@namzu/cli 34.1.1 → 36.0.0

package/dist/integrations/mcp/oauth-store.js

@@ -1,549 +0,0 @@
-/**
- * Namzu-owned MCP OAuth state. Each complete resource endpoint has its own
- * private file: a token for one path or query must never be sent to another.
- * Discovery and PKCE state share that file so a browser round trip cannot
- * accidentally resume against a different authorization server.
- */
-import { createHash, randomBytes, timingSafeEqual } from 'node:crypto';
-import { closeSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, renameSync, rmSync, writeSync, } from 'node:fs';
-import { platform } from 'node:os';
-import { basename, dirname, join } from 'node:path';
-import { restrictToOwner } from '../providers/credential-store.js';
-import { namzuHomePath } from '../state/home.js';
-const FILE_MODE = 0o600;
-const DIR_MODE = 0o700;
-const PENDING_LIFETIME_MS = 10 * 60 * 1000;
-export class McpOAuthStoreError extends Error {
-    name = 'McpOAuthStoreError';
-}
-export class McpOAuthLoginRequiredError extends Error {
-    name = 'McpOAuthLoginRequiredError';
-    constructor() {
-        super('MCP authorization requires `namzu mcp login <name>`.');
-    }
-}
-function normalizedEndpoint(value) {
-    if (value !== value.trim())
-        throw new McpOAuthStoreError('Invalid MCP OAuth endpoint.');
-    let url;
-    try {
-        url = new URL(value);
-    }
-    catch {
-        throw new McpOAuthStoreError('Invalid MCP OAuth endpoint.');
-    }
-    if (!isSecureMcpOAuthUrl(url)) {
-        throw new McpOAuthStoreError('MCP OAuth requires HTTPS or a loopback HTTP endpoint without embedded credentials or a fragment.');
-    }
-    return url.href;
-}
-/** Shared network policy for interactive sign-in and background token refresh. */
-export function isSecureMcpOAuthUrl(url) {
-    return ((url.protocol === 'https:' ||
-        (url.protocol === 'http:' && ['localhost', '127.0.0.1', '[::1]'].includes(url.hostname))) &&
-        !url.username &&
-        !url.password &&
-        !url.hash);
-}
-function normalizedRedirect(value) {
-    let url;
-    try {
-        url = new URL(value);
-    }
-    catch {
-        throw new McpOAuthStoreError('Invalid MCP OAuth callback URL.');
-    }
-    if (!isSecureMcpOAuthUrl(url)) {
-        throw new McpOAuthStoreError('MCP OAuth callback must use HTTPS or loopback HTTP.');
-    }
-    return url.href;
-}
-/** A hash keeps possibly secret URL path and query values out of file names. */
-export function mcpOAuthPath(endpoint, home) {
-    const exact = normalizedEndpoint(endpoint);
-    const key = createHash('sha256').update(exact).digest('hex');
-    return join(namzuHomePath(home), 'mcp-oauth', `${key}.json`);
-}
-function ensurePrivateDirectory(file, home) {
-    const appHome = namzuHomePath(home);
-    const storeDir = dirname(file);
-    mkdirSync(appHome, { recursive: true, mode: DIR_MODE });
-    assertRealDirectory(appHome);
-    if (platform() === 'win32')
-        restrictToOwner(appHome);
-    mkdirSync(storeDir, { recursive: true, mode: DIR_MODE });
-    assertRealDirectory(storeDir);
-    restrictToOwner(storeDir);
-}
-function assertRealDirectory(path) {
-    const entry = lstatSync(path);
-    if (!entry.isDirectory() || entry.isSymbolicLink()) {
-        throw new McpOAuthStoreError('MCP OAuth credentials require a real private directory.');
-    }
-}
-function existingEntry(path) {
-    try {
-        return lstatSync(path);
-    }
-    catch (error) {
-        if (error.code === 'ENOENT')
-            return null;
-        throw error;
-    }
-}
-function checkPrivateDirectoryForRead(file, home) {
-    const appHome = namzuHomePath(home);
-    const storeDir = dirname(file);
-    if (!existingEntry(appHome))
-        return false;
-    assertRealDirectory(appHome);
-    if (platform() === 'win32')
-        restrictToOwner(appHome);
-    if (!existingEntry(storeDir))
-        return false;
-    assertRealDirectory(storeDir);
-    restrictToOwner(storeDir);
-    return true;
-}
-function readRecord(endpoint, home) {
-    const exact = normalizedEndpoint(endpoint);
-    const file = mcpOAuthPath(exact, home);
-    if (!checkPrivateDirectoryForRead(file, home))
-        return null;
-    const entry = existingEntry(file);
-    if (!entry)
-        return null;
-    if (!entry.isFile() || entry.isSymbolicLink()) {
-        throw new McpOAuthStoreError('MCP OAuth credential file must be a regular file.');
-    }
-    restrictToOwner(file);
-    let parsed;
-    try {
-        parsed = JSON.parse(readFileSync(file, 'utf8'));
-    }
-    catch {
-        throw new McpOAuthStoreError('MCP OAuth credential file is invalid.');
-    }
-    if (!isRecord(parsed) || parsed.version !== 1 || parsed.endpoint !== exact) {
-        throw new McpOAuthStoreError('MCP OAuth credential file does not match its endpoint.');
-    }
-    const issuer = parsed.issuer;
-    if (issuer !== undefined && !nonempty(issuer)) {
-        throw new McpOAuthStoreError('MCP OAuth credential issuer is invalid.');
-    }
-    const client = parsed.clientInformation;
-    if (client !== undefined &&
-        (!isRecord(client) ||
