@namzu/sandbox 1.1.0 → 2.0.0

package/dist/egress/allowlist.js

@@ -0,0 +1,81 @@
+/**
+ * Host matching for an egress allowlist.
+ *
+ * Kept apart from the proxy because this is the part that decides whether
+ * untrusted code reaches the network, and it has to be readable on its own
+ * and testable without opening a socket.
+ */
+/**
+ * Whether `host` is covered by `allowed`.
+ *
+ * Two forms, and only two:
+ *
+ *  - `api.example.com` — that exact host.
+ *  - `.example.com` — that domain and any subdomain of it.
+ *
+ * Substring matching is deliberately NOT one of them. `host.includes(entry)`
+ * is the obvious implementation and it is a hole: an allowlist entry of
+ * `example.com` would admit `example.com.attacker.net`, which is a domain
+ * the attacker owns. Suffix matching has the same hole without the leading
+ * dot — `notexample.com` ends with `example.com` — which is why the
+ * wildcard form requires it.
+ *
+ * Comparison is case-insensitive and ignores a trailing dot, because DNS
+ * treats `Example.COM.` and `example.com` as the same name and an allowlist
+ * that does not would be bypassable by typing the host differently.
+ */
+export function isHostAllowed(host, allowed) {
+    const target = normalizeHost(host);
+    if (target.length === 0)
+        return false;
+    for (const raw of allowed) {
+        const entry = normalizeHost(raw);
+        if (entry.length === 0)
+            continue;
+        if (entry.startsWith('.')) {
+            // `.example.com` covers `example.com` itself and any subdomain.
+            // Covering the apex matters: an allowlist author writing the
+            // wildcard form means the site, and a policy that admits
+            // `www.example.com` but not `example.com` reads as a bug.
+            const domain = entry.slice(1);
+            if (target === domain || target.endsWith(entry))
+                return true;
+            continue;
+        }
+        if (target === entry)
+            return true;
+    }
+    return false;
+}
+/** Lowercase, trailing-dot-free, whitespace-free. */
+function normalizeHost(host) {
+    return host.trim().toLowerCase().replace(/\.$/, '');
+}
+/**
+ * Split an authority into host and port.
+ *
+ * A CONNECT target and a `Host` header both carry `host:port`, and the
+ * allowlist is about the HOST — matching the whole authority would make an
+ * entry admit one port and silently refuse the same site on another.
+ * IPv6 literals are bracketed, which is why this is not a `split(':')`.
+ */
+export function splitAuthority(authority) {
+    const value = authority.trim();
+    if (value.startsWith('[')) {
+        const close = value.indexOf(']');
+        if (close < 0)
+            return { host: value };
+        const host = value.slice(1, close);
+        const rest = value.slice(close + 1);
+        const port = rest.startsWith(':') ? Number(rest.slice(1)) : undefined;
+        return port !== undefined && Number.isInteger(port) ? { host, port } : { host };
+    }
+    const colon = value.lastIndexOf(':');
+    if (colon < 0)
+        return { host: value };
+    const port = Number(value.slice(colon + 1));
+    if (!Number.isInteger(port))
+        return { host: value };
+    return { host: value.slice(0, colon), port };
+}
+//# sourceMappingURL=allowlist.js.map

package/dist/egress/allowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist.js","sourceRoot":"","sources":["../../src/egress/allowlist.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAA0B;IACrE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IAClC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAErC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QAEhC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,gEAAgE;YAChE,6DAA6D;YAC7D,yDAAyD;YACzD,0DAA0D;YAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAC7B,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAA;YAC5D,SAAQ;QACT,CAAC;QAED,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,IAAI,CAAA;IAClC,CAAC;IAED,OAAO,KAAK,CAAA;AACb,CAAC;AAED,qDAAqD;AACrD,SAAS,aAAa,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AACpD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC/C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,CAAA;IAE9B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;QACrC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACrE,OAAO,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;IAChF,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACpC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;IAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;IACnD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAA;AAC7C,CAAC"}

package/dist/egress/index.d.ts

@@ -0,0 +1,4 @@
+export { isHostAllowed, splitAuthority } from './allowlist.js';
+export { EgressProxy } from './proxy.js';
+export type { BrokeredCredential, EgressProxyOptions, RunningEgressProxy, } from './proxy.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/egress/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/egress/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxC,YAAY,EACX,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GAClB,MAAM,YAAY,CAAA"}

package/dist/egress/index.js

@@ -0,0 +1,3 @@
+export { isHostAllowed, splitAuthority } from './allowlist.js';
+export { EgressProxy } from './proxy.js';
+//# sourceMappingURL=index.js.map

