@rndmjoker/proton-mcp 0.4.4

package/dist/web/server.js

@@ -0,0 +1,622 @@
+/**
+ * The local web interface.
+ *
+ * Built on node:http with no framework. For something that handles credentials,
+ * every dependency is attack surface, and the routing here fits on one screen.
+ *
+ * It serves no files from disk at all: every response is generated. That removes
+ * path traversal as a category rather than guarding against it.
+ *
+ * All security checks live in security.ts and run before any handler. See there
+ * for what each one defends against.
+ */
+var _a;
+import { createServer } from 'node:http';
+import { STORE_DESCRIPTIONS } from '../credentials/store.js';
+import { listStores, recommend, recommendationReason } from '../credentials/availability.js';
+import { createSession, checkRequest, csrfToken, securityHeaders } from './security.js';
+import { loginPage, rejectionPage, unlockPage } from './pages.js';
+import { overviewSection, bridgeSection, credentialsSection, activitySection, mailboxSection, } from './sections.js';
+/**
+ * Upper bound for a request body.
+ *
+ * The forms here carry an address, a password and a token. Anything larger is
+ * either a mistake or an attempt to make the process allocate memory.
+ */
+const MAX_BODY_BYTES = 8 * 1024;
+/** Only loopback. There is no option to change this, by design. */
+const BIND_ADDRESS = '127.0.0.1';
+/**
+ * Which address shows which section.
+ *
+ * One table rather than a chain of comparisons, so that a path nobody listed
+ * cannot quietly reach a renderer. Everything not in here falls through to the
+ * rejection at the end of the handler.
+ */
+const SECTION_PATHS = {
+    '/': 'overview',
+    '/mailboxes': 'mailboxes',
+    '/bridge': 'bridge',
+    '/credentials': 'credentials',
+    '/activity': 'activity',
+};
+/** The same names as a set, for checking a section that arrived in a form. */
+const SECTIONS = new Set(Object.values(SECTION_PATHS));
+/**
+ * The port tried first.
+ *
+ * A fixed default rather than a random one, because the interface runs for as
+ * long as the server does and is meant to be opened again and again. A port that
+ * moved on every start would make that needlessly awkward.
+ */
+export const DEFAULT_WEB_PORT = 7345;
+/**
+ * How many consecutive ports to try.
+ *
+ * Several clients may each start their own server, and the second one must not
+ * fail over a port the first one took. Failing outright would be worse than
+ * moving up by one.
+ */
+export const PORT_ATTEMPTS = 10;
+/**
+ * Reads a form body, refusing anything oversized.
+ *
+ * The limit is enforced while reading rather than after, so an oversized body is
+ * never held in memory in full.
+ */
+export function readBody(request, maxBytes = MAX_BODY_BYTES) {
+    return new Promise((resolve) => {
+        const chunks = [];
+        let size = 0;
+        let aborted = false;
+        request.on('data', (chunk) => {
+            if (aborted)
+                return;
+            size += chunk.length;
+            if (size > maxBytes) {
+                aborted = true;
+                chunks.length = 0;
+                // Deliberately not destroy(): that resets the connection and the client
+                // sees ECONNRESET instead of an explanation. The rest of the body is
+                // drained and discarded so the handler can still answer with 413.
+                request.resume();
+                resolve({ fields: {}, tooLarge: true });
+                return;
+            }
+            chunks.push(chunk);
+        });
+        request.on('end', () => {
+            if (aborted)
+                return;
+            const params = new URLSearchParams(Buffer.concat(chunks).toString('utf8'));
+            const fields = {};
+            for (const [key, value] of params)
+                fields[key] = value;
+            resolve({ fields, tooLarge: false });
+        });
+        request.on('error', () => {
+            if (!aborted)
+                resolve({ fields: {}, tooLarge: false });
+        });
+    });
+}
+export class WebInterface {
+    #server;
+    #secrets = createSession();
+    #port = 0;
+    #options;
+    #notify;
+    constructor(options) {
+        this.#options = options;
+        this.#notify = options.notify ?? ((m) => process.stderr.write(`proton-mcp: ${m}\n`));
+    }
+    /** The URL the user has to open, including the access token. */
+    get url() {
+        return `http://${BIND_ADDRESS}:${this.#port}/?token=${this.#secrets.accessToken}`;
+    }
+    get port() {
+        return this.#port;
+    }
+    get running() {
+        return this.#server?.listening === true;
+    }
+    async start() {
+        if (this.#server?.listening)
+            return this.url;
+        const build = () => {
+            const created = createServer((request, response) => {
+                void this.#handle(request, response).catch(() => {
+                    // A handler that throws must not take the process down, and must not
+                    // leak anything either.
+                    this.#send(response, 500, 'text/plain; charset=utf-8', 'Internal error.');
+                });
+            });
+            // Slow clients must not be able to tie up the server indefinitely.
