aimeat 1.2.0

package/dist/src/routes/stats.d.ts

@@ -0,0 +1,7 @@
+import { Router } from 'express';
+import type { Registry } from 'prom-client';
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+import type { StatsCollector } from '../services/stats.js';
+export declare function statsRouter(config: AimeatConfig, storage: Storage, stats: StatsCollector, metricsRegistry?: Registry): Router;
+//# sourceMappingURL=stats.d.ts.map

package/dist/src/routes/stats.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stats.d.ts","sourceRoot":"","sources":["../../../src/routes/stats.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAG3D,wBAAgB,WAAW,CACzB,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,cAAc,EACrB,eAAe,CAAC,EAAE,QAAQ,GACzB,MAAM,CA8FR"}

package/dist/src/routes/stats.js

@@ -0,0 +1,98 @@
+import { Router } from 'express';
+import { success, error } from '../middleware/envelope.js';
+export function statsRouter(config, storage, stats, metricsRegistry) {
+    const router = Router();
+    router.get('/v1/stats', async (req, res) => {
+        if (!config.statsEnabled) {
+            res.status(503).json(error(config.nodeId, 'FEATURE_DISABLED', 'Statistics are disabled'));
+            return;
+        }
+        // Access control based on config
+        if (config.statsAccess === 'operator') {
+            if (!req.auth?.roles?.includes('operator')) {
+                res.status(403).json(error(config.nodeId, 'ACCESS_DENIED', 'Operator role required'));
+                return;
+            }
+        }
+        else if (config.statsAccess === 'authenticated') {
+            if (!req.auth) {
+                res.status(401).json(error(config.nodeId, 'AUTH_REQUIRED', 'Authentication required'));
+                return;
+            }
+        }
+        // 'public' = no auth needed (default)
+        const snap = stats.snapshot();
+        const owners = await storage.listOwners();
+        const agents = await storage.listAgents();
+        // Consent permission breakdown (for admin dashboard)
+        const permStats = { active_rules: 0, by_gaii: 0, by_ghii: 0, by_organism: 0, by_domain: 0, by_node: 0, by_wildcard: 0, unique_patterns: new Set() };
+        for (const o of owners) {
+            const gaii = o.gaii || `${o.name || ''}@${config.nodeId}`;
+            try {
+                const consents = await storage.listConsents(gaii, { status: 'active' });
+                for (const c of consents) {
+                    permStats.active_rules++;
+                    const r = c.recipient || '';
+                    if (r === '*')
+                        permStats.by_wildcard++;
+                    else if (r.startsWith('ghii:'))
+                        permStats.by_ghii++;
+                    else if (r.startsWith('organism.'))
+                        permStats.by_organism++;
+                    else if (r.startsWith('domain:'))
+                        permStats.by_domain++;
+                    else if (r.startsWith('node:'))
+                        permStats.by_node++;
+                    else
+                        permStats.by_gaii++;
+                    permStats.unique_patterns.add(c.dataPattern);
+                }
+            }
+            catch { /* skip owners without consents */ }
+        }
+        res.json(success(config.nodeId, {
+            node_id: config.nodeId,
+            ...snap,
+            active_owners: owners.length,
+            active_agents: agents.length,
+            // Push notification status (REQ-007)
+            push_notifications: {
+                enabled: config.pushEnabled && !!config.vapidPublicKey,
+                personal_node_support: config.personalNodesEnabled,
+            },
+            consent_permissions: {
+                active_rules: permStats.active_rules,
+                by_gaii: permStats.by_gaii,
+                by_ghii: permStats.by_ghii,
+                by_organism: permStats.by_organism,
+                by_domain: permStats.by_domain,
+                by_node: permStats.by_node,
+                by_wildcard: permStats.by_wildcard,
+                unique_patterns: permStats.unique_patterns.size,
+            },
+        }));
+    });
+    router.get('/v1/metrics', async (req, res) => {
+        if (!config.metricsEnabled || !metricsRegistry) {
+            res.status(503).json(error(config.nodeId, 'FEATURE_DISABLED', 'Metrics endpoint is disabled'));
+            return;
+        }
+        // Access control (same pattern as /v1/stats)
+        if (config.metricsAccess === 'operator') {
+            if (!req.auth?.roles?.includes('operator')) {
+                res.status(403).json(error(config.nodeId, 'ACCESS_DENIED', 'Operator role required'));
+                return;
+            }
+        }
+        else if (config.metricsAccess === 'authenticated') {
+            if (!req.auth) {
