@software-dlc/cli 0.157.2

package/dist/cli-login.js

@@ -0,0 +1,634 @@
+import { execFile, spawn } from 'node:child_process';
+import { createHash, randomBytes } from 'node:crypto';
+import { link, mkdir, readdir, readFile, stat, unlink, writeFile } from 'node:fs/promises';
+import { createServer } from 'node:http';
+import { homedir, hostname, uptime } from 'node:os';
+import { join } from 'node:path';
+import { z } from 'zod';
+import { getTrustedConnection, normalizeServiceOrigin } from './local/environment-sidecar.js';
+// sdlc login: the local tool signs in to a SoftwareDLC origin through the
+// browser, as the CLI's first-party OAuth client, for the Task API (/api/v1).
+// docs/specs/local-tool-product-boundaries.md (Sign-in: sdlc login).
+export const SDLC_LOGIN_CLIENT_ID = 'b8a3f1c2-6d4e-4a7b-9c1d-2e5f8a0b3c64';
+// The client's registered loopback callbacks; login listens on the first free.
+export const SDLC_LOGIN_PORTS = [41521, 41522, 41523, 41524, 41525];
+export const SDLC_LOGIN_DEFAULT_ORIGIN = 'https://www.softwaredlc.com';
+export const SDLC_LOGIN_USAGE = 'Usage: sdlc login [--url <origin> | --connection <name>] [--no-browser] | logout [--url <origin> | --connection <name>] | auth token [--url <origin> | --connection <name>] | auth status [--url <origin> | --connection <name>]';
+export const SDLC_LOGIN_HELP = `${SDLC_LOGIN_USAGE}\nlogin signs this machine in through the browser and keeps the sign-in in the macOS Keychain, one per origin (default ${SDLC_LOGIN_DEFAULT_ORIGIN}); a new login revokes the origin's previous sign-in. auth token prints a current access token for the Task API, refreshing it first when it expires within a minute; local tools read the token this way, never from the Keychain. auth status prints the origin, scope and expiry, never a token. logout revokes the sign-in and removes it. Trusted connections keep using their API key variable. macOS only in this release; elsewhere, and on CI, use an API key.`;
+const KEYCHAIN_SERVICE = 'software-dlc-login';
+// Refresh when the access token has less than this left.
+const REFRESH_MARGIN_MS = 60_000;
+const LOGIN_TIMEOUT_MS = 5 * 60_000;
+// A token request is given long enough that a slow server's completed
+// rotation is not abandoned (its new tokens would be lost and the old refresh
+// token, now consumed, would end the grant on the next call); a revoke less.
+const TOKEN_TIMEOUT_MS = 90_000;
+const REVOKE_TIMEOUT_MS = 20_000;
+// Longer than a holder's token request and revoke together.
+const LOCK_WAIT_MS = 120_000;
+const stored_sign_in_schema = z
+    .object({
+    version: z.literal(1),
+    origin: z.string(),
+    client_id: z.string(),
+    access_token: z.string().min(1),
+    refresh_token: z.string().min(1),
+    scope: z.string(),
+    // Epoch milliseconds.
+    access_expires_at: z.number().int(),
+    signed_in_at: z.number().int()
+})
+    .strict();
+const token_response_schema = z.object({
+    access_token: z.string().min(1),
+    refresh_token: z.string().min(1),
+    expires_in: z.number().positive(),
+    scope: z.string().optional()
+});
+class LoginError extends Error {
+}
+/**
+ * Runs sdlc login, logout, auth token and auth status. Returns false for any
+ * other command. Results are JSON on standard output, except auth token,
+ * which prints the token alone.
