@namzu/cli 30.0.0 → 33.0.0

package/dist/integrations/mcp/oauth-store.js

@@ -0,0 +1,549 @@
+/**
+ * Namzu-owned MCP OAuth state. Each complete resource endpoint has its own
+ * private file: a token for one path or query must never be sent to another.
+ * Discovery and PKCE state share that file so a browser round trip cannot
+ * accidentally resume against a different authorization server.
+ */
+import { createHash, randomBytes, timingSafeEqual } from 'node:crypto';
+import { closeSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, renameSync, rmSync, writeSync, } from 'node:fs';
+import { platform } from 'node:os';
+import { basename, dirname, join } from 'node:path';
+import { restrictToOwner } from '../providers/credential-store.js';
+import { namzuHomePath } from '../state/home.js';
+const FILE_MODE = 0o600;
+const DIR_MODE = 0o700;
+const PENDING_LIFETIME_MS = 10 * 60 * 1000;
+export class McpOAuthStoreError extends Error {
+    name = 'McpOAuthStoreError';
+}
+export class McpOAuthLoginRequiredError extends Error {
+    name = 'McpOAuthLoginRequiredError';
+    constructor() {
+        super('MCP authorization requires `namzu mcp login <name>`.');
+    }
+}
+function normalizedEndpoint(value) {
+    if (value !== value.trim())
+        throw new McpOAuthStoreError('Invalid MCP OAuth endpoint.');
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new McpOAuthStoreError('Invalid MCP OAuth endpoint.');
+    }
+    if (!isSecureMcpOAuthUrl(url)) {
+        throw new McpOAuthStoreError('MCP OAuth requires HTTPS or a loopback HTTP endpoint without embedded credentials or a fragment.');
+    }
+    return url.href;
+}
+/** Shared network policy for interactive sign-in and background token refresh. */
+export function isSecureMcpOAuthUrl(url) {
+    return ((url.protocol === 'https:' ||
+        (url.protocol === 'http:' && ['localhost', '127.0.0.1', '[::1]'].includes(url.hostname))) &&
+        !url.username &&
+        !url.password &&
+        !url.hash);
+}
+function normalizedRedirect(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new McpOAuthStoreError('Invalid MCP OAuth callback URL.');
+    }
+    if (!isSecureMcpOAuthUrl(url)) {
+        throw new McpOAuthStoreError('MCP OAuth callback must use HTTPS or loopback HTTP.');
+    }
+    return url.href;
+}
+/** A hash keeps possibly secret URL path and query values out of file names. */
+export function mcpOAuthPath(endpoint, home) {
+    const exact = normalizedEndpoint(endpoint);
+    const key = createHash('sha256').update(exact).digest('hex');
+    return join(namzuHomePath(home), 'mcp-oauth', `${key}.json`);
+}
+function ensurePrivateDirectory(file, home) {
+    const appHome = namzuHomePath(home);
+    const storeDir = dirname(file);
+    mkdirSync(appHome, { recursive: true, mode: DIR_MODE });
+    assertRealDirectory(appHome);
+    if (platform() === 'win32')
+        restrictToOwner(appHome);
+    mkdirSync(storeDir, { recursive: true, mode: DIR_MODE });
+    assertRealDirectory(storeDir);
+    restrictToOwner(storeDir);
+}
+function assertRealDirectory(path) {
+    const entry = lstatSync(path);
+    if (!entry.isDirectory() || entry.isSymbolicLink()) {
+        throw new McpOAuthStoreError('MCP OAuth credentials require a real private directory.');
+    }
+}
+function existingEntry(path) {
+    try {
+        return lstatSync(path);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    }
+}
+function checkPrivateDirectoryForRead(file, home) {
+    const appHome = namzuHomePath(home);
+    const storeDir = dirname(file);
+    if (!existingEntry(appHome))
+        return false;
+    assertRealDirectory(appHome);
+    if (platform() === 'win32')
+        restrictToOwner(appHome);
+    if (!existingEntry(storeDir))
+        return false;
+    assertRealDirectory(storeDir);
+    restrictToOwner(storeDir);
+    return true;
+}
+function readRecord(endpoint, home) {
+    const exact = normalizedEndpoint(endpoint);
+    const file = mcpOAuthPath(exact, home);
+    if (!checkPrivateDirectoryForRead(file, home))
+        return null;
+    const entry = existingEntry(file);
+    if (!entry)
+        return null;
+    if (!entry.isFile() || entry.isSymbolicLink()) {
+        throw new McpOAuthStoreError('MCP OAuth credential file must be a regular file.');
+    }
+    restrictToOwner(file);
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(file, 'utf8'));
+    }
+    catch {
+        throw new McpOAuthStoreError('MCP OAuth credential file is invalid.');
+    }
+    if (!isRecord(parsed) || parsed.version !== 1 || parsed.endpoint !== exact) {
+        throw new McpOAuthStoreError('MCP OAuth credential file does not match its endpoint.');
+    }
+    const issuer = parsed.issuer;
+    if (issuer !== undefined && !nonempty(issuer)) {
+        throw new McpOAuthStoreError('MCP OAuth credential issuer is invalid.');
+    }
+    const client = parsed.clientInformation;
+    if (client !== undefined &&
+        (!isRecord(client) ||
+            !nonempty(client.client_id) ||
+            !nonempty(client.issuer) ||