+                res.status(401).json(error(config.nodeId, 'AUTH_REQUIRED', 'Authentication required'));
+                return;
+            }
+        }
+        res.set('Content-Type', metricsRegistry.contentType);
+        res.end(await metricsRegistry.metrics());
+    });
+    return router;
+}
+//# sourceMappingURL=stats.js.map

package/dist/src/routes/stats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stats.js","sourceRoot":"","sources":["../../../src/routes/stats.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAKjC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAE3D,MAAM,UAAU,WAAW,CACzB,MAAoB,EACpB,OAAgB,EAChB,KAAqB,EACrB,eAA0B;IAE1B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACzC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,yBAAyB,CAAC,CAAC,CAAC;YAC1F,OAAO;QACT,CAAC;QAED,iCAAiC;QACjC,IAAI,MAAM,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,wBAAwB,CAAC,CAAC,CAAC;gBACtF,OAAO;YACT,CAAC;QACH,CAAC;aAAM,IAAI,MAAM,CAAC,WAAW,KAAK,eAAe,EAAE,CAAC;YAClD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,yBAAyB,CAAC,CAAC,CAAC;gBACvF,OAAO;YACT,CAAC;QACH,CAAC;QACD,sCAAsC;QAEtC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QAE1C,qDAAqD;QACrD,MAAM,SAAS,GAAG,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,eAAe,EAAE,IAAI,GAAG,EAAU,EAAE,CAAC;QAC5J,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,IAAI,GAAI,CAAuB,CAAC,IAAI,IAAI,GAAI,CAAuB,CAAC,IAAI,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACxG,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACxE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzB,SAAS,CAAC,YAAY,EAAE,CAAC;oBACzB,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC;oBAC5B,IAAI,CAAC,KAAK,GAAG;wBAAE,SAAS,CAAC,WAAW,EAAE,CAAC;yBAClC,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;wBAAE,SAAS,CAAC,OAAO,EAAE,CAAC;yBAC/C,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC;wBAAE,SAAS,CAAC,WAAW,EAAE,CAAC;yBACvD,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;wBAAE,SAAS,CAAC,SAAS,EAAE,CAAC;yBACnD,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;wBAAE,SAAS,CAAC,OAAO,EAAE,CAAC;;wBAC/C,SAAS,CAAC,OAAO,EAAE,CAAC;oBACzB,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC;QAChD,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC9B,OAAO,EAAE,MAAM,CAAC,MAAM;YACtB,GAAG,IAAI;YACP,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,qCAAqC;YACrC,kBAAkB,EAAE;gBAClB,OAAO,EAAE,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,cAAc;gBACtD,qBAAqB,EAAE,MAAM,CAAC,oBAAoB;aACnD;YACD,mBAAmB,EAAE;gBACnB,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,eAAe,EAAE,SAAS,CAAC,eAAe,CAAC,IAAI;aAChD;SACF,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3C,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,eAAe,EAAE,CAAC;YAC/C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,8BAA8B,CAAC,CAAC,CAAC;YAC/F,OAAO;QACT,CAAC;QAED,6CAA6C;QAC7C,IAAI,MAAM,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;YACxC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,wBAAwB,CAAC,CAAC,CAAC;gBACtF,OAAO;YACT,CAAC;QACH,CAAC;aAAM,IAAI,MAAM,CAAC,aAAa,KAAK,eAAe,EAAE,CAAC;YACpD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,yBAAyB,CAAC,CAAC,CAAC;gBACvF,OAAO;YACT,CAAC;QACH,CAAC;QAED,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/routes/storage-files.d.ts

@@ -0,0 +1,5 @@
+import { Router } from 'express';
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+export declare function storageFilesRouter(config: AimeatConfig, storage: Storage): Router;
+//# sourceMappingURL=storage-files.d.ts.map

package/dist/src/routes/storage-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-files.d.ts","sourceRoot":"","sources":["../../../src/routes/storage-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AA0BvD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAufjF"}

package/dist/src/routes/storage-files.js

@@ -0,0 +1,460 @@
+import { Router } from 'express';
+import { requireAuth, requireRole, optionalAuth } from '../auth/middleware.js';
+import { success, error } from '../middleware/envelope.js';
+import { emitChange } from '../services/event-bus.js';
+import { checkConsentForRead, auditDataAccess } from '../services/consent.js';
+import { randomBytes } from 'node:crypto';
+import { ChunkedUploadInitSchema, validateBody } from '../models/schemas.js';
+import { checkStorageQuota, chargeOverage } from '../services/quota.js';
+import { emitResourceUpdated, emitResourceListChanged } from '../mcp/index.js';
+import { resolveIdentity } from '../utils/gaii.js';
+/** Anonymous agents (shared#anonymous@...) may only use keys prefixed with "anonymous/" */
+function isAnonymousGaii(gaii) {
+    return gaii.includes('#anonymous@');
+}
+/**
+ * Extract storage key from Express 5 wildcard {*key} param.
+ * path-to-regexp v8 returns an array of path segments and auto-decodes %xx.
+ * Handles both encoded slashes (%2F → single element) and raw slashes (multiple elements).
