@opengeni/runtime 0.14.1 → 0.14.15

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/openaiProvider.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/metadata.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/defaults.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/openaiResponsesModel.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/logger.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/rawModelEvents.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/retryAdvice.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/responsesWebSocketConnection.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/responsesTransportUtils.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/tools.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/utils/providerData.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/utils/modelSettings.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/responsesUtils.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/openaiChatCompletionsStreaming.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/openaiChatCompletionsConverter.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/openaiChatCompletionsModel.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/openaiTracingExporter.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/memory/openaiConversationsSession.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/memory/openaiSessionApi.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/memory/openaiResponsesCompactionSession.ts","../../../node_modules/.bun/@openai+agents-realtime@0.13.3+6faab70c3ac8f376/node_modules/@openai/agents-realtime/src/metadata.ts","../../../node_modules/.bun/@openai+agents-realtime@0.13.3+6faab70c3ac8f376/node_modules/@openai/agents-realtime/src/utils.ts","../../../node_modules/.bun/@openai+agents-realtime@0.13.3+6faab70c3ac8f376/node_modules/@openai/agents-realtime/src/items.ts","../../../node_modules/.bun/@openai+agents-realtime@0.13.3+6faab70c3ac8f376/node_modules/@openai/agents-realtime/src/logger.ts","../../../node_modules/.bun/@openai+agents-realtime@0.13.3+6faab70c3ac8f376/node_modules/@openai/agents-realtime/src/openaiRealtimeEvents.ts","../../../node_modules/.bun/@openai+agents-realtime@0.13.3+6faab70c3ac8f376/node_modules/@openai/agents-realtime/src/shims/shims-node.ts","../../../node_modules/.bun/@openai+agents-realtime@0.13.3+6faab70c3ac8f376/node_modules/@openai/agents-realtime/src/tool.ts","../../../node_modules/.bun/@openai+agents@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents/src/index.ts","../src/screenshot-error-card.ts","../src/history-sanitizer.ts","../src/codex-tool-search.ts","../src/context-compaction.ts","../src/sandbox-computer.ts","../src/workspace-skills.ts","../src/usage-telemetry.ts"],"sourcesContent":["import type {\n  ConfiguredModel,\n  ModelProviderApi,\n  ResolvedModelProvider,\n  Settings,\n} from \"@opengeni/config\";\nimport {\n  AGENT_INSTRUCTIONS_CORE_PLACEHOLDER,\n  collectSandboxEnvironment,\n  firstPartyMcpBaseUrl,\n  resolveModelProvider,\n  sandboxLifecycleHookIds,\n} from \"@opengeni/config\";\nimport {\n  approvalIdentifier,\n  CAPABILITY_DESCRIPTORS,\n  DEFAULT_FIRST_PARTY_MCP_PERMISSIONS,\n  DEFAULT_FIRST_PARTY_MCP_TOOLS,\n  assertUniqueResourceMountPaths,\n  gitCredentialBindingIdForRepository,\n  gitCredentialProviderForRepository,\n  isClearedRunStateBlob,\n  normalizeRepositorySubpath,\n  normalizeResourceMountPath,\n  prefixedMcpToolName as sharedPrefixedMcpToolName,\n  resourceMountPath,\n  redactSensitiveText,\n  sessionEventMediaPreview,\n  sessionEventMediaPreviewFromDataUrl,\n  signDelegatedAccessToken,\n  RequestHumanInputToolInput,\n  type GitCredentialProvider,\n  type GitCredentialTransport,\n  type HumanInputResponse,\n  type McpServerConnectionRef,\n  type Permission,\n  type FirstPartyMcpToolName,\n  type ReasoningEffort,\n  type ResourceRef,\n  type SessionEventType,\n  type SessionEventMediaPreview,\n  type ToolAuthNeededPayload,\n  type ToolRef,\n} from \"@opengeni/contracts\";\nimport {\n  MCP_MAX_CONCURRENT_SERVER_OPERATIONS,\n  MCP_MAX_TOOL_RESULT_BYTES,\n  McpAggregateToolListBudget,\n  assertMcpPayloadWithinBytes,\n  assertMcpServerSelectionWithinBounds,\n  assertMcpToolListWithinBounds,\n  boundedParallelMap,\n  cancelMcpResponseBody,\n  guardedMcpFetch,\n  mcpOuterConnectTimeoutMs,\n  undiciFetch,\n} from \"./mcp-network\";\nimport {\n  Agent,\n  AgentsError,\n  connectMcpServers,\n  OpenAIProvider,\n  setDefaultModelProvider,\n  MaxTurnsExceededError,\n  MCPServerStreamableHttp,\n  // Provider-bound Model instances. Both are re-exported from\n  // @openai/agents-openai via `export * from '@openai/agents-openai'` in\n  // @openai/agents' index (0.11.6), so the multi-provider routing imports them\n  // from the same entrypoint as the rest of the SDK rather than reaching into\n  // the openai subpackage. OpenAIChatCompletionsModel speaks /v1/chat/completions\n  // (the registry \"chat\" wire API, e.g. Fireworks); OpenAIResponsesModel speaks\n  // /v1/responses (the built-in OpenAI/Azure \"responses\" wire API). Both bind a\n  // model id to a specific OpenAI client, which is what routes a turn to its\n  // provider without touching the global default client.\n  OpenAIChatCompletionsModel,\n  OpenAIResponsesModel,\n  RunState,\n  isOpenAIResponsesRawModelStreamEvent,\n  run,\n  Runner,\n  setDefaultOpenAIClient,\n  setDefaultOpenAIKey,\n  setOpenAIResponsesTransport,\n  setTracingDisabled,\n  tool as agentTool,\n  // Hosted web_search tool factory. Re-exported from @openai/agents-openai via\n  // `export * from '@openai/agents-openai'` in @openai/agents' index (0.11.6);\n  // it returns a { type: 'hosted_tool', providerData: { type: 'web_search' } }\n  // descriptor the OpenAI Responses model serializes into request.tools[].\n  webSearchTool,\n  // The SDK's V4A-diff applier — the apply_patch host the filesystem capability's\n  // editor uses. The agent-loop-free sandbox leaf cannot import it (it lives behind\n  // the `@openai/agents` root the leaf forbids), so the barrel imports it here and\n  // injects it into the selfhosted session's `createEditor` via setSelfhostedApplyDiff\n  // (below, right after the leaf re-export). This lets a selfhosted active backend\n  // apply file edits over its NATS fs ops using the SDK's exact diff semantics.\n  applyDiff,\n  type AgentInputItem,\n  type CallModelInputFilter,\n  type MCPServer,\n  type MCPToolErrorFunction,\n  type Model,\n  type ModelRequest,\n  type ModelProvider,\n  type RunStreamEvent,\n  type Tool,\n} from \"@openai/agents\";\nimport { localDirLazySkillSource } from \"@openai/agents/sandbox/local\";\nimport {\n  Capabilities,\n  Manifest,\n  SandboxAgent,\n  azureBlobMount,\n  dir,\n  file,\n  filesystem,\n  gitRepo,\n  inContainerMountStrategy,\n  localDir,\n  s3Mount,\n  shell,\n  skills,\n  type Dir,\n  type Entry,\n  type LocalDirLazySkillSource,\n  type SandboxClient,\n  type SandboxSessionLike,\n  type SandboxSessionState,\n  type SandboxRunConfig,\n  type SkillIndexEntry,\n} from \"@openai/agents/sandbox\";\nimport { ModalCloudBucketMountStrategy } from \"@openai/agents-extensions/sandbox/modal\";\nimport OpenAI from \"openai\";\nimport {\n  CODEX_APPS_MCP_SERVER_ID,\n  CODEX_MODEL_ID_PREFIX,\n  CODEX_ORIGINATOR,\n  CODEX_RESPONSE_SDK_OUTER_TIMEOUT_MS,\n  boundModelToolOutputItems,\n  codexAppsSanitizingFetch,\n  codexRequestStorage,\n  codexSubscriptionFetch,\n} from \"@opengeni/codex\";\nimport { cpSync, existsSync, mkdirSync, readdirSync, renameSync, rmSync } from \"node:fs\";\nimport { createHash } from \"node:crypto\";\nimport { dirname, isAbsolute, join, posix as posixPath, relative } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nimport {\n  computerCallNormalizingFetch,\n  elideSupersededViewImagePairs,\n  normalizeComputerCallActions,\n  sanitizeHistoryItemsForModel,\n} from \"./history-sanitizer\";\nimport { installCodexToolSearch } from \"./codex-tool-search\";\nimport {\n  CompactionNeededError,\n  CompactionProviderResponseError,\n  EmptyCompactionSummaryError,\n  SUMMARY_BUFFER_TOKENS,\n  compactionThresholdTokens,\n  estimateCompleteModelInput,\n  estimateSerializedValueTokens,\n  hasModelGeneratedItem,\n  renderCompactionPromptInputForChat,\n  type CompleteModelInputFootprint,\n  type ProviderContextTokenSignal,\n} from \"./context-compaction\";\nimport {\n  createSandboxClient,\n  desktopCapableBackend,\n  restoredSandboxSessionStateFromEntry,\n  setSelfhostedApplyDiff,\n  toolspaceTokenFileFromEnvironment,\n  withToolspaceTokenClient,\n  withToolspaceTokenSession,\n  withRunCredentialsClient,\n  withRunCredentialsSession,\n  type RunCredentialSessionReady,\n} from \"./sandbox\";\nimport { runWithToolCallCorrelation } from \"./sandbox/op-correlation\";\nimport { shellToolspacePath } from \"./sandbox/toolspace-token\";\nimport {\n  createTurnToolCancellationController,\n  TurnSandboxCommandCancelledError,\n  wrapCapabilityToolsForTurnCancellation,\n  type TurnSandboxCommandArgs,\n  type TurnSandboxCommandSession,\n  type TurnToolCancellationFence,\n} from \"./sandbox/turn-tool-cancellation\";\nimport { computerUse, type ComputerToolMode } from \"./sandbox-computer\";\nimport type { RuntimeMetricsHooks } from \"./metrics\";\nimport { workspaceSkills, type WorkspaceSkillSearchPath } from \"./workspace-skills\";\n\n// The Agents SDK's debug namespaces can otherwise serialize complete model\n// inputs/outputs and tool arguments/results. These getters read process.env on\n// every log call, so keep the process-global guard permanently enabled rather\n// than toggling it around concurrent turns.\nprocess.env.OPENAI_AGENTS_DONT_LOG_MODEL_DATA = \"1\";\nprocess.env.OPENAI_AGENTS_DONT_LOG_TOOL_DATA = \"1\";\n\nexport {\n  getSkillLibraryEntry,\n  isSkillLibraryEntryId,\n  listSkillLibraryEntries,\n  loadSkillLibrarySkill,\n  type SkillLibraryEntry,\n  type SkillLibraryFile,\n  type SkillLibrarySkill,\n} from \"./skill-library\";\n\nexport type { RuntimeMetricsHooks } from \"./metrics\";\nexport {\n  createTurnToolCancellationController,\n  TurnSandboxCommandCancelledError,\n} from \"./sandbox/turn-tool-cancellation\";\nexport type {\n  TurnSandboxCommandArgs,\n  TurnSandboxCommandSession,\n  TurnToolCancellationController,\n  TurnToolCancellationFence,\n} from \"./sandbox/turn-tool-cancellation\";\n\n// P4.3 computer-use surface (the agent's :0 driver). Re-exported from the barrel\n// so callers (the worker, live proofs) reach SandboxComputer/ComputerUseCapability\n// alongside the rest of the runtime. NOT part of the agent-loop-free leaf (it\n// imports computerTool from the @openai/agents root).\nexport {\n  SandboxComputer,\n  ComputerUseCapability,\n  computerUse,\n  ComputerUnavailableError,\n  ComputerReadOnlyError,\n  ComputerActionError,\n  type SandboxComputerOptions,\n  type ComputerUseArgs,\n  type ComputerToolMode,\n} from \"./sandbox-computer\";\n\n// The agent-loop-free sandbox leaf (createSandboxClient + resume/recovery\n// helpers + the config-owned env/port re-exports). Re-exported verbatim so the\n// barrel surface is unchanged for apps/worker while @opengeni/runtime/sandbox\n// stays importable by the API without the agent loop.\nexport * from \"./sandbox\";\n\n// Inject the SDK's V4A `applyDiff` into the selfhosted session's apply_patch editor\n// at module load. The leaf can't import `applyDiff` (agent-loop root), so the\n// barrel — which already imports `@openai/agents` — wires it once. A selfhosted\n// active backend can now apply file edits over its NATS fs ops with the SDK's exact\n// diff semantics; without this, `createEditor()` throws a clear \"not injected\" error\n// rather than mis-editing. Runs at import time, before any turn binds a capability.\nsetSelfhostedApplyDiff(\n  applyDiff as unknown as (input: string, diff: string, mode?: \"default\" | \"create\") => string,\n);\n\nexport {\n  elideSupersededViewImagePairs,\n  sanitizeHistoryItemsForModel,\n  stripReasoningEncryptedContent,\n  stripReasoningIdentityFromSerializedRunState,\n  neutralizeToolSearchItemsInSerializedRunState,\n} from \"./history-sanitizer\";\nexport type { HistoryItem } from \"./history-sanitizer\";\n\n// The provider-bound Model classes used by buildModelInstance/resolveTurnModel.\n// Re-exported so callers (and routing tests) can assert which wire API a\n// resolved turn was bound to — OpenAIChatCompletionsModel for registry \"chat\"\n// providers (Fireworks), OpenAIResponsesModel for the built-in \"responses\" path\n// — without reaching into @openai/agents directly.\nexport { OpenAIChatCompletionsModel, OpenAIResponsesModel } from \"@openai/agents\";\n\nexport {\n  CompactionNeededError,\n  CompactionProviderResponseError,\n  EmptyCompactionSummaryError,\n  buildCompactionPromptInput,\n  buildCompactionReplacementHistory,\n  compactionReplacementFingerprint,\n  compactionThresholdTokens,\n  clampCompactionThresholdRatio,\n  decideCompaction,\n  buildSummaryItem,\n  findCompactionNeededError,\n  isCompactionSummary,\n  latestCompactionReplacementFingerprint,\n  prepareCompactionPromptInput,\n  isUserMessage,\n  estimateTokens,\n  estimateItemTokens,\n  estimateCompleteModelInput,\n  estimateSerializedValueTokens,\n  hasModelGeneratedItem,\n  renderCompactionPromptInputForChat,\n  COMPACTION_SUMMARY_MARKER,\n  COMPACTION_PROMPT,\n  COMPACT_USER_MESSAGE_MAX_TOKENS,\n  DEFAULT_COMPACTION_THRESHOLD_RATIO,\n  MIN_COMPACTION_THRESHOLD_RATIO,\n  MAX_COMPACTION_THRESHOLD_RATIO,\n  SUMMARY_BUFFER_TOKENS,\n  SUMMARY_PREFIX,\n  USER_MESSAGE_TRUNCATION_MARKER,\n} from \"./context-compaction\";\nexport type {\n  CompactionDecision,\n  CompactionItem,\n  PreparedCompactionPromptInput,\n} from \"./context-compaction\";\nexport {\n  MAX_MODEL_USAGE_TOKEN_COUNT,\n  modelCallUsageTelemetry,\n  modelUsageTokenCountOrNull,\n  normalizeModelCallUsage,\n} from \"./usage-telemetry\";\nexport type {\n  ModelCallUsageInput,\n  ModelCallUsageNormalization,\n  ModelCallUsageTelemetry,\n} from \"./usage-telemetry\";\n\nensureReadableStreamFrom();\n\nconst SANDBOX_LIFECYCLE_COMMAND_TIMEOUT_MS = 120_000;\n\nexport type NormalizedRuntimeEvent = {\n  type: SessionEventType;\n  payload: unknown;\n};\n\nexport type ModelResponseUsage = {\n  responseId?: string;\n  usage: {\n    inputTokens?: number;\n    outputTokens?: number;\n    totalTokens?: number;\n    inputTokensDetails?: Record<string, number> | Array<Record<string, number>>;\n    outputTokensDetails?: Record<string, number> | Array<Record<string, number>>;\n    requestUsageEntries?: Array<{\n      inputTokens?: number;\n      input_tokens?: number;\n      outputTokens?: number;\n      output_tokens?: number;\n      totalTokens?: number;\n      total_tokens?: number;\n      inputTokensDetails?: Record<string, number>;\n      input_tokens_details?: Record<string, number>;\n      outputTokensDetails?: Record<string, number>;\n      output_tokens_details?: Record<string, number>;\n    }>;\n  };\n};\n\ntype RuntimeMcpTool = Awaited<ReturnType<MCPServer[\"listTools\"]>>[number];\n\ntype FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;\n\nexport type ResolveConnectionCredentialInput = {\n  workspaceId: string;\n  subjectId?: string;\n  serverId: string;\n  toolName?: string;\n  connectionRef: McpServerConnectionRef;\n  /** Exact MCP destination whose request would receive the resolved headers. */\n  destinationUrl: string;\n  forceRefresh?: boolean;\n};\n\nexport type ResolveConnectionCredentialResult =\n  | {\n      status: \"ok\";\n      headers: Record<string, string>;\n      connectionId: string;\n      expiresAt?: Date | null;\n    }\n  | {\n      status: \"auth_needed\";\n      reason: ToolAuthNeededPayload[\"reason\"];\n      providerDomain: string;\n      provider?: string;\n      connectionId?: string;\n      scopes?: string[];\n      resource?: string;\n      selectedResources?: McpServerConnectionRef[\"selectedResources\"];\n      authorizationUrl?: string;\n    };\n\nexport function ensureReadableStreamFrom(): void {\n  const ctor = globalThis.ReadableStream as\n    | (typeof ReadableStream & {\n        from?: <T>(source: Iterable<T> | AsyncIterable<T>) => ReadableStream<T>;\n      })\n    | undefined;\n  if (!ctor || typeof ctor.from === \"function\") {\n    return;\n  }\n  Object.defineProperty(ctor, \"from\", {\n    configurable: true,\n    writable: true,\n    value<T>(source: Iterable<T> | AsyncIterable<T>): ReadableStream<T> {\n      const iterator = isAsyncIterable(source)\n        ? source[Symbol.asyncIterator]()\n        : source[Symbol.iterator]();\n      return new ReadableStream<T>({\n        async pull(controller) {\n          const next = await iterator.next();\n          if (next.done) {\n            controller.close();\n          } else {\n            controller.enqueue(next.value);\n          }\n        },\n        async cancel() {\n          await iterator.return?.();\n        },\n      });\n    },\n  });\n}\n\nexport type AgentSegmentInput =\n  | {\n      kind: \"message\";\n      /** A real human/API prompt. Omitted when resuming the same inference. */\n      text?: string;\n      /** Ephemeral platform context: system role, never conversation history. */\n      internalContext?: string;\n      // Canonical conversation truth. When omitted, this is a fresh first\n      // message; ordinary messages never deserialize an SDK RunState.\n      historyItems?: AgentInputItem[] | null;\n      sandboxEnvelope?: Record<string, unknown> | null;\n    }\n  | {\n      kind: \"approval\";\n      serializedRunState: string;\n      approvalId: string;\n      decision: \"approve\" | \"reject\";\n      message?: string;\n    }\n  | {\n      kind: \"human_input\";\n      serializedRunState: string;\n      toolCallId: string;\n    };\n\nexport type PreparedAgentInput = {\n  input: string | AgentInputItem[] | RunState<any, any>;\n  sandboxSessionState?: SandboxSessionState;\n};\n\nexport const HUMAN_INPUT_TOOL_NAME = \"request_human_input\";\n\nexport type SerializedHumanInputInterruption = {\n  toolCallId: string;\n  input: ReturnType<typeof RequestHumanInputToolInput.parse>;\n};\n\nexport type SandboxFileDownload = {\n  fileId: string;\n  mountPath: string;\n  filename: string;\n  url?: string;\n  content?: Uint8Array;\n  expiresAt?: Date | string;\n  sizeBytes?: number;\n};\n\nexport type SandboxFileDownloadFailure = {\n  fileId: string;\n  filename: string;\n  path: string;\n  reason: string;\n  exitCode?: number;\n  output?: string;\n};\n\nexport type SandboxFileDownloadMaterializationResult = {\n  failures: SandboxFileDownloadFailure[];\n};\n\nlet runtimeMetricsHooks: RuntimeMetricsHooks | null = null;\n\nexport function configureRuntimeMetricsHooks(hooks: RuntimeMetricsHooks | null | undefined): void {\n  runtimeMetricsHooks = hooks ?? null;\n}\n\nexport type OpenGeniRuntime = {\n  configure: (settings: Settings) => void;\n  // Multi-provider per-turn model routing. Returns the resolved provider, its\n  // (cached) client, the provider-bound Model instance, and the configured-model\n  // shape; null when the turn's model is not in the registry, so the caller\n  // falls back to the legacy global-client path (settings.openaiModel).\n  resolveTurnModel: (settings: Settings, modelId: string) => ReturnType<typeof resolveTurnModel>;\n  buildAgent: (\n    settings: Settings,\n    resources: ResourceRef[],\n    options?: BuildAgentOptions,\n  ) => Agent<any, any>;\n  prepareTools: (\n    settings: Settings,\n    tools: ToolRef[],\n    options?: PrepareToolsOptions,\n  ) => Promise<PreparedAgentTools>;\n  prepareInput: (\n    agent: Agent<any, any>,\n    input: AgentSegmentInput,\n    options?: PrepareInputOptions,\n  ) => Promise<PreparedAgentInput>;\n  runStream: (\n    agent: Agent<any, any>,\n    input: PreparedAgentInput,\n    settings: Settings,\n    options?: RunAgentStreamOptions,\n  ) => Promise<Awaited<ReturnType<typeof runAgentStream>>>;\n  serializeApprovals: (interruptions: unknown[]) => unknown[];\n  serializeHumanInputRequests?: (interruptions: unknown[]) => SerializedHumanInputInterruption[];\n};\n\nexport type ProductionRuntimeOverrides = {\n  model?: Model;\n  sandboxClient?: unknown;\n  metrics?: RuntimeMetricsHooks;\n};\n\nexport function createProductionAgentRuntime(\n  overrides: ProductionRuntimeOverrides = {},\n): OpenGeniRuntime {\n  return {\n    configure: (settings) => {\n      configureRuntimeMetricsHooks(overrides.metrics);\n      configureOpenAI(settings);\n    },\n    // A test/override model shadows the registry routing entirely (the scripted\n    // model used in worker tests is not in any provider's allow-list), so when\n    // one is supplied resolveTurnModel reports \"no resolution\" and the caller\n    // keeps the legacy global-client path with the override model.\n    resolveTurnModel: (settings, modelId) =>\n      overrides.model ? null : resolveTurnModel(settings, modelId),\n    buildAgent: (settings, resources, options) =>\n      buildOpenGeniAgent(settings, resources, {\n        ...options,\n        ...(overrides.model ? { model: overrides.model } : {}),\n      }),\n    prepareTools: prepareAgentTools,\n    prepareInput: prepareRunInput,\n    runStream: async (agent, input, settings, options) =>\n      await runAgentStream(agent, input, settings, {\n        ...options,\n        sandboxClient: overrides.sandboxClient,\n      }),\n    serializeApprovals,\n    serializeHumanInputRequests,\n  };\n}\n\n/**\n * Build an OpenAI client from settings for the configured provider. Mirrors the\n * client construction in configureOpenAI so a direct API call (the compaction\n * summarizer) uses the same Azure/OpenAI auth and base URL. Returns null when\n * the OpenAI-platform path has only a key (the SDK default client is used via\n * setDefaultOpenAIKey there); the caller then constructs a key-only client.\n */\nexport function buildOpenAIClientFromSettings(\n  settings: Settings,\n  providerId: string = settings.openaiProvider,\n): OpenAI {\n  if (settings.openaiProvider === \"azure\") {\n    const baseURL = settings.azureOpenaiBaseUrl ?? azureDeploymentBaseUrl(settings);\n    const apiKey = settings.azureOpenaiApiKey ?? settings.azureOpenaiAdToken ?? \"azure-ad-token\";\n    return new OpenAI({\n      apiKey,\n      baseURL,\n      maxRetries: settings.openaiMaxRetries,\n      defaultQuery: azureOpenAIDefaultQuery(settings, baseURL),\n      defaultHeaders:\n        settings.azureOpenaiAdToken && !settings.azureOpenaiApiKey\n          ? { Authorization: `Bearer ${settings.azureOpenaiAdToken}` }\n          : undefined,\n      // Rewrite every outbound /responses computer_call to the ACTIONS-ONLY shape\n      // the GA Azure computer tool accepts. This is the lowest reachable\n      // seam — below the SDK responses converter, which always re-synthesizes BOTH\n      // `action` and `actions` (rejected 400 \"exactly one of action or actions\").\n      // See computerCallNormalizingFetch / rewriteComputerCallsToActionsOnly.\n      fetch: computerCallNormalizingFetch(instrumentedModelFetch(providerId, globalThis.fetch)),\n    });\n  }\n  return new OpenAI({\n    apiKey: settings.openaiApiKey ?? process.env.OPENAI_API_KEY,\n    ...(settings.openaiBaseUrl ? { baseURL: settings.openaiBaseUrl } : {}),\n    maxRetries: settings.openaiMaxRetries,\n    fetch: instrumentedModelFetch(providerId, globalThis.fetch),\n  });\n}\n\n/**\n * One OpenAI client per resolved provider id, built lazily and cached for the\n * process. The built-in openai/azure provider reuses\n * buildOpenAIClientFromSettings verbatim (so its Azure AD/api-version/base-URL\n * construction stays byte-for-byte identical to configureOpenAI); a registry\n * provider gets a plain client pointed at its base URL with its resolved key,\n * the shared maxRetries budget, and its declared defaultQuery/defaultHeaders.\n * Caching by provider.id keeps concurrent multi-provider turns sharing one\n * connection pool per provider rather than reconstructing a client per turn.\n */\nconst providerClientCache = new Map<string, OpenAI>();\n\nexport function buildProviderClient(provider: ResolvedModelProvider, settings: Settings): OpenAI {\n  const cached = providerClientCache.get(provider.id);\n  if (cached) {\n    return cached;\n  }\n  const client = provider.builtin\n    ? buildOpenAIClientFromSettings(settings, provider.id)\n    : provider.kind === \"codex-subscription\"\n      ? // Codex subscription: the static apiKey is a placeholder — the real per-request\n        // bearer + ChatGPT-Account-ID, the /responses->/codex/responses rewrite, and the\n        // body normalization are all injected by codexSubscriptionFetch, which reads the\n        // per-workspace token from codexRequestStorage (AsyncLocalStorage) at call time.\n        // The provider id is constant (\"codex-subscription\"), so one cached client serves\n        // every workspace without baking a token into it.\n        new OpenAI({\n          apiKey: provider.apiKey ?? \"codex-subscription\",\n          ...(provider.baseUrl ? { baseURL: provider.baseUrl } : {}),\n          // Codex transport owns exactly one explicit 401 refresh/retry. Blind\n          // SDK retries on network/5xx/partial streams can replay provider work\n          // or external tool side effects without a durable checkpoint.\n          maxRetries: 0,\n          // The Codex transport owns finer headers/idle/whole deadlines and\n          // emits typed durable evidence. Keep the SDK's opaque envelope beyond\n          // that whole-response budget so `Request timed out.` cannot win first.\n          timeout: CODEX_RESPONSE_SDK_OUTER_TIMEOUT_MS,\n          fetch: codexSubscriptionFetch(instrumentedModelFetch(provider.id, globalThis.fetch)),\n        })\n      : // ResolvedModelProvider.apiKey is already the resolved key (configuredProviders\n        // ran resolveProviderApiKey at config time, collapsing apiKey/apiKeyEnv), so it\n        // is passed straight through here rather than re-resolved.\n        new OpenAI({\n          ...(provider.apiKey ? { apiKey: provider.apiKey } : {}),\n          ...(provider.baseUrl ? { baseURL: provider.baseUrl } : {}),\n          maxRetries: settings.openaiMaxRetries,\n          ...(provider.defaultQuery ? { defaultQuery: provider.defaultQuery } : {}),\n          ...(provider.defaultHeaders ? { defaultHeaders: provider.defaultHeaders } : {}),\n          fetch: instrumentedModelFetch(provider.id, globalThis.fetch),\n        });\n  providerClientCache.set(provider.id, client);\n  return client;\n}\n\n/**\n * Bind a model id to a provider's OpenAI client as an @openai/agents `Model`\n * instance, choosing the wire API by the provider's declared `api`: the \"chat\"\n * providers (e.g. Fireworks) get an OpenAIChatCompletionsModel that speaks\n * /v1/chat/completions, the \"responses\" providers (built-in OpenAI/Azure) get\n * an OpenAIResponsesModel that speaks /v1/responses. Passing this Model into\n * the agent is what routes a turn to its provider without mutating the global\n * default client.\n */\nexport function buildModelInstance(\n  provider: ResolvedModelProvider,\n  client: OpenAI,\n  modelId: string,\n): Model {\n  return provider.api === \"chat\"\n    ? new OpenAIChatCompletionsModel(client, modelId)\n    : new OpenAIResponsesModel(client, modelId);\n}\n\n/**\n * Resolved per-turn model routing: the provider that serves `modelId`, its\n * (cached) OpenAI client, the provider-bound `Model` instance, and the\n * configured-model shape (label/api/contextWindow/reasoningEffort/hostedWebSearch).\n * Returns null when the model is not in the registry — the caller then falls\n * back to the legacy global-client path (settings.openaiModel + the default\n * client configured by configureOpenAI), preserved byte-for-byte.\n */\nexport function resolveTurnModel(\n  settings: Settings,\n  modelId: string,\n): {\n  provider: ResolvedModelProvider;\n  client: OpenAI;\n  model: Model;\n  configured: ConfiguredModel;\n} | null {\n  const resolved = resolveModelProvider(settings, modelId);\n  if (!resolved) {\n    return null;\n  }\n  const client = buildProviderClient(resolved.provider, settings);\n  return {\n    provider: resolved.provider,\n    client,\n    model: buildModelInstance(resolved.provider, client, resolved.model.upstreamModelId),\n    configured: resolved.model,\n  };\n}\n\n/**\n * Routes a model *name* to its provider-bound Model (Fireworks chat model for a\n * registry model id, the built-in OpenAI/Azure responses model otherwise) via\n * `resolveTurnModel`. This is the load-bearing piece for the sandbox path:\n * passing a Model *instance* as `agent.model` only survives the in-process\n * (`sandboxBackend: \"none\"`) run — on the SandboxAgent/Modal path the instance\n * is dropped and the model *name* is re-resolved through the run's\n * `modelProvider` (or the global default). Without this router that re-resolution\n * hits the default client (e.g. Azure) and a registry model 404s\n * (\"deployment does not exist\"); with it the name resolves back to the right\n * provider. Installed both as the run-scoped `Runner.config.modelProvider` (every\n * run in runAgentStream goes through `runScopedRunner(settings)`, built from the\n * per-turn settings) and as the process default (see configureOpenAI). The\n * run-scoped instance is the load-bearing one: a `Runner` resolves string model\n * names against ITS OWN modelProvider, not the lazy global default, so each\n * concurrent turn routes codex/registry names against its own settings and a\n * foreign turn's setDefaultModelProvider can never clobber this turn's routing.\n * The process default remains only as a boot-time fallback. Falls back to the\n * SDK default provider for a model that is in no provider's allow-list.\n */\nexport class MultiProviderModelProvider implements ModelProvider {\n  private fallback: OpenAIProvider | undefined;\n\n  constructor(private readonly settings: Settings) {}\n\n  async getModel(modelName?: string): Promise<Model> {\n    if (modelName) {\n      const resolved = resolveTurnModel(\n        settingsForRunScopedModelResolution(this.settings, modelName),\n        modelName,\n      );\n      if (resolved) {\n        // Fail-loud floor (defense in depth): a `codex/<slug>` id must only ever\n        // resolve through the synthetic codex-subscription provider (which installs\n        // fetch: codexSubscriptionFetch + the per-workspace bearer). If a future\n        // settings path re-introduces a built-in/registry shadow that binds a\n        // `codex/` id to any other provider kind, that would silently ship the id\n        // to Azure/OpenAI as a deployment name (DeploymentNotFound 404). Refuse it\n        // here so codex can never reach a non-codex client on ANY backend; the\n        // primary fix (config configuredModels) keeps this a no-op in practice.\n        if (\n          modelName.startsWith(CODEX_MODEL_ID_PREFIX) &&\n          resolved.provider.kind !== \"codex-subscription\"\n        ) {\n          throw new CodexSubscriptionUnavailableError(modelName);\n        }\n        return resolved.model;\n      }\n      // A `codex/<slug>` id only resolves when the per-workspace worker overlay\n      // (settingsWithCodexCredential) has injected the synthetic codex-subscription\n      // provider — which it does ONLY for a workspace with an *active* connected\n      // Codex subscription. If it did not resolve, the subscription is not\n      // connected for this workspace, so the codex provider is absent. Falling\n      // through to the built-in OpenAIProvider below would ship `codex/<slug>` to\n      // the global default (Azure) client as a deployment name and surface a\n      // misleading \"DeploymentNotFound\" 404. Throw a clear, user-actionable error\n      // instead; it propagates through the worker's agentRunFailurePayload as the\n      // turn.failed message the session UI shows. Mirrors the codex-prefix\n      // awareness of assertConfiguredModel at apps/api/src/domain/sessions.ts.\n      if (modelName.startsWith(CODEX_MODEL_ID_PREFIX)) {\n        throw new CodexSubscriptionUnavailableError(modelName);\n      }\n    }\n    // A non-codex model in no provider's allow-list falls back to the SDK's\n    // default OpenAIProvider, which uses the global default client/key\n    // configureOpenAI set up (the built-in OpenAI/Azure provider).\n    this.fallback ??= new OpenAIProvider();\n    return this.fallback.getModel(modelName);\n  }\n}\n\nfunction settingsForRunScopedModelResolution(settings: Settings, modelName: string): Settings {\n  if (modelName !== settings.openaiModel) {\n    return settings;\n  }\n  const builtinAllowed = splitOpenaiAllowedModels(settings.openaiAllowedModels);\n  const fallbackBuiltin = builtinAllowed.find((id) => id !== modelName);\n  if (!fallbackBuiltin) {\n    return settings;\n  }\n  // The worker sets runSettings.openaiModel to the turn's model. For namespaced\n  // registry ids configuredModels filters the built-in entry out, but a unique\n  // bare registry id would otherwise be claimed by the built-in only because of\n  // that per-turn override. Resolve the run-scoped router against the deployment\n  // allow-list head instead; real built-in models stay in the allow-list.\n  return builtinAllowed.includes(modelName)\n    ? settings\n    : { ...settings, openaiModel: fallbackBuiltin };\n}\n\nfunction splitOpenaiAllowedModels(value: string): string[] {\n  return value\n    .split(\",\")\n    .map((item) => item.trim())\n    .filter(Boolean);\n}\n\n/**\n * A `codex/<slug>` turn reached the model router but the workspace has no active\n * Codex subscription connected (the worker overlay never injected the synthetic\n * provider, so resolveTurnModel returned nothing). Thrown instead of silently\n * routing the id to the built-in Azure/OpenAI client — that produced an opaque\n * \"DeploymentNotFound\" 404. The message is user-actionable (connect/reconnect)\n * and carries no status/code, so agentRunFailurePayload surfaces it verbatim as\n * a non-retryable turn.failed the session UI shows.\n */\nexport class CodexSubscriptionUnavailableError extends Error {\n  constructor(modelName: string) {\n    super(\n      `Codex subscription model \"${modelName}\" is unavailable: no active Codex subscription is connected for this workspace. ` +\n        `Connect (or reconnect) your ChatGPT/Codex subscription in Settings, then retry.`,\n    );\n    this.name = \"CodexSubscriptionUnavailableError\";\n  }\n}\n\n/**\n * The workspace's model policy blocks the provider/model this turn resolved\n * to. Thrown at the worker's post-resolution gate INSTEAD of running the turn\n * on the blocked provider — a policy-restricted workspace (e.g. fail-closed to\n * the Codex subscription) must never silently remap to, or fall through to,\n * the paid built-in client. Like CodexSubscriptionUnavailableError the message\n * is user-actionable and surfaces verbatim as a non-retryable turn.failed.\n */\nexport class WorkspaceModelPolicyBlockedError extends Error {\n  constructor(modelName: string, providerId: string, reason: \"provider\" | \"model\") {\n    super(\n      reason === \"provider\"\n        ? `Model \"${modelName}\" is not available in this workspace: its provider (\"${providerId}\") is not in the workspace's allowed providers. ` +\n            `Pick an allowed model, or ask a workspace admin to change the workspace model policy.`\n        : `Model \"${modelName}\" is not in this workspace's allowed models. ` +\n            `Pick an allowed model, or ask a workspace admin to change the workspace model policy.`,\n    );\n    this.name = \"WorkspaceModelPolicyBlockedError\";\n  }\n}\n\nexport function configureOpenAI(settings: Settings): void {\n  setOpenAIResponsesTransport(settings.openaiResponsesTransport);\n  setTracingDisabled(settings.disableOpenaiTracing || !settings.observabilityOtlpEndpoint);\n  // Install the registry-aware router as the process default model provider so a\n  // model name re-resolved on the SandboxAgent/Modal path (where a Model instance\n  // does not survive) routes to its provider instead of the built-in client.\n  // Built before the default-client calls below so it captures the same settings.\n  const router = new MultiProviderModelProvider(settings);\n  if (settings.openaiProvider === \"azure\") {\n    setDefaultOpenAIClient(buildOpenAIClientFromSettings(settings));\n    setDefaultModelProvider(router);\n    return;\n  }\n  if (settings.openaiApiKey) {\n    setDefaultOpenAIKey(settings.openaiApiKey);\n  }\n  if (settings.openaiBaseUrl) {\n    setDefaultOpenAIClient(buildOpenAIClientFromSettings(settings));\n  }\n  setDefaultModelProvider(router);\n}\n\nfunction instrumentedModelFetch(provider: string, inner: typeof fetch): typeof fetch {\n  return (async (input: Parameters<typeof fetch>[0], init?: Parameters<typeof fetch>[1]) => {\n    if (!isModelCallFetch(input)) {\n      return await inner(input, init);\n    }\n    const started = performance.now();\n    try {\n      const response = await inner(input, init);\n      recordModelCallMetric(provider, response.ok ? \"completed\" : \"failed\", started);\n      return response;\n    } catch (error) {\n      recordModelCallMetric(provider, \"failed\", started);\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\nfunction isModelCallFetch(input: Parameters<typeof fetch>[0]): boolean {\n  const rawUrl =\n    typeof input === \"string\"\n      ? input\n      : input instanceof URL\n        ? input.toString()\n        : (input as { url?: unknown }).url;\n  if (typeof rawUrl !== \"string\" || rawUrl.length === 0) {\n    return false;\n  }\n  try {\n    const pathname = new URL(rawUrl, \"http://opengeni.local\").pathname;\n    return (\n      pathname.endsWith(\"/responses\") ||\n      pathname.endsWith(\"/chat/completions\") ||\n      pathname.endsWith(\"/codex/responses\")\n    );\n  } catch {\n    return /\\/(?:codex\\/)?responses(?:\\?|$)|\\/chat\\/completions(?:\\?|$)/.test(rawUrl);\n  }\n}\n\nfunction recordModelCallMetric(\n  provider: string,\n  outcome: \"completed\" | \"failed\",\n  started: number,\n): void {\n  const durationSeconds = Math.max(0, (performance.now() - started) / 1000);\n  try {\n    runtimeMetricsHooks?.onModelCall?.({ provider, outcome, durationSeconds });\n  } catch {\n    // Metrics emission must never affect a model call.\n  }\n}\n\n/**\n * Run the compaction summarizer as one plain, tool-less, non-streaming model\n * call against the resolved provider. `input` is the active history plus\n * Codex's checkpoint prompt. Provider failures propagate to the compaction\n * lifecycle; there is no non-model fallback that silently discards history.\n * The call deliberately does NOT\n * request reasoning encryption, tools, or inline provider compaction; it is a\n * self-contained summarize.\n *\n * Provider-aware: the summary always runs on the SAME provider that serves the\n * turn (registry providers can't summarize through OpenAI/Azure, and vice\n * versa). `api: \"chat\"` providers (Fireworks) speak /v1/chat/completions, where\n * the summary is choices[0].message.content; `api: \"responses\"` (the default,\n * built-in OpenAI/Azure) speaks /v1/responses as before. When no client/api is\n * supplied it uses the built-in OpenAI/Azure Responses path. store:false is set\n * only on the OpenAI-platform Responses path (Azure rejects it; chat ignores it).\n */\nexport async function summarizeForCompaction(\n  settings: Settings,\n  input: Array<Record<string, unknown>>,\n  options: {\n    client?: OpenAI;\n    api?: ModelProviderApi;\n    maxOutputTokens?: number;\n    model?: string;\n    promptCacheKey?: string;\n    systemInstructions?: string;\n    onUsage?: (usage: ModelResponseUsage) => void | Promise<void>;\n  } = {},\n): Promise<string> {\n  const client = options.client ?? buildOpenAIClientFromSettings(settings);\n  const api = options.api ?? \"responses\";\n  const model = options.model ?? settings.openaiModel;\n  const maxTokens = options.maxOutputTokens ?? SUMMARY_BUFFER_TOKENS;\n  if (api === \"chat\") {\n    const transcript = renderCompactionPromptInputForChat(input);\n    let completion: unknown;\n    try {\n      completion = await client.chat.completions.create({\n        model,\n        max_tokens: maxTokens,\n        messages: [{ role: \"user\", content: transcript }],\n        ...(options.promptCacheKey ? { prompt_cache_key: options.promptCacheKey } : {}),\n      } as any);\n    } catch (error) {\n      throw new CompactionProviderResponseError(compactionProviderFailureDiagnostics(error), error);\n    }\n    const usage = modelResponseUsageFromResponse(completion);\n    if (usage) {\n      await options.onUsage?.(usage);\n    }\n    const text = (completion as { choices?: Array<{ message?: { content?: unknown } }> })\n      .choices?.[0]?.message?.content;\n    const summary = typeof text === \"string\" ? text.trim() : \"\";\n    if (!summary) {\n      throw new EmptyCompactionSummaryError(compactionResponseDiagnostics(completion, summary));\n    }\n    return summary;\n  }\n  // Use the same SDK Responses adapter as the real agent call. It converts the\n  // structured AgentInputItems (callId/providerData/etc.) to provider wire\n  // items without flattening tool history into a fake user transcript.\n  const request: ModelRequest = {\n    systemInstructions: options.systemInstructions ?? \"\",\n    input: input as AgentInputItem[],\n    modelSettings: {\n      maxTokens,\n      // Azure rejects store:false; the Codex subscription transport enforces\n      // it independently. The OpenAI platform path remains explicitly storeless.\n      ...(settings.openaiProvider === \"azure\" ? {} : { store: false }),\n      ...(options.promptCacheKey\n        ? { providerData: { prompt_cache_key: options.promptCacheKey } }\n        : {}),\n    },\n    tools: [],\n    toolsExplicitlyProvided: true,\n    outputType: \"text\",\n    handoffs: [],\n    tracing: false,\n  };\n  let response: unknown;\n  try {\n    response = await new CompactionResponsesModel(client, model).fetchResponse(request);\n  } catch (error) {\n    throw new CompactionProviderResponseError(compactionProviderFailureDiagnostics(error), error);\n  }\n  const usage = modelResponseUsageFromResponse(response);\n  if (usage) {\n    await options.onUsage?.(usage);\n  }\n  if (isFailedCompactionProviderResponse(response)) {\n    throw new CompactionProviderResponseError(compactionProviderFailureDiagnostics(response));\n  }\n  const summary = extractResponseOutputText(response).trim();\n  if (!summary) {\n    throw new EmptyCompactionSummaryError(compactionResponseDiagnostics(response, summary));\n  }\n  return summary;\n}\n\nfunction isFailedCompactionProviderResponse(response: unknown): boolean {\n  if (!response || typeof response !== \"object\") return false;\n  const record = response as Record<string, unknown>;\n  return (\n    record.status === \"failed\" ||\n    record.status === \"incomplete\" ||\n    (record.error !== null && record.error !== undefined)\n  );\n}\n\n/** Bounded provider diagnostics: identifiers and classifications, never messages or model data. */\nexport function compactionProviderFailureDiagnostics(error: unknown): Record<string, unknown> {\n  let current = error;\n  let errorName: string | null = null;\n  let httpStatus: number | null = null;\n  let responseStatus: string | null = null;\n  let responseId: string | null = null;\n  let code: string | null = null;\n  let type: string | null = null;\n  let requestId: string | null = null;\n  let eventType: string | null = null;\n  const seen = new Set<object>();\n  for (let depth = 0; depth < 6 && current && typeof current === \"object\"; depth += 1) {\n    if (seen.has(current)) break;\n    seen.add(current);\n    const record = current as Record<string, unknown>;\n    if (!errorName && current instanceof Error) {\n      errorName = boundCompactionDiagnosticField(current.name);\n    }\n    if (\n      httpStatus === null &&\n      typeof record.status === \"number\" &&\n      Number.isFinite(record.status)\n    ) {\n      httpStatus = record.status;\n    }\n    if (responseStatus === null && typeof record.status === \"string\") {\n      responseStatus = boundCompactionDiagnosticField(record.status);\n    }\n    const directResponseStatus = record.response_status ?? record.responseStatus;\n    if (responseStatus === null && typeof directResponseStatus === \"string\") {\n      responseStatus = boundCompactionDiagnosticField(directResponseStatus);\n    }\n    const directResponseId = record.response_id ?? record.responseId ?? record.id;\n    if (responseId === null && typeof directResponseId === \"string\") {\n      responseId = boundCompactionDiagnosticField(directResponseId);\n    }\n    if (code === null && typeof record.code === \"string\") {\n      code = boundCompactionDiagnosticField(record.code);\n    }\n    if (type === null && typeof record.type === \"string\") {\n      type = boundCompactionDiagnosticField(record.type);\n    }\n    const directEventType = record.event_type ?? record.eventType;\n    if (eventType === null && typeof directEventType === \"string\") {\n      eventType = boundCompactionDiagnosticField(directEventType);\n    }\n    if (requestId === null) {\n      const directRequestId = record.request_id ?? record.requestId ?? record._request_id;\n      if (typeof directRequestId === \"string\") {\n        requestId = boundCompactionDiagnosticField(directRequestId);\n      }\n      const headers = record.headers;\n      if (!requestId && headers && typeof headers === \"object\") {\n        const get = (headers as { get?: unknown }).get;\n        if (typeof get === \"function\") {\n          const headerId = get.call(headers, \"x-request-id\");\n          if (typeof headerId === \"string\") {\n            requestId = boundCompactionDiagnosticField(headerId);\n          }\n        }\n      }\n    }\n    const nestedError = record.error;\n    if (nestedError && typeof nestedError === \"object\" && !seen.has(nestedError)) {\n      const nested = nestedError as Record<string, unknown>;\n      if (code === null && typeof nested.code === \"string\") {\n        code = boundCompactionDiagnosticField(nested.code);\n      }\n      if (type === null && typeof nested.type === \"string\") {\n        type = boundCompactionDiagnosticField(nested.type);\n      }\n      const nestedResponseStatus = nested.response_status ?? nested.responseStatus;\n      if (responseStatus === null && typeof nestedResponseStatus === \"string\") {\n        responseStatus = boundCompactionDiagnosticField(nestedResponseStatus);\n      }\n      const nestedResponseId = nested.response_id ?? nested.responseId ?? nested.id;\n      if (responseId === null && typeof nestedResponseId === \"string\") {\n        responseId = boundCompactionDiagnosticField(nestedResponseId);\n      }\n      const nestedEventType = nested.event_type ?? nested.eventType;\n      if (eventType === null && typeof nestedEventType === \"string\") {\n        eventType = boundCompactionDiagnosticField(nestedEventType);\n      }\n    }\n    current = record.cause;\n  }\n  return {\n    errorName,\n    httpStatus,\n    responseStatus,\n    responseId,\n    code,\n    type,\n    requestId,\n    ...(eventType ? { eventType } : {}),\n  };\n}\n\nconst COMPACTION_DIAGNOSTIC_FIELD_MAX_BYTES = 256;\nconst COMPACTION_DIAGNOSTIC_TRUNCATION_MARKER = \"…[truncated]\";\n\nfunction boundCompactionDiagnosticField(value: string): string {\n  const bytes = Buffer.from(value, \"utf8\");\n  if (bytes.length <= COMPACTION_DIAGNOSTIC_FIELD_MAX_BYTES) return value;\n  const markerBytes = Buffer.byteLength(COMPACTION_DIAGNOSTIC_TRUNCATION_MARKER, \"utf8\");\n  let end = COMPACTION_DIAGNOSTIC_FIELD_MAX_BYTES - markerBytes;\n  while (end > 0 && isUtf8ContinuationByte(bytes[end]!)) end -= 1;\n  return `${bytes.subarray(0, end).toString(\"utf8\")}${COMPACTION_DIAGNOSTIC_TRUNCATION_MARKER}`;\n}\n\nfunction isUtf8ContinuationByte(value: number): boolean {\n  return (value & 0xc0) === 0x80;\n}\n\n/** Bounded, content-free diagnostics for a semantically empty checkpoint. */\nexport function compactionResponseDiagnostics(\n  response: unknown,\n  extractedText = extractResponseOutputText(response).trim(),\n): Record<string, unknown> {\n  if (!response || typeof response !== \"object\") {\n    return { responseShape: typeof response, extractedTextLength: extractedText.length };\n  }\n  const record = response as Record<string, unknown>;\n  const output = Array.isArray(record.output) ? record.output : [];\n  const outputItems = output.slice(0, 50).map((item) => {\n    if (!item || typeof item !== \"object\") return { type: typeof item };\n    const value = item as Record<string, unknown>;\n    const content = Array.isArray(value.content) ? value.content : [];\n    return {\n      type: typeof value.type === \"string\" ? value.type : null,\n      role: typeof value.role === \"string\" ? value.role : null,\n      status: typeof value.status === \"string\" ? value.status : null,\n      contentPartTypes: content\n        .slice(0, 50)\n        .map((part) =>\n          part && typeof part === \"object\" && typeof (part as { type?: unknown }).type === \"string\"\n            ? (part as { type: string }).type\n            : typeof part,\n        ),\n      contentPartCount: content.length,\n    };\n  });\n  const choices = Array.isArray(record.choices) ? record.choices : [];\n  const usage = modelResponseUsageFromResponse(response)?.usage;\n  const incomplete =\n    record.incomplete_details && typeof record.incomplete_details === \"object\"\n      ? (record.incomplete_details as Record<string, unknown>)\n      : null;\n  return {\n    responseId: typeof record.id === \"string\" ? record.id : null,\n    status: typeof record.status === \"string\" ? record.status : null,\n    outputItemCount: output.length,\n    outputItems,\n    choiceCount: choices.length,\n    finishReasons: choices\n      .slice(0, 20)\n      .map((choice) =>\n        choice && typeof choice === \"object\"\n          ? ((choice as Record<string, unknown>).finish_reason ?? null)\n          : null,\n      ),\n    incompleteReason:\n      incomplete && typeof incomplete.reason === \"string\" ? incomplete.reason : null,\n    inputTokens: usage?.inputTokens ?? null,\n    outputTokens: usage?.outputTokens ?? null,\n    totalTokens: usage?.totalTokens ?? null,\n    extractedTextLength: extractedText.length,\n  };\n}\n\n/**\n * Pull the assistant text out of a Responses API result, shape-tolerant. Only\n * `role === \"assistant\"` message items contribute: a provider whose Responses\n * endpoint echoes the user input back as an output `message` item (Fireworks'\n * beta /v1/responses does exactly this — see docs/model-providers.md) would\n * otherwise corrupt the summary with the prompt it was given. The OpenAI/Azure\n * Responses API only emits assistant messages, so this guard is a no-op there.\n */\nexport function extractResponseOutputText(response: unknown): string {\n  if (!response || typeof response !== \"object\") {\n    return \"\";\n  }\n  const direct = (response as { output_text?: unknown }).output_text;\n  if (typeof direct === \"string\") {\n    return direct;\n  }\n  const output = (response as { output?: unknown }).output;\n  if (!Array.isArray(output)) {\n    return \"\";\n  }\n  const parts: string[] = [];\n  for (const item of output) {\n    if (!item || typeof item !== \"object\") {\n      continue;\n    }\n    if ((item as { type?: unknown }).type !== \"message\") {\n      continue;\n    }\n    // Read assistant messages only; skip any input-echo (role \"user\"/\"system\").\n    if ((item as { role?: unknown }).role !== \"assistant\") {\n      continue;\n    }\n    const content = (item as { content?: unknown }).content;\n    if (!Array.isArray(content)) {\n      continue;\n    }\n    for (const part of content) {\n      if (\n        part &&\n        typeof part === \"object\" &&\n        typeof (part as { text?: unknown }).text === \"string\"\n      ) {\n        parts.push((part as { text: string }).text);\n      }\n    }\n  }\n  return parts.join(\"\");\n}\n\n/**\n * The public SDK getResponse() method is runner-facing and always opens a\n * tracing span. Compaction is a standalone model call, so use the same SDK\n * request conversion and Responses transport without manufacturing a runner\n * trace solely to satisfy that wrapper.\n */\nclass CompactionResponsesModel extends OpenAIResponsesModel {\n  fetchResponse(request: ModelRequest) {\n    return this._fetchResponse(request, false);\n  }\n}\n\nexport type GitTokenSeeds = Partial<Record<GitCredentialProvider, string>>;\nexport type GitCredentialBindingSeed = {\n  credentialBindingId: string;\n  provider: GitCredentialProvider;\n  token: string;\n  transport?: GitCredentialTransport;\n  expiresAt?: string;\n  /** Total active bindings for this provider, used to suppress unsafe aliases. */\n  providerBindingCount?: number;\n};\nexport type GitCredentialTokenWriterSession = SandboxSessionLike;\nexport type ToolspaceTokenWriterSession = SandboxSessionLike;\n\nexport type EffectiveSkillSelection = Readonly<{\n  id: string;\n  name: string;\n  source: \"bundled\" | \"library\" | \"pack\" | \"session\";\n  version: string | null;\n  contentSha256: string | null;\n  reason: string;\n}>;\n\nconst agentSkillSelections = new WeakMap<object, readonly EffectiveSkillSelection[]>();\nconst emptySkillSelections: readonly EffectiveSkillSelection[] = Object.freeze([]);\n\n/**\n * Read-only, secret-free skill provenance for an already-built agent. This is\n * intentionally separate from the model instructions and sandbox manifest so\n * effective configuration inspection cannot accidentally expose credentials or\n * turn skill activation into an authorization change.\n */\nexport function effectiveSkillSelectionsForAgent(\n  agent: object,\n): readonly EffectiveSkillSelection[] {\n  return agentSkillSelections.get(agent) ?? emptySkillSelections;\n}\n\nexport type BuildAgentOptions = {\n  model?: Model;\n  /** Settled response for the one internal human-input interruption resumed by this run. */\n  humanInputResponse?: {\n    requestId: string;\n    toolCallId: string;\n    response: HumanInputResponse;\n  };\n  reasoningEffort?: ReasoningEffort;\n  // Per-turn gating overrides for the multi-provider path. Each defaults to\n  // today's settings-derived behaviour when omitted, so the legacy\n  // global-client callers (no model resolution) are byte-for-byte unchanged.\n  //\n  // - hostedWebSearch: attach the hosted web_search tool. Only the providers\n  //   that actually execute it (built-in OpenAI/Azure; a registry model that\n  //   opts in) should get it — Fireworks accepts the param but no-ops it, which\n  //   would hand the agent a dead tool. Default: settings.webSearchEnabled.\n  // - encryptedReasoning: round-trip reasoning.encrypted_content via\n  //   providerData.include. Only the Responses API carries it; the chat wire\n  //   API has no such field, so registry \"chat\" providers turn it off.\n  //   Default: settings.openaiReasoningEncryptedContent.\n  // - structuredToolTransport: whether the backend supports the Responses\n  //   STRUCTURED/HOSTED sandbox-tool transport — the hosted `apply_patch` tool\n  //   type and structured `view_image` output. The SDK's sandbox capabilities\n  //   pick hosted-vs-function purely from the bound model instance's constructor\n  //   name (supportsApplyPatchTransport / supportsStructuredToolOutputTransport).\n  //   Our codex turns run the OpenAIResponsesModel — which the SDK reads as\n  //   hosted-capable — but route it to the ChatGPT/Codex backend, which REJECTS\n  //   the hosted `apply_patch` type (\"Unsupported tool type: apply_patch\",\n  //   verified live). Set false for that backend so filesystem emits the\n  //   function `apply_patch` + text `view_image` variants it accepts. Default\n  //   true (let the SDK decide from the model instance) — non-codex paths are\n  //   byte-for-byte unchanged.\n  hostedWebSearch?: boolean;\n  encryptedReasoning?: boolean;\n  structuredToolTransport?: boolean;\n  // EXPLICIT computer-use tool transport, decided where provider identity is\n  // authoritative (the worker's model resolution — agent-turn.ts). Threaded into\n  // buildAgentCapabilities → computerUse({toolMode}) so tool selection never rests\n  // on the SDK's constructor-name sniff. When omitted, the legacy sniff +\n  // `structuredToolTransport` neutralize path is preserved byte-for-byte.\n  computerToolMode?: ComputerToolMode;\n  /**\n   * Invoked once, immediately before the first real computer action and after\n   * the display is ready. Merely advertising computer-use does not call it.\n   * The worker uses this seam for computer-use-only recording; ordinary\n   * shell/filesystem turns never pay that cost.\n   */\n  onComputerUseReady?: (session: SandboxSessionLike) => Promise<void>;\n  // The LIVE, by-reference connector-namespace Set from prepareAgentTools\n  // (codexConnectorNamespaces): fills during each turn's codex_apps tools/list,\n  // read per model call by the codex tool_search description so the model sees\n  // the account's ACTUALLY-connected sources (codex-rs parity). Only meaningful\n  // on the codex tool-search path.\n  codexConnectorNamespaces?: ReadonlySet<string>;\n  // Stable per-session routing key for provider-side prompt prefix caches. The\n  // worker passes this only for transports whose docs/API surface accept\n  // prompt_cache_key; registry providers that use a different affinity field stay\n  // unset to avoid unknown-parameter 400s.\n  promptCacheKey?: string;\n  sandboxEnvironment?: Record<string, string>;\n  // The EFFECTIVE/active compute backend for this turn. `settings.sandboxBackend`\n  // is the session's HOME backend (the default cloud group box it was created\n  // with); when a session has swapped its active sandbox to a connected machine\n  // (active_sandbox_id → a selfhosted lease, while the home backend stays the\n  // cloud default), the worker passes that machine's backend here so\n  // filesystem-touching lifecycle hooks key off where the agent ACTUALLY runs,\n  // not where it was created. The one such hook today is the repository clone\n  // (sandboxRepositoryCloneHooks): a bring-your-own machine owns its real disk,\n  // so the platform must NEVER `git clone` onto it. Defaults to\n  // settings.sandboxBackend, so the legacy cloud paths are byte-for-byte\n  // unchanged and a session whose HOME backend is \"selfhosted\" is gated with no\n  // caller change.\n  activeSandboxBackend?: Settings[\"sandboxBackend\"];\n  fileResourceDownloads?: SandboxFileDownload[];\n  mcpServers?: MCPServer[];\n  // Workspace Memory V1 working-set block, resolved by the worker per turn.\n  // Composed after the workspace persona/CORE/toolspace substrate and before\n  // per-session instructions. Omitted/blank ⇒ byte-identical instructions.\n  workspaceMemory?: string;\n  workspaceEnvironment?: WorkspaceEnvironmentContext;\n  // M3 rig runtime binding (all absent ⇒ a rig-less turn, byte-for-byte today).\n  //  - `rig`: renders the non-bypassable rig doctrine block in the CORE.\n  //  - `rigSetup`: the rig version's setup script, run ONCE per box (marker-\n  //    guarded) as the FIRST beforeAgentStart hook so later hooks see its tooling.\n  //  - `rigCredentialHookIds`: the rig version's credential_hooks, unioned with\n  //    the deployment preparation-profile hooks. Resolved (and VALIDATED — an\n  //    unknown name throws here, at build = per-turn resolution time) so a typo'd\n  //    hook fails the turn instead of being silently ignored.\n  rig?: RigInstructionsContext;\n  rigSetup?: RigSetupDescriptor;\n  rigCredentialHookIds?: string[];\n  // TOKEN-BROKER (B1): the run-scoped GitHub App installation token alias,\n  // minted ONCE per turn by the worker (sandboxEnvironmentForRun's `gitToken`).\n  // Kept for back-compat; internally it maps to gitTokenSeeds.github.\n  gitTokenSeed?: string;\n  // Provider-token map for GitHub/GitLab/Azure DevOps. Threaded here OFF-\n  // MANIFEST — it is NOT part of sandboxEnvironment (the manifest env), so token\n  // VALUES never trigger the SDK's provided-session env-delta guard even though\n  // they rotate every turn. buildAgent stashes them alongside the agent's\n  // repository-clone hooks; runStream forwards them into the hook context, which\n  // seeds provider token FILES before the clone/setup runs.\n  gitTokenSeeds?: GitTokenSeeds;\n  // Provider-neutral, independently mintable credentials. Binding ids remain\n  // off-manifest and are hashed before they influence sandbox paths.\n  gitCredentialBindings?: GitCredentialBindingSeed[];\n  // TOOLSPACE: the run-scoped delegated token to seed into\n  // $OPENGENI_TOOLSPACE_TOKEN_FILE. Like gitTokenSeed, this stays off the\n  // manifest/env delta and is written into the sandbox filesystem by a lifecycle\n  // hook before the agent starts.\n  toolspaceTokenSeed?: string;\n  // Durable OpenGeni session identity used only to derive the off-manifest,\n  // per-session token file. Required together with toolspaceTokenSeed so two\n  // sessions sharing one box never overwrite the same pointer.\n  toolspaceTokenSessionId?: string;\n  // Genesis turn only: inject a one-shot instruction into the FIRST model\n  // call telling it to title the session via opengeni__set_session_title.\n  // Keeping this out of the persistent Agent.instructions prevents every\n  // tool-follow-up model call in a long first turn from re-running setup.\n  genesisTitleHint?: boolean;\n  // Persistent session settings, resolved by the worker from the durable\n  // session row at turn start. Tool schemas are rebuilt on every turn, so\n  // without this factual state the model can mistake persistent metadata tools\n  // for per-turn initialization and re-apply the same title/notification mode.\n  // Values only — never the user-controlled title text — enter instructions.\n  persistentSessionSettings?: PersistentSessionSettings;\n  // Per-call agent persona override (the white-label surface). Resolved by the\n  // caller as session > workspace > deployment default; when omitted the\n  // runtime falls back to settings.agentInstructionsTemplate. The runtime\n  // substitutes the non-bypassable CORE at AGENT_INSTRUCTIONS_CORE_PLACEHOLDER\n  // (or appends it when the template omits the marker), so an override can\n  // restyle the persona but never drop the goal-loop contract or environment\n  // block.\n  instructionsTemplate?: string;\n  // Per-SESSION persona/system instructions (the per-agent-type prompt lever an\n  // embedding host supplies at session create). Composed AFTER the workspace\n  // instructionsTemplate + the non-bypassable CORE, so it refines the workspace\n  // persona for this one session without dropping the goal-loop/environment\n  // contract. Rides the SAME instructions channel (system-level) — NEVER a user/\n  // timeline message. Omitted ⇒ the composed instructions are byte-identical to\n  // a workspace-only persona.\n  sessionInstructions?: string;\n  // Host context for this exact accepted turn. Composed system-level after the\n  // durable session persona and omitted from all later turns.\n  turnInstructions?: string;\n  // Skills delivered by enabled capability packs. They join the bundled\n  // skills in the sandbox skill index (mounted under .agents/) so\n  // skills/<name> references resolve like any other indexed skill.\n  packSkills?: PackSkill[];\n  // Inline skills fixed onto this session at creation. They use the SDK's lazy\n  // skill source and are materialized only when the model loads one.\n  sessionSkills?: PackSkill[];\n  // Explicitly selected, immutable curated-library skill content. These are\n  // separate from packSkills so repository-local/pack compatibility does not\n  // turn a curated entry into a mutable override.\n  skillLibrarySkills?: PackSkill[];\n  // Secret-free provenance for effective-configuration inspection. The worker\n  // resolves exact ids/versions/hashes before constructing the agent.\n  skillLibrarySelections?: EffectiveSkillSelection[];\n  /**\n   * Internal per-attempt cancellation boundary. The worker supplies Temporal's\n   * signal so an in-flight shell process is interrupted immediately instead of\n   * holding Steer/Pause behind its requested yield or natural exit.\n   */\n  turnCancellationSignal?: AbortSignal;\n  /**\n   * Receives the physical sandbox-tool fence at agent construction time. A\n   * cancelled/fenced worker attempt must await it before publishing its durable\n   * attempt-quiesced receipt.\n   */\n  onToolCancellationFence?: (fence: TurnToolCancellationFence) => void;\n};\n\nexport type PackSkillFile = {\n  // Relative POSIX path inside the skill directory, e.g. \"SKILL.md\" or\n  // \"references/runbook.md\".\n  path: string;\n  content: string;\n};\n\nexport type PackSkill = {\n  name: string;\n  description?: string | null | undefined;\n  files: PackSkillFile[];\n};\n\n/**\n * Operator-facing metadata for the workspace environment attached to a run.\n * Surfaced verbatim in the agent instructions: the description is where\n * operators document how the exported credentials are meant to be used\n * (e.g. which variable holds a deploy key and how to clone with it), so an\n * agent must not have to rediscover that by enumerating `env` and guessing.\n * Only metadata belongs here — never variable values.\n */\nexport type WorkspaceEnvironmentContext = {\n  name: string;\n  description?: string | null;\n  variableNames?: string[];\n};\n\nexport type PersistentSessionSettings = {\n  titleIsSet: boolean;\n};\n\n/**\n * The rig a session rides (M3): its name + the active version pinned onto the\n * session. Surfaced verbatim in the non-bypassable CORE instructions so the\n * agent understands its sandbox is a disposable fork of a shared, versioned\n * machine definition and how to promote a durable change. Absent for rig-less\n * sessions (the block never renders).\n */\nexport type RigInstructionsContext = {\n  name: string;\n  version: number;\n};\n\nexport function rigInstructions(rig: RigInstructionsContext): string[] {\n  return [\n    `This session runs on rig \"${rig.name}\" (active version v${rig.version}) — a shared, versioned sandbox machine definition for your workspace.`,\n    \"Your sandbox is an EPHEMERAL FORK of that rig: you have root and may install anything freely, but everything you change here is junk that dies with the box and never reaches the rig or other sessions.\",\n    \"For a DURABLE, team-wide change (tooling every future session on this rig should have), propose it with rig_propose_change, passing the EXACT command that already worked in this box — never assume an unverified change propagates.\",\n    \"If tooling you expect is missing, consult rig_get to see the rig's current setup and checks before reinstalling.\",\n  ];\n}\n\nexport function workspaceEnvironmentInstructions(\n  environment: WorkspaceEnvironmentContext,\n): string[] {\n  const lines = [\n    `A workspace environment named \"${environment.name}\" is attached to this session; its variables are exported in the sandbox shell environment.`,\n  ];\n  const variableNames = (environment.variableNames ?? []).filter((name) => name.length > 0);\n  if (variableNames.length > 0) {\n    lines.push(`Exported environment variables: ${[...variableNames].sort().join(\", \")}.`);\n  }\n  const description = environment.description?.trim();\n  if (description) {\n    lines.push(`Environment notes from the operator: ${description}`);\n  }\n  return lines;\n}\n\n/**\n * The non-bypassable CORE of the agent instructions: the goal-loop ownership\n * line (which names the opengeni__goal_* tools and is what keeps a long-running\n * session driving itself) followed by the dynamic workspace-environment block.\n * Returned as ordered lines so the caller joins them with the rest of the\n * instructions by \" \", exactly as the historical preamble did.\n *\n * This is the slice a white-labelled persona template must never be able to\n * drop: composeAgentInstructions() substitutes it at the persona template's\n * {{core}} marker, and appends it when the marker is absent.\n */\nexport function coreInstructions(\n  workspaceEnvironment?: WorkspaceEnvironmentContext,\n  rig?: RigInstructionsContext,\n): string[] {\n  return [\n    \"If the session has a goal, you own it: keep working until you call opengeni__goal_complete with concrete evidence or opengeni__goal_pause with a rationale; revise it with opengeni__goal_update; create one with opengeni__goal_set when given a long-running objective.\",\n    ...(workspaceEnvironment ? workspaceEnvironmentInstructions(workspaceEnvironment) : []),\n    // Rig doctrine (M3): data-conditional, inside the non-bypassable CORE so a\n    // white-label persona template can never drop it. Absent for rig-less sessions.\n    ...(rig ? rigInstructions(rig) : []),\n  ];\n}\n\n/**\n * Composes the final agent instructions from a (possibly white-labelled)\n * persona template and the non-bypassable CORE. The CORE is substituted at the\n * template's {{core}} marker; if the template omits the marker, the CORE is\n * appended after it instead (the non-bypassable fail-safe). The substitution\n * and the append both join by \" \", so the DEFAULT_AGENT_INSTRUCTIONS template\n * with an empty environment reproduces the historical preamble byte-for-byte.\n */\nexport function composeAgentInstructions(\n  template: string,\n  workspaceEnvironment?: WorkspaceEnvironmentContext,\n  rig?: RigInstructionsContext,\n): string {\n  const core = coreInstructions(workspaceEnvironment, rig).join(\" \");\n  if (template.includes(AGENT_INSTRUCTIONS_CORE_PLACEHOLDER)) {\n    return template.split(AGENT_INSTRUCTIONS_CORE_PLACEHOLDER).join(core);\n  }\n  return core ? `${template} ${core}` : template;\n}\n\n/**\n * Appends the per-session persona instructions to the already-composed\n * (workspace + CORE) instructions, joined by \" \" — exactly the join used\n * throughout the persona composition. The session slice is intentionally LAST\n * (session-specific refinement of the workspace persona). An absent/blank value\n * is a no-op that returns the composed string byte-for-byte.\n */\nexport function appendSessionInstructions(composed: string, sessionInstructions?: string): string {\n  const trimmed = sessionInstructions?.trim();\n  return trimmed ? `${composed} ${trimmed}` : composed;\n}\n\n/** Append system instructions that apply to this exact turn only. */\nexport function appendTurnInstructions(composed: string, turnInstructions?: string): string {\n  const trimmed = turnInstructions?.trim();\n  return trimmed ? `${composed} ${trimmed}` : composed;\n}\n\n/**\n * Append the durable session metadata the model otherwise cannot observe.\n * This is deliberately declarative and excludes the title text: the title is\n * user-controlled display metadata, while the agent only needs to know whether\n * initialization has already happened. The block is present on every turn when\n * supplied so compaction cannot erase knowledge that these settings persist.\n */\nexport function appendPersistentSessionSettings(\n  composed: string,\n  settings?: PersistentSessionSettings,\n): string {\n  if (!settings) {\n    return composed;\n  }\n  return `${composed} Persistent session settings already in effect: the display title is ${settings.titleIsSet ? \"set\" : \"not set\"}. This setting persists across turns, continuations, and interruptions. Do not call opengeni__set_session_title merely to reassert an unchanged value; call it only when the current value actually needs to change.`;\n}\n\n/**\n * Appends the workspace memory working-set block to the already-composed\n * (workspace + CORE + generic substrate) instructions, joined by \" \". The\n * memory slice is workspace-ground and intentionally lands before\n * per-session instructions. An absent/blank value is a no-op that returns the\n * composed string byte-for-byte.\n */\nexport function appendWorkspaceMemory(composed: string, workspaceMemory?: string): string {\n  const trimmed = workspaceMemory?.trim();\n  return trimmed ? `${composed} ${trimmed}` : composed;\n}\n\n/**\n * Appends the generic programmatic-tool-calling (toolspace) directive to the\n * composed workspace + CORE instructions, joined by \" \". This is GENERIC\n * substrate prompting — the same text for every host, never per-host copy.\n *\n * Included ONLY when `toolspaceAvailable` is true, which the caller sets from the\n * exact condition that gates the sandbox token mint: the toolspace feature is\n * enabled AND a toolspace token was minted for THIS turn. That mint now happens\n * on every backend including selfhosted (connected machines get the token too),\n * so the block appears there as well; a turn with no minted token (feature off)\n * has no toolspace URL/token in its sandbox and must not advertise a capability\n * that is not there — the gate is false and this is a no-op. Placed BEFORE the\n * per-session instructions so host/session specificity still wins over this\n * substrate note.\n */\nexport function appendToolspaceInstructions(composed: string, toolspaceAvailable: boolean): string {\n  return toolspaceAvailable ? `${composed} ${TOOLSPACE_PROGRAMMATIC_DIRECTIVE}` : composed;\n}\n\nconst GIT_BINDING_DISCOVERY_DIRECTIVE =\n  \"This managed sandbox has multiple credential bindings for at least one Git provider. Native Git selects credentials from the repository remote. For gh, glab, or az, run inside the intended attached repository so its origin selects the binding; when running elsewhere, inspect $HOME/.opengeni/git-bindings.json and set OPENGENI_GIT_BINDING to the listed credentialBindingId. The inventory contains identifiers and repository routes, never credential values. A binding marked git_http_broker is Git-only, so use the configured provider MCP tools for provider API operations on it.\";\n\n/**\n * Make multi-account provider-CLI selection discoverable to the model.\n *\n * Binding ids are opaque routing identifiers, not credentials. The detailed,\n * secret-free repository mapping is materialized in the sandbox by the Git\n * setup hook so prompts stay compact.\n */\nexport function appendGitCredentialBindingInstructions(\n  composed: string,\n  bindings: GitCredentialBindingSeed[] | undefined,\n  activeSandboxBackend?: Settings[\"sandboxBackend\"],\n): string {\n  if (activeSandboxBackend === \"selfhosted\" || !bindings?.length) {\n    return composed;\n  }\n  const bindingsByProvider = new Map<GitCredentialProvider, Set<string>>();\n  for (const binding of bindings) {\n    const ids = bindingsByProvider.get(binding.provider) ?? new Set<string>();\n    ids.add(binding.credentialBindingId);\n    bindingsByProvider.set(binding.provider, ids);\n  }\n  return [...bindingsByProvider.values()].some((ids) => ids.size > 1)\n    ? `${composed} ${GIT_BINDING_DISCOVERY_DIRECTIVE}`\n    : composed;\n}\n\n/**\n * Appends the one-shot genesis title directive (genesis turn only), joined by\n * \" \" and always LAST so a white-label persona template or a per-session\n * instruction can't drop it. A no-op when the hint is absent.\n */\nexport function appendGenesisTitleDirective(\n  instructions: string,\n  genesisTitleHint?: boolean,\n): string {\n  return genesisTitleHint ? `${instructions} ${GENESIS_TITLE_DIRECTIVE}` : instructions;\n}\n\nconst agentFileDownloads = new WeakMap<object, SandboxFileDownload[]>();\nconst agentRepositoryCloneHooks = new WeakMap<object, SandboxLifecycleHook[]>();\n// TOKEN-BROKER (B1): the per-turn provider git token seeds, stashed alongside\n// the agent's repository-clone hooks (a parallel map keyed by the agent). Kept\n// OFF the manifest/defaultManifest so rotating values never ride the SDK's\n// provided-session env; runStream reads them to build the clone hook context.\n// Absent when no brokered repo is attached / on the selfhosted path.\nconst agentGitTokenSeeds = new WeakMap<object, GitTokenSeeds>();\nconst agentGitCredentialBindings = new WeakMap<object, GitCredentialBindingSeed[]>();\nconst agentToolspaceTokenSeed = new WeakMap<object, string>();\nconst agentToolspaceTokenSessionId = new WeakMap<object, string>();\n// A genesis directive is consumed by runAgentStream exactly once for the\n// freshly-built agent. It must not remain in Agent.instructions: those\n// instructions are presented again on every internal model/tool loop.\nconst agentsNeedingGenesisTitleDirective = new WeakSet<object>();\n// The EFFECTIVE backend the turn resolved for this agent (undefined -> the home\n// backend). Read by runStream's owned branch to keep platform box-setup hooks off\n// connected machines (a user's real computer).\nconst agentActiveSandboxBackend = new WeakMap<object, Settings[\"sandboxBackend\"]>();\n// M3: the rig-setup descriptor + resolved rig credential hooks for this agent's\n// turn (kept off the manifest like the clone hooks). Read by runStream to build\n// the rig-setup hook and to union the rig credential hooks with the deployment\n// preparation-profile hooks. Absent for a rig-less turn.\nconst agentRigSetup = new WeakMap<object, RigSetupDescriptor>();\nconst agentRigCredentialHooks = new WeakMap<object, SandboxLifecycleHook[]>();\n\n/**\n * The tool output emitted for an MCP tool call that FAILED with a THROWN error\n * — a JSON-RPC protocol error (e.g. -32602 invalid params), an auth 401/403, a\n * transport failure, a timeout, or tool-not-found. Shaped as an MCP\n * `{ isError: true, content }` result so the failure is CARRIED on the tool\n * output rather than erased.\n *\n * The SDK's `defaultToolErrorFunction` would instead turn a thrown tool error\n * into a plain STRING (\"An error occurred while running the tool…\") returned as\n * a NORMAL, successful-looking result — so `agent.toolCall.output` carried no\n * error signal and the timeline rendered the failure as success. `normalizeSdkEvent`\n * captures `RunToolCallOutputItem.output` (the raw function return) verbatim, so\n * returning this object makes the emitted payload's `output.isError === true`,\n * which the timeline projection's `isErrorOutput` (packages/react/src/timeline/\n * projection.ts) settles to \"failed\" and downstream client normalizers read the same field.\n *\n * SCOPE: this only covers THROWN MCP failures (the ones that reach an\n * errorFunction). An MCP tool result carrying `isError: true` INLINE alongside\n * content is stripped to its `content` by @openai/agents-core's streamable-http\n * shim (dist/shims/mcp-server/node.js `callTool` returns `parsed.content`,\n * dropping `parsed.isError`) BEFORE the runtime ever sees it. Covering that mode\n * requires an SDK-level change (preserve `isError`) or reading the raw\n * CallToolResult — tracked separately.\n */\nexport function mcpToolErrorOutput(error: unknown): {\n  isError: true;\n  content: [{ type: \"text\"; text: string }];\n} {\n  const details = redactSensitiveText(error instanceof Error ? error.message : String(error));\n  return {\n    isError: true,\n    content: [\n      {\n        type: \"text\",\n        text: `An error occurred while running the tool. Please try again. Error: ${details}`,\n      },\n    ],\n  };\n}\n\n// Applied to EVERY MCP server via the agent's `mcpConfig.errorFunction`\n// (server-level errorFunctions would win, but PrefixedMcpServer sets none). The\n// SDK types the return as `string`; the runtime actually stores the raw return\n// as the tool output, so we return the MCP-shaped error object and cast — this\n// is the only way to attach an `isError` flag to a failed MCP tool call's output.\nconst mcpToolErrorFunction: MCPToolErrorFunction = ({ error }) =>\n  mcpToolErrorOutput(error) as unknown as string;\n\nexport function buildOpenGeniAgent(\n  settings: Settings,\n  resources: ResourceRef[],\n  options: BuildAgentOptions = {},\n): Agent<any, any> {\n  if (Boolean(options.toolspaceTokenSeed) !== Boolean(options.toolspaceTokenSessionId)) {\n    throw new Error(\"toolspaceTokenSeed and toolspaceTokenSessionId must be supplied together\");\n  }\n  // Resolved per-turn gating. Each override defaults to today's settings-derived\n  // behaviour, so the legacy global-client callers (no resolved model) build the\n  // exact same agent as before; the multi-provider worker path passes the\n  // resolved provider's api/window/web-search instead.\n  const hostedWebSearch = options.hostedWebSearch ?? settings.webSearchEnabled;\n  const encryptedReasoning = options.encryptedReasoning ?? settings.openaiReasoningEncryptedContent;\n  const providerData = {\n    ...(encryptedReasoning ? { include: [\"reasoning.encrypted_content\"] } : {}),\n    ...(options.promptCacheKey ? { prompt_cache_key: options.promptCacheKey } : {}),\n  };\n  // Native hosted tools attached to every constructed agent. webSearchEnabled\n  // is ON by default and provider-unconditional on the built-in path (the live\n  // Azure Responses path executes the hosted web_search tool); a registry model\n  // only gets it when it opts in (resolved via options.hostedWebSearch), since\n  // a provider that no-ops the param would hand the agent a dead tool. The SDK\n  // merges this explicit `tools` array with the MCP-server tools\n  // (Agent.getAllTools = [...mcpTools, ...tools]) and, on the SandboxAgent path,\n  // with the sandbox capability tools (prepareSandboxAgent: tools =\n  // [...agent.tools, ...capability.tools()]), so hosted web_search coexists with\n  // both rather than overriding them.\n  const hostedTools = hostedWebSearch ? [webSearchTool()] : [];\n  const humanInputTool = agentTool({\n    name: HUMAN_INPUT_TOOL_NAME,\n    description:\n      \"Pause this turn and request structured human input. Use for decisions or missing information that only a person can provide. Supports free text, single-select, multi-select, an optional Other value, multiple questions, explicit skip policy, and an optional expiry.\",\n    parameters: RequestHumanInputToolInput,\n    needsApproval: true,\n    // A missing/mismatched durable response is a protocol integrity failure,\n    // not model-visible tool output the agent may reason past.\n    errorFunction: null,\n    execute: (_input, _context, details) => {\n      const settled = options.humanInputResponse;\n      if (!settled) {\n        throw new Error(\"Human-input tool resumed without a durable response\");\n      }\n      const resumedCallId = details?.toolCall?.callId;\n      if (resumedCallId && resumedCallId !== settled.toolCallId) {\n        throw new Error(\"Human-input response does not belong to the resumed tool call\");\n      }\n      return JSON.stringify({ requestId: settled.requestId, ...settled.response });\n    },\n  });\n  const agentTools = [...hostedTools, humanInputTool];\n  const baseConfig = {\n    name: \"OpenGeni Agent\",\n    model: options.model ?? settings.openaiModel,\n    // White-label persona composition. The effective template is the per-call\n    // override (options.instructionsTemplate, resolved by the caller as\n    // session > workspace) falling back to the deployment default\n    // (settings.agentInstructionsTemplate, default DEFAULT_AGENT_INSTRUCTIONS).\n    // composeAgentInstructions substitutes the non-bypassable CORE (goal-loop\n    // ownership + workspace-environment block) at the {{core}} marker, or\n    // appends it when the template omits the marker. With the default template\n    // and no environment this is byte-identical to the historical preamble.\n    // Persona composition order (all one system-level instructions string):\n    //   1. workspace instructionsTemplate (or deployment default) with the\n    //      non-bypassable CORE substituted at {{core}} — composeAgentInstructions,\n    //   2. + the generic programmatic-tool-calling (toolspace) directive, ONLY\n    //      when a toolspace token was minted for this turn (feature enabled + a\n    //      per-turn seed — the mint gate, which includes selfhosted turns since\n    //      they now receive the token too) — appendToolspaceInstructions,\n    //   3. + managed-sandbox Git binding discovery, ONLY when one provider has\n    //      multiple credential bindings,\n    //   4. + workspace memory working set, ONLY when the workspace setting is on\n    //      and the worker resolved a nonblank block — appendWorkspaceMemory,\n    //   5. + the per-session persona instructions (session-specific, so it\n    //      refines both the workspace persona and the substrate note),\n    //   6. + host context for this exact turn, when supplied,\n    //   7. + durable session-setting state (title present + child notification\n    //      mode), when supplied by the worker,\n    // The genesis title directive is deliberately NOT part of this persistent\n    // string. runAgentStream injects it into the first model call only.\n    instructions: appendPersistentSessionSettings(\n      appendTurnInstructions(\n        appendSessionInstructions(\n          appendWorkspaceMemory(\n            appendGitCredentialBindingInstructions(\n              appendToolspaceInstructions(\n                composeAgentInstructions(\n                  options.instructionsTemplate ?? settings.agentInstructionsTemplate,\n                  options.workspaceEnvironment,\n                  options.rig,\n                ),\n                settings.toolspaceEnabled && Boolean(options.toolspaceTokenSeed),\n              ),\n              options.gitCredentialBindings,\n              options.activeSandboxBackend,\n            ),\n            options.workspaceMemory,\n          ),\n          options.sessionInstructions,\n        ),\n        options.turnInstructions,\n      ),\n      options.persistentSessionSettings,\n    ),\n    modelSettings: {\n      reasoning: {\n        effort: options.reasoningEffort ?? settings.openaiReasoningEffort,\n        summary: \"detailed\",\n      },\n      // Round-trip the encrypted reasoning payload with every call so chains\n      // of thought survive without provider-side response storage (which is\n      // what stripped provider item ids opt us out of — see\n      // stripProviderItemIds). providerData.include replaces any\n      // tool-derived include entries; OpenGeni's tools are MCP/sandbox\n      // function tools, which contribute none. Gated on the resolved\n      // encryptedReasoning flag: the chat wire API has no encrypted_content\n      // field, so registry \"chat\" providers turn it off.\n      ...(Object.keys(providerData).length > 0 ? { providerData } : {}),\n    },\n    // Explicit hosted tools (web_search when enabled). Threaded into BOTH the\n    // `new Agent(baseConfig)` path (sandboxBackend === \"none\") and the\n    // `new SandboxAgent({ ...baseConfig, ... })` path via the shared baseConfig\n    // spread; the SDK concatenates these with MCP and sandbox capability tools.\n    tools: agentTools,\n    ...(options.mcpServers?.length ? { mcpServers: options.mcpServers } : {}),\n    // Surface FAILED MCP tool calls as `{ isError: true }` tool output (see\n    // mcpToolErrorFunction / mcpToolErrorOutput) instead of the SDK's default\n    // flat error string, so a thrown MCP failure (protocol error, auth, timeout,\n    // tool-not-found) settles the timeline tool to \"failed\" rather than rendering\n    // as success. Applies to every MCP server on this agent (session, first-party,\n    // capability, codex_apps) since none set a server-level errorFunction.\n    mcpConfig: { errorFunction: mcpToolErrorFunction },\n  } as const;\n\n  if (settings.sandboxBackend === \"none\") {\n    const agent = new Agent(baseConfig);\n    if (options.genesisTitleHint) {\n      agentsNeedingGenesisTitleDirective.add(agent);\n    }\n    maybeInstallCodexToolSearch(agent, settings, options);\n    applyMcpApprovalPolicy(agent, settings);\n    return agent;\n  }\n\n  const runAs = sandboxRunAs(settings);\n  const agent = new SandboxAgent({\n    ...baseConfig,\n    defaultManifest: buildManifest(\n      settings,\n      resources,\n      options.sandboxEnvironment,\n      options.fileResourceDownloads,\n    ),\n    ...(runAs ? { runAs } : {}),\n    capabilities: buildAgentCapabilities(settings, options.packSkills ?? [], {\n      ...(options.skillLibrarySkills?.length\n        ? { skillLibrarySkills: options.skillLibrarySkills }\n        : {}),\n      ...(options.sessionSkills?.length ? { sessionSkills: options.sessionSkills } : {}),\n      ...repositoryWorkspaceSkillPathsOption(resources),\n      ...(options.structuredToolTransport !== undefined\n        ? { structuredToolTransport: options.structuredToolTransport }\n        : {}),\n      ...(options.computerToolMode !== undefined\n        ? { computerToolMode: options.computerToolMode }\n        : {}),\n      ...(options.onComputerUseReady ? { onComputerUseReady: options.onComputerUseReady } : {}),\n      ...(options.turnCancellationSignal\n        ? { turnCancellationSignal: options.turnCancellationSignal }\n        : {}),\n      ...(options.onToolCancellationFence\n        ? { onToolCancellationFence: options.onToolCancellationFence }\n        : {}),\n    }),\n  });\n  agentSkillSelections.set(\n    agent,\n    Object.freeze(\n      effectiveSkillSelections(\n        options.skillLibrarySelections ?? [],\n        options.skillLibrarySkills ?? [],\n        options.packSkills ?? [],\n        options.sessionSkills ?? [],\n      ).map((selection) => Object.freeze(selection)),\n    ),\n  );\n  if (options.genesisTitleHint) {\n    agentsNeedingGenesisTitleDirective.add(agent);\n  }\n  agentFileDownloads.set(\n    agent,\n    normalizeSandboxFileDownloads(options.fileResourceDownloads ?? []).filter(\n      (download) => !download.content,\n    ),\n  );\n  agentRepositoryCloneHooks.set(\n    agent,\n    sandboxRepositoryCloneHooks(settings, resources, options.activeSandboxBackend),\n  );\n  // Stash the EFFECTIVE backend so runStream's owned branch can skip the direct\n  // beforeAgentStart hook run on a connected machine: the box there is the user's\n  // REAL computer — the platform must not run setup (az login) against it. The\n  // clone hooks are already excluded for selfhosted at construction (above); this\n  // keeps the built-in hooks equally out.\n  if (options.activeSandboxBackend) {\n    agentActiveSandboxBackend.set(agent, options.activeSandboxBackend);\n  }\n  // TOKEN-BROKER (B1): stash per-turn provider seeds off-manifest so runStream\n  // can seed the setup hook without tokens ever touching defaultManifest /\n  // sandboxEnvironment. `gitTokenSeed` remains the GitHub alias.\n  const gitTokenSeeds = {\n    ...(options.gitTokenSeeds ?? {}),\n    ...(options.gitTokenSeed ? { github: options.gitTokenSeed } : {}),\n  } satisfies GitTokenSeeds;\n  if (Object.keys(gitTokenSeeds).length > 0) {\n    agentGitTokenSeeds.set(agent, gitTokenSeeds);\n  }\n  if (options.gitCredentialBindings && options.gitCredentialBindings.length > 0) {\n    agentGitCredentialBindings.set(agent, options.gitCredentialBindings);\n  }\n  if (options.toolspaceTokenSeed) {\n    agentToolspaceTokenSeed.set(agent, options.toolspaceTokenSeed);\n    agentToolspaceTokenSessionId.set(agent, options.toolspaceTokenSessionId!);\n  }\n  // M3: stash the rig setup descriptor + RESOLVE the rig credential hooks now.\n  // sandboxLifecycleHooksForIds throws on an unknown hook name, so a typo'd rig\n  // credential_hook fails the turn HERE (per-turn resolution) rather than being\n  // silently dropped — the fail-visible contract the brief requires.\n  if (options.rigSetup) {\n    agentRigSetup.set(agent, options.rigSetup);\n  }\n  if (options.rigCredentialHookIds && options.rigCredentialHookIds.length > 0) {\n    agentRigCredentialHooks.set(agent, sandboxLifecycleHooksForIds(options.rigCredentialHookIds));\n  }\n  maybeInstallCodexToolSearch(agent, settings, options);\n  applyMcpApprovalPolicy(agent, settings);\n  return agent;\n}\n\n/**\n * Enable Codex-CLI-style progressive MCP disclosure on a Codex turn when the\n * flag is on. Gated on `structuredToolTransport === false` — the same signal that\n * identifies a Codex-subscription turn (the ChatGPT backend that rejects hosted\n * tools) — so no non-Codex turn is ever touched. On qualifying turns it wraps\n * `getAllTools` (clone-survivingly — see {@link installCodexToolSearch}) to defer\n * selected non-mandatory MCP schemas and add the client tool_search tool. The\n * description combines live connector namespaces with selected server identities.\n */\nfunction maybeInstallCodexToolSearch(\n  agent: Agent<any, any>,\n  settings: Settings,\n  options: BuildAgentOptions,\n): void {\n  if (settings.codexToolSearchEnabled && options.structuredToolTransport === false) {\n    const mcpServers = options.mcpServers ?? [];\n    // `defer_loading:true` removes these MCP schemas from provider context until\n    // tool_search discloses a bounded match. Keep the compaction estimator on\n    // that same wire truth; otherwise a large deferred catalog can falsely trip\n    // compaction before the first real model request. OpenGeni remains eager.\n    for (const server of mcpServers) {\n      if (server.name === \"opengeni\") continue;\n      (\n        server as MCPServer & {\n          deferModelToolSchemaAccounting?: () => void;\n        }\n      ).deferModelToolSchemaAccounting?.();\n    }\n    installCodexToolSearch(\n      agent as unknown as Parameters<typeof installCodexToolSearch>[0],\n      options.codexConnectorNamespaces ?? new Set<string>(),\n      new Set(mcpServers.map((server) => server.name)),\n    );\n  }\n}\n\n/** True when the unprefixed tool `name` requires approval under `policy`. */\nfunction mcpToolRequiresApproval(\n  policy: boolean | ReadonlySet<string>,\n  unprefixedName: string,\n): boolean {\n  return policy === true || (policy !== false && policy.has(unprefixedName));\n}\n\n/** A per-server approval policy keyed by the server's `<id>__` tool prefix. */\ntype McpApprovalPolicy = {\n  prefix: string;\n  requireApproval: boolean | ReadonlySet<string>;\n};\n\n/** The subset of the agent surface the approval wrap needs — including `clone`. */\ntype ApprovalCapableAgent = {\n  getMcpTools: (runContext: unknown) => Promise<Tool<any>[]>;\n  clone?: (config: unknown) => ApprovalCapableAgent;\n};\n\n/**\n * Install the approval wrap on a single agent instance: replace `getMcpTools`\n * with one that stamps `needsApproval: () => true` on every MCP tool whose\n * server policy demands it. Tools are matched by the server's `<id>__` prefix\n * (LONGEST prefix first — see {@link applyMcpApprovalPolicy}), then the\n * unprefixed tool name.\n *\n * CLONE SURVIVAL (mirrors {@link installCodexToolSearch}): the sandbox runtime\n * resolves tools not on the agent we build here but on a FRESH clone —\n * `prepareSandboxAgent` calls `agent.clone(...)`, and `SandboxAgent.clone`\n * reconstructs from a FIXED field list (name/tools/mcpServers/…), so an\n * instance-own `getMcpTools` override is dropped and approval would silently\n * bypass on every sandbox turn. We therefore also wrap `clone` to RE-INSTALL the\n * policy onto every clone, recursively — covering clone-of-clone and the resume\n * paths. The base (non-sandbox) `Agent.clone` spreads `...this` and would carry\n * the override, but re-installing is idempotent there and keeps one code path.\n */\nfunction installMcpApprovalPolicy(\n  agent: ApprovalCapableAgent,\n  policies: McpApprovalPolicy[],\n): void {\n  const listMcpTools = agent.getMcpTools.bind(agent);\n  agent.getMcpTools = async (runContext: unknown) => {\n    const tools = await listMcpTools(runContext);\n    return tools.map((tool) => {\n      if (tool.type !== \"function\") {\n        return tool;\n      }\n      const policy = policies.find((entry) => tool.name.startsWith(entry.prefix));\n      if (!policy) {\n        return tool;\n      }\n      const unprefixed = tool.name.slice(policy.prefix.length);\n      return mcpToolRequiresApproval(policy.requireApproval, unprefixed)\n        ? { ...tool, needsApproval: async () => true }\n        : tool;\n    });\n  };\n  const originalClone = agent.clone?.bind(agent);\n  if (originalClone) {\n    agent.clone = (config: unknown) => {\n      const cloned = originalClone(config);\n      installMcpApprovalPolicy(cloned, policies);\n      return cloned;\n    };\n  }\n}\n\n/**\n * Enforce per-MCP-server human approval. `settings.mcpServers[].requireApproval`\n * is `true` (every tool of that server requires approval) or a string[] of\n * UNPREFIXED tool names (only those do); absent = auto-run. The SDK converts MCP\n * tools to function tools with `needsApproval` unset (defaults false) and exposes\n * no per-server/agent approval knob, so we wrap the agent's `getMcpTools` to\n * attach a `needsApproval: () => true` predicate to the matching tools — matched\n * by the server's `<id>__` prefix, then the unprefixed tool name. A tool that\n * needs approval raises a run INTERRUPTION, which the worker turns into\n * `session.requiresAction` and resolves via `user.approvalDecision`\n * (resumeApproval) — the same generic path shell/computer-use approvals use, so\n * no extra plumbing. No-op when no server requests approval, so the default\n * (auto-run everything) is byte-for-byte unchanged.\n *\n * Two robustness properties the wrap must hold:\n *  - LONGEST-PREFIX-FIRST. Server ids can be prefixes of one another (`my` vs\n *    `my_`), so their tool prefixes collide (`my__` vs `my___`): a tool like\n *    `my___run` (from server `my_`) also `startsWith` `my__` (server `my`). A\n *    first-match `find` over unsorted policies could bind it to the WRONG\n *    server's policy and bypass gating. Sorting policies by DESCENDING prefix\n *    length makes the most-specific (longest) prefix win, so each tool resolves\n *    to its own server.\n *  - CLONE SURVIVAL. The wrap is re-installed onto every clone; see\n *    {@link installMcpApprovalPolicy}.\n */\nfunction applyMcpApprovalPolicy(agent: Agent<any, any>, settings: Settings): void {\n  const policies: McpApprovalPolicy[] = settings.mcpServers\n    .filter(\n      (server) =>\n        server.requireApproval === true ||\n        (Array.isArray(server.requireApproval) && server.requireApproval.length > 0),\n    )\n    .map((server) => ({\n      prefix: prefixedMcpToolName(server.id, \"\"),\n      requireApproval:\n        server.requireApproval === true ? true : new Set(server.requireApproval as string[]),\n    }))\n    .sort((a, b) => b.prefix.length - a.prefix.length);\n  if (policies.length === 0) {\n    return;\n  }\n  installMcpApprovalPolicy(agent as unknown as ApprovalCapableAgent, policies);\n}\n\n/**\n * Force a sandbox capability to emit its FUNCTION-transport tool variants instead\n * of the hosted ones, by dropping the model instance the SDK's transport\n * detection keys off. See {@link buildAgentCapabilities} for why (codex routes the\n * OpenAIResponsesModel to the ChatGPT backend, which rejects the hosted\n * `apply_patch` AND `computer_use_preview` tool types). The SDK reads\n * hosted-vs-function ONLY from `_modelInstance` (set via `bindModel`); overriding\n * `bindModel` to discard the instance leaves `_modelInstance` undefined, so\n * `supportsApplyPatchTransport` / `supportsStructuredToolOutputTransport` return\n * false and `tools()` emits the function variants — `apply_patch` + text\n * `view_image` for filesystem, and the `computer_*` function tools + text\n * `computer_screenshot` for computer-use. `bindModel` still returns the capability\n * so the SDK's bind chain (`.bind().bindRunAs().bindModel()`) is preserved.\n */\nfunction neutralizeStructuredToolTransport(\n  capability: ReturnType<typeof filesystem> | ReturnType<typeof computerUse>,\n): void {\n  // Use `this` (NOT a captured reference to `capability`): the SandboxAgent binds\n  // via `cap.clone().bind(session).bindRunAs(runAs).bindModel(model, instance)` and\n  // runs tools() on the object the CHAIN returns. Capability.clone() copies this\n  // override onto the fresh per-run instance, so bindModel must operate on and\n  // RETURN `this` (the clone) — a version that mutated/returned the ORIGINAL\n  // capability leaves the clone (which .bind() set `_session` on) out of the chain,\n  // so tools() runs on the unbound original and throws \"Filesystem capability is\n  // not bound to a SandboxSession\". Dropping the model instance is all we need:\n  // supportsApplyPatchTransport(undefined) is false → the function apply_patch.\n  const forceFunctionTransport = function (this: Record<string, unknown>): unknown {\n    this._modelInstance = undefined;\n    return this;\n  };\n  (capability as unknown as { bindModel: typeof forceFunctionTransport }).bindModel =\n    forceFunctionTransport;\n}\n\n/**\n * Build the SandboxAgent capability set explicitly. The SDK default includes\n * its inline provider compaction capability; OpenGeni deliberately omits it\n * because durable portable compaction owns the full history transition.\n */\n/**\n * Wrap the shell capability's `exec_command` so its execution runs inside a\n * tool-call correlation context (op-correlation.ts): the SDK's tool machinery\n * passes `details.toolCall` (the model's function_call, with its durable\n * `callId`) into every function-tool `invoke`, and binding an\n * AsyncLocalStorage around the invocation makes that id visible to the sandbox\n * transport underneath — which mints the DURABLE op id `{callId}:{ordinal}`\n * (op-stream ruling B1). A re-dispatched turn re-executes the same\n * function_call with the same callId, so the transport's idempotent OpStart\n * ATTACHES to the already-running/completed op instead of re-running it.\n * Without a callId (no details on the invocation) the tool runs unwrapped and\n * the transport falls back to a random unique id — today's semantics.\n */\nfunction withExecOpCorrelation(tools: Tool<unknown>[]): Tool<unknown>[] {\n  return tools.map((capabilityTool) => {\n    if (capabilityTool.type !== \"function\" || capabilityTool.name !== \"exec_command\") {\n      return capabilityTool;\n    }\n    const invoke = capabilityTool.invoke;\n    return {\n      ...capabilityTool,\n      invoke: (runContext, input, details) => {\n        const callId = details?.toolCall?.callId;\n        if (!callId) {\n          return invoke(runContext, input, details);\n        }\n        return runWithToolCallCorrelation(callId, () => invoke(runContext, input, details));\n      },\n    };\n  });\n}\n\n/**\n * Codex accepts ordinary FUNCTION tools but also accepts `input_image` content\n * inside a function_call_output (the same transport used by codex-rs\n * view_image). The SDK filesystem capability unnecessarily couples this choice\n * to hosted apply_patch support; when hosted tools are disabled it degrades\n * view_image to a giant text data URL, charging roughly one token per four\n * base64 characters. Re-wrap only successful data-URL results as a structured\n * image. Text errors remain text, and the tool itself remains a normal function.\n */\nexport function withStructuredViewImageFunctionResults(tools: Tool<unknown>[]): Tool<unknown>[] {\n  return tools.map((capabilityTool) => {\n    if (capabilityTool.type !== \"function\" || capabilityTool.name !== \"view_image\") {\n      return capabilityTool;\n    }\n    const invoke = capabilityTool.invoke;\n    return {\n      ...capabilityTool,\n      invoke: async (runContext, input, details) => {\n        const output = await invoke(runContext, input, details);\n        const dataUrl =\n          typeof output === \"string\"\n            ? output\n            : output &&\n                typeof output === \"object\" &&\n                typeof (output as { text?: unknown }).text === \"string\"\n              ? (output as { text: string }).text\n              : null;\n        return dataUrl?.startsWith(\"data:image/\")\n          ? { type: \"image\" as const, image: { url: dataUrl } }\n          : output;\n      },\n    };\n  });\n}\n\nexport function buildAgentCapabilities(\n  settings: Settings,\n  packSkills: PackSkill[],\n  options: {\n    skillLibrarySkills?: PackSkill[];\n    sessionSkills?: PackSkill[];\n    workspaceSkillPaths?: readonly WorkspaceSkillSearchPath[];\n    structuredToolTransport?: boolean;\n    // EXPLICIT computer-use transport (see BuildAgentOptions.computerToolMode). When\n    // present, computerUse() is handed the mode directly and its tools() obeys it\n    // without the constructor-name sniff. When absent, the legacy neutralize +\n    // imageFunctionResults path (driven by structuredToolTransport) is unchanged.\n    computerToolMode?: ComputerToolMode;\n    onComputerUseReady?: (session: SandboxSessionLike) => Promise<void>;\n    turnCancellationSignal?: AbortSignal;\n    onToolCancellationFence?: (fence: TurnToolCancellationFence) => void;\n  } = {},\n): ReturnType<typeof Capabilities.default> {\n  const toolCancellation =\n    options.turnCancellationSignal || options.onToolCancellationFence\n      ? createTurnToolCancellationController(options.turnCancellationSignal)\n      : null;\n  if (toolCancellation) options.onToolCancellationFence?.(toolCancellation);\n  // The `filesystem()` capability picks hosted-vs-function tool variants from the\n  // bound model instance (supportsApplyPatchTransport / structured tool output).\n  // When the caller declares the backend does NOT support that structured/hosted\n  // transport (codex → the ChatGPT backend rejects the hosted `apply_patch` type),\n  // neutralize this capability's model binding so tools() falls to the function\n  // `apply_patch` + text `view_image` variants the backend accepts — the SDK\n  // handles their function_call round-trip natively, so no reimplementation.\n  // Scoped to filesystem: shell() is always a function-tool transport.\n  const filesystemCapability = filesystem({\n    ...(options.structuredToolTransport === false\n      ? { configureTools: withStructuredViewImageFunctionResults }\n      : {}),\n  });\n  if (options.structuredToolTransport === false) {\n    neutralizeStructuredToolTransport(filesystemCapability);\n  }\n  const caps: ReturnType<typeof Capabilities.default> = [\n    filesystemCapability,\n    shell({ ...(toolCancellation ? {} : { configureTools: withExecOpCorrelation }) }),\n  ];\n  const sessionSkills = sessionSkillsForMaterialization(\n    packSkills,\n    options.skillLibrarySkills ?? [],\n    options.sessionSkills ?? [],\n  );\n  caps.push(\n    skills({\n      lazyFrom: lazySkillSourceWithPackSkills(\n        [...packSkills, ...sessionSkills],\n        options.skillLibrarySkills ?? [],\n      ),\n    }),\n  );\n  if (options.workspaceSkillPaths?.length) {\n    caps.push(\n      workspaceSkills(options.workspaceSkillPaths, [\n        ...bundledSkillDirNames(bundledSkillsDir()),\n        ...(options.skillLibrarySkills ?? []).map((skill) => skill.name),\n        ...packSkills.map((skill) => skill.name),\n        ...sessionSkills.map((skill) => skill.name),\n      ]),\n    );\n  }\n  // P4.3 computer-use: the agent drives the SAME :0 humans watch (xdotool/XTEST +\n  // scrot), but only when the desktop tier is ON, computer-use is enabled, and the\n  // backend is one whose image carries the X stack (descriptorgate — honest about\n  // which backends are desktop-capable today; headless/dev backends never get the\n  // tool, so a misconfigured non-desktop box can't register a tool that always\n  // fails). The capability's tools() bind to the live externally-owned session at\n  // run time (the SandboxAgent merge); xdotool drives :0 regardless of whether any\n  // viewer is attached, so no pixel-tunnel dependency.\n  if (\n    settings.computerUseEnabled &&\n    settings.sandboxDesktopEnabled &&\n    desktopCapableBackend(settings.sandboxBackend)\n  ) {\n    // computer-use is transport-aware, exactly like filesystem: `tools()` emits the\n    // HOSTED `computer_use_preview` tool on the structured transport and a set of\n    // FUNCTION `computer_*` tools on the text transport. The ChatGPT/Codex backend\n    // rejects hosted tool types (only function/custom/web_search accepted).\n    //\n    // HARDENING: when the caller declares an EXPLICIT `computerToolMode` (the worker\n    // does, from its authoritative model resolution), thread it straight through —\n    // tool selection then never depends on the SDK's model-instance constructor-name\n    // sniff (which a wrapped/proxied model would defeat, silently 400ing a\n    // chat-completions provider handed the hosted tool). When ABSENT, the legacy path\n    // is preserved byte-for-byte: on the codex path (structuredToolTransport === false)\n    // we set imageFunctionResults and neutralize the capability's model binding — the\n    // SAME trick used for filesystem above — so `tools()` sees no model instance and\n    // emits the function tools the backend can call, instead of suppressing the tier.\n    const explicitMode = options.computerToolMode;\n    const computerCapability = computerUse({\n      dimensions: [settings.streamResolutionWidth, settings.streamResolutionHeight],\n      readOnly: settings.computerUseReadOnly,\n      ...(options.onComputerUseReady ? { onReady: options.onComputerUseReady } : {}),\n      ...(explicitMode\n        ? { toolMode: explicitMode }\n        : // Legacy (no explicit mode): on the codex path the function tools deliver\n          // screenshots as a real image the model can see. The ChatGPT/Codex backend\n          // rejects HOSTED tool types but DOES accept `input_image` content items inside a\n          // `function_call_output` (proven by openai/codex codex-rs, whose view_image tool\n          // ships exactly that shape) — so a structured image tool result is seen, where a\n          // text data-URL would be unreadable.\n          options.structuredToolTransport === false\n          ? { imageFunctionResults: true }\n          : {}),\n    });\n    // Neutralize ONLY on the legacy sniff path. With an explicit toolMode the mode\n    // already forces the function tools, so the constructor-name override is moot.\n    if (!explicitMode && options.structuredToolTransport === false) {\n      neutralizeStructuredToolTransport(computerCapability);\n    }\n    caps.push(computerCapability as unknown as ReturnType<typeof Capabilities.default>[number]);\n  }\n  if (toolCancellation) {\n    for (const capability of caps) {\n      wrapCapabilityToolsForTurnCancellation(\n        capability as unknown as { tools(): Tool<unknown>[] },\n        toolCancellation,\n      );\n    }\n  }\n  return caps;\n}\n\nexport function sandboxRunAs(_settings: Settings): string | undefined {\n  return undefined;\n}\n\nexport type PreparedAgentTools = {\n  mcpServers: MCPServer[];\n  close: () => Promise<void>;\n  // P4 (Part B.1): the live, by-reference Set of ORIGINAL-dotted connector\n  // namespaces the codex_apps transport saw across this turn's tools/list calls.\n  // Accumulates as the agent lists tools during the run, so the worker reads it\n  // AFTER the turn (in its finally) to cache the serving account's connector set.\n  // Empty when this turn has no codex_apps server (or it never listed any\n  // namespaced tool) — the worker only persists a non-empty set.\n  codexConnectorNamespaces: Set<string>;\n};\n\nexport type PrepareToolsOptions = {\n  accountId?: string;\n  workspaceId?: string;\n  // Worker-asserted session scope for first-party MCP calls; enables\n  // session-scoped tools such as goal management on the API side.\n  sessionId?: string;\n  // The calling turn's id, signed into the token so tools can classify the\n  // caller from its own identity instead of the session's live active pointer.\n  turnId?: string;\n  // The exact executing attempt that owns the MCP call.\n  attemptId?: string;\n  executionGeneration?: number;\n  subjectId?: string;\n  subjectLabel?: string;\n  // Immutable human authority used only for subject-owned connection lookup.\n  // This is intentionally separate from the worker's first-party MCP identity.\n  credentialSubjectId?: string;\n  // Overrides the fixed first-party MCP permission set for this session's\n  // delegated token (manager-style sessions). The caller is responsible for\n  // having validated the set against the session creator's grant.\n  firstPartyPermissions?: Permission[];\n  // Exact model-visible catalog selection for the broad first-party server.\n  // Permissions are signed separately and remain the authorization boundary.\n  firstPartyTools?: FirstPartyMcpToolName[];\n  resolveCredential?: (\n    input: ResolveConnectionCredentialInput,\n  ) => Promise<ResolveConnectionCredentialResult>;\n  onAuthNeeded?: (payload: ToolAuthNeededPayload) => Promise<void> | void;\n  /** Injectable final MCP transport for tests and embedded hosts. */\n  mcpFetchImpl?: FetchLike;\n};\n\ntype ConnectedMcpServerBatch = Awaited<ReturnType<typeof connectMcpServers>>;\n\nexport type ConnectedMcpServerBatches = {\n  active: MCPServer[];\n  failed: MCPServer[];\n  errors: ReadonlyMap<MCPServer, Error>;\n  close: () => Promise<void>;\n};\n\n/**\n * Connect SDK-managed MCP servers in stable, bounded batches. The SDK cleans a\n * failing strict batch; this wrapper additionally closes every earlier batch\n * before rethrowing, so a later-batch failure cannot leak live connections.\n */\nexport async function connectMcpServersInBatches(\n  servers: MCPServer[],\n  options: { strict: boolean; connectTimeoutMs?: number },\n): Promise<ConnectedMcpServerBatches> {\n  assertMcpServerSelectionWithinBounds(servers);\n  const batches: ConnectedMcpServerBatch[] = [];\n  try {\n    for (let offset = 0; offset < servers.length; offset += MCP_MAX_CONCURRENT_SERVER_OPERATIONS) {\n      batches.push(\n        await connectMcpServers(\n          servers.slice(offset, offset + MCP_MAX_CONCURRENT_SERVER_OPERATIONS),\n          {\n            ...(options.connectTimeoutMs === undefined\n              ? {}\n              : { connectTimeoutMs: options.connectTimeoutMs }),\n            connectInParallel: true,\n            strict: options.strict,\n          },\n        ),\n      );\n    }\n  } catch (error) {\n    await closeMcpServerBatches(batches).catch(() => undefined);\n    throw error;\n  }\n\n  const errors = new Map<MCPServer, Error>();\n  for (const batch of batches) {\n    for (const [server, error] of batch.errors) errors.set(server, error);\n  }\n  return {\n    active: batches.flatMap((batch) => batch.active),\n    failed: batches.flatMap((batch) => batch.failed),\n    errors,\n    close: async () => {\n      await closeMcpServerBatches(batches);\n    },\n  };\n}\n\nasync function closeMcpServerBatches(batches: ConnectedMcpServerBatch[]): Promise<void> {\n  let firstError: unknown;\n  for (const batch of [...batches].reverse()) {\n    try {\n      await batch.close();\n    } catch (error) {\n      firstError ??= error;\n    }\n  }\n  if (firstError !== undefined) throw firstError;\n}\n\nexport async function prepareAgentTools(\n  settings: Settings,\n  tools: ToolRef[],\n  options: PrepareToolsOptions = {},\n): Promise<PreparedAgentTools> {\n  // P4 (Part B.1): one Set per prepareTools call, shared by reference into the\n  // codex_apps sanitizing fetch so every tools/list this turn accumulates the\n  // account's connector namespaces. Surfaced on PreparedAgentTools for the worker.\n  const codexConnectorNamespaces = new Set<string>();\n  assertMcpServerSelectionWithinBounds(tools);\n  if (tools.length === 0) {\n    return { mcpServers: [], close: async () => {}, codexConnectorNamespaces };\n  }\n  const registry = new Map(settings.mcpServers.map((server) => [server.id, server]));\n  const subjectOwnedTool = tools.find(\n    (tool) => registry.get(tool.id)?.connectionRef?.subjectScope === \"subject\",\n  );\n  if (subjectOwnedTool && !options.credentialSubjectId) {\n    throw new Error(\n      `subject-owned connection for MCP server ${subjectOwnedTool.id} requires a human turn initiator`,\n    );\n  }\n  const aggregateToolBudget = new McpAggregateToolListBudget();\n  // npm Undici's dispatcher transport can hang indefinitely under Bun even\n  // after an AbortSignal fires. Bun's native fetch is the supported runtime\n  // transport there; destination policy validation still runs before every\n  // credential-bearing MCP request.\n  const useBunNativeFetch = options.mcpFetchImpl === undefined && !!process.versions.bun;\n  const mcpFetchImpl =\n    options.mcpFetchImpl ?? (useBunNativeFetch ? globalThis.fetch.bind(globalThis) : undiciFetch);\n  const servers = await boundedParallelMap(\n    tools,\n    MCP_MAX_CONCURRENT_SERVER_OPERATIONS,\n    async (tool, index) => {\n      const config = registry.get(tool.id);\n      if (!config) {\n        throw new Error(`Unknown MCP server id: ${tool.id}`);\n      }\n      const url = firstPartyMcpServerUrlForRun(settings, config, options.workspaceId) ?? config.url;\n      const firstParty = isFirstPartyMcpServer(settings, config);\n      const baseFetch = isCodexAppsMcpServer(config)\n        ? codexAppsSanitizingFetch(mcpFetchImpl, codexConnectorNamespaces)\n        : mcpFetchImpl;\n      const guardedFetch = guardedMcpFetch(\n        firstParty ? { ...settings, integrationsAllowPrivateNetworkTargets: true } : settings,\n        baseFetch,\n        {\n          ...(firstParty ? { requireHttpsOutsideLocalTest: false } : {}),\n          ...(useBunNativeFetch ? { pinResolvedDestination: false } : {}),\n        },\n      );\n      const fetchImpl = config.connectionRef\n        ? connectionBrokerFetch(guardedFetch, config, options)\n        : firstParty\n          ? firstPartyAuthFetch(guardedFetch, settings, options)\n          : guardedFetch;\n      // A server is connected BEST-EFFORT (a connect OR tools-list failure drops\n      // it — its tools go unavailable for the turn — instead of failing the turn)\n      // in two cases:\n      //  - codex_apps: connector availability is RUNTIME-DISCOVERED — the\n      //    device-code login may lack the connector scopes, and the backend can\n      //    reject the bearer at the initialize/tools-list handshake, so a 401/403\n      //    (or a missing/failed token) drops the server.\n      //  - an optional ToolRef: either an auto-attached workspace-default\n      //    capability MCP or a client/pack-selected portable ref. A\n      //    broken/expired credential or unavailable endpoint skips the server\n      //    with a warning, never killing the turn before the model runs. Bare\n      //    refs stay strict (below), preserving the fail-loud default.\n      // The connect-time drop is handled by connectMcpServers({ strict: false });\n      // the tools-list-time drop is enforced inside PrefixedMcpServer.listTools —\n      // a best-effort server whose tools/list throws (e.g. an expired connection\n      // credential surfacing as a StreamableHTTP \"authentication required\" 401)\n      // degrades to zero tools rather than throwing out of the SDK's run-time\n      // getAllMcpTools and failing an unrelated turn. The actionable\n      // tool.auth_needed signal is preserved: the connection-broker fetch\n      // publishes it before returning the 401 that provokes the throw.\n      const optional = tool.optional === true;\n      const bestEffort = isCodexAppsMcpServer(config) || optional || !!config.connectionRef;\n      const server = new PrefixedMcpServer(\n        new MCPServerStreamableHttp({\n          url,\n          name: config.name ?? config.id,\n          cacheToolsList: config.cacheToolsList,\n          // The upstream transport logger receives raw thrown errors, whose\n          // messages may contain response bodies, URLs, headers, or echoed\n          // credentials. Keep its diagnostic surface structural only.\n          logger: safeMcpTransportLogger(config.id),\n          // codex_apps returns connector tools with empty `outputSchema: {}` that the\n          // MCP SDK's strict Tool schema rejects (fails the turn during tools/list);\n          // sanitize the response on the wire before validation. The namespace Set\n          // also captures each tool's original connector namespace (P4 Part B.1).\n          fetch: fetchImpl,\n          ...(await mcpServerRequestInit(settings, config)),\n          ...(config.timeoutMs\n            ? {\n                timeout: config.timeoutMs,\n                clientSessionTimeoutSeconds: Math.ceil(config.timeoutMs / 1000),\n              }\n            : {}),\n        }),\n        config.id,\n        config.allowedTools,\n        bestEffort,\n        aggregateToolBudget,\n        `${config.id}:${index}`,\n      );\n      return {\n        server,\n        bestEffort,\n        optional,\n        timeoutMs: config.timeoutMs,\n      };\n    },\n  );\n  const requiredEntries = servers.filter((entry) => !entry.bestEffort);\n  const bestEffortEntries = servers.filter((entry) => entry.bestEffort);\n  const requiredServers = requiredEntries.map((entry) => entry.server);\n  const bestEffortServers = bestEffortEntries.map((entry) => entry.server);\n  // Names of the OPTIONAL servers (not codex_apps) so a drop is surfaced as a\n  // warning; codex_apps keeps its historically-quiet drop (a not-logged-in\n  // ChatGPT plan is a normal, non-noteworthy state).\n  const optionalServerNames = new Set(\n    servers.filter((entry) => entry.optional).map((entry) => entry.server.name),\n  );\n  const connectedRequired = await connectMcpServersInBatches(requiredServers, {\n    strict: true,\n    connectTimeoutMs: mcpOuterConnectTimeoutMs(requiredEntries.map((entry) => entry.timeoutMs)),\n  });\n  let connectedBestEffort: ConnectedMcpServerBatches | null = null;\n  try {\n    connectedBestEffort = bestEffortServers.length\n      ? await connectMcpServersInBatches(bestEffortServers, {\n          strict: false,\n          connectTimeoutMs: mcpOuterConnectTimeoutMs(\n            bestEffortEntries.map((entry) => entry.timeoutMs),\n          ),\n        })\n      : null;\n  } catch (error) {\n    await connectedRequired.close().catch(() => undefined);\n    throw error;\n  }\n  if (connectedBestEffort) {\n    for (const failed of connectedBestEffort.failed) {\n      if (failed instanceof PrefixedMcpServer) {\n        failed.releaseAggregateBudget();\n      }\n      if (!optionalServerNames.has(failed.name)) {\n        continue;\n      }\n      const error = connectedBestEffort.errors.get(failed);\n      console.warn(\n        `[mcp] optional server \"${failed.name}\" failed to connect/list tools; skipping it for this turn`,\n        safeMcpErrorFields(error),\n      );\n    }\n  }\n  return {\n    mcpServers: [...connectedRequired.active, ...(connectedBestEffort?.active ?? [])],\n    close: async () => {\n      let firstError: unknown;\n      if (connectedBestEffort) {\n        try {\n          await connectedBestEffort.close();\n        } catch (error) {\n          firstError ??= error;\n        }\n      }\n      try {\n        await connectedRequired.close();\n      } catch (error) {\n        firstError ??= error;\n      }\n      if (firstError !== undefined) throw firstError;\n    },\n    codexConnectorNamespaces,\n  };\n}\n\nfunction connectionBrokerFetch(\n  baseFetch: FetchLike,\n  config: Settings[\"mcpServers\"][number],\n  options: PrepareToolsOptions,\n): FetchLike {\n  const connectionRef = config.connectionRef;\n  if (!connectionRef) {\n    return baseFetch;\n  }\n  return async (input, init) => {\n    const request = await mcpRequestInfo(input, init);\n    const destinationUrl = mcpRequestDestinationUrl(input);\n    const first = await resolveConnectionForRequest(\n      options,\n      config.id,\n      connectionRef,\n      destinationUrl,\n      request.toolName,\n      false,\n    );\n    if (first.status === \"auth_needed\") {\n      return await authNeededFetchResponse(options, config.id, request, first, connectionRef);\n    }\n    const response = await baseFetch(\n      fetchInputForAttempt(input),\n      withConnectionHeaders(input, init, first.headers),\n    );\n    if (response.status === 401) {\n      await cancelMcpResponseBody(response);\n      const refreshed = await resolveConnectionForRequest(\n        options,\n        config.id,\n        connectionRef,\n        destinationUrl,\n        request.toolName,\n        true,\n      );\n      if (refreshed.status === \"auth_needed\") {\n        return await authNeededFetchResponse(options, config.id, request, refreshed, connectionRef);\n      }\n      const retry = await baseFetch(\n        fetchInputForAttempt(input),\n        withConnectionHeaders(input, init, refreshed.headers),\n      );\n      if (retry.status === 403) {\n        const auth = insufficientScopeAuth(retry.headers, connectionRef, refreshed.connectionId);\n        if (auth) {\n          await cancelMcpResponseBody(retry);\n          return await authNeededFetchResponse(options, config.id, request, auth, connectionRef);\n        }\n        return retry;\n      }\n      if (retry.status === 401) {\n        await cancelMcpResponseBody(retry);\n        return await authNeededFetchResponse(\n          options,\n          config.id,\n          request,\n          {\n            status: \"auth_needed\",\n            reason: \"expired\",\n            providerDomain: connectionRef.providerDomain,\n            ...(connectionRef.provider ? { provider: connectionRef.provider } : {}),\n            connectionId: refreshed.connectionId,\n            ...(connectionRef.scopes ? { scopes: connectionRef.scopes } : {}),\n            ...(connectionRef.resource ? { resource: connectionRef.resource } : {}),\n            ...(connectionRef.selectedResources\n              ? { selectedResources: connectionRef.selectedResources }\n              : {}),\n          },\n          connectionRef,\n        );\n      }\n      return retry;\n    }\n    if (response.status === 403) {\n      const auth = insufficientScopeAuth(response.headers, connectionRef, first.connectionId);\n      if (auth) {\n        await cancelMcpResponseBody(response);\n        return await authNeededFetchResponse(options, config.id, request, auth, connectionRef);\n      }\n      return response;\n    }\n    return response;\n  };\n}\n\nasync function resolveConnectionForRequest(\n  options: PrepareToolsOptions,\n  serverId: string,\n  connectionRef: McpServerConnectionRef,\n  destinationUrl: string,\n  toolName: string | undefined,\n  forceRefresh: boolean,\n): Promise<ResolveConnectionCredentialResult> {\n  if (!options.workspaceId || !options.resolveCredential) {\n    return {\n      status: \"auth_needed\",\n      reason: \"missing_connection\",\n      providerDomain: connectionRef.providerDomain,\n      ...(connectionRef.provider ? { provider: connectionRef.provider } : {}),\n      ...(connectionRef.connectionId ? { connectionId: connectionRef.connectionId } : {}),\n      ...(connectionRef.scopes ? { scopes: connectionRef.scopes } : {}),\n      ...(connectionRef.resource ? { resource: connectionRef.resource } : {}),\n      ...(connectionRef.selectedResources\n        ? { selectedResources: connectionRef.selectedResources }\n        : {}),\n    };\n  }\n  const request: ResolveConnectionCredentialInput = {\n    workspaceId: options.workspaceId,\n    serverId,\n    connectionRef,\n    destinationUrl,\n    forceRefresh,\n    ...(toolName ? { toolName } : {}),\n    ...(options.credentialSubjectId ? { subjectId: options.credentialSubjectId } : {}),\n  };\n  try {\n    return await options.resolveCredential(request);\n  } catch {\n    return {\n      status: \"auth_needed\",\n      reason: \"refresh_failed\",\n      providerDomain: connectionRef.providerDomain,\n      ...(connectionRef.provider ? { provider: connectionRef.provider } : {}),\n      ...(connectionRef.connectionId ? { connectionId: connectionRef.connectionId } : {}),\n      ...(connectionRef.scopes ? { scopes: connectionRef.scopes } : {}),\n      ...(connectionRef.resource ? { resource: connectionRef.resource } : {}),\n      ...(connectionRef.selectedResources\n        ? { selectedResources: connectionRef.selectedResources }\n        : {}),\n    };\n  }\n}\n\nfunction insufficientScopeAuth(\n  headers: Headers,\n  connectionRef: McpServerConnectionRef,\n  connectionId: string,\n): Extract<ResolveConnectionCredentialResult, { status: \"auth_needed\" }> | null {\n  const challenge = parseWwwAuthenticate(headers.get(\"www-authenticate\"));\n  if (challenge.error !== \"insufficient_scope\") {\n    return null;\n  }\n  return {\n    status: \"auth_needed\",\n    reason: \"insufficient_scope\",\n    providerDomain: connectionRef.providerDomain,\n    ...(connectionRef.provider ? { provider: connectionRef.provider } : {}),\n    connectionId,\n    ...(challenge.scope?.length\n      ? { scopes: challenge.scope }\n      : connectionRef.scopes\n        ? { scopes: connectionRef.scopes }\n        : {}),\n    ...(challenge.resource\n      ? { resource: challenge.resource }\n      : connectionRef.resource\n        ? { resource: connectionRef.resource }\n        : {}),\n    ...(connectionRef.selectedResources\n      ? { selectedResources: connectionRef.selectedResources }\n      : {}),\n  };\n}\n\nasync function authNeededFetchResponse(\n  options: PrepareToolsOptions,\n  serverId: string,\n  request: McpRequestInfo,\n  auth: Extract<ResolveConnectionCredentialResult, { status: \"auth_needed\" }>,\n  connectionRef: McpServerConnectionRef,\n): Promise<Response> {\n  const connectionId = auth.connectionId ?? connectionRef.connectionId;\n  await publishAuthNeeded(options, {\n    serverId,\n    toolName: request.toolName ?? null,\n    providerDomain: auth.providerDomain,\n    ...(auth.provider\n      ? { provider: auth.provider }\n      : connectionRef.provider\n        ? { provider: connectionRef.provider }\n        : {}),\n    reason: auth.reason,\n    ...(connectionId ? { connectionId } : {}),\n    ...(auth.scopes\n      ? { scopes: auth.scopes }\n      : connectionRef.scopes\n        ? { scopes: connectionRef.scopes }\n        : {}),\n    ...(auth.resource\n      ? { resource: auth.resource }\n      : connectionRef.resource\n        ? { resource: connectionRef.resource }\n        : {}),\n    ...(auth.selectedResources\n      ? { selectedResources: auth.selectedResources }\n      : connectionRef.selectedResources\n        ? { selectedResources: connectionRef.selectedResources }\n        : {}),\n    ...(auth.authorizationUrl ? { authorizationUrl: auth.authorizationUrl } : {}),\n    ...(options.subjectId ? { subjectId: options.subjectId } : {}),\n  });\n  if (request.method === \"tools/call\") {\n    return mcpToolAuthNeededResponse(request.id);\n  }\n  return new Response(\"Authentication required for MCP server connection\", {\n    status: 401,\n  });\n}\n\nasync function publishAuthNeeded(\n  options: PrepareToolsOptions,\n  payload: ToolAuthNeededPayload,\n): Promise<void> {\n  try {\n    await options.onAuthNeeded?.(payload);\n  } catch {\n    // Auth-needed events are advisory UI/audit signals; a publisher failure must\n    // not turn an auth-recoverable tool condition into a failed agent turn.\n  }\n}\n\ntype McpRequestInfo = {\n  method?: string;\n  id?: string | number | null;\n  toolName?: string;\n};\n\nfunction mcpRequestDestinationUrl(input: string | URL | Request): string {\n  return new URL(input instanceof Request ? input.url : input.toString()).toString();\n}\n\nasync function mcpRequestInfo(\n  input: string | URL | Request,\n  init?: RequestInit,\n): Promise<McpRequestInfo> {\n  const body =\n    typeof init?.body === \"string\"\n      ? init.body\n      : input instanceof Request && (init?.method ?? input.method).toUpperCase() === \"POST\"\n        ? await input\n            .clone()\n            .text()\n            .catch(() => \"\")\n        : \"\";\n  if (!body) {\n    return {};\n  }\n  try {\n    const parsed = JSON.parse(body) as {\n      id?: unknown;\n      method?: unknown;\n      params?: { name?: unknown };\n    };\n    const method = typeof parsed.method === \"string\" ? parsed.method : undefined;\n    const id =\n      typeof parsed.id === \"string\" || typeof parsed.id === \"number\" || parsed.id === null\n        ? parsed.id\n        : undefined;\n    const toolName =\n      method === \"tools/call\" && typeof parsed.params?.name === \"string\"\n        ? parsed.params.name\n        : undefined;\n    return {\n      ...(method ? { method } : {}),\n      ...(id !== undefined ? { id } : {}),\n      ...(toolName ? { toolName } : {}),\n    };\n  } catch {\n    return {};\n  }\n}\n\nfunction withConnectionHeaders(\n  input: string | URL | Request,\n  init: RequestInit | undefined,\n  authHeaders: Record<string, string>,\n): RequestInit {\n  const headers = new Headers(\n    init?.headers ?? (input instanceof Request ? input.headers : undefined),\n  );\n  for (const [name, value] of Object.entries(authHeaders)) {\n    headers.set(name, value);\n  }\n  return { ...init, headers };\n}\n\nfunction fetchInputForAttempt(input: string | URL | Request): string | URL | Request {\n  return input instanceof Request ? input.clone() : input;\n}\n\nfunction parseWwwAuthenticate(header: string | null): {\n  error?: string;\n  scope?: string[];\n  resource?: string;\n} {\n  if (!header) {\n    return {};\n  }\n  const bearerIndex = header.toLowerCase().indexOf(\"bearer\");\n  if (bearerIndex < 0) {\n    return {};\n  }\n  const paramsText = header.slice(bearerIndex + \"bearer\".length);\n  const params: Record<string, string> = {};\n  const re = /([a-zA-Z_][a-zA-Z0-9_-]*)\\s*=\\s*(\"(?:[^\"\\\\]|\\\\.)*\"|[^,\\s]+)/g;\n  let match: RegExpExecArray | null;\n  while ((match = re.exec(paramsText)) !== null) {\n    const raw = match[2]!;\n    params[match[1]!.toLowerCase()] = raw.startsWith('\"')\n      ? raw.slice(1, -1).replace(/\\\\\"/g, '\"')\n      : raw;\n  }\n  return {\n    ...(params.error ? { error: params.error } : {}),\n    ...(params.scope ? { scope: params.scope.split(/\\s+/).filter(Boolean) } : {}),\n    ...(params.resource ? { resource: params.resource } : {}),\n  };\n}\n\n// Application-defined JSON-RPC error code marking \"this tool call needs a\n// connection\". A RESULT carrying inline `isError: true` cannot be used here:\n// the agents SDK's streamable-http shim strips `isError` and returns only the\n// content, erasing the failure. A JSON-RPC error survives the shim as a thrown\n// McpError, which PrefixedMcpServer.callTool converts back into an MCP-shaped\n// `{ isError: true }` output for the model.\nconst MCP_AUTH_NEEDED_ERROR_CODE = -32001;\nconst MCP_AUTH_NEEDED_MESSAGE =\n  \"Authentication required - a connection link was posted to the session.\";\n\nfunction mcpToolAuthNeededResponse(id: string | number | null | undefined): Response {\n  return new Response(\n    JSON.stringify({\n      jsonrpc: \"2.0\",\n      id: id ?? null,\n      error: {\n        code: MCP_AUTH_NEEDED_ERROR_CODE,\n        message: MCP_AUTH_NEEDED_MESSAGE,\n      },\n    }),\n    {\n      status: 200,\n      headers: { \"content-type\": \"application/json\" },\n    },\n  );\n}\n\nfunction isAuthNeededMcpError(error: unknown): boolean {\n  if (!(error instanceof Error)) {\n    return false;\n  }\n  const code = (error as { code?: unknown }).code;\n  return code === MCP_AUTH_NEEDED_ERROR_CODE || error.message.includes(MCP_AUTH_NEEDED_MESSAGE);\n}\n\n// Model-facing text for a best-effort server whose tool call failed for a\n// non-auth reason (transport 401/403 that never became the broker's JSON-RPC\n// short-circuit, a provider 5xx, a network blip). The copy is LOOP-SAFE: it\n// tells the model the tool is dead for the REST OF THIS TURN and to NOT retry\n// it, so a model that would otherwise burn the turn re-calling the same broken\n// optional tool moves on instead. Only the safe error surface (JS error class +\n// numeric HTTP status) is interpolated — NEVER the raw error message/response\n// body, which for a broker 401/403 can echo request URLs/headers/credentials.\nfunction mcpToolUnavailableMessage(reason: string): string {\n  return `This tool is unavailable for the rest of this turn (${reason}). Do not retry it — continue without it or use another approach.`;\n}\n\n// The only error detail safe to surface to the model or the logs: the JS error\n// constructor name and, when present, a numeric HTTP status. A StreamableHTTP\n// transport error carries the raw response BODY in its `.message` (a broker\n// 401/403 body can echo request detail), so `.message` is never included; the\n// numeric `.code`/`.status` (e.g. 401) is safe and useful.\nfunction safeMcpErrorFields(error: unknown): {\n  errorClass: string;\n  status?: number;\n} {\n  const errorClass = error instanceof Error ? error.constructor.name : typeof error;\n  const raw = (error as { code?: unknown; status?: unknown } | null)?.code;\n  const status = typeof raw === \"number\" ? raw : undefined;\n  if (status === undefined) {\n    const altRaw = (error as { status?: unknown } | null)?.status;\n    return typeof altRaw === \"number\" ? { errorClass, status: altRaw } : { errorClass };\n  }\n  return { errorClass, status };\n}\n\nfunction safeMcpTransportError(error: unknown): Error & { status?: number; code?: number } {\n  const fields = safeMcpErrorFields(error);\n  const safeError = new Error(\n    `MCP transport operation failed (${mcpErrorReason(fields)})`,\n  ) as Error & {\n    status?: number;\n    code?: number;\n  };\n  safeError.name = \"McpTransportError\";\n  if (fields.status !== undefined) {\n    safeError.status = fields.status;\n    safeError.code = fields.status;\n  }\n  return safeError;\n}\n\nfunction safeMcpTransportLogger(serverId: string) {\n  const logFailure = (_message: string, ...args: unknown[]) => {\n    let error: unknown;\n    for (let index = args.length - 1; index >= 0; index -= 1) {\n      if (args[index] instanceof Error) {\n        error = args[index];\n        break;\n      }\n    }\n    console.warn(\"[mcp] transport operation failed\", {\n      serverId,\n      ...safeMcpErrorFields(error),\n    });\n  };\n  return {\n    namespace: \"opengeni:mcp-transport\",\n    debug: () => undefined,\n    error: logFailure,\n    warn: logFailure,\n    dontLogModelData: true,\n    dontLogToolData: true,\n  };\n}\n\n// Compose the safe model/log reason string (\"StreamableHTTPError 401\", or just\n// the class when no numeric status is available). Never carries the raw body.\nfunction mcpErrorReason(fields: { errorClass: string; status?: number }): string {\n  return fields.status === undefined ? fields.errorClass : `${fields.errorClass} ${fields.status}`;\n}\n\nasync function mcpServerRequestInit(\n  settings: Settings,\n  config: Settings[\"mcpServers\"][number],\n): Promise<{ requestInit: { headers: Record<string, string> } } | {}> {\n  // codex_apps is checked FIRST so the static-headers path can never apply to\n  // it: its refreshing ChatGPT/Codex bearer is resolved per-connect from the\n  // codex ALS, never from a baked `config.headers` value.\n  if (isCodexAppsMcpServer(config)) {\n    return await codexAppsMcpRequestInit(settings);\n  }\n  if (isFirstPartyMcpServer(settings, config)) {\n    return await firstPartyMcpRequestInit(settings, config);\n  }\n  // Third-party MCP servers get their configured credential headers (for\n  // example workspace-enabled capability MCP credentials) and nothing else —\n  // never OpenGeni's own access key or delegated tokens.\n  if (config.headers && Object.keys(config.headers).length > 0) {\n    return { requestInit: { headers: { ...config.headers } } };\n  }\n  return {};\n}\n\nasync function firstPartyMcpRequestInit(\n  settings: Settings,\n  config: Settings[\"mcpServers\"][number],\n): Promise<{ requestInit: { headers: Record<string, string> } } | {}> {\n  if (!isFirstPartyMcpServer(settings, config)) {\n    return {};\n  }\n  const headers: Record<string, string> = {};\n  if (settings.authRequired && settings.accessKey) {\n    headers[\"x-opengeni-access-key\"] = settings.accessKey;\n  }\n  // The delegated bearer is deliberately NOT baked here. It is re-signed PER\n  // REQUEST by firstPartyAuthFetch (wired in prepareAgentTools) so a turn or\n  // persistent MCP connection that outlives the token's 1h TTL never sends a\n  // stale bearer — an expired first-party bearer 401s (\"authentication\n  // required\"), and because the first-party server is REQUIRED that killed the\n  // turn on any run past ~1h. This function keeps only NON-expiring static\n  // headers (the access key); the per-request fetch wrapper is the single source\n  // of truth for the ever-refreshed Authorization header.\n  if (Object.keys(headers).length === 0) {\n    return {};\n  }\n  return {\n    requestInit: {\n      headers,\n    },\n  };\n}\n\n// Sign a FRESH first-party delegated bearer for a single request. Returns null\n// when the run lacks the inputs to mint one (no delegation secret / account /\n// workspace), in which case the request proceeds with whatever static headers\n// requestInit already set. The 1h TTL is safe precisely because this runs per\n// request: the token on the wire is always seconds old, never near expiry.\nasync function signFirstPartyDelegatedBearer(\n  settings: Settings,\n  options: PrepareToolsOptions,\n): Promise<string | null> {\n  if (!settings.delegationSecret || !options.accountId || !options.workspaceId) {\n    return null;\n  }\n  return await signDelegatedAccessToken(settings.delegationSecret, {\n    accountId: options.accountId,\n    workspaceId: options.workspaceId,\n    subjectId: options.subjectId ?? \"worker:first-party-mcp\",\n    ...(options.subjectLabel ? { subjectLabel: options.subjectLabel } : {}),\n    permissions: options.firstPartyPermissions ?? [...DEFAULT_FIRST_PARTY_MCP_PERMISSIONS],\n    firstPartyMcpTools: options.firstPartyTools ?? [...DEFAULT_FIRST_PARTY_MCP_TOOLS],\n    ...(options.sessionId ? { sessionId: options.sessionId } : {}),\n    ...(options.turnId ? { turnId: options.turnId } : {}),\n    ...(options.attemptId ? { attemptId: options.attemptId } : {}),\n    ...(options.executionGeneration ? { executionGeneration: options.executionGeneration } : {}),\n    exp: Math.floor(Date.now() / 1000) + 60 * 60,\n  });\n}\n\n// Per-request auth for the FIRST-PARTY MCP server: re-sign the delegated bearer\n// on EVERY request (connect/initialize, every tools/list re-list, every\n// tools/call) and set it as the Authorization header, so a turn or connection\n// outliving the 1h token TTL never sends an expired bearer. This is the fix for\n// the prod grind where a >1h turn's next re-list/tool-call 401'd on the stale\n// first-party bearer and — the first-party server being required — failed the\n// whole turn. Scoped STRICTLY to the token WE mint; external OAuth (connectionRef\n// servers) go through connectionBrokerFetch and are untouched.\nfunction firstPartyAuthFetch(\n  baseFetch: FetchLike,\n  settings: Settings,\n  options: PrepareToolsOptions,\n): FetchLike {\n  return async (input, init) => {\n    const bearer = await signFirstPartyDelegatedBearer(settings, options);\n    if (!bearer) {\n      return await baseFetch(input, init);\n    }\n    return await baseFetch(\n      fetchInputForAttempt(input),\n      withConnectionHeaders(input, init, { authorization: `Bearer ${bearer}` }),\n    );\n  };\n}\n\n/**\n * Builds the connect-time auth headers for the codex_apps connectors MCP. The\n * bearer is resolved from codexRequestStorage — the SAME refreshing token source\n * the model fetch uses (proactive refresh + single-flight + db persist) — so the\n * token is valid at connect. A missing store (non-codex turn, or prepareTools\n * ran outside the ALS) or a token failure (needs_relogin) returns {} so the\n * best-effort connect drops the server rather than crashing the turn.\n */\nasync function codexAppsMcpRequestInit(\n  settings: Settings,\n): Promise<{ requestInit: { headers: Record<string, string> } } | {}> {\n  const ctx = codexRequestStorage.getStore();\n  if (!ctx) {\n    return {};\n  }\n  let token;\n  try {\n    token = await ctx.getToken();\n  } catch {\n    return {};\n  }\n  const headers: Record<string, string> = {\n    authorization: `Bearer ${token.accessToken}`,\n    // The ChatGPT backend sits behind Cloudflare, which 403s requests bearing a\n    // default runtime User-Agent (confirmed live: an HTML bot-block page, NOT an\n    // auth failure). Send the codex client identity — the same originator/version/\n    // User-Agent the model fetch uses — so the MCP connect handshake passes the edge.\n    originator: CODEX_ORIGINATOR,\n    \"user-agent\": `${CODEX_ORIGINATOR}/${ctx.clientVersion}`,\n    version: ctx.clientVersion,\n  };\n  if (token.chatgptAccountId) {\n    headers[\"chatgpt-account-id\"] = token.chatgptAccountId;\n  }\n  if (settings.codexProductSku) {\n    headers[\"X-OpenAI-Product-Sku\"] = settings.codexProductSku;\n  }\n  return { requestInit: { headers } };\n}\n\n// The first-party MCP permission set signed into a worker's delegated token\n// when the session does not specify its own. POWERFUL BY DEFAULT: it carries\n// every permission that unlocks a first-party tool — session orchestration\n// (sessions:*), workspace variable sets (variable-sets:*), rigs:use\n// (list/get/propose/verify only), and GitHub (github:use) — so agents are fully capable out of the box. A user DEMOTES a\n// specific session by setting a narrower session.firstPartyMcpPermissions (the\n// create-session permission picker), which the worker uses instead. Account-\n// level scopes (billing/account/members/api_keys/workspace:admin) are\n// intentionally excluded: they gate no first-party tool and are not agent\n// capabilities. (A finer-grained capability model comes later.)\n// codex_apps is third-party-by-trust (the external ChatGPT connectors backend)\n// but needs DYNAMIC auth, so it is its own category — deliberately NOT folded\n// into the first-party allowlist, which would wrongly sign an OpenGeni delegated\n// token to chatgpt.com.\nfunction isCodexAppsMcpServer(config: Settings[\"mcpServers\"][number]): boolean {\n  return config.id === CODEX_APPS_MCP_SERVER_ID;\n}\n\nfunction isFirstPartyMcpServer(\n  settings: Settings,\n  config: Settings[\"mcpServers\"][number],\n): boolean {\n  if (![\"opengeni\", \"files\", \"docs\"].includes(config.id)) {\n    return false;\n  }\n  if (config.url.includes(\"{workspaceId}\")) {\n    return true;\n  }\n  const url = normalizeUrl(config.url);\n  if (!url) {\n    return false;\n  }\n  return firstPartyMcpUrls(settings).some((candidate) => candidate === url);\n}\n\nfunction firstPartyMcpServerUrlForRun(\n  settings: Settings,\n  config: Settings[\"mcpServers\"][number],\n  workspaceId: string | undefined,\n): string | null {\n  if (!workspaceId || ![\"opengeni\", \"files\", \"docs\"].includes(config.id)) {\n    return null;\n  }\n  if (config.url.includes(\"{workspaceId}\")) {\n    return config.url.replaceAll(\"{workspaceId}\", workspaceId);\n  }\n  if (!isFirstPartyMcpServer(settings, config)) {\n    return null;\n  }\n  const rawBase = settings.opengeniMcpUrl?.includes(\"{workspaceId}\")\n    ? settings.opengeniMcpUrl.replaceAll(\"{workspaceId}\", workspaceId)\n    : settings.opengeniMcpUrl\n      ? scopedMcpUrlFromConfiguredBase(settings.opengeniMcpUrl, workspaceId)\n      : // unset → the shared loopback default (a `{workspaceId}` template owned by\n        // @opengeni/config's firstPartyMcpBaseUrl), scoped to this run's workspace.\n        firstPartyMcpBaseUrl(settings).replaceAll(\"{workspaceId}\", workspaceId);\n  const url = new URL(rawBase);\n  if (config.id === \"docs\") {\n    url.pathname = `${url.pathname.replace(/\\/+$/, \"\")}/docs`;\n  }\n  return url.toString();\n}\n\nfunction scopedMcpUrlFromConfiguredBase(raw: string, workspaceId: string): string {\n  const url = new URL(raw);\n  url.pathname = `/v1/workspaces/${workspaceId}/mcp`;\n  url.search = \"\";\n  url.hash = \"\";\n  return url.toString();\n}\n\nfunction firstPartyMcpUrls(settings: Settings): string[] {\n  // Route the unset case through the shared loopback default so the literal\n  // lives in exactly one place (@opengeni/config's firstPartyMcpBaseUrl).\n  const base = normalizeUrl(settings.opengeniMcpUrl ?? firstPartyMcpBaseUrl(settings));\n  if (!base) {\n    return [];\n  }\n  const docs = new URL(base);\n  docs.pathname = `${docs.pathname.replace(/\\/+$/, \"\")}/docs`;\n  return [base, normalizeUrl(docs.toString())].filter((value): value is string => Boolean(value));\n}\n\nfunction normalizeUrl(raw: string): string | null {\n  try {\n    const url = new URL(raw);\n    url.hash = \"\";\n    url.pathname = url.pathname.replace(/\\/+$/, \"\");\n    return url.toString();\n  } catch {\n    return null;\n  }\n}\n\nexport function prefixedMcpToolName(registryId: string, toolName: string): string {\n  return sharedPrefixedMcpToolName(registryId, toolName);\n}\n\nclass PrefixedMcpServer implements MCPServer {\n  readonly cacheToolsList: boolean;\n  readonly name: string;\n  readonly prefix: string;\n  private readonly allowedTools: Set<string> | undefined;\n  // Best-effort servers (optional refs, connectionRef-backed capability MCPs,\n  // codex_apps) must never fail a turn: a tools/list throw degrades to zero\n  // tools instead of propagating. Deduplicate the warn so one degraded server\n  // doesn't spam the log when the SDK re-lists across model turns.\n  private readonly bestEffort: boolean;\n  private loggedListToolsFailure = false;\n  private listedToolSchemaTokens = 0;\n  private modelToolSchemaAccountingDeferred = false;\n\n  constructor(\n    private readonly inner: MCPServer,\n    registryId: string,\n    allowedTools?: string[],\n    bestEffort = false,\n    private readonly aggregateToolBudget?: McpAggregateToolListBudget,\n    private readonly aggregateSourceId = registryId,\n  ) {\n    this.name = registryId;\n    this.prefix = prefixedMcpToolName(registryId, \"\");\n    this.cacheToolsList = inner.cacheToolsList;\n    this.allowedTools = allowedTools ? new Set(allowedTools) : undefined;\n    this.bestEffort = bestEffort;\n  }\n\n  connect(): Promise<void> {\n    return this.inner.connect().catch((error: unknown) => {\n      // connectMcpServers has its own global logger and logs the thrown Error.\n      // Never let a raw transport response body cross that logging boundary.\n      throw safeMcpTransportError(error);\n    });\n  }\n\n  close(): Promise<void> {\n    this.releaseAggregateBudget();\n    return this.inner.close();\n  }\n\n  releaseAggregateBudget(): void {\n    this.aggregateToolBudget?.remove(this.aggregateSourceId);\n  }\n\n  async listTools(): Promise<RuntimeMcpTool[]> {\n    try {\n      const tools = assertMcpToolListWithinBounds(await this.inner.listTools()) as RuntimeMcpTool[];\n      const exposed = tools\n        .filter((tool) => this.isAllowed(tool.name))\n        .map((tool) => ({\n          ...tool,\n          name: prefixedMcpToolName(this.name, tool.name),\n        }));\n      const bounded = (this.aggregateToolBudget?.replace(this.aggregateSourceId, exposed) ??\n        assertMcpToolListWithinBounds(exposed)) as RuntimeMcpTool[];\n      this.listedToolSchemaTokens = estimateSerializedValueTokens(bounded);\n      return bounded;\n    } catch (error) {\n      // A REQUIRED server's tools/list failure is fatal (fail-loud default): the\n      // caller explicitly requested it, so its absence must fail the turn.\n      if (!this.bestEffort) {\n        throw error;\n      }\n      // Best-effort isolation. The SDK's run-time getAllMcpTools calls listTools\n      // OUTSIDE the connect-time connectMcpServers({ strict: false }) guard, so a\n      // best-effort server whose tools/list throws here — for ANY reason (an\n      // expired/failed connection credential surfacing as a StreamableHTTP\n      // \"authentication required\" 401, a provider 5xx, a network blip) — would\n      // otherwise take down an unrelated turn. Drop this server's tools for the\n      // turn instead. An auth failure additionally published tool.auth_needed via\n      // the connection-broker fetch before the throw (so that actionable signal\n      // is preserved), but a non-auth failure has NO such signal — the structured\n      // warn below is its only visibility, so a chronically-dead optional\n      // integration surfaces in logs/metrics rather than being silently swallowed.\n      // Warn once per degraded server per turn (instances are per-turn), so a\n      // re-list across model turns does not spam the log.\n      if (!this.loggedListToolsFailure) {\n        this.loggedListToolsFailure = true;\n        console.warn(\n          \"[mcp] best-effort server tools/list failed; its tools are unavailable this turn\",\n          // Safe surface only (class + numeric status), never the raw error\n          // message/response body — a broker 401/403 body can echo request detail.\n          { serverId: this.name, ...safeMcpErrorFields(error) },\n        );\n      }\n      this.releaseAggregateBudget();\n      return [];\n    }\n  }\n\n  /** Latest exact tools/list projection used to build the model request. */\n  modelToolSchemaTokens(): number {\n    return this.modelToolSchemaAccountingDeferred ? 0 : this.listedToolSchemaTokens;\n  }\n\n  /**\n   * Keep model-input accounting aligned with Codex `defer_loading`: the full\n   * schema is not provider context until a tool_search_output discloses it.\n   * Instances are turn-local, so this cannot leak into a non-Codex turn.\n   */\n  deferModelToolSchemaAccounting(): void {\n    this.modelToolSchemaAccountingDeferred = true;\n  }\n\n  async callTool(\n    toolName: string,\n    args: Record<string, unknown> | null,\n    meta?: Record<string, unknown> | null,\n  ): Promise<any> {\n    const unprefixed = this.unprefixToolName(toolName);\n    if (!this.isAllowed(unprefixed)) {\n      throw new Error(`MCP tool ${unprefixed} is not allowed for server ${this.name}`);\n    }\n    try {\n      const output = await this.inner.callTool(unprefixed, args, meta);\n      assertMcpPayloadWithinBytes(output, MCP_MAX_TOOL_RESULT_BYTES, \"MCP tool result\");\n      return output;\n    } catch (error) {\n      // The connection broker's auth-needed short-circuit arrives as a thrown\n      // JSON-RPC error (an inline isError result would be stripped by the SDK\n      // shim). Surface it to the model as a failed-but-recoverable tool result\n      // instead of failing the turn; the timeline chip was already published.\n      // This applies to ANY server — an auth-needed is recoverable once the user\n      // re-links, so even a required tool degrades gracefully here.\n      if (isAuthNeededMcpError(error)) {\n        return {\n          isError: true,\n          content: [{ type: \"text\", text: MCP_AUTH_NEEDED_MESSAGE }],\n        };\n      }\n      // Best-effort INVOCATION isolation (sibling to the listTools guard). When\n      // the model calls a best-effort server's tool and the call throws for ANY\n      // other reason — a raw transport 401/403 that never became the broker's\n      // JSON-RPC short-circuit (e.g. a codex_apps bearer that expired mid-turn,\n      // or a 403 with no insufficient_scope challenge), a provider 5xx, or a\n      // network blip — the whole turn would otherwise die. Return a tool-error\n      // RESULT the model sees instead, so it adapts (tries another approach,\n      // tells the user) and the turn survives. Required servers keep the\n      // fail-loud default: the caller depends on them, so their tool failure\n      // still fails the turn. For auth cases the actionable tool.auth_needed was\n      // already published upstream by the connection-broker fetch before the\n      // throw, so degrading here never silences it.\n      if (this.bestEffort) {\n        const fields = safeMcpErrorFields(error);\n        console.warn(\n          \"[mcp] best-effort server tool call failed; returning an unavailable result for this turn\",\n          { serverId: this.name, toolName: unprefixed, ...fields },\n        );\n        return {\n          isError: true,\n          content: [\n            {\n              type: \"text\",\n              text: mcpToolUnavailableMessage(mcpErrorReason(fields)),\n            },\n          ],\n        };\n      }\n      throw error;\n    }\n  }\n\n  invalidateToolsCache(): Promise<void> {\n    return this.inner.invalidateToolsCache();\n  }\n\n  async listResources(params?: Record<string, unknown>): Promise<any> {\n    const resourcesServer = this.inner as MCPServer & {\n      listResources?: (params?: Record<string, unknown>) => Promise<any>;\n    };\n    if (!resourcesServer.listResources) {\n      throw new Error(`MCP server ${this.name} does not support resources`);\n    }\n    return await resourcesServer.listResources(params);\n  }\n\n  async listResourceTemplates(params?: Record<string, unknown>): Promise<any> {\n    const resourcesServer = this.inner as MCPServer & {\n      listResourceTemplates?: (params?: Record<string, unknown>) => Promise<any>;\n    };\n    if (!resourcesServer.listResourceTemplates) {\n      throw new Error(`MCP server ${this.name} does not support resource templates`);\n    }\n    return await resourcesServer.listResourceTemplates(params);\n  }\n\n  async readResource(uri: string): Promise<any> {\n    const resourcesServer = this.inner as MCPServer & {\n      readResource?: (uri: string) => Promise<any>;\n    };\n    if (!resourcesServer.readResource) {\n      throw new Error(`MCP server ${this.name} does not support resource reads`);\n    }\n    return await resourcesServer.readResource(uri);\n  }\n\n  private isAllowed(toolName: string): boolean {\n    return !this.allowedTools || this.allowedTools.has(toolName);\n  }\n\n  private unprefixToolName(toolName: string): string {\n    if (!toolName.startsWith(this.prefix)) {\n      throw new Error(`MCP tool ${toolName} is missing expected ${this.name} prefix`);\n    }\n    return toolName.slice(this.prefix.length);\n  }\n}\n\n// createSandboxClient (+ withDockerNetwork / connectDockerNetwork) moved to the\n// agent-loop-free leaf ./sandbox; re-exported via `export * from \"./sandbox\"`.\n\nexport type PrepareInputOptions = {\n  sandboxClient?: unknown;\n};\n\nexport async function prepareRunInput(\n  agent: Agent<any, any>,\n  input: AgentSegmentInput,\n  options: PrepareInputOptions = {},\n): Promise<PreparedAgentInput> {\n  if (input.kind === \"message\") {\n    const trailingMessages: AgentInputItem[] = [];\n    if (input.internalContext?.trim()) {\n      trailingMessages.push({\n        type: \"message\",\n        role: \"system\",\n        content: input.internalContext,\n      } as AgentInputItem);\n    }\n    if (input.text?.trim()) {\n      trailingMessages.push({\n        type: \"message\",\n        role: \"user\",\n        content: input.text,\n      } as AgentInputItem);\n    }\n    if (\n      trailingMessages.length === 0 &&\n      (input.historyItems === undefined ||\n        input.historyItems === null ||\n        input.historyItems.length === 0)\n    ) {\n      throw new Error(\"Message input requires a user prompt or internal context\");\n    }\n    // Conversation truth comes only from durable history items. Sanitize the\n    // in-memory copy before it reaches the model so a corrupt tool-call pair is\n    // non-fatal; stored audit rows remain untouched.\n    const sanitizedHistory = sanitizeHistoryItemsForModel(\n      (input.historyItems ?? []) as unknown as Array<Record<string, unknown>>,\n    ) as unknown as AgentInputItem[];\n    const sandboxSessionState = input.sandboxEnvelope\n      ? await restoredSandboxSessionStateFromEntry(input.sandboxEnvelope, options.sandboxClient)\n      : undefined;\n    const assembled = [...sanitizedHistory, ...trailingMessages];\n    if (assembled.length === 0) {\n      throw new Error(\"Message input requires durable history or internal context\");\n    }\n    return {\n      // Preserve the SDK's simple first-message form without creating a second\n      // history path: this is merely the zero-history representation.\n      input:\n        sanitizedHistory.length === 0 && !input.internalContext?.trim() && input.text?.trim()\n          ? input.text\n          : assembled,\n      ...(sandboxSessionState ? { sandboxSessionState } : {}),\n    };\n  }\n  // An interrupted tool can only be resumed against a real saved run state. If the\n  // latest blob is the cleared sentinel the awaiting turn was wiped (the API\n  // refuses clear in requires_action, so this is a defensive guard) — fail with\n  // an honest message instead of the cryptic SDK \"missing schema version\".\n  if (isClearedRunStateBlob(input.serializedRunState)) {\n    throw new Error(\n      \"Cannot resume an interrupted tool: the session context was cleared, so the awaiting run state no longer exists.\",\n    );\n  }\n  const state = await RunState.fromString(agent, input.serializedRunState);\n  const interruptions = state.getInterruptions();\n  const interruptionId = input.kind === \"human_input\" ? input.toolCallId : input.approvalId;\n  const target = interruptions.find((item: any) => approvalIdentifier(item) === interruptionId);\n  if (!target) {\n    throw new Error(`Interrupted tool not found in saved run state: ${interruptionId}`);\n  }\n  if (input.kind === \"human_input\") {\n    state.approve(target as any);\n  } else if (input.decision === \"approve\") {\n    state.approve(target as any);\n  } else {\n    state.reject(target as any, input.message ? { message: input.message } : undefined);\n  }\n  return { input: state };\n}\n\nexport type RunAgentStreamOptions = {\n  /** Abort the provider/tool loop when the owning activity is cancelled. */\n  signal?: AbortSignal;\n  sandboxClient?: unknown;\n  sandboxEnvironment?: Record<string, string>;\n  onRuntimeEvent?: (event: NormalizedRuntimeEvent) => Promise<void> | void;\n  contextCompactionSignal?: () => ProviderContextTokenSignal | null | undefined;\n  contextCompactionRequested?: () => boolean | Promise<boolean>;\n  // Host-managed git credential renewal registration. Called only after the\n  // initial token-file seed completed on a real provisioned box. The worker\n  // owns the multi-day timer and uses this pinned, un-proxied session to\n  // atomically replace token files; runtime never mints credentials itself.\n  onGitCredentialSessionReady?: (session: GitCredentialTokenWriterSession) => Promise<void> | void;\n  // OpenGeni-minted Toolspace token renewal registration. Called only after the\n  // initial token file reached the real sandbox session.\n  onToolspaceTokenSessionReady?: (session: ToolspaceTokenWriterSession) => Promise<void> | void;\n  // Host-owned run material is seeded off-manifest before setup and every\n  // agent-created process sources the active immutable generation. The worker\n  // owns resolution/renewal/fencing; runtime owns sandbox transport.\n  runCredentialSessionId?: string;\n  onRunCredentialSessionReady?: RunCredentialSessionReady;\n  // OWNERSHIP INVERSION (P1.2): an externally-owned, already-live sandbox\n  // session resolved by the per-turn resume-by-id path. When present,\n  // runAgentStream does NOT build (or resume, or discard) a client — it threads\n  // these straight into runOptions.sandbox as a NON-OWNED session. The SDK\n  // registers a provided session non-owned (manager.js) and NEVER reaps it on a\n  // normal finish (proven by spikes/sdk-keystone) — that is the keystone: the\n  // one box survives across turns. Mutually exclusive with the per-run\n  // createSandboxClient path (the owned branch takes precedence when both set).\n  // Agent-dependent decorators (file-downloads, lifecycle/repo-clone hooks) are\n  // re-applied around the resumed client here; the live `session`/`sessionState`\n  // carry the box, so no create()/resume() is re-invoked inside run().\n  ownedSandbox?: {\n    client: unknown; // built by the per-turn resume path (the raw provider client)\n    session: unknown; // SandboxSessionLike — the live, NON-OWNED handle (never reaped)\n    sessionState?: unknown; // SandboxSessionState the box was resumed from\n    // The UN-PROXIED established box for platform setup (lifecycle hooks + file\n    // resource materialization). `session` may be the mid-turn routing proxy whose\n    // every exec re-reads the active pointer — platform-initiated setup must NOT\n    // follow a swap onto a connected machine (the user's real computer), so it\n    // runs against this pinned handle instead. Absent -> falls back to `session`.\n    setupSession?: unknown;\n    // True when the caller already ran file-resource materialization for this\n    // provided session and threaded any failures into the model input.\n    fileDownloadsMaterialized?: boolean;\n    // Lazy sandbox provisioning injects a synthetic provided session at run start;\n    // the real box does not exist until the first sandbox op. In that path the\n    // worker provisioner runs runOwnedSandboxSetup against the un-proxied real box\n    // after establish, so runAgentStream must not run it eagerly here.\n    deferredSetup?: boolean;\n  };\n  /**\n   * The attempt's authoritative physical sandbox-operation fence. Platform\n   * lifecycle commands use its command runner too, so Steer/Pause can interrupt\n   * repository clone, rig setup, file materialization, and credential seeding\n   * before the attempt-quiesced receipt opens queue admission.\n   */\n  turnToolCancellationFence?: TurnToolCancellationFence;\n  // A per-turn model-input filter chained AFTER the provider-item-id strip.\n  // Used by the genesis-title injection to prepend a hidden, NON-PERSISTED\n  // directive: a callModelInputFilter mutates only `modelData.input` for each\n  // model call and never touches `state.history`/`originalInput`, so the\n  // reconcile dual-write never sees it.\n  callModelInputFilter?: CallModelInputFilter;\n};\n\nexport type ContextRobustnessFilterOptions = {\n  contextCompactionSignal?: () => ProviderContextTokenSignal | null | undefined;\n  contextCompactionRequested?: () => boolean | Promise<boolean>;\n  throwOnCompactionNeeded?: boolean;\n};\n\n// One-shot directive injected into the FIRST model call on the genesis turn\n// (see buildOpenGeniAgent's genesisTitleHint). Delivered through the\n// authoritative instructions channel so the model reliably obeys; references\n// the prefixed tool name the agent actually sees (opengeni__set_session_title).\nexport const GENESIS_TITLE_DIRECTIVE =\n  \"This is the first turn of a new session. Before responding to the user, call the opengeni__set_session_title tool with a concise 3-7 word title that summarizes what this session is about, then address the user's request normally.\";\n\n/**\n * Inject the genesis-title directive into exactly one model request. Agent\n * instructions are reused for every model call in a tool loop, so placing this\n * directive there turned a nominally one-shot setup action into repeated title\n * calls. The closure is intentionally consumed even when the first request\n * fails: a retry/recovery must continue the task, not restart setup.\n */\nexport function oneShotGenesisTitleInputFilter(): CallModelInputFilter {\n  let pending = true;\n  return ({ modelData }) => {\n    if (!pending) {\n      return modelData;\n    }\n    pending = false;\n    return {\n      ...modelData,\n      instructions: modelData.instructions\n        ? `${modelData.instructions} ${GENESIS_TITLE_DIRECTIVE}`\n        : GENESIS_TITLE_DIRECTIVE,\n    };\n  };\n}\n\nfunction takeGenesisTitleInputFilter(agent: Agent<any, any>): CallModelInputFilter | undefined {\n  if (!agentsNeedingGenesisTitleDirective.has(agent)) {\n    return undefined;\n  }\n  agentsNeedingGenesisTitleDirective.delete(agent);\n  return oneShotGenesisTitleInputFilter();\n}\n\n// Generic substrate prompting for programmatic tool calling (toolspace). Same\n// text for every host; gated per-turn by appendToolspaceInstructions on the\n// presence of a minted toolspace token, so it only appears when the sandbox\n// exposes $OPENGENI_TOOLSPACE_URL/_TOKEN_FILE. Stock images carry ogtool;\n// custom environments get only an exact deployment-pinned bootstrap hint.\nexport const TOOLSPACE_PROGRAMMATIC_DIRECTIVE =\n  \"Every tool on your MCP surface is also callable programmatically from the sandbox shell, so scripts can invoke tools without a model round trip per call. If `ogtool` is installed, run `ogtool list` to see the available tools and their input schemas (from tools/list), then `ogtool call <tool-name> '<json-args>'`. If it is absent and both npm and $OPENGENI_OGTOOL_PACKAGE_SPEC are available, run the exact deployment-pinned package with `npm exec --yes --package=\\\"$OPENGENI_OGTOOL_PACKAGE_SPEC\\\" -- ogtool ...`; never guess a version or install `latest`. Otherwise POST MCP JSON-RPC directly to $OPENGENI_TOOLSPACE_URL with the bearer token read from $OPENGENI_TOOLSPACE_TOKEN_FILE. Prefer programmatic calls for loops, polling, and bulk filtering: their results stay in the sandbox and do not consume your context window. Tools that require human approval must still be invoked normally — called programmatically they return a typed error.\";\n\n/**\n * callModelInputFilter that removes provider-assigned item ids (rs_/msg_/fc_…)\n * from every input item immediately before each model call. Responses-API\n * requests that carry item ids are resolved against the provider's stored\n * responses, and that store is not durable enough to anchor long runs on: a\n * response that streamed successfully can be missing from the store on the\n * very next call, which then fails with 400 \"Item with id ... not found\"\n * (observed live on Azure OpenAI mid-turn). All item content — including the\n * encrypted reasoning payload carried in providerData when\n * `openaiReasoningEncryptedContent` is on — is sent inline, so the ids add\n * fragility without adding information. Pairing fields (`call_id`/`callId`)\n * are separate properties and stay untouched; items are cloned, never mutated.\n */\nexport const stripProviderItemIdsFilter: CallModelInputFilter = ({ modelData }) => ({\n  ...modelData,\n  input: modelData.input.map((item) => {\n    if (item && typeof item === \"object\" && \"id\" in item) {\n      const { id: _id, ...rest } = item as Record<string, unknown>;\n      return rest as AgentInputItem;\n    }\n    return item;\n  }),\n});\n\n/**\n * callModelInputFilter that normalizes every `computer_call` carrying BOTH\n * `action` and `actions` down to EXACTLY ONE (keeps `actions`, drops `action`).\n * The Azure computer-use endpoint rejects a request whose computer_call has\n * both with `400 Computer call input must include exactly one of `action` or\n * `actions``; and (live-proven against gpt-5.6-sol's GA computer tool) it also\n * rejects the `action`-only form, accepting ONLY the batched plural `actions`.\n * The SDK 0.11.6 schema allows both, so a freshly-emitted\n * screenshot call carries the redundant pair. This filter runs before EVERY\n * model call — the turn-start history replay AND every mid-turn follow-up — so\n * it covers the just-emitted (non-replayed) computer_call on the same turn,\n * which the turn-start `prepareRunInput` sanitizer never sees. Items are cloned,\n * never mutated.\n */\nexport const normalizeComputerCallsFilter: CallModelInputFilter = ({ modelData }) => ({\n  ...modelData,\n  input: normalizeComputerCallActions(\n    modelData.input as unknown as Array<Record<string, unknown>>,\n  ) as unknown as AgentInputItem[],\n});\n\n/**\n * Per-call state compaction for local image inspection. Re-opening the same\n * path supersedes its prior base64 result; carrying both provides no newer\n * information and can otherwise balloon every following model request.\n */\nexport const elideSupersededViewImagesFilter: CallModelInputFilter = ({ modelData }) => ({\n  ...modelData,\n  input: elideSupersededViewImagePairs(\n    modelData.input as unknown as Array<Record<string, unknown>>,\n  ) as unknown as AgentInputItem[],\n});\n\n/**\n * Canonical Codex-style tool-result bound at the final model-input seam. The\n * identical pure normalizer also runs before conversation rows are persisted,\n * so this is a live-turn defense rather than a request-only alternate history.\n */\nexport function boundModelToolOutputsFilterForSettings(settings: Settings): CallModelInputFilter {\n  return ({ modelData }) => ({\n    ...modelData,\n    input: boundModelToolOutputItems(\n      modelData.input as unknown as Array<Record<string, unknown>>,\n      settings.modelToolOutputTruncationTokens,\n    ) as unknown as AgentInputItem[],\n  });\n}\n\nfunction estimateAgentToolSchemaTokens(agent: Agent<any, any>): number {\n  const localTools = Array.isArray((agent as { tools?: unknown }).tools)\n    ? ((agent as { tools: unknown[] }).tools ?? [])\n    : [];\n  const localDescriptors = localTools.map((candidate) => {\n    if (!candidate || typeof candidate !== \"object\") return candidate;\n    const tool = candidate as Record<string, unknown>;\n    return {\n      type: tool.type,\n      name: tool.name,\n      description: tool.description,\n      parameters: tool.parameters,\n      inputSchema: tool.inputSchema,\n      strict: tool.strict,\n      providerData: tool.providerData,\n    };\n  });\n  const mcpServers = Array.isArray((agent as { mcpServers?: unknown }).mcpServers)\n    ? ((agent as { mcpServers: unknown[] }).mcpServers ?? [])\n    : [];\n  const mcpTokens = mcpServers.reduce<number>((total, server) => {\n    const getter = (server as { modelToolSchemaTokens?: () => number } | null)\n      ?.modelToolSchemaTokens;\n    return total + (typeof getter === \"function\" ? getter.call(server) : 0);\n  }, 0);\n  return estimateSerializedValueTokens(localDescriptors) + mcpTokens;\n}\n\nexport function contextRobustnessFilterForSettings(\n  settings: Settings,\n  options: ContextRobustnessFilterOptions = {},\n): CallModelInputFilter {\n  const thresholdTokens = compactionThresholdTokens(settings);\n  let previousRequest: { revision: number; footprint: CompleteModelInputFootprint } | null = null;\n  let requestRevision = 0;\n  return async ({ modelData, agent }) => {\n    const input = modelData.input;\n    if (options.throwOnCompactionNeeded) {\n      const reported = options.contextCompactionSignal?.();\n      const current: CompleteModelInputFootprint = {\n        input: input as unknown as Array<Record<string, unknown>>,\n        instructionsTokens: estimateSerializedValueTokens(modelData.instructions ?? \"\"),\n        toolSchemaTokens: estimateAgentToolSchemaTokens(agent),\n      };\n      // Stream consumption can lag the SDK's background model loop. A provider\n      // usage signal is safe only when its response revision belongs to the\n      // immediately preceding request. Never attach a delayed response count to\n      // a newer footprint: doing so can hide all model output produced between\n      // them and recreate an under-counting compaction loop.\n      const boundProvider =\n        reported &&\n        previousRequest &&\n        reported.revision === previousRequest.revision &&\n        hasModelGeneratedItem(current.input)\n          ? reported\n          : null;\n      const estimate = estimateCompleteModelInput({\n        current,\n        provider: boundProvider,\n        providerRequestFootprint: boundProvider ? (previousRequest?.footprint ?? null) : null,\n      });\n      const signalTokens = estimate.tokens;\n      previousRequest = { revision: ++requestRevision, footprint: current };\n      if (await options.contextCompactionRequested?.()) {\n        throw new CompactionNeededError({\n          signalTokens,\n          thresholdTokens,\n          signalSource: boundProvider ? \"provider\" : \"estimate\",\n          trigger: \"operator\",\n        });\n      }\n      if (signalTokens >= thresholdTokens) {\n        throw new CompactionNeededError({\n          signalTokens,\n          thresholdTokens,\n          signalSource: boundProvider ? \"provider\" : \"estimate\",\n        });\n      }\n    }\n    return { ...modelData, input };\n  };\n}\n\n/**\n * Compose a list of callModelInputFilters into one, applied left-to-right so\n * each sees the prior filter's output.\n */\nfunction composeCallModelInputFilters(filters: CallModelInputFilter[]): CallModelInputFilter {\n  return async (args) => {\n    let modelData = args.modelData;\n    for (const filter of filters) {\n      modelData = await filter({ ...args, modelData });\n    }\n    return modelData;\n  };\n}\n\n/**\n * The model-input filter applied before every model call. The computer_call\n * action/actions normalizer is ALWAYS on (the Azure endpoint 400s without it);\n * the provider-item-id strip is layered on top when the configured policy\n * selects it; the context-robustness guard then raises the proactive durable\n * compaction signal on the client-compaction path. It never trims history from\n * an individual request.\n */\nexport function callModelInputFilterForSettings(\n  settings: Settings,\n  options: ContextRobustnessFilterOptions = {},\n): CallModelInputFilter | undefined {\n  const filters: CallModelInputFilter[] = [\n    normalizeComputerCallsFilter,\n    elideSupersededViewImagesFilter,\n    boundModelToolOutputsFilterForSettings(settings),\n  ];\n  if (settings.openaiProviderItemIds === \"strip\") {\n    filters.push(stripProviderItemIdsFilter);\n  }\n  filters.push(contextRobustnessFilterForSettings(settings, options));\n  return composeCallModelInputFilters(filters);\n}\n\nexport async function runAgentStream(\n  agent: Agent<any, any>,\n  input: PreparedAgentInput | string | RunState<any, any>,\n  settings: Settings,\n  overrides: RunAgentStreamOptions = {},\n) {\n  const prepared: PreparedAgentInput =\n    typeof input === \"string\" || input instanceof RunState ? { input } : input;\n  const environment = overrides.sandboxEnvironment ?? collectSandboxEnvironment(settings);\n  const toolspaceTokenFile = toolspaceTokenFileForAgent(agent, environment);\n  const genesisTitleInputFilter = takeGenesisTitleInputFilter(agent);\n  if (overrides.onRunCredentialSessionReady && !overrides.runCredentialSessionId) {\n    throw new Error(\"runCredentialSessionId is required when run credential setup is enabled\");\n  }\n\n  // OWNED PATH (P1.2 ownership inversion): the per-turn resume path injected a\n  // live, externally-owned box. We thread the live `session` straight into\n  // runOptions.sandbox so the SDK registers it NON-OWNED and never reaps it on\n  // a normal finish (the keystone). We re-apply ONLY the agent-dependent\n  // decorators (file-downloads + lifecycle/repo-clone hooks) around the resumed\n  // client — the manifest-refresh-on-resume wrap is a no-op when a live\n  // `session` is supplied (resume is not re-invoked). This branch is reached\n  // ONLY when sandboxOwnershipEnabled gated the activity into resolving a box;\n  // with the flag off the activity never sets `ownedSandbox` and this whole\n  // block is skipped (byte-for-byte the legacy path).\n  if (overrides.ownedSandbox) {\n    const { client: ownedClient, session, sessionState } = overrides.ownedSandbox;\n    // Platform setup (hooks + file materialization) execs against the UN-PROXIED\n    // established box when the caller pinned one — never through the routing proxy,\n    // whose per-op pointer re-read could land these execs on a machine swapped in\n    // mid-turn.\n    const setupSession = (overrides.ownedSandbox.setupSession ?? session) as SandboxSessionLike;\n    const credentialAgentSession = overrides.runCredentialSessionId\n      ? withRunCredentialsSession(session as SandboxSessionLike, overrides.runCredentialSessionId)\n      : (session as SandboxSessionLike);\n    const agentSession = toolspaceTokenFile\n      ? withToolspaceTokenSession(credentialAgentSession, toolspaceTokenFile)\n      : credentialAgentSession;\n    const credentialSetupSession = overrides.runCredentialSessionId\n      ? withRunCredentialsSession(setupSession, overrides.runCredentialSessionId)\n      : setupSession;\n    const decoratedSetupSession = toolspaceTokenFile\n      ? withToolspaceTokenSession(credentialSetupSession, toolspaceTokenFile)\n      : credentialSetupSession;\n    // Platform setup (manifest-env pin + beforeAgentStart hooks + file downloads)\n    // against the UN-proxied established box — the ONE-TRUTH helper shared with the\n    // lazy provisioner. Eager path: runs here, before the run starts (unchanged).\n    if (!overrides.ownedSandbox.deferredSetup) {\n      await overrides.onRunCredentialSessionReady?.(session as SandboxSessionLike);\n      await runOwnedSandboxSetup(agent, session as SandboxSessionLike, decoratedSetupSession, {\n        settings,\n        environment,\n        preparedInput: prepared,\n        ...(overrides.ownedSandbox.fileDownloadsMaterialized\n          ? { fileDownloadsMaterialized: true }\n          : {}),\n        ...(overrides.onRuntimeEvent ? { onRuntimeEvent: overrides.onRuntimeEvent } : {}),\n        ...(overrides.turnToolCancellationFence\n          ? {\n              commandRunner: overrides.turnToolCancellationFence.runSandboxCommand.bind(\n                overrides.turnToolCancellationFence,\n              ),\n            }\n          : {}),\n      });\n      if (toolspaceTokenSeedForAgent(agent)) {\n        await overrides.onToolspaceTokenSessionReady?.(agentSession);\n      }\n      await overrides.onGitCredentialSessionReady?.(setupSession);\n    }\n    const runAs = sandboxRunAs(settings);\n    const fileDownloads = sandboxFileDownloadsForAgent(agent);\n    const resourceClient =\n      fileDownloads.length > 0\n        ? withSandboxFileDownloads(ownedClient as SandboxClient, fileDownloads, {\n            ...(overrides.onRuntimeEvent ? { onRuntimeEvent: overrides.onRuntimeEvent } : {}),\n            ...(runAs ? { runAs } : {}),\n            ...(overrides.turnToolCancellationFence\n              ? {\n                  commandRunner: overrides.turnToolCancellationFence.runSandboxCommand.bind(\n                    overrides.turnToolCancellationFence,\n                  ),\n                }\n              : {}),\n          })\n        : (ownedClient as SandboxClient);\n    // TOKEN-BROKER (B1): the per-turn git token seed, forwarded OFF-MANIFEST so the\n    // repository-clone hook seeds it to the box's token file before the clone.\n    const ownedGitTokenSeeds = gitTokenSeedsForAgent(agent);\n    const ownedGitCredentialBindings = gitCredentialBindingsForAgent(agent);\n    const ownedToolspaceTokenSeed = toolspaceTokenSeedForAgent(agent);\n    const ownedRigSetup = rigSetupDescriptorForAgent(agent);\n    const ownedHooks = [\n      // M3: rig setup runs FIRST so any tooling it installs is present for the\n      // credential / repository-clone hooks below. The rig's credential hooks are\n      // unioned into the deployment preparation-profile hooks (deduped by id).\n      ...sandboxRigSetupHooksForAgent(agent),\n      ...unionCredentialHooks(\n        sandboxLifecycleHooksForIds(sandboxLifecycleHookIds(settings)),\n        rigCredentialHooksForAgent(agent),\n      ),\n      ...sandboxToolspaceTokenHooksForAgent(agent),\n      ...toolspaceTokenSessionRegistrationHooks(\n        ownedToolspaceTokenSeed ? overrides.onToolspaceTokenSessionReady : undefined,\n      ),\n      ...sandboxRepositoryCloneHooksForAgent(agent),\n      ...gitCredentialSessionRegistrationHooks(overrides.onGitCredentialSessionReady),\n    ];\n    const ownedHookContext: SandboxLifecycleHookContext = {\n      environment,\n      ...(overrides.onRuntimeEvent ? { onRuntimeEvent: overrides.onRuntimeEvent } : {}),\n      ...(runAs ? { runAs } : {}),\n      ...(ownedGitTokenSeeds ? { gitTokenSeeds: ownedGitTokenSeeds } : {}),\n      ...(ownedGitCredentialBindings ? { gitCredentialBindings: ownedGitCredentialBindings } : {}),\n      ...(ownedToolspaceTokenSeed ? { toolspaceTokenSeed: ownedToolspaceTokenSeed } : {}),\n      ...(toolspaceTokenFile ? { toolspaceTokenFile } : {}),\n      ...(ownedRigSetup ? { rigSetup: ownedRigSetup } : {}),\n    };\n    // Keep both credential seeding and lifecycle decoration as a safety net for\n    // any session the SDK does create/resume during this run. They are inert for\n    // the provided session, which remains the normal ownership-inverted path.\n    const credentialResourceClient = overrides.runCredentialSessionId\n      ? withRunCredentialsClient(\n          resourceClient,\n          overrides.runCredentialSessionId,\n          overrides.onRunCredentialSessionReady,\n        )\n      : resourceClient;\n    const toolspaceResourceClient = toolspaceTokenFile\n      ? withToolspaceTokenClient(credentialResourceClient, toolspaceTokenFile)\n      : credentialResourceClient;\n    const decoratedClient = withSandboxLifecycleHooks(\n      toolspaceResourceClient,\n      ownedHooks,\n      ownedHookContext,\n    );\n    const ownedFilter = composeCallModelInputFilters(\n      [\n        callModelInputFilterForSettings(settings),\n        genesisTitleInputFilter,\n        overrides.callModelInputFilter,\n        // A caller filter may synthesize model input. Re-apply the idempotent\n        // canonical bound at the literal final seam before accounting/provider\n        // serialization so no extension can bypass the policy.\n        boundModelToolOutputsFilterForSettings(settings),\n        contextRobustnessFilterForSettings(settings, {\n          throwOnCompactionNeeded: Boolean(\n            overrides.contextCompactionSignal || overrides.contextCompactionRequested,\n          ),\n          ...(overrides.contextCompactionSignal\n            ? { contextCompactionSignal: overrides.contextCompactionSignal }\n            : {}),\n          ...(overrides.contextCompactionRequested\n            ? { contextCompactionRequested: overrides.contextCompactionRequested }\n            : {}),\n        }),\n      ].filter((f): f is CallModelInputFilter => Boolean(f)),\n    );\n    const ownedRunOptions: Parameters<typeof run>[2] = {\n      stream: true,\n      maxTurns: settings.agentMaxModelCallsPerTurn,\n      callModelInputFilter: ownedFilter,\n      ...(overrides.signal ? { signal: overrides.signal } : {}),\n    };\n    ownedRunOptions.sandbox = {\n      client: decoratedClient,\n      session: agentSession,\n      ...(sessionState ? { sessionState } : {}),\n    } as SandboxRunConfig;\n    return await runScopedRunner(settings).run(agent, prepared.input, ownedRunOptions);\n  }\n\n  const rawClient = overrides.sandboxClient ?? createSandboxClient(settings, environment);\n  const refreshedClient = rawClient\n    ? withManifestRefreshOnResume(\n        rawClient as SandboxClient,\n        (agent as { defaultManifest?: Manifest }).defaultManifest,\n        {\n          ...(overrides.onRuntimeEvent ? { onRuntimeEvent: overrides.onRuntimeEvent } : {}),\n        },\n      )\n    : undefined;\n  const runAs = sandboxRunAs(settings);\n  const fileDownloads = sandboxFileDownloadsForAgent(agent);\n  const resourceClient =\n    refreshedClient && fileDownloads.length > 0\n      ? withSandboxFileDownloads(refreshedClient, fileDownloads, {\n          ...(overrides.onRuntimeEvent ? { onRuntimeEvent: overrides.onRuntimeEvent } : {}),\n          ...(runAs ? { runAs } : {}),\n        })\n      : refreshedClient;\n  const credentialClient =\n    resourceClient && overrides.runCredentialSessionId\n      ? withRunCredentialsClient(\n          resourceClient,\n          overrides.runCredentialSessionId,\n          overrides.onRunCredentialSessionReady,\n        )\n      : resourceClient;\n  const toolspaceClient =\n    credentialClient && toolspaceTokenFile\n      ? withToolspaceTokenClient(credentialClient, toolspaceTokenFile)\n      : credentialClient;\n  // TOKEN-BROKER (B1): the per-turn git token seed, forwarded OFF-MANIFEST so the\n  // repository-clone hook seeds it to the box's token file before the clone.\n  const gitTokenSeeds = gitTokenSeedsForAgent(agent);\n  const gitCredentialBindings = gitCredentialBindingsForAgent(agent);\n  const toolspaceTokenSeed = toolspaceTokenSeedForAgent(agent);\n  const legacyRigSetup = rigSetupDescriptorForAgent(agent);\n  const client = toolspaceClient\n    ? withSandboxLifecycleHooks(\n        toolspaceClient,\n        [\n          // M3: same rig-setup-first ordering + credential-hook union as the owned\n          // path (this legacy create/resume decoration path is byte-for-byte today\n          // for a rig-less turn — the rig hooks are empty then).\n          ...sandboxRigSetupHooksForAgent(agent),\n          ...unionCredentialHooks(\n            sandboxLifecycleHooksForIds(sandboxLifecycleHookIds(settings)),\n            rigCredentialHooksForAgent(agent),\n          ),\n          ...sandboxToolspaceTokenHooksForAgent(agent),\n          ...toolspaceTokenSessionRegistrationHooks(\n            toolspaceTokenSeed ? overrides.onToolspaceTokenSessionReady : undefined,\n          ),\n          ...sandboxRepositoryCloneHooksForAgent(agent),\n          ...gitCredentialSessionRegistrationHooks(overrides.onGitCredentialSessionReady),\n        ],\n        {\n          environment,\n          ...(overrides.onRuntimeEvent ? { onRuntimeEvent: overrides.onRuntimeEvent } : {}),\n          ...(runAs ? { runAs } : {}),\n          ...(gitTokenSeeds ? { gitTokenSeeds } : {}),\n          ...(gitCredentialBindings ? { gitCredentialBindings } : {}),\n          ...(toolspaceTokenSeed ? { toolspaceTokenSeed } : {}),\n          ...(toolspaceTokenFile ? { toolspaceTokenFile } : {}),\n          ...(legacyRigSetup ? { rigSetup: legacyRigSetup } : {}),\n        },\n      )\n    : undefined;\n  const sandboxSessionState = prepared.sandboxSessionState;\n  // Apply the built-in per-call filters (computer-call normalization, optional\n  // provider-id stripping, image/budget guard), then any per-turn filter\n  // (genesis title directive). A callModelInputFilter only shapes the per-call\n  // model input; the SDK persists filtered clones into its session view, while\n  // OpenGeni's durable conversation truth is still reconciled explicitly below.\n  const callModelInputFilter = composeCallModelInputFilters(\n    [\n      callModelInputFilterForSettings(settings),\n      genesisTitleInputFilter,\n      overrides.callModelInputFilter,\n      boundModelToolOutputsFilterForSettings(settings),\n      contextRobustnessFilterForSettings(settings, {\n        throwOnCompactionNeeded: Boolean(\n          overrides.contextCompactionSignal || overrides.contextCompactionRequested,\n        ),\n        ...(overrides.contextCompactionSignal\n          ? { contextCompactionSignal: overrides.contextCompactionSignal }\n          : {}),\n        ...(overrides.contextCompactionRequested\n          ? { contextCompactionRequested: overrides.contextCompactionRequested }\n          : {}),\n      }),\n    ].filter((f): f is CallModelInputFilter => Boolean(f)),\n  );\n  const runOptions: Parameters<typeof run>[2] = {\n    stream: true,\n    maxTurns: settings.agentMaxModelCallsPerTurn,\n    // Built-in per-call guard chain: normalize computer calls, optionally strip\n    // provider ids, trim to the input budget on the client-compaction path, and\n    // raise the proactive compaction signal. This runs for turn-start replay AND\n    // every mid-turn follow-up.\n    callModelInputFilter,\n    ...(overrides.signal ? { signal: overrides.signal } : {}),\n  };\n  if (client) {\n    runOptions.sandbox = {\n      client,\n      ...(sandboxSessionState ? { sessionState: sandboxSessionState } : {}),\n    } as SandboxRunConfig;\n  }\n  return await runScopedRunner(settings).run(agent, prepared.input, runOptions);\n}\n\nfunction appendSandboxFileDownloadFailureNote(\n  input: PreparedAgentInput,\n  failures: SandboxFileDownloadFailure[],\n): void {\n  const note = sandboxFileDownloadFailureNote(failures);\n  if (!note) {\n    return;\n  }\n  if (typeof input.input === \"string\") {\n    input.input = [input.input, \"\", note].join(\"\\n\");\n    return;\n  }\n  if (Array.isArray(input.input)) {\n    input.input = [\n      ...input.input,\n      { type: \"message\", role: \"user\", content: note } as AgentInputItem,\n    ];\n  }\n}\n\n/**\n * A per-run `Runner` whose `modelProvider` is built from THIS turn's settings.\n *\n * The standalone `run()` uses a process-global default Runner whose modelProvider\n * is the lazy global default (whatever the last `configureOpenAI` /\n * `setDefaultModelProvider` installed). The worker runs ~100 activities\n * concurrently in one process, so a concurrently-starting turn for a DIFFERENT\n * workspace can overwrite that global between this turn's `configure` and a\n * per-call `getModel()` during the stream — leaving the global router with no\n * codex provider and throwing CodexSubscriptionUnavailableError on a\n * `codex/<slug>` name re-resolution (the SandboxAgent/Modal path drops the Model\n * instance and re-resolves by NAME). Pinning a run-scoped Runner makes the\n * mutable global irrelevant to correctness: each concurrent turn resolves names\n * against its OWN settings (which carry the codex-subscription provider via\n * withCodexProvider for an active workspace, and the registry providers). The\n * Runner inherits the SDK's default config for everything else, identical to the\n * default runner. setDefaultModelProvider remains only as a boot-time fallback.\n */\nfunction runScopedRunner(settings: Settings): Runner {\n  return new Runner({\n    modelProvider: new MultiProviderModelProvider(settings),\n  });\n}\n\nexport { MaxTurnsExceededError } from \"@openai/agents\";\n\n/**\n * Detects the agents SDK per-segment turn cap. The cap is a pacing valve, not\n * a session failure: callers should end the segment gracefully (idle) so an\n * active goal's continuation loop -- or a follow-up user message -- resumes\n * the work. When the SDK attached the run state at the moment the cap hit,\n * the serialized form is returned so the resumed turn keeps full context.\n */\nexport function maxTurnsExceededRunState(\n  error: unknown,\n): { serializedRunState: string | null } | null {\n  if (!(error instanceof MaxTurnsExceededError)) {\n    return null;\n  }\n  try {\n    return { serializedRunState: error.state ? error.state.toString() : null };\n  } catch {\n    return { serializedRunState: null };\n  }\n}\n\n/**\n * Serialized run state attached to any agents SDK error, when present.\n * Provider failures usually surface as raw API errors without state; callers\n * must treat a null here as \"resume from the previous snapshot\" rather than\n * an error.\n */\nexport function agentsErrorRunState(error: unknown): string | null {\n  if (!(error instanceof AgentsError) || !error.state) {\n    return null;\n  }\n  try {\n    return error.state.toString();\n  } catch {\n    return null;\n  }\n}\n\nexport function withManifestRefreshOnResume(\n  client: SandboxClient,\n  targetManifest: Manifest | undefined,\n  context: Pick<SandboxLifecycleHookContext, \"onRuntimeEvent\"> = {},\n): SandboxClient {\n  if (!targetManifest || !client.resume) {\n    return client;\n  }\n  return {\n    backendId: client.backendId,\n    ...(client.supportsDefaultOptions !== undefined\n      ? { supportsDefaultOptions: client.supportsDefaultOptions }\n      : {}),\n    ...(client.create\n      ? {\n          create: async (...args: any[]) => await (client.create as any)(...args),\n        }\n      : {}),\n    resume: async (state: SandboxSessionState) => {\n      const session = await client.resume!(state);\n      await applyMissingManifestEntries(session, targetManifest, context);\n      return session;\n    },\n    ...(client.delete\n      ? {\n          delete: async (state: SandboxSessionState) => await client.delete!(state),\n        }\n      : {}),\n    ...(client.serializeSessionState\n      ? {\n          serializeSessionState: async (state: SandboxSessionState, options) =>\n            await client.serializeSessionState!(state, options),\n        }\n      : {}),\n    ...(client.canPersistOwnedSessionState\n      ? {\n          canPersistOwnedSessionState: async (state: SandboxSessionState) =>\n            await client.canPersistOwnedSessionState!(state),\n        }\n      : {}),\n    ...(client.canReusePreservedOwnedSession\n      ? {\n          canReusePreservedOwnedSession: async (state: SandboxSessionState) =>\n            await client.canReusePreservedOwnedSession!(state),\n        }\n      : {}),\n    ...(client.deserializeSessionState\n      ? {\n          deserializeSessionState: async (state: Record<string, unknown>) =>\n            await client.deserializeSessionState!(state),\n        }\n      : {}),\n  };\n}\n\n// OWNED-RESUME manifest refresh. This path runs ONLY for SDK-owned sessions\n// (withManifestRefreshOnResume wraps client.resume, which the SDK never calls\n// when handed a live provided session — the ownedSandbox branch bypasses this\n// entirely). Owned applyManifest MERGES env safely with no guard, and this\n// refresh is a FEATURE: it is how a workspace-env edit reaches a long-lived\n// owned local/docker box that rarely recycles. The provided-session env pin\n// (pinProvidedSessionManifestEnvironment below) — NOT this function — is the\n// fix for the SDK's validateNoEnvironmentDelta session-fatal guard. Drift is\n// additionally REPORTED here (key names only, never values) so any env\n// recompute change stays attributable from the DB alone.\nexport async function applyMissingManifestEntries(\n  session: SandboxSessionLike,\n  targetManifest: Manifest,\n  context: Pick<SandboxLifecycleHookContext, \"onRuntimeEvent\"> = {},\n): Promise<void> {\n  const currentManifestValue = (\n    session as {\n      state?: {\n        manifest?:\n          | Manifest\n          | {\n              root?: string;\n              entries?: Record<string, any>;\n              environment?: Record<string, any>;\n            };\n      };\n    }\n  ).state?.manifest;\n  const currentManifest = currentManifestValue ? ensureManifest(currentManifestValue) : undefined;\n  const target = ensureManifest(targetManifest);\n  if (!currentManifest) {\n    if (Object.keys(target.entries).length === 0) {\n      return;\n    }\n    throw new Error(\n      \"Resumed sandbox session cannot apply new manifest entries because current manifest state is unavailable\",\n    );\n  }\n  // Drift detection runs on EVERY resume (even no-op ones): the durable trace\n  // that makes an env-recompute regression attributable from the DB instead of\n  // from rotated worker logs.\n  await reportManifestEnvironmentDrift(currentManifest, target, context);\n  if (!session.applyManifest && !session.materializeEntry) {\n    if (Object.keys(target.entries).length === 0) {\n      return;\n    }\n    throw new Error(\n      \"Resumed sandbox session cannot apply new manifest entries because it does not support applyManifest() or materializeEntry()\",\n    );\n  }\n  if (Object.keys(target.entries).length === 0) {\n    return;\n  }\n  if (currentManifest.root !== target.root) {\n    throw new Error(\"Cannot apply per-turn resources to a sandbox with a different manifest root\");\n  }\n  const entries: Record<string, any> = {};\n  for (const [path, entry] of Object.entries(target.entries)) {\n    const existing = (currentManifest.entries as Record<string, unknown>)[path];\n    if (existing === undefined) {\n      entries[path] = entry;\n      continue;\n    }\n    if (stableJson(existing) !== stableJson(entry)) {\n      throw new Error(`Cannot replace existing sandbox manifest entry: ${path}`);\n    }\n  }\n  const environmentChanged =\n    stableJson(currentManifest.environment) !== stableJson(target.environment);\n  if (environmentChanged && !session.applyManifest) {\n    throw new Error(\n      \"Resumed sandbox session cannot refresh manifest environment because it does not support applyManifest()\",\n    );\n  }\n  if (Object.keys(entries).length === 0 && !environmentChanged) {\n    return;\n  }\n  // Carry path grants through manifest rebuilds: since @openai/agents 0.11.0\n  // they gate local source materialization, and run states saved before the\n  // upgrade have manifests without grants.\n  const extraPathGrants = mergePathGrants(currentManifest.extraPathGrants, target.extraPathGrants);\n  const delta = new Manifest({\n    root: currentManifest.root,\n    entries,\n    environment: target.environment,\n    ...(extraPathGrants.length ? { extraPathGrants } : {}),\n  });\n  if (session.applyManifest) {\n    await session.applyManifest(delta);\n  } else {\n    for (const [path, entry] of Object.entries(entries)) {\n      await session.materializeEntry!({ path, entry });\n    }\n  }\n  (session as { state?: { manifest?: Manifest } }).state!.manifest = new Manifest({\n    root: currentManifest.root,\n    environment: environmentChanged ? target.environment : currentManifest.environment,\n    entries: {\n      ...currentManifest.entries,\n      ...entries,\n    },\n    ...(extraPathGrants.length ? { extraPathGrants } : {}),\n  });\n}\n\n/**\n * Key-level diff of the live box's baked manifest env vs the freshly recomputed\n * target env. Returns null when identical. Key NAMES only — values are secrets\n * and must never leave this function's comparison.\n */\nexport function manifestEnvironmentDrift(\n  current: Manifest,\n  target: Manifest,\n): { added: string[]; removed: string[]; changed: string[] } | null {\n  const currentEnv = (current.environment ?? {}) as Record<string, unknown>;\n  const targetEnv = (target.environment ?? {}) as Record<string, unknown>;\n  const added: string[] = [];\n  const removed: string[] = [];\n  const changed: string[] = [];\n  for (const key of Object.keys(targetEnv)) {\n    if (!(key in currentEnv)) {\n      added.push(key);\n    } else if (stableJson(currentEnv[key]) !== stableJson(targetEnv[key])) {\n      changed.push(key);\n    }\n  }\n  for (const key of Object.keys(currentEnv)) {\n    if (!(key in targetEnv)) {\n      removed.push(key);\n    }\n  }\n  if (added.length === 0 && removed.length === 0 && changed.length === 0) {\n    return null;\n  }\n  return {\n    added: added.sort(),\n    removed: removed.sort(),\n    changed: changed.sort(),\n  };\n}\n\nasync function reportManifestEnvironmentDrift(\n  current: Manifest,\n  target: Manifest,\n  context: Pick<SandboxLifecycleHookContext, \"onRuntimeEvent\">,\n): Promise<ReturnType<typeof manifestEnvironmentDrift>> {\n  const drift = manifestEnvironmentDrift(current, target);\n  if (!drift) {\n    return null;\n  }\n  // Reporting must never break a resume: the drift itself is benign under the\n  // env pin (the box keeps running on its baked env); only the SIGNAL matters.\n  try {\n    await context.onRuntimeEvent?.({\n      type: \"sandbox.env.drift\",\n      payload: drift,\n    });\n  } catch {\n    // Swallow: a failed emit must not fail the turn.\n  }\n  return drift;\n}\n\n/**\n * ENV PIN for provided sessions (the ownership-inversion turn path). The SDK\n * validates the FULL target manifest environment against a live provided\n * session's baked env BEFORE reducing to its entry-only delta\n * (validateNoEnvironmentDelta -> session-fatal UserError on ANY difference).\n * So a turn resuming an existing box must declare the box's OWN env,\n * byte-identical — never the fresh recompute. This replaces the agent's\n * defaultManifest environment with the baked one and reports the drift (key\n * names only) instead of letting it kill the session. Fresh env lands at the\n * next cold-create; rotating values ride OFF-manifest (TOKEN-BROKER B1/B2).