@songsid/agend 2.1.4 → 2.1.5-beta.2

package/dist/web-terminal-http.d.ts

@@ -0,0 +1,53 @@
+import type { WebTerminalSession, TerminalLogger } from "./web-terminal.js";
+/** One admin browser needs a handful of sockets; anything beyond this is refused (M3: URL holders must not exhaust the fleet process). */
+export declare const MAX_CONNECTIONS = 8;
+export interface WebTerminalHttpOptions {
+    /** Interface to bind. Default 127.0.0.1 — reach it via SSH/tailscale/reverse proxy, like /dashboard. */
+    bind?: string;
+    /** Host name used in the URL handed to the admin (fleet `hostname`, default "localhost"). */
+    hostname?: string;
+    assetsDir?: string;
+}
+/**
+ * The request target as a plain path, or null when it is not a valid
+ * origin-form target. `new URL` throws on `GET http://%` and friends, and
+ * absolute-form / authority-form targets are not something a browser sends
+ * to us — all of that is a 400, never an exception (B1).
+ */
+export declare function safeRequestPath(rawUrl: string | undefined): string | null;
+export declare class WebTerminalHttpServer {
+    private readonly session;
+    private readonly logger;
+    private server;
+    private port;
+    private ws;
+    private readonly sockets;
+    private readonly assetsDir;
+    private readonly bind;
+    private readonly hostname;
+    private unsubscribeFinished;
+    /** Immutable assets, read once at listen() — no per-request disk I/O (M3). */
+    private readonly assetCache;
+    constructor(session: WebTerminalSession, logger: TerminalLogger, opts?: WebTerminalHttpOptions);
+    get pagePath(): string;
+    /** Start listening; returns the URL to hand the admin (it contains no secret). */
+    listen(): Promise<{
+        port: number;
+        url: string;
+    }>;
+    close(): Promise<void>;
+    private handle;
+    private page;
+    private asset;
+    private preloadAssets;
+    private readAsset;
+    private open;
+    private handleUpgrade;
+    private get cookieName();
+    private cookie;
+    /** Origin must be present and its host must equal the Host header (what the browser typed). */
+    private originMatchesHost;
+    private isHttps;
+    private text;
+    private json;
+}

package/dist/web-terminal-http.js

@@ -0,0 +1,396 @@
+/**
+ * Per-session HTTP listener for one WebTerminalSession.
+ *
+ * One `127.0.0.1:0` listener per session, closed with the session — it is not
+ * the dashboard/health server, so a tunnel pointed at it (phase 3) can reach
+ * nothing else. Routes (sid must match exactly, everything else is 404):
+ *
+ *   GET  /t/<sid>                static page — NO side effects (link-preview
+ *                                bots fetch it), NO secret in the URL
+ *   GET  /t/<sid>/assets/<file>  vendored xterm.js + page script/style
+ *   POST /t/<sid>/open           {token} → token gate → HttpOnly cookie
+ *   GET  /t/<sid>/ws (upgrade)   cookie + Origin → WebSocket to the pane
+ *
+ * Origin must equal Host on /open and /ws (CSRF/cross-site WS). Cookie is
+ * HttpOnly; SameSite=Strict; Path=/t/<sid>. Limits: 4 KB frames, 64 inbound
+ * frames/s (control frames included, enforced in the parser), 1 KB /open
+ * body, 64 KB of input waiting for tmux, 1 MB of output waiting for the
+ * browser; resize clamped by the session.
+ *
+ * Every entry point has an error boundary: a malformed request target or an
+ * unexpected throw answers 400/500 and never becomes an unhandled rejection
+ * or uncaught exception in the fleet process.
