@yalehwang/cloudpit 2.0.0 → 3.0.0

package/dist-server/server/modules/providers/tests/codex-resident-provider-injection.test.js

@@ -0,0 +1,484 @@
+/**
+ * Resident Codex provider injection (AC-463).
+ *
+ * The resident path spawned `codex app-server` with the driver-wide launch, so a
+ * session whose model was bound to a project upstream provider still ran under
+ * Codex's process-global `openai` provider. Codex 0.166 does not accept the
+ * binding at `thread/start` — it starts the thread and then refuses the first
+ * `turn/start` with `modelProviderMismatch` — so the provider has to be compiled
+ * into the app-server's spawn arguments.
+ *
+ * WHAT THIS FILE PINS, all against the REAL bundled `@openai/codex` 0.166.0
+ * app-server and a local mock Responses API (no injected transport):
+ *
+ *   - POSITIVE: a session whose launch bag names `modelProviderId` spawns the
+ *     app-server with `-c model_provider` + `-c model_providers.<id>={...}`; the
+ *     turn reaches the mock's `/v1/responses` with `Authorization: Bearer
+ *     <token-file secret>`.
+ *   - ISOLATION: a host sentinel in `process.env` is absent from the child
+ *     environment, and the secret appears in neither the child's argv nor any
+ *     process table — it travels only under the provider's `env_key`.
+ *   - NEGATIVE CONTROL: the same custom provider named ONLY on `thread/start`
+ *     (the shape the old code could have been tempted into) makes the turn fail
+ *     with the server's own "uses bob, but your current provider is openai"
+ *     refusal and never reaches the mock.
+ *   - RESUME: a restarted host re-injects the same provider id and resumes the
+ *     SAME thread id under it. Without the recorded id the resume surfaces the
+ *     server's `modelProviderNotConfigured` sentence instead of falling back.
+ *   - RESTORE WIRING: the production `defaultResidentLaunchOptions` reads the
+ *     session row's `model_provider_id` into the launch bag the restore pass
+ *     hands `startResidentSession`.
+ */
+import assert from 'node:assert/strict';
+import { readFile, readdir, mkdtemp, rm, writeFile } from 'node:fs/promises';
+import http from 'node:http';
+import os from 'node:os';
+import path from 'node:path';
+import test, { after, before } from 'node:test';
+import { closeConnection, initializeDatabase, sessionsDb } from '../../../modules/database/index.js';
+import { CodexAppServerConnection } from '../../../modules/providers/list/codex/codex-app-server.connection.js';
+import { CodexHostDriver, } from '../../../modules/providers/list/codex/codex-host-driver.provider.js';
+import { providerRuntimeService } from '../../../modules/providers/services/provider-runtime.service.js';
+import { createCodexModelProvidersSource } from '../../../modules/settings/index.js';
+import { installCodexProviderRegistryPort } from '../../../shared/ports/codex-provider-registry.port.js';
+import { installProviderRegistryPort } from '../../../shared/ports/provider-registry.port.js';
+const HOST_SENTINEL_KEY = 'CC_CODEX_HOST_SENTINEL';
+const HOST_SENTINEL_VALUE = 'host-secret-that-must-not-reach-the-child';
+const PROVIDER_ID = 'bob';
+const ENV_KEY = 'BOB_API_KEY';
+const TOKEN_SECRET = 'token-file-secret-4242';
+const APP_SESSION = 'codex-resident-injection';
+const MODEL = 'custom-model';
+/**
+ * An isolated database for the whole file.
+ *
+ * The resident turn relay links streamed frames to a session row, so a real
+ * app-server run reads `sessionsDb` even though these criteria never ask it to.
+ * Pointing the process at a private database keeps that read off the operator's
+ * `~/.cloudcli/auth.db` (and off a sibling criterion's fixture).
+ */
+const DATABASE_DIRECTORY = path.join(os.tmpdir(), `codex-resident-injection-db-${process.pid}-${Date.now()}`);
+before(async () => {
+    process.env.DATABASE_PATH = path.join(DATABASE_DIRECTORY, 'auth.db');
+    await initializeDatabase();
+});
+after(async () => {
+    closeConnection();
+    await rm(DATABASE_DIRECTORY, { recursive: true, force: true, maxRetries: 5, retryDelay: 100 });
+});
+/**
+ * A local Responses-API mock. The 400 is deliberate: Codex 0.166 treats it as a
+ * terminal client error (no 5xx backoff), so a turn settles in well under a
+ * second while still exercising the real HTTP path — including the
+ * `Authorization` header the provider's `env_key` produces.