\n */\nexport async function pinProvidedSessionManifestEnvironment(\n  agent: Agent<any, any>,\n  session: SandboxSessionLike,\n  context: Pick<SandboxLifecycleHookContext, \"onRuntimeEvent\"> = {},\n): Promise<void> {\n  const holder = agent as { defaultManifest?: Manifest };\n  const currentManifestValue = (\n    session as {\n      state?: {\n        manifest?:\n          | Manifest\n          | {\n              root?: string;\n              entries?: Record<string, any>;\n              environment?: Record<string, any>;\n            };\n      };\n    }\n  ).state?.manifest;\n  if (!holder.defaultManifest || !currentManifestValue) {\n    return;\n  }\n  const current = ensureManifest(currentManifestValue);\n  const target = ensureManifest(holder.defaultManifest);\n  const drift = await reportManifestEnvironmentDrift(current, target, context);\n  if (!drift) {\n    return;\n  }\n  holder.defaultManifest = new Manifest({\n    ...(target.root ? { root: target.root } : {}),\n    entries: target.entries,\n    environment: current.environment,\n    ...(target.extraPathGrants?.length ? { extraPathGrants: target.extraPathGrants } : {}),\n  });\n}\n\n/**\n * The one-truth owned-path platform setup: the manifest-env pin (align the turn's\n * manifest to the live box's baked env + report drift, NEVER die on it) plus the\n * beforeAgentStart hooks (repository clone with B1 token/askpass seed, toolspace\n * token seed, azure-cli-login) and signed-URL file materialization — all executed\n * DIRECTLY against the pinned, UN-proxied established box (the SDK never calls\n * client.create/resume for a provided session, so these decorations would never\n * fire on their own).\n *\n * Extracted verbatim from `runStream`'s owned branch so both the EAGER path\n * (runStream, before the run starts) and the LAZY path (the worker's first-op\n * provisioner, after the box is established) run the IDENTICAL setup. A pure\n * refactor for the eager path: same order, same gates, same idempotency\n * (clone skips a materialized tree, token seed overwrites — the desired per-turn\n * refresh, az login is idempotent). The connected-machine (selfhosted) branch\n * keeps platform setup OFF the user's real box and seeds ONLY the toolspace token.\n *\n * `gitTokenSeedsOverride` lets the lazy provisioner pass its own freshly-minted\n * run-scoped provider tokens (minted at establish time, not turn start);\n * unset ⇒ read the seeds off the agent exactly as the eager path does.\n */\nexport async function runOwnedSandboxSetup(\n  agent: Agent<any, any>,\n  session: SandboxSessionLike,\n  setupSession: SandboxSessionLike,\n  opts: {\n    settings: Settings;\n    environment: Record<string, string>;\n    preparedInput?: PreparedAgentInput;\n    fileDownloadsMaterialized?: boolean;\n    onRuntimeEvent?: SandboxLifecycleHookContext[\"onRuntimeEvent\"];\n    gitTokenSeedsOverride?: GitTokenSeeds;\n    gitTokenSeedOverride?: string;\n    gitCredentialBindingsOverride?: GitCredentialBindingSeed[];\n    toolspaceTokenSeedOverride?: string;\n    commandRunner?: SandboxLifecycleCommandRunner;\n  },\n): Promise<void> {\n  const { settings, environment } = opts;\n  // ENV PIN (provided sessions): the SDK validates the FULL recomputed manifest\n  // env against the live box's baked env before applying its entry-only delta\n  // (validateNoEnvironmentDelta — session-fatal on ANY drift; killed a 4-day\n  // prod manager session 2026-07-06). Align the turn's manifest to the box's\n  // own env and REPORT the drift instead of dying on it.\n  await pinProvidedSessionManifestEnvironment(agent, session, {\n    ...(opts.onRuntimeEvent ? { onRuntimeEvent: opts.onRuntimeEvent } : {}),\n  });\n  const runAs = sandboxRunAs(settings);\n  const fileDownloads = sandboxFileDownloadsForAgent(agent);\n  // TOKEN-BROKER (B1): per-turn provider token seeds, forwarded OFF-MANIFEST so\n  // the repository-clone hook writes provider token files before the clone. The\n  // lazy provisioner overrides them with its own establish-time mint.\n  const ownedGitTokenSeeds = {\n    ...(gitTokenSeedsForAgent(agent) ?? {}),\n    ...(opts.gitTokenSeedOverride ? { github: opts.gitTokenSeedOverride } : {}),\n    ...(opts.gitTokenSeedsOverride ?? {}),\n  } satisfies GitTokenSeeds;\n  const ownedGitCredentialBindings =\n    opts.gitCredentialBindingsOverride ?? gitCredentialBindingsForAgent(agent);\n  const ownedToolspaceTokenSeed =\n    opts.toolspaceTokenSeedOverride ?? toolspaceTokenSeedForAgent(agent);\n  const ownedToolspaceTokenFile = toolspaceTokenFileForAgent(agent, environment);\n  const ownedRigSetup = rigSetupDescriptorForAgent(agent);\n  const ownedHooks = [\n    // M3: rig setup runs FIRST so any tooling it installs is present for the\n    // credential / repository-clone hooks below; the rig's credential hooks are\n    // unioned into the deployment preparation-profile hooks (deduped by id).\n    // This is the LIVE owned-path execution (the provided session skips the\n    // client create/resume decoration), so the rig hooks MUST be here or a\n    // rig-bound turn would start without ever running the frozen setup script.\n    ...sandboxRigSetupHooksForAgent(agent),\n    ...unionCredentialHooks(\n      sandboxLifecycleHooksForIds(sandboxLifecycleHookIds(settings)),\n      rigCredentialHooksForAgent(agent),\n    ),\n    ...sandboxToolspaceTokenHooksForAgent(agent),\n    ...sandboxRepositoryCloneHooksForAgent(agent),\n  ];\n  const ownedHookContext: SandboxLifecycleHookContext = {\n    environment,\n    ...(opts.onRuntimeEvent ? { onRuntimeEvent: opts.onRuntimeEvent } : {}),\n    ...(runAs ? { runAs } : {}),\n    ...(Object.keys(ownedGitTokenSeeds).length > 0 ? { gitTokenSeeds: ownedGitTokenSeeds } : {}),\n    ...(ownedGitCredentialBindings ? { gitCredentialBindings: ownedGitCredentialBindings } : {}),\n    ...(ownedToolspaceTokenSeed ? { toolspaceTokenSeed: ownedToolspaceTokenSeed } : {}),\n    ...(ownedToolspaceTokenFile ? { toolspaceTokenFile: ownedToolspaceTokenFile } : {}),\n    ...(ownedRigSetup ? { rigSetup: ownedRigSetup } : {}),\n    ...(opts.commandRunner ? { commandRunner: opts.commandRunner } : {}),\n  };\n  // OWNED-PATH HOOKS: run the beforeAgentStart hooks directly against the provided\n  // box, once per turn, BEFORE the run starts (repository-clone hook seeds the B1\n  // askpass + token file; azure-cli-login on lease-owned boxes). Re-running on a\n  // warm box is safe by construction (clone skips a materialized tree, token seed\n  // overwrites the file, az login is idempotent). EXCEPT on a connected machine\n  // (effective backend \"selfhosted\"): the box is the user's REAL computer — the\n  // platform must not run setup against it (clone hooks are already empty there;\n  // this keeps az login off it too).\n  if (agentActiveSandboxBackend.get(agent) !== \"selfhosted\") {\n    await runBeforeAgentStartHooks(setupSession, ownedHooks, ownedHookContext);\n    // FILE RESOURCES: withSandboxFileDownloads has the IDENTICAL provided-session\n    // blind spot (it too wraps only create/resume), so signed-URL file\n    // materialization must also run directly against the pinned box. The download\n    // command is idempotent (skips an existing file) and atomic (tmp + rename).\n    if (fileDownloads.length > 0 && !opts.fileDownloadsMaterialized) {\n      const materialized = await materializeSandboxFileDownloads(setupSession, fileDownloads, {\n        ...(opts.onRuntimeEvent ? { onRuntimeEvent: opts.onRuntimeEvent } : {}),\n        ...(runAs ? { runAs } : {}),\n        ...(opts.commandRunner ? { commandRunner: opts.commandRunner } : {}),\n      });\n      if (opts.preparedInput) {\n        appendSandboxFileDownloadFailureNote(opts.preparedInput, materialized.failures);\n      }\n    }\n  } else {\n    // SELFHOSTED TOOLSPACE (parity): the platform setup hooks and file\n    // materialization stay OFF the user's real machine — but the toolspace token\n    // seed is the ONE piece of per-turn material that must reach it (a scoped,\n    // own-session-bound token written to $OPENGENI_TOOLSPACE_TOKEN_FILE over the\n    // same off-manifest exec channel the clone-seed uses; the machine's only path\n    // to programmatic tool calling). Seed it (only) here.\n    const toolspaceHooks = sandboxToolspaceTokenHooksForAgent(agent);\n    if (toolspaceHooks.length > 0) {\n      await runBeforeAgentStartHooks(setupSession, toolspaceHooks, ownedHookContext);\n    }\n  }\n}\n\nfunction mergePathGrants(\n  current: Manifest[\"extraPathGrants\"] | undefined,\n  target: Manifest[\"extraPathGrants\"] | undefined,\n): Manifest[\"extraPathGrants\"] {\n  const merged = new Map<string, Manifest[\"extraPathGrants\"][number]>();\n  for (const grant of [...(current ?? []), ...(target ?? [])]) {\n    merged.set(grant.path, grant);\n  }\n  return [...merged.values()];\n}\n\nexport function withSandboxFileDownloads(\n  client: SandboxClient,\n  downloads: SandboxFileDownload[],\n  context: Pick<SandboxLifecycleHookContext, \"onRuntimeEvent\" | \"runAs\" | \"commandRunner\"> = {},\n): SandboxClient {\n  const normalizedDownloads = normalizeSandboxFileDownloads(downloads);\n  if (normalizedDownloads.length === 0) {\n    return client;\n  }\n  const completed = new WeakSet<object>();\n  const wrapSession = async <T extends SandboxSessionLike>(session: T): Promise<T> => {\n    if (typeof session === \"object\" && session !== null && !completed.has(session)) {\n      await materializeSandboxFileDownloads(session, normalizedDownloads, context);\n      completed.add(session);\n    }\n    return session;\n  };\n  return {\n    backendId: client.backendId,\n    ...(client.supportsDefaultOptions !== undefined\n      ? { supportsDefaultOptions: client.supportsDefaultOptions }\n      : {}),\n    ...(client.create\n      ? {\n          create: async (...args: any[]) =>\n            await wrapSession(await (client.create as any)(...args)),\n        }\n      : {}),\n    ...(client.resume\n      ? {\n          resume: async (state: SandboxSessionState) =>\n            await wrapSession(await client.resume!(state)),\n        }\n      : {}),\n    ...(client.delete\n      ? {\n          delete: async (state: SandboxSessionState) => await client.delete!(state),\n        }\n      : {}),\n    ...(client.serializeSessionState\n      ? {\n          serializeSessionState: async (state: SandboxSessionState, options) =>\n            await client.serializeSessionState!(state, options),\n        }\n      : {}),\n    ...(client.canPersistOwnedSessionState\n      ? {\n          canPersistOwnedSessionState: async (state: SandboxSessionState) =>\n            await client.canPersistOwnedSessionState!(state),\n        }\n      : {}),\n    ...(client.canReusePreservedOwnedSession\n      ? {\n          canReusePreservedOwnedSession: async (state: SandboxSessionState) =>\n            await client.canReusePreservedOwnedSession!(state),\n        }\n      : {}),\n    ...(client.deserializeSessionState\n      ? {\n          deserializeSessionState: async (state: Record<string, unknown>) =>\n            await client.deserializeSessionState!(state),\n        }\n      : {}),\n  };\n}\n\nexport async function materializeSandboxFileDownloads(\n  session: SandboxSessionLike,\n  downloads: SandboxFileDownload[],\n  context: Pick<SandboxLifecycleHookContext, \"onRuntimeEvent\" | \"runAs\" | \"commandRunner\"> = {},\n): Promise<SandboxFileDownloadMaterializationResult> {\n  const normalizedDownloads = normalizeSandboxFileDownloads(downloads);\n  if (normalizedDownloads.length === 0) {\n    return { failures: [] };\n  }\n  const failures: SandboxFileDownloadFailure[] = [];\n  for (const download of normalizedDownloads) {\n    const targetPath = sandboxDownloadTargetPath(download);\n    const payload = {\n      fileId: download.fileId,\n      path: targetPath,\n      sizeBytes: download.sizeBytes ?? null,\n      expiresAt: download.expiresAt ? new Date(download.expiresAt).toISOString() : null,\n    };\n    await context.onRuntimeEvent?.({\n      type: \"sandbox.operation.started\",\n      payload: { name: \"file-resource-download\", ...payload },\n    });\n    if (!session.exec && !session.execCommand) {\n      const failure = sandboxFileDownloadFailure(\n        download,\n        targetPath,\n        \"Sandbox file download materialization requires command execution support\",\n      );\n      failures.push(failure);\n      await context.onRuntimeEvent?.({\n        type: \"sandbox.operation.failed\",\n        payload: {\n          name: \"file-resource-download\",\n          ...payload,\n          error: failure.reason,\n        },\n      });\n      continue;\n    }\n    let result: unknown;\n    try {\n      result = await runSandboxLifecycleCommand(\n        session,\n        {\n          cmd: sandboxFileDownloadCommand(download, targetPath),\n          workdir: \"/workspace\",\n          ...(context.runAs ? { runAs: context.runAs } : {}),\n          yieldTimeMs: SANDBOX_LIFECYCLE_COMMAND_TIMEOUT_MS,\n          maxOutputTokens: 20_000,\n        },\n        context.commandRunner,\n      );\n      assertSandboxCommandSucceeded(result, `Sandbox file resource download ${download.fileId}`);\n      await context.onRuntimeEvent?.({\n        type: \"sandbox.operation.completed\",\n        payload: { name: \"file-resource-download\", ...payload },\n      });\n    } catch (error) {\n      if (error instanceof TurnSandboxCommandCancelledError) throw error;\n      const failure = sandboxFileDownloadFailure(download, targetPath, error, result);\n      failures.push(failure);\n      await context.onRuntimeEvent?.({\n        type: \"sandbox.operation.failed\",\n        payload: {\n          name: \"file-resource-download\",\n          ...payload,\n          error: failure.reason,\n          ...(failure.exitCode !== undefined ? { exitCode: failure.exitCode } : {}),\n          ...(failure.output ? { output: failure.output } : {}),\n        },\n      });\n    }\n  }\n  return { failures };\n}\n\nfunction sandboxFileDownloadFailure(\n  download: SandboxFileDownload,\n  targetPath: string,\n  error: unknown,\n  result?: unknown,\n): SandboxFileDownloadFailure {\n  const exitCode = sandboxCommandExitCode(result);\n  const output = sandboxCommandOutput(result);\n  return {\n    fileId: download.fileId,\n    filename: download.filename,\n    path: targetPath,\n    reason: error instanceof Error ? error.message : String(error),\n    ...(exitCode !== null ? { exitCode } : {}),\n    ...(output ? { output } : {}),\n  };\n}\n\nexport function sandboxFileDownloadFailureNote(failures: SandboxFileDownloadFailure[]): string {\n  if (failures.length === 0) {\n    return \"\";\n  }\n  return [\n    \"The following attached files could not be loaded into the sandbox and are unavailable this turn:\",\n    ...failures.map((failure) => `- ${failure.filename} (${failure.reason})`),\n    \"Continue without them or tell the user.\",\n  ].join(\"\\n\");\n}\n\nexport function sandboxFileDownloadsForAgent(agent: unknown): SandboxFileDownload[] {\n  return typeof agent === \"object\" && agent !== null\n    ? [...(agentFileDownloads.get(agent) ?? [])]\n    : [];\n}\n\nfunction ensureManifest(\n  manifest:\n    | Manifest\n    | {\n        root?: string;\n        entries?: Record<string, any>;\n        environment?: Record<string, any>;\n        extraPathGrants?: any[];\n      },\n): Manifest {\n  if (\n    manifest instanceof Manifest &&\n    typeof manifest.mountTargetsForMaterialization === \"function\"\n  ) {\n    return manifest;\n  }\n  return new Manifest({\n    ...(manifest.root ? { root: manifest.root } : {}),\n    entries: manifest.entries ?? {},\n    environment: manifest.environment ?? {},\n    ...(manifest.extraPathGrants?.length ? { extraPathGrants: manifest.extraPathGrants } : {}),\n  });\n}\n\nfunction base64DecodedByteLength(value: string): number {\n  const padding = value.endsWith(\"==\") ? 2 : value.endsWith(\"=\") ? 1 : 0;\n  return Math.max(0, Math.floor((value.length * 3) / 4) - padding);\n}\n\n/** Determine image byte length without allocating another binary/base64 copy. */\nfunction imageDataByteLength(data: unknown): number | null {\n  if (ArrayBuffer.isView(data)) return data.byteLength;\n  if (data instanceof ArrayBuffer) return data.byteLength;\n  if (Array.isArray(data)) {\n    return data.every((value) => typeof value === \"number\") ? data.length : null;\n  }\n  if (!data || typeof data !== \"object\") return null;\n  const record = data as Record<string, unknown>;\n  if (record.type === \"Buffer\" && Array.isArray(record.data)) {\n    return record.data.every((value) => typeof value === \"number\") ? record.data.length : null;\n  }\n  const keys = Object.keys(record);\n  return keys.length > 0 &&\n    keys.every((key) => /^\\d+$/.test(key) && typeof record[key] === \"number\")\n    ? keys.length\n    : null;\n}\n\n/**\n * Convert one image-shaped tool result into a content-free audit fact. This is\n * intentionally different from model history: the model keeps its structured\n * image item, while `session_events` never becomes an implicit image blob store.\n */\nfunction toolOutputMediaPreview(value: unknown): SessionEventMediaPreview | null {\n  if (typeof value === \"string\") {\n    return sessionEventMediaPreviewFromDataUrl(value);\n  }\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return null;\n  const record = value as Record<string, unknown>;\n  if (record.type === \"input_image\") {\n    const source = record.image ?? record.image_url ?? record.imageUrl;\n    const url =\n      typeof source === \"string\"\n        ? source\n        : source && typeof source === \"object\"\n          ? (source as Record<string, unknown>).url\n          : null;\n    if (typeof url !== \"string\" || url.length === 0) return null;\n    return sessionEventMediaPreviewFromDataUrl(url) ?? sessionEventMediaPreview(\"image/*\", null);\n  }\n  if (record.type !== \"image\" || !record.image || typeof record.image !== \"object\") return null;\n  const image = record.image as Record<string, unknown>;\n  const mediaType =\n    typeof image.mediaType === \"string\" && image.mediaType.length > 0\n      ? image.mediaType\n      : \"image/png\";\n  if (typeof image.url === \"string\" && image.url.length > 0) {\n    return (\n      sessionEventMediaPreviewFromDataUrl(image.url) ?? sessionEventMediaPreview(mediaType, null)\n    );\n  }\n  if (typeof image.data === \"string\") {\n    return (\n      sessionEventMediaPreviewFromDataUrl(image.data) ??\n      sessionEventMediaPreview(mediaType, base64DecodedByteLength(image.data))\n    );\n  }\n  const byteLength = imageDataByteLength(image.data);\n  return byteLength === null ? null : sessionEventMediaPreview(mediaType, byteLength);\n}\n\n/**\n * Normalize a tool-call output for the lossy `agent.toolCall.output` audit event.\n * Inline image bytes/data URLs become a compact `media_preview` with exact byte\n * length where knowable and `fullOutputAvailable:false`. The model-facing output\n * is not changed here, and mixed arrays retain their non-image text/error facts.\n */\nexport function normalizeToolOutputForEvent(output: unknown): unknown {\n  const single = toolOutputMediaPreview(output);\n  if (single !== null) {\n    return single;\n  }\n  if (Array.isArray(output)) {\n    const normalized = output.map((el) => toolOutputMediaPreview(el) ?? el);\n    if (normalized.length === 1 && normalized[0]?.type === \"media_preview\") {\n      return normalized[0];\n    }\n    return normalized;\n  }\n  return output;\n}\n\nexport function normalizeSdkEvent(event: RunStreamEvent): NormalizedRuntimeEvent[] {\n  const out: NormalizedRuntimeEvent[] = [];\n  if (event.type === \"raw_model_stream_event\") {\n    const data = (event as any).data;\n    if (data?.type === \"output_text_delta\" && typeof data.delta === \"string\") {\n      out.push({ type: \"agent.message.delta\", payload: { text: data.delta } });\n      return out;\n    }\n    if (data?.type === \"response_done\") {\n      return out;\n    }\n  }\n  if (isOpenAIResponsesRawModelStreamEvent(event)) {\n    const raw = (event as any).data?.event;\n    if (raw?.type === \"response.reasoning_summary_text.delta\" && typeof raw.delta === \"string\") {\n      out.push({ type: \"agent.reasoning.delta\", payload: { text: raw.delta } });\n    }\n    return out;\n  }\n  if (event.type === \"agent_updated_stream_event\") {\n    out.push({\n      type: \"agent.updated\",\n      payload: { agent: (event as any).agent?.name ?? null },\n    });\n    return out;\n  }\n  if (event.type !== \"run_item_stream_event\") {\n    return out;\n  }\n  const item = (event as any).item;\n  if (!item) {\n    return out;\n  }\n  if (item.type === \"tool_call_item\") {\n    const raw = item.rawItem ?? {};\n    out.push({\n      type: \"agent.toolCall.created\",\n      payload: {\n        id: raw.callId ?? raw.id ?? item.id ?? null,\n        name: raw.name ?? raw.type ?? \"tool\",\n        arguments: raw.arguments ?? raw.input ?? null,\n        raw,\n      },\n    });\n  } else if (item.type === \"tool_call_output_item\") {\n    out.push({\n      type: \"agent.toolCall.output\",\n      payload: {\n        id: item.rawItem?.callId ?? item.id ?? null,\n        // Inline media becomes a content-free audit fact. Model history keeps\n        // the provider's real structured image output on its separate path.\n        output: normalizeToolOutputForEvent(item.output),\n      },\n    });\n  } else if (item.type === \"tool_search_call_item\") {\n    // Progressive connector disclosure: surface the model's tool search as a\n    // regular tool-call event so the session stream shows the step (parity with\n    // the Codex CLI, which renders its searches). Arguments may be an object\n    // (the live wire shape) or a string.\n    const raw = item.rawItem ?? {};\n    out.push({\n      type: \"agent.toolCall.created\",\n      payload: {\n        id: raw.call_id ?? raw.callId ?? raw.id ?? item.id ?? null,\n        name: \"tool_search\",\n        arguments: raw.arguments ?? null,\n        raw,\n      },\n    });\n  } else if (item.type === \"tool_search_output_item\") {\n    const raw = item.rawItem ?? {};\n    const disclosed = Array.isArray(raw.tools)\n      ? raw.tools\n          .map((tool: { name?: unknown }) => (typeof tool?.name === \"string\" ? tool.name : \"\"))\n          .filter(Boolean)\n      : [];\n    out.push({\n      type: \"agent.toolCall.output\",\n      payload: {\n        id: raw.call_id ?? raw.callId ?? item.id ?? null,\n        output: {\n          type: \"text\",\n          text:\n            disclosed.length > 0\n              ? `Disclosed tools: ${disclosed.join(\", \")}`\n              : \"No matching tools found.\",\n        },\n      },\n    });\n  } else if (item.type === \"message_output_item\") {\n    const text = typeof item.text === \"string\" ? item.text : undefined;\n    if (text) {\n      out.push({ type: \"agent.message.completed\", payload: { text } });\n    }\n  }\n  return out;\n}\n\nexport function modelResponseUsageFromSdkEvent(event: RunStreamEvent): ModelResponseUsage | null {\n  const response = modelResponseFromSdkEvent(event);\n  return modelResponseUsageFromResponse(response);\n}\n\n/** Normalize usage from either a Responses or Chat Completions result. */\nexport function modelResponseUsageFromResponse(response: unknown): ModelResponseUsage | null {\n  const usage = usageFromResponse(response);\n  if (!usage) {\n    return null;\n  }\n  const responseId =\n    typeof (response as { id?: unknown } | null)?.id === \"string\"\n      ? (response as { id: string }).id\n      : typeof (response as { responseId?: unknown } | null)?.responseId === \"string\"\n        ? (response as { responseId: string }).responseId\n        : undefined;\n  return {\n    ...(responseId ? { responseId } : {}),\n    usage,\n  };\n}\n\nfunction modelResponseFromSdkEvent(event: RunStreamEvent): any {\n  if (event.type === \"raw_model_stream_event\") {\n    const data = (event as any).data;\n    if (data?.type === \"response_done\") {\n      return data.response;\n    }\n  }\n  if (isOpenAIResponsesRawModelStreamEvent(event)) {\n    const raw = (event as any).data?.event;\n    if (raw?.type === \"response.completed\") {\n      return raw.response;\n    }\n  }\n  return null;\n}\n\nfunction usageFromResponse(response: unknown): ModelResponseUsage[\"usage\"] | null {\n  const raw = (response as { usage?: unknown } | null)?.usage;\n  if (!raw || typeof raw !== \"object\") {\n    return null;\n  }\n  const record = raw as Record<string, unknown>;\n  const usage = {\n    ...numberProp(\n      record,\n      \"inputTokens\",\n      \"inputTokens\",\n      \"input_tokens\",\n      \"promptTokens\",\n      \"prompt_tokens\",\n    ),\n    ...numberProp(\n      record,\n      \"outputTokens\",\n      \"outputTokens\",\n      \"output_tokens\",\n      \"completionTokens\",\n      \"completion_tokens\",\n    ),\n    ...numberProp(record, \"totalTokens\", \"totalTokens\", \"total_tokens\"),\n    ...inputTokenDetailsProp(record),\n    ...outputTokenDetailsProp(record),\n    ...requestUsageEntriesProp(record),\n  };\n  return Object.keys(usage).length > 0 ? usage : null;\n}\n\nfunction numberProp(\n  raw: Record<string, unknown>,\n  outputKey: \"inputTokens\" | \"outputTokens\" | \"totalTokens\",\n  ...keys: string[]\n): Partial<ModelResponseUsage[\"usage\"]> {\n  const value = keys.map((key) => raw[key]).find((candidate) => candidate !== undefined);\n  // Preserve numeric provider values verbatim here, including malformed ones.\n  // The shared usage normalizer is the single bounded validation boundary and\n  // needs to see NaN/infinite/fractional/oversized values so it can emit safe\n  // field-path diagnostics rather than silently erasing the evidence.\n  return typeof value === \"number\" ? { [outputKey]: value } : {};\n}\n\nfunction inputTokenDetailsProp(raw: Record<string, unknown>): Partial<ModelResponseUsage[\"usage\"]> {\n  const details =\n    raw.inputTokensDetails ??\n    raw.input_tokens_details ??\n    raw.promptTokensDetails ??\n    raw.prompt_tokens_details;\n  if (details === undefined || details === null) {\n    return {};\n  }\n  return {\n    inputTokensDetails: details as Record<string, number> | Array<Record<string, number>>,\n  };\n}\n\nfunction outputTokenDetailsProp(\n  raw: Record<string, unknown>,\n): Partial<ModelResponseUsage[\"usage\"]> {\n  const details = raw.outputTokensDetails ?? raw.output_tokens_details;\n  const normalized = details ?? raw.completionTokensDetails ?? raw.completion_tokens_details;\n  if (normalized === undefined || normalized === null) {\n    return {};\n  }\n  return {\n    outputTokensDetails: normalized as Record<string, number> | Array<Record<string, number>>,\n  };\n}\n\nfunction requestUsageEntriesProp(\n  raw: Record<string, unknown>,\n): Partial<ModelResponseUsage[\"usage\"]> {\n  const entries = raw.requestUsageEntries ?? raw.request_usage_entries;\n  if (entries === undefined || entries === null) {\n    return {};\n  }\n  return {\n    // The normalizer validates every entry and all supported field aliases.\n    // Preserve the SDK objects rather than rebuilding them and accidentally\n    // dropping provider detail fields such as cache_write_tokens.\n    requestUsageEntries: entries as NonNullable<ModelResponseUsage[\"usage\"][\"requestUsageEntries\"]>,\n  };\n}\n\nexport function serializeApprovals(interruptions: unknown[]): unknown[] {\n  return interruptions\n    .filter((item) => interruptionToolName(item) !== HUMAN_INPUT_TOOL_NAME)\n    .map((item: any) => {\n      if (typeof item?.toJSON === \"function\") {\n        return item.toJSON();\n      }\n      return {\n        id: approvalIdentifier(item) ?? \"approval\",\n        name: item?.name ?? item?.rawItem?.name ?? \"tool\",\n        arguments: item?.arguments ?? item?.rawItem?.arguments ?? null,\n        raw: item,\n      };\n    });\n}\n\nexport function serializeHumanInputRequests(\n  interruptions: unknown[],\n): SerializedHumanInputInterruption[] {\n  return interruptions\n    .filter((item) => interruptionToolName(item) === HUMAN_INPUT_TOOL_NAME)\n    .map((item: any) => {\n      const rawArguments = item?.arguments ?? item?.rawItem?.arguments;\n      let parsedArguments: unknown = rawArguments;\n      if (typeof rawArguments === \"string\") {\n        try {\n          parsedArguments = JSON.parse(rawArguments);\n        } catch {\n          throw new Error(\"Human-input interruption contains invalid JSON arguments\");\n        }\n      }\n      const toolCallId = approvalIdentifier(item);\n      if (!toolCallId) {\n        throw new Error(\"Human-input interruption is missing a stable tool-call identity\");\n      }\n      return {\n        toolCallId,\n        input: RequestHumanInputToolInput.parse(parsedArguments),\n      };\n    });\n}\n\nexport function buildManifest(\n  settings: Settings,\n  resources: ResourceRef[],\n  environment = collectSandboxEnvironment(settings),\n  fileResourceDownloads: SandboxFileDownload[] = [],\n): Manifest {\n  assertUniqueResourceMountPaths(resources);\n  const entries: Record<string, any> = {};\n  const downloadsByFileId = new Map(\n    normalizeSandboxFileDownloads(fileResourceDownloads).map((download) => [\n      download.fileId,\n      download,\n    ]),\n  );\n  for (const resource of resources) {\n    if (resource.kind === \"repository\") {\n      const url = new URL(resource.uri);\n      const host = url.host.toLowerCase();\n      const repo = url.pathname.replace(/^\\/+|\\/+$/g, \"\").replace(/\\.git$/, \"\");\n      const mountPath = resourceMountPath(resource);\n      if (repositoryUsesSandboxClone(settings, resource)) {\n        entries[mountPath] = dir();\n        continue;\n      }\n      entries[mountPath] = gitRepo({\n        host,\n        repo,\n        ref: resource.ref,\n        ...(resource.subpath ? { subpath: normalizeRepositorySubpath(resource.subpath) } : {}),\n      });\n      continue;\n    }\n    if (resource.kind === \"file\") {\n      const mountPath = resourceMountPath(resource);\n      const download = downloadsByFileId.get(resource.fileId);\n      entries[mountPath] = download\n        ? sandboxDownloadDirectory(download, mountPath)\n        : objectStorageFileMount(settings, `files/${resource.fileId}/original`);\n    }\n  }\n  // No extraPathGrants here: remote sandbox clients (Modal) reject manifests\n  // that carry them at create/apply time, which broke every Modal session.\n  // The lazy bundled-skills source no longer needs a grant because\n  // bundledSkillsDir() stages the skills inside the process working directory\n  // whenever the packaged copy lives outside it.\n  return new Manifest({\n    root: \"/workspace\",\n    entries,\n    environment,\n  });\n}\n\nexport function repositoryWorkspaceSkillPathsOption(resources: readonly ResourceRef[]): {\n  workspaceSkillPaths?: readonly WorkspaceSkillSearchPath[];\n} {\n  const repositories = resources.filter(\n    (resource): resource is Extract<ResourceRef, { kind: \"repository\" }> =>\n      resource.kind === \"repository\",\n  );\n  if (repositories.length === 0) return {};\n\n  const paths = new Map<string, WorkspaceSkillSearchPath>();\n  const add = (path: string, source: string): void => {\n    if (!paths.has(path)) paths.set(path, { path, source });\n  };\n  // A Connected Machine maps /workspace to its configured working directory,\n  // which may itself be the selected repository. Managed sandboxes normally use\n  // the repository mount paths below. Checking both keeps the rule portable.\n  add(\".agents/skills\", \"workspace .agents/skills\");\n  add(\".claude/skills\", \"workspace .claude/skills\");\n  for (const repository of repositories) {\n    const mountPath = resourceMountPath(repository);\n    add(`${mountPath}/.agents/skills`, `${mountPath}/.agents/skills`);\n    add(`${mountPath}/.claude/skills`, `${mountPath}/.claude/skills`);\n  }\n  return { workspaceSkillPaths: [...paths.values()] };\n}\n\nfunction sandboxDownloadDirectory(download: SandboxFileDownload, mountPath: string): any {\n  if (download.mountPath !== mountPath) {\n    throw new Error(\n      `File download materialization path mismatch for ${download.fileId}: expected ${mountPath}, got ${download.mountPath}`,\n    );\n  }\n  assertSafeSandboxFilename(download.filename, download.fileId);\n  if (download.content) {\n    return dir({\n      children: {\n        [download.filename]: file({ content: download.content }),\n      },\n    });\n  }\n  return dir();\n}\n\nfunction objectStorageFileMount(settings: Settings, prefix: string): any {\n  // Descriptor-driven: a nativeBucketMount backend (modal) mounts via the\n  // provider's own bucket-mount strategy and cannot mount Azure Blob entries —\n  // it needs pre-signed downloads instead. Reading the descriptor (not a\n  // hard-coded backend name) keeps this honest as providers are added.\n  const nativeBucketMount = CAPABILITY_DESCRIPTORS[settings.sandboxBackend].nativeBucketMount;\n  if (settings.objectStorageBackend === \"azure-blob\") {\n    if (nativeBucketMount) {\n      throw new Error(\n        \"Modal sandbox Azure Blob file resources require pre-signed download materialization because the current OpenAI Agents SDK Modal client does not support Azure Blob mount entries.\",\n      );\n    }\n    const config = azureBlobMountConfig(settings);\n    return azureBlobMount({\n      container: config.container,\n      prefix,\n      accountName: config.accountName,\n      accountKey: config.accountKey,\n      endpointUrl: config.endpointUrl,\n      readOnly: true,\n      mountStrategy: inContainerMountStrategy({\n        pattern: { type: \"rclone\", mode: \"fuse\" },\n      }),\n    });\n  }\n  if (settings.objectStorageBackend === \"aws-s3\" || settings.objectStorageBackend === \"gcs\") {\n    throw new Error(\n      `${settings.objectStorageBackend} file resources require pre-signed download materialization`,\n    );\n  }\n  const config = s3CompatibleMountConfig(settings);\n  return s3Mount({\n    bucket: config.bucket,\n    prefix,\n    endpointUrl: config.endpointUrl,\n    region: config.region,\n    s3Provider: config.s3Provider,\n    accessKeyId: config.accessKeyId,\n    secretAccessKey: config.secretAccessKey,\n    readOnly: true,\n    mountStrategy: nativeBucketMount\n      ? new ModalCloudBucketMountStrategy()\n      : inContainerMountStrategy({ pattern: { type: \"rclone\", mode: \"fuse\" } }),\n  });\n}\n\nfunction s3CompatibleMountConfig(settings: Settings): {\n  bucket: string;\n  endpointUrl: string;\n  region: string;\n  s3Provider: string;\n  accessKeyId: string;\n  secretAccessKey: string;\n} {\n  const endpointUrl = settings.objectStorageSandboxEndpoint ?? settings.objectStorageEndpoint;\n  if (\n    !endpointUrl ||\n    !settings.objectStorageAccessKeyId ||\n    !settings.objectStorageSecretAccessKey\n  ) {\n    throw new Error(\"File resources require configured S3-compatible object storage\");\n  }\n  return {\n    bucket: settings.objectStorageBucket,\n    endpointUrl,\n    region: settings.objectStorageRegion,\n    s3Provider: settings.objectStorageS3Provider,\n    accessKeyId: settings.objectStorageAccessKeyId,\n    secretAccessKey: settings.objectStorageSecretAccessKey,\n  };\n}\n\nfunction azureBlobMountConfig(settings: Settings): {\n  container: string;\n  accountName: string;\n  accountKey: string;\n  endpointUrl?: string;\n} {\n  const parsed = settings.objectStorageAzureConnectionString\n    ? parseAzureConnectionString(settings.objectStorageAzureConnectionString)\n    : {};\n  const accountName = settings.objectStorageAzureAccountName ?? parsed.AccountName;\n  const accountKey = settings.objectStorageAzureAccountKey ?? parsed.AccountKey;\n  if (!accountName || !accountKey) {\n    throw new Error(\"File resources require Azure Blob account name and account key\");\n  }\n  const endpointUrl = azureBlobManifestEndpoint(\n    settings.objectStorageAzureEndpoint ?? parsed.BlobEndpoint,\n    accountName,\n  );\n  return {\n    container: settings.objectStorageBucket,\n    accountName,\n    accountKey,\n    ...(endpointUrl ? { endpointUrl } : {}),\n  };\n}\n\nfunction azureBlobManifestEndpoint(\n  endpoint: string | undefined,\n  accountName: string,\n): string | undefined {\n  if (!endpoint) {\n    return undefined;\n  }\n  const normalized = endpoint.replace(/\\/+$/, \"\");\n  const standardAccountEndpoint = `https://${accountName}.blob.core.windows.net`;\n  return normalized === standardAccountEndpoint ? undefined : normalized;\n}\n\nfunction parseAzureConnectionString(value: string): Record<string, string> {\n  return Object.fromEntries(\n    value\n      .split(\";\")\n      .map((part) => part.trim())\n      .filter(Boolean)\n      .map((part) => {\n        const index = part.indexOf(\"=\");\n        return index === -1 ? [part, \"\"] : [part.slice(0, index), part.slice(index + 1)];\n      }),\n  );\n}\n\nfunction normalizeManifestPath(path: string): string {\n  return normalizeResourceMountPath(path);\n}\n\nfunction normalizeSandboxFileDownloads(downloads: SandboxFileDownload[]): SandboxFileDownload[] {\n  return downloads.map((download) => {\n    const mountPath = normalizeManifestPath(download.mountPath);\n    assertSafeSandboxFilename(download.filename, download.fileId);\n    if (!download.content && !download.url?.trim()) {\n      throw new Error(\n        `File download materialization requires content or a URL for ${download.fileId}`,\n      );\n    }\n    return {\n      ...download,\n      mountPath,\n    };\n  });\n}\n\nfunction assertSafeSandboxFilename(filename: string, fileId: string): void {\n  if (\n    !filename ||\n    filename.includes(\"/\") ||\n    filename.includes(\"\\\\\") ||\n    filename === \".\" ||\n    filename === \"..\" ||\n    filename.includes(\"..\")\n  ) {\n    throw new Error(`Invalid sandbox file name for ${fileId}: ${filename}`);\n  }\n}\n\nfunction sandboxDownloadTargetPath(download: SandboxFileDownload): string {\n  return posixPath.join(\"/workspace\", download.mountPath, download.filename);\n}\n\nfunction sandboxFileDownloadCommand(download: SandboxFileDownload, targetPath: string): string {\n  if (!download.url) {\n    throw new Error(`File download materialization URL is empty for ${download.fileId}`);\n  }\n  const targetDir = posixPath.dirname(targetPath);\n  const tmpPath = `${targetPath}.opengeni-download-$$`;\n  return [\n    \"set +x\",\n    \"set -eu\",\n    `mkdir -p -- ${shellQuote(targetDir)}`,\n    `if [ ! -f ${shellQuote(targetPath)} ]; then`,\n    `  tmp=${shellQuote(tmpPath)}`,\n    '  cleanup() { rm -f -- \"$tmp\"; }',\n    \"  trap cleanup EXIT\",\n    `  curl --fail --location --silent --show-error --retry 3 --retry-delay 1 --output \"$tmp\" ${shellQuote(download.url)}`,\n    `  mv -- \"$tmp\" ${shellQuote(targetPath)}`,\n    \"  trap - EXIT\",\n    \"fi\",\n    `chmod a-w -- ${shellQuote(targetPath)} 2>/dev/null || true`,\n  ].join(\"\\n\");\n}\n\nfunction shellQuote(value: string): string {\n  return `'${value.replace(/'/g, \"'\\\\''\")}'`;\n}\n\nexport type SandboxLifecycleHookPhase = \"beforeAgentStart\";\n\nexport type SandboxLifecycleCommandRunner = (\n  session: TurnSandboxCommandSession,\n  args: TurnSandboxCommandArgs,\n) => Promise<unknown>;\n\nexport type SandboxLifecycleHookContext = {\n  environment: Record<string, string>;\n  onRuntimeEvent?: (event: NormalizedRuntimeEvent) => Promise<void> | void;\n  runAs?: string;\n  // TOKEN-BROKER (B1): back-compat GitHub alias for gitTokenSeeds.github.\n  gitTokenSeed?: string;\n  // Provider tokens to seed into box token FILES before repository clone/setup\n  // runs. Threaded OFF-MANIFEST — they ride ONLY the setup exec command prefix,\n  // NEVER the box/agent manifest env (validateNoEnvironmentDelta must never see\n  // rotating values).\n  gitTokenSeeds?: GitTokenSeeds;\n  gitCredentialBindings?: GitCredentialBindingSeed[];\n  toolspaceTokenSeed?: string;\n  toolspaceTokenFile?: string;\n  // M3: the rig setup descriptor for the rig-setup hook (the script + marker\n  // version id + the rig's own timeout). Present only on a rig-bound turn.\n  rigSetup?: RigSetupDescriptor;\n  commandRunner?: SandboxLifecycleCommandRunner;\n};\n\nasync function runSandboxLifecycleCommand(\n  session: SandboxSessionLike,\n  args: TurnSandboxCommandArgs,\n  commandRunner?: SandboxLifecycleCommandRunner,\n): Promise<unknown> {\n  if (commandRunner) {\n    return await commandRunner(session as TurnSandboxCommandSession, args);\n  }\n  if (session.exec) return await session.exec(args);\n  if (session.execCommand) return await session.execCommand(args);\n  throw new Error(\"Sandbox session does not support command execution\");\n}\n\n// M3: everything the rig-setup hook needs to run the frozen rig version's setup\n// script exactly once per box. `versionId` keys the idempotence marker\n// (/var/opengeni/rig-setup-<versionId>.done); `timeoutMs` is the rig-specific\n// budget (settings.rigSetupTimeoutMs), NOT the 120s lifecycle default; `rigName`\n// is for human-readable events/errors only.\nexport type RigSetupDescriptor = {\n  rigId: string;\n  versionId: string;\n  rigName: string;\n  script: string;\n  timeoutMs: number;\n};\n\nexport type SandboxLifecycleHook = {\n  id: string;\n  phase: SandboxLifecycleHookPhase;\n  shouldRun?: (context: SandboxLifecycleHookContext) => boolean;\n  run: (session: SandboxSessionLike, context: SandboxLifecycleHookContext) => Promise<void>;\n};\n\nconst builtInSandboxLifecycleHooks: Record<string, SandboxLifecycleHook> = {\n  \"azure-cli-login\": {\n    id: \"azure-cli-login\",\n    phase: \"beforeAgentStart\",\n    shouldRun: ({ environment }) => hasAzureServicePrincipal(environment),\n    run: runAzureCliLoginHook,\n  },\n};\n\nexport function sandboxLifecycleHooksForIds(ids: string[]): SandboxLifecycleHook[] {\n  return ids.map((id) => {\n    const hook = builtInSandboxLifecycleHooks[id];\n    if (!hook) {\n      throw new Error(`Unknown sandbox lifecycle hook ${id}`);\n    }\n    return hook;\n  });\n}\n\nfunction applicableBeforeAgentStartHooks(\n  hooks: SandboxLifecycleHook[],\n  context: SandboxLifecycleHookContext,\n): SandboxLifecycleHook[] {\n  return hooks.filter(\n    (hook) => hook.phase === \"beforeAgentStart\" && (hook.shouldRun?.(context) ?? true),\n  );\n}\n\n/**\n * Run the beforeAgentStart lifecycle hooks directly against an already-live box.\n *\n * The create/resume decoration (withSandboxLifecycleHooks) is structurally blind to\n * the PROVIDED-session path: when runStream hands the SDK a live `session`\n * (runOptions.sandbox.session — the lease-owned box resolved by the turn activity),\n * SandboxRuntimeManager uses it as-is and never calls client.create/resume, so a\n * wrapper around those methods never fires. Callers on that path invoke this\n * before starting the run so the box still gets its beforeAgentStart preparation\n * (repository clone + B1 askpass/token-file seed, azure-cli-login).\n */\nexport async function runBeforeAgentStartHooks(\n  session: SandboxSessionLike,\n  hooks: SandboxLifecycleHook[],\n  context: SandboxLifecycleHookContext,\n): Promise<void> {\n  for (const hook of applicableBeforeAgentStartHooks(hooks, context)) {\n    await hook.run(session, context);\n  }\n}\n\nexport function withSandboxLifecycleHooks(\n  client: SandboxClient,\n  hooks: SandboxLifecycleHook[],\n  context: SandboxLifecycleHookContext,\n): SandboxClient {\n  const beforeAgentStartHooks = applicableBeforeAgentStartHooks(hooks, context);\n  if (beforeAgentStartHooks.length === 0) {\n    return client;\n  }\n  const seen = new WeakSet<object>();\n  const wrapSession = async <T extends SandboxSessionLike>(session: T): Promise<T> => {\n    if (typeof session === \"object\" && session !== null && !seen.has(session)) {\n      for (const hook of beforeAgentStartHooks) {\n        await hook.run(session, context);\n      }\n      seen.add(session);\n    }\n    return session;\n  };\n  const wrapped: SandboxClient = {\n    backendId: client.backendId,\n    ...(client.supportsDefaultOptions !== undefined\n      ? { supportsDefaultOptions: client.supportsDefaultOptions }\n      : {}),\n    ...(client.create\n      ? {\n          create: async (...args: any[]) =>\n            await wrapSession(await (client.create as any)(...args)),\n        }\n      : {}),\n    ...(client.resume\n      ? {\n          resume: async (state: SandboxSessionState) =>\n            await wrapSession(await client.resume!(state)),\n        }\n      : {}),\n    ...(client.delete\n      ? {\n          delete: async (state: SandboxSessionState) => await client.delete!(state),\n        }\n      : {}),\n    ...(client.serializeSessionState\n      ? {\n          serializeSessionState: async (state: SandboxSessionState, options) =>\n            await client.serializeSessionState!(state, options),\n        }\n      : {}),\n    ...(client.canPersistOwnedSessionState\n      ? {\n          canPersistOwnedSessionState: async (state: SandboxSessionState) =>\n            await client.canPersistOwnedSessionState!(state),\n        }\n      : {}),\n    ...(client.canReusePreservedOwnedSession\n      ? {\n          canReusePreservedOwnedSession: async (state: SandboxSessionState) =>\n            await client.canReusePreservedOwnedSession!(state),\n        }\n      : {}),\n    ...(client.deserializeSessionState\n      ? {\n          deserializeSessionState: async (state: Record<string, unknown>) =>\n            await client.deserializeSessionState!(state),\n        }\n      : {}),\n  };\n  return wrapped;\n}\n\nfunction sandboxRepositoryCloneHooksForAgent(agent: Agent<any, any>): SandboxLifecycleHook[] {\n  return agentRepositoryCloneHooks.get(agent) ?? [];\n}\n\n// TOKEN-BROKER (B1): the per-turn git token seed stashed for this agent (undefined\n// when no repo is attached / on the selfhosted path). Read into the clone hook\n// context at runStream so the token is seeded off-manifest.\nfunction gitTokenSeedsForAgent(agent: Agent<any, any>): GitTokenSeeds | undefined {\n  return agentGitTokenSeeds.get(agent);\n}\n\nfunction gitCredentialBindingsForAgent(\n  agent: Agent<any, any>,\n): GitCredentialBindingSeed[] | undefined {\n  return agentGitCredentialBindings.get(agent);\n}\n\nfunction toolspaceTokenSeedForAgent(agent: Agent<any, any>): string | undefined {\n  return agentToolspaceTokenSeed.get(agent);\n}\n\nfunction toolspaceTokenSessionIdForAgent(agent: Agent<any, any>): string | undefined {\n  return agentToolspaceTokenSessionId.get(agent);\n}\n\nfunction toolspaceTokenFileForAgent(\n  agent: Agent<any, any>,\n  environment: Readonly<Record<string, string>>,\n): string | undefined {\n  if (!toolspaceTokenSeedForAgent(agent)) return undefined;\n  const sessionId = toolspaceTokenSessionIdForAgent(agent);\n  if (!sessionId) {\n    throw new Error(\"Toolspace token seed is missing its session identity\");\n  }\n  return toolspaceTokenFileFromEnvironment(environment, sessionId);\n}\n\nfunction sandboxToolspaceTokenHooksForAgent(agent: Agent<any, any>): SandboxLifecycleHook[] {\n  return toolspaceTokenSeedForAgent(agent)\n    ? [\n        {\n          id: \"toolspace-token\",\n          phase: \"beforeAgentStart\",\n          run: runToolspaceTokenSeedHook,\n        },\n      ]\n    : [];\n}\n\n// M3: the rig-setup hook for this agent (present only on a rig-bound turn whose\n// frozen version carries a non-empty setup script). It runs FIRST among the\n// owned beforeAgentStart hooks so any tooling it installs is available to the\n// repository-clone / credential hooks that follow. The descriptor is threaded\n// through the hook context (rigSetupHookContext) so runRigSetupHook reads it.\nfunction sandboxRigSetupHooksForAgent(agent: Agent<any, any>): SandboxLifecycleHook[] {\n  return agentRigSetup.get(agent)\n    ? [\n        {\n          id: \"rig-setup\",\n          phase: \"beforeAgentStart\",\n          run: runRigSetupHook,\n        },\n      ]\n    : [];\n}\n\nfunction rigSetupDescriptorForAgent(agent: Agent<any, any>): RigSetupDescriptor | undefined {\n  return agentRigSetup.get(agent);\n}\n\n// M3: the rig version's credential hooks (already resolved + validated at build\n// time). Unioned with the deployment preparation-profile hooks by the caller.\nfunction rigCredentialHooksForAgent(agent: Agent<any, any>): SandboxLifecycleHook[] {\n  return agentRigCredentialHooks.get(agent) ?? [];\n}\n\n// M3: union the deployment preparation-profile hooks with the rig version's\n// credential hooks, deduped by id (a hook named by BOTH the deployment profile\n// and the rig runs once). Deployment hooks keep their leading position.\nfunction unionCredentialHooks(\n  deploymentHooks: SandboxLifecycleHook[],\n  rigHooks: SandboxLifecycleHook[],\n): SandboxLifecycleHook[] {\n  if (rigHooks.length === 0) {\n    return deploymentHooks;\n  }\n  const seen = new Set(deploymentHooks.map((hook) => hook.id));\n  return [...deploymentHooks, ...rigHooks.filter((hook) => !seen.has(hook.id))];\n}\n\nfunction gitCredentialSessionRegistrationHooks(\n  callback: RunAgentStreamOptions[\"onGitCredentialSessionReady\"],\n): SandboxLifecycleHook[] {\n  return callback\n    ? [\n        {\n          id: \"git-credential-renewal-registration\",\n          phase: \"beforeAgentStart\",\n          run: async (session) => {\n            await callback(session);\n          },\n        },\n      ]\n    : [];\n}\n\nfunction toolspaceTokenSessionRegistrationHooks(\n  callback: RunAgentStreamOptions[\"onToolspaceTokenSessionReady\"],\n): SandboxLifecycleHook[] {\n  return callback\n    ? [\n        {\n          id: \"toolspace-token-renewal-registration\",\n          phase: \"beforeAgentStart\",\n          run: async (session) => {\n            await callback(session);\n          },\n        },\n      ]\n    : [];\n}\n\nfunction sandboxRepositoryCloneHooks(\n  settings: Settings,\n  resources: ResourceRef[],\n  activeSandboxBackend: Settings[\"sandboxBackend\"] = settings.sandboxBackend,\n): SandboxLifecycleHook[] {\n  const repositories = resources.filter(\n    (resource): resource is Extract<ResourceRef, { kind: \"repository\" }> =>\n      resource.kind === \"repository\" &&\n      repositoryUsesSandboxClone(settings, resource, activeSandboxBackend),\n  );\n  if (repositories.length === 0) {\n    return [];\n  }\n  return [\n    {\n      id: \"repository-clone\",\n      phase: \"beforeAgentStart\",\n      run: async (session, context) => {\n        await runRepositoryCloneHook(session, repositories, context);\n      },\n    },\n  ];\n}\n\n/**\n * Whether the platform should seed a repository resource by `git clone` inside\n * the sandbox before the agent starts.\n *\n * SAFETY GATE (selfhosted/bring-your-own machine): the clone hook writes into\n * `posixPath.join(\"/workspace\", mountPath)`, which a selfhosted agent rewrites\n * to a path under its REAL launch directory — so a platform-initiated clone\n * lands on the user's actual disk. A connected machine already owns its\n * filesystem; the platform must NEVER clone onto it. We therefore key the\n * decision off the EFFECTIVE/active backend, not just the session's HOME backend\n * (`settings.sandboxBackend`): a session can run on the cloud default while its\n * active sandbox has been swapped to a connected machine (active_sandbox_id → a\n * selfhosted lease), in which case the agent actually executes on the user's\n * machine even though the home backend is e.g. \"modal\". `activeSandboxBackend`\n * defaults to the home backend, so a session whose HOME backend is \"selfhosted\"\n * is gated with no caller change, and every cloud path is byte-for-byte\n * unchanged.\n */\nexport function repositoryUsesSandboxClone(\n  settings: Settings,\n  resource: Extract<ResourceRef, { kind: \"repository\" }>,\n  activeSandboxBackend: Settings[\"sandboxBackend\"] = settings.sandboxBackend,\n): boolean {\n  if (activeSandboxBackend === \"selfhosted\") {\n    return false;\n  }\n  return (\n    settings.sandboxBackend === \"modal\" ||\n    Boolean(resource.githubInstallationId && resource.githubRepositoryId) ||\n    Boolean(resource.provider)\n  );\n}\n\nconst GIT_CREDENTIAL_PROVIDERS = [\n  \"github\",\n  \"gitlab\",\n  \"azure_devops\",\n] as const satisfies readonly GitCredentialProvider[];\n\nfunction gitProviderSeedEnv(provider: GitCredentialProvider): string {\n  return `OPENGENI_GIT_${provider.toUpperCase()}_TOKEN_SEED`;\n}\n\nexport function gitCredentialBindingHash(credentialBindingId: string): string {\n  return createHash(\"sha256\").update(credentialBindingId, \"utf8\").digest(\"hex\").slice(0, 32);\n}\n\nfunction gitBindingSeedEnv(binding: GitCredentialBindingSeed): string {\n  return `OPENGENI_GIT_BINDING_${gitCredentialBindingHash(binding.credentialBindingId).toUpperCase()}_TOKEN_SEED`;\n}\n\nfunction gitCredentialBindingSeedExportPrefix(bindings: GitCredentialBindingSeed[]): string {\n  return bindings\n    .map((binding) => `export ${gitBindingSeedEnv(binding)}=${shellQuote(binding.token)}`)\n    .join(\"\\n\");\n}\n\nfunction gitTokenSeedExportPrefix(seeds: GitTokenSeeds): string {\n  const lines: string[] = [];\n  for (const provider of GIT_CREDENTIAL_PROVIDERS) {\n    const token = seeds[provider];\n    if (!token) {\n      continue;\n    }\n    lines.push(`export ${gitProviderSeedEnv(provider)}=${shellQuote(token)}`);\n    if (provider === \"github\") {\n      lines.push(`export OPENGENI_GIT_TOKEN_SEED=${shellQuote(token)}`);\n    }\n  }\n  return lines.join(\"\\n\");\n}\n\ntype RuntimeGitBindingDescriptor = {\n  provider: GitCredentialProvider;\n  credentialBindingId: string;\n  bindingHash: string;\n  protocol: string;\n  host: string;\n  path: string;\n  uri: string;\n  mountPath: string;\n};\n\ntype RuntimeGitHttpBrokerRouteDescriptor = {\n  provider: GitCredentialProvider;\n  credentialBindingId: string;\n  bindingHash: string;\n  repositoryUri: string;\n  brokerUri: string;\n  protocol: \"https\";\n  host: string;\n  path: string;\n};\n\nfunction runtimeGitBindingDescriptors(\n  resources: Extract<ResourceRef, { kind: \"repository\" }>[],\n): RuntimeGitBindingDescriptor[] {\n  const remoteBindings = new Map<string, string>();\n  const bindingProviders = new Map<string, GitCredentialProvider>();\n  return resources.map((resource) => {\n    const url = new URL(resource.uri);\n    const credentialProvider = gitCredentialProviderForRepository(resource);\n    // Provider-less public/legacy resources retain the historical GitHub\n    // askpass fallback, but credential-bound resources derive through the\n    // shared contracts helper used by the worker and core.\n    const provider = credentialProvider ?? \"github\";\n    const credentialBindingId =\n      gitCredentialBindingIdForRepository(resource, credentialProvider) ?? provider;\n    const path = url.pathname.replace(/^\\/+|\\/+$/g, \"\");\n    const remote = `${url.protocol.toLowerCase()}//${url.host.toLowerCase()}/${path.replace(/\\.git$/, \"\")}`;\n    const bindingKey = `${provider}\\u0000${credentialBindingId}`;\n    const boundProvider = bindingProviders.get(credentialBindingId);\n    if (boundProvider && boundProvider !== provider) {\n      throw new Error(\n        `credential binding ${credentialBindingId} is assigned to multiple Git providers`,\n      );\n    }\n    bindingProviders.set(credentialBindingId, provider);\n    const claimed = remoteBindings.get(remote);\n    if (claimed && claimed !== bindingKey) {\n      throw new Error(\n        `repository remote ${resource.uri} is claimed by multiple credential bindings`,\n      );\n    }\n    remoteBindings.set(remote, bindingKey);\n    return {\n      provider,\n      credentialBindingId,\n      bindingHash: gitCredentialBindingHash(credentialBindingId),\n      protocol: url.protocol.replace(/:$/, \"\").toLowerCase(),\n      host: url.host.toLowerCase(),\n      path,\n      uri: resource.uri,\n      mountPath: `/workspace/${resourceMountPath(resource)}`,\n    };\n  });\n}\n\nfunction gitCredentialBindingInventoryCommandLines(\n  resources: Extract<ResourceRef, { kind: \"repository\" }>[],\n  bindings: GitCredentialBindingSeed[],\n): string[] {\n  type GitBindingInventoryTransport = \"direct_token\" | \"git_http_broker\";\n  type GitBindingInventoryEntry = {\n    credentialBindingId: string;\n    provider: GitCredentialProvider;\n    transport: GitBindingInventoryTransport;\n    repositories: Array<{ uri: string; mountPath: string }>;\n  };\n  const bindingTransports = new Map<string, GitBindingInventoryTransport>(\n    bindings.map((binding) => [\n      gitCredentialBindingKey(binding.provider, binding.credentialBindingId),\n      binding.transport?.kind === \"http_broker\" ? \"git_http_broker\" : \"direct_token\",\n    ]),\n  );\n  const entries = new Map<string, GitBindingInventoryEntry>();\n  for (const descriptor of runtimeGitBindingDescriptors(resources)) {\n    const key = gitCredentialBindingKey(descriptor.provider, descriptor.credentialBindingId);\n    const transport = bindingTransports.get(key);\n    if (!transport) continue;\n    const entry: GitBindingInventoryEntry = entries.get(key) ?? {\n      credentialBindingId: descriptor.credentialBindingId,\n      provider: descriptor.provider,\n      transport,\n      repositories: [],\n    };\n    entry.repositories.push({ uri: descriptor.uri, mountPath: descriptor.mountPath });\n    entries.set(key, entry);\n  }\n  const inventory = `${JSON.stringify(\n    {\n      version: 1,\n      bindings: [...entries.values()],\n    },\n    null,\n    2,\n  )}\\n`;\n  return [\n    'git_binding_inventory=\"${OPENGENI_GIT_BINDINGS_FILE:-$HOME/.opengeni/git-bindings.json}\"',\n    'mkdir -p \"$(dirname \"$git_binding_inventory\")\"',\n    'inventory_umask=\"$(umask)\"',\n    \"umask 077\",\n    `printf '%s' ${shellQuote(inventory)} > \"$git_binding_inventory.tmp.$$\"`,\n    'mv -f \"$git_binding_inventory.tmp.$$\" \"$git_binding_inventory\"',\n    'umask \"$inventory_umask\"',\n  ];\n}\n\nfunction gitCredentialBindingKey(\n  provider: GitCredentialProvider,\n  credentialBindingId: string,\n): string {\n  return `${provider}\\u0000${credentialBindingId}`;\n}\n\nfunction brokeredGitCredentialBindingKeys(\n  bindings: GitCredentialBindingSeed[],\n): ReadonlySet<string> {\n  return new Set(\n    bindings\n      .filter((binding) => binding.transport?.kind === \"http_broker\")\n      .map((binding) => gitCredentialBindingKey(binding.provider, binding.credentialBindingId)),\n  );\n}\n\nfunction runtimeGitHttpBrokerRouteDescriptors(\n  resources: Extract<ResourceRef, { kind: \"repository\" }>[],\n  bindings: GitCredentialBindingSeed[],\n): RuntimeGitHttpBrokerRouteDescriptor[] {\n  const resourceDescriptors = runtimeGitBindingDescriptors(resources);\n  const byBindingAndUri = new Map<string, RuntimeGitBindingDescriptor>();\n  for (const descriptor of resourceDescriptors) {\n    byBindingAndUri.set(\n      `${gitCredentialBindingKey(descriptor.provider, descriptor.credentialBindingId)}\\u0000${descriptor.uri}`,\n      descriptor,\n    );\n  }\n\n  const routes: RuntimeGitHttpBrokerRouteDescriptor[] = [];\n  const claimedRepositoryUris = new Set<string>();\n  const claimedBrokerUris = new Set<string>();\n  for (const binding of bindings) {\n    if (!binding.transport) continue;\n    if (\n      typeof binding.transport !== \"object\" ||\n      binding.transport.kind !== \"http_broker\" ||\n      !Array.isArray(binding.transport.repositories)\n    ) {\n      throw new Error(\n        `Git credential binding ${binding.credentialBindingId} uses an unsupported transport`,\n      );\n    }\n    const bindingKey = gitCredentialBindingKey(binding.provider, binding.credentialBindingId);\n    const expected = resourceDescriptors.filter(\n      (descriptor) =>\n        gitCredentialBindingKey(descriptor.provider, descriptor.credentialBindingId) === bindingKey,\n    );\n    if (expected.length === 0 || binding.transport.repositories.length !== expected.length) {\n      throw new Error(\n        `Git HTTP broker binding ${binding.credentialBindingId} does not cover its exact repository set`,\n      );\n    }\n    for (const route of binding.transport.repositories) {\n      if (\n        !route ||\n        typeof route !== \"object\" ||\n        typeof route.repositoryUri !== \"string\" ||\n        typeof route.brokerUri !== \"string\"\n      ) {\n        throw new Error(\n          `Git HTTP broker binding ${binding.credentialBindingId} contains an invalid repository route`,\n        );\n      }\n      const descriptor = byBindingAndUri.get(`${bindingKey}\\u0000${route.repositoryUri}`);\n      if (!descriptor || claimedRepositoryUris.has(route.repositoryUri)) {\n        throw new Error(\n          `Git HTTP broker binding ${binding.credentialBindingId} contains an unexpected repository route`,\n        );\n      }\n      let brokerUrl: URL;\n      try {\n        brokerUrl = new URL(route.brokerUri);\n      } catch {\n        throw new Error(\n          `Git HTTP broker binding ${binding.credentialBindingId} contains an invalid broker URI`,\n        );\n      }\n      if (\n        brokerUrl.protocol !== \"https:\" ||\n        brokerUrl.username ||\n        brokerUrl.password ||\n        brokerUrl.search ||\n        brokerUrl.hash ||\n        brokerUrl.href !== route.brokerUri ||\n        claimedBrokerUris.has(brokerUrl.href)\n      ) {\n        throw new Error(\n          `Git HTTP broker binding ${binding.credentialBindingId} contains an unsafe broker URI`,\n        );\n      }\n      claimedRepositoryUris.add(route.repositoryUri);\n      claimedBrokerUris.add(brokerUrl.href);\n      routes.push({\n        provider: binding.provider,\n        credentialBindingId: binding.credentialBindingId,\n        bindingHash: gitCredentialBindingHash(binding.credentialBindingId),\n        repositoryUri: route.repositoryUri,\n        brokerUri: route.brokerUri,\n        protocol: \"https\",\n        host: brokerUrl.host.toLowerCase(),\n        path: brokerUrl.pathname.replace(/^\\/+|\\/+$/g, \"\"),\n      });\n    }\n  }\n  return routes;\n}\n\nfunction gitUsernameForProvider(provider: GitCredentialProvider): string {\n  if (provider === \"github\") return \"x-access-token\";\n  if (provider === \"gitlab\") return \"oauth2\";\n  return \"opengeni\";\n}\n\nfunction gitCredentialHelperBindingCaseLines(\n  resources: Extract<ResourceRef, { kind: \"repository\" }>[],\n  bindings: GitCredentialBindingSeed[],\n): string[] {\n  const brokeredBindings = brokeredGitCredentialBindingKeys(bindings);\n  return runtimeGitBindingDescriptors(resources)\n    .filter(\n      (descriptor) =>\n        !brokeredBindings.has(\n          gitCredentialBindingKey(descriptor.provider, descriptor.credentialBindingId),\n        ),\n    )\n    .flatMap((descriptor) => {\n      const paths = new Set([\n        descriptor.path,\n        descriptor.path.replace(/\\.git$/, \"\"),\n        `${descriptor.path.replace(/\\.git$/, \"\")}.git`,\n      ]);\n      return [...paths].map(\n        (path) =>\n          `  ${shellQuote(`${descriptor.protocol}|${descriptor.host}|${path}`)}) username=${shellQuote(gitUsernameForProvider(descriptor.provider))}; token_file=\"$credential_dir/${descriptor.bindingHash}-token\" ;;`,\n      );\n    });\n}\n\nfunction gitCredentialHelperBrokerCaseLines(\n  routes: RuntimeGitHttpBrokerRouteDescriptor[],\n): string[] {\n  return routes.flatMap((route) => {\n    const paths = new Set([\n      route.path,\n      route.path.replace(/\\.git$/, \"\"),\n      `${route.path.replace(/\\.git$/, \"\")}.git`,\n    ]);\n    return [...paths].map(\n      (path) =>\n        `  ${shellQuote(`${route.protocol}|${route.host}|${path}`)}) username=opengeni; token_file=\"$credential_dir/${route.bindingHash}-token\" ;;`,\n    );\n  });\n}\n\nfunction gitAskpassHostProviderCaseLines(\n  resources: Extract<ResourceRef, { kind: \"repository\" }>[],\n  brokerRoutes: RuntimeGitHttpBrokerRouteDescriptor[],\n): string[] {\n  const hosts = new Map<string, { provider: GitCredentialProvider; bindings: Set<string> }>();\n  for (const descriptor of runtimeGitBindingDescriptors(resources)) {\n    const entry = hosts.get(descriptor.host) ?? {\n      provider: descriptor.provider,\n      bindings: new Set<string>(),\n    };\n    entry.bindings.add(`${descriptor.provider}\\u0000${descriptor.credentialBindingId}`);\n    hosts.set(descriptor.host, entry);\n  }\n  const brokerHosts = [...new Set(brokerRoutes.map((route) => route.host))]\n    .sort((a, b) => a.localeCompare(b))\n    .map((hostname) => `    ${shellQuote(hostname)}) printf '\\\\n'; return 0 ;;`);\n  return [\n    ...brokerHosts,\n    ...[...hosts.entries()]\n      .filter(([, entry]) => entry.bindings.size === 1)\n      .sort(([a], [b]) => a.localeCompare(b))\n      .map(\n        ([hostname, entry]) =>\n          `    ${shellQuote(hostname)}) printf '%s\\\\n' ${entry.provider}; return 0 ;;`,\n      ),\n  ];\n}\n\nfunction gitCredentialTokenWriterCommandLines(bindings: GitCredentialBindingSeed[] = []): string[] {\n  const bindingWrites = bindings.flatMap((binding) => {\n    const hash = gitCredentialBindingHash(binding.credentialBindingId);\n    const seedEnv = gitBindingSeedEnv(binding);\n    const count = Math.max(1, binding.providerBindingCount ?? 1);\n    const provider = binding.provider;\n    const lines = [`write_git_binding_token ${shellQuote(hash)} \"\\${${seedEnv}:-}\"`];\n    if (count === 1 && binding.transport?.kind !== \"http_broker\") {\n      lines.push(`write_git_provider_token ${shellQuote(provider)} \"\\${${seedEnv}:-}\"`);\n    } else {\n      lines.push(`remove_git_provider_token ${shellQuote(provider)}`);\n    }\n    return lines;\n  });\n  return [\n    // TOKEN-BROKER (B1/B2): seed run-scoped provider tokens into stable files and\n    // atomically replace each provider file. Token VALUES are supplied only by\n    // the per-exec command prefix\n    // (OPENGENI_GIT_*_TOKEN_SEED), never by the box/agent manifest. Helper paths\n    // are stable manifest values from @opengeni/config.\n    \"git_provider_token_file() {\",\n    '  provider=\"$1\"',\n    '  case \"$provider\" in',\n    \"    github) printf '%s\\\\n' \\\"${OPENGENI_GIT_TOKEN_FILE:-$HOME/.opengeni/git-token}\\\" ;;\",\n    \"    *) printf '%s\\\\n' \\\"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}/$provider-token\\\" ;;\",\n    \"  esac\",\n    \"}\",\n    \"write_git_binding_token() {\",\n    '  binding_hash=\"$1\"',\n    '  token=\"$2\"',\n    '  [ -n \"$token\" ] || return 0',\n    '  credential_dir=\"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}\"',\n    '  mkdir -p \"$credential_dir\"',\n    '  token_file=\"$credential_dir/$binding_hash-token\"',\n    '  printf \\'%s\\' \"$token\" > \"$token_file.tmp.$$\"',\n    '  mv -f \"$token_file.tmp.$$\" \"$token_file\"',\n    \"}\",\n    \"remove_git_provider_token() {\",\n    '  provider=\"$1\"',\n    '  rm -f \"$(git_provider_token_file \"$provider\")\"',\n    '  if [ \"$provider\" = github ]; then',\n    '    rm -f \"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}/github-token\"',\n    \"  fi\",\n    \"}\",\n    \"write_git_provider_token() {\",\n    '  provider=\"$1\"',\n    '  token=\"$2\"',\n    '  [ -n \"$token\" ] || return 0',\n    '  token_file=\"$(git_provider_token_file \"$provider\")\"',\n    '  mkdir -p \"$(dirname \"$token_file\")\"',\n    '  printf \\'%s\\' \"$token\" > \"$token_file.tmp.$$\"',\n    '  mv -f \"$token_file.tmp.$$\" \"$token_file\"',\n    '  if [ \"$provider\" = github ]; then',\n    '    credential_dir=\"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}\"',\n    '    mkdir -p \"$credential_dir\"',\n    '    printf \\'%s\\' \"$token\" > \"$credential_dir/github-token.tmp.$$\"',\n    '    mv -f \"$credential_dir/github-token.tmp.$$\" \"$credential_dir/github-token\"',\n    \"  fi\",\n    \"}\",\n    'seed_umask=\"$(umask)\"',\n    \"umask 077\",\n    'write_git_provider_token github \"${OPENGENI_GIT_GITHUB_TOKEN_SEED:-${OPENGENI_GIT_TOKEN_SEED:-}}\"',\n    'write_git_provider_token gitlab \"${OPENGENI_GIT_GITLAB_TOKEN_SEED:-}\"',\n    'write_git_provider_token azure_devops \"${OPENGENI_GIT_AZURE_DEVOPS_TOKEN_SEED:-}\"',\n    ...bindingWrites,\n    'umask \"$seed_umask\"',\n  ];\n}\n\nfunction gitHttpBrokerConfigCommandLines(routes: RuntimeGitHttpBrokerRouteDescriptor[]): string[] {\n  return [\n    'git_http_broker_config=\"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}/http-broker.gitconfig\"',\n    'mkdir -p \"$(dirname \"$git_http_broker_config\")\"',\n    'broker_umask=\"$(umask)\"',\n    \"umask 077\",\n    ': > \"$git_http_broker_config.tmp.$$\"',\n    ...routes.map(\n      (route) =>\n        `git config --file \"$git_http_broker_config.tmp.$$\" --add ${shellQuote(`url.${route.brokerUri}.insteadOf`)} ${shellQuote(route.repositoryUri)}`,\n    ),\n    'mv -f \"$git_http_broker_config.tmp.$$\" \"$git_http_broker_config\"',\n    'umask \"$broker_umask\"',\n    'git config --global --unset-all include.path \"$git_http_broker_config\" >/dev/null 2>&1 || true',\n    'git config --global --add include.path \"$git_http_broker_config\"',\n  ];\n}\n\nfunction gitCredentialHelperCommandLines(\n  resources: Extract<ResourceRef, { kind: \"repository\" }>[] = [],\n  bindings: GitCredentialBindingSeed[] = [],\n): string[] {\n  const brokerRoutes = runtimeGitHttpBrokerRouteDescriptors(resources, bindings);\n  const hostProviderCases = gitAskpassHostProviderCaseLines(resources, brokerRoutes);\n  const bindingCases = [\n    ...gitCredentialHelperBindingCaseLines(resources, bindings),\n    ...gitCredentialHelperBrokerCaseLines(brokerRoutes),\n  ];\n  const descriptors = runtimeGitBindingDescriptors(resources);\n  const brokeredBindings = brokeredGitCredentialBindingKeys(bindings);\n  const wrapperDescriptors =\n    bindings.length > 0\n      ? descriptors.filter(\n          (descriptor) =>\n            !brokeredBindings.has(\n              gitCredentialBindingKey(descriptor.provider, descriptor.credentialBindingId),\n            ),\n        )\n      : [];\n  const bindingProviders = new Map<GitCredentialProvider, Set<string>>();\n  for (const descriptor of runtimeGitBindingDescriptors(resources)) {\n    const ids = bindingProviders.get(descriptor.provider) ?? new Set<string>();\n    ids.add(descriptor.credentialBindingId);\n    bindingProviders.set(descriptor.provider, ids);\n  }\n  const strictAskpass = [...bindingProviders.values()].some((ids) => ids.size > 1);\n  const allowedWrapperHashes = [\n    ...new Set(wrapperDescriptors.map((item) => `${item.provider}|${item.bindingHash}`)),\n  ].map((key) => `    ${shellQuote(key)}) return 0 ;;`);\n  const originWrapperHashes = wrapperDescriptors.flatMap((item) => {\n    const base = item.uri.replace(/\\.git$/, \"\");\n    return [...new Set([item.uri, base, `${base}.git`])].map(\n      (uri) =>\n        `    ${shellQuote(`${item.provider}|${uri}`)}) printf '%s\\\\n' ${shellQuote(item.bindingHash)}; return 0 ;;`,\n    );\n  });\n  const soleWrapperHashes = [...bindingProviders.entries()].flatMap(([provider, ids]) => {\n    if (ids.size !== 1) return [];\n    const descriptor = wrapperDescriptors.find((item) => item.provider === provider);\n    return descriptor\n      ? [\n          `    ${shellQuote(provider)}) printf '%s\\\\n' ${shellQuote(descriptor.bindingHash)}; return 0 ;;`,\n        ]\n      : [];\n  });\n  const multiWrapperProviders =\n    bindings.length > 0\n      ? [...bindingProviders.entries()]\n          .filter(([, ids]) => ids.size > 1)\n          .map(([provider]) => provider)\n      : [];\n  const brokeredOriginCases = brokerRoutes.flatMap((route) => {\n    const base = route.repositoryUri.replace(/\\.git$/, \"\");\n    return [...new Set([route.repositoryUri, base, `${base}.git`])].map(\n      (uri) => `    ${shellQuote(`${route.provider}|${uri}`)}) return 0 ;;`,\n    );\n  });\n  const brokeredBindingHashCases = bindings\n    .filter((binding) => binding.transport?.kind === \"http_broker\")\n    .map(\n      (binding) =>\n        `    ${shellQuote(`${binding.provider}|${gitCredentialBindingHash(binding.credentialBindingId)}`)}) return 0 ;;`,\n    );\n  const providerBindingKinds = new Map<\n    GitCredentialProvider,\n    { direct: number; brokered: number }\n  >();\n  for (const binding of bindings) {\n    const counts = providerBindingKinds.get(binding.provider) ?? { direct: 0, brokered: 0 };\n    if (binding.transport?.kind === \"http_broker\") counts.brokered += 1;\n    else counts.direct += 1;\n    providerBindingKinds.set(binding.provider, counts);\n  }\n  const brokerOnlyProviders = [...providerBindingKinds.entries()]\n    .filter(([, counts]) => counts.brokered > 0 && counts.direct === 0)\n    .map(([provider]) => provider);\n  return [\n    ...gitCredentialTokenWriterCommandLines(bindings),\n    ...gitCredentialBindingInventoryCommandLines(resources, bindings),\n    // Provision git/provider-CLI helpers at SETUP (runtime) before any clone\n    // runs. Renewal updates only token files and deliberately leaves these\n    // repository-specific host mappings intact.\n    'git_askpass=\"${GIT_ASKPASS:-$HOME/.opengeni/askpass}\"',\n    'mkdir -p \"$(dirname \"$git_askpass\")\"',\n    \"cat > \\\"$git_askpass.tmp.$$\\\" <<'ASKPASS_EOF'\",\n    \"#!/usr/bin/env sh\",\n    \"prompt_host() {\",\n    \"  prompt_lower=\\\"$(printf '%s\\\\n' \\\"$1\\\" | tr '[:upper:]' '[:lower:]')\\\"\",\n    '  case \"$prompt_lower\" in',\n    \"    *://*) ;;\",\n    \"    *) printf '\\\\n'; return 0 ;;\",\n    \"  esac\",\n    '  rest=\"${prompt_lower#*://}\"',\n    '  rest=\"${rest#*@}\"',\n    '  host=\"${rest%%/*}\"',\n    '  host=\"$(printf \\'%s\\\\n\\' \"$host\" | tr -d \"\\'\")\"',\n    '  host=\"${host%:}\"',\n    \"  printf '%s\\\\n' \\\"$host\\\"\",\n    \"}\",\n    \"provider_for_prompt() {\",\n    '  host=\"$(prompt_host \"$1\")\"',\n    '  case \"$host\" in',\n    ...(hostProviderCases.length > 0 ? hostProviderCases : ['    \"\") : ;;']),\n    \"  esac\",\n    \"  case \\\"$(printf '%s\\\\n' \\\"$1\\\" | tr '[:upper:]' '[:lower:]')\\\" in\",\n    \"    *github.com*|*githubusercontent.com*) printf '%s\\\\n' github ;;\",\n    \"    *gitlab*) printf '%s\\\\n' gitlab ;;\",\n    \"    *dev.azure.com*|*.visualstudio.com*) printf '%s\\\\n' azure_devops ;;\",\n    strictAskpass ? \"    *) printf '\\\\n' ;;\" : \"    *) printf '%s\\\\n' github ;;\",\n    \"  esac\",\n    \"}\",\n    \"token_file_for_provider() {\",\n    '  case \"$1\" in',\n    \"    github) printf '%s\\\\n' \\\"${OPENGENI_GIT_TOKEN_FILE:-$HOME/.opengeni/git-token}\\\" ;;\",\n    \"    *) printf '%s\\\\n' \\\"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}/$1-token\\\" ;;\",\n    \"  esac\",\n    \"}\",\n    \"username_for_provider() {\",\n    '  case \"$1\" in',\n    \"    github) printf '%s\\\\n' \\\"x-access-token\\\" ;;\",\n    \"    gitlab) printf '%s\\\\n' \\\"oauth2\\\" ;;\",\n    \"    azure_devops) printf '%s\\\\n' \\\"opengeni\\\" ;;\",\n    \"    *) printf '\\\\n' ;;\",\n    \"  esac\",\n    \"}\",\n    'provider=\"$(provider_for_prompt \"$1\")\"',\n    'case \"$1\" in',\n    '  *Username*) username_for_provider \"$provider\" ;;',\n    '  *Password*) cat \"$(token_file_for_provider \"$provider\")\" 2>/dev/null || printf \\'\\\\n\\' ;;',\n    \"  *) printf '\\\\n' ;;\",\n    \"esac\",\n    \"ASKPASS_EOF\",\n    'chmod 0755 \"$git_askpass.tmp.$$\"',\n    'mv -f \"$git_askpass.tmp.$$\" \"$git_askpass\"',\n    'git_credential_helper=\"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}/helper\"',\n    'mkdir -p \"$(dirname \"$git_credential_helper\")\"',\n    \"cat > \\\"$git_credential_helper.tmp.$$\\\" <<'GIT_CREDENTIAL_HELPER_EOF'\",\n    \"#!/usr/bin/env sh\",\n    \"set -eu\",\n    '[ \"${1:-get}\" = get ] || exit 0',\n    \"protocol= host= path=\",\n    \"while IFS='=' read -r key value; do\",\n    '  case \"$key\" in',\n    \"    protocol) protocol=\\\"$(printf '%s' \\\"$value\\\" | tr '[:upper:]' '[:lower:]')\\\" ;;\",\n    \"    host) host=\\\"$(printf '%s' \\\"$value\\\" | tr '[:upper:]' '[:lower:]')\\\" ;;\",\n    '    path) path=\"${value#/}\" ;;',\n    \"  esac\",\n    \"done\",\n    'credential_dir=\"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}\"',\n    \"username= token_file=\",\n    'case \"$protocol|$host|$path\" in',\n    ...bindingCases,\n    \"  *) exit 0 ;;\",\n    \"esac\",\n    '[ -r \"$token_file\" ] || exit 0',\n    'password=\"$(cat \"$token_file\" 2>/dev/null || true)\"',\n    '[ -n \"$password\" ] || exit 0',\n    'printf \\'username=%s\\\\npassword=%s\\\\n\\' \"$username\" \"$password\"',\n    \"GIT_CREDENTIAL_HELPER_EOF\",\n    'chmod 0755 \"$git_credential_helper.tmp.$$\"',\n    'mv -f \"$git_credential_helper.tmp.$$\" \"$git_credential_helper\"',\n    // Empty helper resets lower-priority/system helpers; our exact path-aware\n    // helper returns no credential for an unbound remote, so multi-binding\n    // sessions fail closed instead of falling through to ambient credentials.\n    \"git config --global --unset-all credential.helper >/dev/null 2>&1 || true\",\n    \"git config --global --add credential.helper ''\",\n    'git config --global --add credential.helper \"$git_credential_helper\"',\n    \"git config --global credential.useHttpPath true\",\n    ...gitHttpBrokerConfigCommandLines(brokerRoutes),\n    'wrapper_dir=\"${OPENGENI_GIT_CLI_WRAPPER_DIR:-$HOME/.opengeni/bin}\"',\n    'mkdir -p \"$wrapper_dir\"',\n    \"for opengeni_git_cli_tool in gh glab az; do\",\n    '  wrapper=\"$wrapper_dir/$opengeni_git_cli_tool\"',\n    \"  cat > \\\"$wrapper.tmp.$$\\\" <<'CLI_WRAPPER_EOF'\",\n    \"#!/usr/bin/env sh\",\n    \"set -eu\",\n    'tool=\"${0##*/}\"',\n    'case \"$tool\" in',\n    \"  gh) provider=github; token_env=GH_TOKEN ;;\",\n    \"  glab) provider=gitlab; token_env=GITLAB_TOKEN ;;\",\n    \"  az) provider=azure_devops; token_env=AZURE_DEVOPS_EXT_PAT ;;\",\n    \"  *) provider=; token_env= ;;\",\n    \"esac\",\n    \"hash_binding_id() {\",\n    \"  if command -v sha256sum >/dev/null 2>&1; then printf '%s' \\\"$1\\\" | sha256sum | cut -c1-32; return; fi\",\n    \"  if command -v shasum >/dev/null 2>&1; then printf '%s' \\\"$1\\\" | shasum -a 256 | cut -c1-32; return; fi\",\n    \"  if command -v openssl >/dev/null 2>&1; then printf '%s' \\\"$1\\\" | openssl dgst -sha256 | sed 's/^.*= //' | cut -c1-32; return; fi\",\n    \"  printf '%s\\\\n' 'No SHA-256 utility is available to select OPENGENI_GIT_BINDING' >&2\",\n    \"  return 127\",\n    \"}\",\n    \"binding_hash_allowed() {\",\n    '  case \"$provider|$1\" in',\n    ...allowedWrapperHashes,\n    \"    *) return 1 ;;\",\n    \"  esac\",\n    \"}\",\n    \"binding_hash_is_brokered() {\",\n    '  case \"$provider|$1\" in',\n    ...brokeredBindingHashCases,\n    \"    *) return 1 ;;\",\n    \"  esac\",\n    \"}\",\n    \"binding_hash_for_origin() {\",\n    '  case \"$provider|$1\" in',\n    ...originWrapperHashes,\n    \"    *) return 1 ;;\",\n    \"  esac\",\n    \"}\",\n    \"origin_is_brokered() {\",\n    '  case \"$provider|$1\" in',\n    ...brokeredOriginCases,\n    \"    *) return 1 ;;\",\n    \"  esac\",\n    \"}\",\n    \"sole_binding_hash() {\",\n    '  case \"$provider\" in',\n    ...soleWrapperHashes,\n    \"    *) return 1 ;;\",\n    \"  esac\",\n    \"}\",\n    `multi_binding_providers=${shellQuote(multiWrapperProviders.join(\" \"))}`,\n    `broker_only_providers=${shellQuote(brokerOnlyProviders.join(\" \"))}`,\n    'if [ -n \"$provider\" ]; then',\n    \"  binding_hash=\",\n    '  if [ -n \"${OPENGENI_GIT_BINDING:-}\" ]; then',\n    '    binding_hash=\"$(hash_binding_id \"$OPENGENI_GIT_BINDING\")\"',\n    '    binding_hash_is_brokered \"$binding_hash\" && { printf \\'%s\\\\n\\' \"$tool provider API authentication is host-brokered for OPENGENI_GIT_BINDING; use the configured provider MCP tools\" >&2; exit 2; }',\n    '    binding_hash_allowed \"$binding_hash\" || { printf \\'%s\\\\n\\' \"OPENGENI_GIT_BINDING does not select a $provider credential attached to this session\" >&2; exit 2; }',\n    \"  elif command -v git >/dev/null 2>&1; then\",\n    '    origin=\"$(git config --get remote.origin.url 2>/dev/null || true)\"',\n    '    [ -z \"$origin\" ] || ! origin_is_brokered \"$origin\" || { printf \\'%s\\\\n\\' \"$tool provider API authentication is host-brokered for this repository; use the configured provider MCP tools\" >&2; exit 2; }',\n    '    [ -z \"$origin\" ] || binding_hash=\"$(binding_hash_for_origin \"$origin\" 2>/dev/null || true)\"',\n    \"  fi\",\n    '  [ -n \"$binding_hash\" ] || binding_hash=\"$(sole_binding_hash 2>/dev/null || true)\"',\n    '  if [ -n \"$binding_hash\" ]; then',\n    '    token_file=\"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}/$binding_hash-token\"',\n    \"  else\",\n    '    case \" $broker_only_providers \" in',\n    '      *\" $provider \"*) printf \\'%s\\\\n\\' \"$tool provider API authentication is host-brokered for this session; use the configured provider MCP tools\" >&2; exit 2 ;;',\n    \"    esac\",\n    '    case \" $multi_binding_providers \" in',\n    '      *\" $provider \"*) printf \\'%s\\\\n\\' \"Unable to select one of multiple $provider credentials; run inside an attached repository, or inspect ${OPENGENI_GIT_BINDINGS_FILE:-$HOME/.opengeni/git-bindings.json} and set OPENGENI_GIT_BINDING\" >&2; exit 2 ;;',\n    \"    esac\",\n    '    case \"$provider\" in',\n    '      github) token_file=\"${OPENGENI_GIT_TOKEN_FILE:-$HOME/.opengeni/git-token}\" ;;',\n    '      *) token_file=\"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}/$provider-token\" ;;',\n    \"    esac\",\n    \"  fi\",\n    '  if [ -f \"$token_file\" ]; then',\n    '    token=\"$(cat \"$token_file\" 2>/dev/null || true)\"',\n    '    if [ -n \"$token\" ]; then',\n    '      case \"$token_env\" in',\n    '        GH_TOKEN) export GH_TOKEN=\"$token\" ;;',\n    '        GITLAB_TOKEN) export GITLAB_TOKEN=\"$token\" ;;',\n    '        AZURE_DEVOPS_EXT_PAT) export AZURE_DEVOPS_EXT_PAT=\"$token\" ;;',\n    \"      esac\",\n    \"    fi\",\n    \"  fi\",\n    \"fi\",\n    'self_real=\"$(readlink -f \"$0\" 2>/dev/null || printf \\'%s\\\\n\\' \"$0\")\"',\n    'old_ifs=\"$IFS\"',\n    \"IFS=:\",\n    \"for dir in $PATH; do\",\n    '  [ -n \"$dir\" ] || dir=.',\n    '  candidate=\"$dir/$tool\"',\n    '  [ -x \"$candidate\" ] || continue',\n    '  candidate_real=\"$(readlink -f \"$candidate\" 2>/dev/null || printf \\'%s\\\\n\\' \"$candidate\")\"',\n    '  [ \"$candidate_real\" = \"$self_real\" ] && continue',\n    '  IFS=\"$old_ifs\"',\n    '  exec \"$candidate\" \"$@\"',\n    \"done\",\n    'IFS=\"$old_ifs\"',\n    \"printf '%s\\\\n' \\\"$tool: real command not found on PATH\\\" >&2\",\n    \"exit 127\",\n    \"CLI_WRAPPER_EOF\",\n    '  chmod 0755 \"$wrapper.tmp.$$\"',\n    '  mv -f \"$wrapper.tmp.$$\" \"$wrapper\"',\n    \"done\",\n  ];\n}\n\n/**\n * Build the off-manifest command used to atomically replace provider token files.\n *\n * Token values exist only in this one sandbox exec command. The stable askpass\n * and provider-CLI wrappers always read the files at invocation time, so an\n * in-flight multi-day turn observes the replacement without changing its\n * manifest environment or rebuilding the sandbox.\n */\nexport function gitProviderTokenRefreshCommand(seeds: GitTokenSeeds): string {\n  const seedPrefix = gitTokenSeedExportPrefix(seeds);\n  if (!seedPrefix) {\n    return \"\";\n  }\n  return [\n    \"set +x\",\n    seedPrefix,\n    \"set -eu\",\n    'export HOME=\"${HOME:-/workspace}\"',\n    ...gitCredentialTokenWriterCommandLines(),\n  ].join(\"\\n\");\n}\n\nexport function gitCredentialBindingTokenRefreshCommand(\n  bindings: GitCredentialBindingSeed[],\n): string {\n  const seedPrefix = gitCredentialBindingSeedExportPrefix(bindings);\n  if (!seedPrefix) return \"\";\n  return [\n    \"set +x\",\n    seedPrefix,\n    \"set -eu\",\n    'export HOME=\"${HOME:-/workspace}\"',\n    ...gitCredentialTokenWriterCommandLines(bindings),\n  ].join(\"\\n\");\n}\n\nexport async function refreshGitProviderTokenFiles(\n  session: GitCredentialTokenWriterSession,\n  seeds: GitTokenSeeds,\n  options: { runAs?: string; commandRunner?: SandboxLifecycleCommandRunner } = {},\n): Promise<void> {\n  const command = gitProviderTokenRefreshCommand(seeds);\n  if (!command) {\n    return;\n  }\n  const args = {\n    cmd: command,\n    workdir: \"/workspace\",\n    ...(options.runAs ? { runAs: options.runAs } : {}),\n    yieldTimeMs: SANDBOX_LIFECYCLE_COMMAND_TIMEOUT_MS,\n    maxOutputTokens: 4_000,\n  };\n  assertSandboxCommandSucceeded(\n    await runSandboxLifecycleCommand(session, args, options.commandRunner),\n    \"Git credential refresh\",\n  );\n}\n\nexport async function refreshGitCredentialBindingTokenFiles(\n  session: GitCredentialTokenWriterSession,\n  bindings: GitCredentialBindingSeed[],\n  options: { runAs?: string; commandRunner?: SandboxLifecycleCommandRunner } = {},\n): Promise<void> {\n  const command = gitCredentialBindingTokenRefreshCommand(bindings);\n  if (!command) return;\n  const args = {\n    cmd: command,\n    workdir: \"/workspace\",\n    ...(options.runAs ? { runAs: options.runAs } : {}),\n    yieldTimeMs: SANDBOX_LIFECYCLE_COMMAND_TIMEOUT_MS,\n    maxOutputTokens: 4_000,\n  };\n  assertSandboxCommandSucceeded(\n    await runSandboxLifecycleCommand(session, args, options.commandRunner),\n    \"Git credential binding refresh\",\n  );\n}\n\nexport function repositoryCloneCommand(\n  resources: Extract<ResourceRef, { kind: \"repository\" }>[],\n  bindings: GitCredentialBindingSeed[] = [],\n): string {\n  assertUniqueResourceMountPaths(resources);\n  const commands = [\n    \"set +x\",\n    \"set -eu\",\n    'export HOME=\"${HOME:-/workspace}\"',\n    'export GIT_TERMINAL_PROMPT=\"${GIT_TERMINAL_PROMPT:-0}\"',\n    \"ensure_git() {\",\n    \"  if command -v git >/dev/null 2>&1; then\",\n    \"    return 0\",\n    \"  fi\",\n    \"  if command -v apt-get >/dev/null 2>&1; then\",\n    \"    export DEBIAN_FRONTEND=noninteractive\",\n    \"    apt-get update >/dev/null\",\n    \"    apt-get install -y --no-install-recommends ca-certificates git >/dev/null\",\n    \"    rm -rf /var/lib/apt/lists/*\",\n    \"    command -v git >/dev/null 2>&1 && return 0\",\n    \"  fi\",\n    '  echo \"git is not installed in the sandbox and could not be bootstrapped\" >&2',\n    \"  exit 127\",\n    \"}\",\n    \"ensure_git\",\n    ...gitCredentialHelperCommandLines(resources, bindings),\n    \"clone_repository() {\",\n    '  target=\"$1\"',\n    '  uri=\"$2\"',\n    '  ref=\"$3\"',\n    '  subpath=\"$4\"',\n    '  if [ -e \"$target\" ] && { [ -f \"$target\" ] || [ -n \"$(find \"$target\" -mindepth 1 -maxdepth 1 -print -quit 2>/dev/null)\" ]; }; then',\n    // This hook re-runs every turn on a long-lived box, so \\\"non-empty\\\" alone is not\n    // proof of a completed materialization: an interrupted clone (worker crash /\n    // lifecycle timeout mid-mv/cp) leaves a partial tree that would otherwise pass\n    // this check forever. A full-repo target must actually BE a work tree to be\n    // skipped; a partial one is wiped and rebuilt (nothing legitimate writes under\n    // the mount path before the repo exists). Subpath extracts are not git repos —\n    // for those the plain non-empty check stands (no stronger signal available).\n    '    if [ -n \"$subpath\" ] || git -C \"$target\" rev-parse --is-inside-work-tree >/dev/null 2>&1; then',\n    '      echo \"Repository resource already present at $target\"',\n    \"      return 0\",\n    \"    fi\",\n    '    echo \"Re-materializing partial repository resource at $target\" >&2',\n    '    find \"$target\" -mindepth 1 -maxdepth 1 -exec rm -rf {} +',\n    \"  fi\",\n    '  mkdir -p \"$(dirname \"$target\")\"',\n    '  tmp=\"${target}.tmp.$$\"',\n    '  rm -rf \"$tmp\"',\n    // Fetch failures must not leak the pid-suffixed tmp clone beside the mount\n    // (set -eu would exit before any cleanup).\n    '  if ! { git init \"$tmp\" >/dev/null && git -C \"$tmp\" remote add origin \"$uri\" && git -C \"$tmp\" fetch --depth 1 --no-tags --filter=blob:none origin \"$ref\" && git -C \"$tmp\" checkout --detach FETCH_HEAD >/dev/null; }; then',\n    '    rm -rf \"$tmp\"',\n    '    echo \"Repository resource fetch failed for $target\" >&2',\n    \"    exit 1\",\n    \"  fi\",\n    '  if [ -n \"$subpath\" ]; then',\n    '    if [ ! -e \"$tmp/$subpath\" ]; then',\n    '      echo \"Repository subpath not found: $subpath\" >&2',\n    '      rm -rf \"$tmp\"',\n    \"      exit 1\",\n    \"    fi\",\n    '    if [ -d \"$tmp/$subpath\" ]; then',\n    '      mkdir -p \"$target\"',\n    '      cp -a \"$tmp/$subpath/.\" \"$target/\"',\n    \"    else\",\n    '      rmdir \"$target\" 2>/dev/null || true',\n    '      cp -a \"$tmp/$subpath\" \"$target\"',\n    \"    fi\",\n    '    rm -rf \"$tmp\"',\n    \"  else\",\n    '    rmdir \"$target\" 2>/dev/null || true',\n    // Two concurrent turn holders can race this install: without the existence\n    // re-check the loser's un-flagged `mv` would nest its tmp clone INSIDE the\n    // winner's tree as <name>.tmp.<pid>. If the winner produced a valid work tree,\n    // accept it; a non-empty non-repo survivor here is a mount point the manifest\n    // re-filled — install into it by content copy instead of rename.\n    '    if [ -e \"$target\" ]; then',\n    '      if git -C \"$target\" rev-parse --is-inside-work-tree >/dev/null 2>&1; then',\n    '        rm -rf \"$tmp\"',\n    '        echo \"Repository resource already present at $target\"',\n    \"        return 0\",\n    \"      fi\",\n    '      cp -a \"$tmp/.\" \"$target/\"',\n    '      rm -rf \"$tmp\"',\n    \"    else\",\n    '      mv \"$tmp\" \"$target\"',\n    \"    fi\",\n    '    git -C \"$target\" rev-parse --is-inside-work-tree >/dev/null',\n    \"  fi\",\n    '  if [ ! -e \"$target\" ]; then',\n    '    echo \"Repository resource was not materialized at $target\" >&2',\n    \"    exit 1\",\n    \"  fi\",\n    '  echo \"Repository resource ready at $target\"',\n    \"}\",\n  ];\n  for (const resource of resources) {\n    const mountPath = resourceMountPath(resource);\n    commands.push(\n      [\n        \"clone_repository\",\n        shellQuote(posixPath.join(\"/workspace\", mountPath)),\n        shellQuote(resource.uri),\n        shellQuote(resource.ref),\n        shellQuote(resource.subpath ? normalizeRepositorySubpath(resource.subpath) : \"\"),\n      ].join(\" \"),\n    );\n  }\n  return commands.join(\"\\n\");\n}\n\nexport function toolspaceTokenSeedCommand(\n  options: { tokenFile?: string; legacyTokenFile?: string } = {},\n): string {\n  return [\n    \"set +x\",\n    \"set -eu\",\n    'export HOME=\"${HOME:-/workspace}\"',\n    'if [ -n \"${OPENGENI_TOOLSPACE_TOKEN_SEED:-}\" ]; then',\n    '  seed_umask=\"$(umask)\"',\n    \"  umask 077\",\n    options.tokenFile\n      ? `  token_file=${shellToolspacePath(options.tokenFile)}`\n      : '  token_file=\"${OPENGENI_TOOLSPACE_TOKEN_FILE:-$HOME/.opengeni/toolspace-token}\"',\n    options.legacyTokenFile\n      ? `  legacy_token_file=${shellToolspacePath(options.legacyTokenFile)}`\n      : '  legacy_token_file=\"\"',\n    '  mkdir -p \"$(dirname \"$token_file\")\"',\n    '  printf \\'%s\\' \"$OPENGENI_TOOLSPACE_TOKEN_SEED\" > \"$token_file.tmp.$$\"',\n    '  mv -f \"$token_file.tmp.$$\" \"$token_file\"',\n    '  if [ -n \"$legacy_token_file\" ] && [ \"$legacy_token_file\" != \"$token_file\" ]; then',\n    '    rm -f -- \"$legacy_token_file\"',\n    \"  fi\",\n    '  umask \"$seed_umask\"',\n    \"fi\",\n  ].join(\"\\n\");\n}\n\nexport async function runToolspaceTokenSeedHook(\n  session: SandboxSessionLike,\n  context: SandboxLifecycleHookContext,\n): Promise<void> {\n  if (!context.toolspaceTokenSeed) {\n    return;\n  }\n  const command = `set +x\\nexport OPENGENI_TOOLSPACE_TOKEN_SEED=${shellQuote(context.toolspaceTokenSeed)}\\n${toolspaceTokenSeedCommand(\n    {\n      ...(context.toolspaceTokenFile ? { tokenFile: context.toolspaceTokenFile } : {}),\n      ...(context.toolspaceTokenFile && context.environment.OPENGENI_TOOLSPACE_TOKEN_FILE\n        ? { legacyTokenFile: context.environment.OPENGENI_TOOLSPACE_TOKEN_FILE }\n        : {}),\n    },\n  )}`;\n  const result = await runSandboxLifecycleCommand(\n    session,\n    {\n      cmd: command,\n      workdir: \"/workspace\",\n      ...(context.runAs ? { runAs: context.runAs } : {}),\n      yieldTimeMs: SANDBOX_LIFECYCLE_COMMAND_TIMEOUT_MS,\n      maxOutputTokens: 4_000,\n    },\n    context.commandRunner,\n  );\n  assertSandboxCommandSucceeded(result, \"Toolspace token seed hook\");\n}\n\nexport async function refreshToolspaceTokenFile(\n  session: ToolspaceTokenWriterSession,\n  token: string,\n  options: {\n    runAs?: string;\n    commandRunner?: SandboxLifecycleCommandRunner;\n    tokenFile?: string;\n    legacyTokenFile?: string;\n  } = {},\n): Promise<void> {\n  const command = `set +x\\nexport OPENGENI_TOOLSPACE_TOKEN_SEED=${shellQuote(token)}\\n${toolspaceTokenSeedCommand(\n    {\n      ...(options.tokenFile ? { tokenFile: options.tokenFile } : {}),\n      ...(options.legacyTokenFile ? { legacyTokenFile: options.legacyTokenFile } : {}),\n    },\n  )}`;\n  const result = await runSandboxLifecycleCommand(\n    session,\n    {\n      cmd: command,\n      workdir: \"/workspace\",\n      ...(options.runAs ? { runAs: options.runAs } : {}),\n      yieldTimeMs: SANDBOX_LIFECYCLE_COMMAND_TIMEOUT_MS,\n      maxOutputTokens: 4_000,\n    },\n    options.commandRunner,\n  );\n  assertSandboxCommandSucceeded(result, \"Toolspace token refresh\");\n}\n\n// Bounds the setup output tail carried on a rig.setup failure event/error so a\n// runaway script can't bloat the session's event stream or the turn error.\nconst RIG_SETUP_OUTPUT_TAIL_LIMIT = 4_000;\n\n// A distinctive sentinel the guard prints when the idempotence marker already\n// exists, so the runtime can tell a SKIP from an actual run without a second\n// exec round-trip.\nconst RIG_SETUP_SKIPPED_SENTINEL = \"__OPENGENI_RIG_SETUP_SKIPPED__\";\n\n/**\n * The rig-setup command (M3). One idempotent bash program:\n *   1. `mkdir -p /var/opengeni` and, if the per-version marker already exists,\n *      print the SKIP sentinel and exit 0 (a warm box re-running the hook).\n *   2. otherwise atomically claim a per-version lock directory. A loser waits\n *      for the winner's marker, then skips; if the winner fails and releases the\n *      lock, the loser retries the claim.\n *   3. the winner writes the rig's setup script to a temp file and runs it under\n *      coreutils `timeout` (NOT `bash -e` — the script opts into `set -e`\n *      itself if it wants), then captures the exit code and `touch`es the marker\n *      ONLY on success (exit 0) so a failed/timed-out setup re-runs next turn.\n * The heredoc delimiter is quoted, so the script content is executed verbatim\n * with no host-side expansion.\n */\nexport function rigSetupScriptCommand(\n  script: string,\n  versionId: string,\n  timeoutMs = 600_000,\n  markerRoot = \"/var/opengeni\",\n): string {\n  const timeoutSecs = Math.max(1, Math.ceil(timeoutMs / 1000));\n  const lockWaitSecs = timeoutSecs + 6;\n  const marker = `${markerRoot.replace(/\\/+$/, \"\")}/rig-setup-${versionId}.done`;\n  return [\n    \"set -u\",\n    `mkdir -p ${shellQuote(markerRoot)}`,\n    `__OG_RIG_MARKER=${shellQuote(marker)}`,\n    '__OG_RIG_LOCK=\"$__OG_RIG_MARKER.lock\"',\n    `__OG_RIG_TIMEOUT_SECS=${timeoutSecs}`,\n    `__OG_RIG_LOCK_WAIT_SECS=${lockWaitSecs}`,\n    `if [ -f \"$__OG_RIG_MARKER\" ]; then printf '%s\\\\n' ${shellQuote(RIG_SETUP_SKIPPED_SENTINEL)}; exit 0; fi`,\n    \"while :; do\",\n    '  if mkdir \"$__OG_RIG_LOCK\" 2>/dev/null; then',\n    \"    trap 'rm -rf \\\"$__OG_RIG_LOCK\\\"' EXIT\",\n    `    if [ -f \"$__OG_RIG_MARKER\" ]; then printf '%s\\\\n' ${shellQuote(RIG_SETUP_SKIPPED_SENTINEL)}; exit 0; fi`,\n    '__OG_RIG_SCRIPT=\"$(mktemp)\"',\n    \"cat > \\\"$__OG_RIG_SCRIPT\\\" <<'__OPENGENI_RIG_SETUP_SCRIPT_EOF__'\",\n    script,\n    \"__OPENGENI_RIG_SETUP_SCRIPT_EOF__\",\n    '    timeout -k 5s \"${__OG_RIG_TIMEOUT_SECS}s\" bash \"$__OG_RIG_SCRIPT\"',\n    \"__OG_RIG_RC=$?\",\n    '    rm -f \"$__OG_RIG_SCRIPT\"',\n    '    if [ \"$__OG_RIG_RC\" -eq 0 ]; then touch \"$__OG_RIG_MARKER\"; fi',\n    '    exit \"$__OG_RIG_RC\"',\n    \"  fi\",\n    \"  __OG_RIG_WAITED=0\",\n    '  while [ \"$__OG_RIG_WAITED\" -lt \"$__OG_RIG_LOCK_WAIT_SECS\" ]; do',\n    `    if [ -f \"$__OG_RIG_MARKER\" ]; then printf '%s\\\\n' ${shellQuote(RIG_SETUP_SKIPPED_SENTINEL)}; exit 0; fi`,\n    '    if [ ! -d \"$__OG_RIG_LOCK\" ]; then break; fi',\n    \"    sleep 1\",\n    \"    __OG_RIG_WAITED=$((__OG_RIG_WAITED + 1))\",\n    \"  done\",\n    `  if [ -f \"$__OG_RIG_MARKER\" ]; then printf '%s\\\\n' ${shellQuote(RIG_SETUP_SKIPPED_SENTINEL)}; exit 0; fi`,\n    '  if [ ! -d \"$__OG_RIG_LOCK\" ]; then continue; fi',\n    '  rmdir \"$__OG_RIG_LOCK\" 2>/dev/null || true',\n    \"done\",\n  ].join(\"\\n\");\n}\n\n/**\n * The rig-setup beforeAgentStart hook (M3). Runs the frozen rig version's setup\n * script exactly once per box (marker-guarded), under the RIG's own timeout\n * (context.rigSetup.timeoutMs, NOT the 120s lifecycle default). Emits\n * rig.setup.started, then one terminal event:\n *   - rig.setup.skipped   — marker already present,\n *   - rig.setup.completed — script ran and exited 0,\n *   - rig.setup.failed    — nonzero exit / timeout,\n * and on failure THROWS (fail the turn closed) with a message naming the\n * rig/version and a bounded tail of the setup output.\n */\nexport async function runRigSetupHook(\n  session: SandboxSessionLike,\n  context: SandboxLifecycleHookContext = { environment: {} },\n): Promise<void> {\n  const rigSetup = context.rigSetup;\n  if (!rigSetup) {\n    return;\n  }\n  const payload = {\n    rigId: rigSetup.rigId,\n    versionId: rigSetup.versionId,\n    rigName: rigSetup.rigName,\n  };\n  await context.onRuntimeEvent?.({ type: \"rig.setup.started\", payload });\n  const command = rigSetupScriptCommand(rigSetup.script, rigSetup.versionId, rigSetup.timeoutMs);\n  const execArgs = {\n    cmd: command,\n    workdir: \"/workspace\",\n    ...(context.runAs ? { runAs: context.runAs } : {}),\n    // The in-box coreutils timeout is the hard deadline; the SDK yield waits a\n    // little longer so it observes timeout's non-zero exit instead of a live\n    // still-running process.\n    yieldTimeMs: rigSetup.timeoutMs + 7_000,\n    maxOutputTokens: 20_000,\n  };\n  let result: unknown;\n  try {\n    result = await runSandboxLifecycleCommand(session, execArgs, context.commandRunner);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    await context.onRuntimeEvent?.({\n      type: \"rig.setup.failed\",\n      payload: {\n        ...payload,\n        error: message.slice(-RIG_SETUP_OUTPUT_TAIL_LIMIT),\n      },\n    });\n    throw new Error(\n      `Rig setup failed for rig \"${rigSetup.rigName}\" (version ${rigSetup.versionId}): ${message}`,\n      { cause: error },\n    );\n  }\n  const output = sandboxCommandOutput(result);\n  // Marker present → the guard skipped the script. Distinct terminal signal.\n  if (output.includes(RIG_SETUP_SKIPPED_SENTINEL)) {\n    await context.onRuntimeEvent?.({ type: \"rig.setup.skipped\", payload });\n    return;\n  }\n  // Ran → classify. A \"still running\" result means the script outlived the rig\n  // timeout; any nonzero/absent exit code is a setup failure. Both fail closed.\n  const stillRunning = sandboxCommandStillRunning(result);\n  const exitCode = sandboxCommandExitCode(result);\n  if (stillRunning || exitCode === null || exitCode !== 0) {\n    const tail =\n      output.length > RIG_SETUP_OUTPUT_TAIL_LIMIT\n        ? output.slice(-RIG_SETUP_OUTPUT_TAIL_LIMIT)\n        : output;\n    const reason = stillRunning\n      ? `did not finish within the rig setup timeout (${rigSetup.timeoutMs}ms)`\n      : exitCode === null\n        ? \"did not report an exit code\"\n        : `exited with code ${exitCode}`;\n    const failure = new Error(\n      `Rig setup failed for rig \"${rigSetup.rigName}\" (version ${rigSetup.versionId}): the setup script ${reason}${tail ? `:\\n${tail}` : \"\"}`,\n    );\n    await context.onRuntimeEvent?.({\n      type: \"rig.setup.failed\",\n      payload: {\n        ...payload,\n        error: failure.message.slice(-RIG_SETUP_OUTPUT_TAIL_LIMIT),\n      },\n    });\n    throw failure;\n  }\n  await context.onRuntimeEvent?.({\n    type: \"rig.setup.completed\",\n    payload: { ...payload, skipped: false },\n  });\n}\n\nexport async function runRepositoryCloneHook(\n  session: SandboxSessionLike,\n  resources: Extract<ResourceRef, { kind: \"repository\" }>[],\n  context: SandboxLifecycleHookContext = { environment: {} },\n): Promise<void> {\n  const payload = {\n    name: \"repository-clone\",\n    repositoryCount: resources.length,\n  };\n  await context.onRuntimeEvent?.({\n    type: \"sandbox.operation.started\",\n    payload,\n  });\n  try {\n    // TOKEN-BROKER (B1): thread run-scoped provider tokens PER-EXEC, never on\n    // the manifest. The SDK's ExecCommandArgs has no `environment` field (exec\n    // inherits the box's manifest env), so we can't hand seeds through an exec\n    // option — and we MUST NOT put them on the manifest (validateNoEnvironmentDelta\n    // would see rotating values). We inline ephemeral `export` prefixes on THIS\n    // exec's command text only. The clone command writes them to provider token\n    // FILES before fetch/CLI use. Absent seeds -> no prefix; helper wrappers still\n    // install and passthrough cleanly.\n    const gitTokenSeeds = {\n      ...(context.gitTokenSeeds ?? {}),\n      ...(context.gitTokenSeed ? { github: context.gitTokenSeed } : {}),\n    } satisfies GitTokenSeeds;\n    const gitCredentialBindings = context.gitCredentialBindings ?? [];\n    const seedPrefix = [\n      gitTokenSeedExportPrefix(gitTokenSeeds),\n      gitCredentialBindingSeedExportPrefix(gitCredentialBindings),\n    ]\n      .filter(Boolean)\n      .join(\"\\n\");\n    const cloneCommand = repositoryCloneCommand(resources, gitCredentialBindings);\n    const command = seedPrefix ? `set +x\\n${seedPrefix}\\n${cloneCommand}` : cloneCommand;\n    const result = await runSandboxLifecycleCommand(\n      session,\n      {\n        cmd: command,\n        workdir: \"/workspace\",\n        ...(context.runAs ? { runAs: context.runAs } : {}),\n        yieldTimeMs: SANDBOX_LIFECYCLE_COMMAND_TIMEOUT_MS,\n        maxOutputTokens: 20_000,\n      },\n      context.commandRunner,\n    );\n    assertSandboxCommandSucceeded(result, \"Repository clone hook\");\n    await context.onRuntimeEvent?.({\n      type: \"sandbox.operation.completed\",\n      payload,\n    });\n  } catch (error) {\n    await context.onRuntimeEvent?.({\n      type: \"sandbox.operation.failed\",\n      payload: {\n        ...payload,\n        error: error instanceof Error ? error.message : String(error),\n      },\n    });\n    throw error;\n  }\n}\n\nexport function azureCliLoginCommand(): string {\n  return [\n    \"set +x\",\n    'export HOME=\"${HOME:-/workspace}\"',\n    'mkdir -p \"$HOME/.azure\"',\n    'CLIENT_ID=\"${AZURE_CLIENT_ID:-${ARM_CLIENT_ID:-}}\"',\n    'CLIENT_SECRET=\"${AZURE_CLIENT_SECRET:-${ARM_CLIENT_SECRET:-}}\"',\n    'TENANT_ID=\"${AZURE_TENANT_ID:-${ARM_TENANT_ID:-}}\"',\n    'SUBSCRIPTION_ID=\"${AZURE_SUBSCRIPTION_ID:-${ARM_SUBSCRIPTION_ID:-}}\"',\n    'if [ -n \"$CLIENT_ID\" ] && [ -n \"$CLIENT_SECRET\" ] && [ -n \"$TENANT_ID\" ]; then',\n    '  command -v az >/dev/null 2>&1 || { echo \"Azure CLI is not installed in the sandbox\" >&2; exit 127; }',\n    '  az account show --only-show-errors >/dev/null 2>&1 || az login --service-principal --username \"$CLIENT_ID\" --password \"$CLIENT_SECRET\" --tenant \"$TENANT_ID\" --allow-no-subscriptions --only-show-errors --output none',\n    // if/fi, NOT `[ -n ] && az`: this line ends the credentialed if-body, so with a\n    // no-subscription SP (an explicitly supported config — the login above passes\n    // --allow-no-subscriptions) the bare `[ -n ]` would exit the whole script 1 and\n    // fail the turn.\n    '  if [ -n \"$SUBSCRIPTION_ID\" ]; then az account set --subscription \"$SUBSCRIPTION_ID\" --only-show-errors; fi',\n    \"fi\",\n  ].join(\"\\n\");\n}\n\nexport function sandboxCommandExitCode(result: unknown): number | null {\n  if (typeof result === \"string\") {\n    const match = result.match(/Process exited with code (-?\\d+)/);\n    return match ? Number(match[1]) : null;\n  }\n  if (!result || typeof result !== \"object\") {\n    return null;\n  }\n  const candidate = result as {\n    exitCode?: unknown;\n    exit_code?: unknown;\n    code?: unknown;\n    status?: unknown;\n  };\n  for (const value of [candidate.exitCode, candidate.exit_code, candidate.code, candidate.status]) {\n    if (typeof value === \"number\") {\n      return value;\n    }\n  }\n  return null;\n}\n\nexport function sandboxCommandOutput(result: unknown): string {\n  if (typeof result === \"string\") {\n    const outputIndex = result.indexOf(\"Output:\");\n    return outputIndex >= 0 ? result.slice(outputIndex + \"Output:\".length).trim() : result.trim();\n  }\n  if (!result || typeof result !== \"object\") {\n    return \"\";\n  }\n  const candidate = result as {\n    output?: unknown;\n    stdout?: unknown;\n    stderr?: unknown;\n  };\n  return [candidate.output, candidate.stderr, candidate.stdout]\n    .filter((value): value is string => typeof value === \"string\" && value.length > 0)\n    .join(\"\\n\");\n}\n\nfunction assertSandboxCommandSucceeded(result: unknown, operation: string): void {\n  const output = sandboxCommandOutput(result);\n  if (sandboxCommandStillRunning(result)) {\n    throw new Error(\n      `${operation} did not finish before the lifecycle command timeout${output ? `:\\n${output}` : \"\"}`,\n    );\n  }\n  const exitCode = sandboxCommandExitCode(result);\n  if (exitCode !== null && exitCode !== 0) {\n    throw new Error(\n      `${operation} failed with exit code ${exitCode}${output ? `:\\n${output}` : \"\"}`,\n    );\n  }\n  if (exitCode === null) {\n    throw new Error(output || `${operation} did not return a command exit code`);\n  }\n}\n\nexport function sandboxCommandStillRunning(result: unknown): boolean {\n  if (typeof result === \"string\") {\n    return /Process running with session ID \\d+/u.test(result);\n  }\n  if (!result || typeof result !== \"object\") {\n    return false;\n  }\n  const candidate = result as { sessionId?: unknown; session_id?: unknown };\n  return typeof candidate.sessionId === \"number\" || typeof candidate.session_id === \"number\";\n}\n\nfunction hasAzureServicePrincipal(environment: Record<string, string>): boolean {\n  const clientId = environment.AZURE_CLIENT_ID || environment.ARM_CLIENT_ID;\n  const clientSecret = environment.AZURE_CLIENT_SECRET || environment.ARM_CLIENT_SECRET;\n  const tenantId = environment.AZURE_TENANT_ID || environment.ARM_TENANT_ID;\n  return Boolean(clientId && clientSecret && tenantId);\n}\n\nexport async function runAzureCliLoginHook(\n  session: SandboxSessionLike,\n  context: SandboxLifecycleHookContext = { environment: {} },\n): Promise<void> {\n  const payload = {\n    name: \"azure-cli-login\",\n    command: \"az login --service-principal\",\n  };\n  await context.onRuntimeEvent?.({\n    type: \"sandbox.operation.started\",\n    payload,\n  });\n  try {\n    const result = await runSandboxLifecycleCommand(\n      session,\n      {\n        cmd: azureCliLoginCommand(),\n        workdir: \"/workspace\",\n        ...(context.runAs ? { runAs: context.runAs } : {}),\n        yieldTimeMs: SANDBOX_LIFECYCLE_COMMAND_TIMEOUT_MS,\n        maxOutputTokens: 20_000,\n      },\n      context.commandRunner,\n    );\n    assertSandboxCommandSucceeded(result, \"Azure CLI login hook\");\n    await context.onRuntimeEvent?.({\n      type: \"sandbox.operation.completed\",\n      payload,\n    });\n  } catch (error) {\n    await context.onRuntimeEvent?.({\n      type: \"sandbox.operation.failed\",\n      payload: {\n        ...payload,\n        error: error instanceof Error ? error.message : String(error),\n      },\n    });\n    throw error;\n  }\n}\n\nfunction azureDeploymentBaseUrl(settings: Settings): string {\n  const endpoint = settings.azureOpenaiEndpoint?.replace(/\\/+$/, \"\");\n  if (!endpoint || !settings.azureOpenaiDeployment) {\n    throw new Error(\"Azure OpenAI endpoint/deployment settings are incomplete\");\n  }\n  return `${endpoint}/openai/deployments/${settings.azureOpenaiDeployment}`;\n}\n\nexport function azureOpenAIDefaultQuery(\n  settings: Pick<Settings, \"azureOpenaiApiVersion\">,\n  baseURL: string,\n): Record<string, string> | undefined {\n  if (!settings.azureOpenaiApiVersion) return undefined;\n  const normalized = baseURL.replace(/\\/+$/, \"\").toLowerCase();\n  if (normalized.endsWith(\"/openai/v1\")) {\n    return undefined;\n  }\n  return { \"api-version\": settings.azureOpenaiApiVersion };\n}\n\n// Since @openai/agents 0.11.0 local sandbox sources (including the lazy\n// bundled-skills source) must stay within the SDK process working directory:\n// reads outside it require manifest.extraPathGrants, and remote sandbox\n// clients such as Modal reject manifests that carry extra path grants. The\n// packaged skills live inside the runtime package — outside the worker's cwd\n// in production — so stage a copy under the working directory once per\n// process instead of granting the packaged path.\nlet stagedBundledSkillsDir: string | null = null;\n\nfunction bundledSkillsDir(): string {\n  const moduleDir = dirname(fileURLToPath(import.meta.url));\n  const packaged =\n    [\n      join(moduleDir, \"bundled_hashicorp_terraform_skills\"),\n      join(moduleDir, \"..\", \"src\", \"bundled_hashicorp_terraform_skills\"),\n    ].find((candidate) => existsSync(candidate)) ??\n    join(moduleDir, \"bundled_hashicorp_terraform_skills\");\n  if (isPathWithin(process.cwd(), packaged)) {\n    return packaged;\n  }\n  if (!stagedBundledSkillsDir) {\n    stagedBundledSkillsDir = stageBundledSkills(\n      packaged,\n      join(process.cwd(), \".opengeni\", \"bundled_hashicorp_terraform_skills\"),\n    );\n  }\n  return stagedBundledSkillsDir;\n}\n\nfunction stageBundledSkills(packaged: string, target: string): string {\n  const tmp = `${target}.tmp-${process.pid}`;\n  rmSync(tmp, { recursive: true, force: true });\n  mkdirSync(dirname(tmp), { recursive: true });\n  cpSync(packaged, tmp, { recursive: true });\n  rmSync(target, { recursive: true, force: true });\n  try {\n    renameSync(tmp, target);\n  } catch (error) {\n    // Another process staged the same content between our rm and rename.\n    rmSync(tmp, { recursive: true, force: true });\n    if (!existsSync(target)) {\n      throw error;\n    }\n  }\n  return target;\n}\n\nfunction isPathWithin(root: string, candidate: string): boolean {\n  const relativePath = relative(root, candidate);\n  return relativePath === \"\" || (!relativePath.startsWith(\"..\") && !isAbsolute(relativePath));\n}\n\n/**\n * The skill source fed to the SDK Skills capability. Without pack or curated\n * skills this is the plain bundled local-dir source, byte-for-byte the\n * pre-pack behavior. With either selected source it becomes a single\n * in-memory dir source combining bundled skill directories (as local_dir\n * entries the SDK materializes lazily) with selected in-memory skill\n * directories — one skill index, one `## Skills` instruction section, lazy\n * `load_skill` for all of them. A pack skill shadows a bundled or curated\n * skill with the same directory name, case-insensitively.\n */\nexport function lazySkillSourceWithPackSkills(\n  packSkills: PackSkill[],\n  skillLibrarySkills: PackSkill[] = [],\n): LocalDirLazySkillSource {\n  const bundledDir = bundledSkillsDir();\n  const bundled = localDirLazySkillSource({ src: bundledDir });\n  if (packSkills.length === 0 && skillLibrarySkills.length === 0) {\n    return bundled;\n  }\n  const children: Record<string, Entry> = {};\n  for (const name of bundledSkillDirNames(bundledDir)) {\n    children[name] = localDir({ src: join(bundledDir, name) });\n  }\n  const libraryIndex: SkillIndexEntry[] = [];\n  const libraryNameKeys = new Set<string>();\n  for (const skill of skillLibrarySkills) {\n    assertSafePackSkillName(skill.name);\n    const key = skill.name.toLowerCase();\n    if (libraryNameKeys.has(key)) {\n      throw new Error(`Duplicate curated skill name: ${skill.name}`);\n    }\n    libraryNameKeys.add(key);\n    removeSkillChildByNameKey(children, key);\n    children[skill.name] = packSkillDirEntry(skill);\n    libraryIndex.push({\n      name: skill.name,\n      description: packSkillDescription(skill),\n      path: skill.name,\n    });\n  }\n  const packIndex: SkillIndexEntry[] = [];\n  const packNameKeys = new Set<string>();\n  for (const skill of packSkills) {\n    assertSafePackSkillName(skill.name);\n    if (packNameKeys.has(skill.name.toLowerCase())) {\n      throw new Error(`Duplicate pack skill name: ${skill.name}`);\n    }\n    packNameKeys.add(skill.name.toLowerCase());\n    removeSkillChildByNameKey(children, skill.name.toLowerCase());\n    children[skill.name] = packSkillDirEntry(skill);\n    packIndex.push({\n      name: skill.name,\n      description: packSkillDescription(skill),\n      path: skill.name,\n    });\n  }\n  return {\n    source: dir({ children }),\n    getIndex: (manifest, skillsPath) => [\n      ...(bundled.getIndex?.(manifest, skillsPath) ?? []).filter(\n        (entry) =>\n          !packNameKeys.has((entry.path ?? entry.name).toLowerCase()) &&\n          !libraryNameKeys.has((entry.path ?? entry.name).toLowerCase()),\n      ),\n      ...libraryIndex.filter(\n        (entry) => !packNameKeys.has((entry.path ?? entry.name).toLowerCase()),\n      ),\n      ...packIndex,\n    ],\n  };\n}\n\nfunction effectiveSkillSelections(\n  librarySelections: readonly EffectiveSkillSelection[],\n  librarySkills: readonly PackSkill[],\n  packSkills: readonly PackSkill[],\n  sessionSkills: readonly PackSkill[],\n): readonly EffectiveSkillSelection[] {\n  const defaultSelections = bundledSkillDirNames(bundledSkillsDir()).map((name) => ({\n    id: `bundled:${name}`,\n    name,\n    source: \"bundled\" as const,\n    version: null,\n    contentSha256: null,\n    reason: \"deployment default skill bundle\",\n  }));\n  const libraryNameKeys = new Set(librarySkills.map((skill) => skill.name.toLowerCase()));\n  const packNameKeys = new Set(packSkills.map((skill) => skill.name.toLowerCase()));\n  const effectiveSessionSkills = sessionSkillsForMaterialization(\n    packSkills,\n    librarySkills,\n    sessionSkills,\n  );\n  const sessionNameKeys = new Set(effectiveSessionSkills.map((skill) => skill.name.toLowerCase()));\n  const selected = librarySelections.filter((selection) =>\n    libraryNameKeys.has(selection.name.toLowerCase()),\n  );\n  return [\n    ...defaultSelections.filter(\n      (selection) =>\n        !libraryNameKeys.has(selection.name.toLowerCase()) &&\n        !packNameKeys.has(selection.name.toLowerCase()) &&\n        !sessionNameKeys.has(selection.name.toLowerCase()),\n    ),\n    ...selected.filter(\n      (selection) =>\n        !packNameKeys.has(selection.name.toLowerCase()) &&\n        !sessionNameKeys.has(selection.name.toLowerCase()),\n    ),\n    ...packSkills.map((skill) => ({\n      id: `pack:${skill.name}`,\n      name: skill.name,\n      source: \"pack\" as const,\n      version: null,\n      contentSha256: null,\n      reason: \"enabled capability pack\",\n    })),\n    ...effectiveSessionSkills.map((skill) => ({\n      id: `session:${skill.name}`,\n      name: skill.name,\n      source: \"session\" as const,\n      version: null,\n      contentSha256: null,\n      reason: \"attached to session\",\n    })),\n  ];\n}\n\nfunction sessionSkillsForMaterialization(\n  packSkills: readonly PackSkill[],\n  librarySkills: readonly PackSkill[],\n  sessionSkills: readonly PackSkill[],\n): PackSkill[] {\n  const configured = new Map<string, PackSkill>();\n  for (const skill of [...librarySkills, ...packSkills]) {\n    configured.set(skill.name.toLowerCase(), skill);\n  }\n  const bundledNames = new Set(\n    bundledSkillDirNames(bundledSkillsDir()).map((name) => name.toLowerCase()),\n  );\n  const selected = new Map<string, PackSkill>();\n  for (const skill of sessionSkills) {\n    assertSafePackSkillName(skill.name);\n    const key = skill.name.toLowerCase();\n    if (bundledNames.has(key)) {\n      throw new Error(`Session skill \"${skill.name}\" conflicts with a bundled skill`);\n    }\n    const existing = selected.get(key) ?? configured.get(key);\n    if (existing) {\n      if (skillFingerprint(existing) !== skillFingerprint(skill)) {\n        throw new Error(`Conflicting skill definitions for \"${skill.name}\"`);\n      }\n      continue;\n    }\n    selected.set(key, skill);\n  }\n  return [...selected.values()];\n}\n\nfunction skillFingerprint(skill: PackSkill): string {\n  return JSON.stringify(\n    [...skill.files]\n      .sort((left, right) => left.path.localeCompare(right.path))\n      .map(({ path, content }) => ({ path, content })),\n  );\n}\n\nfunction removeSkillChildByNameKey(children: Record<string, Entry>, nameKey: string): void {\n  for (const name of Object.keys(children)) {\n    if (name.toLowerCase() === nameKey) {\n      delete children[name];\n    }\n  }\n}\n\nfunction bundledSkillDirNames(root: string): string[] {\n  return readdirSync(root, { withFileTypes: true })\n    .filter((entry) => entry.isDirectory() && existsSync(join(root, entry.name, \"SKILL.md\")))\n    .map((entry) => entry.name)\n    .sort();\n}\n\ntype PackSkillDirNode = {\n  dirs: Map<string, PackSkillDirNode>;\n  files: Map<string, string>;\n};\n\nfunction packSkillDirEntry(skill: PackSkill): Dir {\n  const root: PackSkillDirNode = { dirs: new Map(), files: new Map() };\n  for (const skillFile of skill.files) {\n    const segments = packSkillPathSegments(skill.name, skillFile.path);\n    let node = root;\n    for (const segment of segments.slice(0, -1)) {\n      if (node.files.has(segment)) {\n        throw new Error(`Pack skill ${skill.name} uses ${segment} as both a file and a directory`);\n      }\n      let next = node.dirs.get(segment);\n      if (!next) {\n        next = { dirs: new Map(), files: new Map() };\n        node.dirs.set(segment, next);\n      }\n      node = next;\n    }\n    const filename = segments[segments.length - 1]!;\n    if (node.dirs.has(filename) || node.files.has(filename)) {\n      throw new Error(`Duplicate pack skill file path in ${skill.name}: ${skillFile.path}`);\n    }\n    node.files.set(filename, skillFile.content);\n  }\n  if (!root.files.has(\"SKILL.md\")) {\n    throw new Error(`Pack skill ${skill.name} is missing a top-level SKILL.md file`);\n  }\n  return packSkillDirFromNode(root);\n}\n\nfunction packSkillDirFromNode(node: PackSkillDirNode): Dir {\n  const children: Record<string, Entry> = {};\n  for (const [name, child] of node.dirs) {\n    children[name] = packSkillDirFromNode(child);\n  }\n  for (const [name, content] of node.files) {\n    children[name] = file({ content });\n  }\n  return dir({ children });\n}\n\nfunction assertSafePackSkillName(name: string): void {\n  if (packSkillPathSegments(name, name).length !== 1) {\n    throw new Error(`Invalid pack skill name: ${name}`);\n  }\n}\n\nfunction packSkillPathSegments(skillName: string, path: string): string[] {\n  const segments = path.split(\"/\");\n  if (\n    path.startsWith(\"/\") ||\n    path.includes(\"\\\\\") ||\n    segments.some((segment) => segment.length === 0 || segment === \".\" || segment === \"..\")\n  ) {\n    throw new Error(`Invalid pack skill file path for ${skillName}: ${path}`);\n  }\n  return segments;\n}\n\nfunction packSkillDescription(skill: PackSkill): string {\n  const explicit = skill.description?.trim();\n  if (explicit) {\n    return explicit;\n  }\n  const markdown = skill.files.find((skillFile) => skillFile.path === \"SKILL.md\")?.content ?? \"\";\n  return skillFrontmatterDescription(markdown) ?? \"No description provided.\";\n}\n\nfunction skillFrontmatterDescription(markdown: string): string | null {\n  const lines = markdown.split(/\\r?\\n/);\n  if (lines[0]?.trim() !== \"---\") {\n    return null;\n  }\n  const end = lines.findIndex((line, index) => index > 0 && line.trim() === \"---\");\n  if (end === -1) {\n    return null;\n  }\n  const collected: string[] = [];\n  let inDescription = false;\n  for (const line of lines.slice(1, end)) {\n    const match = line.match(/^description:\\s*(.*)$/);\n    if (match) {\n      const inline = match[1]!.trim();\n      if (inline && inline !== \">-\" && inline !== \">\" && inline !== \"|\" && inline !== \"|-\") {\n        return unquoteFrontmatterValue(inline);\n      }\n      inDescription = true;\n      continue;\n    }\n    if (inDescription) {\n      if (/^\\s+\\S/.test(line)) {\n        collected.push(line.trim());\n        continue;\n      }\n      break;\n    }\n  }\n  const blockValue = collected.join(\" \").trim();\n  return blockValue ? blockValue : null;\n}\n\nfunction unquoteFrontmatterValue(value: string): string {\n  if (\n    value.length >= 2 &&\n    value[0] === value[value.length - 1] &&\n    (value[0] === '\"' || value[0] === \"'\")\n  ) {\n    return value.slice(1, -1);\n  }\n  return value;\n}\n\nfunction isAsyncIterable<T>(source: Iterable<T> | AsyncIterable<T>): source is AsyncIterable<T> {\n  return typeof (source as AsyncIterable<T>)[Symbol.asyncIterator] === \"function\";\n}\n\nfunction stableJson(value: unknown): string {\n  return JSON.stringify(sortJson(value));\n}\n\nfunction sortJson(value: unknown): unknown {\n  if (Array.isArray(value)) {\n    return value.map(sortJson);\n  }\n  if (value && typeof value === \"object\") {\n    return Object.fromEntries(\n      Object.entries(value)\n        .sort(([a], [b]) => a.localeCompare(b))\n        .map(([key, nested]) => [key, sortJson(nested)]),\n    );\n  }\n  return value;\n}\nfunction interruptionToolName(item: unknown): string {\n  const candidate = item as {\n    toolName?: unknown;\n    name?: unknown;\n    rawItem?: { name?: unknown };\n  };\n  const name = candidate?.toolName ?? candidate?.name ?? candidate?.rawItem?.name;\n  return typeof name === \"string\" ? name : \"\";\n}\n",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"// The legible \"screen capture failed\" error card the history-sanitizer wire seam\n// substitutes for an EMPTY `computer_call_output` image_url (see\n// `rewriteEmptyComputerCallOutputImageUrls`). The hosted `computer_use_preview`\n// protocol has only an IMAGE channel back to the model, so a capture failure has to\n// be a legible IMAGE — otherwise the SDK's empty-output placeholder (a 1×1\n// transparent PNG) reaches the model as a plausible-but-wrong BLANK DESKTOP it then\n// confidently reports (the exact failure mode of the 0.1.3 TCC-denied incident).\n//\n// This is a valid 8-bit RGBA PNG (verified: signature + per-chunk CRC + IDAT inflates\n// to the exact scanline size) rendered from a fixed message, so the provider's image\n// decoder accepts it (an invalid/empty image_url is what 400s the turn). The specific\n// failure REASON (permission denied / null image / timeout / display down) is not in\n// the card — it is logged worker-side by `NativeDesktopComputer.screenshot()`; the\n// card's job is only to stop the model from hallucinating a real blank desktop.\n//\n// Regenerate with: `bun run scripts/gen-screenshot-error-card.mjs`\n// Rendered text:\n//   SCREEN CAPTURE FAILED\n//   THE DESKTOP COULD NOT BE CAPTURED.\n//   THIS IS A PLACEHOLDER, NOT THE REAL SCREEN.\n//   DO NOT SAY THE SCREEN IS BLANK.\n//   TELL THE USER TO CHECK THE DISPLAY AND GRANT\n//   SCREEN RECORDING PERMISSION.\nexport const SCREENSHOT_FAILURE_CARD_IMAGE_URL =\n  \"data:image/png;base64,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\";\n","/**\n * Read-path sanitizer for replayed conversation history (issue: orphaned\n * tool outputs brick a session).\n *\n * Conversation truth is persisted as a flat list of SDK history items in\n * `session_history_items` and replayed verbatim into the model on every turn.\n * The OpenAI Responses API rejects the whole request (HTTP 400) when that list\n * violates its tool-call pairing rules — most destructively:\n *\n *   `400 No tool call found for function call output with call_id <X>`\n *\n * when a `function_call_result` (a.k.a. function_call_output) has no matching\n * `function_call` earlier in the list. Because the corrupt item is replayed on\n * every subsequent turn, one orphaned output permanently bricks the session\n * across revival — it stays dead until the row is hand-deleted.\n *\n * This module is the reliability net: before history items are sent to the\n * model they pass through `sanitizeHistoryItemsForModel`, which removes any\n * item that would make the request invalid. It mirrors the SDK's own\n * `dropOrphanToolCalls` continuation logic (which only runs over the SDK's\n * in-memory `state.history`, not over rows we reload from the database) so a\n * reloaded history is shaped exactly like a freshly-generated one.\n *\n * It is a pure function over plain JSON item shapes (no SDK import, no I/O) so\n * it is cheap to unit-test exhaustively. It NEVER mutates its input items and\n * NEVER touches the stored rows — only the in-memory copy sent to the model is\n * filtered, keeping the persisted audit trail intact.\n */\n\nimport { SCREENSHOT_FAILURE_CARD_IMAGE_URL } from \"./screenshot-error-card\";\nimport {\n  boundModelToolOutputItems,\n  DEFAULT_MODEL_TOOL_OUTPUT_TRUNCATION_TOKENS,\n} from \"@opengeni/codex\";\n\n/** A history item is any JSON object; we only inspect a few discriminator fields. */\nexport type HistoryItem = Record<string, unknown>;\n\n/**\n * Tool-call item types and the result-item type that settles them. Kept in\n * sync with the SDK's `TOOL_CALL_RESULT_TYPE_BY_CALL_TYPE`; `function_call` is\n * the one observed live, the rest are included so the same pairing logic holds\n * for every tool-call kind the SDK can emit.\n */\nexport const TOOL_CALL_RESULT_TYPE_BY_CALL_TYPE: Record<string, string> = {\n  function_call: \"function_call_result\",\n  computer_call: \"computer_call_result\",\n  shell_call: \"shell_call_output\",\n  apply_patch_call: \"apply_patch_call_output\",\n  // Progressive connector disclosure (codex tool_search): a replayed\n  // `tool_search_call` must be settled by its `tool_search_output` exactly like a\n  // function call — an unpaired one 400s the store:false replay. The SDK pairs\n  // these OUTSIDE its own TOOL_CALL_RESULT_TYPE_BY_CALL_TYPE (sessionPersistence's\n  // hasToolSearchCallId), so we mirror the semantics here; the correlation id can\n  // additionally ride providerData (see callIdOf).\n  tool_search_call: \"tool_search_output\",\n};\n\nconst RESULT_TYPE_BY_CALL_TYPE = TOOL_CALL_RESULT_TYPE_BY_CALL_TYPE;\nconst RESULT_TYPES = new Set(Object.values(RESULT_TYPE_BY_CALL_TYPE));\n\nfunction itemType(item: unknown): string | undefined {\n  if (!item || typeof item !== \"object\") {\n    return undefined;\n  }\n  const type = (item as { type?: unknown }).type;\n  return typeof type === \"string\" ? type : undefined;\n}\n\n/**\n * Correlation id for a tool call / result. The SDK's canonical history shape\n * uses camelCase `callId`; the raw Responses wire shape uses snake_case\n * `call_id`. Persisted rows are the SDK shape, but we accept either so a row\n * written by any code path (or hand-repaired) still correlates.\n */\nfunction callIdOf(item: unknown): string | undefined {\n  if (!item || typeof item !== \"object\") {\n    return undefined;\n  }\n  const record = item as { callId?: unknown; call_id?: unknown; providerData?: unknown };\n  if (typeof record.callId === \"string\" && record.callId.length > 0) {\n    return record.callId;\n  }\n  if (typeof record.call_id === \"string\" && record.call_id.length > 0) {\n    return record.call_id;\n  }\n  // tool_search items may carry their correlation id ONLY in providerData\n  // (mirrors the SDK's getToolSearchProviderCallId: providerData.call_id ??\n  // providerData.callId ?? call_id ?? callId). Harmless for other item kinds —\n  // their ids never live there.\n  const provider = record.providerData as\n    | { call_id?: unknown; callId?: unknown }\n    | null\n    | undefined;\n  if (provider && typeof provider === \"object\") {\n    if (typeof provider.call_id === \"string\" && provider.call_id.length > 0) {\n      return provider.call_id;\n    }\n    if (typeof provider.callId === \"string\" && provider.callId.length > 0) {\n      return provider.callId;\n    }\n  }\n  return undefined;\n}\n\n/**\n * Return the normalized local path from a sandbox `view_image` function call.\n * Invalid/partial calls are deliberately ignored: the filter below only\n * removes fully-paired calls whose replacement is known to be valid.\n */\nfunction viewImagePathOf(item: unknown): string | undefined {\n  if (!item || typeof item !== \"object\") {\n    return undefined;\n  }\n  const record = item as { type?: unknown; name?: unknown; arguments?: unknown };\n  if (\n    record.type !== \"function_call\" ||\n    record.name !== \"view_image\" ||\n    typeof record.arguments !== \"string\"\n  ) {\n    return undefined;\n  }\n  try {\n    const parsed = JSON.parse(record.arguments) as { path?: unknown };\n    return typeof parsed.path === \"string\" && parsed.path.length > 0 ? parsed.path : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Remove superseded `view_image` call/result pairs for the SAME local path,\n * retaining the newest fully-paired observation. A `view_image` result can be\n * hundreds of kilobytes of base64. When a model re-opens the same attachment,\n * replaying every older copy on each subsequent model call grows input\n * quadratically and can trap a turn in context-compaction/requeue recovery.\n *\n * This is state-based rather than count-based: every distinct path is kept,\n * and an older observation is removed only after a newer successful pair for\n * that exact path exists. The reasoning items immediately attached to a\n * removed call are removed with it, preserving Responses API item validity.\n */\nexport function elideSupersededViewImagePairs<T extends HistoryItem>(items: readonly T[]): T[] {\n  if (items.length === 0) {\n    return [];\n  }\n\n  const callIndexById = new Map<string, number>();\n  const resultIndexById = new Map<string, number>();\n  items.forEach((item, index) => {\n    const callId = callIdOf(item);\n    if (!callId) {\n      return;\n    }\n    if (itemType(item) === \"function_call\") {\n      callIndexById.set(callId, index);\n    } else if (\n      itemType(item) === \"function_call_result\" ||\n      itemType(item) === \"function_call_output\"\n    ) {\n      resultIndexById.set(callId, index);\n    }\n  });\n\n  const pairedByPath = new Map<string, Array<{ callIndex: number; resultIndex: number }>>();\n  for (const [callId, callIndex] of callIndexById) {\n    const path = viewImagePathOf(items[callIndex]);\n    const resultIndex = resultIndexById.get(callId);\n    if (!path || resultIndex === undefined || resultIndex <= callIndex) {\n      continue;\n    }\n    const pairs = pairedByPath.get(path) ?? [];\n    pairs.push({ callIndex, resultIndex });\n    pairedByPath.set(path, pairs);\n  }\n\n  const dropped = new Set<number>();\n  for (const pairs of pairedByPath.values()) {\n    if (pairs.length < 2) {\n      continue;\n    }\n    pairs.sort((left, right) => left.callIndex - right.callIndex);\n    for (const pair of pairs.slice(0, -1)) {\n      dropped.add(pair.callIndex);\n      dropped.add(pair.resultIndex);\n      for (let index = pair.callIndex - 1; index >= 0; index -= 1) {\n        if (itemType(items[index]) !== \"reasoning\") {\n          break;\n        }\n        dropped.add(index);\n      }\n    }\n  }\n\n  return dropped.size === 0 ? items.slice() : items.filter((_item, index) => !dropped.has(index));\n}\n\n/**\n * Sanitize a replayed history item list into a sequence the Responses API\n * accepts. Pure: returns a new array of the same item references in order,\n * with invalid items omitted. Valid histories come back byte-identical\n * (same references, same order).\n *\n * Rules, each motivated by a concrete 400 the API raises:\n *\n *  1. Drop every tool-call RESULT whose matching tool CALL does not appear\n *     earlier in the list. This is the session-bricking orphan: a\n *     `function_call_result` with no preceding `function_call` of the same\n *     `call_id`. (\"No tool call found for function call output…\")\n *\n *  2. Drop every tool CALL that has no matching RESULT anywhere after it.\n *     The Responses API requires each tool call to be settled by its output\n *     before the conversation can continue; a dangling call left in replayed\n *     history 400s with \"No tool output found for function call…\". Dropping\n *     the dangling call (rather than synthesizing a fake output) is what the\n *     SDK itself does for in-memory continuation, so a reloaded history is\n *     shaped identically. The matching result, if it later exists, is kept;\n *     only genuinely unpaired calls are removed.\n *\n *  3. Drop any `reasoning` item that immediately precedes (across a run of\n *     reasoning items) a dropped tool call. The Responses API ties an\n *     encrypted reasoning item to the tool call it produced; a reasoning item\n *     orphaned by rule 2 trips \"Item 'rs_…' of type 'reasoning' was provided\n *     without its required following item\". Mirrors the SDK's\n *     `dropReasoningItemsPrecedingDroppedCalls`.\n *\n * A `call_id` is paired only when BOTH a call and a result of the matching\n * types exist with that id, the call appearing before the result. Calls and\n * results that satisfy that survive untouched.\n */\nexport function sanitizeHistoryItemsForModel<T extends HistoryItem>(\n  items: readonly T[],\n  toolOutputTruncationTokens = DEFAULT_MODEL_TOOL_OUTPUT_TRUNCATION_TOKENS,\n): T[] {\n  if (items.length === 0) {\n    return [];\n  }\n\n  // Pre-scan: for every (call-type, call_id) record the index of a RESULT that\n  // appears strictly after the call. A call is valid only when such a result\n  // exists; a result is valid only when its call appears strictly before it.\n  // We resolve pairs in order so ordering is enforced both ways (a result that\n  // precedes its call is an orphan, and a call whose only result precedes it is\n  // dangling).\n  const dropped = new Set<number>();\n\n  // For each result-type, the call_ids of CALLs we have seen so far that are\n  // still waiting to be settled by a following result.\n  const openCallIdsByResultType = new Map<string, Set<string>>();\n\n  items.forEach((item, index) => {\n    const type = itemType(item);\n    const callId = callIdOf(item);\n    if (!type || !callId) {\n      return;\n    }\n    const callResultType = RESULT_TYPE_BY_CALL_TYPE[type];\n    if (callResultType) {\n      const open = openCallIdsByResultType.get(callResultType) ?? new Set<string>();\n      open.add(callId);\n      openCallIdsByResultType.set(callResultType, open);\n      return;\n    }\n    if (RESULT_TYPES.has(type)) {\n      const open = openCallIdsByResultType.get(type);\n      if (open && open.has(callId)) {\n        // Settles a call we have already seen — keep both, close the call.\n        open.delete(callId);\n      } else {\n        // Rule 1: result whose call is absent or appears later — the orphan.\n        dropped.add(index);\n      }\n    }\n  });\n\n  // Rule 2: any call still open after the full scan has no result after it —\n  // a dangling call the API rejects. Drop those calls. We re-walk to find the\n  // indices of the still-open call_ids (the last unmatched call per id).\n  const stillOpen = new Map<string, Set<string>>();\n  for (const [resultType, open] of openCallIdsByResultType) {\n    if (open.size > 0) {\n      stillOpen.set(resultType, new Set(open));\n    }\n  }\n  if (stillOpen.size > 0) {\n    for (let index = items.length - 1; index >= 0; index -= 1) {\n      const item = items[index];\n      const type = itemType(item);\n      const callId = callIdOf(item);\n      if (!type || !callId) {\n        continue;\n      }\n      const resultType = RESULT_TYPE_BY_CALL_TYPE[type];\n      if (!resultType) {\n        continue;\n      }\n      const open = stillOpen.get(resultType);\n      if (open && open.has(callId)) {\n        dropped.add(index);\n        open.delete(callId);\n      }\n    }\n  }\n\n  if (dropped.size > 0) {\n    // Rule 3: drop reasoning items stranded by a dropped tool call. A reasoning\n    // item is stranded when the next non-reasoning item after it is dropped.\n    for (let index = 0; index < items.length; index += 1) {\n      if (dropped.has(index) || itemType(items[index]) !== \"reasoning\") {\n        continue;\n      }\n      for (let next = index + 1; next < items.length; next += 1) {\n        if (itemType(items[next]) === \"reasoning\") {\n          continue;\n        }\n        if (dropped.has(next)) {\n          dropped.add(index);\n        }\n        break;\n      }\n    }\n  }\n\n  const paired =\n    dropped.size === 0 ? items.slice() : items.filter((_item, index) => !dropped.has(index));\n  return boundModelToolOutputItems(\n    paired.map(stripInternalResumeMarker),\n    toolOutputTruncationTokens,\n  );\n}\n\n/**\n * Internal marker stamping machine-generated resume/continuation messages\n * (turn-resumed notices, goal continuations) so compaction housekeeping can\n * recognize them in STORED history. Lives here (not context-compaction, which\n * imports from this module) so the wire sanitizer below can strip it without\n * an import cycle; context-compaction re-exports it.\n */\nexport const INTERNAL_RESUME_MESSAGE_MARKER = \"opengeni_internal_resume\";\n\n/**\n * Remove the {@link INTERNAL_RESUME_MESSAGE_MARKER} providerData key from a\n * single item before it reaches ANY model wire. Pure + non-mutating; returns\n * the SAME reference when there is nothing to strip (keeping the common path\n * byte-identical, mirroring {@link stripReasoningEncryptedContent}).\n *\n * WHY. The @openai/agents SDK serializes providerData keys verbatim into the\n * request item, and strict Responses backends reject unknown per-item fields —\n * observed in production as `400 Unknown parameter:\n * 'input[N].opengeni_internal_resume'`, which deterministically failed every\n * turn whose replayed history contained a marked resume message (the marker is\n * durable in conversation truth, so retries could never succeed). Detection\n * (isInternalResumeMessage) reads STORED items and also keeps a text-prefix\n * fallback, so stripping at the wire degrades housekeeping gracefully and\n * never the turn.\n */\nexport function stripInternalResumeMarker<T extends HistoryItem>(item: T): T {\n  const providerData = (item as Record<string, unknown>).providerData;\n  if (\n    !providerData ||\n    typeof providerData !== \"object\" ||\n    !(INTERNAL_RESUME_MESSAGE_MARKER in (providerData as Record<string, unknown>))\n  ) {\n    return item;\n  }\n  const { [INTERNAL_RESUME_MESSAGE_MARKER]: _dropped, ...rest } = providerData as Record<\n    string,\n    unknown\n  >;\n  const next: Record<string, unknown> = { ...(item as Record<string, unknown>) };\n  if (Object.keys(rest).length > 0) {\n    next.providerData = rest;\n  } else {\n    delete next.providerData;\n  }\n  return next as T;\n}\n\n/**\n * Drop the account/org-bound `reasoning.encrypted_content` blob from a single\n * history item, preserving everything else (the visible chain-of-thought text in\n * `summary`/`content`, and every non-reasoning field). Pure + non-mutating: when\n * there is nothing to strip the SAME reference is returned (so the common,\n * same-account path stays byte-identical); otherwise a shallow clone is returned.\n *\n * WHY. A codex-subscription turn round-trips `reasoning.encrypted_content` — an\n * opaque blob minted by the ChatGPT/Codex backend that is bound to the account\n * (org) that produced it. After a manual switch from codex account A to B, the\n * carried history items still hold A-minted blobs; replaying them into a turn\n * running on B is rejected (400). The blob is purely a chain-of-thought\n * continuity optimization — dropping it costs at most one turn of lost CoT\n * continuity and never any message content.\n *\n * USED FOR `compaction` items only on the history-items read path: a foreign\n * `compaction` summary carries account-bound `encrypted_content` but its summary\n * is real conversation content that must be preserved, so we strip only the blob\n * (we do NOT drop the whole item). Foreign `reasoning` items are instead dropped\n * WHOLESALE by the caller (id + blob), because the Responses backend validates\n * the foreign `rs_…` id and rejects a reasoning item that has a foreign id and no\n * encrypted_content (so blanking the blob alone is not enough — see\n * {@link applyCodexHistoryStrip}).\n *\n * The SDK's Responses converter reads the blob via `providerData.encryptedContent`\n * (camel) or `providerData.encrypted_content` (snake); persisted rows use the\n * snake form, but we delete both casings defensively. We also clear a top-level\n * `encrypted_content` (the `compaction`-item shape) belt-and-braces — that blob\n * is likewise source-bound. Only `reasoning` and `compaction` items are touched;\n * messages, tool calls, and tool outputs pass through untouched by reference.\n */\nexport function stripReasoningEncryptedContent<T extends HistoryItem>(item: T): T {\n  const type = itemType(item);\n  if (type !== \"reasoning\" && type !== \"compaction\") {\n    return item;\n  }\n  const record = item as Record<string, unknown>;\n  const providerData = record.providerData;\n  const providerHasBlob =\n    !!providerData &&\n    typeof providerData === \"object\" &&\n    (\"encryptedContent\" in (providerData as Record<string, unknown>) ||\n      \"encrypted_content\" in (providerData as Record<string, unknown>));\n  const topLevelHasBlob = \"encrypted_content\" in record;\n  if (!providerHasBlob && !topLevelHasBlob) {\n    // Nothing encrypted to strip — return the same reference (byte-identical).\n    return item;\n  }\n  const clone: Record<string, unknown> = { ...record };\n  if (providerHasBlob) {\n    const providerClone = { ...(providerData as Record<string, unknown>) };\n    delete providerClone.encryptedContent;\n    delete providerClone.encrypted_content;\n    clone.providerData = providerClone;\n  }\n  if (topLevelHasBlob) {\n    delete clone.encrypted_content;\n  }\n  return clone as unknown as T;\n}\n\n/**\n * Neutralize the account/org-bound identity of EVERY `reasoning` item embedded\n * in a serialized RunState JSON string, returning the re-serialized string. Pure:\n * a parse failure or a no-op returns the SAME string reference (so an unchanged\n * or non-codex run-state replays byte-for-byte).\n *\n * WHY (HOLE C — approval replay). An approval decision resumes the serialized\n * RunState blob. That blob round-trips `reasoning.encrypted_content` minted by the ChatGPT/Codex\n * backend (bound to the freezing account/org — a foreign account 400s it) AND the\n * foreign `rs_…` reasoning ids the Responses backend validates (rejected once the\n * blob is gone). Unlike `session_history_items`, the blob carries NO per-item\n * producer tag, so foreign-ness cannot be decided per item; the worker instead\n * records the FREEZING codex account on the run-state row and calls this only when\n * the resuming turn's codex account DIFFERS from it. When the accounts differ we\n * conservatively neutralize every reasoning item: delete its provider id and its\n * `encrypted_content` (both casings, in `providerData`). The visible reasoning\n * `content`/`summary` and every message / tool-call / tool-output item are left\n * intact (message and tool content are never account-bound).\n *\n * A reasoning item with no id and no encrypted_content is exactly the shape the\n * production Azure path already sends (see `stripProviderItemIdsFilter`), so it\n * deserializes and replays cleanly. Reasoning items live in several places in the\n * blob — `originalInput` (when an array), each `modelResponses[].output`,\n * `lastModelResponse.output`, and the `generatedItems` wrappers (`reasoning_item`\n * → `rawItem`) — and we scrub all of them. `compaction` items are deliberately\n * left untouched: their `encrypted_content` is a protocol-REQUIRED field whose\n * removal would fail the SDK's run-state schema validation on deserialize.\n */\nexport function stripReasoningIdentityFromSerializedRunState(serialized: string): string {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(serialized);\n  } catch {\n    // Not JSON (e.g. a cleared-state sentinel handled elsewhere): forward as-is.\n    return serialized;\n  }\n  if (!parsed || typeof parsed !== \"object\") {\n    return serialized;\n  }\n  let changed = false;\n  const scrubReasoning = (candidate: unknown): void => {\n    if (!candidate || typeof candidate !== \"object\") {\n      return;\n    }\n    const record = candidate as Record<string, unknown>;\n    if (record.type !== \"reasoning\") {\n      return;\n    }\n    if (\"id\" in record) {\n      delete record.id;\n      changed = true;\n    }\n    const providerData = record.providerData;\n    if (providerData && typeof providerData === \"object\") {\n      const provider = providerData as Record<string, unknown>;\n      if (\"encryptedContent\" in provider) {\n        delete provider.encryptedContent;\n        changed = true;\n      }\n      if (\"encrypted_content\" in provider) {\n        delete provider.encrypted_content;\n        changed = true;\n      }\n    }\n    if (\"encrypted_content\" in record) {\n      delete record.encrypted_content;\n      changed = true;\n    }\n  };\n  const scrubItemArray = (arr: unknown): void => {\n    if (Array.isArray(arr)) {\n      for (const item of arr) {\n        scrubReasoning(item);\n      }\n    }\n  };\n  const root = parsed as Record<string, unknown>;\n  // 1. originalInput is either a string (no items) or an array of protocol items.\n  scrubItemArray(root.originalInput);\n  // 2. generatedItems are SDK run-item wrappers; a `reasoning_item` carries the\n  //    protocol reasoning shape under `rawItem`.\n  if (Array.isArray(root.generatedItems)) {\n    for (const wrapper of root.generatedItems) {\n      if (\n        wrapper &&\n        typeof wrapper === \"object\" &&\n        \"rawItem\" in (wrapper as Record<string, unknown>)\n      ) {\n        scrubReasoning((wrapper as Record<string, unknown>).rawItem);\n      }\n    }\n  }\n  // 3. modelResponses[].output and lastModelResponse.output hold protocol items.\n  const scrubResponseOutput = (response: unknown): void => {\n    if (response && typeof response === \"object\") {\n      scrubItemArray((response as Record<string, unknown>).output);\n    }\n  };\n  if (Array.isArray(root.modelResponses)) {\n    for (const response of root.modelResponses) {\n      scrubResponseOutput(response);\n    }\n  }\n  scrubResponseOutput(root.lastModelResponse);\n  if (!changed) {\n    return serialized;\n  }\n  return JSON.stringify(parsed);\n}\n\n/**\n * Neutralize tool_search items IN PLACE in a serialized RunState blob for a\n * cross-account codex resume — the run-state sibling of\n * `applyCodexHistoryStrip`'s tool_search rule, but COUNT-PRESERVING (HOLE E: the\n * blob path's reconcile watermark counts the blob's history length, so items\n * must never be removed — only mutated, exactly like the reasoning\n * neutralization above).\n *\n * The hazard: on deserialize, the SDK re-runs the registered CLIENT tool_search\n * execute callback per frozen pair (`rehydrateToolSearchRuntimeTools`) and\n * THROWS a UserError when the re-run's runtime-tool keys mismatch the serialized\n * expectation — which is exactly what happens when the RESUMING account's\n * connector pool differs from the FREEZING account's. The SDK skips that\n * rehydration entirely for `execution === 'server'` calls, so flipping the\n * frozen pairs' `execution` to `\"server\"` in place defuses the throw without\n * touching counts, ids, pairing, or content. The flipped shape is wire-safe:\n * LIVE-VERIFIED against /codex/responses — a replayed server-execution pair is\n * accepted (200) and its disclosure still holds. The account-bound `tsc_…` id is\n * separately stripped by the codex transport normalizer (all input item ids).\n *\n * Walks the same blob locations as {@link stripReasoningIdentityFromSerializedRunState}:\n * `originalInput` (array form), `generatedItems` (SDK run-item wrappers — the\n * raw shape under `rawItem`), every `modelResponses[].output`, and\n * `lastModelResponse.output`. Returns the input string unchanged when nothing\n * matched.\n */\nexport function neutralizeToolSearchItemsInSerializedRunState(serialized: string): string {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(serialized);\n  } catch {\n    return serialized;\n  }\n  if (!parsed || typeof parsed !== \"object\") {\n    return serialized;\n  }\n  let changed = false;\n  const neutralize = (candidate: unknown): void => {\n    if (!candidate || typeof candidate !== \"object\") {\n      return;\n    }\n    const record = candidate as Record<string, unknown>;\n    if (record.type !== \"tool_search_call\" && record.type !== \"tool_search_output\") {\n      return;\n    }\n    if (record.execution !== \"server\") {\n      record.execution = \"server\";\n      changed = true;\n    }\n  };\n  const neutralizeArray = (arr: unknown): void => {\n    if (Array.isArray(arr)) {\n      for (const item of arr) {\n        neutralize(item);\n      }\n    }\n  };\n  const root = parsed as Record<string, unknown>;\n  neutralizeArray(root.originalInput);\n  if (Array.isArray(root.generatedItems)) {\n    for (const wrapper of root.generatedItems) {\n      if (\n        wrapper &&\n        typeof wrapper === \"object\" &&\n        \"rawItem\" in (wrapper as Record<string, unknown>)\n      ) {\n        neutralize((wrapper as Record<string, unknown>).rawItem);\n      }\n    }\n  }\n  const neutralizeResponseOutput = (response: unknown): void => {\n    if (response && typeof response === \"object\") {\n      neutralizeArray((response as Record<string, unknown>).output);\n    }\n  };\n  if (Array.isArray(root.modelResponses)) {\n    for (const response of root.modelResponses) {\n      neutralizeResponseOutput(response);\n    }\n  }\n  neutralizeResponseOutput(root.lastModelResponse);\n  if (!changed) {\n    return serialized;\n  }\n  return JSON.stringify(parsed);\n}\n\n/**\n * Normalize `computer_call` items so each carries EXACTLY ONE of the two\n * mutually-exclusive action fields the provider accepts.\n *\n * The OpenAI Agents SDK 0.11.6 `computer_call` schema (protocol.mjs) carries\n * BOTH the legacy singular `action` and the GA batched `actions`, each\n * `.optional()`, and only requires \"at least one\" (its superRefine errors only\n * when both are absent). The Azure computer-use endpoint is stricter: it\n * requires EXACTLY one and rejects the whole request with\n *\n *   `400 Computer call input must include exactly one of `action` or `actions`.`\n *\n * when an emitted `computer_call` carries both (observed live: a screenshot\n * call carrying `action:{type:\"screenshot\"}` AND `actions:[{type:\"screenshot\"}]`).\n *\n * Which singular do we keep? LIVE-PROVEN against the deployed Azure deployment\n * (gpt-5.6-sol-2026-04-24): for gpt-5.6-sol the SDK serializes the GA computer tool as\n * `{type:\"computer\"}` (not the legacy `computer_use_preview`), and that GA tool\n * accepts ONLY the batched plural `actions`. Probing all three shapes:\n *   - `action`-only  -> 400 \"exactly one of action or actions\" (STILL rejected)\n *   - `actions`-only -> passes the action/actions structural validation\n *   - both           -> 400 \"exactly one …\"\n * The \"exactly one\" wording is misleading: only the `actions`-only form is\n * accepted by the GA tool. So when both are present we KEEP `actions` (the GA\n * batched plural) and DROP `action`. Calls that already carry exactly one field\n * — or the legacy `action`-only form — pass through untouched (this transform's\n * sole job is to resolve the both-present conflict, not to rewrite singulars).\n *\n * Pure and non-mutating: only the conflicting item(s) are cloned; every other\n * item passes through by reference (byte-identical). Unlike\n * {@link sanitizeHistoryItemsForModel} (which only *filters* items), this is a\n * read-path *transform* of a single item's shape.\n */\nexport function normalizeComputerCallActions<T extends HistoryItem>(items: readonly T[]): T[] {\n  let changed = false;\n  const out = items.map((item) => {\n    if (itemType(item) !== \"computer_call\") {\n      return item;\n    }\n    const record = item as Record<string, unknown>;\n    const hasAction = record.action !== undefined && record.action !== null;\n    const hasActions = Array.isArray(record.actions) && (record.actions as unknown[]).length > 0;\n    if (hasAction && hasActions) {\n      changed = true;\n      const { action: _droppedAction, ...rest } = record;\n      return rest as unknown as T;\n    }\n    return item;\n  });\n  return changed ? out : items.slice();\n}\n\n/**\n * Rewrite EVERY `computer_call` item in a serialized Responses request body to\n * the ACTIONS-ONLY shape the GA Azure computer tool accepts, mutating the parsed\n * JSON object in place and returning whether anything changed.\n *\n * WHY THIS LIVES AT THE WIRE LEVEL (not the input-item filter). The input-item\n * normalizer above ({@link normalizeComputerCallActions}, wired as a\n * callModelInputFilter) runs BEFORE the SDK's responses converter\n * (`convertAgentItemToResponsesInput`). That converter then re-derives the wire\n * payload from the item: when `actions` is present it emits BOTH\n * `{action: ..., actions: [...]}`, and when only `action` is present it emits\n * `action`-only. It can NEVER emit actions-only. Probed live against the\n * deployed Azure gpt-5.6-sol-2026-04-24 GA computer tool (`{type:\"computer\"}`):\n *   - `action`-only  -> 400 \"Computer call input must include exactly one of\n *                       `action` or `actions`.\" (rejected)\n *   - both           -> 400 same message (rejected)\n *   - `actions`-only -> passes the action/actions structural validation\n * So neither the input-filter nor the converter can produce an accepted body.\n * The ONLY seam that sees — and can rewrite — the final serialized JSON is a\n * custom `fetch` on the OpenAI client (it runs after the converter and after\n * `responses.create` serialization). This function is that rewriter's core.\n *\n * It collapses each computer_call to actions-only: it prefers an existing\n * non-empty `actions` array, else wraps the singular `action` into\n * `actions:[action]`, then deletes `action`. A computer_call with neither field\n * is left untouched (nothing to derive; let the provider report it).\n *\n * Mutates `body` in place (the caller has already JSON.parsed a private copy of\n * the request body). Returns `true` iff at least one computer_call was changed.\n */\nexport function rewriteComputerCallsToActionsOnly(body: unknown): boolean {\n  if (!body || typeof body !== \"object\") {\n    return false;\n  }\n  const input = (body as Record<string, unknown>).input;\n  if (!Array.isArray(input)) {\n    return false;\n  }\n  let changed = false;\n  for (const item of input) {\n    if (!item || typeof item !== \"object\") {\n      continue;\n    }\n    const record = item as Record<string, unknown>;\n    if (record.type !== \"computer_call\") {\n      continue;\n    }\n    const existingActions =\n      Array.isArray(record.actions) && (record.actions as unknown[]).length > 0\n        ? (record.actions as unknown[])\n        : undefined;\n    const actions =\n      existingActions ??\n      (record.action !== undefined && record.action !== null ? [record.action] : undefined);\n    if (actions === undefined) {\n      // Neither action nor actions present: nothing to normalize.\n      continue;\n    }\n    const hadAction = \"action\" in record;\n    const actionsAlreadyExact = existingActions !== undefined && !hadAction;\n    if (actionsAlreadyExact) {\n      // Already actions-only with a non-empty array — leave byte-identical.\n      continue;\n    }\n    delete record.action;\n    record.actions = actions;\n    changed = true;\n  }\n  return changed;\n}\n\n/**\n * Backstop for the empty `computer_call_output` image_url: walk the `input` array of\n * a serialized Responses request body and replace any `computer_call_output` item\n * whose `output.image_url` is empty/missing with a LEGIBLE \"screen capture failed\"\n * error card ({@link SCREENSHOT_FAILURE_CARD_IMAGE_URL}).\n *\n * WHY A CARD, NOT A BLANK. An empty `image_url` reaches this seam ONLY when the\n * computer op genuinely FAILED to produce a screen: agents-core's `toolExecution.mjs`\n * catch sets `output = ''` when the action OR the follow-up `computer.screenshot()`\n * throws, building `{type:\"computer_call_output\",output:{type:\"computer_screenshot\",\n * image_url:\"\"}}`. Azure then rejects the whole request with\n * `400 Invalid 'input[N].output.image_url'`. The previous fix substituted a 1×1\n * TRANSPARENT placeholder to dodge the 400 — but that reaches the model as a\n * plausible BLANK DESKTOP it confidently reports (\"the screen appears blank/empty\"),\n * turning a hard capture FAILURE into a silent, wrong observation. That is the worst\n * failure mode for computer use, and it is exactly what the 0.1.3 TCC-denied incident\n * produced. Substituting a legible error card instead makes the failure REACH THE\n * MODEL as an error (the only channel the hosted `computer_use_preview` protocol has\n * is the image), so the model stops and tells the user rather than hallucinating.\n *\n * WHY THIS IS SAFE (empty = failure, never an intentional blank). Post-af289e3 the\n * intentional-blank cases carry a NON-empty data URI already: agents-core's\n * tool-approval-rejection screenshot is its own non-empty 1×1 placeholder, and the\n * SandboxComputer action-timeout now warn+returns to a REAL screenshot rather than an\n * empty output. So an EMPTY image_url at this seam is unambiguously a capture/interact\n * FAILURE — the error card is the correct substitution for every empty case, and this\n * function never touches a non-empty (real screenshot OR intentional blank) output.\n *\n * The failure REASON (permission denied / null image / timeout / display down) is not\n * on the card; it is logged worker-side by `NativeDesktopComputer.screenshot()`.\n *\n * Mutates `body` in place (the caller has already JSON.parsed a private copy).\n * Returns `true` iff at least one image_url was replaced.\n */\nexport function rewriteEmptyComputerCallOutputImageUrls(body: unknown): boolean {\n  if (!body || typeof body !== \"object\") {\n    return false;\n  }\n  const input = (body as Record<string, unknown>).input;\n  if (!Array.isArray(input)) {\n    return false;\n  }\n  let changed = false;\n  for (const item of input) {\n    if (!item || typeof item !== \"object\") {\n      continue;\n    }\n    const record = item as Record<string, unknown>;\n    if (record.type !== \"computer_call_output\") {\n      continue;\n    }\n    const output = record.output;\n    if (!output || typeof output !== \"object\") {\n      continue;\n    }\n    const out = output as Record<string, unknown>;\n    const imageUrl = out.image_url;\n    // Replace the image_url when it is not a non-empty string (covers: \"\", null,\n    // undefined, missing) — an empty output is always a genuine capture failure, so\n    // it becomes the legible error card, never a silent blank.\n    if (typeof imageUrl !== \"string\" || imageUrl.length === 0) {\n      out.image_url = SCREENSHOT_FAILURE_CARD_IMAGE_URL;\n      changed = true;\n    }\n  }\n  return changed;\n}\n\n/**\n * Wrap a `fetch` so every outbound OpenAI Responses request body that contains a\n * `computer_call` is rewritten to the ACTIONS-ONLY shape (see\n * {@link rewriteComputerCallsToActionsOnly}) before it reaches the network, AND\n * any `computer_call_output` item with an empty/missing `output.image_url` is\n * patched with the 1×1 transparent PNG placeholder (see\n * {@link rewriteEmptyComputerCallOutputImageUrls}).\n *\n * Installed as the `fetch:` option on the Azure OpenAI client, this is the\n * lowest reachable seam — below the agents-core input filter and below the SDK's\n * responses converter — so it neutralizes the converter's both-fields synthesis\n * regardless of what the input item carried, and backstops the action-timeout\n * empty image_url regardless of how it was produced.\n *\n * Surgical and cheap: it only parses the body when it is a string that contains\n * the prefix `\"computer_call` (matching both `\"computer_call\"` action items and\n * `\"computer_call_output\"` result items). Every other request — non-computer-use\n * turns, streaming SSE responses, non-string bodies — forwards untouched, the\n * SAME `init` reference, so streaming and other providers are unaffected. A JSON\n * parse failure or a no-op rewrite also forwards the original `init` unchanged.\n *\n * Typed structurally (the `(input, init) => Promise<Response>` call signature)\n * rather than as the DOM `typeof fetch` so it omits the `preconnect` static the\n * global type carries; this matches the OpenAI SDK's `Fetch` option, which only\n * needs the call signature. The wiring site passes it as the client `fetch:`.\n */\ntype FetchLike = (\n  input: Parameters<typeof fetch>[0],\n  init?: Parameters<typeof fetch>[1],\n) => Promise<Response>;\n\nexport function computerCallNormalizingFetch(base: FetchLike): FetchLike {\n  return (input, init) => {\n    // Match any request that mentions either `computer_call` (the action call) or\n    // `computer_call_output` (the output/result item). Both strings begin with\n    // `\"computer_call` so a single prefix-substring check covers both.\n    if (init && typeof init.body === \"string\" && init.body.includes('\"computer_call')) {\n      try {\n        const parsed = JSON.parse(init.body) as unknown;\n        const changed1 = rewriteComputerCallsToActionsOnly(parsed);\n        const changed2 = rewriteEmptyComputerCallOutputImageUrls(parsed);\n        if (changed1 || changed2) {\n          return base(input, { ...init, body: JSON.stringify(parsed) });\n        }\n      } catch {\n        // Non-JSON or parse failure: forward the request unchanged.\n      }\n    }\n    return base(input, init);\n  };\n}\n","// Progressive MCP disclosure for the ChatGPT/Codex backend — parity with how the\n// Codex CLI surfaces its ~217 `codex_apps` connector tools WITHOUT paying their\n// schemas in every turn's context, while applying the same bounded search seam to\n// other selected MCP servers.\n//\n// WHY. OpenGeni connects MCP servers as CLIENTs and the SDK materializes every\n// selected MCP tool as a `function` tool in request.tools[] on a Codex turn. The\n// Codex CLI instead uses the backend's NATIVE tool-search: the model gets one\n// compact search tool + deferred MCP tools (schemas dropped from model context),\n// searches by capability, and only matched tools are disclosed back and become\n// callable.\n//\n// PROVEN LIVE (Phase 0 probe against /codex/responses on gpt-5.6-sol): the backend\n// HONORS `defer_loading:true` on function tools — 50 fat tools dropped input_tokens\n// 6766 → 108 — AND makes a tool callable purely because a prior `tool_search_output`\n// disclosed it (V3). The model emits `tool_search_call` on our slug.\n//\n// HOW. We wrap the agent's `getAllTools` (codex turns only, flag-gated): tag every\n// non-mandatory MCP function tool `deferLoading = true` (converTool then serializes\n// `defer_loading:true`, dropping the schema from context) and append one\n// client-executed `toolSearchTool`. The SDK routes a `tool_search_call` to our\n// executor (ClientToolSearchExecutor), which BM25-ranks the deferred pool and\n// returns matched tools BY REFERENCE — the SDK emits the `tool_search_output` that\n// discloses them; the subsequent `function_call` resolves through the normal\n// `PrefixedMcpServer.callTool` path (auth + name-sanitize + structuredContent\n// inline all unchanged). Invocation is untouched; only the wire tool-set shrinks.\n\nimport { toolSearchTool, type Tool } from \"@openai/agents\";\nimport {\n  MCP_MAX_TOOL_DEFINITION_BYTES,\n  MCP_MAX_TOOL_SEARCH_DESCRIPTION_BYTES,\n  MCP_MAX_TOOL_SEARCH_DISCLOSURE_BYTES,\n  MCP_MAX_TOOL_SEARCH_SOURCE_LABEL_LENGTH,\n  MCP_MAX_TOOL_SEARCH_SOURCES,\n  mcpSerializedSizeBytes,\n} from \"./mcp-network\";\n\n/** The prefix OpenGeni's PrefixedMcpServer stamps on codex_apps connector tools. */\nexport const CODEX_APPS_TOOL_PREFIX = \"codex_apps__\";\nconst DEFAULT_SEARCH_LIMIT = 8;\nconst MAX_SEARCH_LIMIT = 20;\n\n/** True for a materialized codex_apps connector function tool. */\nexport function isCodexAppsFunctionTool(\n  tool: unknown,\n): tool is Tool & { name: string; deferLoading?: boolean } {\n  return (\n    !!tool &&\n    typeof tool === \"object\" &&\n    (tool as { type?: unknown }).type === \"function\" &&\n    typeof (tool as { name?: unknown }).name === \"string\" &&\n    (tool as { name: string }).name.startsWith(CODEX_APPS_TOOL_PREFIX)\n  );\n}\n\nconst MCP_TOOL_NAME_SEPARATOR = \"__\";\nconst MANDATORY_FIRST_PARTY_MCP_SERVER_ID = \"opengeni\";\nconst NO_MCP_SERVER_IDS: ReadonlySet<string> = new Set();\n\n/** Return the authorized server id for a runtime MCP function tool name. */\nfunction mcpServerIdForTool(tool: unknown, mcpServerIds: ReadonlySet<string>): string | null {\n  if (!tool || typeof tool !== \"object\") return null;\n  if ((tool as { type?: unknown }).type !== \"function\") return null;\n  const name = (tool as { name?: unknown }).name;\n  if (typeof name !== \"string\") return null;\n  let match: string | null = null;\n  for (const serverId of mcpServerIds) {\n    if (\n      typeof serverId !== \"string\" ||\n      serverId.length === 0 ||\n      !name.startsWith(`${serverId}${MCP_TOOL_NAME_SEPARATOR}`)\n    ) {\n      continue;\n    }\n    if (match === null || serverId.length > match.length) {\n      match = serverId;\n    }\n  }\n  return match;\n}\n\n/**\n * True for non-mandatory MCP function tools on the effective agent surface.\n * The prefix is the same runtime namespace used by PrefixedMcpServer; this\n * intentionally does not inspect the global registry, connection metadata, or\n * credentials, so search cannot widen the already-authorized tool set.\n */\nexport function isSearchableMcpFunctionTool(\n  tool: unknown,\n  mcpServerIds: ReadonlySet<string> = NO_MCP_SERVER_IDS,\n): tool is Tool & { name: string; deferLoading?: boolean } {\n  const serverId = mcpServerIdForTool(tool, mcpServerIds);\n  return serverId !== null && serverId !== MANDATORY_FIRST_PARTY_MCP_SERVER_ID;\n}\n\nfunction truncateUtf8(value: string, maxBytes: number): string {\n  if (Buffer.byteLength(value) <= maxBytes) return value;\n  let output = \"\";\n  for (const character of value) {\n    const candidate = output + character;\n    if (Buffer.byteLength(candidate) > maxBytes) break;\n    output = candidate;\n  }\n  return output;\n}\n\nfunction searchSourceForTool(tool: Tool, mcpServerIds: ReadonlySet<string>): string | null {\n  const serverId = mcpServerIdForTool(tool, mcpServerIds);\n  return serverId && serverId !== MANDATORY_FIRST_PARTY_MCP_SERVER_ID\n    ? truncateUtf8(serverId, MCP_MAX_TOOL_SEARCH_SOURCE_LABEL_LENGTH)\n    : null;\n}\n\nfunction searchSourcesForTools(\n  connectorNamespaces: ReadonlySet<string>,\n  tools: readonly Tool[],\n  mcpServerIds: ReadonlySet<string>,\n): Set<string> {\n  const sources = new Set<string>();\n  for (const source of connectorNamespaces) {\n    if (typeof source !== \"string\" || source.length === 0) continue;\n    if (sources.size >= MCP_MAX_TOOL_SEARCH_SOURCES) break;\n    sources.add(truncateUtf8(source, MCP_MAX_TOOL_SEARCH_SOURCE_LABEL_LENGTH));\n  }\n  for (const tool of tools) {\n    // Codex connector labels come from the transport's original namespace set\n    // (for example, `gmail`), not from the synthetic `codex_apps__` prefix.\n    // Keep that authoritative path intact; derive fallback labels only for\n    // directly materialized non-Codex MCP tools such as selected Slack tools.\n    const source =\n      isSearchableMcpFunctionTool(tool, mcpServerIds) && !isCodexAppsFunctionTool(tool)\n        ? searchSourceForTool(tool, mcpServerIds)\n        : null;\n    if (!source || sources.has(source)) continue;\n    if (sources.size >= MCP_MAX_TOOL_SEARCH_SOURCES) break;\n    sources.add(source);\n  }\n  return sources;\n}\n\n// Minimal English stopword set: query phrasings like \"send an email to someone\"\n// should match on capability words, not drown in glue words (parity with\n// codex-rs, whose search normalizes tokens server-side).\nconst STOPWORDS = new Set([\n  \"a\",\n  \"an\",\n  \"the\",\n  \"and\",\n  \"or\",\n  \"of\",\n  \"to\",\n  \"in\",\n  \"on\",\n  \"for\",\n  \"with\",\n  \"by\",\n  \"at\",\n  \"is\",\n  \"are\",\n  \"be\",\n  \"do\",\n  \"does\",\n  \"my\",\n  \"me\",\n  \"your\",\n  \"you\",\n  \"it\",\n  \"its\",\n  \"this\",\n  \"that\",\n  \"from\",\n  \"as\",\n  \"up\",\n  \"out\",\n  \"all\",\n  \"some\",\n  \"any\",\n  \"can\",\n  \"will\",\n  \"would\",\n  \"should\",\n  \"want\",\n  \"need\",\n  \"please\",\n  \"user\",\n  \"users\",\n]);\n\n/** Light suffix stemmer so \"emails\"/\"email\", \"creating\"/\"create\" co-match (min-stem guards, no over-stripping). */\nfunction stem(token: string): string {\n  if (token.length > 5 && token.endsWith(\"ing\")) return token.slice(0, -3);\n  if (token.length > 4 && token.endsWith(\"ed\")) return token.slice(0, -2);\n  if (token.length > 4 && token.endsWith(\"es\")) return token.slice(0, -2);\n  if (token.length > 3 && token.endsWith(\"s\") && !token.endsWith(\"ss\")) return token.slice(0, -1);\n  return token;\n}\n\n/** Split snake_case/camelCase/dotted text into stemmed lowercase word tokens (len ≥ 2, stopwords removed). */\nfunction tokenize(text: string): string[] {\n  return text\n    .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n    .toLowerCase()\n    .split(/[^a-z0-9]+/)\n    .filter((t) => t.length > 1 && !STOPWORDS.has(t))\n    .map(stem);\n}\n\n/** The searchable text of a connector tool: name (weighted ×2) + description + param names. */\nfunction toolSearchText(tool: Tool): string {\n  const raw = (tool as { name?: string }).name ?? \"\";\n  const name = raw.startsWith(CODEX_APPS_TOOL_PREFIX)\n    ? raw.slice(CODEX_APPS_TOOL_PREFIX.length)\n    : raw;\n  const description =\n    typeof (tool as { description?: unknown }).description === \"string\"\n      ? (tool as { description: string }).description\n      : \"\";\n  const params = (tool as { parameters?: { properties?: Record<string, unknown> } }).parameters\n    ?.properties;\n  const paramNames = params && typeof params === \"object\" ? Object.keys(params).join(\" \") : \"\";\n  return `${name} ${name} ${description} ${paramNames}`;\n}\n\n/**\n * Rank connector tools against a plain-language query with BM25 (Okapi, k1=1.5,\n * b=0.75) over tokenized name+description+params. Returns the top `limit` tools\n * with a positive score, most-relevant first. An empty or no-match query returns\n * [] — matching codex-rs, whose search returns empty rather than arbitrary tools;\n * disclosing unrelated (and thereby CALLABLE) tools on a miss feeds the model\n * noise. The SDK normalizes an empty executor result into an empty\n * tool_search_output, which the model reads as \"nothing matched — rephrase\".\n */\nexport function bm25RankTools(tools: Tool[], query: string, limit: number): Tool[] {\n  const qTokens = Array.from(new Set(tokenize(query)));\n  if (tools.length === 0 || qTokens.length === 0) return [];\n\n  const docs = tools.map((tool) => {\n    const tokens = tokenize(toolSearchText(tool));\n    const tf = new Map<string, number>();\n    for (const t of tokens) tf.set(t, (tf.get(t) ?? 0) + 1);\n    return { tool, len: tokens.length, tf };\n  });\n  const N = docs.length;\n  const avgdl = Math.max(1, docs.reduce((s, d) => s + d.len, 0) / N);\n  const df = new Map<string, number>();\n  for (const d of docs) for (const t of d.tf.keys()) df.set(t, (df.get(t) ?? 0) + 1);\n\n  const k1 = 1.5;\n  const b = 0.75;\n  const scored = docs.map((d) => {\n    let score = 0;\n    for (const qt of qTokens) {\n      const n = df.get(qt);\n      const f = d.tf.get(qt);\n      if (!n || !f) continue;\n      const idf = Math.log(1 + (N - n + 0.5) / (n + 0.5));\n      score += idf * ((f * (k1 + 1)) / (f + k1 * (1 - b + (b * d.len) / avgdl)));\n    }\n    return { tool: d.tool, score };\n  });\n  const hits = scored.filter((s) => s.score > 0).sort((a, b2) => b2.score - a.score);\n  return hits.slice(0, limit).map((s) => s.tool); // no hits ⇒ [] (codex-rs parity; see doc)\n}\n\n/** Parse `{query, limit}` from a tool_search_call's arguments (string or object). */\nfunction parseSearchArgs(raw: unknown): { query: string; limit: number } {\n  let obj: Record<string, unknown> = {};\n  try {\n    obj =\n      typeof raw === \"string\"\n        ? raw.length\n          ? JSON.parse(raw)\n          : {}\n        : raw && typeof raw === \"object\"\n          ? (raw as Record<string, unknown>)\n          : {};\n  } catch {\n    obj = {};\n  }\n  const query = typeof obj.query === \"string\" ? obj.query : \"\";\n  const limitRaw =\n    typeof obj.limit === \"number\" && Number.isFinite(obj.limit) ? obj.limit : DEFAULT_SEARCH_LIMIT;\n  return { query, limit: Math.max(1, Math.min(MAX_SEARCH_LIMIT, Math.round(limitRaw))) };\n}\n\n/**\n * Render the search tool's description from the account's ACTUALLY-connected\n * sources — codex-rs parity (its create_tool_search_tool builds \"You have access\n * to tools from the following sources:\\n- <name>\" from the live enabled-source\n * list). With defer_loading stripping every connector schema (and name) from\n * model context, this description is the model's ONLY signal of which apps\n * exist, so a hardcoded list would both advertise absent connectors and hide\n * present ones.\n */\nexport function renderSearchToolDescription(connectorNamespaces: ReadonlySet<string>): string {\n  const base =\n    \"Search the user's connected app tools by capability. \" +\n    'Describe in plain language WHAT you need to do (for example: \"send an email\", \"create a calendar event\") ' +\n    \"rather than guessing exact tool names. Returns the matching connector tools, which then become callable.\";\n  const sources = Array.from(connectorNamespaces)\n    .filter((n) => typeof n === \"string\" && n.length > 0)\n    .slice(0, MCP_MAX_TOOL_SEARCH_SOURCES)\n    .map((source) => truncateUtf8(source, MCP_MAX_TOOL_SEARCH_SOURCE_LABEL_LENGTH))\n    .filter(Boolean)\n    .sort();\n  if (sources.length === 0) {\n    return `${base}\\nConnected sources: none currently available.`;\n  }\n  const header = `${base}\\nYou have access to tools from the following sources:`;\n  const lines: string[] = [];\n  for (const source of sources) {\n    const candidate = `${header}${[...lines, `- ${source}`].map((line) => `\\n${line}`).join(\"\")}`;\n    if (Buffer.byteLength(candidate) > MCP_MAX_TOOL_SEARCH_DESCRIPTION_BYTES) break;\n    lines.push(`- ${source}`);\n  }\n  return lines.length > 0\n    ? `${header}\\n${lines.join(\"\\n\")}`\n    : `${base}\\nConnected sources: none currently available.`;\n}\n\nconst SEARCH_TOOL_PARAMETERS = {\n  type: \"object\",\n  properties: {\n    query: {\n      type: \"string\",\n      description: \"Plain-language description of the capability you need.\",\n    },\n    limit: { type: \"number\", description: \"Maximum number of tools to return (default 8).\" },\n  },\n  required: [\"query\"],\n  additionalProperties: false,\n} as const;\n\n/**\n * The client tool-search executor: BM25 over the deferred MCP pool from the\n * turn's live `availableTools`, returning matched tools BY REFERENCE (the only legal\n * return — the SDK emits the disclosing `tool_search_output` and flips the loaded\n * gate; returning copies would throw). Stateless — reads the pool per call.\n */\nfunction codexToolSearchExecutor(\n  args: {\n    availableTools?: Tool[];\n    toolCall?: { arguments?: unknown };\n  },\n  mcpServerIds: ReadonlySet<string>,\n): Tool[] {\n  const deferred = (args.availableTools ?? []).filter((tool) =>\n    isSearchableMcpFunctionTool(tool, mcpServerIds),\n  );\n  if (deferred.length === 0) return [];\n  const { query, limit } = parseSearchArgs(args.toolCall?.arguments);\n  const ranked = bm25RankTools(deferred, query, limit);\n  const bounded: Tool[] = [];\n  let disclosedBytes = 0;\n  for (const tool of ranked) {\n    const toolBytes = mcpSerializedSizeBytes(tool);\n    if (toolBytes > MCP_MAX_TOOL_DEFINITION_BYTES) {\n      continue;\n    }\n    if (disclosedBytes + toolBytes > MCP_MAX_TOOL_SEARCH_DISCLOSURE_BYTES) {\n      break;\n    }\n    disclosedBytes += toolBytes;\n    bounded.push(tool);\n  }\n  return bounded;\n}\n\nconst NO_NAMESPACES: ReadonlySet<string> = new Set();\n\n/** True when the namespace set contains at least one usable (non-empty string) source — mirrors {@link renderSearchToolDescription}'s filter, so it is TRUE exactly when the render produces the \"following sources\" list and FALSE when it produces \"none currently available\". */\nfunction hasConnectorSources(connectorNamespaces: ReadonlySet<string>): boolean {\n  for (const namespace of connectorNamespaces) {\n    if (typeof namespace === \"string\" && namespace.length > 0) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * A per-TURN freeze cell for the tool_search description (AM-8). The connector Set\n * `installCodexToolSearch` reads is LIVE and by-reference — it fills as the turn's\n * codex_apps tools/list resolves and can change between a turn's model calls.\n * Re-rendering the description per call from a changed Set flips the tools block,\n * and because tools precede the history in the request prefix, ANY change misses the\n * ENTIRE conversation prefix from that point on — a proven prompt-cache breaker.\n *\n * We therefore freeze the description ONCE, at the first model call whose Set has\n * been populated (connectors discovered), and reuse that frozen string for the rest\n * of the turn — trading a slightly staler connector list for a byte-stable prefix.\n * The freeze is created per {@link installCodexToolSearch} (once per turn) and shared\n * by reference into every clone re-install, so all of a turn's clones agree.\n */\nexport type CodexToolSearchDescriptionFreeze = { value: string | null };\n\n/**\n * Resolve the tool_search description for this model call, honoring the per-turn\n * freeze (AM-8):\n *  - Already frozen ⇒ return the frozen string (byte-stable for the rest of the turn).\n *  - Not yet frozen + connectors DISCOVERED (non-empty Set) ⇒ render and FREEZE it,\n *    locking the discovered list against a later same-turn Set mutation.\n *  - Not yet frozen + Set still EMPTY ⇒ render live (\"none currently available\") but\n *    do NOT freeze. This is the load-bearing safety of AM-8: the Set fills lazily and\n *    best-effort, so an empty Set means \"not discovered yet\", not \"no connectors\".\n *    Freezing \"none\" here would silently disable the turn's connectors (capability\n *    loss). Leaving it unfrozen is still byte-stable while the Set stays empty (the\n *    empty render is a constant), and lets a later call freeze the real list once it\n *    resolves — at most ONE prefix transition, versus today's per-call churn.\n * With no freeze cell (the default / direct callers + tests) this is a live render,\n * byte-for-byte the pre-AM-8 behavior.\n */\nfunction resolveSearchToolDescription(\n  connectorNamespaces: ReadonlySet<string>,\n  freeze?: CodexToolSearchDescriptionFreeze,\n): string {\n  if (freeze?.value != null) {\n    return freeze.value;\n  }\n  const rendered = renderSearchToolDescription(connectorNamespaces);\n  if (freeze && hasConnectorSources(connectorNamespaces)) {\n    freeze.value = rendered;\n  }\n  return rendered;\n}\n\n/** Build the client-executed tool_search tool from an already-rendered description. */\nfunction buildCodexToolSearchToolFromDescription(\n  description: string,\n  mcpServerIds: ReadonlySet<string>,\n): Tool {\n  return toolSearchTool({\n    execution: \"client\",\n    description,\n    parameters: SEARCH_TOOL_PARAMETERS as unknown as Record<string, unknown>,\n    execute: ((args: Parameters<typeof codexToolSearchExecutor>[0]) =>\n      codexToolSearchExecutor(args, mcpServerIds)) as never,\n  }) as unknown as Tool;\n}\n\n/** Build the client-executed tool_search tool that discloses deferred MCP tools on demand. */\nexport function buildCodexToolSearchTool(\n  connectorNamespaces: ReadonlySet<string> = NO_NAMESPACES,\n  mcpServerIds: ReadonlySet<string> = NO_MCP_SERVER_IDS,\n): Tool {\n  return buildCodexToolSearchToolFromDescription(\n    renderSearchToolDescription(connectorNamespaces),\n    mcpServerIds,\n  );\n}\n\n/** True for the built-in tool_search tool (so we never add a second one). */\nfunction isToolSearchTool(tool: unknown): boolean {\n  const t = tool as { name?: unknown; providerData?: { type?: unknown } } | null;\n  return !!t && (t.name === \"tool_search\" || t.providerData?.type === \"tool_search\");\n}\n\n/**\n * The transform applied to a turn's resolved tool list: tag every searchable\n * non-mandatory MCP function tool `deferLoading = true`, and — unless one is already\n * present — append the client tool_search tool. Pure (mutates the passed tools +\n * returns the possibly-extended array); the SDK's `getTools` gate requires a\n * tool_search whenever a deferred tool is present, which appending here satisfies\n * in the same request.\n *\n * The search tool is appended UNCONDITIONALLY (even when the turn has no\n * searchable MCP tools, e.g. a best-effort connector was dropped this\n * turn): a prior turn's history may carry tool_search_call/output items, and\n * replaying those without a tool_search tool in the request risks a backend\n * reject; a search over an empty pool simply discloses nothing. The description\n * reflects the LIVE connector namespaces, so an empty turn reads\n * \"none currently available\".\n */\nexport function applyCodexToolSearch(\n  tools: Tool[],\n  connectorNamespaces: ReadonlySet<string> = NO_NAMESPACES,\n  descriptionFreeze?: CodexToolSearchDescriptionFreeze,\n  mcpServerIds: ReadonlySet<string> = NO_MCP_SERVER_IDS,\n): Tool[] {\n  for (const tool of tools) {\n    if (\n      isSearchableMcpFunctionTool(tool, mcpServerIds) &&\n      (tool as { deferLoading?: boolean }).deferLoading !== true\n    ) {\n      (tool as { deferLoading?: boolean }).deferLoading = true;\n    }\n  }\n  if (tools.some(isToolSearchTool)) {\n    return tools;\n  }\n  // AM-8: render through the per-turn freeze so the tools-block prefix stays\n  // byte-stable across a turn's model calls once connectors are discovered.\n  const description = resolveSearchToolDescription(\n    searchSourcesForTools(connectorNamespaces, tools, mcpServerIds),\n    descriptionFreeze,\n  );\n  return [...tools, buildCodexToolSearchToolFromDescription(description, mcpServerIds)];\n}\n\ntype CloneCapableAgent = {\n  getAllTools: (runContext: unknown) => Promise<Tool[]>;\n  clone?: (config: unknown) => CloneCapableAgent;\n};\n\n/**\n * Install progressive MCP disclosure on a Codex-path agent by wrapping\n * `getAllTools` so every per-model-call tool resolution runs\n * {@link applyCodexToolSearch}. Idempotent-per-call (re-tags each\n * freshly-materialized MCP tool under cacheToolsList:false). Gated by the caller\n * (flag + Codex path).\n *\n * CLONE SURVIVAL (the part that makes this work on the REAL sandbox path): the\n * SDK's sandbox runtime routes EVERY model call through\n * `prepareSandboxAgent → agent.clone(...)` (agentPreparation.js), and\n * `SandboxAgent.clone` constructs a FRESH agent from a fixed field list — an\n * instance-own `getAllTools` override is NOT copied, so patching only this\n * instance would silently no-op the whole feature on sandbox turns (the run\n * loop resolves tools on the CLONE). We therefore also wrap `clone` to\n * RE-INSTALL onto every clone, recursively — covering clone-of-clone and the\n * RunState resume paths. `connectorNamespaces` is the LIVE, by-reference Set the\n * codex_apps sanitizing transport fills during each turn's tools/list\n * (prepareAgentTools), so by the time the wrapper post-processes getAllTools the\n * current turn's connector sources are known.\n */\nexport function installCodexToolSearch(\n  agent: CloneCapableAgent,\n  connectorNamespaces: ReadonlySet<string> = NO_NAMESPACES,\n  mcpServerIds: ReadonlySet<string> = NO_MCP_SERVER_IDS,\n): void {\n  // ONE freeze cell per install (i.e. per turn), shared BY REFERENCE into every\n  // clone re-install below so the whole turn — the built agent and every clone the\n  // sandbox runtime resolves tools on — agrees on the same frozen description\n  // (AM-8). Created here, at the top-level install, never per clone.\n  installCodexToolSearchWithFreeze(agent, connectorNamespaces, mcpServerIds, { value: null });\n}\n\nfunction installCodexToolSearchWithFreeze(\n  agent: CloneCapableAgent,\n  connectorNamespaces: ReadonlySet<string>,\n  mcpServerIds: ReadonlySet<string>,\n  descriptionFreeze: CodexToolSearchDescriptionFreeze,\n): void {\n  const originalGetAllTools = agent.getAllTools.bind(agent);\n  agent.getAllTools = (async (runContext: unknown) =>\n    applyCodexToolSearch(\n      await originalGetAllTools(runContext),\n      connectorNamespaces,\n      descriptionFreeze,\n      mcpServerIds,\n    )) as typeof agent.getAllTools;\n  const originalClone = agent.clone?.bind(agent);\n  if (originalClone) {\n    const cloneWithToolSearch: NonNullable<CloneCapableAgent[\"clone\"]> = (config: unknown) => {\n      const cloned = originalClone(config);\n      installCodexToolSearchWithFreeze(\n        cloned,\n        connectorNamespaces,\n        mcpServerIds,\n        descriptionFreeze,\n      );\n      return cloned;\n    };\n    agent.clone = cloneWithToolSearch;\n  }\n}\n","/**\n * Portable conversation context compaction, following Codex CLI's local path.\n *\n * The checkpoint model sees the current active history plus one fixed\n * checkpoint prompt, then the active history is rebuilt from the newest real\n * user messages within one cumulative 20k-token budget plus one summary.\n * Assistant messages, tool calls/results, reasoning, and images are removed\n * from the active model-facing history; the database audit rows remain.\n */\n\nimport {\n  TOOL_CALL_RESULT_TYPE_BY_CALL_TYPE,\n  sanitizeHistoryItemsForModel,\n} from \"./history-sanitizer\";\nimport { boundModelToolOutputItem } from \"@opengeni/codex\";\nimport { createHash } from \"node:crypto\";\n\nexport type CompactionItem = Record<string, unknown>;\n\n/**\n * Marker stored on the synthetic summary item so the UI can render it and the\n * next rebuild can exclude old summaries from the retained user-message set.\n */\nexport const COMPACTION_SUMMARY_MARKER = \"opengeni_context_summary\";\n\nexport const SUMMARY_BUFFER_TOKENS = 20_000;\n// A single cumulative budget for all retained real user messages, matching\n// Codex core's build_compacted_history_with_limit (not a per-message allowance).\nexport const COMPACT_USER_MESSAGE_MAX_TOKENS = 20_000;\n// 0.9: compact as LATE as possible — retained context is worth more than early\n// headroom now that declared per-model windows are honest. Model-catalog\n// explicit limits take precedence; the ratio is used for models without one.\nexport const DEFAULT_COMPACTION_THRESHOLD_RATIO = 0.9;\nexport const MIN_COMPACTION_THRESHOLD_RATIO = 0.3;\nexport const MAX_COMPACTION_THRESHOLD_RATIO = 0.9;\n\n// Verbatim from Codex CLI:\n// codex-rs/prompts/templates/compact/prompt.md\nexport const COMPACTION_PROMPT = [\n  \"You are performing a CONTEXT CHECKPOINT COMPACTION. Create a handoff summary for another LLM that will resume the task.\",\n  \"\",\n  \"Include:\",\n  \"- Current progress and key decisions made\",\n  \"- Important context, constraints, or user preferences\",\n  \"- What remains to be done (clear next steps)\",\n  \"- Any critical data, examples, or references needed to continue\",\n  \"\",\n  \"Be concise, structured, and focused on helping the next LLM seamlessly continue the work.\",\n].join(\"\\n\");\n\n// Verbatim from Codex CLI:\n// codex-rs/prompts/templates/compact/summary_prefix.md\nexport const SUMMARY_PREFIX =\n  \"Another language model started to solve this problem and produced a summary of its thinking process. You also have access to the state of the tools that were used by that language model. Use this to build on the work that has already been done and avoid duplicating work. Here is the summary produced by the other language model, use the information in this summary to assist with your own analysis:\";\n\nexport const USER_MESSAGE_TRUNCATION_MARKER =\n  \"\\n[... middle truncated for context compaction ...]\\n\";\n\nconst RESULT_TYPE_BY_CALL_TYPE = TOOL_CALL_RESULT_TYPE_BY_CALL_TYPE;\nconst RESULT_TYPES = new Set(Object.values(RESULT_TYPE_BY_CALL_TYPE));\nconst MODEL_GENERATED_ITEM_TYPES = new Set([\n  \"reasoning\",\n  \"function_call\",\n  \"custom_tool_call\",\n  \"tool_search_call\",\n  \"web_search_call\",\n  \"image_generation_call\",\n  \"computer_call\",\n  \"shell_call\",\n  \"apply_patch_call\",\n  \"compaction\",\n  \"context_compaction\",\n]);\n\nfunction itemType(item: unknown): string | undefined {\n  if (!item || typeof item !== \"object\") {\n    return undefined;\n  }\n  const type = (item as { type?: unknown }).type;\n  return typeof type === \"string\" ? type : undefined;\n}\n\nfunction itemRole(item: unknown): string | undefined {\n  if (!item || typeof item !== \"object\") {\n    return undefined;\n  }\n  const role = (item as { role?: unknown }).role;\n  return typeof role === \"string\" ? role : undefined;\n}\n\n/** A user-authored `message` item is the only legal turn boundary. */\nexport function isUserMessage(item: unknown): boolean {\n  return itemType(item) === \"message\" && itemRole(item) === \"user\";\n}\n\n/** True for our synthetic compaction summary item. */\nexport function isCompactionSummary(item: unknown): boolean {\n  return (\n    isUserMessage(item) && (item as Record<string, unknown>)[COMPACTION_SUMMARY_MARKER] === true\n  );\n}\n\n/**\n * Conservative tokenizer-independent text estimate used for every local input\n * budget. Preserve the stable ASCII `chars / 4` heuristic, but never discount\n * Unicode as UTF-16 length/4: each non-ASCII code unit costs at least one token\n * (CJK ≈ 1/code point; an astral emoji's surrogate pair ≈ 2). This intentionally\n * errs toward compaction rather than letting multilingual current input exceed\n * a provider context window before an authoritative usage anchor exists.\n */\nexport function estimateTextTokens(text: string): number {\n  let asciiCodeUnits = 0;\n  let nonAsciiCodeUnits = 0;\n  for (let index = 0; index < text.length; index += 1) {\n    if (text.charCodeAt(index) <= 0x7f) asciiCodeUnits += 1;\n    else nonAsciiCodeUnits += 1;\n  }\n  return nonAsciiCodeUnits + Math.ceil(asciiCodeUnits / 4);\n}\n\n/** Serialized-item estimate for pre-call accounting and retained user budgets. */\nexport function estimateItemTokens(item: CompactionItem): number {\n  let text: string;\n  try {\n    text = JSON.stringify(item);\n  } catch {\n    text = String(item);\n  }\n  return estimateTextTokens(text);\n}\n\nexport function estimateTokens(items: readonly CompactionItem[]): number {\n  let total = 0;\n  for (const item of items) {\n    total += estimateItemTokens(item);\n  }\n  return total;\n}\n\nexport function estimateSerializedValueTokens(value: unknown): number {\n  let serialized: string;\n  try {\n    serialized = typeof value === \"string\" ? value : JSON.stringify(value);\n  } catch {\n    serialized = String(value);\n  }\n  return estimateTextTokens(serialized ?? \"\");\n}\n\nexport type CompleteModelInputFootprint = {\n  input: readonly CompactionItem[];\n  instructionsTokens: number;\n  toolSchemaTokens: number;\n};\n\nexport type ProviderContextTokenSignal = {\n  /** Monotonic within one sampled run; advances after every model response. */\n  revision: number;\n  /** Provider total tokens after that response (input + generated output). */\n  totalTokens: number;\n};\n\nexport type CompleteModelInputEstimate = {\n  tokens: number;\n  source: \"complete_estimate\" | \"provider_plus_local\";\n  inputTokens: number;\n  instructionsTokens: number;\n  toolSchemaTokens: number;\n  appendedAfterModelTokens: number;\n};\n\n/**\n * Match Codex history accounting: after one provider response, start from its\n * authoritative TOTAL token count and add only local items placed after the\n * newest model-generated item. System instructions and tool schemas are\n * compared with the exact request footprint that produced the provider count;\n * positive growth is added. Without a bound anchor, estimate the entire\n * outgoing request rather than trusting stale usage from an earlier turn.\n */\nexport function estimateCompleteModelInput(input: {\n  current: CompleteModelInputFootprint;\n  provider?: ProviderContextTokenSignal | null;\n  providerRequestFootprint?: CompleteModelInputFootprint | null;\n}): CompleteModelInputEstimate {\n  const inputTokens = estimateTokens(input.current.input);\n  const instructionsTokens = input.current.instructionsTokens;\n  const toolSchemaTokens = input.current.toolSchemaTokens;\n  if (!input.provider || !input.providerRequestFootprint || input.provider.totalTokens <= 0) {\n    return {\n      tokens: inputTokens + instructionsTokens + toolSchemaTokens,\n      source: \"complete_estimate\",\n      inputTokens,\n      instructionsTokens,\n      toolSchemaTokens,\n      appendedAfterModelTokens: 0,\n    };\n  }\n\n  const appended = itemsAfterLastModelGeneratedItem(input.current.input);\n  const appendedAfterModelTokens = estimateTokens(appended);\n  const instructionGrowth = Math.max(\n    0,\n    instructionsTokens - input.providerRequestFootprint.instructionsTokens,\n  );\n  const toolSchemaGrowth = Math.max(\n    0,\n    toolSchemaTokens - input.providerRequestFootprint.toolSchemaTokens,\n  );\n  return {\n    tokens:\n      input.provider.totalTokens + appendedAfterModelTokens + instructionGrowth + toolSchemaGrowth,\n    source: \"provider_plus_local\",\n    inputTokens,\n    instructionsTokens,\n    toolSchemaTokens,\n    appendedAfterModelTokens,\n  };\n}\n\nexport function itemsAfterLastModelGeneratedItem(\n  items: readonly CompactionItem[],\n): CompactionItem[] {\n  for (let index = items.length - 1; index >= 0; index -= 1) {\n    if (isModelGeneratedItem(items[index])) {\n      return items.slice(index + 1);\n    }\n  }\n  // Codex treats a provider token anchor without any model-generated item as\n  // unbound. Callers therefore fall back to a complete estimate in that case.\n  return items.slice();\n}\n\nexport function hasModelGeneratedItem(items: readonly CompactionItem[]): boolean {\n  return items.some(isModelGeneratedItem);\n}\n\nfunction isModelGeneratedItem(item: unknown): boolean {\n  const type = itemType(item);\n  if (type === \"message\") return itemRole(item) === \"assistant\";\n  return MODEL_GENERATED_ITEM_TYPES.has(type ?? \"\");\n}\n\nexport function clampCompactionThresholdRatio(value: number | undefined | null): number {\n  const numeric =\n    typeof value === \"number\" && Number.isFinite(value)\n      ? value\n      : DEFAULT_COMPACTION_THRESHOLD_RATIO;\n  return Math.min(\n    MAX_COMPACTION_THRESHOLD_RATIO,\n    Math.max(MIN_COMPACTION_THRESHOLD_RATIO, numeric),\n  );\n}\n\nexport function compactionThresholdTokens(input: {\n  contextWindowTokens: number;\n  contextReservedOutputTokens: number;\n  contextAutoCompactThresholdTokens?: number | null | undefined;\n  contextCompactionThresholdRatio?: number | null | undefined;\n}): number {\n  const window = Math.max(0, input.contextWindowTokens);\n  const codexMaximum = Math.floor(window * MAX_COMPACTION_THRESHOLD_RATIO);\n  if (\n    typeof input.contextAutoCompactThresholdTokens === \"number\" &&\n    Number.isFinite(input.contextAutoCompactThresholdTokens) &&\n    input.contextAutoCompactThresholdTokens > 0\n  ) {\n    return Math.min(Math.floor(input.contextAutoCompactThresholdTokens), codexMaximum);\n  }\n  return Math.floor(window * clampCompactionThresholdRatio(input.contextCompactionThresholdRatio));\n}\n\nexport type CompactionDecision = {\n  shouldCompact: boolean;\n  reason: \"force\" | \"above_threshold\" | \"below_threshold\" | \"no_history\";\n  signalTokens: number;\n  thresholdTokens: number;\n};\n\nexport function decideCompaction(input: {\n  items: readonly CompactionItem[];\n  lastInputTokens?: number | null;\n  contextWindowTokens: number;\n  contextReservedOutputTokens: number;\n  contextAutoCompactThresholdTokens?: number | null | undefined;\n  contextCompactionThresholdRatio?: number | null | undefined;\n  force?: boolean;\n}): CompactionDecision {\n  const thresholdTokens = compactionThresholdTokens(input);\n  const recorded =\n    typeof input.lastInputTokens === \"number\" && input.lastInputTokens > 0\n      ? input.lastInputTokens\n      : 0;\n  const activeHistoryEstimate = estimateTokens(input.items);\n  // A durable provider count belongs to an earlier request. The full active\n  // estimate is a conservative cross-turn floor until an exact same-run anchor\n  // is available in the per-call guard.\n  const signalTokens = Math.max(recorded, activeHistoryEstimate);\n  if (input.items.length === 0) {\n    return {\n      shouldCompact: false,\n      reason: \"no_history\",\n      signalTokens,\n      thresholdTokens,\n    };\n  }\n  if (input.force) {\n    return {\n      shouldCompact: true,\n      reason: \"force\",\n      signalTokens,\n      thresholdTokens,\n    };\n  }\n  if (signalTokens >= thresholdTokens) {\n    return {\n      shouldCompact: true,\n      reason: \"above_threshold\",\n      signalTokens,\n      thresholdTokens,\n    };\n  }\n  return {\n    shouldCompact: false,\n    reason: \"below_threshold\",\n    signalTokens,\n    thresholdTokens,\n  };\n}\n\nexport class CompactionNeededError extends Error {\n  readonly signalTokens: number;\n  readonly thresholdTokens: number;\n  readonly signalSource: \"provider\" | \"estimate\";\n  readonly trigger: \"threshold\" | \"operator\";\n\n  constructor(input: {\n    signalTokens: number;\n    thresholdTokens: number;\n    signalSource: \"provider\" | \"estimate\";\n    trigger?: \"threshold\" | \"operator\";\n  }) {\n    const trigger = input.trigger ?? \"threshold\";\n    super(\n      trigger === \"operator\"\n        ? \"Context compaction requested by the operator\"\n        : `Context compaction needed: signal ${input.signalTokens} tokens exceeded threshold ${input.thresholdTokens}`,\n    );\n    this.name = \"CompactionNeededError\";\n    this.signalTokens = input.signalTokens;\n    this.thresholdTokens = input.thresholdTokens;\n    this.signalSource = input.signalSource;\n    this.trigger = trigger;\n  }\n}\n\nexport class EmptyCompactionSummaryError extends Error {\n  readonly diagnostics: Record<string, unknown>;\n\n  constructor(diagnostics: Record<string, unknown> = {}) {\n    const compact = JSON.stringify(diagnostics).slice(0, 2_000);\n    super(\n      `Compaction summarizer returned no assistant text; active history was preserved${compact ? ` (${compact})` : \"\"}`,\n    );\n    this.name = \"EmptyCompactionSummaryError\";\n    this.diagnostics = diagnostics;\n  }\n}\n\n/**\n * The checkpoint model request ended in a provider/transport failure rather\n * than a successful response with an empty assistant message. Diagnostics are\n * deliberately bounded and content-free so this error can be persisted on a\n * turn without copying provider messages or conversation input into events.\n */\nexport class CompactionProviderResponseError extends Error {\n  readonly diagnostics: Record<string, unknown>;\n  readonly status?: number;\n  readonly code?: string;\n  readonly type?: string;\n  override readonly cause?: unknown;\n\n  constructor(diagnostics: Record<string, unknown> = {}, cause?: unknown) {\n    const compact = JSON.stringify(diagnostics).slice(0, 2_000);\n    super(\n      `Compaction provider request failed; active history was preserved${compact ? ` (${compact})` : \"\"}`,\n    );\n    this.name = \"CompactionProviderResponseError\";\n    this.diagnostics = diagnostics;\n    if (typeof diagnostics.httpStatus === \"number\") this.status = diagnostics.httpStatus;\n    if (typeof diagnostics.code === \"string\") this.code = diagnostics.code;\n    if (typeof diagnostics.type === \"string\") this.type = diagnostics.type;\n    if (cause !== undefined) {\n      Object.defineProperty(this, \"cause\", { value: cause, enumerable: false });\n    }\n  }\n}\n\nexport function findCompactionNeededError(\n  error: unknown,\n  seen = new WeakSet<object>(),\n): CompactionNeededError | null {\n  if (error instanceof CompactionNeededError) {\n    return error;\n  }\n  if (!error || typeof error !== \"object\") {\n    return null;\n  }\n  if (seen.has(error)) {\n    return null;\n  }\n  seen.add(error);\n  const record = error as Record<string, unknown>;\n  return (\n    findCompactionNeededError(record.cause, seen) ?? findCompactionNeededError(record.error, seen)\n  );\n}\n\n/**\n * The exact checkpoint input shape: current active history followed by Codex's\n * checkpoint prompt as a synthesized user message.\n */\nexport function buildCompactionPromptInput(items: readonly CompactionItem[]): CompactionItem[] {\n  return [\n    ...items,\n    {\n      type: \"message\",\n      role: \"user\",\n      content: COMPACTION_PROMPT,\n    },\n  ];\n}\n\nexport type PreparedCompactionPromptInput = {\n  input: CompactionItem[];\n  estimatedInputTokens: number;\n  rewrittenToolOutputs: number;\n  droppedHistoryItems: number;\n};\n\n/**\n * Fit the explicit checkpoint request without mutating canonical history.\n *\n * Codex first replaces oversized tool outputs in its temporary remote-\n * compaction input. OpenGeni does the same oldest-first, preserving the most\n * recent tool detail for the plaintext summary. If that is still insufficient,\n * whole oldest user-delimited work units are removed and the remaining suffix\n * is protocol-sanitized so no call/result/reasoning fragment is orphaned.\n * The raw active history is still the source for the eventual replacement and\n * remains unchanged if the provider call fails.