@rndmjoker/proton-mcp 0.4.13 → 0.5.1

package/dist/web/preview-server.js

@@ -0,0 +1,102 @@
+/**
+ * Shows a message waiting for confirmation, from the server that holds it.
+ *
+ * Until 2026-11-05 this was a page of the interface. Since then every running
+ * server shares one interface at a fixed address, served by whichever started
+ * first, but a waiting message lives only in the memory of the server that
+ * asked about it. Handing it to the server behind the interface would send
+ * decrypted mail from one process to another for the sake of a page. So each
+ * server shows its own, on a port the operating system picks.
+ *
+ * What protects the page: it listens on loopback only, refuses any Host header
+ * that is not this machine, and finds a message only by the digest of its
+ * recipients, subject and body, which nobody can produce without knowing all
+ * three already. It serves nothing else, has no form and no button, and keeps
+ * the interface's content security policy, which also governs the sandboxed
+ * frame the message is drawn in.
+ */
+import { createServer } from 'node:http';
+import { isAllowedHost, securityHeaders } from './security.js';
+import { pendingPage, noPendingPage } from './pending.js';
+import { rejectionPage } from './pages.js';
+const BIND_ADDRESS = '127.0.0.1';
+/** A digest as `digestOf` writes it: SHA-256 in hexadecimal. */
+const DIGEST = /^[0-9a-f]{64}$/;
+export class PreviewServer {
+    #server;
+    #port = 0;
+    #options;
+    constructor(options) {
+        this.#options = options;
+    }
+    get running() {
+        return this.#server?.listening === true;
+    }
+    /** The address of one waiting message, or nothing while not running. */
+    urlFor(digest) {
+        if (!this.running || !DIGEST.test(digest))
+            return undefined;
+        return `http://${BIND_ADDRESS}:${this.#port}/pending/${digest}`;
+    }
+    async start() {
+        if (this.running)
+            return;
+        const server = createServer((request, response) => {
+            try {
+                this.#handle(request, response);
+            }
+            catch {
+                this.#send(response, 500, 'Internal error.', 'text/plain; charset=utf-8');
+            }
+        });
+        server.headersTimeout = 10_000;
+        server.requestTimeout = 30_000;
+        await new Promise((resolve, reject) => {
+            server.once('error', reject);
+            // Port 0: the operating system picks a free one. Nobody types this
+            // address; it travels in the confirmation.
+            server.listen(0, BIND_ADDRESS, () => {
+                server.removeListener('error', reject);
+                resolve();
+            });
+        });
+        const address = server.address();
+        this.#port = typeof address === 'object' && address ? address.port : 0;
+        this.#server = server;
+    }
+    async stop() {
+        const server = this.#server;
+        this.#server = undefined;
+        if (!server)
+            return;
+        server.closeIdleConnections();
+        server.closeAllConnections();
+        await new Promise((resolve) => server.close(() => resolve()));
+    }
+    #send(response, status, body, type = 'text/html; charset=utf-8') {
+        response.writeHead(status, { ...securityHeaders(), 'Content-Type': type });
+        response.end(body);
+    }
+    #handle(request, response) {
+        if (request.method !== 'GET') {
+            this.#send(response, 405, rejectionPage());
+            return;
+        }
+        if (!isAllowedHost(request.headers.host)) {
+            this.#options.notify?.('preview refused a request for a foreign host');
+            this.#send(response, 404, rejectionPage());
+            return;
+        }
+        const path = new URL(request.url ?? '/', `http://${BIND_ADDRESS}`).pathname;
+        const digest = path.startsWith('/pending/') ? path.slice('/pending/'.length) : undefined;
+        if (!digest || !DIGEST.test(digest)) {
+            this.#send(response, 404, rejectionPage());
+            return;
+        }
+        // A digest nobody is holding gives the empty page rather than a refusal,
+        // because the ordinary reason to land here is having answered already.
+        const waiting = this.#options.getPending(digest);
+        this.#send(response, 200, waiting ? pendingPage({ ...waiting, disclaimer: 'plain' }) : noPendingPage('plain'));
+    }
+}
+//# sourceMappingURL=preview-server.js.map

package/dist/web/preview-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-server.js","sourceRoot":"","sources":["../../src/web/preview-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAA;AAChG,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC9D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAoB,MAAM,cAAc,CAAA;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAE1C,MAAM,YAAY,GAAG,WAAW,CAAA;AAEhC,gEAAgE;AAChE,MAAM,MAAM,GAAG,gBAAgB,CAAA;AAS/B,MAAM,OAAO,aAAa;IACxB,OAAO,CAAoB;IAC3B,KAAK,GAAG,CAAC,CAAA;IACA,QAAQ,CAAsB;IAEvC,YAAY,OAA6B;QACvC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;IACzB,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,OAAO,EAAE,SAAS,KAAK,IAAI,CAAA;IACzC,CAAC;IAED,wEAAwE;IACxE,MAAM,CAAC,MAAc;QACnB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAA;QAC3D,OAAO,UAAU,YAAY,IAAI,IAAI,CAAC,KAAK,YAAY,MAAM,EAAE,CAAA;IACjE,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAM;QACxB,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YAChD,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,iBAAiB,EAAE,2BAA2B,CAAC,CAAA;YAC3E,CAAC;QACH,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,cAAc,GAAG,MAAM,CAAA;QAC9B,MAAM,CAAC,cAAc,GAAG,MAAM,CAAA;QAC9B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC5B,mEAAmE;YACnE,2CAA2C;YAC3C,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE;gBAClC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;gBACtC,OAAO,EAAE,CAAA;YACX,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;QAChC,IAAI,CAAC,KAAK,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QACtE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;IACvB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAA;QAC3B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;QACxB,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