+ */
+export async function runCliLogin(args, overrides = {}) {
+    const [command, subcommand] = args;
+    const auth = command === 'auth';
+    if (command !== 'login' && command !== 'logout' && !auth)
+        return false;
+    if (auth && subcommand !== 'token' && subcommand !== 'status') {
+        throw new LoginError(SDLC_LOGIN_USAGE);
+    }
+    const deps = { ...defaultDeps(), ...overrides };
+    if (deps.platform !== 'darwin') {
+        throw new LoginError('sdlc login keeps its sign-in in the macOS Keychain and runs on macOS only in this release. On other systems, use an API key: sdlc connection add <name> --url <origin> --credential-env <ENV_NAME>.');
+    }
+    const options = parseOptions(auth ? args.slice(2) : args.slice(1), {
+        no_browser: command === 'login'
+    });
+    const origin = options.connection
+        ? normalizeServiceOrigin(await deps.connection_origin(options.connection))
+        : normalizeServiceOrigin(options.url ?? SDLC_LOGIN_DEFAULT_ORIGIN);
+    if (!storableOrigin(origin))
+        throw unstorableOrigin(origin);
+    if (command === 'login') {
+        await login(origin, options.no_browser, deps);
+    }
+    else if (command === 'logout') {
+        await logout(origin, deps);
+    }
+    else if (subcommand === 'token') {
+        deps.out(`${await currentAccessToken(origin, deps)}\n`);
+    }
+    else {
+        deps.out(json(await signInStatus(origin, deps)));
+    }
+    return true;
+}
+function parseOptions(args, allowed) {
+    const options = {
+        no_browser: false
+    };
+    for (let index = 0; index < args.length; index++) {
+        const arg = args[index];
+        if (arg === '--no-browser' && allowed.no_browser && !options.no_browser) {
+            options.no_browser = true;
+            continue;
+        }
+        const match = /^--(url|connection)(?:=(.*))?$/.exec(arg);
+        const value = match ? (match[2] ?? args[++index]) : undefined;
+        if (!match ||
+            !value ||
+            value.startsWith('--') ||
+            options.url !== undefined ||
+            options.connection !== undefined) {
+            throw new LoginError(SDLC_LOGIN_USAGE);
+        }
+        options[match[1]] = value;
+    }
+    return options;
+}
+async function login(origin, no_browser, deps) {
+    const code_verifier = randomBytes(32).toString('base64url');
+    const state = randomBytes(16).toString('base64url');
+    const listener = await listenForCallback(deps.ports, state, deps.timeout_ms);
+    let tokens;
+    try {
+        const authorize = new URL('/oauth/authorize', origin);
+        authorize.search = new URLSearchParams({
+            response_type: 'code',
+            client_id: SDLC_LOGIN_CLIENT_ID,
+            redirect_uri: listener.redirect_uri,
+            code_challenge: createHash('sha256')
+                .update(code_verifier)
+                .digest('base64url'),
+            code_challenge_method: 'S256',
+            state,
+            resource: taskApiResource(origin),
+            device_label: await deps.device_label()
+        }).toString();
+        deps.note(`Sign in to SoftwareDLC in your browser:\n${authorize.toString()}\n`);
+        if (!no_browser) {
+            await deps.open_browser(authorize.toString()).catch(() => {
+                deps.note('Could not open a browser; open the address above.\n');
+            });
+        }
+        const code = await listener.code;
+        tokens = await tokenRequest(origin, deps, {
+            grant_type: 'authorization_code',
+            code,
+            redirect_uri: listener.redirect_uri,
+            code_verifier
+        });
+    }
+    finally {
+        listener.close();
+    }
+    const now = deps.now();
+    const sign_in = {
+        version: 1,
+        origin,
+        client_id: SDLC_LOGIN_CLIENT_ID,
+        access_token: tokens.access_token,
+        refresh_token: tokens.refresh_token,
+        scope: tokens.scope ?? '',
+        access_expires_at: now + tokens.expires_in * 1000,
+        signed_in_at: now
+    };
+    // The new sign-in replaces the old one, whose grant is then revoked, so an
+    // older grant (with other consent choices) never outlives a new login.
+    const previous = await withLoginLock(origin, deps, async () => {
+        const before = await readStored(origin, deps);
+        await deps.store.write(origin, encodeSignIn(sign_in));
+        return before === 'unreadable' ? null : before;
+    });
+    let previous_revoked = null;
+    if (previous && previous.refresh_token !== sign_in.refresh_token) {
+        previous_revoked = await revoke(origin, previous.refresh_token, deps);
+        if (!previous_revoked) {
+            deps.note('Could not revoke the previous sign-in; revoke it under Connected apps in your SoftwareDLC settings.\n');
+        }
+    }
+    deps.out(json({
+        signed_in: true,
+        ...describe(sign_in),
+        previous_sign_in_revoked: previous_revoked
+    }));
+}
+async function logout(origin, deps) {
+    await withLoginLock(origin, deps, async () => {
+        const stored = await readStored(origin, deps);
+        if (stored &&
+            stored !== 'unreadable' &&
+            !(await revoke(origin, stored.refresh_token, deps))) {
+            throw new LoginError(`Could not reach ${origin} to revoke the sign-in, so it was kept. Run sdlc logout again, or revoke it under Connected apps in your SoftwareDLC settings.`);
+        }
+        await deps.store.remove(origin);
+        deps.out(json({ signed_out: true, origin, was_signed_in: !!stored }));
+    });
+}
+/**
+ * The current access token for the origin, refreshed first when it expires
+ * within a minute. The refresh runs under the origin's lock, so concurrent
+ * callers on this machine refresh once: the server revokes a grant whose
+ * rotated refresh token is used again.
+ */
+export async function currentAccessToken(origin, deps) {
+    return withLoginLock(origin, deps, async () => {
+        const sign_in = await readSignIn(origin, deps);
+        if (!sign_in) {
+            throw new LoginError(`Not signed in to ${origin}. Run sdlc login${origin === SDLC_LOGIN_DEFAULT_ORIGIN ? '' : ` --url ${origin}`}.`);
+        }
+        if (sign_in.access_expires_at - deps.now() > REFRESH_MARGIN_MS) {
+            return sign_in.access_token;
+        }
+        let tokens;
+        try {
+            tokens = await tokenRequest(origin, deps, {
+                grant_type: 'refresh_token',
+                refresh_token: sign_in.refresh_token
+            });
+        }
+        catch (error) {
+            if (error instanceof GrantEndedError) {
+                // The server also answers invalid_grant when it failed to rotate, so
+                // revoke before forgetting, or a live grant would outlive the entry.
