@vigilbase/cli 0.1.4 → 0.2.0

package/dist/local/cloudflare-checkup/collector.js

@@ -0,0 +1,296 @@
+/**
+ * Collecting a Cloudflare account through cf (spec §F5, §D3).
+ *
+ * Every read goes through the frozen allowlist and the shared scheduler (four
+ * workers, the request budget, auth pauses and retries). Each response is
+ * projected immediately by the vendored contract and the raw text discarded.
+ * Lists are paged with `--page N` until an empty page, because cf strips
+ * `result_info`: a final page and a server-clamped page look the same.
+ */
+import { ACCOUNT_KINDS, CloudflareCheckupSnapshotV1Schema, NOT_COLLECTABLE_ZONE_KINDS, NOT_COLLECTED_RESULT, PROJECTORS, SNAPSHOT_LIMITS, ZONE_SETTING_IDS, ZONE_SINGLE_KINDS, assembleSnapshot, collectionFailedResult, httpErrorResult, projectAccount, projectZones, projectionToResult, serializeSnapshot, } from './contract.js';
+import { ENV_TOKEN_PERMISSION_HINT, LocalCheckupError } from './errors.js';
+import { snapshotParseError } from './snapshot-file.js';
+import { TEMPLATES, buildArgv } from './cf/allowlist.js';
+import { authRequiredError } from './cf/auth-lifecycle.js';
+import { RULESET_STDOUT_CAP_BYTES, parseCfJson } from './cf/run-cf.js';
+export const WORKER_COUNT = 4;
+/** Assumed ruleset details per zone for the up-front request estimate. */
+const ESTIMATED_RULESETS_PER_ZONE = 6;
+const failed = (detail, failure) => ({ ok: false, result: collectionFailedResult(detail), ...(failure ? { failure } : {}) });
+function failureResult(failure) {
+    switch (failure.kind) {
+        case 'http':
+            return failure.status >= 400 && failure.status <= 599
+                ? { ok: false, result: httpErrorResult(failure.status), failure }
+                : failed('cf_error', failure);
+        case 'timeout': return failed('timeout', failure);
+        case 'output_too_large': return failed('output_too_large', failure);
+        case 'command_unavailable': return failed('command_unavailable', failure);
+        default: return failed('cf_error', failure);
+    }
+}
+function availabilityKey(id, settingId) {
+    return id === 'zone_setting' && settingId ? `zone_setting:${settingId}` : id;
+}
+/** Fetch one read: a single call, a one-call list, or every page of a paged list. */
+async function fetchRaw(env, id, ids, options = {}) {
+    if (env.unavailable.has(availabilityKey(id, ids.settingId)))
+        return failed('command_unavailable');
+    const spec = TEMPLATES[id];
+    const callOptions = {
+        ...(ids.accountId !== undefined && id !== 'account_selection' ? { accountId: ids.accountId } : {}),
+        ...(id === 'zone_ruleset' ? { stdoutCapBytes: RULESET_STDOUT_CAP_BYTES } : {}),
+    };
+    const once = async (page) => {
+        const outcome = await env.scheduler.call(buildArgv(id, page === undefined ? ids : { ...ids, page }, env.auth), callOptions);
+        if (!outcome.ok)
+            return failureResult(outcome.failure);
+        const parsed = parseCfJson(outcome.stdout, spec.output);
+        return parsed.ok ? { ok: true, raw: parsed.value } : failed('invalid_output');
+    };
+    if (spec.paging.kind === 'single')
+        return once();
+    if (spec.paging.kind === 'one_call') {
+        const outcome = await once();
+        // The cursor is not printed, so a full page may hide more rulesets.
+        if (outcome.ok && outcome.raw.length >= SNAPSHOT_LIMITS.rulesetListTruncationAt)
+            return failed('possibly_truncated');
+        return outcome;
+    }
+    const items = [];
+    let previousFirst;
+    for (let page = 1;; page++) {
+        const outcome = await once(page);
+        if (!outcome.ok)
+            return outcome;
+        const pageItems = outcome.raw;
+        if (pageItems.length === 0)
+            return { ok: true, raw: items };
+        if (page > spec.paging.maxPages)
+            return failed('page_limit');
+        const first = JSON.stringify(pageItems[0]);
+        // cf ignoring --page would repeat the first page forever.