+            created.headersTimeout = 10_000;
+            created.requestTimeout = 30_000;
+            return created;
+        };
+        const wanted = this.#options.port ?? DEFAULT_WEB_PORT;
+        // Port 0 means "any free port" and needs no retry loop.
+        const attempts = wanted === 0 ? 1 : PORT_ATTEMPTS;
+        let server;
+        let lastError;
+        for (let i = 0; i < attempts; i++) {
+            const candidate = wanted === 0 ? 0 : wanted + i;
+            // A fresh instance per attempt: after a failed listen() the old one is not
+            // reliably reusable.
+            const attempt = build();
+            try {
+                await new Promise((resolve, reject) => {
+                    const onError = (error) => reject(error);
+                    attempt.once('error', onError);
+                    // Explicitly loopback: binding to 0.0.0.0 would put a page that stores
+                    // credentials onto the network.
+                    attempt.listen(candidate, BIND_ADDRESS, () => {
+                        attempt.removeListener('error', onError);
+                        resolve();
+                    });
+                });
+                server = attempt;
+                lastError = undefined;
+                break;
+            }
+            catch (error) {
+                attempt.close();
+                lastError = error;
+                if (error.code !== 'EADDRINUSE')
+                    break;
+                // Taken, most likely by another instance of this server. Try the next.
+            }
+        }
+        if (!server || lastError) {
+            const code = lastError?.code;
+            throw new Error(code === 'EADDRINUSE'
+                ? `Ports ${wanted} to ${wanted + attempts - 1} are all in use, so the web interface ` +
+                    'could not start. Set PROTON_MCP_WEB_PORT to a free port.'
+                : `The web interface could not start: ${lastError?.message ?? 'unknown reason'}`);
+        }
+        const address = server.address();
+        this.#port = typeof address === 'object' && address ? address.port : 0;
+        this.#server = server;
+        return this.url;
+    }
+    async stop() {
+        const server = this.#server;
+        this.#server = undefined;
+        if (!server)
+            return;
+        // close() alone only stops accepting new connections and then waits for the
+        // existing ones. A browser keeps its connection alive, so a single open tab
+        // would hold the shutdown forever and the MCP server would never exit.
+        server.closeIdleConnections();
+        server.closeAllConnections();
+        await new Promise((resolve) => server.close(() => resolve()));
+    }
+    /** Invalidates the current link and issues a new one. */
+    rotateToken() {
+        this.#secrets = createSession();
+        return this.url;
+    }
+    #send(response, status, contentType, body) {
+        response.writeHead(status, { ...securityHeaders(), 'Content-Type': contentType });
+        response.end(body);
+    }
+    #reject(response, status = 404) {
+        // Always the same page and the same status, whatever the reason. Telling a
+        // caller which check failed would help them work around it.
+        this.#send(response, status, 'text/html; charset=utf-8', rejectionPage());
+    }
+    async #handle(request, response) {
+        const url = new URL(request.url ?? '/', `http://${BIND_ADDRESS}:${this.#port}`);
+        const path = url.pathname;
+        const method = request.method ?? 'GET';
+        const writing = method === 'POST';
+        if (method !== 'GET' && method !== 'POST') {
+            this.#reject(response, 405);
+            return;
+        }
+        // Answered before the token check and without a log line. Browsers ask for
+        // it on every page view, and each one would otherwise be recorded as a
+        // refused request, which buries the refusals that mean something.
+        if (path === '/favicon.ico') {
+            response.writeHead(404, { ...securityHeaders(), 'Content-Length': '0' });
+            response.end();
+            return;
+        }
+        // The body has to be read before the checks for a POST, because the CSRF
+        // token is in it. It is bounded, so this cannot be used to make us allocate.
+        const body = writing ? await readBody(request) : { fields: {}, tooLarge: false };
+        if (body.tooLarge) {
+            // Close the connection after answering: the client may still be sending,
+            // and keeping the socket alive would mean reading the rest for nothing.
+            response.setHeader('Connection', 'close');
+            this.#reject(response, 413);
+            return;
+        }
+        const purpose = path;
+        const check = checkRequest({
+            request,
+            secrets: this.#secrets,
+            port: this.#port,
+            presentedToken: url.searchParams.get('token') ?? undefined,
+            writing,
+            ...(writing ? { csrf: { purpose, presented: body.fields.csrf } } : {}),
+        });
+        if (!check.ok) {
+            // Worth a line on stderr: a rejected request on a loopback-only interface
+            // is either a mistake or something worth knowing about.
