MAAM,MAAM,CAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,GAAG,IAAI;AACzE,QAAA,OAAO,KAAK,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE;IAC9C;IAEQ,MAAM,OAAO,CAAC,IAAU,EAAA;AAC5B,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1F;IAEQ,MAAM,OAAO,CAAC,IAAY,EAAA;QAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC9D,QAAA,OAAO,GAAG,GAAG,MAAM,MAAM,CAAqB,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI;IACnH;AAEQ,IAAA,MAAM,QAAQ,CAAC,IAAY,EAAE,MAAc,EAAA;AAC/C,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;;;QAGjG,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;AAC5C,QAAA,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;AACf,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CACrB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EACvB,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAClE;IACL;;AAGA,IAAA,MAAM,QAAQ,GAAA;AACV,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,GAAG,GAAG,MAAM,MAAM,CAAsB,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,GAAG,IAAI;AACxF,QAAA,OAAO,KAAK,EAAE,KAAK,IAAI,EAAE;IAC7B;;AAGA,IAAA,MAAM,OAAO,GAAA;AACT,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE;QAC9B,OAAO,UAAU,IAAI,IAAI,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;IACzE;;AAIA;;;;;;AAMG;AACH,IAAA,MAAM,MAAM,CAAC,OAAe,EAAE,OAAkB,EAAA;AAC5C,QAAA,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;AAAE,YAAA,MAAM,IAAI,QAAQ,CAAC,0BAA0B,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;AAC5C,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;;;;;AAMnC,QAAA,MAAM,OAAO,GAAG,OAAO,GAAG,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE;AAC1D,QAAA,MAAM,QAAQ,GAAG,OAAO,KAAK,OAAO,GAAG,CAAC,MAAO,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAE1F,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,IAAI,MAAM,EAAE;YAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAS,MAAM,CAAC;;;AAG/C,YAAA,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;AAAE,gBAAA,MAAM,IAAI,QAAQ,CAAC,8CAA8C,CAAC;QAClG;AAEA,QAAA,MAAM,MAAM,GAAW;AACnB,YAAA,CAAC,EAAE,CAAC;YACJ,IAAI;AACJ,YAAA,OAAO,EAAE,QAAQ;AACjB,YAAA,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;AACvB,YAAA,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;AAC1B,YAAA,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;SACjB;QACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;AACvC,QAAA,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AACxB,QAAA,IAAI,OAAO;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAK,EAAE,CAAC,CAAC;AAC9E,QAAA,OAAO,IAAI;IACf;;IAGQ,MAAM,OAAO,CAAC,IAAY,EAAA;AAC9B,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE;QAC9B,IAAI,UAAU,IAAI,IAAI;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;YACzD,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;IAC/C;;AAGA,IAAA,MAAM,YAAY,GAAA;AACd,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,OAAO,GAAG,GAAG,MAAM,MAAM,CAAmC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,GAAG,IAAI;IAClG;;IAGQ,MAAM,SAAS,CAAC,IAAY,EAAA;QAChC,MAAM,OAAO,GAA8B,EAAE;AAC7C,QAAA,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;AAChD,YAAA,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE;gBACtB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;YAClF;iBAAO;AACH,gBAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;gBACzD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;YACrF;QACJ;AACA,QAAA,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAiB,CAAC;;;;;;;;;;QAW1E,IAAI,OAAO,EAAE;YACT,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;AACxC,gBAAA,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;AAAE,oBAAA,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC;YACjF;QACJ;AACA,QAAA,OAAO,IAAI;IACf;;;AAKA,IAAA,MAAM,GAAG,CAAC,KAAK,GAAG,EAAE,EAAA;AAChB,QAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;AAClC,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,OAAO,EAAE;QAErB,MAAM,GAAG,GAAe,EAAE;AAC1B,QAAA,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU;;;AAG9B,QAAA,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC;QACrB,OAAO,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,KAAK,EAAE;AACvC,YAAA,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAG;AAC3B,YAAA,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE;AACpB,YAAA,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YACd,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAS,IAAI,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC;gBACL,IAAI;gBACJ,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,OAAO,EAAE,MAAM,CAAC,OAAO;AAC1B,aAAA,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QACjC;AACA,QAAA,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;IAC1C;;AAIA;;;;;;AAMG;AACH,IAAA,MAAM,IAAI,CAAC,QAAuB,EAAE,MAAc,EAAA;QAC9C,MAAM,IAAI,GAAG,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAS,QAAQ,CAAC,EAAE,IAAI,GAAG,IAAI;AACtE,QAAA,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAS,MAAM,CAAC,EAAE,IAAI;QAChD,MAAM,OAAO,GAAa,EAAE;AAC5B,QAAA,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC;AAC3C,QAAA,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7D;IAEQ,MAAM,SAAS,CACnB,QAAuB,EACvB,MAAqB,EACrB,MAAc,EACd,GAAa,EAAA;QAEb,IAAI,QAAQ,KAAK,MAAM;AAAE,YAAA,OAAO;QAChC,MAAM,IAAI,GAAG,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAO,QAAQ,CAAC,GAAG,EAAiB,OAAO,EAAE,EAAE,EAAE;QACvF,MAAM,EAAE,GAAG,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAO,MAAM,CAAC,GAAG,EAAiB,OAAO,EAAE,EAAE,EAAE;AAEjF,QAAA,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YACpF,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAC5B,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;AAC1B,YAAA,MAAM,IAAI,GAAG,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,IAAI,EAAE;AAEhC,YAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE;AAClD,gBAAA,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC;YACnD;AAAO,iBAAA,IAAI,CAAC,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,EAAE,IAAI,KAAK,MAAM,EAAE;;;AAGjD,gBAAA,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC,EAAE,IAAI,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,GAAG,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC;AACvG,gBAAA,IAAI,CAAC,EAAE,IAAI,KAAK,MAAM;oBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC3D,gBAAA,IAAI,CAAC,EAAE,IAAI,KAAK,MAAM;oBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC7D;AAAO,iBAAA,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE;gBAChB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YACrC;AAAO,iBAAA,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE;gBAChB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YACvC;iBAAO,IAAI,CAAC,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACpF,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;YACxC;QACJ;IACJ;;AAIA;;;;;AAKG;AACH;;;;;;;AAOG;AACH,IAAA,MAAM,MAAM,GAAA;AACR,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;AACjC,QAAA,MAAM,MAAM,GAAG,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,EAAoB;AAC5E,QAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE;AACvC,QAAA,OAAO,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC;IACtC;;AAGQ,IAAA,MAAM,YAAY,GAAA;AACtB,QAAA,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB;AACvC,QAAA,KAAK,MAAM,GAAG,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;AACnD,YAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC;AAClD,YAAA,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACpG;AACA,QAAA,OAAO,GAAG;IACd;AAEA;;;;;;AAMG;IACH,MAAM,OAAO,CAAC,GAAW,EAAA;QACrB,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;AAClD,QAAA,IAAI,CAAC,CAAC;AAAE,YAAA,MAAM,IAAI,QAAQ,CAAC,sBAAsB,GAAG,CAAA,CAAA,CAAG,CAAC;QACxD,MAAM,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;QAEzB,IAAI,IAAI,GAAkB,IAAI;AAC9B,QAAA,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,MAAM;AAAE,YAAA,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;AACpD,aAAA,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;;YAC7D,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;AACnC,QAAA,IAAI,CAAC,IAAI;AAAE,YAAA,MAAM,IAAI,QAAQ,CAAC,sBAAsB,GAAG,CAAA,CAAA,CAAG,CAAC;AAE3D,QAAA,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE;YAC9C,MAAM,IAAI,GAAG,IAAI,KAAK,