@sendbird/cli 0.0.0-stage → 0.4.0

package/dist/oauth.js

@@ -0,0 +1,493 @@
+import { openBrowser as defaultOpenBrowser } from "./browser.js";
+/** Browser OAuth for Gate's environment-bound Sendbird CLI public client. */
+import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
+import { lstatSync, readFileSync, renameSync, writeFileSync, unlinkSync, } from "node:fs";
+import { createServer } from "node:http";
+import { join } from "node:path";
+import { withCredentialLock } from "./oauth-lock.js";
+import { z } from "zod";
+import { CliError, configDir, deleteSecret, getSecret, origins, request, setSecret, } from "./core.js";
+import { verifySchema } from "./catalog.js";
+import { callbackHtml } from "./oauth-callback.js";
+const clientId = "sendbird-cli";
+const scope = "cli:dashboard offline_access";
+const credentialPrefix = "sendbird-oauth-v1:";
+const Credential = z.object({
+    env: z.enum(["prod", "staging"]),
+    accessToken: z.string().min(1),
+    accessExpiresAt: z.number().int().positive(),
+    refreshToken: z.string().min(1).optional(),
+    refreshExpiresAt: z.number().int().positive().optional(),
+    scope: z.string().min(1),
+});
+const TokenResponse = z.object({
+    access_token: z.string().min(1),
+    token_type: z.string(),
+    expires_in: z.number().int().positive(),
+    scope: z.string().min(1),
+    refresh_token: z.string().min(1).optional(),
+    refresh_token_expires_in: z.number().int().nonnegative().optional(),
+});
+const Discovery = z.object({
+    issuer: z.string().url(),
+    authorization_endpoint: z.string().url(),
+    token_endpoint: z.string().url(),
+    revocation_endpoint: z.string().url(),
+    code_challenge_methods_supported: z.array(z.string()),
+    scopes_supported: z.array(z.string()),
+});
+export function isOAuthSecret(raw) {
+    return raw?.startsWith(credentialPrefix) ?? false;
+}
+function decode(raw) {
+    let value;
+    try {
+        value = JSON.parse(raw.slice(credentialPrefix.length));
+    }
+    catch {
+        throw new CliError("E_AUTH", "Saved OAuth credentials are invalid; log in again", 4);
+    }
+    const parsed = Credential.safeParse(value);
+    if (!parsed.success)
+        throw new CliError("E_AUTH", "Saved OAuth credentials are invalid; log in again", 4);
+    return parsed.data;
+}
+function stored(name) {
+    const raw = getSecret(name);
+    return isOAuthSecret(raw) ? decode(raw) : undefined;
+}
+function save(name, credential) {
+    setSecret(name, credentialPrefix + JSON.stringify(Credential.parse(credential)));
+}
+function oauthError(status, body, operation) {
+    const rawError = body && typeof body === "object" && "error" in body
+        ? String(body.error)
+        : undefined;
+    const error = rawError && /^[a-z_]{1,60}$/.test(rawError) ? rawError : undefined;
+    return new CliError(status === 400 && error === "invalid_grant" ? "E_AUTH" : "E_UPSTREAM", `${operation} failed (${status}${error ? `: ${error}` : ""})`, status === 400 || status === 401 ? 4 : 8);
+}
+async function formRequest(url, params, fetcher, operation, allowEmpty = false) {
+    let response;
+    try {
+        response = await fetcher(url, {
+            method: "POST",
+            headers: {
+                Accept: "application/json",
+                "Content-Type": "application/x-www-form-urlencoded",
+            },
+            body: new URLSearchParams(params),
+            redirect: "error",
+            signal: AbortSignal.timeout(15_000),
+        });
+    }
+    catch {
+        throw new CliError("E_NETWORK", `${operation} outcome is unknown; log in again`, 7);
+    }
+    let body;
+    try {
+        body = await response.json();
+    }
+    catch {
+        if (response.ok && !allowEmpty)
+            throw new CliError("E_SCHEMA", `${operation} returned invalid JSON`, 8);
+    }
+    if (!response.ok)
+        throw oauthError(response.status, body, operation);
+    return body;
+}
+function parsePair(body, env, previous) {
+    const pair = TokenResponse.safeParse(body);
+    if (!pair.success || pair.data.token_type.toLowerCase() !== "bearer")
+        throw new CliError("E_SCHEMA", "Gate returned an invalid OAuth token response", 8);
+    if (!pair.data.scope.split(" ").includes("cli:dashboard"))
+        throw new CliError("E_AUTH", "Gate did not grant CLI Dashboard scope", 4);
+    if (previous && !pair.data.refresh_token)
+        throw new CliError("E_SCHEMA", "Gate refresh response omitted the rotated token", 8);
+    const now = Date.now();
+    const refreshToken = pair.data.refresh_token ?? previous?.refreshToken;
+    const refreshExpiresAt = pair.data.refresh_token_expires_in !== undefined
+        ? now + pair.data.refresh_token_expires_in * 1000
+        : previous?.refreshExpiresAt;
+    return {
+        env,
+        accessToken: pair.data.access_token,
+        accessExpiresAt: now + pair.data.expires_in * 1000,
+        refreshToken,
+        refreshExpiresAt,
+        scope: pair.data.scope,
+    };
+}
+function sameOrigin(url, origin) {
+    // Discovery.safeParse has already validated every endpoint URL.