+            client.issuer !== issuer)) {
+        throw new McpOAuthStoreError('MCP OAuth client information has no matching issuer stamp.');
+    }
+    const tokens = parsed.tokens;
+    if (tokens !== undefined &&
+        (!isRecord(tokens) ||
+            !nonempty(tokens.access_token) ||
+            !nonempty(tokens.token_type) ||
+            tokens.token_type.toLowerCase() !== 'bearer' ||
+            !nonempty(tokens.issuer) ||
+            tokens.issuer !== issuer)) {
+        throw new McpOAuthStoreError('MCP OAuth tokens have no matching issuer stamp.');
+    }
+    if (parsed.redirectUrl !== undefined && !nonempty(parsed.redirectUrl)) {
+        throw new McpOAuthStoreError('MCP OAuth callback URL is invalid.');
+    }
+    if (typeof parsed.redirectUrl === 'string')
+        normalizedRedirect(parsed.redirectUrl);
+    if (tokens !== undefined && client === undefined) {
+        throw new McpOAuthStoreError('MCP OAuth tokens have no client registration.');
+    }
+    if (parsed.discovery !== undefined)
+        checkedDiscovery(parsed.discovery);
+    if (parsed.pending !== undefined)
+        checkedPending(parsed.pending);
+    return parsed;
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function nonempty(value) {
+    return typeof value === 'string' && value.length > 0;
+}
+function checkedDiscovery(value) {
+    if (!isRecord(value) || !nonempty(value.authorizationServerUrl)) {
+        throw new McpOAuthStoreError('MCP OAuth discovery state is invalid.');
+    }
+    const metadata = value.authorizationServerMetadata;
+    if (metadata !== undefined && (!isRecord(metadata) || !nonempty(metadata.issuer))) {
+        throw new McpOAuthStoreError('MCP OAuth authorization server issuer is invalid.');
+    }
+    normalizedEndpoint(value.authorizationServerUrl);
+    return value;
+}
+function checkedPending(value) {
+    if (!isRecord(value) ||
+        !nonempty(value.state) ||
+        (typeof value.codeVerifier !== 'undefined' && !nonempty(value.codeVerifier)) ||
+        typeof value.createdAt !== 'number' ||
+        !Number.isFinite(value.createdAt) ||
+        typeof value.consumed !== 'boolean' ||
+        (value.baseTokens !== null && !nonempty(value.baseTokens)) ||
+        (value.baseClient !== null && !nonempty(value.baseClient))) {
+        throw new McpOAuthStoreError('MCP OAuth login state is invalid.');
+    }
+    checkedDiscovery(value.discovery);
+    return value;
+}
+function writeRecord(file, record) {
+    const temp = `${file}.tmp.${process.pid}.${randomBytes(12).toString('hex')}`;
+    let descriptor;
+    try {
+        const previous = existingEntry(file);
+        if (previous) {
+            if (!previous.isFile() || previous.isSymbolicLink()) {
+                throw new McpOAuthStoreError('MCP OAuth credential file must be a regular file.');
+            }
+        }
+        descriptor = openSync(temp, 'wx', FILE_MODE);
+        // Windows file modes do not prove ACL privacy. Secure the empty file first.
+        restrictToOwner(temp);
+        const body = Buffer.from(`${JSON.stringify(record)}\n`, 'utf8');
+        for (let offset = 0; offset < body.length;) {
+            const written = writeSync(descriptor, body, offset, body.length - offset);
+            if (written <= 0)
+                throw new McpOAuthStoreError('Could not write MCP OAuth credentials.');
+            offset += written;
+        }
+        fsyncSync(descriptor);
+        closeSync(descriptor);
+        descriptor = undefined;
+        restrictToOwner(temp);
+        renameSync(temp, file);
+    }
+    catch (error) {
+        if (descriptor !== undefined)
+            closeSync(descriptor);
+        rmSync(temp, { force: true });
+        if (error instanceof McpOAuthStoreError)
+            throw error;
+        throw new McpOAuthStoreError('Could not store MCP OAuth credentials privately.');
+    }
+}
+function withRecordLock(endpoint, home, work, options = {}) {
+    const exact = normalizedEndpoint(endpoint);
+    const file = mcpOAuthPath(exact, home);
+    ensurePrivateDirectory(file, home);
+    const lock = `${file}.lock`;
+    const token = randomBytes(32).toString('hex');
+    let descriptor;
+    try {
+        descriptor = openSync(lock, 'wx', FILE_MODE);
+        restrictToOwner(lock);
+        const bytes = Buffer.from(token, 'utf8');
+        for (let offset = 0; offset < bytes.length;) {
+            const written = writeSync(descriptor, bytes, offset, bytes.length - offset);
+            if (written <= 0)
+                throw new McpOAuthStoreError('Could not write MCP OAuth store lock.');
+            offset += written;
+        }
+        fsyncSync(descriptor);
+        closeSync(descriptor);
+        descriptor = undefined;
+    }
+    catch {
+        if (descriptor !== undefined) {
+            closeSync(descriptor);
+            try {
+                rmSync(lock, { force: true });
+            }
+            catch {
+                // The next writer will refuse the unproven lock.
