anyray-connect 0.11.39 → 0.11.40

package/dist/util/agentTrust.js

@@ -1,517 +0,0 @@
-/**
- * macOS trust store + system-proxy wiring for the device-capture agent.
- *
- * Two OS-level jobs make apps route through our proxy and trust our leaf certs:
- *   1. Add the device CA to the login keychain as a trusted root (one prompt).
- *   2. Point the macOS system HTTP(S) proxy at our loopback listener — and
- *      capture the PRIOR proxy state first, so uninstall fully reverts it.
- *
- * macOS ONLY in Phase 1 (per RFC 0002a §7): non-darwin returns a clear
- * manual-steps result rather than writing something that won't work. Everything
- * here is best-effort + fail-open — OS operations never throw up the stack; they
- * return { ok, messages } so the caller can warn without aborting an apply and
- * the machine is never trapped behind a proxy we couldn't revert.
- *
- * These modules never touch prompt/response content — they only flip OS
- * settings, so the privacy invariant is preserved by construction.
- *
- * Node built-ins only; the OS tools invoked (`security`, `networksetup`) mirror
- * the `launchctl`/`networksetup` posture proxyService.ts already uses.
- */
-import { homedir, platform } from 'node:os';
-import { spawnSync } from 'node:child_process';
-import { existsSync } from 'node:fs';
-import { readFile, writeFile, mkdir, rm } from 'node:fs/promises';
-import { agentDir, DEFAULT_AGENT_PORT, proxyBackupPath, } from './agentPaths.js';
-const NON_DARWIN_MESSAGE = 'Automated CA trust + system proxy are macOS-only in this phase; see docs.';
-/** The login keychain the CA is trusted into (macOS `.keychain-db` naming). */
-const loginKeychain = () => `${homedir()}/Library/Keychains/login.keychain-db`;
-// --------------------------------------------------------------------------
-// Pure command builders (unit-tested unconditionally).
-// --------------------------------------------------------------------------
-/**
- * Add the device CA to the login keychain as a trusted SSL root.
- *
- * `-r trustRoot` marks it a trusted root; `-d` scopes to the admin (user) trust
- * domain. This is the ONE step that prompts the operator once for their keychain
- * password — trusting a root CA is a deliberate admin action, by design.
- */
-export const buildTrustInstallCmd = (certPath) => ({
-    cmd: 'security',
-    args: [
-        'add-trusted-cert',
-        '-d',
-        '-r',
-        'trustRoot',
-        '-k',
-        loginKeychain(),
-        certPath,
-    ],
-});
-/** Remove the device CA's trust settings (uninstall). */
-export const buildTrustRemoveCmd = (certPath) => ({
-    cmd: 'security',
-    args: ['remove-trusted-cert', '-d', certPath],
-});
-/**
- * Point the macOS web + secure-web proxy for `service` at `host:port` and turn
- * both on. `networksetup -setwebproxy` sets the endpoint but also enables it;
- * we set state explicitly to `on` too so the intent is unambiguous.
- */
-export const buildProxyEnableCmds = (service, host, port) => {
-    const p = String(port);
-    return [
-        { cmd: 'networksetup', args: ['-setwebproxy', service, host, p] },
-        { cmd: 'networksetup', args: ['-setsecurewebproxy', service, host, p] },
-        { cmd: 'networksetup', args: ['-setwebproxystate', service, 'on'] },
-        { cmd: 'networksetup', args: ['-setsecurewebproxystate', service, 'on'] },
-    ];
-};
-/**
- * Restore the system proxy EXACTLY to a captured prior state: re-point + enable
- * a proxy that was on before, or turn one off that was off before. This is what
- * makes uninstall a clean revert instead of just "proxy off".