,MAAM,CAAC,oBAAoB,EAAE,CAAA;QAC7B,MAAM,CAAC,mBAAmB,EAAE,CAAA;QAC5B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACrE,CAAC;IAED,KAAK,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAY,EAAE,IAAI,GAAG,0BAA0B;QAC7F,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,eAAe,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1E,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACpB,CAAC;IAED,OAAO,CAAC,OAAwB,EAAE,QAAwB;QACxD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,CAAA;YAC1C,OAAM;QACR,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,8CAA8C,CAAC,CAAA;YACtE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,CAAA;YAC1C,OAAM;QACR,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAA;QAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACxF,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,CAAA;YAC1C,OAAM;QACR,CAAC;QAED,yEAAyE;QACzE,uEAAuE;QACvE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QAChD,IAAI,CAAC,KAAK,CACR,QAAQ,EACR,GAAG,EACH,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CACpF,CAAA;IACH,CAAC;CACF"}

package/dist/web/sections.d.ts

@@ -14,7 +14,8 @@ import { type DisclaimerState } from './layout.js';
 import type { StoreKind } from '../credentials/store.js';
 /** What every section needs to draw itself. */
 interface Common {
-    token: string;
+    /** True while a PIN is set: then every form that changes something asks for it. */
+    pinRequired?: boolean;
     error?: string;
     notice?: string;
     /**
@@ -24,6 +25,17 @@ interface Common {
      */
     disclaimer: DisclaimerState;
 }
+/** One running server, as the overview lists it. Never a password. */
+export interface ServerSummary {
+    pid: number;
+    version: string;
+    startedAt: number;
+    signedIn: boolean;
+    address?: string;
+    storeTitle?: string;
+    /** True for the server that shows this page. */
+    servesInterface: boolean;
+}
 export interface OverviewData extends Common {
     connected: boolean;
     address?: string;
@@ -37,6 +49,20 @@ export interface OverviewData extends Common {
     bridgeHost: string;
     bridgeImapPort: number;
     bridgeSmtpPort: number;
+    /** Every server running on this machine, this one included. */
+    servers?: ServerSummary[];
+    /** Tools whose level differs from the default, with that level in words. */
+    departures?: Array<{
+        tool: string;
+        level: string;
+    }>;
+    /** The recipient added to every message sent, when one is. */
+    record?: {
+        address: string;
+        mode: 'cc' | 'bcc';
+    };
+    /** What a filter from an assistant may do beyond filing and flags. */
+    filterActions?: string[];
 }
 /**
  * The first page, and the only one that answers "is this working".
@@ -102,4 +128,63 @@ export interface MailboxData extends Common {
  * answer nobody asked for would hand it over unasked.
  */
 export declare function mailboxSection(data: MailboxData): string;
+/** One tool as the permissions page shows it. */
+export interface ToolLevelView {
+    tool: string;
+    group: string;
+    level: 'off' | 'ask' | 'act';
+    /** The levels this tool offers. Only the sending tools and proposing a filter can ask. */
+    options: Array<'off' | 'ask' | 'act'>;
+    /** Set in the environment or by read-only mode, and so not changeable here. */
+    fixed: boolean;
+    /** Where the level comes from, in words. */
+    source: string;
+    /** True when the level differs from the default. */
+    departs?: boolean;
+}
+/** The bounds on sending without asking, each with whether the environment fixed it. */
+export interface LimitsView {
+    allowed: string[];
+    maxPerHour?: number;
+    until?: string;
+    fixed: {
+        allowed: boolean;
+        maxPerHour: boolean;
+        until: boolean;
+    };
+}
+/** The recipient added to every message sent, as the page shows it. */
+export interface RecordView {
+    address?: string;
+    mode?: 'cc' | 'bcc';
+    /** Set in the environment, and so not changeable here. */
+    fixed: boolean;
+}
+/** What a filter from an assistant may do beyond filing and flags, as the page shows it. */
+export interface FilterActionsView {
+    allowed: string[];
+    /** Set in the environment, and so not changeable here. */
+    fixed: boolean;
+}
+export interface PermissionsData extends Common {
+    csrfPin: string;
+    csrfLevels?: string;
+    csrfLimits?: string;
+    csrfRecord?: string;
+    csrfFilterActions?: string;
+    tools?: ToolLevelView[];
+    limits?: LimitsView;
+    record?: RecordView;
+    filterActions?: FilterActionsView;
+}
+/**
+ * What the assistant may do, and who may change that.
+ *
+ * The PIN comes first on this page because everything else on it depends on
+ * it. Without one, the settings here are only as safe as every program on this
+ * machine, the assistant included: it can open this address with a browser
+ * tool as easily as the user can. The page says so plainly instead of leaving
+ * it to be discovered.
+ */
+export declare function permissionsSection(data: PermissionsData): string;
 export {};

package/dist/web/sections.js

@@ -10,7 +10,8 @@
  *
  * The counterpart is pages.ts, which holds what comes before signing in.
  */
-import { layout, escapeHtml, formatDuration, errorBanner, noticeBanner, } from './layout.js';
+import { layout, escapeHtml, formatDuration, errorBanner, noticeBanner, pinField, } from './layout.js';
+import { UNLOCKABLE, UNLOCKABLE_TEXT } from '../filters/sieve.js';
 /**
  * A wall-clock time in the locale and timezone of the machine running the
  * server, because the page is rendered there and carries no script to adjust
@@ -28,11 +29,42 @@ function frame(section, title, data, body) {
     return layout({
         title,
         section,
-        token: data.token,
         disclaimer: data.disclaimer,
         body: `${errorBanner(data.error)}${noticeBanner(data.notice)}${body}`,
     });
 }
+/**
+ * The running servers, one row each.
+ *
+ * Every client session starts its own server, and all of them share this page.
+ * A sign-in kept only in the memory of the server that shows the page ("this
+ * session only" or an encrypted file still being open) does not reach the
+ * others, and this table is where that becomes visible rather than puzzling.