+ */
+async function startMockResponsesApi() {
+    const requests = [];
+    const server = http.createServer((request, response) => {
+        requests.push({
+            url: request.url ?? '',
+            authorization: typeof request.headers.authorization === 'string'
+                ? request.headers.authorization
+                : undefined,
+        });
+        request.resume();
+        response.writeHead(400, { 'content-type': 'application/json' });
+        response.end(JSON.stringify({ error: { message: 'mock: resident provider injection criterion' } }));
+    });
+    await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+    const { port } = server.address();
+    return {
+        requests,
+        baseUrl: `http://127.0.0.1:${port}/v1`,
+        close: () => new Promise((resolve, reject) => {
+            server.close((error) => (error ? reject(error) : resolve()));
+        }),
+    };
+}
+/**
+ * Writes the production settings document + its 0600 token file and installs the
+ * real settings source in the shared registry port. Nothing about resolution is
+ * stubbed: the driver reads the JSON and the token file through the same
+ * `resolve()` the production composition root installs.
+ */
+async function withProviderRegistry(baseUrl, run) {
+    const directory = await mkdtemp(path.join(os.tmpdir(), 'codex-resident-injection-'));
+    const settingsPath = path.join(directory, 'codex.settings.json');
+    const tokenFile = path.join(directory, 'bob.token');
+    await writeFile(tokenFile, TOKEN_SECRET, { encoding: 'utf8', mode: 0o600 });
+    await writeFile(settingsPath, JSON.stringify({
+        modelProviders: {
+            [PROVIDER_ID]: {
+                name: 'Bob Upstream',
+                baseUrl,
+                envKey: ENV_KEY,
+                tokenFile,
+            },
+        },
+    }), 'utf8');
+    const source = createCodexModelProvidersSource({ settingsPath, env: {}, homeDir: directory });
+    installCodexProviderRegistryPort({
+        read: () => ({
+            providers: source.read().providers.map((provider) => ({ id: provider.id })),
+            reservedIds: [],
+        }),
+        resolve: (id) => source.resolve(id),
+    });
+    try {
+        await run(directory);
+    }
+    finally {
+        // The app-server writes its rollout lazily; let the killed child finish
+        // before the directory walk, and retry the race-prone removal.
+        await pause(150);
+        await rm(directory, { recursive: true, force: true, maxRetries: 5, retryDelay: 100 });
+    }
+}
+const SINK = {
+    leaseAdded: () => { },
+    leaseRemoved: () => { },
+    activity: () => { },
+    identity: () => { },
+    exited: () => { },
+};
+/** The binding the manager writes before asking a driver to start a host. */
+function bindingFor(appSessionId) {
+    return {
+        appSessionId,
+        providerSessionId: null,
+        state: 'idle',
+        leases: [],
+        lastActivityAt: Date.now(),
+        peerName: null,
+        detachReason: null,
+    };
+}
+/**
+ * A stand-in for the process-wide session-host manager, narrowed to the two
+ * verbs `CodexResidentHostPort` declares.
+ *
+ * It reproduces the ORDER the real `openHost` uses — register the record, call
+ * `startHost`, then `bind` — because that order is load-bearing here: the
+ * connection (and therefore the spawn args) is created in `startHost`, before
+ * `bind` could hand the per-session launch over.
