@namzu/sandbox 1.1.0

package/dist/backends/firecracker/transport.js

@@ -0,0 +1,524 @@
+/**
+ * Host-side vsock transport + dialer for the Firecracker in-VM agent.
+ *
+ * This is the NEW code the §2.2 decision calls for. The docker/ACI
+ * backends reach the agent over HTTP with `fetch`; **Node `fetch`
+ * cannot dial `AF_VSOCK`**, and across an FC snapshot resume a TCP
+ * control channel is dead-on-arrival (FC `snapshot-support.md`: TCP
+ * connection state does not survive a resume; the **vsock LISTEN
+ * socket** does). So the FC control channel is a framed stream over
+ * vsock, and that framing + the resume-survival hardening live here.
+ *
+ * ## One wire, two transports
+ * The message FORMAT (NDJSON exec events + base64 file-IO) is shared
+ * with the HTTP backends via `protocol.ts`. This module owns only the
+ * TRANSPORT: how a request crosses the wire and how a response is
+ * framed back.
+ *
+ * Framing: a length-prefixed envelope per message —
+ *   `<8-hex-digit big-endian byte length>\n<utf8 JSON payload>`
+ * The newline after the hex length lets a reader find the boundary
+ * without a fixed header struct, and the explicit length means a
+ * payload that itself contains newlines (NDJSON exec output) is read
+ * whole, not split. Exec replies are a SEQUENCE of framed NDJSON
+ * lines terminated by a zero-length frame; file-IO replies are a
+ * single framed JSON object.
+ *
+ * ## How vsock is actually dialed from Node
+ * Node has no `AF_VSOCK` socket family. The production path therefore
+ * follows exactly what the in-situ bench already proved: the guest
+ * agent's vsock stream is bridged to a **host-side unix-domain
+ * socket** (the bench relays guest `AF_VSOCK` → host CID:port → a host
+ * unix socket; FC's own vsock device exposes a host-side unix socket
+ * rendezvous, `UDS + "CONNECT <port>"`). So the host dialer ALWAYS
+ * terminates on a `net.connect({ path })` unix socket:
+ *   - `kind: 'unix'`   — connect directly to `path` (local/dev + tests).
+ *   - `kind: 'vsock'`  — connect to the FC vsock device's host unix
+ *     socket `udsPath`, then send the firecracker hybrid-vsock
+ *     handshake line `CONNECT <port>\n` and await the `OK <hostport>`
+ *     ack before framing application traffic.
+ * Both land on the same `net.Socket`, so the unix-socket stand-in in
+ * the tests exercises the identical framing/heartbeat/reconnect code
+ * the vsock path runs — the only delta is the one-line CONNECT
+ * handshake, which is covered by its own assertion.
+ *
+ * ## Resume survival (the hard invariant, FC #4713 / loopholelabs)
+ * On resume the guest vsock driver closes all existing connections and
+ * the `TRANSPORT_RESET` event may NOT be delivered, so a host read can
+ * hang. The agent re-LISTENs after every resume; the host dialer
+ * carries a per-attempt connect/handshake **timeout + retry budget**
+ * so a dropped reset cannot wedge first-exec — the dialer simply
+ * re-dials. Every request opens a fresh connection (no long-lived
+ * socket to be silently severed by a resume), which makes the
+ * transport resume-survivable by construction.
+ */
+import net from 'node:net';
+import tls from 'node:tls';
+import { ExecResultAccumulator, parseExecLine, } from './protocol.js';
+const DEFAULT_CONNECT_TIMEOUT_MS = 5_000;
+const DEFAULT_CONNECT_RETRY_BUDGET_MS = 30_000;
+const DEFAULT_CONNECT_RETRY_INTERVAL_MS = 100;
+const DEFAULT_READ_IDLE_TIMEOUT_MS = 60_000;
+/** Framing: 8 hex digits of payload byte length, then `\n`, then payload. */
+const LENGTH_PREFIX_HEX = 8;
+function frame(payload) {
+    const body = Buffer.from(payload, 'utf8');
+    const header = Buffer.from(`${body.length.toString(16).padStart(LENGTH_PREFIX_HEX, '0')}\n`, 'ascii');
+    return Buffer.concat([header, body]);
+}
+/**
+ * Incremental frame reader. Feed it socket chunks; it yields complete
+ * payloads. A zero-length frame is the exec stream terminator and is
+ * surfaced as an empty string so the caller can stop.
