@tokensrc/codex 1.12.1

package/dist/profile.js

@@ -0,0 +1,253 @@
+import { createHash } from "node:crypto";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { z } from "zod";
+import { CodexError } from "./errors.js";
+import { PACKAGE_VERSION } from "./branding.js";
+import { readJsonIfExists, writePrivateJson } from "./private-file.js";
+const AuthoritySchema = z.object({
+    issuer: z.string().url(),
+    discoveryUrl: z.string().url(),
+    clientId: z.string().min(1),
+    scopes: z.array(z.string().min(1)).min(1)
+});
+const ServiceSchema = z.object({
+    baseUrl: z.string().url(),
+    resource: z.string().url(),
+    authority: z.string().min(1),
+    audience: z.string().min(1),
+    roleClientId: z.string().min(1),
+    apiVersion: z.string().min(1)
+});
+const ProfileSchema = z.object({
+    schemaVersion: z.literal(1),
+    profileId: z.string().min(1),
+    revision: z.number().int().positive(),
+    environment: z.string().min(1),
+    tenant: z.object({ id: z.string().min(1), headerName: z.string().min(1) }),
+    authorities: z.record(z.string(), AuthoritySchema),
+    services: z.object({ codex: ServiceSchema.optional() }).catchall(z.unknown()),
+    cache: z.object({ maxAgeSeconds: z.number().int().positive().max(86_400) }).optional(),
+    minimumClientVersions: z.record(z.string(), z.string()).optional()
+});
+const ProtectedResourceSchema = z.object({
+    resource: z.string().url(),
+    authorization_servers: z.array(z.string().url()).min(1),
+    resource_documentation: z.string().url().optional()
+});
+const DiscoverySchema = z.object({
+    issuer: z.string().url(),
+    authorization_endpoint: z.string().url(),
+    token_endpoint: z.string().url(),
+    jwks_uri: z.string().url()
+});
+const MAX_STALE_MS = 24 * 60 * 60_000;
+export async function resolveCodexProfile(options) {
+    const fetchImpl = options.fetch ?? globalThis.fetch;
+    const tenantId = options.tenantId?.trim();
+    let resourceMetadata;
+    let metadataFailure;
+    let profileUrl = options.profileUrl?.trim();
+    if (!profileUrl) {
+        if (!options.serverUrl || !tenantId) {
+            throw new CodexError("profileUrl, or both serverUrl and tenantId, are required.", "invalid_configuration");
+        }
+        const origin = serviceOrigin(options.serverUrl);
+        const metadataUrl = `${origin}/.well-known/oauth-protected-resource/tenants/${encodeURIComponent(tenantId)}`;
+        let metadataRaw;
+        try {
+            metadataRaw = await fetchJson(fetchImpl, metadataUrl);
+        }
+        catch (error) {
+            metadataFailure = error;
+            profileUrl = `${origin}/public/v1/tenants/${encodeURIComponent(tenantId)}/client-configuration`;
+        }
+        if (metadataRaw !== undefined) {
+            const parsedMetadata = ProtectedResourceSchema.safeParse(metadataRaw);
+            if (!parsedMetadata.success) {
+                throw new CodexError("Protected-resource metadata is invalid.", "invalid_profile");
+            }
+            resourceMetadata = parsedMetadata.data;
+            const expectedResource = `${origin}/tenants/${tenantId}`;
+            if (stripTrailingSlash(resourceMetadata.resource) !== stripTrailingSlash(expectedResource)) {
+                throw new CodexError("Protected-resource metadata returned an unexpected resource.", "invalid_profile");
+            }
+            profileUrl = resourceMetadata.resource_documentation
+                ?? `${origin}/public/v1/tenants/${encodeURIComponent(tenantId)}/client-configuration`;
+        }
+    }
+    const resolvedProfileUrl = profileUrl;
+    if (!resolvedProfileUrl) {
+        throw new CodexError("Unable to determine the Codex profile URL.", "invalid_configuration");
+    }
+    validateRemoteUrl(resolvedProfileUrl);
+    const cacheDirectory = options.configDirectory ?? defaultProfileDirectory();
+    const cacheFile = join(cacheDirectory, `profile-${createHash("sha256").update(resolvedProfileUrl).digest("hex").slice(0, 24)}.json`);
