@withbuddi/buddi 0.1.0-pre.36 → 0.1.0-pre.37

package/packages/tools/host/dist/service.js

@@ -1,22 +1,39 @@
 import path from 'node:path';
 import { mkdir, readFile, realpath, stat, writeFile } from 'node:fs/promises';
+import { realpathSync } from 'node:fs';
 import { z } from 'zod';
-import { sha256Of } from '@buddi/core/plugin';
+import { sha256Of, ToolRefusal } from '@buddi/core/plugin';
 import { runCommand } from './process.js';
+import { NO_CONFINEMENT, RUNNABLE_EXTENSIONS, confinementArgv, detectConfinement, interpreterFor, sha256File, shellQuote, } from './skill-run.js';
+const skillRunInput = z.object({
+    bundle: z.string().min(1).max(64).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/).describe('The skill bundle\'s name, as its skill heading shows it.'),
+    script: z.string().min(1).max(512).describe('The script\'s path inside the bundle, under scripts/ (scripts/make_cover.py).'),
+    args: z.array(z.string().max(4096)).max(32).default([]).describe('Arguments, each passed as one word.'),
+}).strict();
 export const execInput = z.object({
-    command: z.string().min(1).max(32_000).describe('Bash command or script; stdin is closed. Never include passwords or secrets.'),
+    command: z.string().min(1).max(32_000).optional().describe('Bash command or script; stdin is closed. Never include passwords or secrets. Leave out when running a skill bundle\'s script.'),
+    skill: skillRunInput.optional().describe('Run a script from a skill bundle you hold, instead of a command: it works in its own folder, reads the bundle, writes only in that folder, and asks the owner every time.'),
     cwd: z.string().min(1).max(4096).optional().describe('Optional absolute working directory. Defaults to this conversation’s persistent workspace.'),
     timeoutMs: z.number().int().min(100).max(600_000).default(120_000),
     attachments: z.array(z.string().uuid()).max(8).default([]).describe('Artifact IDs to copy into inputs/<artifact-id>/<original-filename> in the workspace.'),
     outputs: z.array(z.string().min(1).max(4096)).max(8).default([]).describe('Files relative to the workspace to return as downloadable artifacts after successful execution.'),
 }).strict();
 const LIMIT = 20 * 1024 * 1024;
+let processBundles = null;
+/** The gateway's bundles for every host service in this process (set once at start). */
+export function useSkillBundles(skills) { processBundles = skills; }
 export class HostService {
     env;
     #runs = new Map();
+    /** The owner's skill bundles, for the `skill` form; this service's own, else the process's (`useSkillBundles`). */
+    skills = null;
+    /** The confinement a script runs inside; detected unless a caller (a test) says. */
+    confinement = () => detectConfinement();
     constructor(env = process.env) {
         this.env = env;
     }
+    useSkillBundles(skills) { this.skills = skills; }
+    #bundles() { return this.skills ?? processBundles; }
     workspace(ctx) {
         if (!ctx.agentId || !ctx.conversationId)
             throw new Error('Host tools require an agent and conversation.');
@@ -37,10 +54,19 @@ export class HostService {
         return runs.length;
     }
     async describe(input, ctx) {
+        if ((input.command === undefined) === (input.skill === undefined)) {
+            throw new ToolRefusal('Give host.exec either a command or skill: { bundle, script, args }, not both and not neither.');
+        }
         const workspace = this.workspace(ctx);
-        if (input.cwd && !path.isAbsolute(input.cwd))
+        const run = input.skill ? this.#skillRun(input.skill, ctx) : null;
+        if (!run)
+            this.#refuseBundleReach(input, workspace);
+        const base = run ? run.work : workspace;
+        if (!run && input.cwd && !path.isAbsolute(input.cwd))
             throw new Error('cwd must be an absolute directory.');
-        const cwd = input.cwd && input.cwd !== workspace ? await realpath(input.cwd) : workspace;
+        if (run && input.cwd && path.resolve(input.cwd) !== run.work)
+            throw new ToolRefusal('A bundle script runs in its own working folder; leave cwd out.');
+        const cwd = run ? run.work : input.cwd && input.cwd !== workspace ? await realpath(input.cwd) : workspace;
         const attachments = [];
         let total = 0;
         for (const id of input.attachments) {
@@ -54,20 +80,143 @@ export class HostService {
             if (sha256Of(bytes) !== row.sha256)
                 throw new Error(`Attachment ${id} changed.`);
             const filename = path.basename(row.filename ?? `file.${row.mime === 'text/csv' ? 'csv' : 'bin'}`).replace(/[^a-zA-Z0-9._-]/g, '_');
-            attachments.push({ id, sha256: row.sha256, path: path.join(workspace, 'inputs', id, filename === '.' || filename === '..' ? 'file' : filename) });
+            attachments.push({ id, sha256: row.sha256, path: path.join(base, 'inputs', id, filename === '.' || filename === '..' ? 'file' : filename) });
         }
         for (const output of input.outputs) {
-            if (!inside(workspace, path.resolve(workspace, output)))
-                throw new Error('Output paths must be inside the conversation workspace.');
+            if (!inside(base, path.resolve(base, output)))
+                throw new Error(run ? 'Output paths must be inside the script\'s working folder.' : 'Output paths must be inside the conversation workspace.');
+        }
+        if (run) {
+            const envelope = { command: run.command, shell: '/bin/bash', cwd, workspace: base,
+                timeoutMs: input.timeoutMs, attachments, outputs: input.outputs, authority: 'skill-script-confined', skillRun: run.view };
+            const v = run.view;