+ */
+import { createServer } from "node:http";
+import { readFileSync, existsSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { acceptWebSocket, rejectUpgrade } from "./ws-server.js";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const DEFAULT_ASSETS_DIR = join(__dirname, "ui", "web-terminal");
+const MAX_OPEN_BODY = 1024;
+const MAX_WS_FRAME = 4096;
+const MAX_FRAMES_PER_SECOND = 64;
+const MAX_OUTBOUND_BUFFERED = 1024 * 1024;
+/** One admin browser needs a handful of sockets; anything beyond this is refused (M3: URL holders must not exhaust the fleet process). */
+export const MAX_CONNECTIONS = 8;
+const MAX_REQUESTS_PER_SOCKET = 100;
+const RESPONSE_TIMEOUT_MS = 15_000;
+const ASSETS = {
+    "terminal.js": { file: "terminal.js", type: "text/javascript; charset=utf-8" },
+    "terminal.css": { file: "terminal.css", type: "text/css; charset=utf-8" },
+    "xterm.js": { file: join("vendor", "xterm.js"), type: "text/javascript; charset=utf-8" },
+    "xterm.css": { file: join("vendor", "xterm.css"), type: "text/css; charset=utf-8" },
+    "addon-fit.js": { file: join("vendor", "addon-fit.js"), type: "text/javascript; charset=utf-8" },
+    "addon-web-links.js": { file: join("vendor", "addon-web-links.js"), type: "text/javascript; charset=utf-8" },
+};
+/**
+ * The request target as a plain path, or null when it is not a valid
+ * origin-form target. `new URL` throws on `GET http://%` and friends, and
+ * absolute-form / authority-form targets are not something a browser sends
+ * to us — all of that is a 400, never an exception (B1).
+ */
+export function safeRequestPath(rawUrl) {
+    // origin-form only: starts with a single "/" ("//host/x" is scheme-relative, not a path)
+    if (!rawUrl || rawUrl.length > 2048 || !rawUrl.startsWith("/") || rawUrl.startsWith("//"))
+        return null;
+    try {
+        return new URL(rawUrl, "http://localhost").pathname;
+    }
+    catch {
+        return null;
+    }
+}
+export class WebTerminalHttpServer {
+    session;
+    logger;
+    server = null;
+    port = 0;
+    ws = null;
+    sockets = new Set();
+    assetsDir;
+    bind;
+    hostname;
+    unsubscribeFinished = null;
+    /** Immutable assets, read once at listen() — no per-request disk I/O (M3). */
+    assetCache = new Map();
+    constructor(session, logger, opts = {}) {
+        this.session = session;
+        this.logger = logger;
+        this.assetsDir = opts.assetsDir ?? DEFAULT_ASSETS_DIR;
+        this.bind = opts.bind ?? "127.0.0.1";
+        this.hostname = opts.hostname ?? "localhost";
+    }
+    get pagePath() { return `/t/${this.session.sid}`; }
+    /** Start listening; returns the URL to hand the admin (it contains no secret). */
+    async listen() {
+        if (this.server)
+            throw new Error("already listening");
+        this.preloadAssets();
+        const server = createServer((req, res) => {
+            // Error boundary: nothing thrown by a request may escape to the process.
+            Promise.resolve().then(() => this.handle(req, res)).catch(err => {
+                this.logger.warn({ sid: this.session.sid, err: err.message }, "web terminal request failed");
+                try {
+                    this.text(res, 500, "internal error");
+                }
+                catch {
+                    res.destroy();
+                }
+            });
+        });
+        server.on("upgrade", (req, socket, head) => {
+            try {
+                this.handleUpgrade(req, socket, head);
+            }
+            catch (err) {
+                this.logger.warn({ sid: this.session.sid, err: err.message }, "web terminal upgrade failed");
+                rejectUpgrade(socket, 500, "Internal Server Error");
+            }
+        });
+        server.on("clientError", (_err, socket) => {
+            // Node's own HTTP parser rejected the request (malformed request line/headers).
+            if (!socket.destroyed)
+                socket.end("HTTP/1.1 400 Bad Request\r\nConnection: close\r\n\r\n");
+        });
+        server.on("connection", socket => {
+            if (this.sockets.size >= MAX_CONNECTIONS) {
+                // More sockets than one browser could need: refuse before any parsing.
+                socket.destroy();
+                return;
+            }
+            this.sockets.add(socket);
+            socket.on("error", () => { });
+            socket.on("close", () => this.sockets.delete(socket));
+        });
+        server.headersTimeout = 10_000;
+        server.requestTimeout = 15_000;
+        server.maxRequestsPerSocket = MAX_REQUESTS_PER_SOCKET;
+        // A peer that stops reading a response (slow-loris on a 489 KB asset) is cut off.