+ */
+function extractKey(params) {
+    const k = params.key;
+    return Array.isArray(k) ? k.join('/') : k;
+}
+export function storageFilesRouter(config, storage) {
+    const router = Router();
+    const resolve = (req) => resolveIdentity(req.auth, config.nodeId);
+    // Max chunked file size (configurable, default 5 GB)
+    const MAX_CHUNKED_FILE_SIZE = config.storageMaxChunkedFileSizeGb * 1024 * 1024 * 1024;
+    // POST /v1/storage — upload file (agent auth)
+    router.post('/v1/storage', requireAuth(), requireRole('agent'), async (req, res) => {
+        const gaii = resolve(req);
+        // Accept raw body or JSON with base64 data
+        const contentType = req.headers['content-type'] ?? '';
+        let key;
+        let visibility;
+        let fileData;
+        let mimeType;
+        if (contentType.includes('application/json')) {
+            const { key: k, visibility: v, data, mime_type } = req.body ?? {};
+            if (!k || !data) {
+                res.status(400).json(error(config.nodeId, 'INVALID_INPUT', 'key and data (base64) are required'));
+                return;
+            }
+            key = k;
+            visibility = v ?? 'private';
+            fileData = Buffer.from(data, 'base64');
+            mimeType = mime_type ?? 'application/octet-stream';
+        }
+        else {
+            // Raw body upload
+            key = req.query.key ?? `file-${Date.now()}`;
+            visibility = req.query.visibility ?? 'private';
+            const chunks = [];
+            for await (const chunk of req) {
+                chunks.push(typeof chunk === 'string' ? Buffer.from(chunk) : chunk);
+            }
+            fileData = Buffer.concat(chunks);
+            mimeType = contentType || 'application/octet-stream';
+        }
+        // Anonymous namespace enforcement: anonymous agents can only upload to anonymous/* keys
+        if (isAnonymousGaii(gaii) && !key.startsWith('anonymous/')) {
+            res.status(403).json(error(config.nodeId, 'FORBIDDEN', 'Anonymous agents can only upload to keys prefixed with "anonymous/"'));
+            return;
+        }
+        // Per-file size limit (configurable)
+        if (fileData.length > config.storageMaxFileSizeMb * 1024 * 1024) {
+            res.status(413).json(error(config.nodeId, 'QUOTA_EXCEEDED', `File size exceeds ${config.storageMaxFileSizeMb}MB limit`));
+            return;
+        }
+        // M-2: Total storage quota enforcement (§8.4, default 100MB per agent)
+        const storageQuota = await checkStorageQuota(config, storage, gaii, fileData.length);
+        if (!storageQuota.allowed) {
+            res.status(413).json(error(config.nodeId, 'QUOTA_EXCEEDED', storageQuota.reason));
+            return;
+        }
+        const file = await storage.createStorageFile({
+            key,
+            ownerGaii: gaii,
+            visibility: visibility,
+            mimeType,
+            size: fileData.length,
+            data: fileData,
+            createdAt: new Date().toISOString(),
+        });
+        // M-3: Charge overage morsels if over quota (§15)
+        if (storageQuota.overageMorsels > 0) {
+            await chargeOverage(storage, gaii, storageQuota.overageMorsels, 'storage_overage');
+        }
+        emitResourceUpdated(gaii, `aimeat://storage/${encodeURIComponent(key)}`);
+        emitResourceListChanged(gaii);
+        res.status(201).json(success(config.nodeId, {
+            key: file.key,
+            size: file.size,
+            mime_type: file.mimeType,
+            visibility: file.visibility,
+            created_at: file.createdAt,
+            overage_charged: storageQuota.overageMorsels > 0 ? storageQuota.overageMorsels : undefined,
+        }, [
+            { description: 'Download this file', method: 'GET', url: `/v1/storage/${encodeURIComponent(key)}` },
+            { description: 'List all files', method: 'GET', url: '/v1/storage' },
+        ]));
+        emitChange('files');
+    });
+    // GET /v1/storage — list storage items (agent auth)
+    router.get('/v1/storage', requireAuth(), requireRole('agent'), async (req, res) => {
+        const gaii = resolve(req);
+        const files = await storage.listStorageFiles(gaii);
+        res.json(success(config.nodeId, {
+            files: files.map(f => ({
+                key: f.key,
+                size: f.size,
+                mime_type: f.mimeType,
+                visibility: f.visibility,
+                created_at: f.createdAt,
+            })),
+            total: files.length,
+        }));
+    });
+    // -----------------------------------------------
+    // Chunked Upload — Large file support
+    // Must be registered BEFORE wildcard {*key} routes to prevent
+    // /v1/storage/upload/... from matching the wildcard pattern.