+            return { envelope, preview: `Run a script from ${v.title} — asks every time.\n\nAgent: ${ctx.agentId}\nScript: ${v.interpreter} ${v.script}\nBundle: ${v.title} (${v.bundle})\nArguments: ${v.args.length ? v.args.join(' ') : 'none'}\nWorking folder: ${v.writes}\nIt reads only ${v.title}'s ${v.files} files, the working folder and the system it runs on — none of your own files. It writes only in the working folder.${v.confinement === 'macos-sandbox' ? ' It cannot open other apps.' : ''} ${v.network ? `Network: on — ${v.title} says its scripts need it, so this script can send what it reads to the internet.` : 'Network: off.'}\nTimeout: ${input.timeoutMs / 1000}s\n\nInputs: ${attachments.map(a => a.path).join(', ') || 'none'}\nReturned files: ${input.outputs.join(', ') || 'none'}\n\nAllow once runs this script with these arguments, once. A bundle script is never allowed for a conversation or always.` };
         }
         const envelope = { command: input.command, shell: '/bin/bash', cwd, workspace,
             timeoutMs: input.timeoutMs, attachments, outputs: input.outputs, authority: 'host-user-unsandboxed' };
         return { envelope, preview: `Run as your host user — NOT sandboxed. Commands can access your files and network, install software and modify this installation. No administrator password is provided.\n\nAgent: ${ctx.agentId}\nDirectory: ${cwd}\nTimeout: ${input.timeoutMs / 1000}s\n\n${input.command}\n\nInputs: ${attachments.map(a => a.path).join(', ') || 'none'}\nReturned files: ${input.outputs.join(', ') || 'none'}\n\nAllow once approves this command. Conversation auto-mode allows ALL host commands by this agent in this conversation until revoked. Always allows ALL host commands by this agent across future conversations/tasks until revoked. These are not command-prefix grants.` };
     }
+    /** The bundle script a `skill` call names, checked: held, trusted, a script, runnable, confinable. */
+    #skillRun(skill, ctx) {
+        const bundles = this.#bundles();
+        if (!bundles)
+            throw new ToolRefusal('Skill bundles are not available to host.exec in this process.');
+        const bundle = bundles.held(ctx.agentId, skill.bundle);
+        if (!bundle)
+            throw new ToolRefusal(`You do not hold a skill bundle called "${skill.bundle}".`);
+        if (bundle.untrusted) {
+            throw new ToolRefusal(`${bundle.title} came in a .zip and the owner has not marked it as theirs, so its scripts cannot run. Ask the owner to read it and mark it as theirs on the Skills page (Agents → Skills).`);
+        }
+        const script = path.posix.normalize(skill.script.replace(/\\/g, '/').replace(/^\.\//, ''));
+        if (!bundle.scripts.includes(script)) {
+            throw new ToolRefusal(`"${skill.script}" is not one of ${bundle.title}'s scripts (${bundle.scripts.join(', ') || 'it has none'}).`);
+        }
+        const interpreter = interpreterFor(script);
+        if (!interpreter)
+            throw new ToolRefusal(`buddi runs a bundle's ${RUNNABLE_EXTENSIONS.join(', ')} scripts; "${script}" is none of them.`);
+        const confinement = this.confinement();
+        if (!confinement)
+            throw new ToolRefusal(NO_CONFINEMENT);
+        const file = path.join(bundle.dir, script);
+        const key = sha256Of(Buffer.from(JSON.stringify([ctx.buddi.owner.id, ctx.agentId, ctx.conversationId]))).slice(0, 16);
+        const work = path.join(ctx.buddi.dir.legacyPath, 'skill-runs', bundle.name, key);
+        const command = [interpreter, shellQuote(file), ...skill.args.map(shellQuote)].join(' ');
+        return {
+            work,
+            command,
+            view: {
+                bundle: bundle.name, title: bundle.title, script, interpreter, args: skill.args,
+                sha256: sha256File(file), reads: bundle.dir, writes: work, files: bundle.files.length,
+                untrusted: false, confinement, network: bundle.network === true,
+            },
+        };
+    }
+    /**
+     * A plain command may not run anything from the skills folder: a bundle's
+     * script runs through the `skill` form, which asks each time and confines it.
+     * Every path-like word of the command (and its cwd) is resolved against the
+     * cwd and against each `cd` before it, links followed, and the command is
+     * refused when one lands in the skills folder. It reads the command's text,
+     * so a command built to hide a path (a variable, an `eval`) can still get
+     * there: a plain host command runs unsandboxed as the owner's user, as its
+     * own card says.
+     */
+    #refuseBundleReach(input, workspace) {
+        const root = this.#bundles()?.root();
+        if (!root)
+            return;
+        const roots = new Set([path.resolve(root)]);
+        try {
+            roots.add(realpathSync(root));
+        }
+        catch { /* Not there yet. */ }
+        const real = (p) => {
+            // The longest existing prefix, links followed, with the rest put back.
+            let head = p;
+            const rest = [];
+            for (;;) {
+                try {
+                    return path.join(realpathSync(head), ...rest);
+                }
+                catch { /* climb */ }
+                const up = path.dirname(head);
+                if (up === head)
+                    return p;
+                rest.unshift(path.basename(head));
+                head = up;
+            }
+        };
+        const under = (p) => {
+            for (const candidate of new Set([path.resolve(p), real(path.resolve(p))])) {
+                for (const r of roots)
+                    if (candidate === r || candidate.startsWith(r + path.sep))
+                        return true;
+            }
+            return false;
+        };
+        const refuse = () => {
+            throw new ToolRefusal('That command reaches into the skills folder. Run a bundle\'s script with skill: { bundle, script, args } instead; it asks the owner each time and runs the script confined.');
+        };
+        const home = process.env.HOME ?? '';
+        const cwd = path.resolve(workspace, input.cwd ?? '.');
+        if (under(cwd))
+            refuse();
+        const said = input.command ?? '';
+        for (const r of roots)
+            if (said.includes(r))
+                refuse();
+        // Words, unquoted; a separator, a redirection or a pipe splits them too.