\n */\nexport function prepareCompactionPromptInput(\n  items: readonly CompactionItem[],\n  maxInputTokens: number,\n): PreparedCompactionPromptInput {\n  const budget = Math.max(0, Math.floor(maxInputTokens));\n  let history = items.slice();\n  let estimatedInputTokens = estimateTokens(buildCompactionPromptInput(history));\n  let rewrittenToolOutputs = 0;\n\n  for (let index = 0; index < history.length && estimatedInputTokens > budget; index += 1) {\n    const current = history[index]!;\n    const replacement = minimalToolResultForCompaction(current);\n    if (replacement === current) continue;\n    const before = estimateItemTokens(current);\n    const after = estimateItemTokens(replacement);\n    if (after >= before) continue;\n    history[index] = replacement;\n    estimatedInputTokens -= before - after;\n    rewrittenToolOutputs += 1;\n  }\n\n  const beforeDropLength = history.length;\n  if (estimatedInputTokens > budget && history.length > 0) {\n    const prefixTokens = new Array<number>(history.length + 1).fill(0);\n    for (let index = 0; index < history.length; index += 1) {\n      prefixTokens[index + 1] = prefixTokens[index]! + estimateItemTokens(history[index]!);\n    }\n    const cuts = oldestLogicalUnitCuts(history);\n    const cut =\n      cuts.find((candidate) => estimatedInputTokens - prefixTokens[candidate]! <= budget) ??\n      history.length;\n    history = sanitizeHistoryItemsForModel(history.slice(cut));\n    estimatedInputTokens = estimateTokens(buildCompactionPromptInput(history));\n    // The synthesized checkpoint instruction is the irreducible floor. The\n    // real model budgets are far above it, but keep the helper total for tests\n    // and malformed configuration instead of constructing invalid fragments.\n    if (estimatedInputTokens > budget) {\n      history = [];\n      estimatedInputTokens = estimateTokens(buildCompactionPromptInput(history));\n    }\n  }\n\n  return {\n    input: buildCompactionPromptInput(history),\n    estimatedInputTokens,\n    rewrittenToolOutputs,\n    droppedHistoryItems: beforeDropLength - history.length,\n  };\n}\n\nfunction minimalToolResultForCompaction(item: CompactionItem): CompactionItem {\n  const type = itemType(item);\n  if (!type || !RESULT_TYPES.has(type)) return item;\n  if (type === \"tool_search_output\" && Array.isArray(item.tools) && item.tools.length > 0) {\n    return { ...item, tools: [] };\n  }\n  return boundModelToolOutputItem(item, 0);\n}\n\nfunction oldestLogicalUnitCuts(items: readonly CompactionItem[]): number[] {\n  const userMessageIndexes: number[] = [];\n  for (let index = 0; index < items.length; index += 1) {\n    if (isUserMessage(items[index])) userMessageIndexes.push(index);\n  }\n  const cuts: number[] = [];\n  if (userMessageIndexes.length === 0) {\n    return [items.length];\n  }\n  if (userMessageIndexes[0]! > 0) cuts.push(userMessageIndexes[0]!);\n  for (const index of userMessageIndexes.slice(1)) cuts.push(index);\n  cuts.push(items.length);\n  return cuts;\n}\n\n/**\n * Build the active history after compaction:\n * the newest real user messages that fit one cumulative 20k-token budget\n * (prior summaries excluded, images removed) plus one marked summary item.\n */\nexport function buildCompactionReplacementHistory(\n  items: readonly CompactionItem[],\n  summaryBody: string,\n): CompactionItem[] {\n  const retainedReversed: CompactionItem[] = [];\n  let remaining = COMPACT_USER_MESSAGE_MAX_TOKENS;\n  for (let index = items.length - 1; index >= 0 && remaining > 0; index -= 1) {\n    const item = items[index]!;\n    if (!isUserMessage(item) || isCompactionSummary(item)) {\n      continue;\n    }\n    const textTokens = estimateTextTokens(messageText(item));\n    retainedReversed.push(compactMessageToTokenBudget(item, remaining));\n    if (textTokens > remaining) {\n      remaining = 0;\n      break;\n    }\n    remaining -= textTokens;\n  }\n  const history = retainedReversed.reverse();\n  history.push(buildSummaryItem(summaryBody));\n  return history;\n}\n\nexport function compactionReplacementFingerprint(items: readonly CompactionItem[]): string {\n  // PostgreSQL JSONB does not preserve JavaScript object-key insertion order.\n  // Canonicalize recursively so a replacement has the same identity before\n  // and after its durable round trip.\n  const serialized = JSON.stringify(canonicalJsonValue(items));\n  return createHash(\"sha256\").update(serialized, \"utf8\").digest(\"hex\");\n}\n\nfunction canonicalJsonValue(value: unknown): unknown {\n  if (Array.isArray(value)) return value.map(canonicalJsonValue);\n  if (!value || typeof value !== \"object\") return value;\n  return Object.fromEntries(\n    Object.entries(value as Record<string, unknown>)\n      .filter(([, entry]) => entry !== undefined)\n      .sort(([left], [right]) => left.localeCompare(right))\n      .map(([key, entry]) => [key, canonicalJsonValue(entry)]),\n  );\n}\n\n/** Fingerprint the latest durable replacement prefix in active history. */\nexport function latestCompactionReplacementFingerprint(\n  items: readonly CompactionItem[],\n): string | null {\n  for (let index = items.length - 1; index >= 0; index -= 1) {\n    if (isCompactionSummary(items[index])) {\n      return compactionReplacementFingerprint(items.slice(0, index + 1));\n    }\n  }\n  return null;\n}\n\n/**\n * Build the synthetic summary item (a plain user message) appended to the\n * rebuilt active history.\n */\nexport function buildSummaryItem(summaryBody: string): CompactionItem {\n  const trimmed = summaryBody.trim();\n  if (!trimmed) {\n    throw new EmptyCompactionSummaryError({ stage: \"build_summary_item\" });\n  }\n  return {\n    type: \"message\",\n    role: \"user\",\n    content: `${SUMMARY_PREFIX}\\n${trimmed}`,\n    [COMPACTION_SUMMARY_MARKER]: true,\n  };\n}\n\nfunction compactMessageToTokenBudget(item: CompactionItem, maxTokens: number): CompactionItem {\n  const text = messageText(item);\n  const next = { ...item };\n  if (estimateTextTokens(text) > maxTokens) {\n    next.content = truncateMiddleByEstimatedTokens(text, maxTokens);\n    return next;\n  }\n  next.content = contentWithoutImages(item);\n  return next;\n}\n\nfunction truncateMiddleByEstimatedTokens(text: string, maxTokens: number): string {\n  const budget = Math.max(0, Math.floor(maxTokens));\n  if (estimateTextTokens(text) <= budget) {\n    return text;\n  }\n  if (estimateTextTokens(USER_MESSAGE_TRUNCATION_MARKER) > budget) {\n    return tokenBoundedPrefix(USER_MESSAGE_TRUNCATION_MARKER, budget);\n  }\n\n  let low = 0;\n  let high = text.length;\n  let best = USER_MESSAGE_TRUNCATION_MARKER;\n  while (low <= high) {\n    const keepCodeUnits = Math.floor((low + high) / 2);\n    const candidate = middleTruncationCandidate(text, keepCodeUnits);\n    if (estimateTextTokens(candidate) <= budget) {\n      best = candidate;\n      low = keepCodeUnits + 1;\n    } else {\n      high = keepCodeUnits - 1;\n    }\n  }\n  return best;\n}\n\nfunction middleTruncationCandidate(text: string, keepCodeUnits: number): string {\n  const headTarget = Math.ceil(keepCodeUnits / 2);\n  const tailTarget = Math.floor(keepCodeUnits / 2);\n  const headEnd = validPrefixBoundary(text, headTarget);\n  const tailStart = validSuffixBoundary(text, text.length - tailTarget);\n  return `${text.slice(0, headEnd)}${USER_MESSAGE_TRUNCATION_MARKER}${text.slice(tailStart)}`;\n}\n\nfunction tokenBoundedPrefix(text: string, maxTokens: number): string {\n  let low = 0;\n  let high = text.length;\n  let best = \"\";\n  while (low <= high) {\n    const target = Math.floor((low + high) / 2);\n    const end = validPrefixBoundary(text, target);\n    const candidate = text.slice(0, end);\n    if (estimateTextTokens(candidate) <= maxTokens) {\n      best = candidate;\n      low = target + 1;\n    } else {\n      high = target - 1;\n    }\n  }\n  return best;\n}\n\n/** Largest boundary at or below target that does not split a surrogate pair. */\nfunction validPrefixBoundary(text: string, target: number): number {\n  let boundary = Math.max(0, Math.min(text.length, target));\n  if (\n    boundary > 0 &&\n    boundary < text.length &&\n    isHighSurrogate(text.charCodeAt(boundary - 1)) &&\n    isLowSurrogate(text.charCodeAt(boundary))\n  ) {\n    boundary -= 1;\n  }\n  return boundary;\n}\n\n/** Smallest boundary at or above target that does not split a surrogate pair. */\nfunction validSuffixBoundary(text: string, target: number): number {\n  let boundary = Math.max(0, Math.min(text.length, target));\n  if (\n    boundary > 0 &&\n    boundary < text.length &&\n    isHighSurrogate(text.charCodeAt(boundary - 1)) &&\n    isLowSurrogate(text.charCodeAt(boundary))\n  ) {\n    boundary += 1;\n  }\n  return boundary;\n}\n\nfunction isHighSurrogate(codeUnit: number): boolean {\n  return codeUnit >= 0xd800 && codeUnit <= 0xdbff;\n}\n\nfunction isLowSurrogate(codeUnit: number): boolean {\n  return codeUnit >= 0xdc00 && codeUnit <= 0xdfff;\n}\n\nfunction contentWithoutImages(item: CompactionItem): unknown {\n  const content = (item as { content?: unknown }).content;\n  if (!Array.isArray(content)) {\n    return content;\n  }\n  return content.filter((part) => {\n    if (!part || typeof part !== \"object\") {\n      return true;\n    }\n    const type = (part as { type?: unknown }).type;\n    return type !== \"input_image\" && type !== \"image_url\";\n  });\n}\n\nfunction messageText(item: CompactionItem): string {\n  const content = (item as { content?: unknown }).content;\n  if (typeof content === \"string\") {\n    return content;\n  }\n  if (Array.isArray(content)) {\n    return content\n      .map((part) => {\n        if (part && typeof part === \"object\") {\n          const record = part as { text?: unknown; content?: unknown };\n          if (typeof record.text === \"string\") {\n            return record.text;\n          }\n          if (typeof record.content === \"string\") {\n            return record.content;\n          }\n        }\n        return \"\";\n      })\n      .join(\"\");\n  }\n  return \"\";\n}\n\nexport function renderCompactionPromptInputForChat(input: readonly CompactionItem[]): string {\n  return input.map(renderItem).join(\"\\n\");\n}\n\nfunction renderItem(item: CompactionItem): string {\n  const type = itemType(item) ?? \"unknown\";\n  if (type === \"message\") {\n    const role = itemRole(item) ?? \"assistant\";\n    return `[${role}] ${messageText(item)}`;\n  }\n  if (type === \"reasoning\") {\n    return \"[reasoning] (omitted)\";\n  }\n  if (RESULT_TYPES.has(type)) {\n    return `[tool_result] ${resultText(item)}`;\n  }\n  if (RESULT_TYPE_BY_CALL_TYPE[type]) {\n    return `[tool_call ${type}] ${callText(item)}`;\n  }\n  return `[${type}] ${safeStringify(item)}`;\n}\n\nfunction resultText(item: CompactionItem): string {\n  const output = (item as { output?: unknown }).output;\n  if (typeof output === \"string\") {\n    return output;\n  }\n  return safeStringify(output ?? item);\n}\n\nfunction callText(item: CompactionItem): string {\n  const name = (item as { name?: unknown }).name;\n  const args = (item as { arguments?: unknown }).arguments;\n  const namePart = typeof name === \"string\" ? name : \"\";\n  const argPart = typeof args === \"string\" ? args : safeStringify(args ?? {});\n  return `${namePart} ${argPart}`.trim();\n}\n\nfunction safeStringify(value: unknown): string {\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n","// packages/runtime/src/sandbox-computer.ts — the agent computer-use surface (P4.3).\n//\n// A `Computer` impl backed by xdotool (mouse/keyboard/move/click/type/key) +\n// scrot (screenshots), issued through the SAME externally-owned `session` the\n// human watches over Channel B. The agent and the human share ONE :0 display —\n// zero projection: ffmpeg reads exactly the pixels xdotool draws. Exposed to the\n// Agents SDK as a `computerTool` carried by `ComputerUseCapability`, pushed into\n// `buildAgentCapabilities` when `computerUseEnabled && desktopCapableBackend`.\n//\n// This file lives OUTSIDE the @opengeni/runtime/sandbox agent-loop-free leaf\n// (it imports `computerTool` from the @openai/agents root, which the leaf forbids)\n// and is wired into the agent-loop barrel (packages/runtime/src/index.ts).\n//\n// ── Adversarial-review fixes folded in (module 05 §Adversarial) ──────────────\n//   F1  exec is OPTIONAL on every provider (Modal has only execCommand) — the\n//       primitive dual-paths `session.exec ?? session.execCommand`.\n//   F2  execCommand returns a FORMATTED STRING with a metadata preamble, not raw\n//       stdout — screenshots read the PNG by running `base64 <path>` over the SAME\n//       command primitive and stripping the banner (NOT `session.readFile`: Modal's\n//       readFile path-validates against the /workspace root and THROWS\n//       \"Sandbox path /tmp/…png escapes the workspace root\", so the /tmp scrot can\n//       never be read → empty frame → `image_url: ''` → model 400). This mirrors\n//       recording.ts/channel-a fsReadViaExec. Exit codes come from the established\n//       `sandboxCommandExitCode` parser, not a `.exitCode` field.\n//   F3  exec/execCommand YIELDS (does not wait) — `sandboxCommandStillRunning` is\n//       treated as a retriable failure, and the input commands complete well under\n//       the yield window.\n//   F4  import paths: `computerTool`/`Computer` from `@openai/agents` (root, via\n//       the agents-core star re-export); `Capability`/`requireBoundSession` from\n//       `@openai/agents/sandbox`. `Button` is NOT exported — the union is inlined.\n//   F5  scroll deltas are model PIXELS (often hundreds) — divided by a notch step\n//       and clamped, NOT used as literal wheel-click `--repeat` counts.\n\nimport { computerTool, tool, type Computer, type Tool } from \"@openai/agents\";\nimport { Capability, type SandboxSessionLike } from \"@openai/agents/sandbox\";\nimport {\n  KeyAction,\n  PointerAction,\n  PointerButton,\n  type DesktopInputRequest,\n} from \"@opengeni/agent-proto\";\nimport { redactSensitiveText } from \"@opengeni/contracts\";\n\nimport { sandboxCommandExitCode, sandboxCommandOutput, sandboxCommandStillRunning } from \"./index\";\n// `stripExecBanner` is the SAME pure helper recording.ts uses to recover the raw\n// command body from Modal's execCommand banner (\"…Output:\\n<body>\"). Imported from\n// the agent-loop-free leaf (importing a pure parser FROM the leaf is allowed — the\n// leaf boundary only forbids the leaf importing the agent loop, not the reverse).\nimport { ensureDisplayStack, stripExecBanner } from \"./sandbox\";\n\n// `requireBoundSession` lives in @openai/agents-core/sandbox/capabilities/base\n// but is NOT re-exported from the public @openai/agents/sandbox barrel, so we\n// inline the trivial bound-session guard (parity with the SDK's own helper).\nfunction requireBoundSession(\n  capabilityType: string,\n  session?: SandboxSessionLike,\n): SandboxSessionLike {\n  if (!session) {\n    throw new ComputerUnavailableError(`capability \"${capabilityType}\" used before bind(session)`);\n  }\n  return session;\n}\n\n// `Button` is intentionally NOT imported (it is not a public export, F4) — the\n// union is inlined and kept in lockstep with @openai/agents-core/computer.d.ts.\ntype ComputerButton = \"left\" | \"right\" | \"wheel\" | \"back\" | \"forward\";\n\nconst DEFAULT_DISPLAY = \":0\";\nconst DEFAULT_DIMENSIONS: [number, number] = [1280, 800];\n// Commands must complete well under this (F3): xdotool/scrot of a 1280x800 PNG is\n// sub-second; the wait gives headroom on a cold gVisor box without masking a wedge.\nconst ACTION_YIELD_MS = 15_000;\n// Model scroll deltas are pixels (F5); one wheel \"notch\" ≈ this many pixels. e2b\n// uses a similar divisor. Clamp keeps a runaway delta from spamming the wheel.\nconst SCROLL_NOTCH_PIXELS = 100;\nconst SCROLL_MAX_CLICKS = 15;\n// screenshot() never hands the model an empty image_url (the SDK turns \"\" into\n// `image_url: ''`, which the model API 400s). A cold/not-yet-painting :0 can yield\n// zero-byte frames for the WHOLE warm-up window of a freshly cold-booted box — Xvfb\n// + XFCE + dbus + font-cache under gVisor routinely take 20s+, and the recovery path\n// after a machine→sandbox swap ALWAYS hits a stone-cold Modal box on its first turn.\n// So we retry across a bounded WALL-CLOCK budget (not a tiny fixed attempt count) with\n// a short pause between tries, so that first post-cold / post-swap screenshot self-heals\n// as the display warms — then FAIL LOUD once the budget is genuinely spent (a display\n// that is dead, not merely warming). ~800ms of retries (the prior 3×400ms) was far too\n// short to ride out a cold gVisor XFCE boot, so the turn failed loud on a transient.\nconst SCREENSHOT_WARMUP_BUDGET_MS = 30_000;\nconst SCREENSHOT_RETRY_DELAY_MS = 750;\n// The screenshot PNG is read back off the box by base64-ing it over the provider's exec\n// channel. Modal's exec collects stdout into a BOUNDED buffer that silently EMPTIES a\n// single oversized read: a fully-painted 1280x800 desktop PNG (~222 KB) base64s to\n// ~296 KB, which trips the cap and returns \"\" — the blank-frame incident. A partly-\n// painted frame (~200 KB base64) slipped under it, which is why this only surfaced once\n// the paint gate began delivering FULLY-painted frames. (Channel-A's file read already\n// caps its own base64-over-exec output for the same reason; the screenshot read was the\n// one large read that didn't bound itself.) We therefore read the file in 3-byte-aligned\n// CHUNKS whose per-read base64 (~131 KB) stays well under the cap, then VALIDATE the\n// reconstructed byte count against the on-box file size. 98304 = 96 KiB, divisible by 3\n// so each chunk's base64 is self-contained (no cross-chunk padding) and concatenating the\n// decoded chunks reconstructs the PNG byte-exactly.\nconst SCREENSHOT_READ_CHUNK_BYTES = 98_304;\n\nexport type SandboxComputerOptions = {\n  display?: string; // \":0\"\n  dimensions?: [number, number]; // must match the Xvfb geometry\n  runAs?: string; // provider runAs (modal/docker: \"sandbox\"); undefined otherwise\n  typeDelayMs?: number; // xdotool type --delay (default 12ms)\n  readOnly?: boolean; // when true, every WRITE action throws ComputerReadOnlyError\n  screenshotTmpDir?: string; // \"/tmp\"\n  // How long screenshot() keeps retrying an empty (still-warming) frame before it\n  // FAILS LOUD, and the pause between tries. Defaults to the cold-boot warm-up budget;\n  // exposed mainly so tests can shrink it (a real caller wants the full budget).\n  screenshotWarmupBudgetMs?: number;\n  screenshotRetryDelayMs?: number;\n  /**\n   * One turn-scoped preparation hook, invoked by the first real computer action.\n   * The agent may advertise computer-use on every turn, but merely advertising the\n   * tool must not boot Xvfb/XFCE or start a recording. The runtime capability owns\n   * this hook and uses it to bring up :0 (and optionally notify the worker) only\n   * after the model actually chooses a computer tool.\n   */\n  prepare?: (session: SandboxSessionLike) => Promise<void>;\n};\n\n// X keysym map for keypress(): model key names → xdotool keysyms.\nconst KEYSYM: Record<string, string> = {\n  ctrl: \"ctrl\",\n  control: \"ctrl\",\n  alt: \"alt\",\n  option: \"alt\",\n  shift: \"shift\",\n  cmd: \"super\",\n  meta: \"super\",\n  win: \"super\",\n  super: \"super\",\n  enter: \"Return\",\n  return: \"Return\",\n  tab: \"Tab\",\n  esc: \"Escape\",\n  escape: \"Escape\",\n  backspace: \"BackSpace\",\n  delete: \"Delete\",\n  space: \"space\",\n  up: \"Up\",\n  down: \"Down\",\n  left: \"Left\",\n  right: \"Right\",\n  pageup: \"Prior\",\n  pagedown: \"Next\",\n  home: \"Home\",\n  end: \"End\",\n};\nfunction toKeysym(k: string): string {\n  const low = k.toLowerCase();\n  if (KEYSYM[low]) return KEYSYM[low];\n  if (/^f([1-9]|1[0-2])$/.test(low)) return low.toUpperCase();\n  return low.length === 1 ? low : k;\n}\nconst BUTTON_NUM: Record<ComputerButton, number> = {\n  left: 1,\n  wheel: 2,\n  right: 3,\n  back: 8,\n  forward: 9,\n};\n\n// The structural slice of a provider session computer-use drives. exec and\n// execCommand are optional because the SDK's SandboxSessionLike leaves them\n// optional (Modal implements execCommand, not exec — F1). readFile is intentionally\n// NOT in this type: screenshots read the /tmp PNG via `base64 <path>` over\n// exec/execCommand (readFile path-validates against /workspace and rejects /tmp).\ntype ExecResultLike = {\n  output?: string;\n  stdout?: string;\n  stderr?: string;\n  exitCode?: number | null;\n  sessionId?: number;\n};\ntype ComputerSession = {\n  // A native provider exec returns a structured `ExecResultLike`; the routing proxy\n  // fronting a Modal box returns the execCommand banner STRING. Both are handled.\n  exec?: (args: {\n    cmd: string;\n    runAs?: string;\n    yieldTimeMs?: number;\n    maxOutputTokens?: number;\n  }) => Promise<ExecResultLike | string>;\n  execCommand?: (args: {\n    cmd: string;\n    runAs?: string;\n    yieldTimeMs?: number;\n    maxOutputTokens?: number;\n  }) => Promise<string>;\n};\n\n/** No exec/execCommand on the session, or the display is not up. */\nexport class ComputerUnavailableError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"ComputerUnavailableError\";\n  }\n}\n/** The screenshot file read back SHORT of its on-box byte size — a chunk was truncated\n *  by the provider's exec-output cap. This is deterministic, NOT a warm-up transient, so\n *  it fails LOUD immediately with the byte counts (never a silent blank the model would\n *  read as a real empty screen) and is not retried. */\nexport class ScreenshotReadError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"ScreenshotReadError\";\n  }\n}\n/** A write action attempted while readOnly. */\nexport class ComputerReadOnlyError extends Error {\n  constructor() {\n    super(\"computer-use is read-only — write actions are disabled\");\n    this.name = \"ComputerReadOnlyError\";\n  }\n}\n/** A nonzero xdotool/scrot exit, OR a command that did not finish before the\n *  yield window (F3 — \"still running\" is a failure, not a silent success). */\nexport class ComputerActionError extends Error {\n  constructor(\n    public cmd: string,\n    public exitCode: number,\n    public stderr: string,\n  ) {\n    super(`computer action failed (${exitCode}): ${cmd}${stderr ? `\\n${stderr}` : \"\"}`);\n    this.name = \"ComputerActionError\";\n  }\n}\n\n/**\n * The Computer the agent drives. Every action issues ONE shell line through the\n * externally-owned session (exec ?? execCommand, F1), prefixed with the display.\n * screenshot() scrots to a /tmp file and reads the RAW bytes by running\n * `base64 <path>` over the SAME command primitive and stripping the banner — NOT\n * `session.readFile` (Modal's readFile path-validates against /workspace and rejects\n * /tmp with \"escapes the workspace root\", which would yield an empty frame and 400\n * the model). The base64-over-exec path is /tmp-readable and binary-safe.\n */\nexport class SandboxComputer implements Computer {\n  readonly environment = \"ubuntu\" as const;\n  readonly dimensions: [number, number];\n  private session: ComputerSession & SandboxSessionLike;\n  private readonly display: string;\n  private readonly runAs?: string;\n  private readonly typeDelayMs: number;\n  private readonly readOnly: boolean;\n  private readonly tmp: string;\n  private readonly screenshotWarmupBudgetMs: number;\n  private readonly screenshotRetryDelayMs: number;\n  private readonly prepare: ((session: SandboxSessionLike) => Promise<void>) | undefined;\n  private prepared = false;\n  private preparation: Promise<void> | null = null;\n\n  constructor(session: SandboxSessionLike, opts: SandboxComputerOptions = {}) {\n    this.session = session as ComputerSession & SandboxSessionLike;\n    this.display = opts.display ?? DEFAULT_DISPLAY;\n    this.dimensions = opts.dimensions ?? DEFAULT_DIMENSIONS;\n    if (opts.runAs !== undefined) {\n      this.runAs = opts.runAs;\n    }\n    this.typeDelayMs = opts.typeDelayMs ?? 12;\n    this.readOnly = opts.readOnly ?? false;\n    this.tmp = opts.screenshotTmpDir ?? \"/tmp\";\n    this.screenshotWarmupBudgetMs = opts.screenshotWarmupBudgetMs ?? SCREENSHOT_WARMUP_BUDGET_MS;\n    this.screenshotRetryDelayMs = opts.screenshotRetryDelayMs ?? SCREENSHOT_RETRY_DELAY_MS;\n    this.prepare = opts.prepare;\n  }\n\n  /** Rebind to a freshly resumed-by-id session after a box rollover / re-establish. */\n  rebind(session: SandboxSessionLike) {\n    this.session = session as ComputerSession & SandboxSessionLike;\n    this.prepared = false;\n    this.preparation = null;\n  }\n\n  private async prepareOnce(): Promise<void> {\n    if (this.prepared) return;\n    if (!this.prepare) {\n      // No lazy hook means the caller handed us an already-ready display, which\n      // is the historical direct-construction behavior used by embedders/tests.\n      this.prepared = true;\n      return;\n    }\n    this.preparation ??= this.prepare(this.session);\n    try {\n      await this.preparation;\n      this.prepared = true;\n    } catch (error) {\n      // A viewer may have contended the display flock or a provider operation may\n      // have failed transiently. Let a later computer call retry; never cache a\n      // rejected preparation as the permanent state of the turn.\n      this.preparation = null;\n      throw error;\n    }\n  }\n\n  // The single command primitive. Dual-paths exec/execCommand (F1), then uses the\n  // established string-aware parsers (F2/F3): exitCode from the preamble, and\n  // \"still running\" → a retriable failure. Returns the command OUTPUT body.\n  private async x(cmd: string): Promise<string> {\n    await this.prepareOnce();\n    const args = {\n      cmd: `DISPLAY=${this.display} ${cmd}`,\n      ...(this.runAs ? { runAs: this.runAs } : {}),\n      yieldTimeMs: ACTION_YIELD_MS,\n      maxOutputTokens: 4_000,\n    };\n    let result: ExecResultLike | string;\n    if (typeof this.session.exec === \"function\") {\n      result = await this.session.exec(args);\n    } else if (typeof this.session.execCommand === \"function\") {\n      result = await this.session.execCommand(args);\n    } else {\n      throw new ComputerUnavailableError(\"session cannot run commands (no exec/execCommand)\");\n    }\n    const output = sandboxCommandOutput(result);\n    if (sandboxCommandStillRunning(result)) {\n      // F3: the command exceeded the yield window. WARN AND RETURN rather than\n      // throw. Throwing here causes the SDK's catch in `_runComputerActionAndScreenshot`\n      // to set output='' and build `{image_url:\"\"}` → Azure 400. By returning\n      // instead, the SDK proceeds past the action loop and calls computer.screenshot()\n      // so the model gets the REAL current frame for its next step.\n      //\n      // screenshot()'s FAIL-LOUD + retry contract is preserved: if scrot itself\n      // times out (very unlikely at 15 s), x() returns here, readScreenshotBytes\n      // produces empty bytes, and the retry loop eventually throws. The wire-level\n      // backstop in computerCallNormalizingFetch is also in place as a second net.\n      console.warn(\n        `[SandboxComputer] action command did not finish before the ${ACTION_YIELD_MS}ms yield window — proceeding to screenshot: ${redactSensitiveText(cmd)}`,\n      );\n      return output;\n    }\n    const exitCode = sandboxCommandExitCode(result);\n    if (exitCode !== null && exitCode !== 0) {\n      throw new ComputerActionError(cmd, exitCode, output);\n    }\n    return output;\n  }\n\n  private guardWrite() {\n    if (this.readOnly) throw new ComputerReadOnlyError();\n  }\n  private shq(s: string): string {\n    return `'${s.replace(/'/g, `'\\\\''`)}'`;\n  }\n\n  async screenshot(): Promise<string> {\n    // F2: scrot to a /tmp file, then read the RAW PNG bytes by running `base64\n    // <path>` over the SAME command primitive (exec ?? execCommand) and stripping\n    // the banner — NOT `session.readFile`. On Modal, readFile path-validates the\n    // path against the /workspace root and THROWS for /tmp (\"Sandbox path\n    // /tmp/og-shot-*.png escapes the workspace root\"), so the scrot could never be\n    // read → empty frame → `image_url: ''` → the model 400s. The base64-over-exec\n    // mechanism (mirroring Channel A's bounded file reads\n    // fsReadViaExec) is /tmp-readable and binary-safe. We do NOT use execCommand's\n    // body via the `this.x()` parser — that drops the execCommand string body; the\n    // banner is stripped explicitly here so the base64 payload survives intact.\n    //\n    // CRITICAL CONTRACT: this NEVER returns an empty string. The Agents SDK builds\n    // the model-facing image as `data:image/png;base64,${output}` — so an empty\n    // `output` becomes `image_url: ''`, which the model API rejects with\n    // \"400 Invalid input[N].output.image_url, expected a valid URL\" and kills the\n    // turn. An empty/failed frame is therefore a THROW (a clear action failure the\n    // SDK surfaces), never a silent \"\". We also self-heal a transient cold-display\n    // frame: bounded retries with a short wait between attempts, so a :0 that is up\n    // but momentarily not painting (XFCE/dbus still warming) recovers without\n    // failing the turn.\n    let lastError: unknown;\n    const deadline = Date.now() + this.screenshotWarmupBudgetMs;\n    let attempt = 0;\n    // Retry across a WALL-CLOCK budget (not a fixed count): a stone-cold box on the\n    // first post-swap / post-cold turn can take 20s+ to paint, and a zero-byte frame\n    // is a KNOWN transient during that warm-up — not a reason to fail the turn.\n    while (true) {\n      if (attempt > 0) {\n        await new Promise((r) => setTimeout(r, this.screenshotRetryDelayMs));\n      }\n      attempt++;\n      const f = `${this.tmp}/og-shot-${Date.now()}-${Math.random().toString(36).slice(2)}.png`;\n      try {\n        await this.x(`scrot --pointer --overwrite ${f}`);\n        const bytes = await this.readScreenshotBytes(f);\n        if (bytes.length === 0) {\n          // A cold/not-yet-painting :0 yields a zero-byte frame. Retry rather than\n          // hand the model an empty image_url; throw once the budget is spent.\n          throw new ComputerUnavailableError(\n            \"scrot produced an empty screenshot (display not up?)\",\n          );\n        }\n        return Buffer.from(bytes).toString(\"base64\");\n      } catch (error) {\n        lastError = error;\n        // A short/truncated read is deterministic (the exec-output cap), not a warm-up\n        // transient — retrying only burns the budget and delays a legible failure. Fail\n        // loud NOW (the `finally` still cleans up the temp file).\n        if (error instanceof ScreenshotReadError) {\n          throw error;\n        }\n      } finally {\n        // Best-effort cleanup on every attempt (success OR failure); never mask the\n        // screenshot result.\n        // If preparation itself failed, scrot never ran and no file exists. Do\n        // not route cleanup through x(), because that would retry the expensive\n        // display preparation merely to delete a nonexistent path.\n        if (this.prepared) {\n          await this.x(`rm -f ${f}`).catch(() => undefined);\n        }\n      }\n      // Stop once the warm-up budget is spent — the NEXT sleep would push us past it.\n      if (Date.now() + this.screenshotRetryDelayMs >= deadline) {\n        break;\n      }\n    }\n    // Exhausted the warm-up budget: FAIL LOUD. A clear throw is the only acceptable\n    // outcome — returning \"\" here would surface to the model as an invalid empty\n    // image_url. Reaching here means the display was still dead after ~30s, not merely\n    // warming, so a hard action failure is correct.\n    if (lastError instanceof Error) {\n      throw lastError;\n    }\n    throw new ComputerUnavailableError(\"scrot produced an empty screenshot (display not up?)\");\n  }\n\n  // Run a read-only command over the SAME command primitive computer actions use\n  // (exec ?? execCommand) and return its RAW stdout body — NOT `session.readFile` (Modal\n  // path-validates against /workspace and rejects /tmp) and NOT `this.x()` (its\n  // `sandboxCommandOutput` parser drops the execCommand STRING body). exec exposes a\n  // structured stdout; execCommand returns the formatted STRING, so we strip its banner\n  // (\"…Output:\\n<body>\") to recover the body.\n  //\n  // ROUTING-PROXY SEAM: when the selfhosted feature is on, the turn's box is wrapped in a\n  // `RoutingSandboxSession`, which ALWAYS exposes an `exec` method — but for a Modal-backed\n  // box (no native `exec`) that method internally falls back to `execCommand` and returns\n  // the formatted STRING, not a `{output}` object. `sandboxCommandOutput` returns \"\" for a\n  // string, so a naive `sandboxCommandOutput(await session.exec())` silently dropped the\n  // whole screenshot body → empty read → \"display not up\" error card on EVERY Modal\n  // computer-use turn once routing was enabled. So a STRING exec result is banner-stripped\n  // exactly like the direct execCommand path; only a structured object goes to\n  // sandboxCommandOutput.\n  private async readCmdRaw(cmd: string): Promise<string> {\n    const args = {\n      cmd,\n      ...(this.runAs ? { runAs: this.runAs } : {}),\n      yieldTimeMs: ACTION_YIELD_MS,\n      // null disables the provider's TOKEN truncation; the byte cap this method chunks\n      // around is a separate, lower-level exec-stdout buffer limit.\n      maxOutputTokens: null as unknown as number,\n    };\n    if (typeof this.session.exec === \"function\") {\n      const result = await this.session.exec(args);\n      // A routing proxy fronting a Modal box returns the execCommand banner STRING;\n      // a native structured exec returns an object. Handle both so neither silently\n      // yields an empty body.\n      return typeof result === \"string\" ? stripExecBanner(result) : sandboxCommandOutput(result);\n    }\n    if (typeof this.session.execCommand === \"function\") {\n      return stripExecBanner(await this.session.execCommand(args));\n    }\n    throw new ComputerUnavailableError(\n      \"session cannot run commands (no exec/execCommand) — screenshots unavailable\",\n    );\n  }\n\n  // Read the screenshot PNG bytes off the box. A SINGLE `base64 <file>` over Modal's\n  // exec silently returns \"\" once the base64 exceeds the exec-stdout buffer cap (a full\n  // desktop ~296 KB base64 trips it — the blank-frame incident). So we size the file\n  // first, then base64 it in SCREENSHOT_READ_CHUNK_BYTES-sized, 3-byte-aligned chunks\n  // (each read's base64 stays well under the cap) and reconstruct — validating the total\n  // against the on-box size and failing LOUD on any short read rather than handing back a\n  // truncated/blank frame. Binary-safe: base64 is plain ASCII over stdout.\n  private async readScreenshotBytes(path: string): Promise<Uint8Array> {\n    // On-box byte size (tiny output — always safe). A still-warming :0 can yield a\n    // zero-byte scrot file; report empty so the caller retries within its warm-up budget.\n    const sizeRaw = (await this.readCmdRaw(`wc -c < ${path} 2>/dev/null`)).replace(/[^0-9]/g, \"\");\n    const fileSize = Number.parseInt(sizeRaw, 10);\n    if (!Number.isFinite(fileSize) || fileSize <= 0) return new Uint8Array();\n\n    const chunks: Buffer[] = [];\n    const nChunks = Math.ceil(fileSize / SCREENSHOT_READ_CHUNK_BYTES);\n    for (let i = 0; i < nChunks; i++) {\n      // `dd bs=CHUNK skip=i count=1` reads bytes [i*CHUNK, (i+1)*CHUNK); CHUNK % 3 == 0\n      // so each chunk's base64 is self-contained and decoded chunks concatenate exactly.\n      const raw = await this.readCmdRaw(\n        `dd if=${path} bs=${SCREENSHOT_READ_CHUNK_BYTES} skip=${i} count=1 2>/dev/null | base64`,\n      );\n      chunks.push(Buffer.from(raw.replace(/\\s+/g, \"\"), \"base64\"));\n    }\n    const bytes = Buffer.concat(chunks);\n    if (bytes.length !== fileSize) {\n      throw new ScreenshotReadError(\n        `screenshot read reconstructed ${bytes.length}B of ${fileSize}B (${nChunks} chunk(s), path=${path}) — a chunk was truncated by the exec-output cap; frame incomplete`,\n      );\n    }\n    return new Uint8Array(bytes);\n  }\n\n  async click(xp: number, yp: number, button: ComputerButton) {\n    this.guardWrite();\n    await this.x(`xdotool mousemove --sync ${xp} ${yp} click ${BUTTON_NUM[button] ?? 1}`);\n  }\n  async doubleClick(xp: number, yp: number) {\n    this.guardWrite();\n    await this.x(`xdotool mousemove --sync ${xp} ${yp} click --repeat 2 --delay 60 1`);\n  }\n  async move(xp: number, yp: number) {\n    this.guardWrite();\n    await this.x(`xdotool mousemove --sync ${xp} ${yp}`);\n  }\n  async scroll(xp: number, yp: number, sx: number, sy: number) {\n    this.guardWrite();\n    // F5: model deltas are PIXELS — convert to wheel notches, clamp.\n    const notches = (px: number): number =>\n      Math.min(SCROLL_MAX_CLICKS, Math.max(0, Math.round(Math.abs(px) / SCROLL_NOTCH_PIXELS)));\n    const vBtn = sy < 0 ? 4 : 5;\n    const hBtn = sx < 0 ? 6 : 7;\n    const vN = notches(sy);\n    const hN = notches(sx);\n    let cmd = `xdotool mousemove --sync ${xp} ${yp}`;\n    if (vN) cmd += ` click --repeat ${vN} ${vBtn}`;\n    if (hN) cmd += ` click --repeat ${hN} ${hBtn}`;\n    await this.x(cmd);\n  }\n  async type(text: string) {\n    this.guardWrite();\n    await this.x(`xdotool type --delay ${this.typeDelayMs} -- ${this.shq(text)}`);\n  }\n  async keypress(keys: string[]) {\n    this.guardWrite();\n    const combo = keys.map(toKeysym).join(\"+\");\n    await this.x(`xdotool key -- ${this.shq(combo)}`);\n  }\n  async drag(path: [number, number][]) {\n    this.guardWrite();\n    if (path.length === 0) return;\n    const [sx0, sy0] = path[0]!;\n    let cmd = `xdotool mousemove --sync ${sx0} ${sy0} mousedown 1`;\n    for (const [px, py] of path.slice(1)) cmd += ` mousemove --sync ${px} ${py}`;\n    cmd += ` mouseup 1`;\n    await this.x(cmd);\n  }\n  async wait() {\n    await new Promise((r) => setTimeout(r, 1000));\n  }\n}\n\n// ── The native-desktop computer (self-hosted / macOS) ────────────────────────\n//\n// `SandboxComputer` drives the desktop by shelling out to xdotool/scrot over the\n// session's `exec` — which needs those X utilities installed in the box image and\n// only works under X11. A SELF-HOSTED machine (macOS OR bring-your-own Linux) has\n// neither guarantee, so it drives the desktop NATIVELY over the control plane: the\n// Rust agent injects input via CGEvent (macOS) / XTEST (Linux) and captures via\n// ScreenCaptureKit / x11, exposed as the two `SelfhostedSession` ops below. No\n// xdotool/scrot dependency; works on macOS.\n\n/** The structural slice of a self-hosted session the native computer drives — the\n *  two control-plane ops added in session.ts. Kept structural (NOT an import of\n *  `SelfhostedSession`) so this agent-loop file never hard-couples to the sandbox\n *  leaf; the duck-typed `isNativeDesktopSession` probe (below) selects on it. */\nexport type NativeDesktopSession = {\n  desktopInput(event: DesktopInputRequest[\"event\"]): Promise<void>;\n  // `nativeWidth`/`nativeHeight` are the PRE-DOWNSCALE capture geometry (equal to\n  // width/height when the agent did not have to shrink the PNG to fit the transport\n  // budget). NativeDesktopComputer scales model clicks from the ENCODED pixel space\n  // back to native pixels using their ratio before injecting.\n  screenshot(): Promise<{\n    png: Uint8Array;\n    width: number;\n    height: number;\n    nativeWidth: number;\n    nativeHeight: number;\n  }>;\n};\n\n/** Model `Button` → wire `PointerButton`. The proto has no back/forward button, so\n *  those degrade to UNSPECIFIED (the agent ignores an unmapped button rather than\n *  mis-clicking). A total record so indexing is exhaustive. */\nconst POINTER_BUTTON: Record<ComputerButton, PointerButton> = {\n  left: PointerButton.POINTER_BUTTON_LEFT,\n  right: PointerButton.POINTER_BUTTON_RIGHT,\n  wheel: PointerButton.POINTER_BUTTON_MIDDLE,\n  back: PointerButton.POINTER_BUTTON_UNSPECIFIED,\n  forward: PointerButton.POINTER_BUTTON_UNSPECIFIED,\n};\n\n// Native capture (ScreenCaptureKit / x11) can hand back a null/empty FIRST frame in\n// the moments right after the agent connects — the capture stream still warming — the\n// same class of transient the scrot path retries around for a cold :0. Native capture\n// is normally sub-second, so the warm-up budget is much shorter than the scrot path's\n// 30 s cold-Modal-box budget; enough to ride a first-frame miss, not enough to hang a\n// turn on a genuinely dead capture. A TERMINAL failure (permission denied) short-\n// circuits the budget and fails immediately.\nconst NATIVE_SCREENSHOT_WARMUP_BUDGET_MS = 6_000;\nconst NATIVE_SCREENSHOT_RETRY_DELAY_MS = 400;\n\nexport type NativeDesktopComputerOptions = {\n  dimensions?: [number, number]; // the display geometry (must match the capture size)\n  environment?: NonNullable<Computer[\"environment\"]>; // \"ubuntu\" (default) | \"mac\" | ...; model uses it for OS key conventions\n  readOnly?: boolean; // when true, every WRITE action throws ComputerReadOnlyError\n  screenshotWarmupBudgetMs?: number; // wall-clock budget to retry a warming/empty first frame\n  screenshotRetryDelayMs?: number; // delay between warm-up retries\n};\n\n/** A capture failure that RETRYING cannot cure — Screen Recording (TCC) has not been\n *  granted to the agent, so every capture will deny until the user grants it. We fail\n *  FAST on this rather than burn the warm-up budget, and surface the reason verbatim so\n *  the operator sees \"grant Screen Recording\", not a blank screen. Matches the agent's\n *  `capture_rgba` denial strings (\"Screen Recording permission is not granted\",\n *  \"no shareable content (Screen Recording denied?)\"). */\nfunction isTerminalCaptureDenial(error: unknown): boolean {\n  const msg = (error instanceof Error ? error.message : String(error ?? \"\")).toLowerCase();\n  return (\n    msg.includes(\"screen recording\") ||\n    msg.includes(\"permission is not granted\") ||\n    msg.includes(\"consent\")\n  );\n}\n\n/**\n * A `Computer` that drives a SELF-HOSTED machine's OWN desktop NATIVELY over the\n * control plane (`desktopInput` inject + `screenshot` capture on the bound\n * `SelfhostedSession`) instead of xdotool/scrot over `exec`. Consent + epoch are\n * enforced AGENT-side, so an unconsented inject surfaces the session's mapped\n * control error.\n *\n * screenshot() returns raw base64 with NO data-URL prefix — the EXACT contract of\n * `SandboxComputer.screenshot`: the Agents SDK wraps it as\n * `data:image/png;base64,${output}`, so an empty string would become\n * `image_url: ''` and 400 the model turn. An empty PNG therefore THROWS\n * `ComputerUnavailableError` (mirroring SandboxComputer's empty-guard) — the model\n * never receives an empty image_url.\n */\nexport class NativeDesktopComputer implements Computer {\n  readonly environment: NonNullable<Computer[\"environment\"]>;\n  readonly dimensions: [number, number];\n  private session: NativeDesktopSession;\n  private readonly readOnly: boolean;\n  private readonly screenshotWarmupBudgetMs: number;\n  private readonly screenshotRetryDelayMs: number;\n  // The ENCODED vs NATIVE geometry of the MOST RECENT screenshot the model saw. The\n  // model computes click coordinates in the encoded-pixel space of that screenshot;\n  // when the agent downscaled the PNG to fit the transport budget, encoded < native,\n  // so we scale coordinates back up to native pixels before injecting (the agent's\n  // native inject — macOS CGEvent / Linux XTEST — expects native-pixel coordinates,\n  // exactly as it received them pre-downscale). Null until the first screenshot;\n  // equal encoded==native (or absent) ⇒ scale factor 1.0 ⇒ byte-identical behavior.\n  private lastEncoded: [number, number] | null = null;\n  private lastNative: [number, number] | null = null;\n\n  constructor(session: NativeDesktopSession, opts: NativeDesktopComputerOptions = {}) {\n    this.session = session;\n    this.dimensions = opts.dimensions ?? DEFAULT_DIMENSIONS;\n    // Default \"ubuntu\" (self-hosted Linux is the near-term target); a macOS session\n    // should pass \"mac\" so the model uses ⌘-based shortcuts — see the coordinate TODO.\n    this.environment = opts.environment ?? \"ubuntu\";\n    this.readOnly = opts.readOnly ?? false;\n    this.screenshotWarmupBudgetMs =\n      opts.screenshotWarmupBudgetMs ?? NATIVE_SCREENSHOT_WARMUP_BUDGET_MS;\n    this.screenshotRetryDelayMs = opts.screenshotRetryDelayMs ?? NATIVE_SCREENSHOT_RETRY_DELAY_MS;\n  }\n\n  /** Rebind to a freshly resumed-by-id session after a box rollover / re-establish. */\n  rebind(session: NativeDesktopSession) {\n    this.session = session;\n  }\n\n  private guardWrite() {\n    if (this.readOnly) throw new ComputerReadOnlyError();\n  }\n\n  /** Scale a coordinate the model expressed in the MOST RECENT screenshot's\n   *  ENCODED pixel space back to NATIVE pixels. When the last frame was not\n   *  downscaled (encoded == native), or no screenshot has been taken yet, this is a\n   *  1:1 identity — the byte-identical current behavior. The agent then applies its\n   *  own platform mapping (macOS divides native pixels by the backing scale to reach\n   *  CGEvent points; Linux XTEST is 1:1) exactly as it did pre-downscale. */\n  private toNative(x: number, y: number): { x: number; y: number } {\n    const enc = this.lastEncoded;\n    const nat = this.lastNative;\n    if (!enc || !nat || enc[0] <= 0 || enc[1] <= 0) return { x, y };\n    if (enc[0] === nat[0] && enc[1] === nat[1]) return { x, y };\n    return {\n      x: Math.round((x * nat[0]) / enc[0]),\n      y: Math.round((y * nat[1]) / enc[1]),\n    };\n  }\n\n  private async pointer(\n    x: number,\n    y: number,\n    action: PointerAction,\n    button: PointerButton,\n  ): Promise<void> {\n    // COORDINATE SEAM: the model computes x/y against the pixels of the screenshot it\n    // just saw — which the agent may have DOWNSCALED to fit the transport's max\n    // payload (a full-res Retina/busy screen exceeds NATS's 1 MiB default). We scale\n    // those encoded-pixel coordinates back to native pixels here, using the native\n    // geometry the last screenshot reported, so the agent's native inject lands the\n    // click where the model intended. When no downscale occurred the factor is 1.0\n    // and the coordinates pass through unchanged. Self-hosted Linux (XTEST/x11) and\n    // any non-downscaled frame are 1:1 and unaffected.\n    const n = this.toNative(x, y);\n    await this.session.desktopInput({\n      $case: \"pointer\",\n      pointer: { x: n.x, y: n.y, action, button },\n    });\n  }\n\n  async screenshot(): Promise<string> {\n    // CRITICAL CONTRACT (mirrors SandboxComputer.screenshot): NEVER return \"\". The\n    // Agents SDK builds the model image as `data:image/png;base64,${output}`; an\n    // empty output → `image_url: ''`. On the hosted computer_use_preview path the SDK\n    // catches a throw here, sets output='', and the wire-seam sanitizer rewrites the\n    // empty image_url to a BLANK 1×1 placeholder to dodge a 400 — so a capture MISS\n    // silently reaches the model as a \"blank desktop\" it then confidently reports.\n    //\n    // Native capture (ScreenCaptureKit / x11) can hand back a null/empty FIRST frame\n    // in the moments right after the agent connects (the capture stream warming) — the\n    // same transient the scrot path retries around for a cold :0. This path previously\n    // did a SINGLE capture, so one warm-up miss became a blank. We now RETRY across a\n    // bounded budget and, on a terminal failure, FAIL LOUD with the agent's actual\n    // reason (logged) — never a silent blank. A permission (TCC) denial is terminal:\n    // retrying cannot grant Screen Recording, so we break immediately.\n    let lastError: unknown;\n    const deadline = Date.now() + this.screenshotWarmupBudgetMs;\n    let attempt = 0;\n    while (true) {\n      if (attempt > 0) {\n        await new Promise((r) => setTimeout(r, this.screenshotRetryDelayMs));\n      }\n      attempt++;\n      try {\n        const { png, width, height, nativeWidth, nativeHeight } = await this.session.screenshot();\n        if (png.length === 0) {\n          // A warming capture yields an empty frame — retry rather than hand the model\n          // a blank; throw once the budget is spent.\n          throw new ComputerUnavailableError(\n            \"native desktop screenshot returned an empty frame (display not up?)\",\n          );\n        }\n        // Record the encoded (what the model sees) vs native geometry of THIS frame so\n        // the next click/move/scroll/drag scales its coordinates back to native pixels.\n        this.lastEncoded = [width, height];\n        this.lastNative = [nativeWidth || width, nativeHeight || height];\n        return Buffer.from(png).toString(\"base64\");\n      } catch (error) {\n        lastError = error;\n        // A permission denial will deny on every retry — fail fast with the reason.\n        if (isTerminalCaptureDenial(error)) break;\n      }\n      // Stop once the warm-up budget is spent — the NEXT sleep would push us past it.\n      if (Date.now() + this.screenshotRetryDelayMs >= deadline) {\n        break;\n      }\n    }\n    // Exhausted the budget (or hit a terminal denial): FAIL LOUD. Log the specific\n    // reason so the failure is DIAGNOSABLE (not a silent blank the model misreads),\n    // then rethrow — never return \"\".\n    const reason = redactSensitiveText(\n      lastError instanceof Error ? lastError.message : String(lastError),\n    );\n    console.warn(\n      `[NativeDesktopComputer] screenshot failed after ${attempt} attempt(s): ${reason}`,\n    );\n    if (lastError instanceof Error) {\n      throw lastError;\n    }\n    throw new ComputerUnavailableError(\n      \"native desktop screenshot returned an empty frame (display not up?)\",\n    );\n  }\n\n  async click(x: number, y: number, button: ComputerButton) {\n    this.guardWrite();\n    await this.pointer(\n      x,\n      y,\n      PointerAction.POINTER_ACTION_CLICK,\n      POINTER_BUTTON[button] ?? PointerButton.POINTER_BUTTON_LEFT,\n    );\n  }\n  async doubleClick(x: number, y: number) {\n    this.guardWrite();\n    await this.pointer(\n      x,\n      y,\n      PointerAction.POINTER_ACTION_DOUBLE_CLICK,\n      PointerButton.POINTER_BUTTON_LEFT,\n    );\n  }\n  async move(x: number, y: number) {\n    this.guardWrite();\n    await this.pointer(\n      x,\n      y,\n      PointerAction.POINTER_ACTION_MOVE,\n      PointerButton.POINTER_BUTTON_UNSPECIFIED,\n    );\n  }\n  async scroll(x: number, y: number, sx: number, sy: number) {\n    this.guardWrite();\n    // The scroll ANCHOR (x,y) is a screenshot-pixel position → scale to native like a\n    // click. The deltas (sx,sy) are relative scroll AMOUNTS, not positions; the agent\n    // owns the platform-appropriate wheel translation, so they pass through unscaled\n    // (no xdotool \"notch\" quantization here — that is an xdotool-specific artifact).\n    const n = this.toNative(x, y);\n    await this.session.desktopInput({\n      $case: \"scroll\",\n      scroll: { x: n.x, y: n.y, deltaX: sx, deltaY: sy },\n    });\n  }\n  async type(text: string) {\n    this.guardWrite();\n    // A literal text burst: isText:true tells the agent to type the string verbatim\n    // (Unicode-aware) rather than interpret it as a key name.\n    await this.session.desktopInput({\n      $case: \"key\",\n      key: { key: text, isText: true, action: KeyAction.KEY_ACTION_PRESS },\n    });\n  }\n  async keypress(keys: string[]) {\n    this.guardWrite();\n    // A chord (\"ctrl+c\") as ONE non-text KeyEvent (isText:false ⇒ interpret as key\n    // names). We send the model's PLATFORM-INDEPENDENT key names joined with \"+\" —\n    // NOT xdotool X keysyms (SandboxComputer's toKeysym maps to \"Return\"/\"super\"/\n    // \"Prior\", which are X-specific and wrong for the macOS CGEvent path). The agent\n    // owns the per-platform key-name → keycode mapping (the KeyEvent.key contract).\n    await this.session.desktopInput({\n      $case: \"key\",\n      key: { key: keys.join(\"+\"), isText: false, action: KeyAction.KEY_ACTION_PRESS },\n    });\n  }\n  async drag(path: [number, number][]) {\n    this.guardWrite();\n    if (path.length === 0) return;\n    // Press at the start, move through each waypoint with the button held, release at\n    // the last point. The agent tracks button state across the DOWN → MOVE… → UP.\n    const [sx, sy] = path[0]!;\n    await this.pointer(\n      sx,\n      sy,\n      PointerAction.POINTER_ACTION_DOWN,\n      PointerButton.POINTER_BUTTON_LEFT,\n    );\n    for (const [px, py] of path.slice(1)) {\n      await this.pointer(\n        px,\n        py,\n        PointerAction.POINTER_ACTION_MOVE,\n        PointerButton.POINTER_BUTTON_LEFT,\n      );\n    }\n    const [ex, ey] = path[path.length - 1]!;\n    await this.pointer(ex, ey, PointerAction.POINTER_ACTION_UP, PointerButton.POINTER_BUTTON_LEFT);\n  }\n  async wait() {\n    await new Promise((r) => setTimeout(r, 1000));\n  }\n}\n\n/**\n * Backend-aware SELECTION discriminator: a SELF-HOSTED session exposes the two\n * native control-plane ops (`desktopInput` + `screenshot`); a MODAL session does\n * not (it drives the desktop via xdotool/scrot over `exec`). Duck-typing on those\n * two methods keeps this file from hard-importing `SelfhostedSession` (avoiding an\n * agent-loop ↔ sandbox-leaf import coupling) and is future-proof: any backend that\n * grows native inject/capture is picked up automatically.\n */\nexport function isNativeDesktopSession(\n  session: SandboxSessionLike,\n): session is SandboxSessionLike & NativeDesktopSession {\n  const s = session as Partial<NativeDesktopSession>;\n  return typeof s.desktopInput === \"function\" && typeof s.screenshot === \"function\";\n}\n\n// ── Function-transport (codex / text backend) computer tools ─────────────────\n//\n// The SDK emits computer-use ONLY as the HOSTED `computer_use_preview` tool, which\n// the codex / ChatGPT backend rejects (it accepts only function/custom/web_search\n// tool types) — so on codex the hosted tool is unusable and the agent has nothing\n// to drive the desktop with. We mirror EXACTLY how the SDK's filesystem capability\n// degrades `view_image` for the text transport: when the bound model does NOT\n// support the structured tool-output transport, emit a set of FUNCTION tools that\n// route to the SAME bound `Computer`, and hand the model the screen by rendering\n// the screenshot image-output as a text-transport data URL — the identical two-step\n// `imageOutputFromBytes` → `renderImageForTextTransport` the SDK's text `view_image`\n// uses. Those three helpers are NOT public exports of `@openai/agents` /\n// `@openai/agents/sandbox` (they live in the SDK's private capabilities/transport +\n// shared/media modules, unreachable via the package `exports` map), so — mirroring\n// selfhosted/session.ts's local `sniffImageMediaType` — the three tiny pure helpers\n// are reimplemented here in lockstep with the SDK.\n\n/** The SDK's tool-output image shape (@openai/agents-core shared/media `ToolOutputImage`). */\ntype ToolOutputImage = { type: \"image\"; image: { data: Uint8Array; mediaType: string } };\n\n/** Magic-byte image sniff, in lockstep with the SDK's `sniffImageMediaType`\n *  (shared/media). Screenshots are always PNG (scrot / ScreenCaptureKit / x11), so\n *  an unrecognized header defaults to image/png rather than failing the frame. */\nfunction sniffScreenshotMediaType(bytes: Uint8Array): string {\n  if (bytes[0] === 0x89 && bytes[1] === 0x50 && bytes[2] === 0x4e && bytes[3] === 0x47)\n    return \"image/png\";\n  if (bytes[0] === 0xff && bytes[1] === 0xd8 && bytes[2] === 0xff) return \"image/jpeg\";\n  if (bytes[0] === 0x47 && bytes[1] === 0x49 && bytes[2] === 0x46 && bytes[3] === 0x38)\n    return \"image/gif\";\n  if (\n    bytes[0] === 0x52 &&\n    bytes[1] === 0x49 &&\n    bytes[2] === 0x46 &&\n    bytes[3] === 0x46 &&\n    bytes[8] === 0x57 &&\n    bytes[9] === 0x45 &&\n    bytes[10] === 0x42 &&\n    bytes[11] === 0x50\n  )\n    return \"image/webp\";\n  return \"image/png\";\n}\n\n/** Build the SDK `ToolOutputImage` from raw screenshot bytes — the structured shape\n *  the SDK's `imageOutputFromBytes` produces (`{type:'image', image:{data,mediaType}}`). */\nfunction imageOutputFromScreenshotBytes(bytes: Uint8Array): ToolOutputImage {\n  return {\n    type: \"image\",\n    image: { data: Uint8Array.from(bytes), mediaType: sniffScreenshotMediaType(bytes) },\n  };\n}\n\n/** Render an image tool-output as a text-transport string, in lockstep with the\n *  SDK's private `renderImageForTextTransport` (capabilities/filesystem). Our image\n *  output always carries `data` as bytes, so it becomes a `data:<mediaType>;base64,…`\n *  URL — the exact form the text-backend `view_image` hands the model. */\nfunction renderImageForTextTransport(output: ToolOutputImage | string): string {\n  if (typeof output === \"string\") return output;\n  const { image } = output;\n  const mediaType =\n    typeof image.mediaType === \"string\" ? image.mediaType : \"application/octet-stream\";\n  return `data:${mediaType};base64,${Buffer.from(image.data).toString(\"base64\")}`;\n}\n\n/** Whether the bound model supports the structured tool-output transport, in\n *  lockstep with the SDK's private `supportsStructuredToolOutputTransport`\n *  (capabilities/transport): a ChatCompletions-family model — and an UNBOUND model\n *  (undefined) — does NOT, so it gets the function tools; every other model keeps\n *  the hosted `computer_use_preview` tool. The codex neutralize trick in index.ts\n *  drops `_modelInstance`, so this returns false there and the function tools win. */\nfunction supportsStructuredToolOutputTransport(modelInstance: unknown): boolean {\n  if (!modelInstance) return false;\n  const constructorName =\n    typeof modelInstance === \"object\" &&\n    modelInstance &&\n    typeof (modelInstance as { constructor?: unknown }).constructor === \"function\"\n      ? ((modelInstance as { constructor: { name?: string } }).constructor.name ?? \"\")\n      : \"\";\n  return !constructorName.includes(\"ChatCompletions\");\n}\n\nconst COMPUTER_READ_ONLY_MESSAGE =\n  \"computer-use is read-only for this session — click, double_click, move, scroll, type, keypress, and drag are disabled. Call computer_screenshot to observe the desktop.\";\n\n// The two coordinate properties every pointer tool shares. Raw JSON schema (NOT\n// zod: zod is not a @opengeni/runtime dependency) with `strict:false`, mirroring the\n// SDK's own `apply_patch` function-tool schema style.\nconst COORD_PROPS = {\n  x: {\n    type: \"integer\",\n    description: \"X coordinate in the pixels of the most recent computer_screenshot\",\n  },\n  y: {\n    type: \"integer\",\n    description: \"Y coordinate in the pixels of the most recent computer_screenshot\",\n  },\n} as const;\n\nfunction objectSchema(\n  properties: Record<string, unknown>,\n  required: string[],\n): Record<string, unknown> {\n  return { type: \"object\", properties, required, additionalProperties: false };\n}\n\n/**\n * The FUNCTION-transport computer tools for the codex / text backend, each routing\n * to the SAME bound `Computer` the hosted `computer_use_preview` tool would drive.\n * `computer_screenshot` hands the model the desktop two ways, selected by\n * `imageFunctionResults`:\n *   • false (chat-completions providers, the default) → the text-transport\n *     `data:image/png;base64,…` URL (imageOutputFromBytes → renderImageForTextTransport,\n *     the SDK's text `view_image` path) — those backends can't read structured image\n *     tool results.\n *   • true (the codex/ChatGPT backend) → the structured `{type:'image'}` tool output,\n *     which agents-core normalizes into an `input_image` content item inside the\n *     function_call_output — the codex /responses backend accepts and SEES it (a text\n *     data-URL there is just unreadable text). See index.ts for why it's on there.\n * Write tools return a concise confirmation; when read-only they return\n * {@link COMPUTER_READ_ONLY_MESSAGE} instead of throwing, and any action error is\n * returned as a string so a failed action never kills the turn. Exported so it can be\n * unit-tested against a fake `Computer`.\n */\nexport function computerFunctionTools(\n  computer: Computer,\n  readOnly: boolean,\n  needsApproval?: ComputerUseArgs[\"needsApproval\"],\n  imageFunctionResults = false,\n): Tool<unknown>[] {\n  const approval = needsApproval !== undefined ? { needsApproval: needsApproval as never } : {};\n  // Perform a WRITE action, surfacing read-only / failures as a model-readable\n  // string rather than an uncaught throw (an uncaught throw becomes a tool error\n  // the backend may 400 on, or kills the step).\n  const write = async (\n    confirmation: string,\n    action: () => void | Promise<void>,\n  ): Promise<string> => {\n    if (readOnly) return COMPUTER_READ_ONLY_MESSAGE;\n    try {\n      await action();\n      return confirmation;\n    } catch (error) {\n      if (error instanceof ComputerReadOnlyError) return COMPUTER_READ_ONLY_MESSAGE;\n      return `computer action failed: ${error instanceof Error ? error.message : String(error)}`;\n    }\n  };\n\n  return [\n    tool({\n      name: \"computer_screenshot\",\n      description:\n        \"Capture the current desktop and return it as an image. Call this FIRST and again after each action — all coordinates for click/move/scroll/drag are pixels of the most recent screenshot.\",\n      parameters: objectSchema({}, []) as never,\n      strict: false,\n      execute: async () => {\n        // screenshot() returns raw base64 PNG and NEVER an empty string (it throws\n        // instead), so the model can't receive an empty image_url.\n        const b64 = await computer.screenshot();\n        const bytes = Uint8Array.from(Buffer.from(b64, \"base64\"));\n        const image = imageOutputFromScreenshotBytes(bytes);\n        // On the codex backend return the structured image output so the model SEES\n        // the desktop (agents-core normalizes {type:'image'} → an input_image data-URL\n        // content item in the function_call_output); chat-completions providers get\n        // the text data-URL string they expect.\n        return imageFunctionResults ? image : renderImageForTextTransport(image);\n      },\n    }),\n    tool({\n      name: \"computer_click\",\n      description:\n        \"Click the mouse at (x, y). `button` is one of left|right|wheel|back|forward (default left). Take a computer_screenshot first to find coordinates.\",\n      parameters: objectSchema(\n        {\n          ...COORD_PROPS,\n          button: {\n            type: \"string\",\n            enum: [\"left\", \"right\", \"wheel\", \"back\", \"forward\"],\n            description: \"Mouse button; defaults to left\",\n          },\n        },\n        [\"x\", \"y\"],\n      ) as never,\n      strict: false,\n      ...approval,\n      execute: async (input) => {\n        const { x, y, button } = input as { x: number; y: number; button?: ComputerButton };\n        return write(`clicked ${button ?? \"left\"} at (${x}, ${y})`, () =>\n          computer.click(x, y, button ?? \"left\"),\n        );\n      },\n    }),\n    tool({\n      name: \"computer_double_click\",\n      description:\n        \"Double-click the left mouse button at (x, y). Take a computer_screenshot first to find coordinates.\",\n      parameters: objectSchema({ ...COORD_PROPS }, [\"x\", \"y\"]) as never,\n      strict: false,\n      ...approval,\n      execute: async (input) => {\n        const { x, y } = input as { x: number; y: number };\n        return write(`double-clicked at (${x}, ${y})`, () => computer.doubleClick(x, y));\n      },\n    }),\n    tool({\n      name: \"computer_move\",\n      description: \"Move the mouse cursor to (x, y) without clicking.\",\n      parameters: objectSchema({ ...COORD_PROPS }, [\"x\", \"y\"]) as never,\n      strict: false,\n      ...approval,\n      execute: async (input) => {\n        const { x, y } = input as { x: number; y: number };\n        return write(`moved to (${x}, ${y})`, () => computer.move(x, y));\n      },\n    }),\n    tool({\n      name: \"computer_scroll\",\n      description:\n        \"Scroll at (x, y) by scroll_x / scroll_y pixels (positive scroll_y scrolls down, negative up; positive scroll_x scrolls right).\",\n      parameters: objectSchema(\n        {\n          ...COORD_PROPS,\n          scroll_x: {\n            type: \"integer\",\n            description: \"Horizontal scroll amount in pixels (positive = right)\",\n          },\n          scroll_y: {\n            type: \"integer\",\n            description: \"Vertical scroll amount in pixels (positive = down)\",\n          },\n        },\n        [\"x\", \"y\", \"scroll_x\", \"scroll_y\"],\n      ) as never,\n      strict: false,\n      ...approval,\n      execute: async (input) => {\n        const { x, y, scroll_x, scroll_y } = input as {\n          x: number;\n          y: number;\n          scroll_x: number;\n          scroll_y: number;\n        };\n        return write(`scrolled (${scroll_x}, ${scroll_y}) at (${x}, ${y})`, () =>\n          computer.scroll(x, y, scroll_x, scroll_y),\n        );\n      },\n    }),\n    tool({\n      name: \"computer_type\",\n      description:\n        \"Type a literal text string at the current keyboard focus. Click the target field first.\",\n      parameters: objectSchema(\n        { text: { type: \"string\", description: \"The literal text to type\" } },\n        [\"text\"],\n      ) as never,\n      strict: false,\n      ...approval,\n      execute: async (input) => {\n        const { text } = input as { text: string };\n        return write(`typed ${text.length} character(s)`, () => computer.type(text));\n      },\n    }),\n    tool({\n      name: \"computer_keypress\",\n      description:\n        'Press a key or chord. `keys` is an ordered list pressed together, e.g. [\"ctrl\",\"c\"] or [\"Enter\"]. Use key names (ctrl, alt, shift, cmd, enter, tab, esc, arrows…), not characters.',\n      parameters: objectSchema(\n        {\n          keys: {\n            type: \"array\",\n            items: { type: \"string\" },\n            description: \"Keys pressed together as a chord\",\n          },\n        },\n        [\"keys\"],\n      ) as never,\n      strict: false,\n      ...approval,\n      execute: async (input) => {\n        const { keys } = input as { keys: string[] };\n        return write(`pressed ${keys.join(\"+\")}`, () => computer.keypress(keys));\n      },\n    }),\n    tool({\n      name: \"computer_drag\",\n      description:\n        \"Drag the left mouse button along a path of points. `path` is an ordered list of {x, y} pixels; the button is pressed at the first point, moved through each, and released at the last.\",\n      parameters: objectSchema(\n        {\n          path: {\n            type: \"array\",\n            description: \"Ordered list of points to drag through\",\n            items: {\n              type: \"object\",\n              properties: { x: { type: \"integer\" }, y: { type: \"integer\" } },\n              required: [\"x\", \"y\"],\n              additionalProperties: false,\n            },\n          },\n        },\n        [\"path\"],\n      ) as never,\n      strict: false,\n      ...approval,\n      execute: async (input) => {\n        const { path } = input as { path: Array<{ x: number; y: number }> };\n        const points = path.map((p) => [p.x, p.y] as [number, number]);\n        return write(`dragged through ${points.length} point(s)`, () => computer.drag(points));\n      },\n    }),\n  ] as unknown as Tool<unknown>[];\n}\n\n// ── The capability (the SDK seam) ────────────────────────────────────────────\n\n/**\n * EXPLICIT tool-transport selection, decided by the caller that knows the\n * provider's true wire identity (the worker's model resolution — see agent-turn.ts),\n * NOT inferred from the bound model instance's constructor name. This is the\n * HARDENING seam: `supportsStructuredToolOutputTransport` string-sniffs the\n * constructor for \"ChatCompletions\", which a wrapped / proxied / minified model\n * instance would defeat — silently handing a chat-completions provider the HOSTED\n * `computer_use_preview` tool it 400s on every turn. When `toolMode` is set, tools()\n * OBEYS it and never consults the sniff:\n *   • \"hosted\"         → the single hosted `computer_use_preview` tool (Responses backends).\n *   • \"function-image\" → the FUNCTION `computer_*` tools with screenshots delivered as a\n *                        structured `{type:'image'}` output (the codex/ChatGPT backend,\n *                        which rejects hosted tool types but SEES structured image results).\n *   • \"function-text\"  → the FUNCTION tools with screenshots rendered as a text\n *                        `data:…;base64` URL (chat-completions providers, which can't read\n *                        structured image tool results).\n */\nexport type ComputerToolMode = \"hosted\" | \"function-image\" | \"function-text\";\n\nexport type ComputerUseArgs = {\n  dimensions?: [number, number];\n  readOnly?: boolean;\n  display?: string;\n  needsApproval?: boolean | ((ctx: unknown, action: unknown) => boolean | Promise<boolean>);\n  // Deliver screenshots from the FUNCTION tools as a REAL image the model can see\n  // (a structured `{type:'image'}` tool output → agents-core normalizes it to an\n  // `input_image` content item inside the function_call_output) instead of the text\n  // data-URL string. Only the codex/ChatGPT backend can read structured image tool\n  // results; chat-completions providers cannot, so this stays OFF (text rendering)\n  // by default and is turned on only on the codex path (see index.ts). Ignored when\n  // `toolMode` is set (the mode carries its own image-delivery choice).\n  imageFunctionResults?: boolean;\n  // EXPLICIT transport selection (see {@link ComputerToolMode}). When present, tools()\n  // obeys it directly — the constructor-name sniff is NOT consulted. When ABSENT, the\n  // legacy sniff behaviour is preserved byte-for-byte (back-compat for any embedder\n  // that constructs the capability without threading a mode).\n  toolMode?: ComputerToolMode;\n  /** Called after the display is ready on the first actual computer action. */\n  onReady?: (session: SandboxSessionLike) => Promise<void>;\n};\n\nexport function computerUse(args: ComputerUseArgs = {}): ComputerUseCapability {\n  return new ComputerUseCapability(args);\n}\n\n/**\n * A `Capability` subclass merged into the agent's tool set by SandboxAgent\n * (`tools = [...agent.tools, ...capability.tools()]`). `bind(session)` hands it\n * the LIVE externally-owned session, so the agent's actions and the viewers'\n * pixels are one display.\n *\n * `tools()` is TRANSPORT-AWARE, mirroring the SDK's `filesystem()` capability\n * (which branches its `view_image` / `apply_patch` on\n * `supportsStructuredToolOutputTransport(this._modelInstance)`):\n *   • structured transport (the Responses/OpenAI backend) → the single HOSTED\n *     `computer_use_preview` tool over a Computer bound to the session (unchanged).\n *   • text transport (codex / ChatGPT backend — or an unbound model) → a set of\n *     FUNCTION tools ({@link computerFunctionTools}) that route to the SAME Computer,\n *     because the codex backend rejects the hosted computer tool type.\n * The bound model instance is captured by the SDK's `bind().bindRunAs().bindModel()`\n * chain (base `Capability._modelInstance`); the codex path in index.ts neutralizes\n * `bindModel` so `_modelInstance` stays undefined here → the function tools win.\n */\nexport class ComputerUseCapability extends Capability {\n  readonly type = \"computer-use\";\n  constructor(private args: ComputerUseArgs = {}) {\n    super();\n  }\n\n  override tools(): Tool<unknown>[] {\n    const session = requireBoundSession(\"computer-use\", this._session);\n    // Backend-aware: a SELF-HOSTED session (macOS OR bring-your-own Linux) drives the\n    // desktop NATIVELY (CGEvent/XTEST inject + ScreenCaptureKit/x11 capture over the\n    // control plane) — no xdotool/scrot on the user's machine required. Everything\n    // else (Modal) keeps the xdotool/scrot-over-exec SandboxComputer. See\n    // `isNativeDesktopSession` for the duck-typed discriminator.\n    const computer: Computer = isNativeDesktopSession(session)\n      ? new NativeDesktopComputer(session, {\n          ...(this.args.dimensions ? { dimensions: this.args.dimensions } : {}),\n          ...(this.args.readOnly !== undefined ? { readOnly: this.args.readOnly } : {}),\n        })\n      : new SandboxComputer(session, {\n          ...(this.args.dimensions ? { dimensions: this.args.dimensions } : {}),\n          ...(this.args.readOnly !== undefined ? { readOnly: this.args.readOnly } : {}),\n          ...(this.args.display ? { display: this.args.display } : {}),\n          // The SDK base exposes the bound runAs as a protected field.\n          ...(typeof this._runAs === \"string\" ? { runAs: this._runAs } : {}),\n          // Crucially lazy: tool registration does no provider work. The first\n          // click/type/screenshot boots the display, then lets the worker start\n          // any computer-use-only recording. One SandboxComputer instance caches\n          // this for the rest of the turn.\n          prepare: async (preparedSession) => {\n            await ensureDisplayStack(preparedSession, {\n              telemetryContext: { callerKind: \"computer\" },\n            });\n            await this.args.onReady?.(preparedSession);\n          },\n        });\n    // HARDENING: when the caller declares an EXPLICIT toolMode, obey it and NEVER\n    // consult `supportsStructuredToolOutputTransport` — tool selection must not\n    // depend on the model instance's constructor name (a wrapped/proxied/minified\n    // instance would defeat the \"ChatCompletions\" string-sniff and silently hand a\n    // chat-completions provider the hosted tool it 400s on). The mode is decided by\n    // the worker, where provider identity is authoritative (see agent-turn.ts).\n    switch (this.args.toolMode) {\n      case \"hosted\":\n        return [this.hostedComputerTool(computer)];\n      case \"function-image\":\n        return computerFunctionTools(\n          computer,\n          this.args.readOnly ?? false,\n          this.args.needsApproval,\n          true,\n        );\n      case \"function-text\":\n        return computerFunctionTools(\n          computer,\n          this.args.readOnly ?? false,\n          this.args.needsApproval,\n          false,\n        );\n      case undefined:\n        break; // fall through to the legacy sniff (back-compat), preserved byte-for-byte\n    }\n    // Legacy (no toolMode): structured transport keeps the HOSTED computer tool\n    // (unchanged); the codex / text backend gets the FUNCTION tools it can call.\n    if (supportsStructuredToolOutputTransport(this._modelInstance)) {\n      return [this.hostedComputerTool(computer)];\n    }\n    return computerFunctionTools(\n      computer,\n      this.args.readOnly ?? false,\n      this.args.needsApproval,\n      this.args.imageFunctionResults ?? false,\n    );\n  }\n\n  /** The single HOSTED `computer_use_preview` tool bound to `computer` — identical\n   *  construction for the explicit \"hosted\" mode and the legacy structured-sniff path. */\n  private hostedComputerTool(computer: Computer): Tool<unknown> {\n    return computerTool({\n      computer,\n      ...(this.args.needsApproval !== undefined\n        ? { needsApproval: this.args.needsApproval as never }\n        : {}),\n    }) as unknown as Tool<unknown>;\n  }\n}\n","import { createHash } from \"node:crypto\";\n\nimport { Capability, type SandboxSessionLike } from \"@openai/agents/sandbox\";\n\nconst SKILL_FILE = \"SKILL.md\";\nconst MAX_DISCOVERED_SKILLS = 256;\nconst MAX_SKILL_ENTRIES = 1_024;\nconst MAX_SKILL_BYTES = 32 * 1024 * 1024;\nconst SAFE_SKILL_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;\n\nexport type WorkspaceSkillSearchPath = Readonly<{\n  path: string;\n  source: string;\n}>;\n\ntype WorkspaceSkill = Readonly<{\n  name: string;\n  description: string;\n  path: string;\n  fingerprint: string;\n  source: string;\n}>;\n\n/**\n * Index skills that already exist in the live workspace.\n *\n * Unlike the SDK's `skills({ from })` and `skills({ lazyFrom })` sources, this\n * capability deliberately contributes no manifest entries and materializes\n * nothing. Repository resources and Connected Machines already own these\n * files; the bound sandbox session is the one portable way to inspect them.\n */\nexport class WorkspaceSkillsCapability extends Capability {\n  readonly type = \"workspace-skills\";\n  private discovery?: Promise<readonly WorkspaceSkill[]>;\n\n  constructor(\n    private readonly searchPaths: readonly WorkspaceSkillSearchPath[],\n    private readonly reservedNames: ReadonlySet<string> = new Set(),\n  ) {\n    super();\n  }\n\n  override async instructions(): Promise<string | null> {\n    const session = requireWorkspaceSkillSession(this._session);\n    this.discovery ??= discoverWorkspaceSkills(\n      session,\n      this.searchPaths,\n      this.reservedNames,\n      this._runAs,\n    );\n    const skills = await this.discovery;\n    if (skills.length === 0) return null;\n\n    const available = skills\n      .map((skill) => `- ${skill.name}: ${skill.description} (file: ${skill.path})`)\n      .join(\"\\n\");\n    return `## Repository skills\n\nRepository skills are instructions already present in the live workspace. They do not need to be loaded or copied.\n\n### Available repository skills\n${available}\n\n### How to use repository skills\n- If the user names a skill, or the task clearly matches a skill description, read its complete SKILL.md before acting.\n- Resolve referenced scripts, references, assets, and templates relative to that skill directory.\n- Use only the minimum relevant skills for the turn, and say briefly which ones you are using.\n- Do not assume a skill remains applicable on later turns; evaluate the current request again.`;\n  }\n}\n\nexport function workspaceSkills(\n  searchPaths: readonly WorkspaceSkillSearchPath[],\n  reservedNames: Iterable<string> = [],\n): WorkspaceSkillsCapability {\n  return new WorkspaceSkillsCapability(\n    searchPaths,\n    new Set([...reservedNames].map((name) => name.toLowerCase())),\n  );\n}\n\nexport async function discoverWorkspaceSkills(\n  session: SandboxSessionLike,\n  searchPaths: readonly WorkspaceSkillSearchPath[],\n  reservedNames: ReadonlySet<string> = new Set(),\n  runAs?: string,\n): Promise<readonly WorkspaceSkill[]> {\n  if (!session.listDir || !session.readFile) {\n    throw new Error(\"Workspace skill discovery requires sandbox listDir() and readFile() support\");\n  }\n  const discovered = new Map<string, WorkspaceSkill>();\n  let candidates = 0;\n  for (const searchPath of searchPaths) {\n    let entries;\n    try {\n      entries = await session.listDir({ path: searchPath.path, ...(runAs ? { runAs } : {}) });\n    } catch {\n      continue;\n    }\n    for (const entry of [...entries].sort((left, right) => left.name.localeCompare(right.name))) {\n      if (entry.type !== \"dir\") continue;\n      candidates += 1;\n      if (candidates > MAX_DISCOVERED_SKILLS) {\n        throw new Error(`Repository skill discovery exceeds ${MAX_DISCOVERED_SKILLS} directories`);\n      }\n      const skillMarkdownPath = joinWorkspacePath(entry.path, SKILL_FILE);\n      let markdown: string;\n      try {\n        const content = await session.readFile({\n          path: skillMarkdownPath,\n          ...(runAs ? { runAs } : {}),\n        });\n        markdown = typeof content === \"string\" ? content : new TextDecoder().decode(content);\n      } catch {\n        continue;\n      }\n      const frontmatter = parseSkillFrontmatter(markdown);\n      const name = frontmatter.name?.trim() || entry.name;\n      if (name.length > 64 || !SAFE_SKILL_NAME.test(name)) {\n        throw new Error(`Repository skill has an invalid name: ${name.slice(0, 64)}`);\n      }\n      const description = frontmatter.description?.trim() || \"No description provided.\";\n      if (description.length > 2_048 || /[\\r\\n]/.test(description)) {\n        throw new Error(`Repository skill \"${name}\" has an invalid description`);\n      }\n      const key = name.toLowerCase();\n      if (reservedNames.has(key)) {\n        throw new Error(`Workspace skill \"${name}\" conflicts with a configured OpenGeni skill`);\n      }\n      const candidate: WorkspaceSkill = {\n        name,\n        description,\n        path: skillMarkdownPath,\n        fingerprint: await fingerprintWorkspaceDirectory(session, entry.path, runAs),\n        source: searchPath.source,\n      };\n      const existing = discovered.get(key);\n      if (!existing) {\n        discovered.set(key, candidate);\n        continue;\n      }\n      if (existing.fingerprint !== candidate.fingerprint) {\n        throw new Error(\n          `Workspace skill \"${name}\" has conflicting definitions in ${existing.source} and ${candidate.source}`,\n        );\n      }\n    }\n  }\n  return [...discovered.values()].sort((left, right) => left.name.localeCompare(right.name));\n}\n\nasync function fingerprintWorkspaceDirectory(\n  session: SandboxSessionLike,\n  root: string,\n  runAs?: string,\n): Promise<string> {\n  const hash = createHash(\"sha256\");\n  let entryCount = 0;\n  let byteCount = 0;\n\n  async function visit(path: string, relativePath: string): Promise<void> {\n    const entries = await session.listDir!({ path, ...(runAs ? { runAs } : {}) });\n    for (const entry of [...entries].sort((left, right) => left.name.localeCompare(right.name))) {\n      entryCount += 1;\n      if (entryCount > MAX_SKILL_ENTRIES) {\n        throw new Error(`Workspace skill exceeds ${MAX_SKILL_ENTRIES} filesystem entries`);\n      }\n      const childRelativePath = relativePath ? `${relativePath}/${entry.name}` : entry.name;\n      hash.update(entry.type);\n      hash.update(\"\\0\");\n      hash.update(childRelativePath);\n      hash.update(\"\\0\");\n      if (entry.type === \"dir\") {\n        await visit(entry.path, childRelativePath);\n        continue;\n      }\n      if (entry.type !== \"file\") continue;\n      const content = await session.readFile!({\n        path: entry.path,\n        ...(runAs ? { runAs } : {}),\n      });\n      const bytes = typeof content === \"string\" ? new TextEncoder().encode(content) : content;\n      byteCount += bytes.byteLength;\n      if (byteCount > MAX_SKILL_BYTES) {\n        throw new Error(`Workspace skill exceeds ${MAX_SKILL_BYTES} bytes`);\n      }\n      hash.update(bytes);\n      hash.update(\"\\0\");\n    }\n  }\n\n  await visit(root, \"\");\n  return hash.digest(\"hex\");\n}\n\nfunction parseSkillFrontmatter(markdown: string): {\n  name?: string;\n  description?: string;\n} {\n  const lines = markdown.split(/\\r?\\n/);\n  if (lines[0]?.trim() !== \"---\") return {};\n  const end = lines.findIndex((line, index) => index > 0 && line.trim() === \"---\");\n  if (end === -1) return {};\n  const values: Record<string, string> = {};\n  for (const line of lines.slice(1, end)) {\n    const separator = line.indexOf(\":\");\n    if (separator === -1) continue;\n    const key = line.slice(0, separator).trim();\n    if (key !== \"name\" && key !== \"description\") continue;\n    values[key] = unquote(line.slice(separator + 1).trim());\n  }\n  return values;\n}\n\nfunction unquote(value: string): string {\n  if (\n    value.length >= 2 &&\n    value[0] === value[value.length - 1] &&\n    (value[0] === '\"' || value[0] === \"'\")\n  ) {\n    return value.slice(1, -1);\n  }\n  return value;\n}\n\nfunction joinWorkspacePath(parent: string, child: string): string {\n  return `${parent.replace(/\\/+$/, \"\")}/${child}`;\n}\n\nfunction requireWorkspaceSkillSession(session: SandboxSessionLike | undefined): SandboxSessionLike {\n  if (!session) {\n    throw new Error('capability \"workspace-skills\" used before bind(session)');\n  }\n  return session;\n}\n","type UsageDetails = Record<string, unknown> | Array<Record<string, unknown>>;\n\ntype RequestUsageEntry = {\n  inputTokens?: unknown;\n  input_tokens?: unknown;\n  outputTokens?: unknown;\n  output_tokens?: unknown;\n  totalTokens?: unknown;\n  total_tokens?: unknown;\n  inputTokensDetails?: UsageDetails | undefined;\n  input_tokens_details?: UsageDetails | undefined;\n  outputTokensDetails?: UsageDetails | undefined;\n  output_tokens_details?: UsageDetails | undefined;\n};\n\nexport type ModelCallUsageInput = {\n  inputTokens?: unknown;\n  outputTokens?: unknown;\n  totalTokens?: unknown;\n  inputTokensDetails?: UsageDetails | undefined;\n  outputTokensDetails?: UsageDetails | undefined;\n  requestUsageEntries?: RequestUsageEntry[] | undefined;\n};\n\n/**\n * A single provider usage frame above one billion tokens is outside every\n * supported OpenGeni model contract. Keeping the ceiling explicit also prevents\n * malformed-but-finite provider values from corrupting durable accounting or a\n * process-lifetime Prometheus counter.\n */\nexport const MAX_MODEL_USAGE_TOKEN_COUNT = 1_000_000_000;\n\nexport type ModelCallUsageTelemetry = {\n  inputTokens: number | null;\n  outputTokens: number | null;\n  cachedTokens: number | null;\n  cacheWriteTokens: number | null;\n  reasoningTokens: number | null;\n};\n\nexport type ModelCallUsageNormalization = {\n  telemetry: ModelCallUsageTelemetry;\n  totalTokens: number | null;\n  /** Bounded field paths only; raw provider values are never retained. */\n  rejectedFields: string[];\n};\n\nexport function modelUsageTokenCountOrNull(value: unknown): number | null {\n  return typeof value === \"number\" &&\n    Number.isSafeInteger(value) &&\n    value >= 0 &&\n    value <= MAX_MODEL_USAGE_TOKEN_COUNT\n    ? value\n    : null;\n}\n\nexport function normalizeModelCallUsage(\n  usage: ModelCallUsageInput | null | undefined,\n): ModelCallUsageNormalization {\n  const rejectedFields = new Set<string>();\n  if (!usage) {\n    return {\n      telemetry: {\n        inputTokens: null,\n        outputTokens: null,\n        cachedTokens: null,\n        cacheWriteTokens: null,\n        reasoningTokens: null,\n      },\n      totalTokens: null,\n      rejectedFields: [],\n    };\n  }\n\n  const requestEntries = requestUsageEntries(usage.requestUsageEntries, rejectedFields);\n  const topLevelInputTokens = reportedTokenCount(usage.inputTokens, \"inputTokens\", rejectedFields);\n  const topLevelOutputTokens = reportedTokenCount(\n    usage.outputTokens,\n    \"outputTokens\",\n    rejectedFields,\n  );\n  const topLevelTotalTokens = reportedTokenCount(usage.totalTokens, \"totalTokens\", rejectedFields);\n  const requestInputTokens = completeRequestTokenAggregate(\n    requestEntries,\n    [\"inputTokens\", \"input_tokens\"],\n    \"inputTokens.requestUsageEntries\",\n    rejectedFields,\n  );\n  const requestOutputTokens = completeRequestTokenAggregate(\n    requestEntries,\n    [\"outputTokens\", \"output_tokens\"],\n    \"outputTokens.requestUsageEntries\",\n    rejectedFields,\n  );\n  let requestTotalTokens = completeRequestTokenAggregate(\n    requestEntries,\n    [\"totalTokens\", \"total_tokens\"],\n    \"totalTokens.requestUsageEntries\",\n    rejectedFields,\n  );\n  if (rejectInconsistentRequestTotals(requestEntries, rejectedFields)) {\n    requestTotalTokens = { ...requestTotalTokens, status: \"invalid\", value: null };\n  }\n\n  // Complete per-request aggregates are the installed SDK's request-level\n  // truth. A conflicting top-level field is diagnostic only; it must never\n  // override the request sum with a smaller billable/context value. Invalid\n  // complete request aggregates fail closed rather than falling back to a\n  // potentially undercounting top-level number.\n  const inputTokens = canonicalTokenDimension({\n    topLevel: topLevelInputTokens,\n    topLevelReported: isReported(usage.inputTokens),\n    topLevelPath: \"inputTokens\",\n    requestAggregate: requestInputTokens,\n    rejectedFields,\n  });\n  const outputTokens = canonicalTokenDimension({\n    topLevel: topLevelOutputTokens,\n    topLevelReported: isReported(usage.outputTokens),\n    topLevelPath: \"outputTokens\",\n    requestAggregate: requestOutputTokens,\n    rejectedFields,\n  });\n  const totalTokens = canonicalTotalTokens({\n    inputTokens,\n    outputTokens,\n    topLevel: topLevelTotalTokens,\n    topLevelReported: isReported(usage.totalTokens),\n    requestAggregate: requestTotalTokens,\n    rejectedFields,\n  });\n\n  const inputDetailSource = preferredDetailSource(\n    usage.inputTokensDetails,\n    \"inputTokensDetails\",\n    requestEntries,\n    [\"inputTokensDetails\", \"input_tokens_details\"],\n  );\n  const outputDetailSource = preferredDetailSource(\n    usage.outputTokensDetails,\n    \"outputTokensDetails\",\n    requestEntries,\n    [\"outputTokensDetails\", \"output_tokens_details\"],\n  );\n\n  return {\n    telemetry: {\n      inputTokens,\n      outputTokens,\n      cachedTokens: aggregateDetailTokenCount(\n        inputDetailSource,\n        [\"cached_tokens\", \"cachedInputTokens\", \"cached_input_tokens\"],\n        \"cachedTokens\",\n        rejectedFields,\n      ),\n      cacheWriteTokens: aggregateDetailTokenCount(\n        inputDetailSource,\n        [\"cache_write_tokens\", \"cacheWriteTokens\"],\n        \"cacheWriteTokens\",\n        rejectedFields,\n      ),\n      reasoningTokens: aggregateDetailTokenCount(\n        outputDetailSource,\n        [\"reasoning_tokens\", \"reasoningTokens\", \"reasoning_output_tokens\"],\n        \"reasoningTokens\",\n        rejectedFields,\n      ),\n    },\n    totalTokens,\n    rejectedFields: [...rejectedFields].slice(0, 32),\n  };\n}\n\nexport function modelCallUsageTelemetry(\n  usage: ModelCallUsageInput | null | undefined,\n): ModelCallUsageTelemetry {\n  return normalizeModelCallUsage(usage).telemetry;\n}\n\nfunction requestUsageEntries(\n  value: RequestUsageEntry[] | undefined,\n  rejectedFields: Set<string>,\n): RequestUsageEntry[] {\n  if (value === undefined) {\n    return [];\n  }\n  if (!Array.isArray(value)) {\n    rejectField(rejectedFields, \"requestUsageEntries\");\n    return [];\n  }\n  const entries: RequestUsageEntry[] = [];\n  for (const [index, entry] of value.entries()) {\n    if (!entry || typeof entry !== \"object\" || Array.isArray(entry)) {\n      rejectField(rejectedFields, `requestUsageEntries[${index}]`);\n      // Preserve the request slot as unknown. Dropping it would let fallback\n      // aggregation silently undercount only the well-formed requests.\n      entries.push({});\n      continue;\n    }\n    entries.push(entry);\n  }\n  return entries;\n}\n\ntype RequestTokenAggregate = {\n  status: \"absent\" | \"incomplete\" | \"invalid\" | \"complete\";\n  value: number | null;\n};\n\nfunction completeRequestTokenAggregate(\n  requestEntries: RequestUsageEntry[],\n  requestKeys: string[],\n  aggregatePath: string,\n  rejectedFields: Set<string>,\n): RequestTokenAggregate {\n  if (requestEntries.length === 0) {\n    return { status: \"absent\", value: null };\n  }\n  const values: Array<number | null> = [];\n  let incomplete = false;\n  let invalid = false;\n  for (const [index, entry] of requestEntries.entries()) {\n    const selected = firstPresentEntry(entry as Record<string, unknown>, requestKeys);\n    if (!selected || selected.value === null) {\n      incomplete = true;\n      continue;\n    }\n    const parsed = reportedTokenCount(\n      selected.value,\n      `requestUsageEntries[${index}].${selected.key}`,\n      rejectedFields,\n    );\n    if (parsed === null) invalid = true;\n    values.push(parsed);\n  }\n  if (invalid) {\n    return { status: \"invalid\", value: null };\n  }\n  if (incomplete) {\n    return { status: \"incomplete\", value: null };\n  }\n  const value = boundedTokenSum(values, aggregatePath, rejectedFields);\n  return value === null ? { status: \"invalid\", value: null } : { status: \"complete\", value };\n}\n\nfunction canonicalTokenDimension(input: {\n  topLevel: number | null;\n  topLevelReported: boolean;\n  topLevelPath: string;\n  requestAggregate: RequestTokenAggregate;\n  rejectedFields: Set<string>;\n}): number | null {\n  if (input.requestAggregate.status === \"complete\") {\n    if (\n      input.topLevelReported &&\n      input.topLevel !== null &&\n      input.topLevel !== input.requestAggregate.value\n    ) {\n      rejectField(input.rejectedFields, input.topLevelPath);\n    }\n    return input.requestAggregate.value;\n  }\n  if (input.requestAggregate.status === \"invalid\") {\n    if (input.topLevelReported) {\n      rejectField(input.rejectedFields, input.topLevelPath);\n    }\n    return null;\n  }\n  return input.topLevel;\n}\n\nfunction canonicalTotalTokens(input: {\n  inputTokens: number | null;\n  outputTokens: number | null;\n  topLevel: number | null;\n  topLevelReported: boolean;\n  requestAggregate: RequestTokenAggregate;\n  rejectedFields: Set<string>;\n}): number | null {\n  if (input.inputTokens !== null && input.outputTokens !== null) {\n    const derived = boundedTokenSum(\n      [input.inputTokens, input.outputTokens],\n      \"totalTokens.aggregate\",\n      input.rejectedFields,\n    );\n    if (derived === null) {\n      // Both canonical components are known and exceed the supported aggregate\n      // ceiling. Any bounded reported total necessarily undercounts them.\n      if (input.topLevelReported) rejectField(input.rejectedFields, \"totalTokens\");\n      if (input.requestAggregate.status === \"complete\") {\n        rejectField(input.rejectedFields, \"totalTokens.requestUsageEntries\");\n      }\n      return null;\n    }\n    if (input.topLevelReported && input.topLevel !== null && input.topLevel !== derived) {\n      rejectField(input.rejectedFields, \"totalTokens\");\n    }\n    if (input.requestAggregate.status === \"complete\" && input.requestAggregate.value !== derived) {\n      rejectField(input.rejectedFields, \"totalTokens.requestUsageEntries\");\n    }\n    return derived;\n  }\n\n  if (input.requestAggregate.status === \"complete\") {\n    const requestTotal = input.requestAggregate.value;\n    if (\n      requestTotal === null ||\n      !totalCoversKnownComponents(requestTotal, input.inputTokens, input.outputTokens)\n    ) {\n      rejectField(input.rejectedFields, \"totalTokens.requestUsageEntries\");\n      if (input.topLevelReported) rejectField(input.rejectedFields, \"totalTokens\");\n      return null;\n    }\n    if (input.topLevelReported && input.topLevel !== null && input.topLevel !== requestTotal) {\n      rejectField(input.rejectedFields, \"totalTokens\");\n    }\n    return requestTotal;\n  }\n  if (input.requestAggregate.status === \"invalid\") {\n    if (input.topLevelReported) rejectField(input.rejectedFields, \"totalTokens\");\n    return null;\n  }\n  if (\n    input.topLevel !== null &&\n    !totalCoversKnownComponents(input.topLevel, input.inputTokens, input.outputTokens)\n  ) {\n    rejectField(input.rejectedFields, \"totalTokens\");\n    return null;\n  }\n  return input.topLevel;\n}\n\nfunction totalCoversKnownComponents(\n  total: number,\n  inputTokens: number | null,\n  outputTokens: number | null,\n): boolean {\n  return (\n    (inputTokens === null || total >= inputTokens) &&\n    (outputTokens === null || total >= outputTokens)\n  );\n}\n\nfunction rejectInconsistentRequestTotals(\n  requestEntries: RequestUsageEntry[],\n  rejectedFields: Set<string>,\n): boolean {\n  let inconsistent = false;\n  for (const [index, entry] of requestEntries.entries()) {\n    const record = entry as Record<string, unknown>;\n    const selectedInput = firstPresentEntry(record, [\"inputTokens\", \"input_tokens\"]);\n    const selectedOutput = firstPresentEntry(record, [\"outputTokens\", \"output_tokens\"]);\n    const selectedTotal = firstPresentEntry(record, [\"totalTokens\", \"total_tokens\"]);\n    if (!selectedInput || !selectedOutput || !selectedTotal) continue;\n    const inputTokens = modelUsageTokenCountOrNull(selectedInput.value);\n    const outputTokens = modelUsageTokenCountOrNull(selectedOutput.value);\n    const totalTokens = modelUsageTokenCountOrNull(selectedTotal.value);\n    if (inputTokens === null || outputTokens === null || totalTokens === null) continue;\n    const derived =\n      inputTokens <= MAX_MODEL_USAGE_TOKEN_COUNT - outputTokens ? inputTokens + outputTokens : null;\n    if (derived === null || totalTokens !== derived) {\n      rejectField(rejectedFields, `requestUsageEntries[${index}].${selectedTotal.key}`);\n      inconsistent = true;\n    }\n  }\n  return inconsistent;\n}\n\nfunction isReported(value: unknown): boolean {\n  return value !== undefined && value !== null;\n}\n\nfunction preferredDetailSource(\n  aggregateDetails: UsageDetails | undefined,\n  aggregatePath: string,\n  requestEntries: RequestUsageEntry[],\n  requestKeys: string[],\n): Array<{ details: unknown; path: string; missing?: boolean }> {\n  const requestDetails: Array<{ details: unknown; path: string; missing?: boolean }> = [];\n  let sawRequestDetails = false;\n  for (const [index, entry] of requestEntries.entries()) {\n    const selected = firstPresentEntry(entry as Record<string, unknown>, requestKeys);\n    if (!selected) {\n      requestDetails.push({\n        details: undefined,\n        path: `requestUsageEntries[${index}].${requestKeys[0]}`,\n        missing: true,\n      });\n      continue;\n    }\n    sawRequestDetails = true;\n    requestDetails.push({\n      details: selected.value,\n      path: `requestUsageEntries[${index}].${selected.key}`,\n    });\n  }\n  // The installed Agents SDK explicitly carries per-request entries. Prefer\n  // them when they include detail records; otherwise fall back to the aggregate\n  // detail arrays that Usage.add() appends in request order.\n  return sawRequestDetails\n    ? requestDetails\n    : aggregateDetails === undefined\n      ? []\n      : [{ details: aggregateDetails, path: aggregatePath }];\n}\n\nfunction aggregateDetailTokenCount(\n  sources: Array<{ details: unknown; path: string; missing?: boolean }>,\n  keys: string[],\n  field: string,\n  rejectedFields: Set<string>,\n): number | null {\n  const values: Array<number | null> = [];\n  let sawReportedValue = false;\n  let sawMissingValue = false;\n  for (const source of sources) {\n    if (source.missing) {\n      sawMissingValue = true;\n      continue;\n    }\n    const details = detailRecords(source.details, source.path, rejectedFields);\n    if (!details.complete) {\n      sawMissingValue = true;\n    }\n    for (const detail of details.records) {\n      const selected = firstPresentEntry(detail.record, keys);\n      if (!selected) {\n        sawMissingValue = true;\n        continue;\n      }\n      sawReportedValue = true;\n      values.push(\n        reportedTokenCount(selected.value, `${detail.path}.${selected.key}`, rejectedFields),\n      );\n    }\n  }\n  return sawReportedValue && !sawMissingValue\n    ? boundedTokenSum(values, `${field}.aggregate`, rejectedFields)\n    : null;\n}\n\nfunction detailRecords(\n  details: unknown,\n  path: string,\n  rejectedFields: Set<string>,\n): {\n  records: Array<{ record: Record<string, unknown>; path: string }>;\n  complete: boolean;\n} {\n  const entries = Array.isArray(details) ? details : [details];\n  const records: Array<{ record: Record<string, unknown>; path: string }> = [];\n  let complete = true;\n  for (const [index, entry] of entries.entries()) {\n    const entryPath = Array.isArray(details) ? `${path}[${index}]` : path;\n    if (!entry || typeof entry !== \"object\" || Array.isArray(entry)) {\n      rejectField(rejectedFields, entryPath);\n      complete = false;\n      continue;\n    }\n    records.push({ record: entry as Record<string, unknown>, path: entryPath });\n  }\n  return { records, complete };\n}\n\nfunction firstPresentEntry(\n  record: Record<string, unknown>,\n  keys: string[],\n): { key: string; value: unknown } | null {\n  for (const key of keys) {\n    if (Object.prototype.hasOwnProperty.call(record, key) && record[key] !== undefined) {\n      // One request can expose the same value under provider and SDK aliases.\n      // Pick the first canonical alias instead of adding aliases together.\n      return { key, value: record[key] };\n    }\n  }\n  return null;\n}\n\nfunction reportedTokenCount(\n  value: unknown,\n  field: string,\n  rejectedFields: Set<string>,\n): number | null {\n  if (value === undefined || value === null) {\n    return null;\n  }\n  const normalized = modelUsageTokenCountOrNull(value);\n  if (normalized === null) {\n    rejectField(rejectedFields, field);\n  }\n  return normalized;\n}\n\nfunction boundedTokenSum(\n  values: Array<number | null>,\n  field: string,\n  rejectedFields: Set<string>,\n): number | null {\n  if (values.length === 0 || values.some((value) => value === null)) {\n    return null;\n  }\n  let total = 0;\n  for (const value of values as number[]) {\n    if (value > MAX_MODEL_USAGE_TOKEN_COUNT - total) {\n      rejectField(rejectedFields, field);\n      return null;\n    }\n    total += value;\n  }\n  return total;\n}\n\nfunction rejectField(rejectedFields: Set<string>, field: string): void {\n  if (rejectedFields.size < 32) {\n    rejectedFields.add(field);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA;AAAA,EACE;AAAA,EACA,6BAAAA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA,0BAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,uBAAuB;AAAA,EACvB;AAAA,EACA,uBAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAaK;;;OC1CAC,aAAY;;;ACEZ,IAAM,WAAW;EACtB,QAAQ;EACR,WAAW;EACX,YAAY;IACV,yBAAyB;IACzB,uBAAuB;IACvB,UAAU;;;AAId,IAAA,mBAAe;;;ACTR,IAAM,qBAAqB;AAC3B,IAAM,uBAAuB;AAC7B,IAAM,qCAAqC;AAElD,IAAI,oBAAoB;AACxB,IAAI,mCAAmC;AACvC,IAAI;AACJ,IAAI,oBAAwC;AAC5C,IAAI,wBAA4C;AAM1C,SAAU,yBAAsB;AACpC,SAAO,yBAAyB,QAAO,EAAG;AAC5C;AAEM,SAAU,8BAA2B;AACzC,SAAO,sBAAsB;AAC/B;AAEM,SAAU,uCAAoC;AAClD,SAAO,qCAAqC;AAC9C;AAMM,SAAU,4BAA4B,OAA2B;AACrE,qCAAmC;AACrC;AAEM,SAAU,uBAAuB,QAAoB;AACzD,yBAAuB;AACzB;AAEM,SAAU,yBAAsB;AAGpC,SAAO;AACT;AAEM,SAAU,oBAAoB,KAAW;AAC7C,sBAAoB;AACtB;AAEM,SAAU,sBAAmB;AACjC,SAAO,qBAAqB,QAAO,EAAG;AACxC;AAEM,SAAU,mCAAgC;AAC9C,SAAO,QAAO,EAAG;AACnB;AAEO,IAAM,UAAU;EACrB,cAAc,qBAAqB,iBAAS,OAAO;;;;OCvC9CC,aAAY;;;ACpBnB,IAAM,SAAS,UAAU,sBAAsB;AAE/C,IAAA,iBAAe;;;ACIR,IAAM,0CAA0C;AAChD,IAAM,iDACX;AAuCI,SAAU,qCACd,OAAqB;AAErB,SACE,MAAM,SAAS,4BACf,MAAM,KAAK,SAAS,WACpB,MAAM,WAAW;AAErB;;;ACpDA,SAAS,SAAS,OAAc;AAC9B,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,sBAAsB,OAAc;AAC3C,SAAO,SAAS,KAAK,KAAK,MAAM,mBAAmB;AACrD;AAEA,SAAS,eAAe,OAAgB,KAAW;AACjD,MAAI,CAAC,SAAS,KAAK,GAAG;AACpB,WAAO;EACT;AAEA,QAAM,gBAAgB,CAAC,MAAM,SAAS,MAAM,eAAe;AAC3D,aAAW,UAAU,eAAe;AAClC,QAAI,CAAC,QAAQ;AACX;IACF;AAEA,QAAI,OAAO,YAAY,eAAe,kBAAkB,SAAS;AAC/D,aAAO,OAAO,IAAI,GAAG,KAAK;IAC5B;AAEA,QAAI,SAAS,MAAM,GAAG;AACpB,YAAM,gBAAgB,IAAI,YAAW;AACrC,iBAAW,CAAC,YAAY,WAAW,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC9D,YACE,WAAW,YAAW,MAAO,iBAC7B,OAAO,gBAAgB,UACvB;AACA,iBAAO;QACT;MACF;IACF;EACF;AAEA,SAAO;AACT;AAEA,SAAS,cAAc,OAAc;AACnC,MAAI,CAAC,SAAS,KAAK,GAAG;AACpB,WAAO;EACT;AAEA,MAAI,OAAO,MAAM,eAAe,UAAU;AACxC,WAAO,MAAM;EACf;AAEA,MAAI,OAAO,MAAM,WAAW,UAAU;AACpC,WAAO,MAAM;EACf;AAEA,SAAO;AACT;AAEA,SAAS,wBACP,SAA2C;AAE3C,SAAO,QAAQ,QAAQ,kBAAkB,QAAQ,kBAAkB;AACrE;AAEM,SAAU,qBACd,MAA6B;AAE7B,QAAM,EAAE,OAAO,QAAO,IAAK;AAC3B,MAAI,sBAAsB,KAAK,GAAG;AAChC,WAAO;MACL,WAAW;MACX,cAAc;MACd,QAAQ,iBAAiB,QAAQ,MAAM,UAAU;;EAErD;AAEA,QAAM,eACJ,iBAAiB,QAAQ,MAAM,QAAQ,YAAW,IAAK;AACzD,QAAM,oBAAoB,eAAe,OAAO,gBAAgB,GAC5D,YAAW,EACZ,KAAI;AAEP,MACE,cAAc,SACZ,qGAAqG,GAEvG;AACA,WAAO;MACL,WAAW;MACX,cAAc;MACd,QAAQ,iBAAiB,QAAQ,MAAM,UAAU;;EAErD;AAEA,MAAI,sBAAsB,QAAQ;AAChC,WAAO;MACL,WAAW;MACX,cAAc;MACd,QAAQ,iBAAiB,QAAQ,MAAM,UAAU;;EAErD;AAEA,MAAI,sBAAsB,SAAS;AACjC,WAAO;MACL,WAAW;MACX,QAAQ,iBAAiB,QAAQ,MAAM,UAAU;;EAErD;AAEA,QAAM,aAAa,cAAc,KAAK;AACtC,MACE,CAAC,wBAAwB,OAAO;;;GAI/B,eAAe,OACd,eAAe,OACf,eAAe,OACd,OAAO,eAAe,YAAY,cAAc,MACnD;AACA,WAAO;MACL,WAAW;MACX,QAAQ,iBAAiB,QAAQ,MAAM,UAAU;;EAErD;AAEA,SAAO;AACT;;;OChIO,YAAY;AAuBZ,IAAM,qCAAqC;EAChD,kCACE;EACF,kDACE;EACF,cAAc;EACd,iBAAiB;;AAMb,IAAO,kCAAP,cAA+C,MAAK;EAC/C;EAET,YACE,MACA,UAAkB,mCAAmC,IAAI,GAAC;AAE1D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;EACd;;AAGI,SAAU,eAAe,QAA+B;AAC5D,MAAI,QAAQ,SAAS;AACnB,UAAM,IAAI,OAAO,kBAAiB;EACpC;AACF;AAEA,eAAsB,gBACpB,SACA,QAA+B;AAE/B,iBAAe,MAAM;AACrB,MAAI,CAAC,QAAQ;AACX,WAAO;EACT;AAEA,SAAO,MAAM,IAAI,QAAW,CAAC,SAAS,WAAU;AAC9C,UAAM,UAAU,MAAK;AACnB,aAAO,IAAI,OAAO,kBAAiB,CAAE;IACvC;AAEA,WAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAI,CAAE;AAExD,YAAQ,KACN,CAAC,UAAS;AACR,aAAO,oBAAoB,SAAS,OAAO;AAC3C,cAAQ,KAAK;IACf,GACA,CAAC,UAAS;AACR,aAAO,oBAAoB,SAAS,OAAO;AAC3C,aAAO,KAAK;IACd,CAAC;EAEL,CAAC;AACH;AAEA,eAAsB,YACpB,SACA,WACA,cAAoB;AAEpB,MACE,OAAO,cAAc,YACrB,CAAC,OAAO,SAAS,SAAS,KAC1B,aAAa,GACb;AACA,WAAO,MAAM;EACf;AAEA,SAAO,MAAM,IAAI,QAAW,CAAC,SAAS,WAAU;AAC9C,UAAM,YAAY,WAAW,MAAK;AAChC,aAAO,IAAI,MAAM,YAAY,CAAC;IAChC,GAAG,SAAS;AAEZ,YAAQ,KACN,CAAC,UAAS;AACR,mBAAa,SAAS;AACtB,cAAQ,KAAK;IACf,GACA,CAAC,UAAS;AACR,mBAAa,SAAS;AACtB,aAAO,KAAK;IACd,CAAC;EAEL,CAAC;AACH;AAEA,eAAsB,qBACpB,OAA4B;AAE5B,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO;EACT;AAEA,MAAI,OAAO,SAAS,eAAe,iBAAiB,MAAM;AACxD,WAAO,MAAM,MAAM,KAAI;EACzB;AAEA,MAAI,iBAAiB,aAAa;AAChC,WAAO,IAAI,YAAW,EAAG,OAAO,IAAI,WAAW,KAAK,CAAC;EACvD;AAEA,MAAI,YAAY,OAAO,KAAK,GAAG;AAC7B,WAAO,IAAI,YAAW,EAAG,OACvB,IAAI,WAAW,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU,CAAC;EAEpE;AAEA,QAAM,IAAI,MAAM,qDAAqD;AACvE;AAEM,SAAU,gCAAgC,OAAc;AAC5D,MAAI,iBAAiB,iCAAiC;AACpD,WACE,MAAM,SAAS,sCACf,MAAM,SAAS;EAEnB;AAEA,MAAI,EAAE,iBAAiB,QAAQ;AAC7B,WAAO;EACT;AAEA,SACE,MAAM,YACJ,mCAAmC,oCACrC,MAAM,YACJ,mCAAmC;AAEzC;AAEM,SAAU,wBAAwB,OAAc;AACpD,MAAI,iBAAiB,iCAAiC;AACpD,WAAO,MAAM,SAAS;EACxB;AAEA,MAAI,EAAE,iBAAiB,QAAQ;AAC7B,WAAO;EACT;AAEA,MAAI,MAAM,YAAY,mCAAmC,iBAAiB;AACxE,WAAO;EACT;AAIA,MAAI,MAAM,SAAS,qBAAqB;AACtC,WAAO;EACT;AAGA,MAAI,MAAM,QAAQ,WAAW,oCAAoC,GAAG;AAClE,WAAO;EACT;AAEA,SAAO;AACT;AAaA,SAAS,6BACP,OACA,WAAiB;AAEjB,MAAI,SAAS,MAAM;AACjB,WAAO;EACT;AACA,MAAI,OAAO,SAAS,KAAK,KAAK,QAAQ,GAAG;AACvC,WAAO;EACT;AAEA,QAAM,IAAI,UACR,uBAAuB,SAAS,qDAAqD;AAEzF;AAEM,IAAO,+BAAP,MAAO,8BAA4B;EACvC;EACA,YAAqC,CAAA;EACrC,WAGK,CAAA;EACL,UAAU;EACV;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EAEA,YACE,QACA,mBAAuD,CAAA,GAAE;AAEzD,SAAK,UAAU;AACf,SAAK,kBAAkB,6BACrB,iBAAiB,gBACjB,gBAAgB;AAElB,SAAK,iBAAiB,6BACpB,iBAAiB,eACjB,eAAe;AAEjB,SAAK,iBAAiB,IAAI,QAAc,CAAC,YAAW;AAClD,WAAK,iBAAiB;IACxB,CAAC;AAED,SAAK,QAAQ,iBAAiB,WAAW,KAAK,UAAiB;AAC/D,SAAK,QAAQ,iBAAiB,SAAS,KAAK,QAAe;AAC3D,SAAK,QAAQ,iBAAiB,SAAS,KAAK,QAAe;AAC3D,SAAK,sBAAsB,KAAK,iBAAgB;EAClD;EAEA,aAAa,QACX,KACA,SACA,QACA,WACA,qBACA,mBAAuD,CAAA,GAAE;AAEzD,UAAM,gBAAiB,WAAmB;AAI1C,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,UACR,2EAA2E;IAE/E;AAEA,QAAI;AACJ,QAAI;AACF,eAAS,IAAI,cAAc,KAAK,EAAE,QAAO,CAAE;IAC7C,SAAS,OAAO;AACd,YAAM,eAAe,IAAI,UACvB,iGAAiG;AAElG,mBAA6C,QAAQ;AACtD,YAAM;IACR;AAEA,QAAI;AACJ,QAAI;AACF,mBAAa,IAAI,8BAA6B,QAAQ,gBAAgB;IACxE,SAAS,OAAO;AACd,UAAI;AACF,eAAO,MAAK;MACd,QAAQ;MAER;AACA,YAAM;IACR;AAEA,QAAI;AACF,YAAM,WAAW,YAAY,QAAQ,WAAW,mBAAmB;AACnE,iBAAW,gBAAe;IAC5B,SAAS,OAAO;AACd,YAAM,WAAW,MAAK;AACtB,YAAM;IACR;AACA,WAAO;EACT;EAEA,MAAM,YACJ,QACA,WACA,qBAA4B;AAE5B,QAAI,KAAK,QAAQ,eAAe,KAAK,QAAQ,MAAM;AACjD;IACF;AACA,QAAI,KAAK,QAAQ;AACf,YAAM,KAAK;IACb;AACA,QACE,KAAK,WACL,KAAK,QAAQ,eAAe,KAAK,QAAQ,UACzC,KAAK,QAAQ,eAAe,KAAK,QAAQ,SACzC;AACA,YAAM,IAAI,gCACR,kCAAkC;IAEtC;AAEA,UAAM,cAAc,IAAI,QAAc,CAAC,SAAS,WAAU;AACxD,YAAM,SAAS,MAAK;AAClB,gBAAO;AACP,gBAAO;MACT;AAEA,YAAM,UAAU,MAAK;AACnB,gBAAO;AACP,eACE,KAAK,UACH,IAAI,MAAM,gDAAgD,CAAC;MAEjE;AAEA,YAAM,UAAU,MAAK;AACnB,gBAAO;AACP,eACE,KAAK,UACH,IAAI,gCACF,kCAAkC,CACnC;MAEP;AAEA,YAAM,UAAU,MAAK;AACnB,aAAK,QAAQ,oBAAoB,QAAQ,MAAa;AACtD,aAAK,QAAQ,oBAAoB,SAAS,OAAc;AACxD,aAAK,QAAQ,oBAAoB,SAAS,OAAc;MAC1D;AAEA,WAAK,QAAQ,iBAAiB,QAAQ,MAAa;AACnD,WAAK,QAAQ,iBAAiB,SAAS,OAAc;AACrD,WAAK,QAAQ,iBAAiB,SAAS,OAAc;IACvD,CAAC;AAED,UAAM,gBACJ,YACE,aACA,WACA,uBACE,iEAAiE,SAAS,KAAK,GAEnF,MAAM;EAEV;EAEA,MAAM,KAAK,MAAY;AACrB,QAAI,KAAK,QAAQ,eAAe,KAAK,QAAQ,MAAM;AACjD,YAAM,IAAI,gCAAgC,iBAAiB;IAC7D;AAEA,SAAK,QAAQ,KAAK,IAAI;EACxB;EAEA,aAAU;AACR,WACE,CAAC,KAAK,WACN,CAAC,KAAK,UACN,KAAK,QAAQ,eAAe,KAAK,QAAQ;EAE7C;EAEA,MAAM,UACJ,QAA+B;AAE/B,mBAAe,MAAM;AACrB,WAAO,MAAM,gBAAgB,KAAK,mBAAkB,GAAI,MAAM;EAChE;EAEA,MAAM,QAAK;AACT,SAAK,eAAc;AACnB,QAAI,CAAC,KAAK,SAAS;AACjB,UAAI;AACF,aAAK,QAAQ,MAAK;MACpB,QAAQ;MAER;IACF;AAEA,UAAM,KAAK;EACb;EAEA,MAAM,qBAAkB;AACtB,QAAI,KAAK,UAAU,SAAS,GAAG;AAC7B,aAAO,KAAK,UAAU,MAAK,KAAM;IACnC;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,KAAK;IACb;AAEA,QAAI,KAAK,SAAS;AAChB,aAAO;IACT;AAEA,WAAO,MAAM,IAAI,QACf,CAAC,SAAS,WAAU;AAClB,WAAK,SAAS,KAAK,EAAE,SAAS,OAAM,CAAE;IACxC,CAAC;EAEL;EAEA,mBAAgB;AACd,UAAM,SAAS,KAAK;AACpB,QAAI,OAAO,OAAO,OAAO,YAAY;AACnC,aAAO,GAAG,QAAQ,KAAK,OAAO;AAC9B,aAAO,MAAK;AACV,YAAI,OAAO,OAAO,QAAQ,YAAY;AACpC,iBAAO,IAAI,QAAQ,KAAK,OAAO;QACjC,WAAW,OAAO,OAAO,mBAAmB,YAAY;AACtD,iBAAO,eAAe,QAAQ,KAAK,OAAO;QAC5C;MACF;IACF;AAEA,QAAI,OAAO,OAAO,qBAAqB,YAAY;AACjD,aAAO,iBAAiB,QAAe,KAAK,OAAc;AAC1D,aAAO,MAAK;AACV,eAAO,oBAAoB,QAAe,KAAK,OAAc;MAC/D;IACF;AAEA,WAAO;EACT;EAEA,kBAAe;AACb,QAAI,OAAO,KAAK,oBAAoB,UAAU;AAC5C;IACF;AAEA,SAAK,qBAAqB,YAAY,MAAK;AACzC,WAAK,mBAAkB;IACzB,GAAG,KAAK,eAAe;EACzB;EAEA,iBAAc;AACZ,QAAI,KAAK,oBAAoB;AAC3B,oBAAc,KAAK,kBAAkB;AACrC,WAAK,qBAAqB;IAC5B;AACA,SAAK,uBAAsB;AAC3B,SAAK,sBAAqB;AAC1B,SAAK,sBAAsB;EAC7B;EAEA,yBAAsB;AACpB,QAAI,KAAK,mBAAmB;AAC1B,mBAAa,KAAK,iBAAiB;AACnC,WAAK,oBAAoB;IAC3B;EACF;EAEA,qBAAkB;AAChB,QAAI,KAAK,WAAW,KAAK,QAAQ,eAAe,KAAK,QAAQ,MAAM;AACjE;IACF;AAEA,UAAM,SAAS,KAAK;AACpB,QAAI,OAAO,OAAO,SAAS,YAAY;AACrC;IACF;AAEA,QAAI,OAAO,KAAK,mBAAmB,UAAU;AAC3C,UAAI,KAAK,mBAAmB;AAC1B;MACF;AACA,WAAK,oBAAoB,WAAW,MAAK;AACvC,aAAK,oBAAoB;AACzB,aAAK,SAAS,IAAI,gCAAgC,cAAc;AAChE,YAAI;AACF,cAAI,OAAO,OAAO,cAAc,YAAY;AAC1C,mBAAO,UAAS;UAClB,OAAO;AACL,mBAAO,MAAK;UACd;QACF,QAAQ;QAER;MACF,GAAG,KAAK,cAAc;IACxB;AAEA,QAAI;AACF,aAAO,KAAI;IACb,SAAS,OAAO;AACd,WAAK,uBAAsB;AAC3B,WAAK,SAAS,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACtE,UAAI;AACF,eAAO,MAAK;MACd,QAAQ;MAER;AACA;IACF;EACF;EAEA,aAAa,CAAC,UAAuB;AACnC,UAAM,OAAO,MAAM;AAEnB,UAAM,SAAS,KAAK,SAAS,MAAK;AAClC,QAAI,QAAQ;AACV,aAAO,QAAQ,IAAI;AACnB;IACF;AAEA,SAAK,UAAU,KAAK,IAAI;EAC1B;EAEA,UAAU,MAAK;AACb,SAAK,uBAAsB;EAC7B;EAEA,WAAW,CAAC,UAAc;AACxB,UAAM,aAAa,OAAO;AAC1B,UAAM,eAAe,OAAO;AAC5B,SAAK,SACH,sBAAsB,QAClB,aACA,IAAI,MACF,OAAO,iBAAiB,YAAY,aAAa,SAAS,IACtD,eACA,uCAAuC;AAGnD,UAAM,UAAU,KAAK,SAAS,OAAO,CAAC;AACtC,eAAW,UAAU,SAAS;AAC5B,aAAO,OAAO,KAAK,MAAM;IAC3B;EACF;EAEA,WAAW,MAAK;AACd,SAAK,eAAc;AACnB,SAAK,UAAU;AACf,SAAK,eAAc;AAEnB,UAAM,UAAU,KAAK,SAAS,OAAO,CAAC;AACtC,eAAW,UAAU,SAAS;AAC5B,UAAI,KAAK,QAAQ;AACf,eAAO,OAAO,KAAK,MAAM;MAC3B,OAAO;AACL,eAAO,QAAQ,IAAI;MACrB;IACF;EACF;;;;ACriBF,SAAS,aAAa,OAAc;AAClC,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,gCACP,OAAc;AAEd,MAAI,CAAC,aAAa,KAAK,KAAK,MAAM,QAAQ,KAAK,GAAG;AAChD,WAAO;EACT;AAEA,QAAM,YAAY,OAAO,eAAe,KAAK;AAC7C,SAAO,cAAc,OAAO,aAAa,cAAc;AACzD;AAEA,SAAS,kCACP,OACA,WAAiB;AAEjB,MAAI,OAAO,UAAU,aAAa;AAChC,WAAO;EACT;AAEA,MAAI,CAAC,gCAAgC,KAAK,GAAG;AAC3C,UAAM,IAAI,UAAU,uBAAuB,SAAS,qBAAqB;EAC3E;AAEA,SAAO,EAAE,GAAG,MAAK;AACnB;AAEM,SAAU,iCAAiC,cAAqB;AAIpE,MAAI,CAAC,aAAa,YAAY,KAAK,MAAM,QAAQ,YAAY,GAAG;AAC9D,WAAO;MACL,cAAc,CAAA;MACd,WAAW,CAAA;;EAEf;AAEA,QAAM,EACJ,eACA,cACA,aACA,YACA,YACA,WACA,GAAG,sBAAqB,IACtB;AAEJ,SAAO;IACL,cAAc,EAAE,GAAG,sBAAqB;IACxC,WAAW;MACT,cAAc,kCACZ,OAAO,kBAAkB,cAAc,gBAAgB,cACvD,eAAe;MAEjB,YAAY,kCACV,OAAO,gBAAgB,cAAc,cAAc,YACnD,aAAa;MAEf,WAAW,kCACT,OAAO,eAAe,cAAc,aAAa,WACjD,YAAY;;;AAIpB;AAOA,SAAS,iBAAiB,SAAgB;AACxC,QAAM,SAA4B;IAChC,SAAS,CAAA;IACT,qBAAqB,CAAA;;AAGvB,MAAI,CAAC,SAAS;AACZ,WAAO;EACT;AAEA,MAAI,OAAO,YAAY,eAAe,mBAAmB,SAAS;AAChE,YAAQ,QAAQ,CAAC,OAAO,QAAO;AAC7B,aAAO,QAAQ,KAAK,CAAC,KAAK,KAAK,CAAC;IAClC,CAAC;AACD,WAAO;EACT;AAEA,MAAI,aAAa,OAAO,KAAK,OAAO,YAAY,aAAa;AAC3D,UAAM,SAAU,QAAiC;AACjD,UAAM,QAAS,QAAgC;AAC/C,QAAI,kBAAkB,SAAS;AAC7B,aAAO,QAAQ,CAAC,OAAO,QAAO;AAC5B,eAAO,QAAQ,KAAK,CAAC,KAAK,KAAK,CAAC;MAClC,CAAC;AACD,UAAI,iBAAiB,KAAK;AACxB,mBAAW,mBAAmB,OAAO;AACnC,cAAI,OAAO,oBAAoB,UAAU;AACvC,mBAAO,oBAAoB,KAAK,gBAAgB,YAAW,CAAE;UAC/D;QACF;MACF;AACA,aAAO;IACT;EACF;AAEA,MAAI,MAAM,QAAQ,OAAO,GAAG;AAC1B,eAAW,SAAS,SAAS;AAC3B,UAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,GAAG;AAC7C;MACF;AACA,YAAM,CAAC,KAAK,KAAK,IAAI;AACrB,UAAI,OAAO,QAAQ,eAAe,SAAS,MAAM;AAC/C;MACF;AACA,aAAO,QAAQ,KAAK,CAAC,OAAO,GAAG,GAAG,OAAO,KAAK,CAAC,CAAC;IAClD;AACA,WAAO;EACT;AAEA,MAAI,CAAC,aAAa,OAAO,GAAG;AAC1B,WAAO;EACT;AAEA,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,OAAO,UAAU,aAAa;AAChC;IACF;AACA,QAAI,UAAU,MAAM;AAClB,aAAO,oBAAoB,KAAK,IAAI,YAAW,CAAE;AACjD;IACF;AACA,WAAO,QAAQ,KAAK,CAAC,KAAK,OAAO,KAAK,CAAC,CAAC;EAC1C;AAEA,SAAO;AACT;AAmBM,SAAU,0BAAuB;AACrC,SAAO;IACL,uBAAuB,oBAAI,IAAG;IAC9B,uBAAuB,oBAAI,IAAG;;AAElC;AAEM,SAAU,0BACd,aACA,SACA,SAA4C;AAE5C,QAAM,uBAAuB,SAAS,wBAAwB;AAC9D,QAAM,SAAS,iBAAiB,OAAO;AAEvC,aAAW,iBAAiB,OAAO,qBAAqB;AACtD,gBAAY,sBAAsB,OAAO,aAAa;AACtD,gBAAY,sBAAsB,IAAI,aAAa;EACrD;AAEA,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,SAAS;AACzC,UAAM,eAAe,IAAI,YAAW;AACpC,QACE,YAAY,sBAAsB,IAAI,YAAY,KAClD,CAAC,sBACD;AACA;IACF;AAEA,gBAAY,sBAAsB,IAAI,cAAc,EAAE,KAAK,MAAK,CAAE;AAClE,QAAI,sBAAsB;AACxB,kBAAY,sBAAsB,OAAO,YAAY;IACvD;EACF;AACF;AAEM,SAAU,0BACd,aAA8B;AAE9B,QAAM,UAAkC,CAAA;AACxC,aAAW,EAAE,KAAK,MAAK,KAAM,YAAY,sBAAsB,OAAM,GAAI;AACvE,YAAQ,GAAG,IAAI;EACjB;AACA,SAAO;AACT;AAEM,SAAU,8BACd,aAA8B;AAE9B,QAAM,UACJ,0BAA0B,WAAW;AACvC,aAAW,iBAAiB,YAAY,uBAAuB;AAC7D,YAAQ,aAAa,IAAI;EAC3B;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,KAAU,KAAa,UAAiB;AACrE,MAAI,OAAO,aAAa,eAAe,aAAa,MAAM;AACxD;EACF;AAEA,MAAI,MAAM,QAAQ,QAAQ,GAAG;AAC3B,eAAW,SAAS,UAAU;AAC5B,4BAAsB,KAAK,GAAG,GAAG,MAAM,KAAK;IAC9C;AACA;EACF;AAEA,MAAI,gCAAgC,QAAQ,GAAG;AAC7C,eAAW,CAAC,WAAW,WAAW,KAAK,OAAO,QAAQ,QAAQ,GAAG;AAC/D,4BAAsB,KAAK,GAAG,GAAG,IAAI,SAAS,KAAK,WAAW;IAChE;AACA;EACF;AAEA,MAAI,oBAAoB,MAAM;AAC5B,QAAI,aAAa,OAAO,KAAK,SAAS,YAAW,CAAE;AACnD;EACF;AAEA,MAAI,aAAa,OAAO,KAAK,OAAO,QAAQ,CAAC;AAC/C;AAEM,SAAU,wBACd,KACA,OAA0C;AAE1C,MAAI,CAAC,OAAO;AACV;EACF;AAEA,aAAW,CAAC,KAAK,QAAQ,KAAK,OAAO,QAAQ,KAAK,GAAG;AACnD,QAAI,OAAO,aAAa,aAAa;AACnC;IACF;AAEA,eAAW,eAAe,MAAM,KAAK,IAAI,aAAa,KAAI,CAAE,GAAG;AAC7D,UAAI,gBAAgB,OAAO,YAAY,WAAW,GAAG,GAAG,GAAG,GAAG;AAC5D,YAAI,aAAa,OAAO,WAAW;MACrC;IACF;AACA,QAAI,aAAa,MAAM;AACrB;IACF;AAEA,0BAAsB,KAAK,KAAK,QAAQ;EAC1C;AACF;AAEM,SAAU,6BAA6B,UAAgB;AAC3D,QAAM,iBAAiB,SAAS,QAAQ,QAAQ,EAAE;AAClD,MACE,mBAAmB,gBACnB,eAAe,SAAS,YAAY,GACpC;AACA,WAAO;EACT;AACA,SAAO,GAAG,cAAc;AAC1B;;;AC1RO,IAAM,kBAAkB,iBAC5B,KAAK,CAAC,eAAe,aAAa,aAAa,QAAQ,CAAC,EACxD,QAAQ,QAAQ;AAEZ,IAAM,mBAAmB,iBAC7B,KAAK,CAAC,eAAe,aAAa,aAAa,UAAU,YAAY,CAAC,EACtE,QAAQ,QAAQ;AAEZ,IAAM,wBAAwB,iBAClC,KAAK,CAAC,eAAe,aAAa,cAAc,CAAC,EACjD,QAAQ,aAAa;AAEjB,IAAM,wBAAwB,iBAClC,KAAK,CAAC,eAAe,aAAa,cAAc,QAAQ,CAAC,EACzD,QAAQ,QAAQ;AA0Cb,SAAU,cACd,UAAgD,CAAA,GAAE;AAElD,QAAM,eAA2C;IAC/C,MAAM;IACN,MAAM,QAAQ,QAAQ;IACtB,eAAe,QAAQ;IACvB,SAAS,QAAQ,SAAS,iBACtB,EAAE,iBAAiB,QAAQ,QAAQ,eAAc,IACjD;IACJ,qBAAqB,QAAQ,qBAAqB;;AAEpD,MAAI,QAAQ,sBAAsB,QAAW;AAC3C,iBAAa,sBAAsB,QAAQ;EAC7C;AACA,SAAO;IACL,MAAM;IACN,MAAM,QAAQ,QAAQ;IACtB;;AAEJ;AAiHM,SAAU,eACd,UAA0D,CAAA,GAAE;AAE5D,MAAI,OAAO,QAAQ,SAAS,YAAY,QAAQ,SAAS,eAAe;AACtE,UAAM,IAAI,UACR,2EAA2E;EAE/E;AAEA,MAAI,OAAO,QAAQ,YAAY,cAAc,QAAQ,cAAc,UAAU;AAC3E,UAAM,IAAI,UACR,oEAAoE;EAExE;AAEA,QAAM,eAA4C;IAChD,MAAM;IACN,MAAM;IACN,WAAW,QAAQ;IACnB,aAAa,QAAQ;IACrB,YAAY,QAAQ;;AAEtB,QAAM,aAAyB;IAC7B,MAAM;IACN,MAAM;IACN;;AAGF,MAAI,OAAO,QAAQ,YAAY,YAAY;AACzC,mCAA+B,YAAY,QAAQ,OAAO;EAC5D;AAEA,SAAO;AACT;;;ACzMM,SAAU,wBAA2B,OAAQ;AACjD,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,MAAK;EACpB;AAEA,MAAI,CAACC,UAAS,KAAK,GAAG;AACpB,WAAO;EACT;AAEA,QAAM,SAAwB,CAAA;AAC9B,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,UAAM,WAAW,IAAI,QAAQ,YAAY,KAAK,EAAE,YAAW;AAC3D,WAAO,QAAQ,IAAI,wBAAwB,KAAK;EAClD;AACA,SAAO;AACT;AA0BA,SAASC,UAAS,OAAc;AAC9B,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,YAAY,KAAW;AAC9B,SAAO,IAAI,QAAQ,YAAY,KAAK,EAAE,YAAW;AACnD;AAEA,SAAS,iBACP,OACA,cAAiC;AAEjC,MAAI,CAACA,UAAS,KAAK,GAAG;AACpB,WAAO,CAAA;EACT;AAEA,QAAM,SAAwB,CAAA;AAC9B,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,QAAI,aAAa,IAAI,GAAG,GAAG;AACzB;IACF;AACA,WAAO,GAAG,IAAI;EAChB;AACA,SAAO;AACT;AAKM,SAAU,mCACd,OACA,cAA+B;AAE/B,SAAO,iBAAiB,OAAO,IAAI,IAAI,YAAY,CAAC;AACtD;AAKM,SAAU,6CACd,OACA,cAA+B;AAE/B,SAAO,iBACL,wBAAwB,KAAK,GAC7B,IAAI,IAAI,aAAa,IAAI,CAAC,QAAQ,YAAY,GAAG,CAAC,CAAC,CAAC;AAExD;;;ACpHM,SAAU,8BACd,OAA2B;AAE3B,SAAO,UAAU,cAAc,cAAc;AAC/C;;;ACRM,SAAU,sBACd,cAAgC;AAEhC,MAAI,OAAO,iBAAiB,UAAU;AACpC,WAAO,aAAa,KAAI,MAAO,KAAK,SAAY;EAClD;AACA,SAAO;AACT;AAEM,SAAU,8BACd,cAA6B;AAE7B,QAAM,QAA2C,CAAA;AACjD,MAAI,aAAa;AAEjB,aAAW,CAAC,KAAK,KAAK,KAAK,aAAa,QAAO,GAAI;AACjD,iBAAa;AACb,UAAM,gBAAgB,MAAM,GAAG;AAC/B,QAAI,OAAO,kBAAkB,aAAa;AACxC,YAAM,GAAG,IAAI;IACf,WAAW,MAAM,QAAQ,aAAa,GAAG;AACvC,oBAAc,KAAK,KAAK;IAC1B,OAAO;AACL,YAAM,GAAG,IAAI,CAAC,eAAe,KAAK;IACpC;EACF;AAEA,SAAO,aAAa,QAAQ;AAC9B;AAEM,SAAU,oBACd,OACA,UAAgB;AAEhB,SAAO,IAAI,aAAa;IACtB,aAAa,OAAO,gBAAgB;IACpC,cAAc,OAAO,iBAAiB;IACtC,aAAa,OAAO,gBAAgB;IACpC,oBAAoB,EAAE,GAAG,OAAO,qBAAoB;IACpD,qBAAqB,EAAE,GAAG,OAAO,sBAAqB;IACtD;GACD;AACH;;;ATgGA,SAAS,oCACPC,OACA,mBAAmB,OAAK;AAExB,MAAI,CAACA,SAAQ,OAAOA,UAAS,YAAY,MAAM,QAAQA,KAAI,GAAG;AAC5D,WAAOA;EACT;AAEA,MAAIA,MAAK,SAAS,oBAAoB,OAAOA,MAAK,iBAAiB,UAAU;AAC3E,WAAO;MACL,MAAM;MACN,eAAeA,MAAK;MACpB,GAAI,OAAOA,MAAK,cAAc,WAC1B,EAAE,WAAWA,MAAK,UAAS,IAC3B,CAAA;;EAER;AAEA,MAAIA,MAAK,SAAS,eAAe,MAAM,QAAQA,MAAK,KAAK,GAAG;AAC1D,WAAO;MACL,GAAGA;MACH,OAAOA,MAAK,MAAM,IAAI,CAAC,UACrB,oCAAoC,OAAO,IAAI,CAAC;;EAGtD;AAEA,MAAIA,MAAK,SAAS,YAAY;AAC5B,UAAM,EAAE,cAAc,GAAG,KAAI,IAAKA;AAClC,WAAO;MACL,GAAG;MACH,GAAI,OAAO,iBAAiB,YACxB,EAAE,eAAe,aAAY,IAC7B,CAAA;;EAER;AAEA,SAAOA;AACT;AAEA,SAAS,sCACPA,OACA,mBAAmB,OAAK;AAExB,MAAI,CAACA,SAAQ,OAAOA,UAAS,YAAY,MAAM,QAAQA,KAAI,GAAG;AAC5D,WAAOA;EACT;AAEA,MACEA,MAAK,SAAS,oBACd,OAAOA,MAAK,kBAAkB,UAC9B;AACA,WAAO;MACL,MAAM;MACN,cAAcA,MAAK;MACnB,GAAI,OAAOA,MAAK,cAAc,WAC1B,EAAE,WAAWA,MAAK,UAAS,IAC3B,CAAA;;EAER;AAEA,MAAIA,MAAK,SAAS,eAAe,MAAM,QAAQA,MAAK,KAAK,GAAG;AAC1D,WAAO;MACL,GAAGA;MACH,OAAOA,MAAK,MAAM,IAAI,CAAC,UACrB,sCAAsC,OAAO,IAAI,CAAC;;EAGxD;AAEA,MAAIA,MAAK,SAAS,YAAY;AAC5B,UAAM,EAAE,eAAe,GAAG,KAAI,IAAKA;AACnC,WAAO;MACL,GAAG;MACH,GAAI,OAAO,kBAAkB,YACzB,EAAE,cAAc,cAAa,IAC7B,CAAA;;EAER;AAEA,SAAOA;AACT;AAsCA,SAAS,0BAA0B,OAAc;AAC/C,MAAI,wBAAwB,KAAK,GAAG;AAClC,WAAO;EACT;AAEA,QAAM,aACJ,iBAAiB,QACZ,MAAsC,QACvC;AAEN,MACE,iBAAiB,mCACjB,MAAM,SAAS,oCACf;AACA,WAAO;EACT;AAEA,MACE,sBAAsB,mCACtB,WAAW,SAAS,oCACpB;AACA,WAAO;EACT;AAEA,SAAO;AACT;AAEA,SAAS,gCAAgC,OAAc;AACrD,MACE,iBAAiB,oCAChB,MAAM,SAAS,sDACd,MAAM,SAAS,iBACjB;AACA,WAAO;EACT;AAEA,QAAM,aACJ,iBAAiB,QACZ,MAAsC,QACvC;AAEN,SACE,sBAAsB,oCACrB,WAAW,SAAS,sDACnB,WAAW,SAAS;AAE1B;AAEA,SAAS,qCACPA,OAA4B;AAK5B,SACE,OAAOA,MAAK,gBAAgB,YAC5B,MAAM,QAAQA,MAAK,UAAU,KAC7BA,MAAK,WAAW,WAAW,KAC3BA,MAAK,WAAW,MAAM,CAAC,UAAU,OAAO,UAAU,QAAQ;AAE9D;AAEA,IAAM,mBAAmB,iBAAE,KAAK;EAC9B;EACA;EACA;EACA;EACA;EACA;;EAEA;EACA;CACD;AAED,IAAM,oBAAoB,iBAAE,KAAK,CAAC,QAAQ,YAAY,MAAM,CAAC;AAC7D,IAAM,4BAA4B,iBAAE,KAAK;EACvC;EACA;EACA;CACD;AAED,SAAS,cACP,YACA,SAIC;AAED,MAAI,OAAO,eAAe,aAAa;AACrC,WAAO;EACT;AAEA,QAAM,qBAAqB,kBAAkB,UAAU,UAAU;AACjE,MAAI,mBAAmB,SAAS;AAC9B,WAAO,mBAAmB;EAC5B;AAEA,QAAM,4BACJ,0BAA0B,UAAU,UAAU;AAChD,MAAI,0BAA0B,SAAS;AACrC,QACE,uBAAuB,SAAS,KAAK,KACrC,SAAS,oCAAoC,MAC7C;AACA,aAAO,6BAA6B,0BAA0B,MAAM;QAClE,OAAO,SAAS;OACjB;IACH;AAEA,QAAI,0BAA0B,SAAS,wBAAwB;AAC7D,aAAO,EAAE,MAAM,uBAAsB;IACvC;AAEA,WAAO,EAAE,MAAM,YAAY,MAAM,0BAA0B,KAAI;EACjE;AAEA,QAAM,SAAS,iBAAiB,UAAU,UAAU;AACpD,MAAI,OAAO,SAAS;AAClB,WAAO,EAAE,MAAM,OAAO,KAAW;EACnC;AAEA,SAAO,EAAE,MAAM,YAAY,MAAM,WAAU;AAC7C;AAEA,SAAS,0BACP,QAAe;AAEf,SAAO,WAAW,iBAChB,WAAW,eACX,WAAW,eACT,SACA;AACN;AAEA,SAAS,uBAAuB,OAAiC;AAC/D,UAAQ,SAAS,CAAA,GAAI,KACnB,CAACA,UACCA,MAAK,SAAS,cACdA,MAAK,SAAS,kBACdA,MAAK,SAAS,sBAAsB;AAE1C;AAEA,SAAS,uBAAuB,OAAc;AAC5C,SAAO,OAAO,UAAU,YAAY,MAAM,WAAW,sBAAsB;AAC7E;AAEA,SAAS,6BAA6B,SAGrC;AACC,MAAI,uBAAuB,SAAS,KAAK,GAAG;AAC1C,WAAO;EACT;AAEA,MAAI,OAAO,SAAS,UAAU,UAAU;AACtC,WAAO;EACT;AAEA,MACE,SAAS,eAAe,cACxB,SAAS,eAAe,gBACxB;AACA,WAAO;EACT;AAEA,SAAO;AACT;AAEA,SAAS,6BACP,YACA,SAEC;AAED,MACE,6BAA6B;IAC3B,OAAO,SAAS;IAChB;GACD,GACD;AACA,WAAO,EAAE,MAAM,uBAAsB;EACvC;AAEA,MAAI,eAAe,gBAAgB;AACjC,WAAO,EAAE,MAAM,eAAc;EAC/B;AAEA,SAAO,EAAE,MAAM,WAAU;AAC3B;AAEA,SAAS,0BAA0B,MAAY;AAC7C,SACE,SAAS,cACT,SAAS,kBACT,SAAS;AAEb;AAEA,SAAS,sCACP,gBACA,UAAgB;AAEhB,MAAI,CAAC,0BAA0B,cAAc,GAAG;AAC9C,WAAO;EACT;AAEA,MAAI,mBAAmB,wBAAwB;AAC7C,WAAO,aAAa;EACtB;AAEA,SAAO,aAAa;AACtB;AAEA,SAAS,sBACP,YACA,OAAsB;AAEtB,MAAI,eAAe,UAAU,eAAe,QAAQ;AAClD,WAAO;EACT;AAEA,MAAI,eAAe,YAAY;AAC7B,WAAO,MAAM,SAAS;EACxB;AAEA,MAAI,WAAW,SAAS,YAAY;AAClC,WAAO,0BAA0B,WAAW,MAAM,KAAK;EACzD;AAEA,SAAO,MAAM,KAAK,CAACA,UACjB,sCAAsC,WAAW,MAAMA,MAAK,IAAI,IAC5D,OACAA,MAAK,SAAS,WAAW,IAAI;AAErC;AAEA,SAAS,0BACP,gBACA,OACA,iBAAwB;AAExB,SACE,uBAAuB,gBAAgB,OAAO,eAAe,MAAM;AAEvE;AAEA,SAAS,uBACP,gBACA,OACA,iBAAwB;AAIxB,aAAWA,SAAQ,OAAO;AACxB,QAAI,oBAAoBA,KAAI,GAAG;AAC7B,YAAM,gBAAgB,kBAClB,GAAG,eAAe,IAAIA,MAAK,IAAI,KAC/BA,MAAK;AACT,UAAI,mBAAmB,eAAe;AACpC,eAAOA;MACT;AACA;IACF;AAEA,QAAI,gBAAgBA,KAAI,GAAG;AACzB,YAAM,kBAAkB,kBACpB,GAAG,eAAe,IAAIA,MAAK,IAAI,KAC/BA,MAAK;AACT,YAAM,cAAc,uBAClB,gBACAA,MAAK,OACL,eAAe;AAEjB,UAAI,aAAa;AACf,eAAO;MACT;IACF;EACF;AAEA,SAAO;AACT;AAEA,SAAS,gCACP,OACA,iBAAwB;AAExB,QAAM,uBAAiC,CAAA;AAEvC,aAAWA,SAAQ,OAAO;AACxB,QAAI,oBAAoBA,KAAI,GAAG;AAC7B,2BAAqB,KACnB,kBAAkB,GAAG,eAAe,IAAIA,MAAK,IAAI,KAAKA,MAAK,IAAI;AAEjE;IACF;AAEA,QAAI,gBAAgBA,KAAI,GAAG;AACzB,YAAM,kBAAkB,kBACpB,GAAG,eAAe,IAAIA,MAAK,IAAI,KAC/BA,MAAK;AACT,2BAAqB,KACnB,GAAG,gCAAgCA,MAAK,OAAO,eAAe,CAAC;AAEjE;IACF;AAEA,yBAAqB,KAAKA,MAAK,IAAI;EACrC;AAEA,SAAO;AACT;AAEA,SAAS,oBACPA,OAAmB;AAEnB,SACEA,MAAK,SAAS,cACd,OAAQA,MAA4B,SAAS;AAEjD;AAEA,SAAS,gBAAgBA,OAAmB;AAK1C,QAAM,YAAYA;AAClB,SACEA,MAAK,SAAS,eACd,OAAO,UAAU,SAAS,YAC1B,MAAM,QAAQ,UAAU,KAAK;AAEjC;AAEA,SAAS,yCACP,WAA8C;AAE9C,MAAI,CAAC,aAAa,CAAC,MAAM,QAAQ,UAAU,KAAK,GAAG;AACjD,WAAO,CAAA;EACT;AAEA,SAAO,UAAU;AACnB;AAEA,SAAS,0BACP,YACA,OACA,SAEC;AAED,QAAM,2BAA2B,SAAS,6BAA6B;AACvE,MACE,CAAC,cACD,eAAe,UACf,eAAe,cACf,eAAe,UACf,WAAW,SAAS,YACpB;AACA;EACF;AAEA,QAAM,sBAAsB,uBAAuB,WAAW,MAAM,KAAK;AAEzE,MACE,CAAC,uBACD,4BACA,WAAW,SAAS,eACpB;AACA;EACF;AAEA,MACG,qBACG,kBAAkB,MACtB;AACA,UAAM,IAAI,UACR,6BAA6B,WAAW,IAAI,8FAA8F;EAE9I;AAEA,MACE,WAAW,SAAS,iBACpB,CAAC,0BAA0B,WAAW,MAAM,KAAK,GACjD;AACA,UAAM,IAAI,UACR,2LAA2L;EAE/L;AACF;AAEA,SAAS,wBACP,YACA,OACA,SAEC;AAED,QAAM,2BAA2B,SAAS,6BAA6B;AACvE,MAAI,OAAO,eAAe,aAAa;AACrC,WAAO;EACT;AAEA,MAAI,sBAAsB,YAAY,KAAK,KAAK,0BAA0B;AACxE,WAAO;EACT;AAEA,QAAM,uBAAuB;IAC3B,GAAG,IAAI,IAAI,gCAAgC,KAAK,CAAC;;AAEnD,QAAM,8BACJ,qBAAqB,SAAS,IAC1B,qBAAqB,qBAAqB,KAAK,IAAI,CAAC,MACpD;AAEN,MAAI,eAAe,YAAY;AAC7B,UAAM,IAAI,UACR,8GAA8G,2BAA2B,EAAE;EAE/I;AAEA,MAAI,eAAe,UAAU,eAAe,QAAQ;AAClD,UAAM,IAAI,MACR,uCAAuC,KAAK,UAAU,UAAU,CAAC,EAAE;EAEvE;AAEA,MAAI,WAAW,SAAS,YAAY;AAClC,UAAM,IAAI,UACR,6BAA6B,WAAW,IAAI,yEAAyE,2BAA2B,EAAE;EAEtJ;AAEA,QAAM,IAAI,UACR,6BAA6B,WAAW,IAAI,sDAAsD,2BAA2B,EAAE;AAEnI;AAEA,SAAS,kBACP,YACA,iBAAgD;AAEhD,MAAI,eAAe,QAAQ;AACzB,WAAO;EACT;AAEA,SAAO;IACL,GAAG;IACH,QAAQ;;AAEZ;AAEA,SAAS,qBACP,mBAA6D;AAE7D,MAAI,CAAC,mBAAmB;AACtB,WAAO;EACT;AAEA,SAAO,kBAAkB,IAAI,CAAC,UAAU,wBAAwB,KAAK,CAAC;AACxE;AAEA,SAAS,sCACP,QAAiD;AAEjD,MAAI,OAAO,WAAW,UAAU;AAC9B,WAAO;EACT;AAEA,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,WAAO,OAAO,IAAI,oCAAoC;EACxD;AAEA,MAAIC,UAAS,MAAM,KAAK,OAAO,OAAO,SAAS,UAAU;AACvD,QAAI,OAAO,SAAS,UAAU,OAAO,OAAO,SAAS,UAAU;AAC7D,aAAO,OAAO;IAChB;AAEA,QAAI,OAAO,SAAS,WAAW,OAAO,SAAS,QAAQ;AACrD,YAAM,kBAAkB,+BACtB,MAAwC;AAE1C,aAAO,gBAAgB,IAAI,oCAAoC;IACjE;EACF;AAEA,SAAO,OAAO,MAAM;AACtB;AAOA,SAAS,+BACP,QAAsC;AAEtC,MAAI,OAAO,SAAS,QAAQ;AAC1B,UAAM,aAAiC;MACrC,MAAM;MACN,MAAM,OAAO;;AAEf,QAAI,OAAO,cAAc;AACvB,iBAAW,eAAe,OAAO;IACnC;AACA,WAAO,CAAC,UAAU;EACpB;AAEA,MAAI,OAAO,SAAS,SAAS;AAC3B,UAAM,aAAkC;MACtC,MAAM;;AAGR,QAAI,OAAO,QAAQ;AACjB,iBAAW,SAAS,OAAO;IAC7B;AAEA,UAAM,iBAAkB,OAAe;AACvC,UAAM,eAAgB,OAAe;AACrC,UAAM,YAAa,OAAe;AAClC,UAAM,0BAA0B,mBAC9B,MAA6B;AAG/B,QAAI,OAAO,OAAO,UAAU,YAAY,OAAO,MAAM,SAAS,GAAG;AAC/D,iBAAW,QAAQ,OAAO;IAC5B,WAAWA,UAAS,OAAO,KAAK,GAAG;AACjC,YAAM,WAAW,OAAO;AACxB,YAAM,kBACJ,mBAAmB,QAAQ,KAAK;AAClC,UAAI,OAAO,SAAS,QAAQ,YAAY,SAAS,IAAI,SAAS,GAAG;AAC/D,mBAAW,QAAQ,SAAS;MAC9B,WACE,OAAO,SAAS,SAAS,YACzB,SAAS,KAAK,SAAS,GACvB;AACA,mBAAW,QAAQ,iBAAiB,SAAS,MAAM,eAAe;MACpE,WACE,SAAS,gBAAgB,cACzB,SAAS,KAAK,SAAS,GACvB;AACA,mBAAW,QAAQ,iBAAiB,SAAS,MAAM,eAAe;MACpE,OAAO;AACL,cAAM,eACH,OAAO,SAAS,WAAW,YAC1B,SAAS,OAAO,SAAS,KACzB,SAAS,WACV,OAAO,SAAS,OAAO,YAAY,SAAS,GAAG,SAAS,IACrD,SAAS,KACT;AACN,YAAI,cAAc;AAChB,qBAAW,QAAQ,EAAE,IAAI,aAAY;QACvC;MACF;IACF,WACE,OAAO,mBAAmB,YAC1B,eAAe,SAAS,GACxB;AACA,iBAAW,QAAQ;IACrB,WAAW,OAAO,iBAAiB,YAAY,aAAa,SAAS,GAAG;AACtE,iBAAW,QAAQ,EAAE,IAAI,aAAY;IACvC,OAAO;AACL,UAAI;AACJ,UAAI,OAAO,cAAc,YAAY,UAAU,SAAS,GAAG;AACzD,qBAAa;MACf,WAAW,qBAAqB,cAAc,UAAU,SAAS,GAAG;AAClE,qBAAa,yBAAyB,SAAS;MACjD;AAEA,UAAI,YAAY;AACd,mBAAW,QAAQ,iBACjB,YACA,uBAAuB;MAE3B;IACF;AAEA,QAAI,OAAO,cAAc;AACvB,iBAAW,eAAe,OAAO;IACnC;AAEA,WAAO,CAAC,UAAU;EACpB;AAEA,MAAI,OAAO,SAAS,QAAQ;AAC1B,UAAM,aAAiC;MACrC,MAAM;;AAGR,UAAM,YAAa,OAAe,QAAQ,OAAO;AACjD,QAAI,OAAO,cAAc,UAAU;AACjC,iBAAW,OAAO;IACpB,WAAWA,UAAS,SAAS,GAAG;AAC9B,UAAI,OAAO,UAAU,SAAS,YAAY,UAAU,KAAK,SAAS,GAAG;AACnE,mBAAW,OAAO,iBAChB,UAAU,MACV,UAAU,aAAa,YAAY;MAEvC,WACE,UAAU,gBAAgB,cAC1B,UAAU,KAAK,SAAS,GACxB;AACA,mBAAW,OAAO,iBAChB,UAAU,MACV,UAAU,aAAa,YAAY;MAEvC,WACE,OAAO,UAAU,QAAQ,YACzB,UAAU,IAAI,SAAS,GACvB;AACA,mBAAW,OAAO,EAAE,KAAK,UAAU,IAAG;MACxC,OAAO;AACL,cAAM,eACH,OAAO,UAAU,OAAO,YACvB,UAAU,GAAG,SAAS,KACtB,UAAU,OACX,OAAQ,UAAkB,WAAW,YACrC,UAAkB,OAAO,SAAS,IAC9B,UAAkB,SACnB;AACN,YAAI,cAAc;AAChB,qBAAW,OAAO,EAAE,IAAI,aAAY;QACtC;MACF;AAEA,UACE,OAAO,UAAU,aAAa,YAC9B,UAAU,SAAS,SAAS,GAC5B;AACA,mBAAW,WAAW,UAAU;MAClC;IACF;AAEA,QAAI,CAAC,WAAW,MAAM;AACpB,YAAM,SAAS,8BAA8B,MAAa;AAC1D,UAAI,OAAO,MAAM;AACf,mBAAW,OAAO,OAAO;MAC3B;AACA,UAAI,OAAO,UAAU;AACnB,mBAAW,WAAW,OAAO;MAC/B;IACF;AACA,QAAI,OAAO,cAAc;AACvB,iBAAW,eAAe,OAAO;IACnC;AAEA,WAAO,CAAC,UAAU;EACpB;AAEA,QAAM,IAAI,UACR,iCAAiC,KAAK,UAAU,MAAM,CAAC,EAAE;AAE7D;AAMA,SAAS,qCACP,MAAuC;AAEvC,MAAI,KAAK,SAAS,cAAc;AAC9B,WAAO;MACL,MAAM;MACN,MAAM,KAAK;;EAEf;AAEA,MAAI,KAAK,SAAS,eAAe;AAC/B,UAAM,SAA6C,EAAE,MAAM,cAAa;AAExE,UAAM,aAAc,KAAa,SAAU,KAAa;AACxD,QAAI,OAAO,eAAe,UAAU;AAClC,aAAO,YAAY;IACrB,WAAWA,UAAS,UAAU,KAAK,OAAO,WAAW,OAAO,UAAU;AACpE,aAAO,UAAU,WAAW;IAC9B;AAEA,UAAM,eAAgB,KAAa;AACnC,QAAI,OAAO,iBAAiB,UAAU;AACpC,aAAO,UAAU;IACnB;AAEA,QAAI,KAAK,QAAQ;AACf,aAAO,SAAS,KAAK;IACvB;AAEA,WAAO;EACT;AAEA,MAAI,KAAK,SAAS,cAAc;AAC9B,UAAM,SAA6C,EAAE,MAAM,aAAY;AAEvE,QAAI,OAAO,KAAK,SAAS,UAAU;AAEjC,YAAM,QAAQ,KAAK,KAAK,KAAI;AAC5B,UAAI,MAAM,WAAW,OAAO,GAAG;AAC7B,eAAO,YAAY;MACrB,WAAW,MAAM,WAAW,SAAS,KAAK,MAAM,WAAW,UAAU,GAAG;AACtE,eAAO,WAAW;MACpB,WAAW,oBAAoB,KAAK,KAAK,GAAG;AAC1C,eAAO,YAAY;MACrB,OAAO;AACL,eAAO,WAAW;MACpB;IACF,WACE,KAAK,QACL,OAAO,KAAK,SAAS,YACrB,QAAQ,KAAK,QACb,OAAQ,KAAK,KAA0B,OAAO,UAC9C;AACA,aAAO,UAAW,KAAK,KAAwB;IACjD,WACE,KAAK,QACL,OAAO,KAAK,SAAS,YACrB,SAAS,KAAK,QACd,OAAQ,KAAK,KAA2B,QAAQ,UAChD;AACA,aAAO,WAAY,KAAK,KAAyB;IACnD;AAEA,UAAM,iBAAkB,KAAa;AACrC,QAAI,OAAO,mBAAmB,UAAU;AACtC,aAAO,YAAY;IACrB;AAEA,UAAM,gBAAiB,KAAa;AACpC,QAAI,OAAO,kBAAkB,UAAU;AACrC,aAAO,WAAW;IACpB;AAEA,UAAM,eAAgB,KAAa;AACnC,QAAI,OAAO,iBAAiB,UAAU;AACpC,aAAO,UAAU;IACnB;AAEA,QAAI,KAAK,UAAU;AACjB,aAAO,WAAW,KAAK;IACzB;AAEA,WAAO;EACT;AAEA,QAAM,IAAI,UACR,uCAAuC,KAAK,UAAU,IAAI,CAAC,EAAE;AAEjE;AAEA,SAAS,kDACP,MAAwC;AAExC,MAAI,KAAK,SAAS,cAAc;AAC9B,WAAO;MACL,MAAM;MACN,MAAM,KAAK;;EAEf;AAEA,MAAI,KAAK,SAAS,eAAe;AAC/B,UAAM,aAAkC,EAAE,MAAM,cAAa;AAE7D,QAAI,OAAO,KAAK,cAAc,YAAY,KAAK,UAAU,SAAS,GAAG;AACnE,iBAAW,QAAQ,KAAK;IAC1B,WAAW,OAAO,KAAK,YAAY,YAAY,KAAK,QAAQ,SAAS,GAAG;AACtE,iBAAW,QAAQ,EAAE,IAAI,KAAK,QAAO;IACvC,OAAO;AAGL,qBAAO,MACL,0KAA0K;AAE5K,aAAO;IACT;AAEA,QAAI,KAAK,QAAQ;AACf,iBAAW,SAAS,KAAK;IAC3B;AAEA,WAAO;EACT;AAEA,MAAI,KAAK,SAAS,cAAc;AAC9B,UAAM,aAAiC,EAAE,MAAM,aAAY;AAE3D,QAAI,OAAO,KAAK,YAAY,YAAY,KAAK,QAAQ,SAAS,GAAG;AAC/D,iBAAW,OAAO,EAAE,IAAI,KAAK,QAAO;IACtC,WAAW,OAAO,KAAK,aAAa,YAAY,KAAK,SAAS,SAAS,GAAG;AACxE,iBAAW,OAAO,EAAE,KAAK,KAAK,SAAQ;IACxC,WACE,OAAO,KAAK,cAAc,YAC1B,KAAK,UAAU,SAAS,GACxB;AACA,iBAAW,OAAO,KAAK;IACzB;AAEA,QAAI,KAAK,UAAU;AACjB,iBAAW,WAAW,KAAK;IAC7B;AAEA,WAAO;EACT;AAEA,QAAM,aAAoB;AAC1B,QAAM,IAAI,UACR,uCAAuC,KAAK,UAAU,UAAU,CAAC,EAAE;AAEvE;AAEA,SAAS,oCACP,QAAqE;AAErE,MAAI,OAAO,WAAW,UAAU;AAC9B,WAAO;EACT;AAEA,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,WAAO,OACJ,IAAI,iDAAiD,EACrD,OAAO,CAAC,MAAM,MAAM,IAAI;EAC7B;AAEA,SAAO;AACT;AAEA,SAAS,8BAA8B,OAA0B;AAI/D,QAAM,WACJ,OAAO,MAAM,aAAa,YAAY,MAAM,SAAS,SAAS,IAC1D,MAAM,WACN;AAEN,QAAM,eACJ,OAAO,MAAM,OAAO,YAAY,MAAM,GAAG,SAAS,IAC9C,MAAM,KACN,OAAO,MAAM,WAAW,YAAY,MAAM,OAAO,SAAS,IACxD,MAAM,SACN;AACR,MAAI,cAAc;AAChB,WAAO,EAAE,MAAM,EAAE,IAAI,aAAY,GAAI,SAAQ;EAC/C;AAEA,MAAI,OAAO,MAAM,YAAY,YAAY,MAAM,QAAQ,SAAS,GAAG;AACjE,WAAO,EAAE,MAAM,EAAE,KAAK,MAAM,QAAO,GAAI,SAAQ;EACjD;AAEA,MAAI,OAAO,MAAM,aAAa,YAAY,MAAM,SAAS,SAAS,GAAG;AACnE,WAAO;MACL,MAAM,iBAAiB,MAAM,UAAU,MAAM,aAAa,YAAY;MACtE;;EAEJ;AAEA,MAAI,MAAM,oBAAoB,cAAc,MAAM,SAAS,SAAS,GAAG;AACrE,WAAO;MACL,MAAM,iBAAiB,MAAM,UAAU,MAAM,aAAa,YAAY;MACtE;;EAEJ;AAEA,SAAO,CAAA;AACT;AAEA,SAASA,UAAS,OAAc;AAC9B,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,iCACP,cAAoD;AAIpD,QAAM,aAAa,wBAAwB,YAAY;AACvD,MAAI,CAACA,UAAS,UAAU,GAAG;AACzB,WAAO,CAAA;EACT;AACA,QAAM,cAAc,WAAW;AAC/B,MAAI,CAACA,UAAS,WAAW,GAAG;AAC1B,WAAO,CAAA;EACT;AACA,SAAO;IACL;;AAGJ;AAEA,SAAS,mBACP,OAAoC;AAEpC,MAAI,MAAM,SAAS,mBAAmB;AACpC,UAAM,UAAU,MAAM;AACtB,QAAI,OAAO,YAAY,YAAY,QAAQ,WAAW,GAAG;AACvD,YAAM,IAAI,UAAU,yCAAyC;IAC/D;AAEA,WAAO;MACL,MAAM;MACN,UAAU;MACV,SAAS,MAAM;;EAEnB;AAEA,MAAI,MAAM,SAAS,UAAU;AAC3B,QAAI,CAAC,MAAM,QAAQ;AACjB,YAAM,IAAI,UAAU,uCAAuC;IAC7D;AACA,UAAM,YAAY,MAAM,OAAO;AAC/B,QAAI,cAAc,mBAAmB;AACnC,YAAM,IAAI,UACR,8DAA8D;IAElE;AACA,QACE,OAAO,MAAM,OAAO,SAAS,YAC7B,MAAM,OAAO,KAAK,WAAW,GAC7B;AACA,YAAM,IAAI,UAAU,6CAA6C;IACnE;AACA,QAAI,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,WAAW,GAAG;AAC7D,YAAM,IAAI,UAAU,mCAAmC;IACzD;AACA,QACE,OAAO,MAAM,gBAAgB,YAC7B,MAAM,YAAY,WAAW,GAC7B;AACA,YAAM,IAAI,UAAU,0CAA0C;IAChE;AAEA,WAAO;MACL,MAAM;MACN,MAAM,MAAM;MACZ,aAAa,MAAM;MACnB,QAAQ;QACN,MAAM;QACN,YAAY;QACZ,MAAM,MAAM,OAAO;;;EAGzB;AAEA,QAAM,IAAI,UACR,iCAAiC,OAC9B,MAA6B,IAAI,CACnC,EAAE;AAEP;AAEA,SAAS,2BACP,QAA6C;AAE7C,MAAI,CAAC,QAAQ;AACX,WAAO;EACT;AAEA,MAAI,OAAO,SAAS,YAAY;AAC9B,WAAO,EAAE,MAAM,WAAU;EAC3B;AAEA,MAAI,OAAO,SAAS,aAAa;AAC/B,QAAI,CAAC,MAAM,QAAQ,OAAO,cAAc,GAAG;AACzC,YAAM,IAAI,UACR,wDAAwD;IAE5D;AAEA,UAAM,iBAAiB,OAAO,eAAe,OAC3C,CAAC,WACC,OAAO,WAAW,YAAY,OAAO,SAAS,CAAC;AAGnD,UAAM,gBAAgB,OAAO,eAAe,IAAI,CAAC,YAAY;MAC3D,QAAQ,OAAO;MACf,MAAM,OAAO;MACb,OAAO,OAAO;MACd;AAEF,WAAO;MACL,MAAM;MACN,iBAAiB;MACjB,gBAAgB;;EAEpB;AAEA,QAAM,IAAI,UACR,yCAAyC,OACtC,OAA8B,IAAI,CACpC,EAAE;AAEP;AAEA,SAAS,yBACP,aAAmD;AAEnD,MAAI,CAAC,aAAa;AAChB,WAAO,EAAE,MAAM,QAAO;EACxB;AAEA,MAAI,YAAY,SAAS,SAAS;AAChC,UAAM,cAAc,YAAY,QAAQ,IAAI,CAAC,UAAS;AACpD,UACE,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,gBAAgB,YAC7B,OAAO,MAAM,SAAS,UACtB;AACA,cAAM,IAAI,UACR,yDAAyD;MAE7D;AACA,aAAO;QACL,MAAM,MAAM;QACZ,aAAa,MAAM;QACnB,MAAM,MAAM;;IAEhB,CAAC;AAED,WAAO;MACL,MAAM;MACN,QAAQ;;EAEZ;AAEA,MAAI,YAAY,SAAS,kBAAkB;AACzC,UAAMC,UAAS,YAAY,QAAQ,IAAI,kBAAkB;AAEzD,WAAO;MACL,MAAM;MACN,UAAU,YAAY;MACtB,cAAc,YAAY;MAC1B,gBAAgB,2BAA2B,YAAY,aAAa;MACpE,QAAAA;;EAEJ;AAEA,MAAI,YAAY,SAAS,uBAAuB;AAC9C,UAAM,cAAc,YAAY;AAChC,QAAI,OAAO,gBAAgB,YAAY,YAAY,WAAW,GAAG;AAC/D,YAAM,IAAI,UACR,6DAA6D;IAEjE;AAEA,WAAO;MACL,MAAM;MACN,cAAc;;EAElB;AAEA,QAAM,IAAI,UACR,uCAAuC,OACpC,YAAoC,IAAI,CAC1C,EAAE;AAEP;AAEA,SAAS,SACP,OACA,UACA,SAGC;AAKD,QAAM,cAA+B,CAAA;AACrC,QAAM,UAAiD,CAAA;AACvD,QAAM,uBAAuB,oBAAI,IAAG;AASpC,MAAI,4BAA4B;AAChC,MAAI,gBAAgB;AACpB,QAAM,yBAAyB,6BAA6B;IAC1D,OAAO,SAAS;IAChB,YAAY,SAAS;GACtB;AACD,aAAWF,SAAQ,OAAO;AACxB,QAAIA,MAAK,SAAS,YAAY;AAC5B,YAAM,qBAAqBA,MAAK,iBAAiB;AACjD,oCAA8B;AAE9B,YAAM,gBACJ,OAAOA,MAAK,cAAc,WAAWA,MAAK,UAAU,KAAI,IAAK;AAC/D,UAAI,cAAc,SAAS,GAAG;AAC5B,cAAM,uBACJ,OAAOA,MAAK,yBAAyB,WACjCA,MAAK,qBAAqB,KAAI,IAC9B;AACN,YAAI,qBAAqB,WAAW,GAAG;AACrC,gBAAM,IAAI,UACR,2BAA2B,aAAa,yCAAyC;QAErF;AAEA,YAAI,iBAAiB,qBAAqB,IAAI,aAAa;AAC3D,YAAI,CAAC,gBAAgB;AACnB,2BAAiB;YACf,OAAO,YAAY;YACnB,aAAa;YACb,eAAe,oBAAI,IAAG;YACtB,OAAO,CAAA;;AAET,+BAAqB,IAAI,eAAe,cAAc;AACtD,sBAAY,KAAK,CAAA,CAAE;QACrB,WAAW,eAAe,gBAAgB,sBAAsB;AAC9D,gBAAM,IAAI,UACR,2BAA2B,aAAa,oCAAoC;QAEhF;AAEA,cAAM,EAAE,MAAMG,aAAY,SAASC,gBAAc,IAAK,YACpDJ,OACA;UACE;SACD;AAEH,YAAI,eAAe,cAAc,IAAIA,MAAK,IAAI,GAAG;AAC/C,gBAAM,IAAI,UACR,cAAc,aAAa,kDAAkDA,MAAK,IAAI,IAAI;QAE9F;AACA,uBAAe,cAAc,IAAIA,MAAK,IAAI;AAC1C,uBAAe,MAAM,KAAKG,WAAuC;AACjE,YAAIC,mBAAkBA,gBAAe,SAAS,GAAG;AAC/C,qBAAW,QAAQA,iBAAgB;AACjC,oBAAQ,KAAK,IAAI;UACnB;QACF;AACA;MACF;IACF;AAEA,QACEJ,MAAK,SAAS,iBACdA,MAAK,cAAc,SAAS,eAC5B;AACA,sBAAgB;IAClB;AAEA,QACEA,MAAK,SAAS,iBACdA,MAAK,cAAc,SAAS,SAC5BA,MAAK,aAAa,kBAAkB,MACpC;AACA,kCAA4B;IAC9B;AAEA,UAAM,EAAE,MAAM,YAAY,SAAS,eAAc,IAAK,YAAYA,OAAM;MACtE;KACD;AACD,gBAAY,KAAK,UAAU;AAC3B,QAAI,kBAAkB,eAAe,SAAS,GAAG;AAC/C,iBAAW,QAAQ,gBAAgB;AACjC,gBAAQ,KAAK,IAAI;MACnB;IACF;EACF;AAEA,MAAI,6BAA6B,CAAC,eAAe;AAC/C,UAAM,IAAI,UACR,oHAAoH;EAExH;AAEA,aAAW,CACT,eACA,cAAc,KACX,qBAAqB,QAAO,GAAI;AACnC,gBAAY,eAAe,KAAK,IAAI;MAClC,MAAM;MACN,MAAM;MACN,aAAa,eAAe;MAC5B,OAAO,eAAe;;EAE1B;AAEA,SAAO;IACL,OAAO,CAAC,GAAG,aAAa,GAAG,SAAS,IAAI,cAAc,CAAC;IACvD;;AAEJ;AAEA,SAAS,YACPA,OACA,SAEC;AAKD,MAAIA,MAAK,SAAS,YAAY;AAC5B,UAAM,aAAkC;MACtC,MAAM;MACN,MAAMA,MAAK;MACX,aAAaA,MAAK;MAClB,YAAYA,MAAK;MACjB,QAAQA,MAAK;;AAEf,QAAIA,MAAK,cAAc;AACrB,iBAAW,gBAAgB;IAC7B;AACA,WAAO;MACL,MAAM;MACN,SAAS;;EAEb,WAAWA,MAAK,SAAS,YAAY;AACnC,QAAI,SAAS,wBAAwB;AACnC,UAAI,CAAC,qCAAqCA,KAAI,GAAG;AAC/C,cAAM,IAAI,UACR,wJAAwJ;MAE5J;AAEA,aAAO;QACL,MAAM;UACJ,MAAM;UACN,aAAaA,MAAK;UAClB,eAAeA,MAAK,WAAW,CAAC;UAChC,gBAAgBA,MAAK,WAAW,CAAC;;QAEnC,SAAS;;IAEb;AAEA,WAAO;MACL,MAAM;QACJ,MAAM;;MAER,SAAS;;EAEb,WAAWA,MAAK,SAAS,SAAS;AAChC,WAAO;MACL,MAAM;QACJ,MAAM;QACN,aAAa,yBAAyBA,MAAK,WAAW;;MAExD,SAAS;;EAEb,WAAWA,MAAK,SAAS,eAAe;AACtC,WAAO;MACL,MAAM;QACJ,MAAM;;MAER,SAAS;;EAEb,WAAWA,MAAK,SAAS,eAAe;AACtC,QAAIA,MAAK,cAAc,SAAS,cAAc;AAC5C,YAAMK,iBAEF;QACF,MAAM;QACN,eAAeL,MAAK,aAAa;QACjC,SAASA,MAAK,aAAa;QAC3B,qBAAqBA,MAAK,aAAa;;AAEzC,UAAIA,MAAK,aAAa,wBAAwB,QAAW;AACvD,QAAAK,eAAc,sBACZL,MAAK,aAAa;MACtB;AACA,aAAO;QACL,MAAMK;QACN,SAAS;;IAEb,WAAWL,MAAK,cAAc,SAAS,sBAAsB;AAC3D,aAAO;QACL,MAAM;UACJ,MAAM;UACN,eAAeA,MAAK,aAAa;UACjC,qBAAqBA,MAAK,aAAa;;QAEzC,SAAS;;IAEb,WAAWA,MAAK,cAAc,SAAS,eAAe;AACpD,aAAO;QACL,MAAM;UACJ,MAAM;UACN,kBACEA,MAAK,aAAa;WAEjB,OAAOA,MAAK,aAAa,oBAAoB,WAC1C,CAACA,MAAK,aAAa,eAAe,IAClCA,MAAK,aAAa;UACxB,iBAAiBA,MAAK,aAAa;UACnC,iBAAiBA,MAAK,aAAa;UACnC,SAASA,MAAK,aAAa;;QAE7B,SAASA,MAAK,aAAa,yBACvB,CAAC,0BAA0B,IAC3B;;IAER,WAAWA,MAAK,cAAc,SAAS,oBAAoB;AACzD,aAAO;QACL,MAAM;UACJ,MAAM;UACN,WAAWA,MAAK,aAAa;;QAE/B,SAASA,MAAK,aAAa,kBACvB,CAAC,+BAA+B,IAChC;;IAER,WAAWA,MAAK,cAAc,SAAS,eAAe;AACpD,aAAO;QACL,MAAM;UACJ,MAAM;UACN,WAAWA,MAAK,aAAa;UAC7B,aAAaA,MAAK,aAAa;UAC/B,YAAYA,MAAK,aAAa;;QAEhC,SAAS;;IAEb,WAAWA,MAAK,cAAc,SAAS,oBAAoB;AACzD,aAAO;QACL,MAAM;UACJ,MAAM;UACN,YAAYA,MAAK,aAAa;UAC9B,gBAAgBA,MAAK,aAAa;UAClC,kBAAkBA,MAAK,aAAa;UACpC,OAAOA,MAAK,aAAa;UACzB,YAAYA,MAAK,aAAa;UAC9B,oBAAoBA,MAAK,aAAa;UACtC,eAAeA,MAAK,aAAa;UACjC,gBAAgBA,MAAK,aAAa;UAClC,SAASA,MAAK,aAAa;UAC3B,MAAMA,MAAK,aAAa;;QAE1B,SAAS;;IAEb,WAAWA,MAAK,cAAc,SAAS,OAAO;AAC5C,YAAM,aAAkC;QACtC,MAAM;QACN,cAAcA,MAAK,aAAa;QAChC,YAAYA,MAAK,aAAa;QAC9B,cAAcA,MAAK,aAAa;QAChC,eAAeA,MAAK,aAAa;QACjC,eAAeA,MAAK,aAAa;QACjC,SAASA,MAAK,aAAa;QAC3B,kBAAkB,0BAChBA,MAAK,aAAa,gBAAgB;QAEpC,oBAAoBA,MAAK,aAAa;;AAExC,UAAIA,MAAK,aAAa,kBAAkB,MAAM;AAC5C,mBAAW,gBAAgB;MAC7B;AACA,aAAO;QACL,MAAM;QACN,SAAS;;IAEb,WAAWA,MAAK,cAAc;AAC5B,aAAO;QACL,MAAMA,MAAK;QACX,SAAS;;IAEb;EACF;AAEA,QAAM,IAAI,MAAM,0BAA0B,KAAK,UAAUA,KAAI,CAAC,EAAE;AAClE;AAEA,SAAS,0BACP,iBAA+D;AAE/D,QAAM,aAAa,kCAAkC,eAAe;AACpE,MAAI,eAAe,SAAS;AAC1B,WAAO;EACT;AAEA,MAAI,eAAe,UAAU;AAC3B,WAAO;EACT;AAEA,SAAO;IACL,OAAO,WAAW;IAClB,QAAQ,WAAW;;AAEvB;AAEA,SAAS,eAAe,SAA0B;AAChD,SAAO;IACL,MAAM,QAAQ;IACd,aAAa,QAAQ;IACrB,YAAY,QAAQ;IACpB,QAAQ,QAAQ;IAChB,MAAM;;AAEV;AAEA,SAAS,uBACP,OAA2B;AAE3B,MAAI,MAAM,SAAS,cAAc;AAC/B,WAAO;MACL,MAAM;MACN,MAAM,MAAM;MACZ,GAAI,MAAM,wBACN,EAAE,yBAAyB,MAAM,sBAAqB,IACtD,CAAA;MACJ,GAAG,6CAA6C,MAAM,cAAc;QAClE;QACA;OACD;;EAEL,WAAW,MAAM,SAAS,eAAe;AACvC,UAAM,aAAkD;MACtD,MAAM;MACN,QAAS,MAAM,UAAU;;AAE3B,QAAI,OAAO,MAAM,UAAU,UAAU;AACnC,iBAAW,YAAY,MAAM;IAC/B,WAAW,MAAM,SAAS,QAAQ,MAAM,OAAO;AAC7C,iBAAW,UAAU,MAAM,MAAM;IACnC,WAAW,OAAQ,MAAc,aAAa,UAAU;AACtD,iBAAW,YAAa,MAAc;IACxC,WAAW,OAAQ,MAAc,WAAW,UAAU;AACpD,iBAAW,UAAW,MAAc;IACtC;AACA,WAAO;MACL,GAAG;MACH,GAAI,MAAM,wBACN,EAAE,yBAAyB,MAAM,sBAAqB,IACtD,CAAA;MACJ,GAAG,6CAA6C,MAAM,cAAc;QAClE;QACA;QACA;QACA;OACD;;EAEL,WAAW,MAAM,SAAS,cAAc;AACtC,UAAM,YAAgD;MACpD,MAAM;;AAER,QAAI,OAAO,MAAM,SAAS,UAAU;AAClC,YAAM,QAAQ,MAAM,KAAK,KAAI;AAC7B,UAAI,MAAM,WAAW,OAAO,GAAG;AAC7B,kBAAU,YAAY;MACxB,WAAW,MAAM,WAAW,UAAU,GAAG;AACvC,kBAAU,WAAW;MACvB,WAAW,oBAAoB,KAAK,KAAK,GAAG;AAC1C,kBAAU,YAAY;MACxB,OAAO;AACL,cAAM,IAAI,UACR,qIAAqI;MAEzI;IACF,WACE,MAAM,QACN,OAAO,MAAM,SAAS,YACtB,QAAQ,MAAM,MACd;AACA,gBAAU,UAAU,MAAM,KAAK;IACjC,WACE,MAAM,QACN,OAAO,MAAM,SAAS,YACtB,SAAS,MAAM,MACf;AACA,gBAAU,WAAW,MAAM,KAAK;IAClC;AAEA,UAAM,iBAAkB,MAAc;AACtC,QAAI,OAAO,mBAAmB,UAAU;AACtC,gBAAU,YAAY;IACxB;AACA,UAAM,gBAAiB,MAAc;AACrC,QAAI,OAAO,kBAAkB,UAAU;AACrC,gBAAU,WAAW;IACvB;AACA,UAAM,eAAgB,MAAc;AACpC,QAAI,OAAO,iBAAiB,UAAU;AACpC,gBAAU,UAAU;IACtB;AACA,QAAI,MAAM,UAAU;AAClB,gBAAU,WAAW,MAAM;IAC7B;AACA,WAAO;MACL,GAAG;MACH,GAAI,MAAM,wBACN,EAAE,yBAAyB,MAAM,sBAAqB,IACtD,CAAA;MACJ,GAAG,6CAA6C,MAAM,cAAc;QAClE;QACA;QACA;QACA;QACA;OACD;;EAEL;AAEA,QAAM,IAAI,UACR,mCAAmC,KAAK,UAAU,KAAK,CAAC,EAAE;AAE9D;AAEA,SAAS,qBACP,cACA,MAAuB;AAEvB,MACE,CAAC,gBACD,OAAO,iBAAiB,YACxB,MAAM,QAAQ,YAAY,GAC1B;AACA,WAAO;EACT;AAEA,QAAM,SAAS;AACf,aAAW,OAAO,MAAM;AACtB,QAAI,OAAO,OAAO,GAAG,MAAM,aAAa;AACtC,aAAO,OAAO,GAAG;IACnB;EACF;AAEA,SAAO;AACT;AAEA,SAAS,wBACP,OAAgC;AAEhC,MAAI,MAAM,SAAS,eAAe;AAChC,UAAM,cAAc,qBAElB,MAAM,cAAc,CAAC,aAAa,CAAC;AACrC,UAAM,wBACJ,MAAM,QAAQ,WAAW,IAAI,cAAc,CAAA;AAC7C,WAAO;MACL,MAAM;MACN,MAAM,MAAM;MACZ,aAAa;MACb,GAAG,6CAA6C,MAAM,cAAc;QAClE;QACA;QACA;OACD;;EAEL;AAEA,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO;MACL,MAAM;MACN,SAAS,MAAM;MACf,GAAG,6CAA6C,MAAM,cAAc;QAClE;QACA;OACD;;EAEL;AAEA,QAAM,IAAI,UACR,oCAAoC,KAAK,UAAU,KAAK,CAAC,EAAE;AAE/D;AAEA,SAAS,eACP,MAA0B;AAK1B,MAAI,KAAK,SAAS,UAAU;AAC1B,WAAO;MACL,IAAI,KAAK;MACT,MAAM;MACN,SAAS,KAAK;MACd,GAAG,6CAA6C,KAAK,cAAc;QACjE;QACA;QACA;OACD;;EAEL;AAEA,MAAI,KAAK,SAAS,QAAQ;AACxB,QAAI,OAAO,KAAK,YAAY,UAAU;AACpC,aAAO;QACL,IAAI,KAAK;QACT,MAAM;QACN,SAAS,KAAK;QACd,GAAG,6CAA6C,KAAK,cAAc;UACjE;UACA;UACA;SACD;;IAEL;AAEA,WAAO;MACL,IAAI,KAAK;MACT,MAAM;MACN,SAAS,KAAK,QAAQ,IAAI,sBAAsB;MAChD,GAAG,6CAA6C,KAAK,cAAc;QACjE;QACA;QACA;OACD;;EAEL;AAEA,MAAI,KAAK,SAAS,aAAa;AAC7B,UAAM,mBAA2D;MAC/D,MAAM;MACN,IAAI,KAAK;MACT,MAAM;MACN,SAAS,KAAK,QAAQ,IAAI,uBAAuB;MACjD,QAAQ,KAAK;MACb,GAAG,6CAA6C,KAAK,cAAc;QACjE;QACA;QACA;QACA;QACA;OACD;;AAEH,WAAO;EACT;AAEA,QAAM,IAAI,UAAU,oBAAoB,KAAK,UAAU,IAAI,CAAC,EAAE;AAChE;AAEA,SAAS,cAAc,MAAwB;AAC7C,MAAI,KAAK,SAAS,WAAW;AAC3B,WAAO;EACT;AAEA,MAAI,OAAO,KAAK,SAAS,eAAe,OAAO,KAAK,SAAS,UAAU;AACrE,WAAO;EACT;AAEA,SAAO;AACT;AAEA,SAAS,UAAU,QAA8B;AAO/C,MAAI,CAAC,QAAQ;AACX,WAAO;EACT;AAEA,QAAM,uBAA4C,CAAA;AAElD,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,aAAa,CAAA,CAAE,GAAG;AACjE,QAAI,OAAO,UAAU,UAAU;AAC7B,2BAAqB,GAAG,IAAI;IAC9B,WAAW,OAAO,UAAU,UAAU;AACpC,2BAAqB,GAAG,IAAI,uBAAuB,KAAK;IAC1D;EACF;AAEA,SAAO;IACL,IAAI,OAAO;IACX,SAAS,OAAO;IAChB,WAAW;;AAEf;AAEA,SAAS,cACP,OAA4B;AAE5B,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO;MACL;QACE,MAAM;QACN,SAAS;;;EAGf;AAEA,SAAO,MAAM,IAAI,CAAC,SAA4C;AAC5D,QAAI,cAAc,IAAI,GAAG;AACvB,aAAO,eAAe,IAAI;IAC5B;AAEA,QAAI,KAAK,SAAS,oBAAoB;AACpC,YAAM,SAAS,0BAA0B,KAAK,MAAM;AACpD,YAAM,SAAS,4BAA4B,IAAI;AAC/C,YAAM,YAAY,uBAAuB,IAAI;AAC7C,YAAM,iBACJ;QACE,MAAM;QACN,IAAI,KAAK;QACT,GAAI,WAAW,OAAO,EAAE,OAAM,IAAK,CAAA;QACnC,WAAW,KAAK;QAChB,GAAI,SAAS,EAAE,SAAS,OAAM,IAAK,CAAA;QACnC,GAAI,YAAY,EAAE,UAAS,IAAK,CAAA;QAChC,GAAG,6CAA6C,KAAK,cAAc;UACjE;UACA;UACA;UACA;UACA;UACA;UACA;SACD;;AAEL,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,sBAAsB;AACtC,YAAM,SAAS,0BAA0B,KAAK,MAAM;AACpD,YAAM,SAAS,4BAA4B,IAAI;AAC/C,YAAM,YAAY,uBAAuB,IAAI;AAC7C,YAAM,mBACJ;QACE,MAAM;QACN,IAAI,KAAK;QACT,GAAI,WAAW,OAAO,EAAE,OAAM,IAAK,CAAA;QACnC,OAAO,KAAK,MAAM,IAChB,CAACA,UACC,oCACEA,KAAI,CACoB;QAE9B,GAAI,SAAS,EAAE,SAAS,OAAM,IAAK,CAAA;QACnC,GAAI,YAAY,EAAE,UAAS,IAAK,CAAA;QAChC,GAAG,6CAA6C,KAAK,cAAc;UACjE;UACA;UACA;UACA;UACA;UACA;UACA;SACD;;AAEL,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,iBAAiB;AACjC,YAAM,QAA+C;QACnD,IAAI,KAAK;QACT,MAAM;QACN,MAAM,KAAK;QACX,SAAS,KAAK;QACd,WAAW,KAAK;QAChB,QAAQ,KAAK;QACb,GAAI,OAAO,KAAK,cAAc,WAC1B,EAAE,WAAW,KAAK,UAAS,IAC3B,CAAA;QACJ,GAAG,6CAA6C,KAAK,cAAc;UACjE;UACA;UACA;UACA;UACA;UACA;UACA;SACD;;AAGH,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,wBAAwB;AACxC,YAAM,mBAAmB,sCACvB,KAAK,MAAM;AAGb,YAAM,QAAoC;QACxC,MAAM;QACN,IAAI,KAAK;QACT,SAAS,KAAK;QACd,QAAQ;QACR,QAAQ,KAAK;QACb,GAAG,6CAA6C,KAAK,cAAc;UACjE;UACA;UACA;UACA;UACA;UACA;SACD;;AAEH,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,aAAa;AAC7B,YAAM,mBAAmB,qBAA6B,KAAK,cAAc;QACvE;QACA;OACD;AACD,YAAM,QAAgD;QACpD,IAAI,KAAK;QACT,MAAM;QACN,SAAS,KAAK,QAAQ,IAAI,CAAC,aAAa;UACtC,MAAM;UACN,MAAM,QAAQ;UACd,GAAG,6CACD,QAAQ,cACR,CAAC,QAAQ,MAAM,CAAC;UAElB;QACF,GAAI,OAAO,qBAAqB,WAC5B,EAAE,mBAAmB,iBAAgB,IACrC,CAAA;QACJ,GAAG,6CAA6C,KAAK,cAAc;UACjE;UACA;UACA;UACA;SACD;;AAEH,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,iBAAiB;AACjC,YAAM,sBAAsB,qBAE1B,KAAK,cAAc,CAAC,uBAAuB,uBAAuB,CAAC;AACrE,YAAM,iBAAiB,MAAM,QAC1B,KAA+B,OAAO,IAEnC,KACC,WAAW,CAAA,IACd,CAAA;AACJ,YAAM,gBACJ,eAAe,SAAS,IACpB;QACE,QAAQ,KAAK,UAAU,eAAe,CAAC;QACvC,SAAS;UAEX,KAAK,SACH,EAAE,QAAQ,KAAK,OAAM,IACrB,CAAA;AAER,YAAM,QAAQ;QACZ,MAAM;QACN,SAAS,KAAK;QACd,IAAI,KAAK;QACT,QAAQ,KAAK;QACb,GAAI,MAAM,QAAQ,mBAAmB,KAAK,oBAAoB,SAAS,IACnE,EAAE,uBAAuB,oBAAmB,IAC5C,CAAA;QACJ,GAAG;QACH,GAAG,6CAA6C,KAAK,cAAc;UACjE;UACA;UACA;UACA;UACA;UACA;UACA;SACD;;AAGH,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,wBAAwB;AACxC,YAAM,2BAA2B,qBAE/B,KAAK,cAAc;QACnB;QACA;OACD;AACD,YAAM,QAA+D;QACnE,MAAM;QACN,IAAI,KAAK;QACT,SAAS,KAAK;QACd,QAAQ,oBAAoB,IAAI;QAChC,QAAQ,KAAK,cAAc;QAC3B,GAAI,MAAM,QAAQ,wBAAwB,KAC1C,yBAAyB,SAAS,IAC9B,EAAE,4BAA4B,yBAAwB,IACtD,CAAA;QACJ,GAAG,6CAA6C,KAAK,cAAc;UACjE;UACA;UACA;UACA;UACA;UACA;SACD;;AAEH,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,cAAc;AAC9B,YAAM,SAAiE;QACrE,UAAU,KAAK,OAAO;QACtB,YACE,OAAO,KAAK,OAAO,cAAc,WAC7B,KAAK,OAAO,YACZ;QACN,mBACE,OAAO,KAAK,OAAO,oBAAoB,WACnC,KAAK,OAAO,kBACZ;;AAER,YAAM,oBAAoB,iCACxB,KAAK,YAAY;AAGnB,YAAM,QAAsD;QAC1D,MAAM;QACN,IAAI,KAAK;QACT,SAAS,KAAK;QACd,QAAQ,KAAK,UAAU;QACvB;QACA,GAAG;;AAGL,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,qBAAqB;AACrC,YAAM,eAAkD,KAAK;AAC7D,YAAM,mBACJ,aAAa,IAAI,CAACM,WAAS;AACzB,cAAM,UAAUA,QAAO;AACvB,cAAM,WAAW,SAAS,SAAS,SAAS,QAAQ,WAAW;AAC/D,eAAO;UACL,QAAQ,OAAOA,QAAO,WAAW,WAAWA,OAAM,SAAS;UAC3D,QAAQ,OAAOA,QAAO,WAAW,WAAWA,OAAM,SAAS;UAC3D,SACE,SAAS,SAAS,YACd,EAAE,MAAM,UAAS,IACjB,EAAE,MAAM,QAAQ,WAAW,YAAY,EAAC;;MAElD,CAAC;AAEH,YAAM,QAEF;QACF,MAAM;QACN,SAAS,KAAK;QACd,QAAQ;QACR,IAAI,KAAK,MAAM;;AAEjB,UAAI,OAAO,KAAK,oBAAoB,UAAU;AAC5C,cAAM,oBAAoB,KAAK;MACjC;AAEA,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,oBAAoB;AACpC,UAAI,CAAC,KAAK,WAAW;AACnB,cAAM,IAAI,UAAU,oCAAoC;MAC1D;AACA,YAAM,QAA2D;QAC/D,MAAM;QACN,IAAI,KAAK,MAAM;QACf,SAAS,KAAK;QACd,QAAQ,KAAK,UAAU;QACvB,WAAW,KAAK;;AAGlB,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,2BAA2B;AAC3C,YAAM,QAAiE;QACrE,MAAM;QACN,IAAI,KAAK,MAAM;QACf,SAAS,KAAK;QACd,QAAQ,KAAK,UAAU;QACvB,QAAQ,KAAK,UAAU;;AAGzB,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,oBAAoB;AACpC,UACE,KAAK,cAAc,SAAS,qBAC5B,KAAK,cAAc,SAAS,cAC5B;AACA,cAAM,eAAe,wBAAwB,KAAK,YAAY,KAAK,CAAA;AACnE,cAAM,YAAY,aAAa,WAAW;AAC1C,cAAM,iBACJL,UAAS,aAAa,MAAM,KAC5B,OAAO,aAAa,OAAO,SAAS;AACtC,YAAI,aAAa,CAAC,gBAAgB;AAChC,gBAAM,IAAI,UAAU,gCAAgC;QACtD;AACA,cAAM,QAAQ;UACZ,GAAG;;UACH,MAAM;UACN,IAAI,KAAK;UACT,QAAQ,gBAAgB,MAAM,KAAK,UAAU,QAAQ;;AAEvD,YAAI,gBAAgB;AACjB,gBAAqD,SACpD,aAAa;QACjB;AAEA,eAAO;MACT;AAEA,UACE,KAAK,cAAc,SAAS,sBAC5B,KAAK,cAAc,SAAS,eAC5B;AACA,cAAM,QAAqD;UACzD,GAAG,wBAAwB,KAAK,YAAY;;UAC5C,MAAM;UACN,IAAI,KAAK;UACT,QAAQ,iBAAiB,MAAM,KAAK,UAAU,QAAQ;UACtD,SAAS,KAAK,cAAc,WAAW,CAAA;UACvC,SAAS,KAAK,cAAc;;AAG9B,eAAO;MACT;AAEA,UACE,KAAK,cAAc,SAAS,2BAC5B,KAAK,cAAc,SAAS,oBAC5B;AACA,cAAM,QAA0D;UAC9D,GAAG,wBAAwB,KAAK,YAAY;;UAC5C,MAAM;UACN,IAAI,KAAK;UACT,MAAM,KAAK,cAAc,QAAQ;;;UAGjC,SACE,KAAK,cAAc,WAAW,KAAK,cAAc,WAAW,CAAA;UAC9D,QAAQ,sBAAsB,MAAM,KAAK,UAAU,QAAQ;UAC3D,cAAc,KAAK,cAAc;;AAGnC,eAAO;MACT;AAEA,UACE,KAAK,cAAc,SAAS,2BAC5B,KAAK,cAAc,SAAS,oBAC5B;AACA,cAAM,QAAgE;UACpE,GAAG,wBAAwB,KAAK,YAAY;;UAC5C,MAAM;UACN,IAAI,KAAK;UACT,QAAQ,KAAK,cAAc,UAAU;UACrC,QAAQ,sBAAsB,MAAM,KAAK,UAAU,QAAQ;;AAG7D,eAAO;MACT;AAEA,UACE,KAAK,cAAc,SAAS,oBAC5B,KAAK,SAAS,kBACd;AACA,cAAM,eACJ,KAAK;AACP,cAAM,QAAyD;UAC7D,GAAG,wBAAwB,KAAK,YAAY;UAC5C,MAAM;UACN,IAAI,KAAK;UACT,OAAO,wBAAwB,aAAa,KAAK;UACjD,cAAc,aAAa;UAC3B,OAAO,aAAa;;AAEtB,eAAO;MACT,WACE,KAAK,cAAc,SAAS,0BAC5B,KAAK,SAAS,wBACd;AACA,cAAM,eACJ,KAAK;AACP,cAAM,QAA+D;UACnE,GAAG,wBAAwB,KAAK,YAAY;;UAC5C,MAAM;UACN,IAAI,aAAa,MAAM,KAAK;UAC5B,MAAM,aAAa;UACnB,WAAW,aAAa;UACxB,cAAc,aAAa;;AAE7B,eAAO;MACT,WACE,KAAK,cAAc,SAAS,2BAC5B,KAAK,SAAS,yBACd;AACA,cAAM,eACJ,KAAK;AACP,cAAM,QAAgE;UACpE,GAAG,wBAAwB,YAAY;UACvC,MAAM;UACN,IAAI,aAAa;UACjB,SAAS,aAAa;UACtB,qBAAqB,aAAa;UAClC,QAAQ,aAAa;;AAEvB,eAAO;MACT,WACE,KAAK,cAAc,SAAS,cAC5B,KAAK,SAAS,YACd;AACA,cAAM,eAAe,KAAK;AAC1B,cAAM,QAAoD;;;UAGxD,GAAG,wBAAwB,YAAY;;UACvC,MAAM;UACN,IAAI,aAAa,MAAM,KAAK;UAC5B,MAAM,aAAa;UACnB,WAAW,aAAa;UACxB,cAAc,aAAa;UAC3B,OAAO,aAAa;;AAEtB,eAAO;MACT;AAEA,YAAM,IAAI,UACR,wCAAwC,KAAK,UAAU,IAAI,CAAC,EAAE;IAElE;AAEA,QAAI,KAAK,SAAS,cAAc;AAC9B,YAAM,mBACH,KAAa,qBAAsB,KAAa;AACnD,UAAI,OAAO,qBAAqB,UAAU;AACxC,cAAM,IAAI,UAAU,2CAA2C;MACjE;AACA,aAAO;QACL,MAAM;QACN,IAAI,KAAK,MAAM;QACf,mBAAmB;;IAEvB;AAEA,QAAI,KAAK,SAAS,WAAW;AAC3B,aAAO;QACL,GAAG,wBAAwB,KAAK,YAAY;;QAC5C,IAAI,KAAK;;IAEb;AAEA,UAAM,aAAa;AACnB,UAAM,IAAI,UAAU,oBAAoB,KAAK,UAAU,UAAU,CAAC,EAAE;EACtE,CAAC;AACH;AAGA,SAAS,oBACP,MAAqC;AAErC,SAAO;IACL,MAAM;IACN,WAAW,KAAK,OAAO;;AAE3B;AAEA,SAAS,4BACP,MAA+D;AAE/D,MAAI,KAAK,SAAS,eAAe;AAC/B,UAAM,EAAE,MAAM,MAAM,GAAG,aAAY,IAAK;AACxC,WAAO;MACL;MACA;MACA,GAAI,OAAO,KAAK,YAAY,EAAE,SAAS,IAAI,EAAE,aAAY,IAAK,CAAA;;EAElE;AAEA,MAAI,KAAK,SAAS,WAAW;AAC3B,UAAM,EAAE,MAAM,SAAS,GAAG,aAAY,IAAK;AAC3C,WAAO;MACL;MACA;MACA,GAAI,OAAO,KAAK,YAAY,EAAE,SAAS,IAAI,EAAE,aAAY,IAAK,CAAA;;EAElE;AAEA,QAAM,IAAI,MAAM,qCAAqC,KAAK,UAAU,IAAI,CAAC,EAAE;AAC7E;AAEA,SAAS,oBACP,OAA6C;AAE7C,SAAO,MAAM,IAAI,CAAC,SAAQ;AACxB,QAAI,KAAK,SAAS,WAAW;AAC3B,YAAM,EAAE,IAAI,MAAM,MAAM,SAAS,QAAQ,GAAG,aAAY,IAAK;AAC7D,aAAO;QACL;QACA;QACA;QACA,SAAS,QAAQ,IAAI,2BAA2B;QAChD;QACA;;IAEJ,WAAW,KAAK,SAAS,oBAAoB;AAC3C,YAAM,EACJ,IACA,MAAM,OACN,QACA,WAAW,MACX,GAAG,aAAY,IACb;AACJ,YAAM,SAAsC;QAC1C,MAAM;QACN;QACA;QACA,WAAW;QACX;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,sBAAsB;AAC7C,YAAM,EACJ,IACA,MAAM,OACN,QACA,OACA,GAAG,aAAY,IACb;AAEJ,YAAM,SAAwC;QAC5C,MAAM;QACN;QACA;QACA,OAAO,MAAM,QAAQ,KAAK,IACrB,MAAM,IAAI,CAACD,UACV,sCAAsCA,KAAI,CAAC,IAE7C,CAAA;QACJ;;AAEF,aAAO;IACT,WACE,KAAK,SAAS,sBACd,KAAK,SAAS,qBACd,KAAK,SAAS,2BACd,KAAK,SAAS,yBACd;AACA,YAAM,EAAE,QAAQ,GAAG,cAAa,IAAK;AACrC,UAAI,aAAa;AACjB,UAAI,YAAY,iBAAiB,cAAc,WAAW,MAAM;AAE9D,qBAAa,cAAc;AAC3B,eAAQ,cAAsB;MAChC;AACA,YAAM,SAAsC;QAC1C,MAAM;QACN,IAAI,KAAK;QACT,MAAM,KAAK;QACX;QACA,QAAQ;QACR,cAAc;;AAEhB,aAAO;IACT,WAAW,KAAK,SAAS,iBAAiB;AACxC,YAAM,eAAe;AACrB,YAAM,EACJ,SACA,MACA,WACA,QACA,WAAW,MACX,GAAG,aAAY,IACb;AACJ,YAAM,SAAoC;QACxC,MAAM;QACN,IAAI,aAAa;QACjB,QAAQ;QACR;QACA,GAAI,OAAO,cAAc,WAAW,EAAE,UAAS,IAAK,CAAA;QACpD;QACA,WAAW;QACX;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,wBAAwB;AAC/C,YAAM,EACJ,SACA,QACA,QAAQ,WACR,MAAM,UACN,eAAe,cACf,WACA,GAAG,aAAY,IACb;AAKJ,YAAM,SAA0C;QAC9C,MAAM;QACN,IAAI,KAAK;QACT,QAAQ;QACR,MAAM,YAAY,gBAAgB;QAClC,GAAI,OAAO,cAAc,WAAW,EAAE,UAAS,IAAK,CAAA;QACpD,QAAQ,UAAU;QAClB,QAAQ,oCAAoC,SAAS;QACrD;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,iBAAiB;AACxC,YAAM,EAAE,SAAS,QAAQ,QAAQ,SAAS,GAAG,aAAY,IAAK;AAC9D,YAAM,oBACJ,MAAM,QAAQ,OAAO,KAAK,QAAQ,SAAS,IAAI,UAAU;AAC3D,UAAI,CAAC,qBAAqB,CAAC,QAAQ;AACjC,cAAM,IAAI,UACR,gEAAgE,KAAK,UAAU,IAAI,CAAC,EAAE;MAE1F;AACA,YAAM,SAAuC;QAC3C,MAAM;QACN,IAAI,KAAK;QACT,QAAQ;QACR;QACA,QAAQ,UAAU,oBAAoB,CAAC;QACvC,GAAI,oBAAoB,EAAE,SAAS,kBAAiB,IAAK,CAAA;QACzD;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,cAAc;AACrC,YAAM,EAAE,SAAS,QAAQ,QAAQ,GAAG,aAAY,IAAK;AACrD,YAAM,cAAoC;QACxC,UAAU,MAAM,QAAQ,QAAQ,QAAQ,IAAI,OAAO,WAAW,CAAA;;AAEhE,YAAM,UAAU,QAAQ;AACxB,UAAI,OAAO,YAAY,UAAU;AAC/B,oBAAY,YAAY;MAC1B;AACA,YAAM,kBAAkB,QAAQ;AAChC,UAAI,OAAO,oBAAoB,UAAU;AACvC,oBAAY,kBAAkB;MAChC;AACA,YAAM,SAAiC;QACrC,MAAM;QACN,IAAI,KAAK,MAAM;QACf,QAAQ;QACR,QAAQ,UAAU;QAClB,QAAQ;QACR;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,qBAAqB;AAC5C,YAAM,EACJ,SACA,QAAQ,gBACR,mBACA,GAAG,aAAY,IACb;AACJ,UAAI,mBAAsD,CAAA;AAC1D,UAAI,MAAM,QAAQ,cAAc,GAAG;AACjC,2BAAmB,eAAe,IAAI,CAAC,WAAW;UAChD,QAAQ,OAAO,OAAO,WAAW,WAAW,MAAM,SAAS;UAC3D,QAAQ,OAAO,OAAO,WAAW,WAAW,MAAM,SAAS;UAC3D,SACE,OAAO,SAAS,SAAS,YACrB,EAAE,MAAM,UAAkB,IAC1B;YACE,MAAM;YACN,UACE,OAAO,OAAO,SAAS,cAAc,WACjC,MAAM,QAAQ,YACd;;UAEd;MACJ;AACA,YAAM,SAAuC;QAC3C,MAAM;QACN,IAAI,KAAK,MAAM;QACf,QAAQ;QACR,QAAQ;QACR;;AAEF,UAAI,OAAO,sBAAsB,UAAU;AACzC,eAAO,kBAAkB;MAC3B;AACA,aAAO;IACT,WAAW,KAAK,SAAS,oBAAoB;AAC3C,YAAM,EAAE,SAAS,QAAQ,WAAW,GAAG,aAAY,IAAK;AACxD,UAAI,CAAC,WAAW;AACd,cAAM,IAAI,UAAU,oCAAoC;MAC1D;AAEA,UAAI;AACJ,cAAQ,UAAU,MAAM;QACtB,KAAK;AACH,gCAAsB;YACpB,MAAM;YACN,MAAM,UAAU;YAChB,MAAM,UAAU;;AAElB;QACF,KAAK;AACH,gCAAsB;YACpB,MAAM;YACN,MAAM,UAAU;;AAElB;QACF,KAAK;AACH,gCAAsB;YACpB,MAAM;YACN,MAAM,UAAU;YAChB,MAAM,UAAU;;AAElB;QACF;AACE,gBAAM,IAAI,UAAU,oCAAoC;MAC5D;AAEA,YAAM,SAAsC;QAC1C,MAAM;QACN,IAAI,KAAK,MAAM;QACf,QAAQ;QACR,QAAQ,UAAU;QAClB,WAAW;QACX;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,2BAA2B;AAClD,YAAM,EACJ,SACA,QACA,QAAQ,gBACR,GAAG,aAAY,IACb;AACJ,YAAM,SAA4C;QAChD,MAAM;QACN,IAAI,KAAK,MAAM;QACf,QAAQ;QACR;QACA,QAAQ,OAAO,mBAAmB,WAAW,iBAAiB;QAC9D;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,kBAAkB;AACzC,YAAM,EAAE,GAAG,aAAY,IAAK;AAC5B,YAAM,SAAsC;QAC1C,MAAM;QACN,IAAI,KAAK;QACT,MAAM,KAAK;QACX,QAAQ;QACR,QAAQ;QACR;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,wBAAwB;AAC/C,YAAM,EAAE,GAAG,aAAY,IAAK;AAC5B,YAAM,SAAsC;QAC1C,MAAM;QACN,IAAI,KAAK;QACT,MAAM;QACN,QAAQ;QACR,QAAQ;QACR;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,YAAY;AAEnC,YAAM,EAAE,QAAQ,YAAY,GAAG,aAAY,IAAK;AAChD,YAAM,SAAsC;QAC1C,MAAM;QACN,IAAI,KAAK;QACT,MAAM,KAAK;QACX,QAAQ;QACR,QAAQ,cAAc;QACtB;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,aAAa;AAEpC,YAAM,EAAE,SAAS,GAAG,aAAY,IAAK;AACrC,YAAM,SAAiC;QACrC,MAAM;QACN,IAAI,KAAK;QACT,SAAS,QAAQ,IAAI,CAAC,YAAW;AAE/B,gBAAM,EAAE,MAAM,GAAG,iBAAgB,IAAK;AACtC,iBAAO;YACL,MAAM;YACN;YACA,cAAc;;QAElB,CAAC;QACD;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,cAAc;AACrC,YAAM,EAAE,mBAAmB,YAAY,GAAG,aAAY,IAAK;AAK3D,UAAI,OAAO,sBAAsB,UAAU;AACzC,cAAM,IAAI,UAAU,2CAA2C;MACjE;AACA,YAAM,SAAkC;QACtC,MAAM;QACN,IAAI,KAAK,MAAM;QACf;QACA;QACA;;AAEF,aAAO;IACT;AAEA,WAAO;MACL,MAAM;MACN,IAAI,KAAK;MACT,cAAc;;EAElB,CAAC;AACH;AAIA,IAAM,wCAAwC,oBAAI,IAAI;EACpD;EACA;EACA;EACA;CACD;AAED,SAAS,mCACP,WAA6B;AAE7B,SACE,OAAO,cAAc,YACrB,sCAAsC,IAAI,SAAS;AAEvD;AAUA,SAAS,2BACP,UAA4B;AAE5B,QAAM,YAAa,UACf;AACJ,SAAO,OAAO,cAAc,YAAY,UAAU,SAAS,IACvD,YACA;AACN;AAEA,SAAS,8BACP,UACA,WAA6B;AAE7B,MAAI,CAAC,WAAW;AACd;EACF;AAEA,QAAM,mBAAmB,2BACvB,QAA2C;AAE7C,MAAI,kBAAkB;AACpB;EACF;AAEA,MAAI;AACF,WAAO,eAAe,UAAU,eAAe;MAC7C,OAAO;MACP,YAAY;KACb;EACH,QAAQ;EAGR;AACF;AAEA,gBAAgB,8BACd,QACA,WAA6B;AAE7B,mBAAiB,SAAS,QAAQ;AAChC,UAAM,YAAa,MAA4B;AAC/C,QAAI,mCAAmC,SAAS,GAAG;AACjD,YAAM,WAAY,MAAgC;AAClD,UAAI,YAAY,OAAO,aAAa,UAAU;AAC5C,sCAA8B,UAAU,SAAS;MACnD;IACF;AAEA,UAAM;EACR;AACF;AAKM,IAAO,uBAAP,MAA2B;EACZ;EACA;EAEnB,YAAY,QAAsB,OAAa;AAC7C,SAAK,UAAU;AACf,SAAK,SAAS;EAChB;EAEA,eAAe,MAA6B;AAC1C,WAAO,qBAAqB,IAAI;EAClC;;;;EAKU,4BACR,OAAiC;AAEjC,WAAO,oBAAoB,KAA+C;EAC5E;;;;EAKU,yBACR,UAAmC;AAEnC,WAAO;EACT;;;;EAKU,2BACR,QACA,aAA4C;AAE5C,WAAO;EACT;;;;EAKU,yBAAyB,QAA2B;AAC5D,WAAO;EACT;;;;EAKU,oCACR,UACA,cAAiC;AAEjC,WAAO,CAAA;EACT;;;;EAKU,kBAAkB,UAAmC;AAC7D,WAAO,IAAI,MAAM;MACf,aAAa,SAAS,OAAO,gBAAgB;MAC7C,cAAc,SAAS,OAAO,iBAAiB;MAC/C,aAAa,SAAS,OAAO,gBAAgB;MAC7C,oBAAoB,EAAE,GAAG,SAAS,OAAO,qBAAoB;MAC7D,qBAAqB,EAAE,GAAG,SAAS,OAAO,sBAAqB;MAC/D,qBAAqB;QACnB,oBAAoB,SAAS,OAAO,kBAAkB;;KAEzD;EACH;;;;EAKU,0BACR,UAAmC;AAEnC,WAAO;MACL,aAAa,SAAS,OAAO,gBAAgB;MAC7C,cAAc,SAAS,OAAO,iBAAiB;MAC/C,aAAa,SAAS,OAAO,gBAAgB;MAC7C,oBAAoB,EAAE,GAAG,SAAS,OAAO,qBAAoB;MAC7D,qBAAqB,EAAE,GAAG,SAAS,OAAO,sBAAqB;MAC/D,qBAAqB;QACnB,oBAAoB,SAAS,OAAO,kBAAkB;;;EAG5D;EAaU,MAAM,eACd,SACA,QAAe;AAKf,UAAM,eAAe,KAAK,6BAA6B,SAAS,MAAM;AACtE,UAAM,iBAKF;MACF,SAAS,aAAa;MACtB,QAAQ,aAAa;MACrB,GAAI,aAAa,sBACb,EAAE,OAAO,aAAa,oBAAmB,IACzC,CAAA;;AAEN,QAEI,QAGA,WAAW,uBAAuB,MACpC;AACA,qBAAe,aAAa;IAC9B;AACA,UAAM,kBAAkB,KAAK,QAAQ,UAAU,OAC7C,aAAa,aACb,cAAc;AAGhB,QAAI;AAGJ,QAAI,QAAQ;AACV,YAAM,eAAgB,gBACnB;AACH,UAAI,OAAO,iBAAiB,YAAY;AACtC,cAAM,mBAAmB,MAAM,aAAa,KAAK,eAAe;AAChE,mBAAW,8BACT,iBAAiB,MACjB,iBAAiB,cAAc,MAAS;MAE5C,OAAO;AACL,mBACG,MAAM;MACX;IACF,OAAO;AACL,iBAAY,MAAM;IACpB;AAEA,QAAI,eAAO,kBAAkB;AAC3B,qBAAO,MAAM,mBAAmB;IAClC,OAAO;AACL,qBAAO,MAAM,sBAAsB,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC,EAAE;IACxE;AAEA,WAAO;EACT;EAEU,6BACR,SACA,QAAe;AAEf,UAAM,QAAQ,cAAc,QAAQ,KAAK;AACzC,UAAM,SAAS,UAAU,QAAQ,MAAM;AAGvC,UAAM,kBACJ,CAAC,QAAQ,UAAU,QAAQ,wBAAwB;AACrD,UAAM,wBAAwB,kBAAkB,KAAK,SAAS;AAC9D,UAAM,EACJ,cAAc,8BACd,WAAW,mBAAkB,IAC3B,iCAAiC,QAAQ,cAAc,YAAY;AACvE,UAAM,EAAE,OAAO,QAAO,IAAK,SAAS,QAAQ,OAAO,QAAQ,UAAU;MACnE,OAAO;MACP,YAAY,QAAQ,cAAc;KACnC;AACD,UAAM,4BAA4B;MAChC,GAAG;MACH,GAAG,yCAAyC,mBAAmB,SAAS;;AAE1E,UAAM,2BACJ,QAAQ,QAAQ,MAAM,KACtB,EAAE,QAAQ,4BAA4B,QAAQ,MAAM,WAAW;AACjE,UAAM,aAAa,cAAc,QAAQ,cAAc,YAAY;MACjE,OAAO;MACP,OAAO;MACP,iCAAiC;KAClC;AACD,8BAA0B,YAAY,2BAA2B;MAC/D;KACD;AACD,UAAM,EAAE,MAAM,GAAG,mBAAkB,IAAK;AAExC,QAAI,QAAQ,cAAc,WAAW;AAEnC,yBAAmB,YAAY;QAC7B,GAAG,QAAQ,cAAc;QACzB,GAAG,mBAAmB;;IAE1B;AAEA,QAAI,aAAa;AACjB,QAAI,QAAQ,cAAc,MAAM;AAE9B,mBAAa,EAAE,GAAG,QAAQ,cAAc,MAAM,GAAG,KAAI;IACvD;AACA,UAAM,iBAAiB,kBAAkB,QAAQ,YAAY,UAAU;AAEvE,QAAI,oBAAyC;AAC7C,QAAI,OAAO,QAAQ,cAAc,sBAAsB,WAAW;AAChE,0BAAoB,QAAQ,cAAc;IAC5C;AAEA,UAAM,kBACJ,MAAM,SAAS,KACf,QAAQ,4BAA4B,QACpC,CAAC,QAAQ;AACX,UAAM,uBAAuB,wBAC3B,YACA,2BACA;MACE;KACD;AAEH,UAAM,uBAAuB,OAAO,yBAAyB;AAE7D,QAAI,cAAc;MAChB,GAAI,wBAAwB,EAAE,OAAO,sBAAqB,IAAK,CAAA;MAC/D,cAAc,sBAAsB,QAAQ,kBAAkB;MAC9D;MACA;MACA,GAAI,kBAAkB,EAAE,MAAK,IAAK,CAAA;;;MAGlC,cAAc,QAAQ;MACtB,GAAI,QAAQ,iBACR,CAAA,IACA,EAAE,sBAAsB,QAAQ,mBAAkB;MACtD;MACA,aAAa,QAAQ,cAAc;MACnC,OAAO,QAAQ,cAAc;MAC7B,YAAY,QAAQ,cAAc;MAClC,mBAAmB,QAAQ,cAAc;MACzC,GAAI,CAAC,uBACD,EAAE,aAAa,qBAAyC,IACxD,CAAA;MACJ,qBAAqB;MACrB;MACA,MAAM;MACN,OAAO,QAAQ,cAAc;MAC7B,wBAAwB,8BACtB,QAAQ,cAAc,oBAAoB;MAE5C,sBAAsB,QAAQ,cAAc;MAC5C,oBAAoB,qBAClB,QAAQ,cAAc,iBAAiB;MAEzC,GAAG;;AAGL,QAAI,mBAAmB,WAAW;AAChC,oBAAc;QACZ,GAAG;QACH,GAAG,mBAAmB;;IAE1B;AAEA,kBAAc;MACZ,GAAG;MACH,GAAG,KAAK,oCAAoC,SAAS,WAAW;;AAIlE,gBAAY,SAAS;AAErB,UAAM,2BAA2B,wBAAuB;AACxD,8BAA0B,0BAA0B,OAAO;AAC3D,8BACE,0BACA,mBAAmB,cACnB;MACE,sBAAsB;KACvB;AAEH,UAAM,oBAAoB,8BACxB,wBAAwB;AAG1B,UAAM,eAA4C;MAChD;MACA;MACA,QAAQ,QAAQ;MAChB,uBAAuB,mBAAmB;MAC1C,qBAAqB,mBAAmB;;AAG1C,QAAI,eAAO,kBAAkB;AAC3B,qBAAO,MAAM,aAAa;IAC5B,OAAO;AACL,qBAAO,MACL,8BAA8B,KAAK,UACjC,aAAa,aACb,MACA,CAAC,CACF,EAAE;IAEP;AACA,WAAO;EACT;;;;;;EAOA,MAAM,YAAY,SAAqB;AACrC,UAAM,WAAW,MAAM,iBAAiB,OAAO,SAAQ;AACrD,YAAMO,YAAW,MAAM,KAAK,eAAe,SAAS,KAAK;AAEzD,UAAI,QAAQ,SAAS;AACnB,aAAK,SAAS,cAAcA,UAAS;AACrC,aAAK,SAAS,SAAS,QAAQ;AAC/B,aAAK,SAAS,YAAYA;MAC5B;AAEA,aAAOA;IACT,CAAC;AAED,UAAM,uBAAuB,KAAK,yBAAyB,QAAQ;AACnE,UAAM,SAAwB;MAC5B,OAAO,KAAK,kBAAkB,QAAQ;MACtC,QAAQ,KAAK,4BACX,qBAAqB,MAAoC;MAE3D,YAAY,SAAS;MACrB,WAAW,2BAA2B,QAAQ;MAC9C,cAAc;;AAGhB,WAAO;EACT;;;;;;EAOA,OAAO,oBACL,SAAqB;AAErB,UAAM,OAAO,QAAQ,UAAU,mBAAkB,IAAK;AACtD,QAAI;AACF,UAAI,MAAM;AACR,aAAK,MAAK;AACV,uBAAe,IAAI;AACnB,YAAI,QAAQ,YAAY,MAAM;AAC5B,eAAK,SAAS,SAAS,QAAQ;QACjC;MACF;AACA,YAAM,WAAW,MAAM,KAAK,eAAe,SAAS,IAAI;AAExD,UAAI;AACJ,YAAM,qBAAqB,oBAAI,IAAG;AAClC,uBAAiB,SAAS,UAAU;AAClC,cAAM,YAAa,MAA4B;AAC/C,cAAM,0BAA0B,KAAK,yBACnC,KAAuC;AAEzC,YAAI,cAAc,8BAA8B;AAC9C,gBAAM,kBAAkB;AAIxB,cACE,OAAO,gBAAgB,iBAAiB,YACxC,gBAAgB,MAChB;AACA,+BAAmB,IACjB,gBAAgB,cAChB,gBAAgB,IAAI;UAExB;QACF;AACA,YAAI,cAAc,oBAAoB;AACpC,gBAAM;YACJ,MAAM;YACN,cAAc;cACZ,GAAG;;;QAGT,WAAW,mCAAmC,SAAS,GAAG;AACxD,gBAAM,gBACJ;AAGF,0BAAgB,cAAc;AAC9B,gBAAM,EAAE,UAAAA,WAAU,GAAG,eAAc,IAAK;AACxC,gBAAM,EACJ,QAAQ,SACR,OAAO,QACP,IACA,GAAG,kBAAiB,IAClBA;AACJ,gBAAM,uBAAuB,KAAK,yBAAyBA,SAAQ;AACnE,gBAAM;YACJ,MAAM;YACN,UAAU;cACR;cACA,WAAW,2BAA2BA,SAAQ;cAC9C,QAAQ,KAAK,4BACX,qBAAqB,MAAoC;cAE3D,OAAO,KAAK,0BAA0BA,SAAQ;cAC9C,cAAc;;YAEhB,cAAc;;QAElB,WAAW,cAAc,8BAA8B;AACrD,gBAAM,EAAE,OAAO,GAAG,eAAc,IAAK;AAIrC,gBAAM,aACJ,OAAO,eAAe,iBAAiB,WACnC,mBAAmB,IAAI,eAAe,YAAY,IAClD;AACN,cACE,KAAK,2BACH,OACA,UAAU,GAEZ;AACA,kBAAM;cACJ,MAAM;cACN;cACA,cAAc;;UAElB;QACF;AAEA,YAAI,yBAAyB;AAC3B,gBAAM;YACJ,MAAM;YACN;YACA,cAAc;cACZ,qBAAqB;;;QAG3B;MACF;AAEA,UAAI,QAAQ,WAAW,QAAQ,eAAe;AAC5C,aAAK,SAAS,cAAc,cAAc;AAC1C,aAAK,SAAS,YAAY;MAC5B;IACF,SAAS,OAAO;AACd,UAAI,MAAM;AACR,aAAK,SAAS;UACZ,SAAS;UACT,MAAM;YACJ,OAAO,QAAQ,UACX,OAAO,KAAK,IACZ,iBAAiB,QACf,MAAM,OACN;;SAET;MACH;AACA,YAAM;IACR;AACE,UAAI,MAAM;AACR,aAAK,IAAG;AACR,yBAAgB;MAClB;IACF;EACF;;AAYF,SAAS,+BACP,SAAoD;AAEpD,SAAO,EAAE,GAAI,WAAW,CAAA,EAAG;AAC7B;AAOM,IAAO,yBAAP,cAAsC,qBAAoB;EAC9D;EACA;EACA;EACA;EACA;EACA,iBAAgC,QAAQ,QAAO;EAE/C,YACE,QACA,OACA,UAAyC,CAAA,GAAE;AAE3C,UAAM,QAAQ,KAAK;AACnB,SAAK,oBAAoB,QAAQ;AACjC,SAAK,mBAAmB,QAAQ,mBAAmB;AACnD,SAAK,oBAAoB,+BACvB,QAAQ,gBAAgB;EAE5B;EAES,eACP,MAA6B;AAE7B,QAAI,0BAA0B,KAAK,KAAK,GAAG;AACzC,aAAO;QACL,WAAW;QACX,cAAc;QACd,QAAQ,KAAK,iBAAiB,QAAQ,KAAK,MAAM,UAAU;;IAE/D;AAEA,QAAI,gCAAgC,KAAK,KAAK,GAAG;AAC/C,aAAO;QACL,WAAW;QACX,cAAc;QACd,QAAQ,KAAK,iBAAiB,QAAQ,KAAK,MAAM,UAAU;;IAE/D;AAEA,WAAO,MAAM,eAAe,IAAI;EAClC;EAaU,MAAM,eACd,SACA,QAAe;AAOf,UAAM,eAAe,KAAK,6BAA6B,SAAS,IAAI;AAEpE,QAAI,QAAQ;AACV,aAAO,KAAK,6BAA6B,YAAY;IACvD;AAEA,QAAI;AACJ,QAAI,mBAAmB;AACvB,QAAI;AACF,uBAAiB,SAAS,KAAK,6BAC7B,YAAY,GACX;AACD,2BAAmB;AACnB,cAAM,YAAa,MAA4B;AAC/C,YAAI,mCAAmC,SAAS,GAAG;AACjD,0BAAiB,MACd;QACL;MACF;IACF,SAAS,OAAO;AACd,UAAI,oBAAoB,iBAAiB,OAAO;AAE5C,cAGA,iBAAiB;MACrB;AACA,YAAM;IACR;AAEA,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,MACR,qEAAqE;IAEzE;AAEA,WAAO;EACT;EAEA,MAAM,QAAK;AACT,UAAM,KAAK,yBAAwB;EACrC;EAEA,OAAO,6BACL,cAAyC;AAEzC,UAAM,yBACJ,KAAK,uCAAsC;AAC7C,UAAM,cAAc,MAAM,KAAK,6BAC7B,aAAa,QACb,sBAAsB;AAGxB,QAAI,mBAAmB;AACvB,QAAI,2BAA2B;AAC/B,QAAI;AACF,qBAAe,aAAa,MAAM;AAClC,YAAM,EAAE,OAAO,OAAO,QAAO,IAAK,MAAM,KAAK,yBAC3C,cACA,sBAAsB;AAExB,qBAAe,aAAa,MAAM;AAClC,UAAI,aAAa,MAAM,KAAK,2BAC1B,OACA,SACA,aAAa,QACb,sBAAsB;AAExB,UAAI,oCAAoC,WAAW;AACnD,UAAI,mBAAmB,WAAW;AAClC,YAAM,sBAAsB,CAC1B,mBACQ;AACR,qBAAa;AACb,2BAAmB,eAAe;AAClC,4CAAoC,eAAe;MACrD;AACA,qBAAe,aAAa,MAAM;AAClC,YAAM,kBAAkB,KAAK,UAAU,KAAK;AAC5C,YAAM,sBAAsB,YAAW;AACrC,YAAI;AACF,gBAAM,iBAAiB,KAAK,eAAe;QAC7C,SAAS,OAAO;AACd,cAAI,CAAC,wBAAwB,KAAK,GAAG;AACnC,kBAAM;UACR;AAEA,8BACE,MAAM,KAAK,8BACT,OACA,SACA,aAAa,QACb,sBAAsB,CACvB;AAEH,gBAAM,iBAAiB,KAAK,eAAe;QAC7C;MACF;AACA,YAAM,oBAAmB;AAEzB,aAAO,MAAM;AACX,cAAM,WAAW,MAAM,KAAK,oBAC1B,kBACA,aAAa,QACb,sBAAsB;AAExB,YAAI,aAAa,MAAM;AACrB,cAAI,CAAC,oBAAoB,mCAAmC;AAK1D,+BAAmB;AACnB,kBAAM,IAAI,MACR,oOAAoO;UAExO;AACA,gBAAM,IAAI,gCACR,kDAAkD;QAEtD;AAEA,cAAM,cAAc,MAAM,qBAAqB,QAAQ;AACvD,cAAM,UAAU,KAAK,MAAM,WAAW;AACtC,cAAM,YACJC,UAAS,OAAO,KAAK,OAAO,QAAQ,SAAS,WACzC,QAAQ,OACR;AAEN,YAAI,cAAc,SAAS;AACzB,6BAAmB;AACnB,gBAAM,IAAI,MACR,8BAA8B,KAAK,UAAU,OAAO,CAAC,EAAE;QAE3D;AAEA,cAAM,QAAQ;AACd,cAAM,0BACJ,mCAAmC,SAAS;AAG9C,2BAAmB;AACnB,YAAI,yBAAyB;AAC3B,qCAA2B;QAC7B;AACA,cAAM;AAEN,YAAI,yBAAyB;AAC3B;QACF;MACF;IACF,SAAS,OAAO;AACd,UACE,CAAC,oBACD,EAAE,iBAAiBC,QAAO,sBAC1B,gCAAgC,KAAK,GACrC;AACA,cAAM,eAAe,IAAI,MACvB,+IAA+I;AAEjJ,YAAI,iBAAiB,OAAO;AACzB,uBAA6C,QAAQ;QACxD;AACA,cAAM;MACR;AACA,YAAM;IACR;AACE,YAAM,uBACJ,CAAC,4BAA4B,CAAC,KAAK;AACrC,YAAM,wBAAwB,uBAC1B,KAAK,yBAAwB,IAC7B;AACJ,kBAAW;AACX,YAAM;IACR;EACF;EAEA,MAAM,yBACJ,cACA,wBAAwD;AAMxD,UAAM,QAAQ,KAAK,qBAAqB,aAAa,mBAAmB;AACxE,UAAM,UAAU,MAAM,KAAK,uBACzB,OACA,aAAa,uBACb,aAAa,QACb,sBAAsB;AAExB,UAAM,QAAQ;MACZ,GAAG,aAAa;MAChB,MAAM;MACN,QAAQ;;AAGV,WAAO,EAAE,OAAO,OAAO,QAAO;EAChC;EAEA,MAAM,uBACJ,OACA,cACA,QACA,wBAAwD;AAExD,UAAM,KAAK,qCACT,KAAK,qBAAoB,GACzB,QACA,wBACA,CAAC,wBACC,+DAA+D,mBAAmB,KAAK;AAG3F,UAAM,oBAAoB,wBAAuB;AACjD,UAAM,sBAAsB,KAAK;AAIjC,UAAM,eAAe,IAAI,IAAI,KAAK;AAClC,UAAM,iBAAiB,8BACrB,aAAa,YAAY;AAG3B,UAAM,cACJ,OAAO,oBAAoB,gBAAgB,aACvC,MAAM,KAAK,qCACT,oBAAoB,YAAY;MAC9B,QAAQ;MACR,MAAM,aAAa;MACnB,GAAI,iBAAiB,EAAE,OAAO,eAAc,IAAK,CAAA;KAClD,GACD,QACA,wBACA,CAAC,wBACC,+DAA+D,mBAAmB,KAAK,IAE3F;AACN,8BAA0B,mBAAmB,WAAW;AACxD,QACE,OAAO,oBAAoB,gBAAgB,cAC3C,OAAO,KAAK,QAAQ,WAAW,YAC/B,KAAK,QAAQ,OAAO,SAAS,KAC7B,KAAK,QAAQ,WAAW,eACxB;AACA,gCAA0B,mBAAmB;QAC3C,eAAe,UAAU,KAAK,QAAQ,MAAM;OAC7C;IACH;AACA,QAAI,KAAK,QAAQ,cAAc;AAC7B,gCAA0B,mBAAmB;QAC3C,uBAAuB,KAAK,QAAQ;OACrC;IACH;AACA,QAAI,KAAK,QAAQ,SAAS;AACxB,gCAA0B,mBAAmB;QAC3C,kBAAkB,KAAK,QAAQ;OAChC;IACH;AAEA,8BACE,mBACA,oBAAoB,UAAU,cAAc;AAE9C,8BAA0B,mBAAmB,OAAO;AACpD,8BAA0B,mBAAmB,cAAc;MACzD,sBAAsB;KACvB;AACD,WAAO,0BAA0B,iBAAiB;EACpD;EAEA,qBACE,YAA+C;AAE/C,UAAM,UAAU,IAAI,IAAI,KAAK,qBAAqB,KAAK,QAAQ,OAAO;AACtE,UAAM,oBACJ,OAAO,KAAK,sBAAsB,WAC9B,IAAI,gBAAgB,QAAQ,MAAM,IAClC;AACN,UAAM,sBAAsB,KAAK;AAIjC,QAAI,QAAQ,aAAa,UAAU;AACjC,cAAQ,WAAW;IACrB,WAAW,QAAQ,aAAa,SAAS;AACvC,cAAQ,WAAW;IACrB,WAAW,QAAQ,aAAa,SAAS,QAAQ,aAAa,QAAQ;AACpE,YAAM,IAAI,UACR,4CAA4C,QAAQ,QAAQ,EAAE;IAElE;AAEA,YAAQ,WAAW,6BAA6B,QAAQ,QAAQ;AAChE,4BACE,SACA,oBAAoB,UAAU,YACO;AAEvC,QAAI,qBAAqB,MAAM,KAAK,kBAAkB,KAAI,CAAE,EAAE,SAAS,GAAG;AACxE,YAAM,uBAAuB,oBAAI,IAAG;AACpC,iBAAW,OAAO,kBAAkB,KAAI,GAAI;AAC1C,cAAM,eAAe,IAAI,QAAQ,GAAG;AACpC,6BAAqB,IACnB,gBAAgB,IAAI,IAAI,MAAM,GAAG,YAAY,IAAI,GAAG;MAExD;AACA,iBAAW,eAAe,sBAAsB;AAC9C,mBAAW,eAAe,MAAM,KAAK,QAAQ,aAAa,KAAI,CAAE,GAAG;AACjE,cACE,gBAAgB,eAChB,YAAY,WAAW,GAAG,WAAW,GAAG,GACxC;AACA,oBAAQ,aAAa,OAAO,WAAW;UACzC;QACF;MACF;AACA,iBAAW,CAAC,KAAK,KAAK,KAAK,kBAAkB,QAAO,GAAI;AACtD,gBAAQ,aAAa,OAAO,KAAK,KAAK;MACxC;IACF;AACA,4BAAwB,SAAS,UAAU;AAE3C,WAAO,QAAQ,SAAQ;EACzB;EAEA,MAAM,2BACJ,OACA,SACA,QACA,wBAAwD;AAExD,UAAM,WAAW,KAAK,uBAAuB,OAAO,OAAO;AAE3D,QACE,KAAK,iBACL,KAAK,yBACL,KAAK,0BAA0B,YAC/B,KAAK,cAAc,WAAU,GAC7B;AACA,aAAO,EAAE,YAAY,KAAK,eAAe,QAAQ,KAAI;IACvD;AAEA,UAAM,KAAK,yBAAwB;AACnC,UAAM,iBAAiB,KAAK,gCAC1B,wBACA,CAAC,wBACC,iEAAiE,mBAAmB,KAAK;AAE7F,SAAK,gBAAgB,MAAM,6BAA6B,QACtD,OACA,SACA,QACA,eAAe,WACf,eAAe,cACf,KAAK,iBAAiB;AAExB,SAAK,wBAAwB;AAC7B,WAAO,EAAE,YAAY,KAAK,eAAe,QAAQ,MAAK;EACxD;EAEA,MAAM,8BACJ,OACA,SACA,QACA,wBAAwD;AAExD,UAAM,KAAK,yBAAwB;AACnC,mBAAe,MAAM;AACrB,UAAM,aAAa,MAAM,KAAK,2BAC5B,OACA,SACA,QACA,sBAAsB;AAExB,mBAAe,MAAM;AACrB,WAAO;EACT;EAEA,uBACE,OACA,SAA+B;AAE/B,UAAM,oBAAoB,OAAO,QAAQ,OAAO,EAC7C,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,IAAI,YAAW,GAAI,KAAK,CAAU,EACzD,KAAK,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,UAAU,UAAU,MAChD,GAAG,OAAO,IAAI,SAAS,GAAG,cAAc,GAAG,QAAQ,IAAI,UAAU,EAAE,CAAC;AAGxE,WAAO,KAAK,UAAU,CAAC,OAAO,iBAAiB,CAAC;EAClD;EAEA,MAAM,2BAAwB;AAC5B,UAAM,oBAAoB,KAAK;AAC/B,QAAI,CAAC,mBAAmB;AACtB,WAAK,wBAAwB;AAC7B;IACF;AAIA,SAAK,gBAAgB;AACrB,SAAK,wBAAwB;AAE7B,QAAI;AACF,YAAM,kBAAkB,MAAK;IAC/B,QAAQ;IAER;EACF;EAEA,MAAM,6BACJ,QACA,wBAAwD;AAExD,mBAAe,MAAM;AACrB,UAAM,mBAAmB,KAAK,gCAC5B,wBACA,CAAC,wBACC,0DAA0D,mBAAmB,KAAK;AAGtF,UAAM,eAAe,KAAK;AAC1B,QAAI,WAAW;AACf,QAAI;AAEJ,UAAM,UAAU,IAAI,QAAc,CAAC,YAAW;AAC5C,uBAAiB;IACnB,CAAC;AACD,UAAM,cAAc,MAAK;AACvB,UAAI,UAAU;AACZ;MACF;AACA,iBAAW;AACX,qBAAc;IAChB;AAEA,SAAK,iBAAiB,aAAa,KAAK,MAAM,OAAO;AAErD,QAAI;AACF,YAAM,gBACJ,YACE,cACA,iBAAiB,WACjB,iBAAiB,YAAY,GAE/B,MAAM;AAER,qBAAe,MAAM;AACrB,aAAO;IACT,SAAS,OAAO;AACd,kBAAW;AACX,YAAM;IACR;EACF;EAEA,MAAM,uBAAoB;AACxB,UAAM,sBAAsB,KAAK;AAIjC,QAAI,OAAO,oBAAoB,gBAAgB,YAAY;AACzD,YAAM,oBAAoB,YAAW;IACvC;EACF;EAEA,kCAA+B;AAC7B,UAAM,oBAAoB,KAAK;AAI/B,UAAM,mBACJ,OAAO,kBAAkB,YAAY,WACjC,kBAAkB,UAClB,kBAAkB,UAAU;AAElC,QAAI,OAAO,qBAAqB,UAAU;AACxC,aAAO;IACT;AAEA,WAAOA,QAAO;EAChB;EAEA,yCAAsC;AAEpC,UAAM,YAAY,KAAK,gCAA+B;AACtD,QACE,OAAO,cAAc,YACrB,CAAC,OAAO,SAAS,SAAS,KAC1B,aAAa,GACb;AACA,aAAO;IACT;AAEA,WAAO;MACL,qBAAqB;MACrB,cAAc,KAAK,IAAG,IAAK;;EAE/B;EAEA,gCACE,wBACA,kCAAyE;AAEzE,UAAM,sBACJ,wBAAwB,uBACxB,KAAK,gCAA+B;AACtC,UAAM,0BACJ,OAAO,wBAAwB,WAC3B,sBACAA,QAAO;AACb,UAAM,eAAe,iCACnB,uBAAuB;AAEzB,QAAI,CAAC,wBAAwB;AAC3B,aAAO,EAAE,WAAW,qBAAqB,aAAY;IACvD;AAEA,UAAM,qBAAqB,KAAK,KAC9B,uBAAuB,eAAe,KAAK,IAAG,CAAE;AAElD,QAAI,sBAAsB,GAAG;AAC3B,YAAM,IAAI,MAAM,YAAY;IAC9B;AAEA,WAAO,EAAE,WAAW,oBAAoB,aAAY;EACtD;EAEA,MAAM,qCACJ,SACA,QACA,wBACA,kCAAyE;AAEzE,UAAM,UAAU,KAAK,gCACnB,wBACA,gCAAgC;AAElC,WAAO,MAAM,gBACX,YAAY,SAAS,QAAQ,WAAW,QAAQ,YAAY,GAC5D,MAAM;EAEV;EAEA,MAAM,oBACJ,YACA,QACA,wBAAwD;AAExD,UAAM,mBAAmB,KAAK,gCAC5B,wBACA,CAAC,wBACC,kDAAkD,mBAAmB,KAAK;AAE9E,WAAO,MAAM,YACX,WAAW,UAAU,MAAM,GAC3B,iBAAiB,WACjB,iBAAiB,YAAY;EAEjC;;;;AU93HF,gBAAuB,wCACrB,UACA,QACA,UAAiD,CAAA,GAAE;AAEnD,MAAI,QAAqC;AACzC,QAAM,QAAwB;IAC5B,SAAS;IACT,cAAc;IACd,iBAAiB;IACjB,gBAAgB,CAAA;IAChB,2BAA2B,oBAAI,IAAG;IAClC,WAAW;IACX,cAAc;IACd,4BAA4B;;AAE9B,QAAM,0BAA0B,QAAQ,2BAA2B;AAEnE,mBAAiB,SAAS,QAAQ;AAChC,QAAI,MAAM,OAAO,SAAS,OAAO,WAAW,CAAC,SAAS,KAAK;AACzD,eAAS,KAAK,MAAM;IACtB;AAEA,QAAI,CAAC,MAAM,SAAS;AAClB,YAAM,UAAU;AAChB,YAAM;QACJ,MAAM;QACN,cAAc;UACZ,GAAG;;;IAGT;AAGA,UAAM;MACJ,MAAM;MACN,OAAO;MACP,cAAc;QACZ,qBAAqB;;;AAKzB,YAAS,MAAc,SAAS;AAEhC,QAAI,CAAC,MAAM,WAAW,MAAM,QAAQ,WAAW;AAAG;AAElD,UAAM,2BAA2B,MAAM,QACpC,IAAI,CAAC,WAAW,OAAO,KAAK,EAC5B,OAAO,CAAC,UAAU,UAAU,CAAC;AAChC,QAAI,MAAM,QAAQ,SAAS,KAAK,yBAAyB,SAAS,GAAG;AACnE,YAAM,UACJ;AAEF,UAAI,yBAAyB;AAC3B,cAAM,IAAI,UAAU,OAAO;MAC7B;AACA,UAAI,CAAC,MAAM,4BAA4B;AACrC,uBAAO,KACL,GAAG,OAAO,0FAA0F;AAEtG,cAAM,6BAA6B;MACrC;IACF;AAEA,UAAM,gBAAgB,MAAM,QAAQ,KAAK,CAAC,WAAW,OAAO,UAAU,CAAC;AACvE,QAAI,CAAC;AAAe;AACpB,QAAI,cAAc,eAAe;AAC/B,YAAM,eAAe,cAAc;IACrC;AACA,QAAI,CAAC,cAAc;AAAO;AAC1B,UAAM,QAAQ,cAAc;AAG5B,QAAI,MAAM,SAAS;AACjB,UAAI,CAAC,MAAM,cAAc;AACvB,cAAM,eAAe;UACnB,MAAM;UACN,MAAM;UACN,cAAc,EAAE,aAAa,CAAA,EAAE;;MAEnC;AACA,YAAM;QACJ,MAAM;QACN,OAAO,MAAM;QACb,cAAc;UACZ,GAAG;;;AAGP,YAAM,aAAa,QAAQ,MAAM;IACnC;AAEA,QACE,eAAe,SACf,MAAM,aACN,OAAO,MAAM,cAAc,UAC3B;AACA,YAAM,aAAa,MAAM;IAC3B;AAGA,QAAI,aAAa,SAAS,MAAM,SAAS;AACvC,UAAI,CAAC,MAAM,iBAAiB;AAC1B,cAAM,kBAAkB,EAAE,SAAS,IAAI,MAAM,UAAS;MACxD;AACA,YAAM,gBAAgB,WAAW,MAAM;IACzC;AAGA,QAAI,MAAM,YAAY;AACpB,iBAAW,YAAY,MAAM,YAAY;AACvC,YAAI,MAAM,0BAA0B,IAAI,SAAS,KAAK,GAAG;AACvD;QACF;AAEA,YAAK,SAA+B,SAAS,UAAU;AACrD,cAAI,yBAAyB;AAC3B,kBAAM,IAAI,UACR,wEAAwE;UAE5E;AACA,gBAAM,0BAA0B,IAAI,SAAS,KAAK;AAClD;QACF;AAEA,YAAI,EAAE,SAAS,SAAS,MAAM,iBAAiB;AAC7C,gBAAM,eAAe,SAAS,KAAK,IAAI;YACrC,IAAI,SAAS,MAAM;YACnB,WAAW;YACX,MAAM;YACN,MAAM;YACN,QAAQ;;QAEZ;AACA,cAAM,cAAc,SAAS;AAC7B,cAAM,eAAe,SAAS,KAAK,EAAE,aACnC,aAAa,aAAa;AAC5B,cAAM,eAAe,SAAS,KAAK,EAAE,QAAQ,aAAa,QAAQ;AAClE,YAAI,SAAS,MAAM,CAAC,MAAM,eAAe,SAAS,KAAK,EAAE,QAAQ;AAC/D,gBAAM,eAAe,SAAS,KAAK,EAAE,SAAS,SAAS;QACzD;MACF;IACF;EACF;AAGA,QAAM,UAAsC,CAAA;AAC5C,QAAM,eAAe,SAAS,MAAM;AAEpC,MAAI,MAAM,WAAW;AACnB,YAAQ,KAAK;MACX,MAAM;MACN,SAAS,CAAA;MACT,YAAY,CAAC,EAAE,MAAM,kBAAkB,MAAM,MAAM,UAAS,CAAE;KAC/D;EACH;AAEA,MAAI,MAAM,gBAAgB,MAAM,iBAAiB;AAC/C,UAAM,UAAuC,CAAA;AAC7C,QAAI,MAAM,cAAc;AACtB,cAAQ,KAAK,MAAM,YAAY;IACjC;AACA,QAAI,MAAM,iBAAiB;AACzB,cAAQ,KAAK,MAAM,eAAe;IACpC;AACA,YAAQ,KAAK;MACX,IAAI;MACJ;MACA,MAAM;MACN,MAAM;MACN,QAAQ;KACT;EACH;AAEA,aAAW,iBAAiB,OAAO,OAAO,MAAM,cAAc,GAAG;AAC/D,kBAAc,KAAK;AAInB,QAAI,cAAc,UAAU,WAAW,KAAK,GAAG;AAC7C,oBAAc,YAAY,cAAc,UAAU,MAAM,CAAC;IAC3D;AACA,YAAQ,KAAK,aAAa;EAC5B;AAEA,QAAM,cAAc,iBAAiB,KAAK;AAC1C,WAAS,UAAU,cAAc,CAAC,WAAW,IAAI,CAAA;AACjD,WAAS,QAAQ;IACf,eAAe,OAAO,iBAAiB;IACvC,mBAAmB,OAAO,qBAAqB;IAC/C,cAAc,OAAO,gBAAgB;IACrC,uBAAuB,OAAO;IAC9B,2BAA2B,OAAO;;AAIpC,QAAM,aAAoD;IACxD,MAAM;IACN,UAAU;MACR,IAAI,SAAS;MACb,OAAO;QACL,aAAa,OAAO,iBAAiB;QACrC,cAAc,OAAO,qBAAqB;QAC1C,aAAa,OAAO,gBAAgB;QACpC,oBAAoB;UAClB,eAAe,OAAO,uBAAuB,iBAAiB;;QAEhE,qBAAqB;UACnB,kBACG,OAAe,2BAA2B,oBAAoB;;;MAGrE,QAAQ;;;AAIZ,QAAM;AACR;AAEA,SAAS,iBACP,OAAqB;AAErB,QAAM,YAAY,OAAO,QAAQ,MAAM,cAAc,EAClD,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,MAAM,OAAO,IAAI,IAAI,OAAO,KAAK,CAAC,EACtD,IAAI,CAAC,CAAC,EAAE,YAAY,OAAO;IAC1B,IAAI,aAAa;IACjB,MAAM;IACN,UAAU;MACR,MAAM,aAAa;MACnB,WAAW,aAAa;;IAE1B;AAEJ,QAAM,UAAU,MAAM,cAAc,QAAQ;AAC5C,QAAM,UAAU,MAAM,iBAAiB,WAAW;AAElD,MAAI,YAAY,QAAQ,YAAY,QAAQ,UAAU,WAAW,GAAG;AAClE,WAAO;EACT;AAEA,SAAO;IACL,OAAO;IACP,UAAU;IACV,eACE,MAAM,iBAAiB,UAAU,SAAS,IAAI,eAAe;IAC/D,SAAS;MACP,MAAM;MACN;MACA;MACA,GAAI,UAAU,SAAS,IAAI,EAAE,YAAY,UAAS,IAAK,CAAA;;;AAG7D;;;AC7PA,IAAM,yCAAyC;AAC/C,IAAM,kCAAkC;AAWlC,SAAU,kBACd,YAA2E;AAE3E,MAAI,cAAc,UAAa,cAAc;AAAM,WAAO;AAC1D,MAAI,eAAe;AAAQ,WAAO;AAClC,MAAI,eAAe;AAAY,WAAO;AACtC,MAAI,eAAe;AAAQ,WAAO;AAClC,SAAO;IACL,MAAM;IACN,UAAU,EAAE,MAAM,WAAU;;AAEhC;AAEM,SAAUC,yBACd,YACA,OAA2B;AAE3B,QAAM,YAAY,kBAAkB,UAAU;AAC9C,MAAI,aAAa,UAAa,cAAc,UAAU,cAAc,QAAQ;AAC1E,WAAO;EACT;AAEA,MAAI,cAAc,YAAY;AAC5B,QAAI,MAAM,WAAW,GAAG;AACtB,YAAM,IAAI,UACR,oGAAoG;IAExG;AACA,WAAO;EACT;AAEA,MAAI,OAAO,cAAc,YAAY,EAAE,cAAc,YAAY;AAC/D,WAAO;EACT;AAEA,QAAM,qBAAqB,IAAI,IAC7B,MACG,IAAI,CAACC,UACJA,MAAK,SAAS,cAAc,cAAcA,QACtCA,MAAK,SAAS,OACd,MAAS,EAEd,OAAO,CAAC,SAAyB,OAAO,SAAS,QAAQ,CAAC;AAE/D,MAAI,CAAC,mBAAmB,IAAI,UAAU,SAAS,IAAI,GAAG;AACpD,UAAM,IAAI,UACR,6BAA6B,UAAU,SAAS,IAAI,0EAA0E;EAElI;AAEA,SAAO;AACT;AAEM,SAAU,2BACd,SAAiD;AAEjD,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;EACT;AACA,QAAM,MAAsD,CAAA;AAC5D,aAAW,KAAK,SAAS;AACvB,QAAI,EAAE,SAAS,eAAe;AAC5B,UAAI,KAAK;QACP,MAAM;QACN,MAAM,EAAE;QACR,GAAG,mCAAmC,EAAE,cAAc,CAAC,QAAQ,MAAM,CAAC;OACvE;IACH,WAAW,EAAE,SAAS,WAAW;AAC/B,UAAI,KAAK;QACP,MAAM;QACN,SAAS,EAAE;QACX,GAAG,mCAAmC,EAAE,cAAc;UACpD;UACA;SACD;OACF;IACH,WAAW,EAAE,SAAS,WAAW,EAAE,SAAS,SAAS;AAEnD;IACF,OAAO;AACL,YAAM,aAAa;AACnB,YAAM,IAAI,MAAM,oBAAoB,KAAK,UAAU,UAAU,CAAC,EAAE;IAClE;EACF;AACA,SAAO;AACT;AAEM,SAAU,sBACd,SAA4C;AAE5C,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;EACT;AAEA,QAAM,MAAmC,CAAA;AACzC,aAAW,KAAK,SAAS;AACvB,QAAI,EAAE,SAAS,cAAc;AAC3B,UAAI,KAAK;QACP,MAAM;QACN,MAAM,EAAE;QACR,GAAI,EAAE,wBACF,EAAE,yBAAyB,EAAE,sBAAqB,IAClD,CAAA;QACJ,GAAG,mCAAmC,EAAE,cAAc,CAAC,QAAQ,MAAM,CAAC;OACvE;IACH,WAAW,EAAE,SAAS,eAAe;AAGnC,YAAM,cACJ,OAAO,EAAE,UAAU,WACf,EAAE,QACF,OAAQ,EAAU,aAAa,WAC5B,EAAU,WACX;AAER,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MACR,kDAAkD,KAAK,UAAU,CAAC,CAAC,EAAE;MAEzE;AACA,YAAM,OAAO,mCAAmC,EAAE,cAAc;QAC9D;QACA;OACD;AACD,YAAM,WAAW,mCACf,EAAE,cAAc,WAChB,CAAC,KAAK,CAAC;AAET,UAAI,KAAK;QACP,MAAM;QACN,WAAW;UACT,KAAK;;;;UAIL,GAAI,EAAE,WAAW,SACb,EAAE,QAAQ,EAAE,OAAiC,IAC7C,CAAA;UACJ,GAAG;;QAEL,GAAI,EAAE,wBACF,EAAE,yBAAyB,EAAE,sBAAqB,IAClD,CAAA;QACJ,GAAG;OACJ;IACH,WAAW,EAAE,SAAS,cAAc;AAGlC,YAAMC,QAA+C,CAAA;AAErD,UAAI,OAAO,EAAE,SAAS,UAAU;AAC9B,cAAM,QAAQ,EAAE,KAAK,KAAI;AACzB,YAAI,MAAM,WAAW,OAAO,GAAG;AAC7B,UAAAA,MAAK,YAAY;QACnB,OAAO;AACL,gBAAM,IAAI,UACR,wJAAwJ,KAAK,UAAU,CAAC,CAAC,EAAE;QAE/K;MACF,WAAW,EAAE,QAAQ,OAAO,EAAE,SAAS,YAAY,QAAQ,EAAE,MAAM;AACjE,QAAAA,MAAK,UAAW,EAAE,KAAwB;MAC5C,OAAO;AACL,cAAM,IAAI,UACR,8CAA8C,KAAK,UAAU,CAAC,CAAC,EAAE;MAErE;AAGA,UAAI,EAAE,UAAU;AACd,QAAAA,MAAK,WAAW,EAAE;MACpB,WAAW,EAAE,cAAc,UAAU;AACnC,QAAAA,MAAK,WAAW,EAAE,aAAa;MACjC;AAEA,YAAM,OAAO,mCAAmC,EAAE,cAAc;QAC9D;QACA;QACA;OACD;AACD,UAAI,KAAK;QACP,MAAM;QACN,MAAAA;QACA,GAAI,EAAE,wBACF,EAAE,yBAAyB,EAAE,sBAAqB,IAClD,CAAA;QACJ,GAAG;OACJ;IACH,WAAW,EAAE,SAAS,SAAS;AAC7B,UAAI,OAAO,EAAE,UAAU,UAAU;AAC/B,cAAM,IAAI,UACR,qEAAqE,KAAK,UAAU,CAAC,CAAC,EAAE;MAE5F;AACA,YAAM,mBACJ,EAAE,WAAW,SAAS,EAAE,WAAW,QAC/B,EAAE,SACF,EAAE,cAAc,aAAa,WAAW,SACtC,EAAE,cAAc,aAAa,WAAW,QACxC,EAAE,aAAa,YAAY,SAC3B;AACR,UAAI,CAAC,kBAAkB;AACrB,cAAM,IAAI,UACR,gEAAgE,KAAK,UAAU,CAAC,CAAC,EAAE;MAEvF;AACA,YAAM,OAAO,mCAAmC,EAAE,cAAc;QAC9D;QACA;OACD;AACD,YAAM,aAAa,mCACjB,EAAE,cAAc,aAChB,CAAC,QAAQ,QAAQ,CAAC;AAEpB,UAAI,KAAK;QACP,MAAM;QACN,aAAa;UACX,MAAM,EAAE;UACR,QAAQ;UACR,GAAG;;QAEL,GAAI,EAAE,wBACF,EAAE,yBAAyB,EAAE,sBAAqB,IAClD,CAAA;QACJ,GAAG;OACJ;IACH,OAAO;AACL,YAAM,aAAa;AACnB,YAAM,IAAI,MAAM,oBAAoB,KAAK,UAAU,UAAU,CAAC,EAAE;IAClE;EACF;AACA,SAAO;AACT;AAEA,SAASC,eAAc,MAAwB;AAC7C,MAAI,KAAK,SAAS,WAAW;AAC3B,WAAO;EACT;AAEA,MAAI,OAAO,KAAK,SAAS,eAAe,OAAO,KAAK,SAAS,UAAU;AACrE,WAAO;EACT;AAEA,SAAO;AACT;AAEM,SAAU,gBACd,OACA,UAAkC,CAAA,GAAE;AAEpC,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,CAAC,EAAE,MAAM,QAAQ,SAAS,MAAK,CAAE;EAC1C;AACA,QAAM,SAAuC,CAAA;AAC7C,MAAI,sBACF;AACF,QAAM,wBAAwB,MAAK;AACjC,QAAI,qBAAqB;AACvB,UACE,CAAC,oBAAoB,cACrB,oBAAoB,WAAW,WAAW,GAC1C;AACA,eAAO,oBAAoB;MAC7B;AACA,aAAO,KAAK,mBAAmB;AAC/B,4BAAsB;IACxB;EACF;AACA,QAAM,yBAAyB,MAAK;AAClC,QAAI,CAAC,qBAAqB;AACxB,4BAAsB;QACpB,MAAM;QACN,SAAS;QACT,YAAY,CAAA;;IAEhB;AACA,WAAO;EACT;AACA,aAAW,QAAQ,OAAO;AACxB,QAAIA,eAAc,IAAI,GAAG;AACvB,YAAM,EAAE,SAAS,MAAM,aAAY,IAAK;AACxC,4BAAqB;AACrB,UAAI,SAAS,aAAa;AACxB,cAAM,YAAiD;UACrD,MAAM;UACN,SAAS,2BAA2B,OAAO;UAC3C,GAAG,mCAAmC,cAAc;YAClD;YACA;YACA;YACA;WACD;;AAGH,YAAI,MAAM,QAAQ,OAAO,GAAG;AAC1B,gBAAM,QAAQ,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,OAAO;AACpD,cAAI,OAAO;AACT,sBAAU,QAAQ;cAChB,IAAI;;cACJ,GAAG,MAAM;;UAEb;QACF;AAEA,eAAO,KAAK,SAAS;MACvB,WAAW,SAAS,QAAQ;AAC1B,eAAO,KAAK;UACV;UACA,SAAS,sBAAsB,OAAO;UACtC,GAAG,mCAAmC,cAAc;YAClD;YACA;WACD;SACF;MACH,WAAW,SAAS,UAAU;AAC5B,eAAO,KAAK;UACV,MAAM;UACN;UACA,GAAG,mCAAmC,cAAc;YAClD;YACA;WACD;SACF;MACH;IACF,WAAW,KAAK,SAAS,aAAa;AACpC,YAAM,OAAO,uBAAsB;AAGnC,WAAK,YAAY,KAAK,aAAa,CAAC,GAAG;AACvC;IACF,WAAW,KAAK,SAAS,oBAAoB;AAC3C,UAAI,KAAK,SAAS,oBAAoB;AACpC,cAAM,OAAO,uBAAsB;AACnC,cAAM,YAAY,KAAK,cAAc,CAAA;AACrC,cAAM,aAAa;AACnB,cAAM,EAAE,UAAU,cAAc,GAAG,KAAI,IACrC,WAAW,gBAAgB,CAAA;AAC7B,cAAM,EAAE,WAAW,cAAc,GAAG,sBAAqB,IACvD,gBAAgB,CAAA;AAElB,kBAAU,KAAK;UACb,IAAI,WAAW,MAAM;UACrB,MAAM;UACN,UAAU;YACR,MAAM;YACN,WAAW,KAAK,UAAU;cACxB,SAAS,WAAW,cAAc,WAAW,CAAA;cAC7C,QAAQ,WAAW;cACnB,GAAG,mCAAmC,cAAc;gBAClD;gBACA;eACD;aACF;YACD,GAAG,mCAAmC,uBAAuB;cAC3D;cACA;aACD;;UAEH,GAAG,mCAAmC,MAAM;YAC1C;YACA;YACA;WACD;SACF;AACD,aAAK,aAAa;AAClB;MACF,OAAO;AACL,cAAM,IAAI,UACR,yEACE,KAAK,UAAU,IAAI,CAAC;MAE1B;IACF,WACE,KAAK,SAAS,mBACd,KAAK,SAAS,0BACd,KAAK,SAAS,gBACd,KAAK,SAAS,uBACd,KAAK,SAAS,sBACd,KAAK,SAAS,2BACd;AACA,YAAM,IAAI,UACR,0EACE,KAAK,UAAU,IAAI,CAAC;IAE1B,WACE,KAAK,SAAS,sBACd,KAAK,SAAS,sBACd;AACA,YAAM,IAAI,UACR,4HAA4H;IAEhI,WAAW,KAAK,SAAS,iBAAiB;AACxC,YAAM,4BACJ,OAAO,KAAK,SAAS,YACrB,CAAC,uCAAuC,KAAK,KAAK,IAAI;AACxD,UACE,6BACC,OAAO,KAAK,cAAc,YAAY,KAAK,UAAU,KAAI,EAAG,SAAS,GACtE;AACA,cAAM,IAAI,UACR,4IAA4I;MAEhJ;AACA,YAAM,OAAO,uBAAsB;AACnC,YAAM,YAAY,KAAK,cAAc,CAAA;AACrC,YAAM,WAAW;AACjB,YAAM,uBAAuB,mCAC3B,SAAS,cACT,CAAC,MAAM,QAAQ,YAAY,QAAQ,WAAW,cAAc,OAAO,CAAC;AAEtE,YAAM,uBAAuB,mCAC3B,SAAS,cAAc,UACvB,CAAC,QAAQ,WAAW,CAAC;AAEvB,gBAAU,KAAK;QACb,IAAI,SAAS;QACb,MAAM;QACN,UAAU;UACR,MAAM,SAAS;UACf,WAAW,SAAS,aAAa;UACjC,GAAG;;QAEL,GAAG;OACJ;AACD,WAAK,aAAa;AAClB,aAAO,OACL,MACA,mCAAmC,SAAS,cAAc;QACxD;QACA;QACA;QACA;QACA;QACA;QACA;OACD,CAAC;IAEN,WAAW,KAAK,SAAS,wBAAwB;AAC/C,4BAAqB;AACrB,YAAM,aAAa;AACnB,YAAM,cAAc,mCAClB,WAAW,QACX,OAAO;AAGT,aAAO,KAAK;QACV,MAAM;QACN,cAAc,WAAW;QACzB,SAAS;QACT,GAAG,mCAAmC,WAAW,cAAc;UAC7D;UACA;UACA;SACD;OACF;IACH,WAAW,KAAK,SAAS,WAAW;AAClC,aAAO,KAAK;QACV,GAAG,KAAK;OACF;IACV,WAAW,KAAK,SAAS,cAAc;AACrC,YAAM,IAAI,UACR,qHAAqH;IAEzH,OAAO;AACL,YAAM,aAAa;AACnB,YAAM,IAAI,MAAM,sBAAsB,KAAK,UAAU,UAAU,CAAC,EAAE;IACpE;EACF;AACA,wBAAqB;AACrB,SAAO;AACT;AAEA,SAAS,mCACP,QACA,SAA+B;AAE/B,MAAI,OAAO,WAAW,UAAU;AAC9B,WAAO;EACT;AAEA,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,UAAM,YAAY,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS,YAAY;AAEpE,QAAI,UAAU,WAAW,GAAG;AAC1B,aAAO,+BAA+B,OAAO;IAC/C;AAEA,QAAI,QAAQ,2BAA2B,UAAU,WAAW,OAAO,QAAQ;AACzE,YAAM,IAAI,UACR,0EACE,KAAK,UAAU,MAAM,CAAC;IAE5B;AAEA,WAAO,UAAU,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,KAAK,EAAE;EACnD;AAEA,MACEC,UAAS,MAAM,KACf,OAAO,SAAS,UAChB,OAAO,OAAO,SAAS,UACvB;AACA,WAAO,OAAO;EAChB;AAEA,MAAIA,UAAS,MAAM,MAAM,OAAO,SAAS,WAAW,OAAO,SAAS,SAAS;AAC3E,WAAO,+BAA+B,OAAO;EAC/C;AAEA,QAAM,IAAI,UACR,0EACE,KAAK,UAAU,MAAM,CAAC;AAE5B;AAEA,SAAS,+BACP,SAA+B;AAE/B,QAAM,UACJ;AAEF,MAAI,QAAQ,yBAAyB;AACnC,UAAM,IAAI,UAAU,OAAO;EAC7B;AAEA,iBAAO,KACL,GAAG,OAAO,4GAA4G;AAExH,SAAO;AACT;AAEA,SAASA,UAAS,OAAc;AAC9B,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEM,SAAU,aAAaH,OAAoB;AAC/C,MAAIA,MAAK,SAAS,YAAY;AAC5B,WAAO;MACL,MAAM;MACN,UAAU;QACR,MAAMA,MAAK;QACX,aAAaA,MAAK,eAAe;QACjC,YAAYA,MAAK;QACjB,QAAQA,MAAK;;;EAGnB;AACA,QAAM,IAAI,MACR,+EACEA,MAAK,IACP,WAAW,KAAK,UAAUA,KAAI,CAAC,EAAE;AAErC;AAEM,SAAU,mBACd,SAA0B;AAE1B,SAAO;IACL,MAAM;IACN,UAAU;MACR,MAAM,QAAQ;MACd,aAAa,QAAQ,mBAAmB;MACxC,YAAY,QAAQ;;;AAG1B;;;ACxiBO,IAAM,UAAU;AACvB,IAAM,uBACJ;AASF,SAAS,oBACP,SAAsD;AAEtD,SACE,eAAe,WACf,OAAO,QAAQ,cAAc,YAC7B,QAAQ,cAAc;AAE1B;AAcM,IAAO,6BAAP,MAAiC;EACrC;EACA;EACA;EACA,8BAA8B;EAC9B,yCAAyC;EACzC,yCAAyC;EAEzC,YACE,QACA,OACA,UAA6C,CAAA,GAAE;AAE/C,SAAK,UAAU;AACf,SAAK,SAAS;AACd,SAAK,2BAA2B,QAAQ,2BAA2B;EACrE;EAEA,eAAe,MAA6B;AAC1C,WAAO,qBAAqB,IAAI;EAClC;EAEA,MAAM,YAAY,SAAqB;AACrC,SAAK,iDAAiD,OAAO;AAC7D,SAAK,yBAAyB,OAAO;AACrC,SAAK,oCAAoC,OAAO;AAEhD,UAAM,WAAW,MAAM,mBAAmB,OAAO,SAAQ;AACvD,WAAK,SAAS,QAAQ,KAAK;AAC3B,WAAK,SAAS,eAAe,QAAQ,gBACjC;QACE,aAAa,QAAQ,cAAc;QACnC,OAAO,QAAQ,cAAc;QAC7B,mBAAmB,QAAQ,cAAc;QACzC,kBAAkB,QAAQ,cAAc;QACxC,kBAAkB,QAAQ,cAAc,WAAW;QACnD,WAAW,QAAQ,cAAc,MAAM;UAEzC,EAAE,UAAU,KAAK,QAAQ,QAAO;AACpC,YAAMI,YAAW,MAAM,KAAK,eAAe,SAAS,MAAM,KAAK;AAC/D,UAAI,QAAQ,QAAQ,YAAY,MAAM;AACpC,aAAK,SAAS,SAAS,CAACA,SAAQ;MAClC;AACA,aAAOA;IACT,CAAC;AAED,UAAM,SAAqC,CAAA;AAC3C,QAAI,SAAS,WAAW,SAAS,QAAQ,CAAC,GAAG;AAC3C,YAAM,UAAU,SAAS,QAAQ,CAAC,EAAE;AAEpC,UAAI,oBAAoB,OAAO,GAAG;AAChC,eAAO,KAAK;UACV,MAAM;UACN,SAAS,CAAA;UACT,YAAY;YACV;cACE,MAAM;cACN,MAAM,QAAQ;;;SAGnB;MACH;AACA,YAAM,aACJ,QAAQ,YAAY,UACpB,QAAQ,YAAY;MAEpB,EAAE,QAAQ,cAAc,QAAQ,YAAY;AAE9C,UAAI,YAAY;AACd,cAAM,EAAE,SAAS,GAAG,KAAI,IAAK;AAC7B,eAAO,KAAK;UACV,IAAI,SAAS;UACb,MAAM;UACN,MAAM;UACN,SAAS;YACP;cACE,MAAM;cACN,MAAM,WAAW;cACjB,cAAc;;;UAGlB,QAAQ;SACT;MACH,WAAW,QAAQ,SAAS;AAC1B,cAAM,EAAE,SAAS,GAAG,KAAI,IAAK;AAC7B,eAAO,KAAK;UACV,IAAI,SAAS;UACb,MAAM;UACN,MAAM;UACN,SAAS;YACP;cACE,MAAM;cACN,SAAS,WAAW;cACpB,cAAc;;;UAGlB,QAAQ;SACT;MACH,WAAW,QAAQ,OAAO;AACxB,cAAM,EAAE,MAAM,GAAG,mBAAkB,IAAK,QAAQ;AAChD,eAAO,KAAK;UACV,IAAI,SAAS;UACb,MAAM;UACN,MAAM;UACN,SAAS;YACP;cACE,MAAM;cACN,OAAO;cACP,cAAc;;;UAGlB,QAAQ;SACT;MACH;AAEA,UAAI,QAAQ,YAAY;AACtB,mBAAW,aAAa,QAAQ,YAAY;AAC1C,cAAI,UAAU,SAAS,YAAY;AAEjC,kBAAM,EAAE,IAAI,QAAQ,GAAG,sBAAqB,IAAK;AACjD,kBAAM,EACJ,WAAW,MACX,MACA,GAAG,sBAAqB,IACtB,UAAU;AACd,mBAAO,KAAK;cACV,IAAI,SAAS;cACb,MAAM;cACN,WAAW;cACX;cACA;cACA,QAAQ;cACR,cAAc;gBACZ,GAAG;gBACH,GAAG;;aAEN;UACH,WAAW,UAAU,SAAS,UAAU;AACtC,gBAAI,KAAK,0BAA0B;AACjC,oBAAM,IAAI,UACR,wEAAwE;YAE5E;UACF;QACF;MACF;IACF;AACA,UAAM,gBAA+B;MACnC,OAAO,SAAS,QACZ,IAAI,MAAM,gBAAgB,SAAS,KAAK,CAAC,IACzC,IAAI,MAAK;MACb;MACA,YAAY,SAAS;MACrB,cAAc;;AAGhB,WAAO;EACT;EAEA,OAAO,oBACL,SAAqB;AAErB,SAAK,iDAAiD,OAAO;AAC7D,SAAK,yBAAyB,OAAO;AACrC,SAAK,oCAAoC,OAAO;AAEhD,UAAM,OAAO,QAAQ,UAAU,qBAAoB,IAAK;AACxD,QAAI;AACF,UAAI,MAAM;AACR,aAAK,SAAS,QAAQ,KAAK;AAC3B,aAAK,SAAS,eAAe,QAAQ,gBACjC;UACE,aAAa,QAAQ,cAAc;UACnC,OAAO,QAAQ,cAAc;UAC7B,mBAAmB,QAAQ,cAAc;UACzC,kBAAkB,QAAQ,cAAc;UACxC,kBAAkB,QAAQ,cAAc,WAAW;UACnD,WAAW,QAAQ,cAAc,MAAM;YAEzC,EAAE,UAAU,KAAK,QAAQ,QAAO;AACpC,aAAK,MAAK;AACV,uBAAe,IAAI;MACrB;AACA,YAAM,SAAS,MAAM,KAAK,eAAe,SAAS,MAAM,IAAI;AAE5D,YAAM,WAAmD;QACvD,IAAI;QACJ,SAAS,KAAK,MAAM,KAAK,IAAG,IAAK,GAAI;QACrC,OAAO,KAAK;QACZ,QAAQ;QACR,SAAS,CAAA;QACT,OAAO;UACL,eAAe;UACf,mBAAmB;UACnB,cAAc;;;AAGlB,uBAAiB,SAAS,wCACxB,UACA,QACA,EAAE,yBAAyB,KAAK,yBAAwB,CAAE,GACzD;AACD,YACE,MAAM,SAAS,mBACf,SAAS,OAAO,iBAAiB,GACjC;AACA,mBAAS,QAAQ;YACf,eAAe,MAAM,SAAS,MAAM;YACpC,mBAAmB,MAAM,SAAS,MAAM;YACxC,cAAc,MAAM,SAAS,MAAM;YACnC,uBAAuB,MAAM,QAC3B,MAAM,SAAS,MAAM,kBAAkB,IAErC,MAAM,SAAS,MAAM,mBAAmB,CAAC,IACzC,MAAM,SAAS,MAAM;YACzB,2BAA2B,MAAM,QAC/B,MAAM,SAAS,MAAM,mBAAmB,IAEtC,MAAM,SAAS,MAAM,oBAAoB,CAAC,IAC1C,MAAM,SAAS,MAAM;;QAE7B;AACA,cAAM;MACR;AAEA,UAAI,QAAQ,YAAY,QAAQ,YAAY,MAAM;AAChD,aAAK,SAAS,SAAS,CAAC,QAAQ;MAClC;IACF,SAAS,OAAO;AACd,UAAI,MAAM;AACR,aAAK,SAAS;UACZ,SAAS;UACT,MAAM;YACJ,OACE,QAAQ,YAAY,OAChB,OAAO,KAAK,IACZ,iBAAiB,QACf,MAAM,OACN;;SAEX;MACH;AACA,YAAM;IACR;AACE,UAAI,MAAM;AACR,aAAK,IAAG;AACR,yBAAgB;MAClB;IACF;EACF;EAEA,iDAAiD,SAAqB;AACpE,UAAM,cAAwB,CAAA;AAC9B,QAAI,QAAQ,oBAAoB;AAC9B,kBAAY,KAAK,oBAAoB;IACvC;AACA,QAAI,QAAQ,gBAAgB;AAC1B,kBAAY,KAAK,gBAAgB;IACnC;AAEA,QAAI,YAAY,WAAW,GAAG;AAC5B;IACF;AAEA,UAAM,UACJ,kFACI,YAAY,KAAK,IAAI,CAAC;AAI5B,QAAI,KAAK,0BAA0B;AACjC,YAAM,IAAI,UAAU,OAAO;IAC7B;AAEA,QAAI,CAAC,KAAK,wCAAwC;AAChD,qBAAO,KACL,GAAG,OAAO,sHACqD;AAEjE,WAAK,yCAAyC;IAChD;EACF;EAEA,yBAAyB,SAAqB;AAC5C,QAAI,CAAC,QAAQ,QAAQ;AACnB;IACF;AAEA,UAAM,UACJ;AAGF,QAAI,KAAK,0BAA0B;AACjC,YAAM,IAAI,UAAU,OAAO;IAC7B;AAEA,QAAI,CAAC,KAAK,6BAA6B;AACrC,qBAAO,KACL,GAAG,OAAO,+EAA+E;AAE3F,WAAK,8BAA8B;IACrC;EACF;EAEA,oCAAoC,SAAqB;AACvD,UAAM,YAAY,QAAQ,cAAc;AACxC,QAAI,CAAC,WAAW;AACd;IACF;AAEA,UAAM,cAAe,CAAC,QAAQ,SAAS,EAAY,OACjD,CAAC,SAAS,UAAU,IAAI,MAAM,UAAa,UAAU,IAAI,MAAM,IAAI;AAErE,QAAI,YAAY,WAAW,GAAG;AAC5B;IACF;AAEA,UAAM,oBAAoB,YACvB,IAAI,CAAC,SAAS,aAAa,IAAI,EAAE,EACjC,KAAK,IAAI;AACZ,UAAM,UACJ,+CAA+C,iBAAiB;AAGlE,QAAI,KAAK,0BAA0B;AACjC,YAAM,IAAI,UAAU,OAAO;IAC7B;AAEA,QAAI,CAAC,KAAK,wCAAwC;AAChD,qBAAO,KACL,GAAG,OAAO,uGACqD;AAEjE,WAAK,yCAAyC;IAChD;EACF;EAeA,MAAM,eACJ,SACA,MACA,QAAe;AAKf,UAAM,QAAsD,CAAA;AAC5D,QAAI,QAAQ,OAAO;AACjB,iBAAWC,SAAQ,QAAQ,OAAO;AAChC,YAAIA,MAAK,SAAS,YAAY;AAC5B,cACE,OAAOA,MAAK,cAAc,YAC1BA,MAAK,UAAU,KAAI,EAAG,SAAS,GAC/B;AACA,kBAAM,IAAI,UACR,mGAAmG;UAEvG;AACA,cAAIA,MAAK,iBAAiB,MAAM;AAC9B,kBAAM,IAAI,UACR,mFAAmF;UAEvF;QACF;AACA,cAAM,KAAK,aAAaA,KAAI,CAAC;MAC/B;IACF;AACA,QAAI,QAAQ,UAAU;AACpB,iBAAW,WAAW,QAAQ,UAAU;AACtC,cAAM,KAAK,mBAAmB,OAAO,CAAC;MACxC;IACF;AACA,UAAM,iBAAiBC,mBAAkB,QAAQ,UAAU;AAE3D,QAAI,oBAAyC;AAC7C,QAAI,OAAO,QAAQ,cAAc,sBAAsB,WAAW;AAChE,UAAI,QAAQ,cAAc,qBAAqB,MAAM,WAAW,GAAG;AACjE,cAAM,IAAI,MAAM,qDAAqD;MACvE;AAEA,0BAAoB,QAAQ,cAAc;IAC5C;AAEA,UAAM,WAAW,gBAAgB,QAAQ,OAAO;MAC9C,yBAAyB,KAAK;KAC/B;AACD,QAAI,QAAQ,oBAAoB;AAC9B,eAAS,QAAQ;QACf,SAAS,QAAQ;QACjB,MAAM;OACP;IACH;AAEA,QAAI,QAAQ,QAAQ,YAAY,MAAM;AACpC,WAAK,SAAS,QAAQ;IACxB;AAEA,UAAM,eAAe,EAAE,GAAI,QAAQ,cAAc,gBAAgB,CAAA,EAAG;AACpE,UAAM,kBACJ,QAGA;AACF,UAAM,8BACJ,iBAAiB,4BAA4B,SAC5C,aAAa,qBAAqB,UAChC,MAAM,SAAS,KAAK,qBAAqB,KAAK,KAAK,MAAM;AAC9D,QACE,QAAQ,cAAc,aACtB,QAAQ,cAAc,UAAU,UAChC,CAAC,6BACD;AAEA,mBAAa,mBAAmB,QAAQ,cAAc,UAAU;IAClE;AACA,QAAI,QAAQ,cAAc,QAAQ,QAAQ,cAAc,KAAK,WAAW;AAEtE,mBAAa,YAAY,QAAQ,cAAc,KAAK;IACtD;AAQA,UAAM,cAA2C;MAC/C,OAAO,KAAK;MACZ;MACA,OAAO,MAAM,SAAS,QAAQ;MAC9B,aAAa,QAAQ,cAAc;MACnC,OAAO,QAAQ,cAAc;MAC7B,mBAAmB,QAAQ,cAAc;MACzC,kBAAkB,QAAQ,cAAc;MACxC,YAAY,QAAQ,cAAc;MAClC,aAAaC,yBACX,QAAQ,cAAc,YACtB,KAAK;MAEP,qBAAqB;MACrB,QAAQ,SAAS,OAAO;MACxB,gBAAgB,SAAS,EAAE,eAAe,KAAI,IAAK;MACnD,OAAO,QAAQ,cAAc;MAC7B,wBAAwB,8BACtB,QAAQ,cAAc,oBAAoB;MAE5C,sBAAsB,QAAQ,cAAc;MAC5C,GAAG;;AAGL,QAAI,gBAAgB;AAClB,kBAAY,kBAAkB;IAChC;AAEA,QAAI,eAAO,kBAAkB;AAC3B,qBAAO,MAAM,aAAa;IAC5B,OAAO;AACL,qBAAO,MACL,8BAA8B,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC,EAAE;IAExE;AAEA,UAAM,iBAIF;MACF,SAAS;MACT,QAAQ,QAAQ;;AAElB,QAEI,QAGA,WAAW,uBAAuB,MACpC;AACA,qBAAe,aAAa;IAC9B;AAEA,UAAM,aAAa,MAAM,KAAK,QAAQ,KAAK,YAAY,OACrD,aACA,cAAc;AAGhB,QAAI,eAAO,kBAAkB;AAC3B,qBAAO,MAAM,mBAAmB;IAClC,OAAO;AACL,qBAAO,MAAM,sBAAsB,KAAK,UAAU,YAAY,MAAM,CAAC,CAAC,EAAE;IAC1E;AACA,WAAO;EACT;;AAGF,SAASD,mBACP,YAAgC;AAMhC,MAAI,eAAe,QAAQ;AAIzB,WAAO;EACT;AAEA,MAAI,WAAW,SAAS,eAAe;AACrC,WAAO;MACL,MAAM;MACN,aAAa;QACX,MAAM,WAAW;QACjB,QAAQ,WAAW;QACnB,QAAQ,WAAW;;;EAGzB;AAEA,SAAO,EAAE,MAAM,cAAa;AAC9B;AAEA,SAAS,gBACP,OAAsB;AAEtB,SAAO;IACL,UAAU;IACV,cAAc,MAAM;IACpB,eAAe,MAAM;IACrB,cAAc,MAAM;IACpB,sBAAsB;MACpB,eAAe,MAAM,uBAAuB,iBAAiB;;IAE/D,uBAAuB;MACrB,kBAAkB,MAAM,2BAA2B,oBAAoB;;;AAG7E;;;AftkBM,IAAO,iBAAP,MAAqB;EACzB;EACA;EACA;EACA;EACA;EACA,cAAc,oBAAI,IAAG;EACrB;EAEA,YAAY,UAAiC,CAAA,GAAE;AAC7C,SAAK,WAAW;AAChB,QAAI,KAAK,SAAS,cAAc;AAC9B,UAAI,KAAK,SAAS,QAAQ;AACxB,cAAM,IAAI,MAAM,6CAA6C;MAC/D;AACA,UAAI,KAAK,SAAS,SAAS;AACzB,cAAM,IAAI,MAAM,8CAA8C;MAChE;AACA,UAAI,KAAK,SAAS,kBAAkB;AAClC,cAAM,IAAI,MACR,uDAAuD;MAE3D;AACA,WAAK,UAAU,KAAK,SAAS;IAC/B;AACA,SAAK,gBAAgB,KAAK,SAAS;AACnC,SAAK,yBAAyB,KAAK,SAAS;AAC5C,SAAK,oBAAoB,KAAK,SAAS;AACvC,SAAK,iCACH,KAAK,SAAS,iCAAiC;EACnD;;;;;EAMA,aAAU;AAER,QAAI,CAAC,KAAK,SAAS;AACjB,WAAK;MAEF,uBAAsB;MAEvB,IAAIE,QAAO;QACT,QAAQ,KAAK,SAAS,UAAU,oBAAmB;QACnD,SAAS,KAAK,SAAS;QACvB,cAAc,KAAK,SAAS;QAC5B,SAAS,KAAK,SAAS;OACxB;IACL;AACA,WAAO,KAAK;EACd;EAEA,sCAAsC,QAAc;AAClD,QAAI,OAAO,KAAK,sBAAsB,aAAa;AACjD,aAAO,KAAK;IACd;AAGA,QAAI,KAAK,SAAS,gBAAgB,KAAK,SAAS,SAAS;AACvD,aAAO;IACT;AAEA,UAAM,gBAAgB,uBAAsB;AAC5C,QAAI,iBAAiB,WAAW,eAAe;AAC7C,aAAO;IACT;AAEA,WAAO,iCAAgC;EACzC;EAEA,MAAM,SAAS,WAA8B;AAC3C,UAAM,QAAQ,aAAa,gBAAe;AAC1C,UAAM,eAAe,KAAK,iBAAiB,4BAA2B;AACtE,UAAM,wBACJ,KAAK,0BAA0B,qCAAoC;AACrE,UAAM,0BAA0B,EAC9B,gBACA,yBACA,CAAC,KAAK;AAER,UAAM,WAAW,KAAK,UAAU;MAC9B;MACA;MACA;KACD;AAED,QAAI,yBAAyB;AAC3B,YAAM,cAAc,KAAK,YAAY,IAAI,QAAQ;AACjD,UAAI,aAAa;AACf,eAAO;MACT;IACF;AAEA,QAAI;AAEJ,QAAI,cAAc;AAChB,YAAM,SAAS,KAAK,WAAU;AAC9B,sBAAgB,wBACZ,IAAI,uBAAuB,QAAQ,OAAO;QACxC,kBACE,KAAK,sCAAsC,MAAM;QACnD,iBAAiB;QACjB,kBAAkB,KAAK,SAAS;OACjC,IACD,IAAI,qBAAqB,QAAQ,KAAK;IAC5C,OAAO;AACL,sBAAgB,IAAI,2BAA2B,KAAK,WAAU,GAAI,OAAO;QACvE,yBAAyB,KAAK,SAAS;OACxC;IACH;AAEA,QAAI,yBAAyB;AAC3B,WAAK,YAAY,IAAI,UAAU,aAAa;IAC9C;AACA,WAAO;EACT;;;;EAKA,MAAM,QAAK;AACT,UAAM,eAAe,MAAM,KAAK,IAAI,IAAI,KAAK,YAAY,OAAM,CAAE,CAAC;AAClE,SAAK,YAAY,MAAK;AAEtB,UAAM,cAAyB,CAAA;AAC/B,UAAM,QAAQ,IACZ,aAAa,IAAI,OAAO,UAAS;AAC/B,YAAM,aAAc,MACjB;AACH,UAAI,OAAO,eAAe,YAAY;AACpC;MACF;AACA,UAAI;AACF,cAAM,WAAW,KAAK,KAAK;MAC7B,SAAS,OAAO;AACd,oBAAY,KAAK,KAAK;MACxB;IACF,CAAC,CAAC;AAGJ,QAAI,YAAY,WAAW,GAAG;AAC5B,YAAM,YAAY,CAAC;IACrB;AACA,QAAI,YAAY,SAAS,GAAG;AAC1B,YAAM,QAAQ,IAAI,MAAM,iCAAiC;AACxD,YAAyC,SAAS;AACnD,YAAM;IACR;EACF;;;;AgB9JF,IAAM,iCAAiC;AACvC,IAAM,qCAAqC;AAC3C,IAAM,0CAA0C;AAEhD,eAAe,eACb,SACA,QAAoB;AAEpB,MAAI,QAAQ,SAAS;AACnB,WAAO;EACT;AAEA,SAAO,IAAI,QAAQ,CAAC,YAAW;AAC7B,UAAM,UAAU,WAAW,MAAK;AAC9B,cAAO;AACP,cAAQ,IAAI;IACd,GAAG,OAAO;AAEV,UAAM,UAAU,MAAK;AACnB,mBAAa,OAAO;AACpB,cAAQ,oBAAoB,SAAS,OAAO;IAC9C;AACA,UAAM,UAAU,MAAK;AACnB,cAAO;AACP,cAAQ,KAAK;IACf;AAEA,YAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAI,CAAE;EAC3D,CAAC;AACH;AACA,IAAM,iBAAiB,OAAO,sCAAsC;AACpE,IAAM,cAAc,IAAI,YAAW;AAEnC,SAASC,UAAS,OAAc;AAC9B,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,cAAc,OAAc;AACnC,MAAI,CAACA,UAAS,KAAK,GAAG;AACpB,WAAO;EACT;AAEA,QAAM,YAAY,OAAO,eAAe,KAAK;AAC7C,SAAO,cAAc,OAAO,aAAa,cAAc;AACzD;AAEA,SAAS,UAAU,OAAa;AAC9B,MAAI;AACF,WAAO,OAAQ,MAA+B,WAAW;EAC3D,QAAQ;AACN,WAAO;EACT;AACF;AAEA,SAAS,qBACP,UAAiC;AAEjC,SAAO,SAAS,SAAS;AAC3B;AAEA,SAAS,sBAAsB,OAAc;AAC3C,SAAOA,UAAS,KAAK;AACvB;AAEA,SAAS,mBAAmB,OAAc;AACxC,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK;AAC3D;AAEA,SAAS,mBAAmB,OAAc;AACxC,MAAI;AACF,UAAM,aAAa,KAAK,UAAU,KAAK;AACvC,QAAI,eAAe,QAAW;AAC5B,aAAO;IACT;AACA,QAAI,OAAO,eAAe,UAAU;AAClC,aAAO,iCAAiC;IAC1C;AACA,WAAO,YAAY,OAAO,UAAU,EAAE;EACxC,QAAQ;AACN,WAAO,iCAAiC;EAC1C;AACF;AAEA,SAAS,2BAA2B,OAAe,UAAgB;AACjE,QAAM,YAAY,mBAAmB,KAAK;AAC1C,MAAI,aAAa,UAAU;AACzB,WAAO;EACT;AAEA,QAAM,aAAa,mBACjB,uCAAuC;AAEzC,MAAI,aAAa,UAAU;AACzB,WAAO;EACT;AACA,MAAI,eAAe,UAAU;AAC3B,WAAO;EACT;AAEA,QAAM,sBAAsB,WAAW;AACvC,MAAI,iBAAiB,KAAK,MACvB,MAAM,SAAS,sBAAuB,KAAK,IAAI,WAAW,CAAC,CAAC;AAE/D,mBAAiB,KAAK,IAAI,GAAG,KAAK,IAAI,MAAM,QAAQ,cAAc,CAAC;AAEnE,MAAI,OACF,MAAM,MAAM,GAAG,cAAc,IAAI;AACnC,MAAI,WAAW,mBAAmB,IAAI;AACtC,SAAO,WAAW,YAAY,iBAAiB,GAAG;AAChD,UAAM,iBAAiB,WAAW,YAAY,KAAK,IAAI,UAAU,CAAC;AAClE,UAAM,YAAY,KAAK,IACrB,GACA,KAAK,MAAM,iBAAiB,aAAa,IAAI,CAAC;AAEhD,qBAAiB,KAAK,IAAI,GAAG,iBAAiB,SAAS;AACvD,WACE,MAAM,MAAM,GAAG,cAAc,IAAI;AACnC,eAAW,mBAAmB,IAAI;EACpC;AAEA,SAAO;AACT;AAEA,SAAS,4BACP,OACA,OAAoB,oBAAI,IAAG,GAC3B,QAAgB,GAAC;AAEjB,MAAI,SAAS,oCAAoC;AAC/C,WAAO;EACT;AAEA,MACE,UAAU,QACV,OAAO,UAAU,YACjB,OAAO,UAAU,WACjB;AACA,WAAO;EACT;AAEA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;EAC1C;AAEA,MAAI,SAAS,OAAO,UAAU,YAAY,UAAU,KAAK,GAAG;AAC1D,QAAI,KAAK,IAAI,KAAK,GAAG;AACnB,aAAO;IACT;AAEA,SAAK,IAAI,KAAK;AACd,QAAI;AACF,aAAO,4BAA4B,MAAM,OAAM,GAAI,MAAM,QAAQ,CAAC;IACpE,QAAQ;AACN,aAAO;IACT;AACE,WAAK,OAAO,KAAK;IACnB;EACF;AAEA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,QAAI,KAAK,IAAI,KAAK,GAAG;AACnB,aAAO;IACT;AAEA,SAAK,IAAI,KAAK;AACd,UAAM,YAAmC,CAAA;AACzC,QAAI;AACF,iBAAW,eAAe,OAAO;AAC/B,cAAM,kBAAkB,4BACtB,aACA,MACA,QAAQ,CAAC;AAEX,kBAAU,KACR,oBAAoB,iBAAiB,OAAO,eAAe;MAE/D;IACF;AACE,WAAK,OAAO,KAAK;IACnB;AAEA,WAAO;EACT;AAEA,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,QAAI,KAAK,IAAI,KAAK,GAAG;AACnB,aAAO;IACT;AAEA,SAAK,IAAI,KAAK;AACd,UAAM,YAAiD,CAAA;AACvD,QAAI;AACF,iBAAW,CAAC,KAAK,WAAW,KAAK,OAAO,QAAQ,KAAK,GAAG;AACtD,cAAM,kBAAkB,4BACtB,aACA,MACA,QAAQ,CAAC;AAEX,YAAI,oBAAoB,gBAAgB;AACtC,oBAAU,GAAG,IAAI;QACnB;MACF;IACF,QAAQ;AACN,aAAO;IACT;AACE,WAAK,OAAO,KAAK;IACnB;AAEA,WAAO;EACT;AAEA,SAAO;AACT;AAEA,SAAS,iBAAiB,OAAc;AACtC,MAAI,UAAU,MAAM;AAClB,WAAO;EACT;AAEA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,OAAO;EAChB;AAEA,MAAI;AACF,WAAO,MAAM,aAAa,QAAQ;EACpC,QAAQ;AACN,WAAO;EACT;AACF;AAEA,SAAS,iBAAiB,OAAc;AACtC,QAAM,WAAW,iBAAiB,KAAK;AACvC,MAAI,UAAU,IAAI,QAAQ;AAE1B,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,cAAU,IAAI,QAAQ,QAAQ,MAAM,MAAM;EAC5C,WAAW,YAAY,OAAO,KAAK,GAAG;AACpC,cAAU,IAAI,QAAQ,UAAU,MAAM,UAAU;EAClD,WAAW,iBAAiB,aAAa;AACvC,cAAU,IAAI,QAAQ,UAAU,MAAM,UAAU;EAClD,WAAW,iBAAiB,OAAO,iBAAiB,KAAK;AACvD,cAAU,IAAI,QAAQ,QAAQ,MAAM,IAAI;EAC1C,WAAW,cAAc,KAAK,GAAG;AAC/B,cAAU,IAAI,QAAQ,QAAQ,OAAO,KAAK,KAAK,EAAE,MAAM;EACzD;AAEA,MAAI,gBAAqD;IACvD,WAAW;IACX,eAAe;IACf;;AAGF,MAAI,mBAAmB,aAAa,KAAK,gCAAgC;AACvE,WAAO;EACT;AAEA,QAAM,gBAAgB,KAAK,IACzB,GACA,iCACE,mBAAmB;IACjB,WAAW;IACX,eAAe;IACf,SAAS;GACV,CAAC;AAEN,kBAAgB;IACd,WAAW;IACX,eAAe;IACf,SAAS,2BAA2B,SAAS,aAAa;;AAG5D,MAAI,mBAAmB,aAAa,KAAK,gCAAgC;AACvE,WAAO;EACT;AAEA,QAAM,aAAa,KAAK,IACtB,GACA,iCACE,mBAAmB;IACjB,WAAW;IACX,eAAe;IACf,SAAS,cAAc;GACxB,CAAC;AAEN,kBAAgB;IACd,WAAW;IACX,eAAe,2BAA2B,UAAU,UAAU;IAC9D,SAAS,cAAc;;AAGzB,MAAI,mBAAmB,aAAa,KAAK,gCAAgC;AACvE,WAAO;EACT;AAEA,QAAM,qBAAqB,KAAK,IAC9B,GACA,iCACE,mBAAmB;IACjB,WAAW;IACX,eAAe,cAAc;IAC7B,SAAS;GACV,CAAC;AAEN,SAAO;IACL,WAAW;IACX,eAAe,cAAc;IAC7B,SAAS,2BACP,cAAc,SACd,kBAAkB;;AAGxB;AAEA,SAAS,0BACP,OACA,UACA,QAAgB,GAAC;AAEjB,MAAI,SAAS,oCAAoC;AAC/C,WAAO,iBAAiB,KAAK;EAC/B;AAEA,MAAI,mBAAmB,KAAK,KAAK,UAAU;AACzC,WAAO;EACT;AAEA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,2BAA2B,OAAO,QAAQ;EACnD;AAEA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,yBAAyB,OAAO,UAAU,QAAQ,CAAC;EAC5D;AAEA,MAAI,cAAc,KAAK,GAAG;AACxB,WAAO,4BAA4B,OAAO,UAAU,QAAQ,CAAC;EAC/D;AAEA,SAAO,iBAAiB,KAAK;AAC/B;AAEA,SAAS,4BACP,OACA,UACA,QAAgB,GAAC;AAEjB,QAAM,YAAY,EAAE,GAAG,MAAK;AAC5B,MAAI,cAAc,mBAAmB,SAAS;AAE9C,SAAO,OAAO,KAAK,SAAS,EAAE,SAAS,KAAK,cAAc,UAAU;AAClE,QAAI;AACJ,QAAI,mBAAmB;AAEvB,eAAW,CAAC,KAAKC,MAAK,KAAK,OAAO,QAAQ,SAAS,GAAG;AACpD,YAAM,YAAY,mBAAmBA,MAAK;AAC1C,UAAI,YAAY,kBAAkB;AAChC,qBAAa;AACb,2BAAmB;MACrB;IACF;AAEA,QAAI,eAAe,QAAW;AAC5B;IACF;AAEA,UAAM,QAAQ,UAAU,UAAU;AAClC,UAAM,cAAc,KAAK,IACvB,GACA,YAAY,cAAc,iBAAiB;AAE7C,QAAI,gBAAgB,GAAG;AACrB,aAAO,UAAU,UAAU;AAC3B,oBAAc,mBAAmB,SAAS;AAC1C;IACF;AAEA,UAAM,iBAAiB,0BACrB,OACA,aACA,QAAQ,CAAC;AAEX,UAAM,qBAAqB,mBAAmB,cAAc;AAE5D,QAAI,mBAAmB,SAAS,sBAAsB,kBAAkB;AACtE,aAAO,UAAU,UAAU;IAC7B,OAAO;AACL,gBAAU,UAAU,IAAI;IAC1B;AAEA,kBAAc,mBAAmB,SAAS;EAC5C;AAEA,SAAO;AACT;AAEA,SAAS,yBACP,OACA,UACA,QAAgB,GAAC;AAEjB,QAAM,YAAY,CAAC,GAAG,KAAK;AAC3B,MAAI,cAAc,mBAAmB,SAAS;AAE9C,SAAO,UAAU,SAAS,KAAK,cAAc,UAAU;AACrD,QAAI,eAAe;AACnB,QAAI,mBAAmB;AAEvB,aAAS,QAAQ,GAAG,QAAQ,UAAU,QAAQ,SAAS,GAAG;AACxD,YAAM,YAAY,mBAAmB,UAAU,KAAK,CAAC;AACrD,UAAI,YAAY,kBAAkB;AAChC,uBAAe;AACf,2BAAmB;MACrB;IACF;AAEA,UAAM,QAAQ,UAAU,YAAY;AACpC,UAAM,cAAc,KAAK,IACvB,GACA,YAAY,cAAc,iBAAiB;AAE7C,QAAI,gBAAgB,GAAG;AACrB,gBAAU,OAAO,cAAc,CAAC;AAChC,oBAAc,mBAAmB,SAAS;AAC1C;IACF;AAEA,UAAM,iBAAiB,0BACrB,OACA,aACA,QAAQ,CAAC;AAEX,UAAM,qBAAqB,mBAAmB,cAAc;AAE5D,QAAI,mBAAmB,SAAS,sBAAsB,kBAAkB;AACtE,gBAAU,OAAO,cAAc,CAAC;IAClC,OAAO;AACL,gBAAU,YAAY,IAAI;IAC5B;AAEA,kBAAc,mBAAmB,SAAS;EAC5C;AAEA,SAAO;AACT;AAEA,SAAS,yBAAyB,OAAgB,UAAgB;AAChE,QAAM,QAAkD,CAAC,EAAE,OAAO,OAAO,EAAC,CAAE;AAC5E,QAAM,OAAO,oBAAI,IAAG;AAEpB,SAAO,MAAM,SAAS,GAAG;AACvB,UAAM,UAAU,MAAM,IAAG;AACzB,QAAI,CAAC,SAAS;AACZ;IACF;AAEA,QAAI,QAAQ,SAAS,UAAU;AAC7B,aAAO;IACT;AAEA,QAAI,CAAC,QAAQ,SAAS,OAAO,QAAQ,UAAU,UAAU;AACvD;IACF;AAEA,QAAI,KAAK,IAAI,QAAQ,KAAK,GAAG;AAC3B;IACF;AACA,SAAK,IAAI,QAAQ,KAAK;AAEtB,QAAI;AACF,UAAI,UAAU,QAAQ,KAAK,GAAG;AAC5B,cAAM,KAAK;UACT,OAAO,QAAQ,MAAM,OAAM;UAC3B,OAAO,QAAQ,QAAQ;SACxB;AACD;MACF;AAEA,YAAM,eAAe,MAAM,QAAQ,QAAQ,KAAK,IAC5C,QAAQ,QACR,OAAO,OAAO,QAAQ,KAAK;AAC/B,iBAAW,eAAe,cAAc;AACtC,cAAM,KAAK;UACT,OAAO;UACP,OAAO,QAAQ,QAAQ;SACxB;MACH;IACF,QAAQ;AACN,aAAO;IACT;EACF;AAEA,SAAO;AACT;AAEA,SAAS,uBAAuB,OAAc;AAC5C,MAAI,mBAAmB,KAAK,KAAK,gCAAgC;AAC/D,WAAO;EACT;AAEA,MAAI,yBAAyB,OAAO,kCAAkC,GAAG;AACvE,WAAO,iBAAiB,KAAK;EAC/B;AAEA,MAAI;AACF,UAAM,iBAAiB,4BAA4B,KAAK;AACxD,QAAI,mBAAmB,gBAAgB;AACrC,aAAO,iBAAiB,KAAK;IAC/B;AAEA,WAAO,0BACL,gBACA,8BAA8B;EAElC,QAAQ;AAGN,WAAO,iBAAiB,KAAK;EAC/B;AACF;AAEA,SAAS,kBACP,OAA8B;AAE9B,QAAM,QAAiC,CAAA;AAEvC,aAAW,OAAO,OAAO,KAAK,KAAK,GAAG;AACpC,QAAI;AACF,YAAM,GAAG,IAAI,MAAM,GAAG;IACxB,QAAQ;IAER;EACF;AAEA,SAAO;AACT;AASA,SAAS,uCACP,OAA0B;AAE1B,QAAM,cAAc,MAAM;AAC1B,QAAM,eAAe,MAAM;AAE3B,MAAI,CAAC,mBAAmB,WAAW,KAAK,CAAC,mBAAmB,YAAY,GAAG;AACzE,WAAO;EACT;AAEA,QAAM,UAA+C,CAAA;AACrD,MAAI,cAAc,MAAM,OAAO,GAAG;AAChC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,OAAO,GAAG;AACxD,YAAM,iBAAiB,4BAA4B,KAAK;AACxD,UAAI,mBAAmB,gBAAgB;AACrC,gBAAQ,GAAG,IAAI;MACjB;IACF;EACF;AAEA,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,QACE,QAAQ,kBACR,QAAQ,mBACR,QAAQ,aACR,UAAU,QACV;AACA;IACF;AACA,UAAM,iBAAiB,4BAA4B,KAAK;AACxD,QAAI,mBAAmB,gBAAgB;AACrC,cAAQ,GAAG,IAAI;IACjB;EACF;AAEA,SAAO;IACL,cAAc;IACd,eAAe;IACf,GAAI,OAAO,KAAK,OAAO,EAAE,SAAS,IAAI,EAAE,QAAO,IAAK,CAAA;;AAExD;AAOA,SAAS,gCACP,UAAiC;AAEjC,MAAI,oBAAoB;AACxB,MAAI,YAAY;AAEhB,aAAW,aAAa,CAAC,SAAS,QAAQ,GAAG;AAC3C,QAAI,EAAE,aAAa,WAAW;AAC5B;IACF;AAEA,QAAI;AACJ,QAAI;AACF,mBAAa,SAAS,SAAS;IACjC,QAAQ;AACN,UAAI,CAAC,WAAW;AACd,4BAAoB,kBAAkB,QAAQ;AAC9C,oBAAY;MACd;AAEA,aAAO,kBAAkB,SAAS;AAClC;IACF;AAEA,UAAM,iBAAiB,uBAAuB,UAAU;AACxD,QAAI,mBAAmB,YAAY;AACjC;IACF;AAEA,QAAI,CAAC,WAAW;AACd,0BAAoB,kBAAkB,QAAQ;AAC9C,kBAAY;IACd;AACA,sBAAkB,SAAS,IAAI;EACjC;AAEA,MACE,CAAC,qBAAqB,QAAQ,KAC9B,CAAC,sBAAsB,SAAS,KAAK,GACrC;AACA,WAAO,YAAY,oBAAoB;EACzC;AAEA,QAAM,iBAAiB,uCAAuC,SAAS,KAAK;AAC5E,MAAI,CAAC,gBAAgB;AACnB,QAAI,CAAC,WAAW;AACd,0BAAoB,kBAAkB,QAAQ;AAC9C,kBAAY;IACd;AAEA,WAAO,kBAAkB;AACzB,WAAO;EACT;AAEA,MAAI,mBAAmB,SAAS,OAAO;AACrC,WAAO,YAAY,oBAAoB;EACzC;AAEA,MAAI,CAAC,WAAW;AACd,wBAAoB,kBAAkB,QAAQ;EAChD;AACA,oBAAkB,QAAQ;AAC1B,SAAO;AACT;AAEA,SAAS,mCACP,aAAoC;AAEpC,MAAI,YAAY,WAAW,gBAAgB,CAACC,UAAS,YAAY,SAAS,GAAG;AAC3E,WAAO;EACT;AAEA,SAAO;IACL,GAAG;IACH,WAAW,gCAAgC,YAAY,SAAS;;AAEpE;AAKM,IAAO,wBAAP,MAA4B;EAChC;EAEA,YAAY,UAAiD,CAAA,GAAE;AAC7D,SAAK,WAAW;MACd,QAAQ,QAAQ,UAAU;MAC1B,cAAc,QAAQ,gBAAgB;MACtC,SAAS,QAAQ,WAAW;MAC5B,UAAU,QAAQ,YAAY;MAC9B,YAAY,QAAQ,cAAc;MAClC,WAAW,QAAQ,aAAa;MAChC,UAAU,QAAQ,YAAY;;EAElC;EAEA,MAAM,OACJ,OACA,QAAoB;AAEpB,UAAM,gBAAgB,KAAK,SAAS,UAAU,uBAAsB;AACpE,UAAM,aAAa,oBAAI,IAAG;AAE1B,eAAW,QAAQ,OAAO;AACxB,YAAM,SAAU,KAA4C;AAC5D,YAAM,OAAO,WAAW,IAAI,MAAM,KAAK,CAAA;AACvC,WAAK,KAAK,IAAI;AACd,iBAAW,IAAI,QAAQ,IAAI;IAC7B;AAEA,eAAW,CAAC,KAAK,YAAY,KAAK,WAAW,QAAO,GAAI;AAEtD,YAAM,SAAS,OAAO;AACtB,UAAI,CAAC,QAAQ;AACX,uBAAO,MACL,0EAA0E;AAE5E;MACF;AAEA,YAAM,eAAe,aAClB,IAAI,CAAC,UAAU,MAAM,OAAM,CAAE,EAC7B,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,EACvB,IAAI,CAAC,SACJA,UAAS,IAAI,IAAI,mCAAmC,IAAI,IAAI,IAAI;AAEpE,YAAM,UAAU,EAAE,MAAM,aAAY;AAEpC,UAAI,WAAW;AACf,UAAI,QAAQ,KAAK,SAAS;AAE1B,aAAO,WAAW,KAAK,SAAS,YAAY;AAC1C,YAAI;AACF,gBAAM,WAAW,MAAM,MAAM,KAAK,SAAS,UAAU;YACnD,QAAQ;YACR,SAAS;cACP,gBAAgB;cAChB,eAAe,UAAU,MAAM;cAC/B,eAAe;cACf,GAAG;;YAEL,MAAM,KAAK,UAAU,OAAO;YAC5B;WACD;AAED,cAAI,SAAS,IAAI;AACf,2BAAO,MAAM,YAAY,QAAQ,KAAK,MAAM,QAAQ;AACpD;UACF;AAEA,cAAI,SAAS,UAAU,OAAO,SAAS,SAAS,KAAK;AACnD,2BAAO,MACL,oCACE,SAAS,MACX,KAAK,MAAM,SAAS,KAAI,CAAE,EAAE;AAE9B;UACF;AAEA,yBAAO,KACL,qCAAqC,SAAS,MAAM,aAAa;QAErE,SAAS,OAAY;AACnB,yBAAO,MAAM,yCAAyC,KAAK;QAC7D;AAEA,YAAI,QAAQ,SAAS;AACnB,yBAAO,MAAM,0BAA0B;AACvC;QACF;AAEA;AACA,YAAI,YAAY,KAAK,SAAS,YAAY;AACxC;QACF;AAEA,cAAM,YAAY,QAAQ,KAAK,OAAM,IAAK,MAAM;AAChD,cAAM,iBAAiB,MAAM,eAAe,WAAW,MAAM;AAC7D,YAAI,CAAC,gBAAgB;AACnB,yBAAO,MAAM,0BAA0B;AACvC;QACF;AACA,gBAAQ,KAAK,IAAI,QAAQ,GAAG,KAAK,SAAS,QAAQ;MACpD;AAEA,UAAI,YAAY,KAAK,SAAS,YAAY;AACxC,uBAAO,MACL,0CACE,KAAK,SAAS,UAChB,WAAW;MAEf;IACF;EACF;;AAOI,SAAU,kCAA+B;AAC7C,QAAM,WAAW,IAAI,sBAAqB;AAC1C,QAAM,YAAY,IAAI,oBAAoB,QAAQ;AAClD,qBAAmB,CAAC,SAAS,CAAC;AAChC;;;OC3zBOC,aAAY;;;ACOZ,IAAM,qBAAoC,OAAO,oBAAoB;;;ADe5E,eAAsB,gCACpB,QAAqB;AAErB,QAAM,iBAAiB,SAAU,SAAoB,cAAc,CAAA,CAAE;AACrE,QAAM,WAAW,MAAM,eAAe,cAAc,OAAO,EAAE,OAAO,CAAA,EAAE,CAAE;AACxE,SAAO,SAAS;AAClB;AAEM,IAAO,6BAAP,MAAiC;;EAI5B,CAAC,kBAAkB,IAAI;EAEhC;EACA;EAEA,YAAY,UAA6C,CAAA,GAAE;AACzD,SAAK,UAAU,cAAc,OAAO;AACpC,SAAK,kBAAkB,QAAQ;EACjC;EAEA,IAAI,YAAS;AACX,WAAO,KAAK;EACd;EAEA,MAAM,eAAY;AAChB,QAAI,CAAC,KAAK,iBAAiB;AACzB,WAAK,kBAAkB,MAAM,gCAC3B,KAAK,OAAO;IAEhB;AAEA,WAAO,KAAK;EACd;EAEA,MAAM,SAAS,OAAc;AAC3B,UAAM,iBAAiB,MAAM,KAAK,aAAY;AAE9C,UAAM,eAAe,CAAC,SAA+C;AACnE,UAAI,KAAK,SAAS,aAAa,KAAK,SAAS,UAAU;AACrD,cAAM,UAAU;AAChB,eAAO;UACL;YACE,IAAI,KAAK;YACT,MAAM;YACN,MAAM;YACN,SAAS,8BAA8B,QAAQ,OAAO;;;MAG5D;AAEA,UAAI,KAAK,SAAS,aAAa,KAAK,SAAS,QAAQ;AACnD,cAAM,UAAU;AAChB,eAAO;UACL;YACE,IAAI,KAAK;YACT,MAAM;YACN,MAAM;YACN,UAAU,QAAQ,WAAW,CAAA,GAC1B,IAAI,CAAC,MAAK;AACT,kBAAI,EAAE,SAAS,cAAc;AAC3B,uBAAO,EAAE,MAAM,cAAc,MAAM,EAAE,KAAI;cAC3C,WAAW,EAAE,SAAS,eAAe;AACnC,oBAAI,EAAE,WAAW;AACf,yBAAO,EAAE,MAAM,eAAe,OAAO,EAAE,UAAS;gBAClD,WAAW,EAAE,SAAS;AACpB,yBAAO,EAAE,MAAM,eAAe,OAAO,EAAE,IAAI,EAAE,QAAO,EAAE;gBACxD;cACF,WAAW,EAAE,SAAS,cAAc;AAClC,oBAAI,EAAE,WAAW;AACf,wBAAM,WAA+B;oBACnC,MAAM;oBACN,MAAM,EAAE;;AAEV,sBAAI,EAAE,UAAU;AACd,6BAAS,WAAW,EAAE;kBACxB;AACA,yBAAO;gBACT;AACA,oBAAI,EAAE,UAAU;AACd,wBAAM,WAA+B;oBACnC,MAAM;oBACN,MAAM,EAAE;;AAEV,sBAAI,EAAE,UAAU;AACd,6BAAS,WAAW,EAAE;kBACxB;AACA,yBAAO;gBACT,WAAW,EAAE,SAAS;AACpB,wBAAM,WAA+B;oBACnC,MAAM;oBACN,MAAM,EAAE,IAAI,EAAE,QAAO;;AAEvB,sBAAI,EAAE,UAAU;AACd,6BAAS,WAAW,EAAE;kBACxB;AACA,yBAAO;gBACT;cACF;AAEA,qBAAO;YACT,CAAC,EACA,OAAO,CAAC,MAAM,MAAM,IAAI;;;MAGjC;AAEA,YAAM,cAAe,KAClB;AAEH,UAAI,0BAA0B,WAAW,GAAG;AAC1C,eAAO,oBAAoB,WAAW;MACxC;AAEA,aAAO,oBAAoB,CAAC,IAA2C,CAAC;IAC1E;AAEA,QAAI,UAAU,QAAW;AACvB,YAAM,QAA0B,CAAA;AAChC,YAAMC,YAAW,KAAK,QAAQ,cAAc,MAAM,KAAK,gBAAgB;QACrE,OAAO;OACR;AACD,uBAAiB,QAAQA,WAAU;AACjC,cAAM,KAAK,GAAG,aAAa,IAAI,CAAC;MAClC;AACA,aAAO;IACT;AAEA,QAAI,SAAS,GAAG;AACd,aAAO,CAAA;IACT;AAEA,UAAM,aAAiC,CAAA;AACvC,QAAI,QAAQ;AACZ,UAAM,WAAW,KAAK,QAAQ,cAAc,MAAM,KAAK,gBAAgB;MACrE;MACA,OAAO;KACR;AAED,qBAAiB,QAAQ,UAAU;AACjC,YAAM,QAAQ,aAAa,IAAI;AAC/B,UAAI,CAAC,MAAM,QAAQ;AACjB;MACF;AAEA,iBAAW,KAAK,KAAK;AACrB,eAAS,MAAM;AAEf,UAAI,SAAS,OAAO;AAClB;MACF;IACF;AAGA,UAAM,eAAiC,CAAA;AACvC,aAAS,QAAQ,WAAW,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG;AAC9D,mBAAa,KAAK,GAAG,WAAW,KAAK,CAAC;IACxC;AAEA,QAAI,aAAa,SAAS,OAAO;AAC/B,mBAAa,OAAO,GAAG,aAAa,SAAS,KAAK;IACpD;AAEA,WAAO;EACT;EAEA,gCAAgC,MAAoB;AAClD,WAAO,6BAA6B,IAAI;EAC1C;EAEA,yCAAsC;AACpC,WAAO;EACT;EAEA,MAAM,SAAS,OAAuB;AACpC,QAAI,CAAC,MAAM,QAAQ;AACjB;IACF;AAEA,UAAM,iBAAiB,MAAM,KAAK,aAAY;AAC9C,UAAM,kBAAkB,6CAA6C,KAAK;AAC1E,UAAM,iBAAiB,qCACrB,cAAc,eAAe,CAAC;AAEhC,QAAI,CAAC,eAAe,QAAQ;AAC1B;IACF;AACA,UAAM,KAAK,QAAQ,cAAc,MAAM,OAAO,gBAAgB;MAC5D,OAAO;KACR;EACH;EAEA,MAAM,UAAO;AACX,UAAM,iBAAiB,MAAM,KAAK,aAAY;AAC9C,UAAM,CAAC,MAAM,IAAI,MAAM,KAAK,SAAS,CAAC;AACtC,QAAI,CAAC,QAAQ;AACX,aAAO;IACT;AAEA,UAAM,SAAU,OAA2B;AAC3C,QAAI,QAAQ;AACV,YAAM,KAAK,QAAQ,cAAc,MAAM,OAAO,QAAQ;QACpD,iBAAiB;OAClB;IACH;AAEA,WAAO;EACT;EAEA,MAAM,eAAY;AAChB,QAAI,CAAC,KAAK,iBAAiB;AACzB;IACF;AAEA,UAAM,KAAK,QAAQ,cAAc,OAAO,KAAK,eAAe;AAC5D,SAAK,kBAAkB;EACzB;;AAOF,SAAS,6CACP,OAAuB;AAEvB,SAAO,MAAM,IAAI,CAAC,SAAQ;AACxB,QAAI,MAAM,QAAQ,IAAI,KAAK,SAAS,QAAQ,OAAO,SAAS,UAAU;AACpE,aAAO;IACT;AAEA,UAAM,OAAO,EAAE,GAAI,KAAgC;AACnD,UAAM,eAAgB,KAAoC;AAE1D,QACE,gBACA,OAAO,iBAAiB,YACxB,CAAC,MAAM,QAAQ,YAAY,GAC3B;AACA,YAAM,QAAQ;AACd,YAAM,EAAE,OAAO,QAAQ,GAAG,OAAM,IAAK;AACpC,WAAiC,eAChC,OAAO,KAAK,MAAM,EAAE,SAAS,IAAI,SAAS;IAC9C;AACA,WAAO;EACT,CAAC;AACH;AAEA,SAAS,8BACP,SAA0C;AAE1C,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;EACT;AAEA,MAAI,CAAC,MAAM,QAAQ,OAAO,GAAG;AAC3B,WAAO;EACT;AAEA,SAAO,QACJ,IAAI,CAAC,SACJ,KAAK,SAAS,gBAAgB,KAAK,SAAS,SAAS,KAAK,OAAO,IAAI,EAEtE,OAAO,CAAC,SAAyB,SAAS,IAAI,EAC9C,KAAK,IAAI;AACd;AAEA,SAAS,qCACP,OAA2C;AAE3C,SAAO,MAAM,QAAQ,CAAC,SAAQ;AAC5B,QAAI,MAAM,QAAQ,IAAI,KAAK,SAAS,QAAQ,OAAO,SAAS,UAAU;AACpE,aAAO,CAAC,IAAI;IACd;AACA,UAAM,SAAS;AACf,QAAI,6BAA6B,MAAM,GAAG;AACxC,aAAO,CAAA;IACT;AACA,UAAM,EACJ,cAAc,eACd,eAAe,gBACf,GAAG,KAAI,IACL;AACJ,QAAI,KAAK,SAAS,aAAa;AAC7B,aAAO,KAAK;IACd;AACA,WAAO,CAAC,IAAqD;EAC/D,CAAC;AACH;AAEA,SAAS,6BAA6B,MAA6B;AACjE,SACE,KAAK,SAAS,eACd,OAAO,KAAK,OAAO,YACnB,OAAO,KAAK,sBAAsB;AAEtC;AAEA,SAAS,6BAA6B,MAAoB;AACxD,MAAI,MAAM,QAAQ,IAAI,KAAK,SAAS,QAAQ,OAAO,SAAS,UAAU;AACpE,WAAO;EACT;AAEA,QAAM,SAAS;AACf,MAAI,OAAO,SAAS,aAAa,OAAO,SAAS,aAAa;AAC5D,WAAO;EACT;AAEA,QAAM,EACJ,IAAI,KACJ,cAAc,eACd,eAAe,gBACf,GAAG,KAAI,IACL;AACJ,SAAO;AACT;AAEA,IAAM,sBAAsB,oBAAI,IAAI;EAClC;EACA;EACA;EACA;CACD;AAED,SAAS,SAAS,OAAc;AAC9B,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAGA,SAAS,0BACP,OAAc;AAEd,MAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,GAAG;AAC/C,WAAO;EACT;AAEA,SAAO,MAAM,MAAM,CAAC,UAAS;AAC3B,QAAI,CAAC,SAAS,KAAK,GAAG;AACpB,aAAO;IACT;AACA,UAAM,OAAQ,MAA6B;AAC3C,QAAI,OAAO,SAAS,UAAU;AAC5B,aAAO;IACT;AAEA,QAAI,oBAAoB,IAAI,IAAI,GAAG;AACjC,aAAO;IACT;AAGA,WAAO,CAAC,KAAK,WAAW,QAAQ;EAClC,CAAC;AACH;AAEA,SAAS,cAAc,SAA0C;AAC/D,MAAI,QAAQ,QAAQ;AAClB,WAAO,QAAQ;EACjB;AAEA,SACG,uBAAsB,KACvB,IAAIC,QAAO;IACT,QAAQ,QAAQ,UAAU,oBAAmB;IAC7C,SAAS,QAAQ;IACjB,cAAc,QAAQ;IACtB,SAAS,QAAQ;GAClB;AAEL;;;OEvYOC,aAAY;AAsBnB,IAAM,+BAA+B;AACrC,IAAMC,UAAS,UAAU,iCAAiC;AAuFpD,IAAO,mCAAP,MAAuC;EAKlC,CAAC,kBAAkB,IAAI;EAEf;EACA;EACA;EACA;EACT;EACA;EACS;EAGT;EACA;EAER,YAAY,SAAgD;AAC1D,SAAK,SAASC,eAAc,OAAO;AACnC,QAAI,qCAAqC,QAAQ,iBAAiB,GAAG;AACnE,YAAM,IAAI,UACR,wGAAwG;IAE5G;AACA,SAAK,oBAAoB,QAAQ,qBAAqB,IAAI,cAAa;AACvE,UAAM,SAAS,QAAQ,SAAS,sBAAsB,KAAI;AAE1D,kDAA8C,KAAK;AACnD,SAAK,QAAQ;AAEb,SAAK,iBAAiB,QAAQ,kBAAkB;AAChD,SAAK,0BACH,QAAQ,2BAA2B;AACrC,SAAK,2BAA2B;AAChC,SAAK,eAAe;AACpB,SAAK,YAAY;EACnB;EAEA,MAAM,cACJ,OAAsC,CAAA,GAAE;AAExC,SAAK,aAAa,KAAK,cAAc,KAAK,cAAc;AACxD,QAAI,KAAK,UAAU,QAAW;AAC5B,WAAK,YAAY,KAAK;IACxB;AACA,UAAM,gBAAgB,KAAK,kBAAkB,KAAK;AAClD,UAAM,eAAe,sBAAsB;MACzC;MACA,YAAY,KAAK;MACjB,OAAO,KAAK,SAAS,KAAK;KAC3B;AAED,QAAI,iBAAiB,0BAA0B,CAAC,KAAK,YAAY;AAC/D,YAAM,IAAI,UACR,+IAA+I;IAEnJ;AAEA,UAAM,EAAE,0BAA0B,aAAY,IAC5C,MAAM,KAAK,2BAA0B;AACvC,UAAM,0BACJ,KAAK,UAAU,OACX,OACA,MAAM,KAAK,wBAAwB;MACjC,YAAY,KAAK;MACjB,gBAAgB;MAChB;MACA;KACD;AACP,QAAI,CAAC,yBAAyB;AAC5B,MAAAD,QAAO,MAAM,0BAA0B;QACrC,YAAY,KAAK;QACjB,gBAAgB;OACjB;AACD,aAAO;IACT;AAEA,IAAAA,QAAO,MAAM,qBAAqB;MAChC,YAAY,KAAK;MACjB,OAAO,KAAK;MACZ,gBAAgB;KACjB;AAED,UAAM,iBAAyD;MAC7D,OAAO,KAAK;;AAEd,QAAI,iBAAiB,wBAAwB;AAC3C,qBAAe,uBAAuB,KAAK;IAC7C,OAAO;AACL,qBAAe,QAAQ,cAAc,YAAY;IACnD;AAEA,UAAM,YAAY,MAAM,KAAK,OAAO,UAAU,QAAQ,cAAc;AAEpE,UAAM,cAAc,+BAA+B,UAAU,UAAU,CAAA,CAAE;AACzE,UAAM,gBAAgB,MAAM,KAAK,6BAA4B;AAC7D,UAAM,KAAK,8BAA8B;MACvC;MACA;KACD;AACD,SAAK,2BAA2B,+BAA+B,WAAW;AAC1E,SAAK,eAAe;AAEpB,IAAAA,QAAO,MAAM,oBAAoB;MAC/B,YAAY,KAAK;MACjB,gBAAgB;MAChB,iBAAiB,YAAY;MAC7B,gBAAgB,KAAK,yBAAyB;KAC/C;AAED,WAAO;MACL,OAAO,eAAe,UAAU,KAAK;;EAEzC;EAEA,MAAM,eAAY;AAChB,WAAO,KAAK,kBAAkB,aAAY;EAC5C;EAEA,MAAM,SAAS,OAAc;AAC3B,WAAO,KAAK,kBAAkB,SAAS,KAAK;EAC9C;EAEA,MAAM,SAAS,OAAuB;AACpC,QAAI,MAAM,WAAW,GAAG;AACtB;IACF;AAEA,UAAM,KAAK,kBAAkB,SAAS,KAAK;AAC3C,QAAI,KAAK,0BAA0B;AACjC,YAAM,aAAa,+BAA+B,KAAK;AACvD,UAAI,WAAW,SAAS,GAAG;AACzB,aAAK,2BAA2B;UAC9B,GAAG,KAAK;UACR,GAAG;;MAEP;IACF;AACA,QAAI,KAAK,cAAc;AACrB,WAAK,eAAe,CAAC,GAAG,KAAK,cAAc,GAAG,KAAK;IACrD;EACF;EAEA,MAAM,UAAO;AACX,UAAM,SAAS,MAAM,KAAK,kBAAkB,QAAO;AACnD,QAAI,CAAC,QAAQ;AACX,aAAO;IACT;AACA,QAAI,KAAK,cAAc;AACrB,YAAM,QAAQ,KAAK,aAAa,YAAY,MAAM;AAClD,UAAI,SAAS,GAAG;AACd,aAAK,aAAa,OAAO,OAAO,CAAC;MACnC,OAAO;AACL,aAAK,eAAe,MAAM,KAAK,kBAAkB,SAAQ;MAC3D;IACF;AACA,QAAI,KAAK,0BAA0B;AACjC,YAAM,cAAc,+BAA+B,CAAC,MAAM,CAAC,EAAE,SAAS;AACtE,UAAI,aAAa;AACf,cAAM,QAAQ,KAAK,yBAAyB,QAAQ,MAAM;AAC1D,YAAI,SAAS,GAAG;AACd,eAAK,yBAAyB,OAAO,OAAO,CAAC;QAC/C,OAAO;AAEL,eAAK,2BAA2B,+BAC9B,MAAM,KAAK,kBAAkB,SAAQ,CAAE;QAE3C;MACF;IACF;AACA,WAAO;EACT;EAEA,MAAM,eAAY;AAChB,UAAM,KAAK,kBAAkB,aAAY;AACzC,SAAK,2BAA2B,CAAA;AAChC,SAAK,eAAe,CAAA;EACtB;EAEQ,MAAM,+BAA4B;AACxC,WAAO,KAAK,kBAAkB,SAAQ;EACxC;EAEQ,MAAM,8BAA8B,EAC1C,aACA,cAAa,GAId;AACC,QAAI;AACF,YAAM,KAAK,kBAAkB,aAAY;IAC3C,SAAS,OAAO;AACd,YAAM,KAAK,8CACT,eACA,KAAK;AAEP,YAAM;IACR;AAEA,QAAI;AACF,UAAI,YAAY,SAAS,GAAG;AAC1B,cAAM,KAAK,kBAAkB,SAAS,WAAW;MACnD;IACF,SAAS,OAAO;AACd,YAAM,KAAK,8BAA8B,eAAe,KAAK;AAC7D,YAAM;IACR;EACF;EAEQ,MAAM,8CACZ,eACA,OAAc;AAEd,QAAI;AACJ,QAAI;AACF,qBAAe,MAAM,KAAK,6BAA4B;IACxD,SAAS,iBAAiB;AACxB,MAAAA,QAAO,KACL,gFACA,eAAe;AAEjB;IACF;AAEA,QAAI,mBAAmB,cAAc,aAAa,GAAG;AACnD;IACF;AAEA,UAAM,KAAK,8BAA8B,eAAe,OAAO;MAC7D,sBAAsB,aAAa;KACpC;EACH;EAEQ,MAAM,8BACZ,eACA,OACA,UAGI,CAAA,GAAE;AAEN,QAAI;AACF,UAAI,QAAQ,yBAAyB,QAAW;AAC9C,iBAAS,IAAI,GAAG,IAAI,QAAQ,sBAAsB,KAAK,GAAG;AACxD,gBAAM,SAAS,MAAM,KAAK,kBAAkB,QAAO;AACnD,cAAI,CAAC,QAAQ;AACX;UACF;QACF;MACF,WAAW,QAAQ,uBAAuB,OAAO;AAC/C,cAAM,KAAK,kBAAkB,aAAY;MAC3C;AACA,UAAI,cAAc,SAAS,GAAG;AAC5B,cAAM,KAAK,kBAAkB,SAAS,aAAa;MACrD;IACF,SAAS,cAAc;AACrB,MAAAA,QAAO,KACL,0EACA,YAAY;AAEd;IACF;AAEA,IAAAA,QAAO,KACL,0EACA,KAAK;EAET;EAEQ,MAAM,6BAA0B;AAItC,QAAI,KAAK,4BAA4B,KAAK,cAAc;AACtD,MAAAA,QAAO,MAAM,yBAAyB;QACpC,gBAAgB,KAAK,yBAAyB;OAC/C;AACD,aAAO;QACL,0BAA0B,CAAC,GAAG,KAAK,wBAAwB;QAC3D,cAAc,CAAC,GAAG,KAAK,YAAY;;IAEvC;AACA,UAAM,UAAU,MAAM,KAAK,kBAAkB,SAAQ;AACrD,UAAM,uBAAuB,+BAA+B,OAAO;AACnE,SAAK,2BAA2B;AAChC,SAAK,eAAe;AACpB,IAAAA,QAAO,MAAM,8BAA8B;MACzC,eAAe,QAAQ;MACvB,gBAAgB,qBAAqB;KACtC;AACD,WAAO;MACL,0BAA0B,CAAC,GAAG,oBAAoB;MAClD,cAAc,CAAC