+ */
+class FrameReader {
+    buf = Buffer.alloc(0);
+    push(chunk) {
+        this.buf = this.buf.length === 0 ? Buffer.from(chunk) : Buffer.concat([this.buf, chunk]);
+        const out = [];
+        for (;;) {
+            const nl = this.buf.indexOf(0x0a); // '\n'
+            if (nl < 0 || nl < LENGTH_PREFIX_HEX) {
+                // Need at least the hex header + newline.
+                if (nl >= 0 && nl < LENGTH_PREFIX_HEX) {
+                    throw new Error(`vsock transport: malformed frame header (newline at ${nl})`);
+                }
+                break;
+            }
+            const header = this.buf.subarray(0, nl).toString('ascii');
+            const len = Number.parseInt(header, 16);
+            if (!Number.isInteger(len) || len < 0) {
+                throw new Error(`vsock transport: invalid frame length header ${JSON.stringify(header)}`);
+            }
+            const start = nl + 1;
+            if (this.buf.length < start + len)
+                break; // incomplete payload
+            const payload = this.buf.subarray(start, start + len).toString('utf8');
+            this.buf = this.buf.subarray(start + len);
+            out.push(payload);
+        }
+        return out;
+    }
+}
+/**
+ * The transport. One instance per sandbox handle; every request opens
+ * a fresh connection (resume-survivable — no socket lingers across a
+ * resume to be silently severed). All four ops + the heartbeat go
+ * through {@link request} / {@link execute}.
+ */
+export class VsockAgentTransport {
+    handle;
+    connectTimeoutMs;
+    connectRetryBudgetMs;
+    connectRetryIntervalMs;
+    readIdleTimeoutMs;
+    constructor(handle, options = {}) {
+        this.handle = handle;
+        this.connectTimeoutMs = options.connectTimeoutMs ?? DEFAULT_CONNECT_TIMEOUT_MS;
+        this.connectRetryBudgetMs = options.connectRetryBudgetMs ?? DEFAULT_CONNECT_RETRY_BUDGET_MS;
+        this.connectRetryIntervalMs =
+            options.connectRetryIntervalMs ?? DEFAULT_CONNECT_RETRY_INTERVAL_MS;
+        this.readIdleTimeoutMs = options.readIdleTimeoutMs ?? DEFAULT_READ_IDLE_TIMEOUT_MS;
+    }
+    /**
+     * Dial the agent with the resume-survival retry budget. Resolves a
+     * connected, post-handshake socket. Retries connect/handshake
+     * failures (ECONNREFUSED while the agent re-listens after a resume,
+     * a dropped CONNECT ack) until the budget is exhausted.
+     */
+    async dial() {
+        const deadline = Date.now() + this.connectRetryBudgetMs;
+        let lastErr;
+        for (;;) {
+            try {
+                return await this.connectOnce();
+            }
+            catch (err) {
+                lastErr = err;
+                if (Date.now() >= deadline)
+                    break;
+                await delay(this.connectRetryIntervalMs);
+            }
+        }
+        throw new Error(`vsock transport: could not connect to agent within ${this.connectRetryBudgetMs}ms (handle=${describeHandle(this.handle)}): ${lastErr instanceof Error ? lastErr.message : String(lastErr)}`, { cause: lastErr });
+    }
+    connectOnce() {
+        const handle = this.handle;
+        if (handle.kind === 'mtls')
+            return this.connectOnceMtls(handle);
+        return new Promise((resolve, reject) => {
+            const path = handle.kind === 'unix' ? handle.path : handle.udsPath;
+            const socket = net.connect({ path });
+            let settled = false;
+            const timer = setTimeout(() => {
+                if (settled)
+                    return;
+                settled = true;
+                socket.destroy();
+                reject(new Error(`connect/handshake timed out after ${this.connectTimeoutMs}ms`));
+            }, this.connectTimeoutMs);
+            timer.unref();
+            const fail = (err) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timer);
+                socket.destroy();
+                reject(err);
+            };
+            socket.once('error', fail);
+            socket.once('connect', () => {
+                if (handle.kind === 'unix') {
+                    if (settled)
+                        return;
+                    settled = true;
+                    clearTimeout(timer);
+                    socket.removeListener('error', fail);
+                    resolve(socket);
+                    return;
+                }
+                // vsock: issue the firecracker hybrid-vsock CONNECT handshake
+                // and wait for the `OK <hostport>` ack line before handing the
+                // socket up for framed traffic.
