@namzu/cli 35.0.0 → 36.1.0

package/dist/commands/mcp-oauth-login.js

@@ -1,213 +0,0 @@
-/** Explicit, interactive OAuth sign-in for one configured HTTP MCP server. */
-import { once } from 'node:events';
-import { createServer } from 'node:http';
-import { Client, StreamableHTTPClientTransport, UnauthorizedError, } from '@modelcontextprotocol/client';
-import { clearMcpOAuthPending, consumeMcpOAuthCallbackState, createMcpOAuthProvider, isSecureMcpOAuthUrl, } from '../integrations/mcp/oauth-store.js';
-import { openInBrowser } from '../tui/open-browser.js';
-import { firstStdinLine } from './login.js';
-const CALLBACK_PATH = '/callback';
-const MAX_CALLBACK_URL_LENGTH = 8192;
-function callbackPage(response, status, text) {
-    response.writeHead(status, {
-        'content-type': 'text/plain; charset=utf-8',
-        'cache-control': 'no-store',
-        'x-content-type-options': 'nosniff',
-    });
-    response.end(text);
-}
-function callbackParams(url, expectedOrigin) {
-    if (url.origin !== expectedOrigin || url.pathname !== CALLBACK_PATH || url.hash) {
-        throw new Error('The callback address does not match this sign-in.');
-    }
-    const params = url.searchParams;
-    if (params.getAll('state').length !== 1 ||
-        params.getAll('code').length > 1 ||
-        params.getAll('iss').length > 1) {
-        throw new Error('The callback parameters are invalid.');
-    }
-    return params;
-}
-function remaining(deadline) {
-    return Math.max(1, deadline - Date.now());
-}
-async function beforeDeadline(work, deadline) {
-    let timer;
-    try {
-        return await Promise.race([
-            work,
-            new Promise((_, reject) => {
-                timer = setTimeout(() => reject(new Error('Timed out waiting for MCP sign-in.')), remaining(deadline));
-            }),
-        ]);
-    }
-    finally {
-        if (timer)
-            clearTimeout(timer);
-    }
-}
-async function closeListener(server) {
-    server.closeAllConnections();
-    if (!server.listening)
-        return;
-    await new Promise((resolve) => server.close(() => resolve()));
-}
-/**
- * Start a loopback callback before asking the official MCP client to discover
- * authorization. The SDK validates the authorization-server issuer and exchanges
- * the code; Namzu validates the callback's one-shot state before calling it.
- */
-export async function loginMcpServer(options) {
-    if (Object.keys(options.headers ?? {}).some((name) => name.toLowerCase() === 'authorization')) {
-        throw new Error('Remove the configured Authorization header before MCP OAuth sign-in.');
-    }
-    let acceptCallback;
-    const callback = new Promise((resolve) => {
-        acceptCallback = resolve;
-    });
-    let callbackOrigin = '';
-    const server = createServer((request, response) => {
-        if (request.method !== 'GET' ||
-            request.socket.remoteAddress !== '127.0.0.1' ||
-            request.headers.host !== callbackOrigin.slice('http://'.length) ||
-            !request.url ||
-            request.url.length > MAX_CALLBACK_URL_LENGTH) {
-            callbackPage(response, 400, 'This is not the MCP sign-in callback.\n');
-            return;
-        }
-        try {
-            const url = new URL(request.url, callbackOrigin);
-            const params = callbackParams(url, callbackOrigin);
-            consumeMcpOAuthCallbackState(options.endpoint, params.get('state'));
-            acceptCallback?.({ params, response });
-            acceptCallback = undefined;
-        }
-        catch {
-            callbackPage(response, 400, 'The MCP sign-in callback was refused.\n');
-        }
-    });
-    server.listen(0, '127.0.0.1');
-    try {
-        await once(server, 'listening');
-    }
-    catch (error) {
-        server.close();
-        throw error;
-    }
-    const address = server.address();
-    if (!address || typeof address === 'string') {
-        await closeListener(server);
-        throw new Error('Could not reserve a loopback callback port.');
-    }
-    callbackOrigin = `http://127.0.0.1:${address.port}`;
-    const redirectUrl = `${callbackOrigin}${CALLBACK_PATH}`;
-    const abortInput = new AbortController();
-    const deadline = Date.now() + options.timeoutMs;
-    let authorizationUrl;
-    let client;
-    let providerStarted = false;
-    let firstTransport;
-    let browserResponse;
-    try {
-        const provider = createMcpOAuthProvider({