+        if (page > 1 && first === previousFirst)
+            return failed('invalid_output');
+        previousFirst = first;
+        items.push(...pageItems);
+        if (options.maxItems !== undefined && items.length > options.maxItems) {
+            return { ok: false, result: collectionFailedResult('output_too_large'), tooManyItems: true };
+        }
+    }
+}
+function isAuthFailure(failure) {
+    return failure?.kind === 'auth' || (failure?.kind === 'http' && failure.status === 401);
+}
+/** Abort errors for reads that must succeed (account selection, account, zones). */
+function criticalError(env, outcome, what) {
+    if (isAuthFailure(outcome.failure))
+        return authRequiredError(env.auth.authMode);
+    if (outcome.result.reason === 'collection_failed' && outcome.result.detail === 'command_unavailable') {
+        return new LocalCheckupError('CF_ALLOWLIST_MISMATCH', `This cf release cannot run the ${what} command the checkup needs.`);
+    }
+    if (outcome.failure?.kind === 'http' && outcome.failure.status === 403) {
+        return new LocalCheckupError('CF_PERMISSION_DENIED', `Cloudflare denied the ${what} read (HTTP 403).`, { status: 403, ...(env.auth.authMode === 'env' ? { hint: ENV_TOKEN_PERMISSION_HINT } : {}) });
+    }
+    const status = outcome.failure?.kind === 'http' ? outcome.failure.status : undefined;
+    return new LocalCheckupError('CF_ERROR', `cf could not read the ${what}${status ? ` (HTTP ${status})` : outcome.result.reason === 'collection_failed' ? ` (${outcome.result.detail})` : ''}.`, status ? { status } : {});
+}
+/** `accounts list --per-page 50 --page N` until an empty page. */
+export async function listAccounts(env) {
+    const outcome = await fetchRaw(env, 'account_selection', {});
+    if (!outcome.ok)
+        throw criticalError(env, outcome, 'account list');
+    const accounts = [];
+    for (const item of outcome.raw) {
+        if (!item || typeof item !== 'object')
+            continue;
+        const { id, name } = item;
+        if (typeof id !== 'string' || !/^[0-9a-f]{32}$/i.test(id))
+            continue;
+        accounts.push({ id: id.toLowerCase(), name: typeof name === 'string' ? name.slice(0, 256) : '' });
+    }
+    return accounts;
+}
+/** Requests for N zones: about 19 + extra pages + N × (33 + rulesets per zone). */
+export function estimateRequests(zoneCount, rulesetsPerZone = ESTIMATED_RULESETS_PER_ZONE) {
+    return 19 + zoneCount * (33 + rulesetsPerZone);
+}
+/** A worker pool whose tasks may enqueue more tasks (ruleset details). */
+async function runTasks(seed, concurrency, onError) {
+    const queue = [];
+    let active = 0;
+    let error = null;
+    let notify = () => undefined;
+    let changed = new Promise((resolve) => { notify = resolve; });
+    const signal = () => {
+        const resolve = notify;
+        changed = new Promise((next) => { notify = next; });
+        resolve();
+    };
+    const enqueue = (task, options) => {
+        if (options?.front)
+            queue.unshift(task);
+        else
+            queue.push(task);
+        signal();
+    };
+    seed(enqueue);
+    const worker = async () => {
+        for (;;) {
+            if (error)
+                return;
+            const task = queue.shift();
+            if (!task) {
+                if (active === 0)
+                    return;
+                await changed;
+                continue;
+            }
+            active++;
+            try {
+                await task(enqueue);
+            }
+            catch (caught) {
+                if (!error) {
+                    error = caught;
+                    onError(caught);
+                }
+            }
+            finally {
+                active--;
+                signal();
+            }
+        }
+    };
+    await Promise.all(Array.from({ length: concurrency }, () => worker()));
+    if (error)
+        throw error;
+}
+/**
+ * Collect every snapshot entry for one account. Aborts (no file) when the
+ * account read fails other than 400/403/404, when the zone list fails, when it
+ * holds more than 100 zones, or when the account is invisible and has no zones.