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrD,YAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE;AAC3B,gBAAA,MAAM,OAAO,GAAa,CAAC,MAAM,IAAI,CAAC,GAAG,CAAS,IAAK,CAAC,EAAE,OAAO;gBACjE,IAAI,CAAC,OAAO,CAAC,MAAM;AAAE,oBAAA,MAAM,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAA,+BAAA,CAAiC,CAAC;AACjF,gBAAA,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACtB;QACJ;AACA,QAAA,OAAO,IAAK;IAChB;;IAGQ,MAAM,MAAM,CAAC,MAAc,EAAA;AAC/B,QAAA,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;AAAE,YAAA,OAAO,IAAI;QAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QACzC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;AAC3C,QAAA,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;;;AAGrD,QAAA,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,CAAA,CAAA,EAAI,MAAM,CAAA,UAAA,EAAa,IAAI,CAAC,MAAM,CAAA,8BAAA,CAAgC,CAAC;QAC3G,IAAI,CAAC,IAAI,CAAC,MAAM;AAAE,YAAA,OAAO,IAAI;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;;QAE3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAA+B,IAAI,CAAC;AACjE,QAAA,OAAO,MAAM,IAAI,MAAM,IAAI,MAAM,GAAG,IAAI,GAAG,IAAI;IACnD;AAEA;;;;;AAKG;AACH,IAAA,MAAM,OAAO,CAAC,IAAY,EAAE,GAAG,GAAG,MAAM,EAAA;QACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AACtC,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAA,CAAA,EAAI,IAAI,EAAE;QAChH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;AAC5B,QAAA,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,QAAQ,CAAC,CAAA,EAAG,GAAG,CAAA,WAAA,EAAc,GAAG,CAAA,CAAE,CAAC;QACzD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC;IAChF;AAEA,IAAA,MAAM,QAAQ,CAAC,UAAkB,EAAE,OAAqC,EAAE,EAAA;QACtE,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC;AAChD,QAAA,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC;;;;QAIlC,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAChD;;IAGQ,MAAM,WAAW,CAAC,UAAkB,EAAA;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAS,UAAU,CAAC;AACjD,QAAA,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB;AAC1C,QAAA,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC;;;AAI3C,QAAA,KAAK,MAAM,GAAG,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;AACnD,YAAA,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;;AAExC,YAAA,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,MAAK,EAAE,CAAC,CAAC;QACjG;QACA,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE;YAChC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC;QACjF;IACJ;;AAGQ,IAAA,GAAG,CAAC,IAAY,EAAA;AACpB,QAAA,OAAO,GAAG,IAAI,CAAC,IAAI,CAAA,EAAG,IAAI,EAAE;IAChC;AAEQ,IAAA,MAAM,OAAO,CACjB,QAAgB,EAChB,MAAc,EACd,GAA0B,EAAA;QAE1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAO,QAAQ,CAAC;AAC3C,QAAA,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;AACtD,YAAA,MAAM,IAAI,GAAG,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,IAAI,EAAE;AAChC,YAAA,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;AAAE,gBAAA,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC;;AAC/D,gBAAA,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC;QAC7B;IACJ;;;AAKA,IAAA,MAAM,MAAM,CAAC,IAAY,EAAE,EAAW,EAAA;AAClC,QAAA,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;AAAE,YAAA,MAAM,IAAI,QAAQ,CAAC,IAAI,IAAI,CAAA,6BAAA,CAA+B,CAAC;AAC7G,QAAA,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AAAE,YAAA,MAAM,IAAI,QAAQ,CAAC,WAAW,IAAI,CAAA,gBAAA,CAAkB,CAAC;QACnF,MAAM,MAAM,GAAG,EAAE,KAAK,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;AAC3C,QAAA,IAAI,CAAC,MAAM;AAAE,YAAA,MAAM,IAAI,QAAQ,CAAC,4DAA4D,CAAC;QAC7F,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;AACjC,QAAA,OAAO,MAAM;IACjB;AAEA;;;;;;AAMG;AACH,IAAA,MAAM,QAAQ,CAAC,IAAY,EAAE,OAAqC,EAAE,EAAA;QAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AACvC,QAAA,IAAI,CAAC,MAAM;AAAE,YAAA,MAAM,IAAI,QAAQ,CAAC,oBAAoB,IAAI,CAAA,CAAA,CAAG,CAAC;QAC5D,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC;AAChD,QAAA,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;QAC9B,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACxC;AAEA;;;;;;;AAOG;IACK,MAAM,gBAAgB,CAAC,OAAiB,EAAA;AAC5C,QAAA,IAAI,OAAO;YAAE;AACb,QAAA,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE;QACnC,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE;QACrB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,SAAS,OAAO,CAAC,MAAM,GAAG,CAAC,OAAO,GAAG,EAAE;QACzE,MAAM,IAAI,QAAQ,CACd,CAAA,EAAG,OAAO,CAAC,MAAM,CAAA,sCAAA,EAAyC,KAAK,CAAA,EAAG,IAAI,CAAA,EAAA,CAAI;AACtE,YAAA,yEAAyE,CAChF;IACL;;AAGA,IAAA,MAAM,aAAa,GAAA;AACf,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE;AAC9B,QAAA,OAAO,UAAU,IAAI,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,MAAM;IAClD;;AAIA;;;;;;AAMG;AACH,IAAA,MAAM,KAAK,CAAC,IAAY,EAAE,OAAqC,EAAE,EAAA;QAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AACvC,QAAA,IAAI,CAAC,MAAM;AAAE,YAAA,MAAM,IAAI,QAAQ,CAAC,oBAAoB,IAAI,CAAA,CAAA,CAAG,CAAC;;QAE5D,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC;AAChD,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;AACjC,QAAA,IAAI,CAAC,IAAI;AAAE,YAAA,MAAM,IAAI,QAAQ,CAAC,gDAAgD,CAAC;QAC/E,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,EAAE;QAEjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC;QAC/C,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,EAAE;AACjE,QAAA,IAAI,IAAI,KAAK,IAAI,EAAE;;;AAGf,YAAA,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;AAC9B,YAAA,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;AAC1B,YAAA,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;QAClE;AAEA,QAAA,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AACxD,YAAA,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,EAAoB;AACvD,YAAA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AAClB,YAAA,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;AACvB,SAAA,CAAC;QAEF,MAAM,SAAS,GAAe,EAAE;QAChC,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE;YACzF,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAC7B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAC5B,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;AAC9B,YAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACrD,YAAA,IAAI,QAAQ;AAAE,gBAAA,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC1C;AAEA,QAAA,IAAI,SAAS,CAAC,MAAM,EAAE;;;;AAIlB,YAAA,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AACnG,YAAA,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE;QAC5C;AAEA,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAA,MAAA,EAAS,IAAI,CAAA,CAAE,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IACpD;;IAGQ,MAAM,UAAU,CACpB,IAAY,EACZ,CAAuB,EACvB,CAAuB,EACvB,CAAuB,EAAA;AAEvB,QAAA,MAAM,EAAE,GAAG,CAAC,CAAY,KAAK,CAAC,EAAE,QAAQ,CAAC,EAAE;QAC3C,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;AAEjC,QAAA,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC7C,QAAA,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;AAC/B,QAAA,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE;YACjB,IAAI,CAAC,CAAC,EAAE;AAAE,gBAAA,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,MAAK,EAAE,CAAC,CAAC;AAAE,gBAAA,OAAO,IAAI;YAAE;YAC1G,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7B;QACA,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;;;AAIjC,QAAA,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;AAAE,YAAA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE;;;;QAKtD,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE;AACpF,YAAA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE;QACrC;AAEA,QAAA,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxD,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,UAAU,EAAE,CAAC;YAChF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC3C,SAAA,CAAC;;;;;;;AAQF,QAAA,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;AAAE,YAAA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE;AAE7F,QAAA,MAAM,MAAM,GAAG,CAAC,KAAiB,KAAK,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;QACrE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;AAChG,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;AACnD,QAAA,OAAO,UAAU,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI;IAC1D;AAEQ,IAAA,MAAM,IAAI,CAAC,IAAY,EAAE,KAAe,EAAA;QAC5C,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC;AAC7E,QAAA,OAAO,IAAI;IACf;AAEA;;;;;AAKG;AACH,IAAA,MAAM,SAAS,CAAC