-            !nonempty(client.client_id) ||
-            !nonempty(client.issuer) ||
-            client.issuer !== issuer)) {
-        throw new McpOAuthStoreError('MCP OAuth client information has no matching issuer stamp.');
-    }
-    const tokens = parsed.tokens;
-    if (tokens !== undefined &&
-        (!isRecord(tokens) ||
-            !nonempty(tokens.access_token) ||
-            !nonempty(tokens.token_type) ||
-            tokens.token_type.toLowerCase() !== 'bearer' ||
-            !nonempty(tokens.issuer) ||
-            tokens.issuer !== issuer)) {
-        throw new McpOAuthStoreError('MCP OAuth tokens have no matching issuer stamp.');
-    }
-    if (parsed.redirectUrl !== undefined && !nonempty(parsed.redirectUrl)) {
-        throw new McpOAuthStoreError('MCP OAuth callback URL is invalid.');
-    }
-    if (typeof parsed.redirectUrl === 'string')
-        normalizedRedirect(parsed.redirectUrl);
-    if (tokens !== undefined && client === undefined) {
-        throw new McpOAuthStoreError('MCP OAuth tokens have no client registration.');
-    }
-    if (parsed.discovery !== undefined)
-        checkedDiscovery(parsed.discovery);
-    if (parsed.pending !== undefined)
-        checkedPending(parsed.pending);
-    return parsed;
-}
-function isRecord(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-function nonempty(value) {
-    return typeof value === 'string' && value.length > 0;
-}
-function checkedDiscovery(value) {
-    if (!isRecord(value) || !nonempty(value.authorizationServerUrl)) {
-        throw new McpOAuthStoreError('MCP OAuth discovery state is invalid.');
-    }
-    const metadata = value.authorizationServerMetadata;
-    if (metadata !== undefined && (!isRecord(metadata) || !nonempty(metadata.issuer))) {
-        throw new McpOAuthStoreError('MCP OAuth authorization server issuer is invalid.');
-    }
-    normalizedEndpoint(value.authorizationServerUrl);
-    return value;
-}
-function checkedPending(value) {
-    if (!isRecord(value) ||
-        !nonempty(value.state) ||
-        (typeof value.codeVerifier !== 'undefined' && !nonempty(value.codeVerifier)) ||
-        typeof value.createdAt !== 'number' ||
-        !Number.isFinite(value.createdAt) ||
-        typeof value.consumed !== 'boolean' ||
-        (value.baseTokens !== null && !nonempty(value.baseTokens)) ||
-        (value.baseClient !== null && !nonempty(value.baseClient))) {
-        throw new McpOAuthStoreError('MCP OAuth login state is invalid.');
-    }
-    checkedDiscovery(value.discovery);
-    return value;
-}
-function writeRecord(file, record) {
-    const temp = `${file}.tmp.${process.pid}.${randomBytes(12).toString('hex')}`;
-    let descriptor;
-    try {
-        const previous = existingEntry(file);
-        if (previous) {
-            if (!previous.isFile() || previous.isSymbolicLink()) {
-                throw new McpOAuthStoreError('MCP OAuth credential file must be a regular file.');
-            }
-        }
-        descriptor = openSync(temp, 'wx', FILE_MODE);
-        // Windows file modes do not prove ACL privacy. Secure the empty file first.
-        restrictToOwner(temp);
-        const body = Buffer.from(`${JSON.stringify(record)}\n`, 'utf8');
-        for (let offset = 0; offset < body.length;) {
-            const written = writeSync(descriptor, body, offset, body.length - offset);
-            if (written <= 0)
-                throw new McpOAuthStoreError('Could not write MCP OAuth credentials.');
-            offset += written;
-        }
-        fsyncSync(descriptor);
-        closeSync(descriptor);
-        descriptor = undefined;
-        restrictToOwner(temp);
-        renameSync(temp, file);
-    }
-    catch (error) {
-        if (descriptor !== undefined)
-            closeSync(descriptor);
-        rmSync(temp, { force: true });
-        if (error instanceof McpOAuthStoreError)
-            throw error;
-        throw new McpOAuthStoreError('Could not store MCP OAuth credentials privately.');
-    }
-}
-function withRecordLock(endpoint, home, work, options = {}) {
-    const exact = normalizedEndpoint(endpoint);
-    const file = mcpOAuthPath(exact, home);
-    ensurePrivateDirectory(file, home);
-    const lock = `${file}.lock`;
-    const token = randomBytes(32).toString('hex');
-    let descriptor;
-    try {
-        descriptor = openSync(lock, 'wx', FILE_MODE);
-        restrictToOwner(lock);
-        const bytes = Buffer.from(token, 'utf8');
-        for (let offset = 0; offset < bytes.length;) {
-            const written = writeSync(descriptor, bytes, offset, bytes.length - offset);
-            if (written <= 0)
-                throw new McpOAuthStoreError('Could not write MCP OAuth store lock.');
-            offset += written;
-        }
-        fsyncSync(descriptor);
-        closeSync(descriptor);
-        descriptor = undefined;
-    }
-    catch {
-        if (descriptor !== undefined) {
-            closeSync(descriptor);
-            try {
-                rmSync(lock, { force: true });
-            }
-            catch {
-                // The next writer will refuse the unproven lock.