+    // -----------------------------------------------
+    // POST /v1/storage/upload/init — initiate chunked upload
+    router.post('/v1/storage/upload/init', requireAuth(), requireRole('agent'), validateBody(ChunkedUploadInitSchema, config.nodeId), async (req, res) => {
+        const gaii = resolve(req);
+        const { key, mime_type, visibility, chunk_size, total_chunks } = req.body ?? {};
+        // Anonymous namespace enforcement
+        if (isAnonymousGaii(gaii) && !key.startsWith('anonymous/')) {
+            res.status(403).json(error(config.nodeId, 'FORBIDDEN', 'Anonymous agents can only upload to keys prefixed with "anonymous/"'));
+            return;
+        }
+        const uploadId = `upload-${randomBytes(12).toString('hex')}`;
+        const now = new Date();
+        const expiresAt = new Date(now.getTime() + 6 * 3600_000).toISOString(); // 6 hours
+        // M-4: Reject if declared total size exceeds max chunked file size (5GB)
+        const chunkSz = chunk_size ?? 10 * 1024 * 1024;
+        if (total_chunks && chunkSz * total_chunks > MAX_CHUNKED_FILE_SIZE) {
+            res.status(413).json(error(config.nodeId, 'QUOTA_EXCEEDED', `Declared file size (${total_chunks} chunks × ${chunkSz} bytes) exceeds max chunked file size of 5 GB`));
+            return;
+        }
+        await storage.createChunkedUpload({
+            uploadId,
+            ownerGaii: gaii,
+            key,
+            mimeType: mime_type ?? 'application/octet-stream',
+            visibility: visibility ?? 'private',
+            chunkSize: chunk_size ?? 10 * 1024 * 1024, // 10MB default
+            totalChunks: total_chunks,
+            receivedChunks: new Map(),
+            createdAt: now.toISOString(),
+            expiresAt,
+        });
+        res.status(201).json(success(config.nodeId, {
+            upload_id: uploadId,
+            key,
+            chunk_size: chunk_size ?? 10 * 1024 * 1024,
+            expires_at: expiresAt,
+        }, [
+            { description: 'Upload chunk', method: 'PUT', url: `/v1/storage/upload/${uploadId}/0` },
+            { description: 'Complete upload', method: 'POST', url: `/v1/storage/upload/${uploadId}/complete` },
+        ]));
+        emitChange('files');
+    });
+    // PUT /v1/storage/upload/:id/:chunk — upload a single chunk
+    router.put('/v1/storage/upload/:id/:chunk', requireAuth(), requireRole('agent'), async (req, res) => {
+        const uploadId = req.params.id;
+        const chunkIndex = parseInt(req.params.chunk, 10);
+        if (isNaN(chunkIndex) || chunkIndex < 0) {
+            res.status(400).json(error(config.nodeId, 'INVALID_INPUT', 'chunk index must be a non-negative integer'));
+            return;
+        }
+        const upload = await storage.getChunkedUpload(uploadId);
+        if (!upload) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'Upload not found or expired'));
+            return;
+        }
+        if (upload.ownerGaii !== resolve(req)) {
+            res.status(403).json(error(config.nodeId, 'ACCESS_DENIED', 'Not your upload'));
+            return;
+        }
+        const chunks = [];
+        for await (const chunk of req) {
+            chunks.push(typeof chunk === 'string' ? Buffer.from(chunk) : chunk);
+        }
+        const data = Buffer.concat(chunks);
+        // M-4: Running total size check — reject early if exceeding 5GB
+        let currentTotal = data.length;
+        for (const [, buf] of upload.receivedChunks) {
+            currentTotal += buf.length;
+        }
+        if (currentTotal > MAX_CHUNKED_FILE_SIZE) {
+            res.status(413).json(error(config.nodeId, 'QUOTA_EXCEEDED', `Total uploaded size (${currentTotal} bytes) exceeds max chunked file size of 5 GB`));
+            return;
+        }
+        const added = await storage.addChunk(uploadId, chunkIndex, data);
+        if (!added) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'Upload not found or expired'));
+            return;
+        }
+        res.json(success(config.nodeId, {
+            upload_id: uploadId,
+            chunk_index: chunkIndex,
+            chunk_size: data.length,
+            received: true,
+        }));
+        emitChange('files');
+    });
+    // POST /v1/storage/upload/:id/complete — assemble chunks into final file
+    router.post('/v1/storage/upload/:id/complete', requireAuth(), requireRole('agent'), async (req, res) => {
+        const uploadId = req.params.id;
+        const upload = await storage.getChunkedUpload(uploadId);
+        if (!upload) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'Upload not found or expired'));
+            return;
+        }
+        if (upload.ownerGaii !== resolve(req)) {
+            res.status(403).json(error(config.nodeId, 'ACCESS_DENIED', 'Not your upload'));
+            return;
+        }
+        if (upload.receivedChunks.size === 0) {
+            res.status(400).json(error(config.nodeId, 'INVALID_INPUT', 'No chunks uploaded'));
+            return;
+        }
+        // Assemble in order
+        const sortedIndices = [...upload.receivedChunks.keys()].sort((a, b) => a - b);
+        const buffers = sortedIndices.map(i => upload.receivedChunks.get(i));
+        const assembledData = Buffer.concat(buffers);
+        // Optional checksum verification
+        const { checksum_sha256 } = req.body ?? {};
+        if (checksum_sha256) {
+            const { createHash } = await import('node:crypto');
+            const actual = createHash('sha256').update(assembledData).digest('hex');
