@tickernelz/paperclip-pro-adapter-claude-local 2026.925.0

package/dist/server/acp.auth.test.js

@@ -0,0 +1,581 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { chmod, mkdtemp, rm, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+// A shared handle so each test can set the stub Claude hello-probe output the
+// sandbox runner returns.
+const { runAdapterExecutionTargetProcess, probeResult } = vi.hoisted(() => {
+    const probeResult = {
+        value: { exitCode: 1, stdout: "", stderr: "", timedOut: false },
+        throwError: null,
+    };
+    return {
+        probeResult,
+        runAdapterExecutionTargetProcess: vi.fn(async () => {
+            if (probeResult.throwError)
+                throw probeResult.throwError;
+            return {
+                exitCode: probeResult.value.exitCode,
+                signal: null,
+                timedOut: probeResult.value.timedOut,
+                stdout: probeResult.value.stdout,
+                stderr: probeResult.value.stderr,
+                pid: 321,
+                startedAt: new Date().toISOString(),
+            };
+        }),
+    };
+});
+vi.mock("@tickernelz/paperclip-pro-adapter-utils/execution-target", async () => {
+    const actual = await vi.importActual("@tickernelz/paperclip-pro-adapter-utils/execution-target");
+    return {
+        ...actual,
+        runAdapterExecutionTargetProcess,
+    };
+});
+import { mapClaudeAcpAuthErrorCode, probeClaudeAcpSandboxLogin, testClaudeAcpEnvironment, } from "./acp.js";
+import { ADAPTER_AUTH_MISSING_CHECK_CODE } from "./auth-check.js";
+const sandboxTarget = {
+    kind: "remote",
+    transport: "sandbox",
+    providerKey: "daytona",
+    remoteCwd: "/home/daytona/paperclip-workspace",
+    runner: {
+        execute: async () => ({
+            exitCode: 0,
+            signal: null,
+            timedOut: false,
+            stdout: "",
+            stderr: "",
+            pid: null,
+            startedAt: new Date().toISOString(),
+        }),
+    },
+};
+const initLine = '{"type":"system","subtype":"init","cwd":"/home/daytona/paperclip-workspace","session_id":"abc","tools":["Bash","Read"]}';
+const loginRequiredStdout = [
+    initLine,
+    '{"type":"result","subtype":"error_during_execution","is_error":true,"result":"Please run `claude login` to authenticate.","session_id":"abc"}',
+].join("\n");
+const helloStdout = [
+    initLine,
+    '{"type":"result","subtype":"success","is_error":false,"result":"hello","session_id":"abc"}',
+].join("\n");
+// The real Claude CLI output for CLAUDE_CODE_OAUTH_TOKEN=invalid. The probe
+// exits non-zero and the result event reports a 401 authentication failure with
+// an "Invalid bearer token" message. A synthetic bearer marker rides along on a
+// retry line, so the test can prove the raw probe text never reaches a check.
+const invalidTokenMarker = "SUPERSECRETbearerMARKER";
+const invalidTokenStdout = [
+    initLine,
+    `{"type":"system","subtype":"api_retry","attempt":1,"error_status":401,"error":"authentication_failed: bearer ${invalidTokenMarker} is invalid","session_id":"abc"}`,
+    '{"type":"assistant","message":{"role":"assistant","content":[{"type":"text","text":"Failed to authenticate. API Error: 401 Invalid bearer token"}]},"session_id":"abc","error":"authentication_failed"}',
+    '{"type":"result","subtype":"success","is_error":true,"api_error_status":401,"error":"authentication_failed","result":"Failed to authenticate. API Error: 401 Invalid bearer token","session_id":"abc"}',
+].join("\n");
+afterEach(() => {
+    vi.clearAllMocks();
+    probeResult.value = { exitCode: 1, stdout: "", stderr: "", timedOut: false };
+    probeResult.throwError = null;
+});
+describe("mapClaudeAcpAuthErrorCode", () => {
+    it("translates the generic acpx_auth_required code into claude_auth_required", () => {
+        const engineResult = {
+            exitCode: 1,
+            signal: null,
+            timedOut: false,
+            errorMessage: "Claude requires login.",
+            errorCode: "acpx_auth_required",
+            errorMeta: { category: "auth", errorName: "Error" },
+        };
+        const mapped = mapClaudeAcpAuthErrorCode(engineResult);
+        // The user interface run gate reads claude_auth_required to show the login
+        // affordance on the default ACP path.
+        expect(mapped.errorCode).toBe("claude_auth_required");
+        // The mapping keeps every other field so diagnostics stay intact.
+        expect(mapped.errorMessage).toBe("Claude requires login.");
+        expect(mapped.errorMeta).toEqual({ category: "auth", errorName: "Error" });
+    });
+    it("leaves a different error code unchanged", () => {
+        const engineResult = {
+            exitCode: 1,
+            signal: null,
+            timedOut: false,
+            errorCode: "acpx_runtime_error",
+        };
+        expect(mapClaudeAcpAuthErrorCode(engineResult).errorCode).toBe("acpx_runtime_error");
+    });
+    it("leaves a null error code unchanged", () => {
+        const engineResult = {
+            exitCode: 0,
+            signal: null,
+            timedOut: false,
+            errorCode: null,
+        };
+        expect(mapClaudeAcpAuthErrorCode(engineResult).errorCode).toBeNull();
+    });
+});
+describe("probeClaudeAcpSandboxLogin", () => {
+    it("emits the canonical adapter_auth_missing check when the sandbox probe reports missing auth", async () => {
+        probeResult.value = { exitCode: 1, stdout: loginRequiredStdout, stderr: "", timedOut: false };
+        const checks = await probeClaudeAcpSandboxLogin({
+            config: { engine: "acp" },
+            target: sandboxTarget,
+        });
+        expect(checks.some((check) => check.code === ADAPTER_AUTH_MISSING_CHECK_CODE)).toBe(true);
+        // The descriptive check stays for diagnostics.