+            }
+        }
+        throw new McpOAuthStoreError('MCP OAuth credential store is locked or cannot be made private.');
+    }
+    try {
+        removeOwnTemporaryFiles(file);
+        return work(options.skipRead
+            ? { version: 1, endpoint: exact }
+            : (readRecord(exact, home) ?? { version: 1, endpoint: exact }));
+    }
+    finally {
+        // Never remove a lock replaced by another owner.
+        try {
+            if (readFileSync(lock, 'utf8') === token)
+                rmSync(lock, { force: true });
+        }
+        catch {
+            // A missing or replaced lock does not undo the credential write.
+        }
+    }
+}
+/** Only the endpoint lock owner may remove its private crash leftovers. */
+function removeOwnTemporaryFiles(file) {
+    const prefix = `${basename(file)}.tmp.`;
+    for (const entry of readdirSync(dirname(file))) {
+        if (!entry.startsWith(prefix) || !/^\d+\.[0-9a-f]{24}$/u.test(entry.slice(prefix.length))) {
+            continue;
+        }
+        rmSync(join(dirname(file), entry), { force: true });
+    }
+}
+function updateRecord(endpoint, home, transform) {
+    withRecordLock(endpoint, home, (record) => {
+        writeRecord(mcpOAuthPath(endpoint, home), transform(record));
+    });
+}
+function discoveryIssuer(state) {
+    return state.authorizationServerMetadata?.issuer ?? state.authorizationServerUrl;
+}
+function fingerprint(value) {
+    return value === undefined
+        ? null
+        : createHash('sha256').update(JSON.stringify(value)).digest('hex');
+}
+/** True only for a private, issuer-stamped token belonging to this exact URL. */
+export function hasMcpOAuthTokens(endpoint, home) {
+    const record = readRecord(endpoint, home);
+    return !!(record?.issuer && record.tokens?.issuer === record.issuer);
+}
+/** Validate and consume state before passing callback parameters to `finishAuth`. */
+export function consumeMcpOAuthCallbackState(endpoint, state, home) {
+    withRecordLock(endpoint, home, (record) => {
+        const pending = record.pending;
+        if (!pending ||
+            pending.consumed ||
+            !pending.codeVerifier ||
+            Date.now() - pending.createdAt > PENDING_LIFETIME_MS ||
+            pending.createdAt > Date.now() ||
+            fingerprint(record.clientInformation) !== pending.baseClient ||
+            !state ||
+            !sameSecret(state, pending.state)) {
+            throw new McpOAuthStoreError('MCP OAuth callback state is invalid or expired.');
+        }
+        writeRecord(mcpOAuthPath(endpoint, home), {
+            ...record,
+            pending: { ...pending, consumed: true },
+        });
+    });
+}
+function sameSecret(left, right) {
+    const a = Buffer.from(left);
+    const b = Buffer.from(right);
+    return a.length === b.length && timingSafeEqual(a, b);
+}
+export function clearMcpOAuthPending(endpoint, home) {
+    withRecordLock(endpoint, home, (record) => {
+        if (!record.pending)
+            return;
+        const { pending: _pending, ...rest } = record;
+        writeRecord(mcpOAuthPath(endpoint, home), rest);
+    });
+}
+/** Remove only this URL's credentials; another server on the same host survives. */
+export function clearMcpOAuthCredentials(endpoint, home) {
+    return withRecordLock(endpoint, home, (record) => {
+        const file = mcpOAuthPath(endpoint, home);
+        const entry = existingEntry(file);
+        if (!entry)
+            return false;
+        if (!entry.isFile() || entry.isSymbolicLink()) {
+            throw new McpOAuthStoreError('MCP OAuth credential file must be a regular file.');
+        }
+        if (record.endpoint !== normalizedEndpoint(endpoint)) {
+            throw new McpOAuthStoreError('MCP OAuth credential endpoint mismatch.');
+        }
+        rmSync(file);
+        return true;
+    }, { skipRead: true });
+}
+/** The official MCP client consumes this provider for login and token refresh. */
+export function createMcpOAuthProvider(options) {
+    const endpoint = normalizedEndpoint(options.endpoint);
+    const interactive = options.onRedirect !== undefined;
+    if (interactive !== (options.redirectUrl !== undefined)) {
+        throw new McpOAuthStoreError('Interactive MCP OAuth requires a callback and browser opener together.');
+    }
+    const requestedRedirect = options.redirectUrl
+        ? normalizedRedirect(options.redirectUrl)
+        : undefined;
+    const initial = readRecord(endpoint, options.home);
+    const redirect = requestedRedirect ?? initial?.redirectUrl;
+    if (!redirect)
+        throw new McpOAuthLoginRequiredError();
+    const home = options.home;
+    let observedTokens;
+    let observedClient;
+    return {
+        get redirectUrl() {
+            return redirect;
+        },
+        get clientMetadata() {
+            return { redirect_uris: [redirect], client_name: 'Namzu', application_type: 'native' };
+        },
+        state() {
+            if (!interactive)
+                throw new McpOAuthLoginRequiredError();
+            const state = randomBytes(32).toString('base64url');
+            updateRecord(endpoint, home, (record) => {
+                if (!record.discovery) {
+                    throw new McpOAuthStoreError('MCP OAuth discovery is missing before redirect.');
+                }
+                return {
+                    ...record,
+                    pending: {
+                        state,