-            endpoint: options.endpoint,
-            redirectUrl,
-            onRedirect: (url) => {
-                if (!isSecureMcpOAuthUrl(url)) {
-                    throw new Error('MCP authorization page must use HTTPS or loopback HTTP.');
-                }
-                authorizationUrl = url;
-            },
-        });
-        providerStarted = true;
-        client = new Client({ name: 'namzu-cli', version: '1.0.0' }, { versionNegotiation: { mode: 'auto' } });
-        const transport = () => new StreamableHTTPClientTransport(new URL(options.endpoint), {
-            authProvider: provider,
-            // The official transport also uses its fetch for OAuth discovery,
-            // registration and token exchange. Put configured resource headers
-            // only on the exact MCP endpoint, never in requestInit, which the
-            // official client would merge into the authorization-server calls.
-            // Manual redirects keep both headers and the Bearer token on this
-            // one URL, including for same-origin 307/308 responses.
-            fetch: (input, init) => {
-                const targetUrl = new URL(String(input));
-                if (!isSecureMcpOAuthUrl(targetUrl)) {
-                    throw new Error('MCP OAuth network requests require HTTPS or loopback HTTP.');
-                }
-                const isResource = targetUrl.href === new URL(options.endpoint).href;
-                const headers = new Headers(init?.headers);
-                if (isResource) {
-                    for (const [name, value] of Object.entries(options.headers ?? {}))
-                        headers.set(name, value);
-                }
-                return fetch(input, { ...init, headers, redirect: 'manual' });
-            },
-        });
-        firstTransport = transport();
-        try {
-            await beforeDeadline(client.connect(firstTransport), deadline);
-            options.print({
-                name: options.name,
-                text: `MCP server ${options.name} is already signed in.`,
-            });
-            return;
-        }
-        catch (error) {
-            if (!(error instanceof UnauthorizedError) || !authorizationUrl)
-                throw error;
-        }
-        const url = authorizationUrl.href;
-        const opened = options.noBrowser ? false : openInBrowser(url);
-        options.print({
-            name: options.name,
-            url,
-            text: [
-                `Authorize MCP server ${options.name} in your browser:`,
-                url,
-                opened
-                    ? 'Waiting for the browser callback.'
-                    : 'Paste the complete callback URL here, or open the URL on this machine.',
-            ].join('\n'),
-        });
-        // A remote/headless terminal can paste the complete callback URL instead
-        // of forwarding the loopback port. A closed stdin simply leaves the live
-        // loopback listener waiting; it must not end sign-in early.
-        const pasted = firstStdinLine(abortInput.signal).then((line) => {
-            if (line === null)
-                return new Promise(() => { });
-            const parsed = new URL(line.trim());
-            const params = callbackParams(parsed, callbackOrigin);
-            consumeMcpOAuthCallbackState(options.endpoint, params.get('state'));
-            return Promise.resolve({ params });
-        });
-        const result = await beforeDeadline(Promise.race([callback, pasted]), deadline);
-        browserResponse = result.response;
-        // Pass the complete query. The official SDK checks the RFC 9207 `iss`
-        // value before it redeems the code; the host checked `state` above.
-        await beforeDeadline(firstTransport.finishAuth(result.params), deadline);
-        await beforeDeadline(client.connect(transport()), deadline);
-        if (browserResponse)
-            callbackPage(browserResponse, 200, 'MCP sign-in complete. You may close this tab.\n');
-        browserResponse = undefined;
-        options.print({ name: options.name, text: `Signed in to MCP server ${options.name}.` });
-    }
-    catch (error) {
-        if (browserResponse)
-            callbackPage(browserResponse, 400, 'MCP sign-in failed. Return to the terminal.\n');
-        // Never render callback-supplied error_description or a server's OAuth
-        // error text. It may be attacker controlled in an AS mix-up.