-            }
-        }
-        throw new McpOAuthStoreError('MCP OAuth credential store is locked or cannot be made private.');
-    }
-    try {
-        removeOwnTemporaryFiles(file);
-        return work(options.skipRead
-            ? { version: 1, endpoint: exact }
-            : (readRecord(exact, home) ?? { version: 1, endpoint: exact }));
-    }
-    finally {
-        // Never remove a lock replaced by another owner.
-        try {
-            if (readFileSync(lock, 'utf8') === token)
-                rmSync(lock, { force: true });
-        }
-        catch {
-            // A missing or replaced lock does not undo the credential write.
-        }
-    }
-}
-/** Only the endpoint lock owner may remove its private crash leftovers. */
-function removeOwnTemporaryFiles(file) {
-    const prefix = `${basename(file)}.tmp.`;
-    for (const entry of readdirSync(dirname(file))) {
-        if (!entry.startsWith(prefix) || !/^\d+\.[0-9a-f]{24}$/u.test(entry.slice(prefix.length))) {
-            continue;
-        }
-        rmSync(join(dirname(file), entry), { force: true });
-    }
-}
-function updateRecord(endpoint, home, transform) {
-    withRecordLock(endpoint, home, (record) => {
-        writeRecord(mcpOAuthPath(endpoint, home), transform(record));
-    });
-}
-function discoveryIssuer(state) {
-    return state.authorizationServerMetadata?.issuer ?? state.authorizationServerUrl;
-}
-function fingerprint(value) {
-    return value === undefined
-        ? null
-        : createHash('sha256').update(JSON.stringify(value)).digest('hex');
-}
-/** True only for a private, issuer-stamped token belonging to this exact URL. */
-export function hasMcpOAuthTokens(endpoint, home) {
-    const record = readRecord(endpoint, home);
-    return !!(record?.issuer && record.tokens?.issuer === record.issuer);
-}
-/** Validate and consume state before passing callback parameters to `finishAuth`. */
-export function consumeMcpOAuthCallbackState(endpoint, state, home) {
-    withRecordLock(endpoint, home, (record) => {
-        const pending = record.pending;
-        if (!pending ||
-            pending.consumed ||
-            !pending.codeVerifier ||
-            Date.now() - pending.createdAt > PENDING_LIFETIME_MS ||
-            pending.createdAt > Date.now() ||
-            fingerprint(record.clientInformation) !== pending.baseClient ||
-            !state ||
-            !sameSecret(state, pending.state)) {
-            throw new McpOAuthStoreError('MCP OAuth callback state is invalid or expired.');
-        }
-        writeRecord(mcpOAuthPath(endpoint, home), {
-            ...record,
-            pending: { ...pending, consumed: true },
-        });
-    });
-}
-function sameSecret(left, right) {
-    const a = Buffer.from(left);
-    const b = Buffer.from(right);
-    return a.length === b.length && timingSafeEqual(a, b);
-}
-export function clearMcpOAuthPending(endpoint, home) {
-    withRecordLock(endpoint, home, (record) => {
-        if (!record.pending)
-            return;
-        const { pending: _pending, ...rest } = record;
-        writeRecord(mcpOAuthPath(endpoint, home), rest);
-    });
-}
-/** Remove only this URL's credentials; another server on the same host survives. */
-export function clearMcpOAuthCredentials(endpoint, home) {
-    return withRecordLock(endpoint, home, (record) => {
-        const file = mcpOAuthPath(endpoint, home);
-        const entry = existingEntry(file);
-        if (!entry)
-            return false;
-        if (!entry.isFile() || entry.isSymbolicLink()) {
-            throw new McpOAuthStoreError('MCP OAuth credential file must be a regular file.');
-        }
-        if (record.endpoint !== normalizedEndpoint(endpoint)) {
-            throw new McpOAuthStoreError('MCP OAuth credential endpoint mismatch.');
-        }
-        rmSync(file);
-        return true;
-    }, { skipRead: true });
-}
-/** The official MCP client consumes this provider for login and token refresh. */
-export function createMcpOAuthProvider(options) {
-    const endpoint = normalizedEndpoint(options.endpoint);
-    const interactive = options.onRedirect !== undefined;
-    if (interactive !== (options.redirectUrl !== undefined)) {
-        throw new McpOAuthStoreError('Interactive MCP OAuth requires a callback and browser opener together.');
-    }
-    const requestedRedirect = options.redirectUrl
-        ? normalizedRedirect(options.redirectUrl)
-        : undefined;
-    const initial = readRecord(endpoint, options.home);
-    const redirect = requestedRedirect ?? initial?.redirectUrl;
-    if (!redirect)
-        throw new McpOAuthLoginRequiredError();
-    const home = options.home;
-    let observedTokens;
-    let observedClient;
-    return {
-        get redirectUrl() {
-            return redirect;
-        },
-        get clientMetadata() {
-            return { redirect_uris: [redirect], client_name: 'Namzu', application_type: 'native' };
-        },
-        state() {
-            if (!interactive)
-                throw new McpOAuthLoginRequiredError();
-            const state = randomBytes(32).toString('base64url');
-            updateRecord(endpoint, home, (record) => {
-                if (!record.discovery) {
-                    throw new McpOAuthStoreError('MCP OAuth discovery is missing before redirect.');
-                }
-                return {
-                    ...record,
-                    pending: {
-                        state,