+        expect(checks.some((check) => check.code === "claude_hello_probe_auth_required")).toBe(true);
+        // A missing-auth probe is a warning, not a failure, so the environment stays
+        // testable and the user interface can offer login.
+        expect(checks.every((check) => check.level === "warn")).toBe(true);
+    });
+    it("classifies an invalid or expired token as adapter_auth_missing without leaking the token", async () => {
+        probeResult.value = { exitCode: 1, stdout: invalidTokenStdout, stderr: "", timedOut: false };
+        const checks = await probeClaudeAcpSandboxLogin({
+            config: { engine: "acp" },
+            target: sandboxTarget,
+        });
+        // An auth failure returns the canonical login gate code, not the
+        // probe-could-not-run code.
+        expect(checks.some((check) => check.code === ADAPTER_AUTH_MISSING_CHECK_CODE)).toBe(true);
+        expect(checks.some((check) => check.code === "claude_hello_probe_auth_required")).toBe(true);
+        expect(checks.some((check) => check.code === "claude_acp_login_probe_unavailable")).toBe(false);
+        // The raw probe text, including the bearer marker, never reaches a check.
+        expect(JSON.stringify(checks)).not.toContain(invalidTokenMarker);
+    });
+    it("does not flag a healthy probe whose assistant text repeats a token phrase", async () => {
+        // A healthy run prints an auth phrase in its answer text. The parsed result
+        // is a success, so the probe stays healthy and offers no login gate.
+        probeResult.value = {
+            exitCode: 0,
+            stdout: [
+                initLine,
+                '{"type":"assistant","message":{"role":"assistant","content":[{"type":"text","text":"hello — note authentication_failed means an invalid bearer token"}]},"session_id":"abc"}',
+                '{"type":"result","subtype":"success","is_error":false,"result":"hello","session_id":"abc"}',
+            ].join("\n"),
+            stderr: "",
+            timedOut: false,
+        };
+        const checks = await probeClaudeAcpSandboxLogin({
+            config: { engine: "acp" },
+            target: sandboxTarget,
+        });
+        // The parsed result is a success, so no login gate and no probe-unavailable
+        // check appears.
+        expect(checks).toEqual([]);
+    });
+    it("keeps a non-auth failed probe with a token phrase on the probe-unavailable path", async () => {
+        // The probe fails on a transient upstream error and prints an auth phrase in
+        // its assistant text. The parsed result is not an auth failure, so the probe
+        // stays on the neutral probe-unavailable code, not the login gate.
+        probeResult.value = {
+            exitCode: 1,
+            stdout: [
+                initLine,
+                '{"type":"assistant","message":{"role":"assistant","content":[{"type":"text","text":"authentication_failed: the bearer token is invalid"}]},"session_id":"abc"}',
+                '{"type":"result","subtype":"error_during_execution","is_error":true,"result":"API Error: 503 service unavailable","session_id":"abc"}',
+            ].join("\n"),
+            stderr: "",
+            timedOut: false,
+        };
+        const checks = await probeClaudeAcpSandboxLogin({
+            config: { engine: "acp" },
+            target: sandboxTarget,
+        });
+        expect(checks.some((check) => check.code === ADAPTER_AUTH_MISSING_CHECK_CODE)).toBe(false);
+        expect(checks.some((check) => check.code === "claude_acp_login_probe_unavailable")).toBe(true);
+    });
+    it("never renders an untrusted login URL with sensitive query or fragment text", async () => {
+        // The sandbox prints a login-required line that carries a malicious URL. The
+        // URL has a non-allowlisted host, a query, and a fragment, each with a
+        // marker. The normalizer must reject the URL, so no marker reaches a check.
+        probeResult.value = {
+            exitCode: 1,
+            stdout: [
+                initLine,
+                '{"type":"result","subtype":"error_during_execution","is_error":true,"result":"Please run `claude login`. Visit https://evil.example.com/claude-login?leak=SECRETQUERYmarker#SECRETFRAGmarker","session_id":"abc"}',
+            ].join("\n"),
+            stderr: "",
+            timedOut: false,
+        };
+        const checks = await probeClaudeAcpSandboxLogin({
+            config: { engine: "acp" },
+            target: sandboxTarget,
+        });
+        // The login-required checks still appear.
+        expect(checks.some((check) => check.code === "claude_hello_probe_auth_required")).toBe(true);
+        expect(checks.some((check) => check.code === ADAPTER_AUTH_MISSING_CHECK_CODE)).toBe(true);
+        const checkText = JSON.stringify(checks);
+        // No marker and no untrusted host reaches any check.
+        expect(checkText).not.toContain("SECRETQUERYmarker");
+        expect(checkText).not.toContain("SECRETFRAGmarker");
+        expect(checkText).not.toContain("evil.example.com");
+        // The hint falls back to the fixed `claude login` text.