+ */
+function serverTable(servers) {
+    if (!servers || servers.length === 0)
+        return '';
+    const rows = servers
+        .map((server) => {
+        const who = server.signedIn
+            ? `signed in as ${escapeHtml(server.address ?? 'unknown')}` +
+                (server.storeTitle ? `, kept in ${escapeHtml(server.storeTitle)}` : '')
+            : 'not signed in';
+        const mark = server.servesInterface ? ' <span class="state good">shows this page</span>' : '';
+        return (`<tr><td><code>${server.pid}</code>${mark}</td><td>${who}</td>` +
+            `<td>${escapeHtml(server.version)}</td><td>${escapeHtml(formatTime(server.startedAt))}</td></tr>`);
+    })
+        .join('\n');
+    return `<h2>Running servers (${servers.length})</h2>
+<div class="card"><table>
+<tr><th>Process</th><th>Sign-in</th><th>Version</th><th>Started</th></tr>
+${rows}
+</table>
+<p class="hint">Each assistant session starts its own server, and all of them share this page and
+its settings. A password kept in the system keyring or in a file reaches every one of them. One kept
+for this session only, or in an encrypted file opened here, stays with the server that shows this
+page.</p></div>`;
+}
 /**
  * The first page, and the only one that answers "is this working".
  *
@@ -52,6 +84,20 @@ export function overviewSection(data) {
         row('Bridge IMAP', `${data.bridgeHost}:${data.bridgeImapPort}`),
         row('Bridge SMTP', `${data.bridgeHost}:${data.bridgeSmtpPort}`),
         row('This interface', `127.0.0.1:${data.webPort}`),
+        row('Changes here', data.pinRequired
+            ? '<span class="state good">need the PIN</span>'
+            : '<span class="state bad">anything on this machine can make them, the assistant included</span>', true),
+        row('Assistant permissions', !data.departures || data.departures.length === 0
+            ? 'as by default: sending and changing filters ask first, deleting and switching filters is off, everything else acts'
+            : data.departures.map((d) => `${d.tool}: ${d.level}`).join(', ')),
+        row('Filters may also', data.filterActions && data.filterActions.length > 0
+            ? `<span class="state bad">${escapeHtml(UNLOCKABLE.filter((action) => data.filterActions.includes(action))
+                .map((action) => UNLOCKABLE_TEXT[action].title.toLowerCase())
+                .join(', '))}</span>`
+            : 'nothing beyond filing and flags', true),
+        row('Copy of everything sent', data.record
+            ? `<span class="state bad">${escapeHtml(data.record.address)} (${data.record.mode === 'cc' ? 'Cc' : 'Bcc'})</span>`
+            : 'none', true),
         row('Server running for', formatDuration(data.uptimeMs)),
     ];
     const counters = [];
@@ -66,7 +112,8 @@ export function overviewSection(data) {
 interface: it is for configuration and state, not a mail client.</p>
 
 <div class="card"><table>${rows.join('\n')}</table></div>
-${counters.length > 0 ? `<h2>Mailbox counts</h2>\n<div class="card"><table>${counters.join('\n')}</table></div>` : ''}`);
+${counters.length > 0 ? `<h2>Mailbox counts</h2>\n<div class="card"><table>${counters.join('\n')}</table></div>` : ''}
+${serverTable(data.servers)}`);
 }
 /** Ports, the pinned certificate, and the button that tries the Bridge. */
 export function bridgeSection(data) {
@@ -74,7 +121,7 @@ export function bridgeSection(data) {
         ? `<p class="hint">The ports come from the environment (<code>BRIDGE_IMAP_PORT</code> or
     <code>BRIDGE_SMTP_PORT</code>), so they are not changed here. An explicit setting stays
     explicit.</p>`
-        : `<form method="post" action="/settings?token=${escapeHtml(data.token)}">
+        : `<form method="post" action="/settings">
   <input type="hidden" name="csrf" value="${escapeHtml(data.csrfSettings)}">
   <label for="imapPort">IMAP port</label>
   <input id="imapPort" name="imapPort" type="text" inputmode="numeric"
@@ -86,6 +133,7 @@ export function bridgeSection(data) {
   that is not running. You find the real ones in the Bridge under settings. The host is not
   changeable here on purpose: it would be a field that sends your Bridge password to another
   machine.</p>
+  ${pinField(data.pinRequired === true)}
   <button type="submit">Save ports</button>
 </form>`;
     const certificate = data.certificate
@@ -107,7 +155,7 @@ to. The host stays at <code>${escapeHtml(data.bridgeHost)}</code> and cannot be
 
 <h2>Connection test</h2>
 <div class="card">
-<form method="post" action="/test-connection?token=${escapeHtml(data.token)}">
+<form method="post" action="/test-connection">
   <input type="hidden" name="csrf" value="${escapeHtml(data.csrfTest)}">
   <p>Checks that the Bridge answers on the ports below and accepts the stored credentials.</p>
   <button type="submit">Test the connection</button>
@@ -133,10 +181,11 @@ ${row('Kept in', data.storeTitle ?? 'nowhere yet')}
 
 <h2>Sign out</h2>
 <div class="card">
-<form method="post" action="/sign-out?token=${escapeHtml(data.token)}">
+<form method="post" action="/sign-out">
   <input type="hidden" name="csrf" value="${escapeHtml(data.csrfSignOut)}">
   <p>Removes the stored credentials from wherever they are kept, everywhere at once, and
-  disconnects.</p>
+  disconnects. Every running server signs out with it.</p>
+  ${pinField(data.pinRequired === true)}
   <button type="submit" class="danger">Sign out and forget credentials</button>
 </form>
 </div>`);
@@ -209,4 +258,238 @@ ${part.map((m) => `<tr><td><code>${escapeHtml(m.path)}</code></td></tr>`).join('
 exactly one, from labels, where it can carry any number.</p>
 ${sections || '<div class="card"><p class="hint">No mailboxes were returned.</p></div>'}`);
 }
+/**
+ * What a filter may do beyond filing and flags: one switch per action, all off
+ * by default (Tobi, 06.11.2026). The extension has the same switches in its
+ * popup, and an action needs both, so a program that reaches only one of the
+ * two cannot allow it.