+                const port = handle.port;
+                socket.write(`CONNECT ${port}\n`);
+                const ackReader = new LineReader();
+                const onData = (chunk) => {
+                    const line = ackReader.push(chunk);
+                    if (line === undefined)
+                        return;
+                    socket.removeListener('data', onData);
+                    if (!/^OK\b/.test(line)) {
+                        fail(new Error(`vsock CONNECT ${port} rejected: ${JSON.stringify(line)}`));
+                        return;
+                    }
+                    if (settled)
+                        return;
+                    settled = true;
+                    clearTimeout(timer);
+                    socket.removeListener('error', fail);
+                    // Any bytes the ackReader over-read after the ack line are
+                    // application framing; replay them into the caller.
+                    const leftover = ackReader.takeRemainder();
+                    if (leftover.length > 0)
+                        socket.unshift(leftover);
+                    resolve(socket);
+                };
+                socket.on('data', onData);
+            });
+        });
+    }
+    /**
+     * Dial the per-FC-host mTLS relay for an `mtls` handle.
+     *
+     * This is a pure TRANSPORT substitution for the `net.connect` arms:
+     * it `tls.connect`s the relay (presenting the fleet client cert and
+     * verifying the relay's server cert, `rejectUnauthorized: true`),
+     * asserts `socket.authorized`, then writes the single routing
+     * preamble line `SANDBOX <sandboxId>\n`. It does NOT write the guest
+     * `CONNECT 1024` line — the relay issues that host-side toward the
+     * jailed `v.sock`. The relay does NOT send an ack line: after the
+     * preamble it is a verbatim byte pump, so the caller hands the
+     * post-preamble socket straight up to the IDENTICAL framing loop the
+     * unix/vsock arms use (a `tls.TLSSocket` IS a `net.Socket`). The
+     * connect-retry budget, idle timeout, and the "fresh connection per
+     * request" resume-survival invariant are inherited unchanged.
+     *
+     * INTEGRATE CONTRACT (must match the relay, Track B): NO ack line.
+     * The relay reads `SANDBOX <id>\n`, then bridges; it writes nothing
+     * back until the agent does. If the relay is ever changed to emit an
+     * `OK` ack first, this arm must await that line (mirroring the vsock
+     * CONNECT-ack path) before resolving — today it does not.
+     */
+    connectOnceMtls(handle) {
+        return new Promise((resolve, reject) => {
+            const socket = tls.connect({
+                host: handle.host,
+                port: handle.port,
+                ca: handle.tls.ca,
+                cert: handle.tls.cert,
+                key: handle.tls.key,
+                servername: handle.tls.servername,
+                rejectUnauthorized: true,
+                minVersion: 'TLSv1.3',
+            });
+            let settled = false;
+            const timer = setTimeout(() => {
+                if (settled)
+                    return;
+                settled = true;
+                socket.destroy();
+                reject(new Error(`connect/handshake timed out after ${this.connectTimeoutMs}ms`));
+            }, this.connectTimeoutMs);
+            timer.unref();
+            const fail = (err) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timer);
+                socket.destroy();
+                reject(err);
+            };
+            socket.once('error', fail);
+            // `secureConnect` fires only after the cert chain is verified
+            // (rejectUnauthorized rejects a bad/missing-CA server via 'error'
+            // before this). Belt-and-suspenders: assert `authorized` too.
+            socket.once('secureConnect', () => {
+                if (settled)
+                    return;
+                if (!socket.authorized) {
+                    fail(new Error(`mtls transport: relay server cert not authorized: ${socket.authorizationError ?? 'unknown'}`));
+                    return;
+                }
+                settled = true;
+                clearTimeout(timer);
+                socket.removeListener('error', fail);
+                // Routing preamble — the host-relay analogue of the vsock
+                // `CONNECT <port>` line. The relay consumes it, resolves the
+                // jailed v.sock, and issues the guest CONNECT itself; the
+                // caller writes NOTHING further until the framing loop.
+                socket.write(`SANDBOX ${handle.sandboxId}\n`);
+                resolve(socket);
+            });
+        });
+    }
+    /**
+     * Send one framed request and read one framed JSON reply (file-IO +
+     * healthz). Applies the read-idle timeout so a post-resume hung read
+     * is torn down rather than wedging the caller.