+ */
+function createHostPort() {
+    const hosts = [];
+    const openCalls = [];
+    return {
+        hosts,
+        openCalls,
+        async openHost(input) {
+            openCalls.push(input.appSessionId);
+            const binding = bindingFor(input.appSessionId);
+            const host = {
+                hostId: `host-${hosts.length + 1}`,
+                provider: input.provider,
+                mode: input.mode,
+                state: 'idle',
+                pid: null,
+                startedAt: Date.now(),
+                bindings: new Map([[input.appSessionId, binding]]),
+                closeReason: null,
+                closeDetail: null,
+                quietDeadlineAt: null,
+                quietWindowStartAt: null,
+            };
+            hosts.push(host);
+            await input.driver.startHost(host, SINK);
+            await input.driver.bind(host, binding);
+            return host;
+        },
+        snapshot: () => hosts,
+    };
+}
+function contextFor(providerSessionId) {
+    return {
+        resolveProviderSessionId: () => providerSessionId,
+        resolveResumeModel: async () => MODEL,
+        getProviderModels: async () => ({ OPTIONS: [], DEFAULT: MODEL }),
+        normalizeMessage: () => [],
+        isProviderInstalled: async () => true,
+    };
+}
+function writerInto(messages) {
+    return { isWebSocketWriter: true, send: (message) => messages.push(message) };
+}
+const TURN = { command: 'hello provider', options: {} };
+/** The launch bag the restore pass assembles for a provider-bound session. */
+function launchOptionsFor(cwd, modelProviderId) {
+    return {
+        model: MODEL,
+        cwd,
+        permissionMode: 'bypassPermissions',
+        ...(modelProviderId === undefined ? {} : { modelProviderId }),
+    };
+}
+/** The child's argv, NUL-separated, as `/proc` reports it. */
+async function childArgv(pid) {
+    return readFile(`/proc/${pid}/cmdline`, 'utf8');
+}
+/** The child's initial environment, NUL-separated. */
+async function childEnviron(pid) {
+    return readFile(`/proc/${pid}/environ`, 'utf8');
+}
+/**
+ * Whether the secret is visible in ANY process table entry on this host.
+ *
+ * This is the "not on a command line" reading at the strength the AC asks for:
+ * the child's own argv is checked separately, and this sweep catches a leak into
+ * a wrapper process. Unreadable entries (another user's process) are skipped —
+ * they cannot be the child this criterion spawned.
+ */
+async function secretInAnyProcessTable(secret) {
+    for (const entry of await readdir('/proc')) {
+        if (!/^\d+$/.test(entry)) {
+            continue;
+        }
+        try {
+            const cmdline = await childArgv(Number(entry));
+            if (cmdline.includes(secret)) {
+                return entry;
+            }
+        }
+        catch {
+            // Gone between readdir and read, or not ours to read.
+        }
+    }
+    return null;
+}
+/** Lets the killed app-server flush its rollout before the restart resumes it. */
+function pause(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+test('AC-463: a provider-bound resident session spawns under its provider and the token file supplies Authorization', async () => {
+    const mock = await startMockResponsesApi();
+    const previousHome = process.env.HOME;
+    const previousCodexHome = process.env.CODEX_HOME;
+    process.env[HOST_SENTINEL_KEY] = HOST_SENTINEL_VALUE;
+    try {
+        await withProviderRegistry(mock.baseUrl, async (home) => {
+            // Keep the real CLI's session/config writes inside the criterion's temp
+            // directory instead of the operator's ~/.codex.
+            process.env.HOME = home;
+            process.env.CODEX_HOME = home;
+            const launched = [];
+            const port = createHostPort();
+            const driver = new CodexHostDriver({
+                host: port,
+                createConnection: (launch) => {
+                    launched.push(launch);
+                    return new CodexAppServerConnection({ launch });
+                },
+            });
+            const started = await driver.startResidentSession(APP_SESSION, {
+                options: launchOptionsFor(home, PROVIDER_ID),
+                context: contextFor(null),
+            });
+            assert.ok(started.pid !== null, 'the real app-server process must report a pid');
+            // ── the compiled launch: args carry the provider, env carries the secret ──
+            assert.equal(launched.length, 1, 'one app-server was spawned for the session');
+            const launch = launched[0];
+            const args = launch.args ?? [];
+            assert.ok(args.includes(`model_provider="${PROVIDER_ID}"`), `spawn args must select the provider: ${JSON.stringify(args)}`);
+            assert.ok(args.some((arg) => arg.startsWith(`model_providers.${PROVIDER_ID}={`) && arg.includes(`env_key = "${ENV_KEY}"`)), `spawn args must define the provider endpoint: ${JSON.stringify(args)}`);
+            assert.equal(launch.env?.[ENV_KEY], TOKEN_SECRET, 'the token-file secret travels under env_key');
+            assert.equal(launch.env?.[HOST_SENTINEL_KEY], undefined, 'a host sentinel must not reach the child');