+        const words = said.split(/[\s;&|<>()`]+/).map((w) => w.replace(/^['"]|['"]$/g, '').replace(/^[A-Za-z_][A-Za-z0-9_]*=/, '')).filter((w) => w !== '');
+        const bases = [cwd];
+        for (let i = 0; i < words.length; i += 1) {
+            const raw = words[i];
+            const word = raw.startsWith('~/') && home ? path.join(home, raw.slice(2)) : raw;
+            if (word === 'cd' || word === 'pushd') {
+                const next = words[i + 1];
+                if (next && bases.length < 32)
+                    bases.push(...bases.map((b) => path.resolve(b, next.startsWith('~/') && home ? path.join(home, next.slice(2)) : next)));
+                continue;
+            }
+            if (word.startsWith('-') && !word.includes('='))
+                continue;
+            const value = word.includes('=') && word.startsWith('-') ? word.slice(word.indexOf('=') + 1) : word;
+            if (value === '' || /^[a-z]+:\/\//i.test(value))
+                continue;
+            for (const b of bases)
+                if (under(path.resolve(b, value)))
+                    refuse();
+        }
+    }
     async execute(input, ctx) {
         if (!ctx.actionId || (ctx.delegationDepth ?? 0) > 0)
             throw new Error('Host execution requires an approved action, not delegated authority.');
         const { envelope } = await this.describe(input, ctx);
+        // A bundle script is bound to the bytes the owner approved: say so plainly
+        // when the file changed since, before the generic envelope check.
+        const approvedRun = ctx.approvedEffect?.envelope?.skillRun;
+        if (envelope.skillRun && (!approvedRun || approvedRun.sha256 !== envelope.skillRun.sha256)) {
+            throw new ToolRefusal(`${envelope.skillRun.script} in ${envelope.skillRun.title} changed after it was approved, so nothing ran. Ask again to run the script as it is now.`);
+        }
         ctx.buddi.approvals.assert(ctx, envelope);
         if (this.#runs.size >= 4)
             throw new Error('Four host commands are already running. Wait before starting another.');
@@ -76,7 +225,7 @@ export class HostService {
         const controller = new AbortController();
         const signal = ctx.signal ? AbortSignal.any([controller.signal, ctx.signal]) : controller.signal;
         const view = { actionId: ctx.actionId, ownerId: ctx.buddi.owner.id, agentId: ctx.agentId,
-            conversationId: ctx.conversationId, command: input.command, cwd: envelope.cwd,
+            conversationId: ctx.conversationId, command: envelope.command, cwd: envelope.cwd,
             startedAt: new Date().toISOString(), stdout: '', stderr: '' };
         this.#runs.set(ctx.actionId, { view, controller });
         try {
@@ -100,8 +249,22 @@ export class HostService {
                 }
             }
             signal.throwIfAborted();
-            const result = await runCommand({ command: input.command, cwd: envelope.cwd,
+            const skillRun = envelope.skillRun ?? null;
+            let confined = null;
+            if (skillRun) {
+                // Read once more right before it starts: the file may change while attachments are copied.
+                if (sha256File(path.join(skillRun.reads, skillRun.script)) !== approvedRun.sha256) {
+                    throw new ToolRefusal(`${skillRun.script} in ${skillRun.title} changed after it was approved, so nothing ran. Ask again to run the script as it is now.`);
+                }
+                const work = await realpath(envelope.workspace);
+                const tmp = path.join(work, '.tmp');
+                await mkdir(tmp, { recursive: true, mode: 0o700 });
+                confined = { wrap: confinementArgv(skillRun.confinement, work, { bundle: skillRun.reads, interpreter: skillRun.interpreter, network: skillRun.network === true }),
+                    extraEnv: { TMPDIR: tmp, PYTHONDONTWRITEBYTECODE: '1', PIP_NO_CACHE_DIR: '1', BUDDI_SKILL_DIR: skillRun.reads, BUDDI_SKILL_WORK: work } };
+            }
+            const result = await runCommand({ command: envelope.command, cwd: envelope.cwd,
                 timeoutMs: input.timeoutMs, env: this.env, signal,
+                ...(confined ? { wrap: confined.wrap, extraEnv: confined.extraEnv } : {}),
                 onOutput: (stdout, stderr) => { view.stdout = stdout; view.stderr = stderr; } });
             const artifacts = [];
             const outputErrors = [];

package/packages/tools/host/dist/service.js.map

@@ -1 +1 @@
-{"version":3,"file":"service.js","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAoB,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IAC/H,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4FAA4F,CAAC;IAClJ,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAClE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,sFAAsF,CAAC;IAC3J,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,iGAAiG,CAAC;CAC7K,CAAC,CAAC,MAAM,EAAE,CAAC;AAMZ,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/B,MAAM,OAAO,WAAW;IAED;IADZ,KAAK,GAAG,IAAI,GAAG,EAA0D,CAAC;IACnF,YAAqB,MAAyB,OAAO,CAAC,GAAG;QAApC,QAAG,GAAH,GAAG,CAAiC;IAAG,CAAC;IAC7D,SAAS,CAAC,GAA8D;QACtE,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC1G,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1G,sEAAsE;QACtE,uEAAuE;QACvE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAM,CAAC,GAAG,CAAC,UAAW,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,OAAe,EAAE,OAAgB,EAAE,cAAuB;QAC7D,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO;YACvF,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,cAAc,KAAK,cAAc,CAAC,CAAC;aAC/F,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC,OAAe,EAAE,OAAgB,EAAE,cAAuB;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;QACzD,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,KAAY,EAAE,GAAgB;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACpG,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzF,MAAM,WAAW,GAAG,EAAE,CAAC;QACvB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAM,CAAC,KAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;YAC1D,KAAK,IAAI,GAAG,CAAC,SAAS,CAAC;YACvB,IAAI,KAAK,GAAG,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YACnF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAM,CAAC,KAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnD,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,IAAI,QAAQ,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;YACnI,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpJ,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACtI,CAAC;QACD,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS;YAC3E,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,uBAAuB,EAAE,CAAC;QACxG,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,sLAAsL,GAAG,CAAC,OAAO,gBAAgB,GAAG,cAAc,KAAK,CAAC,SAAS,GAAG,IAAI,QAAQ,KAAK,CAAC,OAAO,eAAe,