+                        createdAt: Date.now(),
+                        consumed: false,
+                        discovery: record.discovery,
+                        baseTokens: fingerprint(record.tokens),
+                        baseClient: fingerprint(record.clientInformation),
+                    },
+                };
+            });
+            return state;
+        },
+        clientInformation(ctx) {
+            const record = readRecord(endpoint, home);
+            if (ctx)
+                observedClient = fingerprint(record?.clientInformation);
+            if (!ctx?.issuer || !record?.issuer || record.issuer !== ctx.issuer)
+                return undefined;
+            if (requestedRedirect && record.redirectUrl !== requestedRedirect)
+                return undefined;
+            return record.clientInformation?.issuer === ctx.issuer ? record.clientInformation : undefined;
+        },
+        saveClientInformation(info, ctx) {
+            if (!interactive)
+                throw new McpOAuthLoginRequiredError();
+            if (!ctx?.issuer || info.issuer !== ctx.issuer || !nonempty(info.client_id)) {
+                throw new McpOAuthStoreError('MCP OAuth client information is missing its issuer stamp.');
+            }
+            updateRecord(endpoint, home, (record) => {
+                if (observedClient === undefined ||
+                    fingerprint(record.clientInformation) !== observedClient) {
+                    throw new McpOAuthStoreError('MCP OAuth client registration changed during authorization.');
+                }
+                const priorClient = record.clientInformation;
+                const replacing = record.issuer !== ctx.issuer ||
+                    record.redirectUrl !== redirect ||
+                    priorClient?.client_id !== info.client_id;
+                return {
+                    ...record,
+                    issuer: ctx.issuer,
+                    redirectUrl: redirect,
+                    clientInformation: info,
+                    ...(replacing ? { tokens: undefined } : {}),
+                };
+            });
+            observedClient = fingerprint(info);
+            observedTokens = null;
+        },
+        tokens(ctx) {
+            const record = readRecord(endpoint, home);
+            const tokens = record?.issuer &&
+                (!ctx || ctx.issuer === record.issuer) &&
+                record.tokens?.issuer === record.issuer
+                ? record.tokens
+                : undefined;
+            if (ctx)
+                observedTokens = fingerprint(record?.tokens);
+            return tokens;
+        },
+        saveTokens(tokens, ctx) {
+            if (!ctx?.issuer ||
+                tokens.issuer !== ctx.issuer ||
+                !nonempty(tokens.access_token) ||
+                !nonempty(tokens.token_type) ||
+                tokens.token_type.toLowerCase() !== 'bearer') {
+                throw new McpOAuthStoreError('MCP OAuth requires issuer-stamped Bearer tokens.');
+            }
+            updateRecord(endpoint, home, (record) => {
+                if (record.issuer !== ctx.issuer || record.clientInformation?.issuer !== ctx.issuer) {
+                    throw new McpOAuthStoreError('MCP OAuth token issuer does not match its client registration.');
+                }
+                const expected = record.pending?.consumed ? record.pending.baseTokens : observedTokens;
+                if (expected === undefined || fingerprint(record.tokens) !== expected) {
+                    throw new McpOAuthStoreError('MCP OAuth credential changed during token refresh.');
+                }
+                if (record.pending?.consumed &&
+                    fingerprint(record.clientInformation) !== record.pending.baseClient) {
+                    throw new McpOAuthStoreError('MCP OAuth client registration changed during authorization.');
+                }
+                return { ...record, tokens };
+            });
+            observedTokens = fingerprint(tokens);
+        },
+        redirectToAuthorization(url) {
+            if (!options.onRedirect)
+                throw new McpOAuthLoginRequiredError();
+            return options.onRedirect(url);
+        },
+        saveCodeVerifier(codeVerifier) {
+            if (!interactive || !nonempty(codeVerifier))
+                throw new McpOAuthLoginRequiredError();
+            updateRecord(endpoint, home, (record) => {
+                if (!record.pending || record.pending.consumed) {
+                    throw new McpOAuthStoreError('MCP OAuth login state is missing.');
+                }
+                return { ...record, pending: { ...record.pending, codeVerifier } };
+            });
+        },
+        codeVerifier() {
+            const pending = readRecord(endpoint, home)?.pending;
+            if (!pending?.consumed || !pending.codeVerifier) {
+                throw new McpOAuthStoreError('MCP OAuth callback state has not been verified.');
+            }
+            return pending.codeVerifier;
+        },
+        saveDiscoveryState(state) {
+            checkedDiscovery(state);
+            updateRecord(endpoint, home, (record) => ({ ...record, discovery: state }));
+        },
+        discoveryState() {
+            const record = readRecord(endpoint, home);
+            // The callback must reuse the exact discovery snapshot that generated
+            // its authorization URL, even if another process refreshed the cache.