- */
-export const buildProxyRestoreCmds = (prev) => {
-    const cmds = [];
-    const s = prev.service;
-    if (prev.webEnabled && prev.webHost) {
-        cmds.push({
-            cmd: 'networksetup',
-            args: ['-setwebproxy', s, prev.webHost, prev.webPort ?? '0'],
-        });
-        cmds.push({ cmd: 'networksetup', args: ['-setwebproxystate', s, 'on'] });
-    }
-    else {
-        cmds.push({ cmd: 'networksetup', args: ['-setwebproxystate', s, 'off'] });
-    }
-    if (prev.secureEnabled && prev.secureHost) {
-        cmds.push({
-            cmd: 'networksetup',
-            args: ['-setsecurewebproxy', s, prev.secureHost, prev.securePort ?? '0'],
-        });
-        cmds.push({
-            cmd: 'networksetup',
-            args: ['-setsecurewebproxystate', s, 'on'],
-        });
-    }
-    else {
-        cmds.push({
-            cmd: 'networksetup',
-            args: ['-setsecurewebproxystate', s, 'off'],
-        });
-    }
-    return cmds;
-};
-/**
- * Parse `networksetup -getwebproxy` / `-getsecurewebproxy` output into a
- * ProxyState. Each block looks like:
- *   Enabled: Yes
- *   Server: proxy.example.com
- *   Port: 8080
- *   Authenticated Proxy Enabled: 0
- * PURE — no I/O; the runtime wrapper supplies the two captured strings.
- */
-export const parseProxyState = (service, webShow, secureShow) => {
-    const field = (block, key) => {
-        for (const line of block.split('\n')) {
-            const idx = line.indexOf(':');
-            if (idx === -1)
-                continue;
-            if (line.slice(0, idx).trim().toLowerCase() === key.toLowerCase()) {
-                return line.slice(idx + 1).trim();
-            }
-        }
-        return undefined;
-    };
-    const enabled = (block) => (field(block, 'Enabled') ?? '').toLowerCase() === 'yes';
-    const nonEmpty = (v) => v && v.length > 0 ? v : undefined;
-    return {
-        service,
-        webEnabled: enabled(webShow),
-        webHost: nonEmpty(field(webShow, 'Server')),
-        webPort: nonEmpty(field(webShow, 'Port')),
-        secureEnabled: enabled(secureShow),
-        secureHost: nonEmpty(field(secureShow, 'Server')),
-        securePort: nonEmpty(field(secureShow, 'Port')),
-    };
-};
-const isProxyState = (value) => {
-    if (!value || typeof value !== 'object')
-        return false;
-    const state = value;
-    return (typeof state.service === 'string' &&
-        typeof state.webEnabled === 'boolean' &&
-        typeof state.secureEnabled === 'boolean');
-};
-/** Parse both the current multi-service format and the legacy single state. */
-export const parseProxyBackup = (value) => {
-    if (isProxyState(value)) {
-        return { version: 2, services: { [value.service]: value } };
-    }
-    if (!value || typeof value !== 'object') {
-        return { version: 2, services: {} };
-    }
-    const candidate = value;
-    const services = {};
-    if (candidate.services && typeof candidate.services === 'object') {
-        for (const [name, state] of Object.entries(candidate.services)) {
-            if (isProxyState(state))
-                services[name] = state;
-        }
-    }
-    return { version: 2, services };
-};
-/** Preserve the first genuine pre-Anyray state captured for each service. */
-export const addProxyBackup = (backup, state, port) => {
-    if (!state || proxyPointsAtLoopback(state, port)) {
-        return backup;
-    }
-    const existing = backup.services[state.service];
-    if (existing && !proxyPointsAtLoopback(existing, port))
-        return backup;
-    return {
-        version: 2,
-        services: { ...backup.services, [state.service]: state },
-    };
-};
-/** Parse enabled network service names from `networksetup` output. */
-export const parseNetworkServices = (output) => output
-    .split('\n')
-    .slice(1)
-    .map((line) => line.trim())
-    .filter((line) => line.length > 0 && !line.startsWith('*'));
-/**
- * Whether a captured proxy state already points at our own loopback listener on
- * `port`. Such a state is NOT a meaningful "prior" to restore — saving it would
- * make a later restore re-point the system at our (by then dead) daemon and trap
- * the machine offline. Pure + exported for tests.
- */
-export const proxyPointsAtLoopback = (state, port) => {
-    if (!state)
-        return false;
-    const p = String(port);
-    return ((state.secureHost === '127.0.0.1' && state.securePort === p) ||
-        (state.webHost === '127.0.0.1' && state.webPort === p));
-};
-/**
- * Parse the primary interface DEVICE (e.g. `en0`) from `route -n get default`
- * output, which contains a line `  interface: en0`. Returns undefined when there
- * is no default route (offline) or the line is absent. PURE.