+        server.timeout = RESPONSE_TIMEOUT_MS;
+        server.on("timeout", socket => socket.destroy());
+        this.server = server;
+        await new Promise((resolve, reject) => {
+            server.once("error", reject);
+            server.listen(0, this.bind, () => { server.off("error", reject); resolve(); });
+        });
+        const address = server.address();
+        this.port = typeof address === "object" && address ? address.port : 0;
+        const onFinished = () => { void this.close(); };
+        this.session.once("finished", onFinished);
+        this.unsubscribeFinished = () => this.session.off("finished", onFinished);
+        return { port: this.port, url: `http://${this.hostname}:${this.port}${this.pagePath}` };
+    }
+    async close() {
+        this.unsubscribeFinished?.();
+        this.unsubscribeFinished = null;
+        const server = this.server;
+        this.server = null;
+        try {
+            this.ws?.close(1001, "session closed");
+        }
+        catch { /* gone */ }
+        this.ws = null;
+        if (!server)
+            return;
+        await new Promise(resolve => {
+            server.close(() => resolve());
+            // Idle keep-alive connections would otherwise hold close() open.
+            for (const s of this.sockets)
+                s.destroy();
+            setTimeout(resolve, 500).unref?.();
+        });
+    }
+    // ── HTTP ──
+    handle(req, res) {
+        res.setHeader("Cache-Control", "no-store");
+        res.setHeader("Referrer-Policy", "no-referrer");
+        res.setHeader("X-Content-Type-Options", "nosniff");
+        res.setHeader("X-Frame-Options", "DENY");
+        const path = safeRequestPath(req.url);
+        if (path === null)
+            return this.text(res, 400, "bad request");
+        const base = this.pagePath;
+        if (path === base || path === `${base}/`) {
+            if (req.method !== "GET")
+                return this.text(res, 405, "method not allowed");
+            return this.page(res);
+        }
+        if (path.startsWith(`${base}/assets/`)) {
+            if (req.method !== "GET")
+                return this.text(res, 405, "method not allowed");
+            return this.asset(res, path.slice(`${base}/assets/`.length));
+        }
+        if (path === `${base}/open`) {
+            if (req.method !== "POST")
+                return this.text(res, 405, "method not allowed");
+            return this.open(req, res);
+        }
+        if (path === `${base}/ws`)
+            return this.text(res, 426, "upgrade required");
+        return this.text(res, 404, "not found");
+    }
+    page(res) {
+        const html = this.readAsset("terminal.html");
+        if (!html)
+            return this.text(res, 500, "terminal page missing");
+        res.setHeader("Content-Security-Policy", 
+        // xterm.js injects a <style> element for its DOM renderer, hence 'unsafe-inline' for styles only.
+        "default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; connect-src 'self'; img-src data:; base-uri 'none'; form-action 'none'; frame-ancestors 'none'");
+        res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+        res.end(html);
+    }
+    asset(res, name) {
+        const entry = ASSETS[name];
+        if (!entry)
+            return this.text(res, 404, "not found");
+        const body = this.readAsset(entry.file);
+        if (!body)
+            return this.text(res, 404, "not found");
+        res.writeHead(200, { "Content-Type": entry.type });
+        res.end(body);
+    }
+    preloadAssets() {
+        for (const rel of ["terminal.html", ...Object.values(ASSETS).map(a => a.file)]) {
+            const p = join(this.assetsDir, rel);
+            if (!existsSync(p))
+                continue;
+            try {
+                this.assetCache.set(rel, readFileSync(p));
+            }
+            catch { /* served as 404/500 */ }
+        }
+    }
+    readAsset(rel) {
+        return this.assetCache.get(rel) ?? null;
+    }
+    open(req, res) {
+        if (!this.originMatchesHost(req))
+            return this.json(res, 403, { error: "origin mismatch" });
+        if (!String(req.headers["content-type"] ?? "").startsWith("application/json")) {
+            return this.json(res, 415, { error: "json required" });
+        }
+        let size = 0;
+        const chunks = [];
+        let tooLarge = false;
+        req.on("data", (c) => {
+            size += c.length;
+            if (size > MAX_OPEN_BODY) {