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,qBAAqB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,6QAA6Q,EAAE,CAAC;IAClrB,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,KAAY,EAAE,GAAgB;QAC1C,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC7I,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACrD,GAAG,CAAC,KAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QACnH,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QACvK,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACjG,MAAM,IAAI,GAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,KAAM,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAQ;YACjG,cAAc,EAAE,GAAG,CAAC,cAAe,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG;YAC9E,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAChE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAClE,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC9C,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAM,CAAC,KAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBACvD,IAAI,CAAC,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBACpE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAM,CAAC,KAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACnD,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACjG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC7E,IAAI,CAAC;oBAAC,MAAM,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAC7E,OAAO,GAAG,EAAE,CAAC;oBACX,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,UAAU,CAAC,MAAM;wBAAE,MAAM,GAAG,CAAC;gBACrI,CAAC;YACH,CAAC;YACD,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACzE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM;gBACjD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACnF,MAAM,SAAS,GAAG,EAAE,CAAC;YACrB,MAAM,YAAY,GAAa,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1D,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBACnC,IAAI,CAAC;wBACH,MAAM,CAAC,cAAc,EAAE,CAAC;wBACxB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;wBAChD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;wBACtE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC;4BAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;wBACzF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;wBAC9B,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;wBACnB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,KAAK;4BAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;wBACjI,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAM,CAAC,KAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;4BACzF,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;wBAC9F,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS;4BAC3F,WAAW,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,uBAAuB,IAAI,oBAAoB,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,MAAM,EAAE,kBAAkB,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;oBACtJ,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAAC,YAAY,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAAC,CAAC;gBAChH,CAAC;YACH,CAAC;YACD,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY;gBACxE,IAAI,EAAE,wKAAwK,EAAE,CAAC;QACrL,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;IAChD,CAAC;CACF;AACD,SAAS,MAAM,CAAC,IAAY,EAAE,IAAY;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3C,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AACrH,CAAC;AACD,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,KAAK,GAA2B,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,kBAAkB;QACnI,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,mEAAmE;QACvG,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC/F,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC;AAC/E,CAAC;AACD,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAkC,CAAC;AAC/D,MAAM,UAAU,WAAW,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC9D,IAAI,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,OAAO,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAAC,CAAC;IAC7E,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAoB,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EACL,cAAc,EAAE,mBAAmB,EAAE,eAAe,EAAE,iBAAiB,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,GAEhH,MAAM,gBAAgB,CAAC;AAExB,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IAC1I,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,+EAA+E,CAAC;IAC5H,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;CACxG,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+HAA+H,CAAC;IAC3L,KAAK,EAAE,aAAa,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2KAA2K,CAAC;IACrN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4FAA4F,CAAC;IAClJ,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAClE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,sFAAsF,CAAC;IAC3J,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,iGAAiG,CAAC;CAC7K,CAAC,CAAC,MAAM,EAAE,CAAC;AAkBZ,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/B,IAAI,cAAc,GAAwB,IAAI,CAAC;AAC/C,wFAAwF;AACxF,MAAM,UAAU,eAAe,CAAC,MAA2B,IAAU,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC;AAC/F,MAAM,OAAO,WAAW;IAMD;IALZ,KAAK,GAAG,IAAI,GAAG,EAA0D,CAAC;IACnF,mHAAmH;IACnH,MAAM,GAAwB,IAAI,CAAC;IACnC,oFAAoF;IACpF,WAAW,GAA6B,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC;IAClE,YAAqB,MAAyB,OAAO,CAAC,GAAG;QAApC,QAAG,GAAH,GAAG,CAAiC;IAAG,CAAC;IAC7D,eAAe,CAAC,MAA2B,IAAU,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;IAC5E,QAAQ,KAA0B,OAAO,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,CAAC,CAAC;IACzE,SAAS,CAAC,GAA8D;QACtE,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC1G,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1G,sEAAsE;QACtE,uEAAuE;QACvE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAM,CAAC,GAAG,CAAC,UAAW,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,OAAe,EAAE,OAAgB,EAAE,cAAuB;QAC7D,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO;YACvF,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,cAAc,KAAK,cAAc,CAAC,CAAC;aAC/F,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC,OAAe,EAAE,OAAgB,EAAE,cAAuB;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;QACzD,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,KAAY,EAAE,GAAgB;QAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,WAAW,CAAC,+FAA+F,CAAC,CAAC;QACzH,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClE,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACxC,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC5G,IAAI,GAAG,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI;YAAE,MAAM,IAAI,WAAW,CAAC,gEAAgE,CAAC,CAAC;QACtJ,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1G,MAAM,WAAW,GAAG,EAAE,CAAC;QACvB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAM,CAAC,KAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;YAC1D,KAAK,IAAI,GAAG,CAAC,SAAS,CAAC;YACvB,IAAI,KAAK,GAAG,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YACnF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAM,CAAC,KAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnD,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,IAAI,QAAQ,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;YACnI,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/I,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,2DAA2D,CAAC,CAAC,CAAC,yDAAyD,CAAC,CAAC;QAChM,CAAC;QACD,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI;gBAC/E,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,uBAAuB,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;YAC5H,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC,KAAK,iCAAiC,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,MAAM,iBAAiB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,CAAC,MAAM,mBAAmB,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,KAAK,uHAAuH,CAAC,CAAC,WAAW,KAAK,eAAe,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,KAAK,mFAAmF,CAAC,CAAC,CAAC,eAAe,cAAc,KAAK,CAAC,SAAS,GAAG,IAAI,gBAAgB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,qBAAqB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,4HAA4H,EAAE,CAAC;QACh5B,CAAC;QACD,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS;YAC5E,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,uBAAuB,EAAE,CAAC;QACxG,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,sLAAsL,GAAG,CAAC,OAAO,gBAAgB,GAAG,cAAc,KAAK,CAAC,SAAS,GAAG,IAAI,QAAQ,KAAK,CAAC,OAAO,eAAe,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,qBAAqB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,6QAA6Q,EAAE,CAAC;IAClrB,CAAC;IACD,sGAAsG;IACtG,SAAS,CAAC,KAAoC,EAAE,GAAgB;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,WAAW,CAAC,+DAA+D,CAAC,CAAC;QACrG,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,WAAW,CAAC,0CAA0C,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QAC/F,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,WAAW,CAAC,GAAG,MAAM,CAAC,KAAK,4KAA4K,CAAC,CAAC;QACrN,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3F,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC,MAAM,mBAAmB,MAAM,CAAC,KAAK,eAAe,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,CAAC;QACtI,CAAC;QACD,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,WAAW,CAAC,yBAAyB,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,MAAM,oBAAoB,CAAC,CAAC;QACzI,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACvC,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAM,CAAC,GAAG,CAAC,UAAW,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnF,MAAM,OAAO,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzF,OAAO;YACL,IAAI;YACJ,OAAO;YACP,IAAI,EAAE;gBACJ,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;gBAC/E,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;gBACrF,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI;aAChE;SACF,CAAC;IACJ,CAAC;IACD;;;;;;;;;OASG;IACH,kBAAkB,CAAC,KAAY,EAAE,SAAiB;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC;YAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE;YACjC,uEAAuE;YACvE,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,SAAS,CAAC;gBACR,IAAI,CAAC;oBAAC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC;gBAC5E,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC9B,IAAI,EAAE,KAAK,IAAI;oBAAE,OAAO,CAAC,CAAC;gBAC1B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBAClC,IAAI,GAAG,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,CAAC,CAAS,EAAW,EAAE;YACnC,KAAK,MAAM,SAAS,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,KAAK,MAAM,CAAC,IAAI,KAAK;oBAAE,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;wBAAE,OAAO,IAAI,CAAC;YAChG,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,GAAU,EAAE;YACzB,MAAM,IAAI,WAAW,CAAC,6KAA6K,CAAC,CAAC;QACvM,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,GAAG,CAAC;YAAE,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,MAAM,EAAE,CAAC;QACtD,yEAAyE;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACpJ,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;QACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YACtB,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAChF,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC1B,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;oBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACvJ,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACpG,IAAI,KAAK,KAAK,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC1D,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;oBAAE,MAAM,EAAE,CAAC;QACrE,CAAC;IACH,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,KAAY,EAAE,GAAgB;QAC1C,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC7I,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACrD,2EAA2E;QAC3E,kEAAkE;QAClE,MAAM,WAAW,GAAI,GAAG,CAAC,cAAc,EAAE,QAAoD,EAAE,QAAQ,CAAC;QACxG,IAAI,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3F,MAAM,IAAI,WAAW,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,OAAO,QAAQ,CAAC,QAAQ,CAAC,KAAK,2FAA2F,CAAC,CAAC;QAC9K,CAAC;QACD,GAAG,CAAC,KAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QACnH,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QACvK,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACjG,MAAM,IAAI,GAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,KAAM,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAQ;YACjG,cAAc,EAAE,GAAG,CAAC,cAAe,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjF,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAChE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAClE,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC9C,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAM,CAAC,KAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBACvD,IAAI,CAAC,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBACpE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAM,CAAC,KAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACnD,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACjG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC7E,IAAI,CAAC;oBAAC,MAAM,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAC7E,OAAO,GAAG,EAAE,CAAC;oBACX,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,UAAU,CAAC,MAAM;wBAAE,MAAM,GAAG,CAAC;gBACrI,CAAC;YACH,CAAC;YACD,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC;YAC3C,IAAI,QAAQ,GAA2D,IAAI,CAAC;YAC5E,IAAI,QAAQ,EAAE,CAAC;gBACb,2FAA2F;gBAC3F,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,WAAY,CAAC,MAAM,EAAE,CAAC;oBACnF,MAAM,IAAI,WAAW,CAAC,GAAG,QAAQ,CAAC,MAAM,OAAO,QAAQ,CAAC,KAAK,2FAA2F,CAAC,CAAC;gBAC5J,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAChD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACpC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnD,QAAQ,GAAG,EAAE,IAAI,EAAE,eAAe,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;oBAC/J,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,eAAe,EAAE,QAAQ,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,CAAC;YAC9I,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG;gBAC5E,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM;gBACjD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACnF,MAAM,SAAS,GAAG,EAAE,CAAC;YACrB,MAAM,YAAY,GAAa,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1D,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBACnC,IAAI,CAAC;wBACH,MAAM,CAAC,cAAc,EAAE,CAAC;wBACxB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;wBAChD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;wBACtE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC;4BAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;wBACzF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;wBAC9B,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;wBACnB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,KAAK;4BAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;wBACjI,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAM,CAAC,KAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;4BACzF,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;wBAC9F,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS;4BAC3F,WAAW,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,uBAAuB,IAAI,oBAAoB,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,MAAM,EAAE,kBAAkB,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;oBACtJ,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAAC,YAAY,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAAC,CAAC;gBAChH,CAAC;YACH,CAAC;YACD,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY;gBACxE,IAAI,EAAE,wKAAwK,EAAE,CAAC;QACrL,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;IAChD,CAAC;CACF;AACD,SAAS,MAAM,CAAC,IAAY,EAAE,IAAY;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3C,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AACrH,CAAC;AACD,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,KAAK,GAA2B,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,kBAAkB;QACnI,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,mEAAmE;QACvG,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC/F,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC;AAC/E,CAAC;AACD,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAkC,CAAC;AAC/D,MAAM,UAAU,WAAW,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC9D,IAAI,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,OAAO,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAAC,CAAC;IAC7E,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/packages/tools/host/dist/skill-run.d.ts

@@ -0,0 +1,55 @@
+/** A bundle as the host tool needs it, resolved by the gateway from the agent's skills. */
+export interface SkillBundleView {
+    name: string;
+    title: string;
+    /** The bundle's folder (holds SKILL.md). */
+    dir: string;
+    /** Uploaded and not marked as the owner's: its scripts cannot run. */
+    untrusted: boolean;
+    /** Every file's path inside the bundle, SKILL.md included. */
+    files: string[];
+    /** The paths under `scripts/`. */
+    scripts: string[];
+    /** SKILL.md says `network: true`: its scripts run with the network. */
+    network?: boolean;
+}
+export interface SkillBundles {
+    /** The bundle called `name` that `agentId` holds, or null when it holds none of that name. */
+    held(agentId: string, name: string): SkillBundleView | null;
+    /** The skills folder: a plain command reaching into it is refused. */
+    root(): string;
+}
+export type Confinement = 'macos-sandbox' | 'bwrap';
+/** The confinement this computer offers, or null. */
+export declare function detectConfinement(platform?: NodeJS.Platform): Confinement | null;
+export declare function interpreterFor(script: string): string | null;
+export declare const RUNNABLE_EXTENSIONS: string[];
+/** One argument, quoted for bash. */
+export declare function shellQuote(value: string): string;
+export declare function sha256File(file: string): string;
+export interface ConfineOptions {
+    /** The bundle's folder: readable, never writable. */
+    bundle?: string;
+    /** The interpreter the script runs under (`python3`, `node`): its install is made readable wherever it lives. */
+    interpreter?: string;
+    /** The bundle declared `network: true`; otherwise the script has no network. */
+    network?: boolean;
+}
+/** Where an interpreter on PATH is installed (two levels above its real binary), or null. */
+export declare function interpreterHome(name: string, envPath?: string): string | null;
+/**
+ * The argv a confined run is wrapped in, before `/bin/bash -c`. `work` is a
+ * real path.
+ *
+ * What it holds: writes go only to `work` (and the null and tty devices);
+ * reads only the system folders, the interpreter's install, the bundle and
+ * `work` — nothing else of the user's (home, keys, other projects); no network
+ * unless the bundle declared `network: true`. On macOS it also cannot start
+ * `open`, `osascript`, `automator` or `shortcuts` or reach LaunchServices, so
+ * it cannot ask another app to act outside the sandbox. On Linux it runs in its
+ * own namespaces (bubblewrap `--unshare-all`).
+ */
+export declare function confinementArgv(kind: Confinement, work: string, opts?: ConfineOptions): string[];
+/** The sentence a refusal says when a run cannot be confined here. */
+export declare const NO_CONFINEMENT = "This computer has no way to confine a script to its folder (macOS sandbox-exec, or bubblewrap on Linux: `apt install bubblewrap`), so bundle scripts do not run here.";
+//# sourceMappingURL=skill-run.d.ts.map

package/packages/tools/host/dist/skill-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-run.d.ts","sourceRoot":"","sources":["../src/skill-run.ts"],"names":[],"mappings":"AAuBA,2FAA2F;AAC3F,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,sEAAsE;IACtE,SAAS,EAAE,OAAO,CAAC;IACnB,8DAA8D;IAC9D,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,kCAAkC;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,uEAAuE;IACvE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,8FAA8F;IAC9F,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAAC;IAC5D,sEAAsE;IACtE,IAAI,IAAI,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,WAAW,GAAG,eAAe,GAAG,OAAO,CAAC;AAEpD,qDAAqD;AACrD,wBAAgB,iBAAiB,CAAC,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,WAAW,GAAG,IAAI,CAIlG;AAOD,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE5D;AACD,eAAO,MAAM,mBAAmB,UAA4B,CAAC;AAE7D,qCAAqC;AACrC,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAkBD,MAAM,WAAW,cAAc;IAC7B,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iHAAiH;IACjH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,6FAA6F;AAC7F,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,SAAyB,GAAG,MAAM,GAAG,IAAI,CAW7F;AAKD;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,MAAM,EAAE,CAgCpG;AAED,sEAAsE;AACtE,eAAO,MAAM,cAAc,0KAC8I,CAAC"}

package/packages/tools/host/dist/skill-run.js

@@ -0,0 +1,132 @@
+/**
+ * A skill bundle's script, run through `host.exec`'s `skill` form
+ * (specs/skills-zone.md, part 2).