+     */
+    async request(req) {
+        const socket = await this.dial();
+        return await new Promise((resolve, reject) => {
+            const reader = new FrameReader();
+            let settled = false;
+            const idle = new IdleTimer(this.readIdleTimeoutMs, () => {
+                if (settled)
+                    return;
+                settled = true;
+                socket.destroy();
+                reject(new Error(`vsock transport: read idle timeout after ${this.readIdleTimeoutMs}ms`));
+            });
+            const finish = (err, value) => {
+                if (settled)
+                    return;
+                settled = true;
+                idle.clear();
+                socket.destroy();
+                if (err)
+                    reject(err);
+                else
+                    resolve(value);
+            };
+            socket.on('data', (chunk) => {
+                idle.bump();
+                let frames;
+                try {
+                    frames = reader.push(chunk);
+                }
+                catch (err) {
+                    finish(err instanceof Error ? err : new Error(String(err)));
+                    return;
+                }
+                const first = frames[0];
+                if (first !== undefined) {
+                    try {
+                        finish(null, JSON.parse(first));
+                    }
+                    catch (err) {
+                        finish(err instanceof Error ? err : new Error(String(err)));
+                    }
+                }
+            });
+            socket.once('error', (err) => finish(err));
+            socket.once('close', () => finish(new Error('vsock transport: socket closed before reply')));
+            idle.bump();
+            socket.write(frame(JSON.stringify(req)));
+        });
+    }
+    /**
+     * Send an `/execute` and accumulate the streamed NDJSON frames into a
+     * {@link SandboxExecResult} via the shared {@link ExecResultAccumulator}.
+     * The agent terminates the stream with a zero-length frame.
+     */
+    async execute(body) {
+        const socket = await this.dial();
+        const start = Date.now();
+        return await new Promise((resolve, reject) => {
+            const reader = new FrameReader();
+            const acc = new ExecResultAccumulator(start);
+            let settled = false;
+            const idle = new IdleTimer(this.readIdleTimeoutMs, () => {
+                if (settled)
+                    return;
+                settled = true;
+                socket.destroy();
+                reject(new Error(`vsock transport: exec read idle timeout after ${this.readIdleTimeoutMs}ms`));
+            });
+            const finish = (err, value) => {
+                if (settled)
+                    return;
+                settled = true;
+                idle.clear();
+                socket.destroy();
+                if (err)
+                    reject(err);
+                else
+                    resolve(value);
+            };
+            socket.on('data', (chunk) => {
+                idle.bump();
+                let frames;
+                try {
+                    frames = reader.push(chunk);
+                }
+                catch (err) {
+                    finish(err instanceof Error ? err : new Error(String(err)));
+                    return;
+                }
+                for (const payload of frames) {
+                    if (payload.length === 0) {
+                        // Zero-length terminator. If a result was seen, we are
+                        // done; otherwise the stream ended without a result.
+                        finish(acc.done ? null : new Error('exec stream ended without a result event'), acc.finish());
+                        return;
+                    }
+                    const event = parseExecLine(payload);
+                    if (!event)
+                        continue; // malformed line — swallow (docker parity)
+                    try {
+                        if (acc.push(event)) {
+                            // Terminal result seen; wait for terminator but we can
+                            // resolve now — the agent closes after the terminator.
+                        }
+                    }
+                    catch (err) {
+                        finish(err instanceof Error ? err : new Error(String(err)));
+                        return;
+                    }
+                }
+            });
+            socket.once('error', (err) => finish(err));
+            socket.once('close', () => {
+                // Stream closed. If a result arrived, deliver it (some agents
+                // close right after the terminator without a separate event);
+                // otherwise it is a truncated stream.
+                finish(acc.done ? null : new Error('vsock transport: socket closed before exec result'), acc.finish());
+            });
+            idle.bump();
+            socket.write(frame(JSON.stringify({ op: 'execute', body })));
+        });
+    }
+    /** Liveness probe. Returns true on an `{ ok: true }` healthz reply. */
+    async healthz() {
+        try {
+            const res = await this.request({ op: 'healthz' });
+            return res.ok === true;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Poll the agent until a healthz succeeds or the timeout elapses.
+     * Mirrors the HTTP `waitForWorkerReady`, but over the vsock dialer
+     * (which already carries connect retry) — used by the backend's
+     * post-create readiness fence.