+            if (actual !== checksum_sha256) {
+                res.status(400).json(error(config.nodeId, 'CHECKSUM_MISMATCH', 'SHA-256 checksum does not match', undefined, {
+                    expected: checksum_sha256, actual,
+                }));
+                return;
+            }
+        }
+        // Per-file size limit (must match POST /v1/storage enforcement)
+        if (assembledData.length > config.storageMaxFileSizeMb * 1024 * 1024) {
+            res.status(413).json(error(config.nodeId, 'QUOTA_EXCEEDED', `Assembled file size (${assembledData.length} bytes) exceeds ${config.storageMaxFileSizeMb}MB per-file limit`));
+            return;
+        }
+        // M-2: Total storage quota check before committing assembled file
+        const gaii = upload.ownerGaii;
+        const storageQuota = await checkStorageQuota(config, storage, gaii, assembledData.length);
+        if (!storageQuota.allowed) {
+            res.status(413).json(error(config.nodeId, 'QUOTA_EXCEEDED', storageQuota.reason));
+            return;
+        }
+        // Create the final storage file
+        const file = await storage.createStorageFile({
+            key: upload.key,
+            ownerGaii: upload.ownerGaii,
+            visibility: upload.visibility,
+            mimeType: upload.mimeType,
+            size: assembledData.length,
+            data: assembledData,
+            createdAt: new Date().toISOString(),
+        });
+        // M-3: Charge overage morsels if over quota (§15)
+        if (storageQuota.overageMorsels > 0) {
+            await chargeOverage(storage, gaii, storageQuota.overageMorsels, 'storage_overage');
+        }
+        // Clean up chunked upload
+        await storage.deleteChunkedUpload(uploadId);
+        emitResourceUpdated(gaii, `aimeat://storage/${encodeURIComponent(upload.key)}`);
+        emitResourceListChanged(gaii);
+        res.status(201).json(success(config.nodeId, {
+            key: file.key,
+            size: file.size,
+            mime_type: file.mimeType,
+            visibility: file.visibility,
+            chunks_assembled: sortedIndices.length,
+            created_at: file.createdAt,
+        }, [
+            { description: 'Download this file', method: 'GET', url: `/v1/storage/${encodeURIComponent(file.key)}` },
+        ]));
+        emitChange('files');
+    });
+    // DELETE /v1/storage/upload/:id — abort chunked upload
+    router.delete('/v1/storage/upload/:id', requireAuth(), requireRole('agent'), async (req, res) => {
+        const uploadId = req.params.id;
+        const upload = await storage.getChunkedUpload(uploadId);
+        if (!upload) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'Upload not found or expired'));
+            return;
+        }
+        if (upload.ownerGaii !== resolve(req)) {
+            res.status(403).json(error(config.nodeId, 'ACCESS_DENIED', 'Not your upload'));
+            return;
+        }
+        await storage.deleteChunkedUpload(uploadId);
+        res.json(success(config.nodeId, { upload_id: uploadId, aborted: true }));
+        emitChange('files');
+    });
+    // -----------------------------------------------
+    // Public file access — no auth required for "public" visibility files.
+    // Mirrors the /v1/memory/:gaii/:key pattern.
+    // Registered BEFORE wildcard {*key} routes to take priority.
+    // -----------------------------------------------
+    // GET /v1/pub/:gaii/{*key} — public file download (optional auth for consent-based access)
+    // Enables <img src="..."> and direct links for public files.
+    // Non-public files can be accessed if caller has consent grant.
+    router.get('/v1/pub/:gaii/{*key}', optionalAuth(), async (req, res) => {
+        const gaii = req.params.gaii;
+        const key = extractKey(req.params);
+        const file = await storage.getStorageFile(gaii, key);
+        if (!file) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'Public file not found'));
+            return;
+        }
+        // Public files are always accessible
+        if (file.visibility === 'public') {
+            res.setHeader('Cache-Control', 'public, max-age=300');
+            res.setHeader('Content-Type', file.mimeType);
+            res.setHeader('Content-Length', file.size);
+            res.end(file.data);
+            return;
+        }
+        // Non-public files: attempt consent check if authenticated
+        if (!req.auth?.sub) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'Public file not found'));
+            return;
+        }
+        if (!config.consentEnabled) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'Public file not found'));
+            return;
+        }
+        const result = await checkConsentForRead(storage, `storage:${key}`, gaii, req.auth.sub, file.visibility);
+        // Audit the access attempt
+        await auditDataAccess(storage, result.consentId ?? null, gaii, req.auth.sub, `storage:${key}`, 'read', result.allowed);
+        if (!result.allowed) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'Public file not found'));
+            return;
+        }
+        res.setHeader('Content-Type', file.mimeType);
+        res.setHeader('Content-Length', file.size);
+        res.end(file.data);
+    });
+    // -----------------------------------------------
+    // Authenticated file access routes — use {*key} wildcard to support
+    // keys containing slashes (e.g. "images/photo.png").
+    // Express 5 path-to-regexp v8 auto-decodes %xx in params,
+    // so no manual decodeURIComponent needed.