+            assert.ok(!JSON.stringify(args).includes(TOKEN_SECRET), 'the secret must never be an argv value');
+            // ── the real process table: secret in env, never on the command line ──
+            const argv = await childArgv(started.pid);
+            assert.ok(!argv.includes(TOKEN_SECRET), 'the secret must not be visible in the child argv');
+            assert.ok(argv.includes(`model_provider="${PROVIDER_ID}"`), 'the child really was spawned with the provider override');
+            const environ = await childEnviron(started.pid);
+            assert.ok(environ.includes(`${ENV_KEY}=${TOKEN_SECRET}`), 'the secret is in the child environment under env_key');
+            assert.ok(!environ.includes(HOST_SENTINEL_KEY), 'the host sentinel is absent from the child environment');
+            assert.equal(await secretInAnyProcessTable(TOKEN_SECRET), null, 'the secret is in no process table entry');
+            // ── the turn reaches the mock with the env_key credential ──
+            const messages = [];
+            await driver.run(APP_SESSION, TURN, writerInto(messages), contextFor(null));
+            assert.ok(mock.requests.length >= 1, `the real app-server must call the mock; frames=${JSON.stringify(messages)}`);
+            assert.equal(mock.requests[0].url, '/v1/responses');
+            assert.equal(mock.requests[0].authorization, `Bearer ${TOKEN_SECRET}`);
+            // ── restart + resume: the SAME provider id and the SAME thread ──
+            const threadId = driver.readSession(APP_SESSION).threadId;
+            assert.ok(threadId, 'the first turn must have established a thread');
+            const firstHost = port.hosts[0];
+            await driver.closeHost(firstHost, 'user');
+            await pause(200);
+            const resumePort = createHostPort();
+            const resumedLaunches = [];
+            const resumedDriver = new CodexHostDriver({
+                host: resumePort,
+                createConnection: (resumedLaunch) => {
+                    resumedLaunches.push(resumedLaunch);
+                    return new CodexAppServerConnection({ launch: resumedLaunch });
+                },
+            });
+            await resumedDriver.startResidentSession(APP_SESSION, {
+                options: launchOptionsFor(home, PROVIDER_ID),
+                context: contextFor(threadId),
+            });
+            await resumedDriver.run(APP_SESSION, { command: 'again', options: {} }, writerInto(messages), contextFor(threadId));
+            assert.ok((resumedLaunches[0].args ?? []).includes(`model_provider="${PROVIDER_ID}"`), 'the restarted host re-injects the recorded provider');
+            assert.equal(resumedDriver.readSession(APP_SESSION).threadId, threadId, 'the resumed turn re-used the original thread (a no-rollout fallback would have replaced the id)');
+            assert.equal(mock.requests.length, 2, 'the resumed turn also reached the mock');
+            assert.equal(mock.requests[1].authorization, `Bearer ${TOKEN_SECRET}`);
+            // ── missing provider config on resume is a readable refusal, not openai ──
+            await resumedDriver.closeHost(resumePort.hosts[0], 'user');
+            const requestsBefore = mock.requests.length;
+            const barePort = createHostPort();
+            const bareDriver = new CodexHostDriver({
+                host: barePort,
+                createConnection: (bareLaunch) => new CodexAppServerConnection({ launch: bareLaunch }),
+            });
+            await bareDriver.startResidentSession(APP_SESSION, {
+                options: launchOptionsFor(home),
+                context: contextFor(threadId),
+            });
+            await assert.rejects(bareDriver.run(APP_SESSION, TURN, writerInto(messages), contextFor(threadId)), (error) => /bob/.test(String(error.message)) && /no longer configured/i.test(String(error.message)), 'resume without the recorded provider must surface modelProviderNotConfigured');
+            assert.equal(mock.requests.length, requestsBefore, 'a refused resume must not dial any endpoint');
+            await bareDriver.closeHost(barePort.hosts[0], 'user');
+        });
+    }
+    finally {
+        if (previousHome === undefined)
+            delete process.env.HOME;
+        else
+            process.env.HOME = previousHome;
+        if (previousCodexHome === undefined)
+            delete process.env.CODEX_HOME;
+        else
+            process.env.CODEX_HOME = previousCodexHome;
+        delete process.env[HOST_SENTINEL_KEY];
+        await mock.close();
+    }
+});
+test('AC-463: naming the provider only on thread/start is refused by the real app-server', async () => {
+    const mock = await startMockResponsesApi();
+    const previousHome = process.env.HOME;
+    const previousCodexHome = process.env.CODEX_HOME;
+    try {
+        await withProviderRegistry(mock.baseUrl, async (home) => {
+            process.env.HOME = home;
+            process.env.CODEX_HOME = home;
+            // No `-c` provider overrides: this is exactly the shape an implementation
+            // that only passed `modelProvider` to `thread/start` would produce.