-        if (error instanceof Error && error.message === 'Timed out waiting for MCP sign-in.')
-            throw error;
-        throw new Error('MCP sign-in failed. Check the server configuration and try again.');
-    }
-    finally {
-        abortInput.abort();
-        try {
-            if (providerStarted)
-                clearMcpOAuthPending(options.endpoint);
-        }
-        finally {
-            await Promise.allSettled([client?.close(), closeListener(server)]);
-        }
-    }
-}
-//# sourceMappingURL=mcp-oauth-login.js.map

package/dist/commands/mcp-oauth-login.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-oauth-login.js","sourceRoot":"","sources":["../../src/commands/mcp-oauth-login.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAClC,OAAO,EAAoC,YAAY,EAAE,MAAM,WAAW,CAAA;AAE1E,OAAO,EACN,MAAM,EACN,6BAA6B,EAC7B,iBAAiB,GACjB,MAAM,8BAA8B,CAAA;AAErC,OAAO,EACN,oBAAoB,EACpB,4BAA4B,EAC5B,sBAAsB,EACtB,mBAAmB,GACnB,MAAM,oCAAoC,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAE3C,MAAM,aAAa,GAAG,WAAW,CAAA;AACjC,MAAM,uBAAuB,GAAG,IAAI,CAAA;AAgBpC,SAAS,YAAY,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAY;IAC3E,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QAC1B,cAAc,EAAE,2BAA2B;QAC3C,eAAe,EAAE,UAAU;QAC3B,wBAAwB,EAAE,SAAS;KACnC,CAAC,CAAA;IACF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,GAAQ,EAAE,cAAsB;IACvD,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAA;IAC/B,IACC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAC9B,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,MAAM,CAAA;AACd,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IAClC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;AAC1C,CAAC;AAED,KAAK,UAAU,cAAc,CAAI,IAAgB,EAAE,QAAgB;IAClE,IAAI,KAAiC,CAAA;IACrC,IAAI,CAAC;QACJ,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACzB,IAAI;YACJ,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAChC,KAAK,GAAG,UAAU,CACjB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,EAC7D,SAAS,CAAC,QAAQ,CAAC,CACnB,CAAA;YACF,CAAC,CAAC;SACF,CAAC,CAAA;IACH,CAAC;YAAS,CAAC;QACV,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;AACF,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAc;IAC1C,MAAM,CAAC,mBAAmB,EAAE,CAAA;IAC5B,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,OAAM;IAC7B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA6B;IACjE,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAA;IACxF,CAAC;IACD,IAAI,cAAuD,CAAA;IAC3D,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,EAAE;QAClD,cAAc,GAAG,OAAO,CAAA;IACzB,CAAC,CAAC,CAAA;IACF,IAAI,cAAc,GAAG,EAAE,CAAA;IACvB,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QACjD,IACC,OAAO,CAAC,MAAM,KAAK,KAAK;YACxB,OAAO,CAAC,MAAM,CAAC,aAAa,KAAK,WAAW;YAC5C,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;YAC/D,CAAC,OAAO,CAAC,GAAG;YACZ,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,uBAAuB,EAC3C,CAAC;YACF,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,yCAAyC,CAAC,CAAA;YACtE,OAAM;QACP,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;YAChD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;YAClD,4BAA4B,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;YACnE,cAAc,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;YACtC,cAAc,GAAG,SAAS,CAAA;QAC3B,CAAC;QAAC,MAAM,CAAC;YACR,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,yCAAyC,CAAC,CAAA;QACvE,CAAC;IACF,CAAC,CAAC,CAAA;IACF,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;IAC7B,IAAI,CAAC;QACJ,MAAM,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,EAAE,CAAA;QACd,MAAM,KAAK,CAAA;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;IAChC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,aAAa,CAAC,MAAM,CAAC,CAAA;QAC3B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAC/D,CAAC;IACD,cAAc,GAAG,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAA;IACnD,MAAM,WAAW,GAAG,GAAG,cAAc,GAAG,aAAa,EAAE,CAAA;IACvD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAA;IAC/C,IAAI,gBAAiC,CAAA;IACrC,IAAI,MAA0B,CAAA;IAC9B,IAAI,eAAe,GAAG,KAAK,CAAA;IAC3B,IAAI,cAAyD,CAAA;IAC7D,IAAI,eAA2C,CAAA;IAC/C,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,sBAAsB,CAAC;YACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW;YACX,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;gBACnB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/B,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;gBAC3E,CAAC;gBACD,gBAAgB,GAAG,GAAG,CAAA;YACvB,CAAC;SACD,CAAC,CAAA;QACF,eAAe,GAAG,IAAI,CAAA;QACtB,MAAM,GAAG,IAAI,MAAM,CAClB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,EACvC,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CACxC,CAAA;QACD,MAAM,SAAS,GAAG,GAAG,EAAE,CACtB,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;YAC5D,YAAY,EAAE,QAAQ;YACtB,kEAAkE;YAClE,mEAAmE;YACnE,kEAAkE;YAClE,mEAAmE;YACnE,kEAAkE;YAClE,wDAAwD;YACxD,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;gBACxC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;oBACrC,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;gBAC9E,CAAC;gBACD,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAA;gBACpE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;gBAC1C,IAAI,UAAU,EAAE,CAAC;oBAChB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;wBAChE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;gBAC1B,CAAC;gBACD,OAAO,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC9D,CAAC;SACD,CAAC,CAAA;QACH,cAAc,GAAG,SAAS,EAAE,CAAA;QAC5B,IAAI,CAAC;YACJ,MAAM,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAA;YAC9D,OAAO,CAAC,KAAK,CAAC;gBACb,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,cAAc,OAAO,CAAC,IAAI,wBAAwB;aACxD,CAAC,CAAA;YACF,OAAM;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,CAAC,KAAK,YAAY,iBAAiB,CAAC,IAAI,CAAC,gBAAgB;gBAAE,MAAM,KAAK,CAAA;QAC5E,CAAC;QACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAA;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QAC7D,OAAO,CAAC,KAAK,CAAC;YACb,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,GAAG;YACH,IAAI,EAAE;gBACL,wBAAwB,OAAO,CAAC,IAAI,mBAAmB;gBACvD,GAAG;gBACH,MAAM;oBACL,CAAC,CAAC,mCAAmC;oBACrC,CAAC,CAAC,wEAAwE;aAC3E,CAAC,IAAI,CAAC,IAAI,CAAC;SACZ,CAAC,CAAA;QACF,yEAAyE;QACzE,yEAAyE;QACzE,4DAA4D;QAC5D,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAqB,EAAE;YACjF,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,IAAI,OAAO,CAAW,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACzD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;YACnC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;YACrD,4BAA4B,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;YACnE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QACnC,CAAC,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC/E,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAA;QACjC,sEAAsE;QACtE,oEAAoE;QACpE,MAAM,cAAc,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAA;QACxE,MAAM,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC3D,IAAI,eAAe;YAClB,YAAY,CAAC,eAAe,EAAE,GAAG,EAAE,iDAAiD,CAAC,CAAA;QACtF,eAAe,GAAG,SAAS,CAAA;QAC3B,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,2BAA2B,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC,CAAA;IACxF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,eAAe;YAClB,YAAY,CAAC,eAAe,EAAE,GAAG,EAAE,+CAA+C,CAAC,CAAA;QACpF,uEAAuE;QACvE,6DAA6D;QAC7D,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,oCAAoC;YACnF,MAAM,KAAK,CAAA;QACZ,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAA;IACrF,CAAC;YAAS,CAAC;QACV,UAAU,CAAC,KAAK,EAAE,CAAA;QAClB,IAAI,CAAC;YACJ,IAAI,eAAe;gBAAE,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC5D,CAAC;gBAAS,CAAC;YACV,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACnE,CAAC;IACF,CAAC;AACF,CAAC"}