+    return new URL(url).origin === origin;
+}
+async function discover(origin, fetcher) {
+    let response;
+    try {
+        response = await fetcher(`${origin}/.well-known/oauth-authorization-server`, {
+            redirect: "error",
+            signal: AbortSignal.timeout(15_000),
+        });
+    }
+    catch {
+        throw new CliError("E_NETWORK", "Could not discover Gate OAuth endpoints", 7);
+    }
+    if (!response.ok)
+        throw new CliError("E_AUTH", "Gate OAuth discovery is unavailable", 4);
+    const parsed = Discovery.safeParse(await response.json());
+    if (!parsed.success ||
+        parsed.data.issuer !== origin ||
+        ![
+            parsed.data.authorization_endpoint,
+            parsed.data.token_endpoint,
+            parsed.data.revocation_endpoint,
+        ].every((url) => sameOrigin(url, origin)) ||
+        !parsed.data.code_challenge_methods_supported.includes("S256") ||
+        !parsed.data.scopes_supported.includes("cli:dashboard"))
+        throw new CliError("E_AUTH", "Gate has not enabled CLI OAuth for this environment", 4);
+    return parsed.data;
+}
+function matchesState(expected, actual) {
+    const a = Buffer.from(expected);
+    const b = Buffer.from(actual);
+    return a.length === b.length && timingSafeEqual(a, b);
+}
+async function listenForCode(state, timeoutMs) {
+    let resolveCode;
+    let rejectCode;
+    let completed = false;
+    const code = new Promise((resolve, reject) => {
+        resolveCode = resolve;
+        rejectCode = reject;
+    });
+    const sockets = new Set();
+    const server = createServer((req, res) => {
+        const url = new URL(req.url ?? "/", "http://127.0.0.1");
+        res.setHeader("Cache-Control", "no-store");
+        res.setHeader("Content-Type", "text/html; charset=utf-8");
+        res.setHeader("Referrer-Policy", "no-referrer");
+        res.setHeader("X-Content-Type-Options", "nosniff");
+        res.setHeader("Content-Security-Policy", "default-src 'none'; style-src 'unsafe-inline'; base-uri 'none'; form-action 'none'");
+        if (completed ||
+            req.method !== "GET" ||
+            url.pathname !== "/oauth/callback") {
+            res.writeHead(404).end(callbackHtml("invalid"));
+            return;
+        }
+        if (!matchesState(state, url.searchParams.get("state") ?? "")) {
+            res.writeHead(400).end(callbackHtml("invalid"));
+            return;
+        }
+        completed = true;
+        if (url.searchParams.get("error")) {
+            res
+                .writeHead(200)
+                .end(callbackHtml("declined"), () => rejectCode(new CliError("E_AUTH", "CLI authorization was declined", 4)));
+            return;
+        }
+        const value = url.searchParams.get("code");
+        if (!value) {
+            res
+                .writeHead(400)
+                .end(callbackHtml("invalid"), () => rejectCode(new CliError("E_AUTH", "OAuth callback had no code", 4)));
+            return;
+        }
+        res.writeHead(200).end(callbackHtml("received"), () => resolveCode(value));
+    });
+    server.on("connection", (socket) => {
+        sockets.add(socket);
+        socket.on("close", () => sockets.delete(socket));
+    });
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(0, "127.0.0.1", resolve);
+    });
+    const address = server.address();
+    if (!address || typeof address === "string")
+        throw new CliError("E_NETWORK", "Could not bind OAuth callback", 7);
+    const callback = `http://127.0.0.1:${address.port}/oauth/callback`;
+    const close = () => {
+        if (server.listening)
+            server.close();
+        // A browser may leave a keep-alive or incomplete request open. Such a
+        // socket must not keep the one-shot CLI process alive after OAuth ends.