+            this.#notify(`web interface refused a ${method} to ${path} (${check.reason})`);
+            this.#reject(response);
+            return;
+        }
+        if (method === 'GET') {
+            const section = SECTION_PATHS[path];
+            if (section) {
+                await this.#render(section, response);
+                return;
+            }
+        }
+        if (writing && path === '/dismiss-notice') {
+            await this.#handleDismissNotice(response, body.fields);
+            return;
+        }
+        if (writing && path === '/settings') {
+            await this.#handlePorts(response, body.fields);
+            return;
+        }
+        if (writing && path === '/test-connection') {
+            await this.#handleTest(response);
+            return;
+        }
+        if (writing && path === '/sign-in') {
+            await this.#handleSignIn(response, body.fields);
+            return;
+        }
+        if (writing && path === '/unlock') {
+            await this.#handleUnlock(response, body.fields);
+            return;
+        }
+        if (writing && path === '/discard-encrypted') {
+            await this.#options.onDiscardEncrypted?.();
+            // Both of these end with nobody signed in, so the section asked for is
+            // beside the point: #render lands on the sign-in form either way.
+            await this.#render('overview', response);
+            return;
+        }
+        if (writing && path === '/sign-out') {
+            await this.#options.onSignOut();
+            await this.#render('overview', response);
+            return;
+        }
+        this.#reject(response);
+    }
+    /**
+     * Renders one section, or whichever page the current state demands instead.
+     *
+     * The state outranks the request: stored-but-locked leads to the unlock page
+     * and nothing stored to the sign-in form, whichever section was asked for.
+     * That is what puts a wrong master password on the unlock page and a refused
+     * Bridge login on the sign-in form without either having to say so, and it is
+     * also why no section has to check whether anybody is signed in.
+     */
+    async #render(section, response, outcome = {}) {
+        const { error, notice, address, store, showAdvanced } = outcome;
+        const status = await this.#options.getStatus();
+        const token = this.#secrets.accessToken;
+        const disclaimer = this.#disclaimerFor(section);
+        if (!status.connected && status.locked) {
+            const page = unlockPage({
+                token,
+                disclaimer,
+                csrf: csrfToken(this.#secrets, '/unlock'),
+                csrfDiscard: csrfToken(this.#secrets, '/discard-encrypted'),
+                path: status.encryptedPath ?? 'your user directory',
+                ...(error ? { error } : {}),
+            });
+            this.#send(response, 200, 'text/html; charset=utf-8', page);
+            return;
+        }
+        if (!status.connected) {
+            const stores = await listStores();
+            const page = loginPage({
+                token,
+                disclaimer,
+                csrf: csrfToken(this.#secrets, '/sign-in'),
+                stores,
+                suggested: recommend(stores),
+                suggestionReason: recommendationReason(stores),
+                bridgeHost: status.bridgeHost,
+                bridgeImapPort: status.bridgeImapPort,
+                bridgeSmtpPort: status.bridgeSmtpPort,
+                portsLocked: this.#options.onPorts === undefined,
+                ...(store ? { chosen: store } : {}),
+                ...(error ? { error } : {}),
+                ...(address ? { address } : {}),
+                ...(showAdvanced ? { showAdvanced } : {}),
+            });
+            this.#send(response, 200, 'text/html; charset=utf-8', page);
+            return;
+        }
+        const banners = {
+            disclaimer,
+            ...(error ? { error } : {}),
+            ...(notice ? { notice } : {}),
+        };
+        const storeTitle = status.storeKind
+            ? { storeTitle: STORE_DESCRIPTIONS[status.storeKind].title }
+            : {};
+        let page;
+        switch (section) {
+            case 'mailboxes':
+                page = await this.#renderMailboxes(token, banners);
+                break;
+            case 'bridge':
+                page = bridgeSection({
+                    token,
+                    csrfSettings: csrfToken(this.#secrets, '/settings'),
+                    csrfTest: csrfToken(this.#secrets, '/test-connection'),
+                    bridgeHost: status.bridgeHost,
+                    bridgeImapPort: status.bridgeImapPort,
+                    bridgeSmtpPort: status.bridgeSmtpPort,
+                    // No handler means the ports are not ours to change.
+                    portsLocked: this.#options.onPorts === undefined,
+                    ...(status.certificate ? { certificate: status.certificate } : {}),
+                    ...banners,
+                });
+                break;
+            case 'credentials':
+                page = credentialsSection({
+                    token,
+                    csrfSignOut: csrfToken(this.#secrets, '/sign-out'),
+                    ...(status.address ? { address: status.address } : {}),
+                    ...(status.storeKind ? { storeKind: status.storeKind } : {}),
+                    ...storeTitle,
+                    ...banners,
+                });
+                break;
+            case 'activity': {
+                const activity = this.#options.getActivity?.() ?? { running: [], recent: [] };
+                page = activitySection({ token, ...activity, ...banners });
+                break;
+            }
+            default:
+                page = overviewSection({
+                    token,
+                    connected: true,
+                    ...(status.address ? { address: status.address } : {}),
+                    ...storeTitle,
+                    ...(status.mailboxCount !== undefined ? { mailboxCount: status.mailboxCount } : {}),
+                    ...(status.messageCount !== undefined ? { messageCount: status.messageCount } : {}),
+                    ...(status.unseenCount !== undefined ? { unseenCount: status.unseenCount } : {}),
+                    bridgeHost: status.bridgeHost,
+                    bridgeImapPort: status.bridgeImapPort,
+                    bridgeSmtpPort: status.bridgeSmtpPort,
+                    readOnly: status.readOnly === true,
+                    webPort: this.#port,
+                    uptimeMs: status.uptimeMs ?? 0,
+                    ...banners,
+                });
+        }
+        this.#send(response, 200, 'text/html; charset=utf-8', page);
+    }
+    /**
+     * Whether the notice is shown, and whether it carries a button.