+                await revoke(origin, sign_in.refresh_token, deps);
+                await deps.store.remove(origin);
+                throw new LoginError(`The sign-in to ${origin} has ended (${error.message}). Run sdlc login again.`);
+            }
+            throw error;
+        }
+        const refreshed = {
+            ...sign_in,
+            access_token: tokens.access_token,
+            refresh_token: tokens.refresh_token,
+            scope: tokens.scope ?? sign_in.scope,
+            access_expires_at: deps.now() + tokens.expires_in * 1000
+        };
+        await deps.store.write(origin, encodeSignIn(refreshed));
+        return refreshed.access_token;
+    });
+}
+async function signInStatus(origin, deps) {
+    const sign_in = await readSignIn(origin, deps);
+    if (!sign_in)
+        return { signed_in: false, origin };
+    return {
+        signed_in: true,
+        ...describe(sign_in),
+        access_expired: sign_in.access_expires_at <= deps.now()
+    };
+}
+function describe(sign_in) {
+    return {
+        origin: sign_in.origin,
+        scope: sign_in.scope,
+        signed_in_at: new Date(sign_in.signed_in_at).toISOString(),
+        access_expires_at: new Date(sign_in.access_expires_at).toISOString()
+    };
+}
+function taskApiResource(origin) {
+    return `${origin}/api/v1`;
+}
+// A refresh the server refused because the grant is gone (revoked, expired,
+// or its refresh token already rotated), as opposed to a failure to reach it.
+class GrantEndedError extends Error {
+}
+async function tokenRequest(origin, deps, form) {
+    const response = await deps
+        .fetch(new URL('/api/oauth/token', origin), {
+        method: 'POST',
+        headers: { 'content-type': 'application/x-www-form-urlencoded' },
+        body: new URLSearchParams({
+            ...form,
+            client_id: SDLC_LOGIN_CLIENT_ID,
+            resource: taskApiResource(origin)
+        }).toString(),
+        signal: AbortSignal.timeout(TOKEN_TIMEOUT_MS)
+    })
+        .catch((error) => {
+        throw new LoginError(`Could not reach ${origin}: ${error instanceof Error ? error.message : String(error)}.`);
+    });
+    const body = await response.json().catch(() => null);
+    if (!response.ok) {
+        const error = z
+            .object({ error: z.string(), error_description: z.string().optional() })
+            .safeParse(body);
+        const reason = error.success
+            ? (error.data.error_description ?? error.data.error)
+            : `HTTP ${response.status}`;
+        if (error.success && error.data.error === 'invalid_grant') {
+            throw new GrantEndedError(reason);
+        }
+        throw new LoginError(`${origin} refused the sign-in: ${reason}`);
+    }
+    const tokens = token_response_schema.safeParse(body);
+    if (!tokens.success) {
+        throw new LoginError(`${origin} sent a token response sdlc cannot read.`);
+    }
+    return tokens.data;
+}
+// RFC 7009: true once the server answered 200, whether or not it knew the
+// token; false when it could not be reached or failed.
+async function revoke(origin, token, deps) {
+    try {
+        const response = await deps.fetch(new URL('/api/oauth/revoke', origin), {
+            method: 'POST',
+            headers: { 'content-type': 'application/x-www-form-urlencoded' },
+            body: new URLSearchParams({
+                token,
+                client_id: SDLC_LOGIN_CLIENT_ID
+            }).toString(),
+            signal: AbortSignal.timeout(REVOKE_TIMEOUT_MS)
+        });
+        return response.ok;
+    }
+    catch {
+        return false;
+    }
+}
+async function readSignIn(origin, deps) {
+    const stored = await readStored(origin, deps);
+    if (stored === 'unreadable') {
+        throw new LoginError(`The stored sign-in for ${origin} cannot be read. Run sdlc login again.`);
+    }
+    return stored;
+}
+// The origin's entry, or 'unreadable' when it holds something else, which a
+// new login replaces and logout removes.
+async function readStored(origin, deps) {
+    const value = await deps.store.read(origin);
+    if (value === null)
+        return null;
+    let parsed = null;
+    try {
+        parsed = JSON.parse(Buffer.from(value, 'base64url').toString('utf8'));
+    }
+    catch {
+        return 'unreadable';
+    }
+    const sign_in = stored_sign_in_schema.safeParse(parsed);
+    return sign_in.success && sign_in.data.origin === origin
+        ? sign_in.data
+        : 'unreadable';
+}
+// Base64url, so the Keychain command line never needs quoting.