+    const cached = await readProfileCache(cacheFile, resolvedProfileUrl);
+    const now = (options.now ?? Date.now)();
+    let raw;
+    let etag;
+    let stale = false;
+    let pendingCache;
+    const cachedProfile = cached ? ProfileSchema.safeParse(cached.profile) : undefined;
+    const cacheMaxAgeMs = cachedProfile?.success
+        ? (cachedProfile.data.cache?.maxAgeSeconds ?? 300) * 1_000
+        : 0;
+    if (metadataFailure) {
+        if (!cached || !cachedProfile?.success || now - cached.fetchedAt > MAX_STALE_MS) {
+            throw new CodexError(`Unable to resolve protected-resource metadata: ${metadataFailure instanceof Error ? metadataFailure.message : String(metadataFailure)}`, "profile_unavailable");
+        }
+        raw = cached.profile;
+        stale = true;
+        options.onWarning?.("Protected-resource metadata is temporarily unavailable; using a previously validated profile snapshot.");
+    }
+    else
+        try {
+            if (cached && now - cached.fetchedAt < cacheMaxAgeMs) {
+                raw = cached.profile;
+            }
+            else {
+                const response = await fetchImpl(resolvedProfileUrl, {
+                    headers: {
+                        Accept: "application/json",
+                        ...(cached?.etag ? { "If-None-Match": cached.etag } : {})
+                    },
+                    signal: AbortSignal.timeout(5_000)
+                });
+                if (response.status === 304 && cached) {
+                    raw = cached.profile;
+                    etag = cached.etag;
+                }
+                else {
+                    if (!response.ok)
+                        throw new Error(`HTTP ${response.status}`);
+                    raw = await response.json();
+                    etag = response.headers.get("etag") ?? undefined;
+                    const next = ProfileSchema.safeParse(raw);
+                    if (!next.success) {
+                        throw new CodexError("Client configuration does not match schema v1.", "invalid_profile");
+                    }
+                    const previous = cached ? ProfileSchema.safeParse(cached.profile) : undefined;
+                    if (previous?.success && next.data.profileId === previous.data.profileId
+                        && next.data.revision < previous.data.revision) {
+                        throw new CodexError("Client configuration revision is older than the cached snapshot.", "invalid_profile");
+                    }
+                }
+                pendingCache = {
+                    schemaVersion: 1, sourceUrl: resolvedProfileUrl, fetchedAt: now, ...(etag ? { etag } : {}), profile: raw
+                };
+            }
+        }
+        catch (error) {
+            if (!cached || !cachedProfile?.success || now - cached.fetchedAt > MAX_STALE_MS) {
+                if (error instanceof CodexError)
+                    throw error;
+                throw new CodexError(`Unable to resolve Codex profile: ${error instanceof Error ? error.message : String(error)}`, "profile_unavailable");
+            }
+            raw = cached.profile;
+            stale = true;
+            options.onWarning?.("Codex profile is temporarily unavailable; using a cached snapshot less than 24 hours old.");
+        }
+    const profile = ProfileSchema.safeParse(raw);
+    if (!profile.success)
+        throw new CodexError("Client configuration does not match schema v1.", "invalid_profile");
+    const minimumVersion = profile.data.minimumClientVersions?.tokensrcCodex;
+    if (minimumVersion && compareVersions(PACKAGE_VERSION, minimumVersion) < 0) {
+        throw new CodexError(`@tokensrc/codex ${minimumVersion} or newer is required by this profile.`, "client_upgrade_required");
+    }
+    if (tenantId && profile.data.tenant.id !== tenantId) {
+        throw new CodexError("Client configuration tenant does not match the selected tenant.", "invalid_profile");