,GAAG,OAAO;;EAE7B;;AAKF,SAAS,sBAAsB,SAI9B;AACC,QAAM,EAAE,eAAe,YAAY,MAAK,IAAK;AAC7C,MAAI,kBAAkB,QAAQ;AAC5B,WAAO;EACT;AACA,MAAI,UAAU,OAAO;AACnB,WAAO;EACT;AACA,MAAI,CAAC,YAAY;AACf,WAAO;EACT;AACA,SAAO;AACT;AAEA,SAASC,eACP,SAAgD;AAEhD,MAAI,QAAQ,QAAQ;AAClB,WAAO,QAAQ;EACjB;AAEA,QAAM,gBAAgB,uBAAsB;AAC5C,MAAI,eAAe;AACjB,WAAO;EACT;AAEA,SAAO,IAAIC,QAAM;AACnB;AAEA,SAAS,+BAA+B,EACtC,yBAAwB,GACiB;AACzC,SAAO,yBAAyB,UAAU;AAC5C;AAEA,SAAS,+BACP,OAAuB;AAEvB,SAAO,MAAM,OAAO,CAAC,SAAQ;AAC3B,QAAI,KAAK,SAAS,cAAc;AAC9B,aAAO;IACT;AACA,WAAO,EAAE,KAAK,SAAS,aAAa,KAAK,SAAS;EACpD,CAAC;AACH;AAEA,SAAS,8CAA8C,OAAa;AAClE,MAAI,CAAC,kBAAkB,KAAK,GAAG;AAC7B,UAAM,IAAI,MACR,sDAAsD,KAAK,UAAU,KAAK,CAAC,EAAE;EAEjF;AACF;AAEA,SAAS,kBAAkB,OAAa;AACtC,QAAM,UAAU,MAAM,KAAI;AAC1B,MAAI,CAAC,SAAS;AACZ,WAAO;EACT;AAIA,QAAM,wBAAwB,QAAQ,WAAW,KAAK,IAClD,QAAQ,MAAM,MAAM,MAAM,IAC1B;AACJ,QAAM,OAAO,sBAAsB,MAAM,KAAK,CAAC,EAAE,CAAC;AAGlD,MAAI,KAAK,WAAW,MAAM,GAAG;AAC3B,WAAO;EACT;AAEA,MAAI,mBAAmB,KAAK,IAAI,GAAG;AACjC,WAAO;EACT;AAEA,SAAO;AACT;AAEA,SAAS,eACP,OAAiD;AAEjD,SAAO,IAAI,aAAa;IACtB,aAAa,OAAO,gBAAgB;IACpC,cAAc,OAAO,iBAAiB;IACtC,aAAa,OAAO,gBAAgB;IACpC,oBAAoB,EAAE,GAAG,OAAO,qBAAoB;IACpD,qBAAqB,EAAE,GAAG,OAAO,sBAAqB;IACtD,UAAU;GACX;AACH;AAMA,SAAS,+BACP,OAA0C;AAE1C,SAAO,MAAM,QAAQ,CAAC,SAAQ;AAC5B,QAAI,yBAAyB,IAAI,GAAG;AAClC,aAAO,CAAC,gCAAgC,IAAI,CAAC;IAC/C;AAEA,WAAO,CAAC,IAAsB;EAChC,CAAC;AACH;AAEA,SAAS,yBACP,MAA0B;AAE1B,SAAO,KAAK,SAAS,aAAa,KAAK,SAAS;AAClD;AAEA,SAAS,gCACP,MAA+C;AAE/C,SAAO;IACL,IAAK,KAAyB;IAC9B,MAAM;IACN,MAAM;IACN,SAAS,KAAK,QAAQ,IAAI,CAAC,YAAW;AACpC,UAAI,QAAQ,SAAS,cAAc;AACjC,eAAO;UACL,MAAM;UACN,MAAM,QAAQ;;MAElB;AAEA,UAAI,QAAQ,SAAS,eAAe;AAClC,YACE,OAAO,QAAQ,cAAc,YAC7B,QAAQ,UAAU,SAAS,GAC3B;AACA,iBAAO;YACL,MAAM;YACN,OAAO,QAAQ;YACf,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAM,IAAK,CAAA;;QAEtD;AACA,YAAI,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,SAAS,GAAG;AACrE,iBAAO;YACL,MAAM;YACN,OAAO,EAAE,IAAI,QAAQ,QAAO;YAC5B,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAM,IAAK,CAAA;;QAEtD;AACA,cAAM,IAAI,UACR,2DAA2D;MAE/D;AAEA,UAAI,QAAQ,SAAS,cAAc;AACjC,YACE,OAAO,QAAQ,cAAc,YAC7B,QAAQ,UAAU,SAAS,GAC3B;AACA,iBAAO;YACL,MAAM;YACN,MAAM,QAAQ;YACd,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAQ,IAAK,CAAA;;QAE5D;AACA,YACE,OAAO,QAAQ,aAAa,YAC5B,QAAQ,SAAS,SAAS,GAC1B;AACA,iBAAO;YACL,MAAM;YACN,MAAM,QAAQ;YACd,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAQ,IAAK,CAAA;;QAE5D;AACA,YAAI,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,SAAS,GAAG;AACrE,iBAAO;YACL,MAAM;YACN,MAAM,EAAE,IAAI,QAAQ,QAAO;YAC3B,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAQ,IAAK,CAAA;;QAE5D;AACA,cAAM,IAAI,UACR,qEAAqE;MAEzE;AAEA,YAAM,IAAI,UACR,gDAAgD,KAAK,UAAU,OAAO,CAAC,EAAE;IAE7E,CAAC;;AAEL;AAEA,SAAS,qCACP,mBAAsC;AAEtC,SACE,CAAC,CAAC,qBACF,OAAO,sBAAsB,YAC7B,sBAAsB,qBACrB,kBACC,kBAAkB,MACd;AAEV;AAEA,SAAS,mBACP,MACA,OAAuB;AAEvB,SAAO,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,KAAK;AACtD;;;AC/mBO,IAAMC,YAAW;EACtB,QAAQ;EACR,WAAW;EACX,YAAY;IACV,2BAA2B;IAC3B,uBAAuB;;;AAI3B,IAAAC,oBAAeD;;;AC8SR,IAAME,WAAU;EACrB,cAAc,qBAAqBC,kBAAS,OAAO;EACnD,uBAAuB,qBAAqBA,kBAAS,OAAO;;AAMvD,IAAM,iBAAiB,qBAAqBA,kBAAS,OAAO;;;AChU5D,IAAM,iBAAiB,iBAAE,OAAO;EACrC,QAAQ,iBAAE,OAAM;CACjB;AAEM,IAAM,4BAA4B,iBAAE,mBAAmB,QAAQ;EACpE,iBAAE,OAAO;IACP,QAAQ,iBAAE,OAAM;IAChB,gBAAgB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;IAC9C,MAAM,iBAAE,QAAQ,SAAS;IACzB,MAAM,iBAAE,QAAQ,QAAQ;IACxB,SAAS,iBAAE,MACT,iBAAE,OAAO,EAAE,MAAM,iBAAE,QAAQ,YAAY,GAAG,MAAM,iBAAE,OAAM,EAAE,CAAE,CAAC;GAEhE;EACD,iBAAE,OAAO;IACP,QAAQ,iBAAE,OAAM;IAChB,gBAAgB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;IAC9C,MAAM,iBAAE,QAAQ,SAAS;IACzB,MAAM,iBAAE,QAAQ,MAAM;IACtB,QAAQ,iBAAE,KAAK,CAAC,eAAe,WAAW,CAAC;IAC3C,SAAS,iBAAE,MACT,iBAAE,OAAO,EAAE,MAAM,iBAAE,QAAQ,YAAY,GAAG,MAAM,iBAAE,OAAM,EAAE,CAAE,EAAE,GAC5D,iBAAE,OAAO;MACP,MAAM,iBAAE,QAAQ,aAAa;MAC7B,OAAO,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;MACrC,YAAY,iBAAE,OAAM,EAAG,SAAQ;KAChC,CAAC,CACH;GAEJ;EACD,iBAAE,OAAO;IACP,QAAQ,iBAAE,OAAM;IAChB,gBAAgB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;IAC9C,MAAM,iBAAE,QAAQ,SAAS;IACzB,MAAM,iBAAE,QAAQ,WAAW;IAC3B,QAAQ,iBAAE,KAAK,CAAC,eAAe,aAAa,YAAY,CAAC;IACzD,SAAS,iBAAE,MACT,iBAAE,OAAO,EAAE,MAAM,iBAAE,QAAQ,aAAa,GAAG,MAAM,iBAAE,OAAM,EAAE,CAAE,EAAE,GAC7D,iBAAE,OAAO;MACP,MAAM,iBAAE,QAAQ,cAAc;MAC9B,OAAO,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;MACrC,YAAY,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;KAC3C,CAAC,CACH;GAEJ;CACF;AAEM,IAAM,uBAAuB,iBAAE,OAAO;EAC3C,QAAQ,iBAAE,OAAM;EAChB,gBAAgB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EAC9C,MAAM,iBAAE,QAAQ,eAAe;EAC/B,QAAQ,iBAAE,KAAK,CAAC,eAAe,aAAa,YAAY,CAAC;EACzD,WAAW,iBAAE,OAAM;EACnB,MAAM,iBAAE,OAAM;EACd,QAAQ,iBAAE,OAAM,EAAG,SAAQ;CAC5B;AAEM,IAAM,sBAAsB,iBAAE,OAAO;EAC1C,QAAQ,iBAAE,OAAM;EAChB,gBAAgB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EAC9C,MAAM,iBAAE,KAAK,CAAC,YAAY,eAAe,CAAC;EAC1C,QAAQ,iBAAE,KAAK,CAAC,eAAe,aAAa,YAAY,CAAC;EACzD,WAAW,iBAAE,OAAM;EACnB,MAAM,iBAAE,OAAM;EACd,QAAQ,iBAAE,OAAM,EAAG,SAAQ;CAC5B;AAEM,IAAM,qCAAqC,iBAAE,OAAO;EACzD,QAAQ,iBAAE,OAAM;EAChB,MAAM,iBAAE,QAAQ,sBAAsB;EACtC,aAAa,iBAAE,OAAM;EACrB,MAAM,iBAAE,OAAM;EACd,WAAW,iBAAE,OAAO,iBAAE,OAAM,GAAI,iBAAE,IAAG,CAAE;EACvC,UAAU,iBAAE,QAAO,EAAG,SAAQ,EAAG,SAAQ;CAC1C;;;AC3ED,IAAMC,UAAS,UAAU,wBAAwB;;;ACK1C,IAAM,mBAAmB,iBAAE,OAAO;EACvC,IAAI,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EAClC,iBAAiB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EAC/C,mBAAmB,iBAAE,OAAM,EAAG,GAAG,iBAAE,QAAQ,KAAK,CAAC,EAAE,SAAQ,EAAG,SAAQ;EACtE,UAAU,iBAAE,OAAO,iBAAE,OAAM,GAAI,iBAAE,IAAG,CAAE,EAAE,SAAQ,EAAG,SAAQ;;EAE3D,mBAAmB,iBAAE,MAAM,iBAAE,OAAM,CAAE,EAAE,SAAQ,EAAG,SAAQ;EAC1D,QAAQ,iBAAE,QAAQ,mBAAmB,EAAE,SAAQ,EAAG,SAAQ;EAC1D,QAAQ,iBAAE,MAAM,iBAAE,IAAG,CAAE,EAAE,SAAQ,EAAG,SAAQ;;EAE5C,OAAO,iBACJ,OAAO;IACN,QAAQ,iBACL,OAAO;MACN,QAAQ,iBAAE,IAAG,EAAG,SAAQ,EAAG,SAAQ;MACnC,OAAO,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;KACtC,EACA,SAAQ,EACR,SAAQ;GACZ,EACA,SAAQ,EACR,SAAQ;EACX,QAAQ,iBACL,KAAK,CAAC,aAAa,cAAc,UAAU,aAAa,aAAa,CAAC,EACtE,SAAQ,EACR,SAAQ;EACX,gBAAgB,iBAAE,OAAO,iBAAE,OAAM,GAAI,iBAAE,IAAG,CAAE,EAAE,SAAQ,EAAG,SAAQ;EACjE,OAAO,iBACJ,OAAO;IACN,cAAc,iBAAE,OAAM,EAAG,SAAQ;IACjC,qBAAqB,iBAAE,OAAO,iBAAE,OAAM,GAAI,iBAAE,IAAG,CAAE,EAAE,SAAQ,EAAG,SAAQ;IACtE,eAAe,iBAAE,OAAM,EAAG,SAAQ;IAClC,sBAAsB,iBAAE,OAAO,iBAAE,OAAM,GAAI,iBAAE,IAAG,CAAE,EAAE,SAAQ,EAAG,SAAQ;GACxE,EACA,SAAQ,EACR,SAAQ;CACZ;AAGM,IAAM,gCAAgC,iBAAE,OAAO;EACpD,IAAI,iBAAE,OAAM,EAAG,SAAQ;EACvB,OAAO,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EACrC,MAAM,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EACpC,YAAY,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EAC1C,MAAM,iBAAE,MAAM;IACZ,iBAAE,QAAQ,YAAY;IACtB,iBAAE,QAAQ,aAAa;IACvB,iBAAE,QAAQ,gBAAgB;IAC1B,iBAAE,QAAQ,aAAa;IACvB,iBAAE,QAAQ,OAAO;IACjB,iBAAE,QAAQ,cAAc;GACzB;CACF;AAEM,IAAM,yBAAyB,iBACnC,OAAO;EACN,IAAI,iBAAE,OAAM,EAAG,SAAQ;EACvB,WAAW,iBAAE,OAAM,EAAG,SAAQ;EAC9B,SAAS,iBAAE,OAAM,EAAG,SAAQ;EAC5B,SAAS,iBAAE,MAAM,6BAA6B,EAAE,SAAQ;EACxD,MAAM,iBAAE,OAAM,EAAG,SAAQ;EACzB,QAAQ,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EACtC,MAAM,iBAAE,KAAK,CAAC,QAAQ,aAAa,QAAQ,CAAC,EAAE,SAAQ;EACtD,QAAQ,iBAAE,KAAK,CAAC,aAAa,cAAc,aAAa,CAAC,EAAE,SAAQ;EACnE,MAAM,iBACH,KAAK;IACJ;IACA;IACA;IACA;IACA;IACA;IACA;IACA;GACD,EACA,SAAQ;EACX,qBAAqB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EACnD,SAAS,iBAAE,QAAO,EAAG,SAAQ,EAAG,SAAQ;EACxC,QAAQ,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EACtC,cAAc,iBAAE,OAAM,EAAG,SAAQ;EACjC,OAAO,iBAAE,IAAG,EAAG,SAAQ,EAAG,SAAQ;EAClC,OAAO,iBACJ,MACC,iBACG,OAAO;IACN,MAAM,iBAAE,OAAM;IACd,aAAa,iBAAE,OAAM;IACrB,cAAc,iBAAE,OAAO,iBAAE,OAAM,GAAI,iBAAE,IAAG,CAAE,EAAE,SAAQ;GACrD,EACA,YAAW,CAAE,EAEjB,SAAQ;CACZ,EACA,YAAW;AAEP,IAAM,iCAAiC,iBAAE,OAAO;EACrD,MAAM,iBAAE,QAAQ,sBAAsB;EACtC,UAAU,iBAAE,OAAM;EAClB,cAAc,iBAAE,OAAO;IACrB,IAAI,iBAAE,OAAM,EAAG,SAAQ;IACvB,QAAQ,iBAAE,QAAQ,uBAAuB,EAAE,SAAQ;GACpD;CACF;AAGM,IAAM,mCAAmC,iBAAE,OAAO;EACvD,MAAM,iBAAE,QAAQ,yBAAyB;EACzC,UAAU,iBAAE,OAAM;EAClB,MAAM;EACN,kBAAkB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;CACjD;AAGM,IAAM,kCAAkC,iBAAE,OAAO;EACtD,MAAM,iBAAE,QAAQ,wBAAwB;EACxC,UAAU,iBAAE,OAAM;EAClB,MAAM;EACN,kBAAkB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;CACjD;AAEM,IAAM,qCAAqC,iBAAE,OAAO;EACzD,MAAM,iBAAE,QAAQ,2BAA2B;EAC3C,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;CAClB;AAEM,IAAM,8DACX,iBAAE,OAAO;EACP,MAAM,iBAAE,QAAQ,uDAAuD;EACvE,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,YAAY,iBAAE,OAAM;EACpB,UAAU,iBAAE,MAAM,iBAAE,IAAG,CAAE,EAAE,SAAQ,EAAG,SAAQ;EAC9C,OAAO,iBACJ,OAAO;IACN,MAAM,iBAAE,QAAQ,QAAQ;IACxB,cAAc,iBAAE,OAAM;IACtB,cAAc,iBAAE,OAAM;IACtB,qBAAqB,iBAAE,OAAO;MAC5B,aAAa,iBAAE,OAAM;MACrB,cAAc,iBAAE,OAAM;KACvB;IACD,eAAe,iBAAE,OAAM;GACxB,EACA,SAAQ;CACZ;AAEI,IAAM,0DAA0D,iBAAE,OACvE;EACE,MAAM,iBAAE,QAAQ,mDAAmD;EACnE,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM,EAAG,SAAQ;EAClC,OAAO,iBAAE,OAAM,EAAG,SAAQ;EAC1B,UAAU,iBAAE,MAAM,iBAAE,IAAG,CAAE,EAAE,SAAQ,EAAG,SAAQ;CAC/C;AAGI,IAAM,2DACX,iBAAE,OAAO;EACP,MAAM,iBAAE,QAAQ,oDAAoD;EACpE,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,OAAO,iBAAE,OAAO;IACd,MAAM,iBAAE,OAAM,EAAG,SAAQ;IACzB,SAAS,iBAAE,OAAM,EAAG,SAAQ;IAC5B,OAAO,iBAAE,OAAM,EAAG,SAAQ;IAC1B,MAAM,iBAAE,OAAM,EAAG,SAAQ;GAC1B;CACF;AAEI,IAAM,uCAAuC,iBAAE,OAAO;EAC3D,MAAM,iBAAE,QAAQ,6BAA6B;EAC7C,UAAU,iBAAE,OAAM;EAClB,MAAM;CACP;AAEM,IAAM,uCAAuC,iBAAE,OAAO;EAC3D,MAAM,iBAAE,QAAQ,6BAA6B;EAC7C,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,cAAc,iBAAE,OAAM;EACtB,eAAe,iBAAE,OAAM;CACxB;AAEM,IAAM,oCAAoC,iBAAE,OAAO;EACxD,MAAM,iBAAE,QAAQ,0BAA0B;EAC1C,MAAM;EACN,UAAU,iBAAE,OAAM,EAAG,SAAQ;EAC7B,kBAAkB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;CACjD;AAEM,IAAM,oCAAoC,iBAAE,OAAO;EACxD,MAAM,iBAAE,QAAQ,0BAA0B;EAC1C,SAAS,iBAAE,OAAM;EACjB,UAAU,iBAAE,OAAM,EAAG,SAAQ;CAC9B;AAEM,IAAM,sCAAsC,iBAAE,OAAO;EAC1D,MAAM,iBAAE,QAAQ,4BAA4B;EAC5C,SAAS,iBAAE,OAAM;EACjB,UAAU,iBAAE,OAAM,EAAG,SAAQ;CAC9B;AAEM,IAAM,sCAAsC,iBAAE,OAAO;EAC1D,MAAM,iBAAE,QAAQ,4BAA4B;EAC5C,SAAS,iBAAE,OAAM;EACjB,cAAc,iBAAE,OAAM;EACtB,eAAe,iBAAE,OAAM;EACvB,UAAU,iBAAE,OAAM,EAAG,SAAQ;CAC9B;AAEM,IAAM,mBAAmB,iBAAE,OAAO;EACvC,MAAM,iBAAE,QAAQ,OAAO;EACvB,UAAU,iBAAE,OAAM,EAAG,SAAQ;EAC7B,OAAO,iBAAE,IAAG,EAAG,SAAQ;CACxB;AAEM,IAAM,qCAAqC,iBAAE,OAAO;EACzD,MAAM,iBAAE,QAAQ,4BAA4B;EAC5C,UAAU,iBAAE,OAAM;CACnB;AAEM,IAAM,oCAAoC,iBAAE,OAAO;EACxD,MAAM,iBAAE,QAAQ,2BAA2B;EAC3C,OAAO,iBAAE,OAAM;EACf,UAAU,iBAAE,OAAM,EAAG,SAAQ;CAC9B;AAEM,IAAM,mCAAmC,iBAAE,OAAO;EACvD,MAAM,iBAAE,QAAQ,0BAA0B;EAC1C,UAAU,iBAAE,OAAM,EAAG,SAAQ;CAC9B;AAEM,IAAM,oCAAoC,iBAAE,OAAO;EACxD,MAAM,iBAAE,QAAQ,2BAA2B;EAC3C,UAAU,iBAAE,OAAM,EAAG,SAAQ;CAC9B;AAEM,IAAM,uCAAuC,iBAAE,OAAO;EAC3D,MAAM,iBAAE,QAAQ,8BAA8B;EAC9C,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,kBAAkB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;CACjD;AAEM,IAAM,2CAA2C,iBAAE,OAAO;EAC/D,MAAM,iBAAE,QAAQ,mCAAmC;EACnD,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,gBAAgB,iBAAE,OAAM;CACzB;AAEM,IAAM,2CAA2C,iBAAE,OAAO;EAC/D,MAAM,iBAAE,QAAQ,mCAAmC;EACnD,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,cAAc,iBAAE,OAAM;CACvB;AAEM,IAAM,sCAAsC,iBAChD,OAAO;EACN,MAAM,iBAAE,QAAQ,6BAA6B;EAC7C,UAAU,iBAAE,OAAM;CACnB,EACA,YAAW;AAEP,IAAM,sCAAsC,iBAChD,OAAO;EACN,MAAM,iBAAE,QAAQ,6BAA6B;EAC7C,UAAU,iBAAE,OAAM;CACnB,EACA,YAAW;AAEP,IAAM,sCAAsC,iBAAE,OAAO;EAC1D,MAAM,iBAAE,QAAQ,6BAA6B;EAC7C,UAAU,iBAAE,OAAM;CACnB;AAEM,IAAM,+BAA+B,iBAAE,OAAO;EACnD,MAAM,iBAAE,QAAQ,qBAAqB;EACrC,UAAU,iBAAE,OAAM;EAClB,aAAa,iBAAE,MACb,iBAAE,OAAO;IACP,OAAO,iBAAE,OAAM,EAAG,SAAQ;IAC1B,MAAM,iBAAE,KAAK,CAAC,YAAY,QAAQ,CAAC,EAAE,SAAQ;IAC7C,WAAW,iBAAE,OAAM,EAAG,SAAQ;IAC9B,eAAe,iBAAE,OAAM,EAAG,SAAQ;GACnC,CAAC;CAEL;AAEM,IAAM,gCAAgC,iBAAE,OAAO;EACpD,MAAM,iBAAE,QAAQ,6BAA6B;EAC7C,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,OAAO,iBAAE,OAAM;EACf,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,+BAA+B,iBAAE,OAAO;EACnD,MAAM,iBAAE,QAAQ,4BAA4B;EAC5C,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,0CAA0C,iBAAE,OAAO;EAC9D,MAAM,iBAAE,QAAQ,wCAAwC;EACxD,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,OAAO,iBAAE,OAAM;EACf,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,yCAAyC,iBAAE,OAAO;;EAE7D,MAAM,iBAAE,QAAQ,uCAAuC;EACvD,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,YAAY,iBAAE,OAAM;EACpB,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,sCAAsC,iBAAE,OAAO;EAC1D,MAAM,iBAAE,QAAQ,6BAA6B;EAC7C,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;EACrB,MAAM,iBAAE,OAAO;IACb,OAAO,iBAAE,OAAM,EAAG,SAAQ;IAC1B,MAAM,iBAAE,OAAM,EAAG,SAAQ;IACzB,YAAY,iBAAE,OAAM,EAAG,SAAQ;IAC/B,MAAM,iBAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,EAAE,SAAQ;GACzC;CACF;AAEM,IAAM,qCAAqC,iBAAE,OAAO;EACzD,MAAM,iBAAE,QAAQ,4BAA4B;EAC5C,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;EACrB,MAAM,iBAAE,OAAO;IACb,OAAO,iBAAE,OAAM,EAAG,SAAQ;IAC1B,MAAM,iBAAE,OAAM,EAAG,SAAQ;IACzB,YAAY,iBAAE,OAAM,EAAG,SAAQ;IAC/B,MAAM,iBAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,EAAE,SAAQ;GACzC;CACF;AAEM,IAAM,6BAA6B,iBAAE,OAAO;EACjD,MAAM,iBAAE,QAAQ,kBAAkB;EAClC,UAAU,iBAAE,OAAM;EAClB,UAAU;CACX;AAEM,IAAM,0BAA0B,iBAAE,OAAO;EAC9C,MAAM,iBAAE,QAAQ,eAAe;EAC/B,UAAU,iBAAE,OAAM;EAClB,UAAU;CACX;AAEM,IAAM,gDAAgD,iBAAE,OAAO;EACpE,MAAM,iBAAE,QAAQ,wCAAwC;EACxD,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,SAAS,iBAAE,OAAM;EACjB,OAAO,iBAAE,OAAM;EACf,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,+CAA+C,iBAAE,OAAO;EACnE,MAAM,iBAAE,QAAQ,uCAAuC;EACvD,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,SAAS,iBAAE,OAAM;EACjB,WAAW,iBAAE,OAAM;EACnB,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,qCAAqC,iBAAE,OAAO;EACzD,MAAM,iBAAE,QAAQ,4BAA4B;EAC5C,UAAU,iBAAE,OAAM;EAClB,MAAM;EACN,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,oCAAoC,iBAAE,OAAO;EACxD,MAAM,iBAAE,QAAQ,2BAA2B;EAC3C,UAAU,iBAAE,OAAM;EAClB,MAAM;EACN,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,+BAA+B,iBAAE,OAAO;EACnD,MAAM,iBAAE,QAAQ,4BAA4B;EAC5C,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,OAAO,iBAAE,OAAM;EACf,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,8BAA8B,iBAAE,OAAO;;EAElD,MAAM,iBAAE,QAAQ,2BAA2B;EAC3C,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,MAAM,iBAAE,OAAM;EACd,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,4BAA4B,iBAAE,OAAO;EAChD,MAAM,iBAAE,QAAQ,iBAAiB;EACjC,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,IAAG;CACf;AAEM,IAAM,4BAA4B,iBAAE,OAAO;EAChD,MAAM,iBAAE,QAAQ,iBAAiB;EACjC,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,IAAG;CACf;AAEM,IAAM,4BAA4B,iBAAE,OAAO;EAChD,MAAM,iBAAE,QAAQ,iBAAiB;EACjC,UAAU,iBAAE,OAAM,EAAG,SAAQ;EAC7B,aAAa,iBAAE,OAAM,EAAG,SAAQ;CACjC;AAEM,IAAM,4BAA4B,iBAAE,OAAO;EAChD,MAAM,iBAAE,QAAQ,iBAAiB;EACjC,UAAU,iBAAE,OAAM,EAAG,SAAQ;EAC7B,UAAU,iBAAE,IAAG,EAAG,SAAQ;CAC3B;AAEM,IAAM,2BAA2B,iBAAE,OAAO;EAC/C,MAAM,iBAAE,QAAQ,gBAAgB;EAChC,UAAU,iBAAE,OAAM,EAAG,SAAQ;EAC7B,SAAS,iBAAE,IAAG;CACf;AAEM,IAAM,oCAAoC,iBAAE,OAAO;EACxD,MAAM,iBAAE,QAAQ,4BAA4B;EAC5C,UAAU,iBAAE,OAAM,EAAG,SAAQ;EAC7B,SAAS,iBAAE,OAAM,EAAG,SAAQ;CAC7B;AAEM,IAAM,mCAAmC,iBAAE,OAAO;EACvD,MAAM,iBAAE,QAAQ,0BAA0B;EAC1C,UAAU,iBAAE,OAAM,EAAG,SAAQ;EAC7B,SAAS,iBAAE,OAAM,EAAG,SAAQ;CAC7B;AAEM,IAAM,2CAA2C,iBAAE,OAAO;EAC/D,MAAM,iBAAE,QAAQ,mCAAmC;EACnD,UAAU,iBAAE,OAAM;EAClB,aAAa,iBAAE,OAAM;EACrB,SAAS,iBAAE,OAAM;EACjB,cAAc,iBAAE,OAAM;EACtB,OAAO,iBAAE,OAAM;EACf,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,0CAA0C,iBAAE,OAAO;EAC9D,MAAM,iBAAE,QAAQ,kCAAkC;EAClD,UAAU,iBAAE,OAAM;EAClB,aAAa,iBAAE,OAAM;EACrB,SAAS,iBAAE,OAAM;EACjB,cAAc,iBAAE,OAAM;EACtB,WAAW,iBAAE,OAAM;CACpB;AAEM,IAAM,uCAAuC,iBAAE,OAAO;EAC3D,MAAM,iBAAE,QAAQ,+BAA+B;EAC/C,UAAU,iBAAE,OAAM;EAClB,cAAc,iBAAE,OAAM;EACtB,SAAS,iBAAE,OAAM;CAClB;AAEM,IAAM,sCAAsC,iBAAE,OAAO;EAC1D,MAAM,iBAAE,QAAQ,6BAA6B;EAC7C,UAAU,iBAAE,OAAM;EAClB,cAAc,iBAAE,OAAM;EACtB,SAAS,iBAAE,OAAM;CAClB;AAEM,IAAM,gCAAgC,iBAAE,OAAO;EACpD,MAAM,iBAAE,QAAQ,uBAAuB;EACvC,UAAU,iBAAE,OAAM,EAAG,SAAQ;EAC7B,SAAS,iBAAE,OAAM,EAAG,SAAQ;CAC7B;AAOM,IAAM,qBAAqB,iBAC/B,OAAO;EACN,MAAM,iBAAE,OAAM;EACd,UAAU,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;CACzC,EACA,YAAW;AAEP,IAAM,4BAA4B,iBAAE,mBAAmB,QAAQ;EACpE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACD;AAEM,IAAM,4BAA4B,iBAAE,mBAAmB,QAAQ;EACpE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACD;;;SC5kBQ,iBAAiB;;;ACUnB,IAAM,2BAA2B,OAAO,kBAAkB;;;ACNjE,wBACE,IAAI,eAAe,EAAE,+BAA+B,MAAK,CAAE,CAAC;AAE9D,gCAA+B;;;A5B6H/B,OAAOC,aAAY;AACnB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,6BAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,QAAQ,YAAY,WAAW,aAAa,YAAY,cAAc;AAC/E,SAAS,cAAAC,mBAAkB;AAC3B,SAAS,SAAS,YAAY,MAAM,SAAS,WAAW,gBAAgB;AACxE,SAAS,qBAAqB;;;A6B3HvB,IAAM,oCACX;;;ACMF;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAWA,IAAM,qCAA6D;AAAA,EACxE,eAAe;AAAA,EACf,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOlB,kBAAkB;AACpB;AAEA,IAAM,2BAA2B;AACjC,IAAM,eAAe,IAAI,IAAI,OAAO,OAAO,wBAAwB,CAAC;AAEpE,SAAS,SAAS,MAAmC;AACnD,MAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,WAAO;AAAA,EACT;AACA,QAAM,OAAQ,KAA4B;AAC1C,SAAO,OAAO,SAAS,WAAW,OAAO;AAC3C;AAQA,SAAS,SAAS,MAAmC;AACnD,MAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,WAAO;AAAA,EACT;AACA,QAAM,SAAS;AACf,MAAI,OAAO,OAAO,WAAW,YAAY,OAAO,OAAO,SAAS,GAAG;AACjE,WAAO,OAAO;AAAA,EAChB;AACA,MAAI,OAAO,OAAO,YAAY,YAAY,OAAO,QAAQ,SAAS,GAAG;AACnE,WAAO,OAAO;AAAA,EAChB;AAKA,QAAM,WAAW,OAAO;AAIxB,MAAI,YAAY,OAAO,aAAa,UAAU;AAC5C,QAAI,OAAO,SAAS,YAAY,YAAY,SAAS,QAAQ,SAAS,GAAG;AACvE,aAAO,SAAS;AAAA,IAClB;AACA,QAAI,OAAO,SAAS,WAAW,YAAY,SAAS,OAAO,SAAS,GAAG;AACrE,aAAO,SAAS;AAAA,IAClB;AAAA,EACF;AACA,SAAO;AACT;AAOA,SAAS,gBAAgB,MAAmC;AAC1D,MAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,WAAO;AAAA,EACT;AACA,QAAM,SAAS;AACf,MACE,OAAO,SAAS,mBAChB,OAAO,SAAS,gBAChB,OAAO,OAAO,cAAc,UAC5B;AACA,WAAO;AAAA,EACT;AACA,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,OAAO,SAAS;AAC1C,WAAO,OAAO,OAAO,SAAS,YAAY,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO;AAAA,EACnF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAcO,SAAS,8BAAqD,OAA0B;AAC7F,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,gBAAgB,oBAAI,IAAoB;AAC9C,QAAM,kBAAkB,oBAAI,IAAoB;AAChD,QAAM,QAAQ,CAAC,MAAM,UAAU;AAC7B,UAAM,SAAS,SAAS,IAAI;AAC5B,QAAI,CAAC,QAAQ;AACX;AAAA,IACF;AACA,QAAI,SAAS,IAAI,MAAM,iBAAiB;AACtC,oBAAc,IAAI,QAAQ,KAAK;AAAA,IACjC,WACE,SAAS,IAAI,MAAM,0BACnB,SAAS,IAAI,MAAM,wBACnB;AACA,sBAAgB,IAAI,QAAQ,KAAK;AAAA,IACnC;AAAA,EACF,CAAC;AAED,QAAM,eAAe,oBAAI,IAA+D;AACxF,aAAW,CAAC,QAAQ,SAAS,KAAK,eAAe;AAC/C,UAAM,OAAO,gBAAgB,MAAM,SAAS,CAAC;AAC7C,UAAM,cAAc,gBAAgB,IAAI,MAAM;AAC9C,QAAI,CAAC,QAAQ,gBAAgB,UAAa,eAAe,WAAW;AAClE;AAAA,IACF;AACA,UAAM,QAAQ,aAAa,IAAI,IAAI,KAAK,CAAC;AACzC,UAAM,KAAK,EAAE,WAAW,YAAY,CAAC;AACrC,iBAAa,IAAI,MAAM,KAAK;AAAA,EAC9B;AAEA,QAAM,UAAU,oBAAI,IAAY;AAChC,aAAW,SAAS,aAAa,OAAO,GAAG;AACzC,QAAI,MAAM,SAAS,GAAG;AACpB;AAAA,IACF;AACA,UAAM,KAAK,CAAC,MAAM,UAAU,KAAK,YAAY,MAAM,SAAS;AAC5D,eAAW,QAAQ,MAAM,MAAM,GAAG,EAAE,GAAG;AACrC,cAAQ,IAAI,KAAK,SAAS;AAC1B,cAAQ,IAAI,KAAK,WAAW;AAC5B,eAAS,QAAQ,KAAK,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG;AAC3D,YAAI,SAAS,MAAM,KAAK,CAAC,MAAM,aAAa;AAC1C;AAAA,QACF;AACA,gBAAQ,IAAI,KAAK;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAEA,SAAO,QAAQ,SAAS,IAAI,MAAM,MAAM,IAAI,MAAM,OAAO,CAAC,OAAO,UAAU,CAAC,QAAQ,IAAI,KAAK,CAAC;AAChG;AAmCO,SAAS,6BACd,OACA,6BAA6B,6CACxB;AACL,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,CAAC;AAAA,EACV;AAQA,QAAM,UAAU,oBAAI,IAAY;AAIhC,QAAM,0BAA0B,oBAAI,IAAyB;AAE7D,QAAM,QAAQ,CAAC,MAAM,UAAU;AAC7B,UAAM,OAAO,SAAS,IAAI;AAC1B,UAAM,SAAS,SAAS,IAAI;AAC5B,QAAI,CAAC,QAAQ,CAAC,QAAQ;AACpB;AAAA,IACF;AACA,UAAM,iBAAiB,yBAAyB,IAAI;AACpD,QAAI,gBAAgB;AAClB,YAAM,OAAO,wBAAwB,IAAI,cAAc,KAAK,oBAAI,IAAY;AAC5E,WAAK,IAAI,MAAM;AACf,8BAAwB,IAAI,gBAAgB,IAAI;AAChD;AAAA,IACF;AACA,QAAI,aAAa,IAAI,IAAI,GAAG;AAC1B,YAAM,OAAO,wBAAwB,IAAI,IAAI;AAC7C,UAAI,QAAQ,KAAK,IAAI,MAAM,GAAG;AAE5B,aAAK,OAAO,MAAM;AAAA,MACpB,OAAO;AAEL,gBAAQ,IAAI,KAAK;AAAA,MACnB;AAAA,IACF;AAAA,EACF,CAAC;AAKD,QAAM,YAAY,oBAAI,IAAyB;AAC/C,aAAW,CAAC,YAAY,IAAI,KAAK,yBAAyB;AACxD,QAAI,KAAK,OAAO,GAAG;AACjB,gBAAU,IAAI,YAAY,IAAI,IAAI,IAAI,CAAC;AAAA,IACzC;AAAA,EACF;AACA,MAAI,UAAU,OAAO,GAAG;AACtB,aAAS,QAAQ,MAAM,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG;AACzD,YAAM,OAAO,MAAM,KAAK;AACxB,YAAM,OAAO,SAAS,IAAI;AAC1B,YAAM,SAAS,SAAS,IAAI;AAC5B,UAAI,CAAC,QAAQ,CAAC,QAAQ;AACpB;AAAA,MACF;AACA,YAAM,aAAa,yBAAyB,IAAI;AAChD,UAAI,CAAC,YAAY;AACf;AAAA,MACF;AACA,YAAM,OAAO,UAAU,IAAI,UAAU;AACrC,UAAI,QAAQ,KAAK,IAAI,MAAM,GAAG;AAC5B,gBAAQ,IAAI,KAAK;AACjB,aAAK,OAAO,MAAM;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,QAAQ,OAAO,GAAG;AAGpB,aAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;AACpD,UAAI,QAAQ,IAAI,KAAK,KAAK,SAAS,MAAM,KAAK,CAAC,MAAM,aAAa;AAChE;AAAA,MACF;AACA,eAAS,OAAO,QAAQ,GAAG,OAAO,MAAM,QAAQ,QAAQ,GAAG;AACzD,YAAI,SAAS,MAAM,IAAI,CAAC,MAAM,aAAa;AACzC;AAAA,QACF;AACA,YAAI,QAAQ,IAAI,IAAI,GAAG;AACrB,kBAAQ,IAAI,KAAK;AAAA,QACnB;AACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SACJ,QAAQ,SAAS,IAAI,MAAM,MAAM,IAAI,MAAM,OAAO,CAAC,OAAO,UAAU,CAAC,QAAQ,IAAI,KAAK,CAAC;AACzF,SAAO;AAAA,IACL,OAAO,IAAI,yBAAyB;AAAA,IACpC;AAAA,EACF;AACF;AASO,IAAM,iCAAiC;AAkBvC,SAAS,0BAAiD,MAAY;AAC3E,QAAM,eAAgB,KAAiC;AACvD,MACE,CAAC,gBACD,OAAO,iBAAiB,YACxB,EAAE,kCAAmC,eACrC;AACA,WAAO;AAAA,EACT;AACA,QAAM,EAAE,CAAC,8BAA8B,GAAG,UAAU,GAAG,KAAK,IAAI;AAIhE,QAAM,OAAgC,EAAE,GAAI,KAAiC;AAC7E,MAAI,OAAO,KAAK,IAAI,EAAE,SAAS,GAAG;AAChC,SAAK,eAAe;AAAA,EACtB,OAAO;AACL,WAAO,KAAK;AAAA,EACd;AACA,SAAO;AACT;AAiCO,SAAS,+BAAsD,MAAY;AAChF,QAAM,OAAO,SAAS,IAAI;AAC1B,MAAI,SAAS,eAAe,SAAS,cAAc;AACjD,WAAO;AAAA,EACT;AACA,QAAM,SAAS;AACf,QAAM,eAAe,OAAO;AAC5B,QAAM,kBACJ,CAAC,CAAC,gBACF,OAAO,iBAAiB,aACvB,sBAAuB,gBACtB,uBAAwB;AAC5B,QAAM,kBAAkB,uBAAuB;AAC/C,MAAI,CAAC,mBAAmB,CAAC,iBAAiB;AAExC,WAAO;AAAA,EACT;AACA,QAAM,QAAiC,EAAE,GAAG,OAAO;AACnD,MAAI,iBAAiB;AACnB,UAAM,gBAAgB,EAAE,GAAI,aAAyC;AACrE,WAAO,cAAc;AACrB,WAAO,cAAc;AACrB,UAAM,eAAe;AAAA,EACvB;AACA,MAAI,iBAAiB;AACnB,WAAO,MAAM;AAAA,EACf;AACA,SAAO;AACT;AA8BO,SAAS,6CAA6C,YAA4B;AACvF,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,UAAU;AAAA,EAChC,QAAQ;AAEN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,WAAO;AAAA,EACT;AACA,MAAI,UAAU;AACd,QAAM,iBAAiB,CAAC,cAA6B;AACnD,QAAI,CAAC,aAAa,OAAO,cAAc,UAAU;AAC/C;AAAA,IACF;AACA,UAAM,SAAS;AACf,QAAI,OAAO,SAAS,aAAa;AAC/B;AAAA,IACF;AACA,QAAI,QAAQ,QAAQ;AAClB,aAAO,OAAO;AACd,gBAAU;AAAA,IACZ;AACA,UAAM,eAAe,OAAO;AAC5B,QAAI,gBAAgB,OAAO,iBAAiB,UAAU;AACpD,YAAM,WAAW;AACjB,UAAI,sBAAsB,UAAU;AAClC,eAAO,SAAS;AAChB,kBAAU;AAAA,MACZ;AACA,UAAI,uBAAuB,UAAU;AACnC,eAAO,SAAS;AAChB,kBAAU;AAAA,MACZ;AAAA,IACF;AACA,QAAI,uBAAuB,QAAQ;AACjC,aAAO,OAAO;AACd,gBAAU;AAAA,IACZ;AAAA,EACF;AACA,QAAM,iBAAiB,CAAC,QAAuB;AAC7C,QAAI,MAAM,QAAQ,GAAG,GAAG;AACtB,iBAAW,QAAQ,KAAK;AACtB,uBAAe,IAAI;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AACA,QAAM,OAAO;AAEb,iBAAe,KAAK,aAAa;AAGjC,MAAI,MAAM,QAAQ,KAAK,cAAc,GAAG;AACtC,eAAW,WAAW,KAAK,gBAAgB;AACzC,UACE,WACA,OAAO,YAAY,YACnB,aAAc,SACd;AACA,uBAAgB,QAAoC,OAAO;AAAA,MAC7D;AAAA,IACF;AAAA,EACF;AAEA,QAAM,sBAAsB,CAAC,aAA4B;AACvD,QAAI,YAAY,OAAO,aAAa,UAAU;AAC5C,qBAAgB,SAAqC,MAAM;AAAA,IAC7D;AAAA,EACF;AACA,MAAI,MAAM,QAAQ,KAAK,cAAc,GAAG;AACtC,eAAW,YAAY,KAAK,gBAAgB;AAC1C,0BAAoB,QAAQ;AAAA,IAC9B;AAAA,EACF;AACA,sBAAoB,KAAK,iBAAiB;AAC1C,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AACA,SAAO,KAAK,UAAU,MAAM;AAC9B;AA4BO,SAAS,8CAA8C,YAA4B;AACxF,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,UAAU;AAAA,EAChC,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,WAAO;AAAA,EACT;AACA,MAAI,UAAU;AACd,QAAM,aAAa,CAAC,cAA6B;AAC/C,QAAI,CAAC,aAAa,OAAO,cAAc,UAAU;AAC/C;AAAA,IACF;AACA,UAAM,SAAS;AACf,QAAI,OAAO,SAAS,sBAAsB,OAAO,SAAS,sBAAsB;AAC9E;AAAA,IACF;AACA,QAAI,OAAO,cAAc,UAAU;AACjC,aAAO,YAAY;AACnB,gBAAU;AAAA,IACZ;AAAA,EACF;AACA,QAAM,kBAAkB,CAAC,QAAuB;AAC9C,QAAI,MAAM,QAAQ,GAAG,GAAG;AACtB,iBAAW,QAAQ,KAAK;AACtB,mBAAW,IAAI;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AACA,QAAM,OAAO;AACb,kBAAgB,KAAK,aAAa;AAClC,MAAI,MAAM,QAAQ,KAAK,cAAc,GAAG;AACtC,eAAW,WAAW,KAAK,gBAAgB;AACzC,UACE,WACA,OAAO,YAAY,YACnB,aAAc,SACd;AACA,mBAAY,QAAoC,OAAO;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AACA,QAAM,2BAA2B,CAAC,aAA4B;AAC5D,QAAI,YAAY,OAAO,aAAa,UAAU;AAC5C,sBAAiB,SAAqC,MAAM;AAAA,IAC9D;AAAA,EACF;AACA,MAAI,MAAM,QAAQ,KAAK,cAAc,GAAG;AACtC,eAAW,YAAY,KAAK,gBAAgB;AAC1C,+BAAyB,QAAQ;AAAA,IACnC;AAAA,EACF;AACA,2BAAyB,KAAK,iBAAiB;AAC/C,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AACA,SAAO,KAAK,UAAU,MAAM;AAC9B;AAmCO,SAAS,6BAAoD,OAA0B;AAC5F,MAAI,UAAU;AACd,QAAM,MAAM,MAAM,IAAI,CAAC,SAAS;AAC9B,QAAI,SAAS,IAAI,MAAM,iBAAiB;AACtC,aAAO;AAAA,IACT;AACA,UAAM,SAAS;AACf,UAAM,YAAY,OAAO,WAAW,UAAa,OAAO,WAAW;AACnE,UAAM,aAAa,MAAM,QAAQ,OAAO,OAAO,KAAM,OAAO,QAAsB,SAAS;AAC3F,QAAI,aAAa,YAAY;AAC3B,gBAAU;AACV,YAAM,EAAE,QAAQ,gBAAgB,GAAG,KAAK,IAAI;AAC5C,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,CAAC;AACD,SAAO,UAAU,MAAM,MAAM,MAAM;AACrC;AAgCO,SAAS,kCAAkC,MAAwB;AACxE,MAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,WAAO;AAAA,EACT;AACA,QAAM,QAAS,KAAiC;AAChD,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,WAAO;AAAA,EACT;AACA,MAAI,UAAU;AACd,aAAW,QAAQ,OAAO;AACxB,QAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC;AAAA,IACF;AACA,UAAM,SAAS;AACf,QAAI,OAAO,SAAS,iBAAiB;AACnC;AAAA,IACF;AACA,UAAM,kBACJ,MAAM,QAAQ,OAAO,OAAO,KAAM,OAAO,QAAsB,SAAS,IACnE,OAAO,UACR;AACN,UAAM,UACJ,oBACC,OAAO,WAAW,UAAa,OAAO,WAAW,OAAO,CAAC,OAAO,MAAM,IAAI;AAC7E,QAAI,YAAY,QAAW;AAEzB;AAAA,IACF;AACA,UAAM,YAAY,YAAY;AAC9B,UAAM,sBAAsB,oBAAoB,UAAa,CAAC;AAC9D,QAAI,qBAAqB;AAEvB;AAAA,IACF;AACA,WAAO,OAAO;AACd,WAAO,UAAU;AACjB,cAAU;AAAA,EACZ;AACA,SAAO;AACT;AAoCO,SAAS,wCAAwC,MAAwB;AAC9E,MAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,WAAO;AAAA,EACT;AACA,QAAM,QAAS,KAAiC;AAChD,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,WAAO;AAAA,EACT;AACA,MAAI,UAAU;AACd,aAAW,QAAQ,OAAO;AACxB,QAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC;AAAA,IACF;AACA,UAAM,SAAS;AACf,QAAI,OAAO,SAAS,wBAAwB;AAC1C;AAAA,IACF;AACA,UAAM,SAAS,OAAO;AACtB,QAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC;AAAA,IACF;AACA,UAAM,MAAM;AACZ,UAAM,WAAW,IAAI;AAIrB,QAAI,OAAO,aAAa,YAAY,SAAS,WAAW,GAAG;AACzD,UAAI,YAAY;AAChB,gBAAU;AAAA,IACZ;AAAA,EACF;AACA,SAAO;AACT;AAiCO,SAAS,6BAA6B,MAA4B;AACvE,SAAO,CAAC,OAAO,SAAS;AAItB,QAAI,QAAQ,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,SAAS,gBAAgB,GAAG;AACjF,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,KAAK,IAAI;AACnC,cAAM,WAAW,kCAAkC,MAAM;AACzD,cAAM,WAAW,wCAAwC,MAAM;AAC/D,YAAI,YAAY,UAAU;AACxB,iBAAO,KAAK,OAAO,EAAE,GAAG,MAAM,MAAM,KAAK,UAAU,MAAM,EAAE,CAAC;AAAA,QAC9D;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AACA,WAAO,KAAK,OAAO,IAAI;AAAA,EACzB;AACF;;;ACv0BO,IAAM,yBAAyB;AACtC,IAAM,uBAAuB;AAC7B,IAAM,mBAAmB;AAGlB,SAAS,wBACdC,OACyD;AACzD,SACE,CAAC,CAACA,SACF,OAAOA,UAAS,YACfA,MAA4B,SAAS,cACtC,OAAQA,MAA4B,SAAS,YAC5CA,MAA0B,KAAK,WAAW,sBAAsB;AAErE;AAEA,IAAM,0BAA0B;AAChC,IAAM,sCAAsC;AAC5C,IAAM,oBAAyC,oBAAI,IAAI;AAGvD,SAAS,mBAAmBA,OAAe,cAAkD;AAC3F,MAAI,CAACA,SAAQ,OAAOA,UAAS,SAAU,QAAO;AAC9C,MAAKA,MAA4B,SAAS,WAAY,QAAO;AAC7D,QAAM,OAAQA,MAA4B;AAC1C,MAAI,OAAO,SAAS,SAAU,QAAO;AACrC,MAAI,QAAuB;AAC3B,aAAW,YAAY,cAAc;AACnC,QACE,OAAO,aAAa,YACpB,SAAS,WAAW,KACpB,CAAC,KAAK,WAAW,GAAG,QAAQ,GAAG,uBAAuB,EAAE,GACxD;AACA;AAAA,IACF;AACA,QAAI,UAAU,QAAQ,SAAS,SAAS,MAAM,QAAQ;AACpD,cAAQ;AAAA,IACV;AAAA,EACF;AACA,SAAO;AACT;AAQO,SAAS,4BACdA,OACA,eAAoC,mBACqB;AACzD,QAAM,WAAW,mBAAmBA,OAAM,YAAY;AACtD,SAAO,aAAa,QAAQ,aAAa;AAC3C;AAEA,SAAS,aAAa,OAAe,UAA0B;AAC7D,MAAI,OAAO,WAAW,KAAK,KAAK,SAAU,QAAO;AACjD,MAAI,SAAS;AACb,aAAW,aAAa,OAAO;AAC7B,UAAM,YAAY,SAAS;AAC3B,QAAI,OAAO,WAAW,SAAS,IAAI,SAAU;AAC7C,aAAS;AAAA,EACX;AACA,SAAO;AACT;AAEA,SAAS,oBAAoBA,OAAY,cAAkD;AACzF,QAAM,WAAW,mBAAmBA,OAAM,YAAY;AACtD,SAAO,YAAY,aAAa,sCAC5B,aAAa,UAAU,uCAAuC,IAC9D;AACN;AAEA,SAAS,sBACP,qBACA,OACA,cACa;AACb,QAAM,UAAU,oBAAI,IAAY;AAChC,aAAW,UAAU,qBAAqB;AACxC,QAAI,OAAO,WAAW,YAAY,OAAO,WAAW,EAAG;AACvD,QAAI,QAAQ,QAAQ,4BAA6B;AACjD,YAAQ,IAAI,aAAa,QAAQ,uCAAuC,CAAC;AAAA,EAC3E;AACA,aAAWA,SAAQ,OAAO;AAKxB,UAAM,SACJ,4BAA4BA,OAAM,YAAY,KAAK,CAAC,wBAAwBA,KAAI,IAC5E,oBAAoBA,OAAM,YAAY,IACtC;AACN,QAAI,CAAC,UAAU,QAAQ,IAAI,MAAM,EAAG;AACpC,QAAI,QAAQ,QAAQ,4BAA6B;AACjD,YAAQ,IAAI,MAAM;AAAA,EACpB;AACA,SAAO;AACT;AAKA,IAAM,YAAY,oBAAI,IAAI;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGD,SAAS,KAAK,OAAuB;AACnC,MAAI,MAAM,SAAS,KAAK,MAAM,SAAS,KAAK,EAAG,QAAO,MAAM,MAAM,GAAG,EAAE;AACvE,MAAI,MAAM,SAAS,KAAK,MAAM,SAAS,IAAI,EAAG,QAAO,MAAM,MAAM,GAAG,EAAE;AACtE,MAAI,MAAM,SAAS,KAAK,MAAM,SAAS,IAAI,EAAG,QAAO,MAAM,MAAM,GAAG,EAAE;AACtE,MAAI,MAAM,SAAS,KAAK,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,SAAS,IAAI,EAAG,QAAO,MAAM,MAAM,GAAG,EAAE;AAC9F,SAAO;AACT;AAGA,SAAS,SAAS,MAAwB;AACxC,SAAO,KACJ,QAAQ,sBAAsB,OAAO,EACrC,YAAY,EACZ,MAAM,YAAY,EAClB,OAAO,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,EAC/C,IAAI,IAAI;AACb;AAGA,SAAS,eAAeA,OAAoB;AAC1C,QAAM,MAAOA,MAA2B,QAAQ;AAChD,QAAM,OAAO,IAAI,WAAW,sBAAsB,IAC9C,IAAI,MAAM,uBAAuB,MAAM,IACvC;AACJ,QAAM,cACJ,OAAQA,MAAmC,gBAAgB,WACtDA,MAAiC,cAClC;AACN,QAAM,SAAUA,MAAmE,YAC/E;AACJ,QAAM,aAAa,UAAU,OAAO,WAAW,WAAW,OAAO,KAAK,MAAM,EAAE,KAAK,GAAG,IAAI;AAC1F,SAAO,GAAG,IAAI,IAAI,IAAI,IAAI,WAAW,IAAI,UAAU;AACrD;AAWO,SAAS,cAAc,OAAe,OAAe,OAAuB;AACjF,QAAM,UAAU,MAAM,KAAK,IAAI,IAAI,SAAS,KAAK,CAAC,CAAC;AACnD,MAAI,MAAM,WAAW,KAAK,QAAQ,WAAW,EAAG,QAAO,CAAC;AAExD,QAAM,OAAO,MAAM,IAAI,CAACA,UAAS;AAC/B,UAAM,SAAS,SAAS,eAAeA,KAAI,CAAC;AAC5C,UAAM,KAAK,oBAAI,IAAoB;AACnC,eAAW,KAAK,OAAQ,IAAG,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,KAAK,CAAC;AACtD,WAAO,EAAE,MAAAA,OAAM,KAAK,OAAO,QAAQ,GAAG;AAAA,EACxC,CAAC;AACD,QAAM,IAAI,KAAK;AACf,QAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;AACjE,QAAM,KAAK,oBAAI,IAAoB;AACnC,aAAW,KAAK,KAAM,YAAW,KAAK,EAAE,GAAG,KAAK,EAAG,IAAG,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,KAAK,CAAC;AAEjF,QAAM,KAAK;AACX,QAAM,IAAI;AACV,QAAM,SAAS,KAAK,IAAI,CAAC,MAAM;AAC7B,QAAI,QAAQ;AACZ,eAAW,MAAM,SAAS;AACxB,YAAM,IAAI,GAAG,IAAI,EAAE;AACnB,YAAM,IAAI,EAAE,GAAG,IAAI,EAAE;AACrB,UAAI,CAAC,KAAK,CAAC,EAAG;AACd,YAAM,MAAM,KAAK,IAAI,KAAK,IAAI,IAAI,QAAQ,IAAI,IAAI;AAClD,eAAS,OAAQ,KAAK,KAAK,MAAO,IAAI,MAAM,IAAI,IAAK,IAAI,EAAE,MAAO;AAAA,IACpE;AACA,WAAO,EAAE,MAAM,EAAE,MAAM,MAAM;AAAA,EAC/B,CAAC;AACD,QAAM,OAAO,OAAO,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,GAAG,OAAO,GAAG,QAAQ,EAAE,KAAK;AACjF,SAAO,KAAK,MAAM,GAAG,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI;AAC/C;AAGA,SAAS,gBAAgB,KAAgD;AACvE,MAAI,MAA+B,CAAC;AACpC,MAAI;AACF,UACE,OAAO,QAAQ,WACX,IAAI,SACF,KAAK,MAAM,GAAG,IACd,CAAC,IACH,OAAO,OAAO,QAAQ,WACnB,MACD,CAAC;AAAA,EACX,QAAQ;AACN,UAAM,CAAC;AAAA,EACT;AACA,QAAM,QAAQ,OAAO,IAAI,UAAU,WAAW,IAAI,QAAQ;AAC1D,QAAM,WACJ,OAAO,IAAI,UAAU,YAAY,OAAO,SAAS,IAAI,KAAK,IAAI,IAAI,QAAQ;AAC5E,SAAO,EAAE,OAAO,OAAO,KAAK,IAAI,GAAG,KAAK,IAAI,kBAAkB,KAAK,MAAM,QAAQ,CAAC,CAAC,EAAE;AACvF;AAWO,SAAS,4BAA4B,qBAAkD;AAC5F,QAAM,OACJ;AAGF,QAAM,UAAU,MAAM,KAAK,mBAAmB,EAC3C,OAAO,CAAC,MAAM,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC,EACnD,MAAM,GAAG,2BAA2B,EACpC,IAAI,CAAC,WAAW,aAAa,QAAQ,uCAAuC,CAAC,EAC7E,OAAO,OAAO,EACd,KAAK;AACR,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO,GAAG,IAAI;AAAA;AAAA,EAChB;AACA,QAAM,SAAS,GAAG,IAAI;AAAA;AACtB,QAAM,QAAkB,CAAC;AACzB,aAAW,UAAU,SAAS;AAC5B,UAAM,YAAY,GAAG,MAAM,GAAG,CAAC,GAAG,OAAO,KAAK,MAAM,EAAE,EAAE,IAAI,CAAC,SAAS;AAAA,EAAK,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC;AAC3F,QAAI,OAAO,WAAW,SAAS,IAAI,sCAAuC;AAC1E,UAAM,KAAK,KAAK,MAAM,EAAE;AAAA,EAC1B;AACA,SAAO,MAAM,SAAS,IAClB,GAAG,MAAM;AAAA,EAAK,MAAM,KAAK,IAAI,CAAC,KAC9B,GAAG,IAAI;AAAA;AACb;AAEA,IAAM,yBAAyB;AAAA,EAC7B,MAAM;AAAA,EACN,YAAY;AAAA,IACV,OAAO;AAAA,MACL,MAAM;AAAA,MACN,aAAa;AAAA,IACf;AAAA,IACA,OAAO,EAAE,MAAM,UAAU,aAAa,iDAAiD;AAAA,EACzF;AAAA,EACA,UAAU,CAAC,OAAO;AAAA,EAClB,sBAAsB;AACxB;AAQA,SAAS,wBACP,MAIA,cACQ;AACR,QAAM,YAAY,KAAK,kBAAkB,CAAC,GAAG;AAAA,IAAO,CAACA,UACnD,4BAA4BA,OAAM,YAAY;AAAA,EAChD;AACA,MAAI,SAAS,WAAW,EAAG,QAAO,CAAC;AACnC,QAAM,EAAE,OAAO,MAAM,IAAI,gBAAgB,KAAK,UAAU,SAAS;AACjE,QAAM,SAAS,cAAc,UAAU,OAAO,KAAK;AACnD,QAAM,UAAkB,CAAC;AACzB,MAAI,iBAAiB;AACrB,aAAWA,SAAQ,QAAQ;AACzB,UAAM,YAAY,uBAAuBA,KAAI;AAC7C,QAAI,YAAY,+BAA+B;AAC7C;AAAA,IACF;AACA,QAAI,iBAAiB,YAAY,sCAAsC;AACrE;AAAA,IACF;AACA,sBAAkB;AAClB,YAAQ,KAAKA,KAAI;AAAA,EACnB;AACA,SAAO;AACT;AAEA,IAAM,gBAAqC,oBAAI,IAAI;AAGnD,SAAS,oBAAoB,qBAAmD;AAC9E,aAAW,aAAa,qBAAqB;AAC3C,QAAI,OAAO,cAAc,YAAY,UAAU,SAAS,GAAG;AACzD,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAkCA,SAAS,6BACP,qBACA,QACQ;AACR,MAAI,QAAQ,SAAS,MAAM;AACzB,WAAO,OAAO;AAAA,EAChB;AACA,QAAM,WAAW,4BAA4B,mBAAmB;AAChE,MAAI,UAAU,oBAAoB,mBAAmB,GAAG;AACtD,WAAO,QAAQ;AAAA,EACjB;AACA,SAAO;AACT;AAGA,SAAS,wCACP,aACA,cACM;AACN,SAAO,eAAe;AAAA,IACpB,WAAW;AAAA,IACX;AAAA,IACA,YAAY;AAAA,IACZ,SAAU,CAAC,SACT,wBAAwB,MAAM,YAAY;AAAA,EAC9C,CAAC;AACH;AAcA,SAAS,iBAAiBC,OAAwB;AAChD,QAAM,IAAIA;AACV,SAAO,CAAC,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,cAAc,SAAS;AACtE;AAkBO,SAAS,qBACd,OACA,sBAA2C,eAC3C,mBACA,eAAoC,mBAC5B;AACR,aAAWA,SAAQ,OAAO;AACxB,QACE,4BAA4BA,OAAM,YAAY,KAC7CA,MAAoC,iBAAiB,MACtD;AACA,MAACA,MAAoC,eAAe;AAAA,IACtD;AAAA,EACF;AACA,MAAI,MAAM,KAAK,gBAAgB,GAAG;AAChC,WAAO;AAAA,EACT;AAGA,QAAM,cAAc;AAAA,IAClB,sBAAsB,qBAAqB,OAAO,YAAY;AAAA,IAC9D;AAAA,EACF;AACA,SAAO,CAAC,GAAG,OAAO,wCAAwC,aAAa,YAAY,CAAC;AACtF;AA2BO,SAAS,uBACd,OACA,sBAA2C,eAC3C,eAAoC,mBAC9B;AAKN,mCAAiC,OAAO,qBAAqB,cAAc,EAAE,OAAO,KAAK,CAAC;AAC5F;AAEA,SAAS,iCACP,OACA,qBACA,cACA,mBACM;AACN,QAAM,sBAAsB,MAAM,YAAY,KAAK,KAAK;AACxD,QAAM,cAAe,OAAO,eAC1B;AAAA,IACE,MAAM,oBAAoB,UAAU;AAAA,IACpC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF,QAAM,gBAAgB,MAAM,OAAO,KAAK,KAAK;AAC7C,MAAI,eAAe;AACjB,UAAM,sBAA+D,CAAC,WAAoB;AACxF,YAAM,SAAS,cAAc,MAAM;AACnC;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,aAAO;AAAA,IACT;AACA,UAAM,QAAQ;AAAA,EAChB;AACF;;;ACtiBA,SAAS,gCAAgC;AACzC,SAAS,kBAAkB;AAQpB,IAAM,4BAA4B;AAElC,IAAM,wBAAwB;AAG9B,IAAM,kCAAkC;AAIxC,IAAM,qCAAqC;AAC3C,IAAM,iCAAiC;AACvC,IAAM,iCAAiC;AAIvC,IAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,IAAI;AAIJ,IAAM,iBACX;AAEK,IAAM,iCACX;AAEF,IAAMC,4BAA2B;AACjC,IAAMC,gBAAe,IAAI,IAAI,OAAO,OAAOD,yBAAwB,CAAC;AACpE,IAAM,6BAA6B,oBAAI,IAAI;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAASE,UAAS,MAAmC;AACnD,MAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,WAAO;AAAA,EACT;AACA,QAAM,OAAQ,KAA4B;AAC1C,SAAO,OAAO,SAAS,WAAW,OAAO;AAC3C;AAEA,SAAS,SAAS,MAAmC;AACnD,MAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,WAAO;AAAA,EACT;AACA,QAAM,OAAQ,KAA4B;AAC1C,SAAO,OAAO,SAAS,WAAW,OAAO;AAC3C;AAGO,SAAS,cAAc,MAAwB;AACpD,SAAOA,UAAS,IAAI,MAAM,aAAa,SAAS,IAAI,MAAM;AAC5D;AAGO,SAAS,oBAAoB,MAAwB;AAC1D,SACE,cAAc,IAAI,KAAM,KAAiC,yBAAyB,MAAM;AAE5F;AAUO,SAAS,mBAAmB,MAAsB;AACvD,MAAI,iBAAiB;AACrB,MAAI,oBAAoB;AACxB,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;AACnD,QAAI,KAAK,WAAW,KAAK,KAAK,IAAM,mBAAkB;AAAA,QACjD,sBAAqB;AAAA,EAC5B;AACA,SAAO,oBAAoB,KAAK,KAAK,iBAAiB,CAAC;AACzD;AAGO,SAAS,mBAAmB,MAA8B;AAC/D,MAAI;AACJ,MAAI;AACF,WAAO,KAAK,UAAU,IAAI;AAAA,EAC5B,QAAQ;AACN,WAAO,OAAO,IAAI;AAAA,EACpB;AACA,SAAO,mBAAmB,IAAI;AAChC;AAEO,SAAS,eAAe,OAA0C;AACvE,MAAI,QAAQ;AACZ,aAAW,QAAQ,OAAO;AACxB,aAAS,mBAAmB,IAAI;AAAA,EAClC;AACA,SAAO;AACT;AAEO,SAAS,8BAA8B,OAAwB;AACpE,MAAI;AACJ,MAAI;AACF,iBAAa,OAAO,UAAU,WAAW,QAAQ,KAAK,UAAU,KAAK;AAAA,EACvE,QAAQ;AACN,iBAAa,OAAO,KAAK;AAAA,EAC3B;AACA,SAAO,mBAAmB,cAAc,EAAE;AAC5C;AAgCO,SAAS,2BAA2B,OAIZ;AAC7B,QAAM,cAAc,eAAe,MAAM,QAAQ,KAAK;AACtD,QAAM,qBAAqB,MAAM,QAAQ;AACzC,QAAM,mBAAmB,MAAM,QAAQ;AACvC,MAAI,CAAC,MAAM,YAAY,CAAC,MAAM,4BAA4B,MAAM,SAAS,eAAe,GAAG;AACzF,WAAO;AAAA,MACL,QAAQ,cAAc,qBAAqB;AAAA,MAC3C,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA,0BAA0B;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM,WAAW,iCAAiC,MAAM,QAAQ,KAAK;AACrE,QAAM,2BAA2B,eAAe,QAAQ;AACxD,QAAM,oBAAoB,KAAK;AAAA,IAC7B;AAAA,IACA,qBAAqB,MAAM,yBAAyB;AAAA,EACtD;AACA,QAAM,mBAAmB,KAAK;AAAA,IAC5B;AAAA,IACA,mBAAmB,MAAM,yBAAyB;AAAA,EACpD;AACA,SAAO;AAAA,IACL,QACE,MAAM,SAAS,cAAc,2BAA2B,oBAAoB;AAAA,IAC9E,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAAS,iCACd,OACkB;AAClB,WAAS,QAAQ,MAAM,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG;AACzD,QAAI,qBAAqB,MAAM,KAAK,CAAC,GAAG;AACtC,aAAO,MAAM,MAAM,QAAQ,CAAC;AAAA,IAC9B;AAAA,EACF;AAGA,SAAO,MAAM,MAAM;AACrB;AAEO,SAAS,sBAAsB,OAA2C;AAC/E,SAAO,MAAM,KAAK,oBAAoB;AACxC;AAEA,SAAS,qBAAqB,MAAwB;AACpD,QAAM,OAAOA,UAAS,IAAI;AAC1B,MAAI,SAAS,UAAW,QAAO,SAAS,IAAI,MAAM;AAClD,SAAO,2BAA2B,IAAI,QAAQ,EAAE;AAClD;AAEO,SAAS,8BAA8B,OAA0C;AACtF,QAAM,UACJ,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAC9C,QACA;AACN,SAAO,KAAK;AAAA,IACV;AAAA,IACA,KAAK,IAAI,gCAAgC,OAAO;AAAA,EAClD;AACF;AAEO,SAAS,0BAA0B,OAK/B;AACT,QAAMC,UAAS,KAAK,IAAI,GAAG,MAAM,mBAAmB;AACpD,QAAM,eAAe,KAAK,MAAMA,UAAS,8BAA8B;AACvE,MACE,OAAO,MAAM,sCAAsC,YACnD,OAAO,SAAS,MAAM,iCAAiC,KACvD,MAAM,oCAAoC,GAC1C;AACA,WAAO,KAAK,IAAI,KAAK,MAAM,MAAM,iCAAiC,GAAG,YAAY;AAAA,EACnF;AACA,SAAO,KAAK,MAAMA,UAAS,8BAA8B,MAAM,+BAA+B,CAAC;AACjG;AASO,SAAS,iBAAiB,OAQV;AACrB,QAAM,kBAAkB,0BAA0B,KAAK;AACvD,QAAM,WACJ,OAAO,MAAM,oBAAoB,YAAY,MAAM,kBAAkB,IACjE,MAAM,kBACN;AACN,QAAM,wBAAwB,eAAe,MAAM,KAAK;AAIxD,QAAM,eAAe,KAAK,IAAI,UAAU,qBAAqB;AAC7D,MAAI,MAAM,MAAM,WAAW,GAAG;AAC5B,WAAO;AAAA,MACL,eAAe;AAAA,MACf,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,MAAM,OAAO;AACf,WAAO;AAAA,MACL,eAAe;AAAA,MACf,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,gBAAgB,iBAAiB;AACnC,WAAO;AAAA,MACL,eAAe;AAAA,MACf,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,EACF;AACF;AAEO,IAAM,wBAAN,cAAoC,MAAM;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,OAKT;AACD,UAAM,UAAU,MAAM,WAAW;AACjC;AAAA,MACE,YAAY,aACR,iDACA,qCAAqC,MAAM,YAAY,8BAA8B,MAAM,eAAe;AAAA,IAChH;AACA,SAAK,OAAO;AACZ,SAAK,eAAe,MAAM;AAC1B,SAAK,kBAAkB,MAAM;AAC7B,SAAK,eAAe,MAAM;AAC1B,SAAK,UAAU;AAAA,EACjB;AACF;AAEO,IAAM,8BAAN,cAA0C,MAAM;AAAA,EAC5C;AAAA,EAET,YAAY,cAAuC,CAAC,GAAG;AACrD,UAAM,UAAU,KAAK,UAAU,WAAW,EAAE,MAAM,GAAG,GAAK;AAC1D;AAAA,MACE,iFAAiF,UAAU,KAAK,OAAO,MAAM,EAAE;AAAA,IACjH;AACA,SAAK,OAAO;AACZ,SAAK,cAAc;AAAA,EACrB;AACF;AAQO,IAAM,kCAAN,cAA8C,MAAM;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACS;AAAA,EAElB,YAAY,cAAuC,CAAC,GAAG,OAAiB;AACtE,UAAM,UAAU,KAAK,UAAU,WAAW,EAAE,MAAM,GAAG,GAAK;AAC1D;AAAA,MACE,mEAAmE,UAAU,KAAK,OAAO,MAAM,EAAE;AAAA,IACnG;AACA,SAAK,OAAO;AACZ,SAAK,cAAc;AACnB,QAAI,OAAO,YAAY,eAAe,SAAU,MAAK,SAAS,YAAY;AAC1E,QAAI,OAAO,YAAY,SAAS,SAAU,MAAK,OAAO,YAAY;AAClE,QAAI,OAAO,YAAY,SAAS,SAAU,MAAK,OAAO,YAAY;AAClE,QAAI,UAAU,QAAW;AACvB,aAAO,eAAe,MAAM,SAAS,EAAE,OAAO,OAAO,YAAY,MAAM,CAAC;AAAA,IAC1E;AAAA,EACF;AACF;AAEO,SAAS,0BACd,OACA,OAAO,oBAAI,QAAgB,GACG;AAC9B,MAAI,iBAAiB,uBAAuB;AAC1C,WAAO;AAAA,EACT;AACA,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,WAAO;AAAA,EACT;AACA,MAAI,KAAK,IAAI,KAAK,GAAG;AACnB,WAAO;AAAA,EACT;AACA,OAAK,IAAI,KAAK;AACd,QAAM,SAAS;AACf,SACE,0BAA0B,OAAO,OAAO,IAAI,KAAK,0BAA0B,OAAO,OAAO,IAAI;AAEjG;AAMO,SAAS,2BAA2B,OAAoD;AAC7F,SAAO;AAAA,IACL,GAAG;AAAA,IACH;AAAA,MACE,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAoBO,SAAS,6BACd,OACA,gBAC+B;AAC/B,QAAM,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,cAAc,CAAC;AACrD,MAAI,UAAU,MAAM,MAAM;AAC1B,MAAI,uBAAuB,eAAe,2BAA2B,OAAO,CAAC;AAC7E,MAAI,uBAAuB;AAE3B,WAAS,QAAQ,GAAG,QAAQ,QAAQ,UAAU,uBAAuB,QAAQ,SAAS,GAAG;AACvF,UAAM,UAAU,QAAQ,KAAK;AAC7B,UAAM,cAAc,+BAA+B,OAAO;AAC1D,QAAI,gBAAgB,QAAS;AAC7B,UAAM,SAAS,mBAAmB,OAAO;AACzC,UAAM,QAAQ,mBAAmB,WAAW;AAC5C,QAAI,SAAS,OAAQ;AACrB,YAAQ,KAAK,IAAI;AACjB,4BAAwB,SAAS;AACjC,4BAAwB;AAAA,EAC1B;AAEA,QAAM,mBAAmB,QAAQ;AACjC,MAAI,uBAAuB,UAAU,QAAQ,SAAS,GAAG;AACvD,UAAM,eAAe,IAAI,MAAc,QAAQ,SAAS,CAAC,EAAE,KAAK,CAAC;AACjE,aAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,mBAAa,QAAQ,CAAC,IAAI,aAAa,KAAK,IAAK,mBAAmB,QAAQ,KAAK,CAAE;AAAA,IACrF;AACA,UAAM,OAAO,sBAAsB,OAAO;AAC1C,UAAM,MACJ,KAAK,KAAK,CAAC,cAAc,uBAAuB,aAAa,SAAS,KAAM,MAAM,KAClF,QAAQ;AACV,cAAU,6BAA6B,QAAQ,MAAM,GAAG,CAAC;AACzD,2BAAuB,eAAe,2BAA2B,OAAO,CAAC;AAIzE,QAAI,uBAAuB,QAAQ;AACjC,gBAAU,CAAC;AACX,6BAAuB,eAAe,2BAA2B,OAAO,CAAC;AAAA,IAC3E;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,2BAA2B,OAAO;AAAA,IACzC;AAAA,IACA;AAAA,IACA,qBAAqB,mBAAmB,QAAQ;AAAA,EAClD;AACF;AAEA,SAAS,+BAA+B,MAAsC;AAC5E,QAAM,OAAOD,UAAS,IAAI;AAC1B,MAAI,CAAC,QAAQ,CAACD,cAAa,IAAI,IAAI,EAAG,QAAO;AAC7C,MAAI,SAAS,wBAAwB,MAAM,QAAQ,KAAK,KAAK,KAAK,KAAK,MAAM,SAAS,GAAG;AACvF,WAAO,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE;AAAA,EAC9B;AACA,SAAO,yBAAyB,MAAM,CAAC;AACzC;AAEA,SAAS,sBAAsB,OAA4C;AACzE,QAAM,qBAA+B,CAAC;AACtC,WAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;AACpD,QAAI,cAAc,MAAM,KAAK,CAAC,EAAG,oBAAmB,KAAK,KAAK;AAAA,EAChE;AACA,QAAM,OAAiB,CAAC;AACxB,MAAI,mBAAmB,WAAW,GAAG;AACnC,WAAO,CAAC,MAAM,MAAM;AAAA,EACtB;AACA,MAAI,mBAAmB,CAAC,IAAK,EAAG,MAAK,KAAK,mBAAmB,CAAC,CAAE;AAChE,aAAW,SAAS,mBAAmB,MAAM,CAAC,EAAG,MAAK,KAAK,KAAK;AAChE,OAAK,KAAK,MAAM,MAAM;AACtB,SAAO;AACT;AAOO,SAAS,kCACd,OACA,aACkB;AAClB,QAAM,mBAAqC,CAAC;AAC5C,MAAI,YAAY;AAChB,WAAS,QAAQ,MAAM,SAAS,GAAG,SAAS,KAAK,YAAY,GAAG,SAAS,GAAG;AAC1E,UAAM,OAAO,MAAM,KAAK;AACxB,QAAI,CAAC,cAAc,IAAI,KAAK,oBAAoB,IAAI,GAAG;AACrD;AAAA,IACF;AACA,UAAM,aAAa,mBAAmB,YAAY,IAAI,CAAC;AACvD,qBAAiB,KAAK,4BAA4B,MAAM,SAAS,CAAC;AAClE,QAAI,aAAa,WAAW;AAC1B,kBAAY;AACZ;AAAA,IACF;AACA,iBAAa;AAAA,EACf;AACA,QAAM,UAAU,iBAAiB,QAAQ;AACzC,UAAQ,KAAK,iBAAiB,WAAW,CAAC;AAC1C,SAAO;AACT;AAEO,SAAS,iCAAiC,OAA0C;AAIzF,QAAM,aAAa,KAAK,UAAU,mBAAmB,KAAK,CAAC;AAC3D,SAAO,WAAW,QAAQ,EAAE,OAAO,YAAY,MAAM,EAAE,OAAO,KAAK;AACrE;AAEA,SAAS,mBAAmB,OAAyB;AACnD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,kBAAkB;AAC7D,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,KAAgC,EAC5C,OAAO,CAAC,CAAC,EAAE,KAAK,MAAM,UAAU,MAAS,EACzC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,MAAM,KAAK,cAAc,KAAK,CAAC,EACnD,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,mBAAmB,KAAK,CAAC,CAAC;AAAA,EAC3D;AACF;AAGO,SAAS,uCACd,OACe;AACf,WAAS,QAAQ,MAAM,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG;AACzD,QAAI,oBAAoB,MAAM,KAAK,CAAC,GAAG;AACrC,aAAO,iCAAiC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC;AAAA,IACnE;AAAA,EACF;AACA,SAAO;AACT;AAMO,SAAS,iBAAiB,aAAqC;AACpE,QAAM,UAAU,YAAY,KAAK;AACjC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,4BAA4B,EAAE,OAAO,qBAAqB,CAAC;AAAA,EACvE;AACA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS,GAAG,cAAc;AAAA,EAAK,OAAO;AAAA,IACtC,CAAC,yBAAyB,GAAG;AAAA,EAC/B;AACF;AAEA,SAAS,4BAA4B,MAAsB,WAAmC;AAC5F,QAAM,OAAO,YAAY,IAAI;AAC7B,QAAM,OAAO,EAAE,GAAG,KAAK;AACvB,MAAI,mBAAmB,IAAI,IAAI,WAAW;AACxC,SAAK,UAAU,gCAAgC,MAAM,SAAS;AAC9D,WAAO;AAAA,EACT;AACA,OAAK,UAAU,qBAAqB,IAAI;AACxC,SAAO;AACT;AAEA,SAAS,gCAAgC,MAAc,WAA2B;AAChF,QAAM,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,SAAS,CAAC;AAChD,MAAI,mBAAmB,IAAI,KAAK,QAAQ;AACtC,WAAO;AAAA,EACT;AACA,MAAI,mBAAmB,8BAA8B,IAAI,QAAQ;AAC/D,WAAO,mBAAmB,gCAAgC,MAAM;AAAA,EAClE;AAEA,MAAI,MAAM;AACV,MAAI,OAAO,KAAK;AAChB,MAAI,OAAO;AACX,SAAO,OAAO,MAAM;AAClB,UAAM,gBAAgB,KAAK,OAAO,MAAM,QAAQ,CAAC;AACjD,UAAM,YAAY,0BAA0B,MAAM,aAAa;AAC/D,QAAI,mBAAmB,SAAS,KAAK,QAAQ;AAC3C,aAAO;AACP,YAAM,gBAAgB;AAAA,IACxB,OAAO;AACL,aAAO,gBAAgB;AAAA,IACzB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,0BAA0B,MAAc,eAA+B;AAC9E,QAAM,aAAa,KAAK,KAAK,gBAAgB,CAAC;AAC9C,QAAM,aAAa,KAAK,MAAM,gBAAgB,CAAC;AAC/C,QAAM,UAAU,oBAAoB,MAAM,UAAU;AACpD,QAAM,YAAY,oBAAoB,MAAM,KAAK,SAAS,UAAU;AACpE,SAAO,GAAG,KAAK,MAAM,GAAG,OAAO,CAAC,GAAG,8BAA8B,GAAG,KAAK,MAAM,SAAS,CAAC;AAC3F;AAEA,SAAS,mBAAmB,MAAc,WAA2B;AACnE,MAAI,MAAM;AACV,MAAI,OAAO,KAAK;AAChB,MAAI,OAAO;AACX,SAAO,OAAO,MAAM;AAClB,UAAM,SAAS,KAAK,OAAO,MAAM,QAAQ,CAAC;AAC1C,UAAM,MAAM,oBAAoB,MAAM,MAAM;AAC5C,UAAM,YAAY,KAAK,MAAM,GAAG,GAAG;AACnC,QAAI,mBAAmB,SAAS,KAAK,WAAW;AAC9C,aAAO;AACP,YAAM,SAAS;AAAA,IACjB,OAAO;AACL,aAAO,SAAS;AAAA,IAClB;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,oBAAoB,MAAc,QAAwB;AACjE,MAAI,WAAW,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,QAAQ,MAAM,CAAC;AACxD,MACE,WAAW,KACX,WAAW,KAAK,UAChB,gBAAgB,KAAK,WAAW,WAAW,CAAC,CAAC,KAC7C,eAAe,KAAK,WAAW,QAAQ,CAAC,GACxC;AACA,gBAAY;AAAA,EACd;AACA,SAAO;AACT;AAGA,SAAS,oBAAoB,MAAc,QAAwB;AACjE,MAAI,WAAW,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,QAAQ,MAAM,CAAC;AACxD,MACE,WAAW,KACX,WAAW,KAAK,UAChB,gBAAgB,KAAK,WAAW,WAAW,CAAC,CAAC,KAC7C,eAAe,KAAK,WAAW,QAAQ,CAAC,GACxC;AACA,gBAAY;AAAA,EACd;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,UAA2B;AAClD,SAAO,YAAY,SAAU,YAAY;AAC3C;AAEA,SAAS,eAAe,UAA2B;AACjD,SAAO,YAAY,SAAU,YAAY;AAC3C;AAEA,SAAS,qBAAqB,MAA+B;AAC3D,QAAM,UAAW,KAA+B;AAChD,MAAI,CAAC,MAAM,QAAQ,OAAO,GAAG;AAC3B,WAAO;AAAA,EACT;AACA,SAAO,QAAQ,OAAO,CAAC,SAAS;AAC9B,QAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,aAAO;AAAA,IACT;AACA,UAAM,OAAQ,KAA4B;AAC1C,WAAO,SAAS,iBAAiB,SAAS;AAAA,EAC5C,CAAC;AACH;AAEA,SAAS,YAAY,MAA8B;AACjD,QAAM,UAAW,KAA+B;AAChD,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,OAAO,GAAG;AAC1B,WAAO,QACJ,IAAI,CAAC,SAAS;AACb,UAAI,QAAQ,OAAO,SAAS,UAAU;AACpC,cAAM,SAAS;AACf,YAAI,OAAO,OAAO,SAAS,UAAU;AACnC,iBAAO,OAAO;AAAA,QAChB;AACA,YAAI,OAAO,OAAO,YAAY,UAAU;AACtC,iBAAO,OAAO;AAAA,QAChB;AAAA,MACF;AACA,aAAO;AAAA,IACT,CAAC,EACA,KAAK,EAAE;AAAA,EACZ;AACA,SAAO;AACT;AAEO,SAAS,mCAAmC,OAA0C;AAC3F,SAAO,MAAM,IAAI,UAAU,EAAE,KAAK,IAAI;AACxC;AAEA,SAAS,WAAW,MAA8B;AAChD,QAAM,OAAOC,UAAS,IAAI,KAAK;AAC/B,MAAI,SAAS,WAAW;AACtB,UAAM,OAAO,SAAS,IAAI,KAAK;AAC/B,WAAO,IAAI,IAAI,KAAK,YAAY,IAAI,CAAC;AAAA,EACvC;AACA,MAAI,SAAS,aAAa;AACxB,WAAO;AAAA,EACT;AACA,MAAID,cAAa,IAAI,IAAI,GAAG;AAC1B,WAAO,iBAAiB,WAAW,IAAI,CAAC;AAAA,EAC1C;AACA,MAAID,0BAAyB,IAAI,GAAG;AAClC,WAAO,cAAc,IAAI,KAAK,SAAS,IAAI,CAAC;AAAA,EAC9C;AACA,SAAO,IAAI,IAAI,KAAK,cAAc,IAAI,CAAC;AACzC;AAEA,SAAS,WAAW,MAA8B;AAChD,QAAM,SAAU,KAA8B;AAC9C,MAAI,OAAO,WAAW,UAAU;AAC9B,WAAO;AAAA,EACT;AACA,SAAO,cAAc,UAAU,IAAI;AACrC;AAEA,SAAS,SAAS,MAA8B;AAC9C,QAAM,OAAQ,KAA4B;AAC1C,QAAM,OAAQ,KAAiC;AAC/C,QAAM,WAAW,OAAO,SAAS,WAAW,OAAO;AACnD,QAAM,UAAU,OAAO,SAAS,WAAW,OAAO,cAAc,QAAQ,CAAC,CAAC;AAC1E,SAAO,GAAG,QAAQ,IAAI,OAAO,GAAG,KAAK;AACvC;AAEA,SAAS,cAAc,OAAwB;AAC7C,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;;;AC1uBA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,2BAA2B;AAYpC,SAAS,oBACP,gBACA,SACoB;AACpB,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,yBAAyB,eAAe,cAAc,6BAA6B;AAAA,EAC/F;AACA,SAAO;AACT;AAMA,IAAM,kBAAkB;AACxB,IAAM,qBAAuC,CAAC,MAAM,GAAG;AAGvD,IAAM,kBAAkB;AAGxB,IAAM,sBAAsB;AAC5B,IAAM,oBAAoB;AAW1B,IAAM,8BAA8B;AACpC,IAAM,4BAA4B;AAalC,IAAM,8BAA8B;AAyBpC,IAAM,SAAiC;AAAA,EACrC,MAAM;AAAA,EACN,SAAS;AAAA,EACT,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,KAAK;AAAA,EACL,MAAM;AAAA,EACN,KAAK;AAAA,EACL,OAAO;AAAA,EACP,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,KAAK;AAAA,EACL,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,MAAM;AAAA,EACN,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,MAAM;AAAA,EACN,KAAK;AACP;AACA,SAAS,SAAS,GAAmB;AACnC,QAAM,MAAM,EAAE,YAAY;AAC1B,MAAI,OAAO,GAAG,EAAG,QAAO,OAAO,GAAG;AAClC,MAAI,oBAAoB,KAAK,GAAG,EAAG,QAAO,IAAI,YAAY;AAC1D,SAAO,IAAI,WAAW,IAAI,MAAM;AAClC;AACA,IAAM,aAA6C;AAAA,EACjD,MAAM;AAAA,EACN,OAAO;AAAA,EACP,OAAO;AAAA,EACP,MAAM;AAAA,EACN,SAAS;AACX;AAgCO,IAAM,2BAAN,cAAuC,MAAM;AAAA,EAClD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAKO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC7C,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,wBAAN,cAAoC,MAAM;AAAA,EAC/C,cAAc;AACZ,UAAM,6DAAwD;AAC9D,SAAK,OAAO;AAAA,EACd;AACF;AAGO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC7C,YACS,KACA,UACA,QACP;AACA,UAAM,2BAA2B,QAAQ,MAAM,GAAG,GAAG,SAAS;AAAA,EAAK,MAAM,KAAK,EAAE,EAAE;AAJ3E;AACA;AACA;AAGP,SAAK,OAAO;AAAA,EACd;AACF;AAWO,IAAM,kBAAN,MAA0C;AAAA,EACtC,cAAc;AAAA,EACd;AAAA,EACD;AAAA,EACS;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACT,WAAW;AAAA,EACX,cAAoC;AAAA,EAE5C,YAAY,SAA6B,OAA+B,CAAC,GAAG;AAC1E,SAAK,UAAU;AACf,SAAK,UAAU,KAAK,WAAW;AAC/B,SAAK,aAAa,KAAK,cAAc;AACrC,QAAI,KAAK,UAAU,QAAW;AAC5B,WAAK,QAAQ,KAAK;AAAA,IACpB;AACA,SAAK,cAAc,KAAK,eAAe;AACvC,SAAK,WAAW,KAAK,YAAY;AACjC,SAAK,MAAM,KAAK,oBAAoB;AACpC,SAAK,2BAA2B,KAAK,4BAA4B;AACjE,SAAK,yBAAyB,KAAK,0BAA0B;AAC7D,SAAK,UAAU,KAAK;AAAA,EACtB;AAAA;AAAA,EAGA,OAAO,SAA6B;AAClC,SAAK,UAAU;AACf,SAAK,WAAW;AAChB,SAAK,cAAc;AAAA,EACrB;AAAA,EAEA,MAAc,cAA6B;AACzC,QAAI,KAAK,SAAU;AACnB,QAAI,CAAC,KAAK,SAAS;AAGjB,WAAK,WAAW;AAChB;AAAA,IACF;AACA,SAAK,gBAAgB,KAAK,QAAQ,KAAK,OAAO;AAC9C,QAAI;AACF,YAAM,KAAK;AACX,WAAK,WAAW;AAAA,IAClB,SAAS,OAAO;AAId,WAAK,cAAc;AACnB,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,EAAE,KAA8B;AAC5C,UAAM,KAAK,YAAY;AACvB,UAAM,OAAO;AAAA,MACX,KAAK,WAAW,KAAK,OAAO,IAAI,GAAG;AAAA,MACnC,GAAI,KAAK,QAAQ,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,MAC1C,aAAa;AAAA,MACb,iBAAiB;AAAA,IACnB;AACA,QAAI;AACJ,QAAI,OAAO,KAAK,QAAQ,SAAS,YAAY;AAC3C,eAAS,MAAM,KAAK,QAAQ,KAAK,IAAI;AAAA,IACvC,WAAW,OAAO,KAAK,QAAQ,gBAAgB,YAAY;AACzD,eAAS,MAAM,KAAK,QAAQ,YAAY,IAAI;AAAA,IAC9C,OAAO;AACL,YAAM,IAAI,yBAAyB,mDAAmD;AAAA,IACxF;AACA,UAAM,SAAS,qBAAqB,MAAM;AAC1C,QAAI,2BAA2B,MAAM,GAAG;AAWtC,cAAQ;AAAA,QACN,8DAA8D,eAAe,oDAA+C,oBAAoB,GAAG,CAAC;AAAA,MACtJ;AACA,aAAO;AAAA,IACT;AACA,UAAM,WAAW,uBAAuB,MAAM;AAC9C,QAAI,aAAa,QAAQ,aAAa,GAAG;AACvC,YAAM,IAAI,oBAAoB,KAAK,UAAU,MAAM;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,aAAa;AACnB,QAAI,KAAK,SAAU,OAAM,IAAI,sBAAsB;AAAA,EACrD;AAAA,EACQ,IAAI,GAAmB;AAC7B,WAAO,IAAI,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,aAA8B;AAqBlC,QAAI;AACJ,UAAM,WAAW,KAAK,IAAI,IAAI,KAAK;AACnC,QAAI,UAAU;AAId,WAAO,MAAM;AACX,UAAI,UAAU,GAAG;AACf,cAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,KAAK,sBAAsB,CAAC;AAAA,MACrE;AACA;AACA,YAAM,IAAI,GAAG,KAAK,GAAG,YAAY,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AAClF,UAAI;AACF,cAAM,KAAK,EAAE,+BAA+B,CAAC,EAAE;AAC/C,cAAM,QAAQ,MAAM,KAAK,oBAAoB,CAAC;AAC9C,YAAI,MAAM,WAAW,GAAG;AAGtB,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAAA,QACF;AACA,eAAO,OAAO,KAAK,KAAK,EAAE,SAAS,QAAQ;AAAA,MAC7C,SAAS,OAAO;AACd,oBAAY;AAIZ,YAAI,iBAAiB,qBAAqB;AACxC,gBAAM;AAAA,QACR;AAAA,MACF,UAAE;AAMA,YAAI,KAAK,UAAU;AACjB,gBAAM,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,MAAM,MAAS;AAAA,QAClD;AAAA,MACF;AAEA,UAAI,KAAK,IAAI,IAAI,KAAK,0BAA0B,UAAU;AACxD;AAAA,MACF;AAAA,IACF;AAKA,QAAI,qBAAqB,OAAO;AAC9B,YAAM;AAAA,IACR;AACA,UAAM,IAAI,yBAAyB,sDAAsD;AAAA,EAC3F;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBA,MAAc,WAAW,KAA8B;AACrD,UAAM,OAAO;AAAA,MACX;AAAA,MACA,GAAI,KAAK,QAAQ,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,MAC1C,aAAa;AAAA;AAAA;AAAA,MAGb,iBAAiB;AAAA,IACnB;AACA,QAAI,OAAO,KAAK,QAAQ,SAAS,YAAY;AAC3C,YAAM,SAAS,MAAM,KAAK,QAAQ,KAAK,IAAI;AAI3C,aAAO,OAAO,WAAW,WAAW,gBAAgB,MAAM,IAAI,qBAAqB,MAAM;AAAA,IAC3F;AACA,QAAI,OAAO,KAAK,QAAQ,gBAAgB,YAAY;AAClD,aAAO,gBAAgB,MAAM,KAAK,QAAQ,YAAY,IAAI,CAAC;AAAA,IAC7D;AACA,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAc,oBAAoB,MAAmC;AAGnE,UAAM,WAAW,MAAM,KAAK,WAAW,WAAW,IAAI,cAAc,GAAG,QAAQ,WAAW,EAAE;AAC5F,UAAM,WAAW,OAAO,SAAS,SAAS,EAAE;AAC5C,QAAI,CAAC,OAAO,SAAS,QAAQ,KAAK,YAAY,EAAG,QAAO,IAAI,WAAW;AAEvE,UAAM,SAAmB,CAAC;AAC1B,UAAM,UAAU,KAAK,KAAK,WAAW,2BAA2B;AAChE,aAAS,IAAI,GAAG,IAAI,SAAS,KAAK;AAGhC,YAAM,MAAM,MAAM,KAAK;AAAA,QACrB,SAAS,IAAI,OAAO,2BAA2B,SAAS,CAAC;AAAA,MAC3D;AACA,aAAO,KAAK,OAAO,KAAK,IAAI,QAAQ,QAAQ,EAAE,GAAG,QAAQ,CAAC;AAAA,IAC5D;AACA,UAAM,QAAQ,OAAO,OAAO,MAAM;AAClC,QAAI,MAAM,WAAW,UAAU;AAC7B,YAAM,IAAI;AAAA,QACR,iCAAiC,MAAM,MAAM,QAAQ,QAAQ,MAAM,OAAO,mBAAmB,IAAI;AAAA,MACnG;AAAA,IACF;AACA,WAAO,IAAI,WAAW,KAAK;AAAA,EAC7B;AAAA,EAEA,MAAM,MAAM,IAAY,IAAY,QAAwB;AAC1D,SAAK,WAAW;AAChB,UAAM,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,UAAU,WAAW,MAAM,KAAK,CAAC,EAAE;AAAA,EACtF;AAAA,EACA,MAAM,YAAY,IAAY,IAAY;AACxC,SAAK,WAAW;AAChB,UAAM,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,gCAAgC;AAAA,EACnF;AAAA,EACA,MAAM,KAAK,IAAY,IAAY;AACjC,SAAK,WAAW;AAChB,UAAM,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,EAAE;AAAA,EACrD;AAAA,EACA,MAAM,OAAO,IAAY,IAAY,IAAY,IAAY;AAC3D,SAAK,WAAW;AAEhB,UAAM,UAAU,CAAC,OACf,KAAK,IAAI,mBAAmB,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,IAAI,EAAE,IAAI,mBAAmB,CAAC,CAAC;AACzF,UAAM,OAAO,KAAK,IAAI,IAAI;AAC1B,UAAM,OAAO,KAAK,IAAI,IAAI;AAC1B,UAAM,KAAK,QAAQ,EAAE;AACrB,UAAM,KAAK,QAAQ,EAAE;AACrB,QAAI,MAAM,4BAA4B,EAAE,IAAI,EAAE;AAC9C,QAAI,GAAI,QAAO,mBAAmB,EAAE,IAAI,IAAI;AAC5C,QAAI,GAAI,QAAO,mBAAmB,EAAE,IAAI,IAAI;AAC5C,UAAM,KAAK,EAAE,GAAG;AAAA,EAClB;AAAA,EACA,MAAM,KAAK,MAAc;AACvB,SAAK,WAAW;AAChB,UAAM,KAAK,EAAE,wBAAwB,KAAK,WAAW,OAAO,KAAK,IAAI,IAAI,CAAC,EAAE;AAAA,EAC9E;AAAA,EACA,MAAM,SAAS,MAAgB;AAC7B,SAAK,WAAW;AAChB,UAAM,QAAQ,KAAK,IAAI,QAAQ,EAAE,KAAK,GAAG;AACzC,UAAM,KAAK,EAAE,kBAAkB,KAAK,IAAI,KAAK,CAAC,EAAE;AAAA,EAClD;AAAA,EACA,MAAM,KAAK,MAA0B;AACnC,SAAK,WAAW;AAChB,QAAI,KAAK,WAAW,EAAG;AACvB,UAAM,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC;AACzB,QAAI,MAAM,4BAA4B,GAAG,IAAI,GAAG;AAChD,eAAW,CAAC,IAAI,EAAE,KAAK,KAAK,MAAM,CAAC,EAAG,QAAO,qBAAqB,EAAE,IAAI,EAAE;AAC1E,WAAO;AACP,UAAM,KAAK,EAAE,GAAG;AAAA,EAClB;AAAA,EACA,MAAM,OAAO;AACX,UAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,GAAI,CAAC;AAAA,EAC9C;AACF;AAkCA,IAAM,iBAAwD;AAAA,EAC5D,MAAM,cAAc;AAAA,EACpB,OAAO,cAAc;AAAA,EACrB,OAAO,cAAc;AAAA,EACrB,MAAM,cAAc;AAAA,EACpB,SAAS,cAAc;AACzB;AASA,IAAM,qCAAqC;AAC3C,IAAM,mCAAmC;AAgBzC,SAAS,wBAAwB,OAAyB;AACxD,QAAM,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,SAAS,EAAE,GAAG,YAAY;AACvF,SACE,IAAI,SAAS,kBAAkB,KAC/B,IAAI,SAAS,2BAA2B,KACxC,IAAI,SAAS,SAAS;AAE1B;AAgBO,IAAM,wBAAN,MAAgD;AAAA,EAC5C;AAAA,EACA;AAAA,EACD;AAAA,EACS;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQT,cAAuC;AAAA,EACvC,aAAsC;AAAA,EAE9C,YAAY,SAA+B,OAAqC,CAAC,GAAG;AAClF,SAAK,UAAU;AACf,SAAK,aAAa,KAAK,cAAc;AAGrC,SAAK,cAAc,KAAK,eAAe;AACvC,SAAK,WAAW,KAAK,YAAY;AACjC,SAAK,2BACH,KAAK,4BAA4B;AACnC,SAAK,yBAAyB,KAAK,0BAA0B;AAAA,EAC/D;AAAA;AAAA,EAGA,OAAO,SAA+B;AACpC,SAAK,UAAU;AAAA,EACjB;AAAA,EAEQ,aAAa;AACnB,QAAI,KAAK,SAAU,OAAM,IAAI,sBAAsB;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,SAAS,GAAW,GAAqC;AAC/D,UAAM,MAAM,KAAK;AACjB,UAAM,MAAM,KAAK;AACjB,QAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,EAAG,QAAO,EAAE,GAAG,EAAE;AAC9D,QAAI,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,EAAG,QAAO,EAAE,GAAG,EAAE;AAC1D,WAAO;AAAA,MACL,GAAG,KAAK,MAAO,IAAI,IAAI,CAAC,IAAK,IAAI,CAAC,CAAC;AAAA,MACnC,GAAG,KAAK,MAAO,IAAI,IAAI,CAAC,IAAK,IAAI,CAAC,CAAC;AAAA,IACrC;AAAA,EACF;AAAA,EAEA,MAAc,QACZ,GACA,GACA,QACA,QACe;AASf,UAAM,IAAI,KAAK,SAAS,GAAG,CAAC;AAC5B,UAAM,KAAK,QAAQ,aAAa;AAAA,MAC9B,OAAO;AAAA,MACP,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,QAAQ,OAAO;AAAA,IAC5C,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,aAA8B;AAelC,QAAI;AACJ,UAAM,WAAW,KAAK,IAAI,IAAI,KAAK;AACnC,QAAI,UAAU;AACd,WAAO,MAAM;AACX,UAAI,UAAU,GAAG;AACf,cAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,KAAK,sBAAsB,CAAC;AAAA,MACrE;AACA;AACA,UAAI;AACF,cAAM,EAAE,KAAK,OAAO,QAAQ,aAAa,aAAa,IAAI,MAAM,KAAK,QAAQ,WAAW;AACxF,YAAI,IAAI,WAAW,GAAG;AAGpB,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAAA,QACF;AAGA,aAAK,cAAc,CAAC,OAAO,MAAM;AACjC,aAAK,aAAa,CAAC,eAAe,OAAO,gBAAgB,MAAM;AAC/D,eAAO,OAAO,KAAK,GAAG,EAAE,SAAS,QAAQ;AAAA,MAC3C,SAAS,OAAO;AACd,oBAAY;AAEZ,YAAI,wBAAwB,KAAK,EAAG;AAAA,MACtC;AAEA,UAAI,KAAK,IAAI,IAAI,KAAK,0BAA0B,UAAU;AACxD;AAAA,MACF;AAAA,IACF;AAIA,UAAM,SAAS;AAAA,MACb,qBAAqB,QAAQ,UAAU,UAAU,OAAO,SAAS;AAAA,IACnE;AACA,YAAQ;AAAA,MACN,mDAAmD,OAAO,gBAAgB,MAAM;AAAA,IAClF;AACA,QAAI,qBAAqB,OAAO;AAC9B,YAAM;AAAA,IACR;AACA,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,MAAM,GAAW,GAAW,QAAwB;AACxD,SAAK,WAAW;AAChB,UAAM,KAAK;AAAA,MACT;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,eAAe,MAAM,KAAK,cAAc;AAAA,IAC1C;AAAA,EACF;AAAA,EACA,MAAM,YAAY,GAAW,GAAW;AACtC,SAAK,WAAW;AAChB,UAAM,KAAK;AAAA,MACT;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EACA,MAAM,KAAK,GAAW,GAAW;AAC/B,SAAK,WAAW;AAChB,UAAM,KAAK;AAAA,MACT;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EACA,MAAM,OAAO,GAAW,GAAW,IAAY,IAAY;AACzD,SAAK,WAAW;AAKhB,UAAM,IAAI,KAAK,SAAS,GAAG,CAAC;AAC5B,UAAM,KAAK,QAAQ,aAAa;AAAA,MAC9B,OAAO;AAAA,MACP,QAAQ,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAAA,IACnD,CAAC;AAAA,EACH;AAAA,EACA,MAAM,KAAK,MAAc;AACvB,SAAK,WAAW;AAGhB,UAAM,KAAK,QAAQ,aAAa;AAAA,MAC9B,OAAO;AAAA,MACP,KAAK,EAAE,KAAK,MAAM,QAAQ,MAAM,QAAQ,UAAU,iBAAiB;AAAA,IACrE,CAAC;AAAA,EACH;AAAA,EACA,MAAM,SAAS,MAAgB;AAC7B,SAAK,WAAW;AAMhB,UAAM,KAAK,QAAQ,aAAa;AAAA,MAC9B,OAAO;AAAA,MACP,KAAK,EAAE,KAAK,KAAK,KAAK,GAAG,GAAG,QAAQ,OAAO,QAAQ,UAAU,iBAAiB;AAAA,IAChF,CAAC;AAAA,EACH;AAAA,EACA,MAAM,KAAK,MAA0B;AACnC,SAAK,WAAW;AAChB,QAAI,KAAK,WAAW,EAAG;AAGvB,UAAM,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC;AACvB,UAAM,KAAK;AAAA,MACT;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,cAAc;AAAA,IAChB;AACA,eAAW,CAAC,IAAI,EAAE,KAAK,KAAK,MAAM,CAAC,GAAG;AACpC,YAAM,KAAK;AAAA,QACT;AAAA,QACA;AAAA,QACA,cAAc;AAAA,QACd,cAAc;AAAA,MAChB;AAAA,IACF;AACA,UAAM,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,SAAS,CAAC;AACrC,UAAM,KAAK,QAAQ,IAAI,IAAI,cAAc,mBAAmB,cAAc,mBAAmB;AAAA,EAC/F;AAAA,EACA,MAAM,OAAO;AACX,UAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,GAAI,CAAC;AAAA,EAC9C;AACF;AAUO,SAAS,uBACd,SACsD;AACtD,QAAM,IAAI;AACV,SAAO,OAAO,EAAE,iBAAiB,cAAc,OAAO,EAAE,eAAe;AACzE;AAyBA,SAAS,yBAAyB,OAA2B;AAC3D,MAAI,MAAM,CAAC,MAAM,OAAQ,MAAM,CAAC,MAAM,MAAQ,MAAM,CAAC,MAAM,MAAQ,MAAM,CAAC,MAAM;AAC9E,WAAO;AACT,MAAI,MAAM,CAAC,MAAM,OAAQ,MAAM,CAAC,MAAM,OAAQ,MAAM,CAAC,MAAM,IAAM,QAAO;AACxE,MAAI,MAAM,CAAC,MAAM,MAAQ,MAAM,CAAC,MAAM,MAAQ,MAAM,CAAC,MAAM,MAAQ,MAAM,CAAC,MAAM;AAC9E,WAAO;AACT,MACE,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,EAAE,MAAM,MACd,MAAM,EAAE,MAAM;AAEd,WAAO;AACT,SAAO;AACT;AAIA,SAAS,+BAA+B,OAAoC;AAC1E,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,EAAE,MAAM,WAAW,KAAK,KAAK,GAAG,WAAW,yBAAyB,KAAK,EAAE;AAAA,EACpF;AACF;AAMA,SAAS,4BAA4B,QAA0C;AAC7E,MAAI,OAAO,WAAW,SAAU,QAAO;AACvC,QAAM,EAAE,MAAM,IAAI;AAClB,QAAM,YACJ,OAAO,MAAM,cAAc,WAAW,MAAM,YAAY;AAC1D,SAAO,QAAQ,SAAS,WAAW,OAAO,KAAK,MAAM,IAAI,EAAE,SAAS,QAAQ,CAAC;AAC/E;AAQA,SAAS,sCAAsC,eAAiC;AAC9E,MAAI,CAAC,cAAe,QAAO;AAC3B,QAAM,kBACJ,OAAO,kBAAkB,YACzB,iBACA,OAAQ,cAA4C,gBAAgB,aAC9D,cAAqD,YAAY,QAAQ,KAC3E;AACN,SAAO,CAAC,gBAAgB,SAAS,iBAAiB;AACpD;AAEA,IAAM,6BACJ;AAKF,IAAM,cAAc;AAAA,EAClB,GAAG;AAAA,IACD,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA,EACA,GAAG;AAAA,IACD,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AACF;AAEA,SAAS,aACP,YACA,UACyB;AACzB,SAAO,EAAE,MAAM,UAAU,YAAY,UAAU,sBAAsB,MAAM;AAC7E;AAoBO,SAAS,sBACd,UACA,UACA,eACA,uBAAuB,OACN;AACjB,QAAM,WAAW,kBAAkB,SAAY,EAAE,cAAsC,IAAI,CAAC;AAI5F,QAAM,QAAQ,OACZ,cACA,WACoB;AACpB,QAAI,SAAU,QAAO;AACrB,QAAI;AACF,YAAM,OAAO;AACb,aAAO;AAAA,IACT,SAAS,OAAO;AACd,UAAI,iBAAiB,sBAAuB,QAAO;AACnD,aAAO,2BAA2B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IAC1F;AAAA,EACF;AAEA,SAAO;AAAA,IACL,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aACE;AAAA,MACF,YAAY,aAAa,CAAC,GAAG,CAAC,CAAC;AAAA,MAC/B,QAAQ;AAAA,MACR,SAAS,YAAY;AAGnB,cAAM,MAAM,MAAM,SAAS,WAAW;AACtC,cAAM,QAAQ,WAAW,KAAK,OAAO,KAAK,KAAK,QAAQ,CAAC;AACxD,cAAM,QAAQ,+BAA+B,KAAK;AAKlD,eAAO,uBAAuB,QAAQ,4BAA4B,KAAK;AAAA,MACzE;AAAA,IACF,CAAC;AAAA,IACD,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aACE;AAAA,MACF,YAAY;AAAA,QACV;AAAA,UACE,GAAG;AAAA,UACH,QAAQ;AAAA,YACN,MAAM;AAAA,YACN,MAAM,CAAC,QAAQ,SAAS,SAAS,QAAQ,SAAS;AAAA,YAClD,aAAa;AAAA,UACf;AAAA,QACF;AAAA,QACA,CAAC,KAAK,GAAG;AAAA,MACX;AAAA,MACA,QAAQ;AAAA,MACR,GAAG;AAAA,MACH,SAAS,OAAO,UAAU;AACxB,cAAM,EAAE,GAAG,GAAG,OAAO,IAAI;AACzB,eAAO;AAAA,UAAM,WAAW,UAAU,MAAM,QAAQ,CAAC,KAAK,CAAC;AAAA,UAAK,MAC1D,SAAS,MAAM,GAAG,GAAG,UAAU,MAAM;AAAA,QACvC;AAAA,MACF;AAAA,IACF,CAAC;AAAA,IACD,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aACE;AAAA,MACF,YAAY,aAAa,EAAE,GAAG,YAAY,GAAG,CAAC,KAAK,GAAG,CAAC;AAAA,MACvD,QAAQ;AAAA,MACR,GAAG;AAAA,MACH,SAAS,OAAO,UAAU;AACxB,cAAM,EAAE,GAAG,EAAE,IAAI;AACjB,eAAO,MAAM,sBAAsB,CAAC,KAAK,CAAC,KAAK,MAAM,SAAS,YAAY,GAAG,CAAC,CAAC;AAAA,MACjF;AAAA,IACF,CAAC;AAAA,IACD,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aAAa;AAAA,MACb,YAAY,aAAa,EAAE,GAAG,YAAY,GAAG,CAAC,KAAK,GAAG,CAAC;AAAA,MACvD,QAAQ;AAAA,MACR,GAAG;AAAA,MACH,SAAS,OAAO,UAAU;AACxB,cAAM,EAAE,GAAG,EAAE,IAAI;AACjB,eAAO,MAAM,aAAa,CAAC,KAAK,CAAC,KAAK,MAAM,SAAS,KAAK,GAAG,CAAC,CAAC;AAAA,MACjE;AAAA,IACF,CAAC;AAAA,IACD,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aACE;AAAA,MACF,YAAY;AAAA,QACV;AAAA,UACE,GAAG;AAAA,UACH,UAAU;AAAA,YACR,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,UACA,UAAU;AAAA,YACR,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,QACF;AAAA,QACA,CAAC,KAAK,KAAK,YAAY,UAAU;AAAA,MACnC;AAAA,MACA,QAAQ;AAAA,MACR,GAAG;AAAA,MACH,SAAS,OAAO,UAAU;AACxB,cAAM,EAAE,GAAG,GAAG,UAAU,SAAS,IAAI;AAMrC,eAAO;AAAA,UAAM,aAAa,QAAQ,KAAK,QAAQ,SAAS,CAAC,KAAK,CAAC;AAAA,UAAK,MAClE,SAAS,OAAO,GAAG,GAAG,UAAU,QAAQ;AAAA,QAC1C;AAAA,MACF;AAAA,IACF,CAAC;AAAA,IACD,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aACE;AAAA,MACF,YAAY;AAAA,QACV,EAAE,MAAM,EAAE,MAAM,UAAU,aAAa,2BAA2B,EAAE;AAAA,QACpE,CAAC,MAAM;AAAA,MACT;AAAA,MACA,QAAQ;AAAA,MACR,GAAG;AAAA,MACH,SAAS,OAAO,UAAU;AACxB,cAAM,EAAE,KAAK,IAAI;AACjB,eAAO,MAAM,SAAS,KAAK,MAAM,iBAAiB,MAAM,SAAS,KAAK,IAAI,CAAC;AAAA,MAC7E;AAAA,IACF,CAAC;AAAA,IACD,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aACE;AAAA,MACF,YAAY;AAAA,QACV;AAAA,UACE,MAAM;AAAA,YACJ,MAAM;AAAA,YACN,OAAO,EAAE,MAAM,SAAS;AAAA,YACxB,aAAa;AAAA,UACf;AAAA,QACF;AAAA,QACA,CAAC,MAAM;AAAA,MACT;AAAA,MACA,QAAQ;AAAA,MACR,GAAG;AAAA,MACH,SAAS,OAAO,UAAU;AACxB,cAAM,EAAE,KAAK,IAAI;AACjB,eAAO,MAAM,WAAW,KAAK,KAAK,GAAG,CAAC,IAAI,MAAM,SAAS,SAAS,IAAI,CAAC;AAAA,MACzE;AAAA,IACF,CAAC;AAAA,IACD,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aACE;AAAA,MACF,YAAY;AAAA,QACV;AAAA,UACE,MAAM;AAAA,YACJ,MAAM;AAAA,YACN,aAAa;AAAA,YACb,OAAO;AAAA,cACL,MAAM;AAAA,cACN,YAAY,EAAE,GAAG,EAAE,MAAM,UAAU,GAAG,GAAG,EAAE,MAAM,UAAU,EAAE;AAAA,cAC7D,UAAU,CAAC,KAAK,GAAG;AAAA,cACnB,sBAAsB;AAAA,YACxB;AAAA,UACF;AAAA,QACF;AAAA,QACA,CAAC,MAAM;AAAA,MACT;AAAA,MACA,QAAQ;AAAA,MACR,GAAG;AAAA,MACH,SAAS,OAAO,UAAU;AACxB,cAAM,EAAE,KAAK,IAAI;AACjB,cAAM,SAAS,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAqB;AAC7D,eAAO,MAAM,mBAAmB,OAAO,MAAM,aAAa,MAAM,SAAS,KAAK,MAAM,CAAC;AAAA,MACvF;AAAA,IACF,CAAC;AAAA,EACH;AACF;AA6CO,SAAS,YAAY,OAAwB,CAAC,GAA0B;AAC7E,SAAO,IAAI,sBAAsB,IAAI;AACvC;AAoBO,IAAM,wBAAN,cAAoC,WAAW;AAAA,EAEpD,YAAoB,OAAwB,CAAC,GAAG;AAC9C,UAAM;AADY;AAAA,EAEpB;AAAA,EAHS,OAAO;AAAA,EAKP,QAAyB;AAChC,UAAM,UAAU,oBAAoB,gBAAgB,KAAK,QAAQ;AAMjE,UAAM,WAAqB,uBAAuB,OAAO,IACrD,IAAI,sBAAsB,SAAS;AAAA,MACjC,GAAI,KAAK,KAAK,aAAa,EAAE,YAAY,KAAK,KAAK,WAAW,IAAI,CAAC;AAAA,MACnE,GAAI,KAAK,KAAK,aAAa,SAAY,EAAE,UAAU,KAAK,KAAK,SAAS,IAAI,CAAC;AAAA,IAC7E,CAAC,IACD,IAAI,gBAAgB,SAAS;AAAA,MAC3B,GAAI,KAAK,KAAK,aAAa,EAAE,YAAY,KAAK,KAAK,WAAW,IAAI,CAAC;AAAA,MACnE,GAAI,KAAK,KAAK,aAAa,SAAY,EAAE,UAAU,KAAK,KAAK,SAAS,IAAI,CAAC;AAAA,MAC3E,GAAI,KAAK,KAAK,UAAU,EAAE,SAAS,KAAK,KAAK,QAAQ,IAAI,CAAC;AAAA;AAAA,MAE1D,GAAI,OAAO,KAAK,WAAW,WAAW,EAAE,OAAO,KAAK,OAAO,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,MAKhE,SAAS,OAAO,oBAAoB;AAClC,cAAM,mBAAmB,iBAAiB;AAAA,UACxC,kBAAkB,EAAE,YAAY,WAAW;AAAA,QAC7C,CAAC;AACD,cAAM,KAAK,KAAK,UAAU,eAAe;AAAA,MAC3C;AAAA,IACF,CAAC;AAOL,YAAQ,KAAK,KAAK,UAAU;AAAA,MAC1B,KAAK;AACH,eAAO,CAAC,KAAK,mBAAmB,QAAQ,CAAC;AAAA,MAC3C,KAAK;AACH,eAAO;AAAA,UACL;AAAA,UACA,KAAK,KAAK,YAAY;AAAA,UACtB,KAAK,KAAK;AAAA,UACV;AAAA,QACF;AAAA,MACF,KAAK;AACH,eAAO;AAAA,UACL;AAAA,UACA,KAAK,KAAK,YAAY;AAAA,UACtB,KAAK,KAAK;AAAA,UACV;AAAA,QACF;AAAA,MACF,KAAK;AACH;AAAA,IACJ;AAGA,QAAI,sCAAsC,KAAK,cAAc,GAAG;AAC9D,aAAO,CAAC,KAAK,mBAAmB,QAAQ,CAAC;AAAA,IAC3C;AACA,WAAO;AAAA,MACL;AAAA,MACA,KAAK,KAAK,YAAY;AAAA,MACtB,KAAK,KAAK;AAAA,MACV,KAAK,KAAK,wBAAwB;AAAA,IACpC;AAAA,EACF;AAAA;AAAA;AAAA,EAIQ,mBAAmB,UAAmC;AAC5D,WAAO,aAAa;AAAA,MAClB;AAAA,MACA,GAAI,KAAK,KAAK,kBAAkB,SAC5B,EAAE,eAAe,KAAK,KAAK,cAAuB,IAClD,CAAC;AAAA,IACP,CAAC;AAAA,EACH;AACF;;;AC3zCA,SAAS,cAAAI,mBAAkB;AAI3B,IAAM,aAAa;AACnB,IAAM,wBAAwB;AAC9B,IAAM,oBAAoB;AAC1B,IAAM,kBAAkB,KAAK,OAAO;AACpC,IAAM,kBAAkB;AAuBjB,IAAM,4BAAN,cAAwC,WAAW;AAAA,EAIxD,YACmB,aACA,gBAAqC,oBAAI,IAAI,GAC9D;AACA,UAAM;AAHW;AACA;AAAA,EAGnB;AAAA,EARS,OAAO;AAAA,EACR;AAAA,EASR,MAAe,eAAuC;AACpD,UAAM,UAAU,6BAA6B,KAAK,QAAQ;AAC1D,SAAK,cAAc;AAAA,MACjB;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AACA,UAAMC,UAAS,MAAM,KAAK;AAC1B,QAAIA,QAAO,WAAW,EAAG,QAAO;AAEhC,UAAM,YAAYA,QACf,IAAI,CAAC,UAAU,KAAK,MAAM,IAAI,KAAK,MAAM,WAAW,WAAW,MAAM,IAAI,GAAG,EAC5E,KAAK,IAAI;AACZ,WAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKT,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOT;AACF;AAEO,SAAS,gBACd,aACA,gBAAkC,CAAC,GACR;AAC3B,SAAO,IAAI;AAAA,IACT;AAAA,IACA,IAAI,IAAI,CAAC,GAAG,aAAa,EAAE,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC;AAAA,EAC9D;AACF;AAEA,eAAsB,wBACpB,SACA,aACA,gBAAqC,oBAAI,IAAI,GAC7C,OACoC;AACpC,MAAI,CAAC,QAAQ,WAAW,CAAC,QAAQ,UAAU;AACzC,UAAM,IAAI,MAAM,6EAA6E;AAAA,EAC/F;AACA,QAAM,aAAa,oBAAI,IAA4B;AACnD,MAAI,aAAa;AACjB,aAAW,cAAc,aAAa;AACpC,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,QAAQ,QAAQ,EAAE,MAAM,WAAW,MAAM,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG,CAAC;AAAA,IACxF,QAAQ;AACN;AAAA,IACF;AACA,eAAW,SAAS,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,KAAK,cAAc,MAAM,IAAI,CAAC,GAAG;AAC3F,UAAI,MAAM,SAAS,MAAO;AAC1B,oBAAc;AACd,UAAI,aAAa,uBAAuB;AACtC,cAAM,IAAI,MAAM,sCAAsC,qBAAqB,cAAc;AAAA,MAC3F;AACA,YAAM,oBAAoB,kBAAkB,MAAM,MAAM,UAAU;AAClE,UAAI;AACJ,UAAI;AACF,cAAM,UAAU,MAAM,QAAQ,SAAS;AAAA,UACrC,MAAM;AAAA,UACN,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,QAC3B,CAAC;AACD,mBAAW,OAAO,YAAY,WAAW,UAAU,IAAI,YAAY,EAAE,OAAO,OAAO;AAAA,MACrF,QAAQ;AACN;AAAA,MACF;AACA,YAAM,cAAc,sBAAsB,QAAQ;AAClD,YAAM,OAAO,YAAY,MAAM,KAAK,KAAK,MAAM;AAC/C,UAAI,KAAK,SAAS,MAAM,CAAC,gBAAgB,KAAK,IAAI,GAAG;AACnD,cAAM,IAAI,MAAM,yCAAyC,KAAK,MAAM,GAAG,EAAE,CAAC,EAAE;AAAA,MAC9E;AACA,YAAM,cAAc,YAAY,aAAa,KAAK,KAAK;AACvD,UAAI,YAAY,SAAS,QAAS,SAAS,KAAK,WAAW,GAAG;AAC5D,cAAM,IAAI,MAAM,qBAAqB,IAAI,8BAA8B;AAAA,MACzE;AACA,YAAM,MAAM,KAAK,YAAY;AAC7B,UAAI,cAAc,IAAI,GAAG,GAAG;AAC1B,cAAM,IAAI,MAAM,oBAAoB,IAAI,8CAA8C;AAAA,MACxF;AACA,YAAM,YAA4B;AAAA,QAChC;AAAA,QACA;AAAA,QACA,MAAM;AAAA,QACN,aAAa,MAAM,8BAA8B,SAAS,MAAM,MAAM,KAAK;AAAA,QAC3E,QAAQ,WAAW;AAAA,MACrB;AACA,YAAM,WAAW,WAAW,IAAI,GAAG;AACnC,UAAI,CAAC,UAAU;AACb,mBAAW,IAAI,KAAK,SAAS;AAC7B;AAAA,MACF;AACA,UAAI,SAAS,gBAAgB,UAAU,aAAa;AAClD,cAAM,IAAI;AAAA,UACR,oBAAoB,IAAI,oCAAoC,SAAS,MAAM,QAAQ,UAAU,MAAM;AAAA,QACrG;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO,CAAC,GAAG,WAAW,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,KAAK,cAAc,MAAM,IAAI,CAAC;AAC3F;AAEA,eAAe,8BACb,SACA,MACA,OACiB;AACjB,QAAM,OAAOC,YAAW,QAAQ;AAChC,MAAI,aAAa;AACjB,MAAI,YAAY;AAEhB,iBAAe,MAAM,MAAc,cAAqC;AACtE,UAAM,UAAU,MAAM,QAAQ,QAAS,EAAE,MAAM,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG,CAAC;AAC5E,eAAW,SAAS,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,KAAK,cAAc,MAAM,IAAI,CAAC,GAAG;AAC3F,oBAAc;AACd,UAAI,aAAa,mBAAmB;AAClC,cAAM,IAAI,MAAM,2BAA2B,iBAAiB,qBAAqB;AAAA,MACnF;AACA,YAAM,oBAAoB,eAAe,GAAG,YAAY,IAAI,MAAM,IAAI,KAAK,MAAM;AACjF,WAAK,OAAO,MAAM,IAAI;AACtB,WAAK,OAAO,IAAI;AAChB,WAAK,OAAO,iBAAiB;AAC7B,WAAK,OAAO,IAAI;AAChB,UAAI,MAAM,SAAS,OAAO;AACxB,cAAM,MAAM,MAAM,MAAM,iBAAiB;AACzC;AAAA,MACF;AACA,UAAI,MAAM,SAAS,OAAQ;AAC3B,YAAM,UAAU,MAAM,QAAQ,SAAU;AAAA,QACtC,MAAM,MAAM;AAAA,QACZ,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,MAC3B,CAAC;AACD,YAAM,QAAQ,OAAO,YAAY,WAAW,IAAI,YAAY,EAAE,OAAO,OAAO,IAAI;AAChF,mBAAa,MAAM;AACnB,UAAI,YAAY,iBAAiB;AAC/B,cAAM,IAAI,MAAM,2BAA2B,eAAe,QAAQ;AAAA,MACpE;AACA,WAAK,OAAO,KAAK;AACjB,WAAK,OAAO,IAAI;AAAA,IAClB;AAAA,EACF;AAEA,QAAM,MAAM,MAAM,EAAE;AACpB,SAAO,KAAK,OAAO,KAAK;AAC1B;AAEA,SAAS,sBAAsB,UAG7B;AACA,QAAM,QAAQ,SAAS,MAAM,OAAO;AACpC,MAAI,MAAM,CAAC,GAAG,KAAK,MAAM,MAAO,QAAO,CAAC;AACxC,QAAM,MAAM,MAAM,UAAU,CAAC,MAAM,UAAU,QAAQ,KAAK,KAAK,KAAK,MAAM,KAAK;AAC/E,MAAI,QAAQ,GAAI,QAAO,CAAC;AACxB,QAAM,SAAiC,CAAC;AACxC,aAAW,QAAQ,MAAM,MAAM,GAAG,GAAG,GAAG;AACtC,UAAM,YAAY,KAAK,QAAQ,GAAG;AAClC,QAAI,cAAc,GAAI;AACtB,UAAM,MAAM,KAAK,MAAM,GAAG,SAAS,EAAE,KAAK;AAC1C,QAAI,QAAQ,UAAU,QAAQ,cAAe;AAC7C,WAAO,GAAG,IAAI,QAAQ,KAAK,MAAM,YAAY,CAAC,EAAE,KAAK,CAAC;AAAA,EACxD;AACA,SAAO;AACT;AAEA,SAAS,QAAQ,OAAuB;AACtC,MACE,MAAM,UAAU,KAChB,MAAM,CAAC,MAAM,MAAM,MAAM,SAAS,CAAC,MAClC,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,MAAM,MAClC;AACA,WAAO,MAAM,MAAM,GAAG,EAAE;AAAA,EAC1B;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,QAAgB,OAAuB;AAChE,SAAO,GAAG,OAAO,QAAQ,QAAQ,EAAE,CAAC,IAAI,KAAK;AAC/C;AAEA,SAAS,6BAA6B,SAA6D;AACjG,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AACA,SAAO;AACT;;;AC5MO,IAAM,8BAA8B;AAiBpC,SAAS,2BAA2B,OAA+B;AACxE,SAAO,OAAO,UAAU,YACtB,OAAO,cAAc,KAAK,KAC1B,SAAS,KACT,SAAS,8BACP,QACA;AACN;AAEO,SAAS,wBACd,OAC6B;AAC7B,QAAM,iBAAiB,oBAAI,IAAY;AACvC,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,MACL,WAAW;AAAA,QACT,aAAa;AAAA,QACb,cAAc;AAAA,QACd,cAAc;AAAA,QACd,kBAAkB;AAAA,QAClB,iBAAiB;AAAA,MACnB;AAAA,MACA,aAAa;AAAA,MACb,gBAAgB,CAAC;AAAA,IACnB;AAAA,EACF;AAEA,QAAM,iBAAiB,oBAAoB,MAAM,qBAAqB,cAAc;AACpF,QAAM,sBAAsB,mBAAmB,MAAM,aAAa,eAAe,cAAc;AAC/F,QAAM,uBAAuB;AAAA,IAC3B,MAAM;AAAA,IACN;AAAA,IACA;AAAA,EACF;AACA,QAAM,sBAAsB,mBAAmB,MAAM,aAAa,eAAe,cAAc;AAC/F,QAAM,qBAAqB;AAAA,IACzB;AAAA,IACA,CAAC,eAAe,cAAc;AAAA,IAC9B;AAAA,IACA;AAAA,EACF;AACA,QAAM,sBAAsB;AAAA,IAC1B;AAAA,IACA,CAAC,gBAAgB,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,EACF;AACA,MAAI,qBAAqB;AAAA,IACvB;AAAA,IACA,CAAC,eAAe,cAAc;AAAA,IAC9B;AAAA,IACA;AAAA,EACF;AACA,MAAI,gCAAgC,gBAAgB,cAAc,GAAG;AACnE,yBAAqB,EAAE,GAAG,oBAAoB,QAAQ,WAAW,OAAO,KAAK;AAAA,EAC/E;AAOA,QAAM,cAAc,wBAAwB;AAAA,IAC1C,UAAU;AAAA,IACV,kBAAkB,WAAW,MAAM,WAAW;AAAA,IAC9C,cAAc;AAAA,IACd,kBAAkB;AAAA,IAClB;AAAA,EACF,CAAC;AACD,QAAM,eAAe,wBAAwB;AAAA,IAC3C,UAAU;AAAA,IACV,kBAAkB,WAAW,MAAM,YAAY;AAAA,IAC/C,cAAc;AAAA,IACd,kBAAkB;AAAA,IAClB;AAAA,EACF,CAAC;AACD,QAAM,cAAc,qBAAqB;AAAA,IACvC;AAAA,IACA;AAAA,IACA,UAAU;AAAA,IACV,kBAAkB,WAAW,MAAM,WAAW;AAAA,IAC9C,kBAAkB;AAAA,IAClB;AAAA,EACF,CAAC;AAED,QAAM,oBAAoB;AAAA,IACxB,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,CAAC,sBAAsB,sBAAsB;AAAA,EAC/C;AACA,QAAM,qBAAqB;AAAA,IACzB,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,CAAC,uBAAuB,uBAAuB;AAAA,EACjD;AAEA,SAAO;AAAA,IACL,WAAW;AAAA,MACT;AAAA,MACA;AAAA,MACA,cAAc;AAAA,QACZ;AAAA,QACA,CAAC,iBAAiB,qBAAqB,qBAAqB;AAAA,QAC5D;AAAA,QACA;AAAA,MACF;AAAA,MACA,kBAAkB;AAAA,QAChB;AAAA,QACA,CAAC,sBAAsB,kBAAkB;AAAA,QACzC;AAAA,QACA;AAAA,MACF;AAAA,MACA,iBAAiB;AAAA,QACf;AAAA,QACA,CAAC,oBAAoB,mBAAmB,yBAAyB;AAAA,QACjE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,IACA,gBAAgB,CAAC,GAAG,cAAc,EAAE,MAAM,GAAG,EAAE;AAAA,EACjD;AACF;AAEO,SAAS,wBACd,OACyB;AACzB,SAAO,wBAAwB,KAAK,EAAE;AACxC;AAEA,SAAS,oBACP,OACA,gBACqB;AACrB,MAAI,UAAU,QAAW;AACvB,WAAO,CAAC;AAAA,EACV;AACA,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,gBAAY,gBAAgB,qBAAqB;AACjD,WAAO,CAAC;AAAA,EACV;AACA,QAAM,UAA+B,CAAC;AACtC,aAAW,CAAC,OAAO,KAAK,KAAK,MAAM,QAAQ,GAAG;AAC5C,QAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AAC/D,kBAAY,gBAAgB,uBAAuB,KAAK,GAAG;AAG3D,cAAQ,KAAK,CAAC,CAAC;AACf;AAAA,IACF;AACA,YAAQ,KAAK,KAAK;AAAA,EACpB;AACA,SAAO;AACT;AAOA,SAAS,8BACP,gBACA,aACA,eACA,gBACuB;AACvB,MAAI,eAAe,WAAW,GAAG;AAC/B,WAAO,EAAE,QAAQ,UAAU,OAAO,KAAK;AAAA,EACzC;AACA,QAAM,SAA+B,CAAC;AACtC,MAAI,aAAa;AACjB,MAAI,UAAU;AACd,aAAW,CAAC,OAAO,KAAK,KAAK,eAAe,QAAQ,GAAG;AACrD,UAAM,WAAW,kBAAkB,OAAkC,WAAW;AAChF,QAAI,CAAC,YAAY,SAAS,UAAU,MAAM;AACxC,mBAAa;AACb;AAAA,IACF;AACA,UAAM,SAAS;AAAA,MACb,SAAS;AAAA,MACT,uBAAuB,KAAK,KAAK,SAAS,GAAG;AAAA,MAC7C;AAAA,IACF;AACA,QAAI,WAAW,KAAM,WAAU;AAC/B,WAAO,KAAK,MAAM;AAAA,EACpB;AACA,MAAI,SAAS;AACX,WAAO,EAAE,QAAQ,WAAW,OAAO,KAAK;AAAA,EAC1C;AACA,MAAI,YAAY;AACd,WAAO,EAAE,QAAQ,cAAc,OAAO,KAAK;AAAA,EAC7C;AACA,QAAM,QAAQ,gBAAgB,QAAQ,eAAe,cAAc;AACnE,SAAO,UAAU,OAAO,EAAE,QAAQ,WAAW,OAAO,KAAK,IAAI,EAAE,QAAQ,YAAY,MAAM;AAC3F;AAEA,SAAS,wBAAwB,OAMf;AAChB,MAAI,MAAM,iBAAiB,WAAW,YAAY;AAChD,QACE,MAAM,oBACN,MAAM,aAAa,QACnB,MAAM,aAAa,MAAM,iBAAiB,OAC1C;AACA,kBAAY,MAAM,gBAAgB,MAAM,YAAY;AAAA,IACtD;AACA,WAAO,MAAM,iBAAiB;AAAA,EAChC;AACA,MAAI,MAAM,iBAAiB,WAAW,WAAW;AAC/C,QAAI,MAAM,kBAAkB;AAC1B,kBAAY,MAAM,gBAAgB,MAAM,YAAY;AAAA,IACtD;AACA,WAAO;AAAA,EACT;AACA,SAAO,MAAM;AACf;AAEA,SAAS,qBAAqB,OAOZ;AAChB,MAAI,MAAM,gBAAgB,QAAQ,MAAM,iBAAiB,MAAM;AAC7D,UAAM,UAAU;AAAA,MACd,CAAC,MAAM,aAAa,MAAM,YAAY;AAAA,MACtC;AAAA,MACA,MAAM;AAAA,IACR;AACA,QAAI,YAAY,MAAM;AAGpB,UAAI,MAAM,iBAAkB,aAAY,MAAM,gBAAgB,aAAa;AAC3E,UAAI,MAAM,iBAAiB,WAAW,YAAY;AAChD,oBAAY,MAAM,gBAAgB,iCAAiC;AAAA,MACrE;AACA,aAAO;AAAA,IACT;AACA,QAAI,MAAM,oBAAoB,MAAM,aAAa,QAAQ,MAAM,aAAa,SAAS;AACnF,kBAAY,MAAM,gBAAgB,aAAa;AAAA,IACjD;AACA,QAAI,MAAM,iBAAiB,WAAW,cAAc,MAAM,iBAAiB,UAAU,SAAS;AAC5F,kBAAY,MAAM,gBAAgB,iCAAiC;AAAA,IACrE;AACA,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,iBAAiB,WAAW,YAAY;AAChD,UAAM,eAAe,MAAM,iBAAiB;AAC5C,QACE,iBAAiB,QACjB,CAAC,2BAA2B,cAAc,MAAM,aAAa,MAAM,YAAY,GAC/E;AACA,kBAAY,MAAM,gBAAgB,iCAAiC;AACnE,UAAI,MAAM,iBAAkB,aAAY,MAAM,gBAAgB,aAAa;AAC3E,aAAO;AAAA,IACT;AACA,QAAI,MAAM,oBAAoB,MAAM,aAAa,QAAQ,MAAM,aAAa,cAAc;AACxF,kBAAY,MAAM,gBAAgB,aAAa;AAAA,IACjD;AACA,WAAO;AAAA,EACT;AACA,MAAI,MAAM,iBAAiB,WAAW,WAAW;AAC/C,QAAI,MAAM,iBAAkB,aAAY,MAAM,gBAAgB,aAAa;AAC3E,WAAO;AAAA,EACT;AACA,MACE,MAAM,aAAa,QACnB,CAAC,2BAA2B,MAAM,UAAU,MAAM,aAAa,MAAM,YAAY,GACjF;AACA,gBAAY,MAAM,gBAAgB,aAAa;AAC/C,WAAO;AAAA,EACT;AACA,SAAO,MAAM;AACf;AAEA,SAAS,2BACP,OACA,aACA,cACS;AACT,UACG,gBAAgB,QAAQ,SAAS,iBACjC,iBAAiB,QAAQ,SAAS;AAEvC;AAEA,SAAS,gCACP,gBACA,gBACS;AACT,MAAI,eAAe;AACnB,aAAW,CAAC,OAAO,KAAK,KAAK,eAAe,QAAQ,GAAG;AACrD,UAAM,SAAS;AACf,UAAM,gBAAgB,kBAAkB,QAAQ,CAAC,eAAe,cAAc,CAAC;AAC/E,UAAM,iBAAiB,kBAAkB,QAAQ,CAAC,gBAAgB,eAAe,CAAC;AAClF,UAAM,gBAAgB,kBAAkB,QAAQ,CAAC,eAAe,cAAc,CAAC;AAC/E,QAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,cAAe;AACzD,UAAM,cAAc,2BAA2B,cAAc,KAAK;AAClE,UAAM,eAAe,2BAA2B,eAAe,KAAK;AACpE,UAAM,cAAc,2BAA2B,cAAc,KAAK;AAClE,QAAI,gBAAgB,QAAQ,iBAAiB,QAAQ,gBAAgB,KAAM;AAC3E,UAAM,UACJ,eAAe,8BAA8B,eAAe,cAAc,eAAe;AAC3F,QAAI,YAAY,QAAQ,gBAAgB,SAAS;AAC/C,kBAAY,gBAAgB,uBAAuB,KAAK,KAAK,cAAc,GAAG,EAAE;AAChF,qBAAe;AAAA,IACjB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,WAAW,OAAyB;AAC3C,SAAO,UAAU,UAAa,UAAU;AAC1C;AAEA,SAAS,sBACP,kBACA,eACA,gBACA,aAC8D;AAC9D,QAAM,iBAA+E,CAAC;AACtF,MAAI,oBAAoB;AACxB,aAAW,CAAC,OAAO,KAAK,KAAK,eAAe,QAAQ,GAAG;AACrD,UAAM,WAAW,kBAAkB,OAAkC,WAAW;AAChF,QAAI,CAAC,UAAU;AACb,qBAAe,KAAK;AAAA,QAClB,SAAS;AAAA,QACT,MAAM,uBAAuB,KAAK,KAAK,YAAY,CAAC,CAAC;AAAA,QACrD,SAAS;AAAA,MACX,CAAC;AACD;AAAA,IACF;AACA,wBAAoB;AACpB,mBAAe,KAAK;AAAA,MAClB,SAAS,SAAS;AAAA,MAClB,MAAM,uBAAuB,KAAK,KAAK,SAAS,GAAG;AAAA,IACrD,CAAC;AAAA,EACH;AAIA,SAAO,oBACH,iBACA,qBAAqB,SACnB,CAAC,IACD,CAAC,EAAE,SAAS,kBAAkB,MAAM,cAAc,CAAC;AAC3D;AAEA,SAAS,0BACP,SACA,MACA,OACA,gBACe;AACf,QAAM,SAA+B,CAAC;AACtC,MAAI,mBAAmB;AACvB,MAAI,kBAAkB;AACtB,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,SAAS;AAClB,wBAAkB;AAClB;AAAA,IACF;AACA,UAAM,UAAU,cAAc,OAAO,SAAS,OAAO,MAAM,cAAc;AACzE,QAAI,CAAC,QAAQ,UAAU;AACrB,wBAAkB;AAAA,IACpB;AACA,eAAW,UAAU,QAAQ,SAAS;AACpC,YAAM,WAAW,kBAAkB,OAAO,QAAQ,IAAI;AACtD,UAAI,CAAC,UAAU;AACb,0BAAkB;AAClB;AAAA,MACF;AACA,yBAAmB;AACnB,aAAO;AAAA,QACL,mBAAmB,SAAS,OAAO,GAAG,OAAO,IAAI,IAAI,SAAS,GAAG,IAAI,cAAc;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACA,SAAO,oBAAoB,CAAC,kBACxB,gBAAgB,QAAQ,GAAG,KAAK,cAAc,cAAc,IAC5D;AACN;AAEA,SAAS,cACP,SACA,MACA,gBAIA;AACA,QAAM,UAAU,MAAM,QAAQ,OAAO,IAAI,UAAU,CAAC,OAAO;AAC3D,QAAM,UAAoE,CAAC;AAC3E,MAAI,WAAW;AACf,aAAW,CAAC,OAAO,KAAK,KAAK,QAAQ,QAAQ,GAAG;AAC9C,UAAM,YAAY,MAAM,QAAQ,OAAO,IAAI,GAAG,IAAI,IAAI,KAAK,MAAM;AACjE,QAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AAC/D,kBAAY,gBAAgB,SAAS;AACrC,iBAAW;AACX;AAAA,IACF;AACA,YAAQ,KAAK,EAAE,QAAQ,OAAkC,MAAM,UAAU,CAAC;AAAA,EAC5E;AACA,SAAO,EAAE,SAAS,SAAS;AAC7B;AAEA,SAAS,kBACP,QACA,MACwC;AACxC,aAAW,OAAO,MAAM;AACtB,QAAI,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,KAAK,OAAO,GAAG,MAAM,QAAW;AAGlF,aAAO,EAAE,KAAK,OAAO,OAAO,GAAG,EAAE;AAAA,IACnC;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,mBACP,OACA,OACA,gBACe;AACf,MAAI,UAAU,UAAa,UAAU,MAAM;AACzC,WAAO;AAAA,EACT;AACA,QAAM,aAAa,2BAA2B,KAAK;AACnD,MAAI,eAAe,MAAM;AACvB,gBAAY,gBAAgB,KAAK;AAAA,EACnC;AACA,SAAO;AACT;AAEA,SAAS,gBACP,QACA,OACA,gBACe;AACf,MAAI,OAAO,WAAW,KAAK,OAAO,KAAK,CAAC,UAAU,UAAU,IAAI,GAAG;AACjE,WAAO;AAAA,EACT;AACA,MAAI,QAAQ;AACZ,aAAW,SAAS,QAAoB;AACtC,QAAI,QAAQ,8BAA8B,OAAO;AAC/C,kBAAY,gBAAgB,KAAK;AACjC,aAAO;AAAA,IACT;AACA,aAAS;AAAA,EACX;AACA,SAAO;AACT;AAEA,SAAS,YAAY,gBAA6B,OAAqB;AACrE,MAAI,eAAe,OAAO,IAAI;AAC5B,mBAAe,IAAI,KAAK;AAAA,EAC1B;AACF;;;AnC9TA,QAAQ,IAAI,oCAAoC;AAChD,QAAQ,IAAI,mCAAmC;AAoD/C;AAAA,EACE;AACF;AAmEA,yBAAyB;AAEzB,IAAM,uCAAuC;AAgEtC,SAAS,2BAAiC;AAC/C,QAAM,OAAO,WAAW;AAKxB,MAAI,CAAC,QAAQ,OAAO,KAAK,SAAS,YAAY;AAC5C;AAAA,EACF;AACA,SAAO,eAAe,MAAM,QAAQ;AAAA,IAClC,cAAc;AAAA,IACd,UAAU;AAAA,IACV,MAAS,QAA2D;AAClE,YAAM,WAAW,gBAAgB,MAAM,IACnC,OAAO,OAAO,aAAa,EAAE,IAC7B,OAAO,OAAO,QAAQ,EAAE;AAC5B,aAAO,IAAI,eAAkB;AAAA,QAC3B,MAAM,KAAK,YAAY;AACrB,gBAAM,OAAO,MAAM,SAAS,KAAK;AACjC,cAAI,KAAK,MAAM;AACb,uBAAW,MAAM;AAAA,UACnB,OAAO;AACL,uBAAW,QAAQ,KAAK,KAAK;AAAA,UAC/B;AAAA,QACF;AAAA,QACA,MAAM,SAAS;AACb,gBAAM,SAAS,SAAS;AAAA,QAC1B;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACH;AAgCO,IAAM,wBAAwB;AA8BrC,IAAI,sBAAkD;AAE/C,SAAS,6BAA6B,OAAqD;AAChG,wBAAsB,SAAS;AACjC;AAwCO,SAAS,6BACd,YAAwC,CAAC,GACxB;AACjB,SAAO;AAAA,IACL,WAAW,CAAC,aAAa;AACvB,mCAA6B,UAAU,OAAO;AAC9C,sBAAgB,QAAQ;AAAA,IAC1B;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA,kBAAkB,CAAC,UAAU,YAC3B,UAAU,QAAQ,OAAO,iBAAiB,UAAU,OAAO;AAAA,IAC7D,YAAY,CAAC,UAAU,WAAW,YAChC,mBAAmB,UAAU,WAAW;AAAA,MACtC,GAAG;AAAA,MACH,GAAI,UAAU,QAAQ,EAAE,OAAO,UAAU,MAAM,IAAI,CAAC;AAAA,IACtD,CAAC;AAAA,IACH,cAAc;AAAA,IACd,cAAc;AAAA,IACd,WAAW,OAAO,OAAO,OAAO,UAAU,YACxC,MAAM,eAAe,OAAO,OAAO,UAAU;AAAA,MAC3C,GAAG;AAAA,MACH,eAAe,UAAU;AAAA,IAC3B,CAAC;AAAA,IACH;AAAA,IACA;AAAA,EACF;AACF;AASO,SAAS,8BACd,UACA,aAAqB,SAAS,gBACtB;AACR,MAAI,SAAS,mBAAmB,SAAS;AACvC,UAAM,UAAU,SAAS,sBAAsB,uBAAuB,QAAQ;AAC9E,UAAM,SAAS,SAAS,qBAAqB,SAAS,sBAAsB;AAC5E,WAAO,IAAIC,QAAO;AAAA,MAChB;AAAA,MACA;AAAA,MACA,YAAY,SAAS;AAAA,MACrB,cAAc,wBAAwB,UAAU,OAAO;AAAA,MACvD,gBACE,SAAS,sBAAsB,CAAC,SAAS,oBACrC,EAAE,eAAe,UAAU,SAAS,kBAAkB,GAAG,IACzD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMN,OAAO,6BAA6B,uBAAuB,YAAY,WAAW,KAAK,CAAC;AAAA,IAC1F,CAAC;AAAA,EACH;AACA,SAAO,IAAIA,QAAO;AAAA,IAChB,QAAQ,SAAS,gBAAgB,QAAQ,IAAI;AAAA,IAC7C,GAAI,SAAS,gBAAgB,EAAE,SAAS,SAAS,cAAc,IAAI,CAAC;AAAA,IACpE,YAAY,SAAS;AAAA,IACrB,OAAO,uBAAuB,YAAY,WAAW,KAAK;AAAA,EAC5D,CAAC;AACH;AAYA,IAAM,sBAAsB,oBAAI,IAAoB;AAE7C,SAAS,oBAAoB,UAAiC,UAA4B;AAC/F,QAAM,SAAS,oBAAoB,IAAI,SAAS,EAAE;AAClD,MAAI,QAAQ;AACV,WAAO;AAAA,EACT;AACA,QAAM,SAAS,SAAS,UACpB,8BAA8B,UAAU,SAAS,EAAE,IACnD,SAAS,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOhB,IAAIA,QAAO;AAAA,MACT,QAAQ,SAAS,UAAU;AAAA,MAC3B,GAAI,SAAS,UAAU,EAAE,SAAS,SAAS,QAAQ,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA,MAIxD,YAAY;AAAA;AAAA;AAAA;AAAA,MAIZ,SAAS;AAAA,MACT,OAAO,uBAAuB,uBAAuB,SAAS,IAAI,WAAW,KAAK,CAAC;AAAA,IACrF,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,IAID,IAAIA,QAAO;AAAA,MACT,GAAI,SAAS,SAAS,EAAE,QAAQ,SAAS,OAAO,IAAI,CAAC;AAAA,MACrD,GAAI,SAAS,UAAU,EAAE,SAAS,SAAS,QAAQ,IAAI,CAAC;AAAA,MACxD,YAAY,SAAS;AAAA,MACrB,GAAI,SAAS,eAAe,EAAE,cAAc,SAAS,aAAa,IAAI,CAAC;AAAA,MACvE,GAAI,SAAS,iBAAiB,EAAE,gBAAgB,SAAS,eAAe,IAAI,CAAC;AAAA,MAC7E,OAAO,uBAAuB,SAAS,IAAI,WAAW,KAAK;AAAA,IAC7D,CAAC;AAAA;AACP,sBAAoB,IAAI,SAAS,IAAI,MAAM;AAC3C,SAAO;AACT;AAWO,SAAS,mBACd,UACA,QACA,SACO;AACP,SAAO,SAAS,QAAQ,SACpB,IAAI,2BAA2B,QAAQ,OAAO,IAC9C,IAAI,qBAAqB,QAAQ,OAAO;AAC9C;AAUO,SAAS,iBACd,UACA,SAMO;AACP,QAAM,WAAW,qBAAqB,UAAU,OAAO;AACvD,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,EACT;AACA,QAAM,SAAS,oBAAoB,SAAS,UAAU,QAAQ;AAC9D,SAAO;AAAA,IACL,UAAU,SAAS;AAAA,IACnB;AAAA,IACA,OAAO,mBAAmB,SAAS,UAAU,QAAQ,SAAS,MAAM,eAAe;AAAA,IACnF,YAAY,SAAS;AAAA,EACvB;AACF;AAsBO,IAAM,6BAAN,MAA0D;AAAA,EAG/D,YAA6B,UAAoB;AAApB;AAAA,EAAqB;AAAA,EAF1C;AAAA,EAIR,MAAM,SAAS,WAAoC;AACjD,QAAI,WAAW;AACb,YAAM,WAAW;AAAA,QACf,oCAAoC,KAAK,UAAU,SAAS;AAAA,QAC5D;AAAA,MACF;AACA,UAAI,UAAU;AASZ,YACE,UAAU,WAAW,qBAAqB,KAC1C,SAAS,SAAS,SAAS,sBAC3B;AACA,gBAAM,IAAI,kCAAkC,SAAS;AAAA,QACvD;AACA,eAAO,SAAS;AAAA,MAClB;AAYA,UAAI,UAAU,WAAW,qBAAqB,GAAG;AAC/C,cAAM,IAAI,kCAAkC,SAAS;AAAA,MACvD;AAAA,IACF;AAIA,SAAK,aAAa,IAAI,eAAe;AACrC,WAAO,KAAK,SAAS,SAAS,SAAS;AAAA,EACzC;AACF;AAEA,SAAS,oCAAoC,UAAoB,WAA6B;AAC5F,MAAI,cAAc,SAAS,aAAa;AACtC,WAAO;AAAA,EACT;AACA,QAAM,iBAAiB,yBAAyB,SAAS,mBAAmB;AAC5E,QAAM,kBAAkB,eAAe,KAAK,CAAC,OAAO,OAAO,SAAS;AACpE,MAAI,CAAC,iBAAiB;AACpB,WAAO;AAAA,EACT;AAMA,SAAO,eAAe,SAAS,SAAS,IACpC,WACA,EAAE,GAAG,UAAU,aAAa,gBAAgB;AAClD;AAEA,SAAS,yBAAyB,OAAyB;AACzD,SAAO,MACJ,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,OAAO;AACnB;AAWO,IAAM,oCAAN,cAAgD,MAAM;AAAA,EAC3D,YAAY,WAAmB;AAC7B;AAAA,MACE,6BAA6B,SAAS;AAAA,IAExC;AACA,SAAK,OAAO;AAAA,EACd;AACF;AAUO,IAAM,mCAAN,cAA+C,MAAM;AAAA,EAC1D,YAAY,WAAmB,YAAoB,QAA8B;AAC/E;AAAA,MACE,WAAW,aACP,UAAU,SAAS,wDAAwD,UAAU,0IAErF,UAAU,SAAS;AAAA,IAEzB;AACA,SAAK,OAAO;AAAA,EACd;AACF;AAEO,SAAS,gBAAgB,UAA0B;AACxD,8BAA4B,SAAS,wBAAwB;AAC7D,qBAAmB,SAAS,wBAAwB,CAAC,SAAS,yBAAyB;AAKvF,QAAM,SAAS,IAAI,2BAA2B,QAAQ;AACtD,MAAI,SAAS,mBAAmB,SAAS;AACvC,2BAAuB,8BAA8B,QAAQ,CAAC;AAC9D,4BAAwB,MAAM;AAC9B;AAAA,EACF;AACA,MAAI,SAAS,cAAc;AACzB,wBAAoB,SAAS,YAAY;AAAA,EAC3C;AACA,MAAI,SAAS,eAAe;AAC1B,2BAAuB,8BAA8B,QAAQ,CAAC;AAAA,EAChE;AACA,0BAAwB,MAAM;AAChC;AAEA,SAAS,uBAAuB,UAAkB,OAAmC;AACnF,SAAQ,OAAO,OAAoC,SAAuC;AACxF,QAAI,CAAC,iBAAiB,KAAK,GAAG;AAC5B,aAAO,MAAM,MAAM,OAAO,IAAI;AAAA,IAChC;AACA,UAAM,UAAU,YAAY,IAAI;AAChC,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,OAAO,IAAI;AACxC,4BAAsB,UAAU,SAAS,KAAK,cAAc,UAAU,OAAO;AAC7E,aAAO;AAAA,IACT,SAAS,OAAO;AACd,4BAAsB,UAAU,UAAU,OAAO;AACjD,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAEA,SAAS,iBAAiB,OAA6C;AACrE,QAAM,SACJ,OAAO,UAAU,WACb,QACA,iBAAiB,MACf,MAAM,SAAS,IACd,MAA4B;AACrC,MAAI,OAAO,WAAW,YAAY,OAAO,WAAW,GAAG;AACrD,WAAO;AAAA,EACT;AACA,MAAI;AACF,UAAM,WAAW,IAAI,IAAI,QAAQ,uBAAuB,EAAE;AAC1D,WACE,SAAS,SAAS,YAAY,KAC9B,SAAS,SAAS,mBAAmB,KACrC,SAAS,SAAS,kBAAkB;AAAA,EAExC,QAAQ;AACN,WAAO,8DAA8D,KAAK,MAAM;AAAA,EAClF;AACF;AAEA,SAAS,sBACP,UACA,SACA,SACM;AACN,QAAM,kBAAkB,KAAK,IAAI,IAAI,YAAY,IAAI,IAAI,WAAW,GAAI;AACxE,MAAI;AACF,yBAAqB,cAAc,EAAE,UAAU,SAAS,gBAAgB,CAAC;AAAA,EAC3E,QAAQ;AAAA,EAER;AACF;AAmBA,eAAsB,uBACpB,UACA,OACA,UAQI,CAAC,GACY;AACjB,QAAM,SAAS,QAAQ,UAAU,8BAA8B,QAAQ;AACvE,QAAM,MAAM,QAAQ,OAAO;AAC3B,QAAM,QAAQ,QAAQ,SAAS,SAAS;AACxC,QAAM,YAAY,QAAQ,mBAAmB;AAC7C,MAAI,QAAQ,QAAQ;AAClB,UAAM,aAAa,mCAAmC,KAAK;AAC3D,QAAI;AACJ,QAAI;AACF,mBAAa,MAAM,OAAO,KAAK,YAAY,OAAO;AAAA,QAChD;AAAA,QACA,YAAY;AAAA,QACZ,UAAU,CAAC,EAAE,MAAM,QAAQ,SAAS,WAAW,CAAC;AAAA,QAChD,GAAI,QAAQ,iBAAiB,EAAE,kBAAkB,QAAQ,eAAe,IAAI,CAAC;AAAA,MAC/E,CAAQ;AAAA,IACV,SAAS,OAAO;AACd,YAAM,IAAI,gCAAgC,qCAAqC,KAAK,GAAG,KAAK;AAAA,IAC9F;AACA,UAAMC,SAAQ,+BAA+B,UAAU;AACvD,QAAIA,QAAO;AACT,YAAM,QAAQ,UAAUA,MAAK;AAAA,IAC/B;AACA,UAAM,OAAQ,WACX,UAAU,CAAC,GAAG,SAAS;AAC1B,UAAMC,WAAU,OAAO,SAAS,WAAW,KAAK,KAAK,IAAI;AACzD,QAAI,CAACA,UAAS;AACZ,YAAM,IAAI,4BAA4B,8BAA8B,YAAYA,QAAO,CAAC;AAAA,IAC1F;AACA,WAAOA;AAAA,EACT;AAIA,QAAM,UAAwB;AAAA,IAC5B,oBAAoB,QAAQ,sBAAsB;AAAA,IAClD;AAAA,IACA,eAAe;AAAA,MACb;AAAA;AAAA;AAAA,MAGA,GAAI,SAAS,mBAAmB,UAAU,CAAC,IAAI,EAAE,OAAO,MAAM;AAAA,MAC9D,GAAI,QAAQ,iBACR,EAAE,cAAc,EAAE,kBAAkB,QAAQ,eAAe,EAAE,IAC7D,CAAC;AAAA,IACP;AAAA,IACA,OAAO,CAAC;AAAA,IACR,yBAAyB;AAAA,IACzB,YAAY;AAAA,IACZ,UAAU,CAAC;AAAA,IACX,SAAS;AAAA,EACX;AACA,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,IAAI,yBAAyB,QAAQ,KAAK,EAAE,cAAc,OAAO;AAAA,EACpF,SAAS,OAAO;AACd,UAAM,IAAI,gCAAgC,qCAAqC,KAAK,GAAG,KAAK;AAAA,EAC9F;AACA,QAAM,QAAQ,+BAA+B,QAAQ;AACrD,MAAI,OAAO;AACT,UAAM,QAAQ,UAAU,KAAK;AAAA,EAC/B;AACA,MAAI,mCAAmC,QAAQ,GAAG;AAChD,UAAM,IAAI,gCAAgC,qCAAqC,QAAQ,CAAC;AAAA,EAC1F;AACA,QAAM,UAAU,0BAA0B,QAAQ,EAAE,KAAK;AACzD,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,4BAA4B,8BAA8B,UAAU,OAAO,CAAC;AAAA,EACxF;AACA,SAAO;AACT;AAEA,SAAS,mCAAmC,UAA4B;AACtE,MAAI,CAAC,YAAY,OAAO,aAAa,SAAU,QAAO;AACtD,QAAM,SAAS;AACf,SACE,OAAO,WAAW,YAClB,OAAO,WAAW,gBACjB,OAAO,UAAU,QAAQ,OAAO,UAAU;AAE/C;AAGO,SAAS,qCAAqC,OAAyC;AAC5F,MAAI,UAAU;AACd,MAAI,YAA2B;AAC/B,MAAI,aAA4B;AAChC,MAAI,iBAAgC;AACpC,MAAI,aAA4B;AAChC,MAAI,OAAsB;AAC1B,MAAI,OAAsB;AAC1B,MAAI,YAA2B;AAC/B,MAAI,YAA2B;AAC/B,QAAM,OAAO,oBAAI,IAAY;AAC7B,WAAS,QAAQ,GAAG,QAAQ,KAAK,WAAW,OAAO,YAAY,UAAU,SAAS,GAAG;AACnF,QAAI,KAAK,IAAI,OAAO,EAAG;AACvB,SAAK,IAAI,OAAO;AAChB,UAAM,SAAS;AACf,QAAI,CAAC,aAAa,mBAAmB,OAAO;AAC1C,kBAAY,+BAA+B,QAAQ,IAAI;AAAA,IACzD;AACA,QACE,eAAe,QACf,OAAO,OAAO,WAAW,YACzB,OAAO,SAAS,OAAO,MAAM,GAC7B;AACA,mBAAa,OAAO;AAAA,IACtB;AACA,QAAI,mBAAmB,QAAQ,OAAO,OAAO,WAAW,UAAU;AAChE,uBAAiB,+BAA+B,OAAO,MAAM;AAAA,IAC/D;AACA,UAAM,uBAAuB,OAAO,mBAAmB,OAAO;AAC9D,QAAI,mBAAmB,QAAQ,OAAO,yBAAyB,UAAU;AACvE,uBAAiB,+BAA+B,oBAAoB;AAAA,IACtE;AACA,UAAM,mBAAmB,OAAO,eAAe,OAAO,cAAc,OAAO;AAC3E,QAAI,eAAe,QAAQ,OAAO,qBAAqB,UAAU;AAC/D,mBAAa,+BAA+B,gBAAgB;AAAA,IAC9D;AACA,QAAI,SAAS,QAAQ,OAAO,OAAO,SAAS,UAAU;AACpD,aAAO,+BAA+B,OAAO,IAAI;AAAA,IACnD;AACA,QAAI,SAAS,QAAQ,OAAO,OAAO,SAAS,UAAU;AACpD,aAAO,+BAA+B,OAAO,IAAI;AAAA,IACnD;AACA,UAAM,kBAAkB,OAAO,cAAc,OAAO;AACpD,QAAI,cAAc,QAAQ,OAAO,oBAAoB,UAAU;AAC7D,kBAAY,+BAA+B,eAAe;AAAA,IAC5D;AACA,QAAI,cAAc,MAAM;AACtB,YAAM,kBAAkB,OAAO,cAAc,OAAO,aAAa,OAAO;AACxE,UAAI,OAAO,oBAAoB,UAAU;AACvC,oBAAY,+BAA+B,eAAe;AAAA,MAC5D;AACA,YAAM,UAAU,OAAO;AACvB,UAAI,CAAC,aAAa,WAAW,OAAO,YAAY,UAAU;AACxD,cAAM,MAAO,QAA8B;AAC3C,YAAI,OAAO,QAAQ,YAAY;AAC7B,gBAAM,WAAW,IAAI,KAAK,SAAS,cAAc;AACjD,cAAI,OAAO,aAAa,UAAU;AAChC,wBAAY,+BAA+B,QAAQ;AAAA,UACrD;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,UAAM,cAAc,OAAO;AAC3B,QAAI,eAAe,OAAO,gBAAgB,YAAY,CAAC,KAAK,IAAI,WAAW,GAAG;AAC5E,YAAM,SAAS;AACf,UAAI,SAAS,QAAQ,OAAO,OAAO,SAAS,UAAU;AACpD,eAAO,+BAA+B,OAAO,IAAI;AAAA,MACnD;AACA,UAAI,SAAS,QAAQ,OAAO,OAAO,SAAS,UAAU;AACpD,eAAO,+BAA+B,OAAO,IAAI;AAAA,MACnD;AACA,YAAM,uBAAuB,OAAO,mBAAmB,OAAO;AAC9D,UAAI,mBAAmB,QAAQ,OAAO,yBAAyB,UAAU;AACvE,yBAAiB,+BAA+B,oBAAoB;AAAA,MACtE;AACA,YAAM,mBAAmB,OAAO,eAAe,OAAO,cAAc,OAAO;AAC3E,UAAI,eAAe,QAAQ,OAAO,qBAAqB,UAAU;AAC/D,qBAAa,+BAA+B,gBAAgB;AAAA,MAC9D;AACA,YAAM,kBAAkB,OAAO,cAAc,OAAO;AACpD,UAAI,cAAc,QAAQ,OAAO,oBAAoB,UAAU;AAC7D,oBAAY,+BAA+B,eAAe;AAAA,MAC5D;AAAA,IACF;AACA,cAAU,OAAO;AAAA,EACnB;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;AAAA,EACnC;AACF;AAEA,IAAM,wCAAwC;AAC9C,IAAM,0CAA0C;AAEhD,SAAS,+BAA+B,OAAuB;AAC7D,QAAM,QAAQ,OAAO,KAAK,OAAO,MAAM;AACvC,MAAI,MAAM,UAAU,sCAAuC,QAAO;AAClE,QAAM,cAAc,OAAO,WAAW,yCAAyC,MAAM;AACrF,MAAI,MAAM,wCAAwC;AAClD,SAAO,MAAM,KAAK,uBAAuB,MAAM,GAAG,CAAE,EAAG,QAAO;AAC9D,SAAO,GAAG,MAAM,SAAS,GAAG,GAAG,EAAE,SAAS,MAAM,CAAC,GAAG,uCAAuC;AAC7F;AAEA,SAAS,uBAAuB,OAAwB;AACtD,UAAQ,QAAQ,SAAU;AAC5B;AAGO,SAAS,8BACd,UACA,gBAAgB,0BAA0B,QAAQ,EAAE,KAAK,GAChC;AACzB,MAAI,CAAC,YAAY,OAAO,aAAa,UAAU;AAC7C,WAAO,EAAE,eAAe,OAAO,UAAU,qBAAqB,cAAc,OAAO;AAAA,EACrF;AACA,QAAM,SAAS;AACf,QAAM,SAAS,MAAM,QAAQ,OAAO,MAAM,IAAI,OAAO,SAAS,CAAC;AAC/D,QAAM,cAAc,OAAO,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS;AACpD,QAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO,EAAE,MAAM,OAAO,KAAK;AAClE,UAAM,QAAQ;AACd,UAAM,UAAU,MAAM,QAAQ,MAAM,OAAO,IAAI,MAAM,UAAU,CAAC;AAChE,WAAO;AAAA,MACL,MAAM,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAAA,MACpD,MAAM,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAAA,MACpD,QAAQ,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AAAA,MAC1D,kBAAkB,QACf,MAAM,GAAG,EAAE,EACX;AAAA,QAAI,CAAC,SACJ,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA4B,SAAS,WAC5E,KAA0B,OAC3B,OAAO;AAAA,MACb;AAAA,MACF,kBAAkB,QAAQ;AAAA,IAC5B;AAAA,EACF,CAAC;AACD,QAAM,UAAU,MAAM,QAAQ,OAAO,OAAO,IAAI,OAAO,UAAU,CAAC;AAClE,QAAM,QAAQ,+BAA+B,QAAQ,GAAG;AACxD,QAAM,aACJ,OAAO,sBAAsB,OAAO,OAAO,uBAAuB,WAC7D,OAAO,qBACR;AACN,SAAO;AAAA,IACL,YAAY,OAAO,OAAO,OAAO,WAAW,OAAO,KAAK;AAAA,IACxD,QAAQ,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS;AAAA,IAC5D,iBAAiB,OAAO;AAAA,IACxB;AAAA,IACA,aAAa,QAAQ;AAAA,IACrB,eAAe,QACZ,MAAM,GAAG,EAAE,EACX;AAAA,MAAI,CAAC,WACJ,UAAU,OAAO,WAAW,WACtB,OAAmC,iBAAiB,OACtD;AAAA,IACN;AAAA,IACF,kBACE,cAAc,OAAO,WAAW,WAAW,WAAW,WAAW,SAAS;AAAA,IAC5E,aAAa,OAAO,eAAe;AAAA,IACnC,cAAc,OAAO,gBAAgB;AAAA,IACrC,aAAa,OAAO,eAAe;AAAA,IACnC,qBAAqB,cAAc;AAAA,EACrC;AACF;AAUO,SAAS,0BAA0B,UAA2B;AACnE,MAAI,CAAC,YAAY,OAAO,aAAa,UAAU;AAC7C,WAAO;AAAA,EACT;AACA,QAAM,SAAU,SAAuC;AACvD,MAAI,OAAO,WAAW,UAAU;AAC9B,WAAO;AAAA,EACT;AACA,QAAM,SAAU,SAAkC;AAClD,MAAI,CAAC,MAAM,QAAQ,MAAM,GAAG;AAC1B,WAAO;AAAA,EACT;AACA,QAAM,QAAkB,CAAC;AACzB,aAAW,QAAQ,QAAQ;AACzB,QAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC;AAAA,IACF;AACA,QAAK,KAA4B,SAAS,WAAW;AACnD;AAAA,IACF;AAEA,QAAK,KAA4B,SAAS,aAAa;AACrD;AAAA,IACF;AACA,UAAM,UAAW,KAA+B;AAChD,QAAI,CAAC,MAAM,QAAQ,OAAO,GAAG;AAC3B;AAAA,IACF;AACA,eAAW,QAAQ,SAAS;AAC1B,UACE,QACA,OAAO,SAAS,YAChB,OAAQ,KAA4B,SAAS,UAC7C;AACA,cAAM,KAAM,KAA0B,IAAI;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AACA,SAAO,MAAM,KAAK,EAAE;AACtB;AAQA,IAAM,2BAAN,cAAuC,qBAAqB;AAAA,EAC1D,cAAc,SAAuB;AACnC,WAAO,KAAK,eAAe,SAAS,KAAK;AAAA,EAC3C;AACF;AAwBA,IAAM,uBAAuB,oBAAI,QAAoD;AACrF,IAAM,uBAA2D,OAAO,OAAO,CAAC,CAAC;AAQ1E,SAAS,iCACd,OACoC;AACpC,SAAO,qBAAqB,IAAI,KAAK,KAAK;AAC5C;AA0NO,SAAS,gBAAgB,KAAuC;AACrE,SAAO;AAAA,IACL,6BAA6B,IAAI,IAAI,sBAAsB,IAAI,OAAO;AAAA,IACtE;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAAS,iCACd,aACU;AACV,QAAM,QAAQ;AAAA,IACZ,kCAAkC,YAAY,IAAI;AAAA,EACpD;AACA,QAAM,iBAAiB,YAAY,iBAAiB,CAAC,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC;AACxF,MAAI,cAAc,SAAS,GAAG;AAC5B,UAAM,KAAK,mCAAmC,CAAC,GAAG,aAAa,EAAE,KAAK,EAAE,KAAK,IAAI,CAAC,GAAG;AAAA,EACvF;AACA,QAAM,cAAc,YAAY,aAAa,KAAK;AAClD,MAAI,aAAa;AACf,UAAM,KAAK,wCAAwC,WAAW,EAAE;AAAA,EAClE;AACA,SAAO;AACT;AAaO,SAAS,iBACd,sBACA,KACU;AACV,SAAO;AAAA,IACL;AAAA,IACA,GAAI,uBAAuB,iCAAiC,oBAAoB,IAAI,CAAC;AAAA;AAAA;AAAA,IAGrF,GAAI,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAAA,EACpC;AACF;AAUO,SAAS,yBACd,UACA,sBACA,KACQ;AACR,QAAM,OAAO,iBAAiB,sBAAsB,GAAG,EAAE,KAAK,GAAG;AACjE,MAAI,SAAS,SAAS,mCAAmC,GAAG;AAC1D,WAAO,SAAS,MAAM,mCAAmC,EAAE,KAAK,IAAI;AAAA,EACtE;AACA,SAAO,OAAO,GAAG,QAAQ,IAAI,IAAI,KAAK;AACxC;AASO,SAAS,0BAA0B,UAAkB,qBAAsC;AAChG,QAAM,UAAU,qBAAqB,KAAK;AAC1C,SAAO,UAAU,GAAG,QAAQ,IAAI,OAAO,KAAK;AAC9C;AAGO,SAAS,uBAAuB,UAAkB,kBAAmC;AAC1F,QAAM,UAAU,kBAAkB,KAAK;AACvC,SAAO,UAAU,GAAG,QAAQ,IAAI,OAAO,KAAK;AAC9C;AASO,SAAS,gCACd,UACA,UACQ;AACR,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,EACT;AACA,SAAO,GAAG,QAAQ,wEAAwE,SAAS,aAAa,QAAQ,SAAS;AACnI;AASO,SAAS,sBAAsB,UAAkB,iBAAkC;AACxF,QAAM,UAAU,iBAAiB,KAAK;AACtC,SAAO,UAAU,GAAG,QAAQ,IAAI,OAAO,KAAK;AAC9C;AAiBO,SAAS,4BAA4B,UAAkB,oBAAqC;AACjG,SAAO,qBAAqB,GAAG,QAAQ,IAAI,gCAAgC,KAAK;AAClF;AAEA,IAAM,kCACJ;AASK,SAAS,uCACd,UACA,UACA,sBACQ;AACR,MAAI,yBAAyB,gBAAgB,CAAC,UAAU,QAAQ;AAC9D,WAAO;AAAA,EACT;AACA,QAAM,qBAAqB,oBAAI,IAAwC;AACvE,aAAW,WAAW,UAAU;AAC9B,UAAM,MAAM,mBAAmB,IAAI,QAAQ,QAAQ,KAAK,oBAAI,IAAY;AACxE,QAAI,IAAI,QAAQ,mBAAmB;AACnC,uBAAmB,IAAI,QAAQ,UAAU,GAAG;AAAA,EAC9C;AACA,SAAO,CAAC,GAAG,mBAAmB,OAAO,CAAC,EAAE,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,IAC9D,GAAG,QAAQ,IAAI,+BAA+B,KAC9C;AACN;AAOO,SAAS,4BACd,cACA,kBACQ;AACR,SAAO,mBAAmB,GAAG,YAAY,IAAI,uBAAuB,KAAK;AAC3E;AAEA,IAAM,qBAAqB,oBAAI,QAAuC;AACtE,IAAM,4BAA4B,oBAAI,QAAwC;AAM9E,IAAM,qBAAqB,oBAAI,QAA+B;AAC9D,IAAM,6BAA6B,oBAAI,QAA4C;AACnF,IAAM,0BAA0B,oBAAI,QAAwB;AAC5D,IAAM,+BAA+B,oBAAI,QAAwB;AAIjE,IAAM,qCAAqC,oBAAI,QAAgB;AAI/D,IAAM,4BAA4B,oBAAI,QAA4C;AAKlF,IAAM,gBAAgB,oBAAI,QAAoC;AAC9D,IAAM,0BAA0B,oBAAI,QAAwC;AA0BrE,SAAS,mBAAmB,OAGjC;AACA,QAAM,UAAUC,qBAAoB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAC1F,SAAO;AAAA,IACL,SAAS;AAAA,IACT,SAAS;AAAA,MACP;AAAA,QACE,MAAM;AAAA,QACN,MAAM,sEAAsE,OAAO;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACF;AAOA,IAAM,uBAA6C,CAAC,EAAE,MAAM,MAC1D,mBAAmB,KAAK;AAEnB,SAAS,mBACd,UACA,WACA,UAA6B,CAAC,GACb;AACjB,MAAI,QAAQ,QAAQ,kBAAkB,MAAM,QAAQ,QAAQ,uBAAuB,GAAG;AACpF,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC5F;AAKA,QAAM,kBAAkB,QAAQ,mBAAmB,SAAS;AAC5D,QAAM,qBAAqB,QAAQ,sBAAsB,SAAS;AAClE,QAAM,eAAe;AAAA,IACnB,GAAI,qBAAqB,EAAE,SAAS,CAAC,6BAA6B,EAAE,IAAI,CAAC;AAAA,IACzE,GAAI,QAAQ,iBAAiB,EAAE,kBAAkB,QAAQ,eAAe,IAAI,CAAC;AAAA,EAC/E;AAWA,QAAM,cAAc,kBAAkB,CAAC,cAAc,CAAC,IAAI,CAAC;AAC3D,QAAM,iBAAiB,KAAU;AAAA,IAC/B,MAAM;AAAA,IACN,aACE;AAAA,IACF,YAAY;AAAA,IACZ,eAAe;AAAA;AAAA;AAAA,IAGf,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ,UAAU,YAAY;AACtC,YAAM,UAAU,QAAQ;AACxB,UAAI,CAAC,SAAS;AACZ,cAAM,IAAI,MAAM,qDAAqD;AAAA,MACvE;AACA,YAAM,gBAAgB,SAAS,UAAU;AACzC,UAAI,iBAAiB,kBAAkB,QAAQ,YAAY;AACzD,cAAM,IAAI,MAAM,+DAA+D;AAAA,MACjF;AACA,aAAO,KAAK,UAAU,EAAE,WAAW,QAAQ,WAAW,GAAG,QAAQ,SAAS,CAAC;AAAA,IAC7E;AAAA,EACF,CAAC;AACD,QAAM,aAAa,CAAC,GAAG,aAAa,cAAc;AAClD,QAAM,aAAa;AAAA,IACjB,MAAM;AAAA,IACN,OAAO,QAAQ,SAAS,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IA2BjC,cAAc;AAAA,MACZ;AAAA,QACE;AAAA,UACE;AAAA,YACE;AAAA,cACE;AAAA,gBACE;AAAA,kBACE,QAAQ,wBAAwB,SAAS;AAAA,kBACzC,QAAQ;AAAA,kBACR,QAAQ;AAAA,gBACV;AAAA,gBACA,SAAS,oBAAoB,QAAQ,QAAQ,kBAAkB;AAAA,cACjE;AAAA,cACA,QAAQ;AAAA,cACR,QAAQ;AAAA,YACV;AAAA,YACA,QAAQ;AAAA,UACV;AAAA,UACA,QAAQ;AAAA,QACV;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,IACA,eAAe;AAAA,MACb,WAAW;AAAA,QACT,QAAQ,QAAQ,mBAAmB,SAAS;AAAA,QAC5C,SAAS;AAAA,MACX;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASA,GAAI,OAAO,KAAK,YAAY,EAAE,SAAS,IAAI,EAAE,aAAa,IAAI,CAAC;AAAA,IACjE;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA,OAAO;AAAA,IACP,GAAI,QAAQ,YAAY,SAAS,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOvE,WAAW,EAAE,eAAe,qBAAqB;AAAA,EACnD;AAEA,MAAI,SAAS,mBAAmB,QAAQ;AACtC,UAAMC,SAAQ,IAAI,MAAM,UAAU;AAClC,QAAI,QAAQ,kBAAkB;AAC5B,yCAAmC,IAAIA,MAAK;AAAA,IAC9C;AACA,gCAA4BA,QAAO,UAAU,OAAO;AACpD,2BAAuBA,QAAO,QAAQ;AACtC,WAAOA;AAAA,EACT;AAEA,QAAM,QAAQ,aAAa,QAAQ;AACnC,QAAM,QAAQ,IAAI,aAAa;AAAA,IAC7B,GAAG;AAAA,IACH,iBAAiB;AAAA,MACf;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,IACzB,cAAc,uBAAuB,UAAU,QAAQ,cAAc,CAAC,GAAG;AAAA,MACvE,GAAI,QAAQ,oBAAoB,SAC5B,EAAE,oBAAoB,QAAQ,mBAAmB,IACjD,CAAC;AAAA,MACL,GAAI,QAAQ,eAAe,SAAS,EAAE,eAAe,QAAQ,cAAc,IAAI,CAAC;AAAA,MAChF,GAAG,oCAAoC,SAAS;AAAA,MAChD,GAAI,QAAQ,4BAA4B,SACpC,EAAE,yBAAyB,QAAQ,wBAAwB,IAC3D,CAAC;AAAA,MACL,GAAI,QAAQ,qBAAqB,SAC7B,EAAE,kBAAkB,QAAQ,iBAAiB,IAC7C,CAAC;AAAA,MACL,GAAI,QAAQ,qBAAqB,EAAE,oBAAoB,QAAQ,mBAAmB,IAAI,CAAC;AAAA,MACvF,GAAI,QAAQ,yBACR,EAAE,wBAAwB,QAAQ,uBAAuB,IACzD,CAAC;AAAA,MACL,GAAI,QAAQ,0BACR,EAAE,yBAAyB,QAAQ,wBAAwB,IAC3D,CAAC;AAAA,IACP,CAAC;AAAA,EACH,CAAC;AACD,uBAAqB;AAAA,IACnB;AAAA,IACA,OAAO;AAAA,MACL;AAAA,QACE,QAAQ,0BAA0B,CAAC;AAAA,QACnC,QAAQ,sBAAsB,CAAC;AAAA,QAC/B,QAAQ,cAAc,CAAC;AAAA,QACvB,QAAQ,iBAAiB,CAAC;AAAA,MAC5B,EAAE,IAAI,CAAC,cAAc,OAAO,OAAO,SAAS,CAAC;AAAA,IAC/C;AAAA,EACF;AACA,MAAI,QAAQ,kBAAkB;AAC5B,uCAAmC,IAAI,KAAK;AAAA,EAC9C;AACA,qBAAmB;AAAA,IACjB;AAAA,IACA,8BAA8B,QAAQ,yBAAyB,CAAC,CAAC,EAAE;AAAA,MACjE,CAAC,aAAa,CAAC,SAAS;AAAA,IAC1B;AAAA,EACF;AACA,4BAA0B;AAAA,IACxB;AAAA,IACA,4BAA4B,UAAU,WAAW,QAAQ,oBAAoB;AAAA,EAC/E;AAMA,MAAI,QAAQ,sBAAsB;AAChC,8BAA0B,IAAI,OAAO,QAAQ,oBAAoB;AAAA,EACnE;AAIA,QAAM,gBAAgB;AAAA,IACpB,GAAI,QAAQ,iBAAiB,CAAC;AAAA,IAC9B,GAAI,QAAQ,eAAe,EAAE,QAAQ,QAAQ,aAAa,IAAI,CAAC;AAAA,EACjE;AACA,MAAI,OAAO,KAAK,aAAa,EAAE,SAAS,GAAG;AACzC,uBAAmB,IAAI,OAAO,aAAa;AAAA,EAC7C;AACA,MAAI,QAAQ,yBAAyB,QAAQ,sBAAsB,SAAS,GAAG;AAC7E,+BAA2B,IAAI,OAAO,QAAQ,qBAAqB;AAAA,EACrE;AACA,MAAI,QAAQ,oBAAoB;AAC9B,4BAAwB,IAAI,OAAO,QAAQ,kBAAkB;AAC7D,iCAA6B,IAAI,OAAO,QAAQ,uBAAwB;AAAA,EAC1E;AAKA,MAAI,QAAQ,UAAU;AACpB,kBAAc,IAAI,OAAO,QAAQ,QAAQ;AAAA,EAC3C;AACA,MAAI,QAAQ,wBAAwB,QAAQ,qBAAqB,SAAS,GAAG;AAC3E,4BAAwB,IAAI,OAAO,4BAA4B,QAAQ,oBAAoB,CAAC;AAAA,EAC9F;AACA,8BAA4B,OAAO,UAAU,OAAO;AACpD,yBAAuB,OAAO,QAAQ;AACtC,SAAO;AACT;AAWA,SAAS,4BACP,OACA,UACA,SACM;AACN,MAAI,SAAS,0BAA0B,QAAQ,4BAA4B,OAAO;AAChF,UAAM,aAAa,QAAQ,cAAc,CAAC;AAK1C,eAAW,UAAU,YAAY;AAC/B,UAAI,OAAO,SAAS,WAAY;AAChC,MACE,OAGA,iCAAiC;AAAA,IACrC;AACA;AAAA,MACE;AAAA,MACA,QAAQ,4BAA4B,oBAAI,IAAY;AAAA,MACpD,IAAI,IAAI,WAAW,IAAI,CAAC,WAAW,OAAO,IAAI,CAAC;AAAA,IACjD;AAAA,EACF;AACF;AAGA,SAAS,wBACP,QACA,gBACS;AACT,SAAO,WAAW,QAAS,WAAW,SAAS,OAAO,IAAI,cAAc;AAC1E;AA+BA,SAAS,yBACP,OACA,UACM;AACN,QAAM,eAAe,MAAM,YAAY,KAAK,KAAK;AACjD,QAAM,cAAc,OAAO,eAAwB;AACjD,UAAM,QAAQ,MAAM,aAAa,UAAU;AAC3C,WAAO,MAAM,IAAI,CAACC,UAAS;AACzB,UAAIA,MAAK,SAAS,YAAY;AAC5B,eAAOA;AAAA,MACT;AACA,YAAM,SAAS,SAAS,KAAK,CAAC,UAAUA,MAAK,KAAK,WAAW,MAAM,MAAM,CAAC;AAC1E,UAAI,CAAC,QAAQ;AACX,eAAOA;AAAA,MACT;AACA,YAAM,aAAaA,MAAK,KAAK,MAAM,OAAO,OAAO,MAAM;AACvD,aAAO,wBAAwB,OAAO,iBAAiB,UAAU,IAC7D,EAAE,GAAGA,OAAM,eAAe,YAAY,KAAK,IAC3CA;AAAA,IACN,CAAC;AAAA,EACH;AACA,QAAM,gBAAgB,MAAM,OAAO,KAAK,KAAK;AAC7C,MAAI,eAAe;AACjB,UAAM,QAAQ,CAAC,WAAoB;AACjC,YAAM,SAAS,cAAc,MAAM;AACnC,+BAAyB,QAAQ,QAAQ;AACzC,aAAO;AAAA,IACT;AAAA,EACF;AACF;AA2BA,SAAS,uBAAuB,OAAwB,UAA0B;AAChF,QAAM,WAAgC,SAAS,WAC5C;AAAA,IACC,CAAC,WACC,OAAO,oBAAoB,QAC1B,MAAM,QAAQ,OAAO,eAAe,KAAK,OAAO,gBAAgB,SAAS;AAAA,EAC9E,EACC,IAAI,CAAC,YAAY;AAAA,IAChB,QAAQ,oBAAoB,OAAO,IAAI,EAAE;AAAA,IACzC,iBACE,OAAO,oBAAoB,OAAO,OAAO,IAAI,IAAI,OAAO,eAA2B;AAAA,EACvF,EAAE,EACD,KAAK,CAAC,GAAG,MAAM,EAAE,OAAO,SAAS,EAAE,OAAO,MAAM;AACnD,MAAI,SAAS,WAAW,GAAG;AACzB;AAAA,EACF;AACA,2BAAyB,OAA0C,QAAQ;AAC7E;AAgBA,SAAS,kCACP,YACM;AAUN,QAAM,yBAAyB,WAAkD;AAC/E,SAAK,iBAAiB;AACtB,WAAO;AAAA,EACT;AACA,EAAC,WAAuE,YACtE;AACJ;AAoBA,SAAS,sBAAsB,OAAyC;AACtE,SAAO,MAAM,IAAI,CAAC,mBAAmB;AACnC,QAAI,eAAe,SAAS,cAAc,eAAe,SAAS,gBAAgB;AAChF,aAAO;AAAA,IACT;AACA,UAAM,SAAS,eAAe;AAC9B,WAAO;AAAA,MACL,GAAG;AAAA,MACH,QAAQ,CAAC,YAAY,OAAO,YAAY;AACtC,cAAM,SAAS,SAAS,UAAU;AAClC,YAAI,CAAC,QAAQ;AACX,iBAAO,OAAO,YAAY,OAAO,OAAO;AAAA,QAC1C;AACA,eAAO,2BAA2B,QAAQ,MAAM,OAAO,YAAY,OAAO,OAAO,CAAC;AAAA,MACpF;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAWO,SAAS,uCAAuC,OAAyC;AAC9F,SAAO,MAAM,IAAI,CAAC,mBAAmB;AACnC,QAAI,eAAe,SAAS,cAAc,eAAe,SAAS,cAAc;AAC9E,aAAO;AAAA,IACT;AACA,UAAM,SAAS,eAAe;AAC9B,WAAO;AAAA,MACL,GAAG;AAAA,MACH,QAAQ,OAAO,YAAY,OAAO,YAAY;AAC5C,cAAM,SAAS,MAAM,OAAO,YAAY,OAAO,OAAO;AACtD,cAAM,UACJ,OAAO,WAAW,WACd,SACA,UACE,OAAO,WAAW,YAClB,OAAQ,OAA8B,SAAS,WAC9C,OAA4B,OAC7B;AACR,eAAO,SAAS,WAAW,aAAa,IACpC,EAAE,MAAM,SAAkB,OAAO,EAAE,KAAK,QAAQ,EAAE,IAClD;AAAA,MACN;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEO,SAAS,uBACd,UACA,YACA,UAaI,CAAC,GACoC;AACzC,QAAM,mBACJ,QAAQ,0BAA0B,QAAQ,0BACtC,qCAAqC,QAAQ,sBAAsB,IACnE;AACN,MAAI,iBAAkB,SAAQ,0BAA0B,gBAAgB;AASxE,QAAM,uBAAuB,WAAW;AAAA,IACtC,GAAI,QAAQ,4BAA4B,QACpC,EAAE,gBAAgB,uCAAuC,IACzD,CAAC;AAAA,EACP,CAAC;AACD,MAAI,QAAQ,4BAA4B,OAAO;AAC7C,sCAAkC,oBAAoB;AAAA,EACxD;AACA,QAAM,OAAgD;AAAA,IACpD;AAAA,IACA,MAAM,EAAE,GAAI,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,sBAAsB,EAAG,CAAC;AAAA,EAClF;AACA,QAAM,gBAAgB;AAAA,IACpB;AAAA,IACA,QAAQ,sBAAsB,CAAC;AAAA,IAC/B,QAAQ,iBAAiB,CAAC;AAAA,EAC5B;AACA,OAAK;AAAA,IACH,OAAO;AAAA,MACL,UAAU;AAAA,QACR,CAAC,GAAG,YAAY,GAAG,aAAa;AAAA,QAChC,QAAQ,sBAAsB,CAAC;AAAA,MACjC;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI,QAAQ,qBAAqB,QAAQ;AACvC,SAAK;AAAA,MACH,gBAAgB,QAAQ,qBAAqB;AAAA,QAC3C,GAAG,qBAAqB,iBAAiB,CAAC;AAAA,QAC1C,IAAI,QAAQ,sBAAsB,CAAC,GAAG,IAAI,CAAC,UAAU,MAAM,IAAI;AAAA,QAC/D,GAAG,WAAW,IAAI,CAAC,UAAU,MAAM,IAAI;AAAA,QACvC,GAAG,cAAc,IAAI,CAAC,UAAU,MAAM,IAAI;AAAA,MAC5C,CAAC;AAAA,IACH;AAAA,EACF;AASA,MACE,SAAS,sBACT,SAAS,yBACT,sBAAsB,SAAS,cAAc,GAC7C;AAeA,UAAM,eAAe,QAAQ;AAC7B,UAAM,qBAAqB,YAAY;AAAA,MACrC,YAAY,CAAC,SAAS,uBAAuB,SAAS,sBAAsB;AAAA,MAC5E,UAAU,SAAS;AAAA,MACnB,GAAI,QAAQ,qBAAqB,EAAE,SAAS,QAAQ,mBAAmB,IAAI,CAAC;AAAA,MAC5E,GAAI,eACA,EAAE,UAAU,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAOzB,QAAQ,4BAA4B,QAClC,EAAE,sBAAsB,KAAK,IAC7B,CAAC;AAAA;AAAA,IACT,CAAC;AAGD,QAAI,CAAC,gBAAgB,QAAQ,4BAA4B,OAAO;AAC9D,wCAAkC,kBAAkB;AAAA,IACtD;AACA,SAAK,KAAK,kBAAgF;AAAA,EAC5F;AACA,MAAI,kBAAkB;AACpB,eAAW,cAAc,MAAM;AAC7B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,aAAa,WAAyC;AACpE,SAAO;AACT;AA4DA,eAAsB,2BACpB,SACA,SACoC;AACpC,uCAAqC,OAAO;AAC5C,QAAM,UAAqC,CAAC;AAC5C,MAAI;AACF,aAAS,SAAS,GAAG,SAAS,QAAQ,QAAQ,UAAU,sCAAsC;AAC5F,cAAQ;AAAA,QACN,MAAM;AAAA,UACJ,QAAQ,MAAM,QAAQ,SAAS,oCAAoC;AAAA,UACnE;AAAA,YACE,GAAI,QAAQ,qBAAqB,SAC7B,CAAC,IACD,EAAE,kBAAkB,QAAQ,iBAAiB;AAAA,YACjD,mBAAmB;AAAA,YACnB,QAAQ,QAAQ;AAAA,UAClB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,sBAAsB,OAAO,EAAE,MAAM,MAAM,MAAS;AAC1D,UAAM;AAAA,EACR;AAEA,QAAM,SAAS,oBAAI,IAAsB;AACzC,aAAW,SAAS,SAAS;AAC3B,eAAW,CAAC,QAAQ,KAAK,KAAK,MAAM,OAAQ,QAAO,IAAI,QAAQ,KAAK;AAAA,EACtE;AACA,SAAO;AAAA,IACL,QAAQ,QAAQ,QAAQ,CAAC,UAAU,MAAM,MAAM;AAAA,IAC/C,QAAQ,QAAQ,QAAQ,CAAC,UAAU,MAAM,MAAM;AAAA,IAC/C;AAAA,IACA,OAAO,YAAY;AACjB,YAAM,sBAAsB,OAAO;AAAA,IACrC;AAAA,EACF;AACF;AAEA,eAAe,sBAAsB,SAAmD;AACtF,MAAI;AACJ,aAAW,SAAS,CAAC,GAAG,OAAO,EAAE,QAAQ,GAAG;AAC1C,QAAI;AACF,YAAM,MAAM,MAAM;AAAA,IACpB,SAAS,OAAO;AACd,qBAAe;AAAA,IACjB;AAAA,EACF;AACA,MAAI,eAAe,OAAW,OAAM;AACtC;AAEA,eAAsB,kBACpB,UACA,OACA,UAA+B,CAAC,GACH;AAI7B,QAAM,2BAA2B,oBAAI,IAAY;AACjD,uCAAqC,KAAK;AAC1C,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,EAAE,YAAY,CAAC,GAAG,OAAO,YAAY;AAAA,IAAC,GAAG,yBAAyB;AAAA,EAC3E;AACA,QAAM,WAAW,IAAI,IAAI,SAAS,WAAW,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC;AACjF,QAAM,mBAAmB,MAAM;AAAA,IAC7B,CAACA,UAAS,SAAS,IAAIA,MAAK,EAAE,GAAG,eAAe,iBAAiB;AAAA,EACnE;AACA,MAAI,oBAAoB,CAAC,QAAQ,qBAAqB;AACpD,UAAM,IAAI;AAAA,MACR,2CAA2C,iBAAiB,EAAE;AAAA,IAChE;AAAA,EACF;AACA,QAAM,sBAAsB,IAAI,2BAA2B;AAK3D,QAAM,oBAAoB,QAAQ,iBAAiB,UAAa,CAAC,CAAC,QAAQ,SAAS;AACnF,QAAM,eACJ,QAAQ,iBAAiB,oBAAoB,WAAW,MAAM,KAAK,UAAU,IAAI;AACnF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,OAAOA,OAAM,UAAU;AACrB,YAAM,SAAS,SAAS,IAAIA,MAAK,EAAE;AACnC,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,0BAA0BA,MAAK,EAAE,EAAE;AAAA,MACrD;AACA,YAAM,MAAM,6BAA6B,UAAU,QAAQ,QAAQ,WAAW,KAAK,OAAO;AAC1F,YAAM,aAAa,sBAAsB,UAAU,MAAM;AACzD,YAAM,YAAY,qBAAqB,MAAM,IACzC,yBAAyB,cAAc,wBAAwB,IAC/D;AACJ,YAAM,eAAe;AAAA,QACnB,aAAa,EAAE,GAAG,UAAU,wCAAwC,KAAK,IAAI;AAAA,QAC7E;AAAA,QACA;AAAA,UACE,GAAI,aAAa,EAAE,8BAA8B,MAAM,IAAI,CAAC;AAAA,UAC5D,GAAI,oBAAoB,EAAE,wBAAwB,MAAM,IAAI,CAAC;AAAA,QAC/D;AAAA,MACF;AACA,YAAM,YAAY,OAAO,gBACrB,sBAAsB,cAAc,QAAQ,OAAO,IACnD,aACE,oBAAoB,cAAc,UAAU,OAAO,IACnD;AAqBN,YAAM,WAAWA,MAAK,aAAa;AACnC,YAAM,aAAa,qBAAqB,MAAM,KAAK,YAAY,CAAC,CAAC,OAAO;AACxE,YAAM,SAAS,IAAI;AAAA,QACjB,IAAI,wBAAwB;AAAA,UAC1B;AAAA,UACA,MAAM,OAAO,QAAQ,OAAO;AAAA,UAC5B,gBAAgB,OAAO;AAAA;AAAA;AAAA;AAAA,UAIvB,QAAQ,uBAAuB,OAAO,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA,UAKxC,OAAO;AAAA,UACP,GAAI,MAAM,qBAAqB,UAAU,MAAM;AAAA,UAC/C,GAAI,OAAO,YACP;AAAA,YACE,SAAS,OAAO;AAAA,YAChB,6BAA6B,KAAK,KAAK,OAAO,YAAY,GAAI;AAAA,UAChE,IACA,CAAC;AAAA,QACP,CAAC;AAAA,QACD,OAAO;AAAA,QACP,OAAO;AAAA,QACP;AAAA,QACA;AAAA,QACA,GAAG,OAAO,EAAE,IAAI,KAAK;AAAA,MACvB;AACA,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA,WAAW,OAAO;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AACA,QAAM,kBAAkB,QAAQ,OAAO,CAAC,UAAU,CAAC,MAAM,UAAU;AACnE,QAAM,oBAAoB,QAAQ,OAAO,CAAC,UAAU,MAAM,UAAU;AACpE,QAAM,kBAAkB,gBAAgB,IAAI,CAAC,UAAU,MAAM,MAAM;AACnE,QAAM,oBAAoB,kBAAkB,IAAI,CAAC,UAAU,MAAM,MAAM;AAIvE,QAAM,sBAAsB,IAAI;AAAA,IAC9B,QAAQ,OAAO,CAAC,UAAU,MAAM,QAAQ,EAAE,IAAI,CAAC,UAAU,MAAM,OAAO,IAAI;AAAA,EAC5E;AACA,QAAM,oBAAoB,MAAM,2BAA2B,iBAAiB;AAAA,IAC1E,QAAQ;AAAA,IACR,kBAAkB,yBAAyB,gBAAgB,IAAI,CAAC,UAAU,MAAM,SAAS,CAAC;AAAA,EAC5F,CAAC;AACD,MAAI,sBAAwD;AAC5D,MAAI;AACF,0BAAsB,kBAAkB,SACpC,MAAM,2BAA2B,mBAAmB;AAAA,MAClD,QAAQ;AAAA,MACR,kBAAkB;AAAA,QAChB,kBAAkB,IAAI,CAAC,UAAU,MAAM,SAAS;AAAA,MAClD;AAAA,IACF,CAAC,IACD;AAAA,EACN,SAAS,OAAO;AACd,UAAM,kBAAkB,MAAM,EAAE,MAAM,MAAM,MAAS;AACrD,UAAM;AAAA,EACR;AACA,MAAI,qBAAqB;AACvB,eAAW,UAAU,oBAAoB,QAAQ;AAC/C,UAAI,kBAAkB,mBAAmB;AACvC,eAAO,uBAAuB;AAAA,MAChC;AACA,UAAI,CAAC,oBAAoB,IAAI,OAAO,IAAI,GAAG;AACzC;AAAA,MACF;AACA,YAAM,QAAQ,oBAAoB,OAAO,IAAI,MAAM;AACnD,cAAQ;AAAA,QACN,0BAA0B,OAAO,IAAI;AAAA,QACrC,mBAAmB,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AACA,SAAO;AAAA,IACL,YAAY,CAAC,GAAG,kBAAkB,QAAQ,GAAI,qBAAqB,UAAU,CAAC,CAAE;AAAA,IAChF,OAAO,YAAY;AACjB,UAAI;AACJ,UAAI,qBAAqB;AACvB,YAAI;AACF,gBAAM,oBAAoB,MAAM;AAAA,QAClC,SAAS,OAAO;AACd,yBAAe;AAAA,QACjB;AAAA,MACF;AACA,UAAI;AACF,cAAM,kBAAkB,MAAM;AAAA,MAChC,SAAS,OAAO;AACd,uBAAe;AAAA,MACjB;AACA,UAAI,eAAe,OAAW,OAAM;AAAA,IACtC;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,sBACP,WACA,QACA,SACW;AACX,QAAM,gBAAgB,OAAO;AAC7B,MAAI,CAAC,eAAe;AAClB,WAAO;AAAA,EACT;AACA,SAAO,OAAO,OAAO,SAAS;AAC5B,UAAM,UAAU,MAAM,eAAe,OAAO,IAAI;AAChD,UAAM,iBAAiB,yBAAyB,KAAK;AACrD,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA,OAAO;AAAA,MACP;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR;AAAA,IACF;AACA,QAAI,MAAM,WAAW,eAAe;AAClC,aAAO,MAAM,wBAAwB,SAAS,OAAO,IAAI,SAAS,OAAO,aAAa;AAAA,IACxF;AACA,UAAM,WAAW,MAAM;AAAA,MACrB,qBAAqB,KAAK;AAAA,MAC1B,sBAAsB,OAAO,MAAM,MAAM,OAAO;AAAA,IAClD;AACA,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,sBAAsB,QAAQ;AACpC,YAAM,YAAY,MAAM;AAAA,QACtB;AAAA,QACA,OAAO;AAAA,QACP;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,QACR;AAAA,MACF;AACA,UAAI,UAAU,WAAW,eAAe;AACtC,eAAO,MAAM,wBAAwB,SAAS,OAAO,IAAI,SAAS,WAAW,aAAa;AAAA,MAC5F;AACA,YAAM,QAAQ,MAAM;AAAA,QAClB,qBAAqB,KAAK;AAAA,QAC1B,sBAAsB,OAAO,MAAM,UAAU,OAAO;AAAA,MACtD;AACA,UAAI,MAAM,WAAW,KAAK;AACxB,cAAM,OAAO,sBAAsB,MAAM,SAAS,eAAe,UAAU,YAAY;AACvF,YAAI,MAAM;AACR,gBAAM,sBAAsB,KAAK;AACjC,iBAAO,MAAM,wBAAwB,SAAS,OAAO,IAAI,SAAS,MAAM,aAAa;AAAA,QACvF;AACA,eAAO;AAAA,MACT;AACA,UAAI,MAAM,WAAW,KAAK;AACxB,cAAM,sBAAsB,KAAK;AACjC,eAAO,MAAM;AAAA,UACX;AAAA,UACA,OAAO;AAAA,UACP;AAAA,UACA;AAAA,YACE,QAAQ;AAAA,YACR,QAAQ;AAAA,YACR,gBAAgB,cAAc;AAAA,YAC9B,GAAI,cAAc,WAAW,EAAE,UAAU,cAAc,SAAS,IAAI,CAAC;AAAA,YACrE,cAAc,UAAU;AAAA,YACxB,GAAI,cAAc,SAAS,EAAE,QAAQ,cAAc,OAAO,IAAI,CAAC;AAAA,YAC/D,GAAI,cAAc,WAAW,EAAE,UAAU,cAAc,SAAS,IAAI,CAAC;AAAA,YACrE,GAAI,cAAc,oBACd,EAAE,mBAAmB,cAAc,kBAAkB,IACrD,CAAC;AAAA,UACP;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,aAAO;AAAA,IACT;AACA,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,OAAO,sBAAsB,SAAS,SAAS,eAAe,MAAM,YAAY;AACtF,UAAI,MAAM;AACR,cAAM,sBAAsB,QAAQ;AACpC,eAAO,MAAM,wBAAwB,SAAS,OAAO,IAAI,SAAS,MAAM,aAAa;AAAA,MACvF;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AACF;AAEA,eAAe,4BACb,SACA,UACA,eACA,gBACA,UACA,cAC4C;AAC5C,MAAI,CAAC,QAAQ,eAAe,CAAC,QAAQ,mBAAmB;AACtD,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,gBAAgB,cAAc;AAAA,MAC9B,GAAI,cAAc,WAAW,EAAE,UAAU,cAAc,SAAS,IAAI,CAAC;AAAA,MACrE,GAAI,cAAc,eAAe,EAAE,cAAc,cAAc,aAAa,IAAI,CAAC;AAAA,MACjF,GAAI,cAAc,SAAS,EAAE,QAAQ,cAAc,OAAO,IAAI,CAAC;AAAA,MAC/D,GAAI,cAAc,WAAW,EAAE,UAAU,cAAc,SAAS,IAAI,CAAC;AAAA,MACrE,GAAI,cAAc,oBACd,EAAE,mBAAmB,cAAc,kBAAkB,IACrD,CAAC;AAAA,IACP;AAAA,EACF;AACA,QAAM,UAA4C;AAAA,IAChD,aAAa,QAAQ;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,IAC/B,GAAI,QAAQ,sBAAsB,EAAE,WAAW,QAAQ,oBAAoB,IAAI,CAAC;AAAA,EAClF;AACA,MAAI;AACF,WAAO,MAAM,QAAQ,kBAAkB,OAAO;AAAA,EAChD,QAAQ;AACN,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,gBAAgB,cAAc;AAAA,MAC9B,GAAI,cAAc,WAAW,EAAE,UAAU,cAAc,SAAS,IAAI,CAAC;AAAA,MACrE,GAAI,cAAc,eAAe,EAAE,cAAc,cAAc,aAAa,IAAI,CAAC;AAAA,MACjF,GAAI,cAAc,SAAS,EAAE,QAAQ,cAAc,OAAO,IAAI,CAAC;AAAA,MAC/D,GAAI,cAAc,WAAW,EAAE,UAAU,cAAc,SAAS,IAAI,CAAC;AAAA,MACrE,GAAI,cAAc,oBACd,EAAE,mBAAmB,cAAc,kBAAkB,IACrD,CAAC;AAAA,IACP;AAAA,EACF;AACF;AAEA,SAAS,sBACP,SACA,eACA,cAC8E;AAC9E,QAAM,YAAY,qBAAqB,QAAQ,IAAI,kBAAkB,CAAC;AACtE,MAAI,UAAU,UAAU,sBAAsB;AAC5C,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,gBAAgB,cAAc;AAAA,IAC9B,GAAI,cAAc,WAAW,EAAE,UAAU,cAAc,SAAS,IAAI,CAAC;AAAA,IACrE;AAAA,IACA,GAAI,UAAU,OAAO,SACjB,EAAE,QAAQ,UAAU,MAAM,IAC1B,cAAc,SACZ,EAAE,QAAQ,cAAc,OAAO,IAC/B,CAAC;AAAA,IACP,GAAI,UAAU,WACV,EAAE,UAAU,UAAU,SAAS,IAC/B,cAAc,WACZ,EAAE,UAAU,cAAc,SAAS,IACnC,CAAC;AAAA,IACP,GAAI,cAAc,oBACd,EAAE,mBAAmB,cAAc,kBAAkB,IACrD,CAAC;AAAA,EACP;AACF;AAEA,eAAe,wBACb,SACA,UACA,SACA,MACA,eACmB;AACnB,QAAM,eAAe,KAAK,gBAAgB,cAAc;AACxD,QAAM,kBAAkB,SAAS;AAAA,IAC/B;AAAA,IACA,UAAU,QAAQ,YAAY;AAAA,IAC9B,gBAAgB,KAAK;AAAA,IACrB,GAAI,KAAK,WACL,EAAE,UAAU,KAAK,SAAS,IAC1B,cAAc,WACZ,EAAE,UAAU,cAAc,SAAS,IACnC,CAAC;AAAA,IACP,QAAQ,KAAK;AAAA,IACb,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA,IACvC,GAAI,KAAK,SACL,EAAE,QAAQ,KAAK,OAAO,IACtB,cAAc,SACZ,EAAE,QAAQ,cAAc,OAAO,IAC/B,CAAC;AAAA,IACP,GAAI,KAAK,WACL,EAAE,UAAU,KAAK,SAAS,IAC1B,cAAc,WACZ,EAAE,UAAU,cAAc,SAAS,IACnC,CAAC;AAAA,IACP,GAAI,KAAK,oBACL,EAAE,mBAAmB,KAAK,kBAAkB,IAC5C,cAAc,oBACZ,EAAE,mBAAmB,cAAc,kBAAkB,IACrD,CAAC;AAAA,IACP,GAAI,KAAK,mBAAmB,EAAE,kBAAkB,KAAK,iBAAiB,IAAI,CAAC;AAAA,IAC3E,GAAI,QAAQ,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;AAAA,EAC9D,CAAC;AACD,MAAI,QAAQ,WAAW,cAAc;AACnC,WAAO,0BAA0B,QAAQ,EAAE;AAAA,EAC7C;AACA,SAAO,IAAI,SAAS,qDAAqD;AAAA,IACvE,QAAQ;AAAA,EACV,CAAC;AACH;AAEA,eAAe,kBACb,SACA,SACe;AACf,MAAI;AACF,UAAM,QAAQ,eAAe,OAAO;AAAA,EACtC,QAAQ;AAAA,EAGR;AACF;AAQA,SAAS,yBAAyB,OAAuC;AACvE,SAAO,IAAI,IAAI,iBAAiB,UAAU,MAAM,MAAM,MAAM,SAAS,CAAC,EAAE,SAAS;AACnF;AAEA,eAAe,eACb,OACA,MACyB;AACzB,QAAM,OACJ,OAAO,MAAM,SAAS,WAClB,KAAK,OACL,iBAAiB,YAAY,MAAM,UAAU,MAAM,QAAQ,YAAY,MAAM,SAC3E,MAAM,MACH,MAAM,EACN,KAAK,EACL,MAAM,MAAM,EAAE,IACjB;AACR,MAAI,CAAC,MAAM;AACT,WAAO,CAAC;AAAA,EACV;AACA,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,IAAI;AAK9B,UAAM,SAAS,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS;AACnE,UAAM,KACJ,OAAO,OAAO,OAAO,YAAY,OAAO,OAAO,OAAO,YAAY,OAAO,OAAO,OAC5E,OAAO,KACP;AACN,UAAM,WACJ,WAAW,gBAAgB,OAAO,OAAO,QAAQ,SAAS,WACtD,OAAO,OAAO,OACd;AACN,WAAO;AAAA,MACL,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,MAC3B,GAAI,OAAO,SAAY,EAAE,GAAG,IAAI,CAAC;AAAA,MACjC,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,IACjC;AAAA,EACF,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,SAAS,sBACP,OACA,MACA,aACa;AACb,QAAM,UAAU,IAAI;AAAA,IAClB,MAAM,YAAY,iBAAiB,UAAU,MAAM,UAAU;AAAA,EAC/D;AACA,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,WAAW,GAAG;AACvD,YAAQ,IAAI,MAAM,KAAK;AAAA,EACzB;AACA,SAAO,EAAE,GAAG,MAAM,QAAQ;AAC5B;AAEA,SAAS,qBAAqB,OAAuD;AACnF,SAAO,iBAAiB,UAAU,MAAM,MAAM,IAAI;AACpD;AAEA,SAAS,qBAAqB,QAI5B;AACA,MAAI,CAAC,QAAQ;AACX,WAAO,CAAC;AAAA,EACV;AACA,QAAM,cAAc,OAAO,YAAY,EAAE,QAAQ,QAAQ;AACzD,MAAI,cAAc,GAAG;AACnB,WAAO,CAAC;AAAA,EACV;AACA,QAAM,aAAa,OAAO,MAAM,cAAc,SAAS,MAAM;AAC7D,QAAM,SAAiC,CAAC;AACxC,QAAM,KAAK;AACX,MAAI;AACJ,UAAQ,QAAQ,GAAG,KAAK,UAAU,OAAO,MAAM;AAC7C,UAAM,MAAM,MAAM,CAAC;AACnB,WAAO,MAAM,CAAC,EAAG,YAAY,CAAC,IAAI,IAAI,WAAW,GAAG,IAChD,IAAI,MAAM,GAAG,EAAE,EAAE,QAAQ,QAAQ,GAAG,IACpC;AAAA,EACN;AACA,SAAO;AAAA,IACL,GAAI,OAAO,QAAQ,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,IAC9C,GAAI,OAAO,QAAQ,EAAE,OAAO,OAAO,MAAM,MAAM,KAAK,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC;AAAA,IAC3E,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,EACzD;AACF;AAQA,IAAM,6BAA6B;AACnC,IAAM,0BACJ;AAEF,SAAS,0BAA0B,IAAkD;AACnF,SAAO,IAAI;AAAA,IACT,KAAK,UAAU;AAAA,MACb,SAAS;AAAA,MACT,IAAI,MAAM;AAAA,MACV,OAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,IACF,CAAC;AAAA,IACD;AAAA,MACE,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,OAAyB;AACrD,MAAI,EAAE,iBAAiB,QAAQ;AAC7B,WAAO;AAAA,EACT;AACA,QAAM,OAAQ,MAA6B;AAC3C,SAAO,SAAS,8BAA8B,MAAM,QAAQ,SAAS,uBAAuB;AAC9F;AAUA,SAAS,0BAA0B,QAAwB;AACzD,SAAO,uDAAuD,MAAM;AACtE;AAOA,SAAS,mBAAmB,OAG1B;AACA,QAAM,aAAa,iBAAiB,QAAQ,MAAM,YAAY,OAAO,OAAO;AAC5E,QAAM,MAAO,OAAuD;AACpE,QAAM,SAAS,OAAO,QAAQ,WAAW,MAAM;AAC/C,MAAI,WAAW,QAAW;AACxB,UAAM,SAAU,OAAuC;AACvD,WAAO,OAAO,WAAW,WAAW,EAAE,YAAY,QAAQ,OAAO,IAAI,EAAE,WAAW;AAAA,EACpF;AACA,SAAO,EAAE,YAAY,OAAO;AAC9B;AAEA,SAAS,sBAAsB,OAA4D;AACzF,QAAM,SAAS,mBAAmB,KAAK;AACvC,QAAM,YAAY,IAAI;AAAA,IACpB,mCAAmC,eAAe,MAAM,CAAC;AAAA,EAC3D;AAIA,YAAU,OAAO;AACjB,MAAI,OAAO,WAAW,QAAW;AAC/B,cAAU,SAAS,OAAO;AAC1B,cAAU,OAAO,OAAO;AAAA,EAC1B;AACA,SAAO;AACT;AAEA,SAAS,uBAAuB,UAAkB;AAChD,QAAM,aAAa,CAAC,aAAqB,SAAoB;AAC3D,QAAI;AACJ,aAAS,QAAQ,KAAK,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG;AACxD,UAAI,KAAK,KAAK,aAAa,OAAO;AAChC,gBAAQ,KAAK,KAAK;AAClB;AAAA,MACF;AAAA,IACF;AACA,YAAQ,KAAK,oCAAoC;AAAA,MAC/C;AAAA,MACA,GAAG,mBAAmB,KAAK;AAAA,IAC7B,CAAC;AAAA,EACH;AACA,SAAO;AAAA,IACL,WAAW;AAAA,IACX,OAAO,MAAM;AAAA,IACb,OAAO;AAAA,IACP,MAAM;AAAA,IACN,kBAAkB;AAAA,IAClB,iBAAiB;AAAA,EACnB;AACF;AAIA,SAAS,eAAe,QAAyD;AAC/E,SAAO,OAAO,WAAW,SAAY,OAAO,aAAa,GAAG,OAAO,UAAU,IAAI,OAAO,MAAM;AAChG;AAEA,eAAe,qBACb,UACA,QACoE;AAIpE,MAAI,qBAAqB,MAAM,GAAG;AAChC,WAAO,MAAM,wBAAwB,QAAQ;AAAA,EAC/C;AACA,MAAI,sBAAsB,UAAU,MAAM,GAAG;AAC3C,WAAO,MAAM,yBAAyB,UAAU,MAAM;AAAA,EACxD;AAIA,MAAI,OAAO,WAAW,OAAO,KAAK,OAAO,OAAO,EAAE,SAAS,GAAG;AAC5D,WAAO,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,OAAO,QAAQ,EAAE,EAAE;AAAA,EAC3D;AACA,SAAO,CAAC;AACV;AAEA,eAAe,yBACb,UACA,QACoE;AACpE,MAAI,CAAC,sBAAsB,UAAU,MAAM,GAAG;AAC5C,WAAO,CAAC;AAAA,EACV;AACA,QAAM,UAAkC,CAAC;AACzC,MAAI,SAAS,gBAAgB,SAAS,WAAW;AAC/C,YAAQ,uBAAuB,IAAI,SAAS;AAAA,EAC9C;AASA,MAAI,OAAO,KAAK,OAAO,EAAE,WAAW,GAAG;AACrC,WAAO,CAAC;AAAA,EACV;AACA,SAAO;AAAA,IACL,aAAa;AAAA,MACX;AAAA,IACF;AAAA,EACF;AACF;AAOA,eAAe,8BACb,UACA,SACwB;AACxB,MAAI,CAAC,SAAS,oBAAoB,CAAC,QAAQ,aAAa,CAAC,QAAQ,aAAa;AAC5E,WAAO;AAAA,EACT;AACA,SAAO,MAAM,yBAAyB,SAAS,kBAAkB;AAAA,IAC/D,WAAW,QAAQ;AAAA,IACnB,aAAa,QAAQ;AAAA,IACrB,WAAW,QAAQ,aAAa;AAAA,IAChC,GAAI,QAAQ,eAAe,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;AAAA,IACrE,aAAa,QAAQ,yBAAyB,CAAC,GAAG,mCAAmC;AAAA,IACrF,oBAAoB,QAAQ,mBAAmB,CAAC,GAAG,6BAA6B;AAAA,IAChF,GAAI,QAAQ,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;AAAA,IAC5D,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,IACnD,GAAI,QAAQ,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;AAAA,IAC5D,GAAI,QAAQ,sBAAsB,EAAE,qBAAqB,QAAQ,oBAAoB,IAAI,CAAC;AAAA,IAC1F,KAAK,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,KAAK;AAAA,EAC5C,CAAC;AACH;AAUA,SAAS,oBACP,WACA,UACA,SACW;AACX,SAAO,OAAO,OAAO,SAAS;AAC5B,UAAM,SAAS,MAAM,8BAA8B,UAAU,OAAO;AACpE,QAAI,CAAC,QAAQ;AACX,aAAO,MAAM,UAAU,OAAO,IAAI;AAAA,IACpC;AACA,WAAO,MAAM;AAAA,MACX,qBAAqB,KAAK;AAAA,MAC1B,sBAAsB,OAAO,MAAM,EAAE,eAAe,UAAU,MAAM,GAAG,CAAC;AAAA,IAC1E;AAAA,EACF;AACF;AAUA,eAAe,wBACb,UACoE;AACpE,QAAM,MAAM,oBAAoB,SAAS;AACzC,MAAI,CAAC,KAAK;AACR,WAAO,CAAC;AAAA,EACV;AACA,MAAI;AACJ,MAAI;AACF,YAAQ,MAAM,IAAI,SAAS;AAAA,EAC7B,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACA,QAAM,UAAkC;AAAA,IACtC,eAAe,UAAU,MAAM,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,IAK1C,YAAY;AAAA,IACZ,cAAc,GAAG,gBAAgB,IAAI,IAAI,aAAa;AAAA,IACtD,SAAS,IAAI;AAAA,EACf;AACA,MAAI,MAAM,kBAAkB;AAC1B,YAAQ,oBAAoB,IAAI,MAAM;AAAA,EACxC;AACA,MAAI,SAAS,iBAAiB;AAC5B,YAAQ,sBAAsB,IAAI,SAAS;AAAA,EAC7C;AACA,SAAO,EAAE,aAAa,EAAE,QAAQ,EAAE;AACpC;AAgBA,SAAS,qBAAqB,QAAiD;AAC7E,SAAO,OAAO,OAAO;AACvB;AAEA,SAAS,sBACP,UACA,QACS;AACT,MAAI,CAAC,CAAC,YAAY,SAAS,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG;AACtD,WAAO;AAAA,EACT;AACA,MAAI,OAAO,IAAI,SAAS,eAAe,GAAG;AACxC,WAAO;AAAA,EACT;AACA,QAAM,MAAM,aAAa,OAAO,GAAG;AACnC,MAAI,CAAC,KAAK;AACR,WAAO;AAAA,EACT;AACA,SAAO,kBAAkB,QAAQ,EAAE,KAAK,CAAC,cAAc,cAAc,GAAG;AAC1E;AAEA,SAAS,6BACP,UACA,QACA,aACe;AACf,MAAI,CAAC,eAAe,CAAC,CAAC,YAAY,SAAS,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG;AACtE,WAAO;AAAA,EACT;AACA,MAAI,OAAO,IAAI,SAAS,eAAe,GAAG;AACxC,WAAO,OAAO,IAAI,WAAW,iBAAiB,WAAW;AAAA,EAC3D;AACA,MAAI,CAAC,sBAAsB,UAAU,MAAM,GAAG;AAC5C,WAAO;AAAA,EACT;AACA,QAAM,UAAU,SAAS,gBAAgB,SAAS,eAAe,IAC7D,SAAS,eAAe,WAAW,iBAAiB,WAAW,IAC/D,SAAS,iBACP,+BAA+B,SAAS,gBAAgB,WAAW;AAAA;AAAA;AAAA,IAGnE,qBAAqB,QAAQ,EAAE,WAAW,iBAAiB,WAAW;AAAA;AAC5E,QAAM,MAAM,IAAI,IAAI,OAAO;AAC3B,MAAI,OAAO,OAAO,QAAQ;AACxB,QAAI,WAAW,GAAG,IAAI,SAAS,QAAQ,QAAQ,EAAE,CAAC;AAAA,EACpD;AACA,SAAO,IAAI,SAAS;AACtB;AAEA,SAAS,+BAA+B,KAAa,aAA6B;AAChF,QAAM,MAAM,IAAI,IAAI,GAAG;AACvB,MAAI,WAAW,kBAAkB,WAAW;AAC5C,MAAI,SAAS;AACb,MAAI,OAAO;AACX,SAAO,IAAI,SAAS;AACtB;AAEA,SAAS,kBAAkB,UAA8B;AAGvD,QAAM,OAAO,aAAa,SAAS,kBAAkB,qBAAqB,QAAQ,CAAC;AACnF,MAAI,CAAC,MAAM;AACT,WAAO,CAAC;AAAA,EACV;AACA,QAAM,OAAO,IAAI,IAAI,IAAI;AACzB,OAAK,WAAW,GAAG,KAAK,SAAS,QAAQ,QAAQ,EAAE,CAAC;AACpD,SAAO,CAAC,MAAM,aAAa,KAAK,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,UAA2B,QAAQ,KAAK,CAAC;AAChG;AAEA,SAAS,aAAa,KAA4B;AAChD,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,GAAG;AACvB,QAAI,OAAO;AACX,QAAI,WAAW,IAAI,SAAS,QAAQ,QAAQ,EAAE;AAC9C,WAAO,IAAI,SAAS;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,oBAAoB,YAAoB,UAA0B;AAChF,SAAO,0BAA0B,YAAY,QAAQ;AACvD;AAEA,IAAM,oBAAN,MAA6C;AAAA,EAc3C,YACmB,OACjB,YACA,cACA,aAAa,OACI,qBACA,oBAAoB,YACrC;AANiB;AAIA;AACA;AAEjB,SAAK,OAAO;AACZ,SAAK,SAAS,oBAAoB,YAAY,EAAE;AAChD,SAAK,iBAAiB,MAAM;AAC5B,SAAK,eAAe,eAAe,IAAI,IAAI,YAAY,IAAI;AAC3D,SAAK,aAAa;AAAA,EACpB;AAAA,EA1BS;AAAA,EACA;AAAA,EACA;AAAA,EACQ;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA;AAAA,EACT,yBAAyB;AAAA,EACzB,yBAAyB;AAAA,EACzB,oCAAoC;AAAA,EAiB5C,UAAyB;AACvB,WAAO,KAAK,MAAM,QAAQ,EAAE,MAAM,CAAC,UAAmB;AAGpD,YAAM,sBAAsB,KAAK;AAAA,IACnC,CAAC;AAAA,EACH;AAAA,EAEA,QAAuB;AACrB,SAAK,uBAAuB;AAC5B,WAAO,KAAK,MAAM,MAAM;AAAA,EAC1B;AAAA,EAEA,yBAA+B;AAC7B,SAAK,qBAAqB,OAAO,KAAK,iBAAiB;AAAA,EACzD;AAAA,EAEA,MAAM,YAAuC;AAC3C,QAAI;AACF,YAAM,QAAQ,8BAA8B,MAAM,KAAK,MAAM,UAAU,CAAC;AACxE,YAAM,UAAU,MACb,OAAO,CAACA,UAAS,KAAK,UAAUA,MAAK,IAAI,CAAC,EAC1C,IAAI,CAACA,WAAU;AAAA,QACd,GAAGA;AAAA,QACH,MAAM,oBAAoB,KAAK,MAAMA,MAAK,IAAI;AAAA,MAChD,EAAE;AACJ,YAAM,UAAW,KAAK,qBAAqB,QAAQ,KAAK,mBAAmB,OAAO,KAChF,8BAA8B,OAAO;AACvC,WAAK,yBAAyB,8BAA8B,OAAO;AACnE,aAAO;AAAA,IACT,SAAS,OAAO;AAGd,UAAI,CAAC,KAAK,YAAY;AACpB,cAAM;AAAA,MACR;AAcA,UAAI,CAAC,KAAK,wBAAwB;AAChC,aAAK,yBAAyB;AAC9B,gBAAQ;AAAA,UACN;AAAA;AAAA;AAAA,UAGA,EAAE,UAAU,KAAK,MAAM,GAAG,mBAAmB,KAAK,EAAE;AAAA,QACtD;AAAA,MACF;AACA,WAAK,uBAAuB;AAC5B,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AAAA;AAAA,EAGA,wBAAgC;AAC9B,WAAO,KAAK,oCAAoC,IAAI,KAAK;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,iCAAuC;AACrC,SAAK,oCAAoC;AAAA,EAC3C;AAAA,EAEA,MAAM,SACJ,UACA,MACA,MACc;AACd,UAAM,aAAa,KAAK,iBAAiB,QAAQ;AACjD,QAAI,CAAC,KAAK,UAAU,UAAU,GAAG;AAC/B,YAAM,IAAI,MAAM,YAAY,UAAU,8BAA8B,KAAK,IAAI,EAAE;AAAA,IACjF;AACA,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,MAAM,SAAS,YAAY,MAAM,IAAI;AAC/D,kCAA4B,QAAQ,2BAA2B,iBAAiB;AAChF,aAAO;AAAA,IACT,SAAS,OAAO;AAOd,UAAI,qBAAqB,KAAK,GAAG;AAC/B,eAAO;AAAA,UACL,SAAS;AAAA,UACT,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,wBAAwB,CAAC;AAAA,QAC3D;AAAA,MACF;AAaA,UAAI,KAAK,YAAY;AACnB,cAAM,SAAS,mBAAmB,KAAK;AACvC,gBAAQ;AAAA,UACN;AAAA,UACA,EAAE,UAAU,KAAK,MAAM,UAAU,YAAY,GAAG,OAAO;AAAA,QACzD;AACA,eAAO;AAAA,UACL,SAAS;AAAA,UACT,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,0BAA0B,eAAe,MAAM,CAAC;AAAA,YACxD;AAAA,UACF;AAAA,QACF;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,uBAAsC;AACpC,WAAO,KAAK,MAAM,qBAAqB;AAAA,EACzC;AAAA,EAEA,MAAM,cAAc,QAAgD;AAClE,UAAM,kBAAkB,KAAK;AAG7B,QAAI,CAAC,gBAAgB,eAAe;AAClC,YAAM,IAAI,MAAM,cAAc,KAAK,IAAI,6BAA6B;AAAA,IACtE;AACA,WAAO,MAAM,gBAAgB,cAAc,MAAM;AAAA,EACnD;AAAA,EAEA,MAAM,sBAAsB,QAAgD;AAC1E,UAAM,kBAAkB,KAAK;AAG7B,QAAI,CAAC,gBAAgB,uBAAuB;AAC1C,YAAM,IAAI,MAAM,cAAc,KAAK,IAAI,sCAAsC;AAAA,IAC/E;AACA,WAAO,MAAM,gBAAgB,sBAAsB,MAAM;AAAA,EAC3D;AAAA,EAEA,MAAM,aAAa,KAA2B;AAC5C,UAAM,kBAAkB,KAAK;AAG7B,QAAI,CAAC,gBAAgB,cAAc;AACjC,YAAM,IAAI,MAAM,cAAc,KAAK,IAAI,kCAAkC;AAAA,IAC3E;AACA,WAAO,MAAM,gBAAgB,aAAa,GAAG;AAAA,EAC/C;AAAA,EAEQ,UAAU,UAA2B;AAC3C,WAAO,CAAC,KAAK,gBAAgB,KAAK,aAAa,IAAI,QAAQ;AAAA,EAC7D;AAAA,EAEQ,iBAAiB,UAA0B;AACjD,QAAI,CAAC,SAAS,WAAW,KAAK,MAAM,GAAG;AACrC,YAAM,IAAI,MAAM,YAAY,QAAQ,wBAAwB,KAAK,IAAI,SAAS;AAAA,IAChF;AACA,WAAO,SAAS,MAAM,KAAK,OAAO,MAAM;AAAA,EAC1C;AACF;AASA,eAAsB,gBACpB,OACA,OACA,UAA+B,CAAC,GACH;AAC7B,MAAI,MAAM,SAAS,WAAW;AAC5B,UAAM,mBAAqC,CAAC;AAC5C,QAAI,MAAM,iBAAiB,KAAK,GAAG;AACjC,uBAAiB,KAAK;AAAA,QACpB,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS,MAAM;AAAA,MACjB,CAAmB;AAAA,IACrB;AACA,QAAI,MAAM,MAAM,KAAK,GAAG;AACtB,uBAAiB,KAAK;AAAA,QACpB,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS,MAAM;AAAA,MACjB,CAAmB;AAAA,IACrB;AACA,QACE,iBAAiB,WAAW,MAC3B,MAAM,iBAAiB,UACtB,MAAM,iBAAiB,QACvB,MAAM,aAAa,WAAW,IAChC;AACA,YAAM,IAAI,MAAM,0DAA0D;AAAA,IAC5E;AAIA,UAAM,mBAAmB;AAAA,MACtB,MAAM,gBAAgB,CAAC;AAAA,IAC1B;AACA,UAAM,sBAAsB,MAAM,kBAC9B,MAAM,qCAAqC,MAAM,iBAAiB,QAAQ,aAAa,IACvF;AACJ,UAAM,YAAY,CAAC,GAAG,kBAAkB,GAAG,gBAAgB;AAC3D,QAAI,UAAU,WAAW,GAAG;AAC1B,YAAM,IAAI,MAAM,4DAA4D;AAAA,IAC9E;AACA,WAAO;AAAA;AAAA;AAAA,MAGL,OACE,iBAAiB,WAAW,KAAK,CAAC,MAAM,iBAAiB,KAAK,KAAK,MAAM,MAAM,KAAK,IAChF,MAAM,OACN;AAAA,MACN,GAAI,sBAAsB,EAAE,oBAAoB,IAAI,CAAC;AAAA,IACvD;AAAA,EACF;AAKA,MAAI,sBAAsB,MAAM,kBAAkB,GAAG;AACnD,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAQ,MAAM,SAAS,WAAW,OAAO,MAAM,kBAAkB;AACvE,QAAM,gBAAgB,MAAM,iBAAiB;AAC7C,QAAM,iBAAiB,MAAM,SAAS,gBAAgB,MAAM,aAAa,MAAM;AAC/E,QAAM,SAAS,cAAc,KAAK,CAAC,SAAc,mBAAmB,IAAI,MAAM,cAAc;AAC5F,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,kDAAkD,cAAc,EAAE;AAAA,EACpF;AACA,MAAI,MAAM,SAAS,eAAe;AAChC,UAAM,QAAQ,MAAa;AAAA,EAC7B,WAAW,MAAM,aAAa,WAAW;AACvC,UAAM,QAAQ,MAAa;AAAA,EAC7B,OAAO;AACL,UAAM,OAAO,QAAe,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,MAAS;AAAA,EACpF;AACA,SAAO,EAAE,OAAO,MAAM;AACxB;AA8EO,IAAM,0BACX;AASK,SAAS,iCAAuD;AACrE,MAAI,UAAU;AACd,SAAO,CAAC,EAAE,UAAU,MAAM;AACxB,QAAI,CAAC,SAAS;AACZ,aAAO;AAAA,IACT;AACA,cAAU;AACV,WAAO;AAAA,MACL,GAAG;AAAA,MACH,cAAc,UAAU,eACpB,GAAG,UAAU,YAAY,IAAI,uBAAuB,KACpD;AAAA,IACN;AAAA,EACF;AACF;AAEA,SAAS,4BAA4B,OAA0D;AAC7F,MAAI,CAAC,mCAAmC,IAAI,KAAK,GAAG;AAClD,WAAO;AAAA,EACT;AACA,qCAAmC,OAAO,KAAK;AAC/C,SAAO,+BAA+B;AACxC;AAOO,IAAM,mCACX;AAeK,IAAM,6BAAmD,CAAC,EAAE,UAAU,OAAO;AAAA,EAClF,GAAG;AAAA,EACH,OAAO,UAAU,MAAM,IAAI,CAAC,SAAS;AACnC,QAAI,QAAQ,OAAO,SAAS,YAAY,QAAQ,MAAM;AACpD,YAAM,EAAE,IAAI,KAAK,GAAG,KAAK,IAAI;AAC7B,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,CAAC;AACH;AAgBO,IAAM,+BAAqD,CAAC,EAAE,UAAU,OAAO;AAAA,EACpF,GAAG;AAAA,EACH,OAAO;AAAA,IACL,UAAU;AAAA,EACZ;AACF;AAOO,IAAM,kCAAwD,CAAC,EAAE,UAAU,OAAO;AAAA,EACvF,GAAG;AAAA,EACH,OAAO;AAAA,IACL,UAAU;AAAA,EACZ;AACF;AAOO,SAAS,uCAAuC,UAA0C;AAC/F,SAAO,CAAC,EAAE,UAAU,OAAO;AAAA,IACzB,GAAG;AAAA,IACH,OAAOC;AAAA,MACL,UAAU;AAAA,MACV,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,SAAS,8BAA8B,OAAgC;AACrE,QAAM,aAAa,MAAM,QAAS,MAA8B,KAAK,IAC/D,MAA+B,SAAS,CAAC,IAC3C,CAAC;AACL,QAAM,mBAAmB,WAAW,IAAI,CAAC,cAAc;AACrD,QAAI,CAAC,aAAa,OAAO,cAAc,SAAU,QAAO;AACxD,UAAMD,QAAO;AACb,WAAO;AAAA,MACL,MAAMA,MAAK;AAAA,MACX,MAAMA,MAAK;AAAA,MACX,aAAaA,MAAK;AAAA,MAClB,YAAYA,MAAK;AAAA,MACjB,aAAaA,MAAK;AAAA,MAClB,QAAQA,MAAK;AAAA,MACb,cAAcA,MAAK;AAAA,IACrB;AAAA,EACF,CAAC;AACD,QAAM,aAAa,MAAM,QAAS,MAAmC,UAAU,IACzE,MAAoC,cAAc,CAAC,IACrD,CAAC;AACL,QAAM,YAAY,WAAW,OAAe,CAAC,OAAO,WAAW;AAC7D,UAAM,SAAU,QACZ;AACJ,WAAO,SAAS,OAAO,WAAW,aAAa,OAAO,KAAK,MAAM,IAAI;AAAA,EACvE,GAAG,CAAC;AACJ,SAAO,8BAA8B,gBAAgB,IAAI;AAC3D;AAEO,SAAS,mCACd,UACA,UAA0C,CAAC,GACrB;AACtB,QAAM,kBAAkB,0BAA0B,QAAQ;AAC1D,MAAI,kBAAuF;AAC3F,MAAI,kBAAkB;AACtB,SAAO,OAAO,EAAE,WAAW,MAAM,MAAM;AACrC,UAAM,QAAQ,UAAU;AACxB,QAAI,QAAQ,yBAAyB;AACnC,YAAM,WAAW,QAAQ,0BAA0B;AACnD,YAAM,UAAuC;AAAA,QAC3C;AAAA,QACA,oBAAoB,8BAA8B,UAAU,gBAAgB,EAAE;AAAA,QAC9E,kBAAkB,8BAA8B,KAAK;AAAA,MACvD;AAMA,YAAM,gBACJ,YACA,mBACA,SAAS,aAAa,gBAAgB,YACtC,sBAAsB,QAAQ,KAAK,IAC/B,WACA;AACN,YAAM,WAAW,2BAA2B;AAAA,QAC1C;AAAA,QACA,UAAU;AAAA,QACV,0BAA0B,gBAAiB,iBAAiB,aAAa,OAAQ;AAAA,MACnF,CAAC;AACD,YAAM,eAAe,SAAS;AAC9B,wBAAkB,EAAE,UAAU,EAAE,iBAAiB,WAAW,QAAQ;AACpE,UAAI,MAAM,QAAQ,6BAA6B,GAAG;AAChD,cAAM,IAAI,sBAAsB;AAAA,UAC9B;AAAA,UACA;AAAA,UACA,cAAc,gBAAgB,aAAa;AAAA,UAC3C,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AACA,UAAI,gBAAgB,iBAAiB;AACnC,cAAM,IAAI,sBAAsB;AAAA,UAC9B;AAAA,UACA;AAAA,UACA,cAAc,gBAAgB,aAAa;AAAA,QAC7C,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO,EAAE,GAAG,WAAW,MAAM;AAAA,EAC/B;AACF;AAMA,SAAS,6BAA6B,SAAuD;AAC3F,SAAO,OAAO,SAAS;AACrB,QAAI,YAAY,KAAK;AACrB,eAAW,UAAU,SAAS;AAC5B,kBAAY,MAAM,OAAO,EAAE,GAAG,MAAM,UAAU,CAAC;AAAA,IACjD;AACA,WAAO;AAAA,EACT;AACF;AAUO,SAAS,gCACd,UACA,UAA0C,CAAC,GACT;AAClC,QAAM,UAAkC;AAAA,IACtC;AAAA,IACA;AAAA,IACA,uCAAuC,QAAQ;AAAA,EACjD;AACA,MAAI,SAAS,0BAA0B,SAAS;AAC9C,YAAQ,KAAK,0BAA0B;AAAA,EACzC;AACA,UAAQ,KAAK,mCAAmC,UAAU,OAAO,CAAC;AAClE,SAAO,6BAA6B,OAAO;AAC7C;AAEA,eAAsB,eACpB,OACA,OACA,UACA,YAAmC,CAAC,GACpC;AACA,QAAM,WACJ,OAAO,UAAU,YAAY,iBAAiB,WAAW,EAAE,MAAM,IAAI;AACvE,QAAM,cAAc,UAAU,sBAAsBE,2BAA0B,QAAQ;AACtF,QAAM,qBAAqB,2BAA2B,OAAO,WAAW;AACxE,QAAM,0BAA0B,4BAA4B,KAAK;AACjE,MAAI,UAAU,+BAA+B,CAAC,UAAU,wBAAwB;AAC9E,UAAM,IAAI,MAAM,yEAAyE;AAAA,EAC3F;AAYA,MAAI,UAAU,cAAc;AAC1B,UAAM,EAAE,QAAQ,aAAa,SAAS,aAAa,IAAI,UAAU;AAKjE,UAAM,eAAgB,UAAU,aAAa,gBAAgB;AAC7D,UAAM,yBAAyB,UAAU,yBACrC,0BAA0B,SAA+B,UAAU,sBAAsB,IACxF;AACL,UAAM,eAAe,qBACjB,0BAA0B,wBAAwB,kBAAkB,IACpE;AACJ,UAAM,yBAAyB,UAAU,yBACrC,0BAA0B,cAAc,UAAU,sBAAsB,IACxE;AACJ,UAAM,wBAAwB,qBAC1B,0BAA0B,wBAAwB,kBAAkB,IACpE;AAIJ,QAAI,CAAC,UAAU,aAAa,eAAe;AACzC,YAAM,UAAU,8BAA8B,OAA6B;AAC3E,YAAM,qBAAqB,OAAO,SAA+B,uBAAuB;AAAA,QACtF;AAAA,QACA;AAAA,QACA,eAAe;AAAA,QACf,GAAI,UAAU,aAAa,4BACvB,EAAE,2BAA2B,KAAK,IAClC,CAAC;AAAA,QACL,GAAI,UAAU,iBAAiB,EAAE,gBAAgB,UAAU,eAAe,IAAI,CAAC;AAAA,QAC/E,GAAI,UAAU,4BACV;AAAA,UACE,eAAe,UAAU,0BAA0B,kBAAkB;AAAA,YACnE,UAAU;AAAA,UACZ;AAAA,QACF,IACA,CAAC;AAAA,MACP,CAAC;AACD,UAAI,2BAA2B,KAAK,GAAG;AACrC,cAAM,UAAU,+BAA+B,YAAY;AAAA,MAC7D;AACA,YAAM,UAAU,8BAA8B,YAAY;AAAA,IAC5D;AACA,UAAMC,SAAQ,aAAa,QAAQ;AACnC,UAAMC,iBAAgB,6BAA6B,KAAK;AACxD,UAAMC,kBACJD,eAAc,SAAS,IACnB,yBAAyB,aAA8BA,gBAAe;AAAA,MACpE,GAAI,UAAU,iBAAiB,EAAE,gBAAgB,UAAU,eAAe,IAAI,CAAC;AAAA,MAC/E,GAAID,SAAQ,EAAE,OAAAA,OAAM,IAAI,CAAC;AAAA,MACzB,GAAI,UAAU,4BACV;AAAA,QACE,eAAe,UAAU,0BAA0B,kBAAkB;AAAA,UACnE,UAAU;AAAA,QACZ;AAAA,MACF,IACA,CAAC;AAAA,IACP,CAAC,IACA;AAGP,UAAM,qBAAqB,sBAAsB,KAAK;AACtD,UAAM,6BAA6B,8BAA8B,KAAK;AACtE,UAAM,0BAA0B,2BAA2B,KAAK;AAChE,UAAM,gBAAgB,2BAA2B,KAAK;AACtD,UAAM,aAAa;AAAA;AAAA;AAAA;AAAA,MAIjB,GAAG,6BAA6B,KAAK;AAAA,MACrC,GAAG;AAAA,QACD,4BAA4B,wBAAwB,QAAQ,CAAC;AAAA,QAC7D,2BAA2B,KAAK;AAAA,MAClC;AAAA,MACA,GAAG,mCAAmC,KAAK;AAAA,MAC3C,GAAG;AAAA,QACD,0BAA0B,UAAU,+BAA+B;AAAA,MACrE;AAAA,MACA,GAAG,oCAAoC,KAAK;AAAA,MAC5C,GAAG,sCAAsC,UAAU,2BAA2B;AAAA,IAChF;AACA,UAAM,mBAAgD;AAAA,MACpD;AAAA,MACA,GAAI,UAAU,iBAAiB,EAAE,gBAAgB,UAAU,eAAe,IAAI,CAAC;AAAA,MAC/E,GAAIA,SAAQ,EAAE,OAAAA,OAAM,IAAI,CAAC;AAAA,MACzB,GAAI,qBAAqB,EAAE,eAAe,mBAAmB,IAAI,CAAC;AAAA,MAClE,GAAI,6BAA6B,EAAE,uBAAuB,2BAA2B,IAAI,CAAC;AAAA,MAC1F,GAAI,0BAA0B,EAAE,oBAAoB,wBAAwB,IAAI,CAAC;AAAA,MACjF,GAAI,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;AAAA,MACnD,GAAI,gBAAgB,EAAE,UAAU,cAAc,IAAI,CAAC;AAAA,IACrD;AAIA,UAAM,2BAA2B,UAAU,yBACvC;AAAA,MACEE;AAAA,MACA,UAAU;AAAA,MACV,UAAU;AAAA,IACZ,IACAA;AACJ,UAAM,0BAA0B,qBAC5B,yBAAyB,0BAA0B,kBAAkB,IACrE;AACJ,UAAM,kBAAkB;AAAA,MACtB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAM,cAAc;AAAA,MAClB;AAAA,QACE,gCAAgC,QAAQ;AAAA,QACxC;AAAA,QACA,UAAU;AAAA;AAAA;AAAA;AAAA,QAIV,uCAAuC,QAAQ;AAAA,QAC/C,mCAAmC,UAAU;AAAA,UAC3C,yBAAyB;AAAA,YACvB,UAAU,2BAA2B,UAAU;AAAA,UACjD;AAAA,UACA,GAAI,UAAU,0BACV,EAAE,yBAAyB,UAAU,wBAAwB,IAC7D,CAAC;AAAA,UACL,GAAI,UAAU,6BACV,EAAE,4BAA4B,UAAU,2BAA2B,IACnE,CAAC;AAAA,QACP,CAAC;AAAA,MACH,EAAE,OAAO,CAAC,MAAiC,QAAQ,CAAC,CAAC;AAAA,IACvD;AACA,UAAM,kBAA6C;AAAA,MACjD,QAAQ;AAAA,MACR,UAAU,SAAS;AAAA,MACnB,sBAAsB;AAAA,MACtB,GAAI,UAAU,SAAS,EAAE,QAAQ,UAAU,OAAO,IAAI,CAAC;AAAA,IACzD;AACA,oBAAgB,UAAU;AAAA,MACxB,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA,IACzC;AACA,WAAO,MAAM,gBAAgB,QAAQ,EAAE,IAAI,OAAO,SAAS,OAAO,eAAe;AAAA,EACnF;AAEA,QAAM,YAAY,UAAU,iBAAiB,oBAAoB,UAAU,WAAW;AACtF,QAAM,kBAAkB,YACpB;AAAA,IACE;AAAA,IACC,MAAyC;AAAA,IAC1C;AAAA,MACE,GAAI,UAAU,iBAAiB,EAAE,gBAAgB,UAAU,eAAe,IAAI,CAAC;AAAA,IACjF;AAAA,EACF,IACA;AACJ,QAAM,QAAQ,aAAa,QAAQ;AACnC,QAAM,gBAAgB,6BAA6B,KAAK;AACxD,QAAM,iBACJ,mBAAmB,cAAc,SAAS,IACtC,yBAAyB,iBAAiB,eAAe;AAAA,IACvD,GAAI,UAAU,iBAAiB,EAAE,gBAAgB,UAAU,eAAe,IAAI,CAAC;AAAA,IAC/E,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,EAC3B,CAAC,IACD;AACN,QAAM,mBACJ,kBAAkB,UAAU,yBACxB;AAAA,IACE;AAAA,IACA,UAAU;AAAA,IACV,UAAU;AAAA,EACZ,IACA;AACN,QAAM,kBACJ,oBAAoB,qBAChB,yBAAyB,kBAAkB,kBAAkB,IAC7D;AAGN,QAAM,gBAAgB,sBAAsB,KAAK;AACjD,QAAM,wBAAwB,8BAA8B,KAAK;AACjE,QAAM,qBAAqB,2BAA2B,KAAK;AAC3D,QAAM,iBAAiB,2BAA2B,KAAK;AACvD,QAAM,SAAS,kBACX;AAAA,IACE;AAAA,IACA;AAAA;AAAA;AAAA;AAAA,MAIE,GAAG,6BAA6B,KAAK;AAAA,MACrC,GAAG;AAAA,QACD,4BAA4B,wBAAwB,QAAQ,CAAC;AAAA,QAC7D,2BAA2B,KAAK;AAAA,MAClC;AAAA,MACA,GAAG,mCAAmC,KAAK;AAAA,MAC3C,GAAG;AAAA,QACD,qBAAqB,UAAU,+BAA+B;AAAA,MAChE;AAAA,MACA,GAAG,oCAAoC,KAAK;AAAA,MAC5C,GAAG,sCAAsC,UAAU,2BAA2B;AAAA,IAChF;AAAA,IACA;AAAA,MACE;AAAA,MACA,GAAI,UAAU,iBAAiB,EAAE,gBAAgB,UAAU,eAAe,IAAI,CAAC;AAAA,MAC/E,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,MACzB,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;AAAA,MACzC,GAAI,wBAAwB,EAAE,sBAAsB,IAAI,CAAC;AAAA,MACzD,GAAI,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;AAAA,MACnD,GAAI,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;AAAA,MACnD,GAAI,iBAAiB,EAAE,UAAU,eAAe,IAAI,CAAC;AAAA,IACvD;AAAA,EACF,IACA;AACJ,QAAM,sBAAsB,SAAS;AAMrC,QAAM,uBAAuB;AAAA,IAC3B;AAAA,MACE,gCAAgC,QAAQ;AAAA,MACxC;AAAA,MACA,UAAU;AAAA,MACV,uCAAuC,QAAQ;AAAA,MAC/C,mCAAmC,UAAU;AAAA,QAC3C,yBAAyB;AAAA,UACvB,UAAU,2BAA2B,UAAU;AAAA,QACjD;AAAA,QACA,GAAI,UAAU,0BACV,EAAE,yBAAyB,UAAU,wBAAwB,IAC7D,CAAC;AAAA,QACL,GAAI,UAAU,6BACV,EAAE,4BAA4B,UAAU,2BAA2B,IACnE,CAAC;AAAA,MACP,CAAC;AAAA,IACH,EAAE,OAAO,CAAC,MAAiC,QAAQ,CAAC,CAAC;AAAA,EACvD;AACA,QAAM,aAAwC;AAAA,IAC5C,QAAQ;AAAA,IACR,UAAU,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,IAKnB;AAAA,IACA,GAAI,UAAU,SAAS,EAAE,QAAQ,UAAU,OAAO,IAAI,CAAC;AAAA,EACzD;AACA,MAAI,QAAQ;AACV,eAAW,UAAU;AAAA,MACnB;AAAA,MACA,GAAI,sBAAsB,EAAE,cAAc,oBAAoB,IAAI,CAAC;AAAA,IACrE;AAAA,EACF;AACA,SAAO,MAAM,gBAAgB,QAAQ,EAAE,IAAI,OAAO,SAAS,OAAO,UAAU;AAC9E;AAEA,SAAS,qCACP,OACA,UACM;AACN,QAAM,OAAO,+BAA+B,QAAQ;AACpD,MAAI,CAAC,MAAM;AACT;AAAA,EACF;AACA,MAAI,OAAO,MAAM,UAAU,UAAU;AACnC,UAAM,QAAQ,CAAC,MAAM,OAAO,IAAI,IAAI,EAAE,KAAK,IAAI;AAC/C;AAAA,EACF;AACA,MAAI,MAAM,QAAQ,MAAM,KAAK,GAAG;AAC9B,UAAM,QAAQ;AAAA,MACZ,GAAG,MAAM;AAAA,MACT,EAAE,MAAM,WAAW,MAAM,QAAQ,SAAS,KAAK;AAAA,IACjD;AAAA,EACF;AACF;AAoBA,SAAS,gBAAgB,UAA4B;AACnD,SAAO,IAAI,OAAO;AAAA,IAChB,eAAe,IAAI,2BAA2B,QAAQ;AAAA,EACxD,CAAC;AACH;AAWO,SAAS,yBACd,OAC8C;AAC9C,MAAI,EAAE,iBAAiB,wBAAwB;AAC7C,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,EAAE,oBAAoB,MAAM,QAAQ,MAAM,MAAM,SAAS,IAAI,KAAK;AAAA,EAC3E,QAAQ;AACN,WAAO,EAAE,oBAAoB,KAAK;AAAA,EACpC;AACF;AAQO,SAAS,oBAAoB,OAA+B;AACjE,MAAI,EAAE,iBAAiB,gBAAgB,CAAC,MAAM,OAAO;AACnD,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,MAAM,MAAM,SAAS;AAAA,EAC9B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,4BACd,QACA,gBACA,UAA+D,CAAC,GACjD;AACf,MAAI,CAAC,kBAAkB,CAAC,OAAO,QAAQ;AACrC,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,WAAW,OAAO;AAAA,IAClB,GAAI,OAAO,2BAA2B,SAClC,EAAE,wBAAwB,OAAO,uBAAuB,IACxD,CAAC;AAAA,IACL,GAAI,OAAO,SACP;AAAA,MACE,QAAQ,UAAU,SAAgB,MAAO,OAAO,OAAe,GAAG,IAAI;AAAA,IACxE,IACA,CAAC;AAAA,IACL,QAAQ,OAAO,UAA+B;AAC5C,YAAM,UAAU,MAAM,OAAO,OAAQ,KAAK;AAC1C,YAAM,4BAA4B,SAAS,gBAAgB,OAAO;AAClE,aAAO;AAAA,IACT;AAAA,IACA,GAAI,OAAO,SACP;AAAA,MACE,QAAQ,OAAO,UAA+B,MAAM,OAAO,OAAQ,KAAK;AAAA,IAC1E,IACA,CAAC;AAAA,IACL,GAAI,OAAO,wBACP;AAAA,MACE,uBAAuB,OAAO,OAA4B,YACxD,MAAM,OAAO,sBAAuB,OAAO,OAAO;AAAA,IACtD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,8BACP;AAAA,MACE,6BAA6B,OAAO,UAClC,MAAM,OAAO,4BAA6B,KAAK;AAAA,IACnD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,gCACP;AAAA,MACE,+BAA+B,OAAO,UACpC,MAAM,OAAO,8BAA+B,KAAK;AAAA,IACrD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,0BACP;AAAA,MACE,yBAAyB,OAAO,UAC9B,MAAM,OAAO,wBAAyB,KAAK;AAAA,IAC/C,IACA,CAAC;AAAA,EACP;AACF;AAYA,eAAsB,4BACpB,SACA,gBACA,UAA+D,CAAC,GACjD;AACf,QAAM,uBACJ,QAWA,OAAO;AACT,QAAM,kBAAkB,uBAAuB,eAAe,oBAAoB,IAAI;AACtF,QAAM,SAAS,eAAe,cAAc;AAC5C,MAAI,CAAC,iBAAiB;AACpB,QAAI,OAAO,KAAK,OAAO,OAAO,EAAE,WAAW,GAAG;AAC5C;AAAA,IACF;AACA,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAIA,QAAM,+BAA+B,iBAAiB,QAAQ,OAAO;AACrE,MAAI,CAAC,QAAQ,iBAAiB,CAAC,QAAQ,kBAAkB;AACvD,QAAI,OAAO,KAAK,OAAO,OAAO,EAAE,WAAW,GAAG;AAC5C;AAAA,IACF;AACA,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,OAAO,KAAK,OAAO,OAAO,EAAE,WAAW,GAAG;AAC5C;AAAA,EACF;AACA,MAAI,gBAAgB,SAAS,OAAO,MAAM;AACxC,UAAM,IAAI,MAAM,6EAA6E;AAAA,EAC/F;AACA,QAAM,UAA+B,CAAC;AACtC,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,OAAO,OAAO,GAAG;AAC1D,UAAM,WAAY,gBAAgB,QAAoC,IAAI;AAC1E,QAAI,aAAa,QAAW;AAC1B,cAAQ,IAAI,IAAI;AAChB;AAAA,IACF;AACA,QAAI,WAAW,QAAQ,MAAM,WAAW,KAAK,GAAG;AAC9C,YAAM,IAAI,MAAM,mDAAmD,IAAI,EAAE;AAAA,IAC3E;AAAA,EACF;AACA,QAAM,qBACJ,WAAW,gBAAgB,WAAW,MAAM,WAAW,OAAO,WAAW;AAC3E,MAAI,sBAAsB,CAAC,QAAQ,eAAe;AAChD,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,OAAO,KAAK,OAAO,EAAE,WAAW,KAAK,CAAC,oBAAoB;AAC5D;AAAA,EACF;AAIA,QAAM,kBAAkB,gBAAgB,gBAAgB,iBAAiB,OAAO,eAAe;AAC/F,QAAM,QAAQ,IAAI,SAAS;AAAA,IACzB,MAAM,gBAAgB;AAAA,IACtB;AAAA,IACA,aAAa,OAAO;AAAA,IACpB,GAAI,gBAAgB,SAAS,EAAE,gBAAgB,IAAI,CAAC;AAAA,EACtD,CAAC;AACD,MAAI,QAAQ,eAAe;AACzB,UAAM,QAAQ,cAAc,KAAK;AAAA,EACnC,OAAO;AACL,eAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AACnD,YAAM,QAAQ,iBAAkB,EAAE,MAAM,MAAM,CAAC;AAAA,IACjD;AAAA,EACF;AACA,EAAC,QAAgD,MAAO,WAAW,IAAI,SAAS;AAAA,IAC9E,MAAM,gBAAgB;AAAA,IACtB,aAAa,qBAAqB,OAAO,cAAc,gBAAgB;AAAA,IACvE,SAAS;AAAA,MACP,GAAG,gBAAgB;AAAA,MACnB,GAAG;AAAA,IACL;AAAA,IACA,GAAI,gBAAgB,SAAS,EAAE,gBAAgB,IAAI,CAAC;AAAA,EACtD,CAAC;AACH;AAOO,SAAS,yBACd,SACA,QACkE;AAClE,QAAM,aAAc,QAAQ,eAAe,CAAC;AAC5C,QAAM,YAAa,OAAO,eAAe,CAAC;AAC1C,QAAM,QAAkB,CAAC;AACzB,QAAM,UAAoB,CAAC;AAC3B,QAAM,UAAoB,CAAC;AAC3B,aAAW,OAAO,OAAO,KAAK,SAAS,GAAG;AACxC,QAAI,EAAE,OAAO,aAAa;AACxB,YAAM,KAAK,GAAG;AAAA,IAChB,WAAW,WAAW,WAAW,GAAG,CAAC,MAAM,WAAW,UAAU,GAAG,CAAC,GAAG;AACrE,cAAQ,KAAK,GAAG;AAAA,IAClB;AAAA,EACF;AACA,aAAW,OAAO,OAAO,KAAK,UAAU,GAAG;AACzC,QAAI,EAAE,OAAO,YAAY;AACvB,cAAQ,KAAK,GAAG;AAAA,IAClB;AAAA,EACF;AACA,MAAI,MAAM,WAAW,KAAK,QAAQ,WAAW,KAAK,QAAQ,WAAW,GAAG;AACtE,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,OAAO,MAAM,KAAK;AAAA,IAClB,SAAS,QAAQ,KAAK;AAAA,IACtB,SAAS,QAAQ,KAAK;AAAA,EACxB;AACF;AAEA,eAAe,+BACb,SACA,QACA,SACsD;AACtD,QAAM,QAAQ,yBAAyB,SAAS,MAAM;AACtD,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AAGA,MAAI;AACF,UAAM,QAAQ,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAaA,eAAsB,sCACpB,OACA,SACA,UAA+D,CAAC,GACjD;AACf,QAAM,SAAS;AACf,QAAM,uBACJ,QAWA,OAAO;AACT,MAAI,CAAC,OAAO,mBAAmB,CAAC,sBAAsB;AACpD;AAAA,EACF;AACA,QAAM,UAAU,eAAe,oBAAoB;AACnD,QAAM,SAAS,eAAe,OAAO,eAAe;AACpD,QAAM,QAAQ,MAAM,+BAA+B,SAAS,QAAQ,OAAO;AAC3E,MAAI,CAAC,OAAO;AACV;AAAA,EACF;AACA,SAAO,kBAAkB,IAAI,SAAS;AAAA,IACpC,GAAI,OAAO,OAAO,EAAE,MAAM,OAAO,KAAK,IAAI,CAAC;AAAA,IAC3C,SAAS,OAAO;AAAA,IAChB,aAAa,QAAQ;AAAA,IACrB,GAAI,OAAO,iBAAiB,SAAS,EAAE,iBAAiB,OAAO,gBAAgB,IAAI,CAAC;AAAA,EACtF,CAAC;AACH;AAuBA,eAAsB,qBACpB,OACA,SACA,cACA,MAYe;AACf,QAAM,EAAE,UAAU,YAAY,IAAI;AAMlC,QAAM,sCAAsC,OAAO,SAAS;AAAA,IAC1D,GAAI,KAAK,iBAAiB,EAAE,gBAAgB,KAAK,eAAe,IAAI,CAAC;AAAA,EACvE,CAAC;AACD,QAAM,QAAQ,aAAa,QAAQ;AACnC,QAAM,gBAAgB,6BAA6B,KAAK;AAIxD,QAAM,qBAAqB;AAAA,IACzB,GAAI,sBAAsB,KAAK,KAAK,CAAC;AAAA,IACrC,GAAI,KAAK,uBAAuB,EAAE,QAAQ,KAAK,qBAAqB,IAAI,CAAC;AAAA,IACzE,GAAI,KAAK,yBAAyB,CAAC;AAAA,EACrC;AACA,QAAM,6BACJ,KAAK,iCAAiC,8BAA8B,KAAK;AAC3E,QAAM,0BACJ,KAAK,8BAA8B,2BAA2B,KAAK;AACrE,QAAM,0BAA0B,2BAA2B,OAAO,WAAW;AAC7E,QAAM,gBAAgB,2BAA2B,KAAK;AACtD,QAAM,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOjB,GAAG,6BAA6B,KAAK;AAAA,IACrC,GAAG;AAAA,MACD,4BAA4B,wBAAwB,QAAQ,CAAC;AAAA,MAC7D,2BAA2B,KAAK;AAAA,IAClC;AAAA,IACA,GAAG,mCAAmC,KAAK;AAAA,IAC3C,GAAG,oCAAoC,KAAK;AAAA,EAC9C;AACA,QAAM,mBAAgD;AAAA,IACpD;AAAA,IACA,GAAI,KAAK,iBAAiB,EAAE,gBAAgB,KAAK,eAAe,IAAI,CAAC;AAAA,IACrE,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,IACzB,GAAI,OAAO,KAAK,kBAAkB,EAAE,SAAS,IAAI,EAAE,eAAe,mBAAmB,IAAI,CAAC;AAAA,IAC1F,GAAI,6BAA6B,EAAE,uBAAuB,2BAA2B,IAAI,CAAC;AAAA,IAC1F,GAAI,0BAA0B,EAAE,oBAAoB,wBAAwB,IAAI,CAAC;AAAA,IACjF,GAAI,0BAA0B,EAAE,oBAAoB,wBAAwB,IAAI,CAAC;AAAA,IACjF,GAAI,gBAAgB,EAAE,UAAU,cAAc,IAAI,CAAC;AAAA,IACnD,GAAI,KAAK,gBAAgB,EAAE,eAAe,KAAK,cAAc,IAAI,CAAC;AAAA,EACpE;AASA,MAAI,0BAA0B,IAAI,KAAK,MAAM,cAAc;AACzD,UAAM,yBAAyB,cAAc,YAAY,gBAAgB;AAKzE,QAAI,cAAc,SAAS,KAAK,CAAC,KAAK,2BAA2B;AAC/D,YAAM,eAAe,MAAM,gCAAgC,cAAc,eAAe;AAAA,QACtF,GAAI,KAAK,iBAAiB,EAAE,gBAAgB,KAAK,eAAe,IAAI,CAAC;AAAA,QACrE,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,QACzB,GAAI,KAAK,gBAAgB,EAAE,eAAe,KAAK,cAAc,IAAI,CAAC;AAAA,MACpE,CAAC;AACD,UAAI,KAAK,eAAe;AACtB,6CAAqC,KAAK,eAAe,aAAa,QAAQ;AAAA,MAChF;AAAA,IACF;AAAA,EACF,OAAO;AAOL,UAAM,iBAAiB,mCAAmC,KAAK;AAC/D,QAAI,eAAe,SAAS,GAAG;AAC7B,YAAM,yBAAyB,cAAc,gBAAgB,gBAAgB;AAAA,IAC/E;AAAA,EACF;AACF;AAEA,SAAS,gBACP,SACA,QAC6B;AAC7B,QAAM,SAAS,oBAAI,IAAiD;AACpE,aAAW,SAAS,CAAC,GAAI,WAAW,CAAC,GAAI,GAAI,UAAU,CAAC,CAAE,GAAG;AAC3D,WAAO,IAAI,MAAM,MAAM,KAAK;AAAA,EAC9B;AACA,SAAO,CAAC,GAAG,OAAO,OAAO,CAAC;AAC5B;AAEO,SAAS,yBACd,QACA,WACA,UAA2F,CAAC,GAC7E;AACf,QAAM,sBAAsB,8BAA8B,SAAS;AACnE,MAAI,oBAAoB,WAAW,GAAG;AACpC,WAAO;AAAA,EACT;AACA,QAAM,YAAY,oBAAI,QAAgB;AACtC,QAAM,cAAc,OAAqC,YAA2B;AAClF,QAAI,OAAO,YAAY,YAAY,YAAY,QAAQ,CAAC,UAAU,IAAI,OAAO,GAAG;AAC9E,YAAM,gCAAgC,SAAS,qBAAqB,OAAO;AAC3E,gBAAU,IAAI,OAAO;AAAA,IACvB;AACA,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,WAAW,OAAO;AAAA,IAClB,GAAI,OAAO,2BAA2B,SAClC,EAAE,wBAAwB,OAAO,uBAAuB,IACxD,CAAC;AAAA,IACL,GAAI,OAAO,SACP;AAAA,MACE,QAAQ,UAAU,SAChB,MAAM,YAAY,MAAO,OAAO,OAAe,GAAG,IAAI,CAAC;AAAA,IAC3D,IACA,CAAC;AAAA,IACL,GAAI,OAAO,SACP;AAAA,MACE,QAAQ,OAAO,UACb,MAAM,YAAY,MAAM,OAAO,OAAQ,KAAK,CAAC;AAAA,IACjD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,SACP;AAAA,MACE,QAAQ,OAAO,UAA+B,MAAM,OAAO,OAAQ,KAAK;AAAA,IAC1E,IACA,CAAC;AAAA,IACL,GAAI,OAAO,wBACP;AAAA,MACE,uBAAuB,OAAO,OAA4B,YACxD,MAAM,OAAO,sBAAuB,OAAO,OAAO;AAAA,IACtD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,8BACP;AAAA,MACE,6BAA6B,OAAO,UAClC,MAAM,OAAO,4BAA6B,KAAK;AAAA,IACnD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,gCACP;AAAA,MACE,+BAA+B,OAAO,UACpC,MAAM,OAAO,8BAA+B,KAAK;AAAA,IACrD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,0BACP;AAAA,MACE,yBAAyB,OAAO,UAC9B,MAAM,OAAO,wBAAyB,KAAK;AAAA,IAC/C,IACA,CAAC;AAAA,EACP;AACF;AAEA,eAAsB,gCACpB,SACA,WACA,UAA2F,CAAC,GACzC;AACnD,QAAM,sBAAsB,8BAA8B,SAAS;AACnE,MAAI,oBAAoB,WAAW,GAAG;AACpC,WAAO,EAAE,UAAU,CAAC,EAAE;AAAA,EACxB;AACA,QAAM,WAAyC,CAAC;AAChD,aAAW,YAAY,qBAAqB;AAC1C,UAAM,aAAa,0BAA0B,QAAQ;AACrD,UAAM,UAAU;AAAA,MACd,QAAQ,SAAS;AAAA,MACjB,MAAM;AAAA,MACN,WAAW,SAAS,aAAa;AAAA,MACjC,WAAW,SAAS,YAAY,IAAI,KAAK,SAAS,SAAS,EAAE,YAAY,IAAI;AAAA,IAC/E;AACA,UAAM,QAAQ,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN,SAAS,EAAE,MAAM,0BAA0B,GAAG,QAAQ;AAAA,IACxD,CAAC;AACD,QAAI,CAAC,QAAQ,QAAQ,CAAC,QAAQ,aAAa;AACzC,YAAM,UAAU;AAAA,QACd;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,eAAS,KAAK,OAAO;AACrB,YAAM,QAAQ,iBAAiB;AAAA,QAC7B,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM;AAAA,UACN,GAAG;AAAA,UACH,OAAO,QAAQ;AAAA,QACjB;AAAA,MACF,CAAC;AACD;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACF,eAAS,MAAM;AAAA,QACb;AAAA,QACA;AAAA,UACE,KAAK,2BAA2B,UAAU,UAAU;AAAA,UACpD,SAAS;AAAA,UACT,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,UAChD,aAAa;AAAA,UACb,iBAAiB;AAAA,QACnB;AAAA,QACA,QAAQ;AAAA,MACV;AACA,oCAA8B,QAAQ,kCAAkC,SAAS,MAAM,EAAE;AACzF,YAAM,QAAQ,iBAAiB;AAAA,QAC7B,MAAM;AAAA,QACN,SAAS,EAAE,MAAM,0BAA0B,GAAG,QAAQ;AAAA,MACxD,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,iBAAiB,iCAAkC,OAAM;AAC7D,YAAM,UAAU,2BAA2B,UAAU,YAAY,OAAO,MAAM;AAC9E,eAAS,KAAK,OAAO;AACrB,YAAM,QAAQ,iBAAiB;AAAA,QAC7B,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM;AAAA,UACN,GAAG;AAAA,UACH,OAAO,QAAQ;AAAA,UACf,GAAI,QAAQ,aAAa,SAAY,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;AAAA,UACvE,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,QACrD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO,EAAE,SAAS;AACpB;AAEA,SAAS,2BACP,UACA,YACA,OACA,QAC4B;AAC5B,QAAM,WAAW,uBAAuB,MAAM;AAC9C,QAAM,SAAS,qBAAqB,MAAM;AAC1C,SAAO;AAAA,IACL,QAAQ,SAAS;AAAA,IACjB,UAAU,SAAS;AAAA,IACnB,MAAM;AAAA,IACN,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IAC7D,GAAI,aAAa,OAAO,EAAE,SAAS,IAAI,CAAC;AAAA,IACxC,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,EAC7B;AACF;AAEO,SAAS,+BAA+B,UAAgD;AAC7F,MAAI,SAAS,WAAW,GAAG;AACzB,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL;AAAA,IACA,GAAG,SAAS,IAAI,CAAC,YAAY,KAAK,QAAQ,QAAQ,KAAK,QAAQ,MAAM,GAAG;AAAA,IACxE;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEO,SAAS,6BAA6B,OAAuC;AAClF,SAAO,OAAO,UAAU,YAAY,UAAU,OAC1C,CAAC,GAAI,mBAAmB,IAAI,KAAK,KAAK,CAAC,CAAE,IACzC,CAAC;AACP;AAEA,SAAS,eACP,UAQU;AACV,MACE,oBAAoB,YACpB,OAAO,SAAS,mCAAmC,YACnD;AACA,WAAO;AAAA,EACT;AACA,SAAO,IAAI,SAAS;AAAA,IAClB,GAAI,SAAS,OAAO,EAAE,MAAM,SAAS,KAAK,IAAI,CAAC;AAAA,IAC/C,SAAS,SAAS,WAAW,CAAC;AAAA,IAC9B,aAAa,SAAS,eAAe,CAAC;AAAA,IACtC,GAAI,SAAS,iBAAiB,SAAS,EAAE,iBAAiB,SAAS,gBAAgB,IAAI,CAAC;AAAA,EAC1F,CAAC;AACH;AAEA,SAAS,wBAAwB,OAAuB;AACtD,QAAM,UAAU,MAAM,SAAS,IAAI,IAAI,IAAI,MAAM,SAAS,GAAG,IAAI,IAAI;AACrE,SAAO,KAAK,IAAI,GAAG,KAAK,MAAO,MAAM,SAAS,IAAK,CAAC,IAAI,OAAO;AACjE;AAGA,SAAS,oBAAoB,MAA8B;AACzD,MAAI,YAAY,OAAO,IAAI,EAAG,QAAO,KAAK;AAC1C,MAAI,gBAAgB,YAAa,QAAO,KAAK;AAC7C,MAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,WAAO,KAAK,MAAM,CAAC,UAAU,OAAO,UAAU,QAAQ,IAAI,KAAK,SAAS;AAAA,EAC1E;AACA,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,QAAM,SAAS;AACf,MAAI,OAAO,SAAS,YAAY,MAAM,QAAQ,OAAO,IAAI,GAAG;AAC1D,WAAO,OAAO,KAAK,MAAM,CAAC,UAAU,OAAO,UAAU,QAAQ,IAAI,OAAO,KAAK,SAAS;AAAA,EACxF;AACA,QAAM,OAAO,OAAO,KAAK,MAAM;AAC/B,SAAO,KAAK,SAAS,KACnB,KAAK,MAAM,CAAC,QAAQ,QAAQ,KAAK,GAAG,KAAK,OAAO,OAAO,GAAG,MAAM,QAAQ,IACtE,KAAK,SACL;AACN;AAOA,SAAS,uBAAuB,OAAiD;AAC/E,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,oCAAoC,KAAK;AAAA,EAClD;AACA,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,QAAM,SAAS;AACf,MAAI,OAAO,SAAS,eAAe;AACjC,UAAM,SAAS,OAAO,SAAS,OAAO,aAAa,OAAO;AAC1D,UAAM,MACJ,OAAO,WAAW,WACd,SACA,UAAU,OAAO,WAAW,WACzB,OAAmC,MACpC;AACR,QAAI,OAAO,QAAQ,YAAY,IAAI,WAAW,EAAG,QAAO;AACxD,WAAO,oCAAoC,GAAG,KAAK,yBAAyB,WAAW,IAAI;AAAA,EAC7F;AACA,MAAI,OAAO,SAAS,WAAW,CAAC,OAAO,SAAS,OAAO,OAAO,UAAU,SAAU,QAAO;AACzF,QAAM,QAAQ,OAAO;AACrB,QAAM,YACJ,OAAO,MAAM,cAAc,YAAY,MAAM,UAAU,SAAS,IAC5D,MAAM,YACN;AACN,MAAI,OAAO,MAAM,QAAQ,YAAY,MAAM,IAAI,SAAS,GAAG;AACzD,WACE,oCAAoC,MAAM,GAAG,KAAK,yBAAyB,WAAW,IAAI;AAAA,EAE9F;AACA,MAAI,OAAO,MAAM,SAAS,UAAU;AAClC,WACE,oCAAoC,MAAM,IAAI,KAC9C,yBAAyB,WAAW,wBAAwB,MAAM,IAAI,CAAC;AAAA,EAE3E;AACA,QAAM,aAAa,oBAAoB,MAAM,IAAI;AACjD,SAAO,eAAe,OAAO,OAAO,yBAAyB,WAAW,UAAU;AACpF;AAQO,SAAS,4BAA4B,QAA0B;AACpE,QAAM,SAAS,uBAAuB,MAAM;AAC5C,MAAI,WAAW,MAAM;AACnB,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,UAAM,aAAa,OAAO,IAAI,CAAC,OAAO,uBAAuB,EAAE,KAAK,EAAE;AACtE,QAAI,WAAW,WAAW,KAAK,WAAW,CAAC,GAAG,SAAS,iBAAiB;AACtE,aAAO,WAAW,CAAC;AAAA,IACrB;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,kBAAkB,OAAiD;AACjF,QAAM,MAAgC,CAAC;AACvC,MAAI,MAAM,SAAS,0BAA0B;AAC3C,UAAM,OAAQ,MAAc;AAC5B,QAAI,MAAM,SAAS,uBAAuB,OAAO,KAAK,UAAU,UAAU;AACxE,UAAI,KAAK,EAAE,MAAM,uBAAuB,SAAS,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;AACvE,aAAO;AAAA,IACT;AACA,QAAI,MAAM,SAAS,iBAAiB;AAClC,aAAO;AAAA,IACT;AAAA,EACF;AACA,MAAI,qCAAqC,KAAK,GAAG;AAC/C,UAAM,MAAO,MAAc,MAAM;AACjC,QAAI,KAAK,SAAS,2CAA2C,OAAO,IAAI,UAAU,UAAU;AAC1F,UAAI,KAAK,EAAE,MAAM,yBAAyB,SAAS,EAAE,MAAM,IAAI,MAAM,EAAE,CAAC;AAAA,IAC1E;AACA,WAAO;AAAA,EACT;AACA,MAAI,MAAM,SAAS,8BAA8B;AAC/C,QAAI,KAAK;AAAA,MACP,MAAM;AAAA,MACN,SAAS,EAAE,OAAQ,MAAc,OAAO,QAAQ,KAAK;AAAA,IACvD,CAAC;AACD,WAAO;AAAA,EACT;AACA,MAAI,MAAM,SAAS,yBAAyB;AAC1C,WAAO;AAAA,EACT;AACA,QAAM,OAAQ,MAAc;AAC5B,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AACA,MAAI,KAAK,SAAS,kBAAkB;AAClC,UAAM,MAAM,KAAK,WAAW,CAAC;AAC7B,QAAI,KAAK;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,QACP,IAAI,IAAI,UAAU,IAAI,MAAM,KAAK,MAAM;AAAA,QACvC,MAAM,IAAI,QAAQ,IAAI,QAAQ;AAAA,QAC9B,WAAW,IAAI,aAAa,IAAI,SAAS;AAAA,QACzC;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,WAAW,KAAK,SAAS,yBAAyB;AAChD,QAAI,KAAK;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,QACP,IAAI,KAAK,SAAS,UAAU,KAAK,MAAM;AAAA;AAAA;AAAA,QAGvC,QAAQ,4BAA4B,KAAK,MAAM;AAAA,MACjD;AAAA,IACF,CAAC;AAAA,EACH,WAAW,KAAK,SAAS,yBAAyB;AAKhD,UAAM,MAAM,KAAK,WAAW,CAAC;AAC7B,QAAI,KAAK;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,QACP,IAAI,IAAI,WAAW,IAAI,UAAU,IAAI,MAAM,KAAK,MAAM;AAAA,QACtD,MAAM;AAAA,QACN,WAAW,IAAI,aAAa;AAAA,QAC5B;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,WAAW,KAAK,SAAS,2BAA2B;AAClD,UAAM,MAAM,KAAK,WAAW,CAAC;AAC7B,UAAM,YAAY,MAAM,QAAQ,IAAI,KAAK,IACrC,IAAI,MACD,IAAI,CAACL,UAA8B,OAAOA,OAAM,SAAS,WAAWA,MAAK,OAAO,EAAG,EACnF,OAAO,OAAO,IACjB,CAAC;AACL,QAAI,KAAK;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,QACP,IAAI,IAAI,WAAW,IAAI,UAAU,KAAK,MAAM;AAAA,QAC5C,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,MACE,UAAU,SAAS,IACf,oBAAoB,UAAU,KAAK,IAAI,CAAC,KACxC;AAAA,QACR;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,WAAW,KAAK,SAAS,uBAAuB;AAC9C,UAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO;AACzD,QAAI,MAAM;AACR,UAAI,KAAK,EAAE,MAAM,2BAA2B,SAAS,EAAE,KAAK,EAAE,CAAC;AAAA,IACjE;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,+BAA+B,OAAkD;AAC/F,QAAM,WAAW,0BAA0B,KAAK;AAChD,SAAO,+BAA+B,QAAQ;AAChD;AAGO,SAAS,+BAA+B,UAA8C;AAC3F,QAAM,QAAQ,kBAAkB,QAAQ;AACxC,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AACA,QAAM,aACJ,OAAQ,UAAsC,OAAO,WAChD,SAA4B,KAC7B,OAAQ,UAA8C,eAAe,WAClE,SAAoC,aACrC;AACR,SAAO;AAAA,IACL,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,IACnC;AAAA,EACF;AACF;AAEA,SAAS,0BAA0B,OAA4B;AAC7D,MAAI,MAAM,SAAS,0BAA0B;AAC3C,UAAM,OAAQ,MAAc;AAC5B,QAAI,MAAM,SAAS,iBAAiB;AAClC,aAAO,KAAK;AAAA,IACd;AAAA,EACF;AACA,MAAI,qCAAqC,KAAK,GAAG;AAC/C,UAAM,MAAO,MAAc,MAAM;AACjC,QAAI,KAAK,SAAS,sBAAsB;AACtC,aAAO,IAAI;AAAA,IACb;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,UAAuD;AAChF,QAAM,MAAO,UAAyC;AACtD,MAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,WAAO;AAAA,EACT;AACA,QAAM,SAAS;AACf,QAAM,QAAQ;AAAA,IACZ,GAAG;AAAA,MACD;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,GAAG;AAAA,MACD;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,GAAG,WAAW,QAAQ,eAAe,eAAe,cAAc;AAAA,IAClE,GAAG,sBAAsB,MAAM;AAAA,IAC/B,GAAG,uBAAuB,MAAM;AAAA,IAChC,GAAG,wBAAwB,MAAM;AAAA,EACnC;AACA,SAAO,OAAO,KAAK,KAAK,EAAE,SAAS,IAAI,QAAQ;AACjD;AAEA,SAAS,WACP,KACA,cACG,MACmC;AACtC,QAAM,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,cAAc,cAAc,MAAS;AAKrF,SAAO,OAAO,UAAU,WAAW,EAAE,CAAC,SAAS,GAAG,MAAM,IAAI,CAAC;AAC/D;AAEA,SAAS,sBAAsB,KAAoE;AACjG,QAAM,UACJ,IAAI,sBACJ,IAAI,wBACJ,IAAI,uBACJ,IAAI;AACN,MAAI,YAAY,UAAa,YAAY,MAAM;AAC7C,WAAO,CAAC;AAAA,EACV;AACA,SAAO;AAAA,IACL,oBAAoB;AAAA,EACtB;AACF;AAEA,SAAS,uBACP,KACsC;AACtC,QAAM,UAAU,IAAI,uBAAuB,IAAI;AAC/C,QAAM,aAAa,WAAW,IAAI,2BAA2B,IAAI;AACjE,MAAI,eAAe,UAAa,eAAe,MAAM;AACnD,WAAO,CAAC;AAAA,EACV;AACA,SAAO;AAAA,IACL,qBAAqB;AAAA,EACvB;AACF;AAEA,SAAS,wBACP,KACsC;AACtC,QAAM,UAAU,IAAI,uBAAuB,IAAI;AAC/C,MAAI,YAAY,UAAa,YAAY,MAAM;AAC7C,WAAO,CAAC;AAAA,EACV;AACA,SAAO;AAAA;AAAA;AAAA;AAAA,IAIL,qBAAqB;AAAA,EACvB;AACF;AAEO,SAAS,mBAAmB,eAAqC;AACtE,SAAO,cACJ,OAAO,CAAC,SAAS,qBAAqB,IAAI,MAAM,qBAAqB,EACrE,IAAI,CAAC,SAAc;AAClB,QAAI,OAAO,MAAM,WAAW,YAAY;AACtC,aAAO,KAAK,OAAO;AAAA,IACrB;AACA,WAAO;AAAA,MACL,IAAI,mBAAmB,IAAI,KAAK;AAAA,MAChC,MAAM,MAAM,QAAQ,MAAM,SAAS,QAAQ;AAAA,MAC3C,WAAW,MAAM,aAAa,MAAM,SAAS,aAAa;AAAA,MAC1D,KAAK;AAAA,IACP;AAAA,EACF,CAAC;AACL;AAEO,SAAS,4BACd,eACoC;AACpC,SAAO,cACJ,OAAO,CAAC,SAAS,qBAAqB,IAAI,MAAM,qBAAqB,EACrE,IAAI,CAAC,SAAc;AAClB,UAAM,eAAe,MAAM,aAAa,MAAM,SAAS;AACvD,QAAI,kBAA2B;AAC/B,QAAI,OAAO,iBAAiB,UAAU;AACpC,UAAI;AACF,0BAAkB,KAAK,MAAM,YAAY;AAAA,MAC3C,QAAQ;AACN,cAAM,IAAI,MAAM,0DAA0D;AAAA,MAC5E;AAAA,IACF;AACA,UAAM,aAAa,mBAAmB,IAAI;AAC1C,QAAI,CAAC,YAAY;AACf,YAAM,IAAI,MAAM,iEAAiE;AAAA,IACnF;AACA,WAAO;AAAA,MACL;AAAA,MACA,OAAO,2BAA2B,MAAM,eAAe;AAAA,IACzD;AAAA,EACF,CAAC;AACL;AAEO,SAAS,cACd,UACA,WACA,cAAcE,2BAA0B,QAAQ,GAChD,wBAA+C,CAAC,GACtC;AACV,iCAA+B,SAAS;AACxC,QAAM,UAA+B,CAAC;AACtC,QAAM,oBAAoB,IAAI;AAAA,IAC5B,8BAA8B,qBAAqB,EAAE,IAAI,CAAC,aAAa;AAAA,MACrE,SAAS;AAAA,MACT;AAAA,IACF,CAAC;AAAA,EACH;AACA,aAAW,YAAY,WAAW;AAChC,QAAI,SAAS,SAAS,cAAc;AAClC,YAAM,MAAM,IAAI,IAAI,SAAS,GAAG;AAChC,YAAM,OAAO,IAAI,KAAK,YAAY;AAClC,YAAM,OAAO,IAAI,SAAS,QAAQ,cAAc,EAAE,EAAE,QAAQ,UAAU,EAAE;AACxE,YAAM,YAAY,kBAAkB,QAAQ;AAC5C,UAAI,2BAA2B,UAAU,QAAQ,GAAG;AAClD,gBAAQ,SAAS,IAAI,IAAI;AACzB;AAAA,MACF;AACA,cAAQ,SAAS,IAAI,QAAQ;AAAA,QAC3B;AAAA,QACA;AAAA,QACA,KAAK,SAAS;AAAA,QACd,GAAI,SAAS,UAAU,EAAE,SAAS,2BAA2B,SAAS,OAAO,EAAE,IAAI,CAAC;AAAA,MACtF,CAAC;AACD;AAAA,IACF;AACA,QAAI,SAAS,SAAS,QAAQ;AAC5B,YAAM,YAAY,kBAAkB,QAAQ;AAC5C,YAAM,WAAW,kBAAkB,IAAI,SAAS,MAAM;AACtD,cAAQ,SAAS,IAAI,WACjB,yBAAyB,UAAU,SAAS,IAC5C,uBAAuB,UAAU,SAAS,SAAS,MAAM,WAAW;AAAA,IAC1E;AAAA,EACF;AAMA,SAAO,IAAI,SAAS;AAAA,IAClB,MAAM;AAAA,IACN;AAAA,IACA;AAAA,EACF,CAAC;AACH;AAEO,SAAS,oCAAoC,WAElD;AACA,QAAM,eAAe,UAAU;AAAA,IAC7B,CAAC,aACC,SAAS,SAAS;AAAA,EACtB;AACA,MAAI,aAAa,WAAW,EAAG,QAAO,CAAC;AAEvC,QAAM,QAAQ,oBAAI,IAAsC;AACxD,QAAM,MAAM,CAAC,MAAc,WAAyB;AAClD,QAAI,CAAC,MAAM,IAAI,IAAI,EAAG,OAAM,IAAI,MAAM,EAAE,MAAM,OAAO,CAAC;AAAA,EACxD;AAIA,MAAI,kBAAkB,0BAA0B;AAChD,MAAI,kBAAkB,0BAA0B;AAChD,aAAW,cAAc,cAAc;AACrC,UAAM,YAAY,kBAAkB,UAAU;AAC9C,QAAI,GAAG,SAAS,mBAAmB,GAAG,SAAS,iBAAiB;AAChE,QAAI,GAAG,SAAS,mBAAmB,GAAG,SAAS,iBAAiB;AAAA,EAClE;AACA,SAAO,EAAE,qBAAqB,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;AACpD;AAEA,SAAS,yBAAyB,UAA+B,WAAwB;AACvF,MAAI,SAAS,cAAc,WAAW;AACpC,UAAM,IAAI;AAAA,MACR,mDAAmD,SAAS,MAAM,cAAc,SAAS,SAAS,SAAS,SAAS;AAAA,IACtH;AAAA,EACF;AACA,4BAA0B,SAAS,UAAU,SAAS,MAAM;AAC5D,MAAI,SAAS,SAAS;AACpB,WAAO,IAAI;AAAA,MACT,UAAU;AAAA,QACR,CAAC,SAAS,QAAQ,GAAG,KAAK,EAAE,SAAS,SAAS,QAAQ,CAAC;AAAA,MACzD;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO,IAAI;AACb;AAEA,SAAS,uBAAuB,UAAoB,QAAqB;AAKvE,QAAM,oBAAoBI,wBAAuB,SAAS,cAAc,EAAE;AAC1E,MAAI,SAAS,yBAAyB,cAAc;AAClD,QAAI,mBAAmB;AACrB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,UAAMC,UAAS,qBAAqB,QAAQ;AAC5C,WAAO,eAAe;AAAA,MACpB,WAAWA,QAAO;AAAA,MAClB;AAAA,MACA,aAAaA,QAAO;AAAA,MACpB,YAAYA,QAAO;AAAA,MACnB,aAAaA,QAAO;AAAA,MACpB,UAAU;AAAA,MACV,eAAe,yBAAyB;AAAA,QACtC,SAAS,EAAE,MAAM,UAAU,MAAM,OAAO;AAAA,MAC1C,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACA,MAAI,SAAS,yBAAyB,YAAY,SAAS,yBAAyB,OAAO;AACzF,UAAM,IAAI;AAAA,MACR,GAAG,SAAS,oBAAoB;AAAA,IAClC;AAAA,EACF;AACA,QAAM,SAAS,wBAAwB,QAAQ;AAC/C,SAAO,QAAQ;AAAA,IACb,QAAQ,OAAO;AAAA,IACf;AAAA,IACA,aAAa,OAAO;AAAA,IACpB,QAAQ,OAAO;AAAA,IACf,YAAY,OAAO;AAAA,IACnB,aAAa,OAAO;AAAA,IACpB,iBAAiB,OAAO;AAAA,IACxB,UAAU;AAAA,IACV,eAAe,oBACX,IAAI,8BAA8B,IAClC,yBAAyB,EAAE,SAAS,EAAE,MAAM,UAAU,MAAM,OAAO,EAAE,CAAC;AAAA,EAC5E,CAAC;AACH;AAEA,SAAS,wBAAwB,UAO/B;AACA,QAAM,cAAc,SAAS,gCAAgC,SAAS;AACtE,MACE,CAAC,eACD,CAAC,SAAS,4BACV,CAAC,SAAS,8BACV;AACA,UAAM,IAAI,MAAM,gEAAgE;AAAA,EAClF;AACA,SAAO;AAAA,IACL,QAAQ,SAAS;AAAA,IACjB;AAAA,IACA,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS;AAAA,IACrB,aAAa,SAAS;AAAA,IACtB,iBAAiB,SAAS;AAAA,EAC5B;AACF;AAEA,SAAS,qBAAqB,UAK5B;AACA,QAAM,SAAS,SAAS,qCACpB,2BAA2B,SAAS,kCAAkC,IACtE,CAAC;AACL,QAAM,cAAc,SAAS,iCAAiC,OAAO;AACrE,QAAM,aAAa,SAAS,gCAAgC,OAAO;AACnE,MAAI,CAAC,eAAe,CAAC,YAAY;AAC/B,UAAM,IAAI,MAAM,gEAAgE;AAAA,EAClF;AACA,QAAM,cAAc;AAAA,IAClB,SAAS,8BAA8B,OAAO;AAAA,IAC9C;AAAA,EACF;AACA,SAAO;AAAA,IACL,WAAW,SAAS;AAAA,IACpB;AAAA,IACA;AAAA,IACA,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;AAAA,EACvC;AACF;AAEA,SAAS,0BACP,UACA,aACoB;AACpB,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,EACT;AACA,QAAM,aAAa,SAAS,QAAQ,QAAQ,EAAE;AAC9C,QAAM,0BAA0B,WAAW,WAAW;AACtD,SAAO,eAAe,0BAA0B,SAAY;AAC9D;AAEA,SAAS,2BAA2B,OAAuC;AACzE,SAAO,OAAO;AAAA,IACZ,MACG,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,OAAO,EACd,IAAI,CAAC,SAAS;AACb,YAAM,QAAQ,KAAK,QAAQ,GAAG;AAC9B,aAAO,UAAU,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,MAAM,GAAG,KAAK,GAAG,KAAK,MAAM,QAAQ,CAAC,CAAC;AAAA,IACjF,CAAC;AAAA,EACL;AACF;AAEA,SAAS,sBAAsB,MAAsB;AACnD,SAAO,2BAA2B,IAAI;AACxC;AAEA,SAAS,8BAA8B,WAAyD;AAC9F,SAAO,UAAU,IAAI,CAAC,aAAa;AACjC,UAAM,YAAY,sBAAsB,SAAS,SAAS;AAC1D,8BAA0B,SAAS,UAAU,SAAS,MAAM;AAC5D,QAAI,CAAC,SAAS,WAAW,CAAC,SAAS,KAAK,KAAK,GAAG;AAC9C,YAAM,IAAI;AAAA,QACR,+DAA+D,SAAS,MAAM;AAAA,MAChF;AAAA,IACF;AACA,WAAO;AAAA,MACL,GAAG;AAAA,MACH;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,SAAS,0BAA0B,UAAkB,QAAsB;AACzE,MACE,CAAC,YACD,SAAS,SAAS,GAAG,KACrB,SAAS,SAAS,IAAI,KACtB,aAAa,OACb,aAAa,QACb,SAAS,SAAS,IAAI,GACtB;AACA,UAAM,IAAI,MAAM,iCAAiC,MAAM,KAAK,QAAQ,EAAE;AAAA,EACxE;AACF;AAEA,SAAS,0BAA0B,UAAuC;AACxE,SAAO,UAAU,KAAK,cAAc,SAAS,WAAW,SAAS,QAAQ;AAC3E;AAEA,SAAS,2BAA2B,UAA+B,YAA4B;AAC7F,MAAI,CAAC,SAAS,KAAK;AACjB,UAAM,IAAI,MAAM,kDAAkD,SAAS,MAAM,EAAE;AAAA,EACrF;AACA,QAAM,YAAY,UAAU,QAAQ,UAAU;AAC9C,QAAM,UAAU,GAAG,UAAU;AAC7B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,eAAe,WAAW,SAAS,CAAC;AAAA,IACpC,aAAa,WAAW,UAAU,CAAC;AAAA,IACnC,SAAS,WAAW,OAAO,CAAC;AAAA,IAC5B;AAAA,IACA;AAAA,IACA,4FAA4F,WAAW,SAAS,GAAG,CAAC;AAAA,IACpH,kBAAkB,WAAW,UAAU,CAAC;AAAA,IACxC;AAAA,IACA;AAAA,IACA,gBAAgB,WAAW,UAAU,CAAC;AAAA,EACxC,EAAE,KAAK,IAAI;AACb;AAEA,SAAS,WAAW,OAAuB;AACzC,SAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,CAAC;AACzC;AA6BA,eAAe,2BACb,SACA,MACA,eACkB;AAClB,MAAI,eAAe;AACjB,WAAO,MAAM,cAAc,SAAsC,IAAI;AAAA,EACvE;AACA,MAAI,QAAQ,KAAM,QAAO,MAAM,QAAQ,KAAK,IAAI;AAChD,MAAI,QAAQ,YAAa,QAAO,MAAM,QAAQ,YAAY,IAAI;AAC9D,QAAM,IAAI,MAAM,oDAAoD;AACtE;AAsBA,IAAM,+BAAqE;AAAA,EACzE,mBAAmB;AAAA,IACjB,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,WAAW,CAAC,EAAE,YAAY,MAAM,yBAAyB,WAAW;AAAA,IACpE,KAAK;AAAA,EACP;AACF;AAEO,SAAS,4BAA4B,KAAuC;AACjF,SAAO,IAAI,IAAI,CAAC,OAAO;AACrB,UAAM,OAAO,6BAA6B,EAAE;AAC5C,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,MAAM,kCAAkC,EAAE,EAAE;AAAA,IACxD;AACA,WAAO;AAAA,EACT,CAAC;AACH;AAEA,SAAS,gCACP,OACA,SACwB;AACxB,SAAO,MAAM;AAAA,IACX,CAAC,SAAS,KAAK,UAAU,uBAAuB,KAAK,YAAY,OAAO,KAAK;AAAA,EAC/E;AACF;AAaA,eAAsB,yBACpB,SACA,OACA,SACe;AACf,aAAW,QAAQ,gCAAgC,OAAO,OAAO,GAAG;AAClE,UAAM,KAAK,IAAI,SAAS,OAAO;AAAA,EACjC;AACF;AAEO,SAAS,0BACd,QACA,OACA,SACe;AACf,QAAM,wBAAwB,gCAAgC,OAAO,OAAO;AAC5E,MAAI,sBAAsB,WAAW,GAAG;AACtC,WAAO;AAAA,EACT;AACA,QAAM,OAAO,oBAAI,QAAgB;AACjC,QAAM,cAAc,OAAqC,YAA2B;AAClF,QAAI,OAAO,YAAY,YAAY,YAAY,QAAQ,CAAC,KAAK,IAAI,OAAO,GAAG;AACzE,iBAAW,QAAQ,uBAAuB;AACxC,cAAM,KAAK,IAAI,SAAS,OAAO;AAAA,MACjC;AACA,WAAK,IAAI,OAAO;AAAA,IAClB;AACA,WAAO;AAAA,EACT;AACA,QAAM,UAAyB;AAAA,IAC7B,WAAW,OAAO;AAAA,IAClB,GAAI,OAAO,2BAA2B,SAClC,EAAE,wBAAwB,OAAO,uBAAuB,IACxD,CAAC;AAAA,IACL,GAAI,OAAO,SACP;AAAA,MACE,QAAQ,UAAU,SAChB,MAAM,YAAY,MAAO,OAAO,OAAe,GAAG,IAAI,CAAC;AAAA,IAC3D,IACA,CAAC;AAAA,IACL,GAAI,OAAO,SACP;AAAA,MACE,QAAQ,OAAO,UACb,MAAM,YAAY,MAAM,OAAO,OAAQ,KAAK,CAAC;AAAA,IACjD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,SACP;AAAA,MACE,QAAQ,OAAO,UAA+B,MAAM,OAAO,OAAQ,KAAK;AAAA,IAC1E,IACA,CAAC;AAAA,IACL,GAAI,OAAO,wBACP;AAAA,MACE,uBAAuB,OAAO,OAA4B,YACxD,MAAM,OAAO,sBAAuB,OAAO,OAAO;AAAA,IACtD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,8BACP;AAAA,MACE,6BAA6B,OAAO,UAClC,MAAM,OAAO,4BAA6B,KAAK;AAAA,IACnD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,gCACP;AAAA,MACE,+BAA+B,OAAO,UACpC,MAAM,OAAO,8BAA+B,KAAK;AAAA,IACrD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,0BACP;AAAA,MACE,yBAAyB,OAAO,UAC9B,MAAM,OAAO,wBAAyB,KAAK;AAAA,IAC/C,IACA,CAAC;AAAA,EACP;AACA,SAAO;AACT;AAEA,SAAS,oCAAoC,OAAgD;AAC3F,SAAO,0BAA0B,IAAI,KAAK,KAAK,CAAC;AAClD;AAKA,SAAS,sBAAsB,OAAmD;AAChF,SAAO,mBAAmB,IAAI,KAAK;AACrC;AAEA,SAAS,8BACP,OACwC;AACxC,SAAO,2BAA2B,IAAI,KAAK;AAC7C;AAEA,SAAS,2BAA2B,OAA4C;AAC9E,SAAO,wBAAwB,IAAI,KAAK;AAC1C;AAEA,SAAS,gCAAgC,OAA4C;AACnF,SAAO,6BAA6B,IAAI,KAAK;AAC/C;AAEA,SAAS,2BACP,OACA,aACoB;AACpB,MAAI,CAAC,2BAA2B,KAAK,EAAG,QAAO;AAC/C,QAAM,YAAY,gCAAgC,KAAK;AACvD,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,sDAAsD;AAAA,EACxE;AACA,SAAO,kCAAkC,aAAa,SAAS;AACjE;AAEA,SAAS,mCAAmC,OAAgD;AAC1F,SAAO,2BAA2B,KAAK,IACnC;AAAA,IACE;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,KAAK;AAAA,IACP;AAAA,EACF,IACA,CAAC;AACP;AAOA,SAAS,6BAA6B,OAAgD;AACpF,SAAO,cAAc,IAAI,KAAK,IAC1B;AAAA,IACE;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,KAAK;AAAA,IACP;AAAA,EACF,IACA,CAAC;AACP;AAEA,SAAS,2BAA2B,OAAwD;AAC1F,SAAO,cAAc,IAAI,KAAK;AAChC;AAIA,SAAS,2BAA2B,OAAgD;AAClF,SAAO,wBAAwB,IAAI,KAAK,KAAK,CAAC;AAChD;AAKA,SAAS,qBACP,iBACA,UACwB;AACxB,MAAI,SAAS,WAAW,GAAG;AACzB,WAAO;AAAA,EACT;AACA,QAAM,OAAO,IAAI,IAAI,gBAAgB,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC;AAC3D,SAAO,CAAC,GAAG,iBAAiB,GAAG,SAAS,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;AAC9E;AAEA,SAAS,sCACP,UACwB;AACxB,SAAO,WACH;AAAA,IACE;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,KAAK,OAAO,YAAY;AACtB,cAAM,SAAS,OAAO;AAAA,MACxB;AAAA,IACF;AAAA,EACF,IACA,CAAC;AACP;AAEA,SAAS,uCACP,UACwB;AACxB,SAAO,WACH;AAAA,IACE;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,KAAK,OAAO,YAAY;AACtB,cAAM,SAAS,OAAO;AAAA,MACxB;AAAA,IACF;AAAA,EACF,IACA,CAAC;AACP;AAEA,SAAS,4BACP,UACA,WACA,uBAAmD,SAAS,gBACpC;AACxB,QAAM,eAAe,UAAU;AAAA,IAC7B,CAAC,aACC,SAAS,SAAS,gBAClB,2BAA2B,UAAU,UAAU,oBAAoB;AAAA,EACvE;AACA,MAAI,aAAa,WAAW,GAAG;AAC7B,WAAO,CAAC;AAAA,EACV;AACA,SAAO;AAAA,IACL;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,KAAK,OAAO,SAAS,YAAY;AAC/B,cAAM,uBAAuB,SAAS,cAAc,OAAO;AAAA,MAC7D;AAAA,IACF;AAAA,EACF;AACF;AAoBO,SAAS,2BACd,UACA,UACA,uBAAmD,SAAS,gBACnD;AACT,MAAI,yBAAyB,cAAc;AACzC,WAAO;AAAA,EACT;AACA,SACE,SAAS,mBAAmB,WAC5B,QAAQ,SAAS,wBAAwB,SAAS,kBAAkB,KACpE,QAAQ,SAAS,QAAQ;AAE7B;AAEA,IAAM,2BAA2B;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,mBAAmB,UAAyC;AACnE,SAAO,gBAAgB,SAAS,YAAY,CAAC;AAC/C;AAEO,SAAS,yBAAyB,qBAAqC;AAC5E,SAAOC,YAAW,QAAQ,EAAE,OAAO,qBAAqB,MAAM,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AAC3F;AAEA,SAAS,kBAAkB,SAA2C;AACpE,SAAO,wBAAwB,yBAAyB,QAAQ,mBAAmB,EAAE,YAAY,CAAC;AACpG;AAEA,SAAS,qCAAqC,UAA8C;AAC1F,SAAO,SACJ,IAAI,CAAC,YAAY,UAAU,kBAAkB,OAAO,CAAC,IAAI,WAAW,QAAQ,KAAK,CAAC,EAAE,EACpF,KAAK,IAAI;AACd;AAEA,SAAS,yBAAyB,OAA8B;AAC9D,QAAM,QAAkB,CAAC;AACzB,aAAW,YAAY,0BAA0B;AAC/C,UAAM,QAAQ,MAAM,QAAQ;AAC5B,QAAI,CAAC,OAAO;AACV;AAAA,IACF;AACA,UAAM,KAAK,UAAU,mBAAmB,QAAQ,CAAC,IAAI,WAAW,KAAK,CAAC,EAAE;AACxE,QAAI,aAAa,UAAU;AACzB,YAAM,KAAK,kCAAkC,WAAW,KAAK,CAAC,EAAE;AAAA,IAClE;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAwBA,SAAS,6BACP,WAC+B;AAC/B,QAAM,iBAAiB,oBAAI,IAAoB;AAC/C,QAAM,mBAAmB,oBAAI,IAAmC;AAChE,SAAO,UAAU,IAAI,CAAC,aAAa;AACjC,UAAM,MAAM,IAAI,IAAI,SAAS,GAAG;AAChC,UAAM,qBAAqB,mCAAmC,QAAQ;AAItE,UAAM,WAAW,sBAAsB;AACvC,UAAM,sBACJ,oCAAoC,UAAU,kBAAkB,KAAK;AACvE,UAAM,OAAO,IAAI,SAAS,QAAQ,cAAc,EAAE;AAClD,UAAM,SAAS,GAAG,IAAI,SAAS,YAAY,CAAC,KAAK,IAAI,KAAK,YAAY,CAAC,IAAI,KAAK,QAAQ,UAAU,EAAE,CAAC;AACrG,UAAM,aAAa,GAAG,QAAQ,KAAS,mBAAmB;AAC1D,UAAM,gBAAgB,iBAAiB,IAAI,mBAAmB;AAC9D,QAAI,iBAAiB,kBAAkB,UAAU;AAC/C,YAAM,IAAI;AAAA,QACR,sBAAsB,mBAAmB;AAAA,MAC3C;AAAA,IACF;AACA,qBAAiB,IAAI,qBAAqB,QAAQ;AAClD,UAAM,UAAU,eAAe,IAAI,MAAM;AACzC,QAAI,WAAW,YAAY,YAAY;AACrC,YAAM,IAAI;AAAA,QACR,qBAAqB,SAAS,GAAG;AAAA,MACnC;AAAA,IACF;AACA,mBAAe,IAAI,QAAQ,UAAU;AACrC,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,aAAa,yBAAyB,mBAAmB;AAAA,MACzD,UAAU,IAAI,SAAS,QAAQ,MAAM,EAAE,EAAE,YAAY;AAAA,MACrD,MAAM,IAAI,KAAK,YAAY;AAAA,MAC3B;AAAA,MACA,KAAK,SAAS;AAAA,MACd,WAAW,cAAc,kBAAkB,QAAQ,CAAC;AAAA,IACtD;AAAA,EACF,CAAC;AACH;AAEA,SAAS,0CACP,WACA,UACU;AAQV,QAAM,oBAAoB,IAAI;AAAA,IAC5B,SAAS,IAAI,CAAC,YAAY;AAAA,MACxB,wBAAwB,QAAQ,UAAU,QAAQ,mBAAmB;AAAA,MACrE,QAAQ,WAAW,SAAS,gBAAgB,oBAAoB;AAAA,IAClE,CAAC;AAAA,EACH;AACA,QAAM,UAAU,oBAAI,IAAsC;AAC1D,aAAW,cAAc,6BAA6B,SAAS,GAAG;AAChE,UAAM,MAAM,wBAAwB,WAAW,UAAU,WAAW,mBAAmB;AACvF,UAAM,YAAY,kBAAkB,IAAI,GAAG;AAC3C,QAAI,CAAC,UAAW;AAChB,UAAM,QAAkC,QAAQ,IAAI,GAAG,KAAK;AAAA,MAC1D,qBAAqB,WAAW;AAAA,MAChC,UAAU,WAAW;AAAA,MACrB;AAAA,MACA,cAAc,CAAC;AAAA,IACjB;AACA,UAAM,aAAa,KAAK,EAAE,KAAK,WAAW,KAAK,WAAW,WAAW,UAAU,CAAC;AAChF,YAAQ,IAAI,KAAK,KAAK;AAAA,EACxB;AACA,QAAM,YAAY,GAAG,KAAK;AAAA,IACxB;AAAA,MACE,SAAS;AAAA,MACT,UAAU,CAAC,GAAG,QAAQ,OAAO,CAAC;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,eAAe,WAAW,SAAS,CAAC;AAAA,IACpC;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,wBACP,UACA,qBACQ;AACR,SAAO,GAAG,QAAQ,KAAS,mBAAmB;AAChD;AAEA,SAAS,iCACP,UACqB;AACrB,SAAO,IAAI;AAAA,IACT,SACG,OAAO,CAAC,YAAY,QAAQ,WAAW,SAAS,aAAa,EAC7D,IAAI,CAAC,YAAY,wBAAwB,QAAQ,UAAU,QAAQ,mBAAmB,CAAC;AAAA,EAC5F;AACF;AAEA,SAAS,qCACP,WACA,UACuC;AACvC,QAAM,sBAAsB,6BAA6B,SAAS;AAClE,QAAM,kBAAkB,oBAAI,IAAyC;AACrE,aAAW,cAAc,qBAAqB;AAC5C,oBAAgB;AAAA,MACd,GAAG,wBAAwB,WAAW,UAAU,WAAW,mBAAmB,CAAC,KAAS,WAAW,GAAG;AAAA,MACtG;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAgD,CAAC;AACvD,QAAM,wBAAwB,oBAAI,IAAY;AAC9C,QAAM,oBAAoB,oBAAI,IAAY;AAC1C,aAAW,WAAW,UAAU;AAC9B,QAAI,CAAC,QAAQ,UAAW;AACxB,QACE,OAAO,QAAQ,cAAc,YAC7B,QAAQ,UAAU,SAAS,iBAC3B,CAAC,MAAM,QAAQ,QAAQ,UAAU,YAAY,GAC7C;AACA,YAAM,IAAI;AAAA,QACR,0BAA0B,QAAQ,mBAAmB;AAAA,MACvD;AAAA,IACF;AACA,UAAM,aAAa,wBAAwB,QAAQ,UAAU,QAAQ,mBAAmB;AACxF,UAAM,WAAW,oBAAoB;AAAA,MACnC,CAAC,eACC,wBAAwB,WAAW,UAAU,WAAW,mBAAmB,MAAM;AAAA,IACrF;AACA,QAAI,SAAS,WAAW,KAAK,QAAQ,UAAU,aAAa,WAAW,SAAS,QAAQ;AACtF,YAAM,IAAI;AAAA,QACR,2BAA2B,QAAQ,mBAAmB;AAAA,MACxD;AAAA,IACF;AACA,eAAW,SAAS,QAAQ,UAAU,cAAc;AAClD,UACE,CAAC,SACD,OAAO,UAAU,YACjB,OAAO,MAAM,kBAAkB,YAC/B,OAAO,MAAM,cAAc,UAC3B;AACA,cAAM,IAAI;AAAA,UACR,2BAA2B,QAAQ,mBAAmB;AAAA,QACxD;AAAA,MACF;AACA,YAAM,aAAa,gBAAgB,IAAI,GAAG,UAAU,KAAS,MAAM,aAAa,EAAE;AAClF,UAAI,CAAC,cAAc,sBAAsB,IAAI,MAAM,aAAa,GAAG;AACjE,cAAM,IAAI;AAAA,UACR,2BAA2B,QAAQ,mBAAmB;AAAA,QACxD;AAAA,MACF;AACA,UAAI;AACJ,UAAI;AACF,oBAAY,IAAI,IAAI,MAAM,SAAS;AAAA,MACrC,QAAQ;AACN,cAAM,IAAI;AAAA,UACR,2BAA2B,QAAQ,mBAAmB;AAAA,QACxD;AAAA,MACF;AACA,UACE,UAAU,aAAa,YACvB,UAAU,YACV,UAAU,YACV,UAAU,UACV,UAAU,QACV,UAAU,SAAS,MAAM,aACzB,kBAAkB,IAAI,UAAU,IAAI,GACpC;AACA,cAAM,IAAI;AAAA,UACR,2BAA2B,QAAQ,mBAAmB;AAAA,QACxD;AAAA,MACF;AACA,4BAAsB,IAAI,MAAM,aAAa;AAC7C,wBAAkB,IAAI,UAAU,IAAI;AACpC,aAAO,KAAK;AAAA,QACV,UAAU,QAAQ;AAAA,QAClB,qBAAqB,QAAQ;AAAA,QAC7B,aAAa,yBAAyB,QAAQ,mBAAmB;AAAA,QACjE,eAAe,MAAM;AAAA,QACrB,WAAW,MAAM;AAAA,QACjB,UAAU;AAAA,QACV,MAAM,UAAU,KAAK,YAAY;AAAA,QACjC,MAAM,UAAU,SAAS,QAAQ,cAAc,EAAE;AAAA,MACnD,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,uBAAuB,UAAyC;AACvE,MAAI,aAAa,SAAU,QAAO;AAClC,MAAI,aAAa,SAAU,QAAO;AAClC,SAAO;AACT;AAEA,SAAS,oCACP,WACA,UACU;AACV,QAAM,mBAAmB,iCAAiC,QAAQ;AAClE,SAAO,6BAA6B,SAAS,EAC1C;AAAA,IACC,CAAC,eACC,CAAC,iBAAiB;AAAA,MAChB,wBAAwB,WAAW,UAAU,WAAW,mBAAmB;AAAA,IAC7E;AAAA,EACJ,EACC,QAAQ,CAAC,eAAe;AACvB,UAAM,QAAQ,oBAAI,IAAI;AAAA,MACpB,WAAW;AAAA,MACX,WAAW,KAAK,QAAQ,UAAU,EAAE;AAAA,MACpC,GAAG,WAAW,KAAK,QAAQ,UAAU,EAAE,CAAC;AAAA,IAC1C,CAAC;AACD,WAAO,CAAC,GAAG,KAAK,EAAE;AAAA,MAChB,CAAC,SACC,KAAK,WAAW,GAAG,WAAW,QAAQ,IAAI,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,cAAc,WAAW,uBAAuB,WAAW,QAAQ,CAAC,CAAC,iCAAiC,WAAW,WAAW;AAAA,IACpM;AAAA,EACF,CAAC;AACL;AAEA,SAAS,mCACP,QACU;AACV,SAAO,OAAO,QAAQ,CAAC,UAAU;AAC/B,UAAM,QAAQ,oBAAI,IAAI;AAAA,MACpB,MAAM;AAAA,MACN,MAAM,KAAK,QAAQ,UAAU,EAAE;AAAA,MAC/B,GAAG,MAAM,KAAK,QAAQ,UAAU,EAAE,CAAC;AAAA,IACrC,CAAC;AACD,WAAO,CAAC,GAAG,KAAK,EAAE;AAAA,MAChB,CAAC,SACC,KAAK,WAAW,GAAG,MAAM,QAAQ,IAAI,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC,oDAAoD,MAAM,WAAW;AAAA,IACnI;AAAA,EACF,CAAC;AACH;AAEA,SAAS,gCACP,WACA,cACU;AACV,QAAM,QAAQ,oBAAI,IAAwE;AAC1F,aAAW,cAAc,6BAA6B,SAAS,GAAG;AAChE,UAAM,QAAQ,MAAM,IAAI,WAAW,IAAI,KAAK;AAAA,MAC1C,UAAU,WAAW;AAAA,MACrB,UAAU,oBAAI,IAAY;AAAA,IAC5B;AACA,UAAM,SAAS,IAAI,GAAG,WAAW,QAAQ,KAAS,WAAW,mBAAmB,EAAE;AAClF,UAAM,IAAI,WAAW,MAAM,KAAK;AAAA,EAClC;AACA,QAAM,cAAc,CAAC,GAAG,IAAI,IAAI,aAAa,IAAI,CAAC,UAAU,MAAM,IAAI,CAAC,CAAC,EACrE,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC,EACjC,IAAI,CAAC,aAAa,OAAO,WAAW,QAAQ,CAAC,6BAA6B;AAC7E,SAAO;AAAA,IACL,GAAG;AAAA,IACH,GAAG,CAAC,GAAG,MAAM,QAAQ,CAAC,EACnB,OAAO,CAAC,CAAC,EAAE,KAAK,MAAM,MAAM,SAAS,SAAS,CAAC,EAC/C,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,EACrC;AAAA,MACC,CAAC,CAAC,UAAU,KAAK,MACf,OAAO,WAAW,QAAQ,CAAC,oBAAoB,MAAM,QAAQ;AAAA,IACjE;AAAA,EACJ;AACF;AAEA,SAAS,qCAAqC,WAAuC,CAAC,GAAa;AACjG,QAAM,gBAAgB,SAAS,QAAQ,CAAC,YAAY;AAClD,UAAM,OAAO,yBAAyB,QAAQ,mBAAmB;AACjE,UAAM,UAAU,kBAAkB,OAAO;AACzC,UAAM,QAAQ,KAAK,IAAI,GAAG,QAAQ,wBAAwB,CAAC;AAC3D,UAAM,WAAW,QAAQ;AACzB,UAAM,QAAQ,CAAC,2BAA2B,WAAW,IAAI,CAAC,QAAQ,OAAO,MAAM;AAC/E,QAAI,UAAU,KAAK,QAAQ,WAAW,SAAS,eAAe;AAC5D,YAAM,KAAK,4BAA4B,WAAW,QAAQ,CAAC,QAAQ,OAAO,MAAM;AAAA,IAClF,OAAO;AACL,YAAM,KAAK,6BAA6B,WAAW,QAAQ,CAAC,EAAE;AAAA,IACh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gCAAgC,QAAyD;AAChG,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,OAAO;AAAA,MACR,CAAC,UACC,4DAA4D,WAAW,OAAO,MAAM,SAAS,YAAY,CAAC,IAAI,WAAW,MAAM,aAAa,CAAC;AAAA,IACjJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,gCACP,YAA4D,CAAC,GAC7D,WAAuC,CAAC,GAC9B;AACV,QAAM,eAAe,qCAAqC,WAAW,QAAQ;AAC7E,QAAM,oBAAoB,gCAAgC,WAAW,YAAY;AACjF,QAAM,eAAe;AAAA,IACnB,GAAG,oCAAoC,WAAW,QAAQ;AAAA,IAC1D,GAAG,mCAAmC,YAAY;AAAA,EACpD;AACA,QAAM,cAAc,6BAA6B,SAAS;AAC1D,QAAM,mBAAmB,iCAAiC,QAAQ;AAClE,QAAM,qBACJ,SAAS,SAAS,IACd,YAAY;AAAA,IACV,CAAC,eACC,CAAC,iBAAiB;AAAA,MAChB,wBAAwB,WAAW,UAAU,WAAW,mBAAmB;AAAA,IAC7E;AAAA,EACJ,IACA,CAAC;AACP,QAAM,mBAAmB,oBAAI,IAAwC;AACrE,aAAW,cAAc,6BAA6B,SAAS,GAAG;AAChE,UAAM,MAAM,iBAAiB,IAAI,WAAW,QAAQ,KAAK,oBAAI,IAAY;AACzE,QAAI,IAAI,WAAW,mBAAmB;AACtC,qBAAiB,IAAI,WAAW,UAAU,GAAG;AAAA,EAC/C;AACA,QAAM,gBAAgB,CAAC,GAAG,iBAAiB,OAAO,CAAC,EAAE,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC;AAC/E,QAAM,uBAAuB;AAAA,IAC3B,GAAG,IAAI,IAAI,mBAAmB,IAAI,CAAC,SAAS,GAAG,KAAK,QAAQ,IAAI,KAAK,WAAW,EAAE,CAAC;AAAA,EACrF,EAAE,IAAI,CAAC,QAAQ,OAAO,WAAW,GAAG,CAAC,eAAe;AACpD,QAAM,sBAAsB,mBAAmB,QAAQ,CAAC,SAAS;AAC/D,UAAM,OAAO,KAAK,IAAI,QAAQ,UAAU,EAAE;AAC1C,WAAO,CAAC,GAAG,oBAAI,IAAI,CAAC,KAAK,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE;AAAA,MACnD,CAAC,QACC,OAAO,WAAW,GAAG,KAAK,QAAQ,IAAI,GAAG,EAAE,CAAC,oBAAoB,WAAW,KAAK,WAAW,CAAC;AAAA,IAChG;AAAA,EACF,CAAC;AACD,QAAM,oBAAoB,CAAC,GAAG,iBAAiB,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,UAAU,GAAG,MAAM;AACrF,QAAI,IAAI,SAAS,EAAG,QAAO,CAAC;AAC5B,UAAM,aAAa,mBAAmB,KAAK,CAAC,SAAS,KAAK,aAAa,QAAQ;AAC/E,WAAO,aACH;AAAA,MACE,OAAO,WAAW,QAAQ,CAAC,oBAAoB,WAAW,WAAW,WAAW,CAAC;AAAA,IACnF,IACA,CAAC;AAAA,EACP,CAAC;AACD,QAAM,wBACJ,SAAS,SAAS,IACd,CAAC,GAAG,iBAAiB,QAAQ,CAAC,EAC3B,OAAO,CAAC,CAAC,EAAE,GAAG,MAAM,IAAI,OAAO,CAAC,EAChC,IAAI,CAAC,CAAC,QAAQ,MAAM,QAAQ,IAC/B,CAAC;AACP,QAAM,sBAAsB,aAAa,QAAQ,CAAC,UAAU;AAC1D,UAAM,OAAO,MAAM,cAAc,QAAQ,UAAU,EAAE;AACrD,WAAO,CAAC,GAAG,oBAAI,IAAI,CAAC,MAAM,eAAe,MAAM,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE;AAAA,MAC9D,CAAC,QAAQ,OAAO,WAAW,GAAG,MAAM,QAAQ,IAAI,GAAG,EAAE,CAAC;AAAA,IACxD;AAAA,EACF,CAAC;AACD,QAAM,2BAA2B,SAC9B,OAAO,CAAC,YAAY,QAAQ,WAAW,SAAS,aAAa,EAC7D;AAAA,IACC,CAAC,YACC,OAAO,WAAW,GAAG,QAAQ,QAAQ,IAAI,yBAAyB,QAAQ,mBAAmB,CAAC,EAAE,CAAC;AAAA,EACrG;AACF,QAAM,uBAAuB,oBAAI,IAG/B;AACF,aAAW,WAAW,UAAU;AAC9B,UAAM,SAAS,qBAAqB,IAAI,QAAQ,QAAQ,KAAK,EAAE,QAAQ,GAAG,UAAU,EAAE;AACtF,QAAI,QAAQ,WAAW,SAAS,cAAe,QAAO,YAAY;AAAA,QAC7D,QAAO,UAAU;AACtB,yBAAqB,IAAI,QAAQ,UAAU,MAAM;AAAA,EACnD;AACA,QAAM,sBAAsB,CAAC,GAAG,qBAAqB,QAAQ,CAAC,EAC3D,OAAO,CAAC,CAAC,EAAE,MAAM,MAAM,OAAO,WAAW,KAAK,OAAO,WAAW,CAAC,EACjE,IAAI,CAAC,CAAC,QAAQ,MAAM,QAAQ;AAC/B,SAAO;AAAA,IACL,GAAG,qCAAqC,QAAQ;AAAA,IAChD,GAAG,0CAA0C,WAAW,QAAQ;AAAA;AAAA;AAAA;AAAA,IAIhE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,kBAAkB,SAAS,IAAI,oBAAoB,CAAC,cAAc;AAAA,IACtE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,2BAA2B;AAAA,IAC3C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA;AAAA;AAAA,IAIA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,gCAAgC,YAAY;AAAA,IAC/C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA,2BAA2B,WAAW,sBAAsB,KAAK,GAAG,CAAC,CAAC;AAAA,IACtE,yBAAyB,WAAW,oBAAoB,KAAK,GAAG,CAAC,CAAC;AAAA,IAClE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAUO,SAAS,+BAA+B,OAA8B;AAC3E,QAAM,aAAa,yBAAyB,KAAK;AACjD,MAAI,CAAC,YAAY;AACf,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,qCAAqC;AAAA,EAC1C,EAAE,KAAK,IAAI;AACb;AAEO,SAAS,wCACd,UACQ;AACR,QAAM,aAAa,qCAAqC,QAAQ;AAChE,MAAI,CAAC,WAAY,QAAO;AACxB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,qCAAqC,QAAQ;AAAA,EAClD,EAAE,KAAK,IAAI;AACb;AAEA,eAAsB,6BACpB,SACA,OACA,UAA6E,CAAC,GAC/D;AACf,QAAM,UAAU,+BAA+B,KAAK;AACpD,MAAI,CAAC,SAAS;AACZ;AAAA,EACF;AACA,QAAM,OAAO;AAAA,IACX,KAAK;AAAA,IACL,SAAS;AAAA,IACT,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,IAChD,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AACA;AAAA,IACE,MAAM,2BAA2B,SAAS,MAAM,QAAQ,aAAa;AAAA,IACrE;AAAA,EACF;AACF;AAEA,eAAsB,sCACpB,SACA,UACA,UAA6E,CAAC,GAC/D;AACf,QAAM,UAAU,wCAAwC,QAAQ;AAChE,MAAI,CAAC,QAAS;AACd,QAAM,OAAO;AAAA,IACX,KAAK;AAAA,IACL,SAAS;AAAA,IACT,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,IAChD,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AACA;AAAA,IACE,MAAM,2BAA2B,SAAS,MAAM,QAAQ,aAAa;AAAA,IACrE;AAAA,EACF;AACF;AAEO,SAAS,uBACd,WACA,WAAuC,CAAC,GAChC;AACR,iCAA+B,SAAS;AACxC,QAAM,WAAW;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,gCAAgC,WAAW,QAAQ;AAAA,IACt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aAAW,YAAY,WAAW;AAChC,UAAM,YAAY,kBAAkB,QAAQ;AAC5C,aAAS;AAAA,MACP;AAAA,QACE;AAAA,QACA,WAAW,UAAU,KAAK,cAAc,SAAS,CAAC;AAAA,QAClD,WAAW,SAAS,GAAG;AAAA,QACvB,WAAW,SAAS,GAAG;AAAA,QACvB,WAAW,SAAS,UAAU,2BAA2B,SAAS,OAAO,IAAI,EAAE;AAAA,MACjF,EAAE,KAAK,GAAG;AAAA,IACZ;AAAA,EACF;AACA,SAAO,SAAS,KAAK,IAAI;AAC3B;AAEO,SAAS,0BACd,UAA4D,CAAC,GACrD;AACR,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,YACJ,gBAAgB,mBAAmB,QAAQ,SAAS,CAAC,KACrD;AAAA,IACJ,QAAQ,kBACJ,uBAAuB,mBAAmB,QAAQ,eAAe,CAAC,KAClE;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEA,eAAsB,0BACpB,SACA,SACe;AACf,MAAI,CAAC,QAAQ,oBAAoB;AAC/B;AAAA,EACF;AACA,QAAM,UAAU;AAAA,uCAAgD,WAAW,QAAQ,kBAAkB,CAAC;AAAA,EAAK;AAAA,IACzG;AAAA,MACE,GAAI,QAAQ,qBAAqB,EAAE,WAAW,QAAQ,mBAAmB,IAAI,CAAC;AAAA,MAC9E,GAAI,QAAQ,sBAAsB,QAAQ,YAAY,gCAClD,EAAE,iBAAiB,QAAQ,YAAY,8BAA8B,IACrE,CAAC;AAAA,IACP;AAAA,EACF,CAAC;AACD,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,SAAS;AAAA,MACT,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,MAChD,aAAa;AAAA,MACb,iBAAiB;AAAA,IACnB;AAAA,IACA,QAAQ;AAAA,EACV;AACA,gCAA8B,QAAQ,2BAA2B;AACnE;AAEA,eAAsB,0BACpB,SACA,OACA,UAKI,CAAC,GACU;AACf,QAAM,UAAU;AAAA,uCAAgD,WAAW,KAAK,CAAC;AAAA,EAAK;AAAA,IACpF;AAAA,MACE,GAAI,QAAQ,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;AAAA,MAC5D,GAAI,QAAQ,kBAAkB,EAAE,iBAAiB,QAAQ,gBAAgB,IAAI,CAAC;AAAA,IAChF;AAAA,EACF,CAAC;AACD,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,SAAS;AAAA,MACT,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,MAChD,aAAa;AAAA,MACb,iBAAiB;AAAA,IACnB;AAAA,IACA,QAAQ;AAAA,EACV;AACA,gCAA8B,QAAQ,yBAAyB;AACjE;AAIA,IAAM,8BAA8B;AAKpC,IAAM,6BAA6B;AAgB5B,SAAS,sBACd,QACA,WACA,YAAY,KACZ,aAAa,iBACL;AACR,QAAM,cAAc,KAAK,IAAI,GAAG,KAAK,KAAK,YAAY,GAAI,CAAC;AAC3D,QAAM,eAAe,cAAc;AACnC,QAAM,SAAS,GAAG,WAAW,QAAQ,QAAQ,EAAE,CAAC,cAAc,SAAS;AACvE,SAAO;AAAA,IACL;AAAA,IACA,YAAY,WAAW,UAAU,CAAC;AAAA,IAClC,mBAAmB,WAAW,MAAM,CAAC;AAAA,IACrC;AAAA,IACA,yBAAyB,WAAW;AAAA,IACpC,2BAA2B,YAAY;AAAA,IACvC,qDAAqD,WAAW,0BAA0B,CAAC;AAAA,IAC3F;AAAA,IACA;AAAA,IACA;AAAA,IACA,yDAAyD,WAAW,0BAA0B,CAAC;AAAA,IAC/F;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,yDAAyD,WAAW,0BAA0B,CAAC;AAAA,IAC/F;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,uDAAuD,WAAW,0BAA0B,CAAC;AAAA,IAC7F;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAaA,eAAsB,gBACpB,SACA,UAAuC,EAAE,aAAa,CAAC,EAAE,GAC1C;AACf,QAAM,WAAW,QAAQ;AACzB,MAAI,CAAC,UAAU;AACb;AAAA,EACF;AACA,QAAM,UAAU;AAAA,IACd,OAAO,SAAS;AAAA,IAChB,WAAW,SAAS;AAAA,IACpB,SAAS,SAAS;AAAA,EACpB;AACA,QAAM,QAAQ,iBAAiB,EAAE,MAAM,qBAAqB,QAAQ,CAAC;AACrE,QAAM,UAAU,sBAAsB,SAAS,QAAQ,SAAS,WAAW,SAAS,SAAS;AAC7F,QAAM,WAAW;AAAA,IACf,KAAK;AAAA,IACL,SAAS;AAAA,IACT,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA,IAIhD,aAAa,SAAS,YAAY;AAAA,IAClC,iBAAiB;AAAA,EACnB;AACA,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,2BAA2B,SAAS,UAAU,QAAQ,aAAa;AAAA,EACpF,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,UAAM,QAAQ,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN,SAAS;AAAA,QACP,GAAG;AAAA,QACH,OAAO,QAAQ,MAAM,CAAC,2BAA2B;AAAA,MACnD;AAAA,IACF,CAAC;AACD,UAAM,IAAI;AAAA,MACR,6BAA6B,SAAS,OAAO,cAAc,SAAS,SAAS,MAAM,OAAO;AAAA,MAC1F,EAAE,OAAO,MAAM;AAAA,IACjB;AAAA,EACF;AACA,QAAM,SAAS,qBAAqB,MAAM;AAE1C,MAAI,OAAO,SAAS,0BAA0B,GAAG;AAC/C,UAAM,QAAQ,iBAAiB,EAAE,MAAM,qBAAqB,QAAQ,CAAC;AACrE;AAAA,EACF;AAGA,QAAM,eAAe,2BAA2B,MAAM;AACtD,QAAM,WAAW,uBAAuB,MAAM;AAC9C,MAAI,gBAAgB,aAAa,QAAQ,aAAa,GAAG;AACvD,UAAM,OACJ,OAAO,SAAS,8BACZ,OAAO,MAAM,CAAC,2BAA2B,IACzC;AACN,UAAM,SAAS,eACX,gDAAgD,SAAS,SAAS,QAClE,aAAa,OACX,gCACA,oBAAoB,QAAQ;AAClC,UAAM,UAAU,IAAI;AAAA,MAClB,6BAA6B,SAAS,OAAO,cAAc,SAAS,SAAS,uBAAuB,MAAM,GAAG,OAAO;AAAA,EAAM,IAAI,KAAK,EAAE;AAAA,IACvI;AACA,UAAM,QAAQ,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN,SAAS;AAAA,QACP,GAAG;AAAA,QACH,OAAO,QAAQ,QAAQ,MAAM,CAAC,2BAA2B;AAAA,MAC3D;AAAA,IACF,CAAC;AACD,UAAM;AAAA,EACR;AACA,QAAM,QAAQ,iBAAiB;AAAA,IAC7B,MAAM;AAAA,IACN,SAAS,EAAE,GAAG,SAAS,SAAS,MAAM;AAAA,EACxC,CAAC;AACH;AAEA,eAAsB,uBACpB,SACA,WACA,UAAuC,EAAE,aAAa,CAAC,EAAE,GAC1C;AACf,QAAM,UAAU;AAAA,IACd,MAAM;AAAA,IACN,iBAAiB,UAAU;AAAA,EAC7B;AACA,QAAM,QAAQ,iBAAiB;AAAA,IAC7B,MAAM;AAAA,IACN;AAAA,EACF,CAAC;AACD,MAAI;AASF,UAAM,gBAAgB;AAAA,MACpB,GAAI,QAAQ,iBAAiB,CAAC;AAAA,MAC9B,GAAI,QAAQ,eAAe,EAAE,QAAQ,QAAQ,aAAa,IAAI,CAAC;AAAA,IACjE;AACA,UAAM,wBAAwB,QAAQ,yBAAyB,CAAC;AAChE,UAAM,aAAa;AAAA,MACjB,yBAAyB,aAAa;AAAA,MACtC,qCAAqC,qBAAqB;AAAA,IAC5D,EACG,OAAO,OAAO,EACd,KAAK,IAAI;AACZ,UAAM,eAAe,uBAAuB,WAAW,qBAAqB;AAC5E,UAAM,UAAU,aAAa;AAAA,EAAW,UAAU;AAAA,EAAK,YAAY,KAAK;AACxE,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,QACE,KAAK;AAAA,QACL,SAAS;AAAA,QACT,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,QAChD,aAAa;AAAA,QACb,iBAAiB;AAAA,MACnB;AAAA,MACA,QAAQ;AAAA,IACV;AACA,kCAA8B,QAAQ,uBAAuB;AAC7D,UAAM,QAAQ,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,QAAQ,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN,SAAS;AAAA,QACP,GAAG;AAAA,QACH,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D;AAAA,IACF,CAAC;AACD,UAAM;AAAA,EACR;AACF;AAEO,SAAS,uBAA+B;AAC7C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEO,SAAS,uBAAuB,QAAgC;AACrE,MAAI,OAAO,WAAW,UAAU;AAC9B,UAAM,QAAQ,OAAO,MAAM,kCAAkC;AAC7D,WAAO,QAAQ,OAAO,MAAM,CAAC,CAAC,IAAI;AAAA,EACpC;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,WAAO;AAAA,EACT;AACA,QAAM,YAAY;AAMlB,aAAW,SAAS,CAAC,UAAU,UAAU,UAAU,WAAW,UAAU,MAAM,UAAU,MAAM,GAAG;AAC/F,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,qBAAqB,QAAyB;AAC5D,MAAI,OAAO,WAAW,UAAU;AAC9B,UAAM,cAAc,OAAO,QAAQ,SAAS;AAC5C,WAAO,eAAe,IAAI,OAAO,MAAM,cAAc,UAAU,MAAM,EAAE,KAAK,IAAI,OAAO,KAAK;AAAA,EAC9F;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,WAAO;AAAA,EACT;AACA,QAAM,YAAY;AAKlB,SAAO,CAAC,UAAU,QAAQ,UAAU,QAAQ,UAAU,MAAM,EACzD,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,EAChF,KAAK,IAAI;AACd;AAEA,SAAS,8BAA8B,QAAiB,WAAyB;AAC/E,QAAM,SAAS,qBAAqB,MAAM;AAC1C,MAAI,2BAA2B,MAAM,GAAG;AACtC,UAAM,IAAI;AAAA,MACR,GAAG,SAAS,uDAAuD,SAAS;AAAA,EAAM,MAAM,KAAK,EAAE;AAAA,IACjG;AAAA,EACF;AACA,QAAM,WAAW,uBAAuB,MAAM;AAC9C,MAAI,aAAa,QAAQ,aAAa,GAAG;AACvC,UAAM,IAAI;AAAA,MACR,GAAG,SAAS,0BAA0B,QAAQ,GAAG,SAAS;AAAA,EAAM,MAAM,KAAK,EAAE;AAAA,IAC/E;AAAA,EACF;AACA,MAAI,aAAa,MAAM;AACrB,UAAM,IAAI,MAAM,UAAU,GAAG,SAAS,qCAAqC;AAAA,EAC7E;AACF;AAEO,SAAS,2BAA2B,QAA0B;AACnE,MAAI,OAAO,WAAW,UAAU;AAC9B,WAAO,uCAAuC,KAAK,MAAM;AAAA,EAC3D;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,WAAO;AAAA,EACT;AACA,QAAM,YAAY;AAClB,SAAO,OAAO,UAAU,cAAc,YAAY,OAAO,UAAU,eAAe;AACpF;AAEA,SAAS,yBAAyB,aAA8C;AAC9E,QAAM,WAAW,YAAY,mBAAmB,YAAY;AAC5D,QAAM,eAAe,YAAY,uBAAuB,YAAY;AACpE,QAAM,WAAW,YAAY,mBAAmB,YAAY;AAC5D,SAAO,QAAQ,YAAY,gBAAgB,QAAQ;AACrD;AAEA,eAAsB,qBACpB,SACA,UAAuC,EAAE,aAAa,CAAC,EAAE,GAC1C;AACf,QAAM,UAAU;AAAA,IACd,MAAM;AAAA,IACN,SAAS;AAAA,EACX;AACA,QAAM,QAAQ,iBAAiB;AAAA,IAC7B,MAAM;AAAA,IACN;AAAA,EACF,CAAC;AACD,MAAI;AACF,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,QACE,KAAK,qBAAqB;AAAA,QAC1B,SAAS;AAAA,QACT,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,QAChD,aAAa;AAAA,QACb,iBAAiB;AAAA,MACnB;AAAA,MACA,QAAQ;AAAA,IACV;AACA,kCAA8B,QAAQ,sBAAsB;AAC5D,UAAM,QAAQ,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,QAAQ,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN,SAAS;AAAA,QACP,GAAG;AAAA,QACH,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D;AAAA,IACF,CAAC;AACD,UAAM;AAAA,EACR;AACF;AAEA,SAAS,uBAAuB,UAA4B;AAC1D,QAAM,WAAW,SAAS,qBAAqB,QAAQ,QAAQ,EAAE;AACjE,MAAI,CAAC,YAAY,CAAC,SAAS,uBAAuB;AAChD,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AACA,SAAO,GAAG,QAAQ,uBAAuB,SAAS,qBAAqB;AACzE;AAEO,SAAS,wBACd,UACA,SACoC;AACpC,MAAI,CAAC,SAAS,sBAAuB,QAAO;AAC5C,QAAM,aAAa,QAAQ,QAAQ,QAAQ,EAAE,EAAE,YAAY;AAC3D,MAAI,WAAW,SAAS,YAAY,GAAG;AACrC,WAAO;AAAA,EACT;AACA,SAAO,EAAE,eAAe,SAAS,sBAAsB;AACzD;AASA,IAAI,yBAAwC;AAE5C,SAAS,mBAA2B;AAClC,QAAM,YAAY,QAAQ,cAAc,YAAY,GAAG,CAAC;AACxD,QAAM,WACJ;AAAA,IACE,KAAK,WAAW,oCAAoC;AAAA,IACpD,KAAK,WAAW,MAAM,OAAO,oCAAoC;AAAA,EACnE,EAAE,KAAK,CAAC,cAAc,WAAW,SAAS,CAAC,KAC3C,KAAK,WAAW,oCAAoC;AACtD,MAAI,aAAa,QAAQ,IAAI,GAAG,QAAQ,GAAG;AACzC,WAAO;AAAA,EACT;AACA,MAAI,CAAC,wBAAwB;AAC3B,6BAAyB;AAAA,MACvB;AAAA,MACA,KAAK,QAAQ,IAAI,GAAG,aAAa,oCAAoC;AAAA,IACvE;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,UAAkB,QAAwB;AACpE,QAAM,MAAM,GAAG,MAAM,QAAQ,QAAQ,GAAG;AACxC,SAAO,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC5C,YAAU,QAAQ,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;AAC3C,SAAO,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AACzC,SAAO,QAAQ,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC/C,MAAI;AACF,eAAW,KAAK,MAAM;AAAA,EACxB,SAAS,OAAO;AAEd,WAAO,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC5C,QAAI,CAAC,WAAW,MAAM,GAAG;AACvB,YAAM;AAAA,IACR;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,aAAa,MAAc,WAA4B;AAC9D,QAAM,eAAe,SAAS,MAAM,SAAS;AAC7C,SAAO,iBAAiB,MAAO,CAAC,aAAa,WAAW,IAAI,KAAK,CAAC,WAAW,YAAY;AAC3F;AAYO,SAAS,8BACd,YACA,qBAAkC,CAAC,GACV;AACzB,QAAM,aAAa,iBAAiB;AACpC,QAAM,UAAU,wBAAwB,EAAE,KAAK,WAAW,CAAC;AAC3D,MAAI,WAAW,WAAW,KAAK,mBAAmB,WAAW,GAAG;AAC9D,WAAO;AAAA,EACT;AACA,QAAM,WAAkC,CAAC;AACzC,aAAW,QAAQ,qBAAqB,UAAU,GAAG;AACnD,aAAS,IAAI,IAAI,SAAS,EAAE,KAAK,KAAK,YAAY,IAAI,EAAE,CAAC;AAAA,EAC3D;AACA,QAAM,eAAkC,CAAC;AACzC,QAAM,kBAAkB,oBAAI,IAAY;AACxC,aAAW,SAAS,oBAAoB;AACtC,4BAAwB,MAAM,IAAI;AAClC,UAAM,MAAM,MAAM,KAAK,YAAY;AACnC,QAAI,gBAAgB,IAAI,GAAG,GAAG;AAC5B,YAAM,IAAI,MAAM,iCAAiC,MAAM,IAAI,EAAE;AAAA,IAC/D;AACA,oBAAgB,IAAI,GAAG;AACvB,8BAA0B,UAAU,GAAG;AACvC,aAAS,MAAM,IAAI,IAAI,kBAAkB,KAAK;AAC9C,iBAAa,KAAK;AAAA,MAChB,MAAM,MAAM;AAAA,MACZ,aAAa,qBAAqB,KAAK;AAAA,MACvC,MAAM,MAAM;AAAA,IACd,CAAC;AAAA,EACH;AACA,QAAM,YAA+B,CAAC;AACtC,QAAM,eAAe,oBAAI,IAAY;AACrC,aAAW,SAAS,YAAY;AAC9B,4BAAwB,MAAM,IAAI;AAClC,QAAI,aAAa,IAAI,MAAM,KAAK,YAAY,CAAC,GAAG;AAC9C,YAAM,IAAI,MAAM,8BAA8B,MAAM,IAAI,EAAE;AAAA,IAC5D;AACA,iBAAa,IAAI,MAAM,KAAK,YAAY,CAAC;AACzC,8BAA0B,UAAU,MAAM,KAAK,YAAY,CAAC;AAC5D,aAAS,MAAM,IAAI,IAAI,kBAAkB,KAAK;AAC9C,cAAU,KAAK;AAAA,MACb,MAAM,MAAM;AAAA,MACZ,aAAa,qBAAqB,KAAK;AAAA,MACvC,MAAM,MAAM;AAAA,IACd,CAAC;AAAA,EACH;AACA,SAAO;AAAA,IACL,QAAQ,IAAI,EAAE,SAAS,CAAC;AAAA,IACxB,UAAU,CAAC,UAAU,eAAe;AAAA,MAClC,IAAI,QAAQ,WAAW,UAAU,UAAU,KAAK,CAAC,GAAG;AAAA,QAClD,CAAC,UACC,CAAC,aAAa,KAAK,MAAM,QAAQ,MAAM,MAAM,YAAY,CAAC,KAC1D,CAAC,gBAAgB,KAAK,MAAM,QAAQ,MAAM,MAAM,YAAY,CAAC;AAAA,MACjE;AAAA,MACA,GAAG,aAAa;AAAA,QACd,CAAC,UAAU,CAAC,aAAa,KAAK,MAAM,QAAQ,MAAM,MAAM,YAAY,CAAC;AAAA,MACvE;AAAA,MACA,GAAG;AAAA,IACL;AAAA,EACF;AACF;AAEA,SAAS,yBACP,mBACA,eACA,YACA,eACoC;AACpC,QAAM,oBAAoB,qBAAqB,iBAAiB,CAAC,EAAE,IAAI,CAAC,UAAU;AAAA,IAChF,IAAI,WAAW,IAAI;AAAA,IACnB;AAAA,IACA,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,eAAe;AAAA,IACf,QAAQ;AAAA,EACV,EAAE;AACF,QAAM,kBAAkB,IAAI,IAAI,cAAc,IAAI,CAAC,UAAU,MAAM,KAAK,YAAY,CAAC,CAAC;AACtF,QAAM,eAAe,IAAI,IAAI,WAAW,IAAI,CAAC,UAAU,MAAM,KAAK,YAAY,CAAC,CAAC;AAChF,QAAM,yBAAyB;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,kBAAkB,IAAI,IAAI,uBAAuB,IAAI,CAAC,UAAU,MAAM,KAAK,YAAY,CAAC,CAAC;AAC/F,QAAM,WAAW,kBAAkB;AAAA,IAAO,CAAC,cACzC,gBAAgB,IAAI,UAAU,KAAK,YAAY,CAAC;AAAA,EAClD;AACA,SAAO;AAAA,IACL,GAAG,kBAAkB;AAAA,MACnB,CAAC,cACC,CAAC,gBAAgB,IAAI,UAAU,KAAK,YAAY,CAAC,KACjD,CAAC,aAAa,IAAI,UAAU,KAAK,YAAY,CAAC,KAC9C,CAAC,gBAAgB,IAAI,UAAU,KAAK,YAAY,CAAC;AAAA,IACrD;AAAA,IACA,GAAG,SAAS;AAAA,MACV,CAAC,cACC,CAAC,aAAa,IAAI,UAAU,KAAK,YAAY,CAAC,KAC9C,CAAC,gBAAgB,IAAI,UAAU,KAAK,YAAY,CAAC;AAAA,IACrD;AAAA,IACA,GAAG,WAAW,IAAI,CAAC,WAAW;AAAA,MAC5B,IAAI,QAAQ,MAAM,IAAI;AAAA,MACtB,MAAM,MAAM;AAAA,MACZ,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,eAAe;AAAA,MACf,QAAQ;AAAA,IACV,EAAE;AAAA,IACF,GAAG,uBAAuB,IAAI,CAAC,WAAW;AAAA,MACxC,IAAI,WAAW,MAAM,IAAI;AAAA,MACzB,MAAM,MAAM;AAAA,MACZ,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,eAAe;AAAA,MACf,QAAQ;AAAA,IACV,EAAE;AAAA,EACJ;AACF;AAEA,SAAS,gCACP,YACA,eACA,eACa;AACb,QAAM,aAAa,oBAAI,IAAuB;AAC9C,aAAW,SAAS,CAAC,GAAG,eAAe,GAAG,UAAU,GAAG;AACrD,eAAW,IAAI,MAAM,KAAK,YAAY,GAAG,KAAK;AAAA,EAChD;AACA,QAAM,eAAe,IAAI;AAAA,IACvB,qBAAqB,iBAAiB,CAAC,EAAE,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC;AAAA,EAC3E;AACA,QAAM,WAAW,oBAAI,IAAuB;AAC5C,aAAW,SAAS,eAAe;AACjC,4BAAwB,MAAM,IAAI;AAClC,UAAM,MAAM,MAAM,KAAK,YAAY;AACnC,QAAI,aAAa,IAAI,GAAG,GAAG;AACzB,YAAM,IAAI,MAAM,kBAAkB,MAAM,IAAI,kCAAkC;AAAA,IAChF;AACA,UAAM,WAAW,SAAS,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG;AACxD,QAAI,UAAU;AACZ,UAAI,iBAAiB,QAAQ,MAAM,iBAAiB,KAAK,GAAG;AAC1D,cAAM,IAAI,MAAM,sCAAsC,MAAM,IAAI,GAAG;AAAA,MACrE;AACA;AAAA,IACF;AACA,aAAS,IAAI,KAAK,KAAK;AAAA,EACzB;AACA,SAAO,CAAC,GAAG,SAAS,OAAO,CAAC;AAC9B;AAEA,SAAS,iBAAiB,OAA0B;AAClD,SAAO,KAAK;AAAA,IACV,CAAC,GAAG,MAAM,KAAK,EACZ,KAAK,CAAC,MAAM,UAAU,KAAK,KAAK,cAAc,MAAM,IAAI,CAAC,EACzD,IAAI,CAAC,EAAE,MAAM,QAAQ,OAAO,EAAE,MAAM,QAAQ,EAAE;AAAA,EACnD;AACF;AAEA,SAAS,0BAA0B,UAAiC,SAAuB;AACzF,aAAW,QAAQ,OAAO,KAAK,QAAQ,GAAG;AACxC,QAAI,KAAK,YAAY,MAAM,SAAS;AAClC,aAAO,SAAS,IAAI;AAAA,IACtB;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,MAAwB;AACpD,SAAO,YAAY,MAAM,EAAE,eAAe,KAAK,CAAC,EAC7C,OAAO,CAAC,UAAU,MAAM,YAAY,KAAK,WAAW,KAAK,MAAM,MAAM,MAAM,UAAU,CAAC,CAAC,EACvF,IAAI,CAAC,UAAU,MAAM,IAAI,EACzB,KAAK;AACV;AAOA,SAAS,kBAAkB,OAAuB;AAChD,QAAM,OAAyB,EAAE,MAAM,oBAAI,IAAI,GAAG,OAAO,oBAAI,IAAI,EAAE;AACnE,aAAW,aAAa,MAAM,OAAO;AACnC,UAAM,WAAW,sBAAsB,MAAM,MAAM,UAAU,IAAI;AACjE,QAAI,OAAO;AACX,eAAW,WAAW,SAAS,MAAM,GAAG,EAAE,GAAG;AAC3C,UAAI,KAAK,MAAM,IAAI,OAAO,GAAG;AAC3B,cAAM,IAAI,MAAM,cAAc,MAAM,IAAI,SAAS,OAAO,iCAAiC;AAAA,MAC3F;AACA,UAAI,OAAO,KAAK,KAAK,IAAI,OAAO;AAChC,UAAI,CAAC,MAAM;AACT,eAAO,EAAE,MAAM,oBAAI,IAAI,GAAG,OAAO,oBAAI,IAAI,EAAE;AAC3C,aAAK,KAAK,IAAI,SAAS,IAAI;AAAA,MAC7B;AACA,aAAO;AAAA,IACT;AACA,UAAM,WAAW,SAAS,SAAS,SAAS,CAAC;AAC7C,QAAI,KAAK,KAAK,IAAI,QAAQ,KAAK,KAAK,MAAM,IAAI,QAAQ,GAAG;AACvD,YAAM,IAAI,MAAM,qCAAqC,MAAM,IAAI,KAAK,UAAU,IAAI,EAAE;AAAA,IACtF;AACA,SAAK,MAAM,IAAI,UAAU,UAAU,OAAO;AAAA,EAC5C;AACA,MAAI,CAAC,KAAK,MAAM,IAAI,UAAU,GAAG;AAC/B,UAAM,IAAI,MAAM,cAAc,MAAM,IAAI,uCAAuC;AAAA,EACjF;AACA,SAAO,qBAAqB,IAAI;AAClC;AAEA,SAAS,qBAAqB,MAA6B;AACzD,QAAM,WAAkC,CAAC;AACzC,aAAW,CAAC,MAAM,KAAK,KAAK,KAAK,MAAM;AACrC,aAAS,IAAI,IAAI,qBAAqB,KAAK;AAAA,EAC7C;AACA,aAAW,CAAC,MAAM,OAAO,KAAK,KAAK,OAAO;AACxC,aAAS,IAAI,IAAI,KAAK,EAAE,QAAQ,CAAC;AAAA,EACnC;AACA,SAAO,IAAI,EAAE,SAAS,CAAC;AACzB;AAEA,SAAS,wBAAwB,MAAoB;AACnD,MAAI,sBAAsB,MAAM,IAAI,EAAE,WAAW,GAAG;AAClD,UAAM,IAAI,MAAM,4BAA4B,IAAI,EAAE;AAAA,EACpD;AACF;AAEA,SAAS,sBAAsB,WAAmB,MAAwB;AACxE,QAAM,WAAW,KAAK,MAAM,GAAG;AAC/B,MACE,KAAK,WAAW,GAAG,KACnB,KAAK,SAAS,IAAI,KAClB,SAAS,KAAK,CAAC,YAAY,QAAQ,WAAW,KAAK,YAAY,OAAO,YAAY,IAAI,GACtF;AACA,UAAM,IAAI,MAAM,oCAAoC,SAAS,KAAK,IAAI,EAAE;AAAA,EAC1E;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,OAA0B;AACtD,QAAM,WAAW,MAAM,aAAa,KAAK;AACzC,MAAI,UAAU;AACZ,WAAO;AAAA,EACT;AACA,QAAM,WAAW,MAAM,MAAM,KAAK,CAAC,cAAc,UAAU,SAAS,UAAU,GAAG,WAAW;AAC5F,SAAO,4BAA4B,QAAQ,KAAK;AAClD;AAEA,SAAS,4BAA4B,UAAiC;AACpE,QAAM,QAAQ,SAAS,MAAM,OAAO;AACpC,MAAI,MAAM,CAAC,GAAG,KAAK,MAAM,OAAO;AAC9B,WAAO;AAAA,EACT;AACA,QAAM,MAAM,MAAM,UAAU,CAAC,MAAM,UAAU,QAAQ,KAAK,KAAK,KAAK,MAAM,KAAK;AAC/E,MAAI,QAAQ,IAAI;AACd,WAAO;AAAA,EACT;AACA,QAAM,YAAsB,CAAC;AAC7B,MAAI,gBAAgB;AACpB,aAAW,QAAQ,MAAM,MAAM,GAAG,GAAG,GAAG;AACtC,UAAM,QAAQ,KAAK,MAAM,uBAAuB;AAChD,QAAI,OAAO;AACT,YAAM,SAAS,MAAM,CAAC,EAAG,KAAK;AAC9B,UAAI,UAAU,WAAW,QAAQ,WAAW,OAAO,WAAW,OAAO,WAAW,MAAM;AACpF,eAAO,wBAAwB,MAAM;AAAA,MACvC;AACA,sBAAgB;AAChB;AAAA,IACF;AACA,QAAI,eAAe;AACjB,UAAI,SAAS,KAAK,IAAI,GAAG;AACvB,kBAAU,KAAK,KAAK,KAAK,CAAC;AAC1B;AAAA,MACF;AACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,aAAa,UAAU,KAAK,GAAG,EAAE,KAAK;AAC5C,SAAO,aAAa,aAAa;AACnC;AAEA,SAAS,wBAAwB,OAAuB;AACtD,MACE,MAAM,UAAU,KAChB,MAAM,CAAC,MAAM,MAAM,MAAM,SAAS,CAAC,MAClC,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,MAAM,MAClC;AACA,WAAO,MAAM,MAAM,GAAG,EAAE;AAAA,EAC1B;AACA,SAAO;AACT;AAEA,SAAS,gBAAmB,QAAoE;AAC9F,SAAO,OAAQ,OAA4B,OAAO,aAAa,MAAM;AACvE;AAEA,SAAS,WAAW,OAAwB;AAC1C,SAAO,KAAK,UAAU,SAAS,KAAK,CAAC;AACvC;AAEA,SAAS,SAAS,OAAyB;AACzC,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,IAAI,QAAQ;AAAA,EAC3B;AACA,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,WAAO,OAAO;AAAA,MACZ,OAAO,QAAQ,KAAK,EACjB,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,EACrC,IAAI,CAAC,CAAC,KAAK,MAAM,MAAM,CAAC,KAAK,SAAS,MAAM,CAAC,CAAC;AAAA,IACnD;AAAA,EACF;AACA,SAAO;AACT;AACA,SAAS,qBAAqB,MAAuB;AACnD,QAAM,YAAY;AAKlB,QAAM,OAAO,WAAW,YAAY,WAAW,QAAQ,WAAW,SAAS;AAC3E,SAAO,OAAO,SAAS,WAAW,OAAO;AAC3C;","names":["collectSandboxEnvironment","CAPABILITY_DESCRIPTORS","redactSensitiveText","OpenAI","OpenAI","isRecord","isRecord","tool","isRecord","skills","openaiTool","openaiIncludes","webSearchTool","entry","response","isRecord","OpenAI","getCompatibleToolChoice","tool","file","isMessageItem","isRecord","response","tool","getResponseFormat","getCompatibleToolChoice","OpenAI","isRecord","child","isRecord","OpenAI","iterator","OpenAI","OpenAI","logger","resolveClient","OpenAI","METADATA","metadata_default","HEADERS","metadata_default","logger","OpenAI","boundModelToolOutputItems","createHash","tool","tool","RESULT_TYPE_BY_CALL_TYPE","RESULT_TYPES","itemType","window","createHash","skills","createHash","OpenAI","usage","summary","redactSensitiveText","agent","tool","boundModelToolOutputItems","collectSandboxEnvironment","runAs","fileDownloads","resourceClient","CAPABILITY_DESCRIPTORS","config","createHash"]}