package/dist/egress/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/egress/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA"}

package/dist/egress/proxy.d.ts

@@ -0,0 +1,90 @@
+/**
+ * The network boundary a sandbox's egress policy is enforced at.
+ *
+ * Until this existed, an egress policy could be *declared* and only two of
+ * its four shapes could be honoured anywhere: the container backend refuses
+ * a host allowlist outright because it has no proxy to filter through, and
+ * only the microVM backend forwards one. `deny-all` and `allow-all` are the
+ * whole spectrum a container-tier sandbox could express — all or nothing.
+ *
+ * It also settles where credentials live. Any token the agent needs in
+ * order to reach an allowed host used to have to be inside the sandbox, in
+ * the environment, readable by the untrusted code it is meant to be
+ * isolated from — via `/proc/self/environ`, or via a prompt injection that
+ * exfiltrates it over the very egress the policy permits. Here the token
+ * never enters the sandbox: a placeholder does, and the real value is
+ * stamped on at this boundary.
+ */
+/** A credential the proxy stamps on, and the host it may be sent to. */
+export interface BrokeredCredential {
+    /**
+     * Host this credential is for. Same matching rules as the allowlist,
+     * so `.example.com` covers subdomains.
+     *
+     * Scoped per host on purpose: a credential attached to every request
+     * is a credential handed to whichever host the agent was talked into
+     * contacting.
+     */
+    readonly host: string;
+    /** Header to set, e.g. `authorization`. */
+    readonly header: string;
+    /** The real value. Never leaves this process. */
+    readonly value: string;
+}
+export interface EgressProxyOptions {
+    /** Resolved at request time, so a rotating allowlist is honoured. */
+    readonly allowedHosts: () => Promise<readonly string[]>;
+    readonly credentials?: readonly BrokeredCredential[];
+    /**
+     * Rewrite a plain-HTTP request to HTTPS upstream.
+     *
+     * This is what makes brokering work at all. A credential cannot be
+     * injected into a CONNECT tunnel — the bytes are already encrypted by
+     * the time they reach the proxy, and reading them would mean
+     * terminating TLS with a CA the sandbox trusts, which is a far larger
+     * and far more dangerous thing to build. So the sandbox speaks plain
+     * HTTP to the proxy, and the proxy speaks HTTPS to the world.
+     *
+     * Default `true`. Turn it off only for a genuinely plaintext upstream.
+     */
+    readonly upgradeToHttps?: boolean;
+    readonly onDenied?: (host: string, reason: string) => void;
+}
+export interface RunningEgressProxy {
+    readonly port: number;
+    /** `http://127.0.0.1:<port>` — what a sandbox sets `HTTP_PROXY` to. */
+    readonly url: string;
+    /** Swap the allowlist on a live proxy. See `setNetworkPolicy`. */
+    setAllowedHosts(resolve: () => Promise<readonly string[]>): void;
+    close(): Promise<void>;
+}
+export declare class EgressProxy {
+    private resolveAllowed;
+    private readonly credentials;
+    private readonly upgradeToHttps;
+    private readonly onDenied;
+    /** See the loop guard in `listen`. */
+    private selfPort;
+    constructor(options: EgressProxyOptions);
+    listen(port?: number): Promise<RunningEgressProxy>;
+    private allowed;
+    private deny;
+    /** Plain HTTP. The only path where a credential can be stamped on. */
+    private handleRequest;
+    /**
+     * HTTPS, tunnelled.
+     *
+     * The allowlist is enforceable here because the CONNECT target names
+     * the host in clear text. Credential brokering is NOT: the tunnel is
+     * opaque, and injecting into it would mean terminating TLS with a CA
+     * the sandbox trusts — which would let this process read every byte the
+     * agent sends anywhere, a strictly larger risk than the one being
+     * mitigated. A workload that needs brokering speaks plain HTTP to the
+     * proxy and lets it upgrade upstream.
+     */
+    private handleConnect;
+    /** Whether a target names this proxy. See the loop guard in `listen`. */
+    private isSelf;
+    private credentialFor;
+}
+//# sourceMappingURL=proxy.d.ts.map