+ */
+export async function collectAccount(env, accountId, hooks = {}) {
+    const entries = [];
+    const ids = { accountId };
+    const account = await fetchRaw(env, 'account', ids);
+    if (account.ok) {
+        const projected = projectAccount(account.raw);
+        if (!projected.ok)
+            throw new LocalCheckupError('CF_ERROR', 'cf returned account details the checkup cannot read.');
+        if (projected.data.id !== accountId)
+            throw new LocalCheckupError('CF_ERROR', 'cf returned a different Cloudflare account than requested.');
+        entries.push({ kind: 'account', result: { ok: true, data: projected.data } });
+    }
+    else if (account.result.reason === 'http_error' && [400, 403, 404].includes(account.result.status)) {
+        // The scanner tolerates these (runInitPhase); 401 is never recorded.
+        entries.push({ kind: 'account', result: account.result });
+    }
+    else {
+        throw criticalError(env, account, 'account');
+    }
+    const zonesRaw = await fetchRaw(env, 'zones', ids, { maxItems: SNAPSHOT_LIMITS.maxZones });
+    if (!zonesRaw.ok) {
+        if (zonesRaw.tooManyItems) {
+            throw new LocalCheckupError('ACCOUNT_TOO_LARGE', `This account has more than ${SNAPSHOT_LIMITS.maxZones} zones; use the browser token mode.`);
+        }
+        throw criticalError(env, zonesRaw, 'zone list');
+    }
+    const zonesProjected = projectZones(zonesRaw.raw);
+    if (!zonesProjected.ok)
+        throw new LocalCheckupError('CF_ERROR', 'cf returned a zone list the checkup cannot read.');
+    const zones = zonesProjected.data;
+    if (zones.some((zone) => zone.account.id !== accountId))
+        throw new LocalCheckupError('CF_ERROR', 'cf returned zones from a different account.');
+    if (!entries[0].result.ok && zones.length === 0) {
+        throw new LocalCheckupError('ACCOUNT_NOT_VISIBLE', 'Cloudflare does not show this account or any of its zones to the signed-in cf user.');
+    }
+    entries.push({ kind: 'zones', result: { ok: true, data: zones } });
+    hooks.onZones?.(zones);
+    const zoneTasksLeft = new Map(zones.map((zone) => [zone.id, 0]));
+    let zonesDone = 0;
+    const report = () => env.onProgress?.({ zonesDone, zonesTotal: zones.length, requests: env.scheduler.invocations });
+    const finishZoneTask = (zoneId) => {
+        const left = (zoneTasksLeft.get(zoneId) ?? 1) - 1;
+        zoneTasksLeft.set(zoneId, left);
+        if (left === 0)
+            zonesDone++;
+        report();
+    };
+    const projectInto = async (kind, taskIds) => {
+        const outcome = await fetchRaw(env, kind, taskIds);
+        if (!outcome.ok)
+            return outcome.result;
+        const project = PROJECTORS[kind];
+        return projectionToResult(project(outcome.raw));
+    };
+    await runTasks((enqueue) => {
+        for (const kind of ACCOUNT_KINDS) {
+            if (kind === 'account' || kind === 'zones')
+                continue;
+            enqueue(async () => {
+                entries.push({ kind, result: await projectInto(kind, ids) });
+                report();
+            });
+        }
+        for (const zone of zones) {
+            const zoneIds = { accountId, zoneId: zone.id };
+            zoneTasksLeft.set(zone.id, ZONE_SETTING_IDS.length + ZONE_SINGLE_KINDS.length);
+            for (const settingId of ZONE_SETTING_IDS) {
+                enqueue(async () => {
+                    entries.push({ kind: 'zone_setting', zoneId: zone.id, settingId, result: await projectInto('zone_setting', { ...zoneIds, settingId }) });
+                    finishZoneTask(zone.id);
+                });
+            }
+            for (const kind of ZONE_SINGLE_KINDS) {
+                enqueue(async (more) => {
+                    const result = await projectInto(kind, zoneIds);
+                    entries.push({ kind, zoneId: zone.id, result });
+                    if (kind === 'zone_rulesets' && result.ok) {
+                        const rulesetIds = [...new Set(result.data.map((head) => head.id))];
+                        zoneTasksLeft.set(zone.id, (zoneTasksLeft.get(zone.id) ?? 0) + rulesetIds.length);
+                        for (const rulesetId of rulesetIds) {
+                            more(async () => {
+                                entries.push(await collectRulesetDetail(env, zoneIds, rulesetId));
+                                finishZoneTask(zone.id);
+                            }, { front: true });
+                        }
+                    }
+                    finishZoneTask(zone.id);
+                });
+            }
+            for (const kind of NOT_COLLECTABLE_ZONE_KINDS)
+                entries.push({ kind, zoneId: zone.id, result: NOT_COLLECTED_RESULT });
+        }
+    }, env.concurrency ?? WORKER_COUNT, (error) => env.scheduler.abort(error instanceof Error ? error : new Error(String(error))));
+    env.scheduler.throwIfAborted();
+    return entries;
+}
+/** A ruleset detail keeps its projected rules; `assembleSnapshot` applies the failed-detail collector rule. */
+async function collectRulesetDetail(env, ids, rulesetId) {
+    const outcome = await fetchRaw(env, 'zone_ruleset', { ...ids, rulesetId });
+    const base = { kind: 'zone_ruleset', zoneId: ids.zoneId, rulesetId };
+    if (!outcome.ok)
+        return { ...base, result: outcome.result };
+    const projected = PROJECTORS.zone_ruleset(outcome.raw);
+    if (!projected.ok)
+        return { ...base, result: collectionFailedResult(projected.detail) };
+    // A detail whose ID differs from the listed head cannot be attributed.