+{"version":3,"sources":["../src/index.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/openaiProvider.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/metadata.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/defaults.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/openaiResponsesModel.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/logger.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/rawModelEvents.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/retryAdvice.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/responsesWebSocketConnection.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/responsesTransportUtils.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/tools.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/utils/providerData.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/utils/modelSettings.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/responsesUtils.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/openaiChatCompletionsStreaming.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/openaiChatCompletionsConverter.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/openaiChatCompletionsModel.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/openaiTracingExporter.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/memory/openaiConversationsSession.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/memory/openaiSessionApi.ts","../../../node_modules/.bun/@openai+agents-openai@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents-openai/src/memory/openaiResponsesCompactionSession.ts","../../../node_modules/.bun/@openai+agents-realtime@0.13.3+6faab70c3ac8f376/node_modules/@openai/agents-realtime/src/metadata.ts","../../../node_modules/.bun/@openai+agents-realtime@0.13.3+6faab70c3ac8f376/node_modules/@openai/agents-realtime/src/utils.ts","../../../node_modules/.bun/@openai+agents-realtime@0.13.3+6faab70c3ac8f376/node_modules/@openai/agents-realtime/src/items.ts","../../../node_modules/.bun/@openai+agents-realtime@0.13.3+6faab70c3ac8f376/node_modules/@openai/agents-realtime/src/logger.ts","../../../node_modules/.bun/@openai+agents-realtime@0.13.3+6faab70c3ac8f376/node_modules/@openai/agents-realtime/src/openaiRealtimeEvents.ts","../../../node_modules/.bun/@openai+agents-realtime@0.13.3+6faab70c3ac8f376/node_modules/@openai/agents-realtime/src/shims/shims-node.ts","../../../node_modules/.bun/@openai+agents-realtime@0.13.3+6faab70c3ac8f376/node_modules/@openai/agents-realtime/src/tool.ts","../../../node_modules/.bun/@openai+agents@0.13.3+bd37e07cd49ea605/node_modules/@openai/agents/src/index.ts","../src/screenshot-error-card.ts","../src/history-sanitizer.ts","../src/codex-tool-search.ts","../src/context-compaction.ts","../src/sandbox-computer.ts","../src/workspace-skills.ts","../src/usage-telemetry.ts"],"sourcesContent":["import type {\n  ConfiguredModel,\n  ModelProviderApi,\n  ResolvedModelProvider,\n  Settings,\n} from \"@opengeni/config\";\nimport {\n  AGENT_INSTRUCTIONS_CORE_PLACEHOLDER,\n  collectSandboxEnvironment,\n  firstPartyMcpBaseUrl,\n  resolveModelProvider,\n  sandboxLifecycleHookIds,\n} from \"@opengeni/config\";\nimport {\n  approvalIdentifier,\n  CAPABILITY_DESCRIPTORS,\n  DEFAULT_FIRST_PARTY_MCP_PERMISSIONS,\n  DEFAULT_FIRST_PARTY_MCP_TOOLS,\n  assertUniqueResourceMountPaths,\n  gitCredentialBindingIdForRepository,\n  gitCredentialProviderForRepository,\n  isClearedRunStateBlob,\n  normalizeRepositorySubpath,\n  normalizeResourceMountPath,\n  prefixedMcpToolName as sharedPrefixedMcpToolName,\n  resourceMountPath,\n  redactSensitiveText,\n  sessionEventMediaPreview,\n  sessionEventMediaPreviewFromDataUrl,\n  signDelegatedAccessToken,\n  RequestHumanInputToolInput,\n  type GitCredentialProvider,\n  type GitCredentialTransport,\n  type HumanInputResponse,\n  type McpServerConnectionRef,\n  type Permission,\n  type FirstPartyMcpToolName,\n  type LatencyMode,\n  type ReasoningEffort,\n  type ResourceRef,\n  type SessionEventType,\n  type SessionEventMediaPreview,\n  type ToolAuthNeededPayload,\n  type ToolRef,\n} from \"@opengeni/contracts\";\nimport {\n  MCP_MAX_CONCURRENT_SERVER_OPERATIONS,\n  MCP_MAX_TOOL_RESULT_BYTES,\n  McpAggregateToolListBudget,\n  assertMcpPayloadWithinBytes,\n  assertMcpServerSelectionWithinBounds,\n  assertMcpToolListWithinBounds,\n  boundedParallelMap,\n  cancelMcpResponseBody,\n  guardedMcpFetch,\n  mcpOuterConnectTimeoutMs,\n  undiciFetch,\n} from \"./mcp-network\";\nimport {\n  Agent,\n  AgentsError,\n  connectMcpServers,\n  OpenAIProvider,\n  setDefaultModelProvider,\n  MaxTurnsExceededError,\n  MCPServerStreamableHttp,\n  // Provider-bound Model instances. Both are re-exported from\n  // @openai/agents-openai via `export * from '@openai/agents-openai'` in\n  // @openai/agents' index (0.11.6), so the multi-provider routing imports them\n  // from the same entrypoint as the rest of the SDK rather than reaching into\n  // the openai subpackage. OpenAIChatCompletionsModel speaks /v1/chat/completions\n  // (the registry \"chat\" wire API, e.g. Fireworks); OpenAIResponsesModel speaks\n  // /v1/responses (the built-in OpenAI/Azure \"responses\" wire API). Both bind a\n  // model id to a specific OpenAI client, which is what routes a turn to its\n  // provider without touching the global default client.\n  OpenAIChatCompletionsModel,\n  OpenAIResponsesModel,\n  RunState,\n  isOpenAIResponsesRawModelStreamEvent,\n  run,\n  Runner,\n  setDefaultOpenAIClient,\n  setDefaultOpenAIKey,\n  setOpenAIResponsesTransport,\n  setTracingDisabled,\n  tool as agentTool,\n  // Hosted web_search tool factory. Re-exported from @openai/agents-openai via\n  // `export * from '@openai/agents-openai'` in @openai/agents' index (0.11.6);\n  // it returns a { type: 'hosted_tool', providerData: { type: 'web_search' } }\n  // descriptor the OpenAI Responses model serializes into request.tools[].\n  webSearchTool,\n  // The SDK's V4A-diff applier — the apply_patch host the filesystem capability's\n  // editor uses. The agent-loop-free sandbox leaf cannot import it (it lives behind\n  // the `@openai/agents` root the leaf forbids), so the barrel imports it here and\n  // injects it into the selfhosted session's `createEditor` via setSelfhostedApplyDiff\n  // (below, right after the leaf re-export). This lets a selfhosted active backend\n  // apply file edits over its NATS fs ops using the SDK's exact diff semantics.\n  applyDiff,\n  type AgentInputItem,\n  type CallModelInputFilter,\n  type MCPServer,\n  type MCPToolErrorFunction,\n  type Model,\n  type ModelRequest,\n  type ModelProvider,\n  type RunStreamEvent,\n  type Tool,\n} from \"@openai/agents\";\nimport { localDirLazySkillSource } from \"@openai/agents/sandbox/local\";\nimport {\n  Capabilities,\n  Manifest,\n  SandboxAgent,\n  azureBlobMount,\n  dir,\n  file,\n  filesystem,\n  gitRepo,\n  inContainerMountStrategy,\n  localDir,\n  s3Mount,\n  shell,\n  skills,\n  type Dir,\n  type Entry,\n  type LocalDirLazySkillSource,\n  type SandboxClient,\n  type SandboxSessionLike,\n  type SandboxSessionState,\n  type SandboxRunConfig,\n  type SkillIndexEntry,\n} from \"@openai/agents/sandbox\";\nimport { ModalCloudBucketMountStrategy } from \"@openai/agents-extensions/sandbox/modal\";\nimport OpenAI from \"openai\";\nimport {\n  CODEX_APPS_MCP_SERVER_ID,\n  CODEX_MODEL_ID_PREFIX,\n  CODEX_ORIGINATOR,\n  CODEX_RESPONSE_SDK_OUTER_TIMEOUT_MS,\n  boundModelToolOutputItems,\n  codexAppsSanitizingFetch,\n  codexRequestStorage,\n  codexSubscriptionFetch,\n} from \"@opengeni/codex\";\nimport { cpSync, existsSync, mkdirSync, readdirSync, renameSync, rmSync } from \"node:fs\";\nimport { createHash } from \"node:crypto\";\nimport { dirname, isAbsolute, join, posix as posixPath, relative } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nimport {\n  computerCallNormalizingFetch,\n  normalizeComputerCallActions,\n  sanitizeHistoryItemsForModel,\n} from \"./history-sanitizer\";\nimport { installCodexToolSearch } from \"./codex-tool-search\";\nimport {\n  CompactionNeededError,\n  CompactionProviderResponseError,\n  EmptyCompactionSummaryError,\n  SUMMARY_BUFFER_TOKENS,\n  buildRemoteCompactionV2PromptInput,\n  extractRemoteCompactionV2OutputItem,\n  compactionThresholdTokens,\n  estimateCompleteModelInput,\n  estimateSerializedValueTokens,\n  hasModelGeneratedItem,\n  renderCompactionPromptInputForChat,\n  type CompleteModelInputFootprint,\n  type ProviderContextTokenSignal,\n} from \"./context-compaction\";\nimport {\n  createSandboxClient,\n  desktopCapableBackend,\n  restoredSandboxSessionStateFromEntry,\n  setSelfhostedApplyDiff,\n  toolspaceTokenFileFromEnvironment,\n  withToolspaceTokenClient,\n  withToolspaceTokenSession,\n  withRunCredentialsClient,\n  withRunCredentialsSession,\n  type RunCredentialSessionReady,\n} from \"./sandbox\";\nimport { runWithToolCallCorrelation } from \"./sandbox/op-correlation\";\nimport { shellToolspacePath } from \"./sandbox/toolspace-token\";\nimport {\n  createTurnToolCancellationController,\n  TurnSandboxCommandCancelledError,\n  wrapCapabilityToolsForTurnCancellation,\n  type TurnSandboxCommandArgs,\n  type TurnSandboxCommandSession,\n  type TurnToolCancellationFence,\n} from \"./sandbox/turn-tool-cancellation\";\nimport { computerUse, type ComputerToolMode } from \"./sandbox-computer\";\nimport type { RuntimeMetricsHooks } from \"./metrics\";\nimport { workspaceSkills, type WorkspaceSkillSearchPath } from \"./workspace-skills\";\n\n// The Agents SDK's debug namespaces can otherwise serialize complete model\n// inputs/outputs and tool arguments/results. These getters read process.env on\n// every log call, so keep the process-global guard permanently enabled rather\n// than toggling it around concurrent turns.\nprocess.env.OPENAI_AGENTS_DONT_LOG_MODEL_DATA = \"1\";\nprocess.env.OPENAI_AGENTS_DONT_LOG_TOOL_DATA = \"1\";\n\nexport {\n  getSkillLibraryEntry,\n  isSkillLibraryEntryId,\n  listSkillLibraryEntries,\n  loadSkillLibrarySkill,\n  type SkillLibraryEntry,\n  type SkillLibraryFile,\n  type SkillLibrarySkill,\n} from \"./skill-library\";\n\nexport type { RuntimeMetricsHooks } from \"./metrics\";\nexport {\n  createTurnToolCancellationController,\n  TurnSandboxCommandCancelledError,\n} from \"./sandbox/turn-tool-cancellation\";\nexport type {\n  TurnSandboxCommandArgs,\n  TurnSandboxCommandSession,\n  TurnToolCancellationController,\n  TurnToolCancellationFence,\n} from \"./sandbox/turn-tool-cancellation\";\n\n// P4.3 computer-use surface (the agent's :0 driver). Re-exported from the barrel\n// so callers (the worker, live proofs) reach SandboxComputer/ComputerUseCapability\n// alongside the rest of the runtime. NOT part of the agent-loop-free leaf (it\n// imports computerTool from the @openai/agents root).\nexport {\n  SandboxComputer,\n  ComputerUseCapability,\n  computerUse,\n  ComputerUnavailableError,\n  ComputerReadOnlyError,\n  ComputerActionError,\n  type SandboxComputerOptions,\n  type ComputerUseArgs,\n  type ComputerToolMode,\n} from \"./sandbox-computer\";\n\n// The agent-loop-free sandbox leaf (createSandboxClient + resume/recovery\n// helpers + the config-owned env/port re-exports). Re-exported verbatim so the\n// barrel surface is unchanged for apps/worker while @opengeni/runtime/sandbox\n// stays importable by the API without the agent loop.\nexport * from \"./sandbox\";\n\n// Inject the SDK's V4A `applyDiff` into the selfhosted session's apply_patch editor\n// at module load. The leaf can't import `applyDiff` (agent-loop root), so the\n// barrel — which already imports `@openai/agents` — wires it once. A selfhosted\n// active backend can now apply file edits over its NATS fs ops with the SDK's exact\n// diff semantics; without this, `createEditor()` throws a clear \"not injected\" error\n// rather than mis-editing. Runs at import time, before any turn binds a capability.\nsetSelfhostedApplyDiff(\n  applyDiff as unknown as (input: string, diff: string, mode?: \"default\" | \"create\") => string,\n);\n\nexport {\n  elideSupersededViewImagePairs,\n  sanitizeHistoryItemsForModel,\n  stripReasoningEncryptedContent,\n  stripReasoningIdentityFromSerializedRunState,\n  neutralizeToolSearchItemsInSerializedRunState,\n} from \"./history-sanitizer\";\nexport type { HistoryItem } from \"./history-sanitizer\";\n\n// The provider-bound Model classes used by buildModelInstance/resolveTurnModel.\n// Re-exported so callers (and routing tests) can assert which wire API a\n// resolved turn was bound to — OpenAIChatCompletionsModel for registry \"chat\"\n// providers (Fireworks), OpenAIResponsesModel for the built-in \"responses\" path\n// — without reaching into @openai/agents directly.\nexport { OpenAIChatCompletionsModel, OpenAIResponsesModel } from \"@openai/agents\";\n\nexport {\n  CompactionNeededError,\n  CompactionProviderResponseError,\n  EmptyCompactionSummaryError,\n  buildCompactionPromptInput,\n  buildCompactionReplacementHistory,\n  compactionReplacementFingerprint,\n  compactionThresholdTokens,\n  clampCompactionThresholdRatio,\n  decideCompaction,\n  buildSummaryItem,\n  buildRemoteCompactionV2PromptInput,\n  buildRemoteV2ReplacementHistory,\n  extractRemoteCompactionV2OutputItem,\n  findCompactionNeededError,\n  isCompactionSummary,\n  isRemoteCompactionItem,\n  isRetainedRemoteV2Message,\n  latestCompactionReplacementFingerprint,\n  prepareCompactionPromptInput,\n  isUserMessage,\n  estimateTokens,\n  estimateTokensBreakdown,\n  estimateItemTokens,\n  estimateItemTokenBreakdown,\n  estimateOpaqueEncryptedModelVisibleBytes,\n  estimateOpaqueEncryptedTokens,\n  opaqueEncryptedContentLength,\n  estimateNativeImageTokens,\n  estimateCompleteModelInput,\n  estimateSerializedValueTokens,\n  hasModelGeneratedItem,\n  renderCompactionPromptInputForChat,\n  COMPACTION_SUMMARY_MARKER,\n  COMPACTION_PROMPT,\n  COMPACT_USER_MESSAGE_MAX_TOKENS,\n  REMOTE_V2_RETAINED_MESSAGE_TOKEN_BUDGET,\n  REMOTE_COMPACTION_V2_IMPLEMENTATION,\n  REMOTE_COMPACTION_V2_BETA_FEATURE,\n  DEFAULT_COMPACTION_THRESHOLD_RATIO,\n  MIN_COMPACTION_THRESHOLD_RATIO,\n  MAX_COMPACTION_THRESHOLD_RATIO,\n  SUMMARY_BUFFER_TOKENS,\n  SUMMARY_PREFIX,\n  USER_MESSAGE_TRUNCATION_MARKER,\n  UNKNOWN_IMAGE_TOKENS,\n  MAX_NATIVE_IMAGE_TOKENS,\n} from \"./context-compaction\";\nexport type {\n  CompactionDecision,\n  ModelInputTokenBreakdown,\n  NativeImageEstimateReason,\n  NativeImageTokenEstimate,\n  CompactionItem,\n  PreparedCompactionPromptInput,\n} from \"./context-compaction\";\nexport {\n  MAX_MODEL_USAGE_TOKEN_COUNT,\n  modelCallUsageTelemetry,\n  modelUsageTokenCountOrNull,\n  normalizeModelCallUsage,\n} from \"./usage-telemetry\";\nexport type {\n  ModelCallUsageInput,\n  ModelCallUsageNormalization,\n  ModelCallUsageTelemetry,\n} from \"./usage-telemetry\";\n\nensureReadableStreamFrom();\n\nconst SANDBOX_LIFECYCLE_COMMAND_TIMEOUT_MS = 120_000;\n\nexport type NormalizedRuntimeEvent = {\n  type: SessionEventType;\n  payload: unknown;\n};\n\nexport type ModelResponseUsage = {\n  responseId?: string;\n  serviceTier?: string;\n  usage: {\n    inputTokens?: number;\n    outputTokens?: number;\n    totalTokens?: number;\n    inputTokensDetails?: Record<string, number> | Array<Record<string, number>>;\n    outputTokensDetails?: Record<string, number> | Array<Record<string, number>>;\n    requestUsageEntries?: Array<{\n      inputTokens?: number;\n      input_tokens?: number;\n      outputTokens?: number;\n      output_tokens?: number;\n      totalTokens?: number;\n      total_tokens?: number;\n      inputTokensDetails?: Record<string, number>;\n      input_tokens_details?: Record<string, number>;\n      outputTokensDetails?: Record<string, number>;\n      output_tokens_details?: Record<string, number>;\n    }>;\n  };\n};\n\ntype RuntimeMcpTool = Awaited<ReturnType<MCPServer[\"listTools\"]>>[number];\n\ntype FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;\n\nexport type ResolveConnectionCredentialInput = {\n  workspaceId: string;\n  subjectId?: string;\n  serverId: string;\n  toolName?: string;\n  connectionRef: McpServerConnectionRef;\n  /** Exact MCP destination whose request would receive the resolved headers. */\n  destinationUrl: string;\n  forceRefresh?: boolean;\n};\n\nexport type ResolveConnectionCredentialResult =\n  | {\n      status: \"ok\";\n      headers: Record<string, string>;\n      connectionId: string;\n      expiresAt?: Date | null;\n    }\n  | {\n      status: \"auth_needed\";\n      reason: ToolAuthNeededPayload[\"reason\"];\n      providerDomain: string;\n      provider?: string;\n      connectionId?: string;\n      scopes?: string[];\n      resource?: string;\n      selectedResources?: McpServerConnectionRef[\"selectedResources\"];\n      authorizationUrl?: string;\n    };\n\nexport function ensureReadableStreamFrom(): void {\n  const ctor = globalThis.ReadableStream as\n    | (typeof ReadableStream & {\n        from?: <T>(source: Iterable<T> | AsyncIterable<T>) => ReadableStream<T>;\n      })\n    | undefined;\n  if (!ctor || typeof ctor.from === \"function\") {\n    return;\n  }\n  Object.defineProperty(ctor, \"from\", {\n    configurable: true,\n    writable: true,\n    value<T>(source: Iterable<T> | AsyncIterable<T>): ReadableStream<T> {\n      const iterator = isAsyncIterable(source)\n        ? source[Symbol.asyncIterator]()\n        : source[Symbol.iterator]();\n      return new ReadableStream<T>({\n        async pull(controller) {\n          const next = await iterator.next();\n          if (next.done) {\n            controller.close();\n          } else {\n            controller.enqueue(next.value);\n          }\n        },\n        async cancel() {\n          await iterator.return?.();\n        },\n      });\n    },\n  });\n}\n\nexport type AgentSegmentInput =\n  | {\n      kind: \"message\";\n      /** A real human/API prompt. Omitted when resuming the same inference. */\n      text?: string;\n      /** Ephemeral platform context: system role, never conversation history. */\n      internalContext?: string;\n      // Canonical conversation truth. When omitted, this is a fresh first\n      // message; ordinary messages never deserialize an SDK RunState.\n      historyItems?: AgentInputItem[] | null;\n      sandboxEnvelope?: Record<string, unknown> | null;\n    }\n  | {\n      kind: \"approval\";\n      serializedRunState: string;\n      approvalId: string;\n      decision: \"approve\" | \"reject\";\n      message?: string;\n    }\n  | {\n      kind: \"human_input\";\n      serializedRunState: string;\n      toolCallId: string;\n    };\n\nexport type PreparedAgentInput = {\n  input: string | AgentInputItem[] | RunState<any, any>;\n  sandboxSessionState?: SandboxSessionState;\n};\n\nexport const HUMAN_INPUT_TOOL_NAME = \"request_human_input\";\n\nexport type SerializedHumanInputInterruption = {\n  toolCallId: string;\n  input: ReturnType<typeof RequestHumanInputToolInput.parse>;\n};\n\nexport type SandboxFileDownload = {\n  fileId: string;\n  mountPath: string;\n  filename: string;\n  url?: string;\n  content?: Uint8Array;\n  expiresAt?: Date | string;\n  sizeBytes?: number;\n};\n\nexport type SandboxFileDownloadFailure = {\n  fileId: string;\n  filename: string;\n  path: string;\n  reason: string;\n  exitCode?: number;\n  output?: string;\n};\n\nexport type SandboxFileDownloadMaterializationResult = {\n  failures: SandboxFileDownloadFailure[];\n};\n\nlet runtimeMetricsHooks: RuntimeMetricsHooks | null = null;\n\nexport function configureRuntimeMetricsHooks(hooks: RuntimeMetricsHooks | null | undefined): void {\n  runtimeMetricsHooks = hooks ?? null;\n}\n\nexport type OpenGeniRuntime = {\n  configure: (settings: Settings) => void;\n  // Multi-provider per-turn model routing. Returns the resolved provider, its\n  // (cached) client, the provider-bound Model instance, and the configured-model\n  // shape; null when the turn's model is not in the registry, so the caller\n  // falls back to the legacy global-client path (settings.openaiModel).\n  resolveTurnModel: (settings: Settings, modelId: string) => ReturnType<typeof resolveTurnModel>;\n  buildAgent: (\n    settings: Settings,\n    resources: ResourceRef[],\n    options?: BuildAgentOptions,\n  ) => Agent<any, any>;\n  prepareTools: (\n    settings: Settings,\n    tools: ToolRef[],\n    options?: PrepareToolsOptions,\n  ) => Promise<PreparedAgentTools>;\n  prepareInput: (\n    agent: Agent<any, any>,\n    input: AgentSegmentInput,\n    options?: PrepareInputOptions,\n  ) => Promise<PreparedAgentInput>;\n  runStream: (\n    agent: Agent<any, any>,\n    input: PreparedAgentInput,\n    settings: Settings,\n    options?: RunAgentStreamOptions,\n  ) => Promise<Awaited<ReturnType<typeof runAgentStream>>>;\n  serializeApprovals: (interruptions: unknown[]) => unknown[];\n  serializeHumanInputRequests?: (interruptions: unknown[]) => SerializedHumanInputInterruption[];\n};\n\nexport type ProductionRuntimeOverrides = {\n  model?: Model;\n  sandboxClient?: unknown;\n  metrics?: RuntimeMetricsHooks;\n};\n\nexport function createProductionAgentRuntime(\n  overrides: ProductionRuntimeOverrides = {},\n): OpenGeniRuntime {\n  return {\n    configure: (settings) => {\n      configureRuntimeMetricsHooks(overrides.metrics);\n      configureOpenAI(settings);\n    },\n    // A test/override model shadows the registry routing entirely (the scripted\n    // model used in worker tests is not in any provider's allow-list), so when\n    // one is supplied resolveTurnModel reports \"no resolution\" and the caller\n    // keeps the legacy global-client path with the override model.\n    resolveTurnModel: (settings, modelId) =>\n      overrides.model ? null : resolveTurnModel(settings, modelId),\n    buildAgent: (settings, resources, options) =>\n      buildOpenGeniAgent(settings, resources, {\n        ...options,\n        ...(overrides.model ? { model: overrides.model } : {}),\n      }),\n    prepareTools: prepareAgentTools,\n    prepareInput: prepareRunInput,\n    runStream: async (agent, input, settings, options) =>\n      await runAgentStream(agent, input, settings, {\n        ...options,\n        sandboxClient: overrides.sandboxClient,\n      }),\n    serializeApprovals,\n    serializeHumanInputRequests,\n  };\n}\n\n/**\n * Build an OpenAI client from settings for the configured provider. Mirrors the\n * client construction in configureOpenAI so a direct API call (the compaction\n * summarizer) uses the same Azure/OpenAI auth and base URL. Returns null when\n * the OpenAI-platform path has only a key (the SDK default client is used via\n * setDefaultOpenAIKey there); the caller then constructs a key-only client.\n */\nexport function buildOpenAIClientFromSettings(\n  settings: Settings,\n  providerId: string = settings.openaiProvider,\n): OpenAI {\n  if (settings.openaiProvider === \"azure\") {\n    const baseURL = settings.azureOpenaiBaseUrl ?? azureDeploymentBaseUrl(settings);\n    const apiKey = settings.azureOpenaiApiKey ?? settings.azureOpenaiAdToken ?? \"azure-ad-token\";\n    return new OpenAI({\n      apiKey,\n      baseURL,\n      maxRetries: settings.openaiMaxRetries,\n      defaultQuery: azureOpenAIDefaultQuery(settings, baseURL),\n      defaultHeaders:\n        settings.azureOpenaiAdToken && !settings.azureOpenaiApiKey\n          ? { Authorization: `Bearer ${settings.azureOpenaiAdToken}` }\n          : undefined,\n      // Rewrite every outbound /responses computer_call to the ACTIONS-ONLY shape\n      // the GA Azure computer tool accepts. This is the lowest reachable\n      // seam — below the SDK responses converter, which always re-synthesizes BOTH\n      // `action` and `actions` (rejected 400 \"exactly one of action or actions\").\n      // See computerCallNormalizingFetch / rewriteComputerCallsToActionsOnly.\n      fetch: computerCallNormalizingFetch(instrumentedModelFetch(providerId, globalThis.fetch)),\n    });\n  }\n  return new OpenAI({\n    apiKey: settings.openaiApiKey ?? process.env.OPENAI_API_KEY,\n    ...(settings.openaiBaseUrl ? { baseURL: settings.openaiBaseUrl } : {}),\n    maxRetries: settings.openaiMaxRetries,\n    fetch: instrumentedModelFetch(providerId, globalThis.fetch),\n  });\n}\n\n/**\n * One OpenAI client per resolved provider id, built lazily and cached for the\n * process. The built-in openai/azure provider reuses\n * buildOpenAIClientFromSettings verbatim (so its Azure AD/api-version/base-URL\n * construction stays byte-for-byte identical to configureOpenAI); a registry\n * provider gets a plain client pointed at its base URL with its resolved key,\n * the shared maxRetries budget, and its declared defaultQuery/defaultHeaders.\n * Caching by provider.id keeps concurrent multi-provider turns sharing one\n * connection pool per provider rather than reconstructing a client per turn.\n */\nconst providerClientCache = new Map<string, OpenAI>();\n\nexport function buildProviderClient(provider: ResolvedModelProvider, settings: Settings): OpenAI {\n  const cached = providerClientCache.get(provider.id);\n  if (cached) {\n    return cached;\n  }\n  const client = provider.builtin\n    ? buildOpenAIClientFromSettings(settings, provider.id)\n    : provider.kind === \"codex-subscription\"\n      ? // Codex subscription: the static apiKey is a placeholder — the real per-request\n        // bearer + ChatGPT-Account-ID, the /responses->/codex/responses rewrite, and the\n        // body normalization are all injected by codexSubscriptionFetch, which reads the\n        // per-workspace token from codexRequestStorage (AsyncLocalStorage) at call time.\n        // The provider id is constant (\"codex-subscription\"), so one cached client serves\n        // every workspace without baking a token into it.\n        new OpenAI({\n          apiKey: provider.apiKey ?? \"codex-subscription\",\n          ...(provider.baseUrl ? { baseURL: provider.baseUrl } : {}),\n          // Codex transport owns exactly one explicit 401 refresh/retry. Blind\n          // SDK retries on network/5xx/partial streams can replay provider work\n          // or external tool side effects without a durable checkpoint.\n          maxRetries: 0,\n          // The Codex transport owns finer headers/idle/whole deadlines and\n          // emits typed durable evidence. Keep the SDK's opaque envelope beyond\n          // that whole-response budget so `Request timed out.` cannot win first.\n          timeout: CODEX_RESPONSE_SDK_OUTER_TIMEOUT_MS,\n          fetch: codexSubscriptionFetch(instrumentedModelFetch(provider.id, globalThis.fetch)),\n        })\n      : // ResolvedModelProvider.apiKey is already the resolved key (configuredProviders\n        // ran resolveProviderApiKey at config time, collapsing apiKey/apiKeyEnv), so it\n        // is passed straight through here rather than re-resolved.\n        new OpenAI({\n          ...(provider.apiKey ? { apiKey: provider.apiKey } : {}),\n          ...(provider.baseUrl ? { baseURL: provider.baseUrl } : {}),\n          maxRetries: settings.openaiMaxRetries,\n          ...(provider.defaultQuery ? { defaultQuery: provider.defaultQuery } : {}),\n          ...(provider.defaultHeaders ? { defaultHeaders: provider.defaultHeaders } : {}),\n          fetch: instrumentedModelFetch(provider.id, globalThis.fetch),\n        });\n  providerClientCache.set(provider.id, client);\n  return client;\n}\n\n/**\n * Bind a model id to a provider's OpenAI client as an @openai/agents `Model`\n * instance, choosing the wire API by the provider's declared `api`: the \"chat\"\n * providers (e.g. Fireworks) get an OpenAIChatCompletionsModel that speaks\n * /v1/chat/completions, the \"responses\" providers (built-in OpenAI/Azure) get\n * an OpenAIResponsesModel that speaks /v1/responses. Passing this Model into\n * the agent is what routes a turn to its provider without mutating the global\n * default client.\n */\nexport function buildModelInstance(\n  provider: ResolvedModelProvider,\n  client: OpenAI,\n  modelId: string,\n): Model {\n  return provider.api === \"chat\"\n    ? new OpenAIChatCompletionsModel(client, modelId)\n    : new OpenAIResponsesModel(client, modelId);\n}\n\n/**\n * Resolved per-turn model routing: the provider that serves `modelId`, its\n * (cached) OpenAI client, the provider-bound `Model` instance, and the\n * configured-model shape (label/api/contextWindow/reasoningEffort/hostedWebSearch).\n * Returns null when the model is not in the registry — the caller then falls\n * back to the legacy global-client path (settings.openaiModel + the default\n * client configured by configureOpenAI), preserved byte-for-byte.\n */\nexport function resolveTurnModel(\n  settings: Settings,\n  modelId: string,\n): {\n  provider: ResolvedModelProvider;\n  client: OpenAI;\n  model: Model;\n  configured: ConfiguredModel;\n} | null {\n  const resolved = resolveModelProvider(settings, modelId);\n  if (!resolved) {\n    return null;\n  }\n  const client = buildProviderClient(resolved.provider, settings);\n  return {\n    provider: resolved.provider,\n    client,\n    model: buildModelInstance(resolved.provider, client, resolved.model.upstreamModelId),\n    configured: resolved.model,\n  };\n}\n\n/**\n * Routes a model *name* to its provider-bound Model (Fireworks chat model for a\n * registry model id, the built-in OpenAI/Azure responses model otherwise) via\n * `resolveTurnModel`. This is the load-bearing piece for the sandbox path:\n * passing a Model *instance* as `agent.model` only survives the in-process\n * (`sandboxBackend: \"none\"`) run — on the SandboxAgent/Modal path the instance\n * is dropped and the model *name* is re-resolved through the run's\n * `modelProvider` (or the global default). Without this router that re-resolution\n * hits the default client (e.g. Azure) and a registry model 404s\n * (\"deployment does not exist\"); with it the name resolves back to the right\n * provider. Installed both as the run-scoped `Runner.config.modelProvider` (every\n * run in runAgentStream goes through `runScopedRunner(settings)`, built from the\n * per-turn settings) and as the process default (see configureOpenAI). The\n * run-scoped instance is the load-bearing one: a `Runner` resolves string model\n * names against ITS OWN modelProvider, not the lazy global default, so each\n * concurrent turn routes codex/registry names against its own settings and a\n * foreign turn's setDefaultModelProvider can never clobber this turn's routing.\n * The process default remains only as a boot-time fallback. Falls back to the\n * SDK default provider for a model that is in no provider's allow-list.\n */\nexport class MultiProviderModelProvider implements ModelProvider {\n  private fallback: OpenAIProvider | undefined;\n\n  constructor(private readonly settings: Settings) {}\n\n  async getModel(modelName?: string): Promise<Model> {\n    if (modelName) {\n      const resolved = resolveTurnModel(\n        settingsForRunScopedModelResolution(this.settings, modelName),\n        modelName,\n      );\n      if (resolved) {\n        // Fail-loud floor (defense in depth): a `codex/<slug>` id must only ever\n        // resolve through the synthetic codex-subscription provider (which installs\n        // fetch: codexSubscriptionFetch + the per-workspace bearer). If a future\n        // settings path re-introduces a built-in/registry shadow that binds a\n        // `codex/` id to any other provider kind, that would silently ship the id\n        // to Azure/OpenAI as a deployment name (DeploymentNotFound 404). Refuse it\n        // here so codex can never reach a non-codex client on ANY backend; the\n        // primary fix (config configuredModels) keeps this a no-op in practice.\n        if (\n          modelName.startsWith(CODEX_MODEL_ID_PREFIX) &&\n          resolved.provider.kind !== \"codex-subscription\"\n        ) {\n          throw new CodexSubscriptionUnavailableError(modelName);\n        }\n        return resolved.model;\n      }\n      // A `codex/<slug>` id only resolves when the per-workspace worker overlay\n      // (settingsWithCodexCredential) has injected the synthetic codex-subscription\n      // provider — which it does ONLY for a workspace with an *active* connected\n      // Codex subscription. If it did not resolve, the subscription is not\n      // connected for this workspace, so the codex provider is absent. Falling\n      // through to the built-in OpenAIProvider below would ship `codex/<slug>` to\n      // the global default (Azure) client as a deployment name and surface a\n      // misleading \"DeploymentNotFound\" 404. Throw a clear, user-actionable error\n      // instead; it propagates through the worker's agentRunFailurePayload as the\n      // turn.failed message the session UI shows. Mirrors the codex-prefix\n      // awareness of assertConfiguredModel at apps/api/src/domain/sessions.ts.\n      if (modelName.startsWith(CODEX_MODEL_ID_PREFIX)) {\n        throw new CodexSubscriptionUnavailableError(modelName);\n      }\n    }\n    // A non-codex model in no provider's allow-list falls back to the SDK's\n    // default OpenAIProvider, which uses the global default client/key\n    // configureOpenAI set up (the built-in OpenAI/Azure provider).\n    this.fallback ??= new OpenAIProvider();\n    return this.fallback.getModel(modelName);\n  }\n}\n\nfunction settingsForRunScopedModelResolution(settings: Settings, modelName: string): Settings {\n  if (modelName !== settings.openaiModel) {\n    return settings;\n  }\n  const builtinAllowed = splitOpenaiAllowedModels(settings.openaiAllowedModels);\n  const fallbackBuiltin = builtinAllowed.find((id) => id !== modelName);\n  if (!fallbackBuiltin) {\n    return settings;\n  }\n  // The worker sets runSettings.openaiModel to the turn's model. For namespaced\n  // registry ids configuredModels filters the built-in entry out, but a unique\n  // bare registry id would otherwise be claimed by the built-in only because of\n  // that per-turn override. Resolve the run-scoped router against the deployment\n  // allow-list head instead; real built-in models stay in the allow-list.\n  return builtinAllowed.includes(modelName)\n    ? settings\n    : { ...settings, openaiModel: fallbackBuiltin };\n}\n\nfunction splitOpenaiAllowedModels(value: string): string[] {\n  return value\n    .split(\",\")\n    .map((item) => item.trim())\n    .filter(Boolean);\n}\n\n/**\n * A `codex/<slug>` turn reached the model router but the workspace has no active\n * Codex subscription connected (the worker overlay never injected the synthetic\n * provider, so resolveTurnModel returned nothing). Thrown instead of silently\n * routing the id to the built-in Azure/OpenAI client — that produced an opaque\n * \"DeploymentNotFound\" 404. The message is user-actionable (connect/reconnect)\n * and carries no status/code, so agentRunFailurePayload surfaces it verbatim as\n * a non-retryable turn.failed the session UI shows.\n */\nexport class CodexSubscriptionUnavailableError extends Error {\n  constructor(modelName: string) {\n    super(\n      `Codex subscription model \"${modelName}\" is unavailable: no active Codex subscription is connected for this workspace. ` +\n        `Connect (or reconnect) your ChatGPT/Codex subscription in Settings, then retry.`,\n    );\n    this.name = \"CodexSubscriptionUnavailableError\";\n  }\n}\n\n/**\n * The workspace's model policy blocks the provider/model this turn resolved\n * to. Thrown at the worker's post-resolution gate INSTEAD of running the turn\n * on the blocked provider — a policy-restricted workspace (e.g. fail-closed to\n * the Codex subscription) must never silently remap to, or fall through to,\n * the paid built-in client. Like CodexSubscriptionUnavailableError the message\n * is user-actionable and surfaces verbatim as a non-retryable turn.failed.\n */\nexport class WorkspaceModelPolicyBlockedError extends Error {\n  constructor(modelName: string, providerId: string, reason: \"provider\" | \"model\") {\n    super(\n      reason === \"provider\"\n        ? `Model \"${modelName}\" is not available in this workspace: its provider (\"${providerId}\") is not in the workspace's allowed providers. ` +\n            `Pick an allowed model, or ask a workspace admin to change the workspace model policy.`\n        : `Model \"${modelName}\" is not in this workspace's allowed models. ` +\n            `Pick an allowed model, or ask a workspace admin to change the workspace model policy.`,\n    );\n    this.name = \"WorkspaceModelPolicyBlockedError\";\n  }\n}\n\nexport function configureOpenAI(settings: Settings): void {\n  setOpenAIResponsesTransport(settings.openaiResponsesTransport);\n  setTracingDisabled(settings.disableOpenaiTracing || !settings.observabilityOtlpEndpoint);\n  // Install the registry-aware router as the process default model provider so a\n  // model name re-resolved on the SandboxAgent/Modal path (where a Model instance\n  // does not survive) routes to its provider instead of the built-in client.\n  // Built before the default-client calls below so it captures the same settings.\n  const router = new MultiProviderModelProvider(settings);\n  if (settings.openaiProvider === \"azure\") {\n    setDefaultOpenAIClient(buildOpenAIClientFromSettings(settings));\n    setDefaultModelProvider(router);\n    return;\n  }\n  if (settings.openaiApiKey) {\n    setDefaultOpenAIKey(settings.openaiApiKey);\n  }\n  if (settings.openaiBaseUrl) {\n    setDefaultOpenAIClient(buildOpenAIClientFromSettings(settings));\n  }\n  setDefaultModelProvider(router);\n}\n\nfunction instrumentedModelFetch(provider: string, inner: typeof fetch): typeof fetch {\n  return (async (input: Parameters<typeof fetch>[0], init?: Parameters<typeof fetch>[1]) => {\n    if (!isModelCallFetch(input)) {\n      return await inner(input, init);\n    }\n    const started = performance.now();\n    try {\n      const response = await inner(input, init);\n      recordModelCallMetric(provider, response.ok ? \"completed\" : \"failed\", started);\n      return response;\n    } catch (error) {\n      recordModelCallMetric(provider, \"failed\", started);\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\nfunction isModelCallFetch(input: Parameters<typeof fetch>[0]): boolean {\n  const rawUrl =\n    typeof input === \"string\"\n      ? input\n      : input instanceof URL\n        ? input.toString()\n        : (input as { url?: unknown }).url;\n  if (typeof rawUrl !== \"string\" || rawUrl.length === 0) {\n    return false;\n  }\n  try {\n    const pathname = new URL(rawUrl, \"http://opengeni.local\").pathname;\n    return (\n      pathname.endsWith(\"/responses\") ||\n      pathname.endsWith(\"/chat/completions\") ||\n      pathname.endsWith(\"/codex/responses\")\n    );\n  } catch {\n    return /\\/(?:codex\\/)?responses(?:\\?|$)|\\/chat\\/completions(?:\\?|$)/.test(rawUrl);\n  }\n}\n\nfunction recordModelCallMetric(\n  provider: string,\n  outcome: \"completed\" | \"failed\",\n  started: number,\n): void {\n  const durationSeconds = Math.max(0, (performance.now() - started) / 1000);\n  try {\n    runtimeMetricsHooks?.onModelCall?.({ provider, outcome, durationSeconds });\n  } catch {\n    // Metrics emission must never affect a model call.\n  }\n}\n\n/**\n * Run the compaction summarizer as one plain, tool-less, non-streaming model\n * call against the resolved provider. `input` is the active history plus\n * Codex's checkpoint prompt. Provider failures propagate to the compaction\n * lifecycle; there is no non-model fallback that silently discards history.\n * The call deliberately does NOT\n * request reasoning encryption, tools, or inline provider compaction; it is a\n * self-contained summarize.\n *\n * Provider-aware: the summary always runs on the SAME provider that serves the\n * turn (registry providers can't summarize through OpenAI/Azure, and vice\n * versa). `api: \"chat\"` providers (Fireworks) speak /v1/chat/completions, where\n * the summary is choices[0].message.content; `api: \"responses\"` (the default,\n * built-in OpenAI/Azure) speaks /v1/responses as before. When no client/api is\n * supplied it uses the built-in OpenAI/Azure Responses path. store:false is set\n * only on the OpenAI-platform Responses path (Azure rejects it; chat ignores it).\n */\nexport async function summarizeForCompaction(\n  settings: Settings,\n  input: Array<Record<string, unknown>>,\n  options: {\n    client?: OpenAI;\n    api?: ModelProviderApi;\n    maxOutputTokens?: number;\n    model?: string;\n    promptCacheKey?: string;\n    systemInstructions?: string;\n    onUsage?: (usage: ModelResponseUsage) => void | Promise<void>;\n  } = {},\n): Promise<string> {\n  const client = options.client ?? buildOpenAIClientFromSettings(settings);\n  const api = options.api ?? \"responses\";\n  const model = options.model ?? settings.openaiModel;\n  const maxTokens = options.maxOutputTokens ?? SUMMARY_BUFFER_TOKENS;\n  if (api === \"chat\") {\n    const transcript = renderCompactionPromptInputForChat(input);\n    let completion: unknown;\n    try {\n      completion = await client.chat.completions.create({\n        model,\n        max_tokens: maxTokens,\n        messages: [{ role: \"user\", content: transcript }],\n        ...(options.promptCacheKey ? { prompt_cache_key: options.promptCacheKey } : {}),\n      } as any);\n    } catch (error) {\n      throw new CompactionProviderResponseError(compactionProviderFailureDiagnostics(error), error);\n    }\n    const usage = modelResponseUsageFromResponse(completion);\n    if (usage) {\n      await options.onUsage?.(usage);\n    }\n    const text = (completion as { choices?: Array<{ message?: { content?: unknown } }> })\n      .choices?.[0]?.message?.content;\n    const summary = typeof text === \"string\" ? text.trim() : \"\";\n    if (!summary) {\n      throw new EmptyCompactionSummaryError(compactionResponseDiagnostics(completion, summary));\n    }\n    return summary;\n  }\n  // Use the same SDK Responses adapter as the real agent call. It converts the\n  // structured AgentInputItems (callId/providerData/etc.) to provider wire\n  // items without flattening tool history into a fake user transcript.\n  const request: ModelRequest = {\n    systemInstructions: options.systemInstructions ?? \"\",\n    input: input as AgentInputItem[],\n    modelSettings: {\n      maxTokens,\n      // Azure rejects store:false; the Codex subscription transport enforces\n      // it independently. The OpenAI platform path remains explicitly storeless.\n      ...(settings.openaiProvider === \"azure\" ? {} : { store: false }),\n      ...(options.promptCacheKey\n        ? { providerData: { prompt_cache_key: options.promptCacheKey } }\n        : {}),\n    },\n    tools: [],\n    toolsExplicitlyProvided: true,\n    outputType: \"text\",\n    handoffs: [],\n    tracing: false,\n  };\n  let response: unknown;\n  try {\n    response = await new CompactionResponsesModel(client, model).fetchResponse(request);\n  } catch (error) {\n    throw new CompactionProviderResponseError(compactionProviderFailureDiagnostics(error), error);\n  }\n  const usage = modelResponseUsageFromResponse(response);\n  if (usage) {\n    await options.onUsage?.(usage);\n  }\n  if (isFailedCompactionProviderResponse(response)) {\n    throw new CompactionProviderResponseError(compactionProviderFailureDiagnostics(response));\n  }\n  const summary = extractResponseOutputText(response).trim();\n  if (!summary) {\n    throw new EmptyCompactionSummaryError(compactionResponseDiagnostics(response, summary));\n  }\n  return summary;\n}\n\n/**\n * Codex remote compaction v2: send active history + `compaction_trigger`, collect\n * exactly one `{ type: \"compaction\", encrypted_content }` output item.\n * Must run inside Codex ALS with `remote_compaction_v2` beta + turn metadata.\n */\nexport async function requestRemoteCompactionV2(\n  settings: Settings,\n  input: Array<Record<string, unknown>>,\n  options: {\n    client: OpenAI;\n    model: string;\n    promptCacheKey?: string;\n    onUsage?: (usage: ModelResponseUsage) => void | Promise<void>;\n  },\n): Promise<Record<string, unknown>> {\n  const promptInput = buildRemoteCompactionV2PromptInput(input);\n  const request: ModelRequest = {\n    systemInstructions: \"\",\n    input: promptInput as AgentInputItem[],\n    modelSettings: {\n      // Azure rejects store:false; Codex transport enforces store:false itself.\n      ...(settings.openaiProvider === \"azure\" ? {} : { store: false }),\n      ...(options.promptCacheKey\n        ? { providerData: { prompt_cache_key: options.promptCacheKey } }\n        : {}),\n    },\n    tools: [],\n    toolsExplicitlyProvided: true,\n    outputType: \"text\",\n    handoffs: [],\n    tracing: false,\n  };\n  let response: unknown;\n  try {\n    response = await new CompactionResponsesModel(options.client, options.model).fetchResponse(\n      request,\n    );\n  } catch (error) {\n    throw new CompactionProviderResponseError(compactionProviderFailureDiagnostics(error), error);\n  }\n  const usage = modelResponseUsageFromResponse(response);\n  if (usage) {\n    await options.onUsage?.(usage);\n  }\n  if (isFailedCompactionProviderResponse(response)) {\n    throw new CompactionProviderResponseError(compactionProviderFailureDiagnostics(response));\n  }\n  try {\n    return extractRemoteCompactionV2OutputItem(response);\n  } catch (error) {\n    if (error instanceof EmptyCompactionSummaryError) {\n      throw new EmptyCompactionSummaryError({\n        ...compactionResponseDiagnostics(response, \"\"),\n        ...error.diagnostics,\n        stage: \"remote_v2_extract\",\n      });\n    }\n    throw error;\n  }\n}\n\nfunction isFailedCompactionProviderResponse(response: unknown): boolean {\n  if (!response || typeof response !== \"object\") return false;\n  const record = response as Record<string, unknown>;\n  return (\n    record.status === \"failed\" ||\n    record.status === \"incomplete\" ||\n    (record.error !== null && record.error !== undefined)\n  );\n}\n\n/** Bounded provider diagnostics: identifiers and classifications, never messages or model data. */\nexport function compactionProviderFailureDiagnostics(error: unknown): Record<string, unknown> {\n  let current = error;\n  let errorName: string | null = null;\n  let httpStatus: number | null = null;\n  let responseStatus: string | null = null;\n  let responseId: string | null = null;\n  let code: string | null = null;\n  let type: string | null = null;\n  let requestId: string | null = null;\n  let eventType: string | null = null;\n  const seen = new Set<object>();\n  for (let depth = 0; depth < 6 && current && typeof current === \"object\"; depth += 1) {\n    if (seen.has(current)) break;\n    seen.add(current);\n    const record = current as Record<string, unknown>;\n    if (!errorName && current instanceof Error) {\n      errorName = boundCompactionDiagnosticField(current.name);\n    }\n    if (\n      httpStatus === null &&\n      typeof record.status === \"number\" &&\n      Number.isFinite(record.status)\n    ) {\n      httpStatus = record.status;\n    }\n    if (responseStatus === null && typeof record.status === \"string\") {\n      responseStatus = boundCompactionDiagnosticField(record.status);\n    }\n    const directResponseStatus = record.response_status ?? record.responseStatus;\n    if (responseStatus === null && typeof directResponseStatus === \"string\") {\n      responseStatus = boundCompactionDiagnosticField(directResponseStatus);\n    }\n    const directResponseId = record.response_id ?? record.responseId ?? record.id;\n    if (responseId === null && typeof directResponseId === \"string\") {\n      responseId = boundCompactionDiagnosticField(directResponseId);\n    }\n    if (code === null && typeof record.code === \"string\") {\n      code = boundCompactionDiagnosticField(record.code);\n    }\n    if (type === null && typeof record.type === \"string\") {\n      type = boundCompactionDiagnosticField(record.type);\n    }\n    const directEventType = record.event_type ?? record.eventType;\n    if (eventType === null && typeof directEventType === \"string\") {\n      eventType = boundCompactionDiagnosticField(directEventType);\n    }\n    if (requestId === null) {\n      const directRequestId = record.request_id ?? record.requestId ?? record._request_id;\n      if (typeof directRequestId === \"string\") {\n        requestId = boundCompactionDiagnosticField(directRequestId);\n      }\n      const headers = record.headers;\n      if (!requestId && headers && typeof headers === \"object\") {\n        const get = (headers as { get?: unknown }).get;\n        if (typeof get === \"function\") {\n          const headerId = get.call(headers, \"x-request-id\");\n          if (typeof headerId === \"string\") {\n            requestId = boundCompactionDiagnosticField(headerId);\n          }\n        }\n      }\n    }\n    const nestedError = record.error;\n    if (nestedError && typeof nestedError === \"object\" && !seen.has(nestedError)) {\n      const nested = nestedError as Record<string, unknown>;\n      if (code === null && typeof nested.code === \"string\") {\n        code = boundCompactionDiagnosticField(nested.code);\n      }\n      if (type === null && typeof nested.type === \"string\") {\n        type = boundCompactionDiagnosticField(nested.type);\n      }\n      const nestedResponseStatus = nested.response_status ?? nested.responseStatus;\n      if (responseStatus === null && typeof nestedResponseStatus === \"string\") {\n        responseStatus = boundCompactionDiagnosticField(nestedResponseStatus);\n      }\n      const nestedResponseId = nested.response_id ?? nested.responseId ?? nested.id;\n      if (responseId === null && typeof nestedResponseId === \"string\") {\n        responseId = boundCompactionDiagnosticField(nestedResponseId);\n      }\n      const nestedEventType = nested.event_type ?? nested.eventType;\n      if (eventType === null && typeof nestedEventType === \"string\") {\n        eventType = boundCompactionDiagnosticField(nestedEventType);\n      }\n    }\n    current = record.cause;\n  }\n  return {\n    errorName,\n    httpStatus,\n    responseStatus,\n    responseId,\n    code,\n    type,\n    requestId,\n    ...(eventType ? { eventType } : {}),\n  };\n}\n\nconst COMPACTION_DIAGNOSTIC_FIELD_MAX_BYTES = 256;\nconst COMPACTION_DIAGNOSTIC_TRUNCATION_MARKER = \"…[truncated]\";\n\nfunction boundCompactionDiagnosticField(value: string): string {\n  const bytes = Buffer.from(value, \"utf8\");\n  if (bytes.length <= COMPACTION_DIAGNOSTIC_FIELD_MAX_BYTES) return value;\n  const markerBytes = Buffer.byteLength(COMPACTION_DIAGNOSTIC_TRUNCATION_MARKER, \"utf8\");\n  let end = COMPACTION_DIAGNOSTIC_FIELD_MAX_BYTES - markerBytes;\n  while (end > 0 && isUtf8ContinuationByte(bytes[end]!)) end -= 1;\n  return `${bytes.subarray(0, end).toString(\"utf8\")}${COMPACTION_DIAGNOSTIC_TRUNCATION_MARKER}`;\n}\n\nfunction isUtf8ContinuationByte(value: number): boolean {\n  return (value & 0xc0) === 0x80;\n}\n\n/** Bounded, content-free diagnostics for a semantically empty checkpoint. */\nexport function compactionResponseDiagnostics(\n  response: unknown,\n  extractedText = extractResponseOutputText(response).trim(),\n): Record<string, unknown> {\n  if (!response || typeof response !== \"object\") {\n    return { responseShape: typeof response, extractedTextLength: extractedText.length };\n  }\n  const record = response as Record<string, unknown>;\n  const output = Array.isArray(record.output) ? record.output : [];\n  const outputItems = output.slice(0, 50).map((item) => {\n    if (!item || typeof item !== \"object\") return { type: typeof item };\n    const value = item as Record<string, unknown>;\n    const content = Array.isArray(value.content) ? value.content : [];\n    return {\n      type: typeof value.type === \"string\" ? value.type : null,\n      role: typeof value.role === \"string\" ? value.role : null,\n      status: typeof value.status === \"string\" ? value.status : null,\n      contentPartTypes: content\n        .slice(0, 50)\n        .map((part) =>\n          part && typeof part === \"object\" && typeof (part as { type?: unknown }).type === \"string\"\n            ? (part as { type: string }).type\n            : typeof part,\n        ),\n      contentPartCount: content.length,\n    };\n  });\n  const choices = Array.isArray(record.choices) ? record.choices : [];\n  const usage = modelResponseUsageFromResponse(response)?.usage;\n  const incomplete =\n    record.incomplete_details && typeof record.incomplete_details === \"object\"\n      ? (record.incomplete_details as Record<string, unknown>)\n      : null;\n  return {\n    responseId: typeof record.id === \"string\" ? record.id : null,\n    status: typeof record.status === \"string\" ? record.status : null,\n    outputItemCount: output.length,\n    outputItems,\n    choiceCount: choices.length,\n    finishReasons: choices\n      .slice(0, 20)\n      .map((choice) =>\n        choice && typeof choice === \"object\"\n          ? ((choice as Record<string, unknown>).finish_reason ?? null)\n          : null,\n      ),\n    incompleteReason:\n      incomplete && typeof incomplete.reason === \"string\" ? incomplete.reason : null,\n    inputTokens: usage?.inputTokens ?? null,\n    outputTokens: usage?.outputTokens ?? null,\n    totalTokens: usage?.totalTokens ?? null,\n    extractedTextLength: extractedText.length,\n  };\n}\n\n/**\n * Pull the assistant text out of a Responses API result, shape-tolerant. Only\n * `role === \"assistant\"` message items contribute: a provider whose Responses\n * endpoint echoes the user input back as an output `message` item (Fireworks'\n * beta /v1/responses does exactly this — see docs/model-providers.md) would\n * otherwise corrupt the summary with the prompt it was given. The OpenAI/Azure\n * Responses API only emits assistant messages, so this guard is a no-op there.\n */\nexport function extractResponseOutputText(response: unknown): string {\n  if (!response || typeof response !== \"object\") {\n    return \"\";\n  }\n  const direct = (response as { output_text?: unknown }).output_text;\n  if (typeof direct === \"string\") {\n    return direct;\n  }\n  const output = (response as { output?: unknown }).output;\n  if (!Array.isArray(output)) {\n    return \"\";\n  }\n  const parts: string[] = [];\n  for (const item of output) {\n    if (!item || typeof item !== \"object\") {\n      continue;\n    }\n    if ((item as { type?: unknown }).type !== \"message\") {\n      continue;\n    }\n    // Read assistant messages only; skip any input-echo (role \"user\"/\"system\").\n    if ((item as { role?: unknown }).role !== \"assistant\") {\n      continue;\n    }\n    const content = (item as { content?: unknown }).content;\n    if (!Array.isArray(content)) {\n      continue;\n    }\n    for (const part of content) {\n      if (\n        part &&\n        typeof part === \"object\" &&\n        typeof (part as { text?: unknown }).text === \"string\"\n      ) {\n        parts.push((part as { text: string }).text);\n      }\n    }\n  }\n  return parts.join(\"\");\n}\n\n/**\n * The public SDK getResponse() method is runner-facing and always opens a\n * tracing span. Compaction is a standalone model call, so use the same SDK\n * request conversion and Responses transport without manufacturing a runner\n * trace solely to satisfy that wrapper.\n */\nclass CompactionResponsesModel extends OpenAIResponsesModel {\n  fetchResponse(request: ModelRequest) {\n    return this._fetchResponse(request, false);\n  }\n}\n\nexport type GitTokenSeeds = Partial<Record<GitCredentialProvider, string>>;\nexport type GitCredentialBindingSeed = {\n  credentialBindingId: string;\n  provider: GitCredentialProvider;\n  token: string;\n  transport?: GitCredentialTransport;\n  expiresAt?: string;\n  /** Total active bindings for this provider, used to suppress unsafe aliases. */\n  providerBindingCount?: number;\n};\nexport type GitCredentialTokenWriterSession = SandboxSessionLike;\nexport type ToolspaceTokenWriterSession = SandboxSessionLike;\n\nexport type EffectiveSkillSelection = Readonly<{\n  id: string;\n  name: string;\n  source: \"bundled\" | \"library\" | \"pack\" | \"session\";\n  version: string | null;\n  contentSha256: string | null;\n  reason: string;\n}>;\n\nconst agentSkillSelections = new WeakMap<object, readonly EffectiveSkillSelection[]>();\nconst emptySkillSelections: readonly EffectiveSkillSelection[] = Object.freeze([]);\n\n/**\n * Read-only, secret-free skill provenance for an already-built agent. This is\n * intentionally separate from the model instructions and sandbox manifest so\n * effective configuration inspection cannot accidentally expose credentials or\n * turn skill activation into an authorization change.\n */\nexport function effectiveSkillSelectionsForAgent(\n  agent: object,\n): readonly EffectiveSkillSelection[] {\n  return agentSkillSelections.get(agent) ?? emptySkillSelections;\n}\n\nexport type BuildAgentOptions = {\n  model?: Model;\n  /** Settled response for the one internal human-input interruption resumed by this run. */\n  humanInputResponse?: {\n    requestId: string;\n    toolCallId: string;\n    response: HumanInputResponse;\n  };\n  reasoningEffort?: ReasoningEffort;\n  /** Product latency selection frozen onto this turn. */\n  latencyMode?: LatencyMode;\n  /** Provider-specific wire value resolved by the worker (`fast` or `priority`). */\n  serviceTier?: \"fast\" | \"priority\";\n  // Per-turn gating overrides for the multi-provider path. Each defaults to\n  // today's settings-derived behaviour when omitted, so the legacy\n  // global-client callers (no model resolution) are byte-for-byte unchanged.\n  //\n  // - hostedWebSearch: attach the hosted web_search tool. Only the providers\n  //   that actually execute it (built-in OpenAI/Azure; a registry model that\n  //   opts in) should get it — Fireworks accepts the param but no-ops it, which\n  //   would hand the agent a dead tool. Default: settings.webSearchEnabled.\n  // - encryptedReasoning: round-trip reasoning.encrypted_content via\n  //   providerData.include. Only the Responses API carries it; the chat wire\n  //   API has no such field, so registry \"chat\" providers turn it off.\n  //   Default: settings.openaiReasoningEncryptedContent.\n  // - structuredToolTransport: whether the backend supports the Responses\n  //   STRUCTURED/HOSTED sandbox-tool transport — the hosted `apply_patch` tool\n  //   type and structured `view_image` output. The SDK's sandbox capabilities\n  //   pick hosted-vs-function purely from the bound model instance's constructor\n  //   name (supportsApplyPatchTransport / supportsStructuredToolOutputTransport).\n  //   Our codex turns run the OpenAIResponsesModel — which the SDK reads as\n  //   hosted-capable — but route it to the ChatGPT/Codex backend, which REJECTS\n  //   the hosted `apply_patch` type (\"Unsupported tool type: apply_patch\",\n  //   verified live). Set false for that backend so filesystem emits the\n  //   function `apply_patch` + text `view_image` variants it accepts. Default\n  //   true (let the SDK decide from the model instance) — non-codex paths are\n  //   byte-for-byte unchanged.\n  hostedWebSearch?: boolean;\n  encryptedReasoning?: boolean;\n  structuredToolTransport?: boolean;\n  // EXPLICIT computer-use tool transport, decided where provider identity is\n  // authoritative (the worker's model resolution — agent-turn.ts). Threaded into\n  // buildAgentCapabilities → computerUse({toolMode}) so tool selection never rests\n  // on the SDK's constructor-name sniff. Omitted means disabled/fail-closed.\n  computerToolMode?: ComputerToolMode;\n  /**\n   * Invoked once, immediately before the first real computer action and after\n   * the display is ready. Merely advertising computer-use does not call it.\n   * The worker uses this seam for computer-use-only recording; ordinary\n   * shell/filesystem turns never pay that cost.\n   */\n  onComputerUseReady?: (session: SandboxSessionLike) => Promise<void>;\n  // The LIVE, by-reference connector-namespace Set from prepareAgentTools\n  // (codexConnectorNamespaces): fills during each turn's codex_apps tools/list,\n  // read per model call by the codex tool_search description so the model sees\n  // the account's ACTUALLY-connected sources (codex-rs parity). Only meaningful\n  // on the codex tool-search path.\n  codexConnectorNamespaces?: ReadonlySet<string>;\n  // Stable per-session routing key for provider-side prompt prefix caches. The\n  // worker passes this only for transports whose docs/API surface accept\n  // prompt_cache_key; registry providers that use a different affinity field stay\n  // unset to avoid unknown-parameter 400s.\n  promptCacheKey?: string;\n  sandboxEnvironment?: Record<string, string>;\n  // The EFFECTIVE/active compute backend for this turn. `settings.sandboxBackend`\n  // is the session's HOME backend (the default cloud group box it was created\n  // with); when a session has swapped its active sandbox to a connected machine\n  // (active_sandbox_id → a selfhosted lease, while the home backend stays the\n  // cloud default), the worker passes that machine's backend here so\n  // filesystem-touching lifecycle hooks key off where the agent ACTUALLY runs,\n  // not where it was created. The one such hook today is the repository clone\n  // (sandboxRepositoryCloneHooks): a bring-your-own machine owns its real disk,\n  // so the platform must NEVER `git clone` onto it. Defaults to\n  // settings.sandboxBackend, so the legacy cloud paths are byte-for-byte\n  // unchanged and a session whose HOME backend is \"selfhosted\" is gated with no\n  // caller change.\n  activeSandboxBackend?: Settings[\"sandboxBackend\"];\n  fileResourceDownloads?: SandboxFileDownload[];\n  mcpServers?: MCPServer[];\n  // Workspace Memory V1 working-set block, resolved by the worker per turn.\n  // Composed after the workspace persona/CORE/toolspace substrate and before\n  // per-session instructions. Omitted/blank ⇒ byte-identical instructions.\n  workspaceMemory?: string;\n  workspaceEnvironment?: WorkspaceEnvironmentContext;\n  // M3 rig runtime binding (all absent ⇒ a rig-less turn, byte-for-byte today).\n  //  - `rig`: renders the non-bypassable rig doctrine block in the CORE.\n  //  - `rigSetup`: the rig version's setup script, run ONCE per box (marker-\n  //    guarded) as the FIRST beforeAgentStart hook so later hooks see its tooling.\n  //  - `rigCredentialHookIds`: the rig version's credential_hooks, unioned with\n  //    the deployment preparation-profile hooks. Resolved (and VALIDATED — an\n  //    unknown name throws here, at build = per-turn resolution time) so a typo'd\n  //    hook fails the turn instead of being silently ignored.\n  rig?: RigInstructionsContext;\n  rigSetup?: RigSetupDescriptor;\n  rigCredentialHookIds?: string[];\n  // TOKEN-BROKER (B1): the run-scoped GitHub App installation token alias,\n  // minted ONCE per turn by the worker (sandboxEnvironmentForRun's `gitToken`).\n  // Kept for back-compat; internally it maps to gitTokenSeeds.github.\n  gitTokenSeed?: string;\n  // Provider-token map for GitHub/GitLab/Azure DevOps. Threaded here OFF-\n  // MANIFEST — it is NOT part of sandboxEnvironment (the manifest env), so token\n  // VALUES never trigger the SDK's provided-session env-delta guard even though\n  // they rotate every turn. buildAgent stashes them alongside the agent's\n  // repository-clone hooks; runStream forwards them into the hook context, which\n  // seeds provider token FILES before the clone/setup runs.\n  gitTokenSeeds?: GitTokenSeeds;\n  // Provider-neutral, independently mintable credentials. Binding ids remain\n  // off-manifest and are hashed before they influence sandbox paths.\n  gitCredentialBindings?: GitCredentialBindingSeed[];\n  // TOOLSPACE: the run-scoped delegated token to seed into\n  // $OPENGENI_TOOLSPACE_TOKEN_FILE. Like gitTokenSeed, this stays off the\n  // manifest/env delta and is written into the sandbox filesystem by a lifecycle\n  // hook before the agent starts.\n  toolspaceTokenSeed?: string;\n  // Durable OpenGeni session identity used only to derive the off-manifest,\n  // per-session token file. Required together with toolspaceTokenSeed so two\n  // sessions sharing one box never overwrite the same pointer.\n  toolspaceTokenSessionId?: string;\n  // Genesis turn only: inject a one-shot instruction into the FIRST model\n  // call telling it to title the session via opengeni__set_session_title.\n  // Keeping this out of the persistent Agent.instructions prevents every\n  // tool-follow-up model call in a long first turn from re-running setup.\n  genesisTitleHint?: boolean;\n  // Persistent session settings, resolved by the worker from the durable\n  // session row at turn start. Tool schemas are rebuilt on every turn, so\n  // without this factual state the model can mistake persistent metadata tools\n  // for per-turn initialization and re-apply the same title/notification mode.\n  // Values only — never the user-controlled title text — enter instructions.\n  persistentSessionSettings?: PersistentSessionSettings;\n  // Per-call agent persona override (the white-label surface). Resolved by the\n  // caller as session > workspace > deployment default; when omitted the\n  // runtime falls back to settings.agentInstructionsTemplate. The runtime\n  // substitutes the non-bypassable CORE at AGENT_INSTRUCTIONS_CORE_PLACEHOLDER\n  // (or appends it when the template omits the marker), so an override can\n  // restyle the persona but never drop the goal-loop contract or environment\n  // block.\n  instructionsTemplate?: string;\n  // Per-SESSION persona/system instructions (the per-agent-type prompt lever an\n  // embedding host supplies at session create). Composed AFTER the workspace\n  // instructionsTemplate + the non-bypassable CORE, so it refines the workspace\n  // persona for this one session without dropping the goal-loop/environment\n  // contract. Rides the SAME instructions channel (system-level) — NEVER a user/\n  // timeline message. Omitted ⇒ the composed instructions are byte-identical to\n  // a workspace-only persona.\n  sessionInstructions?: string;\n  // Host context for this exact accepted turn. Composed system-level after the\n  // durable session persona and omitted from all later turns.\n  turnInstructions?: string;\n  // Skills delivered by enabled capability packs. They join the bundled\n  // skills in the sandbox skill index (mounted under .agents/) so\n  // skills/<name> references resolve like any other indexed skill.\n  packSkills?: PackSkill[];\n  // Inline skills fixed onto this session at creation. They use the SDK's lazy\n  // skill source and are materialized only when the model loads one.\n  sessionSkills?: PackSkill[];\n  // Explicitly selected, immutable curated-library skill content. These are\n  // separate from packSkills so repository-local/pack compatibility does not\n  // turn a curated entry into a mutable override.\n  skillLibrarySkills?: PackSkill[];\n  // Secret-free provenance for effective-configuration inspection. The worker\n  // resolves exact ids/versions/hashes before constructing the agent.\n  skillLibrarySelections?: EffectiveSkillSelection[];\n  /**\n   * Internal per-attempt cancellation boundary. The worker supplies Temporal's\n   * signal so an in-flight shell process is interrupted immediately instead of\n   * holding Steer/Pause behind its requested yield or natural exit.\n   */\n  turnCancellationSignal?: AbortSignal;\n  /**\n   * Receives the physical sandbox-tool fence at agent construction time. A\n   * cancelled/fenced worker attempt must await it before publishing its durable\n   * attempt-quiesced receipt.\n   */\n  onToolCancellationFence?: (fence: TurnToolCancellationFence) => void;\n};\n\nexport type PackSkillFile = {\n  // Relative POSIX path inside the skill directory, e.g. \"SKILL.md\" or\n  // \"references/runbook.md\".\n  path: string;\n  content: string;\n};\n\nexport type PackSkill = {\n  name: string;\n  description?: string | null | undefined;\n  files: PackSkillFile[];\n};\n\n/**\n * Operator-facing metadata for the workspace environment attached to a run.\n * Surfaced verbatim in the agent instructions: the description is where\n * operators document how the exported credentials are meant to be used\n * (e.g. which variable holds a deploy key and how to clone with it), so an\n * agent must not have to rediscover that by enumerating `env` and guessing.\n * Only metadata belongs here — never variable values.\n */\nexport type WorkspaceEnvironmentContext = {\n  name: string;\n  description?: string | null;\n  variableNames?: string[];\n};\n\nexport type PersistentSessionSettings = {\n  titleIsSet: boolean;\n};\n\n/**\n * The rig a session rides (M3): its name + the active version pinned onto the\n * session. Surfaced verbatim in the non-bypassable CORE instructions so the\n * agent understands its sandbox is a disposable fork of a shared, versioned\n * machine definition and how to promote a durable change. Absent for rig-less\n * sessions (the block never renders).\n */\nexport type RigInstructionsContext = {\n  name: string;\n  version: number;\n};\n\nexport function rigInstructions(rig: RigInstructionsContext): string[] {\n  return [\n    `This session runs on rig \"${rig.name}\" (active version v${rig.version}) — a shared, versioned sandbox machine definition for your workspace.`,\n    \"Your sandbox is an EPHEMERAL FORK of that rig: you have root and may install anything freely, but everything you change here is junk that dies with the box and never reaches the rig or other sessions.\",\n    \"For a DURABLE, team-wide change (tooling every future session on this rig should have), propose it with rig_propose_change, passing the EXACT command that already worked in this box — never assume an unverified change propagates.\",\n    \"If tooling you expect is missing, consult rig_get to see the rig's current setup and checks before reinstalling.\",\n  ];\n}\n\nexport function workspaceEnvironmentInstructions(\n  environment: WorkspaceEnvironmentContext,\n): string[] {\n  const lines = [\n    `A workspace environment named \"${environment.name}\" is attached to this session; its variables are exported in the sandbox shell environment.`,\n  ];\n  const variableNames = (environment.variableNames ?? []).filter((name) => name.length > 0);\n  if (variableNames.length > 0) {\n    lines.push(`Exported environment variables: ${[...variableNames].sort().join(\", \")}.`);\n  }\n  const description = environment.description?.trim();\n  if (description) {\n    lines.push(`Environment notes from the operator: ${description}`);\n  }\n  return lines;\n}\n\n/**\n * The non-bypassable CORE of the agent instructions: the goal-loop ownership\n * line (which names the opengeni__goal_* tools and is what keeps a long-running\n * session driving itself) followed by the dynamic workspace-environment block.\n * Returned as ordered lines so the caller joins them with the rest of the\n * instructions by \" \", exactly as the historical preamble did.\n *\n * This is the slice a white-labelled persona template must never be able to\n * drop: composeAgentInstructions() substitutes it at the persona template's\n * {{core}} marker, and appends it when the marker is absent.\n */\nexport function coreInstructions(\n  workspaceEnvironment?: WorkspaceEnvironmentContext,\n  rig?: RigInstructionsContext,\n): string[] {\n  return [\n    \"If the session has a goal, you own it: keep working until you call opengeni__goal_complete with concrete evidence or opengeni__goal_pause with a rationale; revise it with opengeni__goal_update; create one with opengeni__goal_set when given a long-running objective.\",\n    ...(workspaceEnvironment ? workspaceEnvironmentInstructions(workspaceEnvironment) : []),\n    // Rig doctrine (M3): data-conditional, inside the non-bypassable CORE so a\n    // white-label persona template can never drop it. Absent for rig-less sessions.\n    ...(rig ? rigInstructions(rig) : []),\n  ];\n}\n\n/**\n * Composes the final agent instructions from a (possibly white-labelled)\n * persona template and the non-bypassable CORE. The CORE is substituted at the\n * template's {{core}} marker; if the template omits the marker, the CORE is\n * appended after it instead (the non-bypassable fail-safe). The substitution\n * and the append both join by \" \", so the DEFAULT_AGENT_INSTRUCTIONS template\n * with an empty environment reproduces the historical preamble byte-for-byte.\n */\nexport function composeAgentInstructions(\n  template: string,\n  workspaceEnvironment?: WorkspaceEnvironmentContext,\n  rig?: RigInstructionsContext,\n): string {\n  const core = coreInstructions(workspaceEnvironment, rig).join(\" \");\n  if (template.includes(AGENT_INSTRUCTIONS_CORE_PLACEHOLDER)) {\n    return template.split(AGENT_INSTRUCTIONS_CORE_PLACEHOLDER).join(core);\n  }\n  return core ? `${template} ${core}` : template;\n}\n\n/**\n * Appends the per-session persona instructions to the already-composed\n * (workspace + CORE) instructions, joined by \" \" — exactly the join used\n * throughout the persona composition. The session slice is intentionally LAST\n * (session-specific refinement of the workspace persona). An absent/blank value\n * is a no-op that returns the composed string byte-for-byte.\n */\nexport function appendSessionInstructions(composed: string, sessionInstructions?: string): string {\n  const trimmed = sessionInstructions?.trim();\n  return trimmed ? `${composed} ${trimmed}` : composed;\n}\n\n/** Append system instructions that apply to this exact turn only. */\nexport function appendTurnInstructions(composed: string, turnInstructions?: string): string {\n  const trimmed = turnInstructions?.trim();\n  return trimmed ? `${composed} ${trimmed}` : composed;\n}\n\n/**\n * Append the durable session metadata the model otherwise cannot observe.\n * This is deliberately declarative and excludes the title text: the title is\n * user-controlled display metadata, while the agent only needs to know whether\n * initialization has already happened. The block is present on every turn when\n * supplied so compaction cannot erase knowledge that these settings persist.\n */\nexport function appendPersistentSessionSettings(\n  composed: string,\n  settings?: PersistentSessionSettings,\n): string {\n  if (!settings) {\n    return composed;\n  }\n  return `${composed} Persistent session settings already in effect: the display title is ${settings.titleIsSet ? \"set\" : \"not set\"}. This setting persists across turns, continuations, and interruptions. Do not call opengeni__set_session_title merely to reassert an unchanged value; call it only when the current value actually needs to change.`;\n}\n\n/**\n * Appends the workspace memory working-set block to the already-composed\n * (workspace + CORE + generic substrate) instructions, joined by \" \". The\n * memory slice is workspace-ground and intentionally lands before\n * per-session instructions. An absent/blank value is a no-op that returns the\n * composed string byte-for-byte.\n */\nexport function appendWorkspaceMemory(composed: string, workspaceMemory?: string): string {\n  const trimmed = workspaceMemory?.trim();\n  return trimmed ? `${composed} ${trimmed}` : composed;\n}\n\n/**\n * Appends the generic programmatic-tool-calling (toolspace) directive to the\n * composed workspace + CORE instructions, joined by \" \". This is GENERIC\n * substrate prompting — the same text for every host, never per-host copy.\n *\n * Included ONLY when `toolspaceAvailable` is true, which the caller sets from the\n * exact condition that gates the sandbox token mint: the toolspace feature is\n * enabled AND a toolspace token was minted for THIS turn. That mint now happens\n * on every backend including selfhosted (connected machines get the token too),\n * so the block appears there as well; a turn with no minted token (feature off)\n * has no toolspace URL/token in its sandbox and must not advertise a capability\n * that is not there — the gate is false and this is a no-op. Placed BEFORE the\n * per-session instructions so host/session specificity still wins over this\n * substrate note.\n */\nexport function appendToolspaceInstructions(composed: string, toolspaceAvailable: boolean): string {\n  return toolspaceAvailable ? `${composed} ${TOOLSPACE_PROGRAMMATIC_DIRECTIVE}` : composed;\n}\n\nconst GIT_BINDING_DISCOVERY_DIRECTIVE =\n  \"This managed sandbox has multiple credential bindings for at least one Git provider. Native Git selects credentials from the repository remote. For gh, glab, or az, run inside the intended attached repository so its origin selects the binding; when running elsewhere, inspect $HOME/.opengeni/git-bindings.json and set OPENGENI_GIT_BINDING to the listed credentialBindingId. The inventory contains identifiers and repository routes, never credential values. A binding marked git_http_broker is Git-only, so use the configured provider MCP tools for provider API operations on it.\";\n\n/**\n * Make multi-account provider-CLI selection discoverable to the model.\n *\n * Binding ids are opaque routing identifiers, not credentials. The detailed,\n * secret-free repository mapping is materialized in the sandbox by the Git\n * setup hook so prompts stay compact.\n */\nexport function appendGitCredentialBindingInstructions(\n  composed: string,\n  bindings: GitCredentialBindingSeed[] | undefined,\n  activeSandboxBackend?: Settings[\"sandboxBackend\"],\n): string {\n  if (activeSandboxBackend === \"selfhosted\" || !bindings?.length) {\n    return composed;\n  }\n  const bindingsByProvider = new Map<GitCredentialProvider, Set<string>>();\n  for (const binding of bindings) {\n    const ids = bindingsByProvider.get(binding.provider) ?? new Set<string>();\n    ids.add(binding.credentialBindingId);\n    bindingsByProvider.set(binding.provider, ids);\n  }\n  return [...bindingsByProvider.values()].some((ids) => ids.size > 1)\n    ? `${composed} ${GIT_BINDING_DISCOVERY_DIRECTIVE}`\n    : composed;\n}\n\n/**\n * Appends the one-shot genesis title directive (genesis turn only), joined by\n * \" \" and always LAST so a white-label persona template or a per-session\n * instruction can't drop it. A no-op when the hint is absent.\n */\nexport function appendGenesisTitleDirective(\n  instructions: string,\n  genesisTitleHint?: boolean,\n): string {\n  return genesisTitleHint ? `${instructions} ${GENESIS_TITLE_DIRECTIVE}` : instructions;\n}\n\nconst agentFileDownloads = new WeakMap<object, SandboxFileDownload[]>();\nconst agentRepositoryCloneHooks = new WeakMap<object, SandboxLifecycleHook[]>();\n// TOKEN-BROKER (B1): the per-turn provider git token seeds, stashed alongside\n// the agent's repository-clone hooks (a parallel map keyed by the agent). Kept\n// OFF the manifest/defaultManifest so rotating values never ride the SDK's\n// provided-session env; runStream reads them to build the clone hook context.\n// Absent when no brokered repo is attached / on the selfhosted path.\nconst agentGitTokenSeeds = new WeakMap<object, GitTokenSeeds>();\nconst agentGitCredentialBindings = new WeakMap<object, GitCredentialBindingSeed[]>();\nconst agentToolspaceTokenSeed = new WeakMap<object, string>();\nconst agentToolspaceTokenSessionId = new WeakMap<object, string>();\n// A genesis directive is consumed by runAgentStream exactly once for the\n// freshly-built agent. It must not remain in Agent.instructions: those\n// instructions are presented again on every internal model/tool loop.\nconst agentsNeedingGenesisTitleDirective = new WeakSet<object>();\n// The EFFECTIVE backend the turn resolved for this agent (undefined -> the home\n// backend). Read by runStream's owned branch to keep platform box-setup hooks off\n// connected machines (a user's real computer).\nconst agentActiveSandboxBackend = new WeakMap<object, Settings[\"sandboxBackend\"]>();\n// M3: the rig-setup descriptor + resolved rig credential hooks for this agent's\n// turn (kept off the manifest like the clone hooks). Read by runStream to build\n// the rig-setup hook and to union the rig credential hooks with the deployment\n// preparation-profile hooks. Absent for a rig-less turn.\nconst agentRigSetup = new WeakMap<object, RigSetupDescriptor>();\nconst agentRigCredentialHooks = new WeakMap<object, SandboxLifecycleHook[]>();\n\n/**\n * The tool output emitted for an MCP tool call that FAILED with a THROWN error\n * — a JSON-RPC protocol error (e.g. -32602 invalid params), an auth 401/403, a\n * transport failure, a timeout, or tool-not-found. Shaped as an MCP\n * `{ isError: true, content }` result so the failure is CARRIED on the tool\n * output rather than erased.\n *\n * The SDK's `defaultToolErrorFunction` would instead turn a thrown tool error\n * into a plain STRING (\"An error occurred while running the tool…\") returned as\n * a NORMAL, successful-looking result — so `agent.toolCall.output` carried no\n * error signal and the timeline rendered the failure as success. `normalizeSdkEvent`\n * captures `RunToolCallOutputItem.output` (the raw function return) verbatim, so\n * returning this object makes the emitted payload's `output.isError === true`,\n * which the timeline projection's `isErrorOutput` (packages/react/src/timeline/\n * projection.ts) settles to \"failed\" and downstream client normalizers read the same field.\n *\n * SCOPE: this only covers THROWN MCP failures (the ones that reach an\n * errorFunction). An MCP tool result carrying `isError: true` INLINE alongside\n * content is stripped to its `content` by @openai/agents-core's streamable-http\n * shim (dist/shims/mcp-server/node.js `callTool` returns `parsed.content`,\n * dropping `parsed.isError`) BEFORE the runtime ever sees it. Covering that mode\n * requires an SDK-level change (preserve `isError`) or reading the raw\n * CallToolResult — tracked separately.\n */\nexport function mcpToolErrorOutput(error: unknown): {\n  isError: true;\n  content: [{ type: \"text\"; text: string }];\n} {\n  const details = redactSensitiveText(error instanceof Error ? error.message : String(error));\n  return {\n    isError: true,\n    content: [\n      {\n        type: \"text\",\n        text: `An error occurred while running the tool. Please try again. Error: ${details}`,\n      },\n    ],\n  };\n}\n\n// Applied to EVERY MCP server via the agent's `mcpConfig.errorFunction`\n// (server-level errorFunctions would win, but PrefixedMcpServer sets none). The\n// SDK types the return as `string`; the runtime actually stores the raw return\n// as the tool output, so we return the MCP-shaped error object and cast — this\n// is the only way to attach an `isError` flag to a failed MCP tool call's output.\nconst mcpToolErrorFunction: MCPToolErrorFunction = ({ error }) =>\n  mcpToolErrorOutput(error) as unknown as string;\n\nexport function buildOpenGeniAgent(\n  settings: Settings,\n  resources: ResourceRef[],\n  options: BuildAgentOptions = {},\n): Agent<any, any> {\n  if (Boolean(options.toolspaceTokenSeed) !== Boolean(options.toolspaceTokenSessionId)) {\n    throw new Error(\"toolspaceTokenSeed and toolspaceTokenSessionId must be supplied together\");\n  }\n  // Resolved per-turn gating. Each override defaults to today's settings-derived\n  // behaviour, so the legacy global-client callers (no resolved model) build the\n  // exact same agent as before; the multi-provider worker path passes the\n  // resolved provider's api/window/web-search instead.\n  const hostedWebSearch = options.hostedWebSearch ?? settings.webSearchEnabled;\n  const encryptedReasoning = options.encryptedReasoning ?? settings.openaiReasoningEncryptedContent;\n  // Wire value must be provider-mapped by the caller (OpenAI `fast`, Azure/Codex\n  // `priority`). Do not fall back to latencyMode itself — that would send\n  // invalid Azure tiers.\n  const serviceTier = options.serviceTier;\n  const providerData = {\n    ...(encryptedReasoning ? { include: [\"reasoning.encrypted_content\"] } : {}),\n    ...(options.promptCacheKey ? { prompt_cache_key: options.promptCacheKey } : {}),\n    ...(serviceTier ? { service_tier: serviceTier } : {}),\n  };\n  // Native hosted tools attached to every constructed agent. webSearchEnabled\n  // is ON by default and provider-unconditional on the built-in path (the live\n  // Azure Responses path executes the hosted web_search tool); a registry model\n  // only gets it when it opts in (resolved via options.hostedWebSearch), since\n  // a provider that no-ops the param would hand the agent a dead tool. The SDK\n  // merges this explicit `tools` array with the MCP-server tools\n  // (Agent.getAllTools = [...mcpTools, ...tools]) and, on the SandboxAgent path,\n  // with the sandbox capability tools (prepareSandboxAgent: tools =\n  // [...agent.tools, ...capability.tools()]), so hosted web_search coexists with\n  // both rather than overriding them.\n  const hostedTools = hostedWebSearch ? [webSearchTool()] : [];\n  const humanInputTool = agentTool({\n    name: HUMAN_INPUT_TOOL_NAME,\n    description:\n      \"Pause this turn and request structured human input. Use for decisions or missing information that only a person can provide. Supports free text, single-select, multi-select, an optional Other value, multiple questions, explicit skip policy, and an optional expiry.\",\n    parameters: RequestHumanInputToolInput,\n    needsApproval: true,\n    // A missing/mismatched durable response is a protocol integrity failure,\n    // not model-visible tool output the agent may reason past.\n    errorFunction: null,\n    execute: (_input, _context, details) => {\n      const settled = options.humanInputResponse;\n      if (!settled) {\n        throw new Error(\"Human-input tool resumed without a durable response\");\n      }\n      const resumedCallId = details?.toolCall?.callId;\n      if (resumedCallId && resumedCallId !== settled.toolCallId) {\n        throw new Error(\"Human-input response does not belong to the resumed tool call\");\n      }\n      return JSON.stringify({ requestId: settled.requestId, ...settled.response });\n    },\n  });\n  const agentTools = [...hostedTools, humanInputTool];\n  const baseConfig = {\n    name: \"OpenGeni Agent\",\n    model: options.model ?? settings.openaiModel,\n    // White-label persona composition. The effective template is the per-call\n    // override (options.instructionsTemplate, resolved by the caller as\n    // session > workspace) falling back to the deployment default\n    // (settings.agentInstructionsTemplate, default DEFAULT_AGENT_INSTRUCTIONS).\n    // composeAgentInstructions substitutes the non-bypassable CORE (goal-loop\n    // ownership + workspace-environment block) at the {{core}} marker, or\n    // appends it when the template omits the marker. With the default template\n    // and no environment this is byte-identical to the historical preamble.\n    // Persona composition order (all one system-level instructions string):\n    //   1. workspace instructionsTemplate (or deployment default) with the\n    //      non-bypassable CORE substituted at {{core}} — composeAgentInstructions,\n    //   2. + the generic programmatic-tool-calling (toolspace) directive, ONLY\n    //      when a toolspace token was minted for this turn (feature enabled + a\n    //      per-turn seed — the mint gate, which includes selfhosted turns since\n    //      they now receive the token too) — appendToolspaceInstructions,\n    //   3. + managed-sandbox Git binding discovery, ONLY when one provider has\n    //      multiple credential bindings,\n    //   4. + workspace memory working set, ONLY when the workspace setting is on\n    //      and the worker resolved a nonblank block — appendWorkspaceMemory,\n    //   5. + the per-session persona instructions (session-specific, so it\n    //      refines both the workspace persona and the substrate note),\n    //   6. + host context for this exact turn, when supplied,\n    //   7. + durable session-setting state (title present + child notification\n    //      mode), when supplied by the worker,\n    // The genesis title directive is deliberately NOT part of this persistent\n    // string. runAgentStream injects it into the first model call only.\n    instructions: appendPersistentSessionSettings(\n      appendTurnInstructions(\n        appendSessionInstructions(\n          appendWorkspaceMemory(\n            appendGitCredentialBindingInstructions(\n              appendToolspaceInstructions(\n                composeAgentInstructions(\n                  options.instructionsTemplate ?? settings.agentInstructionsTemplate,\n                  options.workspaceEnvironment,\n                  options.rig,\n                ),\n                settings.toolspaceEnabled && Boolean(options.toolspaceTokenSeed),\n              ),\n              options.gitCredentialBindings,\n              options.activeSandboxBackend,\n            ),\n            options.workspaceMemory,\n          ),\n          options.sessionInstructions,\n        ),\n        options.turnInstructions,\n      ),\n      options.persistentSessionSettings,\n    ),\n    modelSettings: {\n      reasoning: {\n        effort: options.reasoningEffort ?? settings.openaiReasoningEffort,\n        summary: \"detailed\",\n      },\n      // Round-trip the encrypted reasoning payload with every call so chains\n      // of thought survive without provider-side response storage (which is\n      // what stripped provider item ids opt us out of — see\n      // stripProviderItemIds). providerData.include replaces any\n      // tool-derived include entries; OpenGeni's tools are MCP/sandbox\n      // function tools, which contribute none. Gated on the resolved\n      // encryptedReasoning flag: the chat wire API has no encrypted_content\n      // field, so registry \"chat\" providers turn it off.\n      ...(Object.keys(providerData).length > 0 ? { providerData } : {}),\n    },\n    // Explicit hosted tools (web_search when enabled). Threaded into BOTH the\n    // `new Agent(baseConfig)` path (sandboxBackend === \"none\") and the\n    // `new SandboxAgent({ ...baseConfig, ... })` path via the shared baseConfig\n    // spread; the SDK concatenates these with MCP and sandbox capability tools.\n    tools: agentTools,\n    ...(options.mcpServers?.length ? { mcpServers: options.mcpServers } : {}),\n    // Surface FAILED MCP tool calls as `{ isError: true }` tool output (see\n    // mcpToolErrorFunction / mcpToolErrorOutput) instead of the SDK's default\n    // flat error string, so a thrown MCP failure (protocol error, auth, timeout,\n    // tool-not-found) settles the timeline tool to \"failed\" rather than rendering\n    // as success. Applies to every MCP server on this agent (session, first-party,\n    // capability, codex_apps) since none set a server-level errorFunction.\n    mcpConfig: { errorFunction: mcpToolErrorFunction },\n  } as const;\n\n  if (settings.sandboxBackend === \"none\") {\n    const agent = new Agent(baseConfig);\n    if (options.genesisTitleHint) {\n      agentsNeedingGenesisTitleDirective.add(agent);\n    }\n    maybeInstallCodexToolSearch(agent, settings, options);\n    applyMcpApprovalPolicy(agent, settings);\n    return agent;\n  }\n\n  const runAs = sandboxRunAs(settings);\n  const agent = new SandboxAgent({\n    ...baseConfig,\n    defaultManifest: buildManifest(\n      settings,\n      resources,\n      options.sandboxEnvironment,\n      options.fileResourceDownloads,\n    ),\n    ...(runAs ? { runAs } : {}),\n    capabilities: buildAgentCapabilities(settings, options.packSkills ?? [], {\n      ...(options.skillLibrarySkills?.length\n        ? { skillLibrarySkills: options.skillLibrarySkills }\n        : {}),\n      ...(options.sessionSkills?.length ? { sessionSkills: options.sessionSkills } : {}),\n      ...repositoryWorkspaceSkillPathsOption(resources),\n      ...(options.structuredToolTransport !== undefined\n        ? { structuredToolTransport: options.structuredToolTransport }\n        : {}),\n      ...(options.computerToolMode !== undefined\n        ? { computerToolMode: options.computerToolMode }\n        : {}),\n      ...(options.onComputerUseReady ? { onComputerUseReady: options.onComputerUseReady } : {}),\n      ...(options.turnCancellationSignal\n        ? { turnCancellationSignal: options.turnCancellationSignal }\n        : {}),\n      ...(options.onToolCancellationFence\n        ? { onToolCancellationFence: options.onToolCancellationFence }\n        : {}),\n    }),\n  });\n  agentSkillSelections.set(\n    agent,\n    Object.freeze(\n      effectiveSkillSelections(\n        options.skillLibrarySelections ?? [],\n        options.skillLibrarySkills ?? [],\n        options.packSkills ?? [],\n        options.sessionSkills ?? [],\n      ).map((selection) => Object.freeze(selection)),\n    ),\n  );\n  if (options.genesisTitleHint) {\n    agentsNeedingGenesisTitleDirective.add(agent);\n  }\n  agentFileDownloads.set(\n    agent,\n    normalizeSandboxFileDownloads(options.fileResourceDownloads ?? []).filter(\n      (download) => !download.content,\n    ),\n  );\n  agentRepositoryCloneHooks.set(\n    agent,\n    sandboxRepositoryCloneHooks(settings, resources, options.activeSandboxBackend),\n  );\n  // Stash the EFFECTIVE backend so runStream's owned branch can skip the direct\n  // beforeAgentStart hook run on a connected machine: the box there is the user's\n  // REAL computer — the platform must not run setup (az login) against it. The\n  // clone hooks are already excluded for selfhosted at construction (above); this\n  // keeps the built-in hooks equally out.\n  if (options.activeSandboxBackend) {\n    agentActiveSandboxBackend.set(agent, options.activeSandboxBackend);\n  }\n  // TOKEN-BROKER (B1): stash per-turn provider seeds off-manifest so runStream\n  // can seed the setup hook without tokens ever touching defaultManifest /\n  // sandboxEnvironment. `gitTokenSeed` remains the GitHub alias.\n  const gitTokenSeeds = {\n    ...(options.gitTokenSeeds ?? {}),\n    ...(options.gitTokenSeed ? { github: options.gitTokenSeed } : {}),\n  } satisfies GitTokenSeeds;\n  if (Object.keys(gitTokenSeeds).length > 0) {\n    agentGitTokenSeeds.set(agent, gitTokenSeeds);\n  }\n  if (options.gitCredentialBindings && options.gitCredentialBindings.length > 0) {\n    agentGitCredentialBindings.set(agent, options.gitCredentialBindings);\n  }\n  if (options.toolspaceTokenSeed) {\n    agentToolspaceTokenSeed.set(agent, options.toolspaceTokenSeed);\n    agentToolspaceTokenSessionId.set(agent, options.toolspaceTokenSessionId!);\n  }\n  // M3: stash the rig setup descriptor + RESOLVE the rig credential hooks now.\n  // sandboxLifecycleHooksForIds throws on an unknown hook name, so a typo'd rig\n  // credential_hook fails the turn HERE (per-turn resolution) rather than being\n  // silently dropped — the fail-visible contract the brief requires.\n  if (options.rigSetup) {\n    agentRigSetup.set(agent, options.rigSetup);\n  }\n  if (options.rigCredentialHookIds && options.rigCredentialHookIds.length > 0) {\n    agentRigCredentialHooks.set(agent, sandboxLifecycleHooksForIds(options.rigCredentialHookIds));\n  }\n  maybeInstallCodexToolSearch(agent, settings, options);\n  applyMcpApprovalPolicy(agent, settings);\n  return agent;\n}\n\n/**\n * Enable Codex-CLI-style progressive MCP disclosure on a Codex turn when the\n * flag is on. Gated on `structuredToolTransport === false` — the same signal that\n * identifies a Codex-subscription turn (the ChatGPT backend that rejects hosted\n * tools) — so no non-Codex turn is ever touched. On qualifying turns it wraps\n * `getAllTools` (clone-survivingly — see {@link installCodexToolSearch}) to defer\n * selected non-mandatory MCP schemas and add the client tool_search tool. The\n * description combines live connector namespaces with selected server identities.\n */\nfunction maybeInstallCodexToolSearch(\n  agent: Agent<any, any>,\n  settings: Settings,\n  options: BuildAgentOptions,\n): void {\n  if (settings.codexToolSearchEnabled && options.structuredToolTransport === false) {\n    const mcpServers = options.mcpServers ?? [];\n    // `defer_loading:true` removes these MCP schemas from provider context until\n    // tool_search discloses a bounded match. Keep the compaction estimator on\n    // that same wire truth; otherwise a large deferred catalog can falsely trip\n    // compaction before the first real model request. OpenGeni remains eager.\n    for (const server of mcpServers) {\n      if (server.name === \"opengeni\") continue;\n      (\n        server as MCPServer & {\n          deferModelToolSchemaAccounting?: () => void;\n        }\n      ).deferModelToolSchemaAccounting?.();\n    }\n    installCodexToolSearch(\n      agent as unknown as Parameters<typeof installCodexToolSearch>[0],\n      options.codexConnectorNamespaces ?? new Set<string>(),\n      new Set(mcpServers.map((server) => server.name)),\n    );\n  }\n}\n\n/** True when the unprefixed tool `name` requires approval under `policy`. */\nfunction mcpToolRequiresApproval(\n  policy: boolean | ReadonlySet<string>,\n  unprefixedName: string,\n): boolean {\n  return policy === true || (policy !== false && policy.has(unprefixedName));\n}\n\n/** A per-server approval policy keyed by the server's `<id>__` tool prefix. */\ntype McpApprovalPolicy = {\n  prefix: string;\n  requireApproval: boolean | ReadonlySet<string>;\n};\n\n/** The subset of the agent surface the approval wrap needs — including `clone`. */\ntype ApprovalCapableAgent = {\n  getMcpTools: (runContext: unknown) => Promise<Tool<any>[]>;\n  clone?: (config: unknown) => ApprovalCapableAgent;\n};\n\n/**\n * Install the approval wrap on a single agent instance: replace `getMcpTools`\n * with one that stamps `needsApproval: () => true` on every MCP tool whose\n * server policy demands it. Tools are matched by the server's `<id>__` prefix\n * (LONGEST prefix first — see {@link applyMcpApprovalPolicy}), then the\n * unprefixed tool name.\n *\n * CLONE SURVIVAL (mirrors {@link installCodexToolSearch}): the sandbox runtime\n * resolves tools not on the agent we build here but on a FRESH clone —\n * `prepareSandboxAgent` calls `agent.clone(...)`, and `SandboxAgent.clone`\n * reconstructs from a FIXED field list (name/tools/mcpServers/…), so an\n * instance-own `getMcpTools` override is dropped and approval would silently\n * bypass on every sandbox turn. We therefore also wrap `clone` to RE-INSTALL the\n * policy onto every clone, recursively — covering clone-of-clone and the resume\n * paths. The base (non-sandbox) `Agent.clone` spreads `...this` and would carry\n * the override, but re-installing is idempotent there and keeps one code path.\n */\nfunction installMcpApprovalPolicy(\n  agent: ApprovalCapableAgent,\n  policies: McpApprovalPolicy[],\n): void {\n  const listMcpTools = agent.getMcpTools.bind(agent);\n  agent.getMcpTools = async (runContext: unknown) => {\n    const tools = await listMcpTools(runContext);\n    return tools.map((tool) => {\n      if (tool.type !== \"function\") {\n        return tool;\n      }\n      const policy = policies.find((entry) => tool.name.startsWith(entry.prefix));\n      if (!policy) {\n        return tool;\n      }\n      const unprefixed = tool.name.slice(policy.prefix.length);\n      return mcpToolRequiresApproval(policy.requireApproval, unprefixed)\n        ? { ...tool, needsApproval: async () => true }\n        : tool;\n    });\n  };\n  const originalClone = agent.clone?.bind(agent);\n  if (originalClone) {\n    agent.clone = (config: unknown) => {\n      const cloned = originalClone(config);\n      installMcpApprovalPolicy(cloned, policies);\n      return cloned;\n    };\n  }\n}\n\n/**\n * Enforce per-MCP-server human approval. `settings.mcpServers[].requireApproval`\n * is `true` (every tool of that server requires approval) or a string[] of\n * UNPREFIXED tool names (only those do); absent = auto-run. The SDK converts MCP\n * tools to function tools with `needsApproval` unset (defaults false) and exposes\n * no per-server/agent approval knob, so we wrap the agent's `getMcpTools` to\n * attach a `needsApproval: () => true` predicate to the matching tools — matched\n * by the server's `<id>__` prefix, then the unprefixed tool name. A tool that\n * needs approval raises a run INTERRUPTION, which the worker turns into\n * `session.requiresAction` and resolves via `user.approvalDecision`\n * (resumeApproval) — the same generic path shell/computer-use approvals use, so\n * no extra plumbing. No-op when no server requests approval, so the default\n * (auto-run everything) is byte-for-byte unchanged.\n *\n * Two robustness properties the wrap must hold:\n *  - LONGEST-PREFIX-FIRST. Server ids can be prefixes of one another (`my` vs\n *    `my_`), so their tool prefixes collide (`my__` vs `my___`): a tool like\n *    `my___run` (from server `my_`) also `startsWith` `my__` (server `my`). A\n *    first-match `find` over unsorted policies could bind it to the WRONG\n *    server's policy and bypass gating. Sorting policies by DESCENDING prefix\n *    length makes the most-specific (longest) prefix win, so each tool resolves\n *    to its own server.\n *  - CLONE SURVIVAL. The wrap is re-installed onto every clone; see\n *    {@link installMcpApprovalPolicy}.\n */\nfunction applyMcpApprovalPolicy(agent: Agent<any, any>, settings: Settings): void {\n  const policies: McpApprovalPolicy[] = settings.mcpServers\n    .filter(\n      (server) =>\n        server.requireApproval === true ||\n        (Array.isArray(server.requireApproval) && server.requireApproval.length > 0),\n    )\n    .map((server) => ({\n      prefix: prefixedMcpToolName(server.id, \"\"),\n      requireApproval:\n        server.requireApproval === true ? true : new Set(server.requireApproval as string[]),\n    }))\n    .sort((a, b) => b.prefix.length - a.prefix.length);\n  if (policies.length === 0) {\n    return;\n  }\n  installMcpApprovalPolicy(agent as unknown as ApprovalCapableAgent, policies);\n}\n\n/**\n * Force a sandbox capability to emit its FUNCTION-transport tool variants instead\n * of the hosted ones, by dropping the model instance the SDK's transport\n * detection keys off. See {@link buildAgentCapabilities} for why (codex routes the\n * OpenAIResponsesModel to the ChatGPT backend, which rejects the hosted\n * `apply_patch` AND `computer_use_preview` tool types). The SDK reads\n * hosted-vs-function ONLY from `_modelInstance` (set via `bindModel`); overriding\n * `bindModel` to discard the instance leaves `_modelInstance` undefined, so\n * `supportsApplyPatchTransport` / `supportsStructuredToolOutputTransport` return\n * false and `tools()` emits the function variants — `apply_patch` + text\n * `view_image` for filesystem, and the `computer_*` function tools + text\n * `computer_screenshot` for computer-use. `bindModel` still returns the capability\n * so the SDK's bind chain (`.bind().bindRunAs().bindModel()`) is preserved.\n */\nfunction neutralizeStructuredToolTransport(\n  capability: ReturnType<typeof filesystem> | ReturnType<typeof computerUse>,\n): void {\n  // Use `this` (NOT a captured reference to `capability`): the SandboxAgent binds\n  // via `cap.clone().bind(session).bindRunAs(runAs).bindModel(model, instance)` and\n  // runs tools() on the object the CHAIN returns. Capability.clone() copies this\n  // override onto the fresh per-run instance, so bindModel must operate on and\n  // RETURN `this` (the clone) — a version that mutated/returned the ORIGINAL\n  // capability leaves the clone (which .bind() set `_session` on) out of the chain,\n  // so tools() runs on the unbound original and throws \"Filesystem capability is\n  // not bound to a SandboxSession\". Dropping the model instance is all we need:\n  // supportsApplyPatchTransport(undefined) is false → the function apply_patch.\n  const forceFunctionTransport = function (this: Record<string, unknown>): unknown {\n    this._modelInstance = undefined;\n    return this;\n  };\n  (capability as unknown as { bindModel: typeof forceFunctionTransport }).bindModel =\n    forceFunctionTransport;\n}\n\n/**\n * Build the SandboxAgent capability set explicitly. The SDK default includes\n * its inline provider compaction capability; OpenGeni deliberately omits it\n * because durable portable compaction owns the full history transition.\n */\n/**\n * Wrap the shell capability's `exec_command` so its execution runs inside a\n * tool-call correlation context (op-correlation.ts): the SDK's tool machinery\n * passes `details.toolCall` (the model's function_call, with its durable\n * `callId`) into every function-tool `invoke`, and binding an\n * AsyncLocalStorage around the invocation makes that id visible to the sandbox\n * transport underneath — which mints the DURABLE op id `{callId}:{ordinal}`\n * (op-stream ruling B1). A re-dispatched turn re-executes the same\n * function_call with the same callId, so the transport's idempotent OpStart\n * ATTACHES to the already-running/completed op instead of re-running it.\n * Without a callId (no details on the invocation) the tool runs unwrapped and\n * the transport falls back to a random unique id — today's semantics.\n */\nfunction withExecOpCorrelation(tools: Tool<unknown>[]): Tool<unknown>[] {\n  return tools.map((capabilityTool) => {\n    if (capabilityTool.type !== \"function\" || capabilityTool.name !== \"exec_command\") {\n      return capabilityTool;\n    }\n    const invoke = capabilityTool.invoke;\n    return {\n      ...capabilityTool,\n      invoke: (runContext, input, details) => {\n        const callId = details?.toolCall?.callId;\n        if (!callId) {\n          return invoke(runContext, input, details);\n        }\n        return runWithToolCallCorrelation(callId, () => invoke(runContext, input, details));\n      },\n    };\n  });\n}\n\n/**\n * Codex accepts ordinary FUNCTION tools but also accepts `input_image` content\n * inside a function_call_output (the same transport used by codex-rs\n * view_image). The SDK filesystem capability unnecessarily couples this choice\n * to hosted apply_patch support; when hosted tools are disabled it degrades\n * view_image to a giant text data URL, charging roughly one token per four\n * base64 characters. Re-wrap only successful data-URL results as a structured\n * image. Text errors remain text, and the tool itself remains a normal function.\n */\nexport function withStructuredViewImageFunctionResults(tools: Tool<unknown>[]): Tool<unknown>[] {\n  return tools.map((capabilityTool) => {\n    if (capabilityTool.type !== \"function\" || capabilityTool.name !== \"view_image\") {\n      return capabilityTool;\n    }\n    const invoke = capabilityTool.invoke;\n    return {\n      ...capabilityTool,\n      invoke: async (runContext, input, details) => {\n        const output = await invoke(runContext, input, details);\n        const dataUrl =\n          typeof output === \"string\"\n            ? output\n            : output &&\n                typeof output === \"object\" &&\n                typeof (output as { text?: unknown }).text === \"string\"\n              ? (output as { text: string }).text\n              : null;\n        return dataUrl?.startsWith(\"data:image/\")\n          ? { type: \"image\" as const, image: { url: dataUrl } }\n          : output;\n      },\n    };\n  });\n}\n\nexport function buildAgentCapabilities(\n  settings: Settings,\n  packSkills: PackSkill[],\n  options: {\n    skillLibrarySkills?: PackSkill[];\n    sessionSkills?: PackSkill[];\n    workspaceSkillPaths?: readonly WorkspaceSkillSearchPath[];\n    structuredToolTransport?: boolean;\n    // EXPLICIT computer-use transport (see BuildAgentOptions.computerToolMode).\n    // Omitted/unproven transport fails closed with no computer tools.\n    computerToolMode?: ComputerToolMode;\n    onComputerUseReady?: (session: SandboxSessionLike) => Promise<void>;\n    turnCancellationSignal?: AbortSignal;\n    onToolCancellationFence?: (fence: TurnToolCancellationFence) => void;\n  } = {},\n): ReturnType<typeof Capabilities.default> {\n  const toolCancellation =\n    options.turnCancellationSignal || options.onToolCancellationFence\n      ? createTurnToolCancellationController(options.turnCancellationSignal)\n      : null;\n  if (toolCancellation) options.onToolCancellationFence?.(toolCancellation);\n  // The `filesystem()` capability picks hosted-vs-function tool variants from the\n  // bound model instance (supportsApplyPatchTransport / structured tool output).\n  // When the caller declares the backend does NOT support that structured/hosted\n  // transport (codex → the ChatGPT backend rejects the hosted `apply_patch` type),\n  // neutralize this capability's model binding so tools() falls to the function\n  // `apply_patch` + text `view_image` variants the backend accepts — the SDK\n  // handles their function_call round-trip natively, so no reimplementation.\n  // Scoped to filesystem: shell() is always a function-tool transport.\n  const filesystemCapability = filesystem({\n    ...(options.structuredToolTransport === false\n      ? { configureTools: withStructuredViewImageFunctionResults }\n      : {}),\n  });\n  if (options.structuredToolTransport === false) {\n    neutralizeStructuredToolTransport(filesystemCapability);\n  }\n  const caps: ReturnType<typeof Capabilities.default> = [\n    filesystemCapability,\n    shell({ ...(toolCancellation ? {} : { configureTools: withExecOpCorrelation }) }),\n  ];\n  const sessionSkills = sessionSkillsForMaterialization(\n    packSkills,\n    options.skillLibrarySkills ?? [],\n    options.sessionSkills ?? [],\n  );\n  caps.push(\n    skills({\n      lazyFrom: lazySkillSourceWithPackSkills(\n        [...packSkills, ...sessionSkills],\n        options.skillLibrarySkills ?? [],\n      ),\n    }),\n  );\n  if (options.workspaceSkillPaths?.length) {\n    caps.push(\n      workspaceSkills(options.workspaceSkillPaths, [\n        ...bundledSkillDirNames(bundledSkillsDir()),\n        ...(options.skillLibrarySkills ?? []).map((skill) => skill.name),\n        ...packSkills.map((skill) => skill.name),\n        ...sessionSkills.map((skill) => skill.name),\n      ]),\n    );\n  }\n  // P4.3 computer-use: the agent drives the SAME :0 humans watch (xdotool/XTEST +\n  // scrot), but only when the desktop tier is ON, computer-use is enabled, and the\n  // backend is one whose image carries the X stack (descriptorgate — honest about\n  // which backends are desktop-capable today; headless/dev backends never get the\n  // tool, so a misconfigured non-desktop box can't register a tool that always\n  // fails). The capability's tools() bind to the live externally-owned session at\n  // run time (the SandboxAgent merge); xdotool drives :0 regardless of whether any\n  // viewer is attached, so no pixel-tunnel dependency.\n  if (\n    settings.computerUseEnabled &&\n    settings.sandboxDesktopEnabled &&\n    desktopCapableBackend(settings.sandboxBackend)\n  ) {\n    // computer-use is transport-aware, exactly like filesystem: `tools()` emits the\n    // HOSTED `computer_use_preview` tool on the structured transport and a set of\n    // FUNCTION `computer_*` tools on the text transport. The ChatGPT/Codex backend\n    // rejects hosted tool types (only function/custom/web_search accepted).\n    //\n    // The worker declares an explicit mode from authoritative provider resolution.\n    // Exported/public callers that omit it are unproven and therefore disabled.\n    const computerCapability = computerUse({\n      dimensions: [settings.streamResolutionWidth, settings.streamResolutionHeight],\n      readOnly: settings.computerUseReadOnly,\n      ...(options.onComputerUseReady ? { onReady: options.onComputerUseReady } : {}),\n      toolMode: options.computerToolMode ?? \"disabled\",\n    });\n    caps.push(computerCapability as unknown as ReturnType<typeof Capabilities.default>[number]);\n  }\n  if (toolCancellation) {\n    for (const capability of caps) {\n      wrapCapabilityToolsForTurnCancellation(\n        capability as unknown as { tools(): Tool<unknown>[] },\n        toolCancellation,\n      );\n    }\n  }\n  return caps;\n}\n\nexport function sandboxRunAs(_settings: Settings): string | undefined {\n  return undefined;\n}\n\nexport type PreparedAgentTools = {\n  mcpServers: MCPServer[];\n  close: () => Promise<void>;\n  // P4 (Part B.1): the live, by-reference Set of ORIGINAL-dotted connector\n  // namespaces the codex_apps transport saw across this turn's tools/list calls.\n  // Accumulates as the agent lists tools during the run, so the worker reads it\n  // AFTER the turn (in its finally) to cache the serving account's connector set.\n  // Empty when this turn has no codex_apps server (or it never listed any\n  // namespaced tool) — the worker only persists a non-empty set.\n  codexConnectorNamespaces: Set<string>;\n};\n\nexport type PrepareToolsOptions = {\n  accountId?: string;\n  workspaceId?: string;\n  // Worker-asserted session scope for first-party MCP calls; enables\n  // session-scoped tools such as goal management on the API side.\n  sessionId?: string;\n  // The calling turn's id, signed into the token so tools can classify the\n  // caller from its own identity instead of the session's live active pointer.\n  turnId?: string;\n  // The exact executing attempt that owns the MCP call.\n  attemptId?: string;\n  executionGeneration?: number;\n  subjectId?: string;\n  subjectLabel?: string;\n  // Immutable human authority used only for subject-owned connection lookup.\n  // This is intentionally separate from the worker's first-party MCP identity.\n  credentialSubjectId?: string;\n  // Overrides the fixed first-party MCP permission set for this session's\n  // delegated token (manager-style sessions). The caller is responsible for\n  // having validated the set against the session creator's grant.\n  firstPartyPermissions?: Permission[];\n  // Exact model-visible catalog selection for the broad first-party server.\n  // Permissions are signed separately and remain the authorization boundary.\n  firstPartyTools?: FirstPartyMcpToolName[];\n  resolveCredential?: (\n    input: ResolveConnectionCredentialInput,\n  ) => Promise<ResolveConnectionCredentialResult>;\n  onAuthNeeded?: (payload: ToolAuthNeededPayload) => Promise<void> | void;\n  /** Injectable final MCP transport for tests and embedded hosts. */\n  mcpFetchImpl?: FetchLike;\n};\n\ntype ConnectedMcpServerBatch = Awaited<ReturnType<typeof connectMcpServers>>;\n\nexport type ConnectedMcpServerBatches = {\n  active: MCPServer[];\n  failed: MCPServer[];\n  errors: ReadonlyMap<MCPServer, Error>;\n  close: () => Promise<void>;\n};\n\n/**\n * Connect SDK-managed MCP servers in stable, bounded batches. The SDK cleans a\n * failing strict batch; this wrapper additionally closes every earlier batch\n * before rethrowing, so a later-batch failure cannot leak live connections.\n */\nexport async function connectMcpServersInBatches(\n  servers: MCPServer[],\n  options: { strict: boolean; connectTimeoutMs?: number },\n): Promise<ConnectedMcpServerBatches> {\n  assertMcpServerSelectionWithinBounds(servers);\n  const batches: ConnectedMcpServerBatch[] = [];\n  try {\n    for (let offset = 0; offset < servers.length; offset += MCP_MAX_CONCURRENT_SERVER_OPERATIONS) {\n      batches.push(\n        await connectMcpServers(\n          servers.slice(offset, offset + MCP_MAX_CONCURRENT_SERVER_OPERATIONS),\n          {\n            ...(options.connectTimeoutMs === undefined\n              ? {}\n              : { connectTimeoutMs: options.connectTimeoutMs }),\n            connectInParallel: true,\n            strict: options.strict,\n          },\n        ),\n      );\n    }\n  } catch (error) {\n    await closeMcpServerBatches(batches).catch(() => undefined);\n    throw error;\n  }\n\n  const errors = new Map<MCPServer, Error>();\n  for (const batch of batches) {\n    for (const [server, error] of batch.errors) errors.set(server, error);\n  }\n  return {\n    active: batches.flatMap((batch) => batch.active),\n    failed: batches.flatMap((batch) => batch.failed),\n    errors,\n    close: async () => {\n      await closeMcpServerBatches(batches);\n    },\n  };\n}\n\nasync function closeMcpServerBatches(batches: ConnectedMcpServerBatch[]): Promise<void> {\n  let firstError: unknown;\n  for (const batch of [...batches].reverse()) {\n    try {\n      await batch.close();\n    } catch (error) {\n      firstError ??= error;\n    }\n  }\n  if (firstError !== undefined) throw firstError;\n}\n\nexport async function prepareAgentTools(\n  settings: Settings,\n  tools: ToolRef[],\n  options: PrepareToolsOptions = {},\n): Promise<PreparedAgentTools> {\n  // P4 (Part B.1): one Set per prepareTools call, shared by reference into the\n  // codex_apps sanitizing fetch so every tools/list this turn accumulates the\n  // account's connector namespaces. Surfaced on PreparedAgentTools for the worker.\n  const codexConnectorNamespaces = new Set<string>();\n  assertMcpServerSelectionWithinBounds(tools);\n  if (tools.length === 0) {\n    return { mcpServers: [], close: async () => {}, codexConnectorNamespaces };\n  }\n  const registry = new Map(settings.mcpServers.map((server) => [server.id, server]));\n  const subjectOwnedTool = tools.find(\n    (tool) => registry.get(tool.id)?.connectionRef?.subjectScope === \"subject\",\n  );\n  if (subjectOwnedTool && !options.credentialSubjectId) {\n    throw new Error(\n      `subject-owned connection for MCP server ${subjectOwnedTool.id} requires a human turn initiator`,\n    );\n  }\n  const aggregateToolBudget = new McpAggregateToolListBudget();\n  // npm Undici's dispatcher transport can hang indefinitely under Bun even\n  // after an AbortSignal fires. Bun's native fetch is the supported runtime\n  // transport there; destination policy validation still runs before every\n  // credential-bearing MCP request.\n  const useBunNativeFetch = options.mcpFetchImpl === undefined && !!process.versions.bun;\n  const mcpFetchImpl =\n    options.mcpFetchImpl ?? (useBunNativeFetch ? globalThis.fetch.bind(globalThis) : undiciFetch);\n  const servers = await boundedParallelMap(\n    tools,\n    MCP_MAX_CONCURRENT_SERVER_OPERATIONS,\n    async (tool, index) => {\n      const config = registry.get(tool.id);\n      if (!config) {\n        throw new Error(`Unknown MCP server id: ${tool.id}`);\n      }\n      const url = firstPartyMcpServerUrlForRun(settings, config, options.workspaceId) ?? config.url;\n      const firstParty = isFirstPartyMcpServer(settings, config);\n      const baseFetch = isCodexAppsMcpServer(config)\n        ? codexAppsSanitizingFetch(mcpFetchImpl, codexConnectorNamespaces)\n        : mcpFetchImpl;\n      const guardedFetch = guardedMcpFetch(\n        firstParty ? { ...settings, integrationsAllowPrivateNetworkTargets: true } : settings,\n        baseFetch,\n        {\n          ...(firstParty ? { requireHttpsOutsideLocalTest: false } : {}),\n          ...(useBunNativeFetch ? { pinResolvedDestination: false } : {}),\n        },\n      );\n      const fetchImpl = config.connectionRef\n        ? connectionBrokerFetch(guardedFetch, config, options)\n        : firstParty\n          ? firstPartyAuthFetch(guardedFetch, settings, options)\n          : guardedFetch;\n      // A server is connected BEST-EFFORT (a connect OR tools-list failure drops\n      // it — its tools go unavailable for the turn — instead of failing the turn)\n      // in two cases:\n      //  - codex_apps: connector availability is RUNTIME-DISCOVERED — the\n      //    device-code login may lack the connector scopes, and the backend can\n      //    reject the bearer at the initialize/tools-list handshake, so a 401/403\n      //    (or a missing/failed token) drops the server.\n      //  - an optional ToolRef: either an auto-attached workspace-default\n      //    capability MCP or a client/pack-selected portable ref. A\n      //    broken/expired credential or unavailable endpoint skips the server\n      //    with a warning, never killing the turn before the model runs. Bare\n      //    refs stay strict (below), preserving the fail-loud default.\n      // The connect-time drop is handled by connectMcpServers({ strict: false });\n      // the tools-list-time drop is enforced inside PrefixedMcpServer.listTools —\n      // a best-effort server whose tools/list throws (e.g. an expired connection\n      // credential surfacing as a StreamableHTTP \"authentication required\" 401)\n      // degrades to zero tools rather than throwing out of the SDK's run-time\n      // getAllMcpTools and failing an unrelated turn. The actionable\n      // tool.auth_needed signal is preserved: the connection-broker fetch\n      // publishes it before returning the 401 that provokes the throw.\n      const optional = tool.optional === true;\n      const bestEffort = isCodexAppsMcpServer(config) || optional || !!config.connectionRef;\n      const server = new PrefixedMcpServer(\n        new MCPServerStreamableHttp({\n          url,\n          name: config.name ?? config.id,\n          cacheToolsList: config.cacheToolsList,\n          // The upstream transport logger receives raw thrown errors, whose\n          // messages may contain response bodies, URLs, headers, or echoed\n          // credentials. Keep its diagnostic surface structural only.\n          logger: safeMcpTransportLogger(config.id),\n          // codex_apps returns connector tools with empty `outputSchema: {}` that the\n          // MCP SDK's strict Tool schema rejects (fails the turn during tools/list);\n          // sanitize the response on the wire before validation. The namespace Set\n          // also captures each tool's original connector namespace (P4 Part B.1).\n          fetch: fetchImpl,\n          ...(await mcpServerRequestInit(settings, config)),\n          ...(config.timeoutMs\n            ? {\n                timeout: config.timeoutMs,\n                clientSessionTimeoutSeconds: Math.ceil(config.timeoutMs / 1000),\n              }\n            : {}),\n        }),\n        config.id,\n        config.allowedTools,\n        bestEffort,\n        aggregateToolBudget,\n        `${config.id}:${index}`,\n      );\n      return {\n        server,\n        bestEffort,\n        optional,\n        timeoutMs: config.timeoutMs,\n      };\n    },\n  );\n  const requiredEntries = servers.filter((entry) => !entry.bestEffort);\n  const bestEffortEntries = servers.filter((entry) => entry.bestEffort);\n  const requiredServers = requiredEntries.map((entry) => entry.server);\n  const bestEffortServers = bestEffortEntries.map((entry) => entry.server);\n  // Names of the OPTIONAL servers (not codex_apps) so a drop is surfaced as a\n  // warning; codex_apps keeps its historically-quiet drop (a not-logged-in\n  // ChatGPT plan is a normal, non-noteworthy state).\n  const optionalServerNames = new Set(\n    servers.filter((entry) => entry.optional).map((entry) => entry.server.name),\n  );\n  const connectedRequired = await connectMcpServersInBatches(requiredServers, {\n    strict: true,\n    connectTimeoutMs: mcpOuterConnectTimeoutMs(requiredEntries.map((entry) => entry.timeoutMs)),\n  });\n  let connectedBestEffort: ConnectedMcpServerBatches | null = null;\n  try {\n    connectedBestEffort = bestEffortServers.length\n      ? await connectMcpServersInBatches(bestEffortServers, {\n          strict: false,\n          connectTimeoutMs: mcpOuterConnectTimeoutMs(\n            bestEffortEntries.map((entry) => entry.timeoutMs),\n          ),\n        })\n      : null;\n  } catch (error) {\n    await connectedRequired.close().catch(() => undefined);\n    throw error;\n  }\n  if (connectedBestEffort) {\n    for (const failed of connectedBestEffort.failed) {\n      if (failed instanceof PrefixedMcpServer) {\n        failed.releaseAggregateBudget();\n      }\n      if (!optionalServerNames.has(failed.name)) {\n        continue;\n      }\n      const error = connectedBestEffort.errors.get(failed);\n      console.warn(\n        `[mcp] optional server \"${failed.name}\" failed to connect/list tools; skipping it for this turn`,\n        safeMcpErrorFields(error),\n      );\n    }\n  }\n  return {\n    mcpServers: [...connectedRequired.active, ...(connectedBestEffort?.active ?? [])],\n    close: async () => {\n      let firstError: unknown;\n      if (connectedBestEffort) {\n        try {\n          await connectedBestEffort.close();\n        } catch (error) {\n          firstError ??= error;\n        }\n      }\n      try {\n        await connectedRequired.close();\n      } catch (error) {\n        firstError ??= error;\n      }\n      if (firstError !== undefined) throw firstError;\n    },\n    codexConnectorNamespaces,\n  };\n}\n\nfunction connectionBrokerFetch(\n  baseFetch: FetchLike,\n  config: Settings[\"mcpServers\"][number],\n  options: PrepareToolsOptions,\n): FetchLike {\n  const connectionRef = config.connectionRef;\n  if (!connectionRef) {\n    return baseFetch;\n  }\n  return async (input, init) => {\n    const request = await mcpRequestInfo(input, init);\n    const destinationUrl = mcpRequestDestinationUrl(input);\n    const first = await resolveConnectionForRequest(\n      options,\n      config.id,\n      connectionRef,\n      destinationUrl,\n      request.toolName,\n      false,\n    );\n    if (first.status === \"auth_needed\") {\n      return await authNeededFetchResponse(options, config.id, request, first, connectionRef);\n    }\n    const response = await baseFetch(\n      fetchInputForAttempt(input),\n      withConnectionHeaders(input, init, first.headers),\n    );\n    if (response.status === 401) {\n      await cancelMcpResponseBody(response);\n      const refreshed = await resolveConnectionForRequest(\n        options,\n        config.id,\n        connectionRef,\n        destinationUrl,\n        request.toolName,\n        true,\n      );\n      if (refreshed.status === \"auth_needed\") {\n        return await authNeededFetchResponse(options, config.id, request, refreshed, connectionRef);\n      }\n      const retry = await baseFetch(\n        fetchInputForAttempt(input),\n        withConnectionHeaders(input, init, refreshed.headers),\n      );\n      if (retry.status === 403) {\n        const auth = insufficientScopeAuth(retry.headers, connectionRef, refreshed.connectionId);\n        if (auth) {\n          await cancelMcpResponseBody(retry);\n          return await authNeededFetchResponse(options, config.id, request, auth, connectionRef);\n        }\n        return retry;\n      }\n      if (retry.status === 401) {\n        await cancelMcpResponseBody(retry);\n        return await authNeededFetchResponse(\n          options,\n          config.id,\n          request,\n          {\n            status: \"auth_needed\",\n            reason: \"expired\",\n            providerDomain: connectionRef.providerDomain,\n            ...(connectionRef.provider ? { provider: connectionRef.provider } : {}),\n            connectionId: refreshed.connectionId,\n            ...(connectionRef.scopes ? { scopes: connectionRef.scopes } : {}),\n            ...(connectionRef.resource ? { resource: connectionRef.resource } : {}),\n            ...(connectionRef.selectedResources\n              ? { selectedResources: connectionRef.selectedResources }\n              : {}),\n          },\n          connectionRef,\n        );\n      }\n      return retry;\n    }\n    if (response.status === 403) {\n      const auth = insufficientScopeAuth(response.headers, connectionRef, first.connectionId);\n      if (auth) {\n        await cancelMcpResponseBody(response);\n        return await authNeededFetchResponse(options, config.id, request, auth, connectionRef);\n      }\n      return response;\n    }\n    return response;\n  };\n}\n\nasync function resolveConnectionForRequest(\n  options: PrepareToolsOptions,\n  serverId: string,\n  connectionRef: McpServerConnectionRef,\n  destinationUrl: string,\n  toolName: string | undefined,\n  forceRefresh: boolean,\n): Promise<ResolveConnectionCredentialResult> {\n  if (!options.workspaceId || !options.resolveCredential) {\n    return {\n      status: \"auth_needed\",\n      reason: \"missing_connection\",\n      providerDomain: connectionRef.providerDomain,\n      ...(connectionRef.provider ? { provider: connectionRef.provider } : {}),\n      ...(connectionRef.connectionId ? { connectionId: connectionRef.connectionId } : {}),\n      ...(connectionRef.scopes ? { scopes: connectionRef.scopes } : {}),\n      ...(connectionRef.resource ? { resource: connectionRef.resource } : {}),\n      ...(connectionRef.selectedResources\n        ? { selectedResources: connectionRef.selectedResources }\n        : {}),\n    };\n  }\n  const request: ResolveConnectionCredentialInput = {\n    workspaceId: options.workspaceId,\n    serverId,\n    connectionRef,\n    destinationUrl,\n    forceRefresh,\n    ...(toolName ? { toolName } : {}),\n    ...(options.credentialSubjectId ? { subjectId: options.credentialSubjectId } : {}),\n  };\n  try {\n    return await options.resolveCredential(request);\n  } catch {\n    return {\n      status: \"auth_needed\",\n      reason: \"refresh_failed\",\n      providerDomain: connectionRef.providerDomain,\n      ...(connectionRef.provider ? { provider: connectionRef.provider } : {}),\n      ...(connectionRef.connectionId ? { connectionId: connectionRef.connectionId } : {}),\n      ...(connectionRef.scopes ? { scopes: connectionRef.scopes } : {}),\n      ...(connectionRef.resource ? { resource: connectionRef.resource } : {}),\n      ...(connectionRef.selectedResources\n        ? { selectedResources: connectionRef.selectedResources }\n        : {}),\n    };\n  }\n}\n\nfunction insufficientScopeAuth(\n  headers: Headers,\n  connectionRef: McpServerConnectionRef,\n  connectionId: string,\n): Extract<ResolveConnectionCredentialResult, { status: \"auth_needed\" }> | null {\n  const challenge = parseWwwAuthenticate(headers.get(\"www-authenticate\"));\n  if (challenge.error !== \"insufficient_scope\") {\n    return null;\n  }\n  return {\n    status: \"auth_needed\",\n    reason: \"insufficient_scope\",\n    providerDomain: connectionRef.providerDomain,\n    ...(connectionRef.provider ? { provider: connectionRef.provider } : {}),\n    connectionId,\n    ...(challenge.scope?.length\n      ? { scopes: challenge.scope }\n      : connectionRef.scopes\n        ? { scopes: connectionRef.scopes }\n        : {}),\n    ...(challenge.resource\n      ? { resource: challenge.resource }\n      : connectionRef.resource\n        ? { resource: connectionRef.resource }\n        : {}),\n    ...(connectionRef.selectedResources\n      ? { selectedResources: connectionRef.selectedResources }\n      : {}),\n  };\n}\n\nasync function authNeededFetchResponse(\n  options: PrepareToolsOptions,\n  serverId: string,\n  request: McpRequestInfo,\n  auth: Extract<ResolveConnectionCredentialResult, { status: \"auth_needed\" }>,\n  connectionRef: McpServerConnectionRef,\n): Promise<Response> {\n  const connectionId = auth.connectionId ?? connectionRef.connectionId;\n  await publishAuthNeeded(options, {\n    serverId,\n    toolName: request.toolName ?? null,\n    providerDomain: auth.providerDomain,\n    ...(auth.provider\n      ? { provider: auth.provider }\n      : connectionRef.provider\n        ? { provider: connectionRef.provider }\n        : {}),\n    reason: auth.reason,\n    ...(connectionId ? { connectionId } : {}),\n    ...(auth.scopes\n      ? { scopes: auth.scopes }\n      : connectionRef.scopes\n        ? { scopes: connectionRef.scopes }\n        : {}),\n    ...(auth.resource\n      ? { resource: auth.resource }\n      : connectionRef.resource\n        ? { resource: connectionRef.resource }\n        : {}),\n    ...(auth.selectedResources\n      ? { selectedResources: auth.selectedResources }\n      : connectionRef.selectedResources\n        ? { selectedResources: connectionRef.selectedResources }\n        : {}),\n    ...(auth.authorizationUrl ? { authorizationUrl: auth.authorizationUrl } : {}),\n    ...(options.subjectId ? { subjectId: options.subjectId } : {}),\n  });\n  if (request.method === \"tools/call\") {\n    return mcpToolAuthNeededResponse(request.id);\n  }\n  return new Response(\"Authentication required for MCP server connection\", {\n    status: 401,\n  });\n}\n\nasync function publishAuthNeeded(\n  options: PrepareToolsOptions,\n  payload: ToolAuthNeededPayload,\n): Promise<void> {\n  try {\n    await options.onAuthNeeded?.(payload);\n  } catch {\n    // Auth-needed events are advisory UI/audit signals; a publisher failure must\n    // not turn an auth-recoverable tool condition into a failed agent turn.\n  }\n}\n\ntype McpRequestInfo = {\n  method?: string;\n  id?: string | number | null;\n  toolName?: string;\n};\n\nfunction mcpRequestDestinationUrl(input: string | URL | Request): string {\n  return new URL(input instanceof Request ? input.url : input.toString()).toString();\n}\n\nasync function mcpRequestInfo(\n  input: string | URL | Request,\n  init?: RequestInit,\n): Promise<McpRequestInfo> {\n  const body =\n    typeof init?.body === \"string\"\n      ? init.body\n      : input instanceof Request && (init?.method ?? input.method).toUpperCase() === \"POST\"\n        ? await input\n            .clone()\n            .text()\n            .catch(() => \"\")\n        : \"\";\n  if (!body) {\n    return {};\n  }\n  try {\n    const parsed = JSON.parse(body) as {\n      id?: unknown;\n      method?: unknown;\n      params?: { name?: unknown };\n    };\n    const method = typeof parsed.method === \"string\" ? parsed.method : undefined;\n    const id =\n      typeof parsed.id === \"string\" || typeof parsed.id === \"number\" || parsed.id === null\n        ? parsed.id\n        : undefined;\n    const toolName =\n      method === \"tools/call\" && typeof parsed.params?.name === \"string\"\n        ? parsed.params.name\n        : undefined;\n    return {\n      ...(method ? { method } : {}),\n      ...(id !== undefined ? { id } : {}),\n      ...(toolName ? { toolName } : {}),\n    };\n  } catch {\n    return {};\n  }\n}\n\nfunction withConnectionHeaders(\n  input: string | URL | Request,\n  init: RequestInit | undefined,\n  authHeaders: Record<string, string>,\n): RequestInit {\n  const headers = new Headers(\n    init?.headers ?? (input instanceof Request ? input.headers : undefined),\n  );\n  for (const [name, value] of Object.entries(authHeaders)) {\n    headers.set(name, value);\n  }\n  return { ...init, headers };\n}\n\nfunction fetchInputForAttempt(input: string | URL | Request): string | URL | Request {\n  return input instanceof Request ? input.clone() : input;\n}\n\nfunction parseWwwAuthenticate(header: string | null): {\n  error?: string;\n  scope?: string[];\n  resource?: string;\n} {\n  if (!header) {\n    return {};\n  }\n  const bearerIndex = header.toLowerCase().indexOf(\"bearer\");\n  if (bearerIndex < 0) {\n    return {};\n  }\n  const paramsText = header.slice(bearerIndex + \"bearer\".length);\n  const params: Record<string, string> = {};\n  const re = /([a-zA-Z_][a-zA-Z0-9_-]*)\\s*=\\s*(\"(?:[^\"\\\\]|\\\\.)*\"|[^,\\s]+)/g;\n  let match: RegExpExecArray | null;\n  while ((match = re.exec(paramsText)) !== null) {\n    const raw = match[2]!;\n    params[match[1]!.toLowerCase()] = raw.startsWith('\"')\n      ? raw.slice(1, -1).replace(/\\\\\"/g, '\"')\n      : raw;\n  }\n  return {\n    ...(params.error ? { error: params.error } : {}),\n    ...(params.scope ? { scope: params.scope.split(/\\s+/).filter(Boolean) } : {}),\n    ...(params.resource ? { resource: params.resource } : {}),\n  };\n}\n\n// Application-defined JSON-RPC error code marking \"this tool call needs a\n// connection\". A RESULT carrying inline `isError: true` cannot be used here:\n// the agents SDK's streamable-http shim strips `isError` and returns only the\n// content, erasing the failure. A JSON-RPC error survives the shim as a thrown\n// McpError, which PrefixedMcpServer.callTool converts back into an MCP-shaped\n// `{ isError: true }` output for the model.\nconst MCP_AUTH_NEEDED_ERROR = {\n  // OpenGeni application-defined JSON-RPC code. Keep this positive so it cannot\n  // collide with MCP SDK transport errors such as RequestTimeout (-32001).\n  code: 40_101,\n  message: \"Authentication required - a connection link was posted to the session.\",\n} as const;\n\nfunction mcpToolAuthNeededResponse(id: string | number | null | undefined): Response {\n  return new Response(\n    JSON.stringify({\n      jsonrpc: \"2.0\",\n      id: id ?? null,\n      error: {\n        code: MCP_AUTH_NEEDED_ERROR.code,\n        message: MCP_AUTH_NEEDED_ERROR.message,\n      },\n    }),\n    {\n      status: 200,\n      headers: { \"content-type\": \"application/json\" },\n    },\n  );\n}\n\nfunction isAuthNeededMcpError(error: unknown): boolean {\n  if (!(error instanceof Error)) {\n    return false;\n  }\n  const code = (error as { code?: unknown }).code;\n  return (\n    code === MCP_AUTH_NEEDED_ERROR.code &&\n    (error.message === MCP_AUTH_NEEDED_ERROR.message ||\n      error.message === `MCP error ${MCP_AUTH_NEEDED_ERROR.code}: ${MCP_AUTH_NEEDED_ERROR.message}`)\n  );\n}\n\n// Model-facing text for a best-effort server whose tool call failed for a\n// non-auth reason (transport 401/403 that never became the broker's JSON-RPC\n// short-circuit, a provider 5xx, a network blip). The copy is LOOP-SAFE: it\n// tells the model the tool is dead for the REST OF THIS TURN and to NOT retry\n// it, so a model that would otherwise burn the turn re-calling the same broken\n// optional tool moves on instead. Only the safe error surface (JS error class +\n// numeric HTTP status) is interpolated — NEVER the raw error message/response\n// body, which for a broker 401/403 can echo request URLs/headers/credentials.\nfunction mcpToolUnavailableMessage(reason: string): string {\n  return `This tool is unavailable for the rest of this turn (${reason}). Do not retry it — continue without it or use another approach.`;\n}\n\n// The only error detail safe to surface to the model or the logs: the JS error\n// constructor name and, when present, a numeric HTTP status. A StreamableHTTP\n// transport error carries the raw response BODY in its `.message` (a broker\n// 401/403 body can echo request detail), so `.message` is never included; the\n// numeric `.code`/`.status` (e.g. 401) is safe and useful.\nfunction safeMcpErrorFields(error: unknown): {\n  errorClass: string;\n  status?: number;\n} {\n  const errorClass = error instanceof Error ? error.constructor.name : typeof error;\n  const raw = (error as { code?: unknown; status?: unknown } | null)?.code;\n  const status = typeof raw === \"number\" ? raw : undefined;\n  if (status === undefined) {\n    const altRaw = (error as { status?: unknown } | null)?.status;\n    return typeof altRaw === \"number\" ? { errorClass, status: altRaw } : { errorClass };\n  }\n  return { errorClass, status };\n}\n\ntype SafeMcpTransportError = Error & {\n  status?: number;\n  code?: number;\n  mcpTransportFailureKind?: \"request_timeout\";\n};\n\n/**\n * Preserve the MCP SDK's exact request-timeout meaning without retaining or\n * exposing a raw HTTP response body. The numeric code is not sufficient:\n * Streamable HTTP also uses -32001 for \"Session not found\" and arbitrary\n * AbortSignal reasons, so only the SDK's two owned timeout messages qualify.\n */\nexport function isMcpRequestTimeoutError(error: unknown, seen = new WeakSet<object>()): boolean {\n  if (!error || typeof error !== \"object\") {\n    return false;\n  }\n  if (seen.has(error)) {\n    return false;\n  }\n  seen.add(error);\n  const record = error as Record<string, unknown>;\n  if (record.mcpTransportFailureKind === \"request_timeout\") {\n    return true;\n  }\n  const code = typeof record.code === \"number\" ? record.code : record.status;\n  const message = typeof record.message === \"string\" ? record.message : \"\";\n  const sdkTimeoutMessages = new Set([\n    \"Request timed out\",\n    \"MCP error -32001: Request timed out\",\n    \"Maximum total timeout exceeded\",\n    \"MCP error -32001: Maximum total timeout exceeded\",\n  ]);\n  if (code === -32_001 && sdkTimeoutMessages.has(message)) {\n    return true;\n  }\n  return [\"error\", \"cause\", \"response\", \"data\"].some((key) =>\n    isMcpRequestTimeoutError(record[key], seen),\n  );\n}\n\nexport function safeMcpTransportError(error: unknown): SafeMcpTransportError {\n  const fields = safeMcpErrorFields(error);\n  const safeError = new Error(\n    `MCP transport operation failed (${mcpErrorReason(fields)})`,\n  ) as SafeMcpTransportError;\n  safeError.name = \"McpTransportError\";\n  if (fields.status !== undefined) {\n    safeError.status = fields.status;\n    safeError.code = fields.status;\n  }\n  if (isMcpRequestTimeoutError(error)) {\n    safeError.mcpTransportFailureKind = \"request_timeout\";\n  }\n  return safeError;\n}\n\nfunction safeMcpTransportLogger(serverId: string) {\n  const logFailure = (_message: string, ...args: unknown[]) => {\n    let error: unknown;\n    for (let index = args.length - 1; index >= 0; index -= 1) {\n      if (args[index] instanceof Error) {\n        error = args[index];\n        break;\n      }\n    }\n    console.warn(\"[mcp] transport operation failed\", {\n      serverId,\n      ...safeMcpErrorFields(error),\n    });\n  };\n  return {\n    namespace: \"opengeni:mcp-transport\",\n    debug: () => undefined,\n    error: logFailure,\n    warn: logFailure,\n    dontLogModelData: true,\n    dontLogToolData: true,\n  };\n}\n\n// Compose the safe model/log reason string (\"StreamableHTTPError 401\", or just\n// the class when no numeric status is available). Never carries the raw body.\nfunction mcpErrorReason(fields: { errorClass: string; status?: number }): string {\n  return fields.status === undefined ? fields.errorClass : `${fields.errorClass} ${fields.status}`;\n}\n\nasync function mcpServerRequestInit(\n  settings: Settings,\n  config: Settings[\"mcpServers\"][number],\n): Promise<{ requestInit: { headers: Record<string, string> } } | {}> {\n  // codex_apps is checked FIRST so the static-headers path can never apply to\n  // it: its refreshing ChatGPT/Codex bearer is resolved per-connect from the\n  // codex ALS, never from a baked `config.headers` value.\n  if (isCodexAppsMcpServer(config)) {\n    return await codexAppsMcpRequestInit(settings);\n  }\n  if (isFirstPartyMcpServer(settings, config)) {\n    return await firstPartyMcpRequestInit(settings, config);\n  }\n  // Third-party MCP servers get their configured credential headers (for\n  // example workspace-enabled capability MCP credentials) and nothing else —\n  // never OpenGeni's own access key or delegated tokens.\n  if (config.headers && Object.keys(config.headers).length > 0) {\n    return { requestInit: { headers: { ...config.headers } } };\n  }\n  return {};\n}\n\nasync function firstPartyMcpRequestInit(\n  settings: Settings,\n  config: Settings[\"mcpServers\"][number],\n): Promise<{ requestInit: { headers: Record<string, string> } } | {}> {\n  if (!isFirstPartyMcpServer(settings, config)) {\n    return {};\n  }\n  const headers: Record<string, string> = {};\n  if (settings.authRequired && settings.accessKey) {\n    headers[\"x-opengeni-access-key\"] = settings.accessKey;\n  }\n  // The delegated bearer is deliberately NOT baked here. It is re-signed PER\n  // REQUEST by firstPartyAuthFetch (wired in prepareAgentTools) so a turn or\n  // persistent MCP connection that outlives the token's 1h TTL never sends a\n  // stale bearer — an expired first-party bearer 401s (\"authentication\n  // required\"), and because the first-party server is REQUIRED that killed the\n  // turn on any run past ~1h. This function keeps only NON-expiring static\n  // headers (the access key); the per-request fetch wrapper is the single source\n  // of truth for the ever-refreshed Authorization header.\n  if (Object.keys(headers).length === 0) {\n    return {};\n  }\n  return {\n    requestInit: {\n      headers,\n    },\n  };\n}\n\n// Sign a FRESH first-party delegated bearer for a single request. Returns null\n// when the run lacks the inputs to mint one (no delegation secret / account /\n// workspace), in which case the request proceeds with whatever static headers\n// requestInit already set. The 1h TTL is safe precisely because this runs per\n// request: the token on the wire is always seconds old, never near expiry.\nasync function signFirstPartyDelegatedBearer(\n  settings: Settings,\n  options: PrepareToolsOptions,\n): Promise<string | null> {\n  if (!settings.delegationSecret || !options.accountId || !options.workspaceId) {\n    return null;\n  }\n  const attemptClaims = [\n    options.sessionId,\n    options.turnId,\n    options.attemptId,\n    options.executionGeneration,\n  ];\n  const hasAnyAttemptClaim = attemptClaims.some((claim) => claim !== undefined);\n  const hasExactAttemptClaims = attemptClaims.every((claim) => claim !== undefined);\n  if (hasAnyAttemptClaim && !hasExactAttemptClaims) {\n    return null;\n  }\n  return await signDelegatedAccessToken(settings.delegationSecret, {\n    accountId: options.accountId,\n    workspaceId: options.workspaceId,\n    subjectId: options.subjectId ?? \"worker:first-party-mcp\",\n    ...(options.subjectLabel ? { subjectLabel: options.subjectLabel } : {}),\n    permissions: options.firstPartyPermissions ?? [...DEFAULT_FIRST_PARTY_MCP_PERMISSIONS],\n    principalKind: hasExactAttemptClaims ? \"agent_attempt\" : \"service\",\n    firstPartyMcpTools: options.firstPartyTools ?? [...DEFAULT_FIRST_PARTY_MCP_TOOLS],\n    ...(hasExactAttemptClaims\n      ? {\n          sessionId: options.sessionId!,\n          turnId: options.turnId!,\n          attemptId: options.attemptId!,\n          executionGeneration: options.executionGeneration!,\n        }\n      : {}),\n    exp: Math.floor(Date.now() / 1000) + 60 * 60,\n  });\n}\n\n// Per-request auth for the FIRST-PARTY MCP server: re-sign the delegated bearer\n// on EVERY request (connect/initialize, every tools/list re-list, every\n// tools/call) and set it as the Authorization header, so a turn or connection\n// outliving the 1h token TTL never sends an expired bearer. This is the fix for\n// the prod grind where a >1h turn's next re-list/tool-call 401'd on the stale\n// first-party bearer and — the first-party server being required — failed the\n// whole turn. Scoped STRICTLY to the token WE mint; external OAuth (connectionRef\n// servers) go through connectionBrokerFetch and are untouched.\nfunction firstPartyAuthFetch(\n  baseFetch: FetchLike,\n  settings: Settings,\n  options: PrepareToolsOptions,\n): FetchLike {\n  return async (input, init) => {\n    const bearer = await signFirstPartyDelegatedBearer(settings, options);\n    if (!bearer) {\n      return await baseFetch(input, init);\n    }\n    return await baseFetch(\n      fetchInputForAttempt(input),\n      withConnectionHeaders(input, init, { authorization: `Bearer ${bearer}` }),\n    );\n  };\n}\n\n/**\n * Builds the connect-time auth headers for the codex_apps connectors MCP. The\n * bearer is resolved from codexRequestStorage — the SAME refreshing token source\n * the model fetch uses (proactive refresh + single-flight + db persist) — so the\n * token is valid at connect. A missing store (non-codex turn, or prepareTools\n * ran outside the ALS) or a token failure (needs_relogin) returns {} so the\n * best-effort connect drops the server rather than crashing the turn.\n */\nasync function codexAppsMcpRequestInit(\n  settings: Settings,\n): Promise<{ requestInit: { headers: Record<string, string> } } | {}> {\n  const ctx = codexRequestStorage.getStore();\n  if (!ctx) {\n    return {};\n  }\n  let token;\n  try {\n    token = await ctx.getToken();\n  } catch {\n    return {};\n  }\n  const headers: Record<string, string> = {\n    authorization: `Bearer ${token.accessToken}`,\n    // The ChatGPT backend sits behind Cloudflare, which 403s requests bearing a\n    // default runtime User-Agent (confirmed live: an HTML bot-block page, NOT an\n    // auth failure). Send the codex client identity — the same originator/version/\n    // User-Agent the model fetch uses — so the MCP connect handshake passes the edge.\n    originator: CODEX_ORIGINATOR,\n    \"user-agent\": `${CODEX_ORIGINATOR}/${ctx.clientVersion}`,\n    version: ctx.clientVersion,\n  };\n  if (token.chatgptAccountId) {\n    headers[\"chatgpt-account-id\"] = token.chatgptAccountId;\n  }\n  if (settings.codexProductSku) {\n    headers[\"X-OpenAI-Product-Sku\"] = settings.codexProductSku;\n  }\n  return { requestInit: { headers } };\n}\n\n// The first-party MCP permission set signed into a worker's delegated token\n// when the session does not specify its own. POWERFUL BY DEFAULT: it carries\n// every permission that unlocks a first-party tool — session orchestration\n// (sessions:*), workspace variable sets (variable-sets:*), rigs:use\n// (list/get/propose/verify only), and GitHub (github:use) — so agents are fully capable out of the box. A user DEMOTES a\n// specific session by setting a narrower session.firstPartyMcpPermissions (the\n// create-session permission picker), which the worker uses instead. Account-\n// level scopes (billing/account/members/api_keys/workspace:admin) are\n// intentionally excluded: they gate no first-party tool and are not agent\n// capabilities. (A finer-grained capability model comes later.)\n// codex_apps is third-party-by-trust (the external ChatGPT connectors backend)\n// but needs DYNAMIC auth, so it is its own category — deliberately NOT folded\n// into the first-party allowlist, which would wrongly sign an OpenGeni delegated\n// token to chatgpt.com.\nfunction isCodexAppsMcpServer(config: Settings[\"mcpServers\"][number]): boolean {\n  return config.id === CODEX_APPS_MCP_SERVER_ID;\n}\n\nfunction isFirstPartyMcpServer(\n  settings: Settings,\n  config: Settings[\"mcpServers\"][number],\n): boolean {\n  if (![\"opengeni\", \"files\", \"docs\"].includes(config.id)) {\n    return false;\n  }\n  if (config.url.includes(\"{workspaceId}\")) {\n    return true;\n  }\n  const url = normalizeUrl(config.url);\n  if (!url) {\n    return false;\n  }\n  return firstPartyMcpUrls(settings).some((candidate) => candidate === url);\n}\n\nfunction firstPartyMcpServerUrlForRun(\n  settings: Settings,\n  config: Settings[\"mcpServers\"][number],\n  workspaceId: string | undefined,\n): string | null {\n  if (!workspaceId || ![\"opengeni\", \"files\", \"docs\"].includes(config.id)) {\n    return null;\n  }\n  if (config.url.includes(\"{workspaceId}\")) {\n    return config.url.replaceAll(\"{workspaceId}\", workspaceId);\n  }\n  if (!isFirstPartyMcpServer(settings, config)) {\n    return null;\n  }\n  const rawBase = settings.opengeniMcpUrl?.includes(\"{workspaceId}\")\n    ? settings.opengeniMcpUrl.replaceAll(\"{workspaceId}\", workspaceId)\n    : settings.opengeniMcpUrl\n      ? scopedMcpUrlFromConfiguredBase(settings.opengeniMcpUrl, workspaceId)\n      : // unset → the shared loopback default (a `{workspaceId}` template owned by\n        // @opengeni/config's firstPartyMcpBaseUrl), scoped to this run's workspace.\n        firstPartyMcpBaseUrl(settings).replaceAll(\"{workspaceId}\", workspaceId);\n  const url = new URL(rawBase);\n  if (config.id === \"docs\") {\n    url.pathname = `${url.pathname.replace(/\\/+$/, \"\")}/docs`;\n  }\n  return url.toString();\n}\n\nfunction scopedMcpUrlFromConfiguredBase(raw: string, workspaceId: string): string {\n  const url = new URL(raw);\n  url.pathname = `/v1/workspaces/${workspaceId}/mcp`;\n  url.search = \"\";\n  url.hash = \"\";\n  return url.toString();\n}\n\nfunction firstPartyMcpUrls(settings: Settings): string[] {\n  // Route the unset case through the shared loopback default so the literal\n  // lives in exactly one place (@opengeni/config's firstPartyMcpBaseUrl).\n  const base = normalizeUrl(settings.opengeniMcpUrl ?? firstPartyMcpBaseUrl(settings));\n  if (!base) {\n    return [];\n  }\n  const docs = new URL(base);\n  docs.pathname = `${docs.pathname.replace(/\\/+$/, \"\")}/docs`;\n  return [base, normalizeUrl(docs.toString())].filter((value): value is string => Boolean(value));\n}\n\nfunction normalizeUrl(raw: string): string | null {\n  try {\n    const url = new URL(raw);\n    url.hash = \"\";\n    url.pathname = url.pathname.replace(/\\/+$/, \"\");\n    return url.toString();\n  } catch {\n    return null;\n  }\n}\n\nexport function prefixedMcpToolName(registryId: string, toolName: string): string {\n  return sharedPrefixedMcpToolName(registryId, toolName);\n}\n\nclass PrefixedMcpServer implements MCPServer {\n  readonly cacheToolsList: boolean;\n  readonly name: string;\n  readonly prefix: string;\n  private readonly allowedTools: Set<string> | undefined;\n  // Best-effort servers (optional refs, connectionRef-backed capability MCPs,\n  // codex_apps) must never fail a turn: a tools/list throw degrades to zero\n  // tools instead of propagating. Deduplicate the warn so one degraded server\n  // doesn't spam the log when the SDK re-lists across model turns.\n  private readonly bestEffort: boolean;\n  private loggedListToolsFailure = false;\n  private listedToolSchemaTokens = 0;\n  private modelToolSchemaAccountingDeferred = false;\n\n  constructor(\n    private readonly inner: MCPServer,\n    registryId: string,\n    allowedTools?: string[],\n    bestEffort = false,\n    private readonly aggregateToolBudget?: McpAggregateToolListBudget,\n    private readonly aggregateSourceId = registryId,\n  ) {\n    this.name = registryId;\n    this.prefix = prefixedMcpToolName(registryId, \"\");\n    this.cacheToolsList = inner.cacheToolsList;\n    this.allowedTools = allowedTools ? new Set(allowedTools) : undefined;\n    this.bestEffort = bestEffort;\n  }\n\n  connect(): Promise<void> {\n    return this.inner.connect().catch((error: unknown) => {\n      // connectMcpServers has its own global logger and logs the thrown Error.\n      // Never let a raw transport response body cross that logging boundary.\n      throw safeMcpTransportError(error);\n    });\n  }\n\n  close(): Promise<void> {\n    this.releaseAggregateBudget();\n    return this.inner.close();\n  }\n\n  releaseAggregateBudget(): void {\n    this.aggregateToolBudget?.remove(this.aggregateSourceId);\n  }\n\n  async listTools(): Promise<RuntimeMcpTool[]> {\n    try {\n      const tools = assertMcpToolListWithinBounds(await this.inner.listTools()) as RuntimeMcpTool[];\n      const exposed = tools\n        .filter((tool) => this.isAllowed(tool.name))\n        .map((tool) => ({\n          ...tool,\n          name: prefixedMcpToolName(this.name, tool.name),\n        }));\n      const bounded = (this.aggregateToolBudget?.replace(this.aggregateSourceId, exposed) ??\n        assertMcpToolListWithinBounds(exposed)) as RuntimeMcpTool[];\n      this.listedToolSchemaTokens = estimateSerializedValueTokens(bounded);\n      return bounded;\n    } catch (error) {\n      // A REQUIRED server's tools/list failure is fatal (fail-loud default): the\n      // caller explicitly requested it, so its absence must fail the turn.\n      if (!this.bestEffort) {\n        throw error;\n      }\n      // Best-effort isolation. The SDK's run-time getAllMcpTools calls listTools\n      // OUTSIDE the connect-time connectMcpServers({ strict: false }) guard, so a\n      // best-effort server whose tools/list throws here — for ANY reason (an\n      // expired/failed connection credential surfacing as a StreamableHTTP\n      // \"authentication required\" 401, a provider 5xx, a network blip) — would\n      // otherwise take down an unrelated turn. Drop this server's tools for the\n      // turn instead. An auth failure additionally published tool.auth_needed via\n      // the connection-broker fetch before the throw (so that actionable signal\n      // is preserved), but a non-auth failure has NO such signal — the structured\n      // warn below is its only visibility, so a chronically-dead optional\n      // integration surfaces in logs/metrics rather than being silently swallowed.\n      // Warn once per degraded server per turn (instances are per-turn), so a\n      // re-list across model turns does not spam the log.\n      if (!this.loggedListToolsFailure) {\n        this.loggedListToolsFailure = true;\n        console.warn(\n          \"[mcp] best-effort server tools/list failed; its tools are unavailable this turn\",\n          // Safe surface only (class + numeric status), never the raw error\n          // message/response body — a broker 401/403 body can echo request detail.\n          { serverId: this.name, ...safeMcpErrorFields(error) },\n        );\n      }\n      this.releaseAggregateBudget();\n      return [];\n    }\n  }\n\n  /** Latest exact tools/list projection used to build the model request. */\n  modelToolSchemaTokens(): number {\n    return this.modelToolSchemaAccountingDeferred ? 0 : this.listedToolSchemaTokens;\n  }\n\n  /**\n   * Keep model-input accounting aligned with Codex `defer_loading`: the full\n   * schema is not provider context until a tool_search_output discloses it.\n   * Instances are turn-local, so this cannot leak into a non-Codex turn.\n   */\n  deferModelToolSchemaAccounting(): void {\n    this.modelToolSchemaAccountingDeferred = true;\n  }\n\n  async callTool(\n    toolName: string,\n    args: Record<string, unknown> | null,\n    meta?: Record<string, unknown> | null,\n  ): Promise<any> {\n    const unprefixed = this.unprefixToolName(toolName);\n    if (!this.isAllowed(unprefixed)) {\n      throw new Error(`MCP tool ${unprefixed} is not allowed for server ${this.name}`);\n    }\n    try {\n      const output = await this.inner.callTool(unprefixed, args, meta);\n      assertMcpPayloadWithinBytes(output, MCP_MAX_TOOL_RESULT_BYTES, \"MCP tool result\");\n      return output;\n    } catch (error) {\n      // The connection broker's auth-needed short-circuit arrives as a thrown\n      // JSON-RPC error (an inline isError result would be stripped by the SDK\n      // shim). Surface it to the model as a failed-but-recoverable tool result\n      // instead of failing the turn; the timeline chip was already published.\n      // This applies to ANY server — an auth-needed is recoverable once the user\n      // re-links, so even a required tool degrades gracefully here.\n      if (isAuthNeededMcpError(error)) {\n        return {\n          isError: true,\n          content: [{ type: \"text\", text: MCP_AUTH_NEEDED_ERROR.message }],\n        };\n      }\n      // Best-effort INVOCATION isolation (sibling to the listTools guard). When\n      // the model calls a best-effort server's tool and the call throws for ANY\n      // other reason — a raw transport 401/403 that never became the broker's\n      // JSON-RPC short-circuit (e.g. a codex_apps bearer that expired mid-turn,\n      // or a 403 with no insufficient_scope challenge), a provider 5xx, or a\n      // network blip — the whole turn would otherwise die. Return a tool-error\n      // RESULT the model sees instead, so it adapts (tries another approach,\n      // tells the user) and the turn survives. Required servers keep the\n      // fail-loud default: the caller depends on them, so their tool failure\n      // still fails the turn. For auth cases the actionable tool.auth_needed was\n      // already published upstream by the connection-broker fetch before the\n      // throw, so degrading here never silences it.\n      if (this.bestEffort) {\n        const fields = safeMcpErrorFields(error);\n        console.warn(\n          \"[mcp] best-effort server tool call failed; returning an unavailable result for this turn\",\n          { serverId: this.name, toolName: unprefixed, ...fields },\n        );\n        return {\n          isError: true,\n          content: [\n            {\n              type: \"text\",\n              text: mcpToolUnavailableMessage(mcpErrorReason(fields)),\n            },\n          ],\n        };\n      }\n      throw error;\n    }\n  }\n\n  invalidateToolsCache(): Promise<void> {\n    return this.inner.invalidateToolsCache();\n  }\n\n  async listResources(params?: Record<string, unknown>): Promise<any> {\n    const resourcesServer = this.inner as MCPServer & {\n      listResources?: (params?: Record<string, unknown>) => Promise<any>;\n    };\n    if (!resourcesServer.listResources) {\n      throw new Error(`MCP server ${this.name} does not support resources`);\n    }\n    return await resourcesServer.listResources(params);\n  }\n\n  async listResourceTemplates(params?: Record<string, unknown>): Promise<any> {\n    const resourcesServer = this.inner as MCPServer & {\n      listResourceTemplates?: (params?: Record<string, unknown>) => Promise<any>;\n    };\n    if (!resourcesServer.listResourceTemplates) {\n      throw new Error(`MCP server ${this.name} does not support resource templates`);\n    }\n    return await resourcesServer.listResourceTemplates(params);\n  }\n\n  async readResource(uri: string): Promise<any> {\n    const resourcesServer = this.inner as MCPServer & {\n      readResource?: (uri: string) => Promise<any>;\n    };\n    if (!resourcesServer.readResource) {\n      throw new Error(`MCP server ${this.name} does not support resource reads`);\n    }\n    return await resourcesServer.readResource(uri);\n  }\n\n  private isAllowed(toolName: string): boolean {\n    return !this.allowedTools || this.allowedTools.has(toolName);\n  }\n\n  private unprefixToolName(toolName: string): string {\n    if (!toolName.startsWith(this.prefix)) {\n      throw new Error(`MCP tool ${toolName} is missing expected ${this.name} prefix`);\n    }\n    return toolName.slice(this.prefix.length);\n  }\n}\n\n// createSandboxClient (+ withDockerNetwork / connectDockerNetwork) moved to the\n// agent-loop-free leaf ./sandbox; re-exported via `export * from \"./sandbox\"`.\n\nexport type PrepareInputOptions = {\n  sandboxClient?: unknown;\n};\n\nexport async function prepareRunInput(\n  agent: Agent<any, any>,\n  input: AgentSegmentInput,\n  options: PrepareInputOptions = {},\n): Promise<PreparedAgentInput> {\n  if (input.kind === \"message\") {\n    const trailingMessages: AgentInputItem[] = [];\n    if (input.internalContext?.trim()) {\n      trailingMessages.push({\n        type: \"message\",\n        role: \"system\",\n        content: input.internalContext,\n      } as AgentInputItem);\n    }\n    if (input.text?.trim()) {\n      trailingMessages.push({\n        type: \"message\",\n        role: \"user\",\n        content: input.text,\n      } as AgentInputItem);\n    }\n    if (\n      trailingMessages.length === 0 &&\n      (input.historyItems === undefined ||\n        input.historyItems === null ||\n        input.historyItems.length === 0)\n    ) {\n      throw new Error(\"Message input requires a user prompt or internal context\");\n    }\n    // Conversation truth comes only from durable history items. Sanitize the\n    // in-memory copy before it reaches the model so a corrupt tool-call pair is\n    // non-fatal; stored audit rows remain untouched.\n    const sanitizedHistory = sanitizeHistoryItemsForModel(\n      (input.historyItems ?? []) as unknown as Array<Record<string, unknown>>,\n    ) as unknown as AgentInputItem[];\n    const sandboxSessionState = input.sandboxEnvelope\n      ? await restoredSandboxSessionStateFromEntry(input.sandboxEnvelope, options.sandboxClient)\n      : undefined;\n    const assembled = [...sanitizedHistory, ...trailingMessages];\n    if (assembled.length === 0) {\n      throw new Error(\"Message input requires durable history or internal context\");\n    }\n    return {\n      // Preserve the SDK's simple first-message form without creating a second\n      // history path: this is merely the zero-history representation.\n      input:\n        sanitizedHistory.length === 0 && !input.internalContext?.trim() && input.text?.trim()\n          ? input.text\n          : assembled,\n      ...(sandboxSessionState ? { sandboxSessionState } : {}),\n    };\n  }\n  // An interrupted tool can only be resumed against a real saved run state. If the\n  // latest blob is the cleared sentinel the awaiting turn was wiped (the API\n  // refuses clear in requires_action, so this is a defensive guard) — fail with\n  // an honest message instead of the cryptic SDK \"missing schema version\".\n  if (isClearedRunStateBlob(input.serializedRunState)) {\n    throw new Error(\n      \"Cannot resume an interrupted tool: the session context was cleared, so the awaiting run state no longer exists.\",\n    );\n  }\n  const state = await RunState.fromString(agent, input.serializedRunState);\n  const interruptions = state.getInterruptions();\n  const interruptionId = input.kind === \"human_input\" ? input.toolCallId : input.approvalId;\n  const target = interruptions.find((item: any) => approvalIdentifier(item) === interruptionId);\n  if (!target) {\n    throw new Error(`Interrupted tool not found in saved run state: ${interruptionId}`);\n  }\n  if (input.kind === \"human_input\") {\n    state.approve(target as any);\n  } else if (input.decision === \"approve\") {\n    state.approve(target as any);\n  } else {\n    state.reject(target as any, input.message ? { message: input.message } : undefined);\n  }\n  return { input: state };\n}\n\nexport type RunAgentStreamOptions = {\n  /** Abort the provider/tool loop when the owning activity is cancelled. */\n  signal?: AbortSignal;\n  sandboxClient?: unknown;\n  sandboxEnvironment?: Record<string, string>;\n  onRuntimeEvent?: (event: NormalizedRuntimeEvent) => Promise<void> | void;\n  contextCompactionSignal?: () => ProviderContextTokenSignal | null | undefined;\n  contextCompactionRequested?: () => boolean | Promise<boolean>;\n  // Host-managed git credential renewal registration. Called only after the\n  // initial token-file seed completed on a real provisioned box. The worker\n  // owns the multi-day timer and uses this pinned, un-proxied session to\n  // atomically replace token files; runtime never mints credentials itself.\n  onGitCredentialSessionReady?: (session: GitCredentialTokenWriterSession) => Promise<void> | void;\n  // OpenGeni-minted Toolspace token renewal registration. Called only after the\n  // initial token file reached the real sandbox session.\n  onToolspaceTokenSessionReady?: (session: ToolspaceTokenWriterSession) => Promise<void> | void;\n  // Host-owned run material is seeded off-manifest before setup and every\n  // agent-created process sources the active immutable generation. The worker\n  // owns resolution/renewal/fencing; runtime owns sandbox transport.\n  runCredentialSessionId?: string;\n  onRunCredentialSessionReady?: RunCredentialSessionReady;\n  // OWNERSHIP INVERSION (P1.2): an externally-owned, already-live sandbox\n  // session resolved by the per-turn resume-by-id path. When present,\n  // runAgentStream does NOT build (or resume, or discard) a client — it threads\n  // these straight into runOptions.sandbox as a NON-OWNED session. The SDK\n  // registers a provided session non-owned (manager.js) and NEVER reaps it on a\n  // normal finish (proven by spikes/sdk-keystone) — that is the keystone: the\n  // one box survives across turns. Mutually exclusive with the per-run\n  // createSandboxClient path (the owned branch takes precedence when both set).\n  // Agent-dependent decorators (file-downloads, lifecycle/repo-clone hooks) are\n  // re-applied around the resumed client here; the live `session`/`sessionState`\n  // carry the box, so no create()/resume() is re-invoked inside run().\n  ownedSandbox?: {\n    client: unknown; // built by the per-turn resume path (the raw provider client)\n    session: unknown; // SandboxSessionLike — the live, NON-OWNED handle (never reaped)\n    sessionState?: unknown; // SandboxSessionState the box was resumed from\n    // The UN-PROXIED established box for platform setup (lifecycle hooks + file\n    // resource materialization). `session` may be the mid-turn routing proxy whose\n    // every exec re-reads the active pointer — platform-initiated setup must NOT\n    // follow a swap onto a connected machine (the user's real computer), so it\n    // runs against this pinned handle instead. Absent -> falls back to `session`.\n    setupSession?: unknown;\n    // True when the caller already ran file-resource materialization for this\n    // provided session and threaded any failures into the model input.\n    fileDownloadsMaterialized?: boolean;\n    // Lazy sandbox provisioning injects a synthetic provided session at run start;\n    // the real box does not exist until the first sandbox op. In that path the\n    // worker provisioner runs runOwnedSandboxSetup against the un-proxied real box\n    // after establish, so runAgentStream must not run it eagerly here.\n    deferredSetup?: boolean;\n  };\n  /**\n   * The attempt's authoritative physical sandbox-operation fence. Platform\n   * lifecycle commands use its command runner too, so Steer/Pause can interrupt\n   * repository clone, rig setup, file materialization, and credential seeding\n   * before the attempt-quiesced receipt opens queue admission.\n   */\n  turnToolCancellationFence?: TurnToolCancellationFence;\n  // A per-turn model-input filter chained AFTER the provider-item-id strip.\n  // Used by the genesis-title injection to prepend a hidden, NON-PERSISTED\n  // directive: a callModelInputFilter mutates only `modelData.input` for each\n  // model call and never touches `state.history`/`originalInput`, so the\n  // reconcile dual-write never sees it.\n  callModelInputFilter?: CallModelInputFilter;\n};\n\nexport type ContextRobustnessFilterOptions = {\n  contextCompactionSignal?: () => ProviderContextTokenSignal | null | undefined;\n  contextCompactionRequested?: () => boolean | Promise<boolean>;\n  throwOnCompactionNeeded?: boolean;\n};\n\n// One-shot directive injected into the FIRST model call on the genesis turn\n// (see buildOpenGeniAgent's genesisTitleHint). Delivered through the\n// authoritative instructions channel so the model reliably obeys; references\n// the prefixed tool name the agent actually sees (opengeni__set_session_title).\nexport const GENESIS_TITLE_DIRECTIVE =\n  \"This is the first turn of a new session. Before responding to the user, call the opengeni__set_session_title tool with a concise 3-7 word title that summarizes what this session is about, then address the user's request normally.\";\n\n/**\n * Inject the genesis-title directive into exactly one model request. Agent\n * instructions are reused for every model call in a tool loop, so placing this\n * directive there turned a nominally one-shot setup action into repeated title\n * calls. The closure is intentionally consumed even when the first request\n * fails: a retry/recovery must continue the task, not restart setup.\n */\nexport function oneShotGenesisTitleInputFilter(): CallModelInputFilter {\n  let pending = true;\n  return ({ modelData }) => {\n    if (!pending) {\n      return modelData;\n    }\n    pending = false;\n    return {\n      ...modelData,\n      instructions: modelData.instructions\n        ? `${modelData.instructions} ${GENESIS_TITLE_DIRECTIVE}`\n        : GENESIS_TITLE_DIRECTIVE,\n    };\n  };\n}\n\nfunction takeGenesisTitleInputFilter(agent: Agent<any, any>): CallModelInputFilter | undefined {\n  if (!agentsNeedingGenesisTitleDirective.has(agent)) {\n    return undefined;\n  }\n  agentsNeedingGenesisTitleDirective.delete(agent);\n  return oneShotGenesisTitleInputFilter();\n}\n\n// Generic substrate prompting for programmatic tool calling (toolspace). Same\n// text for every host; gated per-turn by appendToolspaceInstructions on the\n// presence of a minted toolspace token, so it only appears when the sandbox\n// exposes $OPENGENI_TOOLSPACE_URL/_TOKEN_FILE. Stock images carry ogtool;\n// custom environments get only an exact deployment-pinned bootstrap hint.\nexport const TOOLSPACE_PROGRAMMATIC_DIRECTIVE =\n  \"Every tool on your MCP surface is also callable programmatically from the sandbox shell, so scripts can invoke tools without a model round trip per call. If `ogtool` is installed, run `ogtool list` to see the available tools and their input schemas (from tools/list), then `ogtool call <tool-name> '<json-args>'`. If it is absent and both npm and $OPENGENI_OGTOOL_PACKAGE_SPEC are available, run the exact deployment-pinned package with `npm exec --yes --package=\\\"$OPENGENI_OGTOOL_PACKAGE_SPEC\\\" -- ogtool ...`; never guess a version or install `latest`. Otherwise POST MCP JSON-RPC directly to $OPENGENI_TOOLSPACE_URL with the bearer token read from $OPENGENI_TOOLSPACE_TOKEN_FILE. Prefer programmatic calls for loops, polling, and bulk filtering: their results stay in the sandbox and do not consume your context window. Tools that require human approval must still be invoked normally — called programmatically they return a typed error.\";\n\n/**\n * callModelInputFilter that removes provider-assigned item ids (rs_/msg_/fc_…)\n * from every input item immediately before each model call. Responses-API\n * requests that carry item ids are resolved against the provider's stored\n * responses, and that store is not durable enough to anchor long runs on: a\n * response that streamed successfully can be missing from the store on the\n * very next call, which then fails with 400 \"Item with id ... not found\"\n * (observed live on Azure OpenAI mid-turn). All item content — including the\n * encrypted reasoning payload carried in providerData when\n * `openaiReasoningEncryptedContent` is on — is sent inline, so the ids add\n * fragility without adding information. Pairing fields (`call_id`/`callId`)\n * are separate properties and stay untouched; items are cloned, never mutated.\n */\nexport const stripProviderItemIdsFilter: CallModelInputFilter = ({ modelData }) => ({\n  ...modelData,\n  input: modelData.input.map((item) => {\n    if (item && typeof item === \"object\" && \"id\" in item) {\n      const { id: _id, ...rest } = item as Record<string, unknown>;\n      return rest as AgentInputItem;\n    }\n    return item;\n  }),\n});\n\n/**\n * callModelInputFilter that normalizes every `computer_call` carrying BOTH\n * `action` and `actions` down to EXACTLY ONE (keeps `actions`, drops `action`).\n * The Azure computer-use endpoint rejects a request whose computer_call has\n * both with `400 Computer call input must include exactly one of `action` or\n * `actions``; and (live-proven against gpt-5.6-sol's GA computer tool) it also\n * rejects the `action`-only form, accepting ONLY the batched plural `actions`.\n * The SDK 0.11.6 schema allows both, so a freshly-emitted\n * screenshot call carries the redundant pair. This filter runs before EVERY\n * model call — the turn-start history replay AND every mid-turn follow-up — so\n * it covers the just-emitted (non-replayed) computer_call on the same turn,\n * which the turn-start `prepareRunInput` sanitizer never sees. Items are cloned,\n * never mutated.\n */\nexport const normalizeComputerCallsFilter: CallModelInputFilter = ({ modelData }) => ({\n  ...modelData,\n  input: normalizeComputerCallActions(\n    modelData.input as unknown as Array<Record<string, unknown>>,\n  ) as unknown as AgentInputItem[],\n});\n\n/**\n * Canonical Codex-style tool-result bound at the final model-input seam. The\n * identical pure normalizer also runs before conversation rows are persisted,\n * so this is a live-turn defense rather than a request-only alternate history.\n */\nexport function boundModelToolOutputsFilterForSettings(settings: Settings): CallModelInputFilter {\n  return ({ modelData }) => ({\n    ...modelData,\n    input: boundModelToolOutputItems(\n      modelData.input as unknown as Array<Record<string, unknown>>,\n      settings.modelToolOutputTruncationTokens,\n    ) as unknown as AgentInputItem[],\n  });\n}\n\nfunction estimateAgentToolSchemaTokens(agent: Agent<any, any>): number {\n  const localTools = Array.isArray((agent as { tools?: unknown }).tools)\n    ? ((agent as { tools: unknown[] }).tools ?? [])\n    : [];\n  const localDescriptors = localTools.map((candidate) => {\n    if (!candidate || typeof candidate !== \"object\") return candidate;\n    const tool = candidate as Record<string, unknown>;\n    return {\n      type: tool.type,\n      name: tool.name,\n      description: tool.description,\n      parameters: tool.parameters,\n      inputSchema: tool.inputSchema,\n      strict: tool.strict,\n      providerData: tool.providerData,\n    };\n  });\n  const mcpServers = Array.isArray((agent as { mcpServers?: unknown }).mcpServers)\n    ? ((agent as { mcpServers: unknown[] }).mcpServers ?? [])\n    : [];\n  const mcpTokens = mcpServers.reduce<number>((total, server) => {\n    const getter = (server as { modelToolSchemaTokens?: () => number } | null)\n      ?.modelToolSchemaTokens;\n    return total + (typeof getter === \"function\" ? getter.call(server) : 0);\n  }, 0);\n  return estimateSerializedValueTokens(localDescriptors) + mcpTokens;\n}\n\nexport function contextRobustnessFilterForSettings(\n  settings: Settings,\n  options: ContextRobustnessFilterOptions = {},\n): CallModelInputFilter {\n  const thresholdTokens = compactionThresholdTokens(settings);\n  let previousRequest: { revision: number; footprint: CompleteModelInputFootprint } | null = null;\n  let requestRevision = 0;\n  return async ({ modelData, agent }) => {\n    const input = modelData.input;\n    if (options.throwOnCompactionNeeded) {\n      const reported = options.contextCompactionSignal?.();\n      const current: CompleteModelInputFootprint = {\n        input: input as unknown as Array<Record<string, unknown>>,\n        instructionsTokens: estimateSerializedValueTokens(modelData.instructions ?? \"\"),\n        toolSchemaTokens: estimateAgentToolSchemaTokens(agent),\n      };\n      // Stream consumption can lag the SDK's background model loop. A provider\n      // usage signal is safe only when its response revision belongs to the\n      // immediately preceding request. Never attach a delayed response count to\n      // a newer footprint: doing so can hide all model output produced between\n      // them and recreate an under-counting compaction loop.\n      const boundProvider =\n        reported &&\n        previousRequest &&\n        reported.revision === previousRequest.revision &&\n        hasModelGeneratedItem(current.input)\n          ? reported\n          : null;\n      const estimate = estimateCompleteModelInput({\n        current,\n        provider: boundProvider,\n        providerRequestFootprint: boundProvider ? (previousRequest?.footprint ?? null) : null,\n      });\n      const signalTokens = estimate.tokens;\n      previousRequest = { revision: ++requestRevision, footprint: current };\n      if (await options.contextCompactionRequested?.()) {\n        throw new CompactionNeededError({\n          signalTokens,\n          thresholdTokens,\n          signalSource: boundProvider ? \"provider\" : \"estimate\",\n          trigger: \"operator\",\n        });\n      }\n      if (signalTokens >= thresholdTokens) {\n        throw new CompactionNeededError({\n          signalTokens,\n          thresholdTokens,\n          signalSource: boundProvider ? \"provider\" : \"estimate\",\n        });\n      }\n    }\n    return { ...modelData, input };\n  };\n}\n\n/**\n * Compose a list of callModelInputFilters into one, applied left-to-right so\n * each sees the prior filter's output.\n */\nfunction composeCallModelInputFilters(filters: CallModelInputFilter[]): CallModelInputFilter {\n  return async (args) => {\n    let modelData = args.modelData;\n    for (const filter of filters) {\n      modelData = await filter({ ...args, modelData });\n    }\n    return modelData;\n  };\n}\n\n/**\n * The model-input filter applied before every model call. The computer_call\n * action/actions normalizer is ALWAYS on (the Azure endpoint 400s without it);\n * the provider-item-id strip is layered on top when the configured policy\n * selects it; the context-robustness guard then raises the proactive durable\n * compaction signal on the client-compaction path. It never trims history from\n * an individual request.\n */\nexport function callModelInputFilterForSettings(\n  settings: Settings,\n  options: ContextRobustnessFilterOptions = {},\n): CallModelInputFilter | undefined {\n  const filters: CallModelInputFilter[] = [\n    normalizeComputerCallsFilter,\n    boundModelToolOutputsFilterForSettings(settings),\n  ];\n  if (settings.openaiProviderItemIds === \"strip\") {\n    filters.push(stripProviderItemIdsFilter);\n  }\n  filters.push(contextRobustnessFilterForSettings(settings, options));\n  return composeCallModelInputFilters(filters);\n}\n\nexport async function runAgentStream(\n  agent: Agent<any, any>,\n  input: PreparedAgentInput | string | RunState<any, any>,\n  settings: Settings,\n  overrides: RunAgentStreamOptions = {},\n) {\n  const prepared: PreparedAgentInput =\n    typeof input === \"string\" || input instanceof RunState ? { input } : input;\n  const environment = overrides.sandboxEnvironment ?? collectSandboxEnvironment(settings);\n  const toolspaceTokenFile = toolspaceTokenFileForAgent(agent, environment);\n  const genesisTitleInputFilter = takeGenesisTitleInputFilter(agent);\n  if (overrides.onRunCredentialSessionReady && !overrides.runCredentialSessionId) {\n    throw new Error(\"runCredentialSessionId is required when run credential setup is enabled\");\n  }\n\n  // OWNED PATH (P1.2 ownership inversion): the per-turn resume path injected a\n  // live, externally-owned box. We thread the live `session` straight into\n  // runOptions.sandbox so the SDK registers it NON-OWNED and never reaps it on\n  // a normal finish (the keystone). We re-apply ONLY the agent-dependent\n  // decorators (file-downloads + lifecycle/repo-clone hooks) around the resumed\n  // client — the manifest-refresh-on-resume wrap is a no-op when a live\n  // `session` is supplied (resume is not re-invoked). This branch is reached\n  // ONLY when sandboxOwnershipEnabled gated the activity into resolving a box;\n  // with the flag off the activity never sets `ownedSandbox` and this whole\n  // block is skipped (byte-for-byte the legacy path).\n  if (overrides.ownedSandbox) {\n    const { client: ownedClient, session, sessionState } = overrides.ownedSandbox;\n    // Platform setup (hooks + file materialization) execs against the UN-PROXIED\n    // established box when the caller pinned one — never through the routing proxy,\n    // whose per-op pointer re-read could land these execs on a machine swapped in\n    // mid-turn.\n    const setupSession = (overrides.ownedSandbox.setupSession ?? session) as SandboxSessionLike;\n    const credentialAgentSession = overrides.runCredentialSessionId\n      ? withRunCredentialsSession(session as SandboxSessionLike, overrides.runCredentialSessionId)\n      : (session as SandboxSessionLike);\n    const agentSession = toolspaceTokenFile\n      ? withToolspaceTokenSession(credentialAgentSession, toolspaceTokenFile)\n      : credentialAgentSession;\n    const credentialSetupSession = overrides.runCredentialSessionId\n      ? withRunCredentialsSession(setupSession, overrides.runCredentialSessionId)\n      : setupSession;\n    const decoratedSetupSession = toolspaceTokenFile\n      ? withToolspaceTokenSession(credentialSetupSession, toolspaceTokenFile)\n      : credentialSetupSession;\n    // Platform setup (manifest-env pin + beforeAgentStart hooks + file downloads)\n    // against the UN-proxied established box — the ONE-TRUTH helper shared with the\n    // lazy provisioner. Eager path: runs here, before the run starts (unchanged).\n    if (!overrides.ownedSandbox.deferredSetup) {\n      await overrides.onRunCredentialSessionReady?.(session as SandboxSessionLike);\n      await runOwnedSandboxSetup(agent, session as SandboxSessionLike, decoratedSetupSession, {\n        settings,\n        environment,\n        preparedInput: prepared,\n        ...(overrides.ownedSandbox.fileDownloadsMaterialized\n          ? { fileDownloadsMaterialized: true }\n          : {}),\n        ...(overrides.onRuntimeEvent ? { onRuntimeEvent: overrides.onRuntimeEvent } : {}),\n        ...(overrides.turnToolCancellationFence\n          ? {\n              commandRunner: overrides.turnToolCancellationFence.runSandboxCommand.bind(\n                overrides.turnToolCancellationFence,\n              ),\n            }\n          : {}),\n      });\n      if (toolspaceTokenSeedForAgent(agent)) {\n        await overrides.onToolspaceTokenSessionReady?.(agentSession);\n      }\n      await overrides.onGitCredentialSessionReady?.(setupSession);\n    }\n    const runAs = sandboxRunAs(settings);\n    const fileDownloads = sandboxFileDownloadsForAgent(agent);\n    const resourceClient =\n      fileDownloads.length > 0\n        ? withSandboxFileDownloads(ownedClient as SandboxClient, fileDownloads, {\n            ...(overrides.onRuntimeEvent ? { onRuntimeEvent: overrides.onRuntimeEvent } : {}),\n            ...(runAs ? { runAs } : {}),\n            ...(overrides.turnToolCancellationFence\n              ? {\n                  commandRunner: overrides.turnToolCancellationFence.runSandboxCommand.bind(\n                    overrides.turnToolCancellationFence,\n                  ),\n                }\n              : {}),\n          })\n        : (ownedClient as SandboxClient);\n    // TOKEN-BROKER (B1): the per-turn git token seed, forwarded OFF-MANIFEST so the\n    // repository-clone hook seeds it to the box's token file before the clone.\n    const ownedGitTokenSeeds = gitTokenSeedsForAgent(agent);\n    const ownedGitCredentialBindings = gitCredentialBindingsForAgent(agent);\n    const ownedToolspaceTokenSeed = toolspaceTokenSeedForAgent(agent);\n    const ownedRigSetup = rigSetupDescriptorForAgent(agent);\n    const ownedHooks = [\n      // M3: rig setup runs FIRST so any tooling it installs is present for the\n      // credential / repository-clone hooks below. The rig's credential hooks are\n      // unioned into the deployment preparation-profile hooks (deduped by id).\n      ...sandboxRigSetupHooksForAgent(agent),\n      ...unionCredentialHooks(\n        sandboxLifecycleHooksForIds(sandboxLifecycleHookIds(settings)),\n        rigCredentialHooksForAgent(agent),\n      ),\n      ...sandboxToolspaceTokenHooksForAgent(agent),\n      ...toolspaceTokenSessionRegistrationHooks(\n        ownedToolspaceTokenSeed ? overrides.onToolspaceTokenSessionReady : undefined,\n      ),\n      ...sandboxRepositoryCloneHooksForAgent(agent),\n      ...gitCredentialSessionRegistrationHooks(overrides.onGitCredentialSessionReady),\n    ];\n    const ownedHookContext: SandboxLifecycleHookContext = {\n      environment,\n      ...(overrides.onRuntimeEvent ? { onRuntimeEvent: overrides.onRuntimeEvent } : {}),\n      ...(runAs ? { runAs } : {}),\n      ...(ownedGitTokenSeeds ? { gitTokenSeeds: ownedGitTokenSeeds } : {}),\n      ...(ownedGitCredentialBindings ? { gitCredentialBindings: ownedGitCredentialBindings } : {}),\n      ...(ownedToolspaceTokenSeed ? { toolspaceTokenSeed: ownedToolspaceTokenSeed } : {}),\n      ...(toolspaceTokenFile ? { toolspaceTokenFile } : {}),\n      ...(ownedRigSetup ? { rigSetup: ownedRigSetup } : {}),\n    };\n    // Keep both credential seeding and lifecycle decoration as a safety net for\n    // any session the SDK does create/resume during this run. They are inert for\n    // the provided session, which remains the normal ownership-inverted path.\n    const credentialResourceClient = overrides.runCredentialSessionId\n      ? withRunCredentialsClient(\n          resourceClient,\n          overrides.runCredentialSessionId,\n          overrides.onRunCredentialSessionReady,\n        )\n      : resourceClient;\n    const toolspaceResourceClient = toolspaceTokenFile\n      ? withToolspaceTokenClient(credentialResourceClient, toolspaceTokenFile)\n      : credentialResourceClient;\n    const decoratedClient = withSandboxLifecycleHooks(\n      toolspaceResourceClient,\n      ownedHooks,\n      ownedHookContext,\n    );\n    const ownedFilter = composeCallModelInputFilters(\n      [\n        callModelInputFilterForSettings(settings),\n        genesisTitleInputFilter,\n        overrides.callModelInputFilter,\n        // A caller filter may synthesize model input. Re-apply the idempotent\n        // canonical bound at the literal final seam before accounting/provider\n        // serialization so no extension can bypass the policy.\n        boundModelToolOutputsFilterForSettings(settings),\n        contextRobustnessFilterForSettings(settings, {\n          throwOnCompactionNeeded: Boolean(\n            overrides.contextCompactionSignal || overrides.contextCompactionRequested,\n          ),\n          ...(overrides.contextCompactionSignal\n            ? { contextCompactionSignal: overrides.contextCompactionSignal }\n            : {}),\n          ...(overrides.contextCompactionRequested\n            ? { contextCompactionRequested: overrides.contextCompactionRequested }\n            : {}),\n        }),\n      ].filter((f): f is CallModelInputFilter => Boolean(f)),\n    );\n    const ownedRunOptions: Parameters<typeof run>[2] = {\n      stream: true,\n      maxTurns: settings.agentMaxModelCallsPerTurn,\n      callModelInputFilter: ownedFilter,\n      ...(overrides.signal ? { signal: overrides.signal } : {}),\n    };\n    ownedRunOptions.sandbox = {\n      client: decoratedClient,\n      session: agentSession,\n      ...(sessionState ? { sessionState } : {}),\n    } as SandboxRunConfig;\n    return await runScopedRunner(settings).run(agent, prepared.input, ownedRunOptions);\n  }\n\n  const rawClient = overrides.sandboxClient ?? createSandboxClient(settings, environment);\n  const refreshedClient = rawClient\n    ? withManifestRefreshOnResume(\n        rawClient as SandboxClient,\n        (agent as { defaultManifest?: Manifest }).defaultManifest,\n        {\n          ...(overrides.onRuntimeEvent ? { onRuntimeEvent: overrides.onRuntimeEvent } : {}),\n        },\n      )\n    : undefined;\n  const runAs = sandboxRunAs(settings);\n  const fileDownloads = sandboxFileDownloadsForAgent(agent);\n  const resourceClient =\n    refreshedClient && fileDownloads.length > 0\n      ? withSandboxFileDownloads(refreshedClient, fileDownloads, {\n          ...(overrides.onRuntimeEvent ? { onRuntimeEvent: overrides.onRuntimeEvent } : {}),\n          ...(runAs ? { runAs } : {}),\n        })\n      : refreshedClient;\n  const credentialClient =\n    resourceClient && overrides.runCredentialSessionId\n      ? withRunCredentialsClient(\n          resourceClient,\n          overrides.runCredentialSessionId,\n          overrides.onRunCredentialSessionReady,\n        )\n      : resourceClient;\n  const toolspaceClient =\n    credentialClient && toolspaceTokenFile\n      ? withToolspaceTokenClient(credentialClient, toolspaceTokenFile)\n      : credentialClient;\n  // TOKEN-BROKER (B1): the per-turn git token seed, forwarded OFF-MANIFEST so the\n  // repository-clone hook seeds it to the box's token file before the clone.\n  const gitTokenSeeds = gitTokenSeedsForAgent(agent);\n  const gitCredentialBindings = gitCredentialBindingsForAgent(agent);\n  const toolspaceTokenSeed = toolspaceTokenSeedForAgent(agent);\n  const legacyRigSetup = rigSetupDescriptorForAgent(agent);\n  const client = toolspaceClient\n    ? withSandboxLifecycleHooks(\n        toolspaceClient,\n        [\n          // M3: same rig-setup-first ordering + credential-hook union as the owned\n          // path (this legacy create/resume decoration path is byte-for-byte today\n          // for a rig-less turn — the rig hooks are empty then).\n          ...sandboxRigSetupHooksForAgent(agent),\n          ...unionCredentialHooks(\n            sandboxLifecycleHooksForIds(sandboxLifecycleHookIds(settings)),\n            rigCredentialHooksForAgent(agent),\n          ),\n          ...sandboxToolspaceTokenHooksForAgent(agent),\n          ...toolspaceTokenSessionRegistrationHooks(\n            toolspaceTokenSeed ? overrides.onToolspaceTokenSessionReady : undefined,\n          ),\n          ...sandboxRepositoryCloneHooksForAgent(agent),\n          ...gitCredentialSessionRegistrationHooks(overrides.onGitCredentialSessionReady),\n        ],\n        {\n          environment,\n          ...(overrides.onRuntimeEvent ? { onRuntimeEvent: overrides.onRuntimeEvent } : {}),\n          ...(runAs ? { runAs } : {}),\n          ...(gitTokenSeeds ? { gitTokenSeeds } : {}),\n          ...(gitCredentialBindings ? { gitCredentialBindings } : {}),\n          ...(toolspaceTokenSeed ? { toolspaceTokenSeed } : {}),\n          ...(toolspaceTokenFile ? { toolspaceTokenFile } : {}),\n          ...(legacyRigSetup ? { rigSetup: legacyRigSetup } : {}),\n        },\n      )\n    : undefined;\n  const sandboxSessionState = prepared.sandboxSessionState;\n  // Apply the built-in per-call filters (computer-call normalization, optional\n  // provider-id stripping, image/budget guard), then any per-turn filter\n  // (genesis title directive). A callModelInputFilter only shapes the per-call\n  // model input; the SDK persists filtered clones into its session view, while\n  // OpenGeni's durable conversation truth is still reconciled explicitly below.\n  const callModelInputFilter = composeCallModelInputFilters(\n    [\n      callModelInputFilterForSettings(settings),\n      genesisTitleInputFilter,\n      overrides.callModelInputFilter,\n      boundModelToolOutputsFilterForSettings(settings),\n      contextRobustnessFilterForSettings(settings, {\n        throwOnCompactionNeeded: Boolean(\n          overrides.contextCompactionSignal || overrides.contextCompactionRequested,\n        ),\n        ...(overrides.contextCompactionSignal\n          ? { contextCompactionSignal: overrides.contextCompactionSignal }\n          : {}),\n        ...(overrides.contextCompactionRequested\n          ? { contextCompactionRequested: overrides.contextCompactionRequested }\n          : {}),\n      }),\n    ].filter((f): f is CallModelInputFilter => Boolean(f)),\n  );\n  const runOptions: Parameters<typeof run>[2] = {\n    stream: true,\n    maxTurns: settings.agentMaxModelCallsPerTurn,\n    // Built-in per-call guard chain: normalize computer calls, optionally strip\n    // provider ids, trim to the input budget on the client-compaction path, and\n    // raise the proactive compaction signal. This runs for turn-start replay AND\n    // every mid-turn follow-up.\n    callModelInputFilter,\n    ...(overrides.signal ? { signal: overrides.signal } : {}),\n  };\n  if (client) {\n    runOptions.sandbox = {\n      client,\n      ...(sandboxSessionState ? { sessionState: sandboxSessionState } : {}),\n    } as SandboxRunConfig;\n  }\n  return await runScopedRunner(settings).run(agent, prepared.input, runOptions);\n}\n\nfunction appendSandboxFileDownloadFailureNote(\n  input: PreparedAgentInput,\n  failures: SandboxFileDownloadFailure[],\n): void {\n  const note = sandboxFileDownloadFailureNote(failures);\n  if (!note) {\n    return;\n  }\n  if (typeof input.input === \"string\") {\n    input.input = [input.input, \"\", note].join(\"\\n\");\n    return;\n  }\n  if (Array.isArray(input.input)) {\n    input.input = [\n      ...input.input,\n      { type: \"message\", role: \"user\", content: note } as AgentInputItem,\n    ];\n  }\n}\n\n/**\n * A per-run `Runner` whose `modelProvider` is built from THIS turn's settings.\n *\n * The standalone `run()` uses a process-global default Runner whose modelProvider\n * is the lazy global default (whatever the last `configureOpenAI` /\n * `setDefaultModelProvider` installed). The worker runs ~100 activities\n * concurrently in one process, so a concurrently-starting turn for a DIFFERENT\n * workspace can overwrite that global between this turn's `configure` and a\n * per-call `getModel()` during the stream — leaving the global router with no\n * codex provider and throwing CodexSubscriptionUnavailableError on a\n * `codex/<slug>` name re-resolution (the SandboxAgent/Modal path drops the Model\n * instance and re-resolves by NAME). Pinning a run-scoped Runner makes the\n * mutable global irrelevant to correctness: each concurrent turn resolves names\n * against its OWN settings (which carry the codex-subscription provider via\n * withCodexProvider for an active workspace, and the registry providers). The\n * Runner inherits the SDK's default config for everything else, identical to the\n * default runner. setDefaultModelProvider remains only as a boot-time fallback.\n */\nfunction runScopedRunner(settings: Settings): Runner {\n  return new Runner({\n    modelProvider: new MultiProviderModelProvider(settings),\n  });\n}\n\nexport { MaxTurnsExceededError } from \"@openai/agents\";\n\n/**\n * Detects the agents SDK per-segment turn cap. The cap is a pacing valve, not\n * a session failure: callers should end the segment gracefully (idle) so an\n * active goal's continuation loop -- or a follow-up user message -- resumes\n * the work. When the SDK attached the run state at the moment the cap hit,\n * the serialized form is returned so the resumed turn keeps full context.\n */\nexport function maxTurnsExceededRunState(\n  error: unknown,\n): { serializedRunState: string | null } | null {\n  if (!(error instanceof MaxTurnsExceededError)) {\n    return null;\n  }\n  try {\n    return { serializedRunState: error.state ? error.state.toString() : null };\n  } catch {\n    return { serializedRunState: null };\n  }\n}\n\n/**\n * Serialized run state attached to any agents SDK error, when present.\n * Provider failures usually surface as raw API errors without state; callers\n * must treat a null here as \"resume from the previous snapshot\" rather than\n * an error.\n */\nexport function agentsErrorRunState(error: unknown): string | null {\n  if (!(error instanceof AgentsError) || !error.state) {\n    return null;\n  }\n  try {\n    return error.state.toString();\n  } catch {\n    return null;\n  }\n}\n\nexport function withManifestRefreshOnResume(\n  client: SandboxClient,\n  targetManifest: Manifest | undefined,\n  context: Pick<SandboxLifecycleHookContext, \"onRuntimeEvent\"> = {},\n): SandboxClient {\n  if (!targetManifest || !client.resume) {\n    return client;\n  }\n  return {\n    backendId: client.backendId,\n    ...(client.supportsDefaultOptions !== undefined\n      ? { supportsDefaultOptions: client.supportsDefaultOptions }\n      : {}),\n    ...(client.create\n      ? {\n          create: async (...args: any[]) => await (client.create as any)(...args),\n        }\n      : {}),\n    resume: async (state: SandboxSessionState) => {\n      const session = await client.resume!(state);\n      await applyMissingManifestEntries(session, targetManifest, context);\n      return session;\n    },\n    ...(client.delete\n      ? {\n          delete: async (state: SandboxSessionState) => await client.delete!(state),\n        }\n      : {}),\n    ...(client.serializeSessionState\n      ? {\n          serializeSessionState: async (state: SandboxSessionState, options) =>\n            await client.serializeSessionState!(state, options),\n        }\n      : {}),\n    ...(client.canPersistOwnedSessionState\n      ? {\n          canPersistOwnedSessionState: async (state: SandboxSessionState) =>\n            await client.canPersistOwnedSessionState!(state),\n        }\n      : {}),\n    ...(client.canReusePreservedOwnedSession\n      ? {\n          canReusePreservedOwnedSession: async (state: SandboxSessionState) =>\n            await client.canReusePreservedOwnedSession!(state),\n        }\n      : {}),\n    ...(client.deserializeSessionState\n      ? {\n          deserializeSessionState: async (state: Record<string, unknown>) =>\n            await client.deserializeSessionState!(state),\n        }\n      : {}),\n  };\n}\n\n// OWNED-RESUME manifest refresh. This path runs ONLY for SDK-owned sessions\n// (withManifestRefreshOnResume wraps client.resume, which the SDK never calls\n// when handed a live provided session — the ownedSandbox branch bypasses this\n// entirely). Owned applyManifest MERGES env safely with no guard, and this\n// refresh is a FEATURE: it is how a workspace-env edit reaches a long-lived\n// owned local/docker box that rarely recycles. The provided-session env pin\n// (pinProvidedSessionManifestEnvironment below) — NOT this function — is the\n// fix for the SDK's validateNoEnvironmentDelta session-fatal guard. Drift is\n// additionally REPORTED here (key names only, never values) so any env\n// recompute change stays attributable from the DB alone.\nexport async function applyMissingManifestEntries(\n  session: SandboxSessionLike,\n  targetManifest: Manifest,\n  context: Pick<SandboxLifecycleHookContext, \"onRuntimeEvent\"> = {},\n): Promise<void> {\n  const currentManifestValue = (\n    session as {\n      state?: {\n        manifest?:\n          | Manifest\n          | {\n              root?: string;\n              entries?: Record<string, any>;\n              environment?: Record<string, any>;\n            };\n      };\n    }\n  ).state?.manifest;\n  const currentManifest = currentManifestValue ? ensureManifest(currentManifestValue) : undefined;\n  const target = ensureManifest(targetManifest);\n  if (!currentManifest) {\n    if (Object.keys(target.entries).length === 0) {\n      return;\n    }\n    throw new Error(\n      \"Resumed sandbox session cannot apply new manifest entries because current manifest state is unavailable\",\n    );\n  }\n  // Drift detection runs on EVERY resume (even no-op ones): the durable trace\n  // that makes an env-recompute regression attributable from the DB instead of\n  // from rotated worker logs.\n  await reportManifestEnvironmentDrift(currentManifest, target, context);\n  if (!session.applyManifest && !session.materializeEntry) {\n    if (Object.keys(target.entries).length === 0) {\n      return;\n    }\n    throw new Error(\n      \"Resumed sandbox session cannot apply new manifest entries because it does not support applyManifest() or materializeEntry()\",\n    );\n  }\n  if (Object.keys(target.entries).length === 0) {\n    return;\n  }\n  if (currentManifest.root !== target.root) {\n    throw new Error(\"Cannot apply per-turn resources to a sandbox with a different manifest root\");\n  }\n  const entries: Record<string, any> = {};\n  for (const [path, entry] of Object.entries(target.entries)) {\n    const existing = (currentManifest.entries as Record<string, unknown>)[path];\n    if (existing === undefined) {\n      entries[path] = entry;\n      continue;\n    }\n    if (stableJson(existing) !== stableJson(entry)) {\n      throw new Error(`Cannot replace existing sandbox manifest entry: ${path}`);\n    }\n  }\n  const environmentChanged =\n    stableJson(currentManifest.environment) !== stableJson(target.environment);\n  if (environmentChanged && !session.applyManifest) {\n    throw new Error(\n      \"Resumed sandbox session cannot refresh manifest environment because it does not support applyManifest()\",\n    );\n  }\n  if (Object.keys(entries).length === 0 && !environmentChanged) {\n    return;\n  }\n  // Carry path grants through manifest rebuilds: since @openai/agents 0.11.0\n  // they gate local source materialization, and run states saved before the\n  // upgrade have manifests without grants.\n  const extraPathGrants = mergePathGrants(currentManifest.extraPathGrants, target.extraPathGrants);\n  const delta = new Manifest({\n    root: currentManifest.root,\n    entries,\n    environment: target.environment,\n    ...(extraPathGrants.length ? { extraPathGrants } : {}),\n  });\n  if (session.applyManifest) {\n    await session.applyManifest(delta);\n  } else {\n    for (const [path, entry] of Object.entries(entries)) {\n      await session.materializeEntry!({ path, entry });\n    }\n  }\n  (session as { state?: { manifest?: Manifest } }).state!.manifest = new Manifest({\n    root: currentManifest.root,\n    environment: environmentChanged ? target.environment : currentManifest.environment,\n    entries: {\n      ...currentManifest.entries,\n      ...entries,\n    },\n    ...(extraPathGrants.length ? { extraPathGrants } : {}),\n  });\n}\n\n/**\n * Key-level diff of the live box's baked manifest env vs the freshly recomputed\n * target env. Returns null when identical. Key NAMES only — values are secrets\n * and must never leave this function's comparison.\n */\nexport function manifestEnvironmentDrift(\n  current: Manifest,\n  target: Manifest,\n): { added: string[]; removed: string[]; changed: string[] } | null {\n  const currentEnv = (current.environment ?? {}) as Record<string, unknown>;\n  const targetEnv = (target.environment ?? {}) as Record<string, unknown>;\n  const added: string[] = [];\n  const removed: string[] = [];\n  const changed: string[] = [];\n  for (const key of Object.keys(targetEnv)) {\n    if (!(key in currentEnv)) {\n      added.push(key);\n    } else if (stableJson(currentEnv[key]) !== stableJson(targetEnv[key])) {\n      changed.push(key);\n    }\n  }\n  for (const key of Object.keys(currentEnv)) {\n    if (!(key in targetEnv)) {\n      removed.push(key);\n    }\n  }\n  if (added.length === 0 && removed.length === 0 && changed.length === 0) {\n    return null;\n  }\n  return {\n    added: added.sort(),\n    removed: removed.sort(),\n    changed: changed.sort(),\n  };\n}\n\nasync function reportManifestEnvironmentDrift(\n  current: Manifest,\n  target: Manifest,\n  context: Pick<SandboxLifecycleHookContext, \"onRuntimeEvent\">,\n): Promise<ReturnType<typeof manifestEnvironmentDrift>> {\n  const drift = manifestEnvironmentDrift(current, target);\n  if (!drift) {\n    return null;\n  }\n  // Reporting must never break a resume: the drift itself is benign under the\n  // env pin (the box keeps running on its baked env); only the SIGNAL matters.\n  try {\n    await context.onRuntimeEvent?.({\n      type: \"sandbox.env.drift\",\n      payload: drift,\n    });\n  } catch {\n    // Swallow: a failed emit must not fail the turn.\n  }\n  return drift;\n}\n\n/**\n * ENV PIN for provided sessions (the ownership-inversion turn path). The SDK\n * validates the FULL target manifest environment against a live provided\n * session's baked env BEFORE reducing to its entry-only delta\n * (validateNoEnvironmentDelta -> session-fatal UserError on ANY difference).\n * So a turn resuming an existing box must declare the box's OWN env,\n * byte-identical — never the fresh recompute. This replaces the agent's\n * defaultManifest environment with the baked one and reports the drift (key\n * names only) instead of letting it kill the session. Fresh env lands at the\n * next cold-create; rotating values ride OFF-manifest (TOKEN-BROKER B1/B2).\n */\nexport async function pinProvidedSessionManifestEnvironment(\n  agent: Agent<any, any>,\n  session: SandboxSessionLike,\n  context: Pick<SandboxLifecycleHookContext, \"onRuntimeEvent\"> = {},\n): Promise<void> {\n  const holder = agent as { defaultManifest?: Manifest };\n  const currentManifestValue = (\n    session as {\n      state?: {\n        manifest?:\n          | Manifest\n          | {\n              root?: string;\n              entries?: Record<string, any>;\n              environment?: Record<string, any>;\n            };\n      };\n    }\n  ).state?.manifest;\n  if (!holder.defaultManifest || !currentManifestValue) {\n    return;\n  }\n  const current = ensureManifest(currentManifestValue);\n  const target = ensureManifest(holder.defaultManifest);\n  const drift = await reportManifestEnvironmentDrift(current, target, context);\n  if (!drift) {\n    return;\n  }\n  holder.defaultManifest = new Manifest({\n    ...(target.root ? { root: target.root } : {}),\n    entries: target.entries,\n    environment: current.environment,\n    ...(target.extraPathGrants?.length ? { extraPathGrants: target.extraPathGrants } : {}),\n  });\n}\n\n/**\n * The one-truth owned-path platform setup: the manifest-env pin (align the turn's\n * manifest to the live box's baked env + report drift, NEVER die on it) plus the\n * beforeAgentStart hooks (repository clone with B1 token/askpass seed, toolspace\n * token seed, azure-cli-login) and signed-URL file materialization — all executed\n * DIRECTLY against the pinned, UN-proxied established box (the SDK never calls\n * client.create/resume for a provided session, so these decorations would never\n * fire on their own).\n *\n * Extracted verbatim from `runStream`'s owned branch so both the EAGER path\n * (runStream, before the run starts) and the LAZY path (the worker's first-op\n * provisioner, after the box is established) run the IDENTICAL setup. A pure\n * refactor for the eager path: same order, same gates, same idempotency\n * (clone skips a materialized tree, token seed overwrites — the desired per-turn\n * refresh, az login is idempotent). The connected-machine (selfhosted) branch\n * keeps platform setup OFF the user's real box and seeds ONLY the toolspace token.\n *\n * `gitTokenSeedsOverride` lets the lazy provisioner pass its own freshly-minted\n * run-scoped provider tokens (minted at establish time, not turn start);\n * unset ⇒ read the seeds off the agent exactly as the eager path does.\n */\nexport async function runOwnedSandboxSetup(\n  agent: Agent<any, any>,\n  session: SandboxSessionLike,\n  setupSession: SandboxSessionLike,\n  opts: {\n    settings: Settings;\n    environment: Record<string, string>;\n    preparedInput?: PreparedAgentInput;\n    fileDownloadsMaterialized?: boolean;\n    onRuntimeEvent?: SandboxLifecycleHookContext[\"onRuntimeEvent\"];\n    gitTokenSeedsOverride?: GitTokenSeeds;\n    gitTokenSeedOverride?: string;\n    gitCredentialBindingsOverride?: GitCredentialBindingSeed[];\n    toolspaceTokenSeedOverride?: string;\n    commandRunner?: SandboxLifecycleCommandRunner;\n  },\n): Promise<void> {\n  const { settings, environment } = opts;\n  // ENV PIN (provided sessions): the SDK validates the FULL recomputed manifest\n  // env against the live box's baked env before applying its entry-only delta\n  // (validateNoEnvironmentDelta — session-fatal on ANY drift; killed a 4-day\n  // prod manager session 2026-07-06). Align the turn's manifest to the box's\n  // own env and REPORT the drift instead of dying on it.\n  await pinProvidedSessionManifestEnvironment(agent, session, {\n    ...(opts.onRuntimeEvent ? { onRuntimeEvent: opts.onRuntimeEvent } : {}),\n  });\n  const runAs = sandboxRunAs(settings);\n  const fileDownloads = sandboxFileDownloadsForAgent(agent);\n  // TOKEN-BROKER (B1): per-turn provider token seeds, forwarded OFF-MANIFEST so\n  // the repository-clone hook writes provider token files before the clone. The\n  // lazy provisioner overrides them with its own establish-time mint.\n  const ownedGitTokenSeeds = {\n    ...(gitTokenSeedsForAgent(agent) ?? {}),\n    ...(opts.gitTokenSeedOverride ? { github: opts.gitTokenSeedOverride } : {}),\n    ...(opts.gitTokenSeedsOverride ?? {}),\n  } satisfies GitTokenSeeds;\n  const ownedGitCredentialBindings =\n    opts.gitCredentialBindingsOverride ?? gitCredentialBindingsForAgent(agent);\n  const ownedToolspaceTokenSeed =\n    opts.toolspaceTokenSeedOverride ?? toolspaceTokenSeedForAgent(agent);\n  const ownedToolspaceTokenFile = toolspaceTokenFileForAgent(agent, environment);\n  const ownedRigSetup = rigSetupDescriptorForAgent(agent);\n  const ownedHooks = [\n    // M3: rig setup runs FIRST so any tooling it installs is present for the\n    // credential / repository-clone hooks below; the rig's credential hooks are\n    // unioned into the deployment preparation-profile hooks (deduped by id).\n    // This is the LIVE owned-path execution (the provided session skips the\n    // client create/resume decoration), so the rig hooks MUST be here or a\n    // rig-bound turn would start without ever running the frozen setup script.\n    ...sandboxRigSetupHooksForAgent(agent),\n    ...unionCredentialHooks(\n      sandboxLifecycleHooksForIds(sandboxLifecycleHookIds(settings)),\n      rigCredentialHooksForAgent(agent),\n    ),\n    ...sandboxToolspaceTokenHooksForAgent(agent),\n    ...sandboxRepositoryCloneHooksForAgent(agent),\n  ];\n  const ownedHookContext: SandboxLifecycleHookContext = {\n    environment,\n    ...(opts.onRuntimeEvent ? { onRuntimeEvent: opts.onRuntimeEvent } : {}),\n    ...(runAs ? { runAs } : {}),\n    ...(Object.keys(ownedGitTokenSeeds).length > 0 ? { gitTokenSeeds: ownedGitTokenSeeds } : {}),\n    ...(ownedGitCredentialBindings ? { gitCredentialBindings: ownedGitCredentialBindings } : {}),\n    ...(ownedToolspaceTokenSeed ? { toolspaceTokenSeed: ownedToolspaceTokenSeed } : {}),\n    ...(ownedToolspaceTokenFile ? { toolspaceTokenFile: ownedToolspaceTokenFile } : {}),\n    ...(ownedRigSetup ? { rigSetup: ownedRigSetup } : {}),\n    ...(opts.commandRunner ? { commandRunner: opts.commandRunner } : {}),\n  };\n  // OWNED-PATH HOOKS: run the beforeAgentStart hooks directly against the provided\n  // box, once per turn, BEFORE the run starts (repository-clone hook seeds the B1\n  // askpass + token file; azure-cli-login on lease-owned boxes). Re-running on a\n  // warm box is safe by construction (clone skips a materialized tree, token seed\n  // overwrites the file, az login is idempotent). EXCEPT on a connected machine\n  // (effective backend \"selfhosted\"): the box is the user's REAL computer — the\n  // platform must not run setup against it (clone hooks are already empty there;\n  // this keeps az login off it too).\n  if (agentActiveSandboxBackend.get(agent) !== \"selfhosted\") {\n    await runBeforeAgentStartHooks(setupSession, ownedHooks, ownedHookContext);\n    // FILE RESOURCES: withSandboxFileDownloads has the IDENTICAL provided-session\n    // blind spot (it too wraps only create/resume), so signed-URL file\n    // materialization must also run directly against the pinned box. The download\n    // command is idempotent (skips an existing file) and atomic (tmp + rename).\n    if (fileDownloads.length > 0 && !opts.fileDownloadsMaterialized) {\n      const materialized = await materializeSandboxFileDownloads(setupSession, fileDownloads, {\n        ...(opts.onRuntimeEvent ? { onRuntimeEvent: opts.onRuntimeEvent } : {}),\n        ...(runAs ? { runAs } : {}),\n        ...(opts.commandRunner ? { commandRunner: opts.commandRunner } : {}),\n      });\n      if (opts.preparedInput) {\n        appendSandboxFileDownloadFailureNote(opts.preparedInput, materialized.failures);\n      }\n    }\n  } else {\n    // SELFHOSTED TOOLSPACE (parity): the platform setup hooks and file\n    // materialization stay OFF the user's real machine — but the toolspace token\n    // seed is the ONE piece of per-turn material that must reach it (a scoped,\n    // own-session-bound token written to $OPENGENI_TOOLSPACE_TOKEN_FILE over the\n    // same off-manifest exec channel the clone-seed uses; the machine's only path\n    // to programmatic tool calling). Seed it (only) here.\n    const toolspaceHooks = sandboxToolspaceTokenHooksForAgent(agent);\n    if (toolspaceHooks.length > 0) {\n      await runBeforeAgentStartHooks(setupSession, toolspaceHooks, ownedHookContext);\n    }\n  }\n}\n\nfunction mergePathGrants(\n  current: Manifest[\"extraPathGrants\"] | undefined,\n  target: Manifest[\"extraPathGrants\"] | undefined,\n): Manifest[\"extraPathGrants\"] {\n  const merged = new Map<string, Manifest[\"extraPathGrants\"][number]>();\n  for (const grant of [...(current ?? []), ...(target ?? [])]) {\n    merged.set(grant.path, grant);\n  }\n  return [...merged.values()];\n}\n\nexport function withSandboxFileDownloads(\n  client: SandboxClient,\n  downloads: SandboxFileDownload[],\n  context: Pick<SandboxLifecycleHookContext, \"onRuntimeEvent\" | \"runAs\" | \"commandRunner\"> = {},\n): SandboxClient {\n  const normalizedDownloads = normalizeSandboxFileDownloads(downloads);\n  if (normalizedDownloads.length === 0) {\n    return client;\n  }\n  const completed = new WeakSet<object>();\n  const wrapSession = async <T extends SandboxSessionLike>(session: T): Promise<T> => {\n    if (typeof session === \"object\" && session !== null && !completed.has(session)) {\n      await materializeSandboxFileDownloads(session, normalizedDownloads, context);\n      completed.add(session);\n    }\n    return session;\n  };\n  return {\n    backendId: client.backendId,\n    ...(client.supportsDefaultOptions !== undefined\n      ? { supportsDefaultOptions: client.supportsDefaultOptions }\n      : {}),\n    ...(client.create\n      ? {\n          create: async (...args: any[]) =>\n            await wrapSession(await (client.create as any)(...args)),\n        }\n      : {}),\n    ...(client.resume\n      ? {\n          resume: async (state: SandboxSessionState) =>\n            await wrapSession(await client.resume!(state)),\n        }\n      : {}),\n    ...(client.delete\n      ? {\n          delete: async (state: SandboxSessionState) => await client.delete!(state),\n        }\n      : {}),\n    ...(client.serializeSessionState\n      ? {\n          serializeSessionState: async (state: SandboxSessionState, options) =>\n            await client.serializeSessionState!(state, options),\n        }\n      : {}),\n    ...(client.canPersistOwnedSessionState\n      ? {\n          canPersistOwnedSessionState: async (state: SandboxSessionState) =>\n            await client.canPersistOwnedSessionState!(state),\n        }\n      : {}),\n    ...(client.canReusePreservedOwnedSession\n      ? {\n          canReusePreservedOwnedSession: async (state: SandboxSessionState) =>\n            await client.canReusePreservedOwnedSession!(state),\n        }\n      : {}),\n    ...(client.deserializeSessionState\n      ? {\n          deserializeSessionState: async (state: Record<string, unknown>) =>\n            await client.deserializeSessionState!(state),\n        }\n      : {}),\n  };\n}\n\nexport async function materializeSandboxFileDownloads(\n  session: SandboxSessionLike,\n  downloads: SandboxFileDownload[],\n  context: Pick<SandboxLifecycleHookContext, \"onRuntimeEvent\" | \"runAs\" | \"commandRunner\"> = {},\n): Promise<SandboxFileDownloadMaterializationResult> {\n  const normalizedDownloads = normalizeSandboxFileDownloads(downloads);\n  if (normalizedDownloads.length === 0) {\n    return { failures: [] };\n  }\n  const failures: SandboxFileDownloadFailure[] = [];\n  for (const download of normalizedDownloads) {\n    const targetPath = sandboxDownloadTargetPath(download);\n    const payload = {\n      fileId: download.fileId,\n      path: targetPath,\n      sizeBytes: download.sizeBytes ?? null,\n      expiresAt: download.expiresAt ? new Date(download.expiresAt).toISOString() : null,\n    };\n    await context.onRuntimeEvent?.({\n      type: \"sandbox.operation.started\",\n      payload: { name: \"file-resource-download\", ...payload },\n    });\n    if (!session.exec && !session.execCommand) {\n      const failure = sandboxFileDownloadFailure(\n        download,\n        targetPath,\n        \"Sandbox file download materialization requires command execution support\",\n      );\n      failures.push(failure);\n      await context.onRuntimeEvent?.({\n        type: \"sandbox.operation.failed\",\n        payload: {\n          name: \"file-resource-download\",\n          ...payload,\n          error: failure.reason,\n        },\n      });\n      continue;\n    }\n    let result: unknown;\n    try {\n      result = await runSandboxLifecycleCommand(\n        session,\n        {\n          cmd: sandboxFileDownloadCommand(download, targetPath),\n          workdir: \"/workspace\",\n          ...(context.runAs ? { runAs: context.runAs } : {}),\n          yieldTimeMs: SANDBOX_LIFECYCLE_COMMAND_TIMEOUT_MS,\n          maxOutputTokens: 20_000,\n        },\n        context.commandRunner,\n      );\n      assertSandboxCommandSucceeded(result, `Sandbox file resource download ${download.fileId}`);\n      await context.onRuntimeEvent?.({\n        type: \"sandbox.operation.completed\",\n        payload: { name: \"file-resource-download\", ...payload },\n      });\n    } catch (error) {\n      if (error instanceof TurnSandboxCommandCancelledError) throw error;\n      const failure = sandboxFileDownloadFailure(download, targetPath, error, result);\n      failures.push(failure);\n      await context.onRuntimeEvent?.({\n        type: \"sandbox.operation.failed\",\n        payload: {\n          name: \"file-resource-download\",\n          ...payload,\n          error: failure.reason,\n          ...(failure.exitCode !== undefined ? { exitCode: failure.exitCode } : {}),\n          ...(failure.output ? { output: failure.output } : {}),\n        },\n      });\n    }\n  }\n  return { failures };\n}\n\nfunction sandboxFileDownloadFailure(\n  download: SandboxFileDownload,\n  targetPath: string,\n  error: unknown,\n  result?: unknown,\n): SandboxFileDownloadFailure {\n  const exitCode = sandboxCommandExitCode(result);\n  const output = sandboxCommandOutput(result);\n  return {\n    fileId: download.fileId,\n    filename: download.filename,\n    path: targetPath,\n    reason: error instanceof Error ? error.message : String(error),\n    ...(exitCode !== null ? { exitCode } : {}),\n    ...(output ? { output } : {}),\n  };\n}\n\nexport function sandboxFileDownloadFailureNote(failures: SandboxFileDownloadFailure[]): string {\n  if (failures.length === 0) {\n    return \"\";\n  }\n  return [\n    \"The following attached files could not be loaded into the sandbox and are unavailable this turn:\",\n    ...failures.map((failure) => `- ${failure.filename} (${failure.reason})`),\n    \"Continue without them or tell the user.\",\n  ].join(\"\\n\");\n}\n\nexport function sandboxFileDownloadsForAgent(agent: unknown): SandboxFileDownload[] {\n  return typeof agent === \"object\" && agent !== null\n    ? [...(agentFileDownloads.get(agent) ?? [])]\n    : [];\n}\n\nfunction ensureManifest(\n  manifest:\n    | Manifest\n    | {\n        root?: string;\n        entries?: Record<string, any>;\n        environment?: Record<string, any>;\n        extraPathGrants?: any[];\n      },\n): Manifest {\n  if (\n    manifest instanceof Manifest &&\n    typeof manifest.mountTargetsForMaterialization === \"function\"\n  ) {\n    return manifest;\n  }\n  return new Manifest({\n    ...(manifest.root ? { root: manifest.root } : {}),\n    entries: manifest.entries ?? {},\n    environment: manifest.environment ?? {},\n    ...(manifest.extraPathGrants?.length ? { extraPathGrants: manifest.extraPathGrants } : {}),\n  });\n}\n\nfunction base64DecodedByteLength(value: string): number {\n  const padding = value.endsWith(\"==\") ? 2 : value.endsWith(\"=\") ? 1 : 0;\n  return Math.max(0, Math.floor((value.length * 3) / 4) - padding);\n}\n\n/** Determine image byte length without allocating another binary/base64 copy. */\nfunction imageDataByteLength(data: unknown): number | null {\n  if (ArrayBuffer.isView(data)) return data.byteLength;\n  if (data instanceof ArrayBuffer) return data.byteLength;\n  if (Array.isArray(data)) {\n    return data.every((value) => typeof value === \"number\") ? data.length : null;\n  }\n  if (!data || typeof data !== \"object\") return null;\n  const record = data as Record<string, unknown>;\n  if (record.type === \"Buffer\" && Array.isArray(record.data)) {\n    return record.data.every((value) => typeof value === \"number\") ? record.data.length : null;\n  }\n  const keys = Object.keys(record);\n  return keys.length > 0 &&\n    keys.every((key) => /^\\d+$/.test(key) && typeof record[key] === \"number\")\n    ? keys.length\n    : null;\n}\n\n/**\n * Convert one image-shaped tool result into a content-free audit fact. This is\n * intentionally different from model history: the model keeps its structured\n * image item, while `session_events` never becomes an implicit image blob store.\n */\nfunction toolOutputMediaPreview(value: unknown): SessionEventMediaPreview | null {\n  if (typeof value === \"string\") {\n    return sessionEventMediaPreviewFromDataUrl(value);\n  }\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return null;\n  const record = value as Record<string, unknown>;\n  if (record.type === \"input_image\") {\n    const source = record.image ?? record.image_url ?? record.imageUrl;\n    const url =\n      typeof source === \"string\"\n        ? source\n        : source && typeof source === \"object\"\n          ? (source as Record<string, unknown>).url\n          : null;\n    if (typeof url !== \"string\" || url.length === 0) return null;\n    return sessionEventMediaPreviewFromDataUrl(url) ?? sessionEventMediaPreview(\"image/*\", null);\n  }\n  if (record.type !== \"image\" || !record.image || typeof record.image !== \"object\") return null;\n  const image = record.image as Record<string, unknown>;\n  const mediaType =\n    typeof image.mediaType === \"string\" && image.mediaType.length > 0\n      ? image.mediaType\n      : \"image/png\";\n  if (typeof image.url === \"string\" && image.url.length > 0) {\n    return (\n      sessionEventMediaPreviewFromDataUrl(image.url) ?? sessionEventMediaPreview(mediaType, null)\n    );\n  }\n  if (typeof image.data === \"string\") {\n    return (\n      sessionEventMediaPreviewFromDataUrl(image.data) ??\n      sessionEventMediaPreview(mediaType, base64DecodedByteLength(image.data))\n    );\n  }\n  const byteLength = imageDataByteLength(image.data);\n  return byteLength === null ? null : sessionEventMediaPreview(mediaType, byteLength);\n}\n\n/**\n * Normalize a tool-call output for the lossy `agent.toolCall.output` audit event.\n * Inline image bytes/data URLs become a compact `media_preview` with exact byte\n * length where knowable and `fullOutputAvailable:false`. The model-facing output\n * is not changed here, and mixed arrays retain their non-image text/error facts.\n */\nexport function normalizeToolOutputForEvent(output: unknown): unknown {\n  const single = toolOutputMediaPreview(output);\n  if (single !== null) {\n    return single;\n  }\n  if (Array.isArray(output)) {\n    const normalized = output.map((el) => toolOutputMediaPreview(el) ?? el);\n    if (normalized.length === 1 && normalized[0]?.type === \"media_preview\") {\n      return normalized[0];\n    }\n    return normalized;\n  }\n  return output;\n}\n\n/**\n * Hosted web_search progresses on the raw Responses stream\n * (`response.output_item.added/done` with `web_search_call`) long before the SDK\n * materializes a `RunToolCallItem` at `response_done`. Without this mapping the\n * timeline only sees search cards after the whole model round finishes — or\n * never mid-turn — while assistant prose (\"Search 1/5\") streams live.