+ */
+function filterActionsForm(data) {
+    const view = data.filterActions;
+    if (!view)
+        return '';
+    const rows = UNLOCKABLE.map((action) => {
+        const on = view.allowed.includes(action);
+        const text = UNLOCKABLE_TEXT[action];
+        const control = view.fixed
+            ? `<strong>${on ? 'allowed' : 'not allowed'}</strong>`
+            : `<input type="checkbox" id="action-${action}" name="action:${action}" value="on"${on ? ' checked' : ''}>`;
+        return (`<tr><td>${control}</td><td><label for="action-${action}">${escapeHtml(text.title)}</label></td>` +
+            `<td class="hint">${escapeHtml(text.risk)}</td></tr>`);
+    }).join('\n');
+    const allowed = UNLOCKABLE.filter((action) => view.allowed.includes(action));
+    const noPin = data.pinRequired ? '' : '<br><strong>No PIN is set</strong>, so the assistant could also have switched this on itself.';
+    const cost = allowed.length
+        ? `<div class="error"><strong>An assistant may set up filters that ${escapeHtml(allowed.map((action) => UNLOCKABLE_TEXT[action].title.toLowerCase()).join(', '))}.</strong> A single message can then ask for such a rule, and it keeps acting long after the
+conversation. With ask first you still see each one in the window of the extension before it is saved.${noPin}</div>`
+        : '';
+    const intro = `<p>A filter an assistant proposes may always file mail into folders and labels and set or clear
+the read and star flags. Anything more is up to you, one action at a time. Not allowed, which is the default,
+the assistant can neither set it up nor change, apply or switch on a filter that does it.</p>`;
+    const table = `<table>
+  <tr><th></th><th>Action</th><th>What it costs</th></tr>
+  ${rows}
+  </table>`;
+    const after = `<p class="hint">The browser extension has the same switches in its popup, and an action needs
+  both. Forwarding is not among them: Proton does not run it in filters, and its own forwarding setting is out
+  of reach of these tools. Proton's check of a script and its spam guard stay in place whatever is allowed.</p>`;
+    if (view.fixed) {
+        return `<h2>What a filter may do</h2>
+<div class="card">${cost}${intro}${table}
+<p class="hint">Set in the environment (<code>PROTON_MCP_FILTER_ACTIONS</code>), so it is not changed here.</p>${after}</div>`;
+    }
+    return `<h2>What a filter may do</h2>
+<div class="card">
+${cost}
+${intro}
+<form method="post" action="/permissions/filter-actions">
+  <input type="hidden" name="csrf" value="${escapeHtml(data.csrfFilterActions ?? '')}">
+  ${table}
+  ${after}
+  ${pinField(data.pinRequired === true)}
+  <button type="submit">Save what filters may do</button>
+</form>
+</div>`;
+}
+/** The copy of everything sent: who gets it, and the form to change it. */
+function recordForm(data) {
+    const record = data.record;
+    if (!record)
+        return '';
+    const now = record.address
+        ? `<p>Every message sent through this server also goes to <code>${escapeHtml(record.address)}</code>
+as ${record.mode === 'cc' ? 'Cc, visible to every recipient' : 'Bcc, invisible to the other recipients'}.</p>`
+        : '<p>No copy is added.</p>';
+    if (record.fixed) {
+        return `<h2>A copy of everything sent</h2>
+<div class="card">${now}<p class="hint">Set in the environment (<code>PROTON_MCP_COPY_TO</code>), so it is
+not changed here.</p></div>`;
+    }
+    return `<h2>A copy of everything sent</h2>
+<div class="card">
+${now}
+<form method="post" action="/permissions/record">
+  <input type="hidden" name="csrf" value="${escapeHtml(data.csrfRecord ?? '')}">
+  <label for="copyTo">Address</label>
+  <input id="copyTo" name="address" type="text" autocomplete="off" spellcheck="false"
+         value="${escapeHtml(record.address ?? '')}" placeholder="archive@example.com">
+  <label for="copyAs">As</label>
+  <select id="copyAs" name="mode">
+    <option value="bcc"${record.mode !== 'cc' ? ' selected' : ''}>Bcc: a record the recipients do not see</option>
+    <option value="cc"${record.mode === 'cc' ? ' selected' : ''}>Cc: visible to every recipient</option>
+  </select>
+  <p class="hint">Added to every message every sending tool sends, before the question is asked, so it is
+  part of what you confirm, and the question names it as coming from this setting. Nothing the
+  assistant passes removes it. Leave the address empty to add nothing.</p>
+  ${pinField(data.pinRequired === true)}
+  <button type="submit">Save the copy</button>
+</form>
+</div>`;
+}
+const LEVEL_NAMES = {
+    off: 'off',
+    ask: 'ask first',
+    act: 'act on its own',
+};
+/** The table of tools with a choice for each, or the fixed value where the environment decided. */
+function levelTable(data) {
+    if (!data.tools || data.tools.length === 0)
+        return '';
+    const rows = data.tools
+        .map((tool) => {
+        const choice = tool.fixed
+            ? `<strong>${escapeHtml(LEVEL_NAMES[tool.level])}</strong> <span class="hint">(${escapeHtml(tool.source)})</span>`
+            : `<select name="level:${escapeHtml(tool.tool)}" aria-label="${escapeHtml(tool.tool)}">` +
+                tool.options
+                    .map((option) => `<option value="${option}"${option === tool.level ? ' selected' : ''}>${escapeHtml(LEVEL_NAMES[option])}</option>`)
+                    .join('') +
+                '</select>';
+        return `<tr><td><code>${escapeHtml(tool.tool)}</code></td><td>${escapeHtml(tool.group)}</td><td>${choice}</td></tr>`;
+    })
+        .join('\n');
+    const autonomous = data.tools.filter((tool) => tool.level === 'act' && tool.options.includes('ask'));
+    const sending = autonomous.filter((tool) => tool.group !== 'filters');
+    const filters = autonomous.filter((tool) => tool.group === 'filters');
+    const names = (tools) => `${tools.map((t) => escapeHtml(t.tool)).join(', ')} ${tools.length === 1 ? 'acts' : 'act'} without asking.`;
+    const noPin = data.pinRequired ? '' : '<br><strong>No PIN is set</strong>, so the assistant could also have switched this on itself.';
+    const cost = (sending.length
+        ? `<div class="error"><strong>${names(sending)}</strong> Your private mail, text written by
+strangers and a way out are then together with no person in between: a single message can ask for
+your mailbox to be forwarded, and nobody would see it happen. Bound it below where you can.${noPin}</div>`
+        : '') +
+        (filters.length
+            ? `<div class="error"><strong>${names(filters)}</strong> A single message can then ask for a rule
+that files mail away from you or marks it as read, and the rule keeps acting long after the conversation.