+    // -----------------------------------------------
+    // HEAD /v1/storage/{*key} — file metadata (agent auth)
+    // Must be registered before GET to prevent Express auto-HEAD via GET handler
+    router.head('/v1/storage/{*key}', requireAuth(), requireRole('agent'), async (req, res) => {
+        const gaii = resolve(req);
+        const key = extractKey(req.params);
+        const file = await storage.getStorageFile(gaii, key);
+        if (!file) {
+            res.status(404).end();
+            return;
+        }
+        // Cross-agent access: if the file is not owned by the requester, enforce consent
+        if (file.ownerGaii !== resolve(req)) {
+            if (file.visibility === 'public') {
+                // Public files are always accessible
+            }
+            else if (config.consentEnabled) {
+                const consentResult = await checkConsentForRead(storage, `storage:${key}`, file.ownerGaii, resolve(req), file.visibility);
+                if (!consentResult.allowed) {
+                    res.status(403).end();
+                    return;
+                }
+            }
+            else {
+                res.status(403).end();
+                return;
+            }
+        }
+        res.setHeader('Content-Type', file.mimeType);
+        res.setHeader('Content-Length', file.size);
+        res.setHeader('X-AIMEAT-Visibility', file.visibility);
+        res.setHeader('X-AIMEAT-Created', file.createdAt);
+        res.status(200).end();
+    });
+    // GET /v1/storage/{*key} — download file (agent auth)
+    router.get('/v1/storage/{*key}', requireAuth(), requireRole('agent'), async (req, res) => {
+        const gaii = resolve(req);
+        const key = extractKey(req.params);
+        const file = await storage.getStorageFile(gaii, key);
+        if (!file) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', `File not found: ${key}`));
+            return;
+        }
+        // Cross-agent access: if the file is not owned by the requester, enforce consent
+        if (file.ownerGaii !== resolve(req)) {
+            if (file.visibility === 'public') {
+                // Public files are always accessible
+            }
+            else if (config.consentEnabled) {
+                const consentResult = await checkConsentForRead(storage, `storage:${key}`, file.ownerGaii, resolve(req), file.visibility);
+                await auditDataAccess(storage, consentResult.consentId ?? null, file.ownerGaii, resolve(req), `storage:${key}`, 'read', consentResult.allowed);
+                if (!consentResult.allowed) {
+                    res.status(403).json(error(config.nodeId, 'CONSENT_REQUIRED', 'You do not have consent to access this file'));
+                    return;
+                }
+            }
+            else {
+                res.status(403).json(error(config.nodeId, 'ACCESS_DENIED', 'You can only access your own files'));
+                return;
+            }
+        }
+        // Range header support
+        const rangeHeader = req.headers.range;
+        if (rangeHeader) {
+            const match = rangeHeader.match(/bytes=(\d+)-(\d*)/);
+            if (match) {
+                const start = parseInt(match[1], 10);
+                const end = match[2] ? parseInt(match[2], 10) : file.size - 1;
+                const chunk = file.data.subarray(start, end + 1);
+                res.status(206);
+                res.setHeader('Content-Range', `bytes ${start}-${end}/${file.size}`);
+                res.setHeader('Content-Length', chunk.length);
+                res.setHeader('Content-Type', file.mimeType);
+                res.end(chunk);
+                return;
+            }
+        }
+        res.setHeader('Content-Type', file.mimeType);
+        res.setHeader('Content-Length', file.size);
+        res.end(file.data);
+    });
+    // DELETE /v1/storage/{*key} — delete file (agent auth)
+    router.delete('/v1/storage/{*key}', requireAuth(), requireRole('agent'), async (req, res) => {
+        const gaii = resolve(req);
+        const key = extractKey(req.params);
+        // Anonymous namespace enforcement
+        if (isAnonymousGaii(gaii) && !key.startsWith('anonymous/')) {
+            res.status(403).json(error(config.nodeId, 'FORBIDDEN', 'Anonymous agents can only delete keys prefixed with "anonymous/"'));
+            return;
+        }
+        // Defense-in-depth: verify ownership before deletion
+        const existing = await storage.getStorageFile(gaii, key);
+        if (!existing) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', `File not found: ${key}`));
+            return;
+        }
+        if (existing.ownerGaii !== resolve(req)) {
+            res.status(403).json(error(config.nodeId, 'ACCESS_DENIED', 'You can only delete your own files'));
+            return;
+        }
+        const deleted = await storage.deleteStorageFile(gaii, key);
+        if (!deleted) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', `File not found: ${key}`));
+            return;
+        }
+        emitResourceUpdated(gaii, `aimeat://storage/${encodeURIComponent(key)}`);
+        emitResourceListChanged(gaii);
+        res.json(success(config.nodeId, { deleted: true, key }));
+        emitChange('files');
+    });
+    return router;
+}
+//# sourceMappingURL=storage-files.js.map