\n */\nfunction hostedWebSearchToolCallFromResponsesEvent(raw: unknown): NormalizedRuntimeEvent | null {\n  if (!raw || typeof raw !== \"object\") {\n    return null;\n  }\n  const event = raw as {\n    type?: unknown;\n    item?: {\n      id?: unknown;\n      type?: unknown;\n      status?: unknown;\n      action?: unknown;\n      [key: string]: unknown;\n    };\n  };\n  const eventType = typeof event.type === \"string\" ? event.type : \"\";\n  if (\n    !(\n      (eventType === \"response.output_item.added\" || eventType === \"response.output_item.done\") &&\n      event.item?.type === \"web_search_call\"\n    )\n  ) {\n    // Progress-only `response.web_search_call.*` events lack the action\n    // payload; added/done are enough for a live, query-bearing card.\n    return null;\n  }\n  const item = event.item;\n  const itemId = typeof item.id === \"string\" ? item.id : null;\n  if (!itemId) {\n    return null;\n  }\n  const status =\n    typeof item.status === \"string\"\n      ? item.status\n      : eventType === \"response.output_item.done\"\n        ? \"completed\"\n        : \"in_progress\";\n  const action = item.action ?? null;\n  // Codex frequently emits `output_item.added` for web_search_call before the\n  // action payload exists. Persist that so the timeline can show \"Searching…\",\n  // then the matching `done` (same id) fills in query/queries via merge.\n  const { status: _status, ...providerData } = item;\n\n  return {\n    type: \"agent.toolCall.created\",\n    payload: {\n      id: itemId,\n      name: \"web_search_call\",\n      arguments: action,\n      raw: {\n        type: \"hosted_tool_call\",\n        id: itemId,\n        name: \"web_search_call\",\n        status,\n        providerData,\n      },\n    },\n  };\n}\n\nexport function normalizeSdkEvent(event: RunStreamEvent): NormalizedRuntimeEvent[] {\n  const out: NormalizedRuntimeEvent[] = [];\n  if (event.type === \"raw_model_stream_event\") {\n    const data = (event as any).data;\n    if (data?.type === \"output_text_delta\" && typeof data.delta === \"string\") {\n      out.push({ type: \"agent.message.delta\", payload: { text: data.delta } });\n      return out;\n    }\n    if (data?.type === \"response_done\") {\n      return out;\n    }\n  }\n  if (isOpenAIResponsesRawModelStreamEvent(event)) {\n    const raw = (event as any).data?.event;\n    if (raw?.type === \"response.reasoning_summary_text.delta\" && typeof raw.delta === \"string\") {\n      out.push({ type: \"agent.reasoning.delta\", payload: { text: raw.delta } });\n    }\n    const webSearch = hostedWebSearchToolCallFromResponsesEvent(raw);\n    if (webSearch) {\n      out.push(webSearch);\n    }\n    return out;\n  }\n  if (event.type === \"agent_updated_stream_event\") {\n    out.push({\n      type: \"agent.updated\",\n      payload: { agent: (event as any).agent?.name ?? null },\n    });\n    return out;\n  }\n  if (event.type !== \"run_item_stream_event\") {\n    return out;\n  }\n  const item = (event as any).item;\n  if (!item) {\n    return out;\n  }\n  if (item.type === \"tool_call_item\") {\n    const raw = item.rawItem ?? {};\n    out.push({\n      type: \"agent.toolCall.created\",\n      payload: {\n        id: raw.callId ?? raw.id ?? item.id ?? null,\n        name: raw.name ?? raw.type ?? \"tool\",\n        arguments: raw.arguments ?? raw.input ?? null,\n        raw,\n      },\n    });\n  } else if (item.type === \"tool_call_output_item\") {\n    out.push({\n      type: \"agent.toolCall.output\",\n      payload: {\n        id: item.rawItem?.callId ?? item.id ?? null,\n        // Inline media becomes a content-free audit fact. Model history keeps\n        // the provider's real structured image output on its separate path.\n        output: normalizeToolOutputForEvent(item.output),\n      },\n    });\n  } else if (item.type === \"tool_search_call_item\") {\n    // Progressive connector disclosure: surface the model's tool search as a\n    // regular tool-call event so the session stream shows the step (parity with\n    // the Codex CLI, which renders its searches). Arguments may be an object\n    // (the live wire shape) or a string.\n    const raw = item.rawItem ?? {};\n    out.push({\n      type: \"agent.toolCall.created\",\n      payload: {\n        id: raw.call_id ?? raw.callId ?? raw.id ?? item.id ?? null,\n        name: \"tool_search\",\n        arguments: raw.arguments ?? null,\n        raw,\n      },\n    });\n  } else if (item.type === \"tool_search_output_item\") {\n    const raw = item.rawItem ?? {};\n    const disclosed = Array.isArray(raw.tools)\n      ? raw.tools\n          .map((tool: { name?: unknown }) => (typeof tool?.name === \"string\" ? tool.name : \"\"))\n          .filter(Boolean)\n      : [];\n    out.push({\n      type: \"agent.toolCall.output\",\n      payload: {\n        id: raw.call_id ?? raw.callId ?? item.id ?? null,\n        output: {\n          type: \"text\",\n          text:\n            disclosed.length > 0\n              ? `Disclosed tools: ${disclosed.join(\", \")}`\n              : \"No matching tools found.\",\n        },\n      },\n    });\n  } else if (item.type === \"message_output_item\") {\n    const text = typeof item.text === \"string\" ? item.text : undefined;\n    if (text) {\n      out.push({ type: \"agent.message.completed\", payload: { text } });\n    }\n  }\n  return out;\n}\n\nexport function modelResponseUsageFromSdkEvent(event: RunStreamEvent): ModelResponseUsage | null {\n  const response = modelResponseFromSdkEvent(event);\n  return modelResponseUsageFromResponse(response);\n}\n\n/** Normalize usage from either a Responses or Chat Completions result. */\nexport function modelResponseUsageFromResponse(response: unknown): ModelResponseUsage | null {\n  const usage = usageFromResponse(response);\n  if (!usage) {\n    return null;\n  }\n  const responseId =\n    typeof (response as { id?: unknown } | null)?.id === \"string\"\n      ? (response as { id: string }).id\n      : typeof (response as { responseId?: unknown } | null)?.responseId === \"string\"\n        ? (response as { responseId: string }).responseId\n        : undefined;\n  const serviceTier = modelResponseServiceTierFromResponse(response);\n  return {\n    ...(responseId ? { responseId } : {}),\n    ...(serviceTier ? { serviceTier } : {}),\n    usage,\n  };\n}\n\nexport type ModelResponseServiceTierEvent = {\n  source: \"normalized\" | \"provider\";\n  serviceTier: string | null;\n};\n\n/**\n * Read the provider's terminal service tier without depending on usage being\n * present. The normalized terminal can omit provider-only fields, so callers\n * should treat the raw provider response as the fail-closed authority.\n */\nexport function modelResponseServiceTierFromSdkEvent(\n  event: RunStreamEvent,\n): ModelResponseServiceTierEvent | null {\n  if (event.type === \"raw_model_stream_event\") {\n    const data = (event as any).data;\n    if (data?.type === \"response_done\") {\n      return {\n        source: \"normalized\",\n        serviceTier: modelResponseServiceTierFromResponse(data.response),\n      };\n    }\n  }\n  if (isOpenAIResponsesRawModelStreamEvent(event)) {\n    const raw = (event as any).data?.event;\n    if (raw?.type === \"response.completed\") {\n      return {\n        source: \"provider\",\n        serviceTier: modelResponseServiceTierFromResponse(raw.response),\n      };\n    }\n  }\n  return null;\n}\n\nfunction modelResponseServiceTierFromResponse(response: unknown): string | null {\n  if (!response || typeof response !== \"object\") {\n    return null;\n  }\n  const record = response as Record<string, unknown>;\n  const direct = record.service_tier ?? record.serviceTier;\n  if (typeof direct === \"string\" && direct.length > 0) {\n    return direct;\n  }\n  const providerData =\n    record.providerData && typeof record.providerData === \"object\"\n      ? (record.providerData as Record<string, unknown>)\n      : null;\n  const nested = providerData?.service_tier ?? providerData?.serviceTier;\n  return typeof nested === \"string\" && nested.length > 0 ? nested : null;\n}\n\nfunction modelResponseFromSdkEvent(event: RunStreamEvent): any {\n  if (event.type === \"raw_model_stream_event\") {\n    const data = (event as any).data;\n    if (data?.type === \"response_done\") {\n      return data.response;\n    }\n  }\n  if (isOpenAIResponsesRawModelStreamEvent(event)) {\n    const raw = (event as any).data?.event;\n    if (raw?.type === \"response.completed\") {\n      return raw.response;\n    }\n  }\n  return null;\n}\n\nfunction usageFromResponse(response: unknown): ModelResponseUsage[\"usage\"] | null {\n  const raw = (response as { usage?: unknown } | null)?.usage;\n  if (!raw || typeof raw !== \"object\") {\n    return null;\n  }\n  const record = raw as Record<string, unknown>;\n  const usage = {\n    ...numberProp(\n      record,\n      \"inputTokens\",\n      \"inputTokens\",\n      \"input_tokens\",\n      \"promptTokens\",\n      \"prompt_tokens\",\n    ),\n    ...numberProp(\n      record,\n      \"outputTokens\",\n      \"outputTokens\",\n      \"output_tokens\",\n      \"completionTokens\",\n      \"completion_tokens\",\n    ),\n    ...numberProp(record, \"totalTokens\", \"totalTokens\", \"total_tokens\"),\n    ...inputTokenDetailsProp(record),\n    ...outputTokenDetailsProp(record),\n    ...requestUsageEntriesProp(record),\n  };\n  return Object.keys(usage).length > 0 ? usage : null;\n}\n\nfunction numberProp(\n  raw: Record<string, unknown>,\n  outputKey: \"inputTokens\" | \"outputTokens\" | \"totalTokens\",\n  ...keys: string[]\n): Partial<ModelResponseUsage[\"usage\"]> {\n  const value = keys.map((key) => raw[key]).find((candidate) => candidate !== undefined);\n  // Preserve numeric provider values verbatim here, including malformed ones.\n  // The shared usage normalizer is the single bounded validation boundary and\n  // needs to see NaN/infinite/fractional/oversized values so it can emit safe\n  // field-path diagnostics rather than silently erasing the evidence.\n  return typeof value === \"number\" ? { [outputKey]: value } : {};\n}\n\nfunction inputTokenDetailsProp(raw: Record<string, unknown>): Partial<ModelResponseUsage[\"usage\"]> {\n  const details =\n    raw.inputTokensDetails ??\n    raw.input_tokens_details ??\n    raw.promptTokensDetails ??\n    raw.prompt_tokens_details;\n  if (details === undefined || details === null) {\n    return {};\n  }\n  return {\n    inputTokensDetails: details as Record<string, number> | Array<Record<string, number>>,\n  };\n}\n\nfunction outputTokenDetailsProp(\n  raw: Record<string, unknown>,\n): Partial<ModelResponseUsage[\"usage\"]> {\n  const details = raw.outputTokensDetails ?? raw.output_tokens_details;\n  const normalized = details ?? raw.completionTokensDetails ?? raw.completion_tokens_details;\n  if (normalized === undefined || normalized === null) {\n    return {};\n  }\n  return {\n    outputTokensDetails: normalized as Record<string, number> | Array<Record<string, number>>,\n  };\n}\n\nfunction requestUsageEntriesProp(\n  raw: Record<string, unknown>,\n): Partial<ModelResponseUsage[\"usage\"]> {\n  const entries = raw.requestUsageEntries ?? raw.request_usage_entries;\n  if (entries === undefined || entries === null) {\n    return {};\n  }\n  return {\n    // The normalizer validates every entry and all supported field aliases.\n    // Preserve the SDK objects rather than rebuilding them and accidentally\n    // dropping provider detail fields such as cache_write_tokens.\n    requestUsageEntries: entries as NonNullable<ModelResponseUsage[\"usage\"][\"requestUsageEntries\"]>,\n  };\n}\n\nexport function serializeApprovals(interruptions: unknown[]): unknown[] {\n  return interruptions\n    .filter((item) => interruptionToolName(item) !== HUMAN_INPUT_TOOL_NAME)\n    .map((item: any) => {\n      if (typeof item?.toJSON === \"function\") {\n        return item.toJSON();\n      }\n      return {\n        id: approvalIdentifier(item) ?? \"approval\",\n        name: item?.name ?? item?.rawItem?.name ?? \"tool\",\n        arguments: item?.arguments ?? item?.rawItem?.arguments ?? null,\n        raw: item,\n      };\n    });\n}\n\nexport function serializeHumanInputRequests(\n  interruptions: unknown[],\n): SerializedHumanInputInterruption[] {\n  return interruptions\n    .filter((item) => interruptionToolName(item) === HUMAN_INPUT_TOOL_NAME)\n    .map((item: any) => {\n      const rawArguments = item?.arguments ?? item?.rawItem?.arguments;\n      let parsedArguments: unknown = rawArguments;\n      if (typeof rawArguments === \"string\") {\n        try {\n          parsedArguments = JSON.parse(rawArguments);\n        } catch {\n          throw new Error(\"Human-input interruption contains invalid JSON arguments\");\n        }\n      }\n      const toolCallId = approvalIdentifier(item);\n      if (!toolCallId) {\n        throw new Error(\"Human-input interruption is missing a stable tool-call identity\");\n      }\n      return {\n        toolCallId,\n        input: RequestHumanInputToolInput.parse(parsedArguments),\n      };\n    });\n}\n\nexport function buildManifest(\n  settings: Settings,\n  resources: ResourceRef[],\n  environment = collectSandboxEnvironment(settings),\n  fileResourceDownloads: SandboxFileDownload[] = [],\n): Manifest {\n  assertUniqueResourceMountPaths(resources);\n  const entries: Record<string, any> = {};\n  const downloadsByFileId = new Map(\n    normalizeSandboxFileDownloads(fileResourceDownloads).map((download) => [\n      download.fileId,\n      download,\n    ]),\n  );\n  for (const resource of resources) {\n    if (resource.kind === \"repository\") {\n      const url = new URL(resource.uri);\n      const host = url.host.toLowerCase();\n      const repo = url.pathname.replace(/^\\/+|\\/+$/g, \"\").replace(/\\.git$/, \"\");\n      const mountPath = resourceMountPath(resource);\n      if (repositoryUsesSandboxClone(settings, resource)) {\n        entries[mountPath] = dir();\n        continue;\n      }\n      entries[mountPath] = gitRepo({\n        host,\n        repo,\n        ref: resource.ref,\n        ...(resource.subpath ? { subpath: normalizeRepositorySubpath(resource.subpath) } : {}),\n      });\n      continue;\n    }\n    if (resource.kind === \"file\") {\n      const mountPath = resourceMountPath(resource);\n      const download = downloadsByFileId.get(resource.fileId);\n      entries[mountPath] = download\n        ? sandboxDownloadDirectory(download, mountPath)\n        : objectStorageFileMount(settings, `files/${resource.fileId}/original`);\n    }\n  }\n  // No extraPathGrants here: remote sandbox clients (Modal) reject manifests\n  // that carry them at create/apply time, which broke every Modal session.\n  // The lazy bundled-skills source no longer needs a grant because\n  // bundledSkillsDir() stages the skills inside the process working directory\n  // whenever the packaged copy lives outside it.\n  return new Manifest({\n    root: \"/workspace\",\n    entries,\n    environment,\n  });\n}\n\nexport function repositoryWorkspaceSkillPathsOption(resources: readonly ResourceRef[]): {\n  workspaceSkillPaths?: readonly WorkspaceSkillSearchPath[];\n} {\n  const repositories = resources.filter(\n    (resource): resource is Extract<ResourceRef, { kind: \"repository\" }> =>\n      resource.kind === \"repository\",\n  );\n  if (repositories.length === 0) return {};\n\n  const paths = new Map<string, WorkspaceSkillSearchPath>();\n  const add = (path: string, source: string): void => {\n    if (!paths.has(path)) paths.set(path, { path, source });\n  };\n  // A Connected Machine maps /workspace to its configured working directory,\n  // which may itself be the selected repository. Managed sandboxes normally use\n  // the repository mount paths below. Checking both keeps the rule portable.\n  add(\".agents/skills\", \"workspace .agents/skills\");\n  add(\".claude/skills\", \"workspace .claude/skills\");\n  for (const repository of repositories) {\n    const mountPath = resourceMountPath(repository);\n    add(`${mountPath}/.agents/skills`, `${mountPath}/.agents/skills`);\n    add(`${mountPath}/.claude/skills`, `${mountPath}/.claude/skills`);\n  }\n  return { workspaceSkillPaths: [...paths.values()] };\n}\n\nfunction sandboxDownloadDirectory(download: SandboxFileDownload, mountPath: string): any {\n  if (download.mountPath !== mountPath) {\n    throw new Error(\n      `File download materialization path mismatch for ${download.fileId}: expected ${mountPath}, got ${download.mountPath}`,\n    );\n  }\n  assertSafeSandboxFilename(download.filename, download.fileId);\n  if (download.content) {\n    return dir({\n      children: {\n        [download.filename]: file({ content: download.content }),\n      },\n    });\n  }\n  return dir();\n}\n\nfunction objectStorageFileMount(settings: Settings, prefix: string): any {\n  // Descriptor-driven: a nativeBucketMount backend (modal) mounts via the\n  // provider's own bucket-mount strategy and cannot mount Azure Blob entries —\n  // it needs pre-signed downloads instead. Reading the descriptor (not a\n  // hard-coded backend name) keeps this honest as providers are added.\n  const nativeBucketMount = CAPABILITY_DESCRIPTORS[settings.sandboxBackend].nativeBucketMount;\n  if (settings.objectStorageBackend === \"azure-blob\") {\n    if (nativeBucketMount) {\n      throw new Error(\n        \"Modal sandbox Azure Blob file resources require pre-signed download materialization because the current OpenAI Agents SDK Modal client does not support Azure Blob mount entries.\",\n      );\n    }\n    const config = azureBlobMountConfig(settings);\n    return azureBlobMount({\n      container: config.container,\n      prefix,\n      accountName: config.accountName,\n      accountKey: config.accountKey,\n      endpointUrl: config.endpointUrl,\n      readOnly: true,\n      mountStrategy: inContainerMountStrategy({\n        pattern: { type: \"rclone\", mode: \"fuse\" },\n      }),\n    });\n  }\n  if (settings.objectStorageBackend === \"aws-s3\" || settings.objectStorageBackend === \"gcs\") {\n    throw new Error(\n      `${settings.objectStorageBackend} file resources require pre-signed download materialization`,\n    );\n  }\n  const config = s3CompatibleMountConfig(settings);\n  return s3Mount({\n    bucket: config.bucket,\n    prefix,\n    endpointUrl: config.endpointUrl,\n    region: config.region,\n    s3Provider: config.s3Provider,\n    accessKeyId: config.accessKeyId,\n    secretAccessKey: config.secretAccessKey,\n    readOnly: true,\n    mountStrategy: nativeBucketMount\n      ? new ModalCloudBucketMountStrategy()\n      : inContainerMountStrategy({ pattern: { type: \"rclone\", mode: \"fuse\" } }),\n  });\n}\n\nfunction s3CompatibleMountConfig(settings: Settings): {\n  bucket: string;\n  endpointUrl: string;\n  region: string;\n  s3Provider: string;\n  accessKeyId: string;\n  secretAccessKey: string;\n} {\n  const endpointUrl = settings.objectStorageSandboxEndpoint ?? settings.objectStorageEndpoint;\n  if (\n    !endpointUrl ||\n    !settings.objectStorageAccessKeyId ||\n    !settings.objectStorageSecretAccessKey\n  ) {\n    throw new Error(\"File resources require configured S3-compatible object storage\");\n  }\n  return {\n    bucket: settings.objectStorageBucket,\n    endpointUrl,\n    region: settings.objectStorageRegion,\n    s3Provider: settings.objectStorageS3Provider,\n    accessKeyId: settings.objectStorageAccessKeyId,\n    secretAccessKey: settings.objectStorageSecretAccessKey,\n  };\n}\n\nfunction azureBlobMountConfig(settings: Settings): {\n  container: string;\n  accountName: string;\n  accountKey: string;\n  endpointUrl?: string;\n} {\n  const parsed = settings.objectStorageAzureConnectionString\n    ? parseAzureConnectionString(settings.objectStorageAzureConnectionString)\n    : {};\n  const accountName = settings.objectStorageAzureAccountName ?? parsed.AccountName;\n  const accountKey = settings.objectStorageAzureAccountKey ?? parsed.AccountKey;\n  if (!accountName || !accountKey) {\n    throw new Error(\"File resources require Azure Blob account name and account key\");\n  }\n  const endpointUrl = azureBlobManifestEndpoint(\n    settings.objectStorageAzureEndpoint ?? parsed.BlobEndpoint,\n    accountName,\n  );\n  return {\n    container: settings.objectStorageBucket,\n    accountName,\n    accountKey,\n    ...(endpointUrl ? { endpointUrl } : {}),\n  };\n}\n\nfunction azureBlobManifestEndpoint(\n  endpoint: string | undefined,\n  accountName: string,\n): string | undefined {\n  if (!endpoint) {\n    return undefined;\n  }\n  const normalized = endpoint.replace(/\\/+$/, \"\");\n  const standardAccountEndpoint = `https://${accountName}.blob.core.windows.net`;\n  return normalized === standardAccountEndpoint ? undefined : normalized;\n}\n\nfunction parseAzureConnectionString(value: string): Record<string, string> {\n  return Object.fromEntries(\n    value\n      .split(\";\")\n      .map((part) => part.trim())\n      .filter(Boolean)\n      .map((part) => {\n        const index = part.indexOf(\"=\");\n        return index === -1 ? [part, \"\"] : [part.slice(0, index), part.slice(index + 1)];\n      }),\n  );\n}\n\nfunction normalizeManifestPath(path: string): string {\n  return normalizeResourceMountPath(path);\n}\n\nfunction normalizeSandboxFileDownloads(downloads: SandboxFileDownload[]): SandboxFileDownload[] {\n  return downloads.map((download) => {\n    const mountPath = normalizeManifestPath(download.mountPath);\n    assertSafeSandboxFilename(download.filename, download.fileId);\n    if (!download.content && !download.url?.trim()) {\n      throw new Error(\n        `File download materialization requires content or a URL for ${download.fileId}`,\n      );\n    }\n    return {\n      ...download,\n      mountPath,\n    };\n  });\n}\n\nfunction assertSafeSandboxFilename(filename: string, fileId: string): void {\n  if (\n    !filename ||\n    filename.includes(\"/\") ||\n    filename.includes(\"\\\\\") ||\n    filename === \".\" ||\n    filename === \"..\" ||\n    filename.includes(\"..\")\n  ) {\n    throw new Error(`Invalid sandbox file name for ${fileId}: ${filename}`);\n  }\n}\n\nfunction sandboxDownloadTargetPath(download: SandboxFileDownload): string {\n  return posixPath.join(\"/workspace\", download.mountPath, download.filename);\n}\n\nfunction sandboxFileDownloadCommand(download: SandboxFileDownload, targetPath: string): string {\n  if (!download.url) {\n    throw new Error(`File download materialization URL is empty for ${download.fileId}`);\n  }\n  const targetDir = posixPath.dirname(targetPath);\n  const tmpPath = `${targetPath}.opengeni-download-$$`;\n  return [\n    \"set +x\",\n    \"set -eu\",\n    `mkdir -p -- ${shellQuote(targetDir)}`,\n    `if [ ! -f ${shellQuote(targetPath)} ]; then`,\n    `  tmp=${shellQuote(tmpPath)}`,\n    '  cleanup() { rm -f -- \"$tmp\"; }',\n    \"  trap cleanup EXIT\",\n    `  curl --fail --location --silent --show-error --retry 3 --retry-delay 1 --output \"$tmp\" ${shellQuote(download.url)}`,\n    `  mv -- \"$tmp\" ${shellQuote(targetPath)}`,\n    \"  trap - EXIT\",\n    \"fi\",\n    `chmod a-w -- ${shellQuote(targetPath)} 2>/dev/null || true`,\n  ].join(\"\\n\");\n}\n\nfunction shellQuote(value: string): string {\n  return `'${value.replace(/'/g, \"'\\\\''\")}'`;\n}\n\nexport type SandboxLifecycleHookPhase = \"beforeAgentStart\";\n\nexport type SandboxLifecycleCommandRunner = (\n  session: TurnSandboxCommandSession,\n  args: TurnSandboxCommandArgs,\n) => Promise<unknown>;\n\nexport type SandboxLifecycleHookContext = {\n  environment: Record<string, string>;\n  onRuntimeEvent?: (event: NormalizedRuntimeEvent) => Promise<void> | void;\n  runAs?: string;\n  // TOKEN-BROKER (B1): back-compat GitHub alias for gitTokenSeeds.github.\n  gitTokenSeed?: string;\n  // Provider tokens to seed into box token FILES before repository clone/setup\n  // runs. Threaded OFF-MANIFEST — they ride ONLY the setup exec command prefix,\n  // NEVER the box/agent manifest env (validateNoEnvironmentDelta must never see\n  // rotating values).\n  gitTokenSeeds?: GitTokenSeeds;\n  gitCredentialBindings?: GitCredentialBindingSeed[];\n  toolspaceTokenSeed?: string;\n  toolspaceTokenFile?: string;\n  // M3: the rig setup descriptor for the rig-setup hook (the script + marker\n  // version id + the rig's own timeout). Present only on a rig-bound turn.\n  rigSetup?: RigSetupDescriptor;\n  commandRunner?: SandboxLifecycleCommandRunner;\n};\n\nasync function runSandboxLifecycleCommand(\n  session: SandboxSessionLike,\n  args: TurnSandboxCommandArgs,\n  commandRunner?: SandboxLifecycleCommandRunner,\n): Promise<unknown> {\n  if (commandRunner) {\n    return await commandRunner(session as TurnSandboxCommandSession, args);\n  }\n  if (session.exec) return await session.exec(args);\n  if (session.execCommand) return await session.execCommand(args);\n  throw new Error(\"Sandbox session does not support command execution\");\n}\n\n// M3: everything the rig-setup hook needs to run the frozen rig version's setup\n// script exactly once per box. `versionId` keys the idempotence marker\n// (/var/opengeni/rig-setup-<versionId>.done); `timeoutMs` is the rig-specific\n// budget (settings.rigSetupTimeoutMs), NOT the 120s lifecycle default; `rigName`\n// is for human-readable events/errors only.\nexport type RigSetupDescriptor = {\n  rigId: string;\n  versionId: string;\n  rigName: string;\n  script: string;\n  timeoutMs: number;\n};\n\nexport type SandboxLifecycleHook = {\n  id: string;\n  phase: SandboxLifecycleHookPhase;\n  shouldRun?: (context: SandboxLifecycleHookContext) => boolean;\n  run: (session: SandboxSessionLike, context: SandboxLifecycleHookContext) => Promise<void>;\n};\n\nconst builtInSandboxLifecycleHooks: Record<string, SandboxLifecycleHook> = {\n  \"azure-cli-login\": {\n    id: \"azure-cli-login\",\n    phase: \"beforeAgentStart\",\n    shouldRun: ({ environment }) => hasAzureServicePrincipal(environment),\n    run: runAzureCliLoginHook,\n  },\n};\n\nexport function sandboxLifecycleHooksForIds(ids: string[]): SandboxLifecycleHook[] {\n  return ids.map((id) => {\n    const hook = builtInSandboxLifecycleHooks[id];\n    if (!hook) {\n      throw new Error(`Unknown sandbox lifecycle hook ${id}`);\n    }\n    return hook;\n  });\n}\n\nfunction applicableBeforeAgentStartHooks(\n  hooks: SandboxLifecycleHook[],\n  context: SandboxLifecycleHookContext,\n): SandboxLifecycleHook[] {\n  return hooks.filter(\n    (hook) => hook.phase === \"beforeAgentStart\" && (hook.shouldRun?.(context) ?? true),\n  );\n}\n\n/**\n * Run the beforeAgentStart lifecycle hooks directly against an already-live box.\n *\n * The create/resume decoration (withSandboxLifecycleHooks) is structurally blind to\n * the PROVIDED-session path: when runStream hands the SDK a live `session`\n * (runOptions.sandbox.session — the lease-owned box resolved by the turn activity),\n * SandboxRuntimeManager uses it as-is and never calls client.create/resume, so a\n * wrapper around those methods never fires. Callers on that path invoke this\n * before starting the run so the box still gets its beforeAgentStart preparation\n * (repository clone + B1 askpass/token-file seed, azure-cli-login).\n */\nexport async function runBeforeAgentStartHooks(\n  session: SandboxSessionLike,\n  hooks: SandboxLifecycleHook[],\n  context: SandboxLifecycleHookContext,\n): Promise<void> {\n  for (const hook of applicableBeforeAgentStartHooks(hooks, context)) {\n    await hook.run(session, context);\n  }\n}\n\nexport function withSandboxLifecycleHooks(\n  client: SandboxClient,\n  hooks: SandboxLifecycleHook[],\n  context: SandboxLifecycleHookContext,\n): SandboxClient {\n  const beforeAgentStartHooks = applicableBeforeAgentStartHooks(hooks, context);\n  if (beforeAgentStartHooks.length === 0) {\n    return client;\n  }\n  const seen = new WeakSet<object>();\n  const wrapSession = async <T extends SandboxSessionLike>(session: T): Promise<T> => {\n    if (typeof session === \"object\" && session !== null && !seen.has(session)) {\n      for (const hook of beforeAgentStartHooks) {\n        await hook.run(session, context);\n      }\n      seen.add(session);\n    }\n    return session;\n  };\n  const wrapped: SandboxClient = {\n    backendId: client.backendId,\n    ...(client.supportsDefaultOptions !== undefined\n      ? { supportsDefaultOptions: client.supportsDefaultOptions }\n      : {}),\n    ...(client.create\n      ? {\n          create: async (...args: any[]) =>\n            await wrapSession(await (client.create as any)(...args)),\n        }\n      : {}),\n    ...(client.resume\n      ? {\n          resume: async (state: SandboxSessionState) =>\n            await wrapSession(await client.resume!(state)),\n        }\n      : {}),\n    ...(client.delete\n      ? {\n          delete: async (state: SandboxSessionState) => await client.delete!(state),\n        }\n      : {}),\n    ...(client.serializeSessionState\n      ? {\n          serializeSessionState: async (state: SandboxSessionState, options) =>\n            await client.serializeSessionState!(state, options),\n        }\n      : {}),\n    ...(client.canPersistOwnedSessionState\n      ? {\n          canPersistOwnedSessionState: async (state: SandboxSessionState) =>\n            await client.canPersistOwnedSessionState!(state),\n        }\n      : {}),\n    ...(client.canReusePreservedOwnedSession\n      ? {\n          canReusePreservedOwnedSession: async (state: SandboxSessionState) =>\n            await client.canReusePreservedOwnedSession!(state),\n        }\n      : {}),\n    ...(client.deserializeSessionState\n      ? {\n          deserializeSessionState: async (state: Record<string, unknown>) =>\n            await client.deserializeSessionState!(state),\n        }\n      : {}),\n  };\n  return wrapped;\n}\n\nfunction sandboxRepositoryCloneHooksForAgent(agent: Agent<any, any>): SandboxLifecycleHook[] {\n  return agentRepositoryCloneHooks.get(agent) ?? [];\n}\n\n// TOKEN-BROKER (B1): the per-turn git token seed stashed for this agent (undefined\n// when no repo is attached / on the selfhosted path). Read into the clone hook\n// context at runStream so the token is seeded off-manifest.\nfunction gitTokenSeedsForAgent(agent: Agent<any, any>): GitTokenSeeds | undefined {\n  return agentGitTokenSeeds.get(agent);\n}\n\nfunction gitCredentialBindingsForAgent(\n  agent: Agent<any, any>,\n): GitCredentialBindingSeed[] | undefined {\n  return agentGitCredentialBindings.get(agent);\n}\n\nfunction toolspaceTokenSeedForAgent(agent: Agent<any, any>): string | undefined {\n  return agentToolspaceTokenSeed.get(agent);\n}\n\nfunction toolspaceTokenSessionIdForAgent(agent: Agent<any, any>): string | undefined {\n  return agentToolspaceTokenSessionId.get(agent);\n}\n\nfunction toolspaceTokenFileForAgent(\n  agent: Agent<any, any>,\n  environment: Readonly<Record<string, string>>,\n): string | undefined {\n  if (!toolspaceTokenSeedForAgent(agent)) return undefined;\n  const sessionId = toolspaceTokenSessionIdForAgent(agent);\n  if (!sessionId) {\n    throw new Error(\"Toolspace token seed is missing its session identity\");\n  }\n  return toolspaceTokenFileFromEnvironment(environment, sessionId);\n}\n\nfunction sandboxToolspaceTokenHooksForAgent(agent: Agent<any, any>): SandboxLifecycleHook[] {\n  return toolspaceTokenSeedForAgent(agent)\n    ? [\n        {\n          id: \"toolspace-token\",\n          phase: \"beforeAgentStart\",\n          run: runToolspaceTokenSeedHook,\n        },\n      ]\n    : [];\n}\n\n// M3: the rig-setup hook for this agent (present only on a rig-bound turn whose\n// frozen version carries a non-empty setup script). It runs FIRST among the\n// owned beforeAgentStart hooks so any tooling it installs is available to the\n// repository-clone / credential hooks that follow. The descriptor is threaded\n// through the hook context (rigSetupHookContext) so runRigSetupHook reads it.\nfunction sandboxRigSetupHooksForAgent(agent: Agent<any, any>): SandboxLifecycleHook[] {\n  return agentRigSetup.get(agent)\n    ? [\n        {\n          id: \"rig-setup\",\n          phase: \"beforeAgentStart\",\n          run: runRigSetupHook,\n        },\n      ]\n    : [];\n}\n\nfunction rigSetupDescriptorForAgent(agent: Agent<any, any>): RigSetupDescriptor | undefined {\n  return agentRigSetup.get(agent);\n}\n\n// M3: the rig version's credential hooks (already resolved + validated at build\n// time). Unioned with the deployment preparation-profile hooks by the caller.\nfunction rigCredentialHooksForAgent(agent: Agent<any, any>): SandboxLifecycleHook[] {\n  return agentRigCredentialHooks.get(agent) ?? [];\n}\n\n// M3: union the deployment preparation-profile hooks with the rig version's\n// credential hooks, deduped by id (a hook named by BOTH the deployment profile\n// and the rig runs once). Deployment hooks keep their leading position.\nfunction unionCredentialHooks(\n  deploymentHooks: SandboxLifecycleHook[],\n  rigHooks: SandboxLifecycleHook[],\n): SandboxLifecycleHook[] {\n  if (rigHooks.length === 0) {\n    return deploymentHooks;\n  }\n  const seen = new Set(deploymentHooks.map((hook) => hook.id));\n  return [...deploymentHooks, ...rigHooks.filter((hook) => !seen.has(hook.id))];\n}\n\nfunction gitCredentialSessionRegistrationHooks(\n  callback: RunAgentStreamOptions[\"onGitCredentialSessionReady\"],\n): SandboxLifecycleHook[] {\n  return callback\n    ? [\n        {\n          id: \"git-credential-renewal-registration\",\n          phase: \"beforeAgentStart\",\n          run: async (session) => {\n            await callback(session);\n          },\n        },\n      ]\n    : [];\n}\n\nfunction toolspaceTokenSessionRegistrationHooks(\n  callback: RunAgentStreamOptions[\"onToolspaceTokenSessionReady\"],\n): SandboxLifecycleHook[] {\n  return callback\n    ? [\n        {\n          id: \"toolspace-token-renewal-registration\",\n          phase: \"beforeAgentStart\",\n          run: async (session) => {\n            await callback(session);\n          },\n        },\n      ]\n    : [];\n}\n\nfunction sandboxRepositoryCloneHooks(\n  settings: Settings,\n  resources: ResourceRef[],\n  activeSandboxBackend: Settings[\"sandboxBackend\"] = settings.sandboxBackend,\n): SandboxLifecycleHook[] {\n  const repositories = resources.filter(\n    (resource): resource is Extract<ResourceRef, { kind: \"repository\" }> =>\n      resource.kind === \"repository\" &&\n      repositoryUsesSandboxClone(settings, resource, activeSandboxBackend),\n  );\n  if (repositories.length === 0) {\n    return [];\n  }\n  return [\n    {\n      id: \"repository-clone\",\n      phase: \"beforeAgentStart\",\n      run: async (session, context) => {\n        await runRepositoryCloneHook(session, repositories, context);\n      },\n    },\n  ];\n}\n\n/**\n * Whether the platform should seed a repository resource by `git clone` inside\n * the sandbox before the agent starts.\n *\n * SAFETY GATE (selfhosted/bring-your-own machine): the clone hook writes into\n * `posixPath.join(\"/workspace\", mountPath)`, which a selfhosted agent rewrites\n * to a path under its REAL launch directory — so a platform-initiated clone\n * lands on the user's actual disk. A connected machine already owns its\n * filesystem; the platform must NEVER clone onto it. We therefore key the\n * decision off the EFFECTIVE/active backend, not just the session's HOME backend\n * (`settings.sandboxBackend`): a session can run on the cloud default while its\n * active sandbox has been swapped to a connected machine (active_sandbox_id → a\n * selfhosted lease), in which case the agent actually executes on the user's\n * machine even though the home backend is e.g. \"modal\". `activeSandboxBackend`\n * defaults to the home backend, so a session whose HOME backend is \"selfhosted\"\n * is gated with no caller change, and every cloud path is byte-for-byte\n * unchanged.\n */\nexport function repositoryUsesSandboxClone(\n  settings: Settings,\n  resource: Extract<ResourceRef, { kind: \"repository\" }>,\n  activeSandboxBackend: Settings[\"sandboxBackend\"] = settings.sandboxBackend,\n): boolean {\n  if (activeSandboxBackend === \"selfhosted\") {\n    return false;\n  }\n  return (\n    settings.sandboxBackend === \"modal\" ||\n    Boolean(resource.githubInstallationId && resource.githubRepositoryId) ||\n    Boolean(resource.provider)\n  );\n}\n\nconst GIT_CREDENTIAL_PROVIDERS = [\n  \"github\",\n  \"gitlab\",\n  \"azure_devops\",\n] as const satisfies readonly GitCredentialProvider[];\n\nfunction gitProviderSeedEnv(provider: GitCredentialProvider): string {\n  return `OPENGENI_GIT_${provider.toUpperCase()}_TOKEN_SEED`;\n}\n\nexport function gitCredentialBindingHash(credentialBindingId: string): string {\n  return createHash(\"sha256\").update(credentialBindingId, \"utf8\").digest(\"hex\").slice(0, 32);\n}\n\nfunction gitBindingSeedEnv(binding: GitCredentialBindingSeed): string {\n  return `OPENGENI_GIT_BINDING_${gitCredentialBindingHash(binding.credentialBindingId).toUpperCase()}_TOKEN_SEED`;\n}\n\nfunction gitCredentialBindingSeedExportPrefix(bindings: GitCredentialBindingSeed[]): string {\n  return bindings\n    .map((binding) => `export ${gitBindingSeedEnv(binding)}=${shellQuote(binding.token)}`)\n    .join(\"\\n\");\n}\n\nfunction gitTokenSeedExportPrefix(seeds: GitTokenSeeds): string {\n  const lines: string[] = [];\n  for (const provider of GIT_CREDENTIAL_PROVIDERS) {\n    const token = seeds[provider];\n    if (!token) {\n      continue;\n    }\n    lines.push(`export ${gitProviderSeedEnv(provider)}=${shellQuote(token)}`);\n    if (provider === \"github\") {\n      lines.push(`export OPENGENI_GIT_TOKEN_SEED=${shellQuote(token)}`);\n    }\n  }\n  return lines.join(\"\\n\");\n}\n\ntype RuntimeGitBindingDescriptor = {\n  provider: GitCredentialProvider;\n  credentialBindingId: string;\n  bindingHash: string;\n  protocol: string;\n  host: string;\n  path: string;\n  uri: string;\n  mountPath: string;\n};\n\ntype RuntimeGitHttpBrokerRouteDescriptor = {\n  provider: GitCredentialProvider;\n  credentialBindingId: string;\n  bindingHash: string;\n  repositoryUri: string;\n  brokerUri: string;\n  protocol: \"https\";\n  host: string;\n  path: string;\n};\n\nfunction runtimeGitBindingDescriptors(\n  resources: Extract<ResourceRef, { kind: \"repository\" }>[],\n): RuntimeGitBindingDescriptor[] {\n  const remoteBindings = new Map<string, string>();\n  const bindingProviders = new Map<string, GitCredentialProvider>();\n  return resources.map((resource) => {\n    const url = new URL(resource.uri);\n    const credentialProvider = gitCredentialProviderForRepository(resource);\n    // Provider-less public/legacy resources retain the historical GitHub\n    // askpass fallback, but credential-bound resources derive through the\n    // shared contracts helper used by the worker and core.\n    const provider = credentialProvider ?? \"github\";\n    const credentialBindingId =\n      gitCredentialBindingIdForRepository(resource, credentialProvider) ?? provider;\n    const path = url.pathname.replace(/^\\/+|\\/+$/g, \"\");\n    const remote = `${url.protocol.toLowerCase()}//${url.host.toLowerCase()}/${path.replace(/\\.git$/, \"\")}`;\n    const bindingKey = `${provider}\\u0000${credentialBindingId}`;\n    const boundProvider = bindingProviders.get(credentialBindingId);\n    if (boundProvider && boundProvider !== provider) {\n      throw new Error(\n        `credential binding ${credentialBindingId} is assigned to multiple Git providers`,\n      );\n    }\n    bindingProviders.set(credentialBindingId, provider);\n    const claimed = remoteBindings.get(remote);\n    if (claimed && claimed !== bindingKey) {\n      throw new Error(\n        `repository remote ${resource.uri} is claimed by multiple credential bindings`,\n      );\n    }\n    remoteBindings.set(remote, bindingKey);\n    return {\n      provider,\n      credentialBindingId,\n      bindingHash: gitCredentialBindingHash(credentialBindingId),\n      protocol: url.protocol.replace(/:$/, \"\").toLowerCase(),\n      host: url.host.toLowerCase(),\n      path,\n      uri: resource.uri,\n      mountPath: `/workspace/${resourceMountPath(resource)}`,\n    };\n  });\n}\n\nfunction gitCredentialBindingInventoryCommandLines(\n  resources: Extract<ResourceRef, { kind: \"repository\" }>[],\n  bindings: GitCredentialBindingSeed[],\n): string[] {\n  type GitBindingInventoryTransport = \"direct_token\" | \"git_http_broker\";\n  type GitBindingInventoryEntry = {\n    credentialBindingId: string;\n    provider: GitCredentialProvider;\n    transport: GitBindingInventoryTransport;\n    repositories: Array<{ uri: string; mountPath: string }>;\n  };\n  const bindingTransports = new Map<string, GitBindingInventoryTransport>(\n    bindings.map((binding) => [\n      gitCredentialBindingKey(binding.provider, binding.credentialBindingId),\n      binding.transport?.kind === \"http_broker\" ? \"git_http_broker\" : \"direct_token\",\n    ]),\n  );\n  const entries = new Map<string, GitBindingInventoryEntry>();\n  for (const descriptor of runtimeGitBindingDescriptors(resources)) {\n    const key = gitCredentialBindingKey(descriptor.provider, descriptor.credentialBindingId);\n    const transport = bindingTransports.get(key);\n    if (!transport) continue;\n    const entry: GitBindingInventoryEntry = entries.get(key) ?? {\n      credentialBindingId: descriptor.credentialBindingId,\n      provider: descriptor.provider,\n      transport,\n      repositories: [],\n    };\n    entry.repositories.push({ uri: descriptor.uri, mountPath: descriptor.mountPath });\n    entries.set(key, entry);\n  }\n  const inventory = `${JSON.stringify(\n    {\n      version: 1,\n      bindings: [...entries.values()],\n    },\n    null,\n    2,\n  )}\\n`;\n  return [\n    'git_binding_inventory=\"${OPENGENI_GIT_BINDINGS_FILE:-$HOME/.opengeni/git-bindings.json}\"',\n    'mkdir -p \"$(dirname \"$git_binding_inventory\")\"',\n    'inventory_umask=\"$(umask)\"',\n    \"umask 077\",\n    `printf '%s' ${shellQuote(inventory)} > \"$git_binding_inventory.tmp.$$\"`,\n    'mv -f \"$git_binding_inventory.tmp.$$\" \"$git_binding_inventory\"',\n    'umask \"$inventory_umask\"',\n  ];\n}\n\nfunction gitCredentialBindingKey(\n  provider: GitCredentialProvider,\n  credentialBindingId: string,\n): string {\n  return `${provider}\\u0000${credentialBindingId}`;\n}\n\nfunction brokeredGitCredentialBindingKeys(\n  bindings: GitCredentialBindingSeed[],\n): ReadonlySet<string> {\n  return new Set(\n    bindings\n      .filter((binding) => binding.transport?.kind === \"http_broker\")\n      .map((binding) => gitCredentialBindingKey(binding.provider, binding.credentialBindingId)),\n  );\n}\n\nfunction runtimeGitHttpBrokerRouteDescriptors(\n  resources: Extract<ResourceRef, { kind: \"repository\" }>[],\n  bindings: GitCredentialBindingSeed[],\n): RuntimeGitHttpBrokerRouteDescriptor[] {\n  const resourceDescriptors = runtimeGitBindingDescriptors(resources);\n  const byBindingAndUri = new Map<string, RuntimeGitBindingDescriptor>();\n  for (const descriptor of resourceDescriptors) {\n    byBindingAndUri.set(\n      `${gitCredentialBindingKey(descriptor.provider, descriptor.credentialBindingId)}\\u0000${descriptor.uri}`,\n      descriptor,\n    );\n  }\n\n  const routes: RuntimeGitHttpBrokerRouteDescriptor[] = [];\n  const claimedRepositoryUris = new Set<string>();\n  const claimedBrokerUris = new Set<string>();\n  for (const binding of bindings) {\n    if (!binding.transport) continue;\n    if (\n      typeof binding.transport !== \"object\" ||\n      binding.transport.kind !== \"http_broker\" ||\n      !Array.isArray(binding.transport.repositories)\n    ) {\n      throw new Error(\n        `Git credential binding ${binding.credentialBindingId} uses an unsupported transport`,\n      );\n    }\n    const bindingKey = gitCredentialBindingKey(binding.provider, binding.credentialBindingId);\n    const expected = resourceDescriptors.filter(\n      (descriptor) =>\n        gitCredentialBindingKey(descriptor.provider, descriptor.credentialBindingId) === bindingKey,\n    );\n    if (expected.length === 0 || binding.transport.repositories.length !== expected.length) {\n      throw new Error(\n        `Git HTTP broker binding ${binding.credentialBindingId} does not cover its exact repository set`,\n      );\n    }\n    for (const route of binding.transport.repositories) {\n      if (\n        !route ||\n        typeof route !== \"object\" ||\n        typeof route.repositoryUri !== \"string\" ||\n        typeof route.brokerUri !== \"string\"\n      ) {\n        throw new Error(\n          `Git HTTP broker binding ${binding.credentialBindingId} contains an invalid repository route`,\n        );\n      }\n      const descriptor = byBindingAndUri.get(`${bindingKey}\\u0000${route.repositoryUri}`);\n      if (!descriptor || claimedRepositoryUris.has(route.repositoryUri)) {\n        throw new Error(\n          `Git HTTP broker binding ${binding.credentialBindingId} contains an unexpected repository route`,\n        );\n      }\n      let brokerUrl: URL;\n      try {\n        brokerUrl = new URL(route.brokerUri);\n      } catch {\n        throw new Error(\n          `Git HTTP broker binding ${binding.credentialBindingId} contains an invalid broker URI`,\n        );\n      }\n      if (\n        brokerUrl.protocol !== \"https:\" ||\n        brokerUrl.username ||\n        brokerUrl.password ||\n        brokerUrl.search ||\n        brokerUrl.hash ||\n        brokerUrl.href !== route.brokerUri ||\n        claimedBrokerUris.has(brokerUrl.href)\n      ) {\n        throw new Error(\n          `Git HTTP broker binding ${binding.credentialBindingId} contains an unsafe broker URI`,\n        );\n      }\n      claimedRepositoryUris.add(route.repositoryUri);\n      claimedBrokerUris.add(brokerUrl.href);\n      routes.push({\n        provider: binding.provider,\n        credentialBindingId: binding.credentialBindingId,\n        bindingHash: gitCredentialBindingHash(binding.credentialBindingId),\n        repositoryUri: route.repositoryUri,\n        brokerUri: route.brokerUri,\n        protocol: \"https\",\n        host: brokerUrl.host.toLowerCase(),\n        path: brokerUrl.pathname.replace(/^\\/+|\\/+$/g, \"\"),\n      });\n    }\n  }\n  return routes;\n}\n\nfunction gitUsernameForProvider(provider: GitCredentialProvider): string {\n  if (provider === \"github\") return \"x-access-token\";\n  if (provider === \"gitlab\") return \"oauth2\";\n  return \"opengeni\";\n}\n\nfunction gitCredentialHelperBindingCaseLines(\n  resources: Extract<ResourceRef, { kind: \"repository\" }>[],\n  bindings: GitCredentialBindingSeed[],\n): string[] {\n  const brokeredBindings = brokeredGitCredentialBindingKeys(bindings);\n  return runtimeGitBindingDescriptors(resources)\n    .filter(\n      (descriptor) =>\n        !brokeredBindings.has(\n          gitCredentialBindingKey(descriptor.provider, descriptor.credentialBindingId),\n        ),\n    )\n    .flatMap((descriptor) => {\n      const paths = new Set([\n        descriptor.path,\n        descriptor.path.replace(/\\.git$/, \"\"),\n        `${descriptor.path.replace(/\\.git$/, \"\")}.git`,\n      ]);\n      return [...paths].map(\n        (path) =>\n          `  ${shellQuote(`${descriptor.protocol}|${descriptor.host}|${path}`)}) username=${shellQuote(gitUsernameForProvider(descriptor.provider))}; token_file=\"$credential_dir/${descriptor.bindingHash}-token\" ;;`,\n      );\n    });\n}\n\nfunction gitCredentialHelperBrokerCaseLines(\n  routes: RuntimeGitHttpBrokerRouteDescriptor[],\n): string[] {\n  return routes.flatMap((route) => {\n    const paths = new Set([\n      route.path,\n      route.path.replace(/\\.git$/, \"\"),\n      `${route.path.replace(/\\.git$/, \"\")}.git`,\n    ]);\n    return [...paths].map(\n      (path) =>\n        `  ${shellQuote(`${route.protocol}|${route.host}|${path}`)}) username=opengeni; token_file=\"$credential_dir/${route.bindingHash}-token\" ;;`,\n    );\n  });\n}\n\nfunction gitAskpassHostProviderCaseLines(\n  resources: Extract<ResourceRef, { kind: \"repository\" }>[],\n  brokerRoutes: RuntimeGitHttpBrokerRouteDescriptor[],\n): string[] {\n  const hosts = new Map<string, { provider: GitCredentialProvider; bindings: Set<string> }>();\n  for (const descriptor of runtimeGitBindingDescriptors(resources)) {\n    const entry = hosts.get(descriptor.host) ?? {\n      provider: descriptor.provider,\n      bindings: new Set<string>(),\n    };\n    entry.bindings.add(`${descriptor.provider}\\u0000${descriptor.credentialBindingId}`);\n    hosts.set(descriptor.host, entry);\n  }\n  const brokerHosts = [...new Set(brokerRoutes.map((route) => route.host))]\n    .sort((a, b) => a.localeCompare(b))\n    .map((hostname) => `    ${shellQuote(hostname)}) printf '\\\\n'; return 0 ;;`);\n  return [\n    ...brokerHosts,\n    ...[...hosts.entries()]\n      .filter(([, entry]) => entry.bindings.size === 1)\n      .sort(([a], [b]) => a.localeCompare(b))\n      .map(\n        ([hostname, entry]) =>\n          `    ${shellQuote(hostname)}) printf '%s\\\\n' ${entry.provider}; return 0 ;;`,\n      ),\n  ];\n}\n\nfunction gitCredentialTokenWriterCommandLines(bindings: GitCredentialBindingSeed[] = []): string[] {\n  const bindingWrites = bindings.flatMap((binding) => {\n    const hash = gitCredentialBindingHash(binding.credentialBindingId);\n    const seedEnv = gitBindingSeedEnv(binding);\n    const count = Math.max(1, binding.providerBindingCount ?? 1);\n    const provider = binding.provider;\n    const lines = [`write_git_binding_token ${shellQuote(hash)} \"\\${${seedEnv}:-}\"`];\n    if (count === 1 && binding.transport?.kind !== \"http_broker\") {\n      lines.push(`write_git_provider_token ${shellQuote(provider)} \"\\${${seedEnv}:-}\"`);\n    } else {\n      lines.push(`remove_git_provider_token ${shellQuote(provider)}`);\n    }\n    return lines;\n  });\n  return [\n    // TOKEN-BROKER (B1/B2): seed run-scoped provider tokens into stable files and\n    // atomically replace each provider file. Token VALUES are supplied only by\n    // the per-exec command prefix\n    // (OPENGENI_GIT_*_TOKEN_SEED), never by the box/agent manifest. Helper paths\n    // are stable manifest values from @opengeni/config.\n    \"git_provider_token_file() {\",\n    '  provider=\"$1\"',\n    '  case \"$provider\" in',\n    \"    github) printf '%s\\\\n' \\\"${OPENGENI_GIT_TOKEN_FILE:-$HOME/.opengeni/git-token}\\\" ;;\",\n    \"    *) printf '%s\\\\n' \\\"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}/$provider-token\\\" ;;\",\n    \"  esac\",\n    \"}\",\n    \"write_git_binding_token() {\",\n    '  binding_hash=\"$1\"',\n    '  token=\"$2\"',\n    '  [ -n \"$token\" ] || return 0',\n    '  credential_dir=\"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}\"',\n    '  mkdir -p \"$credential_dir\"',\n    '  token_file=\"$credential_dir/$binding_hash-token\"',\n    '  printf \\'%s\\' \"$token\" > \"$token_file.tmp.$$\"',\n    '  mv -f \"$token_file.tmp.$$\" \"$token_file\"',\n    \"}\",\n    \"remove_git_provider_token() {\",\n    '  provider=\"$1\"',\n    '  rm -f \"$(git_provider_token_file \"$provider\")\"',\n    '  if [ \"$provider\" = github ]; then',\n    '    rm -f \"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}/github-token\"',\n    \"  fi\",\n    \"}\",\n    \"write_git_provider_token() {\",\n    '  provider=\"$1\"',\n    '  token=\"$2\"',\n    '  [ -n \"$token\" ] || return 0',\n    '  token_file=\"$(git_provider_token_file \"$provider\")\"',\n    '  mkdir -p \"$(dirname \"$token_file\")\"',\n    '  printf \\'%s\\' \"$token\" > \"$token_file.tmp.$$\"',\n    '  mv -f \"$token_file.tmp.$$\" \"$token_file\"',\n    '  if [ \"$provider\" = github ]; then',\n    '    credential_dir=\"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}\"',\n    '    mkdir -p \"$credential_dir\"',\n    '    printf \\'%s\\' \"$token\" > \"$credential_dir/github-token.tmp.$$\"',\n    '    mv -f \"$credential_dir/github-token.tmp.$$\" \"$credential_dir/github-token\"',\n    \"  fi\",\n    \"}\",\n    'seed_umask=\"$(umask)\"',\n    \"umask 077\",\n    'write_git_provider_token github \"${OPENGENI_GIT_GITHUB_TOKEN_SEED:-${OPENGENI_GIT_TOKEN_SEED:-}}\"',\n    'write_git_provider_token gitlab \"${OPENGENI_GIT_GITLAB_TOKEN_SEED:-}\"',\n    'write_git_provider_token azure_devops \"${OPENGENI_GIT_AZURE_DEVOPS_TOKEN_SEED:-}\"',\n    ...bindingWrites,\n    'umask \"$seed_umask\"',\n  ];\n}\n\nfunction gitHttpBrokerConfigCommandLines(routes: RuntimeGitHttpBrokerRouteDescriptor[]): string[] {\n  return [\n    'git_http_broker_config=\"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}/http-broker.gitconfig\"',\n    'mkdir -p \"$(dirname \"$git_http_broker_config\")\"',\n    'broker_umask=\"$(umask)\"',\n    \"umask 077\",\n    ': > \"$git_http_broker_config.tmp.$$\"',\n    ...routes.map(\n      (route) =>\n        `git config --file \"$git_http_broker_config.tmp.$$\" --add ${shellQuote(`url.${route.brokerUri}.insteadOf`)} ${shellQuote(route.repositoryUri)}`,\n    ),\n    'mv -f \"$git_http_broker_config.tmp.$$\" \"$git_http_broker_config\"',\n    'umask \"$broker_umask\"',\n    'git config --global --unset-all include.path \"$git_http_broker_config\" >/dev/null 2>&1 || true',\n    'git config --global --add include.path \"$git_http_broker_config\"',\n  ];\n}\n\nfunction gitCredentialHelperCommandLines(\n  resources: Extract<ResourceRef, { kind: \"repository\" }>[] = [],\n  bindings: GitCredentialBindingSeed[] = [],\n): string[] {\n  const brokerRoutes = runtimeGitHttpBrokerRouteDescriptors(resources, bindings);\n  const hostProviderCases = gitAskpassHostProviderCaseLines(resources, brokerRoutes);\n  const bindingCases = [\n    ...gitCredentialHelperBindingCaseLines(resources, bindings),\n    ...gitCredentialHelperBrokerCaseLines(brokerRoutes),\n  ];\n  const descriptors = runtimeGitBindingDescriptors(resources);\n  const brokeredBindings = brokeredGitCredentialBindingKeys(bindings);\n  const wrapperDescriptors =\n    bindings.length > 0\n      ? descriptors.filter(\n          (descriptor) =>\n            !brokeredBindings.has(\n              gitCredentialBindingKey(descriptor.provider, descriptor.credentialBindingId),\n            ),\n        )\n      : [];\n  const bindingProviders = new Map<GitCredentialProvider, Set<string>>();\n  for (const descriptor of runtimeGitBindingDescriptors(resources)) {\n    const ids = bindingProviders.get(descriptor.provider) ?? new Set<string>();\n    ids.add(descriptor.credentialBindingId);\n    bindingProviders.set(descriptor.provider, ids);\n  }\n  const strictAskpass = [...bindingProviders.values()].some((ids) => ids.size > 1);\n  const allowedWrapperHashes = [\n    ...new Set(wrapperDescriptors.map((item) => `${item.provider}|${item.bindingHash}`)),\n  ].map((key) => `    ${shellQuote(key)}) return 0 ;;`);\n  const originWrapperHashes = wrapperDescriptors.flatMap((item) => {\n    const base = item.uri.replace(/\\.git$/, \"\");\n    return [...new Set([item.uri, base, `${base}.git`])].map(\n      (uri) =>\n        `    ${shellQuote(`${item.provider}|${uri}`)}) printf '%s\\\\n' ${shellQuote(item.bindingHash)}; return 0 ;;`,\n    );\n  });\n  const soleWrapperHashes = [...bindingProviders.entries()].flatMap(([provider, ids]) => {\n    if (ids.size !== 1) return [];\n    const descriptor = wrapperDescriptors.find((item) => item.provider === provider);\n    return descriptor\n      ? [\n          `    ${shellQuote(provider)}) printf '%s\\\\n' ${shellQuote(descriptor.bindingHash)}; return 0 ;;`,\n        ]\n      : [];\n  });\n  const multiWrapperProviders =\n    bindings.length > 0\n      ? [...bindingProviders.entries()]\n          .filter(([, ids]) => ids.size > 1)\n          .map(([provider]) => provider)\n      : [];\n  const brokeredOriginCases = brokerRoutes.flatMap((route) => {\n    const base = route.repositoryUri.replace(/\\.git$/, \"\");\n    return [...new Set([route.repositoryUri, base, `${base}.git`])].map(\n      (uri) => `    ${shellQuote(`${route.provider}|${uri}`)}) return 0 ;;`,\n    );\n  });\n  const brokeredBindingHashCases = bindings\n    .filter((binding) => binding.transport?.kind === \"http_broker\")\n    .map(\n      (binding) =>\n        `    ${shellQuote(`${binding.provider}|${gitCredentialBindingHash(binding.credentialBindingId)}`)}) return 0 ;;`,\n    );\n  const providerBindingKinds = new Map<\n    GitCredentialProvider,\n    { direct: number; brokered: number }\n  >();\n  for (const binding of bindings) {\n    const counts = providerBindingKinds.get(binding.provider) ?? { direct: 0, brokered: 0 };\n    if (binding.transport?.kind === \"http_broker\") counts.brokered += 1;\n    else counts.direct += 1;\n    providerBindingKinds.set(binding.provider, counts);\n  }\n  const brokerOnlyProviders = [...providerBindingKinds.entries()]\n    .filter(([, counts]) => counts.brokered > 0 && counts.direct === 0)\n    .map(([provider]) => provider);\n  return [\n    ...gitCredentialTokenWriterCommandLines(bindings),\n    ...gitCredentialBindingInventoryCommandLines(resources, bindings),\n    // Provision git/provider-CLI helpers at SETUP (runtime) before any clone\n    // runs. Renewal updates only token files and deliberately leaves these\n    // repository-specific host mappings intact.\n    'git_askpass=\"${GIT_ASKPASS:-$HOME/.opengeni/askpass}\"',\n    'mkdir -p \"$(dirname \"$git_askpass\")\"',\n    \"cat > \\\"$git_askpass.tmp.$$\\\" <<'ASKPASS_EOF'\",\n    \"#!/usr/bin/env sh\",\n    \"prompt_host() {\",\n    \"  prompt_lower=\\\"$(printf '%s\\\\n' \\\"$1\\\" | tr '[:upper:]' '[:lower:]')\\\"\",\n    '  case \"$prompt_lower\" in',\n    \"    *://*) ;;\",\n    \"    *) printf '\\\\n'; return 0 ;;\",\n    \"  esac\",\n    '  rest=\"${prompt_lower#*://}\"',\n    '  rest=\"${rest#*@}\"',\n    '  host=\"${rest%%/*}\"',\n    '  host=\"$(printf \\'%s\\\\n\\' \"$host\" | tr -d \"\\'\")\"',\n    '  host=\"${host%:}\"',\n    \"  printf '%s\\\\n' \\\"$host\\\"\",\n    \"}\",\n    \"provider_for_prompt() {\",\n    '  host=\"$(prompt_host \"$1\")\"',\n    '  case \"$host\" in',\n    ...(hostProviderCases.length > 0 ? hostProviderCases : ['    \"\") : ;;']),\n    \"  esac\",\n    \"  case \\\"$(printf '%s\\\\n' \\\"$1\\\" | tr '[:upper:]' '[:lower:]')\\\" in\",\n    \"    *github.com*|*githubusercontent.com*) printf '%s\\\\n' github ;;\",\n    \"    *gitlab*) printf '%s\\\\n' gitlab ;;\",\n    \"    *dev.azure.com*|*.visualstudio.com*) printf '%s\\\\n' azure_devops ;;\",\n    strictAskpass ? \"    *) printf '\\\\n' ;;\" : \"    *) printf '%s\\\\n' github ;;\",\n    \"  esac\",\n    \"}\",\n    \"token_file_for_provider() {\",\n    '  case \"$1\" in',\n    \"    github) printf '%s\\\\n' \\\"${OPENGENI_GIT_TOKEN_FILE:-$HOME/.opengeni/git-token}\\\" ;;\",\n    \"    *) printf '%s\\\\n' \\\"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}/$1-token\\\" ;;\",\n    \"  esac\",\n    \"}\",\n    \"username_for_provider() {\",\n    '  case \"$1\" in',\n    \"    github) printf '%s\\\\n' \\\"x-access-token\\\" ;;\",\n    \"    gitlab) printf '%s\\\\n' \\\"oauth2\\\" ;;\",\n    \"    azure_devops) printf '%s\\\\n' \\\"opengeni\\\" ;;\",\n    \"    *) printf '\\\\n' ;;\",\n    \"  esac\",\n    \"}\",\n    'provider=\"$(provider_for_prompt \"$1\")\"',\n    'case \"$1\" in',\n    '  *Username*) username_for_provider \"$provider\" ;;',\n    '  *Password*) cat \"$(token_file_for_provider \"$provider\")\" 2>/dev/null || printf \\'\\\\n\\' ;;',\n    \"  *) printf '\\\\n' ;;\",\n    \"esac\",\n    \"ASKPASS_EOF\",\n    'chmod 0755 \"$git_askpass.tmp.$$\"',\n    'mv -f \"$git_askpass.tmp.$$\" \"$git_askpass\"',\n    'git_credential_helper=\"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}/helper\"',\n    'mkdir -p \"$(dirname \"$git_credential_helper\")\"',\n    \"cat > \\\"$git_credential_helper.tmp.$$\\\" <<'GIT_CREDENTIAL_HELPER_EOF'\",\n    \"#!/usr/bin/env sh\",\n    \"set -eu\",\n    '[ \"${1:-get}\" = get ] || exit 0',\n    \"protocol= host= path=\",\n    \"while IFS='=' read -r key value; do\",\n    '  case \"$key\" in',\n    \"    protocol) protocol=\\\"$(printf '%s' \\\"$value\\\" | tr '[:upper:]' '[:lower:]')\\\" ;;\",\n    \"    host) host=\\\"$(printf '%s' \\\"$value\\\" | tr '[:upper:]' '[:lower:]')\\\" ;;\",\n    '    path) path=\"${value#/}\" ;;',\n    \"  esac\",\n    \"done\",\n    'credential_dir=\"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}\"',\n    \"username= token_file=\",\n    'case \"$protocol|$host|$path\" in',\n    ...bindingCases,\n    \"  *) exit 0 ;;\",\n    \"esac\",\n    '[ -r \"$token_file\" ] || exit 0',\n    'password=\"$(cat \"$token_file\" 2>/dev/null || true)\"',\n    '[ -n \"$password\" ] || exit 0',\n    'printf \\'username=%s\\\\npassword=%s\\\\n\\' \"$username\" \"$password\"',\n    \"GIT_CREDENTIAL_HELPER_EOF\",\n    'chmod 0755 \"$git_credential_helper.tmp.$$\"',\n    'mv -f \"$git_credential_helper.tmp.$$\" \"$git_credential_helper\"',\n    // Empty helper resets lower-priority/system helpers; our exact path-aware\n    // helper returns no credential for an unbound remote, so multi-binding\n    // sessions fail closed instead of falling through to ambient credentials.\n    \"git config --global --unset-all credential.helper >/dev/null 2>&1 || true\",\n    \"git config --global --add credential.helper ''\",\n    'git config --global --add credential.helper \"$git_credential_helper\"',\n    \"git config --global credential.useHttpPath true\",\n    ...gitHttpBrokerConfigCommandLines(brokerRoutes),\n    'wrapper_dir=\"${OPENGENI_GIT_CLI_WRAPPER_DIR:-$HOME/.opengeni/bin}\"',\n    'mkdir -p \"$wrapper_dir\"',\n    \"for opengeni_git_cli_tool in gh glab az; do\",\n    '  wrapper=\"$wrapper_dir/$opengeni_git_cli_tool\"',\n    \"  cat > \\\"$wrapper.tmp.$$\\\" <<'CLI_WRAPPER_EOF'\",\n    \"#!/usr/bin/env sh\",\n    \"set -eu\",\n    'tool=\"${0##*/}\"',\n    'case \"$tool\" in',\n    \"  gh) provider=github; token_env=GH_TOKEN ;;\",\n    \"  glab) provider=gitlab; token_env=GITLAB_TOKEN ;;\",\n    \"  az) provider=azure_devops; token_env=AZURE_DEVOPS_EXT_PAT ;;\",\n    \"  *) provider=; token_env= ;;\",\n    \"esac\",\n    \"hash_binding_id() {\",\n    \"  if command -v sha256sum >/dev/null 2>&1; then printf '%s' \\\"$1\\\" | sha256sum | cut -c1-32; return; fi\",\n    \"  if command -v shasum >/dev/null 2>&1; then printf '%s' \\\"$1\\\" | shasum -a 256 | cut -c1-32; return; fi\",\n    \"  if command -v openssl >/dev/null 2>&1; then printf '%s' \\\"$1\\\" | openssl dgst -sha256 | sed 's/^.*= //' | cut -c1-32; return; fi\",\n    \"  printf '%s\\\\n' 'No SHA-256 utility is available to select OPENGENI_GIT_BINDING' >&2\",\n    \"  return 127\",\n    \"}\",\n    \"binding_hash_allowed() {\",\n    '  case \"$provider|$1\" in',\n    ...allowedWrapperHashes,\n    \"    *) return 1 ;;\",\n    \"  esac\",\n    \"}\",\n    \"binding_hash_is_brokered() {\",\n    '  case \"$provider|$1\" in',\n    ...brokeredBindingHashCases,\n    \"    *) return 1 ;;\",\n    \"  esac\",\n    \"}\",\n    \"binding_hash_for_origin() {\",\n    '  case \"$provider|$1\" in',\n    ...originWrapperHashes,\n    \"    *) return 1 ;;\",\n    \"  esac\",\n    \"}\",\n    \"origin_is_brokered() {\",\n    '  case \"$provider|$1\" in',\n    ...brokeredOriginCases,\n    \"    *) return 1 ;;\",\n    \"  esac\",\n    \"}\",\n    \"sole_binding_hash() {\",\n    '  case \"$provider\" in',\n    ...soleWrapperHashes,\n    \"    *) return 1 ;;\",\n    \"  esac\",\n    \"}\",\n    `multi_binding_providers=${shellQuote(multiWrapperProviders.join(\" \"))}`,\n    `broker_only_providers=${shellQuote(brokerOnlyProviders.join(\" \"))}`,\n    'if [ -n \"$provider\" ]; then',\n    \"  binding_hash=\",\n    '  if [ -n \"${OPENGENI_GIT_BINDING:-}\" ]; then',\n    '    binding_hash=\"$(hash_binding_id \"$OPENGENI_GIT_BINDING\")\"',\n    '    binding_hash_is_brokered \"$binding_hash\" && { printf \\'%s\\\\n\\' \"$tool provider API authentication is host-brokered for OPENGENI_GIT_BINDING; use the configured provider MCP tools\" >&2; exit 2; }',\n    '    binding_hash_allowed \"$binding_hash\" || { printf \\'%s\\\\n\\' \"OPENGENI_GIT_BINDING does not select a $provider credential attached to this session\" >&2; exit 2; }',\n    \"  elif command -v git >/dev/null 2>&1; then\",\n    '    origin=\"$(git config --get remote.origin.url 2>/dev/null || true)\"',\n    '    [ -z \"$origin\" ] || ! origin_is_brokered \"$origin\" || { printf \\'%s\\\\n\\' \"$tool provider API authentication is host-brokered for this repository; use the configured provider MCP tools\" >&2; exit 2; }',\n    '    [ -z \"$origin\" ] || binding_hash=\"$(binding_hash_for_origin \"$origin\" 2>/dev/null || true)\"',\n    \"  fi\",\n    '  [ -n \"$binding_hash\" ] || binding_hash=\"$(sole_binding_hash 2>/dev/null || true)\"',\n    '  if [ -n \"$binding_hash\" ]; then',\n    '    token_file=\"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}/$binding_hash-token\"',\n    \"  else\",\n    '    case \" $broker_only_providers \" in',\n    '      *\" $provider \"*) printf \\'%s\\\\n\\' \"$tool provider API authentication is host-brokered for this session; use the configured provider MCP tools\" >&2; exit 2 ;;',\n    \"    esac\",\n    '    case \" $multi_binding_providers \" in',\n    '      *\" $provider \"*) printf \\'%s\\\\n\\' \"Unable to select one of multiple $provider credentials; run inside an attached repository, or inspect ${OPENGENI_GIT_BINDINGS_FILE:-$HOME/.opengeni/git-bindings.json} and set OPENGENI_GIT_BINDING\" >&2; exit 2 ;;',\n    \"    esac\",\n    '    case \"$provider\" in',\n    '      github) token_file=\"${OPENGENI_GIT_TOKEN_FILE:-$HOME/.opengeni/git-token}\" ;;',\n    '      *) token_file=\"${OPENGENI_GIT_CREDENTIALS_DIR:-$HOME/.opengeni/git-credentials}/$provider-token\" ;;',\n    \"    esac\",\n    \"  fi\",\n    '  if [ -f \"$token_file\" ]; then',\n    '    token=\"$(cat \"$token_file\" 2>/dev/null || true)\"',\n    '    if [ -n \"$token\" ]; then',\n    '      case \"$token_env\" in',\n    '        GH_TOKEN) export GH_TOKEN=\"$token\" ;;',\n    '        GITLAB_TOKEN) export GITLAB_TOKEN=\"$token\" ;;',\n    '        AZURE_DEVOPS_EXT_PAT) export AZURE_DEVOPS_EXT_PAT=\"$token\" ;;',\n    \"      esac\",\n    \"    fi\",\n    \"  fi\",\n    \"fi\",\n    'self_real=\"$(readlink -f \"$0\" 2>/dev/null || printf \\'%s\\\\n\\' \"$0\")\"',\n    'old_ifs=\"$IFS\"',\n    \"IFS=:\",\n    \"for dir in $PATH; do\",\n    '  [ -n \"$dir\" ] || dir=.',\n    '  candidate=\"$dir/$tool\"',\n    '  [ -x \"$candidate\" ] || continue',\n    '  candidate_real=\"$(readlink -f \"$candidate\" 2>/dev/null || printf \\'%s\\\\n\\' \"$candidate\")\"',\n    '  [ \"$candidate_real\" = \"$self_real\" ] && continue',\n    '  IFS=\"$old_ifs\"',\n    '  exec \"$candidate\" \"$@\"',\n    \"done\",\n    'IFS=\"$old_ifs\"',\n    \"printf '%s\\\\n' \\\"$tool: real command not found on PATH\\\" >&2\",\n    \"exit 127\",\n    \"CLI_WRAPPER_EOF\",\n    '  chmod 0755 \"$wrapper.tmp.$$\"',\n    '  mv -f \"$wrapper.tmp.$$\" \"$wrapper\"',\n    \"done\",\n  ];\n}\n\n/**\n * Build the off-manifest command used to atomically replace provider token files.\n *\n * Token values exist only in this one sandbox exec command. The stable askpass\n * and provider-CLI wrappers always read the files at invocation time, so an\n * in-flight multi-day turn observes the replacement without changing its\n * manifest environment or rebuilding the sandbox.\n */\nexport function gitProviderTokenRefreshCommand(seeds: GitTokenSeeds): string {\n  const seedPrefix = gitTokenSeedExportPrefix(seeds);\n  if (!seedPrefix) {\n    return \"\";\n  }\n  return [\n    \"set +x\",\n    seedPrefix,\n    \"set -eu\",\n    'export HOME=\"${HOME:-/workspace}\"',\n    ...gitCredentialTokenWriterCommandLines(),\n  ].join(\"\\n\");\n}\n\nexport function gitCredentialBindingTokenRefreshCommand(\n  bindings: GitCredentialBindingSeed[],\n): string {\n  const seedPrefix = gitCredentialBindingSeedExportPrefix(bindings);\n  if (!seedPrefix) return \"\";\n  return [\n    \"set +x\",\n    seedPrefix,\n    \"set -eu\",\n    'export HOME=\"${HOME:-/workspace}\"',\n    ...gitCredentialTokenWriterCommandLines(bindings),\n  ].join(\"\\n\");\n}\n\nexport async function refreshGitProviderTokenFiles(\n  session: GitCredentialTokenWriterSession,\n  seeds: GitTokenSeeds,\n  options: { runAs?: string; commandRunner?: SandboxLifecycleCommandRunner } = {},\n): Promise<void> {\n  const command = gitProviderTokenRefreshCommand(seeds);\n  if (!command) {\n    return;\n  }\n  const args = {\n    cmd: command,\n    workdir: \"/workspace\",\n    ...(options.runAs ? { runAs: options.runAs } : {}),\n    yieldTimeMs: SANDBOX_LIFECYCLE_COMMAND_TIMEOUT_MS,\n    maxOutputTokens: 4_000,\n  };\n  assertSandboxCommandSucceeded(\n    await runSandboxLifecycleCommand(session, args, options.commandRunner),\n    \"Git credential refresh\",\n  );\n}\n\nexport async function refreshGitCredentialBindingTokenFiles(\n  session: GitCredentialTokenWriterSession,\n  bindings: GitCredentialBindingSeed[],\n  options: { runAs?: string; commandRunner?: SandboxLifecycleCommandRunner } = {},\n): Promise<void> {\n  const command = gitCredentialBindingTokenRefreshCommand(bindings);\n  if (!command) return;\n  const args = {\n    cmd: command,\n    workdir: \"/workspace\",\n    ...(options.runAs ? { runAs: options.runAs } : {}),\n    yieldTimeMs: SANDBOX_LIFECYCLE_COMMAND_TIMEOUT_MS,\n    maxOutputTokens: 4_000,\n  };\n  assertSandboxCommandSucceeded(\n    await runSandboxLifecycleCommand(session, args, options.commandRunner),\n    \"Git credential binding refresh\",\n  );\n}\n\nexport function repositoryCloneCommand(\n  resources: Extract<ResourceRef, { kind: \"repository\" }>[],\n  bindings: GitCredentialBindingSeed[] = [],\n): string {\n  assertUniqueResourceMountPaths(resources);\n  const commands = [\n    \"set +x\",\n    \"set -eu\",\n    'export HOME=\"${HOME:-/workspace}\"',\n    'export GIT_TERMINAL_PROMPT=\"${GIT_TERMINAL_PROMPT:-0}\"',\n    \"ensure_git() {\",\n    \"  if command -v git >/dev/null 2>&1; then\",\n    \"    return 0\",\n    \"  fi\",\n    \"  if command -v apt-get >/dev/null 2>&1; then\",\n    \"    export DEBIAN_FRONTEND=noninteractive\",\n    \"    apt-get update >/dev/null\",\n    \"    apt-get install -y --no-install-recommends ca-certificates git >/dev/null\",\n    \"    rm -rf /var/lib/apt/lists/*\",\n    \"    command -v git >/dev/null 2>&1 && return 0\",\n    \"  fi\",\n    '  echo \"git is not installed in the sandbox and could not be bootstrapped\" >&2',\n    \"  exit 127\",\n    \"}\",\n    \"ensure_git\",\n    ...gitCredentialHelperCommandLines(resources, bindings),\n    \"clone_repository() {\",\n    '  target=\"$1\"',\n    '  uri=\"$2\"',\n    '  ref=\"$3\"',\n    '  subpath=\"$4\"',\n    '  if [ -e \"$target\" ] && { [ -f \"$target\" ] || [ -n \"$(find \"$target\" -mindepth 1 -maxdepth 1 -print -quit 2>/dev/null)\" ]; }; then',\n    // This hook re-runs every turn on a long-lived box, so \\\"non-empty\\\" alone is not\n    // proof of a completed materialization: an interrupted clone (worker crash /\n    // lifecycle timeout mid-mv/cp) leaves a partial tree that would otherwise pass\n    // this check forever. A full-repo target must actually BE a work tree to be\n    // skipped; a partial one is wiped and rebuilt (nothing legitimate writes under\n    // the mount path before the repo exists). Subpath extracts are not git repos —\n    // for those the plain non-empty check stands (no stronger signal available).\n    '    if [ -n \"$subpath\" ] || git -C \"$target\" rev-parse --is-inside-work-tree >/dev/null 2>&1; then',\n    '      echo \"Repository resource already present at $target\"',\n    \"      return 0\",\n    \"    fi\",\n    '    echo \"Re-materializing partial repository resource at $target\" >&2',\n    '    find \"$target\" -mindepth 1 -maxdepth 1 -exec rm -rf {} +',\n    \"  fi\",\n    '  mkdir -p \"$(dirname \"$target\")\"',\n    '  tmp=\"${target}.tmp.$$\"',\n    '  rm -rf \"$tmp\"',\n    // Fetch failures must not leak the pid-suffixed tmp clone beside the mount\n    // (set -eu would exit before any cleanup).\n    '  if ! { git init \"$tmp\" >/dev/null && git -C \"$tmp\" remote add origin \"$uri\" && git -C \"$tmp\" fetch --depth 1 --no-tags --filter=blob:none origin \"$ref\" && git -C \"$tmp\" checkout --detach FETCH_HEAD >/dev/null; }; then',\n    '    rm -rf \"$tmp\"',\n    '    echo \"Repository resource fetch failed for $target\" >&2',\n    \"    exit 1\",\n    \"  fi\",\n    '  if [ -n \"$subpath\" ]; then',\n    '    if [ ! -e \"$tmp/$subpath\" ]; then',\n    '      echo \"Repository subpath not found: $subpath\" >&2',\n    '      rm -rf \"$tmp\"',\n    \"      exit 1\",\n    \"    fi\",\n    '    if [ -d \"$tmp/$subpath\" ]; then',\n    '      mkdir -p \"$target\"',\n    '      cp -a \"$tmp/$subpath/.\" \"$target/\"',\n    \"    else\",\n    '      rmdir \"$target\" 2>/dev/null || true',\n    '      cp -a \"$tmp/$subpath\" \"$target\"',\n    \"    fi\",\n    '    rm -rf \"$tmp\"',\n    \"  else\",\n    '    rmdir \"$target\" 2>/dev/null || true',\n    // Two concurrent turn holders can race this install: without the existence\n    // re-check the loser's un-flagged `mv` would nest its tmp clone INSIDE the\n    // winner's tree as <name>.tmp.<pid>. If the winner produced a valid work tree,\n    // accept it; a non-empty non-repo survivor here is a mount point the manifest\n    // re-filled — install into it by content copy instead of rename.\n    '    if [ -e \"$target\" ]; then',\n    '      if git -C \"$target\" rev-parse --is-inside-work-tree >/dev/null 2>&1; then',\n    '        rm -rf \"$tmp\"',\n    '        echo \"Repository resource already present at $target\"',\n    \"        return 0\",\n    \"      fi\",\n    '      cp -a \"$tmp/.\" \"$target/\"',\n    '      rm -rf \"$tmp\"',\n    \"    else\",\n    '      mv \"$tmp\" \"$target\"',\n    \"    fi\",\n    '    git -C \"$target\" rev-parse --is-inside-work-tree >/dev/null',\n    \"  fi\",\n    '  if [ ! -e \"$target\" ]; then',\n    '    echo \"Repository resource was not materialized at $target\" >&2',\n    \"    exit 1\",\n    \"  fi\",\n    '  echo \"Repository resource ready at $target\"',\n    \"}\",\n  ];\n  for (const resource of resources) {\n    const mountPath = resourceMountPath(resource);\n    commands.push(\n      [\n        \"clone_repository\",\n        shellQuote(posixPath.join(\"/workspace\", mountPath)),\n        shellQuote(resource.uri),\n        shellQuote(resource.ref),\n        shellQuote(resource.subpath ? normalizeRepositorySubpath(resource.subpath) : \"\"),\n      ].join(\" \"),\n    );\n  }\n  return commands.join(\"\\n\");\n}\n\nexport function toolspaceTokenSeedCommand(\n  options: { tokenFile?: string; legacyTokenFile?: string } = {},\n): string {\n  return [\n    \"set +x\",\n    \"set -eu\",\n    'export HOME=\"${HOME:-/workspace}\"',\n    'if [ -n \"${OPENGENI_TOOLSPACE_TOKEN_SEED:-}\" ]; then',\n    '  seed_umask=\"$(umask)\"',\n    \"  umask 077\",\n    options.tokenFile\n      ? `  token_file=${shellToolspacePath(options.tokenFile)}`\n      : '  token_file=\"${OPENGENI_TOOLSPACE_TOKEN_FILE:-$HOME/.opengeni/toolspace-token}\"',\n    options.legacyTokenFile\n      ? `  legacy_token_file=${shellToolspacePath(options.legacyTokenFile)}`\n      : '  legacy_token_file=\"\"',\n    '  mkdir -p \"$(dirname \"$token_file\")\"',\n    '  printf \\'%s\\' \"$OPENGENI_TOOLSPACE_TOKEN_SEED\" > \"$token_file.tmp.$$\"',\n    '  mv -f \"$token_file.tmp.$$\" \"$token_file\"',\n    '  if [ -n \"$legacy_token_file\" ] && [ \"$legacy_token_file\" != \"$token_file\" ]; then',\n    '    rm -f -- \"$legacy_token_file\"',\n    \"  fi\",\n    '  umask \"$seed_umask\"',\n    \"fi\",\n  ].join(\"\\n\");\n}\n\nexport async function runToolspaceTokenSeedHook(\n  session: SandboxSessionLike,\n  context: SandboxLifecycleHookContext,\n): Promise<void> {\n  if (!context.toolspaceTokenSeed) {\n    return;\n  }\n  const command = `set +x\\nexport OPENGENI_TOOLSPACE_TOKEN_SEED=${shellQuote(context.toolspaceTokenSeed)}\\n${toolspaceTokenSeedCommand(\n    {\n      ...(context.toolspaceTokenFile ? { tokenFile: context.toolspaceTokenFile } : {}),\n      ...(context.toolspaceTokenFile && context.environment.OPENGENI_TOOLSPACE_TOKEN_FILE\n        ? { legacyTokenFile: context.environment.OPENGENI_TOOLSPACE_TOKEN_FILE }\n        : {}),\n    },\n  )}`;\n  const result = await runSandboxLifecycleCommand(\n    session,\n    {\n      cmd: command,\n      workdir: \"/workspace\",\n      ...(context.runAs ? { runAs: context.runAs } : {}),\n      yieldTimeMs: SANDBOX_LIFECYCLE_COMMAND_TIMEOUT_MS,\n      maxOutputTokens: 4_000,\n    },\n    context.commandRunner,\n  );\n  assertSandboxCommandSucceeded(result, \"Toolspace token seed hook\");\n}\n\nexport async function refreshToolspaceTokenFile(\n  session: ToolspaceTokenWriterSession,\n  token: string,\n  options: {\n    runAs?: string;\n    commandRunner?: SandboxLifecycleCommandRunner;\n    tokenFile?: string;\n    legacyTokenFile?: string;\n  } = {},\n): Promise<void> {\n  const command = `set +x\\nexport OPENGENI_TOOLSPACE_TOKEN_SEED=${shellQuote(token)}\\n${toolspaceTokenSeedCommand(\n    {\n      ...(options.tokenFile ? { tokenFile: options.tokenFile } : {}),\n      ...(options.legacyTokenFile ? { legacyTokenFile: options.legacyTokenFile } : {}),\n    },\n  )}`;\n  const result = await runSandboxLifecycleCommand(\n    session,\n    {\n      cmd: command,\n      workdir: \"/workspace\",\n      ...(options.runAs ? { runAs: options.runAs } : {}),\n      yieldTimeMs: SANDBOX_LIFECYCLE_COMMAND_TIMEOUT_MS,\n      maxOutputTokens: 4_000,\n    },\n    options.commandRunner,\n  );\n  assertSandboxCommandSucceeded(result, \"Toolspace token refresh\");\n}\n\n// Bounds the setup output tail carried on a rig.setup failure event/error so a\n// runaway script can't bloat the session's event stream or the turn error.\nconst RIG_SETUP_OUTPUT_TAIL_LIMIT = 4_000;\n\n// A distinctive sentinel the guard prints when the idempotence marker already\n// exists, so the runtime can tell a SKIP from an actual run without a second\n// exec round-trip.\nconst RIG_SETUP_SKIPPED_SENTINEL = \"__OPENGENI_RIG_SETUP_SKIPPED__\";\n\n/**\n * The rig-setup command (M3). One idempotent bash program:\n *   1. `mkdir -p /var/opengeni` and, if the per-version marker already exists,\n *      print the SKIP sentinel and exit 0 (a warm box re-running the hook).\n *   2. otherwise atomically claim a per-version lock directory. A loser waits\n *      for the winner's marker, then skips; if the winner fails and releases the\n *      lock, the loser retries the claim.\n *   3. the winner writes the rig's setup script to a temp file and runs it under\n *      coreutils `timeout` (NOT `bash -e` — the script opts into `set -e`\n *      itself if it wants), then captures the exit code and `touch`es the marker\n *      ONLY on success (exit 0) so a failed/timed-out setup re-runs next turn.\n * The heredoc delimiter is quoted, so the script content is executed verbatim\n * with no host-side expansion.\n */\nexport function rigSetupScriptCommand(\n  script: string,\n  versionId: string,\n  timeoutMs = 600_000,\n  markerRoot = \"/var/opengeni\",\n): string {\n  const timeoutSecs = Math.max(1, Math.ceil(timeoutMs / 1000));\n  const lockWaitSecs = timeoutSecs + 6;\n  const marker = `${markerRoot.replace(/\\/+$/, \"\")}/rig-setup-${versionId}.done`;\n  return [\n    \"set -u\",\n    `mkdir -p ${shellQuote(markerRoot)}`,\n    `__OG_RIG_MARKER=${shellQuote(marker)}`,\n    '__OG_RIG_LOCK=\"$__OG_RIG_MARKER.lock\"',\n    `__OG_RIG_TIMEOUT_SECS=${timeoutSecs}`,\n    `__OG_RIG_LOCK_WAIT_SECS=${lockWaitSecs}`,\n    `if [ -f \"$__OG_RIG_MARKER\" ]; then printf '%s\\\\n' ${shellQuote(RIG_SETUP_SKIPPED_SENTINEL)}; exit 0; fi`,\n    \"while :; do\",\n    '  if mkdir \"$__OG_RIG_LOCK\" 2>/dev/null; then',\n    \"    trap 'rm -rf \\\"$__OG_RIG_LOCK\\\"' EXIT\",\n    `    if [ -f \"$__OG_RIG_MARKER\" ]; then printf '%s\\\\n' ${shellQuote(RIG_SETUP_SKIPPED_SENTINEL)}; exit 0; fi`,\n    '__OG_RIG_SCRIPT=\"$(mktemp)\"',\n    \"cat > \\\"$__OG_RIG_SCRIPT\\\" <<'__OPENGENI_RIG_SETUP_SCRIPT_EOF__'\",\n    script,\n    \"__OPENGENI_RIG_SETUP_SCRIPT_EOF__\",\n    '    timeout -k 5s \"${__OG_RIG_TIMEOUT_SECS}s\" bash \"$__OG_RIG_SCRIPT\"',\n    \"__OG_RIG_RC=$?\",\n    '    rm -f \"$__OG_RIG_SCRIPT\"',\n    '    if [ \"$__OG_RIG_RC\" -eq 0 ]; then touch \"$__OG_RIG_MARKER\"; fi',\n    '    exit \"$__OG_RIG_RC\"',\n    \"  fi\",\n    \"  __OG_RIG_WAITED=0\",\n    '  while [ \"$__OG_RIG_WAITED\" -lt \"$__OG_RIG_LOCK_WAIT_SECS\" ]; do',\n    `    if [ -f \"$__OG_RIG_MARKER\" ]; then printf '%s\\\\n' ${shellQuote(RIG_SETUP_SKIPPED_SENTINEL)}; exit 0; fi`,\n    '    if [ ! -d \"$__OG_RIG_LOCK\" ]; then break; fi',\n    \"    sleep 1\",\n    \"    __OG_RIG_WAITED=$((__OG_RIG_WAITED + 1))\",\n    \"  done\",\n    `  if [ -f \"$__OG_RIG_MARKER\" ]; then printf '%s\\\\n' ${shellQuote(RIG_SETUP_SKIPPED_SENTINEL)}; exit 0; fi`,\n    '  if [ ! -d \"$__OG_RIG_LOCK\" ]; then continue; fi',\n    '  rmdir \"$__OG_RIG_LOCK\" 2>/dev/null || true',\n    \"done\",\n  ].join(\"\\n\");\n}\n\n/**\n * The rig-setup beforeAgentStart hook (M3). Runs the frozen rig version's setup\n * script exactly once per box (marker-guarded), under the RIG's own timeout\n * (context.rigSetup.timeoutMs, NOT the 120s lifecycle default). Emits\n * rig.setup.started, then one terminal event:\n *   - rig.setup.skipped   — marker already present,\n *   - rig.setup.completed — script ran and exited 0,\n *   - rig.setup.failed    — nonzero exit / timeout,\n * and on failure THROWS (fail the turn closed) with a message naming the\n * rig/version and a bounded tail of the setup output.\n */\nexport async function runRigSetupHook(\n  session: SandboxSessionLike,\n  context: SandboxLifecycleHookContext = { environment: {} },\n): Promise<void> {\n  const rigSetup = context.rigSetup;\n  if (!rigSetup) {\n    return;\n  }\n  const payload = {\n    rigId: rigSetup.rigId,\n    versionId: rigSetup.versionId,\n    rigName: rigSetup.rigName,\n  };\n  await context.onRuntimeEvent?.({ type: \"rig.setup.started\", payload });\n  const command = rigSetupScriptCommand(rigSetup.script, rigSetup.versionId, rigSetup.timeoutMs);\n  const execArgs = {\n    cmd: command,\n    workdir: \"/workspace\",\n    ...(context.runAs ? { runAs: context.runAs } : {}),\n    // The in-box coreutils timeout is the hard deadline; the SDK yield waits a\n    // little longer so it observes timeout's non-zero exit instead of a live\n    // still-running process.\n    yieldTimeMs: rigSetup.timeoutMs + 7_000,\n    maxOutputTokens: 20_000,\n  };\n  let result: unknown;\n  try {\n    result = await runSandboxLifecycleCommand(session, execArgs, context.commandRunner);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    await context.onRuntimeEvent?.({\n      type: \"rig.setup.failed\",\n      payload: {\n        ...payload,\n        error: message.slice(-RIG_SETUP_OUTPUT_TAIL_LIMIT),\n      },\n    });\n    throw new Error(\n      `Rig setup failed for rig \"${rigSetup.rigName}\" (version ${rigSetup.versionId}): ${message}`,\n      { cause: error },\n    );\n  }\n  const output = sandboxCommandOutput(result);\n  // Marker present → the guard skipped the script. Distinct terminal signal.\n  if (output.includes(RIG_SETUP_SKIPPED_SENTINEL)) {\n    await context.onRuntimeEvent?.({ type: \"rig.setup.skipped\", payload });\n    return;\n  }\n  // Ran → classify. A \"still running\" result means the script outlived the rig\n  // timeout; any nonzero/absent exit code is a setup failure. Both fail closed.\n  const stillRunning = sandboxCommandStillRunning(result);\n  const exitCode = sandboxCommandExitCode(result);\n  if (stillRunning || exitCode === null || exitCode !== 0) {\n    const tail =\n      output.length > RIG_SETUP_OUTPUT_TAIL_LIMIT\n        ? output.slice(-RIG_SETUP_OUTPUT_TAIL_LIMIT)\n        : output;\n    const reason = stillRunning\n      ? `did not finish within the rig setup timeout (${rigSetup.timeoutMs}ms)`\n      : exitCode === null\n        ? \"did not report an exit code\"\n        : `exited with code ${exitCode}`;\n    const failure = new Error(\n      `Rig setup failed for rig \"${rigSetup.rigName}\" (version ${rigSetup.versionId}): the setup script ${reason}${tail ? `:\\n${tail}` : \"\"}`,\n    );\n    await context.onRuntimeEvent?.({\n      type: \"rig.setup.failed\",\n      payload: {\n        ...payload,\n        error: failure.message.slice(-RIG_SETUP_OUTPUT_TAIL_LIMIT),\n      },\n    });\n    throw failure;\n  }\n  await context.onRuntimeEvent?.({\n    type: \"rig.setup.completed\",\n    payload: { ...payload, skipped: false },\n  });\n}\n\nexport async function runRepositoryCloneHook(\n  session: SandboxSessionLike,\n  resources: Extract<ResourceRef, { kind: \"repository\" }>[],\n  context: SandboxLifecycleHookContext = { environment: {} },\n): Promise<void> {\n  const payload = {\n    name: \"repository-clone\",\n    repositoryCount: resources.length,\n  };\n  await context.onRuntimeEvent?.({\n    type: \"sandbox.operation.started\",\n    payload,\n  });\n  try {\n    // TOKEN-BROKER (B1): thread run-scoped provider tokens PER-EXEC, never on\n    // the manifest. The SDK's ExecCommandArgs has no `environment` field (exec\n    // inherits the box's manifest env), so we can't hand seeds through an exec\n    // option — and we MUST NOT put them on the manifest (validateNoEnvironmentDelta\n    // would see rotating values). We inline ephemeral `export` prefixes on THIS\n    // exec's command text only. The clone command writes them to provider token\n    // FILES before fetch/CLI use. Absent seeds -> no prefix; helper wrappers still\n    // install and passthrough cleanly.\n    const gitTokenSeeds = {\n      ...(context.gitTokenSeeds ?? {}),\n      ...(context.gitTokenSeed ? { github: context.gitTokenSeed } : {}),\n    } satisfies GitTokenSeeds;\n    const gitCredentialBindings = context.gitCredentialBindings ?? [];\n    const seedPrefix = [\n      gitTokenSeedExportPrefix(gitTokenSeeds),\n      gitCredentialBindingSeedExportPrefix(gitCredentialBindings),\n    ]\n      .filter(Boolean)\n      .join(\"\\n\");\n    const cloneCommand = repositoryCloneCommand(resources, gitCredentialBindings);\n    const command = seedPrefix ? `set +x\\n${seedPrefix}\\n${cloneCommand}` : cloneCommand;\n    const result = await runSandboxLifecycleCommand(\n      session,\n      {\n        cmd: command,\n        workdir: \"/workspace\",\n        ...(context.runAs ? { runAs: context.runAs } : {}),\n        yieldTimeMs: SANDBOX_LIFECYCLE_COMMAND_TIMEOUT_MS,\n        maxOutputTokens: 20_000,\n      },\n      context.commandRunner,\n    );\n    assertSandboxCommandSucceeded(result, \"Repository clone hook\");\n    await context.onRuntimeEvent?.({\n      type: \"sandbox.operation.completed\",\n      payload,\n    });\n  } catch (error) {\n    await context.onRuntimeEvent?.({\n      type: \"sandbox.operation.failed\",\n      payload: {\n        ...payload,\n        error: error instanceof Error ? error.message : String(error),\n      },\n    });\n    throw error;\n  }\n}\n\nexport function azureCliLoginCommand(): string {\n  return [\n    \"set +x\",\n    'export HOME=\"${HOME:-/workspace}\"',\n    'mkdir -p \"$HOME/.azure\"',\n    'CLIENT_ID=\"${AZURE_CLIENT_ID:-${ARM_CLIENT_ID:-}}\"',\n    'CLIENT_SECRET=\"${AZURE_CLIENT_SECRET:-${ARM_CLIENT_SECRET:-}}\"',\n    'TENANT_ID=\"${AZURE_TENANT_ID:-${ARM_TENANT_ID:-}}\"',\n    'SUBSCRIPTION_ID=\"${AZURE_SUBSCRIPTION_ID:-${ARM_SUBSCRIPTION_ID:-}}\"',\n    'if [ -n \"$CLIENT_ID\" ] && [ -n \"$CLIENT_SECRET\" ] && [ -n \"$TENANT_ID\" ]; then',\n    '  command -v az >/dev/null 2>&1 || { echo \"Azure CLI is not installed in the sandbox\" >&2; exit 127; }',\n    '  az account show --only-show-errors >/dev/null 2>&1 || az login --service-principal --username \"$CLIENT_ID\" --password \"$CLIENT_SECRET\" --tenant \"$TENANT_ID\" --allow-no-subscriptions --only-show-errors --output none',\n    // if/fi, NOT `[ -n ] && az`: this line ends the credentialed if-body, so with a\n    // no-subscription SP (an explicitly supported config — the login above passes\n    // --allow-no-subscriptions) the bare `[ -n ]` would exit the whole script 1 and\n    // fail the turn.\n    '  if [ -n \"$SUBSCRIPTION_ID\" ]; then az account set --subscription \"$SUBSCRIPTION_ID\" --only-show-errors; fi',\n    \"fi\",\n  ].join(\"\\n\");\n}\n\nexport function sandboxCommandExitCode(result: unknown): number | null {\n  if (typeof result === \"string\") {\n    const match = result.match(/Process exited with code (-?\\d+)/);\n    return match ? Number(match[1]) : null;\n  }\n  if (!result || typeof result !== \"object\") {\n    return null;\n  }\n  const candidate = result as {\n    exitCode?: unknown;\n    exit_code?: unknown;\n    code?: unknown;\n    status?: unknown;\n  };\n  for (const value of [candidate.exitCode, candidate.exit_code, candidate.code, candidate.status]) {\n    if (typeof value === \"number\") {\n      return value;\n    }\n  }\n  return null;\n}\n\nexport function sandboxCommandOutput(result: unknown): string {\n  if (typeof result === \"string\") {\n    const outputIndex = result.indexOf(\"Output:\");\n    return outputIndex >= 0 ? result.slice(outputIndex + \"Output:\".length).trim() : result.trim();\n  }\n  if (!result || typeof result !== \"object\") {\n    return \"\";\n  }\n  const candidate = result as {\n    output?: unknown;\n    stdout?: unknown;\n    stderr?: unknown;\n  };\n  return [candidate.output, candidate.stderr, candidate.stdout]\n    .filter((value): value is string => typeof value === \"string\" && value.length > 0)\n    .join(\"\\n\");\n}\n\nfunction assertSandboxCommandSucceeded(result: unknown, operation: string): void {\n  const output = sandboxCommandOutput(result);\n  if (sandboxCommandStillRunning(result)) {\n    throw new Error(\n      `${operation} did not finish before the lifecycle command timeout${output ? `:\\n${output}` : \"\"}`,\n    );\n  }\n  const exitCode = sandboxCommandExitCode(result);\n  if (exitCode !== null && exitCode !== 0) {\n    throw new Error(\n      `${operation} failed with exit code ${exitCode}${output ? `:\\n${output}` : \"\"}`,\n    );\n  }\n  if (exitCode === null) {\n    throw new Error(output || `${operation} did not return a command exit code`);\n  }\n}\n\nexport function sandboxCommandStillRunning(result: unknown): boolean {\n  if (typeof result === \"string\") {\n    return /Process running with session ID \\d+/u.test(result);\n  }\n  if (!result || typeof result !== \"object\") {\n    return false;\n  }\n  const candidate = result as { sessionId?: unknown; session_id?: unknown };\n  return typeof candidate.sessionId === \"number\" || typeof candidate.session_id === \"number\";\n}\n\nfunction hasAzureServicePrincipal(environment: Record<string, string>): boolean {\n  const clientId = environment.AZURE_CLIENT_ID || environment.ARM_CLIENT_ID;\n  const clientSecret = environment.AZURE_CLIENT_SECRET || environment.ARM_CLIENT_SECRET;\n  const tenantId = environment.AZURE_TENANT_ID || environment.ARM_TENANT_ID;\n  return Boolean(clientId && clientSecret && tenantId);\n}\n\nexport async function runAzureCliLoginHook(\n  session: SandboxSessionLike,\n  context: SandboxLifecycleHookContext = { environment: {} },\n): Promise<void> {\n  const payload = {\n    name: \"azure-cli-login\",\n    command: \"az login --service-principal\",\n  };\n  await context.onRuntimeEvent?.({\n    type: \"sandbox.operation.started\",\n    payload,\n  });\n  try {\n    const result = await runSandboxLifecycleCommand(\n      session,\n      {\n        cmd: azureCliLoginCommand(),\n        workdir: \"/workspace\",\n        ...(context.runAs ? { runAs: context.runAs } : {}),\n        yieldTimeMs: SANDBOX_LIFECYCLE_COMMAND_TIMEOUT_MS,\n        maxOutputTokens: 20_000,\n      },\n      context.commandRunner,\n    );\n    assertSandboxCommandSucceeded(result, \"Azure CLI login hook\");\n    await context.onRuntimeEvent?.({\n      type: \"sandbox.operation.completed\",\n      payload,\n    });\n  } catch (error) {\n    await context.onRuntimeEvent?.({\n      type: \"sandbox.operation.failed\",\n      payload: {\n        ...payload,\n        error: error instanceof Error ? error.message : String(error),\n      },\n    });\n    throw error;\n  }\n}\n\nfunction azureDeploymentBaseUrl(settings: Settings): string {\n  const endpoint = settings.azureOpenaiEndpoint?.replace(/\\/+$/, \"\");\n  if (!endpoint || !settings.azureOpenaiDeployment) {\n    throw new Error(\"Azure OpenAI endpoint/deployment settings are incomplete\");\n  }\n  return `${endpoint}/openai/deployments/${settings.azureOpenaiDeployment}`;\n}\n\nexport function azureOpenAIDefaultQuery(\n  settings: Pick<Settings, \"azureOpenaiApiVersion\">,\n  baseURL: string,\n): Record<string, string> | undefined {\n  if (!settings.azureOpenaiApiVersion) return undefined;\n  const normalized = baseURL.replace(/\\/+$/, \"\").toLowerCase();\n  if (normalized.endsWith(\"/openai/v1\")) {\n    return undefined;\n  }\n  return { \"api-version\": settings.azureOpenaiApiVersion };\n}\n\n// Since @openai/agents 0.11.0 local sandbox sources (including the lazy\n// bundled-skills source) must stay within the SDK process working directory:\n// reads outside it require manifest.extraPathGrants, and remote sandbox\n// clients such as Modal reject manifests that carry extra path grants. The\n// packaged skills live inside the runtime package — outside the worker's cwd\n// in production — so stage a copy under the working directory once per\n// process instead of granting the packaged path.\nlet stagedBundledSkillsDir: string | null = null;\n\nfunction bundledSkillsDir(): string {\n  const moduleDir = dirname(fileURLToPath(import.meta.url));\n  const packaged =\n    [\n      join(moduleDir, \"bundled_hashicorp_terraform_skills\"),\n      join(moduleDir, \"..\", \"src\", \"bundled_hashicorp_terraform_skills\"),\n    ].find((candidate) => existsSync(candidate)) ??\n    join(moduleDir, \"bundled_hashicorp_terraform_skills\");\n  if (isPathWithin(process.cwd(), packaged)) {\n    return packaged;\n  }\n  if (!stagedBundledSkillsDir) {\n    stagedBundledSkillsDir = stageBundledSkills(\n      packaged,\n      join(process.cwd(), \".opengeni\", \"bundled_hashicorp_terraform_skills\"),\n    );\n  }\n  return stagedBundledSkillsDir;\n}\n\nfunction stageBundledSkills(packaged: string, target: string): string {\n  const tmp = `${target}.tmp-${process.pid}`;\n  rmSync(tmp, { recursive: true, force: true });\n  mkdirSync(dirname(tmp), { recursive: true });\n  cpSync(packaged, tmp, { recursive: true });\n  rmSync(target, { recursive: true, force: true });\n  try {\n    renameSync(tmp, target);\n  } catch (error) {\n    // Another process staged the same content between our rm and rename.\n    rmSync(tmp, { recursive: true, force: true });\n    if (!existsSync(target)) {\n      throw error;\n    }\n  }\n  return target;\n}\n\nfunction isPathWithin(root: string, candidate: string): boolean {\n  const relativePath = relative(root, candidate);\n  return relativePath === \"\" || (!relativePath.startsWith(\"..\") && !isAbsolute(relativePath));\n}\n\n/**\n * The skill source fed to the SDK Skills capability. Without pack or curated\n * skills this is the plain bundled local-dir source, byte-for-byte the\n * pre-pack behavior. With either selected source it becomes a single\n * in-memory dir source combining bundled skill directories (as local_dir\n * entries the SDK materializes lazily) with selected in-memory skill\n * directories — one skill index, one `## Skills` instruction section, lazy\n * `load_skill` for all of them. A pack skill shadows a bundled or curated\n * skill with the same directory name, case-insensitively.\n */\nexport function lazySkillSourceWithPackSkills(\n  packSkills: PackSkill[],\n  skillLibrarySkills: PackSkill[] = [],\n): LocalDirLazySkillSource {\n  const bundledDir = bundledSkillsDir();\n  const bundled = localDirLazySkillSource({ src: bundledDir });\n  if (packSkills.length === 0 && skillLibrarySkills.length === 0) {\n    return bundled;\n  }\n  const children: Record<string, Entry> = {};\n  for (const name of bundledSkillDirNames(bundledDir)) {\n    children[name] = localDir({ src: join(bundledDir, name) });\n  }\n  const libraryIndex: SkillIndexEntry[] = [];\n  const libraryNameKeys = new Set<string>();\n  for (const skill of skillLibrarySkills) {\n    assertSafePackSkillName(skill.name);\n    const key = skill.name.toLowerCase();\n    if (libraryNameKeys.has(key)) {\n      throw new Error(`Duplicate curated skill name: ${skill.name}`);\n    }\n    libraryNameKeys.add(key);\n    removeSkillChildByNameKey(children, key);\n    children[skill.name] = packSkillDirEntry(skill);\n    libraryIndex.push({\n      name: skill.name,\n      description: packSkillDescription(skill),\n      path: skill.name,\n    });\n  }\n  const packIndex: SkillIndexEntry[] = [];\n  const packNameKeys = new Set<string>();\n  for (const skill of packSkills) {\n    assertSafePackSkillName(skill.name);\n    if (packNameKeys.has(skill.name.toLowerCase())) {\n      throw new Error(`Duplicate pack skill name: ${skill.name}`);\n    }\n    packNameKeys.add(skill.name.toLowerCase());\n    removeSkillChildByNameKey(children, skill.name.toLowerCase());\n    children[skill.name] = packSkillDirEntry(skill);\n    packIndex.push({\n      name: skill.name,\n      description: packSkillDescription(skill),\n      path: skill.name,\n    });\n  }\n  return {\n    source: dir({ children }),\n    getIndex: (manifest, skillsPath) => [\n      ...(bundled.getIndex?.(manifest, skillsPath) ?? []).filter(\n        (entry) =>\n          !packNameKeys.has((entry.path ?? entry.name).toLowerCase()) &&\n          !libraryNameKeys.has((entry.path ?? entry.name).toLowerCase()),\n      ),\n      ...libraryIndex.filter(\n        (entry) => !packNameKeys.has((entry.path ?? entry.name).toLowerCase()),\n      ),\n      ...packIndex,\n    ],\n  };\n}\n\nfunction effectiveSkillSelections(\n  librarySelections: readonly EffectiveSkillSelection[],\n  librarySkills: readonly PackSkill[],\n  packSkills: readonly PackSkill[],\n  sessionSkills: readonly PackSkill[],\n): readonly EffectiveSkillSelection[] {\n  const defaultSelections = bundledSkillDirNames(bundledSkillsDir()).map((name) => ({\n    id: `bundled:${name}`,\n    name,\n    source: \"bundled\" as const,\n    version: null,\n    contentSha256: null,\n    reason: \"deployment default skill bundle\",\n  }));\n  const libraryNameKeys = new Set(librarySkills.map((skill) => skill.name.toLowerCase()));\n  const packNameKeys = new Set(packSkills.map((skill) => skill.name.toLowerCase()));\n  const effectiveSessionSkills = sessionSkillsForMaterialization(\n    packSkills,\n    librarySkills,\n    sessionSkills,\n  );\n  const sessionNameKeys = new Set(effectiveSessionSkills.map((skill) => skill.name.toLowerCase()));\n  const selected = librarySelections.filter((selection) =>\n    libraryNameKeys.has(selection.name.toLowerCase()),\n  );\n  return [\n    ...defaultSelections.filter(\n      (selection) =>\n        !libraryNameKeys.has(selection.name.toLowerCase()) &&\n        !packNameKeys.has(selection.name.toLowerCase()) &&\n        !sessionNameKeys.has(selection.name.toLowerCase()),\n    ),\n    ...selected.filter(\n      (selection) =>\n        !packNameKeys.has(selection.name.toLowerCase()) &&\n        !sessionNameKeys.has(selection.name.toLowerCase()),\n    ),\n    ...packSkills.map((skill) => ({\n      id: `pack:${skill.name}`,\n      name: skill.name,\n      source: \"pack\" as const,\n      version: null,\n      contentSha256: null,\n      reason: \"enabled capability pack\",\n    })),\n    ...effectiveSessionSkills.map((skill) => ({\n      id: `session:${skill.name}`,\n      name: skill.name,\n      source: \"session\" as const,\n      version: null,\n      contentSha256: null,\n      reason: \"attached to session\",\n    })),\n  ];\n}\n\nfunction sessionSkillsForMaterialization(\n  packSkills: readonly PackSkill[],\n  librarySkills: readonly PackSkill[],\n  sessionSkills: readonly PackSkill[],\n): PackSkill[] {\n  const configured = new Map<string, PackSkill>();\n  for (const skill of [...librarySkills, ...packSkills]) {\n    configured.set(skill.name.toLowerCase(), skill);\n  }\n  const bundledNames = new Set(\n    bundledSkillDirNames(bundledSkillsDir()).map((name) => name.toLowerCase()),\n  );\n  const selected = new Map<string, PackSkill>();\n  for (const skill of sessionSkills) {\n    assertSafePackSkillName(skill.name);\n    const key = skill.name.toLowerCase();\n    if (bundledNames.has(key)) {\n      throw new Error(`Session skill \"${skill.name}\" conflicts with a bundled skill`);\n    }\n    const existing = selected.get(key) ?? configured.get(key);\n    if (existing) {\n      if (skillFingerprint(existing) !== skillFingerprint(skill)) {\n        throw new Error(`Conflicting skill definitions for \"${skill.name}\"`);\n      }\n      continue;\n    }\n    selected.set(key, skill);\n  }\n  return [...selected.values()];\n}\n\nfunction skillFingerprint(skill: PackSkill): string {\n  return JSON.stringify(\n    [...skill.files]\n      .sort((left, right) => left.path.localeCompare(right.path))\n      .map(({ path, content }) => ({ path, content })),\n  );\n}\n\nfunction removeSkillChildByNameKey(children: Record<string, Entry>, nameKey: string): void {\n  for (const name of Object.keys(children)) {\n    if (name.toLowerCase() === nameKey) {\n      delete children[name];\n    }\n  }\n}\n\nfunction bundledSkillDirNames(root: string): string[] {\n  return readdirSync(root, { withFileTypes: true })\n    .filter((entry) => entry.isDirectory() && existsSync(join(root, entry.name, \"SKILL.md\")))\n    .map((entry) => entry.name)\n    .sort();\n}\n\ntype PackSkillDirNode = {\n  dirs: Map<string, PackSkillDirNode>;\n  files: Map<string, string>;\n};\n\nfunction packSkillDirEntry(skill: PackSkill): Dir {\n  const root: PackSkillDirNode = { dirs: new Map(), files: new Map() };\n  for (const skillFile of skill.files) {\n    const segments = packSkillPathSegments(skill.name, skillFile.path);\n    let node = root;\n    for (const segment of segments.slice(0, -1)) {\n      if (node.files.has(segment)) {\n        throw new Error(`Pack skill ${skill.name} uses ${segment} as both a file and a directory`);\n      }\n      let next = node.dirs.get(segment);\n      if (!next) {\n        next = { dirs: new Map(), files: new Map() };\n        node.dirs.set(segment, next);\n      }\n      node = next;\n    }\n    const filename = segments[segments.length - 1]!;\n    if (node.dirs.has(filename) || node.files.has(filename)) {\n      throw new Error(`Duplicate pack skill file path in ${skill.name}: ${skillFile.path}`);\n    }\n    node.files.set(filename, skillFile.content);\n  }\n  if (!root.files.has(\"SKILL.md\")) {\n    throw new Error(`Pack skill ${skill.name} is missing a top-level SKILL.md file`);\n  }\n  return packSkillDirFromNode(root);\n}\n\nfunction packSkillDirFromNode(node: PackSkillDirNode): Dir {\n  const children: Record<string, Entry> = {};\n  for (const [name, child] of node.dirs) {\n    children[name] = packSkillDirFromNode(child);\n  }\n  for (const [name, content] of node.files) {\n    children[name] = file({ content });\n  }\n  return dir({ children });\n}\n\nfunction assertSafePackSkillName(name: string): void {\n  if (packSkillPathSegments(name, name).length !== 1) {\n    throw new Error(`Invalid pack skill name: ${name}`);\n  }\n}\n\nfunction packSkillPathSegments(skillName: string, path: string): string[] {\n  const segments = path.split(\"/\");\n  if (\n    path.startsWith(\"/\") ||\n    path.includes(\"\\\\\") ||\n    segments.some((segment) => segment.length === 0 || segment === \".\" || segment === \"..\")\n  ) {\n    throw new Error(`Invalid pack skill file path for ${skillName}: ${path}`);\n  }\n  return segments;\n}\n\nfunction packSkillDescription(skill: PackSkill): string {\n  const explicit = skill.description?.trim();\n  if (explicit) {\n    return explicit;\n  }\n  const markdown = skill.files.find((skillFile) => skillFile.path === \"SKILL.md\")?.content ?? \"\";\n  return skillFrontmatterDescription(markdown) ?? \"No description provided.\";\n}\n\nfunction skillFrontmatterDescription(markdown: string): string | null {\n  const lines = markdown.split(/\\r?\\n/);\n  if (lines[0]?.trim() !== \"---\") {\n    return null;\n  }\n  const end = lines.findIndex((line, index) => index > 0 && line.trim() === \"---\");\n  if (end === -1) {\n    return null;\n  }\n  const collected: string[] = [];\n  let inDescription = false;\n  for (const line of lines.slice(1, end)) {\n    const match = line.match(/^description:\\s*(.*)$/);\n    if (match) {\n      const inline = match[1]!.trim();\n      if (inline && inline !== \">-\" && inline !== \">\" && inline !== \"|\" && inline !== \"|-\") {\n        return unquoteFrontmatterValue(inline);\n      }\n      inDescription = true;\n      continue;\n    }\n    if (inDescription) {\n      if (/^\\s+\\S/.test(line)) {\n        collected.push(line.trim());\n        continue;\n      }\n      break;\n    }\n  }\n  const blockValue = collected.join(\" \").trim();\n  return blockValue ? blockValue : null;\n}\n\nfunction unquoteFrontmatterValue(value: string): string {\n  if (\n    value.length >= 2 &&\n    value[0] === value[value.length - 1] &&\n    (value[0] === '\"' || value[0] === \"'\")\n  ) {\n    return value.slice(1, -1);\n  }\n  return value;\n}\n\nfunction isAsyncIterable<T>(source: Iterable<T> | AsyncIterable<T>): source is AsyncIterable<T> {\n  return typeof (source as AsyncIterable<T>)[Symbol.asyncIterator] === \"function\";\n}\n\nfunction stableJson(value: unknown): string {\n  return JSON.stringify(sortJson(value));\n}\n\nfunction sortJson(value: unknown): unknown {\n  if (Array.isArray(value)) {\n    return value.map(sortJson);\n  }\n  if (value && typeof value === \"object\") {\n    return Object.fromEntries(\n      Object.entries(value)\n        .sort(([a], [b]) => a.localeCompare(b))\n        .map(([key, nested]) => [key, sortJson(nested)]),\n    );\n  }\n  return value;\n}\nfunction interruptionToolName(item: unknown): string {\n  const candidate = item as {\n    toolName?: unknown;\n    name?: unknown;\n    rawItem?: { name?: unknown };\n  };\n  const name = candidate?.toolName ?? candidate?.name ?? candidate?.rawItem?.name;\n  return typeof name === \"string\" ? name : \"\";\n}\n",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"// The legible \"screen capture failed\" error card the history-sanitizer wire seam\n// substitutes for an EMPTY `computer_call_output` image_url (see\n// `rewriteEmptyComputerCallOutputImageUrls`). The hosted `computer_use_preview`\n// protocol has only an IMAGE channel back to the model, so a capture failure has to\n// be a legible IMAGE — otherwise the SDK's empty-output placeholder (a 1×1\n// transparent PNG) reaches the model as a plausible-but-wrong BLANK DESKTOP it then\n// confidently reports (the exact failure mode of the 0.1.3 TCC-denied incident).\n//\n// This is a valid 8-bit RGBA PNG (verified: signature + per-chunk CRC + IDAT inflates\n// to the exact scanline size) rendered from a fixed message, so the provider's image\n// decoder accepts it (an invalid/empty image_url is what 400s the turn). The specific\n// failure REASON (permission denied / null image / timeout / display down) is not in\n// the card — it is logged worker-side by `NativeDesktopComputer.screenshot()`; the\n// card's job is only to stop the model from hallucinating a real blank desktop.\n//\n// Regenerate with: `bun run scripts/gen-screenshot-error-card.mjs`\n// Rendered text:\n//   SCREEN CAPTURE FAILED\n//   THE DESKTOP COULD NOT BE CAPTURED.\n//   THIS IS A PLACEHOLDER, NOT THE REAL SCREEN.\n//   DO NOT SAY THE SCREEN IS BLANK.\n//   TELL THE USER TO CHECK THE DISPLAY AND GRANT\n//   SCREEN RECORDING PERMISSION.\nexport const SCREENSHOT_FAILURE_CARD_IMAGE_URL =\n  \"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAABVMAAAGYCAYAAABPvXKBAAAh90lEQVR42u3dMXLkxhJF0VnEGDQQXLY2CaedtkcLkEJBBaqrXmYe43j6bDZQKGTd+RH89df39x8AAAAAAP7bLxcBAAAAAEBMBQAAAAAQUwEAAAAAxFQAAAAAADEVAAAAAEBMBQAAAAAQUwEAAAAAxFQAAAAAAMRUAAAAAAAxFQAAAABATAUAAAAAEFMBAAAAAMRUAAAAAAAxFQAAAABATAUAAAAAQEwFAAAAABBTAQAAAADEVAAAAAAAMRUAAAAAQEwFAAAAABBTAQAAAADEVAAAAAAAMRUAAAAAgMCY+n7dSyV9bpfvdur7Pvnc1Wsy/eGtuNam7RHp63nade7yrE57fk89R9Pev4ZiAAAQU8VUMVVMFWPEVPuVmCqmiqliKgAAiKliqpgqpooxIpCYKqaKqWKqmAoAAGKqmCqmiqliqpgqpoqpnl8xVUwFAAAxVUwVU8VUMVVMFVPFVM+vmCqmAgCAmBp9uKn4uRUPkUmH1y4x1Xq+S34P1/lu848Xnt95P8/9FVgBAEBMFZ/EVDFV5PPzxFTPr5/n/oqpAAAgpopPYqqYaj2LQGKqmGrdmzfEVAAAEFMdbsRUMdV6FoHEVDHVujdviKkAACCm+lwxVUy1nkUgMVVMFVNdZzEVAADEVIcbMfXg53aJO9azCCSmiqnWvXlDTAUAADHV54qpYqr1LAKJqWKqmCqmiqkAACCmOtyIqWKq9Symus5iqtgmpoqpAAAgpjrciBNiqhgjpoqpYqrnV0x1fwEAQEx1yBBTxVQxRkwVU8VUz6+Y6v4CAABbY+qTv8Re8a+zP/luq7/vtM8VU/PX85P7sWNdiam9942k57fidRZTa74HxVQAABBTHap8rpgqpoqpYqqYKqZ674upAAAgpoqpYqqYKqaKqWKqmCqmiqliKgAAiKliqpgqpoqpYqqYKqaKqWKqmAoAAGKqmCpqiqliqpgqpoqpYqqYKqYCAICYWi4qdfkr8/6K8frPrRhopv216Gn3I/06izae34k/z/0VUwEAQEwVUx0ixVQxVaQSUz2/fp77K6YCAICYKqY6RIqpYqqYKqaKqWKq96DnEgAAxFQx1SFSTBVTxVQxVUwVP70HPZcAACCmiqkOkWKqw7qYKqaKqdap6yymAgCAmCqmxv9vHSK/xVQxVUwdsF95fsVU99dzCQAAYqqY6hAppoqpYqqYKqaKqd6DYioAAIipYqpDpEOkmCqmiqliqvjpPSimAgCAmCqmiqkOka6z+yGmiqnWqZjqPQgAAGKqmCqmOkS6zmKqmCra2CfFVO9BAAAQUx8O50+k/y5JUeTU9+18ndMDTef1PC2O7dgnp+1XYqr3kc+t8cwAAICYKqY6vIqpYqqYKqaKqWKqqCmmAgCAmCqmOryKqWKqmCqmiqliqveRmAoAAGKqmCqmiqliqpgqpoqpYqr3kZgKAACIqWKqmCqmiqliqpgqpnof+VxDMQAAhMRUAAAAAAAxFQAAAABATAUAAAAAQEwFAAAAABBTAQAAAADEVAAAAAAAMRUAAAAAQEwFAAAAABBTAQAAAADEVAAAAAAAMRUAAAAAADEVAAAAAEBMBQAAAAAQUwEAAAAAxFQAAAAAADEVAAAAAEBMBQAAAAAQUwEAAAAAEFMBAAAAAMRUAAAAAAAxFQAAAABATAUAAAAAEFMBAAAAAMRUAAAAAAAxFQAAAAAAMRUAAAAAQEwFAAAAABBTAQAAAADEVAAAAAAAMRUAAAAAoGJM/fp9/fmk9+v+uJ9+7urvkfR9Tzn13ZKus/Wcf53T17Nn+tz9PfUcdb6XSWv31M+b9h60N817trz3a66rLvNkxes8bZ4E6E5MFVMdbsRUMdXwK6aKqWKqmGrecJ29F8RUMVVMBUBMFVMN2GKqmCqmOjSLqWKqmGrecJ29F6wrMVVMBUBMFZ8M2GKqmCqmeqbFVOtZTDVvuM6uvZgqpoqpAIiphgWHGzHVehZTPdNiqpgqpop85g3XXkw1T4qpAIyKqRUPQRUPzdPuW1KcSP/cHb+z5/cquR90eY4qHiK9V88Fn2n7Rud/6DHXeS94fl1n718AxFTDgsONmCqmOlQ5NDvMOcyJqQ7h5jrvBe9985X3r5gKIKYaFgzdhiMx1bDv0Oww5zAnprpv5g0x1XvffOX9K6YCiKlijKHbcCSmen7FVPfXdRZTxVT7hrnOe8HP8/61jwOIqV46hm7XWUz1/Iqp9g2HOTFVPDFvmOvcXzHV+9c+DiCmiqmGbte5zSHD0CimOjQ7zFnPa+6HGGPeMNd5L4ip3r/2cQDEVEO34VdM9fyKqQ7N9isxVUw1b5jr7Ffip/ev9y8AYqqh2+HGIcPQKKY6NDvMWc9iqphqrvNe8Py6zt6/AIiphm6HGzHV0CimOjQ7zDnMialiqrnOe0FMdZ29f4UMADHVsGDoFlNdF4cqh2aHOYc5MdUh3LzhveC9b77y/hVTAcTUoJfOajs+1+Em/zrv+Nz09dJ52Pf8OjQ7zImpYkzm/U16/3ovXOb2D1wr81XN59c+DiCmiqliqqFMTDXse37FVDFVTBVTxVTvBTFVTBVT7eMAiKliqpgqphr2Pb9iqpgqpoqpYqqYKqaKqWKqmAqAmGooE1PFVDFVTBVTxVQxVUwVU8VUMVVMFVPFVADEVEOZmCqmiqliqpgqpjrMialiqpgqpoqp5isxFQAx1V+r9Nd1h1zn9EO959fza98QU7vF1NX/YCWmmje8F9xf89WMf5yyjwMgphq6Db9iqufX8+vQLKaKqWKqecN7wXtBTBVTvX8BEFMNZQ43Yqqh0fPrkCGmiqliqpjqveC9IKaKqd6/AIiphjJDnpgq2lhXDs1iqsOcmCqmei94L4ipYqr1DICYKsY43Iipoo115dAspjrMiakO4d4L3gtiqphqPYupAGKqYcHQ7Tpv/77+2qzn1yFDTBVT+60rMdV7wXtBTJ1wndNn4PT79uQfCwEQUw1lhl8xVUz1/Do0i6liqpgqpnoveC/Y18RUMVVMBRBTDWUON2KqmGpdOTSLqWKqmOp96b3gvSCmiqnev2IqgJhqKHO4cTgUU60rh2YxVZSzrsRU7wXvBTFVTBVTxVQAMdWwYOgWU8VU68qhWUwVU60rMdV7wXvB/TVfialiKoCYalj4kPQhb8d3O3Wdk77vtMN6xevc5SCd/kxXXFed9ytzxBV1nTvH1M7P77RrL6aarzqdy5L2CDEVQEwVU8VUMVVMFVM902KqmCqmiqliqpgqpoqpYqqYCiCmiqliqjghpoqpnmkxVUwVU8VU84aYKqaar8RUMRVATBVTxVRxQkwVUwULMVVMFVPFVPOGmCqmmq/EVDEVQEwVU8VUMVVMNeyLqWKq/cocIabam8RUMVVMdS4TUwHEVAAAAAAAxFQAAAAAADEVAAAAAEBMBQAAAAAQUwEAAAAAxFQAAAAAADEVAAAAAEBMBQAAAAAQUwEAAAAAEFMBAAAAAMRUAAAAAAAxFQAAAABATAUAAAAAEFMBAAAAAMRUAAAAAAAxFQAAAAAAMRUAAAAAQEwFAAAAABBTAQAAAADEVAAAAAAAMRUAAAAAQEwFAAAAABBTAQAAAADEVBcBAAAAAEBMBQAAAAAQUwEAAAAAxFQAAAAAADEVAAAAAEBMBQAAAAAQUwEAAAAAxNQPeL/uj/vp567+Hknfd8fvkrRwXeea177zd1u9hqbd31Pvhc7vo1P399R67vIOOLWeDcWX5zdsvuo8TzqnXN4LBX6XinOstdZn3ugyX1U8LyCmiqmGI9dZTBVTxVTDkZhq2BdTxVQx1XvB/RVTxVRrTUx1XkBMNaSIqa6zmCqmiqmGI4cqw76YKqaKqc4pYqr3gphqrYmpzgueSzHVkCLyialiqpgqphqOxFSHZjFVTBVTnVPEVO8F731nCDFVTBVTxVRDisgnpoqpBiExVUwVUx1kxFQxVUwVU8VU7wUxVUwVU8VUMVVMbTGs+nkOQa7zzOuXdLjxffO/77TrbD37vuaIfdHB3Gke6rRfmeu8B60rn+u8kDlvIKb6eR4W19n1Myz4voZQ99f39X4TU60X5xTRy3vBujJPWldiqrlOTPXzPCyus+tnWPB9DaFiqvXs/SamWi/mIdHLdfZ9xVTrSkz1nhZTxU9DrcOm62foNhwZQsVU19n+LKaaO81Dopf3gu8rplpXrrOYKqaKlYZa68r1E1MN3YYjMdV1tj+LqWKqeUj0Mtf5vtaVOdZ5QUwVUw0phlpDlGFBTDUsGI7EVNdZTB3/Hjz131kv5iHRy3W2rsRU62rOdfZciqnip6HWunL9xFTDkeFITHWd7c9iqrnTPCR6eS/4vmKqOdZ1FlPFVLHSUGtduX5iqqHbcCSmus72ZzFVTDUP2a/Mdd6D1pXPdV4QU8VUQ4qh1hBlWBBTDQu+r5hqPYup5ggx1Txkv3LfvAetK5/rORJTxVRDip/nZec6i6mGBd/XdXZ/fV9zhJhqvYip7pv3gnVljvUciamMj6mrpT+kp77btJdd5+uc/hylf98ufzVy9TXo8n2nXWeHyLv1ujIUi6liav9zyrR9Y9r+PG2u67LWpp0XfK6YKqYaUkQ+MVVMFVMNR2KqmCqmiqkimpgqpoqpYqp5Q0x1XvAcialiqiFFTDX8us5iqpgqpjrciKliqpgqpjqkianmWDFVtBFTPUdiKmKqmCqmus5iqpgqpjrciKliqgFbTBVTxVRzrAgkpoqpniMxFTFVTBVTXWcxVUw1dDvciKliqpgqpoqpziliqggkpoqpniMx1awnpvp5zf9K4bTv4a/bux/ik+tc5TqLqTW/b/rhq/McUfEfQ8TU3ucK9+1u/XxYV9ap52jmecE/nIupYqqoJFaKqWKqodt1FlOtZzFVTDXHmodELxHIuhJTxVTnBTFVTBU/RSXfw+/nfhi6XWcx1XUWU8VUMVVMFb1EIO9BzBvOZWKqmGpIEZXEVL+f72voFlPFVNdZTBVTxVQx1X4lpnoPCi3mDc+RmCqmGlJEJTHV72fd+1yxTUwVUx1uxFQxVZQTU0Uq84aYKqZ6jsRUxFRDqJjq97PuvbTFJ9fZ/R30fXf8zuaI3odSUU5M7X7fuvzVdetKTPUcOS+Is2Kqnyfyuc6eSy9PQ7frLKb6vmKqmOp9bh4SvUQg60pM9Rw5L4ipYqqYKiqJlWKqmGrodp3FVOtZTPUeNMdaB6KXCGRdialiqvOCmCqmip+iku/h93M/vLRdZzHVdRZTRTQx1ToQvcRU+xXmDecyMVVMNaSISmKq38/39bliqhjjOoup5ggxVZSzX4mp3oMii3nDcySmiqmGlAWb3Go7PrfiS8d1FlM7vTxPref0l3bS8zvtOtufPb8Tw9q059c9d07pNNs6D1pXFeb29N/Fc2SuE1PFVA+9mOo6i6liqpjqOoupYqqYKqaKqc4pYqqYal2JqdaVuU5MFVM99CKf6yymiqliquFITBVTxVQxVUx1ThG9nAetKzHVunJeEFPFVC9Pkc919lyKqV7ahiMxVUwVU8VUMdU8JHq5zr6vmCqmOi+IqWKqIUXkE1MdHsRUL23DkZgqpoqp3oNiqnUgeompopeYKqaKqWKqmAoAAAAAIKYCAAAAAIipAAAAAACIqQAAAAAAYioAAAAAgJgKAAAAACCmAgAAAACIqQAAAAAAYioAAAAAgJgKAAAAACCmuhAAAAAAAGIqAAAAAICYCgAAAAAgpgIAAAAAiKkAAAAAAGIqAAAAAICYCgAAAAAgpgIAAAAAIKYCAAAAAIipAAAAAABiKgAAAACAmAoAAAAAIKYCAAAAAIipAAAAAABiKgAAAAAAYioAAAAAgJgKAAAAACCmAgAAAACIqQAAAAAAYioAAAAAgJj6L96ve6lTv0v6jdxxrZKu8+p11eWep1/7iuu54r386fc9dZ09vzWf31P3t+Jz1Pn5nbZPps+2nfemitcgfc6Ztm8AgJgqpoqpYoyYKhKIqZ5fMVVMtU+KqWKqmCqmAoCYKqaKqWKqmCoSiKmeXzFVTBVFxFR7k5gqpgKAmCqmiqliqhgjpoqpnl8xVUwVU8VUMVVMFVMBQEwVU8VUMdWBR0wVU8VUMVVMFVPFVDFVTBVTHbABEFMLRz6HjD1DXvp17jLknfoenl//aFLh/np+7Ruuc6+YZY6Yd/3sV/lzu3AKAGKqmCqmijGeX4dcMdXza98QU+2TApLnV0z1LACAmCqmiqkOh55f68Ch2fNr3xBTxVTvD8+vmCqmAoCYKsaIqSKaKGIdiKmeX/uG6yymen94fsVUMRUAxFQxRkx1CHLIsA7EVHHC54qpYqo5QkwVU8VUABBTxZiA63zqv3MIEkV2DfGdh30x1X2zb4ipVd7n9kn7lZiaN497TwOAmCqmiqliqpgqptqfPb/2DddZPDFHeH7FVPsBAIipYqqY6hAkpjoAiKnum88VU8VUc4SYKqaKqQAgpoqpYqpDkCgipoqp4oTPFWPEVDHV9bNfiakAIKaKqWKqQ5AoIqaKqQ5pIp8YI6baJ10/MVVMBQAxVUwVU8XU4Hu+46/Drub+Zj0fO+5v0hqa9vymf7ek/ari54one75H5/0qfT2nf9+KkVQ4BQAxVUwVU8VUMVVMFVM9v2KqmCqmiqliqpgqpgKAmCqmiqlim5gqpoqpYqqY6nPFVDFVTBVTxVQAEFPFVDFVTBVT3V8xVUwVJ8RUMVVMFVPFVDEVAMRUMVVMFVPFVDFVTBVTxVQxVUwVU8VUMVVMBQAxVUwtfnjYMQyKqVfr+O7++ivV/kpw/+fXe7rP5077hwq/n/dCp++bFHEBQEw1pIipYqoY4/6KqWKq59f+IqaKqX4/MVVM9Z4GADFVTBVTDYNiqpgqpnp+7S9iqpjq9/NeEFO9pwFATBVtxFSxTUwVUx2aPb9iqpgqpoqp3gtiqpgKAGKqmCqmim1ih/srpiKmiqliqlhpbvd9xVQAEFMd0lxnsU1MdX/FVM+lOHH0fyviXmKq309MHTA/J+2xnf9RBwAx1ZBi+BXbxBj3V0wVUz2/YqqYKqb6/exXYqqYCgBiquFXbBNj3F8xVUz1/IqpYqqY6vcTU8VUMRUAxFQx1XU2lLm/YqpDs+dXTBVTxVS/n/eC+VlMBQAxVUx1ncU291dMFVM9v2KqmGo/FVPNk+ZnMRUA2sfUJ079LiLLXfI6dz4c7rjOYqrnfNdhLuld4T14b/lr0V3WVdLnTot8Fe+veePyHPk/QYipAIipYqrIIqaKqWKqmCqmiqliqpgqpoqpYqrPFVMBEFMdIsVUMdXhRkz1nIup3oNiqpgqpoqpYqqYKqYCgJgqpoqpYqqYKqaKqd6DYqqYKqaKqWKqmCqmAoCYKqaKqWKqmCqmiqliqpgqpoqpYqqYKmqKqQBQKaYCAAAAAIipAAAAAABiKgAAAAAAYioAAAAAgJgKAAAAACCmAgAAAACIqQAAAAAAYioAAAAAgJgKAAAAACCmAgAAAACIqQAAAAAAiKkAAAAAAGIqAAAAAICYCgAAAAAgpgIAAAAAiKkAAAAAAGIqAAAAAICYCgAAAACAmAoAAAAAIKYCAAAAAIipAAAAAABiKgAAAACAmAoAAAAAIKYCAAAAAIipAAAAAACIqQAAAAAAYioAAAAAgJgKAAAAACCmAgAAAACIqQAAAAAAYuo/vV/3x6V/7o4beepzT+lyf9PXc9L9PfXzpu1XXdZQ+nPU+TonPUfT9ufO19m8Yd6oujfZN7Kuc8W1VnF+dp3z92fzZP51tp6z17iYKqbaSB1uxFQxVUwVU8VUMVVMNW+YN8RUMVXkE1PFVPOkmGreEFPFVDHV4UZMFVMNZWKqmCqmiqnmDfOGmCqmiqliqvhknhRTzRtiqpgqpjrciKliqpgqphp+7c9iqnnDvCGmiqliqpgqPpknxVQxVUwVU8VUhxuHGzFVTBVTDb/2ZzHVvGHeEFPFVDFVTBWfxFQx1XoeFVOnbf5i6iXKbdps3Lc+17nL53Ye1Fxn69m+8Zl/nPLesp7dN+cj+3Pm9/V/vngWgdxf82SF++sfdcRUhxsx1eHGfTN0i3z2DcOvfUNMtW+YN+z39mff17whprq/nl8xVUwVNcVUhxuHG0O3fde+Yfi1b4ip9g3zhvtmfxZTxTYx1f31/IqpYqphQUw1JDvcGLrFVOvP8GvfEFO9t8wb7pvzkf1ZbBNT3V/Pr5gqphoWxFTryuHGdTYsWH+GX/uG6yymWs/um/OR/VlMFVPdX/uV9SymOtT7XEOyw42XmH1DTHWdDb/2De8t84b75v1hPQfet87Pfvq6OvXfmSftV9apmOrhE1MNyQ43hm77rn3D8GvfEFPtG+YN9835SEwVU8VU86T9SkwVUw0LYqp15XDjOhv2rT/Dr31DTPXesp7dN+cj+7OYKqaKVPYrMVVMNSyIqdaVw43rbFgQUw2/hl8x1XvLenbfnI/sz2KqmCpS2a/EVDHVod7nGpIdbrzE7BtiqutsPds3vLfMG+6b94f1LKY6L4hU5kkxVUxtvRk+IaYakj+xrlb/lb3V69nh5jq2b3T+XOvP8Lvrczvvz+nX2bxh3jBv1Njvp805nd9H/vH73D4pUmXtz13mus7rWUwVU8VUQ7LDjZgqpoqpYqqYKhKIqeYN84aY6lwmpoqpIpWYKqaKqYZQMdXhxuHG4UZMFVPFVDFVTBVTzRvmDTFVTBVTxVQxVUwVU61TMVVMdbhxuHG4ccgQUx2uxVQxVUw1b5g3xFQxVUwVU8VUMVVMtU7FVC9tMdXhxuFGTBVTHa7FVDFVTDVvmDfs9+YcMVVMFVPFVDHVOhVTRU0x1V/X9dd1/dXr3/4qt31DTPXXou0b9g33zX3Lv372SevKe/8zkc/+kv/X7a1nMVU88blesg437puYav05BDm8mjfsG+YN981+b5+0rsQ2MVVMFVPFVMOMl7Yh2eHGfXPIsP4cgrwHRQL7hnnDfbPf2yetK8+vmOr+iqliqpjqpS2mOty4b6KD9ecQJKaKBPYN+4b7Zr8351hXYqqYKqaKqWKqmCpqiqkON+6b6GD92TfEVDHVvmHfcN/s92KqmCqmiqnmSTFVTBVTvTzFVMOMw42YWuavZFp/DkFiqnnDvmHecN/s9/ZJ68p7v8/nur93yRlpWhQWU8VUMdUw4/6KqaKI9Wf4tT+LqfYN84b7JqZ6H4mp4pP9RUwVU8VU8URMta4cbuwHooj1Z/g1dIup9g3r2X0TU+2T1pX3vpgqplpXYqp4IqZ6yTrc2A/EVOvP8CummjfsG+YN981+b5+0rrz3xVQxVUwVU710fK4h2eHGfXPIEEUMFQ6v3vv2DfOGecN+b5+0rsQ20cv9FVPF1EEPy2o+10v25CY37f7u+G6nrmnSvmE43/M97MV91nPS/mzfMG+YN/L2ps7nhYpR0z5p3+0UU82TvedJMVVMFVPFVIcbhxsx1bAvpoqpYqqYat8wb4ipYqqYKk6IqWKqeVJMFVPFVDHVS9bhRkwVUw3nYqrhV0y1b5g3xFQxVUwVJ8RUMdU8KaaKqWKqmOol63AjpoqphnMx1fArpto3zBtiqpgqpooT9l0x1TwpptqvxFQxVUx1uBFTHaoM52Kq4VdMtW+YN8RUMVVMFVPtu2KqedK6sl+Vi6kAAAAAAMnEVAAAAAAAMRUAAAAAQEwFAAAAABBTAQAAAADEVAAAAAAAMRUAAAAAQEwFAAAAABBTAQAAAAAQUwEAAAAAxFQAAAAAADEVAAAAAEBMBQAAAAAQUwEAAAAAxFQAAAAAADEVAAAAAAAxFQAAAABATAUAAAAAEFMBAAAAAMRUAAAAAAAxFQAAAABATAUAAAAAEFMBAAAAAMRUFwIAAAAAQEwFAAAAABBTAQAAAADEVAAAAAAAMRUAAAAAQEwFAAAAABBTAQAAAADE1B3er3uppM/t8t1Ofd8nn7t6TSY9qNPWVZdrYE+87Bth195+1fu9v2M9ey9creerpPdg57kOABBTxVSHSDHVM+PQLAiIqWKqdSWm2sPEVDEVABBTHbTEVDFVnHBo9t3EVDHVuhJTvRfEVDEVAEBMFVPFVDFVTBVTxVQx1X4lpoqpYqqYCgAgpoqpYqqYKqaKqdaVmGq/ElPFVDFVTHXwAwDKxNRTw0yXzz0VCSpe56Qh3rry/J68zl3+UWLHz9uxb0w71NuvsqLmjmehcxwzH+SvZ/suACCm+lzRS0y1rjy/YqqYKqaKqWKqmCqmiqkAgJgqxjhEiqnWledXTBVTxVT7lZhqnhRTxVQAQEw1/DpEiqnWledXTBVTxVT7lZgqpoqpYioAIKYafh0ixVRxwvMrpoqpYqr9SkwVUz1vYioAIKaKIg6RTa9zl9hhXXl+xdS86yKm2q+sUzFVTLXvAgBiqijiECmmOixZV2KqQ71Dvf3KOhVTzQfWMwCAmOpQJaaKqdaVmCqmOtR7jsRUMVVMtZ4BAMRUhyrXWUy1rlxn8cSh3n5l37AfiKnWs5gKAIipYozoJaZaV66zmOpQL6aKqWKqmGrfte8CAK1j6teDv9hZ8a94Pvluq7/vtM+dFlPd33l/lTv9OjvUr99fdvzVdfuV92DV+LnjOid9rn1XTAUAxFQx1SFSTHV/xVQx1aFeTPUeFFPFVPuumAoAiKliqkOkmGpdialiqkO9mOo9KKaKqWKqmAoAiKliqsOcQ6Q4IaaKqQ71Yqr9yntQTBVTxVQAQEwVUx0iHSLFCTFVTHWoF1PtV96DYqqYKqYCAETE1C9/1ddfuT34uV3ihHXlr3KLnzX2jS7PpX3j8vxap+Jn4PNRca4DAMRUMVX0ElOtK4dcMVVMFVPtG55f69R9E1MBADFVTBW9xFQx1boSU8VUMdW+IaZap2KqmAoAIKY6VImpYqp1Jab6eWKq51dMtU7FVDEVAEBMdahyGBFTrSsx1aFeTBWp7M9iqpgqpjr4AQBiavGYmvS/dRjpfeizruYdIh3q+9xfkWreP+553qxT+2TdfzwDAMRUMVX0chgRU60rMdXPE1PFVDHVOhVTxVQxFQAQUx2qHEbEVOtKTHWoF1M9v/Zn69T8Yp8UUwEAMdWhyuHVoc+6ElMd6kUCkcr+7L3qPWOfFFMBADFVTHV4deizrsRUMUYkEKm898VU7xn7pJgKALSLqT8dSHYMLjt+l6Qh9NT37Xyduxz60u9v0l5y6jMq3t9T97LzYb3ioT4pUk1775s3vHu8B8VUAEBMFVPFVDFVTBVTxVQxVUy1rswb3j3eg2IqACCmiqkON2KqmCqmiqliqpgqpoqpYqqYKqYCAGKqmOpwI6aKqWKqmGrfEFPFVDFVTBVTxVQAQEwVUx1uRBEx1YFWTBVTxVQxVUwVU8VUMRUAEFMBAAAAABBTAQAAAADEVAAAAAAAMRUAAAAAQEwFAAAAABBTAQAAAADEVAAAAAAAMRUAAAAAADEVAAAAAEBMBQAAAAAQUwEAAAAAxFQAAAAAADEVAAAAAEBMBQAAAAAQUwEAAAAAxFQAAAAAAMRUAAAAAAAxFQAAAABATAUAAAAAEFMBAAAAAMRUAAAAAAAxFQAAAABATAUAAAAAQEwFAAAAAPh//gZFPTu5uGIZdgAAAABJRU5ErkJggg==\";\n","/**\n * Read-path sanitizer for replayed conversation history (issue: orphaned\n * tool outputs brick a session).\n *\n * Conversation truth is persisted as a flat list of SDK history items in\n * `session_history_items` and replayed verbatim into the model on every turn.\n * The OpenAI Responses API rejects the whole request (HTTP 400) when that list\n * violates its tool-call pairing rules — most destructively:\n *\n *   `400 No tool call found for function call output with call_id <X>`\n *\n * when a `function_call_result` (a.k.a. function_call_output) has no matching\n * `function_call` earlier in the list. Because the corrupt item is replayed on\n * every subsequent turn, one orphaned output permanently bricks the session\n * across revival — it stays dead until the row is hand-deleted.\n *\n * This module is the reliability net: before history items are sent to the\n * model they pass through `sanitizeHistoryItemsForModel`, which removes any\n * item that would make the request invalid. It mirrors the SDK's own\n * `dropOrphanToolCalls` continuation logic (which only runs over the SDK's\n * in-memory `state.history`, not over rows we reload from the database) so a\n * reloaded history is shaped exactly like a freshly-generated one.\n *\n * It is a pure function over plain JSON item shapes (no SDK import, no I/O) so\n * it is cheap to unit-test exhaustively. It NEVER mutates its input items and\n * NEVER touches the stored rows — only the in-memory copy sent to the model is\n * filtered, keeping the persisted audit trail intact.\n */\n\nimport { SCREENSHOT_FAILURE_CARD_IMAGE_URL } from \"./screenshot-error-card\";\nimport {\n  boundModelToolOutputItems,\n  DEFAULT_MODEL_TOOL_OUTPUT_TRUNCATION_TOKENS,\n} from \"@opengeni/codex\";\n\n/** A history item is any JSON object; we only inspect a few discriminator fields. */\nexport type HistoryItem = Record<string, unknown>;\n\n/**\n * @deprecated Model-visible history is append-only outside the explicit\n * durable compaction transition. This compatibility identity function performs\n * no elision and returns the exact input array with every item untouched and in\n * its original order.\n */\nexport function elideSupersededViewImagePairs<T extends HistoryItem>(items: readonly T[]): T[] {\n  return items as T[];\n}\n\n/**\n * Tool-call item types and the result-item type that settles them. Kept in\n * sync with the SDK's `TOOL_CALL_RESULT_TYPE_BY_CALL_TYPE`; `function_call` is\n * the one observed live, the rest are included so the same pairing logic holds\n * for every tool-call kind the SDK can emit.\n */\nexport const TOOL_CALL_RESULT_TYPE_BY_CALL_TYPE: Record<string, string> = {\n  function_call: \"function_call_result\",\n  computer_call: \"computer_call_result\",\n  shell_call: \"shell_call_output\",\n  apply_patch_call: \"apply_patch_call_output\",\n  // Progressive connector disclosure (codex tool_search): a replayed\n  // `tool_search_call` must be settled by its `tool_search_output` exactly like a\n  // function call — an unpaired one 400s the store:false replay. The SDK pairs\n  // these OUTSIDE its own TOOL_CALL_RESULT_TYPE_BY_CALL_TYPE (sessionPersistence's\n  // hasToolSearchCallId), so we mirror the semantics here; the correlation id can\n  // additionally ride providerData (see callIdOf).\n  tool_search_call: \"tool_search_output\",\n};\n\nconst RESULT_TYPE_BY_CALL_TYPE = TOOL_CALL_RESULT_TYPE_BY_CALL_TYPE;\nconst RESULT_TYPES = new Set(Object.values(RESULT_TYPE_BY_CALL_TYPE));\n\nfunction itemType(item: unknown): string | undefined {\n  if (!item || typeof item !== \"object\") {\n    return undefined;\n  }\n  const type = (item as { type?: unknown }).type;\n  return typeof type === \"string\" ? type : undefined;\n}\n\n/**\n * Correlation id for a tool call / result. The SDK's canonical history shape\n * uses camelCase `callId`; the raw Responses wire shape uses snake_case\n * `call_id`. Persisted rows are the SDK shape, but we accept either so a row\n * written by any code path (or hand-repaired) still correlates.\n */\nfunction callIdOf(item: unknown): string | undefined {\n  if (!item || typeof item !== \"object\") {\n    return undefined;\n  }\n  const record = item as { callId?: unknown; call_id?: unknown; providerData?: unknown };\n  if (typeof record.callId === \"string\" && record.callId.length > 0) {\n    return record.callId;\n  }\n  if (typeof record.call_id === \"string\" && record.call_id.length > 0) {\n    return record.call_id;\n  }\n  // tool_search items may carry their correlation id ONLY in providerData\n  // (mirrors the SDK's getToolSearchProviderCallId: providerData.call_id ??\n  // providerData.callId ?? call_id ?? callId). Harmless for other item kinds —\n  // their ids never live there.\n  const provider = record.providerData as\n    | { call_id?: unknown; callId?: unknown }\n    | null\n    | undefined;\n  if (provider && typeof provider === \"object\") {\n    if (typeof provider.call_id === \"string\" && provider.call_id.length > 0) {\n      return provider.call_id;\n    }\n    if (typeof provider.callId === \"string\" && provider.callId.length > 0) {\n      return provider.callId;\n    }\n  }\n  return undefined;\n}\n\n/**\n * Sanitize a replayed history item list into a sequence the Responses API\n * accepts. Pure: returns a new array of the same item references in order,\n * with invalid items omitted. Valid histories come back byte-identical\n * (same references, same order).\n *\n * Rules, each motivated by a concrete 400 the API raises:\n *\n *  1. Drop every tool-call RESULT whose matching tool CALL does not appear\n *     earlier in the list. This is the session-bricking orphan: a\n *     `function_call_result` with no preceding `function_call` of the same\n *     `call_id`. (\"No tool call found for function call output…\")\n *\n *  2. Drop every tool CALL that has no matching RESULT anywhere after it.\n *     The Responses API requires each tool call to be settled by its output\n *     before the conversation can continue; a dangling call left in replayed\n *     history 400s with \"No tool output found for function call…\". Dropping\n *     the dangling call (rather than synthesizing a fake output) is what the\n *     SDK itself does for in-memory continuation, so a reloaded history is\n *     shaped identically. The matching result, if it later exists, is kept;\n *     only genuinely unpaired calls are removed.\n *\n *  3. Drop any `reasoning` item that immediately precedes (across a run of\n *     reasoning items) a dropped tool call. The Responses API ties an\n *     encrypted reasoning item to the tool call it produced; a reasoning item\n *     orphaned by rule 2 trips \"Item 'rs_…' of type 'reasoning' was provided\n *     without its required following item\". Mirrors the SDK's\n *     `dropReasoningItemsPrecedingDroppedCalls`.\n *\n * A `call_id` is paired only when BOTH a call and a result of the matching\n * types exist with that id, the call appearing before the result. Calls and\n * results that satisfy that survive untouched.\n */\nexport function sanitizeHistoryItemsForModel<T extends HistoryItem>(\n  items: readonly T[],\n  toolOutputTruncationTokens = DEFAULT_MODEL_TOOL_OUTPUT_TRUNCATION_TOKENS,\n): T[] {\n  if (items.length === 0) {\n    return [];\n  }\n\n  // Pre-scan: for every (call-type, call_id) record the index of a RESULT that\n  // appears strictly after the call. A call is valid only when such a result\n  // exists; a result is valid only when its call appears strictly before it.\n  // We resolve pairs in order so ordering is enforced both ways (a result that\n  // precedes its call is an orphan, and a call whose only result precedes it is\n  // dangling).\n  const dropped = new Set<number>();\n\n  // For each result-type, the call_ids of CALLs we have seen so far that are\n  // still waiting to be settled by a following result.\n  const openCallIdsByResultType = new Map<string, Set<string>>();\n\n  items.forEach((item, index) => {\n    const type = itemType(item);\n    const callId = callIdOf(item);\n    if (!type || !callId) {\n      return;\n    }\n    const callResultType = RESULT_TYPE_BY_CALL_TYPE[type];\n    if (callResultType) {\n      const open = openCallIdsByResultType.get(callResultType) ?? new Set<string>();\n      open.add(callId);\n      openCallIdsByResultType.set(callResultType, open);\n      return;\n    }\n    if (RESULT_TYPES.has(type)) {\n      const open = openCallIdsByResultType.get(type);\n      if (open && open.has(callId)) {\n        // Settles a call we have already seen — keep both, close the call.\n        open.delete(callId);\n      } else {\n        // Rule 1: result whose call is absent or appears later — the orphan.\n        dropped.add(index);\n      }\n    }\n  });\n\n  // Rule 2: any call still open after the full scan has no result after it —\n  // a dangling call the API rejects. Drop those calls. We re-walk to find the\n  // indices of the still-open call_ids (the last unmatched call per id).\n  const stillOpen = new Map<string, Set<string>>();\n  for (const [resultType, open] of openCallIdsByResultType) {\n    if (open.size > 0) {\n      stillOpen.set(resultType, new Set(open));\n    }\n  }\n  if (stillOpen.size > 0) {\n    for (let index = items.length - 1; index >= 0; index -= 1) {\n      const item = items[index];\n      const type = itemType(item);\n      const callId = callIdOf(item);\n      if (!type || !callId) {\n        continue;\n      }\n      const resultType = RESULT_TYPE_BY_CALL_TYPE[type];\n      if (!resultType) {\n        continue;\n      }\n      const open = stillOpen.get(resultType);\n      if (open && open.has(callId)) {\n        dropped.add(index);\n        open.delete(callId);\n      }\n    }\n  }\n\n  if (dropped.size > 0) {\n    // Rule 3: drop reasoning items stranded by a dropped tool call. A reasoning\n    // item is stranded when the next non-reasoning item after it is dropped.\n    for (let index = 0; index < items.length; index += 1) {\n      if (dropped.has(index) || itemType(items[index]) !== \"reasoning\") {\n        continue;\n      }\n      for (let next = index + 1; next < items.length; next += 1) {\n        if (itemType(items[next]) === \"reasoning\") {\n          continue;\n        }\n        if (dropped.has(next)) {\n          dropped.add(index);\n        }\n        break;\n      }\n    }\n  }\n\n  const paired =\n    dropped.size === 0 ? items.slice() : items.filter((_item, index) => !dropped.has(index));\n  return boundModelToolOutputItems(\n    paired.map(stripInternalResumeMarker),\n    toolOutputTruncationTokens,\n  );\n}\n\n/**\n * Internal marker stamping machine-generated resume/continuation messages\n * (turn-resumed notices, goal continuations) so compaction housekeeping can\n * recognize them in STORED history. Lives here (not context-compaction, which\n * imports from this module) so the wire sanitizer below can strip it without\n * an import cycle; context-compaction re-exports it.\n */\nexport const INTERNAL_RESUME_MESSAGE_MARKER = \"opengeni_internal_resume\";\n\n/**\n * Remove the {@link INTERNAL_RESUME_MESSAGE_MARKER} providerData key from a\n * single item before it reaches ANY model wire. Pure + non-mutating; returns\n * the SAME reference when there is nothing to strip (keeping the common path\n * byte-identical, mirroring {@link stripReasoningEncryptedContent}).\n *\n * WHY. The @openai/agents SDK serializes providerData keys verbatim into the\n * request item, and strict Responses backends reject unknown per-item fields —\n * observed in production as `400 Unknown parameter:\n * 'input[N].opengeni_internal_resume'`, which deterministically failed every\n * turn whose replayed history contained a marked resume message (the marker is\n * durable in conversation truth, so retries could never succeed). Detection\n * (isInternalResumeMessage) reads STORED items and also keeps a text-prefix\n * fallback, so stripping at the wire degrades housekeeping gracefully and\n * never the turn.\n */\nexport function stripInternalResumeMarker<T extends HistoryItem>(item: T): T {\n  const providerData = (item as Record<string, unknown>).providerData;\n  if (\n    !providerData ||\n    typeof providerData !== \"object\" ||\n    !(INTERNAL_RESUME_MESSAGE_MARKER in (providerData as Record<string, unknown>))\n  ) {\n    return item;\n  }\n  const { [INTERNAL_RESUME_MESSAGE_MARKER]: _dropped, ...rest } = providerData as Record<\n    string,\n    unknown\n  >;\n  const next: Record<string, unknown> = { ...(item as Record<string, unknown>) };\n  if (Object.keys(rest).length > 0) {\n    next.providerData = rest;\n  } else {\n    delete next.providerData;\n  }\n  return next as T;\n}\n\n/**\n * Drop the account/org-bound `reasoning.encrypted_content` blob from a single\n * history item, preserving everything else (the visible chain-of-thought text in\n * `summary`/`content`, and every non-reasoning field). Pure + non-mutating: when\n * there is nothing to strip the SAME reference is returned (so the common,\n * same-account path stays byte-identical); otherwise a shallow clone is returned.\n *\n * WHY. A codex-subscription turn round-trips `reasoning.encrypted_content` — an\n * opaque blob minted by the ChatGPT/Codex backend that is bound to the account\n * (org) that produced it. After a manual switch from codex account A to B, the\n * carried history items still hold A-minted blobs; replaying them into a turn\n * running on B is rejected (400). The blob is purely a chain-of-thought\n * continuity optimization — dropping it costs at most one turn of lost CoT\n * continuity and never any message content.\n *\n * USED FOR `compaction` items only on the history-items read path: a foreign\n * `compaction` summary carries account-bound `encrypted_content` but its summary\n * is real conversation content that must be preserved, so we strip only the blob\n * (we do NOT drop the whole item). Foreign `reasoning` items are instead dropped\n * WHOLESALE by the caller (id + blob), because the Responses backend validates\n * the foreign `rs_…` id and rejects a reasoning item that has a foreign id and no\n * encrypted_content (so blanking the blob alone is not enough — see\n * {@link applyCodexHistoryStrip}).\n *\n * The SDK's Responses converter reads the blob via `providerData.encryptedContent`\n * (camel) or `providerData.encrypted_content` (snake); persisted rows use the\n * snake form, but we delete both casings defensively. We also clear a top-level\n * `encrypted_content` (the `compaction`-item shape) belt-and-braces — that blob\n * is likewise source-bound. Only `reasoning` and `compaction` items are touched;\n * messages, tool calls, and tool outputs pass through untouched by reference.\n */\nexport function stripReasoningEncryptedContent<T extends HistoryItem>(item: T): T {\n  const type = itemType(item);\n  if (type !== \"reasoning\" && type !== \"compaction\") {\n    return item;\n  }\n  const record = item as Record<string, unknown>;\n  const providerData = record.providerData;\n  const providerHasBlob =\n    !!providerData &&\n    typeof providerData === \"object\" &&\n    (\"encryptedContent\" in (providerData as Record<string, unknown>) ||\n      \"encrypted_content\" in (providerData as Record<string, unknown>));\n  const topLevelHasBlob = \"encrypted_content\" in record;\n  if (!providerHasBlob && !topLevelHasBlob) {\n    // Nothing encrypted to strip — return the same reference (byte-identical).\n    return item;\n  }\n  const clone: Record<string, unknown> = { ...record };\n  if (providerHasBlob) {\n    const providerClone = { ...(providerData as Record<string, unknown>) };\n    delete providerClone.encryptedContent;\n    delete providerClone.encrypted_content;\n    clone.providerData = providerClone;\n  }\n  if (topLevelHasBlob) {\n    delete clone.encrypted_content;\n  }\n  return clone as unknown as T;\n}\n\n/**\n * Neutralize the account/org-bound identity of EVERY `reasoning` item embedded\n * in a serialized RunState JSON string, returning the re-serialized string. Pure:\n * a parse failure or a no-op returns the SAME string reference (so an unchanged\n * or non-codex run-state replays byte-for-byte).\n *\n * WHY (HOLE C — approval replay). An approval decision resumes the serialized\n * RunState blob. That blob round-trips `reasoning.encrypted_content` minted by the ChatGPT/Codex\n * backend (bound to the freezing account/org — a foreign account 400s it) AND the\n * foreign `rs_…` reasoning ids the Responses backend validates (rejected once the\n * blob is gone). Unlike `session_history_items`, the blob carries NO per-item\n * producer tag, so foreign-ness cannot be decided per item; the worker instead\n * records the FREEZING codex account on the run-state row and calls this only when\n * the resuming turn's codex account DIFFERS from it. When the accounts differ we\n * conservatively neutralize every reasoning item: delete its provider id and its\n * `encrypted_content` (both casings, in `providerData`). The visible reasoning\n * `content`/`summary` and every message / tool-call / tool-output item are left\n * intact (message and tool content are never account-bound).\n *\n * A reasoning item with no id and no encrypted_content is exactly the shape the\n * production Azure path already sends (see `stripProviderItemIdsFilter`), so it\n * deserializes and replays cleanly. Reasoning items live in several places in the\n * blob — `originalInput` (when an array), each `modelResponses[].output`,\n * `lastModelResponse.output`, and the `generatedItems` wrappers (`reasoning_item`\n * → `rawItem`) — and we scrub all of them. `compaction` items are deliberately\n * left untouched: their `encrypted_content` is a protocol-REQUIRED field whose\n * removal would fail the SDK's run-state schema validation on deserialize.\n */\nexport function stripReasoningIdentityFromSerializedRunState(serialized: string): string {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(serialized);\n  } catch {\n    // Not JSON (e.g. a cleared-state sentinel handled elsewhere): forward as-is.\n    return serialized;\n  }\n  if (!parsed || typeof parsed !== \"object\") {\n    return serialized;\n  }\n  let changed = false;\n  const scrubReasoning = (candidate: unknown): void => {\n    if (!candidate || typeof candidate !== \"object\") {\n      return;\n    }\n    const record = candidate as Record<string, unknown>;\n    if (record.type !== \"reasoning\") {\n      return;\n    }\n    if (\"id\" in record) {\n      delete record.id;\n      changed = true;\n    }\n    const providerData = record.providerData;\n    if (providerData && typeof providerData === \"object\") {\n      const provider = providerData as Record<string, unknown>;\n      if (\"encryptedContent\" in provider) {\n        delete provider.encryptedContent;\n        changed = true;\n      }\n      if (\"encrypted_content\" in provider) {\n        delete provider.encrypted_content;\n        changed = true;\n      }\n    }\n    if (\"encrypted_content\" in record) {\n      delete record.encrypted_content;\n      changed = true;\n    }\n  };\n  const scrubItemArray = (arr: unknown): void => {\n    if (Array.isArray(arr)) {\n      for (const item of arr) {\n        scrubReasoning(item);\n      }\n    }\n  };\n  const root = parsed as Record<string, unknown>;\n  // 1. originalInput is either a string (no items) or an array of protocol items.\n  scrubItemArray(root.originalInput);\n  // 2. generatedItems are SDK run-item wrappers; a `reasoning_item` carries the\n  //    protocol reasoning shape under `rawItem`.\n  if (Array.isArray(root.generatedItems)) {\n    for (const wrapper of root.generatedItems) {\n      if (\n        wrapper &&\n        typeof wrapper === \"object\" &&\n        \"rawItem\" in (wrapper as Record<string, unknown>)\n      ) {\n        scrubReasoning((wrapper as Record<string, unknown>).rawItem);\n      }\n    }\n  }\n  // 3. modelResponses[].output and lastModelResponse.output hold protocol items.\n  const scrubResponseOutput = (response: unknown): void => {\n    if (response && typeof response === \"object\") {\n      scrubItemArray((response as Record<string, unknown>).output);\n    }\n  };\n  if (Array.isArray(root.modelResponses)) {\n    for (const response of root.modelResponses) {\n      scrubResponseOutput(response);\n    }\n  }\n  scrubResponseOutput(root.lastModelResponse);\n  if (!changed) {\n    return serialized;\n  }\n  return JSON.stringify(parsed);\n}\n\n/**\n * Neutralize tool_search items IN PLACE in a serialized RunState blob for a\n * cross-account codex resume — the run-state sibling of\n * `applyCodexHistoryStrip`'s tool_search rule, but COUNT-PRESERVING (HOLE E: the\n * blob path's reconcile watermark counts the blob's history length, so items\n * must never be removed — only mutated, exactly like the reasoning\n * neutralization above).\n *\n * The hazard: on deserialize, the SDK re-runs the registered CLIENT tool_search\n * execute callback per frozen pair (`rehydrateToolSearchRuntimeTools`) and\n * THROWS a UserError when the re-run's runtime-tool keys mismatch the serialized\n * expectation — which is exactly what happens when the RESUMING account's\n * connector pool differs from the FREEZING account's. The SDK skips that\n * rehydration entirely for `execution === 'server'` calls, so flipping the\n * frozen pairs' `execution` to `\"server\"` in place defuses the throw without\n * touching counts, ids, pairing, or content. The flipped shape is wire-safe:\n * LIVE-VERIFIED against /codex/responses — a replayed server-execution pair is\n * accepted (200) and its disclosure still holds. The account-bound `tsc_…` id is\n * separately stripped by the codex transport normalizer (all input item ids).\n *\n * Walks the same blob locations as {@link stripReasoningIdentityFromSerializedRunState}:\n * `originalInput` (array form), `generatedItems` (SDK run-item wrappers — the\n * raw shape under `rawItem`), every `modelResponses[].output`, and\n * `lastModelResponse.output`. Returns the input string unchanged when nothing\n * matched.\n */\nexport function neutralizeToolSearchItemsInSerializedRunState(serialized: string): string {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(serialized);\n  } catch {\n    return serialized;\n  }\n  if (!parsed || typeof parsed !== \"object\") {\n    return serialized;\n  }\n  let changed = false;\n  const neutralize = (candidate: unknown): void => {\n    if (!candidate || typeof candidate !== \"object\") {\n      return;\n    }\n    const record = candidate as Record<string, unknown>;\n    if (record.type !== \"tool_search_call\" && record.type !== \"tool_search_output\") {\n      return;\n    }\n    if (record.execution !== \"server\") {\n      record.execution = \"server\";\n      changed = true;\n    }\n  };\n  const neutralizeArray = (arr: unknown): void => {\n    if (Array.isArray(arr)) {\n      for (const item of arr) {\n        neutralize(item);\n      }\n    }\n  };\n  const root = parsed as Record<string, unknown>;\n  neutralizeArray(root.originalInput);\n  if (Array.isArray(root.generatedItems)) {\n    for (const wrapper of root.generatedItems) {\n      if (\n        wrapper &&\n        typeof wrapper === \"object\" &&\n        \"rawItem\" in (wrapper as Record<string, unknown>)\n      ) {\n        neutralize((wrapper as Record<string, unknown>).rawItem);\n      }\n    }\n  }\n  const neutralizeResponseOutput = (response: unknown): void => {\n    if (response && typeof response === \"object\") {\n      neutralizeArray((response as Record<string, unknown>).output);\n    }\n  };\n  if (Array.isArray(root.modelResponses)) {\n    for (const response of root.modelResponses) {\n      neutralizeResponseOutput(response);\n    }\n  }\n  neutralizeResponseOutput(root.lastModelResponse);\n  if (!changed) {\n    return serialized;\n  }\n  return JSON.stringify(parsed);\n}\n\n/**\n * Normalize `computer_call` items so each carries EXACTLY ONE of the two\n * mutually-exclusive action fields the provider accepts.\n *\n * The OpenAI Agents SDK 0.11.6 `computer_call` schema (protocol.mjs) carries\n * BOTH the legacy singular `action` and the GA batched `actions`, each\n * `.optional()`, and only requires \"at least one\" (its superRefine errors only\n * when both are absent). The Azure computer-use endpoint is stricter: it\n * requires EXACTLY one and rejects the whole request with\n *\n *   `400 Computer call input must include exactly one of `action` or `actions`.`\n *\n * when an emitted `computer_call` carries both (observed live: a screenshot\n * call carrying `action:{type:\"screenshot\"}` AND `actions:[{type:\"screenshot\"}]`).\n *\n * Which singular do we keep? LIVE-PROVEN against the deployed Azure deployment\n * (gpt-5.6-sol-2026-04-24): for gpt-5.6-sol the SDK serializes the GA computer tool as\n * `{type:\"computer\"}` (not the legacy `computer_use_preview`), and that GA tool\n * accepts ONLY the batched plural `actions`. Probing all three shapes:\n *   - `action`-only  -> 400 \"exactly one of action or actions\" (STILL rejected)\n *   - `actions`-only -> passes the action/actions structural validation\n *   - both           -> 400 \"exactly one …\"\n * The \"exactly one\" wording is misleading: only the `actions`-only form is\n * accepted by the GA tool. So when both are present we KEEP `actions` (the GA\n * batched plural) and DROP `action`. Calls that already carry exactly one field\n * — or the legacy `action`-only form — pass through untouched (this transform's\n * sole job is to resolve the both-present conflict, not to rewrite singulars).\n *\n * Pure and non-mutating: only the conflicting item(s) are cloned; every other\n * item passes through by reference (byte-identical). Unlike\n * {@link sanitizeHistoryItemsForModel} (which only *filters* items), this is a\n * read-path *transform* of a single item's shape.\n */\nexport function normalizeComputerCallActions<T extends HistoryItem>(items: readonly T[]): T[] {\n  let changed = false;\n  const out = items.map((item) => {\n    if (itemType(item) !== \"computer_call\") {\n      return item;\n    }\n    const record = item as Record<string, unknown>;\n    const hasAction = record.action !== undefined && record.action !== null;\n    const hasActions = Array.isArray(record.actions) && (record.actions as unknown[]).length > 0;\n    if (hasAction && hasActions) {\n      changed = true;\n      const { action: _droppedAction, ...rest } = record;\n      return rest as unknown as T;\n    }\n    return item;\n  });\n  return changed ? out : items.slice();\n}\n\n/**\n * Rewrite EVERY `computer_call` item in a serialized Responses request body to\n * the ACTIONS-ONLY shape the GA Azure computer tool accepts, mutating the parsed\n * JSON object in place and returning whether anything changed.\n *\n * WHY THIS LIVES AT THE WIRE LEVEL (not the input-item filter). The input-item\n * normalizer above ({@link normalizeComputerCallActions}, wired as a\n * callModelInputFilter) runs BEFORE the SDK's responses converter\n * (`convertAgentItemToResponsesInput`). That converter then re-derives the wire\n * payload from the item: when `actions` is present it emits BOTH\n * `{action: ..., actions: [...]}`, and when only `action` is present it emits\n * `action`-only. It can NEVER emit actions-only. Probed live against the\n * deployed Azure gpt-5.6-sol-2026-04-24 GA computer tool (`{type:\"computer\"}`):\n *   - `action`-only  -> 400 \"Computer call input must include exactly one of\n *                       `action` or `actions`.\" (rejected)\n *   - both           -> 400 same message (rejected)\n *   - `actions`-only -> passes the action/actions structural validation\n * So neither the input-filter nor the converter can produce an accepted body.\n * The ONLY seam that sees — and can rewrite — the final serialized JSON is a\n * custom `fetch` on the OpenAI client (it runs after the converter and after\n * `responses.create` serialization). This function is that rewriter's core.\n *\n * It collapses each computer_call to actions-only: it prefers an existing\n * non-empty `actions` array, else wraps the singular `action` into\n * `actions:[action]`, then deletes `action`. A computer_call with neither field\n * is left untouched (nothing to derive; let the provider report it).\n *\n * Mutates `body` in place (the caller has already JSON.parsed a private copy of\n * the request body). Returns `true` iff at least one computer_call was changed.\n */\nexport function rewriteComputerCallsToActionsOnly(body: unknown): boolean {\n  if (!body || typeof body !== \"object\") {\n    return false;\n  }\n  const input = (body as Record<string, unknown>).input;\n  if (!Array.isArray(input)) {\n    return false;\n  }\n  let changed = false;\n  for (const item of input) {\n    if (!item || typeof item !== \"object\") {\n      continue;\n    }\n    const record = item as Record<string, unknown>;\n    if (record.type !== \"computer_call\") {\n      continue;\n    }\n    const existingActions =\n      Array.isArray(record.actions) && (record.actions as unknown[]).length > 0\n        ? (record.actions as unknown[])\n        : undefined;\n    const actions =\n      existingActions ??\n      (record.action !== undefined && record.action !== null ? [record.action] : undefined);\n    if (actions === undefined) {\n      // Neither action nor actions present: nothing to normalize.\n      continue;\n    }\n    const hadAction = \"action\" in record;\n    const actionsAlreadyExact = existingActions !== undefined && !hadAction;\n    if (actionsAlreadyExact) {\n      // Already actions-only with a non-empty array — leave byte-identical.\n      continue;\n    }\n    delete record.action;\n    record.actions = actions;\n    changed = true;\n  }\n  return changed;\n}\n\n/**\n * Backstop for the empty `computer_call_output` image_url: walk the `input` array of\n * a serialized Responses request body and replace any `computer_call_output` item\n * whose `output.image_url` is empty/missing with a LEGIBLE \"screen capture failed\"\n * error card ({@link SCREENSHOT_FAILURE_CARD_IMAGE_URL}).\n *\n * WHY A CARD, NOT A BLANK. An empty `image_url` reaches this seam ONLY when the\n * computer op genuinely FAILED to produce a screen: agents-core's `toolExecution.mjs`\n * catch sets `output = ''` when the action OR the follow-up `computer.screenshot()`\n * throws, building `{type:\"computer_call_output\",output:{type:\"computer_screenshot\",\n * image_url:\"\"}}`. Azure then rejects the whole request with\n * `400 Invalid 'input[N].output.image_url'`. The previous fix substituted a 1×1\n * TRANSPARENT placeholder to dodge the 400 — but that reaches the model as a\n * plausible BLANK DESKTOP it confidently reports (\"the screen appears blank/empty\"),\n * turning a hard capture FAILURE into a silent, wrong observation. That is the worst\n * failure mode for computer use, and it is exactly what the 0.1.3 TCC-denied incident\n * produced. Substituting a legible error card instead makes the failure REACH THE\n * MODEL as an error (the only channel the hosted `computer_use_preview` protocol has\n * is the image), so the model stops and tells the user rather than hallucinating.\n *\n * WHY THIS IS SAFE (empty = failure, never an intentional blank). Post-af289e3 the\n * intentional-blank cases carry a NON-empty data URI already: agents-core's\n * tool-approval-rejection screenshot is its own non-empty 1×1 placeholder, and the\n * SandboxComputer action-timeout now warn+returns to a REAL screenshot rather than an\n * empty output. So an EMPTY image_url at this seam is unambiguously a capture/interact\n * FAILURE — the error card is the correct substitution for every empty case, and this\n * function never touches a non-empty (real screenshot OR intentional blank) output.\n *\n * The failure REASON (permission denied / null image / timeout / display down) is not\n * on the card; it is logged worker-side by `NativeDesktopComputer.screenshot()`.\n *\n * Mutates `body` in place (the caller has already JSON.parsed a private copy).\n * Returns `true` iff at least one image_url was replaced.\n */\nexport function rewriteEmptyComputerCallOutputImageUrls(body: unknown): boolean {\n  if (!body || typeof body !== \"object\") {\n    return false;\n  }\n  const input = (body as Record<string, unknown>).input;\n  if (!Array.isArray(input)) {\n    return false;\n  }\n  let changed = false;\n  for (const item of input) {\n    if (!item || typeof item !== \"object\") {\n      continue;\n    }\n    const record = item as Record<string, unknown>;\n    if (record.type !== \"computer_call_output\") {\n      continue;\n    }\n    const output = record.output;\n    if (!output || typeof output !== \"object\") {\n      continue;\n    }\n    const out = output as Record<string, unknown>;\n    const imageUrl = out.image_url;\n    // Replace the image_url when it is not a non-empty string (covers: \"\", null,\n    // undefined, missing) — an empty output is always a genuine capture failure, so\n    // it becomes the legible error card, never a silent blank.\n    if (typeof imageUrl !== \"string\" || imageUrl.length === 0) {\n      out.image_url = SCREENSHOT_FAILURE_CARD_IMAGE_URL;\n      changed = true;\n    }\n  }\n  return changed;\n}\n\n/**\n * Wrap a `fetch` so every outbound OpenAI Responses request body that contains a\n * `computer_call` is rewritten to the ACTIONS-ONLY shape (see\n * {@link rewriteComputerCallsToActionsOnly}) before it reaches the network, AND\n * any `computer_call_output` item with an empty/missing `output.image_url` is\n * patched with the 1×1 transparent PNG placeholder (see\n * {@link rewriteEmptyComputerCallOutputImageUrls}).\n *\n * Installed as the `fetch:` option on the Azure OpenAI client, this is the\n * lowest reachable seam — below the agents-core input filter and below the SDK's\n * responses converter — so it neutralizes the converter's both-fields synthesis\n * regardless of what the input item carried, and backstops the action-timeout\n * empty image_url regardless of how it was produced.\n *\n * Surgical and cheap: it only parses the body when it is a string that contains\n * the prefix `\"computer_call` (matching both `\"computer_call\"` action items and\n * `\"computer_call_output\"` result items). Every other request — non-computer-use\n * turns, streaming SSE responses, non-string bodies — forwards untouched, the\n * SAME `init` reference, so streaming and other providers are unaffected. A JSON\n * parse failure or a no-op rewrite also forwards the original `init` unchanged.\n *\n * Typed structurally (the `(input, init) => Promise<Response>` call signature)\n * rather than as the DOM `typeof fetch` so it omits the `preconnect` static the\n * global type carries; this matches the OpenAI SDK's `Fetch` option, which only\n * needs the call signature. The wiring site passes it as the client `fetch:`.\n */\ntype FetchLike = (\n  input: Parameters<typeof fetch>[0],\n  init?: Parameters<typeof fetch>[1],\n) => Promise<Response>;\n\nexport function computerCallNormalizingFetch(base: FetchLike): FetchLike {\n  return (input, init) => {\n    // Match any request that mentions either `computer_call` (the action call) or\n    // `computer_call_output` (the output/result item). Both strings begin with\n    // `\"computer_call` so a single prefix-substring check covers both.\n    if (init && typeof init.body === \"string\" && init.body.includes('\"computer_call')) {\n      try {\n        const parsed = JSON.parse(init.body) as unknown;\n        const changed1 = rewriteComputerCallsToActionsOnly(parsed);\n        const changed2 = rewriteEmptyComputerCallOutputImageUrls(parsed);\n        if (changed1 || changed2) {\n          return base(input, { ...init, body: JSON.stringify(parsed) });\n        }\n      } catch {\n        // Non-JSON or parse failure: forward the request unchanged.\n      }\n    }\n    return base(input, init);\n  };\n}\n","// Progressive MCP disclosure for the ChatGPT/Codex backend — parity with how the\n// Codex CLI surfaces its ~217 `codex_apps` connector tools WITHOUT paying their\n// schemas in every turn's context, while applying the same bounded search seam to\n// other selected MCP servers.\n//\n// WHY. OpenGeni connects MCP servers as CLIENTs and the SDK materializes every\n// selected MCP tool as a `function` tool in request.tools[] on a Codex turn. The\n// Codex CLI instead uses the backend's NATIVE tool-search: the model gets one\n// compact search tool + deferred MCP tools (schemas dropped from model context),\n// searches by capability, and only matched tools are disclosed back and become\n// callable.\n//\n// PROVEN LIVE (Phase 0 probe against /codex/responses on gpt-5.6-sol): the backend\n// HONORS `defer_loading:true` on function tools — 50 fat tools dropped input_tokens\n// 6766 → 108 — AND makes a tool callable purely because a prior `tool_search_output`\n// disclosed it (V3). The model emits `tool_search_call` on our slug.\n//\n// HOW. We wrap the agent's `getAllTools` (codex turns only, flag-gated): tag every\n// non-mandatory MCP function tool `deferLoading = true` (converTool then serializes\n// `defer_loading:true`, dropping the schema from context) and append one\n// client-executed `toolSearchTool`. The SDK routes a `tool_search_call` to our\n// executor (ClientToolSearchExecutor), which BM25-ranks the deferred pool and\n// returns matched tools BY REFERENCE — the SDK emits the `tool_search_output` that\n// discloses them; the subsequent `function_call` resolves through the normal\n// `PrefixedMcpServer.callTool` path (auth + name-sanitize + structuredContent\n// inline all unchanged). Invocation is untouched; only the wire tool-set shrinks.\n\nimport { toolSearchTool, type Tool } from \"@openai/agents\";\nimport {\n  MCP_MAX_TOOL_DEFINITION_BYTES,\n  MCP_MAX_TOOL_SEARCH_DESCRIPTION_BYTES,\n  MCP_MAX_TOOL_SEARCH_DISCLOSURE_BYTES,\n  MCP_MAX_TOOL_SEARCH_SOURCE_LABEL_LENGTH,\n  MCP_MAX_TOOL_SEARCH_SOURCES,\n  mcpSerializedSizeBytes,\n} from \"./mcp-network\";\n\n/** The prefix OpenGeni's PrefixedMcpServer stamps on codex_apps connector tools. */\nexport const CODEX_APPS_TOOL_PREFIX = \"codex_apps__\";\nconst DEFAULT_SEARCH_LIMIT = 8;\nconst MAX_SEARCH_LIMIT = 20;\n\n/** True for a materialized codex_apps connector function tool. */\nexport function isCodexAppsFunctionTool(\n  tool: unknown,\n): tool is Tool & { name: string; deferLoading?: boolean } {\n  return (\n    !!tool &&\n    typeof tool === \"object\" &&\n    (tool as { type?: unknown }).type === \"function\" &&\n    typeof (tool as { name?: unknown }).name === \"string\" &&\n    (tool as { name: string }).name.startsWith(CODEX_APPS_TOOL_PREFIX)\n  );\n}\n\nconst MCP_TOOL_NAME_SEPARATOR = \"__\";\nconst MANDATORY_FIRST_PARTY_MCP_SERVER_ID = \"opengeni\";\nconst NO_MCP_SERVER_IDS: ReadonlySet<string> = new Set();\n\n/** Return the authorized server id for a runtime MCP function tool name. */\nfunction mcpServerIdForTool(tool: unknown, mcpServerIds: ReadonlySet<string>): string | null {\n  if (!tool || typeof tool !== \"object\") return null;\n  if ((tool as { type?: unknown }).type !== \"function\") return null;\n  const name = (tool as { name?: unknown }).name;\n  if (typeof name !== \"string\") return null;\n  let match: string | null = null;\n  for (const serverId of mcpServerIds) {\n    if (\n      typeof serverId !== \"string\" ||\n      serverId.length === 0 ||\n      !name.startsWith(`${serverId}${MCP_TOOL_NAME_SEPARATOR}`)\n    ) {\n      continue;\n    }\n    if (match === null || serverId.length > match.length) {\n      match = serverId;\n    }\n  }\n  return match;\n}\n\n/**\n * True for non-mandatory MCP function tools on the effective agent surface.\n * The prefix is the same runtime namespace used by PrefixedMcpServer; this\n * intentionally does not inspect the global registry, connection metadata, or\n * credentials, so search cannot widen the already-authorized tool set.\n */\nexport function isSearchableMcpFunctionTool(\n  tool: unknown,\n  mcpServerIds: ReadonlySet<string> = NO_MCP_SERVER_IDS,\n): tool is Tool & { name: string; deferLoading?: boolean } {\n  const serverId = mcpServerIdForTool(tool, mcpServerIds);\n  return serverId !== null && serverId !== MANDATORY_FIRST_PARTY_MCP_SERVER_ID;\n}\n\nfunction truncateUtf8(value: string, maxBytes: number): string {\n  if (Buffer.byteLength(value) <= maxBytes) return value;\n  let output = \"\";\n  for (const character of value) {\n    const candidate = output + character;\n    if (Buffer.byteLength(candidate) > maxBytes) break;\n    output = candidate;\n  }\n  return output;\n}\n\nfunction searchSourceForTool(tool: Tool, mcpServerIds: ReadonlySet<string>): string | null {\n  const serverId = mcpServerIdForTool(tool, mcpServerIds);\n  return serverId && serverId !== MANDATORY_FIRST_PARTY_MCP_SERVER_ID\n    ? truncateUtf8(serverId, MCP_MAX_TOOL_SEARCH_SOURCE_LABEL_LENGTH)\n    : null;\n}\n\nfunction searchSourcesForTools(\n  connectorNamespaces: ReadonlySet<string>,\n  tools: readonly Tool[],\n  mcpServerIds: ReadonlySet<string>,\n): Set<string> {\n  const sources = new Set<string>();\n  for (const source of connectorNamespaces) {\n    if (typeof source !== \"string\" || source.length === 0) continue;\n    if (sources.size >= MCP_MAX_TOOL_SEARCH_SOURCES) break;\n    sources.add(truncateUtf8(source, MCP_MAX_TOOL_SEARCH_SOURCE_LABEL_LENGTH));\n  }\n  for (const tool of tools) {\n    // Codex connector labels come from the transport's original namespace set\n    // (for example, `gmail`), not from the synthetic `codex_apps__` prefix.\n    // Keep that authoritative path intact; derive fallback labels only for\n    // directly materialized non-Codex MCP tools such as selected Slack tools.\n    const source =\n      isSearchableMcpFunctionTool(tool, mcpServerIds) && !isCodexAppsFunctionTool(tool)\n        ? searchSourceForTool(tool, mcpServerIds)\n        : null;\n    if (!source || sources.has(source)) continue;\n    if (sources.size >= MCP_MAX_TOOL_SEARCH_SOURCES) break;\n    sources.add(source);\n  }\n  return sources;\n}\n\n// Minimal English stopword set: query phrasings like \"send an email to someone\"\n// should match on capability words, not drown in glue words (parity with\n// codex-rs, whose search normalizes tokens server-side).\nconst STOPWORDS = new Set([\n  \"a\",\n  \"an\",\n  \"the\",\n  \"and\",\n  \"or\",\n  \"of\",\n  \"to\",\n  \"in\",\n  \"on\",\n  \"for\",\n  \"with\",\n  \"by\",\n  \"at\",\n  \"is\",\n  \"are\",\n  \"be\",\n  \"do\",\n  \"does\",\n  \"my\",\n  \"me\",\n  \"your\",\n  \"you\",\n  \"it\",\n  \"its\",\n  \"this\",\n  \"that\",\n  \"from\",\n  \"as\",\n  \"up\",\n  \"out\",\n  \"all\",\n  \"some\",\n  \"any\",\n  \"can\",\n  \"will\",\n  \"would\",\n  \"should\",\n  \"want\",\n  \"need\",\n  \"please\",\n  \"user\",\n  \"users\",\n]);\n\n/** Light suffix stemmer so \"emails\"/\"email\", \"creating\"/\"create\" co-match (min-stem guards, no over-stripping). */\nfunction stem(token: string): string {\n  if (token.length > 5 && token.endsWith(\"ing\")) return token.slice(0, -3);\n  if (token.length > 4 && token.endsWith(\"ed\")) return token.slice(0, -2);\n  if (token.length > 4 && token.endsWith(\"es\")) return token.slice(0, -2);\n  if (token.length > 3 && token.endsWith(\"s\") && !token.endsWith(\"ss\")) return token.slice(0, -1);\n  return token;\n}\n\n/** Split snake_case/camelCase/dotted text into stemmed lowercase word tokens (len ≥ 2, stopwords removed). */\nfunction tokenize(text: string): string[] {\n  return text\n    .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n    .toLowerCase()\n    .split(/[^a-z0-9]+/)\n    .filter((t) => t.length > 1 && !STOPWORDS.has(t))\n    .map(stem);\n}\n\n/** The searchable text of a connector tool: name (weighted ×2) + description + param names. */\nfunction toolSearchText(tool: Tool): string {\n  const raw = (tool as { name?: string }).name ?? \"\";\n  const name = raw.startsWith(CODEX_APPS_TOOL_PREFIX)\n    ? raw.slice(CODEX_APPS_TOOL_PREFIX.length)\n    : raw;\n  const description =\n    typeof (tool as { description?: unknown }).description === \"string\"\n      ? (tool as { description: string }).description\n      : \"\";\n  const params = (tool as { parameters?: { properties?: Record<string, unknown> } }).parameters\n    ?.properties;\n  const paramNames = params && typeof params === \"object\" ? Object.keys(params).join(\" \") : \"\";\n  return `${name} ${name} ${description} ${paramNames}`;\n}\n\n/**\n * Rank connector tools against a plain-language query with BM25 (Okapi, k1=1.5,\n * b=0.75) over tokenized name+description+params. Returns the top `limit` tools\n * with a positive score, most-relevant first. An empty or no-match query returns\n * [] — matching codex-rs, whose search returns empty rather than arbitrary tools;\n * disclosing unrelated (and thereby CALLABLE) tools on a miss feeds the model\n * noise. The SDK normalizes an empty executor result into an empty\n * tool_search_output, which the model reads as \"nothing matched — rephrase\".\n */\nexport function bm25RankTools(tools: Tool[], query: string, limit: number): Tool[] {\n  const qTokens = Array.from(new Set(tokenize(query)));\n  if (tools.length === 0 || qTokens.length === 0) return [];\n\n  const docs = tools.map((tool) => {\n    const tokens = tokenize(toolSearchText(tool));\n    const tf = new Map<string, number>();\n    for (const t of tokens) tf.set(t, (tf.get(t) ?? 0) + 1);\n    return { tool, len: tokens.length, tf };\n  });\n  const N = docs.length;\n  const avgdl = Math.max(1, docs.reduce((s, d) => s + d.len, 0) / N);\n  const df = new Map<string, number>();\n  for (const d of docs) for (const t of d.tf.keys()) df.set(t, (df.get(t) ?? 0) + 1);\n\n  const k1 = 1.5;\n  const b = 0.75;\n  const scored = docs.map((d) => {\n    let score = 0;\n    for (const qt of qTokens) {\n      const n = df.get(qt);\n      const f = d.tf.get(qt);\n      if (!n || !f) continue;\n      const idf = Math.log(1 + (N - n + 0.5) / (n + 0.5));\n      score += idf * ((f * (k1 + 1)) / (f + k1 * (1 - b + (b * d.len) / avgdl)));\n    }\n    return { tool: d.tool, score };\n  });\n  const hits = scored.filter((s) => s.score > 0).sort((a, b2) => b2.score - a.score);\n  return hits.slice(0, limit).map((s) => s.tool); // no hits ⇒ [] (codex-rs parity; see doc)\n}\n\n/** Parse `{query, limit}` from a tool_search_call's arguments (string or object). */\nfunction parseSearchArgs(raw: unknown): { query: string; limit: number } {\n  let obj: Record<string, unknown> = {};\n  try {\n    obj =\n      typeof raw === \"string\"\n        ? raw.length\n          ? JSON.parse(raw)\n          : {}\n        : raw && typeof raw === \"object\"\n          ? (raw as Record<string, unknown>)\n          : {};\n  } catch {\n    obj = {};\n  }\n  const query = typeof obj.query === \"string\" ? obj.query : \"\";\n  const limitRaw =\n    typeof obj.limit === \"number\" && Number.isFinite(obj.limit) ? obj.limit : DEFAULT_SEARCH_LIMIT;\n  return { query, limit: Math.max(1, Math.min(MAX_SEARCH_LIMIT, Math.round(limitRaw))) };\n}\n\n/**\n * Render the search tool's description from the account's ACTUALLY-connected\n * sources — codex-rs parity (its create_tool_search_tool builds \"You have access\n * to tools from the following sources:\\n- <name>\" from the live enabled-source\n * list). With defer_loading stripping every connector schema (and name) from\n * model context, this description is the model's ONLY signal of which apps\n * exist, so a hardcoded list would both advertise absent connectors and hide\n * present ones.\n */\nexport function renderSearchToolDescription(connectorNamespaces: ReadonlySet<string>): string {\n  const base =\n    \"Search the user's connected app tools by capability. \" +\n    'Describe in plain language WHAT you need to do (for example: \"send an email\", \"create a calendar event\") ' +\n    \"rather than guessing exact tool names. Returns the matching connector tools, which then become callable.\";\n  const sources = Array.from(connectorNamespaces)\n    .filter((n) => typeof n === \"string\" && n.length > 0)\n    .slice(0, MCP_MAX_TOOL_SEARCH_SOURCES)\n    .map((source) => truncateUtf8(source, MCP_MAX_TOOL_SEARCH_SOURCE_LABEL_LENGTH))\n    .filter(Boolean)\n    .sort();\n  if (sources.length === 0) {\n    return `${base}\\nConnected sources: none currently available.`;\n  }\n  const header = `${base}\\nYou have access to tools from the following sources:`;\n  const lines: string[] = [];\n  for (const source of sources) {\n    const candidate = `${header}${[...lines, `- ${source}`].map((line) => `\\n${line}`).join(\"\")}`;\n    if (Buffer.byteLength(candidate) > MCP_MAX_TOOL_SEARCH_DESCRIPTION_BYTES) break;\n    lines.push(`- ${source}`);\n  }\n  return lines.length > 0\n    ? `${header}\\n${lines.join(\"\\n\")}`\n    : `${base}\\nConnected sources: none currently available.`;\n}\n\nconst SEARCH_TOOL_PARAMETERS = {\n  type: \"object\",\n  properties: {\n    query: {\n      type: \"string\",\n      description: \"Plain-language description of the capability you need.\",\n    },\n    limit: { type: \"number\", description: \"Maximum number of tools to return (default 8).\" },\n  },\n  required: [\"query\"],\n  additionalProperties: false,\n} as const;\n\n/**\n * The client tool-search executor: BM25 over the deferred MCP pool from the\n * turn's live `availableTools`, returning matched tools BY REFERENCE (the only legal\n * return — the SDK emits the disclosing `tool_search_output` and flips the loaded\n * gate; returning copies would throw). Stateless — reads the pool per call.\n */\nfunction codexToolSearchExecutor(\n  args: {\n    availableTools?: Tool[];\n    toolCall?: { arguments?: unknown };\n  },\n  mcpServerIds: ReadonlySet<string>,\n): Tool[] {\n  const deferred = (args.availableTools ?? []).filter((tool) =>\n    isSearchableMcpFunctionTool(tool, mcpServerIds),\n  );\n  if (deferred.length === 0) return [];\n  const { query, limit } = parseSearchArgs(args.toolCall?.arguments);\n  const ranked = bm25RankTools(deferred, query, limit);\n  const bounded: Tool[] = [];\n  let disclosedBytes = 0;\n  for (const tool of ranked) {\n    const toolBytes = mcpSerializedSizeBytes(tool);\n    if (toolBytes > MCP_MAX_TOOL_DEFINITION_BYTES) {\n      continue;\n    }\n    if (disclosedBytes + toolBytes > MCP_MAX_TOOL_SEARCH_DISCLOSURE_BYTES) {\n      break;\n    }\n    disclosedBytes += toolBytes;\n    bounded.push(tool);\n  }\n  return bounded;\n}\n\nconst NO_NAMESPACES: ReadonlySet<string> = new Set();\n\n/** True when the namespace set contains at least one usable (non-empty string) source — mirrors {@link renderSearchToolDescription}'s filter, so it is TRUE exactly when the render produces the \"following sources\" list and FALSE when it produces \"none currently available\". */\nfunction hasConnectorSources(connectorNamespaces: ReadonlySet<string>): boolean {\n  for (const namespace of connectorNamespaces) {\n    if (typeof namespace === \"string\" && namespace.length > 0) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * A per-TURN freeze cell for the tool_search description (AM-8). The connector Set\n * `installCodexToolSearch` reads is LIVE and by-reference — it fills as the turn's\n * codex_apps tools/list resolves and can change between a turn's model calls.\n * Re-rendering the description per call from a changed Set flips the tools block,\n * and because tools precede the history in the request prefix, ANY change misses the\n * ENTIRE conversation prefix from that point on — a proven prompt-cache breaker.\n *\n * We therefore freeze the description ONCE, at the first model call whose Set has\n * been populated (connectors discovered), and reuse that frozen string for the rest\n * of the turn — trading a slightly staler connector list for a byte-stable prefix.\n * The freeze is created per {@link installCodexToolSearch} (once per turn) and shared\n * by reference into every clone re-install, so all of a turn's clones agree.\n */\nexport type CodexToolSearchDescriptionFreeze = { value: string | null };\n\n/**\n * Resolve the tool_search description for this model call, honoring the per-turn\n * freeze (AM-8):\n *  - Already frozen ⇒ return the frozen string (byte-stable for the rest of the turn).\n *  - Not yet frozen + connectors DISCOVERED (non-empty Set) ⇒ render and FREEZE it,\n *    locking the discovered list against a later same-turn Set mutation.\n *  - Not yet frozen + Set still EMPTY ⇒ render live (\"none currently available\") but\n *    do NOT freeze. This is the load-bearing safety of AM-8: the Set fills lazily and\n *    best-effort, so an empty Set means \"not discovered yet\", not \"no connectors\".\n *    Freezing \"none\" here would silently disable the turn's connectors (capability\n *    loss). Leaving it unfrozen is still byte-stable while the Set stays empty (the\n *    empty render is a constant), and lets a later call freeze the real list once it\n *    resolves — at most ONE prefix transition, versus today's per-call churn.\n * With no freeze cell (the default / direct callers + tests) this is a live render,\n * byte-for-byte the pre-AM-8 behavior.\n */\nfunction resolveSearchToolDescription(\n  connectorNamespaces: ReadonlySet<string>,\n  freeze?: CodexToolSearchDescriptionFreeze,\n): string {\n  if (freeze?.value != null) {\n    return freeze.value;\n  }\n  const rendered = renderSearchToolDescription(connectorNamespaces);\n  if (freeze && hasConnectorSources(connectorNamespaces)) {\n    freeze.value = rendered;\n  }\n  return rendered;\n}\n\n/** Build the client-executed tool_search tool from an already-rendered description. */\nfunction buildCodexToolSearchToolFromDescription(\n  description: string,\n  mcpServerIds: ReadonlySet<string>,\n): Tool {\n  return toolSearchTool({\n    execution: \"client\",\n    description,\n    parameters: SEARCH_TOOL_PARAMETERS as unknown as Record<string, unknown>,\n    execute: ((args: Parameters<typeof codexToolSearchExecutor>[0]) =>\n      codexToolSearchExecutor(args, mcpServerIds)) as never,\n  }) as unknown as Tool;\n}\n\n/** Build the client-executed tool_search tool that discloses deferred MCP tools on demand. */\nexport function buildCodexToolSearchTool(\n  connectorNamespaces: ReadonlySet<string> = NO_NAMESPACES,\n  mcpServerIds: ReadonlySet<string> = NO_MCP_SERVER_IDS,\n): Tool {\n  return buildCodexToolSearchToolFromDescription(\n    renderSearchToolDescription(connectorNamespaces),\n    mcpServerIds,\n  );\n}\n\n/** True for the built-in tool_search tool (so we never add a second one). */\nfunction isToolSearchTool(tool: unknown): boolean {\n  const t = tool as { name?: unknown; providerData?: { type?: unknown } } | null;\n  return !!t && (t.name === \"tool_search\" || t.providerData?.type === \"tool_search\");\n}\n\n/**\n * The transform applied to a turn's resolved tool list: tag every searchable\n * non-mandatory MCP function tool `deferLoading = true`, and — unless one is already\n * present — append the client tool_search tool. Pure (mutates the passed tools +\n * returns the possibly-extended array); the SDK's `getTools` gate requires a\n * tool_search whenever a deferred tool is present, which appending here satisfies\n * in the same request.\n *\n * The search tool is appended UNCONDITIONALLY (even when the turn has no\n * searchable MCP tools, e.g. a best-effort connector was dropped this\n * turn): a prior turn's history may carry tool_search_call/output items, and\n * replaying those without a tool_search tool in the request risks a backend\n * reject; a search over an empty pool simply discloses nothing. The description\n * reflects the LIVE connector namespaces, so an empty turn reads\n * \"none currently available\".\n */\nexport function applyCodexToolSearch(\n  tools: Tool[],\n  connectorNamespaces: ReadonlySet<string> = NO_NAMESPACES,\n  descriptionFreeze?: CodexToolSearchDescriptionFreeze,\n  mcpServerIds: ReadonlySet<string> = NO_MCP_SERVER_IDS,\n): Tool[] {\n  for (const tool of tools) {\n    if (\n      isSearchableMcpFunctionTool(tool, mcpServerIds) &&\n      (tool as { deferLoading?: boolean }).deferLoading !== true\n    ) {\n      (tool as { deferLoading?: boolean }).deferLoading = true;\n    }\n  }\n  if (tools.some(isToolSearchTool)) {\n    return tools;\n  }\n  // AM-8: render through the per-turn freeze so the tools-block prefix stays\n  // byte-stable across a turn's model calls once connectors are discovered.\n  const description = resolveSearchToolDescription(\n    searchSourcesForTools(connectorNamespaces, tools, mcpServerIds),\n    descriptionFreeze,\n  );\n  return [...tools, buildCodexToolSearchToolFromDescription(description, mcpServerIds)];\n}\n\ntype CloneCapableAgent = {\n  getAllTools: (runContext: unknown) => Promise<Tool[]>;\n  clone?: (config: unknown) => CloneCapableAgent;\n};\n\n/**\n * Install progressive MCP disclosure on a Codex-path agent by wrapping\n * `getAllTools` so every per-model-call tool resolution runs\n * {@link applyCodexToolSearch}. Idempotent-per-call (re-tags each\n * freshly-materialized MCP tool under cacheToolsList:false). Gated by the caller\n * (flag + Codex path).\n *\n * CLONE SURVIVAL (the part that makes this work on the REAL sandbox path): the\n * SDK's sandbox runtime routes EVERY model call through\n * `prepareSandboxAgent → agent.clone(...)` (agentPreparation.js), and\n * `SandboxAgent.clone` constructs a FRESH agent from a fixed field list — an\n * instance-own `getAllTools` override is NOT copied, so patching only this\n * instance would silently no-op the whole feature on sandbox turns (the run\n * loop resolves tools on the CLONE). We therefore also wrap `clone` to\n * RE-INSTALL onto every clone, recursively — covering clone-of-clone and the\n * RunState resume paths. `connectorNamespaces` is the LIVE, by-reference Set the\n * codex_apps sanitizing transport fills during each turn's tools/list\n * (prepareAgentTools), so by the time the wrapper post-processes getAllTools the\n * current turn's connector sources are known.\n */\nexport function installCodexToolSearch(\n  agent: CloneCapableAgent,\n  connectorNamespaces: ReadonlySet<string> = NO_NAMESPACES,\n  mcpServerIds: ReadonlySet<string> = NO_MCP_SERVER_IDS,\n): void {\n  // ONE freeze cell per install (i.e. per turn), shared BY REFERENCE into every\n  // clone re-install below so the whole turn — the built agent and every clone the\n  // sandbox runtime resolves tools on — agrees on the same frozen description\n  // (AM-8). Created here, at the top-level install, never per clone.\n  installCodexToolSearchWithFreeze(agent, connectorNamespaces, mcpServerIds, { value: null });\n}\n\nfunction installCodexToolSearchWithFreeze(\n  agent: CloneCapableAgent,\n  connectorNamespaces: ReadonlySet<string>,\n  mcpServerIds: ReadonlySet<string>,\n  descriptionFreeze: CodexToolSearchDescriptionFreeze,\n): void {\n  const originalGetAllTools = agent.getAllTools.bind(agent);\n  agent.getAllTools = (async (runContext: unknown) =>\n    applyCodexToolSearch(\n      await originalGetAllTools(runContext),\n      connectorNamespaces,\n      descriptionFreeze,\n      mcpServerIds,\n    )) as typeof agent.getAllTools;\n  const originalClone = agent.clone?.bind(agent);\n  if (originalClone) {\n    const cloneWithToolSearch: NonNullable<CloneCapableAgent[\"clone\"]> = (config: unknown) => {\n      const cloned = originalClone(config);\n      installCodexToolSearchWithFreeze(\n        cloned,\n        connectorNamespaces,\n        mcpServerIds,\n        descriptionFreeze,\n      );\n      return cloned;\n    };\n    agent.clone = cloneWithToolSearch;\n  }\n}\n","/**\n * Portable conversation context compaction, following Codex CLI's local path.\n *\n * The checkpoint model sees the current active history plus one fixed\n * checkpoint prompt, then the active history is rebuilt from the newest real\n * user messages within one cumulative 20k-token budget plus one summary.\n * Assistant messages, tool calls/results, reasoning, and images are removed\n * from the active model-facing history; the database audit rows remain.\n */\n\nimport {\n  TOOL_CALL_RESULT_TYPE_BY_CALL_TYPE,\n  sanitizeHistoryItemsForModel,\n} from \"./history-sanitizer\";\nimport { boundModelToolOutputItem } from \"@opengeni/codex\";\nimport { createHash } from \"node:crypto\";\n\nexport type CompactionItem = Record<string, unknown>;\n\n/**\n * Marker stored on the synthetic summary item so the UI can render it and the\n * next rebuild can exclude old summaries from the retained user-message set.\n */\nexport const COMPACTION_SUMMARY_MARKER = \"opengeni_context_summary\";\n\nexport const SUMMARY_BUFFER_TOKENS = 20_000;\n// A single cumulative budget for all retained real user messages, matching\n// Codex core's build_compacted_history_with_limit (not a per-message allowance).\nexport const COMPACT_USER_MESSAGE_MAX_TOKENS = 20_000;\n/** Codex CLI remote compaction v2 retained-message budget (codex-rs). */\nexport const REMOTE_V2_RETAINED_MESSAGE_TOKEN_BUDGET = 64_000;\nexport const REMOTE_COMPACTION_V2_IMPLEMENTATION = \"responses_compaction_v2\" as const;\nexport const REMOTE_COMPACTION_V2_BETA_FEATURE = \"remote_compaction_v2\" as const;\n// 0.9: compact as LATE as possible — retained context is worth more than early\n// headroom now that declared per-model windows are honest. Model-catalog\n// explicit limits take precedence; the ratio is used for models without one.\nexport const DEFAULT_COMPACTION_THRESHOLD_RATIO = 0.9;\nexport const MIN_COMPACTION_THRESHOLD_RATIO = 0.3;\nexport const MAX_COMPACTION_THRESHOLD_RATIO = 0.9;\n\n// Verbatim from Codex CLI:\n// codex-rs/prompts/templates/compact/prompt.md\nexport const COMPACTION_PROMPT = [\n  \"You are performing a CONTEXT CHECKPOINT COMPACTION. Create a handoff summary for another LLM that will resume the task.\",\n  \"\",\n  \"Include:\",\n  \"- Current progress and key decisions made\",\n  \"- Important context, constraints, or user preferences\",\n  \"- What remains to be done (clear next steps)\",\n  \"- Any critical data, examples, or references needed to continue\",\n  \"\",\n  \"Be concise, structured, and focused on helping the next LLM seamlessly continue the work.\",\n].join(\"\\n\");\n\n// Verbatim from Codex CLI:\n// codex-rs/prompts/templates/compact/summary_prefix.md\nexport const SUMMARY_PREFIX =\n  \"Another language model started to solve this problem and produced a summary of its thinking process. You also have access to the state of the tools that were used by that language model. Use this to build on the work that has already been done and avoid duplicating work. Here is the summary produced by the other language model, use the information in this summary to assist with your own analysis:\";\n\nexport const USER_MESSAGE_TRUNCATION_MARKER =\n  \"\\n[... middle truncated for context compaction ...]\\n\";\n\nconst RESULT_TYPE_BY_CALL_TYPE = TOOL_CALL_RESULT_TYPE_BY_CALL_TYPE;\nconst RESULT_TYPES = new Set(Object.values(RESULT_TYPE_BY_CALL_TYPE));\nconst MODEL_GENERATED_ITEM_TYPES = new Set([\n  \"reasoning\",\n  \"function_call\",\n  \"custom_tool_call\",\n  \"tool_search_call\",\n  \"web_search_call\",\n  \"image_generation_call\",\n  \"computer_call\",\n  \"shell_call\",\n  \"apply_patch_call\",\n  \"compaction\",\n  \"context_compaction\",\n]);\n\nfunction itemType(item: unknown): string | undefined {\n  if (!item || typeof item !== \"object\") {\n    return undefined;\n  }\n  const type = (item as { type?: unknown }).type;\n  return typeof type === \"string\" ? type : undefined;\n}\n\nfunction itemRole(item: unknown): string | undefined {\n  if (!item || typeof item !== \"object\") {\n    return undefined;\n  }\n  const role = (item as { role?: unknown }).role;\n  return typeof role === \"string\" ? role : undefined;\n}\n\n/** A user-authored `message` item is the only legal turn boundary. */\nexport function isUserMessage(item: unknown): boolean {\n  return itemType(item) === \"message\" && itemRole(item) === \"user\";\n}\n\n/** True for our synthetic compaction summary item. */\nexport function isCompactionSummary(item: unknown): boolean {\n  return (\n    isUserMessage(item) && (item as Record<string, unknown>)[COMPACTION_SUMMARY_MARKER] === true\n  );\n}\n\n/**\n * Conservative tokenizer-independent text estimate used for every local input\n * budget. Preserve the stable ASCII `chars / 4` heuristic, but never discount\n * Unicode as UTF-16 length/4: each non-ASCII code unit costs at least one token\n * (CJK ≈ 1/code point; an astral emoji's surrogate pair ≈ 2). This intentionally\n * errs toward compaction rather than letting multilingual current input exceed\n * a provider context window before an authoritative usage anchor exists.\n */\nexport function estimateTextTokens(text: string): number {\n  let asciiCodeUnits = 0;\n  let nonAsciiCodeUnits = 0;\n  for (let index = 0; index < text.length; index += 1) {\n    if (text.charCodeAt(index) <= 0x7f) asciiCodeUnits += 1;\n    else nonAsciiCodeUnits += 1;\n  }\n  return nonAsciiCodeUnits + Math.ceil(asciiCodeUnits / 4);\n}\n\nconst IMAGE_LOW_DETAIL_TOKENS = 85;\nconst IMAGE_HIGH_DETAIL_BASE_TOKENS = 85;\nconst IMAGE_HIGH_DETAIL_TILE_TOKENS = 170;\nconst IMAGE_HIGH_DETAIL_TILE_SIZE = 512;\nconst IMAGE_HIGH_DETAIL_MAX_SIDE = 2_048;\nconst IMAGE_HIGH_DETAIL_TARGET_SHORT_SIDE = 768;\nexport const UNKNOWN_IMAGE_TOKENS = 4_096;\nexport const MAX_NATIVE_IMAGE_TOKENS = 8_192;\n\nexport type NativeImageEstimateReason = \"dimensions\" | \"bounded_fallback\";\nexport type NativeImageTokenEstimate = {\n  tokens: number;\n  width: number | null;\n  height: number | null;\n  detail: string;\n  reason: NativeImageEstimateReason;\n};\n\nexport type ModelInputTokenBreakdown = {\n  totalTokens: number;\n  textTokens: number;\n  imageTokens: number;\n  imageCount: number;\n  imageFallbackCount: number;\n};\n\ntype ImageDescriptor = {\n  source: unknown;\n  detail: string;\n  width: number | null;\n  height: number | null;\n};\n\ntype NativeImageProjection = {\n  value: unknown;\n  imageTokens: number;\n  imageCount: number;\n  imageFallbackCount: number;\n};\n\nfunction finitePositiveInteger(value: unknown): number | null {\n  return typeof value === \"number\" && Number.isFinite(value) && value > 0\n    ? Math.floor(value)\n    : null;\n}\n\nfunction dimensionsFromRecord(record: Record<string, unknown>): [number, number] | null {\n  const width = finitePositiveInteger(record.width);\n  const height = finitePositiveInteger(record.height);\n  if (width && height) return [width, height];\n  if (Array.isArray(record.dimensions) && record.dimensions.length >= 2) {\n    const dimensionsWidth = finitePositiveInteger(record.dimensions[0]);\n    const dimensionsHeight = finitePositiveInteger(record.dimensions[1]);\n    if (dimensionsWidth && dimensionsHeight) return [dimensionsWidth, dimensionsHeight];\n  }\n  return null;\n}\n\nfunction dataUrlBytesPrefix(value: string, maxBytes = 262_144): Uint8Array | null {\n  const match = /^data:image\\/[a-z0-9.+-]+;base64,([a-z0-9+/=\\r\\n]+)$/i.exec(value);\n  if (!match) return null;\n  try {\n    const maxBase64CodeUnits = Math.ceil(maxBytes / 3) * 4;\n    return new Uint8Array(Buffer.from(match[1]!.slice(0, maxBase64CodeUnits), \"base64\"));\n  } catch {\n    return null;\n  }\n}\n\nfunction base64BytesPrefix(value: string, maxBytes = 262_144): Uint8Array | null {\n  if (!/^[a-z0-9+/=\\r\\n]+$/i.test(value)) return null;\n  try {\n    const maxBase64CodeUnits = Math.ceil(maxBytes / 3) * 4;\n    return new Uint8Array(Buffer.from(value.slice(0, maxBase64CodeUnits), \"base64\"));\n  } catch {\n    return null;\n  }\n}\n\nfunction uint16BigEndian(bytes: Uint8Array, offset: number): number {\n  return ((bytes[offset] ?? 0) << 8) | (bytes[offset + 1] ?? 0);\n}\n\nfunction uint32BigEndian(bytes: Uint8Array, offset: number): number {\n  return (\n    ((bytes[offset] ?? 0) * 0x1000000 +\n      ((bytes[offset + 1] ?? 0) << 16) +\n      ((bytes[offset + 2] ?? 0) << 8) +\n      (bytes[offset + 3] ?? 0)) >>>\n    0\n  );\n}\n\nfunction crc32(bytes: Uint8Array, start: number, end: number): number {\n  let crc = 0xffff_ffff;\n  for (let offset = start; offset < end; offset += 1) {\n    crc ^= bytes[offset] ?? 0;\n    for (let bit = 0; bit < 8; bit += 1) {\n      crc = (crc >>> 1) ^ (crc & 1 ? 0xedb8_8320 : 0);\n    }\n  }\n  return (crc ^ 0xffff_ffff) >>> 0;\n}\n\nfunction dimensionsFromImageBytes(bytes: Uint8Array): [number, number] | null {\n  // PNG IHDR: trust geometry only from a complete first IHDR chunk whose CRC32\n  // authenticates the 4-byte chunk type plus 13-byte data. This inspects exactly\n  // the bounded 33-byte prefix and never decodes the rest of the image.\n  if (\n    bytes.length >= 33 &&\n    bytes[0] === 0x89 &&\n    bytes[1] === 0x50 &&\n    bytes[2] === 0x4e &&\n    bytes[3] === 0x47 &&\n    bytes[4] === 0x0d &&\n    bytes[5] === 0x0a &&\n    bytes[6] === 0x1a &&\n    bytes[7] === 0x0a &&\n    uint32BigEndian(bytes, 8) === 13 &&\n    bytes[12] === 0x49 &&\n    bytes[13] === 0x48 &&\n    bytes[14] === 0x44 &&\n    bytes[15] === 0x52 &&\n    crc32(bytes, 12, 29) === uint32BigEndian(bytes, 29)\n  ) {\n    const width = uint32BigEndian(bytes, 16);\n    const height = uint32BigEndian(bytes, 20);\n    return width > 0 && height > 0 ? [width, height] : null;\n  }\n  // GIF logical screen descriptor.\n  if (\n    bytes.length >= 10 &&\n    bytes[0] === 0x47 &&\n    bytes[1] === 0x49 &&\n    bytes[2] === 0x46 &&\n    bytes[3] === 0x38\n  ) {\n    const width = (bytes[6] ?? 0) | ((bytes[7] ?? 0) << 8);\n    const height = (bytes[8] ?? 0) | ((bytes[9] ?? 0) << 8);\n    return width > 0 && height > 0 ? [width, height] : null;\n  }\n  // WebP VP8X canvas size (24-bit little-endian, stored minus one).\n  if (\n    bytes.length >= 30 &&\n    bytes[0] === 0x52 &&\n    bytes[1] === 0x49 &&\n    bytes[2] === 0x46 &&\n    bytes[3] === 0x46 &&\n    bytes[8] === 0x57 &&\n    bytes[9] === 0x45 &&\n    bytes[10] === 0x42 &&\n    bytes[11] === 0x50 &&\n    bytes[12] === 0x56 &&\n    bytes[13] === 0x50 &&\n    bytes[14] === 0x38 &&\n    bytes[15] === 0x58\n  ) {\n    const width = 1 + (bytes[24] ?? 0) + ((bytes[25] ?? 0) << 8) + ((bytes[26] ?? 0) << 16);\n    const height = 1 + (bytes[27] ?? 0) + ((bytes[28] ?? 0) << 8) + ((bytes[29] ?? 0) << 16);\n    return width > 0 && height > 0 ? [width, height] : null;\n  }\n  // JPEG SOF markers can appear after variable-length metadata segments.\n  if (bytes.length >= 4 && bytes[0] === 0xff && bytes[1] === 0xd8) {\n    let offset = 2;\n    while (offset + 8 < bytes.length) {\n      if (bytes[offset] !== 0xff) {\n        offset += 1;\n        continue;\n      }\n      const marker = bytes[offset + 1] ?? 0;\n      offset += 2;\n      if (marker === 0xd8 || marker === 0xd9 || marker === 0x01) continue;\n      if (marker >= 0xd0 && marker <= 0xd7) continue;\n      if (offset + 2 > bytes.length) break;\n      const segmentLength = uint16BigEndian(bytes, offset);\n      if (segmentLength < 2 || offset + segmentLength > bytes.length) break;\n      const isStartOfFrame =\n        (marker >= 0xc0 && marker <= 0xc3) ||\n        (marker >= 0xc5 && marker <= 0xc7) ||\n        (marker >= 0xc9 && marker <= 0xcb) ||\n        (marker >= 0xcd && marker <= 0xcf);\n      if (isStartOfFrame && segmentLength >= 7) {\n        const height = uint16BigEndian(bytes, offset + 3);\n        const width = uint16BigEndian(bytes, offset + 5);\n        return width > 0 && height > 0 ? [width, height] : null;\n      }\n      offset += segmentLength;\n    }\n  }\n  return null;\n}\n\nfunction dimensionsFromImageSource(source: unknown): [number, number] | null {\n  if (source instanceof Uint8Array) {\n    return dimensionsFromImageBytes(source);\n  }\n  if (typeof source === \"string\") {\n    const bytes = dataUrlBytesPrefix(source);\n    return bytes ? dimensionsFromImageBytes(bytes) : null;\n  }\n  if (!source || typeof source !== \"object\") return null;\n  const record = source as Record<string, unknown>;\n  const rawData = record.data;\n  const mediaType = record.mediaType ?? record.media_type;\n  const rawDataDimensions =\n    rawData instanceof Uint8Array\n      ? dimensionsFromImageBytes(rawData)\n      : typeof rawData === \"string\" &&\n          typeof mediaType === \"string\" &&\n          mediaType.toLowerCase().startsWith(\"image/\")\n        ? dimensionsFromImageBytes(base64BytesPrefix(rawData) ?? new Uint8Array())\n        : null;\n  return (\n    dimensionsFromRecord(record) ??\n    rawDataDimensions ??\n    dimensionsFromImageSource(record.url) ??\n    dimensionsFromImageSource(rawData)\n  );\n}\n\nfunction highDetailImageTokens(width: number, height: number): number {\n  let scaledWidth = width;\n  let scaledHeight = height;\n  const longest = Math.max(scaledWidth, scaledHeight);\n  if (longest > IMAGE_HIGH_DETAIL_MAX_SIDE) {\n    const scale = IMAGE_HIGH_DETAIL_MAX_SIDE / longest;\n    scaledWidth *= scale;\n    scaledHeight *= scale;\n  }\n  const shortest = Math.min(scaledWidth, scaledHeight);\n  if (shortest > IMAGE_HIGH_DETAIL_TARGET_SHORT_SIDE) {\n    const scale = IMAGE_HIGH_DETAIL_TARGET_SHORT_SIDE / shortest;\n    scaledWidth *= scale;\n    scaledHeight *= scale;\n  }\n  const tiles =\n    Math.ceil(scaledWidth / IMAGE_HIGH_DETAIL_TILE_SIZE) *\n    Math.ceil(scaledHeight / IMAGE_HIGH_DETAIL_TILE_SIZE);\n  return Math.min(\n    MAX_NATIVE_IMAGE_TOKENS,\n    IMAGE_HIGH_DETAIL_BASE_TOKENS + IMAGE_HIGH_DETAIL_TILE_TOKENS * Math.max(1, tiles),\n  );\n}\n\n/**\n * Provider-neutral local estimate for one native image. Inline bytes are used\n * only to recover dimensions; their base64 length never becomes text tokens.\n */\nexport function estimateNativeImageTokens(input: {\n  source?: unknown;\n  width?: number | null;\n  height?: number | null;\n  detail?: unknown;\n}): NativeImageTokenEstimate {\n  const explicitWidth = finitePositiveInteger(input.width);\n  const explicitHeight = finitePositiveInteger(input.height);\n  const sourceDimensions = dimensionsFromImageSource(input.source);\n  const width = explicitWidth ?? sourceDimensions?.[0] ?? null;\n  const height = explicitHeight ?? sourceDimensions?.[1] ?? null;\n  const detail =\n    typeof input.detail === \"string\" && input.detail.length > 0 ? input.detail : \"auto\";\n  if (detail === \"low\") {\n    return { tokens: IMAGE_LOW_DETAIL_TOKENS, width, height, detail, reason: \"dimensions\" };\n  }\n  if (!width || !height) {\n    return {\n      tokens: UNKNOWN_IMAGE_TOKENS,\n      width: null,\n      height: null,\n      detail,\n      reason: \"bounded_fallback\",\n    };\n  }\n  return {\n    tokens: highDetailImageTokens(width, height),\n    width,\n    height,\n    detail,\n    reason: \"dimensions\",\n  };\n}\n\nfunction imageDescriptor(record: Record<string, unknown>): ImageDescriptor | null {\n  const type = typeof record.type === \"string\" ? record.type : \"\";\n  if (!new Set([\"input_image\", \"image_url\", \"image\", \"computer_screenshot\"]).has(type)) {\n    return null;\n  }\n  const imageUrl = record.image_url;\n  const nestedImageUrl =\n    imageUrl && typeof imageUrl === \"object\" ? (imageUrl as Record<string, unknown>).url : imageUrl;\n  const source =\n    record.image ??\n    record.imageUrl ??\n    nestedImageUrl ??\n    record.data ??\n    record.url ??\n    record.fileId ??\n    record.file_id ??\n    record.artifact ??\n    record.artifactReference;\n  const nestedDetail =\n    imageUrl && typeof imageUrl === \"object\"\n      ? (imageUrl as Record<string, unknown>).detail\n      : undefined;\n  const dimensions =\n    dimensionsFromRecord(record) ??\n    (source && typeof source === \"object\"\n      ? dimensionsFromRecord(source as Record<string, unknown>)\n      : null);\n  return {\n    source,\n    detail:\n      typeof record.detail === \"string\"\n        ? record.detail\n        : typeof nestedDetail === \"string\"\n          ? nestedDetail\n          : \"auto\",\n    width: dimensions?.[0] ?? null,\n    height: dimensions?.[1] ?? null,\n  };\n}\n\nfunction projectNativeImages(value: unknown, seen: WeakSet<object>): NativeImageProjection {\n  if (!value || typeof value !== \"object\") {\n    return { value, imageTokens: 0, imageCount: 0, imageFallbackCount: 0 };\n  }\n  if (seen.has(value)) {\n    return { value: \"[circular]\", imageTokens: 0, imageCount: 0, imageFallbackCount: 0 };\n  }\n  seen.add(value);\n  if (Array.isArray(value)) {\n    let imageTokens = 0;\n    let imageCount = 0;\n    let imageFallbackCount = 0;\n    const projected = value.map((entry) => {\n      const result = projectNativeImages(entry, seen);\n      imageTokens += result.imageTokens;\n      imageCount += result.imageCount;\n      imageFallbackCount += result.imageFallbackCount;\n      return result.value;\n    });\n    seen.delete(value);\n    return { value: projected, imageTokens, imageCount, imageFallbackCount };\n  }\n\n  const record = value as Record<string, unknown>;\n  const descriptor = imageDescriptor(record);\n  if (descriptor) {\n    const estimate = estimateNativeImageTokens(descriptor);\n    const projected: Record<string, unknown> = {};\n    const payloadKeys = new Set([\n      \"image\",\n      \"image_url\",\n      \"imageUrl\",\n      \"data\",\n      \"url\",\n      \"fileId\",\n      \"file_id\",\n      \"artifact\",\n      \"artifactReference\",\n    ]);\n    for (const [key, entry] of Object.entries(record)) {\n      projected[key] = payloadKeys.has(key) ? \"[native image]\" : entry;\n    }\n    projected.image_estimate = {\n      width: estimate.width,\n      height: estimate.height,\n      detail: estimate.detail,\n      reason: estimate.reason,\n    };\n    seen.delete(value);\n    return {\n      value: projected,\n      imageTokens: estimate.tokens,\n      imageCount: 1,\n      imageFallbackCount: estimate.reason === \"bounded_fallback\" ? 1 : 0,\n    };\n  }\n\n  let imageTokens = 0;\n  let imageCount = 0;\n  let imageFallbackCount = 0;\n  const projected: Record<string, unknown> = {};\n  for (const [key, entry] of Object.entries(record)) {\n    const result = projectNativeImages(entry, seen);\n    projected[key] = result.value;\n    imageTokens += result.imageTokens;\n    imageCount += result.imageCount;\n    imageFallbackCount += result.imageFallbackCount;\n  }\n  seen.delete(value);\n  return { value: projected, imageTokens, imageCount, imageFallbackCount };\n}\n\n/**\n * Codex CLI `estimate_reasoning_length`: opaque encrypted payloads are not\n * model-visible as raw JSON/base64. Visible bytes ≈ `len * 3/4 - 650`.\n */\nexport function estimateOpaqueEncryptedModelVisibleBytes(encodedLen: number): number {\n  const length = Math.max(0, Math.floor(encodedLen));\n  return Math.max(0, Math.floor((length * 3) / 4) - 650);\n}\n\n/** Codex CLI bytes→tokens for opaque encrypted content (`ceil(bytes / 4)`). */\nexport function estimateOpaqueEncryptedTokens(encodedLen: number): number {\n  const bytes = estimateOpaqueEncryptedModelVisibleBytes(encodedLen);\n  return bytes === 0 ? 0 : Math.ceil(bytes / 4);\n}\n\n/**\n * Length of opaque encrypted content that must use the Codex encrypted\n * estimator instead of JSON.stringify (compaction blobs and reasoning).\n */\nexport function opaqueEncryptedContentLength(item: unknown): number | null {\n  if (!item || typeof item !== \"object\") return null;\n  const record = item as Record<string, unknown>;\n  const type = typeof record.type === \"string\" ? record.type : \"\";\n  if (\n    (type === \"compaction\" || type === \"context_compaction\" || type === \"reasoning\") &&\n    typeof record.encrypted_content === \"string\" &&\n    record.encrypted_content.length > 0\n  ) {\n    return record.encrypted_content.length;\n  }\n  if (type === \"reasoning\") {\n    const providerData =\n      record.providerData && typeof record.providerData === \"object\"\n        ? (record.providerData as Record<string, unknown>)\n        : null;\n    const nested =\n      providerData && typeof providerData.encrypted_content === \"string\"\n        ? providerData.encrypted_content\n        : providerData && typeof providerData.encryptedContent === \"string\"\n          ? providerData.encryptedContent\n          : null;\n    if (nested && nested.length > 0) return nested.length;\n  }\n  return null;\n}\n\n/** Native-image-aware item estimate for pre-call accounting and retained budgets. */\nexport function estimateItemTokenBreakdown(item: CompactionItem): ModelInputTokenBreakdown {\n  const opaqueLen = opaqueEncryptedContentLength(item);\n  if (opaqueLen !== null) {\n    // Match Codex: Compaction / encrypted reasoning use the opaque byte\n    // heuristic only — never JSON-stringify the ciphertext into the budget.\n    const textTokens = estimateOpaqueEncryptedTokens(opaqueLen);\n    return {\n      totalTokens: textTokens,\n      textTokens,\n      imageTokens: 0,\n      imageCount: 0,\n      imageFallbackCount: 0,\n    };\n  }\n  const projected = projectNativeImages(item, new WeakSet<object>());\n  let text: string;\n  try {\n    text = JSON.stringify(projected.value);\n  } catch {\n    text = String(projected.value);\n  }\n  const textTokens = estimateTextTokens(text);\n  return {\n    totalTokens: textTokens + projected.imageTokens,\n    textTokens,\n    imageTokens: projected.imageTokens,\n    imageCount: projected.imageCount,\n    imageFallbackCount: projected.imageFallbackCount,\n  };\n}\n\nexport function estimateItemTokens(item: CompactionItem): number {\n  return estimateItemTokenBreakdown(item).totalTokens;\n}\n\nexport function estimateTokens(items: readonly CompactionItem[]): number {\n  let total = 0;\n  for (const item of items) {\n    total += estimateItemTokens(item);\n  }\n  return total;\n}\n\nexport function estimateTokensBreakdown(\n  items: readonly CompactionItem[],\n): ModelInputTokenBreakdown {\n  const total: ModelInputTokenBreakdown = {\n    totalTokens: 0,\n    textTokens: 0,\n    imageTokens: 0,\n    imageCount: 0,\n    imageFallbackCount: 0,\n  };\n  for (const item of items) {\n    const estimate = estimateItemTokenBreakdown(item);\n    total.totalTokens += estimate.totalTokens;\n    total.textTokens += estimate.textTokens;\n    total.imageTokens += estimate.imageTokens;\n    total.imageCount += estimate.imageCount;\n    total.imageFallbackCount += estimate.imageFallbackCount;\n  }\n  return total;\n}\n\nexport function estimateSerializedValueTokens(value: unknown): number {\n  let serialized: string;\n  try {\n    serialized = typeof value === \"string\" ? value : JSON.stringify(value);\n  } catch {\n    serialized = String(value);\n  }\n  return estimateTextTokens(serialized ?? \"\");\n}\n\nexport type CompleteModelInputFootprint = {\n  input: readonly CompactionItem[];\n  instructionsTokens: number;\n  toolSchemaTokens: number;\n};\n\nexport type ProviderContextTokenSignal = {\n  /** Monotonic within one sampled run; advances after every model response. */\n  revision: number;\n  /** Provider total tokens after that response (input + generated output). */\n  totalTokens: number;\n};\n\nexport type CompleteModelInputEstimate = {\n  tokens: number;\n  source: \"complete_estimate\" | \"provider_plus_local\";\n  inputTokens: number;\n  inputTextTokens: number;\n  inputImageTokens: number;\n  inputImageCount: number;\n  inputImageFallbackCount: number;\n  instructionsTokens: number;\n  toolSchemaTokens: number;\n  appendedAfterModelTokens: number;\n};\n\n/**\n * Match Codex history accounting: after one provider response, start from its\n * authoritative TOTAL token count and add only local items placed after the\n * newest model-generated item. System instructions and tool schemas are\n * compared with the exact request footprint that produced the provider count;\n * positive growth is added. Without a bound anchor, estimate the entire\n * outgoing request rather than trusting stale usage from an earlier turn.