+     *
+     * A server wired without a way to remember the dismissal still shows the
+     * notice, just without the button. Silently dropping it because a handler is
+     * missing would be the one outcome nobody wants.
+     */
+    #disclaimerFor(section) {
+        if (this.#options.noticeDismissed?.() === true)
+            return 'dismissed';
+        if (!this.#options.onDismissNotice)
+            return 'plain';
+        return { csrf: csrfToken(this.#secrets, '/dismiss-notice'), from: section };
+    }
+    /**
+     * Sends the notice away for good.
+     *
+     * The section it was dismissed from travels in the form, so the answer is the
+     * page the user was already on rather than a jump back to the overview. An
+     * unknown value falls back to the overview instead of being trusted.
+     */
+    async #handleDismissNotice(response, fields) {
+        await this.#options.onDismissNotice?.();
+        const from = SECTIONS.has(fields.from ?? '') ? fields.from : 'overview';
+        await this.#render(from, response);
+    }
+    /**
+     * The folders and labels, only ever on this page.
+     *
+     * Never folded into another section: these names belong to the whole Proton
+     * account and give away banks, employers and authorities on their own. The
+     * caller has already established that somebody is signed in, so the only
+     * question left here is whether the Bridge answers.
+     */
+    async #renderMailboxes(token, banners) {
+        let mailboxes = [];
+        let error = banners.error;
+        if (this.#options.getMailboxes) {
+            try {
+                mailboxes = await this.#options.getMailboxes();
+            }
+            catch (failure) {
+                error = failure.message;
+            }
+        }
+        return mailboxSection({
+            token,
+            mailboxes,
+            disclaimer: banners.disclaimer,
+            ...(error ? { error } : {}),
+            ...(banners.notice ? { notice: banners.notice } : {}),
+        });
+    }
+    /**
+     * Reads a pair of ports out of a form.
+     *
+     * One place for it, because two forms carry them now: the bridge section and
+     * the advanced block of the sign-in page. A port that is wrong has to be
+     * caught before anything tries to connect with it, or the answer is
+     * "connection refused" and the cause is invisible.
+     */
+    static #readPorts(fields) {
+        const parsed = { imapPort: 0, smtpPort: 0 };
+        for (const field of ['imapPort', 'smtpPort']) {
+            const raw = (fields[field] ?? '').trim();
+            const value = Number(raw);
+            if (!raw || !Number.isInteger(value) || value < 1 || value > 65535) {
+                return {
+                    error: `"${raw}" is not a usable port for ${field === 'imapPort' ? 'IMAP' : 'SMTP'}. ` +
+                        'Expected a whole number between 1 and 65535.',
+                };
+            }
+            parsed[field] = value;
+        }
+        return { ports: parsed };
+    }
+    async #handlePorts(response, fields) {
+        if (!this.#options.onPorts) {
+            await this.#render('bridge', response, {
+                error: 'The ports are set through the environment on this server.',
+            });
+            return;
+        }
+        const read = _a.#readPorts(fields);
+        if ('error' in read) {
+            await this.#render('bridge', response, { error: read.error });
+            return;
+        }
+        const parsed = read.ports;
+        const error = await this.#options.onPorts(parsed);
+        await this.#render('bridge', response, {
+            ...(error
+                ? { error }
+                : { notice: `Ports saved: IMAP ${parsed.imapPort}, SMTP ${parsed.smtpPort}.` }),
+        });
+    }
+    async #handleTest(response) {
+        if (!this.#options.onTest) {
+            await this.#render('bridge', response, { error: 'This server cannot test the connection.' });
+            return;
+        }
+        const result = await this.#options.onTest();
+        await this.#render('bridge', response, result.ok ? { notice: result.message } : { error: result.message });
+    }
+    async #handleUnlock(response, fields) {
+        const master = fields.master ?? '';
+        if (!master) {
+            await this.#render('overview', response, { error: 'The master password is required.' });
+            return;
+        }
+        if (!this.#options.onUnlock) {
+            await this.#render('overview', response, {
+                error: 'This server cannot open encrypted credential files.',
+            });
+            return;
+        }
+        const error = await this.#options.onUnlock(master);
+        await this.#render('overview', response, { ...(error ? { error } : {}) });
+    }
+    /**
+     * Reads the storage option out of the form.