- */
-export const parsePrimaryInterface = (routeShow) => {
-    for (const line of routeShow.split('\n')) {
-        const idx = line.indexOf(':');
-        if (idx === -1)
-            continue;
-        if (line.slice(0, idx).trim().toLowerCase() === 'interface') {
-            const dev = line.slice(idx + 1).trim();
-            return dev.length > 0 ? dev : undefined;
-        }
-    }
-    return undefined;
-};
-/**
- * Map a BSD device (e.g. `en0`) to its macOS network-SERVICE name (e.g. `Wi-Fi`)
- * from `networksetup -listnetworkserviceorder`, which pairs a `(N) <service
- * name>` line with a following `(Hardware Port: <port>, Device: <device>)` line.
- * The proxy `networksetup` verbs take the SERVICE NAME, which can differ from the
- * hardware-port label (two `USB 10/100/1000 LAN` ports are services `…LAN` and
- * `…LAN 2`), so we key on the unique Device and return its paired name. PURE.
- */
-export const serviceForDevice = (orderShow, device) => {
-    let lastName;
-    for (const raw of orderShow.split('\n')) {
-        const line = raw.trim();
-        const name = line.match(/^\((?:\d+|\*)\)\s+(.+?)\s*$/);
-        if (name) {
-            lastName = name[1].replace(/^\*/, '').trim();
-            continue;
-        }
-        const dev = line.match(/Device:\s*([^),\s]+)/);
-        if (dev && dev[1] === device)
-            return lastName;
-    }
-    return undefined;
-};
-// --------------------------------------------------------------------------
-// Runtime wrappers (best-effort; macOS only).
-// --------------------------------------------------------------------------
-const run = (cmd) => {
-    const r = spawnSync(cmd.cmd, cmd.args, { encoding: 'utf8' });
-    return { ok: r.status === 0, stdout: r.stdout ?? '' };
-};
-/**
- * The macOS network service to route through our proxy: the service backing the
- * DEFAULT ROUTE (the genuinely active interface), NOT merely the first-listed
- * service. First-listed pointed the proxy at an inactive USB-Ethernet dongle on
- * machines that have one cabled-but-idle, so the app's real (e.g. Wi-Fi) traffic
- * bypassed the agent entirely and nothing was captured. Falls back to the first
- * ENABLED service, then 'Wi-Fi', when the default route can't be resolved.
- */
-export const primaryNetworkService = () => {
-    try {
-        // 1. Prefer the service whose device carries the default route.
-        const route = run({ cmd: 'route', args: ['-n', 'get', 'default'] });
-        const device = route.ok ? parsePrimaryInterface(route.stdout) : undefined;
-        if (device) {
-            const order = run({
-                cmd: 'networksetup',
-                args: ['-listnetworkserviceorder'],
-            });
-            if (order.ok) {
-                const svc = serviceForDevice(order.stdout, device);
-                if (svc)
-                    return svc;
-            }
-        }
-        // 2. Fall back to the first ENABLED service (skip header + `*`-disabled).