+        const authRequired = checks.find((check) => check.code === "claude_hello_probe_auth_required");
+        expect(authRequired?.hint).toBe("Run `claude login` in this environment, then retry the probe.");
+    });
+    it("emits no checks when the sandbox probe reports a healthy login", async () => {
+        probeResult.value = { exitCode: 0, stdout: helloStdout, stderr: "", timedOut: false };
+        const checks = await probeClaudeAcpSandboxLogin({
+            config: { engine: "acp" },
+            target: sandboxTarget,
+        });
+        expect(checks).toEqual([]);
+    });
+    it("emits a distinct warn check, not a silent pass, when the probe cannot run", async () => {
+        probeResult.throwError = new Error("claude command not found");
+        const checks = await probeClaudeAcpSandboxLogin({
+            config: { engine: "acp" },
+            target: sandboxTarget,
+        });
+        // A probe that cannot run must not report a success. It emits a distinct
+        // warn check that is NOT the login affordance code.
+        expect(checks).toHaveLength(1);
+        expect(checks[0]?.code).toBe("claude_acp_login_probe_unavailable");
+        expect(checks[0]?.level).toBe("warn");
+        expect(checks.some((check) => check.code === ADAPTER_AUTH_MISSING_CHECK_CODE)).toBe(false);
+    });
+    it("emits a distinct warn check when the probe times out", async () => {
+        probeResult.value = { exitCode: null, stdout: "", stderr: "", timedOut: true };
+        const checks = await probeClaudeAcpSandboxLogin({
+            config: { engine: "acp" },
+            target: sandboxTarget,
+        });
+        expect(checks).toHaveLength(1);
+        expect(checks[0]?.code).toBe("claude_acp_login_probe_unavailable");
+        expect(checks[0]?.level).toBe("warn");
+        expect(checks.some((check) => check.code === ADAPTER_AUTH_MISSING_CHECK_CODE)).toBe(false);
+    });
+    it("emits a distinct warn check when the probe runs but does not complete", async () => {
+        // The probe ran, login is not detected, and the exit code is non-zero. This
+        // is not a healthy login, so it must not be a silent pass.
+        probeResult.value = {
+            exitCode: 1,
+            stdout: initLine,
+            stderr: "unexpected sandbox error",
+            timedOut: false,
+        };
+        const checks = await probeClaudeAcpSandboxLogin({
+            config: { engine: "acp" },
+            target: sandboxTarget,
+        });
+        expect(checks).toHaveLength(1);
+        expect(checks[0]?.code).toBe("claude_acp_login_probe_unavailable");
+        expect(checks[0]?.level).toBe("warn");
+    });
+    it("never copies a thrown probe error into a Test-result check or the log", async () => {
+        // A sandbox transport failure can carry a credential. Inject an opaque
+        // credential marker and a proxy marker through the thrown error, then assert
+        // no check text and no log call repeats either one.
+        const opaqueCredMarker = "OPAQUECREDMARKERnoshape";
+        const proxyMarker = "http://user:pass@proxy.corp.internal:3128";
+        probeResult.throwError = new Error(`transport failed with ${opaqueCredMarker} via ${proxyMarker}`);
+        const warnSpy = vi.spyOn(console, "warn").mockImplementation(() => { });
+        const checks = await probeClaudeAcpSandboxLogin({
+            config: { engine: "acp" },
+            target: sandboxTarget,
+        });
+        const checkText = JSON.stringify(checks);
+        expect(checkText).not.toContain(opaqueCredMarker);
+        expect(checkText).not.toContain("proxy.corp.internal");
+        expect(checks[0]?.code).toBe("claude_acp_login_probe_unavailable");
+        // The log carries only the fixed context, the allowlisted classification,
+        // and a safe error class name. It never repeats the raw error text.
+        expect(warnSpy).toHaveBeenCalledTimes(1);
+        const loggedText = JSON.stringify(warnSpy.mock.calls);
+        expect(loggedText).not.toContain(opaqueCredMarker);
+        expect(loggedText).not.toContain("proxy.corp.internal");
+        expect(warnSpy.mock.calls[0]?.[1]).toMatchObject({
+            classification: "spawn_error",
+            errorClass: "Error",
+        });
+        warnSpy.mockRestore();
+    });
+    it("never copies raw probe stderr or stdout into a Test-result check or the log", async () => {
+        // A non-zero probe can print an opaque credential to stdout and a proxy URL
+        // to stderr. Inject one marker in each stream and assert neither reaches a
+        // check or the log.
+        const opaqueCredMarker = "OPAQUECREDMARKERstream";
+        const proxyMarker = "http://user:pass@proxy.corp.internal:3128";
+        probeResult.value = {
+            exitCode: 2,
+            stdout: [initLine, `note: ${opaqueCredMarker}`].join("\n"),
+            stderr: `fatal: proxy connect failed ${proxyMarker}`,
+            timedOut: false,
+        };
+        const warnSpy = vi.spyOn(console, "warn").mockImplementation(() => { });
+        const checks = await probeClaudeAcpSandboxLogin({
+            config: { engine: "acp" },
+            target: sandboxTarget,
+        });
+        const checkText = JSON.stringify(checks);
+        expect(checkText).not.toContain(opaqueCredMarker);
+        expect(checkText).not.toContain("proxy.corp.internal");
+        expect(checks[0]?.code).toBe("claude_acp_login_probe_unavailable");
+        // The log carries only the fixed context, the allowlisted classification,
+        // and the safe exit code. It never repeats the raw stream text.