-                        createdAt: Date.now(),
-                        consumed: false,
-                        discovery: record.discovery,
-                        baseTokens: fingerprint(record.tokens),
-                        baseClient: fingerprint(record.clientInformation),
-                    },
-                };
-            });
-            return state;
-        },
-        clientInformation(ctx) {
-            const record = readRecord(endpoint, home);
-            if (ctx)
-                observedClient = fingerprint(record?.clientInformation);
-            if (!ctx?.issuer || !record?.issuer || record.issuer !== ctx.issuer)
-                return undefined;
-            if (requestedRedirect && record.redirectUrl !== requestedRedirect)
-                return undefined;
-            return record.clientInformation?.issuer === ctx.issuer ? record.clientInformation : undefined;
-        },
-        saveClientInformation(info, ctx) {
-            if (!interactive)
-                throw new McpOAuthLoginRequiredError();
-            if (!ctx?.issuer || info.issuer !== ctx.issuer || !nonempty(info.client_id)) {
-                throw new McpOAuthStoreError('MCP OAuth client information is missing its issuer stamp.');
-            }
-            updateRecord(endpoint, home, (record) => {
-                if (observedClient === undefined ||
-                    fingerprint(record.clientInformation) !== observedClient) {
-                    throw new McpOAuthStoreError('MCP OAuth client registration changed during authorization.');
-                }
-                const priorClient = record.clientInformation;
-                const replacing = record.issuer !== ctx.issuer ||
-                    record.redirectUrl !== redirect ||
-                    priorClient?.client_id !== info.client_id;
-                return {
-                    ...record,
-                    issuer: ctx.issuer,
-                    redirectUrl: redirect,
-                    clientInformation: info,
-                    ...(replacing ? { tokens: undefined } : {}),
-                };
-            });
-            observedClient = fingerprint(info);
-            observedTokens = null;
-        },
-        tokens(ctx) {
-            const record = readRecord(endpoint, home);
-            const tokens = record?.issuer &&
-                (!ctx || ctx.issuer === record.issuer) &&
-                record.tokens?.issuer === record.issuer
-                ? record.tokens
-                : undefined;
-            if (ctx)
-                observedTokens = fingerprint(record?.tokens);
-            return tokens;
-        },
-        saveTokens(tokens, ctx) {
-            if (!ctx?.issuer ||
-                tokens.issuer !== ctx.issuer ||
-                !nonempty(tokens.access_token) ||
-                !nonempty(tokens.token_type) ||
-                tokens.token_type.toLowerCase() !== 'bearer') {
-                throw new McpOAuthStoreError('MCP OAuth requires issuer-stamped Bearer tokens.');
-            }
-            updateRecord(endpoint, home, (record) => {
-                if (record.issuer !== ctx.issuer || record.clientInformation?.issuer !== ctx.issuer) {
-                    throw new McpOAuthStoreError('MCP OAuth token issuer does not match its client registration.');
-                }
-                const expected = record.pending?.consumed ? record.pending.baseTokens : observedTokens;
-                if (expected === undefined || fingerprint(record.tokens) !== expected) {
-                    throw new McpOAuthStoreError('MCP OAuth credential changed during token refresh.');
-                }
-                if (record.pending?.consumed &&
-                    fingerprint(record.clientInformation) !== record.pending.baseClient) {
-                    throw new McpOAuthStoreError('MCP OAuth client registration changed during authorization.');
-                }
-                return { ...record, tokens };
-            });
-            observedTokens = fingerprint(tokens);
-        },
-        redirectToAuthorization(url) {
-            if (!options.onRedirect)
-                throw new McpOAuthLoginRequiredError();
-            return options.onRedirect(url);
-        },
-        saveCodeVerifier(codeVerifier) {
-            if (!interactive || !nonempty(codeVerifier))
-                throw new McpOAuthLoginRequiredError();
-            updateRecord(endpoint, home, (record) => {
-                if (!record.pending || record.pending.consumed) {
-                    throw new McpOAuthStoreError('MCP OAuth login state is missing.');
-                }
-                return { ...record, pending: { ...record.pending, codeVerifier } };
-            });
-        },
-        codeVerifier() {
-            const pending = readRecord(endpoint, home)?.pending;
-            if (!pending?.consumed || !pending.codeVerifier) {
-                throw new McpOAuthStoreError('MCP OAuth callback state has not been verified.');
-            }
-            return pending.codeVerifier;
-        },
-        saveDiscoveryState(state) {
-            checkedDiscovery(state);
-            updateRecord(endpoint, home, (record) => ({ ...record, discovery: state }));
-        },
-        discoveryState() {
-            const record = readRecord(endpoint, home);
-            // The callback must reuse the exact discovery snapshot that generated
-            // its authorization URL, even if another process refreshed the cache.