+    }
+    const codex = profile.data.services.codex;
+    if (!codex)
+        throw new CodexError("Codex is not available in the selected profile.", "module_unavailable");
+    const authority = profile.data.authorities[codex.authority];
+    if (!authority)
+        throw new CodexError("Codex references an unknown authority.", "invalid_profile");
+    if (resourceMetadata) {
+        if (stripTrailingSlash(codex.resource) !== stripTrailingSlash(resourceMetadata.resource)
+            || !resourceMetadata.authorization_servers.map(stripTrailingSlash).includes(stripTrailingSlash(authority.issuer))) {
+            throw new CodexError("Codex profile is inconsistent with protected-resource metadata.", "invalid_profile");
+        }
+    }
+    if (!stale) {
+        const discovery = DiscoverySchema.safeParse(await fetchJson(fetchImpl, authority.discoveryUrl));
+        if (!discovery.success || stripTrailingSlash(discovery.data.issuer) !== stripTrailingSlash(authority.issuer)) {
+            throw new CodexError("OIDC discovery is inconsistent with the selected authority.", "invalid_profile");
+        }
+    }
+    if (pendingCache)
+        await writePrivateJson(cacheFile, pendingCache);
+    return {
+        sourceUrl: resolvedProfileUrl,
+        profileId: profile.data.profileId,
+        revision: profile.data.revision,
+        environment: profile.data.environment,
+        tenantId: profile.data.tenant.id,
+        tenantHeaderName: profile.data.tenant.headerName,
+        serverUrl: stripTrailingSlash(codex.baseUrl),
+        resource: stripTrailingSlash(codex.resource),
+        audience: codex.audience,
+        roleClientId: codex.roleClientId,
+        authority: {
+            issuer: stripTrailingSlash(authority.issuer),
+            discoveryUrl: authority.discoveryUrl,
+            clientId: authority.clientId,
+            scope: authority.scopes.join(" ")
+        },
+        stale
+    };
+}
+function defaultProfileDirectory() {
+    const configured = process.env.TOKENSRC_CODEX_CONFIG_DIR?.trim();
+    if (configured)
+        return configured;
+    if (process.platform === "win32") {
+        return join(process.env.APPDATA ?? join(homedir(), "AppData", "Roaming"), "tokensrc-codex");
+    }
+    return join(process.env.XDG_CONFIG_HOME ?? join(homedir(), ".config"), "tokensrc-codex");
+}
+async function fetchJson(fetchImpl, url) {
+    validateRemoteUrl(url);
+    const response = await fetchImpl(url, {
+        headers: { Accept: "application/json" }, signal: AbortSignal.timeout(5_000)
+    });
+    if (!response.ok)
+        throw new CodexError(`Profile discovery failed with HTTP ${response.status}.`, "profile_unavailable");
+    return response.json();
+}
+async function readProfileCache(path, sourceUrl) {
+    const raw = await readJsonIfExists(path);
+    if (!raw || typeof raw !== "object")
+        return undefined;
+    const value = raw;
+    return value.schemaVersion === 1 && value.sourceUrl === sourceUrl
+        && typeof value.fetchedAt === "number" && "profile" in value
+        ? value
+        : undefined;
+}
+function serviceOrigin(value) {
+    validateRemoteUrl(value);
+    return new URL(value).origin;
+}
+function validateRemoteUrl(value) {
+    const url = new URL(value);
+    const loopback = ["localhost", "127.0.0.1", "::1", "[::1]"].includes(url.hostname);
+    if (url.username || url.password || (url.protocol !== "https:" && !(url.protocol === "http:" && loopback))) {
+        throw new CodexError("Profile URLs must use HTTPS without embedded credentials.", "invalid_profile");
+    }
+}
+function stripTrailingSlash(value) {
+    return value.replace(/\/+$/u, "");
+}
+function compareVersions(left, right) {
+    const parts = (value) => value.split(".").slice(0, 3).map((item) => Number.parseInt(item, 10) || 0);
+    const a = parts(left);
+    const b = parts(right);
+    for (let index = 0; index < 3; index++) {