+    if (projected.data.id !== rulesetId)
+        return { ...base, result: collectionFailedResult('invalid_output') };
+    return { ...base, result: { ok: true, data: projected.data } };
+}
+/** Assemble, validate and serialise; the returned text is exactly what is written and uploaded. */
+export function buildSnapshot(accountId, collector, entries) {
+    const assembled = assembleSnapshot({ accountId, collector, entries });
+    const parsed = CloudflareCheckupSnapshotV1Schema.safeParse(assembled);
+    if (!parsed.success)
+        throw snapshotParseError(parsed.error.issues);
+    const text = serializeSnapshot(parsed.data);
+    if (Buffer.byteLength(text) > SNAPSHOT_LIMITS.maxBytes) {
+        throw new LocalCheckupError('SNAPSHOT_TOO_LARGE', 'The collected snapshot is larger than the 8 MiB contract limit; no file was written.');
+    }
+    return { snapshot: parsed.data, text };
+}
+//# sourceMappingURL=collector.js.map

package/dist/local/cloudflare-checkup/collector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collector.js","sourceRoot":"","sources":["../../../src/local/cloudflare-checkup/collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EACL,aAAa,EACb,iCAAiC,EACjC,0BAA0B,EAC1B,oBAAoB,EACpB,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,GAWlB,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AACvD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAuD,MAAM,mBAAmB,CAAA;AAC7G,OAAO,EAAE,iBAAiB,EAAwC,MAAM,wBAAwB,CAAA;AAChG,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAEtE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAA;AAC7B,0EAA0E;AAC1E,MAAM,2BAA2B,GAAG,CAAC,CAAA;AAmBrC,MAAM,MAAM,GAAG,CAAC,MAA+B,EAAE,OAAuB,EAAgB,EAAE,CACxF,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;AAE1F,SAAS,aAAa,CAAC,OAAsB;IAC3C,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,OAAO,CAAC,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG;gBACnD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE;gBACjE,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACjC,KAAK,SAAS,CAAC,CAAC,OAAO,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QACjD,KAAK,kBAAkB,CAAC,CAAC,OAAO,MAAM,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAA;QACnE,KAAK,qBAAqB,CAAC,CAAC,OAAO,MAAM,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAA;QACzE,OAAO,CAAC,CAAC,OAAO,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,EAAc,EAAE,SAAyB;IAChE,OAAO,EAAE,KAAK,cAAc,IAAI,SAAS,CAAC,CAAC,CAAC,gBAAgB,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AAC9E,CAAC;AAED,qFAAqF;AACrF,KAAK,UAAU,QAAQ,CAAC,GAAe,EAAE,EAAc,EAAE,GAAgB,EAAE,UAAiC,EAAE;IAC5G,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,qBAAqB,CAAC,CAAA;IACjG,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAA;IAC1B,MAAM,WAAW,GAAG;QAClB,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,KAAK,mBAAmB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClG,GAAG,CAAC,EAAE,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAA;IACD,MAAM,IAAI,GAAG,KAAK,EAAE,IAAa,EAAyB,EAAE;QAC1D,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAA;QAC3H,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACtD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QACvD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAC/E,CAAC,CAAA;IAED,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,EAAE,CAAA;IAChD,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,IAAI,EAAE,CAAA;QAC5B,oEAAoE;QACpE,IAAI,OAAO,CAAC,EAAE,IAAK,OAAO,CAAC,GAAiB,CAAC,MAAM,IAAI,eAAe,CAAC,uBAAuB;YAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAA;QACnI,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,MAAM,KAAK,GAAc,EAAE,CAAA;IAC3B,IAAI,aAAiC,CAAA;IACrC,KAAK,IAAI,IAAI,GAAG,CAAC,GAAI,IAAI,EAAE,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAA;QAC/B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAgB,CAAA;QAC1C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAA;QAC3D,IAAI,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC,YAAY,CAAC,CAAA;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1C,0DAA0D;QAC1D,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,aAAa;YAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAA;QACxE,aAAa,GAAG,KAAK,CAAA;QACrB,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAA;QACxB,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;QAC9F,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