+     */
+    async waitForReady(timeoutMs, pollIntervalMs) {
+        const deadline = Date.now() + timeoutMs;
+        let lastErr;
+        while (Date.now() < deadline) {
+            try {
+                if (await this.healthz())
+                    return;
+                lastErr = new Error('healthz returned not-ok');
+            }
+            catch (err) {
+                lastErr = err;
+            }
+            await delay(pollIntervalMs);
+        }
+        throw new Error(`vsock transport: agent did not become ready within ${timeoutMs}ms: ${lastErr instanceof Error ? lastErr.message : String(lastErr)}`);
+    }
+    async writeFile(path, content) {
+        const res = await this.request({
+            op: 'write-file',
+            body: { path, content: content.toString('base64'), encoding: 'base64' },
+        });
+        if (!res.ok) {
+            throw new Error(res.error ?? 'write-file failed');
+        }
+    }
+    async readFile(path) {
+        const res = await this.request({
+            op: 'read-file',
+            body: { path, encoding: 'base64' },
+        });
+        if (!res.ok || typeof res.content !== 'string') {
+            throw new Error(res.error ?? 'read-file: no content');
+        }
+        return Buffer.from(res.content, 'base64');
+    }
+}
+// ---------------------------------------------------------------------------
+// Small helpers
+// ---------------------------------------------------------------------------
+/** Reads exactly one `\n`-terminated line (used for the CONNECT ack). */
+class LineReader {
+    buf = Buffer.alloc(0);
+    remainder = Buffer.alloc(0);
+    push(chunk) {
+        this.buf = Buffer.concat([this.buf, chunk]);
+        const nl = this.buf.indexOf(0x0a);
+        if (nl < 0)
+            return undefined;
+        const line = this.buf.subarray(0, nl).toString('utf8');
+        this.remainder = Buffer.from(this.buf.subarray(nl + 1));
+        return line;
+    }
+    takeRemainder() {
+        const r = this.remainder;
+        this.remainder = Buffer.alloc(0);
+        return r;
+    }
+}
+/** Resets a timer on every byte; fires `onIdle` after `ms` of silence. */
+class IdleTimer {
+    ms;
+    onIdle;
+    timer;
+    constructor(ms, onIdle) {
+        this.ms = ms;
+        this.onIdle = onIdle;
+    }
+    bump() {
+        if (this.ms <= 0)
+            return;
+        this.clear();
+        this.timer = setTimeout(this.onIdle, this.ms);
+        this.timer.unref();
+    }
+    clear() {
+        if (this.timer)
+            clearTimeout(this.timer);
+        this.timer = undefined;
+    }
+}
+function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function describeHandle(handle) {
+    switch (handle.kind) {
+        case 'unix':
+            return `unix:${handle.path}`;
+        case 'vsock':
+            return `vsock:${handle.udsPath}#${handle.port}`;
+        case 'mtls':
+            return `mtls:${handle.host}:${handle.port}/${handle.sandboxId}`;
+    }
+}
+// Internal framing helpers exported for the transport unit tests so the
+// agent stand-in and the round-trip assertions share one framing impl.
+export const __framing = { frame, FrameReader };
+//# sourceMappingURL=transport.js.map

package/dist/backends/firecracker/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../src/backends/firecracker/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAEH,OAAO,GAAG,MAAM,UAAU,CAAA;AAC1B,OAAO,GAAG,MAAM,UAAU,CAAA;AAG1B,OAAO,EAEN,qBAAqB,EAKrB,aAAa,GACb,MAAM,eAAe,CAAA;AA+GtB,MAAM,0BAA0B,GAAG,KAAK,CAAA;AACxC,MAAM,+BAA+B,GAAG,MAAM,CAAA;AAC9C,MAAM,iCAAiC,GAAG,GAAG,CAAA;AAC7C,MAAM,4BAA4B,GAAG,MAAM,CAAA;AAE3C,6EAA6E;AAC7E,MAAM,iBAAiB,GAAG,CAAC,CAAA;AAE3B,SAAS,KAAK,CAAC,OAAe;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CACzB,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,iBAAiB,EAAE,GAAG,CAAC,IAAI,EAChE,OAAO,CACP,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,WAAW;IACR,GAAG,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAErC,IAAI,CAAC,KAAa;QACjB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;QACxF,MAAM,GAAG,GAAa,EAAE,CAAA;QACxB,SAAS,CAAC;YACT,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA,CAAC,OAAO;YACzC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,iBAAiB,EAAE,CAAC;gBACtC,0CAA0C;gBAC1C,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,iBAAiB,EAAE,CAAC;oBACvC,MAAM,IAAI,KAAK,CAAC,uDAAuD,EAAE,GAAG,CAAC,CAAA;gBAC9E,CAAC;gBACD,MAAK;YACN,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YACzD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;YACvC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,gDAAgD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAC1F,CAAC;YACD,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC,CAAA;YACpB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,GAAG,GAAG;gBAAE,MAAK,CAAC,qBAAqB;YAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YACtE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,GAAG,GAAG,CAAC,CAAA;YACzC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAClB,CAAC;QACD,OAAO,GAAG,CAAA;IACX,CAAC;CACD;AAED;;;;;GAKG;AACH,MAAM,OAAO,mBAAmB;IACd,MAAM,CAAoB;IAC1B,gBAAgB,CAAQ;IACxB,oBAAoB,CAAQ;IAC5B,sBAAsB,CAAQ;IAC9B,iBAAiB,CAAQ;IAE1C,YAAY,MAA0B,EAAE,UAAiC,EAAE;QAC1E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAAA;QAC9E,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,IAAI,+BAA+B,CAAA;QAC3F,IAAI,CAAC,sBAAsB;YAC1B,OAAO,CAAC,sBAAsB,IAAI,iCAAiC,CAAA;QACpE,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,4BAA4B,CAAA;IACnF,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,IAAI;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,oBAAoB,CAAA;QACvD,IAAI,OAAgB,CAAA;QACpB,SAAS,CAAC;YACT,IAAI,CAAC;gBACJ,OAAO,MAAM,IAAI,CAAC,WAAW,EAAE,CAAA;YAChC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,OAAO,GAAG,GAAG,CAAA;gBACb,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;oBAAE,MAAK;gBACjC,MAAM,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;YACzC,CAAC;QACF,CAAC;QACD,MAAM,IAAI,KAAK,CACd,sDAAsD,IAAI,CAAC,oBAAoB,cAAc,cAAc,CAC1G,IAAI,CAAC,MAAM,CACX,MAAM,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EACrE,EAAE,KAAK,EAAE,OAAO,EAAE,CAClB,CAAA;IACF,CAAC;IAEO,WAAW;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;QAC/D,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAA;YAClE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;YACpC,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC7B,IAAI,OAAO;oBAAE,OAAM;gBACnB,OAAO,GAAG,IAAI,CAAA;gBACd,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAA;YAClF,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAA;YACzB,KAAK,CAAC,KAAK,EAAE,CAAA;YAEb,MAAM,IAAI,GAAG,CAAC,GAAU,EAAE,EAAE;gBAC3B,IAAI,OAAO;oBAAE,OAAM;gBACnB,OAAO,GAAG,IAAI,CAAA;gBACd,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,MAAM,CAAC,GAAG,CAAC,CAAA;YACZ,CAAC,CAAA;YAED,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAE1B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;gBAC3B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC5B,IAAI,OAAO;wBAAE,OAAM;oBACnB,OAAO,GAAG,IAAI,CAAA;oBACd,YAAY,CAAC,KAAK,CAAC,CAAA;oBACnB,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;oBACpC,OAAO,CAAC,MAAM,CAAC,CAAA;oBACf,OAAM;gBACP,CAAC;gBACD,8DAA8D;gBAC9D,+DAA+D;gBAC/D,gCAAgC;gBAChC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;gBACxB,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,CAAA;gBACjC,MAAM,SAAS,GAAG,IAAI,UAAU,EAAE,CAAA;gBAClC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;oBAChC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;oBAClC,IAAI,IAAI,KAAK,SAAS;wBAAE,OAAM;oBAC9B,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;oBACrC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBACzB,IAAI,CAAC,IAAI,KAAK,CAAC,iBAAiB,IAAI,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;wBAC1E,OAAM;oBACP,CAAC;oBACD,IAAI,OAAO;wBAAE,OAAM;oBACnB,OAAO,GAAG,IAAI,CAAA;oBACd,YAAY,CAAC,KAAK,CAAC,CAAA;oBACnB,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;oBACpC,2DAA2D;oBAC3D,oDAAoD;oBACpD,MAAM,QAAQ,GAAG,SAAS,CAAC,aAAa,EAAE,CAAA;oBAC1C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;wBAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;oBACjD,OAAO,CAAC,MAAM,CAAC,CAAA;gBAChB,CAAC,CAAA;gBACD,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YAC1B,CAAC,CAAC,CAAA;QACH,CAAC,CAAC,CAAA;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACK,eAAe,CACtB,MAAqD;QAErD,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC;gBAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE;gBACjB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI;gBACrB,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG;gBACnB,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU;gBACjC,kBAAkB,EAAE,IAAI;gBACxB,UAAU,EAAE,SAAS;aACrB,CAAC,CAAA;YACF,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC7B,IAAI,OAAO;oBAAE,OAAM;gBACnB,OAAO,GAAG,IAAI,CAAA;gBACd,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAA;YAClF,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAA;YACzB,KAAK,CAAC,KAAK,EAAE,CAAA;YAEb,MAAM,IAAI,GAAG,CAAC,GAAU,EAAE,EAAE;gBAC3B,IAAI,OAAO;oBAAE,OAAM;gBACnB,OAAO,GAAG,IAAI,CAAA;gBACd,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,MAAM,CAAC,GAAG,CAAC,CAAA;YACZ,CAAC,CAAA;YAED,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAE1B,8DAA8D;YAC9D,kEAAkE;YAClE,8DAA8D;YAC9D,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE;gBACjC,IAAI,OAAO;oBAAE,OAAM;gBACnB,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;oBACxB,IAAI,CACH,IAAI,KAAK,CACR,qDACC,MAAM,CAAC,kBAAkB,IAAI,SAC9B,EAAE,CACF,CACD,CAAA;oBACD,OAAM;gBACP,CAAC;gBACD,OAAO,GAAG,IAAI,CAAA;gBACd,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;gBACpC,0DAA0D;gBAC1D,6DAA6D;gBAC7D,0DAA0D;gBAC1D,wDAAwD;gBACxD,MAAM,CAAC,KAAK,CAAC,WAAW,MAAM,CAAC,SAAS,IAAI,CAAC,CAAA;gBAC7C,OAAO,CAAC,MAAM,CAAC,CAAA;YAChB,CAAC,CAAC,CAAA;QACH,CAAC,CAAC,CAAA;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAI,GAAiB;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAChC,OAAO,MAAM,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC/C,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAA;YAChC,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE;gBACvD,IAAI,OAAO;oBAAE,OAAM;gBACnB,OAAO,GAAG,IAAI,CAAA;gBACd,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,MAAM,CAAC,IAAI,KAAK,CAAC,4CAA4C,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC,CAAA;YAC1F,CAAC,CAAC,CAAA;YACF,MAAM,MAAM,GAAG,CAAC,GAAiB,EAAE,KAAS,EAAE,EAAE;gBAC/C,IAAI,OAAO;oBAAE,OAAM;gBACnB,OAAO,GAAG,IAAI,CAAA;gBACd,IAAI,CAAC,KAAK,EAAE,CAAA;gBACZ,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAA;;oBACf,OAAO,CAAC,KAAU,CAAC,CAAA;YACzB,CAAC,CAAA;YACD,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACnC,IAAI,CAAC,IAAI,EAAE,CAAA;gBACX,IAAI,MAAgB,CAAA;gBACpB,IAAI,CAAC;oBACJ,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBAC5B,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;oBAC3D,OAAM;gBACP,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;gBACvB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACzB,IAAI,CAAC;wBACJ,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAM,CAAC,CAAA;oBACrC,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACd,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;oBAC5D,CAAC;gBACF,CAAC;YACF,CAAC,CAAC,CAAA;YACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;YAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC,CAAA;YAC5F,IAAI,CAAC,IAAI,EAAE,CAAA;YACX,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACzC,CAAC,CAAC,CAAA;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,IAAiB;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACxB,OAAO,MAAM,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC/D,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAA;YAChC,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC,KAAK,CAAC,CAAA;YAC5C,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE;gBACvD,IAAI,OAAO;oBAAE,OAAM;gBACnB,OAAO,GAAG,IAAI,CAAA;gBACd,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,MAAM,CACL,IAAI,KAAK,CAAC,iDAAiD,IAAI,CAAC,iBAAiB,IAAI,CAAC,CACtF,CAAA;YACF,CAAC,CAAC,CAAA;YACF,MAAM,MAAM,GAAG,CAAC,GAAiB,EAAE,KAAyB,EAAE,EAAE;gBAC/D,IAAI,OAAO;oBAAE,OAAM;gBACnB,OAAO,GAAG,IAAI,CAAA;gBACd,IAAI,CAAC,KAAK,EAAE,CAAA;gBACZ,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAA;;oBACf,OAAO,CAAC,KAA0B,CAAC,CAAA;YACzC,CAAC,CAAA;YACD,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACnC,IAAI,CAAC,IAAI,EAAE,CAAA;gBACX,IAAI,MAAgB,CAAA;gBACpB,IAAI,CAAC;oBACJ,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBAC5B,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;oBAC3D,OAAM;gBACP,CAAC;gBACD,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;oBAC9B