\n */\nexport function estimateCompleteModelInput(input: {\n  current: CompleteModelInputFootprint;\n  provider?: ProviderContextTokenSignal | null;\n  providerRequestFootprint?: CompleteModelInputFootprint | null;\n}): CompleteModelInputEstimate {\n  const inputEstimate = estimateTokensBreakdown(input.current.input);\n  const inputTokens = inputEstimate.totalTokens;\n  const instructionsTokens = input.current.instructionsTokens;\n  const toolSchemaTokens = input.current.toolSchemaTokens;\n  if (!input.provider || !input.providerRequestFootprint || input.provider.totalTokens <= 0) {\n    return {\n      tokens: inputTokens + instructionsTokens + toolSchemaTokens,\n      source: \"complete_estimate\",\n      inputTokens,\n      inputTextTokens: inputEstimate.textTokens,\n      inputImageTokens: inputEstimate.imageTokens,\n      inputImageCount: inputEstimate.imageCount,\n      inputImageFallbackCount: inputEstimate.imageFallbackCount,\n      instructionsTokens,\n      toolSchemaTokens,\n      appendedAfterModelTokens: 0,\n    };\n  }\n\n  const appended = itemsAfterLastModelGeneratedItem(input.current.input);\n  const appendedAfterModelTokens = estimateTokens(appended);\n  const instructionGrowth = Math.max(\n    0,\n    instructionsTokens - input.providerRequestFootprint.instructionsTokens,\n  );\n  const toolSchemaGrowth = Math.max(\n    0,\n    toolSchemaTokens - input.providerRequestFootprint.toolSchemaTokens,\n  );\n  return {\n    tokens:\n      input.provider.totalTokens + appendedAfterModelTokens + instructionGrowth + toolSchemaGrowth,\n    source: \"provider_plus_local\",\n    inputTokens,\n    inputTextTokens: inputEstimate.textTokens,\n    inputImageTokens: inputEstimate.imageTokens,\n    inputImageCount: inputEstimate.imageCount,\n    inputImageFallbackCount: inputEstimate.imageFallbackCount,\n    instructionsTokens,\n    toolSchemaTokens,\n    appendedAfterModelTokens,\n  };\n}\n\nexport function itemsAfterLastModelGeneratedItem(\n  items: readonly CompactionItem[],\n): CompactionItem[] {\n  for (let index = items.length - 1; index >= 0; index -= 1) {\n    if (isModelGeneratedItem(items[index])) {\n      return items.slice(index + 1);\n    }\n  }\n  // Codex treats a provider token anchor without any model-generated item as\n  // unbound. Callers therefore fall back to a complete estimate in that case.\n  return items.slice();\n}\n\nexport function hasModelGeneratedItem(items: readonly CompactionItem[]): boolean {\n  return items.some(isModelGeneratedItem);\n}\n\nfunction isModelGeneratedItem(item: unknown): boolean {\n  const type = itemType(item);\n  if (type === \"message\") return itemRole(item) === \"assistant\";\n  return MODEL_GENERATED_ITEM_TYPES.has(type ?? \"\");\n}\n\nexport function clampCompactionThresholdRatio(value: number | undefined | null): number {\n  const numeric =\n    typeof value === \"number\" && Number.isFinite(value)\n      ? value\n      : DEFAULT_COMPACTION_THRESHOLD_RATIO;\n  return Math.min(\n    MAX_COMPACTION_THRESHOLD_RATIO,\n    Math.max(MIN_COMPACTION_THRESHOLD_RATIO, numeric),\n  );\n}\n\nexport function compactionThresholdTokens(input: {\n  contextWindowTokens: number;\n  contextReservedOutputTokens: number;\n  contextAutoCompactThresholdTokens?: number | null | undefined;\n  contextCompactionThresholdRatio?: number | null | undefined;\n}): number {\n  const window = Math.max(0, input.contextWindowTokens);\n  const codexMaximum = Math.floor(window * MAX_COMPACTION_THRESHOLD_RATIO);\n  if (\n    typeof input.contextAutoCompactThresholdTokens === \"number\" &&\n    Number.isFinite(input.contextAutoCompactThresholdTokens) &&\n    input.contextAutoCompactThresholdTokens > 0\n  ) {\n    return Math.min(Math.floor(input.contextAutoCompactThresholdTokens), codexMaximum);\n  }\n  return Math.floor(window * clampCompactionThresholdRatio(input.contextCompactionThresholdRatio));\n}\n\nexport type CompactionDecision = {\n  shouldCompact: boolean;\n  reason: \"force\" | \"above_threshold\" | \"below_threshold\" | \"no_history\";\n  signalTokens: number;\n  thresholdTokens: number;\n};\n\nexport function decideCompaction(input: {\n  items: readonly CompactionItem[];\n  lastInputTokens?: number | null;\n  contextWindowTokens: number;\n  contextReservedOutputTokens: number;\n  contextAutoCompactThresholdTokens?: number | null | undefined;\n  contextCompactionThresholdRatio?: number | null | undefined;\n  force?: boolean;\n}): CompactionDecision {\n  const thresholdTokens = compactionThresholdTokens(input);\n  const recorded =\n    typeof input.lastInputTokens === \"number\" && input.lastInputTokens > 0\n      ? input.lastInputTokens\n      : 0;\n  const activeHistoryEstimate = estimateTokens(input.items);\n  // A durable provider count belongs to an earlier request. The full active\n  // estimate is a conservative cross-turn floor until an exact same-run anchor\n  // is available in the per-call guard.\n  const signalTokens = Math.max(recorded, activeHistoryEstimate);\n  if (input.items.length === 0) {\n    return {\n      shouldCompact: false,\n      reason: \"no_history\",\n      signalTokens,\n      thresholdTokens,\n    };\n  }\n  if (input.force) {\n    return {\n      shouldCompact: true,\n      reason: \"force\",\n      signalTokens,\n      thresholdTokens,\n    };\n  }\n  if (signalTokens >= thresholdTokens) {\n    return {\n      shouldCompact: true,\n      reason: \"above_threshold\",\n      signalTokens,\n      thresholdTokens,\n    };\n  }\n  return {\n    shouldCompact: false,\n    reason: \"below_threshold\",\n    signalTokens,\n    thresholdTokens,\n  };\n}\n\nexport class CompactionNeededError extends Error {\n  readonly signalTokens: number;\n  readonly thresholdTokens: number;\n  readonly signalSource: \"provider\" | \"estimate\";\n  readonly trigger: \"threshold\" | \"operator\";\n\n  constructor(input: {\n    signalTokens: number;\n    thresholdTokens: number;\n    signalSource: \"provider\" | \"estimate\";\n    trigger?: \"threshold\" | \"operator\";\n  }) {\n    const trigger = input.trigger ?? \"threshold\";\n    super(\n      trigger === \"operator\"\n        ? \"Context compaction requested by the operator\"\n        : `Context compaction needed: signal ${input.signalTokens} tokens exceeded threshold ${input.thresholdTokens}`,\n    );\n    this.name = \"CompactionNeededError\";\n    this.signalTokens = input.signalTokens;\n    this.thresholdTokens = input.thresholdTokens;\n    this.signalSource = input.signalSource;\n    this.trigger = trigger;\n  }\n}\n\nexport class EmptyCompactionSummaryError extends Error {\n  readonly diagnostics: Record<string, unknown>;\n\n  constructor(diagnostics: Record<string, unknown> = {}) {\n    const compact = JSON.stringify(diagnostics).slice(0, 2_000);\n    super(\n      `Compaction summarizer returned no assistant text; active history was preserved${compact ? ` (${compact})` : \"\"}`,\n    );\n    this.name = \"EmptyCompactionSummaryError\";\n    this.diagnostics = diagnostics;\n  }\n}\n\n/**\n * The checkpoint model request ended in a provider/transport failure rather\n * than a successful response with an empty assistant message. Diagnostics are\n * deliberately bounded and content-free so this error can be persisted on a\n * turn without copying provider messages or conversation input into events.\n */\nexport class CompactionProviderResponseError extends Error {\n  readonly diagnostics: Record<string, unknown>;\n  readonly status?: number;\n  readonly code?: string;\n  readonly type?: string;\n  override readonly cause?: unknown;\n\n  constructor(diagnostics: Record<string, unknown> = {}, cause?: unknown) {\n    const compact = JSON.stringify(diagnostics).slice(0, 2_000);\n    super(\n      `Compaction provider request failed; active history was preserved${compact ? ` (${compact})` : \"\"}`,\n    );\n    this.name = \"CompactionProviderResponseError\";\n    this.diagnostics = diagnostics;\n    if (typeof diagnostics.httpStatus === \"number\") this.status = diagnostics.httpStatus;\n    if (typeof diagnostics.code === \"string\") this.code = diagnostics.code;\n    if (typeof diagnostics.type === \"string\") this.type = diagnostics.type;\n    if (cause !== undefined) {\n      Object.defineProperty(this, \"cause\", { value: cause, enumerable: false });\n    }\n  }\n}\n\nexport function findCompactionNeededError(\n  error: unknown,\n  seen = new WeakSet<object>(),\n): CompactionNeededError | null {\n  if (error instanceof CompactionNeededError) {\n    return error;\n  }\n  if (!error || typeof error !== \"object\") {\n    return null;\n  }\n  if (seen.has(error)) {\n    return null;\n  }\n  seen.add(error);\n  const record = error as Record<string, unknown>;\n  return (\n    findCompactionNeededError(record.cause, seen) ?? findCompactionNeededError(record.error, seen)\n  );\n}\n\n/**\n * The exact checkpoint input shape: current active history followed by Codex's\n * checkpoint prompt as a synthesized user message.\n */\nexport function buildCompactionPromptInput(items: readonly CompactionItem[]): CompactionItem[] {\n  return [\n    ...items,\n    {\n      type: \"message\",\n      role: \"user\",\n      content: COMPACTION_PROMPT,\n    },\n  ];\n}\n\nexport type PreparedCompactionPromptInput = {\n  input: CompactionItem[];\n  estimatedInputTokens: number;\n  rewrittenToolOutputs: number;\n  droppedHistoryItems: number;\n};\n\n/**\n * Fit the explicit checkpoint request without mutating canonical history.\n *\n * Codex first replaces oversized tool outputs in its temporary remote-\n * compaction input. OpenGeni does the same oldest-first, preserving the most\n * recent tool detail for the plaintext summary. If that is still insufficient,\n * whole oldest user-delimited work units are removed and the remaining suffix\n * is protocol-sanitized so no call/result/reasoning fragment is orphaned.\n * The raw active history is still the source for the eventual replacement and\n * remains unchanged if the provider call fails.\n */\nexport function prepareCompactionPromptInput(\n  items: readonly CompactionItem[],\n  maxInputTokens: number,\n): PreparedCompactionPromptInput {\n  const budget = Math.max(0, Math.floor(maxInputTokens));\n  let history = items.slice();\n  let estimatedInputTokens = estimateTokens(buildCompactionPromptInput(history));\n  let rewrittenToolOutputs = 0;\n\n  for (let index = 0; index < history.length && estimatedInputTokens > budget; index += 1) {\n    const current = history[index]!;\n    const replacement = minimalToolResultForCompaction(current);\n    if (replacement === current) continue;\n    const before = estimateItemTokens(current);\n    const after = estimateItemTokens(replacement);\n    if (after >= before) continue;\n    history[index] = replacement;\n    estimatedInputTokens -= before - after;\n    rewrittenToolOutputs += 1;\n  }\n\n  const beforeDropLength = history.length;\n  if (estimatedInputTokens > budget && history.length > 0) {\n    const prefixTokens = new Array<number>(history.length + 1).fill(0);\n    for (let index = 0; index < history.length; index += 1) {\n      prefixTokens[index + 1] = prefixTokens[index]! + estimateItemTokens(history[index]!);\n    }\n    const cuts = oldestLogicalUnitCuts(history);\n    const cut =\n      cuts.find((candidate) => estimatedInputTokens - prefixTokens[candidate]! <= budget) ??\n      history.length;\n    history = sanitizeHistoryItemsForModel(history.slice(cut));\n    estimatedInputTokens = estimateTokens(buildCompactionPromptInput(history));\n    // The synthesized checkpoint instruction is the irreducible floor. The\n    // real model budgets are far above it, but keep the helper total for tests\n    // and malformed configuration instead of constructing invalid fragments.\n    if (estimatedInputTokens > budget) {\n      history = [];\n      estimatedInputTokens = estimateTokens(buildCompactionPromptInput(history));\n    }\n  }\n\n  return {\n    input: buildCompactionPromptInput(history),\n    estimatedInputTokens,\n    rewrittenToolOutputs,\n    droppedHistoryItems: beforeDropLength - history.length,\n  };\n}\n\nfunction minimalToolResultForCompaction(item: CompactionItem): CompactionItem {\n  const type = itemType(item);\n  if (!type || !RESULT_TYPES.has(type)) return item;\n  if (type === \"tool_search_output\" && Array.isArray(item.tools) && item.tools.length > 0) {\n    return { ...item, tools: [] };\n  }\n  return boundModelToolOutputItem(item, 0);\n}\n\nfunction oldestLogicalUnitCuts(items: readonly CompactionItem[]): number[] {\n  const userMessageIndexes: number[] = [];\n  for (let index = 0; index < items.length; index += 1) {\n    if (isUserMessage(items[index])) userMessageIndexes.push(index);\n  }\n  const cuts: number[] = [];\n  if (userMessageIndexes.length === 0) {\n    return [items.length];\n  }\n  if (userMessageIndexes[0]! > 0) cuts.push(userMessageIndexes[0]!);\n  for (const index of userMessageIndexes.slice(1)) cuts.push(index);\n  cuts.push(items.length);\n  return cuts;\n}\n\n/**\n * Build the active history after compaction:\n * the newest real user messages that fit one cumulative 20k-token budget\n * (prior summaries excluded, images removed) plus one marked summary item.\n */\nexport function buildCompactionReplacementHistory(\n  items: readonly CompactionItem[],\n  summaryBody: string,\n): CompactionItem[] {\n  const retainedReversed: CompactionItem[] = [];\n  let remaining = COMPACT_USER_MESSAGE_MAX_TOKENS;\n  for (let index = items.length - 1; index >= 0 && remaining > 0; index -= 1) {\n    const item = items[index]!;\n    if (!isUserMessage(item) || isCompactionSummary(item)) {\n      continue;\n    }\n    const textTokens = estimateTextTokens(messageText(item));\n    retainedReversed.push(compactMessageToTokenBudget(item, remaining));\n    if (textTokens > remaining) {\n      remaining = 0;\n      break;\n    }\n    remaining -= textTokens;\n  }\n  const history = retainedReversed.reverse();\n  history.push(buildSummaryItem(summaryBody));\n  return history;\n}\n\n/** True for a Codex remote-compaction output item with opaque encrypted content. */\nexport function isRemoteCompactionItem(item: unknown): item is CompactionItem {\n  if (!item || typeof item !== \"object\") return false;\n  const record = item as Record<string, unknown>;\n  return (\n    record.type === \"compaction\" &&\n    typeof record.encrypted_content === \"string\" &&\n    record.encrypted_content.length > 0\n  );\n}\n\n/** Messages retained beside a remote v2 compaction blob (user + developer). */\nexport function isRetainedRemoteV2Message(item: unknown): boolean {\n  if (isCompactionSummary(item) || itemType(item) === \"compaction\") return false;\n  const role = itemRole(item);\n  return itemType(item) === \"message\" && (role === \"user\" || role === \"developer\");\n}\n\n/**\n * Build the active history after Codex remote compaction v2:\n * newest retained user/developer messages within the CLI 64k budget plus the\n * opaque `{ type: \"compaction\", encrypted_content }` item.\n */\nexport function buildRemoteV2ReplacementHistory(\n  items: readonly CompactionItem[],\n  compactionItem: CompactionItem,\n): CompactionItem[] {\n  if (!isRemoteCompactionItem(compactionItem)) {\n    throw new EmptyCompactionSummaryError({ stage: \"remote_v2_compaction_item\" });\n  }\n  const retainedReversed: CompactionItem[] = [];\n  let remaining = REMOTE_V2_RETAINED_MESSAGE_TOKEN_BUDGET;\n  for (let index = items.length - 1; index >= 0 && remaining > 0; index -= 1) {\n    const item = items[index]!;\n    if (!isRetainedRemoteV2Message(item)) continue;\n    const textTokens = estimateTextTokens(messageText(item));\n    retainedReversed.push(compactMessageToTokenBudget(item, remaining));\n    if (textTokens > remaining) {\n      remaining = 0;\n      break;\n    }\n    remaining -= textTokens;\n  }\n  const history = retainedReversed.reverse();\n  history.push({\n    type: \"compaction\",\n    encrypted_content: compactionItem.encrypted_content,\n    ...(typeof compactionItem.summary === \"string\" ? { summary: compactionItem.summary } : {}),\n  });\n  return history;\n}\n\n/**\n * Append the transient compaction_trigger used only for the remote v2 request.\n *\n * The OpenAI Agents SDK's Responses converter rejects a bare\n * `{ type: \"compaction_trigger\" }` (`UserError: Unsupported item`). It does\n * accept `type: \"unknown\"` and forwards `providerData` onto the wire, which is\n * how we deliver the Codex-only trigger through CompactionResponsesModel into\n * the Codex fetch normalizer (which allowlists top-level `compaction_trigger`).\n */\nexport function buildRemoteCompactionV2PromptInput(\n  items: readonly CompactionItem[],\n): CompactionItem[] {\n  return [\n    ...items,\n    {\n      type: \"unknown\",\n      providerData: { type: \"compaction_trigger\" },\n    },\n  ];\n}\n\n/** Extract exactly one compaction output item from a Responses payload. */\nexport function extractRemoteCompactionV2OutputItem(response: unknown): CompactionItem {\n  if (!response || typeof response !== \"object\") {\n    throw new EmptyCompactionSummaryError({ stage: \"remote_v2_extract\", reason: \"no_response\" });\n  }\n  const record = response as Record<string, unknown>;\n  const output = Array.isArray(record.output) ? record.output : [];\n  const compactionItems = output.filter(isRemoteCompactionItem);\n  if (compactionItems.length !== 1) {\n    throw new EmptyCompactionSummaryError({\n      stage: \"remote_v2_extract\",\n      reason: \"expected_exactly_one_compaction\",\n      found: compactionItems.length,\n    });\n  }\n  return compactionItems[0]!;\n}\n\nexport function compactionReplacementFingerprint(items: readonly CompactionItem[]): string {\n  // PostgreSQL JSONB does not preserve JavaScript object-key insertion order.\n  // Canonicalize recursively so a replacement has the same identity before\n  // and after its durable round trip.\n  const serialized = JSON.stringify(canonicalJsonValue(items));\n  return createHash(\"sha256\").update(serialized, \"utf8\").digest(\"hex\");\n}\n\nfunction canonicalJsonValue(value: unknown): unknown {\n  if (Array.isArray(value)) return value.map(canonicalJsonValue);\n  if (!value || typeof value !== \"object\") return value;\n  return Object.fromEntries(\n    Object.entries(value as Record<string, unknown>)\n      .filter(([, entry]) => entry !== undefined)\n      .sort(([left], [right]) => left.localeCompare(right))\n      .map(([key, entry]) => [key, canonicalJsonValue(entry)]),\n  );\n}\n\n/** Fingerprint the latest durable replacement prefix in active history. */\nexport function latestCompactionReplacementFingerprint(\n  items: readonly CompactionItem[],\n): string | null {\n  for (let index = items.length - 1; index >= 0; index -= 1) {\n    if (isCompactionSummary(items[index])) {\n      return compactionReplacementFingerprint(items.slice(0, index + 1));\n    }\n  }\n  return null;\n}\n\n/**\n * Build the synthetic summary item (a plain user message) appended to the\n * rebuilt active history.\n */\nexport function buildSummaryItem(summaryBody: string): CompactionItem {\n  const trimmed = summaryBody.trim();\n  if (!trimmed) {\n    throw new EmptyCompactionSummaryError({ stage: \"build_summary_item\" });\n  }\n  return {\n    type: \"message\",\n    role: \"user\",\n    content: `${SUMMARY_PREFIX}\\n${trimmed}`,\n    [COMPACTION_SUMMARY_MARKER]: true,\n  };\n}\n\nfunction compactMessageToTokenBudget(item: CompactionItem, maxTokens: number): CompactionItem {\n  const text = messageText(item);\n  const next = { ...item };\n  if (estimateTextTokens(text) > maxTokens) {\n    next.content = truncateMiddleByEstimatedTokens(text, maxTokens);\n    return next;\n  }\n  next.content = contentWithoutImages(item);\n  return next;\n}\n\nfunction truncateMiddleByEstimatedTokens(text: string, maxTokens: number): string {\n  const budget = Math.max(0, Math.floor(maxTokens));\n  if (estimateTextTokens(text) <= budget) {\n    return text;\n  }\n  if (estimateTextTokens(USER_MESSAGE_TRUNCATION_MARKER) > budget) {\n    return tokenBoundedPrefix(USER_MESSAGE_TRUNCATION_MARKER, budget);\n  }\n\n  let low = 0;\n  let high = text.length;\n  let best = USER_MESSAGE_TRUNCATION_MARKER;\n  while (low <= high) {\n    const keepCodeUnits = Math.floor((low + high) / 2);\n    const candidate = middleTruncationCandidate(text, keepCodeUnits);\n    if (estimateTextTokens(candidate) <= budget) {\n      best = candidate;\n      low = keepCodeUnits + 1;\n    } else {\n      high = keepCodeUnits - 1;\n    }\n  }\n  return best;\n}\n\nfunction middleTruncationCandidate(text: string, keepCodeUnits: number): string {\n  const headTarget = Math.ceil(keepCodeUnits / 2);\n  const tailTarget = Math.floor(keepCodeUnits / 2);\n  const headEnd = validPrefixBoundary(text, headTarget);\n  const tailStart = validSuffixBoundary(text, text.length - tailTarget);\n  return `${text.slice(0, headEnd)}${USER_MESSAGE_TRUNCATION_MARKER}${text.slice(tailStart)}`;\n}\n\nfunction tokenBoundedPrefix(text: string, maxTokens: number): string {\n  let low = 0;\n  let high = text.length;\n  let best = \"\";\n  while (low <= high) {\n    const target = Math.floor((low + high) / 2);\n    const end = validPrefixBoundary(text, target);\n    const candidate = text.slice(0, end);\n    if (estimateTextTokens(candidate) <= maxTokens) {\n      best = candidate;\n      low = target + 1;\n    } else {\n      high = target - 1;\n    }\n  }\n  return best;\n}\n\n/** Largest boundary at or below target that does not split a surrogate pair. */\nfunction validPrefixBoundary(text: string, target: number): number {\n  let boundary = Math.max(0, Math.min(text.length, target));\n  if (\n    boundary > 0 &&\n    boundary < text.length &&\n    isHighSurrogate(text.charCodeAt(boundary - 1)) &&\n    isLowSurrogate(text.charCodeAt(boundary))\n  ) {\n    boundary -= 1;\n  }\n  return boundary;\n}\n\n/** Smallest boundary at or above target that does not split a surrogate pair. */\nfunction validSuffixBoundary(text: string, target: number): number {\n  let boundary = Math.max(0, Math.min(text.length, target));\n  if (\n    boundary > 0 &&\n    boundary < text.length &&\n    isHighSurrogate(text.charCodeAt(boundary - 1)) &&\n    isLowSurrogate(text.charCodeAt(boundary))\n  ) {\n    boundary += 1;\n  }\n  return boundary;\n}\n\nfunction isHighSurrogate(codeUnit: number): boolean {\n  return codeUnit >= 0xd800 && codeUnit <= 0xdbff;\n}\n\nfunction isLowSurrogate(codeUnit: number): boolean {\n  return codeUnit >= 0xdc00 && codeUnit <= 0xdfff;\n}\n\nfunction contentWithoutImages(item: CompactionItem): unknown {\n  const content = (item as { content?: unknown }).content;\n  if (!Array.isArray(content)) {\n    return content;\n  }\n  return content.filter((part) => {\n    if (!part || typeof part !== \"object\") {\n      return true;\n    }\n    const type = (part as { type?: unknown }).type;\n    return type !== \"input_image\" && type !== \"image_url\";\n  });\n}\n\nfunction messageText(item: CompactionItem): string {\n  const content = (item as { content?: unknown }).content;\n  if (typeof content === \"string\") {\n    return content;\n  }\n  if (Array.isArray(content)) {\n    return content\n      .map((part) => {\n        if (part && typeof part === \"object\") {\n          const record = part as { text?: unknown; content?: unknown };\n          if (typeof record.text === \"string\") {\n            return record.text;\n          }\n          if (typeof record.content === \"string\") {\n            return record.content;\n          }\n        }\n        return \"\";\n      })\n      .join(\"\");\n  }\n  return \"\";\n}\n\nexport function renderCompactionPromptInputForChat(input: readonly CompactionItem[]): string {\n  return input.map(renderItem).join(\"\\n\");\n}\n\nfunction renderItem(item: CompactionItem): string {\n  const type = itemType(item) ?? \"unknown\";\n  if (type === \"message\") {\n    const role = itemRole(item) ?? \"assistant\";\n    return `[${role}] ${messageText(item)}`;\n  }\n  if (type === \"reasoning\") {\n    return \"[reasoning] (omitted)\";\n  }\n  if (RESULT_TYPES.has(type)) {\n    return `[tool_result] ${resultText(item)}`;\n  }\n  if (RESULT_TYPE_BY_CALL_TYPE[type]) {\n    return `[tool_call ${type}] ${callText(item)}`;\n  }\n  return `[${type}] ${safeStringify(item)}`;\n}\n\nfunction resultText(item: CompactionItem): string {\n  const output = (item as { output?: unknown }).output;\n  if (typeof output === \"string\") {\n    return output;\n  }\n  return safeStringify(output ?? item);\n}\n\nfunction callText(item: CompactionItem): string {\n  const name = (item as { name?: unknown }).name;\n  const args = (item as { arguments?: unknown }).arguments;\n  const namePart = typeof name === \"string\" ? name : \"\";\n  const argPart = typeof args === \"string\" ? args : safeStringify(args ?? {});\n  return `${namePart} ${argPart}`.trim();\n}\n\nfunction safeStringify(value: unknown): string {\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n","// packages/runtime/src/sandbox-computer.ts — the agent computer-use surface (P4.3).\n//\n// A `Computer` impl backed by xdotool (mouse/keyboard/move/click/type/key) +\n// scrot (screenshots), issued through the SAME externally-owned `session` the\n// human watches over Channel B. The agent and the human share ONE :0 display —\n// zero projection: ffmpeg reads exactly the pixels xdotool draws. Exposed to the\n// Agents SDK as a `computerTool` carried by `ComputerUseCapability`, pushed into\n// `buildAgentCapabilities` when `computerUseEnabled && desktopCapableBackend`.\n//\n// This file lives OUTSIDE the @opengeni/runtime/sandbox agent-loop-free leaf\n// (it imports `computerTool` from the @openai/agents root, which the leaf forbids)\n// and is wired into the agent-loop barrel (packages/runtime/src/index.ts).\n//\n// ── Adversarial-review fixes folded in (module 05 §Adversarial) ──────────────\n//   F1  exec is OPTIONAL on every provider (Modal has only execCommand) — the\n//       primitive dual-paths `session.exec ?? session.execCommand`.\n//   F2  execCommand returns a FORMATTED STRING with a metadata preamble, not raw\n//       stdout — screenshots read the PNG by running `base64 <path>` over the SAME\n//       command primitive and stripping the banner (NOT `session.readFile`: Modal's\n//       readFile path-validates against the /workspace root and THROWS\n//       \"Sandbox path /tmp/…png escapes the workspace root\", so the /tmp scrot can\n//       never be read → empty frame → `image_url: ''` → model 400). This mirrors\n//       recording.ts/channel-a fsReadViaExec. Exit codes come from the established\n//       `sandboxCommandExitCode` parser, not a `.exitCode` field.\n//   F3  exec/execCommand YIELDS (does not wait) — `sandboxCommandStillRunning` is\n//       treated as a retriable failure, and the input commands complete well under\n//       the yield window.\n//   F4  import paths: `computerTool`/`Computer` from `@openai/agents` (root, via\n//       the agents-core star re-export); `Capability`/`requireBoundSession` from\n//       `@openai/agents/sandbox`. `Button` is NOT exported — the union is inlined.\n//   F5  scroll deltas are model PIXELS (often hundreds) — divided by a notch step\n//       and clamped, NOT used as literal wheel-click `--repeat` counts.\n\nimport { computerTool, tool, type Computer, type Tool } from \"@openai/agents\";\nimport { Capability, type SandboxSessionLike } from \"@openai/agents/sandbox\";\nimport {\n  KeyAction,\n  PointerAction,\n  PointerButton,\n  type DesktopInputRequest,\n} from \"@opengeni/agent-proto\";\nimport { redactSensitiveText } from \"@opengeni/contracts\";\n\nimport { sandboxCommandExitCode, sandboxCommandOutput, sandboxCommandStillRunning } from \"./index\";\n// `stripExecBanner` is the SAME pure helper recording.ts uses to recover the raw\n// command body from Modal's execCommand banner (\"…Output:\\n<body>\"). Imported from\n// the agent-loop-free leaf (importing a pure parser FROM the leaf is allowed — the\n// leaf boundary only forbids the leaf importing the agent loop, not the reverse).\nimport { ensureDisplayStack, stripExecBanner } from \"./sandbox\";\n\n// `requireBoundSession` lives in @openai/agents-core/sandbox/capabilities/base\n// but is NOT re-exported from the public @openai/agents/sandbox barrel, so we\n// inline the trivial bound-session guard (parity with the SDK's own helper).\nfunction requireBoundSession(\n  capabilityType: string,\n  session?: SandboxSessionLike,\n): SandboxSessionLike {\n  if (!session) {\n    throw new ComputerUnavailableError(`capability \"${capabilityType}\" used before bind(session)`);\n  }\n  return session;\n}\n\n// `Button` is intentionally NOT imported (it is not a public export, F4) — the\n// union is inlined and kept in lockstep with @openai/agents-core/computer.d.ts.\ntype ComputerButton = \"left\" | \"right\" | \"wheel\" | \"back\" | \"forward\";\n\nconst DEFAULT_DISPLAY = \":0\";\nconst DEFAULT_DIMENSIONS: [number, number] = [1280, 800];\n// Commands must complete well under this (F3): xdotool/scrot of a 1280x800 PNG is\n// sub-second; the wait gives headroom on a cold gVisor box without masking a wedge.\nconst ACTION_YIELD_MS = 15_000;\n// Model scroll deltas are pixels (F5); one wheel \"notch\" ≈ this many pixels. e2b\n// uses a similar divisor. Clamp keeps a runaway delta from spamming the wheel.\nconst SCROLL_NOTCH_PIXELS = 100;\nconst SCROLL_MAX_CLICKS = 15;\n// screenshot() never hands the model an empty image_url (the SDK turns \"\" into\n// `image_url: ''`, which the model API 400s). A cold/not-yet-painting :0 can yield\n// zero-byte frames for the WHOLE warm-up window of a freshly cold-booted box — Xvfb\n// + XFCE + dbus + font-cache under gVisor routinely take 20s+, and the recovery path\n// after a machine→sandbox swap ALWAYS hits a stone-cold Modal box on its first turn.\n// So we retry across a bounded WALL-CLOCK budget (not a tiny fixed attempt count) with\n// a short pause between tries, so that first post-cold / post-swap screenshot self-heals\n// as the display warms — then FAIL LOUD once the budget is genuinely spent (a display\n// that is dead, not merely warming). ~800ms of retries (the prior 3×400ms) was far too\n// short to ride out a cold gVisor XFCE boot, so the turn failed loud on a transient.\nconst SCREENSHOT_WARMUP_BUDGET_MS = 30_000;\nconst SCREENSHOT_RETRY_DELAY_MS = 750;\n// The screenshot PNG is read back off the box by base64-ing it over the provider's exec\n// channel. Modal's exec collects stdout into a BOUNDED buffer that silently EMPTIES a\n// single oversized read: a fully-painted 1280x800 desktop PNG (~222 KB) base64s to\n// ~296 KB, which trips the cap and returns \"\" — the blank-frame incident. A partly-\n// painted frame (~200 KB base64) slipped under it, which is why this only surfaced once\n// the paint gate began delivering FULLY-painted frames. (Channel-A's file read already\n// caps its own base64-over-exec output for the same reason; the screenshot read was the\n// one large read that didn't bound itself.) We therefore read the file in 3-byte-aligned\n// CHUNKS whose per-read base64 (~131 KB) stays well under the cap, then VALIDATE the\n// reconstructed byte count against the on-box file size. 98304 = 96 KiB, divisible by 3\n// so each chunk's base64 is self-contained (no cross-chunk padding) and concatenating the\n// decoded chunks reconstructs the PNG byte-exactly.\nconst SCREENSHOT_READ_CHUNK_BYTES = 98_304;\n\nexport type SandboxComputerOptions = {\n  display?: string; // \":0\"\n  dimensions?: [number, number]; // must match the Xvfb geometry\n  runAs?: string; // provider runAs (modal/docker: \"sandbox\"); undefined otherwise\n  typeDelayMs?: number; // xdotool type --delay (default 12ms)\n  readOnly?: boolean; // when true, every WRITE action throws ComputerReadOnlyError\n  screenshotTmpDir?: string; // \"/tmp\"\n  // How long screenshot() keeps retrying an empty (still-warming) frame before it\n  // FAILS LOUD, and the pause between tries. Defaults to the cold-boot warm-up budget;\n  // exposed mainly so tests can shrink it (a real caller wants the full budget).\n  screenshotWarmupBudgetMs?: number;\n  screenshotRetryDelayMs?: number;\n  /**\n   * One turn-scoped preparation hook, invoked by the first real computer action.\n   * The agent may advertise computer-use on every turn, but merely advertising the\n   * tool must not boot Xvfb/XFCE or start a recording. The runtime capability owns\n   * this hook and uses it to bring up :0 (and optionally notify the worker) only\n   * after the model actually chooses a computer tool.\n   */\n  prepare?: (session: SandboxSessionLike) => Promise<void>;\n};\n\n// X keysym map for keypress(): model key names → xdotool keysyms.\nconst KEYSYM: Record<string, string> = {\n  ctrl: \"ctrl\",\n  control: \"ctrl\",\n  alt: \"alt\",\n  option: \"alt\",\n  shift: \"shift\",\n  cmd: \"super\",\n  meta: \"super\",\n  win: \"super\",\n  super: \"super\",\n  enter: \"Return\",\n  return: \"Return\",\n  tab: \"Tab\",\n  esc: \"Escape\",\n  escape: \"Escape\",\n  backspace: \"BackSpace\",\n  delete: \"Delete\",\n  space: \"space\",\n  up: \"Up\",\n  down: \"Down\",\n  left: \"Left\",\n  right: \"Right\",\n  pageup: \"Prior\",\n  pagedown: \"Next\",\n  home: \"Home\",\n  end: \"End\",\n};\nfunction toKeysym(k: string): string {\n  const low = k.toLowerCase();\n  if (KEYSYM[low]) return KEYSYM[low];\n  if (/^f([1-9]|1[0-2])$/.test(low)) return low.toUpperCase();\n  return low.length === 1 ? low : k;\n}\nconst BUTTON_NUM: Record<ComputerButton, number> = {\n  left: 1,\n  wheel: 2,\n  right: 3,\n  back: 8,\n  forward: 9,\n};\n\n// The structural slice of a provider session computer-use drives. exec and\n// execCommand are optional because the SDK's SandboxSessionLike leaves them\n// optional (Modal implements execCommand, not exec — F1). readFile is intentionally\n// NOT in this type: screenshots read the /tmp PNG via `base64 <path>` over\n// exec/execCommand (readFile path-validates against /workspace and rejects /tmp).\ntype ExecResultLike = {\n  output?: string;\n  stdout?: string;\n  stderr?: string;\n  exitCode?: number | null;\n  sessionId?: number;\n};\ntype ComputerSession = {\n  // A native provider exec returns a structured `ExecResultLike`; the routing proxy\n  // fronting a Modal box returns the execCommand banner STRING. Both are handled.\n  exec?: (args: {\n    cmd: string;\n    runAs?: string;\n    yieldTimeMs?: number;\n    maxOutputTokens?: number;\n  }) => Promise<ExecResultLike | string>;\n  execCommand?: (args: {\n    cmd: string;\n    runAs?: string;\n    yieldTimeMs?: number;\n    maxOutputTokens?: number;\n  }) => Promise<string>;\n};\n\n/** No exec/execCommand on the session, or the display is not up. */\nexport class ComputerUnavailableError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"ComputerUnavailableError\";\n  }\n}\n/** The screenshot file read back SHORT of its on-box byte size — a chunk was truncated\n *  by the provider's exec-output cap. This is deterministic, NOT a warm-up transient, so\n *  it fails LOUD immediately with the byte counts (never a silent blank the model would\n *  read as a real empty screen) and is not retried. */\nexport class ScreenshotReadError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"ScreenshotReadError\";\n  }\n}\n/** A write action attempted while readOnly. */\nexport class ComputerReadOnlyError extends Error {\n  constructor() {\n    super(\"computer-use is read-only — write actions are disabled\");\n    this.name = \"ComputerReadOnlyError\";\n  }\n}\n/** A nonzero xdotool/scrot exit, OR a command that did not finish before the\n *  yield window (F3 — \"still running\" is a failure, not a silent success). */\nexport class ComputerActionError extends Error {\n  constructor(\n    public cmd: string,\n    public exitCode: number,\n    public stderr: string,\n  ) {\n    super(`computer action failed (${exitCode}): ${cmd}${stderr ? `\\n${stderr}` : \"\"}`);\n    this.name = \"ComputerActionError\";\n  }\n}\n\n/**\n * The Computer the agent drives. Every action issues ONE shell line through the\n * externally-owned session (exec ?? execCommand, F1), prefixed with the display.\n * screenshot() scrots to a /tmp file and reads the RAW bytes by running\n * `base64 <path>` over the SAME command primitive and stripping the banner — NOT\n * `session.readFile` (Modal's readFile path-validates against /workspace and rejects\n * /tmp with \"escapes the workspace root\", which would yield an empty frame and 400\n * the model). The base64-over-exec path is /tmp-readable and binary-safe.\n */\nexport class SandboxComputer implements Computer {\n  readonly environment = \"ubuntu\" as const;\n  readonly dimensions: [number, number];\n  private session: ComputerSession & SandboxSessionLike;\n  private readonly display: string;\n  private readonly runAs?: string;\n  private readonly typeDelayMs: number;\n  private readonly readOnly: boolean;\n  private readonly tmp: string;\n  private readonly screenshotWarmupBudgetMs: number;\n  private readonly screenshotRetryDelayMs: number;\n  private readonly prepare: ((session: SandboxSessionLike) => Promise<void>) | undefined;\n  private prepared = false;\n  private preparation: Promise<void> | null = null;\n\n  constructor(session: SandboxSessionLike, opts: SandboxComputerOptions = {}) {\n    this.session = session as ComputerSession & SandboxSessionLike;\n    this.display = opts.display ?? DEFAULT_DISPLAY;\n    this.dimensions = opts.dimensions ?? DEFAULT_DIMENSIONS;\n    if (opts.runAs !== undefined) {\n      this.runAs = opts.runAs;\n    }\n    this.typeDelayMs = opts.typeDelayMs ?? 12;\n    this.readOnly = opts.readOnly ?? false;\n    this.tmp = opts.screenshotTmpDir ?? \"/tmp\";\n    this.screenshotWarmupBudgetMs = opts.screenshotWarmupBudgetMs ?? SCREENSHOT_WARMUP_BUDGET_MS;\n    this.screenshotRetryDelayMs = opts.screenshotRetryDelayMs ?? SCREENSHOT_RETRY_DELAY_MS;\n    this.prepare = opts.prepare;\n  }\n\n  /** Rebind to a freshly resumed-by-id session after a box rollover / re-establish. */\n  rebind(session: SandboxSessionLike) {\n    this.session = session as ComputerSession & SandboxSessionLike;\n    this.prepared = false;\n    this.preparation = null;\n  }\n\n  private async prepareOnce(): Promise<void> {\n    if (this.prepared) return;\n    if (!this.prepare) {\n      // No lazy hook means the caller handed us an already-ready display, which\n      // is the historical direct-construction behavior used by embedders/tests.\n      this.prepared = true;\n      return;\n    }\n    this.preparation ??= this.prepare(this.session);\n    try {\n      await this.preparation;\n      this.prepared = true;\n    } catch (error) {\n      // A viewer may have contended the display flock or a provider operation may\n      // have failed transiently. Let a later computer call retry; never cache a\n      // rejected preparation as the permanent state of the turn.\n      this.preparation = null;\n      throw error;\n    }\n  }\n\n  // The single command primitive. Dual-paths exec/execCommand (F1), then uses the\n  // established string-aware parsers (F2/F3): exitCode from the preamble, and\n  // \"still running\" → a retriable failure. Returns the command OUTPUT body.\n  private async x(cmd: string): Promise<string> {\n    await this.prepareOnce();\n    const args = {\n      cmd: `DISPLAY=${this.display} ${cmd}`,\n      ...(this.runAs ? { runAs: this.runAs } : {}),\n      yieldTimeMs: ACTION_YIELD_MS,\n      maxOutputTokens: 4_000,\n    };\n    let result: ExecResultLike | string;\n    if (typeof this.session.exec === \"function\") {\n      result = await this.session.exec(args);\n    } else if (typeof this.session.execCommand === \"function\") {\n      result = await this.session.execCommand(args);\n    } else {\n      throw new ComputerUnavailableError(\"session cannot run commands (no exec/execCommand)\");\n    }\n    const output = sandboxCommandOutput(result);\n    if (sandboxCommandStillRunning(result)) {\n      // F3: the command exceeded the yield window. WARN AND RETURN rather than\n      // throw. Throwing here causes the SDK's catch in `_runComputerActionAndScreenshot`\n      // to set output='' and build `{image_url:\"\"}` → Azure 400. By returning\n      // instead, the SDK proceeds past the action loop and calls computer.screenshot()\n      // so the model gets the REAL current frame for its next step.\n      //\n      // screenshot()'s FAIL-LOUD + retry contract is preserved: if scrot itself\n      // times out (very unlikely at 15 s), x() returns here, readScreenshotBytes\n      // produces empty bytes, and the retry loop eventually throws. The wire-level\n      // backstop in computerCallNormalizingFetch is also in place as a second net.\n      console.warn(\n        `[SandboxComputer] action command did not finish before the ${ACTION_YIELD_MS}ms yield window — proceeding to screenshot: ${redactSensitiveText(cmd)}`,\n      );\n      return output;\n    }\n    const exitCode = sandboxCommandExitCode(result);\n    if (exitCode !== null && exitCode !== 0) {\n      throw new ComputerActionError(cmd, exitCode, output);\n    }\n    return output;\n  }\n\n  private guardWrite() {\n    if (this.readOnly) throw new ComputerReadOnlyError();\n  }\n  private shq(s: string): string {\n    return `'${s.replace(/'/g, `'\\\\''`)}'`;\n  }\n\n  async screenshot(): Promise<string> {\n    // F2: scrot to a /tmp file, then read the RAW PNG bytes by running `base64\n    // <path>` over the SAME command primitive (exec ?? execCommand) and stripping\n    // the banner — NOT `session.readFile`. On Modal, readFile path-validates the\n    // path against the /workspace root and THROWS for /tmp (\"Sandbox path\n    // /tmp/og-shot-*.png escapes the workspace root\"), so the scrot could never be\n    // read → empty frame → `image_url: ''` → the model 400s. The base64-over-exec\n    // mechanism (mirroring Channel A's bounded file reads\n    // fsReadViaExec) is /tmp-readable and binary-safe. We do NOT use execCommand's\n    // body via the `this.x()` parser — that drops the execCommand string body; the\n    // banner is stripped explicitly here so the base64 payload survives intact.\n    //\n    // CRITICAL CONTRACT: this NEVER returns an empty string. The Agents SDK builds\n    // the model-facing image as `data:image/png;base64,${output}` — so an empty\n    // `output` becomes `image_url: ''`, which the model API rejects with\n    // \"400 Invalid input[N].output.image_url, expected a valid URL\" and kills the\n    // turn. An empty/failed frame is therefore a THROW (a clear action failure the\n    // SDK surfaces), never a silent \"\". We also self-heal a transient cold-display\n    // frame: bounded retries with a short wait between attempts, so a :0 that is up\n    // but momentarily not painting (XFCE/dbus still warming) recovers without\n    // failing the turn.\n    let lastError: unknown;\n    const deadline = Date.now() + this.screenshotWarmupBudgetMs;\n    let attempt = 0;\n    // Retry across a WALL-CLOCK budget (not a fixed count): a stone-cold box on the\n    // first post-swap / post-cold turn can take 20s+ to paint, and a zero-byte frame\n    // is a KNOWN transient during that warm-up — not a reason to fail the turn.\n    while (true) {\n      if (attempt > 0) {\n        await new Promise((r) => setTimeout(r, this.screenshotRetryDelayMs));\n      }\n      attempt++;\n      const f = `${this.tmp}/og-shot-${Date.now()}-${Math.random().toString(36).slice(2)}.png`;\n      try {\n        await this.x(`scrot --pointer --overwrite ${f}`);\n        const bytes = await this.readScreenshotBytes(f);\n        if (bytes.length === 0) {\n          // A cold/not-yet-painting :0 yields a zero-byte frame. Retry rather than\n          // hand the model an empty image_url; throw once the budget is spent.\n          throw new ComputerUnavailableError(\n            \"scrot produced an empty screenshot (display not up?)\",\n          );\n        }\n        return Buffer.from(bytes).toString(\"base64\");\n      } catch (error) {\n        lastError = error;\n        // A short/truncated read is deterministic (the exec-output cap), not a warm-up\n        // transient — retrying only burns the budget and delays a legible failure. Fail\n        // loud NOW (the `finally` still cleans up the temp file).\n        if (error instanceof ScreenshotReadError) {\n          throw error;\n        }\n      } finally {\n        // Best-effort cleanup on every attempt (success OR failure); never mask the\n        // screenshot result.\n        // If preparation itself failed, scrot never ran and no file exists. Do\n        // not route cleanup through x(), because that would retry the expensive\n        // display preparation merely to delete a nonexistent path.\n        if (this.prepared) {\n          await this.x(`rm -f ${f}`).catch(() => undefined);\n        }\n      }\n      // Stop once the warm-up budget is spent — the NEXT sleep would push us past it.\n      if (Date.now() + this.screenshotRetryDelayMs >= deadline) {\n        break;\n      }\n    }\n    // Exhausted the warm-up budget: FAIL LOUD. A clear throw is the only acceptable\n    // outcome — returning \"\" here would surface to the model as an invalid empty\n    // image_url. Reaching here means the display was still dead after ~30s, not merely\n    // warming, so a hard action failure is correct.\n    if (lastError instanceof Error) {\n      throw lastError;\n    }\n    throw new ComputerUnavailableError(\"scrot produced an empty screenshot (display not up?)\");\n  }\n\n  // Run a read-only command over the SAME command primitive computer actions use\n  // (exec ?? execCommand) and return its RAW stdout body — NOT `session.readFile` (Modal\n  // path-validates against /workspace and rejects /tmp) and NOT `this.x()` (its\n  // `sandboxCommandOutput` parser drops the execCommand STRING body). exec exposes a\n  // structured stdout; execCommand returns the formatted STRING, so we strip its banner\n  // (\"…Output:\\n<body>\") to recover the body.\n  //\n  // ROUTING-PROXY SEAM: when the selfhosted feature is on, the turn's box is wrapped in a\n  // `RoutingSandboxSession`, which ALWAYS exposes an `exec` method — but for a Modal-backed\n  // box (no native `exec`) that method internally falls back to `execCommand` and returns\n  // the formatted STRING, not a `{output}` object. `sandboxCommandOutput` returns \"\" for a\n  // string, so a naive `sandboxCommandOutput(await session.exec())` silently dropped the\n  // whole screenshot body → empty read → \"display not up\" error card on EVERY Modal\n  // computer-use turn once routing was enabled. So a STRING exec result is banner-stripped\n  // exactly like the direct execCommand path; only a structured object goes to\n  // sandboxCommandOutput.\n  private async readCmdRaw(cmd: string): Promise<string> {\n    const args = {\n      cmd,\n      ...(this.runAs ? { runAs: this.runAs } : {}),\n      yieldTimeMs: ACTION_YIELD_MS,\n      // null disables the provider's TOKEN truncation; the byte cap this method chunks\n      // around is a separate, lower-level exec-stdout buffer limit.\n      maxOutputTokens: null as unknown as number,\n    };\n    if (typeof this.session.exec === \"function\") {\n      const result = await this.session.exec(args);\n      // A routing proxy fronting a Modal box returns the execCommand banner STRING;\n      // a native structured exec returns an object. Handle both so neither silently\n      // yields an empty body.\n      return typeof result === \"string\" ? stripExecBanner(result) : sandboxCommandOutput(result);\n    }\n    if (typeof this.session.execCommand === \"function\") {\n      return stripExecBanner(await this.session.execCommand(args));\n    }\n    throw new ComputerUnavailableError(\n      \"session cannot run commands (no exec/execCommand) — screenshots unavailable\",\n    );\n  }\n\n  // Read the screenshot PNG bytes off the box. A SINGLE `base64 <file>` over Modal's\n  // exec silently returns \"\" once the base64 exceeds the exec-stdout buffer cap (a full\n  // desktop ~296 KB base64 trips it — the blank-frame incident). So we size the file\n  // first, then base64 it in SCREENSHOT_READ_CHUNK_BYTES-sized, 3-byte-aligned chunks\n  // (each read's base64 stays well under the cap) and reconstruct — validating the total\n  // against the on-box size and failing LOUD on any short read rather than handing back a\n  // truncated/blank frame. Binary-safe: base64 is plain ASCII over stdout.\n  private async readScreenshotBytes(path: string): Promise<Uint8Array> {\n    // On-box byte size (tiny output — always safe). A still-warming :0 can yield a\n    // zero-byte scrot file; report empty so the caller retries within its warm-up budget.\n    const sizeRaw = (await this.readCmdRaw(`wc -c < ${path} 2>/dev/null`)).replace(/[^0-9]/g, \"\");\n    const fileSize = Number.parseInt(sizeRaw, 10);\n    if (!Number.isFinite(fileSize) || fileSize <= 0) return new Uint8Array();\n\n    const chunks: Buffer[] = [];\n    const nChunks = Math.ceil(fileSize / SCREENSHOT_READ_CHUNK_BYTES);\n    for (let i = 0; i < nChunks; i++) {\n      // `dd bs=CHUNK skip=i count=1` reads bytes [i*CHUNK, (i+1)*CHUNK); CHUNK % 3 == 0\n      // so each chunk's base64 is self-contained and decoded chunks concatenate exactly.\n      const raw = await this.readCmdRaw(\n        `dd if=${path} bs=${SCREENSHOT_READ_CHUNK_BYTES} skip=${i} count=1 2>/dev/null | base64`,\n      );\n      chunks.push(Buffer.from(raw.replace(/\\s+/g, \"\"), \"base64\"));\n    }\n    const bytes = Buffer.concat(chunks);\n    if (bytes.length !== fileSize) {\n      throw new ScreenshotReadError(\n        `screenshot read reconstructed ${bytes.length}B of ${fileSize}B (${nChunks} chunk(s), path=${path}) — a chunk was truncated by the exec-output cap; frame incomplete`,\n      );\n    }\n    return new Uint8Array(bytes);\n  }\n\n  async click(xp: number, yp: number, button: ComputerButton) {\n    this.guardWrite();\n    await this.x(`xdotool mousemove --sync ${xp} ${yp} click ${BUTTON_NUM[button] ?? 1}`);\n  }\n  async doubleClick(xp: number, yp: number) {\n    this.guardWrite();\n    await this.x(`xdotool mousemove --sync ${xp} ${yp} click --repeat 2 --delay 60 1`);\n  }\n  async move(xp: number, yp: number) {\n    this.guardWrite();\n    await this.x(`xdotool mousemove --sync ${xp} ${yp}`);\n  }\n  async scroll(xp: number, yp: number, sx: number, sy: number) {\n    this.guardWrite();\n    // F5: model deltas are PIXELS — convert to wheel notches, clamp.\n    const notches = (px: number): number =>\n      Math.min(SCROLL_MAX_CLICKS, Math.max(0, Math.round(Math.abs(px) / SCROLL_NOTCH_PIXELS)));\n    const vBtn = sy < 0 ? 4 : 5;\n    const hBtn = sx < 0 ? 6 : 7;\n    const vN = notches(sy);\n    const hN = notches(sx);\n    let cmd = `xdotool mousemove --sync ${xp} ${yp}`;\n    if (vN) cmd += ` click --repeat ${vN} ${vBtn}`;\n    if (hN) cmd += ` click --repeat ${hN} ${hBtn}`;\n    await this.x(cmd);\n  }\n  async type(text: string) {\n    this.guardWrite();\n    await this.x(`xdotool type --delay ${this.typeDelayMs} -- ${this.shq(text)}`);\n  }\n  async keypress(keys: string[]) {\n    this.guardWrite();\n    const combo = keys.map(toKeysym).join(\"+\");\n    await this.x(`xdotool key -- ${this.shq(combo)}`);\n  }\n  async drag(path: [number, number][]) {\n    this.guardWrite();\n    if (path.length === 0) return;\n    const [sx0, sy0] = path[0]!;\n    let cmd = `xdotool mousemove --sync ${sx0} ${sy0} mousedown 1`;\n    for (const [px, py] of path.slice(1)) cmd += ` mousemove --sync ${px} ${py}`;\n    cmd += ` mouseup 1`;\n    await this.x(cmd);\n  }\n  async wait() {\n    await new Promise((r) => setTimeout(r, 1000));\n  }\n}\n\n// ── The native-desktop computer (self-hosted / macOS) ────────────────────────\n//\n// `SandboxComputer` drives the desktop by shelling out to xdotool/scrot over the\n// session's `exec` — which needs those X utilities installed in the box image and\n// only works under X11. A SELF-HOSTED machine (macOS OR bring-your-own Linux) has\n// neither guarantee, so it drives the desktop NATIVELY over the control plane: the\n// Rust agent injects input via CGEvent (macOS) / XTEST (Linux) and captures via\n// ScreenCaptureKit / x11, exposed as the two `SelfhostedSession` ops below. No\n// xdotool/scrot dependency; works on macOS.\n\n/** The structural slice of a self-hosted session the native computer drives — the\n *  two control-plane ops added in session.ts. Kept structural (NOT an import of\n *  `SelfhostedSession`) so this agent-loop file never hard-couples to the sandbox\n *  leaf; the duck-typed `isNativeDesktopSession` probe (below) selects on it. */\nexport type NativeDesktopSession = {\n  desktopInput(event: DesktopInputRequest[\"event\"]): Promise<void>;\n  // `nativeWidth`/`nativeHeight` are the PRE-DOWNSCALE capture geometry (equal to\n  // width/height when the agent did not have to shrink the PNG to fit the transport\n  // budget). NativeDesktopComputer scales model clicks from the ENCODED pixel space\n  // back to native pixels using their ratio before injecting.\n  screenshot(): Promise<{\n    png: Uint8Array;\n    width: number;\n    height: number;\n    nativeWidth: number;\n    nativeHeight: number;\n  }>;\n};\n\n/** Model `Button` → wire `PointerButton`. The proto has no back/forward button, so\n *  those degrade to UNSPECIFIED (the agent ignores an unmapped button rather than\n *  mis-clicking). A total record so indexing is exhaustive. */\nconst POINTER_BUTTON: Record<ComputerButton, PointerButton> = {\n  left: PointerButton.POINTER_BUTTON_LEFT,\n  right: PointerButton.POINTER_BUTTON_RIGHT,\n  wheel: PointerButton.POINTER_BUTTON_MIDDLE,\n  back: PointerButton.POINTER_BUTTON_UNSPECIFIED,\n  forward: PointerButton.POINTER_BUTTON_UNSPECIFIED,\n};\n\n// Native capture (ScreenCaptureKit / x11) can hand back a null/empty FIRST frame in\n// the moments right after the agent connects — the capture stream still warming — the\n// same class of transient the scrot path retries around for a cold :0. Native capture\n// is normally sub-second, so the warm-up budget is much shorter than the scrot path's\n// 30 s cold-Modal-box budget; enough to ride a first-frame miss, not enough to hang a\n// turn on a genuinely dead capture. A TERMINAL failure (permission denied) short-\n// circuits the budget and fails immediately.\nconst NATIVE_SCREENSHOT_WARMUP_BUDGET_MS = 6_000;\nconst NATIVE_SCREENSHOT_RETRY_DELAY_MS = 400;\n\nexport type NativeDesktopComputerOptions = {\n  dimensions?: [number, number]; // the display geometry (must match the capture size)\n  environment?: NonNullable<Computer[\"environment\"]>; // \"ubuntu\" (default) | \"mac\" | ...; model uses it for OS key conventions\n  readOnly?: boolean; // when true, every WRITE action throws ComputerReadOnlyError\n  screenshotWarmupBudgetMs?: number; // wall-clock budget to retry a warming/empty first frame\n  screenshotRetryDelayMs?: number; // delay between warm-up retries\n};\n\n/** A capture failure that RETRYING cannot cure — Screen Recording (TCC) has not been\n *  granted to the agent, so every capture will deny until the user grants it. We fail\n *  FAST on this rather than burn the warm-up budget, and surface the reason verbatim so\n *  the operator sees \"grant Screen Recording\", not a blank screen. Matches the agent's\n *  `capture_rgba` denial strings (\"Screen Recording permission is not granted\",\n *  \"no shareable content (Screen Recording denied?)\"). */\nfunction isTerminalCaptureDenial(error: unknown): boolean {\n  const msg = (error instanceof Error ? error.message : String(error ?? \"\")).toLowerCase();\n  return (\n    msg.includes(\"screen recording\") ||\n    msg.includes(\"permission is not granted\") ||\n    msg.includes(\"consent\")\n  );\n}\n\n/**\n * A `Computer` that drives a SELF-HOSTED machine's OWN desktop NATIVELY over the\n * control plane (`desktopInput` inject + `screenshot` capture on the bound\n * `SelfhostedSession`) instead of xdotool/scrot over `exec`. Consent + epoch are\n * enforced AGENT-side, so an unconsented inject surfaces the session's mapped\n * control error.\n *\n * screenshot() returns raw base64 with NO data-URL prefix — the EXACT contract of\n * `SandboxComputer.screenshot`: the Agents SDK wraps it as\n * `data:image/png;base64,${output}`, so an empty string would become\n * `image_url: ''` and 400 the model turn. An empty PNG therefore THROWS\n * `ComputerUnavailableError` (mirroring SandboxComputer's empty-guard) — the model\n * never receives an empty image_url.\n */\nexport class NativeDesktopComputer implements Computer {\n  readonly environment: NonNullable<Computer[\"environment\"]>;\n  readonly dimensions: [number, number];\n  private session: NativeDesktopSession;\n  private readonly readOnly: boolean;\n  private readonly screenshotWarmupBudgetMs: number;\n  private readonly screenshotRetryDelayMs: number;\n  // The ENCODED vs NATIVE geometry of the MOST RECENT screenshot the model saw. The\n  // model computes click coordinates in the encoded-pixel space of that screenshot;\n  // when the agent downscaled the PNG to fit the transport budget, encoded < native,\n  // so we scale coordinates back up to native pixels before injecting (the agent's\n  // native inject — macOS CGEvent / Linux XTEST — expects native-pixel coordinates,\n  // exactly as it received them pre-downscale). Null until the first screenshot;\n  // equal encoded==native (or absent) ⇒ scale factor 1.0 ⇒ byte-identical behavior.\n  private lastEncoded: [number, number] | null = null;\n  private lastNative: [number, number] | null = null;\n\n  constructor(session: NativeDesktopSession, opts: NativeDesktopComputerOptions = {}) {\n    this.session = session;\n    this.dimensions = opts.dimensions ?? DEFAULT_DIMENSIONS;\n    // Default \"ubuntu\" (self-hosted Linux is the near-term target); a macOS session\n    // should pass \"mac\" so the model uses ⌘-based shortcuts — see the coordinate TODO.\n    this.environment = opts.environment ?? \"ubuntu\";\n    this.readOnly = opts.readOnly ?? false;\n    this.screenshotWarmupBudgetMs =\n      opts.screenshotWarmupBudgetMs ?? NATIVE_SCREENSHOT_WARMUP_BUDGET_MS;\n    this.screenshotRetryDelayMs = opts.screenshotRetryDelayMs ?? NATIVE_SCREENSHOT_RETRY_DELAY_MS;\n  }\n\n  /** Rebind to a freshly resumed-by-id session after a box rollover / re-establish. */\n  rebind(session: NativeDesktopSession) {\n    this.session = session;\n  }\n\n  private guardWrite() {\n    if (this.readOnly) throw new ComputerReadOnlyError();\n  }\n\n  /** Scale a coordinate the model expressed in the MOST RECENT screenshot's\n   *  ENCODED pixel space back to NATIVE pixels. When the last frame was not\n   *  downscaled (encoded == native), or no screenshot has been taken yet, this is a\n   *  1:1 identity — the byte-identical current behavior. The agent then applies its\n   *  own platform mapping (macOS divides native pixels by the backing scale to reach\n   *  CGEvent points; Linux XTEST is 1:1) exactly as it did pre-downscale. */\n  private toNative(x: number, y: number): { x: number; y: number } {\n    const enc = this.lastEncoded;\n    const nat = this.lastNative;\n    if (!enc || !nat || enc[0] <= 0 || enc[1] <= 0) return { x, y };\n    if (enc[0] === nat[0] && enc[1] === nat[1]) return { x, y };\n    return {\n      x: Math.round((x * nat[0]) / enc[0]),\n      y: Math.round((y * nat[1]) / enc[1]),\n    };\n  }\n\n  private async pointer(\n    x: number,\n    y: number,\n    action: PointerAction,\n    button: PointerButton,\n  ): Promise<void> {\n    // COORDINATE SEAM: the model computes x/y against the pixels of the screenshot it\n    // just saw — which the agent may have DOWNSCALED to fit the transport's max\n    // payload (a full-res Retina/busy screen exceeds NATS's 1 MiB default). We scale\n    // those encoded-pixel coordinates back to native pixels here, using the native\n    // geometry the last screenshot reported, so the agent's native inject lands the\n    // click where the model intended. When no downscale occurred the factor is 1.0\n    // and the coordinates pass through unchanged. Self-hosted Linux (XTEST/x11) and\n    // any non-downscaled frame are 1:1 and unaffected.\n    const n = this.toNative(x, y);\n    await this.session.desktopInput({\n      $case: \"pointer\",\n      pointer: { x: n.x, y: n.y, action, button },\n    });\n  }\n\n  async screenshot(): Promise<string> {\n    // CRITICAL CONTRACT (mirrors SandboxComputer.screenshot): NEVER return \"\". The\n    // Agents SDK builds the model image as `data:image/png;base64,${output}`; an\n    // empty output → `image_url: ''`. On the hosted computer_use_preview path the SDK\n    // catches a throw here, sets output='', and the wire-seam sanitizer rewrites the\n    // empty image_url to a BLANK 1×1 placeholder to dodge a 400 — so a capture MISS\n    // silently reaches the model as a \"blank desktop\" it then confidently reports.\n    //\n    // Native capture (ScreenCaptureKit / x11) can hand back a null/empty FIRST frame\n    // in the moments right after the agent connects (the capture stream warming) — the\n    // same transient the scrot path retries around for a cold :0. This path previously\n    // did a SINGLE capture, so one warm-up miss became a blank. We now RETRY across a\n    // bounded budget and, on a terminal failure, FAIL LOUD with the agent's actual\n    // reason (logged) — never a silent blank. A permission (TCC) denial is terminal:\n    // retrying cannot grant Screen Recording, so we break immediately.\n    let lastError: unknown;\n    const deadline = Date.now() + this.screenshotWarmupBudgetMs;\n    let attempt = 0;\n    while (true) {\n      if (attempt > 0) {\n        await new Promise((r) => setTimeout(r, this.screenshotRetryDelayMs));\n      }\n      attempt++;\n      try {\n        const { png, width, height, nativeWidth, nativeHeight } = await this.session.screenshot();\n        if (png.length === 0) {\n          // A warming capture yields an empty frame — retry rather than hand the model\n          // a blank; throw once the budget is spent.\n          throw new ComputerUnavailableError(\n            \"native desktop screenshot returned an empty frame (display not up?)\",\n          );\n        }\n        // Record the encoded (what the model sees) vs native geometry of THIS frame so\n        // the next click/move/scroll/drag scales its coordinates back to native pixels.\n        this.lastEncoded = [width, height];\n        this.lastNative = [nativeWidth || width, nativeHeight || height];\n        return Buffer.from(png).toString(\"base64\");\n      } catch (error) {\n        lastError = error;\n        // A permission denial will deny on every retry — fail fast with the reason.\n        if (isTerminalCaptureDenial(error)) break;\n      }\n      // Stop once the warm-up budget is spent — the NEXT sleep would push us past it.\n      if (Date.now() + this.screenshotRetryDelayMs >= deadline) {\n        break;\n      }\n    }\n    // Exhausted the budget (or hit a terminal denial): FAIL LOUD. Log the specific\n    // reason so the failure is DIAGNOSABLE (not a silent blank the model misreads),\n    // then rethrow — never return \"\".\n    const reason = redactSensitiveText(\n      lastError instanceof Error ? lastError.message : String(lastError),\n    );\n    console.warn(\n      `[NativeDesktopComputer] screenshot failed after ${attempt} attempt(s): ${reason}`,\n    );\n    if (lastError instanceof Error) {\n      throw lastError;\n    }\n    throw new ComputerUnavailableError(\n      \"native desktop screenshot returned an empty frame (display not up?)\",\n    );\n  }\n\n  async click(x: number, y: number, button: ComputerButton) {\n    this.guardWrite();\n    await this.pointer(\n      x,\n      y,\n      PointerAction.POINTER_ACTION_CLICK,\n      POINTER_BUTTON[button] ?? PointerButton.POINTER_BUTTON_LEFT,\n    );\n  }\n  async doubleClick(x: number, y: number) {\n    this.guardWrite();\n    await this.pointer(\n      x,\n      y,\n      PointerAction.POINTER_ACTION_DOUBLE_CLICK,\n      PointerButton.POINTER_BUTTON_LEFT,\n    );\n  }\n  async move(x: number, y: number) {\n    this.guardWrite();\n    await this.pointer(\n      x,\n      y,\n      PointerAction.POINTER_ACTION_MOVE,\n      PointerButton.POINTER_BUTTON_UNSPECIFIED,\n    );\n  }\n  async scroll(x: number, y: number, sx: number, sy: number) {\n    this.guardWrite();\n    // The scroll ANCHOR (x,y) is a screenshot-pixel position → scale to native like a\n    // click. The deltas (sx,sy) are relative scroll AMOUNTS, not positions; the agent\n    // owns the platform-appropriate wheel translation, so they pass through unscaled\n    // (no xdotool \"notch\" quantization here — that is an xdotool-specific artifact).\n    const n = this.toNative(x, y);\n    await this.session.desktopInput({\n      $case: \"scroll\",\n      scroll: { x: n.x, y: n.y, deltaX: sx, deltaY: sy },\n    });\n  }\n  async type(text: string) {\n    this.guardWrite();\n    // A literal text burst: isText:true tells the agent to type the string verbatim\n    // (Unicode-aware) rather than interpret it as a key name.\n    await this.session.desktopInput({\n      $case: \"key\",\n      key: { key: text, isText: true, action: KeyAction.KEY_ACTION_PRESS },\n    });\n  }\n  async keypress(keys: string[]) {\n    this.guardWrite();\n    // A chord (\"ctrl+c\") as ONE non-text KeyEvent (isText:false ⇒ interpret as key\n    // names). We send the model's PLATFORM-INDEPENDENT key names joined with \"+\" —\n    // NOT xdotool X keysyms (SandboxComputer's toKeysym maps to \"Return\"/\"super\"/\n    // \"Prior\", which are X-specific and wrong for the macOS CGEvent path). The agent\n    // owns the per-platform key-name → keycode mapping (the KeyEvent.key contract).\n    await this.session.desktopInput({\n      $case: \"key\",\n      key: { key: keys.join(\"+\"), isText: false, action: KeyAction.KEY_ACTION_PRESS },\n    });\n  }\n  async drag(path: [number, number][]) {\n    this.guardWrite();\n    if (path.length === 0) return;\n    // Press at the start, move through each waypoint with the button held, release at\n    // the last point. The agent tracks button state across the DOWN → MOVE… → UP.\n    const [sx, sy] = path[0]!;\n    await this.pointer(\n      sx,\n      sy,\n      PointerAction.POINTER_ACTION_DOWN,\n      PointerButton.POINTER_BUTTON_LEFT,\n    );\n    for (const [px, py] of path.slice(1)) {\n      await this.pointer(\n        px,\n        py,\n        PointerAction.POINTER_ACTION_MOVE,\n        PointerButton.POINTER_BUTTON_LEFT,\n      );\n    }\n    const [ex, ey] = path[path.length - 1]!;\n    await this.pointer(ex, ey, PointerAction.POINTER_ACTION_UP, PointerButton.POINTER_BUTTON_LEFT);\n  }\n  async wait() {\n    await new Promise((r) => setTimeout(r, 1000));\n  }\n}\n\n/**\n * Backend-aware SELECTION discriminator: a SELF-HOSTED session exposes the two\n * native control-plane ops (`desktopInput` + `screenshot`); a MODAL session does\n * not (it drives the desktop via xdotool/scrot over `exec`). Duck-typing on those\n * two methods keeps this file from hard-importing `SelfhostedSession` (avoiding an\n * agent-loop ↔ sandbox-leaf import coupling) and is future-proof: any backend that\n * grows native inject/capture is picked up automatically.\n */\nexport function isNativeDesktopSession(\n  session: SandboxSessionLike,\n): session is SandboxSessionLike & NativeDesktopSession {\n  const s = session as Partial<NativeDesktopSession>;\n  return typeof s.desktopInput === \"function\" && typeof s.screenshot === \"function\";\n}\n\n// ── Function-transport (codex / text backend) computer tools ─────────────────\n//\n// The SDK emits computer-use ONLY as the HOSTED `computer_use_preview` tool, which\n// the codex / ChatGPT backend rejects (it accepts only function/custom/web_search\n// tool types) — so on codex the hosted tool is unusable and the agent has nothing\n// to drive the desktop with. We mirror EXACTLY how the SDK's filesystem capability\n// degrades `view_image` for the text transport: when the bound model does NOT\n// support the structured tool-output transport, emit a set of FUNCTION tools that\n// route to the SAME bound `Computer`, and hand the model the screen by rendering\n// the screenshot image-output as a text-transport data URL — the identical two-step\n// `imageOutputFromBytes` → `renderImageForTextTransport` the SDK's text `view_image`\n// uses. Those three helpers are NOT public exports of `@openai/agents` /\n// `@openai/agents/sandbox` (they live in the SDK's private capabilities/transport +\n// shared/media modules, unreachable via the package `exports` map), so — mirroring\n// selfhosted/session.ts's local `sniffImageMediaType` — the three tiny pure helpers\n// are reimplemented here in lockstep with the SDK.\n\n/** The SDK's tool-output image shape (@openai/agents-core shared/media `ToolOutputImage`). */\ntype ToolOutputImage = { type: \"image\"; image: { data: Uint8Array; mediaType: string } };\n\n/** Magic-byte image sniff, in lockstep with the SDK's `sniffImageMediaType`\n *  (shared/media). Screenshots are always PNG (scrot / ScreenCaptureKit / x11), so\n *  an unrecognized header defaults to image/png rather than failing the frame. */\nfunction sniffScreenshotMediaType(bytes: Uint8Array): string {\n  if (bytes[0] === 0x89 && bytes[1] === 0x50 && bytes[2] === 0x4e && bytes[3] === 0x47)\n    return \"image/png\";\n  if (bytes[0] === 0xff && bytes[1] === 0xd8 && bytes[2] === 0xff) return \"image/jpeg\";\n  if (bytes[0] === 0x47 && bytes[1] === 0x49 && bytes[2] === 0x46 && bytes[3] === 0x38)\n    return \"image/gif\";\n  if (\n    bytes[0] === 0x52 &&\n    bytes[1] === 0x49 &&\n    bytes[2] === 0x46 &&\n    bytes[3] === 0x46 &&\n    bytes[8] === 0x57 &&\n    bytes[9] === 0x45 &&\n    bytes[10] === 0x42 &&\n    bytes[11] === 0x50\n  )\n    return \"image/webp\";\n  return \"image/png\";\n}\n\n/** Build the SDK `ToolOutputImage` from raw screenshot bytes — the structured shape\n *  the SDK's `imageOutputFromBytes` produces (`{type:'image', image:{data,mediaType}}`). */\nfunction imageOutputFromScreenshotBytes(bytes: Uint8Array): ToolOutputImage {\n  return {\n    type: \"image\",\n    image: { data: Uint8Array.from(bytes), mediaType: sniffScreenshotMediaType(bytes) },\n  };\n}\n\n/** Render an image tool-output as a text-transport string, in lockstep with the\n *  SDK's private `renderImageForTextTransport` (capabilities/filesystem). Our image\n *  output always carries `data` as bytes, so it becomes a `data:<mediaType>;base64,…`\n *  URL — the exact form the text-backend `view_image` hands the model. */\nfunction renderImageForTextTransport(output: ToolOutputImage | string): string {\n  if (typeof output === \"string\") return output;\n  const { image } = output;\n  const mediaType =\n    typeof image.mediaType === \"string\" ? image.mediaType : \"application/octet-stream\";\n  return `data:${mediaType};base64,${Buffer.from(image.data).toString(\"base64\")}`;\n}\n\nconst COMPUTER_READ_ONLY_MESSAGE =\n  \"computer-use is read-only for this session — click, double_click, move, scroll, type, keypress, and drag are disabled. Call computer_screenshot to observe the desktop.\";\n\n// The two coordinate properties every pointer tool shares. Raw JSON schema (NOT\n// zod: zod is not a @opengeni/runtime dependency) with `strict:false`, mirroring the\n// SDK's own `apply_patch` function-tool schema style.\nconst COORD_PROPS = {\n  x: {\n    type: \"integer\",\n    description: \"X coordinate in the pixels of the most recent computer_screenshot\",\n  },\n  y: {\n    type: \"integer\",\n    description: \"Y coordinate in the pixels of the most recent computer_screenshot\",\n  },\n} as const;\n\nfunction objectSchema(\n  properties: Record<string, unknown>,\n  required: string[],\n): Record<string, unknown> {\n  return { type: \"object\", properties, required, additionalProperties: false };\n}\n\n/**\n * The FUNCTION-transport computer tools for the codex / text backend, each routing\n * to the SAME bound `Computer` the hosted `computer_use_preview` tool would drive.\n * `computer_screenshot` hands the model the desktop two ways, selected by\n * `imageFunctionResults`:\n *   • false (chat-completions providers, the default) → the text-transport\n *     `data:image/png;base64,…` URL (imageOutputFromBytes → renderImageForTextTransport,\n *     the SDK's text `view_image` path) — those backends can't read structured image\n *     tool results.\n *   • true (the codex/ChatGPT backend) → the structured `{type:'image'}` tool output,\n *     which agents-core normalizes into an `input_image` content item inside the\n *     function_call_output — the codex /responses backend accepts and SEES it (a text\n *     data-URL there is just unreadable text). See index.ts for why it's on there.\n * Write tools return a concise confirmation; when read-only they return\n * {@link COMPUTER_READ_ONLY_MESSAGE} instead of throwing, and any action error is\n * returned as a string so a failed action never kills the turn. Exported so it can be\n * unit-tested against a fake `Computer`.\n */\nexport function computerFunctionTools(\n  computer: Computer,\n  readOnly: boolean,\n  needsApproval?: ComputerUseArgs[\"needsApproval\"],\n  imageFunctionResults = false,\n): Tool<unknown>[] {\n  const approval = needsApproval !== undefined ? { needsApproval: needsApproval as never } : {};\n  // Perform a WRITE action, surfacing read-only / failures as a model-readable\n  // string rather than an uncaught throw (an uncaught throw becomes a tool error\n  // the backend may 400 on, or kills the step).\n  const write = async (\n    confirmation: string,\n    action: () => void | Promise<void>,\n  ): Promise<string> => {\n    if (readOnly) return COMPUTER_READ_ONLY_MESSAGE;\n    try {\n      await action();\n      return confirmation;\n    } catch (error) {\n      if (error instanceof ComputerReadOnlyError) return COMPUTER_READ_ONLY_MESSAGE;\n      return `computer action failed: ${error instanceof Error ? error.message : String(error)}`;\n    }\n  };\n\n  return [\n    tool({\n      name: \"computer_screenshot\",\n      description:\n        \"Capture the current desktop and return it as an image. Call this FIRST and again after each action — all coordinates for click/move/scroll/drag are pixels of the most recent screenshot.\",\n      parameters: objectSchema({}, []) as never,\n      strict: false,\n      execute: async () => {\n        // screenshot() returns raw base64 PNG and NEVER an empty string (it throws\n        // instead), so the model can't receive an empty image_url.\n        const b64 = await computer.screenshot();\n        const bytes = Uint8Array.from(Buffer.from(b64, \"base64\"));\n        const image = imageOutputFromScreenshotBytes(bytes);\n        // On the codex backend return the structured image output so the model SEES\n        // the desktop (agents-core normalizes {type:'image'} → an input_image data-URL\n        // content item in the function_call_output); chat-completions providers get\n        // the text data-URL string they expect.\n        return imageFunctionResults ? image : renderImageForTextTransport(image);\n      },\n    }),\n    tool({\n      name: \"computer_click\",\n      description:\n        \"Click the mouse at (x, y). `button` is one of left|right|wheel|back|forward (default left). Take a computer_screenshot first to find coordinates.\",\n      parameters: objectSchema(\n        {\n          ...COORD_PROPS,\n          button: {\n            type: \"string\",\n            enum: [\"left\", \"right\", \"wheel\", \"back\", \"forward\"],\n            description: \"Mouse button; defaults to left\",\n          },\n        },\n        [\"x\", \"y\"],\n      ) as never,\n      strict: false,\n      ...approval,\n      execute: async (input) => {\n        const { x, y, button } = input as { x: number; y: number; button?: ComputerButton };\n        return write(`clicked ${button ?? \"left\"} at (${x}, ${y})`, () =>\n          computer.click(x, y, button ?? \"left\"),\n        );\n      },\n    }),\n    tool({\n      name: \"computer_double_click\",\n      description:\n        \"Double-click the left mouse button at (x, y). Take a computer_screenshot first to find coordinates.\",\n      parameters: objectSchema({ ...COORD_PROPS }, [\"x\", \"y\"]) as never,\n      strict: false,\n      ...approval,\n      execute: async (input) => {\n        const { x, y } = input as { x: number; y: number };\n        return write(`double-clicked at (${x}, ${y})`, () => computer.doubleClick(x, y));\n      },\n    }),\n    tool({\n      name: \"computer_move\",\n      description: \"Move the mouse cursor to (x, y) without clicking.\",\n      parameters: objectSchema({ ...COORD_PROPS }, [\"x\", \"y\"]) as never,\n      strict: false,\n      ...approval,\n      execute: async (input) => {\n        const { x, y } = input as { x: number; y: number };\n        return write(`moved to (${x}, ${y})`, () => computer.move(x, y));\n      },\n    }),\n    tool({\n      name: \"computer_scroll\",\n      description:\n        \"Scroll at (x, y) by scroll_x / scroll_y pixels (positive scroll_y scrolls down, negative up; positive scroll_x scrolls right).\",\n      parameters: objectSchema(\n        {\n          ...COORD_PROPS,\n          scroll_x: {\n            type: \"integer\",\n            description: \"Horizontal scroll amount in pixels (positive = right)\",\n          },\n          scroll_y: {\n            type: \"integer\",\n            description: \"Vertical scroll amount in pixels (positive = down)\",\n          },\n        },\n        [\"x\", \"y\", \"scroll_x\", \"scroll_y\"],\n      ) as never,\n      strict: false,\n      ...approval,\n      execute: async (input) => {\n        const { x, y, scroll_x, scroll_y } = input as {\n          x: number;\n          y: number;\n          scroll_x: number;\n          scroll_y: number;\n        };\n        return write(`scrolled (${scroll_x}, ${scroll_y}) at (${x}, ${y})`, () =>\n          computer.scroll(x, y, scroll_x, scroll_y),\n        );\n      },\n    }),\n    tool({\n      name: \"computer_type\",\n      description:\n        \"Type a literal text string at the current keyboard focus. Click the target field first.\",\n      parameters: objectSchema(\n        { text: { type: \"string\", description: \"The literal text to type\" } },\n        [\"text\"],\n      ) as never,\n      strict: false,\n      ...approval,\n      execute: async (input) => {\n        const { text } = input as { text: string };\n        return write(`typed ${text.length} character(s)`, () => computer.type(text));\n      },\n    }),\n    tool({\n      name: \"computer_keypress\",\n      description:\n        'Press a key or chord. `keys` is an ordered list pressed together, e.g. [\"ctrl\",\"c\"] or [\"Enter\"]. Use key names (ctrl, alt, shift, cmd, enter, tab, esc, arrows…), not characters.',\n      parameters: objectSchema(\n        {\n          keys: {\n            type: \"array\",\n            items: { type: \"string\" },\n            description: \"Keys pressed together as a chord\",\n          },\n        },\n        [\"keys\"],\n      ) as never,\n      strict: false,\n      ...approval,\n      execute: async (input) => {\n        const { keys } = input as { keys: string[] };\n        return write(`pressed ${keys.join(\"+\")}`, () => computer.keypress(keys));\n      },\n    }),\n    tool({\n      name: \"computer_drag\",\n      description:\n        \"Drag the left mouse button along a path of points. `path` is an ordered list of {x, y} pixels; the button is pressed at the first point, moved through each, and released at the last.\",\n      parameters: objectSchema(\n        {\n          path: {\n            type: \"array\",\n            description: \"Ordered list of points to drag through\",\n            items: {\n              type: \"object\",\n              properties: { x: { type: \"integer\" }, y: { type: \"integer\" } },\n              required: [\"x\", \"y\"],\n              additionalProperties: false,\n            },\n          },\n        },\n        [\"path\"],\n      ) as never,\n      strict: false,\n      ...approval,\n      execute: async (input) => {\n        const { path } = input as { path: Array<{ x: number; y: number }> };\n        const points = path.map((p) => [p.x, p.y] as [number, number]);\n        return write(`dragged through ${points.length} point(s)`, () => computer.drag(points));\n      },\n    }),\n  ] as unknown as Tool<unknown>[];\n}\n\n// ── The capability (the SDK seam) ────────────────────────────────────────────\n\n/**\n * EXPLICIT tool-transport selection, decided by the caller that knows the\n * provider's true wire identity (the worker's model resolution — see agent-turn.ts),\n * never inferred from the bound model instance's constructor name:\n *   • \"hosted\"         → the single hosted `computer_use_preview` tool (Responses backends).\n *   • \"function-image\" → the FUNCTION `computer_*` tools with screenshots delivered as a\n *                        structured `{type:'image'}` output (the codex/ChatGPT backend,\n *                        which rejects hosted tool types but SEES structured image results).\n *   • \"disabled\"       → no computer tools. Providers without a proven visual image\n *                        transport fail closed instead of receiving base64 as text.\n *   • \"function-text\"  → deprecated fail-closed alias retained for source compatibility.\n *   • omitted           → fail closed exactly like \"disabled\"; public runtime callers must\n *                        prove the transport explicitly before computer tools are exposed.\n */\nexport type ComputerToolMode = \"hosted\" | \"function-image\" | \"disabled\" | \"function-text\";\n\nexport type ComputerUseArgs = {\n  dimensions?: [number, number];\n  readOnly?: boolean;\n  display?: string;\n  needsApproval?: boolean | ((ctx: unknown, action: unknown) => boolean | Promise<boolean>);\n  /** @deprecated Use `toolMode: \"function-image\"`. Omitted transport now fails closed. */\n  imageFunctionResults?: boolean;\n  // EXPLICIT transport selection (see {@link ComputerToolMode}). When absent, tools()\n  // returns no computer tools; constructor-name sniffing is never a transport proof.\n  toolMode?: ComputerToolMode;\n  /** Called after the display is ready on the first actual computer action. */\n  onReady?: (session: SandboxSessionLike) => Promise<void>;\n};\n\nexport function computerUse(args: ComputerUseArgs = {}): ComputerUseCapability {\n  return new ComputerUseCapability(args);\n}\n\n/**\n * A `Capability` subclass merged into the agent's tool set by SandboxAgent\n * (`tools = [...agent.tools, ...capability.tools()]`). `bind(session)` hands it\n * the LIVE externally-owned session, so the agent's actions and the viewers'\n * pixels are one display.\n *\n * `tools()` is transport-aware only through `ComputerUseArgs.toolMode`. The bound\n * model instance is intentionally ignored: a constructor name cannot prove whether\n * screenshots travel as hosted computer output or structured function images.\n */\nexport class ComputerUseCapability extends Capability {\n  readonly type = \"computer-use\";\n  constructor(private args: ComputerUseArgs = {}) {\n    super();\n  }\n\n  override tools(): Tool<unknown>[] {\n    const session = requireBoundSession(\"computer-use\", this._session);\n    // Backend-aware: a SELF-HOSTED session (macOS OR bring-your-own Linux) drives the\n    // desktop NATIVELY (CGEvent/XTEST inject + ScreenCaptureKit/x11 capture over the\n    // control plane) — no xdotool/scrot on the user's machine required. Everything\n    // else (Modal) keeps the xdotool/scrot-over-exec SandboxComputer. See\n    // `isNativeDesktopSession` for the duck-typed discriminator.\n    const computer: Computer = isNativeDesktopSession(session)\n      ? new NativeDesktopComputer(session, {\n          ...(this.args.dimensions ? { dimensions: this.args.dimensions } : {}),\n          ...(this.args.readOnly !== undefined ? { readOnly: this.args.readOnly } : {}),\n        })\n      : new SandboxComputer(session, {\n          ...(this.args.dimensions ? { dimensions: this.args.dimensions } : {}),\n          ...(this.args.readOnly !== undefined ? { readOnly: this.args.readOnly } : {}),\n          ...(this.args.display ? { display: this.args.display } : {}),\n          // The SDK base exposes the bound runAs as a protected field.\n          ...(typeof this._runAs === \"string\" ? { runAs: this._runAs } : {}),\n          // Crucially lazy: tool registration does no provider work. The first\n          // click/type/screenshot boots the display, then lets the worker start\n          // any computer-use-only recording. One SandboxComputer instance caches\n          // this for the rest of the turn.\n          prepare: async (preparedSession) => {\n            await ensureDisplayStack(preparedSession, {\n              telemetryContext: { callerKind: \"computer\" },\n            });\n            await this.args.onReady?.(preparedSession);\n          },\n        });\n    // Tool selection must not depend on the model instance's constructor name. The\n    // worker supplies a proven explicit mode; public callers that omit it fail closed.\n    switch (this.args.toolMode) {\n      case \"hosted\":\n        return [this.hostedComputerTool(computer)];\n      case \"function-image\":\n        return computerFunctionTools(\n          computer,\n          this.args.readOnly ?? false,\n          this.args.needsApproval,\n          true,\n        );\n      case \"disabled\":\n      case \"function-text\":\n      case undefined:\n        // A text data URL is not a visual observation for the provider and can\n        // consume hundreds of thousands of apparent text tokens. Disable the\n        // entire coordinate-dependent capability: action tools without a usable\n        // screenshot would be blind and unsafe.\n        return [];\n    }\n    // Runtime callers may bypass TypeScript or pass a value from a newer client.\n    // Unknown transport modes must remain fail-closed.\n    return [];\n  }\n\n  /** The single HOSTED `computer_use_preview` tool bound to `computer`. */\n  private hostedComputerTool(computer: Computer): Tool<unknown> {\n    return computerTool({\n      computer,\n      ...(this.args.needsApproval !== undefined\n        ? { needsApproval: this.args.needsApproval as never }\n        : {}),\n    }) as unknown as Tool<unknown>;\n  }\n}\n","import { createHash } from \"node:crypto\";\n\nimport { Capability, type SandboxSessionLike } from \"@openai/agents/sandbox\";\n\nconst SKILL_FILE = \"SKILL.md\";\nconst MAX_DISCOVERED_SKILLS = 256;\nconst MAX_SKILL_ENTRIES = 1_024;\nconst MAX_SKILL_BYTES = 32 * 1024 * 1024;\nconst SAFE_SKILL_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;\n\nexport type WorkspaceSkillSearchPath = Readonly<{\n  path: string;\n  source: string;\n}>;\n\ntype WorkspaceSkill = Readonly<{\n  name: string;\n  description: string;\n  path: string;\n  fingerprint: string;\n  source: string;\n}>;\n\n/**\n * Index skills that already exist in the live workspace.\n *\n * Unlike the SDK's `skills({ from })` and `skills({ lazyFrom })` sources, this\n * capability deliberately contributes no manifest entries and materializes\n * nothing. Repository resources and Connected Machines already own these\n * files; the bound sandbox session is the one portable way to inspect them.\n */\nexport class WorkspaceSkillsCapability extends Capability {\n  readonly type = \"workspace-skills\";\n  private discovery?: Promise<readonly WorkspaceSkill[]>;\n\n  constructor(\n    private readonly searchPaths: readonly WorkspaceSkillSearchPath[],\n    private readonly reservedNames: ReadonlySet<string> = new Set(),\n  ) {\n    super();\n  }\n\n  override async instructions(): Promise<string | null> {\n    const session = requireWorkspaceSkillSession(this._session);\n    this.discovery ??= discoverWorkspaceSkills(\n      session,\n      this.searchPaths,\n      this.reservedNames,\n      this._runAs,\n    );\n    const skills = await this.discovery;\n    if (skills.length === 0) return null;\n\n    const available = skills\n      .map((skill) => `- ${skill.name}: ${skill.description} (file: ${skill.path})`)\n      .join(\"\\n\");\n    return `## Repository skills\n\nRepository skills are instructions already present in the live workspace. They do not need to be loaded or copied.\n\n### Available repository skills\n${available}\n\n### How to use repository skills\n- If the user names a skill, or the task clearly matches a skill description, read its complete SKILL.md before acting.\n- Resolve referenced scripts, references, assets, and templates relative to that skill directory.\n- Use only the minimum relevant skills for the turn, and say briefly which ones you are using.\n- Do not assume a skill remains applicable on later turns; evaluate the current request again.`;\n  }\n}\n\nexport function workspaceSkills(\n  searchPaths: readonly WorkspaceSkillSearchPath[],\n  reservedNames: Iterable<string> = [],\n): WorkspaceSkillsCapability {\n  return new WorkspaceSkillsCapability(\n    searchPaths,\n    new Set([...reservedNames].map((name) => name.toLowerCase())),\n  );\n}\n\nexport async function discoverWorkspaceSkills(\n  session: SandboxSessionLike,\n  searchPaths: readonly WorkspaceSkillSearchPath[],\n  reservedNames: ReadonlySet<string> = new Set(),\n  runAs?: string,\n): Promise<readonly WorkspaceSkill[]> {\n  if (!session.listDir || !session.readFile) {\n    throw new Error(\"Workspace skill discovery requires sandbox listDir() and readFile() support\");\n  }\n  const discovered = new Map<string, WorkspaceSkill>();\n  let candidates = 0;\n  for (const searchPath of searchPaths) {\n    let entries;\n    try {\n      entries = await session.listDir({ path: searchPath.path, ...(runAs ? { runAs } : {}) });\n    } catch {\n      continue;\n    }\n    for (const entry of [...entries].sort((left, right) => left.name.localeCompare(right.name))) {\n      if (entry.type !== \"dir\") continue;\n      candidates += 1;\n      if (candidates > MAX_DISCOVERED_SKILLS) {\n        throw new Error(`Repository skill discovery exceeds ${MAX_DISCOVERED_SKILLS} directories`);\n      }\n      const skillMarkdownPath = joinWorkspacePath(entry.path, SKILL_FILE);\n      let markdown: string;\n      try {\n        const content = await session.readFile({\n          path: skillMarkdownPath,\n          ...(runAs ? { runAs } : {}),\n        });\n        markdown = typeof content === \"string\" ? content : new TextDecoder().decode(content);\n      } catch {\n        continue;\n      }\n      const frontmatter = parseSkillFrontmatter(markdown);\n      const name = frontmatter.name?.trim() || entry.name;\n      if (name.length > 64 || !SAFE_SKILL_NAME.test(name)) {\n        throw new Error(`Repository skill has an invalid name: ${name.slice(0, 64)}`);\n      }\n      const description = frontmatter.description?.trim() || \"No description provided.\";\n      if (description.length > 2_048 || /[\\r\\n]/.test(description)) {\n        throw new Error(`Repository skill \"${name}\" has an invalid description`);\n      }\n      const key = name.toLowerCase();\n      if (reservedNames.has(key)) {\n        throw new Error(`Workspace skill \"${name}\" conflicts with a configured OpenGeni skill`);\n      }\n      const candidate: WorkspaceSkill = {\n        name,\n        description,\n        path: skillMarkdownPath,\n        fingerprint: await fingerprintWorkspaceDirectory(session, entry.path, runAs),\n        source: searchPath.source,\n      };\n      const existing = discovered.get(key);\n      if (!existing) {\n        discovered.set(key, candidate);\n        continue;\n      }\n      if (existing.fingerprint !== candidate.fingerprint) {\n        throw new Error(\n          `Workspace skill \"${name}\" has conflicting definitions in ${existing.source} and ${candidate.source}`,\n        );\n      }\n    }\n  }\n  return [...discovered.values()].sort((left, right) => left.name.localeCompare(right.name));\n}\n\nasync function fingerprintWorkspaceDirectory(\n  session: SandboxSessionLike,\n  root: string,\n  runAs?: string,\n): Promise<string> {\n  const hash = createHash(\"sha256\");\n  let entryCount = 0;\n  let byteCount = 0;\n\n  async function visit(path: string, relativePath: string): Promise<void> {\n    const entries = await session.listDir!({ path, ...(runAs ? { runAs } : {}) });\n    for (const entry of [...entries].sort((left, right) => left.name.localeCompare(right.name))) {\n      entryCount += 1;\n      if (entryCount > MAX_SKILL_ENTRIES) {\n        throw new Error(`Workspace skill exceeds ${MAX_SKILL_ENTRIES} filesystem entries`);\n      }\n      const childRelativePath = relativePath ? `${relativePath}/${entry.name}` : entry.name;\n      hash.update(entry.type);\n      hash.update(\"\\0\");\n      hash.update(childRelativePath);\n      hash.update(\"\\0\");\n      if (entry.type === \"dir\") {\n        await visit(entry.path, childRelativePath);\n        continue;\n      }\n      if (entry.type !== \"file\") continue;\n      const content = await session.readFile!({\n        path: entry.path,\n        ...(runAs ? { runAs } : {}),\n      });\n      const bytes = typeof content === \"string\" ? new TextEncoder().encode(content) : content;\n      byteCount += bytes.byteLength;\n      if (byteCount > MAX_SKILL_BYTES) {\n        throw new Error(`Workspace skill exceeds ${MAX_SKILL_BYTES} bytes`);\n      }\n      hash.update(bytes);\n      hash.update(\"\\0\");\n    }\n  }\n\n  await visit(root, \"\");\n  return hash.digest(\"hex\");\n}\n\nfunction parseSkillFrontmatter(markdown: string): {\n  name?: string;\n  description?: string;\n} {\n  const lines = markdown.split(/\\r?\\n/);\n  if (lines[0]?.trim() !== \"---\") return {};\n  const end = lines.findIndex((line, index) => index > 0 && line.trim() === \"---\");\n  if (end === -1) return {};\n  const values: Record<string, string> = {};\n  for (const line of lines.slice(1, end)) {\n    const separator = line.indexOf(\":\");\n    if (separator === -1) continue;\n    const key = line.slice(0, separator).trim();\n    if (key !== \"name\" && key !== \"description\") continue;\n    values[key] = unquote(line.slice(separator + 1).trim());\n  }\n  return values;\n}\n\nfunction unquote(value: string): string {\n  if (\n    value.length >= 2 &&\n    value[0] === value[value.length - 1] &&\n    (value[0] === '\"' || value[0] === \"'\")\n  ) {\n    return value.slice(1, -1);\n  }\n  return value;\n}\n\nfunction joinWorkspacePath(parent: string, child: string): string {\n  return `${parent.replace(/\\/+$/, \"\")}/${child}`;\n}\n\nfunction requireWorkspaceSkillSession(session: SandboxSessionLike | undefined): SandboxSessionLike {\n  if (!session) {\n    throw new Error('capability \"workspace-skills\" used before bind(session)');\n  }\n  return session;\n}\n","type UsageDetails = Record<string, unknown> | Array<Record<string, unknown>>;\n\ntype RequestUsageEntry = {\n  inputTokens?: unknown;\n  input_tokens?: unknown;\n  outputTokens?: unknown;\n  output_tokens?: unknown;\n  totalTokens?: unknown;\n  total_tokens?: unknown;\n  inputTokensDetails?: UsageDetails | undefined;\n  input_tokens_details?: UsageDetails | undefined;\n  outputTokensDetails?: UsageDetails | undefined;\n  output_tokens_details?: UsageDetails | undefined;\n};\n\nexport type ModelCallUsageInput = {\n  inputTokens?: unknown;\n  outputTokens?: unknown;\n  totalTokens?: unknown;\n  inputTokensDetails?: UsageDetails | undefined;\n  outputTokensDetails?: UsageDetails | undefined;\n  requestUsageEntries?: RequestUsageEntry[] | undefined;\n};\n\n/**\n * A single provider usage frame above one billion tokens is outside every\n * supported OpenGeni model contract. Keeping the ceiling explicit also prevents\n * malformed-but-finite provider values from corrupting durable accounting or a\n * process-lifetime Prometheus counter.\n */\nexport const MAX_MODEL_USAGE_TOKEN_COUNT = 1_000_000_000;\n\nexport type ModelCallUsageTelemetry = {\n  inputTokens: number | null;\n  outputTokens: number | null;\n  cachedTokens: number | null;\n  cacheWriteTokens: number | null;\n  reasoningTokens: number | null;\n};\n\nexport type ModelCallUsageNormalization = {\n  telemetry: ModelCallUsageTelemetry;\n  totalTokens: number | null;\n  /** Bounded field paths only; raw provider values are never retained. */\n  rejectedFields: string[];\n};\n\nexport function modelUsageTokenCountOrNull(value: unknown): number | null {\n  return typeof value === \"number\" &&\n    Number.isSafeInteger(value) &&\n    value >= 0 &&\n    value <= MAX_MODEL_USAGE_TOKEN_COUNT\n    ? value\n    : null;\n}\n\nexport function normalizeModelCallUsage(\n  usage: ModelCallUsageInput | null | undefined,\n): ModelCallUsageNormalization {\n  const rejectedFields = new Set<string>();\n  if (!usage) {\n    return {\n      telemetry: {\n        inputTokens: null,\n        outputTokens: null,\n        cachedTokens: null,\n        cacheWriteTokens: null,\n        reasoningTokens: null,\n      },\n      totalTokens: null,\n      rejectedFields: [],\n    };\n  }\n\n  const requestEntries = requestUsageEntries(usage.requestUsageEntries, rejectedFields);\n  const topLevelInputTokens = reportedTokenCount(usage.inputTokens, \"inputTokens\", rejectedFields);\n  const topLevelOutputTokens = reportedTokenCount(\n    usage.outputTokens,\n    \"outputTokens\",\n    rejectedFields,\n  );\n  const topLevelTotalTokens = reportedTokenCount(usage.totalTokens, \"totalTokens\", rejectedFields);\n  const requestInputTokens = completeRequestTokenAggregate(\n    requestEntries,\n    [\"inputTokens\", \"input_tokens\"],\n    \"inputTokens.requestUsageEntries\",\n    rejectedFields,\n  );\n  const requestOutputTokens = completeRequestTokenAggregate(\n    requestEntries,\n    [\"outputTokens\", \"output_tokens\"],\n    \"outputTokens.requestUsageEntries\",\n    rejectedFields,\n  );\n  let requestTotalTokens = completeRequestTokenAggregate(\n    requestEntries,\n    [\"totalTokens\", \"total_tokens\"],\n    \"totalTokens.requestUsageEntries\",\n    rejectedFields,\n  );\n  if (rejectInconsistentRequestTotals(requestEntries, rejectedFields)) {\n    requestTotalTokens = { ...requestTotalTokens, status: \"invalid\", value: null };\n  }\n\n  // Complete per-request aggregates are the installed SDK's request-level\n  // truth. A conflicting top-level field is diagnostic only; it must never\n  // override the request sum with a smaller billable/context value. Invalid\n  // complete request aggregates fail closed rather than falling back to a\n  // potentially undercounting top-level number.\n  const inputTokens = canonicalTokenDimension({\n    topLevel: topLevelInputTokens,\n    topLevelReported: isReported(usage.inputTokens),\n    topLevelPath: \"inputTokens\",\n    requestAggregate: requestInputTokens,\n    rejectedFields,\n  });\n  const outputTokens = canonicalTokenDimension({\n    topLevel: topLevelOutputTokens,\n    topLevelReported: isReported(usage.outputTokens),\n    topLevelPath: \"outputTokens\",\n    requestAggregate: requestOutputTokens,\n    rejectedFields,\n  });\n  const totalTokens = canonicalTotalTokens({\n    inputTokens,\n    outputTokens,\n    topLevel: topLevelTotalTokens,\n    topLevelReported: isReported(usage.totalTokens),\n    requestAggregate: requestTotalTokens,\n    rejectedFields,\n  });\n\n  const inputDetailSource = preferredDetailSource(\n    usage.inputTokensDetails,\n    \"inputTokensDetails\",\n    requestEntries,\n    [\"inputTokensDetails\", \"input_tokens_details\"],\n  );\n  const outputDetailSource = preferredDetailSource(\n    usage.outputTokensDetails,\n    \"outputTokensDetails\",\n    requestEntries,\n    [\"outputTokensDetails\", \"output_tokens_details\"],\n  );\n\n  return {\n    telemetry: {\n      inputTokens,\n      outputTokens,\n      cachedTokens: aggregateDetailTokenCount(\n        inputDetailSource,\n        [\"cached_tokens\", \"cachedInputTokens\", \"cached_input_tokens\"],\n        \"cachedTokens\",\n        rejectedFields,\n      ),\n      cacheWriteTokens: aggregateDetailTokenCount(\n        inputDetailSource,\n        [\"cache_write_tokens\", \"cacheWriteTokens\"],\n        \"cacheWriteTokens\",\n        rejectedFields,\n      ),\n      reasoningTokens: aggregateDetailTokenCount(\n        outputDetailSource,\n        [\"reasoning_tokens\", \"reasoningTokens\", \"reasoning_output_tokens\"],\n        \"reasoningTokens\",\n        rejectedFields,\n      ),\n    },\n    totalTokens,\n    rejectedFields: [...rejectedFields].slice(0, 32),\n  };\n}\n\nexport function modelCallUsageTelemetry(\n  usage: ModelCallUsageInput | null | undefined,\n): ModelCallUsageTelemetry {\n  return normalizeModelCallUsage(usage).telemetry;\n}\n\nfunction requestUsageEntries(\n  value: RequestUsageEntry[] | undefined,\n  rejectedFields: Set<string>,\n): RequestUsageEntry[] {\n  if (value === undefined) {\n    return [];\n  }\n  if (!Array.isArray(value)) {\n    rejectField(rejectedFields, \"requestUsageEntries\");\n    return [];\n  }\n  const entries: RequestUsageEntry[] = [];\n  for (const [index, entry] of value.entries()) {\n    if (!entry || typeof entry !== \"object\" || Array.isArray(entry)) {\n      rejectField(rejectedFields, `requestUsageEntries[${index}]`);\n      // Preserve the request slot as unknown. Dropping it would let fallback\n      // aggregation silently undercount only the well-formed requests.\n      entries.push({});\n      continue;\n    }\n    entries.push(entry);\n  }\n  return entries;\n}\n\ntype RequestTokenAggregate = {\n  status: \"absent\" | \"incomplete\" | \"invalid\" | \"complete\";\n  value: number | null;\n};\n\nfunction completeRequestTokenAggregate(\n  requestEntries: RequestUsageEntry[],\n  requestKeys: string[],\n  aggregatePath: string,\n  rejectedFields: Set<string>,\n): RequestTokenAggregate {\n  if (requestEntries.length === 0) {\n    return { status: \"absent\", value: null };\n  }\n  const values: Array<number | null> = [];\n  let incomplete = false;\n  let invalid = false;\n  for (const [index, entry] of requestEntries.entries()) {\n    const selected = firstPresentEntry(entry as Record<string, unknown>, requestKeys);\n    if (!selected || selected.value === null) {\n      incomplete = true;\n      continue;\n    }\n    const parsed = reportedTokenCount(\n      selected.value,\n      `requestUsageEntries[${index}].${selected.key}`,\n      rejectedFields,\n    );\n    if (parsed === null) invalid = true;\n    values.push(parsed);\n  }\n  if (invalid) {\n    return { status: \"invalid\", value: null };\n  }\n  if (incomplete) {\n    return { status: \"incomplete\", value: null };\n  }\n  const value = boundedTokenSum(values, aggregatePath, rejectedFields);\n  return value === null ? { status: \"invalid\", value: null } : { status: \"complete\", value };\n}\n\nfunction canonicalTokenDimension(input: {\n  topLevel: number | null;\n  topLevelReported: boolean;\n  topLevelPath: string;\n  requestAggregate: RequestTokenAggregate;\n  rejectedFields: Set<string>;\n}): number | null {\n  if (input.requestAggregate.status === \"complete\") {\n    if (\n      input.topLevelReported &&\n      input.topLevel !== null &&\n      input.topLevel !== input.requestAggregate.value\n    ) {\n      rejectField(input.rejectedFields, input.topLevelPath);\n    }\n    return input.requestAggregate.value;\n  }\n  if (input.requestAggregate.status === \"invalid\") {\n    if (input.topLevelReported) {\n      rejectField(input.rejectedFields, input.topLevelPath);\n    }\n    return null;\n  }\n  return input.topLevel;\n}\n\nfunction canonicalTotalTokens(input: {\n  inputTokens: number | null;\n  outputTokens: number | null;\n  topLevel: number | null;\n  topLevelReported: boolean;\n  requestAggregate: RequestTokenAggregate;\n  rejectedFields: Set<string>;\n}): number | null {\n  if (input.inputTokens !== null && input.outputTokens !== null) {\n    const derived = boundedTokenSum(\n      [input.inputTokens, input.outputTokens],\n      \"totalTokens.aggregate\",\n      input.rejectedFields,\n    );\n    if (derived === null) {\n      // Both canonical components are known and exceed the supported aggregate\n      // ceiling. Any bounded reported total necessarily undercounts them.\n      if (input.topLevelReported) rejectField(input.rejectedFields, \"totalTokens\");\n      if (input.requestAggregate.status === \"complete\") {\n        rejectField(input.rejectedFields, \"totalTokens.requestUsageEntries\");\n      }\n      return null;\n    }\n    if (input.topLevelReported && input.topLevel !== null && input.topLevel !== derived) {\n      rejectField(input.rejectedFields, \"totalTokens\");\n    }\n    if (input.requestAggregate.status === \"complete\" && input.requestAggregate.value !== derived) {\n      rejectField(input.rejectedFields, \"totalTokens.requestUsageEntries\");\n    }\n    return derived;\n  }\n\n  if (input.requestAggregate.status === \"complete\") {\n    const requestTotal = input.requestAggregate.value;\n    if (\n      requestTotal === null ||\n      !totalCoversKnownComponents(requestTotal, input.inputTokens, input.outputTokens)\n    ) {\n      rejectField(input.rejectedFields, \"totalTokens.requestUsageEntries\");\n      if (input.topLevelReported) rejectField(input.rejectedFields, \"totalTokens\");\n      return null;\n    }\n    if (input.topLevelReported && input.topLevel !== null && input.topLevel !== requestTotal) {\n      rejectField(input.rejectedFields, \"totalTokens\");\n    }\n    return requestTotal;\n  }\n  if (input.requestAggregate.status === \"invalid\") {\n    if (input.topLevelReported) rejectField(input.rejectedFields, \"totalTokens\");\n    return null;\n  }\n  if (\n    input.topLevel !== null &&\n    !totalCoversKnownComponents(input.topLevel, input.inputTokens, input.outputTokens)\n  ) {\n    rejectField(input.rejectedFields, \"totalTokens\");\n    return null;\n  }\n  return input.topLevel;\n}\n\nfunction totalCoversKnownComponents(\n  total: number,\n  inputTokens: number | null,\n  outputTokens: number | null,\n): boolean {\n  return (\n    (inputTokens === null || total >= inputTokens) &&\n    (outputTokens === null || total >= outputTokens)\n  );\n}\n\nfunction rejectInconsistentRequestTotals(\n  requestEntries: RequestUsageEntry[],\n  rejectedFields: Set<string>,\n): boolean {\n  let inconsistent = false;\n  for (const [index, entry] of requestEntries.entries()) {\n    const record = entry as Record<string, unknown>;\n    const selectedInput = firstPresentEntry(record, [\"inputTokens\", \"input_tokens\"]);\n    const selectedOutput = firstPresentEntry(record, [\"outputTokens\", \"output_tokens\"]);\n    const selectedTotal = firstPresentEntry(record, [\"totalTokens\", \"total_tokens\"]);\n    if (!selectedInput || !selectedOutput || !selectedTotal) continue;\n    const inputTokens = modelUsageTokenCountOrNull(selectedInput.value);\n    const outputTokens = modelUsageTokenCountOrNull(selectedOutput.value);\n    const totalTokens = modelUsageTokenCountOrNull(selectedTotal.value);\n    if (inputTokens === null || outputTokens === null || totalTokens === null) continue;\n    const derived =\n      inputTokens <= MAX_MODEL_USAGE_TOKEN_COUNT - outputTokens ? inputTokens + outputTokens : null;\n    if (derived === null || totalTokens !== derived) {\n      rejectField(rejectedFields, `requestUsageEntries[${index}].${selectedTotal.key}`);\n      inconsistent = true;\n    }\n  }\n  return inconsistent;\n}\n\nfunction isReported(value: unknown): boolean {\n  return value !== undefined && value !== null;\n}\n\nfunction preferredDetailSource(\n  aggregateDetails: UsageDetails | undefined,\n  aggregatePath: string,\n  requestEntries: RequestUsageEntry[],\n  requestKeys: string[],\n): Array<{ details: unknown; path: string; missing?: boolean }> {\n  const requestDetails: Array<{ details: unknown; path: string; missing?: boolean }> = [];\n  let sawRequestDetails = false;\n  for (const [index, entry] of requestEntries.entries()) {\n    const selected = firstPresentEntry(entry as Record<string, unknown>, requestKeys);\n    if (!selected) {\n      requestDetails.push({\n        details: undefined,\n        path: `requestUsageEntries[${index}].${requestKeys[0]}`,\n        missing: true,\n      });\n      continue;\n    }\n    sawRequestDetails = true;\n    requestDetails.push({\n      details: selected.value,\n      path: `requestUsageEntries[${index}].${selected.key}`,\n    });\n  }\n  // The installed Agents SDK explicitly carries per-request entries. Prefer\n  // them when they include detail records; otherwise fall back to the aggregate\n  // detail arrays that Usage.add() appends in request order.\n  return sawRequestDetails\n    ? requestDetails\n    : aggregateDetails === undefined\n      ? []\n      : [{ details: aggregateDetails, path: aggregatePath }];\n}\n\nfunction aggregateDetailTokenCount(\n  sources: Array<{ details: unknown; path: string; missing?: boolean }>,\n  keys: string[],\n  field: string,\n  rejectedFields: Set<string>,\n): number | null {\n  const values: Array<number | null> = [];\n  let sawReportedValue = false;\n  let sawMissingValue = false;\n  for (const source of sources) {\n    if (source.missing) {\n      sawMissingValue = true;\n      continue;\n    }\n    const details = detailRecords(source.details, source.path, rejectedFields);\n    if (!details.complete) {\n      sawMissingValue = true;\n    }\n    for (const detail of details.records) {\n      const selected = firstPresentEntry(detail.record, keys);\n      if (!selected) {\n        sawMissingValue = true;\n        continue;\n      }\n      sawReportedValue = true;\n      values.push(\n        reportedTokenCount(selected.value, `${detail.path}.${selected.key}`, rejectedFields),\n      );\n    }\n  }\n  return sawReportedValue && !sawMissingValue\n    ? boundedTokenSum(values, `${field}.aggregate`, rejectedFields)\n    : null;\n}\n\nfunction detailRecords(\n  details: unknown,\n  path: string,\n  rejectedFields: Set<string>,\n): {\n  records: Array<{ record: Record<string, unknown>; path: string }>;\n  complete: boolean;\n} {\n  const entries = Array.isArray(details) ? details : [details];\n  const records: Array<{ record: Record<string, unknown>; path: string }> = [];\n  let complete = true;\n  for (const [index, entry] of entries.entries()) {\n    const entryPath = Array.isArray(details) ? `${path}[${index}]` : path;\n    if (!entry || typeof entry !== \"object\" || Array.isArray(entry)) {\n      rejectField(rejectedFields, entryPath);\n      complete = false;\n      continue;\n    }\n    records.push({ record: entry as Record<string, unknown>, path: entryPath });\n  }\n  return { records, complete };\n}\n\nfunction firstPresentEntry(\n  record: Record<string, unknown>,\n  keys: string[],\n): { key: string; value: unknown } | null {\n  for (const key of keys) {\n    if (Object.prototype.hasOwnProperty.call(record, key) && record[key] !== undefined) {\n      // One request can expose the same value under provider and SDK aliases.\n      // Pick the first canonical alias instead of adding aliases together.\n      return { key, value: record[key] };\n    }\n  }\n  return null;\n}\n\nfunction reportedTokenCount(\n  value: unknown,\n  field: string,\n  rejectedFields: Set<string>,\n): number | null {\n  if (value === undefined || value === null) {\n    return null;\n  }\n  const normalized = modelUsageTokenCountOrNull(value);\n  if (normalized === null) {\n    rejectField(rejectedFields, field);\n  }\n  return normalized;\n}\n\nfunction boundedTokenSum(\n  values: Array<number | null>,\n  field: string,\n  rejectedFields: Set<string>,\n): number | null {\n  if (values.length === 0 || values.some((value) => value === null)) {\n    return null;\n  }\n  let total = 0;\n  for (const value of values as number[]) {\n    if (value > MAX_MODEL_USAGE_TOKEN_COUNT - total) {\n      rejectField(rejectedFields, field);\n      return null;\n    }\n    total += value;\n  }\n  return total;\n}\n\nfunction rejectField(rejectedFields: Set<string>, field: string): void {\n  if (rejectedFields.size < 32) {\n    rejectedFields.add(field);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA;AAAA,EACE;AAAA,EACA,6BAAAA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA,0BAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,uBAAuB;AAAA,EACvB;AAAA,EACA,uBAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAcK;;;OC3CAC,aAAY;;;ACEZ,IAAM,WAAW;EACtB,QAAQ;EACR,WAAW;EACX,YAAY;IACV,yBAAyB;IACzB,uBAAuB;IACvB,UAAU;;;AAId,IAAA,mBAAe;;;ACTR,IAAM,qBAAqB;AAC3B,IAAM,uBAAuB;AAC7B,IAAM,qCAAqC;AAElD,IAAI,oBAAoB;AACxB,IAAI,mCAAmC;AACvC,IAAI;AACJ,IAAI,oBAAwC;AAC5C,IAAI,wBAA4C;AAM1C,SAAU,yBAAsB;AACpC,SAAO,yBAAyB,QAAO,EAAG;AAC5C;AAEM,SAAU,8BAA2B;AACzC,SAAO,sBAAsB;AAC/B;AAEM,SAAU,uCAAoC;AAClD,SAAO,qCAAqC;AAC9C;AAMM,SAAU,4BAA4B,OAA2B;AACrE,qCAAmC;AACrC;AAEM,SAAU,uBAAuB,QAAoB;AACzD,yBAAuB;AACzB;AAEM,SAAU,yBAAsB;AAGpC,SAAO;AACT;AAEM,SAAU,oBAAoB,KAAW;AAC7C,sBAAoB;AACtB;AAEM,SAAU,sBAAmB;AACjC,SAAO,qBAAqB,QAAO,EAAG;AACxC;AAEM,SAAU,mCAAgC;AAC9C,SAAO,QAAO,EAAG;AACnB;AAEO,IAAM,UAAU;EACrB,cAAc,qBAAqB,iBAAS,OAAO;;;;OCvC9CC,aAAY;;;ACpBnB,IAAM,SAAS,UAAU,sBAAsB;AAE/C,IAAA,iBAAe;;;ACIR,IAAM,0CAA0C;AAChD,IAAM,iDACX;AAuCI,SAAU,qCACd,OAAqB;AAErB,SACE,MAAM,SAAS,4BACf,MAAM,KAAK,SAAS,WACpB,MAAM,WAAW;AAErB;;;ACpDA,SAAS,SAAS,OAAc;AAC9B,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,sBAAsB,OAAc;AAC3C,SAAO,SAAS,KAAK,KAAK,MAAM,mBAAmB;AACrD;AAEA,SAAS,eAAe,OAAgB,KAAW;AACjD,MAAI,CAAC,SAAS,KAAK,GAAG;AACpB,WAAO;EACT;AAEA,QAAM,gBAAgB,CAAC,MAAM,SAAS,MAAM,eAAe;AAC3D,aAAW,UAAU,eAAe;AAClC,QAAI,CAAC,QAAQ;AACX;IACF;AAEA,QAAI,OAAO,YAAY,eAAe,kBAAkB,SAAS;AAC/D,aAAO,OAAO,IAAI,GAAG,KAAK;IAC5B;AAEA,QAAI,SAAS,MAAM,GAAG;AACpB,YAAM,gBAAgB,IAAI,YAAW;AACrC,iBAAW,CAAC,YAAY,WAAW,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC9D,YACE,WAAW,YAAW,MAAO,iBAC7B,OAAO,gBAAgB,UACvB;AACA,iBAAO;QACT;MACF;IACF;EACF;AAEA,SAAO;AACT;AAEA,SAAS,cAAc,OAAc;AACnC,MAAI,CAAC,SAAS,KAAK,GAAG;AACpB,WAAO;EACT;AAEA,MAAI,OAAO,MAAM,eAAe,UAAU;AACxC,WAAO,MAAM;EACf;AAEA,MAAI,OAAO,MAAM,WAAW,UAAU;AACpC,WAAO,MAAM;EACf;AAEA,SAAO;AACT;AAEA,SAAS,wBACP,SAA2C;AAE3C,SAAO,QAAQ,QAAQ,kBAAkB,QAAQ,kBAAkB;AACrE;AAEM,SAAU,qBACd,MAA6B;AAE7B,QAAM,EAAE,OAAO,QAAO,IAAK;AAC3B,MAAI,sBAAsB,KAAK,GAAG;AAChC,WAAO;MACL,WAAW;MACX,cAAc;MACd,QAAQ,iBAAiB,QAAQ,MAAM,UAAU;;EAErD;AAEA,QAAM,eACJ,iBAAiB,QAAQ,MAAM,QAAQ,YAAW,IAAK;AACzD,QAAM,oBAAoB,eAAe,OAAO,gBAAgB,GAC5D,YAAW,EACZ,KAAI;AAEP,MACE,cAAc,SACZ,qGAAqG,GAEvG;AACA,WAAO;MACL,WAAW;MACX,cAAc;MACd,QAAQ,iBAAiB,QAAQ,MAAM,UAAU;;EAErD;AAEA,MAAI,sBAAsB,QAAQ;AAChC,WAAO;MACL,WAAW;MACX,cAAc;MACd,QAAQ,iBAAiB,QAAQ,MAAM,UAAU;;EAErD;AAEA,MAAI,sBAAsB,SAAS;AACjC,WAAO;MACL,WAAW;MACX,QAAQ,iBAAiB,QAAQ,MAAM,UAAU;;EAErD;AAEA,QAAM,aAAa,cAAc,KAAK;AACtC,MACE,CAAC,wBAAwB,OAAO;;;GAI/B,eAAe,OACd,eAAe,OACf,eAAe,OACd,OAAO,eAAe,YAAY,cAAc,MACnD;AACA,WAAO;MACL,WAAW;MACX,QAAQ,iBAAiB,QAAQ,MAAM,UAAU;;EAErD;AAEA,SAAO;AACT;;;OChIO,YAAY;AAuBZ,IAAM,qCAAqC;EAChD,kCACE;EACF,kDACE;EACF,cAAc;EACd,iBAAiB;;AAMb,IAAO,kCAAP,cAA+C,MAAK;EAC/C;EAET,YACE,MACA,UAAkB,mCAAmC,IAAI,GAAC;AAE1D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;EACd;;AAGI,SAAU,eAAe,QAA+B;AAC5D,MAAI,QAAQ,SAAS;AACnB,UAAM,IAAI,OAAO,kBAAiB;EACpC;AACF;AAEA,eAAsB,gBACpB,SACA,QAA+B;AAE/B,iBAAe,MAAM;AACrB,MAAI,CAAC,QAAQ;AACX,WAAO;EACT;AAEA,SAAO,MAAM,IAAI,QAAW,CAAC,SAAS,WAAU;AAC9C,UAAM,UAAU,MAAK;AACnB,aAAO,IAAI,OAAO,kBAAiB,CAAE;IACvC;AAEA,WAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAI,CAAE;AAExD,YAAQ,KACN,CAAC,UAAS;AACR,aAAO,oBAAoB,SAAS,OAAO;AAC3C,cAAQ,KAAK;IACf,GACA,CAAC,UAAS;AACR,aAAO,oBAAoB,SAAS,OAAO;AAC3C,aAAO,KAAK;IACd,CAAC;EAEL,CAAC;AACH;AAEA,eAAsB,YACpB,SACA,WACA,cAAoB;AAEpB,MACE,OAAO,cAAc,YACrB,CAAC,OAAO,SAAS,SAAS,KAC1B,aAAa,GACb;AACA,WAAO,MAAM;EACf;AAEA,SAAO,MAAM,IAAI,QAAW,CAAC,SAAS,WAAU;AAC9C,UAAM,YAAY,WAAW,MAAK;AAChC,aAAO,IAAI,MAAM,YAAY,CAAC;IAChC,GAAG,SAAS;AAEZ,YAAQ,KACN,CAAC,UAAS;AACR,mBAAa,SAAS;AACtB,cAAQ,KAAK;IACf,GACA,CAAC,UAAS;AACR,mBAAa,SAAS;AACtB,aAAO,KAAK;IACd,CAAC;EAEL,CAAC;AACH;AAEA,eAAsB,qBACpB,OAA4B;AAE5B,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO;EACT;AAEA,MAAI,OAAO,SAAS,eAAe,iBAAiB,MAAM;AACxD,WAAO,MAAM,MAAM,KAAI;EACzB;AAEA,MAAI,iBAAiB,aAAa;AAChC,WAAO,IAAI,YAAW,EAAG,OAAO,IAAI,WAAW,KAAK,CAAC;EACvD;AAEA,MAAI,YAAY,OAAO,KAAK,GAAG;AAC7B,WAAO,IAAI,YAAW,EAAG,OACvB,IAAI,WAAW,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU,CAAC;EAEpE;AAEA,QAAM,IAAI,MAAM,qDAAqD;AACvE;AAEM,SAAU,gCAAgC,OAAc;AAC5D,MAAI,iBAAiB,iCAAiC;AACpD,WACE,MAAM,SAAS,sCACf,MAAM,SAAS;EAEnB;AAEA,MAAI,EAAE,iBAAiB,QAAQ;AAC7B,WAAO;EACT;AAEA,SACE,MAAM,YACJ,mCAAmC,oCACrC,MAAM,YACJ,mCAAmC;AAEzC;AAEM,SAAU,wBAAwB,OAAc;AACpD,MAAI,iBAAiB,iCAAiC;AACpD,WAAO,MAAM,SAAS;EACxB;AAEA,MAAI,EAAE,iBAAiB,QAAQ;AAC7B,WAAO;EACT;AAEA,MAAI,MAAM,YAAY,mCAAmC,iBAAiB;AACxE,WAAO;EACT;AAIA,MAAI,MAAM,SAAS,qBAAqB;AACtC,WAAO;EACT;AAGA,MAAI,MAAM,QAAQ,WAAW,oCAAoC,GAAG;AAClE,WAAO;EACT;AAEA,SAAO;AACT;AAaA,SAAS,6BACP,OACA,WAAiB;AAEjB,MAAI,SAAS,MAAM;AACjB,WAAO;EACT;AACA,MAAI,OAAO,SAAS,KAAK,KAAK,QAAQ,GAAG;AACvC,WAAO;EACT;AAEA,QAAM,IAAI,UACR,uBAAuB,SAAS,qDAAqD;AAEzF;AAEM,IAAO,+BAAP,MAAO,8BAA4B;EACvC;EACA,YAAqC,CAAA;EACrC,WAGK,CAAA;EACL,UAAU;EACV;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EAEA,YACE,QACA,mBAAuD,CAAA,GAAE;AAEzD,SAAK,UAAU;AACf,SAAK,kBAAkB,6BACrB,iBAAiB,gBACjB,gBAAgB;AAElB,SAAK,iBAAiB,6BACpB,iBAAiB,eACjB,eAAe;AAEjB,SAAK,iBAAiB,IAAI,QAAc,CAAC,YAAW;AAClD,WAAK,iBAAiB;IACxB,CAAC;AAED,SAAK,QAAQ,iBAAiB,WAAW,KAAK,UAAiB;AAC/D,SAAK,QAAQ,iBAAiB,SAAS,KAAK,QAAe;AAC3D,SAAK,QAAQ,iBAAiB,SAAS,KAAK,QAAe;AAC3D,SAAK,sBAAsB,KAAK,iBAAgB;EAClD;EAEA,aAAa,QACX,KACA,SACA,QACA,WACA,qBACA,mBAAuD,CAAA,GAAE;AAEzD,UAAM,gBAAiB,WAAmB;AAI1C,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,UACR,2EAA2E;IAE/E;AAEA,QAAI;AACJ,QAAI;AACF,eAAS,IAAI,cAAc,KAAK,EAAE,QAAO,CAAE;IAC7C,SAAS,OAAO;AACd,YAAM,eAAe,IAAI,UACvB,iGAAiG;AAElG,mBAA6C,QAAQ;AACtD,YAAM;IACR;AAEA,QAAI;AACJ,QAAI;AACF,mBAAa,IAAI,8BAA6B,QAAQ,gBAAgB;IACxE,SAAS,OAAO;AACd,UAAI;AACF,eAAO,MAAK;MACd,QAAQ;MAER;AACA,YAAM;IACR;AAEA,QAAI;AACF,YAAM,WAAW,YAAY,QAAQ,WAAW,mBAAmB;AACnE,iBAAW,gBAAe;IAC5B,SAAS,OAAO;AACd,YAAM,WAAW,MAAK;AACtB,YAAM;IACR;AACA,WAAO;EACT;EAEA,MAAM,YACJ,QACA,WACA,qBAA4B;AAE5B,QAAI,KAAK,QAAQ,eAAe,KAAK,QAAQ,MAAM;AACjD;IACF;AACA,QAAI,KAAK,QAAQ;AACf,YAAM,KAAK;IACb;AACA,QACE,KAAK,WACL,KAAK,QAAQ,eAAe,KAAK,QAAQ,UACzC,KAAK,QAAQ,eAAe,KAAK,QAAQ,SACzC;AACA,YAAM,IAAI,gCACR,kCAAkC;IAEtC;AAEA,UAAM,cAAc,IAAI,QAAc,CAAC,SAAS,WAAU;AACxD,YAAM,SAAS,MAAK;AAClB,gBAAO;AACP,gBAAO;MACT;AAEA,YAAM,UAAU,MAAK;AACnB,gBAAO;AACP,eACE,KAAK,UACH,IAAI,MAAM,gDAAgD,CAAC;MAEjE;AAEA,YAAM,UAAU,MAAK;AACnB,gBAAO;AACP,eACE,KAAK,UACH,IAAI,gCACF,kCAAkC,CACnC;MAEP;AAEA,YAAM,UAAU,MAAK;AACnB,aAAK,QAAQ,oBAAoB,QAAQ,MAAa;AACtD,aAAK,QAAQ,oBAAoB,SAAS,OAAc;AACxD,aAAK,QAAQ,oBAAoB,SAAS,OAAc;MAC1D;AAEA,WAAK,QAAQ,iBAAiB,QAAQ,MAAa;AACnD,WAAK,QAAQ,iBAAiB,SAAS,OAAc;AACrD,WAAK,QAAQ,iBAAiB,SAAS,OAAc;IACvD,CAAC;AAED,UAAM,gBACJ,YACE,aACA,WACA,uBACE,iEAAiE,SAAS,KAAK,GAEnF,MAAM;EAEV;EAEA,MAAM,KAAK,MAAY;AACrB,QAAI,KAAK,QAAQ,eAAe,KAAK,QAAQ,MAAM;AACjD,YAAM,IAAI,gCAAgC,iBAAiB;IAC7D;AAEA,SAAK,QAAQ,KAAK,IAAI;EACxB;EAEA,aAAU;AACR,WACE,CAAC,KAAK,WACN,CAAC,KAAK,UACN,KAAK,QAAQ,eAAe,KAAK,QAAQ;EAE7C;EAEA,MAAM,UACJ,QAA+B;AAE/B,mBAAe,MAAM;AACrB,WAAO,MAAM,gBAAgB,KAAK,mBAAkB,GAAI,MAAM;EAChE;EAEA,MAAM,QAAK;AACT,SAAK,eAAc;AACnB,QAAI,CAAC,KAAK,SAAS;AACjB,UAAI;AACF,aAAK,QAAQ,MAAK;MACpB,QAAQ;MAER;IACF;AAEA,UAAM,KAAK;EACb;EAEA,MAAM,qBAAkB;AACtB,QAAI,KAAK,UAAU,SAAS,GAAG;AAC7B,aAAO,KAAK,UAAU,MAAK,KAAM;IACnC;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,KAAK;IACb;AAEA,QAAI,KAAK,SAAS;AAChB,aAAO;IACT;AAEA,WAAO,MAAM,IAAI,QACf,CAAC,SAAS,WAAU;AAClB,WAAK,SAAS,KAAK,EAAE,SAAS,OAAM,CAAE;IACxC,CAAC;EAEL;EAEA,mBAAgB;AACd,UAAM,SAAS,KAAK;AACpB,QAAI,OAAO,OAAO,OAAO,YAAY;AACnC,aAAO,GAAG,QAAQ,KAAK,OAAO;AAC9B,aAAO,MAAK;AACV,YAAI,OAAO,OAAO,QAAQ,YAAY;AACpC,iBAAO,IAAI,QAAQ,KAAK,OAAO;QACjC,WAAW,OAAO,OAAO,mBAAmB,YAAY;AACtD,iBAAO,eAAe,QAAQ,KAAK,OAAO;QAC5C;MACF;IACF;AAEA,QAAI,OAAO,OAAO,qBAAqB,YAAY;AACjD,aAAO,iBAAiB,QAAe,KAAK,OAAc;AAC1D,aAAO,MAAK;AACV,eAAO,oBAAoB,QAAe,KAAK,OAAc;MAC/D;IACF;AAEA,WAAO;EACT;EAEA,kBAAe;AACb,QAAI,OAAO,KAAK,oBAAoB,UAAU;AAC5C;IACF;AAEA,SAAK,qBAAqB,YAAY,MAAK;AACzC,WAAK,mBAAkB;IACzB,GAAG,KAAK,eAAe;EACzB;EAEA,iBAAc;AACZ,QAAI,KAAK,oBAAoB;AAC3B,oBAAc,KAAK,kBAAkB;AACrC,WAAK,qBAAqB;IAC5B;AACA,SAAK,uBAAsB;AAC3B,SAAK,sBAAqB;AAC1B,SAAK,sBAAsB;EAC7B;EAEA,yBAAsB;AACpB,QAAI,KAAK,mBAAmB;AAC1B,mBAAa,KAAK,iBAAiB;AACnC,WAAK,oBAAoB;IAC3B;EACF;EAEA,qBAAkB;AAChB,QAAI,KAAK,WAAW,KAAK,QAAQ,eAAe,KAAK,QAAQ,MAAM;AACjE;IACF;AAEA,UAAM,SAAS,KAAK;AACpB,QAAI,OAAO,OAAO,SAAS,YAAY;AACrC;IACF;AAEA,QAAI,OAAO,KAAK,mBAAmB,UAAU;AAC3C,UAAI,KAAK,mBAAmB;AAC1B;MACF;AACA,WAAK,oBAAoB,WAAW,MAAK;AACvC,aAAK,oBAAoB;AACzB,aAAK,SAAS,IAAI,gCAAgC,cAAc;AAChE,YAAI;AACF,cAAI,OAAO,OAAO,cAAc,YAAY;AAC1C,mBAAO,UAAS;UAClB,OAAO;AACL,mBAAO,MAAK;UACd;QACF,QAAQ;QAER;MACF,GAAG,KAAK,cAAc;IACxB;AAEA,QAAI;AACF,aAAO,KAAI;IACb,SAAS,OAAO;AACd,WAAK,uBAAsB;AAC3B,WAAK,SAAS,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACtE,UAAI;AACF,eAAO,MAAK;MACd,QAAQ;MAER;AACA;IACF;EACF;EAEA,aAAa,CAAC,UAAuB;AACnC,UAAM,OAAO,MAAM;AAEnB,UAAM,SAAS,KAAK,SAAS,MAAK;AAClC,QAAI,QAAQ;AACV,aAAO,QAAQ,IAAI;AACnB;IACF;AAEA,SAAK,UAAU,KAAK,IAAI;EAC1B;EAEA,UAAU,MAAK;AACb,SAAK,uBAAsB;EAC7B;EAEA,WAAW,CAAC,UAAc;AACxB,UAAM,aAAa,OAAO;AAC1B,UAAM,eAAe,OAAO;AAC5B,SAAK,SACH,sBAAsB,QAClB,aACA,IAAI,MACF,OAAO,iBAAiB,YAAY,aAAa,SAAS,IACtD,eACA,uCAAuC;AAGnD,UAAM,UAAU,KAAK,SAAS,OAAO,CAAC;AACtC,eAAW,UAAU,SAAS;AAC5B,aAAO,OAAO,KAAK,MAAM;IAC3B;EACF;EAEA,WAAW,MAAK;AACd,SAAK,eAAc;AACnB,SAAK,UAAU;AACf,SAAK,eAAc;AAEnB,UAAM,UAAU,KAAK,SAAS,OAAO,CAAC;AACtC,eAAW,UAAU,SAAS;AAC5B,UAAI,KAAK,QAAQ;AACf,eAAO,OAAO,KAAK,MAAM;MAC3B,OAAO;AACL,eAAO,QAAQ,IAAI;MACrB;IACF;EACF;;;;ACriBF,SAAS,aAAa,OAAc;AAClC,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,gCACP,OAAc;AAEd,MAAI,CAAC,aAAa,KAAK,KAAK,MAAM,QAAQ,KAAK,GAAG;AAChD,WAAO;EACT;AAEA,QAAM,YAAY,OAAO,eAAe,KAAK;AAC7C,SAAO,cAAc,OAAO,aAAa,cAAc;AACzD;AAEA,SAAS,kCACP,OACA,WAAiB;AAEjB,MAAI,OAAO,UAAU,aAAa;AAChC,WAAO;EACT;AAEA,MAAI,CAAC,gCAAgC,KAAK,GAAG;AAC3C,UAAM,IAAI,UAAU,uBAAuB,SAAS,qBAAqB;EAC3E;AAEA,SAAO,EAAE,GAAG,MAAK;AACnB;AAEM,SAAU,iCAAiC,cAAqB;AAIpE,MAAI,CAAC,aAAa,YAAY,KAAK,MAAM,QAAQ,YAAY,GAAG;AAC9D,WAAO;MACL,cAAc,CAAA;MACd,WAAW,CAAA;;EAEf;AAEA,QAAM,EACJ,eACA,cACA,aACA,YACA,YACA,WACA,GAAG,sBAAqB,IACtB;AAEJ,SAAO;IACL,cAAc,EAAE,GAAG,sBAAqB;IACxC,WAAW;MACT,cAAc,kCACZ,OAAO,kBAAkB,cAAc,gBAAgB,cACvD,eAAe;MAEjB,YAAY,kCACV,OAAO,gBAAgB,cAAc,cAAc,YACnD,aAAa;MAEf,WAAW,kCACT,OAAO,eAAe,cAAc,aAAa,WACjD,YAAY;;;AAIpB;AAOA,SAAS,iBAAiB,SAAgB;AACxC,QAAM,SAA4B;IAChC,SAAS,CAAA;IACT,qBAAqB,CAAA;;AAGvB,MAAI,CAAC,SAAS;AACZ,WAAO;EACT;AAEA,MAAI,OAAO,YAAY,eAAe,mBAAmB,SAAS;AAChE,YAAQ,QAAQ,CAAC,OAAO,QAAO;AAC7B,aAAO,QAAQ,KAAK,CAAC,KAAK,KAAK,CAAC;IAClC,CAAC;AACD,WAAO;EACT;AAEA,MAAI,aAAa,OAAO,KAAK,OAAO,YAAY,aAAa;AAC3D,UAAM,SAAU,QAAiC;AACjD,UAAM,QAAS,QAAgC;AAC/C,QAAI,kBAAkB,SAAS;AAC7B,aAAO,QAAQ,CAAC,OAAO,QAAO;AAC5B,eAAO,QAAQ,KAAK,CAAC,KAAK,KAAK,CAAC;MAClC,CAAC;AACD,UAAI,iBAAiB,KAAK;AACxB,mBAAW,mBAAmB,OAAO;AACnC,cAAI,OAAO,oBAAoB,UAAU;AACvC,mBAAO,oBAAoB,KAAK,gBAAgB,YAAW,CAAE;UAC/D;QACF;MACF;AACA,aAAO;IACT;EACF;AAEA,MAAI,MAAM,QAAQ,OAAO,GAAG;AAC1B,eAAW,SAAS,SAAS;AAC3B,UAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,GAAG;AAC7C;MACF;AACA,YAAM,CAAC,KAAK,KAAK,IAAI;AACrB,UAAI,OAAO,QAAQ,eAAe,SAAS,MAAM;AAC/C;MACF;AACA,aAAO,QAAQ,KAAK,CAAC,OAAO,GAAG,GAAG,OAAO,KAAK,CAAC,CAAC;IAClD;AACA,WAAO;EACT;AAEA,MAAI,CAAC,aAAa,OAAO,GAAG;AAC1B,WAAO;EACT;AAEA,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,OAAO,UAAU,aAAa;AAChC;IACF;AACA,QAAI,UAAU,MAAM;AAClB,aAAO,oBAAoB,KAAK,IAAI,YAAW,CAAE;AACjD;IACF;AACA,WAAO,QAAQ,KAAK,CAAC,KAAK,OAAO,KAAK,CAAC,CAAC;EAC1C;AAEA,SAAO;AACT;AAmBM,SAAU,0BAAuB;AACrC,SAAO;IACL,uBAAuB,oBAAI,IAAG;IAC9B,uBAAuB,oBAAI,IAAG;;AAElC;AAEM,SAAU,0BACd,aACA,SACA,SAA4C;AAE5C,QAAM,uBAAuB,SAAS,wBAAwB;AAC9D,QAAM,SAAS,iBAAiB,OAAO;AAEvC,aAAW,iBAAiB,OAAO,qBAAqB;AACtD,gBAAY,sBAAsB,OAAO,aAAa;AACtD,gBAAY,sBAAsB,IAAI,aAAa;EACrD;AAEA,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,SAAS;AACzC,UAAM,eAAe,IAAI,YAAW;AACpC,QACE,YAAY,sBAAsB,IAAI,YAAY,KAClD,CAAC,sBACD;AACA;IACF;AAEA,gBAAY,sBAAsB,IAAI,cAAc,EAAE,KAAK,MAAK,CAAE;AAClE,QAAI,sBAAsB;AACxB,kBAAY,sBAAsB,OAAO,YAAY;IACvD;EACF;AACF;AAEM,SAAU,0BACd,aAA8B;AAE9B,QAAM,UAAkC,CAAA;AACxC,aAAW,EAAE,KAAK,MAAK,KAAM,YAAY,sBAAsB,OAAM,GAAI;AACvE,YAAQ,GAAG,IAAI;EACjB;AACA,SAAO;AACT;AAEM,SAAU,8BACd,aAA8B;AAE9B,QAAM,UACJ,0BAA0B,WAAW;AACvC,aAAW,iBAAiB,YAAY,uBAAuB;AAC7D,YAAQ,aAAa,IAAI;EAC3B;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,KAAU,KAAa,UAAiB;AACrE,MAAI,OAAO,aAAa,eAAe,aAAa,MAAM;AACxD;EACF;AAEA,MAAI,MAAM,QAAQ,QAAQ,GAAG;AAC3B,eAAW,SAAS,UAAU;AAC5B,4BAAsB,KAAK,GAAG,GAAG,MAAM,KAAK;IAC9C;AACA;EACF;AAEA,MAAI,gCAAgC,QAAQ,GAAG;AAC7C,eAAW,CAAC,WAAW,WAAW,KAAK,OAAO,QAAQ,QAAQ,GAAG;AAC/D,4BAAsB,KAAK,GAAG,GAAG,IAAI,SAAS,KAAK,WAAW;IAChE;AACA;EACF;AAEA,MAAI,oBAAoB,MAAM;AAC5B,QAAI,aAAa,OAAO,KAAK,SAAS,YAAW,CAAE;AACnD;EACF;AAEA,MAAI,aAAa,OAAO,KAAK,OAAO,QAAQ,CAAC;AAC/C;AAEM,SAAU,wBACd,KACA,OAA0C;AAE1C,MAAI,CAAC,OAAO;AACV;EACF;AAEA,aAAW,CAAC,KAAK,QAAQ,KAAK,OAAO,QAAQ,KAAK,GAAG;AACnD,QAAI,OAAO,aAAa,aAAa;AACnC;IACF;AAEA,eAAW,eAAe,MAAM,KAAK,IAAI,aAAa,KAAI,CAAE,GAAG;AAC7D,UAAI,gBAAgB,OAAO,YAAY,WAAW,GAAG,GAAG,GAAG,GAAG;AAC5D,YAAI,aAAa,OAAO,WAAW;MACrC;IACF;AACA,QAAI,aAAa,MAAM;AACrB;IACF;AAEA,0BAAsB,KAAK,KAAK,QAAQ;EAC1C;AACF;AAEM,SAAU,6BAA6B,UAAgB;AAC3D,QAAM,iBAAiB,SAAS,QAAQ,QAAQ,EAAE;AAClD,MACE,mBAAmB,gBACnB,eAAe,SAAS,YAAY,GACpC;AACA,WAAO;EACT;AACA,SAAO,GAAG,cAAc;AAC1B;;;AC1RO,IAAM,kBAAkB,iBAC5B,KAAK,CAAC,eAAe,aAAa,aAAa,QAAQ,CAAC,EACxD,QAAQ,QAAQ;AAEZ,IAAM,mBAAmB,iBAC7B,KAAK,CAAC,eAAe,aAAa,aAAa,UAAU,YAAY,CAAC,EACtE,QAAQ,QAAQ;AAEZ,IAAM,wBAAwB,iBAClC,KAAK,CAAC,eAAe,aAAa,cAAc,CAAC,EACjD,QAAQ,aAAa;AAEjB,IAAM,wBAAwB,iBAClC,KAAK,CAAC,eAAe,aAAa,cAAc,QAAQ,CAAC,EACzD,QAAQ,QAAQ;AA0Cb,SAAU,cACd,UAAgD,CAAA,GAAE;AAElD,QAAM,eAA2C;IAC/C,MAAM;IACN,MAAM,QAAQ,QAAQ;IACtB,eAAe,QAAQ;IACvB,SAAS,QAAQ,SAAS,iBACtB,EAAE,iBAAiB,QAAQ,QAAQ,eAAc,IACjD;IACJ,qBAAqB,QAAQ,qBAAqB;;AAEpD,MAAI,QAAQ,sBAAsB,QAAW;AAC3C,iBAAa,sBAAsB,QAAQ;EAC7C;AACA,SAAO;IACL,MAAM;IACN,MAAM,QAAQ,QAAQ;IACtB;;AAEJ;AAiHM,SAAU,eACd,UAA0D,CAAA,GAAE;AAE5D,MAAI,OAAO,QAAQ,SAAS,YAAY,QAAQ,SAAS,eAAe;AACtE,UAAM,IAAI,UACR,2EAA2E;EAE/E;AAEA,MAAI,OAAO,QAAQ,YAAY,cAAc,QAAQ,cAAc,UAAU;AAC3E,UAAM,IAAI,UACR,oEAAoE;EAExE;AAEA,QAAM,eAA4C;IAChD,MAAM;IACN,MAAM;IACN,WAAW,QAAQ;IACnB,aAAa,QAAQ;IACrB,YAAY,QAAQ;;AAEtB,QAAM,aAAyB;IAC7B,MAAM;IACN,MAAM;IACN;;AAGF,MAAI,OAAO,QAAQ,YAAY,YAAY;AACzC,mCAA+B,YAAY,QAAQ,OAAO;EAC5D;AAEA,SAAO;AACT;;;ACzMM,SAAU,wBAA2B,OAAQ;AACjD,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,MAAK;EACpB;AAEA,MAAI,CAACC,UAAS,KAAK,GAAG;AACpB,WAAO;EACT;AAEA,QAAM,SAAwB,CAAA;AAC9B,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,UAAM,WAAW,IAAI,QAAQ,YAAY,KAAK,EAAE,YAAW;AAC3D,WAAO,QAAQ,IAAI,wBAAwB,KAAK;EAClD;AACA,SAAO;AACT;AA0BA,SAASC,UAAS,OAAc;AAC9B,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,YAAY,KAAW;AAC9B,SAAO,IAAI,QAAQ,YAAY,KAAK,EAAE,YAAW;AACnD;AAEA,SAAS,iBACP,OACA,cAAiC;AAEjC,MAAI,CAACA,UAAS,KAAK,GAAG;AACpB,WAAO,CAAA;EACT;AAEA,QAAM,SAAwB,CAAA;AAC9B,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,QAAI,aAAa,IAAI,GAAG,GAAG;AACzB;IACF;AACA,WAAO,GAAG,IAAI;EAChB;AACA,SAAO;AACT;AAKM,SAAU,mCACd,OACA,cAA+B;AAE/B,SAAO,iBAAiB,OAAO,IAAI,IAAI,YAAY,CAAC;AACtD;AAKM,SAAU,6CACd,OACA,cAA+B;AAE/B,SAAO,iBACL,wBAAwB,KAAK,GAC7B,IAAI,IAAI,aAAa,IAAI,CAAC,QAAQ,YAAY,GAAG,CAAC,CAAC,CAAC;AAExD;;;ACpHM,SAAU,8BACd,OAA2B;AAE3B,SAAO,UAAU,cAAc,cAAc;AAC/C;;;ACRM,SAAU,sBACd,cAAgC;AAEhC,MAAI,OAAO,iBAAiB,UAAU;AACpC,WAAO,aAAa,KAAI,MAAO,KAAK,SAAY;EAClD;AACA,SAAO;AACT;AAEM,SAAU,8BACd,cAA6B;AAE7B,QAAM,QAA2C,CAAA;AACjD,MAAI,aAAa;AAEjB,aAAW,CAAC,KAAK,KAAK,KAAK,aAAa,QAAO,GAAI;AACjD,iBAAa;AACb,UAAM,gBAAgB,MAAM,GAAG;AAC/B,QAAI,OAAO,kBAAkB,aAAa;AACxC,YAAM,GAAG,IAAI;IACf,WAAW,MAAM,QAAQ,aAAa,GAAG;AACvC,oBAAc,KAAK,KAAK;IAC1B,OAAO;AACL,YAAM,GAAG,IAAI,CAAC,eAAe,KAAK;IACpC;EACF;AAEA,SAAO,aAAa,QAAQ;AAC9B;AAEM,SAAU,oBACd,OACA,UAAgB;AAEhB,SAAO,IAAI,aAAa;IACtB,aAAa,OAAO,gBAAgB;IACpC,cAAc,OAAO,iBAAiB;IACtC,aAAa,OAAO,gBAAgB;IACpC,oBAAoB,EAAE,GAAG,OAAO,qBAAoB;IACpD,qBAAqB,EAAE,GAAG,OAAO,sBAAqB;IACtD;GACD;AACH;;;ATgGA,SAAS,oCACPC,OACA,mBAAmB,OAAK;AAExB,MAAI,CAACA,SAAQ,OAAOA,UAAS,YAAY,MAAM,QAAQA,KAAI,GAAG;AAC5D,WAAOA;EACT;AAEA,MAAIA,MAAK,SAAS,oBAAoB,OAAOA,MAAK,iBAAiB,UAAU;AAC3E,WAAO;MACL,MAAM;MACN,eAAeA,MAAK;MACpB,GAAI,OAAOA,MAAK,cAAc,WAC1B,EAAE,WAAWA,MAAK,UAAS,IAC3B,CAAA;;EAER;AAEA,MAAIA,MAAK,SAAS,eAAe,MAAM,QAAQA,MAAK,KAAK,GAAG;AAC1D,WAAO;MACL,GAAGA;MACH,OAAOA,MAAK,MAAM,IAAI,CAAC,UACrB,oCAAoC,OAAO,IAAI,CAAC;;EAGtD;AAEA,MAAIA,MAAK,SAAS,YAAY;AAC5B,UAAM,EAAE,cAAc,GAAG,KAAI,IAAKA;AAClC,WAAO;MACL,GAAG;MACH,GAAI,OAAO,iBAAiB,YACxB,EAAE,eAAe,aAAY,IAC7B,CAAA;;EAER;AAEA,SAAOA;AACT;AAEA,SAAS,sCACPA,OACA,mBAAmB,OAAK;AAExB,MAAI,CAACA,SAAQ,OAAOA,UAAS,YAAY,MAAM,QAAQA,KAAI,GAAG;AAC5D,WAAOA;EACT;AAEA,MACEA,MAAK,SAAS,oBACd,OAAOA,MAAK,kBAAkB,UAC9B;AACA,WAAO;MACL,MAAM;MACN,cAAcA,MAAK;MACnB,GAAI,OAAOA,MAAK,cAAc,WAC1B,EAAE,WAAWA,MAAK,UAAS,IAC3B,CAAA;;EAER;AAEA,MAAIA,MAAK,SAAS,eAAe,MAAM,QAAQA,MAAK,KAAK,GAAG;AAC1D,WAAO;MACL,GAAGA;MACH,OAAOA,MAAK,MAAM,IAAI,CAAC,UACrB,sCAAsC,OAAO,IAAI,CAAC;;EAGxD;AAEA,MAAIA,MAAK,SAAS,YAAY;AAC5B,UAAM,EAAE,eAAe,GAAG,KAAI,IAAKA;AACnC,WAAO;MACL,GAAG;MACH,GAAI,OAAO,kBAAkB,YACzB,EAAE,cAAc,cAAa,IAC7B,CAAA;;EAER;AAEA,SAAOA;AACT;AAsCA,SAAS,0BAA0B,OAAc;AAC/C,MAAI,wBAAwB,KAAK,GAAG;AAClC,WAAO;EACT;AAEA,QAAM,aACJ,iBAAiB,QACZ,MAAsC,QACvC;AAEN,MACE,iBAAiB,mCACjB,MAAM,SAAS,oCACf;AACA,WAAO;EACT;AAEA,MACE,sBAAsB,mCACtB,WAAW,SAAS,oCACpB;AACA,WAAO;EACT;AAEA,SAAO;AACT;AAEA,SAAS,gCAAgC,OAAc;AACrD,MACE,iBAAiB,oCAChB,MAAM,SAAS,sDACd,MAAM,SAAS,iBACjB;AACA,WAAO;EACT;AAEA,QAAM,aACJ,iBAAiB,QACZ,MAAsC,QACvC;AAEN,SACE,sBAAsB,oCACrB,WAAW,SAAS,sDACnB,WAAW,SAAS;AAE1B;AAEA,SAAS,qCACPA,OAA4B;AAK5B,SACE,OAAOA,MAAK,gBAAgB,YAC5B,MAAM,QAAQA,MAAK,UAAU,KAC7BA,MAAK,WAAW,WAAW,KAC3BA,MAAK,WAAW,MAAM,CAAC,UAAU,OAAO,UAAU,QAAQ;AAE9D;AAEA,IAAM,mBAAmB,iBAAE,KAAK;EAC9B;EACA;EACA;EACA;EACA;EACA;;EAEA;EACA;CACD;AAED,IAAM,oBAAoB,iBAAE,KAAK,CAAC,QAAQ,YAAY,MAAM,CAAC;AAC7D,IAAM,4BAA4B,iBAAE,KAAK;EACvC;EACA;EACA;CACD;AAED,SAAS,cACP,YACA,SAIC;AAED,MAAI,OAAO,eAAe,aAAa;AACrC,WAAO;EACT;AAEA,QAAM,qBAAqB,kBAAkB,UAAU,UAAU;AACjE,MAAI,mBAAmB,SAAS;AAC9B,WAAO,mBAAmB;EAC5B;AAEA,QAAM,4BACJ,0BAA0B,UAAU,UAAU;AAChD,MAAI,0BAA0B,SAAS;AACrC,QACE,uBAAuB,SAAS,KAAK,KACrC,SAAS,oCAAoC,MAC7C;AACA,aAAO,6BAA6B,0BAA0B,MAAM;QAClE,OAAO,SAAS;OACjB;IACH;AAEA,QAAI,0BAA0B,SAAS,wBAAwB;AAC7D,aAAO,EAAE,MAAM,uBAAsB;IACvC;AAEA,WAAO,EAAE,MAAM,YAAY,MAAM,0BAA0B,KAAI;EACjE;AAEA,QAAM,SAAS,iBAAiB,UAAU,UAAU;AACpD,MAAI,OAAO,SAAS;AAClB,WAAO,EAAE,MAAM,OAAO,KAAW;EACnC;AAEA,SAAO,EAAE,MAAM,YAAY,MAAM,WAAU;AAC7C;AAEA,SAAS,0BACP,QAAe;AAEf,SAAO,WAAW,iBAChB,WAAW,eACX,WAAW,eACT,SACA;AACN;AAEA,SAAS,uBAAuB,OAAiC;AAC/D,UAAQ,SAAS,CAAA,GAAI,KACnB,CAACA,UACCA,MAAK,SAAS,cACdA,MAAK,SAAS,kBACdA,MAAK,SAAS,sBAAsB;AAE1C;AAEA,SAAS,uBAAuB,OAAc;AAC5C,SAAO,OAAO,UAAU,YAAY,MAAM,WAAW,sBAAsB;AAC7E;AAEA,SAAS,6BAA6B,SAGrC;AACC,MAAI,uBAAuB,SAAS,KAAK,GAAG;AAC1C,WAAO;EACT;AAEA,MAAI,OAAO,SAAS,UAAU,UAAU;AACtC,WAAO;EACT;AAEA,MACE,SAAS,eAAe,cACxB,SAAS,eAAe,gBACxB;AACA,WAAO;EACT;AAEA,SAAO;AACT;AAEA,SAAS,6BACP,YACA,SAEC;AAED,MACE,6BAA6B;IAC3B,OAAO,SAAS;IAChB;GACD,GACD;AACA,WAAO,EAAE,MAAM,uBAAsB;EACvC;AAEA,MAAI,eAAe,gBAAgB;AACjC,WAAO,EAAE,MAAM,eAAc;EAC/B;AAEA,SAAO,EAAE,MAAM,WAAU;AAC3B;AAEA,SAAS,0BAA0B,MAAY;AAC7C,SACE,SAAS,cACT,SAAS,kBACT,SAAS;AAEb;AAEA,SAAS,sCACP,gBACA,UAAgB;AAEhB,MAAI,CAAC,0BAA0B,cAAc,GAAG;AAC9C,WAAO;EACT;AAEA,MAAI,mBAAmB,wBAAwB;AAC7C,WAAO,aAAa;EACtB;AAEA,SAAO,aAAa;AACtB;AAEA,SAAS,sBACP,YACA,OAAsB;AAEtB,MAAI,eAAe,UAAU,eAAe,QAAQ;AAClD,WAAO;EACT;AAEA,MAAI,eAAe,YAAY;AAC7B,WAAO,MAAM,SAAS;EACxB;AAEA,MAAI,WAAW,SAAS,YAAY;AAClC,WAAO,0BAA0B,WAAW,MAAM,KAAK;EACzD;AAEA,SAAO,MAAM,KAAK,CAACA,UACjB,sCAAsC,WAAW,MAAMA,MAAK,IAAI,IAC5D,OACAA,MAAK,SAAS,WAAW,IAAI;AAErC;AAEA,SAAS,0BACP,gBACA,OACA,iBAAwB;AAExB,SACE,uBAAuB,gBAAgB,OAAO,eAAe,MAAM;AAEvE;AAEA,SAAS,uBACP,gBACA,OACA,iBAAwB;AAIxB,aAAWA,SAAQ,OAAO;AACxB,QAAI,oBAAoBA,KAAI,GAAG;AAC7B,YAAM,gBAAgB,kBAClB,GAAG,eAAe,IAAIA,MAAK,IAAI,KAC/BA,MAAK;AACT,UAAI,mBAAmB,eAAe;AACpC,eAAOA;MACT;AACA;IACF;AAEA,QAAI,gBAAgBA,KAAI,GAAG;AACzB,YAAM,kBAAkB,kBACpB,GAAG,eAAe,IAAIA,MAAK,IAAI,KAC/BA,MAAK;AACT,YAAM,cAAc,uBAClB,gBACAA,MAAK,OACL,eAAe;AAEjB,UAAI,aAAa;AACf,eAAO;MACT;IACF;EACF;AAEA,SAAO;AACT;AAEA,SAAS,gCACP,OACA,iBAAwB;AAExB,QAAM,uBAAiC,CAAA;AAEvC,aAAWA,SAAQ,OAAO;AACxB,QAAI,oBAAoBA,KAAI,GAAG;AAC7B,2BAAqB,KACnB,kBAAkB,GAAG,eAAe,IAAIA,MAAK,IAAI,KAAKA,MAAK,IAAI;AAEjE;IACF;AAEA,QAAI,gBAAgBA,KAAI,GAAG;AACzB,YAAM,kBAAkB,kBACpB,GAAG,eAAe,IAAIA,MAAK,IAAI,KAC/BA,MAAK;AACT,2BAAqB,KACnB,GAAG,gCAAgCA,MAAK,OAAO,eAAe,CAAC;AAEjE;IACF;AAEA,yBAAqB,KAAKA,MAAK,IAAI;EACrC;AAEA,SAAO;AACT;AAEA,SAAS,oBACPA,OAAmB;AAEnB,SACEA,MAAK,SAAS,cACd,OAAQA,MAA4B,SAAS;AAEjD;AAEA,SAAS,gBAAgBA,OAAmB;AAK1C,QAAM,YAAYA;AAClB,SACEA,MAAK,SAAS,eACd,OAAO,UAAU,SAAS,YAC1B,MAAM,QAAQ,UAAU,KAAK;AAEjC;AAEA,SAAS,yCACP,WAA8C;AAE9C,MAAI,CAAC,aAAa,CAAC,MAAM,QAAQ,UAAU,KAAK,GAAG;AACjD,WAAO,CAAA;EACT;AAEA,SAAO,UAAU;AACnB;AAEA,SAAS,0BACP,YACA,OACA,SAEC;AAED,QAAM,2BAA2B,SAAS,6BAA6B;AACvE,MACE,CAAC,cACD,eAAe,UACf,eAAe,cACf,eAAe,UACf,WAAW,SAAS,YACpB;AACA;EACF;AAEA,QAAM,sBAAsB,uBAAuB,WAAW,MAAM,KAAK;AAEzE,MACE,CAAC,uBACD,4BACA,WAAW,SAAS,eACpB;AACA;EACF;AAEA,MACG,qBACG,kBAAkB,MACtB;AACA,UAAM,IAAI,UACR,6BAA6B,WAAW,IAAI,8FAA8F;EAE9I;AAEA,MACE,WAAW,SAAS,iBACpB,CAAC,0BAA0B,WAAW,MAAM,KAAK,GACjD;AACA,UAAM,IAAI,UACR,2LAA2L;EAE/L;AACF;AAEA,SAAS,wBACP,YACA,OACA,SAEC;AAED,QAAM,2BAA2B,SAAS,6BAA6B;AACvE,MAAI,OAAO,eAAe,aAAa;AACrC,WAAO;EACT;AAEA,MAAI,sBAAsB,YAAY,KAAK,KAAK,0BAA0B;AACxE,WAAO;EACT;AAEA,QAAM,uBAAuB;IAC3B,GAAG,IAAI,IAAI,gCAAgC,KAAK,CAAC;;AAEnD,QAAM,8BACJ,qBAAqB,SAAS,IAC1B,qBAAqB,qBAAqB,KAAK,IAAI,CAAC,MACpD;AAEN,MAAI,eAAe,YAAY;AAC7B,UAAM,IAAI,UACR,8GAA8G,2BAA2B,EAAE;EAE/I;AAEA,MAAI,eAAe,UAAU,eAAe,QAAQ;AAClD,UAAM,IAAI,MACR,uCAAuC,KAAK,UAAU,UAAU,CAAC,EAAE;EAEvE;AAEA,MAAI,WAAW,SAAS,YAAY;AAClC,UAAM,IAAI,UACR,6BAA6B,WAAW,IAAI,yEAAyE,2BAA2B,EAAE;EAEtJ;AAEA,QAAM,IAAI,UACR,6BAA6B,WAAW,IAAI,sDAAsD,2BAA2B,EAAE;AAEnI;AAEA,SAAS,kBACP,YACA,iBAAgD;AAEhD,MAAI,eAAe,QAAQ;AACzB,WAAO;EACT;AAEA,SAAO;IACL,GAAG;IACH,QAAQ;;AAEZ;AAEA,SAAS,qBACP,mBAA6D;AAE7D,MAAI,CAAC,mBAAmB;AACtB,WAAO;EACT;AAEA,SAAO,kBAAkB,IAAI,CAAC,UAAU,wBAAwB,KAAK,CAAC;AACxE;AAEA,SAAS,sCACP,QAAiD;AAEjD,MAAI,OAAO,WAAW,UAAU;AAC9B,WAAO;EACT;AAEA,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,WAAO,OAAO,IAAI,oCAAoC;EACxD;AAEA,MAAIC,UAAS,MAAM,KAAK,OAAO,OAAO,SAAS,UAAU;AACvD,QAAI,OAAO,SAAS,UAAU,OAAO,OAAO,SAAS,UAAU;AAC7D,aAAO,OAAO;IAChB;AAEA,QAAI,OAAO,SAAS,WAAW,OAAO,SAAS,QAAQ;AACrD,YAAM,kBAAkB,+BACtB,MAAwC;AAE1C,aAAO,gBAAgB,IAAI,oCAAoC;IACjE;EACF;AAEA,SAAO,OAAO,MAAM;AACtB;AAOA,SAAS,+BACP,QAAsC;AAEtC,MAAI,OAAO,SAAS,QAAQ;AAC1B,UAAM,aAAiC;MACrC,MAAM;MACN,MAAM,OAAO;;AAEf,QAAI,OAAO,cAAc;AACvB,iBAAW,eAAe,OAAO;IACnC;AACA,WAAO,CAAC,UAAU;EACpB;AAEA,MAAI,OAAO,SAAS,SAAS;AAC3B,UAAM,aAAkC;MACtC,MAAM;;AAGR,QAAI,OAAO,QAAQ;AACjB,iBAAW,SAAS,OAAO;IAC7B;AAEA,UAAM,iBAAkB,OAAe;AACvC,UAAM,eAAgB,OAAe;AACrC,UAAM,YAAa,OAAe;AAClC,UAAM,0BAA0B,mBAC9B,MAA6B;AAG/B,QAAI,OAAO,OAAO,UAAU,YAAY,OAAO,MAAM,SAAS,GAAG;AAC/D,iBAAW,QAAQ,OAAO;IAC5B,WAAWA,UAAS,OAAO,KAAK,GAAG;AACjC,YAAM,WAAW,OAAO;AACxB,YAAM,kBACJ,mBAAmB,QAAQ,KAAK;AAClC,UAAI,OAAO,SAAS,QAAQ,YAAY,SAAS,IAAI,SAAS,GAAG;AAC/D,mBAAW,QAAQ,SAAS;MAC9B,WACE,OAAO,SAAS,SAAS,YACzB,SAAS,KAAK,SAAS,GACvB;AACA,mBAAW,QAAQ,iBAAiB,SAAS,MAAM,eAAe;MACpE,WACE,SAAS,gBAAgB,cACzB,SAAS,KAAK,SAAS,GACvB;AACA,mBAAW,QAAQ,iBAAiB,SAAS,MAAM,eAAe;MACpE,OAAO;AACL,cAAM,eACH,OAAO,SAAS,WAAW,YAC1B,SAAS,OAAO,SAAS,KACzB,SAAS,WACV,OAAO,SAAS,OAAO,YAAY,SAAS,GAAG,SAAS,IACrD,SAAS,KACT;AACN,YAAI,cAAc;AAChB,qBAAW,QAAQ,EAAE,IAAI,aAAY;QACvC;MACF;IACF,WACE,OAAO,mBAAmB,YAC1B,eAAe,SAAS,GACxB;AACA,iBAAW,QAAQ;IACrB,WAAW,OAAO,iBAAiB,YAAY,aAAa,SAAS,GAAG;AACtE,iBAAW,QAAQ,EAAE,IAAI,aAAY;IACvC,OAAO;AACL,UAAI;AACJ,UAAI,OAAO,cAAc,YAAY,UAAU,SAAS,GAAG;AACzD,qBAAa;MACf,WAAW,qBAAqB,cAAc,UAAU,SAAS,GAAG;AAClE,qBAAa,yBAAyB,SAAS;MACjD;AAEA,UAAI,YAAY;AACd,mBAAW,QAAQ,iBACjB,YACA,uBAAuB;MAE3B;IACF;AAEA,QAAI,OAAO,cAAc;AACvB,iBAAW,eAAe,OAAO;IACnC;AAEA,WAAO,CAAC,UAAU;EACpB;AAEA,MAAI,OAAO,SAAS,QAAQ;AAC1B,UAAM,aAAiC;MACrC,MAAM;;AAGR,UAAM,YAAa,OAAe,QAAQ,OAAO;AACjD,QAAI,OAAO,cAAc,UAAU;AACjC,iBAAW,OAAO;IACpB,WAAWA,UAAS,SAAS,GAAG;AAC9B,UAAI,OAAO,UAAU,SAAS,YAAY,UAAU,KAAK,SAAS,GAAG;AACnE,mBAAW,OAAO,iBAChB,UAAU,MACV,UAAU,aAAa,YAAY;MAEvC,WACE,UAAU,gBAAgB,cAC1B,UAAU,KAAK,SAAS,GACxB;AACA,mBAAW,OAAO,iBAChB,UAAU,MACV,UAAU,aAAa,YAAY;MAEvC,WACE,OAAO,UAAU,QAAQ,YACzB,UAAU,IAAI,SAAS,GACvB;AACA,mBAAW,OAAO,EAAE,KAAK,UAAU,IAAG;MACxC,OAAO;AACL,cAAM,eACH,OAAO,UAAU,OAAO,YACvB,UAAU,GAAG,SAAS,KACtB,UAAU,OACX,OAAQ,UAAkB,WAAW,YACrC,UAAkB,OAAO,SAAS,IAC9B,UAAkB,SACnB;AACN,YAAI,cAAc;AAChB,qBAAW,OAAO,EAAE,IAAI,aAAY;QACtC;MACF;AAEA,UACE,OAAO,UAAU,aAAa,YAC9B,UAAU,SAAS,SAAS,GAC5B;AACA,mBAAW,WAAW,UAAU;MAClC;IACF;AAEA,QAAI,CAAC,WAAW,MAAM;AACpB,YAAM,SAAS,8BAA8B,MAAa;AAC1D,UAAI,OAAO,MAAM;AACf,mBAAW,OAAO,OAAO;MAC3B;AACA,UAAI,OAAO,UAAU;AACnB,mBAAW,WAAW,OAAO;MAC/B;IACF;AACA,QAAI,OAAO,cAAc;AACvB,iBAAW,eAAe,OAAO;IACnC;AAEA,WAAO,CAAC,UAAU;EACpB;AAEA,QAAM,IAAI,UACR,iCAAiC,KAAK,UAAU,MAAM,CAAC,EAAE;AAE7D;AAMA,SAAS,qCACP,MAAuC;AAEvC,MAAI,KAAK,SAAS,cAAc;AAC9B,WAAO;MACL,MAAM;MACN,MAAM,KAAK;;EAEf;AAEA,MAAI,KAAK,SAAS,eAAe;AAC/B,UAAM,SAA6C,EAAE,MAAM,cAAa;AAExE,UAAM,aAAc,KAAa,SAAU,KAAa;AACxD,QAAI,OAAO,eAAe,UAAU;AAClC,aAAO,YAAY;IACrB,WAAWA,UAAS,UAAU,KAAK,OAAO,WAAW,OAAO,UAAU;AACpE,aAAO,UAAU,WAAW;IAC9B;AAEA,UAAM,eAAgB,KAAa;AACnC,QAAI,OAAO,iBAAiB,UAAU;AACpC,aAAO,UAAU;IACnB;AAEA,QAAI,KAAK,QAAQ;AACf,aAAO,SAAS,KAAK;IACvB;AAEA,WAAO;EACT;AAEA,MAAI,KAAK,SAAS,cAAc;AAC9B,UAAM,SAA6C,EAAE,MAAM,aAAY;AAEvE,QAAI,OAAO,KAAK,SAAS,UAAU;AAEjC,YAAM,QAAQ,KAAK,KAAK,KAAI;AAC5B,UAAI,MAAM,WAAW,OAAO,GAAG;AAC7B,eAAO,YAAY;MACrB,WAAW,MAAM,WAAW,SAAS,KAAK,MAAM,WAAW,UAAU,GAAG;AACtE,eAAO,WAAW;MACpB,WAAW,oBAAoB,KAAK,KAAK,GAAG;AAC1C,eAAO,YAAY;MACrB,OAAO;AACL,eAAO,WAAW;MACpB;IACF,WACE,KAAK,QACL,OAAO,KAAK,SAAS,YACrB,QAAQ,KAAK,QACb,OAAQ,KAAK,KAA0B,OAAO,UAC9C;AACA,aAAO,UAAW,KAAK,KAAwB;IACjD,WACE,KAAK,QACL,OAAO,KAAK,SAAS,YACrB,SAAS,KAAK,QACd,OAAQ,KAAK,KAA2B,QAAQ,UAChD;AACA,aAAO,WAAY,KAAK,KAAyB;IACnD;AAEA,UAAM,iBAAkB,KAAa;AACrC,QAAI,OAAO,mBAAmB,UAAU;AACtC,aAAO,YAAY;IACrB;AAEA,UAAM,gBAAiB,KAAa;AACpC,QAAI,OAAO,kBAAkB,UAAU;AACrC,aAAO,WAAW;IACpB;AAEA,UAAM,eAAgB,KAAa;AACnC,QAAI,OAAO,iBAAiB,UAAU;AACpC,aAAO,UAAU;IACnB;AAEA,QAAI,KAAK,UAAU;AACjB,aAAO,WAAW,KAAK;IACzB;AAEA,WAAO;EACT;AAEA,QAAM,IAAI,UACR,uCAAuC,KAAK,UAAU,IAAI,CAAC,EAAE;AAEjE;AAEA,SAAS,kDACP,MAAwC;AAExC,MAAI,KAAK,SAAS,cAAc;AAC9B,WAAO;MACL,MAAM;MACN,MAAM,KAAK;;EAEf;AAEA,MAAI,KAAK,SAAS,eAAe;AAC/B,UAAM,aAAkC,EAAE,MAAM,cAAa;AAE7D,QAAI,OAAO,KAAK,cAAc,YAAY,KAAK,UAAU,SAAS,GAAG;AACnE,iBAAW,QAAQ,KAAK;IAC1B,WAAW,OAAO,KAAK,YAAY,YAAY,KAAK,QAAQ,SAAS,GAAG;AACtE,iBAAW,QAAQ,EAAE,IAAI,KAAK,QAAO;IACvC,OAAO;AAGL,qBAAO,MACL,0KAA0K;AAE5K,aAAO;IACT;AAEA,QAAI,KAAK,QAAQ;AACf,iBAAW,SAAS,KAAK;IAC3B;AAEA,WAAO;EACT;AAEA,MAAI,KAAK,SAAS,cAAc;AAC9B,UAAM,aAAiC,EAAE,MAAM,aAAY;AAE3D,QAAI,OAAO,KAAK,YAAY,YAAY,KAAK,QAAQ,SAAS,GAAG;AAC/D,iBAAW,OAAO,EAAE,IAAI,KAAK,QAAO;IACtC,WAAW,OAAO,KAAK,aAAa,YAAY,KAAK,SAAS,SAAS,GAAG;AACxE,iBAAW,OAAO,EAAE,KAAK,KAAK,SAAQ;IACxC,WACE,OAAO,KAAK,cAAc,YAC1B,KAAK,UAAU,SAAS,GACxB;AACA,iBAAW,OAAO,KAAK;IACzB;AAEA,QAAI,KAAK,UAAU;AACjB,iBAAW,WAAW,KAAK;IAC7B;AAEA,WAAO;EACT;AAEA,QAAM,aAAoB;AAC1B,QAAM,IAAI,UACR,uCAAuC,KAAK,UAAU,UAAU,CAAC,EAAE;AAEvE;AAEA,SAAS,oCACP,QAAqE;AAErE,MAAI,OAAO,WAAW,UAAU;AAC9B,WAAO;EACT;AAEA,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,WAAO,OACJ,IAAI,iDAAiD,EACrD,OAAO,CAAC,MAAM,MAAM,IAAI;EAC7B;AAEA,SAAO;AACT;AAEA,SAAS,8BAA8B,OAA0B;AAI/D,QAAM,WACJ,OAAO,MAAM,aAAa,YAAY,MAAM,SAAS,SAAS,IAC1D,MAAM,WACN;AAEN,QAAM,eACJ,OAAO,MAAM,OAAO,YAAY,MAAM,GAAG,SAAS,IAC9C,MAAM,KACN,OAAO,MAAM,WAAW,YAAY,MAAM,OAAO,SAAS,IACxD,MAAM,SACN;AACR,MAAI,cAAc;AAChB,WAAO,EAAE,MAAM,EAAE,IAAI,aAAY,GAAI,SAAQ;EAC/C;AAEA,MAAI,OAAO,MAAM,YAAY,YAAY,MAAM,QAAQ,SAAS,GAAG;AACjE,WAAO,EAAE,MAAM,EAAE,KAAK,MAAM,QAAO,GAAI,SAAQ;EACjD;AAEA,MAAI,OAAO,MAAM,aAAa,YAAY,MAAM,SAAS,SAAS,GAAG;AACnE,WAAO;MACL,MAAM,iBAAiB,MAAM,UAAU,MAAM,aAAa,YAAY;MACtE;;EAEJ;AAEA,MAAI,MAAM,oBAAoB,cAAc,MAAM,SAAS,SAAS,GAAG;AACrE,WAAO;MACL,MAAM,iBAAiB,MAAM,UAAU,MAAM,aAAa,YAAY;MACtE;;EAEJ;AAEA,SAAO,CAAA;AACT;AAEA,SAASA,UAAS,OAAc;AAC9B,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,iCACP,cAAoD;AAIpD,QAAM,aAAa,wBAAwB,YAAY;AACvD,MAAI,CAACA,UAAS,UAAU,GAAG;AACzB,WAAO,CAAA;EACT;AACA,QAAM,cAAc,WAAW;AAC/B,MAAI,CAACA,UAAS,WAAW,GAAG;AAC1B,WAAO,CAAA;EACT;AACA,SAAO;IACL;;AAGJ;AAEA,SAAS,mBACP,OAAoC;AAEpC,MAAI,MAAM,SAAS,mBAAmB;AACpC,UAAM,UAAU,MAAM;AACtB,QAAI,OAAO,YAAY,YAAY,QAAQ,WAAW,GAAG;AACvD,YAAM,IAAI,UAAU,yCAAyC;IAC/D;AAEA,WAAO;MACL,MAAM;MACN,UAAU;MACV,SAAS,MAAM;;EAEnB;AAEA,MAAI,MAAM,SAAS,UAAU;AAC3B,QAAI,CAAC,MAAM,QAAQ;AACjB,YAAM,IAAI,UAAU,uCAAuC;IAC7D;AACA,UAAM,YAAY,MAAM,OAAO;AAC/B,QAAI,cAAc,mBAAmB;AACnC,YAAM,IAAI,UACR,8DAA8D;IAElE;AACA,QACE,OAAO,MAAM,OAAO,SAAS,YAC7B,MAAM,OAAO,KAAK,WAAW,GAC7B;AACA,YAAM,IAAI,UAAU,6CAA6C;IACnE;AACA,QAAI,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,WAAW,GAAG;AAC7D,YAAM,IAAI,UAAU,mCAAmC;IACzD;AACA,QACE,OAAO,MAAM,gBAAgB,YAC7B,MAAM,YAAY,WAAW,GAC7B;AACA,YAAM,IAAI,UAAU,0CAA0C;IAChE;AAEA,WAAO;MACL,MAAM;MACN,MAAM,MAAM;MACZ,aAAa,MAAM;MACnB,QAAQ;QACN,MAAM;QACN,YAAY;QACZ,MAAM,MAAM,OAAO;;;EAGzB;AAEA,QAAM,IAAI,UACR,iCAAiC,OAC9B,MAA6B,IAAI,CACnC,EAAE;AAEP;AAEA,SAAS,2BACP,QAA6C;AAE7C,MAAI,CAAC,QAAQ;AACX,WAAO;EACT;AAEA,MAAI,OAAO,SAAS,YAAY;AAC9B,WAAO,EAAE,MAAM,WAAU;EAC3B;AAEA,MAAI,OAAO,SAAS,aAAa;AAC/B,QAAI,CAAC,MAAM,QAAQ,OAAO,cAAc,GAAG;AACzC,YAAM,IAAI,UACR,wDAAwD;IAE5D;AAEA,UAAM,iBAAiB,OAAO,eAAe,OAC3C,CAAC,WACC,OAAO,WAAW,YAAY,OAAO,SAAS,CAAC;AAGnD,UAAM,gBAAgB,OAAO,eAAe,IAAI,CAAC,YAAY;MAC3D,QAAQ,OAAO;MACf,MAAM,OAAO;MACb,OAAO,OAAO;MACd;AAEF,WAAO;MACL,MAAM;MACN,iBAAiB;MACjB,gBAAgB;;EAEpB;AAEA,QAAM,IAAI,UACR,yCAAyC,OACtC,OAA8B,IAAI,CACpC,EAAE;AAEP;AAEA,SAAS,yBACP,aAAmD;AAEnD,MAAI,CAAC,aAAa;AAChB,WAAO,EAAE,MAAM,QAAO;EACxB;AAEA,MAAI,YAAY,SAAS,SAAS;AAChC,UAAM,cAAc,YAAY,QAAQ,IAAI,CAAC,UAAS;AACpD,UACE,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,gBAAgB,YAC7B,OAAO,MAAM,SAAS,UACtB;AACA,cAAM,IAAI,UACR,yDAAyD;MAE7D;AACA,aAAO;QACL,MAAM,MAAM;QACZ,aAAa,MAAM;QACnB,MAAM,MAAM;;IAEhB,CAAC;AAED,WAAO;MACL,MAAM;MACN,QAAQ;;EAEZ;AAEA,MAAI,YAAY,SAAS,kBAAkB;AACzC,UAAMC,UAAS,YAAY,QAAQ,IAAI,kBAAkB;AAEzD,WAAO;MACL,MAAM;MACN,UAAU,YAAY;MACtB,cAAc,YAAY;MAC1B,gBAAgB,2BAA2B,YAAY,aAAa;MACpE,QAAAA;;EAEJ;AAEA,MAAI,YAAY,SAAS,uBAAuB;AAC9C,UAAM,cAAc,YAAY;AAChC,QAAI,OAAO,gBAAgB,YAAY,YAAY,WAAW,GAAG;AAC/D,YAAM,IAAI,UACR,6DAA6D;IAEjE;AAEA,WAAO;MACL,MAAM;MACN,cAAc;;EAElB;AAEA,QAAM,IAAI,UACR,uCAAuC,OACpC,YAAoC,IAAI,CAC1C,EAAE;AAEP;AAEA,SAAS,SACP,OACA,UACA,SAGC;AAKD,QAAM,cAA+B,CAAA;AACrC,QAAM,UAAiD,CAAA;AACvD,QAAM,uBAAuB,oBAAI,IAAG;AASpC,MAAI,4BAA4B;AAChC,MAAI,gBAAgB;AACpB,QAAM,yBAAyB,6BAA6B;IAC1D,OAAO,SAAS;IAChB,YAAY,SAAS;GACtB;AACD,aAAWF,SAAQ,OAAO;AACxB,QAAIA,MAAK,SAAS,YAAY;AAC5B,YAAM,qBAAqBA,MAAK,iBAAiB;AACjD,oCAA8B;AAE9B,YAAM,gBACJ,OAAOA,MAAK,cAAc,WAAWA,MAAK,UAAU,KAAI,IAAK;AAC/D,UAAI,cAAc,SAAS,GAAG;AAC5B,cAAM,uBACJ,OAAOA,MAAK,yBAAyB,WACjCA,MAAK,qBAAqB,KAAI,IAC9B;AACN,YAAI,qBAAqB,WAAW,GAAG;AACrC,gBAAM,IAAI,UACR,2BAA2B,aAAa,yCAAyC;QAErF;AAEA,YAAI,iBAAiB,qBAAqB,IAAI,aAAa;AAC3D,YAAI,CAAC,gBAAgB;AACnB,2BAAiB;YACf,OAAO,YAAY;YACnB,aAAa;YACb,eAAe,oBAAI,IAAG;YACtB,OAAO,CAAA;;AAET,+BAAqB,IAAI,eAAe,cAAc;AACtD,sBAAY,KAAK,CAAA,CAAE;QACrB,WAAW,eAAe,gBAAgB,sBAAsB;AAC9D,gBAAM,IAAI,UACR,2BAA2B,aAAa,oCAAoC;QAEhF;AAEA,cAAM,EAAE,MAAMG,aAAY,SAASC,gBAAc,IAAK,YACpDJ,OACA;UACE;SACD;AAEH,YAAI,eAAe,cAAc,IAAIA,MAAK,IAAI,GAAG;AAC/C,gBAAM,IAAI,UACR,cAAc,aAAa,kDAAkDA,MAAK,IAAI,IAAI;QAE9F;AACA,uBAAe,cAAc,IAAIA,MAAK,IAAI;AAC1C,uBAAe,MAAM,KAAKG,WAAuC;AACjE,YAAIC,mBAAkBA,gBAAe,SAAS,GAAG;AAC/C,qBAAW,QAAQA,iBAAgB;AACjC,oBAAQ,KAAK,IAAI;UACnB;QACF;AACA;MACF;IACF;AAEA,QACEJ,MAAK,SAAS,iBACdA,MAAK,cAAc,SAAS,eAC5B;AACA,sBAAgB;IAClB;AAEA,QACEA,MAAK,SAAS,iBACdA,MAAK,cAAc,SAAS,SAC5BA,MAAK,aAAa,kBAAkB,MACpC;AACA,kCAA4B;IAC9B;AAEA,UAAM,EAAE,MAAM,YAAY,SAAS,eAAc,IAAK,YAAYA,OAAM;MACtE;KACD;AACD,gBAAY,KAAK,UAAU;AAC3B,QAAI,kBAAkB,eAAe,SAAS,GAAG;AAC/C,iBAAW,QAAQ,gBAAgB;AACjC,gBAAQ,KAAK,IAAI;MACnB;IACF;EACF;AAEA,MAAI,6BAA6B,CAAC,eAAe;AAC/C,UAAM,IAAI,UACR,oHAAoH;EAExH;AAEA,aAAW,CACT,eACA,cAAc,KACX,qBAAqB,QAAO,GAAI;AACnC,gBAAY,eAAe,KAAK,IAAI;MAClC,MAAM;MACN,MAAM;MACN,aAAa,eAAe;MAC5B,OAAO,eAAe;;EAE1B;AAEA,SAAO;IACL,OAAO,CAAC,GAAG,aAAa,GAAG,SAAS,IAAI,cAAc,CAAC;IACvD;;AAEJ;AAEA,SAAS,YACPA,OACA,SAEC;AAKD,MAAIA,MAAK,SAAS,YAAY;AAC5B,UAAM,aAAkC;MACtC,MAAM;MACN,MAAMA,MAAK;MACX,aAAaA,MAAK;MAClB,YAAYA,MAAK;MACjB,QAAQA,MAAK;;AAEf,QAAIA,MAAK,cAAc;AACrB,iBAAW,gBAAgB;IAC7B;AACA,WAAO;MACL,MAAM;MACN,SAAS;;EAEb,WAAWA,MAAK,SAAS,YAAY;AACnC,QAAI,SAAS,wBAAwB;AACnC,UAAI,CAAC,qCAAqCA,KAAI,GAAG;AAC/C,cAAM,IAAI,UACR,wJAAwJ;MAE5J;AAEA,aAAO;QACL,MAAM;UACJ,MAAM;UACN,aAAaA,MAAK;UAClB,eAAeA,MAAK,WAAW,CAAC;UAChC,gBAAgBA,MAAK,WAAW,CAAC;;QAEnC,SAAS;;IAEb;AAEA,WAAO;MACL,MAAM;QACJ,MAAM;;MAER,SAAS;;EAEb,WAAWA,MAAK,SAAS,SAAS;AAChC,WAAO;MACL,MAAM;QACJ,MAAM;QACN,aAAa,yBAAyBA,MAAK,WAAW;;MAExD,SAAS;;EAEb,WAAWA,MAAK,SAAS,eAAe;AACtC,WAAO;MACL,MAAM;QACJ,MAAM;;MAER,SAAS;;EAEb,WAAWA,MAAK,SAAS,eAAe;AACtC,QAAIA,MAAK,cAAc,SAAS,cAAc;AAC5C,YAAMK,iBAEF;QACF,MAAM;QACN,eAAeL,MAAK,aAAa;QACjC,SAASA,MAAK,aAAa;QAC3B,qBAAqBA,MAAK,aAAa;;AAEzC,UAAIA,MAAK,aAAa,wBAAwB,QAAW;AACvD,QAAAK,eAAc,sBACZL,MAAK,aAAa;MACtB;AACA,aAAO;QACL,MAAMK;QACN,SAAS;;IAEb,WAAWL,MAAK,cAAc,SAAS,sBAAsB;AAC3D,aAAO;QACL,MAAM;UACJ,MAAM;UACN,eAAeA,MAAK,aAAa;UACjC,qBAAqBA,MAAK,aAAa;;QAEzC,SAAS;;IAEb,WAAWA,MAAK,cAAc,SAAS,eAAe;AACpD,aAAO;QACL,MAAM;UACJ,MAAM;UACN,kBACEA,MAAK,aAAa;WAEjB,OAAOA,MAAK,aAAa,oBAAoB,WAC1C,CAACA,MAAK,aAAa,eAAe,IAClCA,MAAK,aAAa;UACxB,iBAAiBA,MAAK,aAAa;UACnC,iBAAiBA,MAAK,aAAa;UACnC,SAASA,MAAK,aAAa;;QAE7B,SAASA,MAAK,aAAa,yBACvB,CAAC,0BAA0B,IAC3B;;IAER,WAAWA,MAAK,cAAc,SAAS,oBAAoB;AACzD,aAAO;QACL,MAAM;UACJ,MAAM;UACN,WAAWA,MAAK,aAAa;;QAE/B,SAASA,MAAK,aAAa,kBACvB,CAAC,+BAA+B,IAChC;;IAER,WAAWA,MAAK,cAAc,SAAS,eAAe;AACpD,aAAO;QACL,MAAM;UACJ,MAAM;UACN,WAAWA,MAAK,aAAa;UAC7B,aAAaA,MAAK,aAAa;UAC/B,YAAYA,MAAK,aAAa;;QAEhC,SAAS;;IAEb,WAAWA,MAAK,cAAc,SAAS,oBAAoB;AACzD,aAAO;QACL,MAAM;UACJ,MAAM;UACN,YAAYA,MAAK,aAAa;UAC9B,gBAAgBA,MAAK,aAAa;UAClC,kBAAkBA,MAAK,aAAa;UACpC,OAAOA,MAAK,aAAa;UACzB,YAAYA,MAAK,aAAa;UAC9B,oBAAoBA,MAAK,aAAa;UACtC,eAAeA,MAAK,aAAa;UACjC,gBAAgBA,MAAK,aAAa;UAClC,SAASA,MAAK,aAAa;UAC3B,MAAMA,MAAK,aAAa;;QAE1B,SAAS;;IAEb,WAAWA,MAAK,cAAc,SAAS,OAAO;AAC5C,YAAM,aAAkC;QACtC,MAAM;QACN,cAAcA,MAAK,aAAa;QAChC,YAAYA,MAAK,aAAa;QAC9B,cAAcA,MAAK,aAAa;QAChC,eAAeA,MAAK,aAAa;QACjC,eAAeA,MAAK,aAAa;QACjC,SAASA,MAAK,aAAa;QAC3B,kBAAkB,0BAChBA,MAAK,aAAa,gBAAgB;QAEpC,oBAAoBA,MAAK,aAAa;;AAExC,UAAIA,MAAK,aAAa,kBAAkB,MAAM;AAC5C,mBAAW,gBAAgB;MAC7B;AACA,aAAO;QACL,MAAM;QACN,SAAS;;IAEb,WAAWA,MAAK,cAAc;AAC5B,aAAO;QACL,MAAMA,MAAK;QACX,SAAS;;IAEb;EACF;AAEA,QAAM,IAAI,MAAM,0BAA0B,KAAK,UAAUA,KAAI,CAAC,EAAE;AAClE;AAEA,SAAS,0BACP,iBAA+D;AAE/D,QAAM,aAAa,kCAAkC,eAAe;AACpE,MAAI,eAAe,SAAS;AAC1B,WAAO;EACT;AAEA,MAAI,eAAe,UAAU;AAC3B,WAAO;EACT;AAEA,SAAO;IACL,OAAO,WAAW;IAClB,QAAQ,WAAW;;AAEvB;AAEA,SAAS,eAAe,SAA0B;AAChD,SAAO;IACL,MAAM,QAAQ;IACd,aAAa,QAAQ;IACrB,YAAY,QAAQ;IACpB,QAAQ,QAAQ;IAChB,MAAM;;AAEV;AAEA,SAAS,uBACP,OAA2B;AAE3B,MAAI,MAAM,SAAS,cAAc;AAC/B,WAAO;MACL,MAAM;MACN,MAAM,MAAM;MACZ,GAAI,MAAM,wBACN,EAAE,yBAAyB,MAAM,sBAAqB,IACtD,CAAA;MACJ,GAAG,6CAA6C,MAAM,cAAc;QAClE;QACA;OACD;;EAEL,WAAW,MAAM,SAAS,eAAe;AACvC,UAAM,aAAkD;MACtD,MAAM;MACN,QAAS,MAAM,UAAU;;AAE3B,QAAI,OAAO,MAAM,UAAU,UAAU;AACnC,iBAAW,YAAY,MAAM;IAC/B,WAAW,MAAM,SAAS,QAAQ,MAAM,OAAO;AAC7C,iBAAW,UAAU,MAAM,MAAM;IACnC,WAAW,OAAQ,MAAc,aAAa,UAAU;AACtD,iBAAW,YAAa,MAAc;IACxC,WAAW,OAAQ,MAAc,WAAW,UAAU;AACpD,iBAAW,UAAW,MAAc;IACtC;AACA,WAAO;MACL,GAAG;MACH,GAAI,MAAM,wBACN,EAAE,yBAAyB,MAAM,sBAAqB,IACtD,CAAA;MACJ,GAAG,6CAA6C,MAAM,cAAc;QAClE;QACA;QACA;QACA;OACD;;EAEL,WAAW,MAAM,SAAS,cAAc;AACtC,UAAM,YAAgD;MACpD,MAAM;;AAER,QAAI,OAAO,MAAM,SAAS,UAAU;AAClC,YAAM,QAAQ,MAAM,KAAK,KAAI;AAC7B,UAAI,MAAM,WAAW,OAAO,GAAG;AAC7B,kBAAU,YAAY;MACxB,WAAW,MAAM,WAAW,UAAU,GAAG;AACvC,kBAAU,WAAW;MACvB,WAAW,oBAAoB,KAAK,KAAK,GAAG;AAC1C,kBAAU,YAAY;MACxB,OAAO;AACL,cAAM,IAAI,UACR,qIAAqI;MAEzI;IACF,WACE,MAAM,QACN,OAAO,MAAM,SAAS,YACtB,QAAQ,MAAM,MACd;AACA,gBAAU,UAAU,MAAM,KAAK;IACjC,WACE,MAAM,QACN,OAAO,MAAM,SAAS,YACtB,SAAS,MAAM,MACf;AACA,gBAAU,WAAW,MAAM,KAAK;IAClC;AAEA,UAAM,iBAAkB,MAAc;AACtC,QAAI,OAAO,mBAAmB,UAAU;AACtC,gBAAU,YAAY;IACxB;AACA,UAAM,gBAAiB,MAAc;AACrC,QAAI,OAAO,kBAAkB,UAAU;AACrC,gBAAU,WAAW;IACvB;AACA,UAAM,eAAgB,MAAc;AACpC,QAAI,OAAO,iBAAiB,UAAU;AACpC,gBAAU,UAAU;IACtB;AACA,QAAI,MAAM,UAAU;AAClB,gBAAU,WAAW,MAAM;IAC7B;AACA,WAAO;MACL,GAAG;MACH,GAAI,MAAM,wBACN,EAAE,yBAAyB,MAAM,sBAAqB,IACtD,CAAA;MACJ,GAAG,6CAA6C,MAAM,cAAc;QAClE;QACA;QACA;QACA;QACA;OACD;;EAEL;AAEA,QAAM,IAAI,UACR,mCAAmC,KAAK,UAAU,KAAK,CAAC,EAAE;AAE9D;AAEA,SAAS,qBACP,cACA,MAAuB;AAEvB,MACE,CAAC,gBACD,OAAO,iBAAiB,YACxB,MAAM,QAAQ,YAAY,GAC1B;AACA,WAAO;EACT;AAEA,QAAM,SAAS;AACf,aAAW,OAAO,MAAM;AACtB,QAAI,OAAO,OAAO,GAAG,MAAM,aAAa;AACtC,aAAO,OAAO,GAAG;IACnB;EACF;AAEA,SAAO;AACT;AAEA,SAAS,wBACP,OAAgC;AAEhC,MAAI,MAAM,SAAS,eAAe;AAChC,UAAM,cAAc,qBAElB,MAAM,cAAc,CAAC,aAAa,CAAC;AACrC,UAAM,wBACJ,MAAM,QAAQ,WAAW,IAAI,cAAc,CAAA;AAC7C,WAAO;MACL,MAAM;MACN,MAAM,MAAM;MACZ,aAAa;MACb,GAAG,6CAA6C,MAAM,cAAc;QAClE;QACA;QACA;OACD;;EAEL;AAEA,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO;MACL,MAAM;MACN,SAAS,MAAM;MACf,GAAG,6CAA6C,MAAM,cAAc;QAClE;QACA;OACD;;EAEL;AAEA,QAAM,IAAI,UACR,oCAAoC,KAAK,UAAU,KAAK,CAAC,EAAE;AAE/D;AAEA,SAAS,eACP,MAA0B;AAK1B,MAAI,KAAK,SAAS,UAAU;AAC1B,WAAO;MACL,IAAI,KAAK;MACT,MAAM;MACN,SAAS,KAAK;MACd,GAAG,6CAA6C,KAAK,cAAc;QACjE;QACA;QACA;OACD;;EAEL;AAEA,MAAI,KAAK,SAAS,QAAQ;AACxB,QAAI,OAAO,KAAK,YAAY,UAAU;AACpC,aAAO;QACL,IAAI,KAAK;QACT,MAAM;QACN,SAAS,KAAK;QACd,GAAG,6CAA6C,KAAK,cAAc;UACjE;UACA;UACA;SACD;;IAEL;AAEA,WAAO;MACL,IAAI,KAAK;MACT,MAAM;MACN,SAAS,KAAK,QAAQ,IAAI,sBAAsB;MAChD,GAAG,6CAA6C,KAAK,cAAc;QACjE;QACA;QACA;OACD;;EAEL;AAEA,MAAI,KAAK,SAAS,aAAa;AAC7B,UAAM,mBAA2D;MAC/D,MAAM;MACN,IAAI,KAAK;MACT,MAAM;MACN,SAAS,KAAK,QAAQ,IAAI,uBAAuB;MACjD,QAAQ,KAAK;MACb,GAAG,6CAA6C,KAAK,cAAc;QACjE;QACA;QACA;QACA;QACA;OACD;;AAEH,WAAO;EACT;AAEA,QAAM,IAAI,UAAU,oBAAoB,KAAK,UAAU,IAAI,CAAC,EAAE;AAChE;AAEA,SAAS,cAAc,MAAwB;AAC7C,MAAI,KAAK,SAAS,WAAW;AAC3B,WAAO;EACT;AAEA,MAAI,OAAO,KAAK,SAAS,eAAe,OAAO,KAAK,SAAS,UAAU;AACrE,WAAO;EACT;AAEA,SAAO;AACT;AAEA,SAAS,UAAU,QAA8B;AAO/C,MAAI,CAAC,QAAQ;AACX,WAAO;EACT;AAEA,QAAM,uBAA4C,CAAA;AAElD,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,aAAa,CAAA,CAAE,GAAG;AACjE,QAAI,OAAO,UAAU,UAAU;AAC7B,2BAAqB,GAAG,IAAI;IAC9B,WAAW,OAAO,UAAU,UAAU;AACpC,2BAAqB,GAAG,IAAI,uBAAuB,KAAK;IAC1D;EACF;AAEA,SAAO;IACL,IAAI,OAAO;IACX,SAAS,OAAO;IAChB,WAAW;;AAEf;AAEA,SAAS,cACP,OAA4B;AAE5B,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO;MACL;QACE,MAAM;QACN,SAAS;;;EAGf;AAEA,SAAO,MAAM,IAAI,CAAC,SAA4C;AAC5D,QAAI,cAAc,IAAI,GAAG;AACvB,aAAO,eAAe,IAAI;IAC5B;AAEA,QAAI,KAAK,SAAS,oBAAoB;AACpC,YAAM,SAAS,0BAA0B,KAAK,MAAM;AACpD,YAAM,SAAS,4BAA4B,IAAI;AAC/C,YAAM,YAAY,uBAAuB,IAAI;AAC7C,YAAM,iBACJ;QACE,MAAM;QACN,IAAI,KAAK;QACT,GAAI,WAAW,OAAO,EAAE,OAAM,IAAK,CAAA;QACnC,WAAW,KAAK;QAChB,GAAI,SAAS,EAAE,SAAS,OAAM,IAAK,CAAA;QACnC,GAAI,YAAY,EAAE,UAAS,IAAK,CAAA;QAChC,GAAG,6CAA6C,KAAK,cAAc;UACjE;UACA;UACA;UACA;UACA;UACA;UACA;SACD;;AAEL,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,sBAAsB;AACtC,YAAM,SAAS,0BAA0B,KAAK,MAAM;AACpD,YAAM,SAAS,4BAA4B,IAAI;AAC/C,YAAM,YAAY,uBAAuB,IAAI;AAC7C,YAAM,mBACJ;QACE,MAAM;QACN,IAAI,KAAK;QACT,GAAI,WAAW,OAAO,EAAE,OAAM,IAAK,CAAA;QACnC,OAAO,KAAK,MAAM,IAChB,CAACA,UACC,oCACEA,KAAI,CACoB;QAE9B,GAAI,SAAS,EAAE,SAAS,OAAM,IAAK,CAAA;QACnC,GAAI,YAAY,EAAE,UAAS,IAAK,CAAA;QAChC,GAAG,6CAA6C,KAAK,cAAc;UACjE;UACA;UACA;UACA;UACA;UACA;UACA;SACD;;AAEL,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,iBAAiB;AACjC,YAAM,QAA+C;QACnD,IAAI,KAAK;QACT,MAAM;QACN,MAAM,KAAK;QACX,SAAS,KAAK;QACd,WAAW,KAAK;QAChB,QAAQ,KAAK;QACb,GAAI,OAAO,KAAK,cAAc,WAC1B,EAAE,WAAW,KAAK,UAAS,IAC3B,CAAA;QACJ,GAAG,6CAA6C,KAAK,cAAc;UACjE;UACA;UACA;UACA;UACA;UACA;UACA;SACD;;AAGH,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,wBAAwB;AACxC,YAAM,mBAAmB,sCACvB,KAAK,MAAM;AAGb,YAAM,QAAoC;QACxC,MAAM;QACN,IAAI,KAAK;QACT,SAAS,KAAK;QACd,QAAQ;QACR,QAAQ,KAAK;QACb,GAAG,6CAA6C,KAAK,cAAc;UACjE;UACA;UACA;UACA;UACA;UACA;SACD;;AAEH,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,aAAa;AAC7B,YAAM,mBAAmB,qBAA6B,KAAK,cAAc;QACvE;QACA;OACD;AACD,YAAM,QAAgD;QACpD,IAAI,KAAK;QACT,MAAM;QACN,SAAS,KAAK,QAAQ,IAAI,CAAC,aAAa;UACtC,MAAM;UACN,MAAM,QAAQ;UACd,GAAG,6CACD,QAAQ,cACR,CAAC,QAAQ,MAAM,CAAC;UAElB;QACF,GAAI,OAAO,qBAAqB,WAC5B,EAAE,mBAAmB,iBAAgB,IACrC,CAAA;QACJ,GAAG,6CAA6C,KAAK,cAAc;UACjE;UACA;UACA;UACA;SACD;;AAEH,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,iBAAiB;AACjC,YAAM,sBAAsB,qBAE1B,KAAK,cAAc,CAAC,uBAAuB,uBAAuB,CAAC;AACrE,YAAM,iBAAiB,MAAM,QAC1B,KAA+B,OAAO,IAEnC,KACC,WAAW,CAAA,IACd,CAAA;AACJ,YAAM,gBACJ,eAAe,SAAS,IACpB;QACE,QAAQ,KAAK,UAAU,eAAe,CAAC;QACvC,SAAS;UAEX,KAAK,SACH,EAAE,QAAQ,KAAK,OAAM,IACrB,CAAA;AAER,YAAM,QAAQ;QACZ,MAAM;QACN,SAAS,KAAK;QACd,IAAI,KAAK;QACT,QAAQ,KAAK;QACb,GAAI,MAAM,QAAQ,mBAAmB,KAAK,oBAAoB,SAAS,IACnE,EAAE,uBAAuB,oBAAmB,IAC5C,CAAA;QACJ,GAAG;QACH,GAAG,6CAA6C,KAAK,cAAc;UACjE;UACA;UACA;UACA;UACA;UACA;UACA;SACD;;AAGH,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,wBAAwB;AACxC,YAAM,2BAA2B,qBAE/B,KAAK,cAAc;QACnB;QACA;OACD;AACD,YAAM,QAA+D;QACnE,MAAM;QACN,IAAI,KAAK;QACT,SAAS,KAAK;QACd,QAAQ,oBAAoB,IAAI;QAChC,QAAQ,KAAK,cAAc;QAC3B,GAAI,MAAM,QAAQ,wBAAwB,KAC1C,yBAAyB,SAAS,IAC9B,EAAE,4BAA4B,yBAAwB,IACtD,CAAA;QACJ,GAAG,6CAA6C,KAAK,cAAc;UACjE;UACA;UACA;UACA;UACA;UACA;SACD;;AAEH,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,cAAc;AAC9B,YAAM,SAAiE;QACrE,UAAU,KAAK,OAAO;QACtB,YACE,OAAO,KAAK,OAAO,cAAc,WAC7B,KAAK,OAAO,YACZ;QACN,mBACE,OAAO,KAAK,OAAO,oBAAoB,WACnC,KAAK,OAAO,kBACZ;;AAER,YAAM,oBAAoB,iCACxB,KAAK,YAAY;AAGnB,YAAM,QAAsD;QAC1D,MAAM;QACN,IAAI,KAAK;QACT,SAAS,KAAK;QACd,QAAQ,KAAK,UAAU;QACvB;QACA,GAAG;;AAGL,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,qBAAqB;AACrC,YAAM,eAAkD,KAAK;AAC7D,YAAM,mBACJ,aAAa,IAAI,CAACM,WAAS;AACzB,cAAM,UAAUA,QAAO;AACvB,cAAM,WAAW,SAAS,SAAS,SAAS,QAAQ,WAAW;AAC/D,eAAO;UACL,QAAQ,OAAOA,QAAO,WAAW,WAAWA,OAAM,SAAS;UAC3D,QAAQ,OAAOA,QAAO,WAAW,WAAWA,OAAM,SAAS;UAC3D,SACE,SAAS,SAAS,YACd,EAAE,MAAM,UAAS,IACjB,EAAE,MAAM,QAAQ,WAAW,YAAY,EAAC;;MAElD,CAAC;AAEH,YAAM,QAEF;QACF,MAAM;QACN,SAAS,KAAK;QACd,QAAQ;QACR,IAAI,KAAK,MAAM;;AAEjB,UAAI,OAAO,KAAK,oBAAoB,UAAU;AAC5C,cAAM,oBAAoB,KAAK;MACjC;AAEA,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,oBAAoB;AACpC,UAAI,CAAC,KAAK,WAAW;AACnB,cAAM,IAAI,UAAU,oCAAoC;MAC1D;AACA,YAAM,QAA2D;QAC/D,MAAM;QACN,IAAI,KAAK,MAAM;QACf,SAAS,KAAK;QACd,QAAQ,KAAK,UAAU;QACvB,WAAW,KAAK;;AAGlB,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,2BAA2B;AAC3C,YAAM,QAAiE;QACrE,MAAM;QACN,IAAI,KAAK,MAAM;QACf,SAAS,KAAK;QACd,QAAQ,KAAK,UAAU;QACvB,QAAQ,KAAK,UAAU;;AAGzB,aAAO;IACT;AAEA,QAAI,KAAK,SAAS,oBAAoB;AACpC,UACE,KAAK,cAAc,SAAS,qBAC5B,KAAK,cAAc,SAAS,cAC5B;AACA,cAAM,eAAe,wBAAwB,KAAK,YAAY,KAAK,CAAA;AACnE,cAAM,YAAY,aAAa,WAAW;AAC1C,cAAM,iBACJL,UAAS,aAAa,MAAM,KAC5B,OAAO,aAAa,OAAO,SAAS;AACtC,YAAI,aAAa,CAAC,gBAAgB;AAChC,gBAAM,IAAI,UAAU,gCAAgC;QACtD;AACA,cAAM,QAAQ;UACZ,GAAG;;UACH,MAAM;UACN,IAAI,KAAK;UACT,QAAQ,gBAAgB,MAAM,KAAK,UAAU,QAAQ;;AAEvD,YAAI,gBAAgB;AACjB,gBAAqD,SACpD,aAAa;QACjB;AAEA,eAAO;MACT;AAEA,UACE,KAAK,cAAc,SAAS,sBAC5B,KAAK,cAAc,SAAS,eAC5B;AACA,cAAM,QAAqD;UACzD,GAAG,wBAAwB,KAAK,YAAY;;UAC5C,MAAM;UACN,IAAI,KAAK;UACT,QAAQ,iBAAiB,MAAM,KAAK,UAAU,QAAQ;UACtD,SAAS,KAAK,cAAc,WAAW,CAAA;UACvC,SAAS,KAAK,cAAc;;AAG9B,eAAO;MACT;AAEA,UACE,KAAK,cAAc,SAAS,2BAC5B,KAAK,cAAc,SAAS,oBAC5B;AACA,cAAM,QAA0D;UAC9D,GAAG,wBAAwB,KAAK,YAAY;;UAC5C,MAAM;UACN,IAAI,KAAK;UACT,MAAM,KAAK,cAAc,QAAQ;;;UAGjC,SACE,KAAK,cAAc,WAAW,KAAK,cAAc,WAAW,CAAA;UAC9D,QAAQ,sBAAsB,MAAM,KAAK,UAAU,QAAQ;UAC3D,cAAc,KAAK,cAAc;;AAGnC,eAAO;MACT;AAEA,UACE,KAAK,cAAc,SAAS,2BAC5B,KAAK,cAAc,SAAS,oBAC5B;AACA,cAAM,QAAgE;UACpE,GAAG,wBAAwB,KAAK,YAAY;;UAC5C,MAAM;UACN,IAAI,KAAK;UACT,QAAQ,KAAK,cAAc,UAAU;UACrC,QAAQ,sBAAsB,MAAM,KAAK,UAAU,QAAQ;;AAG7D,eAAO;MACT;AAEA,UACE,KAAK,cAAc,SAAS,oBAC5B,KAAK,SAAS,kBACd;AACA,cAAM,eACJ,KAAK;AACP,cAAM,QAAyD;UAC7D,GAAG,wBAAwB,KAAK,YAAY;UAC5C,MAAM;UACN,IAAI,KAAK;UACT,OAAO,wBAAwB,aAAa,KAAK;UACjD,cAAc,aAAa;UAC3B,OAAO,aAAa;;AAEtB,eAAO;MACT,WACE,KAAK,cAAc,SAAS,0BAC5B,KAAK,SAAS,wBACd;AACA,cAAM,eACJ,KAAK;AACP,cAAM,QAA+D;UACnE,GAAG,wBAAwB,KAAK,YAAY;;UAC5C,MAAM;UACN,IAAI,aAAa,MAAM,KAAK;UAC5B,MAAM,aAAa;UACnB,WAAW,aAAa;UACxB,cAAc,aAAa;;AAE7B,eAAO;MACT,WACE,KAAK,cAAc,SAAS,2BAC5B,KAAK,SAAS,yBACd;AACA,cAAM,eACJ,KAAK;AACP,cAAM,QAAgE;UACpE,GAAG,wBAAwB,YAAY;UACvC,MAAM;UACN,IAAI,aAAa;UACjB,SAAS,aAAa;UACtB,qBAAqB,aAAa;UAClC,QAAQ,aAAa;;AAEvB,eAAO;MACT,WACE,KAAK,cAAc,SAAS,cAC5B,KAAK,SAAS,YACd;AACA,cAAM,eAAe,KAAK;AAC1B,cAAM,QAAoD;;;UAGxD,GAAG,wBAAwB,YAAY;;UACvC,MAAM;UACN,IAAI,aAAa,MAAM,KAAK;UAC5B,MAAM,aAAa;UACnB,WAAW,aAAa;UACxB,cAAc,aAAa;UAC3B,OAAO,aAAa;;AAEtB,eAAO;MACT;AAEA,YAAM,IAAI,UACR,wCAAwC,KAAK,UAAU,IAAI,CAAC,EAAE;IAElE;AAEA,QAAI,KAAK,SAAS,cAAc;AAC9B,YAAM,mBACH,KAAa,qBAAsB,KAAa;AACnD,UAAI,OAAO,qBAAqB,UAAU;AACxC,cAAM,IAAI,UAAU,2CAA2C;MACjE;AACA,aAAO;QACL,MAAM;QACN,IAAI,KAAK,MAAM;QACf,mBAAmB;;IAEvB;AAEA,QAAI,KAAK,SAAS,WAAW;AAC3B,aAAO;QACL,GAAG,wBAAwB,KAAK,YAAY;;QAC5C,IAAI,KAAK;;IAEb;AAEA,UAAM,aAAa;AACnB,UAAM,IAAI,UAAU,oBAAoB,KAAK,UAAU,UAAU,CAAC,EAAE;EACtE,CAAC;AACH;AAGA,SAAS,oBACP,MAAqC;AAErC,SAAO;IACL,MAAM;IACN,WAAW,KAAK,OAAO;;AAE3B;AAEA,SAAS,4BACP,MAA+D;AAE/D,MAAI,KAAK,SAAS,eAAe;AAC/B,UAAM,EAAE,MAAM,MAAM,GAAG,aAAY,IAAK;AACxC,WAAO;MACL;MACA;MACA,GAAI,OAAO,KAAK,YAAY,EAAE,SAAS,IAAI,EAAE,aAAY,IAAK,CAAA;;EAElE;AAEA,MAAI,KAAK,SAAS,WAAW;AAC3B,UAAM,EAAE,MAAM,SAAS,GAAG,aAAY,IAAK;AAC3C,WAAO;MACL;MACA;MACA,GAAI,OAAO,KAAK,YAAY,EAAE,SAAS,IAAI,EAAE,aAAY,IAAK,CAAA;;EAElE;AAEA,QAAM,IAAI,MAAM,qCAAqC,KAAK,UAAU,IAAI,CAAC,EAAE;AAC7E;AAEA,SAAS,oBACP,OAA6C;AAE7C,SAAO,MAAM,IAAI,CAAC,SAAQ;AACxB,QAAI,KAAK,SAAS,WAAW;AAC3B,YAAM,EAAE,IAAI,MAAM,MAAM,SAAS,QAAQ,GAAG,aAAY,IAAK;AAC7D,aAAO;QACL;QACA;QACA;QACA,SAAS,QAAQ,IAAI,2BAA2B;QAChD;QACA;;IAEJ,WAAW,KAAK,SAAS,oBAAoB;AAC3C,YAAM,EACJ,IACA,MAAM,OACN,QACA,WAAW,MACX,GAAG,aAAY,IACb;AACJ,YAAM,SAAsC;QAC1C,MAAM;QACN;QACA;QACA,WAAW;QACX;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,sBAAsB;AAC7C,YAAM,EACJ,IACA,MAAM,OACN,QACA,OACA,GAAG,aAAY,IACb;AAEJ,YAAM,SAAwC;QAC5C,MAAM;QACN;QACA;QACA,OAAO,MAAM,QAAQ,KAAK,IACrB,MAAM,IAAI,CAACD,UACV,sCAAsCA,KAAI,CAAC,IAE7C,CAAA;QACJ;;AAEF,aAAO;IACT,WACE,KAAK,SAAS,sBACd,KAAK,SAAS,qBACd,KAAK,SAAS,2BACd,KAAK,SAAS,yBACd;AACA,YAAM,EAAE,QAAQ,GAAG,cAAa,IAAK;AACrC,UAAI,aAAa;AACjB,UAAI,YAAY,iBAAiB,cAAc,WAAW,MAAM;AAE9D,qBAAa,cAAc;AAC3B,eAAQ,cAAsB;MAChC;AACA,YAAM,SAAsC;QAC1C,MAAM;QACN,IAAI,KAAK;QACT,MAAM,KAAK;QACX;QACA,QAAQ;QACR,cAAc;;AAEhB,aAAO;IACT,WAAW,KAAK,SAAS,iBAAiB;AACxC,YAAM,eAAe;AACrB,YAAM,EACJ,SACA,MACA,WACA,QACA,WAAW,MACX,GAAG,aAAY,IACb;AACJ,YAAM,SAAoC;QACxC,MAAM;QACN,IAAI,aAAa;QACjB,QAAQ;QACR;QACA,GAAI,OAAO,cAAc,WAAW,EAAE,UAAS,IAAK,CAAA;QACpD;QACA,WAAW;QACX;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,wBAAwB;AAC/C,YAAM,EACJ,SACA,QACA,QAAQ,WACR,MAAM,UACN,eAAe,cACf,WACA,GAAG,aAAY,IACb;AAKJ,YAAM,SAA0C;QAC9C,MAAM;QACN,IAAI,KAAK;QACT,QAAQ;QACR,MAAM,YAAY,gBAAgB;QAClC,GAAI,OAAO,cAAc,WAAW,EAAE,UAAS,IAAK,CAAA;QACpD,QAAQ,UAAU;QAClB,QAAQ,oCAAoC,SAAS;QACrD;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,iBAAiB;AACxC,YAAM,EAAE,SAAS,QAAQ,QAAQ,SAAS,GAAG,aAAY,IAAK;AAC9D,YAAM,oBACJ,MAAM,QAAQ,OAAO,KAAK,QAAQ,SAAS,IAAI,UAAU;AAC3D,UAAI,CAAC,qBAAqB,CAAC,QAAQ;AACjC,cAAM,IAAI,UACR,gEAAgE,KAAK,UAAU,IAAI,CAAC,EAAE;MAE1F;AACA,YAAM,SAAuC;QAC3C,MAAM;QACN,IAAI,KAAK;QACT,QAAQ;QACR;QACA,QAAQ,UAAU,oBAAoB,CAAC;QACvC,GAAI,oBAAoB,EAAE,SAAS,kBAAiB,IAAK,CAAA;QACzD;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,cAAc;AACrC,YAAM,EAAE,SAAS,QAAQ,QAAQ,GAAG,aAAY,IAAK;AACrD,YAAM,cAAoC;QACxC,UAAU,MAAM,QAAQ,QAAQ,QAAQ,IAAI,OAAO,WAAW,CAAA;;AAEhE,YAAM,UAAU,QAAQ;AACxB,UAAI,OAAO,YAAY,UAAU;AAC/B,oBAAY,YAAY;MAC1B;AACA,YAAM,kBAAkB,QAAQ;AAChC,UAAI,OAAO,oBAAoB,UAAU;AACvC,oBAAY,kBAAkB;MAChC;AACA,YAAM,SAAiC;QACrC,MAAM;QACN,IAAI,KAAK,MAAM;QACf,QAAQ;QACR,QAAQ,UAAU;QAClB,QAAQ;QACR;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,qBAAqB;AAC5C,YAAM,EACJ,SACA,QAAQ,gBACR,mBACA,GAAG,aAAY,IACb;AACJ,UAAI,mBAAsD,CAAA;AAC1D,UAAI,MAAM,QAAQ,cAAc,GAAG;AACjC,2BAAmB,eAAe,IAAI,CAAC,WAAW;UAChD,QAAQ,OAAO,OAAO,WAAW,WAAW,MAAM,SAAS;UAC3D,QAAQ,OAAO,OAAO,WAAW,WAAW,MAAM,SAAS;UAC3D,SACE,OAAO,SAAS,SAAS,YACrB,EAAE,MAAM,UAAkB,IAC1B;YACE,MAAM;YACN,UACE,OAAO,OAAO,SAAS,cAAc,WACjC,MAAM,QAAQ,YACd;;UAEd;MACJ;AACA,YAAM,SAAuC;QAC3C,MAAM;QACN,IAAI,KAAK,MAAM;QACf,QAAQ;QACR,QAAQ;QACR;;AAEF,UAAI,OAAO,sBAAsB,UAAU;AACzC,eAAO,kBAAkB;MAC3B;AACA,aAAO;IACT,WAAW,KAAK,SAAS,oBAAoB;AAC3C,YAAM,EAAE,SAAS,QAAQ,WAAW,GAAG,aAAY,IAAK;AACxD,UAAI,CAAC,WAAW;AACd,cAAM,IAAI,UAAU,oCAAoC;MAC1D;AAEA,UAAI;AACJ,cAAQ,UAAU,MAAM;QACtB,KAAK;AACH,gCAAsB;YACpB,MAAM;YACN,MAAM,UAAU;YAChB,MAAM,UAAU;;AAElB;QACF,KAAK;AACH,gCAAsB;YACpB,MAAM;YACN,MAAM,UAAU;;AAElB;QACF,KAAK;AACH,gCAAsB;YACpB,MAAM;YACN,MAAM,UAAU;YAChB,MAAM,UAAU;;AAElB;QACF;AACE,gBAAM,IAAI,UAAU,oCAAoC;MAC5D;AAEA,YAAM,SAAsC;QAC1C,MAAM;QACN,IAAI,KAAK,MAAM;QACf,QAAQ;QACR,QAAQ,UAAU;QAClB,WAAW;QACX;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,2BAA2B;AAClD,YAAM,EACJ,SACA,QACA,QAAQ,gBACR,GAAG,aAAY,IACb;AACJ,YAAM,SAA4C;QAChD,MAAM;QACN,IAAI,KAAK,MAAM;QACf,QAAQ;QACR;QACA,QAAQ,OAAO,mBAAmB,WAAW,iBAAiB;QAC9D;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,kBAAkB;AACzC,YAAM,EAAE,GAAG,aAAY,IAAK;AAC5B,YAAM,SAAsC;QAC1C,MAAM;QACN,IAAI,KAAK;QACT,MAAM,KAAK;QACX,QAAQ;QACR,QAAQ;QACR;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,wBAAwB;AAC/C,YAAM,EAAE,GAAG,aAAY,IAAK;AAC5B,YAAM,SAAsC;QAC1C,MAAM;QACN,IAAI,KAAK;QACT,MAAM;QACN,QAAQ;QACR,QAAQ;QACR;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,YAAY;AAEnC,YAAM,EAAE,QAAQ,YAAY,GAAG,aAAY,IAAK;AAChD,YAAM,SAAsC;QAC1C,MAAM;QACN,IAAI,KAAK;QACT,MAAM,KAAK;QACX,QAAQ;QACR,QAAQ,cAAc;QACtB;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,aAAa;AAEpC,YAAM,EAAE,SAAS,GAAG,aAAY,IAAK;AACrC,YAAM,SAAiC;QACrC,MAAM;QACN,IAAI,KAAK;QACT,SAAS,QAAQ,IAAI,CAAC,YAAW;AAE/B,gBAAM,EAAE,MAAM,GAAG,iBAAgB,IAAK;AACtC,iBAAO;YACL,MAAM;YACN;YACA,cAAc;;QAElB,CAAC;QACD;;AAEF,aAAO;IACT,WAAW,KAAK,SAAS,cAAc;AACrC,YAAM,EAAE,mBAAmB,YAAY,GAAG,aAAY,IAAK;AAK3D,UAAI,OAAO,sBAAsB,UAAU;AACzC,cAAM,IAAI,UAAU,2CAA2C;MACjE;AACA,YAAM,SAAkC;QACtC,MAAM;QACN,IAAI,KAAK,MAAM;QACf;QACA;QACA;;AAEF,aAAO;IACT;AAEA,WAAO;MACL,MAAM;MACN,IAAI,KAAK;MACT,cAAc;;EAElB,CAAC;AACH;AAIA,IAAM,wCAAwC,oBAAI,IAAI;EACpD;EACA;EACA;EACA;CACD;AAED,SAAS,mCACP,WAA6B;AAE7B,SACE,OAAO,cAAc,YACrB,sCAAsC,IAAI,SAAS;AAEvD;AAUA,SAAS,2BACP,UAA4B;AAE5B,QAAM,YAAa,UACf;AACJ,SAAO,OAAO,cAAc,YAAY,UAAU,SAAS,IACvD,YACA;AACN;AAEA,SAAS,8BACP,UACA,WAA6B;AAE7B,MAAI,CAAC,WAAW;AACd;EACF;AAEA,QAAM,mBAAmB,2BACvB,QAA2C;AAE7C,MAAI,kBAAkB;AACpB;EACF;AAEA,MAAI;AACF,WAAO,eAAe,UAAU,eAAe;MAC7C,OAAO;MACP,YAAY;KACb;EACH,QAAQ;EAGR;AACF;AAEA,gBAAgB,8BACd,QACA,WAA6B;AAE7B,mBAAiB,SAAS,QAAQ;AAChC,UAAM,YAAa,MAA4B;AAC/C,QAAI,mCAAmC,SAAS,GAAG;AACjD,YAAM,WAAY,MAAgC;AAClD,UAAI,YAAY,OAAO,aAAa,UAAU;AAC5C,sCAA8B,UAAU,SAAS;MACnD;IACF;AAEA,UAAM;EACR;AACF;AAKM,IAAO,uBAAP,MAA2B;EACZ;EACA;EAEnB,YAAY,QAAsB,OAAa;AAC7C,SAAK,UAAU;AACf,SAAK,SAAS;EAChB;EAEA,eAAe,MAA6B;AAC1C,WAAO,qBAAqB,IAAI;EAClC;;;;EAKU,4BACR,OAAiC;AAEjC,WAAO,oBAAoB,KAA+C;EAC5E;;;;EAKU,yBACR,UAAmC;AAEnC,WAAO;EACT;;;;EAKU,2BACR,QACA,aAA4C;AAE5C,WAAO;EACT;;;;EAKU,yBAAyB,QAA2B;AAC5D,WAAO;EACT;;;;EAKU,oCACR,UACA,cAAiC;AAEjC,WAAO,CAAA;EACT;;;;EAKU,kBAAkB,UAAmC;AAC7D,WAAO,IAAI,MAAM;MACf,aAAa,SAAS,OAAO,gBAAgB;MAC7C,cAAc,SAAS,OAAO,iBAAiB;MAC/C,aAAa,SAAS,OAAO,gBAAgB;MAC7C,oBAAoB,EAAE,GAAG,SAAS,OAAO,qBAAoB;MAC7D,qBAAqB,EAAE,GAAG,SAAS,OAAO,sBAAqB;MAC/D,qBAAqB;QACnB,oBAAoB,SAAS,OAAO,kBAAkB;;KAEzD;EACH;;;;EAKU,0BACR,UAAmC;AAEnC,WAAO;MACL,aAAa,SAAS,OAAO,gBAAgB;MAC7C,cAAc,SAAS,OAAO,iBAAiB;MAC/C,aAAa,SAAS,OAAO,gBAAgB;MAC7C,oBAAoB,EAAE,GAAG,SAAS,OAAO,qBAAoB;MAC7D,qBAAqB,EAAE,GAAG,SAAS,OAAO,sBAAqB;MAC/D,qBAAqB;QACnB,oBAAoB,SAAS,OAAO,kBAAkB;;;EAG5D;EAaU,MAAM,eACd,SACA,QAAe;AAKf,UAAM,eAAe,KAAK,6BAA6B,SAAS,MAAM;AACtE,UAAM,iBAKF;MACF,SAAS,aAAa;MACtB,QAAQ,aAAa;MACrB,GAAI,aAAa,sBACb,EAAE,OAAO,aAAa,oBAAmB,IACzC,CAAA;;AAEN,QAEI,QAGA,WAAW,uBAAuB,MACpC;AACA,qBAAe,aAAa;IAC9B;AACA,UAAM,kBAAkB,KAAK,QAAQ,UAAU,OAC7C,aAAa,aACb,cAAc;AAGhB,QAAI;AAGJ,QAAI,QAAQ;AACV,YAAM,eAAgB,gBACnB;AACH,UAAI,OAAO,iBAAiB,YAAY;AACtC,cAAM,mBAAmB,MAAM,aAAa,KAAK,eAAe;AAChE,mBAAW,8BACT,iBAAiB,MACjB,iBAAiB,cAAc,MAAS;MAE5C,OAAO;AACL,mBACG,MAAM;MACX;IACF,OAAO;AACL,iBAAY,MAAM;IACpB;AAEA,QAAI,eAAO,kBAAkB;AAC3B,qBAAO,MAAM,mBAAmB;IAClC,OAAO;AACL,qBAAO,MAAM,sBAAsB,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC,EAAE;IACxE;AAEA,WAAO;EACT;EAEU,6BACR,SACA,QAAe;AAEf,UAAM,QAAQ,cAAc,QAAQ,KAAK;AACzC,UAAM,SAAS,UAAU,QAAQ,MAAM;AAGvC,UAAM,kBACJ,CAAC,QAAQ,UAAU,QAAQ,wBAAwB;AACrD,UAAM,wBAAwB,kBAAkB,KAAK,SAAS;AAC9D,UAAM,EACJ,cAAc,8BACd,WAAW,mBAAkB,IAC3B,iCAAiC,QAAQ,cAAc,YAAY;AACvE,UAAM,EAAE,OAAO,QAAO,IAAK,SAAS,QAAQ,OAAO,QAAQ,UAAU;MACnE,OAAO;MACP,YAAY,QAAQ,cAAc;KACnC;AACD,UAAM,4BAA4B;MAChC,GAAG;MACH,GAAG,yCAAyC,mBAAmB,SAAS;;AAE1E,UAAM,2BACJ,QAAQ,QAAQ,MAAM,KACtB,EAAE,QAAQ,4BAA4B,QAAQ,MAAM,WAAW;AACjE,UAAM,aAAa,cAAc,QAAQ,cAAc,YAAY;MACjE,OAAO;MACP,OAAO;MACP,iCAAiC;KAClC;AACD,8BAA0B,YAAY,2BAA2B;MAC/D;KACD;AACD,UAAM,EAAE,MAAM,GAAG,mBAAkB,IAAK;AAExC,QAAI,QAAQ,cAAc,WAAW;AAEnC,yBAAmB,YAAY;QAC7B,GAAG,QAAQ,cAAc;QACzB,GAAG,mBAAmB;;IAE1B;AAEA,QAAI,aAAa;AACjB,QAAI,QAAQ,cAAc,MAAM;AAE9B,mBAAa,EAAE,GAAG,QAAQ,cAAc,MAAM,GAAG,KAAI;IACvD;AACA,UAAM,iBAAiB,kBAAkB,QAAQ,YAAY,UAAU;AAEvE,QAAI,oBAAyC;AAC7C,QAAI,OAAO,QAAQ,cAAc,sBAAsB,WAAW;AAChE,0BAAoB,QAAQ,cAAc;IAC5C;AAEA,UAAM,kBACJ,MAAM,SAAS,KACf,QAAQ,4BAA4B,QACpC,CAAC,QAAQ;AACX,UAAM,uBAAuB,wBAC3B,YACA,2BACA;MACE;KACD;AAEH,UAAM,uBAAuB,OAAO,yBAAyB;AAE7D,QAAI,cAAc;MAChB,GAAI,wBAAwB,EAAE,OAAO,sBAAqB,IAAK,CAAA;MAC/D,cAAc,sBAAsB,QAAQ,kBAAkB;MAC9D;MACA;MACA,GAAI,kBAAkB,EAAE,MAAK,IAAK,CAAA;;;MAGlC,cAAc,QAAQ;MACtB,GAAI,QAAQ,iBACR,CAAA,IACA,EAAE,sBAAsB,QAAQ,mBAAkB;MACtD;MACA,aAAa,QAAQ,cAAc;MACnC,OAAO,QAAQ,cAAc;MAC7B,YAAY,QAAQ,cAAc;MAClC,mBAAmB,QAAQ,cAAc;MACzC,GAAI,CAAC,uBACD,EAAE,aAAa,qBAAyC,IACxD,CAAA;MACJ,qBAAqB;MACrB;MACA,MAAM;MACN,OAAO,QAAQ,cAAc;MAC7B,wBAAwB,8BACtB,QAAQ,cAAc,oBAAoB;MAE5C,sBAAsB,QAAQ,cAAc;MAC5C,oBAAoB,qBAClB,QAAQ,cAAc,iBAAiB;MAEzC,GAAG;;AAGL,QAAI,mBAAmB,WAAW;AAChC,oBAAc;QACZ,GAAG;QACH,GAAG,mBAAmB;;IAE1B;AAEA,kBAAc;MACZ,GAAG;MACH,GAAG,KAAK,oCAAoC,SAAS,WAAW;;AAIlE,gBAAY,SAAS;AAErB,UAAM,2BAA2B,wBAAuB;AACxD,8BAA0B,0BAA0B,OAAO;AAC3D,8BACE,0BACA,mBAAmB,cACnB;MACE,sBAAsB;KACvB;AAEH,UAAM,oBAAoB,8BACxB,wBAAwB;AAG1B,UAAM,eAA4C;MAChD;MACA;MACA,QAAQ,QAAQ;MAChB,uBAAuB,mBAAmB;MAC1C,qBAAqB,mBAAmB;;AAG1C,QAAI,eAAO,kBAAkB;AAC3B,qBAAO,MAAM,aAAa;IAC5B,OAAO;AACL,qBAAO,MACL,8BAA8B,KAAK,UACjC,aAAa,aACb,MACA,CAAC,CACF,EAAE;IAEP;AACA,WAAO;EACT;;;;;;EAOA,MAAM,YAAY,SAAqB;AACrC,UAAM,WAAW,MAAM,iBAAiB,OAAO,SAAQ;AACrD,YAAMO,YAAW,MAAM,KAAK,eAAe,SAAS,KAAK;AAEzD,UAAI,QAAQ,SAAS;AACnB,aAAK,SAAS,cAAcA,UAAS;AACrC,aAAK,SAAS,SAAS,QAAQ;AAC/B,aAAK,SAAS,YAAYA;MAC5B;AAEA,aAAOA;IACT,CAAC;AAED,UAAM,uBAAuB,KAAK,yBAAyB,QAAQ;AACnE,UAAM,SAAwB;MAC5B,OAAO,KAAK,kBAAkB,QAAQ;MACtC,QAAQ,KAAK,4BACX,qBAAqB,MAAoC;MAE3D,YAAY,SAAS;MACrB,WAAW,2BAA2B,QAAQ;MAC9C,cAAc;;AAGhB,WAAO;EACT;;;;;;EAOA,OAAO,oBACL,SAAqB;AAErB,UAAM,OAAO,QAAQ,UAAU,mBAAkB,IAAK;AACtD,QAAI;AACF,UAAI,MAAM;AACR,aAAK,MAAK;AACV,uBAAe,IAAI;AACnB,YAAI,QAAQ,YAAY,MAAM;AAC5B,eAAK,SAAS,SAAS,QAAQ;QACjC;MACF;AACA,YAAM,WAAW,MAAM,KAAK,eAAe,SAAS,IAAI;AAExD,UAAI;AACJ,YAAM,qBAAqB,oBAAI,IAAG;AAClC,uBAAiB,SAAS,UAAU;AAClC,cAAM,YAAa,MAA4B;AAC/C,cAAM,0BAA0B,KAAK,yBACnC,KAAuC;AAEzC,YAAI,cAAc,8BAA8B;AAC9C,gBAAM,kBAAkB;AAIxB,cACE,OAAO,gBAAgB,iBAAiB,YACxC,gBAAgB,MAChB;AACA,+BAAmB,IACjB,gBAAgB,cAChB,gBAAgB,IAAI;UAExB;QACF;AACA,YAAI,cAAc,oBAAoB;AACpC,gBAAM;YACJ,MAAM;YACN,cAAc;cACZ,GAAG;;;QAGT,WAAW,mCAAmC,SAAS,GAAG;AACxD,gBAAM,gBACJ;AAGF,0BAAgB,cAAc;AAC9B,gBAAM,EAAE,UAAAA,WAAU,GAAG,eAAc,IAAK;AACxC,gBAAM,EACJ,QAAQ,SACR,OAAO,QACP,IACA,GAAG,kBAAiB,IAClBA;AACJ,gBAAM,uBAAuB,KAAK,yBAAyBA,SAAQ;AACnE,gBAAM;YACJ,MAAM;YACN,UAAU;cACR;cACA,WAAW,2BAA2BA,SAAQ;cAC9C,QAAQ,KAAK,4BACX,qBAAqB,MAAoC;cAE3D,OAAO,KAAK,0BAA0BA,SAAQ;cAC9C,cAAc;;YAEhB,cAAc;;QAElB,WAAW,cAAc,8BAA8B;AACrD,gBAAM,EAAE,OAAO,GAAG,eAAc,IAAK;AAIrC,gBAAM,aACJ,OAAO,eAAe,iBAAiB,WACnC,mBAAmB,IAAI,eAAe,YAAY,IAClD;AACN,cACE,KAAK,2BACH,OACA,UAAU,GAEZ;AACA,kBAAM;cACJ,MAAM;cACN;cACA,cAAc;;UAElB;QACF;AAEA,YAAI,yBAAyB;AAC3B,gBAAM;YACJ,MAAM;YACN;YACA,cAAc;cACZ,qBAAqB;;;QAG3B;MACF;AAEA,UAAI,QAAQ,WAAW,QAAQ,eAAe;AAC5C,aAAK,SAAS,cAAc,cAAc;AAC1C,aAAK,SAAS,YAAY;MAC5B;IACF,SAAS,OAAO;AACd,UAAI,MAAM;AACR,aAAK,SAAS;UACZ,SAAS;UACT,MAAM;YACJ,OAAO,QAAQ,UACX,OAAO,KAAK,IACZ,iBAAiB,QACf,MAAM,OACN;;SAET;MACH;AACA,YAAM;IACR;AACE,UAAI,MAAM;AACR,aAAK,IAAG;AACR,yBAAgB;MAClB;IACF;EACF;;AAYF,SAAS,+BACP,SAAoD;AAEpD,SAAO,EAAE,GAAI,WAAW,CAAA,EAAG;AAC7B;AAOM,IAAO,yBAAP,cAAsC,qBAAoB;EAC9D;EACA;EACA;EACA;EACA;EACA,iBAAgC,QAAQ,QAAO;EAE/C,YACE,QACA,OACA,UAAyC,CAAA,GAAE;AAE3C,UAAM,QAAQ,KAAK;AACnB,SAAK,oBAAoB,QAAQ;AACjC,SAAK,mBAAmB,QAAQ,mBAAmB;AACnD,SAAK,oBAAoB,+BACvB,QAAQ,gBAAgB;EAE5B;EAES,eACP,MAA6B;AAE7B,QAAI,0BAA0B,KAAK,KAAK,GAAG;AACzC,aAAO;QACL,WAAW;QACX,cAAc;QACd,QAAQ,KAAK,iBAAiB,QAAQ,KAAK,MAAM,UAAU;;IAE/D;AAEA,QAAI,gCAAgC,KAAK,KAAK,GAAG;AAC/C,aAAO;QACL,WAAW;QACX,cAAc;QACd,QAAQ,KAAK,iBAAiB,QAAQ,KAAK,MAAM,UAAU;;IAE/D;AAEA,WAAO,MAAM,eAAe,IAAI;EAClC;EAaU,MAAM,eACd,SACA,QAAe;AAOf,UAAM,eAAe,KAAK,6BAA6B,SAAS,IAAI;AAEpE,QAAI,QAAQ;AACV,aAAO,KAAK,6BAA6B,YAAY;IACvD;AAEA,QAAI;AACJ,QAAI,mBAAmB;AACvB,QAAI;AACF,uBAAiB,SAAS,KAAK,6BAC7B,YAAY,GACX;AACD,2BAAmB;AACnB,cAAM,YAAa,MAA4B;AAC/C,YAAI,mCAAmC,SAAS,GAAG;AACjD,0BAAiB,MACd;QACL;MACF;IACF,SAAS,OAAO;AACd,UAAI,oBAAoB,iBAAiB,OAAO;AAE5C,cAGA,iBAAiB;MACrB;AACA,YAAM;IACR;AAEA,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,MACR,qEAAqE;IAEzE;AAEA,WAAO;EACT;EAEA,MAAM,QAAK;AACT,UAAM,KAAK,yBAAwB;EACrC;EAEA,OAAO,6BACL,cAAyC;AAEzC,UAAM,yBACJ,KAAK,uCAAsC;AAC7C,UAAM,cAAc,MAAM,KAAK,6BAC7B,aAAa,QACb,sBAAsB;AAGxB,QAAI,mBAAmB;AACvB,QAAI,2BAA2B;AAC/B,QAAI;AACF,qBAAe,aAAa,MAAM;AAClC,YAAM,EAAE,OAAO,OAAO,QAAO,IAAK,MAAM,KAAK,yBAC3C,cACA,sBAAsB;AAExB,qBAAe,aAAa,MAAM;AAClC,UAAI,aAAa,MAAM,KAAK,2BAC1B,OACA,SACA,aAAa,QACb,sBAAsB;AAExB,UAAI,oCAAoC,WAAW;AACnD,UAAI,mBAAmB,WAAW;AAClC,YAAM,sBAAsB,CAC1B,mBACQ;AACR,qBAAa;AACb,2BAAmB,eAAe;AAClC,4CAAoC,eAAe;MACrD;AACA,qBAAe,aAAa,MAAM;AAClC,YAAM,kBAAkB,KAAK,UAAU,KAAK;AAC5C,YAAM,sBAAsB,YAAW;AACrC,YAAI;AACF,gBAAM,iBAAiB,KAAK,eAAe;QAC7C,SAAS,OAAO;AACd,cAAI,CAAC,wBAAwB,KAAK,GAAG;AACnC,kBAAM;UACR;AAEA,8BACE,MAAM,KAAK,8BACT,OACA,SACA,aAAa,QACb,sBAAsB,CACvB;AAEH,gBAAM,iBAAiB,KAAK,eAAe;QAC7C;MACF;AACA,YAAM,oBAAmB;AAEzB,aAAO,MAAM;AACX,cAAM,WAAW,MAAM,KAAK,oBAC1B,kBACA,aAAa,QACb,sBAAsB;AAExB,YAAI,aAAa,MAAM;AACrB,cAAI,CAAC,oBAAoB,mCAAmC;AAK1D,+BAAmB;AACnB,kBAAM,IAAI,MACR,oOAAoO;UAExO;AACA,gBAAM,IAAI,gCACR,kDAAkD;QAEtD;AAEA,cAAM,cAAc,MAAM,qBAAqB,QAAQ;AACvD,cAAM,UAAU,KAAK,MAAM,WAAW;AACtC,cAAM,YACJC,UAAS,OAAO,KAAK,OAAO,QAAQ,SAAS,WACzC,QAAQ,OACR;AAEN,YAAI,cAAc,SAAS;AACzB,6BAAmB;AACnB,gBAAM,IAAI,MACR,8BAA8B,KAAK,UAAU,OAAO,CAAC,EAAE;QAE3D;AAEA,cAAM,QAAQ;AACd,cAAM,0BACJ,mCAAmC,SAAS;AAG9C,2BAAmB;AACnB,YAAI,yBAAyB;AAC3B,qCAA2B;QAC7B;AACA,cAAM;AAEN,YAAI,yBAAyB;AAC3B;QACF;MACF;IACF,SAAS,OAAO;AACd,UACE,CAAC,oBACD,EAAE,iBAAiBC,QAAO,sBAC1B,gCAAgC,KAAK,GACrC;AACA,cAAM,eAAe,IAAI,MACvB,+IAA+I;AAEjJ,YAAI,iBAAiB,OAAO;AACzB,uBAA6C,QAAQ;QACxD;AACA,cAAM;MACR;AACA,YAAM;IACR;AACE,YAAM,uBACJ,CAAC,4BAA4B,CAAC,KAAK;AACrC,YAAM,wBAAwB,uBAC1B,KAAK,yBAAwB,IAC7B;AACJ,kBAAW;AACX,YAAM;IACR;EACF;EAEA,MAAM,yBACJ,cACA,wBAAwD;AAMxD,UAAM,QAAQ,KAAK,qBAAqB,aAAa,mBAAmB;AACxE,UAAM,UAAU,MAAM,KAAK,uBACzB,OACA,aAAa,uBACb,aAAa,QACb,sBAAsB;AAExB,UAAM,QAAQ;MACZ,GAAG,aAAa;MAChB,MAAM;MACN,QAAQ;;AAGV,WAAO,EAAE,OAAO,OAAO,QAAO;EAChC;EAEA,MAAM,uBACJ,OACA,cACA,QACA,wBAAwD;AAExD,UAAM,KAAK,qCACT,KAAK,qBAAoB,GACzB,QACA,wBACA,CAAC,wBACC,+DAA+D,mBAAmB,KAAK;AAG3F,UAAM,oBAAoB,wBAAuB;AACjD,UAAM,sBAAsB,KAAK;AAIjC,UAAM,eAAe,IAAI,IAAI,KAAK;AAClC,UAAM,iBAAiB,8BACrB,aAAa,YAAY;AAG3B,UAAM,cACJ,OAAO,oBAAoB,gBAAgB,aACvC,MAAM,KAAK,qCACT,oBAAoB,YAAY;MAC9B,QAAQ;MACR,MAAM,aAAa;MACnB,GAAI,iBAAiB,EAAE,OAAO,eAAc,IAAK,CAAA;KAClD,GACD,QACA,wBACA,CAAC,wBACC,+DAA+D,mBAAmB,KAAK,IAE3F;AACN,8BAA0B,mBAAmB,WAAW;AACxD,QACE,OAAO,oBAAoB,gBAAgB,cAC3C,OAAO,KAAK,QAAQ,WAAW,YAC/B,KAAK,QAAQ,OAAO,SAAS,KAC7B,KAAK,QAAQ,WAAW,eACxB;AACA,gCAA0B,mBAAmB;QAC3C,eAAe,UAAU,KAAK,QAAQ,MAAM;OAC7C;IACH;AACA,QAAI,KAAK,QAAQ,cAAc;AAC7B,gCAA0B,mBAAmB;QAC3C,uBAAuB,KAAK,QAAQ;OACrC;IACH;AACA,QAAI,KAAK,QAAQ,SAAS;AACxB,gCAA0B,mBAAmB;QAC3C,kBAAkB,KAAK,QAAQ;OAChC;IACH;AAEA,8BACE,mBACA,oBAAoB,UAAU,cAAc;AAE9C,8BAA0B,mBAAmB,OAAO;AACpD,8BAA0B,mBAAmB,cAAc;MACzD,sBAAsB;KACvB;AACD,WAAO,0BAA0B,iBAAiB;EACpD;EAEA,qBACE,YAA+C;AAE/C,UAAM,UAAU,IAAI,IAAI,KAAK,qBAAqB,KAAK,QAAQ,OAAO;AACtE,UAAM,oBACJ,OAAO,KAAK,sBAAsB,WAC9B,IAAI,gBAAgB,QAAQ,MAAM,IAClC;AACN,UAAM,sBAAsB,KAAK;AAIjC,QAAI,QAAQ,aAAa,UAAU;AACjC,cAAQ,WAAW;IACrB,WAAW,QAAQ,aAAa,SAAS;AACvC,cAAQ,WAAW;IACrB,WAAW,QAAQ,aAAa,SAAS,QAAQ,aAAa,QAAQ;AACpE,YAAM,IAAI,UACR,4CAA4C,QAAQ,QAAQ,EAAE;IAElE;AAEA,YAAQ,WAAW,6BAA6B,QAAQ,QAAQ;AAChE,4BACE,SACA,oBAAoB,UAAU,YACO;AAEvC,QAAI,qBAAqB,MAAM,KAAK,kBAAkB,KAAI,CAAE,EAAE,SAAS,GAAG;AACxE,YAAM,uBAAuB,oBAAI,IAAG;AACpC,iBAAW,OAAO,kBAAkB,KAAI,GAAI;AAC1C,cAAM,eAAe,IAAI,QAAQ,GAAG;AACpC,6BAAqB,IACnB,gBAAgB,IAAI,IAAI,MAAM,GAAG,YAAY,IAAI,GAAG;MAExD;AACA,iBAAW,eAAe,sBAAsB;AAC9C,mBAAW,eAAe,MAAM,KAAK,QAAQ,aAAa,KAAI,CAAE,GAAG;AACjE,cACE,gBAAgB,eAChB,YAAY,WAAW,GAAG,WAAW,GAAG,GACxC;AACA,oBAAQ,aAAa,OAAO,WAAW;UACzC;QACF;MACF;AACA,iBAAW,CAAC,KAAK,KAAK,KAAK,kBAAkB,QAAO,GAAI;AACtD,gBAAQ,aAAa,OAAO,KAAK,KAAK;MACxC;IACF;AACA,4BAAwB,SAAS,UAAU;AAE3C,WAAO,QAAQ,SAAQ;EACzB;EAEA,MAAM,2BACJ,OACA,SACA,QACA,wBAAwD;AAExD,UAAM,WAAW,KAAK,uBAAuB,OAAO,OAAO;AAE3D,QACE,KAAK,iBACL,KAAK,yBACL,KAAK,0BAA0B,YAC/B,KAAK,cAAc,WAAU,GAC7B;AACA,aAAO,EAAE,YAAY,KAAK,eAAe,QAAQ,KAAI;IACvD;AAEA,UAAM,KAAK,yBAAwB;AACnC,UAAM,iBAAiB,KAAK,gCAC1B,wBACA,CAAC,wBACC,iEAAiE,mBAAmB,KAAK;AAE7F,SAAK,gBAAgB,MAAM,6BAA6B,QACtD,OACA,SACA,QACA,eAAe,WACf,eAAe,cACf,KAAK,iBAAiB;AAExB,SAAK,wBAAwB;AAC7B,WAAO,EAAE,YAAY,KAAK,eAAe,QAAQ,MAAK;EACxD;EAEA,MAAM,8BACJ,OACA,SACA,QACA,wBAAwD;AAExD,UAAM,KAAK,yBAAwB;AACnC,mBAAe,MAAM;AACrB,UAAM,aAAa,MAAM,KAAK,2BAC5B,OACA,SACA,QACA,sBAAsB;AAExB,mBAAe,MAAM;AACrB,WAAO;EACT;EAEA,uBACE,OACA,SAA+B;AAE/B,UAAM,oBAAoB,OAAO,QAAQ,OAAO,EAC7C,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,IAAI,YAAW,GAAI,KAAK,CAAU,EACzD,KAAK,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,UAAU,UAAU,MAChD,GAAG,OAAO,IAAI,SAAS,GAAG,cAAc,GAAG,QAAQ,IAAI,UAAU,EAAE,CAAC;AAGxE,WAAO,KAAK,UAAU,CAAC,OAAO,iBAAiB,CAAC;EAClD;EAEA,MAAM,2BAAwB;AAC5B,UAAM,oBAAoB,KAAK;AAC/B,QAAI,CAAC,mBAAmB;AACtB,WAAK,wBAAwB;AAC7B;IACF;AAIA,SAAK,gBAAgB;AACrB,SAAK,wBAAwB;AAE7B,QAAI;AACF,YAAM,kBAAkB,MAAK;IAC/B,QAAQ;IAER;EACF;EAEA,MAAM,6BACJ,QACA,wBAAwD;AAExD,mBAAe,MAAM;AACrB,UAAM,mBAAmB,KAAK,gCAC5B,wBACA,CAAC,wBACC,0DAA0D,mBAAmB,KAAK;AAGtF,UAAM,eAAe,KAAK;AAC1B,QAAI,WAAW;AACf,QAAI;AAEJ,UAAM,UAAU,IAAI,QAAc,CAAC,YAAW;AAC5C,uBAAiB;IACnB,CAAC;AACD,UAAM,cAAc,MAAK;AACvB,UAAI,UAAU;AACZ;MACF;AACA,iBAAW;AACX,qBAAc;IAChB;AAEA,SAAK,iBAAiB,aAAa,KAAK,MAAM,OAAO;AAErD,QAAI;AACF,YAAM,gBACJ,YACE,cACA,iBAAiB,WACjB,iBAAiB,YAAY,GAE/B,MAAM;AAER,qBAAe,MAAM;AACrB,aAAO;IACT,SAAS,OAAO;AACd,kBAAW;AACX,YAAM;IACR;EACF;EAEA,MAAM,uBAAoB;AACxB,UAAM,sBAAsB,KAAK;AAIjC,QAAI,OAAO,oBAAoB,gBAAgB,YAAY;AACzD,YAAM,oBAAoB,YAAW;IACvC;EACF;EAEA,kCAA+B;AAC7B,UAAM,oBAAoB,KAAK;AAI/B,UAAM,mBACJ,OAAO,kBAAkB,YAAY,WACjC,kBAAkB,UAClB,kBAAkB,UAAU;AAElC,QAAI,OAAO,qBAAqB,UAAU;AACxC,aAAO;IACT;AAEA,WAAOA,QAAO;EAChB;EAEA,yCAAsC;AAEpC,UAAM,YAAY,KAAK,gCAA+B;AACtD,QACE,OAAO,cAAc,YACrB,CAAC,OAAO,SAAS,SAAS,KAC1B,aAAa,GACb;AACA,aAAO;IACT;AAEA,WAAO;MACL,qBAAqB;MACrB,cAAc,KAAK,IAAG,IAAK;;EAE/B;EAEA,gCACE,wBACA,kCAAyE;AAEzE,UAAM,sBACJ,wBAAwB,uBACxB,KAAK,gCAA+B;AACtC,UAAM,0BACJ,OAAO,wBAAwB,WAC3B,sBACAA,QAAO;AACb,UAAM,eAAe,iCACnB,uBAAuB;AAEzB,QAAI,CAAC,wBAAwB;AAC3B,aAAO,EAAE,WAAW,qBAAqB,aAAY;IACvD;AAEA,UAAM,qBAAqB,KAAK,KAC9B,uBAAuB,eAAe,KAAK,IAAG,CAAE;AAElD,QAAI,sBAAsB,GAAG;AAC3B,YAAM,IAAI,MAAM,YAAY;IAC9B;AAEA,WAAO,EAAE,WAAW,oBAAoB,aAAY;EACtD;EAEA,MAAM,qCACJ,SACA,QACA,wBACA,kCAAyE;AAEzE,UAAM,UAAU,KAAK,gCACnB,wBACA,gCAAgC;AAElC,WAAO,MAAM,gBACX,YAAY,SAAS,QAAQ,WAAW,QAAQ,YAAY,GAC5D,MAAM;EAEV;EAEA,MAAM,oBACJ,YACA,QACA,wBAAwD;AAExD,UAAM,mBAAmB,KAAK,gCAC5B,wBACA,CAAC,wBACC,kDAAkD,mBAAmB,KAAK;AAE9E,WAAO,MAAM,YACX,WAAW,UAAU,MAAM,GAC3B,iBAAiB,WACjB,iBAAiB,YAAY;EAEjC;;;;AU93HF,gBAAuB,wCACrB,UACA,QACA,UAAiD,CAAA,GAAE;AAEnD,MAAI,QAAqC;AACzC,QAAM,QAAwB;IAC5B,SAAS;IACT,cAAc;IACd,iBAAiB;IACjB,gBAAgB,CAAA;IAChB,2BAA2B,oBAAI,IAAG;IAClC,WAAW;IACX,cAAc;IACd,4BAA4B;;AAE9B,QAAM,0BAA0B,QAAQ,2BAA2B;AAEnE,mBAAiB,SAAS,QAAQ;AAChC,QAAI,MAAM,OAAO,SAAS,OAAO,WAAW,CAAC,SAAS,KAAK;AACzD,eAAS,KAAK,MAAM;IACtB;AAEA,QAAI,CAAC,MAAM,SAAS;AAClB,YAAM,UAAU;AAChB,YAAM;QACJ,MAAM;QACN,cAAc;UACZ,GAAG;;;IAGT;AAGA,UAAM;MACJ,MAAM;MACN,OAAO;MACP,cAAc;QACZ,qBAAqB;;;AAKzB,YAAS,MAAc,SAAS;AAEhC,QAAI,CAAC,MAAM,WAAW,MAAM,QAAQ,WAAW;AAAG;AAElD,UAAM,2BAA2B,MAAM,QACpC,IAAI,CAAC,WAAW,OAAO,KAAK,EAC5B,OAAO,CAAC,UAAU,UAAU,CAAC;AAChC,QAAI,MAAM,QAAQ,SAAS,KAAK,yBAAyB,SAAS,GAAG;AACnE,YAAM,UACJ;AAEF,UAAI,yBAAyB;AAC3B,cAAM,IAAI,UAAU,OAAO;MAC7B;AACA,UAAI,CAAC,MAAM,4BAA4B;AACrC,uBAAO,KACL,GAAG,OAAO,0FAA0F;AAEtG,cAAM,6BAA6B;MACrC;IACF;AAEA,UAAM,gBAAgB,MAAM,QAAQ,KAAK,CAAC,WAAW,OAAO,UAAU,CAAC;AACvE,QAAI,CAAC;AAAe;AACpB,QAAI,cAAc,eAAe;AAC/B,YAAM,eAAe,cAAc;IACrC;AACA,QAAI,CAAC,cAAc;AAAO;AAC1B,UAAM,QAAQ,cAAc;AAG5B,QAAI,MAAM,SAAS;AACjB,UAAI,CAAC,MAAM,cAAc;AACvB,cAAM,eAAe;UACnB,MAAM;UACN,MAAM;UACN,cAAc,EAAE,aAAa,CAAA,EAAE;;MAEnC;AACA,YAAM;QACJ,MAAM;QACN,OAAO,MAAM;QACb,cAAc;UACZ,GAAG;;;AAGP,YAAM,aAAa,QAAQ,MAAM;IACnC;AAEA,QACE,eAAe,SACf,MAAM,aACN,OAAO,MAAM,cAAc,UAC3B;AACA,YAAM,aAAa,MAAM;IAC3B;AAGA,QAAI,aAAa,SAAS,MAAM,SAAS;AACvC,UAAI,CAAC,MAAM,iBAAiB;AAC1B,cAAM,kBAAkB,EAAE,SAAS,IAAI,MAAM,UAAS;MACxD;AACA,YAAM,gBAAgB,WAAW,MAAM;IACzC;AAGA,QAAI,MAAM,YAAY;AACpB,iBAAW,YAAY,MAAM,YAAY;AACvC,YAAI,MAAM,0BAA0B,IAAI,SAAS,KAAK,GAAG;AACvD;QACF;AAEA,YAAK,SAA+B,SAAS,UAAU;AACrD,cAAI,yBAAyB;AAC3B,kBAAM,IAAI,UACR,wEAAwE;UAE5E;AACA,gBAAM,0BAA0B,IAAI,SAAS,KAAK;AAClD;QACF;AAEA,YAAI,EAAE,SAAS,SAAS,MAAM,iBAAiB;AAC7C,gBAAM,eAAe,SAAS,KAAK,IAAI;YACrC,IAAI,SAAS,MAAM;YACnB,WAAW;YACX,MAAM;YACN,MAAM;YACN,QAAQ;;QAEZ;AACA,cAAM,cAAc,SAAS;AAC7B,cAAM,eAAe,SAAS,KAAK,EAAE,aACnC,aAAa,aAAa;AAC5B,cAAM,eAAe,SAAS,KAAK,EAAE,QAAQ,aAAa,QAAQ;AAClE,YAAI,SAAS,MAAM,CAAC,MAAM,eAAe,SAAS,KAAK,EAAE,QAAQ;AAC/D,gBAAM,eAAe,SAAS,KAAK,EAAE,SAAS,SAAS;QACzD;MACF;IACF;EACF;AAGA,QAAM,UAAsC,CAAA;AAC5C,QAAM,eAAe,SAAS,MAAM;AAEpC,MAAI,MAAM,WAAW;AACnB,YAAQ,KAAK;MACX,MAAM;MACN,SAAS,CAAA;MACT,YAAY,CAAC,EAAE,MAAM,kBAAkB,MAAM,MAAM,UAAS,CAAE;KAC/D;EACH;AAEA,MAAI,MAAM,gBAAgB,MAAM,iBAAiB;AAC/C,UAAM,UAAuC,CAAA;AAC7C,QAAI,MAAM,cAAc;AACtB,cAAQ,KAAK,MAAM,YAAY;IACjC;AACA,QAAI,MAAM,iBAAiB;AACzB,cAAQ,KAAK,MAAM,eAAe;IACpC;AACA,YAAQ,KAAK;MACX,IAAI;MACJ;MACA,MAAM;MACN,MAAM;MACN,QAAQ;KACT;EACH;AAEA,aAAW,iBAAiB,OAAO,OAAO,MAAM,cAAc,GAAG;AAC/D,kBAAc,KAAK;AAInB,QAAI,cAAc,UAAU,WAAW,KAAK,GAAG;AAC7C,oBAAc,YAAY,cAAc,UAAU,MAAM,CAAC;IAC3D;AACA,YAAQ,KAAK,aAAa;EAC5B;AAEA,QAAM,cAAc,iBAAiB,KAAK;AAC1C,WAAS,UAAU,cAAc,CAAC,WAAW,IAAI,CAAA;AACjD,WAAS,QAAQ;IACf,eAAe,OAAO,iBAAiB;IACvC,mBAAmB,OAAO,qBAAqB;IAC/C,cAAc,OAAO,gBAAgB;IACrC,uBAAuB,OAAO;IAC9B,2BAA2B,OAAO;;AAIpC,QAAM,aAAoD;IACxD,MAAM;IACN,UAAU;MACR,IAAI,SAAS;MACb,OAAO;QACL,aAAa,OAAO,iBAAiB;QACrC,cAAc,OAAO,qBAAqB;QAC1C,aAAa,OAAO,gBAAgB;QACpC,oBAAoB;UAClB,eAAe,OAAO,uBAAuB,iBAAiB;;QAEhE,qBAAqB;UACnB,kBACG,OAAe,2BAA2B,oBAAoB;;;MAGrE,QAAQ;;;AAIZ,QAAM;AACR;AAEA,SAAS,iBACP,OAAqB;AAErB,QAAM,YAAY,OAAO,QAAQ,MAAM,cAAc,EAClD,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,MAAM,OAAO,IAAI,IAAI,OAAO,KAAK,CAAC,EACtD,IAAI,CAAC,CAAC,EAAE,YAAY,OAAO;IAC1B,IAAI,aAAa;IACjB,MAAM;IACN,UAAU;MACR,MAAM,aAAa;MACnB,WAAW,aAAa;;IAE1B;AAEJ,QAAM,UAAU,MAAM,cAAc,QAAQ;AAC5C,QAAM,UAAU,MAAM,iBAAiB,WAAW;AAElD,MAAI,YAAY,QAAQ,YAAY,QAAQ,UAAU,WAAW,GAAG;AAClE,WAAO;EACT;AAEA,SAAO;IACL,OAAO;IACP,UAAU;IACV,eACE,MAAM,iBAAiB,UAAU,SAAS,IAAI,eAAe;IAC/D,SAAS;MACP,MAAM;MACN;MACA;MACA,GAAI,UAAU,SAAS,IAAI,EAAE,YAAY,UAAS,IAAK,CAAA;;;AAG7D;;;AC7PA,IAAM,yCAAyC;AAC/C,IAAM,kCAAkC;AAWlC,SAAU,kBACd,YAA2E;AAE3E,MAAI,cAAc,UAAa,cAAc;AAAM,WAAO;AAC1D,MAAI,eAAe;AAAQ,WAAO;AAClC,MAAI,eAAe;AAAY,WAAO;AACtC,MAAI,eAAe;AAAQ,WAAO;AAClC,SAAO;IACL,MAAM;IACN,UAAU,EAAE,MAAM,WAAU;;AAEhC;AAEM,SAAUC,yBACd,YACA,OAA2B;AAE3B,QAAM,YAAY,kBAAkB,UAAU;AAC9C,MAAI,aAAa,UAAa,cAAc,UAAU,cAAc,QAAQ;AAC1E,WAAO;EACT;AAEA,MAAI,cAAc,YAAY;AAC5B,QAAI,MAAM,WAAW,GAAG;AACtB,YAAM,IAAI,UACR,oGAAoG;IAExG;AACA,WAAO;EACT;AAEA,MAAI,OAAO,cAAc,YAAY,EAAE,cAAc,YAAY;AAC/D,WAAO;EACT;AAEA,QAAM,qBAAqB,IAAI,IAC7B,MACG,IAAI,CAACC,UACJA,MAAK,SAAS,cAAc,cAAcA,QACtCA,MAAK,SAAS,OACd,MAAS,EAEd,OAAO,CAAC,SAAyB,OAAO,SAAS,QAAQ,CAAC;AAE/D,MAAI,CAAC,mBAAmB,IAAI,UAAU,SAAS,IAAI,GAAG;AACpD,UAAM,IAAI,UACR,6BAA6B,UAAU,SAAS,IAAI,0EAA0E;EAElI;AAEA,SAAO;AACT;AAEM,SAAU,2BACd,SAAiD;AAEjD,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;EACT;AACA,QAAM,MAAsD,CAAA;AAC5D,aAAW,KAAK,SAAS;AACvB,QAAI,EAAE,SAAS,eAAe;AAC5B,UAAI,KAAK;QACP,MAAM;QACN,MAAM,EAAE;QACR,GAAG,mCAAmC,EAAE,cAAc,CAAC,QAAQ,MAAM,CAAC;OACvE;IACH,WAAW,EAAE,SAAS,WAAW;AAC/B,UAAI,KAAK;QACP,MAAM;QACN,SAAS,EAAE;QACX,GAAG,mCAAmC,EAAE,cAAc;UACpD;UACA;SACD;OACF;IACH,WAAW,EAAE,SAAS,WAAW,EAAE,SAAS,SAAS;AAEnD;IACF,OAAO;AACL,YAAM,aAAa;AACnB,YAAM,IAAI,MAAM,oBAAoB,KAAK,UAAU,UAAU,CAAC,EAAE;IAClE;EACF;AACA,SAAO;AACT;AAEM,SAAU,sBACd,SAA4C;AAE5C,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;EACT;AAEA,QAAM,MAAmC,CAAA;AACzC,aAAW,KAAK,SAAS;AACvB,QAAI,EAAE,SAAS,cAAc;AAC3B,UAAI,KAAK;QACP,MAAM;QACN,MAAM,EAAE;QACR,GAAI,EAAE,wBACF,EAAE,yBAAyB,EAAE,sBAAqB,IAClD,CAAA;QACJ,GAAG,mCAAmC,EAAE,cAAc,CAAC,QAAQ,MAAM,CAAC;OACvE;IACH,WAAW,EAAE,SAAS,eAAe;AAGnC,YAAM,cACJ,OAAO,EAAE,UAAU,WACf,EAAE,QACF,OAAQ,EAAU,aAAa,WAC5B,EAAU,WACX;AAER,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MACR,kDAAkD,KAAK,UAAU,CAAC,CAAC,EAAE;MAEzE;AACA,YAAM,OAAO,mCAAmC,EAAE,cAAc;QAC9D;QACA;OACD;AACD,YAAM,WAAW,mCACf,EAAE,cAAc,WAChB,CAAC,KAAK,CAAC;AAET,UAAI,KAAK;QACP,MAAM;QACN,WAAW;UACT,KAAK;;;;UAIL,GAAI,EAAE,WAAW,SACb,EAAE,QAAQ,EAAE,OAAiC,IAC7C,CAAA;UACJ,GAAG;;QAEL,GAAI,EAAE,wBACF,EAAE,yBAAyB,EAAE,sBAAqB,IAClD,CAAA;QACJ,GAAG;OACJ;IACH,WAAW,EAAE,SAAS,cAAc;AAGlC,YAAMC,QAA+C,CAAA;AAErD,UAAI,OAAO,EAAE,SAAS,UAAU;AAC9B,cAAM,QAAQ,EAAE,KAAK,KAAI;AACzB,YAAI,MAAM,WAAW,OAAO,GAAG;AAC7B,UAAAA,MAAK,YAAY;QACnB,OAAO;AACL,gBAAM,IAAI,UACR,wJAAwJ,KAAK,UAAU,CAAC,CAAC,EAAE;QAE/K;MACF,WAAW,EAAE,QAAQ,OAAO,EAAE,SAAS,YAAY,QAAQ,EAAE,MAAM;AACjE,QAAAA,MAAK,UAAW,EAAE,KAAwB;MAC5C,OAAO;AACL,cAAM,IAAI,UACR,8CAA8C,KAAK,UAAU,CAAC,CAAC,EAAE;MAErE;AAGA,UAAI,EAAE,UAAU;AACd,QAAAA,MAAK,WAAW,EAAE;MACpB,WAAW,EAAE,cAAc,UAAU;AACnC,QAAAA,MAAK,WAAW,EAAE,aAAa;MACjC;AAEA,YAAM,OAAO,mCAAmC,EAAE,cAAc;QAC9D;QACA;QACA;OACD;AACD,UAAI,KAAK;QACP,MAAM;QACN,MAAAA;QACA,GAAI,EAAE,wBACF,EAAE,yBAAyB,EAAE,sBAAqB,IAClD,CAAA;QACJ,GAAG;OACJ;IACH,WAAW,EAAE,SAAS,SAAS;AAC7B,UAAI,OAAO,EAAE,UAAU,UAAU;AAC/B,cAAM,IAAI,UACR,qEAAqE,KAAK,UAAU,CAAC,CAAC,EAAE;MAE5F;AACA,YAAM,mBACJ,EAAE,WAAW,SAAS,EAAE,WAAW,QAC/B,EAAE,SACF,EAAE,cAAc,aAAa,WAAW,SACtC,EAAE,cAAc,aAAa,WAAW,QACxC,EAAE,aAAa,YAAY,SAC3B;AACR,UAAI,CAAC,kBAAkB;AACrB,cAAM,IAAI,UACR,gEAAgE,KAAK,UAAU,CAAC,CAAC,EAAE;MAEvF;AACA,YAAM,OAAO,mCAAmC,EAAE,cAAc;QAC9D;QACA;OACD;AACD,YAAM,aAAa,mCACjB,EAAE,cAAc,aAChB,CAAC,QAAQ,QAAQ,CAAC;AAEpB,UAAI,KAAK;QACP,MAAM;QACN,aAAa;UACX,MAAM,EAAE;UACR,QAAQ;UACR,GAAG;;QAEL,GAAI,EAAE,wBACF,EAAE,yBAAyB,EAAE,sBAAqB,IAClD,CAAA;QACJ,GAAG;OACJ;IACH,OAAO;AACL,YAAM,aAAa;AACnB,YAAM,IAAI,MAAM,oBAAoB,KAAK,UAAU,UAAU,CAAC,EAAE;IAClE;EACF;AACA,SAAO;AACT;AAEA,SAASC,eAAc,MAAwB;AAC7C,MAAI,KAAK,SAAS,WAAW;AAC3B,WAAO;EACT;AAEA,MAAI,OAAO,KAAK,SAAS,eAAe,OAAO,KAAK,SAAS,UAAU;AACrE,WAAO;EACT;AAEA,SAAO;AACT;AAEM,SAAU,gBACd,OACA,UAAkC,CAAA,GAAE;AAEpC,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,CAAC,EAAE,MAAM,QAAQ,SAAS,MAAK,CAAE;EAC1C;AACA,QAAM,SAAuC,CAAA;AAC7C,MAAI,sBACF;AACF,QAAM,wBAAwB,MAAK;AACjC,QAAI,qBAAqB;AACvB,UACE,CAAC,oBAAoB,cACrB,oBAAoB,WAAW,WAAW,GAC1C;AACA,eAAO,oBAAoB;MAC7B;AACA,aAAO,KAAK,mBAAmB;AAC/B,4BAAsB;IACxB;EACF;AACA,QAAM,yBAAyB,MAAK;AAClC,QAAI,CAAC,qBAAqB;AACxB,4BAAsB;QACpB,MAAM;QACN,SAAS;QACT,YAAY,CAAA;;IAEhB;AACA,WAAO;EACT;AACA,aAAW,QAAQ,OAAO;AACxB,QAAIA,eAAc,IAAI,GAAG;AACvB,YAAM,EAAE,SAAS,MAAM,aAAY,IAAK;AACxC,4BAAqB;AACrB,UAAI,SAAS,aAAa;AACxB,cAAM,YAAiD;UACrD,MAAM;UACN,SAAS,2BAA2B,OAAO;UAC3C,GAAG,mCAAmC,cAAc;YAClD;YACA;YACA;YACA;WACD;;AAGH,YAAI,MAAM,QAAQ,OAAO,GAAG;AAC1B,gBAAM,QAAQ,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,OAAO;AACpD,cAAI,OAAO;AACT,sBAAU,QAAQ;cAChB,IAAI;;cACJ,GAAG,MAAM;;UAEb;QACF;AAEA,eAAO,KAAK,SAAS;MACvB,WAAW,SAAS,QAAQ;AAC1B,eAAO,KAAK;UACV;UACA,SAAS,sBAAsB,OAAO;UACtC,GAAG,mCAAmC,cAAc;YAClD;YACA;WACD;SACF;MACH,WAAW,SAAS,UAAU;AAC5B,eAAO,KAAK;UACV,MAAM;UACN;UACA,GAAG,mCAAmC,cAAc;YAClD;YACA;WACD;SACF;MACH;IACF,WAAW,KAAK,SAAS,aAAa;AACpC,YAAM,OAAO,uBAAsB;AAGnC,WAAK,YAAY,KAAK,aAAa,CAAC,GAAG;AACvC;IACF,WAAW,KAAK,SAAS,oBAAoB;AAC3C,UAAI,KAAK,SAAS,oBAAoB;AACpC,cAAM,OAAO,uBAAsB;AACnC,cAAM,YAAY,KAAK,cAAc,CAAA;AACrC,cAAM,aAAa;AACnB,cAAM,EAAE,UAAU,cAAc,GAAG,KAAI,IACrC,WAAW,gBAAgB,CAAA;AAC7B,cAAM,EAAE,WAAW,cAAc,GAAG,sBAAqB,IACvD,gBAAgB,CAAA;AAElB,kBAAU,KAAK;UACb,IAAI,WAAW,MAAM;UACrB,MAAM;UACN,UAAU;YACR,MAAM;YACN,WAAW,KAAK,UAAU;cACxB,SAAS,WAAW,cAAc,WAAW,CAAA;cAC7C,QAAQ,WAAW;cACnB,GAAG,mCAAmC,cAAc;gBAClD;gBACA;eACD;aACF;YACD,GAAG,mCAAmC,uBAAuB;cAC3D;cACA;aACD;;UAEH,GAAG,mCAAmC,MAAM;YAC1C;YACA;YACA;WACD;SACF;AACD,aAAK,aAAa;AAClB;MACF,OAAO;AACL,cAAM,IAAI,UACR,yEACE,KAAK,UAAU,IAAI,CAAC;MAE1B;IACF,WACE,KAAK,SAAS,mBACd,KAAK,SAAS,0BACd,KAAK,SAAS,gBACd,KAAK,SAAS,uBACd,KAAK,SAAS,sBACd,KAAK,SAAS,2BACd;AACA,YAAM,IAAI,UACR,0EACE,KAAK,UAAU,IAAI,CAAC;IAE1B,WACE,KAAK,SAAS,sBACd,KAAK,SAAS,sBACd;AACA,YAAM,IAAI,UACR,4HAA4H;IAEhI,WAAW,KAAK,SAAS,iBAAiB;AACxC,YAAM,4BACJ,OAAO,KAAK,SAAS,YACrB,CAAC,uCAAuC,KAAK,KAAK,IAAI;AACxD,UACE,6BACC,OAAO,KAAK,cAAc,YAAY,KAAK,UAAU,KAAI,EAAG,SAAS,GACtE;AACA,cAAM,IAAI,UACR,4IAA4I;MAEhJ;AACA,YAAM,OAAO,uBAAsB;AACnC,YAAM,YAAY,KAAK,cAAc,CAAA;AACrC,YAAM,WAAW;AACjB,YAAM,uBAAuB,mCAC3B,SAAS,cACT,CAAC,MAAM,QAAQ,YAAY,QAAQ,WAAW,cAAc,OAAO,CAAC;AAEtE,YAAM,uBAAuB,mCAC3B,SAAS,cAAc,UACvB,CAAC,QAAQ,WAAW,CAAC;AAEvB,gBAAU,KAAK;QACb,IAAI,SAAS;QACb,MAAM;QACN,UAAU;UACR,MAAM,SAAS;UACf,WAAW,SAAS,aAAa;UACjC,GAAG;;QAEL,GAAG;OACJ;AACD,WAAK,aAAa;AAClB,aAAO,OACL,MACA,mCAAmC,SAAS,cAAc;QACxD;QACA;QACA;QACA;QACA;QACA;QACA;OACD,CAAC;IAEN,WAAW,KAAK,SAAS,wBAAwB;AAC/C,4BAAqB;AACrB,YAAM,aAAa;AACnB,YAAM,cAAc,mCAClB,WAAW,QACX,OAAO;AAGT,aAAO,KAAK;QACV,MAAM;QACN,cAAc,WAAW;QACzB,SAAS;QACT,GAAG,mCAAmC,WAAW,cAAc;UAC7D;UACA;UACA;SACD;OACF;IACH,WAAW,KAAK,SAAS,WAAW;AAClC,aAAO,KAAK;QACV,GAAG,KAAK;OACF;IACV,WAAW,KAAK,SAAS,cAAc;AACrC,YAAM,IAAI,UACR,qHAAqH;IAEzH,OAAO;AACL,YAAM,aAAa;AACnB,YAAM,IAAI,MAAM,sBAAsB,KAAK,UAAU,UAAU,CAAC,EAAE;IACpE;EACF;AACA,wBAAqB;AACrB,SAAO;AACT;AAEA,SAAS,mCACP,QACA,SAA+B;AAE/B,MAAI,OAAO,WAAW,UAAU;AAC9B,WAAO;EACT;AAEA,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,UAAM,YAAY,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS,YAAY;AAEpE,QAAI,UAAU,WAAW,GAAG;AAC1B,aAAO,+BAA+B,OAAO;IAC/C;AAEA,QAAI,QAAQ,2BAA2B,UAAU,WAAW,OAAO,QAAQ;AACzE,YAAM,IAAI,UACR,0EACE,KAAK,UAAU,MAAM,CAAC;IAE5B;AAEA,WAAO,UAAU,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,KAAK,EAAE;EACnD;AAEA,MACEC,UAAS,MAAM,KACf,OAAO,SAAS,UAChB,OAAO,OAAO,SAAS,UACvB;AACA,WAAO,OAAO;EAChB;AAEA,MAAIA,UAAS,MAAM,MAAM,OAAO,SAAS,WAAW,OAAO,SAAS,SAAS;AAC3E,WAAO,+BAA+B,OAAO;EAC/C;AAEA,QAAM,IAAI,UACR,0EACE,KAAK,UAAU,MAAM,CAAC;AAE5B;AAEA,SAAS,+BACP,SAA+B;AAE/B,QAAM,UACJ;AAEF,MAAI,QAAQ,yBAAyB;AACnC,UAAM,IAAI,UAAU,OAAO;EAC7B;AAEA,iBAAO,KACL,GAAG,OAAO,4GAA4G;AAExH,SAAO;AACT;AAEA,SAASA,UAAS,OAAc;AAC9B,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEM,SAAU,aAAaH,OAAoB;AAC/C,MAAIA,MAAK,SAAS,YAAY;AAC5B,WAAO;MACL,MAAM;MACN,UAAU;QACR,MAAMA,MAAK;QACX,aAAaA,MAAK,eAAe;QACjC,YAAYA,MAAK;QACjB,QAAQA,MAAK;;;EAGnB;AACA,QAAM,IAAI,MACR,+EACEA,MAAK,IACP,WAAW,KAAK,UAAUA,KAAI,CAAC,EAAE;AAErC;AAEM,SAAU,mBACd,SAA0B;AAE1B,SAAO;IACL,MAAM;IACN,UAAU;MACR,MAAM,QAAQ;MACd,aAAa,QAAQ,mBAAmB;MACxC,YAAY,QAAQ;;;AAG1B;;;ACxiBO,IAAM,UAAU;AACvB,IAAM,uBACJ;AASF,SAAS,oBACP,SAAsD;AAEtD,SACE,eAAe,WACf,OAAO,QAAQ,cAAc,YAC7B,QAAQ,cAAc;AAE1B;AAcM,IAAO,6BAAP,MAAiC;EACrC;EACA;EACA;EACA,8BAA8B;EAC9B,yCAAyC;EACzC,yCAAyC;EAEzC,YACE,QACA,OACA,UAA6C,CAAA,GAAE;AAE/C,SAAK,UAAU;AACf,SAAK,SAAS;AACd,SAAK,2BAA2B,QAAQ,2BAA2B;EACrE;EAEA,eAAe,MAA6B;AAC1C,WAAO,qBAAqB,IAAI;EAClC;EAEA,MAAM,YAAY,SAAqB;AACrC,SAAK,iDAAiD,OAAO;AAC7D,SAAK,yBAAyB,OAAO;AACrC,SAAK,oCAAoC,OAAO;AAEhD,UAAM,WAAW,MAAM,mBAAmB,OAAO,SAAQ;AACvD,WAAK,SAAS,QAAQ,KAAK;AAC3B,WAAK,SAAS,eAAe,QAAQ,gBACjC;QACE,aAAa,QAAQ,cAAc;QACnC,OAAO,QAAQ,cAAc;QAC7B,mBAAmB,QAAQ,cAAc;QACzC,kBAAkB,QAAQ,cAAc;QACxC,kBAAkB,QAAQ,cAAc,WAAW;QACnD,WAAW,QAAQ,cAAc,MAAM;UAEzC,EAAE,UAAU,KAAK,QAAQ,QAAO;AACpC,YAAMI,YAAW,MAAM,KAAK,eAAe,SAAS,MAAM,KAAK;AAC/D,UAAI,QAAQ,QAAQ,YAAY,MAAM;AACpC,aAAK,SAAS,SAAS,CAACA,SAAQ;MAClC;AACA,aAAOA;IACT,CAAC;AAED,UAAM,SAAqC,CAAA;AAC3C,QAAI,SAAS,WAAW,SAAS,QAAQ,CAAC,GAAG;AAC3C,YAAM,UAAU,SAAS,QAAQ,CAAC,EAAE;AAEpC,UAAI,oBAAoB,OAAO,GAAG;AAChC,eAAO,KAAK;UACV,MAAM;UACN,SAAS,CAAA;UACT,YAAY;YACV;cACE,MAAM;cACN,MAAM,QAAQ;;;SAGnB;MACH;AACA,YAAM,aACJ,QAAQ,YAAY,UACpB,QAAQ,YAAY;MAEpB,EAAE,QAAQ,cAAc,QAAQ,YAAY;AAE9C,UAAI,YAAY;AACd,cAAM,EAAE,SAAS,GAAG,KAAI,IAAK;AAC7B,eAAO,KAAK;UACV,IAAI,SAAS;UACb,MAAM;UACN,MAAM;UACN,SAAS;YACP;cACE,MAAM;cACN,MAAM,WAAW;cACjB,cAAc;;;UAGlB,QAAQ;SACT;MACH,WAAW,QAAQ,SAAS;AAC1B,cAAM,EAAE,SAAS,GAAG,KAAI,IAAK;AAC7B,eAAO,KAAK;UACV,IAAI,SAAS;UACb,MAAM;UACN,MAAM;UACN,SAAS;YACP;cACE,MAAM;cACN,SAAS,WAAW;cACpB,cAAc;;;UAGlB,QAAQ;SACT;MACH,WAAW,QAAQ,OAAO;AACxB,cAAM,EAAE,MAAM,GAAG,mBAAkB,IAAK,QAAQ;AAChD,eAAO,KAAK;UACV,IAAI,SAAS;UACb,MAAM;UACN,MAAM;UACN,SAAS;YACP;cACE,MAAM;cACN,OAAO;cACP,cAAc;;;UAGlB,QAAQ;SACT;MACH;AAEA,UAAI,QAAQ,YAAY;AACtB,mBAAW,aAAa,QAAQ,YAAY;AAC1C,cAAI,UAAU,SAAS,YAAY;AAEjC,kBAAM,EAAE,IAAI,QAAQ,GAAG,sBAAqB,IAAK;AACjD,kBAAM,EACJ,WAAW,MACX,MACA,GAAG,sBAAqB,IACtB,UAAU;AACd,mBAAO,KAAK;cACV,IAAI,SAAS;cACb,MAAM;cACN,WAAW;cACX;cACA;cACA,QAAQ;cACR,cAAc;gBACZ,GAAG;gBACH,GAAG;;aAEN;UACH,WAAW,UAAU,SAAS,UAAU;AACtC,gBAAI,KAAK,0BAA0B;AACjC,oBAAM,IAAI,UACR,wEAAwE;YAE5E;UACF;QACF;MACF;IACF;AACA,UAAM,gBAA+B;MACnC,OAAO,SAAS,QACZ,IAAI,MAAM,gBAAgB,SAAS,KAAK,CAAC,IACzC,IAAI,MAAK;MACb;MACA,YAAY,SAAS;MACrB,cAAc;;AAGhB,WAAO;EACT;EAEA,OAAO,oBACL,SAAqB;AAErB,SAAK,iDAAiD,OAAO;AAC7D,SAAK,yBAAyB,OAAO;AACrC,SAAK,oCAAoC,OAAO;AAEhD,UAAM,OAAO,QAAQ,UAAU,qBAAoB,IAAK;AACxD,QAAI;AACF,UAAI,MAAM;AACR,aAAK,SAAS,QAAQ,KAAK;AAC3B,aAAK,SAAS,eAAe,QAAQ,gBACjC;UACE,aAAa,QAAQ,cAAc;UACnC,OAAO,QAAQ,cAAc;UAC7B,mBAAmB,QAAQ,cAAc;UACzC,kBAAkB,QAAQ,cAAc;UACxC,kBAAkB,QAAQ,cAAc,WAAW;UACnD,WAAW,QAAQ,cAAc,MAAM;YAEzC,EAAE,UAAU,KAAK,QAAQ,QAAO;AACpC,aAAK,MAAK;AACV,uBAAe,IAAI;MACrB;AACA,YAAM,SAAS,MAAM,KAAK,eAAe,SAAS,MAAM,IAAI;AAE5D,YAAM,WAAmD;QACvD,IAAI;QACJ,SAAS,KAAK,MAAM,KAAK,IAAG,IAAK,GAAI;QACrC,OAAO,KAAK;QACZ,QAAQ;QACR,SAAS,CAAA;QACT,OAAO;UACL,eAAe;UACf,mBAAmB;UACnB,cAAc;;;AAGlB,uBAAiB,SAAS,wCACxB,UACA,QACA,EAAE,yBAAyB,KAAK,yBAAwB,CAAE,GACzD;AACD,YACE,MAAM,SAAS,mBACf,SAAS,OAAO,iBAAiB,GACjC;AACA,mBAAS,QAAQ;YACf,eAAe,MAAM,SAAS,MAAM;YACpC,mBAAmB,MAAM,SAAS,MAAM;YACxC,cAAc,MAAM,SAAS,MAAM;YACnC,uBAAuB,MAAM,QAC3B,MAAM,SAAS,MAAM,kBAAkB,IAErC,MAAM,SAAS,MAAM,mBAAmB,CAAC,IACzC,MAAM,SAAS,MAAM;YACzB,2BAA2B,MAAM,QAC/B,MAAM,SAAS,MAAM,mBAAmB,IAEtC,MAAM,SAAS,MAAM,oBAAoB,CAAC,IAC1C,MAAM,SAAS,MAAM;;QAE7B;AACA,cAAM;MACR;AAEA,UAAI,QAAQ,YAAY,QAAQ,YAAY,MAAM;AAChD,aAAK,SAAS,SAAS,CAAC,QAAQ;MAClC;IACF,SAAS,OAAO;AACd,UAAI,MAAM;AACR,aAAK,SAAS;UACZ,SAAS;UACT,MAAM;YACJ,OACE,QAAQ,YAAY,OAChB,OAAO,KAAK,IACZ,iBAAiB,QACf,MAAM,OACN;;SAEX;MACH;AACA,YAAM;IACR;AACE,UAAI,MAAM;AACR,aAAK,IAAG;AACR,yBAAgB;MAClB;IACF;EACF;EAEA,iDAAiD,SAAqB;AACpE,UAAM,cAAwB,CAAA;AAC9B,QAAI,QAAQ,oBAAoB;AAC9B,kBAAY,KAAK,oBAAoB;IACvC;AACA,QAAI,QAAQ,gBAAgB;AAC1B,kBAAY,KAAK,gBAAgB;IACnC;AAEA,QAAI,YAAY,WAAW,GAAG;AAC5B;IACF;AAEA,UAAM,UACJ,kFACI,YAAY,KAAK,IAAI,CAAC;AAI5B,QAAI,KAAK,0BAA0B;AACjC,YAAM,IAAI,UAAU,OAAO;IAC7B;AAEA,QAAI,CAAC,KAAK,wCAAwC;AAChD,qBAAO,KACL,GAAG,OAAO,sHACqD;AAEjE,WAAK,yCAAyC;IAChD;EACF;EAEA,yBAAyB,SAAqB;AAC5C,QAAI,CAAC,QAAQ,QAAQ;AACnB;IACF;AAEA,UAAM,UACJ;AAGF,QAAI,KAAK,0BAA0B;AACjC,YAAM,IAAI,UAAU,OAAO;IAC7B;AAEA,QAAI,CAAC,KAAK,6BAA6B;AACrC,qBAAO,KACL,GAAG,OAAO,+EAA+E;AAE3F,WAAK,8BAA8B;IACrC;EACF;EAEA,oCAAoC,SAAqB;AACvD,UAAM,YAAY,QAAQ,cAAc;AACxC,QAAI,CAAC,WAAW;AACd;IACF;AAEA,UAAM,cAAe,CAAC,QAAQ,SAAS,EAAY,OACjD,CAAC,SAAS,UAAU,IAAI,MAAM,UAAa,UAAU,IAAI,MAAM,IAAI;AAErE,QAAI,YAAY,WAAW,GAAG;AAC5B;IACF;AAEA,UAAM,oBAAoB,YACvB,IAAI,CAAC,SAAS,aAAa,IAAI,EAAE,EACjC,KAAK,IAAI;AACZ,UAAM,UACJ,+CAA+C,iBAAiB;AAGlE,QAAI,KAAK,0BAA0B;AACjC,YAAM,IAAI,UAAU,OAAO;IAC7B;AAEA,QAAI,CAAC,KAAK,wCAAwC;AAChD,qBAAO,KACL,GAAG,OAAO,uGACqD;AAEjE,WAAK,yCAAyC;IAChD;EACF;EAeA,MAAM,eACJ,SACA,MACA,QAAe;AAKf,UAAM,QAAsD,CAAA;AAC5D,QAAI,QAAQ,OAAO;AACjB,iBAAWC,SAAQ,QAAQ,OAAO;AAChC,YAAIA,MAAK,SAAS,YAAY;AAC5B,cACE,OAAOA,MAAK,cAAc,YAC1BA,MAAK,UAAU,KAAI,EAAG,SAAS,GAC/B;AACA,kBAAM,IAAI,UACR,mGAAmG;UAEvG;AACA,cAAIA,MAAK,iBAAiB,MAAM;AAC9B,kBAAM,IAAI,UACR,mFAAmF;UAEvF;QACF;AACA,cAAM,KAAK,aAAaA,KAAI,CAAC;MAC/B;IACF;AACA,QAAI,QAAQ,UAAU;AACpB,iBAAW,WAAW,QAAQ,UAAU;AACtC,cAAM,KAAK,mBAAmB,OAAO,CAAC;MACxC;IACF;AACA,UAAM,iBAAiBC,mBAAkB,QAAQ,UAAU;AAE3D,QAAI,oBAAyC;AAC7C,QAAI,OAAO,QAAQ,cAAc,sBAAsB,WAAW;AAChE,UAAI,QAAQ,cAAc,qBAAqB,MAAM,WAAW,GAAG;AACjE,cAAM,IAAI,MAAM,qDAAqD;MACvE;AAEA,0BAAoB,QAAQ,cAAc;IAC5C;AAEA,UAAM,WAAW,gBAAgB,QAAQ,OAAO;MAC9C,yBAAyB,KAAK;KAC/B;AACD,QAAI,QAAQ,oBAAoB;AAC9B,eAAS,QAAQ;QACf,SAAS,QAAQ;QACjB,MAAM;OACP;IACH;AAEA,QAAI,QAAQ,QAAQ,YAAY,MAAM;AACpC,WAAK,SAAS,QAAQ;IACxB;AAEA,UAAM,eAAe,EAAE,GAAI,QAAQ,cAAc,gBAAgB,CAAA,EAAG;AACpE,UAAM,kBACJ,QAGA;AACF,UAAM,8BACJ,iBAAiB,4BAA4B,SAC5C,aAAa,qBAAqB,UAChC,MAAM,SAAS,KAAK,qBAAqB,KAAK,KAAK,MAAM;AAC9D,QACE,QAAQ,cAAc,aACtB,QAAQ,cAAc,UAAU,UAChC,CAAC,6BACD;AAEA,mBAAa,mBAAmB,QAAQ,cAAc,UAAU;IAClE;AACA,QAAI,QAAQ,cAAc,QAAQ,QAAQ,cAAc,KAAK,WAAW;AAEtE,mBAAa,YAAY,QAAQ,cAAc,KAAK;IACtD;AAQA,UAAM,cAA2C;MAC/C,OAAO,KAAK;MACZ;MACA,OAAO,MAAM,SAAS,QAAQ;MAC9B,aAAa,QAAQ,cAAc;MACnC,OAAO,QAAQ,cAAc;MAC7B,mBAAmB,QAAQ,cAAc;MACzC,kBAAkB,QAAQ,cAAc;MACxC,YAAY,QAAQ,cAAc;MAClC,aAAaC,yBACX,QAAQ,cAAc,YACtB,KAAK;MAEP,qBAAqB;MACrB,QAAQ,SAAS,OAAO;MACxB,gBAAgB,SAAS,EAAE,eAAe,KAAI,IAAK;MACnD,OAAO,QAAQ,cAAc;MAC7B,wBAAwB,8BACtB,QAAQ,cAAc,oBAAoB;MAE5C,sBAAsB,QAAQ,cAAc;MAC5C,GAAG;;AAGL,QAAI,gBAAgB;AAClB,kBAAY,kBAAkB;IAChC;AAEA,QAAI,eAAO,kBAAkB;AAC3B,qBAAO,MAAM,aAAa;IAC5B,OAAO;AACL,qBAAO,MACL,8BAA8B,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC,EAAE;IAExE;AAEA,UAAM,iBAIF;MACF,SAAS;MACT,QAAQ,QAAQ;;AAElB,QAEI,QAGA,WAAW,uBAAuB,MACpC;AACA,qBAAe,aAAa;IAC9B;AAEA,UAAM,aAAa,MAAM,KAAK,QAAQ,KAAK,YAAY,OACrD,aACA,cAAc;AAGhB,QAAI,eAAO,kBAAkB;AAC3B,qBAAO,MAAM,mBAAmB;IAClC,OAAO;AACL,qBAAO,MAAM,sBAAsB,KAAK,UAAU,YAAY,MAAM,CAAC,CAAC,EAAE;IAC1E;AACA,WAAO;EACT;;AAGF,SAASD,mBACP,YAAgC;AAMhC,MAAI,eAAe,QAAQ;AAIzB,WAAO;EACT;AAEA,MAAI,WAAW,SAAS,eAAe;AACrC,WAAO;MACL,MAAM;MACN,aAAa;QACX,MAAM,WAAW;QACjB,QAAQ,WAAW;QACnB,QAAQ,WAAW;;;EAGzB;AAEA,SAAO,EAAE,MAAM,cAAa;AAC9B;AAEA,SAAS,gBACP,OAAsB;AAEtB,SAAO;IACL,UAAU;IACV,cAAc,MAAM;IACpB,eAAe,MAAM;IACrB,cAAc,MAAM;IACpB,sBAAsB;MACpB,eAAe,MAAM,uBAAuB,iBAAiB;;IAE/D,uBAAuB;MACrB,kBAAkB,MAAM,2BAA2B,oBAAoB;;;AAG7E;;;AftkBM,IAAO,iBAAP,MAAqB;EACzB;EACA;EACA;EACA;EACA;EACA,cAAc,oBAAI,IAAG;EACrB;EAEA,YAAY,UAAiC,CAAA,GAAE;AAC7C,SAAK,WAAW;AAChB,QAAI,KAAK,SAAS,cAAc;AAC9B,UAAI,KAAK,SAAS,QAAQ;AACxB,cAAM,IAAI,MAAM,6CAA6C;MAC/D;AACA,UAAI,KAAK,SAAS,SAAS;AACzB,cAAM,IAAI,MAAM,8CAA8C;MAChE;AACA,UAAI,KAAK,SAAS,kBAAkB;AAClC,cAAM,IAAI,MACR,uDAAuD;MAE3D;AACA,WAAK,UAAU,KAAK,SAAS;IAC/B;AACA,SAAK,gBAAgB,KAAK,SAAS;AACnC,SAAK,yBAAyB,KAAK,SAAS;AAC5C,SAAK,oBAAoB,KAAK,SAAS;AACvC,SAAK,iCACH,KAAK,SAAS,iCAAiC;EACnD;;;;;EAMA,aAAU;AAER,QAAI,CAAC,KAAK,SAAS;AACjB,WAAK;MAEF,uBAAsB;MAEvB,IAAIE,QAAO;QACT,QAAQ,KAAK,SAAS,UAAU,oBAAmB;QACnD,SAAS,KAAK,SAAS;QACvB,cAAc,KAAK,SAAS;QAC5B,SAAS,KAAK,SAAS;OACxB;IACL;AACA,WAAO,KAAK;EACd;EAEA,sCAAsC,QAAc;AAClD,QAAI,OAAO,KAAK,sBAAsB,aAAa;AACjD,aAAO,KAAK;IACd;AAGA,QAAI,KAAK,SAAS,gBAAgB,KAAK,SAAS,SAAS;AACvD,aAAO;IACT;AAEA,UAAM,gBAAgB,uBAAsB;AAC5C,QAAI,iBAAiB,WAAW,eAAe;AAC7C,aAAO;IACT;AAEA,WAAO,iCAAgC;EACzC;EAEA,MAAM,SAAS,WAA8B;AAC3C,UAAM,QAAQ,aAAa,gBAAe;AAC1C,UAAM,eAAe,KAAK,iBAAiB,4BAA2B;AACtE,UAAM,wBACJ,KAAK,0BAA0B,qCAAoC;AACrE,UAAM,0BAA0B,EAC9B,gBACA,yBACA,CAAC,KAAK;AAER,UAAM,WAAW,KAAK,UAAU;MAC9B;MACA;MACA;KACD;AAED,QAAI,yBAAyB;AAC3B,YAAM,cAAc,KAAK,YAAY,IAAI,QAAQ;AACjD,UAAI,aAAa;AACf,eAAO;MACT;IACF;AAEA,QAAI;AAEJ,QAAI,cAAc;AAChB,YAAM,SAAS,KAAK,WAAU;AAC9B,sBAAgB,wBACZ,IAAI,uBAAuB,QAAQ,OAAO;QACxC,kBACE,KAAK,sCAAsC,MAAM;QACnD,iBAAiB;QACjB,kBAAkB,KAAK,SAAS;OACjC,IACD,IAAI,qBAAqB,QAAQ,KAAK;IAC5C,OAAO;AACL,sBAAgB,IAAI,2BAA2B,KAAK,WAAU,GAAI,OAAO;QACvE,yBAAyB,KAAK,SAAS;OACxC;IACH;AAEA,QAAI,yBAAyB;AAC3B,WAAK,YAAY,IAAI,UAAU,aAAa;IAC9C;AACA,WAAO;EACT;;;;EAKA,MAAM,QAAK;AACT,UAAM,eAAe,MAAM,KAAK,IAAI,IAAI,KAAK,YAAY,OAAM,CAAE,CAAC;AAClE,SAAK,YAAY,MAAK;AAEtB,UAAM,cAAyB,CAAA;AAC/B,UAAM,QAAQ,IACZ,aAAa,IAAI,OAAO,UAAS;AAC/B,YAAM,aAAc,MACjB;AACH,UAAI,OAAO,eAAe,YAAY;AACpC;MACF;AACA,UAAI;AACF,cAAM,WAAW,KAAK,KAAK;MAC7B,SAAS,OAAO;AACd,oBAAY,KAAK,KAAK;MACxB;IACF,CAAC,CAAC;AAGJ,QAAI,YAAY,WAAW,GAAG;AAC5B,YAAM,YAAY,CAAC;IACrB;AACA,QAAI,YAAY,SAAS,GAAG;AAC1B,YAAM,QAAQ,IAAI,MAAM,iCAAiC;AACxD,YAAyC,SAAS;AACnD,YAAM;IACR;EACF;;;;AgB9JF,IAAM,iCAAiC;AACvC,IAAM,qCAAqC;AAC3C,IAAM,0CAA0C;AAEhD,eAAe,eACb,SACA,QAAoB;AAEpB,MAAI,QAAQ,SAAS;AACnB,WAAO;EACT;AAEA,SAAO,IAAI,QAAQ,CAAC,YAAW;AAC7B,UAAM,UAAU,WAAW,MAAK;AAC9B,cAAO;AACP,cAAQ,IAAI;IACd,GAAG,OAAO;AAEV,UAAM,UAAU,MAAK;AACnB,mBAAa,OAAO;AACpB,cAAQ,oBAAoB,SAAS,OAAO;IAC9C;AACA,UAAM,UAAU,MAAK;AACnB,cAAO;AACP,cAAQ,KAAK;IACf;AAEA,YAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAI,CAAE;EAC3D,CAAC;AACH;AACA,IAAM,iBAAiB,OAAO,sCAAsC;AACpE,IAAM,cAAc,IAAI,YAAW;AAEnC,SAASC,UAAS,OAAc;AAC9B,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,cAAc,OAAc;AACnC,MAAI,CAACA,UAAS,KAAK,GAAG;AACpB,WAAO;EACT;AAEA,QAAM,YAAY,OAAO,eAAe,KAAK;AAC7C,SAAO,cAAc,OAAO,aAAa,cAAc;AACzD;AAEA,SAAS,UAAU,OAAa;AAC9B,MAAI;AACF,WAAO,OAAQ,MAA+B,WAAW;EAC3D,QAAQ;AACN,WAAO;EACT;AACF;AAEA,SAAS,qBACP,UAAiC;AAEjC,SAAO,SAAS,SAAS;AAC3B;AAEA,SAAS,sBAAsB,OAAc;AAC3C,SAAOA,UAAS,KAAK;AACvB;AAEA,SAAS,mBAAmB,OAAc;AACxC,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK;AAC3D;AAEA,SAAS,mBAAmB,OAAc;AACxC,MAAI;AACF,UAAM,aAAa,KAAK,UAAU,KAAK;AACvC,QAAI,eAAe,QAAW;AAC5B,aAAO;IACT;AACA,QAAI,OAAO,eAAe,UAAU;AAClC,aAAO,iCAAiC;IAC1C;AACA,WAAO,YAAY,OAAO,UAAU,EAAE;EACxC,QAAQ;AACN,WAAO,iCAAiC;EAC1C;AACF;AAEA,SAAS,2BAA2B,OAAe,UAAgB;AACjE,QAAM,YAAY,mBAAmB,KAAK;AAC1C,MAAI,aAAa,UAAU;AACzB,WAAO;EACT;AAEA,QAAM,aAAa,mBACjB,uCAAuC;AAEzC,MAAI,aAAa,UAAU;AACzB,WAAO;EACT;AACA,MAAI,eAAe,UAAU;AAC3B,WAAO;EACT;AAEA,QAAM,sBAAsB,WAAW;AACvC,MAAI,iBAAiB,KAAK,MACvB,MAAM,SAAS,sBAAuB,KAAK,IAAI,WAAW,CAAC,CAAC;AAE/D,mBAAiB,KAAK,IAAI,GAAG,KAAK,IAAI,MAAM,QAAQ,cAAc,CAAC;AAEnE,MAAI,OACF,MAAM,MAAM,GAAG,cAAc,IAAI;AACnC,MAAI,WAAW,mBAAmB,IAAI;AACtC,SAAO,WAAW,YAAY,iBAAiB,GAAG;AAChD,UAAM,iBAAiB,WAAW,YAAY,KAAK,IAAI,UAAU,CAAC;AAClE,UAAM,YAAY,KAAK,IACrB,GACA,KAAK,MAAM,iBAAiB,aAAa,IAAI,CAAC;AAEhD,qBAAiB,KAAK,IAAI,GAAG,iBAAiB,SAAS;AACvD,WACE,MAAM,MAAM,GAAG,cAAc,IAAI;AACnC,eAAW,mBAAmB,IAAI;EACpC;AAEA,SAAO;AACT;AAEA,SAAS,4BACP,OACA,OAAoB,oBAAI,IAAG,GAC3B,QAAgB,GAAC;AAEjB,MAAI,SAAS,oCAAoC;AAC/C,WAAO;EACT;AAEA,MACE,UAAU,QACV,OAAO,UAAU,YACjB,OAAO,UAAU,WACjB;AACA,WAAO;EACT;AAEA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;EAC1C;AAEA,MAAI,SAAS,OAAO,UAAU,YAAY,UAAU,KAAK,GAAG;AAC1D,QAAI,KAAK,IAAI,KAAK,GAAG;AACnB,aAAO;IACT;AAEA,SAAK,IAAI,KAAK;AACd,QAAI;AACF,aAAO,4BAA4B,MAAM,OAAM,GAAI,MAAM,QAAQ,CAAC;IACpE,QAAQ;AACN,aAAO;IACT;AACE,WAAK,OAAO,KAAK;IACnB;EACF;AAEA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,QAAI,KAAK,IAAI,KAAK,GAAG;AACnB,aAAO;IACT;AAEA,SAAK,IAAI,KAAK;AACd,UAAM,YAAmC,CAAA;AACzC,QAAI;AACF,iBAAW,eAAe,OAAO;AAC/B,cAAM,kBAAkB,4BACtB,aACA,MACA,QAAQ,CAAC;AAEX,kBAAU,KACR,oBAAoB,iBAAiB,OAAO,eAAe;MAE/D;IACF;AACE,WAAK,OAAO,KAAK;IACnB;AAEA,WAAO;EACT;AAEA,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,QAAI,KAAK,IAAI,KAAK,GAAG;AACnB,aAAO;IACT;AAEA,SAAK,IAAI,KAAK;AACd,UAAM,YAAiD,CAAA;AACvD,QAAI;AACF,iBAAW,CAAC,KAAK,WAAW,KAAK,OAAO,QAAQ,KAAK,GAAG;AACtD,cAAM,kBAAkB,4BACtB,aACA,MACA,QAAQ,CAAC;AAEX,YAAI,oBAAoB,gBAAgB;AACtC,oBAAU,GAAG,IAAI;QACnB;MACF;IACF,QAAQ;AACN,aAAO;IACT;AACE,WAAK,OAAO,KAAK;IACnB;AAEA,WAAO;EACT;AAEA,SAAO;AACT;AAEA,SAAS,iBAAiB,OAAc;AACtC,MAAI,UAAU,MAAM;AAClB,WAAO;EACT;AAEA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,OAAO;EAChB;AAEA,MAAI;AACF,WAAO,MAAM,aAAa,QAAQ;EACpC,QAAQ;AACN,WAAO;EACT;AACF;AAEA,SAAS,iBAAiB,OAAc;AACtC,QAAM,WAAW,iBAAiB,KAAK;AACvC,MAAI,UAAU,IAAI,QAAQ;AAE1B,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,cAAU,IAAI,QAAQ,QAAQ,MAAM,MAAM;EAC5C,WAAW,YAAY,OAAO,KAAK,GAAG;AACpC,cAAU,IAAI,QAAQ,UAAU,MAAM,UAAU;EAClD,WAAW,iBAAiB,aAAa;AACvC,cAAU,IAAI,QAAQ,UAAU,MAAM,UAAU;EAClD,WAAW,iBAAiB,OAAO,iBAAiB,KAAK;AACvD,cAAU,IAAI,QAAQ,QAAQ,MAAM,IAAI;EAC1C,WAAW,cAAc,KAAK,GAAG;AAC/B,cAAU,IAAI,QAAQ,QAAQ,OAAO,KAAK,KAAK,EAAE,MAAM;EACzD;AAEA,MAAI,gBAAqD;IACvD,WAAW;IACX,eAAe;IACf;;AAGF,MAAI,mBAAmB,aAAa,KAAK,gCAAgC;AACvE,WAAO;EACT;AAEA,QAAM,gBAAgB,KAAK,IACzB,GACA,iCACE,mBAAmB;IACjB,WAAW;IACX,eAAe;IACf,SAAS;GACV,CAAC;AAEN,kBAAgB;IACd,WAAW;IACX,eAAe;IACf,SAAS,2BAA2B,SAAS,aAAa;;AAG5D,MAAI,mBAAmB,aAAa,KAAK,gCAAgC;AACvE,WAAO;EACT;AAEA,QAAM,aAAa,KAAK,IACtB,GACA,iCACE,mBAAmB;IACjB,WAAW;IACX,eAAe;IACf,SAAS,cAAc;GACxB,CAAC;AAEN,kBAAgB;IACd,WAAW;IACX,eAAe,2BAA2B,UAAU,UAAU;IAC9D,SAAS,cAAc;;AAGzB,MAAI,mBAAmB,aAAa,KAAK,gCAAgC;AACvE,WAAO;EACT;AAEA,QAAM,qBAAqB,KAAK,IAC9B,GACA,iCACE,mBAAmB;IACjB,WAAW;IACX,eAAe,cAAc;IAC7B,SAAS;GACV,CAAC;AAEN,SAAO;IACL,WAAW;IACX,eAAe,cAAc;IAC7B,SAAS,2BACP,cAAc,SACd,kBAAkB;;AAGxB;AAEA,SAAS,0BACP,OACA,UACA,QAAgB,GAAC;AAEjB,MAAI,SAAS,oCAAoC;AAC/C,WAAO,iBAAiB,KAAK;EAC/B;AAEA,MAAI,mBAAmB,KAAK,KAAK,UAAU;AACzC,WAAO;EACT;AAEA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,2BAA2B,OAAO,QAAQ;EACnD;AAEA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,yBAAyB,OAAO,UAAU,QAAQ,CAAC;EAC5D;AAEA,MAAI,cAAc,KAAK,GAAG;AACxB,WAAO,4BAA4B,OAAO,UAAU,QAAQ,CAAC;EAC/D;AAEA,SAAO,iBAAiB,KAAK;AAC/B;AAEA,SAAS,4BACP,OACA,UACA,QAAgB,GAAC;AAEjB,QAAM,YAAY,EAAE,GAAG,MAAK;AAC5B,MAAI,cAAc,mBAAmB,SAAS;AAE9C,SAAO,OAAO,KAAK,SAAS,EAAE,SAAS,KAAK,cAAc,UAAU;AAClE,QAAI;AACJ,QAAI,mBAAmB;AAEvB,eAAW,CAAC,KAAKC,MAAK,KAAK,OAAO,QAAQ,SAAS,GAAG;AACpD,YAAM,YAAY,mBAAmBA,MAAK;AAC1C,UAAI,YAAY,kBAAkB;AAChC,qBAAa;AACb,2BAAmB;MACrB;IACF;AAEA,QAAI,eAAe,QAAW;AAC5B;IACF;AAEA,UAAM,QAAQ,UAAU,UAAU;AAClC,UAAM,cAAc,KAAK,IACvB,GACA,YAAY,cAAc,iBAAiB;AAE7C,QAAI,gBAAgB,GAAG;AACrB,aAAO,UAAU,UAAU;AAC3B,oBAAc,mBAAmB,SAAS;AAC1C;IACF;AAEA,UAAM,iBAAiB,0BACrB,OACA,aACA,QAAQ,CAAC;AAEX,UAAM,qBAAqB,mBAAmB,cAAc;AAE5D,QAAI,mBAAmB,SAAS,sBAAsB,kBAAkB;AACtE,aAAO,UAAU,UAAU;IAC7B,OAAO;AACL,gBAAU,UAAU,IAAI;IAC1B;AAEA,kBAAc,mBAAmB,SAAS;EAC5C;AAEA,SAAO;AACT;AAEA,SAAS,yBACP,OACA,UACA,QAAgB,GAAC;AAEjB,QAAM,YAAY,CAAC,GAAG,KAAK;AAC3B,MAAI,cAAc,mBAAmB,SAAS;AAE9C,SAAO,UAAU,SAAS,KAAK,cAAc,UAAU;AACrD,QAAI,eAAe;AACnB,QAAI,mBAAmB;AAEvB,aAAS,QAAQ,GAAG,QAAQ,UAAU,QAAQ,SAAS,GAAG;AACxD,YAAM,YAAY,mBAAmB,UAAU,KAAK,CAAC;AACrD,UAAI,YAAY,kBAAkB;AAChC,uBAAe;AACf,2BAAmB;MACrB;IACF;AAEA,UAAM,QAAQ,UAAU,YAAY;AACpC,UAAM,cAAc,KAAK,IACvB,GACA,YAAY,cAAc,iBAAiB;AAE7C,QAAI,gBAAgB,GAAG;AACrB,gBAAU,OAAO,cAAc,CAAC;AAChC,oBAAc,mBAAmB,SAAS;AAC1C;IACF;AAEA,UAAM,iBAAiB,0BACrB,OACA,aACA,QAAQ,CAAC;AAEX,UAAM,qBAAqB,mBAAmB,cAAc;AAE5D,QAAI,mBAAmB,SAAS,sBAAsB,kBAAkB;AACtE,gBAAU,OAAO,cAAc,CAAC;IAClC,OAAO;AACL,gBAAU,YAAY,IAAI;IAC5B;AAEA,kBAAc,mBAAmB,SAAS;EAC5C;AAEA,SAAO;AACT;AAEA,SAAS,yBAAyB,OAAgB,UAAgB;AAChE,QAAM,QAAkD,CAAC,EAAE,OAAO,OAAO,EAAC,CAAE;AAC5E,QAAM,OAAO,oBAAI,IAAG;AAEpB,SAAO,MAAM,SAAS,GAAG;AACvB,UAAM,UAAU,MAAM,IAAG;AACzB,QAAI,CAAC,SAAS;AACZ;IACF;AAEA,QAAI,QAAQ,SAAS,UAAU;AAC7B,aAAO;IACT;AAEA,QAAI,CAAC,QAAQ,SAAS,OAAO,QAAQ,UAAU,UAAU;AACvD;IACF;AAEA,QAAI,KAAK,IAAI,QAAQ,KAAK,GAAG;AAC3B;IACF;AACA,SAAK,IAAI,QAAQ,KAAK;AAEtB,QAAI;AACF,UAAI,UAAU,QAAQ,KAAK,GAAG;AAC5B,cAAM,KAAK;UACT,OAAO,QAAQ,MAAM,OAAM;UAC3B,OAAO,QAAQ,QAAQ;SACxB;AACD;MACF;AAEA,YAAM,eAAe,MAAM,QAAQ,QAAQ,KAAK,IAC5C,QAAQ,QACR,OAAO,OAAO,QAAQ,KAAK;AAC/B,iBAAW,eAAe,cAAc;AACtC,cAAM,KAAK;UACT,OAAO;UACP,OAAO,QAAQ,QAAQ;SACxB;MACH;IACF,QAAQ;AACN,aAAO;IACT;EACF;AAEA,SAAO;AACT;AAEA,SAAS,uBAAuB,OAAc;AAC5C,MAAI,mBAAmB,KAAK,KAAK,gCAAgC;AAC/D,WAAO;EACT;AAEA,MAAI,yBAAyB,OAAO,kCAAkC,GAAG;AACvE,WAAO,iBAAiB,KAAK;EAC/B;AAEA,MAAI;AACF,UAAM,iBAAiB,4BAA4B,KAAK;AACxD,QAAI,mBAAmB,gBAAgB;AACrC,aAAO,iBAAiB,KAAK;IAC/B;AAEA,WAAO,0BACL,gBACA,8BAA8B;EAElC,QAAQ;AAGN,WAAO,iBAAiB,KAAK;EAC/B;AACF;AAEA,SAAS,kBACP,OAA8B;AAE9B,QAAM,QAAiC,CAAA;AAEvC,aAAW,OAAO,OAAO,KAAK,KAAK,GAAG;AACpC,QAAI;AACF,YAAM,GAAG,IAAI,MAAM,GAAG;IACxB,QAAQ;IAER;EACF;AAEA,SAAO;AACT;AASA,SAAS,uCACP,OAA0B;AAE1B,QAAM,cAAc,MAAM;AAC1B,QAAM,eAAe,MAAM;AAE3B,MAAI,CAAC,mBAAmB,WAAW,KAAK,CAAC,mBAAmB,YAAY,GAAG;AACzE,WAAO;EACT;AAEA,QAAM,UAA+C,CAAA;AACrD,MAAI,cAAc,MAAM,OAAO,GAAG;AAChC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,OAAO,GAAG;AACxD,YAAM,iBAAiB,4BAA4B,KAAK;AACxD,UAAI,mBAAmB,gBAAgB;AACrC,gBAAQ,GAAG,IAAI;MACjB;IACF;EACF;AAEA,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,QACE,QAAQ,kBACR,QAAQ,mBACR,QAAQ,aACR,UAAU,QACV;AACA;IACF;AACA,UAAM,iBAAiB,4BAA4B,KAAK;AACxD,QAAI,mBAAmB,gBAAgB;AACrC,cAAQ,GAAG,IAAI;IACjB;EACF;AAEA,SAAO;IACL,cAAc;IACd,eAAe;IACf,GAAI,OAAO,KAAK,OAAO,EAAE,SAAS,IAAI,EAAE,QAAO,IAAK,CAAA;;AAExD;AAOA,SAAS,gCACP,UAAiC;AAEjC,MAAI,oBAAoB;AACxB,MAAI,YAAY;AAEhB,aAAW,aAAa,CAAC,SAAS,QAAQ,GAAG;AAC3C,QAAI,EAAE,aAAa,WAAW;AAC5B;IACF;AAEA,QAAI;AACJ,QAAI;AACF,mBAAa,SAAS,SAAS;IACjC,QAAQ;AACN,UAAI,CAAC,WAAW;AACd,4BAAoB,kBAAkB,QAAQ;AAC9C,oBAAY;MACd;AAEA,aAAO,kBAAkB,SAAS;AAClC;IACF;AAEA,UAAM,iBAAiB,uBAAuB,UAAU;AACxD,QAAI,mBAAmB,YAAY;AACjC;IACF;AAEA,QAAI,CAAC,WAAW;AACd,0BAAoB,kBAAkB,QAAQ;AAC9C,kBAAY;IACd;AACA,sBAAkB,SAAS,IAAI;EACjC;AAEA,MACE,CAAC,qBAAqB,QAAQ,KAC9B,CAAC,sBAAsB,SAAS,KAAK,GACrC;AACA,WAAO,YAAY,oBAAoB;EACzC;AAEA,QAAM,iBAAiB,uCAAuC,SAAS,KAAK;AAC5E,MAAI,CAAC,gBAAgB;AACnB,QAAI,CAAC,WAAW;AACd,0BAAoB,kBAAkB,QAAQ;AAC9C,kBAAY;IACd;AAEA,WAAO,kBAAkB;AACzB,WAAO;EACT;AAEA,MAAI,mBAAmB,SAAS,OAAO;AACrC,WAAO,YAAY,oBAAoB;EACzC;AAEA,MAAI,CAAC,WAAW;AACd,wBAAoB,kBAAkB,QAAQ;EAChD;AACA,oBAAkB,QAAQ;AAC1B,SAAO;AACT;AAEA,SAAS,mCACP,aAAoC;AAEpC,MAAI,YAAY,WAAW,gBAAgB,CAACC,UAAS,YAAY,SAAS,GAAG;AAC3E,WAAO;EACT;AAEA,SAAO;IACL,GAAG;IACH,WAAW,gCAAgC,YAAY,SAAS;;AAEpE;AAKM,IAAO,wBAAP,MAA4B;EAChC;EAEA,YAAY,UAAiD,CAAA,GAAE;AAC7D,SAAK,WAAW;MACd,QAAQ,QAAQ,UAAU;MAC1B,cAAc,QAAQ,gBAAgB;MACtC,SAAS,QAAQ,WAAW;MAC5B,UAAU,QAAQ,YAAY;MAC9B,YAAY,QAAQ,cAAc;MAClC,WAAW,QAAQ,aAAa;MAChC,UAAU,QAAQ,YAAY;;EAElC;EAEA,MAAM,OACJ,OACA,QAAoB;AAEpB,UAAM,gBAAgB,KAAK,SAAS,UAAU,uBAAsB;AACpE,UAAM,aAAa,oBAAI,IAAG;AAE1B,eAAW,QAAQ,OAAO;AACxB,YAAM,SAAU,KAA4C;AAC5D,YAAM,OAAO,WAAW,IAAI,MAAM,KAAK,CAAA;AACvC,WAAK,KAAK,IAAI;AACd,iBAAW,IAAI,QAAQ,IAAI;IAC7B;AAEA,eAAW,CAAC,KAAK,YAAY,KAAK,WAAW,QAAO,GAAI;AAEtD,YAAM,SAAS,OAAO;AACtB,UAAI,CAAC,QAAQ;AACX,uBAAO,MACL,0EAA0E;AAE5E;MACF;AAEA,YAAM,eAAe,aAClB,IAAI,CAAC,UAAU,MAAM,OAAM,CAAE,EAC7B,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,EACvB,IAAI,CAAC,SACJA,UAAS,IAAI,IAAI,mCAAmC,IAAI,IAAI,IAAI;AAEpE,YAAM,UAAU,EAAE,MAAM,aAAY;AAEpC,UAAI,WAAW;AACf,UAAI,QAAQ,KAAK,SAAS;AAE1B,aAAO,WAAW,KAAK,SAAS,YAAY;AAC1C,YAAI;AACF,gBAAM,WAAW,MAAM,MAAM,KAAK,SAAS,UAAU;YACnD,QAAQ;YACR,SAAS;cACP,gBAAgB;cAChB,eAAe,UAAU,MAAM;cAC/B,eAAe;cACf,GAAG;;YAEL,MAAM,KAAK,UAAU,OAAO;YAC5B;WACD;AAED,cAAI,SAAS,IAAI;AACf,2BAAO,MAAM,YAAY,QAAQ,KAAK,MAAM,QAAQ;AACpD;UACF;AAEA,cAAI,SAAS,UAAU,OAAO,SAAS,SAAS,KAAK;AACnD,2BAAO,MACL,oCACE,SAAS,MACX,KAAK,MAAM,SAAS,KAAI,CAAE,EAAE;AAE9B;UACF;AAEA,yBAAO,KACL,qCAAqC,SAAS,MAAM,aAAa;QAErE,SAAS,OAAY;AACnB,yBAAO,MAAM,yCAAyC,KAAK;QAC7D;AAEA,YAAI,QAAQ,SAAS;AACnB,yBAAO,MAAM,0BAA0B;AACvC;QACF;AAEA;AACA,YAAI,YAAY,KAAK,SAAS,YAAY;AACxC;QACF;AAEA,cAAM,YAAY,QAAQ,KAAK,OAAM,IAAK,MAAM;AAChD,cAAM,iBAAiB,MAAM,eAAe,WAAW,MAAM;AAC7D,YAAI,CAAC,gBAAgB;AACnB,yBAAO,MAAM,0BAA0B;AACvC;QACF;AACA,gBAAQ,KAAK,IAAI,QAAQ,GAAG,KAAK,SAAS,QAAQ;MACpD;AAEA,UAAI,YAAY,KAAK,SAAS,YAAY;AACxC,uBAAO,MACL,0CACE,KAAK,SAAS,UAChB,WAAW;MAEf;IACF;EACF;;AAOI,SAAU,kCAA+B;AAC7C,QAAM,WAAW,IAAI,sBAAqB;AAC1C,QAAM,YAAY,IAAI,oBAAoB,QAAQ;AAClD,qBAAmB,CAAC,SAAS,CAAC;AAChC;;;OC3zBOC,aAAY;;;ACOZ,IAAM,qBAAoC,OAAO,oBAAoB;;;ADe5E,eAAsB,gCACpB,QAAqB;AAErB,QAAM,iBAAiB,SAAU,SAAoB,cAAc,CAAA,CAAE;AACrE,QAAM,WAAW,MAAM,eAAe,cAAc,OAAO,EAAE,OAAO,CAAA,EAAE,CAAE;AACxE,SAAO,SAAS;AAClB;AAEM,IAAO,6BAAP,MAAiC;;EAI5B,CAAC,kBAAkB,IAAI;EAEhC;EACA;EAEA,YAAY,UAA6C,CAAA,GAAE;AACzD,SAAK,UAAU,cAAc,OAAO;AACpC,SAAK,kBAAkB,QAAQ;EACjC;EAEA,IAAI,YAAS;AACX,WAAO,KAAK;EACd;EAEA,MAAM,eAAY;AAChB,QAAI,CAAC,KAAK,iBAAiB;AACzB,WAAK,kBAAkB,MAAM,gCAC3B,KAAK,OAAO;IAEhB;AAEA,WAAO,KAAK;EACd;EAEA,MAAM,SAAS,OAAc;AAC3B,UAAM,iBAAiB,MAAM,KAAK,aAAY;AAE9C,UAAM,eAAe,CAAC,SAA+C;AACnE,UAAI,KAAK,SAAS,aAAa,KAAK,SAAS,UAAU;AACrD,cAAM,UAAU;AAChB,eAAO;UACL;YACE,IAAI,KAAK;YACT,MAAM;YACN,MAAM;YACN,SAAS,8BAA8B,QAAQ,OAAO;;;MAG5D;AAEA,UAAI,KAAK,SAAS,aAAa,KAAK,SAAS,QAAQ;AACnD,cAAM,UAAU;AAChB,eAAO;UACL;YACE,IAAI,KAAK;YACT,MAAM;YACN,MAAM;YACN,UAAU,QAAQ,WAAW,CAAA,GAC1B,IAAI,CAAC,MAAK;AACT,kBAAI,EAAE,SAAS,cAAc;AAC3B,uBAAO,EAAE,MAAM,cAAc,MAAM,EAAE,KAAI;cAC3C,WAAW,EAAE,SAAS,eAAe;AACnC,oBAAI,EAAE,WAAW;AACf,yBAAO,EAAE,MAAM,eAAe,OAAO,EAAE,UAAS;gBAClD,WAAW,EAAE,SAAS;AACpB,yBAAO,EAAE,MAAM,eAAe,OAAO,EAAE,IAAI,EAAE,QAAO,EAAE;gBACxD;cACF,WAAW,EAAE,SAAS,cAAc;AAClC,oBAAI,EAAE,WAAW;AACf,wBAAM,WAA+B;oBACnC,MAAM;oBACN,MAAM,EAAE;;AAEV,sBAAI,EAAE,UAAU;AACd,6BAAS,WAAW,EAAE;kBACxB;AACA,yBAAO;gBACT;AACA,oBAAI,EAAE,UAAU;AACd,wBAAM,WAA+B;oBACnC,MAAM;oBACN,MAAM,EAAE;;AAEV,sBAAI,EAAE,UAAU;AACd,6BAAS,WAAW,EAAE;kBACxB;AACA,yBAAO;gBACT,WAAW,EAAE,SAAS;AACpB,wBAAM,WAA+B;oBACnC,MAAM;oBACN,MAAM,EAAE,IAAI,EAAE,QAAO;;AAEvB,sBAAI,EAAE,UAAU;AACd,6BAAS,WAAW,EAAE;kBACxB;AACA,yBAAO;gBACT;cACF;AAEA,qBAAO;YACT,CAAC,EACA,OAAO,CAAC,MAAM,MAAM,IAAI;;;MAGjC;AAEA,YAAM,cAAe,KAClB;AAEH,UAAI,0BAA0B,WAAW,GAAG;AAC1C,eAAO,oBAAoB,WAAW;MACxC;AAEA,aAAO,oBAAoB,CAAC,IAA2C,CAAC;IAC1E;AAEA,QAAI,UAAU,QAAW;AACvB,YAAM,QAA0B,CAAA;AAChC,YAAMC,YAAW,KAAK,QAAQ,cAAc,MAAM,KAAK,gBAAgB;QACrE,OAAO;OACR;AACD,uBAAiB,QAAQA,WAAU;AACjC,cAAM,KAAK,GAAG,aAAa,IAAI,CAAC;MAClC;AACA,aAAO;IACT;AAEA,QAAI,SAAS,GAAG;AACd,aAAO,CAAA;IACT;AAEA,UAAM,aAAiC,CAAA;AACvC,QAAI,QAAQ;AACZ,UAAM,WAAW,KAAK,QAAQ,cAAc,MAAM,KAAK,gBAAgB;MACrE;MACA,OAAO;KACR;AAED,qBAAiB,QAAQ,UAAU;AACjC,YAAM,QAAQ,aAAa,IAAI;AAC/B,UAAI,CAAC,MAAM,QAAQ;AACjB;MACF;AAEA,iBAAW,KAAK,KAAK;AACrB,eAAS,MAAM;AAEf,UAAI,SAAS,OAAO;AAClB;MACF;IACF;AAGA,UAAM,eAAiC,CAAA;AACvC,aAAS,QAAQ,WAAW,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG;AAC9D,mBAAa,KAAK,GAAG,WAAW,KAAK,CAAC;IACxC;AAEA,QAAI,aAAa,SAAS,OAAO;AAC/B,mBAAa,OAAO,GAAG,aAAa,SAAS,KAAK;IACpD;AAEA,WAAO;EACT;EAEA,gCAAgC,MAAoB;AAClD,WAAO,6BAA6B,IAAI;EAC1C;EAEA,yCAAsC;AACpC,WAAO;EACT;EAEA,MAAM,SAAS,OAAuB;AACpC,QAAI,CAAC,MAAM,QAAQ;AACjB;IACF;AAEA,UAAM,iBAAiB,MAAM,KAAK,aAAY;AAC9C,UAAM,kBAAkB,6CAA6C,KAAK;AAC1E,UAAM,iBAAiB,qCACrB,cAAc,eAAe,CAAC;AAEhC,QAAI,CAAC,eAAe,QAAQ;AAC1B;IACF;AACA,UAAM,KAAK,QAAQ,cAAc,MAAM,OAAO,gBAAgB;MAC5D,OAAO;KACR;EACH;EAEA,MAAM,UAAO;AACX,UAAM,iBAAiB,MAAM,KAAK,aAAY;AAC9C,UAAM,CAAC,MAAM,IAAI,MAAM,KAAK,SAAS,CAAC;AACtC,QAAI,CAAC,QAAQ;AACX,aAAO;IACT;AAEA,UAAM,SAAU,OAA2B;AAC3C,QAAI,QAAQ;AACV,YAAM,KAAK,QAAQ,cAAc,MAAM,OAAO,QAAQ;QACpD,iBAAiB;OAClB;IACH;AAEA,WAAO;EACT;EAEA,MAAM,eAAY;AAChB,QAAI,CAAC,KAAK,iBAAiB;AACzB;IACF;AAEA,UAAM,KAAK,QAAQ,cAAc,OAAO,KAAK,eAAe;AAC5D,SAAK,kBAAkB;EACzB;;AAOF,SAAS,6CACP,OAAuB;AAEvB,SAAO,MAAM,IAAI,CAAC,SAAQ;AACxB,QAAI,MAAM,QAAQ,IAAI,KAAK,SAAS,QAAQ,OAAO,SAAS,UAAU;AACpE,aAAO;IACT;AAEA,UAAM,OAAO,EAAE,GAAI,KAAgC;AACnD,UAAM,eAAgB,KAAoC;AAE1D,QACE,gBACA,OAAO,iBAAiB,YACxB,CAAC,MAAM,QAAQ,YAAY,GAC3B;AACA,YAAM,QAAQ;AACd,YAAM,EAAE,OAAO,QAAQ,GAAG,OAAM,IAAK;AACpC,WAAiC,eAChC,OAAO,KAAK,MAAM,EAAE,SAAS,IAAI,SAAS;IAC9C;AACA,WAAO;EACT,CAAC;AACH;AAEA,SAAS,8BACP,SAA0C;AAE1C,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;EACT;AAEA,MAAI,CAAC,MAAM,QAAQ,OAAO,GAAG;AAC3B,WAAO;EACT;AAEA,SAAO,QACJ,IAAI,CAAC,SACJ,KAAK,SAAS,gBAAgB,KAAK,SAAS,SAAS,KAAK,OAAO,IAAI,EAEtE,OAAO,CAAC,SAAyB,SAAS,IAAI,EAC9C,KAAK,IAAI;AACd;AAEA,SAAS,qCACP,OAA2C;AAE3C,SAAO,MAAM,QAAQ,CAAC,SAAQ;AAC5B,QAAI,MAAM,QAAQ,IAAI,KAAK,SAAS,QAAQ,OAAO,SAAS,UAAU;AACpE,aAAO,CAAC,IAAI;IACd;AACA,UAAM,SAAS;AACf,QAAI,6BAA6B,MAAM,GAAG;AACxC,aAAO,CAAA;IACT;AACA,UAAM,EACJ,cAAc,eACd,eAAe,gBACf,GAAG,KAAI,IACL;AACJ,QAAI,KAAK,SAAS,aAAa;AAC7B,aAAO,KAAK;IACd;AACA,WAAO,CAAC,IAAqD;EAC/D,CAAC;AACH;AAEA,SAAS,6BAA6B,MAA6B;AACjE,SACE,KAAK,SAAS,eACd,OAAO,KAAK,OAAO,YACnB,OAAO,KAAK,sBAAsB;AAEtC;AAEA,SAAS,6BAA6B,MAAoB;AACxD,MAAI,MAAM,QAAQ,IAAI,KAAK,SAAS,QAAQ,OAAO,SAAS,UAAU;AACpE,WAAO;EACT;AAEA,QAAM,SAAS;AACf,MAAI,OAAO,SAAS,aAAa,OAAO,SAAS,aAAa;AAC5D,WAAO;EACT;AAEA,QAAM,EACJ,IAAI,KACJ,cAAc,eACd,eAAe,gBACf,GAAG,KAAI,IACL;AACJ,SAAO;AACT;AAEA,IAAM,sBAAsB,oBAAI,IAAI;EAClC;EACA;EACA;EACA;CACD;AAED,SAAS,SAAS,OAAc;AAC9B,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAGA,SAAS,0BACP,OAAc;AAEd,MAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,GAAG;AAC/C,WAAO;EACT;AAEA,SAAO,MAAM,MAAM,CAAC,UAAS;AAC3B,QAAI,CAAC,SAAS,KAAK,GAAG;AACpB,aAAO;IACT;AACA,UAAM,OAAQ,MAA6B;AAC3C,QAAI,OAAO,SAAS,UAAU;AAC5B,aAAO;IACT;AAEA,QAAI,oBAAoB,IAAI,IAAI,GAAG;AACjC,aAAO;IACT;AAGA,WAAO,CAAC,KAAK,WAAW,QAAQ;EAClC,CAAC;AACH;AAEA,SAAS,cAAc,SAA0C;AAC/D,MAAI,QAAQ,QAAQ;AAClB,WAAO,QAAQ;EACjB;AAEA,SACG,uBAAsB,KACvB,IAAIC,QAAO;IACT,QAAQ,QAAQ,UAAU,oBAAmB;IAC7C,SAAS,QAAQ;IACjB,cAAc,QAAQ;IACtB,SAAS,QAAQ;GAClB;AAEL;;;OEvYOC,aAAY;AAsBnB,IAAM,+BAA+B;AACrC,IAAMC,UAAS,UAAU,iCAAiC;AAuFpD,IAAO,mCAAP,MAAuC;EAKlC,CAAC,kBAAkB,IAAI;EAEf;EACA;EACA;EACA;EACT;EACA;EACS;EAGT;EACA;EAER,YAAY,SAAgD;AAC1D,SAAK,SAASC,eAAc,OAAO;AACnC,QAAI,qCAAqC,QAAQ,iBAAiB,GAAG;AACnE,YAAM,IAAI,UACR,wGAAwG;IAE5G;AACA,SAAK,oBAAoB,QAAQ,qBAAqB,IAAI,cAAa;AACvE,UAAM,SAAS,QAAQ,SAAS,sBAAsB,KAAI;AAE1D,kDAA8C,KAAK;AACnD,SAAK,QAAQ;AAEb,SAAK,iBAAiB,QAAQ,kBAAkB;AAChD,SAAK,0BACH,QAAQ,2BAA2B;AACrC,SAAK,2BAA2B;AAChC,SAAK,eAAe;AACpB,SAAK,YAAY;EACnB;EAEA,MAAM,cACJ,OAAsC,CAAA,GAAE;AAExC,SAAK,aAAa,KAAK,cAAc,KAAK,cAAc;AACxD,QAAI,KAAK,UAAU,QAAW;AAC5B,WAAK,YAAY,KAAK;IACxB;AACA,UAAM,gBAAgB,KAAK,kBAAkB,KAAK;AAClD,UAAM,eAAe,sBAAsB;MACzC;MACA,YAAY,KAAK;MACjB,OAAO,KAAK,SAAS,KAAK;KAC3B;AAED,QAAI,iBAAiB,0BAA0B,CAAC,KAAK,YAAY;AAC/D,YAAM,IAAI,UACR,+IAA+I;IAEnJ;AAEA,UAAM,EAAE,0BAA0B,aAAY,IAC5C,MAAM,KAAK,2BAA0B;AACvC,UAAM,0BACJ,KAAK,UAAU,OACX,OACA,MAAM,KAAK,wBAAwB;MACjC,YAAY,KAAK;MACjB,gBAAgB;MAChB;MACA;KACD;AACP,QAAI,CAAC,yBAAyB;AAC5B,MAAAD,QAAO,MAAM,0BAA0B;QACrC,YAAY,KAAK;QACjB,gBAAgB;OACjB;AACD,aAAO;IACT;AAEA,IAAAA,QAAO,MAAM,qBAAqB;MAChC,YAAY,KAAK;MACjB,OAAO,KAAK;MACZ,gBAAgB;KACjB;AAED,UAAM,iBAAyD;MAC7D,OAAO,KAAK;;AAEd,QAAI,iBAAiB,wBAAwB;AAC3C,qBAAe,uBAAuB,KAAK;IAC7C,OAAO;AACL,qBAAe,QAAQ,cAAc,YAAY;IACnD;AAEA,UAAM,YAAY,MAAM,KAAK,OAAO,UAAU,QAAQ,cAAc;AAEpE,UAAM,cAAc,+BAA+B,UAAU,UAAU,CAAA,CAAE;AACzE,UAAM,gBAAgB,MAAM,KAAK,6BAA4B;AAC7D,UAAM,KAAK,8BAA8B;MACvC;MACA;KACD;AACD,SAAK,2BAA2B,+BAA+B,WAAW;AAC1E,SAAK,eAAe;AAEpB,IAAAA,QAAO,MAAM,oBAAoB;MAC/B,YAAY,KAAK;MACjB,gBAAgB;MAChB,iBAAiB,YAAY;MAC7B,gBAAgB,KAAK,yBAAyB;KAC/C;AAED,WAAO;MACL,OAAO,eAAe,UAAU,KAAK;;EAEzC;EAEA,MAAM,eAAY;AAChB,WAAO,KAAK,kBAAkB,aAAY;EAC5C;EAEA,MAAM,SAAS,OAAc;AAC3B,WAAO,KAAK,kBAAkB,SAAS,KAAK;EAC9C;EAEA,MAAM,SAAS,OAAuB;AACpC,QAAI,MAAM,WAAW,GAAG;AACtB;IACF;AAEA,UAAM,KAAK,kBAAkB,SAAS,KAAK;AAC3C,QAAI,KAAK,0BAA0B;AACjC,YAAM,aAAa,+BAA+B,KAAK;AACvD,UAAI,WAAW,SAAS,GAAG;AACzB,aAAK,2BAA2B;UAC9B,GAAG,KAAK;UACR,GAAG;;MAEP;IACF;AACA,QAAI,KAAK,cAAc;AACrB,WAAK,eAAe,CAAC,GAAG,KAAK,cAAc,GAAG,KAAK;IACrD;EACF;EAEA,MAAM,UAAO;AACX,UAAM,SAAS,MAAM,KAAK,kBAAkB,QAAO;AACnD,QAAI,CAAC,QAAQ;AACX,aAAO;IACT;AACA,QAAI,KAAK,cAAc;AACrB,YAAM,QAAQ,KAAK,aAAa,YAAY,MAAM;AAClD,UAAI,SAAS,GAAG;AACd,aAAK,aAAa,OAAO,OAAO,CAAC;MACnC,OAAO;AACL,aAAK,eAAe,MAAM,KAAK,kBAAkB,SAAQ;MAC3D;IACF;AACA,QAAI,KAAK,0BAA0B;AACjC,YAAM,cAAc,+BAA+B,CAAC,MAAM,CAAC,EAAE,SAAS;AACtE,UAAI,aAAa;AACf,cAAM,QAAQ,KAAK,yBAAyB,QAAQ,MAAM;AAC1D,YAAI,SAAS,GAAG;AACd,eAAK,yBAAyB,OAAO,OAAO,CAAC;QAC/C,OAAO;AAEL,eAAK,2BAA2B,+BAC9B,MAAM,KAAK,kBAAkB,SAAQ,CAAE;QAE3C;MACF;IACF;AACA,WAAO;EACT;EAEA,MAAM,eAAY;AAChB,UAAM,KAAK,kBAAkB,aAAY;AACzC,SAAK,2BAA2B,CAAA;AAChC,SAAK,eAAe,CAAA;EACtB;EAEQ,MAAM,+BAA4B;AACxC,WAAO,KAAK,kBAAkB,SAAQ;EACxC;EAEQ,MAAM,8BAA8B,EAC1C,aACA,cAAa,GAId;AACC,QAAI;AACF,YAAM,KAAK,kBAAkB,aAAY;IAC3C,SAAS,OAAO;AACd,YAAM,KAAK,8CACT,eACA,KAAK;AAEP,YAAM;IACR;AAEA,QAAI;AACF,UAAI,YAAY,SAAS,GAAG;AAC1B,cAAM,KAAK,kBAAkB,SAAS,WAAW;MACnD;IACF,SAAS,OAAO;AACd,YAAM,KAAK,8BAA8B,eAAe,KAAK;AAC7D,YAAM;IACR;EACF;EAEQ,MAAM,8CACZ,eACA,OAAc;AAEd,QAAI;AACJ,QAAI;AACF,qBAAe,MAAM,KAAK,6BAA4B;IACxD,SAAS,iBAAiB;AACxB,MAAAA,QAAO,KACL,gFACA,eAAe;AAEjB;IACF;AAEA,QAAI,mBAAmB,cAAc,aAAa,GAAG;AACnD;IACF;AAEA,UAAM,KAAK,8BAA8B,eAAe,OAAO;MAC7D,sBAAsB,aAAa;KACpC;EACH;EAEQ,MAAM,8BACZ,eACA,OACA,UAGI,CAAA,GAAE;AAEN,QAAI;AACF,UAAI,QAAQ,yBAAyB,QAAW;AAC9C,iBAAS,IAAI,GAAG,IAAI,QAAQ,sBAAsB,KAAK,GAAG;AACxD,gBAAM,SAAS,MAAM,KAAK,kBAAkB,QAAO;AACnD,cAAI,CAAC,QAAQ;AACX;UACF;QACF;MACF,WAAW,QAAQ,uBAAuB,OAAO;AAC/C,cAAM,KAAK,kBAAkB,aAAY;MAC3C;AACA,UAAI,cAAc,SAAS,GAAG;AAC5B,cAAM,KAAK,kBAAkB,SAAS,aAAa;MACrD;IACF,SAAS,cAAc;AACrB,MAAAA,QAAO,KACL,0EACA,YAAY;AAEd;IACF;AAEA,IAAAA,QAAO,KACL,0EACA,KAAK;EAET;EAEQ,MAAM,6BAA0B;AAItC,QAAI,KAAK,4BAA4B,KAAK,cAAc;AACtD,MAAAA,QAAO,MAAM,yBAAyB;QACpC,gBAAgB,KAAK,yBAAyB;OAC/C;AACD,aAAO;QACL,0BAA0B,CAAC,GAAG,KAAK,wBAAwB;QAC3D,cAAc,CAAC,GAAG,KAAK,YAAY;;IAEvC;AACA,UAAM,UAAU,MAAM,KAAK,kBAAkB,SAAQ;AACrD,UAAM,uBAAuB,+BAA+B,OAAO;AACnE,SAAK,2BAA2B;AAChC,SAAK,eAAe;AACpB,IAAAA,QAAO,MAAM,8BAA8B;MACzC,eAAe,QAAQ;MACvB,gBAAgB,qBAAqB;KACtC;AACD,WAAO;MACL,0BAA0B,CAAC,GAAG,oBAAoB;MAClD,cAAc,CAAC,GAAG,OAAO;;EAE7B;;AAKF,SAAS,sBAAsB,SAI9B;AACC,QAAM,EAAE,eAAe,YAAY,MAAK,IAAK;AAC7C,MAAI,kBAAkB,QAAQ;AAC5B,WAAO;EACT;AACA,MAAI,UAAU,OAAO;AACnB,WAAO;EACT;AACA,MAAI,CAAC,YAAY;AACf,WAAO;EACT;AACA,SAAO;AACT;AAEA,SAASC,eACP,SAAgD;AAEhD,MAAI,QAAQ,QAAQ;AAClB,WAAO,QAAQ;EACjB;AAEA,QAAM,gBAAgB,uBAAsB;AAC5C,MAAI,eAAe;AACjB,WAAO;EACT;AAEA,SAAO,IAAIC,QAAM;AACnB;AAEA,SAAS,+BAA+B,EACtC,yBAAwB,GACiB;AACzC,SAAO,yBAAyB,UAAU;AAC5C;AAEA,SAAS,+BACP,OAAuB;AAEvB,SAAO,MAAM,OAAO,CAAC,SAAQ;AAC3B,QAAI,KAAK,SAAS,cAAc;AAC9B,aAAO;IACT;AACA,WAAO,EAAE,KAAK,SAAS,aAAa,KAAK,SAAS;EACpD,CAAC;AACH;AAEA,SAAS,8CAA8C,OAAa;AAClE,MAAI,CAAC,kBAAkB,KAAK,GAAG;AAC7B,UAAM,IAAI,MACR,sDAAsD,KAAK,UAAU,KAAK,CAAC,EAAE;EAEjF;AACF;AAEA,SAAS,kBAAkB,OAAa;AACtC,QAAM,UAAU,MAAM,KAAI;AAC1B,MAAI,CAAC,SAAS;AACZ,WAAO;EACT;AAIA,QAAM,wBAAwB,QAAQ,WAAW,KAAK,IAClD,QAAQ,MAAM,MAAM,MAAM,IAC1B;AACJ,QAAM,OAAO,sBAAsB,MAAM,KAAK,CAAC,EAAE,CAAC;AAGlD,MAAI,KAAK,WAAW,MAAM,GAAG;AAC3B,WAAO;EACT;AAEA,MAAI,mBAAmB,KAAK,IAAI,GAAG;AACjC,WAAO;EACT;AAEA,SAAO;AACT;AAEA,SAAS,eACP,OAAiD;AAEjD,SAAO,IAAI,aAAa;IACtB,aAAa,OAAO,gBAAgB;IACpC,cAAc,OAAO,iBAAiB;IACtC,aAAa,OAAO,gBAAgB;IACpC,oBAAoB,EAAE,GAAG,OAAO,qBAAoB;IACpD,qBAAqB,EAAE,GAAG,OAAO,sBAAqB;IACtD,UAAU;GACX;AACH;AAMA,SAAS,+BACP,OAA0C;AAE1C,SAAO,MAAM,QAAQ,CAAC,SAAQ;AAC5B,QAAI,yBAAyB,IAAI,GAAG;AAClC,aAAO,CAAC,gCAAgC,IAAI,CAAC;IAC/C;AAEA,WAAO,CAAC,IAAsB;EAChC,CAAC;AACH;AAEA,SAAS,yBACP,MAA0B;AAE1B,SAAO,KAAK,SAAS,aAAa,KAAK,SAAS;AAClD;AAEA,SAAS,gCACP,MAA+C;AAE/C,SAAO;IACL,IAAK,KAAyB;IAC9B,MAAM;IACN,MAAM;IACN,SAAS,KAAK,QAAQ,IAAI,CAAC,YAAW;AACpC,UAAI,QAAQ,SAAS,cAAc;AACjC,eAAO;UACL,MAAM;UACN,MAAM,QAAQ;;MAElB;AAEA,UAAI,QAAQ,SAAS,eAAe;AAClC,YACE,OAAO,QAAQ,cAAc,YAC7B,QAAQ,UAAU,SAAS,GAC3B;AACA,iBAAO;YACL,MAAM;YACN,OAAO,QAAQ;YACf,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAM,IAAK,CAAA;;QAEtD;AACA,YAAI,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,SAAS,GAAG;AACrE,iBAAO;YACL,MAAM;YACN,OAAO,EAAE,IAAI,QAAQ,QAAO;YAC5B,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAM,IAAK,CAAA;;QAEtD;AACA,cAAM,IAAI,UACR,2DAA2D;MAE/D;AAEA,UAAI,QAAQ,SAAS,cAAc;AACjC,YACE,OAAO,QAAQ,cAAc,YAC7B,QAAQ,UAAU,SAAS,GAC3B;AACA,iBAAO;YACL,MAAM;YACN,MAAM,QAAQ;YACd,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAQ,IAAK,CAAA;;QAE5D;AACA,YACE,OAAO,QAAQ,aAAa,YAC5B,QAAQ,SAAS,SAAS,GAC1B;AACA,iBAAO;YACL,MAAM;YACN,MAAM,QAAQ;YACd,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAQ,IAAK,CAAA;;QAE5D;AACA,YAAI,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,SAAS,GAAG;AACrE,iBAAO;YACL,MAAM;YACN,MAAM,EAAE,IAAI,QAAQ,QAAO;YAC3B,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAQ,IAAK,CAAA;;QAE5D;AACA,cAAM,IAAI,UACR,qEAAqE;MAEzE;AAEA,YAAM,IAAI,UACR,gDAAgD,KAAK,UAAU,OAAO,CAAC,EAAE;IAE7E,CAAC;;AAEL;AAEA,SAAS,qCACP,mBAAsC;AAEtC,SACE,CAAC,CAAC,qBACF,OAAO,sBAAsB,YAC7B,sBAAsB,qBACrB,kBACC,kBAAkB,MACd;AAEV;AAEA,SAAS,mBACP,MACA,OAAuB;AAEvB,SAAO,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,KAAK;AACtD;;;AC/mBO,IAAMC,YAAW;EACtB,QAAQ;EACR,WAAW;EACX,YAAY;IACV,2BAA2B;IAC3B,uBAAuB;;;AAI3B,IAAAC,oBAAeD;;;AC8SR,IAAME,WAAU;EACrB,cAAc,qBAAqBC,kBAAS,OAAO;EACnD,uBAAuB,qBAAqBA,kBAAS,OAAO;;AAMvD,IAAM,iBAAiB,qBAAqBA,kBAAS,OAAO;;;AChU5D,IAAM,iBAAiB,iBAAE,OAAO;EACrC,QAAQ,iBAAE,OAAM;CACjB;AAEM,IAAM,4BAA4B,iBAAE,mBAAmB,QAAQ;EACpE,iBAAE,OAAO;IACP,QAAQ,iBAAE,OAAM;IAChB,gBAAgB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;IAC9C,MAAM,iBAAE,QAAQ,SAAS;IACzB,MAAM,iBAAE,QAAQ,QAAQ;IACxB,SAAS,iBAAE,MACT,iBAAE,OAAO,EAAE,MAAM,iBAAE,QAAQ,YAAY,GAAG,MAAM,iBAAE,OAAM,EAAE,CAAE,CAAC;GAEhE;EACD,iBAAE,OAAO;IACP,QAAQ,iBAAE,OAAM;IAChB,gBAAgB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;IAC9C,MAAM,iBAAE,QAAQ,SAAS;IACzB,MAAM,iBAAE,QAAQ,MAAM;IACtB,QAAQ,iBAAE,KAAK,CAAC,eAAe,WAAW,CAAC;IAC3C,SAAS,iBAAE,MACT,iBAAE,OAAO,EAAE,MAAM,iBAAE,QAAQ,YAAY,GAAG,MAAM,iBAAE,OAAM,EAAE,CAAE,EAAE,GAC5D,iBAAE,OAAO;MACP,MAAM,iBAAE,QAAQ,aAAa;MAC7B,OAAO,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;MACrC,YAAY,iBAAE,OAAM,EAAG,SAAQ;KAChC,CAAC,CACH;GAEJ;EACD,iBAAE,OAAO;IACP,QAAQ,iBAAE,OAAM;IAChB,gBAAgB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;IAC9C,MAAM,iBAAE,QAAQ,SAAS;IACzB,MAAM,iBAAE,QAAQ,WAAW;IAC3B,QAAQ,iBAAE,KAAK,CAAC,eAAe,aAAa,YAAY,CAAC;IACzD,SAAS,iBAAE,MACT,iBAAE,OAAO,EAAE,MAAM,iBAAE,QAAQ,aAAa,GAAG,MAAM,iBAAE,OAAM,EAAE,CAAE,EAAE,GAC7D,iBAAE,OAAO;MACP,MAAM,iBAAE,QAAQ,cAAc;MAC9B,OAAO,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;MACrC,YAAY,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;KAC3C,CAAC,CACH;GAEJ;CACF;AAEM,IAAM,uBAAuB,iBAAE,OAAO;EAC3C,QAAQ,iBAAE,OAAM;EAChB,gBAAgB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EAC9C,MAAM,iBAAE,QAAQ,eAAe;EAC/B,QAAQ,iBAAE,KAAK,CAAC,eAAe,aAAa,YAAY,CAAC;EACzD,WAAW,iBAAE,OAAM;EACnB,MAAM,iBAAE,OAAM;EACd,QAAQ,iBAAE,OAAM,EAAG,SAAQ;CAC5B;AAEM,IAAM,sBAAsB,iBAAE,OAAO;EAC1C,QAAQ,iBAAE,OAAM;EAChB,gBAAgB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EAC9C,MAAM,iBAAE,KAAK,CAAC,YAAY,eAAe,CAAC;EAC1C,QAAQ,iBAAE,KAAK,CAAC,eAAe,aAAa,YAAY,CAAC;EACzD,WAAW,iBAAE,OAAM;EACnB,MAAM,iBAAE,OAAM;EACd,QAAQ,iBAAE,OAAM,EAAG,SAAQ;CAC5B;AAEM,IAAM,qCAAqC,iBAAE,OAAO;EACzD,QAAQ,iBAAE,OAAM;EAChB,MAAM,iBAAE,QAAQ,sBAAsB;EACtC,aAAa,iBAAE,OAAM;EACrB,MAAM,iBAAE,OAAM;EACd,WAAW,iBAAE,OAAO,iBAAE,OAAM,GAAI,iBAAE,IAAG,CAAE;EACvC,UAAU,iBAAE,QAAO,EAAG,SAAQ,EAAG,SAAQ;CAC1C;;;AC3ED,IAAMC,UAAS,UAAU,wBAAwB;;;ACK1C,IAAM,mBAAmB,iBAAE,OAAO;EACvC,IAAI,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EAClC,iBAAiB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EAC/C,mBAAmB,iBAAE,OAAM,EAAG,GAAG,iBAAE,QAAQ,KAAK,CAAC,EAAE,SAAQ,EAAG,SAAQ;EACtE,UAAU,iBAAE,OAAO,iBAAE,OAAM,GAAI,iBAAE,IAAG,CAAE,EAAE,SAAQ,EAAG,SAAQ;;EAE3D,mBAAmB,iBAAE,MAAM,iBAAE,OAAM,CAAE,EAAE,SAAQ,EAAG,SAAQ;EAC1D,QAAQ,iBAAE,QAAQ,mBAAmB,EAAE,SAAQ,EAAG,SAAQ;EAC1D,QAAQ,iBAAE,MAAM,iBAAE,IAAG,CAAE,EAAE,SAAQ,EAAG,SAAQ;;EAE5C,OAAO,iBACJ,OAAO;IACN,QAAQ,iBACL,OAAO;MACN,QAAQ,iBAAE,IAAG,EAAG,SAAQ,EAAG,SAAQ;MACnC,OAAO,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;KACtC,EACA,SAAQ,EACR,SAAQ;GACZ,EACA,SAAQ,EACR,SAAQ;EACX,QAAQ,iBACL,KAAK,CAAC,aAAa,cAAc,UAAU,aAAa,aAAa,CAAC,EACtE,SAAQ,EACR,SAAQ;EACX,gBAAgB,iBAAE,OAAO,iBAAE,OAAM,GAAI,iBAAE,IAAG,CAAE,EAAE,SAAQ,EAAG,SAAQ;EACjE,OAAO,iBACJ,OAAO;IACN,cAAc,iBAAE,OAAM,EAAG,SAAQ;IACjC,qBAAqB,iBAAE,OAAO,iBAAE,OAAM,GAAI,iBAAE,IAAG,CAAE,EAAE,SAAQ,EAAG,SAAQ;IACtE,eAAe,iBAAE,OAAM,EAAG,SAAQ;IAClC,sBAAsB,iBAAE,OAAO,iBAAE,OAAM,GAAI,iBAAE,IAAG,CAAE,EAAE,SAAQ,EAAG,SAAQ;GACxE,EACA,SAAQ,EACR,SAAQ;CACZ;AAGM,IAAM,gCAAgC,iBAAE,OAAO;EACpD,IAAI,iBAAE,OAAM,EAAG,SAAQ;EACvB,OAAO,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EACrC,MAAM,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EACpC,YAAY,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EAC1C,MAAM,iBAAE,MAAM;IACZ,iBAAE,QAAQ,YAAY;IACtB,iBAAE,QAAQ,aAAa;IACvB,iBAAE,QAAQ,gBAAgB;IAC1B,iBAAE,QAAQ,aAAa;IACvB,iBAAE,QAAQ,OAAO;IACjB,iBAAE,QAAQ,cAAc;GACzB;CACF;AAEM,IAAM,yBAAyB,iBACnC,OAAO;EACN,IAAI,iBAAE,OAAM,EAAG,SAAQ;EACvB,WAAW,iBAAE,OAAM,EAAG,SAAQ;EAC9B,SAAS,iBAAE,OAAM,EAAG,SAAQ;EAC5B,SAAS,iBAAE,MAAM,6BAA6B,EAAE,SAAQ;EACxD,MAAM,iBAAE,OAAM,EAAG,SAAQ;EACzB,QAAQ,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EACtC,MAAM,iBAAE,KAAK,CAAC,QAAQ,aAAa,QAAQ,CAAC,EAAE,SAAQ;EACtD,QAAQ,iBAAE,KAAK,CAAC,aAAa,cAAc,aAAa,CAAC,EAAE,SAAQ;EACnE,MAAM,iBACH,KAAK;IACJ;IACA;IACA;IACA;IACA;IACA;IACA;IACA;GACD,EACA,SAAQ;EACX,qBAAqB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EACnD,SAAS,iBAAE,QAAO,EAAG,SAAQ,EAAG,SAAQ;EACxC,QAAQ,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;EACtC,cAAc,iBAAE,OAAM,EAAG,SAAQ;EACjC,OAAO,iBAAE,IAAG,EAAG,SAAQ,EAAG,SAAQ;EAClC,OAAO,iBACJ,MACC,iBACG,OAAO;IACN,MAAM,iBAAE,OAAM;IACd,aAAa,iBAAE,OAAM;IACrB,cAAc,iBAAE,OAAO,iBAAE,OAAM,GAAI,iBAAE,IAAG,CAAE,EAAE,SAAQ;GACrD,EACA,YAAW,CAAE,EAEjB,SAAQ;CACZ,EACA,YAAW;AAEP,IAAM,iCAAiC,iBAAE,OAAO;EACrD,MAAM,iBAAE,QAAQ,sBAAsB;EACtC,UAAU,iBAAE,OAAM;EAClB,cAAc,iBAAE,OAAO;IACrB,IAAI,iBAAE,OAAM,EAAG,SAAQ;IACvB,QAAQ,iBAAE,QAAQ,uBAAuB,EAAE,SAAQ;GACpD;CACF;AAGM,IAAM,mCAAmC,iBAAE,OAAO;EACvD,MAAM,iBAAE,QAAQ,yBAAyB;EACzC,UAAU,iBAAE,OAAM;EAClB,MAAM;EACN,kBAAkB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;CACjD;AAGM,IAAM,kCAAkC,iBAAE,OAAO;EACtD,MAAM,iBAAE,QAAQ,wBAAwB;EACxC,UAAU,iBAAE,OAAM;EAClB,MAAM;EACN,kBAAkB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;CACjD;AAEM,IAAM,qCAAqC,iBAAE,OAAO;EACzD,MAAM,iBAAE,QAAQ,2BAA2B;EAC3C,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;CAClB;AAEM,IAAM,8DACX,iBAAE,OAAO;EACP,MAAM,iBAAE,QAAQ,uDAAuD;EACvE,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,YAAY,iBAAE,OAAM;EACpB,UAAU,iBAAE,MAAM,iBAAE,IAAG,CAAE,EAAE,SAAQ,EAAG,SAAQ;EAC9C,OAAO,iBACJ,OAAO;IACN,MAAM,iBAAE,QAAQ,QAAQ;IACxB,cAAc,iBAAE,OAAM;IACtB,cAAc,iBAAE,OAAM;IACtB,qBAAqB,iBAAE,OAAO;MAC5B,aAAa,iBAAE,OAAM;MACrB,cAAc,iBAAE,OAAM;KACvB;IACD,eAAe,iBAAE,OAAM;GACxB,EACA,SAAQ;CACZ;AAEI,IAAM,0DAA0D,iBAAE,OACvE;EACE,MAAM,iBAAE,QAAQ,mDAAmD;EACnE,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM,EAAG,SAAQ;EAClC,OAAO,iBAAE,OAAM,EAAG,SAAQ;EAC1B,UAAU,iBAAE,MAAM,iBAAE,IAAG,CAAE,EAAE,SAAQ,EAAG,SAAQ;CAC/C;AAGI,IAAM,2DACX,iBAAE,OAAO;EACP,MAAM,iBAAE,QAAQ,oDAAoD;EACpE,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,OAAO,iBAAE,OAAO;IACd,MAAM,iBAAE,OAAM,EAAG,SAAQ;IACzB,SAAS,iBAAE,OAAM,EAAG,SAAQ;IAC5B,OAAO,iBAAE,OAAM,EAAG,SAAQ;IAC1B,MAAM,iBAAE,OAAM,EAAG,SAAQ;GAC1B;CACF;AAEI,IAAM,uCAAuC,iBAAE,OAAO;EAC3D,MAAM,iBAAE,QAAQ,6BAA6B;EAC7C,UAAU,iBAAE,OAAM;EAClB,MAAM;CACP;AAEM,IAAM,uCAAuC,iBAAE,OAAO;EAC3D,MAAM,iBAAE,QAAQ,6BAA6B;EAC7C,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,cAAc,iBAAE,OAAM;EACtB,eAAe,iBAAE,OAAM;CACxB;AAEM,IAAM,oCAAoC,iBAAE,OAAO;EACxD,MAAM,iBAAE,QAAQ,0BAA0B;EAC1C,MAAM;EACN,UAAU,iBAAE,OAAM,EAAG,SAAQ;EAC7B,kBAAkB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;CACjD;AAEM,IAAM,oCAAoC,iBAAE,OAAO;EACxD,MAAM,iBAAE,QAAQ,0BAA0B;EAC1C,SAAS,iBAAE,OAAM;EACjB,UAAU,iBAAE,OAAM,EAAG,SAAQ;CAC9B;AAEM,IAAM,sCAAsC,iBAAE,OAAO;EAC1D,MAAM,iBAAE,QAAQ,4BAA4B;EAC5C,SAAS,iBAAE,OAAM;EACjB,UAAU,iBAAE,OAAM,EAAG,SAAQ;CAC9B;AAEM,IAAM,sCAAsC,iBAAE,OAAO;EAC1D,MAAM,iBAAE,QAAQ,4BAA4B;EAC5C,SAAS,iBAAE,OAAM;EACjB,cAAc,iBAAE,OAAM;EACtB,eAAe,iBAAE,OAAM;EACvB,UAAU,iBAAE,OAAM,EAAG,SAAQ;CAC9B;AAEM,IAAM,mBAAmB,iBAAE,OAAO;EACvC,MAAM,iBAAE,QAAQ,OAAO;EACvB,UAAU,iBAAE,OAAM,EAAG,SAAQ;EAC7B,OAAO,iBAAE,IAAG,EAAG,SAAQ;CACxB;AAEM,IAAM,qCAAqC,iBAAE,OAAO;EACzD,MAAM,iBAAE,QAAQ,4BAA4B;EAC5C,UAAU,iBAAE,OAAM;CACnB;AAEM,IAAM,oCAAoC,iBAAE,OAAO;EACxD,MAAM,iBAAE,QAAQ,2BAA2B;EAC3C,OAAO,iBAAE,OAAM;EACf,UAAU,iBAAE,OAAM,EAAG,SAAQ;CAC9B;AAEM,IAAM,mCAAmC,iBAAE,OAAO;EACvD,MAAM,iBAAE,QAAQ,0BAA0B;EAC1C,UAAU,iBAAE,OAAM,EAAG,SAAQ;CAC9B;AAEM,IAAM,oCAAoC,iBAAE,OAAO;EACxD,MAAM,iBAAE,QAAQ,2BAA2B;EAC3C,UAAU,iBAAE,OAAM,EAAG,SAAQ;CAC9B;AAEM,IAAM,uCAAuC,iBAAE,OAAO;EAC3D,MAAM,iBAAE,QAAQ,8BAA8B;EAC9C,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,kBAAkB,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;CACjD;AAEM,IAAM,2CAA2C,iBAAE,OAAO;EAC/D,MAAM,iBAAE,QAAQ,mCAAmC;EACnD,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,gBAAgB,iBAAE,OAAM;CACzB;AAEM,IAAM,2CAA2C,iBAAE,OAAO;EAC/D,MAAM,iBAAE,QAAQ,mCAAmC;EACnD,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,cAAc,iBAAE,OAAM;CACvB;AAEM,IAAM,sCAAsC,iBAChD,OAAO;EACN,MAAM,iBAAE,QAAQ,6BAA6B;EAC7C,UAAU,iBAAE,OAAM;CACnB,EACA,YAAW;AAEP,IAAM,sCAAsC,iBAChD,OAAO;EACN,MAAM,iBAAE,QAAQ,6BAA6B;EAC7C,UAAU,iBAAE,OAAM;CACnB,EACA,YAAW;AAEP,IAAM,sCAAsC,iBAAE,OAAO;EAC1D,MAAM,iBAAE,QAAQ,6BAA6B;EAC7C,UAAU,iBAAE,OAAM;CACnB;AAEM,IAAM,+BAA+B,iBAAE,OAAO;EACnD,MAAM,iBAAE,QAAQ,qBAAqB;EACrC,UAAU,iBAAE,OAAM;EAClB,aAAa,iBAAE,MACb,iBAAE,OAAO;IACP,OAAO,iBAAE,OAAM,EAAG,SAAQ;IAC1B,MAAM,iBAAE,KAAK,CAAC,YAAY,QAAQ,CAAC,EAAE,SAAQ;IAC7C,WAAW,iBAAE,OAAM,EAAG,SAAQ;IAC9B,eAAe,iBAAE,OAAM,EAAG,SAAQ;GACnC,CAAC;CAEL;AAEM,IAAM,gCAAgC,iBAAE,OAAO;EACpD,MAAM,iBAAE,QAAQ,6BAA6B;EAC7C,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,OAAO,iBAAE,OAAM;EACf,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,+BAA+B,iBAAE,OAAO;EACnD,MAAM,iBAAE,QAAQ,4BAA4B;EAC5C,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,0CAA0C,iBAAE,OAAO;EAC9D,MAAM,iBAAE,QAAQ,wCAAwC;EACxD,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,OAAO,iBAAE,OAAM;EACf,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,yCAAyC,iBAAE,OAAO;;EAE7D,MAAM,iBAAE,QAAQ,uCAAuC;EACvD,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,YAAY,iBAAE,OAAM;EACpB,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,sCAAsC,iBAAE,OAAO;EAC1D,MAAM,iBAAE,QAAQ,6BAA6B;EAC7C,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;EACrB,MAAM,iBAAE,OAAO;IACb,OAAO,iBAAE,OAAM,EAAG,SAAQ;IAC1B,MAAM,iBAAE,OAAM,EAAG,SAAQ;IACzB,YAAY,iBAAE,OAAM,EAAG,SAAQ;IAC/B,MAAM,iBAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,EAAE,SAAQ;GACzC;CACF;AAEM,IAAM,qCAAqC,iBAAE,OAAO;EACzD,MAAM,iBAAE,QAAQ,4BAA4B;EAC5C,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;EACrB,MAAM,iBAAE,OAAO;IACb,OAAO,iBAAE,OAAM,EAAG,SAAQ;IAC1B,MAAM,iBAAE,OAAM,EAAG,SAAQ;IACzB,YAAY,iBAAE,OAAM,EAAG,SAAQ;IAC/B,MAAM,iBAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,EAAE,SAAQ;GACzC;CACF;AAEM,IAAM,6BAA6B,iBAAE,OAAO;EACjD,MAAM,iBAAE,QAAQ,kBAAkB;EAClC,UAAU,iBAAE,OAAM;EAClB,UAAU;CACX;AAEM,IAAM,0BAA0B,iBAAE,OAAO;EAC9C,MAAM,iBAAE,QAAQ,eAAe;EAC/B,UAAU,iBAAE,OAAM;EAClB,UAAU;CACX;AAEM,IAAM,gDAAgD,iBAAE,OAAO;EACpE,MAAM,iBAAE,QAAQ,wCAAwC;EACxD,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,SAAS,iBAAE,OAAM;EACjB,OAAO,iBAAE,OAAM;EACf,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,+CAA+C,iBAAE,OAAO;EACnE,MAAM,iBAAE,QAAQ,uCAAuC;EACvD,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,SAAS,iBAAE,OAAM;EACjB,WAAW,iBAAE,OAAM;EACnB,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,qCAAqC,iBAAE,OAAO;EACzD,MAAM,iBAAE,QAAQ,4BAA4B;EAC5C,UAAU,iBAAE,OAAM;EAClB,MAAM;EACN,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,oCAAoC,iBAAE,OAAO;EACxD,MAAM,iBAAE,QAAQ,2BAA2B;EAC3C,UAAU,iBAAE,OAAM;EAClB,MAAM;EACN,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,+BAA+B,iBAAE,OAAO;EACnD,MAAM,iBAAE,QAAQ,4BAA4B;EAC5C,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,OAAO,iBAAE,OAAM;EACf,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,8BAA8B,iBAAE,OAAO;;EAElD,MAAM,iBAAE,QAAQ,2BAA2B;EAC3C,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,OAAM;EACjB,eAAe,iBAAE,OAAM;EACvB,MAAM,iBAAE,OAAM;EACd,cAAc,iBAAE,OAAM;EACtB,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,4BAA4B,iBAAE,OAAO;EAChD,MAAM,iBAAE,QAAQ,iBAAiB;EACjC,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,IAAG;CACf;AAEM,IAAM,4BAA4B,iBAAE,OAAO;EAChD,MAAM,iBAAE,QAAQ,iBAAiB;EACjC,UAAU,iBAAE,OAAM;EAClB,SAAS,iBAAE,IAAG;CACf;AAEM,IAAM,4BAA4B,iBAAE,OAAO;EAChD,MAAM,iBAAE,QAAQ,iBAAiB;EACjC,UAAU,iBAAE,OAAM,EAAG,SAAQ;EAC7B,aAAa,iBAAE,OAAM,EAAG,SAAQ;CACjC;AAEM,IAAM,4BAA4B,iBAAE,OAAO;EAChD,MAAM,iBAAE,QAAQ,iBAAiB;EACjC,UAAU,iBAAE,OAAM,EAAG,SAAQ;EAC7B,UAAU,iBAAE,IAAG,EAAG,SAAQ;CAC3B;AAEM,IAAM,2BAA2B,iBAAE,OAAO;EAC/C,MAAM,iBAAE,QAAQ,gBAAgB;EAChC,UAAU,iBAAE,OAAM,EAAG,SAAQ;EAC7B,SAAS,iBAAE,IAAG;CACf;AAEM,IAAM,oCAAoC,iBAAE,OAAO;EACxD,MAAM,iBAAE,QAAQ,4BAA4B;EAC5C,UAAU,iBAAE,OAAM,EAAG,SAAQ;EAC7B,SAAS,iBAAE,OAAM,EAAG,SAAQ;CAC7B;AAEM,IAAM,mCAAmC,iBAAE,OAAO;EACvD,MAAM,iBAAE,QAAQ,0BAA0B;EAC1C,UAAU,iBAAE,OAAM,EAAG,SAAQ;EAC7B,SAAS,iBAAE,OAAM,EAAG,SAAQ;CAC7B;AAEM,IAAM,2CAA2C,iBAAE,OAAO;EAC/D,MAAM,iBAAE,QAAQ,mCAAmC;EACnD,UAAU,iBAAE,OAAM;EAClB,aAAa,iBAAE,OAAM;EACrB,SAAS,iBAAE,OAAM;EACjB,cAAc,iBAAE,OAAM;EACtB,OAAO,iBAAE,OAAM;EACf,aAAa,iBAAE,OAAM;CACtB;AAEM,IAAM,0CAA0C,iBAAE,OAAO;EAC9D,MAAM,iBAAE,QAAQ,kCAAkC;EAClD,UAAU,iBAAE,OAAM;EAClB,aAAa,iBAAE,OAAM;EACrB,SAAS,iBAAE,OAAM;EACjB,cAAc,iBAAE,OAAM;EACtB,WAAW,iBAAE,OAAM;CACpB;AAEM,IAAM,uCAAuC,iBAAE,OAAO;EAC3D,MAAM,iBAAE,QAAQ,+BAA+B;EAC/C,UAAU,iBAAE,OAAM;EAClB,cAAc,iBAAE,OAAM;EACtB,SAAS,iBAAE,OAAM;CAClB;AAEM,IAAM,sCAAsC,iBAAE,OAAO;EAC1D,MAAM,iBAAE,QAAQ,6BAA6B;EAC7C,UAAU,iBAAE,OAAM;EAClB,cAAc,iBAAE,OAAM;EACtB,SAAS,iBAAE,OAAM;CAClB;AAEM,IAAM,gCAAgC,iBAAE,OAAO;EACpD,MAAM,iBAAE,QAAQ,uBAAuB;EACvC,UAAU,iBAAE,OAAM,EAAG,SAAQ;EAC7B,SAAS,iBAAE,OAAM,EAAG,SAAQ;CAC7B;AAOM,IAAM,qBAAqB,iBAC/B,OAAO;EACN,MAAM,iBAAE,OAAM;EACd,UAAU,iBAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;CACzC,EACA,YAAW;AAEP,IAAM,4BAA4B,iBAAE,mBAAmB,QAAQ;EACpE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACD;AAEM,IAAM,4BAA4B,iBAAE,mBAAmB,QAAQ;EACpE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACD;;;SC5kBQ,iBAAiB;;;ACUnB,IAAM,2BAA2B,OAAO,kBAAkB;;;ACNjE,wBACE,IAAI,eAAe,EAAE,+BAA+B,MAAK,CAAE,CAAC;AAE9D,gCAA+B;;;A5B8H/B,OAAOC,aAAY;AACnB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,6BAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,QAAQ,YAAY,WAAW,aAAa,YAAY,cAAc;AAC/E,SAAS,cAAAC,mBAAkB;AAC3B,SAAS,SAAS,YAAY,MAAM,SAAS,WAAW,gBAAgB;AACxE,SAAS,qBAAqB;;;A6B5HvB,IAAM,oCACX;;;ACMF;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAWA,SAAS,8BAAqD,OAA0B;AAC7F,SAAO;AACT;AAQO,IAAM,qCAA6D;AAAA,EACxE,eAAe;AAAA,EACf,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOlB,kBAAkB;AACpB;AAEA,IAAM,2BAA2B;AACjC,IAAM,eAAe,IAAI,IAAI,OAAO,OAAO,wBAAwB,CAAC;AAEpE,SAAS,SAAS,MAAmC;AACnD,MAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,WAAO;AAAA,EACT;AACA,QAAM,OAAQ,KAA4B;AAC1C,SAAO,OAAO,SAAS,WAAW,OAAO;AAC3C;AAQA,SAAS,SAAS,MAAmC;AACnD,MAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,WAAO;AAAA,EACT;AACA,QAAM,SAAS;AACf,MAAI,OAAO,OAAO,WAAW,YAAY,OAAO,OAAO,SAAS,GAAG;AACjE,WAAO,OAAO;AAAA,EAChB;AACA,MAAI,OAAO,OAAO,YAAY,YAAY,OAAO,QAAQ,SAAS,GAAG;AACnE,WAAO,OAAO;AAAA,EAChB;AAKA,QAAM,WAAW,OAAO;AAIxB,MAAI,YAAY,OAAO,aAAa,UAAU;AAC5C,QAAI,OAAO,SAAS,YAAY,YAAY,SAAS,QAAQ,SAAS,GAAG;AACvE,aAAO,SAAS;AAAA,IAClB;AACA,QAAI,OAAO,SAAS,WAAW,YAAY,SAAS,OAAO,SAAS,GAAG;AACrE,aAAO,SAAS;AAAA,IAClB;AAAA,EACF;AACA,SAAO;AACT;AAmCO,SAAS,6BACd,OACA,6BAA6B,6CACxB;AACL,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,CAAC;AAAA,EACV;AAQA,QAAM,UAAU,oBAAI,IAAY;AAIhC,QAAM,0BAA0B,oBAAI,IAAyB;AAE7D,QAAM,QAAQ,CAAC,MAAM,UAAU;AAC7B,UAAM,OAAO,SAAS,IAAI;AAC1B,UAAM,SAAS,SAAS,IAAI;AAC5B,QAAI,CAAC,QAAQ,CAAC,QAAQ;AACpB;AAAA,IACF;AACA,UAAM,iBAAiB,yBAAyB,IAAI;AACpD,QAAI,gBAAgB;AAClB,YAAM,OAAO,wBAAwB,IAAI,cAAc,KAAK,oBAAI,IAAY;AAC5E,WAAK,IAAI,MAAM;AACf,8BAAwB,IAAI,gBAAgB,IAAI;AAChD;AAAA,IACF;AACA,QAAI,aAAa,IAAI,IAAI,GAAG;AAC1B,YAAM,OAAO,wBAAwB,IAAI,IAAI;AAC7C,UAAI,QAAQ,KAAK,IAAI,MAAM,GAAG;AAE5B,aAAK,OAAO,MAAM;AAAA,MACpB,OAAO;AAEL,gBAAQ,IAAI,KAAK;AAAA,MACnB;AAAA,IACF;AAAA,EACF,CAAC;AAKD,QAAM,YAAY,oBAAI,IAAyB;AAC/C,aAAW,CAAC,YAAY,IAAI,KAAK,yBAAyB;AACxD,QAAI,KAAK,OAAO,GAAG;AACjB,gBAAU,IAAI,YAAY,IAAI,IAAI,IAAI,CAAC;AAAA,IACzC;AAAA,EACF;AACA,MAAI,UAAU,OAAO,GAAG;AACtB,aAAS,QAAQ,MAAM,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG;AACzD,YAAM,OAAO,MAAM,KAAK;AACxB,YAAM,OAAO,SAAS,IAAI;AAC1B,YAAM,SAAS,SAAS,IAAI;AAC5B,UAAI,CAAC,QAAQ,CAAC,QAAQ;AACpB;AAAA,MACF;AACA,YAAM,aAAa,yBAAyB,IAAI;AAChD,UAAI,CAAC,YAAY;AACf;AAAA,MACF;AACA,YAAM,OAAO,UAAU,IAAI,UAAU;AACrC,UAAI,QAAQ,KAAK,IAAI,MAAM,GAAG;AAC5B,gBAAQ,IAAI,KAAK;AACjB,aAAK,OAAO,MAAM;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,QAAQ,OAAO,GAAG;AAGpB,aAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;AACpD,UAAI,QAAQ,IAAI,KAAK,KAAK,SAAS,MAAM,KAAK,CAAC,MAAM,aAAa;AAChE;AAAA,MACF;AACA,eAAS,OAAO,QAAQ,GAAG,OAAO,MAAM,QAAQ,QAAQ,GAAG;AACzD,YAAI,SAAS,MAAM,IAAI,CAAC,MAAM,aAAa;AACzC;AAAA,QACF;AACA,YAAI,QAAQ,IAAI,IAAI,GAAG;AACrB,kBAAQ,IAAI,KAAK;AAAA,QACnB;AACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SACJ,QAAQ,SAAS,IAAI,MAAM,MAAM,IAAI,MAAM,OAAO,CAAC,OAAO,UAAU,CAAC,QAAQ,IAAI,KAAK,CAAC;AACzF,SAAO;AAAA,IACL,OAAO,IAAI,yBAAyB;AAAA,IACpC;AAAA,EACF;AACF;AASO,IAAM,iCAAiC;AAkBvC,SAAS,0BAAiD,MAAY;AAC3E,QAAM,eAAgB,KAAiC;AACvD,MACE,CAAC,gBACD,OAAO,iBAAiB,YACxB,EAAE,kCAAmC,eACrC;AACA,WAAO;AAAA,EACT;AACA,QAAM,EAAE,CAAC,8BAA8B,GAAG,UAAU,GAAG,KAAK,IAAI;AAIhE,QAAM,OAAgC,EAAE,GAAI,KAAiC;AAC7E,MAAI,OAAO,KAAK,IAAI,EAAE,SAAS,GAAG;AAChC,SAAK,eAAe;AAAA,EACtB,OAAO;AACL,WAAO,KAAK;AAAA,EACd;AACA,SAAO;AACT;AAiCO,SAAS,+BAAsD,MAAY;AAChF,QAAM,OAAO,SAAS,IAAI;AAC1B,MAAI,SAAS,eAAe,SAAS,cAAc;AACjD,WAAO;AAAA,EACT;AACA,QAAM,SAAS;AACf,QAAM,eAAe,OAAO;AAC5B,QAAM,kBACJ,CAAC,CAAC,gBACF,OAAO,iBAAiB,aACvB,sBAAuB,gBACtB,uBAAwB;AAC5B,QAAM,kBAAkB,uBAAuB;AAC/C,MAAI,CAAC,mBAAmB,CAAC,iBAAiB;AAExC,WAAO;AAAA,EACT;AACA,QAAM,QAAiC,EAAE,GAAG,OAAO;AACnD,MAAI,iBAAiB;AACnB,UAAM,gBAAgB,EAAE,GAAI,aAAyC;AACrE,WAAO,cAAc;AACrB,WAAO,cAAc;AACrB,UAAM,eAAe;AAAA,EACvB;AACA,MAAI,iBAAiB;AACnB,WAAO,MAAM;AAAA,EACf;AACA,SAAO;AACT;AA8BO,SAAS,6CAA6C,YAA4B;AACvF,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,UAAU;AAAA,EAChC,QAAQ;AAEN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,WAAO;AAAA,EACT;AACA,MAAI,UAAU;AACd,QAAM,iBAAiB,CAAC,cAA6B;AACnD,QAAI,CAAC,aAAa,OAAO,cAAc,UAAU;AAC/C;AAAA,IACF;AACA,UAAM,SAAS;AACf,QAAI,OAAO,SAAS,aAAa;AAC/B;AAAA,IACF;AACA,QAAI,QAAQ,QAAQ;AAClB,aAAO,OAAO;AACd,gBAAU;AAAA,IACZ;AACA,UAAM,eAAe,OAAO;AAC5B,QAAI,gBAAgB,OAAO,iBAAiB,UAAU;AACpD,YAAM,WAAW;AACjB,UAAI,sBAAsB,UAAU;AAClC,eAAO,SAAS;AAChB,kBAAU;AAAA,MACZ;AACA,UAAI,uBAAuB,UAAU;AACnC,eAAO,SAAS;AAChB,kBAAU;AAAA,MACZ;AAAA,IACF;AACA,QAAI,uBAAuB,QAAQ;AACjC,aAAO,OAAO;AACd,gBAAU;AAAA,IACZ;AAAA,EACF;AACA,QAAM,iBAAiB,CAAC,QAAuB;AAC7C,QAAI,MAAM,QAAQ,GAAG,GAAG;AACtB,iBAAW,QAAQ,KAAK;AACtB,uBAAe,IAAI;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AACA,QAAM,OAAO;AAEb,iBAAe,KAAK,aAAa;AAGjC,MAAI,MAAM,QAAQ,KAAK,cAAc,GAAG;AACtC,eAAW,WAAW,KAAK,gBAAgB;AACzC,UACE,WACA,OAAO,YAAY,YACnB,aAAc,SACd;AACA,uBAAgB,QAAoC,OAAO;AAAA,MAC7D;AAAA,IACF;AAAA,EACF;AAEA,QAAM,sBAAsB,CAAC,aAA4B;AACvD,QAAI,YAAY,OAAO,aAAa,UAAU;AAC5C,qBAAgB,SAAqC,MAAM;AAAA,IAC7D;AAAA,EACF;AACA,MAAI,MAAM,QAAQ,KAAK,cAAc,GAAG;AACtC,eAAW,YAAY,KAAK,gBAAgB;AAC1C,0BAAoB,QAAQ;AAAA,IAC9B;AAAA,EACF;AACA,sBAAoB,KAAK,iBAAiB;AAC1C,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AACA,SAAO,KAAK,UAAU,MAAM;AAC9B;AA4BO,SAAS,8CAA8C,YAA4B;AACxF,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,UAAU;AAAA,EAChC,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,WAAO;AAAA,EACT;AACA,MAAI,UAAU;AACd,QAAM,aAAa,CAAC,cAA6B;AAC/C,QAAI,CAAC,aAAa,OAAO,cAAc,UAAU;AAC/C;AAAA,IACF;AACA,UAAM,SAAS;AACf,QAAI,OAAO,SAAS,sBAAsB,OAAO,SAAS,sBAAsB;AAC9E;AAAA,IACF;AACA,QAAI,OAAO,cAAc,UAAU;AACjC,aAAO,YAAY;AACnB,gBAAU;AAAA,IACZ;AAAA,EACF;AACA,QAAM,kBAAkB,CAAC,QAAuB;AAC9C,QAAI,MAAM,QAAQ,GAAG,GAAG;AACtB,iBAAW,QAAQ,KAAK;AACtB,mBAAW,IAAI;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AACA,QAAM,OAAO;AACb,kBAAgB,KAAK,aAAa;AAClC,MAAI,MAAM,QAAQ,KAAK,cAAc,GAAG;AACtC,eAAW,WAAW,KAAK,gBAAgB;AACzC,UACE,WACA,OAAO,YAAY,YACnB,aAAc,SACd;AACA,mBAAY,QAAoC,OAAO;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AACA,QAAM,2BAA2B,CAAC,aAA4B;AAC5D,QAAI,YAAY,OAAO,aAAa,UAAU;AAC5C,sBAAiB,SAAqC,MAAM;AAAA,IAC9D;AAAA,EACF;AACA,MAAI,MAAM,QAAQ,KAAK,cAAc,GAAG;AACtC,eAAW,YAAY,KAAK,gBAAgB;AAC1C,+BAAyB,QAAQ;AAAA,IACnC;AAAA,EACF;AACA,2BAAyB,KAAK,iBAAiB;AAC/C,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AACA,SAAO,KAAK,UAAU,MAAM;AAC9B;AAmCO,SAAS,6BAAoD,OAA0B;AAC5F,MAAI,UAAU;AACd,QAAM,MAAM,MAAM,IAAI,CAAC,SAAS;AAC9B,QAAI,SAAS,IAAI,MAAM,iBAAiB;AACtC,aAAO;AAAA,IACT;AACA,UAAM,SAAS;AACf,UAAM,YAAY,OAAO,WAAW,UAAa,OAAO,WAAW;AACnE,UAAM,aAAa,MAAM,QAAQ,OAAO,OAAO,KAAM,OAAO,QAAsB,SAAS;AAC3F,QAAI,aAAa,YAAY;AAC3B,gBAAU;AACV,YAAM,EAAE,QAAQ,gBAAgB,GAAG,KAAK,IAAI;AAC5C,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,CAAC;AACD,SAAO,UAAU,MAAM,MAAM,MAAM;AACrC;AAgCO,SAAS,kCAAkC,MAAwB;AACxE,MAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,WAAO;AAAA,EACT;AACA,QAAM,QAAS,KAAiC;AAChD,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,WAAO;AAAA,EACT;AACA,MAAI,UAAU;AACd,aAAW,QAAQ,OAAO;AACxB,QAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC;AAAA,IACF;AACA,UAAM,SAAS;AACf,QAAI,OAAO,SAAS,iBAAiB;AACnC;AAAA,IACF;AACA,UAAM,kBACJ,MAAM,QAAQ,OAAO,OAAO,KAAM,OAAO,QAAsB,SAAS,IACnE,OAAO,UACR;AACN,UAAM,UACJ,oBACC,OAAO,WAAW,UAAa,OAAO,WAAW,OAAO,CAAC,OAAO,MAAM,IAAI;AAC7E,QAAI,YAAY,QAAW;AAEzB;AAAA,IACF;AACA,UAAM,YAAY,YAAY;AAC9B,UAAM,sBAAsB,oBAAoB,UAAa,CAAC;AAC9D,QAAI,qBAAqB;AAEvB;AAAA,IACF;AACA,WAAO,OAAO;AACd,WAAO,UAAU;AACjB,cAAU;AAAA,EACZ;AACA,SAAO;AACT;AAoCO,SAAS,wCAAwC,MAAwB;AAC9E,MAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,WAAO;AAAA,EACT;AACA,QAAM,QAAS,KAAiC;AAChD,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,WAAO;AAAA,EACT;AACA,MAAI,UAAU;AACd,aAAW,QAAQ,OAAO;AACxB,QAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC;AAAA,IACF;AACA,UAAM,SAAS;AACf,QAAI,OAAO,SAAS,wBAAwB;AAC1C;AAAA,IACF;AACA,UAAM,SAAS,OAAO;AACtB,QAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC;AAAA,IACF;AACA,UAAM,MAAM;AACZ,UAAM,WAAW,IAAI;AAIrB,QAAI,OAAO,aAAa,YAAY,SAAS,WAAW,GAAG;AACzD,UAAI,YAAY;AAChB,gBAAU;AAAA,IACZ;AAAA,EACF;AACA,SAAO;AACT;AAiCO,SAAS,6BAA6B,MAA4B;AACvE,SAAO,CAAC,OAAO,SAAS;AAItB,QAAI,QAAQ,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,SAAS,gBAAgB,GAAG;AACjF,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,KAAK,IAAI;AACnC,cAAM,WAAW,kCAAkC,MAAM;AACzD,cAAM,WAAW,wCAAwC,MAAM;AAC/D,YAAI,YAAY,UAAU;AACxB,iBAAO,KAAK,OAAO,EAAE,GAAG,MAAM,MAAM,KAAK,UAAU,MAAM,EAAE,CAAC;AAAA,QAC9D;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AACA,WAAO,KAAK,OAAO,IAAI;AAAA,EACzB;AACF;;;ACrvBO,IAAM,yBAAyB;AACtC,IAAM,uBAAuB;AAC7B,IAAM,mBAAmB;AAGlB,SAAS,wBACdC,OACyD;AACzD,SACE,CAAC,CAACA,SACF,OAAOA,UAAS,YACfA,MAA4B,SAAS,cACtC,OAAQA,MAA4B,SAAS,YAC5CA,MAA0B,KAAK,WAAW,sBAAsB;AAErE;AAEA,IAAM,0BAA0B;AAChC,IAAM,sCAAsC;AAC5C,IAAM,oBAAyC,oBAAI,IAAI;AAGvD,SAAS,mBAAmBA,OAAe,cAAkD;AAC3F,MAAI,CAACA,SAAQ,OAAOA,UAAS,SAAU,QAAO;AAC9C,MAAKA,MAA4B,SAAS,WAAY,QAAO;AAC7D,QAAM,OAAQA,MAA4B;AAC1C,MAAI,OAAO,SAAS,SAAU,QAAO;AACrC,MAAI,QAAuB;AAC3B,aAAW,YAAY,cAAc;AACnC,QACE,OAAO,aAAa,YACpB,SAAS,WAAW,KACpB,CAAC,KAAK,WAAW,GAAG,QAAQ,GAAG,uBAAuB,EAAE,GACxD;AACA;AAAA,IACF;AACA,QAAI,UAAU,QAAQ,SAAS,SAAS,MAAM,QAAQ;AACpD,cAAQ;AAAA,IACV;AAAA,EACF;AACA,SAAO;AACT;AAQO,SAAS,4BACdA,OACA,eAAoC,mBACqB;AACzD,QAAM,WAAW,mBAAmBA,OAAM,YAAY;AACtD,SAAO,aAAa,QAAQ,aAAa;AAC3C;AAEA,SAAS,aAAa,OAAe,UAA0B;AAC7D,MAAI,OAAO,WAAW,KAAK,KAAK,SAAU,QAAO;AACjD,MAAI,SAAS;AACb,aAAW,aAAa,OAAO;AAC7B,UAAM,YAAY,SAAS;AAC3B,QAAI,OAAO,WAAW,SAAS,IAAI,SAAU;AAC7C,aAAS;AAAA,EACX;AACA,SAAO;AACT;AAEA,SAAS,oBAAoBA,OAAY,cAAkD;AACzF,QAAM,WAAW,mBAAmBA,OAAM,YAAY;AACtD,SAAO,YAAY,aAAa,sCAC5B,aAAa,UAAU,uCAAuC,IAC9D;AACN;AAEA,SAAS,sBACP,qBACA,OACA,cACa;AACb,QAAM,UAAU,oBAAI,IAAY;AAChC,aAAW,UAAU,qBAAqB;AACxC,QAAI,OAAO,WAAW,YAAY,OAAO,WAAW,EAAG;AACvD,QAAI,QAAQ,QAAQ,4BAA6B;AACjD,YAAQ,IAAI,aAAa,QAAQ,uCAAuC,CAAC;AAAA,EAC3E;AACA,aAAWA,SAAQ,OAAO;AAKxB,UAAM,SACJ,4BAA4BA,OAAM,YAAY,KAAK,CAAC,wBAAwBA,KAAI,IAC5E,oBAAoBA,OAAM,YAAY,IACtC;AACN,QAAI,CAAC,UAAU,QAAQ,IAAI,MAAM,EAAG;AACpC,QAAI,QAAQ,QAAQ,4BAA6B;AACjD,YAAQ,IAAI,MAAM;AAAA,EACpB;AACA,SAAO;AACT;AAKA,IAAM,YAAY,oBAAI,IAAI;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGD,SAAS,KAAK,OAAuB;AACnC,MAAI,MAAM,SAAS,KAAK,MAAM,SAAS,KAAK,EAAG,QAAO,MAAM,MAAM,GAAG,EAAE;AACvE,MAAI,MAAM,SAAS,KAAK,MAAM,SAAS,IAAI,EAAG,QAAO,MAAM,MAAM,GAAG,EAAE;AACtE,MAAI,MAAM,SAAS,KAAK,MAAM,SAAS,IAAI,EAAG,QAAO,MAAM,MAAM,GAAG,EAAE;AACtE,MAAI,MAAM,SAAS,KAAK,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,SAAS,IAAI,EAAG,QAAO,MAAM,MAAM,GAAG,EAAE;AAC9F,SAAO;AACT;AAGA,SAAS,SAAS,MAAwB;AACxC,SAAO,KACJ,QAAQ,sBAAsB,OAAO,EACrC,YAAY,EACZ,MAAM,YAAY,EAClB,OAAO,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,EAC/C,IAAI,IAAI;AACb;AAGA,SAAS,eAAeA,OAAoB;AAC1C,QAAM,MAAOA,MAA2B,QAAQ;AAChD,QAAM,OAAO,IAAI,WAAW,sBAAsB,IAC9C,IAAI,MAAM,uBAAuB,MAAM,IACvC;AACJ,QAAM,cACJ,OAAQA,MAAmC,gBAAgB,WACtDA,MAAiC,cAClC;AACN,QAAM,SAAUA,MAAmE,YAC/E;AACJ,QAAM,aAAa,UAAU,OAAO,WAAW,WAAW,OAAO,KAAK,MAAM,EAAE,KAAK,GAAG,IAAI;AAC1F,SAAO,GAAG,IAAI,IAAI,IAAI,IAAI,WAAW,IAAI,UAAU;AACrD;AAWO,SAAS,cAAc,OAAe,OAAe,OAAuB;AACjF,QAAM,UAAU,MAAM,KAAK,IAAI,IAAI,SAAS,KAAK,CAAC,CAAC;AACnD,MAAI,MAAM,WAAW,KAAK,QAAQ,WAAW,EAAG,QAAO,CAAC;AAExD,QAAM,OAAO,MAAM,IAAI,CAACA,UAAS;AAC/B,UAAM,SAAS,SAAS,eAAeA,KAAI,CAAC;AAC5C,UAAM,KAAK,oBAAI,IAAoB;AACnC,eAAW,KAAK,OAAQ,IAAG,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,KAAK,CAAC;AACtD,WAAO,EAAE,MAAAA,OAAM,KAAK,OAAO,QAAQ,GAAG;AAAA,EACxC,CAAC;AACD,QAAM,IAAI,KAAK;AACf,QAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;AACjE,QAAM,KAAK,oBAAI,IAAoB;AACnC,aAAW,KAAK,KAAM,YAAW,KAAK,EAAE,GAAG,KAAK,EAAG,IAAG,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,KAAK,CAAC;AAEjF,QAAM,KAAK;AACX,QAAM,IAAI;AACV,QAAM,SAAS,KAAK,IAAI,CAAC,MAAM;AAC7B,QAAI,QAAQ;AACZ,eAAW,MAAM,SAAS;AACxB,YAAM,IAAI,GAAG,IAAI,EAAE;AACnB,YAAM,IAAI,EAAE,GAAG,IAAI,EAAE;AACrB,UAAI,CAAC,KAAK,CAAC,EAAG;AACd,YAAM,MAAM,KAAK,IAAI,KAAK,IAAI,IAAI,QAAQ,IAAI,IAAI;AAClD,eAAS,OAAQ,KAAK,KAAK,MAAO,IAAI,MAAM,IAAI,IAAK,IAAI,EAAE,MAAO;AAAA,IACpE;AACA,WAAO,EAAE,MAAM,EAAE,MAAM,MAAM;AAAA,EAC/B,CAAC;AACD,QAAM,OAAO,OAAO,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,GAAG,OAAO,GAAG,QAAQ,EAAE,KAAK;AACjF,SAAO,KAAK,MAAM,GAAG,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI;AAC/C;AAGA,SAAS,gBAAgB,KAAgD;AACvE,MAAI,MAA+B,CAAC;AACpC,MAAI;AACF,UACE,OAAO,QAAQ,WACX,IAAI,SACF,KAAK,MAAM,GAAG,IACd,CAAC,IACH,OAAO,OAAO,QAAQ,WACnB,MACD,CAAC;AAAA,EACX,QAAQ;AACN,UAAM,CAAC;AAAA,EACT;AACA,QAAM,QAAQ,OAAO,IAAI,UAAU,WAAW,IAAI,QAAQ;AAC1D,QAAM,WACJ,OAAO,IAAI,UAAU,YAAY,OAAO,SAAS,IAAI,KAAK,IAAI,IAAI,QAAQ;AAC5E,SAAO,EAAE,OAAO,OAAO,KAAK,IAAI,GAAG,KAAK,IAAI,kBAAkB,KAAK,MAAM,QAAQ,CAAC,CAAC,EAAE;AACvF;AAWO,SAAS,4BAA4B,qBAAkD;AAC5F,QAAM,OACJ;AAGF,QAAM,UAAU,MAAM,KAAK,mBAAmB,EAC3C,OAAO,CAAC,MAAM,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC,EACnD,MAAM,GAAG,2BAA2B,EACpC,IAAI,CAAC,WAAW,aAAa,QAAQ,uCAAuC,CAAC,EAC7E,OAAO,OAAO,EACd,KAAK;AACR,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO,GAAG,IAAI;AAAA;AAAA,EAChB;AACA,QAAM,SAAS,GAAG,IAAI;AAAA;AACtB,QAAM,QAAkB,CAAC;AACzB,aAAW,UAAU,SAAS;AAC5B,UAAM,YAAY,GAAG,MAAM,GAAG,CAAC,GAAG,OAAO,KAAK,MAAM,EAAE,EAAE,IAAI,CAAC,SAAS;AAAA,EAAK,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC;AAC3F,QAAI,OAAO,WAAW,SAAS,IAAI,sCAAuC;AAC1E,UAAM,KAAK,KAAK,MAAM,EAAE;AAAA,EAC1B;AACA,SAAO,MAAM,SAAS,IAClB,GAAG,MAAM;AAAA,EAAK,MAAM,KAAK,IAAI,CAAC,KAC9B,GAAG,IAAI;AAAA;AACb;AAEA,IAAM,yBAAyB;AAAA,EAC7B,MAAM;AAAA,EACN,YAAY;AAAA,IACV,OAAO;AAAA,MACL,MAAM;AAAA,MACN,aAAa;AAAA,IACf;AAAA,IACA,OAAO,EAAE,MAAM,UAAU,aAAa,iDAAiD;AAAA,EACzF;AAAA,EACA,UAAU,CAAC,OAAO;AAAA,EAClB,sBAAsB;AACxB;AAQA,SAAS,wBACP,MAIA,cACQ;AACR,QAAM,YAAY,KAAK,kBAAkB,CAAC,GAAG;AAAA,IAAO,CAACA,UACnD,4BAA4BA,OAAM,YAAY;AAAA,EAChD;AACA,MAAI,SAAS,WAAW,EAAG,QAAO,CAAC;AACnC,QAAM,EAAE,OAAO,MAAM,IAAI,gBAAgB,KAAK,UAAU,SAAS;AACjE,QAAM,SAAS,cAAc,UAAU,OAAO,KAAK;AACnD,QAAM,UAAkB,CAAC;AACzB,MAAI,iBAAiB;AACrB,aAAWA,SAAQ,QAAQ;AACzB,UAAM,YAAY,uBAAuBA,KAAI;AAC7C,QAAI,YAAY,+BAA+B;AAC7C;AAAA,IACF;AACA,QAAI,iBAAiB,YAAY,sCAAsC;AACrE;AAAA,IACF;AACA,sBAAkB;AAClB,YAAQ,KAAKA,KAAI;AAAA,EACnB;AACA,SAAO;AACT;AAEA,IAAM,gBAAqC,oBAAI,IAAI;AAGnD,SAAS,oBAAoB,qBAAmD;AAC9E,aAAW,aAAa,qBAAqB;AAC3C,QAAI,OAAO,cAAc,YAAY,UAAU,SAAS,GAAG;AACzD,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAkCA,SAAS,6BACP,qBACA,QACQ;AACR,MAAI,QAAQ,SAAS,MAAM;AACzB,WAAO,OAAO;AAAA,EAChB;AACA,QAAM,WAAW,4BAA4B,mBAAmB;AAChE,MAAI,UAAU,oBAAoB,mBAAmB,GAAG;AACtD,WAAO,QAAQ;AAAA,EACjB;AACA,SAAO;AACT;AAGA,SAAS,wCACP,aACA,cACM;AACN,SAAO,eAAe;AAAA,IACpB,WAAW;AAAA,IACX;AAAA,IACA,YAAY;AAAA,IACZ,SAAU,CAAC,SACT,wBAAwB,MAAM,YAAY;AAAA,EAC9C,CAAC;AACH;AAcA,SAAS,iBAAiBC,OAAwB;AAChD,QAAM,IAAIA;AACV,SAAO,CAAC,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,cAAc,SAAS;AACtE;AAkBO,SAAS,qBACd,OACA,sBAA2C,eAC3C,mBACA,eAAoC,mBAC5B;AACR,aAAWA,SAAQ,OAAO;AACxB,QACE,4BAA4BA,OAAM,YAAY,KAC7CA,MAAoC,iBAAiB,MACtD;AACA,MAACA,MAAoC,eAAe;AAAA,IACtD;AAAA,EACF;AACA,MAAI,MAAM,KAAK,gBAAgB,GAAG;AAChC,WAAO;AAAA,EACT;AAGA,QAAM,cAAc;AAAA,IAClB,sBAAsB,qBAAqB,OAAO,YAAY;AAAA,IAC9D;AAAA,EACF;AACA,SAAO,CAAC,GAAG,OAAO,wCAAwC,aAAa,YAAY,CAAC;AACtF;AA2BO,SAAS,uBACd,OACA,sBAA2C,eAC3C,eAAoC,mBAC9B;AAKN,mCAAiC,OAAO,qBAAqB,cAAc,EAAE,OAAO,KAAK,CAAC;AAC5F;AAEA,SAAS,iCACP,OACA,qBACA,cACA,mBACM;AACN,QAAM,sBAAsB,MAAM,YAAY,KAAK,KAAK;AACxD,QAAM,cAAe,OAAO,eAC1B;AAAA,IACE,MAAM,oBAAoB,UAAU;AAAA,IACpC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF,QAAM,gBAAgB,MAAM,OAAO,KAAK,KAAK;AAC7C,MAAI,eAAe;AACjB,UAAM,sBAA+D,CAAC,WAAoB;AACxF,YAAM,SAAS,cAAc,MAAM;AACnC;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,aAAO;AAAA,IACT;AACA,UAAM,QAAQ;AAAA,EAChB;AACF;;;ACtiBA,SAAS,gCAAgC;AACzC,SAAS,kBAAkB;AAQpB,IAAM,4BAA4B;AAElC,IAAM,wBAAwB;AAG9B,IAAM,kCAAkC;AAExC,IAAM,0CAA0C;AAChD,IAAM,sCAAsC;AAC5C,IAAM,oCAAoC;AAI1C,IAAM,qCAAqC;AAC3C,IAAM,iCAAiC;AACvC,IAAM,iCAAiC;AAIvC,IAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,IAAI;AAIJ,IAAM,iBACX;AAEK,IAAM,iCACX;AAEF,IAAMC,4BAA2B;AACjC,IAAMC,gBAAe,IAAI,IAAI,OAAO,OAAOD,yBAAwB,CAAC;AACpE,IAAM,6BAA6B,oBAAI,IAAI;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAASE,UAAS,MAAmC;AACnD,MAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,WAAO;AAAA,EACT;AACA,QAAM,OAAQ,KAA4B;AAC1C,SAAO,OAAO,SAAS,WAAW,OAAO;AAC3C;AAEA,SAAS,SAAS,MAAmC;AACnD,MAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,WAAO;AAAA,EACT;AACA,QAAM,OAAQ,KAA4B;AAC1C,SAAO,OAAO,SAAS,WAAW,OAAO;AAC3C;AAGO,SAAS,cAAc,MAAwB;AACpD,SAAOA,UAAS,IAAI,MAAM,aAAa,SAAS,IAAI,MAAM;AAC5D;AAGO,SAAS,oBAAoB,MAAwB;AAC1D,SACE,cAAc,IAAI,KAAM,KAAiC,yBAAyB,MAAM;AAE5F;AAUO,SAAS,mBAAmB,MAAsB;AACvD,MAAI,iBAAiB;AACrB,MAAI,oBAAoB;AACxB,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;AACnD,QAAI,KAAK,WAAW,KAAK,KAAK,IAAM,mBAAkB;AAAA,QACjD,sBAAqB;AAAA,EAC5B;AACA,SAAO,oBAAoB,KAAK,KAAK,iBAAiB,CAAC;AACzD;AAEA,IAAM,0BAA0B;AAChC,IAAM,gCAAgC;AACtC,IAAM,gCAAgC;AACtC,IAAM,8BAA8B;AACpC,IAAM,6BAA6B;AACnC,IAAM,sCAAsC;AACrC,IAAM,uBAAuB;AAC7B,IAAM,0BAA0B;AAiCvC,SAAS,sBAAsB,OAA+B;AAC5D,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,QAAQ,IAClE,KAAK,MAAM,KAAK,IAChB;AACN;AAEA,SAAS,qBAAqB,QAA0D;AACtF,QAAM,QAAQ,sBAAsB,OAAO,KAAK;AAChD,QAAM,SAAS,sBAAsB,OAAO,MAAM;AAClD,MAAI,SAAS,OAAQ,QAAO,CAAC,OAAO,MAAM;AAC1C,MAAI,MAAM,QAAQ,OAAO,UAAU,KAAK,OAAO,WAAW,UAAU,GAAG;AACrE,UAAM,kBAAkB,sBAAsB,OAAO,WAAW,CAAC,CAAC;AAClE,UAAM,mBAAmB,sBAAsB,OAAO,WAAW,CAAC,CAAC;AACnE,QAAI,mBAAmB,iBAAkB,QAAO,CAAC,iBAAiB,gBAAgB;AAAA,EACpF;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,OAAe,WAAW,QAA4B;AAChF,QAAM,QAAQ,wDAAwD,KAAK,KAAK;AAChF,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACF,UAAM,qBAAqB,KAAK,KAAK,WAAW,CAAC,IAAI;AACrD,WAAO,IAAI,WAAW,OAAO,KAAK,MAAM,CAAC,EAAG,MAAM,GAAG,kBAAkB,GAAG,QAAQ,CAAC;AAAA,EACrF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,kBAAkB,OAAe,WAAW,QAA4B;AAC/E,MAAI,CAAC,sBAAsB,KAAK,KAAK,EAAG,QAAO;AAC/C,MAAI;AACF,UAAM,qBAAqB,KAAK,KAAK,WAAW,CAAC,IAAI;AACrD,WAAO,IAAI,WAAW,OAAO,KAAK,MAAM,MAAM,GAAG,kBAAkB,GAAG,QAAQ,CAAC;AAAA,EACjF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,gBAAgB,OAAmB,QAAwB;AAClE,UAAS,MAAM,MAAM,KAAK,MAAM,KAAM,MAAM,SAAS,CAAC,KAAK;AAC7D;AAEA,SAAS,gBAAgB,OAAmB,QAAwB;AAClE,UACI,MAAM,MAAM,KAAK,KAAK,aACpB,MAAM,SAAS,CAAC,KAAK,MAAM,QAC3B,MAAM,SAAS,CAAC,KAAK,MAAM,MAC5B,MAAM,SAAS,CAAC,KAAK,OACxB;AAEJ;AAEA,SAAS,MAAM,OAAmB,OAAe,KAAqB;AACpE,MAAI,MAAM;AACV,WAAS,SAAS,OAAO,SAAS,KAAK,UAAU,GAAG;AAClD,WAAO,MAAM,MAAM,KAAK;AACxB,aAAS,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG;AACnC,YAAO,QAAQ,KAAM,MAAM,IAAI,aAAc;AAAA,IAC/C;AAAA,EACF;AACA,UAAQ,MAAM,gBAAiB;AACjC;AAEA,SAAS,yBAAyB,OAA4C;AAI5E,MACE,MAAM,UAAU,MAChB,MAAM,CAAC,MAAM,OACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,gBAAgB,OAAO,CAAC,MAAM,MAC9B,MAAM,EAAE,MAAM,MACd,MAAM,EAAE,MAAM,MACd,MAAM,EAAE,MAAM,MACd,MAAM,EAAE,MAAM,MACd,MAAM,OAAO,IAAI,EAAE,MAAM,gBAAgB,OAAO,EAAE,GAClD;AACA,UAAM,QAAQ,gBAAgB,OAAO,EAAE;AACvC,UAAM,SAAS,gBAAgB,OAAO,EAAE;AACxC,WAAO,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,MAAM,IAAI;AAAA,EACrD;AAEA,MACE,MAAM,UAAU,MAChB,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,IACb;AACA,UAAM,SAAS,MAAM,CAAC,KAAK,MAAO,MAAM,CAAC,KAAK,MAAM;AACpD,UAAM,UAAU,MAAM,CAAC,KAAK,MAAO,MAAM,CAAC,KAAK,MAAM;AACrD,WAAO,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,MAAM,IAAI;AAAA,EACrD;AAEA,MACE,MAAM,UAAU,MAChB,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,EAAE,MAAM,MACd,MAAM,EAAE,MAAM,MACd,MAAM,EAAE,MAAM,MACd,MAAM,EAAE,MAAM,MACd,MAAM,EAAE,MAAM,MACd,MAAM,EAAE,MAAM,IACd;AACA,UAAM,QAAQ,KAAK,MAAM,EAAE,KAAK,OAAO,MAAM,EAAE,KAAK,MAAM,OAAO,MAAM,EAAE,KAAK,MAAM;AACpF,UAAM,SAAS,KAAK,MAAM,EAAE,KAAK,OAAO,MAAM,EAAE,KAAK,MAAM,OAAO,MAAM,EAAE,KAAK,MAAM;AACrF,WAAO,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,MAAM,IAAI;AAAA,EACrD;AAEA,MAAI,MAAM,UAAU,KAAK,MAAM,CAAC,MAAM,OAAQ,MAAM,CAAC,MAAM,KAAM;AAC/D,QAAI,SAAS;AACb,WAAO,SAAS,IAAI,MAAM,QAAQ;AAChC,UAAI,MAAM,MAAM,MAAM,KAAM;AAC1B,kBAAU;AACV;AAAA,MACF;AACA,YAAM,SAAS,MAAM,SAAS,CAAC,KAAK;AACpC,gBAAU;AACV,UAAI,WAAW,OAAQ,WAAW,OAAQ,WAAW,EAAM;AAC3D,UAAI,UAAU,OAAQ,UAAU,IAAM;AACtC,UAAI,SAAS,IAAI,MAAM,OAAQ;AAC/B,YAAM,gBAAgB,gBAAgB,OAAO,MAAM;AACnD,UAAI,gBAAgB,KAAK,SAAS,gBAAgB,MAAM,OAAQ;AAChE,YAAM,iBACH,UAAU,OAAQ,UAAU,OAC5B,UAAU,OAAQ,UAAU,OAC5B,UAAU,OAAQ,UAAU,OAC5B,UAAU,OAAQ,UAAU;AAC/B,UAAI,kBAAkB,iBAAiB,GAAG;AACxC,cAAM,SAAS,gBAAgB,OAAO,SAAS,CAAC;AAChD,cAAM,QAAQ,gBAAgB,OAAO,SAAS,CAAC;AAC/C,eAAO,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,MAAM,IAAI;AAAA,MACrD;AACA,gBAAU;AAAA,IACZ;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,0BAA0B,QAA0C;AAC3E,MAAI,kBAAkB,YAAY;AAChC,WAAO,yBAAyB,MAAM;AAAA,EACxC;AACA,MAAI,OAAO,WAAW,UAAU;AAC9B,UAAM,QAAQ,mBAAmB,MAAM;AACvC,WAAO,QAAQ,yBAAyB,KAAK,IAAI;AAAA,EACnD;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;AAClD,QAAM,SAAS;AACf,QAAM,UAAU,OAAO;AACvB,QAAM,YAAY,OAAO,aAAa,OAAO;AAC7C,QAAM,oBACJ,mBAAmB,aACf,yBAAyB,OAAO,IAChC,OAAO,YAAY,YACjB,OAAO,cAAc,YACrB,UAAU,YAAY,EAAE,WAAW,QAAQ,IAC3C,yBAAyB,kBAAkB,OAAO,KAAK,IAAI,WAAW,CAAC,IACvE;AACR,SACE,qBAAqB,MAAM,KAC3B,qBACA,0BAA0B,OAAO,GAAG,KACpC,0BAA0B,OAAO;AAErC;AAEA,SAAS,sBAAsB,OAAe,QAAwB;AACpE,MAAI,cAAc;AAClB,MAAI,eAAe;AACnB,QAAM,UAAU,KAAK,IAAI,aAAa,YAAY;AAClD,MAAI,UAAU,4BAA4B;AACxC,UAAM,QAAQ,6BAA6B;AAC3C,mBAAe;AACf,oBAAgB;AAAA,EAClB;AACA,QAAM,WAAW,KAAK,IAAI,aAAa,YAAY;AACnD,MAAI,WAAW,qCAAqC;AAClD,UAAM,QAAQ,sCAAsC;AACpD,mBAAe;AACf,oBAAgB;AAAA,EAClB;AACA,QAAM,QACJ,KAAK,KAAK,cAAc,2BAA2B,IACnD,KAAK,KAAK,eAAe,2BAA2B;AACtD,SAAO,KAAK;AAAA,IACV;AAAA,IACA,gCAAgC,gCAAgC,KAAK,IAAI,GAAG,KAAK;AAAA,EACnF;AACF;AAMO,SAAS,0BAA0B,OAKb;AAC3B,QAAM,gBAAgB,sBAAsB,MAAM,KAAK;AACvD,QAAM,iBAAiB,sBAAsB,MAAM,MAAM;AACzD,QAAM,mBAAmB,0BAA0B,MAAM,MAAM;AAC/D,QAAM,QAAQ,iBAAiB,mBAAmB,CAAC,KAAK;AACxD,QAAM,SAAS,kBAAkB,mBAAmB,CAAC,KAAK;AAC1D,QAAM,SACJ,OAAO,MAAM,WAAW,YAAY,MAAM,OAAO,SAAS,IAAI,MAAM,SAAS;AAC/E,MAAI,WAAW,OAAO;AACpB,WAAO,EAAE,QAAQ,yBAAyB,OAAO,QAAQ,QAAQ,QAAQ,aAAa;AAAA,EACxF;AACA,MAAI,CAAC,SAAS,CAAC,QAAQ;AACrB,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AACA,SAAO;AAAA,IACL,QAAQ,sBAAsB,OAAO,MAAM;AAAA,IAC3C;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,EACV;AACF;AAEA,SAAS,gBAAgB,QAAyD;AAChF,QAAM,OAAO,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAC7D,MAAI,EAAC,oBAAI,IAAI,CAAC,eAAe,aAAa,SAAS,qBAAqB,CAAC,GAAE,IAAI,IAAI,GAAG;AACpF,WAAO;AAAA,EACT;AACA,QAAM,WAAW,OAAO;AACxB,QAAM,iBACJ,YAAY,OAAO,aAAa,WAAY,SAAqC,MAAM;AACzF,QAAM,SACJ,OAAO,SACP,OAAO,YACP,kBACA,OAAO,QACP,OAAO,OACP,OAAO,UACP,OAAO,WACP,OAAO,YACP,OAAO;AACT,QAAM,eACJ,YAAY,OAAO,aAAa,WAC3B,SAAqC,SACtC;AACN,QAAM,aACJ,qBAAqB,MAAM,MAC1B,UAAU,OAAO,WAAW,WACzB,qBAAqB,MAAiC,IACtD;AACN,SAAO;AAAA,IACL;AAAA,IACA,QACE,OAAO,OAAO,WAAW,WACrB,OAAO,SACP,OAAO,iBAAiB,WACtB,eACA;AAAA,IACR,OAAO,aAAa,CAAC,KAAK;AAAA,IAC1B,QAAQ,aAAa,CAAC,KAAK;AAAA,EAC7B;AACF;AAEA,SAAS,oBAAoB,OAAgB,MAA8C;AACzF,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,WAAO,EAAE,OAAO,aAAa,GAAG,YAAY,GAAG,oBAAoB,EAAE;AAAA,EACvE;AACA,MAAI,KAAK,IAAI,KAAK,GAAG;AACnB,WAAO,EAAE,OAAO,cAAc,aAAa,GAAG,YAAY,GAAG,oBAAoB,EAAE;AAAA,EACrF;AACA,OAAK,IAAI,KAAK;AACd,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,QAAIC,eAAc;AAClB,QAAIC,cAAa;AACjB,QAAIC,sBAAqB;AACzB,UAAMC,aAAY,MAAM,IAAI,CAAC,UAAU;AACrC,YAAM,SAAS,oBAAoB,OAAO,IAAI;AAC9C,MAAAH,gBAAe,OAAO;AACtB,MAAAC,eAAc,OAAO;AACrB,MAAAC,uBAAsB,OAAO;AAC7B,aAAO,OAAO;AAAA,IAChB,CAAC;AACD,SAAK,OAAO,KAAK;AACjB,WAAO,EAAE,OAAOC,YAAW,aAAAH,cAAa,YAAAC,aAAY,oBAAAC,oBAAmB;AAAA,EACzE;AAEA,QAAM,SAAS;AACf,QAAM,aAAa,gBAAgB,MAAM;AACzC,MAAI,YAAY;AACd,UAAM,WAAW,0BAA0B,UAAU;AACrD,UAAMC,aAAqC,CAAC;AAC5C,UAAM,cAAc,oBAAI,IAAI;AAAA,MAC1B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,MAAAA,WAAU,GAAG,IAAI,YAAY,IAAI,GAAG,IAAI,mBAAmB;AAAA,IAC7D;AACA,IAAAA,WAAU,iBAAiB;AAAA,MACzB,OAAO,SAAS;AAAA,MAChB,QAAQ,SAAS;AAAA,MACjB,QAAQ,SAAS;AAAA,MACjB,QAAQ,SAAS;AAAA,IACnB;AACA,SAAK,OAAO,KAAK;AACjB,WAAO;AAAA,MACL,OAAOA;AAAA,MACP,aAAa,SAAS;AAAA,MACtB,YAAY;AAAA,MACZ,oBAAoB,SAAS,WAAW,qBAAqB,IAAI;AAAA,IACnE;AAAA,EACF;AAEA,MAAI,cAAc;AAClB,MAAI,aAAa;AACjB,MAAI,qBAAqB;AACzB,QAAM,YAAqC,CAAC;AAC5C,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,UAAM,SAAS,oBAAoB,OAAO,IAAI;AAC9C,cAAU,GAAG,IAAI,OAAO;AACxB,mBAAe,OAAO;AACtB,kBAAc,OAAO;AACrB,0BAAsB,OAAO;AAAA,EAC/B;AACA,OAAK,OAAO,KAAK;AACjB,SAAO,EAAE,OAAO,WAAW,aAAa,YAAY,mBAAmB;AACzE;AAMO,SAAS,yCAAyC,YAA4B;AACnF,QAAM,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,UAAU,CAAC;AACjD,SAAO,KAAK,IAAI,GAAG,KAAK,MAAO,SAAS,IAAK,CAAC,IAAI,GAAG;AACvD;AAGO,SAAS,8BAA8B,YAA4B;AACxE,QAAM,QAAQ,yCAAyC,UAAU;AACjE,SAAO,UAAU,IAAI,IAAI,KAAK,KAAK,QAAQ,CAAC;AAC9C;AAMO,SAAS,6BAA6B,MAA8B;AACzE,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,QAAM,SAAS;AACf,QAAM,OAAO,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAC7D,OACG,SAAS,gBAAgB,SAAS,wBAAwB,SAAS,gBACpE,OAAO,OAAO,sBAAsB,YACpC,OAAO,kBAAkB,SAAS,GAClC;AACA,WAAO,OAAO,kBAAkB;AAAA,EAClC;AACA,MAAI,SAAS,aAAa;AACxB,UAAM,eACJ,OAAO,gBAAgB,OAAO,OAAO,iBAAiB,WACjD,OAAO,eACR;AACN,UAAM,SACJ,gBAAgB,OAAO,aAAa,sBAAsB,WACtD,aAAa,oBACb,gBAAgB,OAAO,aAAa,qBAAqB,WACvD,aAAa,mBACb;AACR,QAAI,UAAU,OAAO,SAAS,EAAG,QAAO,OAAO;AAAA,EACjD;AACA,SAAO;AACT;AAGO,SAAS,2BAA2B,MAAgD;AACzF,QAAM,YAAY,6BAA6B,IAAI;AACnD,MAAI,cAAc,MAAM;AAGtB,UAAMC,cAAa,8BAA8B,SAAS;AAC1D,WAAO;AAAA,MACL,aAAaA;AAAA,MACb,YAAAA;AAAA,MACA,aAAa;AAAA,MACb,YAAY;AAAA,MACZ,oBAAoB;AAAA,IACtB;AAAA,EACF;AACA,QAAM,YAAY,oBAAoB,MAAM,oBAAI,QAAgB,CAAC;AACjE,MAAI;AACJ,MAAI;AACF,WAAO,KAAK,UAAU,UAAU,KAAK;AAAA,EACvC,QAAQ;AACN,WAAO,OAAO,UAAU,KAAK;AAAA,EAC/B;AACA,QAAM,aAAa,mBAAmB,IAAI;AAC1C,SAAO;AAAA,IACL,aAAa,aAAa,UAAU;AAAA,IACpC;AAAA,IACA,aAAa,UAAU;AAAA,IACvB,YAAY,UAAU;AAAA,IACtB,oBAAoB,UAAU;AAAA,EAChC;AACF;AAEO,SAAS,mBAAmB,MAA8B;AAC/D,SAAO,2BAA2B,IAAI,EAAE;AAC1C;AAEO,SAAS,eAAe,OAA0C;AACvE,MAAI,QAAQ;AACZ,aAAW,QAAQ,OAAO;AACxB,aAAS,mBAAmB,IAAI;AAAA,EAClC;AACA,SAAO;AACT;AAEO,SAAS,wBACd,OAC0B;AAC1B,QAAM,QAAkC;AAAA,IACtC,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,oBAAoB;AAAA,EACtB;AACA,aAAW,QAAQ,OAAO;AACxB,UAAM,WAAW,2BAA2B,IAAI;AAChD,UAAM,eAAe,SAAS;AAC9B,UAAM,cAAc,SAAS;AAC7B,UAAM,eAAe,SAAS;AAC9B,UAAM,cAAc,SAAS;AAC7B,UAAM,sBAAsB,SAAS;AAAA,EACvC;AACA,SAAO;AACT;AAEO,SAAS,8BAA8B,OAAwB;AACpE,MAAI;AACJ,MAAI;AACF,iBAAa,OAAO,UAAU,WAAW,QAAQ,KAAK,UAAU,KAAK;AAAA,EACvE,QAAQ;AACN,iBAAa,OAAO,KAAK;AAAA,EAC3B;AACA,SAAO,mBAAmB,cAAc,EAAE;AAC5C;AAoCO,SAAS,2BAA2B,OAIZ;AAC7B,QAAM,gBAAgB,wBAAwB,MAAM,QAAQ,KAAK;AACjE,QAAM,cAAc,cAAc;AAClC,QAAM,qBAAqB,MAAM,QAAQ;AACzC,QAAM,mBAAmB,MAAM,QAAQ;AACvC,MAAI,CAAC,MAAM,YAAY,CAAC,MAAM,4BAA4B,MAAM,SAAS,eAAe,GAAG;AACzF,WAAO;AAAA,MACL,QAAQ,cAAc,qBAAqB;AAAA,MAC3C,QAAQ;AAAA,MACR;AAAA,MACA,iBAAiB,cAAc;AAAA,MAC/B,kBAAkB,cAAc;AAAA,MAChC,iBAAiB,cAAc;AAAA,MAC/B,yBAAyB,cAAc;AAAA,MACvC;AAAA,MACA;AAAA,MACA,0BAA0B;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM,WAAW,iCAAiC,MAAM,QAAQ,KAAK;AACrE,QAAM,2BAA2B,eAAe,QAAQ;AACxD,QAAM,oBAAoB,KAAK;AAAA,IAC7B;AAAA,IACA,qBAAqB,MAAM,yBAAyB;AAAA,EACtD;AACA,QAAM,mBAAmB,KAAK;AAAA,IAC5B;AAAA,IACA,mBAAmB,MAAM,yBAAyB;AAAA,EACpD;AACA,SAAO;AAAA,IACL,QACE,MAAM,SAAS,cAAc,2BAA2B,oBAAoB;AAAA,IAC9E,QAAQ;AAAA,IACR;AAAA,IACA,iBAAiB,cAAc;AAAA,IAC/B,kBAAkB,cAAc;AAAA,IAChC,iBAAiB,cAAc;AAAA,IAC/B,yBAAyB,cAAc;AAAA,IACvC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAAS,iCACd,OACkB;AAClB,WAAS,QAAQ,MAAM,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG;AACzD,QAAI,qBAAqB,MAAM,KAAK,CAAC,GAAG;AACtC,aAAO,MAAM,MAAM,QAAQ,CAAC;AAAA,IAC9B;AAAA,EACF;AAGA,SAAO,MAAM,MAAM;AACrB;AAEO,SAAS,sBAAsB,OAA2C;AAC/E,SAAO,MAAM,KAAK,oBAAoB;AACxC;AAEA,SAAS,qBAAqB,MAAwB;AACpD,QAAM,OAAOL,UAAS,IAAI;AAC1B,MAAI,SAAS,UAAW,QAAO,SAAS,IAAI,MAAM;AAClD,SAAO,2BAA2B,IAAI,QAAQ,EAAE;AAClD;AAEO,SAAS,8BAA8B,OAA0C;AACtF,QAAM,UACJ,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAC9C,QACA;AACN,SAAO,KAAK;AAAA,IACV;AAAA,IACA,KAAK,IAAI,gCAAgC,OAAO;AAAA,EAClD;AACF;AAEO,SAAS,0BAA0B,OAK/B;AACT,QAAMM,UAAS,KAAK,IAAI,GAAG,MAAM,mBAAmB;AACpD,QAAM,eAAe,KAAK,MAAMA,UAAS,8BAA8B;AACvE,MACE,OAAO,MAAM,sCAAsC,YACnD,OAAO,SAAS,MAAM,iCAAiC,KACvD,MAAM,oCAAoC,GAC1C;AACA,WAAO,KAAK,IAAI,KAAK,MAAM,MAAM,iCAAiC,GAAG,YAAY;AAAA,EACnF;AACA,SAAO,KAAK,MAAMA,UAAS,8BAA8B,MAAM,+BAA+B,CAAC;AACjG;AASO,SAAS,iBAAiB,OAQV;AACrB,QAAM,kBAAkB,0BAA0B,KAAK;AACvD,QAAM,WACJ,OAAO,MAAM,oBAAoB,YAAY,MAAM,kBAAkB,IACjE,MAAM,kBACN;AACN,QAAM,wBAAwB,eAAe,MAAM,KAAK;AAIxD,QAAM,eAAe,KAAK,IAAI,UAAU,qBAAqB;AAC7D,MAAI,MAAM,MAAM,WAAW,GAAG;AAC5B,WAAO;AAAA,MACL,eAAe;AAAA,MACf,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,MAAM,OAAO;AACf,WAAO;AAAA,MACL,eAAe;AAAA,MACf,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,gBAAgB,iBAAiB;AACnC,WAAO;AAAA,MACL,eAAe;AAAA,MACf,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,EACF;AACF;AAEO,IAAM,wBAAN,cAAoC,MAAM;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,OAKT;AACD,UAAM,UAAU,MAAM,WAAW;AACjC;AAAA,MACE,YAAY,aACR,iDACA,qCAAqC,MAAM,YAAY,8BAA8B,MAAM,eAAe;AAAA,IAChH;AACA,SAAK,OAAO;AACZ,SAAK,eAAe,MAAM;AAC1B,SAAK,kBAAkB,MAAM;AAC7B,SAAK,eAAe,MAAM;AAC1B,SAAK,UAAU;AAAA,EACjB;AACF;AAEO,IAAM,8BAAN,cAA0C,MAAM;AAAA,EAC5C;AAAA,EAET,YAAY,cAAuC,CAAC,GAAG;AACrD,UAAM,UAAU,KAAK,UAAU,WAAW,EAAE,MAAM,GAAG,GAAK;AAC1D;AAAA,MACE,iFAAiF,UAAU,KAAK,OAAO,MAAM,EAAE;AAAA,IACjH;AACA,SAAK,OAAO;AACZ,SAAK,cAAc;AAAA,EACrB;AACF;AAQO,IAAM,kCAAN,cAA8C,MAAM;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACS;AAAA,EAElB,YAAY,cAAuC,CAAC,GAAG,OAAiB;AACtE,UAAM,UAAU,KAAK,UAAU,WAAW,EAAE,MAAM,GAAG,GAAK;AAC1D;AAAA,MACE,mEAAmE,UAAU,KAAK,OAAO,MAAM,EAAE;AAAA,IACnG;AACA,SAAK,OAAO;AACZ,SAAK,cAAc;AACnB,QAAI,OAAO,YAAY,eAAe,SAAU,MAAK,SAAS,YAAY;AAC1E,QAAI,OAAO,YAAY,SAAS,SAAU,MAAK,OAAO,YAAY;AAClE,QAAI,OAAO,YAAY,SAAS,SAAU,MAAK,OAAO,YAAY;AAClE,QAAI,UAAU,QAAW;AACvB,aAAO,eAAe,MAAM,SAAS,EAAE,OAAO,OAAO,YAAY,MAAM,CAAC;AAAA,IAC1E;AAAA,EACF;AACF;AAEO,SAAS,0BACd,OACA,OAAO,oBAAI,QAAgB,GACG;AAC9B,MAAI,iBAAiB,uBAAuB;AAC1C,WAAO;AAAA,EACT;AACA,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,WAAO;AAAA,EACT;AACA,MAAI,KAAK,IAAI,KAAK,GAAG;AACnB,WAAO;AAAA,EACT;AACA,OAAK,IAAI,KAAK;AACd,QAAM,SAAS;AACf,SACE,0BAA0B,OAAO,OAAO,IAAI,KAAK,0BAA0B,OAAO,OAAO,IAAI;AAEjG;AAMO,SAAS,2BAA2B,OAAoD;AAC7F,SAAO;AAAA,IACL,GAAG;AAAA,IACH;AAAA,MACE,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAoBO,SAAS,6BACd,OACA,gBAC+B;AAC/B,QAAM,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,cAAc,CAAC;AACrD,MAAI,UAAU,MAAM,MAAM;AAC1B,MAAI,uBAAuB,eAAe,2BAA2B,OAAO,CAAC;AAC7E,MAAI,uBAAuB;AAE3B,WAAS,QAAQ,GAAG,QAAQ,QAAQ,UAAU,uBAAuB,QAAQ,SAAS,GAAG;AACvF,UAAM,UAAU,QAAQ,KAAK;AAC7B,UAAM,cAAc,+BAA+B,OAAO;AAC1D,QAAI,gBAAgB,QAAS;AAC7B,UAAM,SAAS,mBAAmB,OAAO;AACzC,UAAM,QAAQ,mBAAmB,WAAW;AAC5C,QAAI,SAAS,OAAQ;AACrB,YAAQ,KAAK,IAAI;AACjB,4BAAwB,SAAS;AACjC,4BAAwB;AAAA,EAC1B;AAEA,QAAM,mBAAmB,QAAQ;AACjC,MAAI,uBAAuB,UAAU,QAAQ,SAAS,GAAG;AACvD,UAAM,eAAe,IAAI,MAAc,QAAQ,SAAS,CAAC,EAAE,KAAK,CAAC;AACjE,aAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,mBAAa,QAAQ,CAAC,IAAI,aAAa,KAAK,IAAK,mBAAmB,QAAQ,KAAK,CAAE;AAAA,IACrF;AACA,UAAM,OAAO,sBAAsB,OAAO;AAC1C,UAAM,MACJ,KAAK,KAAK,CAAC,cAAc,uBAAuB,aAAa,SAAS,KAAM,MAAM,KAClF,QAAQ;AACV,cAAU,6BAA6B,QAAQ,MAAM,GAAG,CAAC;AACzD,2BAAuB,eAAe,2BAA2B,OAAO,CAAC;AAIzE,QAAI,uBAAuB,QAAQ;AACjC,gBAAU,CAAC;AACX,6BAAuB,eAAe,2BAA2B,OAAO,CAAC;AAAA,IAC3E;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,2BAA2B,OAAO;AAAA,IACzC;AAAA,IACA;AAAA,IACA,qBAAqB,mBAAmB,QAAQ;AAAA,EAClD;AACF;AAEA,SAAS,+BAA+B,MAAsC;AAC5E,QAAM,OAAON,UAAS,IAAI;AAC1B,MAAI,CAAC,QAAQ,CAACD,cAAa,IAAI,IAAI,EAAG,QAAO;AAC7C,MAAI,SAAS,wBAAwB,MAAM,QAAQ,KAAK,KAAK,KAAK,KAAK,MAAM,SAAS,GAAG;AACvF,WAAO,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE;AAAA,EAC9B;AACA,SAAO,yBAAyB,MAAM,CAAC;AACzC;AAEA,SAAS,sBAAsB,OAA4C;AACzE,QAAM,qBAA+B,CAAC;AACtC,WAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;AACpD,QAAI,cAAc,MAAM,KAAK,CAAC,EAAG,oBAAmB,KAAK,KAAK;AAAA,EAChE;AACA,QAAM,OAAiB,CAAC;AACxB,MAAI,mBAAmB,WAAW,GAAG;AACnC,WAAO,CAAC,MAAM,MAAM;AAAA,EACtB;AACA,MAAI,mBAAmB,CAAC,IAAK,EAAG,MAAK,KAAK,mBAAmB,CAAC,CAAE;AAChE,aAAW,SAAS,mBAAmB,MAAM,CAAC,EAAG,MAAK,KAAK,KAAK;AAChE,OAAK,KAAK,MAAM,MAAM;AACtB,SAAO;AACT;AAOO,SAAS,kCACd,OACA,aACkB;AAClB,QAAM,mBAAqC,CAAC;AAC5C,MAAI,YAAY;AAChB,WAAS,QAAQ,MAAM,SAAS,GAAG,SAAS,KAAK,YAAY,GAAG,SAAS,GAAG;AAC1E,UAAM,OAAO,MAAM,KAAK;AACxB,QAAI,CAAC,cAAc,IAAI,KAAK,oBAAoB,IAAI,GAAG;AACrD;AAAA,IACF;AACA,UAAM,aAAa,mBAAmB,YAAY,IAAI,CAAC;AACvD,qBAAiB,KAAK,4BAA4B,MAAM,SAAS,CAAC;AAClE,QAAI,aAAa,WAAW;AAC1B,kBAAY;AACZ;AAAA,IACF;AACA,iBAAa;AAAA,EACf;AACA,QAAM,UAAU,iBAAiB,QAAQ;AACzC,UAAQ,KAAK,iBAAiB,WAAW,CAAC;AAC1C,SAAO;AACT;AAGO,SAAS,uBAAuB,MAAuC;AAC5E,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,QAAM,SAAS;AACf,SACE,OAAO,SAAS,gBAChB,OAAO,OAAO,sBAAsB,YACpC,OAAO,kBAAkB,SAAS;AAEtC;AAGO,SAAS,0BAA0B,MAAwB;AAChE,MAAI,oBAAoB,IAAI,KAAKC,UAAS,IAAI,MAAM,aAAc,QAAO;AACzE,QAAM,OAAO,SAAS,IAAI;AAC1B,SAAOA,UAAS,IAAI,MAAM,cAAc,SAAS,UAAU,SAAS;AACtE;AAOO,SAAS,gCACd,OACA,gBACkB;AAClB,MAAI,CAAC,uBAAuB,cAAc,GAAG;AAC3C,UAAM,IAAI,4BAA4B,EAAE,OAAO,4BAA4B,CAAC;AAAA,EAC9E;AACA,QAAM,mBAAqC,CAAC;AAC5C,MAAI,YAAY;AAChB,WAAS,QAAQ,MAAM,SAAS,GAAG,SAAS,KAAK,YAAY,GAAG,SAAS,GAAG;AAC1E,UAAM,OAAO,MAAM,KAAK;AACxB,QAAI,CAAC,0BAA0B,IAAI,EAAG;AACtC,UAAM,aAAa,mBAAmB,YAAY,IAAI,CAAC;AACvD,qBAAiB,KAAK,4BAA4B,MAAM,SAAS,CAAC;AAClE,QAAI,aAAa,WAAW;AAC1B,kBAAY;AACZ;AAAA,IACF;AACA,iBAAa;AAAA,EACf;AACA,QAAM,UAAU,iBAAiB,QAAQ;AACzC,UAAQ,KAAK;AAAA,IACX,MAAM;AAAA,IACN,mBAAmB,eAAe;AAAA,IAClC,GAAI,OAAO,eAAe,YAAY,WAAW,EAAE,SAAS,eAAe,QAAQ,IAAI,CAAC;AAAA,EAC1F,CAAC;AACD,SAAO;AACT;AAWO,SAAS,mCACd,OACkB;AAClB,SAAO;AAAA,IACL,GAAG;AAAA,IACH;AAAA,MACE,MAAM;AAAA,MACN,cAAc,EAAE,MAAM,qBAAqB;AAAA,IAC7C;AAAA,EACF;AACF;AAGO,SAAS,oCAAoC,UAAmC;AACrF,MAAI,CAAC,YAAY,OAAO,aAAa,UAAU;AAC7C,UAAM,IAAI,4BAA4B,EAAE,OAAO,qBAAqB,QAAQ,cAAc,CAAC;AAAA,EAC7F;AACA,QAAM,SAAS;AACf,QAAM,SAAS,MAAM,QAAQ,OAAO,MAAM,IAAI,OAAO,SAAS,CAAC;AAC/D,QAAM,kBAAkB,OAAO,OAAO,sBAAsB;AAC5D,MAAI,gBAAgB,WAAW,GAAG;AAChC,UAAM,IAAI,4BAA4B;AAAA,MACpC,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,OAAO,gBAAgB;AAAA,IACzB,CAAC;AAAA,EACH;AACA,SAAO,gBAAgB,CAAC;AAC1B;AAEO,SAAS,iCAAiC,OAA0C;AAIzF,QAAM,aAAa,KAAK,UAAU,mBAAmB,KAAK,CAAC;AAC3D,SAAO,WAAW,QAAQ,EAAE,OAAO,YAAY,MAAM,EAAE,OAAO,KAAK;AACrE;AAEA,SAAS,mBAAmB,OAAyB;AACnD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,kBAAkB;AAC7D,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,KAAgC,EAC5C,OAAO,CAAC,CAAC,EAAE,KAAK,MAAM,UAAU,MAAS,EACzC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,MAAM,KAAK,cAAc,KAAK,CAAC,EACnD,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,mBAAmB,KAAK,CAAC,CAAC;AAAA,EAC3D;AACF;AAGO,SAAS,uCACd,OACe;AACf,WAAS,QAAQ,MAAM,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG;AACzD,QAAI,oBAAoB,MAAM,KAAK,CAAC,GAAG;AACrC,aAAO,iCAAiC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC;AAAA,IACnE;AAAA,EACF;AACA,SAAO;AACT;AAMO,SAAS,iBAAiB,aAAqC;AACpE,QAAM,UAAU,YAAY,KAAK;AACjC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,4BAA4B,EAAE,OAAO,qBAAqB,CAAC;AAAA,EACvE;AACA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS,GAAG,cAAc;AAAA,EAAK,OAAO;AAAA,IACtC,CAAC,yBAAyB,GAAG;AAAA,EAC/B;AACF;AAEA,SAAS,4BAA4B,MAAsB,WAAmC;AAC5F,QAAM,OAAO,YAAY,IAAI;AAC7B,QAAM,OAAO,EAAE,GAAG,KAAK;AACvB,MAAI,mBAAmB,IAAI,IAAI,WAAW;AACxC,SAAK,UAAU,gCAAgC,MAAM,SAAS;AAC9D,WAAO;AAAA,EACT;AACA,OAAK,UAAU,qBAAqB,IAAI;AACxC,SAAO;AACT;AAEA,SAAS,gCAAgC,MAAc,WAA2B;AAChF,QAAM,SAAS,KAAK,IAAI,GAAG,KAAK,MAAM,SAAS,CAAC;AAChD,MAAI,mBAAmB,IAAI,KAAK,QAAQ;AACtC,WAAO;AAAA,EACT;AACA,MAAI,mBAAmB,8BAA8B,IAAI,QAAQ;AAC/D,WAAO,mBAAmB,gCAAgC,MAAM;AAAA,EAClE;AAEA,MAAI,MAAM;AACV,MAAI,OAAO,KAAK;AAChB,MAAI,OAAO;AACX,SAAO,OAAO,MAAM;AAClB,UAAM,gBAAgB,KAAK,OAAO,MAAM,QAAQ,CAAC;AACjD,UAAM,YAAY,0BAA0B,MAAM,aAAa;AAC/D,QAAI,mBAAmB,SAAS,KAAK,QAAQ;AAC3C,aAAO;AACP,YAAM,gBAAgB;AAAA,IACxB,OAAO;AACL,aAAO,gBAAgB;AAAA,IACzB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,0BAA0B,MAAc,eAA+B;AAC9E,QAAM,aAAa,KAAK,KAAK,gBAAgB,CAAC;AAC9C,QAAM,aAAa,KAAK,MAAM,gBAAgB,CAAC;AAC/C,QAAM,UAAU,oBAAoB,MAAM,UAAU;AACpD,QAAM,YAAY,oBAAoB,MAAM,KAAK,SAAS,UAAU;AACpE,SAAO,GAAG,KAAK,MAAM,GAAG,OAAO,CAAC,GAAG,8BAA8B,GAAG,KAAK,MAAM,SAAS,CAAC;AAC3F;AAEA,SAAS,mBAAmB,MAAc,WAA2B;AACnE,MAAI,MAAM;AACV,MAAI,OAAO,KAAK;AAChB,MAAI,OAAO;AACX,SAAO,OAAO,MAAM;AAClB,UAAM,SAAS,KAAK,OAAO,MAAM,QAAQ,CAAC;AAC1C,UAAM,MAAM,oBAAoB,MAAM,MAAM;AAC5C,UAAM,YAAY,KAAK,MAAM,GAAG,GAAG;AACnC,QAAI,mBAAmB,SAAS,KAAK,WAAW;AAC9C,aAAO;AACP,YAAM,SAAS;AAAA,IACjB,OAAO;AACL,aAAO,SAAS;AAAA,IAClB;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,oBAAoB,MAAc,QAAwB;AACjE,MAAI,WAAW,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,QAAQ,MAAM,CAAC;AACxD,MACE,WAAW,KACX,WAAW,KAAK,UAChB,gBAAgB,KAAK,WAAW,WAAW,CAAC,CAAC,KAC7C,eAAe,KAAK,WAAW,QAAQ,CAAC,GACxC;AACA,gBAAY;AAAA,EACd;AACA,SAAO;AACT;AAGA,SAAS,oBAAoB,MAAc,QAAwB;AACjE,MAAI,WAAW,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,QAAQ,MAAM,CAAC;AACxD,MACE,WAAW,KACX,WAAW,KAAK,UAChB,gBAAgB,KAAK,WAAW,WAAW,CAAC,CAAC,KAC7C,eAAe,KAAK,WAAW,QAAQ,CAAC,GACxC;AACA,gBAAY;AAAA,EACd;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,UAA2B;AAClD,SAAO,YAAY,SAAU,YAAY;AAC3C;AAEA,SAAS,eAAe,UAA2B;AACjD,SAAO,YAAY,SAAU,YAAY;AAC3C;AAEA,SAAS,qBAAqB,MAA+B;AAC3D,QAAM,UAAW,KAA+B;AAChD,MAAI,CAAC,MAAM,QAAQ,OAAO,GAAG;AAC3B,WAAO;AAAA,EACT;AACA,SAAO,QAAQ,OAAO,CAAC,SAAS;AAC9B,QAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,aAAO;AAAA,IACT;AACA,UAAM,OAAQ,KAA4B;AAC1C,WAAO,SAAS,iBAAiB,SAAS;AAAA,EAC5C,CAAC;AACH;AAEA,SAAS,YAAY,MAA8B;AACjD,QAAM,UAAW,KAA+B;AAChD,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,OAAO,GAAG;AAC1B,WAAO,QACJ,IAAI,CAAC,SAAS;AACb,UAAI,QAAQ,OAAO,SAAS,UAAU;AACpC,cAAM,SAAS;AACf,YAAI,OAAO,OAAO,SAAS,UAAU;AACnC,iBAAO,OAAO;AAAA,QAChB;AACA,YAAI,OAAO,OAAO,YAAY,UAAU;AACtC,iBAAO,OAAO;AAAA,QAChB;AAAA,MACF;AACA,aAAO;AAAA,IACT,CAAC,EACA,KAAK,EAAE;AAAA,EACZ;AACA,SAAO;AACT;AAEO,SAAS,mCAAmC,OAA0C;AAC3F,SAAO,MAAM,IAAI,UAAU,EAAE,KAAK,IAAI;AACxC;AAEA,SAAS,WAAW,MAA8B;AAChD,QAAM,OAAOA,UAAS,IAAI,KAAK;AAC/B,MAAI,SAAS,WAAW;AACtB,UAAM,OAAO,SAAS,IAAI,KAAK;AAC/B,WAAO,IAAI,IAAI,KAAK,YAAY,IAAI,CAAC;AAAA,EACvC;AACA,MAAI,SAAS,aAAa;AACxB,WAAO;AAAA,EACT;AACA,MAAID,cAAa,IAAI,IAAI,GAAG;AAC1B,WAAO,iBAAiB,WAAW,IAAI,CAAC;AAAA,EAC1C;AACA,MAAID,0BAAyB,IAAI,GAAG;AAClC,WAAO,cAAc,IAAI,KAAK,SAAS,IAAI,CAAC;AAAA,EAC9C;AACA,SAAO,IAAI,IAAI,KAAK,cAAc,IAAI,CAAC;AACzC;AAEA,SAAS,WAAW,MAA8B;AAChD,QAAM,SAAU,KAA8B;AAC9C,MAAI,OAAO,WAAW,UAAU;AAC9B,WAAO;AAAA,EACT;AACA,SAAO,cAAc,UAAU,IAAI;AACrC;AAEA,SAAS,SAAS,MAA8B;AAC9C,QAAM,OAAQ,KAA4B;AAC1C,QAAM,OAAQ,KAAiC;AAC/C,QAAM,WAAW,OAAO,SAAS,WAAW,OAAO;AACnD,QAAM,UAAU,OAAO,SAAS,WAAW,OAAO,cAAc,QAAQ,CAAC,CAAC;AAC1E,SAAO,GAAG,QAAQ,IAAI,OAAO,GAAG,KAAK;AACvC;AAEA,SAAS,cAAc,OAAwB;AAC7C,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;;;AC5zCA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,2BAA2B;AAYpC,SAAS,oBACP,gBACA,SACoB;AACpB,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,yBAAyB,eAAe,cAAc,6BAA6B;AAAA,EAC/F;AACA,SAAO;AACT;AAMA,IAAM,kBAAkB;AACxB,IAAM,qBAAuC,CAAC,MAAM,GAAG;AAGvD,IAAM,kBAAkB;AAGxB,IAAM,sBAAsB;AAC5B,IAAM,oBAAoB;AAW1B,IAAM,8BAA8B;AACpC,IAAM,4BAA4B;AAalC,IAAM,8BAA8B;AAyBpC,IAAM,SAAiC;AAAA,EACrC,MAAM;AAAA,EACN,SAAS;AAAA,EACT,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,KAAK;AAAA,EACL,MAAM;AAAA,EACN,KAAK;AAAA,EACL,OAAO;AAAA,EACP,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,KAAK;AAAA,EACL,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,MAAM;AAAA,EACN,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,MAAM;AAAA,EACN,KAAK;AACP;AACA,SAAS,SAAS,GAAmB;AACnC,QAAM,MAAM,EAAE,YAAY;AAC1B,MAAI,OAAO,GAAG,EAAG,QAAO,OAAO,GAAG;AAClC,MAAI,oBAAoB,KAAK,GAAG,EAAG,QAAO,IAAI,YAAY;AAC1D,SAAO,IAAI,WAAW,IAAI,MAAM;AAClC;AACA,IAAM,aAA6C;AAAA,EACjD,MAAM;AAAA,EACN,OAAO;AAAA,EACP,OAAO;AAAA,EACP,MAAM;AAAA,EACN,SAAS;AACX;AAgCO,IAAM,2BAAN,cAAuC,MAAM;AAAA,EAClD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAKO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC7C,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,wBAAN,cAAoC,MAAM;AAAA,EAC/C,cAAc;AACZ,UAAM,6DAAwD;AAC9D,SAAK,OAAO;AAAA,EACd;AACF;AAGO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC7C,YACS,KACA,UACA,QACP;AACA,UAAM,2BAA2B,QAAQ,MAAM,GAAG,GAAG,SAAS;AAAA,EAAK,MAAM,KAAK,EAAE,EAAE;AAJ3E;AACA;AACA;AAGP,SAAK,OAAO;AAAA,EACd;AACF;AAWO,IAAM,kBAAN,MAA0C;AAAA,EACtC,cAAc;AAAA,EACd;AAAA,EACD;AAAA,EACS;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACT,WAAW;AAAA,EACX,cAAoC;AAAA,EAE5C,YAAY,SAA6B,OAA+B,CAAC,GAAG;AAC1E,SAAK,UAAU;AACf,SAAK,UAAU,KAAK,WAAW;AAC/B,SAAK,aAAa,KAAK,cAAc;AACrC,QAAI,KAAK,UAAU,QAAW;AAC5B,WAAK,QAAQ,KAAK;AAAA,IACpB;AACA,SAAK,cAAc,KAAK,eAAe;AACvC,SAAK,WAAW,KAAK,YAAY;AACjC,SAAK,MAAM,KAAK,oBAAoB;AACpC,SAAK,2BAA2B,KAAK,4BAA4B;AACjE,SAAK,yBAAyB,KAAK,0BAA0B;AAC7D,SAAK,UAAU,KAAK;AAAA,EACtB;AAAA;AAAA,EAGA,OAAO,SAA6B;AAClC,SAAK,UAAU;AACf,SAAK,WAAW;AAChB,SAAK,cAAc;AAAA,EACrB;AAAA,EAEA,MAAc,cAA6B;AACzC,QAAI,KAAK,SAAU;AACnB,QAAI,CAAC,KAAK,SAAS;AAGjB,WAAK,WAAW;AAChB;AAAA,IACF;AACA,SAAK,gBAAgB,KAAK,QAAQ,KAAK,OAAO;AAC9C,QAAI;AACF,YAAM,KAAK;AACX,WAAK,WAAW;AAAA,IAClB,SAAS,OAAO;AAId,WAAK,cAAc;AACnB,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,EAAE,KAA8B;AAC5C,UAAM,KAAK,YAAY;AACvB,UAAM,OAAO;AAAA,MACX,KAAK,WAAW,KAAK,OAAO,IAAI,GAAG;AAAA,MACnC,GAAI,KAAK,QAAQ,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,MAC1C,aAAa;AAAA,MACb,iBAAiB;AAAA,IACnB;AACA,QAAI;AACJ,QAAI,OAAO,KAAK,QAAQ,SAAS,YAAY;AAC3C,eAAS,MAAM,KAAK,QAAQ,KAAK,IAAI;AAAA,IACvC,WAAW,OAAO,KAAK,QAAQ,gBAAgB,YAAY;AACzD,eAAS,MAAM,KAAK,QAAQ,YAAY,IAAI;AAAA,IAC9C,OAAO;AACL,YAAM,IAAI,yBAAyB,mDAAmD;AAAA,IACxF;AACA,UAAM,SAAS,qBAAqB,MAAM;AAC1C,QAAI,2BAA2B,MAAM,GAAG;AAWtC,cAAQ;AAAA,QACN,8DAA8D,eAAe,oDAA+C,oBAAoB,GAAG,CAAC;AAAA,MACtJ;AACA,aAAO;AAAA,IACT;AACA,UAAM,WAAW,uBAAuB,MAAM;AAC9C,QAAI,aAAa,QAAQ,aAAa,GAAG;AACvC,YAAM,IAAI,oBAAoB,KAAK,UAAU,MAAM;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,aAAa;AACnB,QAAI,KAAK,SAAU,OAAM,IAAI,sBAAsB;AAAA,EACrD;AAAA,EACQ,IAAI,GAAmB;AAC7B,WAAO,IAAI,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,aAA8B;AAqBlC,QAAI;AACJ,UAAM,WAAW,KAAK,IAAI,IAAI,KAAK;AACnC,QAAI,UAAU;AAId,WAAO,MAAM;AACX,UAAI,UAAU,GAAG;AACf,cAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,KAAK,sBAAsB,CAAC;AAAA,MACrE;AACA;AACA,YAAM,IAAI,GAAG,KAAK,GAAG,YAAY,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AAClF,UAAI;AACF,cAAM,KAAK,EAAE,+BAA+B,CAAC,EAAE;AAC/C,cAAM,QAAQ,MAAM,KAAK,oBAAoB,CAAC;AAC9C,YAAI,MAAM,WAAW,GAAG;AAGtB,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAAA,QACF;AACA,eAAO,OAAO,KAAK,KAAK,EAAE,SAAS,QAAQ;AAAA,MAC7C,SAAS,OAAO;AACd,oBAAY;AAIZ,YAAI,iBAAiB,qBAAqB;AACxC,gBAAM;AAAA,QACR;AAAA,MACF,UAAE;AAMA,YAAI,KAAK,UAAU;AACjB,gBAAM,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,MAAM,MAAS;AAAA,QAClD;AAAA,MACF;AAEA,UAAI,KAAK,IAAI,IAAI,KAAK,0BAA0B,UAAU;AACxD;AAAA,MACF;AAAA,IACF;AAKA,QAAI,qBAAqB,OAAO;AAC9B,YAAM;AAAA,IACR;AACA,UAAM,IAAI,yBAAyB,sDAAsD;AAAA,EAC3F;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBA,MAAc,WAAW,KAA8B;AACrD,UAAM,OAAO;AAAA,MACX;AAAA,MACA,GAAI,KAAK,QAAQ,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,MAC1C,aAAa;AAAA;AAAA;AAAA,MAGb,iBAAiB;AAAA,IACnB;AACA,QAAI,OAAO,KAAK,QAAQ,SAAS,YAAY;AAC3C,YAAM,SAAS,MAAM,KAAK,QAAQ,KAAK,IAAI;AAI3C,aAAO,OAAO,WAAW,WAAW,gBAAgB,MAAM,IAAI,qBAAqB,MAAM;AAAA,IAC3F;AACA,QAAI,OAAO,KAAK,QAAQ,gBAAgB,YAAY;AAClD,aAAO,gBAAgB,MAAM,KAAK,QAAQ,YAAY,IAAI,CAAC;AAAA,IAC7D;AACA,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAc,oBAAoB,MAAmC;AAGnE,UAAM,WAAW,MAAM,KAAK,WAAW,WAAW,IAAI,cAAc,GAAG,QAAQ,WAAW,EAAE;AAC5F,UAAM,WAAW,OAAO,SAAS,SAAS,EAAE;AAC5C,QAAI,CAAC,OAAO,SAAS,QAAQ,KAAK,YAAY,EAAG,QAAO,IAAI,WAAW;AAEvE,UAAM,SAAmB,CAAC;AAC1B,UAAM,UAAU,KAAK,KAAK,WAAW,2BAA2B;AAChE,aAAS,IAAI,GAAG,IAAI,SAAS,KAAK;AAGhC,YAAM,MAAM,MAAM,KAAK;AAAA,QACrB,SAAS,IAAI,OAAO,2BAA2B,SAAS,CAAC;AAAA,MAC3D;AACA,aAAO,KAAK,OAAO,KAAK,IAAI,QAAQ,QAAQ,EAAE,GAAG,QAAQ,CAAC;AAAA,IAC5D;AACA,UAAM,QAAQ,OAAO,OAAO,MAAM;AAClC,QAAI,MAAM,WAAW,UAAU;AAC7B,YAAM,IAAI;AAAA,QACR,iCAAiC,MAAM,MAAM,QAAQ,QAAQ,MAAM,OAAO,mBAAmB,IAAI;AAAA,MACnG;AAAA,IACF;AACA,WAAO,IAAI,WAAW,KAAK;AAAA,EAC7B;AAAA,EAEA,MAAM,MAAM,IAAY,IAAY,QAAwB;AAC1D,SAAK,WAAW;AAChB,UAAM,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,UAAU,WAAW,MAAM,KAAK,CAAC,EAAE;AAAA,EACtF;AAAA,EACA,MAAM,YAAY,IAAY,IAAY;AACxC,SAAK,WAAW;AAChB,UAAM,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,gCAAgC;AAAA,EACnF;AAAA,EACA,MAAM,KAAK,IAAY,IAAY;AACjC,SAAK,WAAW;AAChB,UAAM,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,EAAE;AAAA,EACrD;AAAA,EACA,MAAM,OAAO,IAAY,IAAY,IAAY,IAAY;AAC3D,SAAK,WAAW;AAEhB,UAAM,UAAU,CAAC,OACf,KAAK,IAAI,mBAAmB,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,IAAI,EAAE,IAAI,mBAAmB,CAAC,CAAC;AACzF,UAAM,OAAO,KAAK,IAAI,IAAI;AAC1B,UAAM,OAAO,KAAK,IAAI,IAAI;AAC1B,UAAM,KAAK,QAAQ,EAAE;AACrB,UAAM,KAAK,QAAQ,EAAE;AACrB,QAAI,MAAM,4BAA4B,EAAE,IAAI,EAAE;AAC9C,QAAI,GAAI,QAAO,mBAAmB,EAAE,IAAI,IAAI;AAC5C,QAAI,GAAI,QAAO,mBAAmB,EAAE,IAAI,IAAI;AAC5C,UAAM,KAAK,EAAE,GAAG;AAAA,EAClB;AAAA,EACA,MAAM,KAAK,MAAc;AACvB,SAAK,WAAW;AAChB,UAAM,KAAK,EAAE,wBAAwB,KAAK,WAAW,OAAO,KAAK,IAAI,IAAI,CAAC,EAAE;AAAA,EAC9E;AAAA,EACA,MAAM,SAAS,MAAgB;AAC7B,SAAK,WAAW;AAChB,UAAM,QAAQ,KAAK,IAAI,QAAQ,EAAE,KAAK,GAAG;AACzC,UAAM,KAAK,EAAE,kBAAkB,KAAK,IAAI,KAAK,CAAC,EAAE;AAAA,EAClD;AAAA,EACA,MAAM,KAAK,MAA0B;AACnC,SAAK,WAAW;AAChB,QAAI,KAAK,WAAW,EAAG;AACvB,UAAM,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC;AACzB,QAAI,MAAM,4BAA4B,GAAG,IAAI,GAAG;AAChD,eAAW,CAAC,IAAI,EAAE,KAAK,KAAK,MAAM,CAAC,EAAG,QAAO,qBAAqB,EAAE,IAAI,EAAE;AAC1E,WAAO;AACP,UAAM,KAAK,EAAE,GAAG;AAAA,EAClB;AAAA,EACA,MAAM,OAAO;AACX,UAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,GAAI,CAAC;AAAA,EAC9C;AACF;AAkCA,IAAM,iBAAwD;AAAA,EAC5D,MAAM,cAAc;AAAA,EACpB,OAAO,cAAc;AAAA,EACrB,OAAO,cAAc;AAAA,EACrB,MAAM,cAAc;AAAA,EACpB,SAAS,cAAc;AACzB;AASA,IAAM,qCAAqC;AAC3C,IAAM,mCAAmC;AAgBzC,SAAS,wBAAwB,OAAyB;AACxD,QAAM,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,SAAS,EAAE,GAAG,YAAY;AACvF,SACE,IAAI,SAAS,kBAAkB,KAC/B,IAAI,SAAS,2BAA2B,KACxC,IAAI,SAAS,SAAS;AAE1B;AAgBO,IAAM,wBAAN,MAAgD;AAAA,EAC5C;AAAA,EACA;AAAA,EACD;AAAA,EACS;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQT,cAAuC;AAAA,EACvC,aAAsC;AAAA,EAE9C,YAAY,SAA+B,OAAqC,CAAC,GAAG;AAClF,SAAK,UAAU;AACf,SAAK,aAAa,KAAK,cAAc;AAGrC,SAAK,cAAc,KAAK,eAAe;AACvC,SAAK,WAAW,KAAK,YAAY;AACjC,SAAK,2BACH,KAAK,4BAA4B;AACnC,SAAK,yBAAyB,KAAK,0BAA0B;AAAA,EAC/D;AAAA;AAAA,EAGA,OAAO,SAA+B;AACpC,SAAK,UAAU;AAAA,EACjB;AAAA,EAEQ,aAAa;AACnB,QAAI,KAAK,SAAU,OAAM,IAAI,sBAAsB;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,SAAS,GAAW,GAAqC;AAC/D,UAAM,MAAM,KAAK;AACjB,UAAM,MAAM,KAAK;AACjB,QAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,EAAG,QAAO,EAAE,GAAG,EAAE;AAC9D,QAAI,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,EAAG,QAAO,EAAE,GAAG,EAAE;AAC1D,WAAO;AAAA,MACL,GAAG,KAAK,MAAO,IAAI,IAAI,CAAC,IAAK,IAAI,CAAC,CAAC;AAAA,MACnC,GAAG,KAAK,MAAO,IAAI,IAAI,CAAC,IAAK,IAAI,CAAC,CAAC;AAAA,IACrC;AAAA,EACF;AAAA,EAEA,MAAc,QACZ,GACA,GACA,QACA,QACe;AASf,UAAM,IAAI,KAAK,SAAS,GAAG,CAAC;AAC5B,UAAM,KAAK,QAAQ,aAAa;AAAA,MAC9B,OAAO;AAAA,MACP,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,QAAQ,OAAO;AAAA,IAC5C,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,aAA8B;AAelC,QAAI;AACJ,UAAM,WAAW,KAAK,IAAI,IAAI,KAAK;AACnC,QAAI,UAAU;AACd,WAAO,MAAM;AACX,UAAI,UAAU,GAAG;AACf,cAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,KAAK,sBAAsB,CAAC;AAAA,MACrE;AACA;AACA,UAAI;AACF,cAAM,EAAE,KAAK,OAAO,QAAQ,aAAa,aAAa,IAAI,MAAM,KAAK,QAAQ,WAAW;AACxF,YAAI,IAAI,WAAW,GAAG;AAGpB,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAAA,QACF;AAGA,aAAK,cAAc,CAAC,OAAO,MAAM;AACjC,aAAK,aAAa,CAAC,eAAe,OAAO,gBAAgB,MAAM;AAC/D,eAAO,OAAO,KAAK,GAAG,EAAE,SAAS,QAAQ;AAAA,MAC3C,SAAS,OAAO;AACd,oBAAY;AAEZ,YAAI,wBAAwB,KAAK,EAAG;AAAA,MACtC;AAEA,UAAI,KAAK,IAAI,IAAI,KAAK,0BAA0B,UAAU;AACxD;AAAA,MACF;AAAA,IACF;AAIA,UAAM,SAAS;AAAA,MACb,qBAAqB,QAAQ,UAAU,UAAU,OAAO,SAAS;AAAA,IACnE;AACA,YAAQ;AAAA,MACN,mDAAmD,OAAO,gBAAgB,MAAM;AAAA,IAClF;AACA,QAAI,qBAAqB,OAAO;AAC9B,YAAM;AAAA,IACR;AACA,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,MAAM,GAAW,GAAW,QAAwB;AACxD,SAAK,WAAW;AAChB,UAAM,KAAK;AAAA,MACT;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,eAAe,MAAM,KAAK,cAAc;AAAA,IAC1C;AAAA,EACF;AAAA,EACA,MAAM,YAAY,GAAW,GAAW;AACtC,SAAK,WAAW;AAChB,UAAM,KAAK;AAAA,MACT;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EACA,MAAM,KAAK,GAAW,GAAW;AAC/B,SAAK,WAAW;AAChB,UAAM,KAAK;AAAA,MACT;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EACA,MAAM,OAAO,GAAW,GAAW,IAAY,IAAY;AACzD,SAAK,WAAW;AAKhB,UAAM,IAAI,KAAK,SAAS,GAAG,CAAC;AAC5B,UAAM,KAAK,QAAQ,aAAa;AAAA,MAC9B,OAAO;AAAA,MACP,QAAQ,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAAA,IACnD,CAAC;AAAA,EACH;AAAA,EACA,MAAM,KAAK,MAAc;AACvB,SAAK,WAAW;AAGhB,UAAM,KAAK,QAAQ,aAAa;AAAA,MAC9B,OAAO;AAAA,MACP,KAAK,EAAE,KAAK,MAAM,QAAQ,MAAM,QAAQ,UAAU,iBAAiB;AAAA,IACrE,CAAC;AAAA,EACH;AAAA,EACA,MAAM,SAAS,MAAgB;AAC7B,SAAK,WAAW;AAMhB,UAAM,KAAK,QAAQ,aAAa;AAAA,MAC9B,OAAO;AAAA,MACP,KAAK,EAAE,KAAK,KAAK,KAAK,GAAG,GAAG,QAAQ,OAAO,QAAQ,UAAU,iBAAiB;AAAA,IAChF,CAAC;AAAA,EACH;AAAA,EACA,MAAM,KAAK,MAA0B;AACnC,SAAK,WAAW;AAChB,QAAI,KAAK,WAAW,EAAG;AAGvB,UAAM,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC;AACvB,UAAM,KAAK;AAAA,MACT;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,cAAc;AAAA,IAChB;AACA,eAAW,CAAC,IAAI,EAAE,KAAK,KAAK,MAAM,CAAC,GAAG;AACpC,YAAM,KAAK;AAAA,QACT;AAAA,QACA;AAAA,QACA,cAAc;AAAA,QACd,cAAc;AAAA,MAChB;AAAA,IACF;AACA,UAAM,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,SAAS,CAAC;AACrC,UAAM,KAAK,QAAQ,IAAI,IAAI,cAAc,mBAAmB,cAAc,mBAAmB;AAAA,EAC/F;AAAA,EACA,MAAM,OAAO;AACX,UAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,GAAI,CAAC;AAAA,EAC9C;AACF;AAUO,SAAS,uBACd,SACsD;AACtD,QAAM,IAAI;AACV,SAAO,OAAO,EAAE,iBAAiB,cAAc,OAAO,EAAE,eAAe;AACzE;AAyBA,SAAS,yBAAyB,OAA2B;AAC3D,MAAI,MAAM,CAAC,MAAM,OAAQ,MAAM,CAAC,MAAM,MAAQ,MAAM,CAAC,MAAM,MAAQ,MAAM,CAAC,MAAM;AAC9E,WAAO;AACT,MAAI,MAAM,CAAC,MAAM,OAAQ,MAAM,CAAC,MAAM,OAAQ,MAAM,CAAC,MAAM,IAAM,QAAO;AACxE,MAAI,MAAM,CAAC,MAAM,MAAQ,MAAM,CAAC,MAAM,MAAQ,MAAM,CAAC,MAAM,MAAQ,MAAM,CAAC,MAAM;AAC9E,WAAO;AACT,MACE,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,EAAE,MAAM,MACd,MAAM,EAAE,MAAM;AAEd,WAAO;AACT,SAAO;AACT;AAIA,SAAS,+BAA+B,OAAoC;AAC1E,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,EAAE,MAAM,WAAW,KAAK,KAAK,GAAG,WAAW,yBAAyB,KAAK,EAAE;AAAA,EACpF;AACF;AAMA,SAAS,4BAA4B,QAA0C;AAC7E,MAAI,OAAO,WAAW,SAAU,QAAO;AACvC,QAAM,EAAE,MAAM,IAAI;AAClB,QAAM,YACJ,OAAO,MAAM,cAAc,WAAW,MAAM,YAAY;AAC1D,SAAO,QAAQ,SAAS,WAAW,OAAO,KAAK,MAAM,IAAI,EAAE,SAAS,QAAQ,CAAC;AAC/E;AAEA,IAAM,6BACJ;AAKF,IAAM,cAAc;AAAA,EAClB,GAAG;AAAA,IACD,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA,EACA,GAAG;AAAA,IACD,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AACF;AAEA,SAAS,aACP,YACA,UACyB;AACzB,SAAO,EAAE,MAAM,UAAU,YAAY,UAAU,sBAAsB,MAAM;AAC7E;AAoBO,SAAS,sBACd,UACA,UACA,eACA,uBAAuB,OACN;AACjB,QAAM,WAAW,kBAAkB,SAAY,EAAE,cAAsC,IAAI,CAAC;AAI5F,QAAM,QAAQ,OACZ,cACA,WACoB;AACpB,QAAI,SAAU,QAAO;AACrB,QAAI;AACF,YAAM,OAAO;AACb,aAAO;AAAA,IACT,SAAS,OAAO;AACd,UAAI,iBAAiB,sBAAuB,QAAO;AACnD,aAAO,2BAA2B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IAC1F;AAAA,EACF;AAEA,SAAO;AAAA,IACL,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aACE;AAAA,MACF,YAAY,aAAa,CAAC,GAAG,CAAC,CAAC;AAAA,MAC/B,QAAQ;AAAA,MACR,SAAS,YAAY;AAGnB,cAAM,MAAM,MAAM,SAAS,WAAW;AACtC,cAAM,QAAQ,WAAW,KAAK,OAAO,KAAK,KAAK,QAAQ,CAAC;AACxD,cAAM,QAAQ,+BAA+B,KAAK;AAKlD,eAAO,uBAAuB,QAAQ,4BAA4B,KAAK;AAAA,MACzE;AAAA,IACF,CAAC;AAAA,IACD,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aACE;AAAA,MACF,YAAY;AAAA,QACV;AAAA,UACE,GAAG;AAAA,UACH,QAAQ;AAAA,YACN,MAAM;AAAA,YACN,MAAM,CAAC,QAAQ,SAAS,SAAS,QAAQ,SAAS;AAAA,YAClD,aAAa;AAAA,UACf;AAAA,QACF;AAAA,QACA,CAAC,KAAK,GAAG;AAAA,MACX;AAAA,MACA,QAAQ;AAAA,MACR,GAAG;AAAA,MACH,SAAS,OAAO,UAAU;AACxB,cAAM,EAAE,GAAG,GAAG,OAAO,IAAI;AACzB,eAAO;AAAA,UAAM,WAAW,UAAU,MAAM,QAAQ,CAAC,KAAK,CAAC;AAAA,UAAK,MAC1D,SAAS,MAAM,GAAG,GAAG,UAAU,MAAM;AAAA,QACvC;AAAA,MACF;AAAA,IACF,CAAC;AAAA,IACD,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aACE;AAAA,MACF,YAAY,aAAa,EAAE,GAAG,YAAY,GAAG,CAAC,KAAK,GAAG,CAAC;AAAA,MACvD,QAAQ;AAAA,MACR,GAAG;AAAA,MACH,SAAS,OAAO,UAAU;AACxB,cAAM,EAAE,GAAG,EAAE,IAAI;AACjB,eAAO,MAAM,sBAAsB,CAAC,KAAK,CAAC,KAAK,MAAM,SAAS,YAAY,GAAG,CAAC,CAAC;AAAA,MACjF;AAAA,IACF,CAAC;AAAA,IACD,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aAAa;AAAA,MACb,YAAY,aAAa,EAAE,GAAG,YAAY,GAAG,CAAC,KAAK,GAAG,CAAC;AAAA,MACvD,QAAQ;AAAA,MACR,GAAG;AAAA,MACH,SAAS,OAAO,UAAU;AACxB,cAAM,EAAE,GAAG,EAAE,IAAI;AACjB,eAAO,MAAM,aAAa,CAAC,KAAK,CAAC,KAAK,MAAM,SAAS,KAAK,GAAG,CAAC,CAAC;AAAA,MACjE;AAAA,IACF,CAAC;AAAA,IACD,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aACE;AAAA,MACF,YAAY;AAAA,QACV;AAAA,UACE,GAAG;AAAA,UACH,UAAU;AAAA,YACR,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,UACA,UAAU;AAAA,YACR,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,QACF;AAAA,QACA,CAAC,KAAK,KAAK,YAAY,UAAU;AAAA,MACnC;AAAA,MACA,QAAQ;AAAA,MACR,GAAG;AAAA,MACH,SAAS,OAAO,UAAU;AACxB,cAAM,EAAE,GAAG,GAAG,UAAU,SAAS,IAAI;AAMrC,eAAO;AAAA,UAAM,aAAa,QAAQ,KAAK,QAAQ,SAAS,CAAC,KAAK,CAAC;AAAA,UAAK,MAClE,SAAS,OAAO,GAAG,GAAG,UAAU,QAAQ;AAAA,QAC1C;AAAA,MACF;AAAA,IACF,CAAC;AAAA,IACD,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aACE;AAAA,MACF,YAAY;AAAA,QACV,EAAE,MAAM,EAAE,MAAM,UAAU,aAAa,2BAA2B,EAAE;AAAA,QACpE,CAAC,MAAM;AAAA,MACT;AAAA,MACA,QAAQ;AAAA,MACR,GAAG;AAAA,MACH,SAAS,OAAO,UAAU;AACxB,cAAM,EAAE,KAAK,IAAI;AACjB,eAAO,MAAM,SAAS,KAAK,MAAM,iBAAiB,MAAM,SAAS,KAAK,IAAI,CAAC;AAAA,MAC7E;AAAA,IACF,CAAC;AAAA,IACD,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aACE;AAAA,MACF,YAAY;AAAA,QACV;AAAA,UACE,MAAM;AAAA,YACJ,MAAM;AAAA,YACN,OAAO,EAAE,MAAM,SAAS;AAAA,YACxB,aAAa;AAAA,UACf;AAAA,QACF;AAAA,QACA,CAAC,MAAM;AAAA,MACT;AAAA,MACA,QAAQ;AAAA,MACR,GAAG;AAAA,MACH,SAAS,OAAO,UAAU;AACxB,cAAM,EAAE,KAAK,IAAI;AACjB,eAAO,MAAM,WAAW,KAAK,KAAK,GAAG,CAAC,IAAI,MAAM,SAAS,SAAS,IAAI,CAAC;AAAA,MACzE;AAAA,IACF,CAAC;AAAA,IACD,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aACE;AAAA,MACF,YAAY;AAAA,QACV;AAAA,UACE,MAAM;AAAA,YACJ,MAAM;AAAA,YACN,aAAa;AAAA,YACb,OAAO;AAAA,cACL,MAAM;AAAA,cACN,YAAY,EAAE,GAAG,EAAE,MAAM,UAAU,GAAG,GAAG,EAAE,MAAM,UAAU,EAAE;AAAA,cAC7D,UAAU,CAAC,KAAK,GAAG;AAAA,cACnB,sBAAsB;AAAA,YACxB;AAAA,UACF;AAAA,QACF;AAAA,QACA,CAAC,MAAM;AAAA,MACT;AAAA,MACA,QAAQ;AAAA,MACR,GAAG;AAAA,MACH,SAAS,OAAO,UAAU;AACxB,cAAM,EAAE,KAAK,IAAI;AACjB,cAAM,SAAS,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAqB;AAC7D,eAAO,MAAM,mBAAmB,OAAO,MAAM,aAAa,MAAM,SAAS,KAAK,MAAM,CAAC;AAAA,MACvF;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAkCO,SAAS,YAAY,OAAwB,CAAC,GAA0B;AAC7E,SAAO,IAAI,sBAAsB,IAAI;AACvC;AAYO,IAAM,wBAAN,cAAoC,WAAW;AAAA,EAEpD,YAAoB,OAAwB,CAAC,GAAG;AAC9C,UAAM;AADY;AAAA,EAEpB;AAAA,EAHS,OAAO;AAAA,EAKP,QAAyB;AAChC,UAAM,UAAU,oBAAoB,gBAAgB,KAAK,QAAQ;AAMjE,UAAM,WAAqB,uBAAuB,OAAO,IACrD,IAAI,sBAAsB,SAAS;AAAA,MACjC,GAAI,KAAK,KAAK,aAAa,EAAE,YAAY,KAAK,KAAK,WAAW,IAAI,CAAC;AAAA,MACnE,GAAI,KAAK,KAAK,aAAa,SAAY,EAAE,UAAU,KAAK,KAAK,SAAS,IAAI,CAAC;AAAA,IAC7E,CAAC,IACD,IAAI,gBAAgB,SAAS;AAAA,MAC3B,GAAI,KAAK,KAAK,aAAa,EAAE,YAAY,KAAK,KAAK,WAAW,IAAI,CAAC;AAAA,MACnE,GAAI,KAAK,KAAK,aAAa,SAAY,EAAE,UAAU,KAAK,KAAK,SAAS,IAAI,CAAC;AAAA,MAC3E,GAAI,KAAK,KAAK,UAAU,EAAE,SAAS,KAAK,KAAK,QAAQ,IAAI,CAAC;AAAA;AAAA,MAE1D,GAAI,OAAO,KAAK,WAAW,WAAW,EAAE,OAAO,KAAK,OAAO,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,MAKhE,SAAS,OAAO,oBAAoB;AAClC,cAAM,mBAAmB,iBAAiB;AAAA,UACxC,kBAAkB,EAAE,YAAY,WAAW;AAAA,QAC7C,CAAC;AACD,cAAM,KAAK,KAAK,UAAU,eAAe;AAAA,MAC3C;AAAA,IACF,CAAC;AAGL,YAAQ,KAAK,KAAK,UAAU;AAAA,MAC1B,KAAK;AACH,eAAO,CAAC,KAAK,mBAAmB,QAAQ,CAAC;AAAA,MAC3C,KAAK;AACH,eAAO;AAAA,UACL;AAAA,UACA,KAAK,KAAK,YAAY;AAAA,UACtB,KAAK,KAAK;AAAA,UACV;AAAA,QACF;AAAA,MACF,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAKH,eAAO,CAAC;AAAA,IACZ;AAGA,WAAO,CAAC;AAAA,EACV;AAAA;AAAA,EAGQ,mBAAmB,UAAmC;AAC5D,WAAO,aAAa;AAAA,MAClB;AAAA,MACA,GAAI,KAAK,KAAK,kBAAkB,SAC5B,EAAE,eAAe,KAAK,KAAK,cAAuB,IAClD,CAAC;AAAA,IACP,CAAC;AAAA,EACH;AACF;;;ACzwCA,SAAS,cAAAS,mBAAkB;AAI3B,IAAM,aAAa;AACnB,IAAM,wBAAwB;AAC9B,IAAM,oBAAoB;AAC1B,IAAM,kBAAkB,KAAK,OAAO;AACpC,IAAM,kBAAkB;AAuBjB,IAAM,4BAAN,cAAwC,WAAW;AAAA,EAIxD,YACmB,aACA,gBAAqC,oBAAI,IAAI,GAC9D;AACA,UAAM;AAHW;AACA;AAAA,EAGnB;AAAA,EARS,OAAO;AAAA,EACR;AAAA,EASR,MAAe,eAAuC;AACpD,UAAM,UAAU,6BAA6B,KAAK,QAAQ;AAC1D,SAAK,cAAc;AAAA,MACjB;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AACA,UAAMC,UAAS,MAAM,KAAK;AAC1B,QAAIA,QAAO,WAAW,EAAG,QAAO;AAEhC,UAAM,YAAYA,QACf,IAAI,CAAC,UAAU,KAAK,MAAM,IAAI,KAAK,MAAM,WAAW,WAAW,MAAM,IAAI,GAAG,EAC5E,KAAK,IAAI;AACZ,WAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKT,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOT;AACF;AAEO,SAAS,gBACd,aACA,gBAAkC,CAAC,GACR;AAC3B,SAAO,IAAI;AAAA,IACT;AAAA,IACA,IAAI,IAAI,CAAC,GAAG,aAAa,EAAE,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC;AAAA,EAC9D;AACF;AAEA,eAAsB,wBACpB,SACA,aACA,gBAAqC,oBAAI,IAAI,GAC7C,OACoC;AACpC,MAAI,CAAC,QAAQ,WAAW,CAAC,QAAQ,UAAU;AACzC,UAAM,IAAI,MAAM,6EAA6E;AAAA,EAC/F;AACA,QAAM,aAAa,oBAAI,IAA4B;AACnD,MAAI,aAAa;AACjB,aAAW,cAAc,aAAa;AACpC,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,QAAQ,QAAQ,EAAE,MAAM,WAAW,MAAM,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG,CAAC;AAAA,IACxF,QAAQ;AACN;AAAA,IACF;AACA,eAAW,SAAS,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,KAAK,cAAc,MAAM,IAAI,CAAC,GAAG;AAC3F,UAAI,MAAM,SAAS,MAAO;AAC1B,oBAAc;AACd,UAAI,aAAa,uBAAuB;AACtC,cAAM,IAAI,MAAM,sCAAsC,qBAAqB,cAAc;AAAA,MAC3F;AACA,YAAM,oBAAoB,kBAAkB,MAAM,MAAM,UAAU;AAClE,UAAI;AACJ,UAAI;AACF,cAAM,UAAU,MAAM,QAAQ,SAAS;AAAA,UACrC,MAAM;AAAA,UACN,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,QAC3B,CAAC;AACD,mBAAW,OAAO,YAAY,WAAW,UAAU,IAAI,YAAY,EAAE,OAAO,OAAO;AAAA,MACrF,QAAQ;AACN;AAAA,MACF;AACA,YAAM,cAAc,sBAAsB,QAAQ;AAClD,YAAM,OAAO,YAAY,MAAM,KAAK,KAAK,MAAM;AAC/C,UAAI,KAAK,SAAS,MAAM,CAAC,gBAAgB,KAAK,IAAI,GAAG;AACnD,cAAM,IAAI,MAAM,yCAAyC,KAAK,MAAM,GAAG,EAAE,CAAC,EAAE;AAAA,MAC9E;AACA,YAAM,cAAc,YAAY,aAAa,KAAK,KAAK;AACvD,UAAI,YAAY,SAAS,QAAS,SAAS,KAAK,WAAW,GAAG;AAC5D,cAAM,IAAI,MAAM,qBAAqB,IAAI,8BAA8B;AAAA,MACzE;AACA,YAAM,MAAM,KAAK,YAAY;AAC7B,UAAI,cAAc,IAAI,GAAG,GAAG;AAC1B,cAAM,IAAI,MAAM,oBAAoB,IAAI,8CAA8C;AAAA,MACxF;AACA,YAAM,YAA4B;AAAA,QAChC;AAAA,QACA;AAAA,QACA,MAAM;AAAA,QACN,aAAa,MAAM,8BAA8B,SAAS,MAAM,MAAM,KAAK;AAAA,QAC3E,QAAQ,WAAW;AAAA,MACrB;AACA,YAAM,WAAW,WAAW,IAAI,GAAG;AACnC,UAAI,CAAC,UAAU;AACb,mBAAW,IAAI,KAAK,SAAS;AAC7B;AAAA,MACF;AACA,UAAI,SAAS,gBAAgB,UAAU,aAAa;AAClD,cAAM,IAAI;AAAA,UACR,oBAAoB,IAAI,oCAAoC,SAAS,MAAM,QAAQ,UAAU,MAAM;AAAA,QACrG;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO,CAAC,GAAG,WAAW,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,KAAK,cAAc,MAAM,IAAI,CAAC;AAC3F;AAEA,eAAe,8BACb,SACA,MACA,OACiB;AACjB,QAAM,OAAOC,YAAW,QAAQ;AAChC,MAAI,aAAa;AACjB,MAAI,YAAY;AAEhB,iBAAe,MAAM,MAAc,cAAqC;AACtE,UAAM,UAAU,MAAM,QAAQ,QAAS,EAAE,MAAM,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG,CAAC;AAC5E,eAAW,SAAS,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,KAAK,cAAc,MAAM,IAAI,CAAC,GAAG;AAC3F,oBAAc;AACd,UAAI,aAAa,mBAAmB;AAClC,cAAM,IAAI,MAAM,2BAA2B,iBAAiB,qBAAqB;AAAA,MACnF;AACA,YAAM,oBAAoB,eAAe,GAAG,YAAY,IAAI,MAAM,IAAI,KAAK,MAAM;AACjF,WAAK,OAAO,MAAM,IAAI;AACtB,WAAK,OAAO,IAAI;AAChB,WAAK,OAAO,iBAAiB;AAC7B,WAAK,OAAO,IAAI;AAChB,UAAI,MAAM,SAAS,OAAO;AACxB,cAAM,MAAM,MAAM,MAAM,iBAAiB;AACzC;AAAA,MACF;AACA,UAAI,MAAM,SAAS,OAAQ;AAC3B,YAAM,UAAU,MAAM,QAAQ,SAAU;AAAA,QACtC,MAAM,MAAM;AAAA,QACZ,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,MAC3B,CAAC;AACD,YAAM,QAAQ,OAAO,YAAY,WAAW,IAAI,YAAY,EAAE,OAAO,OAAO,IAAI;AAChF,mBAAa,MAAM;AACnB,UAAI,YAAY,iBAAiB;AAC/B,cAAM,IAAI,MAAM,2BAA2B,eAAe,QAAQ;AAAA,MACpE;AACA,WAAK,OAAO,KAAK;AACjB,WAAK,OAAO,IAAI;AAAA,IAClB;AAAA,EACF;AAEA,QAAM,MAAM,MAAM,EAAE;AACpB,SAAO,KAAK,OAAO,KAAK;AAC1B;AAEA,SAAS,sBAAsB,UAG7B;AACA,QAAM,QAAQ,SAAS,MAAM,OAAO;AACpC,MAAI,MAAM,CAAC,GAAG,KAAK,MAAM,MAAO,QAAO,CAAC;AACxC,QAAM,MAAM,MAAM,UAAU,CAAC,MAAM,UAAU,QAAQ,KAAK,KAAK,KAAK,MAAM,KAAK;AAC/E,MAAI,QAAQ,GAAI,QAAO,CAAC;AACxB,QAAM,SAAiC,CAAC;AACxC,aAAW,QAAQ,MAAM,MAAM,GAAG,GAAG,GAAG;AACtC,UAAM,YAAY,KAAK,QAAQ,GAAG;AAClC,QAAI,cAAc,GAAI;AACtB,UAAM,MAAM,KAAK,MAAM,GAAG,SAAS,EAAE,KAAK;AAC1C,QAAI,QAAQ,UAAU,QAAQ,cAAe;AAC7C,WAAO,GAAG,IAAI,QAAQ,KAAK,MAAM,YAAY,CAAC,EAAE,KAAK,CAAC;AAAA,EACxD;AACA,SAAO;AACT;AAEA,SAAS,QAAQ,OAAuB;AACtC,MACE,MAAM,UAAU,KAChB,MAAM,CAAC,MAAM,MAAM,MAAM,SAAS,CAAC,MAClC,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,MAAM,MAClC;AACA,WAAO,MAAM,MAAM,GAAG,EAAE;AAAA,EAC1B;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,QAAgB,OAAuB;AAChE,SAAO,GAAG,OAAO,QAAQ,QAAQ,EAAE,CAAC,IAAI,KAAK;AAC/C;AAEA,SAAS,6BAA6B,SAA6D;AACjG,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AACA,SAAO;AACT;;;AC5MO,IAAM,8BAA8B;AAiBpC,SAAS,2BAA2B,OAA+B;AACxE,SAAO,OAAO,UAAU,YACtB,OAAO,cAAc,KAAK,KAC1B,SAAS,KACT,SAAS,8BACP,QACA;AACN;AAEO,SAAS,wBACd,OAC6B;AAC7B,QAAM,iBAAiB,oBAAI,IAAY;AACvC,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,MACL,WAAW;AAAA,QACT,aAAa;AAAA,QACb,cAAc;AAAA,QACd,cAAc;AAAA,QACd,kBAAkB;AAAA,QAClB,iBAAiB;AAAA,MACnB;AAAA,MACA,aAAa;AAAA,MACb,gBAAgB,CAAC;AAAA,IACnB;AAAA,EACF;AAEA,QAAM,iBAAiB,oBAAoB,MAAM,qBAAqB,cAAc;AACpF,QAAM,sBAAsB,mBAAmB,MAAM,aAAa,eAAe,cAAc;AAC/F,QAAM,uBAAuB;AAAA,IAC3B,MAAM;AAAA,IACN;AAAA,IACA;AAAA,EACF;AACA,QAAM,sBAAsB,mBAAmB,MAAM,aAAa,eAAe,cAAc;AAC/F,QAAM,qBAAqB;AAAA,IACzB;AAAA,IACA,CAAC,eAAe,cAAc;AAAA,IAC9B;AAAA,IACA;AAAA,EACF;AACA,QAAM,sBAAsB;AAAA,IAC1B;AAAA,IACA,CAAC,gBAAgB,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,EACF;AACA,MAAI,qBAAqB;AAAA,IACvB;AAAA,IACA,CAAC,eAAe,cAAc;AAAA,IAC9B;AAAA,IACA;AAAA,EACF;AACA,MAAI,gCAAgC,gBAAgB,cAAc,GAAG;AACnE,yBAAqB,EAAE,GAAG,oBAAoB,QAAQ,WAAW,OAAO,KAAK;AAAA,EAC/E;AAOA,QAAM,cAAc,wBAAwB;AAAA,IAC1C,UAAU;AAAA,IACV,kBAAkB,WAAW,MAAM,WAAW;AAAA,IAC9C,cAAc;AAAA,IACd,kBAAkB;AAAA,IAClB;AAAA,EACF,CAAC;AACD,QAAM,eAAe,wBAAwB;AAAA,IAC3C,UAAU;AAAA,IACV,kBAAkB,WAAW,MAAM,YAAY;AAAA,IAC/C,cAAc;AAAA,IACd,kBAAkB;AAAA,IAClB;AAAA,EACF,CAAC;AACD,QAAM,cAAc,qBAAqB;AAAA,IACvC;AAAA,IACA;AAAA,IACA,UAAU;AAAA,IACV,kBAAkB,WAAW,MAAM,WAAW;AAAA,IAC9C,kBAAkB;AAAA,IAClB;AAAA,EACF,CAAC;AAED,QAAM,oBAAoB;AAAA,IACxB,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,CAAC,sBAAsB,sBAAsB;AAAA,EAC/C;AACA,QAAM,qBAAqB;AAAA,IACzB,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,CAAC,uBAAuB,uBAAuB;AAAA,EACjD;AAEA,SAAO;AAAA,IACL,WAAW;AAAA,MACT;AAAA,MACA;AAAA,MACA,cAAc;AAAA,QACZ;AAAA,QACA,CAAC,iBAAiB,qBAAqB,qBAAqB;AAAA,QAC5D;AAAA,QACA;AAAA,MACF;AAAA,MACA,kBAAkB;AAAA,QAChB;AAAA,QACA,CAAC,sBAAsB,kBAAkB;AAAA,QACzC;AAAA,QACA;AAAA,MACF;AAAA,MACA,iBAAiB;AAAA,QACf;AAAA,QACA,CAAC,oBAAoB,mBAAmB,yBAAyB;AAAA,QACjE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,IACA,gBAAgB,CAAC,GAAG,cAAc,EAAE,MAAM,GAAG,EAAE;AAAA,EACjD;AACF;AAEO,SAAS,wBACd,OACyB;AACzB,SAAO,wBAAwB,KAAK,EAAE;AACxC;AAEA,SAAS,oBACP,OACA,gBACqB;AACrB,MAAI,UAAU,QAAW;AACvB,WAAO,CAAC;AAAA,EACV;AACA,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,gBAAY,gBAAgB,qBAAqB;AACjD,WAAO,CAAC;AAAA,EACV;AACA,QAAM,UAA+B,CAAC;AACtC,aAAW,CAAC,OAAO,KAAK,KAAK,MAAM,QAAQ,GAAG;AAC5C,QAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AAC/D,kBAAY,gBAAgB,uBAAuB,KAAK,GAAG;AAG3D,cAAQ,KAAK,CAAC,CAAC;AACf;AAAA,IACF;AACA,YAAQ,KAAK,KAAK;AAAA,EACpB;AACA,SAAO;AACT;AAOA,SAAS,8BACP,gBACA,aACA,eACA,gBACuB;AACvB,MAAI,eAAe,WAAW,GAAG;AAC/B,WAAO,EAAE,QAAQ,UAAU,OAAO,KAAK;AAAA,EACzC;AACA,QAAM,SAA+B,CAAC;AACtC,MAAI,aAAa;AACjB,MAAI,UAAU;AACd,aAAW,CAAC,OAAO,KAAK,KAAK,eAAe,QAAQ,GAAG;AACrD,UAAM,WAAW,kBAAkB,OAAkC,WAAW;AAChF,QAAI,CAAC,YAAY,SAAS,UAAU,MAAM;AACxC,mBAAa;AACb;AAAA,IACF;AACA,UAAM,SAAS;AAAA,MACb,SAAS;AAAA,MACT,uBAAuB,KAAK,KAAK,SAAS,GAAG;AAAA,MAC7C;AAAA,IACF;AACA,QAAI,WAAW,KAAM,WAAU;AAC/B,WAAO,KAAK,MAAM;AAAA,EACpB;AACA,MAAI,SAAS;AACX,WAAO,EAAE,QAAQ,WAAW,OAAO,KAAK;AAAA,EAC1C;AACA,MAAI,YAAY;AACd,WAAO,EAAE,QAAQ,cAAc,OAAO,KAAK;AAAA,EAC7C;AACA,QAAM,QAAQ,gBAAgB,QAAQ,eAAe,cAAc;AACnE,SAAO,UAAU,OAAO,EAAE,QAAQ,WAAW,OAAO,KAAK,IAAI,EAAE,QAAQ,YAAY,MAAM;AAC3F;AAEA,SAAS,wBAAwB,OAMf;AAChB,MAAI,MAAM,iBAAiB,WAAW,YAAY;AAChD,QACE,MAAM,oBACN,MAAM,aAAa,QACnB,MAAM,aAAa,MAAM,iBAAiB,OAC1C;AACA,kBAAY,MAAM,gBAAgB,MAAM,YAAY;AAAA,IACtD;AACA,WAAO,MAAM,iBAAiB;AAAA,EAChC;AACA,MAAI,MAAM,iBAAiB,WAAW,WAAW;AAC/C,QAAI,MAAM,kBAAkB;AAC1B,kBAAY,MAAM,gBAAgB,MAAM,YAAY;AAAA,IACtD;AACA,WAAO;AAAA,EACT;AACA,SAAO,MAAM;AACf;AAEA,SAAS,qBAAqB,OAOZ;AAChB,MAAI,MAAM,gBAAgB,QAAQ,MAAM,iBAAiB,MAAM;AAC7D,UAAM,UAAU;AAAA,MACd,CAAC,MAAM,aAAa,MAAM,YAAY;AAAA,MACtC;AAAA,MACA,MAAM;AAAA,IACR;AACA,QAAI,YAAY,MAAM;AAGpB,UAAI,MAAM,iBAAkB,aAAY,MAAM,gBAAgB,aAAa;AAC3E,UAAI,MAAM,iBAAiB,WAAW,YAAY;AAChD,oBAAY,MAAM,gBAAgB,iCAAiC;AAAA,MACrE;AACA,aAAO;AAAA,IACT;AACA,QAAI,MAAM,oBAAoB,MAAM,aAAa,QAAQ,MAAM,aAAa,SAAS;AACnF,kBAAY,MAAM,gBAAgB,aAAa;AAAA,IACjD;AACA,QAAI,MAAM,iBAAiB,WAAW,cAAc,MAAM,iBAAiB,UAAU,SAAS;AAC5F,kBAAY,MAAM,gBAAgB,iCAAiC;AAAA,IACrE;AACA,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,iBAAiB,WAAW,YAAY;AAChD,UAAM,eAAe,MAAM,iBAAiB;AAC5C,QACE,iBAAiB,QACjB,CAAC,2BAA2B,cAAc,MAAM,aAAa,MAAM,YAAY,GAC/E;AACA,kBAAY,MAAM,gBAAgB,iCAAiC;AACnE,UAAI,MAAM,iBAAkB,aAAY,MAAM,gBAAgB,aAAa;AAC3E,aAAO;AAAA,IACT;AACA,QAAI,MAAM,oBAAoB,MAAM,aAAa,QAAQ,MAAM,aAAa,cAAc;AACxF,kBAAY,MAAM,gBAAgB,aAAa;AAAA,IACjD;AACA,WAAO;AAAA,EACT;AACA,MAAI,MAAM,iBAAiB,WAAW,WAAW;AAC/C,QAAI,MAAM,iBAAkB,aAAY,MAAM,gBAAgB,aAAa;AAC3E,WAAO;AAAA,EACT;AACA,MACE,MAAM,aAAa,QACnB,CAAC,2BAA2B,MAAM,UAAU,MAAM,aAAa,MAAM,YAAY,GACjF;AACA,gBAAY,MAAM,gBAAgB,aAAa;AAC/C,WAAO;AAAA,EACT;AACA,SAAO,MAAM;AACf;AAEA,SAAS,2BACP,OACA,aACA,cACS;AACT,UACG,gBAAgB,QAAQ,SAAS,iBACjC,iBAAiB,QAAQ,SAAS;AAEvC;AAEA,SAAS,gCACP,gBACA,gBACS;AACT,MAAI,eAAe;AACnB,aAAW,CAAC,OAAO,KAAK,KAAK,eAAe,QAAQ,GAAG;AACrD,UAAM,SAAS;AACf,UAAM,gBAAgB,kBAAkB,QAAQ,CAAC,eAAe,cAAc,CAAC;AAC/E,UAAM,iBAAiB,kBAAkB,QAAQ,CAAC,gBAAgB,eAAe,CAAC;AAClF,UAAM,gBAAgB,kBAAkB,QAAQ,CAAC,eAAe,cAAc,CAAC;AAC/E,QAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,cAAe;AACzD,UAAM,cAAc,2BAA2B,cAAc,KAAK;AAClE,UAAM,eAAe,2BAA2B,eAAe,KAAK;AACpE,UAAM,cAAc,2BAA2B,cAAc,KAAK;AAClE,QAAI,gBAAgB,QAAQ,iBAAiB,QAAQ,gBAAgB,KAAM;AAC3E,UAAM,UACJ,eAAe,8BAA8B,eAAe,cAAc,eAAe;AAC3F,QAAI,YAAY,QAAQ,gBAAgB,SAAS;AAC/C,kBAAY,gBAAgB,uBAAuB,KAAK,KAAK,cAAc,GAAG,EAAE;AAChF,qBAAe;AAAA,IACjB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,WAAW,OAAyB;AAC3C,SAAO,UAAU,UAAa,UAAU;AAC1C;AAEA,SAAS,sBACP,kBACA,eACA,gBACA,aAC8D;AAC9D,QAAM,iBAA+E,CAAC;AACtF,MAAI,oBAAoB;AACxB,aAAW,CAAC,OAAO,KAAK,KAAK,eAAe,QAAQ,GAAG;AACrD,UAAM,WAAW,kBAAkB,OAAkC,WAAW;AAChF,QAAI,CAAC,UAAU;AACb,qBAAe,KAAK;AAAA,QAClB,SAAS;AAAA,QACT,MAAM,uBAAuB,KAAK,KAAK,YAAY,CAAC,CAAC;AAAA,QACrD,SAAS;AAAA,MACX,CAAC;AACD;AAAA,IACF;AACA,wBAAoB;AACpB,mBAAe,KAAK;AAAA,MAClB,SAAS,SAAS;AAAA,MAClB,MAAM,uBAAuB,KAAK,KAAK,SAAS,GAAG;AAAA,IACrD,CAAC;AAAA,EACH;AAIA,SAAO,oBACH,iBACA,qBAAqB,SACnB,CAAC,IACD,CAAC,EAAE,SAAS,kBAAkB,MAAM,cAAc,CAAC;AAC3D;AAEA,SAAS,0BACP,SACA,MACA,OACA,gBACe;AACf,QAAM,SAA+B,CAAC;AACtC,MAAI,mBAAmB;AACvB,MAAI,kBAAkB;AACtB,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,SAAS;AAClB,wBAAkB;AAClB;AAAA,IACF;AACA,UAAM,UAAU,cAAc,OAAO,SAAS,OAAO,MAAM,cAAc;AACzE,QAAI,CAAC,QAAQ,UAAU;AACrB,wBAAkB;AAAA,IACpB;AACA,eAAW,UAAU,QAAQ,SAAS;AACpC,YAAM,WAAW,kBAAkB,OAAO,QAAQ,IAAI;AACtD,UAAI,CAAC,UAAU;AACb,0BAAkB;AAClB;AAAA,MACF;AACA,yBAAmB;AACnB,aAAO;AAAA,QACL,mBAAmB,SAAS,OAAO,GAAG,OAAO,IAAI,IAAI,SAAS,GAAG,IAAI,cAAc;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACA,SAAO,oBAAoB,CAAC,kBACxB,gBAAgB,QAAQ,GAAG,KAAK,cAAc,cAAc,IAC5D;AACN;AAEA,SAAS,cACP,SACA,MACA,gBAIA;AACA,QAAM,UAAU,MAAM,QAAQ,OAAO,IAAI,UAAU,CAAC,OAAO;AAC3D,QAAM,UAAoE,CAAC;AAC3E,MAAI,WAAW;AACf,aAAW,CAAC,OAAO,KAAK,KAAK,QAAQ,QAAQ,GAAG;AAC9C,UAAM,YAAY,MAAM,QAAQ,OAAO,IAAI,GAAG,IAAI,IAAI,KAAK,MAAM;AACjE,QAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AAC/D,kBAAY,gBAAgB,SAAS;AACrC,iBAAW;AACX;AAAA,IACF;AACA,YAAQ,KAAK,EAAE,QAAQ,OAAkC,MAAM,UAAU,CAAC;AAAA,EAC5E;AACA,SAAO,EAAE,SAAS,SAAS;AAC7B;AAEA,SAAS,kBACP,QACA,MACwC;AACxC,aAAW,OAAO,MAAM;AACtB,QAAI,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,KAAK,OAAO,GAAG,MAAM,QAAW;AAGlF,aAAO,EAAE,KAAK,OAAO,OAAO,GAAG,EAAE;AAAA,IACnC;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,mBACP,OACA,OACA,gBACe;AACf,MAAI,UAAU,UAAa,UAAU,MAAM;AACzC,WAAO;AAAA,EACT;AACA,QAAM,aAAa,2BAA2B,KAAK;AACnD,MAAI,eAAe,MAAM;AACvB,gBAAY,gBAAgB,KAAK;AAAA,EACnC;AACA,SAAO;AACT;AAEA,SAAS,gBACP,QACA,OACA,gBACe;AACf,MAAI,OAAO,WAAW,KAAK,OAAO,KAAK,CAAC,UAAU,UAAU,IAAI,GAAG;AACjE,WAAO;AAAA,EACT;AACA,MAAI,QAAQ;AACZ,aAAW,SAAS,QAAoB;AACtC,QAAI,QAAQ,8BAA8B,OAAO;AAC/C,kBAAY,gBAAgB,KAAK;AACjC,aAAO;AAAA,IACT;AACA,aAAS;AAAA,EACX;AACA,SAAO;AACT;AAEA,SAAS,YAAY,gBAA6B,OAAqB;AACrE,MAAI,eAAe,OAAO,IAAI;AAC5B,mBAAe,IAAI,KAAK;AAAA,EAC1B;AACF;;;AnC5TA,QAAQ,IAAI,oCAAoC;AAChD,QAAQ,IAAI,mCAAmC;AAoD/C;AAAA,EACE;AACF;AAsFA,yBAAyB;AAEzB,IAAM,uCAAuC;AAiEtC,SAAS,2BAAiC;AAC/C,QAAM,OAAO,WAAW;AAKxB,MAAI,CAAC,QAAQ,OAAO,KAAK,SAAS,YAAY;AAC5C;AAAA,EACF;AACA,SAAO,eAAe,MAAM,QAAQ;AAAA,IAClC,cAAc;AAAA,IACd,UAAU;AAAA,IACV,MAAS,QAA2D;AAClE,YAAM,WAAW,gBAAgB,MAAM,IACnC,OAAO,OAAO,aAAa,EAAE,IAC7B,OAAO,OAAO,QAAQ,EAAE;AAC5B,aAAO,IAAI,eAAkB;AAAA,QAC3B,MAAM,KAAK,YAAY;AACrB,gBAAM,OAAO,MAAM,SAAS,KAAK;AACjC,cAAI,KAAK,MAAM;AACb,uBAAW,MAAM;AAAA,UACnB,OAAO;AACL,uBAAW,QAAQ,KAAK,KAAK;AAAA,UAC/B;AAAA,QACF;AAAA,QACA,MAAM,SAAS;AACb,gBAAM,SAAS,SAAS;AAAA,QAC1B;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACH;AAgCO,IAAM,wBAAwB;AA8BrC,IAAI,sBAAkD;AAE/C,SAAS,6BAA6B,OAAqD;AAChG,wBAAsB,SAAS;AACjC;AAwCO,SAAS,6BACd,YAAwC,CAAC,GACxB;AACjB,SAAO;AAAA,IACL,WAAW,CAAC,aAAa;AACvB,mCAA6B,UAAU,OAAO;AAC9C,sBAAgB,QAAQ;AAAA,IAC1B;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA,kBAAkB,CAAC,UAAU,YAC3B,UAAU,QAAQ,OAAO,iBAAiB,UAAU,OAAO;AAAA,IAC7D,YAAY,CAAC,UAAU,WAAW,YAChC,mBAAmB,UAAU,WAAW;AAAA,MACtC,GAAG;AAAA,MACH,GAAI,UAAU,QAAQ,EAAE,OAAO,UAAU,MAAM,IAAI,CAAC;AAAA,IACtD,CAAC;AAAA,IACH,cAAc;AAAA,IACd,cAAc;AAAA,IACd,WAAW,OAAO,OAAO,OAAO,UAAU,YACxC,MAAM,eAAe,OAAO,OAAO,UAAU;AAAA,MAC3C,GAAG;AAAA,MACH,eAAe,UAAU;AAAA,IAC3B,CAAC;AAAA,IACH;AAAA,IACA;AAAA,EACF;AACF;AASO,SAAS,8BACd,UACA,aAAqB,SAAS,gBACtB;AACR,MAAI,SAAS,mBAAmB,SAAS;AACvC,UAAM,UAAU,SAAS,sBAAsB,uBAAuB,QAAQ;AAC9E,UAAM,SAAS,SAAS,qBAAqB,SAAS,sBAAsB;AAC5E,WAAO,IAAIC,QAAO;AAAA,MAChB;AAAA,MACA;AAAA,MACA,YAAY,SAAS;AAAA,MACrB,cAAc,wBAAwB,UAAU,OAAO;AAAA,MACvD,gBACE,SAAS,sBAAsB,CAAC,SAAS,oBACrC,EAAE,eAAe,UAAU,SAAS,kBAAkB,GAAG,IACzD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMN,OAAO,6BAA6B,uBAAuB,YAAY,WAAW,KAAK,CAAC;AAAA,IAC1F,CAAC;AAAA,EACH;AACA,SAAO,IAAIA,QAAO;AAAA,IAChB,QAAQ,SAAS,gBAAgB,QAAQ,IAAI;AAAA,IAC7C,GAAI,SAAS,gBAAgB,EAAE,SAAS,SAAS,cAAc,IAAI,CAAC;AAAA,IACpE,YAAY,SAAS;AAAA,IACrB,OAAO,uBAAuB,YAAY,WAAW,KAAK;AAAA,EAC5D,CAAC;AACH;AAYA,IAAM,sBAAsB,oBAAI,IAAoB;AAE7C,SAAS,oBAAoB,UAAiC,UAA4B;AAC/F,QAAM,SAAS,oBAAoB,IAAI,SAAS,EAAE;AAClD,MAAI,QAAQ;AACV,WAAO;AAAA,EACT;AACA,QAAM,SAAS,SAAS,UACpB,8BAA8B,UAAU,SAAS,EAAE,IACnD,SAAS,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOhB,IAAIA,QAAO;AAAA,MACT,QAAQ,SAAS,UAAU;AAAA,MAC3B,GAAI,SAAS,UAAU,EAAE,SAAS,SAAS,QAAQ,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA,MAIxD,YAAY;AAAA;AAAA;AAAA;AAAA,MAIZ,SAAS;AAAA,MACT,OAAO,uBAAuB,uBAAuB,SAAS,IAAI,WAAW,KAAK,CAAC;AAAA,IACrF,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,IAID,IAAIA,QAAO;AAAA,MACT,GAAI,SAAS,SAAS,EAAE,QAAQ,SAAS,OAAO,IAAI,CAAC;AAAA,MACrD,GAAI,SAAS,UAAU,EAAE,SAAS,SAAS,QAAQ,IAAI,CAAC;AAAA,MACxD,YAAY,SAAS;AAAA,MACrB,GAAI,SAAS,eAAe,EAAE,cAAc,SAAS,aAAa,IAAI,CAAC;AAAA,MACvE,GAAI,SAAS,iBAAiB,EAAE,gBAAgB,SAAS,eAAe,IAAI,CAAC;AAAA,MAC7E,OAAO,uBAAuB,SAAS,IAAI,WAAW,KAAK;AAAA,IAC7D,CAAC;AAAA;AACP,sBAAoB,IAAI,SAAS,IAAI,MAAM;AAC3C,SAAO;AACT;AAWO,SAAS,mBACd,UACA,QACA,SACO;AACP,SAAO,SAAS,QAAQ,SACpB,IAAI,2BAA2B,QAAQ,OAAO,IAC9C,IAAI,qBAAqB,QAAQ,OAAO;AAC9C;AAUO,SAAS,iBACd,UACA,SAMO;AACP,QAAM,WAAW,qBAAqB,UAAU,OAAO;AACvD,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,EACT;AACA,QAAM,SAAS,oBAAoB,SAAS,UAAU,QAAQ;AAC9D,SAAO;AAAA,IACL,UAAU,SAAS;AAAA,IACnB;AAAA,IACA,OAAO,mBAAmB,SAAS,UAAU,QAAQ,SAAS,MAAM,eAAe;AAAA,IACnF,YAAY,SAAS;AAAA,EACvB;AACF;AAsBO,IAAM,6BAAN,MAA0D;AAAA,EAG/D,YAA6B,UAAoB;AAApB;AAAA,EAAqB;AAAA,EAF1C;AAAA,EAIR,MAAM,SAAS,WAAoC;AACjD,QAAI,WAAW;AACb,YAAM,WAAW;AAAA,QACf,oCAAoC,KAAK,UAAU,SAAS;AAAA,QAC5D;AAAA,MACF;AACA,UAAI,UAAU;AASZ,YACE,UAAU,WAAW,qBAAqB,KAC1C,SAAS,SAAS,SAAS,sBAC3B;AACA,gBAAM,IAAI,kCAAkC,SAAS;AAAA,QACvD;AACA,eAAO,SAAS;AAAA,MAClB;AAYA,UAAI,UAAU,WAAW,qBAAqB,GAAG;AAC/C,cAAM,IAAI,kCAAkC,SAAS;AAAA,MACvD;AAAA,IACF;AAIA,SAAK,aAAa,IAAI,eAAe;AACrC,WAAO,KAAK,SAAS,SAAS,SAAS;AAAA,EACzC;AACF;AAEA,SAAS,oCAAoC,UAAoB,WAA6B;AAC5F,MAAI,cAAc,SAAS,aAAa;AACtC,WAAO;AAAA,EACT;AACA,QAAM,iBAAiB,yBAAyB,SAAS,mBAAmB;AAC5E,QAAM,kBAAkB,eAAe,KAAK,CAAC,OAAO,OAAO,SAAS;AACpE,MAAI,CAAC,iBAAiB;AACpB,WAAO;AAAA,EACT;AAMA,SAAO,eAAe,SAAS,SAAS,IACpC,WACA,EAAE,GAAG,UAAU,aAAa,gBAAgB;AAClD;AAEA,SAAS,yBAAyB,OAAyB;AACzD,SAAO,MACJ,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,OAAO;AACnB;AAWO,IAAM,oCAAN,cAAgD,MAAM;AAAA,EAC3D,YAAY,WAAmB;AAC7B;AAAA,MACE,6BAA6B,SAAS;AAAA,IAExC;AACA,SAAK,OAAO;AAAA,EACd;AACF;AAUO,IAAM,mCAAN,cAA+C,MAAM;AAAA,EAC1D,YAAY,WAAmB,YAAoB,QAA8B;AAC/E;AAAA,MACE,WAAW,aACP,UAAU,SAAS,wDAAwD,UAAU,0IAErF,UAAU,SAAS;AAAA,IAEzB;AACA,SAAK,OAAO;AAAA,EACd;AACF;AAEO,SAAS,gBAAgB,UAA0B;AACxD,8BAA4B,SAAS,wBAAwB;AAC7D,qBAAmB,SAAS,wBAAwB,CAAC,SAAS,yBAAyB;AAKvF,QAAM,SAAS,IAAI,2BAA2B,QAAQ;AACtD,MAAI,SAAS,mBAAmB,SAAS;AACvC,2BAAuB,8BAA8B,QAAQ,CAAC;AAC9D,4BAAwB,MAAM;AAC9B;AAAA,EACF;AACA,MAAI,SAAS,cAAc;AACzB,wBAAoB,SAAS,YAAY;AAAA,EAC3C;AACA,MAAI,SAAS,eAAe;AAC1B,2BAAuB,8BAA8B,QAAQ,CAAC;AAAA,EAChE;AACA,0BAAwB,MAAM;AAChC;AAEA,SAAS,uBAAuB,UAAkB,OAAmC;AACnF,SAAQ,OAAO,OAAoC,SAAuC;AACxF,QAAI,CAAC,iBAAiB,KAAK,GAAG;AAC5B,aAAO,MAAM,MAAM,OAAO,IAAI;AAAA,IAChC;AACA,UAAM,UAAU,YAAY,IAAI;AAChC,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,OAAO,IAAI;AACxC,4BAAsB,UAAU,SAAS,KAAK,cAAc,UAAU,OAAO;AAC7E,aAAO;AAAA,IACT,SAAS,OAAO;AACd,4BAAsB,UAAU,UAAU,OAAO;AACjD,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAEA,SAAS,iBAAiB,OAA6C;AACrE,QAAM,SACJ,OAAO,UAAU,WACb,QACA,iBAAiB,MACf,MAAM,SAAS,IACd,MAA4B;AACrC,MAAI,OAAO,WAAW,YAAY,OAAO,WAAW,GAAG;AACrD,WAAO;AAAA,EACT;AACA,MAAI;AACF,UAAM,WAAW,IAAI,IAAI,QAAQ,uBAAuB,EAAE;AAC1D,WACE,SAAS,SAAS,YAAY,KAC9B,SAAS,SAAS,mBAAmB,KACrC,SAAS,SAAS,kBAAkB;AAAA,EAExC,QAAQ;AACN,WAAO,8DAA8D,KAAK,MAAM;AAAA,EAClF;AACF;AAEA,SAAS,sBACP,UACA,SACA,SACM;AACN,QAAM,kBAAkB,KAAK,IAAI,IAAI,YAAY,IAAI,IAAI,WAAW,GAAI;AACxE,MAAI;AACF,yBAAqB,cAAc,EAAE,UAAU,SAAS,gBAAgB,CAAC;AAAA,EAC3E,QAAQ;AAAA,EAER;AACF;AAmBA,eAAsB,uBACpB,UACA,OACA,UAQI,CAAC,GACY;AACjB,QAAM,SAAS,QAAQ,UAAU,8BAA8B,QAAQ;AACvE,QAAM,MAAM,QAAQ,OAAO;AAC3B,QAAM,QAAQ,QAAQ,SAAS,SAAS;AACxC,QAAM,YAAY,QAAQ,mBAAmB;AAC7C,MAAI,QAAQ,QAAQ;AAClB,UAAM,aAAa,mCAAmC,KAAK;AAC3D,QAAI;AACJ,QAAI;AACF,mBAAa,MAAM,OAAO,KAAK,YAAY,OAAO;AAAA,QAChD;AAAA,QACA,YAAY;AAAA,QACZ,UAAU,CAAC,EAAE,MAAM,QAAQ,SAAS,WAAW,CAAC;AAAA,QAChD,GAAI,QAAQ,iBAAiB,EAAE,kBAAkB,QAAQ,eAAe,IAAI,CAAC;AAAA,MAC/E,CAAQ;AAAA,IACV,SAAS,OAAO;AACd,YAAM,IAAI,gCAAgC,qCAAqC,KAAK,GAAG,KAAK;AAAA,IAC9F;AACA,UAAMC,SAAQ,+BAA+B,UAAU;AACvD,QAAIA,QAAO;AACT,YAAM,QAAQ,UAAUA,MAAK;AAAA,IAC/B;AACA,UAAM,OAAQ,WACX,UAAU,CAAC,GAAG,SAAS;AAC1B,UAAMC,WAAU,OAAO,SAAS,WAAW,KAAK,KAAK,IAAI;AACzD,QAAI,CAACA,UAAS;AACZ,YAAM,IAAI,4BAA4B,8BAA8B,YAAYA,QAAO,CAAC;AAAA,IAC1F;AACA,WAAOA;AAAA,EACT;AAIA,QAAM,UAAwB;AAAA,IAC5B,oBAAoB,QAAQ,sBAAsB;AAAA,IAClD;AAAA,IACA,eAAe;AAAA,MACb;AAAA;AAAA;AAAA,MAGA,GAAI,SAAS,mBAAmB,UAAU,CAAC,IAAI,EAAE,OAAO,MAAM;AAAA,MAC9D,GAAI,QAAQ,iBACR,EAAE,cAAc,EAAE,kBAAkB,QAAQ,eAAe,EAAE,IAC7D,CAAC;AAAA,IACP;AAAA,IACA,OAAO,CAAC;AAAA,IACR,yBAAyB;AAAA,IACzB,YAAY;AAAA,IACZ,UAAU,CAAC;AAAA,IACX,SAAS;AAAA,EACX;AACA,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,IAAI,yBAAyB,QAAQ,KAAK,EAAE,cAAc,OAAO;AAAA,EACpF,SAAS,OAAO;AACd,UAAM,IAAI,gCAAgC,qCAAqC,KAAK,GAAG,KAAK;AAAA,EAC9F;AACA,QAAM,QAAQ,+BAA+B,QAAQ;AACrD,MAAI,OAAO;AACT,UAAM,QAAQ,UAAU,KAAK;AAAA,EAC/B;AACA,MAAI,mCAAmC,QAAQ,GAAG;AAChD,UAAM,IAAI,gCAAgC,qCAAqC,QAAQ,CAAC;AAAA,EAC1F;AACA,QAAM,UAAU,0BAA0B,QAAQ,EAAE,KAAK;AACzD,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,4BAA4B,8BAA8B,UAAU,OAAO,CAAC;AAAA,EACxF;AACA,SAAO;AACT;AAOA,eAAsB,0BACpB,UACA,OACA,SAMkC;AAClC,QAAM,cAAc,mCAAmC,KAAK;AAC5D,QAAM,UAAwB;AAAA,IAC5B,oBAAoB;AAAA,IACpB,OAAO;AAAA,IACP,eAAe;AAAA;AAAA,MAEb,GAAI,SAAS,mBAAmB,UAAU,CAAC,IAAI,EAAE,OAAO,MAAM;AAAA,MAC9D,GAAI,QAAQ,iBACR,EAAE,cAAc,EAAE,kBAAkB,QAAQ,eAAe,EAAE,IAC7D,CAAC;AAAA,IACP;AAAA,IACA,OAAO,CAAC;AAAA,IACR,yBAAyB;AAAA,IACzB,YAAY;AAAA,IACZ,UAAU,CAAC;AAAA,IACX,SAAS;AAAA,EACX;AACA,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,IAAI,yBAAyB,QAAQ,QAAQ,QAAQ,KAAK,EAAE;AAAA,MAC3E;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,IAAI,gCAAgC,qCAAqC,KAAK,GAAG,KAAK;AAAA,EAC9F;AACA,QAAM,QAAQ,+BAA+B,QAAQ;AACrD,MAAI,OAAO;AACT,UAAM,QAAQ,UAAU,KAAK;AAAA,EAC/B;AACA,MAAI,mCAAmC,QAAQ,GAAG;AAChD,UAAM,IAAI,gCAAgC,qCAAqC,QAAQ,CAAC;AAAA,EAC1F;AACA,MAAI;AACF,WAAO,oCAAoC,QAAQ;AAAA,EACrD,SAAS,OAAO;AACd,QAAI,iBAAiB,6BAA6B;AAChD,YAAM,IAAI,4BAA4B;AAAA,QACpC,GAAG,8BAA8B,UAAU,EAAE;AAAA,QAC7C,GAAG,MAAM;AAAA,QACT,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,UAAM;AAAA,EACR;AACF;AAEA,SAAS,mCAAmC,UAA4B;AACtE,MAAI,CAAC,YAAY,OAAO,aAAa,SAAU,QAAO;AACtD,QAAM,SAAS;AACf,SACE,OAAO,WAAW,YAClB,OAAO,WAAW,gBACjB,OAAO,UAAU,QAAQ,OAAO,UAAU;AAE/C;AAGO,SAAS,qCAAqC,OAAyC;AAC5F,MAAI,UAAU;AACd,MAAI,YAA2B;AAC/B,MAAI,aAA4B;AAChC,MAAI,iBAAgC;AACpC,MAAI,aAA4B;AAChC,MAAI,OAAsB;AAC1B,MAAI,OAAsB;AAC1B,MAAI,YAA2B;AAC/B,MAAI,YAA2B;AAC/B,QAAM,OAAO,oBAAI,IAAY;AAC7B,WAAS,QAAQ,GAAG,QAAQ,KAAK,WAAW,OAAO,YAAY,UAAU,SAAS,GAAG;AACnF,QAAI,KAAK,IAAI,OAAO,EAAG;AACvB,SAAK,IAAI,OAAO;AAChB,UAAM,SAAS;AACf,QAAI,CAAC,aAAa,mBAAmB,OAAO;AAC1C,kBAAY,+BAA+B,QAAQ,IAAI;AAAA,IACzD;AACA,QACE,eAAe,QACf,OAAO,OAAO,WAAW,YACzB,OAAO,SAAS,OAAO,MAAM,GAC7B;AACA,mBAAa,OAAO;AAAA,IACtB;AACA,QAAI,mBAAmB,QAAQ,OAAO,OAAO,WAAW,UAAU;AAChE,uBAAiB,+BAA+B,OAAO,MAAM;AAAA,IAC/D;AACA,UAAM,uBAAuB,OAAO,mBAAmB,OAAO;AAC9D,QAAI,mBAAmB,QAAQ,OAAO,yBAAyB,UAAU;AACvE,uBAAiB,+BAA+B,oBAAoB;AAAA,IACtE;AACA,UAAM,mBAAmB,OAAO,eAAe,OAAO,cAAc,OAAO;AAC3E,QAAI,eAAe,QAAQ,OAAO,qBAAqB,UAAU;AAC/D,mBAAa,+BAA+B,gBAAgB;AAAA,IAC9D;AACA,QAAI,SAAS,QAAQ,OAAO,OAAO,SAAS,UAAU;AACpD,aAAO,+BAA+B,OAAO,IAAI;AAAA,IACnD;AACA,QAAI,SAAS,QAAQ,OAAO,OAAO,SAAS,UAAU;AACpD,aAAO,+BAA+B,OAAO,IAAI;AAAA,IACnD;AACA,UAAM,kBAAkB,OAAO,cAAc,OAAO;AACpD,QAAI,cAAc,QAAQ,OAAO,oBAAoB,UAAU;AAC7D,kBAAY,+BAA+B,eAAe;AAAA,IAC5D;AACA,QAAI,cAAc,MAAM;AACtB,YAAM,kBAAkB,OAAO,cAAc,OAAO,aAAa,OAAO;AACxE,UAAI,OAAO,oBAAoB,UAAU;AACvC,oBAAY,+BAA+B,eAAe;AAAA,MAC5D;AACA,YAAM,UAAU,OAAO;AACvB,UAAI,CAAC,aAAa,WAAW,OAAO,YAAY,UAAU;AACxD,cAAM,MAAO,QAA8B;AAC3C,YAAI,OAAO,QAAQ,YAAY;AAC7B,gBAAM,WAAW,IAAI,KAAK,SAAS,cAAc;AACjD,cAAI,OAAO,aAAa,UAAU;AAChC,wBAAY,+BAA+B,QAAQ;AAAA,UACrD;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,UAAM,cAAc,OAAO;AAC3B,QAAI,eAAe,OAAO,gBAAgB,YAAY,CAAC,KAAK,IAAI,WAAW,GAAG;AAC5E,YAAM,SAAS;AACf,UAAI,SAAS,QAAQ,OAAO,OAAO,SAAS,UAAU;AACpD,eAAO,+BAA+B,OAAO,IAAI;AAAA,MACnD;AACA,UAAI,SAAS,QAAQ,OAAO,OAAO,SAAS,UAAU;AACpD,eAAO,+BAA+B,OAAO,IAAI;AAAA,MACnD;AACA,YAAM,uBAAuB,OAAO,mBAAmB,OAAO;AAC9D,UAAI,mBAAmB,QAAQ,OAAO,yBAAyB,UAAU;AACvE,yBAAiB,+BAA+B,oBAAoB;AAAA,MACtE;AACA,YAAM,mBAAmB,OAAO,eAAe,OAAO,cAAc,OAAO;AAC3E,UAAI,eAAe,QAAQ,OAAO,qBAAqB,UAAU;AAC/D,qBAAa,+BAA+B,gBAAgB;AAAA,MAC9D;AACA,YAAM,kBAAkB,OAAO,cAAc,OAAO;AACpD,UAAI,cAAc,QAAQ,OAAO,oBAAoB,UAAU;AAC7D,oBAAY,+BAA+B,eAAe;AAAA,MAC5D;AAAA,IACF;AACA,cAAU,OAAO;AAAA,EACnB;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;AAAA,EACnC;AACF;AAEA,IAAM,wCAAwC;AAC9C,IAAM,0CAA0C;AAEhD,SAAS,+BAA+B,OAAuB;AAC7D,QAAM,QAAQ,OAAO,KAAK,OAAO,MAAM;AACvC,MAAI,MAAM,UAAU,sCAAuC,QAAO;AAClE,QAAM,cAAc,OAAO,WAAW,yCAAyC,MAAM;AACrF,MAAI,MAAM,wCAAwC;AAClD,SAAO,MAAM,KAAK,uBAAuB,MAAM,GAAG,CAAE,EAAG,QAAO;AAC9D,SAAO,GAAG,MAAM,SAAS,GAAG,GAAG,EAAE,SAAS,MAAM,CAAC,GAAG,uCAAuC;AAC7F;AAEA,SAAS,uBAAuB,OAAwB;AACtD,UAAQ,QAAQ,SAAU;AAC5B;AAGO,SAAS,8BACd,UACA,gBAAgB,0BAA0B,QAAQ,EAAE,KAAK,GAChC;AACzB,MAAI,CAAC,YAAY,OAAO,aAAa,UAAU;AAC7C,WAAO,EAAE,eAAe,OAAO,UAAU,qBAAqB,cAAc,OAAO;AAAA,EACrF;AACA,QAAM,SAAS;AACf,QAAM,SAAS,MAAM,QAAQ,OAAO,MAAM,IAAI,OAAO,SAAS,CAAC;AAC/D,QAAM,cAAc,OAAO,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS;AACpD,QAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO,EAAE,MAAM,OAAO,KAAK;AAClE,UAAM,QAAQ;AACd,UAAM,UAAU,MAAM,QAAQ,MAAM,OAAO,IAAI,MAAM,UAAU,CAAC;AAChE,WAAO;AAAA,MACL,MAAM,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAAA,MACpD,MAAM,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAAA,MACpD,QAAQ,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AAAA,MAC1D,kBAAkB,QACf,MAAM,GAAG,EAAE,EACX;AAAA,QAAI,CAAC,SACJ,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA4B,SAAS,WAC5E,KAA0B,OAC3B,OAAO;AAAA,MACb;AAAA,MACF,kBAAkB,QAAQ;AAAA,IAC5B;AAAA,EACF,CAAC;AACD,QAAM,UAAU,MAAM,QAAQ,OAAO,OAAO,IAAI,OAAO,UAAU,CAAC;AAClE,QAAM,QAAQ,+BAA+B,QAAQ,GAAG;AACxD,QAAM,aACJ,OAAO,sBAAsB,OAAO,OAAO,uBAAuB,WAC7D,OAAO,qBACR;AACN,SAAO;AAAA,IACL,YAAY,OAAO,OAAO,OAAO,WAAW,OAAO,KAAK;AAAA,IACxD,QAAQ,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS;AAAA,IAC5D,iBAAiB,OAAO;AAAA,IACxB;AAAA,IACA,aAAa,QAAQ;AAAA,IACrB,eAAe,QACZ,MAAM,GAAG,EAAE,EACX;AAAA,MAAI,CAAC,WACJ,UAAU,OAAO,WAAW,WACtB,OAAmC,iBAAiB,OACtD;AAAA,IACN;AAAA,IACF,kBACE,cAAc,OAAO,WAAW,WAAW,WAAW,WAAW,SAAS;AAAA,IAC5E,aAAa,OAAO,eAAe;AAAA,IACnC,cAAc,OAAO,gBAAgB;AAAA,IACrC,aAAa,OAAO,eAAe;AAAA,IACnC,qBAAqB,cAAc;AAAA,EACrC;AACF;AAUO,SAAS,0BAA0B,UAA2B;AACnE,MAAI,CAAC,YAAY,OAAO,aAAa,UAAU;AAC7C,WAAO;AAAA,EACT;AACA,QAAM,SAAU,SAAuC;AACvD,MAAI,OAAO,WAAW,UAAU;AAC9B,WAAO;AAAA,EACT;AACA,QAAM,SAAU,SAAkC;AAClD,MAAI,CAAC,MAAM,QAAQ,MAAM,GAAG;AAC1B,WAAO;AAAA,EACT;AACA,QAAM,QAAkB,CAAC;AACzB,aAAW,QAAQ,QAAQ;AACzB,QAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC;AAAA,IACF;AACA,QAAK,KAA4B,SAAS,WAAW;AACnD;AAAA,IACF;AAEA,QAAK,KAA4B,SAAS,aAAa;AACrD;AAAA,IACF;AACA,UAAM,UAAW,KAA+B;AAChD,QAAI,CAAC,MAAM,QAAQ,OAAO,GAAG;AAC3B;AAAA,IACF;AACA,eAAW,QAAQ,SAAS;AAC1B,UACE,QACA,OAAO,SAAS,YAChB,OAAQ,KAA4B,SAAS,UAC7C;AACA,cAAM,KAAM,KAA0B,IAAI;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AACA,SAAO,MAAM,KAAK,EAAE;AACtB;AAQA,IAAM,2BAAN,cAAuC,qBAAqB;AAAA,EAC1D,cAAc,SAAuB;AACnC,WAAO,KAAK,eAAe,SAAS,KAAK;AAAA,EAC3C;AACF;AAwBA,IAAM,uBAAuB,oBAAI,QAAoD;AACrF,IAAM,uBAA2D,OAAO,OAAO,CAAC,CAAC;AAQ1E,SAAS,iCACd,OACoC;AACpC,SAAO,qBAAqB,IAAI,KAAK,KAAK;AAC5C;AA6NO,SAAS,gBAAgB,KAAuC;AACrE,SAAO;AAAA,IACL,6BAA6B,IAAI,IAAI,sBAAsB,IAAI,OAAO;AAAA,IACtE;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAAS,iCACd,aACU;AACV,QAAM,QAAQ;AAAA,IACZ,kCAAkC,YAAY,IAAI;AAAA,EACpD;AACA,QAAM,iBAAiB,YAAY,iBAAiB,CAAC,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC;AACxF,MAAI,cAAc,SAAS,GAAG;AAC5B,UAAM,KAAK,mCAAmC,CAAC,GAAG,aAAa,EAAE,KAAK,EAAE,KAAK,IAAI,CAAC,GAAG;AAAA,EACvF;AACA,QAAM,cAAc,YAAY,aAAa,KAAK;AAClD,MAAI,aAAa;AACf,UAAM,KAAK,wCAAwC,WAAW,EAAE;AAAA,EAClE;AACA,SAAO;AACT;AAaO,SAAS,iBACd,sBACA,KACU;AACV,SAAO;AAAA,IACL;AAAA,IACA,GAAI,uBAAuB,iCAAiC,oBAAoB,IAAI,CAAC;AAAA;AAAA;AAAA,IAGrF,GAAI,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAAA,EACpC;AACF;AAUO,SAAS,yBACd,UACA,sBACA,KACQ;AACR,QAAM,OAAO,iBAAiB,sBAAsB,GAAG,EAAE,KAAK,GAAG;AACjE,MAAI,SAAS,SAAS,mCAAmC,GAAG;AAC1D,WAAO,SAAS,MAAM,mCAAmC,EAAE,KAAK,IAAI;AAAA,EACtE;AACA,SAAO,OAAO,GAAG,QAAQ,IAAI,IAAI,KAAK;AACxC;AASO,SAAS,0BAA0B,UAAkB,qBAAsC;AAChG,QAAM,UAAU,qBAAqB,KAAK;AAC1C,SAAO,UAAU,GAAG,QAAQ,IAAI,OAAO,KAAK;AAC9C;AAGO,SAAS,uBAAuB,UAAkB,kBAAmC;AAC1F,QAAM,UAAU,kBAAkB,KAAK;AACvC,SAAO,UAAU,GAAG,QAAQ,IAAI,OAAO,KAAK;AAC9C;AASO,SAAS,gCACd,UACA,UACQ;AACR,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,EACT;AACA,SAAO,GAAG,QAAQ,wEAAwE,SAAS,aAAa,QAAQ,SAAS;AACnI;AASO,SAAS,sBAAsB,UAAkB,iBAAkC;AACxF,QAAM,UAAU,iBAAiB,KAAK;AACtC,SAAO,UAAU,GAAG,QAAQ,IAAI,OAAO,KAAK;AAC9C;AAiBO,SAAS,4BAA4B,UAAkB,oBAAqC;AACjG,SAAO,qBAAqB,GAAG,QAAQ,IAAI,gCAAgC,KAAK;AAClF;AAEA,IAAM,kCACJ;AASK,SAAS,uCACd,UACA,UACA,sBACQ;AACR,MAAI,yBAAyB,gBAAgB,CAAC,UAAU,QAAQ;AAC9D,WAAO;AAAA,EACT;AACA,QAAM,qBAAqB,oBAAI,IAAwC;AACvE,aAAW,WAAW,UAAU;AAC9B,UAAM,MAAM,mBAAmB,IAAI,QAAQ,QAAQ,KAAK,oBAAI,IAAY;AACxE,QAAI,IAAI,QAAQ,mBAAmB;AACnC,uBAAmB,IAAI,QAAQ,UAAU,GAAG;AAAA,EAC9C;AACA,SAAO,CAAC,GAAG,mBAAmB,OAAO,CAAC,EAAE,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,IAC9D,GAAG,QAAQ,IAAI,+BAA+B,KAC9C;AACN;AAOO,SAAS,4BACd,cACA,kBACQ;AACR,SAAO,mBAAmB,GAAG,YAAY,IAAI,uBAAuB,KAAK;AAC3E;AAEA,IAAM,qBAAqB,oBAAI,QAAuC;AACtE,IAAM,4BAA4B,oBAAI,QAAwC;AAM9E,IAAM,qBAAqB,oBAAI,QAA+B;AAC9D,IAAM,6BAA6B,oBAAI,QAA4C;AACnF,IAAM,0BAA0B,oBAAI,QAAwB;AAC5D,IAAM,+BAA+B,oBAAI,QAAwB;AAIjE,IAAM,qCAAqC,oBAAI,QAAgB;AAI/D,IAAM,4BAA4B,oBAAI,QAA4C;AAKlF,IAAM,gBAAgB,oBAAI,QAAoC;AAC9D,IAAM,0BAA0B,oBAAI,QAAwC;AA0BrE,SAAS,mBAAmB,OAGjC;AACA,QAAM,UAAUC,qBAAoB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAC1F,SAAO;AAAA,IACL,SAAS;AAAA,IACT,SAAS;AAAA,MACP;AAAA,QACE,MAAM;AAAA,QACN,MAAM,sEAAsE,OAAO;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACF;AAOA,IAAM,uBAA6C,CAAC,EAAE,MAAM,MAC1D,mBAAmB,KAAK;AAEnB,SAAS,mBACd,UACA,WACA,UAA6B,CAAC,GACb;AACjB,MAAI,QAAQ,QAAQ,kBAAkB,MAAM,QAAQ,QAAQ,uBAAuB,GAAG;AACpF,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC5F;AAKA,QAAM,kBAAkB,QAAQ,mBAAmB,SAAS;AAC5D,QAAM,qBAAqB,QAAQ,sBAAsB,SAAS;AAIlE,QAAM,cAAc,QAAQ;AAC5B,QAAM,eAAe;AAAA,IACnB,GAAI,qBAAqB,EAAE,SAAS,CAAC,6BAA6B,EAAE,IAAI,CAAC;AAAA,IACzE,GAAI,QAAQ,iBAAiB,EAAE,kBAAkB,QAAQ,eAAe,IAAI,CAAC;AAAA,IAC7E,GAAI,cAAc,EAAE,cAAc,YAAY,IAAI,CAAC;AAAA,EACrD;AAWA,QAAM,cAAc,kBAAkB,CAAC,cAAc,CAAC,IAAI,CAAC;AAC3D,QAAM,iBAAiB,KAAU;AAAA,IAC/B,MAAM;AAAA,IACN,aACE;AAAA,IACF,YAAY;AAAA,IACZ,eAAe;AAAA;AAAA;AAAA,IAGf,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ,UAAU,YAAY;AACtC,YAAM,UAAU,QAAQ;AACxB,UAAI,CAAC,SAAS;AACZ,cAAM,IAAI,MAAM,qDAAqD;AAAA,MACvE;AACA,YAAM,gBAAgB,SAAS,UAAU;AACzC,UAAI,iBAAiB,kBAAkB,QAAQ,YAAY;AACzD,cAAM,IAAI,MAAM,+DAA+D;AAAA,MACjF;AACA,aAAO,KAAK,UAAU,EAAE,WAAW,QAAQ,WAAW,GAAG,QAAQ,SAAS,CAAC;AAAA,IAC7E;AAAA,EACF,CAAC;AACD,QAAM,aAAa,CAAC,GAAG,aAAa,cAAc;AAClD,QAAM,aAAa;AAAA,IACjB,MAAM;AAAA,IACN,OAAO,QAAQ,SAAS,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IA2BjC,cAAc;AAAA,MACZ;AAAA,QACE;AAAA,UACE;AAAA,YACE;AAAA,cACE;AAAA,gBACE;AAAA,kBACE,QAAQ,wBAAwB,SAAS;AAAA,kBACzC,QAAQ;AAAA,kBACR,QAAQ;AAAA,gBACV;AAAA,gBACA,SAAS,oBAAoB,QAAQ,QAAQ,kBAAkB;AAAA,cACjE;AAAA,cACA,QAAQ;AAAA,cACR,QAAQ;AAAA,YACV;AAAA,YACA,QAAQ;AAAA,UACV;AAAA,UACA,QAAQ;AAAA,QACV;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,IACA,eAAe;AAAA,MACb,WAAW;AAAA,QACT,QAAQ,QAAQ,mBAAmB,SAAS;AAAA,QAC5C,SAAS;AAAA,MACX;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASA,GAAI,OAAO,KAAK,YAAY,EAAE,SAAS,IAAI,EAAE,aAAa,IAAI,CAAC;AAAA,IACjE;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA,OAAO;AAAA,IACP,GAAI,QAAQ,YAAY,SAAS,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOvE,WAAW,EAAE,eAAe,qBAAqB;AAAA,EACnD;AAEA,MAAI,SAAS,mBAAmB,QAAQ;AACtC,UAAMC,SAAQ,IAAI,MAAM,UAAU;AAClC,QAAI,QAAQ,kBAAkB;AAC5B,yCAAmC,IAAIA,MAAK;AAAA,IAC9C;AACA,gCAA4BA,QAAO,UAAU,OAAO;AACpD,2BAAuBA,QAAO,QAAQ;AACtC,WAAOA;AAAA,EACT;AAEA,QAAM,QAAQ,aAAa,QAAQ;AACnC,QAAM,QAAQ,IAAI,aAAa;AAAA,IAC7B,GAAG;AAAA,IACH,iBAAiB;AAAA,MACf;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,IACA,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,IACzB,cAAc,uBAAuB,UAAU,QAAQ,cAAc,CAAC,GAAG;AAAA,MACvE,GAAI,QAAQ,oBAAoB,SAC5B,EAAE,oBAAoB,QAAQ,mBAAmB,IACjD,CAAC;AAAA,MACL,GAAI,QAAQ,eAAe,SAAS,EAAE,eAAe,QAAQ,cAAc,IAAI,CAAC;AAAA,MAChF,GAAG,oCAAoC,SAAS;AAAA,MAChD,GAAI,QAAQ,4BAA4B,SACpC,EAAE,yBAAyB,QAAQ,wBAAwB,IAC3D,CAAC;AAAA,MACL,GAAI,QAAQ,qBAAqB,SAC7B,EAAE,kBAAkB,QAAQ,iBAAiB,IAC7C,CAAC;AAAA,MACL,GAAI,QAAQ,qBAAqB,EAAE,oBAAoB,QAAQ,mBAAmB,IAAI,CAAC;AAAA,MACvF,GAAI,QAAQ,yBACR,EAAE,wBAAwB,QAAQ,uBAAuB,IACzD,CAAC;AAAA,MACL,GAAI,QAAQ,0BACR,EAAE,yBAAyB,QAAQ,wBAAwB,IAC3D,CAAC;AAAA,IACP,CAAC;AAAA,EACH,CAAC;AACD,uBAAqB;AAAA,IACnB;AAAA,IACA,OAAO;AAAA,MACL;AAAA,QACE,QAAQ,0BAA0B,CAAC;AAAA,QACnC,QAAQ,sBAAsB,CAAC;AAAA,QAC/B,QAAQ,cAAc,CAAC;AAAA,QACvB,QAAQ,iBAAiB,CAAC;AAAA,MAC5B,EAAE,IAAI,CAAC,cAAc,OAAO,OAAO,SAAS,CAAC;AAAA,IAC/C;AAAA,EACF;AACA,MAAI,QAAQ,kBAAkB;AAC5B,uCAAmC,IAAI,KAAK;AAAA,EAC9C;AACA,qBAAmB;AAAA,IACjB;AAAA,IACA,8BAA8B,QAAQ,yBAAyB,CAAC,CAAC,EAAE;AAAA,MACjE,CAAC,aAAa,CAAC,SAAS;AAAA,IAC1B;AAAA,EACF;AACA,4BAA0B;AAAA,IACxB;AAAA,IACA,4BAA4B,UAAU,WAAW,QAAQ,oBAAoB;AAAA,EAC/E;AAMA,MAAI,QAAQ,sBAAsB;AAChC,8BAA0B,IAAI,OAAO,QAAQ,oBAAoB;AAAA,EACnE;AAIA,QAAM,gBAAgB;AAAA,IACpB,GAAI,QAAQ,iBAAiB,CAAC;AAAA,IAC9B,GAAI,QAAQ,eAAe,EAAE,QAAQ,QAAQ,aAAa,IAAI,CAAC;AAAA,EACjE;AACA,MAAI,OAAO,KAAK,aAAa,EAAE,SAAS,GAAG;AACzC,uBAAmB,IAAI,OAAO,aAAa;AAAA,EAC7C;AACA,MAAI,QAAQ,yBAAyB,QAAQ,sBAAsB,SAAS,GAAG;AAC7E,+BAA2B,IAAI,OAAO,QAAQ,qBAAqB;AAAA,EACrE;AACA,MAAI,QAAQ,oBAAoB;AAC9B,4BAAwB,IAAI,OAAO,QAAQ,kBAAkB;AAC7D,iCAA6B,IAAI,OAAO,QAAQ,uBAAwB;AAAA,EAC1E;AAKA,MAAI,QAAQ,UAAU;AACpB,kBAAc,IAAI,OAAO,QAAQ,QAAQ;AAAA,EAC3C;AACA,MAAI,QAAQ,wBAAwB,QAAQ,qBAAqB,SAAS,GAAG;AAC3E,4BAAwB,IAAI,OAAO,4BAA4B,QAAQ,oBAAoB,CAAC;AAAA,EAC9F;AACA,8BAA4B,OAAO,UAAU,OAAO;AACpD,yBAAuB,OAAO,QAAQ;AACtC,SAAO;AACT;AAWA,SAAS,4BACP,OACA,UACA,SACM;AACN,MAAI,SAAS,0BAA0B,QAAQ,4BAA4B,OAAO;AAChF,UAAM,aAAa,QAAQ,cAAc,CAAC;AAK1C,eAAW,UAAU,YAAY;AAC/B,UAAI,OAAO,SAAS,WAAY;AAChC,MACE,OAGA,iCAAiC;AAAA,IACrC;AACA;AAAA,MACE;AAAA,MACA,QAAQ,4BAA4B,oBAAI,IAAY;AAAA,MACpD,IAAI,IAAI,WAAW,IAAI,CAAC,WAAW,OAAO,IAAI,CAAC;AAAA,IACjD;AAAA,EACF;AACF;AAGA,SAAS,wBACP,QACA,gBACS;AACT,SAAO,WAAW,QAAS,WAAW,SAAS,OAAO,IAAI,cAAc;AAC1E;AA+BA,SAAS,yBACP,OACA,UACM;AACN,QAAM,eAAe,MAAM,YAAY,KAAK,KAAK;AACjD,QAAM,cAAc,OAAO,eAAwB;AACjD,UAAM,QAAQ,MAAM,aAAa,UAAU;AAC3C,WAAO,MAAM,IAAI,CAACC,UAAS;AACzB,UAAIA,MAAK,SAAS,YAAY;AAC5B,eAAOA;AAAA,MACT;AACA,YAAM,SAAS,SAAS,KAAK,CAAC,UAAUA,MAAK,KAAK,WAAW,MAAM,MAAM,CAAC;AAC1E,UAAI,CAAC,QAAQ;AACX,eAAOA;AAAA,MACT;AACA,YAAM,aAAaA,MAAK,KAAK,MAAM,OAAO,OAAO,MAAM;AACvD,aAAO,wBAAwB,OAAO,iBAAiB,UAAU,IAC7D,EAAE,GAAGA,OAAM,eAAe,YAAY,KAAK,IAC3CA;AAAA,IACN,CAAC;AAAA,EACH;AACA,QAAM,gBAAgB,MAAM,OAAO,KAAK,KAAK;AAC7C,MAAI,eAAe;AACjB,UAAM,QAAQ,CAAC,WAAoB;AACjC,YAAM,SAAS,cAAc,MAAM;AACnC,+BAAyB,QAAQ,QAAQ;AACzC,aAAO;AAAA,IACT;AAAA,EACF;AACF;AA2BA,SAAS,uBAAuB,OAAwB,UAA0B;AAChF,QAAM,WAAgC,SAAS,WAC5C;AAAA,IACC,CAAC,WACC,OAAO,oBAAoB,QAC1B,MAAM,QAAQ,OAAO,eAAe,KAAK,OAAO,gBAAgB,SAAS;AAAA,EAC9E,EACC,IAAI,CAAC,YAAY;AAAA,IAChB,QAAQ,oBAAoB,OAAO,IAAI,EAAE;AAAA,IACzC,iBACE,OAAO,oBAAoB,OAAO,OAAO,IAAI,IAAI,OAAO,eAA2B;AAAA,EACvF,EAAE,EACD,KAAK,CAAC,GAAG,MAAM,EAAE,OAAO,SAAS,EAAE,OAAO,MAAM;AACnD,MAAI,SAAS,WAAW,GAAG;AACzB;AAAA,EACF;AACA,2BAAyB,OAA0C,QAAQ;AAC7E;AAgBA,SAAS,kCACP,YACM;AAUN,QAAM,yBAAyB,WAAkD;AAC/E,SAAK,iBAAiB;AACtB,WAAO;AAAA,EACT;AACA,EAAC,WAAuE,YACtE;AACJ;AAoBA,SAAS,sBAAsB,OAAyC;AACtE,SAAO,MAAM,IAAI,CAAC,mBAAmB;AACnC,QAAI,eAAe,SAAS,cAAc,eAAe,SAAS,gBAAgB;AAChF,aAAO;AAAA,IACT;AACA,UAAM,SAAS,eAAe;AAC9B,WAAO;AAAA,MACL,GAAG;AAAA,MACH,QAAQ,CAAC,YAAY,OAAO,YAAY;AACtC,cAAM,SAAS,SAAS,UAAU;AAClC,YAAI,CAAC,QAAQ;AACX,iBAAO,OAAO,YAAY,OAAO,OAAO;AAAA,QAC1C;AACA,eAAO,2BAA2B,QAAQ,MAAM,OAAO,YAAY,OAAO,OAAO,CAAC;AAAA,MACpF;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAWO,SAAS,uCAAuC,OAAyC;AAC9F,SAAO,MAAM,IAAI,CAAC,mBAAmB;AACnC,QAAI,eAAe,SAAS,cAAc,eAAe,SAAS,cAAc;AAC9E,aAAO;AAAA,IACT;AACA,UAAM,SAAS,eAAe;AAC9B,WAAO;AAAA,MACL,GAAG;AAAA,MACH,QAAQ,OAAO,YAAY,OAAO,YAAY;AAC5C,cAAM,SAAS,MAAM,OAAO,YAAY,OAAO,OAAO;AACtD,cAAM,UACJ,OAAO,WAAW,WACd,SACA,UACE,OAAO,WAAW,YAClB,OAAQ,OAA8B,SAAS,WAC9C,OAA4B,OAC7B;AACR,eAAO,SAAS,WAAW,aAAa,IACpC,EAAE,MAAM,SAAkB,OAAO,EAAE,KAAK,QAAQ,EAAE,IAClD;AAAA,MACN;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEO,SAAS,uBACd,UACA,YACA,UAWI,CAAC,GACoC;AACzC,QAAM,mBACJ,QAAQ,0BAA0B,QAAQ,0BACtC,qCAAqC,QAAQ,sBAAsB,IACnE;AACN,MAAI,iBAAkB,SAAQ,0BAA0B,gBAAgB;AASxE,QAAM,uBAAuB,WAAW;AAAA,IACtC,GAAI,QAAQ,4BAA4B,QACpC,EAAE,gBAAgB,uCAAuC,IACzD,CAAC;AAAA,EACP,CAAC;AACD,MAAI,QAAQ,4BAA4B,OAAO;AAC7C,sCAAkC,oBAAoB;AAAA,EACxD;AACA,QAAM,OAAgD;AAAA,IACpD;AAAA,IACA,MAAM,EAAE,GAAI,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,sBAAsB,EAAG,CAAC;AAAA,EAClF;AACA,QAAM,gBAAgB;AAAA,IACpB;AAAA,IACA,QAAQ,sBAAsB,CAAC;AAAA,IAC/B,QAAQ,iBAAiB,CAAC;AAAA,EAC5B;AACA,OAAK;AAAA,IACH,OAAO;AAAA,MACL,UAAU;AAAA,QACR,CAAC,GAAG,YAAY,GAAG,aAAa;AAAA,QAChC,QAAQ,sBAAsB,CAAC;AAAA,MACjC;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI,QAAQ,qBAAqB,QAAQ;AACvC,SAAK;AAAA,MACH,gBAAgB,QAAQ,qBAAqB;AAAA,QAC3C,GAAG,qBAAqB,iBAAiB,CAAC;AAAA,QAC1C,IAAI,QAAQ,sBAAsB,CAAC,GAAG,IAAI,CAAC,UAAU,MAAM,IAAI;AAAA,QAC/D,GAAG,WAAW,IAAI,CAAC,UAAU,MAAM,IAAI;AAAA,QACvC,GAAG,cAAc,IAAI,CAAC,UAAU,MAAM,IAAI;AAAA,MAC5C,CAAC;AAAA,IACH;AAAA,EACF;AASA,MACE,SAAS,sBACT,SAAS,yBACT,sBAAsB,SAAS,cAAc,GAC7C;AAQA,UAAM,qBAAqB,YAAY;AAAA,MACrC,YAAY,CAAC,SAAS,uBAAuB,SAAS,sBAAsB;AAAA,MAC5E,UAAU,SAAS;AAAA,MACnB,GAAI,QAAQ,qBAAqB,EAAE,SAAS,QAAQ,mBAAmB,IAAI,CAAC;AAAA,MAC5E,UAAU,QAAQ,oBAAoB;AAAA,IACxC,CAAC;AACD,SAAK,KAAK,kBAAgF;AAAA,EAC5F;AACA,MAAI,kBAAkB;AACpB,eAAW,cAAc,MAAM;AAC7B;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,aAAa,WAAyC;AACpE,SAAO;AACT;AA4DA,eAAsB,2BACpB,SACA,SACoC;AACpC,uCAAqC,OAAO;AAC5C,QAAM,UAAqC,CAAC;AAC5C,MAAI;AACF,aAAS,SAAS,GAAG,SAAS,QAAQ,QAAQ,UAAU,sCAAsC;AAC5F,cAAQ;AAAA,QACN,MAAM;AAAA,UACJ,QAAQ,MAAM,QAAQ,SAAS,oCAAoC;AAAA,UACnE;AAAA,YACE,GAAI,QAAQ,qBAAqB,SAC7B,CAAC,IACD,EAAE,kBAAkB,QAAQ,iBAAiB;AAAA,YACjD,mBAAmB;AAAA,YACnB,QAAQ,QAAQ;AAAA,UAClB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,sBAAsB,OAAO,EAAE,MAAM,MAAM,MAAS;AAC1D,UAAM;AAAA,EACR;AAEA,QAAM,SAAS,oBAAI,IAAsB;AACzC,aAAW,SAAS,SAAS;AAC3B,eAAW,CAAC,QAAQ,KAAK,KAAK,MAAM,OAAQ,QAAO,IAAI,QAAQ,KAAK;AAAA,EACtE;AACA,SAAO;AAAA,IACL,QAAQ,QAAQ,QAAQ,CAAC,UAAU,MAAM,MAAM;AAAA,IAC/C,QAAQ,QAAQ,QAAQ,CAAC,UAAU,MAAM,MAAM;AAAA,IAC/C;AAAA,IACA,OAAO,YAAY;AACjB,YAAM,sBAAsB,OAAO;AAAA,IACrC;AAAA,EACF;AACF;AAEA,eAAe,sBAAsB,SAAmD;AACtF,MAAI;AACJ,aAAW,SAAS,CAAC,GAAG,OAAO,EAAE,QAAQ,GAAG;AAC1C,QAAI;AACF,YAAM,MAAM,MAAM;AAAA,IACpB,SAAS,OAAO;AACd,qBAAe;AAAA,IACjB;AAAA,EACF;AACA,MAAI,eAAe,OAAW,OAAM;AACtC;AAEA,eAAsB,kBACpB,UACA,OACA,UAA+B,CAAC,GACH;AAI7B,QAAM,2BAA2B,oBAAI,IAAY;AACjD,uCAAqC,KAAK;AAC1C,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,EAAE,YAAY,CAAC,GAAG,OAAO,YAAY;AAAA,IAAC,GAAG,yBAAyB;AAAA,EAC3E;AACA,QAAM,WAAW,IAAI,IAAI,SAAS,WAAW,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC;AACjF,QAAM,mBAAmB,MAAM;AAAA,IAC7B,CAACA,UAAS,SAAS,IAAIA,MAAK,EAAE,GAAG,eAAe,iBAAiB;AAAA,EACnE;AACA,MAAI,oBAAoB,CAAC,QAAQ,qBAAqB;AACpD,UAAM,IAAI;AAAA,MACR,2CAA2C,iBAAiB,EAAE;AAAA,IAChE;AAAA,EACF;AACA,QAAM,sBAAsB,IAAI,2BAA2B;AAK3D,QAAM,oBAAoB,QAAQ,iBAAiB,UAAa,CAAC,CAAC,QAAQ,SAAS;AACnF,QAAM,eACJ,QAAQ,iBAAiB,oBAAoB,WAAW,MAAM,KAAK,UAAU,IAAI;AACnF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,OAAOA,OAAM,UAAU;AACrB,YAAM,SAAS,SAAS,IAAIA,MAAK,EAAE;AACnC,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,0BAA0BA,MAAK,EAAE,EAAE;AAAA,MACrD;AACA,YAAM,MAAM,6BAA6B,UAAU,QAAQ,QAAQ,WAAW,KAAK,OAAO;AAC1F,YAAM,aAAa,sBAAsB,UAAU,MAAM;AACzD,YAAM,YAAY,qBAAqB,MAAM,IACzC,yBAAyB,cAAc,wBAAwB,IAC/D;AACJ,YAAM,eAAe;AAAA,QACnB,aAAa,EAAE,GAAG,UAAU,wCAAwC,KAAK,IAAI;AAAA,QAC7E;AAAA,QACA;AAAA,UACE,GAAI,aAAa,EAAE,8BAA8B,MAAM,IAAI,CAAC;AAAA,UAC5D,GAAI,oBAAoB,EAAE,wBAAwB,MAAM,IAAI,CAAC;AAAA,QAC/D;AAAA,MACF;AACA,YAAM,YAAY,OAAO,gBACrB,sBAAsB,cAAc,QAAQ,OAAO,IACnD,aACE,oBAAoB,cAAc,UAAU,OAAO,IACnD;AAqBN,YAAM,WAAWA,MAAK,aAAa;AACnC,YAAM,aAAa,qBAAqB,MAAM,KAAK,YAAY,CAAC,CAAC,OAAO;AACxE,YAAM,SAAS,IAAI;AAAA,QACjB,IAAI,wBAAwB;AAAA,UAC1B;AAAA,UACA,MAAM,OAAO,QAAQ,OAAO;AAAA,UAC5B,gBAAgB,OAAO;AAAA;AAAA;AAAA;AAAA,UAIvB,QAAQ,uBAAuB,OAAO,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA,UAKxC,OAAO;AAAA,UACP,GAAI,MAAM,qBAAqB,UAAU,MAAM;AAAA,UAC/C,GAAI,OAAO,YACP;AAAA,YACE,SAAS,OAAO;AAAA,YAChB,6BAA6B,KAAK,KAAK,OAAO,YAAY,GAAI;AAAA,UAChE,IACA,CAAC;AAAA,QACP,CAAC;AAAA,QACD,OAAO;AAAA,QACP,OAAO;AAAA,QACP;AAAA,QACA;AAAA,QACA,GAAG,OAAO,EAAE,IAAI,KAAK;AAAA,MACvB;AACA,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA,WAAW,OAAO;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AACA,QAAM,kBAAkB,QAAQ,OAAO,CAAC,UAAU,CAAC,MAAM,UAAU;AACnE,QAAM,oBAAoB,QAAQ,OAAO,CAAC,UAAU,MAAM,UAAU;AACpE,QAAM,kBAAkB,gBAAgB,IAAI,CAAC,UAAU,MAAM,MAAM;AACnE,QAAM,oBAAoB,kBAAkB,IAAI,CAAC,UAAU,MAAM,MAAM;AAIvE,QAAM,sBAAsB,IAAI;AAAA,IAC9B,QAAQ,OAAO,CAAC,UAAU,MAAM,QAAQ,EAAE,IAAI,CAAC,UAAU,MAAM,OAAO,IAAI;AAAA,EAC5E;AACA,QAAM,oBAAoB,MAAM,2BAA2B,iBAAiB;AAAA,IAC1E,QAAQ;AAAA,IACR,kBAAkB,yBAAyB,gBAAgB,IAAI,CAAC,UAAU,MAAM,SAAS,CAAC;AAAA,EAC5F,CAAC;AACD,MAAI,sBAAwD;AAC5D,MAAI;AACF,0BAAsB,kBAAkB,SACpC,MAAM,2BAA2B,mBAAmB;AAAA,MAClD,QAAQ;AAAA,MACR,kBAAkB;AAAA,QAChB,kBAAkB,IAAI,CAAC,UAAU,MAAM,SAAS;AAAA,MAClD;AAAA,IACF,CAAC,IACD;AAAA,EACN,SAAS,OAAO;AACd,UAAM,kBAAkB,MAAM,EAAE,MAAM,MAAM,MAAS;AACrD,UAAM;AAAA,EACR;AACA,MAAI,qBAAqB;AACvB,eAAW,UAAU,oBAAoB,QAAQ;AAC/C,UAAI,kBAAkB,mBAAmB;AACvC,eAAO,uBAAuB;AAAA,MAChC;AACA,UAAI,CAAC,oBAAoB,IAAI,OAAO,IAAI,GAAG;AACzC;AAAA,MACF;AACA,YAAM,QAAQ,oBAAoB,OAAO,IAAI,MAAM;AACnD,cAAQ;AAAA,QACN,0BAA0B,OAAO,IAAI;AAAA,QACrC,mBAAmB,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AACA,SAAO;AAAA,IACL,YAAY,CAAC,GAAG,kBAAkB,QAAQ,GAAI,qBAAqB,UAAU,CAAC,CAAE;AAAA,IAChF,OAAO,YAAY;AACjB,UAAI;AACJ,UAAI,qBAAqB;AACvB,YAAI;AACF,gBAAM,oBAAoB,MAAM;AAAA,QAClC,SAAS,OAAO;AACd,yBAAe;AAAA,QACjB;AAAA,MACF;AACA,UAAI;AACF,cAAM,kBAAkB,MAAM;AAAA,MAChC,SAAS,OAAO;AACd,uBAAe;AAAA,MACjB;AACA,UAAI,eAAe,OAAW,OAAM;AAAA,IACtC;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,sBACP,WACA,QACA,SACW;AACX,QAAM,gBAAgB,OAAO;AAC7B,MAAI,CAAC,eAAe;AAClB,WAAO;AAAA,EACT;AACA,SAAO,OAAO,OAAO,SAAS;AAC5B,UAAM,UAAU,MAAM,eAAe,OAAO,IAAI;AAChD,UAAM,iBAAiB,yBAAyB,KAAK;AACrD,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA,OAAO;AAAA,MACP;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR;AAAA,IACF;AACA,QAAI,MAAM,WAAW,eAAe;AAClC,aAAO,MAAM,wBAAwB,SAAS,OAAO,IAAI,SAAS,OAAO,aAAa;AAAA,IACxF;AACA,UAAM,WAAW,MAAM;AAAA,MACrB,qBAAqB,KAAK;AAAA,MAC1B,sBAAsB,OAAO,MAAM,MAAM,OAAO;AAAA,IAClD;AACA,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,sBAAsB,QAAQ;AACpC,YAAM,YAAY,MAAM;AAAA,QACtB;AAAA,QACA,OAAO;AAAA,QACP;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,QACR;AAAA,MACF;AACA,UAAI,UAAU,WAAW,eAAe;AACtC,eAAO,MAAM,wBAAwB,SAAS,OAAO,IAAI,SAAS,WAAW,aAAa;AAAA,MAC5F;AACA,YAAM,QAAQ,MAAM;AAAA,QAClB,qBAAqB,KAAK;AAAA,QAC1B,sBAAsB,OAAO,MAAM,UAAU,OAAO;AAAA,MACtD;AACA,UAAI,MAAM,WAAW,KAAK;AACxB,cAAM,OAAO,sBAAsB,MAAM,SAAS,eAAe,UAAU,YAAY;AACvF,YAAI,MAAM;AACR,gBAAM,sBAAsB,KAAK;AACjC,iBAAO,MAAM,wBAAwB,SAAS,OAAO,IAAI,SAAS,MAAM,aAAa;AAAA,QACvF;AACA,eAAO;AAAA,MACT;AACA,UAAI,MAAM,WAAW,KAAK;AACxB,cAAM,sBAAsB,KAAK;AACjC,eAAO,MAAM;AAAA,UACX;AAAA,UACA,OAAO;AAAA,UACP;AAAA,UACA;AAAA,YACE,QAAQ;AAAA,YACR,QAAQ;AAAA,YACR,gBAAgB,cAAc;AAAA,YAC9B,GAAI,cAAc,WAAW,EAAE,UAAU,cAAc,SAAS,IAAI,CAAC;AAAA,YACrE,cAAc,UAAU;AAAA,YACxB,GAAI,cAAc,SAAS,EAAE,QAAQ,cAAc,OAAO,IAAI,CAAC;AAAA,YAC/D,GAAI,cAAc,WAAW,EAAE,UAAU,cAAc,SAAS,IAAI,CAAC;AAAA,YACrE,GAAI,cAAc,oBACd,EAAE,mBAAmB,cAAc,kBAAkB,IACrD,CAAC;AAAA,UACP;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,aAAO;AAAA,IACT;AACA,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,OAAO,sBAAsB,SAAS,SAAS,eAAe,MAAM,YAAY;AACtF,UAAI,MAAM;AACR,cAAM,sBAAsB,QAAQ;AACpC,eAAO,MAAM,wBAAwB,SAAS,OAAO,IAAI,SAAS,MAAM,aAAa;AAAA,MACvF;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AACF;AAEA,eAAe,4BACb,SACA,UACA,eACA,gBACA,UACA,cAC4C;AAC5C,MAAI,CAAC,QAAQ,eAAe,CAAC,QAAQ,mBAAmB;AACtD,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,gBAAgB,cAAc;AAAA,MAC9B,GAAI,cAAc,WAAW,EAAE,UAAU,cAAc,SAAS,IAAI,CAAC;AAAA,MACrE,GAAI,cAAc,eAAe,EAAE,cAAc,cAAc,aAAa,IAAI,CAAC;AAAA,MACjF,GAAI,cAAc,SAAS,EAAE,QAAQ,cAAc,OAAO,IAAI,CAAC;AAAA,MAC/D,GAAI,cAAc,WAAW,EAAE,UAAU,cAAc,SAAS,IAAI,CAAC;AAAA,MACrE,GAAI,cAAc,oBACd,EAAE,mBAAmB,cAAc,kBAAkB,IACrD,CAAC;AAAA,IACP;AAAA,EACF;AACA,QAAM,UAA4C;AAAA,IAChD,aAAa,QAAQ;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,IAC/B,GAAI,QAAQ,sBAAsB,EAAE,WAAW,QAAQ,oBAAoB,IAAI,CAAC;AAAA,EAClF;AACA,MAAI;AACF,WAAO,MAAM,QAAQ,kBAAkB,OAAO;AAAA,EAChD,QAAQ;AACN,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,gBAAgB,cAAc;AAAA,MAC9B,GAAI,cAAc,WAAW,EAAE,UAAU,cAAc,SAAS,IAAI,CAAC;AAAA,MACrE,GAAI,cAAc,eAAe,EAAE,cAAc,cAAc,aAAa,IAAI,CAAC;AAAA,MACjF,GAAI,cAAc,SAAS,EAAE,QAAQ,cAAc,OAAO,IAAI,CAAC;AAAA,MAC/D,GAAI,cAAc,WAAW,EAAE,UAAU,cAAc,SAAS,IAAI,CAAC;AAAA,MACrE,GAAI,cAAc,oBACd,EAAE,mBAAmB,cAAc,kBAAkB,IACrD,CAAC;AAAA,IACP;AAAA,EACF;AACF;AAEA,SAAS,sBACP,SACA,eACA,cAC8E;AAC9E,QAAM,YAAY,qBAAqB,QAAQ,IAAI,kBAAkB,CAAC;AACtE,MAAI,UAAU,UAAU,sBAAsB;AAC5C,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,gBAAgB,cAAc;AAAA,IAC9B,GAAI,cAAc,WAAW,EAAE,UAAU,cAAc,SAAS,IAAI,CAAC;AAAA,IACrE;AAAA,IACA,GAAI,UAAU,OAAO,SACjB,EAAE,QAAQ,UAAU,MAAM,IAC1B,cAAc,SACZ,EAAE,QAAQ,cAAc,OAAO,IAC/B,CAAC;AAAA,IACP,GAAI,UAAU,WACV,EAAE,UAAU,UAAU,SAAS,IAC/B,cAAc,WACZ,EAAE,UAAU,cAAc,SAAS,IACnC,CAAC;AAAA,IACP,GAAI,cAAc,oBACd,EAAE,mBAAmB,cAAc,kBAAkB,IACrD,CAAC;AAAA,EACP;AACF;AAEA,eAAe,wBACb,SACA,UACA,SACA,MACA,eACmB;AACnB,QAAM,eAAe,KAAK,gBAAgB,cAAc;AACxD,QAAM,kBAAkB,SAAS;AAAA,IAC/B;AAAA,IACA,UAAU,QAAQ,YAAY;AAAA,IAC9B,gBAAgB,KAAK;AAAA,IACrB,GAAI,KAAK,WACL,EAAE,UAAU,KAAK,SAAS,IAC1B,cAAc,WACZ,EAAE,UAAU,cAAc,SAAS,IACnC,CAAC;AAAA,IACP,QAAQ,KAAK;AAAA,IACb,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA,IACvC,GAAI,KAAK,SACL,EAAE,QAAQ,KAAK,OAAO,IACtB,cAAc,SACZ,EAAE,QAAQ,cAAc,OAAO,IAC/B,CAAC;AAAA,IACP,GAAI,KAAK,WACL,EAAE,UAAU,KAAK,SAAS,IAC1B,cAAc,WACZ,EAAE,UAAU,cAAc,SAAS,IACnC,CAAC;AAAA,IACP,GAAI,KAAK,oBACL,EAAE,mBAAmB,KAAK,kBAAkB,IAC5C,cAAc,oBACZ,EAAE,mBAAmB,cAAc,kBAAkB,IACrD,CAAC;AAAA,IACP,GAAI,KAAK,mBAAmB,EAAE,kBAAkB,KAAK,iBAAiB,IAAI,CAAC;AAAA,IAC3E,GAAI,QAAQ,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;AAAA,EAC9D,CAAC;AACD,MAAI,QAAQ,WAAW,cAAc;AACnC,WAAO,0BAA0B,QAAQ,EAAE;AAAA,EAC7C;AACA,SAAO,IAAI,SAAS,qDAAqD;AAAA,IACvE,QAAQ;AAAA,EACV,CAAC;AACH;AAEA,eAAe,kBACb,SACA,SACe;AACf,MAAI;AACF,UAAM,QAAQ,eAAe,OAAO;AAAA,EACtC,QAAQ;AAAA,EAGR;AACF;AAQA,SAAS,yBAAyB,OAAuC;AACvE,SAAO,IAAI,IAAI,iBAAiB,UAAU,MAAM,MAAM,MAAM,SAAS,CAAC,EAAE,SAAS;AACnF;AAEA,eAAe,eACb,OACA,MACyB;AACzB,QAAM,OACJ,OAAO,MAAM,SAAS,WAClB,KAAK,OACL,iBAAiB,YAAY,MAAM,UAAU,MAAM,QAAQ,YAAY,MAAM,SAC3E,MAAM,MACH,MAAM,EACN,KAAK,EACL,MAAM,MAAM,EAAE,IACjB;AACR,MAAI,CAAC,MAAM;AACT,WAAO,CAAC;AAAA,EACV;AACA,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,IAAI;AAK9B,UAAM,SAAS,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS;AACnE,UAAM,KACJ,OAAO,OAAO,OAAO,YAAY,OAAO,OAAO,OAAO,YAAY,OAAO,OAAO,OAC5E,OAAO,KACP;AACN,UAAM,WACJ,WAAW,gBAAgB,OAAO,OAAO,QAAQ,SAAS,WACtD,OAAO,OAAO,OACd;AACN,WAAO;AAAA,MACL,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,MAC3B,GAAI,OAAO,SAAY,EAAE,GAAG,IAAI,CAAC;AAAA,MACjC,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,IACjC;AAAA,EACF,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,SAAS,sBACP,OACA,MACA,aACa;AACb,QAAM,UAAU,IAAI;AAAA,IAClB,MAAM,YAAY,iBAAiB,UAAU,MAAM,UAAU;AAAA,EAC/D;AACA,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,WAAW,GAAG;AACvD,YAAQ,IAAI,MAAM,KAAK;AAAA,EACzB;AACA,SAAO,EAAE,GAAG,MAAM,QAAQ;AAC5B;AAEA,SAAS,qBAAqB,OAAuD;AACnF,SAAO,iBAAiB,UAAU,MAAM,MAAM,IAAI;AACpD;AAEA,SAAS,qBAAqB,QAI5B;AACA,MAAI,CAAC,QAAQ;AACX,WAAO,CAAC;AAAA,EACV;AACA,QAAM,cAAc,OAAO,YAAY,EAAE,QAAQ,QAAQ;AACzD,MAAI,cAAc,GAAG;AACnB,WAAO,CAAC;AAAA,EACV;AACA,QAAM,aAAa,OAAO,MAAM,cAAc,SAAS,MAAM;AAC7D,QAAM,SAAiC,CAAC;AACxC,QAAM,KAAK;AACX,MAAI;AACJ,UAAQ,QAAQ,GAAG,KAAK,UAAU,OAAO,MAAM;AAC7C,UAAM,MAAM,MAAM,CAAC;AACnB,WAAO,MAAM,CAAC,EAAG,YAAY,CAAC,IAAI,IAAI,WAAW,GAAG,IAChD,IAAI,MAAM,GAAG,EAAE,EAAE,QAAQ,QAAQ,GAAG,IACpC;AAAA,EACN;AACA,SAAO;AAAA,IACL,GAAI,OAAO,QAAQ,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,IAC9C,GAAI,OAAO,QAAQ,EAAE,OAAO,OAAO,MAAM,MAAM,KAAK,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC;AAAA,IAC3E,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,EACzD;AACF;AAQA,IAAM,wBAAwB;AAAA;AAAA;AAAA,EAG5B,MAAM;AAAA,EACN,SAAS;AACX;AAEA,SAAS,0BAA0B,IAAkD;AACnF,SAAO,IAAI;AAAA,IACT,KAAK,UAAU;AAAA,MACb,SAAS;AAAA,MACT,IAAI,MAAM;AAAA,MACV,OAAO;AAAA,QACL,MAAM,sBAAsB;AAAA,QAC5B,SAAS,sBAAsB;AAAA,MACjC;AAAA,IACF,CAAC;AAAA,IACD;AAAA,MACE,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,OAAyB;AACrD,MAAI,EAAE,iBAAiB,QAAQ;AAC7B,WAAO;AAAA,EACT;AACA,QAAM,OAAQ,MAA6B;AAC3C,SACE,SAAS,sBAAsB,SAC9B,MAAM,YAAY,sBAAsB,WACvC,MAAM,YAAY,aAAa,sBAAsB,IAAI,KAAK,sBAAsB,OAAO;AAEjG;AAUA,SAAS,0BAA0B,QAAwB;AACzD,SAAO,uDAAuD,MAAM;AACtE;AAOA,SAAS,mBAAmB,OAG1B;AACA,QAAM,aAAa,iBAAiB,QAAQ,MAAM,YAAY,OAAO,OAAO;AAC5E,QAAM,MAAO,OAAuD;AACpE,QAAM,SAAS,OAAO,QAAQ,WAAW,MAAM;AAC/C,MAAI,WAAW,QAAW;AACxB,UAAM,SAAU,OAAuC;AACvD,WAAO,OAAO,WAAW,WAAW,EAAE,YAAY,QAAQ,OAAO,IAAI,EAAE,WAAW;AAAA,EACpF;AACA,SAAO,EAAE,YAAY,OAAO;AAC9B;AAcO,SAAS,yBAAyB,OAAgB,OAAO,oBAAI,QAAgB,GAAY;AAC9F,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,WAAO;AAAA,EACT;AACA,MAAI,KAAK,IAAI,KAAK,GAAG;AACnB,WAAO;AAAA,EACT;AACA,OAAK,IAAI,KAAK;AACd,QAAM,SAAS;AACf,MAAI,OAAO,4BAA4B,mBAAmB;AACxD,WAAO;AAAA,EACT;AACA,QAAM,OAAO,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO,OAAO;AACpE,QAAM,UAAU,OAAO,OAAO,YAAY,WAAW,OAAO,UAAU;AACtE,QAAM,qBAAqB,oBAAI,IAAI;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,MAAI,SAAS,UAAW,mBAAmB,IAAI,OAAO,GAAG;AACvD,WAAO;AAAA,EACT;AACA,SAAO,CAAC,SAAS,SAAS,YAAY,MAAM,EAAE;AAAA,IAAK,CAAC,QAClD,yBAAyB,OAAO,GAAG,GAAG,IAAI;AAAA,EAC5C;AACF;AAEO,SAAS,sBAAsB,OAAuC;AAC3E,QAAM,SAAS,mBAAmB,KAAK;AACvC,QAAM,YAAY,IAAI;AAAA,IACpB,mCAAmC,eAAe,MAAM,CAAC;AAAA,EAC3D;AACA,YAAU,OAAO;AACjB,MAAI,OAAO,WAAW,QAAW;AAC/B,cAAU,SAAS,OAAO;AAC1B,cAAU,OAAO,OAAO;AAAA,EAC1B;AACA,MAAI,yBAAyB,KAAK,GAAG;AACnC,cAAU,0BAA0B;AAAA,EACtC;AACA,SAAO;AACT;AAEA,SAAS,uBAAuB,UAAkB;AAChD,QAAM,aAAa,CAAC,aAAqB,SAAoB;AAC3D,QAAI;AACJ,aAAS,QAAQ,KAAK,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG;AACxD,UAAI,KAAK,KAAK,aAAa,OAAO;AAChC,gBAAQ,KAAK,KAAK;AAClB;AAAA,MACF;AAAA,IACF;AACA,YAAQ,KAAK,oCAAoC;AAAA,MAC/C;AAAA,MACA,GAAG,mBAAmB,KAAK;AAAA,IAC7B,CAAC;AAAA,EACH;AACA,SAAO;AAAA,IACL,WAAW;AAAA,IACX,OAAO,MAAM;AAAA,IACb,OAAO;AAAA,IACP,MAAM;AAAA,IACN,kBAAkB;AAAA,IAClB,iBAAiB;AAAA,EACnB;AACF;AAIA,SAAS,eAAe,QAAyD;AAC/E,SAAO,OAAO,WAAW,SAAY,OAAO,aAAa,GAAG,OAAO,UAAU,IAAI,OAAO,MAAM;AAChG;AAEA,eAAe,qBACb,UACA,QACoE;AAIpE,MAAI,qBAAqB,MAAM,GAAG;AAChC,WAAO,MAAM,wBAAwB,QAAQ;AAAA,EAC/C;AACA,MAAI,sBAAsB,UAAU,MAAM,GAAG;AAC3C,WAAO,MAAM,yBAAyB,UAAU,MAAM;AAAA,EACxD;AAIA,MAAI,OAAO,WAAW,OAAO,KAAK,OAAO,OAAO,EAAE,SAAS,GAAG;AAC5D,WAAO,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,OAAO,QAAQ,EAAE,EAAE;AAAA,EAC3D;AACA,SAAO,CAAC;AACV;AAEA,eAAe,yBACb,UACA,QACoE;AACpE,MAAI,CAAC,sBAAsB,UAAU,MAAM,GAAG;AAC5C,WAAO,CAAC;AAAA,EACV;AACA,QAAM,UAAkC,CAAC;AACzC,MAAI,SAAS,gBAAgB,SAAS,WAAW;AAC/C,YAAQ,uBAAuB,IAAI,SAAS;AAAA,EAC9C;AASA,MAAI,OAAO,KAAK,OAAO,EAAE,WAAW,GAAG;AACrC,WAAO,CAAC;AAAA,EACV;AACA,SAAO;AAAA,IACL,aAAa;AAAA,MACX;AAAA,IACF;AAAA,EACF;AACF;AAOA,eAAe,8BACb,UACA,SACwB;AACxB,MAAI,CAAC,SAAS,oBAAoB,CAAC,QAAQ,aAAa,CAAC,QAAQ,aAAa;AAC5E,WAAO;AAAA,EACT;AACA,QAAM,gBAAgB;AAAA,IACpB,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AACA,QAAM,qBAAqB,cAAc,KAAK,CAAC,UAAU,UAAU,MAAS;AAC5E,QAAM,wBAAwB,cAAc,MAAM,CAAC,UAAU,UAAU,MAAS;AAChF,MAAI,sBAAsB,CAAC,uBAAuB;AAChD,WAAO;AAAA,EACT;AACA,SAAO,MAAM,yBAAyB,SAAS,kBAAkB;AAAA,IAC/D,WAAW,QAAQ;AAAA,IACnB,aAAa,QAAQ;AAAA,IACrB,WAAW,QAAQ,aAAa;AAAA,IAChC,GAAI,QAAQ,eAAe,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;AAAA,IACrE,aAAa,QAAQ,yBAAyB,CAAC,GAAG,mCAAmC;AAAA,IACrF,eAAe,wBAAwB,kBAAkB;AAAA,IACzD,oBAAoB,QAAQ,mBAAmB,CAAC,GAAG,6BAA6B;AAAA,IAChF,GAAI,wBACA;AAAA,MACE,WAAW,QAAQ;AAAA,MACnB,QAAQ,QAAQ;AAAA,MAChB,WAAW,QAAQ;AAAA,MACnB,qBAAqB,QAAQ;AAAA,IAC/B,IACA,CAAC;AAAA,IACL,KAAK,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,KAAK;AAAA,EAC5C,CAAC;AACH;AAUA,SAAS,oBACP,WACA,UACA,SACW;AACX,SAAO,OAAO,OAAO,SAAS;AAC5B,UAAM,SAAS,MAAM,8BAA8B,UAAU,OAAO;AACpE,QAAI,CAAC,QAAQ;AACX,aAAO,MAAM,UAAU,OAAO,IAAI;AAAA,IACpC;AACA,WAAO,MAAM;AAAA,MACX,qBAAqB,KAAK;AAAA,MAC1B,sBAAsB,OAAO,MAAM,EAAE,eAAe,UAAU,MAAM,GAAG,CAAC;AAAA,IAC1E;AAAA,EACF;AACF;AAUA,eAAe,wBACb,UACoE;AACpE,QAAM,MAAM,oBAAoB,SAAS;AACzC,MAAI,CAAC,KAAK;AACR,WAAO,CAAC;AAAA,EACV;AACA,MAAI;AACJ,MAAI;AACF,YAAQ,MAAM,IAAI,SAAS;AAAA,EAC7B,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACA,QAAM,UAAkC;AAAA,IACtC,eAAe,UAAU,MAAM,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,IAK1C,YAAY;AAAA,IACZ,cAAc,GAAG,gBAAgB,IAAI,IAAI,aAAa;AAAA,IACtD,SAAS,IAAI;AAAA,EACf;AACA,MAAI,MAAM,kBAAkB;AAC1B,YAAQ,oBAAoB,IAAI,MAAM;AAAA,EACxC;AACA,MAAI,SAAS,iBAAiB;AAC5B,YAAQ,sBAAsB,IAAI,SAAS;AAAA,EAC7C;AACA,SAAO,EAAE,aAAa,EAAE,QAAQ,EAAE;AACpC;AAgBA,SAAS,qBAAqB,QAAiD;AAC7E,SAAO,OAAO,OAAO;AACvB;AAEA,SAAS,sBACP,UACA,QACS;AACT,MAAI,CAAC,CAAC,YAAY,SAAS,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG;AACtD,WAAO;AAAA,EACT;AACA,MAAI,OAAO,IAAI,SAAS,eAAe,GAAG;AACxC,WAAO;AAAA,EACT;AACA,QAAM,MAAM,aAAa,OAAO,GAAG;AACnC,MAAI,CAAC,KAAK;AACR,WAAO;AAAA,EACT;AACA,SAAO,kBAAkB,QAAQ,EAAE,KAAK,CAAC,cAAc,cAAc,GAAG;AAC1E;AAEA,SAAS,6BACP,UACA,QACA,aACe;AACf,MAAI,CAAC,eAAe,CAAC,CAAC,YAAY,SAAS,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG;AACtE,WAAO;AAAA,EACT;AACA,MAAI,OAAO,IAAI,SAAS,eAAe,GAAG;AACxC,WAAO,OAAO,IAAI,WAAW,iBAAiB,WAAW;AAAA,EAC3D;AACA,MAAI,CAAC,sBAAsB,UAAU,MAAM,GAAG;AAC5C,WAAO;AAAA,EACT;AACA,QAAM,UAAU,SAAS,gBAAgB,SAAS,eAAe,IAC7D,SAAS,eAAe,WAAW,iBAAiB,WAAW,IAC/D,SAAS,iBACP,+BAA+B,SAAS,gBAAgB,WAAW;AAAA;AAAA;AAAA,IAGnE,qBAAqB,QAAQ,EAAE,WAAW,iBAAiB,WAAW;AAAA;AAC5E,QAAM,MAAM,IAAI,IAAI,OAAO;AAC3B,MAAI,OAAO,OAAO,QAAQ;AACxB,QAAI,WAAW,GAAG,IAAI,SAAS,QAAQ,QAAQ,EAAE,CAAC;AAAA,EACpD;AACA,SAAO,IAAI,SAAS;AACtB;AAEA,SAAS,+BAA+B,KAAa,aAA6B;AAChF,QAAM,MAAM,IAAI,IAAI,GAAG;AACvB,MAAI,WAAW,kBAAkB,WAAW;AAC5C,MAAI,SAAS;AACb,MAAI,OAAO;AACX,SAAO,IAAI,SAAS;AACtB;AAEA,SAAS,kBAAkB,UAA8B;AAGvD,QAAM,OAAO,aAAa,SAAS,kBAAkB,qBAAqB,QAAQ,CAAC;AACnF,MAAI,CAAC,MAAM;AACT,WAAO,CAAC;AAAA,EACV;AACA,QAAM,OAAO,IAAI,IAAI,IAAI;AACzB,OAAK,WAAW,GAAG,KAAK,SAAS,QAAQ,QAAQ,EAAE,CAAC;AACpD,SAAO,CAAC,MAAM,aAAa,KAAK,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,UAA2B,QAAQ,KAAK,CAAC;AAChG;AAEA,SAAS,aAAa,KAA4B;AAChD,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,GAAG;AACvB,QAAI,OAAO;AACX,QAAI,WAAW,IAAI,SAAS,QAAQ,QAAQ,EAAE;AAC9C,WAAO,IAAI,SAAS;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,oBAAoB,YAAoB,UAA0B;AAChF,SAAO,0BAA0B,YAAY,QAAQ;AACvD;AAEA,IAAM,oBAAN,MAA6C;AAAA,EAc3C,YACmB,OACjB,YACA,cACA,aAAa,OACI,qBACA,oBAAoB,YACrC;AANiB;AAIA;AACA;AAEjB,SAAK,OAAO;AACZ,SAAK,SAAS,oBAAoB,YAAY,EAAE;AAChD,SAAK,iBAAiB,MAAM;AAC5B,SAAK,eAAe,eAAe,IAAI,IAAI,YAAY,IAAI;AAC3D,SAAK,aAAa;AAAA,EACpB;AAAA,EA1BS;AAAA,EACA;AAAA,EACA;AAAA,EACQ;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA;AAAA,EACT,yBAAyB;AAAA,EACzB,yBAAyB;AAAA,EACzB,oCAAoC;AAAA,EAiB5C,UAAyB;AACvB,WAAO,KAAK,MAAM,QAAQ,EAAE,MAAM,CAAC,UAAmB;AAGpD,YAAM,sBAAsB,KAAK;AAAA,IACnC,CAAC;AAAA,EACH;AAAA,EAEA,QAAuB;AACrB,SAAK,uBAAuB;AAC5B,WAAO,KAAK,MAAM,MAAM;AAAA,EAC1B;AAAA,EAEA,yBAA+B;AAC7B,SAAK,qBAAqB,OAAO,KAAK,iBAAiB;AAAA,EACzD;AAAA,EAEA,MAAM,YAAuC;AAC3C,QAAI;AACF,YAAM,QAAQ,8BAA8B,MAAM,KAAK,MAAM,UAAU,CAAC;AACxE,YAAM,UAAU,MACb,OAAO,CAACA,UAAS,KAAK,UAAUA,MAAK,IAAI,CAAC,EAC1C,IAAI,CAACA,WAAU;AAAA,QACd,GAAGA;AAAA,QACH,MAAM,oBAAoB,KAAK,MAAMA,MAAK,IAAI;AAAA,MAChD,EAAE;AACJ,YAAM,UAAW,KAAK,qBAAqB,QAAQ,KAAK,mBAAmB,OAAO,KAChF,8BAA8B,OAAO;AACvC,WAAK,yBAAyB,8BAA8B,OAAO;AACnE,aAAO;AAAA,IACT,SAAS,OAAO;AAGd,UAAI,CAAC,KAAK,YAAY;AACpB,cAAM;AAAA,MACR;AAcA,UAAI,CAAC,KAAK,wBAAwB;AAChC,aAAK,yBAAyB;AAC9B,gBAAQ;AAAA,UACN;AAAA;AAAA;AAAA,UAGA,EAAE,UAAU,KAAK,MAAM,GAAG,mBAAmB,KAAK,EAAE;AAAA,QACtD;AAAA,MACF;AACA,WAAK,uBAAuB;AAC5B,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AAAA;AAAA,EAGA,wBAAgC;AAC9B,WAAO,KAAK,oCAAoC,IAAI,KAAK;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,iCAAuC;AACrC,SAAK,oCAAoC;AAAA,EAC3C;AAAA,EAEA,MAAM,SACJ,UACA,MACA,MACc;AACd,UAAM,aAAa,KAAK,iBAAiB,QAAQ;AACjD,QAAI,CAAC,KAAK,UAAU,UAAU,GAAG;AAC/B,YAAM,IAAI,MAAM,YAAY,UAAU,8BAA8B,KAAK,IAAI,EAAE;AAAA,IACjF;AACA,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,MAAM,SAAS,YAAY,MAAM,IAAI;AAC/D,kCAA4B,QAAQ,2BAA2B,iBAAiB;AAChF,aAAO;AAAA,IACT,SAAS,OAAO;AAOd,UAAI,qBAAqB,KAAK,GAAG;AAC/B,eAAO;AAAA,UACL,SAAS;AAAA,UACT,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,sBAAsB,QAAQ,CAAC;AAAA,QACjE;AAAA,MACF;AAaA,UAAI,KAAK,YAAY;AACnB,cAAM,SAAS,mBAAmB,KAAK;AACvC,gBAAQ;AAAA,UACN;AAAA,UACA,EAAE,UAAU,KAAK,MAAM,UAAU,YAAY,GAAG,OAAO;AAAA,QACzD;AACA,eAAO;AAAA,UACL,SAAS;AAAA,UACT,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,0BAA0B,eAAe,MAAM,CAAC;AAAA,YACxD;AAAA,UACF;AAAA,QACF;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,uBAAsC;AACpC,WAAO,KAAK,MAAM,qBAAqB;AAAA,EACzC;AAAA,EAEA,MAAM,cAAc,QAAgD;AAClE,UAAM,kBAAkB,KAAK;AAG7B,QAAI,CAAC,gBAAgB,eAAe;AAClC,YAAM,IAAI,MAAM,cAAc,KAAK,IAAI,6BAA6B;AAAA,IACtE;AACA,WAAO,MAAM,gBAAgB,cAAc,MAAM;AAAA,EACnD;AAAA,EAEA,MAAM,sBAAsB,QAAgD;AAC1E,UAAM,kBAAkB,KAAK;AAG7B,QAAI,CAAC,gBAAgB,uBAAuB;AAC1C,YAAM,IAAI,MAAM,cAAc,KAAK,IAAI,sCAAsC;AAAA,IAC/E;AACA,WAAO,MAAM,gBAAgB,sBAAsB,MAAM;AAAA,EAC3D;AAAA,EAEA,MAAM,aAAa,KAA2B;AAC5C,UAAM,kBAAkB,KAAK;AAG7B,QAAI,CAAC,gBAAgB,cAAc;AACjC,YAAM,IAAI,MAAM,cAAc,KAAK,IAAI,kCAAkC;AAAA,IAC3E;AACA,WAAO,MAAM,gBAAgB,aAAa,GAAG;AAAA,EAC/C;AAAA,EAEQ,UAAU,UAA2B;AAC3C,WAAO,CAAC,KAAK,gBAAgB,KAAK,aAAa,IAAI,QAAQ;AAAA,EAC7D;AAAA,EAEQ,iBAAiB,UAA0B;AACjD,QAAI,CAAC,SAAS,WAAW,KAAK,MAAM,GAAG;AACrC,YAAM,IAAI,MAAM,YAAY,QAAQ,wBAAwB,KAAK,IAAI,SAAS;AAAA,IAChF;AACA,WAAO,SAAS,MAAM,KAAK,OAAO,MAAM;AAAA,EAC1C;AACF;AASA,eAAsB,gBACpB,OACA,OACA,UAA+B,CAAC,GACH;AAC7B,MAAI,MAAM,SAAS,WAAW;AAC5B,UAAM,mBAAqC,CAAC;AAC5C,QAAI,MAAM,iBAAiB,KAAK,GAAG;AACjC,uBAAiB,KAAK;AAAA,QACpB,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS,MAAM;AAAA,MACjB,CAAmB;AAAA,IACrB;AACA,QAAI,MAAM,MAAM,KAAK,GAAG;AACtB,uBAAiB,KAAK;AAAA,QACpB,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS,MAAM;AAAA,MACjB,CAAmB;AAAA,IACrB;AACA,QACE,iBAAiB,WAAW,MAC3B,MAAM,iBAAiB,UACtB,MAAM,iBAAiB,QACvB,MAAM,aAAa,WAAW,IAChC;AACA,YAAM,IAAI,MAAM,0DAA0D;AAAA,IAC5E;AAIA,UAAM,mBAAmB;AAAA,MACtB,MAAM,gBAAgB,CAAC;AAAA,IAC1B;AACA,UAAM,sBAAsB,MAAM,kBAC9B,MAAM,qCAAqC,MAAM,iBAAiB,QAAQ,aAAa,IACvF;AACJ,UAAM,YAAY,CAAC,GAAG,kBAAkB,GAAG,gBAAgB;AAC3D,QAAI,UAAU,WAAW,GAAG;AAC1B,YAAM,IAAI,MAAM,4DAA4D;AAAA,IAC9E;AACA,WAAO;AAAA;AAAA;AAAA,MAGL,OACE,iBAAiB,WAAW,KAAK,CAAC,MAAM,iBAAiB,KAAK,KAAK,MAAM,MAAM,KAAK,IAChF,MAAM,OACN;AAAA,MACN,GAAI,sBAAsB,EAAE,oBAAoB,IAAI,CAAC;AAAA,IACvD;AAAA,EACF;AAKA,MAAI,sBAAsB,MAAM,kBAAkB,GAAG;AACnD,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAQ,MAAM,SAAS,WAAW,OAAO,MAAM,kBAAkB;AACvE,QAAM,gBAAgB,MAAM,iBAAiB;AAC7C,QAAM,iBAAiB,MAAM,SAAS,gBAAgB,MAAM,aAAa,MAAM;AAC/E,QAAM,SAAS,cAAc,KAAK,CAAC,SAAc,mBAAmB,IAAI,MAAM,cAAc;AAC5F,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,kDAAkD,cAAc,EAAE;AAAA,EACpF;AACA,MAAI,MAAM,SAAS,eAAe;AAChC,UAAM,QAAQ,MAAa;AAAA,EAC7B,WAAW,MAAM,aAAa,WAAW;AACvC,UAAM,QAAQ,MAAa;AAAA,EAC7B,OAAO;AACL,UAAM,OAAO,QAAe,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,MAAS;AAAA,EACpF;AACA,SAAO,EAAE,OAAO,MAAM;AACxB;AA8EO,IAAM,0BACX;AASK,SAAS,iCAAuD;AACrE,MAAI,UAAU;AACd,SAAO,CAAC,EAAE,UAAU,MAAM;AACxB,QAAI,CAAC,SAAS;AACZ,aAAO;AAAA,IACT;AACA,cAAU;AACV,WAAO;AAAA,MACL,GAAG;AAAA,MACH,cAAc,UAAU,eACpB,GAAG,UAAU,YAAY,IAAI,uBAAuB,KACpD;AAAA,IACN;AAAA,EACF;AACF;AAEA,SAAS,4BAA4B,OAA0D;AAC7F,MAAI,CAAC,mCAAmC,IAAI,KAAK,GAAG;AAClD,WAAO;AAAA,EACT;AACA,qCAAmC,OAAO,KAAK;AAC/C,SAAO,+BAA+B;AACxC;AAOO,IAAM,mCACX;AAeK,IAAM,6BAAmD,CAAC,EAAE,UAAU,OAAO;AAAA,EAClF,GAAG;AAAA,EACH,OAAO,UAAU,MAAM,IAAI,CAAC,SAAS;AACnC,QAAI,QAAQ,OAAO,SAAS,YAAY,QAAQ,MAAM;AACpD,YAAM,EAAE,IAAI,KAAK,GAAG,KAAK,IAAI;AAC7B,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,CAAC;AACH;AAgBO,IAAM,+BAAqD,CAAC,EAAE,UAAU,OAAO;AAAA,EACpF,GAAG;AAAA,EACH,OAAO;AAAA,IACL,UAAU;AAAA,EACZ;AACF;AAOO,SAAS,uCAAuC,UAA0C;AAC/F,SAAO,CAAC,EAAE,UAAU,OAAO;AAAA,IACzB,GAAG;AAAA,IACH,OAAOC;AAAA,MACL,UAAU;AAAA,MACV,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,SAAS,8BAA8B,OAAgC;AACrE,QAAM,aAAa,MAAM,QAAS,MAA8B,KAAK,IAC/D,MAA+B,SAAS,CAAC,IAC3C,CAAC;AACL,QAAM,mBAAmB,WAAW,IAAI,CAAC,cAAc;AACrD,QAAI,CAAC,aAAa,OAAO,cAAc,SAAU,QAAO;AACxD,UAAMD,QAAO;AACb,WAAO;AAAA,MACL,MAAMA,MAAK;AAAA,MACX,MAAMA,MAAK;AAAA,MACX,aAAaA,MAAK;AAAA,MAClB,YAAYA,MAAK;AAAA,MACjB,aAAaA,MAAK;AAAA,MAClB,QAAQA,MAAK;AAAA,MACb,cAAcA,MAAK;AAAA,IACrB;AAAA,EACF,CAAC;AACD,QAAM,aAAa,MAAM,QAAS,MAAmC,UAAU,IACzE,MAAoC,cAAc,CAAC,IACrD,CAAC;AACL,QAAM,YAAY,WAAW,OAAe,CAAC,OAAO,WAAW;AAC7D,UAAM,SAAU,QACZ;AACJ,WAAO,SAAS,OAAO,WAAW,aAAa,OAAO,KAAK,MAAM,IAAI;AAAA,EACvE,GAAG,CAAC;AACJ,SAAO,8BAA8B,gBAAgB,IAAI;AAC3D;AAEO,SAAS,mCACd,UACA,UAA0C,CAAC,GACrB;AACtB,QAAM,kBAAkB,0BAA0B,QAAQ;AAC1D,MAAI,kBAAuF;AAC3F,MAAI,kBAAkB;AACtB,SAAO,OAAO,EAAE,WAAW,MAAM,MAAM;AACrC,UAAM,QAAQ,UAAU;AACxB,QAAI,QAAQ,yBAAyB;AACnC,YAAM,WAAW,QAAQ,0BAA0B;AACnD,YAAM,UAAuC;AAAA,QAC3C;AAAA,QACA,oBAAoB,8BAA8B,UAAU,gBAAgB,EAAE;AAAA,QAC9E,kBAAkB,8BAA8B,KAAK;AAAA,MACvD;AAMA,YAAM,gBACJ,YACA,mBACA,SAAS,aAAa,gBAAgB,YACtC,sBAAsB,QAAQ,KAAK,IAC/B,WACA;AACN,YAAM,WAAW,2BAA2B;AAAA,QAC1C;AAAA,QACA,UAAU;AAAA,QACV,0BAA0B,gBAAiB,iBAAiB,aAAa,OAAQ;AAAA,MACnF,CAAC;AACD,YAAM,eAAe,SAAS;AAC9B,wBAAkB,EAAE,UAAU,EAAE,iBAAiB,WAAW,QAAQ;AACpE,UAAI,MAAM,QAAQ,6BAA6B,GAAG;AAChD,cAAM,IAAI,sBAAsB;AAAA,UAC9B;AAAA,UACA;AAAA,UACA,cAAc,gBAAgB,aAAa;AAAA,UAC3C,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AACA,UAAI,gBAAgB,iBAAiB;AACnC,cAAM,IAAI,sBAAsB;AAAA,UAC9B;AAAA,UACA;AAAA,UACA,cAAc,gBAAgB,aAAa;AAAA,QAC7C,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO,EAAE,GAAG,WAAW,MAAM;AAAA,EAC/B;AACF;AAMA,SAAS,6BAA6B,SAAuD;AAC3F,SAAO,OAAO,SAAS;AACrB,QAAI,YAAY,KAAK;AACrB,eAAW,UAAU,SAAS;AAC5B,kBAAY,MAAM,OAAO,EAAE,GAAG,MAAM,UAAU,CAAC;AAAA,IACjD;AACA,WAAO;AAAA,EACT;AACF;AAUO,SAAS,gCACd,UACA,UAA0C,CAAC,GACT;AAClC,QAAM,UAAkC;AAAA,IACtC;AAAA,IACA,uCAAuC,QAAQ;AAAA,EACjD;AACA,MAAI,SAAS,0BAA0B,SAAS;AAC9C,YAAQ,KAAK,0BAA0B;AAAA,EACzC;AACA,UAAQ,KAAK,mCAAmC,UAAU,OAAO,CAAC;AAClE,SAAO,6BAA6B,OAAO;AAC7C;AAEA,eAAsB,eACpB,OACA,OACA,UACA,YAAmC,CAAC,GACpC;AACA,QAAM,WACJ,OAAO,UAAU,YAAY,iBAAiB,WAAW,EAAE,MAAM,IAAI;AACvE,QAAM,cAAc,UAAU,sBAAsBE,2BAA0B,QAAQ;AACtF,QAAM,qBAAqB,2BAA2B,OAAO,WAAW;AACxE,QAAM,0BAA0B,4BAA4B,KAAK;AACjE,MAAI,UAAU,+BAA+B,CAAC,UAAU,wBAAwB;AAC9E,UAAM,IAAI,MAAM,yEAAyE;AAAA,EAC3F;AAYA,MAAI,UAAU,cAAc;AAC1B,UAAM,EAAE,QAAQ,aAAa,SAAS,aAAa,IAAI,UAAU;AAKjE,UAAM,eAAgB,UAAU,aAAa,gBAAgB;AAC7D,UAAM,yBAAyB,UAAU,yBACrC,0BAA0B,SAA+B,UAAU,sBAAsB,IACxF;AACL,UAAM,eAAe,qBACjB,0BAA0B,wBAAwB,kBAAkB,IACpE;AACJ,UAAM,yBAAyB,UAAU,yBACrC,0BAA0B,cAAc,UAAU,sBAAsB,IACxE;AACJ,UAAM,wBAAwB,qBAC1B,0BAA0B,wBAAwB,kBAAkB,IACpE;AAIJ,QAAI,CAAC,UAAU,aAAa,eAAe;AACzC,YAAM,UAAU,8BAA8B,OAA6B;AAC3E,YAAM,qBAAqB,OAAO,SAA+B,uBAAuB;AAAA,QACtF;AAAA,QACA;AAAA,QACA,eAAe;AAAA,QACf,GAAI,UAAU,aAAa,4BACvB,EAAE,2BAA2B,KAAK,IAClC,CAAC;AAAA,QACL,GAAI,UAAU,iBAAiB,EAAE,gBAAgB,UAAU,eAAe,IAAI,CAAC;AAAA,QAC/E,GAAI,UAAU,4BACV;AAAA,UACE,eAAe,UAAU,0BAA0B,kBAAkB;AAAA,YACnE,UAAU;AAAA,UACZ;AAAA,QACF,IACA,CAAC;AAAA,MACP,CAAC;AACD,UAAI,2BAA2B,KAAK,GAAG;AACrC,cAAM,UAAU,+BAA+B,YAAY;AAAA,MAC7D;AACA,YAAM,UAAU,8BAA8B,YAAY;AAAA,IAC5D;AACA,UAAMC,SAAQ,aAAa,QAAQ;AACnC,UAAMC,iBAAgB,6BAA6B,KAAK;AACxD,UAAMC,kBACJD,eAAc,SAAS,IACnB,yBAAyB,aAA8BA,gBAAe;AAAA,MACpE,GAAI,UAAU,iBAAiB,EAAE,gBAAgB,UAAU,eAAe,IAAI,CAAC;AAAA,MAC/E,GAAID,SAAQ,EAAE,OAAAA,OAAM,IAAI,CAAC;AAAA,MACzB,GAAI,UAAU,4BACV;AAAA,QACE,eAAe,UAAU,0BAA0B,kBAAkB;AAAA,UACnE,UAAU;AAAA,QACZ;AAAA,MACF,IACA,CAAC;AAAA,IACP,CAAC,IACA;AAGP,UAAM,qBAAqB,sBAAsB,KAAK;AACtD,UAAM,6BAA6B,8BAA8B,KAAK;AACtE,UAAM,0BAA0B,2BAA2B,KAAK;AAChE,UAAM,gBAAgB,2BAA2B,KAAK;AACtD,UAAM,aAAa;AAAA;AAAA;AAAA;AAAA,MAIjB,GAAG,6BAA6B,KAAK;AAAA,MACrC,GAAG;AAAA,QACD,4BAA4B,wBAAwB,QAAQ,CAAC;AAAA,QAC7D,2BAA2B,KAAK;AAAA,MAClC;AAAA,MACA,GAAG,mCAAmC,KAAK;AAAA,MAC3C,GAAG;AAAA,QACD,0BAA0B,UAAU,+BAA+B;AAAA,MACrE;AAAA,MACA,GAAG,oCAAoC,KAAK;AAAA,MAC5C,GAAG,sCAAsC,UAAU,2BAA2B;AAAA,IAChF;AACA,UAAM,mBAAgD;AAAA,MACpD;AAAA,MACA,GAAI,UAAU,iBAAiB,EAAE,gBAAgB,UAAU,eAAe,IAAI,CAAC;AAAA,MAC/E,GAAIA,SAAQ,EAAE,OAAAA,OAAM,IAAI,CAAC;AAAA,MACzB,GAAI,qBAAqB,EAAE,eAAe,mBAAmB,IAAI,CAAC;AAAA,MAClE,GAAI,6BAA6B,EAAE,uBAAuB,2BAA2B,IAAI,CAAC;AAAA,MAC1F,GAAI,0BAA0B,EAAE,oBAAoB,wBAAwB,IAAI,CAAC;AAAA,MACjF,GAAI,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;AAAA,MACnD,GAAI,gBAAgB,EAAE,UAAU,cAAc,IAAI,CAAC;AAAA,IACrD;AAIA,UAAM,2BAA2B,UAAU,yBACvC;AAAA,MACEE;AAAA,MACA,UAAU;AAAA,MACV,UAAU;AAAA,IACZ,IACAA;AACJ,UAAM,0BAA0B,qBAC5B,yBAAyB,0BAA0B,kBAAkB,IACrE;AACJ,UAAM,kBAAkB;AAAA,MACtB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAM,cAAc;AAAA,MAClB;AAAA,QACE,gCAAgC,QAAQ;AAAA,QACxC;AAAA,QACA,UAAU;AAAA;AAAA;AAAA;AAAA,QAIV,uCAAuC,QAAQ;AAAA,QAC/C,mCAAmC,UAAU;AAAA,UAC3C,yBAAyB;AAAA,YACvB,UAAU,2BAA2B,UAAU;AAAA,UACjD;AAAA,UACA,GAAI,UAAU,0BACV,EAAE,yBAAyB,UAAU,wBAAwB,IAC7D,CAAC;AAAA,UACL,GAAI,UAAU,6BACV,EAAE,4BAA4B,UAAU,2BAA2B,IACnE,CAAC;AAAA,QACP,CAAC;AAAA,MACH,EAAE,OAAO,CAAC,MAAiC,QAAQ,CAAC,CAAC;AAAA,IACvD;AACA,UAAM,kBAA6C;AAAA,MACjD,QAAQ;AAAA,MACR,UAAU,SAAS;AAAA,MACnB,sBAAsB;AAAA,MACtB,GAAI,UAAU,SAAS,EAAE,QAAQ,UAAU,OAAO,IAAI,CAAC;AAAA,IACzD;AACA,oBAAgB,UAAU;AAAA,MACxB,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA,IACzC;AACA,WAAO,MAAM,gBAAgB,QAAQ,EAAE,IAAI,OAAO,SAAS,OAAO,eAAe;AAAA,EACnF;AAEA,QAAM,YAAY,UAAU,iBAAiB,oBAAoB,UAAU,WAAW;AACtF,QAAM,kBAAkB,YACpB;AAAA,IACE;AAAA,IACC,MAAyC;AAAA,IAC1C;AAAA,MACE,GAAI,UAAU,iBAAiB,EAAE,gBAAgB,UAAU,eAAe,IAAI,CAAC;AAAA,IACjF;AAAA,EACF,IACA;AACJ,QAAM,QAAQ,aAAa,QAAQ;AACnC,QAAM,gBAAgB,6BAA6B,KAAK;AACxD,QAAM,iBACJ,mBAAmB,cAAc,SAAS,IACtC,yBAAyB,iBAAiB,eAAe;AAAA,IACvD,GAAI,UAAU,iBAAiB,EAAE,gBAAgB,UAAU,eAAe,IAAI,CAAC;AAAA,IAC/E,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,EAC3B,CAAC,IACD;AACN,QAAM,mBACJ,kBAAkB,UAAU,yBACxB;AAAA,IACE;AAAA,IACA,UAAU;AAAA,IACV,UAAU;AAAA,EACZ,IACA;AACN,QAAM,kBACJ,oBAAoB,qBAChB,yBAAyB,kBAAkB,kBAAkB,IAC7D;AAGN,QAAM,gBAAgB,sBAAsB,KAAK;AACjD,QAAM,wBAAwB,8BAA8B,KAAK;AACjE,QAAM,qBAAqB,2BAA2B,KAAK;AAC3D,QAAM,iBAAiB,2BAA2B,KAAK;AACvD,QAAM,SAAS,kBACX;AAAA,IACE;AAAA,IACA;AAAA;AAAA;AAAA;AAAA,MAIE,GAAG,6BAA6B,KAAK;AAAA,MACrC,GAAG;AAAA,QACD,4BAA4B,wBAAwB,QAAQ,CAAC;AAAA,QAC7D,2BAA2B,KAAK;AAAA,MAClC;AAAA,MACA,GAAG,mCAAmC,KAAK;AAAA,MAC3C,GAAG;AAAA,QACD,qBAAqB,UAAU,+BAA+B;AAAA,MAChE;AAAA,MACA,GAAG,oCAAoC,KAAK;AAAA,MAC5C,GAAG,sCAAsC,UAAU,2BAA2B;AAAA,IAChF;AAAA,IACA;AAAA,MACE;AAAA,MACA,GAAI,UAAU,iBAAiB,EAAE,gBAAgB,UAAU,eAAe,IAAI,CAAC;AAAA,MAC/E,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,MACzB,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;AAAA,MACzC,GAAI,wBAAwB,EAAE,sBAAsB,IAAI,CAAC;AAAA,MACzD,GAAI,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;AAAA,MACnD,GAAI,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;AAAA,MACnD,GAAI,iBAAiB,EAAE,UAAU,eAAe,IAAI,CAAC;AAAA,IACvD;AAAA,EACF,IACA;AACJ,QAAM,sBAAsB,SAAS;AAMrC,QAAM,uBAAuB;AAAA,IAC3B;AAAA,MACE,gCAAgC,QAAQ;AAAA,MACxC;AAAA,MACA,UAAU;AAAA,MACV,uCAAuC,QAAQ;AAAA,MAC/C,mCAAmC,UAAU;AAAA,QAC3C,yBAAyB;AAAA,UACvB,UAAU,2BAA2B,UAAU;AAAA,QACjD;AAAA,QACA,GAAI,UAAU,0BACV,EAAE,yBAAyB,UAAU,wBAAwB,IAC7D,CAAC;AAAA,QACL,GAAI,UAAU,6BACV,EAAE,4BAA4B,UAAU,2BAA2B,IACnE,CAAC;AAAA,MACP,CAAC;AAAA,IACH,EAAE,OAAO,CAAC,MAAiC,QAAQ,CAAC,CAAC;AAAA,EACvD;AACA,QAAM,aAAwC;AAAA,IAC5C,QAAQ;AAAA,IACR,UAAU,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,IAKnB;AAAA,IACA,GAAI,UAAU,SAAS,EAAE,QAAQ,UAAU,OAAO,IAAI,CAAC;AAAA,EACzD;AACA,MAAI,QAAQ;AACV,eAAW,UAAU;AAAA,MACnB;AAAA,MACA,GAAI,sBAAsB,EAAE,cAAc,oBAAoB,IAAI,CAAC;AAAA,IACrE;AAAA,EACF;AACA,SAAO,MAAM,gBAAgB,QAAQ,EAAE,IAAI,OAAO,SAAS,OAAO,UAAU;AAC9E;AAEA,SAAS,qCACP,OACA,UACM;AACN,QAAM,OAAO,+BAA+B,QAAQ;AACpD,MAAI,CAAC,MAAM;AACT;AAAA,EACF;AACA,MAAI,OAAO,MAAM,UAAU,UAAU;AACnC,UAAM,QAAQ,CAAC,MAAM,OAAO,IAAI,IAAI,EAAE,KAAK,IAAI;AAC/C;AAAA,EACF;AACA,MAAI,MAAM,QAAQ,MAAM,KAAK,GAAG;AAC9B,UAAM,QAAQ;AAAA,MACZ,GAAG,MAAM;AAAA,MACT,EAAE,MAAM,WAAW,MAAM,QAAQ,SAAS,KAAK;AAAA,IACjD;AAAA,EACF;AACF;AAoBA,SAAS,gBAAgB,UAA4B;AACnD,SAAO,IAAI,OAAO;AAAA,IAChB,eAAe,IAAI,2BAA2B,QAAQ;AAAA,EACxD,CAAC;AACH;AAWO,SAAS,yBACd,OAC8C;AAC9C,MAAI,EAAE,iBAAiB,wBAAwB;AAC7C,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,EAAE,oBAAoB,MAAM,QAAQ,MAAM,MAAM,SAAS,IAAI,KAAK;AAAA,EAC3E,QAAQ;AACN,WAAO,EAAE,oBAAoB,KAAK;AAAA,EACpC;AACF;AAQO,SAAS,oBAAoB,OAA+B;AACjE,MAAI,EAAE,iBAAiB,gBAAgB,CAAC,MAAM,OAAO;AACnD,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,MAAM,MAAM,SAAS;AAAA,EAC9B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,4BACd,QACA,gBACA,UAA+D,CAAC,GACjD;AACf,MAAI,CAAC,kBAAkB,CAAC,OAAO,QAAQ;AACrC,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,WAAW,OAAO;AAAA,IAClB,GAAI,OAAO,2BAA2B,SAClC,EAAE,wBAAwB,OAAO,uBAAuB,IACxD,CAAC;AAAA,IACL,GAAI,OAAO,SACP;AAAA,MACE,QAAQ,UAAU,SAAgB,MAAO,OAAO,OAAe,GAAG,IAAI;AAAA,IACxE,IACA,CAAC;AAAA,IACL,QAAQ,OAAO,UAA+B;AAC5C,YAAM,UAAU,MAAM,OAAO,OAAQ,KAAK;AAC1C,YAAM,4BAA4B,SAAS,gBAAgB,OAAO;AAClE,aAAO;AAAA,IACT;AAAA,IACA,GAAI,OAAO,SACP;AAAA,MACE,QAAQ,OAAO,UAA+B,MAAM,OAAO,OAAQ,KAAK;AAAA,IAC1E,IACA,CAAC;AAAA,IACL,GAAI,OAAO,wBACP;AAAA,MACE,uBAAuB,OAAO,OAA4B,YACxD,MAAM,OAAO,sBAAuB,OAAO,OAAO;AAAA,IACtD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,8BACP;AAAA,MACE,6BAA6B,OAAO,UAClC,MAAM,OAAO,4BAA6B,KAAK;AAAA,IACnD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,gCACP;AAAA,MACE,+BAA+B,OAAO,UACpC,MAAM,OAAO,8BAA+B,KAAK;AAAA,IACrD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,0BACP;AAAA,MACE,yBAAyB,OAAO,UAC9B,MAAM,OAAO,wBAAyB,KAAK;AAAA,IAC/C,IACA,CAAC;AAAA,EACP;AACF;AAYA,eAAsB,4BACpB,SACA,gBACA,UAA+D,CAAC,GACjD;AACf,QAAM,uBACJ,QAWA,OAAO;AACT,QAAM,kBAAkB,uBAAuB,eAAe,oBAAoB,IAAI;AACtF,QAAM,SAAS,eAAe,cAAc;AAC5C,MAAI,CAAC,iBAAiB;AACpB,QAAI,OAAO,KAAK,OAAO,OAAO,EAAE,WAAW,GAAG;AAC5C;AAAA,IACF;AACA,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAIA,QAAM,+BAA+B,iBAAiB,QAAQ,OAAO;AACrE,MAAI,CAAC,QAAQ,iBAAiB,CAAC,QAAQ,kBAAkB;AACvD,QAAI,OAAO,KAAK,OAAO,OAAO,EAAE,WAAW,GAAG;AAC5C;AAAA,IACF;AACA,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,OAAO,KAAK,OAAO,OAAO,EAAE,WAAW,GAAG;AAC5C;AAAA,EACF;AACA,MAAI,gBAAgB,SAAS,OAAO,MAAM;AACxC,UAAM,IAAI,MAAM,6EAA6E;AAAA,EAC/F;AACA,QAAM,UAA+B,CAAC;AACtC,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,OAAO,OAAO,GAAG;AAC1D,UAAM,WAAY,gBAAgB,QAAoC,IAAI;AAC1E,QAAI,aAAa,QAAW;AAC1B,cAAQ,IAAI,IAAI;AAChB;AAAA,IACF;AACA,QAAI,WAAW,QAAQ,MAAM,WAAW,KAAK,GAAG;AAC9C,YAAM,IAAI,MAAM,mDAAmD,IAAI,EAAE;AAAA,IAC3E;AAAA,EACF;AACA,QAAM,qBACJ,WAAW,gBAAgB,WAAW,MAAM,WAAW,OAAO,WAAW;AAC3E,MAAI,sBAAsB,CAAC,QAAQ,eAAe;AAChD,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,OAAO,KAAK,OAAO,EAAE,WAAW,KAAK,CAAC,oBAAoB;AAC5D;AAAA,EACF;AAIA,QAAM,kBAAkB,gBAAgB,gBAAgB,iBAAiB,OAAO,eAAe;AAC/F,QAAM,QAAQ,IAAI,SAAS;AAAA,IACzB,MAAM,gBAAgB;AAAA,IACtB;AAAA,IACA,aAAa,OAAO;AAAA,IACpB,GAAI,gBAAgB,SAAS,EAAE,gBAAgB,IAAI,CAAC;AAAA,EACtD,CAAC;AACD,MAAI,QAAQ,eAAe;AACzB,UAAM,QAAQ,cAAc,KAAK;AAAA,EACnC,OAAO;AACL,eAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AACnD,YAAM,QAAQ,iBAAkB,EAAE,MAAM,MAAM,CAAC;AAAA,IACjD;AAAA,EACF;AACA,EAAC,QAAgD,MAAO,WAAW,IAAI,SAAS;AAAA,IAC9E,MAAM,gBAAgB;AAAA,IACtB,aAAa,qBAAqB,OAAO,cAAc,gBAAgB;AAAA,IACvE,SAAS;AAAA,MACP,GAAG,gBAAgB;AAAA,MACnB,GAAG;AAAA,IACL;AAAA,IACA,GAAI,gBAAgB,SAAS,EAAE,gBAAgB,IAAI,CAAC;AAAA,EACtD,CAAC;AACH;AAOO,SAAS,yBACd,SACA,QACkE;AAClE,QAAM,aAAc,QAAQ,eAAe,CAAC;AAC5C,QAAM,YAAa,OAAO,eAAe,CAAC;AAC1C,QAAM,QAAkB,CAAC;AACzB,QAAM,UAAoB,CAAC;AAC3B,QAAM,UAAoB,CAAC;AAC3B,aAAW,OAAO,OAAO,KAAK,SAAS,GAAG;AACxC,QAAI,EAAE,OAAO,aAAa;AACxB,YAAM,KAAK,GAAG;AAAA,IAChB,WAAW,WAAW,WAAW,GAAG,CAAC,MAAM,WAAW,UAAU,GAAG,CAAC,GAAG;AACrE,cAAQ,KAAK,GAAG;AAAA,IAClB;AAAA,EACF;AACA,aAAW,OAAO,OAAO,KAAK,UAAU,GAAG;AACzC,QAAI,EAAE,OAAO,YAAY;AACvB,cAAQ,KAAK,GAAG;AAAA,IAClB;AAAA,EACF;AACA,MAAI,MAAM,WAAW,KAAK,QAAQ,WAAW,KAAK,QAAQ,WAAW,GAAG;AACtE,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,OAAO,MAAM,KAAK;AAAA,IAClB,SAAS,QAAQ,KAAK;AAAA,IACtB,SAAS,QAAQ,KAAK;AAAA,EACxB;AACF;AAEA,eAAe,+BACb,SACA,QACA,SACsD;AACtD,QAAM,QAAQ,yBAAyB,SAAS,MAAM;AACtD,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AAGA,MAAI;AACF,UAAM,QAAQ,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAaA,eAAsB,sCACpB,OACA,SACA,UAA+D,CAAC,GACjD;AACf,QAAM,SAAS;AACf,QAAM,uBACJ,QAWA,OAAO;AACT,MAAI,CAAC,OAAO,mBAAmB,CAAC,sBAAsB;AACpD;AAAA,EACF;AACA,QAAM,UAAU,eAAe,oBAAoB;AACnD,QAAM,SAAS,eAAe,OAAO,eAAe;AACpD,QAAM,QAAQ,MAAM,+BAA+B,SAAS,QAAQ,OAAO;AAC3E,MAAI,CAAC,OAAO;AACV;AAAA,EACF;AACA,SAAO,kBAAkB,IAAI,SAAS;AAAA,IACpC,GAAI,OAAO,OAAO,EAAE,MAAM,OAAO,KAAK,IAAI,CAAC;AAAA,IAC3C,SAAS,OAAO;AAAA,IAChB,aAAa,QAAQ;AAAA,IACrB,GAAI,OAAO,iBAAiB,SAAS,EAAE,iBAAiB,OAAO,gBAAgB,IAAI,CAAC;AAAA,EACtF,CAAC;AACH;AAuBA,eAAsB,qBACpB,OACA,SACA,cACA,MAYe;AACf,QAAM,EAAE,UAAU,YAAY,IAAI;AAMlC,QAAM,sCAAsC,OAAO,SAAS;AAAA,IAC1D,GAAI,KAAK,iBAAiB,EAAE,gBAAgB,KAAK,eAAe,IAAI,CAAC;AAAA,EACvE,CAAC;AACD,QAAM,QAAQ,aAAa,QAAQ;AACnC,QAAM,gBAAgB,6BAA6B,KAAK;AAIxD,QAAM,qBAAqB;AAAA,IACzB,GAAI,sBAAsB,KAAK,KAAK,CAAC;AAAA,IACrC,GAAI,KAAK,uBAAuB,EAAE,QAAQ,KAAK,qBAAqB,IAAI,CAAC;AAAA,IACzE,GAAI,KAAK,yBAAyB,CAAC;AAAA,EACrC;AACA,QAAM,6BACJ,KAAK,iCAAiC,8BAA8B,KAAK;AAC3E,QAAM,0BACJ,KAAK,8BAA8B,2BAA2B,KAAK;AACrE,QAAM,0BAA0B,2BAA2B,OAAO,WAAW;AAC7E,QAAM,gBAAgB,2BAA2B,KAAK;AACtD,QAAM,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOjB,GAAG,6BAA6B,KAAK;AAAA,IACrC,GAAG;AAAA,MACD,4BAA4B,wBAAwB,QAAQ,CAAC;AAAA,MAC7D,2BAA2B,KAAK;AAAA,IAClC;AAAA,IACA,GAAG,mCAAmC,KAAK;AAAA,IAC3C,GAAG,oCAAoC,KAAK;AAAA,EAC9C;AACA,QAAM,mBAAgD;AAAA,IACpD;AAAA,IACA,GAAI,KAAK,iBAAiB,EAAE,gBAAgB,KAAK,eAAe,IAAI,CAAC;AAAA,IACrE,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,IACzB,GAAI,OAAO,KAAK,kBAAkB,EAAE,SAAS,IAAI,EAAE,eAAe,mBAAmB,IAAI,CAAC;AAAA,IAC1F,GAAI,6BAA6B,EAAE,uBAAuB,2BAA2B,IAAI,CAAC;AAAA,IAC1F,GAAI,0BAA0B,EAAE,oBAAoB,wBAAwB,IAAI,CAAC;AAAA,IACjF,GAAI,0BAA0B,EAAE,oBAAoB,wBAAwB,IAAI,CAAC;AAAA,IACjF,GAAI,gBAAgB,EAAE,UAAU,cAAc,IAAI,CAAC;AAAA,IACnD,GAAI,KAAK,gBAAgB,EAAE,eAAe,KAAK,cAAc,IAAI,CAAC;AAAA,EACpE;AASA,MAAI,0BAA0B,IAAI,KAAK,MAAM,cAAc;AACzD,UAAM,yBAAyB,cAAc,YAAY,gBAAgB;AAKzE,QAAI,cAAc,SAAS,KAAK,CAAC,KAAK,2BAA2B;AAC/D,YAAM,eAAe,MAAM,gCAAgC,cAAc,eAAe;AAAA,QACtF,GAAI,KAAK,iBAAiB,EAAE,gBAAgB,KAAK,eAAe,IAAI,CAAC;AAAA,QACrE,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,QACzB,GAAI,KAAK,gBAAgB,EAAE,eAAe,KAAK,cAAc,IAAI,CAAC;AAAA,MACpE,CAAC;AACD,UAAI,KAAK,eAAe;AACtB,6CAAqC,KAAK,eAAe,aAAa,QAAQ;AAAA,MAChF;AAAA,IACF;AAAA,EACF,OAAO;AAOL,UAAM,iBAAiB,mCAAmC,KAAK;AAC/D,QAAI,eAAe,SAAS,GAAG;AAC7B,YAAM,yBAAyB,cAAc,gBAAgB,gBAAgB;AAAA,IAC/E;AAAA,EACF;AACF;AAEA,SAAS,gBACP,SACA,QAC6B;AAC7B,QAAM,SAAS,oBAAI,IAAiD;AACpE,aAAW,SAAS,CAAC,GAAI,WAAW,CAAC,GAAI,GAAI,UAAU,CAAC,CAAE,GAAG;AAC3D,WAAO,IAAI,MAAM,MAAM,KAAK;AAAA,EAC9B;AACA,SAAO,CAAC,GAAG,OAAO,OAAO,CAAC;AAC5B;AAEO,SAAS,yBACd,QACA,WACA,UAA2F,CAAC,GAC7E;AACf,QAAM,sBAAsB,8BAA8B,SAAS;AACnE,MAAI,oBAAoB,WAAW,GAAG;AACpC,WAAO;AAAA,EACT;AACA,QAAM,YAAY,oBAAI,QAAgB;AACtC,QAAM,cAAc,OAAqC,YAA2B;AAClF,QAAI,OAAO,YAAY,YAAY,YAAY,QAAQ,CAAC,UAAU,IAAI,OAAO,GAAG;AAC9E,YAAM,gCAAgC,SAAS,qBAAqB,OAAO;AAC3E,gBAAU,IAAI,OAAO;AAAA,IACvB;AACA,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,WAAW,OAAO;AAAA,IAClB,GAAI,OAAO,2BAA2B,SAClC,EAAE,wBAAwB,OAAO,uBAAuB,IACxD,CAAC;AAAA,IACL,GAAI,OAAO,SACP;AAAA,MACE,QAAQ,UAAU,SAChB,MAAM,YAAY,MAAO,OAAO,OAAe,GAAG,IAAI,CAAC;AAAA,IAC3D,IACA,CAAC;AAAA,IACL,GAAI,OAAO,SACP;AAAA,MACE,QAAQ,OAAO,UACb,MAAM,YAAY,MAAM,OAAO,OAAQ,KAAK,CAAC;AAAA,IACjD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,SACP;AAAA,MACE,QAAQ,OAAO,UAA+B,MAAM,OAAO,OAAQ,KAAK;AAAA,IAC1E,IACA,CAAC;AAAA,IACL,GAAI,OAAO,wBACP;AAAA,MACE,uBAAuB,OAAO,OAA4B,YACxD,MAAM,OAAO,sBAAuB,OAAO,OAAO;AAAA,IACtD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,8BACP;AAAA,MACE,6BAA6B,OAAO,UAClC,MAAM,OAAO,4BAA6B,KAAK;AAAA,IACnD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,gCACP;AAAA,MACE,+BAA+B,OAAO,UACpC,MAAM,OAAO,8BAA+B,KAAK;AAAA,IACrD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,0BACP;AAAA,MACE,yBAAyB,OAAO,UAC9B,MAAM,OAAO,wBAAyB,KAAK;AAAA,IAC/C,IACA,CAAC;AAAA,EACP;AACF;AAEA,eAAsB,gCACpB,SACA,WACA,UAA2F,CAAC,GACzC;AACnD,QAAM,sBAAsB,8BAA8B,SAAS;AACnE,MAAI,oBAAoB,WAAW,GAAG;AACpC,WAAO,EAAE,UAAU,CAAC,EAAE;AAAA,EACxB;AACA,QAAM,WAAyC,CAAC;AAChD,aAAW,YAAY,qBAAqB;AAC1C,UAAM,aAAa,0BAA0B,QAAQ;AACrD,UAAM,UAAU;AAAA,MACd,QAAQ,SAAS;AAAA,MACjB,MAAM;AAAA,MACN,WAAW,SAAS,aAAa;AAAA,MACjC,WAAW,SAAS,YAAY,IAAI,KAAK,SAAS,SAAS,EAAE,YAAY,IAAI;AAAA,IAC/E;AACA,UAAM,QAAQ,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN,SAAS,EAAE,MAAM,0BAA0B,GAAG,QAAQ;AAAA,IACxD,CAAC;AACD,QAAI,CAAC,QAAQ,QAAQ,CAAC,QAAQ,aAAa;AACzC,YAAM,UAAU;AAAA,QACd;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,eAAS,KAAK,OAAO;AACrB,YAAM,QAAQ,iBAAiB;AAAA,QAC7B,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM;AAAA,UACN,GAAG;AAAA,UACH,OAAO,QAAQ;AAAA,QACjB;AAAA,MACF,CAAC;AACD;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACF,eAAS,MAAM;AAAA,QACb;AAAA,QACA;AAAA,UACE,KAAK,2BAA2B,UAAU,UAAU;AAAA,UACpD,SAAS;AAAA,UACT,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,UAChD,aAAa;AAAA,UACb,iBAAiB;AAAA,QACnB;AAAA,QACA,QAAQ;AAAA,MACV;AACA,oCAA8B,QAAQ,kCAAkC,SAAS,MAAM,EAAE;AACzF,YAAM,QAAQ,iBAAiB;AAAA,QAC7B,MAAM;AAAA,QACN,SAAS,EAAE,MAAM,0BAA0B,GAAG,QAAQ;AAAA,MACxD,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,iBAAiB,iCAAkC,OAAM;AAC7D,YAAM,UAAU,2BAA2B,UAAU,YAAY,OAAO,MAAM;AAC9E,eAAS,KAAK,OAAO;AACrB,YAAM,QAAQ,iBAAiB;AAAA,QAC7B,MAAM;AAAA,QACN,SAAS;AAAA,UACP,MAAM;AAAA,UACN,GAAG;AAAA,UACH,OAAO,QAAQ;AAAA,UACf,GAAI,QAAQ,aAAa,SAAY,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;AAAA,UACvE,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,QACrD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO,EAAE,SAAS;AACpB;AAEA,SAAS,2BACP,UACA,YACA,OACA,QAC4B;AAC5B,QAAM,WAAW,uBAAuB,MAAM;AAC9C,QAAM,SAAS,qBAAqB,MAAM;AAC1C,SAAO;AAAA,IACL,QAAQ,SAAS;AAAA,IACjB,UAAU,SAAS;AAAA,IACnB,MAAM;AAAA,IACN,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IAC7D,GAAI,aAAa,OAAO,EAAE,SAAS,IAAI,CAAC;AAAA,IACxC,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,EAC7B;AACF;AAEO,SAAS,+BAA+B,UAAgD;AAC7F,MAAI,SAAS,WAAW,GAAG;AACzB,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL;AAAA,IACA,GAAG,SAAS,IAAI,CAAC,YAAY,KAAK,QAAQ,QAAQ,KAAK,QAAQ,MAAM,GAAG;AAAA,IACxE;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEO,SAAS,6BAA6B,OAAuC;AAClF,SAAO,OAAO,UAAU,YAAY,UAAU,OAC1C,CAAC,GAAI,mBAAmB,IAAI,KAAK,KAAK,CAAC,CAAE,IACzC,CAAC;AACP;AAEA,SAAS,eACP,UAQU;AACV,MACE,oBAAoB,YACpB,OAAO,SAAS,mCAAmC,YACnD;AACA,WAAO;AAAA,EACT;AACA,SAAO,IAAI,SAAS;AAAA,IAClB,GAAI,SAAS,OAAO,EAAE,MAAM,SAAS,KAAK,IAAI,CAAC;AAAA,IAC/C,SAAS,SAAS,WAAW,CAAC;AAAA,IAC9B,aAAa,SAAS,eAAe,CAAC;AAAA,IACtC,GAAI,SAAS,iBAAiB,SAAS,EAAE,iBAAiB,SAAS,gBAAgB,IAAI,CAAC;AAAA,EAC1F,CAAC;AACH;AAEA,SAAS,wBAAwB,OAAuB;AACtD,QAAM,UAAU,MAAM,SAAS,IAAI,IAAI,IAAI,MAAM,SAAS,GAAG,IAAI,IAAI;AACrE,SAAO,KAAK,IAAI,GAAG,KAAK,MAAO,MAAM,SAAS,IAAK,CAAC,IAAI,OAAO;AACjE;AAGA,SAAS,oBAAoB,MAA8B;AACzD,MAAI,YAAY,OAAO,IAAI,EAAG,QAAO,KAAK;AAC1C,MAAI,gBAAgB,YAAa,QAAO,KAAK;AAC7C,MAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,WAAO,KAAK,MAAM,CAAC,UAAU,OAAO,UAAU,QAAQ,IAAI,KAAK,SAAS;AAAA,EAC1E;AACA,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,QAAM,SAAS;AACf,MAAI,OAAO,SAAS,YAAY,MAAM,QAAQ,OAAO,IAAI,GAAG;AAC1D,WAAO,OAAO,KAAK,MAAM,CAAC,UAAU,OAAO,UAAU,QAAQ,IAAI,OAAO,KAAK,SAAS;AAAA,EACxF;AACA,QAAM,OAAO,OAAO,KAAK,MAAM;AAC/B,SAAO,KAAK,SAAS,KACnB,KAAK,MAAM,CAAC,QAAQ,QAAQ,KAAK,GAAG,KAAK,OAAO,OAAO,GAAG,MAAM,QAAQ,IACtE,KAAK,SACL;AACN;AAOA,SAAS,uBAAuB,OAAiD;AAC/E,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,oCAAoC,KAAK;AAAA,EAClD;AACA,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,QAAM,SAAS;AACf,MAAI,OAAO,SAAS,eAAe;AACjC,UAAM,SAAS,OAAO,SAAS,OAAO,aAAa,OAAO;AAC1D,UAAM,MACJ,OAAO,WAAW,WACd,SACA,UAAU,OAAO,WAAW,WACzB,OAAmC,MACpC;AACR,QAAI,OAAO,QAAQ,YAAY,IAAI,WAAW,EAAG,QAAO;AACxD,WAAO,oCAAoC,GAAG,KAAK,yBAAyB,WAAW,IAAI;AAAA,EAC7F;AACA,MAAI,OAAO,SAAS,WAAW,CAAC,OAAO,SAAS,OAAO,OAAO,UAAU,SAAU,QAAO;AACzF,QAAM,QAAQ,OAAO;AACrB,QAAM,YACJ,OAAO,MAAM,cAAc,YAAY,MAAM,UAAU,SAAS,IAC5D,MAAM,YACN;AACN,MAAI,OAAO,MAAM,QAAQ,YAAY,MAAM,IAAI,SAAS,GAAG;AACzD,WACE,oCAAoC,MAAM,GAAG,KAAK,yBAAyB,WAAW,IAAI;AAAA,EAE9F;AACA,MAAI,OAAO,MAAM,SAAS,UAAU;AAClC,WACE,oCAAoC,MAAM,IAAI,KAC9C,yBAAyB,WAAW,wBAAwB,MAAM,IAAI,CAAC;AAAA,EAE3E;AACA,QAAM,aAAa,oBAAoB,MAAM,IAAI;AACjD,SAAO,eAAe,OAAO,OAAO,yBAAyB,WAAW,UAAU;AACpF;AAQO,SAAS,4BAA4B,QAA0B;AACpE,QAAM,SAAS,uBAAuB,MAAM;AAC5C,MAAI,WAAW,MAAM;AACnB,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,UAAM,aAAa,OAAO,IAAI,CAAC,OAAO,uBAAuB,EAAE,KAAK,EAAE;AACtE,QAAI,WAAW,WAAW,KAAK,WAAW,CAAC,GAAG,SAAS,iBAAiB;AACtE,aAAO,WAAW,CAAC;AAAA,IACrB;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AASA,SAAS,0CAA0C,KAA6C;AAC9F,MAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,WAAO;AAAA,EACT;AACA,QAAM,QAAQ;AAUd,QAAM,YAAY,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAChE,MACE,GACG,cAAc,gCAAgC,cAAc,gCAC7D,MAAM,MAAM,SAAS,oBAEvB;AAGA,WAAO;AAAA,EACT;AACA,QAAM,OAAO,MAAM;AACnB,QAAM,SAAS,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK;AACvD,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,EACT;AACA,QAAM,SACJ,OAAO,KAAK,WAAW,WACnB,KAAK,SACL,cAAc,8BACZ,cACA;AACR,QAAM,SAAS,KAAK,UAAU;AAI9B,QAAM,EAAE,QAAQ,SAAS,GAAG,aAAa,IAAI;AAE7C,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,MACP,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,WAAW;AAAA,MACX,KAAK;AAAA,QACH,MAAM;AAAA,QACN,IAAI;AAAA,QACJ,MAAM;AAAA,QACN;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,kBAAkB,OAAiD;AACjF,QAAM,MAAgC,CAAC;AACvC,MAAI,MAAM,SAAS,0BAA0B;AAC3C,UAAM,OAAQ,MAAc;AAC5B,QAAI,MAAM,SAAS,uBAAuB,OAAO,KAAK,UAAU,UAAU;AACxE,UAAI,KAAK,EAAE,MAAM,uBAAuB,SAAS,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;AACvE,aAAO;AAAA,IACT;AACA,QAAI,MAAM,SAAS,iBAAiB;AAClC,aAAO;AAAA,IACT;AAAA,EACF;AACA,MAAI,qCAAqC,KAAK,GAAG;AAC/C,UAAM,MAAO,MAAc,MAAM;AACjC,QAAI,KAAK,SAAS,2CAA2C,OAAO,IAAI,UAAU,UAAU;AAC1F,UAAI,KAAK,EAAE,MAAM,yBAAyB,SAAS,EAAE,MAAM,IAAI,MAAM,EAAE,CAAC;AAAA,IAC1E;AACA,UAAM,YAAY,0CAA0C,GAAG;AAC/D,QAAI,WAAW;AACb,UAAI,KAAK,SAAS;AAAA,IACpB;AACA,WAAO;AAAA,EACT;AACA,MAAI,MAAM,SAAS,8BAA8B;AAC/C,QAAI,KAAK;AAAA,MACP,MAAM;AAAA,MACN,SAAS,EAAE,OAAQ,MAAc,OAAO,QAAQ,KAAK;AAAA,IACvD,CAAC;AACD,WAAO;AAAA,EACT;AACA,MAAI,MAAM,SAAS,yBAAyB;AAC1C,WAAO;AAAA,EACT;AACA,QAAM,OAAQ,MAAc;AAC5B,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AACA,MAAI,KAAK,SAAS,kBAAkB;AAClC,UAAM,MAAM,KAAK,WAAW,CAAC;AAC7B,QAAI,KAAK;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,QACP,IAAI,IAAI,UAAU,IAAI,MAAM,KAAK,MAAM;AAAA,QACvC,MAAM,IAAI,QAAQ,IAAI,QAAQ;AAAA,QAC9B,WAAW,IAAI,aAAa,IAAI,SAAS;AAAA,QACzC;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,WAAW,KAAK,SAAS,yBAAyB;AAChD,QAAI,KAAK;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,QACP,IAAI,KAAK,SAAS,UAAU,KAAK,MAAM;AAAA;AAAA;AAAA,QAGvC,QAAQ,4BAA4B,KAAK,MAAM;AAAA,MACjD;AAAA,IACF,CAAC;AAAA,EACH,WAAW,KAAK,SAAS,yBAAyB;AAKhD,UAAM,MAAM,KAAK,WAAW,CAAC;AAC7B,QAAI,KAAK;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,QACP,IAAI,IAAI,WAAW,IAAI,UAAU,IAAI,MAAM,KAAK,MAAM;AAAA,QACtD,MAAM;AAAA,QACN,WAAW,IAAI,aAAa;AAAA,QAC5B;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,WAAW,KAAK,SAAS,2BAA2B;AAClD,UAAM,MAAM,KAAK,WAAW,CAAC;AAC7B,UAAM,YAAY,MAAM,QAAQ,IAAI,KAAK,IACrC,IAAI,MACD,IAAI,CAACL,UAA8B,OAAOA,OAAM,SAAS,WAAWA,MAAK,OAAO,EAAG,EACnF,OAAO,OAAO,IACjB,CAAC;AACL,QAAI,KAAK;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,QACP,IAAI,IAAI,WAAW,IAAI,UAAU,KAAK,MAAM;AAAA,QAC5C,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,MACE,UAAU,SAAS,IACf,oBAAoB,UAAU,KAAK,IAAI,CAAC,KACxC;AAAA,QACR;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,WAAW,KAAK,SAAS,uBAAuB;AAC9C,UAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO;AACzD,QAAI,MAAM;AACR,UAAI,KAAK,EAAE,MAAM,2BAA2B,SAAS,EAAE,KAAK,EAAE,CAAC;AAAA,IACjE;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,+BAA+B,OAAkD;AAC/F,QAAM,WAAW,0BAA0B,KAAK;AAChD,SAAO,+BAA+B,QAAQ;AAChD;AAGO,SAAS,+BAA+B,UAA8C;AAC3F,QAAM,QAAQ,kBAAkB,QAAQ;AACxC,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AACA,QAAM,aACJ,OAAQ,UAAsC,OAAO,WAChD,SAA4B,KAC7B,OAAQ,UAA8C,eAAe,WAClE,SAAoC,aACrC;AACR,QAAM,cAAc,qCAAqC,QAAQ;AACjE,SAAO;AAAA,IACL,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,IACnC,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;AAAA,IACrC;AAAA,EACF;AACF;AAYO,SAAS,qCACd,OACsC;AACtC,MAAI,MAAM,SAAS,0BAA0B;AAC3C,UAAM,OAAQ,MAAc;AAC5B,QAAI,MAAM,SAAS,iBAAiB;AAClC,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,aAAa,qCAAqC,KAAK,QAAQ;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AACA,MAAI,qCAAqC,KAAK,GAAG;AAC/C,UAAM,MAAO,MAAc,MAAM;AACjC,QAAI,KAAK,SAAS,sBAAsB;AACtC,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,aAAa,qCAAqC,IAAI,QAAQ;AAAA,MAChE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,qCAAqC,UAAkC;AAC9E,MAAI,CAAC,YAAY,OAAO,aAAa,UAAU;AAC7C,WAAO;AAAA,EACT;AACA,QAAM,SAAS;AACf,QAAM,SAAS,OAAO,gBAAgB,OAAO;AAC7C,MAAI,OAAO,WAAW,YAAY,OAAO,SAAS,GAAG;AACnD,WAAO;AAAA,EACT;AACA,QAAM,eACJ,OAAO,gBAAgB,OAAO,OAAO,iBAAiB,WACjD,OAAO,eACR;AACN,QAAM,SAAS,cAAc,gBAAgB,cAAc;AAC3D,SAAO,OAAO,WAAW,YAAY,OAAO,SAAS,IAAI,SAAS;AACpE;AAEA,SAAS,0BAA0B,OAA4B;AAC7D,MAAI,MAAM,SAAS,0BAA0B;AAC3C,UAAM,OAAQ,MAAc;AAC5B,QAAI,MAAM,SAAS,iBAAiB;AAClC,aAAO,KAAK;AAAA,IACd;AAAA,EACF;AACA,MAAI,qCAAqC,KAAK,GAAG;AAC/C,UAAM,MAAO,MAAc,MAAM;AACjC,QAAI,KAAK,SAAS,sBAAsB;AACtC,aAAO,IAAI;AAAA,IACb;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,UAAuD;AAChF,QAAM,MAAO,UAAyC;AACtD,MAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,WAAO;AAAA,EACT;AACA,QAAM,SAAS;AACf,QAAM,QAAQ;AAAA,IACZ,GAAG;AAAA,MACD;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,GAAG;AAAA,MACD;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,GAAG,WAAW,QAAQ,eAAe,eAAe,cAAc;AAAA,IAClE,GAAG,sBAAsB,MAAM;AAAA,IAC/B,GAAG,uBAAuB,MAAM;AAAA,IAChC,GAAG,wBAAwB,MAAM;AAAA,EACnC;AACA,SAAO,OAAO,KAAK,KAAK,EAAE,SAAS,IAAI,QAAQ;AACjD;AAEA,SAAS,WACP,KACA,cACG,MACmC;AACtC,QAAM,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,cAAc,cAAc,MAAS;AAKrF,SAAO,OAAO,UAAU,WAAW,EAAE,CAAC,SAAS,GAAG,MAAM,IAAI,CAAC;AAC/D;AAEA,SAAS,sBAAsB,KAAoE;AACjG,QAAM,UACJ,IAAI,sBACJ,IAAI,wBACJ,IAAI,uBACJ,IAAI;AACN,MAAI,YAAY,UAAa,YAAY,MAAM;AAC7C,WAAO,CAAC;AAAA,EACV;AACA,SAAO;AAAA,IACL,oBAAoB;AAAA,EACtB;AACF;AAEA,SAAS,uBACP,KACsC;AACtC,QAAM,UAAU,IAAI,uBAAuB,IAAI;AAC/C,QAAM,aAAa,WAAW,IAAI,2BAA2B,IAAI;AACjE,MAAI,eAAe,UAAa,eAAe,MAAM;AACnD,WAAO,CAAC;AAAA,EACV;AACA,SAAO;AAAA,IACL,qBAAqB;AAAA,EACvB;AACF;AAEA,SAAS,wBACP,KACsC;AACtC,QAAM,UAAU,IAAI,uBAAuB,IAAI;AAC/C,MAAI,YAAY,UAAa,YAAY,MAAM;AAC7C,WAAO,CAAC;AAAA,EACV;AACA,SAAO;AAAA;AAAA;AAAA;AAAA,IAIL,qBAAqB;AAAA,EACvB;AACF;AAEO,SAAS,mBAAmB,eAAqC;AACtE,SAAO,cACJ,OAAO,CAAC,SAAS,qBAAqB,IAAI,MAAM,qBAAqB,EACrE,IAAI,CAAC,SAAc;AAClB,QAAI,OAAO,MAAM,WAAW,YAAY;AACtC,aAAO,KAAK,OAAO;AAAA,IACrB;AACA,WAAO;AAAA,MACL,IAAI,mBAAmB,IAAI,KAAK;AAAA,MAChC,MAAM,MAAM,QAAQ,MAAM,SAAS,QAAQ;AAAA,MAC3C,WAAW,MAAM,aAAa,MAAM,SAAS,aAAa;AAAA,MAC1D,KAAK;AAAA,IACP;AAAA,EACF,CAAC;AACL;AAEO,SAAS,4BACd,eACoC;AACpC,SAAO,cACJ,OAAO,CAAC,SAAS,qBAAqB,IAAI,MAAM,qBAAqB,EACrE,IAAI,CAAC,SAAc;AAClB,UAAM,eAAe,MAAM,aAAa,MAAM,SAAS;AACvD,QAAI,kBAA2B;AAC/B,QAAI,OAAO,iBAAiB,UAAU;AACpC,UAAI;AACF,0BAAkB,KAAK,MAAM,YAAY;AAAA,MAC3C,QAAQ;AACN,cAAM,IAAI,MAAM,0DAA0D;AAAA,MAC5E;AAAA,IACF;AACA,UAAM,aAAa,mBAAmB,IAAI;AAC1C,QAAI,CAAC,YAAY;AACf,YAAM,IAAI,MAAM,iEAAiE;AAAA,IACnF;AACA,WAAO;AAAA,MACL;AAAA,MACA,OAAO,2BAA2B,MAAM,eAAe;AAAA,IACzD;AAAA,EACF,CAAC;AACL;AAEO,SAAS,cACd,UACA,WACA,cAAcE,2BAA0B,QAAQ,GAChD,wBAA+C,CAAC,GACtC;AACV,iCAA+B,SAAS;AACxC,QAAM,UAA+B,CAAC;AACtC,QAAM,oBAAoB,IAAI;AAAA,IAC5B,8BAA8B,qBAAqB,EAAE,IAAI,CAAC,aAAa;AAAA,MACrE,SAAS;AAAA,MACT;AAAA,IACF,CAAC;AAAA,EACH;AACA,aAAW,YAAY,WAAW;AAChC,QAAI,SAAS,SAAS,cAAc;AAClC,YAAM,MAAM,IAAI,IAAI,SAAS,GAAG;AAChC,YAAM,OAAO,IAAI,KAAK,YAAY;AAClC,YAAM,OAAO,IAAI,SAAS,QAAQ,cAAc,EAAE,EAAE,QAAQ,UAAU,EAAE;AACxE,YAAM,YAAY,kBAAkB,QAAQ;AAC5C,UAAI,2BAA2B,UAAU,QAAQ,GAAG;AAClD,gBAAQ,SAAS,IAAI,IAAI;AACzB;AAAA,MACF;AACA,cAAQ,SAAS,IAAI,QAAQ;AAAA,QAC3B;AAAA,QACA;AAAA,QACA,KAAK,SAAS;AAAA,QACd,GAAI,SAAS,UAAU,EAAE,SAAS,2BAA2B,SAAS,OAAO,EAAE,IAAI,CAAC;AAAA,MACtF,CAAC;AACD;AAAA,IACF;AACA,QAAI,SAAS,SAAS,QAAQ;AAC5B,YAAM,YAAY,kBAAkB,QAAQ;AAC5C,YAAM,WAAW,kBAAkB,IAAI,SAAS,MAAM;AACtD,cAAQ,SAAS,IAAI,WACjB,yBAAyB,UAAU,SAAS,IAC5C,uBAAuB,UAAU,SAAS,SAAS,MAAM,WAAW;AAAA,IAC1E;AAAA,EACF;AAMA,SAAO,IAAI,SAAS;AAAA,IAClB,MAAM;AAAA,IACN;AAAA,IACA;AAAA,EACF,CAAC;AACH;AAEO,SAAS,oCAAoC,WAElD;AACA,QAAM,eAAe,UAAU;AAAA,IAC7B,CAAC,aACC,SAAS,SAAS;AAAA,EACtB;AACA,MAAI,aAAa,WAAW,EAAG,QAAO,CAAC;AAEvC,QAAM,QAAQ,oBAAI,IAAsC;AACxD,QAAM,MAAM,CAAC,MAAc,WAAyB;AAClD,QAAI,CAAC,MAAM,IAAI,IAAI,EAAG,OAAM,IAAI,MAAM,EAAE,MAAM,OAAO,CAAC;AAAA,EACxD;AAIA,MAAI,kBAAkB,0BAA0B;AAChD,MAAI,kBAAkB,0BAA0B;AAChD,aAAW,cAAc,cAAc;AACrC,UAAM,YAAY,kBAAkB,UAAU;AAC9C,QAAI,GAAG,SAAS,mBAAmB,GAAG,SAAS,iBAAiB;AAChE,QAAI,GAAG,SAAS,mBAAmB,GAAG,SAAS,iBAAiB;AAAA,EAClE;AACA,SAAO,EAAE,qBAAqB,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;AACpD;AAEA,SAAS,yBAAyB,UAA+B,WAAwB;AACvF,MAAI,SAAS,cAAc,WAAW;AACpC,UAAM,IAAI;AAAA,MACR,mDAAmD,SAAS,MAAM,cAAc,SAAS,SAAS,SAAS,SAAS;AAAA,IACtH;AAAA,EACF;AACA,4BAA0B,SAAS,UAAU,SAAS,MAAM;AAC5D,MAAI,SAAS,SAAS;AACpB,WAAO,IAAI;AAAA,MACT,UAAU;AAAA,QACR,CAAC,SAAS,QAAQ,GAAG,KAAK,EAAE,SAAS,SAAS,QAAQ,CAAC;AAAA,MACzD;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO,IAAI;AACb;AAEA,SAAS,uBAAuB,UAAoB,QAAqB;AAKvE,QAAM,oBAAoBI,wBAAuB,SAAS,cAAc,EAAE;AAC1E,MAAI,SAAS,yBAAyB,cAAc;AAClD,QAAI,mBAAmB;AACrB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,UAAMC,UAAS,qBAAqB,QAAQ;AAC5C,WAAO,eAAe;AAAA,MACpB,WAAWA,QAAO;AAAA,MAClB;AAAA,MACA,aAAaA,QAAO;AAAA,MACpB,YAAYA,QAAO;AAAA,MACnB,aAAaA,QAAO;AAAA,MACpB,UAAU;AAAA,MACV,eAAe,yBAAyB;AAAA,QACtC,SAAS,EAAE,MAAM,UAAU,MAAM,OAAO;AAAA,MAC1C,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACA,MAAI,SAAS,yBAAyB,YAAY,SAAS,yBAAyB,OAAO;AACzF,UAAM,IAAI;AAAA,MACR,GAAG,SAAS,oBAAoB;AAAA,IAClC;AAAA,EACF;AACA,QAAM,SAAS,wBAAwB,QAAQ;AAC/C,SAAO,QAAQ;AAAA,IACb,QAAQ,OAAO;AAAA,IACf;AAAA,IACA,aAAa,OAAO;AAAA,IACpB,QAAQ,OAAO;AAAA,IACf,YAAY,OAAO;AAAA,IACnB,aAAa,OAAO;AAAA,IACpB,iBAAiB,OAAO;AAAA,IACxB,UAAU;AAAA,IACV,eAAe,oBACX,IAAI,8BAA8B,IAClC,yBAAyB,EAAE,SAAS,EAAE,MAAM,UAAU,MAAM,OAAO,EAAE,CAAC;AAAA,EAC5E,CAAC;AACH;AAEA,SAAS,wBAAwB,UAO/B;AACA,QAAM,cAAc,SAAS,gCAAgC,SAAS;AACtE,MACE,CAAC,eACD,CAAC,SAAS,4BACV,CAAC,SAAS,8BACV;AACA,UAAM,IAAI,MAAM,gEAAgE;AAAA,EAClF;AACA,SAAO;AAAA,IACL,QAAQ,SAAS;AAAA,IACjB;AAAA,IACA,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS;AAAA,IACrB,aAAa,SAAS;AAAA,IACtB,iBAAiB,SAAS;AAAA,EAC5B;AACF;AAEA,SAAS,qBAAqB,UAK5B;AACA,QAAM,SAAS,SAAS,qCACpB,2BAA2B,SAAS,kCAAkC,IACtE,CAAC;AACL,QAAM,cAAc,SAAS,iCAAiC,OAAO;AACrE,QAAM,aAAa,SAAS,gCAAgC,OAAO;AACnE,MAAI,CAAC,eAAe,CAAC,YAAY;AAC/B,UAAM,IAAI,MAAM,gEAAgE;AAAA,EAClF;AACA,QAAM,cAAc;AAAA,IAClB,SAAS,8BAA8B,OAAO;AAAA,IAC9C;AAAA,EACF;AACA,SAAO;AAAA,IACL,WAAW,SAAS;AAAA,IACpB;AAAA,IACA;AAAA,IACA,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;AAAA,EACvC;AACF;AAEA,SAAS,0BACP,UACA,aACoB;AACpB,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,EACT;AACA,QAAM,aAAa,SAAS,QAAQ,QAAQ,EAAE;AAC9C,QAAM,0BAA0B,WAAW,WAAW;AACtD,SAAO,eAAe,0BAA0B,SAAY;AAC9D;AAEA,SAAS,2BAA2B,OAAuC;AACzE,SAAO,OAAO;AAAA,IACZ,MACG,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,OAAO,EACd,IAAI,CAAC,SAAS;AACb,YAAM,QAAQ,KAAK,QAAQ,GAAG;AAC9B,aAAO,UAAU,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,MAAM,GAAG,KAAK,GAAG,KAAK,MAAM,QAAQ,CAAC,CAAC;AAAA,IACjF,CAAC;AAAA,EACL;AACF;AAEA,SAAS,sBAAsB,MAAsB;AACnD,SAAO,2BAA2B,IAAI;AACxC;AAEA,SAAS,8BAA8B,WAAyD;AAC9F,SAAO,UAAU,IAAI,CAAC,aAAa;AACjC,UAAM,YAAY,sBAAsB,SAAS,SAAS;AAC1D,8BAA0B,SAAS,UAAU,SAAS,MAAM;AAC5D,QAAI,CAAC,SAAS,WAAW,CAAC,SAAS,KAAK,KAAK,GAAG;AAC9C,YAAM,IAAI;AAAA,QACR,+DAA+D,SAAS,MAAM;AAAA,MAChF;AAAA,IACF;AACA,WAAO;AAAA,MACL,GAAG;AAAA,MACH;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,SAAS,0BAA0B,UAAkB,QAAsB;AACzE,MACE,CAAC,YACD,SAAS,SAAS,GAAG,KACrB,SAAS,SAAS,IAAI,KACtB,aAAa,OACb,aAAa,QACb,SAAS,SAAS,IAAI,GACtB;AACA,UAAM,IAAI,MAAM,iCAAiC,MAAM,KAAK,QAAQ,EAAE;AAAA,EACxE;AACF;AAEA,SAAS,0BAA0B,UAAuC;AACxE,SAAO,UAAU,KAAK,cAAc,SAAS,WAAW,SAAS,QAAQ;AAC3E;AAEA,SAAS,2BAA2B,UAA+B,YAA4B;AAC7F,MAAI,CAAC,SAAS,KAAK;AACjB,UAAM,IAAI,MAAM,kDAAkD,SAAS,MAAM,EAAE;AAAA,EACrF;AACA,QAAM,YAAY,UAAU,QAAQ,UAAU;AAC9C,QAAM,UAAU,GAAG,UAAU;AAC7B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,eAAe,WAAW,SAAS,CAAC;AAAA,IACpC,aAAa,WAAW,UAAU,CAAC;AAAA,IACnC,SAAS,WAAW,OAAO,CAAC;AAAA,IAC5B;AAAA,IACA;AAAA,IACA,4FAA4F,WAAW,SAAS,GAAG,CAAC;AAAA,IACpH,kBAAkB,WAAW,UAAU,CAAC;AAAA,IACxC;AAAA,IACA;AAAA,IACA,gBAAgB,WAAW,UAAU,CAAC;AAAA,EACxC,EAAE,KAAK,IAAI;AACb;AAEA,SAAS,WAAW,OAAuB;AACzC,SAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,CAAC;AACzC;AA6BA,eAAe,2BACb,SACA,MACA,eACkB;AAClB,MAAI,eAAe;AACjB,WAAO,MAAM,cAAc,SAAsC,IAAI;AAAA,EACvE;AACA,MAAI,QAAQ,KAAM,QAAO,MAAM,QAAQ,KAAK,IAAI;AAChD,MAAI,QAAQ,YAAa,QAAO,MAAM,QAAQ,YAAY,IAAI;AAC9D,QAAM,IAAI,MAAM,oDAAoD;AACtE;AAsBA,IAAM,+BAAqE;AAAA,EACzE,mBAAmB;AAAA,IACjB,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,WAAW,CAAC,EAAE,YAAY,MAAM,yBAAyB,WAAW;AAAA,IACpE,KAAK;AAAA,EACP;AACF;AAEO,SAAS,4BAA4B,KAAuC;AACjF,SAAO,IAAI,IAAI,CAAC,OAAO;AACrB,UAAM,OAAO,6BAA6B,EAAE;AAC5C,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,MAAM,kCAAkC,EAAE,EAAE;AAAA,IACxD;AACA,WAAO;AAAA,EACT,CAAC;AACH;AAEA,SAAS,gCACP,OACA,SACwB;AACxB,SAAO,MAAM;AAAA,IACX,CAAC,SAAS,KAAK,UAAU,uBAAuB,KAAK,YAAY,OAAO,KAAK;AAAA,EAC/E;AACF;AAaA,eAAsB,yBACpB,SACA,OACA,SACe;AACf,aAAW,QAAQ,gCAAgC,OAAO,OAAO,GAAG;AAClE,UAAM,KAAK,IAAI,SAAS,OAAO;AAAA,EACjC;AACF;AAEO,SAAS,0BACd,QACA,OACA,SACe;AACf,QAAM,wBAAwB,gCAAgC,OAAO,OAAO;AAC5E,MAAI,sBAAsB,WAAW,GAAG;AACtC,WAAO;AAAA,EACT;AACA,QAAM,OAAO,oBAAI,QAAgB;AACjC,QAAM,cAAc,OAAqC,YAA2B;AAClF,QAAI,OAAO,YAAY,YAAY,YAAY,QAAQ,CAAC,KAAK,IAAI,OAAO,GAAG;AACzE,iBAAW,QAAQ,uBAAuB;AACxC,cAAM,KAAK,IAAI,SAAS,OAAO;AAAA,MACjC;AACA,WAAK,IAAI,OAAO;AAAA,IAClB;AACA,WAAO;AAAA,EACT;AACA,QAAM,UAAyB;AAAA,IAC7B,WAAW,OAAO;AAAA,IAClB,GAAI,OAAO,2BAA2B,SAClC,EAAE,wBAAwB,OAAO,uBAAuB,IACxD,CAAC;AAAA,IACL,GAAI,OAAO,SACP;AAAA,MACE,QAAQ,UAAU,SAChB,MAAM,YAAY,MAAO,OAAO,OAAe,GAAG,IAAI,CAAC;AAAA,IAC3D,IACA,CAAC;AAAA,IACL,GAAI,OAAO,SACP;AAAA,MACE,QAAQ,OAAO,UACb,MAAM,YAAY,MAAM,OAAO,OAAQ,KAAK,CAAC;AAAA,IACjD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,SACP;AAAA,MACE,QAAQ,OAAO,UAA+B,MAAM,OAAO,OAAQ,KAAK;AAAA,IAC1E,IACA,CAAC;AAAA,IACL,GAAI,OAAO,wBACP;AAAA,MACE,uBAAuB,OAAO,OAA4B,YACxD,MAAM,OAAO,sBAAuB,OAAO,OAAO;AAAA,IACtD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,8BACP;AAAA,MACE,6BAA6B,OAAO,UAClC,MAAM,OAAO,4BAA6B,KAAK;AAAA,IACnD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,gCACP;AAAA,MACE,+BAA+B,OAAO,UACpC,MAAM,OAAO,8BAA+B,KAAK;AAAA,IACrD,IACA,CAAC;AAAA,IACL,GAAI,OAAO,0BACP;AAAA,MACE,yBAAyB,OAAO,UAC9B,MAAM,OAAO,wBAAyB,KAAK;AAAA,IAC/C,IACA,CAAC;AAAA,EACP;AACA,SAAO;AACT;AAEA,SAAS,oCAAoC,OAAgD;AAC3F,SAAO,0BAA0B,IAAI,KAAK,KAAK,CAAC;AAClD;AAKA,SAAS,sBAAsB,OAAmD;AAChF,SAAO,mBAAmB,IAAI,KAAK;AACrC;AAEA,SAAS,8BACP,OACwC;AACxC,SAAO,2BAA2B,IAAI,KAAK;AAC7C;AAEA,SAAS,2BAA2B,OAA4C;AAC9E,SAAO,wBAAwB,IAAI,KAAK;AAC1C;AAEA,SAAS,gCAAgC,OAA4C;AACnF,SAAO,6BAA6B,IAAI,KAAK;AAC/C;AAEA,SAAS,2BACP,OACA,aACoB;AACpB,MAAI,CAAC,2BAA2B,KAAK,EAAG,QAAO;AAC/C,QAAM,YAAY,gCAAgC,KAAK;AACvD,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,sDAAsD;AAAA,EACxE;AACA,SAAO,kCAAkC,aAAa,SAAS;AACjE;AAEA,SAAS,mCAAmC,OAAgD;AAC1F,SAAO,2BAA2B,KAAK,IACnC;AAAA,IACE;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,KAAK;AAAA,IACP;AAAA,EACF,IACA,CAAC;AACP;AAOA,SAAS,6BAA6B,OAAgD;AACpF,SAAO,cAAc,IAAI,KAAK,IAC1B;AAAA,IACE;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,KAAK;AAAA,IACP;AAAA,EACF,IACA,CAAC;AACP;AAEA,SAAS,2BAA2B,OAAwD;AAC1F,SAAO,cAAc,IAAI,KAAK;AAChC;AAIA,SAAS,2BAA2B,OAAgD;AAClF,SAAO,wBAAwB,IAAI,KAAK,KAAK,CAAC;AAChD;AAKA,SAAS,qBACP,iBACA,UACwB;AACxB,MAAI,SAAS,WAAW,GAAG;AACzB,WAAO;AAAA,EACT;AACA,QAAM,OAAO,IAAI,IAAI,gBAAgB,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC;AAC3D,SAAO,CAAC,GAAG,iBAAiB,GAAG,SAAS,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;AAC9E;AAEA,SAAS,sCACP,UACwB;AACxB,SAAO,WACH;AAAA,IACE;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,KAAK,OAAO,YAAY;AACtB,cAAM,SAAS,OAAO;AAAA,MACxB;AAAA,IACF;AAAA,EACF,IACA,CAAC;AACP;AAEA,SAAS,uCACP,UACwB;AACxB,SAAO,WACH;AAAA,IACE;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,KAAK,OAAO,YAAY;AACtB,cAAM,SAAS,OAAO;AAAA,MACxB;AAAA,IACF;AAAA,EACF,IACA,CAAC;AACP;AAEA,SAAS,4BACP,UACA,WACA,uBAAmD,SAAS,gBACpC;AACxB,QAAM,eAAe,UAAU;AAAA,IAC7B,CAAC,aACC,SAAS,SAAS,gBAClB,2BAA2B,UAAU,UAAU,oBAAoB;AAAA,EACvE;AACA,MAAI,aAAa,WAAW,GAAG;AAC7B,WAAO,CAAC;AAAA,EACV;AACA,SAAO;AAAA,IACL;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,KAAK,OAAO,SAAS,YAAY;AAC/B,cAAM,uBAAuB,SAAS,cAAc,OAAO;AAAA,MAC7D;AAAA,IACF;AAAA,EACF;AACF;AAoBO,SAAS,2BACd,UACA,UACA,uBAAmD,SAAS,gBACnD;AACT,MAAI,yBAAyB,cAAc;AACzC,WAAO;AAAA,EACT;AACA,SACE,SAAS,mBAAmB,WAC5B,QAAQ,SAAS,wBAAwB,SAAS,kBAAkB,KACpE,QAAQ,SAAS,QAAQ;AAE7B;AAEA,IAAM,2BAA2B;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,mBAAmB,UAAyC;AACnE,SAAO,gBAAgB,SAAS,YAAY,CAAC;AAC/C;AAEO,SAAS,yBAAyB,qBAAqC;AAC5E,SAAOC,YAAW,QAAQ,EAAE,OAAO,qBAAqB,MAAM,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AAC3F;AAEA,SAAS,kBAAkB,SAA2C;AACpE,SAAO,wBAAwB,yBAAyB,QAAQ,mBAAmB,EAAE,YAAY,CAAC;AACpG;AAEA,SAAS,qCAAqC,UAA8C;AAC1F,SAAO,SACJ,IAAI,CAAC,YAAY,UAAU,kBAAkB,OAAO,CAAC,IAAI,WAAW,QAAQ,KAAK,CAAC,EAAE,EACpF,KAAK,IAAI;AACd;AAEA,SAAS,yBAAyB,OAA8B;AAC9D,QAAM,QAAkB,CAAC;AACzB,aAAW,YAAY,0BAA0B;AAC/C,UAAM,QAAQ,MAAM,QAAQ;AAC5B,QAAI,CAAC,OAAO;AACV;AAAA,IACF;AACA,UAAM,KAAK,UAAU,mBAAmB,QAAQ,CAAC,IAAI,WAAW,KAAK,CAAC,EAAE;AACxE,QAAI,aAAa,UAAU;AACzB,YAAM,KAAK,kCAAkC,WAAW,KAAK,CAAC,EAAE;AAAA,IAClE;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAwBA,SAAS,6BACP,WAC+B;AAC/B,QAAM,iBAAiB,oBAAI,IAAoB;AAC/C,QAAM,mBAAmB,oBAAI,IAAmC;AAChE,SAAO,UAAU,IAAI,CAAC,aAAa;AACjC,UAAM,MAAM,IAAI,IAAI,SAAS,GAAG;AAChC,UAAM,qBAAqB,mCAAmC,QAAQ;AAItE,UAAM,WAAW,sBAAsB;AACvC,UAAM,sBACJ,oCAAoC,UAAU,kBAAkB,KAAK;AACvE,UAAM,OAAO,IAAI,SAAS,QAAQ,cAAc,EAAE;AAClD,UAAM,SAAS,GAAG,IAAI,SAAS,YAAY,CAAC,KAAK,IAAI,KAAK,YAAY,CAAC,IAAI,KAAK,QAAQ,UAAU,EAAE,CAAC;AACrG,UAAM,aAAa,GAAG,QAAQ,KAAS,mBAAmB;AAC1D,UAAM,gBAAgB,iBAAiB,IAAI,mBAAmB;AAC9D,QAAI,iBAAiB,kBAAkB,UAAU;AAC/C,YAAM,IAAI;AAAA,QACR,sBAAsB,mBAAmB;AAAA,MAC3C;AAAA,IACF;AACA,qBAAiB,IAAI,qBAAqB,QAAQ;AAClD,UAAM,UAAU,eAAe,IAAI,MAAM;AACzC,QAAI,WAAW,YAAY,YAAY;AACrC,YAAM,IAAI;AAAA,QACR,qBAAqB,SAAS,GAAG;AAAA,MACnC;AAAA,IACF;AACA,mBAAe,IAAI,QAAQ,UAAU;AACrC,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,aAAa,yBAAyB,mBAAmB;AAAA,MACzD,UAAU,IAAI,SAAS,QAAQ,MAAM,EAAE,EAAE,YAAY;AAAA,MACrD,MAAM,IAAI,KAAK,YAAY;AAAA,MAC3B;AAAA,MACA,KAAK,SAAS;AAAA,MACd,WAAW,cAAc,kBAAkB,QAAQ,CAAC;AAAA,IACtD;AAAA,EACF,CAAC;AACH;AAEA,SAAS,0CACP,WACA,UACU;AAQV,QAAM,oBAAoB,IAAI;AAAA,IAC5B,SAAS,IAAI,CAAC,YAAY;AAAA,MACxB,wBAAwB,QAAQ,UAAU,QAAQ,mBAAmB;AAAA,MACrE,QAAQ,WAAW,SAAS,gBAAgB,oBAAoB;AAAA,IAClE,CAAC;AAAA,EACH;AACA,QAAM,UAAU,oBAAI,IAAsC;AAC1D,aAAW,cAAc,6BAA6B,SAAS,GAAG;AAChE,UAAM,MAAM,wBAAwB,WAAW,UAAU,WAAW,mBAAmB;AACvF,UAAM,YAAY,kBAAkB,IAAI,GAAG;AAC3C,QAAI,CAAC,UAAW;AAChB,UAAM,QAAkC,QAAQ,IAAI,GAAG,KAAK;AAAA,MAC1D,qBAAqB,WAAW;AAAA,MAChC,UAAU,WAAW;AAAA,MACrB;AAAA,MACA,cAAc,CAAC;AAAA,IACjB;AACA,UAAM,aAAa,KAAK,EAAE,KAAK,WAAW,KAAK,WAAW,WAAW,UAAU,CAAC;AAChF,YAAQ,IAAI,KAAK,KAAK;AAAA,EACxB;AACA,QAAM,YAAY,GAAG,KAAK;AAAA,IACxB;AAAA,MACE,SAAS;AAAA,MACT,UAAU,CAAC,GAAG,QAAQ,OAAO,CAAC;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,eAAe,WAAW,SAAS,CAAC;AAAA,IACpC;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,wBACP,UACA,qBACQ;AACR,SAAO,GAAG,QAAQ,KAAS,mBAAmB;AAChD;AAEA,SAAS,iCACP,UACqB;AACrB,SAAO,IAAI;AAAA,IACT,SACG,OAAO,CAAC,YAAY,QAAQ,WAAW,SAAS,aAAa,EAC7D,IAAI,CAAC,YAAY,wBAAwB,QAAQ,UAAU,QAAQ,mBAAmB,CAAC;AAAA,EAC5F;AACF;AAEA,SAAS,qCACP,WACA,UACuC;AACvC,QAAM,sBAAsB,6BAA6B,SAAS;AAClE,QAAM,kBAAkB,oBAAI,IAAyC;AACrE,aAAW,cAAc,qBAAqB;AAC5C,oBAAgB;AAAA,MACd,GAAG,wBAAwB,WAAW,UAAU,WAAW,mBAAmB,CAAC,KAAS,WAAW,GAAG;AAAA,MACtG;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAgD,CAAC;AACvD,QAAM,wBAAwB,oBAAI,IAAY;AAC9C,QAAM,oBAAoB,oBAAI,IAAY;AAC1C,aAAW,WAAW,UAAU;AAC9B,QAAI,CAAC,QAAQ,UAAW;AACxB,QACE,OAAO,QAAQ,cAAc,YAC7B,QAAQ,UAAU,SAAS,iBAC3B,CAAC,MAAM,QAAQ,QAAQ,UAAU,YAAY,GAC7C;AACA,YAAM,IAAI;AAAA,QACR,0BAA0B,QAAQ,mBAAmB;AAAA,MACvD;AAAA,IACF;AACA,UAAM,aAAa,wBAAwB,QAAQ,UAAU,QAAQ,mBAAmB;AACxF,UAAM,WAAW,oBAAoB;AAAA,MACnC,CAAC,eACC,wBAAwB,WAAW,UAAU,WAAW,mBAAmB,MAAM;AAAA,IACrF;AACA,QAAI,SAAS,WAAW,KAAK,QAAQ,UAAU,aAAa,WAAW,SAAS,QAAQ;AACtF,YAAM,IAAI;AAAA,QACR,2BAA2B,QAAQ,mBAAmB;AAAA,MACxD;AAAA,IACF;AACA,eAAW,SAAS,QAAQ,UAAU,cAAc;AAClD,UACE,CAAC,SACD,OAAO,UAAU,YACjB,OAAO,MAAM,kBAAkB,YAC/B,OAAO,MAAM,cAAc,UAC3B;AACA,cAAM,IAAI;AAAA,UACR,2BAA2B,QAAQ,mBAAmB;AAAA,QACxD;AAAA,MACF;AACA,YAAM,aAAa,gBAAgB,IAAI,GAAG,UAAU,KAAS,MAAM,aAAa,EAAE;AAClF,UAAI,CAAC,cAAc,sBAAsB,IAAI,MAAM,aAAa,GAAG;AACjE,cAAM,IAAI;AAAA,UACR,2BAA2B,QAAQ,mBAAmB;AAAA,QACxD;AAAA,MACF;AACA,UAAI;AACJ,UAAI;AACF,oBAAY,IAAI,IAAI,MAAM,SAAS;AAAA,MACrC,QAAQ;AACN,cAAM,IAAI;AAAA,UACR,2BAA2B,QAAQ,mBAAmB;AAAA,QACxD;AAAA,MACF;AACA,UACE,UAAU,aAAa,YACvB,UAAU,YACV,UAAU,YACV,UAAU,UACV,UAAU,QACV,UAAU,SAAS,MAAM,aACzB,kBAAkB,IAAI,UAAU,IAAI,GACpC;AACA,cAAM,IAAI;AAAA,UACR,2BAA2B,QAAQ,mBAAmB;AAAA,QACxD;AAAA,MACF;AACA,4BAAsB,IAAI,MAAM,aAAa;AAC7C,wBAAkB,IAAI,UAAU,IAAI;AACpC,aAAO,KAAK;AAAA,QACV,UAAU,QAAQ;AAAA,QAClB,qBAAqB,QAAQ;AAAA,QAC7B,aAAa,yBAAyB,QAAQ,mBAAmB;AAAA,QACjE,eAAe,MAAM;AAAA,QACrB,WAAW,MAAM;AAAA,QACjB,UAAU;AAAA,QACV,MAAM,UAAU,KAAK,YAAY;AAAA,QACjC,MAAM,UAAU,SAAS,QAAQ,cAAc,EAAE;AAAA,MACnD,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,uBAAuB,UAAyC;AACvE,MAAI,aAAa,SAAU,QAAO;AAClC,MAAI,aAAa,SAAU,QAAO;AAClC,SAAO;AACT;AAEA,SAAS,oCACP,WACA,UACU;AACV,QAAM,mBAAmB,iCAAiC,QAAQ;AAClE,SAAO,6BAA6B,SAAS,EAC1C;AAAA,IACC,CAAC,eACC,CAAC,iBAAiB;AAAA,MAChB,wBAAwB,WAAW,UAAU,WAAW,mBAAmB;AAAA,IAC7E;AAAA,EACJ,EACC,QAAQ,CAAC,eAAe;AACvB,UAAM,QAAQ,oBAAI,IAAI;AAAA,MACpB,WAAW;AAAA,MACX,WAAW,KAAK,QAAQ,UAAU,EAAE;AAAA,MACpC,GAAG,WAAW,KAAK,QAAQ,UAAU,EAAE,CAAC;AAAA,IAC1C,CAAC;AACD,WAAO,CAAC,GAAG,KAAK,EAAE;AAAA,MAChB,CAAC,SACC,KAAK,WAAW,GAAG,WAAW,QAAQ,IAAI,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,cAAc,WAAW,uBAAuB,WAAW,QAAQ,CAAC,CAAC,iCAAiC,WAAW,WAAW;AAAA,IACpM;AAAA,EACF,CAAC;AACL;AAEA,SAAS,mCACP,QACU;AACV,SAAO,OAAO,QAAQ,CAAC,UAAU;AAC/B,UAAM,QAAQ,oBAAI,IAAI;AAAA,MACpB,MAAM;AAAA,MACN,MAAM,KAAK,QAAQ,UAAU,EAAE;AAAA,MAC/B,GAAG,MAAM,KAAK,QAAQ,UAAU,EAAE,CAAC;AAAA,IACrC,CAAC;AACD,WAAO,CAAC,GAAG,KAAK,EAAE;AAAA,MAChB,CAAC,SACC,KAAK,WAAW,GAAG,MAAM,QAAQ,IAAI,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC,oDAAoD,MAAM,WAAW;AAAA,IACnI;AAAA,EACF,CAAC;AACH;AAEA,SAAS,gCACP,WACA,cACU;AACV,QAAM,QAAQ,oBAAI,IAAwE;AAC1F,aAAW,cAAc,6BAA6B,SAAS,GAAG;AAChE,UAAM,QAAQ,MAAM,IAAI,WAAW,IAAI,KAAK;AAAA,MAC1C,UAAU,WAAW;AAAA,MACrB,UAAU,oBAAI,IAAY;AAAA,IAC5B;AACA,UAAM,SAAS,IAAI,GAAG,WAAW,QAAQ,KAAS,WAAW,mBAAmB,EAAE;AAClF,UAAM,IAAI,WAAW,MAAM,KAAK;AAAA,EAClC;AACA,QAAM,cAAc,CAAC,GAAG,IAAI,IAAI,aAAa,IAAI,CAAC,UAAU,MAAM,IAAI,CAAC,CAAC,EACrE,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC,EACjC,IAAI,CAAC,aAAa,OAAO,WAAW,QAAQ,CAAC,6BAA6B;AAC7E,SAAO;AAAA,IACL,GAAG;AAAA,IACH,GAAG,CAAC,GAAG,MAAM,QAAQ,CAAC,EACnB,OAAO,CAAC,CAAC,EAAE,KAAK,MAAM,MAAM,SAAS,SAAS,CAAC,EAC/C,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,EACrC;AAAA,MACC,CAAC,CAAC,UAAU,KAAK,MACf,OAAO,WAAW,QAAQ,CAAC,oBAAoB,MAAM,QAAQ;AAAA,IACjE;AAAA,EACJ;AACF;AAEA,SAAS,qCAAqC,WAAuC,CAAC,GAAa;AACjG,QAAM,gBAAgB,SAAS,QAAQ,CAAC,YAAY;AAClD,UAAM,OAAO,yBAAyB,QAAQ,mBAAmB;AACjE,UAAM,UAAU,kBAAkB,OAAO;AACzC,UAAM,QAAQ,KAAK,IAAI,GAAG,QAAQ,wBAAwB,CAAC;AAC3D,UAAM,WAAW,QAAQ;AACzB,UAAM,QAAQ,CAAC,2BAA2B,WAAW,IAAI,CAAC,QAAQ,OAAO,MAAM;AAC/E,QAAI,UAAU,KAAK,QAAQ,WAAW,SAAS,eAAe;AAC5D,YAAM,KAAK,4BAA4B,WAAW,QAAQ,CAAC,QAAQ,OAAO,MAAM;AAAA,IAClF,OAAO;AACL,YAAM,KAAK,6BAA6B,WAAW,QAAQ,CAAC,EAAE;AAAA,IACh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gCAAgC,QAAyD;AAChG,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,OAAO;AAAA,MACR,CAAC,UACC,4DAA4D,WAAW,OAAO,MAAM,SAAS,YAAY,CAAC,IAAI,WAAW,MAAM,aAAa,CAAC;AAAA,IACjJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,gCACP,YAA4D,CAAC,GAC7D,WAAuC,CAAC,GAC9B;AACV,QAAM,eAAe,qCAAqC,WAAW,QAAQ;AAC7E,QAAM,oBAAoB,gCAAgC,WAAW,YAAY;AACjF,QAAM,eAAe;AAAA,IACnB,GAAG,oCAAoC,WAAW,QAAQ;AAAA,IAC1D,GAAG,mCAAmC,YAAY;AAAA,EACpD;AACA,QAAM,cAAc,6BAA6B,SAAS;AAC1D,QAAM,mBAAmB,iCAAiC,QAAQ;AAClE,QAAM,qBACJ,SAAS,SAAS,IACd,YAAY;AAAA,IACV,CAAC,eACC,CAAC,iBAAiB;AAAA,MAChB,wBAAwB,WAAW,UAAU,WAAW,mBAAmB;AAAA,IAC7E;AAAA,EACJ,IACA,CAAC;AACP,QAAM,mBAAmB,oBAAI,IAAwC;AACrE,aAAW,cAAc,6BAA6B,SAAS,GAAG;AAChE,UAAM,MAAM,iBAAiB,IAAI,WAAW,QAAQ,KAAK,oBAAI,IAAY;AACzE,QAAI,IAAI,WAAW,mBAAmB;AACtC,qBAAiB,IAAI,WAAW,UAAU,GAAG;AAAA,EAC/C;AACA,QAAM,gBAAgB,CAAC,GAAG,iBAAiB,OAAO,CAAC,EAAE,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC;AAC/E,QAAM,uBAAuB;AAAA,IAC3B,GAAG,IAAI,IAAI,mBAAmB,IAAI,CAAC,SAAS,GAAG,KAAK,QAAQ,IAAI,KAAK,WAAW,EAAE,CAAC;AAAA,EACrF,EAAE,IAAI,CAAC,QAAQ,OAAO,WAAW,GAAG,CAAC,eAAe;AACpD,QAAM,sBAAsB,mBAAmB,QAAQ,CAAC,SAAS;AAC/D,UAAM,OAAO,KAAK,IAAI,QAAQ,UAAU,EAAE;AAC1C,WAAO,CAAC,GAAG,oBAAI,IAAI,CAAC,KAAK,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE;AAAA,MACnD,CAAC,QACC,OAAO,WAAW,GAAG,KAAK,QAAQ,IAAI,GAAG,EAAE,CAAC,oBAAoB,WAAW,KAAK,WAAW,CAAC;AAAA,IAChG;AAAA,EACF,CAAC;AACD,QAAM,oBAAoB,CAAC,GAAG,iBAAiB,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,UAAU,GAAG,MAAM;AACrF,QAAI,IAAI,SAAS,EAAG,QAAO,CAAC;AAC5B,UAAM,aAAa,mBAAmB,KAAK,CAAC,SAAS,KAAK,aAAa,QAAQ;AAC/E,WAAO,aACH;AAAA,MACE,OAAO,WAAW,QAAQ,CAAC,oBAAoB,WAAW,WAAW,WAAW,CAAC;AAAA,IACnF,IACA,CAAC;AAAA,EACP,CAAC;AACD,QAAM,wBACJ,SAAS,SAAS,IACd,CAAC,GAAG,iBAAiB,QAAQ,CAAC,EAC3B,OAAO,CAAC,CAAC,EAAE,GAAG,MAAM,IAAI,OAAO,CAAC,EAChC,IAAI,CAAC,CAAC,QAAQ,MAAM,QAAQ,IAC/B,CAAC;AACP,QAAM,sBAAsB,aAAa,QAAQ,CAAC,UAAU;AAC1D,UAAM,OAAO,MAAM,cAAc,QAAQ,UAAU,EAAE;AACrD,WAAO,CAAC,GAAG,oBAAI,IAAI,CAAC,MAAM,eAAe,MAAM,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE;AAAA,MAC9D,CAAC,QAAQ,OAAO,WAAW,GAAG,MAAM,QAAQ,IAAI,GAAG,EAAE,CAAC;AAAA,IACxD;AAAA,EACF,CAAC;AACD,QAAM,2BAA2B,SAC9B,OAAO,CAAC,YAAY,QAAQ,WAAW,SAAS,aAAa,EAC7D;AAAA,IACC,CAAC,YACC,OAAO,WAAW,GAAG,QAAQ,QAAQ,IAAI,yBAAyB,QAAQ,mBAAmB,CAAC,EAAE,CAAC;AAAA,EACrG;AACF,QAAM,uBAAuB,oBAAI,IAG/B;AACF,aAAW,WAAW,UAAU;AAC9B,UAAM,SAAS,qBAAqB,IAAI,QAAQ,QAAQ,KAAK,EAAE,QAAQ,GAAG,UAAU,EAAE;AACtF,QAAI,QAAQ,WAAW,SAAS,cAAe,QAAO,YAAY;AAAA,QAC7D,QAAO,UAAU;AACtB,yBAAqB,IAAI,QAAQ,UAAU,MAAM;AAAA,EACnD;AACA,QAAM,sBAAsB,CAAC,GAAG,qBAAqB,QAAQ,CAAC,EAC3D,OAAO,CAAC,CAAC,EAAE,MAAM,MAAM,OAAO,WAAW,KAAK,OAAO,WAAW,CAAC,EACjE,IAAI,CAAC,CAAC,QAAQ,MAAM,QAAQ;AAC/B,SAAO;AAAA,IACL,GAAG,qCAAqC,QAAQ;AAAA,IAChD,GAAG,0CAA0C,WAAW,QAAQ;AAAA;AAAA;AAAA;AAAA,IAIhE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,kBAAkB,SAAS,IAAI,oBAAoB,CAAC,cAAc;AAAA,IACtE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,2BAA2B;AAAA,IAC3C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA;AAAA;AAAA,IAIA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,gCAAgC,YAAY;AAAA,IAC/C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA,2BAA2B,WAAW,sBAAsB,KAAK,GAAG,CAAC,CAAC;AAAA,IACtE,yBAAyB,WAAW,oBAAoB,KAAK,GAAG,CAAC,CAAC;AAAA,IAClE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAUO,SAAS,+BAA+B,OAA8B;AAC3E,QAAM,aAAa,yBAAyB,KAAK;AACjD,MAAI,CAAC,YAAY;AACf,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,qCAAqC;AAAA,EAC1C,EAAE,KAAK,IAAI;AACb;AAEO,SAAS,wCACd,UACQ;AACR,QAAM,aAAa,qCAAqC,QAAQ;AAChE,MAAI,CAAC,WAAY,QAAO;AACxB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,qCAAqC,QAAQ;AAAA,EAClD,EAAE,KAAK,IAAI;AACb;AAEA,eAAsB,6BACpB,SACA,OACA,UAA6E,CAAC,GAC/D;AACf,QAAM,UAAU,+BAA+B,KAAK;AACpD,MAAI,CAAC,SAAS;AACZ;AAAA,EACF;AACA,QAAM,OAAO;AAAA,IACX,KAAK;AAAA,IACL,SAAS;AAAA,IACT,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,IAChD,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AACA;AAAA,IACE,MAAM,2BAA2B,SAAS,MAAM,QAAQ,aAAa;AAAA,IACrE;AAAA,EACF;AACF;AAEA,eAAsB,sCACpB,SACA,UACA,UAA6E,CAAC,GAC/D;AACf,QAAM,UAAU,wCAAwC,QAAQ;AAChE,MAAI,CAAC,QAAS;AACd,QAAM,OAAO;AAAA,IACX,KAAK;AAAA,IACL,SAAS;AAAA,IACT,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,IAChD,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AACA;AAAA,IACE,MAAM,2BAA2B,SAAS,MAAM,QAAQ,aAAa;AAAA,IACrE;AAAA,EACF;AACF;AAEO,SAAS,uBACd,WACA,WAAuC,CAAC,GAChC;AACR,iCAA+B,SAAS;AACxC,QAAM,WAAW;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,gCAAgC,WAAW,QAAQ;AAAA,IACt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aAAW,YAAY,WAAW;AAChC,UAAM,YAAY,kBAAkB,QAAQ;AAC5C,aAAS;AAAA,MACP;AAAA,QACE;AAAA,QACA,WAAW,UAAU,KAAK,cAAc,SAAS,CAAC;AAAA,QAClD,WAAW,SAAS,GAAG;AAAA,QACvB,WAAW,SAAS,GAAG;AAAA,QACvB,WAAW,SAAS,UAAU,2BAA2B,SAAS,OAAO,IAAI,EAAE;AAAA,MACjF,EAAE,KAAK,GAAG;AAAA,IACZ;AAAA,EACF;AACA,SAAO,SAAS,KAAK,IAAI;AAC3B;AAEO,SAAS,0BACd,UAA4D,CAAC,GACrD;AACR,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,YACJ,gBAAgB,mBAAmB,QAAQ,SAAS,CAAC,KACrD;AAAA,IACJ,QAAQ,kBACJ,uBAAuB,mBAAmB,QAAQ,eAAe,CAAC,KAClE;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEA,eAAsB,0BACpB,SACA,SACe;AACf,MAAI,CAAC,QAAQ,oBAAoB;AAC/B;AAAA,EACF;AACA,QAAM,UAAU;AAAA,uCAAgD,WAAW,QAAQ,kBAAkB,CAAC;AAAA,EAAK;AAAA,IACzG;AAAA,MACE,GAAI,QAAQ,qBAAqB,EAAE,WAAW,QAAQ,mBAAmB,IAAI,CAAC;AAAA,MAC9E,GAAI,QAAQ,sBAAsB,QAAQ,YAAY,gCAClD,EAAE,iBAAiB,QAAQ,YAAY,8BAA8B,IACrE,CAAC;AAAA,IACP;AAAA,EACF,CAAC;AACD,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,SAAS;AAAA,MACT,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,MAChD,aAAa;AAAA,MACb,iBAAiB;AAAA,IACnB;AAAA,IACA,QAAQ;AAAA,EACV;AACA,gCAA8B,QAAQ,2BAA2B;AACnE;AAEA,eAAsB,0BACpB,SACA,OACA,UAKI,CAAC,GACU;AACf,QAAM,UAAU;AAAA,uCAAgD,WAAW,KAAK,CAAC;AAAA,EAAK;AAAA,IACpF;AAAA,MACE,GAAI,QAAQ,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;AAAA,MAC5D,GAAI,QAAQ,kBAAkB,EAAE,iBAAiB,QAAQ,gBAAgB,IAAI,CAAC;AAAA,IAChF;AAAA,EACF,CAAC;AACD,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,SAAS;AAAA,MACT,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,MAChD,aAAa;AAAA,MACb,iBAAiB;AAAA,IACnB;AAAA,IACA,QAAQ;AAAA,EACV;AACA,gCAA8B,QAAQ,yBAAyB;AACjE;AAIA,IAAM,8BAA8B;AAKpC,IAAM,6BAA6B;AAgB5B,SAAS,sBACd,QACA,WACA,YAAY,KACZ,aAAa,iBACL;AACR,QAAM,cAAc,KAAK,IAAI,GAAG,KAAK,KAAK,YAAY,GAAI,CAAC;AAC3D,QAAM,eAAe,cAAc;AACnC,QAAM,SAAS,GAAG,WAAW,QAAQ,QAAQ,EAAE,CAAC,cAAc,SAAS;AACvE,SAAO;AAAA,IACL;AAAA,IACA,YAAY,WAAW,UAAU,CAAC;AAAA,IAClC,mBAAmB,WAAW,MAAM,CAAC;AAAA,IACrC;AAAA,IACA,yBAAyB,WAAW;AAAA,IACpC,2BAA2B,YAAY;AAAA,IACvC,qDAAqD,WAAW,0BAA0B,CAAC;AAAA,IAC3F;AAAA,IACA;AAAA,IACA;AAAA,IACA,yDAAyD,WAAW,0BAA0B,CAAC;AAAA,IAC/F;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,yDAAyD,WAAW,0BAA0B,CAAC;AAAA,IAC/F;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,uDAAuD,WAAW,0BAA0B,CAAC;AAAA,IAC7F;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAaA,eAAsB,gBACpB,SACA,UAAuC,EAAE,aAAa,CAAC,EAAE,GAC1C;AACf,QAAM,WAAW,QAAQ;AACzB,MAAI,CAAC,UAAU;AACb;AAAA,EACF;AACA,QAAM,UAAU;AAAA,IACd,OAAO,SAAS;AAAA,IAChB,WAAW,SAAS;AAAA,IACpB,SAAS,SAAS;AAAA,EACpB;AACA,QAAM,QAAQ,iBAAiB,EAAE,MAAM,qBAAqB,QAAQ,CAAC;AACrE,QAAM,UAAU,sBAAsB,SAAS,QAAQ,SAAS,WAAW,SAAS,SAAS;AAC7F,QAAM,WAAW;AAAA,IACf,KAAK;AAAA,IACL,SAAS;AAAA,IACT,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA,IAIhD,aAAa,SAAS,YAAY;AAAA,IAClC,iBAAiB;AAAA,EACnB;AACA,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,2BAA2B,SAAS,UAAU,QAAQ,aAAa;AAAA,EACpF,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,UAAM,QAAQ,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN,SAAS;AAAA,QACP,GAAG;AAAA,QACH,OAAO,QAAQ,MAAM,CAAC,2BAA2B;AAAA,MACnD;AAAA,IACF,CAAC;AACD,UAAM,IAAI;AAAA,MACR,6BAA6B,SAAS,OAAO,cAAc,SAAS,SAAS,MAAM,OAAO;AAAA,MAC1F,EAAE,OAAO,MAAM;AAAA,IACjB;AAAA,EACF;AACA,QAAM,SAAS,qBAAqB,MAAM;AAE1C,MAAI,OAAO,SAAS,0BAA0B,GAAG;AAC/C,UAAM,QAAQ,iBAAiB,EAAE,MAAM,qBAAqB,QAAQ,CAAC;AACrE;AAAA,EACF;AAGA,QAAM,eAAe,2BAA2B,MAAM;AACtD,QAAM,WAAW,uBAAuB,MAAM;AAC9C,MAAI,gBAAgB,aAAa,QAAQ,aAAa,GAAG;AACvD,UAAM,OACJ,OAAO,SAAS,8BACZ,OAAO,MAAM,CAAC,2BAA2B,IACzC;AACN,UAAM,SAAS,eACX,gDAAgD,SAAS,SAAS,QAClE,aAAa,OACX,gCACA,oBAAoB,QAAQ;AAClC,UAAM,UAAU,IAAI;AAAA,MAClB,6BAA6B,SAAS,OAAO,cAAc,SAAS,SAAS,uBAAuB,MAAM,GAAG,OAAO;AAAA,EAAM,IAAI,KAAK,EAAE;AAAA,IACvI;AACA,UAAM,QAAQ,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN,SAAS;AAAA,QACP,GAAG;AAAA,QACH,OAAO,QAAQ,QAAQ,MAAM,CAAC,2BAA2B;AAAA,MAC3D;AAAA,IACF,CAAC;AACD,UAAM;AAAA,EACR;AACA,QAAM,QAAQ,iBAAiB;AAAA,IAC7B,MAAM;AAAA,IACN,SAAS,EAAE,GAAG,SAAS,SAAS,MAAM;AAAA,EACxC,CAAC;AACH;AAEA,eAAsB,uBACpB,SACA,WACA,UAAuC,EAAE,aAAa,CAAC,EAAE,GAC1C;AACf,QAAM,UAAU;AAAA,IACd,MAAM;AAAA,IACN,iBAAiB,UAAU;AAAA,EAC7B;AACA,QAAM,QAAQ,iBAAiB;AAAA,IAC7B,MAAM;AAAA,IACN;AAAA,EACF,CAAC;AACD,MAAI;AASF,UAAM,gBAAgB;AAAA,MACpB,GAAI,QAAQ,iBAAiB,CAAC;AAAA,MAC9B,GAAI,QAAQ,eAAe,EAAE,QAAQ,QAAQ,aAAa,IAAI,CAAC;AAAA,IACjE;AACA,UAAM,wBAAwB,QAAQ,yBAAyB,CAAC;AAChE,UAAM,aAAa;AAAA,MACjB,yBAAyB,aAAa;AAAA,MACtC,qCAAqC,qBAAqB;AAAA,IAC5D,EACG,OAAO,OAAO,EACd,KAAK,IAAI;AACZ,UAAM,eAAe,uBAAuB,WAAW,qBAAqB;AAC5E,UAAM,UAAU,aAAa;AAAA,EAAW,UAAU;AAAA,EAAK,YAAY,KAAK;AACxE,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,QACE,KAAK;AAAA,QACL,SAAS;AAAA,QACT,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,QAChD,aAAa;AAAA,QACb,iBAAiB;AAAA,MACnB;AAAA,MACA,QAAQ;AAAA,IACV;AACA,kCAA8B,QAAQ,uBAAuB;AAC7D,UAAM,QAAQ,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,QAAQ,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN,SAAS;AAAA,QACP,GAAG;AAAA,QACH,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D;AAAA,IACF,CAAC;AACD,UAAM;AAAA,EACR;AACF;AAEO,SAAS,uBAA+B;AAC7C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEO,SAAS,uBAAuB,QAAgC;AACrE,MAAI,OAAO,WAAW,UAAU;AAC9B,UAAM,QAAQ,OAAO,MAAM,kCAAkC;AAC7D,WAAO,QAAQ,OAAO,MAAM,CAAC,CAAC,IAAI;AAAA,EACpC;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,WAAO;AAAA,EACT;AACA,QAAM,YAAY;AAMlB,aAAW,SAAS,CAAC,UAAU,UAAU,UAAU,WAAW,UAAU,MAAM,UAAU,MAAM,GAAG;AAC/F,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,qBAAqB,QAAyB;AAC5D,MAAI,OAAO,WAAW,UAAU;AAC9B,UAAM,cAAc,OAAO,QAAQ,SAAS;AAC5C,WAAO,eAAe,IAAI,OAAO,MAAM,cAAc,UAAU,MAAM,EAAE,KAAK,IAAI,OAAO,KAAK;AAAA,EAC9F;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,WAAO;AAAA,EACT;AACA,QAAM,YAAY;AAKlB,SAAO,CAAC,UAAU,QAAQ,UAAU,QAAQ,UAAU,MAAM,EACzD,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,EAChF,KAAK,IAAI;AACd;AAEA,SAAS,8BAA8B,QAAiB,WAAyB;AAC/E,QAAM,SAAS,qBAAqB,MAAM;AAC1C,MAAI,2BAA2B,MAAM,GAAG;AACtC,UAAM,IAAI;AAAA,MACR,GAAG,SAAS,uDAAuD,SAAS;AAAA,EAAM,MAAM,KAAK,EAAE;AAAA,IACjG;AAAA,EACF;AACA,QAAM,WAAW,uBAAuB,MAAM;AAC9C,MAAI,aAAa,QAAQ,aAAa,GAAG;AACvC,UAAM,IAAI;AAAA,MACR,GAAG,SAAS,0BAA0B,QAAQ,GAAG,SAAS;AAAA,EAAM,MAAM,KAAK,EAAE;AAAA,IAC/E;AAAA,EACF;AACA,MAAI,aAAa,MAAM;AACrB,UAAM,IAAI,MAAM,UAAU,GAAG,SAAS,qCAAqC;AAAA,EAC7E;AACF;AAEO,SAAS,2BAA2B,QAA0B;AACnE,MAAI,OAAO,WAAW,UAAU;AAC9B,WAAO,uCAAuC,KAAK,MAAM;AAAA,EAC3D;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,WAAO;AAAA,EACT;AACA,QAAM,YAAY;AAClB,SAAO,OAAO,UAAU,cAAc,YAAY,OAAO,UAAU,eAAe;AACpF;AAEA,SAAS,yBAAyB,aAA8C;AAC9E,QAAM,WAAW,YAAY,mBAAmB,YAAY;AAC5D,QAAM,eAAe,YAAY,uBAAuB,YAAY;AACpE,QAAM,WAAW,YAAY,mBAAmB,YAAY;AAC5D,SAAO,QAAQ,YAAY,gBAAgB,QAAQ;AACrD;AAEA,eAAsB,qBACpB,SACA,UAAuC,EAAE,aAAa,CAAC,EAAE,GAC1C;AACf,QAAM,UAAU;AAAA,IACd,MAAM;AAAA,IACN,SAAS;AAAA,EACX;AACA,QAAM,QAAQ,iBAAiB;AAAA,IAC7B,MAAM;AAAA,IACN;AAAA,EACF,CAAC;AACD,MAAI;AACF,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,QACE,KAAK,qBAAqB;AAAA,QAC1B,SAAS;AAAA,QACT,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,QAChD,aAAa;AAAA,QACb,iBAAiB;AAAA,MACnB;AAAA,MACA,QAAQ;AAAA,IACV;AACA,kCAA8B,QAAQ,sBAAsB;AAC5D,UAAM,QAAQ,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,QAAQ,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN,SAAS;AAAA,QACP,GAAG;AAAA,QACH,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D;AAAA,IACF,CAAC;AACD,UAAM;AAAA,EACR;AACF;AAEA,SAAS,uBAAuB,UAA4B;AAC1D,QAAM,WAAW,SAAS,qBAAqB,QAAQ,QAAQ,EAAE;AACjE,MAAI,CAAC,YAAY,CAAC,SAAS,uBAAuB;AAChD,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AACA,SAAO,GAAG,QAAQ,uBAAuB,SAAS,qBAAqB;AACzE;AAEO,SAAS,wBACd,UACA,SACoC;AACpC,MAAI,CAAC,SAAS,sBAAuB,QAAO;AAC5C,QAAM,aAAa,QAAQ,QAAQ,QAAQ,EAAE,EAAE,YAAY;AAC3D,MAAI,WAAW,SAAS,YAAY,GAAG;AACrC,WAAO;AAAA,EACT;AACA,SAAO,EAAE,eAAe,SAAS,sBAAsB;AACzD;AASA,IAAI,yBAAwC;AAE5C,SAAS,mBAA2B;AAClC,QAAM,YAAY,QAAQ,cAAc,YAAY,GAAG,CAAC;AACxD,QAAM,WACJ;AAAA,IACE,KAAK,WAAW,oCAAoC;AAAA,IACpD,KAAK,WAAW,MAAM,OAAO,oCAAoC;AAAA,EACnE,EAAE,KAAK,CAAC,cAAc,WAAW,SAAS,CAAC,KAC3C,KAAK,WAAW,oCAAoC;AACtD,MAAI,aAAa,QAAQ,IAAI,GAAG,QAAQ,GAAG;AACzC,WAAO;AAAA,EACT;AACA,MAAI,CAAC,wBAAwB;AAC3B,6BAAyB;AAAA,MACvB;AAAA,MACA,KAAK,QAAQ,IAAI,GAAG,aAAa,oCAAoC;AAAA,IACvE;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,UAAkB,QAAwB;AACpE,QAAM,MAAM,GAAG,MAAM,QAAQ,QAAQ,GAAG;AACxC,SAAO,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC5C,YAAU,QAAQ,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;AAC3C,SAAO,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AACzC,SAAO,QAAQ,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC/C,MAAI;AACF,eAAW,KAAK,MAAM;AAAA,EACxB,SAAS,OAAO;AAEd,WAAO,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC5C,QAAI,CAAC,WAAW,MAAM,GAAG;AACvB,YAAM;AAAA,IACR;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,aAAa,MAAc,WAA4B;AAC9D,QAAM,eAAe,SAAS,MAAM,SAAS;AAC7C,SAAO,iBAAiB,MAAO,CAAC,aAAa,WAAW,IAAI,KAAK,CAAC,WAAW,YAAY;AAC3F;AAYO,SAAS,8BACd,YACA,qBAAkC,CAAC,GACV;AACzB,QAAM,aAAa,iBAAiB;AACpC,QAAM,UAAU,wBAAwB,EAAE,KAAK,WAAW,CAAC;AAC3D,MAAI,WAAW,WAAW,KAAK,mBAAmB,WAAW,GAAG;AAC9D,WAAO;AAAA,EACT;AACA,QAAM,WAAkC,CAAC;AACzC,aAAW,QAAQ,qBAAqB,UAAU,GAAG;AACnD,aAAS,IAAI,IAAI,SAAS,EAAE,KAAK,KAAK,YAAY,IAAI,EAAE,CAAC;AAAA,EAC3D;AACA,QAAM,eAAkC,CAAC;AACzC,QAAM,kBAAkB,oBAAI,IAAY;AACxC,aAAW,SAAS,oBAAoB;AACtC,4BAAwB,MAAM,IAAI;AAClC,UAAM,MAAM,MAAM,KAAK,YAAY;AACnC,QAAI,gBAAgB,IAAI,GAAG,GAAG;AAC5B,YAAM,IAAI,MAAM,iCAAiC,MAAM,IAAI,EAAE;AAAA,IAC/D;AACA,oBAAgB,IAAI,GAAG;AACvB,8BAA0B,UAAU,GAAG;AACvC,aAAS,MAAM,IAAI,IAAI,kBAAkB,KAAK;AAC9C,iBAAa,KAAK;AAAA,MAChB,MAAM,MAAM;AAAA,MACZ,aAAa,qBAAqB,KAAK;AAAA,MACvC,MAAM,MAAM;AAAA,IACd,CAAC;AAAA,EACH;AACA,QAAM,YAA+B,CAAC;AACtC,QAAM,eAAe,oBAAI,IAAY;AACrC,aAAW,SAAS,YAAY;AAC9B,4BAAwB,MAAM,IAAI;AAClC,QAAI,aAAa,IAAI,MAAM,KAAK,YAAY,CAAC,GAAG;AAC9C,YAAM,IAAI,MAAM,8BAA8B,MAAM,IAAI,EAAE;AAAA,IAC5D;AACA,iBAAa,IAAI,MAAM,KAAK,YAAY,CAAC;AACzC,8BAA0B,UAAU,MAAM,KAAK,YAAY,CAAC;AAC5D,aAAS,MAAM,IAAI,IAAI,kBAAkB,KAAK;AAC9C,cAAU,KAAK;AAAA,MACb,MAAM,MAAM;AAAA,MACZ,aAAa,qBAAqB,KAAK;AAAA,MACvC,MAAM,MAAM;AAAA,IACd,CAAC;AAAA,EACH;AACA,SAAO;AAAA,IACL,QAAQ,IAAI,EAAE,SAAS,CAAC;AAAA,IACxB,UAAU,CAAC,UAAU,eAAe;AAAA,MAClC,IAAI,QAAQ,WAAW,UAAU,UAAU,KAAK,CAAC,GAAG;AAAA,QAClD,CAAC,UACC,CAAC,aAAa,KAAK,MAAM,QAAQ,MAAM,MAAM,YAAY,CAAC,KAC1D,CAAC,gBAAgB,KAAK,MAAM,QAAQ,MAAM,MAAM,YAAY,CAAC;AAAA,MACjE;AAAA,MACA,GAAG,aAAa;AAAA,QACd,CAAC,UAAU,CAAC,aAAa,KAAK,MAAM,QAAQ,MAAM,MAAM,YAAY,CAAC;AAAA,MACvE;AAAA,MACA,GAAG;AAAA,IACL;AAAA,EACF;AACF;AAEA,SAAS,yBACP,mBACA,eACA,YACA,eACoC;AACpC,QAAM,oBAAoB,qBAAqB,iBAAiB,CAAC,EAAE,IAAI,CAAC,UAAU;AAAA,IAChF,IAAI,WAAW,IAAI;AAAA,IACnB;AAAA,IACA,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,eAAe;AAAA,IACf,QAAQ;AAAA,EACV,EAAE;AACF,QAAM,kBAAkB,IAAI,IAAI,cAAc,IAAI,CAAC,UAAU,MAAM,KAAK,YAAY,CAAC,CAAC;AACtF,QAAM,eAAe,IAAI,IAAI,WAAW,IAAI,CAAC,UAAU,MAAM,KAAK,YAAY,CAAC,CAAC;AAChF,QAAM,yBAAyB;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,kBAAkB,IAAI,IAAI,uBAAuB,IAAI,CAAC,UAAU,MAAM,KAAK,YAAY,CAAC,CAAC;AAC/F,QAAM,WAAW,kBAAkB;AAAA,IAAO,CAAC,cACzC,gBAAgB,IAAI,UAAU,KAAK,YAAY,CAAC;AAAA,EAClD;AACA,SAAO;AAAA,IACL,GAAG,kBAAkB;AAAA,MACnB,CAAC,cACC,CAAC,gBAAgB,IAAI,UAAU,KAAK,YAAY,CAAC,KACjD,CAAC,aAAa,IAAI,UAAU,KAAK,YAAY,CAAC,KAC9C,CAAC,gBAAgB,IAAI,UAAU,KAAK,YAAY,CAAC;AAAA,IACrD;AAAA,IACA,GAAG,SAAS;AAAA,MACV,CAAC,cACC,CAAC,aAAa,IAAI,UAAU,KAAK,YAAY,CAAC,KAC9C,CAAC,gBAAgB,IAAI,UAAU,KAAK,YAAY,CAAC;AAAA,IACrD;AAAA,IACA,GAAG,WAAW,IAAI,CAAC,WAAW;AAAA,MAC5B,IAAI,QAAQ,MAAM,IAAI;AAAA,MACtB,MAAM,MAAM;AAAA,MACZ,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,eAAe;AAAA,MACf,QAAQ;AAAA,IACV,EAAE;AAAA,IACF,GAAG,uBAAuB,IAAI,CAAC,WAAW;AAAA,MACxC,IAAI,WAAW,MAAM,IAAI;AAAA,MACzB,MAAM,MAAM;AAAA,MACZ,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,eAAe;AAAA,MACf,QAAQ;AAAA,IACV,EAAE;AAAA,EACJ;AACF;AAEA,SAAS,gCACP,YACA,eACA,eACa;AACb,QAAM,aAAa,oBAAI,IAAuB;AAC9C,aAAW,SAAS,CAAC,GAAG,eAAe,GAAG,UAAU,GAAG;AACrD,eAAW,IAAI,MAAM,KAAK,YAAY,GAAG,KAAK;AAAA,EAChD;AACA,QAAM,eAAe,IAAI;AAAA,IACvB,qBAAqB,iBAAiB,CAAC,EAAE,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC;AAAA,EAC3E;AACA,QAAM,WAAW,oBAAI,IAAuB;AAC5C,aAAW,SAAS,eAAe;AACjC,4BAAwB,MAAM,IAAI;AAClC,UAAM,MAAM,MAAM,KAAK,YAAY;AACnC,QAAI,aAAa,IAAI,GAAG,GAAG;AACzB,YAAM,IAAI,MAAM,kBAAkB,MAAM,IAAI,kCAAkC;AAAA,IAChF;AACA,UAAM,WAAW,SAAS,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG;AACxD,QAAI,UAAU;AACZ,UAAI,iBAAiB,QAAQ,MAAM,iBAAiB,KAAK,GAAG;AAC1D,cAAM,IAAI,MAAM,sCAAsC,MAAM,IAAI,GAAG;AAAA,MACrE;AACA;AAAA,IACF;AACA,aAAS,IAAI,KAAK,KAAK;AAAA,EACzB;AACA,SAAO,CAAC,GAAG,SAAS,OAAO,CAAC;AAC9B;AAEA,SAAS,iBAAiB,OAA0B;AAClD,SAAO,KAAK;AAAA,IACV,CAAC,GAAG,MAAM,KAAK,EACZ,KAAK,CAAC,MAAM,UAAU,KAAK,KAAK,cAAc,MAAM,IAAI,CAAC,EACzD,IAAI,CAAC,EAAE,MAAM,QAAQ,OAAO,EAAE,MAAM,QAAQ,EAAE;AAAA,EACnD;AACF;AAEA,SAAS,0BAA0B,UAAiC,SAAuB;AACzF,aAAW,QAAQ,OAAO,KAAK,QAAQ,GAAG;AACxC,QAAI,KAAK,YAAY,MAAM,SAAS;AAClC,aAAO,SAAS,IAAI;AAAA,IACtB;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,MAAwB;AACpD,SAAO,YAAY,MAAM,EAAE,eAAe,KAAK,CAAC,EAC7C,OAAO,CAAC,UAAU,MAAM,YAAY,KAAK,WAAW,KAAK,MAAM,MAAM,MAAM,UAAU,CAAC,CAAC,EACvF,IAAI,CAAC,UAAU,MAAM,IAAI,EACzB,KAAK;AACV;AAOA,SAAS,kBAAkB,OAAuB;AAChD,QAAM,OAAyB,EAAE,MAAM,oBAAI,IAAI,GAAG,OAAO,oBAAI,IAAI,EAAE;AACnE,aAAW,aAAa,MAAM,OAAO;AACnC,UAAM,WAAW,sBAAsB,MAAM,MAAM,UAAU,IAAI;AACjE,QAAI,OAAO;AACX,eAAW,WAAW,SAAS,MAAM,GAAG,EAAE,GAAG;AAC3C,UAAI,KAAK,MAAM,IAAI,OAAO,GAAG;AAC3B,cAAM,IAAI,MAAM,cAAc,MAAM,IAAI,SAAS,OAAO,iCAAiC;AAAA,MAC3F;AACA,UAAI,OAAO,KAAK,KAAK,IAAI,OAAO;AAChC,UAAI,CAAC,MAAM;AACT,eAAO,EAAE,MAAM,oBAAI,IAAI,GAAG,OAAO,oBAAI,IAAI,EAAE;AAC3C,aAAK,KAAK,IAAI,SAAS,IAAI;AAAA,MAC7B;AACA,aAAO;AAAA,IACT;AACA,UAAM,WAAW,SAAS,SAAS,SAAS,CAAC;AAC7C,QAAI,KAAK,KAAK,IAAI,QAAQ,KAAK,KAAK,MAAM,IAAI,QAAQ,GAAG;AACvD,YAAM,IAAI,MAAM,qCAAqC,MAAM,IAAI,KAAK,UAAU,IAAI,EAAE;AAAA,IACtF;AACA,SAAK,MAAM,IAAI,UAAU,UAAU,OAAO;AAAA,EAC5C;AACA,MAAI,CAAC,KAAK,MAAM,IAAI,UAAU,GAAG;AAC/B,UAAM,IAAI,MAAM,cAAc,MAAM,IAAI,uCAAuC;AAAA,EACjF;AACA,SAAO,qBAAqB,IAAI;AAClC;AAEA,SAAS,qBAAqB,MAA6B;AACzD,QAAM,WAAkC,CAAC;AACzC,aAAW,CAAC,MAAM,KAAK,KAAK,KAAK,MAAM;AACrC,aAAS,IAAI,IAAI,qBAAqB,KAAK;AAAA,EAC7C;AACA,aAAW,CAAC,MAAM,OAAO,KAAK,KAAK,OAAO;AACxC,aAAS,IAAI,IAAI,KAAK,EAAE,QAAQ,CAAC;AAAA,EACnC;AACA,SAAO,IAAI,EAAE,SAAS,CAAC;AACzB;AAEA,SAAS,wBAAwB,MAAoB;AACnD,MAAI,sBAAsB,MAAM,IAAI,EAAE,WAAW,GAAG;AAClD,UAAM,IAAI,MAAM,4BAA4B,IAAI,EAAE;AAAA,EACpD;AACF;AAEA,SAAS,sBAAsB,WAAmB,MAAwB;AACxE,QAAM,WAAW,KAAK,MAAM,GAAG;AAC/B,MACE,KAAK,WAAW,GAAG,KACnB,KAAK,SAAS,IAAI,KAClB,SAAS,KAAK,CAAC,YAAY,QAAQ,WAAW,KAAK,YAAY,OAAO,YAAY,IAAI,GACtF;AACA,UAAM,IAAI,MAAM,oCAAoC,SAAS,KAAK,IAAI,EAAE;AAAA,EAC1E;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,OAA0B;AACtD,QAAM,WAAW,MAAM,aAAa,KAAK;AACzC,MAAI,UAAU;AACZ,WAAO;AAAA,EACT;AACA,QAAM,WAAW,MAAM,MAAM,KAAK,CAAC,cAAc,UAAU,SAAS,UAAU,GAAG,WAAW;AAC5F,SAAO,4BAA4B,QAAQ,KAAK;AAClD;AAEA,SAAS,4BAA4B,UAAiC;AACpE,QAAM,QAAQ,SAAS,MAAM,OAAO;AACpC,MAAI,MAAM,CAAC,GAAG,KAAK,MAAM,OAAO;AAC9B,WAAO;AAAA,EACT;AACA,QAAM,MAAM,MAAM,UAAU,CAAC,MAAM,UAAU,QAAQ,KAAK,KAAK,KAAK,MAAM,KAAK;AAC/E,MAAI,QAAQ,IAAI;AACd,WAAO;AAAA,EACT;AACA,QAAM,YAAsB,CAAC;AAC7B,MAAI,gBAAgB;AACpB,aAAW,QAAQ,MAAM,MAAM,GAAG,GAAG,GAAG;AACtC,UAAM,QAAQ,KAAK,MAAM,uBAAuB;AAChD,QAAI,OAAO;AACT,YAAM,SAAS,MAAM,CAAC,EAAG,KAAK;AAC9B,UAAI,UAAU,WAAW,QAAQ,WAAW,OAAO,WAAW,OAAO,WAAW,MAAM;AACpF,eAAO,wBAAwB,MAAM;AAAA,MACvC;AACA,sBAAgB;AAChB;AAAA,IACF;AACA,QAAI,eAAe;AACjB,UAAI,SAAS,KAAK,IAAI,GAAG;AACvB,kBAAU,KAAK,KAAK,KAAK,CAAC;AAC1B;AAAA,MACF;AACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,aAAa,UAAU,KAAK,GAAG,EAAE,KAAK;AAC5C,SAAO,aAAa,aAAa;AACnC;AAEA,SAAS,wBAAwB,OAAuB;AACtD,MACE,MAAM,UAAU,KAChB,MAAM,CAAC,MAAM,MAAM,MAAM,SAAS,CAAC,MAClC,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,MAAM,MAClC;AACA,WAAO,MAAM,MAAM,GAAG,EAAE;AAAA,EAC1B;AACA,SAAO;AACT;AAEA,SAAS,gBAAmB,QAAoE;AAC9F,SAAO,OAAQ,OAA4B,OAAO,aAAa,MAAM;AACvE;AAEA,SAAS,WAAW,OAAwB;AAC1C,SAAO,KAAK,UAAU,SAAS,KAAK,CAAC;AACvC;AAEA,SAAS,SAAS,OAAyB;AACzC,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,IAAI,QAAQ;AAAA,EAC3B;AACA,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,WAAO,OAAO;AAAA,MACZ,OAAO,QAAQ,KAAK,EACjB,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,EACrC,IAAI,CAAC,CAAC,KAAK,MAAM,MAAM,CAAC,KAAK,SAAS,MAAM,CAAC,CAAC;AAAA,IACnD;AAAA,EACF;AACA,SAAO;AACT;AACA,SAAS,qBAAqB,MAAuB;AACnD,QAAM,YAAY;AAKlB,QAAM,OAAO,WAAW,YAAY,WAAW,QAAQ,WAAW,SAAS;AAC3E,SAAO,OAAO,SAAS,WAAW,OAAO;AAC3C;","names":["collectSandboxEnvironment","CAPABILITY_DESCRIPTORS","redactSensitiveText","OpenAI","OpenAI","isRecord","isRecord","tool","isRecord","skills","openaiTool","openaiIncludes","webSearchTool","entry","response","isRecord","OpenAI","getCompatibleToolChoice","tool","file","isMessageItem","isRecord","response","tool","getResponseFormat","getCompatibleToolChoice","OpenAI","isRecord","child","isRecord","OpenAI","iterator","OpenAI","OpenAI","logger","resolveClient","OpenAI","METADATA","metadata_default","HEADERS","metadata_default","logger","OpenAI","boundModelToolOutputItems","createHash","tool","tool","RESULT_TYPE_BY_CALL_TYPE","RESULT_TYPES","itemType","imageTokens","imageCount","imageFallbackCount","projected","textTokens","window","createHash","skills","createHash","OpenAI","usage","summary","redactSensitiveText","agent","tool","boundModelToolOutputItems","collectSandboxEnvironment","runAs","fileDownloads","resourceClient","CAPABILITY_DESCRIPTORS","config","createHash"]}