-            return record?.pending?.consumed ? record.pending.discovery : record?.discovery;
-        },
-        invalidateCredentials(scope) {
-            if (scope === 'all') {
-                clearMcpOAuthCredentials(endpoint, home);
-                return;
-            }
-            updateRecord(endpoint, home, (record) => {
-                if (scope === 'tokens') {
-                    if (observedTokens === undefined || fingerprint(record.tokens) !== observedTokens) {
-                        throw new McpOAuthStoreError('MCP OAuth credential changed during token refresh.');
-                    }
-                    return { ...record, tokens: undefined };
-                }
-                if (scope === 'client') {
-                    if (observedClient === undefined ||
-                        fingerprint(record.clientInformation) !== observedClient) {
-                        throw new McpOAuthStoreError('MCP OAuth client registration changed during authorization.');
-                    }
-                    return { ...record, clientInformation: undefined, tokens: undefined, issuer: undefined };
-                }
-                if (scope === 'verifier')
-                    return { ...record, pending: undefined };
-                return { ...record, discovery: undefined, pending: undefined };
-            });
-            if (scope === 'client') {
-                observedClient = null;
-                observedTokens = null;
-            }
-            else if (scope === 'tokens') {
-                observedTokens = null;
-            }
-        },
-    };
-}
-/** The authorization-server identity captured before the browser opened. */
-export function pendingMcpOAuthIssuer(endpoint, home) {
-    const pending = readRecord(endpoint, home)?.pending;
-    return pending && Date.now() - pending.createdAt <= PENDING_LIFETIME_MS
-        ? discoveryIssuer(pending.discovery)
-        : null;
-}
-//# sourceMappingURL=oauth-store.js.map

package/dist/integrations/mcp/oauth-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth-store.js","sourceRoot":"","sources":["../../../src/integrations/mcp/oauth-store.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACtE,OAAO,EACN,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,UAAU,EACV,MAAM,EACN,SAAS,GACT,MAAM,SAAS,CAAA;AAEhB,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAWnD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAA;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAEhD,MAAM,SAAS,GAAG,KAAK,CAAA;AACvB,MAAM,QAAQ,GAAG,KAAK,CAAA;AACtB,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAE1C,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC1B,IAAI,GAAG,oBAAoB,CAAA;CAC7C;AAED,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAClC,IAAI,GAAG,4BAA4B,CAAA;IACrD;QACC,KAAK,CAAC,sDAAsD,CAAC,CAAA;IAC9D,CAAC;CACD;AAoCD,SAAS,kBAAkB,CAAC,KAAa;IACxC,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,kBAAkB,CAAC,6BAA6B,CAAC,CAAA;IACvF,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACJ,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,kBAAkB,CAAC,6BAA6B,CAAC,CAAA;IAC5D,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,kBAAkB,CAC3B,kGAAkG,CAClG,CAAA;IACF,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAA;AAChB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,GAAQ;IAC3C,OAAO,CACN,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1F,CAAC,GAAG,CAAC,QAAQ;QACb,CAAC,GAAG,CAAC,QAAQ;QACb,CAAC,GAAG,CAAC,IAAI,CACT,CAAA;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACxC,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACJ,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,kBAAkB,CAAC,iCAAiC,CAAC,CAAA;IAChE,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,kBAAkB,CAAC,qDAAqD,CAAC,CAAA;IACpF,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAA;AAChB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,IAAa;IAC3D,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IAC1C,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC5D,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,GAAG,OAAO,CAAC,CAAA;AAC7D,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,IAAa;IAC1D,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9B,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IACvD,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAC5B,IAAI,QAAQ,EAAE,KAAK,OAAO;QAAE,eAAe,CAAC,OAAO,CAAC,CAAA;IACpD,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IACxD,mBAAmB,CAAC,QAAQ,CAAC,CAAA;IAC7B,eAAe,CAAC,QAAQ,CAAC,CAAA;AAC1B,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC7B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,kBAAkB,CAAC,yDAAyD,CAAC,CAAA;IACxF,CAAC;AACF,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IAClC,IAAI,CAAC;QACJ,OAAO,SAAS,CAAC,IAAI,CAAC,CAAA;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QACnE,MAAM,KAAK,CAAA;IACZ,CAAC;AACF,CAAC;AAED,SAAS,4BAA4B,CAAC,IAAY,EAAE,IAAa;IAChE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IACzC,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAC5B,IAAI,QAAQ,EAAE,KAAK,OAAO;QAAE,eAAe,CAAC,OAAO,CAAC,CAAA;IACpD