+            return record?.pending?.consumed ? record.pending.discovery : record?.discovery;
+        },
+        invalidateCredentials(scope) {
+            if (scope === 'all') {
+                clearMcpOAuthCredentials(endpoint, home);
+                return;
+            }
+            updateRecord(endpoint, home, (record) => {
+                if (scope === 'tokens') {
+                    if (observedTokens === undefined || fingerprint(record.tokens) !== observedTokens) {
+                        throw new McpOAuthStoreError('MCP OAuth credential changed during token refresh.');
+                    }
+                    return { ...record, tokens: undefined };
+                }
+                if (scope === 'client') {
+                    if (observedClient === undefined ||
+                        fingerprint(record.clientInformation) !== observedClient) {
+                        throw new McpOAuthStoreError('MCP OAuth client registration changed during authorization.');
+                    }
+                    return { ...record, clientInformation: undefined, tokens: undefined, issuer: undefined };
+                }
+                if (scope === 'verifier')
+                    return { ...record, pending: undefined };
+                return { ...record, discovery: undefined, pending: undefined };
+            });
+            if (scope === 'client') {
+                observedClient = null;
+                observedTokens = null;
+            }
+            else if (scope === 'tokens') {
+                observedTokens = null;
+            }
+        },
+    };
+}
+/** The authorization-server identity captured before the browser opened. */
+export function pendingMcpOAuthIssuer(endpoint, home) {
+    const pending = readRecord(endpoint, home)?.pending;
+    return pending && Date.now() - pending.createdAt <= PENDING_LIFETIME_MS
+        ? discoveryIssuer(pending.discovery)
+        : null;
+}
+//# sourceMappingURL=oauth-store.js.map

package/dist/integrations/mcp/oauth-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-store.js","sourceRoot":"","sources":["../../../src/integrations/mcp/oauth-store.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACtE,OAAO,EACN,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,UAAU,EACV,MAAM,EACN,SAAS,GACT,MAAM,SAAS,CAAA;AAEhB,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAWnD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAA;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAEhD,MAAM,SAAS,GAAG,KAAK,CAAA;AACvB,MAAM,QAAQ,GAAG,KAAK,CAAA;AACtB,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAE1C,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC1B,IAAI,GAAG,oBAAoB,CAAA;CAC7C;AAED,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAClC,IAAI,GAAG,4BAA4B,CAAA;IACrD;QACC,KAAK,CAAC,sDAAsD,CAAC,CAAA;IAC9D,CAAC;CACD;AAoCD,SAAS,kBAAkB,CAAC,KAAa;IACxC,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,kBAAkB,CAAC,6BAA6B,CAAC,CAAA;IACvF,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACJ,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,kBAAkB,CAAC,6BAA6B,CAAC,CAAA;IAC5D,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,kBAAkB,CAC3B,kGAAkG,CAClG,CAAA;IACF,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAA;AAChB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,GAAQ;IAC3C,OAAO,CACN,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1F,CAAC,GAAG,CAAC,QAAQ;QACb,CAAC,GAAG,CAAC,QAAQ;QACb,CAAC,GAAG,CAAC,IAAI,CACT,CAAA;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACxC,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACJ,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,kBAAkB,CAAC,iCAAiC,CAAC,CAAA;IAChE,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,kBAAkB,CAAC,qDAAqD,CAAC,CAAA;IACpF,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAA;AAChB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,IAAa;IAC3D,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IAC1C,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC5D,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,GAAG,OAAO,CAAC,CAAA;AAC7D,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,IAAa;IAC1D,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9B,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IACvD,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAC5B,IAAI,QAAQ,EAAE,KAAK,OAAO;QAAE,eAAe,CAAC,OAAO,CAAC,CAAA;IACpD,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IACxD,mBAAmB,CAAC,QAAQ,CAAC,CAAA;IAC7B,eAAe,CAAC,QAAQ,CAAC,CAAA;AAC1B,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC7B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,kBAAkB,CAAC,yDAAyD,CAAC,CAAA;IACxF,CAAC;AACF,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IAClC,IAAI,CAAC;QACJ,OAAO,SAAS,CAAC,IAAI,CAAC,CAAA;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QACnE,MAAM,KAAK,CAAA;IACZ,CAAC;AACF,CAAC;AAED,SAAS,4BAA4B,CAAC,IAAY,EAAE,IAAa;IAChE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IACzC,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAC5B,IAAI,QAAQ,EAAE,KAAK,OAAO;QAAE,eAAe,CAAC,OAAO,CAAC,CAAA;IACpD