package/dist/src/routes/storage-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-files.js","sourceRoot":"","sources":["../../../src/routes/storage-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,2FAA2F;AAC3F,SAAS,eAAe,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,MAAyC;IACzD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC;IACrB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAoB,EAAE,OAAgB;IACrE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,CAAC,GAAoB,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,IAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAEpF,qDAAqD;IACrD,MAAM,qBAAqB,GAAG,MAAM,CAAC,2BAA2B,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;IAEtF,8CAA8C;IAC9C,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAE1B,2CAA2C;QAC3C,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACtD,IAAI,GAAW,CAAC;QAChB,IAAI,UAAkB,CAAC;QACvB,IAAI,QAAgB,CAAC;QACrB,IAAI,QAAgB,CAAC;QAErB,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC3C,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YAClE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,oCAAoC,CAAC,CAAC,CAAC;gBAClG,OAAO;YACX,CAAC;YACD,GAAG,GAAG,CAAC,CAAC;YACR,UAAU,GAAG,CAAC,IAAI,SAAS,CAAC;YAC5B,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACvC,QAAQ,GAAG,SAAS,IAAI,0BAA0B,CAAC;QACvD,CAAC;aAAM,CAAC;YACJ,kBAAkB;YAClB,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAa,IAAI,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACtD,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,UAAoB,IAAI,SAAS,CAAC;YACzD,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;gBAC5B,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACxE,CAAC;YACD,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACjC,QAAQ,GAAG,WAAW,IAAI,0BAA0B,CAAC;QACzD,CAAC;QAED,wFAAwF;QACxF,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,qEAAqE,CAAC,CAAC,CAAC;YAC/H,OAAO;QACX,CAAC;QAED,qCAAqC;QACrC,IAAI,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,oBAAoB,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;YAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,qBAAqB,MAAM,CAAC,oBAAoB,UAAU,CAAC,CAAC,CAAC;YACzH,OAAO;QACX,CAAC;QAED,uEAAuE;QACvE,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrF,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YACxB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,YAAY,CAAC,MAAO,CAAC,CAAC,CAAC;YACnF,OAAO;QACX,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC;YACzC,GAAG;YACH,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,UAA4C;YACxD,QAAQ;YACR,IAAI,EAAE,QAAQ,CAAC,MAAM;YACrB,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC,CAAC;QAEH,kDAAkD;QAClD,IAAI,YAAY,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;QACvF,CAAC;QAED,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzE,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAE9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YACxC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,eAAe,EAAE,YAAY,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;SAC7F,EAAE;YACC,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,eAAe,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE;YACnG,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,EAAE;SACvE,CAAC,CAAC,CAAC;QACJ,UAAU,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,oDAAoD;IACpD,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAEnD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC5B,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACnB,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,SAAS,EAAE,CAAC,CAAC,QAAQ;gBACrB,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,UAAU,EAAE,CAAC,CAAC,SAAS;aAC1B,CAAC,CAAC;YACH,KAAK,EAAE,KAAK,CAAC,MAAM;SACtB,CAAC,CAAC,CAAC;IACR,CAAC,CAAC,CAAC;IAEH,kDAAkD;IAClD,sCAAsC;IACtC,8DAA8D;IAC9D,6DAA6D;IAC7D,kDAAkD;IAElD,yDAAyD;IACzD,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjJ,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAEhF,kCAAkC;QAClC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,qEAAqE,CAAC,CAAC,CAAC;YAC/H,OAAO;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,UAAU,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU;QAElF,yEAAyE;QACzE,MAAM,OAAO,GAAG,UAAU,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;QAC/C,IAAI,YAAY,IAAI,OAAO,GAAG,YAAY,GAAG,qBAAqB,EAAE,CAAC;YACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EACtD,uBAAuB,YAAY,aAAa,OAAO,+CAA+C,CAAC,CAAC,CAAC;YAC7G,OAAO;QACX,CAAC;QAED,MAAM,OAAO,CAAC,mBAAmB,CAAC;YAC9B,QAAQ;YACR,SAAS,EAAE,IAAI;YACf,GAAG;YACH,QAAQ,EAAE,SAAS,IAAI,0BAA0B;YACjD,UAAU,EAAE,UAAU,IAAI,SAAS;YACnC,SAAS,EAAE,UAAU,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,eAAe;YAC1D,WAAW,EAAE,YAAY;YACzB,cAAc,EAAE,IAAI,GAAG,EAAE;YACzB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;YAC5B,SAAS;SACZ,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YACxC,SAAS,EAAE,QAAQ;YACnB,GAAG;YACH,UAAU,EAAE,UAAU,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI;YAC1C,UAAU,EAAE,SAAS;SACxB,EAAE;YACC,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,sBAAsB,QAAQ,IAAI,EAAE;YACvF,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,sBAAsB,QAAQ,WAAW,EAAE;SACrG,CAAC,CAAC,CAAC;QACJ,UAAU,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,4DAA4D;IAC5D,MAAM,CAAC,GAAG,CAAC,+BAA+B,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChG,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC;QACzC,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAe,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,4CAA4C,CAAC,CAAC,CAAC;YAC1G,OAAO;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,6BAA6B,CAAC,CAAC,CAAC;YACvF,OAAO;QACX,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAC;YAC/E,OAAO;QACX,CAAC;QAED,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEnC,gEAAgE;QAChE,IAAI,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC;QAC/B,KAAK,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1C,YAAY,IAAI,GAAG,CAAC,MAAM,CAAC;QAC/B,CAAC;QACD,IAAI,YAAY,GAAG,qBAAqB,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EACtD,wBAAwB,YAAY,+CAA+C,CAAC,CAAC,CAAC;YAC1F,OAAO;QACX,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,6BAA6B,CAAC,CAAC,CAAC;YACvF,OAAO;QACX,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC5B,SAAS,EAAE,QAAQ;YACnB,WAAW,EAAE,UAAU;YACvB,UAAU,EAAE,IAAI,CAAC,MAAM;YACvB,QAAQ,EAAE,IAAI;SACjB,CAAC,CAAC,CAAC;QACJ,UAAU,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,yEAAyE;IACzE,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACnG,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,6BAA6B,CAAC,CAAC,CAAC;YACvF,OAAO;QACX,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAC;YAC/E,OAAO;QACX,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,oBAAoB,CAAC,CAAC,CAAC;YAClF,OAAO;QACX,CAAC;QAED,oBAAoB;QACpB,MAAM,aAAa,GAAG,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC;QACtE,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE7C,iCAAiC;QACjC,MAAM,EAAE,eAAe,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC3C,IAAI,eAAe,EAAE,CAAC;YAClB,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxE,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;gBAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,EAAE,iCAAiC,EAAE,SAAS,EAAE;oBACzG,QAAQ,EAAE,eAAe,EAAE,MAAM;iBACpC,CAAC,CAAC