package/dist/egress/proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/egress/proxy.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;;;;;;GAgBG;AAEH,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IAClC;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,2CAA2C;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,iDAAiD;IACjD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,kBAAkB;IAClC,qEAAqE;IACrE,QAAQ,CAAC,YAAY,EAAE,MAAM,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAA;IACvD,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAA;IACpD;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAA;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAA;CAC1D;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,uEAAuE;IACvE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,kEAAkE;IAClE,eAAe,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,GAAG,IAAI,CAAA;IAChE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAID,qBAAa,WAAW;IACvB,OAAO,CAAC,cAAc,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsD;IAC/E,sCAAsC;IACtC,OAAO,CAAC,QAAQ,CAAoB;gBAExB,OAAO,EAAE,kBAAkB;IAOjC,MAAM,CAAC,IAAI,SAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC;YAyCrC,OAAO;IAWrB,OAAO,CAAC,IAAI;IAIZ,sEAAsE;YACxD,aAAa;IA8D3B;;;;;;;;;;OAUG;YACW,aAAa;IA2B3B,yEAAyE;IACzE,OAAO,CAAC,MAAM;IAKd,OAAO,CAAC,aAAa;CAGrB"}

package/dist/egress/proxy.js

@@ -0,0 +1,194 @@
+import { createServer, request as httpRequest } from 'node:http';
+import { request as httpsRequest } from 'node:https';
+import { connect as netConnect } from 'node:net';
+import { isHostAllowed, splitAuthority } from './allowlist.js';
+const DENIED_STATUS = 403;
+export class EgressProxy {
+    resolveAllowed;
+    credentials;
+    upgradeToHttps;
+    onDenied;
+    /** See the loop guard in `listen`. */
+    selfPort;
+    constructor(options) {
+        this.resolveAllowed = options.allowedHosts;
+        this.credentials = options.credentials ?? [];
+        this.upgradeToHttps = options.upgradeToHttps ?? true;
+        this.onDenied = options.onDenied;
+    }
+    async listen(port = 0) {
+        const server = createServer((req, res) => {
+            void this.handleRequest(req, res);
+        });
+        server.on('connect', (req, socket, head) => {
+            void this.handleConnect(req, socket, head);
+        });
+        await new Promise((resolve, reject) => {
+            server.once('error', reject);
+            // Loopback only. A proxy that holds real credentials and binds
+            // every interface is reachable by anything on the network, which
+            // is the opposite of what it exists for.
+            server.listen(port, '127.0.0.1', () => {
+                server.off('error', reject);
+                resolve();
+            });
+        });
+        const address = server.address();
+        const boundPort = typeof address === 'object' && address !== null ? address.port : port;
+        // Refuse to forward to ourselves. A client that sends its `Host` as
+        // the proxy's own address — which is what a library that rewrites
+        // `Host` on a proxied request produces — would otherwise make the
+        // proxy call itself forever, holding a socket per hop until the
+        // process runs out. Found by a test that hung rather than failed,
+        // which is the shape this failure takes in production too.
+        this.selfPort = boundPort;
+        return {
+            port: boundPort,
+            url: `http://127.0.0.1:${boundPort}`,
+            setAllowedHosts: (resolve) => {
+                this.resolveAllowed = resolve;
+            },
+            close: () => new Promise((resolve) => {
+                server.close(() => resolve());
+            }),
+        };
+    }
+    async allowed(host) {
+        try {
+            return isHostAllowed(host, await this.resolveAllowed());
+        }
+        catch {
+            // A resolver that throws is a policy that could not be read.
+            // Denying is the only safe reading: an allowlist that fails open
+            // is not an allowlist.
+            return false;
+        }
+    }
+    deny(host, reason) {
+        this.onDenied?.(host, reason);
+    }
+    /** Plain HTTP. The only path where a credential can be stamped on. */
+    async handleRequest(req, res) {
+        const target = parseTarget(req);
+        if (!target) {
+            res.writeHead(400, { 'content-type': 'text/plain' });
+            res.end('Malformed proxy request: no absolute URL and no Host header.\n');
+            return;
+        }
+        if (this.isSelf(target.host, target.port)) {
+            res.writeHead(400, { 'content-type': 'text/plain' });