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAA;IAC1C,mBAAmB,CAAC,QAAQ,CAAC,CAAA;IAC7B,eAAe,CAAC,QAAQ,CAAC,CAAA;IACzB,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,IAAa;IAClD,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACtC,IAAI,CAAC,4BAA4B,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1D,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,kBAAkB,CAAC,mDAAmD,CAAC,CAAA;IAClF,CAAC;IACD,eAAe,CAAC,IAAI,CAAC,CAAA;IACrB,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IAChD,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,kBAAkB,CAAC,uCAAuC,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC5E,MAAM,IAAI,kBAAkB,CAAC,wDAAwD,CAAC,CAAA;IACvF,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC5B,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,kBAAkB,CAAC,yCAAyC,CAAC,CAAA;IACxE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAA;IACvC,IACC,MAAM,KAAK,SAAS;QACpB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjB,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;YAC3B,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;YACxB,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,EACzB,CAAC;QACF,MAAM,IAAI,kBAAkB,CAAC,4DAA4D,CAAC,CAAA;IAC3F,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC5B,IACC,MAAM,KAAK,SAAS;QACpB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjB,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC;YAC9B,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;YAC5B,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,QAAQ;YAC5C,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;YACxB,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,EACzB,CAAC;QACF,MAAM,IAAI,kBAAkB,CAAC,iDAAiD,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QAAE,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAClF,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,kBAAkB,CAAC,+CAA+C,CAAC,CAAA;IAC9E,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACtE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAChE,OAAO,MAAgC,CAAA;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;AACrD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,kBAAkB,CAAC,uCAAuC,CAAC,CAAA;IACtE,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,2BAA2B,CAAA;IAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,kBAAkB,CAAC,mDAAmD,CAAC,CAAA;IAClF,CAAC;IACD,kBAAkB,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAA;IAChD,OAAO,KAAuC,CAAA;AAC/C,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACrC,IACC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QACtB,CAAC,OAAO,KAAK,CAAC,YAAY,KAAK,WAAW,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC5E,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;QACjC,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS;QACnC,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC1D,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EACzD,CAAC;QACF,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,CAAC,CAAA;IAClE,CAAC;IACD,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACjC,OAAO,KAAwC,CAAA;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,MAAmB;IACrD,MAAM,IAAI,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;IAC5E,IAAI,UAA8B,CAAA;IAClC,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;QACpC,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;gBACrD,MAAM,IAAI,kBAAkB,CAAC,mDAAmD,CAAC,CAAA;YAClF,CAAC;QACF,CAAC;QACD,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;QAC5C,4EAA4E;QAC5E,eAAe,CAAC,IAAI,CAAC,CAAA;QACrB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC/D,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,GAAI,CAAC;YAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAA;YACzE,IAAI,OAAO,IAAI,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,wCAAwC,CAAC,CAAA;YACxF,MAAM,IAAI,OAAO,CAAA;QAClB,CAAC;QACD,SAAS,CAAC,UAAU,CAAC,CAAA;QACrB,SAAS,CAAC,UAAU,CAAC,CAAA;QACrB,UAAU,GAAG,SAAS,CAAA;QACtB,eAAe,CAAC,IAAI,CAAC,CAAA;QACrB,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS,CAAC,UAAU,CAAC,CAAA;QACnD,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7B,IAAI,KAAK,YAAY,kBAAkB;YAAE,MAAM,KAAK,CAAA;QACpD,MAAM,IAAI,kBAAkB,CAAC,kDAAkD,CAAC,CAAA;IACjF,CAAC;AACF,CAAC;AAED,SAAS,cAAc,CACtB,QAAgB,EAChB,IAAwB,EACxB,IAAgC,EAChC,UAA2C,EAAE;IAE7C,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACtC,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAClC,MAAM,IAAI,GAAG,GAAG,IAAI,OAAO,CAAA;IAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC7C,IAAI,UAA8B,CAAA;IAClC,IAAI,CAAC;QACJ,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;QAC5C,eAAe,CAAC,IAAI,CAAC,CAAA;QACrB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACxC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,GAAI,CAAC;YAC9C,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAA;YAC3E,IAAI,OAAO,IAAI,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,uCAAuC,CAAC,CAAA;YACvF,MAAM,IAAI,OAAO,CAAA;QAClB,CAAC;QACD,SAAS,CAAC,UAAU,CAAC,CAAA;QACrB,SAAS,CAAC,UAAU,CAAC,CAAA;QACrB,UAAU,GAAG,SAAS,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACR,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC9B,SAAS,CAAC,UAAU,CAAC