+                tooLarge = true;
+                this.json(res, 413, { error: "body too large" });
+                req.destroy();
+                return;
+            }
+            chunks.push(c);
+        });
+        req.on("end", () => {
+            if (tooLarge)
+                return;
+            try {
+                let token = "";
+                try {
+                    const parsed = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+                    token = typeof parsed.token === "string" ? parsed.token : "";
+                }
+                catch {
+                    return this.json(res, 400, { error: "bad json" });
+                }
+                if (!token)
+                    return this.json(res, 400, { error: "token required" });
+                const outcome = this.session.redeemToken(token);
+                switch (outcome.result) {
+                    case "ok": {
+                        const secure = this.isHttps(req) ? "; Secure" : "";
+                        res.setHeader("Set-Cookie", `${this.cookieName}=${outcome.cookie}; HttpOnly; SameSite=Strict; Path=${this.pagePath}${secure}`);
+                        return this.json(res, 204, null);
+                    }
+                    case "bad": return this.json(res, 403, { error: "invalid token", remaining: outcome.remaining });
+                    case "used": return this.json(res, 409, { error: "token already used" });
+                    case "locked": return this.json(res, 410, { error: "session destroyed after repeated failures" });
+                    case "finished": return this.json(res, 410, { error: "session ended" });
+                }
+            }
+            catch (err) {
+                this.logger.warn({ sid: this.session.sid, err: err.message }, "web terminal /open failed");
+                this.json(res, 500, { error: "internal error" });
+            }
+        });
+        req.on("error", () => { });
+    }
+    // ── WebSocket ──
+    handleUpgrade(req, socket, head) {
+        this.sockets.add(socket);
+        socket.on("error", () => { });
+        socket.on("close", () => this.sockets.delete(socket));
+        const path = safeRequestPath(req.url);
+        if (path === null)
+            return rejectUpgrade(socket, 400, "Bad Request");
+        if (path !== `${this.pagePath}/ws`)
+            return rejectUpgrade(socket, 404, "Not Found");
+        if (!this.originMatchesHost(req))
+            return rejectUpgrade(socket, 403, "Forbidden");
+        if (!this.session.checkCookie(this.cookie(req)))
+            return rejectUpgrade(socket, 403, "Forbidden");
+        if (this.session.state !== "running")
+            return rejectUpgrade(socket, 410, "Gone");
+        const ws = acceptWebSocket(req, socket, head, {
+            maxPayload: MAX_WS_FRAME,
+            maxFramesPerSecond: MAX_FRAMES_PER_SECOND,
+            maxBufferedBytes: MAX_OUTBOUND_BUFFERED,
+        });
+        if (!ws)
+            return;
+        const previous = this.ws;
+        this.ws = ws;
+        if (previous && previous !== ws) {
+            try {
+                previous.close(4000, "replaced");
+            }
+            catch { /* gone */ }
+        }
+        const detach = this.session.attachClient({
+            send: data => { ws.send(data); }, // a slow browser is dropped inside send() (1008)
+            close: (code, reason) => { ws.close(code, reason); },
+        });
+        ws.on("message", (data, isBinary) => {
+            // Fence: only the CURRENT browser may type. A replaced or closing
+            // socket cannot inject even if a frame was already in flight (B3).
+            if (this.ws !== ws || ws.closed)
+                return;
+            if (isBinary) {
+                if (!this.session.input(data)) {
+                    ws.close(1008, "input backlog"); // > MAX_PENDING_INPUT_BYTES waiting for tmux (B4)
+                }
+                return;
+            }
+            let msg;
+            try {
+                msg = JSON.parse(data);
+            }
+            catch {
+                return;
+            }
+            if (msg.t === "resize" && typeof msg.cols === "number" && typeof msg.rows === "number") {
+                this.session.resize(msg.cols, msg.rows);
+            }
+            else if (msg.t === "cancel") {
+                // The authenticated browser's Stop button: end the session for real,
+                // not merely a Ctrl-C the CLI might ignore.