+function encodeSignIn(sign_in) {
+    return Buffer.from(JSON.stringify(sign_in), 'utf8').toString('base64url');
+}
+function json(value) {
+    return `${JSON.stringify(value, null, 2)}\n`;
+}
+/**
+ * A one-shot listener on the first free registered port of 127.0.0.1. Its
+ * code settles with the authorization code of the first callback carrying
+ * this login's state, and fails on an error callback or after the timeout.
+ */
+export async function listenForCallback(ports, state, timeout_ms) {
+    let settle;
+    const code = new Promise((resolve, reject) => {
+        settle = { resolve, reject };
+    });
+    // The caller awaits code only after opening the browser.
+    code.catch(() => undefined);
+    const server = createServer((request, response) => {
+        const url = new URL(request.url ?? '/', 'http://127.0.0.1');
+        if (request.method !== 'GET' || url.pathname !== '/callback') {
+            response.writeHead(404).end();
+            return;
+        }
+        const page = (status, text) => response
+            .writeHead(status, {
+            'content-type': 'text/plain; charset=utf-8',
+            'cache-control': 'no-store'
+        })
+            .end(`${text}\n`);
+        if (url.searchParams.get('state') !== state) {
+            page(400, 'This sign-in link does not belong to this sdlc login.');
+            return;
+        }
+        const error = url.searchParams.get('error');
+        const received = url.searchParams.get('code');
+        if (error || !received) {
+            page(400, 'Sign-in was not completed. You can close this tab.');
+            settle.reject(new LoginError(`Sign-in was not completed: ${url.searchParams.get('error_description') ?? error ?? 'no code was returned'}.`));
+            return;
+        }
+        page(200, 'Signed in to SoftwareDLC. You can close this tab.');
+        settle.resolve(received);
+    });
+    const port = await listenOnFirstFree(server, ports);
+    const timer = setTimeout(() => settle.reject(new LoginError('Sign-in timed out waiting for the browser. Run sdlc login again.')), timeout_ms);
+    return {
+        redirect_uri: `http://127.0.0.1:${port}/callback`,
+        code,
+        close: () => {
+            clearTimeout(timer);
+            server.closeAllConnections();
+            server.close();
+        }
+    };
+}
+async function listenOnFirstFree(server, ports) {
+    for (const port of ports) {
+        const bound = await new Promise((resolve, reject) => {
+            const failed = (error) => {
+                server.off('listening', listening);
+                if (error.code === 'EADDRINUSE')
+                    resolve(false);
+                else
+                    reject(error);
+            };
+            const listening = () => {
+                server.off('error', failed);
+                resolve(true);
+            };
+            server.once('error', failed);
+            server.once('listening', listening);
+            server.listen(port, '127.0.0.1');
+        });
+        const address = server.address();
+        if (bound && address && typeof address === 'object')
+            return address.port;
+    }
+    throw new LoginError(`Ports ${ports.join(', ')} on 127.0.0.1 are all in use; free one and run sdlc login again.`);
+}
+/**
+ * Runs fn holding the origin's lock file, which other sdlc processes on this
+ * machine wait for. The file names its holder's process and a token; it is
+ * abandoned only once that process has exited, so a slow or sleeping holder
+ * keeps it. Only the holder removes a live lock, and only while it is theirs.
+ */
+export async function withLoginLock(origin, deps, fn) {
+    await mkdir(deps.lock_dir, { recursive: true, mode: 0o700 });
+    const path = join(deps.lock_dir, `login-${createHash('sha256').update(origin).digest('hex').slice(0, 16)}.lock`);
+    await removeAbandonedDrafts(deps.lock_dir);
+    const owner = `${process.pid} ${randomBytes(16).toString('hex')}`;
+    // Written whole under a private name and linked into place, so the lock
+    // (and the breaker below) never exists half-written and creating it fails
+    // when it exists.
+    const draft = `${path}.${owner.replace(' ', '-')}`;
+    await writeFile(draft, owner, { mode: 0o600 });
+    const deadline = deps.now() + LOCK_WAIT_MS;
+    try {
+        for (;;) {
+            try {
+                await link(draft, path);
+                break;
+            }
+            catch (error) {
+                if (error.code !== 'EEXIST')
+                    throw error;
+            }
+            const holder = await readFile(path, 'utf8').catch(() => null);
+            if (holder !== null &&
+                !(await holderRunning(path, holder)) &&
+                (await removeAbandonedLock(path, holder, draft, owner))) {
+                continue;
+            }
+            if (deps.now() > deadline) {
+                throw new LoginError(`Another sdlc process holds the sign-in lock ${path}. If no sdlc command is running, remove that file and try again.`);
+            }
+            await new Promise((resolve) => setTimeout(resolve, 100));
+        }
+    }
+    finally {
+        await unlink(draft).catch(() => undefined);
+    }
+    try {
+        return await fn();
+    }
+    finally {
+        if ((await readFile(path, 'utf8').catch(() => null)) === owner) {
+            await unlink(path).catch(() => undefined);
+        }
+    }
+}
+// A lock names "<pid> <token>"; anything else is a lock no running sdlc holds,
+// as is one written before this boot, whose pid may now be another process.