+        for (const socket of sockets)
+            socket.destroy();
+    };
+    return {
+        callback,
+        wait: async () => {
+            let timeout;
+            try {
+                return await Promise.race([
+                    code,
+                    new Promise((_, reject) => {
+                        timeout = setTimeout(() => reject(new CliError("E_AUTH", "Browser login timed out", 4)), timeoutMs);
+                    }),
+                ]);
+            }
+            finally {
+                clearTimeout(timeout);
+                close();
+            }
+        },
+        close,
+    };
+}
+function generationPath(name) {
+    return join(configDir(), `oauth-${Buffer.from(name).toString("hex")}.generation`);
+}
+function generation(name) {
+    const path = generationPath(name);
+    let stat;
+    try {
+        stat = lstatSync(path);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return "";
+        throw error;
+    }
+    if (!stat.isFile() || stat.isSymbolicLink())
+        throw new CliError("E_SECRET_STORE", "OAuth generation must be a regular file", 4);
+    const value = readFileSync(path, "utf8");
+    if (/^[a-f0-9]{32}$/.test(value))
+        return value;
+    // Callers hold the credential lock. Replacing a corrupt non-secret marker
+    // also invalidates approvals that captured the previous generation.
+    return writeGeneration(name);
+}
+function advanceGeneration(name) {
+    generation(name); // Preserve the regular-file/symlink checks.
+    return writeGeneration(name);
+}
+function writeGeneration(name) {
+    const path = generationPath(name);
+    const value = randomBytes(16).toString("hex");
+    const tmp = `${path}.${process.pid}.${randomBytes(4).toString("hex")}.tmp`;
+    try {
+        writeFileSync(tmp, value, {
+            mode: 0o600,
+            flag: "wx",
+        });
+        renameSync(tmp, path);
+        return value;
+    }
+    finally {
+        try {
+            unlinkSync(tmp);
+        }
+        catch {
+            /* Non-secret temporary marker cleanup. */
+        }
+    }
+}
+export async function loginOAuth(name, env, options = {}) {
+    // Check the credential store before opening a browser or exchanging a code.
+    // In particular, a legacy plaintext file must not strand a fresh grant.
+    const expectedGeneration = await withCredentialLock(name, async () => {
+        stored(name);
+        return generation(name);
+    });
+    const fetcher = options.fetcher ?? fetch;
+    const origin = origins[env];
+    const endpoints = await discover(origin, fetcher);
+    const state = randomBytes(32).toString("base64url");
+    const verifier = randomBytes(32).toString("base64url");
+    const challenge = createHash("sha256").update(verifier).digest("base64url");
+    const listener = await listenForCode(state, options.timeoutMs ?? 180_000);
+    try {
+        const url = new URL(endpoints.authorization_endpoint);
+        for (const [key, value] of Object.entries({
+            response_type: "code",
+            client_id: clientId,
+            redirect_uri: listener.callback,
+            code_challenge: challenge,
+            code_challenge_method: "S256",
+            state,
+            scope,
+        }))
+            url.searchParams.set(key, value);
+        const entryUrl = options.entry === "signup"
+            ? (() => {
+                const signup = new URL(env === "prod"
+                    ? "https://dashboard.sendbird.com/auth/signup"
+                    : "https://dashboard-dev.sendbird.com/auth/signup");
+                signup.searchParams.set("next", url.toString());
+                return signup.toString();
+            })()
+            : url.toString();
+        options.onUrl?.(entryUrl);
+        (options.openBrowser ?? defaultOpenBrowser)(entryUrl);
+        const authorizationCode = await listener.wait();
+        const pair = parsePair(await formRequest(endpoints.token_endpoint, {
+            grant_type: "authorization_code",
+            client_id: clientId,
+            code: authorizationCode,
+            code_verifier: verifier,
+            redirect_uri: listener.callback,
+        }, fetcher, "OAuth code exchange"), env);
+        // Gate verify2 currently sends Set-Cookie for Bearer callers. Never persist it.