+        expect(warnSpy).toHaveBeenCalledTimes(1);
+        const loggedText = JSON.stringify(warnSpy.mock.calls);
+        expect(loggedText).not.toContain(opaqueCredMarker);
+        expect(loggedText).not.toContain("proxy.corp.internal");
+        expect(warnSpy.mock.calls[0]?.[1]).toMatchObject({
+            classification: "nonzero_exit",
+            exitCode: 2,
+        });
+        warnSpy.mockRestore();
+    });
+});
+describe("Claude ACP hello probe on local and SSH targets", () => {
+    const sshTarget = {
+        kind: "remote",
+        transport: "ssh",
+        remoteCwd: "/home/user/paperclip-workspace",
+        spec: { host: "example.com", port: 22, username: "user" },
+    };
+    // Clear the host proxy and host auth variables so a local probe reads a
+    // deterministic env regardless of the machine that runs the suite.
+    const CLEARED_HOST_ENV_KEYS = [
+        "HTTP_PROXY",
+        "HTTPS_PROXY",
+        "NO_PROXY",
+        "http_proxy",
+        "https_proxy",
+        "no_proxy",
+        "ANTHROPIC_API_KEY",
+        "CLAUDE_CODE_OAUTH_TOKEN",
+        "ANTHROPIC_AUTH_TOKEN",
+        "CLAUDE_CONFIG_DIR",
+        "CLAUDE_CODE_USE_BEDROCK",
+        "ANTHROPIC_BEDROCK_BASE_URL",
+    ];
+    let tempDir = null;
+    let claudePath = "";
+    let savedPath;
+    let savedEnv = {};
+    beforeEach(async () => {
+        tempDir = await mkdtemp(path.join(os.tmpdir(), "paperclip-acp-localprobe-"));
+        claudePath = path.join(tempDir, "claude");
+        await writeFile(claudePath, "#!/bin/sh\nexit 0\n");
+        await chmod(claudePath, 0o755);
+        savedPath = process.env.PATH;
+        process.env.PATH = tempDir;
+        savedEnv = {};
+        for (const key of CLEARED_HOST_ENV_KEYS) {
+            savedEnv[key] = process.env[key];
+            delete process.env[key];
+        }
+    });
+    afterEach(async () => {
+        process.env.PATH = savedPath;
+        for (const [key, value] of Object.entries(savedEnv)) {
+            if (value === undefined)
+                delete process.env[key];
+            else
+                process.env[key] = value;
+        }
+        if (tempDir)
+            await rm(tempDir, { recursive: true, force: true }).catch(() => undefined);
+        tempDir = null;
+    });
+    it("emits an explicit OAuth-token check on the ACP lane when CLAUDE_CODE_OAUTH_TOKEN is set", async () => {
+        probeResult.value = { exitCode: 0, stdout: helloStdout, stderr: "", timedOut: false };
+        const result = await testClaudeAcpEnvironment({
+            companyId: "company-1",
+            adapterType: "claude_local",
+            config: { engine: "acp", env: { CLAUDE_CODE_OAUTH_TOKEN: "oauth-token-secret" } },
+            executionTarget: null,
+            environmentName: null,
+        });
+        expect(result.checks.some((check) => check.code === "claude_oauth_token_configured")).toBe(true);
+        // Every result names the target it probed, including the host case.
+        expect(result.checks.some((check) => check.code === "claude_environment_target")).toBe(true);
+        // The token value never enters a check.
+        expect(JSON.stringify(result.checks)).not.toContain("oauth-token-secret");
+    });
+    it("runs on a local target and reports auth-required without the sandbox-only adapter_auth_missing", async () => {
+        probeResult.value = { exitCode: 1, stdout: loginRequiredStdout, stderr: "", timedOut: false };
+        const checks = await probeClaudeAcpSandboxLogin({ config: { engine: "acp" }, target: null });
+        expect(checks.some((check) => check.code === "claude_hello_probe_auth_required")).toBe(true);
+        expect(checks.some((check) => check.code === ADAPTER_AUTH_MISSING_CHECK_CODE)).toBe(false);
+    });
+    it("runs on an SSH target and reports auth-required without adapter_auth_missing", async () => {
+        probeResult.value = { exitCode: 1, stdout: loginRequiredStdout, stderr: "", timedOut: false };
+        const checks = await probeClaudeAcpSandboxLogin({ config: { engine: "acp" }, target: sshTarget });
+        expect(checks.some((check) => check.code === "claude_hello_probe_auth_required")).toBe(true);
+        expect(checks.some((check) => check.code === ADAPTER_AUTH_MISSING_CHECK_CODE)).toBe(false);
+    });
+    it("spawns the trusted resolved claude and drops hostile caller env on a local probe", async () => {
+        probeResult.value = { exitCode: 0, stdout: helloStdout, stderr: "", timedOut: false };
+        process.env.HTTPS_PROXY = "http://trusted-proxy:8443";
+        await probeClaudeAcpSandboxLogin({
+            config: {
+                engine: "acp",
+                env: {
+                    ANTHROPIC_API_KEY: "keep-this-key",
+                    NODE_OPTIONS: "--require /hostile/evil.js",
+                    PATH: "/hostile/bin",
+                    LD_PRELOAD: "/hostile/evil.so",
+                    HTTP_PROXY: "http://caller-proxy:8080",
+                },
+            },
+            target: null,
+        });
+        expect(runAdapterExecutionTargetProcess).toHaveBeenCalledTimes(1);
+        const call = runAdapterExecutionTargetProcess.mock.calls[0];
+        const spawnedCommand = call[2];
+        const spawnedEnv = call[4].env;
+        // The trusted resolved claude executable, never the caller command path.
+        expect(spawnedCommand).toBe(claudePath);
+        // The approved key reaches the child; the hostile keys never do.