+async function holderRunning(path, holder) {
+    const pid = Number(/^(\d+) [0-9a-f]+$/.exec(holder)?.[1]);
+    if (!pid)
+        return false;
+    const written = await stat(path).catch(() => null);
+    if (written && written.mtimeMs < Date.now() - uptime() * 1000)
+        return false;
+    return processRunning(pid);
+}
+// Removes the abandoned lock under a breaker file, and only while the lock
+// still names the same stopped holder, so a waiter never removes a lock
+// another waiter has since taken. The breaker names its holder like the lock
+// and is broken by the same rule, never by age, so a stopped or sleeping
+// waiter keeps it. False when the breaker is another's: the caller waits.
+async function removeAbandonedLock(path, holder, draft, owner) {
+    const breaker = `${path}.break`;
+    try {
+        await link(draft, breaker);
+    }
+    catch (error) {
+        if (error.code !== 'EEXIST')
+            return false;
+        const breaking = await readFile(breaker, 'utf8').catch(() => null);
+        if (breaking !== null && !(await holderRunning(breaker, breaking))) {
+            if ((await readFile(breaker, 'utf8').catch(() => null)) === breaking) {
+                await unlink(breaker).catch(() => undefined);
+            }
+        }
+        return false;
+    }
+    try {
+        if ((await readFile(path, 'utf8').catch(() => null)) === holder) {
+            await unlink(path).catch(() => undefined);
+        }
+    }
+    finally {
+        if ((await readFile(breaker, 'utf8').catch(() => null)) === owner) {
+            await unlink(breaker).catch(() => undefined);
+        }
+    }
+    return true;
+}
+// Drafts are named "<lock>.<pid>-<token>"; one whose process has exited was
+// left by an interrupted wait.
+async function removeAbandonedDrafts(lock_dir) {
+    for (const name of await readdir(lock_dir).catch(() => [])) {
+        const pid = Number(/^login-[0-9a-f]{16}\.lock\.(\d+)-[0-9a-f]+$/.exec(name)?.[1]);
+        if (pid && !processRunning(pid)) {
+            await unlink(join(lock_dir, name)).catch(() => undefined);
+        }
+    }
+}
+function processRunning(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === 'EPERM';
+    }
+}
+// Both values sit inside double quotes on security's command line, so an
+// origin is checked before the browser flow starts, and again at the write.
+function storableOrigin(origin) {
+    return /^[A-Za-z0-9:/.[\]_-]+$/.test(origin);
+}
+/**
+ * The macOS login Keychain, through the security command. Writes go through
+ * security -i on standard input, so the secret never appears in a process
+ * argument list.
+ */
+export function keychainStore() {
+    return {
+        async read(origin) {
+            const result = await run('security', [
+                'find-generic-password',
+                '-s',
+                KEYCHAIN_SERVICE,
+                '-a',
+                origin,
+                '-w'
+            ]);
+            // 44: errSecItemNotFound.
+            if (result.code === 44)
+                return null;
+            if (result.code !== 0)
+                throw keychainError('read', result.stderr);
+            return result.stdout.trim();
+        },
+        async write(origin, value) {
+            if (!storableOrigin(origin) || !/^[\w-]+$/.test(value)) {
+                throw unstorableOrigin(origin);
+            }
+            const result = await run('security', ['-i'], `add-generic-password -U -s ${KEYCHAIN_SERVICE} -a "${origin}" -w "${value}"\n`);
+            if (result.code !== 0 || result.stderr.trim()) {
+                throw keychainError('write', result.stderr);
+            }
+        },
+        async remove(origin) {
+            const result = await run('security', [
+                'delete-generic-password',
+                '-s',
+                KEYCHAIN_SERVICE,
+                '-a',
+                origin
+            ]);
+            if (result.code !== 0 && result.code !== 44) {
+                throw keychainError('remove', result.stderr);
+            }
+        }
+    };
+}
+function unstorableOrigin(origin) {
+    return new LoginError(`${origin} cannot be stored in the macOS Keychain; sign in with an origin like https://host[:port].`);
+}
+function keychainError(action, stderr) {
+    return new LoginError(`Could not ${action} the sign-in in the macOS Keychain: ${stderr.trim() || 'security failed'}.`);
+}
+function run(command, args, input) {
+    return new Promise((resolve, reject) => {
+        const child = execFile(command, args, (error, stdout, stderr) => {
+            const code = error && typeof error.code === 'number' ? error.code : error ? 1 : 0;
+            if (error && typeof error.code === 'string')
+                reject(error);
+            else
+                resolve({ code, stdout, stderr });
+        });
+        child.stdin?.end(input ?? '');
+    });
+}
+// The computer's name as the user set it, for showing the sign-in as
+// "via sdlc login on <computer>"; the host name when it is not set.