+            res.end('Refusing to proxy a request addressed to the proxy itself; forwarding it would loop until the process ran out of sockets. Send an absolute URL in the request line, which is what a proxied client does.\n');
+            return;
+        }
+        if (!(await this.allowed(target.host))) {
+            this.deny(target.host, 'not on the egress allowlist');
+            res.writeHead(DENIED_STATUS, { 'content-type': 'text/plain' });
+            // Named, not a generic refusal: an agent that cannot tell "this
+            // host is not permitted" from "the network is down" will retry
+            // forever, and a human debugging it has nothing to go on.
+            res.end(`Egress denied: ${target.host} is not on this sandbox's allowlist.\n`);
+            return;
+        }
+        const headers = { ...req.headers };
+        // The proxy re-issues the request, so hop-by-hop headers about the
+        // hop that just ended must not be forwarded.
+        for (const hop of ['proxy-authorization', 'proxy-connection', 'connection', 'keep-alive']) {
+            delete headers[hop];
+        }
+        const credential = this.credentialFor(target.host);
+        if (credential) {
+            headers[credential.header.toLowerCase()] = credential.value;
+        }
+        const secure = this.upgradeToHttps || target.protocol === 'https:';
+        const send = secure ? httpsRequest : httpRequest;
+        const upstream = send({
+            protocol: secure ? 'https:' : 'http:',
+            host: target.host,
+            port: target.port ?? (secure ? 443 : 80),
+            method: req.method,
+            path: target.path,
+            headers,
+        }, (response) => {
+            res.writeHead(response.statusCode ?? 502, response.headers);
+            response.pipe(res);
+        });
+        upstream.on('error', (err) => {
+            if (!res.headersSent)
+                res.writeHead(502, { 'content-type': 'text/plain' });
+            res.end(`Upstream request failed: ${err.message}\n`);
+        });
+        req.pipe(upstream);
+    }
+    /**
+     * HTTPS, tunnelled.
+     *
+     * The allowlist is enforceable here because the CONNECT target names
+     * the host in clear text. Credential brokering is NOT: the tunnel is
+     * opaque, and injecting into it would mean terminating TLS with a CA
+     * the sandbox trusts — which would let this process read every byte the
+     * agent sends anywhere, a strictly larger risk than the one being
+     * mitigated. A workload that needs brokering speaks plain HTTP to the
+     * proxy and lets it upgrade upstream.
+     */
+    async handleConnect(req, socket, head) {
+        const { host, port } = splitAuthority(req.url ?? '');
+        if (!(await this.allowed(host))) {
+            this.deny(host, 'not on the egress allowlist');
+            socket.write(`HTTP/1.1 ${DENIED_STATUS} Forbidden\r\nContent-Type: text/plain\r\n\r\nEgress denied: ${host} is not on this sandbox's allowlist.\n`);
+            socket.end();
+            return;
+        }
+        const upstream = netConnect(port ?? 443, host, () => {
+            socket.write('HTTP/1.1 200 Connection Established\r\n\r\n');
+            if (head.length > 0)
+                upstream.write(head);
+            upstream.pipe(socket);
+            socket.pipe(upstream);
+        });
+        upstream.on('error', () => {
+            socket.end();
+        });
+        socket.on('error', () => {
+            upstream.destroy();
+        });
+    }
+    /** Whether a target names this proxy. See the loop guard in `listen`. */
+    isSelf(host, port) {
+        if (port === undefined || port !== this.selfPort)
+            return false;
+        return host === '127.0.0.1' || host === 'localhost' || host === '::1';
+    }
+    credentialFor(host) {
+        return this.credentials.find((c) => isHostAllowed(host, [c.host]));
+    }
+}
+/**
+ * Read the target from a proxied request.
+ *
+ * A proxy receives an absolute URL in the request line; a client that
+ * forgot it still sends `Host`, and honouring that is what makes a plain
+ * `fetch` through `HTTP_PROXY` work.
+ */
+function parseTarget(req) {
+    const raw = req.url ?? '';
+    if (raw.startsWith('http://') || raw.startsWith('https://')) {
+        const url = new URL(raw);
+        return {
+            host: url.hostname,
+            ...(url.port ? { port: Number(url.port) } : {}),
+            path: `${url.pathname}${url.search}`,
+            protocol: url.protocol,
+        };
+    }
+    const hostHeader = req.headers.host;
+    if (!hostHeader)
+        return null;
+    const { host, port } = splitAuthority(hostHeader);
+    return {
+        host,
+        ...(port !== undefined ? { port } : {}),
+        path: raw || '/',
+        protocol: 'http:',
+    };
+}
+//# sourceMappingURL=proxy.js.map