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAC1B,uDAAuD;wBACvD,qDAAqD;wBACrD,MAAM,CACL,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,EACvE,GAAG,CAAC,MAAM,EAAE,CACZ,CAAA;wBACD,OAAM;oBACP,CAAC;oBACD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;oBACpC,IAAI,CAAC,KAAK;wBAAE,SAAQ,CAAC,2CAA2C;oBAChE,IAAI,CAAC;wBACJ,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;4BACrB,uDAAuD;4BACvD,uDAAuD;wBACxD,CAAC;oBACF,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACd,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;wBAC3D,OAAM;oBACP,CAAC;gBACF,CAAC;YACF,CAAC,CAAC,CAAA;YACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;YAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBACzB,8DAA8D;gBAC9D,8DAA8D;gBAC9D,sCAAsC;gBACtC,MAAM,CACL,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,mDAAmD,CAAC,EAChF,GAAG,CAAC,MAAM,EAAE,CACZ,CAAA;YACF,CAAC,CAAC,CAAA;YACF,IAAI,CAAC,IAAI,EAAE,CAAA;YACX,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAyB,CAAC,CAAC,CAAC,CAAA;QACpF,CAAC,CAAC,CAAA;IACH,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,OAAO;QACZ,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAmB,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;YACnE,OAAO,GAAG,CAAC,EAAE,KAAK,IAAI,CAAA;QACvB,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAA;QACb,CAAC;IACF,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,cAAsB;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;QACvC,IAAI,OAAgB,CAAA;QACpB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACJ,IAAI,MAAM,IAAI,CAAC,OAAO,EAAE;oBAAE,OAAM;gBAChC,OAAO,GAAG,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;YAC/C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,OAAO,GAAG,GAAG,CAAA;YACd,CAAC;YACD,MAAM,KAAK,CAAC,cAAc,CAAC,CAAA;QAC5B,CAAC;QACD,MAAM,IAAI,KAAK,CACd,sDAAsD,SAAS,OAC9D,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAC5D,EAAE,CACF,CAAA;IACF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAe;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAoB;YACjD,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE;SACvE,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAA;QAClD,CAAC;IACF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QAC1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAmB;YAChD,EAAE,EAAE,WAAW;YACf,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE;SAClC,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,uBAAuB,CAAC,CAAA;QACtD,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IAC1C,CAAC;CACD;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,yEAAyE;AACzE,MAAM,UAAU;IACP,GAAG,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC7B,SAAS,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAE3C,IAAI,CAAC,KAAa;QACjB,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;QAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,EAAE,GAAG,CAAC;YAAE,OAAO,SAAS,CAAA;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACtD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;QACvD,OAAO,IAAI,CAAA;IACZ,CAAC;IAED,aAAa;QACZ,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAA;QACxB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAChC,OAAO,CAAC,CAAA;IACT,CAAC;CACD;AAED,0EAA0E;AAC1E,MAAM,SAAS;IAGI;IACA;IAHV,KAAK,CAA4B;IACzC,YACkB,EAAU,EACV,MAAkB;QADlB,OAAE,GAAF,EAAE,CAAQ;QACV,WAAM,GAAN,MAAM,CAAY;IACjC,CAAC;IACJ,IAAI;QACH,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC;YAAE,OAAM;QACxB,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;QAC7C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;IACnB,CAAC;IACD,KAAK;QACJ,IAAI,IAAI,CAAC,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACxC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAA;IACvB,CAAC;CACD;AAED,SAAS,KAAK,CAAC,EAAU;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;AACzD,CAAC;AAED,SAAS,cAAc,CAAC,MAA0B;IACjD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,MAAM;YACV,OAAO,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAA;QAC7B,KAAK,OAAO;YACX,OAAO,SAAS,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,CAAA;QAChD,KAAK,MAAM;YACV,OAAO,QAAQ,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAA;IACjE,CAAC;AACF,CAAC;AAED,wEAAwE;AACxE,uEAAuE;AACvE,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,CAAA"}