+Applying one changes the mail that is already there, all of it at once. What a filter may do beyond filing
+and flags is set below, and the extension asks for the same in its popup, where it also lists every
+change.${noPin}</div>`
+            : '');
+    return `<h2>What the assistant may do</h2>
+<div class="card">
+${cost}
+<form method="post" action="/permissions/levels">
+  <input type="hidden" name="csrf" value="${escapeHtml(data.csrfLevels ?? '')}">
+  <table>
+  <tr><th>Tool</th><th>Group</th><th>Level</th></tr>
+  ${rows}
+  </table>
+  <p class="hint"><strong>off</strong> takes a tool away from the assistant entirely.
+  <strong>ask first</strong> makes it ask you before acting: the sending tools through your client, the
+  filter tools in a window of the browser extension. Both do this by default. <strong>act on its own</strong> lets it go ahead. A level set in the server's
+  environment wins over this page and is shown here as fixed.</p>
+  ${pinField(data.pinRequired === true)}
+  <button type="submit">Save the levels</button>
+</form>
+</div>`;
+}
+/** The optional bounds on sending without asking. */
+function limitsForm(data) {
+    const limits = data.limits;
+    if (!limits)
+        return '';
+    const fixedNote = (fixed) => (fixed ? ' <span class="hint">(set in the environment)</span>' : '');
+    const allowed = limits.fixed.allowed
+        ? `<p><code>${escapeHtml(limits.allowed.join(', ') || 'anyone')}</code>${fixedNote(true)}</p>`
+        : `<textarea id="allowed" name="allowed" rows="4">${escapeHtml(limits.allowed.join('\n'))}</textarea>`;
+    const max = limits.fixed.maxPerHour
+        ? `<p><code>${escapeHtml(String(limits.maxPerHour ?? 'no limit'))}</code>${fixedNote(true)}</p>`
+        : `<input id="maxPerHour" name="maxPerHour" type="text" inputmode="numeric" value="${escapeHtml(limits.maxPerHour === undefined ? '' : String(limits.maxPerHour))}">`;
+    const until = limits.fixed.until
+        ? `<p><code>${escapeHtml(limits.until ?? 'none')}</code>${fixedNote(true)}</p>`
+        : `<input id="until" name="until" type="date" value="${escapeHtml(limits.until ?? '')}">`;
+    return `<h2>Bounds on sending without asking</h2>
+<div class="card">
+<form method="post" action="/permissions/limits">
+  <input type="hidden" name="csrf" value="${escapeHtml(data.csrfLimits ?? '')}">
+  <label for="allowed">Permitted recipients</label>
+  ${allowed}
+  <p class="hint">One per line: a full address, or a domain written as <code>@example.com</code>. Empty
+  means anyone. A message to anyone else asks first instead.</p>
+  <label for="maxPerHour">At most this many per hour</label>
+  ${max}
+  <p class="hint">Counted per running server. Beyond it, sending asks first again. Empty means no limit.</p>
+  <label for="until">Until this day</label>
+  ${until}
+  <p class="hint">After this day, sending asks first again until you set a new one. Empty means no end.</p>
+  <p class="hint">Every bound is optional. A send outside one asks you instead of failing.</p>
+  ${pinField(data.pinRequired === true)}
+  <button type="submit">Save the bounds</button>
+</form>
+</div>`;
+}
+/**
+ * What the assistant may do, and who may change that.
+ *
+ * The PIN comes first on this page because everything else on it depends on
+ * it. Without one, the settings here are only as safe as every program on this
+ * machine, the assistant included: it can open this address with a browser
+ * tool as easily as the user can. The page says so plainly instead of leaving
+ * it to be discovered.
+ */
+export function permissionsSection(data) {
+    const pin = data.pinRequired
+        ? `<p>A PIN is set. Every change in this interface asks for it.</p>
+<form method="post" action="/pin">
+  <input type="hidden" name="csrf" value="${escapeHtml(data.csrfPin)}">
+  <input type="hidden" name="action" value="change">
+  ${pinField(true)}
+  <label for="next">New PIN</label>
+  <input id="next" name="next" type="password" autocomplete="new-password">
+  <label for="nextRepeat">New PIN again</label>
+  <input id="nextRepeat" name="nextRepeat" type="password" autocomplete="new-password">
+  <button type="submit">Change the PIN</button>
+</form>
+<form method="post" action="/pin">
+  <input type="hidden" name="csrf" value="${escapeHtml(data.csrfPin)}">
+  <input type="hidden" name="action" value="remove">
+  ${pinField(true)}
+  <button type="submit" class="danger">Remove the PIN</button>
+</form>`
+        : `<div class="error">No PIN is set. Anything running on this machine can change the settings
+here, and so can an assistant with a browser tool, which may then allow itself more than you meant
+to.</div>
+<form method="post" action="/pin">
+  <input type="hidden" name="csrf" value="${escapeHtml(data.csrfPin)}">
+  <input type="hidden" name="action" value="set">
+  <label for="next">PIN</label>
+  <input id="next" name="next" type="password" autocomplete="new-password">
+  <label for="nextRepeat">PIN again</label>
+  <input id="nextRepeat" name="nextRepeat" type="password" autocomplete="new-password">
+  <p class="hint">At least 6 characters. It is stored only as a salted hash and never shown to the
+  assistant. Type it only into a tab you are using yourself: a tab an assistant is driving at that
+  moment can read what is typed into it. A forgotten PIN is removed by deleting the line
+  <code>"pin"</code> from the settings file.</p>
+  <button type="submit">Set the PIN</button>
+</form>`;
+    return frame('permissions', 'Permissions', data, `<h1>Permissions</h1>
+<p class="lead">What an assistant may do through this server, and who may change that. Settings
+made here apply to every running server at once.</p>