+async function computerName() {
+    const result = await run('scutil', ['--get', 'ComputerName']).catch(() => null);
+    const name = result?.code === 0 ? result.stdout.trim() : '';
+    return (name || hostname()).slice(0, 100);
+}
+function defaultDeps() {
+    return {
+        platform: process.platform,
+        fetch: globalThis.fetch,
+        store: keychainStore(),
+        now: Date.now,
+        lock_dir: join(homedir(), '.config', 'software-dlc'),
+        open_browser: (url) => new Promise((resolve, reject) => {
+            const child = spawn('open', [url], {
+                stdio: 'ignore',
+                detached: true
+            });
+            child.once('error', reject);
+            child.once('spawn', () => {
+                child.unref();
+                resolve();
+            });
+        }),
+        device_label: computerName,
+        ports: SDLC_LOGIN_PORTS,
+        timeout_ms: LOGIN_TIMEOUT_MS,
+        connection_origin: async (name) => (await getTrustedConnection({ name_or_id: name })).base_url,
+        out: (text) => process.stdout.write(text),
+        note: (text) => process.stderr.write(text)
+    };
+}
+//# sourceMappingURL=cli-login.js.map

package/dist/cli-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-login.js","sourceRoot":"","sources":["../src/cli-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,IAAI,EACJ,KAAK,EACL,OAAO,EACP,QAAQ,EACR,IAAI,EACJ,MAAM,EACN,SAAS,EACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,gCAAgC,CAAC;AAExC,0EAA0E;AAC1E,8EAA8E;AAC9E,qEAAqE;AAErE,MAAM,CAAC,MAAM,oBAAoB,GAAG,sCAAsC,CAAC;AAC3E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAU,CAAC;AAC7E,MAAM,CAAC,MAAM,yBAAyB,GAAG,6BAA6B,CAAC;AACvE,MAAM,CAAC,MAAM,gBAAgB,GAC3B,kOAAkO,CAAC;AACrO,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,gBAAgB,0HAA0H,yBAAyB,ycAAyc,CAAC;AAE/oB,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAC9C,yDAAyD;AACzD,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,gBAAgB,GAAG,CAAC,GAAG,MAAM,CAAC;AACpC,sEAAsE;AACtE,8EAA8E;AAC9E,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,4DAA4D;AAC5D,MAAM,YAAY,GAAG,OAAO,CAAC;AAE7B,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,sBAAsB;IACtB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACnC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AA0BH,MAAM,UAAW,SAAQ,KAAK;CAAG;AAEjC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAc,EACd,YAAgC,EAAE;IAElC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC;IACnC,MAAM,IAAI,GAAG,OAAO,KAAK,MAAM,CAAC;IAChC,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACvE,IAAI,IAAI,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC9D,MAAM,IAAI,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,GAAG,WAAW,EAAE,EAAE,GAAG,SAAS,EAAE,CAAC;IAChD,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,UAAU,CAClB,qMAAqM,CACtM,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QACjE,UAAU,EAAE,OAAO,KAAK,OAAO;KAChC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU;QAC/B,CAAC,CAAC,sBAAsB,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1E,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAC;IACrE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QAAE,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAE5D,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;SAAM,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;SAAM,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CACnB,IAAc,EACd,OAAgC;IAEhC,MAAM,OAAO,GAA+D;QAC1E,UAAU,EAAE,KAAK;KAClB,CAAC;IACF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,GAAG,KAAK,cAAc,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACxE,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,IACE,CAAC,KAAK;YACN,CAAC,KAAK;YACN,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YACtB,OAAO,CAAC,GAAG,KAAK,SAAS;YACzB,OAAO,CAAC,UAAU,KAAK,SAAS,EAChC,CAAC;YACD,MAAM,IAAI,UAAU,CAAC,gBAAgB,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAyB,CAAC,GAAG,KAAK,CAAC;IACpD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,KAAK,CAClB,MAAc,EACd,UAAmB,EACnB,IAAe;IAEf,MAAM,aAAa,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7E,IAAI,MAA6C,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QACtD,SAAS,CAAC,MAAM,GAAG,IAAI,eAAe,CAAC;YACrC,aAAa,EAAE,MAAM;YACrB,SAAS,EAAE,oBAAoB;YAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC;iBACjC,MAAM,CAAC,aAAa,CAAC;iBACrB,MAAM,CAAC,WAAW,CAAC;YACtB,qBAAqB,EAAE,MAAM;YAC7B,KAAK;YACL,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC;YACjC,YAAY,EAAE,MAAM,IAAI,CAAC,YAAY,EAAE;SACxC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,CACP,4CAA4C,SAAS,CAAC,QAAQ,EAAE,IAAI,CACrE,CAAC;QACF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBACvD,IAAI,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;QACjC,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE;YACxC,UAAU,EAAE,oBAAoB;YAChC,IAAI;YACJ,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,aAAa;SACd,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAiB;QAC5B,OAAO,EAAE,CAAC;QACV,MAAM;QACN,SAAS,EAAE,oBAAoB;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;QACzB,iBAAiB,EAAE,GAAG,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI;QACjD,YAAY,EAAE,GAAG;KAClB,CAAC;IACF,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QACtD,OAAO,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