,CAAS,EAAE,CAAS,EAAA;AAChC,QAAA,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU;AACnC,QAAA,MAAM,OAAO,GAAG,OAAO,KAAa,KAAmB;AACnD,YAAA,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC;AACrB,YAAA,OAAO,KAAK,CAAC,MAAM,EAAE;AACjB,gBAAA,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAG;AAC3B,gBAAA,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE;AACzB,gBAAA,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;AACnB,gBAAA,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAS,IAAI,CAAC,EAAE,OAAO,CAAC;YACzD;AACJ,QAAA,CAAC;AACD,QAAA,MAAM,OAAO,CAAC,CAAC,CAAC;AAEhB,QAAA,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC;AACjB,QAAA,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU;AAC9B,QAAA,OAAO,KAAK,CAAC,MAAM,EAAE;AACjB,YAAA,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAG;AAC3B,YAAA,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE;AACpB,YAAA,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;AACd,YAAA,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;AAAE,gBAAA,OAAO,IAAI;AACpC,YAAA,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAS,IAAI,CAAC,EAAE,OAAO,CAAC;QACzD;AACA,QAAA,OAAO,IAAI;IACf;;IAGQ,MAAM,OAAO,CAAC,UAAkB,EAAA;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAS,UAAU,CAAC;AACjD,QAAA,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB;AACvC,QAAA,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC;AACxC,QAAA,OAAO,GAAG;IACd;AAEH;AAED;;;;;;AAMG;MACU,YAAY,CAAA;AAGQ,IAAA,IAAA;AAFZ,IAAA,KAAK,GAAG,IAAI,GAAG,EAAgB;AAEhD,IAAA,WAAA,CAA6B,IAAyB,EAAA;QAAzB,IAAA,CAAA,IAAI,GAAJ,IAAI;IAAwB;;AAGzD,IAAA,IAAI,CAAC,IAAY,EAAA;QACb,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QAC/B,IAAI,CAAC,IAAI,EAAE;AACP,YAAA,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE;AAClB,gBAAA,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;AAClB,gBAAA,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;gBACtB,GAAG,EAAE,YAAW;oBACZ,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;AAC7B,oBAAA,IAAI,CAAC,IAAI;AAAE,wBAAA,MAAM,IAAI,QAAQ,CAAC,yCAAyC,CAAC;AACxE,oBAAA,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC;gBACpC,CAAC;AACD,gBAAA,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;AAC3B,aAAA,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC;QAC9B;AACA,QAAA,OAAO,IAAI;IACf;AACH;;AC/qBD;;;;;;;;;;;;;;;AAeG;AAKH;AACA,MAAM,WAAW,GAAG,CAAC,MAAK;AACtB,IAAA,IAAI;AACA,QAAA,OAAO,OAAO,QAAQ,KAAK,WAAW,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACvF;AAAE,IAAA,MAAM;AACJ,QAAA,OAAO,KAAK;IAChB;AACJ,CAAC,GAAG;AACJ,SAAS,IAAI,CAAC,GAAW,EAAA;AACrB,IAAA,IAAI,WAAW;AAAE,QAAA,OAAO,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAA,CAAE,CAAC;AAC1D;AACA;AACA,eAAe,WAAW,CAAC,QAAgB,EAAA;AACvC,IAAA,IAAI;AACA,QAAA,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC;AACvE,QAAA,IAAI,CAAC,GAAG;AAAE,YAAA,OAAO,MAAM;QACvB,IAAI,CAAC,GAAG,CAAC;QACT,KAAK,MAAM,CAAC,IAAI,GAAG;YAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC;AAC3C,QAAA,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;IAC1C;AAAE,IAAA,MAAM;AACJ,QAAA,OAAO,KAAK;IAChB;AACJ;AAQA;AACO,MAAM,aAAa,GAAG,WAAW;MAE3B,YAAY,CAAA;AACQ,IAAA,KAAA;AAA7B,IAAA,WAAA,CAA6B,KAAmB,EAAA;QAAnB,IAAA,CAAA,KAAK,GAAL,KAAK;IAAiB;AAEnD;;;;AAIG;AACH,IAAA,MAAM,SAAS,CAAC,QAAgB,EAAE,UAAkB,EAAA;AAChD,QAAA,MAAM,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE;QACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;AAC1B,YAAA,IAAI;AACA,gBAAA,MAAM,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC;YACzC;YAAE,OAAO,CAAC,EAAE;AACR,gBAAA,IAAI,CAAC,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC;AAAE,oBAAA,MAAM,CAAC;YAC/E;QACJ;QACA,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC;AACtD,QAAA,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;AACtE,QAAA,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,kBAAkB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACpF,IAAI,CAAC,0CAA0C,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAA,CAAE,CAAC;IACjF;AAEA;;;;;;AAMG;AACH,IAAA,MAAM,SAAS,CAAC,QAAgB,EAAE,UAAkB,EAAA;;QAEhD,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,UAAU;AAAE,YAAA,OAAO,IAAI;QACxE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE;YACV,IAAI,CAAC,4DAA4D,CAAC;AAClE,YAAA,OAAO,KAAK;QAChB;QACA,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC;AAC7D,QAAA,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC;QACjE,IAAI,CAAC,+CAA+C,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAA,CAAE,CAAC;AAClF,QAAA,OAAO,IAAI;IACf;AAEA;;;;AAIG;AACH,IAAA,MAAM,MAAM,CAAC,QAAgB,EAAE,UAAkB,EAAA;QAC7C,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC;YAAE;QAChD,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9C;AACH;;AC3GD;;;;;;;;;;;;;;;AAeG;AAEH;AACiF;AAC1E,MAAM,WAAW,GAAG,EAAE;AAE7B;;AAE2B;AACpB,MAAM,cAAc,GAAG,CAAC;AAE/B;AACuE;AAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;AAWrC,SAAS,MAAM,CAAC,CAAS,EAAE,KAAa,EAAA;AACpC,IAAA,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,OAAO,CAAC,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;AACnE;AAEA;SACgB,IAAI,CAAC,IAAY,EAAE,OAAe,EAAE,MAAc,EAAA;AAC9D,IAAA,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA,CAAA,EAAI,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA,CAAA,EAAI,MAAM,EAAE;AACtF;AAOA;AAC4E;AACtE,SAAU,MAAM,CAAC,KAAa,EAAA;IAChC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;AAC/B,IAAA,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC;IACzC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE;AACtB,QAAA,MAAM,IAAI,KAAK,CAAC,CAAA,yBAAA,EAA4B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA,CAAE,CAAC;IACxE;IACA,OAAO;QACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAClC,QAAA,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;KAChC;AACL;AAEA;;;;;;AAMG;AACG,SAAU,UAAU,CAAC,CAAS,EAAE,CAAS,EAAA;IAC3C,IAAI,CAAC,KAAK,CAAC;AAAE,QAAA,OAAO,CAAC;AACrB,IAAA,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC;AACzB;AAEA;AACM,SAAU,OAAO,CAAC,CAAS,EAAE,CAAS,EAAA;IACxC,OAAO,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;AAC/B;;ACpFA;;;;;;;;;;;;;;;;;AAiBG;MAaU,GAAG,CAAA;AACJ,IAAA,IAAI;AACJ,IAAA,OAAO;AACE,IAAA,MAAM;AACN,IAAA,QAAQ;IAEzB,WAAA,CAAY,MAAc,EAAE,IAAA,GAA8D,EAAE,EAAA;AACxF,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;AACpB,QAAA,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,CAAC;IAC3C;;IAGA,GAAG,GAAA;AACC,QAAA,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE;AAC1B,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,QAAQ,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC;AAC5D,QAAA,OAAO,IAAI,CAAC,OAAO,EAAE;IACzB;AAEA;;;;AAIG;AACH,IAAA,MAAM,CAAC,MAAgB,EAAA;AACnB,QAAA,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE;AAC1B,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI;AAC1B,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACnD,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,MAAM,CAAC,IAAI,EAAE;AACjD,YAAA,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;QAC7D;AAAO,aAAA,IAAI,OAAO,KAAK,QAAQ,EAAE;YAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC;QACnC;AAAO,aAAA,IAAI,OAAO,KAAK,MAAM,CAAC,IAAI,EAAE;YAChC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC;QACrC;aAAO;AACH,YAAA,IAAI,CAAC,OAAO,GAAG,CAAC;QACpB;AACA,QAAA,IAAI,CAAC,IAAI,GAAG,OAAO;AACnB,QAAA,OAAO,IAAI,CAAC,OAAO,EAAE;IACzB;;IAGA,OAAO,GAAA;AACH,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC;IACrD;;IAGA,QAAQ,GAAA;AACJ,QAAA,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;IACrD;AACH;;ACnFD;;;;;;;;;;;;;;;;;AAiBG;MAaU,mBAAmB,CAAA;AACpB,IAAA,KAAK;AACI,IAAA,SAAS,GAAG,IAAI,GAAG,EAAsC;AACzD,IAAA,WAAW;AACX,IAAA,UAAU;IACnB,YAAY,GAAyC,IAAI;IACzD,OAAO,GAAG,KAAK;IAEN,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE;IACtC,aAAa,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE;AAE7D,IAAA,WAAA,CAAY,OAA4B,EAAE,EAAA;AACtC,QAAA,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW;QACnC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI;AACzC,QAAA,IAAI,CAAC,KAAK;AACN,YAAA,OAAO,SAAS,KAAK,WAAW,IAAI,SAAS,CAAC,MAAM,KAAK,KAAK,GAAG,SAAS,GAAG,QAAQ;IAC7F;;IAGA,KAAK,GAAA;AACD,QAAA,IAAI,IAAI,CAAC,OAAO,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE;QACnD,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC;QACpD,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC;AACtD,QAAA,IAAI,CAAC,OAAO,GAAG,IAAI;IACvB;IAEA,IAAI,GAAA;QACA,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE;QACpD,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC;QACvD,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC;QACzD,IAAI,IAAI,CAAC,YAAY;AAAE,YAAA,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC;AACtD,QAAA,IAAI,CAAC,OAAO,GAAG,KAAK;IACxB;AAEA,IAAA,IAAI,OAAO,GAAA;QACP,OAAO,IAAI,CAAC,KAAK;IACrB;AAEA,IAAA,IAAI,QAAQ,GAAA;AACR,QAAA,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS;IACnC;;AAGA,IAAA,QAAQ,CAAC,EAAsC,EAAA;AAC3C,QAAA,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1C;;IAGA,kBAAkB,GAAA;QACd,IAAI,CAAC,eAAe,EAAE;IAC1B;;IAGA,kBAAkB,GAAA;QACd,IAAI,CAAC,UAAU,EAAE;IACrB;;IAGA,WAAW,GAAA;AACP,QAAA,IAAI,IAAI,CAAC,YAAY,EAAE;AACnB,YAAA,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC;AAC/B,YAAA,IAAI,CAAC,YAAY,GAAG,IAAI;QAC5B;AACA,QAAA,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;IACvB;;IAGA,UAAU,GAAA;AACN,QAAA,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;IACtB;IAEQ,UAAU,GAAA;AACd,QAAA,IAAI,IAAI,CAAC,YAAY,EAAE;AACnB,YAAA,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC;AAC/B,YAAA,IAAI,CAAC,YAAY,GAAG,IAAI;QAC5B;;;AAGA,QAAA,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE;AAC9B,QAAA,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS;AAC3C,QAAA,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,IAAI,UAAU,EAAE;AACZ,YAAA,IAAI;AACA,gBAAA,IAAI,CAAC,WAAW,IAAI;YACxB;AAAE,YAAA,MAAM;;YAER;QACJ;IACJ;IAEQ,eAAe,GAAA;QACnB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY;YAAE;AACnD,QAAA,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,MAAK;AAChC,YAAA,IAAI,CAAC,YAAY,GAAG,IAAI;AACxB,YAAA,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;AACvB,QAAA,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC;IACvB;AAEQ,IAAA,GAAG,CAAC,KAAwB,EAAA;AAChC,QAAA,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK;YAAE;AAC1B,QAAA,IAAI,CAAC,KAAK,GAAG,KAAK;AAClB,QAAA,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE;AAC7B,YAAA,IAAI;gBACA,EAAE,CAAC,KAAK,CAAC;YACb;AAAE,YAAA,MAAM;;YAER;QACJ;AACA,QAAA,MAAM,KAAK,GACP,KAAK,KAAK;cACJ,eAAe,CAAC;cAChB,KAAK,KAAK;kBACR,eAAe,CAAC;AAClB,kBAAE,eAAe,CAAC,OAAO;QACnC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC;IACpC;AACH;;ACnJD;;;;;;;;;;;;;;;;;;;AAmBG;MAQU,aAAa,CAAA;AAIO,IAAA,KAAA;AAHZ,IAAA,SAAS,GAAG,IAAI,GAAG,EAAkC;IAC9D,QAAQ,GAAyB,IAAI;AAE7C,IAAA,WAAA,CAA6B,KAAmB,EAAA;QAAnB,IAAA,CAAA,KAAK,GAAL,KAAK;IAAiB;;IAGnD,QAAQ,CAAC,MAA4B,EAAE,QAAkB,EAAA;QACrD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC;IACxC;;AAGA,IAAA,OAAO,CAAC,KAA8B,EAAA;QAClC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC;;AAGA,IAAA,MAAM,OAAO,GAAA;QACT,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM;IAC7C;AAEA;;;;AAIG;IACH,KAAK,GAAA;QACD,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ;QACvC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAK;AACzC,YAAA,IAAI,CAAC,QAAQ,GAAG,IAAI;AACxB,QAAA,CAAC,CAAC;QACF,OAAO,IAAI,CAAC,QAAQ;IACxB;AAEQ,IAAA,MAAM,QAAQ,GAAA;QAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;AACzC,QAAA,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE;AACzB,YAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;YACjD,IAAI,CAAC,QAAQ,EAAE;;;gBAGX,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;gBACnC;YACJ;AACA,YAAA,IAAI;AACA,gBAAA,MAAM,QAAQ,CAAC,KAAK,CAAC;gBACrB,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;AACnC,gBAAA,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE;oBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;AACvB,iBAAA,CAAC;YACN;YAAE,OAAO,GAAG,EAAE;AACV,gBAAA,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE;oBAClB,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;AACnC,oBAAA,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE;wBACvC,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,KAAK,EAAE,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC;AAC7C,wBAAA,OAAO,EAAE,IAAI;AAChB,qBAAA,CAAC;oBACF;gBACJ;;AAEA,gBAAA,MAAM,GAAG;YACb;QACJ;IACJ;AACH;AAED;AACsC;AACtC,SAAS,WAAW,CAAC,GAAY,EAAA;AAC7B,IAAA,OAAO,GAAG,YAAY,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;AAC5E;;ACpGA;;;;;;;;;;;;;;;AAeG;MAaU,UAAU,CAAA;AAIU,IAAA,IAAA;AAHZ,IAAA,YAAY,GAAG,IAAI,GAAG,EAAuB;IACtD,OAAO,GAAyB,IAAI;AAE5C,IAAA,WAAA,CAA6B,IAAoB,EAAA;QAApB,IAAA,CAAA,IAAI,GAAJ,IAAI;IAAmB;;AAGpD,IAAA,eAAe,CAAC,IAAyB,EAAA;AACrC,QAAA,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;QAC3B,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC;IAC/C;;IAGA,GAAG,GAAA;QACC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO;QACrC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAK;AACvC,YAAA,IAAI,CAAC,OAAO,GAAG,IAAI;AACvB,QAAA,CAAC,CAAC;QACF,OAAO,IAAI,CAAC,OAAO;IACvB;AAEQ,IAAA,MAAM,OAAO,GAAA;AACjB,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE;AAC1B,QAAA,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE;AACpC,QAAA,IAAI;YACA,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;AAC7B,YAAA,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE;AAClC,gBAAA,IAAI;oBACA,MAAM,IAAI,EAAE;gBAChB;AAAE,gBAAA,MAAM;;;gBAGR;YACJ;YACA,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,EAAE,CAAC;QACrD;gBAAU;AACN,YAAA,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE;QACvC;IACJ;AACH;;ACnED;;AAEG;AAEH;;;;;;AAMG;AACG,MAAO,kBAAmB,SAAQ,KAAK,CAAA;IACzC,WAAA,CAAY,OAAO,GAAG,yFAAyF,EAAA;QAC3G,KAAK,CAAC,OAAO,CAAC;AACd,QAAA,IAAI,CAAC,IAAI,GAAG,oBAAoB;IACpC;AACH;;AChBD;;;;;;;;;;;;;;;AAeG;MAqBU,iBAAiB,CAAA;AAIG,IAAA,IAAA;IAHrB,MAAM,GAAyB,IAAI;IACnC,cAAc,GAAsB,IAAI;AAEhD,IAAA,WAAA,CAA6B,IAA2B,EAAA;QAA3B,IAAA,CAAA,IAAI,GAAJ,IAAI;IAA0B;;AAG3D,IAAA,MAAM,IAAI,CAAc,IAAY,EAAE,KAAQ,EAAA;AAC1C,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE;AAC9B,QAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;AAC1D,QAAA,MAAM,MAAM,GAAmB;YAC3B,QAAQ;AACR,YAAA,GAAG,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;AAC9B,YAAA,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB;AACD,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAClE;;IAGA,MAAM,IAAI,CAAc,IAAY,EAAA;AAChC,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;AAAE,YAAA,OAAO,IAAI;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrF,QAAA,IAAI,CAAC,MAAM;AAAE,YAAA,OAAO,IAAI;AACxB,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU;AAAE,YAAA,OAAO,IAAI;QAC9C,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC,OAAO,CAAI,MAAM,CAAC,QAAQ,CAAC;IAC3D;;IAGA,MAAM,MAAM,CAAC,IAAY,EAAA;AACrB,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE;AAC9B,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7D;;AAGA,IAAA,MAAM,IAAI,GAAA;AACN,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;AAAE,YAAA,OAAO,EAAE;QACvC,MAAM,MAAM,GAAG,CAAA,EAAG,IAAI,CAAC,UAAU,EAAE,GAAG;AACtC,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAiB,WAAW,EAAE,MAAM,CAAC;QAC9E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD;AAEQ,IAAA,GAAG,CAAC,IAAY,EAAA;QACpB,OAAO,CAAA,EAAG,IAAI,CAAC,UAAU,EAAE,CAAA,CAAA,EAAI,IAAI,EAAE;IACzC;IAEQ,UAAU,GAAA;;;QAGd,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,MAAM;IACjD;IAEQ,aAAa,GAAA;AACjB,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU;YAAE,MAAM,IAAI,kBAAkB,EAAE;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE;QACpD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,cAAc,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,MAAM;AACvE,QAAA,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC;AACrE,QAAA,IAAI,CAAC,cAAc,GAAG,QAAQ;QAC9B,OAAO,IAAI,CAAC,MAAM;IACtB;AACH;;AC/FD;;;;;;;;;;;AAWG;AAEI,MAAM,OAAO,GAAG,gBAAgB;AAChC,MAAM,UAAU,GAAG,CAAC;AAqBpB,MAAM,MAAM,GAAe;IAC9B,EAAE,IAAI,EAAE,UAAU,EAAE;IACpB,EAAE,IAAI,EAAE,cAAc,EAAE;IACxB,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAC1B,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAC1B,EAAE,IAAI,EAAE,eAAe,EAAE;IACzB,EAAE,IAAI,EAAE,gBAAgB,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;IAC/D,EAAE,IAAI,EAAE,WAAW,EAAE;IACrB,EAAE,IAAI,EAAE,WAAW,EAAE;IACrB,EAAE,IAAI,EAAE,MAAM,EAAE;CACnB;AAED;AACO,MAAM,YAAY,GAAG,QAAQ;;AChDpC;;;;;;;;;;;;;;AAcG;AAqBH,MAAM,aAAa,GAAG,QAAQ;MAEjB,cAAc,CAAA;;AAEd,IAAA,