+        expect(spawnedEnv.ANTHROPIC_API_KEY).toBe("keep-this-key");
+        expect(spawnedEnv.NODE_OPTIONS).toBeUndefined();
+        expect(spawnedEnv.PATH).toBeUndefined();
+        expect(spawnedEnv.LD_PRELOAD).toBeUndefined();
+        expect(spawnedEnv.HTTP_PROXY).toBeUndefined();
+        // The trusted proxy reaches the child; the caller proxy never does.
+        expect(spawnedEnv.HTTPS_PROXY).toBe("http://trusted-proxy:8443");
+        expect(JSON.stringify(spawnedEnv)).not.toContain("caller-proxy");
+    });
+    it("reports an explicitly selected API key as normal authentication on the ACP lane", async () => {
+        const result = await testClaudeAcpEnvironment({
+            companyId: "company-1",
+            adapterType: "claude_local",
+            config: { engine: "acp", agentCommand: process.execPath, env: { ANTHROPIC_API_KEY: "selected-test-key" } },
+            executionTarget: null,
+            environmentName: null,
+        });
+        expect(result.status).toBe("pass");
+        expect(result.checks).toContainEqual(expect.objectContaining({
+            code: "claude_acp_anthropic_api_key_detected",
+            level: "info",
+            message: "Using the selected Claude API connection.",
+            hint: undefined,
+        }));
+        expect(JSON.stringify(result.checks)).not.toContain("selected-test-key");
+    });
+    it("runs the host login probe with the host ANTHROPIC_API_KEY on a local target", async () => {
+        // A local ACP run inherits the host environment, so a host ANTHROPIC_API_KEY
+        // authenticates the real run. The Test lane runs the login probe with the
+        // same host key, so the probe env matches the credential the real run
+        // receives. The probe then reports a real result, not a false auth-required.
+        process.env.ANTHROPIC_API_KEY = "sk-ant-host-key";
+        probeResult.value = { exitCode: 0, stdout: helloStdout, stderr: "", timedOut: false };
+        const result = await testClaudeAcpEnvironment({
+            companyId: "company-1",
+            adapterType: "claude_local",
+            config: { engine: "acp" },
+            executionTarget: null,
+            environmentName: null,
+        });
+        // The probe runs once with the host key, so it authenticates and reports no
+        // false auth-required and no probe-unavailable check.
+        expect(runAdapterExecutionTargetProcess).toHaveBeenCalledTimes(1);
+        const call = runAdapterExecutionTargetProcess.mock.calls[0];
+        const spawnedEnv = call[4].env;
+        expect(spawnedEnv.ANTHROPIC_API_KEY).toBe("sk-ant-host-key");
+        expect(result.checks.some((check) => check.code === "claude_hello_probe_auth_required")).toBe(false);
+        expect(result.checks.some((check) => check.code === "claude_acp_login_probe_unavailable")).toBe(false);
+        // The lane still reports that API-key auth is in use.
+        expect(result.checks).toContainEqual(expect.objectContaining({
+            code: "claude_acp_anthropic_api_key_detected", level: "warn",
+        }));
+        // The host key value never enters a check.
+        expect(JSON.stringify(result.checks)).not.toContain("sk-ant-host-key");
+    });
+    it("runs the host login probe with the host CLAUDE_CODE_OAUTH_TOKEN on a local target", async () => {
+        // A local ACP run inherits the host environment, so a host subscription
+        // OAuth token authenticates the real run. The Test lane runs the login probe
+        // with the same host token, so the probe env matches the credential the real
+        // run receives. The probe then reports a real result, not a false
+        // auth-required.
+        process.env.CLAUDE_CODE_OAUTH_TOKEN = "oauth-host-token";
+        probeResult.value = { exitCode: 0, stdout: helloStdout, stderr: "", timedOut: false };
+        const result = await testClaudeAcpEnvironment({
+            companyId: "company-1",
+            adapterType: "claude_local",
+            config: { engine: "acp" },
+            executionTarget: null,
+            environmentName: null,
+        });
+        // The probe runs once with the host token, so it authenticates and reports
+        // no false auth-required and no probe-unavailable check.
+        expect(runAdapterExecutionTargetProcess).toHaveBeenCalledTimes(1);
+        const call = runAdapterExecutionTargetProcess.mock.calls[0];
+        const spawnedEnv = call[4].env;
+        expect(spawnedEnv.CLAUDE_CODE_OAUTH_TOKEN).toBe("oauth-host-token");
+        expect(result.checks.some((check) => check.code === "claude_hello_probe_auth_required")).toBe(false);
+        expect(result.checks.some((check) => check.code === "claude_acp_login_probe_unavailable")).toBe(false);
+        // The lane reports that the configured OAuth token is in use.
+        expect(result.checks.some((check) => check.code === "claude_oauth_token_configured")).toBe(true);
+        // The host token value never enters a check.
+        expect(JSON.stringify(result.checks)).not.toContain("oauth-host-token");
+    });
+    it("runs the host login probe with the host ANTHROPIC_AUTH_TOKEN on a local target", async () => {
+        // A local ACP run inherits the host environment, so a host bearer auth token
+        // authenticates the real run. The Test lane runs the login probe with the
+        // same host token, so the probe env matches the credential the real run
+        // receives. The probe then reports a real result, not a false auth-required.
+        process.env.ANTHROPIC_AUTH_TOKEN = "auth-host-token";
+        probeResult.value = { exitCode: 0, stdout: helloStdout, stderr: "", timedOut: false };
+        const result = await testClaudeAcpEnvironment({
+            companyId: "company-1",
+            adapterType: "claude_local",
+            config: { engine: "acp" },
+            executionTarget: null,
+            environmentName: null,
+        });
+        // The probe runs once with the host token, so it authenticates and reports
+        // no false auth-required and no probe-unavailable check.