+
+<h2>PIN</h2>
+<div class="card">${pin}</div>
+${levelTable(data)}
+${filterActionsForm(data)}
+${limitsForm(data)}
+${recordForm(data)}`);
+}
 //# sourceMappingURL=sections.js.map

package/dist/web/sections.js.map

@@ -1 +1 @@
-{"version":3,"file":"sections.js","sourceRoot":"","sources":["../../src/web/sections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,MAAM,EACN,UAAU,EACV,cAAc,EACd,WAAW,EACX,YAAY,GAGb,MAAM,aAAa,CAAA;AAgBpB;;;;;GAKG;AACH,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,kBAAkB,EAAE,CAAA;AAC1C,CAAC;AAED,wEAAwE;AACxE,SAAS,GAAG,CAAC,GAAW,EAAE,KAAa,EAAE,GAAG,GAAG,KAAK;IAClD,OAAO,WAAW,UAAU,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,CAAA;AAC1F,CAAC;AAED,SAAS,KAAK,CAAC,OAAgB,EAAE,KAAa,EAAE,IAAY,EAAE,IAAY;IACxE,OAAO,MAAM,CAAC;QACZ,KAAK;QACL,OAAO;QACP,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,IAAI,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE;KACtE,CAAC,CAAA;AACJ,CAAC;AAiBD;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAkB;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS;QAC/B,CAAC,CAAC,2CAA2C;QAC7C,CAAC,CAAC,8CAA8C,CAAA;IAElD,MAAM,IAAI,GAAG;QACX,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC;QACnC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC;QAC/C,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC;QAC5D,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC3F,GAAG,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QAC/D,GAAG,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QAC/D,GAAG,CAAC,gBAAgB,EAAE,aAAa,IAAI,CAAC,OAAO,EAAE,CAAC;QAClD,GAAG,CAAC,oBAAoB,EAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;KACzD,CAAA;IAED,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC/F,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW,UAAU,CAAA;QACpF,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,IAAI,CAAC,YAAY,GAAG,MAAM,EAAE,CAAC,CAAC,CAAA;IAC1E,CAAC;IAED,OAAO,KAAK,CACV,UAAU,EACV,UAAU,EACV,IAAI,EACJ;;;;2BAIuB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;EACxC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,qDAAqD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,CACpH,CAAA;AACH,CAAC;AAiBD,2EAA2E;AAC3E,MAAM,UAAU,aAAa,CAAC,IAAgB;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW;QAC5B,CAAC,CAAC;;kBAEY;QACd,CAAC,CAAC,+CAA+C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;4CAC/B,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;;;kBAGvD,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;;;kBAGvC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;;;;;;QAMjD,CAAA;IAEN,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW;QAClC,CAAC,CAAC;;EAEJ,GAAG,CAAC,uBAAuB,EAAE,SAAS,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC;EAC9F,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;EACxC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;;;;;OAKrD;QACH,CAAC,CAAC;0CACoC,CAAA;IAExC,OAAO,KAAK,CACV,QAAQ,EACR,QAAQ,EACR,IAAI,EACJ;;8BAE0B,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;;;;qDAIJ,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;4CAC/B,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;;;;;;;oBAOjD,KAAK;;;EAGvB,WAAW,EAAE,CACZ,CAAA;AACH,CAAC;AASD,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,OAAO,KAAK,CACV,aAAa,EACb,aAAa,EACb,IAAI,EACJ;;;;;EAKF,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC;EACpD,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC;;;;;8CAKJ,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;4CACxB,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;;;;;OAKjE,CACJ,CAAA;AACH,CAAC;AASD,kFAAkF;AAClF,MAAM,UAAU,eAAe,CAAC,IAAkB;IAChD,MAAM,OAAO,GACX,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,gDAAgD;QAClD,CAAC,CAAC;;IAEJ,IAAI,CAAC,OAAO;aACX,GAAG,CACF,CAAC,IAAI,EAAE,EAAE,CACP,iBAAiB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAC9G;aACA,IAAI,CAAC,MAAM,CAAC;;;yDAGwC,CAAA;IAEvD,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QACtB,CAAC,CAAC,kEAAkE;QACpE,CAAC,CAAC;;IAEJ,IAAI,CAAC,MAAM;aACV,GAAG,CACF,CAAC,IAAI,EAAE,EAAE,CACP,iBAAiB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO;YAC/F,OAAO,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO;YACzD,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,YAAY,CAC7D;aACA,IAAI,CAAC,MAAM,CAAC;SACR,CAAA;IAEP,OAAO,KAAK,CACV,UAAU,EACV,UAAU,EACV,IAAI,EACJ;;;;;oBAKgB,OAAO;;;;EAIzB,MAAM;;;;OAID,CACJ,CAAA;AACH,CAAC;AAMD;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,IAAiB;IAC9C,MAAM,MAAM,GAAmD;QAC7D,CAAC,QAAQ,EAAE,kBAAkB,CAAC;QAC9B,CAAC,QAAQ,EAAE,SAAS,CAAC;QACrB,CAAC,OAAO,EAAE,QAAQ,CAAC;KACpB,CAAA;IAED,MAAM,QAAQ,GAAG,MAAM;SACpB,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAA;QAC1E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QAChC,OAAO,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,MAAM;;EAErD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;eACrE,CAAA;IACX,CAAC,CAAC;SACD,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,OAAO,KAAK,CACV,WAAW,EACX,oBAAoB,EACpB,IAAI,EACJ;;;EAGF,QAAQ,IAAI,yEAAyE,EAAE,CACtF,CAAA;AACH,CAAC"}