+            const connection = new CodexAppServerConnection({
+                launch: {
+                    cwd: home,
+                    env: { ...process.env },
+                },
+            });
+            try {
+                await connection.initialize();
+                const started = await connection.request('thread/start', {
+                    model: MODEL,
+                    cwd: home,
+                    approvalPolicy: 'never',
+                    sandbox: 'danger-full-access',
+                    modelProvider: PROVIDER_ID,
+                    config: {
+                        model_providers: {
+                            [PROVIDER_ID]: {
+                                name: 'Bob Upstream',
+                                base_url: mock.baseUrl,
+                                env_key: ENV_KEY,
+                                wire_api: 'responses',
+                            },
+                        },
+                    },
+                });
+                const thread = started.thread;
+                assert.ok(thread?.id, 'the thread starts; the mismatch only shows on the first turn');
+                await assert.rejects(connection.request('turn/start', { threadId: thread.id, input: [{ type: 'text', text: 'hello' }] }), (error) => /provider/i.test(String(error.message)), 'a thread-level provider alone must be refused by the process-global check');
+                assert.equal(mock.requests.length, 0, 'the refused turn never reaches the custom endpoint');
+            }
+            finally {
+                connection.close();
+            }
+        });
+    }
+    finally {
+        if (previousHome === undefined)
+            delete process.env.HOME;
+        else
+            process.env.HOME = previousHome;
+        if (previousCodexHome === undefined)
+            delete process.env.CODEX_HOME;
+        else
+            process.env.CODEX_HOME = previousCodexHome;
+        await mock.close();
+    }
+});
+test('AC-463: an unknown recorded provider is refused readably before any process is spawned', async () => {
+    const mock = await startMockResponsesApi();
+    try {
+        await withProviderRegistry(mock.baseUrl, async () => {
+            const port = createHostPort();
+            const driver = new CodexHostDriver({ host: port });
+            await assert.rejects(driver.startResidentSession(APP_SESSION, {
+                options: launchOptionsFor(os.tmpdir(), 'nobody'),
+                context: contextFor(null),
+            }), (error) => {
+                const message = String(error.message);
+                return message.includes('nobody') && /not configured/i.test(message);
+            }, 'an unresolvable provider must be named and reported as not configured');
+            assert.deepEqual(port.openCalls, [], 'no host was opened for a provider that cannot be resolved');
+            assert.equal(mock.requests.length, 0, 'nothing dialled any endpoint');
+        });
+    }
+    finally {
+        await mock.close();
+    }
+});
+test('AC-463: the restore launch options carry the session row provider id', async () => {
+    const previousDatabasePath = process.env.DATABASE_PATH;
+    const directory = await mkdtemp(path.join(os.tmpdir(), 'codex-resident-restore-db-'));
+    closeConnection();
+    process.env.DATABASE_PATH = path.join(directory, 'auth.db');
+    await initializeDatabase();
+    try {
+        sessionsDb.createSession(APP_SESSION, 'codex', directory);
+        sessionsDb.setSessionModel(APP_SESSION, MODEL);
+        sessionsDb.setSessionModelProviderId(APP_SESSION, PROVIDER_ID);
+        let captured = null;
+        const fakeDriver = {
+            async startResidentSession(_appSessionId, launch) {
+                captured = launch;
+                return { hostId: 'host-restore', pid: null };
+            },
+        };
+        const fakeProvider = {
+            id: 'codex',
+            hostDriver: fakeDriver,
+            sessions: { normalizeMessage: () => [] },
+            auth: { getStatus: async () => ({ installed: true }) },
+        };
+        installProviderRegistryPort({
+            listProviders: () => [fakeProvider],
+            resolveProvider: (id) => {
+                if (id === 'codex') {
+                    return fakeProvider;
+                }
+                throw new Error(`unexpected provider ${id}`);
+            },
+        });
+        const result = await providerRuntimeService.startResidentSession('codex', APP_SESSION);
+        assert.deepEqual(result, { hostId: 'host-restore', pid: null });
+        assert.ok(captured, 'the production restore seam must reach the driver');
+        const options = captured.options;
+        assert.equal(options.modelProviderId, PROVIDER_ID, 'the row provider id reaches the resident launch bag');