OAAO;AACP,IAAA,KAAK;AACL,IAAA,YAAY;AACZ,IAAA,KAAK;AACL,IAAA,IAAI;;AAEJ,IAAA,QAAQ;;AAER,IAAA,SAAS;IAEV,GAAG,GAAe,IAAI;IACtB,MAAM,GAAG,EAAE;AACF,IAAA,WAAW;IACpB,YAAY,GAAyC,IAAI;AAEjE,IAAA,WAAA,CAAY,IAAwB,EAAA;AAChC,QAAA,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO;AAC3B,QAAA,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;QACvB,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;AAC1C,QAAA,IAAI,CAAC,YAAY,GAAG,IAAI,mBAAmB,CAAC;YACxC,WAAW,EAAE,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;AAC1C,SAAA,CAAC;AACF,QAAA,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,IAAI,CAAC,YAAY;;;AAG/B,YAAA,OAAO,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU;AACzE,SAAA,CAAC;AACF,QAAA,IAAI,CAAC,QAAQ,GAAG,IAAI,iBAAiB,CAAC;YAClC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;AACrB,YAAA,OAAO,EAAE,MAAM,IAAI,CAAC,OAAO,EAAE;AAChC,SAAA,CAAC;AAEF,QAAA,IAAI,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,SAAS,EAAE;AAAE,YAAA,IAAI,CAAC,SAAS,GAAG,IAAI,UAAU,EAAE;AAE7E,QAAA,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE;QAC9B,IAAI,IAAI,CAAC,OAAO;AAAE,YAAA,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE;IAC/C;AAEA;;;;AAIG;IACH,MAAM,gBAAgB,CAAC,IAAY,EAAA;QAC/B,MAAM,IAAI,CAAC,OAAO,CAAC;AACf,YAAA,GAAG,EAAE,MAAM,IAAI,CAAC,OAAO,EAAE;AACzB,YAAA,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE;AAC5B,YAAA,MAAM,EAAE,MAAM;AACd,YAAA,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,EAAE,IAAI,EAAE;AACjB,SAAA,CAAC;IACN;;IAGA,KAAK,GAAA;QACD,OAAO,IAAI,CAAC,WAAW;IAC3B;;AAGA,IAAA,IAAI,MAAM,GAAA;AACN,QAAA,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO;IACpC;;AAGA,IAAA,cAAc,CAAC,EAAsC,EAAA;QACjD,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;IACzC;;AAGA,IAAA,MAAM,OAAO,GAAA;QACT,MAAM,IAAI,CAAC,WAAW;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAI,CAAC,GAAG,EAAE;QAC7B,IAAI,CAAC,eAAe,EAAE;AACtB,QAAA,OAAO,KAAK;IAChB;;IAGA,MAAM,UAAU,CAAC,MAAc,EAAA;QAC3B,MAAM,IAAI,CAAC,WAAW;QACtB,IAAI,CAAC,GAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,eAAe,EAAE;IAC1B;;IAGA,WAAW,GAAA;QACP,OAAO,UAAU,EAAE;IACvB;;AAGA,IAAA,OAAO,CAAC,KAA8B,EAAA;QAClC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC;;IAGA,gBAAgB,CAAC,MAA4B,EAAE,QAAkB,EAAA;QAC7D,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IACzC;;AAGA,IAAA,eAAe,CAAC,IAAyB,EAAA;QACrC,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;IAC1C;;IAGA,kBAAkB,GAAA;AACd,QAAA,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE;IAC1C;;IAGA,kBAAkB,GAAA;AACd,QAAA,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE;IAC1C;;IAGA,OAAO,GAAA;AACH,QAAA,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;QACxB,IAAI,IAAI,CAAC,YAAY;AAAE,YAAA,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC;IAC1D;AAEQ,IAAA,MAAM,IAAI,GAAA;AACd,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;;AAEf,YAAA,IAAI,CAAC,MAAM,GAAG,UAAU,EAAE;YAC1B,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YAC/B;QACJ;AACA,QAAA,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAS,MAAM,EAAE,YAAY,CAAC;QAC/D,IAAI,CAAC,MAAM,EAAE;YACT,MAAM,GAAG,UAAU,EAAE;AACrB,YAAA,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC;QACtD;AACA,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;AACpB,QAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAW,WAAW,EAAE,aAAa,CAAC;AACxE,QAAA,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC;IACzC;;IAGQ,eAAe,GAAA;AACnB,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,YAAY;YAAE;AACxC,QAAA,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,MAAK;AAChC,YAAA,IAAI,CAAC,YAAY,GAAG,IAAI;YACxB,IAAI,IAAI,CAAC,GAAG;AAAE,gBAAA,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACtF,CAAC,EAAE,GAAG,CAAC;IACX;AACH;;AC1LD;;;;;;;;;;;AAWG;SAEa,gBAAgB,GAAA;AAC5B,IAAA,IAAI;AACA,QAAA,QACI,OAAO,MAAM,KAAK,WAAW;YAC7B,OAAO,SAAS,KAAK,WAAW;AAChC,YAAA,OAAO,MAAM,KAAK,WAAW;IAErC;AAAE,IAAA,MAAM;AACJ,QAAA,OAAO,KAAK;IAChB;AACJ;;ACvBA;;;;;;;;;AASG;AAIH,SAAS,GAAG,CAAI,OAAsB,EAAA;IAClC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAI;AACnC,QAAA,OAAO,CAAC,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;AACjD,QAAA,OAAO,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;AACjD,IAAA,CAAC,CAAC;AACN;AAEA;SACgB,YAAY,GAAA;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAI;QACnC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;AAChD,QAAA,IAAI,CAAC,eAAe,GAAG,MAAK;AACxB,YAAA,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM;AACtB,YAAA,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE;gBACtB,IAAI,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE;AAC5C,gBAAA,EAAE,CAAC,iBAAiB,CAChB,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,aAAa,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,SAAS,CAChF;YACL;AACJ,QAAA,CAAC;AACD,QAAA,IAAI,CAAC,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;AAC3C,QAAA,IAAI,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;;;AAGvC,QAAA,IAAI,CAAC,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;AACzF,IAAA,CAAC,CAAC;AACN;AAOA;MACa,aAAa,CAAA;AACO,IAAA,EAAA;AAA7B,IAAA,WAAA,CAA6B,EAAe,EAAA;QAAf,IAAA,CAAA,EAAE,GAAF,EAAE;IAAgB;IAEvC,EAAE,CAAC,KAAgB,EAAE,IAAwB,EAAA;AACjD,QAAA,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC;IAC9D;IAEA,GAAG,CAAI,KAAgB,EAAE,GAAW,EAAA;AAChC,QAAA,OAAO,GAAG,CAAgB,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IACzF;AAEA,IAAA,MAAM,GAAG,CAAI,KAAgB,EAAE,GAAW,EAAE,KAAQ,EAAA;AAChD,QAAA,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,KAAgB,EAAE,GAAG,CAAC,CAAC;IACrE;AAEA,IAAA,MAAM,MAAM,CAAC,KAAgB,EAAE,GAAgB,EAAA;AAC3C,QAAA,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtD;IAEA,MAAM,KAAK,CAAC,KAAgB,EAAA;AACxB,QAAA,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,KAAK,EAAE,CAAC;IAClD;;AAGA,IAAA,MAAM,MAAM,CAAI,KAAgB,EAAE,KAAQ,EAAA;AACtC,QAAA,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,KAAgB,CAAC,CAAC;AACxE,QAAA,OAAO,GAAa;IACxB;;AAGA,IAAA,KAAK,CAAI,KAAgB,EAAE,KAAa,EAAE,KAAa,EAAA;AACnD,QAAA,OAAO,IAAI,CAAC,IAAI,CAAI,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC5E;;IAGA,MAAM,CAAI,KAAgB,EAAE,MAAc,EAAA;;;QAGtC,OAAO,IAAI,CAAC,IAAI,CAAI,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACpF;;AAGA,IAAA,GAAG,CAAI,KAAgB,EAAA;QACnB,OAAO,IAAI,CAAC,IAAI,CAAI,KAAK,EAAE,IAAI,CAAC;IACpC;IAEQ,IAAI,CAAI,KAAgB,EAAE,KAAyB,EAAA;QACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAI;YACnC,MAAM,GAAG,GAAuB,EAAE;AAClC,YAAA,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,UAAU,CAAC,KAAK,IAAI,SAAS,CAAC;AAC3E,YAAA,SAAS,CAAC,SAAS,GAAG,MAAK;AACvB,gBAAA,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM;AAC/B,gBAAA,IAAI,CAAC,MAAM;AAAE,oBAAA,OAAO,OAAO,CAAC,GAAG,CAAC;gBAChC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAU,EAAE,CAAC;gBAC/D,MAAM,CAAC,QAAQ,EAAE;AACrB,YAAA,CAAC;AACD,YAAA,SAAS,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;AACrD,QAAA,CAAC,CAAC;IACN;AACH;;AC3GD;;;;;;;;;AASG;MAOU,cAAc,CAAA;IACd,OAAO,GAAG,IAAI;IACf,IAAI,GAAyB,IAAI;IACjC,OAAO,GAAkC,IAAI;IAE7C,OAAO,GAAA;QACX,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;AAChD,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;AACf,YAAA,IAAI,CAAC,OAAO,GAAG,YAAY;AACtB,iBAAA,IAAI,CAAC,CAAC,EAAE,KAAI;gBACT,IAAI,CAAC,IAAI,GAAG,IAAI,aAAa,CAAC,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC,IAAI;AACpB,YAAA,CAAC;iBACA,OAAO,CAAC,MAAK;AACV,gBAAA,IAAI,CAAC,OAAO,GAAG,IAAI;AACvB,YAAA,CAAC,CAAC;QACV;QACA,OAAO,IAAI,CAAC,OAAO;IACvB;AAEA,IAAA,MAAM,KAAK,GAAA;AACP,QAAA,MAAM,IAAI,CAAC,OAAO,EAAE;IACxB;AAEA,IAAA,MAAM,GAAG,CAAI,KAAgB,EAAE,GAAW,EAAA;AACtC,QAAA,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,CAAI,KAAK,EAAE,GAAG,CAAC;IACpD;AAEA,IAAA,MAAM,GAAG,CAAI,KAAgB,EAAE,GAAW,EAAE,KAAQ,EAAA;AAChD,QAAA,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC;IACvD;AAEA,IAAA,MAAM,MAAM,CAAC,KAAgB,EAAE,GAAW,EAAA;AACtC,QAAA,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC;IACnD;AAEA,IAAA,MAAM,MAAM,CAAI,KAAgB,EAAE,MAAc,EAAA;AAC5C,QAAA,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAI,KAAK,EAAE,MAAM,CAAC;IAC1D;AAEA,IAAA,MAAM,KAAK,CAAI,KAAgB,EAAE,KAAa,EAAE,KAAa,EAAA;AACzD,QAAA,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAI,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;IAC/D;IAEA,MAAM,GAAG,CAAI,KAAgB,EAAA;AACzB,QAAA,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,CAAI,KAAK,CAAC;IAC/C;IAEA,MAAM,KAAK,CAAC,KAAgB,EAAA;AACxB,QAAA,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC;IAC7C;IAEA,MAAM,OAAO,CAAC,KAA8B,EAAA;;AAExC,QAAA,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC;IACjE;IAEA,MAAM,OAAO,CAAC,GAAW,EAAA;AACrB,QAAA,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,gBAAgB,EAAE,GAAG,CAAC;IAC9D;AAEA,IAAA,MAAM,MAAM,GAAA;AACR,QAAA,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,CAAa,gBAAgB,CAAC;AAC3E,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5E;AACH;;ACjFD;;;;;;AAMG;MAKU,SAAS,CAAA;IACT,OAAO,GAAG,KAAK;IAExB,MAAM,KAAK,GAAA,EAAmB;AAC9B,IAAA,MAAM,GAAG,CAAI,MAAiB,EAAE,IAAY,EAAA;AACxC,QAAA,OAAO,IAAI;IACf;IACA,MAAM,GAAG,CAAI,MAAiB,EAAE,IAAY,EAAE,MAAS,EAAA,EAAkB;AACzE,IAAA,MAAM,MAAM,CAAC,MAAiB,EAAE,IAAY,IAAkB;AAC9D,IAAA,MAAM,MAAM,CAAI,MAAiB,EAAE,OAAe,EAAA;AAC9C,QAAA,OAAO,EAAE;IACb;AACA,IAAA,MAAM,KAAK,CAAI,MAAiB,EAAE,MAAc,EAAE,MAAc,EAAA;AAC5D,QAAA,OAAO,EAAE;IACb;IACA,MAAM,GAAG,CAAI,MAAiB,EAAA;AAC1B,QAAA,OAAO,EAAE;IACb;AACA,IAAA,MAAM,KAAK,CAAC,MAAiB,IAAkB;IAC/C,MAAM,OAAO,CAAC,MAA+B,EAAA;QACzC,OAAO,EAAE;IACb;AACA,IAAA,MAAM,OAAO,CAAC,IAAY,IAAkB;AAC5C,IAAA,MAAM,MAAM,GAAA;AACR,QAAA,OAAO,EAAE;IACb;AACH;;ACrCD;;;;;;;;;;;AAWG;AAaH;SACgB,aAAa,GAAA;AACzB,IAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE;AACxD;AAEA;;;;AAIG;AACG,SAAU,aAAa,CAAI,CAAiB,EAAE,CAAiB,EAAA;IACjE,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAChD;AAEA;AACM,SAAU,aAAa,CAAI,KAAQ,EAAE,GAAW,EAAA;IAClD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;AACzC;AAEA;AACM,SAAU,cAAc,CAAI,GAAW,EAAA;IACzC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;AAC9C;;AC9CA;;;;;;;;;;AAUG;MAcU,OAAO,CAAA;AAEa,IAAA,OAAA;AADZ,IAAA,KAAK;AACtB,IAAA,WAAA,CAA6B,OAAuB,EAAA;QAAvB,IAAA,CAAA,OAAO,GAAP,OAAO;AAChC,QAAA,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK;IAC9B;AAEA,IAAA,IAAI,OAAO,GAAA;AACP,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO;IAC/B;IAEA,OAAO,GAAA;AACH,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;IACjC;IAEA,WAAW,GAAA;AACP,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;IACrC;IAEQ,GAAG,CAAC,UAAkB,EAAE,OAAe,EAAA;AAC3C,QAAA,OAAO,CAAA,EAAG,UAAU,CAAA,CAAA,EAAI,OAAO,EAAE;IACrC;;IAGA,IAAI,CAAC,UAAkB,EAAE,OAAe,EAAA;AACpC,QAAA,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAU,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC7E;;IAGA,MAAM,UAAU,CAAC,UAAkB,EAAE,OAAe,EAAE,QAAiB,EAAE,GAAW,EAAA;QAChF,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACjG;;AAGA,IAAA,MAAM,WAAW,CAAC,UAAkB,EAAE,OAAe,EAAE,GAAW,EAAA;QAC9D,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC;IACxF;AAEA;;;;;AAKG;IACH,MAAM,WAAW,CACb,UAAkB,EAClB,OAAe,EACf,QAAwB,EACxB,EAAoB,EACpB,GAAY,EAAA;QAEZ,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC;AACvC,QAAA,MAAM,QAAQ,GACV,EAAE,KAAK;AACH,cAAE,cAAc,CAAC,GAAG,KAAK,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;AAC9C,cAAE,aAAa,CAAC,QAAQ,EAAE,GAAG,KAAK,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;AAChE,QAAA,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAU,UAAU,EAAE,CAAC,CAAC,KAAK,aAAa,EAAE;AAC/E,QAAA,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,EAAE,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACvE;;IAGA,MAAM,QAAQ,CAAC,UAAkB,EAAA;AAC7B,QAAA,MAAM,MAAM,GAAG,CAAA,EAAG,UAAU,GAAG;AAC/B,QAAA,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAU,UAAU,EAAE,MAAM,CAAC;AACjE,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtF;;IAGA,MAAM,OAAO,CAAC,MAAwB,EAAE,IAAa,EAAE,GAAW,EAAE,QAAgB,EAAA;QAChF,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7E;AACH;;AC9FD;;;;;;;;;;AAUG;AAUH;AACM,SAAU,eAAe,CAAC,KAAc,EAAA;AAC1C,IAAA,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;AAAE,QAAA,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;AAC7E,IAAA,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;AAAE,QAAA,OAAO,CAAA,CAAA,EAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;IAC5E,MAAM,GAAG,GAAG,KAAgC;AAC5C,IAAA,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG;AACrB,SAAA,IAAI;SACJ,GAAG,CAAC,CAAC,CAAC,KAAK,CAAA,EAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA,CAAA,EAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA,CAAE;AAC5D,SAAA,IAAI,CAAC,GAAG,CAAC,CAAA,CAAA,CAAG;AACrB;MAEa,OAAO,CAAA;AAEa,IAAA,OAAA;AADZ,IAAA,KAAK;AACtB,IAAA,WAAA,CAA6B,OAAuB,EAAA;QAAvB,IAAA,CAAA,OAAO,GAAP,OAAO;AAChC,QAAA,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK;IAC9B;AAEA,IAAA,IAAI,OAAO,GAAA;AACP,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO;IAC/B;IACA,OAAO,GAAA;AACH,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;IACjC;IACA,WAAW,GAAA;AACP,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;IACrC;;IAGA,YAAY,CAAC,MAA+B,EAAE,GAAW,EAAA;QACrD,MAAM,GAAG,GAA2B,EAAE;QACtC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;AAAE,YAAA,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG;AACrD,QAAA,OAAO,GAAG;IACd;IAEQ,MAAM,CAAC,KAAa,EAAE,EAAU,EAAA;AACpC,QAAA,OAAO,CAAA,EAAG,KAAK,CAAA,KAAA,EAAQ,EAAE,EAAE;IAC/B;IACQ,QAAQ,CAAC,KAAa,EAAE,CAAU,EAAA;QACtC,OAAO,CAAA,EAAG,KAAK,CAAA,OAAA,EAAU,eAAe,CAAC,CAAC,CAAC,EAAE;IACjD;AAEA,IAAA,MAAM,OAAO,CAAC,KAAa,EAAE,EAAU,EAAA;AACnC,QAAA,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjE;AACA,IAAA,MAAM,QAAQ,CAAC,KAAa,EAAE,EAAU,EAAE,GAA4B,EAAA;AAClE,QAAA,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC;IACrE;;AAEA,IAAA,MAAM,QAAQ,CAAC,KAAa,EAAE,EAAU,EAAE,MAA+B,EAAA;AACrE,QAAA,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE;AACtD,QAAA,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;IAC9D;AACA,IAAA,MAAM,SAAS,CAAC,KAAa,EAAE,EAAU,EAAA;AACrC,QAAA,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnE;AAEA,IAAA,MAAM,SAAS,CAAC,KAAa,EAAE,CAAU,EAAA;AACrC,QAAA,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACpE;AACA,IAAA,MAAM,UAAU,CAAC,KAAa,EAAE,CAAU,EAAE,IAAiB,EAAA;AACzD,QAAA,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;IACzE;IAEA,MAAM,OAAO,CACT,MAAsC,EACtC,IAAa,EACb,GAAW,EACX,QAAgB,EAAA;QAEhB,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7E;AACH;;AC3FD;;;;;;;;;;;;;;;;;;;;;;AAsBG;AAoBH;AACA,MAAM,aAAa,GAAG,WAAW;AAcjC;AACO,MAAM,gBAAgB,GAAG;AAEhC;AACO,MAAM,qBAAqB,GAAG;AAsFrC;;;AAGG;AACH,SAAS,QAAQ,CAAC,OAAe,EAAA;AAC7B,IAAA,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;AAC7D;MAEa,MAAM,CAAA;AACN,IAAA,OAAO;;AAGP,IAAA,IAAI;;AAEJ,IAAA,EAAE;;AAEF,IAAA,EAAE;;AAEF,IAAA,OAAO;;AAGP,IAAA,GAAG;;AAEH,IAAA,GAAG;;AAEH,IAAA,OAAO;;AAEP,IAAA,KAAK;;AAEL,IAAA,MAAM;;AAEN,IAAA,SAAS;;AAET,IAAA,YAAY;;AAEZ,IAAA,OAAO;AAEC,IAAA,OAAO;AACP,IAAA,IAAI;;AAGJ,IAAA,sBAAsB,GAAG,IAAI,GAAG,EAAc;;IAEvD,eAAe,GAA4B,IAAI;AAEvD,IAAA,WAAA,CAAY,UAAyB,EAAE,EAAA;;;;AAInC,QAAA,IAAI;AACA,YAAA,OAAO,CAAC,IAAI,CAAC,oCAAoC,OAAO,CAAA,CAAE,CAAC;QAC/D;AAAE,QAAA,MAAM,oDAAoD;AAE5D,QAAA,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,UAAU,CAAC,SAAS,EAAE,QAAQ,KAAK,UAAU,EAAE;YAC1E,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;QACnD;AAEA,QAAA,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,gBAAgB,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;AACxE,QAAA,IAAI,CAAC,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,YAAY,IAAI,mBAAmB,EAAE,CAAC;;;;QAK9E,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE;QACrE,MAAM,YAAY,GAAiB;eAC5B,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI,cAAc,EAAE;AACjD,cAAE,IAAI,SAAS,EAAE;AACrB,QAAA,IAAI,CAAC,OAAO,GAAG,IAAI,cAAc,CAAC;AAC9B,YAAA,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;AACrB,YAAA,OAAO,EAAE,cAAc;AAC1B,SAAA,CAAC;;;;AAKF,QAAA,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC;AACrE,QAAA,MAAM,cAAc,GAChB,cAAc,IAAI;AACd,cAAE,OAAO,KAAK,EAAE,IAAI,KAAI;AAClB,gBAAA,IAAI;oBACA,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC;AACxC,oBAAA,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE;AACjC,oBAAA,OAAO,GAAG;gBACd;gBAAE,OAAO,GAAG,EAAE;AACV,oBAAA,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE;AACjC,oBAAA,MAAM,GAAG;gBACb;YACJ;AACF,cAAE,OAAO,CAAC,KAAK;AAEvB,QAAA,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,eAAe,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK;AACzC,YAAA,KAAK,EAAE,cAAc;;;;AAIrB,YAAA,cAAc,EAAE,MAAM,IAAI,CAAC,cAAc,EAAE;AAC9C,SAAA,CAAC;AAEF,QAAA,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;QACrE,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAEpF,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;AACxC,QAAA,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,qBAAqB,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;AACtF,QAAA,IAAI,CAAC,IAAI,GAAG,IAAI,aAAa,CAAC;YAC1B,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW;;YAE9D,UAAU,EAAE,IAAI,CAAC,OAAO;AAC3B,SAAA,CAAC;QACF,MAAM,gBAAgB,GAAG;AACrB,cAAE,CAAC,IAAY,KAAK,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI;cACpD,SAAS;AAEf,QAAA,MAAM,OAAO,GAAG,cAAc,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,SAAS;QACtE,IAAI,CAAC,EAAE,GAAG,IAAI,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAClG,QAAA,IAAI,cAAc;YAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACjF,QAAA,MAAM,OAAO,GAAG,cAAc,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,SAAS;AACtE,QAAA,IAAI,CAAC,EAAE,GAAG,IAAI,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAChE,QAAA,IAAI,cAAc;YAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACjF,QAAA,IAAI,CAAC,OAAO,GAAG,IAAI,gBAAgB,CAAC;YAChC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,EAAE,EAAE,IAAI,CAAC,EAAE;AACX,YAAA,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YAClC,gBAAgB;AACnB,SAAA,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;;;;;;;;;AAU1F,QAAA,MAAM,aAAa,GAAa;AAC5B,YAAA,GAAG,EAAE,OAAO,GAAG,KAAI;AACf,gBAAA,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU;AACjC,gBAAA,IAAI,CAAC,CAAC;AAAE,oBAAA,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC;gBAClE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAC5B,CAAA,cAAA,EAAiB,kBAAkB,CAAC,CAAC,CAAC,CAAA,IAAA,EAAO,kBAAkB,CAAC,GAAG,CAAC,CAAA,IAAA,CAAM,EAC1E,EAAE,CACL;AACD,gBAAA,OAAO,GAAG,EAAE,KAAK,IAAI,IAAI;YAC7B,CAAC;AACD,YAAA,GAAG,EAAE,OAAO,GAAG,EAAE,KAAK,KAAI;AACtB,gBAAA,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU;AACjC,gBAAA,IAAI,CAAC,CAAC;AAAE,oBAAA,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC;gBAClE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,cAAA,EAAiB,kBAAkB,CAAC,CAAC,CAAC,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAA,CAAE,EAAE,EAAE,KAAK,EAAE,CAAC;YAC3G,CAAC;AACD,YAAA,MAAM,EAAE,OAAO,GAAG,KAAI;AAClB,gBAAA,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU;AACjC,gBAAA,IAAI,CAAC,CAAC;AAAE,oBAAA,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC;AAClE,gBAAA,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,kBAAkB,CAAC,CAAC,CAAC,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAA,CAAE,CAAC;YAC/F,CAAC;YACD,IAAI,EAAE,YAAW;AACb,gBAAA,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU;AACjC,gBAAA,IAAI,CAAC,CAAC;AAAE,oBAAA,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC;AAClE,gBAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAC5B,CAAA,cAAA,EAAiB,kBAAkB,CAAC,CAAC,CAAC,OAAO,EAC7C,EAAE,CACL;AACD,gBAAA,OAAO,GAAG,EAAE,IAAI,IAAI,EAAE;YAC1B,CAAC;SACJ;QAED,IAAI,YAAY,GAA0B,IAAI;QAC9C,MAAM,mBAAmB,GAAG,MAAqB;;;YAG7C,IAAI,CAAC,YAAY,EAAE;AACf,gBAAA,YAAY,GAAG,CAAC,YAAW;oBACvB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC;AACvD,oBAAA,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ;wBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;;;;;AAK7E,oBAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;oBAC/E,MAAM,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC;AAChD,oBAAA,OAAO,KAAK;gBAChB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,KAAI;AACf,oBAAA,YAAY,GAAG,IAAI,CAAC;AACpB,oBAAA,MAAM,GAAG;AACb,gBAAA,CAAC,CAAC;YACN;AACA,YAAA,OAAO,YAAY;AACvB,QAAA,CAAC;AAED,QAAA,IAAI,CAAC,GAAG,GAAG,IAAI,YAAY,CAAC;AACxB,YAAA,KAAK,EAAE,aAAa;YACpB,IAAI,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI;;;AAG7B,YAAA,SAAS,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;AAC9C,YAAA,OAAO,EAAE;;;;;;AAML,gBAAA,KAAK,EAAE,OAAO,IAAI,EAAE,IAAI,KAAI;AACxB,oBAAA,MAAM,KAAK,GAAG,MAAM,mBAAmB,EAAE;oBACzC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC1F,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;gBACxC,CAAC;;;;AAID,gBAAA,IAAI,EAAE,OAAO,QAAQ,KAAK,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,IAAI;AAC5E,gBAAA,OAAO,EAAE,OAAO,QAAQ,KAAI;oBACxB,MAAM,CAAC,MAAM,mBAAmB,EAAE,EAAE,WAAW,CAAC,QAAQ,CAAC;gBAC7D,CAAC;AACD,gBAAA,MAAM,EAAE,OAAO,QAAQ,KAAI;oBACvB,MAAM,CAAC,MAAM,mBAAmB,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC;gBAC5D,CAAC;AACJ,aAAA;AACJ,SAAA,CAAC;;;;AAKF,QAAA,IAAI,CAAC,GAAG,GAAG,IAAI,YAAY,CAAC;YACxB,GAAG,EAAE,IAAI,CAAC,GAAG;AACb,YAAA,KAAK,EAAE,aAAa;YACpB,IAAI,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI;YAC7B,MAAM,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,SAAS;AACrD,SAAA,CAAC;;;;;;;;;;AAYF,QAAA,MAAM,aAAa,GAAkB;AACjC,YAAA,QAAQ,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC,GAAG,CAAyB,YAAY,EAAE,OAAO,CAAC;YACjF,QAAQ,EAAE,CAAC,OAAO,EAAE,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;SAC5F;;;;;;AAMD,QAAA,MAAM,YAAY,GAAiB;AAC/B,YAAA,GAAG,EAAE,OAAO,GAAG,KAAI;AACf,gBAAA,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU;AACjC,gBAAA,IAAI,CAAC,CAAC;AAAE,oBAAA,OAAO,IAAI;gBACnB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAC5B,CAAA,cAAA,EAAiB,kBAAkB,CAAC,CAAC,CAAC,CAAA,IAAA,EAAO,kBAAkB,CAAC,GAAG,CAAC,CAAA,IAAA,CAAM,EAC1E,EAAE,CACL;AACD,gBAAA,QAAQ,GAAG,EAAE,KAAK,IAAI,IAAI;YAC9B,CAAC;AACD,YAAA,GAAG,EAAE,OAAO,GAAG,EAAE,KAAK,KAAI;AACtB,gBAAA,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU;AACjC,gBAAA,IAAI,CAAC,CAAC;AAAE,oBAAA,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC;gBACpE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,cAAA,EAAiB,kBAAkB,CAAC,CAAC,CAAC,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAA,CAAE,EAAE,EAAE,KAAK,EAAE,CAAC;YAC3G,CAAC;SACJ;AACD,QAAA,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC;AAE/C,QAAA,IAAI,CAAC,KAAK,GAAG,IAAI,cAAc,CAAC;YAC5B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS;AACT,YAAA,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ;AACX,SAAA,CAAC;AACF,QAAA,IAAI,CAAC,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACtD,IAAI,CAAC,SAAS,GAAG,IAAI,kBAAkB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC;AACvG,QAAA,IAAI,CAAC,YAAY,GAAG,IAAI,qBAAqB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;;;;QAKlE,IAAI,cAAc,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;AAC1C,YAAA,MAAM,YAAY,GAAG,IAAI,WAAW,CAAC;gBACjC,OAAO,EAAE,IAAI,CAAC,OAAO;AACrB,gBAAA,UAAU,EAAE,aAAa;AACzB,gBAAA,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;AACtB,gBAAA,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;AAChC,aAAA,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,KAAK,KAAI;AAClD,gBAAA,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,IAAwB;AAC/C,gBAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAU,CAAC,GAAG,CAAC,IAAI,CAAC;AACrD,gBAAA,IAAI,CAAC,KAAK;AAAE,oBAAA,OAAO;gBACnB,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;AAC5C,YAAA,CAAC,CAAC;QACN;IACJ;;AAGA,IAAA,IAAI,IAAI,GAAA;AACJ,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI;IACzB;;AAGA,IAAA,IAAI,eAAe,GAAA;AACf,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe;IACvC;AAEA;;;;;;;;;AASG;AACH,IAAA,gBAAgB,CAAC,OAAmB,EAAA;AAChC,QAAA,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC;QACxC,OAAO,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC;IAC5D;AAEA;;;;;;AAMG;IACH,cAAc,GAAA;QACV,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC,eAAe;AACrD,QAAA,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC;AAC5B,aAAA,OAAO;AACP,aAAA,IAAI,CAAC,CAAC,EAAE,KAAI;YACT,IAAI,CAAC,EAAE,EAAE;AACL,gBAAA,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,sBAAsB,EAAE;AAC/C,oBAAA,IAAI;AAAE,wBAAA,OAAO,EAAE;oBAAE;AAAE,oBAAA,MAAM,8CAA8C;gBAC3E;YACJ;AACA,YAAA,OAAO,EAAE;AACb,QAAA,CAAC;aACA,OAAO,CAAC,MAAK;AACV,YAAA,IAAI,CAAC,eAAe,GAAG,IAAI;AAC/B,QAAA,CAAC,CAAC;QACN,OAAO,IAAI,CAAC,eAAe;IAC/B;AACH;;ACnfD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCG;AA2DH;AACA;AACA;AACA,MAAM,QAAQ,GAAG,IAAI,OAAO,EAA+B;AAE3D,SAAS,aAAa,CAAC,IAAY,EAAA;IACjC,IAAI,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;IAC1B,IAAI,CAAC,CAAC,EAAE;AACN,QAAA,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