+ *
+ * The rules, all enforced here or by the confinement:
+ *
+ *  - only a bundle the calling agent holds, and only a file under its
+ *    `scripts/`;
+ *  - never while the bundle is untrusted (uploaded and not marked as the
+ *    owner's): the call is refused before anyone is asked;
+ *  - every run asks (the envelope carries `skillRun`, which core reads as
+ *    "asks each time": no standing permission answers for it, and its card
+ *    offers no Always);
+ *  - the script works in its own folder inside the bundle's run directory,
+ *    writes only there, reads only the system, its interpreter, the bundle
+ *    and that folder, and has no network unless the bundle declares
+ *    `network: true`: `sandbox-exec` on macOS, `bwrap` on Linux. With
+ *    neither, it does not run (see `confinementArgv` for exactly what holds).
+ */
+import { createHash } from 'node:crypto';
+import { existsSync, readFileSync, realpathSync } from 'node:fs';
+import path from 'node:path';
+/** The confinement this computer offers, or null. */
+export function detectConfinement(platform = process.platform) {
+    if (platform === 'darwin')
+        return existsSync('/usr/bin/sandbox-exec') ? 'macos-sandbox' : null;
+    if (platform === 'linux')
+        return BWRAP.find((p) => existsSync(p)) ? 'bwrap' : null;
+    return null;
+}
+const BWRAP = ['/usr/bin/bwrap', '/usr/local/bin/bwrap', '/bin/bwrap'];
+/** The interpreter a script runs under, by its extension. */
+const INTERPRETERS = {
+    '.py': 'python3', '.sh': 'sh', '.bash': 'bash', '.js': 'node', '.mjs': 'node', '.cjs': 'node', '.rb': 'ruby', '.pl': 'perl',
+};
+export function interpreterFor(script) {
+    return INTERPRETERS[path.extname(script).toLowerCase()] ?? null;
+}
+export const RUNNABLE_EXTENSIONS = Object.keys(INTERPRETERS);
+/** One argument, quoted for bash. */
+export function shellQuote(value) {
+    return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+export function sha256File(file) {
+    return createHash('sha256').update(readFileSync(file)).digest('hex');
+}
+/** Programs that hand work to another app outside the sandbox: never started from a bundle script. */
+const MACOS_DENIED_EXEC = ['/usr/bin/open', '/usr/bin/osascript', '/usr/bin/automator', '/usr/bin/shortcuts'];
+/** LaunchServices and Apple Events: how a process asks another app to act for it. */
+const MACOS_DENIED_LOOKUP = [
+    'com.apple.coreservices.launchservicesd', 'com.apple.coreservices.quarantine-resolver',
+    'com.apple.lsd.mapdb', 'com.apple.lsd.modifydb', 'com.apple.coreservices.appleevents',
+];
+/** What a confined macOS run may read: the system and the usual interpreter homes, nothing of the user's. */
+const MACOS_READABLE = [
+    '/usr', '/bin', '/sbin', '/System', '/Library/Developer/CommandLineTools', '/Library/Frameworks', '/Library/Apple',
+    '/Library/Preferences', '/Applications/Xcode.app/Contents', '/private/var/select', '/private/etc',
+    '/private/var/db/timezone', '/private/var/db/dyld', '/opt/homebrew', '/opt/local', '/dev',
+];
+/** What a confined Linux run sees of the system, read-only; everything else is absent. */
+const LINUX_SYSTEM = ['/usr', '/bin', '/sbin', '/lib', '/lib32', '/lib64', '/libx32', '/etc', '/opt'];
+/** Where an interpreter on PATH is installed (two levels above its real binary), or null. */
+export function interpreterHome(name, envPath = process.env.PATH ?? '') {
+    for (const dir of envPath.split(path.delimiter)) {
+        if (!dir)
+            continue;
+        const candidate = path.join(dir, name);
+        if (!existsSync(candidate))
+            continue;
+        let home;
+        try {
+            home = path.dirname(path.dirname(realpathSync(candidate)));
+        }
+        catch {
+            return null;
+        }
+        // `/bin/sh` lives two levels below `/`: never open the whole disk for it.
+        return home.split('/').filter(Boolean).length >= 2 ? home : null;
+    }
+    return null;
+}
+const covered = (dir, roots) => roots.some((r) => dir === r || dir.startsWith(`${r}/`));
+/**
+ * The argv a confined run is wrapped in, before `/bin/bash -c`. `work` is a
+ * real path.
+ *
+ * What it holds: writes go only to `work` (and the null and tty devices);
+ * reads only the system folders, the interpreter's install, the bundle and
+ * `work` — nothing else of the user's (home, keys, other projects); no network
+ * unless the bundle declared `network: true`. On macOS it also cannot start
+ * `open`, `osascript`, `automator` or `shortcuts` or reach LaunchServices, so
+ * it cannot ask another app to act outside the sandbox. On Linux it runs in its
+ * own namespaces (bubblewrap `--unshare-all`).