+        let identity;
+        try {
+            const raw = await request({ origin, env, bearer: pair.accessToken, fetch: fetcher }, {
+                method: "GET",
+                path: "/dashboard/auth/verify2/",
+            });
+            const parsed = verifySchema.safeParse(raw);
+            if (!parsed.success)
+                throw new CliError("E_SCHEMA", "OAuth identity response has changed", 8);
+            identity = parsed.data;
+        }
+        catch (error) {
+            await revokePair(pair, fetcher);
+            throw error;
+        }
+        try {
+            await withCredentialLock(name, async () => {
+                if (generation(name) !== expectedGeneration)
+                    throw new CliError("E_AUTH", "Login was superseded by another authentication operation; start a new login", 4);
+                const current = stored(name);
+                try {
+                    // Keep the old remote pair usable until the replacement is stored.
+                    save(name, pair);
+                    advanceGeneration(name);
+                }
+                catch (error) {
+                    try {
+                        const after = stored(name);
+                        const oldStillStored = current &&
+                            after &&
+                            current.accessToken === after.accessToken &&
+                            current.refreshToken === after.refreshToken;
+                        if (!oldStillStored) {
+                            if (current)
+                                save(name, current);
+                            else
+                                deleteSecret(name);
+                        }
+                    }
+                    catch {
+                        try {
+                            deleteSecret(name);
+                        }
+                        catch {
+                            /* Preserve the storage failure. */
+                        }
+                    }
+                    throw error;
+                }
+                if (current)
+                    await revokePair(current, fetcher);
+            });
+        }
+        catch (error) {
+            await revokePair(pair, fetcher);
+            throw error;
+        }
+        return identity;
+    }
+    finally {
+        listener.close();
+    }
+}
+async function refresh(name, fetcher, expectedEnv) {
+    return withCredentialLock(name, async () => {
+        const current = stored(name);
+        if (!current)
+            throw new CliError("E_AUTH", "OAuth login required", 4);
+        checkEnvironment(current, expectedEnv);
+        if (current.accessExpiresAt > Date.now() + 10_000)
+            return current.accessToken;
+        if (!current.refreshToken ||
+            (current.refreshExpiresAt !== undefined &&
+                current.refreshExpiresAt <= Date.now()))
+            throw new CliError("E_AUTH", "OAuth grant expired; log in again", 4);
+        let pair;
+        try {
+            pair = parsePair(await formRequest(`${origins[current.env]}/oauth/token`, {
+                grant_type: "refresh_token",
+                client_id: clientId,
+                refresh_token: current.refreshToken,
+            }, fetcher, "OAuth refresh"), current.env, current);
+        }
+        catch (error) {
+            // A one-time refresh may have been consumed even if the response failed.
+            // Never retry the same token or claim the prior credential is usable.
+            deleteSecret(name);
+            throw error;
+        }
+        try {
+            save(name, pair);
+        }
+        catch (error) {
+            // The old refresh was consumed. Neither pair is a usable fallback.
+            try {
+                await revokePair(pair, fetcher);
+            }
+            finally {
+                deleteSecret(name);
+            }
+            throw error;
+        }
+        return pair.accessToken;
+    });
+}
+function checkEnvironment(credential, expectedEnv) {
+    if (expectedEnv && credential.env !== expectedEnv)
+        throw new CliError("E_AUTH", "Saved OAuth credentials belong to a different environment; log in to this profile again", 4);
+}
+export async function oauthAccessToken(name, fetcher = fetch, expectedEnv) {
+    const current = stored(name);
+    if (!current)
+        throw new CliError("E_AUTH", "OAuth login required", 4);
+    checkEnvironment(current, expectedEnv);
+    if (current.accessExpiresAt > Date.now() + 10_000)
+        return current.accessToken;
+    return refresh(name, fetcher, expectedEnv);
+}
+async function revokePair(current, fetcher) {
+    let remoteRevocation = "complete";
+    for (const [token, hint] of [
+        [current.refreshToken, "refresh_token"],
+        [current.accessToken, "access_token"],
+    ]) {
+        if (!token)
+            continue;
+        try {
+            await formRequest(`${origins[current.env]}/oauth/revoke`, {
+                client_id: clientId,
+                token,
+                token_type_hint: hint,
+            }, fetcher, "OAuth revoke", true);
+        }
+        catch {
+            remoteRevocation = "unknown";
+        }
+    }
+    return remoteRevocation;
+}
+export async function logoutOAuth(name, fetcher = fetch) {
+    return withCredentialLock(name, async () => {
+        const raw = getSecret(name);
+        // Also cancel a browser login waiting for approval, even with no tokens.