+        assert.equal(options.model, MODEL, 'the row model still reaches it too');
+    }
+    finally {
+        closeConnection();
+        if (previousDatabasePath === undefined) {
+            delete process.env.DATABASE_PATH;
+        }
+        else {
+            process.env.DATABASE_PATH = previousDatabasePath;
+        }
+        await rm(directory, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=codex-resident-provider-injection.test.js.map

package/dist-server/server/modules/providers/tests/codex-resident-provider-injection.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-resident-provider-injection.test.js","sourceRoot":"","sources":["../../../../../server/modules/providers/tests/codex-resident-provider-injection.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9F,OAAO,EAAE,wBAAwB,EAAE,MAAM,+DAA+D,CAAC;AACzG,OAAO,EACL,eAAe,GAEhB,MAAM,8DAA8D,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0DAA0D,CAAC;AAClG,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAE9E,OAAO,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC;AAClG,OAAO,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AAWvF,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AACnD,MAAM,mBAAmB,GAAG,2CAA2C,CAAC;AACxE,MAAM,WAAW,GAAG,KAAK,CAAC;AAC1B,MAAM,OAAO,GAAG,aAAa,CAAC;AAC9B,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAC9C,MAAM,WAAW,GAAG,0BAA0B,CAAC;AAC/C,MAAM,KAAK,GAAG,cAAc,CAAC;AAE7B;;;;;;;GAOG;AACH,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAClC,EAAE,CAAC,MAAM,EAAE,EACX,+BAA+B,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAC3D,CAAC;AACF,MAAM,CAAC,KAAK,IAAI,EAAE;IAChB,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,kBAAkB,EAAE,CAAC;AAC7B,CAAC,CAAC,CAAC;AACH,KAAK,CAAC,KAAK,IAAI,EAAE;IACf,eAAe,EAAE,CAAC;IAClB,MAAM,EAAE,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;AACjG,CAAC,CAAC,CAAC;AAKH;;;;;GAKG;AACH,KAAK,UAAU,qBAAqB;IAKlC,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QACrD,QAAQ,CAAC,IAAI,CAAC;YACZ,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,EAAE;YACtB,aAAa,EAAE,OAAO,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,QAAQ;gBAC9D,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa;gBAC/B,CAAC,CAAC,SAAS;SACd,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,EAAE,CAAC;QACjB,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAChE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,6CAA6C,EAAE,EAAE,CAAC,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;IACjD,OAAO;QACL,QAAQ;QACR,OAAO,EAAE,oBAAoB,IAAI,KAAK;QACtC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjD,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB,CACjC,OAAe,EACf,GAAoC;IAEpC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;IACrF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,SAAS,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,MAAM,SAAS,CACb,YAAY,EACZ,IAAI,CAAC,SAAS,CAAC;QACb,cAAc,EAAE;YACd,CAAC,WAAW,CAAC,EAAE;gBACb,IAAI,EAAE,cAAc;gBACpB,OAAO;gBACP,MAAM,EAAE,OAAO;gBACf,SAAS;aACV;SACF;KACF,CAAC,EACF,MAAM,CACP,CAAC;IAEF,MAAM,MAAM,GAAG,+BAA+B,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9F,gCAAgC,CAAC;QAC/B,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YACX,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3E,WAAW,EAAE,EAAE;SAChB,CAAC;QACF,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;KACpC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAA4B;IACpC,UAAU,EAAE,GAAG,EAAE,GAAE,CAAC;IACpB,YAAY,EAAE,GAAG,EAAE,GAAE,CAAC;IACtB,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC;IAClB,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC;IAClB,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC;CACjB,CAAC;AAEF,6EAA6E;AAC7E,SAAS,UAAU,CAAC,YAAoB;IACtC,OAAO;QACL,YAAY;QACZ,iBAAiB,EAAE,IAAI;QACvB,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,EAAE;QACV,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;QAC1B,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,IAAI;KACnB,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc;IACrB,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,OAAO;QACL,KAAK;QACL,SAAS;QACT,KAAK,CAAC,QAAQ,CAAC,KAAK;YAClB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACnC,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAgB;gBACxB,MAAM,EAAE,QAAQ,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE;gBAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,MAAM;gBACb,GAAG,EAAE,IAAI;gBACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;gBAClD,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,IAAI;gBACjB,eAAe,EAAE,IAAI;gBACrB,kBAAkB,EAAE,IAAI;aACzB,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,iBAAgC;IAClD,OAAO;QACL,wBAAwB,EAAE,GAAG,EAAE,CAAC,iBAAiB;QACjD,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK;QACrC,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAChE,gBAAgB,EAAE,GAAG,EAAE,CAAC,EAAE;QAC1B,mBAAmB,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,QAAmB;IACrC,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,IAAI,GAAkB,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAEvE,8EAA8E;AAC9E,SAAS,gBAAgB,CAAC,GAAW,EAAE,eAAwB;IAC7D,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,GAAG;QACH,cAAc,EAAE,mBAAmB;QACnC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,KAAK,UAAU,SAAS,CAAC,GAAW;IAClC,OAAO,QAAQ,CAAC,SAAS,GAAG,UAAU,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,sDAAsD;AACtD,KAAK,UAAU,YAAY,CAAC,GAAW;IACrC,OAAO,QAAQ,CAAC,SAAS,GAAG,UAAU,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,uBAAuB,CAAC,MAAc;IACnD,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/C,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kFAAkF;AAClF,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,IAAI,CAAC,+GAA+G,EAAE,KAAK,IAAI,EAAE;IAC/H,MAAM,IAAI,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IACtC,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,mBAAmB,CAAC;IAErD,IAAI,CAAC;QACH,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtD,wEAAwE;YACxE,gDAAgD;YAChD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC;YAE9B,MAAM,QAAQ,GAAwD,EAAE,CAAC;YACzE,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;gBACjC,IAAI,EAAE,IAAI;gBACV,gBAAgB,EAAE,CAAC,MAAM,EAAE,EAAE;oBAC3B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACtB,OAAO,IAAI,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;gBAClD,CAAC;aACF,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,WAAW,EAAE;gBAC7D,OAAO,EAAE,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC;gBAC5C,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC;aAC1B,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,IAAI,EAAE,+CAA+C,CAAC,CAAC;YAEjF,6EAA6E;YAC7E,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,4CAA4C,CAAC,CAAC;YAC/E,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YAC/B,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,WAAW,GAAG,CAAC,EAAE,wCAAwC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5H,MAAM,CAAC,EAAE,CACP,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,mBAAmB,WAAW,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,OAAO,GAAG,CAAC,CAAC,EAChH,iDAAiD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CACxE,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,6CAA6C,CAAC,CAAC;YACjG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,0CAA0C,CAAC,CAAC;YACrG,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,wCAAwC,CAAC,CAAC;YAElG,yEAAyE;YACzE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,kDAAkD,CAAC,CAAC;YAC5F,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,WAAW,GAAG,CAAC,EAAE,yDAAyD,CAAC,CAAC;YACvH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAChD,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,IAAI,YAAY,EAAE,CAAC,EAAE,sDAAsD,CAAC,CAAC;YAClH,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wDAAwD,CAAC,CAAC;YAC1G,MAAM,CAAC,KAAK,CAAC,MAAM,uBAAuB,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,yCAAyC,CAAC,CAAC;YAE3G,8DAA8D;YAC9D,MAAM,QAAQ,GAAc,EAAE,CAAC;YAC/B,MAAM,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5E,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,kDAAkD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACnH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;YACpD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,UAAU,YAAY,EAAE,CAAC,CAAC;YAEvE,mEAAmE;YACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;YAC1D,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,+CAA+C,CAAC,CAAC;YACrE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC1C,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAEjB,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;YACpC,MAAM,eAAe,GAAwD,EAAE,CAAC;YAChF,MAAM,aAAa,GAAG,IAAI,eAAe,CAAC;gBACxC,IAAI,EAAE,UAAU;gBAChB,gBAAgB,EAAE,CAAC,aAAa,EAAE,EAAE;oBAClC,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBACpC,OAAO,IAAI,wBAAwB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;gBACjE,CAAC;aACF,CAAC,CAAC;YACH,MAAM,aAAa,CAAC,oBAAoB,CAAC,WAAW,EAAE;gBACpD,OAAO,EAAE,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC;gBAC5C,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC;aAC9B,CAAC,CAAC;YACH,MAAM,aAAa,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;YAEpH,MAAM,CAAC,EAAE,CACP,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,mBAAmB,WAAW,GAAG,CAAC,EAC3E,qDAAqD,CACtD,CAAC;YACF,MAAM,CAAC,KAAK,CACV,aAAa,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,QAAQ,EAC/C,QAAQ,EACR,iGAAiG,CAClG,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,wCAAwC,CAAC,CAAC;YAChF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,UAAU,YAAY,EAAE,CAAC,CAAC;YAEvE,4EAA4E;YAC5E,MAAM,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC5C,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC;gBACrC,IAAI,EAAE,QAAQ;gBACd,gBAAgB,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,wBAAwB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;aACvF,CAAC,CAAC;YACH,MAAM,UAAU,CAAC,oBAAoB,CAAC,WAAW,EAAE;gBACjD,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC;gBAC/B,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC;aAC9B,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAClB,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,EAC7E,CAAC,KAAc,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC,EAClI,8EAA8E,CAC/E,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,6CAA6C,CAAC,CAAC;YAClG,MAAM,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;;YACnD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC;QACrC,IAAI,iBAAiB,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;;YAC9D,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,iBAAiB,CAAC;QAChD,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACtC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;IACpG,MAAM,IAAI,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IACtC,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IAEjD,IAAI,CAAC;QACH,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC;YAE9B,0EAA0E;YAC1E,oEAAoE;YACpE,MAAM,UAAU,GAAG,IAAI,wBAAwB,CAAC;gBAC9C,MAAM,EAAE;oBACN,GAAG,EAAE,IAAI;oBACT,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;iBACxB;aACF,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,cAAc,EAAE;oBACvD,KAAK,EAAE,KAAK;oBACZ,GAAG,EAAE,IAAI;oBACT,cAAc,EAAE,OAAO;oBACvB,OAAO,EAAE,oBAAoB;oBAC7B,aAAa,EAAE,WAAW;oBAC1B,MAAM,EAAE;wBACN,eAAe,EAAE;4BACf,CAAC,WAAW,CAAC,EAAE;gCACb,IAAI,EAAE,cAAc;gCACpB,QAAQ,EAAE,IAAI,CAAC,OAAO;gCACtB,OAAO,EAAE,OAAO;gCAChB,QAAQ,EAAE,WAAW;6BACtB;yBACF;qBACF;iBACF,CAAC,CAAC;gBACH,MAAM,MAAM,GAAI,OAAwC,CAAC,MAAM,CAAC;gBAChE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,8DAA8D,CAAC,CAAC;gBAEtF,MAAM,MAAM,CAAC,OAAO,CAClB,UAAU,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EACnG,CAAC,KAAc,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC,EACtE,2EAA2E,CAC5E,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,oDAAoD,CAAC,CAAC;YAC9F,CAAC;oBAAS,CAAC;gBACT,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;;YACnD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC;QACrC,IAAI,iBAAiB,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;;YAC9D,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,iBAAiB,CAAC;QAChD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;IACxG,MAAM,IAAI,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnD,MAAM,MAAM,CAAC,OAAO,CAClB,MAAM,CAAC,oBAAoB,CAAC,WAAW,EAAE;gBACvC,OAAO,EAAE,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC;gBAChD,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC;aAC1B,CAAC,EACF,CAAC,KAAc,EAAE,EAAE;gBACjB,MAAM,OAAO,GAAG,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;gBACjD,OAAO,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvE,CAAC,EACD,uEAAuE,CACxE,CAAC;YACF,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,2DAA2D,CAAC,CAAC;YAClG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,8BAA8B,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;IACtF,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACvD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;IACtF,eAAe,EAAE,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC5D,MAAM,kBAAkB,EAAE,CAAC;IAE3B,IAAI,CAAC;QACH,UAAU,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAC1D,UAAU,CAAC,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC/C,UAAU,CAAC,yBAAyB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAE/D,IAAI,QAAQ,GAA8B,IAAI,CAAC;QAC/C,MAAM,UAAU,GAAG;YACjB,KAAK,CAAC,oBAAoB,CAAC,aAAqB,EAAE,MAA0B;gBAC1E,QAAQ,GAAG,MAAM,CAAC;gBAClB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;YAC/C,CAAC;SACgC,CAAC;QACpC,MAAM,YAAY,GAAG;YACnB,EAAE,EAAE,OAAO;YACX,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE;YACxC,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE;SAC/B,CAAC;QAE1B,2BAA2B,CAAC;YAC1B,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,YAAY,CAAC;YACnC,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE;gBACtB,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;oBACnB,OAAO,YAAY,CAAC;gBACtB,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;YAC/C,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,oBAAoB,CAAC,OAAsB,EAAE,WAAW,CAAC,CAAC;QACtG,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,mDAAmD,CAAC,CAAC;QACzE,MAAM,OAAO,GAAI,QAA+B,CAAC,OAAO,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,WAAW,EAAE,qDAAqD,CAAC,CAAC;QAC1G,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,oCAAoC,CAAC,CAAC;IAC3E,CAAC;YAAS,CAAC;QACT,eAAe,EAAE,CAAC;QAClB,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,oBAAoB,CAAC;QACnD,CAAC;QACD,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC,CAAC,CAAC"}