package/dist/egress/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../src/egress/proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAA;AAEhE,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAA;AACpD,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,UAAU,CAAA;AAGhD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAkE9D,MAAM,aAAa,GAAG,GAAG,CAAA;AAEzB,MAAM,OAAO,WAAW;IACf,cAAc,CAAkC;IACvC,WAAW,CAA+B;IAC1C,cAAc,CAAS;IACvB,QAAQ,CAAsD;IAC/E,sCAAsC;IAC9B,QAAQ,CAAoB;IAEpC,YAAY,OAA2B;QACtC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,YAAY,CAAA;QAC1C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAA;QAC5C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAA;QACpD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;QACpB,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACxC,KAAK,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QAClC,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAC1C,KAAK,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;QACF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC5B,+DAA+D;YAC/D,iEAAiE;YACjE,yCAAyC;YACzC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;gBACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;gBAC3B,OAAO,EAAE,CAAA;YACV,CAAC,CAAC,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;QAChC,MAAM,SAAS,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;QACvF,oEAAoE;QACpE,kEAAkE;QAClE,kEAAkE;QAClE,gEAAgE;QAChE,kEAAkE;QAClE,2DAA2D;QAC3D,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAA;QAEzB,OAAO;YACN,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,oBAAoB,SAAS,EAAE;YACpC,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE;gBAC5B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAA;YAC9B,CAAC;YACD,KAAK,EAAE,GAAG,EAAE,CACX,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAC7B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;YAC9B,CAAC,CAAC;SACH,CAAA;IACF,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAY;QACjC,IAAI,CAAC;YACJ,OAAO,aAAa,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,CAAA;QACxD,CAAC;QAAC,MAAM,CAAC;YACR,6DAA6D;YAC7D,iEAAiE;YACjE,uBAAuB;YACvB,OAAO,KAAK,CAAA;QACb,CAAC;IACF,CAAC;IAEO,IAAI,CAAC,IAAY,EAAE,MAAc;QACxC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC9B,CAAC;IAED,sEAAsE;IAC9D,KAAK,CAAC,aAAa,CAAC,GAAoB,EAAE,GAAmB;QACpE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;YACpD,GAAG,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAA;YACzE,OAAM;QACP,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;YACpD,GAAG,CAAC,GAAG,CACN,4MAA4M,CAC5M,CAAA;YACD,OAAM;QACP,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAA;YACrD,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;YAC9D,gEAAgE;YAChE,+DAA+D;YAC/D,0DAA0D;YAC1D,GAAG,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,IAAI,wCAAwC,CAAC,CAAA;YAC9E,OAAM;QACP,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAA;QAClC,mEAAmE;QACnE,6CAA6C;QAC7C,KAAK,MAAM,GAAG,IAAI,CAAC,qBAAqB,EAAE,kBAAkB,EAAE,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;YAC3F,OAAO,OAAO,CAAC,GAAG,CAAC,CAAA;QACpB,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAClD,IAAI,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,GAAG,UAAU,CAAC,KAAK,CAAA;QAC5D,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAA;QAClE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAA;QAChD,MAAM,QAAQ,GAAG,IAAI,CACpB;YACC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;YACrC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO;SACP,EACD,CAAC,QAAQ,EAAE,EAAE;YACZ,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,IAAI,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;YAC3D,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACnB,CAAC,CACD,CAAA;QAED,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC5B,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;YAC1E,GAAG,CAAC,GAAG,CAAC,4BAA4B,GAAG,CAAC,OAAO,IAAI,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACnB,CAAC;IAED;;;;;;;;;;OAUG;IACK,KAAK,CAAC,aAAa,CAAC,GAAoB,EAAE,MAAc,EAAE,IAAY;QAC7E,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAA;QAEpD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAA;YAC9C,MAAM,CAAC,KAAK,CACX,YAAY,aAAa,gEAAgE,IAAI,wCAAwC,CACrI,CAAA;YACD,MAAM,CAAC,GAAG,EAAE,CAAA;YACZ,OAAM;QACP,CAAC;QAED,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,IAAI,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE;YACnD,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAA;YAC3D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACzC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACrB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACtB,CAAC,CAAC,CAAA;QAEF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACzB,MAAM,CAAC,GAAG,EAAE,CAAA;QACb,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,QAAQ,CAAC,OAAO,EAAE,CAAA;QACnB,CAAC,CAAC,CAAA;IACH,CAAC;IAED,yEAAyE;IACjE,MAAM,CAAC,IAAY,EAAE,IAAa;QACzC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAA;QAC9D,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,CAAA;IACtE,CAAC;IAEO,aAAa,CAAC,IAAY;QACjC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnE,CAAC;CACD;AASD;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,GAAoB;IACxC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAA;IAEzB,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QACxB,OAAO;YACN,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,IAAI,EAAE,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE;YACpC,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACtB,CAAA;IACF,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAA;IACnC,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAA;IAC5B,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,UAAU,CAAC,CAAA;IACjD,OAAO;QACN,IAAI;QACJ,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,IAAI,EAAE,GAAG,IAAI,GAAG;QAChB,QAAQ,EAAE,OAAO;KACjB,CAAA;AACF,CAAC"}