+        advanceGeneration(name);
+        let current;
+        try {
+            current = isOAuthSecret(raw) ? decode(raw) : undefined;
+        }
+        catch {
+            deleteSecret(name);
+            return { remote_revocation: "unknown" };
+        }
+        if (!current) {
+            if (raw)
+                deleteSecret(name);
+            return { remote_revocation: "not_applicable" };
+        }
+        const remoteRevocation = await revokePair(current, fetcher);
+        deleteSecret(name);
+        return { remote_revocation: remoteRevocation };
+    });
+}
+//# sourceMappingURL=oauth.js.map

package/dist/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,IAAI,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACjE,6EAA6E;AAC7E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EACL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,aAAa,EACb,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AAEtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,SAAS,EACT,OAAO,EACP,OAAO,EACP,SAAS,GAEV,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,QAAQ,GAAG,cAAc,CAAC;AAChC,MAAM,KAAK,GAAG,8BAA8B,CAAC;AAC7C,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAC9C,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzB,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACpE,CAAC,CAAC;AACH,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAChC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrC,gCAAgC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACrD,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACtC,CAAC,CAAC;AAUH,MAAM,UAAU,aAAa,CAAC,GAAuB;IACnD,OAAO,GAAG,EAAE,UAAU,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC;AACpD,CAAC;AACD,SAAS,MAAM,CAAC,GAAW;IACzB,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,QAAQ,EACR,mDAAmD,EACnD,CAAC,CACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO;QACjB,MAAM,IAAI,QAAQ,CAChB,QAAQ,EACR,mDAAmD,EACnD,CAAC,CACF,CAAC;IACJ,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AACD,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AACD,SAAS,IAAI,CAAC,IAAY,EAAE,UAAsB;IAChD,SAAS,CACP,IAAI,EACJ,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAChE,CAAC;AACJ,CAAC;AACD,SAAS,UAAU,CACjB,MAAc,EACd,IAAa,EACb,SAAiB;IAEjB,MAAM,QAAQ,GACZ,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI;QACjD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,KAAK,GACT,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,OAAO,IAAI,QAAQ,CACjB,MAAM,KAAK,GAAG,IAAI,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,EACrE,GAAG,SAAS,YAAY,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAC7D,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACzC,CAAC;AACJ,CAAC;AACD,KAAK,UAAU,WAAW,CACxB,GAAW,EACX,MAA8B,EAC9B,OAAgB,EAChB,SAAiB,EACjB,UAAU,GAAG,KAAK;IAElB,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC;YACjC,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,GAAG,SAAS,mCAAmC,EAC/C,CAAC,CACF,CAAC;IACJ,CAAC;IACD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,QAAQ,CAAC,EAAE,IAAI,CAAC,UAAU;YAC5B,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,GAAG,SAAS,wBAAwB,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AACD,SAAS,SAAS,CAChB,IAAa,EACb,GAAuB,EACvB,QAAqB;IAErB,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,QAAQ;QAClE,MAAM,IAAI,QAAQ,CAChB,UAAU,EACV,+CAA+C,EAC/C,CAAC,CACF,CAAC;IACJ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;QACvD,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAE,wCAAwC,EAAE,CAAC,CAAC,CAAC;IAC5E,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa;QACtC,MAAM,IAAI,QAAQ,CAChB,UAAU,EACV,iDAAiD,EACjD,CAAC,CACF,CAAC;IACJ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,QAAQ,EAAE,YAAY,CAAC;IACvE,MAAM,gBAAgB,GACpB,IAAI,CAAC,IAAI,CAAC,wBAAwB,KAAK,SAAS;QAC9C,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,wBAAwB,GAAG,IAAI;QACjD,CAAC,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACjC,OAAO;QACL,GAAG;QACH,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;QACnC,eAAe,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI;QAClD,YAAY;QACZ,gBAAgB;QAChB,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;KACvB,CAAC;AACJ,CAAC;AACD,SAAS,UAAU,CAAC,GAAW,EAAE,MAAc;IAC7C,gEAAgE;IAChE,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;AACxC,CAAC;AACD,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,OAAgB;IACtD,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CACtB,GAAG,MAAM,yCAAyC,EAClD;YACE,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