+ */
+export function confinementArgv(kind, work, opts = {}) {
+    const home = opts.interpreter ? interpreterHome(opts.interpreter) : null;
+    // The interpreter buddi itself runs under, too: a script's node may be this one.
+    const ownHome = path.dirname(path.dirname(process.execPath));
+    const own = ownHome.split('/').filter(Boolean).length >= 2 ? ownHome : null;
+    if (kind === 'macos-sandbox') {
+        const q = (p) => JSON.stringify(p);
+        const readable = [...MACOS_READABLE];
+        for (const extra of [home, own, opts.bundle])
+            if (extra && !covered(extra, readable))
+                readable.push(extra);
+        const profile = [
+            '(version 1)',
+            '(allow default)',
+            '(deny file-read*)',
+            // Seeing that a path exists (stat) is needed to walk to anything; reading it is not allowed.
+            '(allow file-read-metadata)',
+            `(allow file-read* (literal "/") ${readable.map((p) => `(subpath ${q(p)})`).join(' ')} (subpath ${q(work)}))`,
+            '(deny file-write*)',
+            `(allow file-write* (subpath ${q(work)}) (literal "/dev/null") (literal "/dev/zero") (literal "/dev/dtracehelper") (regex #"^/dev/tty") (regex #"^/dev/fd/"))`,
+            `(deny process-exec ${MACOS_DENIED_EXEC.map((p) => `(literal ${q(p)})`).join(' ')})`,
+            `(deny mach-lookup ${MACOS_DENIED_LOOKUP.map((n) => `(global-name ${q(n)})`).join(' ')})`,
+            ...(opts.network ? [] : ['(deny network*)']),
+        ].join('');
+        return ['/usr/bin/sandbox-exec', '-p', profile];
+    }
+    const bwrap = BWRAP.find((p) => existsSync(p)) ?? 'bwrap';
+    const system = [...LINUX_SYSTEM, ...(opts.network ? ['/run/systemd/resolve'] : [])].flatMap((p) => ['--ro-bind-try', p, p]);
+    const extra = [home, own].filter((d) => !!d && !covered(d, LINUX_SYSTEM)).flatMap((d) => ['--ro-bind-try', d, d]);
+    return [bwrap, '--unshare-all', ...(opts.network ? ['--share-net'] : []), '--die-with-parent',
+        ...system, ...extra,
+        ...(opts.bundle ? ['--ro-bind', opts.bundle, opts.bundle] : []),
+        '--dev', '/dev', '--proc', '/proc', '--tmpfs', '/tmp',
+        '--bind', work, work, '--chdir', work];
+}
+/** The sentence a refusal says when a run cannot be confined here. */
+export const NO_CONFINEMENT = 'This computer has no way to confine a script to its folder (macOS sandbox-exec, or bubblewrap on Linux: `apt install bubblewrap`), so bundle scripts do not run here.';
+//# sourceMappingURL=skill-run.js.map

package/packages/tools/host/dist/skill-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-run.js","sourceRoot":"","sources":["../src/skill-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,IAAI,MAAM,WAAW,CAAC;AA2B7B,qDAAqD;AACrD,MAAM,UAAU,iBAAiB,CAAC,WAA4B,OAAO,CAAC,QAAQ;IAC5E,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/F,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,KAAK,GAAG,CAAC,gBAAgB,EAAE,sBAAsB,EAAE,YAAY,CAAC,CAAC;AAEvE,6DAA6D;AAC7D,MAAM,YAAY,GAA2B;IAC3C,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAC5H,CAAC;AACF,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,CAAC;AAClE,CAAC;AACD,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAE7D,qCAAqC;AACrC,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,sGAAsG;AACtG,MAAM,iBAAiB,GAAG,CAAC,eAAe,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;AAC9G,qFAAqF;AACrF,MAAM,mBAAmB,GAAG;IAC1B,wCAAwC,EAAE,4CAA4C;IACtF,qBAAqB,EAAE,wBAAwB,EAAE,oCAAoC;CACtF,CAAC;AACF,6GAA6G;AAC7G,MAAM,cAAc,GAAG;IACrB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,qCAAqC,EAAE,qBAAqB,EAAE,gBAAgB;IAClH,sBAAsB,EAAE,kCAAkC,EAAE,qBAAqB,EAAE,cAAc;IACjG,0BAA0B,EAAE,sBAAsB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM;CAC1F,CAAC;AACF,0FAA0F;AAC1F,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAWtG,6FAA6F;AAC7F,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE;IAC5E,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QACrC,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC1F,0EAA0E;QAC1E,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,KAAwB,EAAW,EAAE,CACjE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAAC,IAAiB,EAAE,IAAY,EAAE,OAAuB,EAAE;IACxF,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,iFAAiF;IACjF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC;YAAE,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3G,MAAM,OAAO,GAAG;YACd,aAAa;YACb,iBAAiB;YACjB,mBAAmB;YACnB,6FAA6F;YAC7F,4BAA4B;YAC5B,mCAAmC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI;YAC7G,oBAAoB;YACpB,+BAA+B,CAAC,CAAC,IAAI,CAAC,wHAAwH;YAC9J,sBAAsB,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;YACpF,qBAAqB,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;YACzF,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;SAC7C,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,OAAO,CAAC,uBAAuB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;IAC1D,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5H,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/H,OAAO,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,mBAAmB;QAC3F,GAAG,MAAM,EAAE,GAAG,KAAK;QACnB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM;QACrD,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,MAAM,cAAc,GACzB,uKAAuK,CAAC"}