,OAAkC;IACvD,OAAO,OAAO,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,OAAO,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC,CAAA;AACzF,CAAC;AAED,oFAAoF;AACpF,SAAS,aAAa,CAAC,GAAe,EAAE,OAAqC,EAAE,IAAY;IACzF,IAAI,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC/E,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACrG,OAAO,IAAI,iBAAiB,CAAC,uBAAuB,EAAE,kCAAkC,IAAI,6BAA6B,CAAC,CAAA;IAC5H,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvE,OAAO,IAAI,iBAAiB,CAAC,sBAAsB,EAAE,yBAAyB,IAAI,mBAAmB,EACnG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IACjG,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IACpF,OAAO,IAAI,iBAAiB,CAAC,UAAU,EAAE,yBAAyB,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAC3L,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;AAC7B,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAe;IAChD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAA;IAC5D,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,cAAc,CAAC,CAAA;IAClE,MAAM,QAAQ,GAAqB,EAAE,CAAA;IACrC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,GAAgB,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAQ;QAC/C,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,IAAwC,CAAA;QAC7D,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,SAAQ;QACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACnG,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,eAAe,GAAG,2BAA2B;IAC/F,OAAO,EAAE,GAAG,SAAS,GAAG,CAAC,EAAE,GAAG,eAAe,CAAC,CAAA;AAChD,CAAC;AAKD,0EAA0E;AAC1E,KAAK,UAAU,QAAQ,CAAC,IAAgC,EAAE,WAAmB,EAAE,OAAiC;IAC9G,MAAM,KAAK,GAAW,EAAE,CAAA;IACxB,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,KAAK,GAAY,IAAI,CAAA;IACzB,IAAI,MAAM,GAAe,GAAG,EAAE,CAAC,SAAS,CAAA;IACxC,IAAI,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,MAAM,GAAG,OAAO,CAAA,CAAC,CAAC,CAAC,CAAA;IAClE,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,MAAM,OAAO,GAAG,MAAM,CAAA;QACtB,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,GAAG,IAAI,CAAA,CAAC,CAAC,CAAC,CAAA;QACxD,OAAO,EAAE,CAAA;IACX,CAAC,CAAA;IACD,MAAM,OAAO,GAAY,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;QACzC,IAAI,OAAO,EAAE,KAAK;YAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;;YAClC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrB,MAAM,EAAE,CAAA;IACV,CAAC,CAAA;IACD,IAAI,CAAC,OAAO,CAAC,CAAA;IACb,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;QACxB,SAAS,CAAC;YACR,IAAI,KAAK;gBAAE,OAAM;YACjB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;YAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,MAAM,KAAK,CAAC;oBAAE,OAAM;gBACxB,MAAM,OAAO,CAAA;gBACb,SAAQ;YACV,CAAC;YACD,MAAM,EAAE,CAAA;YACR,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA;YACrB,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;gBAChB,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,KAAK,GAAG,MAAM,CAAA;oBACd,OAAO,CAAC,MAAM,CAAC,CAAA;gBACjB,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,MAAM,EAAE,CAAA;gBACR,MAAM,EAAE,CAAA;YACV,CAAC;QACH,CAAC;IACH,CAAC,CAAA;IACD,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IACtE,IAAI,KAAK;QAAE,MAAM,KAAK,CAAA;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAe,EACf,SAAiB,EACjB,QAA4D,EAAE;IAE9D,MAAM,OAAO,GAAqB,EAAE,CAAA;IACpC,MAAM,GAAG,GAAG,EAAE,SAAS,EAAE,CAAA;IAEzB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IACnD,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC7C,IAAI,CAAC,SAAS,CAAC,EAAE;YAAE,MAAM,IAAI,iBAAiB,CAAC,UAAU,EAAE,sDAAsD,CAAC,CAAA;QAClH,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,SAAS;YAAE,MAAM,IAAI,iBAAiB,CAAC,UAAU,EAAE,4DAA4D,CAAC,CAAA;QAC1I,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IAC/E,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,YAAY,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACrG,qEAAqE;QACrE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3D,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;IAC9C,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC1F,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC1B,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,EAAE,8BAA8B,eAAe,CAAC,QAAQ,qCAAqC,CAAC,CAAA;QAC/I,CAAC;QACD,MAAM,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;IACjD,CAAC;IACD,MAAM,cAAc,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;IACjD,IAAI,CAAC,cAAc,CAAC,EAAE;QAAE,MAAM,IAAI,iBAAiB,CAAC,UAAU,EAAE,kDAAkD,CAAC,CAAA;IACnH,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAA;IACjC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,UAAU,EAAE,6CAA6C,CAAC,CAAA;IAC/I,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,EAAE,qFAAqF,CAAC,CAAA;IAC3I,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;IAClE,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAA;IAEtB,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAChE,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAA;IACnH,MAAM,cAAc,GAAG,CAAC,MAAc,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QACjD,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAC/B,IAAI,IAAI,KAAK,CAAC;YAAE,SAAS,EAAE,CAAA;QAC3B,MAAM,EAAE,CAAA;IACV,CAAC,CAAA;IAED,MAAM,WAAW,GAAG,KAAK,EAAE,IAAqF,EAAE,OAAoB,EAAE,EAAE;QACxI,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QAClD,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,MAAM,CAAA;QACtC,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAgD,CAAA;QAC/E,OAAO,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;IACjD,CAAC,CAAA;IAED,MAAM,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE;QACzB,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,OAAO;gBAAE,SAAQ;YACpD,OAAO,CAAC,KAAK,IAAI,EAAE;gBACjB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,EAAoB,CAAC,CAAA;gBAC9E,MAAM,EAAE,CAAA;YACV,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAA;YAC9C,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,CAAC,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAA;YAC9E,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,CAAC;gBACzC,OAAO,CAAC,KAAK,IAAI,EAAE;oBACjB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC,cAAc,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,EAAoB,CAAC,CAAA;oBAC1J,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBACzB,CAAC,CAAC,CAAA;YACJ,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;gBACrC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;oBACrB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;oBAC/C,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAoB,CAAC,CAAA;oBACjE,IAAI,IAAI,KAAK,eAAe,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;wBAC1C,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAE,MAAM,CAAC,IAA8B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;wBAC9F,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;wBACjF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;4BACnC,IAAI,CAAC,KAAK,IAAI,EAAE;gCACd,OAAO,CAAC,IAAI,CAAC,MAAM,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAA;gCACjE,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;4BACzB,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;wBACrB,CAAC;oBACH,CAAC;oBACD,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBACzB,CAAC,CAAC,CAAA;YACJ,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,0BAA0B;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAA;QACtH,CAAC;IACH,CAAC,EAAE,GAAG,CAAC,WAAW,IAAI,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAE9H,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,CAAA;IAC9B,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,+GAA+G;AAC/G,KAAK,UAAU,oBAAoB,CAAC,GAAe,EAAE,GAA0C,EAAE,SAAiB;IAChH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,CAAC,CAAA;IAC1E,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,cAAuB,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,CAAA;IAC7E,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAA;IAC3D,MAAM,SAAS,GAAG,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACtD,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,sBAAsB,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAA;IACvF,uEAAuE;IACvE,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,sBAAsB,CAAC,gBAAgB,CAAC,EAAE,CAAA;IACzG,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,CAAA;AAChE,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,SAA4B,EAAE,OAAkC;IAC/G,MAAM,SAAS,GAAG,gBAAgB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAA;IACrE,MAAM,MAAM,GAAG,iCAAiC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACrE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAClE,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC3C,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,QAAQ,EAAE,CAAC;QACvD,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,sFAAsF,CAAC,CAAA;IAC3I,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAA;AACxC,CAAC"}