+                void this.session.cancel("stopped from the browser");
+            }
+        });
+        ws.on("close", () => { detach(); if (this.ws === ws)
+            this.ws = null; });
+        ws.on("protocolError", (e) => this.logger.info({ sid: this.session.sid, code: e.code, reason: e.reason }, "web terminal ws closed by policy"));
+        ws.on("error", () => { });
+        this.logger.info({ sid: this.session.sid, ip: req.socket.remoteAddress, ua: String(req.headers["user-agent"] ?? "").slice(0, 120) }, "web_terminal_ws_connected");
+    }
+    // ── Helpers ──
+    get cookieName() { return `agend_term_${this.session.sid.slice(0, 12)}`; }
+    cookie(req) {
+        const raw = String(req.headers.cookie ?? "");
+        for (const part of raw.split(";")) {
+            const [k, ...v] = part.trim().split("=");
+            if (k === this.cookieName)
+                return v.join("=");
+        }
+        return undefined;
+    }
+    /** Origin must be present and its host must equal the Host header (what the browser typed). */
+    originMatchesHost(req) {
+        const origin = req.headers.origin;
+        const host = req.headers.host;
+        if (!origin || !host)
+            return false;
+        try {
+            return new URL(String(origin)).host === String(host);
+        }
+        catch {
+            return false;
+        }
+    }
+    isHttps(req) {
+        const proto = String(req.headers["x-forwarded-proto"] ?? "").split(",")[0].trim().toLowerCase();
+        return proto === "https" || Boolean(req.socket.encrypted);
+    }
+    text(res, status, body) {
+        if (res.headersSent) {
+            res.end();
+            return;
+        }
+        res.writeHead(status, { "Content-Type": "text/plain; charset=utf-8" });
+        res.end(`${body}\n`);
+    }
+    json(res, status, body) {
+        if (res.headersSent)
+            return;
+        if (status === 204) {
+            res.writeHead(204);
+            res.end();
+            return;
+        }
+        res.writeHead(status, { "Content-Type": "application/json; charset=utf-8" });
+        res.end(JSON.stringify(body));
+    }
+}
+//# sourceMappingURL=web-terminal-http.js.map

package/dist/web-terminal-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-terminal-http.js","sourceRoot":"","sources":["../src/web-terminal-http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AAEjG,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAqB,MAAM,gBAAgB,CAAC;AAGnF,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;AAEjE,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,qBAAqB,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1C,0IAA0I;AAC1I,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AACjC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC,MAAM,MAAM,GAAmD;IAC7D,aAAa,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,gCAAgC,EAAE;IAC9E,cAAc,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,yBAAyB,EAAE;IACzE,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE;IACxF,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE;IACnF,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE;IAChG,oBAAoB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE;CAC7G,CAAC;AAUF;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAA0B;IACxD,yFAAyF;IACzF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvG,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,OAAO,qBAAqB;IAab;IACA;IAbX,MAAM,GAAkB,IAAI,CAAC;IAC7B,IAAI,GAAG,CAAC,CAAC;IACT,EAAE,GAAwB,IAAI,CAAC;IACtB,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5B,SAAS,CAAS;IAClB,IAAI,CAAS;IACb,QAAQ,CAAS;IAC1B,mBAAmB,GAAwB,IAAI,CAAC;IACxD,8EAA8E;IAC7D,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAExD,YACmB,OAA2B,EAC3B,MAAsB,EACvC,OAA+B,EAAE;QAFhB,YAAO,GAAP,OAAO,CAAoB;QAC3B,WAAM,GAAN,MAAM,CAAgB;QAGvC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACtD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC;QACrC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC;IAC/C,CAAC;IAED,IAAI,QAAQ,KAAa,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAE3D,kFAAkF;IAClF,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACtD,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACvC,yEAAyE;YACzE,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;gBAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,6BAA6B,CAAC,CAAC;gBACxG,IAAI,CAAC;oBAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBAAC,CAAC;YACzE,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YACzC,IAAI,CAAC;gBACH,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,MAAgB,EAAE,IAAI,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,6BAA6B,CAAC,CAAC;gBACxG,aAAa,CAAC,MAAgB,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;YAChE,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACxC,gFAAgF;YAChF,IAAI,CAAE,MAAiB,CAAC,SAAS;gBAAG,MAAiB,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;QACrH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE;YAC/B,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC;gBACzC,uEAAuE;gBACvE,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAmC,CAAC,CAAC,CAAC;YAC9D,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;QAC/B,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;QAC/B,MAAM,CAAC,oBAAoB,GAAG,uBAAuB,CAAC;QACtD,kFAAkF;QAClF,MAAM,CAAC,OAAO,GAAG,mBAAmB,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,mBAAmB,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAC1E,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC1F,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QACpE,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACf,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;YAChC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9B,iEAAiE;YACjE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;gBAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1C,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