+        if (a[index] !== b[index])
+            return a[index] - b[index];
+    }
+    return 0;
+}
+//# sourceMappingURL=profile.js.map

package/dist/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEvE,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1C,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC;IAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7E,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtF,qBAAqB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACnE,CAAC,CAAC;AACH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AACH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC3B,CAAC,CAAC;AAwCH,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AAEtC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAmC;IAEnC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1C,IAAI,gBAAqE,CAAC;IAC1E,IAAI,eAAwB,CAAC;IAC7B,IAAI,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IAC5C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,UAAU,CAAC,2DAA2D,EAAE,uBAAuB,CAAC,CAAC;QAC7G,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,GAAG,MAAM,iDAAiD,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7G,IAAI,WAAoB,CAAC;QACzB,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAe,GAAG,KAAK,CAAC;YACxB,UAAU,GAAG,GAAG,MAAM,sBAAsB,kBAAkB,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAClG,CAAC;QACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,cAAc,GAAG,uBAAuB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACtE,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;gBAC5B,MAAM,IAAI,UAAU,CAAC,yCAAyC,EAAE,iBAAiB,CAAC,CAAC;YACrF,CAAC;YACD,gBAAgB,GAAG,cAAc,CAAC,IAAI,CAAC;YACvC,MAAM,gBAAgB,GAAG,GAAG,MAAM,YAAY,QAAQ,EAAE,CAAC;YACzD,IAAI,kBAAkB,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC3F,MAAM,IAAI,UAAU,CAAC,8DAA8D,EAAE,iBAAiB,CAAC,CAAC;YAC1G,CAAC;YACD,UAAU,GAAG,gBAAgB,CAAC,sBAAsB;mBAC/C,GAAG,MAAM,sBAAsB,kBAAkB,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAC1F,CAAC;IACH,CAAC;IACD,MAAM,kBAAkB,GAAG,UAAU,CAAC;IACtC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,MAAM,IAAI,UAAU,CAAC,4CAA4C,EAAE,uBAAuB,CAAC,CAAC;IAC9F,CAAC;IACD,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;IACtC,MAAM,cAAc,GAAG,OAAO,CAAC,eAAe,IAAI,uBAAuB,EAAE,CAAC;IAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,EACnC,WAAW,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,IAAI,GAAY,CAAC;IACjB,IAAI,IAAwB,CAAC;IAC7B,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,YAAoC,CAAC;IACzC,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,MAAM,aAAa,GAAG,aAAa,EAAE,OAAO;QAC1C,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,IAAI,GAAG,CAAC,GAAG,KAAK;QAC1D,CAAC,CAAC,CAAC,CAAC;IACN,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,OAAO,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,YAAY,EAAE,CAAC;YAChF,MAAM,IAAI,UAAU,CAClB,kDAAkD,eAAe,YAAY,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,EACxI,qBAAqB,CACtB,CAAC;QACJ,CAAC;QACD,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC;QACrB,KAAK,GAAG,IAAI,CAAC;QACb,OAAO,CAAC,SAAS,EAAE,CAAC,wGAAwG,CAAC,CAAC;IAChI,CAAC;;QAAM,IAAI,CAAC;YACV,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,aAAa,EAAE,CAAC;gBACrD,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,kBAAkB,EAAE;oBACnD,OAAO,EAAE;wBACP,MAAM,EAAE,kBAAkB;wBAC1B,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC1D;oBACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;iBACnC,CAAC,CAAC;gBACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,EAAE,CAAC;oBACtC,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC;oBACrB,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;gBACrB,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,QAAQ,CAAC,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC7D,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBAC5B,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;oBACjD,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;wBAClB,MAAM,IAAI,UAAU,CAAC,gDAAgD,EAAE,iBAAiB,CAAC,CAAC;oBAC5F,CAAC;oBACD,