-        const { ok, stdout } = run({
-            cmd: 'networksetup',
-            args: ['-listallnetworkservices'],
-        });
-        if (ok) {
-            const [service] = parseNetworkServices(stdout);
-            if (service)
-                return service;
-        }
-    }
-    catch {
-        /* fall through to default */
-    }
-    return 'Wi-Fi';
-};
-/** Read the current proxy state for `service` (defaults to the primary). */
-export const readProxyState = (service) => {
-    if (platform() !== 'darwin')
-        return null;
-    try {
-        const svc = service ?? primaryNetworkService();
-        const web = run({ cmd: 'networksetup', args: ['-getwebproxy', svc] });
-        const secure = run({
-            cmd: 'networksetup',
-            args: ['-getsecurewebproxy', svc],
-        });
-        if (!web.ok || !secure.ok)
-            return null;
-        return parseProxyState(svc, web.stdout, secure.stdout);
-    }
-    catch {
-        return null;
-    }
-};
-/** Trust the device CA (prompts once). Best-effort; macOS only. */
-export const installTrust = async (certPath) => {
-    if (platform() !== 'darwin') {
-        return { ok: false, messages: [NON_DARWIN_MESSAGE] };
-    }
-    try {
-        const r = run(buildTrustInstallCmd(certPath));
-        if (!r.ok) {
-            return {
-                ok: false,
-                messages: [
-                    'Could not add the device CA to the login keychain (the trust prompt may have been cancelled).',
-                ],
-            };
-        }
-        return {
-            ok: true,
-            messages: ['Trusted the device CA in your login keychain.'],
-        };
-    }
-    catch (error) {
-        return {
-            ok: false,
-            messages: [
-                `Could not trust the device CA: ${error instanceof Error ? error.message : String(error)}`,
-            ],
-        };
-    }
-};
-/** Untrust the device CA. Best-effort; safe to call when absent. */
-export const uninstallTrust = async (certPath) => {
-    if (platform() !== 'darwin') {
-        return { ok: false, messages: [NON_DARWIN_MESSAGE] };
-    }
-    try {
-        run(buildTrustRemoveCmd(certPath));
-        return { ok: true, messages: ['Removed the device CA trust setting.'] };
-    }
-    catch {
-        return { ok: true, messages: [] };
-    }
-};
-/**
- * Capture the current proxy state, persist it to proxyBackupPath, then point the
- * system web + secure-web proxy at 127.0.0.1:port. The backup is what lets
- * restoreSystemProxy revert EXACTLY — so we save it before mutating anything.
- */
-export const enableSystemProxy = async (port) => {
-    if (platform() !== 'darwin') {
-        return { ok: false, messages: [NON_DARWIN_MESSAGE], backup: null };
-    }
-    try {
-        const service = primaryNetworkService();
-        const backup = readProxyState(service);
-        if (!backup) {
-            return {
-                ok: false,
-                messages: [
-                    `Could not read the current proxy settings for "${service}"; left them unchanged.`,
-                ],
-                backup: null,
-            };
-        }
-        // Persist the PRIOR state so uninstall reverts exactly — but only capture a
-        // genuine prior. Preserve the first state for each service across re-runs,
-        // but never save a state that's already OUR listener: that would make a
-        // later restore re-point the system at a dead daemon and trap the machine
-        // offline. A poisoned legacy entry is replaced by a genuine current state.
-        let saved = parseProxyBackup(undefined);
-        if (existsSync(proxyBackupPath())) {
-            try {
-                saved = parseProxyBackup(JSON.parse(await readFile(proxyBackupPath(), 'utf8')));
-            }
-            catch {
-                saved = parseProxyBackup(undefined);
-            }
-        }
-        const updated = addProxyBackup(saved, backup, port);
-        if (updated !== saved) {
-            await mkdir(agentDir(), { recursive: true });
-            await writeFile(proxyBackupPath(), JSON.stringify(updated, null, 2), {
-                mode: 0o600,
-            });
-        }
-        let enabled = true;
-        for (const cmd of buildProxyEnableCmds(service, '127.0.0.1', port)) {
-            if (!run(cmd).ok)
-                enabled = false;
-        }
-        return {
-            ok: enabled,
-            messages: [
-                enabled
-                    ? `Pointed the "${service}" system proxy at 127.0.0.1:${port}.`
-                    : `Could not fully enable the "${service}" system proxy.`,
-            ],
-            backup,
-        };
-    }
-    catch (error) {
-        return {
-            ok: false,
-            messages: [
-                `Could not set the system proxy: ${error instanceof Error ? error.message : String(error)}`,
-            ],
-            backup: null,
-        };
-    }
-};
-/** Build accurate, non-overwriting diagnostics for proxy restoration. */
-export const proxyRestoreMessages = (state) => {
-    const messages = [];
-    if (state.failed) {
-        messages.push('Could not restore every prior proxy setting; kept the remaining backup for retry.');
-    }
-    else if (state.restored) {
-        messages.push('Restored the prior system-proxy settings for every captured network service.');
-    }
-    else if (!state.cleanupFailed) {
-        messages.push('No saved proxy backup found — disabled any stale Anyray system proxy.');
-    }
-    if (state.cleanupFailed) {
-        messages.push('Could not inspect or disable every stale Anyray proxy; manual proxy cleanup may be required.');
-    }
-    return messages;
-};
-/**
- * Restore every service in the persisted backup. Also scan all enabled network
- * services for orphaned Anyray listeners, which handles interface switches and
- * missing legacy backups. Failed prior-state restores stay on disk for retry.