+     *
+     * It arrives as a radio value now rather than being remembered from an
+     * earlier post, so it is ordinary untrusted input: a name that is not one of
+     * the four, or one that cannot work on this machine, falls back to the
+     * recommendation rather than being passed on.
+     */
+    async #storeFromForm(fields) {
+        const stores = await listStores();
+        const wanted = fields.store;
+        if (!wanted || !(wanted in STORE_DESCRIPTIONS))
+            return { store: recommend(stores) };
+        const kind = wanted;
+        const entry = stores.find((s) => s.kind === kind);
+        if (!entry?.available) {
+            return {
+                store: recommend(stores),
+                error: `${STORE_DESCRIPTIONS[kind].title} cannot be used on this machine. ${entry?.reason ?? ''}`,
+            };
+        }
+        return { store: kind };
+    }
+    async #handleSignIn(response, fields) {
+        const address = (fields.address ?? '').trim();
+        const password = fields.password ?? '';
+        const { store, error: storeError } = await this.#storeFromForm(fields);
+        if (storeError) {
+            await this.#render('overview', response, { error: storeError, address, store });
+            return;
+        }
+        // The ports come first, before the credentials are tried. Somebody whose
+        // Bridge listens elsewhere would otherwise be told their password is wrong,
+        // because the attempt went to a port with nothing behind it. Only when the
+        // form carries them: the block is read-only when the environment decided.
+        if (this.#options.onPorts && fields.imapPort !== undefined) {
+            const read = _a.#readPorts(fields);
+            if ('error' in read) {
+                await this.#render('overview', response, {
+                    error: read.error,
+                    address,
+                    store,
+                    showAdvanced: true,
+                });
+                return;
+            }
+            const failed = await this.#options.onPorts(read.ports);
+            if (failed) {
+                await this.#render('overview', response, {
+                    error: failed,
+                    address,
+                    store,
+                    showAdvanced: true,
+                });
+                return;
+            }
+        }
+        if (!address || !password) {
+            await this.#render('overview', response, {
+                error: 'Both the address and the Bridge password are required.',
+                address,
+                store,
+            });
+            return;
+        }
+        // Checked here rather than in the session, because this is where the second
+        // field exists to compare against. A typo in a password nothing can recover
+        // has to be caught before it is used to encrypt anything.
+        //
+        // Read only for the store that uses it. The field is in the document for
+        // every option now, hidden by CSS, so a value left behind by switching
+        // options would otherwise be taken for a choice.
+        let master;
+        if (store === 'encrypted-file') {
+            master = fields.master ?? '';
+            if (!master) {
+                await this.#render('overview', response, {
+                    error: 'The encrypted file needs a master password to encrypt the credentials with.',
+                    address,
+                    store,
+                });
+                return;
+            }
+            if (master !== (fields.masterRepeat ?? '')) {
+                await this.#render('overview', response, {
+                    error: 'The two master passwords do not match.',
+                    address,
+                    store,
+                });
+                return;
+            }
+        }
+        const error = await this.#options.onSignIn({ user: address, pass: password }, store, master);
+        // No password is kept anywhere in this class, whatever the outcome.
+        await this.#render('overview', response, {
+            ...(error ? { error, address, store } : {}),
+        });
+    }
+}
+_a = WebInterface;
+//# sourceMappingURL=server.js.map

package/dist/web/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;;AAEH,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAA;AAEhG,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAA;AAC5F,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAuB,MAAM,eAAe,CAAA;AAC5G,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACjE,OAAO,EACL,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,cAAc,GACf,MAAM,eAAe,CAAA;AAGtB;;;;;GAKG;AACH,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,CAAA;AAE/B,mEAAmE;AACnE,MAAM,YAAY,GAAG,WAAW,CAAA;AAEhC;;;;;;GAMG;AACH,MAAM,aAAa,GAAwC;IACzD,GAAG,EAAE,UAAU;IACf,YAAY,EAAE,WAAW;IACzB,SAAS,EAAE,QAAQ;IACnB,cAAc,EAAE,aAAa;IAC7B,WAAW,EAAE,UAAU;CACxB,CAAA;AAED,8EAA8E;AAC9E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,MAAM,CAAC,aAAa,CAAa,CAAC,CAAA;AAE1E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAA;AAEpC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAA;AA4F/B;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAwB,EAAE,QAAQ,GAAG,cAAc;IAC1E