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAA;IAC1C,mBAAmB,CAAC,QAAQ,CAAC,CAAA;IAC7B,eAAe,CAAC,QAAQ,CAAC,CAAA;IACzB,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,IAAa;IAClD,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACtC,IAAI,CAAC,4BAA4B,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1D,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,kBAAkB,CAAC,mDAAmD,CAAC,CAAA;IAClF,CAAC;IACD,eAAe,CAAC,IAAI,CAAC,CAAA;IACrB,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IAChD,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,kBAAkB,CAAC,uCAAuC,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC5E,MAAM,IAAI,kBAAkB,CAAC,wDAAwD,CAAC,CAAA;IACvF,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC5B,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,kBAAkB,CAAC,yCAAyC,CAAC,CAAA;IACxE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAA;IACvC,IACC,MAAM,KAAK,SAAS;QACpB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjB,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;YAC3B,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;YACxB,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,EACzB,CAAC;QACF,MAAM,IAAI,kBAAkB,CAAC,4DAA4D,CAAC,CAAA;IAC3F,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC5B,IACC,MAAM,KAAK,SAAS;QACpB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjB,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC;YAC9B,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;YAC5B,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,QAAQ;YAC5C,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;YACxB,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,EACzB,CAAC;QACF,MAAM,IAAI,kBAAkB,CAAC,iDAAiD,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QAAE,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAClF,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,kBAAkB,CAAC,+CAA+C,CAAC,CAAA;IAC9E,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACtE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAChE,OAAO,MAAgC,CAAA;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;AACrD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,kBAAkB,CAAC,uCAAuC,CAAC,CAAA;IACtE,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,2BAA2B,CAAA;IAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,kBAAkB,CAAC,mDAAmD,CAAC,CAAA;IAClF,CAAC;IACD,kBAAkB,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAA;IAChD,OAAO,KAAuC,CAAA;AAC/C,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACrC,IACC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QACtB,CAAC,OAAO,KAAK,CAAC,YAAY,KAAK,WAAW,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC5E,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;QACjC,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS;QACnC,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC1D,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EACzD,CAAC;QACF,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,CAAC,CAAA;IAClE,CAAC;IACD,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACjC,OAAO,KAAwC,CAAA;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,MAAmB;IACrD,MAAM,IAAI,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;IAC5E,IAAI,UAA8B,CAAA;IAClC,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;QACpC,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;gBACrD,MAAM,IAAI,kBAAkB,CAAC,mDAAmD,CAAC,CAAA;YAClF,CAAC;QACF,CAAC;QACD,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;QAC5C,4EAA4E;QAC5E,eAAe,CAAC,IAAI,CAAC,CAAA;QACrB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC/D,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,GAAI,CAAC;YAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAA;YACzE,IAAI,OAAO,IAAI,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,wCAAwC,CAAC,CAAA;YACxF,MAAM,IAAI,OAAO,CAAA;QAClB,CAAC;QACD,SAAS,CAAC,UAAU,CAAC,CAAA;QACrB,SAAS,CAAC,UAAU,CAAC,CAAA;QACrB,UAAU,GAAG,SAAS,CAAA;QACtB,eAAe,CAAC,IAAI,CAAC,CAAA;QACrB,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS,CAAC,UAAU,CAAC,CAAA;QACnD,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7B,IAAI,KAAK,YAAY,kBAAkB;YAAE,MAAM,KAAK,CAAA;QACpD,MAAM,IAAI,kBAAkB,CAAC,kDAAkD,CAAC,CAAA;IACjF,CAAC;AACF,CAAC;AAED,SAAS,cAAc,CACtB,QAAgB,EAChB,IAAwB,EACxB,IAAgC,EAChC,UAA2C,EAAE;IAE7C,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACtC,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAClC,MAAM,IAAI,GAAG,GAAG,IAAI,OAAO,CAAA;IAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC7C,IAAI,UAA8B,CAAA;IAClC,IAAI,CAAC;QACJ,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;QAC5C,eAAe,CAAC,IAAI,CAAC,CAAA;QACrB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACxC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,GAAI,CAAC;YAC9C,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAA;YAC3E,IAAI,OAAO,IAAI,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,uCAAuC,CAAC,CAAA;YACvF,MAAM,IAAI,OAAO,CAAA;QAClB,CAAC;QACD,SAAS,CAAC,UAAU,CAAC,CAAA;QACrB,SAAS,CAAC,UAAU,CAAC,CAAA;QACrB,UAAU,GAAG,SAAS,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACR,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC9B,SAAS,CAAC,UAAU,CAAC,CAAA;YACrB,IAAI,CAAC;gBACJ,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACR,iDAAiD;YAClD,CAAC;QACF,CAAC;QACD,MAAM,IAAI,kBAAkB,CAAC,iEAAiE,CAAC,CAAA;IAChG,CAAC;IACD,IAAI,CAAC;QACJ,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAC7B,OAAO,IAAI,CACV,OAAO,CAAC,QAAQ;YACf,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;YACjC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAC/D,CAAA;IACF,CAAC;YAAS,CAAC;QACV,iDAAiD;QACjD,IAAI,CAAC;YACJ,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,KAAK;gBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACxE,CAAC;QAAC,MAAM,CAAC;YACR,iEAAiE;QAClE,CAAC;IACF,CAAC;AACF,CAAC;AAED,2EAA2E;AAC3E,SAAS,uBAAuB,CAAC,IAAY;IAC5C,MAAM,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAA;IACvC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC3F,SAAQ;QACT,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CACpB,QAAgB,EAChB,IAAwB,EACxB,SAA+C;IAE/C,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;QACzC,WAAW,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAA0B;IAClD,OAAO,KAAK,CAAC,2BAA2B,EAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAA;AACjF,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IAClC,OAAO,KAAK,KAAK,SAAS;QACzB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACpE,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,IAAa;IAChE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IACzC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAA;AACrE,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,4BAA4B,CAC3C,QAAgB,EAChB,KAAoB,EACpB,IAAa;IAEb,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;QACzC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;QAC9B,IACC,CAAC,OAAO;YACR,OAAO,CAAC,QAAQ;YAChB,CAAC,OAAO,CAAC,YAAY;YACrB,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,mBAAmB;YACpD,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;YAC9B,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,OAAO,CAAC,UAAU;YAC5D,CAAC,KAAK;YACN,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAChC,CAAC;YACF,MAAM,IAAI,kBAAkB,CAAC,iDAAiD,CAAC,CAAA;QAChF,CAAC;QACD,WAAW,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE;YACzC,GAAG,MAAM;YACT,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;SACvC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,KAAa;IAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5B,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACtD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,IAAa;IACnE,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;QACzC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAM;QAC3B,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAA;QAC7C,WAAW,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,wBAAwB,CAAC,QAAgB,EAAE,IAAa;IACvE,OAAO,cAAc,CACpB,QAAQ,EACR,IAAI,EACJ,CAAC,MAAM,EAAE,EAAE;QACV,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAA;QACxB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC/C,MAAM,IAAI,kBAAkB,CAAC,mDAAmD,CAAC,CAAA;QAClF,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,kBAAkB,CAAC,yCAAyC,CAAC,CAAA;QACxE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAA;QACZ,OAAO,IAAI,CAAA;IACZ,CAAC,EACD,EAAE,QAAQ,EAAE,IAAI,EAAE,CAClB,CAAA;AACF,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACtE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IACrD,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,KAAK,SAAS,CAAA;IACpD,IAAI,WAAW,KAAK,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,kBAAkB,CAC3B,wEAAwE,CACxE,CAAA;IACF,CAAC;IACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW;QAC5C,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC;QACzC,CAAC,CAAC,SAAS,CAAA;IACZ,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAClD,MAAM,QAAQ,GAAG,iBAAiB,IAAI,OAAO,EAAE,WAAW,CAAA;IAC1D,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,0BAA0B,EAAE,CAAA;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;IACzB,IAAI,cAAyC,CAAA;IAC7C,IAAI,cAAyC,CAAA;IAC7C,OAAO;QACN,IAAI,WAAW;YACd,OAAO,QAAQ,CAAA;QAChB,CAAC;QACD,IAAI,cAAc;YACjB,OAAO,EAAE,aAAa,EAAE,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAA;QACvF,CAAC;QACD,KAAK;YACJ,IAAI,CAAC,WAAW;gBAAE,MAAM,IAAI,0BAA0B,EAAE,CAAA;YACxD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;YACnD,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;gBACvC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBACvB,MAAM,IAAI,kBAAkB,CAAC,iDAAiD,CAAC,CAAA;gBAChF,CAAC;gBACD,OAAO;oBACN,GAAG,MAAM;oBACT,OAAO,EAAE;wBACR,KAAK;wBACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;wBACrB,QAAQ,EAAE,KAAK;wBACf,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;wBACtC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC;qBACjD;iBACD,CAAA;YACF,CAAC,CAAC,CAAA;YACF,OAAO,KAAK,CAAA;QACb,CAAC;QACD,iBAAiB,CAAC,GAA8C;YAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YACzC,IAAI,GAAG;gBAAE,cAAc,GAAG,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;YAChE,IAAI,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAA;YACrF,IAAI,iBAAiB,IAAI,MAAM,CAAC,WAAW,KAAK,iBAAiB;gBAAE,OAAO,SAAS,CAAA;YACnF,OAAO,MAAM,CAAC,iBAAiB,EAAE,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAA;QAC9F,CAAC;QACD,qBAAqB,CAAC,IAAkC,EAAE,GAAmC;YAC5F,IAAI,CAAC,WAAW;gBAAE,MAAM,IAAI,0BAA0B,EAAE,CAAA;YACxD,IAAI,CAAC,GAAG,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7E,MAAM,IAAI,kBAAkB,CAAC,2DAA2D,CAAC,CAAA;YAC1F,CAAC;YACD,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;gBACvC,IACC,cAAc,KAAK,SAAS;oBAC5B,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,cAAc,EACvD,CAAC;oBACF,MAAM,IAAI,kBAAkB,CAC3B,6DAA6D,CAC7D,CAAA;gBACF,CAAC;gBACD,MAAM,WAAW,GAAG,MAAM,CAAC,iBAAiB,CAAA;gBAC5C,MAAM,SAAS,GACd,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;oBAC5B,MAAM,CAAC,WAAW,KAAK,QAAQ;oBAC/B,WAAW,EAAE,SAAS,KAAK,IAAI,CAAC,SAAS,CAAA;gBAC1C,OAAO;oBACN,GAAG,MAAM;oBACT,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,WAAW,EAAE,QAAQ;oBACrB,iBAAiB,EAAE,IAAI;oBACvB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3C,CAAA;YACF,CAAC,CAAC,CAAA;YACF,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;YAClC,cAAc,GAAG,IAAI,CAAA;QACtB,CAAC;QACD,MAAM,CAAC,GAAmC;YACzC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YACzC,MAAM,MAAM,GACX,MAAM,EAAE,MAAM;gBACd,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;gBACtC,MAAM,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM;gBACtC,CAAC,CAAC,MAAM,CAAC,MAAM;gBACf,CAAC,CAAC,SAAS,CAAA;YACb,IAAI,GAAG;gBAAE,cAAc,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACrD,OAAO,MAAM,CAAA;QACd,CAAC;QACD,UAAU,CAAC,MAAyB,EAAE,GAAmC;YACxE,IACC,CAAC,GAAG,EAAE,MAAM;gBACZ,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;gBAC5B,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC9B,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;gBAC5B,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,QAAQ,EAC3C,CAAC;gBACF,MAAM,IAAI,kBAAkB,CAAC,kDAAkD,CAAC,CAAA;YACjF,CAAC;YACD,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;gBACvC,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,iBAAiB,EAAE,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;oBACrF,MAAM,IAAI,kBAAkB,CAC3B,gEAAgE,CAChE,CAAA;gBACF,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAA;gBACtF,IAAI,QAAQ,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACvE,MAAM,IAAI,kBAAkB,CAAC,oDAAoD,CAAC,CAAA;gBACnF,CAAC;gBACD,IACC,MAAM,CAAC,OAAO,EAAE,QAAQ;oBACxB,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,UAAU,EAClE,CAAC;oBACF,MAAM,IAAI,kBAAkB,CAC3B,6DAA6D,CAC7D,CAAA;gBACF,CAAC;gBACD,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAA;YAC7B,CAAC,CAAC,CAAA;YACF,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;QACrC,CAAC;QACD,uBAAuB,CAAC,GAAQ;YAC/B,IAAI,CAAC,OAAO,CAAC,UAAU;gBAAE,MAAM,IAAI,0BAA0B,EAAE,CAAA;YAC/D,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;QAC/B,CAAC;QACD,gBAAgB,CAAC,YAAoB;YACpC,IAAI,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAAE,MAAM,IAAI,0BAA0B,EAAE,CAAA;YACnF,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;gBACvC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;oBAChD,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,CAAC,CAAA;gBAClE,CAAC;gBACD,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,CAAA;YACnE,CAAC,CAAC,CAAA;QACH,CAAC;QACD,YAAY;YACX,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,OAAO,CAAA;YACnD,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;gBACjD,MAAM,IAAI,kBAAkB,CAAC,iDAAiD,CAAC,CAAA;YAChF,CAAC;YACD,OAAO,OAAO,CAAC,YAAY,CAAA;QAC5B,CAAC;QACD,kBAAkB,CAAC,KAA0B;YAC5C,gBAAgB,CAAC,KAAK,CAAC,CAAA;YACvB,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;QAC5E,CAAC;QACD,cAAc;YACb,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YACzC,sEAAsE;YACtE,sEAAsE;YACtE,OAAO,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAA;QAChF,CAAC;QACD,qBAAqB,CAAC,KAAK;YAC1B,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;gBACrB,wBAAwB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;gBACxC,OAAM;YACP,CAAC;YACD,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;gBACvC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACxB,IAAI,cAAc,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,cAAc,EAAE,CAAC;wBACnF,MAAM,IAAI,kBAAkB,CAAC,oDAAoD,CAAC,CAAA;oBACnF,CAAC;oBACD,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;gBACxC,CAAC;gBACD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACxB,IACC,cAAc,KAAK,SAAS;wBAC5B,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,cAAc,EACvD,CAAC;wBACF,MAAM,IAAI,kBAAkB,CAC3B,6DAA6D,CAC7D,CAAA;oBACF,CAAC;oBACD,OAAO,EAAE,GAAG,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;gBACzF,CAAC;gBACD,IAAI,KAAK,KAAK,UAAU;oBAAE,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;gBAClE,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;YAC/D,CAAC,CAAC,CAAA;YACF,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACxB,cAAc,GAAG,IAAI,CAAA;gBACrB,cAAc,GAAG,IAAI,CAAA;YACtB,CAAC;iBAAM,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC/B,cAAc,GAAG,IAAI,CAAA;YACtB,CAAC;QACF,CAAC;KACD,CAAA;AACF,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,IAAa;IACpE,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,OAAO,CAAA;IACnD,OAAO,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,IAAI,mBAAmB;QACtE,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC;QACpC,CAAC,CAAC,IAAI,CAAA;AACR,CAAC"}