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC9E,IAAI,QAAQ,EAAE,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,IAAI,CAAC,SAAS;2BACnE,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACjD,MAAM,IAAI,UAAU,CAAC,kEAAkE,EAAE,iBAAiB,CAAC,CAAC;oBAC9G,CAAC;gBACH,CAAC;gBACD,YAAY,GAAG;oBACb,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG;iBACzG,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,OAAO,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,YAAY,EAAE,CAAC;gBAChF,IAAI,KAAK,YAAY,UAAU;oBAAE,MAAM,KAAK,CAAC;gBAC7C,MAAM,IAAI,UAAU,CAClB,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC5F,qBAAqB,CACtB,CAAC;YACJ,CAAC;YACD,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC;YACrB,KAAK,GAAG,IAAI,CAAC;YACb,OAAO,CAAC,SAAS,EAAE,CAAC,2FAA2F,CAAC,CAAC;QACnH,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,gDAAgD,EAAE,iBAAiB,CAAC,CAAC;IAChH,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,aAAa,CAAC;IACzE,IAAI,cAAc,IAAI,eAAe,CAAC,eAAe,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,UAAU,CAAC,mBAAmB,cAAc,wCAAwC,EAAE,yBAAyB,CAAC,CAAC;IAC7H,CAAC;IACD,IAAI,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,IAAI,UAAU,CAAC,iEAAiE,EAAE,iBAAiB,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;IAC1C,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,UAAU,CAAC,iDAAiD,EAAE,oBAAoB,CAAC,CAAC;IAC1G,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,wCAAwC,EAAE,iBAAiB,CAAC,CAAC;IAClG,IAAI,gBAAgB,EAAE,CAAC;QACrB,IAAI,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,kBAAkB,CAAC,gBAAgB,CAAC,QAAQ,CAAC;eACnF,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACpH,MAAM,IAAI,UAAU,CAAC,iEAAiE,EAAE,iBAAiB,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,MAAM,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7G,MAAM,IAAI,UAAU,CAAC,6DAA6D,EAAE,iBAAiB,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IACD,IAAI,YAAY;QAAE,MAAM,gBAAgB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAClE,OAAO;QACL,SAAS,EAAE,kBAAkB;QAC7B,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS;QACjC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;QAC/B,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW;QACrC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;QAChC,gBAAgB,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU;QAChD,SAAS,EAAE,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC;QAC5C,QAAQ,EAAE,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC5C,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE;YACT,MAAM,EAAE,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC;YAC5C,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SAClC;QACD,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB;IAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,CAAC;IACjE,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,gBAAgB,CAAC,CAAC;AAC3F,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,SAAkC,EAAE,GAAW;IACtE,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACpC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;KAC5E,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,UAAU,CAAC,sCAAsC,QAAQ,CAAC,MAAM,GAAG,EAAE,qBAAqB,CAAC,CAAC;IACxH,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,SAAiB;IAC7D,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,KAAK,GAAG,GAA0B,CAAC;IACzC,OAAO,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;WAC5D,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,SAAS,IAAI,KAAK;QAC5D,CAAC,CAAC,KAAmB;QACrB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzB,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;AAC/B,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnF,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC3G,MAAM,IAAI,UAAU,CAAC,2DAA2D,EAAE,iBAAiB,CAAC,CAAC;IACvG,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5G,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC,CAAC,KAAK,CAAE,KAAK,CAAC,CAAC,KAAK,CAAE;YAAE,OAAO,CAAC,CAAC,KAAK,CAAE,GAAG,CAAC,CAAC,KAAK,CAAE,CAAC;IAC5D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}