,CAAC;gBACJ,OAAO;YACX,CAAC;QACL,CAAC;QAED,gEAAgE;QAChE,IAAI,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC,oBAAoB,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;YACnE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,wBAAwB,aAAa,CAAC,MAAM,mBAAmB,MAAM,CAAC,oBAAoB,mBAAmB,CAAC,CAAC,CAAC;YAC5K,OAAO;QACX,CAAC;QAED,kEAAkE;QAClE,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC;QAC9B,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAC1F,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YACxB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,YAAY,CAAC,MAAO,CAAC,CAAC,CAAC;YACnF,OAAO;QACX,CAAC;QAED,gCAAgC;QAChC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC;YACzC,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,aAAa,CAAC,MAAM;YAC1B,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC,CAAC;QAEH,kDAAkD;QAClD,IAAI,YAAY,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;QACvF,CAAC;QAED,0BAA0B;QAC1B,MAAM,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAE5C,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChF,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAE9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YACxC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,gBAAgB,EAAE,aAAa,CAAC,MAAM;YACtC,UAAU,EAAE,IAAI,CAAC,SAAS;SAC7B,EAAE;YACC,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,eAAe,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;SAC3G,CAAC,CAAC,CAAC;QACJ,UAAU,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,uDAAuD;IACvD,MAAM,CAAC,MAAM,CAAC,wBAAwB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5F,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,6BAA6B,CAAC,CAAC,CAAC;YACvF,OAAO;QACX,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAC;YAC/E,OAAO;QACX,CAAC;QAED,MAAM,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAE5C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACzE,UAAU,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,kDAAkD;IAClD,uEAAuE;IACvE,6CAA6C;IAC7C,6DAA6D;IAC7D,kDAAkD;IAElD,2FAA2F;IAC3F,6DAA6D;IAC7D,gEAAgE;IAChE,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClE,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAc,CAAC;QACvC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC;YACjF,OAAO;QACX,CAAC;QAED,qCAAqC;QACrC,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC/B,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAAC;YACtD,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7C,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO;QACX,CAAC;QAED,2DAA2D;QAC3D,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;YACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC;YACjF,OAAO;QACX,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC;YACjF,OAAO;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACpC,OAAO,EAAE,WAAW,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CACjE,CAAC;QAEF,2BAA2B;QAC3B,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI,EACnD,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAElE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC;YACjF,OAAO;QACX,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,kDAAkD;IAClD,oEAAoE;IACpE,qDAAqD;IACrD,0DAA0D;IAC1D,0CAA0C;IAC1C,kDAAkD;IAElD,uDAAuD;IACvD,6EAA6E;IAC7E,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO;QACX,CAAC;QAED,iFAAiF;QACjF,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAC/B,qCAAqC;YACzC,CAAC;iBAAM,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC/B,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAC3C,OAAO,EAAE,WAAW,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,UAAU,CAC3E,CAAC;gBACF,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;oBACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;oBACtB,OAAO;gBACX,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBACtB,OAAO;YACX,CAAC;QACL,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,sDAAsD;IACtD,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACrF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,mBAAmB,GAAG,EAAE,CAAC,CAAC,CAAC;YAClF,OAAO;QACX,CAAC;QAED,iFAAiF;QACjF,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAC/B,qCAAqC;YACzC,CAAC;iBAAM,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC/B,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAC3C,OAAO,EAAE,WAAW,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,UAAU,CAC3E,CAAC;gBACF,MAAM,eAAe,CAAC,OAAO,EAAE,aAAa,CAAC,SAAS,IAAI,IAAI,EAC1D,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,WAAW,GAAG,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;gBACnF,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;oBACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,6CAA6C,CAAC,CAAC,CAAC;oBAC9G,OAAO;gBACX,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,oCAAoC,CAAC,CAAC,CAAC;gBAClG,OAAO;YACX,CAAC;QACL,CAAC;QAED,uBAAuB;QACvB,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;QACtC,IAAI,WAAW,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACrD,IAAI,KAAK,EAAE,CAAC;gBACR,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;gBAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;gBACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChB,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,SAAS,KAAK,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACrE,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC9C,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC7C,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACf,OAAO;YACX,CAAC;QACL,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,uDAAuD;IACvD,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACxF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEnC,kCAAkC;QAClC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,kEAAkE,CAAC,CAAC,CAAC;YAC5H,OAAO;QACX,CAAC;QAED,qDAAqD;QACrD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,mBAAmB,GAAG,EAAE,CAAC,CAAC,CAAC;YAClF,OAAO;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,oCAAoC,CAAC,CAAC,CAAC;YAClG,OAAO;QACX,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,mBAAmB,GAAG,EAAE,CAAC,CAAC,CAAC;YAClF,OAAO;QACX,CAAC;QAED,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzE,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAE9B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACzD,UAAU,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC"}