;AAC7C,QAAA,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACvB;AACA,IAAA,OAAO,CAAC;AACV;AAEA;AAC8E;AAC9E,SAAS,MAAM,CAAC,MAAc,EAAA;AAC5B,IAAA,OAAO,OAAO,MAAM,KAAK,UAAU,GAAG,MAAM,GAAI,MAAkC,CAAC,WAAW;AAChG;AAEA;;;AAGG;AACG,SAAU,WAAW,CAAC,IAAqB,EAAA;IAC/C,OAAO,CAAC,MAAM,KAAI;AAChB,QAAA,aAAa,CAAC,MAA2B,CAAC,CAAC,KAAK,GAAG,IAAI;AACzD,IAAA,CAAC;AACH;AAEA;AACM,SAAU,WAAW,CAAC,IAAqB,EAAA;AAC/C,IAAA,QAAQ,CAAC,MAAc,EAAE,WAA4B,KAAI;QACvD,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;YACxC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,CAAC;YACtC,WAAW,EAAE,IAAI,CAAC,WAAW;AAC9B,SAAA,CAAC;AACJ,IAAA,CAAC;AACH;AAEA;AACM,SAAU,QAAQ,CAAC,IAAkB,EAAA;AACzC,IAAA,QAAQ,CAAC,MAAc,EAAE,WAA4B,KAAI;QACvD,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;YACxC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,WAAW,CAAC;AACxC,YAAA,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;AAC7B,YAAA,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK;AAC/B,SAAA,CAAC;AACJ,IAAA,CAAC;AACH;AAEA;AACM,SAAU,cAAc,CAAC,IAAwB,EAAA;AACrD,IAAA,QAAQ,CAAC,MAAc,EAAE,WAA4B,KAAI;QACvD,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;YAC3C,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,CAAC;YACtC,WAAW,EAAE,IAAI,CAAC,WAAW;AAC9B,SAAA,CAAC;AACJ,IAAA,CAAC;AACH;AAEA;AACM,SAAU,sBAAsB,CAAC,QAAkB,EAAA;AACvD,IAAA,OAAO,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC/B;AAEA;;;;AAIG;AACG,SAAU,gBAAgB,CAAC,QAAkB,EAAA;IACjD,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;IAChC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE;AAClB,QAAA,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC;IACpF;AACA,IAAA,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC;IACnB,MAAM,KAAK,GAAa,EAAE;AAC1B,IAAA,KAAK,CAAC,IAAI,CAAC,CAAA,QAAA,EAAW,KAAK,CAAC,IAAI,CAAA,EAAA,EAAK,KAAK,CAAC,OAAO,CAAA,CAAE,CAAC,IAAI,EAAE,CAAC;AAE5D,IAAA,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE;AAC1B,QAAA,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC;AAC3B,QAAA,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ;AAAE,YAAA,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA,CAAE,CAAC;IACtD;AAEA,IAAA,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE;AACnB,QAAA,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,gFAAgF,CAAC;AAChG,QAAA,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM;AAAE,YAAA,KAAK,CAAC,IAAI,CAAC,CAAA,EAAA,EAAK,CAAC,CAAC,IAAI,CAAA,EAAA,EAAK,CAAC,CAAC,WAAW,CAAA,CAAE,CAAC;IACvE;;;AAIA,IAAA,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;AACvD,IAAA,IAAI,YAAY,CAAC,MAAM,EAAE;AACvB,QAAA,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,sBAAsB,CAAC;AACtC,QAAA,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE;AAC5B,YAAA,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,KAAK;AACzB,kBAAE;kBACA,6BAA6B;AACjC,YAAA,KAAK,CAAC,IAAI,CAAC,CAAA,EAAA,EAAK,CAAC,CAAC,KAAK,CAAA,EAAA,EAAK,KAAK,MAAM,CAAC,CAAC,WAAW,CAAA,CAAE,CAAC;QACzD;IACF;AAEA,IAAA,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE;AACtB,QAAA,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,8CAA8C,CAAC;AAC9D,QAAA,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS;AAAE,YAAA,KAAK,CAAC,IAAI,CAAC,CAAA,EAAA,EAAK,CAAC,CAAC,IAAI,CAAA,EAAA,EAAK,CAAC,CAAC,WAAW,CAAA,CAAE,CAAC;IAC1E;AAEA,IAAA,IAAI,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE;AAC9B,QAAA,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IAC3C;;;;AAKA,IAAA,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;AAClE,IAAA,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,iBAAiB,CAAC;IACjC,IAAI,QAAQ,EAAE;AACZ,QAAA,KAAK,CAAC,IAAI,CACR,gKAAgK,EAChK,8IAA8I,CAC/I;IACH;AACA,IAAA,KAAK,CAAC,IAAI,CACR,oKAAoK,EACpK,kHAAkH,CACnH;AAED,IAAA,KAAK,CAAC,IAAI,CACR,EAAE,EACF,qMAAqM,CACtM;AAED,IAAA,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;AACzB;AASA;;;;;;;;AAQG;AACG,SAAU,eAAe,CAAC,QAAkB,EAAE,IAAiC,EAAA;IACnF,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;IAChC,IAAI,CAAC,CAAC,EAAE;AACN,QAAA,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC;IACnF;AACA,IAAA,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC;IAC3D,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM;IACxE,OAAO;QACL,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAC7E,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE;AAClD,QAAA,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;AACzC,QAAA,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;AAC7B,QAAA,aAAa,EAAE,IAAI,EAAE,aAAa,IAAI,CAAC;KACxC;AACH;;ACrQA;;;;;;;;;;;AAWG;SAaa,QAAQ,GAAA;AACpB,IAAA,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;AACzD;AAEA;SACgB,YAAY,CAAC,GAAW,EAAE,MAA+B,EAAE,GAAW,EAAA;AAClF,IAAA,MAAM,IAAI,GAAW;AACjB,QAAA,MAAM,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE;AACzB,QAAA,SAAS,EAAE,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE;QAC/B,SAAS,EAAE,GAAG,CAAC,SAAS;KAC3B;AACD,IAAA,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;AAChC,QAAA,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE;AACpC,YAAA,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK;AACxB,YAAA,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,GAAG;QAC7B;IACJ;AACA,IAAA,OAAO,IAAI;AACf;AAEA;AACM,SAAU,YAAY,CAAC,GAAW,EAAE,GAAW,EAAA;IACjD,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,SAAS;IAC5F,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE;AACpF;AAEA;AACM,SAAU,QAAQ,CAAC,CAAS,EAAE,CAAS,EAAA;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAChF,IAAA,MAAM,GAAG,GAAG,QAAQ,EAAE;AACtB,IAAA,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;QACpB,MAAM,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC;QAC3B,MAAM,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC;AAC3B,QAAA,MAAM,KAAK,GAAG,EAAE,KAAK,CAAC,EAAE,IAAI,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,GAAG,CAAC;AAC5B,QAAA,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;AACpC,QAAA,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;IAC9C;AACA,IAAA,GAAG,CAAC,SAAS;AACT,QAAA,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;AACb,cAAE,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI;kBACpC,CAAC,CAAC;kBACF,CAAC,CAAC;eACL,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,CAAC;AACtC,IAAA,OAAO,GAAG;AACd;AAEA;;;;;AAKG;AACG,SAAU,cAAc,CAAC,GAAW,EAAA;IACtC,MAAM,OAAO,GAA4B,EAAE;IAC3C,IAAI,GAAG,GAAG,KAAK;AACf,IAAA,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE;AACpD,QAAA,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE;YACtD,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAC9B,GAAG,GAAG,IAAI;QACd;IACJ;IACA,OAAO,GAAG,GAAG,OAAO,GAAG,IAAI;AAC/B;;ACxFA;;;;;;;;;;;;AAYG;AAIH;;;;;AAKG;AACG,SAAU,mBAAmB,CAAC,QAAgB,EAAE,YAA2B,EAAA;AAC7E,IAAA,IAAI,CAAC,YAAY;AAAE,QAAA,OAAO,IAAI;IAC9B,OAAO,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC;AACjD;AAEA;;;;;AAKG;AACG,SAAU,gBAAgB,CAAC,SAAiB,EAAE,QAAuB,EAAA;AACvE,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,IAAI;IAC1B,OAAO,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC;AAC/C;;ACpCA;;;;;;;;;;;AAWG;AAyCH;;;;AAIG;MACU,mBAAmB,CAAA;AACC,IAAA,IAAA;AAA7B,IAAA,WAAA,CAA6B,IAA6B,EAAA;QAA7B,IAAA,CAAA,IAAI,GAAJ,IAAI;IAA4B;IAE7D,MAAM,IAAI,CAAC,iBAAyB,EAAA;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;QAC1C,IAAI,CAAC,SAAS,EAAE;AACZ,YAAA,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;QAC3E;AACA,QAAA,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CACxD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAClB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAClB,SAAS,EACT,iBAAiB,EACjB,KAAK;AACL,QAAA,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB;AACD,QAAA,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE;IAC5E;AAEA,IAAA,OAAO,CAAC,OAAsB,EAAA;QAC1B,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,IAAI,OAAO,EAAE,aAAa,CAAC;IAC3D;IAEA,MAAM,IAAI,CAAC,OAAsB,EAAA;AAC7B,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAAE,YAAA,OAAO,IAAI;QACvC,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,OAAQ,CAAC,aAAuB,CAAkB;AACnF,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;IACtF;AACH;;ACnFD,MAAMiB,WAAS,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC;AAChD,UAAU,CAAC,SAAS,GAAGA,WAAS;;;;ACHhC;;;;;;;;;;;;AAYG;;;;;;;;;"}