,IAAI,gBAAgB,GAAmB,IAAI,CAAC;IAC5C,IAAI,QAAQ,IAAI,QAAQ,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;QACjE,gBAAgB,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QACtE,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CACP,uGAAuG,CACxG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG,CACN,IAAI,CAAC;QACH,SAAS,EAAE,IAAI;QACf,GAAG,QAAQ,CAAC,OAAO,CAAC;QACpB,wBAAwB,EAAE,gBAAgB;KAC3C,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,MAAc,EAAE,IAAe;IACnD,MAAM,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9C,IACE,MAAM;YACN,MAAM,KAAK,YAAY;YACvB,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,EACnD,CAAC;YACD,MAAM,IAAI,UAAU,CAClB,mBAAmB,MAAM,gIAAgI,CAC1J,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,IAAe;IAEf,OAAO,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,UAAU,CAClB,oBAAoB,MAAM,mBAAmB,MAAM,KAAK,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,GAAG,CAC/G,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,EAAE,CAAC;YAC/D,OAAO,OAAO,CAAC,YAAY,CAAC;QAC9B,CAAC;QACD,IAAI,MAA6C,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE;gBACxC,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;gBACrC,qEAAqE;gBACrE,qEAAqE;gBACrE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;gBAClD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAChC,MAAM,IAAI,UAAU,CAClB,kBAAkB,MAAM,eAAe,KAAK,CAAC,OAAO,0BAA0B,CAC/E,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAAiB;YAC9B,GAAG,OAAO;YACV,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK;YACpC,iBAAiB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI;SACzD,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;QACxD,OAAO,SAAS,CAAC,YAAY,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,IAAe;IACzD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClD,OAAO;QACL,SAAS,EAAE,IAAI;QACf,GAAG,QAAQ,CAAC,OAAO,CAAC;QACpB,cAAc,EAAE,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC,GAAG,EAAE;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,OAAqB;IACrC,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,YAAY,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;QAC1D,iBAAiB,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,WAAW,EAAE;KACrE,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,GAAG,MAAM,SAAS,CAAC;AAC5B,CAAC;AAED,4EAA4E;AAC5E,8EAA8E;AAC9E,MAAM,eAAgB,SAAQ,KAAK;CAAG;AAEtC,KAAK,UAAU,YAAY,CACzB,MAAc,EACd,IAAe,EACf,IAA4B;IAE5B,MAAM,QAAQ,GAAG,MAAM,IAAI;SACxB,KAAK,CAAC,IAAI,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAAE;QAC1C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,GAAG,IAAI;YACP,SAAS,EAAE,oBAAoB;YAC/B,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC;SAClC,CAAC,CAAC,QAAQ,EAAE;QACb,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;KAC9C,CAAC;SACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACxB,MAAM,IAAI,UAAU,CAClB,mBAAmB,MAAM,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CACxF,CAAC;IACJ,CAAC,CAAC,CAAC;IACL,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,CAAC;aACZ,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;aACvE,SAAS,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO;YAC1B,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YACpD,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;YAC1D,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,GAAG,MAAM,yBAAyB,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,UAAU,CAAC,GAAG,MAAM,0CAA0C,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,0EAA0E;AAC1E,uDAAuD;AACvD,KAAK,UAAU,MAAM,CACnB,MAAc,EACd,KAAa,EACb,IAAe;IAEf,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,EAAE;YACtE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,KAAK;gBACL,SAAS,EAAE,oBAAoB;aAChC,CAAC,CAAC,QAAQ,EAAE;YACb,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC;SAC/C,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,EAAE,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,MAAc,EACd,IAAe;IAEf,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,MAAM,IAAI,UAAU,CAClB,0BAA0B,MAAM,wCAAwC,CACzE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4EAA4E;AAC5E,yCAAyC;AACzC,KAAK,UAAU,UAAU,CACvB,MAAc,EACd,IAAe;IAEf,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,MAAM,GAAY,IAAI,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxD,OAAO,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM;QACtD,CAAC,CAAC,OAAO,CAAC,IAAI;QACd,CAAC,CAAC,YAAY,CAAC;AACnB,CAAC;AAED,+DAA+D;AAC/D,SAAS,YAAY,CAAC,OAAqB;IACzC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAwB,EACxB,KAAa,EACb,UAAkB;IAElB,IAAI,MAAwE,CAAC;IAC7E,MAAM,IAAI,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,MAAM,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,yDAAyD;IACzD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAChD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7D,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE,CAC5C,QAAQ;aACL,SAAS,CAAC,MAAM,EAAE;YACjB,cAAc,EAAE,2BAA2B;YAC3C,eAAe,EAAE,UAAU;SAC5B,CAAC;aACD,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QACtB,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC;YAC5C,IAAI,CAAC,GAAG,EAAE,uDAAuD,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,EAAE,oDAAoD,CAAC,CAAC;YAChE,MAAM,CAAC,MAAM,CACX,IAAI,UAAU,CACZ,8BAA8B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK,IAAI,sBAAsB,GAAG,CAC9G,CACF,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