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,IAAI,OAAO,GAAG,KAAK,CAAA;QAEnB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,OAAO;gBAAE,OAAM;YACnB,IAAI,IAAI,KAAK,CAAC,MAAM,CAAA;YACpB,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACpB,OAAO,GAAG,IAAI,CAAA;gBACd,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;gBACjB,wEAAwE;gBACxE,qEAAqE;gBACrE,kEAAkE;gBAClE,OAAO,CAAC,MAAM,EAAE,CAAA;gBAChB,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;gBACvC,OAAM;YACR,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC,CAAC,CAAA;QACF,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,OAAO;gBAAE,OAAM;YACnB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;YAC1E,MAAM,MAAM,GAA2B,EAAE,CAAA;YACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YACtD,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QACtC,CAAC,CAAC,CAAA;QACF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,IAAI,CAAC,OAAO;gBAAE,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QACxD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,OAAO,YAAY;IACvB,OAAO,CAAoB;IAC3B,QAAQ,GAAmB,aAAa,EAAE,CAAA;IAC1C,KAAK,GAAG,CAAC,CAAA;IACA,QAAQ,CAAqB;IAC7B,OAAO,CAA2B;IAE3C,YAAY,OAA4B;QACtC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAA;IACtF,CAAC;IAED,gEAAgE;IAChE,IAAI,GAAG;QACL,OAAO,UAAU,YAAY,IAAI,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;IACnF,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,OAAO,EAAE,SAAS,KAAK,IAAI,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO,EAAE,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,CAAA;QAE5C,MAAM,KAAK,GAAG,GAAW,EAAE;YACzB,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;gBACjD,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;oBAC9C,qEAAqE;oBACrE,wBAAwB;oBACxB,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,2BAA2B,EAAE,iBAAiB,CAAC,CAAA;gBAC3E,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;YACF,mEAAmE;YACnE,OAAO,CAAC,cAAc,GAAG,MAAM,CAAA;YAC/B,OAAO,CAAC,cAAc,GAAG,MAAM,CAAA;YAC/B,OAAO,OAAO,CAAA;QAChB,CAAC,CAAA;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,gBAAgB,CAAA;QACrD,wDAAwD;QACxD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAA;QACjD,IAAI,MAA0B,CAAA;QAC9B,IAAI,SAA4B,CAAA;QAEhC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;YAC/C,2EAA2E;YAC3E,qBAAqB;YACrB,MAAM,OAAO,GAAG,KAAK,EAAE,CAAA;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC1C,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;oBAC/C,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;oBAC9B,uEAAuE;oBACvE,gCAAgC;oBAChC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,GAAG,EAAE;wBAC3C,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;wBACxC,OAAO,EAAE,CAAA;oBACX,CAAC,CAAC,CAAA;gBACJ,CAAC,CAAC,CAAA;gBACF,MAAM,GAAG,OAAO,CAAA;gBAChB,SAAS,GAAG,SAAS,CAAA;gBACrB,MAAK;YACP,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,EAAE,CAAA;gBACf,SAAS,GAAG,KAAc,CAAA;gBAC1B,IAAK,KAA2B,CAAC,IAAI,KAAK,YAAY;oBAAE,MAAK;gBAC7D,uEAAuE;YACzE,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,GAAI,SAA2C,EAAE,IAAI,CAAA;YAC/D,MAAM,IAAI,KAAK,CACb,IAAI,KAAK,YAAY;gBACnB,CAAC,CAAC,SAAS,MAAM,OAAO,MAAM,GAAG,QAAQ,GAAG,CAAC,wCAAwC;oBACnF,0DAA0D;gBAC5D,CAAC,CAAC,sCAAsC,SAAS,EAAE,OAAO,IAAI,gBAAgB,EAAE,CACnF,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;QAChC,IAAI,CAAC,KAAK,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QACtE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;QACrB,OAAO,IAAI,CAAC,GAAG,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAA;QAC3B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;QACxB,IAAI,CAAC,MAAM;YAAE,OAAM;QAEnB,4EAA4E;QAC5E,4EAA4E;QAC5E,uEAAuE;QACvE,MAAM,CAAC,oBAAoB,EAAE,CAAA;QAC7B,MAAM,CAAC,mBAAmB,EAAE,CAAA;QAC5B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACrE,CAAC;IAED,yDAAyD;IACzD,WAAW;QACT,IAAI,CAAC,QAAQ,GAAG,aAAa,EAAE,CAAA;QAC/B,OAAO,IAAI,CAAC,GAAG,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,QAAwB,EAAE,MAAc,EAAE,WAAmB,EAAE,IAAY;QAC/E,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,eAAe,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAA;QACjF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACpB,CAAC;IAED,OAAO,CAAC,QAAwB,EAAE,MAAM,GAAG,GAAG;QAC5C,2EAA2E;QAC3E,4DAA4D;QAC5D,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,0BAA0B,EAAE,aAAa,EAAE,CAAC,CAAA;IAC3E,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAwB,EAAE,QAAwB;QAC9D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,YAAY,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;QAC/E,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAA;QACzB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAA;QACtC,MAAM,OAAO,GAAG,MAAM,KAAK,MAAM,CAAA;QAEjC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;YAC3B,OAAM;QACR,CAAC;QAED,2EAA2E;QAC3E,uEAAuE;QACvE,kEAAkE;QAClE,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5B,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,eAAe,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAA;YACxE,QAAQ,CAAC,GAAG,EAAE,CAAA;YACd,OAAM;QACR,CAAC;QAED,yEAAyE;QACzE,6EAA6E;QAC7E,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;QAChF,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,yEAAyE;YACzE,wEAAwE;YACxE,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;YACzC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;YAC3B,OAAM;QACR,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAA;QACpB,MAAM,KAAK,GAAG,YAAY,CAAC;YACzB,OAAO;YACP,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,cAAc,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;YAC1D,OAAO;YACP,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAC,CAAA;QAEF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,0EAA0E;YAC1E,wDAAwD;YACxD,IAAI,CAAC,OAAO,CAAC,2BAA2B,MAAM,OAAO,IAAI,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;YAC9E,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YACtB,OAAM;QACR,CAAC;QAED,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;YACnC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;gBACrC,OAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,OAAO,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC1C,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;YACtD,OAAM;QACR,CAAC;QACD,IAAI,OAAO,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;YAC9C,OAAM;QACR,CAAC;QACD,IAAI,OAAO,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAC3C,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;YAChC,OAAM;QACR,CAAC;QACD,IAAI,OAAO,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;YAC/C,OAAM;QACR,CAAC;QACD,IAAI,OAAO,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;YAC/C,OAAM;QACR,CAAC;QACD,IAAI,OAAO,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC7C,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,CAAA;YAC1C,uEAAuE;YACvE,kEAAkE;YAClE,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;YACxC,OAAM;QACR,CAAC;QACD,IAAI,OAAO,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAA;YAC/B,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;YACxC,OAAM;QACR,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IACxB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO,CACX,OAAgB,EAChB,QAAwB,EACxB,OAAO,GAOH,EAAE;QAEN,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,OAAO,CAAA;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAA;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAA;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;QAE/C,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,UAAU,CAAC;gBACtB,KAAK;gBACL,UAAU;gBACV,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC;gBACzC,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC;gBAC3D,IAAI,EAAE,MAAM,CAAC,aAAa,IAAI,qBAAqB;gBACnD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5B,CAAC,CAAA;YACF,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,0BAA0B,EAAE,IAAI,CAAC,CAAA;YAC3D,OAAM;QACR,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAA;YACjC,MAAM,IAAI,GAAG,SAAS,CAAC;gBACrB,KAAK;gBACL,UAAU;gBACV,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC;gBAC1C,MAAM;gBACN,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC;gBAC5B,gBAAgB,EAAE,oBAAoB,CAAC,MAAM,CAAC;gBAC9C,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS;gBAChD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/B,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1C,CAAC,CAAA;YACF,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,0BAA0B,EAAE,IAAI,CAAC,CAAA;YAC3D,OAAM;QACR,CAAC;QAED,MAAM,OAAO,GAAG;YACd,UAAU;YACV,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAA;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS;YACjC,CAAC,CAAC,EAAE,UAAU,EAAE,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE;YAC5D,CAAC,CAAC,EAAE,CAAA;QAEN,IAAI,IAAY,CAAA;QAChB,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,WAAW;gBACd,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;gBAClD,MAAK;YAEP,KAAK,QAAQ;gBACX,IAAI,GAAG,aAAa,CAAC;oBACnB,KAAK;oBACL,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;oBACnD,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC;oBACtD,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,cAAc,EAAE,MAAM,CAAC,cAAc;oBACrC,cAAc,EAAE,MAAM,CAAC,cAAc;oBACrC,qDAAqD;oBACrD,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS;oBAChD,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClE,GAAG,OAAO;iBACX,CAAC,CAAA;gBACF,MAAK;YAEP,KAAK,aAAa;gBAChB,IAAI,GAAG,kBAAkB,CAAC;oBACxB,KAAK;oBACL,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;oBAClD,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtD,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5D,GAAG,UAAU;oBACb,GAAG,OAAO;iBACX,CAAC,CAAA;gBACF,MAAK;YAEP,KAAK,UAAU,EAAE,CAAC;gBAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;gBAC7E,IAAI,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC,CAAA;gBAC1D,MAAK;YACP,CAAC;YAED;gBACE,IAAI,GAAG,eAAe,CAAC;oBACrB,KAAK;oBACL,SAAS,EAAE,IAAI;oBACf,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtD,GAAG,UAAU;oBACb,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnF,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnF,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChF,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,cAAc,EAAE,MAAM,CAAC,cAAc;oBACrC,cAAc,EAAE,MAAM,CAAC,cAAc;oBACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,IAAI;oBAClC,OAAO,EAAE,IAAI,CAAC,KAAK;oBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;oBAC9B,GAAG,OAAO;iBACX,CAAC,CAAA;QACN,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,0BAA0B,EAAE,IAAI,CAAC,CAAA;IAC7D,CAAC;IAED;;;;;;OAMG;IACH,cAAc,CAAC,OAAgB;QAC7B,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,KAAK,IAAI;YAAE,OAAO,WAAW,CAAA;QAClE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe;YAAE,OAAO,OAAO,CAAA;