,CAAA;YACrB,IAAI,CAAC;gBACJ,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACR,iDAAiD;YAClD,CAAC;QACF,CAAC;QACD,MAAM,IAAI,kBAAkB,CAAC,iEAAiE,CAAC,CAAA;IAChG,CAAC;IACD,IAAI,CAAC;QACJ,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAC7B,OAAO,IAAI,CACV,OAAO,CAAC,QAAQ;YACf,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;YACjC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAC/D,CAAA;IACF,CAAC;YAAS,CAAC;QACV,iDAAiD;QACjD,IAAI,CAAC;YACJ,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,KAAK;gBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACxE,CAAC;QAAC,MAAM,CAAC;YACR,iEAAiE;QAClE,CAAC;IACF,CAAC;AACF,CAAC;AAED,2EAA2E;AAC3E,SAAS,uBAAuB,CAAC,IAAY;IAC5C,MAAM,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAA;IACvC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC3F,SAAQ;QACT,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CACpB,QAAgB,EAChB,IAAwB,EACxB,SAA+C;IAE/C,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;QACzC,WAAW,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAA0B;IAClD,OAAO,KAAK,CAAC,2BAA2B,EAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAA;AACjF,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IAClC,OAAO,KAAK,KAAK,SAAS;QACzB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACpE,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,IAAa;IAChE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IACzC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAA;AACrE,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,4BAA4B,CAC3C,QAAgB,EAChB,KAAoB,EACpB,IAAa;IAEb,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;QACzC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;QAC9B,IACC,CAAC,OAAO;YACR,OAAO,CAAC,QAAQ;YAChB,CAAC,OAAO,CAAC,YAAY;YACrB,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,mBAAmB;YACpD,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;YAC9B,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,OAAO,CAAC,UAAU;YAC5D,CAAC,KAAK;YACN,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAChC,CAAC;YACF,MAAM,IAAI,kBAAkB,CAAC,iDAAiD,CAAC,CAAA;QAChF,CAAC;QACD,WAAW,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE;YACzC,GAAG,MAAM;YACT,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;SACvC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,KAAa;IAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5B,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACtD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,IAAa;IACnE,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;QACzC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAM;QAC3B,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAA;QAC7C,WAAW,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,wBAAwB,CAAC,QAAgB,EAAE,IAAa;IACvE,OAAO,cAAc,CACpB,QAAQ,EACR,IAAI,EACJ,CAAC,MAAM,EAAE,EAAE;QACV,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAA;QACxB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC/C,MAAM,IAAI,kBAAkB,CAAC,mDAAmD,CAAC,CAAA;QAClF,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,kBAAkB,CAAC,yCAAyC,CAAC,CAAA;QACxE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAA;QACZ,OAAO,IAAI,CAAA;IACZ,CAAC,EACD,EAAE,QAAQ,EAAE,IAAI,EAAE,CAClB,CAAA;AACF,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACtE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IACrD,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,KAAK,SAAS,CAAA;IACpD,IAAI,WAAW,KAAK,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,kBAAkB,CAC3B,wEAAwE,CACxE,CAAA;IACF,CAAC;IACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW;QAC5C,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC;QACzC,CAAC,CAAC,SAAS,CAAA;IACZ,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAClD,MAAM,QAAQ,GAAG,iBAAiB,IAAI,OAAO,EAAE,WAAW,CAAA;IAC1D,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,0BAA0B,EAAE,CAAA;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;IACzB,IAAI,cAAyC,CAAA;IAC7C,IAAI,cAAyC,CAAA;IAC7C,OAAO;QACN,IAAI,WAAW;YACd,OAAO,QAAQ,CAAA;QAChB,CAAC;QACD,IAAI,cAAc;YACjB,OAAO,EAAE,aAAa,EAAE,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAA;QACvF,CAAC;QACD,KAAK;YACJ,IAAI,CAAC,WAAW;gBAAE,MAAM,IAAI,0BAA0B,EAAE,CAAA;YACxD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;YACnD,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;gBACvC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBACvB,MAAM,IAAI,kBAAkB,CAAC,iDAAiD,CAAC,CAAA;gBAChF,CAAC;gBACD,OAAO;oBACN,GAAG,MAAM;oBACT,OAAO,EAAE;wBACR,KAAK;wBACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;wBACrB,QAAQ,EAAE,KAAK;wBACf,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;wBACtC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC;qBACjD;iBACD,CAAA;YACF,CAAC,CAAC,CAAA;YACF,OAAO,KAAK,CAAA;QACb,CAAC;QACD,iBAAiB,CAAC,GAA8C;YAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YACzC,IAAI,GAAG;gBAAE,cAAc,GAAG,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;YAChE,IAAI,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAA;YACrF,IAAI,iBAAiB,IAAI,MAAM,CAAC,WAAW,KAAK,iBAAiB;gBAAE,OAAO,SAAS,CAAA;YACnF,OAAO,MAAM,CAAC,iBAAiB,EAAE,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAA;QAC9F,CAAC;QACD,qBAAqB,CAAC,IAAkC,EAAE,GAAmC;YAC5F,IAAI,CAAC,WAAW;gBAAE,MAAM,IAAI,0BAA0B,EAAE,CAAA;YACxD,IAAI,CAAC,GAAG,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7E,MAAM,IAAI,kBAAkB,CAAC,2DAA2D,CAAC,CAAA;YAC1F,CAAC;YACD,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;gBACvC,IACC,cAAc,KAAK,SAAS;oBAC5B,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,cAAc,EACvD,CAAC;oBACF,MAAM,IAAI,kBAAkB,CAC3B,6DAA6D,CAC7D,CAAA;gBACF,CAAC;gBACD,MAAM,WAAW,GAAG,MAAM,CAAC,iBAAiB,CAAA;gBAC5C,MAAM,SAAS,GACd,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;oBAC5B,MAAM,CAAC,WAAW,KAAK,QAAQ;oBAC/B,WAAW,EAAE,SAAS,KAAK,IAAI,CAAC,SAAS,CAAA;gBAC1C,OAAO;oBACN,GAAG,MAAM;oBACT,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,WAAW,EAAE,QAAQ;oBACrB,iBAAiB,EAAE,IAAI;oBACvB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3C,CAAA;YACF,CAAC,CAAC,CAAA;YACF,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;YAClC,cAAc,GAAG,IAAI,CAAA;QACtB,CAAC;QACD,MAAM,CAAC,GAAmC;YACzC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YACzC,MAAM,MAAM,GACX,MAAM,EAAE,MAAM;gBACd,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;gBACtC,MAAM,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM;gBACtC,CAAC,CAAC,MAAM,CAAC,MAAM;gBACf,CAAC,CAAC,SAAS,CAAA;YACb,IAAI,GAAG;gBAAE,cAAc,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACrD,OAAO,MAAM,CAAA;QACd,CAAC;QACD,UAAU,CAAC,MAAyB,EAAE,GAAmC;YACxE,IACC,CAAC,GAAG,EAAE,MAAM;gBACZ,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;gBAC5B,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC9B,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;gBAC5B,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,QAAQ,EAC3C,CAAC;gBACF,MAAM,IAAI,kBAAkB,CAAC,kDAAkD,CAAC,CAAA;YACjF,CAAC;YACD,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;gBACvC,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,iBAAiB,EAAE,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;oBACrF,MAAM,IAAI,kBAAkB,CAC3B,gEAAgE,CAChE,CAAA;gBACF,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAA;gBACtF,IAAI,QAAQ,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACvE,MAAM,IAAI,kBAAkB,CAAC,oDAAoD,CAAC,CAAA;gBACnF,CAAC;gBACD,IACC,MAAM,CAAC,OAAO,EAAE,QAAQ;oBACxB,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,UAAU,EAClE,CAAC;oBACF,MAAM,IAAI,kBAAkB,CAC3B,6DAA6D,CAC7D,CAAA;gBACF,CAAC;gBACD,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAA;YAC7B,CAAC,CAAC,CAAA;YACF,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;QACrC,CAAC;QACD,uBAAuB,CAAC,GAAQ;YAC/B,IAAI,CAAC,OAAO,CAAC,UAAU;gBAAE,MAAM,IAAI,0BAA0B,EAAE,CAAA;YAC/D,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;QAC/B,CAAC;QACD,gBAAgB,CAAC,YAAoB;YACpC,IAAI,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAAE,MAAM,IAAI,0BAA0B,EAAE,CAAA;YACnF,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;gBACvC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;oBAChD,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,CAAC,CAAA;gBAClE,CAAC;gBACD,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,CAAA;YACnE,CAAC,CAAC,CAAA;QACH,CAAC;QACD,YAAY;YACX,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,OAAO,CAAA;YACnD,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;gBACjD,MAAM,IAAI,kBAAkB,CAAC,iDAAiD,CAAC,CAAA;YAChF,CAAC;YACD,OAAO,OAAO,CAAC,YAAY,CAAA;QAC5B,CAAC;QACD,kBAAkB,CAAC,KAA0B;YAC5C,gBAAgB,CAAC,KAAK,CAAC,CAAA;YACvB,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;QAC5E,CAAC;QACD,cAAc;YACb,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YACzC,sEAAsE;YACtE,sEAAsE;YACtE,OAAO,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAA;QAChF,CAAC;QACD,qBAAqB,CAAC,KAAK;YAC1B,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;gBACrB,wBAAwB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;gBACxC,OAAM;YACP,CAAC;YACD,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;gBACvC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACxB,IAAI,cAAc,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,cAAc,EAAE,CAAC;wBACnF,MAAM,IAAI,kBAAkB,CAAC,oDAAoD,CAAC,CAAA;oBACnF,CAAC;oBACD,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;gBACxC,CAAC;gBACD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACxB,IACC,cAAc,KAAK,SAAS;wBAC5B,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,cAAc,EACvD,CAAC;wBACF,MAAM,IAAI,kBAAkB,CAC3B,6DAA6D,CAC7D,CAAA;oBACF,CAAC;oBACD,OAAO,EAAE,GAAG,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;gBACzF,CAAC;gBACD,IAAI,KAAK,KAAK,UAAU;oBAAE,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;gBAClE,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;YAC/D,CAAC,CAAC,CAAA;YACF,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACxB,cAAc,GAAG,IAAI,CAAA;gBACrB,cAAc,GAAG,IAAI,CAAA;YACtB,CAAC;iBAAM,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC/B,cAAc,GAAG,IAAI,CAAA;YACtB,CAAC;QACF,CAAC;KACD,CAAA;AACF,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,IAAa;IACpE,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,OAAO,CAAA;IACnD,OAAO,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,IAAI,mBAAmB;QACtE,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC;QACpC,CAAC,CAAC,IAAI,CAAA;AACR,CAAC"}