,mDAAmD,CAAC,CAAC;QAC/D,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CACH,MAAM,CAAC,MAAM,CACX,IAAI,UAAU,CACZ,kEAAkE,CACnE,CACF,EACH,UAAU,CACX,CAAC;IACF,OAAO;QACL,YAAY,EAAE,oBAAoB,IAAI,WAAW;QACjD,IAAI;QACJ,KAAK,EAAE,GAAG,EAAE;YACV,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC7B,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,MAAc,EACd,KAAwB;IAExB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3D,MAAM,MAAM,GAAG,CAAC,KAA4B,EAAE,EAAE;gBAC9C,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;gBACnC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;oBAAE,OAAO,CAAC,KAAK,CAAC,CAAC;;oBAC3C,MAAM,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC,CAAC;YACF,MAAM,SAAS,GAAG,GAAG,EAAE;gBACrB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,KAAK,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC;IAC3E,CAAC;IACD,MAAM,IAAI,UAAU,CAClB,SAAS,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kEAAkE,CAC5F,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,IAAyC,EACzC,EAAoB;IAEpB,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,IAAI,CACf,IAAI,CAAC,QAAQ,EACb,SAAS,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAC/E,CAAC;IACF,MAAM,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAClE,wEAAwE;IACxE,0EAA0E;IAC1E,kBAAkB;IAClB,MAAM,KAAK,GAAG,GAAG,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;IACnD,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;IAC3C,IAAI,CAAC;QACH,SAAS,CAAC;YACR,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBACxB,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YACtE,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC9D,IACE,MAAM,KAAK,IAAI;gBACf,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACpC,CAAC,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,EACvD,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;gBAC1B,MAAM,IAAI,UAAU,CAClB,+CAA+C,IAAI,kEAAkE,CACtH,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YAC/D,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,4EAA4E;AAC5E,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,MAAc;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5E,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,2EAA2E;AAC3E,wEAAwE;AACxE,6EAA6E;AAC7E,yEAAyE;AACzE,0EAA0E;AAC1E,KAAK,UAAU,mBAAmB,CAChC,IAAY,EACZ,MAAc,EACd,KAAa,EACb,KAAa;IAEb,MAAM,OAAO,GAAG,GAAG,IAAI,QAAQ,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnE,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACrE,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YAChE,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YAClE,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAC5E,+BAA+B;AAC/B,KAAK,UAAU,qBAAqB,CAAC,QAAgB;IACnD,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,CAChB,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAC9D,CAAC;QACF,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,4EAA4E;AAC5E,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,MAAM;YACf,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE;gBACnC,uBAAuB;gBACvB,IAAI;gBACJ,gBAAgB;gBAChB,IAAI;gBACJ,MAAM;gBACN,IAAI;aACL,CAAC,CAAC;YACH,0BAA0B;YAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE;gBAAE,OAAO,IAAI,CAAC;YACpC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAClE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK;YACvB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvD,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,UAAU,EACV,CAAC,IAAI,CAAC,EACN,8BAA8B,gBAAgB,QAAQ,MAAM,SAAS,KAAK,KAAK,CAChF,CAAC;YACF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC9C,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,MAAM;YACjB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE;gBACnC,yBAAyB;gBACzB,IAAI;gBACJ,gBAAgB;gBAChB,IAAI;gBACJ,MAAM;aACP,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;gBAC5C,MAAM,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO,IAAI,UAAU,CACnB,GAAG,MAAM,2FAA2F,CACrG,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,MAAc;IACnD,OAAO,IAAI,UAAU,CACnB,aAAa,MAAM,uCAAuC,MAAM,CAAC,IAAI,EAAE,IAAI,iBAAiB,GAAG,CAChG,CAAC;AACJ,CAAC;AAED,SAAS,GAAG,CACV,OAAe,EACf,IAAc,EACd,KAAc;IAEd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YAC9D,MAAM,IAAI,GACR,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBACtD,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qEAAqE;AACrE,oEAAoE;AACpE,KAAK,UAAU,YAAY;IACzB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,KAAK,CACjE,GAAG,EAAE,CAAC,IAAI,CACX,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,OAAO,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,WAAW;IAClB,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,KAAK,EAAE,aAAa,EAAE;QACtB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC;QACpD,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CACpB,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE;gBACjC,KAAK,EAAE,QAAQ;gBACf,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBACvB,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QACJ,YAAY,EAAE,YAAY;QAC1B,KAAK,EAAE,gBAAgB;QACvB,UAAU,EAAE,gBAAgB;QAC5B,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAChC,CAAC,MAAM,oBAAoB,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ;QAC7D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QACzC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;KAC3C,CAAC;AACJ,CAAC"}