QAClD,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IAC7E,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,oBAAoB,CACxB,QAAwB,EACxB,MAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAA;QACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,IAAgB,CAAC,CAAC,CAAC,UAAU,CAAA;QACpF,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IACpC,CAAC;IAGD;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CACpB,KAAa,EACb,OAAyE;QAEzE,IAAI,SAAS,GAA0E,EAAE,CAAA;QACzF,IAAI,KAAK,GAAuB,OAAO,CAAC,KAAK,CAAA;QAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAA;YAChD,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBACjB,KAAK,GAAI,OAAiB,CAAC,OAAO,CAAA;YACpC,CAAC;QACH,CAAC;QAED,OAAO,cAAc,CAAC;YACpB,KAAK;YACL,SAAS;YACT,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,UAAU,CACf,MAA8B;QAE9B,MAAM,MAAM,GAA4C,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAA;QACpF,KAAK,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,UAAU,CAAU,EAAE,CAAC;YACtD,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;YACxC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;YACzB,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;gBACnE,OAAO;oBACL,KAAK,EACH,IAAI,GAAG,8BAA8B,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI;wBAC/E,8CAA8C;iBACjD,CAAA;YACH,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAA;QACvB,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;IAC1B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAwB,EAAE,MAA8B;QACzE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE;gBACrC,KAAK,EAAE,2DAA2D;aACnE,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,MAAM,IAAI,GAAG,EAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;YAC7D,OAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAA;QAEzB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACjD,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE;YACrC,GAAG,CAAC,KAAK;gBACP,CAAC,CAAC,EAAE,KAAK,EAAE;gBACX,CAAC,CAAC,EAAE,MAAM,EAAE,qBAAqB,MAAM,CAAC,QAAQ,UAAU,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;SAClF,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAAwB;QACxC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC,CAAA;YAC5F,OAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAA;QAC3C,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EACnC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CACnE,CAAA;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAwB,EAAE,MAA8B;QAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAA;QAClC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAA;YACvF,OAAM;QACR,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE;gBACvC,KAAK,EAAE,qDAAqD;aAC7D,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAClD,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAC3E,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,cAAc,CAClB,MAA8B;QAE9B,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAA;QACjC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAA;QAC3B,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,kBAAkB,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAA;QAEnF,MAAM,IAAI,GAAG,MAAmB,CAAA;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;QACjD,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC;YACtB,OAAO;gBACL,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC;gBACxB,KAAK,EAAE,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,oCAAoC,KAAK,EAAE,MAAM,IAAI,EAAE,EAAE;aAClG,CAAA;QACH,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACxB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAwB,EAAE,MAA8B;QAC1E,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAA;QACtC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;QAEtE,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;YAC/E,OAAM;QACR,CAAC;QAED,yEAAyE;QACzE,4EAA4E;QAC5E,2EAA2E;QAC3E,0EAA0E;QAC1E,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3D,MAAM,IAAI,GAAG,EAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YAC5C,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;gBACpB,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE;oBACvC,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,OAAO;oBACP,KAAK;oBACL,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAA;gBACF,OAAM;YACR,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACtD,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE;oBACvC,KAAK,EAAE,MAAM;oBACb,OAAO;oBACP,KAAK;oBACL,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAA;gBACF,OAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE;gBACvC,KAAK,EAAE,wDAAwD;gBAC/D,OAAO;gBACP,KAAK;aACN,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,4EAA4E;QAC5E,4EAA4E;QAC5E,0DAA0D;QAC1D,EAAE;QACF,yEAAyE;QACzE,uEAAuE;QACvE,iDAAiD;QACjD,IAAI,MAA0B,CAAA;QAC9B,IAAI,KAAK,KAAK,gBAAgB,EAAE,CAAC;YAC/B,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAA;YAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE;oBACvC,KAAK,EAAE,6EAA6E;oBACpF,OAAO;oBACP,KAAK;iBACN,CAAC,CAAA;gBACF,OAAM;YACR,CAAC;YACD,IAAI,MAAM,KAAK,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE;oBACvC,KAAK,EAAE,wCAAwC;oBAC/C,OAAO;oBACP,KAAK;iBACN,CAAC,CAAA;gBACF,OAAM;YACR,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;QAC5F,oEAAoE;QACpE,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE;YACvC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CAAA;IACJ,CAAC;CACF"}