,yCAAyC,EACzC,CAAC,CACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAE,qCAAqC,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,IACE,CAAC,MAAM,CAAC,OAAO;QACf,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM;QAC7B,CAAC;YACC,MAAM,CAAC,IAAI,CAAC,sBAAsB;YAClC,MAAM,CAAC,IAAI,CAAC,cAAc;YAC1B,MAAM,CAAC,IAAI,CAAC,mBAAmB;SAChC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC9D,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,eAAe,CAAC;QAEvD,MAAM,IAAI,QAAQ,CAChB,QAAQ,EACR,qDAAqD,EACrD,CAAC,CACF,CAAC;IACJ,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AACD,SAAS,YAAY,CAAC,QAAgB,EAAE,MAAc;IACpD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AACD,KAAK,UAAU,aAAa,CAAC,KAAa,EAAE,SAAiB;IAC3D,IAAI,WAAqC,CAAC;IAC1C,IAAI,UAAoC,CAAC;IACzC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,IAAI,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,WAAW,GAAG,OAAO,CAAC;QACtB,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,MAAM,GAAW,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC3C,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;QAC1D,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAChD,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,CACX,yBAAyB,EACzB,oFAAoF,CACrF,CAAC;QACF,IACE,SAAS;YACT,GAAG,CAAC,MAAM,KAAK,KAAK;YACpB,GAAG,CAAC,QAAQ,KAAK,iBAAiB,EAClC,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QACD,SAAS,GAAG,IAAI,CAAC;QACjB,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,GAAG;iBACA,SAAS,CAAC,GAAG,CAAC;iBACd,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAClC,UAAU,CACR,IAAI,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,EAAE,CAAC,CAAC,CAC5D,CACF,CAAC;YACJ,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG;iBACA,SAAS,CAAC,GAAG,CAAC;iBACd,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CACjC,UAAU,CAAC,IAAI,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC,CACpE,CAAC;YACJ,OAAO;QACT,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE;QACjC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QACzC,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,+BAA+B,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,oBAAoB,OAAO,CAAC,IAAI,iBAAiB,CAAC;IACnE,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,MAAM,CAAC,SAAS;YAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACrC,sEAAsE;QACtE,wEAAwE;QACxE,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACjD,CAAC,CAAC;IACF,OAAO;QACL,QAAQ;QACR,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,IAAI,OAAkD,CAAC;YACvD,IAAI,CAAC;gBACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;oBACxB,IAAI;oBACJ,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;wBAC/B,OAAO,GAAG,UAAU,CAClB,GAAG,EAAE,CACH,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,EAC9D,SAAS,CACV,CAAC;oBACJ,CAAC,CAAC;iBACH,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC;QACD,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CACT,SAAS,EAAE,EACX,SAAS,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CACxD,CAAC;AACJ,CAAC;AACD,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAClE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QACzC,MAAM,IAAI,QAAQ,CAChB,gBAAgB,EAChB,yCAAyC,EACzC,CAAC,CACF,CAAC;IACJ,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,0EAA0E;IAC1E,oEAAoE;IACpE,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AACD,SAAS,iBAAiB,CAAC,IAAY;IACrC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,4CAA4C;IAC9D,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AACD,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3E,IAAI,CAAC;QACH,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE;YACxB,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,UAAU,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,GAAuB,EACvB,UAA0B,EAAE;IAE5B,4EAA4E;IAC5E,wEAAwE;IACxE,MAAM,kBAAkB,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,CAAC,IAAI,CAAC,CAAC;QACb,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;YACxC,aAAa,EAAE,MAAM;YACrB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,QAAQ,CAAC,QAAQ;YAC/B,cAAc,EAAE,SAAS;YACzB,qBAAqB,EAAE,MAAM;YAC7B,KAAK;YACL,KAAK;SACN,CAAC;YACA,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,MAAM,QAAQ,GACZ,OAAO,CAAC,KAAK,KAAK,QAAQ;YACxB,CAAC,CAAC,CAAC,GAAG,EAAE;gBACJ,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,GAAG,KAAK,MAAM;oBACZ,CAAC,CAAC,4CAA4C;oBAC9C,CAAC,CAAC,gDAAgD,CACrD,CAAC;gBACF,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAChD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC3B,CAAC,CAAC,