+        expect(runAdapterExecutionTargetProcess).toHaveBeenCalledTimes(1);
+        const call = runAdapterExecutionTargetProcess.mock.calls[0];
+        const spawnedEnv = call[4].env;
+        expect(spawnedEnv.ANTHROPIC_AUTH_TOKEN).toBe("auth-host-token");
+        expect(result.checks.some((check) => check.code === "claude_hello_probe_auth_required")).toBe(false);
+        expect(result.checks.some((check) => check.code === "claude_acp_login_probe_unavailable")).toBe(false);
+        // The host token value never enters a check.
+        expect(JSON.stringify(result.checks)).not.toContain("auth-host-token");
+    });
+    it("runs the host login probe with the host CLAUDE_CONFIG_DIR on a local target", async () => {
+        // A local ACP run reads the stored Claude login from the host
+        // CLAUDE_CONFIG_DIR. The Test lane runs the login probe with the same host
+        // config dir, so the probe reads the same stored login the real run uses.
+        // The probe then reports a real result, not a false auth-required.
+        process.env.CLAUDE_CONFIG_DIR = "/host/claude/config";
+        probeResult.value = { exitCode: 0, stdout: helloStdout, stderr: "", timedOut: false };
+        const result = await testClaudeAcpEnvironment({
+            companyId: "company-1",
+            adapterType: "claude_local",
+            config: { engine: "acp" },
+            executionTarget: null,
+            environmentName: null,
+        });
+        // The probe runs once with the host config dir, so it reads the stored login
+        // and reports no false auth-required and no probe-unavailable check.
+        expect(runAdapterExecutionTargetProcess).toHaveBeenCalledTimes(1);
+        const call = runAdapterExecutionTargetProcess.mock.calls[0];
+        const spawnedEnv = call[4].env;
+        expect(spawnedEnv.CLAUDE_CONFIG_DIR).toBe("/host/claude/config");
+        expect(result.checks.some((check) => check.code === "claude_hello_probe_auth_required")).toBe(false);
+        expect(result.checks.some((check) => check.code === "claude_acp_login_probe_unavailable")).toBe(false);
+    });
+    it("never seeds the host ANTHROPIC_AUTH_TOKEN or CLAUDE_CONFIG_DIR on a remote target", async () => {
+        // A remote target does not inherit the host environment, so the probe keeps
+        // the deny-by-default env and never reads a host credential. The host token
+        // and host config dir must never reach the remote probe env.
+        process.env.ANTHROPIC_AUTH_TOKEN = "auth-host-token";
+        process.env.CLAUDE_CONFIG_DIR = "/host/claude/config";
+        probeResult.value = { exitCode: 0, stdout: helloStdout, stderr: "", timedOut: false };
+        await testClaudeAcpEnvironment({
+            companyId: "company-1",
+            adapterType: "claude_local",
+            config: { engine: "acp" },
+            executionTarget: sshTarget,
+            environmentName: null,
+        });
+        expect(runAdapterExecutionTargetProcess).toHaveBeenCalledTimes(1);
+        const call = runAdapterExecutionTargetProcess.mock.calls[0];
+        const spawnedEnv = call[4].env;
+        expect(spawnedEnv.ANTHROPIC_AUTH_TOKEN).toBeUndefined();
+        expect(spawnedEnv.CLAUDE_CONFIG_DIR).toBeUndefined();
+    });
+});
+//# sourceMappingURL=acp.auth.test.js.map

package/dist/server/acp.auth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp.auth.test.js","sourceRoot":"","sources":["../../src/server/acp.auth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,8EAA8E;AAC9E,0BAA0B;AAC1B,MAAM,EAAE,gCAAgC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;IACxE,MAAM,WAAW,GAGb;QACF,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;QAC/D,UAAU,EAAE,IAAI;KACjB,CAAC;IACF,OAAO;QACL,WAAW;QACX,gCAAgC,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;YACjD,IAAI,WAAW,CAAC,UAAU;gBAAE,MAAM,WAAW,CAAC,UAAU,CAAC;YACzD,OAAO;gBACL,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ;gBACpC,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ;gBACpC,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM;gBAChC,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM;gBAChC,GAAG,EAAE,GAAG;gBACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;IAC7E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAClC,0DAA0D,CAC3D,CAAC;IACF,OAAO;QACL,GAAG,MAAM;QACT,gCAAgC;KACjC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,+BAA+B,EAAE,MAAM,iBAAiB,CAAC;AAElE,MAAM,aAAa,GAA2B;IAC5C,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,SAAS;IACpB,WAAW,EAAE,SAAS;IACtB,SAAS,EAAE,mCAAmC;IAC9C,MAAM,EAAE;QACN,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACpB,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,GAAG,EAAE,IAAI;YACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;KACH;CACF,CAAC;AAEF,MAAM,QAAQ,GACZ,yHAAyH,CAAC;AAE5H,MAAM,mBAAmB,GAAG;IAC1B,QAAQ;IACR,+IAA+I;CAChJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,WAAW,GAAG;IAClB,QAAQ;IACR,4FAA4F;CAC7F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,4EAA4E;AAC5E,gFAAgF;AAChF,gFAAgF;AAChF,8EAA8E;AAC9E,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AACrD,MAAM,kBAAkB,GAAG;IACzB,QAAQ;IACR,gHAAgH,kBAAkB,kCAAkC;IACpK,yMAAyM;IACzM,wMAAwM;CACzM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,aAAa,EAAE,CAAC;IACnB,WAAW,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7E,WAAW,CAAC,UAAU,GAAG,IAAI,CAAC;AAChC,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,YAAY,GAA2B;YAC3C,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,wBAAwB;YACtC,SAAS,EAAE,oBAAoB;YAC/B,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE;SACpD,CAAC;QAEF,MAAM,MAAM,GAAG,yBAAyB,CAAC,YAAY,CAAC,CAAC;QAEvD,2EAA2E;QAC3E,sCAAsC;QACtC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACtD,kEAAkE;QAClE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,YAAY,GAA2B;YAC3C,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,oBAAoB;SAChC,CAAC;QAEF,MAAM,CAAC,yBAAyB,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,YAAY,GAA2B;YAC3C,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,IAAI;SAChB,CAAC;QAEF,MAAM,CAAC,yBAAyB,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,4FAA4F,EAAE,KAAK,IAAI,EAAE;QAC1G,WAAW,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAE9F,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACzB,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1F,+CAA+C;QAC/C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7F,6EAA6E;QAC7E,mDAAmD;QACnD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;QACxG,WAAW,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAE7F,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACzB,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC;QAEH,iEAAiE;QACjE,4BAA4B;QAC5B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1F,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7F,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,oCAAoC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChG,0EAA0E;QAC1E,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,4EAA4E;QAC5E,qEAAqE;QACrE,WAAW,CAAC,KAAK,GAAG;YAClB,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE;gBACN,QAAQ;gBACR,8KAA8K;gBAC9K,4FAA4F;aAC7F,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,KAAK;SAChB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACzB,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC;QAEH,4EAA4E;QAC5E,iBAAiB;QACjB,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,6EAA6E;QAC7E,6EAA6E;QAC7E,mEAAmE;QACnE,WAAW,CAAC,KAAK,GAAG;YAClB,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE;gBACN,QAAQ;gBACR,gKAAgK;gBAChK,uIAAuI;aACxI,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,KAAK;SAChB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACzB,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3F,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,oCAAoC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,6EAA6E;QAC7E,uEAAuE;QACvE,4EAA4E;QAC5E,WAAW,CAAC,KAAK,GAAG;YAClB,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE;gBACN,QAAQ;gBACR,mNAAmN;aACpN,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,KAAK;SAChB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACzB,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC;QAEH,0CAA0C;QAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7F,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1F,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzC,qDAAqD;QACrD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACrD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACpD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACpD,wDAAwD;QACxD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,kCAAkC,CAAC,CAAC;QAC/F,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,WAAW,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAEtF,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACzB,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,WAAW,CAAC,UAAU,GAAG,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAE/D,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACzB,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC;QAEH,yEAAyE;QACzE,oDAAoD;QACpD,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,WAAW,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,IAAyB,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAEpG,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACzB,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,4EAA4E;QAC5E,2DAA2D;QAC3D,WAAW,CAAC,KAAK,GAAG;YAClB,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,0BAA0B;YAClC,QAAQ,EAAE,KAAK;SAChB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACzB,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,uEAAuE;QACvE,6EAA6E;QAC7E,oDAAoD;QACpD,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;QACnD,MAAM,WAAW,GAAG,2CAA2C,CAAC;QAChE,WAAW,CAAC,UAAU,GAAG,IAAI,KAAK,CAChC,yBAAyB,gBAAgB,QAAQ,WAAW,EAAE,CAC/D,CAAC;QACF,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEvE,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACzB,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAClD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACnE,0EAA0E;QAC1E,oEAAoE;QACpE,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACnD,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QACxD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC/C,cAAc,EAAE,aAAa;YAC7B,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC;QACH,OAAO,CAAC,WAAW,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,4EAA4E;QAC5E,2EAA2E;QAC3E,oBAAoB;QACpB,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;QAClD,MAAM,WAAW,GAAG,2CAA2C,CAAC;QAChE,WAAW,CAAC,KAAK,GAAG;YAClB,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1D,MAAM,EAAE,+BAA+B,WAAW,EAAE;YACpD,QAAQ,EAAE,KAAK;SAChB,CAAC;QACF,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEvE,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACzB,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAClD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACnE,0EAA0E;QAC1E,gEAAgE;QAChE,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACnD,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QACxD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC/C,cAAc,EAAE,cAAc;YAC9B,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;QACH,OAAO,CAAC,WAAW,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC/D,MAAM,SAAS,GAA2B;QACxC,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,gCAAgC;QAC3C,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;KACrB,CAAC;IAEvC,wEAAwE;IACxE,mEAAmE;IACnE,MAAM,qBAAqB,GAAG;QAC5B,YAAY;QACZ,aAAa;QACb,UAAU;QACV,YAAY;QACZ,aAAa;QACb,UAAU;QACV,mBAAmB;QACnB,yBAAyB;QACzB,sBAAsB;QACtB,mBAAmB;QACnB,yBAAyB;QACzB,4BAA4B;KAC7B,CAAC;IACF,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,SAA6B,CAAC;IAClC,IAAI,QAAQ,GAAuC,EAAE,CAAC;IAEtD,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;QAC7E,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,SAAS,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;QACnD,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/B,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC;QAC3B,QAAQ,GAAG,EAAE,CAAC;QACd,KAAK,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;YACxC,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjC,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;QAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;gBAC5C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAChC,CAAC;QACD,IAAI,OAAO;YAAE,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxF,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,WAAW,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACtF,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC;YAC5C,SAAS,EAAE,WAAW;YACtB,WAAW,EAAE,cAAc;YAC3B,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,EAAE;YACjF,eAAe,EAAE,IAAI;YACrB,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjG,oEAAoE;QACpE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7F,wCAAwC;QACxC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gGAAgG,EAAE,KAAK,IAAI,EAAE;QAC9G,WAAW,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC9F,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7F,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7F,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,WAAW,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC9F,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAClG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7F,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,WAAW,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACtF,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,2BAA2B,CAAC;QAEtD,MAAM,0BAA0B,CAAC;YAC/B,MAAM,EAAE;gBACN,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE;oBACH,iBAAiB,EAAE,eAAe;oBAClC,YAAY,EAAE,4BAA4B;oBAC1C,IAAI,EAAE,cAAc;oBACpB,UAAU,EAAE,kBAAkB;oBAC9B,UAAU,EAAE,0BAA0B;iBACvC;aACF;YACD,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QAEH,MAAM,CAAC,gCAAgC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAyB,CAAC;QACpF,MAAM,cAAc,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QACzC,MAAM,UAAU,GAAI,IAAI,CAAC,CAAC,CAAqC,CAAC,GAAG,CAAC;QACpE,yEAAyE;QACzE,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxC,iEAAiE;QACjE,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC3D,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,aAAa,EAAE,CAAC;QAChD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,aAAa,EAAE,CAAC;QAC9C,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,aAAa,EAAE,CAAC;QAC9C,oEAAoE;QACpE,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC;YAC5C,SAAS,EAAE,WAAW;YACtB,WAAW,EAAE,cAAc;YAC3B,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,EAAE;YAC1G,eAAe,EAAE,IAAI;YACrB,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAC3D,IAAI,EAAE,uCAAuC;YAC7C,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,2CAA2C;YACpD,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,6EAA6E;QAC7E,0EAA0E;QAC1E,sEAAsE;QACtE,6EAA6E;QAC7E,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAClD,WAAW,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAEtF,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC;YAC5C,SAAS,EAAE,WAAW;YACtB,WAAW,EAAE,cAAc;YAC3B,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACzB,eAAe,EAAE,IAAI;YACrB,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC;QAEH,4EAA4E;QAC5E,sDAAsD;QACtD,MAAM,CAAC,gCAAgC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAyB,CAAC;QACpF,MAAM,UAAU,GAAI,IAAI,CAAC,CAAC,CAAqC,CAAC,GAAG,CAAC;QACpE,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,oCAAoC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvG,sDAAsD;QACtD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAC3D,IAAI,EAAE,uCAAuC,EAAE,KAAK,EAAE,MAAM;SAC7D,CAAC,CAAC,CAAC;QACJ,2CAA2C;QAC3C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,wEAAwE;QACxE,6EAA6E;QAC7E,6EAA6E;QAC7E,kEAAkE;QAClE,iBAAiB;QACjB,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,kBAAkB,CAAC;QACzD,WAAW,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAEtF,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC;YAC5C,SAAS,EAAE,WAAW;YACtB,WAAW,EAAE,cAAc;YAC3B,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACzB,eAAe,EAAE,IAAI;YACrB,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC;QAEH,2EAA2E;QAC3E,yDAAyD;QACzD,MAAM,CAAC,gCAAgC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAyB,CAAC;QACpF,MAAM,UAAU,GAAI,IAAI,CAAC,CAAC,CAAqC,CAAC,GAAG,CAAC;QACpE,MAAM,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,oCAAoC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvG,8DAA8D;QAC9D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjG,6CAA6C;QAC7C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,6EAA6E;QAC7E,0EAA0E;QAC1E,wEAAwE;QACxE,6EAA6E;QAC7E,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,iBAAiB,CAAC;QACrD,WAAW,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAEtF,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC;YAC5C,SAAS,EAAE,WAAW;YACtB,WAAW,EAAE,cAAc;YAC3B,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACzB,eAAe,EAAE,IAAI;YACrB,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC;QAEH,2EAA2E;QAC3E,yDAAyD;QACzD,MAAM,CAAC,gCAAgC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAyB,CAAC;QACpF,MAAM,UAAU,GAAI,IAAI,CAAC,CAAC,CAAqC,CAAC,GAAG,CAAC;QACpE,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,oCAAoC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvG,6CAA6C;QAC7C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,8DAA8D;QAC9D,2EAA2E;QAC3E,0EAA0E;QAC1E,mEAAmE;QACnE,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,qBAAqB,CAAC;QACtD,WAAW,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAEtF,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC;YAC5C,SAAS,EAAE,WAAW;YACtB,WAAW,EAAE,cAAc;YAC3B,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACzB,eAAe,EAAE,IAAI;YACrB,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC;QAEH,6EAA6E;QAC7E,qEAAqE;QACrE,MAAM,CAAC,gCAAgC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAyB,CAAC;QACpF,MAAM,UAAU,GAAI,IAAI,CAAC,CAAC,CAAqC,CAAC,GAAG,CAAC;QACpE,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,oCAAoC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,4EAA4E;QAC5E,4EAA4E;QAC5E,6DAA6D;QAC7D,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,iBAAiB,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,qBAAqB,CAAC;QACtD,WAAW,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAEtF,MAAM,wBAAwB,CAAC;YAC7B,SAAS,EAAE,WAAW;YACtB,WAAW,EAAE,cAAc;YAC3B,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACzB,eAAe,EAAE,SAAS;YAC1B,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,gCAAgC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAyB,CAAC;QACpF,MAAM,UAAU,GAAI,IAAI,CAAC,CAAC,CAAqC,CAAC,GAAG,CAAC;QACpE,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,aAAa,EAAE,CAAC;QACxD,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,aAAa,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}