- */
-export const restoreSystemProxy = async (port = DEFAULT_AGENT_PORT) => {
-    if (platform() !== 'darwin') {
-        return { ok: false, messages: [NON_DARWIN_MESSAGE] };
-    }
-    try {
-        let backup = parseProxyBackup(undefined);
-        try {
-            backup = parseProxyBackup(JSON.parse(await readFile(proxyBackupPath(), 'utf8')));
-        }
-        catch {
-            backup = parseProxyBackup(undefined);
-        }
-        const restoredServices = new Set();
-        const failedServices = {};
-        for (const prev of Object.values(backup.services)) {
-            // Older releases could poison the backup with our own listener. Never
-            // restore that state; the scan below disables it instead.
-            if (proxyPointsAtLoopback(prev, port))
-                continue;
-            let restored = true;
-            for (const cmd of buildProxyRestoreCmds(prev)) {
-                if (!run(cmd).ok)
-                    restored = false;
-            }
-            if (restored)
-                restoredServices.add(prev.service);
-            else
-                failedServices[prev.service] = prev;
-        }
-        // An interface switch can leave a second service pointing at the agent.
-        // Scan every enabled service and disable only orphaned Anyray listeners.
-        const listed = run({
-            cmd: 'networksetup',
-            args: ['-listallnetworkservices'],
-        });
-        const listedServices = listed.ok
-            ? parseNetworkServices(listed.stdout)
-            : [];
-        const services = listedServices.length > 0 ? listedServices : [primaryNetworkService()];
-        let cleanupFailed = false;
-        for (const service of services) {
-            if (restoredServices.has(service))
-                continue;
-            const current = readProxyState(service);
-            if (!current) {
-                cleanupFailed = true;
-                continue;
-            }
-            if (!proxyPointsAtLoopback(current, port))
-                continue;
-            const web = run({
-                cmd: 'networksetup',
-                args: ['-setwebproxystate', service, 'off'],
-            });
-            const secure = run({
-                cmd: 'networksetup',
-                args: ['-setsecurewebproxystate', service, 'off'],
-            });
-            if (!web.ok || !secure.ok)
-                cleanupFailed = true;
-        }
-        if (Object.keys(failedServices).length > 0) {
-            await writeFile(proxyBackupPath(), JSON.stringify({ version: 2, services: failedServices }, null, 2), { mode: 0o600 });
-        }
-        else {
-            await rm(proxyBackupPath(), { force: true });
-        }
-        const restored = restoredServices.size > 0;
-        const failed = Object.keys(failedServices).length > 0;
-        return {
-            ok: !failed && !cleanupFailed,
-            messages: proxyRestoreMessages({ restored, failed, cleanupFailed }),
-        };
-    }
-    catch (error) {
-        return {
-            ok: false,
-            messages: [
-                `Could not restore the system proxy: ${error instanceof Error ? error.message : String(error)}`,
-            ],
-        };
-    }
-};
-//# sourceMappingURL=agentTrust.js.map

package/dist/util/agentTrust.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agentTrust.js","sourceRoot":"","sources":["../../src/util/agentTrust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EACL,QAAQ,EACR,kBAAkB,EAClB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AA6BzB,MAAM,kBAAkB,GACtB,2EAA2E,CAAC;AAE9E,+EAA+E;AAC/E,MAAM,aAAa,GAAG,GAAW,EAAE,CACjC,GAAG,OAAO,EAAE,sCAAsC,CAAC;AAErD,6EAA6E;AAC7E,uDAAuD;AACvD,6EAA6E;AAE7E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,QAAgB,EAAO,EAAE,CAAC,CAAC;IAC9D,GAAG,EAAE,UAAU;IACf,IAAI,EAAE;QACJ,kBAAkB;QAClB,IAAI;QACJ,IAAI;QACJ,WAAW;QACX,IAAI;QACJ,aAAa,EAAE;QACf,QAAQ;KACT;CACF,CAAC,CAAC;AAEH,yDAAyD;AACzD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAgB,EAAO,EAAE,CAAC,CAAC;IAC7D,GAAG,EAAE,UAAU;IACf,IAAI,EAAE,CAAC,qBAAqB,EAAE,IAAI,EAAE,QAAQ,CAAC;CAC9C,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,OAAe,EACf,IAAY,EACZ,IAAY,EACL,EAAE;IACT,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO;QACL,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QACjE,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QACvE,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;QACnE,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,yBAAyB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;KAC1E,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,IAAgB,EAAS,EAAE;IAC/D,MAAM,IAAI,GAAU,EAAE,CAAC;IACvB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;IACvB,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC;SAC7D,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,mBAAmB,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,mBAAmB,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,CAAC,oBAAoB,EAAE,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC;SACzE,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,CAAC,yBAAyB,EAAE,CAAC,EAAE,IAAI,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,CAAC,yBAAyB,EAAE,CAAC,EAAE,KAAK,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAAe,EACf,OAAe,EACf,UAAkB,EACN,EAAE;IACd,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,GAAW,EAAsB,EAAE;QAC/D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,SAAS;YACzB,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;gBAClE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACpC,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,KAAa,EAAW,EAAE,CACzC,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;IAC1D,MAAM,QAAQ,GAAG,CAAC,CAAqB,EAAsB,EAAE,CAC7D,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEpC,OAAO;QACL,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC;QAC5B,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC3C,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC;QAClC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACjD,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;KAChD,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAc,EAAuB,EAAE;IAC3D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,KAAK,GAAG,KAA4B,CAAC;IAC3C,OAAO,CACL,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,OAAO,KAAK,CAAC,UAAU,KAAK,SAAS;QACrC,OAAO,KAAK,CAAC,aAAa,KAAK,SAAS,CACzC,CAAC;AACJ,CAAC,CAAC;AAEF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAe,EAAE;IAC9D,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACtC,CAAC;IACD,MAAM,SAAS,GAAG,KAA6B,CAAC;IAChD,MAAM,QAAQ,GAA+B,EAAE,CAAC;IAChD,IAAI,SAAS,CAAC,QAAQ,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/D,IAAI,YAAY,CAAC,KAAK,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAClD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;AAClC,CAAC,CAAC;AAEF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,MAAmB,EACnB,KAAwB,EACxB,IAAY,EACC,EAAE;IACf,IAAI,CAAC,KAAK,IAAI,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACjD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,QAAQ,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACtE,OAAO;QACL,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE;KACzD,CAAC;AACJ,CAAC,CAAC;AAEF,sEAAsE;AACtE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAc,EAAY,EAAE,CAC/D,MAAM;KACH,KAAK,CAAC,IAAI,CAAC;KACX,KAAK,CAAC,CAAC,CAAC;KACR,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;KAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,KAAwB,EACxB,IAAY,EACH,EAAE;IACX,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,CACL,CAAC,KAAK,CAAC,UAAU,KAAK,WAAW,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,CAAC;QAC5D,CAAC,KAAK,CAAC,OAAO,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC,CACvD,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,SAAiB,EACG,EAAE;IACtB,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,SAAS;QACzB,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;YAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACvC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,SAAiB,EACjB,MAAc,EACM,EAAE;IACtB,IAAI,QAA4B,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACvD,IAAI,IAAI,EAAE,CAAC;YACT,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7C,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC/C,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO,QAAQ,CAAC;IAChD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,6EAA6E;AAC7E,8CAA8C;AAC9C,6EAA6E;AAE7E,MAAM,GAAG,GAAG,CAAC,GAAQ,EAAmC,EAAE;IACxD,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7D,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;AACxD,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAW,EAAE;IAChD,IAAI,CAAC;QACH,gEAAgE;QAChE,MAAM,KAAK,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,GAAG,CAAC;gBAChB,GAAG,EAAE,cAAc;gBACnB,IAAI,EAAE,CAAC,0BAA0B,CAAC;aACnC,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACnD,IAAI,GAAG;oBAAE,OAAO,GAAG,CAAC;YACtB,CAAC;QACH,CAAC;QACD,0EAA0E;QAC1E,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;YACzB,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,CAAC,yBAAyB,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,EAAE,EAAE,CAAC;YACP,MAAM,CAAC,OAAO,CAAC,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;QAC9B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAgB,EAAqB,EAAE;IACpE,IAAI,QAAQ,EAAE,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,IAAI,qBAAqB,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,GAAG,CAAC;YACjB,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,CAAC,oBAAoB,EAAE,GAAG,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACvC,OAAO,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,mEAAmE;AACnE,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,QAAgB,EAAmB,EAAE;IACtE,IAAI,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,GAAG,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE;oBACR,+FAA+F;iBAChG;aACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,CAAC,+CAA+C,CAAC;SAC5D,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE;gBACR,kCACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE;aACH;SACF,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EAAE,QAAgB,EAAmB,EAAE;IACxE,IAAI,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,CAAC;QACH,GAAG,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,sCAAsC,CAAC,EAAE,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACpC,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,IAAY,EACqC,EAAE;IACnD,IAAI,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE;oBACR,kDAAkD,OAAO,yBAAyB;iBACnF;gBACD,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC;QACD,4EAA4E;QAC5E,2EAA2E;QAC3E,wEAAwE;QACxE,0EAA0E;QAC1E,2EAA2E;QAC3E,IAAI,KAAK,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,UAAU,CAAC,eAAe,EAAE,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,KAAK,GAAG,gBAAgB,CACtB,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,eAAe,EAAE,EAAE,MAAM,CAAC,CAAY,CACjE,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;YACtB,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,MAAM,SAAS,CAAC,eAAe,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;gBACnE,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,oBAAoB,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE;gBAAE,OAAO,GAAG,KAAK,CAAC;QACpC,CAAC;QACD,OAAO;YACL,EAAE,EAAE,OAAO;YACX,QAAQ,EAAE;gBACR,OAAO;oBACL,CAAC,CAAC,gBAAgB,OAAO,+BAA+B,IAAI,GAAG;oBAC/D,CAAC,CAAC,+BAA+B,OAAO,iBAAiB;aAC5D;YACD,MAAM;SACP,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE;gBACR,mCACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE;aACH;YACD,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAIpC,EAAY,EAAE;IACb,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,QAAQ,CAAC,IAAI,CACX,mFAAmF,CACpF,CAAC;IACJ,CAAC;SAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC1B,QAAQ,CAAC,IAAI,CACX,8EAA8E,CAC/E,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CACX,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,QAAQ,CAAC,IAAI,CACX,8FAA8F,CAC/F,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,IAAI,GAAG,kBAAkB,EACR,EAAE;IACnB,IAAI,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,CAAC;QACH,IAAI,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,GAAG,gBAAgB,CACvB,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,eAAe,EAAE,EAAE,MAAM,CAAC,CAAY,CACjE,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC3C,MAAM,cAAc,GAA+B,EAAE,CAAC;QACtD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClD,sEAAsE;YACtE,0DAA0D;YAC1D,IAAI,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC;gBAAE,SAAS;YAChD,IAAI,QAAQ,GAAG,IAAI,CAAC;YACpB,KAAK,MAAM,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE;oBAAE,QAAQ,GAAG,KAAK,CAAC;YACrC,CAAC;YACD,IAAI,QAAQ;gBAAE,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;gBAC5C,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;QAC3C,CAAC;QACD,wEAAwE;QACxE,yEAAyE;QACzE,MAAM,MAAM,GAAG,GAAG,CAAC;YACjB,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,CAAC,yBAAyB,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE;YAC9B,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC;YACrC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,QAAQ,GACZ,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC;QACzE,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAS;YAC5C,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,aAAa,GAAG,IAAI,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC;gBAAE,SAAS;YACpD,MAAM,GAAG,GAAG,GAAG,CAAC;gBACd,GAAG,EAAE,cAAc;gBACnB,IAAI,EAAE,CAAC,mBAAmB,EAAE,OAAO,EAAE,KAAK,CAAC;aAC5C,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,GAAG,CAAC;gBACjB,GAAG,EAAE,cAAc;gBACnB,IAAI,EAAE,CAAC,yBAAyB,EAAE,OAAO,EAAE,KAAK,CAAC;aAClD,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,aAAa,GAAG,IAAI,CAAC;QAClD,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,SAAS,CACb,eAAe,EAAE,EACjB,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EACjE,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,CAAC,eAAe,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACtD,OAAO;YACL,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,aAAa;YAC7B,QAAQ,EAAE,oBAAoB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;SACpE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE;gBACR,uCACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE;aACH;SACF,CAAC;IACJ,CAAC;AACH,CAAC,CAAC"}