EAAE;YACN,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC,OAAO,CAAC,WAAW,IAAI,kBAAkB,CAAC,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,iBAAiB,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,SAAS,CACpB,MAAM,WAAW,CACf,SAAS,CAAC,cAAc,EACxB;YACE,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,QAAQ;YACnB,IAAI,EAAE,iBAAiB;YACvB,aAAa,EAAE,QAAQ;YACvB,YAAY,EAAE,QAAQ,CAAC,QAAQ;SAChC,EACD,OAAO,EACP,qBAAqB,CACtB,EACD,GAAG,CACJ,CAAC;QACF,gFAAgF;QAChF,IAAI,QAAsC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EACzD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,0BAA0B;aACjC,CACF,CAAC;YACF,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,OAAO;gBACjB,MAAM,IAAI,QAAQ,CAChB,UAAU,EACV,qCAAqC,EACrC,CAAC,CACF,CAAC;YACJ,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAChC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;gBACxC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,kBAAkB;oBACzC,MAAM,IAAI,QAAQ,CAChB,QAAQ,EACR,6EAA6E,EAC7E,CAAC,CACF,CAAC;gBACJ,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC7B,IAAI,CAAC;oBACH,mEAAmE;oBACnE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBACjB,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBAC1B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC;wBACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;wBAC3B,MAAM,cAAc,GAClB,OAAO;4BACP,KAAK;4BACL,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;4BACzC,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,CAAC;wBAC9C,IAAI,CAAC,cAAc,EAAE,CAAC;4BACpB,IAAI,OAAO;gCAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;;gCAC5B,YAAY,CAAC,IAAI,CAAC,CAAC;wBAC1B,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,IAAI,CAAC;4BACH,YAAY,CAAC,IAAI,CAAC,CAAC;wBACrB,CAAC;wBAAC,MAAM,CAAC;4BACP,mCAAmC;wBACrC,CAAC;oBACH,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,OAAO;oBAAE,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAChC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,IAAY,EACZ,OAAgB,EAChB,WAAgC;IAEhC,OAAO,kBAAkB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC;QACtE,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;YAC/C,OAAO,OAAO,CAAC,WAAW,CAAC;QAC7B,IACE,CAAC,OAAO,CAAC,YAAY;YACrB,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;gBACrC,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAEzC,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAE,mCAAmC,EAAE,CAAC,CAAC,CAAC;QACvE,IAAI,IAAgB,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,GAAG,SAAS,CACd,MAAM,WAAW,CACf,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EACrC;gBACE,UAAU,EAAE,eAAe;gBAC3B,SAAS,EAAE,QAAQ;gBACnB,aAAa,EAAE,OAAO,CAAC,YAAY;aACpC,EACD,OAAO,EACP,eAAe,CAChB,EACD,OAAO,CAAC,GAAG,EACX,OAAO,CACR,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yEAAyE;YACzE,sEAAsE;YACtE,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,mEAAmE;YACnE,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAClC,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CACvB,UAAsB,EACtB,WAAgC;IAEhC,IAAI,WAAW,IAAI,UAAU,CAAC,GAAG,KAAK,WAAW;QAC/C,MAAM,IAAI,QAAQ,CAChB,QAAQ,EACR,yFAAyF,EACzF,CAAC,CACF,CAAC;AACN,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAY,EACZ,UAAmB,KAAK,EACxB,WAAgC;IAEhC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC;IACtE,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;QAAE,OAAO,OAAO,CAAC,WAAW,CAAC;IAC9E,OAAO,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAmB,EAAE,OAAgB;IAC7D,IAAI,gBAAgB,GAA2B,UAAU,CAAC;IAC1D,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI;QAC1B,CAAC,OAAO,CAAC,YAAY,EAAE,eAAe,CAAC;QACvC,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC;KACJ,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,CAAC;YACH,MAAM,WAAW,CACf,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EACtC;gBACE,SAAS,EAAE,QAAQ;gBACnB,KAAK;gBACL,eAAe,EAAE,IAAI;aACtB,EACD,OAAO,EACP,cAAc,EACd,IAAI,CACL,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,gBAAgB,GAAG,SAAS,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,UAAmB,KAAK;IACtE,OAAO,kBAAkB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5B,yEAAyE;QACzE,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,OAA+B,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,EAAE,iBAAiB,EAAE,SAAkB,EAAE,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,GAAG;gBAAE,YAAY,CAAC,IAAI,CAAC,CAAC;YAC5B,OAAO,EAAE,iBAAiB,EAAE,gBAAyB,EAAE,CAAC;QAC1D,CAAC;QACD,MAAM,gBAAgB,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5D,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC"}