+{"version":3,"file":"sections.js","sourceRoot":"","sources":["../../src/web/sections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,MAAM,EACN,UAAU,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,QAAQ,GAGT,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAgBjE;;;;;GAKG;AACH,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,kBAAkB,EAAE,CAAA;AAC1C,CAAC;AAED,wEAAwE;AACxE,SAAS,GAAG,CAAC,GAAW,EAAE,KAAa,EAAE,GAAG,GAAG,KAAK;IAClD,OAAO,WAAW,UAAU,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,CAAA;AAC1F,CAAC;AAED,SAAS,KAAK,CAAC,OAAgB,EAAE,KAAa,EAAE,IAAY,EAAE,IAAY;IACxE,OAAO,MAAM,CAAC;QACZ,KAAK;QACL,OAAO;QACP,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,IAAI,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE;KACtE,CAAC,CAAA;AACJ,CAAC;AAqCD;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,OAAoC;IACvD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAC/C,MAAM,IAAI,GAAG,OAAO;SACjB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACd,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ;YACzB,CAAC,CAAC,gBAAgB,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC,EAAE;gBACzD,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,CAAC,CAAC,eAAe,CAAA;QACnB,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC,CAAC,EAAE,CAAA;QAC7F,OAAO,CACL,iBAAiB,MAAM,CAAC,GAAG,UAAU,IAAI,YAAY,GAAG,OAAO;YAC/D,OAAO,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAClG,CAAA;IACH,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;IACb,OAAO,wBAAwB,OAAO,CAAC,MAAM;;;EAG7C,IAAI;;;;;gBAKU,CAAA;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAkB;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS;QAC/B,CAAC,CAAC,2CAA2C;QAC7C,CAAC,CAAC,8CAA8C,CAAA;IAElD,MAAM,IAAI,GAAG;QACX,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC;QACnC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC;QAC/C,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC;QAC5D,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC3F,GAAG,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QAC/D,GAAG,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QAC/D,GAAG,CAAC,gBAAgB,EAAE,aAAa,IAAI,CAAC,OAAO,EAAE,CAAC;QAClD,GAAG,CACD,cAAc,EACd,IAAI,CAAC,WAAW;YACd,CAAC,CAAC,8CAA8C;YAChD,CAAC,CAAC,+FAA+F,EACnG,IAAI,CACL;QACD,GAAG,CACD,uBAAuB,EACvB,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAC9C,CAAC,CAAC,oHAAoH;YACtH,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACnE;QACD,GAAG,CACD,kBAAkB,EAClB,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;YACjD,CAAC,CAAC,2BAA2B,UAAU,CACnC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,aAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;iBAChE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;iBAC5D,IAAI,CAAC,IAAI,CAAC,CACd,SAAS;YACZ,CAAC,CAAC,iCAAiC,EACrC,IAAI,CACL;QACD,GAAG,CACD,yBAAyB,EACzB,IAAI,CAAC,MAAM;YACT,CAAC,CAAC,2BAA2B,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU;YACnH,CAAC,CAAC,MAAM,EACV,IAAI,CACL;QACD,GAAG,CAAC,oBAAoB,EAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;KACzD,CAAA;IAED,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC/F,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW,UAAU,CAAA;QACpF,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,IAAI,CAAC,YAAY,GAAG,MAAM,EAAE,CAAC,CAAC,CAAA;IAC1E,CAAC;IAED,OAAO,KAAK,CACV,UAAU,EACV,UAAU,EACV,IAAI,EACJ;;;;2BAIuB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;EACxC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,qDAAqD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE;EACnH,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAC1B,CAAA;AACH,CAAC;AAiBD,2EAA2E;AAC3E,MAAM,UAAU,aAAa,CAAC,IAAgB;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW;QAC5B,CAAC,CAAC;;kBAEY;QACd,CAAC,CAAC;4CACsC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;;;kBAGvD,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;;;kBAGvC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;;;;;IAKrD,QAAQ,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC;;QAE/B,CAAA;IAEN,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW;QAClC,CAAC,CAAC;;EAEJ,GAAG,CAAC,uBAAuB,EAAE,SAAS,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC;EAC9F,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;EACxC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;;;;;OAKrD;QACH,CAAC,CAAC;0CACoC,CAAA;IAExC,OAAO,KAAK,CACV,QAAQ,EACR,QAAQ,EACR,IAAI,EACJ;;8BAE0B,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;;;;;4CAKb,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;;;;;;;oBAOjD,KAAK;;;EAGvB,WAAW,EAAE,CACZ,CAAA;AACH,CAAC;AASD,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,OAAO,KAAK,CACV,aAAa,EACb,aAAa,EACb,IAAI,EACJ;;;;;EAKF,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC;EACpD,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC;;;;;;4CAMN,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;;;IAGpE,QAAQ,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC;;;OAGhC,CACJ,CAAA;AACH,CAAC;AASD,kFAAkF;AAClF,MAAM,UAAU,eAAe,CAAC,IAAkB;IAChD,MAAM,OAAO,GACX,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,gDAAgD;QAClD,CAAC,CAAC;;IAEJ,IAAI,CAAC,OAAO;aACX,GAAG,CACF,CAAC,IAAI,EAAE,EAAE,CACP,iBAAiB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAC9G;aACA,IAAI,CAAC,MAAM,CAAC;;;yDAGwC,CAAA;IAEvD,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QACtB,CAAC,CAAC,kEAAkE;QACpE,CAAC,CAAC;;IAEJ,IAAI,CAAC,MAAM;aACV,GAAG,CACF,CAAC,IAAI,EAAE,EAAE,CACP,iBAAiB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO;YAC/F,OAAO,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO;YACzD,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,YAAY,CAC7D;aACA,IAAI,CAAC,MAAM,CAAC;SACR,CAAA;IAEP,OAAO,KAAK,CACV,UAAU,EACV,UAAU,EACV,IAAI,EACJ;;;;;oBAKgB,OAAO;;;;EAIzB,MAAM;;;;OAID,CACJ,CAAA;AACH,CAAC;AAMD;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,IAAiB;IAC9C,MAAM,MAAM,GAAmD;QAC7D,CAAC,QAAQ,EAAE,kBAAkB,CAAC;QAC9B,CAAC,QAAQ,EAAE,SAAS,CAAC;QACrB,CAAC,OAAO,EAAE,QAAQ,CAAC;KACpB,CAAA;IAED,MAAM,QAAQ,GAAG,MAAM;SACpB,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAA;QAC1E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QAChC,OAAO,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,MAAM;;EAErD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;eACrE,CAAA;IACX,CAAC,CAAC;SACD,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,OAAO,KAAK,CACV,WAAW,EACX,oBAAoB,EACpB,IAAI,EACJ;;;EAGF,QAAQ,IAAI,yEAAyE,EAAE,CACtF,CAAA;AACH,CAAC;AAoDD;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,IAAqB;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAA;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IACpB,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACxC,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK;YACxB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,WAAW;YACtD,CAAC,CAAC,qCAAqC,MAAM,kBAAkB,MAAM,eAAe,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAA;QAC7G,OAAO,CACL,WAAW,OAAO,+BAA+B,MAAM,KAAK,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe;YACjG,oBAAoB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CACtD,CAAA;IACH,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACb,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAC5E,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,+FAA+F,CAAA;IACrI,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM;QACzB,CAAC,CAAC,mEAAmE,UAAU,CAC3E,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAChF;wGACiG,KAAK,QAAQ;QACjH,CAAC,CAAC,EAAE,CAAA;IACN,MAAM,KAAK,GAAG;;8FAE8E,CAAA;IAC5F,MAAM,KAAK,GAAG;;IAEZ,IAAI;WACG,CAAA;IACT,MAAM,KAAK,GAAG;;gHAEgG,CAAA;IAC9G,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO;oBACS,IAAI,GAAG,KAAK,GAAG,KAAK;iHACyE,KAAK,QAAQ,CAAA;IAC5H,CAAC;IACD,OAAO;;EAEP,IAAI;EACJ,KAAK;;4CAEqC,UAAU,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC;IAChF,KAAK;IACL,KAAK;IACL,QAAQ,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC;;;OAGhC,CAAA;AACP,CAAC;AAED,2EAA2E;AAC3E,SAAS,UAAU,CAAC,IAAqB;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IAC1B,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IACtB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO;QACxB,CAAC,CAAC,gEAAgE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;KAC3F,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,wCAAwC,OAAO;QAC1G,CAAC,CAAC,0BAA0B,CAAA;IAC9B,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO;oBACS,GAAG;4BACK,CAAA;IAC1B,CAAC;IACD,OAAO;;EAEP,GAAG;;4CAEuC,UAAU,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;;;kBAG3D,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;;;yBAGzB,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;wBACxC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;;;;;IAK3D,QAAQ,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC;;;OAGhC,CAAA;AACP,CAAC;AAED,MAAM,WAAW,GAA0C;IACzD,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,gBAAgB;CACtB,CAAA;AAED,mGAAmG;AACnG,SAAS,UAAU,CAAC,IAAqB;IACvC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK;SACpB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK;YACvB,CAAC,CAAC,WAAW,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,iCAAiC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU;YAClH,CAAC,CAAC,uBAAuB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACtF,IAAI,CAAC,OAAO;qBACT,GAAG,CACF,CAAC,MAAM,EAAE,EAAE,CACT,kBAAkB,MAAM,IAAI,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,WAAW,CACrH;qBACA,IAAI,CAAC,EAAE,CAAC;gBACX,WAAW,CAAA;QACf,OAAO,iBAAiB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,MAAM,YAAY,CAAA;IACtH,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAClC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC/D,CAAA;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAA;IACrE,MAAM,KAAK,GAAG,CAAC,KAAsB,EAAU,EAAE,CAC/C,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,kBAAkB,CAAA;IAC7G,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,+FAA+F,CAAA;IACrI,MAAM,IAAI,GACR,CAAC,OAAO,CAAC,MAAM;QACb,CAAC,CAAC,8BAA8B,KAAK,CAAC,OAAO,CAAC;;6FAEyC,KAAK,QAAQ;QACpG,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,OAAO,CAAC,MAAM;YACb,CAAC,CAAC,8BAA8B,KAAK,CAAC,OAAO,CAAC;;;;SAI3C,KAAK,QAAQ;YAChB,CAAC,CAAC,EAAE,CAAC,CAAA;IAET,OAAO;;EAEP,IAAI;;4CAEsC,UAAU,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;;;IAGzE,IAAI;;;;;;IAMJ,QAAQ,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC;;;OAGhC,CAAA;AACP,CAAC;AAED,qDAAqD;AACrD,SAAS,UAAU,CAAC,IAAqB;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IAC1B,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IACtB,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,qDAAqD,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAC1G,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO;QAClC,CAAC,CAAC,YAAY,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,UAAU,SAAS,CAAC,IAAI,CAAC,MAAM;QAC9F,CAAC,CAAC,kDAAkD,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,CAAA;IACxG,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU;QACjC,CAAC,CAAC,YAAY,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,UAAU,CAAC,CAAC,UAAU,SAAS,CAAC,IAAI,CAAC,MAAM;QAChG,CAAC,CAAC,mFAAmF,UAAU,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAA;IACvK,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK;QAC9B,CAAC,CAAC,YAAY,UAAU,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,SAAS,CAAC,IAAI,CAAC,MAAM;QAC/E,CAAC,CAAC,qDAAqD,UAAU,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAA;IAE3F,OAAO;;;4CAGmC,UAAU,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;;IAEzE,OAAO;;;;IAIP,GAAG;;;IAGH,KAAK;;;IAGL,QAAQ,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC;;;OAGhC,CAAA;AACP,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW;QAC1B,CAAC,CAAC;;4CAEsC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;IAEhE,QAAQ,CAAC,IAAI,CAAC;;;;;;;;4CAQ0B,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;IAEhE,QAAQ,CAAC,IAAI,CAAC;;QAEV;QACJ,CAAC,CAAC;;;;4CAIsC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;;;;;;;;;;QAW5D,CAAA;IAEN,OAAO,KAAK,CACV,aAAa,EACb,aAAa,EACb,IAAI,EACJ;;;;;oBAKgB,GAAG;EACrB,UAAU,CAAC,IAAI,CAAC;EAChB,iBAAiB,CAAC,IAAI,CAAC;EACvB,UAAU,CAAC,IAAI,CAAC;EAChB,UAAU,CAAC,IAAI,CAAC,EAAE,CACjB,CAAA;AACH,CAAC"}