,aAAa;IAEL,MAAM,CAAC,GAAoB,EAAE,GAAmB;QACtD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC3C,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAChD,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE3B,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;YACzC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;YAC3E,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;YACvC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;YAC3E,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;YAC5E,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,KAAK;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;IAC1C,CAAC;IAEO,IAAI,CAAC,GAAmB;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAC/D,GAAG,CAAC,SAAS,CAAC,yBAAyB;QACrC,kGAAkG;QAClG,yKAAyK,CAAC,CAAC;QAC7K,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,GAAmB,EAAE,IAAY;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IAEO,aAAa;QACnB,KAAK,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC/E,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC7B,IAAI,CAAC;gBAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,GAAW;QAC3B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC1C,CAAC;IAEO,IAAI,CAAC,GAAoB,EAAE,GAAmB;QACpD,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC9E,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YAC3B,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC;YACjB,IAAI,IAAI,GAAG,aAAa,EAAE,CAAC;gBAAC,QAAQ,GAAG,IAAI,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACvH,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,QAAQ;gBAAE,OAAO;YACrB,IAAI,CAAC;gBACH,IAAI,KAAK,GAAG,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAwB,CAAC;oBACzF,KAAK,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;gBACpD,CAAC;gBACD,IAAI,CAAC,KAAK;oBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBACpE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBAChD,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;oBACvB,KAAK,IAAI,CAAC,CAAC,CAAC;wBACV,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;wBACnD,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,qCAAqC,IAAI,CAAC,QAAQ,GAAG,MAAM,EAAE,CAAC,CAAC;wBAC/H,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;oBACnC,CAAC;oBACD,KAAK,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;oBACjG,KAAK,MAAM,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;oBACzE,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CAAC;oBAClG,KAAK,UAAU,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;gBAC1E,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,2BAA2B,CAAC,CAAC;gBACtG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAA0B,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,kBAAkB;IAEV,aAAa,CAAC,GAAoB,EAAE,MAAc,EAAE,IAAY;QACtE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAoB,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;QACpE,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ,KAAK;YAAE,OAAO,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;YAAE,OAAO,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QACjF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAChG,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAEhF,MAAM,EAAE,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;YAC5C,UAAU,EAAE,YAAY;YACxB,kBAAkB,EAAE,qBAAqB;YACzC,gBAAgB,EAAE,qBAAqB;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE;YAAE,OAAO;QAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,QAAQ,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;QAEnG,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;YACvC,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAe,iDAAiD;YAChG,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;SACrD,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAqB,EAAE,QAAiB,EAAE,EAAE;YAC5D,kEAAkE;YAClE,mEAAmE;YACnE,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,MAAM;gBAAE,OAAO;YACxC,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAc,CAAC,EAAE,CAAC;oBACxC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAY,kDAAkD;gBAChG,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,GAAoD,CAAC;YACzD,IAAI,CAAC;gBAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAc,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC3D,IAAI,GAAG,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1C,CAAC;iBAAM,IAAI,GAAG,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC9B,qEAAqE;gBACrE,4CAA4C;gBAC5C,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACvD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE;YAAE,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAmC,EAAE,EAAE,CAC7D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,kCAAkC,CAAC,CAAC,CAAC;QACnH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAA4B,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,2BAA2B,CAAC,CAAC;IACpK,CAAC;IAED,gBAAgB;IAEhB,IAAY,UAAU,KAAa,OAAO,cAAc,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAElF,MAAM,CAAC,GAAoB;QACjC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,+FAA+F;IACvF,iBAAiB,CAAC,GAAoB;QAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QAC9B,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACnC,IAAI,CAAC;YAAC,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IACvF,CAAC;IAEO,OAAO,CAAC,GAAoB;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAChG,OAAO,KAAK,KAAK,OAAO,IAAI,OAAO,CAAE,GAAG,CAAC,MAA2C,CAAC,SAAS,CAAC,CAAC;IAClG,CAAC;IAEO,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAY;QAC5D,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAC3C,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACvE,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IACvB,CAAC;IAEO,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;QAC7D,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO;QAC5B,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAC9D,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,CAAC,CAAC;QAC7E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,CAAC;CACF"}